Jacobian Regularization for Mitigating Universal Adversarial Perturbations