given full access to a recognizer/classifier, construct training data that makes it unlearn a certain feature