From 51d033e6404e9333253489be8e5d0962bdb6d414 Mon Sep 17 00:00:00 2001 From: Misty Stanley-Jones Date: Mon, 20 Feb 2017 17:08:45 -0800 Subject: [PATCH] Expand the docs for configuring UCP and DTR for content trust --- _data/toc.yaml | 14 +- datacenter/images/dtr_repo_find_gun.png | Bin 0 -> 43407 bytes datacenter/images/signed_image_in_dtr.png | Bin 0 -> 66920 bytes .../images/ucp_content_trust_detail.png | Bin 0 -> 23970 bytes .../images/ucp_content_trust_settings.png | Bin 0 -> 57100 bytes .../configure/content-trust/admin_tasks.md | 387 ++++++++++++++++++ .../content-trust/client_configuration.md | 255 ++++++++++++ .../admin/configure/content-trust/index.md | 61 +++ .../only-allow-running-signed-images.md | 178 -------- .../store-logs-in-an-external-system.md | 2 +- 10 files changed, 714 insertions(+), 183 deletions(-) create mode 100644 datacenter/images/dtr_repo_find_gun.png create mode 100644 datacenter/images/signed_image_in_dtr.png create mode 100644 datacenter/images/ucp_content_trust_detail.png create mode 100644 datacenter/images/ucp_content_trust_settings.png create mode 100644 datacenter/ucp/2.1/guides/admin/configure/content-trust/admin_tasks.md create mode 100644 datacenter/ucp/2.1/guides/admin/configure/content-trust/client_configuration.md create mode 100644 datacenter/ucp/2.1/guides/admin/configure/content-trust/index.md delete mode 100644 datacenter/ucp/2.1/guides/admin/configure/only-allow-running-signed-images.md diff --git a/_data/toc.yaml b/_data/toc.yaml index f85f8799f5..b37d0bb743 100644 --- a/_data/toc.yaml +++ b/_data/toc.yaml @@ -1202,12 +1202,18 @@ manuals: title: Restrict services to worker nodes - path: /datacenter/ucp/2.1/guides/admin/configure/use-domain-names-to-access-services/ title: Use domain names to access services - - path: /datacenter/ucp/2.1/guides/admin/configure/only-allow-running-signed-images/ - title: Only allow running signed images - - path: /datacenter/ucp/2.1/guides/admin/configure/use-trusted-images-for-ci/ - title: Use trusted images for continuous integration - path: /datacenter/ucp/2.1/guides/admin/configure/external-auth/ title: Integrate with LDAP + - sectiontitle: Content trust + section: + - path: /datacenter/ucp/2.1/guides/admin/configure/content-trust/ + title: Only allow running signed images + - path: /datacenter/ucp/2.1/guides/admin/configure/content-trust/admin_tasks/ + title: Configure the UCP and DTR servers for content trust + - path: /datacenter/ucp/2.1/guides/admin/configure/content-trust/client_configuration/ + title: Configure the Docker client to sign images + - path: /datacenter/ucp/2.1/guides/admin/configure/use-trusted-images-for-ci/ + title: Use trusted images for continuous integration - sectiontitle: Manage users section: - path: /datacenter/ucp/2.1/guides/admin/manage-users/ diff --git a/datacenter/images/dtr_repo_find_gun.png b/datacenter/images/dtr_repo_find_gun.png new file mode 100644 index 0000000000000000000000000000000000000000..dd1c66516f3b48a843013bb34eb755d634909c12 GIT binary patch literal 43407 zcmeFZcQl*-|38dUEmc}YOItdqty-g~RaI?KT6=^Vv17-It*9!hR_#@r*g;~}-g`!j zqGrTQ5adqZeXsBL)BC>v{GIbVpPZAN@DF2Aw|ma?9AA5N1rppVD2n3q z2zS5kIxEI_FSzu_mpchQv8hcLlT8Nm--a}>wa%)1XKjzQ*M}=~TyNi%oODWxxymfq z9)E045PPL^aXUG6ful3DrRj6Rf_%zn;q2`G@wTO&2A(^DBar%_=Px8{AGy-LFredz z7wEB%aidZrTV7Y${=7K+Q0{KOSsLra^?MGUWXoP;?D#X&ew15s0vzYa85_@jIm1Io zF7s?UVbzYgy67^LVVnN)!!NvhBQ1iHWYCaH!{2(Q&-$)De1vCeK&Oi7(FNR3r4J{0 zTXj|0HnqPfmo)7XAR>Cl^A%H(76*+lRv)SzEtc4G%OQp|f>$XcKOmwxY>WMX!;|)=uVEwoIhl@gXI?9OyrkDcb6zGR((UOxo2NUUZhyUyC#U=A z;^M^zzO_%KjO?#62Zac>J$hR!XmpjIgQonFnlD$Ax)HNroS^IdfG-X`qPz?RAB9_{ zOeQCu+mN{ki%{ylD{2&ZTl^Md6kLjNcy#?tPH1_P`$C5Oi)wH++4L=aNhrg37|S>1 zxotQ3+FLW1Sbdl09&U*poH?kJ1{ys`rweLyE>owJ0q{We0dvmiy><5xz_WD=XRZ@WoIYD zuRr|}B^njld9QQ4BVbYGir5Fz*08dVx3f3W)ZgfG;kfMb)blTn1~M!6rfsHasv+}K za#^!1-f+CJ;Yu0d$a|CbEbnHX*3eT+kY(&1)hh4m?bYF-sw~4UI-s-ZwCSSy1H6XRAwP|s8c-Q=r^Wx)0H^)iGB}cTQoY1@M7fzWDmPm_s3oVOg z=j(vDzU+I0yQ}wBlJ^|k#SZ0n=69?Y6_@(EY46hoT@2`bZnR;VWW4u4Nw)(9Ow+V0Un_K1ONJP-;;2`t zZ!kJC{os3Cx#jnu&?fDAVeP9L{lnOucOUXU#C=d*@_mWuQq%~_54HNdW-v;fZ(=1R zd{4N3%AhjTsy}{5iSc2ePET#mbuBGToF-ENs|H3rb!1@l-0(#H>*8(gsIQg<*NSVj z%9Wk;6_u?+#ypC2izug_g7nZ&(I-q4s^*SJ^8z~#=?VAj>w`$_vl zdtG~*YYTgz{iuD~Ro82cXEo1;oXt90MPnpqEmuE(tJ(HWVPtY-V{T7w{}7Jge@Pq1M`8*AULw3c`q?OM(4w%V0rKl#~)HZ^m_GrX0@+s+w;BT+thu- zC&?$OBcfMtU|P*-J2)?YqA66su8Ay~Dy-Km;FuGM~<2i^mN-83mEsoAi?R!4;OpH1zqzcNcVdwDj;`>glvhFJEk z%c<;;*vC8LSf&F}3SSbJ#uVRnKe(TzUjzBPKUu)bfE0>E%3|8hbLoMF7xK=#v#v42 zAMP1_G5GSRkWXLSQ^yT_5PS~z{@Z)M=ffQ|k)oN=83(U>2M<=ZRz9qRWZhK6@!c>m ztK>D;!8oFptYZxg(<^QRTMuJ~c*J;A+TWVoHnuXZwws<0$$A ztKvi%m#=DF6}^nPYIs#TVeU)GJtN*hu~N=$_SrDQZ$8P3$R)*ItKw|s_VL9_NLV`zWeJhp%D zn!8-mJrBRbt*{f}c^XMDA-pcm3Z6cmt-{T zN0+P;*VdSq5|S(Ji>h5V4$2k)_oh{Z#;=XvC^8>eP9?wBdM}l5eb))YHLC{70jZ29 z4@xFxUKPLhOXZOi@bO-z7z*5=R%0sX ze^o)HXK3)UT4)4ThBktj;!)kQaT3J`1~o3DyH*g&f`#wG?bgdsq@gsV8T)Klc|9?# zs?b*W*lOQeE(dJB07^vm0$c!ms8EE!-Xokoe8GEp4S+=@;*K$3T+lui$G6V1vb-NL zqf$dSlKm0T8Jx&!#JVII>#o1|^zg-`-BH6Rtu}2Et21luzR==o^R3N+(Ai-h!h@uf zk4J?TPeETjMvV8SzbtEy?`HJ}8=f;%s_!|J!$t%Y?-?W?4lniVEkrIf7t0st%v`C} z@YFlB9YnxF8bj`3)Miz@JMg&&rE5{>obdijsR|rgK21Jcr}>1+r9@1Xf?A%M+LQ42 z4~MDPEE>1BNow=ReVHjpil|9GkJv;!zGDF^PQA62>IREQi4-QuWjKet;496%#JQf9 zSwT(WXYmeBGBNb#GC|d&HmkLespdRL`9pU0Oh(-;16JQ+FEzC&Wi>TJo&jT4l7S;{ zm}qM3g((6e$-HLj5WH?Pd*M{xhg1YlK~6dOZJ%hsp0|Il<3vKj$o}(9`r^&qEfNwk z3QKiuXKiIAaT7Zbzmch(F_7O4WKX=CgygZCIPoh8=xoI12C}hr5_gll{l^{R#P2_w z1#Ywbaf`FH<0Mt+SCEpRLoKUxWNL&QqY1iKC^xv!$Ia z+s|>0jP1bAlDBXFoapb@uXO_5EdQCw*6Gh}5jQCC^NN5V|9yeqb#t~f`+w>7^UAMo zf9&hmbdP@yCa!Af2DH&30zA;xiMTW=5uy8!|Cr`KuKcsmfA!SCH>@c-!guS@^x z`g1AbDvp*w;wk++3n{_J0{_wW=lzcbeje1n4(=CK{%9qVMT+XNz~3a6qEgVX-XI~7 zA$jpsR^5$s14WUfKYB>mzL&Dm78Qm-MAGqAOI+bmrHYOf-#@j$+bJrd>aqr&=uJPd z_a~3I?CLscx?oG#l|-0h`!;$CyYHqBkGq&bQ}Ff6{PE_gPOpkGp;sw>dM+gY@$ukQ znoHa07pgnHBxL8<{`ZG36I-={+;6(k$*{>$oZAGhgk?_sXE)+dbkmtM|1sRpDL$o> zk>eihwY>)Yc0K1d2haX)opc?lr2dd=9t*i5zgZ^uFE=g0}g*pdymjBrM z&w2bI6~ApKf1vI=XAm^=C_n6X2Sd^%IrZCivTNKj_5yNt*GHfI=V8;y_|Dw~{jQzF z?*ao`bzHh=xYchdA!8pQ^1q4m$NVxuRCLqb11t)amwrbkBKcT;*ZyDf{g-^d;fw!D z-+!g=-|F?h%JVlu^8br{BVLdl=PSQOF&VZq6dlvujfu}qz`1{bj9Y8Yj#kg*3p zs#|*fq25>M8VDbx#){mVKS*CvcuK^V@LPVF3K3If8rJAUX?%II*UovD)yW98b!VSsB`%Y~Pu9!h3&->4yzWTXiB!UFbe#mdPsWE@ki-US zgp|2q!@@#H;?A{y+-W}(&9rX;khM2g`B+(}+q~_~n5<(o1mItA=h)~jO_VLCp&lB= zNQy($Z1Pgr{UL%EXMUO?^5i2FIJ_Yoehi-29d3~^9Wwddn*Y&&) zisdsz%xFR<-!flsfaGAu>J%v@fGu;EUD3%>u91A&@F7hoa_-@I;Tna4AIe3B{ZJ9J zk^9}2laG_io)#xKFKjc-mSj={>=sBZr@9zNdI{^aAk@qz-i))mPv(Q`Pf_|Okm_y9 zehE;taBiyS=Sx6QeuMfct5GO0wf@v`_)8#U`tB8h`ontV#PR{>)6HZgvP#OyDbk5U zk1jk1oLas1q}ys_V9d6o^2NjDsbhAY<9BBy;m#HHlJE(!oR1YA;3z`*?&SCkOgVA) z9?P|%;<)6;#;Rq*lm0*+G&*GX1b(!?J_#Dv|Lly&*VZ0`G+3dYC5k}&>>veWwp(U! zJ4fb+Ru(TaZy;QdnG0=rMHa!_;xOi+*^!GQ;mcy{tvs4~*5flr&KR2q8{?VQA8(1; zB`PNi&;H=o*+fDL7<&ty@FFg&lR3J`F+LNd{A|l6h;J8^<$|87r#`--g*)7QB;kTC zok5A?caw!|(tzem=41Hu}K~#!jWsNhiHDMoHkH`kIh$7qg z++nV>q+0EaWBfTW$et3->d^&CRO1={AvdicRH`Bg{lHKThJw5OOjpK^Ad@dJ6PSNg7 zV0!F1*z0}VjF19S@v<|zb6vgqGJh@wdXlF#vy+&&4hECsx;!uu*Tsw@8n%K?%s0AS zRtDzn^G?AZsB7~cpFW|)H}rddQ@Omr^z>8()!$rMjI5YELXhm>ydkNy8S*0KRri!} zpiQLf%*L7g9m1yFsS!dyji>Z6?g)X6K|*n|RW0B_2xK!aQwiH}x_rlF#oh=dm#DUd zjhj97r{yNBrP8)fX+O$_LEOIuV?W~$x5uSSbZA)KX_St~KqUzq7(!_l&v;vGplE1p z@s3@p#~~kLu}5tKiiA=Z7#DYIF~P!;GvegHjzi}J z4?&iY1wC^;D}^5`bl`D^!DvD)<>fDNy`UV4E#qgld<^a2^A%Q5sU zOY|*pKPv%9D~+>q9-n{!tGs?lNDEw^P`vOV=B^^wb!UR#87WnI;@t=M)+#AGz69a( zi3j6ip|O)p-dl;<_o0#0pL4r+22SgY6Ntz=Oi;a=^Pzf4fN3 zn|iN!C-sdO%ID)s)#IoAPRgYkTRBai@fn%~Wi0j=_8C4Pgh; zE;x9tg*>*#r2t=0*ys$5rHKqfYQJd?ceOg06n3!9KIE9oj>J2U)Eots3vmRnO3R%IGUm|PuStihYbM$LyCjXzPWAAy+ zd3{34C7tSi9*=Q_UZE6WIbO>cnX5Q2D&>`l2`>mtNLz3vc=TM6QF~po#ycKXB9}OJ z>U7XRc)VL?S=gWoty$qk9484vk#7|x?6=bTYaw=Byoi;LQOz8dhB2-C&C-wQB#O!I zHymJ>L!IN)-!2prAZ@8~l-C7Iicu#uDlKGuUB~!VFTz70hm{@$=yWfjIIHLSaTfJh z#|zR>o<0ebtC;$y=K$;OH_@YC*}6ofy^7Yck6M5Zqr0*r_*AzU1BmNq>93njiu6+V zfiz~uT-TDmZ_uRVtiNhR;H{CRW+vP}+pWw#Zsc&TKgKaiG_JKJVj` z-1S2(J4Dl!t7<`$MEeRhE4B5dfgq(;!uE*+lL)PDq|h%v*=F@zV^>SllSltps*b@fv@Q)9ZbIq8NASYT40EhyEW~=E=2+^pz2=OCSw8JDaUx9YR-<^o1F~FHZWF z?TAuR!7E+jqGrQ;AE@Rf$+q_M(ozL=N5n8%q1^j!HexS|TlOYJ@v7R1($*M<_cH^C^|QTE5C=df#2Tu^*P83jX&k|wl%PKmJb^bBO` z)xsqM`>B-)ek$G|{)5uM^L9cU^Qcq=JLAOgT9X%~ZB*W5Cs4+4!Yj#1%U2*8(%_QQ zAPv7MxxieY+JtLK^O;Eb3t$zA2@r6nlfj>Pn%w(-NwJ5MV)MRMK;tvj}O$TOoB1hA%g18k13vAx$r`B zCRLmVrcHnKt_x)JB{<;v3Vb!F?3*&ZQ;YfAVL?*E9xV1Fmj0boZ5MV-0HN*MIW3ombKwq`+ z(?=lMtr}c1Rnz$+KlJ}pZmL{lNS8L1PmyW^3@Z23g2KI@TuY)OIp4jXFSzmKwOKOR z!>+N{A!o@vs^e`K2DlYFZAUs%d=?}j+eOE`G87CxTT94=zGS!Q%0x$#Q0yksygy7u z%0OFaofGg((>ks$cO&})H`Ob4YLV5069_m=BFtZcfkFMFggv`A=X#wXqI9dCD_11V z)ku}E6drK2S8?9<$pwa9@gyi`No--o^Q*MQiouKJ-Os9c_^Dq#9OVetVd_Io1I@Xq z)#WFPJ70dEh-^((F=4Uo=-n+};x2zxPNsmY?7Kt*zb9divF!|4ji`mL@}>GS$|&PbF=qR*zwtb&*bPxZ)z7v= z=P2qjfaoCQz^1wmF-KjY2wTm3oFeL~aesAb`xDEt3WuQ!=_Llm>vxvDeWq-NRUCl3 zutgMWrJ?b7`}c5->7$mk7tZ+mk#Zd#)79)g$CWE0!Y3#2_db@JUKMCzSDcu*-?Q(+ zRkk`4SRrU8nMz)pjM9ZKfhMCaq%Eq^MzK~1UEAa8&#~(51E&eM#G*BOsn=O!S2bjN zzkh%?H7s$|TwV7cOUJuA;J@k?vpJRZXo3Wy)a6YyY^Q34VQ}z=^}(}ziR~)fmysc& zzgR#$ikN$}@?Wm_iz6J!2IoTI)j_g*;2=PxV8x!8czLdrf})q`rKc4e;ilLP=ZC97 zL%FYyHxiB9Ul`={cCwlX*dSWNWV6rnd+&{^+@pENxmD`wbL!?dr9hhTnOte@>v>a) zkM$pT`T0MW9N$zwY=M67dauYZ zJzO2y8uJ+z^*wy}Zoz@m>ec=A7_@cZ15=+xvs_Kl163i$^frnSr|S<)4SjrGYA0hg z=$oS#51&7NUq-rL82Gu%V4Wpy;O_O%KUD^|UYZSo0lJ~<;Q3c_H|-tS8jR`W`)r=q ztLZp=EOh;Cg^dH?L@54g+2==%-p+HL=!bTlR1Jw_j!RtPV?gs%s|00DdB3n61MhBV z-NDA~;L*G1x;RJNz}yKXa^;?5U&}xc&#Dy*RJ0!>$HT!Li#cI9zyU*#QFcITEgli~ z8QV*R@MF{>SR@X8y<2n{{^?n9&VhdQ%Gi>pVdp)_;^DS~U){QZSUc27`c`hvR5$<8 z$DD?YG7ati_y?yWeA+n>lkO}G99rF*0g!M- zY?G_SO!EZ-IMhIDI^9GqC~N@W?4qJ3ohsoyV!okO>XkU=01|Y6h9SLqXVCeJ*K+;ME~(GJr>WCCRk?R zZk{1|`hC4Lbl~09uJ@sgV593(#acFlL=)#@or>pf7cy{NNW@SGlIw){Mv};(ePFTq ztp%mHS7RO*UMko`gk=Us4h7Y!Mxs;HRNX24ja1lAffMs8KHfR8q+Z-01}p-ZANrc( zy^nfPy0pg4Oyg!LpQstQz?7XpZkoCtd)%Z@ZqlB&CJL;>-8s8odS9Y!Eh!&u`S{!T zEYF4u^VCxfLvwJF0CV9hVZFU$_U?kOR)cR(kx}Lo>2kqQDY)iUr_cQ6w|?zvlwHQY z7``Yb@ayNfXk8gn$zGT^aLg0GR_9YPJ59(XQw1;fS_}GmO@%4N;mw9V)e}kl z6tc8`KFo~Ui-<8>gSItm8558?v6B{~*x|DKbo+4xDYW@;7_!4lmFXL;H1}kjPgpay zPGE+a#SRqJ{R+S2MVknHs5=4>{TNl%3_gF1J`>Su#ua9pgX^M8WbO=lsc)#0%4!ez zm|1>#{c$-XZ>iQS*M-ew*Qwmw3msq!y)QS!%m*JN8V>A>ji~t*<8MNs9TOo&UK+Kr z`!m+p>&jnA-O_9=g`(Kc%7Tjt+Y=MonyDP`s#iZy8{@C9+hs&eD8&mGcPw!SY&PW> za+lRUV0=orpSD>;`}oi^(){&g<)8@Q+Wy>^U#cov(^nAplBW&(m*&bMqxxHgf#G7M5^H{<2@wIsz#;&~KBpKp?@0*%xf+W@ zZdUt^q4eY%QjQZa8`Qkn*%{L)v%ZJQ+1ov{-i*iw?wKAy?eymHrhw=8OW-n}VO`%$ zqBxIBgEOsN^ia4)(}{S#g1CN8s8yV{^spnpbGOhBUwma^ z69vy}%qcbnn`XT@Z>FXUGt`OWx?|UxK*RsMa>~GSJ>YimYu9N3pB>%x0T?(E>;-o% z4efs{22165eht?KaX@k*)_;ck>akJMN7fN~I`XW<&<0q*dnZi7Yv3hL3HJ)bp@R^c zC5AAH>nc7#bIp=|z^wTlWar|uL$uUKPQ**8vF3KQU6sZA^(@}N@uQ!CoLPLYS2h&K z9nx^mSsHWLb;G5fmDN7V?n+-8U~>Qa!7tAKN}r}@D}H0_)~_J0OxPt=-&~^kE%k6C zpSrI^phl?<@8ePBbrjScO0%(gTgZDxpnjhMf848uP(p|}jAs?z532&>h2y4JPiM70 zpG~g_fFX7lw5IIpciGkGR8jo&inBKloAO(hTD?xYK;wFN{}&QhNZ_JI$CAl4aB@M5U=ODu`xJ=VNPf@$GTZT&-DeTphym6TkSY^s@bEio*g#g9TF!i9x>O zc+q&gw~(G?#fo;<_oHFjhRrj{bwncs3LU~N)!>*FH;bi@f&i}DVw=q63u{Fmg^IKq zR}xceI++>hzlI|ZuO6f|qA>vE>o)z06?e>h8H zC5rM~uH`}tDwdxR19PCT^$!IkuXnSrawHJ=M zs_i1X)@TuA8T;Z)S}9Fb?Vxv8!ce8NeRAUn;;4@z5x))^iR98 zYa(LxhJoVID4!l_{TeU4-J?EQd8$s0a$GnLubzwxaQdSPx9IlNif`f3hf0b&rq_qoYs zjy`7n>BI2g{jO(WF7m~j)?<>dgu~6j<6*nMs!iw^=K57$)6D#~_T-c7&w9BPv)3Ab znN4H;;DxdH{r$oUf+tcSlaKgi&vSFXKcRAsY|P%)<^0)1j2fs%5Dn-x2LZ>iKt1flI|gJZuS(V2 zo^9`N5&t+GUTLip!AJw@P6;So*s~nv#7Z6g*xc^s6D>m(^RF23F%MN_JgZgslin$(+>Lpb53mwWgi&u67412Q?AVW`8f$KuzyPNZwA(iL!wmLTw*9R!mH?2b$g@9Agf)X1^_bfKYvB9FQ^CX5S{v|99=4AvlESRd!ou~kX~*F}X&={^BGl_IAT857 zjK9P~RhcXiwm8{x%?UI*MdPxvHE)$qk@H8&!R3eM*|DSj-;Ipi8&B`fb59igE#Fr*?l6F#XM+R%}u!H?k)X_{Z3zJZT>#PXf$jFqQ}NXJ*B9A+55uEG5`mSa~q=-5^`SuXaH`#xw)nQm@DQci)3|! zw8lY|gTpd=wN{eq*&@skuN15ZM>!*TEL|Cf)tzgsO6yL5wOgA)e$#cj5 zu=Xgs{fer0f6tcP!uK^<`{GCG7j$Pc<>f;A^a^a@gv83y4u)g99~?;4ka!5SDE%W| z|30$+XzQ!D1(=;$hGH<}Y1=)DX*A5Kssm_se@M%l?q`htPFD>jrP1Fv9uv zH!g<#u{0n{gX0ajk(Z?*1i>~_0Y(@jl=aJ-p%CL>!tt^48T8jzfutQ1&uV|!3;zSX z=s2rLxHOhH3Uw$~h~m-ks3CZ?;08L4#jrg!1&M-g&Wd{*iAj0wFTRS^h{#sI_{8O3 z9RAl(U3X=kW-HkULvoNoRh2n*SKnrei4>WH+N(TfQ__iHEmgob} zQ+{G&d6s7i4DU&oOnjBSflJ}gOrN-Z;cv$NYhb$f=LYyh{a+{B`M4UX46Dd9gtg*^ zdIOXmF7Qv5jl+fQEW&P2f@j5x%2)3J+;@&hS2f#<)Y|3@1<*@zd5T-IqKbCsc3MFl zl>bR!5qB1jz7T%TVnoyf7;tt)xp4-sKdbIrH?*;q?xC;e$;Bm}hckpf0&^rJ%bk$S;(i0J~J4L1#UHh+jl zUT@9s_SD5|f3RhQKZ+n&Az>KaUBNeKHyo24Ed7i}mM*{~j()nJv?}PspANzQK(410 zv4z@tcT2|8yd|v%3tu>w8_!};K8-NU1Va^SB%b=*W^2gSKML|+uA&%777mQOn1wi~IunWN9-z;kfG^v+&`js_1X{g_L~gCp*$yEcnlD z`R!2I%vKDQB~+Gr&@ji~R5wze&YdcxROJ{ZeKJ*ElV6Kv>77!n1NIuq*%$wqy<_$M zf9&k1p1;Oj;xKtZ@4*t#dN4hX=Bg7Y$Uwdqiak9;36irl=!KfHkA=?}uzz>7_;Yo+ zlVm(v#ibh7V^f2fhx;}IY4yqXZQhR-spXhy)uy>5?(W#kf6v-1?mIN;7vjzJNxqQh z^NdZ)fgQJjvUd6*P~nBgwkOwU@|D-uL39(xiWXvX@b)cXFNDlb{ci_^Tc=(`PiYt5 zL=B@2K{yQ#P1L@UP zRhFnOxGVZ{RbjTb+gc41s5O7oVYIu`5`;oHhwHTk_gr$rpM+qscvg<0t*L#Mji7?! z=WzbXZ|vQg6L(a?lwn;7B9=C@hf{G;(1OjtbtV-j!*{dc1<%Sw0H6UK(Kfz?Gh`a< z_6Gx`i4W&rOC*@m`HZH&CU4aby3@$U@7LI1Man_ zF>Xop3Kzs-$T z`Q{JB!8Ueh@cWg?2$$BjD^rz_D$s0c`A9qWJQt5?dF%}cGQ76{J>cgBvm4ixsP-xD zhVq?GY4s(%MFLzjQU~L7n%nrezw%!vCp|xsr#Cybf87XCWozHxXEb{=;<}Ut#MP#g zl3N!4bmtL+J;((8t@HG|6Z~S?QCPzD96I5JGKmTh`oUZj0cUi$w!hgBfw1WwLt__a zB~51$>x}DDd4S$rxARu7=bP$0h<0C7b0A?GMJz3alk| zvB4rF24-m{Y-O5SeQM&+?tyE5f&Ff67k#AdK$*8ltJCXf)3`d0FXxTl`3%w*86K@V zSaxjw9I^3feF)(-%Z^m79Fqj7N42UjN`n3OKf)Fyjv1%j6X;v8C=LmkE;@v%w0VU-i^CIUxG=*%TCM1R%N2oF5tSoR%TZ~l#2 z@q%s(sF8>-TmA2e`+VUUo3ZW|@waf(38a1GW&ofZqrD2~684a*p^e;Tj(Sl$r#)jFq|XK1h~X*tLvBDc2bc3Li(KR}OWCgMZwTtXs#`m1`i&hf=@Yg))Kiit9Lr}ag+`NeA!v&_{d zK97J2!~zS)RLbasYNKX(#aNxqSUv}nSYgL;>0Cor>wz@ciNcQc`Q~8Irhi}`@3;tP z#zwCSRQ01bK?f;PROHkiKGvX8d>j9i$>MsWJ2m5B>B6@iGv&mIIntA6h2fr(VY8l{ zSP7TSG8d3zp*hahHqo1XE$Etr>iOC0j!`*1VDQjYXKv+0q3t#!Tx}8327R;-HNblU zrm8>-7?5`AL4K!_P-kFUK!IU#3XKb{;B|A5Ln5DcZHtIqXDDBHS6A7s&7-xkqAj1G z_P$6*|>5qTVPU<%vmj5=XUl;AVCt9gp0 z{V@vZgzjiM;|&PCST}7`pKOd&$0kZjh#*~&@_e7TsMKiVEk1b}w+6sNxaW#61fr%pS{En~jdEa_SZzXZOgWHM6LF z3XX)%mXxMiWN0jVbD2xbz->d&d@C^RDuXk_)uxG>J+Ru!P%p_u*sAf3qa=%c=4z#c zUTZ$rQGMi+S<&bOFkj`>xSs=fsBUr|ZpJF<(Snl0;YU!ZXD54)MY`6eW2y#gK#q7( ztnH|nR3?W`hhEhqf&m=QEedp9HGo-+qssKuXWb0-#szk9j#cGv5SDYbEbtd{x)M&K zis<`xy|=B0z3h#UAqe_F)+>us3!9-+g(>AnI?BhwYr1+c%+kFC&S`N%a$gPjCJmLMUM^} z>j5yYfPzE>V_2%&Vn@2aMAHw}UU4yRrdtX9ctp8BZ%STsS0r`; zDzSuljytw>0Im7%4*Mjo)l4QeKm5F$B21%~#=j(042KkN&!%U0iz_tDG!V-cicy^M#Rh zT8yyqaN}#_ouRY2dl8$sd&;HbGoHwc*LkPH?1w5=vB%xTIz*TT&3u!WS`jVrksf}^ z#?Gf#Wmn}Rd8|Fui%aqe4-<2D9s+l37FL)WdbU#XXR>g9%JNNp8DR@RcPa93k@l{L z%%4z3ghH6CHB@P3JPXNl##;cwrmAjy(Gev+p> z)zu68Xw-23qvO5mxZ{by!5HQx(8`>j%c1---q+qa*-WP%lOBwUYdU@*Q1PlM?X~Ua zDAg;+UR#m(zO_$SFKqCx50@)!>~0^K?XFS4HZsSF@e3=q_A$U&?fyunXG~1)#RBzu zWBg@zf-fEkl&0%#{urf3#q}QxLNg>r^8xJ%2$@KKht96gTmtwxb!UJHQ_EG4Q&4>Y zrYxcjzfH(k7xrss9!J}5O^U|*)5hosnXKneVkY3NYJkTAr&W{Tz1GKh!rk`EvL=Oc zn8+7rI708$sV*{Cnm92%XLfsbsvY6ZpZ0)&x)){8^~p(E=kD_y-w}UY3N|YKE~=AH zA7TGF@sqJzBqU#Ey7rw@krS~v@qq3FRJm!^MKXBu8*ST>%q#7j?H(*<#y0tE(q+a& z_&dSA3VXsPXv}iX5;l!$n2vGs)C&P^%y4#$FTA5xLU9z7*=UQSgwB6F&X7mz%CDP_ zfji=*=;%?|4`zAn%hmh+t&xLe<#Wvm?yLuC1Fy$v4E*jNYWDdBsQP z9gV5!XDnjpZ{F#{f$qbt4)?~DaiUi!b}w$ungjy|wB?%?dkdEF+hXHzbJeC2RhLDm z1D?OkXmhe?ykvzHDYU)~myZICCgG0DZ(xTD{1fV{XXS2qq|Oy9%eD^10-!YO5ft3X zM{%Bol9hlHgO8(k9KYMwjylbjr}XhoV#+}LjnHL5UDLu@wbv>|1m$JemT0kSjpxLlkdXAWS(H}m6!6}qITNjw%5kS%GO3p ziJ+r1Gb5+j)mg_4e|eqOkC`v6^WoX5URZzl##^8IuW_r_GJcxW?U{|l0L?KlRmf8{ zQ2+FH+$CJ24{N3H`dDjtPN5`FnJd?Mu2D8o3<6CI+4C)O^5co2527h$BvxBIHkPOn zrLs9$I;B)5<%}8Q(>uEG5Hwp<&}QB#0-U$h91aYPgWJ?DiP&_ceQkOKY&{vK2;%S& zYQD%s9-JTyvI2;MOJHJRFzaz!iAC6;I1rV`dG(Rw!Kd5tM!GqLEw0i@g;fswT8#0; zU<69ea=mOJsCuI&>RH(Hgc@9%1ZFbI#IQsXf<20N3%e##6JIgbr&A{tshi_BJGP!e7A55iqpRz-i145+kXYW%%x%K$TyBu{Z zo#XxLG?u3p*3xy%<-8VmcMe4B(qDb;>9m-88lS@2n}mKKiEIaYaCdl&oD{>l zFTA1C$byXXk5xJuoz*%y+SebO(eyd#(w$!I%gSi9Xvebmcf^aCL;FwF%reWEyVar{ z@?m)&2ZmL+4w?FPk{)g#ESydyfZur&g!(l5-Nz|^9KRWdMu%kea94tXhX;+xkc(K% zq%BQ(BK|_UJ#QWVv3()+SkJ!Uj_VSG)WVcOD!q@3tuzbm9)o!J%F}mq%VS%b{#rk}CqmA24VX&@MWpjXiXu{Fp2oX$#j26K_0bsl{MWMpauD9Y^%eIpp3Q|zt^j<} zYtG&&XK=j39Y7G^)a`B8-e4uy$`vv$Dn~0u6QJej%Y!okWW4K)%IAZ3FLvcx4TC;O zXZth2m#JJj_!08R3E2Lcs3Ul0Il}#|%IU7d0HC0ZJjNks;|>J~SK~YULt|GT`RMxt z34jQ&Aly6t;@5@zQ>vN#5r>A^%49M+DM&w`p#TtO@olPbmU+X^ViCp&g z?IPnbW^{S!rXeZHn>-)4X3$Y|R~`+Sk%&MZ$*a|ck}04eG_EkY!Z3t+*SpURWIAw> zN(a92k99GCy`J9WEejj6bHHFALa8)cY!jDYt(YJ6GBx@WFxiu4%X7vlzxjc}Chz$i`bVm27zg!pZFy;)O7Kya=HrVCzcp_riKmji@4Btw zV)O!I_h@qGn%%*y$s~UP48P^n{Jo;s!^OPe(B6j8jAHuAh~}p%cO;abUIa;@?&O7X zMD3~~E72|M1>*yf4RDoBSM7rvS>_6)jud5j6_|NUAX$=>_F59mPJi{mK~Q^2x@nBQ zI9fw*9{K{x?eQvFxxienKX(oK)=1OEq`_MiV|!Xzb}B%u+OLxoBpmYeik-z_EWIEc z1i7Bz;U7~|G>Ju!IIPRJPshAVjJ^6n4M_9v3cEIOc-O(ZIB}b|0@hD%`zJa zb7GZ^-iuR!e%>W=Fwa+OBOTjY_+PHwNqe^$du26xB8A(LDh{X4`l4)SS zR`2hYtiI9RfYg&{+V6p&y?kHPJ!$V`!wS6q{F0A04(tO07e~5VjPC3?qqK zGnD++j-~5u2;@x%+;?lk1Epzj3Z(6-VIqdGG0v~*DKqP}@KSPI1D9=G{DBWYqvCxn zF7K+ILsFg2lD`L4c5W_GPbE$`>#Z_c9DEYz4n%P}$)gsrx<>XAk$EN!QGmBbezbEI z0Pn5kT+D+nF*b7^t^rp%xE(X8E*9Fzp5zuL?1mQ+AL&83ErCO~dy49VOk1qJ}f7-&*Sa+$jKmtKq#>us-+j_y7Gi+P*u$HB_m54QJk@ zvar?kkU87o8I2*rYW>P-E@$qD^+>DygWbgjj~PfkO_$mBB9rmM=UQ(nl}Jr1%LiyQ zQNp8R89LTfj9e1xehAeoY>K>HE5i>9u~{UlxcTK)c+j&d4N+@AVj0Ca;^T-Jf4PYB z$=Jz=igVkBca8!2jJNzI_@flXOHuyB zrKMO)L5=B zx%}{k8jJ(}|6%Vt!Ae#`klqA=00AN>AYDbe5Ty5B zL+{c%p@rT{LJtti&ED$%?{m(+AMW$qkLTO_@V=Q@vu4ejHS70V!x&m(EokZEbasMd zwWRXj!M?%=t!gZ7qEkS;su7egScS31i5#4UIw_O=fIYK#61fYu#NAxPazQ?60zr5&IS zakuX7PkT{oQu-9$|^rMX)LR;&TSHw!#=V-5^TdI zN(I6f6u0taf7_Bu;wZft;<1By&8-e%9cIF?QI@e_U z?vEKREn~McJq`vrznG^F==MxTqj|K9#y`_|g~NW}@!Ws^he!nxIk^&3${CAkY@sW) zi)F9oq~4HyAx$ihEM!XFT8Ka?gME`%{Jcf=)HI?rR*U~0w9u(d1{xgRmG#a5|2$pP zSRc;1PKKjF6;y!g(j~vWy)gmf!rmd2-E*DS}K90YK?PxmAIQbcm2k|xd#Wkx?i2v^(Tnu7UKb_+kZum^TT#OYH+Pq=g*5gyUxGkCbOoZNN4I zZ$FJG>K%BdRQtSH0at>|T1#jwK}|*MmB&<A9LY4Ze#U?QO=_uU{+?d5CM{ve&*L6?bj(6@( zn9}DaHz{=>W7&XARb0aO3zG)aTupY@>W)65hI6^L+rz<>AR~|o8RbaI1(m7_&}}Tk zxpQ?);s;5kb`!r(@Kp#EjBpF2$6uX0KtPk5PJnNdG~)&JD1nTvwWYq(Mm^x#3$>`6 z4L{Y@mx=oD!M>~iy$XA!54#;NsqzO6eHrO`VksSBWyCj4vKq9+-mqR}9FuY|x!d>g z*Mw{Y9kON5(xwB@1n=BvT>`JNy*}i36id`GT?+N$l@MMEf1MD}MmTHV+n#>ljxOp( zYVX0hMXr)DxU83|eyhai1d|=Cg5jJxvZ&0JvWvBd3t0+qWX1POMST zg4efnahD!+HYv{N0>M#a7rxp}DvV=qbJm1z`ha1Nd~@fzTs8&yuOeS{^+(_C0f^a^ zhd&e_#YP!Qr%?!&D^NeSMAL4DQQNj^h6+@nh5rit6T+Wgf?`%r%xvgmpau~E&g?o;tfveVY(@~hi%~#NdBTGqllSQTc zE_V;J?Sqmt+g?eF&ggXOTk~pyD~>#FP|iaBH|E_tAoDwp?n^kf`OSegmUDMIHFW2` z*i%#%ZNo{P<7J5l;N(roMulbn$dO+<;VSdRz0!Sh{cds5mmSOYF+Ht~kZ~)4zF=H} zVFyF~t0L@F-E%Z#cq;VMx%uL{vt;}Viuk# zB|p(4yBRRQOD(`F>c*dI{P5hU6-hq}|)HN4l9iX}j!l-JW$|ch}Ep;?HiOw{lYz-b)>y9AtkA6YfelCRe zA8+PPWj-_qe0v$Cl+HGk63fKTVq-I%8BU1gtO|GB7W6sAH&J_za8<#LP|)zI4yIBt zApJO+{uq3Wtgzv;tdZvyIf(~{PD_p|PWQ!|z#!k?ZstAFuH{)$?(1A+?*|Tfb4& zmwL=D=a)5X89i2*C_()FjOE75cn3mB?|xm?WmSjtMv!37w*(KLNg0Q zY8(rdFJ9jYBH9LBZ!GXVFVeeKnBI7DU&W|L*;q4XINQcow|4Qk&vv#04}EMuXEc*( zVccj1Zl+hCfjnrTv}6?5Gczqq$3(xbC6*emB&dr`XPHR5&2eAxQ15%5{i0wnG&&%w zS1&x40_RQebUMZ;-Qf?L+Do*m^tiP%MDJs=;&dSScd1yY(H}7B<@$b-Wc6@o3jcx6 z%3m7pLJkKN?gCSw!(SJ1B5WW*j3pt-qOT7Hez1uQ>0x>IMEViIJ*P$jSXNwaM||1u z(+wGcb>^g6#2*j0Me_-ZFbMma90h(uM=TPSBgkIrT|`)z!xBe!5#+`I&v@QBxn&tt z5SIGTFq#%!M@^4p5Q-1v-6h?o<}HRyjo92;Q0o^yT23$94?J4Xp1aL&^8(}UaABvH zEMJs>&)^jqH3pmv4#)`m9Ncn)rV2&6d@ugxLWS@h+#m%*1+VR4x+?x@JMx~=uWhDM z1^y-YZXC+%-@{;ENZpo-mMl{pR+#Rv6tZ|^2Lqm|zf*speMf95@JYN2cAJKIuTo=+ zE}2T!d9A~s`A_nRin>KcZc>b?w`?c3C)IK|6jYlt6&7iWUZL}G%o&rcrLQj3K0W1m z4%nMmIW?*>_SJn(yEN$65>{MFqX{SPekJt4MZWtL1*xW~DkBUcf6TcdSPCCd2Nf=M z_=M5%xyp}~E^cPt(QznRtA36e1tz9-!Z9MB*Ng_LlaIcT;=UkL8#(cd)_xXfj=!HF zsw!V8UnRNK&8&7(RJ~6dRR5c=;77$k47G_)bTRv=wqWgUtVeD*n-K1N-{&sfUp^}knVBj0o-CUU}_ASgozX$>^j~_WlMEG(Xcuqzlw2!0tQHZ@MJq(g?@R6|hZuDch&&dql3K zUXxirt7dMW-wBo|QOar~lb2k>GbW-}qRm%@88UKg^Use?#OY-`_5O?u=+FP2cp{Ae zk}b=BJ1yhyRH-cJ$Q@aJNL8f>+;lz1MTzh51+6N1jN+XP((pfcpVN@p_Eau)H*+w25Cj)RI!$GB!E5n}vXTW71}^ltnZAGr71^ zIf6Ab|8-5o5Cdrge3|_F_7tqk0!9Y)q=Wg|Hm+YT2$SvQt})jJ^kjqh4rOZ}Q-HPy z0i?x>B7~sk>tEwxDi3U`hbudYV`~z$i!)CsEW!g*0j*>g--66zR|IP3J=H!LE%9bj z6R83FSjU*vDrZ(V^SG@3z7{Hk?BlK6*+k)|F`QrRJ6nMCpm3T{n)oj-{4_>}dloOH<48eJa^5$lRv8`ZELu0CWuCHYpLG1&0 zL5?t_?bcLH6cO76x+Kf~XlfMblX`uK`=Na45}jQSe_k{d z3T!ZzYkYIKR?L!Uyu^#u)=Poj{zRk^RTSsza9j6P>q>*%i?4e%zC)vW)cDf^j_Q;% z)5V8rda}lP&~1UDu0(*s0Q0CiIu~PuH3q zMtEM$^nOqd^&X`ce+Hi_*or-q4+^o@QYIw*HiqJh#^$WuqrPq{7(8%eG!{qKr*G-$ z{ZGHgl7hV&!&fLeIuAaD-Pz8 z$wn>cP^xPT=_%^(?=IzGhEi5-u%@XLllSd+7J42eq3utxe2A?ydVa^*R#gdeBJr~i ziPzCjC8gzDeVkEbadk%>TS`k9*1YXGB1y*td13v}`l>>&K6a<)&`&N}^h7z38)m+l zSj_0z*|X}HR9u?-$T?6hWH(+=Rl?P9pRhxAs}Vdv2R_UxsWi9pm0DSTAa@q5kvhHZ z(?i~Ok$Or>GmM9kVS}K3GIh(r7NSlvOuNaXhutb!+8j?w2`VFV#Z<9{UJzwXFG*IK#OL1N6v-Z;7X zEIien_h`>QzoL_^3T~Jy_l|)Yz33r*$p%oPK~$Ba#>hm%fYmb>zVh&JEq5%AM4XtP z(KF9CoUC%p_7r%lnuj@*9tzkq-N7th8A_Xz7bX}^C`&lk?&?Dx=^qby7@jnjl{C5P z>3%Nip4pK&7lXXS<&yN;kdS;(>06auV4b-`#y98EynGeI^2zYC+mhZMj%!aidj7$$ z+A5kGI0|=a&Pqdf(2&MCtAhHA%OKy%5p0r6IbOFrK@SBpZ;-SJfnI1$v+HG)dMYLp z1+sEebiZq;-)SRhwcnTHvmZ;SIIeBH90Am>d&B!G4DIuu;`%cwCptR8l#01m=Q;t6 zZB!Jm-2%*Q?ljmH!Fn%GKVe$7{X@~>Cz7IWhb$xc4X^ei`#cRDj%QAfo0oHZ$qjb$ zOfxL!!($kbJ(rg7deGMRD4&+CSdA*;+!