Fractal Interview Question

How do you do target encoding without introducing leakage?