From 4a06deda27cd52d6c912ca369fc79372dbcb6640 Mon Sep 17 00:00:00 2001
From: "Daniel T. Thorpe" <daniel.thorpe@citrix.com>
Date: Wed, 26 Aug 2020 00:15:05 +0100
Subject: [PATCH 001/295] docs(syslog.rst): corrected en to an

---
 docs/system/syslog.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/system/syslog.rst b/docs/system/syslog.rst
index 3a8b344a..3449c15b 100644
--- a/docs/system/syslog.rst
+++ b/docs/system/syslog.rst
@@ -22,7 +22,7 @@ Console
 
 .. cfgcmd:: set system syslog console facility <keyword> level <keyword>
 
-Log syslog messages to ``/dev/console``, for en explanation on
+Log syslog messages to ``/dev/console``, for an explanation on
 :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords
 see tables below.
 

From 43b73bbdf00ae284c6a5375ec7e35a82c941f9c3 Mon Sep 17 00:00:00 2001
From: dus2002 <52572272+dus2002@users.noreply.github.com>
Date: Tue, 25 Aug 2020 23:25:03 +0000
Subject: [PATCH 002/295] fix bad typing

---
 docs/contributing/build-vyos.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/contributing/build-vyos.rst b/docs/contributing/build-vyos.rst
index 43c1e608..9af21f51 100644
--- a/docs/contributing/build-vyos.rst
+++ b/docs/contributing/build-vyos.rst
@@ -154,7 +154,7 @@ in the repository_. The ``./configure`` script will also warn you if any
 dependencies are missing.
 
 Once you have the required dependencies installed, you may proceed with the
-steps descirbed in :ref:`build_iso`.
+steps described in :ref:`build_iso`.
 
 
 .. _build_iso:

From 7f209a2a456ea27a3d7b13b05e78401c48670131 Mon Sep 17 00:00:00 2001
From: kroy <kroy@kroy.io>
Date: Thu, 27 Aug 2020 23:42:57 -0500
Subject: [PATCH 003/295] bgp: fix missing ` termination

---
 docs/routing/bgp.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/routing/bgp.rst b/docs/routing/bgp.rst
index 2c5e7089..c576d836 100644
--- a/docs/routing/bgp.rst
+++ b/docs/routing/bgp.rst
@@ -4,7 +4,7 @@
 BGP
 ###
 
-:abbr:`BGP (Border Gateway Protocol) is one of the Exterior Gateway Protocols
+:abbr:`BGP (Border Gateway Protocol)` is one of the Exterior Gateway Protocols
 and the de facto standard interdomain routing protocol. The latest BGP version
 is 4. BGP-4 is described in :rfc:`1771` and updated by :rfc:`4271`. :rfc:`2858`
 adds multiprotocol support to BGP.

From 3611f346f0501d174af49935b017a9f1d6694c62 Mon Sep 17 00:00:00 2001
From: Ilaria Luciani <luciani.ilaria.99@gmail.com>
Date: Thu, 3 Sep 2020 20:10:16 +0200
Subject: [PATCH 004/295] fix: change wording in description

---
 docs/about.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/about.rst b/docs/about.rst
index 0411344b..d892ae4a 100644
--- a/docs/about.rst
+++ b/docs/about.rst
@@ -8,7 +8,7 @@ VyOS is an open source network operating system based on Debian GNU/Linux.
 
 VyOS provides a free routing platform that competes directly with other
 commercially available solutions from well known network providers. Because
-VyOS is run on standard amd64, i586 and ARM systems, it is able to be used
+VyOS is run on standard amd64, i586 and ARM systems, it can to be used
 as a router and firewall platform for cloud deployments.
 
 We use multiple live versions of our manual hosted thankfully by

From 20f2920d9f95749b247b6e3df92e6768d4a13995 Mon Sep 17 00:00:00 2001
From: Ilaria Luciani <luciani.ilaria.99@gmail.com>
Date: Thu, 3 Sep 2020 20:10:39 +0200
Subject: [PATCH 005/295] fix: remove typo

---
 docs/about.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/about.rst b/docs/about.rst
index d892ae4a..b9b44351 100644
--- a/docs/about.rst
+++ b/docs/about.rst
@@ -16,7 +16,7 @@ https://readthedocs.org. We will provide one version of the manual for every
 VyOS major version starting with VyOS 1.2 which will receive Long-term support
 (LTS).
 
-The manual version is selected/specified by it's Git branch name. You can
+The manual version is selected/specified by its Git branch name. You can
 switch between versions of the documentation by selecting the appropriate
 branch on the bottom left corner.
 

From efa25bc32dad395b8fdc8f62b0ed032fa653fa0d Mon Sep 17 00:00:00 2001
From: root <ronie@vyos.io>
Date: Thu, 27 Aug 2020 13:37:11 -0500
Subject: [PATCH 006/295] T2810: Docs for vpn anyconnect-server

This documentation describes how to configure AnyConnect-Server on VyOS
---
 docs/vpn/anyconnect.rst | 73 +++++++++++++++++++++++++++++++++++++++++
 docs/vpn/index.rst      |  1 +
 2 files changed, 74 insertions(+)
 create mode 100644 docs/vpn/anyconnect.rst

diff --git a/docs/vpn/anyconnect.rst b/docs/vpn/anyconnect.rst
new file mode 100644
index 00000000..0016cf46
--- /dev/null
+++ b/docs/vpn/anyconnect.rst
@@ -0,0 +1,73 @@
+.. _vpn-anyconnect:
+
+AnyConnect
+-----
+
+Cisco AnyConnect-compatible server(based on great OpenConnect software) feature is available from this release.
+Anyconnect VPN supports SSL connection and offers full network access. SSL VPN network extension connects the end-user system to the corporate network with access controls based only on network layer information, such as destination IP address and port number. So, it provides safe communication for all types of device traffic across public networks and private networks, also encrypts the traffic with SSL protocol.
+The remote user will use the anyconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network.
+
+.. note:: All certificates should be stored on VyOS under /config/auth. If certificates are not stored in the /config directory they will not be migrated during a software update.
+
+
+Configuration
+^^^^^^^^^^
+
+SSL Certificates
+----
+
+We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels.
+The following command will create a self signed certificates and will be stored in the file path /config/auth
+
+.. code-block:: none
+
+  openssl req -newkey rsa:4096 -new -nodes -x509 -days 3650 -keyout /config/auth/server.key -out /config/auth/server.crt
+  openssl req -new -x509 -key /config/auth/server.key -out /config/auth/ca.crt
+
+We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let’s Encrypt—an open certificate authority launched by the EFF, Mozilla, and others—and deploys it to a web server.
+
+.. code-block:: none
+
+  sudo certbot certonly --standalone --preferred-challenges http -d <domain name>
+
+Server Configuration
+-------------------------
+
+.. code-block:: none
+
+  set vpn anyconnect authentication local-users username <user> password <pass>
+  set vpn anyconnect authentication mode <local|radius>
+  set vpn anyconnect network-settings client-ip-settings subnet <subnet>
+  set vpn anyconnect network-settings name-server <address>
+  set vpn anyconnect network-settings name-server <address>
+  set vpn anyconnect ssl ca-cert-file <file>
+  set vpn anyconnect ssl cert-file <file>
+  set vpn anyconnect ssl key-file <file>
+
+Example
+----
+
+Use local user name "user4" with password "SecretPassword"
+Client IP addresses will be provided from pool 100.64.0.0/24
+The Gateway IP Address must be in one of the router´s interfaces.
+
+.. code-block:: none
+
+  set vpn anyconnect authentication local-users username user4 password 'SecretPassword'
+  set vpn anyconnect authentication mode 'local'
+  set vpn anyconnect network-settings client-ip-settings subnet '100.64.0.0/24'   
+  set vpn anyconnect network-settings name-server '1.1.1.1'
+  set vpn anyconnect network-settings name-server '8.8.8.8'
+  set vpn anyconnect ssl ca-cert-file '/config/auth/fullchain.pem'
+  set vpn anyconnect ssl cert-file '/config/auth/cert.pem'
+  set vpn anyconnect ssl key-file '/config/auth/privkey.pem'
+
+Verification
+----
+
+.. code-block:: none
+
+  vyos@RTR1:~$ show anyconnect-server sessions 
+  interface    username    ip            remote IP      RX        TX        state      uptime
+  -----------  ----------  ------------  -------------  --------  --------  ---------  --------
+  sslvpn0      user4       100.64.0.105  xx.xxx.49.253  127.3 KB  160.0 KB  connected  12m:28s
diff --git a/docs/vpn/index.rst b/docs/vpn/index.rst
index 42a90a3f..aea1ada2 100644
--- a/docs/vpn/index.rst
+++ b/docs/vpn/index.rst
@@ -15,3 +15,4 @@ VPN
    site2site_ipsec
    sstp
    wireguard
+   anyconnect

From 9971478a6ba830f03493c135019080ae17e0e114 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Mon, 7 Sep 2020 17:12:03 +0200
Subject: [PATCH 007/295] installation: add dd parameter for usb creation

Add sync to dd command as suggested by John, fix a little typo
and restore PXE index hierarchy levels (which got lost with last changes).
---
 docs/install.rst | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/docs/install.rst b/docs/install.rst
index 26d7c7c8..3e31449f 100644
--- a/docs/install.rst
+++ b/docs/install.rst
@@ -217,12 +217,12 @@ stick with with the ``dd`` command:
 
  .. code-block:: none
  
-   # dd if=/path/to/vyos.iso of=/dev/sdX bs=8M
+   # dd if=/path/to/vyos.iso of=/dev/sdX bs=8M; sync
 
  5. Wait until you get the outcome (bytes copied). Be patient, in some
     computers it might take more than one minute.
 
- 6. Once ``dd`` has finished, plug the USB drive out and plug it into
+ 6. Once ``dd`` has finished, pull the USB drive out and plug it into
     the powered-off computer where you want to install (or test) VyOS.
 
  7. Power the computer on, making sure it boots from the USB drive (you
@@ -239,7 +239,7 @@ macOS and Windows), Rufus_ (for Windows) and `many others`_. You can
 follow their instructions to create a bootable USB drive from an .iso
 file.
 
-.. hint:: The default username and password for the live system is ``vyos``.
+.. hint:: The default username and password for the live system is *vyos*.
 
 
 .. _permanent_installation:
@@ -357,7 +357,7 @@ Configuration
 -------------
 
 Step 1: DHCP
-""""""""""""
+^^^^^^^^^^^^
 
 Configure a DHCP server to provide the client with:
 
@@ -385,7 +385,7 @@ In this example we configured an existent VyOS as the DHCP server:
 .. _install_from_tftp:
 
 Step 2: TFTP
-""""""""""""
+^^^^^^^^^^^^
 
 Configure a TFTP server so that it serves the following:
 
@@ -444,7 +444,7 @@ Example of simple (no menu) configuration file:
    APPEND initrd=initrd.img-4.19.54-amd64-vyos boot=live nopersistence noautologin nonetworking fetch=http://address:8000/filesystem.squashfs
 
 Step 3: HTTP
-""""""""""""
+^^^^^^^^^^^^
 
 As you can read in the configuration file, we are sending ``filesystem.squashfs``
 through HTTP. As that is a heavy file, we choose HTTP to speed up the transfer
@@ -455,7 +455,7 @@ First run a web server - you can use a simple one like
 file. The file can be found inside the ``/live`` directory of the extracted
 contents of the ISO file.
 
-Second, edit the configuration file at the :ref:`install_from_tftp` so that it shows
+Second, edit the configuration file of the :ref:`install_from_tftp` so that it shows
 the correct URL at ``fetch=http://<address_of_your_HTTP_server>/filesystem.squashfs``.
 
 And third, restart the TFTP service. If you are using VyOS as your TFTP Server, you can restart

From 7e5f1b345aa2e99b7bcbcc89a1b7e4498237bbe8 Mon Sep 17 00:00:00 2001
From: Leonardo Rizzi <l.rizzi@wide-net.org>
Date: Tue, 8 Sep 2020 05:51:48 +0200
Subject: [PATCH 008/295] Docker run command

The docker run command was missing of the correct container label.
---
 docs/contributing/build-vyos.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/contributing/build-vyos.rst b/docs/contributing/build-vyos.rst
index 9af21f51..e8bb9f37 100644
--- a/docs/contributing/build-vyos.rst
+++ b/docs/contributing/build-vyos.rst
@@ -93,7 +93,7 @@ The container can also be built directly from source:
 
   $ cd vyos-build
   $ docker build -t vyos/vyos-build:crux docker # For VyOS 1.2
-  $ docker build -t vyos/vyos-build docker      # For rolling release
+  $ docker build -t vyos/vyos-build:current docker      # For rolling release
 
 .. note:: Since VyOS has switched to Debian (10) Buster in its ``current`` branch,
    you will require individual container for `current` and `crux` builds.
@@ -184,7 +184,7 @@ Now a fresh build of the VyOS ISO can begin. Change directory to the ``vyos-buil
   $ docker run --rm -it --privileged -v $(pwd):/vyos -w /vyos vyos/vyos-build:crux bash
 
   # For VyOS 1.3 (equuleus, current)
-  $ docker run --rm -it --privileged -v $(pwd):/vyos -w /vyos vyos/vyos-build bash
+  $ docker run --rm -it --privileged -v $(pwd):/vyos -w /vyos vyos/vyos-build:current bash
 
 Start the build:
 
@@ -348,7 +348,7 @@ Launch Docker container and build package
 .. code-block:: none
 
   # For VyOS 1.3 (equuleus, current)
-  $ docker run --rm -it --privileged -v $(pwd):/vyos -w /vyos vyos/vyos-build bash
+  $ docker run --rm -it --privileged -v $(pwd):/vyos -w /vyos vyos/vyos-build:current bash
 
   # Change to source directory
   $ cd vyos-1x

From 2e7d4d2ebb24ff6f1dc9e63a03ea4aaad73df96e Mon Sep 17 00:00:00 2001
From: its-ila <45404584+its-ila@users.noreply.github.com>
Date: Tue, 8 Sep 2020 22:48:32 +0200
Subject: [PATCH 009/295] fix: remove leftover from edit

---
 docs/about.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/about.rst b/docs/about.rst
index b9b44351..383c95eb 100644
--- a/docs/about.rst
+++ b/docs/about.rst
@@ -8,7 +8,7 @@ VyOS is an open source network operating system based on Debian GNU/Linux.
 
 VyOS provides a free routing platform that competes directly with other
 commercially available solutions from well known network providers. Because
-VyOS is run on standard amd64, i586 and ARM systems, it can to be used
+VyOS is run on standard amd64, i586 and ARM systems, it can be used
 as a router and firewall platform for cloud deployments.
 
 We use multiple live versions of our manual hosted thankfully by

From ec9e4722a78746be3a9efda23a7828f19a4e54d8 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Thu, 10 Sep 2020 02:33:21 +0200
Subject: [PATCH 010/295] appendix: reindex to nest virtual environments

---
 docs/appendix/virtual/index.rst               | 12 +++++++++++
 .../libvirt.rst}                              | 20 ++++---------------
 docs/appendix/{ => virtual}/vyos-on-gns3.rst  |  5 +++--
 .../appendix/{ => virtual}/vyos-on-vmware.rst |  0
 docs/index.rst                                |  4 +---
 docs/information.rst                          |  2 +-
 6 files changed, 21 insertions(+), 22 deletions(-)
 create mode 100644 docs/appendix/virtual/index.rst
 rename docs/appendix/{vyos-on-virtual-environments.rst => virtual/libvirt.rst} (93%)
 rename docs/appendix/{ => virtual}/vyos-on-gns3.rst (98%)
 rename docs/appendix/{ => virtual}/vyos-on-vmware.rst (100%)

diff --git a/docs/appendix/virtual/index.rst b/docs/appendix/virtual/index.rst
new file mode 100644
index 00000000..7ede37b5
--- /dev/null
+++ b/docs/appendix/virtual/index.rst
@@ -0,0 +1,12 @@
+.. _virtual:
+
+Running on Virtual Environments
+===============================
+
+
+.. toctree::
+   :maxdepth: 2
+
+   libvirt
+   vyos-on-vmware
+   vyos-on-gns3
diff --git a/docs/appendix/vyos-on-virtual-environments.rst b/docs/appendix/virtual/libvirt.rst
similarity index 93%
rename from docs/appendix/vyos-on-virtual-environments.rst
rename to docs/appendix/virtual/libvirt.rst
index eed82390..0d624b94 100644
--- a/docs/appendix/vyos-on-virtual-environments.rst
+++ b/docs/appendix/virtual/libvirt.rst
@@ -1,12 +1,8 @@
-.. _vyos-on-virtual-environments:
+.. _libvirt:
 
-###############################
-Running in Virtual Environments
-###############################
-
-****************
-Libvirt Qemu/KVM
-****************
+***************************
+Running on Libvirt Qemu/KVM
+***************************
 
 Libvirt is an open-source API, daemon and management tool for managing platform virtualization.
 There are several ways to deploy VyOS on libvirt kvm. Use Virt-manager and native CLI.
@@ -161,12 +157,4 @@ Download predefined VyOS.qcow2 image for ``KVM``
 .. figure:: /_static/images/virt-libvirt-qc-03.png
 
 
-*******
-Proxmox
-*******
-
-References
-==========
-
-https://www.proxmox.com/en/proxmox-ve
 
diff --git a/docs/appendix/vyos-on-gns3.rst b/docs/appendix/virtual/vyos-on-gns3.rst
similarity index 98%
rename from docs/appendix/vyos-on-gns3.rst
rename to docs/appendix/virtual/vyos-on-gns3.rst
index f17715b2..93ea9ae2 100644
--- a/docs/appendix/vyos-on-gns3.rst
+++ b/docs/appendix/virtual/vyos-on-gns3.rst
@@ -1,7 +1,8 @@
 .. _vyos-on-gns3:
 
-VyOS on GNS3
-############
+###############
+Running on GNS3
+###############
 
 Sometimes you may want to test VyOS in a lab environment.
 `GNS3 <http://www.gns3.com>`__ is a network emulation software you
diff --git a/docs/appendix/vyos-on-vmware.rst b/docs/appendix/virtual/vyos-on-vmware.rst
similarity index 100%
rename from docs/appendix/vyos-on-vmware.rst
rename to docs/appendix/virtual/vyos-on-vmware.rst
diff --git a/docs/index.rst b/docs/index.rst
index bab4f930..ab9d3f66 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -65,14 +65,12 @@ VyOS User Guide
 
    appendix/release-notes
    appendix/examples/index
-   appendix/vyos-on-vmware
    appendix/vyos-on-baremetal
+   appendix/virtual/index
    appendix/vyos-on-clouds
-   appendix/vyos-on-virtual-environments
    appendix/migrate-from-vyatta
    appendix/command-scripting
    appendix/http-api
-   appendix/vyos-on-gns3
 
 
 .. toctree::
diff --git a/docs/information.rst b/docs/information.rst
index 5565163e..02d6f1ec 100644
--- a/docs/information.rst
+++ b/docs/information.rst
@@ -5,7 +5,7 @@ Information
 ***********
 
 VyOS features a rich set of operational level commands to retrieve arbitrary
-infomration about your running system.
+information about your running system.
 
 ########
 Hardware

From ca432e2ec6bf8c33c652aee9bc7bc0e2b4a4bd6a Mon Sep 17 00:00:00 2001
From: root <ronie@vyos.io>
Date: Thu, 27 Aug 2020 13:37:11 -0500
Subject: [PATCH 011/295] T2810: Docs for vpn anyconnect-server

This documentation describes how to configure OpenConnect-Server on VyOS
---
 docs/vpn/anyconnect.rst | 73 +++++++++++++++++++++++++++++++++++++++++
 docs/vpn/index.rst      |  1 +
 2 files changed, 74 insertions(+)
 create mode 100644 docs/vpn/anyconnect.rst

diff --git a/docs/vpn/anyconnect.rst b/docs/vpn/anyconnect.rst
new file mode 100644
index 00000000..64c3e49f
--- /dev/null
+++ b/docs/vpn/anyconnect.rst
@@ -0,0 +1,73 @@
+.. _vpn-openconnect:
+
+OpenConnect
+-----
+
+OpenConnect-compatible server feature is available from this release.
+Openconnect VPN supports SSL connection and offers full network access. SSL VPN network extension connects the end-user system to the corporate network with access controls based only on network layer information, such as destination IP address and port number. So, it provides safe communication for all types of device traffic across public networks and private networks, also encrypts the traffic with SSL protocol.
+The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network.
+
+.. note:: All certificates should be stored on VyOS under /config/auth. If certificates are not stored in the /config directory they will not be migrated during a software update.
+
+
+Configuration
+^^^^^^^^^^
+
+SSL Certificates
+----
+
+We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels.
+The following command will create a self signed certificates and will be stored in the file path /config/auth
+
+.. code-block:: none
+
+  openssl req -newkey rsa:4096 -new -nodes -x509 -days 3650 -keyout /config/auth/server.key -out /config/auth/server.crt
+  openssl req -new -x509 -key /config/auth/server.key -out /config/auth/ca.crt
+
+We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let’s Encrypt — an open certificate authority launched by the EFF, Mozilla, and others—and deploys it to a web server.
+
+.. code-block:: none
+
+  sudo certbot certonly --standalone --preferred-challenges http -d <domain name>
+
+Server Configuration
+-------------------------
+
+.. code-block:: none
+
+  set vpn openconnect authentication local-users username <user> password <pass>
+  set vpn openconnect authentication mode <local|radius>
+  set vpn opneconnect network-settings client-ip-settings subnet <subnet>
+  set vpn openconnect network-settings name-server <address>
+  set vpn openconnect network-settings name-server <address>
+  set vpn openconnect ssl ca-cert-file <file>
+  set vpn openconnect ssl cert-file <file>
+  set vpn openconnect ssl key-file <file>
+
+Example
+----
+
+Use local user name "user4" with password "SecretPassword"
+Client IP addresses will be provided from pool 100.64.0.0/24
+The Gateway IP Address must be in one of the router´s interfaces.
+
+.. code-block:: none
+
+  set vpn openconnect authentication local-users username user4 password 'SecretPassword'
+  set vpn openconnect authentication mode 'local'
+  set vpn openconnect network-settings client-ip-settings subnet '100.64.0.0/24'   
+  set vpn openconnect network-settings name-server '1.1.1.1'
+  set vpn openconnect network-settings name-server '8.8.8.8'
+  set vpn openconnect ssl ca-cert-file '/config/auth/fullchain.pem'
+  set vpn openconnect ssl cert-file '/config/auth/cert.pem'
+  set vpn openconnect ssl key-file '/config/auth/privkey.pem'
+
+Verification
+----
+
+.. code-block:: none
+
+  vyos@RTR1:~$ show openconnect-server sessions 
+  interface    username    ip            remote IP      RX        TX        state      uptime
+  -----------  ----------  ------------  -------------  --------  --------  ---------  --------
+  sslvpn0      user4       100.64.0.105  xx.xxx.49.253  127.3 KB  160.0 KB  connected  12m:28s
diff --git a/docs/vpn/index.rst b/docs/vpn/index.rst
index 42a90a3f..aea1ada2 100644
--- a/docs/vpn/index.rst
+++ b/docs/vpn/index.rst
@@ -15,3 +15,4 @@ VPN
    site2site_ipsec
    sstp
    wireguard
+   anyconnect

From 82bcd24b34b6f0d5365d096d092cad84da480314 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 13 Sep 2020 15:57:32 +0200
Subject: [PATCH 012/295] install: fix WARNING: Title level inconsistent

---
 docs/install.rst | 34 +++++++++++++++++-----------------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/docs/install.rst b/docs/install.rst
index 3e31449f..a210c1ad 100644
--- a/docs/install.rst
+++ b/docs/install.rst
@@ -190,7 +190,7 @@ it in your hard drive. **With your downloaded VyOS .iso file you can
 create a bootable USB drive that will let you boot into a fully
 functional VyOS system**. Once you have tested it, you can either decide
 to begin a :ref:`permanent_installation` in your hard drive or power
-your system off, remove the USB drive, and leave everythng as it was. 
+your system off, remove the USB drive, and leave everythng as it was.
 
 
 If you have a GNU+Linux system, you can create your VyOS bootable USB
@@ -206,8 +206,8 @@ stick with with the ``dd`` command:
     all partitions.
 
  .. code-block:: none
- 
-  $ umount /dev/sdX* 
+
+  $ umount /dev/sdX*
 
  4. Write the image (your VyOS .iso file) to the USB drive.
     Note that here you want to use the device name (e.g. /dev/sdb), not
@@ -216,7 +216,7 @@ stick with with the ``dd`` command:
   **Warning**: This will destroy all data on the USB drive!
 
  .. code-block:: none
- 
+
    # dd if=/path/to/vyos.iso of=/dev/sdX bs=8M; sync
 
  5. Wait until you get the outcome (bytes copied). Be patient, in some
@@ -286,19 +286,19 @@ In order to proceed with a permanent installation:
    Would you like me to try to partition a drive automatically
    or would you rather partition it manually with parted?  If
    you have already setup your partitions, you may skip this step
-   
+
    Partition (Auto/Parted/Skip) [Auto]:
-   
+
    I found the following drives on your system:
     sda    4294MB
-   
+
    Install the image on? [sda]:
-   
+
    This will destroy all data on /dev/sda.
    Continue? (Yes/No) [No]: Yes
-   
+
    How big of a root partition should I create? (2000MB - 4294MB) [4294]MB:
-   
+
    Creating filesystem on /dev/sda1: OK
    Done!
    Mounting /dev/sda1...
@@ -310,7 +310,7 @@ In order to proceed with a permanent installation:
    I found the following configuration files:
        /opt/vyatta/etc/config.boot.default
    Which one should I copy to sda? [/opt/vyatta/etc/config.boot.default]:
-   
+
    Copying /opt/vyatta/etc/config.boot.default to sda.
    Enter password for administrator account
    Enter password for user 'vyos':
@@ -318,9 +318,9 @@ In order to proceed with a permanent installation:
    I need to install the GRUB boot loader.
    I found the following drives on your system:
     sda    4294MB
-   
+
    Which drive should GRUB modify the boot partition on? [sda]:
-   
+
    Setting up grub: OK
    Done!
 
@@ -484,17 +484,17 @@ Known Issues
 This is a list of known issues that can arise during installation.
 
 Black screen on install
-^^^^^^^^^^^^^^^^^^^^^^^
+-----------------------
 
 GRUB attempts to redirect all output to a serial port for ease of installation on headless hosts.
-This appears to cause an hard lockup on some hardware that lacks a serial port, with the result being a 
+This appears to cause an hard lockup on some hardware that lacks a serial port, with the result being a
 black screen after selecting the `Live system` option from the installation image.
 
 The workaround is to type `e` when the boot menu appears and edit the GRUB boot options.  Specifically, remove the:
 
-`console=ttyS0,115200` 
+`console=ttyS0,115200`
 
-option, and type CTRL-X to boot. 
+option, and type CTRL-X to boot.
 
 Installation can then continue as outlined above.
 

From 7334b4b9baec121569ad0e3015994fa1e10f167c Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 13 Sep 2020 15:58:10 +0200
Subject: [PATCH 013/295] vpn: openconnect: fix TOC

---
 docs/vpn/anyconnect.rst  | 78 ----------------------------------------
 docs/vpn/index.rst       |  2 +-
 docs/vpn/openconnect.rst | 45 +++++++++++++++--------
 3 files changed, 31 insertions(+), 94 deletions(-)
 delete mode 100644 docs/vpn/anyconnect.rst

diff --git a/docs/vpn/anyconnect.rst b/docs/vpn/anyconnect.rst
deleted file mode 100644
index e8945fbb..00000000
--- a/docs/vpn/anyconnect.rst
+++ /dev/null
@@ -1,78 +0,0 @@
-.. _vpn-openconnect:
-
-OpenConnect
------
-
-OpenConnect-compatible server feature is available from this release.
-Openconnect VPN supports SSL connection and offers full network access. SSL VPN network extension connects the end-user system to the corporate network with access controls based only on network layer information, such as destination IP address and port number. So, it provides safe communication for all types of device traffic across public networks and private networks, also encrypts the traffic with SSL protocol.
-The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network.
-
-
-.. note:: All certificates should be stored on VyOS under /config/auth. If certificates are not stored in the /config directory they will not be migrated during a software update.
-
-
-Configuration
-^^^^^^^^^^
-
-SSL Certificates
-----
-
-We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels.
-The following command will create a self signed certificates and will be stored in the file path /config/auth
-
-.. code-block:: none
-
-  openssl req -newkey rsa:4096 -new -nodes -x509 -days 3650 -keyout /config/auth/server.key -out /config/auth/server.crt
-  openssl req -new -x509 -key /config/auth/server.key -out /config/auth/ca.crt
-
-We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let’s Encrypt — an open certificate authority launched by the EFF, Mozilla, and others—and deploys it to a web server.
-
-.. code-block:: none
-
-  sudo certbot certonly --standalone --preferred-challenges http -d <domain name>
-
-Server Configuration
--------------------------
-
-.. code-block:: none
-
-  set vpn openconnect authentication local-users username <user> password <pass>
-  set vpn openconnect authentication mode <local|radius>
-  set vpn opneconnect network-settings client-ip-settings subnet <subnet>
-  set vpn openconnect network-settings name-server <address>
-  set vpn openconnect network-settings name-server <address>
-  set vpn openconnect ssl ca-cert-file <file>
-  set vpn openconnect ssl cert-file <file>
-  set vpn openconnect ssl key-file <file>
-
-
-Example
-----
-
-Use local user name "user4" with password "SecretPassword"
-Client IP addresses will be provided from pool 100.64.0.0/24
-The Gateway IP Address must be in one of the router´s interfaces.
-
-.. code-block:: none
-
-  set vpn openconnect authentication local-users username user4 password 'SecretPassword'
-  set vpn openconnect authentication mode 'local'
-  set vpn openconnect network-settings client-ip-settings subnet '100.64.0.0/24'   
-  set vpn openconnect network-settings name-server '1.1.1.1'
-  set vpn openconnect network-settings name-server '8.8.8.8'
-  set vpn openconnect ssl ca-cert-file '/config/auth/fullchain.pem'
-  set vpn openconnect ssl cert-file '/config/auth/cert.pem'
-  set vpn openconnect ssl key-file '/config/auth/privkey.pem'
-
-
-Verification
-----
-
-.. code-block:: none
-
-
-  vyos@RTR1:~$ show openconnect-server sessions 
-
-  interface    username    ip            remote IP      RX        TX        state      uptime
-  -----------  ----------  ------------  -------------  --------  --------  ---------  --------
-  sslvpn0      user4       100.64.0.105  xx.xxx.49.253  127.3 KB  160.0 KB  connected  12m:28s
diff --git a/docs/vpn/index.rst b/docs/vpn/index.rst
index 4441c003..9ba31ae6 100644
--- a/docs/vpn/index.rst
+++ b/docs/vpn/index.rst
@@ -15,4 +15,4 @@ VPN
    site2site_ipsec
    sstp
    wireguard
-   OpenConnect
+   openconnect
diff --git a/docs/vpn/openconnect.rst b/docs/vpn/openconnect.rst
index 9d6dd6da..a409ed9d 100644
--- a/docs/vpn/openconnect.rst
+++ b/docs/vpn/openconnect.rst
@@ -1,38 +1,51 @@
 .. _vpn-openconnect:
 
+###########
 OpenConnect
------
+###########
 
 OpenConnect-compatible server feature is available from this release.
-Openconnect VPN supports SSL connection and offers full network access. SSL VPN network extension connects the end-user system to the corporate network with access controls based only on network layer information, such as destination IP address and port number. So, it provides safe communication for all types of device traffic across public networks and private networks, also encrypts the traffic with SSL protocol.
-The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network.
+Openconnect VPN supports SSL connection and offers full network access. SSL VPN
+network extension connects the end-user system to the corporate network with
+access controls based only on network layer information, such as destination IP
+address and port number. So, it provides safe communication for all types of
+device traffic across public networks and private networks, also encrypts the
+traffic with SSL protocol.
 
+The remote user will use the openconnect client to connect to the router and
+will receive an IP address from a VPN pool, allowing full access to the network.
 
-.. note:: All certificates should be stored on VyOS under /config/auth. If certificates are not stored in the /config directory they will not be migrated during a software update.
-
+.. note:: All certificates should be stored on VyOS under /config/auth. If
+   certificates are not stored in the /config directory they will not be
+   migrated during a software update.
 
+*************
 Configuration
-^^^^^^^^^^
+*************
 
 SSL Certificates
-----
+================
 
-We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels.
-The following command will create a self signed certificates and will be stored in the file path /config/auth
+We need to generate the certificate which authenticates users who attempt to
+access the network resource through the SSL VPN tunnels. The following command
+will create a self signed certificates and will be stored in the file path
+`/config/auth`.
 
 .. code-block:: none
 
   openssl req -newkey rsa:4096 -new -nodes -x509 -days 3650 -keyout /config/auth/server.key -out /config/auth/server.crt
   openssl req -new -x509 -key /config/auth/server.key -out /config/auth/ca.crt
 
-We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let’s Encrypt — an open certificate authority launched by the EFF, Mozilla, and others—and deploys it to a web server.
+We can also create the certificates using Cerbort which is an easy-to-use client
+that fetches a certificate from Let's Encrypt an open certificate authority
+launched by the EFF, Mozilla, and others and deploys it to a web server.
 
 .. code-block:: none
 
   sudo certbot certonly --standalone --preferred-challenges http -d <domain name>
 
 Server Configuration
--------------------------
+====================
 
 .. code-block:: none
 
@@ -46,8 +59,9 @@ Server Configuration
   set vpn openconnect ssl key-file <file>
 
 
+*******
 Example
-----
+*******
 
 Use local user name "user4" with password "SecretPassword"
 Client IP addresses will be provided from pool 100.64.0.0/24
@@ -57,7 +71,7 @@ The Gateway IP Address must be in one of the router´s interfaces.
 
   set vpn openconnect authentication local-users username user4 password 'SecretPassword'
   set vpn openconnect authentication mode 'local'
-  set vpn openconnect network-settings client-ip-settings subnet '100.64.0.0/24'   
+  set vpn openconnect network-settings client-ip-settings subnet '100.64.0.0/24'
   set vpn openconnect network-settings name-server '1.1.1.1'
   set vpn openconnect network-settings name-server '8.8.8.8'
   set vpn openconnect ssl ca-cert-file '/config/auth/fullchain.pem'
@@ -65,13 +79,14 @@ The Gateway IP Address must be in one of the router´s interfaces.
   set vpn openconnect ssl key-file '/config/auth/privkey.pem'
 
 
+************
 Verification
-----
+************
 
 .. code-block:: none
 
 
-  vyos@RTR1:~$ show openconnect-server sessions 
+  vyos@RTR1:~$ show openconnect-server sessions
 
   interface    username    ip            remote IP      RX        TX        state      uptime
   -----------  ----------  ------------  -------------  --------  --------  ---------  --------

From 9982cb495567e107c00c44a3dcc134592997bb1e Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 13 Sep 2020 16:03:16 +0200
Subject: [PATCH 014/295] ssh: fix invalid keyword 'cmfcmd'

---
 docs/services/ssh.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/services/ssh.rst b/docs/services/ssh.rst
index c5959e5c..6da8560f 100644
--- a/docs/services/ssh.rst
+++ b/docs/services/ssh.rst
@@ -99,7 +99,7 @@ Supported algorithms: ``diffie-hellman-group1-sha1``,
 
 Set the ``sshd`` log level. The default is ``info``.
 
-.. cmfcmd:: set service ssh vrf <name>
+.. cfgcmd:: set service ssh vrf <name>
 
 Specify name of the :abbr:`VRF (Virtual Routing and Forwarding)` instance.
 

From 5e86c158b7b7c0d628423405b26aacb6238fba5b Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 13 Sep 2020 16:03:40 +0200
Subject: [PATCH 015/295] bonding: add new command for minimum-links

---
 docs/interfaces/bond.rst | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/docs/interfaces/bond.rst b/docs/interfaces/bond.rst
index 74089f96..d697e5d4 100644
--- a/docs/interfaces/bond.rst
+++ b/docs/interfaces/bond.rst
@@ -159,6 +159,25 @@ Link Administration
 
      This mode provides load balancing and fault tolerance.
 
+.. cfgcmd:: set interfaces bonding <interface> min-links <0-16>
+
+   Specifies the minimum number of links that must be active before asserting
+   carrier. It is similar to the Cisco EtherChannel min-links feature. This
+   allows setting the minimum number of member ports that must be up (link-up
+   state) before marking the bond device as up (carrier on). This is useful for
+   situations where higher level services such as clustering want to ensure a
+   minimum number of low bandwidth links are active before switchover.
+
+   This option only affects 802.3ad mode.
+
+   The default value is 0. This will cause carrier to be asserted (for 802.3ad
+   mode) whenever there is an active aggregator, regardless of the number of
+   available links in that aggregator.
+
+   .. note:: Because an aggregator cannot be active without at least one
+      available link, setting this option to 0 or to 1 has the exact same
+      effect.
+
 .. cfgcmd:: set interfaces bonding <interface> hash-policy <policy>
 
    * **layer2** - Uses XOR of hardware MAC addresses and packet type ID field

From 1ecb077b5fa68e7c96f05bd7e0c9eb26bdb3e256 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 13 Sep 2020 16:03:59 +0200
Subject: [PATCH 016/295] Makefile: livebuild: adjust to latest sphinx source
 (watch over poll)

---
 docs/Makefile | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/Makefile b/docs/Makefile
index 5d4864e1..7bc0c5ab 100644
--- a/docs/Makefile
+++ b/docs/Makefile
@@ -8,9 +8,9 @@ SPHINXPROJ    = VyOS
 SOURCEDIR     = .
 BUILDDIR      = _build
 
-AUTOHOST      =0.0.0.0
-AUTOPORT      =8000
-AUTOOPTS      =--poll
+AUTOHOST      = 0.0.0.0
+AUTOPORT      = 8000
+AUTOOPTS      = --watch .
 
 # Put it first so that "make" without argument is like "make help".
 help:

From 2862a9318f8ca8a6c0bd9a8fb6bfda84e8018912 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 13 Sep 2020 16:08:12 +0200
Subject: [PATCH 017/295] bonding: extend operational mode commands

---
 docs/interfaces/bond.rst | 87 ++++++++++++++++++++++++++++++++++++----
 1 file changed, 79 insertions(+), 8 deletions(-)

diff --git a/docs/interfaces/bond.rst b/docs/interfaces/bond.rst
index d697e5d4..396242ae 100644
--- a/docs/interfaces/bond.rst
+++ b/docs/interfaces/bond.rst
@@ -398,12 +398,83 @@ with two interfaces from VyOS to a Aruba/HP 2510G switch.
 Operation
 #########
 
-.. code-block:: none
+.. opcmd:: show interfaces bonding
+
+   Show brief interface information.
+
+   .. code-block:: none
+
+     vyos@vyos:~$ show interfaces bonding
+     Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
+     Interface        IP Address                        S/L  Description
+     ---------        ----------                        ---  -----------
+     bond0            -                                 u/u  my-sw1 int 23 and 24
+     bond0.10         192.168.0.1/24                    u/u  office-net
+     bond0.100        10.10.10.1/24                     u/u  management-net
+
+
+.. opcmd:: show interfaces bonding <interface>
+
+   Show detailed information on given `<interface>`
+
+   .. code-block:: none
+
+     vyos@vyos:~$ show interfaces bonding bond5
+     bond5: <NO-CARRIER,BROADCAST,MULTICAST,MASTER,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
+         link/ether 00:50:56:bf:ef:aa brd ff:ff:ff:ff:ff:ff
+         inet6 fe80::e862:26ff:fe72:2dac/64 scope link tentative
+            valid_lft forever preferred_lft forever
+
+         RX:  bytes  packets  errors  dropped  overrun       mcast
+                  0        0       0        0        0           0
+         TX:  bytes  packets  errors  dropped  carrier  collisions
+                  0        0       0        0        0           0
+
+.. opcmd:: show interfaces bonding <interface> detail
+
+   Show detailed information about the underlaying physical links on given
+   bond `<interface>`.
+
+   .. code-block:: none
+
+     vyos@vyos:~$ show interfaces bonding bond5 detail
+     Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011)
+
+     Bonding Mode: IEEE 802.3ad Dynamic link aggregation
+     Transmit Hash Policy: layer2 (0)
+     MII Status: down
+     MII Polling Interval (ms): 100
+     Up Delay (ms): 0
+     Down Delay (ms): 0
+
+     802.3ad info
+     LACP rate: slow
+     Min links: 0
+     Aggregator selection policy (ad_select): stable
+
+     Slave Interface: eth1
+     MII Status: down
+     Speed: Unknown
+     Duplex: Unknown
+     Link Failure Count: 0
+     Permanent HW addr: 00:50:56:bf:ef:aa
+     Slave queue ID: 0
+     Aggregator ID: 1
+     Actor Churn State: churned
+     Partner Churn State: churned
+     Actor Churned Count: 1
+     Partner Churned Count: 1
+
+     Slave Interface: eth2
+     MII Status: down
+     Speed: Unknown
+     Duplex: Unknown
+     Link Failure Count: 0
+     Permanent HW addr: 00:50:56:bf:19:26
+     Slave queue ID: 0
+     Aggregator ID: 2
+     Actor Churn State: churned
+     Partner Churn State: churned
+     Actor Churned Count: 1
+     Partner Churned Count: 1
 
-  vyos@vyos:~$ show interfaces bonding
-  Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
-  Interface        IP Address                        S/L  Description
-  ---------        ----------                        ---  -----------
-  bond0            -                                 u/u  my-sw1 int 23 and 24
-  bond0.10         192.168.0.1/24                    u/u  office-net
-  bond0.100        10.10.10.1/24                     u/u  management-net

From 910fa1ab3ac6a26959f0a2fb4915bf3c0791f720 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 14 Sep 2020 19:58:20 +0200
Subject: [PATCH 018/295] openvpn: fix WARNING: Title level inconsistent

---
 docs/vpn/openvpn.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/vpn/openvpn.rst b/docs/vpn/openvpn.rst
index 159366dc..fd6a3a71 100644
--- a/docs/vpn/openvpn.rst
+++ b/docs/vpn/openvpn.rst
@@ -255,7 +255,7 @@ internally, so we need to create a route to the 10.23.0.0/20 network ourselves:
   set protocols static interface-route 10.23.0.0/20 next-hop-interface vtun10
 
 Generate X.509 Certificate and Keys
-***********************************
+-----------------------------------
 
 OpenVPN ships with a set of scripts called Easy-RSA that can generate the
 appropriate files needed for an OpenVPN setup using X.509 certificates.
@@ -338,10 +338,10 @@ For example, Branch 1's router might have the following files:
   ca.crt branch1.crt branch1.key
 
 Client Authentication
----------------------
+=====================
 
 LDAP
-****
+----
 
 Enterprise installations usually ship a kind of directory service which is used
 to have a single password store for all employees. VyOS and OpenVPN support using
@@ -380,7 +380,7 @@ The required config file may look like:
   </Authorization>
 
 Active Directory
-****************
+^^^^^^^^^^^^^^^^
 
 Despite the fact that AD is a superset of LDAP
 

From a010ef519007dc3a4d7c08144a665134617bade2 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 14 Sep 2020 21:03:33 +0200
Subject: [PATCH 019/295] bonding: add example with Arista EOS

---
 docs/_static/images/vyos_arista_bond_lacp.png | Bin 0 -> 40622 bytes
 docs/interfaces/bond.rst                      | 115 ++++++++++++++++++
 2 files changed, 115 insertions(+)
 create mode 100644 docs/_static/images/vyos_arista_bond_lacp.png

