Why is it the `BatchNorm2d ` layers in a frozen model trainable?