Fail safely