Computing Optimization-Based Prompt Injections Against Closed-Weights Models By Misusing a Fine-Tuning API