bea fuel starvation fault tree analysis