A Security Architecture for Fault-Tolerant Systems
