Adversarial images and attacks with Keras and TensorFlow