I just inked an adversarial CV tattoo onto my face, worked great until that image leaked into the training data.