What type of redundancy provides two additional units, modules, paths, or systems in addition to the MINIMUM required to satisfy the base requirement.