Bracing Medical AI Systems for Attacks