Per IEC 61508-2, what minimum Hardware Fault Tolerance is required for a Type B subsystem with SFF between 60% and 90% targeting SIL 3?