Rand study shows it's hard to gauge self-driving car safety