Backdoor defense, learnability and obfuscation