Reasoning about Privacy Properties of Architectures Supporting Group Authentication and Application to Biometric Systems