NATURAL CONVECTION IN INHERENTLY SAFE PASSIVE EMERGENCY SYSTEMS