Revisiting Adversarial Patches for Designing Camera-Agnostic Attacks against Person Detection