Relevance of Separation Kernel Protection Profile for Avionics Systems Debated