Design IoT systems that are safe