ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models