Protecting Global Properties of Datasets with Distribution Privacy Mechanisms