Robust fine-tuning of zero-shot models