Text this: Unknown presentation attack detection against rational attackers