Penetralium: Privacy-preserving and memory-efficient neural network inference at the edge