On the Privacy of Peer-Assisted Distribution of Security Patches