Lessons Learned: Defending Against Property Inference Attacks