On Distributed Differential Privacy and Counting Distinct Elements