Manipulating hidden-Markov-model inferences by corrupting batch data