Distributed Hypothesis Testing With a Privacy Constraint