Universality of empirical risk minimization