Understanding Practical Membership Privacy of Deep Learning