A simple trick to make data augmentations invertible is to only apply them with some probability. That way the original version of the images will be more common, and the data distribution can be infered. By properly choosing this probability, one can effectively regularize the discriminator without making the augmentations leaky.