A false sense of privacy: Towards a reliable evaluation methodology for the anonymization of biometric data