Decisions on life-cycle reliability of flood defence systems