Programmatic backdoors: DNNs can use SGD to run arbitrary stateful computation - View it on GitHub