Approximately Stable, School Optimal, and Student-Truthful Many-to-One Matchings (via Differential Privacy).