Efficient Certified Defenses Against Patch Attacks on Image Classifiers