From 85257db9c69fb691e988becbebd53125e06cc5ed Mon Sep 17 00:00:00 2001
From: Joao Fernandes <joao.fernandes@docker.com>
Date: Fri, 12 Feb 2016 18:34:46 -0800
Subject: [PATCH] Document UCP architecture and install plan

Documented install plan, included feedback from team.
Signed-off-by: Joao Fernandes <joao.fernandes@docker.com>
---
 images/ucp-architecture.png | Bin 0 -> 56873 bytes
 plan-production-install.md  | 900 ++++++++----------------------------
 2 files changed, 191 insertions(+), 709 deletions(-)
 create mode 100644 images/ucp-architecture.png

diff --git a/images/ucp-architecture.png b/images/ucp-architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..22bd07d763903e602427c72a22fe481afd41e01b
GIT binary patch
literal 56873
zcmeFZV|1lU*Df4(Y+D_5Y}>YN+w9o3(P787ZQHiZ&X?Z%*}b3l9q0cy&KM_uvetc9
z&6+i97Orc~TA{MiA~2AckN^MxFk+&D@&Eupvj6~qiQr#8pK#)Mt$+RlG2xTq0|2Ow
zhI-Qj{rrw^ASy2f0N_pn0N@h<0Pynp$ma+Ez=;+B;6xVyfIS5O0L?a|MUL}RkeZpI
zs-vouB)fr)6}6tBjlL1JtCj6%jZf*W?4KX4j2!jwU9Bvw9oSvD2>&X<{`vX$V;VyI
zzlu0oa1p9X$>Iyx*c;(9Q8QB05^_W0<KuJM8yd6A3kv_I`sX(;LQ_XaTXq^67Z(?5
z7Y1q@dlMQuHa0dIT6!9KdaBP7R1R*|j(V<C)(%8}3;9Qmppk=ty_v0}nT<96Z@GH<
zHcpOQgoM8v`t$d<o{nb5|F&f9@Skpdc97=x8yY%lTADwyKdW;7e#$OmZ)Wt_@^AUv
zbew;c{2$N$(+(%i@5cX2nZJAb*VE6gazk>`{4pChq+}1N8UO$<fS4ekqATE8JD8`U
z(#yw3>YX?y1c7f%046~IY6*M`5TYzOWEs>25cP#$nbrEoWJ{~gB4lwmWJL}kWQe?=
ziaP)VydXY44nG745P3c+L+Xcvb?TVpilpd}<N;gd;#m9R++o{fCdZ`Lg~R0ZS5nes
z;Hjx#U?g22NgoJWK$0$y6oAh!Nk~)v31;p4&upZBzgklQvay;M@MQhFjL$d%yn9{z
zxL7|B-JeQ-N#G#p8mY^KMh+kTThiZRbv-~-Qybdp^g{m<|4&<I0RR-U&h)aBB>$~|
z&pCpw(aOU>0I~jmYgL5=R3^DP%v+uEPxZfKHHi2mnyq3XC58N#{*qnN;8pZiq`>|9
z^#85j5-y-}p_PrKD&app{l7zLv{j_g|F(t?3?llQ=+}(QLjiv|9}>T>j*WceYWXYR
zNB7T+K_+I<ivl`V+znnXr458k1+_*kB<vXj|1}_dx=#sewsvd~k;c^IdgtUpC}tj9
z42+m~n7!6te~tP)szG}>o@F`)Qq8*XN00t%L#gbptDn*FH}};?rl$vhA+T0a#@e{H
z&id*3T(BL=MFP&=1QVL$eUWRN-%T?XWBIvoS36f!lYd>Q$)cHS2K^Z$TWBC)TnK+$
zypRd!aPz>db3*v7-TtsToam15S_Z#&&uJbKOq^bgkSx|%{&%(@E_B6Y>uP$f|1AV}
z;&!OMmw|H#FP7>g--7K6DaW~y<f&}H)9Z{s*b}h!UXOv-r#rbDYx@1$I5H6Cxast~
zsd9e$SxBP|2IZrae_xAZT;g$y>@NKu|MJO$4?)DazkP5__{FZt6Sx|Md}peXJW>0<
z^#B3FJjri7D!!`SpJIeSA5c!)?|tE}p||2<pzi)-ch)a}xsndLKun0bMlHge8AJcR
zq4o_eljOMA(pYm)E~FCf$4LD>4gXRkn2?rLLB3Ee&$(Exv8A@nG<<%j>Can|EqIWd
z8%FS)tQuykbz3lDJ@ZD{gbh}Ira^0UC1zGe<XG(rGI9!jX=iHc{bVH#Zq_NNRJFkQ
z!p(9J<-$u;Gwa}g?LrIW?RwmtdL%uIu7Yz@ZQm`T8n5J3(mo*UcoGO9u)^yhX3<QK
zgYLg*62VLQoh9Dd;<jQduV2SNqeF}l9zDAM_OibP6za-|=+=M*uC{tx;J+rCC`ecy
zO1k5^)GYPMSNytwdewoJ9Rn%@70JvS56{PFQaYxol^Pee@2S$}Re}^Y78dIqEqKaf
zczI+q1x-#|NXIM=a+080o?5o6nz4mXdcCdPpcCk>Hi}mBEUxStg;>~hEdN=-K25ho
z>>KAf^JD#TXjFj0sSTWB^K}wOJx6Q0x?EK=AH1NzS*#W_H}7g70&wQdAM`l*`k+X|
zZf=T)$I%J~yIiq`3AbrbCd>+95ekP{v+G#g?Lr%bV%8;^sj=_R$SooHDhoNWh-s|I
zWLG?G(fFHDoobeSJk>%5a#VqFKN;|VupRE+J}&0o-kF6Ya^iDdPw8ZJp*InHtf9WS
z-9r=*(@08U`_tK#Zyg>;qF%{sc0OToYt*8UhZ(UnjoP*`ZQ~l^t%Q#E<6J*=F&nOf
zRuozHgqy5vwS%c|ofhyA*uS|#!#?IB<Jebb_mYmX=tj$nEM5R#xAJ99f9q2CRyvPD
zaQ+0?_IgfWsJ>#7=Xsq6MxcqEoHb~HXT_ut=3sYMBWG;H^5Z)vp;CCK2E|ur$Ntr#
zlE?B2O@a4;s&tX}o4u7k3%73}f6mvYjRZ5B?=-Hn;vU_1q2PD^jVG8H-;u?R3$7j@
z2NE`6l2t+gpVdF?$a=iEVm(d(yphAorhm{;?{Vx%<H4b+1UfpjUEN_zhS~^(F~+1P
z!%>m1ZcndYJsz6qXY8Qv94|wAPgsXU;DxH?i&~Ip%cjU+b3)0W(YQ8&8ob2MeidS8
z5ouCm?X467<9tsR6cnX$(|ddOnyP4q<1E$`gD8%GV|T&}17&b0t5L1J?zy7Ak>5D(
z%ugYonV;Vc1KZ6br$f_l2KT6AaDTW|);efKoJ=}y^-IOl`+MHCl3Xn$*^w=>#J_BT
zwAWF&#5GF0yOpXm?2jxAs|^?7rti;^?ca-gnR5l*h_|?xE$C>qn|GYdP$be+s(086
zS)1JcDjpPXX>OY^exE15$2zf-b4{%;Ej%4tWumB57*Q!v89)5CXd|k!<0Re|?p}7F
z61~1>ub$b)G@%l67?rm=Y_9GYTvSOqFrMOXCtRPgUV}Y(5ogk(di%_N=W2(^&U6{{
zvG{@B5EPZ9qdvwKgw~lzHEBch0-{Yb#^+K=Sf<TOO%zt3s>pVhD|q(+R>vZ<H4eu@
zAY>nZ)jO6Nt?w9shl_z0eLpH6p}t7qG|1v=#*yl^E=oW{B_J3Rr|Alc*H+nfC9-fW
za{wn4qhbO5HSkR$jm_YBp_jKysIB2SLJ_}d7oIX@0cm5poo?a~egSLPXik@@wc<*V
za*U;7y@DiK&C!(R&Pv*j4Xw)cm3)mMA9$UyPd`NivH@dFU~Gi(ihyDk20EqG<Zsh+
zkX|hum`z!r_K4+`VA%&lPdcOQ76>nwL}$-ibCeE9F=eOaSk4>HGc3wh#$6Z=>8ek)
zX<Mv1$zztxWvxWaSQofkh^g#5(Nmb37Nt4EV1}+#<oc}TsAt9oDvQhRDpf<De}f1z
zPryMF2+-uWTD&UEk(cgkZ3TWu$`w;DSkOMSvX({-GXgVjlC4*{iC9OZznY}^-hG3?
zHEo7WJ}*z9rh0Sz5ur({N!$n-yH}`QU*PF2dPJ6<1!uMDkIcd&2o4uH!(X=Qgi2K8
z<S$Yx>c|^*$Dgg3e}%n)7FGwIFNziHcenY?cw&e>0O#;kkH3!e*&;sL9#u*yxdx?D
z&KGu?E+qPn&pQj1|N8?8RCRQy=0Lr2Ck@f?U?@ZLya~NH1`A_U*$(eY<=_zqFxYSj
z9xiUkt61+w;aUc|Q71*~3Av*R=C1HRQ+Ejmuw8*BE;U1TS~+gLS#jaPF>K+e%(DK(
zPHp~}op?iRxJaSSroOFKnY^e^Wu%BfLgglr;+`!vQRUQ0{^mI0=ESafB?{4oRrz)?
zu3|)`B4Ls2dHhsvmZHA&fQ7<lNQL@w(Y9=Fk<10hop^o5nPOjIB$?v==dpV|jyMg4
zQ*Y=y-sZF5tkBcNyG(V*mr=9sXPl>_MY6Z%R@n%rC%5^<8js*<IN|AjJ^4r(tN^#+
zRCk%I(94J$Ea${m;QJ>0_psQwih*w$CJOVk*~a(?-SbM$<k!~gz#pEBfUzCMiSoEe
z&H3{6--pYe@kxRb?h{s!Psk!d5L_Uem)b}LN<3$OF-CY41F!VE_&-*ZlNGlQyHDzg
zmu-|DLjJSuGC}~kx6!_N#vehr^w<OWlfJ}YJR1}%dyYydj~o*@cBvl-I5VgYQY0*j
zqoj&7HH#*x=Z+MT6m7Mo$V_}~>QYMgbqr(RRR389mYz`j3m@_$g9$k{A$RM=tZdmH
zpcD0r?yoz#kTQQIOfrF3dJk<?2|FaYTKaW8S(;}fA@^fC+6oF1NH`R@OhdcJtILqk
zT#ahYh3e8ve&GBn`gH)=X7N8;YYqfF8O1bsHuSRKM%6pS1^t&={b6<rP?J0FBRR=7
z)p0-S0g|n<(k98lOwm-XP8y6+3)v-@5l5U>M1)N(`Fy)uTI26I>b^Ea>5>OZ-)7n8
zleD$`1DD(>k=kED^Ms-So01EgRu#0AUAMP8to9TSWhF(SnMRL8Jzg6JZ)}WotZVze
za4|Yyn@=?~+5b`Oa}$OGEUzpRS@dVt+FhHnKEJ-%Lk}IT#7f%rSJcbB?@m~Ti><81
z95PX-_jUgvm49YWP-M8}SvXa(PJ7_;NKtD|W(1^RplZ<%CRlzT-5_2Iy3F!zjeKbQ
zYk+50K@Qookh)sv1FRK{TSe3fmejI4K%*c%`Os~av|w9o;A*QAC%2m&Ng-rATML}K
zD23PzvR~=KP9}=Qb$7{qomL=mD~&h|h|@(-#mvU~yZ-3i`u=$Nzn}(IkXN~mlkPb6
z*)`<Fs?4=HMx*zpv6FYGPA=}%kJ*byTOt>OTV6TOWl!?%A#$LU;dOhuU|8{nM4kqf
zprM`gi)2<{PQ~KZ>I~Yjj(1Q&>7y>dc+2);8x(5$5+>=SmQbvRL!Tg6uYe0eYGv6^
z{cWUEux({w=5}^o8mtDqAW(%K+rlNN_f`>#*=M&O-#->qYoF=qqqF&_pXpwo2Xu#_
zI-a(0(s25g(yZ4U$;Wwb3_RNCN`N)rIJPcnCi?I1DC0K4Vi`fR!Qmp#!sHJ<zB>0O
z!x}tSLk%zi6lu~16}~{ZSoqUvwb|aO=9;+!<5e5A_yRiI|9cS5M7&bcW^M<*o=2(I
zGDSs%dkHCj0UUqEo-&{m4vuG2P7amfSud|k2w&t`rc|@!BK)#-&!<n#sylv&b!8D{
zOaCBPlwun23YKS3mtwRFUr4hQ5YLuhJ!6TRsjolv>4Uei?pw$eVg>!lJI=XJ<XAr<
zo$H8|T8$GD6ZzV{HiwjTsk`H`&=*1p#}J---ZFM9+wtFML}9b?Hsr_qy=7As?Jo<o
zsS_$Lghr~<t#h@z03VdEM4!g>oCl$9=Y|oM3#gkTW_`4PLonurfQ!K4vQSatXz|{-
zxxMsEaP2kAmJH45%BAh?8G3bkzn^Ra3i}Tap)mZ$kJ!mw8XEh}HrY56i^l`(P#bG4
zF=^h=lQ7ALcovjwP3x^Px>v5>o1P3?**WwiJ<rx{I@3^z_|qk5a8M6t6`h_76;?sP
zm_;OPa+-4Bi_El-zCh$xxtQ{eSS?#+OvtXnhff0}ORn7U2g|DDo9rn!1<n!53Z5>Q
z60C`hm>TtuvXo{!<tMq9NohA;hG-g|LY7w4^G7p#ujpE}W@P_4!s`M_CHpLdYx5$n
z*NS(V+u|nE5256z#iR;Bn!?Z!C@YM$9L;EEbXaoV3KNje9L&e?+w7lVCR6JS5Z{_x
zzNM^lT6+4Za{igZIkDiy4*o3iw`*ly@Si}6dmyyH@PFWPzTdcfE2m2IUw46lzmiu@
ztfQiV!vg3fL`V9pm-6NEFH`=#8SxUwToSjh7cGun0+vp<S*e4JjE*M49+#$fRSv*@
z;wvIt>3>_nPU`waV<QmFSzdwNUr<<U%t{$gvUI&FL~LJqmp1Bjj7u@=lsjPb&qhZJ
z2u6^z`HelzSwOvLlJDhAb-m42D-%cPLqW@ZV#HCa*bd`Q2fOINO-D9SaJVwP1+r7q
z57E7xbF{VFVnJVyjv)jwM(*^b-AaKeW|fI{|LwL<FZ|NWJZ^#kU$b`Qvd2yv_x+C2
z9x7^X&*XxhC}V1rxfA=^2t`*n1KRbe+i<M_u-CIrwZ(qwC&)yz`U%BE-TMbZu)_MD
zQ)G2t{UpA_-MKxiFyi-QWyApLH%#<~TvhSbT*UpHjum@N*#96xk}Wcjk?Q+VG@l!5
zA8+!zm)kkJ{c<J|zN!2dHQshM;oT?Hx|fHgh947QbvZpr$0SbHwkCg!<NJlE>bx{h
z@v-bnX*NZJ1dwHF!>FD??mv6qUlfm}?<Y0WKnqFvKe!<utxxE>LLD3#X#B4&0FbIc
zf4e{rSrzmj7x)cOoy9(>nO1CO)U^L{PsuLS-_#6LUKjnpeA8cO?UR~0w_j2<{WCJZ
z87U3?Pd<q%0%-JKT=!W`H~BZ8^nX&i(#Q0Fif;IvnS0c>c5ZPXIA6Hb`SPyoymHlg
z#6j-J3Y#3&alOGDpWvJ;I5o+mQ4l^Y0fcH|^rvswaXv^vGOsKdTBdAv<4AXAlb;Ml
zHW;QWuYbc7>pQ|kngBZcxt8t^2Q81jq~n&jUHd;4@G*c#XLbT~a;y-}n-&RX7CGGl
zcyf2|S`M{}dvFCh8X1k%QS=*SskNgfLUQLiFi1(~XyD^?s$#!V(`BNk{<p)d(7xNz
z8xqP#&C>azkI`nOp^?zRosDP|GtQnsA?f%$HZqQ8NI@QElKo3F=#$+sB1k7QRLX^?
z{E?&o+Bk}j_wvqUdKz|{AWfGCZ}6xV_@2HvHJY(OJ~=b<V6Nb_OmZ<0Gx<O8=l81T
z@ACy%NJN7L&Nku~yDm-SfHJ0q1;Xd(QPE9I{_DSpzNkNHwJ)rr=1hW5N~f2C<_dQI
z53+E}D44Ee3(+JJam`N{^T4w4rQSfcFaF(YU3huhG6sAh=6HP)k1@Aw5&t;+U$!U?
z{d7sD>21b84${>PF-6&jox%$P;yRu5ziL=U`ZT6fgziDo9A^&E8y+O9ebu+kL8GsQ
zES->Wa;I=YO+x*VQ+HzN6k6V{<=(Aug7gV8triPng(-VS9Eo}k3;&%FSfn{%R7Zd>
zKZN?Q6cu^e?$#t7AIAqrK=JgXl$9dove3w)lg-i^7}0{gH$oR1v+1O0xgjG4cb*^h
z*Zn}BX38!?o`S2$=vG)+>I#IKy!Wx0-<x1~j1?=(HaT7%U0ZZ$VLe;XD?ii&e^?u}
z`oK0)XAY=Xu;`_yW{?1_OaZpKElufGkxAyL10CK~*KPc?DR6Axfcp8Oow$QV$X^NP
z6Vv<TAhhYb2WcI0a8@Xt3Mj*C!2&$sM-RA4yhS)pthXG1sIEm02^lV12CTXEHsvwI
zT9)d<!>%~n{x6ln#3on=+y7%i9%ueI^y-K@<$f=lt};CJ!MZq?O?Y5h$L9i)S*bu&
zfjfMac)vYIHl;Tc0U5!cXEHk+Z6_T|y=EV$L2~uxsLE237k=tAvkL#1tf#V5T%<CD
zOh7f9)XwZR-H_gnBwnnUpo749VJEsN;m$Zwsk4z8#sRP57*flqx)t;1Vyi)SlKvRp
zv3ObC{lddZzJh61L%>P8mW`9W(C_sE9?*z6I*3I|!%pv8&q?ElKhraPVa0l|?nP4;
zxcLTX<wRScNOEDywM8V@#dZ9Sdfz>NFbtaQ3S}@WC2Mwo*(j_Sd3Ubd)9zmN(fS&U
zKVBQ&CeABr^4O^0AYszo*&33F?Hs2RdqaoTQ-J<NUo|>{6bpE$0`2>ahiaCb(LOWM
zaFSU%1|(_#grWqm_jA9R&T{0KR8vx-qDGZAlAwlkvcuJ4H)gMiw;z%|5{Up7a%kr1
zz=DOxy_On+A(DvKw;BF{XNd8u*3HRs8@p!i-=57I2@<go!}f9t`*z*gnUezPDtOmB
zw$M}5LMV6_Es}43<!lky7gczS!bb5x&p^F(|8YV0MB}0O72{!GeKq#s6Gc5j2xMGK
zYpn=*e?g_u2*aBROk9C67+5ru<2Rtg^vq5?{vt94L+jfrsvGW&h<Y(T(8_V|YI6vh
ze^F@*IDM*hbzG1rpC+nP|BB*o2zLLtlh-b$>h7MG(BYuL6jq(er!v;b&R?rua_BB5
zBjA;OHw$y_S;qzOQfk;r3z===Nm*pGATac{kp(q{2brX)hH5<;<n0o;+9&<4>e=F5
zkn7mMjd+REf}e=yrXYj)C<iRCJ~vp<%FO?LK+9g}nd~^MiPm6y!V=jUS|pbnJ3JaU
zX@9A3ki{d5sZOtrXyv;N(y+*bB~wTZ)OSL*;roN|bQ>bGS5a~?P9a)rox9VmYma&T
zw$HV^3l_q3Zu#?ABOg8bYDXw@<s{&kU>TTX*1FUEWV$lmpM=wcdmfSX-a0H+?*-<n
zaB;$K0d0LLU;~}iE0bJ0;sACo?{xZ5B$n6$60CgMBCk{$i7;r58_AcsY6t|w$4izv
z8mCOKcB!;Bd+BlZ<OI{OChhB;$HHg;HLMh{flqMQf_oj>biRsd693D;pwvVEAiugP
ztb&XZ2P8lCHuF2CXN92()sG@u4g~Rn64jPC`e$5gTrl_Nvc!=xN)N1}xGdq~MUEr*
zPT1BsXM^r-AbDXUm4t$0EW6u1;3ITqVC!?JSaJIBnD|qv%?&b_2azb{H>4r@H9^v~
z4lZ%SSmdqfIO?tfRv4m-@WBoV8iUb5<b3NWk+UKHr@fOedpO?#xL!zr_Vm5U%z#nP
zN4wgbeN8vqAgpmS1Cz>8yBP?gUH5wOj=+W2@S^A1L~M_z(wFX(NCr4tG|eU6#k;t%
zZ=(9DZH|ofdicm+(&Lh4vku`RNurToW3NUyC9biqx32}rIxvExrWroZPLT56T47qL
ztuO{T3&R>7U$^`knR!C&jeasl-e657k9LAOK`=3`iw&z(#Lv#}ia#gZ?0-^iE!tKh
zVl3Dyv(`@gWfhBMS_19HH;L)@8tu!Bdn_`IRU6`*<10)uEH)|z6B1^NF)}UQp^XrU
z7Aa}g)Rl6r8r%+rr&%}|wSla0u`)EYaek#th%9wzFJXuF|B_SB{DXgyQxLnAc2i2o
zcd(J&AL$EVaY8Lsvd#D^hOkkWQKIaUJU13bk8rW$Y0g64wJ~l7kUu|gwu*>(tZNxH
zI1G(e7K8)#^?;m+tI+%leh@h%5%I<gqkWi`Nqb<}f(1C;%OW;^#Rd;BPASVLIh7$|
zGlRPOxF=?c0U}?yrD5?m&Np0*Iidgf26s<NTvub`>~M})hZFyed<9B0HfqQV7U@eT
zG0Nhp7O~K;V3=q=o(G2&QlXaz=m?B9P4P|s@A4)5=TRe-5fT-YBcQ)-Zw+&$!49M&
z<pr_A`v+kS25BsgSRsWLTf2y9U?9djiaPnZDvmgIrb4&#?`B?~UOs|BThvn4u2Ccj
zp=!XbGSCQ>iIDgFm-2annr=M`Tz6?AN#e`i*`Au8aKfZzUs$0KRt_U-#jY=lo^o|2
z!0*DBz7?QAhV!WPIe79Pv5tS`!COKDggKI)IbIcql1Q)QwzM8_V2+k;v2vv@J4263
zbQGG;W8MevtxnUHY7g>sDp&cbW2M5yI9DpjnhIf=Rq>O$y~VX&$M_f}IE=aUi6(rr
z5qT`?{$Nm?n~6sYVo%@P&FM71539~N&+`X^IiHX;$4UeiCMkKJStl;hPX^nVHPW75
zU^^bOrB&y3#^X?zS3T8h{_ivW>szFgts=(-PkQ&vhG}~s1CN#xbkCwIPRo=++;xTP
z-zaFCiHg~S%lkg#Iuu0R_O!ky5Gfy0N|_Ff%Dc!(dZ|I0_{_kiaGhad>l<H%YT&W%
z$_x0zUor=GfYA!x_wrfI(s5VhD`X|j?t(qtI$JKWb^DrJ?Pnjlx@SN5x9j<?I$uz5
z)9E$7$pz4wc?=&)nVXc<(I87A+=LU#fi#!19zqs4v33ZRB;-9*-Vl~hU@JcA2^i}^
z2<KRuz2v@@vO0NSpq^0<daN*Jv@@cGK2j##piX!CgS*clGN##!@u9YDtT#h<SZ@-+
z%H%0&TtnB{AFbIi%ipTVsliO-g(qxp`$bFAk4V6Zh}D*swcRk=TSJoysT*6y#loG%
z`DAUVO__r69THNgwb;9zmXYb~pH!EswIEh1>}bsyFm<}0ktENa?3KH5qcLd>UzY4q
zC^S@Dh`Zf7mSgK25ZJ6IycLWrj4MRZDBUzutj5u^ZS;z4pi&HGjWiSsMm;{nH-Z-2
zFgJ>Byr2xNYEbQ2$#%50r%~A?k5zc?T9%RyT$%OIiYr5Cz-c#;CX~&P5I_>?3u;m`
zU&e0ktO{Nr?c$#JIA5=CwOf>Sld4l6K-*M?v44g}21;za%Q%^`WK^KRi?CYKi>?F`
zKQI>>EC}ly;jx!7XR^V}N|c^0RH&z2>B=Noa6PP3AykEV$-FNwkgaX+YI4<VgQk4;
z@e_>oKsQ3vL|^aK@((*CmA8`ZtQAyZ(1MWF8`MBdXqs_ZC}Vee%%t-K>JA+lL~0I3
z*h+snk4(r>HWP9I;$=$k!{YXLQ-x1k^x?|a>^G{nF}A`lxS@#O4m;%`Us=Y6HjR3~
z91|}Oe3vvtY$Rkw*~?K{BqpQEYaw@arvX7WctIbxw+CJJv#DqcNIx{*o(hC<eZ<<T
zMEbTF!#U3bF#NL38uvnYQ-j-OUX${@<$!{d+fJO=EXaUMUJQ-Lxt>(M<^wYM)NJZ4
zw+2+_snka7CODoNjDYVWuwm7Ejgzxf-V0kV805(1>8!Yfl(MRKqiRSQ9$xr(L<OGW
zTa$#^`brL!TVts0Ys1^()F)}F=bZx<Ed(BM8W!ppNPQo(PQv-dp|5|W9G^-bM)MxQ
zL(LU}ufA45#)FpX_+0VL@qArL-chCyyJROCqN-uNWaY?7CIwq7FkDRO8H*t*@pvGA
z(ux640-}jgqW5|1yPWg#NJ&zw>l?ZKS5(}weRvuK>Q!2>=xC&oEq(biFR|2)NdITJ
zUXdpBm<e|Blk5bQhgA4mVVc){9-m1xS?B@tdQ=+|5x8!@QTDTMM4h_FT!|L)%hDJ&
z233#30$e@v>0Y<!Y$wCaN2A=a2_%<AdF=$*dLj)uqQPv$cDD9J@vNX$Kk+i`?PJhY
zyZM@`G<i1SUkZ}7e{s}!!{B1^q}xv>rGRIjpW(zhQfl;oP;?*kX0}eN%mTmTw;G0E
z`M;gMf6kbk>4d4sUTRCWOhV!ZTheUHTKw0tR|DB)-s1uOui<RPDzoD-V873TJ}4l2
zgQm*JIc2*fYvK5Ef-VT@Q4mHeP;ie{MEXaWy}xPL#7CITtft2A9+V#s5d^|TR0R7?
z(4cC~K}{nZ+UT<qbBTdc9;G8DUag5M_@j@#)p1&wCf~U<hx_y8e+fqwUkRHV@-?}A
zwr7qHKl|>M0QS1u{-MQdzid04$om8dg%<2=EhA2Ri{OLZDN?<?$d*s(9vep1S-05p
zjutThdHsb2)oLU`dj~0O(=VTLPtybWNO51F1vCGrD5CPMHw00i5Z35I8U7=LJ%E`v
