Issues Using DoDAF to Engineer Fault-Tolerant Systems of Systems