Privacy Amplification for Matrix Mechanisms