Encrypt, aggregate and decrypt at different places.
Aggregate usage records at the user side in a trustworthy manner.