Xylem embolism spread is largely prevented by interconduit pit membranes until the majority of conduits are gas-filled