=E*ce%kl=`r6JId!CKvQUe(UlA?tqjS32*Jl*y(KT2pAgp4WnZ={3GuHbBlu_De&rWz8K1P>FmVJk^JboQn4(=v!5{IL~`qZUvypRifu*6K37T}oS3-K1D-w`ds>Zu!in zhK8(8eO~3dNMA^z2WNuTcWmnY!ks{{*Zq1!LzdABjFH@ZLQ5*!8Cw(Gb789)lcBH$ zxVShmarruZ#yApkGlq0mJ@bpNmKIvvQJ)3lzH)k7_gSTyUZGU1KhLW>#l=QN7@(mB zH`AU-xynPEZr;R$@vHORW@Q7nax4|VzEL!WNnBmGRSkAmoL#4=SgFV>aM``w)JT|f z#O*_>Td+AMM?6T%ctQmV4zC*|ue%B(ip#wKJ@iOeaiygs6xpEb0$^DUl8SaezKvG9 zdbtlrTPLMX?;tix`GA9hKpRwYES3sU9}Ls&_Yi#H)IQy6$m#K9=!@Cz&l7|nd?2(RYIAO=SAwiu2ZdYdB|5%0caZB;*U7+% zeZ@OiECJXOk(W#nY(HBN2K&g5@`7o_#Q%lC6sSScSqB~B`J}_ z5ZFydsmyWNNRJ4Lqg6?sjI9=jvKyzw*zGRNm6AbRBmU+jetq_n^?eaN?a0z@oFk;I zJDvpvAzlu@p0c@9@h3z|VH|$dxtUbu^CadXi;qQ(4;j5DIEH)DBAI*`IT_QJIPDAa z#&v&YvyS6|Etwiv|IE;m`lN`@a^Oh+J;B6>#T)!csO7@RtJB@)_uJiyT!+%-*ojt+ z@R`l*3qu(k)=WF?0iDyP#gBX6W*#uc7$a&YX{%-^tMtqd#l?~B)f~-dj>BP0;nbKr zm4gW3?ewiitjo*SeJv)5O9MGrgS6pBw;bmfN57gV0u^cHvAfn3s!Iz;bNQ^gLu+CS zdrCXl>dy8rc%5glPER&@CaYl=o~|!J zaL<+A-Te}Y1PzwQUVi4!lW#6se?d%O-Ai?4Iu%BXs|Bm|VrgaZ;xd4BNnmrK6PeiC zUeYn_U^TzK3P+kUGCqQ`_tQsIB(di2TDj^N0H0_LKkv%=B{OOo1E#|Dn=?KXOV zCrhNf^eB9iE;_EfiOMWGZ1#Ycu>$KE z#VNYFZ^wEIjt6R-<{F+A6FRC^))Gws-agFAwJKjv-qd%TXF}@<30=);2pPFrx<(N| z8eff&W4ej1v^JM!J;prUPd&3@yc&yJ83rP%oR{XRu>9#sbfb%%o{>#aWW883eeEAt zfWkV-9_^_WXVc$=_eFPYu*t^2rxaP?q>4plxdj<0fhe?<~Wqjqs(Z(X6_v}-d(rq(ptjEtx z=4~L=`c`ZDnTSqyOSejemU^NQN=ST9Ncqj@{Bp;!?sDJ{Qv0F0cxa8Fvmwy%@T}bU zA(&RQEfOz#g`n8yA{1Jo3)Ef3W>rp+b(_P~^(q$h_uS!6y|W4Fs$r)o>FxlQZgMT) zvsGigMR91>hoz@n#hNiZof{_ zb8UbqeQ{keux&)D9T2=PeG7uLRVPv?YzQ^I6vMX9_s zKB-8TS`XbM!G^e9F)*(4p?4oDhfb%f!{{yOb1t#aU`cq7LBEZ^hO)A^no^*paS-b4|}Z&A`NnMCf9)|s8_O&Fg&rQiV z&JN&vZ+GmiHBfJ)#2MZj5d#_xu^^pw<}qm>KufC32c-@$6@$IpRe~3pnwH;XnuS=* z1@=nf#%z*$u#0LQY1Ixxpx&#-*>T|LV9N~cTL!bR3?vQS63()SYE%sELD}8V_!^zY zw6FEK8nXaIZW+#~@A|t_`V(+=B}pw2k|x(M)Lq|(wrq5eb0XV4y z+pL4~T@?87;9$D5Mc8y-vLW1O$Z4^(@P1=HlcUM-z-CKjr<+{9u4In|A*&kk6=QXJ zXHM`mE9Lh`!TuB#2nu&x1eKtBbGmJv?3fHfl1!<`{ks3zU20u+;Ex&2M{>Y0JKNjM z)RP;HxZVC5rraflE;*a1h_u3Pg88pmEV~WUZbXPit6HKvc1*f%LIB05%MlrZd22vK zY8j9MMNG=pv&UvjACH==?}P9B_}toHnCov(kQ$wyjVXlD3H5C(^Abp^e*r4gh2u1U zL5}W6)1Of&WY(0d{Fct*1MR^;s{5wXxf_?((MdJBQ*4l}*+%U3kksMWvaIeB@n7ei zM{2D%Nm)jEOUSf0t2rnwWH++vWc*71q-;U=>GGbSb>AsouW!3k79u96ET*G>0}La# z5O8OUBdK9BHdM}!;`P4Ix51X0OhCi$CfRAGPOPf$HMDn_ixD9s9wN$c#UU8wchL_! z%PC&GOw^cdO5RN6;KnU5QZcB>%LJr%Cx=Je)kVJ7X}W$mH@AO&&vpyeNbhPc;!Y== ziDUZ!f{*L5C9uAIt1QgKSW{BlV%1n#AiLjdh_g!M=&8`}QT$z=`a1m`&US+Rss~qs z_v@q{(_Wjo5=#xz^D)O3yb*`lR5FXgCD`4>i-vBsLYshjW93?g(ZBvP;$HfCn4O34`aI@RlTQaH&JnSbGlWh0Aal)=y)u- zQZU=pfan2#B$$KF8wW(WNd4Y+u;g`?6dnqC&wc&rMazS`E6FD3f^|obAow3lLM9+L z`-e{0d)dow^4D}?X-sBOY1WJ67avj!BYafrMI0^1izBdi)V$;@#?qBXdYf_-+#*in zb5&lQ9>qdeI+`6U?BI6xOZ(A|Nz;=#40y4qN72PX&GiaWE1&*TgCw9TRfb-5ocvO1 zmhkd9-xL;GfAkiYA8Z5Dj}(w^zC<|6ZtfGsCe*wfrSap%x0baH&wH4JFff<3?S0nw z4PmkSu+p*rgqNmfA2ifvwHE$R|CBkmgAZGdBI~X4pWBnMl}^~2ixMZ_)3;de9x|PI ztZ9>sM_OU{eHrofo4GGcf7C#C`RZ)Rr?7x2m`ub|rZlSfj-R=jR8)Cb^@)lQc>kVg zwNusDkP-q=tgC5-62IjnJ*D`hIyNRK`ak38{34Y{&Z#7cW#J18;*JUwXZHQ@vR8Pk z-I@2!-VLXS9{5^L90(bAz|D;$oYM|AW}-`{vveu1a_#p;DyRpFMi)cTGN{su;ZJ0sDj8{feA#E+!jUAvAmMu3mbjn<6BKHmKO zx1SGE?{PnX@A_T?sQ&rge|?!^aDBnJ!ex`>XCwc7XJXNwhNtUE{UU*u@UX{o;@c`cUtufhDIE8<6L z1z150o*wD zBSceOPPqPl`wulqx#7&#=q4o^{1>hL{D2DZXvXe@VeoGi{NrKlHr8U^YKHy~qj)FP z`lrP}Zi@V)m)~Edh+r+o&C&MXET$SeQ45h$c>gj}TFh9B=~w3bH;bXbTFg1g`tKh8 zF+{)3n^=pf$@yC;{}Cu<0c$aVk~p;g({dlFC1C{-5vuqXIrxpFs^PnGDL4K_S-B60 zk=kpScP%>n1#dSd@Hmjvk(|0>8 zDgnCqmYKrC{Ww&{kHRD#Y7ANGBb_UgjgAM ziVzmQ`*5OB4?__PG@Joc?e+8&vEKq?15^1dTG5&rn`1XKzb*_aDexZECzw0pNjp04 zbF;BnAhuzZ^RYKuf3;*3EYnf7Ys^mpXK{cqS9uEW`Simh$SLYv);wb*hz=sMBjj7P7%sWj z+j}@~u1Y4^S$mvnoWZ-6;c25V-jQF!mG$(kiTt!ftuj?Su0I2aD&}5%weD1@;i+WM ztk+h-;m90N+x~c>3okRNOy*&Cv>__#i)F9ZV@ZCq&K<+BCmb}WQkmGpJwDZb40T#n zVf_)3eb@Sqgxt|m69qK~?^n7kmvtKbK(ZX1pJ@vdr`|ep9URUnF}>@>ZTN_xKRy{Kl)O~jd}Cxe z9|8`eo3y>E?2<+LocMHB33JU(QVz@`gXk0wC^%I@OTnlTL}d2OuO#B?+(A~8>*6#!SaD>o>Nfu8^?pW0F+_( zr4`9s6=&tdlRh5{>C489^;SZz0mU0<$MT}D(MPjgQNx4HHxh&v_KFUoaS%%(UHLmvA;3cHUujXlzrBKA1DntXmLvy5hLTru*bu?Q(+Qa8XgU zM1g);WfyC}o82#Vftf|Vn{^y|)KkkI-g=2+joYeKWN1_c20+$YZ;e{5rSBaOx1JL> z`~WUduvK~*;WEV&HBvd5dJl3MDXBDI^~(Iaef?NWK%Wl81T-yf)11n9TDzoA6dZY^W^HqRWpa-_!C<{8$1;fA~)2Wacgp+1YFw#(g85fvB5Y z=JYvib5%67(>!h0TSaU!M@GJR zVOq}36#eE-woPLyNA-o){PVZ*;1*dXgofbc>3VNK%|{M>ly!iz*q z##(SC*o~oXQR;&%eUB`oHX8)vB&kf|@--$|KjqLs5XZi6%I(!$FUM#w2<@{~BoTj1 zCj>hj1v!W!*M{w!Z0>Kjx0|Kwffd7$XRAcMF_B`SFdhP)XDwuT#_WP_7qsXVsQIDM zLFp61V~Nvn)Qa>gn$SV(HQGv5AMlY<3DsU+Xly1W54zRFI05&0o)G1=cKoiZvmJU( zn_>!wj*s;&&1Oaz#ktb~?>6IaRbw%RmXe5s!;1v_*Gq|c@O0*6Pe46CYD}1u`gXMg z-8i{_E~PX@9*61_*eHR!a%X^h)2BecnBw~Uz2~yMR0JaOgJ=@q;@fX7;_ z^|1jY9-ymvF}|diLd0oe5br%Q)|M?`AWF?(?AJ-LI2a!vE%+HPBk||E0F2e!9QZFpu~!B z#x!pzPNqJowV>m{<@2x9i%aL;XQwfTIVi~hIIqAf;q9henX|qJ2NdZ*kTJ#Xi;qW* zliBqq7Yk=~-9=Y#fFkEjJ{pY@^$LkBjwYTX&;v}!;L#8Cc5G0_dkk99Dc@MqAm3wO zlzNY55oUrp^t3^%i>~=ZKH9vx#9S?>9W9nqW2sV-qAgimzK7f11U849nU@{wmCx{x zFG-P0ZB$IH*8>0wSSaPS;|7I-W2q)Rtj*0-#^h4xQP7qv>%oE4zb;CM4RQ7vj z@&WMP%4z#frG1^6i|=9WDHv1PH#-FKsBG$?=$B0E`cZAWRgs}eQY|h7cHA39`K*+k zmLE`#Q8LmQAM@z1E<<&qVmZLgqKY>WiWWv#m@PuXY+v z*G>iwCPi7veg;maBc#MghlBy;qQ4@PCQB~jP)Zumx?ek{u3%Z*aSu@W{e3qV&h9fo z+ntqD!qB5x(DtkLo#Al3^My|r$85-ucEU~VMRAu3gSJPrPxTy|L-jr%O*|hjdP0-7 ztk83znMF1yL&-qJuB@0`j;3q3Ex?t^qK9~dfS4*P!sz+fh@K=u8#~w4mEGG@iB>X? zBe7J-<();Z;UYvg^e?7TRU{y2+bf`b#)S87sHqUI9Nx~v*1&2%3 z4#LoM`V&foWjP}Opgl5BjQtC4N|Yjp?qX7O0IySXDk&;Q>u0XOPg%98d`1}+zrpj@ zc8U#s*DM%19UCy;nFz199ge+K6|YQfp7A6M=`{NQpRoT!FXR5>;T?35;f{dLg95pS zpXv>Z#INhw`Aj+gm=DQn(}F(>CVRus#-=2mjOiEMUi3is9(LQSN4QuVD{fI-SUb2H zeR#9O%1{<<(i4rnH%M@jmVu-vdiY>*)-1&F)mOus14XpV8}bFS$A@98)oT}HlIeQy z7QfnG5BETu)@V4?yEq8U>7F4t?*bB`6m)xl))vtdV{Z%J27Kj%gT=QTE*c{KWryE} zS;rSBP(ooFiv+(y1siMzNU&fnqw1%h)4bjG~K^4PFZ)7WXjx`31saO3+ z`^R<`uILXbCAKKY>Zs2it&3_M{PS2*-?iq5bE8(u|B@GX|1bN2Sxm z0pCA-w&WVSXY2%(4|p(aJ=#phzB0fVx9H`Q7O4k87HG{C~LX!q%Qe z;|CKi%+AEJxq|qu6Vy9cyeJ5aFu~g{6x3tjDl{6 zg99mi+)#ivgA^5>m)RDQ=D=ApWyjewy|EM0C(wA+LQtmuo%l|>`vU?bAuaJq~r86@PKTAS@!RH9-`;}8<4?`ZC zQ)wI;sNmj~-8#Hhrd_$Y7uY?{$gr)`aOu^q368D!&)Xw=8Tje?s^9U||gHv(mK8!#% zWNtAd@E%=UviI@n`P=*#=Y0c^a*upR>H_gz5!XNb`}7hGPuaSi_&!B{soee&DNOp@)Ryjx*9^d%&`H>uHAWa)Skhc-jnY{Q+um^ZQ1FvotK zDtdF&_A0Otcy_M}KVs1*AmBb>45>oCY<_zA+zDbBbaghefd|1*c&6xb*Q_K55hPkb zbPbC<%`@f@!>q8rflw0PjOLwUj%@8;Yq%eqo!+V&m`(aiIKMs(Q>eJCkUr@=Y#PN0 zhT6d!q8%Hynioq}M|jN_f``@Lap~y2F`o*Hx0%fg4cQq5FE!YYO?&7X)wnDHiAX^x zwfn2>{ht}xOFI1T1fcuL*j*RHohP4gK+orMWc(&4MQ<-*h7GV2{2lTBnAT)M3F15d zx!h&Uu6-bbTF7EVwO=+CVzN#oIM8t5e5 zClu}59u6YaeZjdM)=ubqUdtYmcJ}9?H0iBE51B{MJvz1QFNKXuv*l(hxr=KPdN6N` zv#xes!AV^dQ3?JJRjwMg`Xil@-3>GxkziTBt5G7FMdxGfEGl?!!p?rmCpIY*H> zM#aa$+_n->!Dz`#Zt$E*m;@&$UzwHHP_z&!h}L&r!Y1hPmfS0HqKRLbS&{H}Af#J@ zT(;C##cS7SjOAZQYwgJXwWCO_k(`{wGiPDw<73QlXFP%?O(5tNejBLxaJGH_QFvae+JlQWV865NY9f! zZ?D&3$syPB)mL&8QA(=fqU<|0(|{bg%6BafMyv!qos8F&4PL7q>JF0HH815IfhgKrIw$5i)IgP&3c^r0$;a_xBHGJ_pS~s5RWvacH`Bt-G zNO8$~mztMbIiXlC_YO$juq>%=)5_j$zS6(=9=>iUp!1cki=P zR8iLeY-g5rV{#izm8Ood%A4))&QzUC^jRZd5McOmsdo(2{cXpbSUa8>m_z)w<3~EL zF2-Xe;u}uiLo=|%;WbT4l=tossbpUd4;~8o=RqP7)h`KkIefgKI{C4Ft;{A~eeuHm z&+JVD@MPeGCv7;VlP2ME4sxDaoLAUr-nJl6HJcO^o#AKk{Q*zKi5>J(t>KB|E0YD# zha||sWaKh?3qZe8%%tFGY8uH(gCuQSvm7bl!i+eOq1;|nh9I*fJPbmY#>VZ2)XHeB zlHa`kGfi~Xdbes#?ulzSbTtEe0N&`KzcQtoC{jImF7eA@Bq?F@@LhD((?1WXNiwFf z3!>@t7p<|w8SvQz$LfOyZvuyfS#yhF${f(FO=pH4Yo$go8jIhfE_p9DiQrj!0u`rJpIJC9lG|5c##h?%wIl)+7%QlsblPhvG?))u=}( z3N*l!x83nHQ8RcA=CQGFUp}*6&H>IcE8^g${uCZ)=Wym+aWrK|f%5zo>$7IYhTP@& z6k!AZ6%I(HXkneW#@*lE$&!^g^zogC6Ovas$G4Vf-FOVRd_^=o^Oomq7Hz;2yh!ai7B9NXBk*rbIlo8r%eekh*AX^=AJd%vHzaIS4J*fUCFOt9dlnWyOP=}<7Wp65rvzf< zpfa-!`DZUb6(%K)MGcQe-Tw{a6ZlgOVol9|s`fW@%8FH0R;As)$?+X4M_^pSzo|+U zt19f}NdJaj-o?uC|6$4!2=alof}Frgu>zm1f=oQ`zs1N7ma0l9PbK+fLQR%Wb~jsO zY-as+4{9Hl_52tuNR*77IDWG;b^1DT=`P*ciL3djHI}O#Ti!&5RFZj#($o*ZH2}Ht0ta= zPy1B4PBdeahL7JXCYCDy4OQN|enpD7$B}ja=d^@B@NgSSbzM+}#7E+Yu72#=5XYe4 z)&2bQ-5>;73bqh4eL(VtM8y58y3<}!Th*MKDvXuz#q|A6vURfrr1?m)(nxZ0vWnPo zHowhcL%{Rjk>XAK^5;#W=qbMyt)J>kamFE%5EH0BKHJ(j5}N&y=_4^*9l^ie9ZJsG zUqllHFoW62vFwTY`s`(Ru1_SJ7L}v+R2tZeY99l=Por&)Hpeo8?0;=5*w&@7PE7F8 z(}14_YMn2I-6437_RN@9`%FHWQLU?p-eE^h&j?|4j^Y=sUGuxZfIea(KJ8V-UhwpJ zIO@op#Yxn)4(^nJc8(N6V*!1$twPM4KW44;kV)K;5=HCc zn0WqEovz$|S(yVb*>wt)rX9Y^v@kjEWftj;s#zHTY2P`P zMT&_fd7ls2{78}JJgapX%XK}~hG#HmNscV)DUBdJvuH&SU$@AK-G8H{Q;$sz97T)2 zDg5k?Uv}Ov2(H{pTi=sizD8$$pdu!+lk;bqQ84p)(s}NH#lj{hXhvISq3PmSo*pxZ z*K-T3{vG2!oq@g8LR?v5y{Yu5sD5FUAHAa6O;;B6du^v=VAo$pu=ua_jd%a!#*yV>oS@T|;(TqJA-Y{eh~^*hofC%nCy%o#%FN`TSUbMOLtmt?(>gl}Fcb`DO(? z;oJQSPxsaQ!#C7ZVS?-zJ*5!VKD$!%jDu1zHtDq@$d!hrM1Uie4P7^e&()#^fTc^F^lmRi4#hcdG{pJ) z7*?8MM|D( zReH3BpOVfED;PS}yM?$%NS=Kx$7U|ciK4rTh7oAVILC&IetxgfABRJ42NVd)0sw&1 zCGCy&8ZLp`2s47c350Cch^m*srVVe(EQ5mPgfv)$*3 zMvW7n?bF^MCeT7AXU{f=>cJZei+j%+&8QACbd8cM#U+^wjLR~+YD$KY&T@1y$MMBh zQ*Z9T(+w_P&HCfoSRNzmTvm#o&yGBqFf4V|zw~XR1yLrP9U~FxQwx))XmMf2`bqo8 z;ml>kE*qsQleK4Ff=}o0etE2Gelb`#9>a9}dlP=~NH$xhn!>_}{Hu&9Ipeb&e6;Zo zoC@95fg)jCe#xg8)$)U^L?=Z^!&*a2VO_!X3(QK|?i2jlgISE`P2JiZnBv~IyAE|? zPQJc7SEqgLHm4!cIdLyN8vA60^&~+mDuv0mA6*yTHmZ^PwVKLW)ciBUgEY^4IcovobHqM_y4_=55Pf z#T4m%_JynncyfF8l0+FglpTHm)5mF?m2@3z>%Z~pf0#uEmAm;x_i7_^@u^j^yUP@K zKs*GxdR)nGV60WFn%5a$Y1%BeYl4G|OE6-u%&oyB0kHeRo6dzuvcDcLQ>l;KNjTFZe@0fRk@F_F-s@OtEqSk@+`Mww@zv;5 z=?eQW8T^tJnv0pqpIk|>F5$u{y*fK}(x~DX#q3U6rSsH=aYPJ;s_lScP2wZ{4$Zd+cx3cyJ3ztqWUE+Mn{j5HmXUs+gU2E4uTIxJ|?+y+yXlz zQ~YiW$D>4RDETE43Mgw!R*vjljX7*dG<_7`*INt8O39v(Ga@U*;h{NgJbmuZ88fe4 zJtib7f?aknp?Jfh!y|>4Q<${V>M1$(3tv3S{p~^V%l{-sA$~mk<=SrCG|S!691u%1 z@tmtK1+@woroWoAw{`p)cX`&PIdZV$a^-m#Y;$@zB211N+d|~&){N}?1ksA+ES9+7 zb?h`4VyRtDHP3ULptGJI^@KeJ{T_slgb-o~8ms8VSnkqrKf0G7#_xUWiKf(_I0t&K z^q2jn_YF>BW1OT5>iNr`=V&~#kLa=X+VxaY|GMGA4*cr4RVv2J1|7Dy#&L#Xu1&re z(yAVZJ9NU_JKU}qm!NLsG(#d?-S=T;!V>~UoT|Ig5St1r649_-!ZqoJpR*}*)4&b?Hj*?lqf8E zBGUEV{U>^2s(If-bj$v6anJKQg0!XMcy5Wtg80eW8MbgK_74_&j#U!%?2%LKC*>>O zT55QbK+iK=73}SH$Y;fMLx*e~^ex;I9V+{4FD(TtstYo}SmLdht?%sjsCzGKBWQ-w zRg}I*$OxJ}{xXiNI1Oo1rrP)Wy?s5RC{79F`o**xT)1gznFb>V7z+Vi$LxyM2vxpr zE$3?I?IS!XPkxNL&U_B45-uP{9(B)7!()caIsKi7=R zvnf)`QWea2Dm&i}zB8>MixSE0vQginxB|;J6w5~4u#jjIC8(P80$$T!Ee8G_@S?C< z@h1Cu9`L)zyerkkKdtxX`*12@1}zjDpSboeL?v?AlXNa29MrvDhuV~9lv|bSfm^ax zQFrVWO>)JvxY>%P&Z0NlQy-Ji0F0+9+W`q&uKS04d{d;`?MI1?&>{`!_HP2EtNWjx z?CMrED$YJG5^(F@ohq}^Yta0zNv~++HY=WtObBKBnz`ujaMkoB&_FjAVD7WkXOVBL8J|) zI@%w_a2hsRzo52)I<`#hps;xiw0xx4<%>kNWZ(VUHp{z7A!`y(FXCNy!mCInovaxO z)BdrNO{K%f!@vC^T#l-za5I81&F>BF9;X^&2@DQY=>FV_0Wpk`Z9|Lg{~7QE#;`TD zk9*CdWVFkpy{GAFZ@;~-oF&QSF0es-`^m<~8{P*0&oP{G==_Ga?ORsfTOnw@+>x1W z%gY#bSO>*wH?UQ-xt{rsJvha`aA4XTUtxGQ{zKNi#ht%>GK$ZCtABnc;>E*-?sC~d z`A0s;cF%ub{o&!GvYovVHOjvhkMqSGCjNb!C%A227kjzoXT`-UhaqXmVSyu4u>AaKVe8}O z#@9Z&SG{$&_;0@(#&=6@%W5urc8ue|rHk>^?+nd!BX^nHEja!5=c%3hcRu+f(wMMj z$!_4t=$CKS+UYVo?%VzBIQakH(fnJrf6s+2jNYF2(mB0W;qR+Q-j`2*el~sY-{^Nc zR=@dIWLe8_ntJXE$y%UF-N4^s^sjlzsF4OJk<_+rg(pXWAmlX z<8o8|Y#;70$ym@T!87i_n(XpB>VG}?`FyF|-QD><#;>3q zG8U_)z=c`ytGwgAFKY_kF@cn}7k08-OM8EHHZULA1sR0Z-7Pw;Yb}0YcfoeUPoK6~ zzxVtsrjt?pT5!v;DK9rByKUduCk$C^1k^qY*k_ql^#i`pd4nL6ar$}B?{)^Nw)W|M zc1D}FtdwxPX)K*+nRVn`=A|RG!9GW!W9&ffX21ok+Y9Tm;61Mpfrz=fVVf+XAEdaN z{k3%33!KbaUJ*VY-W(6G1{O(gb+*E7L>g9D$0T-Th4%JtSSCXnI9UN&&097t3f}!j ztoRKG2bvhWGZwl~4Iu&SKEDO7q1d|liV!5A5LN-#q3;3>+?;xw1W$JeMiywD^4z7< zknD$dT?&!I}dO!$oFDL^R(6=J9I+1OG_}d{CSmcyGEi=U8 zj;+8o(O1s}c_Tsy?xI&(z@Qq9GI+?0Mj0%pfOE!ZE`#S3Fk>{A!E*|jv0xprK%#QN b_~1YD34vEA^g1T_}5<)N<<;q7J5|4Kd5x%s>)Wh9vUaI*uT`M=D~etX7X8H#)SI5u#Q)- zg3sl$??DDS>v$NG!RL)VUP^0%`{QU_h`utv$Bidb!YoUc0U9r=EZ@D@Iq3_fLc z|7ziVgOHFw9O&YiciVxybzZZj1QK=7ajn;Xv^LR%BNOtp?`Wc__-WS5bzHrt12{M@ z@oXwa$kf~g20X|OnFsocM9q_oibTDV4n~IV5_`$|QsUr#>>_8wkqHdnN=;qFp9+7a zFsIVFeqX~&VJ;%=_i9dh%nwaFM2W3b#1HVE^!byk;pe(*{i{zDeY|*{vos!0e&kHA zyM}vRITsXuf-mQU5U^=(Fhs`^d5o5P)jL@AF?Cx_YEW=@&jM09xXK#QM^E z!$he#!mGDZSic1&W&I?{upBQji|AnPfvK-C^(DC&H!J+6?>m;9b5BpCp%v&$y>hu0 zRZ}N9%*a}2?~m&K`SshneCAi7!oty+-p!#7E>?jlzxFW2H-gz!^N!@|W5;Yks1wmVgRM#Dqke#Y~Wq4`7>iO@Vew1C^biqw0u>Lvshoq5) zH#Dv*<`3H$yFV#ouxaOmJ2JoT;AtvElN)st-<8Sz;v@H$gWS<)mVBaOS;NmH8zh3k zt#VT4E;O`Z5dys;W~~C|G`#G@HRRgCoIiEUX$6u6y!k^@T!%p14@;wky5}wDW)&T9 zy@Z4bjs7a{6gI0gJ1`HgK5!MG$194e`RTi!>++`2vk`akv9V;u!61;M%H>V=Lg{t@lOoC^7enBR8nGbeEcvTp{S=Ar|8`O?gznKEWO-TJSaY@ zpQC@~cj$&XrD)`>o|qreEQNd7I$DODXin#1oe~o0M_Se4?EP$A?S*3X?@R?YTI^a5 zoS9SX#ahL$iy4dcCgf}#ZIe#!?Qrj~>`YEH6qpW>S$Vu$d?zAEXQgB{GH}wb@_XXl zuod1rZL9n5?B7)m#ty7*dTdB+__)ovZMq@dWMBMM_{KfY)po(A&qmLt%Y)t|d8CkI z{CJ0BJLAOFSM*%|X!Xc`LwR#_kd&V+j3jhe(R}Y+y2Xj06rYAcry*Gbv-iuT51F@_ zD5;(`KJDh*;GE)G)IKZwt#hKGqPti=n}4Q%H}73GWqz&UPSwQ2g5>)<_Zg_%sJD0| z>i&cXmN{h8m$j-j8J{N|{S{dfnH;IH8LZSYp!_zhB+Bk90t~%hVrln6h(oA-9$Xh? zH=25+LiPNk!BFcEy`G*fT9>+%>Ft3|*3=mE&g5)~X62!Ne7~$@tRwedzmWip7xN$cqXg#uw%(XQ>WC zwt~J^C04YK%?q_%CuymP29a|DHQ`%sTT)v_!$w0eeHwii9wnZALoFUj9*}{sQ9Jlu z<5Q>cRe6l=i&8e-h4T5bcEbhzsIuL%K8IQd3kQ<7uW2Eq0M$P3r zXU8n_paHBpp=J2HaN6+kp5~}^DkdX|jqj_!T_q4AE8QNEt{3CBod!#(>&9DGQ}UA^ z;aaPLzb35Ns$*-wP2ZX#jp>Y~8|PXaUFOQ z2D%-LHeLZk7Y!~cYT=SDz^Cp!lASj^!c(1jCVpsEsQun{s}H(bs$TiU zgjL_&zWnF>VjZhNrh#;MSJ`@ny-{U*;NZni;xb|d&?`DiP`%^CVnUm(PtD9$2~R#x zzfs_lU45O)Zi^%Ng5i(1KS0)`0dSOwW2{c>(<0}Vu2WW+Wjj0wmTI5s$BZ^&bfwziaL)bp3R*o=OajPXnLJ3eh+ zXmEp}a^>X}PUBCb(4>@?4?#?0VpY4H$zQv_`V~|Zpa>I5w-~QnK6!tKR}HQQxwgF4tjvqC60?%uY&;q|vhMp8=Xv$+Qrq*RmV98(jMB?ZnYS*`O}jJ%f_C#; zMx9G}qu1Wqk98A{MfDdmk7gLkt*78w_#8bPS=aQ(?gyMOZO0-<^_h%uDfg<7>CZEF zgen~Aos}GDZDQ^ArFPxx%X@MPR;lAnpN$r0aY^z81;TGneB8UQOz&mLZ}U@Gm`b^3ZzbvG@hq0C9>$_`~O zTjXiI?wGbPY~p3YvlP|BcOrr|Ze9tDVk@OZX1q@TUKwnzIeG6 z+8>_AWX`lHndEDHB6t2~&iSGPN~%wq&g8+=ih8lJ)Ae|NEDAOmbS;>UiM}Yak#o$4 zOj(>Proi=QjtfS^P4Aehv=5!jp2me%o`5sXCpSlp*1xQGRmxWuEmO9>^*1_q8gHqO z=#1bv(1xi8{=WQvR*i^97R8Q|XDP7j1^o=-#FkvwZKfSGC}*CelYEAobvlPU#A@6Bv@_gE3+Q|$?~a>%lsmQ^ZntS1)^YS+RdlC*?G11aYAhV zYQ~wJ(4x53fV39$lu3mq@6T?8s~W&e_6>*T>NXxEcpX!bc1^bhPp?XZCS)aB>&(k!1P%3NhgL=4(C{=D#oT zu$N@fSJhyab#}927UF%u%g-WpkC~ZS!tLFAF)g{*{~QkdC&^;t;o&02$LHul#gGKPf(BtxPr&s*U7`&hsVjC^&gY`YaTf(cS|>07Y|!!C+3@Z%`Kcg zJtSFJZWj7~KmXXLm5=SeS8{Uy=WPKu$aiywPk@)7@BhsW43)U~R!qaz$I3w;@YGgL z?!X#S0>XkK5`Pc)AE*Ak-6bJS$92^;(H*zm^d~WS6 z5jH-71~6Z+e(56O=ihit!oQIodWQx66*IHz^?^w zYadoU`Aa7Fx8er3+lVMUM^uOL@D@W{64iT&4)6}(;s^WP6>m_kVJG)9xw=KU`x|8e;PJ(*6c zwWMN)!1LNYL1k|YCwwGL&%XiQCNAyVVr=;M+Gs75 zX%BJ<)=dW;ES((L*G&2yv?Ujow`xUR3G>7hDNIVWT&Zw}%)nB!mWSctippECJ4Sr6J=mMkHUUt1{gsw&%)?|gZ3Xj=rS}f|SLliL%C>lL%5y$dQ}g25(*&!D zBjuRk^O6M#gE$!z=D_u>Em(^nPutYjolwh@7DGnMTnXM0*vk3&6~&CWb34k*FtEvL zGLnlsImytiKjPJ{dvs2x;_jMdO5K~fUGJ@t;h9I3MWkC|qxa6mTd&*(H{G4lXl^R_ zxwY2A1X93Sg=mtIxjeev9k|%jMk<-a+j`W@va4x+y{Hfe-nP8j)`J)7x#Q%iTpqMr z&O>TaHwWwEMmtX2F6Kn3sSnDl=W9=@SxJm-+AadA4Rd~&bu4+QEDYHN4K-@C?k9;) zXpgpi1_ye2eM9emxZlT?tj_}D&iFPBwuHyjMoJR#pc0X=#d!pX&L zihnq5;tn}PcWit`I^O}ip<;F_2pRX49P%FR=ChK{me%dliP9W~nr2QyOr#>R&2@V9 zhI~KCbPb_qRMQ-)z4x>i9e=Dw*J9`G3)qrq{AJw&+aGzr14s*C zFjsZ*@5N4Zqk5*EhV?05gohU@Us&}_FL;J($4YXS|CmUazC>n9U{7jxwp#YNMp#{0 z^S=EGtfTjt^Ey_Y2ovp)Ehteg19|p5oapak{I=%*LPzYfL9bBZhh~1BbgTNj*-{;q zVSuJ2)%=&+@k%Q@Gw?!WM}YS3b5qP5a$?AKunyc8FWs@S>VZIx)+Gfn2QZtQraDfP zL6e+$=n(x<(ycs8=(V)+w@D^Pp*z*musT%pWPHO`TXOx`*1;s5JDj?-tm=efXTNf< zR`F*<6eENUvlmM}fydXD%ILd^eBq6iAuEzNt=&vgAsjYlW2o=1_2_)fRa9UPPg`pD zR<1T_!fM1_2V4_RPFC9TZEd9OOG_a4PL?lU4$fL$1$H0&cG(GA*jJj_fWZZkNxK6r zjty_mf2^nPIAW!IKSF&#ZILmn!f$2|AAJ~?yrdzr1w@KopVRa*?uo35(Eou@h|m>wr>+U zmW+=%7Fr%cS?4Df@irE6>g}Pfw4LBzZhSaZC6F4dp-deVI?y=^M%1{jvS@cEy6@RK z&rd3gt_yA6f_bCp^0UPDt8(SvHkDy%ZY2jvU*=l4;v28!7GxqW%R5X1+Du7~9K`M8 z5xHyU4@M=DdD{_TxrsBcoTsU}i6=u(=Y`4}PHF4BTc7YVk0D_jM}xd+r}MrGwLL?` z)VVEZ2)YRqwD%(y1Lq8nsat*xr{vTGOW^G8kEn3;VgVB7-h$~K#*SurI7CjDb``iE z#axFo2HB0-`5|i^=WTa~3IA5CpGA!+5mcUC1&w5pIJT*|$^E0FZ6a+a1NNJ_v2m`J zg|r$abpD9OE^z|mH4(iKFi7vWCInxaRp}a*R5n}$?F_?7vI3o{aMI% zwF@9aq^m7kiW1Mtia))aSs-kCcq^F$YjGAlxZ~ZC((W^Y7g~?mT75pL(C|&lW=?}I zvp?&glF#=EW()h#`BnV_FXY?e;bsOE;_%0@x6_-rcCj;d#TKOH9BeCikm*1|WaS8Y z%%~zgdMj&n;#*V0aJlLHW1cV0Rf_npvQ04SjiG4!OFC2P7B&!N<5idu0Z(l3pa5Z@ z&DakwJ}eLI+u^`AlTzk=#?bebGawK&sBG!=Y zyBQuVD@O(DjHdX;?dYf)v2x*!qs=4}_JE^p*$Kt^>sRf|5jxi+4J}mPGu;QG8T`iD zZ84tH+@|#bSIJqKnQQ4}J6s%DBJVmkGyOX@BmH9ocah%n`=#wJ$&L*wetT7@?4Bq$ z?4w#dzMCk`tQyEuxrHx!{8sGPN*02ZH+-ghcZ+0CA1xxvF5W5K;7nJg;TTGS8VY0wB-Ezl#l9c6LZ=Dp0@gMEVQ8G;~=dt0c+8D{fI z*o$M0M5G#9xl&^Ky$$`#x_hf&j_;!=hun;CiZtPo>5kJV5!g7+P4K zu4`nqY4Q69H8_y1?QEblG|VLRTR7L156KgSM>E=}R>O8`+1l>g?}V~-+V!MJs9gZ~ z`x3>)Yny4}@zRyGIy4{NUm%S-1tm)*wR?8S9F)0jI^pqhVAu9N=JF~x&4si`hPHxy z3H>TNw8YjejS^aDj}Ctkn!X82#}l?9P1X19Z>@4 zrZ3)SE>L&wczqEbDr{)e0Sz9!IIpS949DF~kZM@}wlh0SoqiqUGg!03#|O!;gKU@= zEk;?D3MHwJwhQn{o*WtNWKt7Aa4@zc?=V>=_&*HAkKg^eud~av8NTEeA2Si+htz7{ zJEI{^&s{cAUBWlc^u_jE(FMGzHkh&xREg>qEU zD(C@Z$|~=%RZ*=@`}+tPSA43G#y=Aub)z(&f-~C8rlP-F&nz%>*Qw&uD*V9Q4c|AV zZ^33bd-G^W!V@0FUQ%QYwXKICQkPXb*(zXx0f!GcA!B;l_=&)iFYs5b(t?0U;q#Z6{hawanveN1_7$h94d-{#uX9%}fh_Xsf{fFl+QxgvE> zYdjr!1U2ul@Wq$N1r6Wx-CMJ>|8Z6ZJD*FfR{C-}Yo2DISaXriBT)9*zt4NlE9#|e zr4F$L;f=2N)`~=#cMnkdetN8e2uZk8FTXoshx0UyI%<_B2TKzS>FuKou#XdBne8rlgq}PDDnJ9+SDXANqsSW$uI~Ad5AHZRCXS*=ZVb} zxIXTpnz2>$V#*7-D^l$wiA04O9e=jN z18I=@Q^(&)z_r4#I(5s(jeW1_jp-YO zXTniA!h?=$0%3*chpF&~Q6(L7OIOPZ2b1ClLEmS+E_p!8+h5Nh66JHi0E;H5DLcUD($d+B09C%b_8_n5$2Gu{RuvQG{Xmf%Md$&VI ziWw_S_~H?lfWB6ApeiKrS3W$Z%R|qF`0cl9ke<#ur=zocw$4wKGNlD8_)2VRN2Q?w zerh)?i6tNNir{H)jKnKY;`bvK{;k-Qug>3ITXASD{*IYuLh|DGiLJPeCpH;jLgOgU zKdmb?T)%ba`l7~ZSb2R?c5K8mWxc734d0l?QiPPqoHsBIB5ozSwb6JX8fJ*_pI8_W zbx~6@Tb1Z8Du}OWF|x**k_0_$YsNl}I|i#l??=L;h z6+hd3-s+?`Uj8BL;`=>#P*IY=YAosv$C!QR<|tYpgsHU8~O&W zeRPF)l7SD)G1&1ms^dJOx?zn29=p!XVF}XVujib^_<93Nm(i}A*j>pR z1cq_P&>^gtpKSRq__U3{LhYT}C6`K*5_UNn zxUntq*Jx$b^t8aqHeA|k@3ZVibkBkDhF_zY4iK}q;_~KU=oXbb*=Un{{K+@R%1}8Y zzf@Vq-k3e{Je;*gwMdQQ@wyIsT(jbNezjRaMOeCxo)|K8crfy=9J!ICr$eT1mxHn6 z+lb#7^ayb?0in_$h8QI>56{Yp-IToH0B8aLc4{1ijFR-yj(En0o5u!?2uEhY-#1kW z?a37N3-t-EXgLm3|2A?Ku4xpNqCZRQ=nz`+=xZy7N~LmXjwc$hXxvK(+C6O6?%a$? zx${Gi*EJv=w(3Nc&}WC%@Axvtt4OvWnPS9`WhZTTTgVrf6o zeWG)y+MiO zr5cmPyLA1)lK+eavUUy(;sfmAJ=A$W;)V3prf82u*x|xMVmgc2RK>2_#%m3Hfq1Mv za=Qw99eUM{b27|f#IdWP;st-(G~&N)TAW^|6=1~t?lyMw%fc{ol}7T1hj}Ce?t>nT z)5UeU9QZ$OV%=N%m?Y+})O}Nz) zwKClAn>j#J;-EQUlNCh8Mq2+EASFZOsmWXnJX+e9f21kt_>$9ro?LHeGriH<>Mw9^ zb_Zg|Hf6ODo>sk)Hj@%tZaiLr!^Mw!#xr8Zi%-f)wWlC8M^C~YN6{5*(mf<*}bDTQgQn&9xX912?Q+&|Q*ICLvR6v{JdoUF_3@lX;|$;w_4gwe<%Kj!IWA51NOdzC`c1Y!HPkwWwxLEP@1(7K2o z#2XbHEGPJ-Ezsdmq7u!Kq|%-=qki3`8qnC?4nwNqV0u=Vh%ANX}u0nuz3kP-J7 z6J;DpQ+2qzmaQT*P_Wa(dyUbj&Mthnl3mVEi>)bTt9p;iK?@=?n%=QR6d~rfUu#jv zW$1P6#y?)6=n{P$(5m9rh3-DvGoAJ z){BOASjj)I#dNAJg&LRmiMm?ba#Z<4RlFoWr%zyP!9De(E|940&v|?-=h66Z&^V+c zo!&1$G0Q2|Is;4b9b4{wuTjpvz@|>8uyKwNv^4l)arlEW#Dl$_1{Xm1D5+JsYUd1x`LxGZbSqW$8ZG^kejzYhBxz*E>XijDMnGa z6r;Nh+%HOeD+)4N5C&AT)^eGHZ_F&uDkQxZg&iAu3VY;EP6`S{6$?HZU?Zv-hWx-PS<-%HpV}%JYRv^eO87iCZs&ZI zS~4ArOoB&xc6<$Ixl9Wn#4Rx$l}*K967jksGg^_fJ3$N+QZBAXmHVpH5+W{Y;x_AV zCyF_So}CJPy?#yMa$Xw6^aj@9yF%c#v1;kdo7yqwjCnD^JfcI-ZoT)D{=AEJcuO2x*WWBz;$!=-z+LLn>K_lenx*0!>CTww*ox#Qv9*jaAO_r$R=G2o3AtzT#!jQ!-QaE2lQ?fA0K;N9NcQ& zrFY&}D%n6@594Og(s#$HM}qgTX^`?~d5Vf#nnc2i#yYbevBg63W@!yf@%pqBme8WA z5ag3Zd5&Q3$xqsJ;j0b|@cD)C6=G+>YSc$Z6=Y?&yJo7xH`mAn;8OsXCo)=k{B!zo z_`Sw%CDub5hVJ+`oHx!A=Kg0*maYtVG+poHD`OIqO$3)vi5U|U%0!v4?e!v98gJls zVyzCzr{z>wTu$BTQ2eX{Er4b3K)`s#q!~)S3QUGe%w1qa)fodfk+r+tgdc>p-A5Be zoc2mHEi&{$6V%>dE({t2dYT!x(P7tV^*VDZ5E9P#oQt8vfX_V5MhwGn?N_Y;lsApi4?2NTMbtw|R99~J2;TD-(AIs*tCpI^73 zBh3q!Q^gy$U(y~!76T7Lcf4mvh#WyWodt$WpUy2}#mo+-+xdQX?JQpYkzo*r*zAAx z8>v;cM2YK_%f@(ivV}d2Wt2l|4K7_-D;`UQQbRZcR` zFu81N&K>tL|JP<8R12f$^mg?!XAjK6-&wo>%+XePP&9)KZ=w2x(Hj+2*m7U(Jx`}u zz-$j4N3OV+Jz%wv3$3;TBu4=s6G=|mQO=Th+~e|v^-Z2H_R$+Dhri3HZTEpnq?7RD z`tQ2AVs(baV0>MUJJRBW#*8B&$%?M)qFZdAsNBBX@JPzdY7gG>Wx*vrO`lqos9|U9 z$MR{*BJP(rYCa=>db=cOSKLXGYk24Zw09V5Lwxazt8#0#j`59iN6pIn`JBuB>amaV zb!*`LhDpmsmn?q%0lKG}e-kARTQ_ zX;;hZ4NFp!okW8(Iq!DrYG0!)pQC6yJ4@q;Z*RT-+7@%id^Mq zNTk`A(}JVWyKL4l6;Y0c7g0^xCAP(E$tp$wN8>dtsW?9zt|jyd38XU!{Di|mNgIkm zu>wdHdvAN3yJl($9EzaVCZCEt*26btL8dyt@8RdSqUBwo*ySnt2O|XJzJsK3b1xX0 z=1O*?Gp{u+&)Vk?miv@W&{s!iOuFG(>wyqkm5>+a4&s^ot?I|jFt z7j1V5rzT}XW>NnCYn@9ZfP(CXZjU)CCGX3dcu)fXA1(>cv|8;PcZ z2xdYC%AA^iMpF|18n_{f1{WlIRc9K{4b}5dbc^<#Y)9mttcF*l1cZ+@>?29{O zgeMvmUnIft@7?6Ur7+a0NM490zKK`?7>^x=IcW~Sh?{o&1K`l()nV_Y_dez z>f@HOx{D9ZzX2CPlPMZz8$0E+y{gYBn-B9@SUU8`sa0{RqV6j#8W+2sLhlOQ6zikQ z0q%eHLfGp7s-&ZLD|z708-bif^$`ha`O<4e0djAm!3Q_|PPJzEHKHpF!-D4jbWblo z=9u{KrXbdpbf2%Heldz}$+gSqCVv5e24-X>U-Ly_ycS$@-j+N>H&&G z<jCfLE>=8Oht&Z=vk}VX@JGKp|x^BI`Uk-^(d*-U0uRSKTB^7Z$iw3+2 zq=f{IjGzJ%nDc1u{#b=68cqF9sJ;PC_=`eo0Ff43pom;AX_`gwDwz}G&bYs~?mJrpDH$o% z3OYC-1p?!75_=LuW8y~c4EXm_^fsqntf-~a^~5juwU6`%nIag<;-arKO9iMDjNuh6 z@i5Uheiq0r#U!9afX%Eo6AO0iNcC2kW?~O1299bhdQmz{vi>3Gp_(Vvo|L z`1E~D*nNR?eTk&vd3W}tfRj&nlZL(`V~~F{ppvH0nenHaRg3(EDk#WH|NWsEVfo73 z#`AgJm|o{Ux%kE`e43_FVC>8i#2SJ`fe5VlaNPlCjQk90C3IZr$$y}q@VEUolSNI< zKEK95{g(8;_z|b*G{nH$oJ_ArW-4!6WI^54JiBAhDtfBSHop_NwowsJ47_%dy=`34 zzH>?mJ5&_lwj|m#Rv-V(L)%iP?CSU+1np(}VniBwYX9hOcxT+edrlZK3c$PaR`Qt{ zXvx*t-Y2hdJ8GInKwVZxO-*w5!