All control circuits that affect the safe operation of a highway-rail grade crossing warning system shall operate on the fail-safe principle.