Strengthening our defenses against distillation attacks