Researchers can now made software copies of Google's "unclonable" Titan security keys - but not yet undetectably.