Advanced Probabilistic Couplings for Differential Privacy