AI developers are unable to safely control powerful models during testing