Adversarial Robustness of VAEs across Intersectional Subgroups