Application of the accident consequence analysis in the emergency system design of an SI cycle hydrogen production plant