A First Look at Privacy Cloak Against Visual Place Recognition