How to identify a user’s second-degree connections while excluding first-degree ones