Limits of Private Learning with Access to Public Data