&*(UEG_hL33alzo^g)Nu%0OgSfMg?on*NIr8|_N zQJ>^Iqt#Jok;c(66dxs(Xf&iS|D?e`imr|#L@WCOWWZZ0{d%`>sR7nZv)+IOw^ryb zE-Z1|02Zh$&|HJJQo8rhd&z0=Vr_aC5m<67*=~1cR_gS@&N#>M#;oslr6Lqeo%hIv z(<}2jYT5v_VBAi0LcsSdh4_d#D@TiuQ5MJ2nvb+nc3Cc6LNg|h z&IPni7@N*hL6LWN5Bj?TdE&z{h{Eu}V_(ySjew*!ZLBs)y+hT}%4&V4Z-CQ93l~Ay z^XTQr4S}wGwbKb9jI~y_j%Z}sgmw*_itkzit$SX&=$D_FOE|J8@x(BdMI&CE=m zdJFtK%Wl%XaB;>Z?qCZqBg5~=f48@2(s7jJWIDoe4ZDwqk!lb(kRGTrhS*{9h#I@A zETqp-=eJ)Gxq7bU5K@j>(o`Q{uV!om_jl^BV)liWr1K5>00X``VehQeuyiR?9k?hH z9Y%+uyo~5n$+zPhMnHgQ1Z2!mf?Z(DGLN9AcTBd3?N7NZS3x=MqJRX)iAmvzt`#sp zg3bb@OL%conY-HPy0B+FuqgYq#@;V?JSescc)^$o?`FNR9TC)K8-dE}<^T}v93fgn z>k?rpef&##hq}ocl3F4w7<4)H{K&Ikh9O@ndEJCmBK@XfYEjcDeFW83qkr+2ODp-z zJLuzF*3Jj;6GZ^@kq?i8SVgZBF8}<`*xQRbWRo!B-gU9HsYbLA!(i@=;!yFClG82h z`tuPk-Cgz-w=r-_A&>A})gtn9+zbq&H?Ae6izs}hwPZk4OeyKkf@~e$3gzuC+4YqY zy@_1t%4&24PNoTumfCGHC|~|8=Bh}6zcX-EOtq)FTT6p0szBfHT`n~!hRzKT=bN~Yk0{50{{B;M(f&@oCyETINB zQGGTcbnuWybMh><35b2A=u>_pp-<>tkgi3G^VL~0XPCjKDJS0awHV>+CCmz|=)p|G z^0`v`=aSQRC7F7=w~}YK+a>r$&XY|h=i6IFwKAR;0VSHIP$!82Pf5U7%M&;LrRynp z_5-f$nVGn4Kq0BZ;`zYkJee+2?HV=F7l~@Y99&ATN%~lgwJ(zF%Jri=;AOW`Wg}}JvypeB| z+I7bh)DYGhlPPX`)$MwJX{Fq0T{MJjyYL2t>h;0OG?>$GFzT4LHDCXRwF|C_yR6%o zEhD@(eL!&AZzzv@lXh;>^gYyip1M>9U5AOL!^9vaMjk-f|CZsY0VoTPcpPc*Jy)O949HHk;Ju?W2Pp$|Hoqv1uAG^ z^2wil3$QLnv$DPkyFTgZxU6>@7tf}4cdD|M4LTVb51;M8)Ke1My`T?zJ{wg38H%r0 z^eYGPJIertoRoF8>0LI*W`x@gVw5BkzRAbyFM>InhDR=yW%>O!PKJjVxTWCqt^w2u zd!?V7m)Ox%h``c1%2~Qib^d)!$SVGN-HWE%V$eG0-^BMT`nx9O=KbKvNJdUqRz9cg zp8Ortv)Sq%W9LJx3$R=~PZ-OtP*0VyfP|h<4D?{p#q;}xv)=<;-U4O5j-P-tiC9-S zz-;%J7P|4aAJr+~X5fdFM%~ax0xJ}4`hh2<$A&Y{=r+&4#ts~dzom1X1}N~+Rlg3A zQu)9Y@OfqzyDZFIe=1nn_cM4zdQ+J3?>eAA(COLR*W{|OQ%C{bVX3+>FQHac=Baxp zu=g_BkJh#p$lBf?-tapODoi$W%R6E3g@O(x*xRFgnOWq~%kgpjZG=bu5C3+Y4a?oZ zgItwunStMoT3*{1DrP{!-a0D+4Z7Z&bQjd7LSy2r>~k6Ih-W*$xGK0#(W{c)YKH;O zCiMw{<_+kw5IIhaj7>waRI<|C1*pD~wtE+N!cjkDAFX^6NM-e*E1wQiBB#GtwT0(< z!$AKK_ozSshF8yA1C`P?)t5>IuCOhCBYfmrF#q>P7H)zx2^$ zBIiH^5NiM3PpLcIJVkvL5uMotOi)H%O?XW6n|zwrpe>@ymrfFtwz^nMvD!Up=r`^wLT}-_f zti+8cZrF(RH#g0-{DD9p?Yi~Sch2f{Px@kJ|bsu>3@Rd#-$ zP66X!aSf%~Qr>vOqCU`-@|J@s&a;G*S3l?*JRue6YqW4JO3Q{iN@V%tLOW3G1je~? zKyX(tkuWVOzslV*G|^<;ZEkyRmCT@{52d33BADp&%caFUw%)t3nGZ|LUI_K1KXE1h za~{W_J(Q}m?;wH83(aJNo?8w`5TW!L?u&(qpC9#eQ2v~nExaj}-8Kei9lv*~^K#6`Sco=!WmWYcuuL=Rs<6iFz!B* zP51zhcel8s?dtI4+61i=a#~$pSd;}fQ^=>;;tIQbHVLRFjqdIxi1=i0-WJKZa~0q4 z4CHv(h$eMXMz@QM(QQ3ns7!758vBr=kT=|ez4r2J-aQX7e>J1;y5pfqG9X9xUE44n zQ1VHuyrAaCZ9>k>W`WBb4NBsb&kMA5d9vQ&LN65BDlo?q;WCe|X8pGa%7KOq(QR4I zFlnC2oAmEu>#`^VYFFmru9h_@ZA)v7HrJsOt?&r7Gj+t4oP zd7-V{i!rWkl$>GUSb{>n4zU)WrG57)KT2Kr2)A$v1~d_@3@r>))e%of{u?(VH@G2M zPUr&M1uX)AjA(9wPc2PlQ8nN*(eU3hi@wK^T|Fr!gd5Z6! z&lJbMNqkYrK z#_Lvbg>mfh7R0S$8VVVQJcAc-!p%kZR|2A%^ex(GUbDRi%{p|UCZ{;>qs3CwLW`_T z{Cx$YUzc?NT|Ey$G;6;3PCzq2n;i}pxX+k>+>)(Vy`u1rPERY(X8!3RSVfp#wsi{V zlMw^>_YdH4OU|vAoR=bZNF~LwpJ?k?y;^{O;a~*_ZQuu=XHl) zKSuvK3$SO5zrO6ED;(W#d~d(trH&OP^u;QWoXQzm&9O~pn9d3CnCy^0aBu83=Cv{u ztvn_rbWDhy^M|^PXZKa#Yc&3|!nIS<2UhOeYtq> zjOR5b6F-!B{lVM~haye*C8#(^=VnsNfqJrO&@uDpO?L+2=_oVB)G)w9ksfUCFmTe^ zcDHgv9R~vv;tnq|kfU2=RD3?b_fUd*kb!9m2t{J69 zwFwpR`8!34O(lYs=Mge>Wz0$5_8FiP$F zWbCGj5%;>&YR)RDUs6%5!3^vd1C30hu_9bX4Aq?WAt51)g=>h;-v?=-FjMuH?buI)nz86$@+{h z7i=Vr>$Re+#uu!iiFzaOuZdAttw3WIC$>idWECk9aPkMwJubUoK)$>W;p_PwV6n-{ zH*=xJlF&hq{{p(Z<&qsi_RZG?4Tdg8745H@_oN*rAq?tah*h_J3}2CYmMDK2oZ`IU zESB#erLeN<54xzii{qI8z4*rJkcEDYqO`>ONso>9q0S=Mx!a@#S*ew9TMnw`_QEYu4;c8((|k))rm=7c91uc#;XpFS1et^el3QDMg_z!70%2-!Qma z)%NVLUew#k(S08&OusMb!_mC(VRqkVyR8Uhw&iDh5^e ztsFa6S6{Q2->?^?jZ<)DqI{aLBiWXH{@?aMX;3{V;N_t>6`e!NIlH`x&seV`SSOUJ zw4zl@z`&zvUjJ&Or@gd~9thoy`MM=UGA3U79emSG71Ic(`v+>FIcAp2jkZl-QJ^(? z@@SAJerqFBSzYSbKQi;m>ZV&3)z6ucAUpYNi?iGfD zX@H`AHp{YoGGwVe%{~MnYW4;XaX8vIWTFMUcRif$@tvW#};i@QSn84_p<))U|QM^H9J^z2uq(dmMc)-`afg zfF=fLTmoa>UCh5#uie1z2JRN|9SHi6d;)AhQM#+C*mX#96cWAQvgt9eAnc5^|IVRs zeQC1uje{TzDe})Mo1qQLbO}h#_^747f&=`_X2(A2+SHge1}mqj67XCsU_gpNt;d}% zYCxA%cH(^NCouo@|r%YV?tKxq^0ND`IqT8h`yWX zIY1gUgWO6itz1WKkki zUB(&C#=RfqQhNngDEdC7_07P%^aN_hfTGQ`9g6YbAkkdZyQ$*C3^A+#7tc zyE@K3FC}LXC&Pc)>AjMM_xo zyzbih*_ZiyX~$F%nrY*jzTGd#Gs;vmIh_WNFqv^iIdC5TS&ZVNelRb6b{1d$#%vJ1 z=DH*CVujt8ruGax1J{T^ml7O80PEGt#OcJl^ex;e;`n!IQ=LsJ{I@+lt6`pF%Xwjs zF&Cau?R5tPjAUP-ptcks)D_(`->YMEc~q=$nQka%fd86x<>(KWbCF4hIR6vPSogw( z_F7BB=c8#_su{Svd~KqYDg1$8mDaD5Ad;+93*HnbtrKtrnEQ*x(~5;-*9BCxFR%LR zYf{mt9t$<@ZtCfv$+UyfL@mkJ8{X(g+LKPt3-f_`LA?gHRMNO)q0SFX+$eE;v3L@{ zkg43!-{$ixJ2MHqhG*O0SyXsk3vcc@+&%D91!}o~?3#|T;S+3nFnyUGXX_y*U3Fkf z0`vw%%2b?T+gC$(6{bPRvkSta43m>*F%L^5Eqj5|ZLDV7`CNYRpv^S_n!?4GwIR6U zIT{gXuAkTAFDY-CS~ruD>9ycgx&|r2w$H@tndN&Pel88136D?T1~|^EI7yU>*m3S4 zp(fEo7fwB*K0l_wvTaRMhJZZ(jy=g*H7svmdMs45{`KXRHsd7g-%M#7z?7beh!2R| zk(*hhQFE|kY=0U?6Mu(HzZLh`J+2|en-ll`cd>Ta0jS(RFwL9ZZb#%Y^~gxF?}8?Gwlr>c>7;MJqd-(8=| z8&4>DuK2h%&rJ$>C)@SrZ34sYoV2Fksqk&&bT1G7f9$<=R8?CS2daolNDBxE2-0zo z5Tucm?mmEsG=~lkDJ23D(jnaq(k*$UK@Qy=hY${pz}x5-_q+G|?t9~nH{N(-JpVfb z_FjAK-1*8fKqWe>bif8z!*{Q4|_|Bp=R_cZ>vtNw4GL7@8bY^*pbj61rY}9Ytx$8Y-I0RM`$#0U=*z}A>y&e?{~u?*?gEsDda^w~{f9~+ z!UqiZ`*swRkn0X_Ipwctf6yNpEP(#$PIdnGWB>L1Uq9r8fYG`%SB2RBaMvFn_vlGC zN(KecOSSz}k~jE&4}@!01@vW?_ekyh5syD=J#QhPPjkapG(zHkDYDcFK-KkuC~L2a z%>L_q&P0IzaU2Y3qW{%Z?QH^-TyWL9FNgm30nl*QZvk&C#6Y7>^S>UF04VKmTl*jR z|K~h$0KI>f8vgocH2L4&_cs`SK;<_WzrpzLTj{rC{FaR0lJVP`{M!DI8VR9_zlK?=RAH(#&5~^EgAoh(0-R*H-Te+udaGk z6rTO_tlzDqyA6aL69G~i-%#_?@88VQ!o|DUfgLkmANZ71mMf64GdGZ(E+&^<&zHKbSL=(Azg8TLc>Z2Ps|JzR`KGZ4^TgIgB^vu7x3b>ah@`jHr z2f|kwy0yE&jSD7 zP2%58TNEB%06wE4TRhemYnd^1~vWxl+dsV#|> z0uLYl9iHLhC}<$`g6OFow{~dtC$G)2L_MoLGn%>|NH4_)&|0v2XP_r{%HO@vO*D7e z8!fbkv8@I>o`ccr5#@@~YF!aJ#p2J?pZv{@N|xx4YG?{KBblsdD#7RlLP59w>yrOk zfXXOfJzJTC@>(TTdZJ4=GoJn3(6T>=Ui^Py=q4t@HAG1>_ZcRnhqapPtRUaxa71&p zhpm~*X%o(VxH-bme{ZTQ`aa@$YANc0+lUPh*Gx6M zIikeez+!lWsK7vSTZHP&eV>nGE)ENvDxZky?GY?GSh_wl2}Z!*o`=*GMNnP zZw40D9P#|NjApXEKXy~Q9@!=X+%twn`xUp8QNs9suX9_#WBu0+h+>=+fh0cnsm+K$IOc9CLYwlrWN|NvpR~KHu1rZ z$RrM98UNv-5bNq0=bkf^Wgd7geWP05rv=Pt1B&B`MmLw^R{ZJ@(4SjYsT{30MR;z8 z{)cu)<69F~s_#?&Dfm0pbDrlINtp|La$+}7Dr4U!E7C4{?sX7rQ?(18OY-*@h}i~K zg-l?Oj^!nrlLgW(!NL?n!ehP+0dg=d4=>{ZQ2CU+!ii4dN*VqIbU7i1BA%m=B!^t> z8!jd-y4(Cpi_%m7fYbVA{OAz7Zl#5~^`ZNwXlw9}u-%G+=B)kQas$V{4I#Qcdg~~t z(8^F##@M?%Up55Um@343(snn^wudsLER@r{`18nNa^m~~m=`R#9&;>Q7LH z<{;BZYoWWtHdsuIeBiXXz108ivh}FpocB9VB9gjRs}|bHWLPv~_p=}U=jtyqxN`8o_!>6Sgxr8eeFdCqiVh-W zO^Ypf7VL%>sH>RFqB8xI8l*Waui7nm=coRx^c6YiVA{FOHAjr{QI$Sgva`y3INSN{ zG7HrW?@#ExaqMkSi{;PHKS{l*SQ6NpFDVQN=9^eqNLSPb_Lat{S&nPfq44<@XZfoR zjOv8s<`I(BFmh{VZ}G>W4o@p<@gJrWQLxpq3?IvhDpgSY@ciubOvWtIMeI{YxcfW$_xA3bOo+{2Jow2UHnoRK|t`nw_ zw^cqJuB`Sa0_RUUcQ*D!CCo2Ek)F{#Z1nMnYuln9@zb_+6bn6_zBKNl)J>+rm?P8y zKSSL;qb$xbhg|K!D03tQyJ$yXm81J$N^Cm$gxAZ-qzTsV?d36l=C>Wj8$;SSzAkH!b+6CfPKRXhHKr#MFI70Km=lg#{r#ZXATT~8!*RNF0Jh64keodNdyMndifASC;?&JR zXd80yuz*yhkO`90&s%(vkKH0MCOU5YuAzhDUOb5=-POZZV1E>^$~^`a8uUvaN#`{I z+CG{&2;6cg8X3IdFP$;iuyI=nC&N%qR?r-nGL&vea)tuCe+0 zINOQlM!VB$?qj*614Gl$D%G42(OCcUA%4GE^u>1DKy{{+DkL5IBT&F=EgTEPA!vbB z;bgC;HMC~kxfTs%cbsSThGN7xMaZLj#;tWfpJfOkne++6iTK@F5OOrHyE1J$#Z?hW zP=+O?G!{k8poRmn#KrCCFmy%~pBlVq|l zK7<)-ZMzU00e2K^__h!o#q4K)?fSpC;|oR$pnZ-ef!0H-V#r@DNpcaSLaIkqJ})-5HY?@+<5ig(rjpX z#1LAk52iP*P-QDder6hzRNIn;F$&-alNa^8x^m7(Xg}h!PXdFQI!{?>yz_rpx7p_! zNK#kvtOTosMn7Rw&j#xZaVss_KIs3p%QH66M^&@@ZI(#KHcw`XG3Kuu&n-6BR_xbWiAipGB9S=dy7z!NTx ziC`2RsZ)i;R_Mw%?oRT@Qw_P{5j!M$w~F9++w#6S?hn0$*oP$ocFO99p#RN3>mo(^GJ`h#H$aexKe#ZDsPk zb-@qzsqd)#{ zasK3uav3-1VcMvsE-eo6+*}4U{?4!klrA`iUV)~+!oyJ;^vT}b29vc$yeC?5D$k*} z`a&jQKHcGKrTj>p7ROJY{~szJkU0QJ`=znqkJW?Z>Y$xER>wT z8q;*2;9~i`Z)lD-b`AOVkoFLjm~m>NMdEjrNaOD*BYRUHt5x~RRCmME)Yr;I#(4|o z5(M&}pxux7hZEVe*J`PbC`gfLj$XIX_0=1m;Y>fK-j-_if;LFM_zL3=n2!MV^h#7; zImc!Te&d?NX^?U;Bxf|lvYEr54gTfB6S+@EY0q(n&H{rT)oE^O)AcW(X0DOj*co@z zyh3`ebVcvb1990V=vQ18wOLR&pFYh>db-N`kOWV@KL#Z9+EE;QV60-{@xW+;vd3$) zlhEVKQO~uQ0(&|^;+F)YEsln{N#|+P@RFg4JkmrN8hqi&A4sJC2A!Ywhy7K2(b9AY zv8Uu+n!F`3sN^>&k@!@nt-;WS8BEC$dLnpVgaa!mC^>^tf_#TL)*RZ8n3&TorYcNN zG7z!~oeL9c2b|hG0_z)0;vK|mnjHOv+glT zj3y_XB){Kd?;~0!f@3;hG_XfPb;R;Db zBe^7BJ4B8f5!#%=(*EviCiD(vC~}*#Y)X&y;((seuz8`06}_ z*g}RNr`SLJ!>oTop1$y0Tzs!+#4zBO&r<69R7RZoy=Y-3;!UXYCn-U~^z&geuv3J8 zlJ15m^c0c-$w;9*jvpv@V0bHjSK`zIktBlf*NEp_;e>v8;Um_Tshn!4J{w5YngiuO#71^u&N6hmGpmY>Vy}8Z^&_fUyx8u+W0Y(gq#+ z#4NIDqGYKmkM?M>!}R{q!AQF4F!4uFf(_1ojMJ&Wspb?-^%mL`Q}5hI37`mHHnJ4l zud#r%>yot4l5(?5N{Wj;GqJGAs10sKDhr3-q0GH_Phi#RRG@2{XXU0#?jx%{*Lj<~D5gv&UJp zLubkG3AP?}H9veezbO43{U@Te4S>Ip`I^+5ko?i3?#=hI#8rMe0EcBke^W4$>7Mnv zH(tbhp|&$)!2gr;32uF|F)z76oR@U0#~0}ljkkWmQP%5*1%0t#cWC%L{?5tIxZF*KRke#Il6h2 zShvvb#4R*9ZbO{VKz!E5Q`ew=7qE|?od(8+Sb)~r_&Vs{&a1eul7z*n89vTi=|(Gm zkIDSFM%)O>7v&UrjLz)TJrv7}8cVH@_7DRgN<>=Gm-kUfk0T8nd?BNR2sy6_m&yZyIVO0q}-ycB6er#!LZ-4%~~GRpuJ;6bNmvq`%t* zU7LW0MP!sL(-gAA-XYh0;mZv#Y&&1u3l0x!Pz$ZDo35Tuu<)@vfa*~}`QeG2X`KP$ z^1cqpCs^EmhHXi14E)9>h?!tl({9NW{!L&!a^+w}7&2;8Tp$rf)Ce5d>>2_%1u+G#i@FnzTK|WYVZo6?k zd_gx5mkV<(7L~5JH*{0aPI^9LYTfPN#BNsd8efU2cgZZC^O|3W0|3dObVNO| zY;4sGx~2sh#i4TwwW99lS$rwCxl)y=Q>v}fV-3O-(UxUW^P8vQIZf+6sn${qlo0nB zudKm5WZtO9b*#_(=F-d8K%6i^(GZ&qAK6cF6vvuN0^yhUB0H$))kh)XSi-+${B6#Zg(iT}Z%Zf``_np6vrJo8N2&EqT*p_NI zrfhyuG1X>p?{Ff0cZiDtGQ68A5V*XM`;f0Y>oF#OCZI^vH0IHI3he#H&piIiI8LE$=oDlZ5_J=hZ1s zT4mdX3#MU0CDI;TfWT1vMPOvA88rFGR_yhz32-G8ILu?`DeFucn8k|{J*x4`jC%+8 z1b{2Hy#FeCKvqWWfVfYNEvPb>+Y~@^SyUu&wyi(gY|Sz|)S>w*_a#*cMhJdC4c7_e zFkW`*L2(MA0+kq@jl-Wp`D@X$V6qSD@eM?F5PR-j?_9L>{f>}QYy{PP@Mxj-65qWG zsC1#SX*O=^~sZhQ>T=KAotDg%dqkH^HJcJ994`N6Q=uH6ur$#bS= zK=g<6;!y$g8ne~Qp|Ztdo<7(kC2bV-)0u9h)h0YITCjqkmJ>QB;ZkViKWm-#f?SU$ z&qr46Mi&jL`Afg_M!#*Fs&lm{v8pQ0lq1=5g@k#07q+zvCRak5EBl!Uzr%GZ#hkLSKy@Z8)5V75h`sqw5oddw3B=i8Z z1g?`!5Z#T=`m7^8)lclG9C%9Wx`InGR_}u?DaU5ldB+06zcq0>eX@i)Rx~90j(8`^ zCKE!~da@uax}42dBY8A9_}bY=%8>j9IZ+&Pr*XzGnL4D>-H&{Qq8eu)DyoOPEIatF z%Z&I>{aHSu;XAvZmcATvYI8-qO z;kXRR7=%RhmlDTCe6dmyg%6s^T~fKOIxe^~PVX?Cv*2O{7CrIVnDrmNA2xye^~IyJ zscx7mh-uzZ7iyKsdDwB{tdH=UC9M`1=;*_kfG^P~AD4 zopN)BwaE`H9>eu>i-6@Ge?!Dyy)A=|oTqY{+vP4*~WU-`w{QD$UM=`+qtm_07=#E5t*}y9b0gan27r$6+NKT*f#6pMCR|JH* ze=)Pk2Y;!4K{0Zie$=9CN~T9MeDP?qc!PpwPlL#nO~!F-SFSaG(&4Zxw{g^lwW4O4 z$`e|_#>nUsTqDuun%}#a{lt>bpt7=V4KYio^Xb@BeNthYzxW~uqtlRtiMb|MNWH`^ zyGrBuJ`jK`UUU!V#iv}Sug3nkbO}l$N$2gVHoS?lo{kLavs1*cR&PfpeRf z_Mv`_ZJNm%1jvFoP=|AW0GMd!7|U_`XnEs<>;{%i_aIKJPz;BZ_9B8LV)`1hq}*dS z$9l)P6{?bH9y_8@F*Vyj0%%3plTUF?Qv7s0nlIR+CFokDyAs8ML%WLs*!i*AE^-oM zOvCT6o+ya}v7NMwRbN;WfyP+*+hPZQQ6%}K-EL)kcNYhs3LnkQ6&-_y=iwxrCQ*f^XbkhsoW+`Qmi`{sdE@{M`yPnLVMx?^N^fFM{YdqUDJMaCM2itQ#1KeUmbnf)reA{JAqSdxlj$g^kbJGGHlS5JRW`<4S`QMx^4D7Zw8PP$f6?w|e z?uytqQDc|k{>;+<^1%RV-=k}=tKyWBPI>okVB){S($${!EG|2TuyN7pb z6^%K>Hr6Z=^w4m8sAOAK8qlzZ_exCdwbgQMIgKud-_T>p(p24?zp}aJ zh#9b}>QnG%p1rbnfCYFB7t6o@%gea`jP4u$pu7Uk7QV~DqmpJTHZ^mXPLw~^6R7#T z;ebQ(0N9hS;xp3b}TALPB&;}Jy%hO#*DdnU&3p@zAbn*Il`kz zUQ%~7LXvmPG4i~4_x012>I|e(KoxPdsA0j`*K$)d8sE3=L>HGM*z46wWRr$TTO&LdQlm#+V@dI{R#3=rBKwM;&u0Cz>Q(g*!Y9{`aqZg^fQ-V#_*e!trBC*qH zT9Y97CihS(L*BMdGybULS+NeUzW*!PgPUs(gs%7+8Nc4#Po1*E`#*~(ltM+g@Hol) zR=$7FBElVHaPqevUiXX_&11}b_|Gu{e~wY`zsK+viCdxp-Iejjio5AeD*mW_=oJ2cJzAZJw3SV*Qv{lPrkC7wB`)=VUzR6Wnhzjdh+UTXZEP{ z6d)$8F8LTVeI#UK;{#I2RvW^V)dX)`g!L2*8W@uaoO~3}D;9 z$BwTzOU60dn^6C<9Fq-ShtJu}^v=OX$ausTOMmL0>8bx*{_Cv9^_U_YXh23RgM#7q zf3C?t{{63;XytCSWce|Nr2|>m|2~tSe+|E`C+Nz(D+4I^f35Fde~O?J0M$AR-5KkD zGuAcazSq?{o8BsaGuCx%&BQQ}o7%-qutF3uC|ANLJW_JTMNE~>L7pc7W{@&s}jRg#7 zUy*MAb%6UH1N_Hqy{Yj4dyH>}{dc97*AX%;;G#MpVmN*O_gDa|sV@L~9E6(C_D_)h zxB~x%{Wo-fMe#Ruf06s&Quo)r`~Qy(3wK2!1YZS3FZ_m{o8YIw#RCDwt zaB;IH@^At%k}`tiCZM4i?g9F>)%G>p|I%|JK4>q%B>bnGoSxlW?nFrOc2FV^$RS7JgDcKQ}@m5-60O0z(bwL(hNvuA@a~zJTO3NgZko-Oh{ykMrw-)N^NGi8u9<0r=9?JlSttz7}q1SE)vt1Q7 z!%QXH!L|FJ37PwR2O2C$xpQs$1$JyzbNXXC1O#9{Urc~V@AJfj(SR(P9>zrJQV2O%U zG*9QO+t#bI?Qi8OQ#n&+m+4un3u^&csHsQ=!AYx;Qp36t=H4;r%vF1^$sw`j%;&bE zClyAq+suWrQ6x*kN!I$%^IMvqb}61lc}8Ta-CN0Z28`E8XxuG04GO+4g{SocQCazX zxWzLd{X*}t_K1Qm-A_ro!RL@E6@eXEw*I@Zyhx=%Ukx8Ng=6UB`^ zQ`9Ax=)@@{TE=t=Nru^SDaPE^KkBBreb07Yo$ZbmOgD6Uo&sNxUiHq==dj#jznGtK zza6_a_hu}{p-MT$_voWzi^SU5GP6y5X9#J0M!-D=>X~CR3mQ>n?61#dV%|!Adcu_cx**Kw&oR14AYL51X%jN{dxu7UI6zKp ziDL*4cy-@0nN9C7$pMkeM|SGgPIMn~{Aep%&De{)umCNO#lt9*U5caO*jw#t{I`* zMIZ5MaX?C0`g9B$Nd0x!YA1j(;WfrywdZL9qb4Jh3iCi?Nbxq>Gq1lYeq}U(3-!?~HQSvMH`*qv@v zYasq^vine>-f--Rlw7{4y%MiG!-6qS-Do zr>^vMW1Wj#4t3e{X&Mnotugs<(;;`ZMO>uUmL5ft)aVUQrpGGg*c6q$R2Z3Pc$+Sp<3K|Aht%lx9)~B*U20Nl3pV~~0 zJ0cnylR^iaG7eW+!LK&QpO-W?3#NR3uuvfiW313U=Pm*Zo*08P%dzOW`&NH^)EvHf z>+DQohqJE9Ah*;S$r9!-D^#7#&MX&MRAqlY<2l8x?SOp0QZeDcno$}0JmVeK)=|jA zV{FLO>x0gHSlBrj5J>KHAPUf9m^_zF*pKlF z$jG-(Rt_EAx5TC_g@Kv@?n&%D-Cd7%C%>!j6-&K2-1Hw>lce7VPKGxgbK%R-uzVGx zzgN9F26TcHe|%I~t_P&)t^#A{9Lw2$%-Rt)_))m-sK;8a#ZjHtgLx(YLTc+2u zA8xZB%^GQz>kjM?#&nTw6ybC}Kqmr7L^=PJg?rG_7pSBSrj+Hde*RhsN_T;l27U{0 zjgJ3@tw*zx&scd$qY=#~ad~5s&x&5VtSHF0>`IUo(GKps& z8q&P%h~KBjBAFI0ctBVU$?FrdWvnF4Xh@8{;nQQ%VPJn(%9gQ~DdWqZEuxYSDtv?D z9ZKXl^$=~6F+RAWuhd0~PZ78IA~1l`jIW~TS^6AX*!e@iW+BhqC`q8VKDoki*VI3| zuP`|b7!A~ql%s<-YdpVCXeL#+9f$I@SD5LK-t>ZrDU#7bHsgVa=iG5?eTgXU!3i#V|!NbGiSC@Yo1V$`OzJ}rhJJx+R; zh8j||yXoRQuBox7ovvBY&gn6UQQW ziRQp=>yB3%^lW57;ZtNze<-(FO828Og@s)@?cMal(fSw3GV~9fUvBCsY^T1H2O`Q+ zj1|ZH>*(!pzsTH8$~MpZY4_=$<0%n*bU(u{@Vs+h)zE&eUMrtqzQq;q1y;~OoB`1> zBhLFPp~KGvcnZAs?-A~!uC+iJL+<77FdP4Z7|L4#j0Qp(+o8*&>B<}=#oqa-=^HEI ztM|8#xo50SN(X7GrY$=%4h=k31i;u;vjk}?Of_a?=r~g30^@8piJK+~?9SW}tf&zl)CNlFllh&lG9)j@cFOhIr5IE+|!@9W}^l>K_W~T+CMlTja zirdOVuR=c(hi~;9BKo$kpsn&L7A5FV){c0A!e!dXlD_2TL4R3Qg@xQMG3i$dM$GSi z%r9qjvmUMKS6h=ibe09EqtVj0Ad+DzE-0$gPJjn7S5peDTcwrpT>J8zut7`6psZU! z(5eRMvtcEuw>+X2iPe%tHwIeMum#+d+fq6iF7M}6G74fN{~XPF`{CA%IinS*YGzO4 z(@!cN#Iq#M<2#313fr}c*Ih7&`3tBnr*YKGS(}9Exn^qgsoO%^TsuFMQE=#4Y2{}W z;o|9}p%SmGK3mIt%)G2IRJN?WfA(H^rt!gPSxPBdo_SG*Q}miR)qp5a(V^_o zv4T2uDH)RZ8tBzT*av-5{1_WRy876L3ozoZdf&s@B@fsSjsC7bgF%Q z{;Wd6t*(8KTx72jqnqRQvZ$dyZOnu6Ryvg9qqM$|bn(4-0nN)@Z`gFMCuF#d&N-Gx z40P0=8`c*1TVpF&g^`4qtB5fh`*-M*d>8-V^WM~Hq_;as+IT_zG!RGN0 zSu;8xSrlf=k0D{lvvGSSG4hTyJWYM(_F@P#LKx8Yt9#t^Mzgw4yXh4rSxeSX{tFKqDrlz$klK>nA)~5~?74L#S_Y|R#e&e4s zL4qU#v4=H$Pw2_AOCXeu+NG|r^69B#8%sP-aUWV?{iqq(Ae+8AP?^sQUfhSC80D#g zla@H3#b14C`|tB1qN{~%DG2bzM0?b2yOy=nF8ZolJH#};geO_H88S+}uYQFIy7D~G zF1H^c9UgFHl^&NhwedPBi)VLf!X(T7Za6zzebM+>(rdAa>4VN(k_*QSKg4DeKJl$Y zrBu=1NVnX%Xrk0GqdvL8%xRK6AgV_i*)op4Iuq8(8%6+4Zl6#sX)w+nh~M3BUav#n z27E)iQ_DMtGaUzWMVd9atrf)9ivsCPh2U1s>+~fQUpLdo+B%IkNTRhzy2`s~I~~(U z_Mm&-jSkqt|ESyePZCAx0m^2$CaghDdNaCRu);+ugtMHO1;aF+b*tLL>MI+qPgp`k z>l{)mUg~X(e_C2P;%v9uc>hZzTYPlESX|ptxjq%Y+5tuvU5&u`B)_Eeh|5G?0kUcD z99tNZwkDG~Ba{#WWSa6lslqTFgR18BexZ_f1T|1DzA`G}r#kUj8{8kIoFZqR9_)v! z-FD|t-Ugxf4fYNZgyA@GLE zn-%AiZQ?*iyR`MD(sNQCXg&##aRPIs#+VcHo-_rGVQ6&Ch2+{Pm@mNqFcCjp_rSyA z2p%OMwAV8e@UM-OxJ?YTlU`4>IL{!1m#o?MUwe|#rhA_U`d%c8NnNzrrJaqsmyNEw zMv>di&t~i9Y)?DZUAZ^KTGiTrgBUO&ue&Z)0oC^&Y0Y~DH{z)uUmRMOIvltXG+bV> z-y@+vo2c9;XvxyhaLZC8ZOQt!K92hr`X-#yTYA_efq2fHtCGT8)$L7l%9`8<`86$P@&)99?uWRy1qIb@wswrD%EEJ*X#8FNKyc z2lKvl9#} zVbNFo1p5aw=O;*O4K>>#x#*=L99Z1YQjT9@t@(Dr97s^_qnZP39WM?jnx_u)?j8pM0Y}5U&k)^V)Yu_{>^Pn|%5Cv{%qBOh$ze7!xywvl zeZm%rw8|Lwrq+MN9S8cn=9m$NEeykFbPxvd z(f-tKBIB@Wy#UMphmSR%uj9fjtf8DaRX!wau5GoF#7gYIm?JP9U#fg%yQ?BhMe7|< z4xuCSvmAo3{tTeXGgUlZ+q(4X@#6d?ACEMo*WQ>pB2Rob8}j?9@9e>U9>;Va~Pko zAb*fO20thQoC=}sr$`??)6aUEv(lyy-LzUFXXb2fCuM02cEyZ!reug_GO8tPm0mz* zQ$d8tJLVHoOZ17=LJR~Bi$DdgAin!DRry-6V5M|Fot+AGR(m{W82>c;hpCeSEV5p` zs=_+wvALRQ$fK`i3itUDC%elu zxSiWM_W{3*rZDDTUCaO2ED-A!2zrZE(=uxV|(%ls3h#6NSPYN1X|Ca94{J3>+(h-LI(;>PBoFY9$%xZfZ zPB(9?WDTUw95q({^>vuc={2Mhslf2v^4+WV_8Sb-(LDaGD%SWbP3DG3pBGQeYMnTn z$Ae4}eU`hS_WF!6GHhuy3bx8$%e(|nqI8>pFgPL2_gE&eeC_a9h(qQQr22pj>hE{z z;dn0)H>EGZ=sMI}Hm6l(_#8&>VY24Ly=|p(p34Xy?P(J(J%u)L!?0%t95)9+buwGW zZWL~_>vbw53ZKU;-(2Fqf7i(Wjl!+=BXJCig6&>1e+a9t|G9->qk7c1zDBiz-f&@; zhIMmaLOW*c{v_$uhU2mB#2iM{;-b8O(2qCi%Ect|IP1ex_r^U;n`vcDoxkP#1|Cab3gVdO}gRQtKWT(xlNM~l9mZe-_tU22O~Z0 zlC;b0D|yf1kNeW@-eXyew`cg5It&-S3C(BNirIa6SmzHc3casA=C z3HF1UfW-cl<|p8UQB6@-z2+XxLXIBIB4_Ha>|)22Xyl{=#`gKmdM z1E(NF(0s4-z^gqh4gmMQY<#c(<03MDMIgKXlci*6{L9X%XU*knAg&oc8&l_kWFJG(wj@q})P0SvJdr`XYU3MpQUxdEjPcH11K(drbQZO};J_|*1P z6~{T&^vu>rDrbAAvKN}8MgvW7cWZ-jPx~Fl)$z7t#cEO{6>#Q-Ada9VKi+5hn-q0( z`X;dAy)sx^Qo+)4Ao1)IBoPaH{cc0XM7@`x(Obmvv(xhURZcSE%W@Kj-f3vC)f$*! zxJq6YSr9yMFF3;4HD-Gdy1KGZ6$y(&DhhKSen@uqy@v_MJDGzS$P|^qiUoVWcuur^ z$mA|1u&|lEGIO^WWrW>hFKQyULzqg2Ev;FKXsYt3t0(cCAuOi0ogqx2y@v?ob#L4w zbkt?}@6(pM&z{rH?K8-YwYVKuCv_TMFrQkdn0o-K#u04DpP7q!5oHz2eO_IF=^0bfDEJM0JXUWM>CIhf zy~%TVCY8Mws`n~Pmz>(SJ*B|d8PUiq{~%dRyu(hmt19 zr7KL#gMy_v?RUFAP zd>VB*FcsUH_CUid&njEN(CN+b4#kx~0>mxG#uKH^t3<1^6B>6-c4tLQ_HfE1E8>$L zghqfq#0cx6W8ps@E!0D_M;DQD%LTFkjohjTFT<4JWp!#i6J`YKw|3V$h66oyd8m%# zrRz@kU3qR*{Y03)Ynwz5Z~HrC#OIkR5KLy;`HYp3C2s4$2&Xbxyl+Xv0jV)%zaC%Y zedsv!5{ojKW&6%ktDDz{RdM}nu)1pn|W=74GXI4Pd6HV9`HGZFSAA{L>ii&8pGCtJUwSY!T z>&x>C$z(3KqYdLD%8G#Pt*QPHYD(@OVw|I)ekyX?WW^2R&_HoULY>!dHbRbjS+7pQ zWP|ei#Trju6M(Io*VvJR!zDH8=Jzk3`yO*mP1q)rZWM*<8VSX}qVRBzbAv`y2k~*~ zqOxaJrb#wm98_1wh0(jO>d!0iUp^_K&C3WWn+qLXU*>J46{K_X}T|$ zW?_2#^HYRHU2=L)Erm8MHQg6>ynOH!ck-%ye&ZGRx>#(g#FTawdP zS>|!hEiHuAeaG8};QNr>+3sY|z0Y`eIpW28_$k~cv6A`SubxXLztj={G9zz5i4f~w zW!>Y1{_`qUi^eei%fVaIzF`p&jJ(=;TI{H?+K8A0-_9RhEOSaki1K`^qZwBzhBomEHLiJ#}<#i!) z!F3Zxi^W&2zVTK4bV<7PU*ToOmSd^48}OH8ZiOd)5M&eBy6G&Ng$nqT)k|4~jOFbt zNAB|;<6;7>9@=M5i^~})Hi*f_$dU}WEv*NP5%b`5Rh9qpOPnH|yiwkgY*z0okPnEFoFUi0@4lA z-8s~Nh;(-jUBfU)_q^Lro$qs=^ZWzvb^Kv2;kuZ;_u6Z(xYxbz-IUX&hZ(D<7Yvg) zN+9$&?lNGgJpkq<@%VH>-GKH{{orH$kZ<0rO$J?68+wF4ZvRFA$)1^H^m3=E$v?oi z;qw)vhfdA*lT15)o3sw>d1H9b8FPpeUuXzak#PPr=t6K`6%f`->9$Br{9}Wf!(EoK zmLjqCX$a<1q>HL#m)mE?+SkkQjtPSv`2q_qu$sS!j=SV{aQSSD2VEaLUXXINOE5EdABq#o8}+H2eZHFCC!gIENKR&XDS@+hX>X|M z;o|(X4zn`QT`&*JPVOPFKaF>p!jgk{Kgbz6N*dO)2daB>);3HZIS=Q(@oM;$g2hd7 zo!C@Ow@bN;&eEcwVI!9*VBV>7lcB~u>;@}n(&rPRd^r2X+#v5UX47CWE0Sn-tV-Rs z!Z4=k(NaI6CnyzHxAFP5Cv8K=H&Q___)9qHY= zzv3RZ61*lu9Lx1hmsWAUVxyuLA%z_C)LAAA<#b@fHQ=1~kZeZo!OQpD`#i#U$zD>_ z6_EM`iwpME9@i9KoD7djb;ilC7kd%j=N6zea{oXm@Ypd9ZTC)^pw9C0*ro;wK;c0& zz=^+bi9EPJvj5g&)+$nRJd9JrCIz3Ps))MR`{EvDe0Ry2R81j=U$Fbb5?O!c$cwXn zWLe5Hx*7i8(d!S;9#F=l_g)a-YY(`mSxmJ8?KH#s@b`H=araYqh$BRLB+=Q0qn^zw zofTXEv61`N#>k(NVj(p)QPg^6huu809gVdvnzS8&T3M~E^NQyBhXIf%=J>UAUtlVO z#p)z;LwUB~{Y)S~*tvI5J* zdo+Th;o{;y4{^!iPri0$7a7_CiBhmY$Rf1UN3(`JIrp14FxmQIB+-4oSP|IUUa)4y z;b*|wBHezATV+ewE77p0QKFwfM^Twl6QV%3KOK}}P$eYfDlvD*W{$h=6P6U9y)d<_ z@W<-+M_4G+)D!dhAJna?daQ0O@U{h59NV4Jik(7>^=w)(m3D(YEZz)OvxB1>>&kRq zOmd+vMvOvW&+t^kg*{Ww04vvH^}sD#ANNa-ZtkN;A4CoMFXjff=Xl?Ax$Nk;c*);--t;o#B!?vuXJ8sDC!PhVEk^97{%dqfpJS+ZgLLApYx| zMh*eqMq)fxJ}=zrGL+;w#QIbRP4U@ZDn$;^bi?JTdxL=C znbX!_QDpb?jIYl(3$@680TLD4of%T`b|wBN7A@&4pyyB;7!uVaV^D!>ZlXf}i2cx? zpzsXS!{c+LLz%J}E>>JJqOe(W*^NTk__()t^!mb%T+V72PmzfpQs=b~{knT=q)bx0 zSL`bcuynn~a9l-0ckX}%vRWEl$Aje6!7bhdfxr2vu3apO)|5ySfDESA#w{6+D@6J( zS;r^WpevudR)hAY#F#WOr^-4PKayOH;%n3a9V$J+9xRnq-BdEl5q^2irFky#M!_=C zSE9dJuM=GO=gk%e;dwawSUQi=52DmrUFnx~B82x5;x9EZVyRg-@&YZxS0qNOv{lT?O0J$_(_a{f3tr3_BpIf2CXwF+L2rF z(?E=qlxTar-Sw8});TW@@fY#N$(Thh*<*9iCmeB9ww4?hnQ&L>e7P`E!~EUy$#@TV zT3v@ud)BXeGICq6A4Fx4m#%1cG98K%V5^xNR;o#>3#IZ%RKLaLSYyBwMvlirA|-V$ zzPp5sKhjoF?A5R;z3i=vGZ$=_T;^F#jHVfj&vv6uaMEu0#aIVS_9$5GQ^PK;#(WGV z^U|Dq_8n$gJnJ6g$9)g(oST~c`NVNXQj1vm2LUJnx85hke>Pcatq#mWC#ze=vVX-S zN{60!Cl5M&Lwsw!ytGB|@=uhfY*@(@dfVfAtCGgO4UM=)SyaNDXL!t+M76&- zOdj^x#3u`SOr|+Bc`dBbWc$2d)8T8g42}z(yN`y3FC=M(@m|>XMRFFO)stTZbcYZb z_Y8eJHar0dw!QRJ^EVK|#+Q$gAB|XnuJ!zQT&SLw``YQYox`!4-u7+d8~wURt2c2@ zMd-ML?(;QXG{$B3M5mV58irx3lrDeg@ntmVq<~YGVkES2J&s zHC<$<1aJ5_Ix(I*bC>$aP=8&H{QiphbfM&OU63bgK0Ueda01g;@d9DteD@QxyTZQ4 zyVmD|nM)gEk@DJFE#~PGNJ69p(xBwRe=>{hnmn!UgXbOGEpk%a%`FpJ{J{AQ!0fz`GN$1FSke&f=KyG?fkullmktJjpY|=4yoKeL|^M_@VjBqAKUJsB6ZtPL`yW}*nIQ&j34XJ_JvRr zp)fXm&hF?X*~xWg6C#pj4~NGkiGx+nm)-Y%?kWqNfdtRTq+m&J+#QFWRxv2|RDSO< z=+227E*iL7l3bQ#?3?JCOWrUU#_N4HW!$3&QyZ~-ar21@m()b znC(X*3HM>C8o-Uhi}dH?-No=iDMcBpd5kMW0owS#NBDiUp<*;5TvBO1@J7Cw8! zE?xfkL%XP{9b4?AI7nivy9Wbr;1YP*99y8qwd~L2NUIkcIxX6N)&IJFty#Re`0O3n znar9vx$wZ+i&i>f8ccHf;@;AGu4-{s7x5M8JJ@g6 zAK1hujiug9t@`lZIq-2{M~XKzKC$@JsYPXq5Tr%Gm-{`J?lnxeMul!~SEeT0+r6)5 ze#u@e3zffhf;-Q8HQv;}knWvlpCoJ^5MIjZbmlur+u2=$XMywx;P zjk=9xEy$mDKKjrf2fWU=kBIsVi-J2+WZ(Up`|*vR;4xmv4LDEPHFfP0JzJ*DLXUpX z?LD3}*=zY8rSOF-n?vHmi&4N#PdLd%^3|U^-Ik@-^~<90DU-{k1Az$|b45oJc(j5i zd{c>F_VTC7X-|Ws>1z?uQO4TiYaJJAa{>k0@HhGZKnt{sd@J4=p?NR{cuS$KR*ZZG zKr{T(pnW=Zd_*@Dgf&hjofQ%Q3L@pu}4r64XHk7`SeJ!W^&Q4dps=hNdZ zKF{*>x1r9rXvc%7xpSvnrMe7~kJwUm1oI6urUkkrlG&L@RZBQ*r&F4+s@o5I40(9h zVE_b>EcE$^_yFBOC}Z00MWdm)U{A5iO3C?g{?Qu+@Nyax$wLC6@u^aCCmt5EEYQU) zDv8o+4KtnSf`nC)8~@aG?8nugsncZJS8q(DCEqIoIZ4az)81~8e$)Yk#f9xo*u>c{ z1|PTQo1#1IFvk($y+oft3)ZWj7*|{zWXIQF zy-bjCT#De4)NTX0L70fE6s3=v5sSejEi=GqS^D0$K_y_!88yG#!PmNl-M*_6dggeM z93D7%GowARQxLo`67Ql^aNj`e&C#>OC7b#~duNaZpxaC4PjPt!qrCXplZ>1=eiH0- zeNQA~x#jq*8}vjod+Ld0Y>X#~wl+llEW3J};Yh+^T4?FT(#6fYDqNvbdw*9nxyirx zqP4Mqqm9OZ4nddkZnGv&UF^@V!w+e6khtQ;87_kR9#W@Z1TE(%OYLL3xbNTmtADdD zdzOe5-Q*hi&%OBuSFH&!r5866lAAC|G<*ODFyJ62sA38rM3fyfxy&t>zsO1n6h-5P zE-0APSIYCk>OSrPdQ8JX++8isyT|Z25^WXLqT-MH6*p(CC~kB1E$daZelpJb?!!JZ zPF@d=8Wm$ooZoF_CyA54AEHE8UjC+9x@CnC9q!y#+1~q_ldO~CbgR)vCn3g-CMUE4 zflukLj27A@u^2p!F6Nq^I2VaLJeA1@1JPCVR)^+7QtHLr>bkxo#SJ+lg1K@)3fbKI zH`YU@XzVE<_Y#XiY~S`X*TzWX#%srxyPD|tRb zU!?bAe=id&Ws(y(p(@T$lVE1IAD5704CP$f=yXvYmt%b{SoZ;_c;U!3^^6%6G6fc& zSC!Fh#v{uJk5EHUSOU1P?s_av{4gD{B&8~6^KaP0o}{WE}YKSI#D7W zz$!zRcL=#TDOfyjH?^jZ%Az=4Jq9VKcvzXj-H$na%NaS57J$-!T=&urVc(98C!gNm z3!b%1npo6%2M^=yB@Pi}X*}G!Sj$_&nHybr`QdEz^~&bgrb*lwn}!GkCh=oGw4Zl= zF_f6bX!