"While previous efforts, such as CV Dazzle, adversarial patches, and Juggalo makeup, relied on bold ... facial recognition can be achieved through subtle darkening of high-density key-point ...