A survey of privacy-preserving model explanations: Privacy risks, attacks, and countermeasures