Do Membership Inference Attacks Work on Large Language Models?