Supplementary Materials for House of Cans: Covert Transmission of Internal Datasets via Capacity-A ware Neuron Steganography