The self-supervised mesa-optimizer strikes again