On the vulnerability of face verification systems to hill-climbing attacks