Design of fault tolerant electronic engine controls