Black-Box Differential Privacy for Interactive ML