UnGANable: Defending Against GAN-based Face Manipulation