Robustness without Adversarial Examples