On Physical Adversarial Patches for Object Detection