Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses