Linked Presentation: PatchGuard: A Provably Robust Defense against Adversarial Patches via Small Receptive Fields and Masking