Instance-optimality in differential privacy via approximate inverse sensitivity mechanisms