On the Exploitability of Instruction Tuning