Erratum Concerning the Obfuscated Gradients Attack on Stochastic Activation Pruning