Investigating the prompt leakage effect and black-box defenses for multi-turn LLM interactions