A unified view on differential privacy and robustness to adversarial examples