autonomous vehicle safety limitations