Privacy-preserving Non-negative Matrix Factorization with Outliers