Robots as AI Double Agents: Privacy in Motion Planning