Human-Producible Adversarial Examples