Will safety-security co-engineering pay off? A quality and cost perspective in two case studies