Obc failsafe

This is a *WIP* PR to track progress in bringing up failsafe behavior according to the OBC rules (and also improving general failsafe behavior)

includes #1205
I though a change for the parameters went in an it is possible to use a float/double to set this?
RIght @LorenzMeier ?