Revealing and Protecting Labels in Distributed Training