Duet: An Expressive Higher-order Language and Linear Type System for Statically Enforcing Differential Privacy.