zNN^9c?qO<m+)T^ej<8{dS6Y56Re?wSMxa0kR!rKgM4ZsrY}pqXcNF=6%C|)^GpsuY
zTZc``rlt{<v!@G&T$t#-LoqxFr|?wXK8YaELw3=9`-&*RnpIRYJ&ashymn@hnuu4p
zW<rhrV;b}M%1TkUa3;Ga*IU>UQUE`Z?R~yNn{(0TZymydA8On=JU;`jd6d7BdHiZ3
zIL~y(ka22}phtf!mj{gc48eDCgQLF{U#2w`%&P`Og3^+$)#;Ajkw+W2N0fOMp086)
zK4Y(gaeb9=qF$&}4|h>6>jx`cm~}=;I!kJQ_hWa-Yn&{H&b2!dzemlM>CY+&+t6!8
zz<J%yGZFsA@<pY}y*1XZpya_4KZ<IWnHHQ92&p*HC&k;^zoVHESmb6>1NynwsgjUR
zu3-jt!Lsi#Rl@e+>AR>LNjO8`fsh2PYnvqj^;~0|c2Im_NFHNR9QGL28eh$kHT+=M
zy-GqUwPIpXwsEOpJ<0{{%lxg+1lQGY!F^nKf39P5q3Y(a>HKY-BQ1wJE%(AjUs5l5
z@lj}o%oC2yv`mt=Xu{qYFd?ohtcpsUyd+;;y%>+bF%&`PQNEgdhRyY33Z2n6+@icr
z$ICFG;pD0;)aF<qwOueKEHbs-V<*9%(LL`*_vR%QGvLRdl6DFNeklZdG~?_B6^@F}
z6qq~bI9;7v6hFCdv3tgi_s?Bo?2gRh&dtc#eyln)IX+39O<+k4qAWPx)_9KnrW^2q
zYUB?>#U{rF1%eDPBB7qSXuf-t6HEp?-_mKT|D4KECgO79IIu}doD79{{2X-}oPiqy
zG|A^I`|cE9D|qP&0s~X0UK%L{3r<Yt;_$uRx7&>{6_p66xdN@rqg>TnaUd>cry#Ip
zuYB3G&_s#Opf}d3CeYPYlYbJDl#oQ{z>OrEY=$~DB85|TddOZ4x@*bbA;J)niEz~X
z_LIE?QE4KlEQc|AiaFUrMfu7#*vjk`6tYNHNJNc(nUj&1&Fl;(yDm>EN~;xusKLUR
zwK~RE;fpn#gzfAM@Kx#vcrYer<(_E}ib3|!s8@bOJP6^L?a<UjO(w*fX4l!&_^Qk|
zXsYzT&8JX8{^Z<qFHy)Z$Uqz&$%=RI5DYaWmo$5Tu7Afq$9in#cP7TN`LtXW5zvU!
zo%K?Y87eDz(-b9bA_^l*Q|w0B0YWk_8q2f%cZzpxX6ucx`$MRG$h8$Bf;5txT-&>x
zmzju+uis|{CT@jNc-`0^k3ceHsb|Gs2iT+@-)VEG)Vd^S^n1yd9VWiESDecen`hSt
zHnZ9p@@#x;7mv5P6niaxW|^J7-k+*G!|{)IYy1Uq1rTGrB58Ex`9$h4i8Ly)YPdW~
zU(3sHV5Vz(pV`+{4IU2`0_W}wT&-Po4MMxlnF)QjXZs{pwc+{(<9Y@+sv}tuVOH*1
zyhQe18Y`+!)G6*vxhXImP5+8LnG<hCTi8w)612UEm%Fk3#b9n-AjxK3DRCaPz7pDo
zH%R8(D1c}rB^en2N#-0Qz|&Cqp=$md?*DOopXTwO><*~_0FA=*Azpiy|DsOub2_m$
zW?=AHRNNN9tBhVMau0%1x^UoGi=vsx&!v&t17}+?Fr^yAJhkBZ6y1+a1C`T)uGLU)
zsghI5@kt)HA@BLz3<@iHSnS#8n0@QaBUF3VSwqmcqI0pvG07+|?PFd&rQGD?qma0F
z^)Z~DLFJf8Z9a*pDh!~T@U^o&JqBQX2ft4a&OxB(Gx?4INZ&XN^hD9d*ev`zryoz`
z37>;}LVAI!OB1Th&J3E3JVB{;TU9ZF+OM$Y{BbC&r(?0N8>GhHnp+8!HlbFPExQ#u
z8Pc|U#StLyw;9**rFvDqC6N~`i$o0gE|}%d!<S~wn;pAs8XWi=6fAH{{6g6$eK+g;
zwXCs>GcoZ=SD=6}!V5!f(x(acCK@kqP2GVfn9qw9-8s?AR@1NFO+Z}8%@W~b3HF3*
z_wUJ7q8EBe{18&>^CQNq;1-m?a&FDD4lfw#M_htILVm6l`vs;$$4G$6{Jb~A!s>Ct
zlOIA&pd{a(hEc<KGy!^7VHb-kf%!r5LCl6Vu2S#R3xXd@Ql;!y#SBI4@eAB0j9fX-
zOsFq8hMMXYH@v|>etY4Ju<in;e`AXB@{<geRRMZIa;(I%qo@SXzCdwcU#w@QHt_(l
zUPnc0ke#wHEh~pRWB5C73p3cqq2kQ~?e<$ZTYNtu6&E6+95!O`StTKHZb0k6%q-UR
zg>?I!+9yeZq!-Ba&<>22Ul+(@M09UR6YqGxh4o&m+C-I(st1wuBY>jEBRIhx*+x^E
z(%{$h##ez>j>chBm3nHY(_>A#<hl?f8eHdSS77+>(!t-#dVe!2H{btaRJ7$$+}po|
zyWj<>a%-M%9%}T9hiJo>@`bTh^XI4OAR|(v57^^zdRHo{)Oa`50Z6+cmw#&x9U)WR
zK3PeEO!a~Ye;wB`&J}SbOncPwn`=`tW=jx|qPthh8dSF=-Bu#!qr9E){UqC0NpluG
zNdq`NnBu8f&d&5+fsHc*^d%=XM-!lqM+>SOD!x=#0sKChoF((x#3-o;$hPDqt?@y|
zxI6>i9mR%(1RTaxcwmHgvQru%KvwTL^P)u}KwR5Gb%s!3kWXD!$QlX_D7~oIk{?Ue
zEsh5p$F;pZ)#O9Lml}oJZ=64f?#r``hCL~%M>bSB!r#o``h=@sdfJzIODgYS5)KpW
zCGd1F#kV2AQ_pf)i<?o5ZX_wQK;OHA`6GV$F=YmiicO7gq|%{`a=P=?!c*|b0sQ<L
z*1Bbk5G@6$$yiHxFaTr9U2vzj+@qkSFVbHXVw#vjrDT-ohRoUMLilE3+cZ*Qrsi<(
zBw|R~Ms2PkVfe@bFGySj;{1D`>f<7x^jT0kW}an!VS3Bfn;)RO{c2bFz_RP_@EaDf
z?e&6v+?l+!9zs-MK`p;kUaz7`wRfu{jN09tZx2jDvX^4A`_gzG^;{D)QWXkNR@1l8
zn)4UIr|lngJRi#7jN^S)55nqcuRrP-8?Vl_yghMv*-zIX<m9>AJ2=RH?2CR&EU%Xy
zw>KTWVKc1u!l*Wir_;|rtGRl9PRwaUqH`(Hghi)N^K*Ht2|AJ6F<mZuPEO}zkT2s^
zbrOB_Of4IvQAig)R;<wJ0+(mKzk@5ttt&!^eZ?k$PD0Ua-$>jUx#|rXq{Yk@12wRT
zxAZq!-dKNT<g~`_9uuo!@<dsu)zqMq8EJfdBDEbE>&^&WPxylLwK+c8GS_IBsgClQ
zKSNB-r>{X@NeqVG+!QNxG?D!qGkGU<pvnMsoR);~1LFzSRpjk!LiZ5;<rhy!e29sQ
z#sWW~7V4!$WQZ6Qk;!Ww3A?xc&y%ke66>o01R<^)vNSaZwPxpjl8RzP)Hc;;nkaGk
zipgqEt)mjc)X7M!f^5jFip`dA)YIzBtdk}W3diD}N@8aNt8$?QQQxs-R|CY*X}>e{
z8sIkYnIjum+9rgMI&AMXjJ#Q6{u0WHJddDhwnF^SJuheFoai8b=)xBv@d~(}NtY+l
zT(Z&Jwjr6C7HV#MjV2+>>v7g8WYjp1K4AocveECw&xCtQO;AL_?-<Dl<Z8)6)nfg1
zC)>1cUt$RZLdi65+>pZIBoiMtWpW$H_t1pIHLjU>6><Yw7$pQm2a<yrW%Rg<EPjCV
z4_x)A>;vz&N*xBWIyt2p9&d==S{8TDG|a!bx6_b6$C5qX3>MBD`%n!1fZcoM;dN?7
znh(R^6n8?P$CFF3#_i$K>Cf-36k~xW4Ew#`eMY@r7d_}aSG>L+ouoHH`Ppo6+q}}(
z1|%U46&?mFRD10!OF*R@8W^o)fa5U$dJtYgxr^>Jv^d2lm_ddSs!fBPV!x${P<D??
z)K*!-kQXBrp_kZw%V{QWq2@D7ZA3miZjWIU5uneojzg3&H<Thcd-zs24?fSGNZE~>
zAAxF6e}J55Ur?hi&m%@uuvM@eST#{9n<irwtADvnh-8=iC~me>+9xt$5>jk7m{-^r
z#wf9>EKxQvdqeFul(Et(DIb@)W-ohj5FM%W0qAO2ogsbmVPxw_%p5--<~sW6BJ1!=
zE&8NiqAvkRE8V78xkNipoxiqvO4X%HSLGlAws(X;iysaV*5R()1TH-%o|&tPaDK+6
z5U|k<fLt<tQtWzJ!50IBdJa=Gzr5kKi$Y?{;$GP3V{ip!*&~b)^(c*Fzj#Zmpy})s
zw1+_Jl@~5^4wbwwZ7n|ue^<Uq<!(H7GHZa)n|2-<=F`vlfiG`;jktBc%SB9V=U+VJ
zCu@FJM5N8lS&S!24cB@-d~!J?$c3t}W{1FT)E3#jF-JrEn_#K2!4+_=!!%e{RxP*D
z!jehVp+jzRzt@|(Tl?z57O`JZZY2OZ5|t9!`}jr5rl={o_!#QZc=yx&j;j0;E#E7j
zg$1Z4f1j%?)4L{|cJ#kxxu$a8*I4~jYxzQg-#Iti6>0lBm17Rrm+`}dIN1+I&7tb%
zWz}$*O2q9a&kNrJ8*cdi%out&vti6Wi)z|1zxy^V4!CJ*&~LP5g%Fy^u~FzqQ%32j
z5ofL%&Q#+VrsUx#tlY4ej6>Y7Nt6ur8<6QAK<nJ}W_@ioL(Vw06=^>ySO%_KXpKR;
z0hq7~Bc|XBy_4U{t%6x{GcKE3m<h*<wR<oF*=m@#>UaE(+fTI%{f@$ru$Souu(L0W
z5MWPZ&F!p>ZK1S!0>m!R{-G^aX#I{0oHk2IIEM%Oca-%r_j!r_9KLrf(-IM+PZA|g
z!gmIXrbx>b-<U)lG&@PZPuy?$g)AhM1@&v}B`qi%71ha1E8H*f*LOyZ<APR<8B2^E
zAsz&F_Ho{>97gx+n1crb7Eq=!(U?=U)?XOl`z=4#D9OYBK{_gs=*dc_w3}%f3qmhv
zN3p85&FH7M(KE4MzMri5A7p7q3!pJ?!LNgaz@Ktpl)Gn<?5h*uv>qmlt)6r!stKDa
zD|DtwcyF117m(QOP5{e}4SVQ!*R=OgFqi0L2Pw|A+HHud(TU0WA{fnMj7@b;x+P-f
zop=uVA%g2Fqqyy?@G}H?dnZA|325-|oP3{gBvEPUgTZKK9&t*1q^dX{)e&_`9u*~c
z@t+COBc)8;vK49W<v&Xs+HU6D?j34vVp`LFm58@|Q}AjiUvMK`ZEQFp;Ks&`?n>7{
z+ZiucizEeT`~+J*<%sa^j_+@3%jR%u)FfNQAbmfm=Rw_2qfcf}TQ!~T=aFepSqR{+
z(rQ#Qlr_HZ--Vr=)Sic_yG8#U>`x=}Eum78s;gb2`hDd8H(^~i`!jZ5A(N(w_TS-M
zAA#SOK5~Q7IX-9h|113egEcfyYUwM&{~o-*Mu1sB_i2vH$Jl3lsMl|a-IwcgwauyL
zUyw>Yh@VxTh|21eCN*gnNPl0zHGTS_eyQ2q(<-nP+Ia6$L||Qj=({G_#R9NJR~%5d
z0?zfYwQEwQEM8JxIRW80Udg~dNa<>$)uP2>ly-S@(z6mfI(NKR=Av6By2v44aYYT!
z>heU**ds;j>rRs6Yo+-(Z(Sdu{P?-<myp<=d(K~@_ASVzDw}_*0@MeawGS&j@r7tH
zSH)jx{CCRM6bQu8ajwtPRef(wH<#B`jb}zU1S0~FOQ9qS0{9xtKQ1|sIAuC?p2Us)
zSC5t8x0X3ee0t>mBys%ZiCu`F=`9-kp|}4gQ~WOA`|UH4MGF);>VI5Q`n)^^ubXWq
zL1u^hPa~g&85sd(@Syp)osrd+Vm{gD8PcI%m~q)KsO4u?b2BxlblUNQprVUYf7kC+
z-fJ-tC@?EYW}^+Bd*~yK*%=L<ur-#FTNOy?h<pC5GNj1nqqgtP5DREY=|fZViMT7x
z>_j2@HYiEk#bPD<VD<F|Zc>pMvy*tE?9V^;7Nj`sl%F5VzE#Bb?;WJ_?jnKrbvz#C
zM(f~m|5{yj-6{DgxO<Tv<fO1l^!oGx|0G;vMu<b@@vAZ=3TLXVrd3|OAf(HCNZpmk
z^owJ>Y=#Gv$M+Z1-i}UvL>(S5ZdcD6+rE|~*_KtsRPDPvh7_#BaEJ8dy!9}s``L`l
zIepUKeTZ_kUm3Ou>9<4%x>#bVrFnTu*xHqO+z!=LAlPutVac+%3>Dyb$UWSS3lr=-
zV12O_>3d1leyMw2c6}esbNv}};^lX8Uq%L$Kt$6B5Im{XJu1d>WHaF>Yr%m!rzfB`
zAXMLT_ls|;@DzH)QOS<^D}8tm2xg>DsiT`+MYR{&tVB%4Vl9@iNVt8qD`4xjdn8i|
ziMa%%9Ei(P3rBA+4Y&a5cpt>&eu$dVhqzU4Q+`WA*U^YLf;BkQLtFr)8NnF*{bq$?
zbENlj<m4SrcE<G1ULAEvJVT`*DGGf?MtojbX<yIU%&=II@i=KwV4@u}$rb>}kga6y
zi9||pIQFG^!bZK4#hQ0p?GI54J0b=+wAwIP$@-=zR)W$g<TT|XA?;XH^^)GjNi<-O
zKHb+{9J+BvjRGQz)t`!dnS>ctXTG>olb6v(-cBVs2mI>o3EKG#HCrkuDh^Z`BOus*
zylOZeY^U4Y;IShOU3qZzRc%Re3@Nm?FpTNXm^)eOVK9gL;c7)59<ifC>yQO0PmOR_
zkB`Ya8!p&3S=S{Okr$|Lr7J%x<8SY6Dm4}=9PKN*+(*`#s!)E>xqL&+Ysb&ba4a&3
zbsDKjG9Mz&&Y<b@&{G&m#JsUXM6%@sTF^pztJc$J^n_5*9zfx|9cQDYQ{0MD%k4r$
z3NU)QB=xusxXa!PLvye1l>inP`lO5xTMG07tLs<uGwRP%kURW=O&qO=+*N`Q1v)Qs
z*r`WAQo6KA;6s*yd!Vfb9xfv*Hm&Q%`Xwbw*C~jjjkUU)q>6GsBv`t7v9^OSy{@Lm
zAX4TyfB+5K7tAGMy)Vd6y_*oAY6S~<EngpZk1mUPQz-&NEU~`m%)r-!vWafgK=^lX
zSrz}hiPB`=&;X-K#Mpbl5Pqjr5?5Ql8mJ4V_2ShCaBUSkKUfzXY{+iV-+`U6;MC9?
zAA6;xBvGs>32(Wrq1L-c+uRBzdQMEQnMOZxR)F=i4-?@gT-qI8PMDOuSY0Q+Qsie`
z2_ccN(VtK`tm?^sMx-334UK`*oNuCU^S%P%*8tVEP6#Pm!KAj=Se+=Nwz{_Olnr<e
zk+5T{sjaDgDcZae3^E6F9&Ffr6fCkZxjrG*dGj!&0GX0eFQw?Fd6oHb`3w7-h+E;k
z;O7+&UkdLJRUJt`25TM8z#%*vebLqiRStG!wZREpD>3k2D;(fI>PtzZi85xkPyFvg
zacJq+&~SfT%phj4+TqSNY*w8`Ycg7(2Gv3K|ImvKfp9Ep7?I1+@yR4Np*y*<A}*rv
z_N*iQ@`|EA{HQ`_s0gipd<@_S>UtaR@49hD?yGk1IRtX%=VMa^*D{kwvwepj_(Q(#
zszUwz1T)(QcLQJNgo_n*4Gvh~qWi5lGDR=8F#z@09IMW&#6jXY#ItDskxN~7(T@$C
z4C04?vo$VfyVrD~0S%?<60F>J4Ij6?)pHq{Ezu8QOOfw;>mz&((L6wH?{v0rikhTq
z>T|kw4}~wDiADO`fG7P5bsXs{iT5#<B}m*I;Nams0l_<Tf@HH^m;C|S2yt!wpn<m6
z5B$8M$i_VHU)Me!z8I%GXJ9$a7CM*WDy1V%E249=;T-NU;<$0^f5!B;!h+d{oYTVx
zsnb6%6fGWGC(W(ZHlSRUSsVriSU+{*-gL@nE92g*wIQIQ2P{X!@}@_=(w>xA>OVX>
z3aK8Vd#<H|5DGmC$5QZnu1yzx$Mz=2&%QE1zSJa053fby6x*iBD+eFv<P-&T;p5eW
z&dS@}c|)|fu<M^ztif)6**(kNnNogRjP>)TQwYD(wds@J(CP7{v+rjs&F+ypMf9f;
z4hSjCrTWI#Fo6Mh2j>0}bJ4VM1ET)s>Mx%GzjFu+C*v}fNv54WL)aR!W)^0>Euowb
z$`0!+(*>oF<&CO9c{X@!a1m?&>!p)Qb-tbJ3#^rIY~GPb=acI>Q&VG~Lp<0{H9cIP
z<GCOA^e_2Thu~<jkvj_q5{a<7hXFdy*BwmCgbf1NzBCowL68v+ivixT*F`(`3gX~(
zyv{&Ao>Ap(v_h%DkH`pq(KTAiaCX&5`|QAu?`|03Sw(2@9Hq?mTY;%RwCsYtaqvEN
zkvQ#g70q=QV!TbAzNvLIoGtl&+%FL9hcmf~$!8oN{K}Rgr0ap&#XSd|%ju%nS?L>?
zNHF^xw&T6JP#tinX%KMMZVl!L{N0vg4G1QuiXN>V2%E2K{^Yqg`}7RiSwEFA%1ndT
zgt8KmkL}Mk?clxOMi~q#G3TKiINaiQmSJ}%vSQZ8=6IUogXIz8zw)qa3DT%e6rfRF
z9*c$@RYOC+o&mJ8E@x|Je0@wXD)9(wj@f6edjxmCAU&;0DbFv%4j*udLpff<dRi|c
z-NS<EgwOxr4$>wu4_s{3<l8hzV(_=X--tmro3139qgh7es?b7Cij3qHEpk?M-uhy^
zh6qb;KXtI#S34SQKp^Bu?4M*Q#*myDo$B+BFx24$C3It<5_YBD)C4vanSY1=^M`<M
zJMFi$ox0?z6Y%DYb#7mwe92&^=pq-!s6}f4+v~x1gCLbTFdS)Xop5wB;Yi+y&_t`<
z;Z3Vv{z={lq{qtsXVtc2<bjU@G)}@*@$(^+z3oOMlna!~O4X<iEp2}N6f}2d*t(r|
ze)FQ>wToXg+$>}>KO%`aB24I-qvUML2wb93U3WWR!R@H{y_w0^^Ceqdi&3rB=rw*d
zFc_ub`d$r_XUas`+OOQe1sm1U0M+a$`}HPMDnV;q2V=a`{j9^zG6a2)ZPCbx4blti
zZ~6w5)WASp(#)8d$Q+-bBovE!KmK}6Ip7o~fRzmpL7I2}qFJAaXelk{1y8<tL6I`u
z!R6@>Obd&V@5mABAB?>=k5gaVLe&y#5<o}=L_TwO8R*d)_}-3<#Y_=aCrZ@+;%|WP
z)X8eoM?TUL((pCnbO}+9(7^hOHcv*houL=%cF!`!Qsy#bXm`aChLA$Rn*6$|sN05@
zx_rJ+M_x$~73}9l`BoCy5Sm}Va1Vwbhl8>lac;n)#zN?@!!wHzJtP+Wv4S6mFRe92
z`NS`Dq3^<bA^^Enb5%p7$VAjWf1Kg(-vWS4#op8HJ@L9aW&#k%8>ZK^#r>X#rAQ7U
zoQKkE9YSmSz<IQ<HEYwqgfBAV`<cUPUtl!5OXx0-GAG{@t;s;8v5ruWMO>dA{Lb{k
z-MXE}#&8wfp%?e6<}|<T-j+!|>uJwEGi-LsgPSzz4L<Zzz|kTUZ*P)YFyB9p0$2hV
zx<>JU#~rT56CZ5{(>>!H)Nm7PKHQRMqO5^He>B+$bDUmi-iaicU??9%{L0#FUks<D
z#5Gr^DRl3Kv0O-vrQHz{_oCt#kK*2<sJj^nwBn9cHi%L`*S6SMe^Ysm7UXnGT;C!O
zsG!veO}?l&OkuPSPNKUAk_G`)l}eAZZ(QMA-?a;@F8WS6GZUZr`qG`3;Ee=om`M!f
z{DH9Uo9(hVmb-<C>Mdi9v}v++Rx~@k(8`56c^q-yBNR~9>d2NW8z!*&xRamC$(W3=
zHd3K}Cpc7_s;MyEL-ten{6N{f_D4`r;RizPYuK;&nRYi)?sacmD-r2F2Z7QKZ^eYV
za;{ssdaC1+m>?Nxzyjn?M^&bK!|n%x22m^+YhNf;WrIu*DK8i3%jR=BDa<urA@3cj
zl)oCVA{C6?cjls6llQ3Vz_Ai@q9&?uB-zjLPA%P?Phza*#yFf=ScS&-*1pk2Hd*g$
z92|zUUMR$pQgi*~w^bRHRgK*?36h2iC{e*E@CBN`><s|S>IHVt!AlCmRnTS7BCGXU
z9tQHKY)HCTKeg^b3DOdG;#%Dcw~rAIE-BvOs3;MiAQmahW!GG3;k^oWER+Zn!I%o_
z)yU6VVYZ_kq63t2YR&ctNAt$`RvP`j)lJgU5%ds|7jPl<;PcDQU_Ek2U_QN}eogmI
z|3otgVF9n};bT@(6M;+tO`BPK{L;pXBZ_92lwY%q4)Ho2@gC|yHZq6PoYNiPr--3w
z4R{TvbOCLI>d!G**0}ZP$@}N|hVuRA>j+Dll=k?>d$Rtd{3sSpHy<S=svY%$muU4U
zs5|WME}%_rKkDIox8#BPK!;JucHLTt0V57mlL(JS$*d>)J;$Q(9W>>b3vtUHbTp`j
zHAuFuKn@}zW6{@GJCG_rXmEV*?5mnmCr2K8c4at2R4?%*vF9Oaygd2|l{vg$FgKyy
zAdrRz-Cp7is<%=jS%rA+mcUsgUrzm1-^W~LTG8c=7)u8%#_6wTh9U9H$TvjAa9Q^F
zB8qByLXzDzIeQ=le;NW`2{p31_cZjDl_~l@wfG6lS(AR__!SMOpJCT3hjW$os${;X
z)Lc&8U2RZ9NF@#%Du?W$p1Yv!cg+*kKBQTiF+h6w=F-u}!>uiqO+)vQc^UI9OM6C;
z=@V2iijp2G>8-@cOjJ0=g~Th2Ws^xy*bShB#@EKbfiJSIJi%7ne8P;M*TZJ=Q%}6y
zY(lM{(>UX+wDiyQLI-<Hm*~e-A96tZ)}a`ia*q4ski`J{;sCSEmEBm|<r_6s%GU$x
zH4g|D!IoM)Z4b^bG8h=btwBNCFY)cwl%nOi7a9_)YJ5p(*YS_wHi6N55M24fI-((h
zSbF1B?U9B=`wh;apLh0ZfLecer4%IJdt#3w$~WmUj^|o|-yv>in~CWn%uvTUrS@2r
zkI6lmmWJ~xqBQP=tyDHFEezi|Z~b)s6;vZ%@JaQjkpbq7N{n+sV}-o-<l}KRRBZSL
zib(GkWJk{iZxFHmf6RUJdnCcT?<N~NnP_8Yv$3-=Hnwfsww-Kj+qNgRZQJ(Eo_o*t
zoIm0IG|x;|*V8@K{nlF_yk&=(b<stWaLM$yFs7`8%#9$w)jiY#u({@EQ3IHPr8K!t
z3Jq@(AEY5%ueLh&!0~h=dU*G?m$|z<cDZhWPA0v<^27MJs%m*My!eCje#of8nwPdW
zn(l0dQ7AThXGr)Q@y1y`8DVUz=LRVtdYe%)aPIXIF?T^*H72-RCV#yXmsc#k%$7xY
zs${>B9%(r%yq)CD6OBRIgm@y~#>PpyxtOMGX+PM&P0)ZAdg@^(=5IY0{{CL$vk{vh
zCDl5+svB=mtKL7H(s1RK`YDs14mp(|6<h8du5W86M0CH0hUx}33(G;hmDAxv8BNQo
z2FB0*dskY+-&_Q{RUls4{Wi{ChgMsJ+&GOEx$dn#l<mZq?YD5rxz|eK1uAXsSQBZh
z(Ck`G%V6~`?P)<=9pw1@*YiTtrQzpYRC&bbTtYNNe#mENhSQ+5!2t3~OlPglZX_t!
z+dGa(JAoInT>q8dr(vu-Q7FT@L0<&MjntLbrn$Hc!h6t@fYC6i_xtfc?kq=uj$HbF
zIUH)CqW|*$*4Mnq_)Va)HX&F(VIs&F;G*}i>xt~m2>}1#!^EWdw8wc#K~JE^Mv<Ra
z5Y7M8eKwN|h`(dF%XX~}jyey|Gq#(i>ciz&zz4F|xkVuM=Rylc3lZge!dXef4ooVK
zPUne3@%MeYPs6{RW?ML}*wVy(Jn)-@waHj`193l}XsJ826g36}skmojjj(J7r(`{2
z=HJny_K%RJ8U7CRgOfXd`e7DGg;yO9fZlQgs=tF8#@d#n^HEH~>bH(|ZK@YthqhGm
z_hXP{berc_JwY_|@6j=UDnC{Wi<dQEu_h%%EH*lmYLdg%?BWl=^3VuvZHC$0Ez^g<
z-xQV5?w8zVkN4(i4%!SfQ=PZ{Wo{Ryoo~(VZShpUn%XfCs60%n6y%>ny@R$BXcO5k
z)Ge)wPoO~GFB^vPNXfh!?}%QxFK}uba-8y`Czsafp{{k3_P964@w`P=OJRW%Amurh
zyUExHo1yWiqoV??6K?3{7sps-6mfZUJ`?%}!CgyDw0+udp`VBG4j4v!NCg)VujEow
zKOv)N=<am59iwDwo43jxhxL;GP0|kOe-tE&&;o^lRlH5wT^qJ{QA_<?!ZifS*g^Kx
