Lethal Dose Conjecture on Data Poisoning