Controlled Query Evaluation in Description Logics Through Instance Indistinguishability