Adversarial Self-Defense for Cycle-Consistent GANs