Generating Universal Adversarial Perturbations for Quantum Classifiers