Label Differential Privacy via Aggregation