You can't train in what the model knows