The ad can be written so as to look innocuous to anyone other than the journalist and the leaker, if those two can agree on a format for doing so.