Design of Privacy-Preserving Dynamic Controllers