On the Role of Randomization in Adversarially Robust Classification