Defense against facial generation