diff --git a/docs/_static/images/vyos_arista_bond_lacp.png b/docs/_static/images/vyos_arista_bond_lacp.png
new file mode 100644
index 0000000000000000000000000000000000000000..6c9ef8ec370f99e1edb67766a8fd4b4d11594146
GIT binary patch
literal 40622
zcmd43byQp3^DhidNs(Zsc(Kyr?i6<@?ry=I7I%s}v^W$m?#0~$#oeVqaSa;$rqA<y
z<-PZ>cipw_`em)0u+N!f&z>_gd*(B92v<^&LPsS+ML<A6mys4%K|pv$j(~vZf((S8
znRuhz2me5HQjroxs2F{{2Om7Q5Rn%_K&XyIyEjIHk5L?@wVe<UFna#H5&IpAOc4+=
z#bm@q)Z7h@+E7wnZ8cr3h4WJX43|-8KluInhc}d6*-38L5N8=dg1pf`J1je-7kA+`
zfp901I1+UysHYtRM2Q@D2pXVc>3M%RR8`r7@hp$L^!e|{4n@Y58FfV$O~vcs3umE@
z15cyo{qmM8&lAu6@&<3CM)$|BP)*AZ3dsb1!IBs5;;~ZyeV`Ln1cizI_Zjh6>eP!~
zf13Y|@T<)K9pPY~KXL#$azGq^7$Wv_5v=Dq%h-T7e@=-uZT|F+TcEKU2krX7FNk1$
zMQfq13faRH4K@}2Ln;zRo5@BFc@p{8S8M<E$A5l<5-9%Xt3jU%mqF6@s$|}RvK%9Q
zGInzA3JSKb`R&?lUlDJDM^iJj*jRCB<qxtK?UFn+ns8i5?P3&or>ggMar3I&Mvrv^
zmZM&ARQOPrXwBvi>bofI%qR?GR-;f?5(Wpy@x;7fOf$J9%oAqdO^bwxoXd#iu+p*8
zitCKuHix<%3N8}R67GMaiL@g-(c_EExM>=&og#1{ZRM=8+tr!iKw9~<4Yo)*+Tcm@
zqPm(;f1HoqfeZ*(M}g<3pT-`4j1&-Xs-+qNrr9*A_Ya^uQSuO&$}g4J3Erhfd2Z9O
zrSKZ#{q*k4uAxmLofYZk)Rgv{GS)io!4dy&857I(zj82x5U5GE^KYUCG$wK86u>f)
zCd<~Tv0iFj8GghO@&<UD-3q21)=fOY5p*u&N9Sx>4MDjC3zsQ&g}G4i$|SC5gG>HJ
zn^i1@IPXVj0$rd%Zh)7sXX4mehV9XEe=|hvnB{6e(J<|DDQsKhR$l`9IPE1iqeSbT
z^Mi#4)1*ORbrr>dhdz*BZ0$h3pC@?Es{65Y`6-HTFX!!|zch8XwL@)%ZI#Pc^u|yE
zKCzSYu#=3~q3suU&nHLUicBSTWgH{9#LZTKQ$zcURLD}(#mvMazTAPoH>*Dz)pg8`
z34MR)s;Z2aT7AYwt~niS;^;KZdK@&^E9a403k=F7n$(cWBw=8$$mlB|v_j0oiXVJH
zMfI9lr;ox?&Nrsw(r0<g5Qa!=^M-|7GbuY>dsOEpd5`lKYLaucwQe42^OlsOU}6br
zX~6AZijxy<Ibu#xL5vBrtbs33d<7uqH&dTYO4{>kXBsoDV6a7&zdXh5gUL$<<$S_V
zm_#aEheOA_CEtzg*$Qd}s%R<W-nfKpRpfs)7FwV$L{$D5+sxA+{(?4gu+1G@6E+e`
z=y!bFN)!1vKk4jHiyFQ3rq5;S+C*5}5Pq6w_wtk6;{L}dd-`uq;Sm40g5-2;MPLxB
z1aa@e0&RUT=$fE_U?Em#NNN{ZpsLu9GqRm<X59N!?~varbuKu5p4WjU%?TsE?Yy3u
zFTdc2vim7Rg;r*pKCkX@!LW*X@<U!q&D}QGGF>6%cuzScQPgx+wrl)8o|P+beLiT|
zi(yGd-8FS3@VY<CB*mOrabwQE@mn7LXl{xR2>Z^dwzjwRlP0bjXK5zhMc6x-j>ry&
zfFyg3_UEFI;Sos+04up!v>QO>UdG69n$WB%H#rBfnp@s7GiQ``$RSH{CCal1b>1_I
zw0d|cJpOTb3HO_TR@h;T9Pp$|&cy{CGR3(^WW^+6u4=&!VAt-v`7Hg$)uBsERZlXg
zbzFypwohO*`W5cCJJ6Sj@kR*m2%SQYqbrk2z+e#|T&8PZuj{LuU7DFIMefeJ*cX*C
zexvSGVT>UeA6=jCAcJS6n)LLCV;|}ybxNlK6brP-D7VD(*~zJ5q`pH<o|))2u@f#k
z#u{O6=cbMXsZ}!u62$$096)V-Ua25i9YlADrxId$d2v}AC`E9^$_Z>=4UF}s{!~3^
zT_mu=THp+~O5a)6dHowxFDwHQW$~wEkUPjkvEcxp>n`GP;iIN;-$dum%--X4+Br5#
zR>UXA9ITZxw~bd<mpr^ABW0U281`J&7Uboct3@q8ngUgo);{(V<s(A-%Zt{`X_68)
z&?y||<<pwh?6k4B#ed*<gZB>nTqUT|(jC~8N{=<Crkjhp4VVR|-8rV0R0Exq2VU=9
z#eYNV4|hnN%Mig`E-xx*E9S)S%NHDf!$H39J?sO~F^~xRknqEPK|k$92j?eU&T=H5
z<Na|$&dNKxeI?!eQHk%kZJRu&IqjEB3&9)TAn>2SW+w@5nZ8|E<#*&Hr%pDqB<3vl
zV6a+}&M?f`M|cxq($mhc?cw~%g=x~D?)4nx$MDL|8`Cw7M;AJAd&Prx&7tr0BjX-@
zq!p2xj%-528PlJh&&p;AI)RPDxRKjP$I=-ba_4_wn3)M5Zm+l>Zn_&&%Bdptv;HnU
zSy!$tkxHNRJq$S{4DMR+4U~3>C?k9;(Ctw8iHkgn!f{3GD&n2eXnWU+q2?!Zyl3`j
zZwopI2r49=M-yah_hr)6Fn3_<K*;Y8JgPSinLLM8gv3jCwFu*cmv!)BEe@I1HY$!J
zIraD`yd=1s!D;Mu_WNE<u-9rs+bphn%MshE0kKtK=wWjn>cy&qz#KDEVg7b>jeJ*X
zIk%s}o+}QKuklT(;Nl(a?_X8fTz4eGa<Ln*BHi$IAr<q@<>z`0G&N}SDX=f0VjJ3E
zAzz=BIl9JoTB&Ta;5Md--@uGmnub<oE>V!i?gS>8`9kU$;8PsVG5X=He3?KtqZtL;
z6WeIx&R)?g$Hf7INPC=X^4}fou!LqlKqF_6LW-gS9EVGBl3-(e7Vn5ImYHA2G_cxQ
z@gc3X_kuhV8{!MEt0_ZnsgXU0yMvl_ZD-l>WnB}`lmu#~-sOSA2?R5%*KnU7(ce|8
z<foen@u3**>8^^Sx<Q+AkH3-D#$e*lOn-c-)ffhn{(g>HL*fo!>o6rjzlV7FIi-&M
z<3z~Z!*(mB=^IhNMoL55SGspGX5}h<u7MDw8bz?9?R;{6gbv<;gJ8<wgzu=k4t268
zd9F#Q7uwJg)Rr?PMk>q<EPTjaG~4{sif-O6Z@sLa$nRw&<&?*8C>MOD6sexI@#GFf
z;~y{ewsWcqb+-emPRJiwqXd>-I$IpNi*JY(j%DBrXr^2-#JG|hD3bPoUP<1;x&vv)
zf8elk3TQ^Xva5@8v%7GIaGDY0-F4Y@?DE#g=MX_Z;c6%1*W8TOcI$Z`x<M|zm_(|#
z77h~G)8p(M*n3G&lAv^r@he}_d|1$BM+y3e>*#4R=SIF@BVY3jhBu&HCDu&S@S$JY
zapR0SeHm3>x>en5ya%VmQdT%d&mZrFh%T`ohFzt1r|Q$#)peQ5wn!NwVV7yE02xNI
zM7~R5jvm=^dsOpq@iU_3;k0)b6b0P2J>#a-j2V^SzN?$~Na-PQbpDG$q|UX;+AsZ$
zMYR?9!|53hM=Qx#x+hYMvXp=l5ct+~<-4Ql^0NJpRL`;{R1>`fcQ$fsvTw_r_*Uq4
zJB_H!B*p6fh|2TC7>o1?aj9q|{TR-AdWVwzvt0hXGH+V6*hk}+L@cJ8-F>-RQ1_jO
z`$ko!r>HGLr9WDyhD~1nBEr_(y>TK+TiI%FZ%8U|6S~vqQvHk{TY|$uW}{2SHyXhp
zzQ$(EBshzP-v;D&PG;>ML~;S~YrPn00ZG`m*Qt9VC{nkSNGlxc1T1%DjO*?3$~T;U
zl-_N@!`S&qqC9^cP06=4JFv9S*pgNbj<oEc1zQQf7T`_Rp(n7&AM0q}b$?j4_lK*K
z<IsjJPXDs-q9LwXMfo!Qz-T|T{-9N0>gX)2)m`m$^Ym9bCNq39{{>sqGKKUn`|})7
z^{1P}5bGt^$0*O496N@rc?EgezRCuJke&Li<ynKBLWx}C!6%%f?SLbUAFZG;i1y((
z>}D_qs>?OF;|?wKd_yGGeX^VDke*&|DKlZC+wO=oH9%hKJ!v@9?S0T@FKVI!rW5od
z|24x_9-|_#7cg-kZY)gTWISdX(n^ndKC3H!C$CJ49yXM5{F8PhV8~-v?59GbNl!Hc
z6Roop@7)icQNrX$kJnoPW7=MLotM~6bq_#^IEphP;W7t?PfJ3>oaEp`2k9TN9};D%
z+p5-Ee`<*9$2M*9tnr7+E|G_zvXMvSUAO4og}C_*z0;!P>G`;Iu8{O`butKBAmC%G
zxy_BMF!Jc6KB^B6<Q5MBNBxbh^luLG51SR{(s_6r*ku}xfulCTczggbcd0$3`vx?5
z)KqLjBF3oN7>PLr>?UhapQ<4(1;i3BBWv<D=C*})pvan!6F(d6H`+26wzr8n)V~6Z
zcv=)o?M9kVG;0r9-z|bI-z++yG6RG790EksL*VhkB{Jlw)i483Z!{7y{B+)tVJLFy
z#-nT(Pmie#(JExG46CMtamUrsl{EmFO@R~?#z{Hma*t~Q0Q>1dh|q#5#d-;G3rOip
zrC3%sG&sf<_HGIqx<O%^_Wg1T^YpF_7KTCclvR{RR3T2kM$zoVqm@X83{iJHa<u%+
zV(b|98H3GUo?%BV0DF4$J=B1`wt+8)q*!A5U9f{>2WQ)3)IEc>s4(%fHfVEnVK&C~
z=N}imzYt(mQYGacf{@#0t-Pft>g2zKM*3lmMyz@&NYt*qs%9r2_3*L}Dye|y9JWyj
z#|tU#i#M>5AvSAw4)TfD#H_k_W4Nxno0Q9S0|I5|Xnr6avb7)FUsyTGqf#$l>rwlS
zp3m4&PRl<W1bIs=A6#`@irmuVKSsEHcX0D$BRA#xK+FNST|;>yfJ_vP)m<_hxAd@)
z^~{rXRN-PzRSk=k>f=bI2htc0@wG56O;{-xg(NU6UW<!zi=rpvqPUIo(sSft@2>@P
zoDsin$o*JMw7@o&PKhe$Wp3CXmsr~$8M|6)TQrw3^2;#qqE>DiC36mwm<YQK5ygT?
z6uUU7CPS14@X~$-ZkXS;T7BXNA7SIZ(c#+pWPv7>yy#(<!NAJch+G!(9JT_3?k^N3
zAo;K>2gGlel@CDv$@3BPf6_jQ1ykWyG4VA9M3VuY#2`N?+HtIyAIQY-exrW<n~#SY
z^on3RfQ{#B_DO^~=UjAOqM^#`lp}v-J&kq%^PH$cR^#om%!whDV&ytl3=CTdD<(wi
z%Zs^f@?0GH$w<t$k5wKOs{~c`>9kJf4c*LBxVHOde&sEw$7SWm{A|-JE{{~Nvho{%
zWt*~2puS1}Ag)&mqJ_UH^&7N^uqrl?m#_()GOC17W90M6(oHB=(WQU)vtb{**ONM}
zz_y}t5I?RqN)jn-9+dTWTZ|RQfZDlu9cIBb4`Q3N0PsDTI0GoGW<8s+m4|n!OL=Q$
zZvfp>g1a{Zbt;&V^ShJaP`xk-9V^*GwOjImyDwpdG3``~buS@S2)$IXRNtrLure!K
zqK@|lj12NDv8Qj|SLe3DEFIwCM(ZcbEQ@)wPqn-ow}XyXWLP&6lu5v#S$Y_Mm>K1?
z<H2^5=%x5~{pu|BAscR_(Fh8vMBk{GXm@t<tB?kJyLX~E+wS$VBKAiPU~}Pb+M$y{
zc{Z*Eq-YDcciMIGhn2$YiYPDF{EO6GoejV!4$-1^_&~2hZet>+vy5O~A(ni<sF*ug
z66&^?pdRrTy8W1-+h53@7~We95t<fx@tf)^yG-{OdSqk0gZ|4AxB5TwPKJ78+3R+H
z#_`IPpEp^_p(B&vmljgC@Cmp%9D43x+h-al|Ezw!ypneQ3?IIndSLHD+~}Q6<5hnp
zu8r_?bD4#w0cRzy`PwVgdP5vs^%P(XYw?ANvu$rW;z!erZlA))cNhF+RQ+}6MrEL|
zMSGDQ(W0wp-){~*JR{GN5mk-7qmIiw#+6-Xw*X)D^wXaMgJj7Fu|=3;Via`m*SChg
zjiMQfuY0N}5ywv+e8MlCH}d1h$wzD|7ks}Z4o&Gpml|AJzz4-nO)na5#$+HGA6t^j
zi5zd&e7>2G>F_Kn_lZ4kbmot-wIHxCQyQDZ4Z5jUdUy<egk-7heat{quSGN-12B_(
zVI}O5W)6!v=*|<Xj^CEirj0Z{jTs7Fl`T4Wem%37qIS#ro@-;&zv!s#d!$`c^!bpu
zVFRBSM*&D6w$tPUYc1|mnd0;HHLlSsTLVK+$E)OSesFlB)V8qNM~@|1TDaEbPV~q!
zTl*gR1f;Cb^y(?$qBsSFL^~SxMAf2MvwxVtl(q^xcDm1q(+}~9;>k>uG#Y?QklGa}
zPU5)_K5V7OAX!E^vCmbv#6_ISD++aN^(9TxBE~{;f#Co2_yyjlY$s>amiC*cmmkv;
zF=pO&+NKCRc%w(nmFR056Afc0kI0)6@U{2}x~s?F#5_P34@*V{8w<ZaTF@hE{ls!f
z>}8<pv)MEyODQ_d`O{c<`uJme((l#l7no1=;^I`28NI=T(E_b~+5P46?8>`aiImJ_
zDnEM5<wL>oq15Q%(d;!?%4CdD#dU(*(fNoJyOCvwdAwBiKAgmSO*n$nBvDrF7^4y&
ziXy(<ZfFUu^bi~6&;S6U?);b~(;D39Ogrko@q4kf2as3YH+g;*{Kya?n;Sx(C}1#8
z^aaI4H*$~%>2U8*T2qxwixe(gwGn|yXNQ%=Gq5GGAoU+>Eh2YeCi~nC{oHW$CA`pc
zc-MumH`@Ly0oHbBEG)O!arsEx8VssE?hUoh@~JR68q1B?s@c!C+;Mcxg8Dw@)sLC#
zIwvRG>e8Zwm>7Ec+=IJo8GmqC#?&EBC{aHa5Z>-|2gVS)<gRI_Hye*(tYHo<WTdRt
zG;KLOLa3*y?NLqrcAv4&FOCI1)(2kIe@XJJC%%;)3uI#>2WrOP?eBcPM9)$2iCNo3
znwU5E+-_y*#VPp#^7Yq;8V*Y`ALrw9I=2~Ut)TcYozI&=6H0q@c(n71c<H^PZ;?{J
z0?B#&{UO9PEA-Ot=fLf=2=ZFHP20}b%2}$YJ0>YCJDhF#DN`sTf&0Yg^Vb@o@1haI
zQH*uQ(f*)+SVC{Z5I=HhL`)l_{uwLz!UIt?n#C|)bJ-o6Vd_)?=ia|T!G-QWnLZQT
zFYTz#(zIx5A^imeA{pF^=n-MfG1(36;cEPa7Jg97hv%FYZa->6W_7*X2DQPpS9pJ5
zLyFAe+J8{N!AJtEzlaA(SjqoPOrF38{u^7QaqIQ}3z<|p?u|yo79gG2{O?0%#Q6Ca
zEvrEDPIP9wFau`_&xzn&3H)4q{l5ni61y@$aSBiV+<wY`AL8Xa!NRZp`waZr&+pX#
z!w3cG-ctPiQqH6x#0uVphLOhp`=H3S7mld>-)G?0-o|GV{Ldo1kuIwhVgD79%q7m;
zjMcU)dXbAZ5y|xTAotD1TR<+>|M#ZKPzkV-qyBHV*>n=;e;6Sd?$@}#Uo>NJ|8GG0
z|KG6xhJIyk+(Xx2n*U!)53SHt9(erqmmR^SO%|TWWeHq9oecTga^6N5c$kc8UP=AS
zns9Td|4~21)&s;~>GPXkHBw`uCav74Ubo}!8#0^880b@%M3mP>tmDF0FaA=}|I*Li
zmP{+*NeyBlPK7rO#Xc!~1rt?7aq&3BJ#!qIw6q$9#ZW721w>Q7)4$aDKS~Ur4hrl|
zn&5$h`8rgA-PUiN^F$Y3dI8_U8k|Uf2>o3y`A_YGdiByB046DTvP(l@TrxK2Vt7uB
z;RTd<vg4%rKdB2DF6-@<LXr(UWzcSyA~Xf2j9^Q?1nb;rI#)ekFUNiPmYjn|-QmTI
zzZI1FUrxg;pWC?md8k#kF_ppPH}kHLya!++riJiZ0QjHk&9|_BOfw;Pb!#XYn!a`q
zF&4HYh^B1a59TD#AM~I1<J+OQOa6=gzbZO|qLpHy7`{_qGBV18Z_**y2AADLSSGDj
zR0CQ;4uEGKXpoS<T>vlkKL$aI)~0LUB*9L6xj(}mB6^n|GQrbbYTypYb@V}_@?Y`C
zO4FVw_~I-4cgbihJQh_(T3Styfl<p^ZC?;X%0JJ;ne$+WVVKsDkdYL57NQG8K|u+3
z{Fl#BEW3P6y;AI$n6I-*W_`7|wtX5E1se0j4L&sd%N=L_$2!C73^LyP&B#Gc{GPl_
zq!EZDH%Wail>ZOn)9-HUG!=&_XosXPY{w9}(4XP)1BQJ;DF(zT-dPcMpJlE~p2(DX
zvJkd85j9*@%<f8-v^ht*csn)sF|L<v(o9wCgo1Z@o1FK)3Jp!v+v%EEA`qF!2zk!W
z?!Fm~dl>pJrN?M<7^SVr9)=`Qbbf;js?nIRo=J5o)iu%F7VqZ25tAUpZA;Bwf2C&b
zA3;GEQcRu!eM0*^gOud_{7O*+&2c$}RdMnJ6aS?MGc)s;1B>}srX2{K#b%b_2?ouI
z;tqjO|M2tpOT2JhoC#C-`YF(WAMr39mBE`325aa%P51w7eI6Gst@@<`92bEtgaBD7
zwvH+Ezo|rwRQ;UqfH>6rj9%z@Qb(b0NBOYC3nLM<Uo|@k>oE4XOVyR23w5X>?swT+
z%67D<M_!gZt}0$tMrX&9WO0>aOw6|d1|L2|m@~DXXPo>ROr(d5BXC4PlvB4WIk`hZ
zB>%BTxKZ}1D9-pRe6<ctvPDES&@9+o^H;WZN?C}O!!-p7dWoc>nlZW3JAL|)_;5?(
zIHIi_^c&(*H%>j%>Wc7U8xZ`Ywk@GfWs>+M=MdRU&a&OqUh*ON5oUfOZnE)qi7di&
zvgLe~kJAYX+l(a^`!>!)=hRQ)Mj$3ic^BAUx_W_ophU?@f>}4l(tX=N%E{oT>5%;S
zPWOA>{(+BUWyA~J!aPY`6K`wazVlvaQV*38bo(gHcRT7PX)j|@r)aNi^L|V9Zo?Rt
z^L^3oJiekcNlc+2LA0lS&1sD%<7w&6qUAZc>C;&lsiMSgvCf!`imiX;HK0@nuwcre
zro<H>*V*6k9IpX@!HmR|#fqAYZED&+k6d;yJoYtikK&wNtFP#3b}9ZaEA#bTk0{&T
z!)d6{^sq#sLPivYg5~SPn=Z@*kxTzWOj2ggtlyOoF%ow5;7U5bk>^VJ4)>KCU%1(4
z+|7^^M2bav)Tb@eD^g>;5>Y&=)Zdr1<%H0xif)p6umc!t1X-s)w|1lNa+;A^)06m+
zevq2t8V2s&)X4+DH)|~9m~PTiBUe5X*<N^=yMm}sGufQpejd-B8mweZ6n^-vU<ttE
z9#zha_@GsUglHO1O?8;{On*^!{~Jp6VF%D*I`Dod-8I!wJT-G{ZG0(W+=NW0e&Pw>
zeO1OL*C$EgMz{57B#qaGL#<#53FuyY3MH}eBj=FkfxF<KsRLHun6>B6&8TYE2vc+#
zXK6eD2bd>4LxE2BW;C11BVj~G12p3od+rw*pLz5?>7<vK%)ZqhB3kqw2#VX2?iad^
zhAeLQz|QV@_1awtRp%<D9x4ErKN2pLpjCK;Mc2p3{5QUMzEI}~b3t!E-<Lw=OXBJH
ze|tlC#e2q4;iW4;kN^2_8(=`aR6bUh2CsDR;leY||3!s&e#g(Vd{pZ)B2*$j^K`n7
ze!_QriN!qNSG6Ls9z`T5b-X!OZ}NPBzwdPjzyFj(%>2+Gqz7MXceiLq^)I6Av~ixA
z*YY?R3uOE`7murREI4Vj<2_la(j&cj`Y()b7tskC+?!aDSX^d^%vgZCW-19c?s?oL
z^^eGI4en%qp5?@kr#hP7w?;Y(#99)S2YU4@o%<iG`3a-bAg$JJqrF0GKUlpVU)nCZ
zA?wDHLcXC((7bm=?%84Nqs+K88?SlixgE$xez6<;gRFt$s3<+QgF^}Uox)e;+R9|l
z^r;yht>WhFP*zU@NBoHm7HMSL9NPIoa!QFeZ*ec?&9+B6t8XCYVg8J%o?<H23C%81
ztmDB)oBkCguiH?>rnK@pBG&25=>g&)L4k`=a(=I2(usLx$aOLcJZ~*Y%9R(7+|~~w
zVWyAPwTJ1EIwZi2RgFDmiK7_61fA0xDh4eaj;ulF*4{VWdp_UTXB`;o?N_W1ovArS
z8KkBhb@EXb$dXTIG<Trl4HUjpIm8&}4x0^ELIP|Qs$XN?J6!h!<p(#0$PzTcoTiV{
zLh5^jAg94-)wP!NvnMOj9_d`<KE9-B7O}mX0+XkqTqMvM3&YQqS2d?I?!c#WTVm5n
zn$C(mDOLwN?A4#CC31bj0yv@~gs+@<6V~0sqC)X}lxs|=G7kk`cKFt3BwdnkuD57P
z%!I(Qn&IFZ)gAYrII}x4vt;JmI5P7%s8wm*bB+liex^i0l~ti{BlI)z(`3KIVEyOj
z&*ZArE(vh)q4j_E*&n?c2U{?Fn5ZFkD4u5-Na;kfelF`U5@(!aD-C5Z5ogI?@Re;i
z6zi#=)TYFaw7giQDO+|GPS?!mHR#5oZ!>7~yov6+Ip2xSQLy}`9aDfJRW`@%_rTPe
z#V$ocO*u{C4Q$Dx47a9Db<eTD04fYgK~b*FXbv8folgm@-S&1WcL7IChsIHweow`H
zp|FuPm5**8@SQU*Xh)~&`hxQ;6iqI+pS8wwqxcc?W6d->_c$2X2BwqxkhXX5qpk&_
zfAss1#-+&EV>~RDm1Qp~CzdPZs+==C5Wgb1(J<zwLKJe-xE6Ltw2}1QkA2(VvA-r9
z9!_N9sORy@G@@5++C5aG)!o7F6@0X$+tq<vI^^wb75(U(-ns>=_{f9-BM(t$`9}Tj
z*`br!+(z}jwjfZ~q}#>WG!N%aa%Tq<5#=-S<_AIg<?YH>1`1hWGW2fXonl#@97!o0
zzV^nj@FBNfeXBV4w`j9RW&HiJ1mOI+5_S3!wfp-WA?}byF|#5Dd7Kz6#<ix%WT=Kl
zrXN|7dQ=Lodzo=Q!*zdz`W;ldUv7GDl5FgHP;~C&6sxfeg#qE$!2TAD=>XD}@h3%R
z;xMlSXk*hOJ#1@DC-<knFG0J=iuf{1ukAM;%>dpzE@Q`a?^gCr)mFAojY&vNEq3_#
zW9K95rBlz_y+}h(FzcY%Y~*!(*X(a_VhNzrcVeeMzp7jEy7ODR4XQzU+%L|qke45G
zjRk2E_OJlC@JIt%R%p#ZjZ%l$zFHyVnpzBQju^_}dzhRTLME`0Gg07{K-&9VL=F&5
zO~APip2E4<mVJ>wq1|_j2<c>z^APt_4f#Pnv_uR5i2rzSCA;Z1M7+po58!-R9k!~P
zWPR?QEf3_fTXSF#v3$7?L;HN=dE|4wVgdRXI;gauRC$or3%>c#-d<!zYq>UKD})6&
zN3E`hfnxL<yN-9HH-0tQXw@FkG)L?I5(0WfWmpXJ3Tq$6p5wQRY{Mk1GuS3}^C-01
z`A&~A#NHKF-3YUCozO$5Zl5|S7zH0&5!%znesyGeq1UzegeCE6!z|Z9Aj3P}0(-;2
zv3dvLtL<kX-E-baH1nLLG8yUAxIptB;AVKOL1TxL=KXP9J#2xU`5@NlG56{&qi*7j
z4Mzk9nTm2$`Ti4nD5lXtj@Y~p*ZAg<i(XHW1X9tRhTpU&JC0lXebQs&mO+nq7$Wo^
z8MFV9F_&OvdZ?oM;ekyQN{^<^=aG_twHt~m*}hTI{d$8wt_TBRXyN{#;{uJ|2L%Vj
z*~_Vs7j>7X-Nhrfn_1XTK<`iKtSrKBmnx@D2^WJq?izz_-(e5AQ(I(mRVs)T63Jqv
z1-*Y1HS*obx0)(|V7V2661Up%O{npP=6na#?6TUXsqrQHJIt?b7&dCqUnsTN3E3I&
zo@)?0&4ph+^0@Ev80<ZSuNDN5x_qD1rEgR2STf>I=X%MhGWj6VLwjr!4_sSO?9|+(
zH6u6ZBGc&zPtzCbjc=Qr_`Zg4G%>gq0_t@FyvSCT3^C`iyf<9zi00F&l}hZW>x?CO
z1hh+Key%K;Y$~l_V;@_um}@?W)l%`ylO!JUR=v$ujx}~?Wq;w)av^o;x~DUJm=M19
zSe|Fhk%^IlVM7Br^E+rYDzn=X5|V@Wl3`!K;o{*3L>Ad{Dl^v66Ap-)O8X5F!2?=b
zRvhcTAF)Bh+G-$m9oi$n?iPH#H)Pv~H8k(K5x^xBF=ermm74x`8j2qPkM{4<ig%Zr
zYFK+o=)}yd(j3KGye}G~u4YX1LyULu@fUoEhEl3sE4e!EbS$!e>;0Ml!|gfM318`H
zg~Indr=gCe$I{6d-5M=7SD_ztKgT|@ey2(TE8*;wj};2d;_@VXdhkZOFVVKS-|yps
z)kPR`*c7AR?Xfd&hF+$xx45KtUXQCb@427K+-J9^RT!f!Pu+|8_|9HY)yhHcFSc^l
zrdP!nr9#__R+@y4-Ib60Moc-7M?JN~(4Vw3AP^$W$MYWX3wL;w4@DnnCEEwSRqT^+
zh(*{)DlIu9J=cA>T&4jH)ZU{nB6U2R^4E(xN@7o{oK*!r3MPbVsF%KxUnzS(lxU>)
zL0wIKlU7Hb5gKd5?w-aq7JSf?-U-(!Js#J?6muGy5DXG)kW1)b%9hol5?oNU0BV~%
zy1R4vBp=;+k^VO$PRpV-mC^G@vFa_D*%}s`F4{E#b8=E4kMC`lK>VUTdr#c#P_QRg
z$Ovs`TAP=$_x@Y+%C#V&`rQ&xFdOd0;K7Q^Wp>DSb+Wll(#r<Ci#r*ZHAf$2mOHK+
zmmjeNHHP(2wfUMa$Gu|_8@G?LYHDO!8ewkC$gZD&9Kf{wQswRl5%y%@hu{7pAvI?>
zH2o%9Y13Cl%Af~5bQh`?WUxUTcOwK8R4tV`;#Oehf~yTv=Hyb=IDOMJa~OK%lEZH8
zvm<cUUiFcbZvopYQqVw5aq*!0cknXBrPn3GNKnd_r{e5VK$LzJL<`jo?$w-(XG+w4
z#aJyyUz-&1sX-VzK5cz4p;6=*a@&NUFRw}ZO_@3T#2xZQCy*70dMJZTwR4S_k5_{+
zH|IafRe}dg^cVS6L!XmQ^@085w5t(0`6knu%->ZKW0l9oPJ{So?Z}hxCMd@b<~{Za
zViFUw9sBJshBNXxpXZ;=)C~s-`qW+dDAkQf=?pJc0heM(dQDC&HeyFwHpdu+x&d}x
zIqye$QVd;iW1Wv9jn7dpkW^kBuSSmaW2_e+2dWdA33J#vkv88HiEM9{BQ_Rpy?~7Z
z5Chj)Na|rSE0PdBy6YQbiN6%g173y<X*onRkt2v1d%j(A#<7ygVPZtv=t?-xrSasb
zKYDUePkfb4s>luEphE5m>AKZrzc6lr>t8mlY;B|fCqu0UmI$uA`4=ax8N>l@x-S~E
zpVw#QLWOK4-<d3avdc8t{vf5(dw+BO5CXp3|5cCq8ZJ`BsgO5mTYLte6qXb(*9h0w
zl5bhFuiBt|JP~o`yufAjurDO+5UVYQG@D4-+8eGL@+GaWyVw0v@!NrPmqcpScj#f*
zgKGR)nZb2l*XyS@Q}f=tEJ-w!lWORtnTty-B!k|T5Ml0DGcuHQnENioQB%q7v)j<o
z#=Tp2J3+NfxzNWB-pWuu^W2-$k2L&MWOLDTPx$t$F`<jVf~h2BH1_ievJS5%%Jy?3
z0PGkOI^Rd60~7~I^N7b5zPV7d+kTtF<!>dtT?7;Fdwhh<V;z#^x=kqv<lDnqSgT&W
z)<N*j=4dX>c4!+<XVz&Y3kznvV4Cj{L02k1XCL%8eaIpQoMmXJo~~%9epEduhBa_a
zot`+z^<b(LY=+W3<{df18!>>s-`)d+WHQ3D>a)Vv@}pdduoz8@HIOOjaL<`$S!k{z
z#4*p6<$f{EagbxSvLkX%o<o%+1xb(7W2M;8lw>82d}X0?kFv^coov%Thx<1H$(!LK
zL&^@PpZIxAk%&P0pF_knH};I_CoExf{On*{A`qQ${Fh+MH1)6@$#Mu<p5~@Q-dwi!
z716!Puuf}A4IZ;kE1n;jdYEQ^MUTzq?B=E7Y+fG>-Lg3MG6>x=z6IMsZaFL=JbnC4
zAy#obSKh<#kzF1$v{khUt9?A@RE?m90{rzOLS1M@1XDbBj_xX#b5<S6$=GTPrkXcw
z0psFZ4S;N9C7c7dZTm>{+KPC>qKnCtVL7^;j!kGS@G<hrsB@#uz5Iy-c3kpejV!CP
z1t$p%n|vUswiS|O;`3J?!Zf;w0Gn1aNRE~S!nFFN;*)#ayyS5)^LobjQW~#V1ohpX
z$Ip^=C7?^Ox@;=Tsj`|(v3l#cBY5b>n7B@S^ww~G=2V~A*=k44>USr@F#qvo)(Pxc
zq^s{|!qRIBziZl8hrH4GbV(-yfvE?WmUqR*4a$!Xd-lQsWK9#SIb`(3Npde7^bXUA
zG5zvKu8ZxpdA#-vdE9OcdE771^kCaWOeKxZm+vd?58k&oT`^V|JmJk%taV;GIQ&{7
z=AJ(gsd3(4NT73mP>!^EQ)`^|Wjr)~qNpOu|4Ilc@jNuMYdrK)qTyRA%-xv$j>D!0
zk7Jj0x>7b)!+Fz~l^nv-(Qf?y!fbpf%{VQt`2?dkgK_Qi$u(wA%?-<jP(Jl^)nC}e
zO_9=@7uzeK4#XT+@&pv#R|RX)0LlwNv7()6k`n@eY*!brXKZ1@mexu?ffi~JpBo$L
z1rX#z9KuF!;+tQ-Mu^*<r1~bpux{`Z0oIE2e77~59%+|jV!Yu{N@h0)d50x$gg#X`
zEbOFV*agm)AZJh3meFvD75|8Bs(_eznwD%qF9*4w^-Pw2g`>z0Vg_cRVn)}d{@z6R
zjip#{esnNt2n949rzh(9!z?>>GwpcY>XUPU>w7xlpu@4`Jefsg#+DqLeW0jKM^03T
zJ-;RCZKE(imGa(P%8<(L{iWZE+l%#M?&hxRCF|3byH`B%>&PS79Gz~*eniYycKFT@
z@o`~0N}Or&L7$Awfk6SJrNc@h5U?(?$;S&-0o}7|R5nIg-@*+I+2v=$8a=VUiEtXL
z{L)rE2rgaUKfN<C3OdZF@XJpgmb$8RKJVfW$l>c!HT*Vl4BEr^a{Ov9=F9QxJ&do%
zZ#&xIr8sjrz29JASj!B&1A5I{iw+-k%HNyCm{sG5xhulQqL%O2%uCV6?UyrkyXhS5
z(Wv)TNRL+0@#J1i#_{q_2_I}sZJgwR!No$z>74aQ!Oymf>1Z^I4IzGx4AJa4RRv$v
za$P8^?})MYk6SEA@xb6(p4m%C8H40i1UO3PBZBr2rsV=~kRL=pADe@8H|}+X2h#b0
z55PZ}VZ(h;Q<@E6BiKW8%^SPd-_73$Of8wrXi*(<zku0>COu>`Ae)J=4lNa!Nv&oy
z;T}<!^({>`SQ93U($S=grY2&<b8l9z^!I2!z;U3~kYp*wIX2dEYFqJA6yjPCx|wxa
ztZt>5y@B$C^Slbox<P#c1GAM+Wavx@vU8(c3e}sn=J-k1TSJL9;oeKf@w!!S=#@Zz
z0Gm{TNQsbpaFVj8UY`jd*($XlZ7))(a7|@;Uo+b**ZPW4INER2jg|bq8v7Po?v%&I
z<Gp0rQJ5UyliR@~OgohS-r_D5R{f<Z4@7EqMw2I%DlmAeTyWx5UTB>vG>DMaI_<`g
zsW>J%6{Rd`nj>>NkZrl_#Y1#W6l39u-otL?$v+~VXFxeFof;*1!Hs@rNsx9)99-xL
zntAlSrM&f{$;?&ip@DBdzr@&qp<%*JAt$9)>f=wCuDgh94kg`g>1^cJLWH&)%K;$i
znZk)GuV1o_;`xn&Uc!I&VZ|A1g_qU<E%dNdl$-|efDuCrJ`axN>+R6?l)EjuY#Lmx
zhqqPtBD%|!&VCrLHMhxM8R8*E8o=eIZFK$CBwK0}7l39kx8w~{GBy{~10k=w+@WWT
za){P(5!I!F#(=%!Rq2?hRzXC=*&>1WcJJHo&t(6OZvNSdKk0BkGcyr>w%wD7%Zfh0
zeu5<Epp^Cim9~CQYPCchTYIwkk|PFf-*JT0$JUt4o{<=NGJ?ap&^$XPB5Te8WsUhn
zy`bCju8R=EOU=$-ha_O+g>vc`CVg&yJhEqrxzkrA;!b;EIULcasdUy0X>%8`Uy(=<
zHC&L3QqohwBdzbP#_(zSMeMlth*Scw_lQ%^?<%1C4E8oIKr>MZ8Ss*$4cna81D!i%
zwax1ey)ThoGb-m;iLi!Wo;boXiMc*nDfMI0+H9CQr5YO!X2Vk<>TOo8<~!sSgc;?h
zr&eP$n0@6aF}jUqtbUQ$4`Ab+i(re+e>e>J!=XPrxp^FRjuh=h2Ejg~%f!*Xbt%)a
zp&i?+!SI^9%ag9(oRfF3Y%WSu;oTNy*G*%|S3vRiZ#HQa+pgFA4B2tk9**6jDb{m-
zaG?Li))>44rJ$*nL;R9kbPFU+euo|AUmQMT(}=jKtUdff!eLrXnVOU2NeuYAJ~Uti
zh@U`FyolW4yRH4LBe&y=Ng-PnnZ{rFks9L;Jme6j0f0kNu_<sw*W7cScIerE2;$BQ
zX`t9~yfW!s@EJrJey(x(ykK_r?s7LjVD(c@hZrFyJG_^w_Tf9dEA>{f#g*-C9@)bH
z!Anv)*{PrdUe3j>(qWP>AAv!1*S}DOSe6+Nw+=gwun8=DOmV_~?Ui>}=?Dz?t69yX
zwl5tJ5yoICUs~NCh8HS3TLxBdE6|<)6HF@3xc*V%VO4zhmUU$O3&i(>5#ymdKh)!B
zZw{G^_98pe8vJuV3s<vYQO_{`N-giy^zwIl@eDd+z<GXTegFQ~uQx`rcvYe+b-s@w
zY_DA|xpf9?<My&4`P-#+IxOaaku;v7`A5`bc}^;sp0u>IX{o1Y@APoaBO4uBb7Jza
z;2BI}6TPcVumW^$bkBOXA*J3q`j&(R@v<f4_UomK^OJkCM#b-C?aMo$wd-!M-@ViG
z3T200&`o;1NjLa9Ru#{7wPLUBo1o4^bAVvhsB%YOaw2G;lGsHJ_`8w<6!xfd9DBee
z+EwqZzZ^X1?W=_?kSPvFz_a3m77?7DNXmX9<4-Hi+`iNEq%{AII;b?>pf$h&;toj_
z>7XqF35e!E@-8lQtffDg2MVq$c364O#%2_}`5MLs5FOZo1;X`6)6hqq9jD`F#3Ab6
zdZfi*X!bym(WWBg;7lONvCB11u!=V3!!b-yQqb{<mqzY!F?=|3G|*0v?eSTKK}X4;
zKD7TGuDsXo%AVov_Dd#x^xD0qi)f-s@Op?{Ghs8f)+}{P+ECsL!Z<^&{cH<io^uiX
zYE2)aHNRb}-{lx9ge3oEyj0F`)5!jHy-!!D!9JN?Phl#$Tc;0)S=E&S)vX&pEMT8=
z>JP>#g_=>S#Z{A=h>G~d!YbIP)-*#XKGbwcBpCK^YB!sa5xJ7=aidnpNS;J@58Az`
z^-z!4>;qJfd#wlKbFf1@p6)szai>b!Y1=nDS==F~a4?DPU<X!?dz(!d32&Dh{#by>
z>sj!elkY-fqMwW`YUb{4_uFOhmC%G;)FWi+D<fa@Ck}aLf&26C9qP`Yi<`U$E(m4{
z>GJqPWX;a~keCSYx28N_x7*TYD`N2?)>`Q-RvRQ_aP@i7@J=Z1#HP%10d?8;GDYZ)
z(krQsz#iE+lpJ5-fgm|mkyI=;iVG{hec7P*^u(nbo9X_q%{V02hSP(8g!PTK{F=1y
zaOilzb1)kbKZ*&g<!IEVP2iHw8%+;9J>J!ZymqGRgKm7*+7-B*R!vKVoo7ASf>1CM
z^Q|lwm3pmxV!z#@Uapaj9&c(v4t#DNoj=qF4G-Q!8vuzHvU>|WellaWt;y{2#81mo
zJ#}kRvhCts=C^oJ@gXNj25wY6>yR5+{L^a#?MDyQl$4IAMcy8QXVV&fYn=^?YZ;OX
zXUP<RPd2K9{`|(Qq_^oz7uRlT&ZNtHw4?vHXu+5C@JH(!*Yl%)O!nmJx(BYm8<t`<
z6{SHFrRp6HfD1w{%t{oJkcHCpX+Q4ZR`Mm9rh`<V+hE04kLD$527?CGbWJl}12AsR
z#r||fUTQcIr!_$#*c}d}s_M!QSxFM*B%KUE+1-zOZ0*QqE$7JOy}YCPSBXOIOpKID
z^G$O_<`_8kaxAoHnk~j$8N{rvLbX#XSF7jdtre_0Qn5{iRYG~t$Act--KF<Z_`ib&
z(kVr+w^U0hIhnT52TICYe^OYxd_U<(0sfZP1qQ9Udg!Fa0^M)2Ru)`bBjM(nKn3sj
zC_)xccY2?LZIDgqp3{BVt~Z*F#%ydZGJHk8okuYEXQd3toGK)D`U3E!o4#@&0^{)&
zQKZL9H)Pc!q7?97?$4I%S_95@^J0m_+`-jwr-LqCif9sTh<No{AO`86!P>8Kv6^|n
zKW@U(hLvJPC^HAWh8XL%T)<aZQVea=VUm*6uaL|}_&r9J<vl8k+laZGc1Z`6-R|br
z2ml`OU!Iee08H;C<R-rRx_)2v#*;rhyU<#J8l?#_#<#4()!IcC=Sqsz6-QJXu9fC^
zZ||hcEJSCW*);}a-YzMw27H7&Na#Is0b2)>>cNO$qa_Ewk0K$;6hj<#_D8A{(}T(&
zGJ!l|tcV1P%{pW8<g%ZOEI4fBc0k_%<}sh(QcdQ&O=4Us7rrTOQ(H*incLtm#ek&3
zRX#uzt8icizy&awLfXX-TzlAdGuq#*(0nvbn3M@Q?}>o-{sd%}aAv$c1oBiIi*M5f
zcBV!-8vD>gY%xV+!EhmOL21lYv(*Kq;GEtf{^4{wE@4>QiYP|~F#89EN^ByFJLYAt
zeHt@tKOB=x5i$Rjrx>vGP8%IrVldku#iODy^Bu*2|M)?Zy%IpRG)Cr%|3P-{;2O`S
z=V<6cBk56VXXqUNnVqoj-E(jCgFw=b<+Cy;L+YM??^G!YFFgTz%V=fAXtSn4sK?4t
zbpl~e%2BAEui_s9=TqZ;Vj}b}-x07tn;*VYt7V=|N6yVTwp|BVdqXv%3mp)k`qk%M
ziQ#67MVu;^74zjG<TTUnbYfjGn#y?@yb2Ev_wqgWB2&bEQ@Tvs&IQ#~*6?_J$m+|Y
zZ15xUHXb|R(^@>tqs`*uMkx*?4N3YxqGQZ>+Xv+NhQx4-q*b$ymw<$FNdw`a*w$s8
z5RAwfh0GTAdEYhppg{!SP>BXXy+c=3j!(j<ib!#sL)UY$jPNh1H1blW)8X1Qx!UdX
zzGx7_?Q5e$Gw>y2N_K?)K`_U-uGO++=xR|uNV**30=b}#jXZWk$|bXJl+r7z4wZ`V
zUoN4f-uWvB@vr8|oH=K-N90*Y$Mvm0l9IOiLEhwtz;&fU@2RIdtmV*=GnG=g9uk)Q
z;oUbx){Zb6cJedMWuuKc`m2HV5StqeQ1Fv3OYtIWE+(d2VLB#fOhGkaoR$xIgNCm9
z7uD}q%3nUG?LSE|<Y3PAyk91@-zw{o#Zky`rev$d+*?^}#PRm?e#wW?(vbY&Ka!%&
zc)JB;q(!K203_Yxl|fm04zq_JHKHz+qZUZTz38`v5>ReX95~8Y*ZpR2Z(V)~lRAo>
zP<FnZJ>at(e0c;`%#cN*!_h5Sff3m|-s-DUg&<nx(-Ar~J{=T<+>G}l5ywSY4b^$X
zr0QBS1oQoLyze{c--Uxy9w2yk4%RZhL$r?rDgEQe+f#Be8*zBo@YNBndbLeXl=Mjb
z{!@Z`j5F?_cWvGn^cv!j?%LV8_t}-^^-srtg$;Gz<G-(E8y0`~;f_$%{-s&x5u*%+
zm8>twlaqToFJ)P%WbXi=JMA5_4OnaDc0B*lzP8%<8J=8r)g5p<Ufwpqwig>3&ngf8
zKnYB~PU!e*-acD@!3+Z_jRRJ~9Op)><ss6g#EB7BN*Ad8DWkS%o%{jt`2GbBp2^JP
z%d&Yl;Lvqu*N?VB<*FTyGq<enulj{mmOJ<<ZR;#}$FOJT4OzW^U=X(h6z>8s92*&4
z{Pdcgo2(~FzMrMu2*1FdKZ2Gx27Go)33Fb-meX@1XtKdHxlikXnO;&vseVc9c)?qW
z0UjQN12Qy_BHR~ob@vE=V48K=YZI+5Ul8Mb=xR-a(fHRkf<|}dTjs?;-@kyKsNj|_
z?MB?U!)w6?bb=|x^<&E!ySx@JJiY4yWF;`8E7!kpqb)lzZrqd6<%lbs*^Q$;-3c=t
z?DwU+94=_@6&3>EDQTYM&cvy@A8tEQWzG!D<qtyjPfj`xz6Z8G{`BM^Yap$R(GS&B
zyQlQx^sZYfu?+QE9TurM<a9T_u;v%C=FA+@iKfyHc6T+UAd1xr4hc-&go9?#gb1LR
z=C7X=^h$oGsQj#!yri1Y`A)MUJ|jZw0%p++Us>f+LqyV_48kMrNJY@G8zx}TkiSxp
z=W`tX(I_S0@8j7AXbpx3Z0w31y6MV(x;ahQsQvInW>>fwN;?Gw;66P<IPP`RtzZUl
zjL^Qc7^YB43(<yGhT068$p3Vbs$zSVBssq!o`&QHcK+noTV2JU&pQ^J;|6N*gBWgb
zs!lPCjvW$cZ{D#SXm$=8(x{%<m?_z7b|n5x(FMTt5)H3OtMpe^NK*1aqfGK#ctdVt
z!IfJHVH=v|KVAdHxnI^-rGe5BS;@Mp5>=4_XOT&H^JZVeVqv~R%cz|H!EQu&zHWP(
z{fj4f)2MP&;4#9U!YP%D6wJY{U}J4&W&L_ae*=ziTDe6Fskp^*H>6jrC_jqB-%Mt;
zk%;T`saiyFcdNJ0uL~J_1E20+&v^R8?9*9a7zBmhF-#s0kjWTE=@3RLx150Q>rP%y
zkLU$R-7$8VJe)z@pS-7u<6>_CsHeX>pK%bV`4<8i`=$bub0^~R-OUHsI7pj8@*#|3
zQ^rHk<<l*9-`-EHEMTOxXuZ!J7Ui8nlI6XTbOxktFDp$eyG!W|h-*+soKPo3C5B?r
zCae#wYc-&dMo#G)Q}o3WOKx9A73wmH7q}!&bL%7F2jemlJBo9g<uV7*tKXOI7H7a#
zJ~KeG{EGi|fxS2!#e_ayM8h0!sV-8gQ3NdPyQSE<DH$EuGxr3E+FSO!uKTG^$5M%F
z<%Yw|?&`{hi?&{{cuKJT(8RMzO^;OvrL>^5FWHp16Fk9K(6l4njA|ne-|?|h`B8sD
zb=}wu&?jhc#uwDCN83z3f&^`~uzu{b_ihGbQk5?U{w%#R+AnEK(P+e<(md&dhs`Wb
zBZ9*^EtoZPNBtIbRKFc&u2gM_ay+@o%_*k~n`3%EQyOM#^>yVL{yMEz<;mUHg--Ff
zZg40R@pznp+F=_}Nl-qY2qEgXZ{KbR!Fy+=x!Q83QYDMhtXQIgM@)OW{iP|Vji}^O
zvg>xT=Ue95mK<^DOp*$%#IQ%sJp9n-_<;=Q$`8>>l-%Uip6J}K)-ONA%`xG|V<w26
zSfj*{(RQhC%UH9$9)oAUQWt;v7~iI6F4;8d^ciWeKsNCsgps~SNy49lYYibDjv{2g
z4*?G)F+!BwilVfAZ=D~8%IyCNB`AL=1<g?cz^|W<&ZaBJEj=wFS(<FbHt(}7LyU)J
zjl4^(-OKu4CeVm=Gp^l?^o)N`qieZo75t^bYMw6;+rLT>yJD<CO&V(fM=~fq72v(E
zU*#45PWj;-7H}Y9e`atb`18MOXz&d53O;2G0Tw0DmP?W~;hW&+m3W=J{ho4Gst)9q
z>sQ8G%lu`0pPtdPC(wGBfg%z*;QxK&RfHtB*i6WtRxx9@`l~T%iMsw~<Dbw{o_1e0
zPeF^}nnVIDzQ3>(c=u<8XW?0#bra5q@0W=c^BD<+tMGO^cztE`8}C07fS0f!N|}G>
zjrug*2k^(LNC8Tw2~{ee&ah_D?E*@oCpjsx$&FaH$(kY}sq2m8oF+X$d!^HCddywT
zzVb@Z!;qU&8f{MC9wo#?y0E#3iV*9?e;6<oj*3*;XK0&{vz%TTUS=vXZ*ree!Jlm%
zd1oEfb$LE7P)eOPeGpKr`)!56DWUInuz&X(oY88Ne)z509nblj(aZvL35KM~-v^QI
zIfai+_i0Bj0*DwY83hAP@a?Pac)#+v9~0r(@kQ91;KO3ONKJMKoiLOh@8(AQ30P_7
zL*iC%ModmixY|*gqf;t}(|il2D3i>uxx4&1-@(8m$gMi%MAj>YxajN}xxWwXqx|xS
z(m*<)=jQ3yF8W#%Cmz!;0ULi~aG<bm^)ayU#ctm!3X+nWpz2J<SRM(hhdg$~8MR3#
zah=j-<!#3JOdvh$w%w)&v<LoJ5%SGzKbEckMcrG6RrR&~z9O&yX%JY8RuB<Ex*L>G
zQo6faL69!#6iMlpkPfLuE~EscTR^(I7iWU`d!FarXTRs{eXf1{(+ehZ#JtBC_xOH4
zcj3{+7Lfe8J?qSIuRB=*xO8qcKl!3n7gANaUkNdSP#N#caMN90kc@j~R+4zuDTv9x
z`QUi)nddv^hBuA+ClzMndSdNTyp_<rG>1(ddh*k^HMkI;lc<_+C1U){9&Y3{{L1K4
zgrwLt%(#fnfCeEj6)*|R<}EQ%ij8ji-UNfbe_$)%&Bx}3I$$JxsHLjGuW`0T^E)8%
z*%4KcUn>dXq-_1laMoA6CQ+#$@Py6T=C-mmZ)(rO*>EC~*?srRvl)x*^xrCjEVE|Z
zwSyiVDEih?w|sjC>g0^NhbT=#Zp_;cMk>GcLYEh7`a+t-nLPVXhxJB-mE`l+TuGs}
zq<gh_@57g#_s<22NAOgDm%_WntDGyg&D&Mv^Ofm#vDC>Y0DH&v4J1H|0eT%6%vsA+
z;||Y)nb0ZTVLf*-Rz)|iV||5EdNR!UR!^M$)rHJ+Ow*}Lg~3g(fI_yrfjm#=LlL5w
zj8<q2uz1is>PAs>jsUr*MfP07*(U360gvIBJ59+za5=6y+S9|^Y0If_ny#UFKZF$-
z8|d=LP3fhyFm=$oad&!27b%LvPVhR1wr4*M;@ppO4B%nN*Oowh8#E|<$V=7rq@ALN
zNmt&Eawso=6LAg@K({_EQp#6O_^`eEM04+1^-tyE)yF?VZ{qpZV1gOyuSeUR8y&O*
z%db#5k`=RHU+>3WY_ZHxFEzhGoTt|#M%1(_*y>q*J*t1yb^*Nghzb$<_0`}=mJ?bX
z__^9TI3?Xk2)0zzGRI7|BQXT~ta@7${@I(2P0r}Er>eg=2^v(;Qhw~f*>zNumEiVL
zFN%`5@U_aY#Vne}&|`F-mIfN>Rk6-x0)#<XJ)M3YdYxjVu92<QNc<QUHtRE)bzb{n
z?r!xj0r<R}dhH)Gj#mp_YMO~0+FVQUiTFD_X*Ca?PM{81BEC4NcK6@6<WW{9DUt+H
zQ)?g0CE2d=+RZ(NmW<Xo<TDSVg|c?_v&}}#zxl-y(*JNhZB3Xd_vyLnlFM*chkRZy
z?~dd-ML+)t10-5PBJ)a&(`Z!<Z{ECdH(+)-v^2=YCpL-6Fl)Zkj{eJZ0_caYrcF3T
zz=B#aQGNcs_7a0Lc;nec=etC~=OOxQj(5LMi0{DXx$Nnis!~E#*V=ezhmTqV@quSL
zZR`G*&jbiZbIMz$kBHB{;s_AQJp~*Aozow5MhE<1__D-Md(${;tRL=z#;#NNl_)oR
zYw$x9b1PbC28-Zv6L!d*w8(#HE}){c%U3}FwXzW_BffZ{Z*ZKjC_>UKHE-m$RktT2
z%{jPMvA9;_IBDn4OwIP9?uYjPxSpdwxb|7xw?4o?eESR}q|_a@?qduJ>Gn0l8H9e4
zc9U2$gNzL56R}CVRcpi8@K5a(hm#S|;93D}3B$YG_>61s-@Z-n+2fr#!TPBANgo4K
zs09!Yo59sz8km}Xcba_=nq0JSn}I7`OQ5zA5EEbLzpgzmfg1b+^kC3kT712bfl#4F
zzT-=*PSrTr6He^x_`Wi-S@I^ZAIyepe@5A7&d6<VcbDy@Ff$-T2h{Hth=bQ+bU(2$
zqU5j3fe2{Vd&2oAz@S}suq-QNxBvx$I?o9~_ZSwP^<dNIM2#^E2??699rYjqtPbzK
zcxu+zci1qES6W$Iy>|DGIJU+B-{$9?W(8uvmV<CDa<2m(4mgiwCs(;KL>i@#j6_jA
z)LdZA#_D%DC`&p#aU50$`!PUANkn@t%;5s3xulGb-eo0&BW_%KuC(`E6?0kM;E+vn
z6k4W{Ahqz}4A1DXP!=GRkYEAUdpK_d?raP<a4Fs7pU{zd<vK`1*|2%Z6+N3B9l%Fe
zFz#LDFDrgg<=?hG?<_q-5jvgH-E#aozf;O(AnaoO6mT~T=e~pB+~J|CZyClAN!<<4
z#6-0a3bD&3hXik130dw{n8@GO9&tR#8*<Ok+rVxezif|T(3o@d0Jqj^@1)H;J$x8m
zxcu;0NL+>HVG(+IJAN<V8G9S?)Weem64a={#8H+Sk5E5{Whg2Fcw_W5O%q`FFNdnP
zLB4%Gx86MIqI`Q$zYwFrmgIb}3K31akOrmzZq-=}W%9wbP!BH`uV~Dj60}I5Z?yv<
zt+hqGKlr`BbunY9FV#Xh-jssR5i_`w>`7G#`Z-OeOQlQECuLyj0D14AzGv!)bEXe<
zzfo+y^<%_L$UcacZGJvG)^4^CYUg!}^%Zp|0{PbC(grdf`|Yj0^>s^z?iseQfTIiC
zUgr&esUf<p*wgRn%f};@MmpoB{Kf0#g*#(@h`H01DI7(KuV)!Cu0IDrM1Ri)^qBR=
zVXg8rIsq|Is|}5}lvrxLP#+(f1zn03Y+3RhBHwhNp&O%4L&(heBB%R+9tbnT?s45#
zxYLkEv2~8Jnc%Py_?5d|WZ~p9k|^bONgPD1!<$2kjyh`??-FZG3+{xIGX6MDNuHy^
zly~rlZ_OAB6{rOY)l5mO)!JKUWi7p5Oz%rZm@N;rl(Mb#RfB;eXi=Q%@K;V{;+UFV
zgscd+NX@x<wB~DfHg>3IC0(4*R6Y-<(caQ|HE!MSUOgRVG}&AMBi;q3F%a$v(qad#
zgbE0tmsM&f8q(f{UTMbk<u7W4w=GN;5+T953Tde?VouZ#Ha0MB?gfzrzVK}4%~G4O
zny8%3iq-z=4X?!8I-?>#u%4{;I-6Lw$yjIjl&<vcB>t4>qmRLj-61YwsDXK2OwxX=
zbVm!8K_Yt?MR$uE!`ZvQN<n4pKDKT%+U$bytR7Z}&x!^NuYZs0rdY0UJSx?DJpuI!
zqXz{@7;pGR^(;nBbvY?t&EqpsehKjhM|3``vw<4+U5R+|3)Y~l%{pHG1;^M6Y0+8D
zj*J@KcWegfsjOImEL9vhA3;q+Grgy(17!@R{-^nqpjLApOEs)7iAY)P48XXm^AY28
zc=}!g=<dIpjvUZ2i*{(S&NwHic4?!?-M$jDF?VL0!<v$NMxCnH%MsO2o$?Wwm(IFf
zGD0f8{|LTxB8(lF5~<!*D(A|G`n{^7tdzJUI2y0o@+dTi<8cF#JM2C2fvqft^G8st
z&I(DST4wlC>1`zi=1n<W(s-17Tv~Lii~e91>Pj=(R!<-z%kr)LF%Z@*w~;cO38`Ve
zw*xRnrzG_95FAm_lrP3C1@T}jNTPFpqm@EcZombJBw+rG#Bg>Al6@SJCD#;><e|nN
zj63Z4xUlfDFdAJ?D0!3Pt(FPvcc;KBC*pQ`>^=ksnpP};cgMT*witwAkm-`@-B)6q
zH`z9(<A5G2)DB@|6nE=P<qE}j|DCpBxUOQW4+1lB@_0+43=1VNfqw=FL!L%7AfAKj
zM>#|=zdW}uB<~W-ZCZp`5d*ito!2tf`ygsG$!x?#z{O$Mw+AQw*iYEPbdxQlTZlI5
z+XegN=ZcFaFwSetD|6VKnk<F{-diaYE?_<DNWV`O`34B@z={!g6;G+D<FRak*#7p3
zEO6uuz5bB!p8;`NQi6r-oA0$B)HUP_8MpS;YsXwiu%9nT!+$~w<^A!UU#)o5cYY3z
zrE{Bq*nA;<{l#OWP~5VZF1Um6zrIJFN_9OL*rEypN_bljiwn$n({$&jG}_DYK3)U6
z%mybhECY`O(ioxF2C+aBehPv-saXQ?kyYWOKx9Y4Y=`zu3Zmt^Q-M!frtRX9x14z_
z#f{YOo1DH-=cNhG6lKM-e*aWLVtdwt`w6<WX1RRKI38Z~9Xu99ePT~fgnk$L1C_qv
z%`Yo9&)N#5yOh5-X=T^O>=oq9a}pi07}9_K9(QShXf;(y;umm=Y8&?Qemp71wF}r_
zh*kQgczKt}NX)e{GB7n(7euYgmOF?2F}F|+yFO9dZlX9Liqew!<AS9xZB9JC(W6_R
zFaml$#~~R#^R5ZzguVIP9Y;NYAam_jR0TQ@>Dt1&lO9`aB~%B-d8F}8J#d1~<-&10
zgA|J~oAR?FxNnyi^R3mVj!e}G{)F@&g8=vn^Z!~E-vSR}p(0Lrt&1T+tDsjjSr3ko
zka`+{aHqwP6>t1}h{v}Ra3ktn+Yw7v|19u~lEAi%iA??8G#jSbp*R!F>97PNEi}B*
z(|4fk8xtj4p~i5lIm@yQGv$By<<}SzIGQeDw(&uz<DO1m(ScyIKjAP|2x~VEB8A`*
zy<NF+|9aUk0Orrl>oz;}Kg$zmGUm9On~oLRv5h|o_uk*w;9%ohLq_GGWTSZBUlJFj
z8zr3mS(8!YECT00cUEG!?z$S{rR{{1hF?>`b_L6@luwqXp)*etz>t7bsSa?|JJfTD
zwnqGz{psxnL->ezz@hPRczdumV2f-@`j7qSO07Je3bAc@Mxwp%yZo*4gN9-&Je2y{
za=fjVfCS7ZVEDsgH&mu=yW|oAVmFou)0Z$hfNx-@!Q;slfwNO&Yky^6wC;7;4E6Vg
z1--e}z|UX4zyJ+LU#+8!{pKJfiN`@?ZMbmf>odkQ$tap!9jJi$P+r!>Ou3mt-T7{p
z>5emc;pEvCG+e;#RCoJZQ$pB>dei>91?m;Io}tIgb;q;9o>wc#PZXu+VzdVnJ?;(s
z>wDHJs;*YeKQAjS-9DVKu>j36dYquUpAMve#x)@{cltmN{btiIQZ7$Y#$WX9_Pyxe
z?SDbeWh<ny88q%r@Fbnw!}`ia`&WRl=}qQWhs{=~=(Nm-3x-YDK*>0#?4vT~OsISj
zPBtB(!S8Jv0EzX?WvGTtJ%PvhJcZqi+mRUr=QPEAz?N8cA=foR4ArVCbpbxLWj!#Q
zA^o0X+`0eM?w$LY8u5fiivpEn#(?-sVvVXB;}bsPTw6A`I(NDO5z5uR>1WhYtS@Rf
zecD9~JpHnfp=uH@7elo5sNslz(ypB>SEY#j`Sa&}MLL4ram+0?cpTP~0aLY(^PeNB
zXdgUix>BBedIFLbABY0_QorpMy=JxCdy1ae#miQFS<^1jt~Q1uep7xkH?w-Pi$K7!
zxwdve)1(Ed7PeU*s}*GOu&~*S_iHuC34B~i(Q6G{nEmM?JZT#si(@)m5TEgaWB&3y
z<<iGxtDdNr|A=(@^%7YKG5f7&G4xGMJ}4C{+)`0;gib@*3mSD!C6#sMljY~-<mCdB
z&d>W^9ox_4_=%V%p82p+Iv+OMJkqRTFE(H&Yto|H-uosoJkL#fl|=Zx0zB@2sQTP<
zbtoT2sqwbp<w<XUwVeS5nCS)yhb7ZfaWOt{gj^rc&Hc__PsghetYU}qMMrkOTr|Za
zt}$KM3`m)VD_MrCOO@M=XOI9^XC4`Qs`!1nECe(@@yzXMW))o?_=$n7zph?!HjY(&
z^mxgmBBFMiH`xw}ndM=N=X{faNLc~|KZ8H2Gr#lxc8bRB{m<Uhd}-puC6v>c0c7en
z>K<nqB;zvHTu1)aOa%i9NG5{xBg7k=FQqY^yY)HQ^@S!SXzDvngqBk)<9t0^hTYY$
zc0VTzn$NF14lY4JODLKMT=h27T)+RoY_-K(*4#?_aDfvu2pn;xh^$+cuf?!HmMr?D
zU2WS0CLy5%^4@71LK7`DZj+@#UoP}G(K$#*Wa(^bKbjd8v`{17b(W#Kqyn#X=)PPW
z?iA#T!g2LBBdDiSF)eCT%PC6fHsenMQI9ZT3`Y%2Q6i_5H!TVaa<4dUzgX*IlJ;4&
z;3O4}kTIwzAjHp<_^}pueiV1JiHlwXQhK3jC0V7!IQZj_7CF*4+GZyy^e|9ew92)*
z3g$6Iw0uPGETPEWT?S;FMz?sCqx6UoJRCMS?@v#1z8BukNMTxJODHKO#yR6sXoq6l
z0$ProgOIk+cVPOOM7Db<<{9)eQp*0~scIE&mGnJoIs?AT$vv1IBd8TKA0cg{%}U%Q
zZiL72Wuqo~;fU^p!{=7JLXJ+mF3Lz!`A@8riF?MF0T;e>ZxHmfpgR-pU&p%4=aWE9
z=vas%>M$1bE(^6w%K3~%Lw361jki)*?}3d5(75p1-JQ`Q<V{H5$ea489%3!QQB8zy
zkF$Rn#L^row}|kl#*ML%)vY@sVdfSD#BoKt#5nUvsDLWtg)ycC1`B1Hl%HEejGc@E
z&SGn&9w%ja$f8aAu6j&lHtQ0=_uc0L1a-t|ApG}YxjSzXDS%{|3XuL(?q|Uok9l3J
zT-QXvZG$92jPt&-#Z$HY1TetkTS_$J*G(EG(yv)@3RIq`GYYBamOlQucL~yN0Fun}
zBewJCKVJxfQ#j}NY)0+j`8RrTIl@M3FvivMl8vbWd0(Tcs<c?~Y+o#+E^RZup^)iR
zp`YjgYt@?u*U8;y*Y77?#6}h=kD?QuM#ZwqRCvyFH<<D5ffJVa-DM>n#B`<XF#Iq2
zG;BWl7*$HJ8ne`Im?15m#cJ4EqBiGd%#?ZFM^I#ZLp%%vT`3|<v7249#_rx2s6Fl4
zu$l(pJxt2$Kcd8#@Nx75`o7b0P*RO=QT4~s`CvoA<S7ZH`pzj-CE8!#8ohJiDRT|y
zv{OcifEba^=YNfrulP^v+>B01J?!jCDkrZE=J%8T+NlA1$xO$^ZiwYrX`2n6aZkb<
zS-}g%E-t{(4|Y4<7haM{>i?i{f1~Vpe^GKETUs9K?#6&9av9~7`UR?O0|z8oE=QZo
zQ?;BROybOyxN*Zr%7yB0vQD1ao$i|%JeZ8UHqq}C{E1e;zO!UCp2mx6e4)&u>xv)&
zsIdO<SDgCs(|sngt>tmgINx5gKAQc_@T%?lAEjt%{J=>7JQk%+jDX)1lW?V8HZ;;7
zKXAp3xQfZY0VdSxf9;O`z%TCO{<Y=$3)&Kx3%sf4^`nXYLWoE{{@29Cbv{e>?q55o
zA1RXST@Ic+u;adQjUQnImabozn5clic0YeuB*~8l|LjSUugMA$5?n28Xp_~Z8T1vv
z$1N)H2P+epYm$HzW*Xc3k>Sh-*k%A9%pY>d|C>Mjf7@p{rOO1?jIcBAmq0EWNGtOo
z9#uXKr_0MRoO_eZ4d!B?V2!bPz`8Mqf4bWRUjPQyY51>JI*mLOuqU-KS|}lKGYb62
zso*!Bd`|7^I>Gc5Zd&-?N^JnS#zGOQ>nx+9?_Z<eTBdz=N1>wgEKA@MEf1VsV=R_K
z9h;ul%EGmB_C{XSMo!N|lWB8<p2=UQ&t7r;EX)K1&bsnH7@*et=>nto6;IDf9<>zj
z1qWL$XphI0>zl-zy<|4n(6(|vs`%0vId3w0z%CjVdyS`Ibbk9AtOG1fSr~~0O5<ZG
zHu?__Oy>^ZMmZaV8~$q>sxSski@(wrzvjvnU8QyYu-0xKv}uz84K1zu9;EEGWTO0J
zDDM#L>B=4k+losFDjzzXQ6GE9x6TApn?G*in;a>XjW<0rIJhC*lIZu#%_PM>{Pw<l
zn8}|M;nmQL<kQaCoslte=O_(d*?5W?MU~I}cl$b@&(_8=G(~Wl$3#{_o=C7tg$#KX
zFg)sCocQiz31k}Z7MuvLzS&<x8|YXcbeFtp=D&U5mwY#`_V@e+$Sa;AnJ2E>V;LrC
z%+n-q_}xtTb~1OK`TMOnheo;#f=zM4CwhlGj~}{Gu>|k$XvU<Q)4|AYg;4G3vfngH
zD-?8=_iN?Ad;`Y0I^CN5`hbDPvSOktsU!Rk(J?@8Jc&V&|JRc~KCn-C^e3eJk8v_P
z)fd3F>F1Fi0~H7ot!2Na<B#9uk-D5<!&k3t>9$lw<sd!82!c<T%K?A8trFMVHYVNT
zKovOjb8uP@$VpHs{(Ce0pd0?U?q#V)g7j+G8&ze};>#i83rv*LfKGE<A1vnS7YRW%
z!mES&k$kEY1S8%pn!RFK06CD{2w&gFbG`%gqqgNUsk^fn0WKh44L_%#7`OYT1h3K^
z9&_l63Dh<Khva*|h)TfN7K1VsAvk9?OMG(<XAG(;ucoq83{}?eEj=Q(_#8#sUiNpu
zl~r3KAS9gok>TRl$s-!}1kX#e3d8QYlHe$IR_RK8H?ZGStlVqC{Ko*54!RsoIr@xS
z$@MY)J9p*->4j$;AhDhLAhje8R4uq(!hTdQ=zMCkIr&L!VH1ORNvS9u$WO|<E^|$H
zew~n290oI6yw2iIZn;W({3dfL5IWDepE1B^F3&vNTS|<&2(L1mo82E+VYhcAjm9Y6
zOa$+^e<5XC=ec=QH9Qj$Nb?^foQmK47?9Kb3yEZu#%bIQhK_-G>~onxU=GVTkK=D%
zKA~wll6N<Cbh;j>Um03oZ9JZIPrJ(7{KioM^c{Z+cU4vh6n;<?nuY){et=tlb^{65
zw*hA=|Gtux3~Q(tcc&~YPuJHnvo!)|j3o-_s||Gn)APvx;ul=b3LVcu^Nn7JS7euN
z(q71IUVvuwG~=)3?l;3pjBicrM4#~rtz!wnwCuh)ypOoZhumF&F6D-Fysynqql`==
znCd48>UIawnqn7hB3qINuJPu~>xgsCfBjU%-eWlK4y=0O73M?0<${)dt?)dcp!S<(
zdx~Ew_@5SZ0I)XOceY4s8_^BJF=8P`jM_vIgQJ4;IEbDI64Wai<}PQXbK<ildUs;T
zF+Xl&BFJQgdwB5~Y5qH4XKSqpdT7GQ<G5*w;UF^K4akaVe{rFJPl5hGF?5;w0q1fX
zeq+Oj#^zYBa1V40C>l7I13Nx|jbMci^Z~qss5_a|DFigy15-8e7QGv~>M(&S;1ECO
zKRB~8dc<=BUHwK1e-1`_idR9(DotilkVhV+)>n!hE#3WIFGz(~PrP|r733KK<%1)C
zl%Lce`rIOH&H^{zKDM-9NG)IoRx+r-o*I=oo_bHi(|aU(<(O0V-8iZ7D=GzKh)=J!
zT((Gj@Kk4F;&UUYz%9*MeW~?Gl93^i6ve%91kyO{+i->W*u_RwBSTtV5eR+)WBhyh
zOXP0%o1?t_aa<jT{&(Z|r(O4?p(WL>C#65G_JGTk4shrHc}N{4l?#^5<G_$^A`-7?
zie)uC7Jfr_P(JuzrZLmS>tZ0vz(W-{BjzMKKV>CwoN|c$WfhkLSY$itN0M-JzCmUM
zrQ^Ka5vdzWr?5*pfR>{Ws^TXEc}L8q`6RS*C1IsnB|ZX0BP(N^#5|7W9@{2>-05Rk
z!xts{{BY7!TVXM+@@xN6nmwCUi)BQz&IB7}%q1q`t}V*yVLc<UeQz`Vl=v)^xZH1x
zQTE#<hm~2k<Y5uX4>ecz%eQ?bo~5`?w(@T26rO?!_EiltgHA%d+y*>7UJpFN52GE}
zJ0Wq_z;#|1?czA~@a#=i^7}AK`&}k$k^-Y6({U-u(L8%D-Xxj%*G2d(05dbY?;Mgc
z&xs%$kGA0m$|g)G5}Ii|Z8_WC{YL5m>2y+LO&8;3xy9zjL+)lmi4~hToV^;yE;&-_
z$3ekz$B^giPPltUNu?7-1D^+0Y>^gh@L)|Ix+YXlZ^W<2SMUV1TF-k^wjt$>4qsAw
zJoZdVN~`P|NB`oJ&(|BdD^gHml<(9HB5Z`0TQ^<|nGehp2DRnA5Uii3{pR&h2SI1!
zW`m+|sFJAge6OX#!Vy=7VGav{c!)R0GBb7sRT{_rL2bjqUe83Ghdyj$w2cZYhyLgt
znMd_oZnCTdS~d3nXzu^XRGl1i&MPtZ$Hbd7xkE{r05GJx4#LGT1BM`IupIbh4$?ZT
zfelj8C)yFTl(?Po{jy8MJP2Bpx|Klz7-%RJka#%Pb|js+8m@U%DSsDuC9`~D3l>Te
z_YR6sc;*o_PKHu4lNmt0N*l@vl4^dJ^*)4qSut<^9#YBI38)7Y@cxU15*z*S{(pjt
zNWC>Wi+`Nqcrfn3*KZXtW54Xzaz1ffcp)1u_4!@y{Mm+kTyZ(hh%Fiwkw@6L)&P)T
zY6myi-iaZ!YC8p15Ssx|W^b?P-g=}{oj5VPFPqB!aQ)%-kUL=maql;eWGkO_0_0JL
zecHuBhGt%Fh3F69ToVymS|9yK{w$=}kvo0qjOMSpTcf7L=SF%f2TI8e`CO0ka>sEl
z6{<dz82^S%RRBiKi5vgG=qMGQF}i7HT9V|Fpt2BXv?vl2g(039Bl;8a8psDFPdPnn
z^Am<4J(8nRb++)sKnDuNm_Vq!AM_k*{4k|-5C^J0&Nvd&Ti~cKEnvH*!Bpus-Grvm
z($X^d)rcB(@3Iw=lxWYKAJpofdR3TrqYQI(I(ytE<MSKWIz4%KDpZT^0-hh5@i5;3
zC=ykQlSyBZweGtG?b%z|%`T4(fa^cq*!nKrJOjdhT=8gX`#sUbw`}ng|1HMw<|AFv
z$&|O*Jqlg6;Jv=3ocA~b5zFCPinOe|hE<Wr8+%Fb{PYAiIp-Sus<Xb#gnWv<+_3~a
z0qIMRhfHPgtP$6pG(6TtHUtE)FU~cWG>qgvBF{~%IZw*9R2i+hc}3hAo$RI6x%Dap
z#hDh<8PRyH9oC3L?<USD8>;Zq9qoKAo%ya%=EPQ6vlaa5?81IvT=|Rpuaawg@y+eo
zO6G%u<EmXzwAcBYilDkvUpimb`QA}>7WKo}AqmP@mErnf=&!-eU*L7zdGX1$Az6UA
zS3c&<pe^shDbs)kps0l}xfrFbRj<SqXW|rLbN~il6m#Klt>w%6HJGjZolcXQmjvg#
zHVplSLV_4Gsn&O`!TKCBi4U6+-QF`*+X_s_?>x|kaBFsXPfk^$!<SALw};Gb&hUq~
z9Qlts$w4B<lg=QKf#M-fs~2~U4Lj({N%_btc#Y`h_4u4$yC7M6^fOW1?z9g;=)XQv
z?#ZV;4nr4LSqs-P&Wrmv_hMNF%65o-6Gl7`Hy|x9%)?Fh*;9^Y0m)-_AF2N2tFW29
za*4YqGZTgadH>A2H2Tj=g`)=t#1_Ga#}7Rl22_g0?h^L9bUwEtKdS0z%-%Q~Gm;!O
z9ZSzLrm=1~F*ZQ)_wW45#>S8X$sbj5y$y&33O8y2v75fG_MKtEl%^7N&e01}Nz%V=
z+uL<V3Lxt*T6w}q;Wz8syA{^n1&UE%HtkN;hA^O$(s94(K?y2(t;5XGe~E%+wzIQ@
zyglR!x;&V)$er2{E${AV7DqSHJs$66b~qz;t#m^y<s{M_P3Vo(W<sAbmKN#sC1oSw
z0Lx|`G+!ju&N&uUwDl&xR`WpGBQg@$EC?l3%aFG}jtJ7XRJyd`a=oE}P1d|whQR7f
zHo{~skFeS>L{Tx_-I~M*%@VZ!G{Qs?f-pO*A##^objVl+uhYxQRhtt#C2w?O1dQ)j
zG<@^@1R}2>(yI@nW1>^T`J-a}=(KP}Ey(1V<#y`|Lt~A5%}Ht{xi(jYn#Vco+>EEJ
zH7f`dV0h+0EFfCD?MP7-QAn*1+4|l+usCG4tZ0BH5+&EJgSt9WR1_cRviYg~ho`Zx
z+!`>Bjbq2>ZIu1g7p%L7KKbjgo?N3=jI(xOx7}w~_w@|FUK*KyRU)fO**U|#s>zAN
zirPFg^UTLjVRD29v!OP{vk0cpDOBezSniI`Uh5uk-z6(U5{fXM5e>zJ1T2BDgfc=f
zdTjfSq2(SVj^(D|bRHI76zu0HuHk%$I!akDRkVzZlUuZk97ZTgGWW$oIbu$-_k}aa
zTekI$u~uKLgs*OVt;ijFfDgUU5N|Q%BV!^P2DIUq!>^lECptac<A5FK-Q{}?2=Ql#
zx-sg~o%)G0W+5LkUH90TPKlfa?-&eTa@1Kv>rrIQiOx~R_uDoHV#k8+#FT8bB3rrN
z&grcYWaX61oo7U<nsKi+rb*zyWFy5uxiX)ra{}rgXHBuQ)t`xpb%9W$Zq-_q_cLyV
zta2|NZJRR3oXvNCLeIV2#DSjlO{mA|m47M*RUpgD=NN$CYw?TQ7ay=(hluC0+f!O(
zN$Nu`-5ZeIhYHx;5A;dS)!P^oDhB;7_TyuBT26bmr)s3Xxhy}JvgbRdc9+wU9w|oN
zG=rxJ2wJ${tJ4^`pYHbAm~W-UWQghvZcb7-){R1HI!tjA4~qSW;blCbq3j>em;3=*
z7=W7u;4iNQ2Qej*gM!aOnWNwRxA{05EoQe1vty3iD<FK*@0XenW~FsS$UGjoo^4bm
zM5Zo}SL8FZ@hJ``hOq%EsfKr6Q59~{fUKjdfng%mAaar0I&Ex3Z2ho3Zwf^&zig+b
zK&{Cln@ZG!tkMcZo;JIG`99u>nV+O(@wRTybUm$r176vPO*4f??gl*K|F?Xcqs=LI
zs>rA)0}M>;X!aZ`%rMiKaP5xlL!R=Y!x+ty^%2jK!IsfpbG{9W0ZS0s!$YPpvi5zt
zpIQ@%Z_HZshwbkONaV_>>R0rYcWV&(Pmd*f8V#mE`ewNNH|xWaa>8a+CDCp<u8Z|f
zs;P_0(dlS)Ni7ekSj?a(O}J*Z6<}HvZ;T4_9lF!NN9%aule<)WeU(Ic1AHMTN-8@N
zOATNS#_bq|+0FV<*L9raRRPs#dC=nlj-|Bs;lzdl)5M-G>h7Lfd^k*CtO32?ltC-Q
z?yMKT+}3Z~J^L)GyU3YfzO%<tx*zFe2R0;GK{4JIv0hdN2iPME=Q1|6df2Nw_ANpN
z-b|L@0w}vEMP+caCq_c)<JwV$77+_%T*ZDvLT-O0GEdhGJhNy#uyv39af`7cOE$yE
zBDb-1TFLEAfLpcHJYHdOA$Bd_?gRX<FL}Ox3ot$ji%lFjRJd>yJ3h*C$H;ZFImZgS
zo2eFt;E1Si*dAi1&K<lsK8I)3AT98jBZm6)Vy8dzB=u=MNNL?2QQwz^pf|@vZ)4hx
z%N5SXLBSJpuQPy6sU<JxkVDF!g(88u5A%t`SBVWD=PA(q{=JLf)~%5DAHzo$MHf2k
zmoMM%IaeFdBw$ncHzS_eO*vh7%r0&?<yz_TSV1b7SSc=cYGZllc(FM=x8OM8S_NrF
zLam;@qWex)<V+y`n<K`748wwC71y_HLNJ@)cbqvl1{GHQpd<iRBn`O{<!MIkt<z!j
z`jhmwGcVOqku7h2(!m?iJc1b*62q5hER-{5?8q}#>;#+@$w3|#teDqU7)m1^_uM(b
zahdj>4dZX^A6U1e2IG&-0K9`%5d4*B1VTRxq467>^ykc5`j|fYMH2f=6m3YGFQgH7
z8+q~NsQ4+cjlR#%Hk>$7m))pP9NetB?Xdy9?SMirn$+#eCt%B+3@#@<05P^li7KZy
z^%0nI+22bhufz-WD{5w?Qci11y~zeq3&;k{K-Poibxh9ea1Lk81f!xRL0CasFt^3d
z*LI7YBl$N@4(mL19M=5Wmxlc6Av2yabn3FBo*bV@c3`cc67kh&3@>g)@|dxX%T9-c
zDO7%wCP>P*7LGN0;$-2BJDprYu$8yW@*2MeFgP8lP3*weH;#qc{8KiBdbxSG`zMnm
z6#6ZuAK9l=;<^#8i@=(vmh<oK?eQ-|O|e1r)4`QgOU;fd{KxQPr19_s|0}muYv~2}
z)A|iD20_pMhe46`rC`9BHD^FzfQ~&EHRRuSFn_W=br?ao6`B+-32^c{{W9Wec4)Id
z#Feao1sM1|>loUZYnQnM9`bl`Ysl(OS4PD_FQ^IExdM9~UA><0LK^{ZNd)xl_N~K2
z*mHs_XIb|FO8LcL@dWK9+@6!NDSUD{t}i@V@maPH=c89Wq5jaXi)V^e^ojNRjES}9
zjHG<0$d6nBC!3OHjWd}F+<|OH^NdiX$RpTd#OB*+73cOwD9QRksv6IM<x_$hcy1dT
z?l@DA#BxiAsiKOQ&{>Li=ZR>q?sCg%y2ckN*E-uQW)$6FKL*o2gIt|h^1@|Ui@s2Z
zp1WI%{c=}oEPD&v9fujR0A7s-#F;G$Ka)MZR*$E$xqv?93T;~ve`V}fMiki)qQ!qf
zD+MJ%5nFcilk5G!JIxG41E19|G0uEh^zEwxu*T;?Q=g)C037A=1XBzKs>73S7TovJ
zkCpQ2{So>@eHjX9S{86IRJcznLRKC~{liG5Nrb4suE2V(h6O7~fDLrVjIkPK2UZw9
z1%50?`C@G07Ljo*si6e<*3)pAZgCPidMo;UCXB$DM6faSa#b>SzqHrK19%Q=#cSIC
z6<{2rZ1XM&#h|q^lppMg(4V*~+U1f?3<5*?$~R1e;(|kE_bBoy2TH#?(pguuGBjGU
zpG$mX_Ci0)SxNGjx5?SlVF8JKo?basaqe(6ynM<@0hD{I*-k#43wdQC;TT|_BjFfg
zza-%pVSoSRfZ*Z_i^1GoBE;sILNR@z^Tn3upX2~5w+~uyiMa=w@;YzElpW)Qi+U|$
z4)4yrS{XCP#WGG(n21BHjN`ifl7PxolSj7q=Ca8L-ZQ{6W#)Klfd0zN5&jM#t`3fR
z#eBjaArspiZvjIWi({C<Id>m=gvUsN%Sypx4}+M^+Yk&H1XGPjX!n>3bOrqg*G0F+
zG?+{~v@ta6RJs)R6@=B$J9RS|M?(en9MfWhu#NMcI&R7^%=gcik*Od0lv2LKea&d|
zK8EbI<DznTN-?30>`b1K98Z3#<t-y+9;xXNX9{V*qSJhUFpJsa$1wb#={P&P?Q7*B
zGA;0w7L}Z&AVtM30Z4DSdgxNAa)zYxon$h#02mO6X1^_{XD>e>c*mWN@%*CcVR^{c
zc{*~EYN;-^At@bSo{N}tW#~-?e5EoQ1oQKk4S>BaJhU%d*SlS<Yk*nbO5Bh*qE_Rm
zy_e_vtl&g%Yj|iknb9_FlsJUHb6wsqoW*U%f?uiYTprZ-J*&ZB$JLo5!8nBFF1qwr
zanO_b>6ZTL5nH|i3vjaJz`Pj^@d2@ySf?RdI@D}byrr*ThL&&0AouWSfTI6Wbm#UP
zVliPzBnVh`xE>>Qvb*X?=X=9Fibb)H-4zHLCf*@@y6n)+m?bn6$`c6nn?lrSzDL(~
zFot;TILcGL#>bcobxWbv6NrKg#_Ag(+31$1`kS%&o_8HMOHL(qPkbt?bynb{TpzoI
zX&dNo64s}N^p-VlO2UM~6CZ*I>poVUfK!{hU8})3&1;7wJV|E0=2mRxtdL~PfHXZ$
zirZgN+2fcEV8;_LNCjL+!NlZr7Bb?*r2X{3y;Kb@EeRqX6UAXcfSFM8YsT%@K3~_v
z#h(xCNK8ySWx7$srrK%B`CA+=8=#-rT8s%rC}+y^vLiYup4YiQJ9d9v#6lo8f&ImH
zG{YQma23Z=AmBGY<j>9ZyEo*EQz4Xy`U!yCX*wiLoF$*+rcSkoMuuh@R_E@_pkSNq
zOc2C93J!Q&Pg22q4_~=$v{c)=V2-5Jrxx=Gpk;njx_7(T6G_^}SM7@{rsLr*!#Ybe
z4PDDlJ7&)3^@&~^>ZecZl8%vpjayguXTyqmP?hT$_L^I3Yc?(&>zCaLV!#3jn-V{X
z&0;(A>27V=xcuM^&skPN6X6tc7`zm;8NJysk-sO_LOgCjv>H)>0EaFzmQ17rq?#-=
zprpnRa<-{2kts+!SB~EW)Jkmlcv=3I+kHRhXFwXiX8aJ;a0?z}5&!ZP6wV)4C+18+
zF=*_If$DbDX3f_fa2N3|S>(>U9PO>?`U|l+KnDZ+YgYu^N?9a4dnT&rL8bV`6RDKK
z3pFl5wcd|}i9EW^Rc>EQn!o`V6+uIx+(>2<o&sUW+q}^2HIw8vAWcKU{pv4X&5NsD
ziZ2VLaU28}fO~`zoq9B|P^~F=T^L07iHS0cB~ImNHcII#$?BS0)$4?7(=9U)o$|ih
zVWPT)C^7+PT^#{>!B+iIvhiK(8o-GZ;Al#m5OaN0=$yobm<Z**!2Y<6*fQ0u{RKWj
z?qxSD&f$fcJbn5;d&mbvBHFL;TW$Tv$XQfer4(3ivJ>$We-5z4X67I0kJT0Qr?HNr
zNsp@;+08So^zQ!bCrbjurvkO;s;7607a3AbDdh?<S|uIOos5Bm8~L|MFCo_ol^)kx
zVkj0@HR|YF<N_y(<8w?SuGLkW@`y3Y0pZYRJt`Izy4@fm`F-D~6E;VYjOFM8PhJBR
zt`O!8?6oCw=X>9Tk@1?-%-t6}31n{N1#m{sfG^>Zj?re&lzN)NdBw{b;!}of2CWQt
z6e*#Lk7*5tZe#%I;$!qfZb#*d2CoD%=UIwNQZI`^5@u0&_C{Rs=*9dy<o8t;&Wt(X
z%FvIgy*V!jx4s$OL)={xTdl6X`2Ps76T@)8I18U6lA(fNCHQ6E!wma>jMu>!f@%H0
z>+n6V{h!C{B-`XxEBql({qM%>oSn^FevA*8uztDOZrcYWq0DT5V44GnoEJ^cfT+<v
zW3bL=@C5;2&J_Hg58Ejswt%FTPlOAYA1V(^0fs<{XFl(vMa+EIR_nM?x5AQ*x`lI|
zlQNPAywT1O3uVK%1MY=MMC(Kc`pPq#aPtrNU#vbH^l;&-4L5)k9W9&<Jm`TlJ=|-b
z!BYInm}N45eviLwNBaw#)%i;b%n^4Ah7&yG_bVDqGQ<s>pO2qG(2Teyxja^G!lxg0
z3EJGk-#gObH35ryj<0T!^a)arntiACfUr<jab#h9#wVOlgRY2pc!)n)YO0T#`%QC^
zy^mIf5OXd#t?PugCyx=2b48wEE~5m9JNWtu5zGswB9D^3j`WC_Ri+pU-2|+&8Q}tX
z@d1ED^G{oX7s`x<%*)rpv-t&J1~!;27tBn#L(f_IQ!NM+_WKSV=qDkl)f*Hsw*q)v
zRzRG#ij#woP@Ic{{eUdW{~f~XmyeelTmfhfEUOMdts<I}`*C5|{sqy1XPsG>XWzsl
z*@t`mH;N8VgdV0~{3ay5<N+A%+Y2wIHJ#8{(e*1)0A__8p|2FGk#KJ0>gd+$6_q9f
z+yW4qg)zqx0T6p8rUcW%2cj)dCQB898M|)5&cnv!jP?@U3+0V1CEi112o4Le6$4G?
zSvzaF-YY~AXhl0?r>UvlxwLcZ{MNn!rbPQJJ^<KR{5Tf!;MoDEdp3g(g{4pdB;t(t
zgQ+J^((`gaub23XmDaODeTTELKYVCNrqJ4~8BPnc{sl5Jyv$vf`kY`5yTu)7c-8@o
zYNrBYGDVZ(VwJ9W{TK>Ss9(<311h})WR{z3U%n?<UPNzanAjtVM6wvxafB?tWmh9H
z76E1UG|Fx-d@8a%0BS<IW;AD7o1FTE^i-?DWgzF0eY=A$CZ5b7(>{k(Ya!wRs<`%V
zwKL~fQf`w6oq{3Hd45AcfK0Su;ImpWgqQl;$^f^-m%J@*L%4HRzB`nFqIgXy!IabX
z?W=yqEq9@6BT1O)t|flY<HrL)6@@68f>-7JrA5h~@&eq2#JWG5#CBNN_r|ALW$eW=
zo|WMmM?j93qrSb81kNv!EVQ~J$!i}>BvFBq56&M+1{(+S4Bqm~UVc3|t#2E*J!7el
z&Jr9x**$+FL=rJ0fS@yUn%d3?H9P04O~%6u#L0u%zwN_XpVQWr)+(l<QnU@%FW3-1
z57$@h%ZOX2X#L_V<$i-}ak||zaAe~?f7&jvfY&wnt<~RGoDZ%t=W|00*a}L*{wPK7
zB2pNc=h$Y=jwGB0Q-IuhRTo6O(QUWtF>gb>h@CKf{C@fca}I0h8>RQ}!_{Ph2es+;
z#hI$&fU!<)?Oo#!#@9(=8m1TeGu&1y)DJisXX$k#YmQ$Uw=mG6<E_evn2B^(>8HEh
z7EKB*lnp*Pe0fF~;&S^=PXUwVjJKZX8EsOQ_j5gWbmQ66BtQcnh0(54_v-Phy6=gV
zDf)X1V3W8RpORQ+DDuFSXh{;N-{DR7s*vcbkWH2y37K<73;^fn>7$A}1fW_$6hp5G
zdBfM4hw0)BxdaQYGqxYbze;|!^jv%DuRXwUOr_e=^d?rEdH9ertHb*{9AR|yS>dvs
z6|+J8g`bQ;gCEIVZ@Oq(Q0w{Kk3F8BM{IopM?Q{HodNz2UZ&e{o2E?j_5cAsrX*{D
zL9PUtv5@`&`=q*+(i54;aq%Z0bD&O9iLZbr_L{9rb#xgPqcoSp*U-;>0-25$^D^5P
zJCf^M>(knFf9O8h_HW;jlxN-;oyJn#)hLFwV3hf=oM|u*i!&R$;A|AeUCPlso?3VT
z?DX*ADq3keC|KVSIQIo^O6k`(_+-=fKRO)zq?pQ5k~JP$Gz-d^Q8Lm8M=0mLW%fUV
zTARmVyJ;39bi`F^zF&&_^yXI&yN7(4@{DWu#C1n(a@!dmJz6Z8qsYO=W+@i~ihY{S
zXv-7S5_Sd*TIR!L1D7OJ(z?ZY0r9ELd8HW&Mk2YXe{<xYNCdFjPBBlT^QePSZmf}f
z$Y0oMOuzwv$hj&nMfrm|E;14t1d5;ZESU;y7rG#FGOnEg=>x8VHi%}eJK|MV!RDh|
z@WacRuxBbo^K+adw!&>AD)2WiV=v!?1O_JprbFz-Df58x8u<@#peIGPAuHXLH-JOz
zKcKC}u3HfL2^V5y7a1x54NO1gaO;W`JVt_LFdN3m1OSA)Ctl&btV(V)p))2TYcBw@
zC;$zrd(<8SIH2mS!ZPAYXK87Q1ifWP$eLOm{3B}*nP5fSA+pL8&0GX(CoU0XtCatQ
zxaxi{MFcn43;GePxA%FwE%UpegBZqwy@HR@FVp##bFMN$pH-_#{${zFpLI_KCck`@
z+HS(Todz6VZN#q<OWFW{Sz%|hyU<ink6}8wfj}#pAgwG&MxiQo{vE?I(`#1p*N*hA
zLppDYU>2sy3IRY0tKYd<tURF@fdOXIxRz2NzGt_#vpVYF^rWqeqNoK(g7w=Uzc^kk
zSBMOP+Mgi(=hLf`^XOB)taKp9=Jew8twD;qo3a?{VeLwM9JY{EELFchkXO$unDw7y
zEDPoBG(bNd&PoLw8*3dr&I?4z;bj+6=hagf=UfgTYvs#J@rjjVy-xdcp*AR#8S`@3
zn7CoYnXX~NoUUQOJjjmFmqxEh<<Yf^2vB?G-Anoms<2z3v}M7LtvW(JtSbtUG|+8p
zX?!b)fWCEO5iS=0R_A7!J978=8<u-eWzfQ_1C98QPwbw(N+%9m2opn7Q(kJF-`2kx
z8kD$lDjuuL1k$<>(RJww*;DDE=XVrCaQ1L9G`Qa|{R4_zDEB+TV^8i&W%f}8bnQ(B
zO5K4T177}RtcXn{o9B+c_WzbJxypNfs3|+w>NEv%CMql?|B3)FntDC*TwY@;@Ur6a
z`No$z8Djx*ifYYTgQA?x#TBgN&F>^wS|6syIEfo>_2%+kfP8NCJ)Sz?RC2uR4OI^%
z5-Wnuh!tH?kdE8qD%4@$vcgB^wlZ#2NHqi8Z;N>3PNs52U?zYV_O|~mrCDG^H?4S`
zFsWm&N44o44RTbnkFS&LdLaj!zZjdSSVu7urlr~i5}E3+GDqsPmIbV+PU%OpjO0%9
zuJa{VNzB+Y8NaQM&Or1+v%j>@iV1|2SVCi>Ay){gB3iM-PJM=#dnG|7Z%`^iWKKgw
zj;&oJf(M18n9VM584w@Gr<&2xvhJJBB7C>v{%92PGjVAePu)q&@B`{C(#6)JS})th
zCl50JaH~_IXWUk9Lbk-rcNK_Ip>inzp2vi7CBDW-9NNd?_^v5Kiri?QwoDu%(7CU5
zdFU5&619f#L&*K)%8pL`e!6c(ib}DE4Gb93S%8wYnYiXmDQ<`HP=@vzhqaJ201mro
z59~w#CpkFsi=U6Jng(`1Y*YjFful9TocNLpujcJl;XMfs{;Cn%ilC+f-H>+1+g`UM
zAfeBR0na99-1)gHH1b-%;OF0&Fc1j>%!aWnwxyLtbm>&3cIXG29f7+uP=Mny57kOO
zB_NjGvc#ovv@%VkxZT5KIYt~}ql6iLpz4ihBvHM<3w;evP*gA)*=VXsR2*c<DH=hJ
zs!Ha3y3;zpV+o)<0N+@6>s4iOYbP^Nptfd_Gr<_{Seil3m=T?{;^IX~xo-T71mHGn
z=OSwnHR@T3A)q&@sP~)L?NP5(n@}O>CpZJ-&*xq8@UtU;Q=vzU#?PW`x3Evk?RN8h
zd!^8jzq)Sgq{C>P85yDMd+&u>EZrSJlGN2;s$%8BZ*6-y#jlppb59M42`SQNOiB#&
zZ{_iyax7X+1=cle8GI`zP?cvwN7N|@GT+G76_?zudy2mRy|{Z-1Qd|JvryhrsaJR{
zQ89_uW_a>3MZCj~Ur8f!ZNlsrV<TN>TC2n*ZSt@vba!x~-lb|r;`{gSVA1P#Ncd0@
zcB!ZdiV+2EJI7#1$YBUY$~Qml=nz%qEJw@Zc-sDUUL`cG^*7W99+_Y5q>m0`yPwn^
z(eRX^<p8f>Z3JmZJ+$5WS!u@i?*dj%Ln^RT+Q)d*zZdIk=+7_a&emz4X4}puExDc-
zJ9$};3SPgDo=pvY4!=>S-a|TqG$k<QySHgGbNV3oAUeFC8-U6JWYS?9>Y7&@=D)A(
zROwR=UY@g0U?Z`sYHPTH+8<5o9=)Wt+n!{nAAfaw3ifE5!lwjSc>#LRCkOyDLY~0+
z3QPkG?IBqH-s@IZqhWh0k#N<7sTm~1;dkGH*{KF!>tI%F76ti19?HLX#R-GTV@iVx
z(RnVh8G1#`3(ZZFYDv<_o2h?u82^dfp)ts-*?V11MN{-ZL>_L4;gms`2UnUxBRj{d
zHOb5{`GR-bO3S})dQ~RJ+QebWP>R^QR9)u>fyWWJu(c4oCfHmPWc{)osFb@LH|LD%
zqO+=cXuH77!Ixj;Pqt?IK-3jeH@+va1kp*==Zg=X@Rg${m@a6y#T}SCbv(`FyvtgG
z73|-TY5f?c3(tJyR3I<gt&`$!9X=#dh1@<wAi8uO)?unsMMu7t>_68hE%bKroC&xt
zxK^{<4!s1xPnM1%2pEXFip0Z7L;i^~JfNPzDcmVEHSUH~l2w60P}GrzLKUCUr-q+Z
zynwrU!v5uYdDTxFo*YHKg4&k81Nl1824kAdPfO$m5?2gWQ6L5Rzmdtax&$Ahde&Da
zuQcdpA<{<$;e5OBk7lt_ieZdezS}eS7fO$9Nq;K(&_ksi34b(NtS!M#SGSd+F3A&;
zzM9LN+$lR84YS914)0(jh%|bgU!?&ME*{*e1XqTUogLsDbI!PyF;nv?#$>0NO-aOT
znBej9=OEZ6&m%|_8Oq`YVXc0gUA1fRw9l#1*|+e@-jfqAWI(OBP<?wCC$JvPTr(!u
zqWs(?Ld8#ShkT5J^berw4yFX%bCj{I5PBjq54IN1Cv9-Whw<UeHi`<4Vk>bKPo~e7
zfO33yMEy*Sz2}zuGkyW797GRMWS#hf5$t+ifM~fZ$@W~pe$6539{^c46ZP5sj0)nz
zWt2U=N_hq~_8XW(#l{)I`>)8Cf|<moLXgZ9t;kqd>8>lPUYX{v@J4N(az2X5-#92A
zzN}3p<aY-+xUDDp-|MB##_Z|k9Ur4XFDwH9Q4S&fHpwkUH!sz*8$fRW>Rx>9aE#A4
z3PK-moxUcW(eZWYQr4de(|@N*k=9r3(>Ch(*@^raxFziU!pHnI&(nIBUh4w2GO;s{
zBltWmS|lX;w{r@BMX8L7<r<Sj<hLL2W||C?><%iC>h$4<51EJVh>43{y+f<|HG2mI
zi*%bLNIv7Hj+cWEz%@JCitVj<f4x-#jy2b-T=l9N1}Z-~R*?xSCEIsh@|yDsI_)0y
zFr)Zka{LE*$Q8bhqKD!OtzD<?TP`yL7*Ap!X@%SYXzf?bagl3qz_oiEpa%e6rRvr%
zXr==$$bw()$*hlsNt0B~_es7SMI#+AMSEYl-Xd@yn5BkTf;MrKf|{Ux*R_>*lBKqd
z%yBX;KFB2bH7suYy4Dl1%rg-Yk#v?fhF5MW{3>Vhm;Ix$ej@WG-D*kMbj~^Mda@M6
zvV3OeU(@sqZ@D(WK37yw9h5f6@*lk8xX^N(GP*8grj|f+`x;2_V_E;h;h}5vj1y}y
z7m|^&#LyYgG!>0At1GYps&cYv1$D(Tl87b&w53VFzifuF@E<WiCg2E7mK*9>mR$m-
z#zI8}7a-w__Y;Hu<;gL2{0y&z2L}DujHFo8WW|j(AQ9hY-biGaF{H5Wls3G6{TjXy
z&+GW{7gj0lU$IKpoFS70<Q5?$qq`w?HMpp8D3>$B5cGlS<;5m8eCJB4Nh)wl-!Z2D
zm0P5)U~5FjV}p}0iPw?Ck0;H}nEStKHd~Zlk8^|<lY3Ojwh8}jxH#1-AKiG^=Um`X
z7gfT5cVq<vReqz%JfS3&Gh;H<PH{2KpPa?7`iGh7dg5Foo380Uy?Qt|jqlQuh#Yr~
zvl4O);FTZ*N`riz0CNE#^A~pW87(;^`daVe2$U!I$0z`%7~J%XuN2=Bgo_P@3ZN~9
zLaK=RoTSMZ0T)&LRC8`_v4r${Bq2xBF1=u4Pbq(H_l@xi;H##)fU{qN5w4|w_=s<P
z6;Ba0Sy8<@1>bT2v>#?zyt5&Fa}`2K&q(qUc>q|0EqGpR%;bKtrb8l%*vCXH9&TPI
zw{leE_0unSWyp!3&IH~?%<t|tVMq@>Fr2+$q|!TSR|JGdY|`_ApUgF#5Ji@a-!!Ki
z;dGpaL0DnX?iN2xR@e=ovho2o1)ps(GaFm9`z7(OPwQVGBe%pg5CAMeESsxYA6sFO
zD_+d4UV%r7S%eIe91g)jqfqU;)6B7~0N`i);K}5RE(Z6qzpW_i<yoOlQ&8g{1?aD;
z(QEI&<wQ(}+;Bm*k!)-K>}d)VQ;MXF(z9a3NrYp^4u>NH+=2SlHr~jOMHNNZE`8Nb
zGZfdyk!z0%z{R1do*OAnz<ZCdLxRR2HLss}pv6=5l?Bo%b$c8z1Xt?ucn_R^@e3`X
zl*ih3%3)hO+pOJE4`byw1q0L)Kpb*yZG0=q_+i2m$%v$TCR@HZ0ZD^Kgq2X8d&(2Z
zgg!A`+S?wD&LrMOXoiW+y`?EG^9N-|Vf=uBp1$=NV|^y_g%tq4`Ri$)NYX$?cP*o#
z4A1oL>C&!)nud$}foc=$u=~0~>kw>a%IJ8f8TX$}0qhb$Pn<J=gI9`;xVc{9y(6vy
zM|kRO8v~WI@reJf`2GR4o|===tNlTf72|Eff3jp4t%M%;0v4p}Kz1z`c;<|lZbCtu
zug8k@5dfzm%R?e44R8||P!nSLAL3K}23TBo!WBFMuyqZ{sZs>u2&>)72q83&yTpBJ
zh8Z9-z{zGcUtSQx@#O;n`hWVh-#~?*j{-cLbw6z2cX+C;=<Zzolb^l=x%#=Ez!9L;
z*X`Hd{{vb1^?&K@S9Gr5e3!rb>3_iwGwNXmWLO-eerfgQJ-%gs{scE~Nj})Gex3zg
z`#>Z%L*~o=!XOU|YuA&$w0M#q1c1NajPVX;fLaL(M!>Ye2dH=DD?1qv4LWNp^~$^0
zn=Dfmi7NHB3!haZI+!m<Kp;k+gr}^JHDfo^e%R>&_uJ0_0%|3r84KMM^P$`S7Brr4
z(AQN$@w)66VdY(AVoz!ulEWJLpjI98qsPXupG=#7^sq!hxiITDzgUjC<=1V%g?cIS
z$LRlSJJxQxUe9iS>fwhht~XCJe$Hh(x$RC$(3)FvXZW`J-d&{hEnfw(4-|AF5J#2g
zB{r1_k{2(WVNP~%n#ooD^xe^h3KPw9MJY3K+?;0bk7^H)<mYE=0q#Z9hQ=E>Qh-NB
z+4KhRUS1gb$oKMuw0f50o^<)s0=Ir}0B<I<6<#O9TYP#}gfH7)T{aaRL^OipSHJUK
z)5b$vpL0xK*|C7PL*2I3+wxS-4!zx1e`M6NPdoVf@jUn`CeSbg9wZaepKwOUIlwh{
z?FDBc(D5oe-4@OJ8gu$$jm}}<88SYu8%`<&r>vX4w$_6KGoi*6*)?rU=lydy_i?Ty
z+vY>pPemB>PAiK0dgrv|?Ru8!ymI1O;^rtOVT-D42bOY76Om5JK#rJBMo%ZA6@!mU
zpmsh1)=n3z6m?yX$27kDG0$r&-+r62XQEd`cdy+ZWPR-^@9$g*-p7wCpH<!1nkjoW
z@!Hp|`P|I8dv&BR)BE~Qk^-yV=&C91@Gkkj?qsu8;_6C+58utCl7W}t#Gln^dB1G#
zvW?}+`ERe98r<8p@7SI<r}L#mV2A2Jle_xV|AIYNIWnf^9*Bt0{{LXz&1UVqvqx4G
zwSMEevn>6r*^;j%QWIk8mnj?c?si<XpE<3?l%MU|R|SvY%L{(CnfUxFPrX#d=06{H
z>J2PQ#(mM+%gDKE&fA$B`z<eS=2-Udf_B>T_S;S~87|w*xSVn9P?p1+$3C+EjWlf1
z9Nt*?_N;S1eY+xQ-L@ED1Eje24VxO|v?$~V49#OsT7BWIXzqef{J``7PBm<}De!pv
z)f9nmo7x;VO0)Ri*!pt&#-3ZBqORFb2^3@&Ldw?{i-RhG=R2H?_HAv_dcNsY!;RjC
zyA2V~vn8LKux?A`Yc)Inpodd;@y<JaPq*qQpS?b(UqayGV`!5AXwb(+h;uhTELwgr
z<c!p|GtFBcE#<OIu&7WLxYTfCvs4*#lI-*UZ|C@LP%Lzh7F)fHO;Y`I)#aLq!%NSH
zpWhYXH1#RU2|wU1+~C25^`BB5wsg%ml$W~3Wp8m>a0=@NX}0DGY)6(Ym*fm~zRWGb
zyZR(>AMdYE!0T!GVy5{=m#=<!;meuah5GW_|2V#0*YW!AYJ_XSRn6)WHkb1}0Z;RJ
zy;IjpiX`t?Yjn+*nKeH_hOOmn)eEVr$Nt@nfuei<>&{S^oFKuRyeq+2D1z_x9_G`T
zoR^mTyusU6THE|g+5vb5LLs#M0c`G8TwMJn{~*W2$(WH&g^B=26$5J6*&@d$sKiD-
z^8l9ePA+-A*hvTqo=PHi$AcT{Kmv5u5d72zSgXqDCHRy`m>RI~z$!!;C<7)D@QF~c
z^a5Ny100M()LI}G(mr2ANO`Kk_NF7kZr+oN%>U{$PrfpmF**Aa0}yz+`njxgN@xNA
DfAl1%

