Invariance-inducing regularization using worst-case transformations suffices to boost accuracy and spatial robustness