Query Answering in Multi-Relational Databases Under Differential Privacy