Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors