System design considerations for human-automation function allocation during lunar landing