The maritime pilot at work: Evaluation and use of a time-to-boundary model of mental workload in human-machine systems