zI{B1n<9@>n>5qTtJeqDvSR)$0Z_oHx3;HpBMM!R9+g3`Rxu=)&5z1Y2f!WH17tHOz
zh`id_qEK#b?p!WkKC+jn^84=%hnwW@#K=5BOTV<;51rrQP6LW>=Vgp&@^;gbK=U^1
zEyo&|{GzNKbU8(wai*JhZd7uI9*tCVN`iPRB>n_;Mr*y>1Q=nilsb#+N-E4jIuLhK
zg2@(*jJs2BHIQ*>GcyJ)?a~Y7nvUx4<9KBYdys!;aGq2GW6d>sf&2LS+je=$xxGj1
zpL9V14ZQAl)imvzK4{8icGE+>gWm4g;nSd=X)QZ1{gf)!CxXJPD;QJGA6@yasc7OX
zHYGW(*6oq5LXu)_7zlE0kO@wjvMO>Rc^I|7)(*p@@=mq2dYg;UP599L8Of_Cg(lV&
zg4Vcd$2X!_sy2n9n1_dlU%cL56vv*dLv?zKjteZP^Qec{_ih!u?I83vgKwt>SN-DT
zb4X55$PZu2XVhAT&y{TLevwjUrSFC3r>Ap_dE+!RDh<LdPK<(osah^@%Jl7-(cO0}
zpWDx;$_6abO}xQ^z@7;v<eORJcY*gF<yB(WOeYJ?Q$`^ug<v<s9Q?D!b63uW3L`I?
z;Vaj6gG?{8C~9xh>IPi3oj>AGc84}qRmyHndgAW`6DiAbHDGVhDB3kc(B>2E`|AnF
zW9#}vCQ5e#M2NJOW*tSkBqPj!0A&3H0E9L#*=sS;nWk^2+^3Z2nF^(yav}Rp^*7mp
z8Ff_Zxc6u|!mE*nD-0-+apr@Ht#PFn*Wo0wjMPu!v<$MHdCUiZue=$bLflPGz3r4%
zq4KNIYx8Jb{%3kHbTOFI+DMZap;i{*D`?q1wwbvsM<8i_yON5<r9$F;{@+DX6{Siz
zN~@GbEyeU9;vH3gmZJVaiEbt6W-%<nvOvcl_=QRsW=iqfakDTg=?VYAuuZ@~3)s9L
ze(`(S+qMGj^N{zdC&^S(tfp*t<LdaX?e_nJ^YU^b4Gs3Oa#ses;ncw>6=FNAJ?~k_
zv}^qSUnB)qicbL`mZdg%jq`u~`h^@<bN%x_ZX{R#`A>)c<$vV=@;`F?_=z6(pDX$&
zD17+me{|OeqWq8Z?d!B9=zso4gKQOv{{<U=NivAP{Ez36(Bl77a^|1^k^G<kG0s<y
z{(mfLU#D3_f170dudbJWfoKxSIDq`@1U0c1$Xi?~&3B?q(%OY+hWLh80W!(r1HiTa
z@1kEiz5jaK?$MpL2=M8|8RC)30!;B56Z11m(lfotW#6^lO&{Wdd+dI@bds#ATciAU
zg}gfGOjd@Hnf{$~XhSd-weJ?G|6pFphk%Y#T*{(wjfu&rc#XI;tAp=Pti)v{kXvVP
zCQQzn`DClvTGHs=wGSAmAj>UNs51{vFn5NmAYB`MF9;noeUh@%g4ravKSx0w`aSFw
zCduRQ?$T@uH-lVSxA16qG^b=VJOgTR+<uV^L|ZjFfb+USN8)EN;+#bK+!+il18iVp
zvJhIDikn(na!aAv{D`RCXkM1%y(=W;zM^K`2|o3pnkes2=ikGzL>1)ys<W-6s-hj`
z<pFi-61;24&9V1DZI7cMQdY#5J2;b}1|exPz}u^ehGId)j?qt6aIBmFTN66anK<ko
z6^|iYv8*f@rf~9ps`3lVlRn9LK9c}<v|tEQ0<Ir3GqZ%2G%_v_Zi@#uk>zFD{*9vv
z0N)ARRGOgOqBN_`_)KO|!xcI+4?8TGD=Azk)J!r#c3d}Oa+BQQ;Kj&y=TqLA3&A&!
z;nZ!I_rTG7nXF(fmC^Rx@~Wz>i1LWg*bAm0-;W!~7)s5L^oyw#%MK>Vwm-jBKS%p!
z!QHwD!ZT^&QTekn{=hgQ>TOKFbSBNnhn{Ip{Y6ugW>ru9);fGsP$YnN@n$gOmfDas
z6@#q~O)>inJ{5kQSH%CK&NCf(_DxSp8tY%#HyKjj!U_rHWy2@~P;?}u3tZR1{D{;m
z8Krz`-UR~Hp$s8_Q1lmf9NA91$HL3Xj73SK-mgrFdi<9l`}gx%jk%ORT!KPL^KWEU
zsvQ9D!dTjJH@sYkH9pb4^3NWnp9Xiaw6(EEg4%KyN1=c3I8a%6aj>F%Y&36)zJ|i2
z&w76a-o(yo7Jhn?cZ#kRVa7V-pVA=#s#>)W1?5Ys`^U$Fv4F?+dXR`p_lwZ{rdk|G
zDkm=${TfcAN)wz}ZUN-tjYkS|pz~CTX-wbDI6y7;|DIzyt%3I)3pRwlhH39C$=knk
zgBM#4s2bB4ukpSIU=;%X<z*F&eU-WZ!RjhJyI12`x-g>l_k5#EzNEb*yD?kc(WMh0
zmXbm})FYpCGZGr;K?px4WkwFTqzN7%C5UIx-6x?;VWQ4at~b2-yF>jf0!vv^U2AKC
z1Il;DpeL1ic0;K3t-;{!=#g9lZi_#0#>P$A*V+%u`0P(vPS4(htjKQ6ch74>H+Ix%
zms*>zVr*F|8X`EpEO&09P|DIC;YyG*`JNwUIA1ZS>?>+1h+cgO^=Y?4bgp58wUU3J
zK+$HPvo;8_rKW`|v;+x#O2LKqJP}yOqwecXCNMtLHct!IYJGFW8L?8;YTOG;SAG(y
zV=(&N^fE!Q1o?|qK#vS9Jl=F4IzXoHI0GCZQiNBf*#C$%K1P(a?#m~!BZ8T#wZs8p
zITEG&HZp!USHX3G+(n5HDfSipz<ILLBi-;;w089%K#&6r%M-6IGXZo>;$SBHba~mm
z!}_PTleDHnw(w1Dbh_vVLN8luG4m$gDzZc+Er@^*pXHeRp`SVGGr~^{6-e{@%D2mF
zN}hevw7IG{BenbGr9@V?e5Z_LFM&j18=;g`6hLn5)|lE(a(D%P-0zMOX68Z?-sFBZ
z*IQFhU><#Je;F*t$1Qfn*9}N*oC`ilZ<1Sixg<JlA+Sx_Y>ueLY`DL5Q3nrG)1Y^e
zKIz^_yAKub2K&bq<((zr`&JT94<=>K$+9``2-ox2@Q=9f=Xf<Is0J)m>(ts=_qSBL
z1fU&HvBYN{9oyBsu2DOjBEf5$G2IWj_2EjzoorRXe2oz$)ze-%8-+_WTuQbo^q*qe
zMo8sy%xhr@XyPt2m=&N#K1R|E>YNwUwVgk?YRM^W^UiF5FkJ@f!M-_9-|q7Oa~n~4
z3Y9<zzUmDD<!tErz(^RACLC)%4llZ<_hJl@<V2C;0c+*8)Pugin{KbCKT>jwW@q)L
zsG*svAx>XA5Z&E!hI2+v2F<pi(rs-3!m+oh7cjNZ`&3wly4vI&ww(lSj(`H<2scMx
z0x#ae?lfY5wsK?d){8<Hk)>x~vb50rpaw<7-Hb1fcN9%LtG4S+u}b%%fVGg(<=X<i
zPKOvQyHtYB9{8f$If=)4u>s4)d2=0Ie+qTI94sA;+jpNxTw`@a=kc-%%~|OfR8@uu
zn&H*^q?n&LySX5K9+W3J4FdOmhLnlL0SL9cy?&(K3^a~DcA>9CER1D%H>74@S7V@@
z9SOM|J~k=($ar+tniNJAY=v6&{y^xRoQVL4Vd9{M88!Winty7w)|_Te_rQ=1h!taZ
z`$1-@5!DqV*L7?rm?l81COUq;dHZ{yX!?vKNXF4i;0E^s47@(p<N2nKNj(znNRXn}
zEP;6gX+6{@=IPou2MVAVzrSN(#0~mg0C|Tm5kG_elEXAFG@f}4?wG3e2Lsgr@Zxu)
zEhy$d)mrX#9ehq&C2C32L(k<XQ~41Gs{9Lgfco|-a{W624VeURX`#XdeT3J<aRL)}
z6|aijIXf7pYsb(|Q=)y}R}k^z2Q|rLN!V!}rD}TDdJ`mezPk#~oBxb-x_G}7s-8y;
z!phF(mGyPk?J7OzJYnszUx$BY4MRouZrm-x1W_;*R%lTx)P5pf-MPACSbYiY<%C#R
zJqGs~7gpR#Ah8eLw5el(NS7BVth045Q9l%G^F3X;WC-8FF-bY~c}UlQAnzM*RpzR1
z9Ej(%0K<&y&f~6;F3Oq>hbMOKgGT>CO&szi9|mXZH-wc}cp>AU?XjgEDCeY#dE0Bo
zzpF)1qYK`?MPcv14!g>qg5&yMHrFo(@1iV80%eAhlhS-GOWf%wBI6yBWXdnne01~Y
zUc&|>P;YK#YuqjopJw5gVK~_ANEQ%75@$SmQEbfhcwE@gbVKJFQ6qc4mixut)_qUU
zGM^4VX~uvPc^pHnMCx<<8qP14HSetx@T85WWRx?m<n$k_`1!&WxwR#PIU-#>BMuoo
za(uRw1~SE$`9w6MV5z@AEFlWdRYT`f;%X|bg(XPC?_Nd)4Klovtu7{aov|5f9NtXY
zdCOuiq}juk{({vCJ@$RXTgSMlg)2r!Fcakom<C!=_qVZ+o)EfLO#{?+$*l)og%sJI
zXeeg~$iHQ!4=}lOL4f)b>rV^ipE6t>Q^*Up+SL${aNW7X-6g;fw9(;bUT~WL(1XF_
zh>;r}x?IB6SW;VFiMp5JLFkFEa15ynJ!qJiH>YQlwidj7a?~(VVHe_P{u++-PptMr
zc8&lewzYQ1&-n*4A@HpbY4J@rHJ=-lCumF28Kj7R?86#5;ZZCpSo7+Dk@Y$E>*Po@
zg$)KYZpY&E_Y2xwU*(Ik5Yf5MU2a?1aM=<jXh4$`g~wrQXqaZ|6r7jrx!v^pJjg*<
z+H%*9mUL<LG<RK+7=T&x9c8|_S<1^6V$al;ycMBh82tF6E^274hom7<RwD;6JXeV?
z?NHQ6WAO7(AcUj(7tgB*9bhHViXhxTUc`1}p3pP9FBdF@!iU`HyH>eE?ylpfOik6g
z88Hxav~F~3(T8(h(yH+3&&AB&rn-J7T1fIea`)2H$*idy+Ys+!YLTc4-Qh<<0znDe
z<-=|nu2g55o@S{#L1d<Gf}od}e0vCMT*fE?urpTrs4e!q&fi^0uDzu*2i6vB*_^4s
zwPOhl%&ffEE|Yw#hC66W^?&X+2P}Gv3;b%?37oCHMjk&h%P^ePY{1@DNl^+4lb(R!
zHr`yjA#LETx(~M|h8M0<-ic?b8B2*5{*C@Rzb|{5*D#&W5Tws8w@OFj9;4NWB)-2O
zU{ctbtP<-_+%WfO)>ZSBc#d<08h3qygp;ts^OSd5GmuRM+9-8txs0gP5EUFw<un{6
zxCO?`v@V&74y!&=#FF#)a^nd;T{hwGNQW`2Gp$>Xx6O=_+pAOF>S7cT-PI`wXq<FT
zA{om(*;5`Cv41S64~e8E&;anQ->|$#641(0V%Dcl3Uj*)&ig-e9Yua$eb-9#XzZxA
zy1R_QJPWnu()T5Cqe_1GE)<vB#l`nCW{<IBUF5fuX*4Uz7a;upx{#Zt7b<0u;bUk(
z4{hpB%PlF{zgwEqj$X-3wi)<rL%SE+McaA^bso*wVZWc`8WFH^^;zePdnK#5{F)|8
z_yfw90JDV8EtIb`1nUpKJQ7+D_?frhx?;_ghBC0S49P;JTBiq1MbLp>1fB>AYKA00
zOCTJXgr0<iaM<8u)6<$PGC(3W#bBi64cKls`g^nEvcrCo>oL8K;%YY_m!4cJj-p#?
z@#0yRGf4|OP$RGjw9&SJm-fnm!>py`Tw0P#v}Y|qvcoOc^V?;~ysyRzlbs%5qY=MT
zAHy6w!lmqNcu{w*Vif_zE62sGdWJhCCN(qgh0oUn70VY<SkNTWXm)^S6*a;qn+(%=
z6*E1BCrP|#g&N~YnrkK<sl<!wrqu=n7y#yuY%&j?+_J)6*3k49a8r?f8X#ugIFi=e
zy6uZV=t3Yj9pk&i%yR;G$>&<iT7|1=yNC81yU075XF#q~Xe8#a$zPSB>ikqSt7NnZ
zy390Rt%vlIWeq34e>hAM7EiKxo}kSEHXhtQ;3F4S5c5J5#o>ed>pGNB$G^#}^zG!P
zjE>8z5t@Swj<WYSvAnMhgG%bk#==JX+nU>7gcz;VdlDNxL+B@?#NIH_b8JHe$u~or
zU=EPBTBaKDjV61dPEzuzk&=p-4_9sN8_m+GTeEGEV>UI-nZ6nJvV!~7m%2#l<p`m%
z1rwSl%641(99O94#!Lzd;U4S-0PCx|6eUL)zya`Rk`*FY=nKPU=rxE{cu%;!@zTzP
z`s7V|o?;kqc@OpKaS*&}uBjhH35l*I??D*npA5H37ef3q(kk(5iGW<*`V%_L=ZdPq
zmw>G6rU1`Y^}c$|rBqigtNera2RcAu*?5*Ckxd<hBktNpXd!=U69(X-T`dJJrN)bu
z+(V+uDta)UoqWpuknp^nR??_5{3IxQfQusFk_rjfkX9hk8MM5XXPngyyGb>3hWpCW
z30{^<#59|Fk9|le$0%tQ_9RP;jECg6U4f-z){`$@rTT#Z1_rVypmTyQ<>7p-&JTT|
zA|%UNK77=yV+GP<jz}xy-@7o|E?`o(1z)U!by#lr0wH5CF%futn|t}p<dF3!#D}}P
zyV38msye^|M*Fii*QkxAtFd31j~}9_ZqUaNu0bMDEzIMzW?HyQ$;PTfi>a!o_^{@;
z9i7@OYJAOxGSyP$@(4x+59^`3u>FrY0=V9v?EQ&~w!HRCia^HM$alQPXQ*k~rH@4x
z|0OAtV2?%zkaaR8?OckVRBA26GfQ%L^xwNk<hLjppSRyPoOibya}wNaHSopwR12~v
z=As-HqQ&2=XM^IKH9}{BIZB~GC-iNhi3I%Jip-{+9s~#MeT)d~HUuG$K`A8=7Qih6
z>Fz*?jDy82vdCJH>2}7kmY6j4isK+A%<Qdy6(1s?ivHxFXu<W***1PXJ#(Qf<eHtK
zWqMKCuL4NK+=VVHQ8bZ~INFZLyE@3bNC8gGv|L*7MPrUCjHRb6;LRRfz^r(LdBLc}
zU(IltoI)zFC>h?@t>@Isp%4ACT|*gkn2ENDEjvRmXPVg)HJF*k`b58al0gEQn})Mw
zwe<${AL$dPEzq*C>B=n`%sdaN89zoRowz4k=L}0B!$b|c=1dTBt-p`;AheRKc!ws0
z(!Py%>0_Lln3^{>^DjEhyLJhhNVJVHblqq%R94Jn%N<2+21p}j@s>F?>FF68hAVr)
zAlxl77#897H$lezh{$vK;l1L6&*j<q)GwB$+La~s8Goqvme~K6chEBWjT6n58I<j}
ztKrf&iw`HX1DpdI7ns@mDvSR4VEyJcMJTi>iY40xd`*G0-RS`@I?Z{lI#X%(nj#$>
zQ<}$@>HW+SFp<8zJ%iHn;Uoynnt5OGQ#sc#*ZWzRmTqq|K|aSE<1jv&Z`FSZprAmb
z{_qBv3g=Qdy268+0{}-s#qg|zEPc&ZlJuUhB{Qy*B3~73F{BbsKfb5YE7dX6aGCqk
zX}+8T%aV{?U>Oy+LYOkiBF~S_>-}rnf6k8(VLsL`NFp!vc?NxmwhHB4wm4WNQVAr}
zY-3sX9-~H>uLW$pOX;3zk<+57m3slhlQ)#V#fTY<_w8kbw>)2=TPPQz7E&Vhs4W<s
z_0XEetbw71bqPNRyN}eBgkn#7x_{qWbL4V!XhVZH)dShnIo}XiaO%CH*1TxgQFR+3
z^l0>?T+k?wUW7ytDw|PwEEpYHXkB|3&Np?w<jc`Ux`F`vll%~*g^riu!%Ni39vc)|
z;WwRotGN{45AW!13EBWtZHI65xGc4q#bLWOi4(wjH#qe1z4~t^mY(I@oN1V8gB;!c
z+P(y(ManU$03a3g%T7pI8rMo^-lpELX>djmc`mwpg$=2rB8%nUOE>-qXIk%iJk)bR
zWVLD4S(>@wAltKiVn|ZFp$Jt3E#a5Y{M?l_U~B?}clWGjKSO#UN2g)sUZ;Y)CI^hx
z@Kk{%Ni9lX6j2Z!Lrus;Se*g<@XYjpk?FT3f%tQI&?~{VM0`BkqY1bULPSbM_rUDG
zWz$-UF|Mfi>f16jkMRVN^)74Gdyte~hxCErgat6Ozp4fc%r4lXd!;e$IKUoo95`YF
zxA?(0)squ@RF`J$_H4k&tX0B>%7pSTl6KthF+<0sDA>l~T?y}-%d1S0+;=^#(6OIq
zA=2B*@Yjc?m0TPcNzy;yQ$FC4dZsEs4ghS-*2o9(;_JUHBq#V6jeL(5FF%p8p0H0?
zpn%al9@|Kl82X~SI@po=y?<?PQ0=~BZDR$+-H)$D<99{%PD?Nnn}Y9zatP(!PR|xE
zHWRm+(JY#bVy_@ezml0`is?z?7kXOTgH5xz^-i@erQwDc{f2fxYyznRaG2>%zS569
zw?vUwzrG1FS<it|W9~S8E`T33CmrA;h_XZ$G6pidAQZi_8+I}dwyMz;YBqNc#}?wK
zR{*cy{M)YB1CNFFC}|C82h0}jk?U@MLfASA6zmE+qe+pJrykth8pDtgL7Di<q$#aT
zQv$HSZ?cGy{#M^a@lLm$RPR0YY+Z`%hnVjaJ>Bi?#Q^K!q@?j`EBn+L*2g^k0^cvX
zLyYd0&0%sP%cQimj2I3qHOw4!n*i{gEg?@JO$3}jlhZolM`DN5eQ{qAeB8v$YgcsD
zy)Be2yP~U9{b-yw0<|1$(eVl)g<6E3F(oPIt_~7WfSh&l=8f#IH^yHKmr>s)iYV4`
z5Vgc?QtSZE8BfBWQADdo^$*;g%Vyl|LYceSvwV9Kj(31vs-`f{fJ4<nBZ$#?K_t|v
zo0mCb`(hrv-%(L(k{Ok{<y<~Sm?J(Rhdx;5$r{c*Hp^h7+ZuL$Ax?kkCaxjv_=APJ
zW(I{g>rq%Rv74U8AAAXE@g7%V&)_<11u@AtMQ7mxshfxGqIeKY<Q;!Wj;2ydH8pW%
zf9S=g9B3JIB~)k?dn#r{!8<{jIxjX<SG0${WE*>RE1Nkn@LccL!fvV6Um;pa9iMHJ
zu$wEkjlW|$;Lt}gA|#!8#)hpRxZe(lIko!wPCTt3@D?K`rCxN;;7uZ<-X<=yVTUi0
zTo|u=frPtseq}78kV)Ccg}|Z)6L}P+&YxIz8iZhS{08Q{f#2-M$1ZNIDxka=*eLxH
z_bO08O)*=HXq;`qcaK|Jo8yK<yzCjolC2ER1p1m@j}nVPR_O8-4*IFaXk*A9u23)$
zwWE^dkKWIz;9#w?p_Ps?CK=z#DyK2K4)XXP1s8sawHcLl%(<IF=hOFy<>52j)>eo6
zwT?@CcMT1BQnUUP>->$7!BJ!`?`$=@M(vC3Vre?DL7Hq&hpBJIn3r<@S6Q7au89`7
zcTN@ot@N>KS2AwQg|OJTl23OiI=jv7$`)t7@FuW`Xch8;b^BXnsR=>9>4@gS!euP4
zWH97(%;nu++SWD-#Czt-=rk@_^UstxTO9&zKWiV)50E-V731+eVvcj913dcO%*ylW
zFyL!)hPLdh_w#U)8Ap|h3L|5rM7;1{lwq|<?pU$4vTJ#D9;GNGo^g38+q|1jIGlXw
znLqj$h&61R`?3!Cta0Y-4nj}9j^Mir=JeTIRyhO}7AxM|F2!&}XRws`6TClazFYGT
zslI4OQ=WvCN0{x`5)eQ&!-Hm0NVLJf@fQyg@bcLyA?wysbuJjm*iaF%B_v$hE$ZX$
z1h<@_kL1<VKZLic|0@1X8!6iiGa-g!aHA#LQ`>j`D@!eq?r?ZUgstv}B!<NT89s6Z
zTL~GwIa^P)Bvx20lKYlA9FJGYVv_3WXSlw*9W4c;C%LD<<$(c7^8G;uZTCq|K*Qan
zWyK*wT$Rd8Qip+_5&VICJdI<y66`<~rE5dbq~!)@smK5+0BjQ>xd<F#Cuj@zb5=6H
znf(sTU*`$p3pE2d4Fms!C6E-fLK4byUe|IYr&h~a?&1F;Iqipab(i}JD^?~`2@UG!
zvr0$+tY39ZL8AJakoSpYm?Mpz?=cR3THoXxj_v>A*G&QDjWJX*2B$`(Q~t)*{rDv{
z0JG|}Pkc%>#J4`wPe8^)g~!QTXFAE<2966Te|R=_(sOrW6~d_S=j)d+d7~>#xF{)1
zmUI_gDi6D?1&)-RdG<nVwQ;waDj|KpN^fgp1&vgFI%=bZ0lng!c|n)xX#9?q7EhKg
zOF1j0zx{Fv18mo(@$i_1HzN&TdE*M!F*qe#tK0VHOf|{)@WkIx`}|J+5(Xpc=R>eX
z1tt~{ZllB~SM@cZP@wZ6KI6=p0Ad0qVpgrCc>N?)8o6Yg*?lXa<@`N!sR5oO%b$Lx
zSe=|6N*vbH2UvFv>m{?$9exS<>Aq<0Qp=TEH|m__9>L-lrx+F+HZDS&o1H@5Prn{H
zl^hrLtn#jP@!foL2r@FA&_y-sOYqmybvLrQYmHun;MAX<lyGzDV#s)1Q_PeM2P*wX
zSjs^b)}Jv49JjQ<%(~=VX%Rn6rrAKPquem9Tht`*a8aMXas<qOIYM$Jst_0mUp5j5
zWC;^2WqckMUpMl5vcH<LW^mIFPT_)p3UT@lFxt9@vp=P+My*)VDvyvnGit2YL*g7h
z%SqE`C%XFy%<P&NrPVii_yet12oA8S$qQsOy?-5B#~oipS0udeY2FUU`&~#87mxj*
zSAw({y|&4Qw)(ZRDIUq%JxKytJ?V~G)tg<LOc?YBqXOwX-;pD3jrE~46{SwOP+4a%
zxoItVGE;b9;aw(~E&)Mp%J5*j(;MsIN(6)d21DoTPMqkn<ud-gT%e#zgc3}%l~X?w
zvU_4uk98s<+c#SI;z8os?<wZESAXVlJtI<>kr(n<oh$`)d0{#>(0E*~Hoc;xIjPgX
zD<e{VK6K`(4LL6XN20NOhXvs%P8nv36T<`xz=D`fE2a~ZY5^VLE`T3hy3|o+poN8)
zS_*X@qEAmcYbzSyA0RB2n<1*5J@sXW+Pq{&<T%ruy<kjm`e0K3@4*S<Jee@#KSBFi
zNAYE+B3HKzlpPoq{Dvgdi7UX(NhT8&i<0DW$7*rdUiw+gWfXk*vp%IUmNOc71!W~=
zF;~kqKr$zUIDRe)gN{$3f2d2ZM2oNFWm(hSFa0u|)FwtzVjQ-aUCEh(b&U?vFEFHy
z!kxK&n#K?<#yYc~Mg36Z)&J5}JRa6VNbcv8hm54VG94o3>BkEV_Od`f?H_E<sT=^=
z)RUhGZ}ZC(pDc@_MYRHqP|NXGs_El}RT|Sd0gaus{!ML_4^6#fVT<r<r9YkJriKLd
zPAvVyRTZ0^Cbm$Dg>RB|r<grqaz=ZbO6E-o1#!8@Gx+g<3@aK1Ynft?=HF;W@D~r=
zk!et<^GS+keXgs(u4m`7U#_YX;2?b6x=<l>=X5^{i1@Nm!A=|oOWR&_HdyPf{xWDg
z*qHsm@|`wgoJnv^ZnsPGH>Z`wwd80Ji9(ggRJ~Hvm5D`J*4Uln`z5)kGZ0>4^M@z3
zM(@1IEq*#f{8|PZZHN?X*ZRb-#60Z9ojb6AoUtA%gPK2H7+&Xeqay+MF;jgbSW5Ag
z%bUZH_uSdz%6-BZiBZMYc=64NuVahGs0$)8#>R-?`)sedG=Fv*MK}W83r+0p&UC=|
z<=TlrbNMC1{f5{GGLt#wzmm=4Q2lvo*VF}4KkNrjx@>*SYSJ1xP7RhNf96(QB`;(&
z^#Zk;yuTDGO&kT1CgKg{W28r;Ge*J*6QesS<9F(^-o5f5t2!FBEnvgCY)+pUY)uyc
z2kH0(Uz9C{?YYtvrvNI+$n)!4mgrei7Y9wwM#LzcfMF3Tt9r=Z7T?LlfmIKwGT4LJ
zWM!(MC~D<l?N{JPukhy@#C%&=8UO%uR((jGF<`8jM&JY3eLS_G44GqVS-m&Osh?^w
zt~ss+wPQedOYygXNcyqt{SBQ)D^LYH)G<|0tpZho>o7fmUY+qq-4(2zFuoZcx4%pP
z&s05-=I->rl0pnDT`fs5`H03K1nad{jscnEOl@e+GnfY%{#C_LqY+x*kjHx`PgF>F
z5$xN-ilF*4GY5CDfMucow7BW7AMn<xmj`;IAD+GJx!@&_ZKcQwVMG!fmBhIE2YiO-
zq!im@h)*OX)C0^2ebqxh@7~>hEUeg}J*7iTkX+0(EH}CvzOVdH;(oZ(wUV)j%Fdox
zqN}HQFoMigl>$wzT=fYwZqsq-)rn|3mAzwg0mC>6+8&TuuNaCt=P`3YeLRv)PmbZS
zoKlYT<Iul8G7@2X$7XoPCdjoF085tMnrjz)xRz^I`&}jl#@<jdu~6Do!39~?HEw1x
zO&oX(`etB*&Pxb6AKhK;v_3szw0X1$hRE{J`<Bm7y;Pr>NB1QcY_wAG86xug_tlk4
