On adversarial training and the 1 Nearest Neighbor classifier