Supplementary Material for Certified Defense to Image Transformations via Randomized Smoothing A Proof of Theorem 3.2