The Price of Selection in Differential Privacy