Training Adversarial yet Safe Agent to Characterize Safety Performance of Highly Automated Vehicles.