On the Trade-O ff Between User-Location Privacy and Queried-Location Privacy in Wireless Sensor Networks