A model of trust in the work of an air traffic controller