Differential Privacy for Growing Databases