Clustering Adversarial Robust Models