On the (Limited) Generalization of MasterFace Attacks and Its Relation to the Capacity of Face Representations
(2022).