Stav dette: Certifiers make neural networks vulnerable to availability attacks