OpenAI: Transfer of adversarial robustness between perturbation types | SignalBreak | SignalBreak