gwern comments on Adversarial attacks and optimal control