Combining Bayesian Belief Networks and the Goal Structuring Notation to Support Architectural Reasoning About Safety