Benchmarking Robustness to Adversarial Image Obfuscations