No Intruder, no Validity: Evaluation Criteria for Privacy-Preserving Text Anonymization