Manipulating Transfer Learning for Property Inference