><5UrlVV(zx06<`D&Wy9}YeX|LYy<@lX0j~j{dVc2UgX3J~>xH9J^)7~Lu zv+~MzG&k_HbOWAb>blnFcJOw~ZtFqJmc@u(+WhhTkwmlBhf&b@%c`L>xszgHNc07n~_9+z@8oXZh_p z3C{amw!LCTGC>f4EcWnSI<8*RxJLGUB>{v_=KGeZA!4qAupqledRnE@zEllV1%D^hv_2vpx4%iQh|;zWNc}9;-BGB6PVbUuNXu z;NJlUAl2fg6XLy}^%+Y2boIguuZ_m!^#@;@x+C0zROe&fJ#cbVD|WapFQ}XN|k3@en^&^S29-Zwh1+6Bl zGvtgF5Vx4u5i$LqtZTO4Vk4eLK}%iP33)Q!g}2VlF3)~DAO%b7CuU;}c8X69DJ!P9N zHBY;e8O{4!Lw(Zohxux72zvJNQ~+aVG=Yg2X(~xRNzyCzk=?9MwK9>(ot?oj<3_y$ zOxsZ&;=KgQY~H&hd#Ae!4xY)})%+z#h>?9eFl!QEjwms;9rN@RmcdQ~-2f%OZX!P8 zC-8)e2vm=FV|Un>P4W-V+(>tr((gqmil}T(5DyFh!AoccTGAWI`<;N1?1gjLZ+zXE z$ZA&Jp7^TUWfq^CUCPN)!R#V@=9n|K^+yR>Ho&L;fL{oA$mZj|l_R~H`}S9DE6Ecn z$)n{7x9{-)JAUqB=Pl(8O}sEU@3SW_$U@Ahm3<~gT!kq3ma%z$;7=!7W`pG7ucMRu6v1<)75p4b7Hqz5dgeBWivT zt|}VPUEtbz^mZ?N29juxvr9j<*XI`^IY$ZHlirc-)|~}JgxQ`Nq*s3ovjs^Y!FLKA_6)?x4BQmD}x<|BTDkKK!Bm>-^6E zUxN(1Jo|_zR+y$v6+R4*=4z|}bbr-fNIp{=@U)dk_TioatXG_$WN0zYZVgjMOw z0qVND{hp2q#;UMKRoJcobw$j3f?Ju4Pui-Fq#CxuvVoxtbrp zhmEIWH&-1!B$vfqr>Y&STbm5^8E15~^j_kNEJrcaH*g^9j+MkTyiH~{YCSoIzea+1 zX@q=|$68l@^MVYR-bqghNb>$Q>01fHfL#J1$^0U!w96LqCev*6ztbJb|WrwMOWo z+p}14Am%8|uB~fy^`i@X<=tibXPMnQQ7cTfGd`{6edu=k2Pdlbvq%Q7pDU|_=`@9b zz3)E-Dw~o2!R7d4soGZ`SSn|Eqm}#@9De{Xb5=gK5?6N0b{oY-kpS?#bp3kelCs2f zI4f*%MM#rirPYnU5uiZ!ZZ~?kR#^5Lm;lu6-VqLfqJPaDHF*c%pxFOSG|N0p3;NAC zs`H|O;XZ`1#d+8-&I)r@&!3kdmyvt$$!^lfi0udeYPS{jC^x zH~%ffc^%HB+t_oxdPG8*55V}(S*5B@-ttZg)XZ2L!C;w_MLHgP;{aAQobR9qK)hFpB)|b9V@D==PHBt@E!oO zR;Ct`78Y{z7|;Gn8IlK9J_i|m6?p8wgI*-!V}oXgjAz-!^39yMwfSAYhP|f zl|J%aS;VGVsR*Ylg={rA$w^8Zy-TI30m(eSX<@=6}FiiNw&m??g3_J^d%f zUAaobF&?UNl1=*1VshYCdFXUC_m6EGjO1Tzu_iUantA5{Gm} z58wU4v@_x-5_Rs*-K-N&hX4(5QJ8)Djt{;jEug6ZEo53z}D3?&nO-P(dDYo0l@ z7!t=EPYL-DRJy6Q2o z$BBV}9GsU!qt#)#bhM=Tw2+;(+?UPfBy^X2zGhM-!m6o}+#1H!WuG5yMJUT5a z`ve{dl(F86?pbP<6*p$hHm8&LfR|4wJbMG7AO^If11zgXjSJoA)&P=+GE0q)6$6j{ z`S~U?L0yo-97GrS=7gjQn9)d5?8>D%4o&{%FgTo^T?6TzyO5kCW^9biCOqB~CGU0b zrnz(#Ss~Atg=*r;mU4ilu|px9shww&g@8(T-@y(5CpL(G57i@hOvYn&I~eeO*HyIA zwd+R5{l;DX!ucG8o<(;gHcW+1FDxm&`e_ARA$6w0JP&?_uRVVaQ70yFtF>81I*WoW z#5$KEQeao_w6Jhn+}Fhe20$bXBT-a~vSbnHkIs_cHqGG2Qwyn7=`=UWXhnT0nlJ>UC5=qOzBjS_cMQ|Xy={_Esl z8@W}!zsoZlk$=jwfcf3*-bP+gz=v_8@P%U99_Y1eNxew@oB7{ZtB;-Jg=l&eeXX6QCrRk(sgOV*`)VW6~Nw{VUjTFX&b!81UmGD^_($DTAyed74t2m;X zWl09;K~uwRAl0!g^J0W_3`0nbwm%4juwhz1` z8h()2FA;;ua=XPx*QK<^Iww2XGNtT{)5MkK z^PMckX1?xR=PIa%VXsm_ORx)hk}pOB^V~ZLgVW$%`tDe<$H2lugqTB*sEI27n=Utt zCQ5E!-{1>3t&We<l~#GxfsP6b@0E?_qh%Vzk7Fgwsu_BnElqn_gCk9s zF)OCAg1t0~f!zuEjt7wisd4jko^@0(FKR``kZ9<_tm6$d#l|p}8xyDljq97U1p-g$vD}}E!-zX{* zI}^YSC8py=5C3GsQ;ps5-pnJ{C{$ZeLT?F8on=pcw>&4G@d&o&N)A^?oO_pB8+L41UmE1=dbH#$_|<0 z!)t%m6<-RJYr_#aHkLTpebNrjs~0{^ZtdH&sx{3@O@*mZ#cGm2#nl?xrjVabQc7f8 ztjhxP*v*>8L%nS?k(6Jmo+cujPTqtz?Dyr2d9pRE5jx^|jEhL0&K`ae@KBil;5|D| zO!Ybb{RQD3#2B7(opZXE_EC-G&X=l=Q*(B`#h!~*fB%cpI^T_7r`y4*!aT{=o(tupyAvHaeKg+m zN?Xm(jwmXZqO*ZB0&Q0iC1y0zi{HPQ*~dkl+_R8qB)I)lvde5{RWILT-T-I zi}#sco<^D1fcD^<`cu?p?kF04V95|}5mG@vSPSQShl)zbZx^Vn0n#~_tk?K5B7$h;_zg&&$x2uhL*p@DgLH+Abb~zy%Q)yNF_G;~Q zbad#;44#}%p*4<_M8c;YNDU4h;XOhV72ja`GfbF^`S4-#p>^R`*+6nzwfcZ65VwS( zobs{UkZRICHe(tJ9-YJaoJYl%TOzT~D~m@=mh!8)vt*f2twM&eslLH{4;7RZV~>6+ z^UG8oLsizRl2^vAO0ZIY zF#AcYRIEM6UN}<(d`TDghC~YsnhJiQ2wYGAV{*);fgl|UE7fF)$lmoz_SMLHX^pFs z7gYWlc64deNKzFTOwW(r5v6L_q{E#g5uQ-hX2yTB>HhVhoWnd;9QiiEPDld0jY7HX6`i>=C06ev zmjTt;HUBmq!kF&i{<9_$i=&<61xusoEKV;8i)+^?G55YTUUR)w*Dv)>r7P)@YO5i< z%oxst4LO<8mnEUh>1it~G~PRfwYu8=-Sdw9RKFQQ$Gp|~j9M_W`Q;VXUTjU(sc&I%W+Phw+f70ckGyn)0Uo|b+qZI4xpaSI!$e_R3_U-? zGvU0^@whwBD5@mKpwwG8@R=~a^KEb?F*$4h*BZ&w@A)cWAiBaducStvLk6WN1R=aa z(h!qGI+tSk4BjMuF+k@mo47i*!*}W;$EF2e=p7tm>p4gYLkVpaPP+x%fri%isu^B` zdHllWki3?nJqr19;+0^2?Wh20Pd<(E|c**Z#z_P20qR*CwQ6A`QAqaeyc)qeCY zLVx`OBpGhLH1-aSdmxGoRVlTnypZaE%PW7imb&B+HH$mFaRbD+$`xg4e3I(cLF8TE zjgf(#ttAY0Hn1rrFfu3~Yd`9FA|qNtC`}7ZC4Nn~pXDL%k{qC)uRL8wRY%gXFrZDkN*NZ<7~QCxdX?FN;kw3Lt` z02|Sql=A1&tVw~f7iy*vTeI+v(xOgfy}D zVaV=8fe220feKX0L4K=WPXhAwsTxvGS{Vd+2j;KE-Zyrg(o zm1z#@-ESx5RQqm4pIyD7mS6lL2ua8Y8C+-#DE3rcrJY;PB(Odq8!lMfsGZw=R#l7; z1wDauZhoWOyc03aX}o|+0-jBe6jw;Rc=ZOMf^htzlwg6s3lX@QR_Y<0vSR{y&YEgj zKSN(L%VLByZ(#&gL6e*+yMZtoLAzD=>+>@o!ev&-;LQzD_3~}o*sfLI#DLwKJp<;V zYk@HvOQ;@ zX;Dj?O#VWu*KpX2^w|-r)I4z1<;4+pEHC6h?KP}>IeS?UvLUv`Gd7?LRgtJ6ZqzRG z(i3s;*`|N;JW}#YrPLs*9iLs4(c5G&Et3AE-L~9r6lxoJ_#@9;vbUt0HhwWN+TY~nO`jURhFi}&XTucQ zHr=~u($02On6zk;w=Uu57QNa?to7hQwLZ9O=DU5_~%#>|OaZtjbczeJ02 zr{RN|n96Ymfn>wjN$MT7f5mDqygTfx9z_7raK3^nw%4Na?Jp+97W;+boLTTBM(l>p^M)YCD2tiJlHYMJf^<+L>Qz5a8z3AOiEd9y@KD4#H{}xY9*H7De^h{<_Q|H_wmnmc=RtU#4cH zd*&8PxC9u%i?$|VY7Ph-b{|sa3MxkOe@i}G5m~iAOc+UR17sKz?Ag8#F#{HKcF22!I%C z_=q+b8BP6a>`^`Ro)WIVO(76DXROndC2mv^2q%u&I_$SeRJm;Gr(Q+Z##?4Zz2=8k zwksLMxDFG_!ZMTiOP+=gW(&P^vVC0E&~Rf-`iid$`9P_8&IVDq8Pt3otaq>H!=cF@ z1AdAjoZebDLxQ8v@-a2h$bsfQ011dx>dhbQ?lvB7y;Kr?6xiFpVYXLM7IosO*|P5{ z5{tIQ(qrC4m~3Yhp6D5Niuc?ZYh@EUkYXStLLSD^-&9y_vPo1eTFWL%b{j&hxyPr8 zAGA_U-Jd%92`KTAdFyT_gjypv{7a$6t*cMN5D7pM{QlzOujNy;O6H#|KH%)fCxUrJ49J|1MyAT8xhF`x0-W?ZOuBaE7fY>%l z-;nITb_?7`zVk?|;o-H|XEw<>%tJkt5#ti7cqOf{KP~&O5D#*{T5=tvctjhW@>ct# zHE3%JD?<+62Q|+>s;|55-~zP%T@A^*C6m9j?=dM0rS+0jhcEgQUe}I4qI~~{y$1ib z7ZZe_rnaVJExWmGI%0(WuX_KVLt$^d!^_n%_f`-NRnD!wlJpc0Ax?T3h(9jt`>Yo}XyN|R;lV9%!>rH$`gUKJyF2>x zL&qU)&JR~!6gz0GK_*Yt3{>~~Ae!^0OZ3Y9U&&-2ZPhdwy$1>|knQWgQ(9Ov%go|j z6TNS6&2-ol)4$y_2nesQIm@SrdZ@zX%tb_5H&j8T`>SXP=+1_|)a;y6!fOaFsnp>P zSlZ9RQuQ`zZEfKsP+%dFdOE(=J2t4Kf4=7?iwVui?yOJs<^~WWXH@C);#|$=T7J!0 z-oA9&vL-eYC~wx72RE-U zo-J2*E}-I2LNgSui;Iwt(^m@0Cenk#JPK2+h1L$I^|d3Wp0+VRJ;*#SWmk`hf2*^l zcvoQjKmr{dtshS`WWc`}QI|H(9yRAT!tihY>N{{9xCIpfZdsw8*@u`yg!AH$$uzmF ziSnTwMfo5Q{R(oR@I-N?rmBfF>*d0C=kbt>LK5jS4+xi)FrVWjhi%9WAtr})HXyk> zZH4bGHvh6+Ub9ya!CD=D;?z{SKRe5-b9Q5zU1G_D>Tp!_#M(B(?EDf|YFOxIpC28i zdV@bI&NTe_QGA7j!gf+6qm|n0?vG?kHw4OyD=z1q(8tZq=Fm5 z>8Na0%k|8pqnguOa~mh?Q|{P-=cbC!=mg)qG#Pxjl4WbteWk+Khi5pL&BtFKEAp0vEExNWJO)Haw{v1O$U8--y4q25OX6(%XxePWAkZI8&^$_Mh59Ybt5@n;Wv3weXp(@m)-0!0@P9>XCBTg79=e&3Ojm1^ z{^n1u3h8@9;8l_z)N)+g(SmRQZr9o3!*4hF7Cw3JS%zip42@f3R5tNT2;b9bTK+qr_kp*UAve@lg$ zn)l1OXP{Tp>3bYmFwoT{Wb1@f?BndJdS(|0S1GeKGcYMt|y1A?!?Nt3xD0k4R4tu+ys}ut-TH=W*nk zuuqk{oI_;Kj8}igHG)2p)lS^B;fcv9$!8o@A<@i!KK!YZ#vC>1YD8`;P(}p)%6O^Zy14Rf6Wp3Z&VD=yqf#p6SvcF%XYm3Q{iI^3s4I2$+ z-4WGm98aN2Bnwpx@U*9(;l^@JapQOwd@C#i=?k<@H4`~@$5lpIB-v;8cRIcT$vX38 z^9-M!AzRcz!BNi3H4>d;5-PFMG}jXHC3uO9&%yZ*p^pj0=ZOSD+a$MyTrVy(g*t`F z<0e?@0nZHU8!!K{uS7tbj;<~l@221@2{wc#dYVY`@3jaAA68i7E_o-D=4md`tmMp% zHc&hf#a!RuK6bvjJHhvLei z-)pf#*q?cULjJMUpLy`vRRUoES)BbH+b&xDMG7hfd}@>up0*=5tFJa@D&>)lokdbn z?OxU@M8s^U!+x(C>Rl1lqe!(S${s7@L_kP$KH7-4txF~ z;YXKLaWOkPtJ2A!(k9(-lnmHrxm%iabpxtg77-evw4jj`)5Sr%s?be`|12#ivSEBxb^z#zh{jngu>Ti zcb}RsuU?Mh7x@x%A8uQcUrgTsPwVCD6tBZ^!+z%FUcEQa-Yd6PR&MYi%MB0dUw(B$ zsnnplO3|>FlS2sDj-(TYk&izb+i*!9cO6s4o2%ftp;7Q%R0lk%w; zL_(tp-f<+H7~yqSSUj#A?@_bR*VkfaM9mKI4};QffNZgj+$+7bPkm**^Bb4ZCz;cD zuq)TM`_Fa=Nozl%k~pEdfTy*F=v>iagRoz51qJ;tPy21R+WhD&97AzWxm*cc{JBbU z3Ntfgy-X$$fUCz*Ct;1=COqthL*v&h4!^IIyB9z2}Ly|k-8>+gT6-p$u+}=vh z(x1Q5&iX|Ye9@w;;@e##WXNG(5G{^=Jw?90J?tAihu)T-K3Pk00yb|Z#g<1sJ;?zO z)B>7p;!=_H#F&$sdD6eREe6uh=^G52@=JL4Y(8Yr_>=oa=EJX%&&*zYoDs4!QK>JZ z`!{d7iVu1M1oVi}k4J~x$frNWZACX=W3F!X-I<;l&_h$SW z<%U05pb<%M?$O`=W7_l8vyaqP<|}ee=y`i2U-k7#=k0=RK^Y$j+kne1WzX4tJSuDG z2VupcIMZ~Qm^L{|L2{IQ$Ff@>Gdm`;O3`F~=xq;&Uc=d^D*N1c&Xub72#usQ%ub8* zAJ_tLt-b?q(ER5dS`sao_;4V4YuG5^H7r zeTCmu!Z%(A$~f^o%E|K9Snc}8;*k=Q>o()L9NzWrTobP#ZvURsNN?4@=Y!-?7-$FV zZ_`&2Z?LI!8Kin`pvKz8<#XSrunBih^-eFJO*S!RcC|&t7@Qj0UVlRU!)lPkEA+vT z>gW6HTjE^ZE6yiep6RMR+9jPD2d2MLQc}iY-DT;O<2%Ze92H zii9sb#M<%qeSN!k6le;c$$4Om*nU!La1OVG3K1C@GZVCX|KSNdtp+cz@qN)ZVgJ;e zl|=Q*E}2S$OP3KskiA&!h7a1dA+cF<_Pq!slZAg91Sp+ETFs-wxUD;aOZnQ5DK(n~ z7Iyyy^#1ifQU~CclNpM?lA9S2vbsmiOdF%h=8Z+UYa(r#tL;{Uh7PDk&X!me^`UiD zsVTO<^4-eqsvL=90;+7gs&uOMQkm+n6NxSw89i)QN$PT_ahZx4O=9Ycln`PwGP-oj zsd@!-I(K*EWVe8Z;KxjrfcE<-$sg2;^V!xnARskvpKdTyN8xkkSrkWZh9XpMf&JLa zKvFY#3JW-ledOQ2owvIOL_NC@9uq{irh#6qX$UjxNx*2` zWkR1u#;dl9K03R$ri=~ejYLI1dr_>LsAr>!X{sUOpx}Vl?X6#xA`PE$7X_c=D-%7B zoj6zOgG9KS$viLgMDnEj$l!b$-cS_JU-SS2cjQsxZH<_0Y_lMQeY0>t}0gjglBw?8HyxEaEFfSWgZv z(W|f3=zKj0Re{n60cGp!#zTlnzgCM}>`w6*6T za|$Xv*R&l>0lAAfKtXt{?ry$+>kinp zF@VWwltVF(Y|wcf5@9#hq^Xk9Q%XG8ygUXZns^PpBhnME&9HJ?)YUVxG26t|kgQg7 zWxk^B?T{N(jZ%iuv!JyGOz)hVIV7?I_Dfh**kSZ40^Y@n%U_L7Ujd5hURscPdCR`t z31m`oGCs+Ih%Z~l&zb-@_AIh@z>FuEK0yhErhPI#!p#}2ND;0~(7uv*5Lk#X;14KY z3uc6@0@Y3jh~QnK|~T#7+ZTGZ=@VVwxs$HY8}kn{ca^J6*VlKQAACQ zJ-5I~(p+mfS9}$HHk}>*$4UOvz1QaAZ#A><@=9+beu>^CzjDqG&l@dZ5#XLJA28xx zdHYIntvXg=^ws3ioxy7=7G@ncm)L^68~O+`Tv|VB@b6gdoIVms+NAl(74^1ax~5b? z*r&cG`iESq1Wsw*iJ)DzOUh>ow4}XFSrm336Qq%$^b~>6yN)Qazb9gf7cE!96Y~WH zCz)!M4I6x$nph$8vv`8%OjBi@Bj`!?LAQLTv6xnD%0X9G9O|&M6?L)-V}z7_I_A6s zv?gz!t&;t(VD(oWxEoF(5|d!_J%%^kSII$9?kBq^{G1s+pT5_)-oTR<^UFfFJRlQyz69)6%U{2S2NScR(?TcJx4qaa_?!0Sb45zH{rrOOZ~af$?n&l zsOtS3O94DapyT=Yqpk1%I)iuD{~jzDRzl1&X9O}+DL`Hp-%r$R_`F@x8-zV_3MC*) zTL=wl5u>9~1+3e4G;I2HIAiSUj11ezUWF8%(Y=R|UpC$9j{nEKo4@Y*peziTz|pQb zTnMut%uR6>+-pj59DIY&=-Dw`)A&ruZbr1=25NV{gGX6@#kbpkrf!DjH=_J+)eP|C zJMDR3@^@Zt<_|zO_OmiCUN9ownmGQ(4JKjfi?_fXfXOMH(aw(l@y{R5v-`Rw)^z)! zw1eaMjELD7I$s}gPFH^IPT=pT3>CWdaGw4u9_3Nxb%E#qc;ElqbNdE^O-2K_dEaiQ zE8UI-I|qU1D#Kl^M)`-Ka{vNf4?J`;qx2)d8%Y1ta|bf@#nc~motqadua_;6X%*&1 z1+&{9*Z|nm>LcxivAa6~0QM&|6{P>aP|kmu;(ag>e8DrquZjNiLH;;!10zsShq$N5 z{AV-#VcB_8;8H1th_z(?vzpG zz>S%+Vzc@867^pfb_EY~AHbTNmed6PqxJs$rvIAgzb5*x7yZ96>3@cS|2}B{jYaq?72uzOtjddGX%oNy50CzRUjP6A literal 0 HcmV?d00001 diff --git a/datacenter/images/ucp_content_trust_detail.png b/datacenter/images/ucp_content_trust_detail.png new file mode 100644 index 0000000000000000000000000000000000000000..5775540ef98ebbef1c761aac3a3d850818b2e527 GIT binary patch literal 23970 zcmeGERa9Kf6YvWMclY4#PH=Y#?jC}>1!o|*5AN>n?!gBqKyY^(-1YE(-uLpm{nk1c z=VtcQ?%h+}z1OO)`c?Hrs3^&xAbv&s^5qMPoUEkUmoE^&&+l*Wu%DlmLvf{_7YJ81 z8SyVQQ$)vKzKDL2lN8hNgaBv5{4iKdexHW7A8kQSNKYpg*ka=}<(a3lA4_V{Uvg-z zTR(pv2RqDhhj7gl$qmf2jcns%s!vR`*y+ORa(!HQ$S9L2OE;M5r!Zw_Mq3hQ$W#t z#~?X5`2eGqYwM9*<`0Gwv>rL+iy~2+w5FyTWAJd;-v4<%4mIEnRkOV`9#u=^;D5J7 zPo;kJMikzO?^3!#6G41-l@0riCBv`rn)ZJbie|&}I?p4-eGeD_2%g!BFY2-29C_O!$BC4(0sP*rH&eP;$LZ&yTH_>ZR(l(%gqwGc*}KYF zuQ(466}9v6Ei~tuuG~yIvk5ScFW57+{5$1=y~bZEEyekDme*ck$KgE2$Y5vc9C62V zV)Nr*=<}Uqzy(;)qGHcfxDlSUz~wfTbBZ)YM#_(mj^cWmEp7P$&Q6e~>(~cizb%Vk zhy05!UP}@|%e|!f>E?~ROff>>nzF3y@T4CHRSfS%fn|g@=ry>6ai2ZyFGx30lJHI9 zZT4Y9P-yrD6a_I7e{<*a$>eUYtK{8 z+x=A7nT+vUk|Gi3_mAH?yU*6q-;EYOM|&bob`!?nmb>vnkTl#QP1n%ac-F0ZbN15v z-UwdOwOBNANip>KtLwfHk!XKA6Tt0w<)Yv2-kt3^4^40QUfs72GZfgrd~}>aeAVDDZk=|4|nJ@LBfgb;{1i4{EOPag+TJRzoig`YHF02dg^h zyQ$MPa4_W8Eq(Q+CmLEx1cl6?xvBoP<*`ecEw4LY@6dU1Z|_r+YEN?5v?gUS zusEfSLCUAlfR+>!`>Q!pX%DzMa01Tg`n}wX^~kbs6RXnJ0t6VBJ0`j9mu(Eqyb5_K zD>G*%Bfp*6Z_g$N5V^X#BBN2ZZ(aR5Nn6kS6XAYPBCh&Fr+YCL z{I{)H!}rDiz~kvzkz&h$aaOSKGI0?~Qj~syh+KIw5c1SuhI}jH5OM?iP`Tpjae2ehnxS{bT6C`^#4!&GjO@pui$fDO zF!K<;O{&)G>|@Y?lX70$-UU}6DYXKh5Q;+@-g8CPtg)m~62)1Y4@l*5&=f zte><*e8RykDoatRwGGA}cSbMK!{7Y&W-c8EK6Z0iS4^js5yl7vS@}*SJNKfo1|CWM zogO=O#CCLhssPyD<-@Dwz1_*F+Bz@y?d}`&Bf&ic zNF+kz?(5RiLaB@i**xi{uM9rv9SLCj+smN&;qnQ(n8eNGFxV_-bykwa&ZuNo4M5G!JS z68!}L{rU@55p=K1z(`>7`*wl(JsN#BjDq$Onq!BmkyxkGq@HfBC)NnD@Kn#ozA~s` z-P-?YWcPl&cg?o+@M-E$ zn4~Moy74gV5@F-dU1|=YSsZ&#&W( z=5Ja)p^BN^pmXm%f|os6X!FS4HuvPcQ8{V;iHY+KWow#*xuQU&#+ord}j}04< zr+d74nE=^)jn1bjIC0+VaOXlu@>`}eo14_Cq}P4-J1I*Y9xu3P%g$)zVfFkt9Ke>d zUz=z8+ub|uSym#jMHSIeX;JX)F2H{beYBO3OBtUyvn6Ti!SAkgD;fQHAkkEb#P1%b zxm^J|k+OV0ALO&Q!hB8A`%z2?>HK=UAp=g=-fU5R8xJwDdms7S_^{)xQPJz9vB-mn zxqsy)DFqUqV8cuYt#kQz9R5Y0>f51O0A6RaxrE2W_dniGzyCm!!}w7@291hX>sU*H zF@ZyFAe9?j{tmWmr6X!w1Lp7!qhjfz1IeKScO}~#+ zR_}CDkOX;kSWmHOfP*n42}n}v5KO7`?$@c?nUOlNx2jgzqM~1~r%ms}LF1yc}< zt`sHCTM@oDbBnSieqv%+di@nZS;~&Ai_sB;W%8R*8Rdq47MKNNty}u%@17`juw&z7 zMbbGG$|RDK(5gONSPc>4Q91`aZ$~`tC-q^g=9bxZP|x>G@+Pu6$2eZPa~6}WxgV=| z_P2Eb`4J{iFU#=TS3{()9G*hxOGWhqP{Uh_EO4(rZmb$Q^^JlV#MdM=(2g;%NzD}m z%2q7CBX|5SgM~q@QjbwF*tR?lh{5md@tEy}VL5yKQFT=`y zc+n_&BaQk!-r2-7$~b5-;uIuA56MSZ3D3qdd2Zx!@UJAd?9^31JN9Wd^u?Z-bsG8? ztSirZv;6f`zSH4jvpHY=9e^ACDa1sj?vaxGk8Z{j9?3*e4Uc-Mu}=R|%_>1Fn+|+LOk6(9Uyg%xFv{Yj>fhJl?EJ7R+a2NSZrnS+lJssDZ|8|nmqACa? z+!q#ydbuoBvyV=;L&wAQlEC?Tx8(Hu@Lr_1SAAo|w{kvBb(T*08lpL$eJ|^Zk^kkAqecHsyjLdcM=A72V-yqD1g6u9s!-g7Bl0iORfYa>SGJ zgct=YMh-%}AOz>6{(9O_P%E3!FqFVFg*XWXCPmmlR-^Dn4*Q7G?DH4S9+^{EHRa&@ zJ$eMvYh}+e<(}7)^{30Z7HR#Mt4Po)7xrNX+s!Ue)K)xC_tV`FcloLlG>+r_hp?>o zh#(e)u=#~vgepgM*ay3rr_7ku=OL)QMKixhY0T}1*ufrES3(&JVnWV|{IAg9?u0hF zRQkwq`Lbwc`O1RO{j%nrMQabRhKh&i zP$WYS*e#ug+i4f?JF$J09p??Mb~|OkZtM7bsy)FlteS0TXa^o1!d4$XFK-L2mL3@Q zzb~WV5Uw)a1o_rN+60n77tH;Eb`Pz;0q!kqu=qF|vSTulIl_@R6(@zSS~lcikj_(S zoowGpw_6ye1q?G08o*bF#;r1Y11TDrGP$Qd~+Y z6e-7F_bHc}lcpNJpTVl7$wf?o1w29}?NsJR8>ytkj-oO%y}$7n-3ztb0CH8i!Ntg` zblO?2HcN z#pIh;#=YH>e$Um@VXvYR`&8IctDXpZs{E&Yz0(G6`Q0~tL_V(1OoX*;==rQn-r_dp zk|;eBj3(mls>O`Qu_cwd;{>Ea<ljvz@LcL;@}8$9Jx5Ku0}CMi==yrRw&KL z@7~Lb7T*HoGPr;|NuEkn0S{?p5|zfr3KMxDZRp>v>NNW@#&Hl4%iQove{%IN78qc$aF(czilmtNn%p4cT0a+deLUFF3Ki5-(34!H4`)i&{D@JJ)#xBGUm0lzvkS`bj&Q zcv%?k!(3+H={l7fl9tb3GTd#iz7UR8Cia_X8+vvKy`AXyQEY0cVgB5=`*>S7L|aB{ zqAb(6J`?IniGwsBn0BtK=0Pm}`w+m;G&JB!6%sMo$cQ+^I8|#e>D)@S9t`?sJ zRs>7@)qlG|GXNfIS}3hPJx`|{f~0G=J?WR4xGzLhuaFgM_cvypYr$TZY13(#1bzd7 z!b>|@on5y}u2(@JLNz0!a_-i!_MT&zUQ~e-GM+97&~uD6=fJ(eXB_iGy2ko>?a8Ed zsb?$X)iXRb7a$+^wAi{~JN^yrw(q>^qx-EVZsZH$L1Guk!_O~D=zWJ!PanrbV!#Eg z#dtQ$7q`;`+FIm=ti}kiK+u#DE!bj-TNH!5cCg2K%gG@-)J49A6r}uB}8+3pK`B=4x@^yY$(V09F*3v!Z~BO+qJis@tO% zA01Ekm+$MW2DRL-58-eAO)(w&%2Ncvr;^BvhAzOIz~1$qVncCHx#(C!Q`-f+#j&v( zYLZz~TI`KESbJz*Ei{paC`1Yqp1)TshWAmuuj|qb%2$Q80Qs9f9gkQH^Y7wBv+tv% z=a^U5FB+OH3M9Lw!tMd?j3}sb7Y-SnpAMyWr>;P4&r@QigpoyR68p4&miyW^A`}p{ zNQ&gdMkwqmN@Nr3V9V9}Ao$Q+)?!!c{bl+CA9HE*ZRhTUFaA$#9i;z)l#QJ5)K|*G z{+1IFtJ80$tVc6_@^@S0?f5gLMUvKqI?%wUa+mAsAJ+D=6^O5)48UI^w>>B=+ zKR@5|)=4>oiynSVBY}73Npzy?{t53^JitOnJ{Q*t+6aKp%rlZt2U=UMNL9h z9CvL?u<;Kk9921aOy8UL_=y84HU^Z5tYGzIkd2){OeiR(S8e2qgP)Oa+Ia_DIZvBH z*9q`c<7F{VqE25p$*-qo)CxmaQC(yaOD`~h*ESiFQLerDVS+t8vwc}dfbhEE4T=ez zpqmKsUVtu+_4rfYff$)#pZ{t_wns3k{D#B7p;R;{k>6+r*(blr6y=p7h$0IVmK8N+ zf0#*=HJdwJuwOj`PzQNw1%w?*qY)R)kecw5tc=5_vFNl==&Z$k0hi#Oh|M6Su(TF4 zE{4Y8JVn2I3qxW?Ad*WBD}oSx8~@=7*>7WaY#~D=aOjy5#M~aocN%F4 zAR`xMo#!_j=LSUo9VqB-5~%7iwD{}!_GyP1;hW%hzSucD#&P`{+5Q&9n;p#AJK!nKXyO-AEE*JC%sAep1Ie!T?+eqE4x6W#FFxnXOiD{x_62 zCo1K&n^i4O(mgH~zMH|zO#O1$;egaX`oEy{&>)qFsx4UnRBmLyN5aFz5^{oHv_cx- zg|5k{m7jO%w*g+x&_n^DBUvLB&g6~jHEm2mdS-R@HR25T%a@D zv^5iBrv#j!ZP3Y-6JFU$p>{tF`U_BWUEk-vTd{Zc(}Dkt-}7)NKYuHdb}{V#U`}9h{vYbf{=b=ex&W;H)58VxDJlk3v>yM* zS{bGPL=@sE*Pu=Qr>8{pQ>0h9<0k$eceNV&1g%Xwqj&jy|LMX06uDq3HcI~Eu+{hw zv_LJvc44mn^khJOiY21|R)78fd$LwqJK;k=U!cJ~My<-(Pg4KQix<*|EUtN^HRus$ z-&jx2hFZTxN7KzM$S2fh<#1njvBr>@lXGt8$}_0;F7p5Oc!?GL9_i7`<>)09qN&YO zgCJ|Ff6UFeVPGfJfv4->;1DFE#+-HuUM+R@P=VsVVE~F^QOwwp$jFW2GBTW5Wb?b( z++KP=oZCm?vDRN-UyJgisP53co>hIXtg2}Fgux2F)3b^b521{W_NyK`(iWln5of5$ znZzNA)=I@FTA2zhdVWSe;|Zl{dK}cI1|Q!R;N|Q~sr}#p!y>g@7OpMBc80o4aWbu0 zZ7~ettKmTBaaC&g!6-^6IHV(rgax+r)#aoLH8cYAbz5)rM05q zsMz?)J~p{=9qZlIUQI*M8eElySG;j>^g^aCs?oo8zU7xzX+MZ}UU#Wicm2FrJgc58 z5uRSU0PJ|hTcj8|Ptj9MRg|1xQ-V3Q_dCbHaJ}vSdVJsZxqqsB2U%%xCwf)_l#jc45<4QIj8FRm5&8u-LuNdSv-C zs%3=oHr9H@ni=DXetVaoiZ@)-<9R!k0c~{m2?pVhQ`kUC+5QbGee3R$SZ!SOn(v=qNv~J4%n?0MxQ@BF=uUaZbpB%YpGNX0reUnGn zRs!xGC6XU^ye^SOxyg9lyY?+%(WBQaTfn`pnJ`jffKTmDBQ8_D67e-;c^(-(9gVPr zG*W7H69m9pe%l;wKhkBTseO zkS$c$d9l1ih@XgwPNeAGZ*5TP%?=p6Q{3;<;PFOV&3U zt&*@})934UNqZ4{#o3=B9PApOh_8ys|NK+XLaj$EnMcY&r>BBk8PqmVg?I%4y4G3Z z{1a|8CfKh+;YQP^UnU+>Jbza*tr1tB+qWj$RW;moch0q0r7ozNw-t?TbDNA<9$@6O z>yb4JJt5YoqHy%w<2o7JBn}9Q6pbPS#&rG)N*)BKQRw>0W$ZWKQN%1$pb#{!DeUrR zX0LFT_Z#Jj_f>B;EgSi|W&nX zOd;dQ;y+{i)=YXWV?ZI_EWmw5RR1KYTf|C_?sl@mwBV?c$T>(9Qs>iGe+b5LJGIMw zPemGFKd~I`GU&0%UU!+MR0}jLs*42o_FfTWGDzL_6J9L)f1FxsC?Falp5%<=GztrK zE~BJoTRMKvHlJ4V8hO4ybLeCkvpyMvj7(gJUagIERs)Ay=z#4bkD{VS-`ohbYxg;PbcQ~wz3yuI&EmU7UlTx-qm!U4_0je9@_4TD#ZnHbM7F-T95gVE;ZJ6n{K}K z-}SkK%D%HSWE8AThm;bNN|Jj7c}VI5ym43bIS-ati_@mDVdEx6ay-d(9z~uO4y#Q4 zjOwoaUprU9+m^-{?OCR=^7T8KZ;Oi}l(UR#>%{kAouu(Qtg2Q@i8&=2@L}?ka3Nm0 zoz97X-8t>mA6^W#T|(>crw6MNK-h$JYRJdF+7G)A-(!@Q0%XW8akjvsz|?}C-qM@H zY?tWp4t=uv&vaTSKNzP)zvSDMX)~NdRs3CMBskXJf4)ZWqlr!0%+qv*>1D1vc7@HW zEcnA{@xj>lFiH;#aCTSD`R)953rCg5&?E_cm}Z$CIeigxpDTqqCd6qzU8wo~*F${g zYQ6@6nW_OvV>U+uKi8>Yx&xQr1jZ6pKrr|6&63zls0VxH;NI8>vo@jqxiM~QFH`uc zf^DK;41fv+HsGfyLIIJupvWW$KKVy+id=viyn5UP8Cswkt>j#Do_bx4HEVkoMZZqB zgM`Y_9@z%`f?qsJvdfb!vccOPJuudVhDx%xDP@Ibv(PkH93CQuh=Wb18w%&WU(Kk; z+rBQ6QkSgZEX$6N-lglJ91k3XhPMojfwcWqTzb^L=lL920Gu{p{|X`(8zu@F68_BQ zEGQTuf>n+@cG67L2BpYb#SF1oaJ|#JB6v13%WnpxYzQTcPq8;Bw^91gOMCz)aPC9x zrAwkAV^)=gpTH!?-sEB&lS8CMKEA-lAzml-j-E6I3O}1g)f0}sRb8SYYVe6N!9}P|Or68T%(gfdU zy1;>3eVfM!ox-V0#KR=6H@B;&lN7LUz^aSUmF`DTzDK0c!R`#WcA}i>YI1BQo)aQ* z*A=Rxm>ZK~V`7f$qgBwgIL^2?1&TIO%v80Y;4asPSZLoyEmJb$%;CnY_Y!FfVI1z4 ztl}wCiYF0vW{RT)D{-eL>7@n&JC+L@BRmqe#<5Rj$YrRt<&(M@v_{j1hcAE*fcdrVSuUei%QPE^tH&anI%+=D9@tx5^Nx~ViBrl zb*u@lAhqYQJME?JhI@q7yd~k!Jk^5!^e9y-Gxh3O*;OG_{*18wfsKcL{xv>GRxBd1 zHGhV6EXVI^7({KS?P*&gSTBWWB4q|8To{T9?-l;(`RZ+wtV3Bef!bMMh#{YTKWrcZ z4y;hi(yc_|Q^jb^sOqEfM!m#;(cR>(xwN{Eq98vNlo|uZx$RaczW>y!V*V5N#SG=# z0ID2Ii7FQ7pNWC;SdiQlaRB)uJKW~`**9{*PfPUv4Iel6c`2lCPOc`GpCw`Y4AP*T z(>b(8uWa|GyGmd=*cCM$_cTC0$hU0K$a8wU28S%M^!7qkklnN!NQ$yeWln59S*S-hWs8$BMmHc21;8I$?|`(GQ=aKsfl6f-cYYI z>eg5j4u1_k#*k+EY zV?0J*X5A~Vnjyb#W7K2I>*a>%Ti&C7loXj>>m&mi5B{EWy&&3}`+YasW>}VVhuDww z4bLGMa_iTZPSOU&22uJw0VA!mS4;n{)hWKGv>(j=R9#6meMP1^v%4}V&F&3L5%HwL z?vg4RK1e1r(DE^lAA0ojUQyc6Fv2pOZ5GTrMDR4_ncaTDe_E_O7C!UU1einX&8|^8 zg8D#pH}L3+-2G0bI=DOiMm#ryXr!^j!IiA$nZL05o+1V-HtUDK&)#tyc95FtAgheQ4p86RTN)@GyF&t<;*OGl~ybz0nyrBrX&d! zLaH6-%fXROA?Eg|J+;3yd$bn({)_Q@5%ww8eKYBYaUI*Z`}wTm*H(oo{=Y2zyMyS% zWE(L*C7h}7s#avTomrlvHNT(b?mbR=2p5Gd(uAb>T{r)=yrl+9!nDJ?X6G3SP}#hM zOD+v@6&YWw++#JI^@Q3cnn$ecbO&McN8X6|Jz0ViPS8nQ24CRcIB0~+h&Y`M>N5P_ zQ+xH%zt%ktf9k&?@2FLM6i~Sw0|daUB5x8)+y+%y;o9YANjc+C-o*gga|gW(ad!+3?|bpyB$gP^TKcc_~7E%tE#lc(uockv#rIyJBQ!4B#xd>Vz>0 zm$}6uB&6ZD9M{FVl0-m~f(g2~NfZlOR(*2f42pafw~9{j3jf%}4~(Ah6_imedJEY= z`^w-n%u)4yGVJr8FDHbEnr}Lt;c-+QED5C9lUg&?tE~#oZWYut&xPj{LhAJrlA-3` ziAc<)U(g{sV>;;gNSoVr-wqiTVqgEVKS!+S)ms?iZ~p1&9^j-5)>}eV2ro-?VZ#3T zLfF)tT;!YzBp$%;xw+8~e5D#3h5JilCQAAzDuEhWDu-OGik&)Vag_l~C7~rqus9KgCo1$8L~@U#?$7Wn z(}bu^s9v=TU!i5fKVTr!`yiG583w;gECl_yy?_kPk>BIuXZ&DqGHq5|kO(jwTJ|I{ zA_|az2(X|8CNpa3cu+eC$UA>)$@@+QEI40pE-W!rVL`E`q~oF|Ncy?~YZ5_6PGm^R zWWRniI->eL9&(pcFJg%oTz`6)`EhY@`P!#TtAx6T-JJYNLO(a}gg+9|E`du&0if1Y zSrtA^lrSD`plY2yoCy=8_<3`SWr*jc5*^{ZR(i;5>t9?u9VGWSrBS6Lt) zS(Ow7O5-EN=@-5oVt-Z;mdPIU@=KNTw6+7~tVqvmUAJMn)*ZGLaCtTM9FKSlz5fzj zje`VXfUPj))QQp>i<_Ug^v4A}7ojuRR~|0**I@>xoWyW(LLbtC#WEy_OGl=Aw`R98 zBF89GVU2^~eZgPoRxK(x==n`#5Do{!*fqAch_&pGTul!8gLTZn_WaYnQ$9!(sXW~X zO3Ycu19${~kN>FZK4qRpHr{`{^?yWp`+q=|h_UuRmiwEM?2{S$68zsXT`t5=9xL6q zpZp)nb^2cu%Kz8&|8q40s-*wjkNsaLoPxnQZ~{E;=FjmwuAWTd79%1cKp2UX10MHQ zoY+K-?3&D))*}p&%%e7gBpLxug?_tJC#%ZB# z!fG_Icp;|e;+#G}KTZnIS(xQ1VVbs;Fec#s$v`tXEo$&#-L>z*%GVc&=n^LU>kC)e z0IyB`zNdVr0bz|Piw)cK#00X73$yt{+q@Ab@Gsv~Bfi?SvoOPtDuU%g)Ws|L>}j*_ z1*db}uFPO*TW&9-!sn*sIF-J;pe`* ze_*zHkf4?+;P0$r1e#J5aXy1Tjms@{WY_O@4`MdznUz;))mKsi-d)Vi!QNfi(-Dsq z6f@e}9&;1&*jVunqqKM_lmptFB0d3KFqomXt{n+?6&e70pi9cqgt!f(i{pN37xeO= z*{Q4576u-~|=yW0m)VHI^Crw*VzNR}9lEVG+4g-q=G+#8=>H~_ z>D=N$P3fe17dcW3rIsF$r$kgEjtJ!TAU5x`nnTFcS8H^I8?H45mE*Z1IcQ#2_y zW3b~|6O3&C6^WFg{n8c$xB3!?GWIh`0pEGtVo!>Oe5-wHh=P{v`wrXmdZ)ADhe~St zW`S2`b+f4dXSG!Ym{U)JbRx$w8;O4nxp6)lWpzNjj$IqJKfveA0Jh>1wO~i z00wNgR~86@M%Y&-N2lu93qzMEMmw7=SonnVj2$QCruDubvg%n-cU?pitYB)8-;>QE=ZK zKjpMLIY_gwL~gBEVIz#gYi;x%uJ-rqQjC+SyytB@_5iO?n>T}2TE`K_{O`M@K69-! z0{d;0cAZHlFO7IQi!9kqR*eHcE0Yic`m^r)!tSSTbr;G_!<-TwR(l4FvaV|!Za3Vo z>t%vlw5p5 z&QbYR>Ju>3IzEWb#wK4(sl+`0qB7*z#=w-2p z{G$%+Ux+;94Y6Na`jmvW=~lbisiLbJDrS`gy%UDB+xk?|(Rahip~OFK-`>x>C?bp1 z;KAT<1k*q@F=tBB3!<=uhQY9^9u4#>9fjpE;i5Tb1i6gI2bW6#J6|g|Rp|*a?1aWNRW#wfJ5e@w}tU`n$Jx9U49hgy=xG#fIikEdrB-3 z!k&Ems4*$!Ji723L6Q_tPCeEqaJq_c0WTOrw|4Hem(R^Yr_j{gu3p&4$2Q~cub|1J z@Xait`+fNc%yrrL%@-wRIUl>^Ujr#=Zt*J>GcfT3pWltXj z^}abfoz|(e2gGLZE`*|j?qS1Ja_W(0^A@3^aOie4(&;9+SwWg?~j!@=ujZSzh zx-8~`{Ge3k+O4MDPl$234Xd7u?QlJ*-?~EMMN>-bU&K@q(6_oBD%wW@Wp8;Dk{Zy= zYrO`#6vyos)6u5mMYNYlay?{4F#5x`tya^+t89$Tw#ro8pd|n0)P3~&AGgJx3Vnol z=jA8vcKf(gXN8TX8O<>3LMpBrSZW_glrLBxWEYGfKe^Dr;E}(4(%wKdLeUZ?r|Bw- zFb#u~62%(L7wZ|3bn*1Fl-(};ZPhG)@hswrPAiwcbJa~2f+P%()T-^``!?}e6`YIR zMX|EXG<4Gi3U*D+@z6UG&`-0&EN3xp=hnHKcmg(X#LqV9MYnS|tDs#p=BfMD1urW6 z-8EGG!`?6S#DBol&;R6kOJM$dFpt(xl;yK>6|k1pnoS|IuvMuivfhCMngMAEq`S|X z6zDe?(gZeuu(bOR+;^6m-o}W$5z$Qjh05f zlpxOy0@~n?I9yt3G(tNWB_cxsRBZmVZRU$4_B7g{AMwwF_z{TG+7W^{!+c(|OHMke zqYBFC^7y5|9Td0I*<}{q-NCKDlX1>T)i1$!8rpxW%`fmq>_XuSf|?GJ-zx3%x}w3? zqQJASt%91K0Mm&a<4lu9l!Pl?ZHekVPg_!BFju`(yJ|tE1gXt*JzaaB%9o_}22VsY z!}>?~8>g(3HNgQKnm?06*Rc+vE1_R6$wB$UfkX+kRy`S~YWuPdET1QJ)}3^@WwbaJ zC?oIb)Ab}a*XY)e;-Jq32Ia!$r&ASTo9|PY>Z=iVix}AZtrfJZ z*ag3UT;~p$ui3b1;VY#5_DnyIW<^|Gc9X;Gsj?891gTZ#-4ax#BVijGK620uqYqcR z7f{gKtnPD?%rJzQ)K$b{{55T#6|NPhM~z14XJXW@M%fL!g;y`IB4g@8!KN^x(sG^o zrE2-@0;IGQ>@>a20a-V8P9tmO>;JcG)>h^HI4LESE7^XX&=l=?z%t;s}d&>6G-kl`Y?}a zCY#au9RS=bba3(awM?w7OKp?+gH=nPo%Q!y;D$vq)k1~?r@qS9#$M*}y46&(&nkf!`f&Z0l$(m| zJ>g%-{s?Kb%Jn>Nj;jN& zmWE~f_3y0=w@1Lg5xMR```oOfodwY5q)KsvXcY0y!Pq_Fh@ajzxv7JL5Xq| zG{t8nKLKut-d5G9TGn*es|CEiN%glc@-MA@OCGFzKTi@gs!