Privcount blinding and encryption: type fixes