Similar Items: Fundamental Limits of Membership Inference Attacks on Machine Learning Models