Make Identity Indistinguishable: Utility-Preserving Face Dataset Publication with Provable Privacy Guarantees | Synapse