the given task, and 2) prevent leakage of private-attribute information by developing a reinforcement learning environment which incorporates a private-attribute inference attacker and manipulates the initial given text embedding accordingly to fool the attacker.
after training, we use the encoder's output as the text representation v u (Cho et al., 2014).