Provable Defense Against Geometric Transformations