Swap faces between two images with optional anonymization