DoubleAgents: Fine-Tuning LLMs for Covert Malicious Tool Calls