Robust Learning against Relational Adversaries