Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implications.