Optimizing opt-out consent for record linkage