Code Generation for Safety-Critical Systems – Open Questions and Possible Solutions