Proactively Control Privacy in Recommender Systems