Automated Adversarial Discovery for Safety Classifiers