Universal Soldier: Using Universal Adversarial Perturbations for Detecting Backdoor Attacks