See: "How do we know it’s training data?" from the posted link.