no single points of failure