Capacity sizing under parameter uncertainty: Safety staffing principles revisited