Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observations.