Surface passivation limited UO2 oxidative dissolution in the presence of FeS.