The dynamics of tank-vehicle rollover and the implications for rollover-protection devices