zrHvb{V+8&on+>*n5g`r2NuVi+aLvMSAf@j0Dq69Ot|$c9+MbQ{>!`PuP=A{BCp`Xp
zGc2nx0&jCDT(bPt1+8dvmoTNlmkOHi0lAO%)mMDh5Ii?Tpo-9$07wgO?cMY(F1!^D
z_QFrz-->st-@m!37-D>TU4K@BBU^7%$fVHn3Z|!`!jC?Iu-npfZeA=N0!wo`d1XKV
zd_`#W9qZHZ>8116iBTj#juC7xu@xK9<!x{t(_vDko~~igyn;3NRaZUhguBSy(JCbC
zp@jG6K6zX3i1At9t$Nya2c9Jo>P)&ci@X!&`o?+Rl3^BTjI-^{I+Et9&{1S6W3`bv
z)eDBpQ}uvn(+6r^gd^+I0nrZRn%`BnPJlZ3wGJ*vu_ccJRb4vNS5lFOd}Z+!zDz_t
z{e0G;p0;Zclo_3|^qkXssw*vRJjuOC;$Y5G{Z9i3y2+95&CtBz{Ert(w_f^Z{J3m_
zWv_{@;CBX7HX!9@8H=Aw{e|E;b_Ggn5j@+(0Qm|sA<9hJjc~?e*+|D;geDg7Fw=VD
zIB?U6b?-;V*$AMR&=(~=k|OR1a&?|RpYVE(#5Lc>X_5HE<}r}K93PoNe@?xjf#u57
zlj?7R<KMx+_iLUD(7PHl*q@r(wb7X1Y(>xQZNenwTC(E4n5#=T_yjRNi7l1CRhpt9
z;4JABeC=H|XH~j~jT3hIR2GQx2;UDpC9)Nd3+fZkk}NQ$OI@EFy?XkwYUfU;goq#c
z&}H3Szlo*$0*_ogS?-GJ)i_wie;M#cu_6%<x(#H~;aH?@g|}k$_NLC}XbGLO!_=6b
z&{d@lo9?ug#st`n-x=YR6d&u?9h6g?<qEaisiikBk%&QBbq1|CmfO-#F2n+wacypI
zs#1U!#B}%Z5;;>c$`O!wE7rwo{>u8aOGn<x^4xld1yiX+QvR0SaTe?k2hdJKr0bo$
z+!-+7dh;L~sC)(0_m+KRE4;C*p{#H*d083_h+YgCUJ4Geel*=aU!59aztuxO;4s~_
z2f4NTms??hl5!9Gg?-KKY+$}yR!3z@rn3Ng&h2keUzH!Gn;FN!8qw$hKPCI~)o9x*
z!QHdR?^B0Zru?|dr+GS(rjk8DKh;{H<P$7OSz$6;%kZ%v8-Sj7(rxI1{`_N<SB9?(
z@Q7O_N`!7QA#vhN+Y5!PlcStr(4XoNs&f{>x70D+o8U#wAhrrTbL6ha76*3qf#f)S
z-*YmiOC^=>)=kxg5C_hw6I9FwUe*n-Y@ziN+I0Xx90GB~HX_tiz0~|C7K?H2wd_aT
zJSh`Pb=NCsK5IR$;HO8+mG8uACC3nG(aWk=@KAGk%kZ7}4V|uCI>crjYQ83GEHL<u
zh68JG=`ENcLWS%{^Y>B~qq*>nh1AU3Ia*xPTFAU0zqyj)u%(=Us}H@-7PM?qo4kvx
z7EtKIjmnZl99-bXAn8=Hf0Zb7KdY4Z)C7myv|%rDUU&tEVapW<u}Ep*sJos6`2LJ!
z%8b*t0<-7O#y)YTY!k?6XRY{JO#lyp3C7T9WSvxeTxpL_$_WOnxQeEKMp{WhJxhu~
z1{YU|C=;!QLts&;H^|GDD9mgg5-3E`WbfK{tQ}i~0NqhID*^{ny1T0TRlmTTn=EB?
zjYhv>e|_#3(CNUZrnwh;IjQFE+gu3k&#J)m6Rd2h!7+hMr0gV~KvU^gcw<2R`BF{*
ztvoiTu6_$28&SN>P&Obdld?=mSkpP(s8t)FNt=;T@wi=4;Sf~V06)vrf4t(TXW3w@
znfAn}l)e`2?Rg6!q1}P_ImyF&rn>(?h1BGnXSAAX0Z4jpOX_akA`U1mc2=^_ilSCm
zvp3wCKfit=&2&BJ7#(u0o1(R9V@ZKFTLV~|%6ZWh-p_y^6Ss8*9<R2TRBwGR7nvnD
zga>szZ|RV|v2ZAXo@cz>6!fp!;BC5GRAnw^IoVf6LINv=_0_EiCiXrH@e@h5zIRWL
zVG-6rW)(Wz6rIfk<$tSod8!*aQ+5$-QzXY36ygbIcIJv;*3axO$<$rhzuKacFwYJy
zqb=q~_!a202s8V&d}r3m|EmcVu<g{^Do2L5c_zLf=F$Gx{IJ^TnM6d(-S(@FRz9@Y
zOf=P}Xs7u(_iM%|^$qV=8wM`$SR6q0TPbYq;dHWjBtCoEh#SB6b5~fJTl(3)+4#jt
za-yav>9&r*NCDUv<vmk;X}vcJp=%cF&3f$t5H`7>B>FuMd2irqK`aYizV?{4Mn4LT
zSi2ppIN$3vDGfAa{MeXRKUfqSnJG^-8xH@TgY8nV72Q%1<g4}sGd^4)9(CLz4KSVf
zNcXnsHxHNZ%PuW6NbQ-MGaKmKXZ|tQOnK62;y&>6n_mwT9<FodH?*AU;c1MjlMKVr
z=ujYsY6gIg03z<^kvA-$GR@FKmJ-70EO|D$_;9Zx+yqPdBxhJ}8}4pDh+kUnKbzcy
zas@A};6C5r;j}x!F7enZ)?ITa&zmntK=nKH4EOT&pj@h?8tQwVxgd*7p)SsfAPx~<
z?8+@|tSIztXjJ;wg)OII@DLQ_{Ox6k{6W&oRD?yWCi!$E1}{>BAq@e`KdEpoZ%JLI
zH_JJPr`MXP$-qB-Y82InD^OLOAOnjP&Xdqn8^}Ru9Sc=O>TH4-xcxxXhIXmmTnMgb
z#t^#n06+_VRYPp3Z8GM>0_xksxVEWZw{B}o)$k3!U5`X6Y&MqtT{y3agdR<!UslNa
zJm<Dv{+qQ(J$SjHe$7rE_Rz{i|M-!P1Fi}i#Cqgs{VJH7umYz>gq8&czEj#dro%jV
zv{ap$sQ#*;#3q(WOr}5@QZZIiflVo|Gy(;h>F1+nkc&NcYZA8PbskfHsSc;iFwla#
z6#alXMFY2#86vzAaNEJB94^|QK-e(10l#1yA&4@8GZX)#R}HbhIj9})=G#r1T^-xw
zpNL8GFv+GbW?0AjV65k5JRHfDApAf#Z~ASr4$4%>n#uH<j%H(c{KQ#TMu4<G&312#
zeQlTv2b%MCVXxyKl4y;4D|N6MAk4wMxOxTM|J{>cydERu19$aX8bVH@WSR!QkQ@S|
zm}G*3xAJ~AQUQwmj-F|~;bk8pMGPkL4ASJ?SvboG3E?}zhJw@jgj7^*N+lpnsMMR`
zGhaAB!o&TJ$|}Do`1;+SS=V_G*(~7})Hbyd`TSHP)N5>|YLyFfv5_#E!6dT=It!26
zSLxiU|IaCeOxu@jRR+tfRidY<>0W>mub>DAXuR5_H{So^;<=?GbTZ3u)x~6y{X<mQ
ztSo4q6DzAy+uxsW(Iit(A?iusE#Rfmq3)-vVg}f9b&NJ&w*b;mRUk&*kuQWXy_I-w
zLWzNgC&~9u6O1SunAyDMZI1V$8*z>5iH!$Xp-m^Qok5n~unHa>C^W2^U}YV?)xx8=
zdYs;eEIv^3ZP?(bKeW4EYp>4?$t&=KU+PI<`(8`&xF<gK6NS6)>#v6!uBYQ}TTE2m
zXo;*Upog0YJ8L^W_v<-<=Q#$(4i}hf+tQU9BO-hTk-xoKXwR|=yp+)l<YA>8q%r$@
z;6St|=IC7cUs3Gzw_@DQcU&TL>OL1{HpsFb*LeR6_=r^x7}nCBVMEN-Esq3$`=^sE
zHnvY-PfGDVBaK!tk`>(xm4rnKlg|2amk`&K`e`E*mC7x(R>&**r&?V=7c4Tsn}0W7
zb`**enD=h%c<+#AL=F4<&Qbu|cr`WS-mXRmF;MlKOOB5)ez^`0HMctcosSS^RKrdI
z!Lkm}3^#l~T#3744m|vLpD*aJi4e0_F_DkFxZ{bdPD~$TZ<hwx`5(oAiS*16mm*FQ
z)5p!wvJyT(Aq;R;BoJ5*q&82QWX5z$hMKC_N?}C0=JA`VoYJHcz?=D7snmk)#>FDL
zU$A}rq~FHsG6GpByHxo`ZX<iQW~XUP-7Pf}!*-|Sw6yTkwbYhcObe8FAMJJ3C&pcK
zs3B`SO*n8WcFfPGh^U*DZN2Ql{H)jccLD$xHi1bV;6ylC1y06%8in`vP)^lfpbu;r
zhsx~w28&YHyq(Th_~J+?(<1V<Wfd)XhF`s#D_9<GQ}Eeloot-*0nQULw2_;k84!&|
zEKC^1tIwfxRF6@jxe#R2+bi<=X3E_*BIb|3f@xeQYp=X}HfLwMGGj#_Y}Wx!`fqT5
z`w6Y}PDS_$ii*}%dNu(4Wvdrv1%z=Nvq|?<eF4J6_}9LVkcXRYbn(=X#;I88*DqTN
z{!gULY+naFQh>tSTX!2NTCV<!XqR31)3WL-lTuNGOL3w7qWS9WvT*O~e!Er{i~yo9
zwaFNiTNqRa^x>DoieP<MkV&7Uey2djsTy)UP9XFwDKoQ<_GiE^mF%<j`a~e*++68(
ziJWVFh2$IBtF?*$L+V2Y?T-K9ouAa_<}V3l*`ICP^}a&K#|H1~KJ^_-DXsvkJz>hr
zGu<-dL<t;;ec@lpS}e)ho83wN>w-k5>mCVKcD^%APf5M}y^(6iw{tklH{kU@p%^R1
zV_iIx?*&pboIrWV3y6phK_9Y~gNH?50wkB6+6?14S7H1kouARb+R;H6^}4(<#M9Qp
z5#86qOd)xuH+f9kuH;|tG1o82DzncA&uX=5T!%47lObRyqkuc7E7NyUpI&<_T0}`b
zik=vD_m=o-G(01;qQOnO34IPs*{CUkxAi;|N%L2RzaFyH1Nze9xY<6jywT6+x9TOS
z>wAu?;3o(;AP%p_i%c;}A&N48aj`|)+I-aF;eXkcp+_-@UW%O&rJAr)=6)g8zTj@S
z=~z?jk?#zW?9YQ7%@k6fuP<yDJmsyFm3PAI@ba-go)NwQ=iw6^av~trs)Gg8xT%-E
z=cO_uDE8pN$ZJVKD;C@<RWh$N!@$%K$XY^`=Ya=K<(5q&xQriwA88?>`dJ>7`4uc0
zR>U@0VsE(=Xsk%-D#ltZ#&|j*l4%bxitxQhvDt(m9RxqzJEnE#+aFdaP{<={R&O{P
zXoD1($I9357D}G%6wk=b7XKr^^c|Z-EU;hLK5|k#ZBS6Y$gkB6#)TONXb;m`DV3;#
z!jt!na(o2(kcpj*-WV3MYCNM<%RB2$1xk))Pe@CYM02=5ujrQaBs*>r5pKyGANbus
zBeOh`?A*PAn?>dD*hjh@;$R*5xsIWBbCM5wmykxa+?!?Q9JwDEseNO;C0Anm7lA%%
zAWZm+?F8e?Kf-ZadXnwzohcDhp3bIB&!3*AHC5DMj6JafcW0|*DjU=2R9tZxwChu2
zp7R{*Sg5vzs|-@u#=+~W4^Gknch%fbhwev<o1b$NuwO!S`py|_?PaL0EYZHZd<PA~
zkv#E1AkK!1!cN15AQI}2^qNCG`pVtjm92EFrbvP#|2pkOvgWm|_DKhHYqHEHgbBue
z$is~%zn*1f_=)eUFc61C2op~I*$a@y%~<K`%~Wu1AW*lx<&6Cd!=lVYI`mIKot!=6
zLWg7h!*qFYzwF<W`!fQzcZ?b&y>}Vm^qx)7`hG3;XFI<kRDUAngzx2k?$r8m;b_6_
zZtJNw#9f<n1E2JgMiF6hEUZW2>~c<W;T`-Z9W8~XOGop^6Nk;P@w%Lo&c*t@6?y1X
z=iKr%hmliF0jXwb9}LwT1vY^u3%>rz%Pk0r_!Q}910OMCp5EiKT~@?nA0Hg`ZM#lF
z(Qtx1<5KLwjk7$2Maz!O^!d=|CD=L(TC3$mkcXDRg3n(=kAew&FL(-iB3EWo3!JuQ
zy)`Jp1+Ebrt<5%YsR`cod@(n=4^iWoE7gde;fykH@3L8<+kL~RenNMwT)CUL$t+oE
zxxcS#$i*@>0j0V1BQ^h4kQgA6UAln9nX9dn^ALOwKq7P4AX25z_+}HVwX<c&7Z#r&
zHaM=ke#IM%#EDd5WlZ2S9{rVd5nMdGG*3znb$ybNSbX3hm+jbCxWqeE+Fe9{q7y%-
zt`00#WwmA(XuxULfL%8s_V2tB*HgMO38=>;Ym^dLQ}12#1WBf`sJcB~XwozDe%8Ds
zos^boq7VoiU9xK?L6dWr-$T(je(OD?o`Fzw$rC}Cuu`dc!?m;lHhrInYypSua>IyD
zV%SYxxCMFh_m`J8v+)YtCZGLUl^}TxWW1X#nfu>5=v&$}R?{q&_AJ{P|7wi%!Yn+`
z%FC0a#GDesPTyW&_WGK#sXn%E{AaOFH)1^s5)d%np3jS==1yGEu=OW&_G=dJY*!ap
z^1395jXQ&T#!TJH4(bJ{O<inL?CeIveDH(l?Y6F*7Pm7I#!Hwb2N<(xyURy*;`)QH
zj-XXMiYcs^>fh9Aqk69nCwVmwtc~ndmA&ZQ?e8k|fh%^oqwug+K9tWyYz~!l>COfI
zWKRqXT6C5uw-bz8!IIUix|qx1)Nu%a#z;3f&F{k3o}T|*3!s*+Nu(OHUtc@uN7dIv
z`}~G=$uTyJq#d9fNriu4&jbA1i{^ta*_@oK@hVy>3uf_dtn(STGVKkSAQyJ*e`x;E
zaS3u0hG2yDiKsIM(it5!ebLfwAfb3{&aYkRUuifesb2fYg@&iY@82%*>eua3-JZK=
zLVD|J7{=9JoGc`5>JyPwMcGGWjo)AsINBV@dY4zCUVOalc)XSF?egP*ypo!MZIa%?
z5|l?vLyZE(wfNN!1#9d~AVkL|00w>{_Rnz3F4EN@SuGXJ>@mil<Vv_wN1|$zCrPD6
zn+TU?Tho1T)A<kAbp@~n{`0(`0|d1ZYRPkRZM39O#Y}>VkpTuAhvE7}{8}+mH0Dc<
z;o20`{QH$4Q)HwnAz<hD)7=m~&ggCL)&i@^#cO<c86znw=sX_j<N_kMlaz#K`FoQ5
zlW!HOmD~_L)Y41OgU0VdrIG@6<m@+Obv1V}Od8wujmP*-+nPVRv|RUUx+{e5)c&)C
zbgc%YzSKV@@B{bPvgiWl@=AgoO?yZ~9r<!=Kf535hOflAd<CJgn_=5wnC$GsNdw=r
zOQGQEs))K?T1BClS0ECDtBku&Aey#a0(pQOYXPj!%1r0c+Nz$7CxX~CZXP|Ql8<#2
z2WTCtBQ>9B9v@N1ajN%kqNS=}@p62m1qOdfzHp!<f~{rkWbvg0SU;Z(D4FkO*VcUn
zMp%_u2X=J~XvMk4P#o$H5f-kYM;%l(C+)@i`*B@8-P+>R5567v_Qce0W}4vsFok!*
zzmf{M)S+C`8=pp7hK~q?*sRrALmncH@(VHtayz<o+|=OBo#%~Yq=M=d%0fN$bCu+!
zf*NPrZ$aTk`pBoGA{#v$#4E!HvNL;7xdncKGtGMMd-L%k{S5Mfn(g2E3*gI!0`1|_
zebz^V6Qi^zf;Qm?eAk|q!QdNe2{to*p0l2lG3wRJr~NW?p_$YE#6c&O$Py3qWtqsd
za>sTL(p`Bzv^z$0V{b_oaCcteE<?k2k7a-?Sw|0oeZ3#H5Qnj?Wj8>yiyF@(;}>1?
zk2enLuL21)<scV`Dgbhr)vchqL)K*u78t{RVFg^)eM;oQoqTW&SfT)bM>?6W4O2*d
z3wW+{mPuNEe6%JZPAhR#3eN?rKkH5y{k2#TQJ0%#nnjR=D#I6Tr$ACBnV$RZ$X;{#
z&<z~^yIm^ebHXD!@9%RWO)8T0TbP<re*HpYy=D;`_IB}jY*>at8KZcf+euCvx3vFI
zO78yaZxSRGDKnn#PRQKSnxCyqYS0_L_V4KmQjRW#w(l=1`r0I^(9p*1#HIqIGydGD
zm#;eCa$h(@P0s9hLl+i7|7$8!cP>+kV;eoFGHKw?p!vqV!|uPXA{cP-Exxrqiqoxc
zPcMv0yv?_r2*qrJBP6_*ED9_$Fy;j@N)5%_aK+imXojVEl19hNyF0Eb2;@MSXd04v
z10~lb*|I+jDHSgGnw4P8Q$xek7V{0BFeB|^&@=bed$&Y@=}|uAV|NO|7e={bnEY%?
zf~^=JlYvbuaOnmIYwpHDL|et~D1-2o4IIqOd@SWoU_3gCB$!Y~*3Cqp+AKSi^*n<)
z?wdA@w4!9s`aS8%T?U=O?1z%+Dv2U2=t`;IjEJ(r-$vOYC1NZ%AJTW_)=wUoH&?CC
zy7eUOBEoEzH?_B8C&d)y5=HiZ?4b<VKjlEuaOK(;s^sItV+k>z#cYbjx*Gb{$^u%L
zh&qwh%l|nm<22Wzp-VSAE9^Rrr<q2XlqYpdTyd6>5DL$V{A(=71E5Sw0nhwMo9!h0
zpiT4|P5CEcBlIo&jK>wG4AgSC7TupgdlxJyt*W83&bilmIBZV?>5AbWUtEiT;RFs+
zCCCfySXg$?LkUF`)-r8!Rp2TtWBe}tG8xG(C4vUVi4Q`LdH2SRj_}3h@qR&IUsUJ6
zkMw}AH$)0lsr0|d&;J~_^7z;F|3A%1Ou`QzYiv|deEnC&v|{Z4-z`WBZLtRBC6Pd}
zLHm|Mf4y26bJTJb@<`PxEI^&3-T2l5x&PbJmmiF3NybGkPT1p8VB?i}`McGEQ^9~G
zX`tzkbSoA%v(z;)c&T8(`*r{}j#iO^2|nno@&;JmwZ4?mO1GbaK_Qdy-4NU>Oq)z)
zN?B1{s_5P}m&Dos;qIN^D+{`<(T;6f9ox1#wr!go+w9m$$F^-d>2z#&v}50$_dDM`
z=llovxj*GeJ!|b+t7_C7qvo77*C!{|?<qfJ<2`*-!MA9>DN>~U3&s;*DT2K%Vx-w`
zsc=PSII<C$`yxv))HNY}XU~8wkK&JOMQs{N*~y)|xm{vg7*IqBVlOSd^fwd3zQU?i
zp<N430N`_$9^zCZEj-Z=HV+bx?%9PPM)h7T%|RcOXxl$A77C>sSnT6p^wfrBTxA$~
z*(hpTJTjUGElVSJP1uK$uaLA15Szr%C(vV%VmL5g5qW%Y^D5l1wGVG<k@(=@Uos%B
zG>8NjQCN^4d)bgVx|Ow8@URQbREo2MMIe_po`OFW`I;Bb$Kfb>?yuZftY^vvyvBZ7
zFJFbOzF~1(Q-+?c8^Ov7O`QqPSSecnpUAl_5Hk#Tc<p3BYDf_#_A(=zig}GPC)lp{
zM1x((N=Wmjr$Bt76u?c>$)K_6nz~C_QF+3b(q~D`dliXYR8a#3&|g`rVZ&cqRT%I4
z1Ns=9=6w(-xom*nAv@e=u`b`1xU&Fhp##tYI|vGB{0fw>Ld(1d1#pruncTmZ*=>}<
z<O)HC&Xy*$-#~UTnbzVB8V1ZC%K^`F*`%`_B;(!wPRi}R(Rq+VRp8lMPI=$R%)^4p
z9SV(YRa}?Xajyx$hF2I^vc)T@jc~N-3GoD?#}V%<mm#YLRRjVAOG0QBZFHzQ1jU8=
zN4R2{R$w$1uZi&zZ$#XThtb3&rJebPLD|i}a+o|w7ujcs4Pr@GSHjR4BsOVZpA8+}
z>U2dDTjNjcbSHx5rPo!194?TxAe_qFeZ93a8Pu;e+4u7+%+6<9Y%bh)ixLsXL2ACd
zczwSqw`=<iV#Z}`wl`kn&alh#+^H36CnGfQK=|jiVZ$2%8YImXN^YVvgU`^%#ID4U
zQ99wu23dM0>OJi*<<5p$a~Hms#ibK=dBEN^;1>m9e;yMFa1<FLfy<v^6&PzL-hqUc
zHJFEKetm-vzM-f2v`*S%w8GmA%)0Gy1UtJRt9N?07}sHiwdf_iJ^uWwF(&8y{{FBn
zbxI021|ym@u@`ZBHtpeNiLL>Bz&0LoJgnouF1Pj>*vad<c|3=bhXe5l4T>Qt6mlA6
zLO~7=as|YFfuQ-2xC@Ri6hys#lN$eUZ$bLpCu38rz&Z2I5FG-!e-gVN;JRu(t1|fy
zGiFzz0f#^kW!k(-BvkRZl8h6HVD{SMmDPz-UQ$nJdb>4)xewNXur4g^7ve#`MiMlK
z_&YSHeQ;k)+qoj|fd)2$O8L!gVLm`$-`usR`|QzvFt|Ge*SdSE%8g4&Glp8p=7Ro6
z{h31Cj-q@0*#jc;WqV(}X<gLzu8)<C8+XF#1^kl*WdEHh-Cg8%##jO3m*kf<4Fmwu
z*x?iN{p&TSbhWayyS0|Cnb{cmg)|+%rFQ**rBN_kxHu(*N&tWx87ZO#)Vu*Gz3~0T
zaT*SEHV?Em{K<@!dZGvwV!ZPDgF2ixE_c3PTR&m@|5iA&(zPqo-D&vkHu<$<^5h34
zmGyo{M*apK=!~3B$ccQtDq6jz!sb0zDg=O)KN2(CBZmCAo-@7snIn>x2zuXn7w<bJ
z+P<_p!S_y%^g-Oac{4GgPdIrF2llvsop}DYbdfs@;q4LC?t^n@8Kas%)xt;?_*NAV
zASfl35aw25$d01m`dXU-{Td%&M1!!(+d=;8iFqqI6a@aGyrK*pB$5w_e7=W@u&J$%
zx7x5%Sf6GFB%CuC?}i)@Q}OJGKCucN%#?>oH9?SaF_{BB7m~ROmK>iwJ-rM2qoRjc
zsrbMdBZf|n1H!R*pHu_l3mxY7R8Lyimc#i2au!P0=>hcA-T5L)-p<OC9};;PxY5sH
zR_V?<6_kxSeL4bLr2$q)&zp)Ubo~5s_;rZSZDIQ_y{65GlnQx{drt^U;L5-L4+4Ry
z=clls6sr&*@e+n34JGOAJgG7}x-Xn;d(Kbsbq66TS&z6qgykXhv+^YZ@kx*F2e04a
z@CyP?$*r81U^L-ns8nADO?{SV+j8+!Mx6LFMea3Wm#y%xJO)-8;8@iqenNZ>6ahQq
zf(MQt0c5f2cjz{DP)LbrZ+Hp8HHpP(f@?~;=lHpzLLv%8?!7<Rt1@qu+l#)qznlL(
zAHgV6fNUjCnQzJgKf#@@VK<ev<S*dd2GtjIpDoLFG%+OI;pelsuM6R|sEMf$5oj#|
zd?9N{-ApuaUBo~Q_10pGV7C}dNx7;5hR~=_63Y0?OUM)VCI-p6BxpeSJraOuU~R<^
z&_^zBJ?vJQ!{Ue#S!jin+2{IBP$N@@Mx`>(!^(MAocaRsCs%SMet&+-ftE}(jJJTj
zTp5T8zOT39uM!O<5bm=FPxifzSytJJ_Ov#2C_>JeI=n<#lGu*yMS7XO^x`8a1e_Q$
zy~VyA4`z>+h3jVmZgNN3`%l{K0TX9yCnr9#XP-2Hscv>wqF@qyfxpr^XE$`lRF&zv
zUx!+RfrkWez<}nR^!jYVp6PxSmTYqa2U&;&ppxEL9vk;Eg0~wGU%TddA{qF?8ozD&
zvmJ3p`WcCnG}j_Ei^=7gJ#F%={;>ppBW|jy2E9zM2!6UOA&j%#S#&X8E%yI~`IiP#
z3sQiE1GNw9V}%1Nw~7v|y}^Qw)1wk268H1-hn+|Ajy;b0rT1X1YamY*cIymDhh;$b
zbG>q=P|_TjK~s5?eRb};W~BrCn%ndN?6e6}R`?AL_v8)A@NsAs+Wuve88E)^C9iCO
zR>@9O#18^QLDFy}Dr>&&gTZ=@!m>*Hnun!vklCsaDR;&z<4s%=&*}&e=9kycN3oTu
zYp(Cmo@k?5LP%3JjxF|Co7-BaN0T?<F2Jd>D#uvLv>DK{v^__8PZ^=FS-SM*tOV?;
z3l%s~-3{xZR<$CAUb;+a<;Q&|lL+Qvf6$YFUhcW9%+})qHpi`O*_CZc*_z^io~Tmg
z>IG|AAS73ecY;6cZ1F=S(X65P4-PHA`S-qi$esv>Y}qB32t>E>fvb$k$H!rw-sdoU
z1DbWwFSEW&-VOosC}KD=vAZGG9Irj{S=i^9D6$}kt=!IAa<_e^AHx;6mO*QylJL>0
z?$TofyM>=|7^1$>IPv!8!9GCm8DtMQ;4SD&=i1>v(CN6rSsOnt$MEsxAU0o?Y4a|K
z_jYekqzBSSoQRPAuQ(CqGZb)Ln85Vn0{9*PyYJCQJm|g}`Zo?z&R#gXLW2jM&vCQ+
z=wS=e=9t*>@@)}DM7W8Gqm-3KPWr=x^K=R}$UB^WDcH#)cSU8sW3m_Gwrxhs#v%P&
z2>fTYqm`Al4D_A4Xh0-h2?3#abz-r*kcFI%@<^;G^9)BQEX=H@lbeg}My8M5ww-0z
zMpw(oXeDBF@{?Yn=Nacin;~m^-JXWi33KYtUycE9PSVsrSMy{pOeEH%g|&~A5~W-u
z=hMr1Ij*cf{jF9HGrx?xz?X6NBZ3Rx3JO?=8y*^VN?IyiqWV+H;f3QomD6-+g@PF!
