Simulated Adversarial Testing of Face Recognition Models