Managing Misuse, in Dual-Use Foundation AI Models