Review for NeurIPS paper: MetaPoison: Practical General-purpose Clean-label Data Poisoning