MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples