What is redundant brake shutoff?