What is the four-eyes principle?