Some dangerous biology looks much like legitimate research, complicating AI safeguards.