Distributed hypothesis testing under privacy constraints