z5BmA71H4F%i4G1Y|L}N^^H5f_&*uj1g9dLmkj=u9tSni`a3P=QRQ}f`7<U*v^zW?k
z_BHE-s3K~qFJQoa0i&WbR4ZOgXw`N`_npp%4hG%lC23UfDUe7sDNg5RuP=#k+(j*2
zS)c_W%sX;k-1JzXMp}(f&wawK{6Hb27uyh+@iE_}p2{6MA5x~2-KI=i{d`OavK;{a
zQq)u2peD`zrJe-8)KjkjS`-9OgR8df=iYPP44h|{EE{LU!)Xyb1!Cdth$Kf5JwJ7g
z!$}Kehx)_wslSzEV~F-;KgPM+_XW>!*kX3lQgVP(NW6!mu^zVik}<Le&SOg=@zl<T
z=JwJ@zrh0K;4vvMo%#5o+VN-{ny<YIQ;z2Yf@sivB9#9LMNoMCM5jEKP{zY!Nmhmi
z0|diW6fS2*2tR|ngEC&3bwV5=a6EXg+-b8fQkw~o!eOAC0bLfk`e*5fK=fxmeRIbC
zKkg;O)u2;ao)j$!`!D$^Net{y(zTFjR}Ffo>MYpYuUENGY5v8B`d^m}64(TXSBA!}
zqLO(^>YQQ3e3TX)BZ*f8Y!-bvA2=Q4mu;uQLzx^rJ5My9Hi;vzMG8F=ogx(eyj<tH
z@%=R#28f#U{Te@oukoApL#yaU0l{zs>PueN(dJwcBPhSBN9K(i1h!L8RBdca2k>H0
zKBzz5zxHHltq~p#*YjLx6c;)h2?YSa>N2SH=inG#ddknxvbaqUVQ)6ve*`G(L45SL
zON6@NC(Me!1G~EB0(SM##()vVhZ=ZF3svau+tJBNbzw*tnw93n@~C|yW@O<Y$=Dv`
zUL~D`1i9sjC>=~SE&vV`^pnf+NX=6{in!`h55!DHI}j2$zTnSCyy@>quuH*)Whs3y
zHy01+X?$P8OyEnH3HXvHdy#=kL&rpBK@kyUI$~!km94_E7S_qdyg+T?IM3sel%vm<
z^jW4>j!KQe%EoDHmGg9UC|*jM=83S|k51BZBa*Mi_7w$2CnlBZo|HRzK;-QY16OCF
z?MV}!@HiE88y|2nb^2hz1nNikO|{LJ5sWGBgfXLovPKTN{Qb3-HDDODVyuiaVlm`q
zSnq^xJ~cM!Tf?H}>6;PRO5p;}@SFGq%s+3mi!eS4^!ib_cOKt{32?(EC)jWb_kjYb
z_?D80=B?U9GtLOKNj2d>8mU>K6iI9)%V+avc7i{)O;@0*$wzL)H5cWgxbqjCLZe~k
zg7=Jduk1lL78rmNwWJ{{SBA!h@5tiQBn$*lkd^<2*2Hf4usg^+^@Zx>lCmEhixgb^
zw|}MBvq%1)to<*Tue;|UUj{;BV_RL;F1=mshPy)xwv{(s`9@F>D5WoamO%l|eNxS<
zVixL~ij-*im!A>59O2Mj9QM*Tg!%9mvZknzj+WZ1-hFrMv!_lY-`+U6#tV_{JTrRs
zR`!+;jb`jLt-l!9;_Hk+V?v4-L|_#0^~A)(lEk7+_>G>QVX$Vh%o!H1vGS4yM!5t4
zQ&`CA6@Fx;nHKXcOZ&7@{Bpv`47qL&p->t!BCBg+$AY%-fmasy8Xw|}N}oqg$RVKC
zfsc$biqQd20=S`TL;0F2B@38x!ic^?q8F>lF29kSrKkG>y(@>c%TJj1tFQ)@6xE;L
zULkz4vV)PQ%-IvZod67}aZvCE`S&z)$z!Uw`@R?qez=-R;X~wfwjC&4#VoYtgH^>e
zLW_?<sr$5u4}<OrHL7BuvdE`E2I_SR#WW5GkkEiNpQVmv4nHx2qddX1IYIM{CPc-~
zPjWScK%8xee#7T9^~hlsDZV^agqfg)c_ed}AV9sl{k3nyP6xg!Vc>}{^#+m?Ct13{
zn1>M04MFIdn|q|f)r2SwIYi*umpnU@&|O0V|DBeO-1x%&q|M>fuG>Dv6Z6)k!<N^S
zRJZ_63`J}RpFIF0O=hjc$-;85f>@?hQAgr<v-g^5fvzb*3fxVvn>|;Pf}%l99h!E)
zjsByE+ca+~`3Ss<#8FJ-{SP=~$bi!&;}MU1>;yff=>{hY0)zg$nqiHOH8I%>fdb)W
ze&4g2I!s@GEy#W}*XS10OIWG*7k*@4bSoic!?sHBS^V0FB)(Sj%1SW@u7g~6q9|wP
z6*Sx@1&ijQ`Af0-CBc9CiT(m%w0lg#p%HY~i?8pRh@VK-*fP3EP0525B>><(|M*X=
zi<@O~u&r9l-Fi7wp5%J~He)_kay7e5On8eu(+M65eb^{6!Nqxj?jLv^8lK~jGOIf&
zU$Eg*vL$5$nck&!W|Mm~cF}|;8sOSG1me*3C-k_lFwl=ZG_(nk7toFVn`m#8Ig4l<
zE1|s}3MlgQmn({WV8G3X^hRkPuNmREpV{sc4$#3V?hK~KVZmSvs6oAvJf!iq^iPY*
zrpIJYMd+IWCuq=QTZ?bApRb*?-2}M12FQ-=UnaMi5XFlRD$u{SEs7(4TRB2stbi;z
z=+5haBq$J1znFt@)&<**L>}H#rEtXfCjlcO->FFQPh#rSN464p38$pvs;yYU3}Je9
z%H32H^a_<H1{_fTMTQ;?dl&Vj|C~`##Rsx5ZCpk&GWdifP~d#_Z>OzUZuH0R0PDc|
zX5+z=-H3b!f9;J@L=0ahys2yzS>+ysGRj$L)WXplh(Kii_;U%XZc&ml^T#njlXD{k
zMk;MH1*mX^o-MD9XoICH%Df9KnVbK|Pq_~?x_bM1#NeLjpv;rnN;XYl{US#RjEA)D
zFaQ@`W}!hSz7|jP+L|F*pp)hLCZi_Nv_D!AmtSf|{A=Tizu?j=5fj$S)5=^9EDZZy
zLX<!#@I`CSFEJ^7)DU(fP(#BV&Gl<#nSbqs&2Q5F@I!!L*fCOE{_KcW&*iZ{8oh*{
zI_jPC|HmYY>pY?I*HudZG>f{H;BK!!HYWq`xPvYyS0bHUA;W9#99WnM9Jf4mrdct+
zgj$6V>`2r7R&NopM<DCzGDCKe`8iiZ2I~h|P+u|h*q{eBg|j$v88*;oCzfw9#<+w&
zZQ3v7chDnLQ$R+6^wwaEA$2JYbl#fc<U4S%9ScepkoGFy|0sweW3sviiCUPr%jb}F
zBdqd-Q2wn9EsNa+hb4bc{LrYmm3Eb@q4XL?WM#kDrF<_%0_4duRG_KSfDxenxBP#F
z20|fYAvO?AgyE|!5qM#jg?4PB3^Em%;68GnznKWcs$J>$i>k^~If@g3j>u=AwFgT+
z=MddR;C7|~rNKQM`q;<ec0#7S?yaxRI=L~yG9QU`x9(JK2P#6{ARw)z36WxfgYY6p
zXgQH(K98!ndIl1)2uMCVfE~%F<2NtFE&Li*f-Z}7faIGxb568K-zl>$&V?mTxW9c|
zN}y1VvyV+z3#L_6Zr}k8j0976B9F;JyAiZ53tmOKwR&LA)3zr3azF*10fp}AnUL1n
zHPB(`gEfS-Y>Vx)q7-2xIr0D?`vZjr$rlR)#^{MyXg?4+f6W5{P4;To;wfETAfRH-
zjyY*t?dFuE!J3n=K0xu%i}rl<xqt8hng_g;dC25tBFj3A*h&rgn&C@o)O=vtR|W+D
zF09L{gKGKYcS+J}DoS=mCYlxdF}|w_f-dgcABIpw1-a6&+<s`iga3$zfHut#+^vr~
z;D)ZPvD9<aL#)6GlmZhJ&TWUwi=?-0gCMK<h{&ka?+0>-8Y9U<Ch?Bmm)y{Mr{7SA
z4Ae+vADUYJEZ%7e@s}%qeh$UWuR;G^cp5}s%AzKnK|`7^qWQYRUX2-im={5qtUQcc
z?5T#V_@qPkX@&vWL6uy$qSoI~VO9#y6ElV2d$O*7L7vYmzmMKz)eOU$TA9N3wb*vR
zzbpu7nQ}1{&@s8(eSN<!8HfElbFwt`?WV2n#!Hs4X*9UaRZt!Dl~1C*njfM~l*?7M
z-6BbKA6j#3{s$8_;m}k{vrRU>1BH;dW)9m9dHSu@krB59RmVJ=9h7<1o(tKRlE;q)
zf+J2s_3RcN{L8Ah%ulw<z7S=)vE|RT!2bN1!|c>Y=hUq}sE7aF>$TJ-Zlj9L1VR)$
zS#1<m^fR<?2!!`J+x7q@7z1YnmWm;u?;uc+OprC`{r8p$MbGTkF^vx0l6BUXJaohc
z!k!mix_pcbSuqgFcrRD1S{pvXP?4cjIUybjo63l|1YZ6Qns74*MrAJg1sr%N4Pn>g
zawbl4KF`4|32JbgFN)E_Ttd7e8{18A(>?C@yd;el4y*xWT9g+1P|hmq8U%=j2ymmN
zafVP(Y>wh-rX`vFVw;~Y!Rb*ZD(pqVaNyBb^pUqhXSCo20!pLHOQ)c`n5y6r0$)it
zUX09@`GoL#%xPW1tD+h0O1;*VlRmBlXEfd(##FUCfe1!`leVDn(dlVU0wyQ*1@;P{
zgm+b&OKQjs3|KoQY&;`hllYVt?%>SenV#ltRXOK|od=usgiInF2<>MK^F2^7+Hsk#
z>J$A7z~*pG%0hDUgIDl^H^?0rD<UanD)9H0m!Q0644<7ha8i4}@MOQ#Rxna}LI$@6
z1sN=n%cAS{ess?(Q<J3I9S*1njkXMGeCw+?tgN7n9u`xopw7faRPSz3w&pUkl8Lgx
z=q$W-jN&uJ?7Xz6tZ)!Xh<gbeGA`1g>-ihYz?A5sv+(mHmalZ3fn*s~!qnM_C7Yq`
z=wGmg`a@9Ojfq^6L<;VwZ^%@3WCWq})~cM$JBFCh^VI!~)~J0)0KN;}n=dkZ{x6`*
z2)KP_TH@)qi0t|9tStiL_)8ZlFkMZrEGJiCfX6zh8G@12X8#;<9gTF`dga^&PyF(!
zx@G<{s8>4f!A-bhf?|B&hl@kax|(&^>g4{-(@u?#ugh~Q>?z*Nl7bJ)ATGXO|J<pd
zB86K$?Prt`*!>QanYr^oEVzuv8xteq{#CWX=^87&+;!j?o>x@koR!wR-&0ajQk$EO
zOttsSXU`~^2mJD-Z_la5!PW5*Ii;aNgVUiM@%9soj#tz)^9fY9$ieX^5zx|?o2qkr
zz<?)DHgmd4!?TJdxJL?5=R|y|`J{DDpO(wOVTGUZp7nPz&dm}iig*%*g6Cmtau&+v
zH=GX|@UoonBa^gOqtRdr>X97J>KZUTEO6fYtsSyVy60h?89(PNC{&WFtUOz4L1x8X
zu4j?-$ihi@nLw`?H<Zjg-<?1tZu8V?O7CE+?n=+@XbD{fK#`XK-uN6{lEO_dlw6~8
zXk)ZF#@@9I6P{ADXGm3X1WHxu3mmj0uNh-&e*{$CkAf)@7Zdb9Iq<bAYB`=(_z}0Y
zBZnt=_Dx5mAz!Xn5ekj?AgnOD?RZ!e^vHsmSo_=+fvfznp~T)tK%RtJ{E_h@zoHnI
zlGu>r+#V3)39i6E+k<)>a#S=SO^OV3$WE{3hOF|1%&N0MoMkCZT433gOR6<U=rBL4
zuO~Pj)VBIo5=7=CojY?HX@?I|$|0@W<`bJT9Te0WMKUOIMhTty4>rk8=$g#*lY5#}
zi@&~F`!?zSed*2I?e0EIcfYDmDgW_zyZf*2`Z(!YYWKY;&ExOWnvi7bfpy-hL(gu@
zcDq!(>;Bnu*fqV^;2NjqWwTd=J8JuI8z$YM=4p#>=wkJSio9J*03ncfqAD#YnO{<s
z1IEmT4=*{IHaOajpMsTwMT(XK|2BD>Z5(R3)DsLalqY$_Pq$i*A**ZTQa`x5F8L2y
ztHN8;8sH5|X;PM3+#84drQvQyA0+3S$C-4UHYI=j_^c2^JTE87dM|#F{lts3T8p*A
z@kq(t?$;>P2w}qgtBdWco;b+_=m_TB@OCbJMK6nw`o1DY>=hYla)c4fCHjHh#jPy9
zmUJ)yO_gR__ck$ZO~!Ula5_;0YbOTuupW->ABjbir&`=U`MsgC?tcWIn7LJk#QRhp
z>gW}N90-JNs-!a@Z0DlKG@(y;w3#D1gPc-2h_2KO&ha^u%4d}tKlpoCYb6U+We{XT
z{3iA8>m7F*B6kQi^DQ8*WbreL9Eo&ewlwjB3`?{qki`+u@qo{#tD0E0?-r&_tCPkW
zN^(TFuyYXc+OxZ6C;u(4ed@lU<rmAwgP!wZAZq)!34H9}u*To=5%ZuY4D4J$wCvPv
z1N|o%ODyN^bPhZ&X!mTxG|Jz42Fz(uO46qD^QXZ_rOZCv0D}psrf47JpCCq_{_KL5
zvetXo1aeG1Dho{=pabr^rH$wHR&M@mgD~K_C`g$+WL597oojzsFrFP)U#u(=?NUuF
zt2NqP1A?UF5^a5iu{irz;{?_&)JZC%&0Qv(rYbs(0GpGRhL322wwbQ7=E-&X>8Qg<
zJ>SzL^4<Hu7e<B6R-<6Rl4DE1dkFOfd9bq}e5r24_xpi_Mpe3vna6!DzqBW2mJPTh
ze?Cr&^D8UK8{%#2XLVj{x^_kWWe4RQx+Ac}BDMFyD-Sa4(dK=N8TOz826FSTz_><y
z$$^eqwm{Fz+~IF#e@Z2qmH=9GE6T{zqaFBqIyP0Wl*aT5iYB}myX}R@?1lxYSAvpQ
zRFX)Z)-n3>&*!R{J4CJi)31MQ%rjZDtKbH|Ntc=xEe5KT^XE=*M4KA6Z`~JCIXa`^
zv(Gxzcq2|PQW%RF==C*gzIoDPO&VVfB73nYQor$8omVbCjI13aJ5mtF$1FAP8aNGH
zuXmL;`<y@e!0)dL-VAN(HMtNg7kaDs;Ctc0FNySqit20+)u}f&w<Iwxa)eDc|518s
zykFsFBL5UyyL|$c|L)L7n&**T5MjPW^kg{6^R%?U`Cyj8yI<;N)R(8*Mbwk{GbhQs
z%38Mi$o6BihSN|>rr@8F1QhQ<He|7SIBEXNY)~Y=P5{m<z~A@zZ$a!2GkM{i)}_zi
zPQGUG>u9w#mx0vptvtm9<xBO@z&JUIzE(G8PwMkOUYaQQ^Aqn+HB<ZSk?BaEQ4Qwt
zR_&f;HGGj8%?+0jE1}1fRfYpes!r1VaY62S0iADN{&XUsvkd01PTaKE)3+3u8?4w%
zP};sV1u*kJ5eC>6q0Elg{rgtd-0lth)ay!!v%1As94l>B{lx+p=$;}u6-_Oa*ABy3
zmy|Nblb_LkLw+JqqLf&rsf{GAUd-L425V=~vHkH=Sc>fbM{m-!@6pm=R}xdjbfNLS
zGO9=w^72PctnfgjS}$KYPiNaZYJ?(V5q6?H7&B*UAh2lmM{A;M7VPEfdP{Y{Fsc}d
zApCQQmuBYew;d?!rSg*+54`glaaCA;&x7==^QW?bY(6%a?65@N&vCvP<b<{y^Lw&?
z*oV^e=}94M?l)rA`bTw67EPt;zYZ+HV?0COOGb`KW#iU%PR@!2C`t3DoQ&1|r;fcz
zAsQ)H7kuSy<tp62g982a5t4#kgw;CYjcemR;XM&+zL3f?{9z2#l@$>Q4$VH51l-zs
zzZqsxN?Hpm!z>qF{1wy9J4`|Km_g2>j)->S(c<?SYpL_M_&f4jW3W!L_A=uWl5})B
zF*RT5r^N<R`=6jfpPWOQM~-_%XoFEN(5Ma|6tSmAL<T`p0Vb<_QF+NfGGxQ@=GqoD
z#>NeG(Eowe@<m4^3EDg^`D2}*Ji{{RUJ~y(bHZJHjn$9{Un$Xo$Wh;Ho|Q<${HMaf
z>&oCSMk2_|jOuO5cZG-U7gXDdj_F|u$@%ScH9M++X(OG)HT-eo=Qu9GKq)0D@y7A`
zXfou+pxLGyfd@UrsW2%9`RW7>T+pM9$KCx`zP#Z?c%ygxWa_~0k3vF^I3FHERhl4A
ze*GR+NDuq9O~rm;S(quxzn!IemJfH1#JA6!6C6v|FRfUs`Rvi<Cg?;Oxl6`{x_j|g
z><>B1C3l+~v7YU{K<7|z%aTn!MFi_UYB^{aUX)kO0k3k^555}li?-FDwohrG4rtPa
zc5k-|@NgNiC>k?MAJ!`Z;W21NY0#0tuK>P}2QoxdW?A1BG(@UT?8ak#C`=k4^;-2_
zBpD3Wt^H}qoEBTlnECNuxQ8c_{O3jY!?9X^-Cs(|Bk;0a%EO8GD5}LbvxG_5qG$98
z@7yL=Dz|$$pMW;-rS8hR<*2GR4D~pUKQ``RI7SV<Bc?OL=KJfXhbBN$8IM2PoPhKP
zFD7u)CFc@qv4fo>juu$BJeSY5YY7e%@TMu-x8f>rJw5SU9bV<NxX9^Tmi(O7l8(x}
zdGBKmX}e@KTyIG8GBs4KZqMpza7y*?TYzeYktU1mwo;}XO@|<JW#lXXIOf|2E_>(m
z*lc<D)|_2jxN*%9j)}T0i@`Spb_L9}u)#&4_e#|H{WZx14>N4cw<p}ItU6*9k7l>Y
z6od0k>t*YBrm3Zw-pNhz{;B*l8`QARDwSN;Aj@!mW!A+u$0ECwFj0>|$n?zjkUNQv
zEG}}xO1VH@+)?9;f&y(FmpDdY!0xdk(J}3YdbkZG$!kRfs9#F>uRGCJt1LV<GwC*s
zr1<91aO;8YZoBntz+>h606Cl6=`^`skBy!E6~p+>4jfI8#)W{6A)CB~0z_T!5h-ge
zS=#q%-?N>EBA#PXCYNP`wU8fn_DuWRGj_7p9>C9ly?NZf#K!Mmh6>2r$<TNpf&!g;
zWy#nwSYG}{VAl6;T(W^Mz>xiQ1Hwe>OT)FU^CDi)avIYG4%UWBx_T~6vQ+=B-WAEu
zZ5JjS|A8_2i#hKn>uMd<@BL6@I;6e!{IF{lYzmklKW{usN_+ek*6XxyJriv`;~p7_
ze@?nsTKFK}JIF6h&{kK_mwTO1LvQ;$@^PM@9)9dVws5ZGtZ=YFn)$~=NuIk;SIEvc
zwD3rOq-IxFzV6o$=9|4Tn4~?tdY0B?UY!z@nl!g8#BYXO=POyRo#(q7ylc>sweGYv
zf#K0Bg@sxYJZt=YQX`ZWanT<=;muu%(hI+88Xt`_sn3KH@?KMiSSgmD=Rnr?J-?L6
zj308oSj&W~J$Ync?rblLaPMFFv3>+wbTSKyO>E5L1FuuY+@5+gH=5u;7!dhRBzBjd
z47>DQOAjLOB=qCoBzA1Jk8E+Z>+ncO<u!@x2{4c`_Sj%12vJvZqSX5Yn_+mM4=qdh
zRIDb`9runi@p$RnftNG9!&tmdG1jVmW$>)txx!To-h7EA-}PIzLh;WA&kuSHCl^Sy
zcorm(!ux*1qv(FWtg|3zv!%*2cU9$@TdLnle!Ru=lWe*|9yo6muP^4Z-Kdf+zBmmu
zzO?2k4Ur{wO$7+A%J)}vBZkjV6!3KRkgBJUMTW7&OfL70wvTQf7sH_lD2O-2iexcA
z3L&7UB3|)=zjqI&U23nbZ|MTv7aM4SCzfQOwRwFheg26cf`0sueF?m{XprX<`4f)h
z+h-z6d>1-;V;Pc!<&Jx~jI!RQD?hna7WXYXXA%}5`J}&dku>}(;dn8U#TC0~`razB
zld_EPWF;U=cxI)vs>%c-bs66ma}{K1@13b&gX}!D`}Eo;qtUpLCv&wgWQWS}G<9s#
z#=kvyw_)lDg7(rYMf^`g{wI<3Kz%q#eu&j0+wFB-9I`u2Kwpg7U|Z7<`Up%-;xs(?
z(!II)8qyyc-$XTL&TKNI0c}73Hb_TL98EOA+C7jloj$l?)8*Mfyv6u8_vRnCT7gp_
zt_2n?)c~VTrNq@7Z@uz)OHQ6YrO?t!bRy8e@ne9l3`9uP3Kvw+&yP##4%3&Y$*86)
zb2h$cGc-3My|(`Ayg5BC?sB8@mNn$``Yr;&v3QkoGYNa3^)_y9W<cP^3*7M8?2HF_
zbl%Ur<lJ7hlYXC(6naL>!@dW%D|gs$^bRxkXw6seW0=z99(azG0VXcne8ur>?t&Ga
zxPd8hJwzWR-RMmcEIN=7r={4j=a4V4TORGk&a>0VOiw){7*Gb9@I=u#0a^Ds{0BWu
zj)Hl5_7X+j>_mK)3Mk|I641avRTSLwE_zv7L%gWr-E$_xoxpxB)NG{1uEZuukvij-
z_mFXGL0cRp9S3XhBF&{at#P;^Xf0lTDX41@>#i72npV5@z=HtXyyj9aHg&-^N3!IZ
ze1$}o%83dTvdgAAo)-BRA7bE1pha7M^1K7icet_NR`F6C$lkh)aH7RPwBaFN`3ZP|
zu`BvY7f3R|05i1{_V8S9!V|7P2SY$^8QM>G;8-{a;LA!iEb48aUYf1oI}YByn=C$K
zd&|PHFz}bq^2a4w<7X|0>P_1Tp$m6(y!<6wgBh2pRU-&$f=rE(i^pbN9tr7p6uoaI
zhmEivT-(I^<#c+<f6{)Zas0PR0^MdQmAXnrjJ<(IuAK}t(tFP)#1<!u9kf%2oyKIb
zx?|ENBE{*HUGKs@=FigKD#ZLD^9~-xRF1E_51?!7zy9!jB{A?f=!8=L&({CpsQiDg
z{Lc;7KfXMRWA+#&|NCbuz<@tf31(&``rkhdyrPc`rA*0zFiq68e}4MM#LKO-7T=LR
znhO70@u6EWfQ%~{Rwh>eE>)m?qfM1yhn|Z{e{xXdu>AD<yV75<t)Nie7@1|-tp%c}
z6~N1oP8}5zRA>q%dD^n9cQkP|<l^a610_OG@HxNz)&gZ3URs4l7X;L>%}>oTKK7g<
zL0IoTojS*Gr*f}hofpv?ZT&n?ILyP{{5n9<K||&#Xaa9DJ=fh>FhA6ViHu_%Qt8>$
z;kd8yRhz1(Hw$7^Z<JvHV8!*<2h~3ig^_{Hk>WE9g-fJi1M!!kr1~;wL|9Iw9}JZl
z58rG<A^z9!fgl0%@T`!o42=~2dp!71Km_3{(PA7GOsA(koqbu6IKh_g$JLPXU`AOM
z5_VpOU_<qT17c)qPpw-`R7cF^+*a%Uh}O3$WEoFeP*w+0+gsGz9OiUk+_UAf)C4=3
z4Ns(K)b3wGnXI3L&o5ss;G(tINoYRSJRN0u+$c)yz8e{VU7ML&fNL^VM|eYt{&I$6
zCC1K@;E&O7fj@$;+OCIB^j5$aCku}g=_>?gVEnvReViOTE(_1+IlIZNr`~Vi8A&2r
zPpF59=-V4ZIUMV-u5U1Xv$;{mze5O#w8+4kUELJg{w7#8Ju^&+PTJ@@^H;Ctg|%ci
zPX=p8+O$A;Qs+h*9M)5Q7I8RjQ$`s*hI++A;!pn}lO0b?X;$+Hkwp~jf|s8l?D6P+
z?{IK<qmzLrI^l^EmH<C<WxAq%gE@CCJ}4o%EZ7!cr+fx@uEJTgr$qYa<lkf`EfumV
zz{SL0^uS_3;pi#(bjA}iJ%Y{ibYpQVDN$cU03CQ3hp?|cpC1z<JtsMFmy!qFl|LG;
zO2ky5?P*pwUi@W6=&Enc$SGMRQwHF!W0!31S_E;8(|+uimS&?9$qP|QfPN|1!xqoC
z3osu~{@@jppZu$TiWdD%7VlbK%nvN>>?mjJqmBdSl-D^DM|BTw^cl=^HZ-gWi%(`I
zq=&U@#A-L2&>ov&MP{#!#%%SW!da{cQBfn<orrcSy;=>`<2f=@d3k}wzVy4`Pq;vd
z-0w%>ZZQpc1{^K_U5srI#FwB{Uk_{K8TxS0)-DnpUq(^!F{Z#?wVfCZu<=gI5c09}
z9qzg`hA+vCl*Gtz;-y9D;$#)OXF}5z4=BfCQPaKX#;Td*9n~T&D2x>J<Kj}iED7(2
zaYsBK5quAk*o_wGX7)Wtx$AkR04J{%9?CTFyqyVm@_oVa@p&SKZ0g1xw5gOLQv_DQ
z{=<FK=JAns;<Op;S)s#t$NvUrjzAQXK<31xOhqJm`-|~qBd}GzyB02XdCW<#b4_}%
zlvjRdx<)k7Wf^8_9X~w$7c3=S3r%v(+5yp!7Q{917!d5F*56;&Vxuhu*Sy#CFYoD5
zF3laJxj}a?v3X>GIwCnyiT&<Ci=AF)90@lsct-KffUGyK-)d`^*dCXC9qxKgv+PFL
zz2qng9x+1i|B{}>VE*Xm^4WqJ?*^y2d^U2eFzR0EU-aMh;|q8`+Hb^T+C2jc318P-
z^uNBLy$$szRP%cZ8s2E}=rg|TJd@w_dqX)8F&E}}UC({HIqT=Gha8#RHq7ZQ0Jhk+
zNG<b~(EzU5ttZ2;W>B7*oE*zlE5c_Lyq|(@)Mp3683P(kdXpySud)=br-o~u5|Fml
z1$;(kv50%ry#;(WnJunZs@kzD_<bhBHpaspcuC#u`!D|)UhJwMcwG%1`<keXn3cz;