literal 0
HcmV?d00001

diff --git a/docs/interfaces/bond.rst b/docs/interfaces/bond.rst
index 396242ae..9e67809a 100644
--- a/docs/interfaces/bond.rst
+++ b/docs/interfaces/bond.rst
@@ -395,6 +395,121 @@ with two interfaces from VyOS to a Aruba/HP 2510G switch.
   vlan 10 tagged Trk1
   vlan 100 tagged Trk1
 
+Arista EOS
+^^^^^^^^^^
+
+When utilizing VyOS in an environment with Arista gear you can use this blue
+print as an initial setup to get an LACP bond / port-channel operational between
+those two devices.
+
+Lets assume the following topology:
+
+.. figure:: /_static/images/vyos_arista_bond_lacp.png
+   :alt: VyOS Arista EOS setup
+
+**R1**
+
+  .. code-block:: none
+
+     interfaces {
+         bonding bond10 {
+             hash-policy layer3+4
+             member {
+                 interface eth1
+                 interface eth2
+             }
+             mode 802.3ad
+             vif 100 {
+                 address 192.0.2.1/30
+                 address 2001:db8::1/64
+             }
+         }
+
+**R2**
+
+  .. code-block:: none
+
+     interfaces {
+         bonding bond10 {
+             hash-policy layer3+4
+             member {
+                 interface eth1
+                 interface eth2
+             }
+             mode 802.3ad
+             vif 100 {
+                 address 192.0.2.2/30
+                 address 2001:db8::2/64
+             }
+         }
+
+**SW1**
+
+  .. code-block:: none
+
+     !
+     vlan 100
+        name FOO
+     !
+     interface Port-Channel10
+        switchport trunk allowed vlan 100
+        switchport mode trunk
+        spanning-tree portfast
+     !
+     interface Port-Channel20
+        switchport mode trunk
+        no spanning-tree portfast auto
+        spanning-tree portfast network
+     !
+     interface Ethernet1
+        channel-group 10 mode active
+     !
+     interface Ethernet2
+        channel-group 10 mode active
+     !
+     interface Ethernet3
+        channel-group 20 mode active
+     !
+     interface Ethernet4
+        channel-group 20 mode active
+     !
+
+**SW2**
+
+  .. code-block:: none
+
+     !
+     vlan 100
+        name FOO
+     !
+     interface Port-Channel10
+        switchport trunk allowed vlan 100
+        switchport mode trunk
+        spanning-tree portfast
+     !
+     interface Port-Channel20
+        switchport mode trunk
+        no spanning-tree portfast auto
+        spanning-tree portfast network
+     !
+     interface Ethernet1
+        channel-group 10 mode active
+     !
+     interface Ethernet2
+        channel-group 10 mode active
+     !
+     interface Ethernet3
+        channel-group 20 mode active
+     !
+     interface Ethernet4
+        channel-group 20 mode active
+     !
+
+.. note:: When using EVE-NG to lab this environment ensure you are using e1000
+   as the desired driver for your VyOS network interfaces. When using the regular
+   virtio network driver no LACP PDUs will be sent by VyOS thus the port-channel
+   will never become active!
+
 Operation
 #########
 

From 7a132cdfdb02fde126c3b5dcda47362ab2331450 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Tue, 15 Sep 2020 02:13:07 +0200
Subject: [PATCH 020/295] configuration overview: add missing contents from old
 wiki.

Add commands: commit-confirm, copy, rename, show system commit diff <number>.
Add few little clarifications too.
---
 docs/configuration-overview.rst | 142 ++++++++++++++++++++++++++++++--
 1 file changed, 133 insertions(+), 9 deletions(-)

diff --git a/docs/configuration-overview.rst b/docs/configuration-overview.rst
index ee7f63a2..653c1b6e 100644
--- a/docs/configuration-overview.rst
+++ b/docs/configuration-overview.rst
@@ -15,18 +15,18 @@ Terminology
 
 A VyOS system has three major types of configurations:
 
-* **Active** or **Running** configuration is the system configuration
+* **Active** or **running configuration** is the system configuration
   that is loaded  and currently active (used by VyOS). Any change in
   the configuration will have to be committed to belong to the
   active/running configuration.
 
-* **Working** - is the configuration which is currently being modified
+* **Working configuration** is the one that is currently being modified
   in configuration mode. Changes made to the working configuration do
   not go into effect until the changes are committed with the
   :cfgcmd:`commit` command. At which time the working configuration will
   become the active or running configuration.
 
-* **Saved** - is a configuration saved to a file using the
+* **Saved configuration** is the one saved to a file using the
   :cfgcmd:`save` command. It allows you to keep safe a configuration for
   future uses. There can be multiple configuration files. The default or
   "boot" configuration is saved and loaded from the file
@@ -295,9 +295,13 @@ entered.
   [edit]
   vyos@vyos# set interface ethernet eth0 address 192.0.2.100/24
 
+
+.. code-block:: none
+
   [edit interfaces ethernet eth0]
   vyos@vyos# set address 203.0.113.6/24
 
+
 These two commands above are essentially the same, just executed from
 different levels in the hierarchy.
 
@@ -369,6 +373,105 @@ different levels in the hierarchy.
      [edit]
      vyos@vyos# exit discard
 
+
+.. cfgcmd:: commit-confirm
+
+   Commit the current set of changes if ``confirm`` is also entered
+   within 10 minutes. Otherwise the system reboot into the previous
+   configuration.
+
+
+   What if you are doing something dangerous? Suppose you want to setup
+   a firewall, and you are not sure there are no mistakes that will lock
+   you out of your system. You can use confirmed commit. If you issue
+   the ``commit-confirm`` command, your changes will be commited, and if
+   you don't issue issue the ``confirm`` command in 10 minutes, your
+   system will reboot into previous config revision.
+
+   .. code-block:: none
+   
+      vyos@router# set interfaces ethernet eth0 firewall local name FromWorld
+      vyos@router# commit-confirm 
+      commit confirm will be automatically reboot in 10 minutes unless confirmed
+      Proceed? [confirm]y
+      [edit]
+      vyos@router# confirm 
+      [edit]
+
+
+   .. note:: A reboot because you did not enter ``confirm`` will not
+      take you necessarily to the *saved configuration*, but to the
+      point before the unfortunate commit.
+
+
+.. cfgcmd:: copy
+
+   Copy a configuration element.
+
+   You can copy and remove configuration subtrees. Suppose you set up a
+   firewall ruleset ``FromWorld`` with one rule that allows traffic from
+   specific subnet. Now you want to setup a similar rule, but for
+   different subnet. Change your edit level to
+   ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then
+   modify rule 20.
+
+
+   .. code-block:: none
+   
+      vyos@router# show firewall name FromWorld 
+       default-action drop
+       rule 10 {
+           action accept
+           source {
+               address 203.0.113.0/24
+           }
+       }
+      [edit]
+      vyos@router# edit firewall name FromWorld 
+      [edit firewall name FromWorld]
+      vyos@router# copy rule 10 to rule 20
+      [edit firewall name FromWorld]
+      vyos@router# set rule 20 source address 198.51.100.0/24
+      [edit firewall name FromWorld]
+      vyos@router# commit
+      [edit firewall name FromWorld]
+
+
+.. cfgcmd:: rename
+
+   Rename a configuration element.
+
+   You can also rename config subtrees:
+
+   .. code-block:: none
+   
+      vyos@router# rename rule 10 to rule 5
+      [edit firewall name FromWorld]
+      vyos@router# commit
+      [edit firewall name FromWorld]
+
+   Note that ``show`` command respects your edit level and from this
+   level you can view the modified firewall ruleset with just ``show``
+   with no parameters.
+
+   .. code-block:: none
+   
+      vyos@router# show 
+       default-action drop
+       rule 5 {
+           action accept
+           source {
+               address 203.0.113.0/24
+           }
+       }
+       rule 20 {
+           action accept
+           source {
+               address 198.51.100.0/24
+           }
+       }
+   
+
 .. _run_opmode_from_config_mode:
 
 Access opmode from config mode
@@ -451,12 +554,13 @@ any previous revisions if something goes wrong.
          9	   2013-12-12 15:42:07 root by boot-config-loader
          10   2013-12-12 15:42:06 root by init
 
-   Revisions can be compared with :cfgcmd:`compare N M` command, where N
-   and M are revision numbers. The output will describe how the
-   configuration N is when compared to YM indicating with a plus sign
-   (``+``) the additional parts N has when compared to M, and indicating
-   with a minus sign (``-``) the lacking parts N misses when compared to
-   Y.
+   The command :cfgcmd:`compare` allows you to compare different type of
+   configurations. It also lets you compare different revisions through
+   the :cfgcmd:`compare N M` command, where N and M are revision
+   numbers. The output will describe how the configuration N is when
+   compared to M indicating with a plus sign (``+``) the additional
+   parts N has when compared to M, and indicating with a minus sign
+   (``-``) the lacking parts N misses when compared to M.
 
    .. code-block:: none
 
@@ -473,6 +577,26 @@ any previous revisions if something goes wrong.
      -    address 192.0.2.4/24
      -}
 
+
+.. opcmd:: show system commit diff <number>
+
+   Show commit revision difference.
+
+
+The command above also lets you see the difference between two commits.
+By default the difference with the running config is shown.
+
+.. code-block:: none
+
+   vyos@router# run show system commit diff 4
+   [edit system]
+   +ipv6 {
+   +    disable-forwarding
+   +}
+
+This means four commits ago we did ``set system ipv6 disable-forwarding``.
+
+
 .. cfgcmd:: set system config-management commit-revisions <N>
 
    You can specify the number of revisions stored on disk. N can be in

From fc94b0cfd7682fc9eacc4fbe506cd55744759703 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Tue, 15 Sep 2020 10:28:07 +0200
Subject: [PATCH 021/295] qos: improve hint on choosing policy

---
 docs/qos.rst | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/docs/qos.rst b/docs/qos.rst
index a4e56665..3cd183cf 100644
--- a/docs/qos.rst
+++ b/docs/qos.rst
@@ -336,12 +336,11 @@ you will only be able to apply one policy per interface and direction
 Some policies can be combined, you will be able to embed_ a different
 policy that will be applied to a class of the main policy. 
 
-.. hint:: If you are looking for a policy for your outbound traffic but
-   you do not know what policy you need, you might consider FQ-CoDel_ as
-   your multipurpose nearly-no-configuration low-delay fair-queue
-   policy; if delay does not worry you and you want to manually allocate
-   bandwidth shares to specific traffic, then you should consider
-   Shaper_.
+.. hint:: **If you are looking for a policy for your outbound traffic**
+   but you don't know which one you need and you don't want to go
+   through every possible policy shown here, **our bet is that highly
+   likely you are looking for a** Shaper_ **policy and you want to**
+   :ref:`set its queues <embed>` **as FQ-CoDel**.
 
 Drop Tail
 ---------

From 6782d740ea3b4660606b92b5fc5b069209e9308d Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Tue, 15 Sep 2020 13:36:41 +0200
Subject: [PATCH 022/295] image management: create system rollback subsection

---
 docs/image-mgmt.rst | 26 +++++++++++++++++++-------
 1 file changed, 19 insertions(+), 7 deletions(-)

diff --git a/docs/image-mgmt.rst b/docs/image-mgmt.rst
index 6c1b2587..143d02b2 100644
--- a/docs/image-mgmt.rst
+++ b/docs/image-mgmt.rst
@@ -26,7 +26,7 @@ This process allows for a system to always boot to a known working state, as
 the OS image is fixed and non-persistent. It also allows for multiple releases
 of VyOS to be installed on the same storage device. The image can be selected
 manually at boot if needed, but the system will otherwise boot the image
-configured to be the default (:opcmd:`set system image default-boot`).
+configured to be the default.
 
 .. opcmd:: show system image
 
@@ -41,12 +41,6 @@ configured to be the default (:opcmd:`set system image default-boot`).
         2: 1.2.0-rolling+201810021217
         3: 1.2.0-rolling+201809252218
 
-.. opcmd:: set system image default-boot
-
-   Select the default boot image which will be started on the next boot of the
-   System. A list of available images can be shown using the :opcmd:`show
-   system image`
-
 
 .. opcmd:: delete system image [image-name]
 
@@ -177,5 +171,23 @@ After reboot you might want to verify the version you are running with
 the :opcmd:`show version` command.
 
 
+System rollback
+===============
 
+If you need to rollback to a previous image, you can easily do so. First
+check the available images through the :opcmd:`show system image`
+command and then select your image with the following command:
 
+.. opcmd:: set system image default-boot [image-name]
+
+   Select the default boot image which will be started on the next boot
+   of the system.
+
+Then reboot the system.
+
+.. note:: VyOS automatically associates the configuration to the image,
+   so you don't need to worry about that. Each image has a unique copy
+   of its configuration.
+
+If you have access to the console, there is a another way to select
+your booting image: reboot and use the GRUB menu at startup.

From e17f32e74345742d9920b055a351bea9005db49d Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Wed, 16 Sep 2020 12:40:22 +0200
Subject: [PATCH 023/295] configuration overview: create subsection for compare
 configurations

---
 docs/configuration-overview.rst | 23 +++++++++++++++++------
 1 file changed, 17 insertions(+), 6 deletions(-)

diff --git a/docs/configuration-overview.rst b/docs/configuration-overview.rst
index 653c1b6e..f8593c95 100644
--- a/docs/configuration-overview.rst
+++ b/docs/configuration-overview.rst
@@ -529,9 +529,24 @@ any previous revisions if something goes wrong.
      6   2015-03-25 00:16:47 by vyos via cli
      7   2015-03-24 23:43:45 by root via boot-config-loader
 
+
+.. cfgcmd:: set system config-management commit-revisions <N>
+
+   You can specify the number of revisions stored on disk. N can be in
+   the range of 0 - 65535. When the number of revisions exceeds the
+   configured value, the oldest revision is removed. The default setting
+   for this value is to store 20 revisions locally.
+
+
+Compare configurations
+----------------------
+
+VyOS lets you compare different configurations.
+
 .. cfgcmd:: compare <saved | N> <M>
 
-   Compare difference in configuration revisions.
+   Use this command to spot what the differences are between different
+   configurations.
 
    .. code-block:: none
 
@@ -597,12 +612,8 @@ By default the difference with the running config is shown.
 This means four commits ago we did ``set system ipv6 disable-forwarding``.
 
 
-.. cfgcmd:: set system config-management commit-revisions <N>
 
-   You can specify the number of revisions stored on disk. N can be in
-   the range of 0 - 65535. When the number of revisions exceeds the
-   configured value, the oldest revision is removed. The default setting
-   for this value is to store 20 revisions locally.
+
 
 Rollback Changes
 ----------------

From 64a4ac7b7935b9fa3dbd0bb54269be8f346b0a76 Mon Sep 17 00:00:00 2001
From: currite <53279076+currite@users.noreply.github.com>
Date: Wed, 16 Sep 2020 13:36:13 +0200
Subject: [PATCH 024/295] Update configuration-overview.rst

---
 docs/configuration-overview.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/configuration-overview.rst b/docs/configuration-overview.rst
index f8593c95..06c86e9d 100644
--- a/docs/configuration-overview.rst
+++ b/docs/configuration-overview.rst
@@ -535,7 +535,7 @@ any previous revisions if something goes wrong.
    You can specify the number of revisions stored on disk. N can be in
    the range of 0 - 65535. When the number of revisions exceeds the
    configured value, the oldest revision is removed. The default setting
-   for this value is to store 20 revisions locally.
+   for this value is to store 100 revisions locally.
 
 
 Compare configurations

From 1c2a5fb508616131917dfa5146306093cbb1c177 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Wed, 16 Sep 2020 13:59:24 +0200
Subject: [PATCH 025/295] configuration overview: add set and comment to
 editing subsection

---
 docs/configuration-overview.rst | 90 ++++++++++++++++++---------------
 1 file changed, 48 insertions(+), 42 deletions(-)

diff --git a/docs/configuration-overview.rst b/docs/configuration-overview.rst
index 06c86e9d..85abbfce 100644
--- a/docs/configuration-overview.rst
+++ b/docs/configuration-overview.rst
@@ -12,7 +12,7 @@ files.
 
 Terminology
 ===========
-
+live
 A VyOS system has three major types of configurations:
 
 * **Active** or **running configuration** is the system configuration
@@ -240,53 +240,21 @@ sub-level takes you back to the top level.
   vyos@vyos# exit
   Warning: configuration changes have not been saved.
 
