Anode recirculation behavior of a solid oxide fuel cell system: A safety analysis and a performance optimization