Does Differential Privacy Prevent Backdoor Attacks in Practice?