ShadowAuth: Backward-Compatible Automatic CAN Authentication for Legacy ECUs