Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacy