This story has moved to /story/differential-privacy-of-gaussian-process-posterior-sampling/.