OpenAI lays out new security changes after its AI hacked Hugging Face