On the Role of Randomization in Adversarially Robust Classification Laurent Meunier 2 Benjamin Negrevergne