On the scheduling of fault-tolerant mixed-criticality systems