Managing re-identification risks while providing access to the All of Us research program