Under which circumstances must a self-insured plan hold employee health insurance contributions in a seperate trust account?