Stratified Adversarial Robustness with Rejection