Statistics for Walking Onions: Scaling Distribution of Information Safely in Anonymity Networks