Adversarial Reprogramming Revisited