Robust fine-tuning of zero-shot models — arXiv2