Usable Differential Privacy: A Case Study with PSI