Timely Flare Initiation during Automatic Landing – A Model Checking Application Example