Membership Inference Attacks Against Self-supervised Speech Models