option 1: Increasing the noise variance improves privacy but degrades convergence