z!|5m2Yk8HPfJS$*%1D-a)zJ7Fuxx35U;yhOM31k>TTcJ^4dA+Z1ecu|8-7!f8j~Q#
zg#iCe(%WCEfPdhZ&u06|3I*a<;Y0Duc^cy2Md@tS!x8UD#jX44bDj5*n7ih@%b#`g
zb|b?VtWy)2xDNsvwMZ(e2vs?mIy63^2`3DZ)?7ONcSU-#OiI+A|L<SQhYhMyx{+w5
zzmt{A8>GvP>A2lZN8vNZO0Wli4<oY)vwRmG00)8oCQOH^`On*9YcuES?w_$mpq}ik
zfca&<LLnsYqD$xT-Bs@5<A%#@H$PARm;>%QD{o!eu`I$yV3L9#&L`l=j*dvOw|{r!
z3jc#_<Kr!wOY<)<di6%PwXx!Hii@?Kyqb@+{aoqT`$X5{?t<m#ej?6ikQmJq?SDT*
zEoj``>CY?ZAG4i!!l&hbTODtNgt#Al@GzJ6Mr|JU0ZDklA8p`$qvn@4ctuD!{0HwU
zp9p<W@b6+Mn&j5Pv&MImx(dY(U=AZba~Bv_+7D7rgXzQycD}jmp78E89Q_&2E~sD5
zZ$Z2CuB_GwS9AzhHiI%@8V?9ph!Sqfd^5I#XvxMtPy$=gS6hz>4nD2jANZF7G>}bA
zdMrJ>W(I!!PnZ1~n6dHRd4Kh7e6C}!`h1Oj99~8^Uxr7o%S88I1F?yG_Fubst$ZA^
zt8uq?k3}tgDzbW5s;=|S4q+8DJ7nBk*f%P&Dif{t{7OSsMkF%;j;oj{t}(-M*@sSD
z*Ynste%q{`9>?JJTPUO94*q*sWg|sclPrd&kuzY?1RtxRwTRuftX*St(ddhmfE3uR
z>Wu4F#i266@Y48Q7eRrr&$ltb;aY?%NCul(a*LNi(cXAqt>v6FMV$33en4;VuuZB$
zrTtyxcQr8yi0=k^EkuOeA=}S)jJxZvSECp8+;5}3`j?`rGND(W6%u+fE7f5h%WJCp
zoiw@A@5*j2YCRQcmA|cKuz;`OtiGv>A?MOlxA%AUaJvBx@!HnOe0iI{-)CQ%MB#Y0
z-=OE6l+YNReU5_@Vx)|@i#_bB%PFS4uk-ri4*a%BZk6uN{b3j8fvAD>SCZuC!~0+N
z8|)tDoB@JOOjxvG+K_t!BgyQO3bG5VvWsBH(eYKO55XA9S7T2jzE}r;Yf7dYNI$B|
zz&F5P-E3DF)~`IHwW;lq&d+^HQ)hU8M~e7b-xqgu34=jSuDarNcB~BZl!{&YlV;pJ
zC&-!(YRHP%Ag3tm<==?WXC;wQ)QEfXZ+}!~^-<+hM_xB&@=|--8O-|S-HonN(H{`s
z3EDV)BcS~5OqMz__S9eGkM;`uAjhbEP7gV+N0DyRvnmZ@eC|m7Zb1po)otag!_ORJ
z{tloa2?kSQno+ZgleNO-U3Cx{r1^$6K4A%(Fg%;-taks?KJ;$iDz3u9CwzwSdo5(#
zKac-J^AYc1^ojBR08~CbbT?EHN~R-q&CI_k;d>ul?IK<B2log2$6odNgBq+m@gfrZ
zREV341+S?ebNzv!psE!+>lln!ZeO8~Ta!kbdsgC!byk;NTEU3#k21ecJARMo=j-IL
zOHh<oSwr;xj250C=mh)emCbPb2WnTqoh;Xs@V>V9ZByp(>Z8BcfDe@s|Ff|8HohyW
z=U9LEI75_Qf2^4f!zn|S)M}UMuwy|fwN_v@!k4mehH>ifVBc(=?egQj*hcRS5OsSS
z?STKr@3XInt1w6A6S#8e0M#46&DZ9+ME&pZt!}tl!P$a2j3`^{)B{T<^!$qbP&R!2
zT1>B&36Wi3zltlSquk3X8@Glk;f$jGgx^Jc)3P<^^ZHWqI<%k5PlmMi?vWvzXYSe>
zUr^7LVtr@NY`ha;orb$h5f9nmaOiV4u$F};XJCD5_+yL4Y@qEm)42q%x~~o=_gZP+
zMpZ^zMZgx=#VRhp&SY(ceNE`v0P|U06`20JXz$&E$BhGvuV+4M^v0ByPkg2CNlQI=
zuK&4$<4Lp9n_}9a4kX9YOcU-Fi{9TRBx|48LbXlXY^_4cGJOu|Ds6o?7rPByZfUnh
z6z$1L!d$%YF4uK@P(eM<wyC4+Zr@p4YYXiPIRuB>6pdI1yBIajl@a<ArHV9RDLpND
zw_9lny!PYF<!K~=wI8xx4CIFJAh$VI>^&6?R8S@{N56=*DJ!zllKb;HE7D|A3g}Wb
zo31w%EAYsk%Q2<ry7IPiFA*P1Dzf^ynx&{s{&OcJHPkH~HJzJstr9dG)O?>8o$Q=)
zb$qclG+ea%oJ@HN<A&p`@?pqZ&e>6O`L_|CMQb0mP!+@@oZLT=XC*(i%MoSla>`==
zEX+MppeSy#m2+^&r-p``J8Zz*%SsEuP=S!=gC_@|DuPNA(}6E#Aj-&{yV3l2qY#WO
z7l>O4Cw_UZ;{O*eJ~hvo8~E_`z8UKg{?2hudDkUvC<m^}xe_9Wv}Ougk(LFosnBZ<
zT9IWVVQ~_8CR<x+tn7JoN_jKw4W+?1*^R^(wC#5!#n(yMy!RM;5wnja=nF^KWx@G^
z%d038{wv_joT_s3DO$aottU!^Hvi1rveFNXK{w|VA>gmeKEJ1zq|Y+zYHIVDN34$$
zRio>wczI%QlWiGHnSEHtOKi92vW!V3#a&RjeV9JPA8?_ZQ+A_HKz=9TllX?6LA(F{
zLm6DR6WyR2#qzY{vPY+G^_f}clIqie>L$EFPVHk9=kmKwt>cB84`%Pn(*@VdTW5NA
z)XvJ)GX&pz`T2Yv<{g81>FD*u>{g#a9PecOgzadf|GE0VQ|bN&UD-IfZ_J+wW`_+r
z9=mYBk|TP`amTbr=GQacSG)1?4PExqeU$kf<xz&DAj>jnHsWTez_F@;iba_lb2aHw
zr`8*yG`SU8vG;LHd9&hn{M38gC)(!x$GgyeO07FJZ`uiY{j}d3Q);~^_VTc&qu`7C
z>NPCPVC>uxkxT!6l4zTVo9AsgyZID5dfCTBV1*7ypKkwA)Oo{s)lRhi_AgG&ba``^
zG`|C<=EXj(QmxxIEfY2`yCQ41^7h`KUZP}WHo?Nt>7-9s_H#4bG5SEkA7Jvfn=!e-
z!qR!YRNd{jili?Xa2z-D-0O2?K{QkgZ*lr<J4|DyD>8cLdqlXsaOU=rgy4XO0ndQ1
zknstH&+Tqjg1&5T3)D^VYmE-qb|s$yJL+byiD1u5U+f7E56#o@w{Q5gQewiYJs3#%
z0>NO5AG0U^1?0eoT&v)G8Bk-4t;tn{EA7BJJ2TiHwlVdJ-AN_FG=m($&wUjnVu^$Q
z(X;ILk@6fAt@HU{htFkf_;c@xTvEG-_vy?VJB9O<zKwqH$9+wflgzKYoam?BAToLb
zEJ?q(B#56Hn=c;BYGPY6xg(zfJh30L6aLe=+;NW-x_*g$TNiu<_9Vaw!*PaSx&x>&
zB2;5zzyT)=JQfW&Vf$0+0wO=+{3AYJK8Qc&t2dtjjPIcOxhSPA9Tx=u?zX37^$BTm
z2f1<%gn8yLQh)sYg*{z%H%7^I)T{I6!2DhBy~}3TXY6uhC2zG`({k0Idc%xs;8oa-
zwad)`kW#6ismr^YD(A+!ao-zOso`&fFjwO~R^O^WsKZM*tfv!pbCOCc!&5xDAXr1!
zP*+O9?G?&$s@i-OwRn7eCMkQPd1)h>y3gy+(L0dXL0bh}se{_L<_4{2#jE#d=BL1a
zbzfukI(ZgjZ(tQWLImF$Kg02Id*Jxlixm_cgZ66B8~9NR2rHi{f_to)aQ)0Qm#4DC
zO23Cz^$-Y7vWtd2(G9(ccex%6ok85=kvm2PoE?#)zl;zAO#!4@SX4s{uz>~t#Yhb_
zleL>B)6GYTEBLD0&wdp~LW1E1&gna(L*F}l`PA!G2Tm}m8iT?v`0;oBF0RwG#*T-b
z41RV9Zf54j9oNZ7$r;AnD@;B)%5L}dPLt@oJiShZZCa4LfU^>sph$34M!71C6e;L3
z`wBvE;{3$ZZwWQ(rtAS&@gEo;J}V}kjtTQ7tLX~wi}n1Tjxtb${%0uv-Yvn0XM{I6
z{_gtw-c=8Bbt_&T&hvY^&W+GN@`r4<J@d)WeCzapCqC!h^mF?3Va)Cz>=luGshQ;u
z!h4iyXKAq~7&81baw_T{`0088c>5P>a<4!Ie2B2$nd_INYK-eO6Cz}FKr2?^HOQz+
zws<b4eRGV>Ajek4zbV7`p3<u<X-ty$Tuk%{?(b(EC9eF}W8ZN((H-D<e&5^oh?P2#
zw2#y^<ZMw9?>GK{xYMEs7I9p{q}9m>JxSnmNdETtIQvQ)VcJ@^aqZSa#?R}7=#aPK
zV`YSM1cc30v%_UG5JftiMrpEctp9N99?s+O`8?-3AGf^8Yy`#kB|qN%ALte0*4!p9
zVu?2FCBJ7->g|H5nU=>5$G(Q~?CJIl_CMWaU%@l_HUGOZZZ{?*bJ56Z!yZlGYYT-T
zZM=1v^tV}sS-%=AN7}j%{h054S66XWbyIO;ElVl0ha_J%<nFfMfVTbVv^;sp$8nc*
zcGTg>p~JaCZVLt#P1L<sCIMDD|67BcSb?Ie>)T`OwVDT<HX?b9tikkZ&8v(yam*KN
zHP4R>8qbQK-O$xx)V@&cR;#nfcSgDZ`oC$^&<qsFI#c40|BFSb0y}{0S`+;P?td^Y
zkbVPGV9Hp#S+F)M|BHqHi;~Y!6)id#Na_DCIsaF)Iz|4>-Gr`d?H6JHH+z@K0BNQp
zqUk?8{@=}-838<tv@Y}A|Kn2NefbPPMnC`m)q_7wbh`b|G0BwcyY**61>s`^<;C64
zf+kI*(iMB24Wi9M*?)X9U5$`Hi;zHdB!EL<jQi09R{RTpzh4xh<)T1$ravy(@Mb7<
z0e?~z`Pk#9cUM0go0dS5nGLc_7KVe31&_!gz*5=R)mS?}qn*KUv8`gnVz6Ld3vOi8
z!BXfAU5l;fJAT^8@rY#v0aYq?*<);N47P&O?|!X$mUvLW;ZIy!2$<x=cs+R4Y2z{U
z1VE%MfOBGdf4V<SL0~;OjWZnD0da%z*WNE5sm~)~fcWOwbb+R6M%id(4YB#pWQW{i
z?PP~I0C$fMw|7;IPf25?H%J(kC5!<Fx-edt`WRO9kz!Lxt+tDdvs58+u^inRn_Vyh
zB|^X}eI~|5Sl)0C8H$xE*^iNh9{$lPbZHD?6uCmp$UzgZbFqmgGmc@O$ju>3T7XV*
z16u{5;H*+hM&*P%z0WF7PvZfv4%Y53pDODQ*3(@323xoO7GaReu4wo5i}kLil)9vE
z>!YN0dfDb_b_M%$fKy#w#Ptsd$qo@6Mh$$`C+E{|o@PBy`j^DY`fGn9Xc3&EMk6*S
z?M#sw*0<>ih{(G6(^>6O9)2IVVpHdhH#7&H*+oRyUC0(XqTx-_y&G^;DdEQCTw`?a
z;1N0a=7vg3;VLqVFbnW3xSG<M@%)YhJN|W3|44&59y_cVC*OJn{&>@^!!8g#G9}?H
zGb&XS2FkPe{7w~dGp~gCTt{r6l<l3nygywaJJ?EPAbwCd50#|gwcSM`=4Eq$cYV0N
z<^(%l@NLF5utAMV2W{1EI$O+Hhsho9_a;4`R1vw4LV`nGSOEqA;lVG!b9*_*O10&;
z=3lAqqBzM@c`cYVN%Ut@yI<A$`*mR2=7rP`@;cRZ^-ULCc(R7suZJ$;wiz?cw1n(<
zO7R9f3rfW`l0(mN4N8Xsy=a640KDb?o=23c?uQ(!WGE#%{S}{{_i&V}@+;XwPq3)N
zo|3J!pshu+VI%a3Zi$IM13H^w@2=%@p^1rv+SZBg3cPZzeY7*AxC$?iL6&@>8S^ep
zPTDR-*0+01GF6!+7ald;RA6TC^33RA+}Yw#kT{+b4ey83!J+RD**O;Rj}TU(CgaA2
z&(Y8N*?4kzUo!#$xp4%szLrsw%-Y7Z05dtcsA)-c1D-wb{daw`CbsVi!&IDJ{;ll3
zNg>@lZ9P@*%4BM?9BnL<{Jsg;1qKraFvs76a!(!UabByqzTLINs@Sz<7?t2}cYkcH
z?DI^#X(p|K0n@W|F&#s;O^vPk@42HRRNXiA>t?j#KF}5s0b2DM+B_Ahoq^RF8IJu1
z5^*O~hQevg!tr@i&L~#ygQKHotuX)L)0vyDCbPAwzfCbu*A#t^FzDAX&TSF;8wY7v
z>+xI~Yt0x)Gc}ju*t&gAI>W7gn{X}C<ijtVx4HT?MX@Q<hAD7#nFM)~e9R%~gN~X-
zLC?A%iKx77h}&3zx?jPz-Q--u_0(HfrU7ZOJfBJKdTTcB4cyj~ia3BRDtY(rP&|uE
z@feU+(39j&*~bXezx6eBdTG26pKJYVGTi=j%#zPuvB|Tht08*WEiLXP)qm-Jjgx4`
z9SFCl)3Wdn7VpbKadGB_Pma;1_mITZPm_>!46$*2Ft$kI#Wd*7=ZG;Y@0|0=yLZLw
zlyo9{bTVV*<j-R!x_aZZJ7dMfLk$P<hNwM5X42$YKqbw_%_iu%m<40JjVuGj9&C?3
z7=ozHLFJXA_)mmLF-Q)(S@Uqu65?_-3_*Sx<qV4u9yxFMSCnH-(#e+pr?xZyhQf>c
zc#BA(kS#>U8reo;SHwueRLD9C!webwWY?D_CVSSgjFhn^V;i!RFc`}iTlOg1AUl<Y
z(ldRZbDq=p4|wj+_uTV2pL6f~bMNbY&%J5nx-~&aBTlf^`;!;@iNLfx(fE!;M^%-`
znJi&9${p&|61S55)8Jf4K;J<G1zoC);`gkS3L~^?$y=eG?-eE%%>Xeo!-TqqYKPN}
z!ZG}s+3jhZNuYjO<-*lso;8~eAnNt7&pZ`FtAY0o%3ufGO@bB@B9sDNXucAjcN_NI
zyrq(!d;O9ZJim)neN5Dm3a<|3AxxO8Y2+Anu2fv;b+e`Ruz>|)28xv}nPPpKqrUHS
z-5X$E7`+V@nXn<kBl6uB&*H4otpu$S=q}+4t(bw$+}eKXvy79zQNs&xsjxIxx+Eo1
zdl(;WbuF5aQPUwI-IKQkrtRr!iil>na>__o)waBJRI!UDDV(<)=tCSILNk8KI)t-d
zrjLOfKoE(iv*UJc>W<S8PLe^htakY~P|OWJ_hG&`P@jnr)OO8=u2yii)|GgTl@DC1
z11^&^9@<@Ii4*I?iB&m&u_U68VH@x1OXtpVur-crvdtIf5vC>*ceR&%6m!W5GBSe>
zlRZt5lCT&DEP)_!G1+P>VdoLAOX|M&ez@FcU0p;_DDRVsZdVD@&8~i`xL5yx1Yyk}
z@S-)|fFx;kQ#+kYIoEAW4tN`3E$SRlR0voP-p%y6<yZ$l#<2WwYkuuU`?k}UvtIbi
z`JW4whgL3XYb97l`WOD_PcjWnNft%%Vn-|)rWuz7r@t$WjM7M0A-dtxiq5c&Mr(-y
zo2IoOd;=Ymyl~3Dd_1R+cRgcbzOXxJWZPl%e9pN*4zZ3;hEn8{nWE&dh6ti1>(!*^
zkL{lh%koxIkdBKJ;{GWqE)L+gJipI)g?ZI1!mqEGcZ#dCC6Vv-A(n==*(K}`a?;yx
z^wFnIF<h*|f0aM+lcNOJI}ekzz%O?S*&l$AGyaw(bA|2{DwbH83WIK;{h;oqt_9s>
zM%Ps4jXVSCRQ<#{G2~%EZo)hOToUMiY}4iSlOI2HBu>z*eUR=-Ymznkd=u?5@4vqp
z-8zxGAf7{!b*|Zj=x?qNTdPkvd4vcFtVsedl3&(PebhYhsnH#v2`}qQ{v5V}{(cvY
zOM6UL7p~&8q#F8B6Dq4B<k>^@!SofQ6gj6T!?Y@r!pC?lfefnw1Rj0Utb%#n#96rf
z_G-SAsGA8pd!xy(oJ)T+c5!NBadI*XVZbLmBS+W0<y)c-#>9y$2B+7Vg7U9l=1sq(
z1_iyn18PZ;mm)K-=js&k6su_6HZVrWDAX16L7jV4mb9{!=6=!Cs*9m>8S}oxjAUnq
zJE)P0LmU^|#>yWDHKkPySu%p)CpGY2w!uTF0LNm=nTvHzBP`F}UkSsgbCf?*;%RxA
z0`+Ln>EPgOuK#e?=)7fFn}BiZ@{h(tLuXKl^Dut%v-YwGk*~Pk&7qw^ykoi-Ad#~c
zb(#Ej;zIjP()EmR;GNb1tQdS#22T=E8rBzR3UD8bdSI-5?Ok0cchbWFp61tMj>4;j
zrF&G?jTMe@L3w-SdN3{}8ICK3xk5!1(uIl@sr#S@#h%dp`9PRi??aaYTT~uRZE9E6
zxP<mF-Z4yOlRGyME<JHP^Z|#|jFO*faa$He1mi@e6c5-=LfK&afXr6``EZW-4nrkO
zRFI^W7t^rmMUaL(U-&S07uMJZv9f%croHmr{YgKf1^qMIT1{dS`?}N;`brmmnqZ$(
z)G$LD(7hyhSSBzE9_o`kxcc?$397GwL19~AU66za`rLtD2D|Am9V=;h>Q=|68)=%o
zLGEqW--Voo<7_+n(v*6>sbMr;OXP5rU9qSGkB`7T_V>y^3n!QyIu1m?WPDTN4PIT9
zUXQne6`2`(7WpoYzX-wWq-{N`-o?+ia1j+EDNsMd_~!v~iGef1lv#TRFoAXX+MX{%
zo0w&x;7Cgb<K!IikU`%Njw!JA1S8|5b#m{QMZuT(z}y8ls4}Xk%;5;5KIAs!2Wx3)
zcSQPZAaE1HWvp$Me)(EQ&iyB%y4XbTD1Zh3ac4dvTB`S5$YGED+cWjU=qDX7`v?*Q
z3z`O7Iux$u(B@Xa2E7ALF0SnJQ|_p{Z`C`uaPn)OX41MvuB=K6|7>`R>$Sc!iQ9Ym
z=thheH!H<7omuK0?|AO{G4pMlNv3O|(L&v_klPu&sW7b}E*Z(5tt3J7C?G~Ewxg0i
z!3R%Bu(&}ph3oX=<rO2xC~sGSjI%Ki{A(LoaZOE3_|<-bM{_EfN*$XEhBdnk<#*uw
zWvx%Jzx6dwT~*#6kz}BflY)!%>rN8F!8ND-xLI-T?DxTb7_UF`+ECrKy23Eg4Oo~G
zuiTwIR82%hDvAqR=VT?4yknq7J=KQ_*n7PKKk>*wiKM|+(WiZ8P7zpIz&8Tb#MJRg
z<LXbA?|JlP9vLxy0Bjrki|ZdVyUB-AJ+KW~YtENt=yLCSaX-KkZR#zEt#CPm!og5P
zgci($yU4$NKAs;~NH8@Xr~iD)<N2m-B&YzQP<B*v<E{6Bs(u>*E|TD7y!rJcO|>FK
zS-AD^b=2OeHRUDSM~GunG^pdA?878ii0Qj|PO?~T;*a-It!#t65nNYRKiM#~*|U6q
z070p30IuI@&~%Dnl@X=#2;Yp+(>ChHroqb2c|LvTfIWkFv27?gvQuvpx&%8Gn27Hn
z=S^Yk1GzrG7s=_MCf^zeb>g3*0mphwh8p<U@VeGu6OANxU3=$c(K(D|{b6Cd&12Ng
zKn4po<8+R~ePijl-Z5bN!@3m|OG=VDAa&xztOq)ae=EJ#_V~!V2#?4xeUvdu`niuA
zFt}YX{FRS+m0C9Qzd=RdoTco<Q{RC1<XQXR@mRxbiR4G`lRy62R#_9QkDz!>k<-d0
zn|DWp>ygsRXuYK7?l0!SMp~bC7JzYgUU7k%oyT;qtGY8L0}FmV@aDcBO+M~<C%OMa
zXyayO=F|+!F_h26I6`wuD(v%5sbE>#EcYCh9H<J$kP9~`%ik$<c7BcBy?+H32UqAl
zCE0Mei-h7k0Zqg8kB~}-OIUc&Vps6j#PmVUJZEH<D?lX5`Ez-bdd$pGVO<P+K}f+n
z4lc=_u-g`kK-;>{Po|n&j=yr5iRxU|N$UY-Iu~eqZF`wvwK`vJ$ol8QVa{c1)z<b!
z+rDiEBfZZie*b)a=FzgwG?wt&<D3|>^I5jyXZp4*N-tXNrVOC%n`CIH4%&0uEhzU!
zfZt{Ny4nl4(Nk-$&sv*4c3zxFz$s}a&3Fk+r&S=I?YJ&>C;G*-=F0tMPhzbB-kLg}
z+J$Z|>XCtZHb{VU$;CW7D|uGzpe5C=FMyp72Dq9XS1-e;B&M<U-gNhw6JYWou7)pa
z47t@4!%I3L&_p>U=t$A*eEN<9GbzHgvFba}5S6ep%E6QMMHj%qy<)U3WlmsNVI&YU
z!;6o+{6cGNDC_&ybR)}4HJLfN^ivL`@FE4fu<l0DDp?sB)rU1*BnVc{Zf8rX%C{<1
zNLMl5vt#%7x`aiGV#_RMk~p7wivSucLKZZY^*d{GO@{NYC@PjUbSBn#Rx-tUl(;`$
z@{uVXkfCrq#I0lb2BbZ<hApe~Vsi00+?Z2RMzmzI`#<!nX18|aT^;PMvc-9r({ka4
zvE&Y`k4FD^r*+cv13mD%qmsftzIa^z-2{!nxODN(3vZUkD=hS;aQ${Z8*=y6y?OBE
z)I>&MIeon_+&UDX5}_fs*>rCL6gNHM;*H%jUGgA?eSjz?@FB@}3(P|KKzQm)mr2PX
zlkb9>F;{v<0(G)%)~1Tvi|SPjE_?LTGtaADA?qqy)K$0CtzXd2eX(Bf3o2ue@PY(f
z&TAue>yllXhm>M>t2U%(a4ywfz#sd+J#VP)xa&q16|LzSrk!5o3fR|JdV1>`T4>>>
zvg>fhci5zNk>}0$Oz$5Pu9tA=YS$PDEkPCvn1(w|9a(=Q9*go8SWDBGS$z|X)x(tT
zWGPJb)P}FGdwL)n4Hjp@twpY*bdVHJn8+;Ij;_UUWINL!0<eY=RQZwTAQ>ac6D@14
z;02X-eERe>pFT1#4)q>OJ5-nx0u5YYT~Z%deZ8r=*fdK!&!F9Dwv~Strt9#Q`z!9*
zI{e8;ToUBONSDRxjj=VZpQGr2NTv3H$3?qW?&@WUpnnzf2#U}p+<BdcU-U^bSV*cn
zVRtpyE>5=wb5nD_y5zcldLX1)@KCbez_@Oz=-mME0EPaFm^jiKv9&L3etqP%Q&szl
za#n@LiK3Zd(Jw`%)mL7hWW69>_kK5#qi%B^ZY52q|6#&nA<!f!J5Rb*6rL_vi?}-J
z-7j@ps!^dV#HQ*LYY2QzS-b0N;6N6Ap0X}Ah5$_ZwJvV${adCuENjiU-A(2}i(kz&
z<PxL@<&_*Az0WN+s3H_K!l*$ffT=JOOlq0}mr!B-`6Ek!sy7b?gQ4PstzC-89pa|I
zLLcWC{7i>79lvaLu*11gdpld+2|?``w`Ci)NUI=;i!JG+Et-kta~zV(A1#{Ci@g|4
zzNfR-`1?G~YkF+#3vVWE%#tCP4*fcS2#F{UO(~&jX9~Sh_SJhFa~gIn&fWfkjPy-C
zS7h;c{9B&oWvG99G|fLj#XEMIWLGhIaPTMFN>NSS)#cVo92)nunv*S$Wu2QMufxs*
z?<0z{S1EaNPATs8Mu|ETuuc$}t9C&zkh5J7eUr@J<o)=kbT6_RWmb}%@!Rk~d-%#p
zp-^yI@U!W#Z=96dc)5$}{6??J1Y*28D^Vu9B_RV>);;@#Kzo;K-eoK_y^I6cgv||S
zMoBJ00(?Kj?lhdffUa2t=1$W`sr0<*KeA-)q;}FhQKE2uxj`>FR}(}O(1;w^&~HqF
zI7$l<UI`VIJ}gjwZ#DH>fVtdW-MiVBqhNpFAq^OCJ}@~gdc9?4wee2&l4Lu30Er=T
zGPtc?;p(N`Oc#%6K)9ww>K`@k)x0O4S0RUNtTPwUDhvQcLg{9)rHoE1;aKA3kB|4l
zDuvffkJ-+gGt{%ydSokWr}xGUnClQ%i5l<E{*!$Xy;-&FctDfID}%<Ixf|X#wNDNW
z|IMqBuW81*-EEYj5~n<$aYz%a&mdF?ZPFxtMEPG(XfUF-E<?0MHoCKX!~U<gdX4=F
zzJ<xBIW>>I`>D+9RthZd6hMps4<_%b_Yw1yAxv+HKB>Mnsr&POk=7^V3zthNF)TWp
zcX>PPDoo3Li$;Eo+I!DxHD`4)dn!)bZH_R_Z`_Lu?}b>hOK?~B13&GrAz+W6Td<S(
zA~9@d9*jEKk7S<u4^?(Nc66KI!H)&%OQ!4pZRTEMC!Jv;;i+PxrTPEa!GAC^`D6*u
z(<Z7!<39j-{W_C2e=n6!xBPpM7G);)7Ph*0De-SMeeK{Z6J&>fxhZw`Z(yw)&m_~)
zcb~=*{>I(|dQ3*{mDgx)lKwZz<^a5)k(~JQ=l+Av|35>nlzSDp^;y3n+|cU3p`=A{
cv%LL%M#KDB7V}k4_9M*3JlY!)4ICf;4~NT}TL1t6

