Patient-Driven Privacy Control through Generalized Distillation