Enabling Inference Privacy with Adaptive Noise Injection