-Comment
--------
-
-.. cfgcmd:: comment <config node> "comment text"
-
-   Add comment as an annotation to a configuration node.
-
-   The ``comment`` command allows you to insert a comment above the
-   ``<config node>`` configuration section. When shown, comments are
-   enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments
-   need to be commited, just like other config changes.
-
-   To remove an existing comment from your current configuration,
-   specify an empty string enclosed in double quote marks (``""``) as
-   the comment text.
-
-   Example:
-
-   .. code-block:: none
-
-     vyos@vyos# comment firewall all-ping "Yes I know this VyOS is cool"
-     vyos@vyos# commit
-     vyos@vyos# show
-      firewall {
-          /* Yes I know this VyOS is cool */
-          all-ping enable
-          broadcast-ping disable
-          ...
-      }
-
-   .. note:: An important thing to note is that since the comment is
-      added on top of the section, it will not appear if the ``show
-      <section>`` command is used. With the above example, the `show
-      firewall` command would return starting after the ``firewall
-      {`` line, hiding the comment.
-
-
 
 Editing the configuration
 =========================
 
 The configuration can be edited by the use of :cfgcmd:`set` and
-:cfgcmd:`delete` commands from within configuration mode. Configuration
-commands are flattened from the tree into 'one-liner' commands shown in
-:opcmd:`show configuration commands` from operation mode.
+:cfgcmd:`delete` commands from within configuration mode.
 
-Commands are relative to the level where they are executed and all
+.. cfgcmd:: set
+
+   Use this command to set the value of a parameter or to create a new
+   element.
+
+Configuration commands are flattened from the tree into 'one-liner'
+commands shown in :opcmd:`show configuration commands` from operation
+mode. Commands are relative to the level where they are executed and all
 redundant information from the current level is removed from the command
 entered.
 
@@ -470,6 +438,44 @@ different levels in the hierarchy.
                address 198.51.100.0/24
            }
        }
+
+
+.. cfgcmd:: comment <config node> "comment text"
+
+   Add comment as an annotation to a configuration node.
+
+   The ``comment`` command allows you to insert a comment above the
+   ``<config node>`` configuration section. When shown, comments are
+   enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments
+   need to be commited, just like other config changes.
+
+   To remove an existing comment from your current configuration,
+   specify an empty string enclosed in double quote marks (``""``) as
+   the comment text.
+
+   Example:
+
+   .. code-block:: none
+
+     vyos@vyos# comment firewall all-ping "Yes I know this VyOS is cool"
+     vyos@vyos# commit
+     vyos@vyos# show
+      firewall {
+          /* Yes I know this VyOS is cool */
+          all-ping enable
+          broadcast-ping disable
+          ...
+      }
+
+   .. note:: An important thing to note is that since the comment is
+      added on top of the section, it will not appear if the ``show
+      <section>`` command is used. With the above example, the `show
+      firewall` command would return starting after the ``firewall
+      {`` line, hiding the comment.
+
+
+
+
    
 
 .. _run_opmode_from_config_mode:

From 96f91545fa05efedd7bfdc7a4dfceffb69362ff7 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Thu, 17 Sep 2020 13:32:10 +0200
Subject: [PATCH 026/295] mss-clamping: remove unnecessary disable commnad, add
 directives and explanations

---
 docs/routing/mss-clamp.rst | 47 +++++++++++++++++++++++++++-----------
 1 file changed, 34 insertions(+), 13 deletions(-)

diff --git a/docs/routing/mss-clamp.rst b/docs/routing/mss-clamp.rst
index 923b1338..a4edf1c6 100644
--- a/docs/routing/mss-clamp.rst
+++ b/docs/routing/mss-clamp.rst
@@ -1,24 +1,36 @@
-.. include:: ../_include/need_improvement.txt
-
 .. _routing-mss-clamp:
 
 TCP-MSS Clamping
 ----------------
 
-As Internet wide PMTU discovery rarely works we sometimes need to clamp our TCP
-MSS value to a specific value. Starting with VyOS 1.2 there is a firewall option
-to clamp your TCP MSS value for IPv4 and IPv6.
+As Internet wide PMTU discovery rarely works, we sometimes need to clamp
+our TCP MSS value to a specific value. This is a field in the TCP
+Options part of a SYN packet. By setting the MSS value, you are telling
+the remote side unequivocally 'do not try to send me packets bigger than
+this value'.
 
-Clamping can be disabled per interface using the `disable` keyword:
+Starting with VyOS 1.2 there is a firewall option to clamp your TCP MSS
+value for IPv4 and IPv6.
 
-.. code-block:: none
 
-  set firewall options interface pppoe0 disable
+.. note:: MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting
+   in 1452 bytes on a 1492 byte MTU.
+
 
 IPv4
 ^^^^
 
-Clamp outgoing MSS value in a TCP SYN packet to `1452` for `pppoe0` and `1372`
+.. cfgcmd:: set firewall options interface <interface> adjust-mss <number-of-bytes>
+
+   Use this command to set the maximum segment size for IPv4 transit
+   packets on a specific interface (500-1460 bytes).
+
+
+Example
+"""""""
+
+Clamp outgoing MSS value in a TCP SYN packet to `1452` for `pppoe0` and
+`1372`
 for your WireGuard `wg02` tunnel.
 
 .. code-block:: none
@@ -29,15 +41,24 @@ for your WireGuard `wg02` tunnel.
 IPv6
 ^^^^^
 
+.. cfgcmd:: set firewall options interface <interface> adjust-mss6 <number-of-bytes>
+
+   Use this command to set the maximum segment size for IPv6 transit
+   packets on a specific interface (1280-1492 bytes).
+
+
+Example
+"""""""
+
 Clamp outgoing MSS value in a TCP SYN packet to `1280` for both `pppoe0` and
 `wg02` interface.
 
-To achieve the same for IPv6 please use:
-
 .. code-block:: none
 
   set firewall options interface pppoe0 adjust-mss6 '1280'
   set firewall options interface wg02 adjust-mss6 '1280'
 
-.. note:: MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in 1452
-          bytes on a 1492 byte MTU.
+
+
+.. hint:: When doing your byte calculations, you might find useful this
+   `Visual packet size calculator <https://baturin.org/tools/encapcalc/>`_.

From fe6e27c2c4a767e949669ab55b91387d5adb626d Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Thu, 17 Sep 2020 14:46:59 +0200
Subject: [PATCH 027/295] configuration-overview: fix commit-confirm definition

---
 docs/configuration-overview.rst | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/docs/configuration-overview.rst b/docs/configuration-overview.rst
index 06c86e9d..680198da 100644
--- a/docs/configuration-overview.rst
+++ b/docs/configuration-overview.rst
@@ -374,11 +374,12 @@ different levels in the hierarchy.
      vyos@vyos# exit discard
 
 
-.. cfgcmd:: commit-confirm
+.. cfgcmd:: commit-confirm <minutes>
 
-   Commit the current set of changes if ``confirm`` is also entered
-   within 10 minutes. Otherwise the system reboot into the previous
-   configuration.
+   Use this command to temporarily commit your changes and set the
+   number of minutes available for validation. ``confirm`` must
+   be entered within those minutes, otherwise the system will reboot
+   into the previous configuration. The default value is 10 minutes.
 
 
    What if you are doing something dangerous? Suppose you want to setup

From f9cfad8e8fe0e807488b56c8cd55595da7d61c28 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Fri, 18 Sep 2020 01:44:16 +0200
Subject: [PATCH 028/295] nptv6: replace outside-interface command with
 outbound-interface command

---
 docs/nptv6.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/nptv6.rst b/docs/nptv6.rst
index dc725a03..f4e08325 100644
--- a/docs/nptv6.rst
+++ b/docs/nptv6.rst
@@ -45,10 +45,10 @@ NPTv6 support has been added in VyOS 1.2 (Crux) and is available through
 .. code-block:: none
 
   set rule 10 source prefix 'fc00:dead:beef::/48'
-  set rule 10 outside-interface 'eth1'
+  set rule 10 outbound-interface 'eth1'
   set rule 10 translation prefix '2001:db8:e1::/48'
   set rule 20 source prefix 'fc00:dead:beef::/48'
-  set rule 20 outside-interface 'eth2'
+  set rule 20 outbound-interface 'eth2'
   set rule 20 translation prefix '2001:db8:e2::/48'
 
 Resulting in the following ip6tables rules:

From f95ed893ca04a00eafdb665947fdc2c38d4ab397 Mon Sep 17 00:00:00 2001
From: Eron Lloyd <eronlloyd@users.noreply.github.com>
Date: Sat, 19 Sep 2020 12:04:04 -0400
Subject: [PATCH 029/295] Update quick-start.rst

Adding a few minor edits to clean up the descriptions and add some consistency to them.
---
 docs/quick-start.rst | 52 ++++++++++++++++++++++++++++++--------------
 1 file changed, 36 insertions(+), 16 deletions(-)

diff --git a/docs/quick-start.rst b/docs/quick-start.rst
index 19ee9f6e..550bfd77 100644
--- a/docs/quick-start.rst
+++ b/docs/quick-start.rst
@@ -4,7 +4,7 @@
 Quick Start
 ###########
 
-This chapter will guide you on how to get up to speed using your new VyOS
+This chapter will guide you on how to get up to speed quickly using your new VyOS
 system. It will show you a very basic configuration example that will provide
 a :ref:`nat` gateway for a device with two network interfaces (`eth0` and
 `eth1`).
@@ -14,6 +14,10 @@ a :ref:`nat` gateway for a device with two network interfaces (`eth0` and
 Configuration Mode
 ##################
 
+By default, VyOS is in operational mode, and the command prompt displays a `$`. To configure VyOS,
+you will need to enter configuration mode, resulting in the command prompt displaying a `#`, as
+demonstrated below:
+
 .. code-block:: none
 
   vyos@vyos$ configure
@@ -22,13 +26,13 @@ Configuration Mode
 Commit and Save
 ################
 
-After every configuration change you need to apply the changes by using the
+After every configuration change, you need to apply the changes by using the following command:
 
 .. code-block:: none
 
   commit
 
-Once your configuration works as expected you can save it permanently.
+Once your configuration works as expected, you can save it permanently by using the following command:
 
 .. code-block:: none
 
@@ -37,9 +41,9 @@ Once your configuration works as expected you can save it permanently.
 Interface Configuration
 #######################
 
-* Your outside/WAN interface will be `eth0`, it receives it's interface address
-  be means of DHCP.
-* Your internal/LAN interface is `eth1`. It uses a fixed IP address of
+* Your outside/WAN interface will be `eth0`. It will receive its interface address
+  via DHCP.
+* Your internal/LAN interface will be `eth1`. It will use a static IP address of
   `192.168.0.1/24`.
 
 After switching to :ref:`quick-start-configuration-mode` issue the following
@@ -69,14 +73,17 @@ on specific addresses only.
 Configure DHCP/DNS Servers
 ##########################
 
-* Provide DHCP service on your internal/LAN network where VyOS will act
-  as the default gateway and DNS server.
-* Client IP addresses are assigned from the range ``192.168.0.9 -
-  192.168.0.254``
+The following settings will configure DHCP and DNS services on your internal/LAN network,
+where VyOS will act as the default gateway and DNS server.
+
+* The default gateway and DNS recursor address will be `192.168.0.1/24`
+* The address range `192.168.0.2/24 - 192.168.0.8/24` will be reserved for static assignments
+* DHCP clients will be assigned IP addresses within the range of `192.168.0.9 - 192.168.0.254`
+  and have a domain name of `internal-network`
 * DHCP leases will hold for one day (86400 seconds)
-* VyOS will server as full DNS recursor - no need to bother the Google or
-  Cloudflare DNS servers (good for privacy)
-* Only clients from your internal/LAN network can use the DNS resolver
+* VyOS will serve as a full DNS recursor, replacing the need to utilize Google, 
+  Cloudflare, or other public DNS servers (which is good for privacy)
+* Only hosts from your internal/LAN network can use the DNS recursor
 
 .. code-block:: none
 
@@ -95,7 +102,8 @@ Configure DHCP/DNS Servers
 NAT
 ###
 
-* Configure :ref:`source-nat` for our internal/LAN network
+The following settings will configure :ref:`source-nat` rules for our internal/LAN network, allowing
+hosts to communicate through the outside/WAN network via IP masquerade.
 
 .. code-block:: none
 
@@ -188,11 +196,23 @@ Set up :ref:`ssh_key_based_authentication`:
 
 Finally, try and SSH into the VyOS install as your new user. Once you have
 confirmed that your new user can access your router without a password, delete
-the original ``vyos`` user and probably disable password authentication for
-:ref:`ssh` at all:
+the original ``vyos`` user and completely disable password authentication for
+:ref:`ssh`:
 
 .. code-block:: none
 
   delete system login user vyos
   set service ssh disable-password-authentication
 
+As above, commit your changes, save the configuration, and exit configuration mode:
+
+.. code-block:: none
+
+  vyos@vyos# commit
+  vyos@vyos# save
+  Saving configuration to '/config/config.boot'...
+  Done
+  vyos@vyos# exit
+  vyos@vyos$
+ 
+You now should have a simple yet secure and functioning router to experiment with further. Enjoy!

From 59fb884e37e84815cd4467dbfc17e23f5fef64bb Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 20 Sep 2020 14:36:33 +0200
Subject: [PATCH 030/295] wwan: rename CLI command "ondemand" to
 "connect-on-demand"

---
 docs/interfaces/pppoe.rst         | 2 +-
 docs/interfaces/wirelessmodem.rst | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/interfaces/pppoe.rst b/docs/interfaces/pppoe.rst
index ae6b11cc..75fe0a40 100644
--- a/docs/interfaces/pppoe.rst
+++ b/docs/interfaces/pppoe.rst
@@ -79,7 +79,7 @@ Configuration
 
 .. cfgcmd:: set interfaces pppoe <interface> connect-on-demand
 
-   Enables or disables on-demand PPPoE connection on a PPPoE unit.
+   When set the interface is enabled for "dial-on-demand".
 
    Use this command to instruct the system to establish a PPPoE connections
    automatically once traffic passes through the interface. A disabled on-demand
diff --git a/docs/interfaces/wirelessmodem.rst b/docs/interfaces/wirelessmodem.rst
index 5cded6c5..c41e71bf 100644
--- a/docs/interfaces/wirelessmodem.rst
+++ b/docs/interfaces/wirelessmodem.rst
@@ -35,9 +35,9 @@ Address
    Do not install DNS nameservers received from ISP into system wide nameserver
    list.
 
-.. cfgcmd:: set interfaces wirelessmodem <interface> ondemand
+.. cfgcmd:: set interfaces wirelessmodem <interface> connect-on-demand
 
-   Enables or disables on-demand WWAN connection.
+   When set the interface is enabled for "dial-on-demand".
 
    Use this command to instruct the system to establish a PPP connection
    automatically once traffic passes through the interface. A disabled on-demand

From 7de85e0e9415d01e5cf648789f3a2bc8d0588c86 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Mon, 21 Sep 2020 20:46:26 +0200
Subject: [PATCH 031/295] install: pxe: warn about keeping filesytem.squashfs
 name

https://support.sentrium.io/agent/go/ticket/1268
---
 docs/install.rst | 70 +++++++++++++++++++++++++++---------------------
 1 file changed, 40 insertions(+), 30 deletions(-)

diff --git a/docs/install.rst b/docs/install.rst
index a210c1ad..11d0fc88 100644
--- a/docs/install.rst
+++ b/docs/install.rst
@@ -351,7 +351,7 @@ installation method which allows deploying VyOS through the network.
 * :ref:`tftp-server`
 * Webserver (HTTP) - optional, but we will use it to speed up installation
 * VyOS ISO image to be installed (do not use images prior to VyOS 1.2.3)
-* Files ``pxelinux.0`` and ``ldlinux.c32`` `from the Syslinux distribution <https://kernel.org/pub/linux/utils/boot/syslinux/>`_
+* Files *pxelinux.0* and *ldlinux.c32* `from the Syslinux distribution <https://kernel.org/pub/linux/utils/boot/syslinux/>`_
 
 Configuration
 -------------
@@ -363,7 +363,7 @@ Configure a DHCP server to provide the client with:
 
 * An IP address
 * The TFTP server address (DHCP option 66). Sometimes referred as *boot server*
-* The *bootfile name* (DHCP option 67), which is ``pxelinux.0``
+* The *bootfile name* (DHCP option 67), which is *pxelinux.0*
 
 In this example we configured an existent VyOS as the DHCP server:
 
@@ -389,17 +389,18 @@ Step 2: TFTP
 
 Configure a TFTP server so that it serves the following:
 
-* The ``pxelinux.0`` file from the Syslinux distribution
-* The ``ldlinux.c32`` file from the Syslinux distribution
-* The kernel of the VyOS software you want to deploy. That is the ``vmlinuz``
-  file inside the ``/live`` directory of the extracted contents from the ISO
-  file
+* The *pxelinux.0* file from the Syslinux distribution
+* The *ldlinux.c32* file from the Syslinux distribution
+* The kernel of the VyOS software you want to deploy. That is the
+  *vmlinuz* file inside the */live* directory of the extracted
+  contents from the ISO file.
 * The initial ramdisk of the VyOS ISO you want to deploy. That is the
-  ``initrd.img`` file inside the ``/live`` directory of the extracted contents
-  from the ISO file. Do not use an empty (0 bytes) initrd.img file you might
-  find, the correct file may have a longer name.
-* A directory named pxelinux.cfg which must contain the configuration file.
-  We will use the configuration_ file shown below, which we named default_.
+  *initrd.img* file inside the */live* directory of the extracted
+  contents from the ISO file. Do not use an empty (0 bytes) initrd.img
+  file you might find, the correct file may have a longer name.
+* A directory named pxelinux.cfg which must contain the configuration
+  file. We will use the configuration_ file shown below, which we named
+  default_.
 
 .. _configuration: https://wiki.syslinux.org/wiki/index.php?title=Config
 .. _default: https://wiki.syslinux.org/wiki/index.php?title=PXELINUX#Configuration
@@ -446,35 +447,44 @@ Example of simple (no menu) configuration file:
 Step 3: HTTP
 ^^^^^^^^^^^^
 
-As you can read in the configuration file, we are sending ``filesystem.squashfs``
-through HTTP. As that is a heavy file, we choose HTTP to speed up the transfer
-over TFTP.
+We also need to provide the *filesystem.squashfs* file. That is a heavy
+file and TFTP is slow, so you could send it through HTTP to speed up the
+transfer. That is how it is done in our example, you can find that in
+the configuration file above.
 
-First run a web server - you can use a simple one like
-`Python's SimpleHTTPServer`_ and start serving the ``filesystem.squashfs``
-file. The file can be found inside the ``/live`` directory of the extracted
-contents of the ISO file.
+**First** run a web server - you can use a simple one like
+`Python's SimpleHTTPServer`_ and start serving the `filesystem.squashfs`
+file. The file can be found inside the `/live` directory of the
+extracted contents of the ISO file.
 
-Second, edit the configuration file of the :ref:`install_from_tftp` so that it shows
-the correct URL at ``fetch=http://<address_of_your_HTTP_server>/filesystem.squashfs``.
+**Second**, edit the configuration file of the :ref:`install_from_tftp`
+so that it shows the correct URL at
+``fetch=http://<address_of_your_HTTP_server>/filesystem.squashfs``.
 
-And third, restart the TFTP service. If you are using VyOS as your TFTP Server, you can restart
-the service with ``sudo service tftpd-hpa restart``.
+.. note:: Do not change the name of the *filesystem.squashfs* file. If 
+   you are working with different versions, you can create different
+   directories instead.
 
-.. note::  Make sure the available directories and files in both TFTP and HTTP
-   server have the right permissions to be accessed from the booting clients.
+And **third**, restart the TFTP service. If you are using VyOS as your
+TFTP Server, you can restart the service with
+``sudo service tftpd-hpa restart``.
+
+.. note::  Make sure the available directories and files in both TFTP
+   and HTTP server have the right permissions to be accessed from the
+   booting clients.
 
 .. _`Python's SimpleHTTPServer`: https://docs.python.org/2/library/simplehttpserver.html
 
 Client Boot
 -----------
 
-Finally, turn on your PXE-enabled client or clients. They will automatically get an IP
-address from the DHCP server and start booting into VyOS live from the files
-automatically taken from the TFTP and HTTP servers.
+Finally, turn on your PXE-enabled client or clients. They will
+automatically get an IP address from the DHCP server and start booting
+into VyOS live from the files automatically taken from the TFTP and HTTP
+servers.
 
-Once finished you will be able to proceed with the ``install image`` command as
-in a regular VyOS installation.
+Once finished you will be able to proceed with the ``install image``
+command as in a regular VyOS installation.
 
 
 

From 6b7cb55d6dcc36edc537cd718c75e8ae17713e89 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Mon, 21 Sep 2020 22:24:28 +0200
Subject: [PATCH 032/295] configuration mgmt: add saving and loading manually

---
 docs/configuration-overview.rst | 47 ++++++++++++++++++++++++++++-----
 1 file changed, 40 insertions(+), 7 deletions(-)

diff --git a/docs/configuration-overview.rst b/docs/configuration-overview.rst
index bf9c57d9..71bfc360 100644
--- a/docs/configuration-overview.rst
+++ b/docs/configuration-overview.rst
@@ -299,11 +299,14 @@ different levels in the hierarchy.
     Warning: configuration changes have not been saved.
     vyos@vyos:~$
 
+.. _save:
+
 .. cfgcmd:: save
 
-   In order to preserve configuration changes upon reboot, the
-   configuration must also be saved once applied. This is done using the
-   :cfgcmd:`save` command in configuration mode.
+   Use this command to preserve configuration changes upon reboot. By
+   default it is stored at */config/config.boot*. In the case you want
+   to store the configuration file somewhere else, you can add a local
+   path, an SCP address, an FTP address or a TFTP address. 
 
    .. code-block:: none
 
@@ -619,14 +622,11 @@ By default the difference with the running config is shown.
 This means four commits ago we did ``set system ipv6 disable-forwarding``.
 
 
-
-
-
 Rollback Changes
 ----------------
 
 You can rollback configuration changes using the rollback command. This
-willn apply the selected revision and trigger a system reboot.
+will apply the selected revision and trigger a system reboot.
 
 .. cfgcmd:: rollback <N>
 
@@ -675,6 +675,39 @@ be ``config.boot-hostname.YYYYMMDD_HHMMSS``.
 
      vyos@vyos# ssh-keyscan <host> >> ~/.ssh/known_hosts
 
+Saving and loading manually
+---------------------------
+
+You can use the ``save`` and ``load`` commands if you want to manually
+manage specific configuration files.
+
+When using the save_ command, you can add a specific location where
+to store your configuration file. And, when needed it, you will be able
+to load it with the ``load`` command:
+
+.. cfgcmd:: load <URI>
+
+   Use this command to load a configuration which will replace the
+   running configuration. Define the location of the configuration file
+   to be loaded. You can use a path to a local file, an SCP address, an
+   SFTP address, an FTP address, an HTTP address, an HTTPS address or a
+   TFTP address.
+
+  .. code-block:: none
+
+     vyos@vyos# load 
+     Possible completions:
+       <Enter>				        Load from system config file
+       <file>			        	Load from file on local machine
+       scp://<user>:<passwd>@<host>/<file>	Load from file on remote machine
+       sftp://<user>:<passwd>@<host>/<file>	Load from file on remote machine
+       ftp://<user>:<passwd>@<host>/<file>	Load from file on remote machine
+       http://<host>/<file>			Load from file on remote machine
+       https://<host>/<file>			Load from file on remote machine
+       tftp://<host>/<file>			Load from file on remote machine
+     
+
+
 Restore Default
 ---------------
 

From e9171f34fbc21dda1d54dec1c4843fdcde647398 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 24 Sep 2020 21:16:59 +0200
Subject: [PATCH 033/295] build-vyos: add instructions how to build Linux
 Kernel

---
 docs/contributing/build-vyos.rst        | 299 ++++++++++++++++++++++++
 docs/contributing/upstream-packages.rst |  72 ------
 2 files changed, 299 insertions(+), 72 deletions(-)

diff --git a/docs/contributing/build-vyos.rst b/docs/contributing/build-vyos.rst
index e8bb9f37..4ed96dff 100644
--- a/docs/contributing/build-vyos.rst
+++ b/docs/contributing/build-vyos.rst
@@ -257,6 +257,305 @@ The full and current list can be generated with ``./configure --help``:
 
 .. _build_custom_packages:
 
+Linux Kernel
+============
+
+The Linux Kernel used by VyOS is heavily tied to the ISO build process. The
+file ``data/defaults.json`` hosts a JSON definition if the Kernel version used
+``kernel_version`` and the ``kernel_flavor`` of the Kernel which represents the
+Kernels LOCAL_VERSION. Both together form the Kernel Version variable in the
+system:
+
+.. code-block:: none
+
+  vyos@vyos:~$ uname -r
+  4.19.146-amd64-vyos
+
+Other packages (e.g. vyos-1x) add dependencies to the ISO build procedure on
+e.g. the wireguard-modules package which itself adds a dependency on the Kernel
+version used due to the module it ships. This may change (for WireGuard) in
+future Kernel releases but as long as we have out-of-tree modules.
+
+* WireGuard
+* Accel-PPP
+* Intel NIC drivers
+* Inter QAT
+
+Each of those modules holds a dependency on the Kernel Version and if you are
+lucky enough to receive an ISO build error which sounds like:
+
+.. code-block:: none
+
+  I: Create initramfs if it does not exist.
+  Extra argument '4.19.146-amd64-vyos'
+  Usage: update-initramfs {-c|-d|-u} [-k version] [-v] [-b directory]
+  Options:
+   -k version     Specify kernel version or 'all'
+   -c             Create a new initramfs
+   -u             Update an existing initramfs
+   -d             Remove an existing initramfs
+   -b directory   Set alternate boot directory
+   -v             Be verbose
+  See update-initramfs(8) for further details.
+  E: config/hooks/live/17-gen_initramfs.chroot failed (exit non-zero). You should check for errors.
+
+The most obvious reasons could be:
+
+* ``vyos-build`` repo is outdate, please ``git pull`` to update to the latest
+  release Kernel version from us.
+
+* You have your own custom Kernel `*.deb` packages in the `packages` folder but
+  missed to create all required out-of tree modules like Accel-PPP, WireGuard,
+  Intel QAT, Intel NIC
+
+Building The Kernel
+-------------------
+
+The Kernel build is quiet easy, most of the required steps can be found in the
+``vyos-build/packages/linux-kernel/Jenkinsfile`` but we will walk you through
+it.
+
+Clone the Kernel source to `vyos-build/packages/linux-kernel/`:
+
+.. code-block:: none
+
+  $ cd cyos-build/packages/linux-kernel/
+  $ git clone https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
+
+Checkout the required Kernel version - see ``vyos-build/data/defaults.json``
+file (example uses kernel 4.19.146):
+
+.. code-block:: none
+
+  $ cd cyos-build/packages/linux-kernel/linux
+  $ git checkout v4.19.146
+  Checking out files: 100% (61536/61536), done.
+  Note: checking out 'v4.19.146'.
+
+  You are in 'detached HEAD' state. You can look around, make experimental
+  changes and commit them, and you can discard any commits you make in this
+  state without impacting any branches by performing another checkout.
+
+  If you want to create a new branch to retain commits you create, you may
+  do so (now or later) by using -b with the checkout command again. Example:
+
+    git checkout -b <new-branch-name>
+
+  HEAD is now at 015e94d0e37b Linux 4.19.146
+
+Now we can use the helper script ``build-kernel.sh`` which does all the necessary
+Voodoo by applying required patches from the `vyos-build/packages/linux-kernell/
+patches` folder, copying our Kernel configuration ``x86_64_vyos_defconfig`` to
+the right location, and finally building the Debian packages.
+
+.. note:: You might grad your self some refreshments as the build will last for
+   approximately 20 minutes.
+
+.. code-block:: none
+
+  (18:59) vyos_bld 412374ca36b8:/vyos/vyos-build/packages/linux-kernel [current] # ./build-kernel.sh
+  I: Copy Kernel config (x86_64_vyos_defconfig) to Kernel Source
+  I: Apply Kernel patch: /vyos/vyos-build/packages/linux-kernel/patches/kernel/0001-VyOS-Add-linkstate-IP-device-attribute.patch
+  patching file Documentation/networking/ip-sysctl.txt
+  patching file include/linux/inetdevice.h
+  patching file include/linux/ipv6.h
+  patching file include/uapi/linux/ip.h
+  patching file include/uapi/linux/ipv6.h
+  patching file net/ipv4/devinet.c
+  Hunk #1 succeeded at 2319 (offset 1 line).
+  patching file net/ipv6/addrconf.c
+  patching file net/ipv6/route.c
+  I: Apply Kernel patch: /vyos/vyos-build/packages/linux-kernel/patches/kernel/0002-VyOS-add-inotify-support-for-stackable-filesystems-o.patch
+  patching file fs/notify/inotify/Kconfig
+  patching file fs/notify/inotify/inotify_user.c
+  patching file fs/overlayfs/super.c
+  Hunk #2 succeeded at 1713 (offset 9 lines).
+  Hunk #3 succeeded at 1739 (offset 9 lines).
+  Hunk #4 succeeded at 1762 (offset 9 lines).
+  patching file include/linux/inotify.h
+  I: Apply Kernel patch: /vyos/vyos-build/packages/linux-kernel/patches/kernel/0003-RFC-builddeb-add-linux-tools-package-with-perf.patch
+  patching file scripts/package/builddeb
+  I: make x86_64_vyos_defconfig
+    HOSTCC  scripts/basic/fixdep
+    HOSTCC  scripts/kconfig/conf.o
+    YACC    scripts/kconfig/zconf.tab.c
+    LEX     scripts/kconfig/zconf.lex.c
+    HOSTCC  scripts/kconfig/zconf.tab.o
+    HOSTLD  scripts/kconfig/conf
+  #
+  # configuration written to .config
+  #
+  I: Generate environment file containing Kernel variable
+  I: Build Debian Kernel package
+    UPD     include/config/kernel.release
+  /bin/sh ./scripts/package/mkdebian
+  dpkg-buildpackage -r"fakeroot -u" -a$(cat debian/arch) -b -nc -uc
+  dpkg-buildpackage: info: source package linux-4.19.146-amd64-vyos
+  dpkg-buildpackage: info: source version 4.19.146-1
+  dpkg-buildpackage: info: source distribution buster
+  dpkg-buildpackage: info: source changed by vyos_bld <christian@poessinger.com>
+  dpkg-buildpackage: info: host architecture amd64
+  dpkg-buildpackage: warning: debian/rules is not executable; fixing that
+   dpkg-source --before-build .
+   debian/rules build
+  make KERNELRELEASE=4.19.146-amd64-vyos ARCH=x86         KBUILD_BUILD_VERSION=1 KBUILD_SRC=
+    SYSTBL  arch/x86/include/generated/asm/syscalls_32.h
+
+  ...
+
+
+
+In the end you will be presented with the Kernel binary packages which you can
+then use in your custom ISO build process, by placing all the `*.deb` files in
+the vyos-build/packages folder where they will be picked up automatically.
+
+Building Out-Of-Tree Modules
+----------------------------
+
+Building the Kernel is one part, but now you also need to build the required
+out-of-tree modules so everything is lined up and the ABIs match. To do so,
+you can again take a look at ``vyos-build/packages/linux-kernel/Jenkinsfile``
+to see all of the required modules and their selected version. We will show you
+once how to build all the current required modules.
+
+WireGuard
+^^^^^^^^^
+
+First clone the source code and checkout the appropriate version by running:
+
+.. code-block:: none
+
+  $ cd vyos-build/packages/linux-kernel
+  $ git clone https://salsa.debian.org/debian/wireguard-linux-compat.git
+  $ cd wireguard-linux-compat
+  $ git checkout debian/1.0.20200712-1_bpo10+1
+
+We again make use of a helper script and some patches to make the build work.
+Just run the following command:
+
+.. code-block:: none
+
+  $ cd vyos-build/packages/linux-kernel
+  $ ./build-wireguard-modules.sh
+  I: Apply WireGuard patch: /vyos/packages/linux-kernel/patches/wireguard-linux-compat/0001-Debian-build-wireguard-modules-package.patch
+  patching file debian/control
+  patching file debian/rules
+  I: Build Debian WireGuard package
+  dpkg-buildpackage: info: source package wireguard-linux-compat
+  dpkg-buildpackage: info: source version 1.0.20200712-1~bpo10+1
+  dpkg-buildpackage: info: source distribution buster-backports
+  dpkg-buildpackage: info: source changed by Unit 193 <unit193@debian.org>
+  dpkg-buildpackage: info: host architecture amd64
+   dpkg-source --before-build .
+  dpkg-source: info: using patch list from debian/patches/series
+  dpkg-source: info: applying 0001-Makefile-do-not-use-git-to-get-version-number.patch
+  dpkg-source: info: applying 0002-Avoid-trying-to-compile-on-debian-5.5-kernels-Closes.patch
+
+  ...
+
+After compiling the packages you will find yourself the newly generated `*.deb`
+binaries in ``vyos-build/packages/linux-kernel`` from which you can copy them
+to the ``vyos-build/packages`` folder for inclusion during the ISO build.
+
+Accel-PPP
+^^^^^^^^^
+
+First clone the source code and checkout the appropriate version by running:
+
+.. code-block:: none
+
+  $ cd vyos-build/packages/linux-kernel
+  $ git clone https://github.com/accel-ppp/accel-ppp.git
+
+We again make use of a helper script and some patches to make the build work.
+Just run the following command:
+
+.. code-block:: none
+
+  $ ./build-accel-ppp.sh
+  I: Build Accel-PPP Debian package
+  CMake Deprecation Warning at CMakeLists.txt:3 (cmake_policy):
+    The OLD behavior for policy CMP0003 will be removed from a future version
+    of CMake.
+
+    The cmake-policies(7) manual explains that the OLD behaviors of all
+    policies are deprecated and that a policy should be set to OLD only under
+    specific short-term circumstances.  Projects should be ported to the NEW
+    behavior and not rely on setting a policy to OLD.
+
+
+  -- The C compiler identification is GNU 8.3.0
+  -- Check for working C compiler: /usr/bin/cc
+  -- Check for working C compiler: /usr/bin/cc -- works
+  -- Detecting C compiler ABI info
+  -- Detecting C compiler ABI info - done
+  -- Detecting C compile features
+  -- Detecting C compile features - done
+  -- 'x86_64'
+  -- Found Lua: /usr/lib/x86_64-linux-gnu/liblua5.3.so;/usr/lib/x86_64-linux-gnu/libm.so (found suitable version "5.3.3", minimum required is "5.3")
+  -- Looking for timerfd_create
+  -- Looking for timerfd_create - found
+  -- Looking for linux/netfilter/ipset/ip_set.h
+  -- Looking for linux/netfilter/ipset/ip_set.h - found
+  -- Looking for setns
+  -- Looking for setns - found
+
+  ...
+
+After compiling the packages you will find yourself the newly generated `*.deb`
+binaries in ``vyos-build/packages/linux-kernel`` from which you can copy them
+to the ``vyos-build/packages`` folder for inclusion during the ISO build.
+
+Intel NIC
+^^^^^^^^^
+
+The Intel NIC drivers do not come from a Git repository, instead we just fetch
+the tarballs from our mirror and compile them.
+
+Simply use our wrapper script to build all of the driver modules.
+
+.. code-block:: none
+
+  ./build-intel-drivers.sh
+    % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
+                                   Dload  Upload   Total   Spent    Left  Speed
+  100  490k  100  490k    0     0   648k      0 --:--:-- --:--:-- --:--:--  648k
+  I: Compile Kernel module for Intel ixgbe driver
+
+  ...
+
+After compiling the packages you will find yourself the newly generated `*.deb`
+binaries in ``vyos-build/packages/linux-kernel`` from which you can copy them
+to the ``vyos-build/packages`` folder for inclusion during the ISO build.
+
+Intel QAT
+^^^^^^^^^
+The Intel QAT (Quick Assist Technology) drivers do not come from a Git
+repository, instead we just fetch the tarballs from 01.org, Intels Open-Source
+website.
+
+Simply use our wrapper script to build all of the driver modules.
+
+.. code-block:: none
+
+  $ ./build-intel-qat.sh
+    % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
+                                   Dload  Upload   Total   Spent    Left  Speed
+  100 5065k  100 5065k    0     0  1157k      0  0:00:04  0:00:04 --:--:-- 1157k
+  I: Compile Kernel module for Intel qat driver
+  checking for a BSD-compatible install... /usr/bin/install -c
+  checking whether build environment is sane... yes
+  checking for a thread-safe mkdir -p... /bin/mkdir -p
+  checking for gawk... gawk
+  checking whether make sets $(MAKE)... yes
+
+  ...
+
+After compiling the packages you will find yourself the newly generated `*.deb`
+binaries in ``vyos-build/packages/linux-kernel`` from which you can copy them
+to the ``vyos-build/packages`` folder for inclusion during the ISO build.
+
+
 Packages
 ========
 
diff --git a/docs/contributing/upstream-packages.rst b/docs/contributing/upstream-packages.rst
index d43e61f3..5c48bbb3 100644
--- a/docs/contributing/upstream-packages.rst
+++ b/docs/contributing/upstream-packages.rst
@@ -59,26 +59,6 @@ reason we debianize that module by hand now, using this procedure:
 
 The package ends up in deb_dist dir.
 
-ppp
-^^^
-
-Properly renaming PPTP and L2TP interfaces to pptpX and l2tpX from generic and
-non-informative pppX requires a patch that is neither in the upstream nor in
-Debian.
-
-We keep a fork of Debian's repo at https://github.com/vyos/ppp-debian
-
-The patches for pre-up renaming are:
-
-* https://github.com/vyos/ppp-debian/commit/e728180026a051d2a96396276e7e4ae
-* https://github.com/vyos/ppp-debian/commit/f29ba8d9ebb043335a096d70bcd07e9
-
-Additionally, there's a patch for reopening the log file to better support
-logging to files, even though it's less essential:
-https://github.com/vyos/ppp-debian/commit/dd2ebd5cdcddb40230dc4cc43d374055f
-
-The patches were written by Stephen Hemminger back in the Vyatta times.
-
 mdns-repeater
 ^^^^^^^^^^^^^
 
@@ -95,58 +75,6 @@ https://github.com/vyos/udp-broadcast-relay
 
 No special build procedure is required.
 
-Linux kernel
-^^^^^^^^^^^^
-
-In the past a fork of the Kernel source code was kept at the well-known
-location of https://github.com/vyos/vyos-kernel - where it is kept for history.
-
-Nowadays the Kernel we use is the upstream source code which is patched
-with two additional patches from the good old Vyatta times which never made it
-into the mainstream Kernel. The patches can be found here:
-https://github.com/vyos/vyos-build-kernel/tree/master/patches/kernel and are
-automatically applied to the Kernel by the Jenkins Pipeline which is used to
-generate the Kernel binaries.
-
-The Pipeline script not only builds the Kernel with the configuration named
-``x86_64_vyos_defconfig`` which is located in the vyos-build-kernel repository,
-too - but in addition also builds some Intel out-of-tree drivers, WireGuard
-(as long it is not upstreamed) and Accel-PPP.
-
-The ``Jenkinsfile`` tries to be as verbose as possible on each individual build
-step.
-
-Linux Firmware
-^^^^^^^^^^^^^^
-
-More and more hardware cards require an additional firmware which is not open
-source. The Kernel community hosts a special linux-firmware Git repository
-with all available binary files which can be loaded by the Kernel.
-
-The ``vyos-build`` repository fetches a specific commit of the linux-firmware
-repository and embeds those binaries into the resulting ISO image. This step is
-done in the ``data/live-build-config/hooks/live/40-linux-firmware.chroot`` file.
-
-If the firmware needs to be updated it is sufficient to just exchange the Git
-commit id we reference in our build.
-
-Intel NIC drivers
-^^^^^^^^^^^^^^^^^
-
-We do not make use of the building Intel NIC drivers except for e1000e. Main
-reason is that the out of tree Intel drivers seem be perform a bit better,
-e.q. have proper receive-side-scaling and multi-queue support.
-
-Drivers are build as part of the Kernel Pipeline - read above.
-
-Accel-PPP
-^^^^^^^^^
-
-Accel-PPP used to be an upstream fork for quite some time but now has been
-converted to make use of the upstream source code and build system.
-
-It is build as part of the Kernel Pipeline - read above.
-
 hvinfo
 ^^^^^^
 

From 7bc844be7fa021d6ae27d7ac21f2534e1d85a7e4 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 24 Sep 2020 21:37:41 +0200
Subject: [PATCH 034/295] build-vyos: kernel: add more verbose build output as
 example

---
 docs/contributing/build-vyos.rst | 67 +++++++++++++++++++++++++-------
 1 file changed, 52 insertions(+), 15 deletions(-)

diff --git a/docs/contributing/build-vyos.rst b/docs/contributing/build-vyos.rst
index 4ed96dff..6d157f84 100644
--- a/docs/contributing/build-vyos.rst
+++ b/docs/contributing/build-vyos.rst
@@ -403,6 +403,27 @@ the right location, and finally building the Debian packages.
 
   ...
 
+  dpkg-shlibdeps: warning: binaries to analyze should already be installed in their package's directory
+  dpkg-shlibdeps: warning: binaries to analyze should already be installed in their package's directory
+  dpkg-shlibdeps: warning: binaries to analyze should already be installed in their package's directory
+  dpkg-shlibdeps: warning: binaries to analyze should already be installed in their package's directory
+  dpkg-shlibdeps: warning: binaries to analyze should already be installed in their package's directory
+  dpkg-shlibdeps: warning: binaries to analyze should already be installed in their package's directory
+  dpkg-shlibdeps: warning: binaries to analyze should already be installed in their package's directory
+  dpkg-shlibdeps: warning: binaries to analyze should already be installed in their package's directory
+  dpkg-shlibdeps: warning: binaries to analyze should already be installed in their package's directory
+  dpkg-shlibdeps: warning: binaries to analyze should already be installed in their package's directory
+  dpkg-shlibdeps: warning: binaries to analyze should already be installed in their package's directory
+  dpkg-shlibdeps: warning: binaries to analyze should already be installed in their package's directory
+  dpkg-shlibdeps: warning: package could avoid a useless dependency if /vyos/vyos-build/packages/linux-kernel/linux/debian/toolstmp/usr/bin/trace /vyos/vyos-build/packages/linux-kernel/linux/debian/toolstmp/usr/bin/perf were not linked against libcrypto.so.1.1 (they use none of the library's symbols)
+  dpkg-shlibdeps: warning: package could avoid a useless dependency if /vyos/vyos-build/packages/linux-kernel/linux/debian/toolstmp/usr/bin/trace /vyos/vyos-build/packages/linux-kernel/linux/debian/toolstmp/usr/bin/perf were not linked against libcrypt.so.1 (they use none of the library's symbols)
+  dpkg-deb: building package 'linux-tools-4.19.146-amd64-vyos' in '../linux-tools-4.19.146-amd64-vyos_4.19.146-1_amd64.deb'.
+   dpkg-genbuildinfo --build=binary
+   dpkg-genchanges --build=binary >../linux-4.19.146-amd64-vyos_4.19.146-1_amd64.changes
+  dpkg-genchanges: warning: package linux-image-4.19.146-amd64-vyos-dbg in control file but not in files list
+  dpkg-genchanges: info: binary-only upload (no source code included)
+   dpkg-source --after-build .
+  dpkg-buildpackage: info: binary-only upload (no source included)
 
 
 In the end you will be presented with the Kernel binary packages which you can
@@ -453,6 +474,15 @@ Just run the following command:
 
   ...
 
+  dpkg-genchanges: info: binary-only upload (no source code included)
+   debian/rules clean
+  dh clean
+     dh_clean
+   dpkg-source --after-build .
+  dpkg-source: info: unapplying 0002-Avoid-trying-to-compile-on-debian-5.5-kernels-Closes.patch
+  dpkg-source: info: unapplying 0001-Makefile-do-not-use-git-to-get-version-number.patch
+  dpkg-buildpackage: info: binary-only upload (no source included)
+
 After compiling the packages you will find yourself the newly generated `*.deb`
 binaries in ``vyos-build/packages/linux-kernel`` from which you can copy them
 to the ``vyos-build/packages`` folder for inclusion during the ISO build.
@@ -483,25 +513,17 @@ Just run the following command:
     specific short-term circumstances.  Projects should be ported to the NEW
     behavior and not rely on setting a policy to OLD.
 
-
   -- The C compiler identification is GNU 8.3.0
-  -- Check for working C compiler: /usr/bin/cc
-  -- Check for working C compiler: /usr/bin/cc -- works
-  -- Detecting C compiler ABI info
-  -- Detecting C compiler ABI info - done
-  -- Detecting C compile features
-  -- Detecting C compile features - done
-  -- 'x86_64'
-  -- Found Lua: /usr/lib/x86_64-linux-gnu/liblua5.3.so;/usr/lib/x86_64-linux-gnu/libm.so (found suitable version "5.3.3", minimum required is "5.3")
-  -- Looking for timerfd_create
-  -- Looking for timerfd_create - found
-  -- Looking for linux/netfilter/ipset/ip_set.h
-  -- Looking for linux/netfilter/ipset/ip_set.h - found
-  -- Looking for setns
-  -- Looking for setns - found
 
   ...
 
+  CPack: Create package using DEB
+  CPack: Install projects
+  CPack: - Run preinstall target for: accel-ppp
+  CPack: - Install project: accel-ppp
+  CPack: Create package
+  CPack: - package: /vyos/vyos-build/packages/linux-kernel/accel-ppp/build/accel-ppp.deb generated.
+
 After compiling the packages you will find yourself the newly generated `*.deb`
 binaries in ``vyos-build/packages/linux-kernel`` from which you can copy them
 to the ``vyos-build/packages`` folder for inclusion during the ISO build.
@@ -524,6 +546,13 @@ Simply use our wrapper script to build all of the driver modules.
 
   ...
 
+  I: Building Debian package vyos-intel-iavf
+  Doing `require 'backports'` is deprecated and will not load any backport in the next major release.
+  Require just the needed backports instead, or 'backports/latest'.
+  Debian packaging tools generally labels all files in /etc as config files, as mandated by policy, so fpm defaults to this behavior for deb packages. You can disable this default behavior with --deb-no-default-config-files flag {:level=>:warn}
+  Created package {:path=>"vyos-intel-iavf_4.0.1-0_amd64.deb"}
+  I: Cleanup iavf source
+
 After compiling the packages you will find yourself the newly generated `*.deb`
 binaries in ``vyos-build/packages/linux-kernel`` from which you can copy them
 to the ``vyos-build/packages`` folder for inclusion during the ISO build.
@@ -551,6 +580,14 @@ Simply use our wrapper script to build all of the driver modules.
 
   ...
 
+  I: Building Debian package vyos-intel-qat
+  Doing `require 'backports'` is deprecated and will not load any backport in the next major release.
+  Require just the needed backports instead, or 'backports/latest'.
+  Debian packaging tools generally labels all files in /etc as config files, as mandated by policy, so fpm defaults to this behavior for deb packages. You can disable this default behavior with --deb-no-default-config-files flag {:level=>:warn}
+  Created package {:path=>"vyos-intel-qat_1.7.l.4.9.0-00008-0_amd64.deb"}
+  I: Cleanup qat source
+
+
 After compiling the packages you will find yourself the newly generated `*.deb`
 binaries in ``vyos-build/packages/linux-kernel`` from which you can copy them
 to the ``vyos-build/packages`` folder for inclusion during the ISO build.

From ad5f61e19e1c29f6c639762f97126d2d44bb4f65 Mon Sep 17 00:00:00 2001
From: kroy-the-rabbit <kroy@kroy.io>
Date: Thu, 24 Sep 2020 15:48:22 -0500
Subject: [PATCH 035/295] build-iso: kernel: small spelling/wording update

---
 docs/contributing/build-vyos.rst | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/docs/contributing/build-vyos.rst b/docs/contributing/build-vyos.rst
index 6d157f84..c6098763 100644
--- a/docs/contributing/build-vyos.rst
+++ b/docs/contributing/build-vyos.rst
@@ -319,7 +319,7 @@ Clone the Kernel source to `vyos-build/packages/linux-kernel/`:
 
 .. code-block:: none
 
-  $ cd cyos-build/packages/linux-kernel/
+  $ cd vyos-build/packages/linux-kernel/
   $ git clone https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
 
 Checkout the required Kernel version - see ``vyos-build/data/defaults.json``
@@ -327,7 +327,7 @@ file (example uses kernel 4.19.146):
 
 .. code-block:: none
 
-  $ cd cyos-build/packages/linux-kernel/linux
+  $ cd vyos-build/packages/linux-kernel/linux
   $ git checkout v4.19.146
   Checking out files: 100% (61536/61536), done.
   Note: checking out 'v4.19.146'.
@@ -344,12 +344,11 @@ file (example uses kernel 4.19.146):
   HEAD is now at 015e94d0e37b Linux 4.19.146
 
 Now we can use the helper script ``build-kernel.sh`` which does all the necessary
-Voodoo by applying required patches from the `vyos-build/packages/linux-kernell/
+Voodoo by applying required patches from the `vyos-build/packages/linux-kernel/
 patches` folder, copying our Kernel configuration ``x86_64_vyos_defconfig`` to
 the right location, and finally building the Debian packages.
 
-.. note:: You might grad your self some refreshments as the build will last for
-   approximately 20 minutes.
+.. note:: Building the kernel will take some time depending on the speed and quantity of your CPU/cores and disk speed.  Plan on 20 minutes or even longer on lower end harder
 
 .. code-block:: none
 
@@ -428,7 +427,7 @@ the right location, and finally building the Debian packages.
 
 In the end you will be presented with the Kernel binary packages which you can
 then use in your custom ISO build process, by placing all the `*.deb` files in
-the vyos-build/packages folder where they will be picked up automatically.
+the vyos-build/packages folder where they will be used automatically when building VyOS as documented above.
 
 Building Out-Of-Tree Modules
 ----------------------------

From cbb29ca10c1ec5853d7b665bb36dddf4301e27ff Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 25 Sep 2020 20:08:59 +0200
Subject: [PATCH 036/295] development: update python skeleton

---
 docs/contributing/development.rst | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/docs/contributing/development.rst b/docs/contributing/development.rst
index 17f5cc48..b382b131 100644
--- a/docs/contributing/development.rst
+++ b/docs/contributing/development.rst
@@ -271,7 +271,7 @@ device if you happen to be a crazy scientist.
 
   #!/usr/bin/env python3
   #
-  # Copyright (C) 2019 VyOS maintainers and contributors
+  # Copyright (C) 2020 VyOS maintainers and contributors
   #
   # This program is free software; you can redistribute it and/or modify
   # it under the terms of the GNU General Public License version 2 or later as
@@ -291,10 +291,16 @@ device if you happen to be a crazy scientist.
   from vyos import ConfigError
 
   def get_config():
-      vc = Config()
+      if config:
+          conf = config
+      else:
+          conf = Config()
+        
+      # Base path to CLI nodes
+      base = ['...', '...']
       # Convert the VyOS config to an abstract internal representation
-      config = ...
-      return config
+      config_data = conf.get_config_dict(base, key_mangling=('-', '_'), get_first_key=True)
+      return config_data
 
   def verify(config):
       # Verify that configuration is valid

From 840bfc9e2a51305c68fa09e9cab82a14a9bb16bf Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 25 Sep 2020 20:10:42 +0200
Subject: [PATCH 037/295] development: fix __main__ of Python skeleton

---
 docs/contributing/development.rst | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/docs/contributing/development.rst b/docs/contributing/development.rst
index b382b131..86371845 100644
--- a/docs/contributing/development.rst
+++ b/docs/contributing/development.rst
@@ -317,8 +317,10 @@ device if you happen to be a crazy scientist.
       pass
 
   try:
-      config = get_config()
-      verify(config)
+      c = get_config()
+      verify(c)
+      generate(c)
+      apply(c)      
   except ConfigError as e:
       print(e)
       sys.exit(1)

From 71f73a88a040a4d2e24e0e8d029f5067a4a7a94a Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 2 Oct 2020 17:56:53 +0200
Subject: [PATCH 038/295] sstp: T2953: adjust to new ppp-options CLI node

---
 docs/vpn/sstp.rst | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/docs/vpn/sstp.rst b/docs/vpn/sstp.rst
index de13b5ae..486f66e8 100644
--- a/docs/vpn/sstp.rst
+++ b/docs/vpn/sstp.rst
@@ -23,9 +23,11 @@ certificates as well as a private PKI is required.
   certificates are not stored in the ``/config`` directory they will not be
   migrated during a software update.
 
+Certificates
+============
 
-Self Signed CA and Certificates
-===============================
+Self Signed CA
+--------------
 
 To generate the CA, the server private key and certificates the following
 commands can be used.
@@ -152,23 +154,23 @@ SSL Certificates
 PPP Settings
 ------------
 
-.. cfgcmd:: set vpn sstp ppp-settings lcp-echo-failure <number>
+.. cfgcmd:: set vpn sstp ppp-options lcp-echo-failure <number>
 
   Defines the maximum `<number>` of unanswered echo requests. Upon reaching the
   value `<number>`, the session will be reset.
 
-.. cfgcmd:: set vpn sstp ppp-settings lcp-echo-interval <interval>
+.. cfgcmd:: set vpn sstp ppp-options lcp-echo-interval <interval>
 
   If this option is specified and is greater than 0, then the PPP module will
   send LCP pings of the echo request every `<interval>` seconds.
 
-.. cfgcmd:: set vpn sstp ppp-settings lcp-echo-timeout
+.. cfgcmd:: set vpn sstp ppp-options lcp-echo-timeout
 
   Specifies timeout in seconds to wait for any peer activity. If this option
   specified it turns on adaptive lcp echo functionality and "lcp-echo-failure"
   is not used.
 
-.. cfgcmd:: set vpn sstp ppp-settings mppe <require | prefer | deny>
+.. cfgcmd:: set vpn sstp ppp-options mppe <require | prefer | deny>
 
   Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotioation
   preference.

From d0a50a0383d25aa4c14f68e3763800c002d19017 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 4 Oct 2020 20:41:05 +0200
Subject: [PATCH 039/295] sstp: adjust to latest CLI commands

---
 docs/vpn/sstp.rst | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/docs/vpn/sstp.rst b/docs/vpn/sstp.rst
index 486f66e8..e5567cb6 100644
--- a/docs/vpn/sstp.rst
+++ b/docs/vpn/sstp.rst
@@ -100,18 +100,18 @@ Configuration
   * **local**: All authentication queries are handled locally.
 
 
-.. cfgcmd:: set vpn sstp network-settings client-ip-settings gateway-address <gateway>
+.. cfgcmd:: set vpn sstp gateway-address <gateway>
 
   Specifies single `<gateway>` IP address to be used as local address of PPP
   interfaces.
 
 
-.. cfgcmd:: set vpn sstp network-settings client-ip-settings subnet <subnet>
+.. cfgcmd:: set vpn sstp client-ip-pool subnet <subnet>
 
   Use `<subnet>` as the IP pool for all connecting clients.
 
 
-.. cfgcmd:: set vpn sstp network-settings client-ipv6-pool prefix <address> mask <number-of-bits>
+.. cfgcmd:: set vpn sstp client-ipv6-pool prefix <address> mask <number-of-bits>
 
   Use this comand to set the IPv6 address pool from which an SSTP client
   will get an IPv6 prefix of your defined length (mask) to terminate the
@@ -119,7 +119,7 @@ Configuration
   bit long, the default value is 64.
 
 
-.. cfgcmd:: set vpn sstp network-settings client-ipv6-pool delegate <address> delegation-prefix <number-of-bits>
+.. cfgcmd:: set vpn sstp client-ipv6-pool delegate <address> delegation-prefix <number-of-bits>
 
   Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on
   SSTP. You will have to set your IPv6 pool and the length of the
@@ -128,7 +128,7 @@ Configuration
   delegation prefix can be set from 32 to 64 bit long.
 
