Localizing Anomalies in Critical Infrastructure using Model-Based Drift Explanations