Permute-and-Flip: An optimally stable and watermarkable decoder for LLMs [2402.05864]