How to Fight Document-Based Biometric Attacks