Projected Federated Averaging with Heterogeneous Differential Privacy