Email (record): Private and Pareto Efficient Public Transfers