Here’s how engineers plan to make driverless cars safe if autopilot fails