Privacy Preserving Inference with Convolutional Neural Network Ensemble