Text this: Deep learning model inversion attacks and defenses