Inference Privacy: Properties and Mechanisms