Combining Machine Learning Defenses without Conflicts