Analysis of secondary oxide-scale failure at entry into the roll gap