If a single controller enters a fault state, should we not estop the remaining controllers?