literal 0
HcmV?d00001

diff --git a/plan-production-install.md b/plan-production-install.md
index 16af7980b2..5ba760e52d 100644
--- a/plan-production-install.md
+++ b/plan-production-install.md
@@ -1,8 +1,8 @@
 <!--[metadata]>
 +++
 title = "Plan a production installation"
-description = "Plan a production installation"
-keywords = ["tbd, tbd"]
+description = "Learn about the Docker Universal Control Plane architecture, and the requirements to install it on production."
+keywords = ["docker, ucp, install, checklist"]
 [menu.main]
 parent="mn_ucp"
 weight=-90
@@ -11,766 +11,248 @@ weight=-90
 
 # Plan a production installation
 
-Intro 1-2 paras, page purpose, intended user, list steps if page is tutorial.
+This article gives you an overview of the Docker Universal Control Plane (UCP)
+architecture and its components. Here you'll also find all the information
+you need to plan a UCP installation on a production environment.
+
+The following topics are covered:
+
+* [UCP architecture](#ucp-architecture)
+* [The UCP installation](#the-ucp-installation)
+* [Understand your installation options](#understand-your-installation-options)
+* [Security Considerations](#security-considerations)
+* [Docker Engine Configuration](#docker-engine-configuration)
+* [Installation checklist](#installation-checklist)
+
+## UCP architecture
+
+Docker UCP is a cluster with multiple nodes, each running the
+Commercially Supported (CS) Docker Engine.
+In this cluster, there are 3 different types of nodes:
+
+* [UCP controller node](#UCP-controller-node): the node that handles user
+requests,
+* [UCP replica nodes](#ucp-replica-nodes): replicas of the controller node
+that can take its place if it fails,
+* [UCP nodes](#ucp-nodes): the nodes that run your own containers.
+
+![](images/ucp-architecture.png)
+
+#### UCP controller node
+
+This is the node that handles user requests to UCP. Users interact with UCP
+using a web browser, or a CLI client.
+
+Below is a list of the containers that are deployed to the controller node,
+when running the `ucp install` command:
+
+| Container name    | Description                                                                               |
+|:------------------|:------------------------------------------------------------------------------------------|
+| ucp-controller    | Manages UCP resources, admin configuration, and user commands.                            |
+| ucp-swarm-manager | Accepts requests the from UCP controller.                                                 |
+| ucp-kv            | Internal node discovery, cluster configuration, and support for HA.                       |
+| ucp-ca            | Allow external systems to reach UCP. Proxy for TLS.                                       |
+| ucp-swarm-ca      | Allow external systems to reach UCP, Swarm, and Engine, using credentials. Proxy for TLS. |
 
 
-## What is installed
+#### UCP replica nodes
 
-tbd
+Docker UCP has support for high availability. You can configure replica nodes
+to stand by, and be ready to take the place of the controller if it fails.
 
-## About the bootstrapper
+A cluster with N controller and replica nodes can only tolerate (N-1)/2 node
+failures. So be sure to set up at least two replicas, when installing UCP for
+production.
 
-tbd
+Below is a list of the containers that are deployed to the controller node,
+when running the `ucp join --replica` command:
 
-### UCP Component architecture
+| Container name    | Description                                                         |
+|:------------------|:--------------------------------------------------------------------|
+| ucp-controller    | Manages UCP resources, admin configuration, and user commands.      |
+| ucp-swarm-manager | Accepts requests from the UCP controller.                           |
+| ucp-kv            | Internal node discovery, cluster configuration, and support for HA. |
+| ucp-proxy         | Manages TLS and requests from swarm manager.                        |
+| ucp-swarm-join    | Heartbeat for Swarm nodes to ensure they are running.               |
 
-tbd
+In UCP v1.0 the controller serves as root CA, and no other nodes are able to
+sign certificates. If the controller fails, it might not be possible to add new
+nodes to the cluster. [Learn more about high availability](understand_ha.md)
 
-#### controller
+#### UCP nodes
 
-tbd
+These are the nodes that run your own containers. When you deploy
+your containers using UCP, it spreads the load across these nodes. You can
+configure the strategies used by UCP to deploy the containers across multiple
+nodes.
 
-#### nodes
+Below is a list of the containers that are deployed to the controller node,
+when running the `ucp join` command:
 
-tbd
+| Container name | Description                                           |
+|:---------------|:------------------------------------------------------|
+| ucp-proxy      | Manages TLS and requests from swarm manager.          |
+| ucp-swarm-join | Heartbeat for Swarm nodes to ensure they are running. |
 
-#### images
 
-tbd
+## The UCP installation
 
-#### containers
+The UCP installation consists of using the Docker Engine CLI to run the `ucp`
+tool. The `ucp` tool is a Docker image that can run subcommands like `install`
+to install UCP on a node, or `join` to join a node to a UCP cluster.
 
-tbd
+The general format of these commands is:
 
-### CS Docker Engine
+| Docker client | run command with options | ucp image    | Subcommand with options |
+|:--------------|:-------------------------|:-------------|:------------------------|
+| `docker`      | `run --rm -it`           | `docker/ucp` | `install --help`        |
+| `docker`      | `run --rm -it`           | `docker/ucp` | `join --help`           |
+| `docker`      | `run --rm -it`           | `docker/ucp` | `uninstall --help`      |
 
-tbd
+You can use the `ucp` tool interactively, by passing them the `-i` option, or
+non-interactively, by passing command-line options.
 
-### Docker Swarm
+To list all the possible subcommands for the `ucp` tool, use:
 
-tbd
+    $ docker run --rm -it docker/ucp  --help
 
-### Key/value Store
+You can also find more information about the `ucp` command at the
+[UCP tool reference page](reference/index.md).
 
-tbd
+The `ucp` tool pulls several images from Docker Hub, and runs them in
+containers. The only change the `ucp` tool makes to your system, is
+creating certificates under the
+[data volumes you create when installing](#data-volumes-used).
 
 ## Understand your installation options
 
-tbd
+The best way to test-drive UCP is to install and run it on a sandbox.
+The default options of the `ucp install` command, make it easy to test UCP.
+[Learn how to install UCP on your local machine](evaluation-install.md).
 
-### Evaluation install is a good trial to do
 
-tbd
+When installing UCP for production, you'll want to ensure your installation
+scales and is secure. You'll need to:
 
-### AMI or manual installation
+* Set up UCP for high availability,
+* Customize some of the ports used,
+* Customize the data volumes used,
+* Use your own certificates.
 
-tbd
-
-### Default versus the custom installation options
-
-tbd
-
-### Mix panel analytics
-
-tbd
-
-## Network considerations
-
-tbd
-
-### Port numbers
-
-tbd
-
-### Swarm Manager
-
-tbd
-
-### Data Volumes
-
-tbd
-
-### High availability
-
-tbd
-
-### Discovery
-
-tbd
-
-## Security Considerations
-
-tbd
-
-### Certificate authority
-
-tbd
-
-### Controlling user access
-
-tbd
-
-## Docker Engine Configuration
-
-tbd
-
-### Starting the daemon
-
-tbd
-
-### Docker CLI and the certificate bundle
-
-tbd
+[Learn how to install UCP in production](production-install.md).
 
 ## Installation checklist
 
-tbd
+Before installing UCP, make sure you have the following requirements:
+
+* [Hardware and sofware requirements](#hardware-and-software-requirements)
+* [Ports used](#ports-used)
+* [IP addresses and fully-qualified domain names](#ip-addresses-and-fully-qualified-domain-names)
+* [Subject alternative names (SANs)](#subject-alternative-names-sans)
+* [Data volumes used](#data-volumes-used)
 
 ### Hardware and software requirements
 
-tbd
+You can install UCP on-premises or on a cloud provider such AWS or Digital
+Ocean. To install UCP, all nodes must have:
+
+* 1.50 GB of RAM
+* 3.00 GB of available disk space
+* One of the supported operating systems installed:
+    * RHEL 7.0, 7.1
+    * Ubuntu 14.04 LTS
+    * CentOS 7.1
+* Kernel version 3.10 or higher
+* CS Docker Engine installed
+
+If the `ucp` tool detects that your system doesn't have these
+requirements, it displays a warning message.
+
+### Ports used
+
+The following ports are using on UCP installation:
+
+| Hosts                       | Direction | Port                | Purpose                                                     |
+|:----------------------------|:---------:|:--------------------|:------------------------------------------------------------|
+| controller, replicas        |    in     | 443  (configurable) | web app and CLI client access to UCP.                       |
+| controller, replicas        |    in     | 2376 (configurable) | swarm manager accepts requests from UCP controller.         |
+| controller, replicas, nodes |    in     | 2375                | heartbeat for nodes, to ensure they are running.            |
+| controller, replicas, nodes |    in     | 12376               | proxy for TLS, provides access to UCP, Swarm, and Engine.   |
+| controller, replicas        |    in     | 12379               | internal node configuration, cluster configuration, and HA. |
+| controller, replicas        |    in     | 12380               | internal node configuration, cluster configuration, and HA. |
+| controller                  |    in     | 12381               | proxy for TLS, provides access to UCP.                      |
+| controller                  |    in     | 12382               | manages TLS and requests from swarm manager.                |
+| controller, replicas        |    out    | 443                 | send anonymous usage reports to Docker.                     |
+
+UCP collects anonymous data on the usage of UCP and reports to Docker.
+This data is entirely anonymous and does not identify your company or users.
+You can disable this at any time on the UCP settings screen.
+
 
 ### IP addresses and fully-qualified domain names
 
-tbd
+The `ucp install` command tries to use your network configurations to find
+the fully-qualified domain names (FQDN) of your hosts.
 
-### Subject alternative names (SANs)
+If you haven't set up your network with FQDNs, the installer might not be able
+to find the FQDN for the host. If that happens, you'll be prompted for an
+accessible host address. You can also use the `--host-address` option to
+specify the FQDN to the install command.
 
-tbd
+If you're installing UCP on a cloud provider such as AWS or Digital Ocean,
+you might need to create a private network for you UCP installation. In that
+case, make sure all nodes of the cluster can communicate using their private
+IPs.
 
-## Where to go next
+If the nodes in the cluster cannot communicate using the private IPs,
+you'll need to use public IPs or Fully Qualified Domain Names.
+[Check the ports used](#ports-used) by UCP.
 
