Neural Text Sanitization with Explicit Measures of Privacy Risk