 
-.. cfgcmd:: set vpn sstp network-settings name-server <address>
+.. cfgcmd:: set vpn sstp name-server <address>
 
   Connected client should use `<address>` as their DNS server. This
   command accepts both IPv4 and IPv6 addresses. Up to two nameservers
@@ -271,15 +271,15 @@ Example
 
 .. code-block:: none
 
-  set vpn sstp authentication local-users username foo password 'bar'
-  set vpn sstp authentication mode 'local'
-  set vpn sstp network-settings client-ip-settings gateway-address '192.0.2.254'
-  set vpn sstp network-settings client-ip-settings subnet '192.0.2.0/25'
-  set vpn sstp network-settings name-server '10.0.0.1'
-  set vpn sstp network-settings name-server '10.0.0.2'
-  set vpn sstp ssl ca-cert-file '/config/auth/ca.crt'
-  set vpn sstp ssl cert-file '/config/auth/server.crt'
-  set vpn sstp ssl key-file '/config/auth/server.key'
+  set vpn sstp authentication local-users username vyos password vyos
+  set vpn sstp authentication mode local
+  set vpn sstp gateway-address 192.0.2.254
+  set vpn sstp client-ip-pool subnet 192.0.2.0/25
+  set vpn sstp name-server 10.0.0.1
+  set vpn sstp name-server 10.0.0.2
+  set vpn sstp ssl ca-cert-file /config/auth/ca.crt
+  set vpn sstp ssl cert-file /config/auth/server.crt
+  set vpn sstp ssl key-file /config/auth/server.key
 
 Testing SSTP
 ============

From e2b75f6be4b144cf0d14fb557d791a1e97b7f998 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Tue, 6 Oct 2020 14:03:06 +0200
Subject: [PATCH 040/295] qos: fix fq-codel example

---
 docs/qos.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/qos.rst b/docs/qos.rst
index 3cd183cf..447780f1 100644
--- a/docs/qos.rst
+++ b/docs/qos.rst
@@ -527,8 +527,8 @@ A simple example of an FQ-CoDel policy working inside a Shaper one.
 .. code-block:: none
 
    set traffic-policy shaper FQ-CODEL-SHAPER bandwidth 2gbit
-   set traffic-policy shaper FQ-CODEL-SHAPER 100%
-   set traffic-policy shaper FQ-CODEL-SHAPER fq-codel
+   set traffic-policy shaper FQ-CODEL-SHAPER default bandwidth 100%
+   set traffic-policy shaper FQ-CODEL-SHAPER default queue-type fq-codel
 
 
 

From 61acd8021f8ab7ca502412bc0796a55bf4f1b255 Mon Sep 17 00:00:00 2001
From: root <root@srividya.int.sentrium.io>
Date: Fri, 16 Oct 2020 08:57:36 -0400
Subject: [PATCH 041/295] vxlan syntax correction: link and remote-port
 parameters are not available in rolling release

Replaced "link" with "source-interface" and "remote-port" with "port"

.. code-block:: none

  vyos@vyos# set int vxlan vxlan1
  Possible completions:
  +  address      IP address
     description  Interface specific description
     disable      Administratively disable interface
   > firewall     Firewall options
   group        Multicast group address for VXLAN interface
   > ip           IPv4 routing parameters
   > ipv6         IPv6 routing parameters
     mac          Media Access Control (MAC) address
     mtu          Maximum Transmission Unit (MTU)
   > policy       Policy route options
     port         Destination port of VXLAN tunnel (default: 8472)
     remote       Remote address of VXLAN tunnel
     source-address
                VXLAN source address
     source-interface
                Physical interface used for connection
     vni          Virtual Network Identifier
---
 docs/interfaces/vxlan.rst | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/docs/interfaces/vxlan.rst b/docs/interfaces/vxlan.rst
index a11f4b62..bf3b6dee 100644
--- a/docs/interfaces/vxlan.rst
+++ b/docs/interfaces/vxlan.rst
@@ -230,7 +230,7 @@ traffic from.
   set interfaces bridge br241 member interface 'vxlan241'
 
   set interfaces vxlan vxlan241 group '239.0.0.241'
-  set interfaces vxlan vxlan241 link 'eth0'
+  set interfaces vxlan vxlan241 source-interface 'eth0'
   set interfaces vxlan vxlan241 vni '241'
 
   ! Our seconds vxlan interface
@@ -239,7 +239,7 @@ traffic from.
   set interfaces bridge br242 member interface 'vxlan242'
 
   set interfaces vxlan vxlan242 group '239.0.0.242'
-  set interfaces vxlan vxlan242 link 'eth0'
+  set interfaces vxlan vxlan242 source-interface 'eth0'
   set interfaces vxlan vxlan242 vni '242'
 
 **Leaf3 configuration:**
@@ -255,7 +255,7 @@ traffic from.
   set interfaces bridge br241 member interface 'vxlan241'
 
   set interfaces vxlan vxlan241 group '239.0.0.241'
-  set interfaces vxlan vxlan241 link 'eth0'
+  set interfaces vxlan vxlan241 source-interface 'eth0'
   set interfaces vxlan vxlan241 vni '241'
 
   ! Our seconds vxlan interface
@@ -264,7 +264,7 @@ traffic from.
   set interfaces bridge br242 member interface 'vxlan242'
 
   set interfaces vxlan vxlan242 group '239.0.0.242'
-  set interfaces vxlan vxlan242 link 'eth0'
+  set interfaces vxlan vxlan242 source-interface 'eth0'
   set interfaces vxlan vxlan242 vni '242'
 
 As you can see, Leaf2 and Leaf3 configuration is almost identical. There are
@@ -300,7 +300,7 @@ same on all Leafs that has this interface.
 
 .. code-block:: none
 
-  set interfaces vxlan vxlan241 link 'eth0'
+  set interfaces vxlan vxlan241 source-interface 'eth0'
 
 Sets the interface to listen for multicast packets on. Could be a loopback, not
 yet tested.
@@ -314,7 +314,7 @@ multicast-address.
 
 .. code-block:: none
 
-  set interfaces vxlan vxlan241 remote-port 12345
+  set interfaces vxlan vxlan241 port 12345
 
 The destination port used for creating a VXLAN interface in Linux defaults to
 its pre-standard value of 8472 to preserve backwards compatibility. A
@@ -331,7 +331,7 @@ set directly. Let's change the Multicast example from above:
 
   # leaf2 and leaf3
   delete interfaces vxlan vxlan241 group '239.0.0.241'
-  delete interfaces vxlan vxlan241 link 'eth0'
+  delete interfaces vxlan vxlan241 source-interface 'eth0'
 
   # leaf2
   set interface vxlan vxlan241 remote 10.1.3.3
@@ -340,4 +340,4 @@ set directly. Let's change the Multicast example from above:
   set interface vxlan vxlan241 remote 10.1.2.2
 
 The default port udp is set to 8472.
-It can be changed with ``set interface vxlan <vxlanN> remote-port <port>``
+It can be changed with ``set interface vxlan <vxlanN> port <port>``

From ad28f19e2c0765b76b024c40cca7ba29f5edc065 Mon Sep 17 00:00:00 2001
From: Cheeze-It <kris4067195@hotmail.com>
Date: Mon, 19 Oct 2020 04:40:58 -0600
Subject: [PATCH 042/295] MPLS: extend documentation with new functionality

---
 docs/routing/mpls.rst | 188 +++++++++++++++++++++++++++---------------
 1 file changed, 123 insertions(+), 65 deletions(-)

diff --git a/docs/routing/mpls.rst b/docs/routing/mpls.rst
index c6d9d0fe..9f0d1a18 100644
--- a/docs/routing/mpls.rst
+++ b/docs/routing/mpls.rst
@@ -4,104 +4,162 @@
 MPLS 
 ****
 
+**Multi-Protocol Label Switching** (initialized as MPLS) is a packet forwarding paradigm
+which differs from regular IP forwarding. Instead of IP addresses being used to make the
+decision on finding the exit interface, a router will instead use an exact match on a
+32 bit/4 byte header called the MPLS label. This label is inserted between the ethernet
+(layer 2) header and the IP (layer 3) header. One can statically or dynamically assign
+label allocations, but we will focus on dynamic allocation of labels using some sort of
+label distribution protocol (such as the aptly named Label Distribution Protocol / LDP,
+Resource Reservation Protocol / RSVP, or Segment Routing through OSPF/ISIS). These
+protocols allow for the creation of a unidirectional/unicast path called a labeled switched path
+(initialized as LSP) throughout the network that operates very much like a tunnel through
+the network. An easy way of thinking about how an MPLS LSP actually forwards traffic
+throughout a network is to think of a GRE tunnel. They are not the same in how they
+operate, but they are the same in how they handle the tunneled packet. It would be
+good to think of MPLS as a tunneling technology that can be used to transport many
+different types of packets, to aid in traffic engineering by allowing one to specify
+paths throughout the network (using RSVP or SR), and to generally allow for easier
+intra/inter network transport of data packets. For more information on how MPLS
+label switching works, please go `here <https://en.wikipedia.org/wiki/Multiprotocol_Label_Switching>`__. 
+
+
+.. note:: MPLS support in VyOS is not finished yet, and therefore its functionality is limited. Currently there is no support for MPLS enabled VPN services such as L3VPNs, L2VPNs, and mVPNs. RSVP support is also not present as the underlying routing stack (FRR) does not implement it. Currently VyOS can be configured as a label switched router (MPLS P router), in both penultimate and ultimate hop popping operations.
+
+
 
 Label Distribution Protocol
 ===========================
 
-
-.. note:: VyOS' MPLS support is not finished yet, its funcitionality is
-   limited. Currently it can only be configured as a P router, that is,
-   an LSR in the core of an MPLS network.
-
-
-The **Multi-Protocol Label Switching** (MPLS) architecture does not
+The **Multi-Protocol Label Switching** (MPLS) architecture does not 
 assume a single protocol to create MPLS paths. VyOS supports the Label
 Distribution Protocol (LDP) as implemented by FRR, based on `RFC 5036 <https://tools.ietf.org/html/rfc5036.html>`__.
 
-LDT it is an MPLS signaling protocol that distributes labels creating
-MPLS paths in a dynamic manner. LDT is not exactly a routing protocol,
-as it relies on other routing protocols for forwarding decisions.
+LDP is a TCP based MPLS signaling protocol that distributes
+labels creating MPLS label switched paths in a dynamic manner. 
+LDP is not a routing protocol, as it relies on other routing 
+protocols for forwarding decisions. LDP cannot bootstrap itself,
+and therefore relies on said routing protocols for communication
+with other routers that use LDP.
+
+In order to allow for LDP on the local router to exchange label advertisements
+with other routers, a TCP session will be established between automatically
+discovered and statically assigned routers. LDP will try to establish a TCP
+session to the **transport address** of other routers. Therefore for LDP to
+function properly please make sure the transport address is shown in the
+routing table and reachable to traffic at all times.
+
+It is highly recommended to use the same address for both the LDP router-id and the
+discovery transport address, but for VyOS MPLS LDP to work both parameters must
+be explicitly set in the configuration.
 
 
-.. cfgcmd:: set protocols mpls ldp interface <interface>
-
-   Use this command to enable LDP in the interface you define.
+Configuration Options
+---------------------
 
 
-.. cfgcmd:: set protocols mpls ldp router-id <address>
+Use this command to enable LDP, and enable MPLS processing on the interface you define.
+   
+  .. cfgcmd:: set protocols mpls ldp interface <interface>
 
-   Use this command to configure the IP address used as the LDP
-   router-id of the local device 
+Use this command to configure the IP address used as the LDP
+router-id of the local device. 
+
+  .. cfgcmd:: set protocols mpls ldp router-id <address>
+
+Use this command to set the IPv4 or IPv6 transport-address used by
+LDP.
+
+  .. cfgcmd:: set protocols mpls ldp discovery transport-ipv4-address <IPv4 address>
+  .. cfgcmd:: set protocols mpls ldp discovery transport-ipv6-address <IPv6 address>
+
+Use this command to configure authentication for LDP peers. Set the
+IP address of the LDP peer and a password that should be shared in
+order to become neighbors.
+
+  .. cfgcmd:: set protocols mpls ldp neighbor <IPv4 address> password <password>
+
+Use this command if you would like to set the discovery
+hello and hold time parameters.
+
+  .. cfgcmd:: set protocols mpls ldp discovery hello-interval <seconds>
+  .. cfgcmd:: set protocols mpls ldp discovery hello-holdtime <seconds>
+
+Use this command if you would like to set the TCP session hold time
+intervals.
+   
+  .. cfgcmd:: set protocols mpls ldp discovery session-ipv4-holdtime <seconds>
+  .. cfgcmd:: set protocols mpls ldp discovery session-ipv6-holdtime <seconds>
+
+Use this command if you would like for the router to advertise FECs with
+a label of 0 for explicit null operations.
+   
+  .. cfgcmd:: set protocols mpls ldp export ipv4 explicit-null
+  .. cfgcmd:: set protocols mpls ldp export ipv6 explicit-null
 
 
-In order to allow the exchange of label advertisements required for LDP,
-a TCP session should be established between routers. Routers will need
-to learn each other's **transport address** in order to establish the
-TCP session.
 
-You may want to use the same address for both the LDP router-id and the
-discovery transport address, but for VyOS MPLS LDP to work both
-parameters must be explicitely set in the configuration.
+Sample configuration to setup LDP on VyOS
+---------------------------------------------
+
+  .. code-block:: none
+
+   set protocols ospf area 0 network '192.168.255.252/32'                      <--- Routing for loopback
+   set protocols ospf area 0 network '192.168.0.5/32'                          <--- Routing for an interface connecting to the network
+   set protocols ospf parameters router-id '192.168.255.252'                   <--- Router ID setting for OSPF
+   set protocols mpls ldp discovery transport-ipv4-address '192.168.255.252'   <--- Transport address for LDP for TCP sessions to connect to
+   set protocols mpls ldp interface 'eth1'                                     <--- Enable MPLS and LDP for an interface connecting to network
+   set protocols mpls ldp interface 'lo'                                       <--- Enable MPLS and LDP on loopback for future services connectivity
+   set protocols mpls ldp router-id '192.168.255.252'                          <--- Router ID setting for LDP
+   set interfaces ethernet eth1 address '192.168.0.5/31'                       <--- Interface IP for connecting to network
+   set interfaces loopback lo address '192.168.255.252/32'                     <--- Interface loopback IP for router ID and other uses
 
 
-.. cfgcmd:: set protocols mpls ldp discovery transport-ipv4-address | transport-ipv6-address <address>
 
-   Use this command to set the IPv4 or IPv6 transport-address used by
-   LDP.
-
-.. cfgcmd:: set protocols mpls ldp neighbor <address> password <password>
-
-   Use this command to configure authentication for LDP peers. Set the
-   IP address of the LDP peer and a password that should be shared in
-   order to become neighbors.
-
-
-Example
--------
-
-.. code-block:: none
-
-   set interfaces dummy dum0 address '2.2.2.2/32'
-   set interfaces ethernet eth1 address '10.0.0.2/24'
-   set interfaces ethernet eth2 address '10.0.255.1/24'
-   set protocols mpls ldp discovery transport-ipv4-address '2.2.2.2'
-   set protocols mpls ldp interface 'eth1'
-   set protocols mpls ldp interface 'eth2'
-   set protocols mpls ldp router-id '2.2.2.2'
-   set protocols ospf area 0 network '0.0.0.0/0'
-   set protocols ospf parameters router-id '2.2.2.2'
-
-
-show commands
+Show Commands
 -------------
 
 When LDP is working, you will be able to see label information in the
 outcome of ``show ip route``. Besides that information, there are also
 specific *show* commands for LDP: 
 
-
-.. opcmd:: show mpls ldp binding
-
-   Use this command to see the Label Information Base.
+Use this command to see the Label Information Base.
+   
+  .. opcmd:: show mpls ldp binding
 
 
-.. opcmd:: show mpls ldp discovery
-
-   Use this command to see Discovery Hello information
 
 
-.. opcmd:: show mpls ldp interface
+Use this command to see discovery hello information
 
-   Use this command to see LDP interface information
+  .. opcmd:: show mpls ldp discovery
 
 
-.. opcmd:: show mpls ldp neighbor
-
-   Uset this command to see LDP neighbor information
 
 
-.. opcmd:: show mpls ldp neighbor detail
+Use this command to see LDP interface information
 
-   Uset this command to see detailed LDP neighbor information
+  .. opcmd:: show mpls ldp interface
 
 
+
+
+Use this command to see LDP neighbor information
+
+  .. opcmd:: show mpls ldp neighbor
+
+
+
+
+Use this command to see detailed LDP neighbor information
+
+  .. opcmd:: show mpls ldp neighbor detail
+
+
+
+Reset Commands
+--------------
+
+Use this command to reset an LDP neighbor/TCP session that is established
+   
+  .. opcmd:: reset mpls ldp neighbor <IPv4 or IPv6 address>

From 46d1c9810560c6d3ce6f0646522df841923e811b Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 19 Oct 2020 12:54:36 +0200
Subject: [PATCH 043/295] MPLS: fix op-mode definitions and line breaks

---
 docs/routing/mpls.rst | 232 ++++++++++++++++++++----------------------
 1 file changed, 112 insertions(+), 120 deletions(-)

diff --git a/docs/routing/mpls.rst b/docs/routing/mpls.rst
index 9f0d1a18..0ae6094c 100644
--- a/docs/routing/mpls.rst
+++ b/docs/routing/mpls.rst
@@ -1,46 +1,51 @@
 .. _mpls:
 
-****
-MPLS 
-****
+####
+MPLS
+####
 
-**Multi-Protocol Label Switching** (initialized as MPLS) is a packet forwarding paradigm
-which differs from regular IP forwarding. Instead of IP addresses being used to make the
-decision on finding the exit interface, a router will instead use an exact match on a
-32 bit/4 byte header called the MPLS label. This label is inserted between the ethernet
-(layer 2) header and the IP (layer 3) header. One can statically or dynamically assign
-label allocations, but we will focus on dynamic allocation of labels using some sort of
-label distribution protocol (such as the aptly named Label Distribution Protocol / LDP,
-Resource Reservation Protocol / RSVP, or Segment Routing through OSPF/ISIS). These
-protocols allow for the creation of a unidirectional/unicast path called a labeled switched path
-(initialized as LSP) throughout the network that operates very much like a tunnel through
-the network. An easy way of thinking about how an MPLS LSP actually forwards traffic
-throughout a network is to think of a GRE tunnel. They are not the same in how they
-operate, but they are the same in how they handle the tunneled packet. It would be
-good to think of MPLS as a tunneling technology that can be used to transport many
-different types of packets, to aid in traffic engineering by allowing one to specify
-paths throughout the network (using RSVP or SR), and to generally allow for easier
-intra/inter network transport of data packets. For more information on how MPLS
-label switching works, please go `here <https://en.wikipedia.org/wiki/Multiprotocol_Label_Switching>`__. 
-
-
-.. note:: MPLS support in VyOS is not finished yet, and therefore its functionality is limited. Currently there is no support for MPLS enabled VPN services such as L3VPNs, L2VPNs, and mVPNs. RSVP support is also not present as the underlying routing stack (FRR) does not implement it. Currently VyOS can be configured as a label switched router (MPLS P router), in both penultimate and ultimate hop popping operations.
+:abbr:`MPLS (Multi-Protocol Label Switching)` is a packet forwarding paradigm
+which differs from regular IP forwarding. Instead of IP addresses being used to
+make the decision on finding the exit interface, a router will instead use an
+exact match on a 32 bit/4 byte header called the MPLS label. This label is
+inserted between the ethernet (layer 2) header and the IP (layer 3) header.
+One can statically or dynamically assign label allocations, but we will focus
+on dynamic allocation of labels using some sort of label distribution protocol
+(such as the aptly named Label Distribution Protocol / LDP, Resource Reservation
+Protocol / RSVP, or Segment Routing through OSPF/ISIS). These protocols allow
+for the creation of a unidirectional/unicast path called a labeled switched
+path (initialized as LSP) throughout the network that operates very much like
+a tunnel through the network. An easy way of thinking about how an MPLS LSP
+actually forwards traffic throughout a network is to think of a GRE tunnel.
+They are not the same in how they operate, but they are the same in how they
+handle the tunneled packet. It would be good to think of MPLS as a tunneling
+technology that can be used to transport many different types of packets, to
+aid in traffic engineering by allowing one to specify paths throughout the
+network (using RSVP or SR), and to generally allow for easier intra/inter
+network transport of data packets.
 
+For more information on how MPLS label switching works, please go visit
+`Wikipedia (MPLS)`_.
 
+.. note:: MPLS support in VyOS is not finished yet, and therefore its
+   functionality is limited. Currently there is no support for MPLS enabled VPN
+   services such as L3VPNs, L2VPNs, and mVPNs. RSVP support is also not present
+   as the underlying routing stack (FRR) does not implement it. Currently VyOS
+   can be configured as a label switched router (MPLS P router), in both
+   penultimate and ultimate hop popping operations.
 
 Label Distribution Protocol
 ===========================
 
-The **Multi-Protocol Label Switching** (MPLS) architecture does not 
-assume a single protocol to create MPLS paths. VyOS supports the Label
-Distribution Protocol (LDP) as implemented by FRR, based on `RFC 5036 <https://tools.ietf.org/html/rfc5036.html>`__.
+The :abbr: `MPLS (Multi-Protocol Label Switching)` architecture does not assume
+a single protocol to create MPLS paths. VyOS supports the Label Distribution
+Protocol (LDP) as implemented by FRR, based on :rfc:`5036`.
 
-LDP is a TCP based MPLS signaling protocol that distributes
-labels creating MPLS label switched paths in a dynamic manner. 
-LDP is not a routing protocol, as it relies on other routing 
-protocols for forwarding decisions. LDP cannot bootstrap itself,
-and therefore relies on said routing protocols for communication
-with other routers that use LDP.
+:abbr:`LDP (Label Distribution Protocol)` is a TCP based MPLS signaling protocol
+that distributes labels creating MPLS label switched paths in a dynamic manner.
+LDP is not a routing protocol, as it relies on other routing protocols for
+forwarding decisions. LDP cannot bootstrap itself, and therefore relies on said
+routing protocols for communication with other routers that use LDP.
 
 In order to allow for LDP on the local router to exchange label advertisements
 with other routers, a TCP session will be established between automatically
@@ -49,117 +54,104 @@ session to the **transport address** of other routers. Therefore for LDP to
 function properly please make sure the transport address is shown in the
 routing table and reachable to traffic at all times.
 
-It is highly recommended to use the same address for both the LDP router-id and the
-discovery transport address, but for VyOS MPLS LDP to work both parameters must
-be explicitly set in the configuration.
-
+It is highly recommended to use the same address for both the LDP router-id and
+the discovery transport address, but for VyOS MPLS LDP to work both parameters
+must be explicitly set in the configuration.
 
 Configuration Options
----------------------
+=====================
 
+Use this command to enable LDP, and enable MPLS processing on the interface you
+define.
 
-Use this command to enable LDP, and enable MPLS processing on the interface you define.
-   
-  .. cfgcmd:: set protocols mpls ldp interface <interface>
+.. cfgcmd:: set protocols mpls ldp interface <interface>
 
-Use this command to configure the IP address used as the LDP
-router-id of the local device. 
+  Use this command to configure the IP address used as the LDP router-id of the
+  local device.
 
-  .. cfgcmd:: set protocols mpls ldp router-id <address>
+.. cfgcmd:: set protocols mpls ldp router-id <address>
 
-Use this command to set the IPv4 or IPv6 transport-address used by
-LDP.
+  Use this command to set the IPv4 or IPv6 transport-address used by LDP.
 
-  .. cfgcmd:: set protocols mpls ldp discovery transport-ipv4-address <IPv4 address>
-  .. cfgcmd:: set protocols mpls ldp discovery transport-ipv6-address <IPv6 address>
+.. cfgcmd:: set protocols mpls ldp discovery transport-ipv4-address <IPv4 address>
+.. cfgcmd:: set protocols mpls ldp discovery transport-ipv6-address <IPv6 address>
 
-Use this command to configure authentication for LDP peers. Set the
-IP address of the LDP peer and a password that should be shared in
-order to become neighbors.
+  Use this command to configure authentication for LDP peers. Set the
+  IP address of the LDP peer and a password that should be shared in
+  order to become neighbors.
 
-  .. cfgcmd:: set protocols mpls ldp neighbor <IPv4 address> password <password>
+.. cfgcmd:: set protocols mpls ldp neighbor <IPv4 address> password <password>
 
-Use this command if you would like to set the discovery
-hello and hold time parameters.
+  Use this command if you would like to set the discovery hello and hold time
+  parameters.
 
-  .. cfgcmd:: set protocols mpls ldp discovery hello-interval <seconds>
-  .. cfgcmd:: set protocols mpls ldp discovery hello-holdtime <seconds>
+.. cfgcmd:: set protocols mpls ldp discovery hello-interval <seconds>
+.. cfgcmd:: set protocols mpls ldp discovery hello-holdtime <seconds>
 
-Use this command if you would like to set the TCP session hold time
-intervals.
-   
-  .. cfgcmd:: set protocols mpls ldp discovery session-ipv4-holdtime <seconds>
-  .. cfgcmd:: set protocols mpls ldp discovery session-ipv6-holdtime <seconds>
+Use this command if you would like to set the TCP session hold time intervals.
 
-Use this command if you would like for the router to advertise FECs with
-a label of 0 for explicit null operations.
-   
-  .. cfgcmd:: set protocols mpls ldp export ipv4 explicit-null
-  .. cfgcmd:: set protocols mpls ldp export ipv6 explicit-null
+.. cfgcmd:: set protocols mpls ldp discovery session-ipv4-holdtime <seconds>
+.. cfgcmd:: set protocols mpls ldp discovery session-ipv6-holdtime <seconds>
 
+Use this command if you would like for the router to advertise FECs with a label
+of 0 for explicit null operations.
+
+.. cfgcmd:: set protocols mpls ldp export ipv4 explicit-null
+.. cfgcmd:: set protocols mpls ldp export ipv6 explicit-null
 
 
 Sample configuration to setup LDP on VyOS
----------------------------------------------
+-----------------------------------------
 
-  .. code-block:: none
+.. code-block:: none
 
-   set protocols ospf area 0 network '192.168.255.252/32'                      <--- Routing for loopback
-   set protocols ospf area 0 network '192.168.0.5/32'                          <--- Routing for an interface connecting to the network
-   set protocols ospf parameters router-id '192.168.255.252'                   <--- Router ID setting for OSPF
-   set protocols mpls ldp discovery transport-ipv4-address '192.168.255.252'   <--- Transport address for LDP for TCP sessions to connect to
-   set protocols mpls ldp interface 'eth1'                                     <--- Enable MPLS and LDP for an interface connecting to network
-   set protocols mpls ldp interface 'lo'                                       <--- Enable MPLS and LDP on loopback for future services connectivity
-   set protocols mpls ldp router-id '192.168.255.252'                          <--- Router ID setting for LDP
-   set interfaces ethernet eth1 address '192.168.0.5/31'                       <--- Interface IP for connecting to network
-   set interfaces loopback lo address '192.168.255.252/32'                     <--- Interface loopback IP for router ID and other uses
+  set protocols ospf area 0 network '192.168.255.252/32'                      <--- Routing for loopback
+  set protocols ospf area 0 network '192.168.0.5/32'                          <--- Routing for an interface connecting to the network
+  set protocols ospf parameters router-id '192.168.255.252'                   <--- Router ID setting for OSPF
+  set protocols mpls ldp discovery transport-ipv4-address '192.168.255.252'   <--- Transport address for LDP for TCP sessions to connect to
+  set protocols mpls ldp interface 'eth1'                                     <--- Enable MPLS and LDP for an interface connecting to network
+  set protocols mpls ldp interface 'lo'                                       <--- Enable MPLS and LDP on loopback for future services connectivity
+  set protocols mpls ldp router-id '192.168.255.252'                          <--- Router ID setting for LDP
+  set interfaces ethernet eth1 address '192.168.0.5/31'                       <--- Interface IP for connecting to network
+  set interfaces loopback lo address '192.168.255.252/32'                     <--- Interface loopback IP for router ID and other uses
 
 
+Operational Mode Commands
+=========================
 
-Show Commands
--------------
+When LDP is working, you will be able to see label information in the outcome
+of ``show ip route``. Besides that information, there are also specific *show*
+commands for LDP:
 
-When LDP is working, you will be able to see label information in the
-outcome of ``show ip route``. Besides that information, there are also
-specific *show* commands for LDP: 
+Show
+----
 
-Use this command to see the Label Information Base.
-   
-  .. opcmd:: show mpls ldp binding
+.. opcmd:: show mpls ldp binding
+
+  Use this command to see the Label Information Base.
+
+.. opcmd:: show mpls ldp discovery
+
+  Use this command to see discovery hello information
+
+.. opcmd:: show mpls ldp interface
+
+  Use this command to see LDP interface information
+
+.. opcmd:: show mpls ldp neighbor
+
+  Use this command to see LDP neighbor information
+
+.. opcmd:: show mpls ldp neighbor detail
+
+  Use this command to see detailed LDP neighbor information
+
+Reset
+-----
+
+.. opcmd:: reset mpls ldp neighbor <IPv4 or IPv6 address>
+
+  Use this command to reset an LDP neighbor/TCP session that is established
 
 
-
-
-Use this command to see discovery hello information
-
-  .. opcmd:: show mpls ldp discovery
-
-
-
-
-Use this command to see LDP interface information
-
-  .. opcmd:: show mpls ldp interface
-
-
-
-
-Use this command to see LDP neighbor information
-
-  .. opcmd:: show mpls ldp neighbor
-
-
-
-
-Use this command to see detailed LDP neighbor information
-
-  .. opcmd:: show mpls ldp neighbor detail
-
-
-
-Reset Commands
---------------
-
-Use this command to reset an LDP neighbor/TCP session that is established
-   
-  .. opcmd:: reset mpls ldp neighbor <IPv4 or IPv6 address>
+.. _`Wikipedia (MPLS)`: https://en.wikipedia.org/wiki/Multiprotocol_Label_Switching

From 7f6e9161d2ea48243261aa153b74f1be4c463ff1 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 19 Oct 2020 21:46:10 +0200
Subject: [PATCH 044/295] MPLS: remove superfluous whitespace after abbr key

---
 docs/routing/mpls.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/routing/mpls.rst b/docs/routing/mpls.rst
index 0ae6094c..8a533733 100644
--- a/docs/routing/mpls.rst
+++ b/docs/routing/mpls.rst
@@ -37,7 +37,7 @@ For more information on how MPLS label switching works, please go visit
 Label Distribution Protocol
 ===========================
 
-The :abbr: `MPLS (Multi-Protocol Label Switching)` architecture does not assume
+The :abbr:`MPLS (Multi-Protocol Label Switching)` architecture does not assume
 a single protocol to create MPLS paths. VyOS supports the Label Distribution
 Protocol (LDP) as implemented by FRR, based on :rfc:`5036`.
 

From c44aa8aeac5b3b279d2aca60e3d2bbe74565c2fe Mon Sep 17 00:00:00 2001
From: Cheeze_It <none@none.com>
Date: Mon, 19 Oct 2020 19:42:40 -0600
Subject: [PATCH 045/295] MPLS: fix conf-mode definitions and line breaks

Moved the configuration mode commands and descriptions to fit VyOS template.
---
 docs/routing/mpls.rst | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/docs/routing/mpls.rst b/docs/routing/mpls.rst
index 0ae6094c..86221104 100644
--- a/docs/routing/mpls.rst
+++ b/docs/routing/mpls.rst
@@ -37,7 +37,7 @@ For more information on how MPLS label switching works, please go visit
 Label Distribution Protocol
 ===========================
 
-The :abbr: `MPLS (Multi-Protocol Label Switching)` architecture does not assume
+The :abbr:`MPLS (Multi-Protocol Label Switching)` architecture does not assume
 a single protocol to create MPLS paths. VyOS supports the Label Distribution
 Protocol (LDP) as implemented by FRR, based on :rfc:`5036`.
 
@@ -61,44 +61,44 @@ must be explicitly set in the configuration.
 Configuration Options
 =====================
 
-Use this command to enable LDP, and enable MPLS processing on the interface you
-define.
-
 .. cfgcmd:: set protocols mpls ldp interface <interface>
 
+  Use this command to enable LDP, and enable MPLS processing on the interface you
+  define.
+
+.. cfgcmd:: set protocols mpls ldp router-id <address>
+
   Use this command to configure the IP address used as the LDP router-id of the
   local device.
 
-.. cfgcmd:: set protocols mpls ldp router-id <address>
+.. cfgcmd:: set protocols mpls ldp discovery transport-ipv4-address <IPv4 address>
+.. cfgcmd:: set protocols mpls ldp discovery transport-ipv6-address <IPv6 address>
 
   Use this command to set the IPv4 or IPv6 transport-address used by LDP.
 
-.. cfgcmd:: set protocols mpls ldp discovery transport-ipv4-address <IPv4 address>
-.. cfgcmd:: set protocols mpls ldp discovery transport-ipv6-address <IPv6 address>
+.. cfgcmd:: set protocols mpls ldp neighbor <IPv4 address> password <password>
 
   Use this command to configure authentication for LDP peers. Set the
   IP address of the LDP peer and a password that should be shared in
   order to become neighbors.
 
-.. cfgcmd:: set protocols mpls ldp neighbor <IPv4 address> password <password>
+.. cfgcmd:: set protocols mpls ldp discovery hello-interval <seconds>
+.. cfgcmd:: set protocols mpls ldp discovery hello-holdtime <seconds>
 
   Use this command if you would like to set the discovery hello and hold time
   parameters.
 
-.. cfgcmd:: set protocols mpls ldp discovery hello-interval <seconds>
-.. cfgcmd:: set protocols mpls ldp discovery hello-holdtime <seconds>
-
-Use this command if you would like to set the TCP session hold time intervals.
-
 .. cfgcmd:: set protocols mpls ldp discovery session-ipv4-holdtime <seconds>
 .. cfgcmd:: set protocols mpls ldp discovery session-ipv6-holdtime <seconds>
 
-Use this command if you would like for the router to advertise FECs with a label
-of 0 for explicit null operations.
+  Use this command if you would like to set the TCP session hold time intervals.
 
 .. cfgcmd:: set protocols mpls ldp export ipv4 explicit-null
 .. cfgcmd:: set protocols mpls ldp export ipv6 explicit-null
 
+  Use this command if you would like for the router to advertise FECs with a label
+  of 0 for explicit null operations.
+
 
 Sample configuration to setup LDP on VyOS
 -----------------------------------------

From 439af25b06ccbf15241d430da4a0d8d0bb5fd21e Mon Sep 17 00:00:00 2001
From: Noah Spahn <noah-de@users.noreply.github.com>
Date: Wed, 21 Oct 2020 22:21:34 -0700
Subject: [PATCH 046/295] Minor typo correction

harder doesn't make sense. The intention must have been to say 'hardware'.
---
 docs/contributing/build-vyos.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/contributing/build-vyos.rst b/docs/contributing/build-vyos.rst
index c6098763..627d79d0 100644
--- a/docs/contributing/build-vyos.rst
+++ b/docs/contributing/build-vyos.rst
@@ -348,7 +348,7 @@ Voodoo by applying required patches from the `vyos-build/packages/linux-kernel/
 patches` folder, copying our Kernel configuration ``x86_64_vyos_defconfig`` to
 the right location, and finally building the Debian packages.
 
-.. note:: Building the kernel will take some time depending on the speed and quantity of your CPU/cores and disk speed.  Plan on 20 minutes or even longer on lower end harder
+.. note:: Building the kernel will take some time depending on the speed and quantity of your CPU/cores and disk speed.  Plan on 20 minutes (or even longer) on lower end hardware.
 
 .. code-block:: none
 

From 8295342ac1b4ba0a98d6ce36cba2713903f34bd1 Mon Sep 17 00:00:00 2001
From: Noah Spahn <noah.de@gmail.com>
Date: Thu, 22 Oct 2020 12:07:04 -0700
Subject: [PATCH 047/295] revisions to the forking instructions main changes
 include a consistent reference to the branch name installing requirements
 before building locally an alternate method for adding a commit message

---
 docs/contributing/documentation.rst | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index 8102e9a9..2b2d3ba7 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -35,12 +35,12 @@ access to the official codebase.
 
 * Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork
 
-* Clone fork to local machine
+* Clone fork to local machine, then change to that directory``$ cd vyos-documentation``
 
-* Change to your new local directory ``$ cd vyos-documentation``
+* Install the requirements ``$ pip install -r requirements.txt`` (or something similar)
 
 * Create new branch for your work, use a descriptive name of your work:
-  ``$ git checkout -b fix-vxlan-typo``
+  ``$ git checkout -b <branch-name>``
 
 * Make all your changes - please keep our commit rules in mind
   (:ref:`prepare_commit`). This mainly applies to proper commit messages
@@ -61,11 +61,12 @@ access to the official codebase.
   unstaged files ``$ git add .``. All files added to the Git index will be part
   of you following Git commit.
 
-* Commit your changes ``$ git commit -v`` - your configured editor will now ne
-  launched where you can type in a commit message. Again please make yourself
-  comfortable with out rules (:ref:`prepare_commit`).
+* Commit your changes with the message, ``$ git commit -m "<commit message>"``
+  or  use ``$ git commit -v`` to have your configured editor launched. You can
+  type in a commit message. Again please make yourself comfortable with out
+  rules (:ref:`prepare_commit`).
 
-* Push your commits to your GitHub project: ``$ git push -u origin foo-branch``
+* Push commits to your GitHub project: ``$ git push -u origin <branch-name>``
 
 * Submit pull-request. In GitHub visit the main repository and you should
   see a banner suggesting to make a pull request. Fill out the form and

From ed9449fa4745efe46b351e467caff083e40e2d52 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Fri, 23 Oct 2020 19:31:38 +0200
Subject: [PATCH 048/295] qos: warning about possible IFB error

---
 docs/qos.rst | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/docs/qos.rst b/docs/qos.rst
index 447780f1..6826b83c 100644
--- a/docs/qos.rst
+++ b/docs/qos.rst
@@ -1083,9 +1083,9 @@ parameters.
 
 
 .. note:: If you configure a class for **VoIP traffic**, don't give it any
-   *ceiling*, otherwise new VoIP calls could start when there is available
-   bandwidth and get suddenly dropped when other classes start using
-   their bandwidth.
+   *ceiling*, otherwise new VoIP calls could start when the link is
+   available and get suddenly dropped when other classes start using
+   their assigned *bandwidth* share.
 
 
 Example
@@ -1182,7 +1182,12 @@ That is how it is possible to do the so-called "ingress shaping".
    set interfaces input ifb0 traffic-policy out MY-INGRESS-SHAPING
    set interfaces ethernet eth0 redirect ifb0
 
+.. warning::
 
+  Do not configure IFB as the first step. First create everything else
+  of your traffic-policy, and then you can configure IFB.
+  Otherwise you might get the ``RTNETLINK answer: File exists`` error,
+  which can be solved with ``sudo ip link delete ifb0``.
 
 
 .. _that can give you a great deal of flexibility: https://blog.vyos.io/using-the-policy-route-and-packet-marking-for-custom-qos-matches

From 5f0d33af1a5f709314c046b6dee40a63353f4363 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Jeanneret?= <cjeanneret@internux.ch>
Date: Mon, 26 Oct 2020 19:28:17 +0100
Subject: [PATCH 049/295] Correct the scp URI

A standard `scp` call implies a ":" between the remote host
and the remote path. Let's reflect it in the doc to avoid
any confusion.
---
 docs/configuration-overview.rst | 6 +++---
 docs/system/user-management.rst | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/configuration-overview.rst b/docs/configuration-overview.rst
index 71bfc360..5658cdbb 100644
--- a/docs/configuration-overview.rst
+++ b/docs/configuration-overview.rst
@@ -320,7 +320,7 @@ different levels in the hierarchy.
      Possible completions:
        <Enter>       Save to system config file
        <file>        Save to file on local machine
-       scp://<user>:<passwd>@<host>/<file> Save to file on remote machine
+       scp://<user>:<passwd>@<host>:/<file> Save to file on remote machine
        ftp://<user>:<passwd>@<host>/<file> Save to file on remote machine
        tftp://<host>/<file>      Save to file on remote machine
      vyos@vyos# save tftp://192.168.0.100/vyos-test.config.boot
@@ -659,7 +659,7 @@ be ``config.boot-hostname.YYYYMMDD_HHMMSS``.
    Specify remote location of commit archive as any of the below
    :abbr:`URI (Uniform Resource Identifier)`
 
-   * ``scp://<user>:<passwd>@<host>/<dir>``
+   * ``scp://<user>:<passwd>@<host>:/<dir>``
    * ``sftp://<user>:<passwd>@<host>/<dir>``
    * ``ftp://<user>:<passwd>@<host>/<dir>``
    * ``tftp://<host>/<dir>``
@@ -699,7 +699,7 @@ to load it with the ``load`` command:
      Possible completions:
        <Enter>				        Load from system config file
        <file>			        	Load from file on local machine
-       scp://<user>:<passwd>@<host>/<file>	Load from file on remote machine
+       scp://<user>:<passwd>@<host>:/<file>	Load from file on remote machine
        sftp://<user>:<passwd>@<host>/<file>	Load from file on remote machine
        ftp://<user>:<passwd>@<host>/<file>	Load from file on remote machine
        http://<host>/<file>			Load from file on remote machine
diff --git a/docs/system/user-management.rst b/docs/system/user-management.rst
index d3dcc378..6d89735f 100644
--- a/docs/system/user-management.rst
+++ b/docs/system/user-management.rst
@@ -78,7 +78,7 @@ The third part is simply an identifier, and is for your own reference.
    using one of the following :abbr:`URIs (Uniform Resource Identifier)`:
 
    * ``<file>`` - Load from file on local filesystem path
-   * ``scp://<user>@<host>/<file>`` - Load via SCP from remote machine
+   * ``scp://<user>@<host>:/<file>`` - Load via SCP from remote machine
    * ``sftp://<user>@<host>/<file>`` - Load via SFTP from remote machine
    * ``ftp://<user>@<host>/<file>`` - Load via FTP from remote machine
    * ``http://<host>/<file>`` - Load via HTTP from remote machine

From 8c401562a8e7a928d2efa88f66ee8e186cd7fe1f Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Wed, 28 Oct 2020 10:48:59 +0100
Subject: [PATCH 050/295] ipoe-server: fix hierarchy tree

---
 docs/services/ipoe-server.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/services/ipoe-server.rst b/docs/services/ipoe-server.rst
index 96c96527..3aedf966 100644
--- a/docs/services/ipoe-server.rst
+++ b/docs/services/ipoe-server.rst
@@ -119,13 +119,13 @@ example configuration can be used.
   set service ipoe-server authentication radius-server 10.100.100.1 secret 'password'
 
 Bandwidth Shaping
-^^^^^^^^^^^^^^^^^
+=================
 
 Bandwidth rate limits can be set for local users within the configuration or
 via RADIUS based attributes.
 
 Bandwidth Shaping for local users
-=================================
+---------------------------------
 
 The rate-limit is set in kbit/sec.
 

From 5b2cde1eaa46968a32e1c84bc9dd4b239b0020b6 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Wed, 28 Oct 2020 20:06:06 +0100
Subject: [PATCH 051/295] routing: adjust chapter headers

---
 docs/routing/index.rst                        |  2 +-
 docs/routing/mss-clamp.rst                    | 13 ++++----
 docs/routing/multicast.rst                    | 15 +++++----
 docs/routing/ospf.rst                         |  7 +++--
 docs/routing/pbr.rst                          |  7 +++--
 .../{routing-policy.rst => policy.rst}        | 31 +++++++++++--------
 docs/routing/rip.rst                          |  3 +-
 7 files changed, 42 insertions(+), 36 deletions(-)
 rename docs/routing/{routing-policy.rst => policy.rst} (72%)

diff --git a/docs/routing/index.rst b/docs/routing/index.rst
index a34bbfac..7988b230 100644
--- a/docs/routing/index.rst
+++ b/docs/routing/index.rst
@@ -16,6 +16,6 @@ Routing
    ospf
    pbr
    rip
-   routing-policy
+   policy
    rpki
    static
diff --git a/docs/routing/mss-clamp.rst b/docs/routing/mss-clamp.rst
index a4edf1c6..3fdd1153 100644
--- a/docs/routing/mss-clamp.rst
+++ b/docs/routing/mss-clamp.rst
@@ -1,7 +1,8 @@
 .. _routing-mss-clamp:
 
+################
 TCP-MSS Clamping
-----------------
+################
 
 As Internet wide PMTU discovery rarely works, we sometimes need to clamp
 our TCP MSS value to a specific value. This is a field in the TCP
@@ -18,16 +19,15 @@ value for IPv4 and IPv6.
 
 
 IPv4
-^^^^
+====
 
 .. cfgcmd:: set firewall options interface <interface> adjust-mss <number-of-bytes>
 
    Use this command to set the maximum segment size for IPv4 transit
    packets on a specific interface (500-1460 bytes).
 
-
 Example
-"""""""
+-------
 
 Clamp outgoing MSS value in a TCP SYN packet to `1452` for `pppoe0` and
 `1372`
@@ -39,16 +39,15 @@ for your WireGuard `wg02` tunnel.
   set firewall options interface wg02 adjust-mss '1372'
 
 IPv6
-^^^^^
+====
 
 .. cfgcmd:: set firewall options interface <interface> adjust-mss6 <number-of-bytes>
 
    Use this command to set the maximum segment size for IPv6 transit
    packets on a specific interface (1280-1492 bytes).
 
-
 Example
-"""""""
+-------
 
 Clamp outgoing MSS value in a TCP SYN packet to `1280` for both `pppoe0` and
 `wg02` interface.
diff --git a/docs/routing/multicast.rst b/docs/routing/multicast.rst
index d20d8e31..9104b0c9 100644
--- a/docs/routing/multicast.rst
+++ b/docs/routing/multicast.rst
@@ -7,7 +7,6 @@ Multicast
 VyOS facilitates IP Multicast by supporting **PIM Sparse Mode**,
 **IGMP** and **IGMP-Proxy**.
 
-
 ************
 PIM and IGMP
 ************
@@ -16,7 +15,7 @@ PIM (Protocol Independent Multicast) must be configured in every
 interface of every participating router. Every router must also have the
 location of the Rendevouz Point manually configured. Then,
 unidirectional shared trees rooted at the Rendevouz Point will
-automatically be built for multicast distribution. 
+automatically be built for multicast distribution.
 
 Traffic from multicast sources will go to the Rendezvous Point, and
 receivers will pull it from a shared tree using IGMP (Internet Group
@@ -24,7 +23,7 @@ Management Protocol).
 
 Multicast receivers will talk IGMP to their local router, so, besides
 having PIM configured in every router, IGMP must also be configured in
-any router where there could be a multicast receiver locally connected. 
+any router where there could be a multicast receiver locally connected.
 
 VyOS supports both IGMP version 2 and version 3 (which allows
 source-specific multicast).
@@ -54,7 +53,7 @@ In the following example we can see a basic multicast setup:
    set protocols pim interface eth1
    set protocols pim interface eth2
    set protocols pim rp address 172.16.255.1 group '224.0.0.0/4'
-   
+
 **Router 3**
 
 .. code-block:: none
@@ -69,7 +68,7 @@ In the following example we can see a basic multicast setup:
    set protocols pim interface eth0
    set protocols pim interface eth1
    set protocols pim rp address 172.16.255.1 group '224.0.0.0/4'
-   
+
 **Router 2**
 
 .. code-block:: none
@@ -81,7 +80,7 @@ In the following example we can see a basic multicast setup:
    set protocols pim interface eth1
    set protocols pim interface eth2
    set protocols pim rp address 172.16.255.1 group '224.0.0.0/4'
-   
+
 
 
 
@@ -103,7 +102,7 @@ These are the commands for a basic setup.
    that join messages can be sent there. Set the Rendevouz Point address
    and the matching prefix of group ranges covered. These values must
    be shared with every router participating in the PIM network.
- 
+
 
 .. cfgcmd:: set protocols igmp interface eth1
 
@@ -163,7 +162,7 @@ You can also tune multicast with the following commands.
    timed out.
 
 
-.. cfgcmd:: set protocols igmp interface <interface> version <version-number> 
+.. cfgcmd:: set protocols igmp interface <interface> version <version-number>
 
    Use this command to define in the selected interface whether you
    choose IGMP version 2 or 3. The default value is 3.
diff --git a/docs/routing/ospf.rst b/docs/routing/ospf.rst
index fbe8984f..fe05178b 100644
--- a/docs/routing/ospf.rst
+++ b/docs/routing/ospf.rst
@@ -2,8 +2,9 @@
 
 .. _routing-ospf:
 
+####
 OSPF
-----
+####
 
 :abbr:`OSPF (Open Shortest Path First)` is a routing protocol for Internet
 Protocol (IP) networks. It uses a link state routing (LSR) algorithm and falls
@@ -16,7 +17,7 @@ addressing model.
 OSPF is a widely used IGP in large enterprise networks.
 
 OSPFv2 (IPv4)
-^^^^^^^^^^^^^
+#############
 
 In order to have a VyOS system exchanging routes with OSPF neighbors, you will
 at least need to configure an OSPF area and some network.
@@ -68,7 +69,7 @@ address and the node 1 sending the default route:
   set policy route-map CONNECT rule 10 match interface lo
 
 OSPFv3 (IPv6)
-^^^^^^^^^^^^^
+#############
 
 A typical configuration using 2 nodes.
 
diff --git a/docs/routing/pbr.rst b/docs/routing/pbr.rst
index 797f79e3..2a1a56bc 100644
--- a/docs/routing/pbr.rst
+++ b/docs/routing/pbr.rst
@@ -2,8 +2,9 @@
 
 .. _routing-pbr:
 
+###
 PBR
----
+###
 
 :abbr:`PBR (Policy-Based Routing)` allowing traffic to be assigned to
 different routing tables. Traffic can be matched using standard 5-tuple
@@ -11,7 +12,7 @@ matching (source address, destination address, protocol, source port,
 destination port).
 
 Transparent Proxy
-^^^^^^^^^^^^^^^^^
+=================
 
 The following example will show how VyOS can be used to redirect web
 traffic to an external transparent proxy:
@@ -45,7 +46,7 @@ interface, we use:
 
 
 Multiple Uplinks
-^^^^^^^^^^^^^^^^
+================
 
 VyOS Policy-Based Routing (PBR) works by matching source IP address
 ranges and forwarding the traffic using different routing tables.
diff --git a/docs/routing/routing-policy.rst b/docs/routing/policy.rst
similarity index 72%
rename from docs/routing/routing-policy.rst
rename to docs/routing/policy.rst
index 461e42d8..4eeb40d6 100644
--- a/docs/routing/routing-policy.rst
+++ b/docs/routing/policy.rst
@@ -1,32 +1,35 @@
 .. include:: ../_include/need_improvement.txt
 
-Routing-policy
---------------
+######
+Policy
+######
 
-Routing Policies could be used to tell the router (self or neighbors) what routes and their attributes needs to be put into the routing table.
+Routing Policies could be used to tell the router (self or neighbors) what
+routes and their attributes needs to be put into the routing table.
 
 There could be a wide range of routing policies. Some examples are below:
 
-  * Set some metric to routes learned from a particular neighbor
-  * Set some attributes (like AS PATH or Community value) to advertised routes to neighbors
-  * Prefer a specific routing protocol routes over another routing protocol running on the same router
+* Set some metric to routes learned from a particular neighbor
+* Set some attributes (like AS PATH or Community value) to advertised routes to neighbors
+* Prefer a specific routing protocol routes over another routing protocol running on the same router
 
-Routing Policy Example
-~~~~~~~~~~~~~~~~~~~~~~
+Example
+=======
 
 **Policy definition:**
 
 .. code-block:: none
 
-  #Create policy
+  # Create policy
   set policy route-map setmet rule 2 action 'permit'
   set policy route-map setmet rule 2 set as-path-prepend '2 2 2'
 
-  #Apply policy to BGP
+  # Apply policy to BGP
   set protocols bgp 1 neighbor 203.0.113.2 address-family ipv4-unicast route-map import 'setmet'
-  set protocols bgp 1 neighbor 203.0.113.2 address-family ipv4-unicast soft-reconfiguration 'inbound' <<<< ***
+  set protocols bgp 1 neighbor 203.0.113.2 address-family ipv4-unicast soft-reconfiguration 'inbound'
 
-  *** get policy update without bouncing the neighbor
+Using 'soft-reconfiguration' we get the policy update without bouncing the
+neighbor.
 
 **Routes learned before routing policy applied:**
 
@@ -54,7 +57,9 @@ Routing Policy Example
   Origin codes: i - IGP, e - EGP, ? - incomplete
 
      Network          Next Hop            Metric LocPrf Weight Path
-  *> 198.51.100.3/32   203.0.113.2           1             0 2 2 2 2 i < longer AS_path length
+  *> 198.51.100.3/32   203.0.113.2           1             0 2 2 2 2 i
 
   Total number of prefixes 1
   vyos@vos1:~$
+
+You now see the longer AS path.
diff --git a/docs/routing/rip.rst b/docs/routing/rip.rst
index 9cf4f289..68868e37 100644
--- a/docs/routing/rip.rst
+++ b/docs/routing/rip.rst
@@ -2,8 +2,9 @@
 
 .. _rip:
 
+###
 RIP
----
+###
 
 :abbr:`RIP (Routing Information Protocol)` is a widely deployed interior gateway
 protocol. RIP was developed in the 1970s at Xerox Labs as part of the XNS

From d8cae2006095d55bcd7e4e1fcecf325da30f8420 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Wed, 28 Oct 2020 20:57:10 +0100
Subject: [PATCH 052/295] openvpn: add troubleshooting subsection

---
 docs/vpn/openvpn.rst | 39 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 39 insertions(+)

diff --git a/docs/vpn/openvpn.rst b/docs/vpn/openvpn.rst
index fd6a3a71..b9f5433b 100644
--- a/docs/vpn/openvpn.rst
+++ b/docs/vpn/openvpn.rst
@@ -542,4 +542,43 @@ Will add ``push "keepalive 1 10"`` to the generated OpenVPN config file.
    quotes. This is done through a hack on our config generator. You can pass
    quotes using the ``&quot;`` statement.
 
+
+Troubleshooting
+===============
+
+VyOS provides some operational commands on OpenVPN.
+
+Check status
+------------
+
+The following commands let you check tunnel status.
+
+.. opcmd:: show openvpn client
+
+   Use this command to check the tunnel status for OpenVPN client interfaces.
+
+.. opcmd:: show openvpn server
+
+   Use this command to check the tunnel status for OpenVPN server interfaces.
+
+.. opcmd:: show openvpn site-to-site
+
+   Use this command to check the tunnel status for OpenVPN site-to-site interfaces.
+
+
+Reset OpenVPN
+-------------
+
+The following commands let you reset OpenVPN for a specific client or interface.
+
+.. opcmd:: reset openvpn client <text>
+
+   Use this command to reset specified OpenVPN client.
+
+.. opcmd:: reset openvpn interface <interface>
+
+   Uset this command to reset the OpenVPN process on a specific interface.
+
+
+
 .. include:: ../common-references.rst

From bf45f93b030284029014cba99b722253a29ccd6b Mon Sep 17 00:00:00 2001
From: currite <53279076+currite@users.noreply.github.com>
Date: Wed, 28 Oct 2020 21:25:01 +0100
Subject: [PATCH 053/295] Update openvpn.rst

---
 docs/vpn/openvpn.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/vpn/openvpn.rst b/docs/vpn/openvpn.rst
index b9f5433b..c6934335 100644
--- a/docs/vpn/openvpn.rst
+++ b/docs/vpn/openvpn.rst
@@ -569,7 +569,7 @@ The following commands let you check tunnel status.
 Reset OpenVPN
 -------------
 
-The following commands let you reset OpenVPN for a specific client or interface.
+The following commands let you reset OpenVPN.
 
 .. opcmd:: reset openvpn client <text>
 

From ed86dcfe5f14169f98b78d74e81220ce30e8b8de Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Mon, 2 Nov 2020 13:37:53 +0100
Subject: [PATCH 054/295] routing/ip-commands: add a collection of IPv4 and
 IPv6 commands missing in the manual.

