Harringtonand Deza. Finding Biological Plausibility for Adversarially Robust Features via Metameric Tasks. 4 Feb. 2022.