Privately releasing conjunctions and the statistical query barrier