Don’t Let SaaS Train on Your Private Tokens