Protecting rotating machinery from damage caused by overspeed: an overview of API Standard 670 and sensor circuit ‘voting’ arrangements