}gljHtI#JPsdy z0G1a1zS_Dmuyizo+IO^hG~_PR0P|GWR`1UJe9ihn=>F_{t|AHp>sYuyx^cf4OK&i4 ziv(hImxk1$wpW0%YDBe4#w%w{+Y`8ov(oVpZ&@XuzbUsX6YM&=o7ZR-|7ft9`<%w- zAx1_WepICn#L@i~zi7xH@dI#quX?+e^eF6dlt(6T!)dUsCwTniNvyXSTnlnz|M2`8 zZ5!Cddj6KW-;M$JBT8kUt1VW;;e}hgqkc|^xy4!)rK?)Ay#IzNy?^#q4dIT#eX+7~ zQsT{Xl?-)KO-oBUoZ#@lg0^4c+X4#~uU|iVxbmhy5g6nYucAHzu| zj%L7Zv-{Gt%GylaWV33c=LK%DH+BdjfIb?7*Br&6Ck_3MF7C3SlUjSS8>!qB; zz8TLb&cRCCR7UCGcmgXH^^oij}bIl!X?q7cHdh0+;>jlcyY-cT5{Ne)9piwBccVa2ot zaVuxhUl$5R2bUUUQMm9=J&&vW=q_bsDr7RAThX>RW1B7DmKG{t7++_=*g9uaQ-dC6<| z#ej8%+Sg;y#5C|uP{s>YHZOcF`Gh&{As7#Rkp>1)CtpJa8&Fil@Jq<_PrrHUnnG75}8+Eh;BiDh-d@M7t=n0y3?Iw7Y0 zsSo;F8*<$TRb%<%h9dt}CKIvLBdkEA@#g3Z1gkPOyOY(2;ywr4)%9~0 zU&Tcf2_hW9KiOD+IS&rm}U-dye-B_6}kx4 z5>&xP+D5{hJHwY7l*WRhft{Md*~#BuL5+lzX-^FPEHF{5`_XO^h2vq=YSQ>~s#`oT zHZ#IKJOZnLjGq5=0ET=7U0lVws)~VL!U6GT{~Yy*61A~gEo^b064r_+YLW#9Ig>Wg zyGcBWzN1H(a#xDoIxk4h0=(2{_v5nwVrvzWJQ0Cv0)ivG`IuWN@i*u1;ku1? zSTL;;`A7-d=+FWnC0_3WjIsU#!!mr%$S>)MNIU`pZ7Mmz1hQ2@2>Mjzn}#OjT{MW1 zL~37IuZ_BXB|E&|k=IYRgIAnkOd5BiC7psH4hzJM=`4+!aBzfoyQ3FV6k2}OAPN*k z_P3~s+jH&}2MnQl!Fbv^T0=o2_J(0&aHy$7+VOzv$aqG+d?8l(-+uv6RVE1zSlKhv z1SgB~YAnCWkTK~sa0J6F6MO9J$w8FX%j525$G?10-lLxA=ie3DD%HA-{u2RS3U)6D zTcZ26(?-vfFnUfe`+_G@{Q-X>k(u`OXQ!nhj|h!k=L1O_KgUlBxQ z`%q=z^@qd?-!!yzu%ez~G?)az=D>0W3ZjpPDh`>f{g_D$Jk(mvJ;zvpHey@NP=>Sx z!wSBaMPz)OY>`WceqGuDIQv%{_R_~e&?|VOIqMS3 zxF@Ev{3O#Da)Px!1#cU2Y40#i*&c(C{-V~~5pek!tUvcOA;g+KG!5Bxxq}61ia{yE z8|zX1KLg47QECWNW=7G$)s~ARNggGub7TIJCP9$&SS0rP9clv6MJjbb+GqmYaCq}k zEm7>9(G~W=srU{D92b-`7q6Xm?I81c%^Zk*7-oxpV*`(pXIir$x3S4TmIfEvn^`5< zCZxfHiJ4_VIo07zn($Cj(aa^ay_^F%p6}lp#TG07{A!MggN?u& zL|A_^moyguZE1VTqAx%mf|B)PkjI?5c1%nvQjx}pyNl4BrTiVdj|6bny<7Z=Y z-*(rW68tuK3vS_W)psbk+u8FTO508do*a7dsdNr$&w2+kSf+CcqWNhz+-v$y5iIN({l7~-D35JMq5=c z(6T=e3hZ7&9>w~gR09`R)ur)Bn8E0Jp?k~OY4C+$t+zGfCok_3iS2c(_qNa%m#iEd zFU5_&fLNihp^_LjV)5>0vmiQeIwm*OTpJ(XW_P}n%>SpIuL_Im3*S|80Er=0h8S`X zl$7p}5@BcrLAs;`WxdvQ*q_9qIXF-Vk58=H} zB)tDHn=qp#Zzs)Yt^Fg zDCYH-gpG20;>XVi1(_$78yfC_>7|~M+Fs8B<>M1^Y>~7G=<>Ppd8Ma4^?k&a1O2K$ z)ypImc5wlpY)21A@-+nKgH!jr_568s(}_Pk)nX$K(Y%o%NkV3vlfNEKyT{&5P4|bC ztWp)8+4_liNrb{DKqaSTWH8U7Xij)~)hYH>#n{JWKJLAe7GW`Nqpuvy#*2~@$|q2Z z9Z~NX%M#Is```PC`8~DPL!`!buCY2NA%i)fOn+jRA3Ly{gbh`+*F4jI8@3K*B1MvX zc8y8QlWXmsm`jIpbQyPc`i352K7V#g9BwaDY!0vdrA3)@G%~?Gj;S_1$kJiS4nEw?eNw4=^=o$!(0#a81E>(4Dipe&r(9kP5@ot>HBOZi>5wf=s)Digiz!Xsw($9G2{}fOac^n>IV82xri9Enuyr+@yGA!lfuyulEDtc z%?-?MC|Z|7)F}7V^j3xRuB;C(Dt1JNHq?T=)cxUIh>ETYHjm6u95ecGF8MEHh912a?)PHZ z`#Zrq5LG6cYL%;FijcV+II(=s3-R|UUnX3ijMiEI>Spu%i;*u>0r(o2d~aKQVu8CW z0*iAJdGsRCdm1SU!0$Z|%PEI&v=01WV4l$pr5%se&xPL;%e4(aE*>x|J0VJn7PN?d zh;0B|kVCfFW;nlePhcX!#nI*@rBe~1N{#E3Bzs_dL30Wz_;kF~I=trOPf7)1cYcEV z0$TE#*JxtBxDKVW56YrSlp{ApRSm|<^baAKdzVdTu!VR2yj>R_%Z z5U+5V?C{oWiR)Ey8S<8$^1!H!PI>joD45vW+i%0~I|arC-yh}7h@MdYVl?X8dU|=b zJsC#M_^dZo0xf-0IH$p*LZ$DmU{mFTQNj-_z62C(c(qJ_uf2>lc-Ua|!1B-XGBIIW z8SAfTd-5HKr>AElub(K#k7Tc*j;^jUfNjxFu`GMBs%;uh!Swm-SD|l_LQBGRrj*7l6)l-Ba1y@L$aM_7_)4=bt}u6 zz^jY7ci^Oj#g13OuLJ(PvwvKNy4W~b&Zty>#WlY2D|-|8XL)a$)MR5Qnak!xd1h>3 z(T_VYXWH$dd_AR$G#~|i2{mG3KW-V$M4u!{@G=HwL(AVMYvwawW z=u8*dL+{Zi4Arr+0jFbvZ4hg1xr^r|$IwcZXnHJ(W^;k%s)~-DK5W->V=kP9LW4zj z?mZzHeTc_iVKca4i1@zH;o2~7JUKIcbD333RKKi^22`uDGl`+6qho%}!GLBM_2tB9t({WX4H5z> zBvIvWPfeXYi_5(?n_-NuCCL3hp{K@E-|B2S5+}xFLw2`*Zcnr@SUj^hZe$3e4qSR| z6ckDcm6x~A2&f3yPnr2Ps4XXR&~!*ez06wC7qI0OmWm+s{q3Qu(|m9^;anWLzntpz zNWAjdxX|P`N4=6A=qn?OfMJaIJm~Cnw2rx*k~&CawAjKe#=Q`f`R>R^O$Moj7-7YBr^yPJhSPBQqVIp+e}E8EKpYTM#;b5~qNN*Xo#PjK9o)ow zx1-@ZZfH%IoTVdPw3K&nW# zcfLnO5p^1+s5R8)g%f{n zB;?Jm(k^Hok`JO&5MAVig`h#IAN78~9(l4hpTmzr+#P5Ld;8p;UMyVn%UysUvo*I! zOa#tHayNQ^>p`l$tjN=@YX>hW>sn@7oX!(k>Sm#KsbJsm!SnY8{yet^(G8v}FsoVr z>3)~_q*e53{ma=J=-I}2nUX)1o%Mv);A<97fGc;QTpwvIcTE|c$?AW!;h1qclp7@U z$JpkUwRiTzK^{pA9W8B$0BvWoGh*)JhaGs%s)ncOFZ-e<&4x+wzrVedJm0M&6$A>6 ziYY?84u_41gCamNN9@Hsi4spTAkn89mk%co$ShSZfb^%^p%ZIP{D7~{gvF{qXQFxEO)ZM8dTL*%5t2oGk(W^Ay$ltGsd=CF!9$S*>TLM z0tj{oriP+O^_8Zmn4AU<2dI%eQ$&Qaq@mcT*WC=Bj*M564=i5=zT^WL%n>FiK`mqF zKi)$o1)eXk06Y4E?_2mACAQQGcxw#136Pf>wMPrji}iuQ1Ed*1kxYhE%s-1^i_cdw z{C?e^Q_+2^OR>41UNsVJ`FJga>f3W7-5(Kfr&T^Lvr(!QdtPEV%=V_!@OvvH?u{c5i7zj9!#UE62#Mv#1gEx5_eOV>5u{;33)V2 zhVh~M)v7`RqB9Bnw;9{AP`c~;OeU=NPM21<9S1*!KCv+yO$zl;h;LuTViyVuye$vN zwN&_fn8{}=jU2U;7)7Ny<s;_LN!iNwXQ$*=D>BS2ez6=^2R|!4lK((!^rli`>nK z7srnRD#oe*WY)DiEt?(O5`uzzeb@97ZApm_h^ZrO9$ltBW@*s^-DnIJK)#Gy=6CHM zv1(;F1edRGW6zou_E~0CCa~`%Kd^w z)nrNH*7aQx(y4im^lGF$MCiUw7qRPz0VhHMJ|pcw11up+CP_&$27TVuaPOc?TEPsf zTs1ojuxR1LBa7G7*s@crzda;)%gCH8ZOkzv1b5Gepo8N8IxEv#Rc$v_sgG-Uf5KBp zuD1t~6L2in02xd54Oo!FTs@Aa1*^#npX&>=$|E|J^n0#V`>ujO0GO)b!#C3LzuvA5 z;6wQorP*1Vmy?jsvQKfK?=e4?|LW@+V1omhA|zP;D_)`48jkJ9^_s0JVAkEsFL$L<1As^6c#DY6{Yz2P8erXRN&V&0s;ew#av z!Z4TVV76!O~{4p^=tE0Rlem<6Za*K$bKdGI=w^PBX36N&5)+^PFVXKYDYn88b00N9>Y}|w=IbT-R64JR zSNqQ3I8(kSL)$?qh}Kg}|MK|89AOehv5fKHIH0#}4J-wJSFmdhI2u?17$Qyu^JBy< zmv2yDZB6vsoax|}i#QdqcpxC!8gg8n6I8%radG$>kcTS_0Re?62%@ILaBIm0yXizl z#%1+!g((Pt!o+wgZcVs7BpOl=RfR}xUN>SnkIiG(ny}wuvx$zUF*4_EBDmw_T&QU)sz(e`LF}&U; zjb-%BDXp}(MBh3rq3<=m)rdlKgNMd*+1}b>2 zoM6%Ndw81F5j%M71BKwEd4fZN*HEsj)Tv$#kS>P;)EBU}QMz?KziPxl=NNHQEH>ud z^UBLiSlPnQHa;%Tw?@>JKi{;vEcsk?1)ruD|C$jO_(WyYy=Q=Q^7u_U+2T|a2T$v{ zw?R_|CM?~dEfVbo>2fi%^o}~M;tJ}EV1vtTCyqZ&SHP)OpBXD($U*Tb z$86&|`uwP=N~TJhS=M4m%AT@#ernHCZCZ$xR_l4B&NOE;FWu^{j z{;XYmw-dXNwEH9759l26H+Z-vW$G;}C!Klfm@%Nh(JUAI^SP;+DUv3WSDL|-4IwCP zDpaW~RNy+_>HZE-EX0C=c$L|BHVRsP<~F^;c?I;9&ZMP9yp>xq-0Z_SVdsTdW=c5>KO@GL9hgEMA4ipfK&PCM+dPn)An-A+kY zm3Q02F|aIcPrP^Kwa!IIgW)>F#$BPV8N(}07O@iE>3DAa&ZHEy8L~zCgy;LE@RCe= zd^db$E&j>fdsVm-NfFyKyBmd933MLoutNDB>qMIrl)F@K zy8g`phq!GSAT^{Bvfx40d%81OXstlBMZbsC%5 z1`@%|;h9XTvCeocsKJAWDF%rpBaD-BHM^;7 zMlLmX^@SK)w9?A&_vy=XE=nVI;=+%2bPbaYmoJtfx!Z zzC}Lq7Qx=ke&njIsg8!H>>RvbjuJA!d{>t^@c?^Kf|ZDyjpx8P;OQ(Te2v5GVv11q z)F$2TG{*WMB?8ZK(fV#w-w`17N9S!BCi0!ehJ|utmOeWHt!&AXpWO!xvnY? zc*bL)|B5=$0=_ObsEZfpCxG%E$G87KuK+fH$exkL#NxwUYk^4niOI#CfPSEnenqfD z^0N5x2_-7jCk!?5ThosKF<)chkJ9Ab-RE3&KKbX@DP*yJ{~R<|j*s{%r6gy+b@fPP z?c0LwqO;w-RXrw@2)O#6CU?Isl|!;co9)i|4Uo3)_Ke$p1?|n0M-k_Lff1&pqgbkOrjJzx5cBTa i6S{v@ITBpT8CF;+epfd314P%asjECvE>e6N^nU=8pvm(9 literal 0 HcmV?d00001 diff --git a/datacenter/images/ucp_content_trust_settings.png b/datacenter/images/ucp_content_trust_settings.png new file mode 100644 index 0000000000000000000000000000000000000000..e3d328704e4c4b8e4bec7c82ed3e28270bc47c49 GIT binary patch literal 57100 zcmeFZWl)^W)-D_*NC?3aWN>#2?hxD|xV!7%?(XiE;BLWXaF^ij5S$6_!y$XW``b^> zuT%9^onNP_$GYxW_v)*cc3m^!3UcDe?*Q-Kym^BxDIxOp%^T>)*T)+KxYrrH+5Du} z7bwTC;$PlWP2e5Ac_a8nQbb7E4eBKOt)EW+QV6IG=;}&Jj0o%6w5^&a5h;vRNKbD= zt@40H^D&|^*zoPUkFJbowovHXXJ?I%pvl#&T~o=hQ(KorSA9n?-{*_5c-PK*Q;ME$ zSedT>H~!BM(2qvk1+2Ff7)Qt6_*3XZ{}~Dz2uUBshoi#L$bF(!QfNwldVN%h)y~KK zlu>}e;$J3_S3+aD?9L8_!Ss)z&Ic9wJjZf@_CHeoM;1Av`ia`GrDKuoKleoc8kX)x zZE{FF%@6UvLok_4zgCaDd_4Ux+5U4FHH&(Dq=W|lQt#h_^`TV~{Q7;8E7;AJ|5~c5 ze3zl`b(B}oKLqn|j0Br!@@4fQkyxaXq}7RdAnWvw)J?WWa=knH{eOU*hgO|q6( zRad~|LO|}Zj)M4q;QF_)Oo0Ep`jef&*m5~c%aZh3^_6$qU-gm5o z3+*+J!O>^n!L-V&U~y zRp+lbBdRJFU5+eY@$WFy;(fmdEGdMj*p?jz~(+15{VqmX{~bV(rx?PsOXR zV8Janzt6?W-DqDs!DS0OdMo?e88(sI0XZ#;)hfE@+vp8dP+}c`o=PfB^G4EX>i4X4 zE*9UMT&W_K=V-(@KNacSWminK**`Lf*46`@wPA2S$3YmzNvqVd6&QV2im2pH(jqfj z1M7|*gn!v7N#IUITZw45nlNZ$X@j(BSq&MLC%4#T9S+@9sewld+=;vsg*Qwmx_pr``@3MJhi}V?{ z9QZzs)ob}KbV#5;>9pA`RIHq}(@W=LyV|Xt9uLG*u-@(FH|F{ADL~Adjd%XaT_muG zX*4U9&Eamn)wZG8<(6Wq!Qh&;^X&Ly+xyk}lQRWdn$PvW4cZioR%+MHPbP=q@fVZ% z+yeYcEUaMu09Tao>4~}{ z3`nQ9BHpzna7;JJS6$7y3FQud4(iyGK{s0+{W;^;_ShNPv)S%;F(GELnBsNeI4i;Y zZ$A<$q&2(gUe7~*IFVzkS+tom^rx&zq|}|-tjl3Y2)feRtQ*P0tlzZDk%>tP?ev5$ zX5q~Ip#|Y%cFZ-6oG0I1%!mXdlY-s}Y0|HBX6g#Pm|)^V(?`kF zxH+sTZyleoK*!;C3$Q?wZ&%k!&5S%nBm&gZd^#A#uH*e3q*8`a?_o9kMw_^Y^_dvA zPpN4lU5rg;s7tMvYP~S$g$-IH1HJ8owYK;tj8~=P>?qPFSg~hfj!~%Ql=~nm4!Q%!9QG)A?;!ouaPI$U@;n zWfcq+M-&$0X=~LtnL@u_qS9Nkt z<28}X)9&LZxfrVw1)iDSKN%K+JOuk1>cU9+5cfOELE{d!?)gvP^2FZ@k?mR#KPc{f z|Mb$DPDN%e(DIbh{ zJDAFnMa(pi?2`JQxiubQJv%tVB?)%b(b~$U>P1lYAv0{5@c?07b$4R6)N4m+#KiP% zA<~GQYY?5neHM{!re#(i<#MsB=sUbXed1?&z-X%yB^D{GkKs^7!WH_6B@9Qfi}Tg@ znJz2c6Bx6UKC@m}!9eL7{`VI>p9z*$`9Qdk1jmVL_Iui)tor_&Euq>Bnq^niW%9G0_PY2YX< zsdkI4XT-2No2`J-eO)RMuU2WNhXrB(9`BtoufaGQpGK5B=wg8$NE7aEIIFwREi>nB z1T0iD{aN9qL(1A{0hlTO$f9h&W+%~wOts-PVzHxl6nHLpEHi@Zlai14P)YawQbYIkhOo(D9`B@1R;0X&Jhp;FA}f`Z z>nXV6LPixPAC!~bM~$BvMUf>BN!3dwZ|zJOoOBHEC^V~%J@QQ0&Ra;f(K_N-=r)r| zv|=2^XxEIySfJf#NpYX(O1m`1mVZC2W~I}{JK2)6G|BREV#}3{aX!EME9+@1_3 zVjXreVBUHWeE!0V6?^cNay`9<%IA7M>PpvJ==|h61LFsBd{}Q%C~&zG+Pt2OR?>x* zEaTR^2ZC>#*_xYGPY*V?m88t<+lE*V#6>aQB%7#<^TdUs<1EAe^hg()OS(^uMcd2m z7SU;W&oEB$Chj}w-OlUs(QqS={XhDdMfppz0lzfP#^5Z;lI zKV_4D9i;+;VXpOsmxvQ;&3pZ&?k|~deHIqL9@36oc75(QZ8Q_$q2RE#9& zduLkrX7j%hplhU{J{5yhvVuhHIuxqacKlLN`N-6HY6UOR^K2Q8bdrM1a67^%8Hf6* z?Jx(K!bwi$u7B@WMi>uIfcgN(CcX>5!$w)dGM?2fddS!t#7Y9ltc`q_MPDm<6{h(aY-wlvqU=#)cIciPRA1zw8b3hHn{${q-+K@@!4FlN6zW7Hb} z@h&?tqNV3O?u4W2Zk<(xI+l{0swofZ8vLkwgG2pCw^}9E=q2N1Qg+w{j|TQR5subtZg^E2dLEb-DFys7Is$_Z)NKdG_Q z%4!GMVh;8=kOctMS%G0z<(?;mN8ZLyh_`yQY>F!{1#O?3Ws&( zrOyHwRyleFqHDhS(J_j~tjhz38ukxbfV9MwN$!!&c*>A3Ae^QZOcpKnA%v zmThSOGfi*&sRQua^d5I{R?_icE2cn7q^V=JYozvD3!((R~>wj5t%})tGZM&Kd0Qru}*2_gb!|$607$d+SUfEk? zVAgbf&UD!)N?r~&?$U4egHWipNfGsbx82{|j&EDxa`gv9Zk zpo=BN=y!mRJHI{-dI#>qMI%)8pOUpQt`yehEIr8I+vQp9Z#S9sllJ}^h|gSztcorZ z$KaD#o=rwOOymN}+;R^)?_cQP_Uj2`eFDpCe{`i4FzaCA<5z&$<5=OCb!J!)eQr=* zGGBZ;d`<_>U^!mN43%2XZ6B@Sic{(wII6JcL{~@apz{1E!-3~#m%No`sM;u(CkcWCAD@}H}$XfAgDk^rLxF` zxT}0YwIYL#^b?I1fM$8p@9=Sxf!q%KW(;ts(fy%5RD;UT#m;!4o2{HRz%`q4{gR_| z3H`*1=x;>sQo|3v_L97qc?r?|HH(O{&~ z&_j{%wzVR~uw5%MOzZk$;Ir3ETmq*Q^!ZC;64MhA<5@V?!duvJ#p;iv?<&@zvtM+= zALXwuiXj$m+KW8fHEI{vW1E(J7Y5upIWT?is!+_Rz|~R`iq)ys>2`4?*vTYu$bfu4 z6Yo6}Paj5&O>$VY@SqJTd!zoRBJGg@Nz$Jz4*L_L!`xow&Dqog)kE~ho_48y{5BUU zCPzk1zrHcQX(9VbIQw3C6<$2@TxBI9zM`V~KvO(w=FNn{L0q2%c=AVOxSI`Qkr_w_ zk5OJ(So6N!rR}@Zdj?w!GF0H?vMwKWK{yqk+`^D6*(R#Fx&_)TD5-`QtTR^&Ae?g` zuN`zGA0`Kf-Q0_j7=k{-iy&`f2;DcI#pg=;5iG`BOku}xD%+~>+lu8kldUWCCW(AEYI zxQRMCEq|^Sn)SymwKQuikk2pbI6u`^C-p_P@`FlSL6SS)&eR|=-m++6xJLP%#ZIqB z4rF}3kOEepOG!yfb&`NB`#F~u&ZoWhngX?8U9^#)-|awgKE2tymqzRt#qFGsSw?=E z@Y^|~*RHsVysfD``z+d(f ztT`rI=+`BF;Cq}-&8&+xyy0Sl*F>A6*Un683-O9s4YKUZ4`o%$|L(FXU@m9*UjHqn zedU$q_vhYUgB-c9X{3{ifVWvAYpG55=_VV;!D=^R1U`z=)t8Io!+|<&PCN*rCy@3D zn4mWXrJ3ZD{;Sg`|A3B6b0l>>nSq!BpQXa`GyJ}G73lA|4uAB>=ZUEYPf3!HeUg;Vx^e2ss+jB3(%^lMcx&rOhjWFjvQVa!&pC0;gumbL zYmp?RQqDi_+EsfuXF4TQ^&3WE_s_u+v@;&WfQ;NEw>iE(62vFlSs~&I#E#tQ8 zzOf5ix~-M4Ui-+l=YD7%f>EUwOYklt`fY9rJmYK`V;6vZIduxKnAWo!fbPyZj{g z8IE?+8NPqA0C-+F+qWdd5i9)K(a9Dp)|xtNeo%T`6C(0}n0L8uySq1nLiowfSzSX|crqLRKSkAkpQtZo0T_*-3&opUv9 zQ(Ew0I=3jws0MUIaBjNok+d7(LcZM7Y46hc)4^LwUX&CtDFbWs_pV^S$T7aUDwMd# z4}4W9$k|vd%B8pOb5f7?Nn7^37>Mrf9WNccy8{IA3Ow6_I2WeuHO>eL`2`+^OhO1U z3quQy+)d?_+9`Q?L`l3|w3}rE-L`*XTIBua-7~9pX-FW?y=*)9wjvxDMTJ|%2k%sY z&*IFmG0bBte%N*)y(T+nHzKo1DvjleKXTbk)jM?X=i5X(CZ>n3pKa+sw@@oHr1Dv_FBDW{7+`~LOl4S=K{qX^fo8H%&M~y$O3aiSNLC>r%l0*B}0kPk_2|oqby0N1ajioO8v24nIFPd{SVT zz{RLXtpLSTuQY|{*00#IhnF7Mmm@54impDQCOhYe{>vTG#^mOeHkBNx6z)|4)X$(~ z+TKZ%r8beCd&O`UU8?r5Qrztw(P}f#S>sT;mZt&PHwzzDi+<7}NLGNtmWtS<6F`?b zy_a6~@N8h~fwxTh$?N`?9-k@lCEUl01CP-dT}9KU)9BFr+azT7K8+F~b9zAC$!5&b zt4era*0KI@4}`l2C+cm0feLoc;zj>mDlS8O0wn&HHH&6TLTbF#7kv7T&35zAl?_vD z*x?Dcg>Q>sMpRXy5B2emQ~@6>Kdu#VT(%I><_Dtt=wpV9sZCcJ#&HA8W(o;tCDVHl zh)6lx=`=5X4E6kgMCZj-+{%vwE1y#v;aF|(2~tW|mpT&h6eOabB7om1^yP-rPu}1) zBno4{9)Bo+4(N&7jn)I6%VRIMJF)>xNtYLumlZSa+-7kALj*-==p?w$tE!(Q2&X(A zYrKr2%_b~fa zp@&U#Dt7JH(1?Q2QyPHm@j<^*phAaVZ^@ZUjL)h- zQp3E)5e^u~FlmQlru5)Jx4Sm#B!c`bxatV{OpAU$`h~p;zKEMI8^#J69HPwcJ$Yuv zUk^UaL%u?Bo)rpkzHMwUEL$}t;4N`)CA7EW`s#Dugq&6GNkU2J@$?g`(Cp(_O;v2B z79A}+3A>)cx?Y$Uc9DN$1a3ip$R^*<9_4lLHhe8KpT2ZJnO&D+y(kO6 z!6Jfx?P@P56^ab?CYhZHcU)x$TGpgPr&pw2e%<|f)@7C>$Pq}rzSx>_hl;$;fJZ_Z ziYEX4xd+`RtfK1uw5LwWFvA0HrPjLmi$=IN)w2p@lZS26Hx#C`&vn$$EhVN+jsZV+ zB9Dg~1d5~CDCL2+*ox?Jdk1$%e76)5IcweV1A8daycpgeo^LxqkdFutO|m)bsaZ`? z`$`eG%0>br>~@n%-79rq*hd}0=s+CXOxjjnJ73bYAW=r8OeT)=oafcgBUZh)b4^)^ zUxcW1PBxqUG=Jz2Ip4QLCHgqbu~K&;zrc)DHW`?@n1U^O+2Z*b zt69tbJ+vP;NbbIGTc$&&NtgkyBhNqc{mCo@84VR%z3&nx!Ovt@VMDa`|(`j$s&SL*w~n+_RRj|6N-C|?hA{el-Y+>*e@Ia+(o z1#NALCQP51AqKCTBr4q-BWeNdj+EWxb5urf@j2>SJfuzrPw0f)O2Ga$(KW)!vlq~? zI;MTMN*u6CT95h5X=8WrtHeUF!>m#^%TSu&+DzPC{c0Hh*WQFjwl;<(P~AS%%J5{_ zg-8}Sa!bQuCf~mg$V4jeq@Tz9?dsmDht=1#9};=T-!6TMU5Gj9N-j3cc`Jn5^83jO zOi|kcw`*8AU>HNlH?}E}|6bt5)YADAjI#xmjx9Tu?P!eFoY_{bmmb081gZQ>{tLD7ndhBRGIyBkLZeL%tBbE`c3) z-oL!9@_38=)3esYrJ13G(!;}^OK7p@k#!Gw;giRJ`Qnys@FW* z_kFy5Me?R)A5oj~iYo5*q?1^FwQZKxAE(BCX{*(kaDlwausM{OGw0FU26}=2jITN0 zK)p*8K895WCk{lh_XT#krcb|nKji(#T%jN0uH}hOD>z{hYyi;BzWAhk%2WQ{N(}7> zB_O0m?|HZGvsz{519}r^xk@O5Ep*>W6wc!UQe%|g{KW`*S2cH_H!=#bI1wqM6VhfHYU2(zIk z$hM5k9`$fT+j=Nibk7TA%;!O?7WU-^QT=GAdzcN?+M#{0@sa&0yl5o?oEUfdge)v; zMgDWu;K{3^`*S$LGPEwYbWr(}1bB?abKiZ&K2JQf7Jz_Q^{t$hcKmSdKy;+=9Q!WD zYyt7my2Sp_tY7m^)=B|SA!)#i$p_y51qPXJ;7EpG<>5PTIdHfAFA?bN!At<&=^*30VG)UwP^95CIvU-=xW zNiSN8nnPQ}nz3*s9#N2Uyxl?C4#GRFWbIYm&p|yG1;`JSYq=V5*E~9p592qfdn>-< zT@nl23$zwYYzM-Yf)^E(1(%n4GoY+VcK$;hgRH(!0PK!Hz=bk$~b%CjFj&Fc9`$iQ{~a%9H7sm#kAzG3db7aYCL+U%pdlC%p~Ul4ZUUQ zDp9X=RN3}f36+yVniM!^2Q9vpsfYb_jc!e^IlGqR<-yuzwb^yX?Q$_CBf6NAU1_~4 zj*wT$^@0J?^0d!5cOpn>sm}m;MtDTovy&GNZf$nl%xac|G1rKTBtV9vK$%w$OpUcg z!|LE7y}wJ$r4tXnpSbApsdDb)n{iq%aevW!G#$k*J%_{JTZYM0tz);3?z#-9#Dz5? zRZsO>k1J+v#&V_lR~17ZXXR$M)KHGLF?MqvrE6(H98>6S28E}q4nG74Pe#r)Syi0p z_#MzG!J_vYbvcayix(RW7J;eVwYY30px>-!gxHdbc94k7HO|}^V(m3}3FC6y`$>JbU*9Wr#TBKfpHvnWh6Q{=o=PXe=V;Dym%{3fbv`_5 zjLU|H9ap^Xel$-=<{#g&d##;{1Z{-qK)undO;mw>Cm9GO;C#`=ChQ)Dg7oVHx+yCw z6(bCF?Svs;KggFH%$u#j?Ekd2-EB?Te2A(ar9y}VaGX`b90}?FSUa&P7KFA#SZC#A z#k}$*kWPGL4Hk)wBvepa=CL{3%|Ig*E4uzmP6i#>&8*;85!%Sg+LBd!=1_rhi5TwcF?q#7#s_< zwqLNxQGLhmgdxqQ2-E3@>GJ8#48sD~#Y(9-2-E&nkFie$Ql?Jvf@0+iGl@ z!;oQ?(<~Xu>3QguGo0`I!B$9?Rq3PSGz-HUD>vV3x~{OD^pzZHmh@_nQx{gwQozk? z9pf>A{RJY7{HEwblGDYw+3%B>45&~IXMQz+oveD?c4175?GR(2tKR&_^jA;C%*{6T zH;b<#_NcM`wiGCl2}EdSAwEhE%&qG-bX1|k^d1R}RKQrnZaaL!Y^7TN`J+I5n9owH z&^N&J?i;VnLU?elSPv55fLCs3;seRq=X=ZF+p`m0aTS0MIbl64VWupqtt^}gxz?d?Ml*5E$8lp%f9duU_tk-9oZG?WJcz8~)P zN&_+y#)G{)_{EI8UR)ur1Skey8e=66Ap2f7$1PbgQA9yp9`1{!3D7~#!!EH1QrDiu;F%&O>VxSpGF^xlJVvcG zK;MC?5<&-FPCg3SsZS+8sjG=fWj7wH_x4KQCm|}ApB7UG((PX$?)NC9<4c58j)Yp!K$K(8l~qDhQwOtL)3+ zgSx6KH}M*hw1AqbYvEz2A>0CTR6RzX9ZQHl=X^6OhXX)162!`|otZ2!-|_W}kT69#OT*D ztiMDOSdxF*4J8XJX8L$$hV_UPOT_pfuoru}behdmj$SIo3gAe3P}O0kfK=GY9! zI%BV2a~5+UV3LwY*!h_+2b+uWd=H@hCE%R~;Bc@NVpI#N+Vxte5X+P4=Rc_t@h)~` zu#NL|zwzol-IND3hb4zEY5LG@OkBHnvDgqJ{ZOXBij_TS1p;4bf$U6BWEjwAQ4E?G zc`zZE&qEefUf0_?k0w5%DRs@jG!?aZsr+@JgjXqhnYiCD*+bYtwzU= zqPN~MF!l?h9xu+=^f#cGnA`NO&(J0eH||hV_GWt%Gp+Q}lp53aR$Zws-aUyIiKZ#Y zzuYG(M2<0XC;yQ5{L5tgx>K$`Z+;(CM_#RRW1mJ{JP7RfDJ(Tyf4qX7Rck_x)w4L-z$smY-7VE<^uI+4c-fYZZ1}CBh&RhXD8QJ1jrMT&L-(6d?t7`i z+paGl>*Mj-^j8L=EOgY)R(hl_-@vnVV@{a{V868tJr5W@G#Cy1X1Y3jyKeW6exgj% zXyUd=L=e6G1g0}bX3%9|r5_j#H}zS;MyHqT8g7-TgzSU6150HcmN=Ub-Av3q_947ugoQL#oOeqvQ+h$ZB+P&B@(4+KnYO;bRq7C8R_{h_$?T z;cY8)dh)j8xb4MQ^Aq~n*k+fswfEB#h(Q+2@-I?jNdWB0fYMvq%J=ow966tZ4olcg zq4#KRphDLN0kJExX7|T-g{8}Ba`A_!X(Q20;%k#KNMS=}Z)J*HjgCYy)q1|@$LH?v z`u>~z`3^z-1gooLSmo$f*gCG>#sd+Ao^Y?A#` z*W^b#yvEBxA{PF0E)zIJ21W1YSKzcj0ivaZ^kG)H11fP-jX2ae}yH7b?L;a zeIKJ69|;dt?d0VWr>FryH=b0(#ku|^RZxZemC34NHF5vHFWUD*eu(88_rGVARiNjvQkCZ_csBlxT_!732S_SHvd=F2dl@GW)Qc;`YZWVfej%kDXDMvkmWltKSZ%|XtJ?P(dsyUG(o#B0W+e@(wC1) zHAYE~8e}c=xVZsbwonrTBZ0#Oau&oyZN z+O#M=S>@9tBN;&-i{(AEX8)@H|E`hAOF&cSC1Kzxa@0!&%(!86oj>2+7R5# zuJ{kUf;bpy9OUcj6j!$~T6*rZRWB|$#ajn5c@bzei`9moew}3eXCEp81fu~{f^8F^ zhj?rja4@Iyt&gJBJWb5CDaN7*!eX=;MyWa0%zt$BfNp3C+^9)GT_1(nXXkN(q^YNlR!)f)%pi*H%~L1A80er0Ui zm9c>x{%O(HSFeO^jt3eSsDJXf*;QUy)tQ##ZL9xvwpaZBFu|icBXk7+K?3%deYM-a z)U}3&#k7VtaYB>bd@UtUeDU%BC+fUzS;;i4C7XK2v!+Tb_Cz~k1&jaDu~(7&fA#d2 zlFbv!@(>S)&^S|Mb74@ay}Ds4t**H3UoM0j^Lo<|BXH6`wU)`#eqG}K<%{>1HtbKb z>;7XWU1bPaZU<#IZf%HZU7DyhCcgCg_X_{O>lFj3SIEo1+Hh6>6I_ZK%-87!=oFN{ zdFN#!uQ7yXF6GklF958Bh}6E$J!?;r6ekkz(lXZ%O=|6CmT{7(2Z=)eB)>PdNqf5`rHcEzTD z>F`PHRka=k9^!w#@MWG#~|D>QpAA)YYOyxZ1FE-d$Gu(a^4-QM$*voOS= zop#UC!sawRPuMO|Liy==?e&soW5^JHruAg$2?98<}MP8K8i33+@jB>fB9z; zS%gKjMrGsnomBA6B!K)TOS9>yLqjH;pJhNU>*KS>by!A3 z`Agn6>Qj0T7cHUR@)_KGaMX5McI%`^bCrn~LcRL4&4|pvk*iq=eWTM1wtU%9)2SlS z`jR3zSalM3HmQYB0?t~y4%f^zO+*?oA5Nq;V z&Q+ixqyBp6EO3*Q$z*0Znl1Yj4VaaFtX(Hv+%Kmju7@ycHglSer{j_iL`7ENFVhQm zil{!{BVq31zFUqU2fd^U8x5Q+P5n>|G@mK}0ZXkl2QB3eraNVS zSgtz-&n6;Gywkc6_`O0YaY>1lbCthI=yise{uZRa@J=tBkRyBf2nw6mFp2I;T6HmY zGnbMhUs9<^^s*>=FJZEYDU-5o&G$AU(Awx`Qe z9ZGF!Y@Rt6%s#>mh}RA*{U}4C*jFoAS!I? zb#6}tj=1q6udcm|pDU67;_ z+v9i%_Ge3L>(X=}!dTHvv1jV;U~HS*;UV*kkjb6ASqqx1l6)bk>Qm3pukM3}frvLh(~uK!Ip zf5IxVP+kxHqmtP~)FeEL{QQLry;h&0Y&e(MIwDODh z^sES2Xp<+r%@;&l>F32tZK@;S8rEkDCF^;!2zh7OF{y1I&E1rVV*#nlWBFOUXIAyJ zrO+k!-?!D(K&TIYrIZ@tKcL%{ave}|WXC^U4_X~b(H%6OIwjB|pYc5vLH)juGZ+pI zS#nKN#qhnOvw!bf{*HD<&qM2Qqi?Q7Co_%T(Pb>Feig9M>dvxfCJAtREPeWYKBYD= z-J>zK+Z)BhW@Txb<5KCozWO8N4a>E?+$$!tj#GvzOII#`Wysf>hAVtsrTmwJ6yW$) zL{>4}xjjT%r>2ZDvSr%n8*L-yUiF4CO1TevEI&wNFQt?jM?s5|l7Gnr@+dh|B+e%r zz9exbq|r4VvJO4n;~mCnk7l{tY~UjC&?k`Ver=INv|Qiyo>!@Oe5m@N{Kqik{&rpB zTg=m*WHW#M z`e#F*@!>Lka$!(u=dK}*w7SEmy$r_5t_ruS&f=xR5f2EO^d2*c^c^Qd>?q}9b4=yR5rR+^;mxWNzNUu(3H$Hit)L$3X8``Zl5JW2^-ck;2U;-DH5K5hc#>bg;>R(&NOy&nNAn>PCV;t@oQq9DjI=qy4BrJ^My(=S#dCd;M`Y4~+~b73-C^uR+m~Lo1DSwXJ5NK}2<6;6 zk2nOPD9|Chv`EeCWVduc>eU$BpZ1k7m;1O73<2)F#e^em;?X0j|E9jeYhnMZe?_aM)@Pc}{4RE9M+slq=vv+-8 z4R1cF2BA6ch+0@U4Ex#6+d1F<3R7z3OtWqz_lkUU&C-2bKL4D62-reeI$%V(0ZN@==VtA)*9z9z=|+ z01DZ33ar9($pR&@UAF5l*|phEGVza?UNxJODuFOLW1NHRu-r<9w~F#8wB5ysv>%!I z-XUEtGzVHi{Pwh~Y zrWR^C;B0FWf&PT_<3D}yGY&W0pO9K|1&ewbwxMVB$U)5&e4` z<$Q>X99=th==)O_3nMuat5jW)sRWPPWcGF@{26)eM3iw$T7gEKkL#Q)a2Mj)cMSHW zLF48PZy?aD`TaBlN`_s{T#h04tew6uuNVsJ(989-bULLTR2TrCztnqnGDRBZ?>IXm>rPsyfd{-B6^zSy!p9kmTEI&ZLYTFq4yrZ zuSuIOA6D<{tZ@Qbxv}uII1fu>WSHPkN6m$eG2l_P>Er(L@*Sj0xUuLBe=YT1_PFoq zR82r4I%?FmoyEsxUeXfJNoJ5#VFPkde|HNb-w*b2%K*sJ&(PVwv>y}Oyzl}GyMLdO zg3vY=jRu=_`S8HEgn6fPJF6SI1S>YR?scohQ6Ha#Nekk=E<;Pd2?a)gSqA_dWw{=d zn2d@>64vUtaK4btGk3bZ#EpvEIu$Sh@K@7^$ocWifk7C!!A~4(!5Vy39nX+iDlYJ@ z(e~87o{F%kmyAN-*)s%Yhtb%e_&@&z5ZB=vJ`=;mN#MJMf9gpOxvB>j4otCBcVNha zo>cL^c|az6<%d6bA!Aq@}{#Ah>(5pV*{nim+H zXI{$5cEDYc>9{_^(5z(5Vs{6hw1d4^*xIEQG@vkjUpr`Z;XfG)VI=fV7b>Vi;b)J} zZ2I+meE9^*UT1gG01_s{lT4rD0w`uZorEGiU5YVx6$O?x}^A!2QPCKcTV3>}#(*D|Z+ zp}2LaPne$%d(=>E2(;9rsvILzN_stF%&J8!yRS|F&5oj0+5}?MT>I&+G@I^=5T%F4ad+*GQ3;qjq_nMid0;%J1gR5 z%mutz93^rr!9_B-(5*&6etwyX6&>}Vc$7OUSSi*b5kTfzW>9;{u2qopX4--V?d2Ja zm#rr)ii^5w_I$xOJXhG}f!^voZMly=fiPcbGDo3zOmkDKX~rM`;@#)5xXDDn{(@@$ zp7=Ks40Ot=1~#R%yKoDyfljgib$0#-Wg~OljOQ?ipG2jqHnvwQ?Vjkvtmsnk6_;99 zN0^`o2sN-H=p4n@SH&=f3jDK31^ub{lcL&HgtpI=`>+av|GHe2Mze6X>-olZvMYat z@XZoAJ)9(eTdBCoYXhEo6Ehp#>X2^9z=50gsTKGsB~%wr+e?mn`^}u>hLdcT*Ok8} zf}>l+%Vvj*+)^>HPm>et<#*I9hEQN(W{_{2>i7=U5%rb_8Or6{rZIa-$6VLW1Ch2z z_tG$%W%$VHpF#!#n<5ZDFTgPP`r%Ka4M!xZ!-3K;kJeRj0YbUoCPJZ?T_;AuZKF&@ zO>&$Gwn-c?hox$G*Fohqzg#7Oct{d=?vAOLBR;tuMQKo%%8YHZ3wvF?+uVo+^F`u( z_QQH{g4kzT%ohOB1MfCTxzSD$JhWZ0jioh?7AkSa_fqBZ{ePs=4OiF2NazuM%dI8; z0LMaki<7J~Ri#M8*k)aCLh}f&ZeioUI~m=@6eT6gm2Y`}nARt4VQj66>CTVhy`8ZE zp^_80L7f}N0zwF@V${|jImanj^^gR7NU-o#^NR=fdMDxf#r59D#P-F*VeP>3KRcL@ zJbq3kXQPu~$xUtNQTo-BG-q+xZf{MhgP}94FjR#o;t8*Djdprs_SC&!2O*?W%cF2$ z>#-APvu!+Bl0}ZPE%i^>p1vw-vu+bzz4@sG4D~Soy<)~IVH3TlE<9FPfAHsMzYt-u zPVZfq?;kJd8jyH{7D^7@8Be+wB zBn9$avek0wI4r!3il!5-WVgN^X}m}>NNxh-U4-iHQxttRxjtG-n3O{|ksS2K^;mr{V(4BI;zd3djp0k zPSF;MJ4K4STWNt7ZK1fexI4wIxD|?fkRnBkJHaWI;O@cQAxQFubDrn-ob#>k-}hZ> zRu&1l?|b&lo@@5L_TG~dz>0oMUL7uXG4uW%Pxa1m6J**ctxrO~Kqss@5+B(!^z9YD zK#6_xHID%6*<})s@v7aDXx*f?u9S^ur0Qkd-mjdziQ%`_;UDEMIESZbO8>YlnFa0_ zhW2@UKBYmhU(JQWF!s~Wzc2E^Kp4e( zK-v}}GbZbI2KRnw>=?FcSIk>BNtS_MP)x368kn6D@z*1qs}`WCo6?* z!#2XZ&xzs-gdgT7EW9`OWKuZ`jO!_9Iaf7W;ID2iA7WOwS6eO%{L$N4Um4mur1}N6 z+7e_gJg;Uitli>}OaRghynkI1TiJIy#qm<(ryBt&dyGeR<#LF*wGVgsjtKc| z6qk5V0-5kqrIx!63}3m8I)rCTSTUE|B?KdJ%zZCmF2#CxK3&A-`&k=3vlolGbuQ;# zA`*=`p{T5l7&psJh>%pcUftD`pzmOjUCWqMLtx)~vKK>RsnSVIzwdVq3ZmAA|0e%^ zsGhtfolsog9*JhZ7C-e7ZA~t_(uSTwYmzoPOrq^kzz;7i^=T#Hi z7fjTqweQ@az4FNrw%XD&8c&)EvXI-MES6GL_G`i->zo?x_2ml=+*L_efWZWk!D21t zqq6`&I19IYt~h^T7$YWoa^r&cw%r8M`~tNPE6j1J{Jk_UHuiZ1@b;+RX>4<*C{5#c z$5E{tVAiR0*{PSq9i!$Cf_-Jcno3!|rG?#GFXUIEyC1ck3l4DkDI?LM>NQxV7h2q} z*c|tH(*C=AvdL}?GT8aTN zftCTUcLPkn7+#**0K@teu$ziqcSo6&Ux-S(EHT6b{2{)V>8%+(QYhZgShSvs#@(Zh z=e@OQH-{6yjgP#MC%)rR2yhz0S0_?S83IM_}(!VB%k9X*%#E~aGzeH5@eD$BAnaKG*NmQJe^-2QH)WERlV@WzzOv*s> z0Dzq~d#I>;t=|Skk@3k@Nup%_XA+h?rUAJoj}%iN>uXw_6~;!e@X;uL)DVg)kQ6wz zc+835m zwRJ@2zB+fYbA}zXmG;2mZZ=;C^#ryYlS+wSrfzHiz*d8Z(mWlVR?1Ia-b|K2@2($C zX~CCh{>_{t6%*Q;u7%9L&_nzLDN*CA51Wudz2gWPeIK)G+nV3R6Z+LKq~uHAsT(hO zmlGrBCE(`KgqYvMgSv*M<`a-bZ0(N7&FOA`uRy~RjsJcBp;a!Ac~z$~m>gXxDc;D4n4NQ^9>d_(q*=?_c#AYuUz)PUfd@RKeoz-N42{8ajO+Xd_XRqR zt|TwAPjZEei;8@w+(V=O)SiOM1_~%!MHX3cUi425n$Ow+v{S$ z{f|)8fzHqYvHiB?)xX!wn-Y$jT*a&65x6C41i%pbRvxM^sNI7Z1q&`vcdq`%`K_w3 zhc4L{IWL;qdNG)kj*Yu3VVC+8F287|u1i12q>`4ssOLD9%SjOF*+A=ar^AsF*bWu0 z5?0L?Wzgv-b5)?V-*fmmZv2%R9mzfEGPBh@51)kLESN%>_+3=fsuSVsKW7=Y{qri> z`;!&Ftf=%X!YVHk&Q#*Xu#UKNU?OqUAz0}`fG58<5*lly{feydV1eW_9c9wKb@R4V zxZeu&wU3-M)>5r%%zFbm8O8^j6N?hg;zzpP=oEvWne;PfE2%bBOLqr~<53C7ov*2? zY#t!U)6=aa;%&UM~Nr8W4Y85i?{7gT`TZFyIV55PHqzCi$I7=JVS}HlV6?)cYKZA@2wftGqX4nIzvQG#dFzba= zN`KN|kt+*+8?q4z?T43N3`GH%ZwwmpKk=nf$s70wlEEk-tK8+`mfx6?ZS; ze^NHotF5YKA}u?