Safety integrity level (SIL) determination for a maritime fuel cell system as electric propulsion in accordance with IEC 61511 · Study