Finding Biological Plausibility for Adversarially Robust Features via Metameric Tasks