Minimizing Disclosure of Private Information in Credential-based Interactions: A Graph-based Approach