Relating Adversarially Robust Generalization to Flat Minima