Bounding Membership Inference