Before revision:  This defense degrades imitation model BLEU and attack transfer rates at some cost in  BLEU and inference speed.
After revision:  This defense degrades the adversary's BLEU score and attack success rate at some cost in BLEU and inference speed.