Controlling Privacy Loss in Sampling Schemes: an Analysis of Stratified and Cluster Sampling