Aggregation and Privacy in Multi-Relational Databases