Privacy Preserving Properties of Vision Classifiers