Shutdown probabilistic safety assessment—method and results