Running Privacy-Preserving Inferences on Hugging Face Endpoints