Imported from https://github.com/hendrycks/natural-adv-examples