Securing AI systems against data exfiltration