What is the guiding rule for limiting pressure surge on loading or discharging