Optimizing linear counting queries under differential privacy