Rate-Distortion Theory for Secrecy Systems