Algorithms that Approximate Data Removal: New Results and Limitations