Employers must pay for most required protective gear, OSHA rules