HETAL: Efficient Privacy-preserving Transfer Learning with Homomorphic Encryption