Adversarial Training with Voronoi Constraints