Statistics for Lox: Protecting the Social Graph in Bridge Distribution