Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation