Privacy-Preserving DNN Model Authorization against Model Theft and Feature Leakage.