functional safety over ethercat