Before revision:   The protocol is strategyproof for both MA and MP in the sense that they cannot benefit from strategic behavior .
After revision:  We also present a differentially private version of the protocol that is suitable for the large query regime. The protocol is strategyproof for both MA and MP in the sense that they cannot benefit from strategic behavior .