Privacy- and Utility-Preserving Textual Analysis via Calibrated Multivariate Perturbations