Differentially Private Learning Needs Better Features (or Much More Data)