On Saliency Maps and Adversarial Robustness