Learning When to Use Adaptive Adversarial Image Perturbations against Autonomous Vehicles