0fe6a94848e5c68a54010b61b3e94b0e-Supplemental.pdf

In Appendix C, we show that our results also hold for input gradients taken w.r.t. the loss 35th Conference on Neural Information Processing Systems (NeurIPS 2021).