Your question doesn't really make any sense, in fact it is meaningless- not unlike asking how long is a piece of string.
You need to fully describe the application if you want meaningfull input.
At the moment the only answer to your question is - "sufficient to overcome failure in operation".
It is a capital mistake to theorise before one has data. Insensibly one begins to twist facts to suit theories, instead of theories to suit facts. (Sherlock Holmes - A Scandal in Bohemia.)