Developing probabilistic safety performance margins for unknown and underappreciated risks