Safety Performance of Neural Networks in the Presence of Covariate Shift