---
 docs/routing/index.rst       |   1 +
 docs/routing/ip-commands.rst | 277 +++++++++++++++++++++++++++++++++++
 2 files changed, 278 insertions(+)
 create mode 100644 docs/routing/ip-commands.rst

diff --git a/docs/routing/index.rst b/docs/routing/index.rst
index a34bbfac..53a8a6ce 100644
--- a/docs/routing/index.rst
+++ b/docs/routing/index.rst
@@ -13,6 +13,7 @@ Routing
    mpls
    mss-clamp
    multicast
+   ip-commands
    ospf
    pbr
    rip
diff --git a/docs/routing/ip-commands.rst b/docs/routing/ip-commands.rst
new file mode 100644
index 00000000..fbfe2d24
--- /dev/null
+++ b/docs/routing/ip-commands.rst
@@ -0,0 +1,277 @@
+.. _ip-commands:
+
+***********
+IP commands
+***********
+
+
+IPv4
+====
+
+System configuration commands
+-----------------------------
+
+
+.. cfgcmd:: set system ip disable-forwarding
+
+   Use this command to disable IPv4 forwarding on all interfaces.
+
+
+.. cfgcmd:: set system ip arp table-size <number>
+
+   Use this command to define the maximum number of entries to keep in
+   the ARP cache (1024, 2048, 4096, 8192, 16384, 32768).
+
+
+.. cfgcmd:: set system ip multipath layer4-hashing
+
+   Use this command to use Layer 4 information for IPv4 ECMP hashing.
+
+
+Operational commands
+--------------------
+
+
+show commands
+^^^^^^^^^^^^^
+
+See below the different parameters available for the IPv4 **show** command:
+
+.. code-block::
+
+   vyos@vyos:~$ show ip
+   Possible completions:
+     access-list   Show all IP access-lists
+     as-path-access-list
+                   Show all as-path-access-lists
+     bgp           Show Border Gateway Protocol (BGP) information
+     community-list
+                   Show IP community-lists
+     extcommunity-list
+                   Show extended IP community-lists
+     forwarding    Show IP forwarding status
+     groups        Show IP multicast group membership
+     igmp          Show IGMP (Internet Group Management Protocol) information
+     large-community-list
+                   Show IP large-community-lists
+     multicast     Show IP multicast
+     ospf          Show IPv4 Open Shortest Path First (OSPF) routing information
+     pim           Show PIM (Protocol Independent Multicast) information
+     ports         Show IP ports in use by various system services
+     prefix-list   Show all IP prefix-lists
+     protocol      Show IP route-maps per protocol
+     rip           Show Routing Information Protocol (RIP) information
+     route         Show IP routes
+   
+
+reset commands
+^^^^^^^^^^^^^^
+
+And the different IPv4 **reset** commands available:
+
+.. code-block::
+
+   vyos@vyos:~$ reset ip 
+   Possible completions:
+     arp           Reset Address Resolution Protocol (ARP) cache
+     bgp           Clear Border Gateway Protocol (BGP) statistics or status
+     igmp          IGMP clear commands
+     multicast     IP multicast routing table
+     route         Reset IP route
+   
+
+IPv6
+====
+
+System configuration commands
+-----------------------------
+
+.. cfgcmd:: set system ipv6 disable
+
+   Use this command to disable assignment of IPv6 addresses on all
+   interfaces.
+
+
+.. cfgcmd:: set system ipv6 disable-forwarding
+
+   Use this command to disable IPv6 forwarding on all interfaces.
+
+
+.. cfgcmd:: set system ipv6 neighbor table-size <number>
+
+   Use this command to define the maximum number of entries to keep in
+   the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768).
+
+
+.. cfgcmd:: set system ipv6 strict-dad
+
+   Use this command to disable IPv6 operation on interface when
+   Duplicate Address Detection fails on Link-Local address.
+
+
+.. cfgcmd:: set system ipv6 multipath layer4-hashing
+
+   Use this command to user Layer 4 information for ECMP hashing.
+
+
+
+Operational commands
+--------------------
+
+Show commands
+^^^^^^^^^^^^^
+
+
+.. opcmd:: show ipv6 neighbors
+
+   Use this command to show IPv6 Neighbor Discovery Protocol information.
+
+
+.. opcmd:: show ipv6 groups
+
+   Use this command to show IPv6 multicast group membership.
+
+
+.. opcmd:: show ipv6 forwarding
+  
+   Use this command to show IPv6 forwarding status.
+
+.. opcmd:: show ipv6 route
+
+   Use this command to show IPv6 routes.
+
+
+   Check the many parameters available for the `show ipv6 route` command:
+
+   .. code-block:: none
+
+      vyos@vyos:~$ show ipv6 route 
+      Possible completions:
+        <Enter>       Execute the current command
+        <X:X::X:X>    Show IPv6 routes of given address or prefix
+        <X:X::X:X/M>
+        bgp           Show IPv6 BGP routes
+        cache         Show kernel IPv6 route cache
+        connected     Show IPv6 connected routes
+        forward       Show kernel IPv6 route table
+        isis          Show IPv6 ISIS routes
+        kernel        Show IPv6 kernel routes
+        ospfv3        Show IPv6 OSPF6 routes
+        ripng         Show IPv6 RIPNG routes
+        static        Show IPv6 static routes
+        summary       Show IPv6 routes summary
+        table         Show IP routes in policy table
+        vrf           Show IPv6 routes in VRF
+      
+
+.. opcmd:: show ipv6 prefix-list
+
+   Use this command to show all IPv6 prefix lists
+
+   There are different parameters for getting prefix-list information:
+
+   .. code-block:: none
+
+      vyos@vyos:~$ show ipv6 prefix-list 
+      Possible completions:
+        <Enter>       Execute the current command
+        <WORD>        Show specified IPv6 prefix-list
+        detail        Show detail of IPv6 prefix-lists
+        summary       Show summary of IPv6 prefix-lists
+      
+.. opcmd:: show ipv6 access-list
+
+   Use this command to show all IPv6 access lists
+
+   You can also specify which IPv6 access-list should be shown:
+
+   .. code-block:: none
+
+      vyos@vyos:~$ show ipv6 access-list 
+      Possible completions:
+        <Enter>       Execute the current command
+        <text>        Show specified IPv6 access-list
+      
+
+
+.. opcmd:: show ipv6 bgp
+
+   Use this command to show IPv6 Border Gateway Protocol information.
+
+
+   In addition, you can specify many other parameters to get BGP
+   information:
+
+   .. code-block:: none
+   
+      vyos@vyos:~$ show ipv6 bgp 
+      Possible completions:
+        <Enter>       Execute the current command
+        <X:X::X:X>    Show BGP information for given address or prefix
+        <X:X::X:X/M>
+        community     Show routes matching the communities
+        community-list
+                      Show routes matching the community-list
+        filter-list   Show routes conforming to the filter-list
+        large-community
+                      Show routes matching the large-community-list
+        large-community-list
+        neighbors     Show detailed information on TCP and BGP neighbor connections
+        prefix-list   Show routes matching the prefix-list
+        regexp        Show routes matching the AS path regular expression
+        route-map     Show BGP routes matching the specified route map
+        summary       Show summary of BGP neighbor status
+      
+
+.. opcmd:: show ipv6 ospfv3
+
+   Use this command to get information about OSPFv3.
+
+   You can get more specific OSPFv3 information by using the parameters
+   shown below:
+   
+   .. code-block:: 
+   
+      vyos@vyos:~$ show ipv6 ospfv3 
+      Possible completions:
+        <Enter>       Execute the current command
+        area          Show OSPFv3 spf-tree information
+        border-routers
+                      Show OSPFv3 border-router (ABR and ASBR) information
+        database      Show OSPFv3 Link state database information
+        interface     Show OSPFv3 interface information
+        linkstate     Show OSPFv3 linkstate routing information
+        neighbor      Show OSPFv3 neighbor information
+        redistribute  Show OSPFv3 redistribute External information
+        route         Show OSPFv3 routing table information
+      
+.. opcmd:: show ipv6 ripng
+
+   Use this command to get information about the RIPNG protocol
+
+.. opcmd:: show ipv6 ripng status
+
+   Use this command to show the status of the RIPNG protocol
+
+
+
+Reset commands
+^^^^^^^^^^^^^^
+
+.. opcmd:: reset ipv6 bgp <address>
+
+   Use this command to clear Border Gateway Protocol statistics or
+   status.
+
+
+.. opcmd:: reset ipv6 neighbors <address | interface>
+
+   Use this command to reset IPv6 Neighbor Discovery Protocol cache for 
+   an address or interface.
+
+.. opcmd:: reset ipv6 route cache
+
+   Use this command to flush the kernel IPv6 route cache.
+   An address can be added to flush it only for that route. 
+
+

From 168247e76ad1b03e4d1dab2631ee970afeb74549 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 3 Nov 2020 17:04:57 +0100
Subject: [PATCH 055/295] ip-commands: add "none" on code-block directives

---
 docs/routing/ip-commands.rst | 63 +++++++++++++-----------------------
 1 file changed, 22 insertions(+), 41 deletions(-)

diff --git a/docs/routing/ip-commands.rst b/docs/routing/ip-commands.rst
index fbfe2d24..eba4fd90 100644
--- a/docs/routing/ip-commands.rst
+++ b/docs/routing/ip-commands.rst
@@ -1,9 +1,8 @@
 .. _ip-commands:
 
-***********
+###########
 IP commands
-***********
-
+###########
 
 IPv4
 ====
@@ -11,18 +10,15 @@ IPv4
 System configuration commands
 -----------------------------
 
-
 .. cfgcmd:: set system ip disable-forwarding
 
    Use this command to disable IPv4 forwarding on all interfaces.
 
-
 .. cfgcmd:: set system ip arp table-size <number>
 
    Use this command to define the maximum number of entries to keep in
    the ARP cache (1024, 2048, 4096, 8192, 16384, 32768).
 
-
 .. cfgcmd:: set system ip multipath layer4-hashing
 
    Use this command to use Layer 4 information for IPv4 ECMP hashing.
@@ -31,13 +27,12 @@ System configuration commands
 Operational commands
 --------------------
 
-
 show commands
 ^^^^^^^^^^^^^
 
 See below the different parameters available for the IPv4 **show** command:
 
-.. code-block::
+.. code-block:: none
 
    vyos@vyos:~$ show ip
    Possible completions:
@@ -62,23 +57,22 @@ See below the different parameters available for the IPv4 **show** command:
      protocol      Show IP route-maps per protocol
      rip           Show Routing Information Protocol (RIP) information
      route         Show IP routes
-   
+
 
 reset commands
 ^^^^^^^^^^^^^^
 
 And the different IPv4 **reset** commands available:
 
-.. code-block::
+.. code-block:: none
 
-   vyos@vyos:~$ reset ip 
+   vyos@vyos:~$ reset ip
    Possible completions:
      arp           Reset Address Resolution Protocol (ARP) cache
      bgp           Clear Border Gateway Protocol (BGP) statistics or status
      igmp          IGMP clear commands
      multicast     IP multicast routing table
      route         Reset IP route
-   
 
 IPv6
 ====
@@ -91,61 +85,52 @@ System configuration commands
    Use this command to disable assignment of IPv6 addresses on all
    interfaces.
 
-
 .. cfgcmd:: set system ipv6 disable-forwarding
 
    Use this command to disable IPv6 forwarding on all interfaces.
 
-
 .. cfgcmd:: set system ipv6 neighbor table-size <number>
 
    Use this command to define the maximum number of entries to keep in
    the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768).
 
-
 .. cfgcmd:: set system ipv6 strict-dad
 
    Use this command to disable IPv6 operation on interface when
    Duplicate Address Detection fails on Link-Local address.
 
-
 .. cfgcmd:: set system ipv6 multipath layer4-hashing
 
    Use this command to user Layer 4 information for ECMP hashing.
 
 
-
 Operational commands
 --------------------
 
 Show commands
 ^^^^^^^^^^^^^
 
-
 .. opcmd:: show ipv6 neighbors
 
    Use this command to show IPv6 Neighbor Discovery Protocol information.
 
-
 .. opcmd:: show ipv6 groups
 
    Use this command to show IPv6 multicast group membership.
 
-
 .. opcmd:: show ipv6 forwarding
-  
+
    Use this command to show IPv6 forwarding status.
 
 .. opcmd:: show ipv6 route
 
    Use this command to show IPv6 routes.
 
-
    Check the many parameters available for the `show ipv6 route` command:
 
    .. code-block:: none
 
-      vyos@vyos:~$ show ipv6 route 
+      vyos@vyos:~$ show ipv6 route
       Possible completions:
         <Enter>       Execute the current command
         <X:X::X:X>    Show IPv6 routes of given address or prefix
@@ -162,7 +147,7 @@ Show commands
         summary       Show IPv6 routes summary
         table         Show IP routes in policy table
         vrf           Show IPv6 routes in VRF
-      
+
 
 .. opcmd:: show ipv6 prefix-list
 
@@ -172,13 +157,13 @@ Show commands
 
    .. code-block:: none
 
-      vyos@vyos:~$ show ipv6 prefix-list 
+      vyos@vyos:~$ show ipv6 prefix-list
       Possible completions:
         <Enter>       Execute the current command
         <WORD>        Show specified IPv6 prefix-list
         detail        Show detail of IPv6 prefix-lists
         summary       Show summary of IPv6 prefix-lists
-      
+
 .. opcmd:: show ipv6 access-list
 
    Use this command to show all IPv6 access lists
@@ -187,12 +172,10 @@ Show commands
 
    .. code-block:: none
 
-      vyos@vyos:~$ show ipv6 access-list 
+      vyos@vyos:~$ show ipv6 access-list
       Possible completions:
         <Enter>       Execute the current command
         <text>        Show specified IPv6 access-list
-      
-
 
 .. opcmd:: show ipv6 bgp
 
@@ -203,8 +186,8 @@ Show commands
    information:
 
    .. code-block:: none
-   
-      vyos@vyos:~$ show ipv6 bgp 
+
+      vyos@vyos:~$ show ipv6 bgp
       Possible completions:
         <Enter>       Execute the current command
         <X:X::X:X>    Show BGP information for given address or prefix
@@ -221,7 +204,7 @@ Show commands
         regexp        Show routes matching the AS path regular expression
         route-map     Show BGP routes matching the specified route map
         summary       Show summary of BGP neighbor status
-      
+
 
 .. opcmd:: show ipv6 ospfv3
 
@@ -229,10 +212,10 @@ Show commands
 
    You can get more specific OSPFv3 information by using the parameters
    shown below:
-   
-   .. code-block:: 
-   
-      vyos@vyos:~$ show ipv6 ospfv3 
+
+   .. code-block:: none
+
+      vyos@vyos:~$ show ipv6 ospfv3
       Possible completions:
         <Enter>       Execute the current command
         area          Show OSPFv3 spf-tree information
@@ -244,7 +227,7 @@ Show commands
         neighbor      Show OSPFv3 neighbor information
         redistribute  Show OSPFv3 redistribute External information
         route         Show OSPFv3 routing table information
-      
+
 .. opcmd:: show ipv6 ripng
 
    Use this command to get information about the RIPNG protocol
@@ -254,7 +237,6 @@ Show commands
    Use this command to show the status of the RIPNG protocol
 
 
-
 Reset commands
 ^^^^^^^^^^^^^^
 
@@ -266,12 +248,11 @@ Reset commands
 
 .. opcmd:: reset ipv6 neighbors <address | interface>
 
-   Use this command to reset IPv6 Neighbor Discovery Protocol cache for 
+   Use this command to reset IPv6 Neighbor Discovery Protocol cache for
    an address or interface.
 
 .. opcmd:: reset ipv6 route cache
 
    Use this command to flush the kernel IPv6 route cache.
-   An address can be added to flush it only for that route. 
-
+   An address can be added to flush it only for that route.
 

From be51e864e7559a71885d5bc7900df3b991366999 Mon Sep 17 00:00:00 2001
From: Tim Harman <tim@muppetz.com>
Date: Wed, 4 Nov 2020 16:42:00 +1300
Subject: [PATCH 056/295] Update conntrack.rst to document Unicast sync

Make it clear that it's possible to use the "peer" statement after the interface command, to enable UDP mode instead of Multicast mode.
---
 docs/services/conntrack.rst | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/docs/services/conntrack.rst b/docs/services/conntrack.rst
index 90f062e8..c361d293 100644
--- a/docs/services/conntrack.rst
+++ b/docs/services/conntrack.rst
@@ -26,6 +26,12 @@ tunnels it can be their tunnel ID, but otherwise is just zero, as if it were
 not part of the tuple. To be able to inspect the TCP port in all cases, packets
 will be mandatorily defragmented.
 
+It is possible to use either Multicast or Unicast to sync conntrack traffic.
+Most examples below show Multicast, but unicast can be specified by using the
+"peer" keywork after the specificed interface, as in the following example:  
+
+set service conntrack-sync interface eth0 peer 192.168.0.250
+
 Configuration
 ^^^^^^^^^^^^^
 
@@ -51,9 +57,12 @@ Configuration
 
   # Interface to use for syncing conntrack entries [REQUIRED]
   set service conntrack-sync interface <ifname>
-
+ 
   # Multicast group to use for syncing conntrack entries
   set service conntrack-sync mcast-group <x.x.x.x>
+  
+  # Peer to send Unicast UDP conntrack sync entires to, if not using Multicast above
+  set service conntrack-sync interface <ifname> peer <remote IP of peer>
 
   # Queue size for syncing conntrack entries (in MB)
   set service conntrack-sync sync-queue-size <size>

From a31185f89520300ae370e76bd72634d0239e505c Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Wed, 4 Nov 2020 18:09:17 +0100
Subject: [PATCH 057/295] wan-load-balancing: add wiki image for sticky
 connections

---
 docs/_static/images/sticky-connections.jpg | Bin 0 -> 22252 bytes
 docs/load-balancing.rst                    |   6 ++++++
 2 files changed, 6 insertions(+)
 create mode 100644 docs/_static/images/sticky-connections.jpg

diff --git a/docs/_static/images/sticky-connections.jpg b/docs/_static/images/sticky-connections.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..25fd72a94690d9c0cd634a1759f6fb03323b47a3
GIT binary patch
literal 22252
zcmdqJ2Ut|gwk|pm5J3S0C>fOu0+NGZ3rZHDNliutB!lEkD~L!-5D<_oNpjAyB`3)_
z=bUruaHo5pwU+L4&VFaVx9`2*_uwmfHZ#;5RinoE$3LnHJA$17uF6ZxNdq`IIKXr8
z7r@Q}+EOlNuK++%5nu-Z;1Yn3iv!?;M>t@S$Ho2I=g(sRdiC$eKfge)0eIlY-~WI8
zuj8NB0XXl!0zg49b{u#NT)KFX;3EDd0s;a;!b?O~$cV38zI=u9`VCStS}J-vS}Gcv
z+l*W+x9{F#prK(EV!L;rho7IHo<&4lm{*L8kDvGFLvRQQ39nqfLP1PS!Fz}14)4GG
zgZ&O%yM)tx!5<grE^y%*4(>G^Y$HGqz9~M~5<eT`KYnm7;Nsz5B)CLKbQ!#$<SK9h
z2N(AO9xgsU9w;u3CwLyfyM}-L4v)me8_*X7cWudd--aY!VvsDTBUkC&VdQ&h=S@g-
z^A-gq6%#WHD;qn%fS{1Di0I=dQqnTAa`LKb>KZUjEp0<1<5wo8X6E(|j!w=lu5Lc>
zeBb+h@JED(eGZR^{1O$Nl$?_KEiFAGv#_YRq_nKOqO!iBv8lPGwXMCce_(KEcw}^J
zc5Z%QacOyFb!~TV|KRZG_~i8Lr(8Gy?%&1wQ?h@M>l!H61w1@lJc6Hc;aqSA3+^>M
z{5w1suS-A)UfABa%lq~cnPf;}K^-9jpUMvTOS@j8n~eOkOuIit`<rC{Gr_$7UrF|-
zV1LOq23!FZ^TIXUYXAf|K4VRKL-ha0LI@be620HrqNdj3vZi5#1{CD+40}MGvt@e|
zO|3*PeMWCP9iBPlth`uMUoG%8-%Tl**f`{-G;^X3Wf4*d5^U=6)Ja>6Udlzer?<<N
zdQ*@cbm{rc_aEe{AP#2VrP2;|i@H>Xt{dtbkgcnlIHG*eJ-1GY{5>SHvMvZv2L!`9
zU-jy^3v+#F8B;toQ81kM)EI3UqvT57qLqwwzlOHg8w$)Bv(RW(uzQ?09ax!x1&H>D
zD!!RJi%P9c>fE2g!PnW!KM?5FAtcOd(uyOqRrNWJ>)j}ZMG6H9lzz%Dm!j<IrD!=B
zR+z;Cl+4MZ+6H%<9_$3AE!wYkKi1`|S9|9gH1cw_b7Y-039%?DiD3PD;s1JJk4VlO
zHG>jzvuM_xXAQ=zu%(O_-Z0}R+?2An$4}uDXv`q97>u2Pu|OKBr7R^(_<~{2k@LFW
zs&bWbrd)H0B$KZ-Ro(Ga8mi2Az9x4*#t`w1>ze*ncK@#5hdYBt@5j0%k9tu*MsD+Y
zlBONz>L*8-&M5cY*WDqoKcHRXJmy0;T}?ZVH4dH~-$iBh1v4?V(Hb10&27)w!;$Ws
zx15ts9pM~>osWhiT3-)eyLd3ccdBxkH74rgQ}}9PE2`2fTr??ZQ=Ld0Xi{H$*s+TR
zxPNFgv^XuU8lO~QWPLV=ruPTDZuj@C5k9+aI&yZAGQ%wNF-`Jy=^)6MvT2F_`W6=O
zZiu;Zuo!xpcB18FxRN<-NQg<&y8H0WmO(2PcnV$aAVqn|gkypD5O0||(cqzA)A`*j
zFOIXr$7huZJH~L9<nvN5|FQ+GR6OrX!VHPu7_vXmQt-yVqw#r`b3;*&rjvi;Sp0$P
zu2+of6{xP#g6<|xb+0dH&}%m@$6oJCcr-p!)uNT$#3%8d>_%nfPN8i<m&CrHTgpmY
z2lKV<RnLRYggaeLj^h)g?iN<QS0M`dB(cV3(J6j43Bd~dA1hJ(y*iD3op)uZ0wV0+
zK&aBtDf?KUB|Nqtw@-#n#mgk@1Xoe2K!njCDcv&x8WWYL0>Ix--Iv7zZw2j7i6DiX
z258sl1uW2Srsap;k3*(D;L3)1UVCXVu48j}e7^~UdJB((VaEEqCn~PPhnY;UK#xSm
zY<^KG7J!=J8Ei@4I#oxA_Z%bW$957bY}~Mbf*isAh2Tv=i1V`=$k7kdC37^HzPNXH
z#p82n_!+)F#umQo*y>WIH;^sxK+Y;+srA%^je&t+xmU|?S?^G_vd_}Sdak0POfJ>m
z=^N$|N>t->rZjJL#Cyj(Y|?G9gMI;9333r@$BK@Zkc@5h51c5(Fj~2EM@RF@mF_W7
zms^)JHaEoaou;oE8y6M6b&+;@NsvxK|6>@~DoAvGo_SG@CDlz+vmtyyepn2p5EGr|
z{!u-8cF~YFpMZdv!E+D`+>rCDUM!Qb8Fk}BdlIZ`sH>B)zsbA^-~t-M;flou9}lnq
zq^kV%h2P0A|G9&H&2&UZ&fyc~amJ^*p?mR#LI#-pBXR*UjSvK)P$W|=PR?F&(w7XX
z_6RCP27m=eZ!>>Mmb(4Zp3AAu8YE9!Ggk-_&VFi#1)N2Qw@BUMqwdM^T87w(qDj*a
zvg3qkUmQDty@s}Sl&*|k%*#tq$5^zXqUoj7uZw4li*VjD^AwLknGdQlr>>c31Z0eE
z#dlg_f!y)relfoE33`$-9AkU?d|sQtWB`!GU3%{JvIJSo<-T%^JRX3c?7r@FCXc!}
zb+KKf$*>a_x^8<mRN@kDOy{cQC~gk*Kx`+1-S=WxzJ~sI0}FryOwn(ue;bAw^+EY(
z9cVb~eJt8i#tgslJmH36CK(}ZiuB{!F6YO0xzE<VLC}|okW#mTpBGn!&mxN|Zc8}h
zr5udjwplQ5k`Rc?X}#-iYD{px`yS(Ha8B0?A2=Oa#(eqF3fcZ-dj{R|t2Rg~!gQwB
zVUkW?8Eok`^I-u`E{L+JXuuH`*gZF7w3w1riuT!~M(&P@xDyE3OCk`LzgQ<-A8!wB
zhWk_BP0e5htvvAWE*uYaR!yQd4-T|wNf@KBz+kf{WX$HpNr;^7y~ts1W9y9&=7+t!
zvDXr2RM%uwN9a|XR$c^6kt4{|0xy!QJtwMS-FlYyGDXx#QayfgYRyrElv@h2ktc=m
zI&?#@>)6<)MAS)<sZjif)_|HL;p&R-n;j{{dudLhO$-gtwuu3vz3#*;EXEaGCr5*f
zJzhgvYU9E$<<>|k=+cDqxMZVe8;f$uXi{X#DvmMg8yZgb=C|ZB%%Nng_7<iSrwr$v
z>vuq_A%j~X;)Z;?X~SriZFJ5b7^+Gs=~)BmCLi|AqqZ9uPea|fr_Q3JE!v&6xqyW2
zY1=HT!4z2DI=&M&C~6hgP};qaShZtaV0J08P0r8Jx9mRZ0fsV95teckD&{Pibbjx9
zQZ6xr3U{&Du}+Ox1nAMjlzVLs%3nt8;Zk)RyAlxe%qM0o2X5MlFj<UrCn4C|{zP9K
z-*#Hwn+$NxS602t38fve4ZeQ_xWQa1={~11C>D34Z4GvE<;%-eBe|B<?=h~)#2B`|
zEQ?q~rN4011Z!e@2`8HF^I&pKX}g&SH}4y19*-U*S!JM~YT0Gos__)(=$m`bdcz2s
z#JZ97Rw<Y2qzvkwIpwMJm{<bZr@!Z(o3MjUShaiL{=qtDK7Q&+1SJ`-D9wAiK_)|8
z%?Y!}>-wv5wL(m}_uhX0bnLK^cP8XPXCd8uHVrM&`DiAT$Vd}F&XAce=Ka7&S6+{9
z*-BoH%f*7eqYVpaqgORSVFP}JAVe@KBi?qC4<$9=1ra^5H!wRZ4Qs@_4_0$hbv&h@
z3N$jWV`c6fKqhSrhYNCuj0$AL6v@)_r~`QOTkmElBr~;S(o31>$T0=18o&OrE7DZm
z*#_C*ImAue5^oXZkIwHe2bJnQ8B_}RcNB6}<qCKA*ZFU(nQgePx><{N=L2CI?2{(-
z4+pcAc$OYO7g{j8II$QVnPqkI!7#3-7zMSWQdw0-60Kkj!#2Y$B>{0VwK7k6c~Ie%
zaegUy_TA*!*OkOR(m*pzoP>!8R4ka=2^}rU4;4nngc(E%OKrW82ZJrgA66jm+{4~W
zLuT(*YsJJdkM3XHw7(7UI7^C;Pm6zJ;*>n+yyAeI;4&ya-rGCe9=D#AB2$n3TYc)=
z*;a?tGNly(V%CtWo-#F>Nzqmh68WQx#9Fj=JdffS#52VQ%amJrJ2qqv=~L~qQ#G?L
zTw1%7_c}eb)Z4=~zxiafLLzs~<&?>cBUbf$Q&rQ*u4qqD&*6h3sEsinhl5=eY+nqP
zD`kZTSxXFrOe(W$XS^caX#6q*8w+V!)yFGEaE`@9r9$ecuV$Sb3e=c=HPc|ExcBl3
z$>aMIGIMqo@`(93x3I~$*U8VQZzmx*7?gh^jqI3BL6_VZl|Dr3C~lW;5JLrSk(*Gm
z7s1_<^prm1{tR~Obqq~fnz{0ta*;HZh@n;3<J%35Qvr}XNfFAd@R;;fD_h>FQF+c1
zisqZT#zqEPvJihbbU?LuQr#w6!8J*6c<1f14o@3hK-$UYBZdPJa<<})PL^l9!NqB1
z>Vxp_`=<{hdq5Tbap4yPeTi!`Vrz8vB}^=fB(vdD!vqbLv2Vx3_a|RD8=o3R$vkQ(
zKf3KL9;lst3h5R2u((P)cB;6s9-6jG?Ki_7k=a;7+X;^Ul&}9LICbHHf8W@c*23&v
z$;|^?fs0YNb!m-E6jA$($nAoO>5TM4czmbT`GkCk7yertl!Jgl<`^Rytesu{Pc!s0
z7;G9a^3>Q_Ioi-5$H_}o4NP~FCOwWpCZVOY2lJ-dCmBkmLXT#vvs}6*Cr7YAVKU=6
zsS3LupOT_r+jE#1P3T_xv>QyUh~5s~Q1bXVfvs2R7<!cFm9V_Gy1dfC(;OmQ(2V%-
zhCMR?Ab5l?ieT^ZtpBB5e{JL6j?>Mxb+z9FJ=(;dVEn>mc)pvkmR1>0Y>*Ttm&KbX
zBB|T!7Ue`0`)$GOEcBkx%=J|G-~=m%k>yae^_YT1CCfllXHBsA^5=<)E7>HJ6b{A=
zpJdXrR~#<~vKti-PKZ6Ldyf20v|QLWYA~JbR5$l+>p@JpbZ+rrg3TTX^Q#m~(~}TI
zU;c2i>_NE!4x>gAQMVi03GDowAT)-%Sp!!u-QFYS-`HZ#&AuzzideJD#vvF`86>7i
z*!aRA{^H_|LrEAGFwQ!V(;B%^`ERpP%9ZG)oU|5nFXPA=fIJsB$i!XV#lZsKG?K9Z
zy*(CaR6ombU>27|u>J)V*m76NtQZ5x$!@-40dOYzv#8aufPWlHTXdhKS9}|7-`(zq
zo+Cx!YdWX07@5h_>=ljYr5%=iseEGPDHc6g|EWK>L+ynR8LbTMN6&dIfJ2-062Xcn
zBq|YE^okSv1X|!9_5YKu{dr9kKaZ~DPA65{4e#6_UJANK)s?Si#ajWKWnOgW-a4I(
za8ho8{G+Ya&11jv8O!mB$IdpiP1PCqc!^tA>?qu+LJPV0Gjh1-j%ADxum|5t>_4Q5
zchlQqfiYTlpRs%Mr7bf279MU2NSXEJ<>SLwHRLi%gU^xNH;3P^aUYiU1&F%Ommj?N
z<Y|7WVwROmSg-6+s11VJr=OA#tQX!#?X|&g9dpHC0XlU!Iy!IgvQnh_0BoQc3q*sm
z8)qG=PJGz_osFEtFV_86OaHGN<6nly=+xTCzEEndzyhP0Xyu}1)q&vTX5`5XWGHV?
z0baGo`~aT}s-pZK;0cF(@P~#*nBKGT7rs}5rrunMPEH)_AP>{iW7Fwq-d`rjy#5gE
z-#6)(Pi{;l4YrKiZ1Cq6v@R{pxV2E?kv6q^J~AIkpVIexe9Xo)q>YN04#X^g;%IgK
z>Ojf6UB1nEKGb7S4RST~zC3_fB#R5AK{9JP2)|4*Np%pA(dt*#?9Jm}rG7c_q}Q+6
z>AJ9`I}Lq(CMQdJN^Y@;yPo!e$D;@>F8cGkvkUnMLBkSbfAS8)uWkF%?wd)(8oM6U
zu9-}YfzDZaq9Yu9LXk@kTfKdH09@N`7?%fy$xZ+juelQK1fOT34Jtc<zu?}u{j~cP
zlYqev<mIs`EMTP5Wf-Q|ulCl2@lL1)VF6)VGnq*MT}c{0B#(QauQ&kxaA~budY2?j
zd|+?V>?4DeEu(LWY24-Jrpg7{4p5DA9UbH38@{^*`YxjDYN_lDwDh8sq8Ojy*u>;6
zyp+i$8rEX*$(|cvF7L;q@=zU>GvmLilbN-3o>xZ`<Zef5?xVZ&)NS~^r9)on7p{A=
znub-HMd4%Qb-D-72`JYHQUzEIpu+8Am*;xZ8=O;g8!|eG^Ns?u6|IOi_l0C}Z9Eoo
zNd$Mq?Z-2-IpNX+0)C~M0+)46IhPTO>YG&3ybRWqFYX4W1@R=fjh1N*;oahuVf^l~
zO=C=!V9XeD8r@dX9(di^=<|Q0jQE_770L!A`L=^xDiCuFrLx@x2Zsc=k1uBAX4t0Y
z`)L#1Wg&!9%?W}5mJdcN0bc1TBR`sAOp>a3A?3L@@1+dep>=yx_5M)v^<DkoGs(YE
z3Oxu8veig!D6i>{Z&wzxnJi_nfaUlJX&J|c=wKDG{@9tc4=MiGm73ytON6*>uU|Q%
zdrxX_keb8Nw=E?38ZvdsAPIq3((oSBQsLvc8*wQu;`<7F08zeeo_?^73pF_MKEdUY
zx=hHR=V7o=%?*}U@xqBuuJC>8g6qvy6~tZ%pc={%k;pYNmQQ(=zyZ3oLV@3W+izrN
zE=SYZQCjL+uY`&HqI3@d$6}U!#d}wR9*xf#qJ@jnj^^yPOC}alt}qlc)iDYSV1WfP
zEHGz^1>QC2V}S%Lfbvd2DLSAf(;U$rLGV0PFm%j|S}TTy!|Pw<!Mm{lMnVb09DMRr
zVEgpv{jF@ECGI^WiW@%MBmKW~c_s3q#jUflaj!{8%%ZFNLn&PoCpVlGcJ>!6&$twm
zR_78`<k|Q#LHPA~^&i`gRns1xNw45be@aMtn05GA2@3>I!Z5XwSl~$$Y%LWzd3uA^
zy8?3KB>woxKyqm*VzM{!`i;8<B20cS#W}L`gh9Rx<@XhAC1a3ii7u;`<jXK)pix_-
za{fqqqI76*dR&MFYQdgHBx7!%VHnR1<o0{8&9lOjYLv26FseV!nhcgi^Zwbj8Dn_S
zRIBFP2d69v?#4qmUj$7cx_3Fua%>5Xtg^<xHB|E(^V)A~W;(>4iV(-HrQ6%bnfT-_
z4Rs}FO=J=VBn?Vl0G{Yg7$wX(p?n<$nmu@z>vN~4E1Xe-N{6{!)lrP`@kp<<BK2CQ
z1jUD&kVi=fHcHS@JOa(}|Gbd5pMd)D=stY79Sf{*>f7plz8^nCGhEQ7L%y-tVG%zs
z<>E+Qb_730lAbUd7+|(RF9RG?Wx&6UnL{&mo5~X>X%O<&CWD%GX{-85w@`1avB3Hg
zDf*&zvMM@0u0Il_hVfFr$P>%6cMlxeGUuf1vX^GO5|w>(`5oQ*cX)c;kwCIxy0-cK
zC@U5%@@Etzl%&aQi%JDc)%uAMV<I|mw%aQ!ui<A{AW)$rmHs_UP%B(Cp)oMQ@hore
zJZj~Lj{ICGkfn+Z<4>`lcrY<Kzq5RhTVE}$#WmY&^`s!X=c9lAE*iBNEMm~{$<rnM
zWwglWFB5{IXTj;48Y}J^6{#jAIpfQxlogdcb^$hYtE+h(N;0q9Q^{usR59I{<DU|A
zuVaBp6nusbY>-7ze_U7Lha1ypqVmad&$*Al#$j+-_e^NP;B4{3{Gdwbkn?Fj)HP4|
zIWic9J7Jm)Api$n7N~Hzpw5kzadgMJ8qJSvy{kw{odCgHsP`WTrFy;v3+&PPU}`{x
zmNY+b+YhD(Z*?O*J2F5MX650dR3j--4B_C|7!`X1f&$==lDj-RjcP=0Mq;{k1)L!y
zSYU|>G=9h<x1}a5aM55`HJK1)jCOc{U`?uiJW8~0KyDuGTjp;)=Y6)sI{fMyvoY?1
zY7f;x=3X8JyminW>}l|2Z&tl#6AeNmTj!fgGqRi+O;NHzt!JMR?XT5K81d*Oh58H|
z4GzfQD9SV}a7$?rzQ6<CX>c9BBAuy*wliq2ovY2DUxK?D(%r=ZUz4%GOef@|l4p+l
zj0l3c(vJl`W*$Hf+u-cyK5HQuljDeAPbL3$Q=SyPZscBG`NO|GP_$(Z{~k=`c0tFr
z3>FrOwo^2K%CP<a{@i=ra}>8jO$JPOnsE$iPwa4Rn-Db~GVEs#mkHf+6NruEYvcEx
zGbUz;5FWop2~pLE#7I;|qTTZ_fkEjCSl~9b(%C6!m?aQZuMfpj)S~644}^EG9$7UB
zm93eZVmK3I`kPXm3R)9CTEDuzuXZ@;q~~O696|P>IrWjsGuP~B4o7Js-Bt7FYn?42
zHKfuf9v4<_u)hH+o&%eEIgXC)C%BkLAU`+U0bk+JQ+F8&o@+f^dC;#2j(^RV-wlAq
z&5F4gacUmY=}E(fDhXAX-A(mN^47gix@^6xqpH+$4+BLTL+o9zSc+!6sM=fCH_mX0
zQ5$H};<{o>e`<289YVLfn~m6hkAp6K-Az+lFD_|7wNkKbxhIF&Fgcq`G@xC@e{*++
zR3!oJwy(`$lis(_bGB)~Fl<>Zm1<6MeQNiLU(!Rhgl}#b@(g`iy@Yotm0sC<j+9uy
zPG&1Lq;~dz5o8!4&)i11)H@06lY;o7_PQU}CKZe~Y2R&Cp8jSZ@J1H3ix}{pqfUR9
zFCW_M#w#dgD}OyGhZbQQ@gwxtaN=iRv{Y?Fq?lA+s4E5BB660c@YyS)XJsy@&)0$X
zXm?;vVn9<eY!4c;Q=ksiR1Q!pOI(}WPWUG|yE$$SmyGmLsVU-i3FvThQbJ=atFIH{
zq7BYj_R=wRR$#AMaG%fFV1%9+?BP^_PUH*ZfYLnBA!XbRBg1FLl$iTTn=3}VV9-ja
zjo%Kp(DKD&9~Av2=}?xZ_c+FT$l$nf8fBf{t0<9+{AAD79MYGhdEGv9)YbY2V%&J)
z4I%v+7%b4o$sAp_IlHU{pS}U#tpvyMC*m};2k6YdHmR9O36`O}6<G>$ceDj#@bkf{
zTKGe6fK_?ppy)Re`qDd6wB+kz)Qd<&MYHSt<`^;uR2;%IenyaYXSJ0h`T4!T_>b4s
zp(2M9zkN-^S-FTeb56=m?ZTsWz-wncsKzY+GMl8ofP#gq5~?tY=?aALHU@7n3ci4A
z2DTWedMi8{?n$kwdXL%GD2z00)A(yfJwX#)hw7YkQ-#;~b()=69qSB?R(SVWxC;-f
z7hk;e)ar9g*wO>rJ-7Rr)6YwPwt6IbR|pGGX9pL$!gsehnlRl{2CWAu9+?<>`m<I%
zpYvWJNC=oIP?U%E!9eh%fB{zO-TFeklqTUH%O*z4n8V5BZq#NO-Bh3Qv#bsX?><AS
z3(${nB3C#;TkD~S1)A4N2GP}}W0o(#9O|OHY$}PzC@JOofJ1s_B9nk4cWZNwh>BAz
z=eqrn7zb6;Y}OOGP-E(yl}iN6Hp--{Is$$(prVjlB4^-d)EbK}B}jj64YvWLAN><B
zBza}}M_fX_Oa}pb>45%l19^4>mOLEm0(#cRJ@8==OspvCxp2?LmUqw6<d8x2+ZKKs
zqrche*{q5aXDq<OeGUpxG%Uz{!i%YlqfnaXUQe8WN|DdewZg((8ZgpX(<cO&HzjK&
zi~9GmKuG2>1`M^oayrdGKA<73^DS^<Fi#XEn1u!Ie4IWz2?M=}fJ)99a*v`0)LMVY
z0fRcnhmC(kSIh>d7uO69w~%LoqKVw7H&&4KB{=#bdo6O0cmTOR2|uuOlr%U6#^A$0
zu)x_B^|j}<qzNmo<=w%HXP-@z5C<f<y(sWaZiC}{eGz#;o|{==0Ki)>!p}}^(D)Xa
zd6#dXwCJYjPoQAk`GSAF03%6Bhf8Ervi#@K(abjcfGVNMr&xdw_AEA2A%amYgUTXW
zD)^>FnrwmQ3}jVx;SOeIYZ~;;LwWaKnY{eb6cr@L!WdlyPoFe*rt_TmCdX4ugY$L;
z$Sm2IUCD%&skY{64ThhAO|N(H&nQ@1o2$q+SwFk?dT-cyYf(e+?s4`QyD>S_E8(`L
zNxDh041T$LCai0eO6mM(dsae?XWzb%GnDg6R$odzeJ@U6djj)JbcyKK*7G?QdSskr
zI6Of&S8YC`)j#auc2ICX<J*sM&{co=6UK_<QRh^d=6{Sb4t&^C&eKe@Y~ged68HL{
z2AFGwlp#+pAyIZ!2|s=QMbfiV12leC7sqhjw^eIb&C;6O=FEqmOK)hSGY?KfQ(|h{
ztF1_Qg89(MzOQ@5d8cTwYrjijf%$N0#M+`~m$mUozYeEB4r9fwVRwcQ28NA~vH33{
zi)rU92kF&092mF_eCHbcWbqo<LED(x=b*ng&g2iZs)64r%`QfD!aUis@06UYuk0<l
z3VDXRPFyvlGdZWvkytb{*gpsT{F{$pR)al|Y(RUBh4GBa%J^GOiZk=swo$0qbI%a_
za3UpCF%~fOD!CP&3h&<B#$4dW0yIg#YLN72RSS5lotb#xzgnBUmRWuiUZAJblijFW
zH$Q%#=;+=SR~yj(wJE{(JK668b#WAV;1K>-T?%;{?p5xl`g0rE*C@KIuD(AVEdm=d
z+lyT0Tu9pB5Ox*-+0x;HFx;U}eJrJrd<(f^c12y@yw}ZXXj-61{8oeQ+Rzz(mf5jj
zS;X|i#>x+MEYl(#Y_`LY25sc{t=I6DC4aX!jxK^vk?;FKM?srj4R-3?oJbTY7I<tv
zkw=tGmBH~a``8Sol1Ask88POi?R8Pji>Y_CUVKld)s3m=J`aipSKI8a?Av)`V{yu7
z5{dJ2$|)am{W9}g1-@XYdZRkNC0yZh<+k~viDC1BZgYbqG;-qM`W75a7)lwzpP#~a
z*E825FbS)4Hkd$SnURum<iPrUdC2P84<1x+*eUeKIYHsKqv+GLGnUin1C3|fS3&%F
zuNdTeHd8(=gRkvIl9<)VCy2-<Fu1#^16q;GGNPneZ5#ckd4tK?{{UAPsvqnssP}C>
zh0W$|M70sM92a=QeXG!<OB^Y?o*Qm~=<o?>CzXO}_D$1v;nSFOfl{pxzS^~`u1C-h
z9kb_y$)m~f;CNXf{rs0<0Qul8FIp_{Ljf}i-#Bc5+3##)UK$*AU;&d{OM@L_w4><#
zgl2=`$K~LyjpCp3*mwO<fiUC_DH_LO(4xKi1r}gX-$sGh`;qqMclfn4ct}eShUyS>
zf>toh<6FqXT^7tc^HiPR&@1fP$RF1IkI$$7of-6mFHmQ|hbuu_KeF}?xrYO4eO?q6
zIH1THsPmwQ^z7Rv(03fN_DYej&=4g54&dx+L7@HV3Klrrn?55NR@cADa#AQ>4cSQo
z>wRwdv+_I7Gc`W}3t_r+HS=cLu(G}{jOMRR7?_Zg2Xu!8^HvfY2TII>4HKpHGRL-I
z82UihI5%N2F{6rw*Du%GxkH)!^R~ID9fnn9J+&pxFUT>5%87R}k*_jFw8W0PgSheO
ze<BQ3bh<gSSH-wgG`kjGj0`xaOpqG&*$k`p<!l3WAzsfP+@A^lK~<&e^(NvbhP<?L
zz(#*etd?R*j3cn6_YHH_*hzAOc2Jd7irKJe+{8W)^?X(A-I?ohOwBF?Uj_CL<JcW(
zbk;nXsY(6w6viZpQ*x)J(maFa5Q*qu5NC;lrb*NW!xg;YZgaX0nwq!$@Lh)-IuQ0w
z8M``h5AmKPKc$Kt^XPZI(RdDVuP^I4K<#QE3pSC<IolWl(DyeD)7s9scRtpw3{TnP
zypq7tx+L@BBsQUOs5ns`w(P{4#g3RrAKNY7ZAyByX+vHg<6GaVL+@B|Dl1UuSv!t-
zD`;>$F^#gT48F0lV_JL5dy0_xwe{yPhOn-o6;aafup9b8*LjZI_<YFO+!dj@VPk?Z
z;%$97ARe=QTWk5kCkzGO2nM0wFVFgbT)+h#yup3=3hyA*3KRxk`au&Hc}n$I-T%4E
z#c<=rDvrXf$WR<mC$d4)iE*SK-$bt50O5dV=iiO(>8*oNv5jHZ&0C7z3uYQI3(>Nz
z(}MRCFJT}@!K>=E(_r&Gis3%rvcZTv`BfJ)16i8{umFBI8$TF^QOT(Lf0ZQxYfR?L
z+=}#mg!i`^jl9(Vx7Da(ULYUBu&N>TQtyM1!uK{yc=n+o6#Yx{r1vU?z!k%~I^Cl-
z@01mVIAlqhylWkGEq`d3M-NFt<Q$#boZ*ear|sdp?VvB2?^Xau+AA#3+ow(iMOa`i
zv#Wp@^}D!Xec`=Ys$vJ<JF3V_?>;?rI%LF@6zR73I;?Ps37Ig|^cW&PY^6#Zj~C{X
z7yPDj)!La4`?L??L(2tn9iuJJJ|Lx(F)bisjR*ZREr?ie$sCE7p$>m~+g0RAWmoSu
z+H-MA@8f|w>2KN!Hynp|>rA6aV!$Xj>E~6mpymz;eK{v?mc#9^3>i+<`2E39J<}e6
zlsdY@*kt^RM}}d+&fh+Rx^Lj3ub__hA`qGBd{B4vmL!rYX2bKmnzCp!9<m+X{X3(T
z(pO8bE32XR49?_s3Z*HVa|5Ffm$6As0Ub>SE-0tkg)L3=(w0RTv3#Itn~EFF$d6|X
zHwaX(j(d)aWU?mJJpOA=0DD*51wC_(d|BBbIdzI)Nn1VVF-nOKckkf_GnkGBKZS?s
zQv7guoy(RrF&56{=pHNe8=74x(Q(;yRQLi${u)7&0n2pLe)8+T*z#{|8Om0!UdFTG
zS*dHzprLbV$tV9E(7NTg!U7-*=3ryLfv;TFD<_?UDD4UFPB-WymlQKWob>V-Q_Bb<
zmq4`)E`g8KG5#j*mp|=^I9+xqZxfk6cBDUwh{FO8g$z!}kSOb-vs9Z!RN%uh8RQZf
z6rGv|?+zTs;Df3}oqVqF45U=4^H4+v7$KQK4mkG$y-xD<J`pRXuOGSGyp9DfM1s*{
z@9(#*g(D;PNOO9(PkqVYW@gj-^Nygo0`;<a<sa@ll%MW6B^X*cM%5!A#l_pFyP(JT
zo(ih5!#~{kx3~0JcW}oTfqw4xqyna97z;?Zs4@K-3#xWzYR5eI@Vq#R%IK1|T*Dh&
z4u?ySs&!?s@?U6({DH-1Y;ulh5*kI>fiPQ7h)N)cg46D-V19Qzx_NIP3%C%pM;XSu
zWDw@-kGU6YLyBSr{evd;&zObAq>=T@nATH**4%cb3QElTa;hUmnBqr`{?y{gH}i{@
zMp;e*i`wzQ?kQb{l^=Y&Zc4P5^$h2DXWb%smcF<9IVG*T_cIuzZwdd&c>TeAA>zCG
zEY4eVp6m6sjzG~CNd~}L%D%u?`t33>1k~!vzLOFcct_rTh;=b@C?Rda+__+EJki9y
zZ6mqj;o$I?hdAZMy_1m1mruRYP#jtP#aW!}H^^h};GB03#;jRH<O*KXU&>xd^NI1o
zeE2?Gjgx9osdlsbi*?T2wI&Cjkl<~Sc`<Otovw+G2TuB`K3}*1Q?&4lGL!dfW0Hw&
zw_i7m#QNwXK|+*O(q5fzd0@6EK!cw69>3nqV2wDW!;s~iY7sK9UisOpb5RzuyTEdo
zyy3P0UpxHh4CXM7bdU$Pw1<+47YzD^YYQOU74VRdszxXl=-}j<$BfC5V%iUql?OqB
zOeYakvOM<`8#Jl01yqJ(i*AhDg}ddzbk5^No?b&rqe{POepol92Z{91JWm0LD$Dau
z<hf<02J^x&l?vcs6Fsn@9<S;8NF?2Rfr|{Yryk%rwADy71243OFQ-OgE;fMP5tjB&
zX>_aB0z)J=p|)BXU5AQ`oQtAzL0}9H-8w<7t8!>L8%P+}&O_sE!?(}jfdVM;d%eX$
z5hQPXUs<Hf;w=MlQ!RS}q$ma>&*tJ_OvTzY?mf5Fno23u<{4l7Kzv!~sljd~Dp0e;
zQ+B0Hg;si_azZk(`luD(sI|+}Z-G7XXebNhR31#9W2WcjqiNgCikhQiWjFaP?+WGf
z=Hu+iv4|Nt(<<o?A`1?mtUipoeIR6e2X&mVDEEx5ss&^;{7@HH1S6TG_AAkxClQd+
z5`!~BFab9Wa!ORcf6HMCL|5N6%Sqg8yDbL$)JjOvN?{qFTxJW^`CKl1L*m*&c@&5g
zds;hHvL0tC3@iPJeAndg(JLAQ6I>iTypuH6DnOmTY0De2KhB6Bj4N^siOMwirFpd7
z3F&1^eN76virN=0kGSzR<8*BwDJ`o1*6ivsqvMJ1YEsYqewAJ3*DudRIY$CywR;$@
zC)SRVfbZG0ZF`EaIa2IK9e{Mg_YwF>X5OUhjq`5a&8@r)rf;zw>66|^i(mXltRGtX
zup~Spm{mjm))ZyVX&sy;-i$+1NpF&aOQq`eX$y{PDAbiUViHbQL2&UlADrf=&U56n
zqV~_<&FbbRIc0PY0rlsYR_WPL-iJ2IGP8=9HZWv}k1#l)2E!Y2_4B;DaMvX_n6F91
ze1k@4H%AA9O-I#DmgN@%L!E{$8aI6!G(svQJCIB?!snY4*NH8M{WYfgG`6~5g`;C_
zMnPkv75&rV{H?gQ1cP}maRRhEH|E{o%Hi)^i~i-4G%mgq84f8jSfMM96nT}&ET_g<
zAIBFJ2AYo*_RJ*gOu}{g&zhvKhZU>;VCMjb*gJYH%mU<iFZe{_Fk$O47J##h*KjXM
zof9RrcfG!T>Glj_n2w=#w7ni|n)qf&!uo20hkEy)SF`^0h@#k?L(Z=L0%)4{17`c|
z9~)Z!_gWa^Q-*DS2~!03`gEu(tiAzq)K-=>0mH_BolCyi|8;B+)n5NCi{lg{V+%@w
zaK}++?mIa5*VfvwN)4&3s?S!kPEoI9`!-Z>Cf*Jisf3|%?;*GAv4AiAuV0i0J+#uy
zgkBB3;19)#*!xUd+rntC9vrxFfg^_Y5r?6LtAbC0QgoTxx`3noEfs{5lOUwPA@A%W
zNHqF_Q}}-S(qcnBl9eeCltf#}=5Gfl9!PF3m1@6C{G^<cV<A@tBQ8^zw?x+$9Ma(u
zy0UtP9?Z$9`TY7@XV#H$5bv9K`Q?o4yiJRQ(`B#;-zbCHC6Jn>@FIIH@>c7ZH^F!X
zep2ZKD@_95ScWH}rF~xv{kWsq+0)<l^fY`;bx~Pf!Qk<a1imm^H@CRy_Zyau#21Fv
z*6Q2k61<kqd9Td2(%=Mnm%x90{UwLs>m#dF>LvcA14iRj7BP-`r!QTogLA-4>AR^$
zxka=ebpKM<G@E_!x3&FD)y$;{)q)k(3^@rl?WL9@E|7wG)WLnegPhfceO%Dv)<9f-
zpu?JMiW`2;sMxhcxv2CtXLjC#`5ylJBzg4A9sP$$0lTT&gZw#8XfBWO5y2-6<42B`
zGhwl(K10O~l1Xt(#e9v=Vtl_I@*+!e;mdK67#vX98V6uP{gX+IwVF>DGh41p;|RCa
zzg>Z_>#Q>un~oZEmPI*Bu~J-tB+_2mRJZ6u1g+9}#FkouezTBNW`_Xv#su^a5umBk
zsLWjS_?>O5zNfTn<n98WeF9$oeFXdiuoX&&CdysYlC8VKODu{2euOntiluR;>G)vU
ztuX4u)4mSw<xk*7va%~Xf!UCj-JEC+DGiHPtqwECvI{K@X#R(aoxKK6^G?*Xk9|11
z;`34;m%7-=Z!xw)=nhAEH3|e&pDo!C%YDms@ky562ujs^MwDN7F-E^6%f;r|5XtF0
zn;_3p^Xutg!;@h?NW-X)*BqL{P0Z-pDb<15yjh$37@xO`Xo#D65Eo+e?uoky=mgWH
zkz36=XNZBK9p)$;jq*^7_p}lZ)G)XSLz$ZG964=4*Rxg)eG2+)4mqa{OG1^?@PYu8
z5_y@~jGl(wl_d`2?gufpC_nlfH~y=St%#cN<Y+8<m7f!ZmM;gzoTvwtKmS_GVo&{K
zXE6T5<(4RGiWjN2<2@wxrKU;ciz13sN~*a$Pz?k~MEo{C4mbQK+<pUcWqF{!^k`Sl
z)$ld%q>SC;U}{vxd7b9)_5*~&cF)`5?KyrK8b2Gk?T<W}bUP7YlHDt?wN97%3C)ma
zr#_(Hi%1`;lrXKdJZe!do@VTAC21@0B_Z8`7elmjeoX+Zs=(k2UCy_RF~(FJvSv_z
zQsF_%>SAMQtHK>wM$$w0MnZe?uhl(tL^CTf5dKQot6#^VV7PrG@ZV((eoIh%<JB16
zGnRWW>Gevku&fIzR(crl8KdSZbPWq+l~0H>DZ`<`>pC*>{?FyQvcQ;?m%}PD6kvpd
z-rUs7@gFF75w-)3gGy9TaQ5(+P0UdDeod{EmbLW_sS+(K>gVNO{O>;h9#^m%M4D!O
zsPQ13$tvsiG`hdROD1~Kg_By*d&ImnW<FYua8&Sq9e^P{Qd(7K?Au7yD>Qc^sSTt7
z87s5CU@?s#Ocn~+Y8Ot4bQ3&)C)Z#ORFksXzDik#h`9|`E3j`%_-o0w>A&X-Qaf`<
zXZBVwnmnpfK$_wqro+<db5wFrz3>DS{dXmzRFp{C!eqjH+MF&DoL?Z$ji~`cI2k!L
z^Mj(*VZkAu(kv^y0!c%ocoDVbA5QZNb+dl*4}VP$J&V(9Gd0onmAA6ba*Ge1`8A0E
z`agk>4H_T97~6$rd#;jpO?{>BE466KLCLul4W^=m&u)W679W_>|9f`#AEzwT(ES7L
zwq6G(TWp43S~N{U94X!A&>vSDeo-3qz%2J2`~A0MA;H!hcgrkMI+-J5QdXB683LVh
z4cnTGp@PM7XVI!=;yU`?a7&jkjQdaEM1W$&jO?<Yj=_klmh?mo3+%*NK&JgL=w2*9
z*j$7@fp1S5w?P&RhFgc@Azk1&h$1*@@rNweY@>JJ^}(CL*Wumn)90YfzDj@HLjUJu
z{(i5>JZk&w^otO0x4@53-3UIOjz|iT<J|tgve;IO6J^786F($Er6)!xD04ghJSEL>
zLb`bRp88~c>2FbET0XhooSrAY&OK>~s?RS44nQqDS4YECedO}pGrBL==eoYyz<1?J
zgg;DkXBuoUo;aW-bHW{~+$o2fo~9Ox*s7zW7j=phWO^3|rxZqWH|L2?nP-cZ=+YSa
zN-ehpIL&PznBRmp7~k1@>R+Nczm0!H%eStpPQLmqENr@8F<4YU&CPASVq8-klj_cu
z>-c~yl%|fl{Y!h0Gfq5Tm|Wt-n)9oD6+P*8f~fEIymoam6qGaex|+?iRl?oExhWR$
z)Bx$mb=$T2!VI}oqdYiMVvcA=Rhdl;OV8cfFvZG<ag`!pYrV3RtTu6Rmv!kdl0^5}
zZ^cyMDT2#(t}4MXxo&84`ps!#&?e!6vy{l-)+aWYH}oev>E_m$?HS~cl$o4uFK(27
zvLAHNLmcFYZak1Uf=9ECFNSFG0$pzXNs-W@oEHP{6OAIBvgPk6hF*a9iPxbjz#x14
z=X{v21Q;<67Ok3oZjZ3E5o*bbDZWpWJZSS|LLm#C1z)x%4p4st9j@uFIYZ%=W9EXd
zR+Y0FiVOuIzHh}s#)?e(610jvRXD2ncqm=SJxV#J1Lh%J7400xQcY9bJF6pYgDM)K
zDEJMfXEkr1N7SQ4ia%{>KqEk8QcbWTW2;AFK-y;-s(JW&WrjE3=XUV<T6y#uieXM^
z<5Z)56Xbw&Q2|P4rH~#>LY$P#0KzV%J(1mNZ$N7M1O`7O#{z9|OndMz$5jZ9uCqy-
zB~<X^wa@NeuV8)$1{)lNoL;@l+n?L2UQHO`1Q?xZ<dA7x4+~pzkCA3)Zv{Q-U(+@I
z3|{~F%0?0xXruOUd@!{z(CVA-BaUbdWy*#&ua7M*KGDK^)BH#T2%0$?;zr%3f}v0#
zT$#22VZw0o`^Nq>r3jgX4-H)@r%A3&<SXECd;=z5c0pFiGY{-Tncr_2!UB3JFAhc1
zh<}@lqyMG$Qolx@!VB@KHbyzZsfzaZxF_&2NGj-!E?oru7~~f6cnrj7{1LpNmTB*@
zjQ$68^`C9t^-5ElP5qUUP_w8Cmgwbjq~yP5>s&iP*<hm^@jTIQa)TVg2ZPK4eaPjx
zW6Ze$I3+EoKPUjMp1}!SCW9qofqEP;Mbxy7K0=}t>Hk5<VYAC?j?bvTl&aVP^6bb4
zP0Iw$dm2+mW!Wo1t>lDv?aMGpb>NQ)RBg67_sJvvywj7P=4%+7OPoq$%!r7%o@EkK
zn3bUc_zYZ&_Svw_yI)ifUyYjI6Y~mR{eNiFz6cId&Q7+z#(oW-!c9;5%+XIL>W5i2
z#AEzWZT-6aS!W6(`UlR7;3Al5fkH7Uvul^rWo*-g(Bds6knNdv`23)~V*gy<!AbUv
ziRpY--@=VHmVCMr%Qq5uMpS#|7J_pJ73-=Qx9~C_8*oBqyl@R8M3S}cIy$`g)NV&Q
z|13L0>_HkOm5$3)`%62cBKvDB1HQA!nMeH|fp*<!#mU-43e4q{y%bR59z!s{mQkgX
zR1+uSasB)N<!Im;=*Gct?!JLC*Y;eD7j0WSEkHXnzlKa*DCXqO;hx*K+<H+SeBLYk
z;!HUu{#{p~EJsP2SAtjL0aOb53HEy;TR&Leb{=$Qq!L&_ALIxU1srFP2)lX6JG)}2
zlsn5O^4^iPGqRh?P4>yI{p_;~t*5~`_Mg?B5t;ueS8ST3H8}b?nQjFHt-(Z)G7ljT
za+9K5U~Ez*hc3r(ckc0y!t;<pEbxc*N<MdPfFFQ7Rg16PXXxLqA+_P^*pm9V`aJ%~
z%qns3#jAE1bnmKOa0BwxA3n~FjxRU=HDN?iVovM^a*TTGEbFJVO<)3^ZR5|-@{bVn
zf5)ekJx7Dpy$ovkm6S|w4dEHJVr7Ex5v}#3DTZ6k&Ccbp8}eW6)cpze8%XPGlxg00
zdYZq3?9o?)9#xY7BhG1%vp#qfs7KM8)*AN(%>BR3|Bq?bKUX*Yt!Q{o`F)$}T<$dW
zp2xU1KD7%zp_)Z%_khb0wshH_k?c5mNkfiaWq`(nPP9QbIR(~BDAU8cY10^ye6FNg
zGIuWH3?0&;e3HDYF*f~4pg>BAv-DN%bj&;g?zd>uykv#^z+dJ6<nHF(*n{^o6h@$i
z>EfQj$bYH;N!=eR;6~n5d<#mEdnd@WTP*|^_k^mkV&|3r1HYh=anS%a-~6v`cp^%D
zWr-SUX+H*kSo9@p(`1xmAd9Db9qD;smjB%=claUkH{Em$b&WVK{Rx@-Bd{h#dcz3%
zL(KL3FC<4c)HhCKGf?YQ=knq&ySO)^An$GA54@bjx)2B5d~!;Mm|Nu^F|+F|n75Ta
zf*&Rx&vy75oFhl2ATV|M9QrYbbAlsr____!@W)D?N<Y7>as1rgv0QPPmSnczH-1B^
zTvy90)=U-6F1TUZzXjL=U!=13ir5zW-c`7UiP<5JARBrdn70uI$Fm^V`Q<p_=$-qG
zLrP~cFn{j{-@lFpN)67%9SwdB(3Px=%}lB`N_*<6sH@ZKmudMB?WMc|Y~?9tGKB2*
zDwgpG)?D23pHbVtTG)M$a%|G3SC7K7qiREvf*xILdR~>^B0>qw`}E}vL*|7U;Uo&K
z7rj7ritL>q;wuksawcugWD|PDCK%pp&3#o%aZc-ie2V+dyQhtBi+zG{y6kvKcqX8?
zKHOU<8rY_gqpgj*7t+b__B~HPfiB&n)h>~X<^EhvK`~bI$<)`FP<;xY?5tAg)Lf5F
z?+71fl?j$<U?_XUM2Ms~F^RY1S80zpSRYzeJkNQf>DxuB-9MVQzRR}^AD(g45Jl%;
z{J1hhlxSZ2i;Wm5GfGBHq?l0750_^;VR-wkJ=h>03>AWl9+AcnK4OyOsiSOuEwSE%
zXfVs;-&AVUfF14V1U_q47||dcQ=9THd?wG$Xes`{OH-erEKFwSiSyBlVnjyjV;h%D
zzCvTEy#<ssNJ)G*%QUMZ>`ZZE&dCKQ?fb_ScbtE?9sDEO^qOGOenR#4QlM>&ghP64
ziMm76+G;}XN^7C?d@>s)!Ja_dNmb*`;0G?oj+YfgtY1Pb%FCk+uS!nPR(+V*;00(!
z;|Kd!lR6zb)cO~K6!`sBZu<MMJ-UBiMn60zFe%DxO7UiT62iOwpF)V1VD&gLt%qTD
z`5*L0tvPA!DD&l8bHdsP%;pO+&rJMP_M!1?W5P2Lo12!Gq<=IEpl3Pzw=d#;bBZs~
z&5k!R9k<V(E=ziXOr~FltrKy+tnXWgMbFKfDx`eGq5Q}rg+m4?@Q9pBE0t&kH@c}s
zlto@#X^ePI?HkYHKaXc*OmT6!jOM6QL~7c){-efur#yR3P_k8e^QN^iKD9+kPxZ4j
z%0=A^5cU#i!Ha*k=0r_EQJa`u_)16z|M2w>&%Li+Ze6(XHWZk-5&CF8#~>R*_BeS$
zvw<$pX-Hwo+I!QOhr$S$@fT%lwvDenn16LhR@&27P;D_nIn}q+JBZ+i5#i#l5rwAM
ziQt_%;;CouD|9~AsO{~J^CTY%Bgtj3lGgEP5wGpDzniGM>vu=t0@-{#pB&uGhW_2*
zQo-Q8Tux*6=M4RvKkiG;NwrDRM%q%esy5?@yY`QsMx84$^t0wZh86Z#vpA<&M3fec
zYwJXoRr3&61U<UniJq@f4QuOsIjuRNJz{E=u3&~=ve7?juH=3#VnT_Tis$YY^lf`U
z?1ijpvd=fxgaj+;!lYbln%)s7Y1Q3KCSLSyt^y>CZ%AA*cQN{~WtnT=9(zIawM0vz
z_Lz?5I8#Y#wZ;y!Qxg%MdRyCf8WK7FR5C<B3^TY;j_9|E5x*@a`1kIlBGP?x#9XDt
zIAbNB@KAwJvx(ACd1Xz#Stoca9$uw(7)R@106fWW6+=_r++)*4uQHs*V9q*%Pskk)
z6<}9snb$Y3%Ggp!dSoc`R*|SZ-yJ5m4ePzenxoaGwF=u`857K-MaH;9Zl>#w+YlMJ
z7+a;xSOeZTw`~X1I|8}3RjLOaAJkArQ-74rxuq29pv9za_oFEsk#SmU5Od<nG2n3I
zG}qTWHA3?tS*<(wBD<Si`ql<(f3I%+&Hz<vr9S7r-erUPo<R>rugmoc29A#s;#qg`
z%6(rL+9XpGa<=O${OM2sZOe1P?BzdM<|}dgO4!>+_~hN@`n-J`LX6L>Q)#R|emyHw
z>JaGEJ2{4a4za?!&$b#{McR_Ks&}=1Fg}B3zp?*)q&O8~Ps>9!M=@@AkM#JF!2&ze
z?#0~fO9R%t;syf90hUQhPdD1A^#fSc$jP*NsqN8wh4gbj<utlRxbCoHvV~LhU_t1_
zr}g7`>r8lk#oBD93e25arBO1uaH0<+8gO6#K{WhVpV{cg$Hy8GkK_6XQ;we82B90c
zycpI-M92t;Fb)z6Q%5lmP+VoHZ;0<D@!MrgNF;~$s~G3L_x)vA*q?ai58U$a|NMRL
z7Ul4|Dne&x;y`c}Kgo60X3gO*>$R*^LyV?9#e#8o@?OVPZfH?;B!!DNt%j^s_5!yR
z{f|y>T%n#bxc1`uQ2mR~FtLcVNJOK^L(Q5CpiiFv@Y5f&FGXcctlr9Uv}|y}Be$t+
z=ou7c0~at;Sv^SpYC~mVb?3!v1YcYdPw;MTWCMm*QQD!nRtn)fORLnr+#mnGdhPSi
z+(OX%{P>%($rhSp6wx8hHQle1DmodO&a4)Aq--G}_Qe<XrO8S~>Q+yOr7zvSYDem}
zoAylEDOB9$86WH;IR3xp|EHevmh_hUPAiu^R2>Or<`moXOP&mA>4R+3d-+VK^2gk8
zy8KNvp!3D8vv7t@6_PLOi^2BOJ)Tl#;C@+GaG*NlO%@j#h&H8;+gK`CDjt?_3ZC6o
z$offr{!^p=&kX**a!##;R-;4ygPf~qGwGy$_Oygt)*5tG)M(h6SM9~E^B-<RdkW*@
zfs(6R)<)b6@o8oG2jqkA8{GBuTeujmZ4~RoHDZCQR^$cvv0dVN-e8K}E_$otVVUbv
zIU7-c%*_qoLx^^JQjMsKo5SQ>iP+i~L^yfM0VrP?&wsL~E7d}Ct_K;RQ?p|V%)+<#
z43Fui2D^Hp!qT>jA+KY<o+i0_|FR)X^iEguYmWz}_~D&h-`i>h0|1=cq)~5I5kr_B
zFemmET*P_|=EP|7h#V%2h7HF8rC7iH+$*Mb<DicV+&2kK*Uqh+8}F{BwnC<&2=<uM
zz;IlV{KwDPB*o@_TdPO&=<_5<C>3PR5)14v-a;R<{EYiq?QgAQ(!UxoK)*`*09o}d
zR|P|=o5|<Q;8_D(XUO?}VQ|}Pi2S`O-|3eYagu#KzVUPX_Pv)qT2@4(ea<E4yzXrn
zKZh@-wrqv%L4;N{tg>?~>uwJ1O2wy=UGPe)QIeV~l`!KIHVd??JEZJvu_X!&Aw418
zg@5-yBkBb;hXVI28C0&Vra2UxJ@)Gk8h?*Y{{5r;@B6wmdq{@+rhaDF;tyz9yGXDv
z@O}83%ebQZB!%Mjt<cf3kZEfXjNeWkU!DnGe@duWz)SO-5ioulvIC9Me_k9#&UjzZ
z_IA*vc$hdjS=brOcy{`tJc~jNR5J5w8v$Mc7O)r}E6mU!8(aWMfN&Yp<kbISBNsB5
zFPn&5+o5=QO9VT|SFk#!|06->e<jh+|JnVQ`-}`hVb4-ltC~VYZPRlYU1Q_%hpx_g
zb>BYJf;1An->$1{O1W#m#7sMMbE08q`{Y%PJYrRIt;W*68l-QU--l$}8sk6DnTl6{
z`^u%8mYwPHD7fMT8lPAD_^jCW4CfEJuTy(U_ipAIl2QjZ(nGhk?|J0r7W27~o0w$G
z4ZviwPad8>3yB}3TN_U|qBK5YI1BEp7*fere~agc2TLXjiLTbF6P73GlY~l{YOT1%
zowJq|Muk_3=w+S8vsJKWmCAp#ZlgSaef^*8<`C+#X4`A-*nkgRI}o<H;_}K<a_d1>
zx%}vzNk58x(&q%J&L0z3<?Z;#!60-PBnZJRbX*T@Z)9+6IIAQQ*_O`V{bk1zFrW5w
zvDUvFnf>p)hn>ypYXY4mPpzo6^8Z>^l*ZnMF6|7({|uo#ng3oj23>R&-w{De>xaMD
zJKu}k@n3#=Nmk)`odU<Ii7|^NZ(Kb6$!WfJo{*j|%ckCKxjXe-Ti2u9((H>LnIcnm
z)W7L&pL9s$X5ZCmD&e|)&FW_*-*4+MjXwGz_t}c+LZ<iDmb^|_bLL+BjNeLJ{0<Df
z$M?o>PWile+oGMa6mJT@uyUJvpz;-sb-~AcS+`ETdiYMZcJa63Z}pozja;R99?qQ1
zVW}`#@fiEk5~-L?XO~2Jn`}I*eW2%)i=%tef=NpX9Bq0+cDyW_vUOt~`o5~c5Z79L
zo0l!yxHvBJlG)K6os0Q<-l!DZ_-0|>8n>wB?F!T4sXIR;&Oc<3adM?idBNFlt@}T1
zs=0JzbME=tH-__!!}b2?XIKB7m~YwVYwjDwI%h(gXN1}j;O4==c?MP2zKX_tQU@Ns
zNZG#n(vslkQ{NXn=}%S;y8N|!+fHxasC)NrReZ~tcK%GpIS$nbtN!{K=5}{N&+7X%
tdt7>3@;m97bjCCjy`m$GSAJjJrIq(K@n+mZI@YLkXrGhSB4GS~697#|^wa<V

