Spectrum-Aware Bounds on Invertibility for Privacy-Enhancing Instance Encoding