Protecting DNNs from Theft using an Ensemble of Diverse Models