Splitting the Difference on Adversarial Training