Bayesian Safety Validation for Black-Box Systems