Why is the steam generator equipped with two safety valves