This should be similar to the model used in analytics, see https://github.com/opendp/tumult-analytics/issues/21