Membership Inference Attacks and Defenses in Neural Network Pruning