How should cargo tank hatches be protected when the ullage opening is open and the tank NOT gas free?