Cryptographic Credentials with Privacy-preserving Biometric Bindings