Do Counterfactual Examples Complicate Adversarial Training?