 
-<!--[metadata]>
-
-# Docker UCP Quickstart Guide
-
-These instructions explain how to install Docker Universal Control Plane (UCP). A UCP installation consists of an UCP controller and one or more nodes. The same machine can serve as both the controller and the node. These instructions show you how to install both a host and a node. It contains the following sections:
-
-- [Plan your installation](#plan-your-installation)
-- [Step 1: Verify you have the prerequisites](#step-1-verify-you-have-the-prerequisites)
-- [Step 2: Configure your network for UCP](#step-2-configure-your-network-for-ucp)
-- [Step 3: Install Docker CS Engine 1.9](#step-3-install-docker-cs-engine)
-- [Step 4: (optional) Create user-named volumes](#step-4-optional-create-user-named-volumes)
-- [Step 5: Install the UCP controller](#step-5-install-the-ucp-controller)
-- [Step 6: (optional) Add a controller replica to the UCP cluster](#step-6-optional-add-a-controller-replica-to-the-ucp-cluster)
-- [Step 7: Add an Engine node to the UCP cluster](#step-7-add-an-engine-node-to-the-ucp-cluster)
-- [Step 8: Set up certs for the Docker CLI](#step-8-set-up-certs-for-the-docker-cli)
-- [Uninstall](#uninstall)
-- [Block Mixpanel analytics](#block-mixpanel-analytics)
-- [Installing with your own certificates](#installing-with-your-own-certificates)
-- [Where to go next](#where-to-go-next)
-
-**Upgrade Note**: If you have installed UCP 0.6.0 or higher, you can upgrade to UCP 0.7.0 using the [upgrade](reference/upgrade.md) command.
-
-## Plan your installation
-
-The UCP installation consists of using the Docker Engine CLI to run the `ucp`
-tool. The `ucp` tool is an image with subcommands to `install` a controller or
-`join` a node to a UCP controller. The general format of these commands are:
-
-| Docker client | `run` command with options | `ucp` image | Subcommand with options |
-|---------------|----------------------------|--------------|-------------------------|
-| `docker` | `run --rm -it` | `docker/ucp` | `install --help` |
-| `docker` | `run --rm -it` | `docker/ucp` | `join --help` |
-| `docker` | `run --rm -it` | `docker/ucp` | `uninstall --help` |
-
-You can these two subcommands interactively by passing them the `-i`
-option or by passing command-line options. This installation guide's steps
-assume both are run interactively.
-
-To list all the possible subcommands, use:
-
-```
-$ docker run --rm -it docker/ucp  --help
-```
-
-### Default versus the custom installation options
-
-This installation guide walks you through
-
-* configures data volumes on the controller
-* generates a certificate chain on the controller
-* creates a Swarm cluster
-* loads and launches the appropriate images
-
-
-Regardless of how you use the `docker/ucp install` command, the installer
-supplies some quick default options for both data volumes and the certificate
-authority (CA).
-
-The first time you install, you should build a sandbox environment using
-`ucp` defaults. After installing and using this sandbox environment,
-you can uninstall it and try a custom installation. In a custom installation you
-can:
-
-* use the high availability feature
-* customize the port used by the UCP web application
-* customize the port used by the Swarm manager
-* create your own data volumes
-* use your own certs
-
-This install documentation describes the default installation and the
-customization steps.  Customize steps are identified with the keyword
-(optional). Make sure you skip these steps when doing the default installation
-in your sandbox.
-
-### IP addresses and fully-qualified domain names
-
-The `docker/ucp install` subcommand works to do as much network discovery as it
-can. If your network configuration defines fully-qualified domain names (FQDN)
-on each host, the installer uses this information to obtain accurate host
-addresses. If you haven't set up your network with FQDNs and the installer
-discovery fails, you must supply the installer an accessible host address either
-interactively or using the `--host-address` option.
-
 If you are using a cloud provider such as AWS or Digital Ocean, you may need to
-allocate a private network for your UCP installation. You can use this network
+create a private network for your UCP installation. You can use this network
 as long as the controller and nodes can communicate via
 their private IPs. If the private IPs do not support communication among the
 UCP cluster, using public IPs or full-qualified domain names are required. For
-more information about what ports and protocols are required see [Step 2: Configure your network for UCP](#step-2-configure-your-network-for-ucp).
+more information about what ports and protocols are required see
+[Step 2: Configure your network for UCP](#step-2-configure-your-network-for-ucp).
+
 
 ### Subject alternative names (SANs)
 
-Further, UCP requires that all clients, including the Docker Engine, use a Swarm
-TLS certificate chain signed by the UCP Swarm Root CA. You provide the
+All the communication between the nodes is protected by mutual TLS. The UCP
+installation configures TLS for you automatically.
+
+For that, UCP requires that all clients, including the Docker Engine, use a
+Swarm TLS certificate chain signed by the UCP Swarm Root CA. You provide the
 certificate system with subject alternative names or SANs. The SANs are used to
 set up individual "leaf certificates."
 
-For the controller and each node, you must specify at least one SAN; you can
-specify more. You can pass the `--san` values to the boostrapper's `install` or
-`join`. A SAN value can be the pubic IP address and/or fully-qualified domain
-name.
-
-If you are using a cloud provider and specified private IPs for the host address
-values, consider whether you need to access your cluster through a public
-network as well as the private network space. If the answer is yes, your SAN
-values should contain both the public IPs or full-qualified domain names (FQDN) and the private network IPs.
-
-### Mixpanel analytics
-
-The UCP BETA program makes use of Mixpanel to collect analytics. This feature
-collects data on your usage of UCP and returns it to Docker. The information is
-entirely anonymous and does not identify your Company or users. Currently, you
-cannot turn the collection off but you can block the outgoing messaging. Later
-in this documentation [Block Mixpanel analytics](#block-mixpanel-analytics)
-explains how.
-
-### About these installation instructions
-
-These installation instructions were written using the Ubuntu 14.0.3 operating
-system. The file paths and commands used in the instructions are specific to
-Ubuntu 14.0.3. If you are installing on another operating system, the steps are
-the same but your commands and paths may differ.
-
-The Ubuntu system used to write these instructions was an AWS EC2 instance. The
-instance was running in a in an AWS virtual private network. Elastic IPs were
-configured for all the hosts.
-
-## Step 1: Verify you have the prerequisites
-
-You can install UCP on your network or on a cloud provider such AWS or Digital
-Ocean. To install, the controller and the nodes require a minimum of 1.50 GB of memory. You can run any of these supported operating systems:
-
-* RHEL 7.0, 7.1
-* Ubuntu 14.04 LTS
-* CentOS 7.1
-
-Your system must have a 3.16.0 kernel or higher. If you don't have the proper kernel installed, the `docker/ucp install` command returns this error.
-
-```
-INFO[0000] Verifying your system is compatible with UCP
-FATA[0000] Your kernel version 3.13.0 is too old.  UCP requires at least version 3.16.0 for all features to work.  To proceed with an old kernel use the '--old-kernel' flag
-```
-
-If you proceed with the '--old-kernel' flag, you cannot use the Docker custom networking features.
-
-Installing Docker UCP requires that you first install the CS Docker Engine v1.9
-on both the controller and the nodes. The CS Engine can be installed manually or
-from an image if your cloud provider support its. These instructions assume you
-are installing both UCP and Engine manually.
-
-## Step 2: Configure your network for UCP
-
-UCP includes Docker Swarm as part of its installation. So, you don't need to
-install Docker Swarm. You do need to ensure that the UCP controller and nodes
-can communicate across your network. Configure your network making sure to open
-the following ports:
-
-<table>
-  <tr>
-    <th>Port</th>
-    <th>Description</th>
-  </tr>
-  <tr>
-    <td><code>443</code> </td>
-    <td>UCP controller port. Open this port to allow inbound access to the UCP interface or CLI.</td>
-  </tr>
-  <tr>
-    <td><code>2376</code></td>
-    <td>Allows inbound access from the nodes to the Swarm manager.</td>
-  </tr>
-  <tr>
-    <td><code>12376</code></td>
-    <td>Open this on secondary nodes to allow the Engine proxy to access the Orca server node.</td>
-  </tr>
-  <tr>
-    <td><code>12379</code>, <code>12380</code></td>
-    <td>Key Value store </td>
-  </tr>
-  <tr>
-    <td><code>12381</code></td>
-    <td>Swarm CA service</td>
-  </tr>
-  <tr>
-    <td><code>12382` </td>
-    <td>UCP CA service</td>
-  </tr>
-</table>
-
-
-All the communication among the controller, nodes, and key value store is
-protected by mutual TLS. The UCP installation of Swarm provides and configures
-TLS for you automatically.
-
-Finally, you can specify a different port for the Swarm manager if you need to.
-Using a different  port is a customization. These instructions assume you are using the default `2376` port.
-
-## Step 3: Install Docker CS Engine
-
-The BETA program requires that you install the Docker CS Engine 1.9.0 or above.
-Follow the instructions for your particular operating system and ensure
-you are pointing at the proper repo.
-
-Install the Docker CS Engine on both the controller node and each member node.
-
-### RHEL 7.0, 7.1 and CentOS 7.1
-
-Use the detailed [Red Hat Linux installation
-instructions](https://docs.docker.com/docker-trusted-registry/install/install-csengine/#centos-7-1-rhel-7-0-7-1-yum-based-systems)
-
-### Ubuntu 14.04 LTS
-
-Use the [detailed Ubuntu installation
-instructions](https://docs.docker.com/docker-trusted-registry/install/install-csengine/#install-on-ubuntu-14-04-lts)
-
-
-## Step 4: (optional) Create user-named volumes
-
-UCP uses named volumes for persistence of user data.  By default, the `ucp
-install` command creates for you. It uses the default volume driver and flags.
-The first time you install, you should skip this step and try it later. Later,
-try an install where your take the option to use custom volume driver and create
-your own volumes.
-
-If you choose this option, create your volumes prior to installing UCP. The
-volumes UCP requires are:
-
-| Volume name             | Data                                                                                 |
-|-------------------------|--------------------------------------------------------------------------------------|
-| `ucp-root-ca`          | The certificate and key for the UCP root CA. Do not create this volume if you are using your own certificates.                                      |
-| `ucp-swarm-root-ca`    | The certificate and key for the Swarm root CA.                                       |
-| `ucp-server-certs`     | The controller certificates for the UCP controllers web server.                                     |
-| `ucp-swarm-node-certs` | The Swarm certificates for the current node (repeated on every node in the cluster). |
-| `ucp-swarm-kv-certs`   | The Swarm KV client certificates for the current node (repeated on every node in the cluster). |
-| `ucp-swarm-controller-certs` | The UCP Controller Swarm client certificates for the current node. |
-| `ucp-kv`               | Key value store persistence.                                                         |
-
-## Step 5: Install the UCP controller
-
-In this step you install the UCP controller. The controller includes a running
-Swarm manager and node as well. Use the following command to pull the
-`docker/ucp` image and review the `install` options:
-
-```bash
-docker run --rm -it docker/ucp install --help
-```
-
-When you install, the script prompts you for the following information:
-
-* a password to use for the UCP `admin` account
-*  at lease one SAN value which is the accessible IP address or fully-qualified domain name for the controller node
-
-When you have the information you'll be prompted for, do the following to
-install:
-
-1. Log into the system where you mean to install the UCP controller.
-
-    If you are installing on a cloud provider such as AWS, make sure the instance has a public IP or hostname.
-
-    ![Open certs](images/ip_cloud_provider.png)
-
-2. Run the `ucp` command interactively.
-
-        $ docker run --rm -it -v /var/run/docker.sock:/var/run/docker.sock --name ucp docker/ucp install -i
-
-    The command pulls several images and prompts you for the installation values it needs. When it completes, the command prompts you to login into the UCP GUI.
-
-        INFO[0053] Login to UCP at https://10.0.0.32:443
-
-3. Enter the address into your browser to view the UCP login screen.
-
-    Your browser may warn you about the connection. The warning appears because
-    the UCP certificate was issued by a built-in certificate authority. Your
-    actions with the install actually created the certificate. If you are
-    concerned, the certificate's fingerprint is displayed during install and you
-    can compare it.  
-
-4. Use the Advanced link to proceed to UCP.
-
-    The login screen displays.
-
-    ![](images/login.png)
-
-5. Enter `admin` for the username along with the password you provided to the `install`.
-
-    If you didn't enter an admin password, the default password is `orca` After
-    you enter the correct credentials, the UCP dashboard displays.
-
-    ![](images/dashboard.png)
-
-    The dashboard shows a single node, your controller node.
-
-## Step 6: (optional) Add a controller replica to the UCP cluster
-
-In this optional step, you configure support for UCP's high-availability
-feature. You do this by adding one or more UCP *replicas* using the `docker/ucp
-join` subcommand.  The first time you install, you should skip this optional
-step and try it later. Later, try an install where you configure
-high-availability.
-
-When adding nodes to your cluster, you decide which nodes you to use as
-*replicas* and which nodes are simply for extra capacity.  A
-replica is a node in your cluster that can act as an additional UCP controller.
-Should the primary controller fail, a replica can take over the controller role
-for the cluster.  If you are trying out the optional HA deployment:
-
-* Configure the controller and replicas before adding additional Engine nodes.
-* Configure a minimum of two replicas in addition to the controller.
-
-Repeat the install for each node you want to add. Use the following command to pull the `docker/ucp` image and review the `join` options:
-
-
-```bash
-docker run --rm -it docker/ucp join --help
-```
-
-The `docker/ucp join` prompts you for the following information:
-
-* the URL of the UCP controller, for example `https://52.70.188.239`
-* the username/password of an UCP administrator account
-* at least one SAN value which is an accessible IP address or fully-qualified domain name for node
-
-When you have the information you'll be prompted for, do the following to install:
-
-1. Log into the host where you mean to install the node.
-
-2. Run the `dokcer/ucp join` command.
-
-        $ docker run --rm -it -v /var/run/docker.sock:/var/run/docker.sock --name ucp docker/ucp join --replica -i
-
-    The `join` pulls several images and prompts you for the installation values
-    it needs. When it completes, the command notifies you that it is starting
-    swarm.
-
-        INFO[0005] Verifying your system is compatible with UCP
-        INFO[0011] Sending add host request to UCP server      
-        INFO[0011] Starting local swarm containers  
-
-3. Repeat steps 1 thru 3 on the other replicas.
-
-    You should configure a minimum of 3 controllers configured, a primary and
-    two replicas. Never run a cluster with only the primary controller and a
-    single replica.  
-
-4. Login into UCP with your browser and navigate to the **NODES** page.
-
-    Simply clicking on the nodes from the Dashboard takes you to the page. The page should display your new nodes.
-
-      ![](images/nodes.png)
-
-
-## Step 7: Add an Engine node to the UCP cluster
-
-In this step, you install one or more UCP nodes using the `ucp join` subcommand. Repeat the install for each node you want to add. Use the following command to pull the `docker/ucp` image and review the `join` options:
-
-```bash
-docker run --rm -it docker/ucp join --help
-```
-
-The `docker/ucp join` command prompts you for the following information:
-
-* the URL of the UCP controller, for example `https://52.70.188.239`
-* the username/password of an UCP administrator account
-* at least one SAN value which is the actual external, publically-accessible IP address or fully-qualified domain name for node
-
-When you have the information you'll be prompted for, do the following to install:
-
-1. Log into the system where you mean to install the node.
-
-2. Run the `docker/ucp join` command.
-
-        $ docker run --rm -it -v /var/run/docker.sock:/var/run/docker.sock --name ucp docker/ucp join -i
-
-    The `join` pulls several images and prompts you for the installation values it needs. When it completes, the command notifies you that it is starting Swarm.
-
-        INFO[0005] Verifying your system is compatible with UCP
-        INFO[0011] Sending add host request to UCP server      
-        INFO[0011] Starting local swarm containers  
-
-3. Repeat steps 1 thru 2 on the other nodes.
-
-4. Login into UCP with your browser and navigate to the **NODES** page.
-
-    Simply clicking on the nodes from the Dashboard takes you to the page. The page should display your new nodes.
-
-      ![](images/nodes.png)
-
-## Step 8: Set up certs for the Docker CLI
-
-Once you install UCP on a machine, it is a good idea to download a client bundle.  The bundle contains the certificates a user needs to run the Docker Engine command line client (`docker`) against the UCP controller and nodes.
-
-You can download the bundle from the UCP interface or using `curl` command. The
-bundle is in a `.zip` package.  You need `zip` or similar to unzip the file. If you plan to use `curl` you also need JQuery. This is used to pass the `curl`
-command an authorization token. Of course, you need to have `curl` installed as well.
-
-### Download the bundle from the UCP interface
-
-1. If you haven't already done so, log into UCP.
-
-2. Choose **ADMIN > Profile** from the right-hand menu.
-
-    Any user can download their certificates. So, if you were logged in under a user name such as `davey` the path to download bundle is **davey > Profile**. Since you are logged ins as `ADMIN`, the path is `ADMIN`.
-
-3. Click **Create Client Bundle**.
-
-    The browser downloads the `ucp-bundle-admin.zip` file.
-
-### Download the bundle with curl
-
-1. Log into a machine with network access to the UCP controller.
-
-    You might log into the controller itself. You could also log into any arbitrary machine able to `ping` the controller.
-
-2. Install the prerequisite `curl`, `zip`, `jq` (JQuery) packages if you haven't already.
-
-    On Ubuntu, the installation looks like this:
-
-          $ sudo apt-get install zip curl jq
-          Reading package lists... Done
-          Building dependency tree       
-          Reading state information... Done
-          The following extra packages will be installed:
-            libcurl3
-          The following NEW packages will be installed:
-            jq zip
-          The following packages will be upgraded:
-            curl libcurl3
-            ----output snipped----
-
-    To curl the bundle, you must export your user security token from the UCP controller. You do this in the next step.
-
-3. Create an environment variable to hold your user security token.
-
-		AUTHTOKEN=$(curl -sk -d '{"username":"admin","password":"<password>"}' https://<ducp-0 IP>/auth/login | jq -r .auth_token)
-
-4. Curl the client bundle down to your node.
-
-		    $ curl -k -H "Authorization: Bearer $AUTHTOKEN" https://<ducp-0 IP>/api/clientbundle -o bundle.zip
-
-    The browser downloads a `bundle.zip` file.
-
-### Install the certificate bundle
-
-Once you download the bundle, you can unzip and use it.
-
-1. Make sure you have `zip` installed.
-
-        $ which unzip
-        /usr/bin/unzip
-
-    If you don't, install it before continuing.
-
-2. Open the folder containing the bundle file.
-
-4. Unzip the file to reveal its contents.
-
-        ucp-bundle
-        ├── ca.pem
-        ├── cert.pem
-        ├── cert.pub
-        ├── env.sh
-        └── key.pem
-
-5.  Set up your environment by sourcing the `env.sh` file.
-
-        $ source env.sh
-
-6.  Use the `docker info` command to get the location of the Swarm managers and engines.
-
-        $ docker info
-        Containers: 9
-        Images: 9
-        Role: primary
-        Strategy: spread
-        Filters: health, port, dependency, affinity, constraint
-        Nodes: 1
-         node1: 192.168.122.7:12376
-          └ Containers: 9
-          └ Reserved CPUs: 0 / 1
-          └ Reserved Memory: 0 B / 2.054 GiB
-          └ Labels: executiondriver=native-0.2, kernelversion=4.0.9-boot2docker, operatingsystem=Boot2Docker 1.8.1 (TCL 6.3); master : eb5571f - Thu Sep  3 22:18:54 UTC 2015, provider=kvm, storagedriver=aufs
-        Cluster Managers: 1
-         192.168.122.7: Healthy
-          └ Orca Controller: https://192.168.122.7
-          └ Swarm Manager: tcp://192.168.122.7:3376
-          └ KV: etcd://192.168.122.7:12379
-        CPUs: 1
-        Total Memory: 2.054 GiB
-        Name: node1
-        ID: PNLT:MFCO:DDWL:MSLF:YVHU:35Z3:66KM:DFZM:OPBK:D4BQ:EKNT:6DXA
-        Labels:
-         com.docker.ucp.license_key=unlicensed
-         com.docker.ucp.license_max_engines=0
-         com.docker.ucp.license_expires=EXPIRED
-
-### Client Bundles on Externally Managed CA Configuration                                           
-
-If UCP is configured with an external CA, it will be unable to sign client bundles for non-admin users automatically. It is still possible to manually issue certificates signed by the CA that UCP users can use to interact with UCP via the CLI.
-
-Generate an 2048-bit RSA private key.
-
-```
-openssl genrsa -out key.pem 2048
-```
-
-Generate a Certificate Signing Request (CSR).  The output `cert.csr` should be provided to your organization's CA owner to be signed, with a minimum of client authentication usage.
-
-```
-openssl req -new -sha256 -key key.pem -out cert.csr
-```
-
-Your CA owner will sign the CSR, and provide `cert.pem` and `ca.pem` files.
-
-Extract the public key from the signed certificate:
-
-```
-openssl x509 -pubkey -noout -in cert.pem  > cert.pub
-```
-
-The contents of cert.pub will then need to be added to your profile.  You can add this in the UI by clicking the User Menu in the top right corner, and select profile.
-
-Once you are on the User Profile screen, click the "Add an Existing Public Key" button and provide the contents of cert.pub, along with a memorable label for this bundle.
-
-Now that you have linked the public key to you account, the next step is to configure your CLI. To configure your CLI to use the certificate bundle that you have generated, you will need to export the following environment variables:
-
-```
-export DOCKER_TLS_VERIFY=1
-export DOCKER_CERT_PATH=$(pwd)
-export DOCKER_HOST=tcp://<ucp-hostname>:443
-```
-
-## Uninstall
-
-The `docker/ucp uninstall` command removes UCP from the controller and the nodes. The uninstall process does not remove any other containers that are running, except those recognized to be part of UCP. To see the `uninstall` options before you uninstall, use the following:
-
-```bash
-docker run --rm -it docker/ucp uninstall --help
-```
-
-To uninstall, do the following:
-
-1. Log into the node you want to remove UCP from.
-
-2. Enter the following command to uninstall:
-
-        $ docker run --rm -it -v /var/run/docker.sock:/var/run/docker.sock --name ucp docker/ucp uninstall -i
-
-3. Repeat the uninstall on each node making sure to save the controller till last.
-
-## Block Mixpanel analytics
-
-To block the outflow of Mixpanel analytic data to Docker, do the following:
-
-1. Log into the system running the UCP controller.
-
-2. Add a rule to drop the forward to port 80.
-
-        $ iptables -I FORWARD -p tcp --dport 80 -j DROP
-
-Reboots unset this iptables chain, so it is a good idea to add this command to the controller's startup script.
-
-## Installing with your own certificates
-
-UCP uses two separate root CAs for access control - one for Swarm, and one for
-the UCP controller itself.  The dual root certificates supply differentiation
-between the Docker remote API access to UCP vs. Swarm.  Unlike Docker Engine or
-Docker Swarm, UCP implements ACL and audit logging on a per-user basis.  Swarm
-and the Engine proxies trust only the Swarm Root CA, while the UCP controller
-trusts both Root CAs.  Admins can access UCP, Swarm and the engines while
-normal users are only granted access to UCP.
-
-UCP v1.0 supports user provided externally signed certificates
-for the UCP controller.  This cert is used by UCP's main management web UI
-and the Docker remote API. The remote API is visible to the Docker CLI. In this release, the Swarm Root CA is always managed by UCP.
-
-The external UCP Root CA model supports customers managing their own CA, or
-purchasing certs from a commercial CA.
-
-The first time you install, we recommend you skip user-supplied certs and use
-the default certificates instead. The default TLS certificate files are placed
-on the host filesystem of each Docker Engine in
-`/var/lib/docker/discovery_certs/`. Later, do a second install and try the
-option to use your own certs.
-
-
-### Configure user-supplied Certificates
-
-To install UCP with your own external root CA, you create a named volume called
-**ucp-server-certs** on the same system where you plan to install the UCP
-controller.
-
-1. Log into the machine where you intend to install UCP.
-
-2. If you haven't already done so, create a named volume called **ucp-server-certs**.
-
-3. Ensure the volume's top-level directory contains these files:
-
-    <table>
-    <tr>
-      <th>File</th>
-      <th>Description</th>
-    </tr>
-    <tr>
-      <td><code>ca.pem</code></td>
-      <td>Your Root CA Certificate chain (including any intermediaries).</td>
-    </tr>
-    <tr>
-      <td><code>cert.pem</code></td>
-      <td>Your signed UCP controller cert.</td>
-    </tr>
-    <tr>
-      <td><code>key.pem</code></td>
-      <td>Your UCP controller private key.</td>
-    </tr>
-    </table>
-
-4. Follow "Step 5" above to install UCP but pass in an additional `--external-ucp-ca` option to the `docker/run install`, for example:
-
-        docker run --rm -it \
-          -v /var/run/docker.sock:/var/run/docker.sock \
-          ...snip...
-          install -i --external-ucp-ca
+When using the `ucp install` or `ucp join` commands interactively, you are
+prompted for the subject alternative names of the host. This can be a public
+IP address, or fully-qualified domain name.
+You can also send the `--san` option to specify the SANs for a host.
+
+### Data volumes used
+
+UCP uses named volumes for persistence of data. When installing UCP for
+production, you need to create the following volumes:
+
+| Volume name                | Data                                                                                                           |
+|:---------------------------|:---------------------------------------------------------------------------------------------------------------|
+| ucp-root-ca                | The certificate and key for the UCP root CA. Do not create this volume if you are using your own certificates. |
+| ucp-swarm-root-ca          | The certificate and key for the Swarm root CA.                                                                 |
+| ucp-server-certs           | The controller certificates for the UCP controllers web server.                                                |
+| ucp-swarm-node-certs       | The Swarm certificates for the current node (repeated on every node in the cluster).                           |
+| ucp-swarm-kv-certs         | The Swarm KV client certificates for the current node (repeated on every node in the cluster).                 |
+| ucp-swarm-controller-certs | The UCP Controller Swarm client certificates for the current node.                                             |
+| ucp-kv                     | Key value store persistence.                                                                                   |
+
+If you don't create these volumes, the `ucp install` command creates them for
+you with the default volume driver and flags.
 
 
 ## Where to go next
 
-To learn more you can also investigate:
-
-* Read more [about the product](https://www.docker.com/universal-control-plane).
-* Visit the UCP forum to [ask questions and get answers](https://forums.docker.com/c/commercial-products/ucpbeta).
-* Try the [UCP hands-on lab](https://github.com/docker/ucp_lab).
-* [How to use the Docker Client](http://docs.docker.com/reference/commandline/cli/)
-* [An overview of Docker Swarm](http://docs.docker.com/swarm/)
-<![end-metadata]-->
+* [Test-drive Docker UCP by installing it on a sandbox](evaluation-install.md)
+* [Install Docker UCP on production](production-install.md)