Bounding the Invertibility of Privacy-Preserving Instance Encoding Using Fisher Information