Driverless cars must exceed human safety