Or have two error alarm levels where the first does the above and if it still keeps going and reaches the second alarm threshold pitch it down.