How to stay within the failure model More than one VDisk in the same storage group have failed without going beyond the failure model