with redundant control systems