Answering n{2+o(1)} counting queries with differential privacy is hard