Personal Attribute Leakage in Federated Speech Models