Control transitions in highly automated driving