That’s an interesting question, I had never really considered….

There’s probably no definitle 100% safe way, but one possibility might be to exploit some quick of human perception (kind of like what optional illusions do), but of course there’s no guarantees that a sufficiently advanced future AI won’t be able to read it (on enslave humans to translate it).