Fractal interview question

How do you do target encoding without introducing leakage?