ModelFence: know what your AI can access