Privacy Preserving Multi-Agent Planning with Provable Guarantees