~AfshrX^{3|1pBa(>4Pr2IqkFG_vNf*)+>YcMQ0p`x!M{&b6?Xj z*@mRQ6+tV7(ny`a50bY*^3lorW5P{0!?Bti>9PRo ztb|f~mWGIbPLpN*FA%T&B5*?`aj{qv;$B;V*}8-ou?6OvE3D9oJ+Kug^9sOs*o# zhJJ%s35p^rUq{#DMHri>d2jdrvDe#D+OLt_wMsX)!8Q*5wDkv5217B&)zf3YqY+ps zk!9ZXXKP&2^*AdZI-W#5BPs*<+o$;Z_4jM6Pgp~e>RxolI<6aKkl64C_c_T5;N610lFe*1dOvD(nC7vW6$@!+2E+!wk*}~yEETu!D{Hd)lAu9- zA|S?OQ`iPL8^1bMPY4;ei zjbA9+=^y+dP{#{NZfh=>LJ|3{fn;Ib+tG)+-=DLVZ!(mN1F zr^}t-fWa1F1O!dD-iK{7qF_jinBb-i^IiHI`Dk2CiD6_;A#nTE*NX+88Z)R-y#uW4 z#`ffQBC}@MK~=orlfi%vv#CzIm!me8y>jN#EI8T+Vc*F!1{*^LyIGSbN8Fwvvv z*hCO8CwBX*Ki6<+e%C`YE3@eA$FV8~-kA6>?x%8taT)dpAZ2puwI*dqDUb8|%kt5I zI%zOUzq%@_rjO6s$o0fv3O`=Uuk4!rF9BytFkL|#a$lkS>S%lkR=(Ol*lbSYqw{$d zGp-Uozoxjq$Wb{=7rcpF`9};|TI1yh#vVTdthdCQ9?-1VGh?HlHH^K_TKpTYrf(i% z!Qr68`JbX5X9YqNtiChwH49z)Hl6vajtQ<_%#q8x7MiT=tF{8eK+O^IexeAF7_}c0 zCv0tZclP=YKQZZ{*K)e?ho<^)FL8!j41&xT;rRHS+sx{C&7`ka2w0_sGk)L6$4FcR zN_}xH4)eKRi3LX&J|8MTQIB!6T;OefCoXvp)Pj8D`)>60kIk{~^Sa5^S>qaeT{YjU z>cbx2k@D+8w0Go_l@t(W<%p3Mw@4SDuj}O0**5C9&jwU$V*GMg=e{S(p;(-q5kPXs z?&ln~=xpc@pV*l#G}EoP2gbs=5X@nO(X%m~uIPwA#Jax<3P3hfB?V3KB!#`IuzRqW z@l~tmuaA8C>&+>|ve2r*F5_43Qn$cV0e6+?3}JzTLs0h1ilg3{e`eg!^6cdCwM{JoTp zPRzd(Sts41hpYWA%aU&Gc5=v}4*-J#gyEBr^^LvX z@Z&VC6}+DN7bLz?-^DxtrgQMC9~eEH3s=hLqATY;*zZ@3zOFU>k`I*YWt>?m3>|QJ zq@%Gpj;H}vZv8Hk0irVBs6qM|@-)9KDC>_a_ISuBT&5bG9vy_gTVRPoj>63WN<*x^ zUKtgrmFp|7?|CjUAVih&f_=bYKuw8M(hG68L=mO$ht?|B1p)zrEs!3;!aE|u z^nqI#h}o#e-*l{Bcd^24d2dLvY@TYN{yWOo?j*()(hiySCE~XD(e2ds>aK}DvtLS= ze>r_9`pRLqPoCeeYg8IH0g^gK`c?_R1(5 zh2QklR14s}t7|+O#%->}nx7IiX&$656ZL(jI2874ZhrL$RPcMCkL91t!VMKA7#d%G z$pvs*Sx1KQyC2MmO%a|F>}+~GJg7e3MmVM1^9@#XL-0hi{sf_9CFYAC8f_ZqeO3Ek z^$M$3zoED+R$*SC@|PHK?alm3(6@JN*=5OQ2dZ#k_HUCo{z?v(j44f7hDlc_OQ^qz zJc}jedtD)w1>s0yzTf)96Z=0{@%&6EIo0Jqa%?ak7Z z&`?OB?DHKk@HD%RCR%5U1c0b8fes-`vr$UFVGiL$L0+5RgFY_aOq5>snYfR4f z+oq+$gz>5yL8g8lQ&IdD- z6L>Z0OI3FQ!sW@IqV^b9KQA&Gg6ot3QtY(n%0!30`i-P4FSWeAo90+|*h@=&iO4_p zB2d5>{MOj#KqZvN9-Xv+4ZA^PbE)QKpFRzFLKhYFK~Os7b)|NRleg|ffDQicOnFUf zRd>_e>^CESglc{qGm%M0<@e0h8~v=au=~Dot6`gq;;op)^8JPlKxI^_Agx-0aDR?x zjv4p2%AsyScBrl1t}3~i&SzRj2}BgQ5Be2HqkXNYRq-Bb@Bq*uiQz#^2-u+irN zX^ZV$IriX&Ij@NfaM*?|dUa>(RW#7O;Ocyc$2E5)|SK zrmBx``BOu#)Xb9F8}d7>e(7=+J{~Yq?&XkNKb35Q$4Q+gHb4(OpNL~2^4aZhz71=o z=G=!VI{1@{*)1`T$f%3{vfFG|(>h{BFg|a|@jLwP7aUr*$7W6L%HzdwZE#xePDuvJ zF~nfVBYWM_kRR5=rg?Wr&?BkKalQ1{mXp;l4T-wFvpxLgj+1-?Rd+j9P0jg@(J7E| zlXTLz2%}(wGE|p7+?vMsYC<&T?0M8PNqm=LpMpHd!s5`puq%N3Yy1??7gE#0(%db% zN7m*~4yWvdwsX)**iBERnUbS@%khR`58TVv?CIyc>*_Vg*134d> z%y$N^KRGI_K_Bx0Q7oN;M6MgOUb@E*OcWs!BpjYGQ#na11XlChT&6D^$C}3qDnUq6 zb1gBNhE1nWCHRvAMPOVH{fFtSH6KMo=YkRZeq7Rq^QIXX&r}~3Ldkgpsk2f-p>KRQ zVNbkyR;IxB?XXifZeMj~g%f0_&efY}#kbk8!Yi9*QB7YtnXlHt4UzNw+^h7q!8(-M zT%LZ;iqCuq8K_4tuJlvBM1C8AH3}2vhOQuY{?ISSuESiMcNTl)pLM6^>uma(n5hin z!ZzKM86wW^k4iG~(>!7(a&{A9MOjk6PW_`$qJ%y$GngoJjrCdT5A)!{Hrt%QbcvTB zK7VIkRk~DJ^eEdUWPfk-vCb7q8zfUSvt_sYE4?9kDtBsja14duyKf#9i^`-v>1c21 z>Em8;V-4p8fyFBrhi~6>09t?k6mFXRiHimwo}gW9I)71Ac&@LJ%2+BQc^=c&926rhuvR$H=im|K*sG`sFzF={=cRw8E+_Jn%wU(Vq9F7xH6& zr;DS8JV`G(n7c)VNhf-A5X=eV0Il;>EYrvHn)#GViMkmM9JaWV#(za(E9k-(;1zXV7EAjR@|#p(We!BGky1nk#= z>8@3hJRK{2PkloF+Kr^io)@bb19659ixC#2pbR3!Nb#kh`Q0P$i^xNe{oI7#?IjCI z_*ZftB8!Ov5pNjOWB|qfcTf9kb3;_4L_P2#?^^!Pb$*OTR6nLg+X}4T|8EOKd|jFh z@i7-e-1ol!!4BfO|5tAvxR=E7=0Ba5hCchV>HJY&KM(aruckxfzDlO*Z|7EeiXM?S zUbi>Y^jC$I8&iNbK+w*5I9tHGJXlNy=of@O_Vay$o5}+7-vtr2q>tkk+M@o~_n$Iz z+s)T%H-3IyYcnHQqGfd64`1(%GU*CNXh`S-lk$x6$@Zstw?h&ZR#t@=!fW=j2S${Z z_4V~SDJKTuAe)MGm`)yctQ0b^#%|wBV#@?^itYzD%rfXi`(EOJ$ltm1EV4+QLf%&g zJCjv!CQCF*CzmVXIyL4amJ@}_(UbzBsqx&GJn1bMo$;eViqn}TTP%*S3SsfvMCPyJSlS&nMrrA2XWlK=Xlxyo)O+i5jhOcsKE z$#|PW#B`c;96lC;P15^92rh)T;&44{meKxe?Ia0>Z7!7Y`P^e>*Uk*$Y|5JR`l@#l z3@@lke&q^S?bY5q2sHE^`@723T27m$h0s*EY=dG;9a^~XR@`T1ozIV|JWgk3WM#Mg zeaGMIfS;c+_YuqbWBJzc<(t>}MCWg9t`pkrvvvAgW~>)i4$Xh__qDuRERjYe)Ui&+ zpIbgI42^JU0j!5ALgs$PnFleQMEnJZ8Ox!$0cuZJoyX-;EM#Uyicz=0mRj-U zjYxJMW}hQDR`{lp&$=~_4XE|yS(K~v<=#~C;ZU5TBki9R` zsDw{r8I{Xcdn1Fg!^@P_-&paaLic+_yV4*xFTp*zpYqeZq#twF2W7oxlS+4m$C*{g zMSYlQ5+%Sn!oBM0Pqqo)1^Fi0L=f5T_NlG;`4qmh=qnR>r3xiYhG(c#A~L=;xl~6! zEtf6oNJgdf0g_^$uYzQu)zV;G=*N1^;+oC70f)<4|7S5+vmds;$x-8|J?y?5RG)<; zsCq-8A$QgM3jXnM*=8JSDs>{j`^lNeIIcHlqto?^;x`T zLD%s!wWRN3K;@i0MD0%Ht=rD?M?jD+pbtoGxw^W`M_4eYcjw@^7r;P$*5tRBl2fKx zEA)Qum{RQNr;)xr#`VKL+sF&oyrid`2&Yx#Ky_qxin0W>t&!-J_9y#L3EFi*Y+ z@4d7$(w$s18P`W0BD+bCKa1uBk?Msb(IV$t@`!|0lhxlpsvd~jj4y)Uzgn(WjNQC> z%^;_kDHP3wOTkisw=CO%6A{!*{m2l&ms>~|w z2jB2*(vf%{HEK+1HHUkiegE)a+7U-udVvUT5x2Ftf6rxg-``SJ_d;YWMij=7_tmD= z82>(-$WgPrB%vNTC~t)VcJT{b3OLqoP<3ZUy`EO861u%fGA}y zP_ZU8g^oyyP^T0ls41SLj1}&(%08@C^in+01_ug>=Gs`Yy)3BdYTV@Pe2IJPBtwEg zB9m$swGj^4GZ!}%M5#eO2~HYd*sZ4LORGp29&4E&}IM<0Gzh5=- z$(vB-&Xpp0l1piRl^CYfkqjxRM{dQ{PwG+T$d_kb%AzGTjmP-uMUENCGQan$a*@%<*zEP zq||L-3rkTW9~E!Hv=o20On^E>1F0NBPb1oBO>GKTAA;oW=bW$2$89{;s( z#TxmAJ*V-c!mg&2{yQ+I$tT`Bt+KoN!2)@w)f7k3QSH}uSW7DJ-!as~zn(8Wrn|kx zz*?2PRhE9&&UKw@VdyJn{eE`6y>@8Y7xH7AYO+X=YX~ z-yPK3tq9w$ESX$oia3oN;`h)->|B-W^<9wF#1~VEeW^Y>9od;GS6_s!s*}IfjrYQ` zWcL-ZbyYZj%r?>7K22cipK4exI%XVu8}ls;;4M%;-zuN!w3z#Thas=B@$_htAgA+m zW5_|4B*MBe3D5RTj?t^@;$up;4+phw$Bowm+a_m|WbaQHwj8{7UhypPMYx^uSq-{Y zc? zAGC-84QU;H2!QoBDV9z7%lKo(3f!yygBKU>z%|6bUNLGG#LoMnL8GRydbuI)g}19S6=yxW8N5OR^zXUUejw=xyQf=^`6I&EAsP1 zFxAht%uxzJT9elRmY0s;Ill49>=n1g%``f3cUZ8(dV% z8tn_7S49>b5l%k*2Gz}t7NEudgQe@~F@ z38{hK4Ndu#YdLhkE~QDd&+nXYnd({q{o=?vC`lN{-vTFHpdxmkQ*!7s2qhXQAxbHw zlpT?9>(*a-?7xSOhQI9BX7VSb2_MgYC}KW?9sY6dRqN(ztmt7`IxFsHT4#Zg(YbS z)PLo>=rr{-AT#yDw4oO5PE2SyFk}CZ$@o!UZ$B(ef+8*>e|-MtZ-p0U z1NHDLqU0^rtfeY^GI1wNC?`_bZ!=*TXfeOcRZ%2Jjsyt<$)R!+U_z4QNNLLYUr|o zXlh-HZW?w3+h+&YSGm$fq=gP5g!`*(+-OHG=DAwiSC*e;fF1KPGl}F=@l{Uyf;FGv zYTw;v-o1bQ#zn+y^TEj;J*Q!Wa%XWrM!IBU+yo5^_Nxg~DPM|@6F$^AuQ zwrTT2&x}fG1h%TgK=9>}omb$)*5}BF3bRe&)m>{o&N_9Qyo@GErvN#Ud<3=sr8~JC zR1K0m_%qzMFUW8@y#pQzVF5?nDCvc_&FUAPmE&#$Lh?Jav5nBf7Kl;+4pUt@+# zfStrU<6)WDrYMBhuW*Di^xg%D`q6ktg0!Q8-sNt!v7BL-bE?)>;pygzrNMoijq{pz zQjeP>^qc2!c6`|tikH7Vj~(02mRTW;c;S-7)nhXX$U5S^2Xrj~X_LpS{j6}$8PmO= za-3q-|GCUAGU^TDY7LNx`eF~#bv#jT`1JPNn)1WXmyEey)g#E-G@f+H5wA?7 zrF`&|lvozfXIM9gH(GQ;omNyjwu#p)FSMk7v)0b9H8<>Bc_OrpCdE!{ucc_Q9@yCv{WK%Q*E`HbSQcho~3cQ;O_WEA+%>`qf zJX|6!WMkJ%_LRwr`)*559OZ51u zo39U0@>Ykej8J7lJC4HcHCnN2#cvom?$0*8Su&KciOMPT8w*|{)6*i;e-L@nd^pMr zZ*EHR;d4rNfquSGinQ~y-~+*!jg;Lq_c;&!v7qmA>l@yVrJ5q&1!o(aaeodRBt0R=Q6GE)GPB6G z-G9EEl6r?AVxxD`uSP z-+5Zu?j@zo7DZQ$klbxsT9cYrTkUnd#K+DtXa)|#NTzx-wu_%c8v~;>CtE+FEP7q` zPRrr_WEoU;(_0@#2aJqP>iZovZmE^&0>|_N3_DY#R60f8pwC9fy)JuMWk7TkoeLCS zSh1ppWU2(A`m3^>L5-^m^WL~&%iG+Az$RdXUL=9s46E>z7cyD5e&aZcHfxKpi%NN? zeH3sy4TRaAXR7m{tMoXgo8>&|V%%K{+@aC1a(vGWMRQ$oaroTKasMB%~qy&_E|_vM|UWXJ&q zz;}Cnc7lCnxunU#K>`ql7UP^$G@t%J-jG=LE&SDP66cDlgY2E@DR{9ZF?!gcFBzq2Nss8!gB{CU@W8*4D6RyPga~o~0|%lE zz$P&5BiK1nf}8UFSNj=qLgiw6Nw?A5U&=%_8RCk;VCFGBZPm)PfBQ`Vx-;d2hp7IrQpy5h0*ck7)Sn({}p z!h!&JcDkb2!UmeDVZJ!EXXo>#NC1DijXiAe@8Z|_rzv;Y&NF7dwn8(+C(S83wK*0X zC8KuJTot~vR`g9q4J!3HUz2BIo&o|N&Kj;$p5R-cEMB50c-qchN2$_8hZ&Ja=+XF~ z|032+@^y|%z%`8@k#YQjIDcl*5o}TqSWW$EcWe|s^aLk=Pv3ovyVYD0Zqg1LSb{6L zXsz>+-5?27kgTqTUq_(O8{YkdcpW&MbQQ*%Rlmyk5)*Ygrb`i*cBfLy@Tg4OZG3z**UshTJY*+g znj^DXxV!e=aj@DqV{7<`SY+w?fP#}A?M*39Hm^TvT5`GWHu1~TsDwj{GHb3edAGgH zkSj*YAnL5|^1s&i?%n4@|0F-;dq z`gyileSFfF!DYclL2!a${1cbJ{^6nbNYV6Hgr&-}ae!mW1Eyn%Q>3ihDn4>|#3^=& zG2rxD>0H;Zm2AFAj_~zMvgc*9*M@`R zZ&tuZPZ|z~MCTrad6F*(u;E|le$#0i6G!0+E)Axk_(cc_NGTge*^YY`+__`7djhVg)JOgJpPG^Z>3S+epW>lAF5s1yWj7DW$#rUP;%Vg z``MdR@YU*0n1#)3pLQhbGW14x_=WLRmDe8dauK4@gHL6jz0-ODI$MTf=ygDc)Ra)Q)4tu(P7imOD&vU( zuc}+Tx=16%UMXeh_j@BZi-YmT^X%FpPj>Xn@U6P)fd%$Q!X=!rlohsaKXl&DVspe# zjU#=wOpIFFPbad3q})SyHbgk>3s$es5(O80QLjtQFVC(6fQr#OkfhDa8$CJJMRO?; z;XR*EHd=roi$e%A^lZ(L@UY>4)cXVR41TLAod8)u7%*m|rw52~dvX3nSD(LAa3UmZ zV9F%u3G6Vjs;>E3;A0Q-0su;j-7q(k7qpc`Y__8;sWHQ876rJj6Wk;W9AzSSZVbq6 zKiDrg81i)gLl&0869)G^p8`pQLT_^7x84v)Py6VZJy`ElcjnXV@yA<1Wv^q&bLP1 z)nf9NS@_2rkrE${ai!C935%R+dvQBvbj4~~Hfz-L3ni}#!vZf)=9k^wPMrMuy}$P9@u5o_EU@pEJldL-UgS_A}E8zHCRATGUZR?1+5=pGwykU453Y=<`^t7MQX=CK#AZ(| znl;8lYCaiJ@0uT;-ri@^SlW=HUmhOm>+Q66(U5^~jt!fSs|HzpkF!XjNvfXc!Bvcy^jCwnt1!NM!yR=M6id1=5_~%uWy}5M3z|!8+}g z=q6))?OD+zXA~Rh3NF(Y6cD$N50!ow?kh)OIa8e$!g+@d=l2In+j!8{>k8P20=z<9 zOWB=xILkK!!5(u421!Zy;(as}oVV3`2S2tcIO0{?IwtJz_`LsM=F{o>j-}ZHj@}48 zY)A0Yfo(AG=o?o{?4p>iOnX;86%UDxF8fgI_I0CmMvM8l?wjv?+T+{Z94mTsa6id) z+_mRAt^kfDEA`FX_GV$v!ugXypX;Sih90_qEh2h)C;b_oiJ&XH-uwuWQos?bpUqDE zgI4L|f%T?-b5@Lx0A;@1?rSC@Dc zs77oByvn;+H1#biL4{(Lq*7ZSW>z}W#PUSnQL%wa_n~Rky1Xt4Kk8se`N8WVCyw<1l|$-=^3 zgioH$av|SSFU-vNX_O5=P8Th*Mx^vR?W_0E&oGbfh6Il2bcOUX*R1P5u!FnGPd_eO z;7KmOKC~Zm;*>P`-2{qu)^xvhQ9Cj61id;EFTeHac<(3*PYkTUc@zF{h_BT++hsT_ z`P3!3Dz|45|0@&5HAJ@$`=sfzskZq3tZitS$?$C(-Vqx?Ou|9K^-KsBAipAjqd z`{x+F6-RJ6;c!9%q<>r<=*UQ0MN{Ff`S2e)?yu*Cdmx_l49-l8^w0aQDIm_u(?2e| zW&De7_)C-M2~JU8UNOK_rI8**`fuw>3h41`T-Lc%{NHD9Y1a`V%HIP5kp4Gs0hqyT zj}%i|&0flX=Mpig(mjN6v#~c)PoDg10JI(lz{_Ha>z@*YGb1E8^+!hjyF>r!Rt2J4 z-It&eqkl^9Ocf!)Ivf@Czx{mdFs(kKTVeZI8o>YSKH?AhY=i_oa4gLKQ?bWxH9n7< z{r@wtfpO377#RZ|D*q;8{;wmyV^L+~4uB%J{x{}blfDPZ)&HCj#3=LxKm8^1Ocvk|q1grmE} zjp8HFo`Z6sog=y2Fsu)Ek6wi5iEM9gDzEnwZPl=Pj?qFLi1TJ0!$0PY7CBdr))Zk9 zcKGr5Jza)vxbRmPVK`M)c~}h32)ApI++Q826Hrlw7&J9`tWRD4MsNlQ{)}KnDKk_R zm=(ThGYtXlb9H~@$XJ6mNOiR`vW>Pnp+v*ZF!X)b$acJK`y~uCxBoe$Z*vp~F+Hn* zpLbbXFOEnTU8kTs6PKhI-c$22Hw*dQV>v2znY=kdlDGF5>_%drLB$ytjDkIAxet^G2oGWn#5=D+6)QwN!j>q@A=;Z65#9ou36x|@xO zmI~)r^KDu#E}F~zpGiaN93szNy?@VAFAJ0e;5Xc_pzS!j+K5B@?ivp}Ek@k^ZJO@q zpZ!aS4-5oq#(+F=VS(Sh^%uSPDp6Wxa@H}{#o6(}8$aK=KysaQX6qTSKNh$# z&CxFnfvF>lU`~Y33D-{ty&;2}GvEKQt`N(O{83qPn$t2e!fb1%EzFL2qaHYk^iZ?Z z(Jy+_aWhWGNTh^U?(VR_M==mANQmr^mYDy;MKqNMf;0cK zm=?2>YH517xao7_DLxP^Y4POiT-{%e$N#M{+C;42VPu2Qe#-L^)f)tTw(UhoLK5W- zyB9kzuZ(J8&jaOGwniZ=Hg5lW%Z=0pkj8d)B!bd!^ya$=Hhc%3{q8RbeX3TfKAh(S1C7C4w3L!|EkYqo3B@0+(=FKEmJ^lQJ0B0CfDyt)bN07+Ozy=iI&SXJ2fgHa~mMi0s_T{DF3SVDk+Kvq}2Nus|r z__3IfzDLscj(K6i$v;zc0eZ{a)1U7j3)-1c#vdtp?jK?uj7j+t0fva0ZJy!I<)OD~ zcq6HA$CosXWNCRZ-v-adM(h1Dj10hhcW?}Kpq)?jvw!yCrL5koVp43KXAWGazldV- z5dRKl35?Upp~&-@vVDAX@pDv`3+BSRle0(`Q{r0!-rQL{!Zza;6(iqltft&wxTftnBN?P{%U#z=HDx*N{z&+&P#@?B)1=*-zCvU*X5HzC5gz{BL7B2 zObq1o0o<^bV#&u%qeGG)&TmQVrvmk4`?bs<-CxE`Dgvorw2N4$|4Y#+F%g4`l3P^$ z&kcb7LkI%wwbnB73;%`09f1T0VF}e}#4(lPJCMNP8m8!dq@_BUExD zS$FkSYl3k=(cz8ki0_NHH|>_rnzDiZW^6PScKdH??T#xbG03b0i&t0a3*&uS*hrj& zl&FXih!seSxbbW0+P_EdLpGAE$2Xm8lS4jkC!w+L{c~Jcy*$95#9A(4Lx@wXz%57H_y+>A*fS3B$0Xlm+7^tMabQDyy&q$at7PzdTtR@ z6a_9n%;z3nbYLn#aU-VQ!o62hq`FoJ`g8Gg)FoBaV$4sdwXt!wFanyep$chF3m{pB&Mr*-<%5Mw zGopUApoMQPOd7HD`F-3<>!7yi%J75kn#U9s7a92;&r5@KC531`+;n*AGt2ina*Mk?%5|ktos{vDn4Pf&7|d_*%uspPukW}+h0X>zxnhj z_78vqQ25blMYI;iIHQuipk9fG3lW0VJl*X4KPrgdFZWqk6ZHSgaziE$_?8K~T(AXj zibofB_w+VqC?D`ut8!o;diu|>OxCnYrAkT4N*cJPhM`1s^mIN!^Dk>tX%IkKHg)*1 zX<))BF??je@H?~qFO3_=3{IToVrTEVPOw;?j{E$LNhV`ejvn3;GWzOqOQp zZY3uqq=Xf)&Ey&kF>xOE?7CzwsJxHBH&|$pOMD>j?Rjf5RDYN%?jjkV@O-Sr2IFPV z0@wHWzrmC6aNl-}qt}N}Ph2tPNCLGq2|B7i>A+icM8B6hYA){g^jeAVLVSAeY_!gz z4$H9*QpAQA0w2usd!22)5L0G2?UV@J6RI0cS52cJ;D9-49z7w1Klnk@-Q9zc0Vtv6 z^|UFT6vnwB>G$=C@Q{VT>{&NP&u0=++ zlX(oldhVLT(7ch{2MWY&{ZI)o_REKY!GlQXLMI~bY56uci&p}6!{FsbH*;Gyr!OL} zj`V)sob-RaD7en8gl?}mCi**`JTR>;#3Y0L-0USqpBhZ~2oIhuno2$hK!0I^nbo$w*td&nHe2 zJVz}Nk4#|ZBCu#k(-!UP(O~B>moOp1zWg#Vjk9=C+5g+I*V@&3hP9FP5P=Q|N9vhl zvd^8puk{z6BjLWV6}_IUl@zs{OBh*Hb3<@g^tg(B2gmrmO4{&p43gm(9&bxe7UmZ`5 z-a)zlf7pBLsH(c?U07PA1p#S9L8L)CC6$zxF6nNN7U>eDyQI7O&`6i$0cj3h2M!H) zqwo7Fzi-_CzB}$ecZ@w4d+ftrd#$zin(@qM&SffDmS{<6bcO;xrVo+2(a>4SfDVsK z{1Qb^l7+qpUTr67N^^unS>uD90yr3EJ&xQt5UkDi%UY1?#l*z8 z@(mSfj?}WXiS1HB{_G=O zso5oUc>U&h>Zy56BbEaOaz6nmJxjV=h`pwQIKR4{AuyYCU*{2lP)Xtk%3nk%{ML3SSZ1V=X<=X2f2T zMkwiQ_4~DEM0suvYPJD>8UqP@Pv%sQ=8TMtBsxrwQ~t6cCTAV*`uW(sv#EFXr|7S> zo8ST}X>SDwj-0o!XO7wqh;{PuV8&rVO!xDpCN*XC(KB`3CC`{3E8f-1wfKM@**ezB zL&YfQy{)vD#%V8^=A(+9olXloDilIH?TuL-_BMT@Nb?uNl z3?Og(^0IO6KQ6oJjQDCBqjtQsKAx1f5p?I*Rrt&th&xW=d?^+vc+?E)cltJZ`U z3CR%QUe_8{#yhCp8WiySR5js|=U0ZcZ{88Cypqq*h(PC5JiD56u&yfB{M+{?DEONLMtOce*XB9ur%zL<0@gSQ z?D>1zK0t*Ux%Kf!xb#`nV|60PX{EV9X)h?@?uR2W&Kz)~t?y|3y(#^lxXeRs_CL?| z(Kradi)HvtNmq6@`vhII7W4Z+su+Hmh;JkBAqiZqH=*b#_oq|+)&>$Ey@zJiPf4}D zDHeD3ot$N0ldD?kPgd1^Z`)Z(_?E(Q7{6X$@!^X42f#YosU(_;P7L`}>q4NI3Nam@ zkF3IVv|wQ*SZ94Ar>p6aV!VCz&K~uaH*lW;{*q@|vHEO}cV^=FlX-7npYsINV~3n! z@2Cc3CK(zcA*V|CEf{eEyZS$E!1?GxF|Wtzn#Bc0Dltc$UKMu3K)pOsBrP zs2*fFudT-`<<(-c5Z&q}g)&xuR;;N~BRAT^iT(aSe~$?GOZkSvT}Fq}mG_6qZBzdp zTrPkik3}Xmei!pl4hF38=z3DK(7V<+A7CM(M0_**8)gC=DKQ~^kmMXDJK#_VA!3rk ziN#Lyg7e8!t@b?LV*WB7o?<^7ae*f;1lIknrFr#K_eH8)Q4x;D$DK2Qj+tsvOILq% zId$D6Gxbl#<-ceaJ~os9B*f^faP{k!IqWns!Jg)w5;N`4SXEKViWZd4878a{78o&2 z^g=IwXJ7^Q-V&4s^M7ByUkPFU~Yr=7&w**n~`ppl2? zk*+7><~a9tfMG4VS&y^b_U^fa_s3K@e?JxT=;epCR3V-e7?!st8p18YRU5MDdpjlD zRB*02+f>gDZ}AErW=e_+*|^!)jv~LTwSRr)kGEhT?nv{UIsAkQw8LB%x#@rBG9uuI zVNquQe(7It=RPjbF+Dq~abP#lzb{h*qmvf>h1&mzQejiyVr47h`L{aq&w(usfMs!k zzl_~~`z1;t4OqPaJz+|mza_&ze<^MqC1#x8Do2@S0jhkApYQRzE#*%_(vM8LwG-u) zltMF>^hKv5G^M2-{4Sq8d-nV}yBPqsm+uW1iZMsolvj(43VF`Br;12oxCC=NdC&*+bS74AYPf)>J$$n0w z-i$QG{mMgB;_R)ag`hX}I_>^h{nchjBsO_OfIlb<&_gsw1`8VJVbO8h23E%eBsk*u{`;J z241Xzpm#okBz^q!iR(vhjQ&N=!eNE~ly_P^?it;rRmTRx#p0+QO{VP?PwmY#XQ}(~ zdA_si?NBCk_Byrq!I>J-A!@v0wL%6P1~g+^ZUc8Sba^ z*L)a32dJxsFb8N*M2HxmLx)SXEuF2-8$07ToGH~gEM2hQ=0CXe1>~y#dVodeS_OF= zBaa7juylu9V$JjYQu}4p!7alyjfhyl$i*QhW?d#NnLfw+>+8Y31tmu%V`I)$WQcfF zlYBhtcgotWe5~YgJQFyGP1y?!)-Intue@sRcA7QdPQH8Z+h^FL`l-X2nG7%df?ytR zLbX{O2ZdJ%@bo)pj!*YUy@ck}^DY#WTeHCF%&AMfI7z)Kf<55xYQqZbai+~gv@I#!E1_7y%%6AO9T)v#tF|f-r?d| zKIc%mETvmbVhMlg+)V31ygAk8c9n>^4WZ$43v<6f%{UsbI;PqY!t!J174Kr{dOVMe_4|PX8kRUQ<>U;u(_P zqwuX?FW|p-^xL#$3M29z@`_Vh^pr`hA@r)-Gqo7%&$p39xw}rkpmuzcgaAaPk69fZ z4+bnXL71|ShlztwQ6CL%{Ev27Z=XIQFCQ3us9dXxdSIKY!HdB%0+Lp+m@R(<;PpY< zTHIXqj`j|M*`!NL`dZU~?H8KLibgkSDO%xwJPa}>c>1iP!Je4Iy0h!ZGFOKNWB!Vd zRKEE+x4f{`&Imyn6&*PF z#`6%J?|QR=dTlvr!Rzq&cVu5M7uGl+3!-Q4M#mAXBPl^QnB+cCf6R^z-*9^|J1Dfw7Rpg`wRw@6VVZefyU`2n z%Xc$51-o2)Wje^|8}b{vrYr4i2JyS)R`lB6JLvWj2=1XiH(g8>aAx7DHusxPu@CO6 zaT>!H6_Z$o#6xFW79v5{IP3*Ewe>WzslEVNCACk7|5@GkhnfGh*6oQ;yBGz1hk#yZ z+J2Vu+yZwtZ3RJ^y4@2aCe6(!$hO0ujeSEg635Dn z+Kn7c#@bfLeo@o^`({aG;q|Css0{WH#w?&G`&hEm+;z_x8M|PG^o8ns_Tc`nQG^j} z$jA2j?O#HyWZA>9Vm|BT(I{WV2ahXB&iu0jy)@tRR|4tufy6yWs7^d+cgCTIkLYs@8% zHb&aLx44MV_vTd z=Pu8nclLYS%URdAipvIPPd4O7g{wI-nWybjfh(ts%w0{_;660ZU>7pu4**;EVERO` zp`66o#W&*X#Yx+jX!C>Cn`ZmTm5)Em=A~Nz4t^1eC%4_5(Q`e#H7ADlW9Q`(e0r)0 zW8jn0U+#fciJm^~psey2d}*X z$OA+jrwohvcLq|MjUkzHuIKAH6Z=f1$5!IUQBR-7`cJ-ZCJ^@wEz`OAl+?(l$+Nvu zUYg|91XCdBgoGS?m4EMxRg6?SihtPErQ|?+xH<6~Nc>mmkVwJ{RH(;t8j|-GkP6LJ z&MJzcPzSqZ3!{0x>GRN?Nhm{@=H|}Tpd0Y(Md#~&&Wqmu28WzbB$W-ZQCwH6FcHlv zQ)>Cto54d;$pN1X#|wDcB;cQei+`Tdq7#e}j;zSqxh7X76Ng%ELo5O`W* zQ85sw`S0@<#Rrt*|NGbfyEEVu_jbcd+Y|2AQNYF3D(*o-@_SxJWm~3PKxbjCCm(5U z?rve>=M=luf%B7=o?iIP8&v%Q!gi`qu~>rtM2F93nzvPWhh#Pa$6XieGtC$P6-=9P z@*>qMz#Vr&HHp7+_JFDhI+`oTY~QNz^cgipFGOS#)6#a))YszeL$|C%e?U2P%%sus z%m~`tW-v`fMu%y5d5z#$CldYb$=U4R{}eiQo|dzQb3qjnvdW$)mL`UcG3->_sFu4Tsxz0NNxJFEW|9eTL9Vz_my< z0{iHI(}mKr<|HyQ1Z4^(2}8$ikRDrO>`2BEj9{QHRxD6$&$ZQAmaq8i=6S}bIGo6& zYtz;$s;NoRDDu^q3D|G6QFqA=#Y{!2>wB5bBA|2AbAJroGz~SkHpw*wL*~iCmNN8l zp&Pg4jDzD(riQBVO*W6M>TYQF*;puBt8SQ1_`?7qNCTf5N1)3=vYgFrvdd`UnU$`v zkIwsJ!|f?k1iu}|`AI<;pd5LqGnm-Y=AgrTZ}C8N-qF$^<<@qRQYm%>b}+nY=6c8! zL9~TTO>*z5Z>DD&zFOpW1nal;leYQG^l7GmitbhsVA)Tr7J&oJ-n=oY3hyGF)K;l} z4a)$wNXZB9b#IIH4TIc_Z#gC}t$*CB(Q(VuK-ARK{79qYHTmh7N0q}(wHO1xi-#Zy zcc6E`VWNj-A=^uEqj0{`9fd}H52AiW+k-l#Z^fq*ni^`(NMxixA0UmpSklOeubS+Z zUs2d_?zvoI-Bwv=l)Ptw5c3csaWkdGnHD}E%Ism7kz@{6Uv0gEj49W2Eg;M8oCK94 zT^Sr(y1on?aXAme+HbL(r0gv`0l0B#Aw>kIQ0pQ4Nh_ri%%2zA8cAlmVpnbsPODt^ z4vdIT>*#0*j4^j3ZrKpf8`m`q_wyamS(jDUQy63;uEOOpS@Uv4t}5?%GP$55$89QS z^k8Ex`duCUnaS$G|wxrd4k(H}sJ#os77E>4hv0#w*5zW!&lI+;HiH3MgMR9Ba6E(hK|Bk+-O;cn#nPC8AsH|-VFusfh$NMsHss$S&!Urb?+;hGukQ+^9#id)q z>hl8WJHS>z*lir5ww7>(;8a8nd9iV21rq>X5k~#V<9p8l`zvz4_x8T1(m~YOxWJ%HRb|8HN39r{ z0i(ZHoM0~8)I7w$?_$`^aaegR%ah-xH4kAVP1_Q};{f{%H+U}7=UT=vF_#h@)Nc_I zsK}$fF_A~A&ThGqpQh?nlrY}3dD$)9PxGvc3S4-M9^3Oa-T~u*bWc#w{Dd-N73RryUCK}u)W4PR?7c*1tBDi5hT>?1)^}XOD&A&(c)%!V9@saz6Xz87 z(q7=uBJJ(iXYZO=V)1Bzc)9vX48>9$7XI1{s~Wqc ze922XM6nuEN9tmfwYWulo?fYF4H|>EM0ZD|J(W-!S`YU$pRj8ShXt`bWB+m+cK{NW0#p<_lTNrVK%@rO6Yik@USZ5nr z5~+VXVG=;)zQXEO|9L8KMw4bTzKMT9*5_}>_2rcV^n=?G>Qkjt9^8v;wYSkBz3~*g%fw$9s$;O|e#Wd$j1))1j0cX}Y1FgKwEvj17Y*IV$=iQW>RN<H90wr}87$8ivfEL?rEw%oQKmawpK9_B~?Gw@l2<*8@HV`8!RfuJ|yY}EN zZE(1_bZN@h?ngP6RCYET#e&Xm80mo^Eo0BpKD4T41$DW_oezI|y$z|#9f?N$yeVg9 zbhJ4~X@GvyT{&hwTS-k{gAX5XmwH}{qh3G^s9O8TJ_$aYMTs`^YQI$jovN4c+EX=?*nN zRDS=|{wmFmJfhv!@V^=P2k2V(4BRA`<)U2o#~%Y6GZJp#eu?m=V){GyXh4*A$2DbV zLGSM<<-cuw2fR8#yKTqc{rJ}z;L5rUrqOCE-=!}~gad6v8kEre#%TZX0$V5n&bHU< zgM7QcPzXS-+W~Dvkhp27{bghVK{Z;yV-yKijlSDPBo)xc%G6fx-{1HXo7X_#iCm#E zU-M2I;UqvCRNdODw`8yX4j&PK5PtJ{NqO~d8!JGFh@2Z%Uw(I*6o6?8z$4NN)T#V8_6qaK;955^VPis6#)Xr+`>Xrrac^$yj3$FZrWY zHqI2y&p|AqjVq>8(jqX4LL6%{{KMMrQ| z@BEReSCICh;R{c2IDNl%DV|3?sqg93J5{TLVD`Z;L*~jcDkbwPGYwR9#K|*NqBmq( z*rYop_CThIi6$t#4z);JUzjhvVvF`JnezJKeN@gAvz|95ICZ|NR2MIR$mW*mP%(0J4GL za&kL_2_)$RZY;pA)lrdHKt_3VYw)i3&6ip+xC3lzm(y>N0RC+^4G_-VARk^%Ak&aY zKfgPa5=!icF&^~`v!`I_{uJHbLYEtP_b~3c?$pBd;O2lV=<0yr9f+GWV)l#%cRMIt zX@LH)P$R)Zg|0bzBpurrzdDp`H^5_OH} zs7At{H-rb}9#a!1er&QMt1P)g5^rh~9m=hfCn@R21%{}tY9YHVTL?Sk9fP*xm>y_~ z?9W^*?_Zz|34yFg=knN!n7o=HsFz%h)%H>^UNBa}N#g8+mOngIBfm?=UYNwbO&kj! zmo4(~ns;aSOyMTCj<_Zflt~QpnzeZZY;mpk#1)hAF)WcaeeW=5+<}h^7n__QBz#A` z&ZD`?YT`Tng<^82*I?rGtf6ibmwBskk<-t?m2?g}c|20Bpc@6NNjHVT&*vOiqBSxE8WE{xyye%SDf~X-Gjz5L#N)8YEHcd{w3I#cc1e158@Y{g&DBU)Wf1U!cO3qKVEd;jZUx!9W z0DBN?US671)N|%)fa$NH!%fTb7vrvqD<-39#n2|fy(pj6UVLz%_w}IzLdF)x@&#K- zY%Rs4Do@}-KODh*f=5>m{q4a{8XDMHCmSh>H7W@eQ&{}zH5#wC#|bXgrgbT~BJKv` zfz)2%w(=npzR-f3(OeeY{&T-Rl|^vSn3fW$)9ztKfH#gst&lUoyJQ|6xD94J(o8e= zg$v&Q;+>;oo7nw)<$}yD6k6o9RCQ9O2UW3P(YXQAE1U!_DjRD|MzOWRt(NhJM~ecE zBY?CHf;R!XoP`CEVuR^hLlQdf0RZrl#5;)f)i_4&q_5Z*%_fnvIATzus>@>t6a=KQ zQSuw081?Iff@W`C#=Pqwr^b8$58lGul)0l@U|(-@(YD5A+mk1Cd_sUcDB*ef6Zu#gU?=O| z(%T8~lmmXLWFamfc{KIP2EMrYKVbRxq-F65U=-B8-r~8d(Bp260;7fcq`L~8@m8US zR2KjH$lo^w#J4a}>S99u9Jz6xQ`sDt8Yb$MvFKa8a}Y`X&vv-)0bjlyaLuoTbtj0J zc55R<>yNzpO8@`{ng?(--3x0R;m+k;z`*kS_Rirgz-7lnJ#|l?GOPO6^uZ+ciOa}X z5>ah1!}sx^z}8Yrd8@Xf-m|2Cm6*TnPgZYmiL8-~>n99On~-DVc9>Kc_-Dx2W{CRL zMn(bZiQ_++sorw-pJ#e02JHDO%tG+sKxee5#8CIwL5!`j{66C4`{d1uY5%-`B~y62 z<-E}viT{y^q;pH%pR7=PbGP%OfU#C^v?ITKX95-`0W#0c@wSq}oize%76T-Rc)0!G zy3@$%G0=z?KX3G1qQwiDTT<0L8N2MAMm+g}Ms$W`pWU&vfSjzrywRe9EL(Y4X%eBE z>rg*!d5+=XqkOD^(5l6l$=HQm{3+a5B2_xA9(M>yEsHcjc9P)WCtLAmEPK|>Qhimt zFFU63$!2(&%62TlSYH-$PK`2#1qgeHlkn6prn*{0BLz)0UY0+gd*Erbqf$XQt}lrh zyfClG3lGMV1^Yej+uvxQV&3gGo%&=Zq=LU$MIKne$U`8)!-1YtoX_;Tm@lS+5_lfcuC zDO>=$8%%m}YJd*95qCI;f=@TgLgaJwF-iXx*Y&ILL}f}XGV$&~l`@YRb1-;aoWI=T&bJwenNuAxEXvvTDG#;D~*jKTI+YzLJ)cQPQyB!6wSVPvg|Z9h4i*iGk?| zosVC4Np-4A{vxB@mw;FPSuQ7^XjROM#SkQ7S@9a=X~9?@@0fsZ^8gG-9X<((yU!s{ zY+0f_Ex-q2#k7}xuNdZB)(EnWi7@JUCR=y|?r<;8vr`|;N$6}!R|A(=%X=@IJzCmW zJy;`KA^4#x9ntLTVu&IaWgP-^9q*{S?{<`yTwODZzkqdRlAq=ETO|cihGVK$D3G~9@MDMv2gJ2 zAB}RkS5LpF8YAFf6xA`u0;ihnEU-6AMcA=X_Bh}isxEG#M$~AAx~}(@7tcbcB`-Z* zv)x>OrsTRA9kaE{e04e%4r~;HBYke~b;OEA{%AX$MK%?>PZ%6R5xCyuw4-~!5c zla6~nEhdx_q!;YufvHZzuajq~Z*Db%ZaW zwcwnlx4=(qUkRChxk{%AX4~ct(Hn^^{n9z)ha~sQc2UmY{mjYRu$^(0vDMf*8n(H4VpBkKB!$)ak|dBu07idFZZP_#uv8=s z^Dpfzk=CmLn;!l~T`Pl|DPfjwKXgDeB=ffQs5~GCumIbI_I04Bz#^EDQB$ zNh)asO@GFfoc+z>f{!mkeXm22{HIBk&P6%<<$;-N?bs!z*LDhH250 z*I;tZ$ztoJD>&Q>thhMPkHWRe-inqwjNpBjZcWa&wfY}E2JI1EcGB-~PH#2R1{sYE z*;gPoNKe@_moWwD3v_iox9l&!NvJ!vVPP#gJ=()^0J?{%<^OKSBGF?Z6TUcp*64iEGFtVuDg^pRQ)HkNGVrgeWK@?^9x~I?KrFD3hWrL+TWp-!-=*WVm(((y;%3Q`M z>c2`6h^Q`{SmrIwnOJ&m<4xoCmn5g+RcUAVCB|6R9}PdtjyXG4oKR4Oc0%(wvU+Mr z&s*6J+HrsW%u%K3a{=RZ%|Z@!>OnRK3w*Ogi-4JdGbLDrPxO zPT0%B-*2T(%1#WesKH!+^2S(`^3EY%Z*iavGkzmvDh%zM{))>$^tN)q{nQ?*xb!Zy^D`rA$9yD^c``CPqk1qj>~gT zS{F8Hce$VVewqEkL&GtO)e;8DXCwCVbhyh0a;#{4TI!>OcB6`24XvV_smauv8x3+S zI)cShqMmqUYy`>FLDz?m*Aj=;d73O1w+J-vHw1Ky;32_e6HRraNFE$Ey-XLj^f}XV zk>_oJU_6}(70EvK3aev0AaZ9If-$X-&e2WQ?K6KIxma5ss%9-CWmF$2F$pN3_%zQ- zFDW;-Y)!w_>MMAIGtdjG{FROQTSqSfOD)7>EbBFUkwaxa!Olc zCI-tOTg~bsYSCB|hi_|=+o*X*^uUCvgs0X0|r|C=Yk#LT+pp}s^*(Oe=p<$xj zH^py-Xc6byNa~fI4XM^#wQ!V@^ttRT2q^Be?2;$zqgf9WZA2Q{4i;^=X_zw);Zu_v z#<<6TJhVwB)V=nsRK1U3Y9_uh2~PagzNwjoq+;K8(yYB~cxV0E_ZbWZ?`JvImlqlv z3mhO=ZAGj9e-xbdHZD)mV)tbADHPx7E7mxXVTi1b+74T~)>7da$Wq-TM8OA2|9*Ai zqr1IMP-_^z9!>AySli7$%e7dZno*hYdcPT5mrJm7u&sInZ446|xwH7XYd`+cs3k;@ z^l)GIf{)K?>86YOz{-c2T+*?jvvW@u!8fdK1pnjLgMF_v=<7<$2j+vAl`^z#)H+#vamugON)t*ESJkg zI-m-;Asq$|M`)eTWJTAqGQH==jVeU_z%^Q1DZ%Tg^Bm^s)9=M-~=D;{_HnL+xxoqk(z-NmD(vFat~P7IvgCSAN_} z3%bXVSOl1C`q&Jo7EBRPJ&heY(*V#~`;GPq7J+i(dSKb3h@F#2O?T+Z9?N=HO|PW( z`Q?xcG(p?&0;SRR!1Pi6)Mfwo2i*<}!`S=RJ4vUCUoK=9^e>p)tR!-}ILw!qK{o&D z^gs)EO1e0M`SNo6F}ir=DCb8z1jX3=m;_Bn zAo?mQi>Ue!Za(0{1-Ledm(QZU@HiEmqD zK--&lAQ^OXcT$VkJ+sK;*DX+F-A5&+?dKluWp=+=^Q}iloFC-a4BZpLz2|WCYjc8S@)vmyJ8bs8??r zg3L<(^;%nAQDWQ0T=|ZgD?e;TEYDsRjEzD99JU9O0EnX9-e1`Gz+o^P z`mvIC=AXJM0Nwco4ZT$+&mztgt0BqHL#J8DRqe_bJCxoXzNsyD+zY!sS`;zf|9liZ z5g{u+J$t%woQLl!-p_dYkP<>Ze~)SCWw@B)PZclb{z<2M}d^PNH$z-s}DH&-0uk@cqT=&YO8$^b-m-{%AD zt?5aBa8s&)wZgP}7PS+Fo{9ebn z?Aymw$iLtr#VBe=ma<&91M(*5K8X_iIj7@W+g(LN10YdYveY&N<6i$PIYZUntKWr` z0)Y(@KC20Sv~I3vgkKa-6BSTebdnk;|21?U1b`#%<$Vt*dH?5&0jeOp0Q}SZ55_+j z|DB*;L*u#~F3SD4oqy&92=u1q1F@Krd}r~Uy9q`A|1=$#mye;?