Adversarial Face Obfuscation: Effectiveness and Fairness Properties Kassem Fawaz University of Wisconsin–Madison