Banded square root matrix factorization for differentially private model training