Differential Privacy via Distributionally Robust Optimization