@Fc0FGe?Z;p5yOw zJ-@=sm_Q)v9jv09z9IYJ0^DG zflWlN9SNQ@R9Q+;8!^87n6ZRV0P!YDZ~N~<0Zsyd)W~-*9an3T>>-U$04gqfS#A20 z5Y({Xpd=;B^L+S0NN_0|Z}+C0u#ys9xuuY8x5&`q$1&u^j-TCRQRav$3i=U%pkXU% zhal`WotbrXcOs`aflItjA2+AIM7X)yA|FnZEqVYsIc~`?EI0u8!Am_}mybsdY%kQM z&;EW5!oNm1HjqD`IW|%YJ?}dJ(k!~#3=5LH`QKe~TF7=I0Pr5b$5u5I7UnB%UYB;T znB3IW$`IxUSClh5?mm%Dt|)D*lhLSNf|65Hwin*``H4Lm+#7;R4SSxEnYsO_Nw70Y z^{;nN(SZs?qf2#ep@#` zR^>pzAtv>`p5rwD@cVSWV0#+S-+w93R1Q>%BAyRB+D>;WMa(P^47aHe3lV=TJJ)r=|iOzcAY5Xc$9 zmt%m)0Epz&p2Sbu0FhzJXSBCmtWJKpCNubY)NoVqLuhPq+ik7n;v^D>%B$WEfzC4_ zV)syz3wEOcosR|)rjX*qGAcCO?19!*V~kb}axcB^OMS1i&Ewj=I?h=O1QaT^qJFIi z^lm}x#s|li_l`E4aRGjf;L=kgGIC4~7WCzr_aDNsIcK9uWMKMq=u>q)pzTE6;?q8ujmK=b8(_d)8cLOs? z;&iy@f3I}2Ld4j)`CSwjvBbbkH|f^e}!+BWz=YP`BSTV}`2a_r@sc{fv@Z+VsmmI_~uMhUla zSj;SbaCLHJa)saq2M6YId2>-_HXhHr?0+OE);6_gx^@<9JW25w6mYwd1zQ(Y-Iyn@ zj^=2f#B}dWtGh0`Ejuvgd{cHXcs!cZaMst~tUpMnVhneZaCF3M zI$D~-jZC8_(nfYRxSl@YaQX)RsnEa2+kyMDBVo0zZB{?~aYdUZEx}Y&$VXp*$r&hA zludm^2tin`k5cRWEKv5PfasD9!W0wvJ&Jn+h9x>3`BEe8kfWG%s9kw@^Q z64d7ib;PSc%v6+oJZ$Qs!g9$HO5LJ?0 zMEC8j)_Nz279~RRbAk%*BPV%{Z%F|5rgBUgml%feD~Yvxcp>NjhXA+bMh#vuAH581XPiX@RM`2T8nd^ z#@l~8eA+Q*i+Kdg{lRAC;x!=iPCs0Xv)H=V?nw~g9vopIHzM1y7GgR(!nc~ubC&Sb zHGJKg%-02Hy2aHPP|x95$La9yy}w^hu|$hysE0|v-e(PrXD@LdV)eAH;B8FjCBG>= zRwcda4pAk1gK@OGoI*$;;^xd5yYNj}@M@RsaBy~LH9~zP+i*-g+nr`}Dif(7^76_! z1-tS4gL>De#T?eNLQ)nnjg@py8e@q14XaKDGB%}5Y(CeKbyZv867ut-n~GjYVC*uO zD|=Zh->}fkTpDyunlz15$hTF+klYU!vG;I|+p~0iC>f-$m0B`wf_~kWA-pkNmP~sP z#NvOvRgBqfH(h^{HeJ@@;`0Kv4Imu64lDG3AkzBEdDoH@LWBDG-oJ;?G38qks=jf_ z+OXHB7|};*cHvF_t3SW@usa^^95261@AYU*s{%#%ue+sFpPc6^`tZP}JmM}&l(P{b zTTB8u{!ZgBvMGiRPM~y-=oUG_pY*r{KEp~QTiQkM-CT&rYjHuU_ljKN2yKe~nO0sFrC&BZ?B=s`*nlf;gw~-chOZB>_;s4`G?Y}RYG5lo4!@=3S}kt0P}|CxLYtY z+zu=wQd&XbGzm1QXz!JNoTr5+Vi?57d{&mpSx^MbXVWFsdk zpAsVBv{x<}CxO&2DQJU*XtF(z@H9mj{^~`mbvgaL&(! z4Cb{`Ng#JShj|}(-o3!NzrX9J3&po1-uk-Sc(-$K!1FNgmE9f3Y&0-vXAiriyPe~r z0GWYbELRK&)BhX$~lp7J(-@K?0>j;k1y9J+~kz}XEGJjjcy~LNR&VB zUe`0e*N%zJZl(&`lIW!ylKcDtXYtF|L^|GwU!QKlF88cOFN|rn`ExNp2Q=QCORXUa z3hJC~WR*Q!*fYNQ=mnK8+zIpQkDT;mePfo_y7z5xAPP0}o2*Nb7c`lh@2}6;TZ8bT zQ-QuhP{%Z*z2xfT=>hbZMQ%_BW4g7ee#Rr1prYImoZ`z`s!DKha?B1Pc`X}>7RxAg zLzbLXTl=nhdxmMNdM75q2aZ)=mnq2VhfqvWSnP7ns3C0Wkx_uIt|o!~&YQ5Vl9@&k z#{3box!QE}Jp#IPc3PV zIFjRTh6U#Kl5*#**0~BeEo0le6$cs(c&nqy&W)=W8cw9VQ&TlZOk6Kh5H^oK^{uyh zM9X|mk`~OdpJfyit64EGjud=TK$E1qKE{$eLNm^>7vJNIlVrvVvP0wc0dwYaxy$8B}JXUr() zoAV^>;Uu?ssnlWT%z)jKozQ;GQfZ#p1Ov8YfM} zTlizR#O2L1eu4_dzNK;Em*-v*#LYL~ZPkjpn2DZj?hV}t*XP0!WpwRIn1!yb%f5P> zmMWgwq;$BXLxeH!_FT>LYJ&dY7#1U-MgCRMObNtsMb)EFhcyEijU@xf^q9h*z-HmC zhUgwg#`%})X(?=`+xrS4!tx$EIZm%8`Xe~ro$XFEecN_c*`v|=oi)ikTLvVA7CR1_|(g)$oL#i;fT$J*;`Zit$= z4y|ir{9DtdLf9g(17yN?9*cc(j3=wzxDttA2NP&u<7xL}q9)MOu+2$!**3$lbE+%v0;_*`#6_AO$}{2A_7aC~ zMcoOp8yfXL3C^ zHXuxfJv1*WKDOg!)L$khgm@pP=?(bj$c#TF31CynjdW#p->5tI<}YxbP@p%j5_YL| z@inxpBu6rY+Id1#BN>5GkreQ-bOlLFnkLv;J=uA=m=&9WayZmFY|828b| z3R+t#)vxNS3^)6Rh!M_xa*DZof(EQD+0phCm!@iRhMn>isC=!OP-Rq!uY(#*9`(%&8oLbvlu6G9A(es zjttPrQyZ>$1ydio%EX&nuuQpk55i}0lhvrL<>9g&H`OiW9H#dyr$jC09}m5iX~x)O zZJ)XJh9bM-9K!W-t{6_mKq?!IBtjSkpL_i=B3eYmTNpw;qAa(;O}=mJs#Mvo&%+w1 z8a)%DLe?8CNw3k1+O65Q@jjV++^Jo>GMu@&iXCare43qFQWF%eA?`J|&wQYW(5MXU z5#RA(y=9M@%~b|9j4$y}w8Osj#q@%jvXee{ ziP3FWnGY$#mebKDq#UW7c6O_2 z)QW=p34Nix^xCFQh!Zs1kuF8=4XReRs?8L3jK6$wnjnnP)+Wmqmj0~blJ|I> zNec8cgK3Ay`aPrEal}_sa*r1pFE{Xla#7u|dWPmt8@5NwQ%yb(Dp8NLau35YkDji9 z^xHYuyc+LqGbLDD0RGJXTJPo$zz&Q-^7+8Gc4dYNg+Jfkw>JyTR@mxzxb~F#vO_By zL)dt0w-r0KDxB!~^mWdRu#2m{uh(9`|95BK+(lQ5FQpu_7e86JSNxOog(#EUj3_T{KZb;k7q2D(0_zd9~0 z*7C19##+pCJvwOd$@4avuZ6#zve_$tt>-(_pKotxs{Lo++@Fzl_URJOZP{k(ALWrN zy4@TV|J-iJy2pNC=n0%s?4tYEbk>KRp4wa9g!q{LwV&Rj?Mh{mWycD z&CN~0&!?<7=QJs7KBwWyEfY8$yYEFQ|H%Gw@3qPNgze|}vmK1qg{sTv-(4##r`2!L zYqWjWQa-;;QYSsqT8$fBV&4cIv60ICwLWgQV#VUT?|iviy!yA7T%9yc-GBb%r?0n5 z9cRjRP10Xt0z5C$i1QHdYuAkbX0_b;ldf>BT>0x~#^Zv9!>YCS8F_N&bhnizpOelj zZrgZ2M!5WS%hgGJrzCIv(l{&pBj|nk+p4~jYn6v~9*Fq*+HFSF?;m{ZjBfwu9X@%< z?dvc5U)MbD25L_HzGPYYj2aGYMF~D$ndWtdYkgf6j0OKWGi~Qon9i&kbNaoSpa8V& zw&`KX%5b@%JN5ka;vy5ntGh1+O}obI`cEq-RNZjXZ#&d^6kVC@Y}Y=XvfHS(`1$_W(B*%2eyg}OuQ|Qz56fz;{#^O}lMn0_IPib2Vxo~Zv>DjwZb~Q7-``hXzD)}oSEA?1TrL+9=$E-1-7Zt=;tqGm> zA^K)%->(mgHoC4hdojD_^{n9jIUd3<-fYZHy8VDBSL&h=znWXt({pmj)K3b>7p|PP^9c8z8y*X+1QJsATiLj-YXtW# z7ia;ykL$f=$#k=LJdg(V`2I^DJwF>#dhSqQ+`jVI;oHMXYbtR$5T;7FM)c7Umibvf;`^iai9`t#@zJd+Nk}-rJ&C2%j1VnPDJU< zeg^gS&i92+LJ{>A26hcE^|wz}M(V;SFg^#FF;8~A3X14-HDK>@sXV{BJ4#pk9LNkC z>p0}mOa~@CUtovW+g{GE52XV>M;&NJW!audD55d5fZf^YbvAQkkYa*?)50HU#^*N` zswkp6On`x;_qW2r5;aKY0nK=R^P?B4D6W8R{LlWc_wMC6hfIAKfWXt$&t;ucLK6U; CR`&V; literal 0 HcmV?d00001 diff --git a/datacenter/ucp/2.1/guides/admin/configure/content-trust/admin_tasks.md b/datacenter/ucp/2.1/guides/admin/configure/content-trust/admin_tasks.md new file mode 100644 index 0000000000..4ed0592c00 --- /dev/null +++ b/datacenter/ucp/2.1/guides/admin/configure/content-trust/admin_tasks.md @@ -0,0 +1,387 @@ +--- +title: Configure the UCP and DTR servers for content trust +description: Configuration tasks for using content trust on UCP and DTR servers +--- + +These tasks allow an administrator to set up the UCP and DTR servers to require +content trust and to delegate the ability to sign images to UCP users. For an +overview of content trust in UCP, see [Run only the images you trust](index.md). + +After completing these steps, continue to +[Client configuration for content trust in UCP](client_configuration.md). + +## Prerequisites + +Before completing these tasks, set up the teams for signing and add users to +them. For instance, if your business requirement is that images need to be +signed by `engineering`, `security`, and `quality` teams, set up those teams and +add the appropriate users to them. See +[Set up teams](/datacenter/ucp/2.1/guides/admin/manage-users/create-and-manage-teams.md) +and +[Create and manage users](/ucp/2.1/guides/admin/manage-users/create-and-manage-users.md). + +## Overview + +The administrator needs to complete the following tasks to configure UCP and DTR +for image signing. + +2. [Configure UCP](#configure-ucp) to only allow signed images to be used. + +3. [Set up the Docker Notary CLI client](#set-up-the-docker-notary-client) + locally so that the administrator can initialize the trusted image + repository. + +4. [Initialize the trusted image repository](#initialize-the-trusted-image-repository) + which will store trusted images. + +5. [Delegate image signing](#delegate-image-signing) so that the appropriate + users are able to sign images. This step is optional, and assumes that the + UCP administrator will not be the only one signing images. + +## Configure UCP + +This step configures UCP to only allow deployment of signed images, as well as +the teams that must sign an image before it can be trusted. Set up the users +and groups before starting this step. + +1. Go to the **UCP web UI**, navigate to the **Admin Settings** page, and click + the **Content Trust** menu item. + + ![Content Trust settings](/datacenter/images/ucp_content_trust_settings.png) + +2. Select the **Only run signed images** option. + + Click the **REQUIRE SIGNATURE FROM ALL OF THESE TEAMS** field and choose + one or more teams. DDC will consider an image to be trustworthy only if it + is signed by a member of _every team_ you select. The requirement can be + fulfilled by a single user who is a member of all the teams, or by a signer + in each team. + + > **Note**: If you don't specify any team (by leaving the field blank), an + > image will be trusted as long as it is signed by any UCP user whose keys + > are [configured in the Notary client](#set-up-the-docker-notary-client). + + The following screenshot shows a configuration that requires images to be + signed by a member of the `engineering` team. + + ![Content Trust settings detail](/datacenter/images/ucp_content_trust_detail.png) + +3. Click **Update** to apply the changes. + +UCP is now configured to only allow use of signed images, but you don't have the +ability to sign images yet. Next, +[set up the Docker Notary CLI client](#set-up-the-docker-notary-client). + +## Set up the Docker Notary CLI client + +After [configuring UCP](#configure-ucp), you need to specify which Docker images +can be trusted, using the Docker Notary server that is built into Docker Trusted +Registry (DTR). The following procedure configures the Notary server to store +signed metadata about the Docker images you trust. This set-up step only needs +to be done on the client of an administrator responsible for setting up +repositories and delegating the ability to sign images. + +1. **If you are on a Linux client**, install the Notary binary. If you use Docker + for Mac or Docker for Windows, the Notary client is included in your + installation. + + - [Download the latest client archive](https://github.com/docker/notary/releases). + - Extract the archive. + - Rename the binary to `notary` and set it to executable. Either move it to + a location in your path or modify the examples below to include the full + path to the binary. + +2. Configure the Notary client to communicate with the DTR server and store + its metadata in the correct location. You can either use a + [Notary configuration file](/notary/reference/client-config.md) or manually + specify the following flags when you run the `notary` command. + + |Flag |Purpose | + |-------------------|------------------------------------------------------| + | `-s ` | The hostname or IP address of the DTR server | + | `-d ` | The path to the local directory where trust metadata will be stored | + | `--tlscacert ` | The path to the trust certificate for DTR. Only required if your DTR registry is not using certificates signed by a globally trusted certificate authority, such as self-signed certificates. Download the trust certificate from `https:///ca` either from your browser or using `curl` or `wget`.| + + > **Tip**: If you don't want to provide the `-s`, `-d`, and `--tlscacert` + > parameters each time you run a Nptary command, you can set up an alias in + > Bash (Linux or macOS) or PowerShell (Windows) to save some typing. The + > following examples do not include the `--tlscacert` flag, but you can add + > it if necessary. All of the `notary` commands in the rest of this topic + > assume that you have set up the alias. + > + > - **Bash**: Type the following, or add it to your `~/.profile` file to make + > it permanent. Replace `` with the hostname or IP address of your + > DTR instance. + > + > alias notary="notary -s https:// -d ~/.docker/trust" + > + > - **PowerShell**: Type the following, or add it to your `profile.ps1` to + > make it permanent. + > + > PS C:\> set-alias notary "notary -s https:// -d ~/.docker/trust" + > + > + > After setting up the alias, you only need to type `notary` and the server + > and destination directory will be included in the command automatically. + {: id="notary_alias_config_note" } + +3. Find the _globally unique name (GUN)_ for your repository. The GUN + is the `/` string, such as + `dtr-example.com/engineering/my-repo`. You can find the GUN for a repository + by browsing to it in the DTR web UI and copying the part of the + **Pull command** after `docker pull`. + +Next, [initialize a trusted image repository](#set-up-a-trusted-image-repository). + +## Initialize the trusted image repository + +> **Tip - Yubikey integration**: Notary supports integration with Yubikey. If +> you have a Yubikey plugged in when you initialize a repository with Notary, +> the root key is stored on the Yubikey instead of in the trust directory. When +> you run any command that needs the `root` key, Notary looks on the Yubikey +> first, and uses the trust directory as a fallback. + +This procedure needs to be done on the client of an administrator responsible for +setting up repositories. It needs to be done once per signing repository. + +In these examples, add the `-s`, `-d`, and `--tlscacert` parameters you need +before `` if you decided not to configure Notary using a +[configuration file](/notary/reference/client-config.md){: target="_blank" class="_" } +or a [terminal alias](#notary_alias_config_note"). + +1. In the DTR web UI, create a new repository or browse to an existing + repository that you want to reconfigure as a trusted image repository. + Make a note of the GUN for the repository by copying the contents of the + **Pull command** field after `docker pull`. + + ![Finding the GUN in the DTR UI](/datacenter/images/dtr_repo_find_gun.png) + +2. At the command line on your client, check whether Notary has information + about the repository. Most likely if you are performing this task for the + first time, the repository is not initialized. + + ```bash + $ notary list + ``` + + The response may be one of the following: + + - `fatal: client is offline`: Either the repository server can't be reached, + or DTR is using certificates which are not signed by a globally trusted + certificate authority, such as self-signed certificates. Run `notary list` + again, adding the `--tlscacert` flag, with the path to the certificate + authority for DTR. To get the certificate, download `https:///ca` + from your browser or using `curl` or `wget`. This certificate is + different from the UCP trust certificate in the UCP client bundle. + + - `fatal: does not have trust data for ddc-staging-dtr.qa.aws.dckr.io/engineering/redis`: + The repository has not yet been initialized and you need to run + `notary init`. Continue to step 2. + + - `No targets present in this repository.`: The repository has been + initialized, but contains no signed images. You do not need to do step 2. + + - A list of signed image tags, their digests, and the role of the private + key used to sign the metadata. This indicates that the repository is configured + correctly and images have been signed and uploaded. You do not need to do + step 2. + +2. To initialize the repository, run `notary init`, setting the `-p` flag to + the GUN of the repository. You will be prompted to set passphrases for + three different keys: + + - The `root` key is used to sign the `targets` and `snapshot` keys. + - The `targets` key will be used to sign the keys of users authorized to sign + images and designate them as trusted. + - The `snapshot` key is used for snapshotting the repository, which is an + optimization for updating the trust data. + + ```bash + $ notary init + + No root keys found. Generating a new root key... + You are about to create a new root signing key passphrase. This passphrase + will be used to protect the most sensitive key in your signing system. Please + choose a long, complex passphrase and be careful to keep the password and the + key file itself secure and backed up. It is highly recommended that you use a + password manager to generate the passphrase and keep it safe. There will be no + way to recover this key. You can find the key in your config directory. + + Enter passphrase for new root key with ID 717fa4b: + Repeat passphrase for new root key with ID 717fa4b: + Enter passphrase for new targets key with ID 776d924 (): + Repeat passphrase for new targets key with ID 776d924 (): + Enter passphrase for new snapshot key with ID d3cc399 (): + Repeat passphrase for new snapshot key with ID d3cc399 (): + Enter username: admin + Enter password: + ``` + + As the help text in the command says, it's important to choose good + passphrases and to save them in a secure location such as a password + manager. The final username and password prompt are for the DTR login. + + Several important files are saved in the trust directory (the location you + specified as the value of the `-d` flag. The following is an example listing + of the trust directory: + + ```none + ├── private + │   ├── root_keys + │   │   └── 92c11d487023de4447ef57747e84e7364cd7c62a4be28d8714ec05afe2f130f8.key + │   └── tuf_keys + │   └── dtr-example.com + │   └── engineering + │   └── testrepo + │   ├── 87a129ea47a4112fec6b989bde35f6ddea8325638450d41b3f44fabaf49dbe3d.key + │   └── aa4b236c610e3d951c930bf2a503861c41808ac28369bfbaf5c075b62cb3dd41.key + └── tuf + └── dtr-example.com + └── engineering + └── testrepo + ├── changelist + └── metadata + ├── root.json + ├── snapshot.json + └── targets.json + ``` + + The `tuf` directory contains metadata needed by Notary. The `private` + directory contains the root key, target key, and snapshots key. It is + important to protect these keys, especially the root key. If you are using + the Yubikey integration feature, the root key is already stored on your + Yubikey. You should back up the entire `private` subdirectory to secure + offline storage and remove the `root_keys` subdirectory from the trust + directory. If you do not use a Yubikey, back up the entire trust + directory to secure offline storage, and bring it online only when you need + to perform Notary operations. + +3. The metadata has been created but only exists on your client. To publish + it to DTR, use `notary publish`. + + ```bash + $ notary publish + + Pushing changes to + Enter username: admin + Enter password: + Enter passphrase for targets key with ID 63c2d66: + Enter passphrase for snapshot key with ID 6ac388d: + Successfully published changes for repository + ``` + + You will be prompted for the DTR login, the passphrase for the `targets` key, + and the passphrase for the `snapshot` key. + +Typically, the administrator is not part of the group which is authorized to +sign images. If you do attempt to sign images and you are not part of one of the +correct groups, the image will not be available to UCP. + +Continue to [delegate image signing](#delegate-image-signing) to give the +appropriate users the ability to sign images. + +You can also +[learn more about the keys used by Notary](/engine/security/trust/trust_key_mng.md). + + +## Delegate image signing + +The administrator who manages Docker Trusted Registry is often not part of the +group which is allowed to sign images. This is where +[Notary delegation roles](/notary/advanced_usage.md) come in. Delegation roles +provide: + +- Simple collaboration workflows +- Fine-grained permissions within a collection's contents across delegations +- Ability to dynamically add or remove keys from delegation roles when + collaborators join or leave trusted repositories + +When you [initialized the trusted repository](#nitialize-the-trusted-image-repository), +three keys were created: + +- The `root` key signs the `targets` and `snapshot` keys. +- The `targets` key is used by Notary for delegation roles, which act as signers. +- Each change in the repository needs to be signed by the `snapshot` key. + +To avoid the need to distribute the `snapshot` key to each person who will sign +images, you can configure the Notary server to manage it. In order to do this, +you need to also rotate the `snapshots` key, so that private keys do not need +to be transferred between the client and server. + +1. Rotate the key and configure the Notary server to manage it. This operation + only needs to be done once for each trusted repository. + + ```bash + $ notary key rotate snapshot --server-managed + ``` + + You are prompted for the DTR credentials followed by the passphrase for the + `root` key. + +2. For each user who should be able to sign images, ask that user to create a + client bundle. They should: + + 1. Go to the UCP web UI. + 2. Click your username at the top right. Click **Profile**. + 3. Click **Create a Client Bundle**. A file is downloaded called + `ucp-bundle-.zip`. + 4. Extract the zip file. The important file within the archive is the + `cert.pem`, which is the user certificate. + 5. Send you the `cert.pem` **through a secure, trusted channel**. If you + plan to create more than one delegation, rename the `cert.pem` with the + username or other identifying information. + +3. Run the following command to add the `targets/releases` delegation role for + each user, using the `cert.pem` files. You can specify multiple `cert.pem` + files at once. + + ```bash + $ notary delegation add -p targets/releases --all-paths user1.pem user2.pem + ``` + + You will be prompted for your DTR credentials and the passphrase for the + `targets` key. + + > **Note**: You can also add arbitrary delegations, but `targets/releases` + > is a special delegation, and is treated as an actual release branch for + > Docker Content Trust. If a Docker client has content trust enabled, and + > the client runs `docker pull`, this delegation is what signals that the + > content is trusted. + + Each user who can release images should be added to the `targets/releases` + role. + +4. Create