RAG vs fine-tuning for private data