Improved techniques for deterministic l 2 robustness