The Space of Transferable Adversarial Examples