Privacy-preserving distributed clustering