Supplementary Materials for " Privacy of Noisy Stochastic Gradient Descent: More Iterations without More Privacy Loss "