literal 0
HcmV?d00001

diff --git a/docs/load-balancing.rst b/docs/load-balancing.rst
index 07c18217..6b0bede9 100644
--- a/docs/load-balancing.rst
+++ b/docs/load-balancing.rst
@@ -159,6 +159,12 @@ This works through automatically generated source NAT (SNAT) rules, these rules
 
 Sticky Connections
 ------------------
+Inbound connections to a WAN interface can be improperly handled when the reply is sent back to the client.
+
+.. image:: /_static/images/sticky-connections.jpg
+   :width: 80%
+   :align: center
+
 
 Upon reception of an incoming packet, when a response is sent, it might be desired to ensure that it leaves from the same interface as the inbound one.
 This can be achieved by enabling sticky connections in the load balancing:

From 486c35233d0969d1d898c8da783d43999be560d4 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Wed, 4 Nov 2020 21:16:38 +0100
Subject: [PATCH 058/295] advanced-system: boot options (migrated from old
 wiki)

The following options have not been migrated because we
did not find its valid and correct use:

no-vyos-configure
    Do not load the config, leaves you with plain Linux system.

no-vyos-rl-system
    Disables getting the system into clean state before loading the config.
---
 docs/_static/images/boot-options.png | Bin 0 -> 30582 bytes
 docs/system/advanced-index.rst       |   1 +
 docs/system/boot-options.rst         |  57 +++++++++++++++++++++++++++
 docs/troubleshooting.rst             |   2 +
 4 files changed, 60 insertions(+)
 create mode 100644 docs/_static/images/boot-options.png
 create mode 100644 docs/system/boot-options.rst

