Improved techniques for deterministic l2 robustness