Jatmo: Prompt Injection Defense by Task-Specific Finetuning