Killing it with Zero-Shot: Adversarially Robust Novelty Detection