Explainable Black-Box Attacks Against Model-based Authentication