Unintended Memorization and Timing Attacks in Named Entity Recognition Models