Plinius: Secure and Persistent Machine Learning Model Training