Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training