Three Tools for Practical Differential Privacy