at least one more delegation and add users to it, or UCP will not + honor the signed content. This delegation indicates the team that is signing + the release. + + Docker recommends adding one delegation per team. For instance, if you have + an `engineering` team and a `qa` team, add a delegation for each of these. + If a user is a member of both teams, that user will be able to indicate + which team they are signing on behalf of. Notary has no limit on how many + delegation roles can exist. + + Valid delegation roles take the form of `targets/`. Do not include + a trailing slash. + + The following command adds `user1` to the `targets/engineering` delegation: + + ```bash + $ notary delegation add -p targets/engineering --all-paths user1.pem + ``` + + You will be prompted for your DTR credentials followed by the passphrase + for the `targets` key. + +5. Securely remove the `.pem` files of the users you added delegations to. If + these keys are compromised, they could be used to sign images which should + not be trusted. + + +## Next steps + +The Notary server is now configured to allow users to sign images. Next, each +user needs to [configure their client](client_configuration.md) +and [sign some images](client_configuration.md#sign-and-push-images). + +[Learn more about the targets/releases role](/engine/security/trust/trust_delegation.md). diff --git a/datacenter/ucp/2.1/guides/admin/configure/content-trust/client_configuration.md b/datacenter/ucp/2.1/guides/admin/configure/content-trust/client_configuration.md new file mode 100644 index 0000000000..ebb25e985b --- /dev/null +++ b/datacenter/ucp/2.1/guides/admin/configure/content-trust/client_configuration.md @@ -0,0 +1,255 @@ +--- +title: Configure the Docker client to sign images +description: +--- + +After an administrator +[configures the UCP and DTR servers for content trust](admin_tasks.md) and +[delegates users to be able to sign images](admin_tasks.md#delegate-image-signing), +each of those users needs to configure their system for image signing. This +topic covers the required configuration steps, as well as how to sign and +push images. + +Each user who will sign images needs to follow these steps. + +## Import the user's signing key + +Users who need to sign images should import the `key.pem` file from their UCP +client bundle into Docker. The user probably downloaded the client bundle when +they sent the administrator their `cert.pem` so the administrator could +[delegate signing to them](#delegate-image-signing). + +Import the private key associated with the user certificate. You must specify +the trust directory `~/.docker/private`. If the `~/.docker/private` directory +does not yet exist, Notary will create it. + +- **Linux or macOS**: + + ```bash + $ notary -d ~/.docker/trust key import /path/to/key.pem + ``` + +- **Windows**: + + ```powershell + PS C:\> notary -d ~/.docker/trust key import /path/to/key.pem + ``` + +You are prompted for a passphrase. Save it in a secure location such as a +password manager. You will need to provide the passphrase each time you sign an +image. + +## Configure the Docker client + +These steps may need to be performed for each Docker user who will push images +to the trusted repository, and also on each Docker client which should only be +allowed to pull and use trusted images. + +### Linux or MacOS + +1. **Required**: Set the `DOCKER_CONTENT_TRUST` environment variable to `1`. + You can do this temporarily or permanently. + + - To set the environment variable for the current command-line session, type + the following into the terminal where you will be running `docker` commands: + + ```bash + $ export DOCKER_CONTENT_TRUST=1 + ``` + + This environment variable will be effective until you close the command + prompt. + + - To set the environmment variable for just a single command, add it before + the command: + + ```bash + $ DOCKER_CONTENT_TRUST=1 docker pull... + ``` + + - To set the environment variable permanently, edit the `~/.profile` file + and add the following line: + + ```bash + export DOCKER_CONTENT_TRUST=1 + ``` + +2. **If your DTR instance uses certificates not signed by a public certificate authority (CA)**: + Configure the local Docker daemon and client to trust the DTR server's + certificate. You need to do this step if you see an error like the following + when you try to [sign and push an image](#sign-and-push-an-image). + + ```none + x509: certificate signed by unknown authority + ``` + + This procedure is different if you are on a Linux or macOS client: + + - **Linux**: + + 1. Download the certificate add it to a subdirectory of the + `/etc/docker/certs.d/` directory. + + ```bash + $ sudo mkdir -p /etc/docker/certs.d/ + + $ curl -k https:///ca -o .crt + + $ sudo mv .crt /etc/docker/certs.d//ca.crt + ``` + + 2. Configure the Docker client to use certificates available to the + Docker daemon by creating a symbolic link from `/etc/docker/certs.d/` + to `~/.docker/tls/` + + ```bash + $ ln -s /etc/docker/certs.d ~/.docker/tls + ``` + + 3. Restart Docker using one of the following commands: + + - `sudo systemctl restart docker` + - `sudo service docker restart` + + - **macOS**: + + 1. Download the certificate and name the output file + `.crt`. + + ```bash + $ curl -k https:///ca -o .crt + ``` + + 2. Import the certificate into the macOS keychain. This example uses the + command line, but you can use the **Keychain Access** application + instead. + + ```bash + $ sudo security add-trusted-cert -d \ + -r trustRoot \ + -k /Library/Keychains/System.keychain \ + .crt + ``` + + 3. Restart Docker for Mac. Click the Docker icon in the toolbar and click + **restart**. + +The Docker daemon and client now trust the DTR server. Continue to +[Sign and push an image](#sign-and-push-an-image). + +### Windows + +1. Set the `DOCKER_CONTENT_TRUST` environment variable to `1`. You can do this + temporarily or permanently. + + - To set the environment variable for the current PowerShell session, type the + following into the PowerShell terminal where you will be running `docker` commands: + + ```powershell + PS C:\> $env:DOCKER_CONTENT_TRUST = "1" + ``` + + This environment variable will be effective until you close the PowerShell + session. + + - To set the environment variable permanently for the logged-in user, use the + following command: + + ```powershell + PS C:\> [Environment]::SetEnvironmentVariable("DOCKER_CONTENT_TRUST", "1", "User") + ``` + + The variable is set immediately. + + Whichever method you use, you can verify that the environment variable is set + by typing `$Env:DOCKER_CONTENT_TRUST` at the command line. + +2. **If your DTR instance uses certificates not signed by a public certificate authority (CA)**: + Configure the local Docker daemon and client to trust the DTR server's + certificate. You need to do this step if you see an error like the following + when you try to [sign and push an image](#sign-and-push-an-image). + + 1. Download the certificate by browsing to the URL + `https:///ca`. The certificate is shown in the browser + as a text file. Choose **File** / **Save As** and save the file as + `.crt`. + + 2. Open Windows Explorer and go to the directory where you saved the file. + Right-click `.crt` and choose **Install certificate**. + + - Select **Local machine** for the store location. + + - Select **Place all certificates in the following store**. + + - Click **Browse** and select **Trusted Root Certificate Authorities**. + + - Click **Finish**. + + 3. Restart Docker for Windows. Click the Docker icon in the Notifications + area and click **Settings**. Click **Reset** and choose + **Restart Docker**. + +The Docker daemon and client now trust the DTR server. Continue to +[Sign and push an image](#sign-and-push-an-image). + +## Sign and push an image + +After [Configuring the signer's Notary and Docker clients](#onfigure-the-signers-otary-and-ocker-clients), +the user can sign and push images to Docker Trusted Registry. These steps are +the same on Linux, macOS, or Windows. + +1. Log into DTR. + + ```bash + $ docker login + ``` + + You are prompted for your DTR credentials. + +2. Tag the image with a tag in the format `:imagename`. The following + example tags the `ubuntu:16.04` image as `ubuntu` in your trusted + repository. This will signal to the `docker push` command that the image tag + contains a repository. + + ```bash + $ docker tag ubuntu:16.04 dtr-example.com/engineering/testrepo:ubuntu + ``` + +3. Sign and push the tagged image, so that your deployments can use it. The + following example signs and pushes the image created in the previous step. + You are prompted for the delegation key passphrase. + + ```bash + $ docker push dtr-example.com/engineering/testrepo:ubuntu + + The push refers to a repository [dtr-example.com/engineering/testrepo] + 5eb5bd4c5014: Pushed + d195a7a18c70: Pushed + af605e724c5a: Pushed + 59f161c3069d: Pushed + 4f03495a4d7d: Pushed + ubuntu: digest: sha256:4c0b138bdaaefa6a1c290ba8d8a97a568f43c0f8f25c733af54d3999da12dfd4 size: 1357 + Signing and pushing trust metadata + Enter passphrase for delegation key with ID ff97e18: + Successfully signed "dtr-example.com/engineering/testrepo":ubuntu + ``` + +4. To test pulling the image, remove it locally, then pull it. + + ```bash + $ docker image remove dtr-example.com/engineering/testrepo:ubuntu + + $ docker pull dtr-example.com/engineering/testrepo:ubuntu + ``` + +5. You can verify that the image exists in the repository using the DTR web UI. + Go to the DTR web UI and click **Repositories**. Choose the repository and + go to **Images**. + + ![Trusted image in DTR repository](/datacenter/images/signed_image_in_dtr.png) + +The signed, trusted image is available in your trusted repository. + +## Where to go next + +* [Restrict services to worker nodes](restrict-services-to-worker-nodes.md) diff --git a/datacenter/ucp/2.1/guides/admin/configure/content-trust/index.md b/datacenter/ucp/2.1/guides/admin/configure/content-trust/index.md new file mode 100644 index 0000000000..2af152e19e --- /dev/null +++ b/datacenter/ucp/2.1/guides/admin/configure/content-trust/index.md @@ -0,0 +1,61 @@ +--- +description: Configure a Docker UCP cluster to only allow running applications that use images you trust. +keywords: docker, ucp, backup, restore, recovery +title: Run only the images you trust +redirect_from: + - /datacenter/ucp/2.1/guides/admin/configure/only-allow-running-signed-images/ +--- + +## About trusted images + +When transferring data among networked systems, _trust_ is a central concern. In +particular, when communicating over an untrusted medium such as the internet, it +is critical to ensure the integrity and the publisher of all the data a system +operates on. Docker allows you to push images to, and pull images from, public +and private registries. + +Docker provides a mechanism called +[content trust](/engine/security/trust/content_trust.md), which you can use to +verify that the contents of the image have been approved by people you trust, +and to prevent untrusted images from being used in your UCP instance. + +### Example workflow for using trusted images + +An example workflow that takes advantage of content trust might look like this: + +1. Developers push code into source control. +2. A CI system performs automated tests. If the tests pass, the CI system + builds and cryptographically signs an image containing the code. +3. A quality engineering team pulls the image signed by the CI system and + performs quality tests on it. When the image is approved for production, + part of the approval process is to cryptographically sign the image again. +4. If any image is not signed both by the CI group and the QA group, UCP + refuses to deploy it. + +## Configuration overview + +First, an administrator performs the following configuration tasks, which are +detailed in [Server-side tasks for content trust in UCP](admin_tasks.md). + +1. Configure UCP. + +2. Configure the Notary client on the administrator's system. + +3. Initialize the trusted repository in DTR. + +4. Delegate image signing to users in the correct groups. + + +Afterward, members of approved teams perform the following tasks, which are +detailed in [Configure the Docker client to sign images](client_configuration.md): + +1. Set up the Docker CLI to use the signing certificates from the UCP client + bundle and to require images to be signed when pulling them from + repositories. + +2. Sign and push an image to a repository. + +## Next steps + +- [Server-side tasks for content trust in UCP](admin_tasks.md) +- [Configure the Docker client to sign images](client_configuration.md) diff --git a/datacenter/ucp/2.1/guides/admin/configure/only-allow-running-signed-images.md b/datacenter/ucp/2.1/guides/admin/configure/only-allow-running-signed-images.md deleted file mode 100644 index 0f98d3d660..0000000000 --- a/datacenter/ucp/2.1/guides/admin/configure/only-allow-running-signed-images.md +++ /dev/null @@ -1,178 +0,0 @@ ---- -description: Configure a Docker Universal Plane cluster to only allow running applications - that use images you trust. -keywords: docker, ucp, backup, restore, recovery -title: Run only the images you trust ---- - -With Docker Universal Control Plane you can enforce applications to only use -Docker images signed by UCP users you trust. When a user tries to deploy an -application to the cluster, UCP checks if the application uses a Docker image -that is not trusted, and won't continue with the deployment if that's the case. - -By signing and verifying the Docker images, you ensure that the images being -used in your cluster are the ones you trust and haven't been altered either -in the image registry or on their way from the image registry to your UCP -cluster. - -## Configure UCP - -To configure UCP to only allow running applications that use Docker images you -trust, go to the **UCP web UI**, navigate to the **Settings** page, and click -the **Content Trust** tab. - - - -Select the **Run only signed images** option to only allow deploying -applications if they use images you trust. - -Then, in the **Require signature from** field, you can specify all the teams -that need sign the image, before it is trusted to run in the UCP cluster. If -you specify multiple teams, the image needs to be signed by a member of each -team, or someone that is a member of all those teams. -If you don't specify any team, the image will be trusted as long as it is signed -by any UCP user whose keys are trusted in a Notary delegation role. - -## Set up the Docker Notary CLI client - -Once you've configured UCP to only run applications that use Docker images you -trust, you'll need to specify which Docker images can be trusted. This is done -by using the Docker Notary server that is built into Docker Trusted Registry. -You'll configure the Notary server to store signed metadata about the Docker -images you trust. - -To interact with the Notary server, you need to -[install the Notary CLI client](https://github.com/docker/notary/releases). - -Once you've installed the Notary client, you need to configure it to talk to -the Notary server that is built into Docker Trusted Registry. This can be done -using a [Notary configuration file](/notary/reference/client-config.md) -or by running: - -```bash -# Create an alias to always have the notary client talking to the right server -$ alias notary="notary -s https:// -d ~/.docker/trust" -``` - -Where `-s` specifies the notary server to talk to, and `-d` specifies the -directory to store private keys and cache data. - -If your Docker Trusted Registry is not using certificates signed by a globally -trusted certificate authority, you'll also need to configure notary to use the -certificate of the DTR CA: - -```bash -$ alias notary="notary -s https:// -d ~/.docker/trust --tlscacert " -``` - -## Set up a trusted image repository - -Once your Docker Notary CLI client is configured, you can check if Notary has -information about a specific repository: - -```bash -# // is also known as a Globally Unique Name (GUN) -$ notary list // -``` - -If notary has information about the repository it returns the list of -image tags it knows about, their expected digests, and the role of the private -key used to sign the metadata. - -If Notary doesn't know yet about an image repository, run: - -```bash -$ notary init -p // -``` - -The Notary CLI client generates public and private key pairs, prompts you for -a passphrase to encrypt the private key, and stores the key pair in the -directory you've specified with the `notary -d` flag. -You should ensure you create backups for these keys, and that they are kept -securely and offline. -[Learn more about the keys used by Docker Notary.](/engine/security/trust/trust_key_mng.md) - -## Sign and push an image - -Now you can sign your images before pushing them to Docker Trusted Registry: - -```bash -# Setting Docker content trust makes the Docker CLI client sign images before pushing them -$ export DOCKER_CONTENT_TRUST=1 -# Push the image -$ docker push //: -``` - -The Docker CLI client will prompt you for the passphrase you used to encrypt the -private keys, sign the image, and push it to the registry. - - -## Delegate image signing - -Instead of signing the Docker images yourself, you can delegate that task -to other users. - -Delegation roles simplify collaborator workflows in Notary trusted collections, -and also allow for fine-grained permissions within a collection's contents -across delegations. -Delegation roles act as signers in Notary that are managed by the targets key -and can be configured to use external signing keys. Keys can be dynamically -added to or removed from delegation roles as collaborators join and leave -trusted repositories. -[Learn more about Notary delegation roles.](/notary/advanced_usage.md) - -Every change to the repository now needs to be signed by the snapshot key that -was generated with the `notary init` command. -To avoid having to distribute this key to other members so that they can also -sign images with this key, you can rotate the key and make it be managed by -the Notary server. - -This operation only needs to be done once for the repository. - -```bash -# This only needs to be done once for the repository -$ notary key rotate // snapshot --server-managed -``` - -Then ask the users you want to delegate the image signing to share with you -the `cert.pem` files that are included in their client bundles. These files -should be shared using a trusted channel. - -Then run the following command to create a new Notary delegation role, using the -user certificates: - -```bash -$ notary delegation add -p // targets/releases --all-paths user1.pem user2.pem -``` - -The above command adds the the `targets/releases` delegation role to a trusted -repository. -This role is treated as an actual release branch for Docker Content Trust, -since `docker pull` commands with trust enabled will pull directly from this -role, if data exists. -All users that can release images should be added to this role. -[Learn more about the targets/releases role](/engine/security/trust/trust_delegation.md). - -Notary has no limit on how many delegation roles can exist, so you can add more -delegation roles such as `targets/qa_team` or `targets/security_team` to the -trusted repository. - -Valid delegation roles take the form of `targets/`, where -`` does not include further slashes. - -You will need to add the key to at least one delegation in addition to the `targets/releases` delegation in order for UCP to honor the signed content: - -```bash -$ notary delegation add -p // targets/devops --all-paths user1.pem user2.pem -``` - -Before delegation role users can publish signed content with Notary or -Docker Content Trust, they must import the private key associated with the user certificate: - -```bash -$ notary key import key.pem -``` - -## Where to go next - -* [Restrict services to worker nodes](restrict-services-to-worker-nodes.md) diff --git a/datacenter/ucp/2.1/guides/admin/configure/store-logs-in-an-external-system.md b/datacenter/ucp/2.1/guides/admin/configure/store-logs-in-an-external-system.md index 4ed69afc62..7fa9313915 100644 --- a/datacenter/ucp/2.1/guides/admin/configure/store-logs-in-an-external-system.md +++ b/datacenter/ucp/2.1/guides/admin/configure/store-logs-in-an-external-system.md @@ -55,4 +55,4 @@ options that can accomplish this (e.g. Shield plug-in for Kibana) ## Where to go next -* [Only allow running signed images](only-allow-running-signed-images.md) +* [Require all images to be signed](content-trust.md)