Differentially private facial obfuscation via generative adversarial networks