QNX: When an OS Really, Really Has to Work