Secrecy and Performance Models for Query Processing on Outsourced Graph Data