Gravar-mail: The Swiss cheese model of safety incidents: are there holes in the metaphor?