Immunization against harmful fine-tuning attacks