Researchers build an encrypted routing layer for private AI inference