Safety in Avionics: Are Two HUDs Better Than One?