Origin of flaw-tolerance in nacre