Under 49 CFR Part 238, what structural principle must be maintained to protect passengers during a collision?