Imported from https://github.com/google/unrestricted-adversarial-examples