Where automatic restart does not present a hazard after a power failure, according to 46 CFR, Subchapter J (Electrical Engineering), it is required that motor controllers for auxiliaries vital to the propulsion equipment to be provided with what type of protection?