Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection.