Secure and reversible face anonymization with diffusion models