One malicious server and colluding clients still don't break this two-server histogram protocol, thanks to DPFs and VOLE checks.