Are aligned neural networks adversarially aligned?