PRO-Face S: Privacy-preserving Reversible Obfuscation of Face Images via Secure Flow