Data Provenance via Differential Auditing