Fault Tree Analysis Limitations