How Does Data Augmentation Affect Privacy in Machine Learning?