Provable Certificates for Adversarial Examples: Fitting a Ball in the Union of Polytopes