Planning reliability demonstration tests with limited expected risks