Secrecy and performance models for query processing on outsourced graph data