Intriguing properties of generative classifiers