Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks