redundant BMS safety circuits