What is the purpose of gradient masking in adversarial defense?

Question $32$ options:

To hide the gradients from attackers

To improve model accuracy

To reduce computational costs

To simplify the model