White-box vs Black-box: Bayes Optimal Strategies for Membership Inference