On the complexity of privacy-preserving complex event processing