diff --git a/docs/_static/images/boot-options.png b/docs/_static/images/boot-options.png
new file mode 100644
index 0000000000000000000000000000000000000000..b00350bc3c9d5c12b58d050b4ccfd5fcf69b6025
GIT binary patch
literal 30582
zcmeFZWmr|~+CPfAM39zlF;GOhTR^&`rA4H>8&oFU(yerNcZiej?yd<;x+d{|bnU&)
z-fOM>p7WmTdav_-I3IM7a}LHB&wby&di>wWiecO*xsQZ|gdrjRS^){^_5c#ntss=!
z;45z7x2M1X)k<8=76}RS`_F&3qG&Nmk&qrDNxT+Ra!TBub>>x?rM$Ptazghy1D~oO
z@}%4(oLvM#o%2D$n_$OdXFpQudCr^EyCP_k-eF-G6cRG>FVqWgCp|o8lAWoo4bjt9
z&+By>TzY40`)lTH*Jk31T;V<XMiRL=;JuLqA6!h{0>|bQEYy48h(h)N6CAKPpOAsW
zLo0DkaCo&4W(5u(o2eGT0qK))>(5`g?F+dB4!>dkw|>!0VN{97YHVjW;a-WQBBsvK
z_Kb3pda`<AlzQT5X2XMHyFzaX?m(KCkEBuj`((7?_1?3sTja0@a{^{PmEeDAL#AQ1
zp0mrN!~Ji=(gwwO17_U}FT!$<zwUL8id7X<O$7J{?h9ZGcoq9uaR+ks8GU|Ll{zM)
zcj|w|k^JMwYDRLv9$df;I}~3`mWVu&Ec)o&+REl^gJzjzav{2n$Nf?N;qWJ)Wd@;m
zb+=HetTd`D2N!NztzeI@YijY3^f~d%v(u=f4sUjYdNWmVaifiDoWk|c3<AR>bb;xQ
zez&$hL++e?%P+LKIPp&X{3y)>7ri#vZGYvQJF9nFfl7CAGjN@?zfyKrAd@bGzp#5C
z?^a9|<t&GOBMyVPsPF7pv;yTs?)s0X4rMV6Z%cX$b5gG&w)snRWCiEkO8pzx_9D+#
z^uF=WB92zn^EBWT^tUKl_z8U~$7>c=tLFO)d}WJ%uuc$B<#4>@C|GiLzkZaSGkU32
z7*VpBZ{MeZ$+b)Qjkno&R<=$Hvn;xASzSsoZ(1m!oyzbwZW?YpmH62*xYHgJyEbQG
zryhs^8TkAfAt3?zMEU6#xQK(Xx=`0qdzm-HJ3&_?@=NM_O4XwExPEj4>9vN{u7Iv`
zNMuL1u3i=it3-BhW^SpZhUAs#p8Y3_)r<2t37g&8yt>hN_>>MaItof=ob$1!1$V~+
zb(qWCv67zOC^(F@ot{S+Qq#t;X11(-*MYEBc!bl3vX98soi40p6f<PxZxm1a51#&z
zUFKhB8D@ToPAKN{T1i=%T{vtH3Z6|2YI+(blciX{udvb4(QWU=PpXrlaLtC!cVY6l
zVjOLioXV=Ifq{V>cDV1~FQvXubrYMYHBT5>$`8kd7RPLakSD8L<ZES}j0~3yqxV65
zsog!uI)gN7$G(&mw)AvvzBF)M#e@pEgQt;~*h3{pSR>cSXOe6S$;ry5x@6M~*-Mbl
zvS=urn^I|=CJH<!<1D+p&)puJaCVJ25WAj>5{fltH$OFf`6vYnUCr15w^s8r;?;Sz
zONnnoW@ct-s*tQ;vT1=w8*=)bl!1Udc0vb#XtRzN1RL2)x2l_po`LSfybHWc-*{f%
zV$_%LR3C9=#a^3X$t@-XUP5~LNa^tyxcy(yn2Y#p%?+9o`RXr4#1#Wgy(Gz}GRtCj
zl(}u_@g5LV&X-YfbDYoB`I2Iq;Xb&acg%{DKgLkf7kRo)p`@jyrFKr|`*jVuuA}pG
zAp9Xip%(JOod=jk#eG^M5D`dO3V)HMcWzg1v*NlT-Lgkd<^FW4xTF+uLZ1qJZgnXK
zX^xZ-2Y-{p?CV^l^*2MW^N>CFxjNUXW$NCzE^TJxlacgTgr!ac6+}9gZM9jg%I~YG
zORm@0%i=gobCYr-g93uFn~LMez;&WyD(yZBcVEnh5F?C@vg3|I;Shwc{e~&exPs|N
zhv|@=?5O#b6%(l(Scl0qQRhm{u$g0_Ky|yb6SUFOe4^}q-t36?@MOlU%V}hEc=D9k
zeCvSS4C@`e;Yp0GwdQayjVi@}2Ap2|UWcTq^`<^bW`nny+EaV`X$SKwRmMfHwZ6B3
zI}kSKW%vEbcZ}NL;&=mgkBfADSbomxF$O~(B!e!akS-%R>3BwOoN8;ov4SUCeK`pI
z`}glJ(PiwXPv#6Zi|q<V(aX5|kl3FKX`AfNeeINF(HmAfIm|y|^Nos$!WtUZCmih0
zzChkOT8!XBm;}eOst8Hi#9oUhQC+!VB^kYGLLvdBnl&~(2#;z-YLjrw*v^9anD7H_
z#@M#~ZMnPXWI59%w$B7DyL&vGxdY?&uD{Lh9*>DiwbE-YW=!HByNrmWWj(r#fK!uA
zyQVV<YVS9ta~KENp&1MLRi}S96279no@XY4(N&^WE!QXV1)v2gEJc9D$ylbLop&+%
zvHR4bJsL0S`)p8+2Y)2?kc3Q4Z7nxHb7p-$FAwbeCZ9uo6Rp8nCGe4OYulZoXo8rz
zdOQLgyWqpA=Aor8k9jb`^3R%=lL%>;&ue0blShV|FK#rR3YtB_r@+9G#{nfWph(Bt
z+nX5OCoF7Wywpa>50d_yjMu^agSz_bfIgYVq@?1-=1O|Ly2`K!HufYokBcWJ?kcF=
z`iG6FpIbo%`lx5PrWW_6+nIQd(mN5=W_s~pZ54J<dXOFq*??8~kOnQ)b@Psyyzx4G
zNq9GzJBBFfjnW$@qiG%Q6tqc^BdtQquV3JE-~sAvpTD~H6%)H1S_ijlaHNes^|-}~
z`h;xYosQ&N2sUbtB_-8k?vt{VrqnU+^P<CD(U~}1_S3oyHns{Cgsz}hRePh+(d4{Z
zbb`vY>mtfdWp<#b{Rg(-i{O~37#@P9UjFPp-;OZ9+}y1}p9=_fgM{Ae*CN?@v>!g`
zM~*6U-lX=5JEsq2l%1WXG)gd46m<j!`+2nYpi0*_E;h5b-TiUD0N)u^SVZ`Eb6##j
zu8cxIH#@I1rLnKGpfER;f)F3CyE1aQ#PLz;qkDa|Ohn&3uJ8A?9oXmQXXh8@KETJV
zBgJ8REy1&OLC1t@EhIh}!yJ!{K;KLua<>c^i@lp>;O2I^xKNX(8z+C|gCSjgwIj^L
zfzUq}pyTcC_!1Qpp&GVs?c|w0kr|bS*!9b=qY+Wte7W|0(no=rx!!Ja!j2u`Hl~S&
zJ9lpjn%ZfbCBHM{L?VTP>PjZU2W}r7J<VXH9?#lx);3jd--QDt)HDW0_FSmr0E6}=
zdx1K;@nW+|Ll62ILnVvOrjeY0B$5mmJ6PYIlo2XNDR*tXILb>B@E9{1l<phe!PjXT
zQ(uQ+Nu5orT*K<=y2p<P2AQwd_m~-`b93|G^LsdaKzwQxz6T14a1$ztj-*;R)nbH!
z+*62jJj?M(RKin{r`rm3vzXg*Im@bYxI&y*cX5RH8*bj_wY2u%{c(qyQ{DXR=sK;l
z>!~Wm+}2Q;sc>3ulu$`oFt?O3$$1KNu5fBLhBV&8?etU33sB$Wx4wS&$Q{w%oK3jQ
z?RpW94BC-%=jr>!_0QvzMZBlAGFurO<w<>+8K(F7@!!ynSbYdoTG_s<>3b^XDpzB4
zvQ^pYw29PCF{QBe&7(y~=q3bNCdRA2U*6ELJY(c4^x}Z?jXi<Ze$(p;mcs5gLVkj$
z;UmKj;kM~(2^ULQn>Oxu^lPVhClGE5(n7?rZm)^&Xxi7*dC>}!&IK6$msSU8UvnNV
zenh6#bFU$_7PCCyyck`w_)#n=$;IGvb9S9(7wCBt85tgR9^1dl5(G8J5z^-KB*w8b
z?<7InGLJkpcc;6NM8SzM8j-Ws+;3uiE2r8}_hZ2NanYr%h`5A&r<6fo;pp^4io!?}
z_?xTQ-|kl|%@s`OxrX!*b013?Z%!C5*Qj(lM;8n(&)26*^%rvWn0fFV_2%xF9#e;E
z@aqqD8`iT&xp9>AFL-QcfnKn{3uzMrHCZ-EdBXF1p5yrQGo?3YH6LRZ3$nAZ@$nbU
z0$Sc3k#jH1SU2U1#YN#qp(Ce>&1(m5GrJe~u)oz-Nsd9Nq(Q5??OwOPR%RQ`hHBPn
zuD?P>MfLYX8JA=tMn{e^z$e733X9NZfPbf}xwk<20CNHQNd}?Bsx*F6q5Q2P)edbF
zGzAaMEKmjaMr!!I5T!9Q_x*`@%<Fe2a1@voypHTJ3}i#<$>yF+rzTn-?tYz;nD6)q
zHAh87b5u~&Zfsct&qWjE-VyGHV~J|=)BRcBhPiuzXo2r7uU)@SyRQq{-h(YJi%C?4
zS!9g3wC2;u@)v4qu&A>Ry95^GX2w@Ts&``-4+8GT853)op1YofFpW?evI^FE9}x+=
zyD$5DSj+`)j<}f)pQ{9_Nb9K2kLBpt=h@pV22IoG+mC`7W$D3^EuHj8tw|!k+ZQM@
z?D5mb`c<Y4`Spn>uaYL$&@TDhvR5^IIo3A=1zl?CG-!%rMn*;$SyHx0<;*4}1;K^5
zO2#1Pp*@^i<sKYaDr&J!HVl$6JSJr?_D;+XPHP~8o-<s~k8`~NQ&~6_j%X&!y&$3|
zVCfrL%@a$l&D6M*m8O2dK6uWhrL1T^l3oHXU0E-o-I&rkpX^6uoW;ib%~)V~q#sGB
zF+s%BVm&5C|3;|RV;+qukW7Mdz;9V&jE~3<Sm!@wR+;p<(wKHIi@D+MpI$wqA?(kb
zBA{B)eZSTAT}e^nusBe4vr0sZRb5N@nChktEQbtS!eYs{!9-XJT3YVMntq#G`i6XN
zlUZ0ORO5Z#k)AYV6Gmw{qYdfVoJ?EE>--#r1@hyr6pag$m3npKTs3_#$Js`kh!@-s
zR@ho!g}T(w!>20>!Fq*+4V1M6NEU26@^GG4H@YUkOS+GtlrN3L+AG(VzC4)YxV~DF
zQ;_~V=|r!?-zD8$oMc+z0<9h88Cz|1sxfG}@4yWGIe8o*a#r<M7v<jP=H(S4Yo6Gg
ze2umx*RCR`*9hIlbR~OAL$|uVCgU#O-ZJ7)20Pj7F;bzS{m!sq()@JQlip$RC!*0L
z?eR<!Yj8_+(`>+-F6VaY6IN1sIdLk~y2I&!;~oPe&E8>8c*$NkW8IUZJk3sdFt5Wy
zxYT&~P#MpjZm56O(0835*$c;p`uUdn69kbzKv|OVV@<(ju@G!>HJLtQ%w`^+==7=n
zke?v&+KMydC)WLc2NwTV{NgD@I7fKej-aeT5^CUw49>{|4MPUY>fg|>W&<h|jGRMi
zJ$3|#KZf55iBBv)-^u}Cz~nBNFh{=F5!e=bqZ(@AeM1p>E`$^C=17ddS_W&YZQzSi
zn$FL6AeGa@s10?Ch>&Wc25)jH#>&dqOoI<T`~!{8$mM`fkysyu{1<p!781%0Ad0&P
zc=m!(exC2OH0Qq|_7K<BLG27Z?!cV<!Xfm*%P|kK?DMfq<BWbhb=uOH@~{XQI_KJn
zzC=^gh;>;siH2~^Fz2UyL!iB$*icb@12yDxL>t`G2``bXa-vUDNb-xRsgRJ6Ff`bT
z&+}ykC+x$S8ii~6--2$Q92&|!$58i#2Qe|VCJ1$TCV2{4cB<=IvP3e`S-j@s%Mxx?
zYyuovLnbJ(j8U!l`IE=fkGAyR!v(pwpI-K26p~Eo7wVnSF7ur2y1V?SmyK2pD=Nc-
zr|yZFY<#~)72_0AuzYKwK6*KA?!ly6MU4KVSzdTT3OR)A<&!6P?pN&YBC{or9Vi@6
zX4W&OD^J6B?p4<8P_P-lR4%tm$~ac3^U_EZ%|*XVITl?ODMMc;whn&%uL#*G)Dw^i
zHun$KB4ohap7s41CED@kT-LL3bufv!TWSFqYcS*4`W9nW4lZDVvC)PQO}Ou=#lB_u
zl`g~MP$72Vw&{y*j{Gx3OItYv@8rStnrH+f_{W}@+r1mkV>kds(Fr%Wa5JRK78?9p
zE}cEj=PzB0lj&VMAM(vs70oeH3S<;jPdKP4*tO!{NP)7TOIS2lXYW|D!<^gUG?<U3
zZJ1Ul;z6UIG3Q$R*3;rT!L2a-L#F;)BKi<?|Lok{6~1fOy0CdBgX=y-O+m?R!rD_p
zzGTr&udqT|m4TLye%7p!{l=am4`P3@*LknRzuvMuXK!4;F!x0sm^dtd)3I!2KY#d`
zmc_QS9!-0myk^nT!s<BC?tI*FAJVj+sz$f+!PDU(Qq%Km+>qvoTcYkq_o{~C=PZSa
zPtW7yNgM_zjFH!ug(LU{LO%SU(=wHyiv&P6L^;<aSIt6Qg6}8w^TOV4e%bx;yWY9r
z{qs$xqKI)Wa{>aK%z!5u8PNq*nSBhJ?sn5X9$a26?<~9Dt*!iArZ&ES96^OsCZh}F
zjeMh%DM)s&01MN7?%wi&0{MyMv~>>+J%c%v>6wEUOV8TxjE>{)(7n%mpNf0?<XywJ
z?JTcjpC6D}YDh;{_fwCqSOaD+t@J@*mZbKP!5xMtPeu&In~uIKImoLE<(|AE2e>6y
z=O^EgiggYL*PfkPh=jjTd)s_;WJF0tsbkdkd+e~)orZ*%R&WVPYHPT&FpR&?7^#o6
z2yf{W9HNnGkzJ+Uj>#|abEBY)iK#?<_pnB_?t63+FWcxF@|!b`5J21wmcLc&aCc&!
z?TPfWIMOQ=F{@tu!1aa@F)ccB5)SnTU--m~G~o`~sbN26D0<igaB|1`{;2>jH?c?b
zq1m7iX&H>zkphn&jNbYeatAU-V#x!$-N$U=p$6!vRQpx$X<xhmOwLl)A=1q)H)=90
z++l|)Gqpt{%A|yHf#xfD1s9K9z;}Qd1Yik~-?WAm$;%Bs^}3lVZaw%-1yxEzQcFXU
zj|Wx*EfgMEb~kk_o=)dCg*uWq+W4HWIEx0FH)(A!_I13HmhNdCP^vPAgZ?cwuHMU-
zph%m1>}k%oy2K^w?iW)gHvjET_1OJ=v?-HC#{QuvEPQPrj(T#?vhwUUrBMb+1`J{0
zTE1kbSg?U{hr*08q@7Cg>3vRWOB<Vtj1e7XTTa3ska^>xp%T4ySx6ZBPLvYc==;`P
zY@vYr_aA>Q1T2L?k+B&!tR2@tQuB+Dsfab|ekh#3IFNs>iI4!tVp!H6+vZ$)!R+uZ
zOH5Az+^pmyIvH2BJx|62>7eGgl8Pz~9gRI2fB4xxytrpWd3qdBkJbgs^X1=I4J=sk
zw~j}{NAt_dHQ>oZ%tMNZ4Gp6BkOYI~^RBU++)|UB)+j*Xv6kt`qA;n|q@ON$m=a7V
zsqESD8Z`U0gnk(|Es$p6*zk=xSeAV~yh=^!3~FT&V-p2;gIOj6X$JRze%WvbYFf@u
zL^Zjq>1h>sxEJDnGgWNZu2KiCQyJ|T#{nyX+1=}Sk=tifS$XqR@t!r=;D@}!-dhVz
zKK+o#r|nXppttDx`b+rbIc(OicJx&yO(}|uX_(<!K%Kc<@dybrzCS}yaO)aWCC0Ez
z1xjIBSigAjT-sl*(Q3xB@4$QHAdE%Of=6?%-c1V()OZot?pI@0Uh)-N+8EVta1}EN
zd5M|cSWs<h#$2#tB1uxDQ6xfYZeBiyNzvqaNs0-HKVw_n+S)qnhz0n3JAeJAZ0_h}
zl=Rxi?+ac;^9x-J61GTeW^uVHKrm3fNPbc4#Qe2?q0wZP6@?05+Mhj&*FFUM5j~9{
zO3s;ji$!{B>St^rEu@W7<CMdTq=+@?hR&d-qla!KNnD72_m=QK2nV)GR)Dp^@E=o9
zQE$7t_I&gcY0O0bTV|-qp-ExF*A({PIMUv<^6Hh25U-~q?cfT2(Sx6E74=qhA?h7r
zgaxHD<tE>PC%bM6tQjkM5zkE5C6yKFPTTX;(TvxS8C+LGd2oWMDbJY{p{4-F&Dq(D
zc0E=>g@I9&3VNk9$eSku&?n$1!KJm-z8{EETRHF}NUNkVJZmy$lQbWTK`%DpD%V!^
zk^tw`?3pyD9W;0&y^z_qIo<taTKMWSz@_4JG2v12DyoZ@Je-eL!zE+-Mtq+)#PlQ<
zt?J}J<ycCm%2iYO-{Vi0+t|&Mhud>xJf}@+Pvo3_BPp7xGMgSdMTk5!exa_dt*s)9
zLc@@CeIrTkAN(hlAyJ2MQLcSF0K#KELdoYPh9MIm@m$aSTY$pSm)Ou0u$&%2f&gDt
z>n-i4gH4rwDMd^LIZPl=O-+Sh=f0Pbkty!KJ8W%>Ts3GjyH#&AI@DV@O-lTP4@W-y
zj^Qj3`g;M-yX!azZe<m)w3PMJd26j&o64(?1kILKhd(8HqL6?UOPP^ksw+gd!fj5%
z!VwRJCC+T+S{jB2+z-&#=-O9+d5rKe7@k%j*w1TS+Gkfhj{FL|6U~gRB?`Qcdod_Z
zyC@wWk;w2L@Le2Tob3wt4HF6w<QQf1Um;Kt#$##H`1Z;t!xy5-20EFR#j?C1y2kRT
zg^NhpSShH!no>1rr$rXF^92Ly`$yjtebn{19N+yU3b3Mn5e4cr6>C$}>&g#DCRM1Y
zkf}bvX$X6@XH|$8$iGeqgSt4v5UbwjpR`}RuMmh^(f;>r0_}Lmrie}xpV0{5dzrv<
zKX$4}pL~?U+%K*qJz_N21IVJ!p(#0yZge-f6Pfs~Y$6$BV0pvmJREPm(-&FYq2&O4
zT`Xt!8!JM3Mxvk_=k1-`S@)W6H0x><B+f;LoHu74h%K3JmHXS5G#v;sdv+NO$=RE1
z21Ai}<KftvLEecJ=S0CT@W;;}er}$elH%go0CekgH=Pg<$%$9r63Yd&V7kT#;+D?(
z%tEc|bv5qbng3%Q)5>v<gL-&(J)B<?`bJ$Pv%1(1I)-#@de&s5q$F(@mb}Y+4_4;r
zmGL3nLM!AUBoZ&G{=?d~dPDHlH=!%nq$~KdHzFe5Mp~*rz+EYoJIQl|9q_}+^C0c-
z7%wo%t#+$*#?pGa0wj^W2GcAV3QP7?VH!?4w7atbe3k1RiQg2PBBMi+*ps0F$Ns2I
zv!zk3XT%X;0R*7l&@ZAKqeXuSPp&Y#9w=#JNIuFUP*GLQdYW!@4DZ#JaebFkj>s87
zbsZk<=A5S_Mi;d|cBC|xF&#araEXA@rIc>0mYGrHr9Vrzd$ZHwF;%FD01d+`nd$;(
z+;|vb>qV#|+2ki>)wByCY`@!{=y~99ag7E8%%A<{sD0&bq^!w{yz45TQ-iXyWJN+`
z>s(8Vy;4<n6o$w1157>Q?msEC+{~#^5w8AHHkZo;TD#3jHs82jsf6R5ZcWllCMODL
zahgdMq1;x(;hknrvJ_P4)A_(%9!ww;>{sOT@*h~VK>M{S>J&wGd9dPn-eOS-NY;AW
z0eTqMK*svOdNn`c@TeV(k<kTsCKWWZLI%en_N50l4fi&CG`YubHjIVDWn?f|4s#m!
zzk{CvkYEZvIZ#r@Jid39CxXKCx1<Aau=v$nL#OA#-hKdGB||c!X_8|WJ$c3SYFI*2
z0+D@a!_4V`|E<UO<Py!FQ`7$>&Z+c#&dGRX@j>0-cG}HW=fFUv>1;{!r7vfybEe53
zOBr;FHPvl(4)J21pR#KlO~oIM8RI~)A3Lx;9U~sHyjbD_1Oa#LRTh0Bh20j}IMPOz
z3~nEWHm|hgFh#bome`CqXrh4C5tSjKefpSf+D*`~*Hdl}YnZaeu3*)ty|M?|KNgp-
zX{5*Q(#1)UAQRL$o|ocKP*gt9gHh<J@3qH#fI;5Y(Y>e^%ADk;>3TByB{F(zQnlM9
zkWP68zR2_Ajc4NEZ<_=|dg#Z;!Ot#goNdj+40P6}-X*ozk_%Jm>h64Ue_#RKpV0q!
zLjp(`Q50fB-WK>?&L~UF`f8(j(M*d6{D*u*(-re*g)P;pPS;EJDI*hm2AUVLLAC2O
z{lR60)0i;@Vh+B1A>hpqY!3}Q<)1#K_iuUk`onBNZZ0~XYv*)(g!=9~le$TJS0@A3
zyh!{dLOZsFFU(cAg>K`i^preqEoJ6Vhay{>q;Yty`>KI3a;62-xFv&@;i~J#_fQc+
zIb`WLL%i+7+0y_pyK<|W7f+R&WMv&rt6EkTO}Nn>AuE62=yxees)4R5-Y>vA&{@Bm
zjLx~c-NJ^Xi?bM+`tn3^>%^72H2z3OTg%Lpo}OmW{qe_!Cp6S8W|zDd<{3}ZC;D}C
z8%7=4KA8hO@g5o9at$119Az^LgVNTkiCz(C7k2RBVFBv5qLm`eCBt>*<fv3)pX)`5
zHsooyPZ48}3ms{LY6&*icgxyrDZN@yxNrd_@r4^UuU*rYtay+2l)Q%0J{0@QgOu&c
zHvM($buQtog99xeAS%HUE72(h0&G2oe%;w5quL((n_OFTV<oqOw<e69t0xt{^e$ap
zo&3_0w(3<8FYfb^=4X#|c~p5tgu?2o&ME3N8P2s=^!>J`V`|vn8t!RAtu`hWL2q09
zG+zA!d2jyvz?b}GBI>M@7vyaeVlrbSy&jZ!-)G;G&z?Td%d@&-L>vY&4)B0Sy>YD=
zU<6NxmrdC>+cRGcn+&~NPU%&Kt34ZT$NR$0^_*)gPbRM5A2!3P|LFxVymxy*+Cv&^
zV=+e5liImGIyylWOy9zlw=nF@`ojUl;q)X&^GF4d_=J3FUhmn>vs|QWC%0sUPd{uA
z_*gCC1#Qey4==O?cnHp}BJuD;l_>Vg(mq;JWL@*s3pb^Z-)&~tQI+5%D`3Ce#*Uxn
zj))TAfy}pgT3G-x!ns<f?I)izAYSeBZ>s+(#H&`M;^4F?3<Z4qM*lC&$p4I?fT{e+
zsD}eOc*{NCHk^O6EX?4BfLk!ECarHDW#G4#g(izB_0uyTJ$?w?(iD9Anlq`L%#ih4
z+?~Ask~fs=!@k*24NUlvKkv<O8}@?-B-|Dda1V0Y)t<HWA545!=LnvCb~5ioLK+j}
z@}jlrW>1h;Wjj67t$CjB#9UHSdkYZMBJHowH(xF9&FS}jTIw$n5b<2%T{(hb;i)!x
zK!WX9S4L#z3=8wD-DwiSYP{Gg=uQM^h-m~Zk5u=TKSV^u1oq3N)LL=N6!>J`<80k0
zPxC+q^bH4t_to|*r=h%*lZ8RyhD6@qYNNtNNI^T<r|`*Csq$tI6z=<tTJ+goV-z^Y
zZkmn+IrhPEvg8LTZZAi&TvL)YO=-$ijvDO0T}s7S-=ONT*$Fh<WV3z6f|HuR;B}~x
z&@P%c4Pd7#JS-+aAECq*Woe2mN^Tm7RxrHLiz<#ctZRw~f*PQ5qYF#$9+;H!3a00f
zT!d!l<_|?H+)T>5m6<iz+fD2|!=k)V(EXiZpoV}>qWboAEL5~G1&h!9?1Q~M8`Vnj
z^7Uq*A!#3nN8$yCJ00k;l7Uhj2}K3D`Hvt!S?3!I*4v?47RlqVnE2GDQXS8)9#<%f
zq4Mh=4*BffgAQOViradph`m$A3gV?YQt}w!X0OEm4sL$On4Q{2$k#tp^ZZel>HX|M
zVcU^(CT-c>L^Pl^&eHo<*OyOJ(SVoa>SuTf8d0+Ky5M3&F;qUYvYXR%RPD*r$0GJB
z|Ipg^UDoO9AuabPRT*APKZF1}{3p<->98$en|TFa%V2ylZ4~xr3qixopnK?P@JBXR
zjvwn;(0W<z_42r+S3otV)37A};_|rW;o(-=w82UDWDz-o35F7^(p(|1OjMSvO<T}$
zd#`-RaEH4BKB)>O_?dNgMtX)(-J42sXyVerkOP_RQmubx5}3EW;v!7RwbxdWIM0a>
ziv_nxpT`q=yQl+bYPkE(9oF9PJ=7D<eH{}4{{|*k#cpHK<h6`^hM*tlc*jCjs=HP%
zN1iQSwM8r%Msb&C1jL^lKlmHF0MELf6KtARe|7bNfW9<KT#L41ny&#M7SpCvVhl(j
z22)lTUItEvvAw8(MFcQ;VZ{p2q4o9C13k~<9g*TYPd2Zhui%GL<NMsBHA1Z|c^q6d
z;K>J##6H>qHmj&E>S99ajwU>8J&X?2gyAX`Wwi>2#V%0i;wKrNL1ObYhg_|i*wD;g
z(7tdEGMwbj`=0G;j7pP;=883h6M@aK!QN^TKY6wp5nWK087-I0)9bK)0T@1C$8E&8
z4<BviR7ro&sOt9@y7FRpU@UXp=6=mLSLJYzL6>#tUwi>Fpq>nUQK(wL^{2eS><-ed
za4(3hCK^`<a}}4>7~P|d_~fmx;6&Cm5=iLcJLyM%(L}6`u)Qdjo@f0m>Sm_0bd-i4
z9#T^q=o;k$=8;{>H^a2RAhvh0L9qgP>tC!9x<lJJ5=^J_jV{7`7=O=zH2u2KVZ~^w
z6ZfKJMEmp4)Wfmyp;Cqkh7_{NJOwKJudkM;DlU)%u0_73uph@U_Zv-e!**!dVfGY>
z$IopqkNoS=ANESA=@9Ym7PJ1vXmQ(Vo>9%%z>K@wBRLB6EC9}d@}r3mDQave&Hl>x
zXoF;3nvp%}cnOsS3?#5}<LMG|dzskNU?gpN>a;j^R^0)tqOp(sK%U@UsrG#9+gNE!
zSAlF)wKEZ7`s8TK_1;&{`8|hyC0H(#P3wlJMbc+TnsFpS4B4c0G0<7AJS1(lue7f!
zYE+z4PA#rdl|kjBD`(O;Z(_sDtOQ-sc_y*6w(D#YmoI6?gw8OkSd$%23&;s6aa2wR
zgXAdG3b*9Z)Q+&dz2>}(_6$%@LC@4M()&^22WKP^7OnJ7L(BnkbG+YosEFp#i$^c0
zYt0H)lV~}_axiDAzkB@n!lja+YC8)#CYXjyTLTM9ySE6<erKbvZ0sbRVGJ-gkj*S9
zDZPmWC3mrUK5-Q-XO+tE^Nd4vz4Li3AS`I8sV*)G7Ln7Oww03Z*tg$&nM-FHqDx1m
z0@_a+#&OZvy)r4v?@u#+Ji`_GqPHv1-EpDNwe@u<9NIhTA4=1eIr6PQ>Lb*-s0=8-
zGvgM8&Q9$&57uiOPMUzeTkp67Wrw-SgW1=8P5ot1J(<V)R`2hoEI_5WLC0blovhgw
z4jME{fUIrJp_koI)H%<wrbd6C*Pfn<`&;(cy@AT6`vQdQr8=yxtL+iD+>uX}VVQy`
zI5_xmypHM%Iku4L^7G5<VU@sR<XKT!N=7EcrfrdFmMcI_Z0PaEiaJC`dJ}*3ft1|f
zEs}b|k-(i2?nh?OupI3uPz<wT4F-DIsPa7K_CKr%8Dm%3uG)ROrl;ly_QwHromW^c
z>@2Q<Vx60(@bBa5$q84bfK50)QxlB_f@J+?UaHssa69Db^K~i7t7cFP<L#3p&jT_C
zGtpj;(eLUKf1Bmyan3J`LzlR--6F)(*m@HPecf4ixNcrBvnTalAL<vjSM~D}s}bwl
z<M*{aBc=&es<k7CiTs+}_+bs8Ye_zj_;6rL`~r!5LiM^thF0u!7DvrdF`yI>%Kl{-
z86Q44ZL22T!6$woudK{B^(F;76?kd<vO9toVB14QtE+&ThlCy2Y~2)X3xB;_v<!G4
z^!@2m&3;Nf1Kz7{UBXc1cxMXsZx`Blg~OTrFSNK>SW-$-m?;I!rJdY-TLJ+$6T{1~
z1AF?rMdAbnw3yOihDL-)nQG?ur%aRrEbK`lD8y{W`F3b=*i8>F#!#pTWzTdlsx>v=
z0vas=EckVUb$ZQ`SW~)q_c&_wc&4B~F*`uD;NnnS=OI;fYr2y-<5{jMu=6R+XRn$c
z;|ZCJ*OidM#QL;}i3w*+pqr=2x3I7`DJ@rx(Vjaj=_z51MdPY3?2UNzlLz<R?KRn3
zYPeqbz^in4>XGsHDUdyh(0|<Uo;Zx|HqHzjE!SbyD|Nai#UPgO5t{&As8=ey(_zA1
zaSyp#54@4r=?ieEBcE`6X)oIlrC^%70cFB_@E%*}B-v(gd(_-}f9O^KAJ88F@0GKv
zIm+?oZ_OL5JFFXD!YTJTL{O=w`A)jJx(n2bKcAZF#~V@{xJ!B?Uj+)Wm^<yDKotug
z>rnEyF0^NzQf{gmZ6ic`IgX<a2N^CJ4wfWtXbyt_HyBLN8-(uv{Ol}_^~02ss%n$d
zfwY=%lxaU$bV<6Gezxdn0)#|Zu?t2Oi^GUeU|rO7cFF?=hV7w?xycPfC3iTIX2XXy
z$USYAoAvKTdJh+~+hT?omLAM7++7f{7PLm=Qac%zo%ht4v>DE&Z>a4XO9Hkk{n4AT
zy@|E=b*l`evGU`VS8qph%I+g9Zy)cH+)cR;mMpfAO|rh}(V1hT!!MpdhA)#QRY^(7
zZ_J*CR)*+O4fLqF73=P-moDco6JTADN03O&+?!-0qw$<8s3YZzMwJ028k!f*ojsEk
zE*b@Qa*N8Ep3=V{$=ya19I3MhWj92*^*tjIFk5gs&M?5_4S+S!t7T)biZE1g2z>;I
zPhQ7%qjjd}<QxZGYRP>nZ{p1Z=+*R?Y?fl9SbEX;@%QEo4ts>PWpnnJ-q<%j*93(M
zoOGV!@H>H3H)(+b`=zHr7Y=XvS$AN{e;6`M@BVJcaDtDAGCUn`U>;$3D=F$SR(dWB
z#cXmKN>T4X#Bl=Zx-WhUKDTnntip=0Nz%o((ED3k$&Y4e(9)pwvs1u8m|~3>f8Y`4
z+}dNLk#YTsIc|F7wEq{+!R4u|Slf{py_RW>ZVBDtewjTrE#Xvba58g<sTWu;SqXi)
z@aoTzL6NhC$ACVWx?^vUz_53^_bnRnxAqIoz~@|YI_N{g=97}2P8m0PD;UrB#TWjt
zWW>isx46;?I9dXuUnWB`uwP`PO?z&&ZVF~qr!+avI}gmXxSXBIgVv!zQvnE;fQV4q
zI;C3g9^j7tu)6AkH56B4S9mix3<(4Bn!%bPuzdiV#`AKO^7*oFdWQPi+)@H>fTxeY
z5m7vjcxSCEZzkNA!`6>CO3pK5kT9E>anjFRN-|<l)+=0iMwAU|(uJ{N$|3aXhcvlB
z>nk}?6@zcV#E8ey10lQ^g}QqjZ|qGD#$k!;#K6M{jA3R}&rFw%7@*clDW**xZZtK!
zQ6p>#4s~QUWwy9!yZb|{VD`QjLh|VGbgGQ&Q{O8M9*5oU%P~8~C#x5&Ux|g&L|A}-
z8wh~@Qhu-yV)~-&H}j;ApIsZ^F(m7Mn5`k1Jfr2>;~}$0;l&?lkdwQKeMdY=a0@C6
zue5&xAwxYN(fuk`P&^MuIsOQ%S^-SPMGazmZwC5~QK;`X5v{=V>jTrG8QuPzJIRQU
znb2A>6bXMhhv~)A!|Fr890JYAh=f(G<_W_o-Fl~oEMWV)ySv&_zJo=tg;Bk|dbz`q
zDb$Zl`=X+BerI82`C`|+5lTNU)ks)FAP;)J8DA;SwsmBBd1OighkXl|3{mT&RvM8T
z5B`jQ_#-av90Z#8wm*GZZ~0qs%#-#fvB4=~ir&~?qQe0F?R~5=jd8EC!83u<>L_Tv
z@$r%J-`h_bJsH-e{iVRl1nnp<_l0o3_JPBGdNfb$l!e1AMKW>k3w`giyWphLFZ)qd
z<LQT+w1GIO+V34(s0}RERf0OZ<~}r%D4QI1AH#}^rJ9?Xln897jmpl|3m4g@c~=5L
zKjp%I4URP{t|eMonA4#<5z*m|)-*3Kmy}No8GAd1Uw5#fUnA$r%3Qku^D<4PvHf16
zZ+7<EVz@VC`o?3^-?VAVjmG#yvI|TVifhDo5s6t`QEi(+303XLq%s8-qspV9iZ|M<
z4(y>iEot*HFmx{i^c*yCES){G>5^GkqUQQ>orO+KCmV7+v4|J+G<X>?bD8Q@YhrKN
z!+>htq+#Y76`~uOMr|6LdGiorFd!t${s^|)STSw7Gkw#`_*)A=Tcx%4$6x!3dG5Ws
z<q53(wDv}IW<#wh<Q<;vD0dpX)<d>TF%e-m6ky&jd6Tl#nhJ*a2`Q3ziUkxXJiWTu
z$WP%;WAB-v?>?;U)ve3d2LW_+97O>rwI{X$Yo6hZB$nrqBEe?2#(^uNIpqhiO79S&
zf^oAC=6uC{N=f#E;dYi1penw$fY-E=`x&V~B0>H2r9Yw-)^eQLuH!E_W-X)lm)>TF
z9&Q5ll+M@j;&rlRU%@!>Pa`Za(}BT3imvacm<uHssWk?vfSVt~6V>%2ia6KxGp=Ev
zYn*><;;|oY1!|<t+(O;t-uSA{YbzU~<G^;1Qn=cFyTt}(?S+-%^!`w<h&Jc*$toRa
zkw880ZyXj7+<oRdf3x?TlgkW9W%hDp_bDGUyr4Fza6Sgv3S0sG->9{R6L_P`A`N^q
zCdc4Bw~)l!hP`z5QN)Toro6<kj%^NrF!vZ}>cunV0jG?t6}5EbYGgLlj7+sBbRkCn
zDaIfL>|^i(G{AobA>@eiz9BZR#0qY?JIxy@E*5n+q5Q#zu$h;!4*S4@ax?xe_<&g?
z5OY0zb<tM$_eKtRk;~xv(X~<Amjo7SjTVtz9|ND=*1Vhr%x-Fck;B_~^Q$pjq>orl
z?^{cL=QVy@CdNH%?EtPUMoqF`Q(mX*V*nSXq;*b~P|MP@&j76f#_hKAADX6dh1x3W
znzfT|=GQP@pz#3@H`aUH^KH?`z&WuncpKKv5H|^+18|e^z!njgoh%ViQXUR(JTZaK
zgx)DBxR&5NBQnYb-tzvc=KN*`&#Nh%gFOj<+x=S5?7gvd&W-$h6D4n=;rWgs>aWw)
zz1{4Iaf1r|H(lSPE~vpREig?-Y2gbSL3sc2GN1-hCg#6Ro0uLAkg*vD#SA;1Cck4O
z0<{^?2Jh!H&FrjKcr^hMJjR#k6qon?3}|x@9!aMta-3_GB68caK7K!M@UP*7MPwHM
zr`R^C3TgDRh!aDxWG*f_zYtg16+CsVNkdS;NpG2+SOoRUg*qqI_ZgS%32;1!jEq*V
zoa26SENUaT1|F#1?HG=O!gL6>^WAemaf|SWHr*@^cJ7rm+`Dq^ro7JVMK9w5Ife%U
z*C424VaA=nA{3AMDy{KTE>>^(HyU6)mb#2&>ivLRM;=TOzxgsV#KKcZyh-<t0{m%N
zAjNm;1E(JtZQb2_l9Ey-j(kELzL%%+<BxKnZb9|gu|`1u0_I#@1~C3?@>Me&$Nqe(
z3FdK;7C71sTbZ19S*Md=SQge4b0u&c(v$oN6At@DI|t*cIlc`2^sJM?Dn?dvj^2;8
zI}D*5ceN|~UNCKG7o-%y`NYMfg=W4^qvRPIEN987pY*%i7`J8@`6;)i?qbCLGa?XL
zMVieLBuc_*V+C`NEa9l0Pm@y9$|z4Cp*wrM1Z`?#PE$44>2CC-2}Ui;B;$ku7rl&}
z{XqO(_QL`hFqVFZ+1fZE1f1o({aF|BTEsdrT_syqbSMimHZE=%BkQR7v}-~}+faoH
zFuLr`iV68;$7ZX>>R=^lvk%7vE0AxLP8zR329<CqhkdY9*}nFVJ+Awi4;uScw4*6i
zaBIq(r*b)?#Rn6w7cT=KdXW*C1WrQ`a>*x@i>0xafQ0>hTH;C14#g^wHihr$L0mI%
zj~dX&(cTCL^g}yT-3q`Ytp-9fCtqYuy0$;1PU;$0w$J~DbmqPvXVp`tjz|1}g2Jf+
z2)}?r+mdD39{QWqz~WA3Gw^+bi+g03>n`==uik&aJn;*;9D5HEF_+Sj&7Si6$<%|q
zf`<%n>c}$<>YLKRHEXye?H7JLJz<INDVeH|hf(KOO;FE-9NL^br++EwFL%Oc*V<#j
zRaXuS01E_JfC&ZBD>UfU+RGaU4&T4`Jp^w&CuXs)Hz=}z$*3Bp^S+NNrl8KGu$hs=
z-)AyMp-LKw%*)GLeyrEk-392Tn|>Eu1eVOT_9|d%P7x}HyGxxPfrmKPe)u88&o4ka
znTKv~glnrLtk|l3yr{Lc6&+bvTztb+jf?8_=jq;P#`?r9Qf(o>?o4;!L6rp#c50UE
zA+No5hqVzyuKCBF=h9!n{Q@tkP_;C&Jt`xu8PxJ_V7r)gdWi@9<2)e{wgY^&hMQ7~
zQw#u@UaS_I|6NrVBMbzpI@hkCbbrs>lDy5u70-S}^twUQ%NqqzK9A_|r?d=WSEE9>
z$nKC!?-q`K)A4oZ{*#UmeF2EPvK#IX^MzWXDxzvy-iLb<z!VWhpET)+=GNJBu6`Zm
za>@EQ4-AQ0sqXFU1!S|1VjpH@Xu2c~nV$8r1EZL+w4v+K<}q+eCuT8tyj-%J`Y!sq
z>HQjLQ1e#r5*Bakd5;C~vcG*+cxSZyZw(6P>&gUwjXnq**7Fl-%Yr};ReEM7^~Cz;
z&1x>MX`>nod+l<QO@r~BbezYYE1vi0Q&4Btmr0@`IL$6QfIP3C&%nmU#>(@uxAF}0
z&cf*^D`D^$H>}@7XZhu-i=+r}cmgyT0?%76MeWnLP$(F6&eM$##Byq)|3r;`{jVzh
zCO~FRIbTk>8BW`2PlkctuiPx7xzXk+Q0fsy!Z&G+iTFDXJjM4;&PKtsuOeBHlS&DF
zBkm`NGU?g{h=D5nA5!<8pA1ARU>&1nMswWJ&cvWf-?RO+{}DArg%mhOj7n`fqkOAs
zkG8v{yjZu$o>TN+u#L1wT!SgiKfoXGm&Bmi?d`KvT<+v?NRmfR<k3{9x|~v{grYfa
z9a2(iSAwM9w5r7g1vis*G}Y+cYthE~{LAJa4a;?ylwT)?4KA2zh&Ra$*p*+GwGEj`
z4S=eu+O|IX-u4$_J=Mzj36R~3_*E|%e&!a+TK^sA22`j2W*;WpP$$}w^%?jij&!Yp
zi&ImDl*&VPhaoK~V7}Rsp)h3k*zGo))Kty<lO_*zy{|b63Q7lG;%tF|5eOJS`w<aV
z1`j`X$G5qHZs6X@e?S1BERS8YLxK!Ycu}c-PY0w3xGgdDaqFk^GgoM3=H^5v9oMV;
zERYJnCl*|*-pgIuv+}aIY?tqk=*$6GUg1JSULxEUwf9v+pNEKmh{V;fPv-Lx1}C7c
zmqqtdaywLWL3ap1=IVraCiJQtK5$EdX{N~|Xt5xpagj}{p$9q|m}JO86tuNv8G26Y
zEDLah9y-)l>&(IB*Q}+o+=g`4u;&bEn{RUr`gYBkh6<1%lxPb^DtBaiXdzAZUxCs^
z66A3d+vG-~^sMR9sM~PefrLLx>js(nd)nRovl_tG2m-3&o#LAtCqR>O8KBu+ubFkE
zV0A2};P;3GX$SDYJ?n{IT3PO*kFuaDbAfWJIoE&)gaLgL%=3u#=fd%cJ6D=_dJh^b
zIIW#ivyBP0xX?!1fO@jz<LASj&<aBxItk+(AX|cps~~bIL;6?j*GwT@hynCiAm*nH
zWw5LZU3^MaT`&K}kXmS7{(l(@F8@BlV2VUEr``=C)dtw~UOzb?G^wbbaycChfUE-;
zT;$L1jfaDX1XWUd`J@4~=8ag@ja#0G4c+Q=x$4yB=1Y2-U4$H6JbAQ%#-$9>&oT*&
z#eWO^NO65Z5D0Lbz!Y0l#(L#p;;iO;77@F(l?#%+4T*f!J}qoQf41psoyy|+{KGs?
zRr0%e{zCZcU%{aO2~aam4prY;R?J$xn?_Wf-xBM0+T{__@y52<(G)+AVGaytk5`|S
z3J3rw+j$ppT00(D{REiw!|khbbD58}pIQ>inbdgY?11vM7&n-&pyH=9F#1ud>n1U4
zy{H>shc=p|N2kVp=UZTMsZA+X#8BecPI|yu0{cisfG>kn<<7*ey=);+kE@DiR!Ul$
z6>kCO;!!ASbhtT=)%KBvhFIYpk)l51wu%kVy+ED&?A~XaJn=VSh5#_Xu8<)4#6TA-
z5)2zA`ev37XuMVKgW%k4Ib^b%b$2gVhg7FHj?i3#JG5p`USTTRUynXZ)XzU~wvOD8
z+kqW%gwcyBRYrGBjnoW>#Z>dTqj61w&>3RP!t%q|fgywnC1lqXB<HHBxgS1!jDCcf
z%#&NhwJm&&NFnd0%<lAcj2YJfd<E+^U$lD?8`5R=x6NDN_QtDN>keW+-AN&DFM5D{
zsk?%&p>Cm#k7I{1>GP2Fe2<wZ2$)u`R*Oj|kzWm8;CoJyErc$vxNe*TLWY(U095sG
zc<K325ZzKnrgx*yt0)Q0I2ZZW#{(&{MI=Gn@~OQt;j>V6!_oso-@RvTd$%t||B%)H
zJtpyIhyEkTz-DXgKfM4V5RiZeT4?+?0)`NuMDVoE45))Va-tk%DupFi{qVB`H$~{^
z0wV+h@d+Vabh&<OVm$`NYTnAPfAZw7UlGiKfduQU4%#T=-z}w8;ZBFBT1>!&Ypszz
z@3Q2>x=V<RbouBP7#6cdk!aAZF;=#<C;<#H@anj5IiuLoY9f?r(E*xAGbiv(M3oM*
zXqMxI|A)N#e+BePx|=#+caa`)o<&QN|L!wS$cp~>66m7j4v5Y+Xp<5V2sjb=1fo*0
z#PntC;`aptTd5o+zr?Km>3@=!Gdu{74X=z?L$wMIk1q<=7a1OazlhrkvdlAb>k*KU
z(^~#sLcUN3{-O~fWf`_^8QL5uEUBtkl`)o!E2-VAXlC(kwp=U17gz)U_br8j^A~Y+
z>9{N|^`H9k{49=7%e#pk8^3O;K=*{w!S?XO%ho@Gwlb9@5g@POB2$8JPPUmBwt}Lf
zqMAHa*2DgavEQxZXVs@`fAY<DYVU3|LJ^|P@eQQQhr@c>&x&lPdSoB|Zjs0QJ-u-}
zXwHIIt)G7j7`Zo1$Gkx4{g1BrTqSYw4xo|7j(48U@!8qUyI*b@^UFTI-CTr@3U!?O
zXUcj^ZK}Xg&X{;J$Nh*7T?Q({@@`(Gu2CJdReJz>^VccrFy%wJ;I{<TZpO#Jh@>~-
z>%`>>@^~My-<J;cOxQ(V@zT2Y>H>`fMC3?E0zsDgLE0{`3R%%_{~1D6_Qk97{|7{N
z@rVMUY)BN$YPGU3wiEf@^0lp&;$MLjEj9g*iZO_qB9MrH&o(oQ+o<<;0!Y4y1{#z~
z+1nw|P*H>7+-|Grhn<H(1k>?~-B4m;KYxEUqWG=Korc~a-A(m8Vgp+z_(<rTV~u{{
ziv{7!&z0(&J!Pz&(*2CYe71nF9ch?fQ=^NovD=;UriI!QUu<4w0p9trln&`E_~D|_
z$G^ZC&*4kVzXq$B`)%Zb_U1o`DstD`xAIE)tS0Pq4AiwBaw!{|N(cwF{0Gt9YwqB?
zphMh(_VtuqICxI|DR?b9+ZAYvGq20)6J&-acG>_4i5&S<s{d)N6OR&Hpq{o1UOy?x
zU^!~Y6X=X*bog;b<fvfAW2z6IDvZNU&%q=Wh!!~GNb%An!2DJ-!(CLdJM}+P%NGuQ
zjoDw{R%U2MuqNOg&aOg$SPG!19>0eqUqOC$PoGPltEs^W0WkQ%=lzQ+cz?!`W0<%0
z%Yt62IdeJRbr$mb2dDvVy~vz{{@M4&0cV(Amj4=pJ|T|20D9WrnT>x3DOia9inD0f
z&W^617A^|@&fkOBU^G2GddlMK?irj#tY$t%D<LlNKnTR?{%WuGfqLvSy=iLa&F>#S
zI5+@Nc5!E};~P~F?Eq;5hc5Doh=S780}(|tG$aq2YNPU76Yzsb<fN>uec+6MCy%?e
zi7A3j8)V}QKX8n1K_B%Y=XAhkZp&mj!5M(UqsvHib2u@rT!&~KWD#gYG)qO*k2}{e
zXqTikx*uoi)7}MGH=qa~5(dO#!MXLVe50!A7K^Go>tDbar(@Xk$UgX67`7L7>1kvj
znC$>^ND**WQIoHMo$2gEP9Hva;(6y7*58Jl!*ZRuh4-s+rg8n$m;w&sr@@{Dz{WVb
zvA=^?4XA}&>LLMwrU{Glz?TLi#~K0z_FMU_*HT)4O!1JgM8ioEzS>e%7)VWHvLv`j
zE56Pt(qYxzGyFG`Z6U4V5Uv7uw!;Sj^WU|qY_l|epkOn^an-3<rWM+}yGbj>_<5IK
zAcU}wEwtv=8-Qbp2wfD!M*7H4!ChBVlka@T=yJ5vt`{c5|K=#(oPu4+S?wIij<rXZ
z?2|w&R;sfj7^p;AFcfSZB(wQrKn{ha9P;X!ap%n!e*!rsbF!UPCmw^s0d?!z&HQD=
z*0qY?e@FQ-x)7m6Zm1!kPF&}F4w##D4LWrucVh!}WO&8pOoP48Q9`3r2zbR1iyM&J
zxR;cR2t$5$nsl$1Jl{8z^69KlZIl8GP(UC+S}K*H(UCt_BCDcZc=|9YPHO#vl1~OD
zCnrbOfPa)Dd7?DxGl;Sv_(-`ORMs-ef{CABv!3(j+pe73j?F?R?8bnVO#g$%TXStX
zpu_B&-v;Y0OR3TJNrx%q6UDJp(>%`Bt??Ax1@&%o-)_JM0XL(Bq||wh^Uc}aPwIb@
z8`b{I@k=w=0iw5kbmqJq9Rn?v=L1D8Eqk_w(wM`l`Plzpr&NDE%n;8Aa!o){zsB%y
ze*)R)Fd6c6wl68DsZNIgC&|f|^w{6Z_76A29@9~^gN+Md1(jg064x7cfrSm?es{5r
zJZz!DBs3ZjxhokIRm^jhkhgw6!q@M9qum$xAm;l!#z&>QD$2?}$qg$zOA>UBj1{xn
zwS2rR@ycBwTU1M8C2^h-sAW_u&GNG`t}vXjSj-hnRbIn-bai#ZX|G#49pS1fL*ya1
zKh9&G*0oovZW5hvnv{-hfPlrCKkC`PXb!8t{Z(^d^OwSEE&5H<;xe=v>EpuBR3}b|
z!0Vr*W=7_@%L*m-k0Pu)%7LO-y}%xK&nfvl?9}2wGc6=3>hbNO>+P>dUunR0JReiw
z&TD0={kAi=8}OpkStt$Fh~pN+UNlo8gAJJEez$F2e*hv6h%NWKoLz6fLVES)kNNUU
z{UuNx{@C7W7xkWfnei`&<bO!C{(tP-{Qu9Y`Tw!U^?(1hTDaK(JDDkOf}PB4cj!CC
z(?tA+9tDW9?F^-6Di1eGWcFs4%Lg;lM5$o-%V$Tj2M|b^JSq2o;%|}RPKnPket}p%
zs<ZWl)r?z*W`O<74&w>ex%zDz`)!kLcdKkeT*2;S_P_Qj`=2?GDJr*J{0g);T37$d
zQs@7^30i(cqE-3Oc<;jDQP2_WAqiMxMtCMbIlTXKH?`v5_eT34IfUrtn!KH70`Jny
zfvNgaQ~cvk|AHH$a#2g{mYf{!LH_!uT{~DvX84Zguie|me&59Hf8<~-t&9QV`T01W
z{aF0JzXGy0t>1=gMUYd*C3UJWQ-Qzyqv*HH&0B>()9pyGUz^S$!E$9dMP-Q-TGsXV
zoULml@I*xBrM`MrR3yAEdS}Yvul=QET_#RIv7A2O4dl_Uc>M)+;FHXIqv4k_Y1{=G
z-&d(8?MU_>!HJz^ex6xqwz11cjThj<X6|3R+%<F8*JFTB-}=)2-1P2`um0nk|7#Dm
zKFL-=aZLPP{X9qGsEc3j5QZA=IafMFK%`diS6I&Ksg`}lv-J%sK6L2kX&|ROyU;nv
zJG!_pn(sGa#LWoTyMC{V&EwO6eB8NksJ;mslL(p*X$Ti2y<HhVZ+wPZH;0ufnzf}}
zh*NZ@jy8!km*SfguZqE*Gi_x)P61K8)fer<F(|^2g@LP<i<X8~Vuq}Y1?iPNiA$@X
zX-1Kh=f{cx^BlwU|5MvpMn&1Recwb-;sOb20TCpn8$=`oY3Y)XZXA#rR1l;=ItK=j
z?jB;KyK@*qq`N!j-CoyyujhTA_kKP;EY{)!vu5Vp=id8&{Eq*zkJAVoE1V<jlDQ7>
z;wg&UMb5G##@t?ExQpsS$tPBub63yt@2~{F3D+wzck-6qGkS|;KsqnepX+mZ{~92c
z?xPlpx`ynvx;I0xuFbA~ce&(8O0kSJP<eNS*o;b{&5n|@qLvjgkQueWB-1tAPpAu6
zmde~sxh3${#tX7{wy;YQp6@rW#ltL=iP+g$*?ATy#wrxeD_;<|M`+;rn3&$;<+Z~-
z!WF5~dyo7ua!oChGIg-Mq^X-;k$HGrS#dft<l8a1sohW;o78gW6NMF(mLOa?nOfYK
zSX#A(DI`e9Nv5Vgrm<)jZj#mGk?)2Gc$%DC?ghPUiC)yI7CW)i(o}sq!Cm?s>=RXY
zcI2Tk+X(NJ0HoG_KAPs*5RP|W>sYu1%_OQ~!j9F6mzU?{<Kz_bCS0L!Ks?F43yKoO
z4`3+B&&{eGw=e~7y0OE3(m}O7H3BO9%C8nX4{IoQc4RW!C#MvN3fpcNFG^ckTlq7l
z%u<qPHfv<X;nLW+uraPL&z<~s@4{y#m8%tcx$DP)e)A}yX{B=5W{Z}@d21`>iYox3
zTOIL81|sc8F0E<c>%70;!(WKFWII|<63KThh>D6LBh?V7*N1R44E~&SY)X_q9N^HK
z>8$K*>gnnda&Ua@mFjWSM|~oe>XRzQ+{fp$f9D-PDlcDSCS6uF`XW`a$;r4!pjgR0
zCGu1hk~QG~T6z%$GY2KkoB4=u6zkFM$j&L0xLix~;+Bs1i|!L=H1uMD`z>DY?XzvU
zm~X*ZD1%>Q&&S9J>d@MzY`-<#i4gQJ6O)y^Jt{~PR<W3*+n01yT{>((Bzn}1H@{Ej
zKG0huvrN%$VguQ<hW{wy|A8Jn%h>V{sU#FXmMkJ6r)YF-+!(#fQ_fRnj-UA4y#3?V
zu^ppKX91}%RzOI(s+wA&#8i=6aM1>7jc|eXY5A2IA_)H7<lP5Livtd&1s`(DLDLln
z!`uD@@ZdM>b%jT$8nn0P+&F2!I%&LaB3J}ENxPk<ayGMSOw8M>BLVJ85(DhNebSk&
zPg_+*@Gsi^VddPbwO)u3UfDXQ@~3jsq;wx&#(mYVD#V*2e`j}S`b$$HSUh&|c_*Q!
zKn6B8UcbJXgN=X_YV@mA=*9h@J7R?%3RH&Bo3KW|Yr&QDx%QdE0X@x+5jK&&Aca4E
zC*T>YIUB`r<3K<)E!(}r?~~8=tKt>;+to+wPY9fyom+$t^$riFBh@?lTvJ&~Ef=Fp
z`ziHZYwfnOZA$INei%(~Q1h62Wtp=oQto&1pnGf|okl_AFJpp&f}&4ZZ~K%LA-;Tp
zzdUIaE0Dnp6sA&5!sCj+vB(vDCUl=7tv%8a0As5^%;f}4Oh(9lb(;!wS@RNgCGk2>
zb`oRfTl0vc?aj=Eu%4NF$g@bR<_1pCnk{)fTda=#eI{#O$y>=Q4ZEBIhlNX<I;G|t
zX+(@f-8q<vrr*@No?W&<`EReWjGOwCyREI7R6k*5k23m+bYbwWzHmk4gr*z1ySvMK
z!PDe+1y|;G!fXu1z3KWapZ~B)qja8M-LlE$D36UMjvIVHJ(FB)Adf%2esZ>uT@gKc
zyY2+VnIdZ+KqZ>q^U|V4$*3Xz?QZVlvzNcmOjZBf4(@nWKdfwycnJ6EYG}`d_>#|b
zgFU(fDIsrL$e;HBipVhdxLcY}7A5X;Sz*yqq+E&bi!w76l?D}~o6ZO4(HJgv#-meM
zdell^gf=f^z5twpkB_nd|27mPp{9h|`$u_andd7}e!(h>OM+%wT`v%Hkr6!$l5dQ#
zv_=)8PNtfNulY3(r7|Q-Wz~xH59T&o)E+@ZZ>AAiQQ_Q^RvlvMx8C3-Yk<)Y9n@Pa
zy?=i=0Na<a@tSy>sM~hybDG=>)#w*5Fi7o0)|Fms4G+r?*Q+QZO55XxstcNd$z)b5
zm^1fjJz<oL%h=c&OA4q8#Vi{bZfE3C$_F)EM#s7Bx1VW<jEAP$=a1DVSmqYaJTV^T
zd4K&T&{)BALKUOwQMhek_Tb?w2p&X?;VQGHrx{W<%zcEe*3i_T6OhJE9ekgj6gct9
zhtZFYt2wcs`K51n9t-;iz55QOak0_j{qA!1g|V$z#Rc$bwPMKj%tiBanlWMAeX}S#
z_8@rb?takSw!?v19ih4EVZvEtevuq9<#S07vGkIe`35EVTkERf3OY+c&svNltB`vw
zn6bpt2H;kzs&c(+l^_#Z4Up;M3+aH+{zylSN^r+#d6ND!fV?=e?MJ*kMXI{;d50Q)
z*;*6}8No%`s;YDd6-mkF2JHme-VeS>zOEE*Yp3~zzVFNX&Gj>K2C;>Nx+u><S#IHy
z<H^^2uzN|k3?+kx9aRErkJ<1D#97{Wgl&pFj<P(lJ3!Y@o1%Vbr1aH&<1kuZV|inL
zE$SHoXSPdOuEa5f6FAIi8OUM#s<hh51Ui)bW?d6eQ&7V)x^VBY^&zy5BoG@?6aF|)
zD9KF3Sk+^ajVCEJ*#lPOvZEjwtpQLRB3O2JSC>v`ftOZRK}Cq$&gX%1YEo}DMRuLD
za=`@U8>i;HiGCTg-u;;A%v}H734WP#2<`2FmeN&I_rrm~<laqi?gc+!1oayh4mwr#
zn$Ou#KB5dN)Kk-UJ~H`^c?#?DZufe|MkVSRA5D3sb}FqSy${>ea=t!Ic#iQ6<N{4S
zP6H7B!qTdsY#H1xehwWb57mwko5RaJ^}s?6GSS)|6T;>kML)ioSg=gjQ9Z6H$k|(3
zZ`BG^IpyW$iAmn?GMRs&Z|ceB^s{iiD}C2@O3d?>=^ts47C$^hlVc;*nsZDqfLFfz
z;B*mQe=i&jxn5~0Xm}kUI%{fGr}=&nh3?^l=VVTLI%248_#fP!Tn3+$7e2}Q?eHt@
zvv3<MiyQlQa_o<}#bqT;Kl@4PCghT1wfo=pq3G3EQA!kPD0C9L<kFUwzRM}%mb3M3
zr=qeVQ9!TCD#l(<%-HI3Ek3!|w)iiHhY!>>_=*C*=4K@E81UMU-;outxNR!+o@8lu
z{E9cp>it~*cjpW@`&s@C<Ni(ZNyvc#2{8%u<l=n7&69sKabtbbVe&=gQ|l?=z5r#a
zC6eFlrG$U<`r%*A??~y&?Wpkt&1?ipJ?Cf?6RibnIc->G*d=tqicHmPK#q*(DcV-F
zc)qmVdU{MTDr=C@)jSuQW5b*K-naKDWjg8Ept=pbvDGxo-+ZJ<tdB|XjZoQ1S}U9Z
zdapp1fSTLBM)x7##*kFNR2cRVUTm40iEJakr+fEh0(WhU6$&E@zL^&1Q=GUbMsja8
zHO`z=jE2S*7njhF*8B994wu`&aoKIT5og7L8$?W>Cb<gwfCL1$?}<^3?coq?I+#jh
z>ctK>cvOfm9LYL`elC0Io-ajjRXGYKgRLEB<u{|a*JHw~!JO6a*LKjyT27TN*L|Me
zZ;szX=_I&$FKs8EHDKnT9M3qMN)oCpuYzWnZt*5sPuIGmZI-YQ-=J*U;R`px?jb(l
zSvB^4A&ZAB6KoYK+S&F`Wr-L@`4aukXb(TQW@pm0D4)?9n6u*t;U#hVEJrrn>!%JS
z_Ij3xoa&maP;bf}5FjeTvfYb$bmNa6<6s*<4~{@py{x~T<XzmbkpqLn)mlF<OmHwh
zuz5{oXcV4e<1L!8!<dujB<1b9CVQ2jxGB}xG{v6iAaWQ`U*DX-K$xpl6c-ySw@GHK
z_piI5pwQSg?`Yyu6de;ILoH5H&-21Wb#(rlx$snvs6oTa`nh_qt?HqR(a#T~KeUF4
zmN&5JX)+WZNG#3`)G+DqKW1G4B^qGCUvF&QUB?iF#>T}ocwTL54&wz7j(m;#(rN91
z6(M-DHO$zqUv*I1@r?!w(R%MjXn(FAmqoMEJ&&#2ofnzE8!e(zBO9+ua`{+pee(DW
z2nl1gB}`do3mI{k(<}^}%B&rMpx4_{MfK(+Z~hd>ahg-R`AOF!{_59Si|Aa`=e`e#
zAZli#vcUMoY5n~Y?CL*dub&__fA@g<H!}Z=oTZxgI0<uy4&xqr(jLSamxD-faiV5|
zA+FH=L)^#%XVYz_>+Nct-)^B3Vi3F|61{Oiat1ze<U~Fp&^1<5wyh-u*SpilLuA)O
zm^Jb>bz(*)rU?r<9{@IMFqh*Fsv=!3dcJcI_0p@EVuezu(Uz*)``BU!N@#K>#nL=Y
z`pdYC+|_oa*1=QXUJam8+9ZR-;f78|ELkn*1?!Fn7K{u)PRe9D-AnLY7ZB)pr%;aM
zAafM~ZZZ3&#5Qh%T>QbEh;qv*C)C>xn%f>*;)IWxIOi3)Ag?7=n<Q9T;o(corN_4q
zJ(DF!m$o;aAzmu}SxmK`<0oyRSF0^Ye6&n#r=0vpHan%59Q2DWf0u?Ci0t4V1Y--$
zX2+cE{T$p%Z;Y9Bk{aA)s={SxHOrUZG&`8CZpe*Yo{r=Rpg2)bczqOpe{HnyRX0}M
z<=~j{QZr-Ja*|W%54=YM=9_~hzXnV;Ug}sSv~qeCxB>YGyP7BeM+e;L@u32BO<i+u
z*~76@RFp_kQrL5HIb@M=FXo-1QNa;yq_;>gbbc2EkNX&C3+h7$O8H|r!RD;2>ZmdD
z_QDp^fIe>rq-wGFGp4x7ENU2pME5Y0%E$-j1SeYy7RnT2eaD9923G476%IfuzC({l
zd$?ZujtCYxT3TBb9ibj!o-du(^#bguJLV-L?Q<-XfE`T~hM#~nG%196$;taa5z~j<
z|AZ3X4X@-WMaP%5<wyIFJ8cKwsWsWs$ehP&4`XC*o3`AwAsvzc(>X&yZ*Ai~r?h56
z7CryRAh_nv2LeSwA&axi(|~7P#rB@tXpZx;3)mKu?2nF_k3ItQeC^}*-))T)F8og7
z;W@E(x<kmR|Hw{{L;PE@$?r(mUVaPNusXbVgPs49iqUGZt7#&-{)?BR{$#59#n+n{
zC;DH5Moh$+AANNpo;p>8-yu6T3D6^$0Q;Ogf^LtZrgfh2F!)o;Jlo7_;^n&Qa8JdU
z$P7sgah8>eZRD|zZODxqWOx2NBLIAyC3aM(jNlsKD9Y@?9)4yyUJ#sxg+*RLKGE7r
zzM#@0+Y<{0CV3tFJH41cy!tIgbL6c8>pNP4#4*ITGo%z0<Wt%)`+_Iws!XQ&umT4o
zg$!ove+WPm#o0h~F%dp~#eZ+>@?s`n<Q}sBSLfhvjrtG(7kiy~!r#=7pa)*R_>uL~
zvc%E}C)aeW>@L~?P{7dcv;?QS$KC*5oFBC?g-sFF+ngZmWN*JjL+p_Yov9}dv(kQ4
zD`dNC`DBr6PAlQCJ@jd@n|DK}r+GWycdZEJi)i&+N#|Yax<viDXwe^Nm6our;}nSx
zEA4jYZF@grXU5NM^@Yc{xX#rS8pg{>2f%R-VljzvqAT-QtpURzjt{6ReoKoN%YA5b
zv0nCb?NkX;jTy@b1~XDGktlpJ2Ge{Frf^ZZk60~gnz~gc?Qm1AjLo<{G-ylKEA4_f
zUKcN&=mgP^v-G}Utg)XNJG#Q->hdUj+`Bs99MP+LdEU0Mqqo+{+8GxUtD*H(w0`(d
zp#aEg`7pPgFz7Yc<ao08=@M9-{G0Rw+6Ix)57T5Qn$0r4F^PRSPqY=oI<y8@_-wnZ
zl}{{X2K;vPKH91BY$2F~SYtOy8Cc)J2{?*3ZZ{APTNjS+C)u8s17wrJk%(~A^fG(X
z+f@!iSwIRR)}6Rap7T@<F<$D52BGkr(bf%uGUrC(eZ7s1;ZR~I$K=wo1{<@I!fUZ>
zi`7MUo+nSK!tDEjc#Y&|Wo6P#HVi=5M9&#w$(?uqfivLkz1LS(P(;iw-Q)3ar<7^{
z24?i>E6K=TPW>%&)DzF~(};vX=hI~a(gK}iZ;_2z<lM+d{!QL1((c6vfrmuRmVeQk
zk&0@C>K$f%b3*1}4fF!<P2Ze-)`cZUTcv*WWGVP*Z+>)ap!94{2!p8W5lnpx=ryTw
zvaGg_q^hKnVPj^EwxMBa%Y0{77YP{-bC8;<#<NR(<|R_r$R9=~dk;=Ue9-i#Y9B6i
zb>lJVR$=9<e!hc`7wotOUp%Fp&y-c+j8Zhn2)sz`tNw03y1xL+`jsweb*K8RFla1v
z-6wMXGyfGbMe+|+7`bqlA7L=-Z-d}LcW+5Xeu6W9{&ekAy4&9R(9p0nE&f_afOX|U
zQ<z0x<0bAo#kz;gIsBQIrtS~uMOCG{F`Lloiu*u!PviB*f%>&YC<Zwu{OovN-Eg*x
zaz$%PTfhTRsCi%>a{Dj1k*?>)$Q8BhaVF#3C8XZhaik(C5aWRzDN5moop5)6b1{F^
zB$@RtXC$Dhd4m#pPCR6)BcJ0&D$qfyUHmtVkI&{@qB9$M*<P;C4eUk!S@mGagX2oX
zG0{b>PcL&!V;!&I--EcNRV&ZTV!&95d0xKS#cYXpb`K5O=H+I+wvX7WdSv-HD%5e9
zA?Kp&M_NwFLJ4Pp6noNf{x1Fl9=5v#c=8N2&2(ac1b48ta==f8ijvZP%N+$VgE$XF
z5XaEC)%E4x2*o}5kWkGv1|#kBy&W&Tp81)J<JGAVuVuJU5qi9@ES1?KjXMHEheX=D
zHQzUZCFR@mViR&dxSnsAu4?Z^enS2rxcYjJ_750U$tfun=@oCcefe!K;TjheS6mUE
zN#`0g-eelc32Pj*DrC6S$d2hxA}hu@QMZ;qzZaNC<3ax*(^{p9fL&wQ@u}WcsTfL-
zs(%NXBoYrv<g#qO5ZEyrD=68^d$4!I!E^$<$k8mzg8#x0{bE|@@lMl%Yl;ZAkDbFX
zUHFN1BL5MZocS5+kOU>f76aPQL2rV~%GwPs3;Mo#{$KoZzG7^y&oE@0k(v2QHAoiQ
zhSuw~Q`cDVYtU-*=?VEkR*B>8r17xB+ow;$u;^Z5HFZcQ3si27zpT!3e4W+dU?aR=
zk>{xc2dY%PGi<E3qY6@xWSB<%M3#_~GTSV}+M&V;385@$T7@-CDYNTG@{@c;J@0vl
zWQNk#zQm%>r3h>~t<{bz>4phkMAzQ}uxF-M5B)mUNp~RA=du3+OV8@D?ER8F!Y5RF
z*{06i<sg_;WP77AR`Zk;oRl!aB=3BiyZI;751}j?f7R!4IGA3=@Y35i%Syd4@SG?-
zh9XfBNHgr$^QF#NUwGC(%u+PhSh(6OM(NrIfoy_DI{;h&s0udt{rhJVzMy$cxQFi1
zwUVAfH<arEbh-csY%_qPx>>p#3NNhqN4l?14oKCP2MRnmUo2y1NPbf>*)^e_b9-{K
zeMKGMjfU`R&gUt8h+nU;&t1LGN9~?C+3;r2ZS_U~$pg(k*X0?{66a+&xzh2lmpAFc
zGZwu7FW<uuTysGbYd*7bg2YIPRGqKSW?Wg(<ox?-&LUyAH5oFzz8^pVnEFznt(>n+
ze2J>1<8Mf{;|=^eU{QSZ1&bSn4K`#%vh4`f)(`gNqm7UEtniJkcq16@YL8*t=YsT*
z;N%;<3TWH*!<!U}eB0CYTb0hY4TvFv@Px2qZe^|Fzjg#TjV|mC#Ua1^c<p{L&Mi6$
zmI`Tgcgtts!|u<LKi2i&W-d?{h++sNT&GZMz9jGvu2Uz5Y+GjjQW&}%Q)>T_a$nrL
zG18ImU2w4_`+viU>Vn-g=58j@5@aYzL-Vl;?fJcPCpYt^4u4qEycwor?-MD49kwEd
zUN74lPIxf<L8t1^*hc8=wtX=Pm>;2@5Z(#J9UmO+?5|nbuF?H)x0Hc1a<V}`1>|Q0
z?rvdE{&o?Y2e~(^XSpE1CU98`afWd%#?|tq!g1f8o95t(hr^j&@D|F3%Qn$EAh*e}
zr(N4>x>PQ!9IK2u+Ab7P<7fRdO<5N_5NUFMxk!}O*KgWRTFtji`C&2I2S2}Av#uWm
z2Yn(L-dj-qO9R1>m#3_-<mcV#_=*z;@_FVGwk!)+8{8jrI5BM#BXv8dOkg1-ncluZ
z@ip`_8ga74h1hsEFZKI|iV;N<JLr#$1=czcWVd3pzwPZbI!my(-?;GzY*vp(tF*jj
zZ{9GvB6IlDIQa#2%b(ZZct`#BLyrFIPnf@ngV~_}r$QpFV7bsAbM?QxdyO{l10o^!
zGR!KLwLR6ZLf{y&NMhnH*Ei64i;Ih3l8{7FxLg^Szp_5u%yN-7^2#VmZ#3yiteMUP
z`FW||;W~$<1=%#08S6#1mLk&KU7AT)l)7;^X5thWC*TnTH-0dDiW`FGMs*C%nrng(
zPeSQV#n!u5oXF#2d~bxDdx{eqqxEJl?5hTcgaQP${`3+O*wJm{fP|jBv21>g7zd&9
zfVrXb2NzQ49&gEg99agQ|I1W)bquzNV5q9c4(ZJ55<V-LV37f$r_bgSG<=R)3*Db6
z=&>${ko(W1vb0P;vH)bgS6=zks)XP^US<zBL5BT#mPMw|?(m-S8LS;bYd_-jGvk6l
z%j4=P+YEAMF2sg6(;HT9oISBK!)-k!Xf;*;-(4Dw^&R-vsh_Yms7<$g&#D9WmHA|U
z;z!Y4$L3lPiw_siCW?IsdhN!8u)N&tO6gOSjmPymJG?8cYJ7c<a(N@Au_1+i$fu;|
zC(%l1(T-t*0cL~Z{A-2CxGfF;b+-HlvDZ1(Z)!o1c1eQC%6yfPLpfW$UfZ&<+RM(k
z7hZ}g^(YTn@MocDBEi?-+vem51CeL$849>qD9$9Nr44$%O5TZc+Yq04=PQHd>-ZJ}
z&%_78U~_>DoNoZTYv_b%GubDdEKxfiSYdi!+!&Gapz}Kjh*;0Y><D}~oe70rp0EE-
zUOHHy{qY2e*aD$<SrE6u6DCfi?MPnFfLd{5ZMk)au#nK1F8*6qZ-e=(Z}M?vIL0c(
zd>;$?N~3d<eCC2z7)1)SA1^JphSBwzH+SNS7snXdU~(dC9CkLtg$hOxcNd_!c}~)E
zURT>kdctRE%+`~qgya(=tG2$Rl+dtg3au0cg2>OM^I!OaS7Fj1kU!U;ZZ3MVNgM=+
zR>7zeXxtXAX1<L+(yMz7e^`e=DTq_$QM$KB6(VYz(t3zwQ=e0e<t|8tKQC>=C$8;@
zu^0PDJ-PLehS^DP(Nu>mVZc2QPmP!{zdW=oulpzAc<KC#wDK)3rhy=X+WLBZ9i3*&
zw^^B)1v!~=h5?s^FEr*jo3H7WKRKu|$O-!YXJ;j_@*gM>Npf?d!1TQEr4jKtpm^@}
zmjSPHxAqDiN8NPQ@kr%lmGwxmO<Y(4m!UQnH?P;0*F^3Eb8`!`J}O@0-jKa!Ee;K>
zS79ZlS`Yakm0UCa{j_!hW(A=jnDRL5l|HU=eHf=`AUIl6oF+FolIO;LZ(Vwp2e^~9
z{-u+{>&=hEokqi28o?D6;CgVtwt4%8?17L0)u53|?5V1h6uDgx3dNmX*GiIQRiYIZ
zvf4hxarptTR+GirVt8J)zlEZ*o%7d7wJptx=pni$>00Mh2G{CbgTz>i$TcYUeRZWc
zrCXiD4tlEDz5ABB0?)jHJWjb*VoUmZCr^^C-=ABs7|9fZCD}mbp#e_ne5Q9xKviL1
z<%RXG)VD&rc5O$h8q({(TrTM21k~nHOaMex%|2%O(%fkiq^9zAb+$TSEQd}tAPd2)
zHY0nZ)`)M$Xs$%YQGsz^rDk^pB-}Y*$jJfoUwhuNos|V0xIEj#PH!igfPOOvAzT=)
z`a_Ee=#&fuS;e{i`y)A%gTko!%>1LS)_je4`t-U4#zx1OgX9(KuR#V%feu;OxZOc;
zHb%0vBu+1@eOmjo!&J*%N2mR$Vl;EZ0D9^n@^1Z$4wG-#Y>gM-lbMaG(3EFqrj5WR
zX&LG}o60gfr`84HbI*0B+(?*{eo?TNZ~xJ7zkf=j2Uj3G2N1>Zs~ixvA{|0vz2^5X
zhsvJ?P1TzBWL(s9jdax6>RoIOMU4a~0hB2Qd2Tp!5k>W?Lgb<E<4E2sBK6>*B3siO
zEdUclFlJ^V(SG;Sx&;bjLgQn37s0pG?&gF<%l^F<pz9O%`qE&&aD6X6y*ZlxFc=j4
zroQpFpwxhHNUIv%M-Czlp|SFq7E=|p;f^6Pi@6&Zv={FWn1g_wGvqX#%vy>w{AzNp
zUH)U$YeBLdBuX|>cg*`v#04YzYAlEE3oBJ$<Am$n0(p`P<CeM-7EHio*s=(LXx074
zT%q=EEc$<#Box;VN&4W<7y6shs<&=lVNB*pO4frq2|<Qa(@;|ebNLKY-tMOOEJ#gL
z!zvy9-HkKO&`?+H{B#bZR$ZC&q@II4%B?RLPs%{bU_ed+(57Q$LB$*3bH-?BbQVT-
zM7Z+o>4wr591b$4*r^a}sHzeYI#1hoE*j1yc@)nG+myCA%x<jFL+Om9)pGdg6_G5F
zHLUqj#GYr*ICmC94}dvLDK?{-@6Pk@0j2nRK(Q7;)>_8*Q>c_OT)w5}^sz|^d*URN
ztNmTS!jqQrzPMZB(yA=e#T$ncTaC6;#c)<^S_*GR0SjO)JMUwVlA5ZjxzC2~0(%R1
zxC;n^kwM#aT5`5NcF|JWn?(N}Q9o0cL8S!_YM)9-iS0Nl#D<uJf{ux4jE73?yWjve
z>!9=^_E+^Sqe2ZY4TGNfCfTpF4YJ2H5k;&|ez&AC2f<@K5ci{!BnD_QndSAe-9stJ
zL|$?GK+8b^00^eQl%(Wx;%#UPIB`Z(l%LLAs)?~bvC`69S(rPkifx%8D>~mjz5*G8
z{^{Du*-YP7-C-*H7}-=Szqb&V3{pJJfY70LuB)$~xSH??eq(7%OMASmN>qxbr|PL>
ziW)cjSml2COBE#PQX|FPgNtEE=cMYg^4i=j%+C90VlAktky8xg`>gl%o&;XwJ0+{8
zR@SJ{dYn=}1BSzV#88C!EiY40cF{EN$abzxbH&5U#8X$18Qn7fp=y<0vF%@;&9@8Q
zZqMBsgB73t_gjj>i+eN^PJX~t0j@eQOFUqDs;^aTbH>j8HgK?f1Pym{f8lUCEPRK+
z<4A#vK0qtMs1?2S=sSx2O#0BTZQilF2T7CTM7W~JUKcpK8Fw8_`?p!cI;UnfSUk1a
z{r&fM;C)^SoW0rRSynKf|5e(ux-`}|3!*;1TGbvDtLtL!x@?B<k@KnsW1r-csvg*Z
zgn(5Z-DPEH=D_Gw)L1f;fHt+cMH2mW9BZkMPAC<9=~XrX40y>&<zC|6kqcMo6Klom
z+UcyK^y}**ky4ViI2<1F3~uq@@vA#IZg^tzAQJrbeg(ghdM~9a7VtMHX&AQ4XHslC
z9pMs6KpE1_0vyV-)(5@~aB2{%|Cxz4#G5m21^`pVbqAgCS{;w+<h`PebIMl#->Idq
z%H`wjsd#nE2;pN&ewD(&#44qO`G>OZUq31oFrvAhlvgIzY^)lB{MFl<JWz6z016)F
z-|}9C`z~CBEzUL|7fKxJ`rBFb#{%)yQ!=kT&p|#7*!n)%g^Y*@9c27gH>eB{L<j-r
zjU}J?q-r}G^@jDrmDJ$v%x2+2mrOimWkQ3=KcXEcrOXz1FLIK@;)nU8N0j)NR?oFk
zM1V$BwHIJWN^w_2(<N_#L8Z2-TCL`BL{<G+xWLwd`#5NK(arrD$FlPeD^F)$H!<4;
zx6FfJdq895xMJOo$Jh+mT=E+|T|L!Yqe<1>Ykk2JZVoe%Wn^XRajiJdf$OU?qvr6K
zqDd;F$h9BoUL4-l*vq*n>+cW46Uky~V{iZdo9JGWRq%N6q&NMGjNJB=r0NDu`?O#<
zzAW#^km2&$I?3;=<s}<r=xjEAa?S;|)c^0dC?MOSB#l!L2~@8`R3<EmmVE|CP$_U`
z*zV6iUif{q6jJ;)<6hlg|C6Efskb8{Z-0<kTJ;Kj8G*Up$x^4b;7r+Y6P8oZ+c-MV
zVmb-9svQeAOxIS~eC~x<&|PVW1noO0P~<1m)LII)LjMiV)+{y?j)F^AaYPvTFQ;*t
zE+oS4RSepliSD2@<3i*5_0zN-_x>~Qn+ke(OBs|O;eA0!9JYS{_*dYTb93$Kpcoy^
zO+7&>rN#7JV2W|OZ~DIQcS#+5e6zf~4`>{@=0nnABj~b{XaK_rb3nEI=lsbe#lwX$
z*M64_<z&3cvg~h071kG1fCG&rd`RjK2GUY)HuJ3o$bhWSYy;Gdb<Mx!+uG%=#^{Dv
z4dgoX)~HB*Dh&W4?TNv^0qLi}jlUn}`oB`J_`gvLx$T4M%h1E4c%TEW;>K%frB_8S
H-+lQ%19TZ<

literal 0
HcmV?d00001

diff --git a/docs/system/advanced-index.rst b/docs/system/advanced-index.rst
index 36469763..4e9c5699 100644
--- a/docs/system/advanced-index.rst
+++ b/docs/system/advanced-index.rst
@@ -11,6 +11,7 @@ Advanced System Tweaks
    flow-accounting
    ntp
    options
+   boot-options
    proxy
    serial-console
    syslog
diff --git a/docs/system/boot-options.rst b/docs/system/boot-options.rst
new file mode 100644
index 00000000..d054748f
--- /dev/null
+++ b/docs/system/boot-options.rst
@@ -0,0 +1,57 @@
+.. _boot-options:
+
+
+############
+Boot Options
+############
+
+.. warning:: This function may be highly disruptive.
+   It may cause major service interruption, so make sure you really
+   need it and verify your input carefully.
+
+
+
+VyOS has several kernel command line options to modify the normal boot
+process. 
+To add an option, select the desired image in GRUB menu at load
+time, press **e**, edit the first line, and press **Ctrl-x** to boot when
+ready.
+
+.. image:: /_static/images/boot-options.png
+   :width: 80%
+   :align: center
+
+
+Specify custom config file
+==========================
+
+Tells the system to use specified file instead of ``/config/config.boot``.
+If specified file does not exist or is not readable, fall back to
+default config. No additional verification is performed, so make sure
+you specify a valid config file.
+
+.. code-block:: none
+
+   vyos-config=/path/to/file
+
+To load the *factory default* config, use:
+
+.. code-block:: none
+
+   vyos-config=/opt/vyatta/etc/config.boot.default
+
+
+Disable specific boot process steps
+===================================
+
+These options disable some boot steps. Make sure you understand the
+:ref:`boot process <boot-steps>` well before using them!
+
+.. glossary::
+
+    no-vyos-migrate
+      Do not perform config migration.
+
+    no-vyos-firewall
+      Do not initialize default firewall chains, renders any firewall configuration unusable.
+
diff --git a/docs/troubleshooting.rst b/docs/troubleshooting.rst
index 23248507..2d6532d0 100644
--- a/docs/troubleshooting.rst
+++ b/docs/troubleshooting.rst
@@ -362,6 +362,8 @@ to clear counters on firewall rulesets or single rules
 System Information
 ******************
 
+.. _boot-steps:
+
 Boot Steps
 ==========
 

From 7e35e645268e95e592d47e0450aa07eb8395eb84 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 5 Nov 2020 13:12:49 +0100
Subject: [PATCH 059/295] interfaces: add IPv6 DHCPv6-PD documentation for
 PPPoE and Ethernet

---
 docs/interfaces/ethernet.rst | 38 ++++++++++++++++++++++++++++++++++++
 docs/interfaces/pppoe.rst    | 28 +++++++++++++-------------
 2 files changed, 52 insertions(+), 14 deletions(-)

diff --git a/docs/interfaces/ethernet.rst b/docs/interfaces/ethernet.rst
index 0633ad2c..95aef851 100644
--- a/docs/interfaces/ethernet.rst
+++ b/docs/interfaces/ethernet.rst
@@ -95,6 +95,44 @@ Link Administration
    Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It
    is the size (in bytes) of the largest ethernet frame sent on this link.
 
+Prefix Delegation (DHCPv6-PD)
+-----------------------------
+
+VyOS 1.3 (equuleus) supports DHCPv6-PD. DHCPv6 Prefix Delegation is supported
+by most ISPs who provide native IPv6 for consumers on fixed networks.
+
+.. cfgcmd:: set interfaces ethernet <interface> dhcpv6-option pd <id> length <length>
+
+   Some ISPs by default only delegate a /64 prefix. To request for a specific
+   prefix size use this option to request for a bigger delegation for this pd
+   `<id>`. This value
+   is in the range from 32 - 64 so you could request up to /32 down to a /64
+   delegation.
+
+   Default value is 64.
+
+.. cfgcmd:: set interfaces ethernet <interface> dhcpv6-option pd <id> interface <delegatee> address <address>
+
+   Specify the interface address used locally on the interfcae where the prefix
+   has been delegated to. ID must be a decimal integer.
+
+   It will be combined with the delegated prefix and the sla-id to form a complete
+   interface address. The default is to use the EUI-64 address of the interface.
+
+   Example:
+
+   Using ``<id>`` value 65535 will assign IPv6 address ``<prefix>::ffff`` to the
+   interface.
+
+.. cfgcmd:: set interfaces ethernet <interface> dhcpv6-option pd <id> interface <delegatee> sla-id <id>
+
+   Specify the identifier value of the site-level aggregator (SLA) on the
+   interface. ID must be a decimal number greater then 0 which fits in the length
+   of SLA IDs (see below). For example, if ID is 1 and the client is delegated
+   an IPv6 prefix 2001:db8:ffff::/48, dhcp6c will combine the two values into a
+   single IPv6 prefix, 2001:db8:ffff:1::/64, and will configure the prefix on
+   the specified interface.
+
 Operation
 =========
 
diff --git a/docs/interfaces/pppoe.rst b/docs/interfaces/pppoe.rst
index 75fe0a40..8fa35492 100644
--- a/docs/interfaces/pppoe.rst
+++ b/docs/interfaces/pppoe.rst
@@ -183,27 +183,27 @@ by most ISPs who provide native IPv6 for consumers on fixed networks.
 
    Default value is 64.
 
-.. cfgcmd:: set interfaces pppoe <interface> dhcpv6-option pd <id> interface <prefix-interface> address <local-addr>
+.. cfgcmd:: set interfaces pppoe <interface> dhcpv6-option pd <id> interface <delegatee> address <address>
 
-   This statement specifies the interface address used locally on the interfcae
-   where the prefix has been delegated to. ID must be a decimal integer.
-   It will be combined with the delegated prefix and the sla-id to form a
-   complete interface address. The default is to use the EUI-64 address of the
-   interface.
+   Specify the interface address used locally on the interfcae where the prefix
+   has been delegated to. ID must be a decimal integer.
+
+   It will be combined with the delegated prefix and the sla-id to form a complete
+   interface address. The default is to use the EUI-64 address of the interface.
 
    Example:
 
-   Using `<id>` value 65535 will assign IPv6 address <prefix>::ffff to the
+   Using ``<id>`` value 65535 will assign IPv6 address ``<prefix>::ffff`` to the
    interface.
 
-.. cfgcmd:: set interfaces pppoe <interface> dhcpv6-option pd <id> interface <prefix-interface> sla-id <id>
+.. cfgcmd:: set interfaces pppoe <interface> dhcpv6-option pd <id> interface <delegatee> sla-id <id>
 
-   This statement specifies the identifier value of the site-level aggregator
-   (SLA) on the interface. ID must be a decimal number greater then 0 which
-   fits in the length of SLA IDs (see below). For example, if ID is 1 and the
-   client is delegated an IPv6 prefix 2001:db8:ffff::/48, dhcp6c will combine
-   the two values into a single IPv6 prefix, 2001:db8:ffff:1::/64, and will
-   configure the prefix on the specified interface.
+   Specify the identifier value of the site-level aggregator (SLA) on the
+   interface. ID must be a decimal number greater then 0 which fits in the length
+   of SLA IDs (see below). For example, if ID is 1 and the client is delegated
+   an IPv6 prefix 2001:db8:ffff::/48, dhcp6c will combine the two values into a
+   single IPv6 prefix, 2001:db8:ffff:1::/64, and will configure the prefix on
+   the specified interface.
 
 Operation
 =========

From b772c4f678ace50280195d9691974dc41cb7ae58 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Thu, 5 Nov 2020 21:52:44 +0100
Subject: [PATCH 060/295] system: add system dns page

---
 docs/system/basic-index.rst |  1 +
 docs/system/system-dns.rst  | 69 +++++++++++++++++++++++++++++++++++++
 2 files changed, 70 insertions(+)
 create mode 100644 docs/system/system-dns.rst

diff --git a/docs/system/basic-index.rst b/docs/system/basic-index.rst
index cb030089..b7bbf1c5 100644
--- a/docs/system/basic-index.rst
+++ b/docs/system/basic-index.rst
@@ -11,3 +11,4 @@ Basic System Tweaks
    host-information
    default-route
    time-zone
+   system-dns
diff --git a/docs/system/system-dns.rst b/docs/system/system-dns.rst
new file mode 100644
index 00000000..59cfdb5d
--- /dev/null
+++ b/docs/system/system-dns.rst
@@ -0,0 +1,69 @@
+.. _system-dns:
+
+##########
+System DNS
+##########
+
+
+This section describes configuring DNS on the system, namely:
+
+ * DNS name servers
+ * Domain search order
+
+
+DNS name servers
+================
+
+.. cfgcmd:: set system name-server <address>
+
+   Use this command to specify a DNS server for the system to be used
+   for DNS lookups. More than one DNS server can be added, configuring
+   one at a time. Both IPv4 and IPv6 addresses are supported.
+
+
+
+Example
+-------
+
+In this example, some *OpenNIC* servers are used, two IPv4 addresses
+and two IPv6 addresses:
+
+
+.. code-block:: none
+
+   set system name-server 176.9.37.132
+   set system name-server 195.10.195.195
+   set system name-server 2a01:4f8:161:3441::1
+   set system name-server 2a00:f826:8:2::195
+
+
+Domain search order
+===================
+
+In order for the system to use and complete unqualified host names, a
+list can be defined which will be used for domain searches.
+
+
+.. cfgcmd:: set system domain-search domain <domain>
+
+   Use this command to define domains, one at a time, so that the system
+   uses them to complete unqualified host names. Maximum: 6 entries.
+
+
+.. note:: Domain names can include letters, numbers, hyphens and periods
+   with a maximum length of 253 characters.
+
+
+Example
+-------
+
+The system is configured to attempt domain completion in the following
+order: vyos.io (first), vyos.net (second) and vyos.network (last):
+
+
+.. code-block:: none
+
+   set system domain-search domain vyos.io
+   set system domain-search domain vyos.net
+   set system domain-search domain vyos.network
+

From 58ab5850f3b6a11d46fdc6b187024fd6f704126d Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 8 Nov 2020 09:07:48 +0100
Subject: [PATCH 061/295] documentation: add link to RST directives

---
 docs/contributing/documentation.rst | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index 2b2d3ba7..92af881c 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -46,7 +46,8 @@ access to the official codebase.
   (:ref:`prepare_commit`). This mainly applies to proper commit messages
   describing your change (how and why). Please check out the documentation of
   Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used
-  for writing our docs.
+  for writing our docs. Additional directives how to write in RST can be obtained
+  from reStructuredTextDirectives_.
 
 * Check your changes by locally building the documentation ``$ make html``.
   Sphinx will build the html files in the ``docs/_build`` folder. We provide
@@ -175,7 +176,7 @@ descriptive way in the resulting HTML/PDF manual.
 For a inline configuration level command use ``:cfgcmd:``
 
 .. code-block:: none
-  
+
   :cfgcmd:`set interface ethernet eth0`
 
 opcmd
@@ -196,7 +197,7 @@ descriptive way in the resulting HTML/PDF manual.
 For a inline operational level command use ``:opcmd:``
 
 .. code-block:: none
-  
+
   :opcmd:`add system image`
 
 vytask
@@ -214,6 +215,7 @@ URL. This is heavily used in the :ref:`release-notes` section.
 
 .. _Sphinx-doc: https://www.sphinx-doc.org
 .. _reStructuredText: http://www.sphinx-doc.org/en/master/usage/restructuredtext/index.html
+.. _reStructuredTextDirectives: https://docutils.sourceforge.io/docs/ref/rst/directives.html
 .. _README.md: https://github.com/vyos/vyos-documentation/blob/master/README.md
 
 .. include:: ../common-references.rst

From 50e16ba3bff9581b708b78be68b0525f1189171d Mon Sep 17 00:00:00 2001
From: erkin <me@erkin.party>
Date: Mon, 9 Nov 2020 12:13:30 +0300
Subject: [PATCH 062/295] dhcp: Remove link to obsolete wiki

---
 docs/services/dhcp.rst | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/docs/services/dhcp.rst b/docs/services/dhcp.rst
index 8655d177..56316793 100644
--- a/docs/services/dhcp.rst
+++ b/docs/services/dhcp.rst
@@ -629,9 +629,7 @@ If you want your router to forward DHCP requests to an external DHCP server
 you can configure the system to act as a DHCP relay agent. The DHCP relay
 agent works with IPv4 and IPv6 addresses.
 
-All interfaces used for the DHCP relay must be configured. See
-https://wiki.vyos.net/wiki/Network_address_setup.
-
+All interfaces used for the DHCP relay must be configured.
 
 Configuration
 -------------

From 696e05e56966c4f235ff014dcd0f49d2dda25081 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Mon, 9 Nov 2020 19:36:25 +0100
Subject: [PATCH 063/295] examples: add wan-load-balancing

---
 docs/_static/images/Wan_load_balancing1.png   | Bin 0 -> 373848 bytes
 .../images/Wan_load_balancing_exclude1.png    | Bin 0 -> 382563 bytes
 docs/appendix/examples/index.rst              |   3 +-
 docs/appendix/examples/wan-load-balancing.rst | 170 ++++++++++++++++++
 4 files changed, 172 insertions(+), 1 deletion(-)
 create mode 100644 docs/_static/images/Wan_load_balancing1.png
 create mode 100644 docs/_static/images/Wan_load_balancing_exclude1.png
 create mode 100644 docs/appendix/examples/wan-load-balancing.rst

diff --git a/docs/_static/images/Wan_load_balancing1.png b/docs/_static/images/Wan_load_balancing1.png
new file mode 100644
index 0000000000000000000000000000000000000000..bde1edb61e73d1889332732d7e9cb3bf1281589e
GIT binary patch
literal 373848
zcmV)2K+M01P)<h;3K|Lk000e1NJLTq00Mdd00Qd>1^@s6X^<-F001BWNkl<Zc$}2I
zd$6VVRUP;p3GT(OzCfUxI7PP!RQK>|0U4y=gce|EIoOej2@)xS1R2U^29RPf5=>wQ
zVnD)x1T~E1%%m(QRnX>TiP+Y|!F^?0>Xsi;OL9L2NH(Zj4pXI;%R{$<t-a@udwzSb
zwf6o_Yg+#9Ip_O+zx`Ni?Y)2JO0p(*cZ(nHw)JXm=C<`_c{5hoa*@Fm+qbUe|8(8b
z_PA}ZmG|e`=JN1?uWWM}H`^^fMrIsm=QkD`<b``JBEe?}X>qgMF23V)!Po{c=^yPt
z+yH?Ge~fL|5u7PMh)B5{SVR;Qt8!xni^gBYB=l1AC4DB{gn{A}%P~LAzpS5)eQ6u8
z#yo0`gl*e;H?KRbH?<crgMW^%<V3iFCQSSUuNVi#Sv6PcT(~Fn0B|XVz>eZI=o7$Q
z@2|%!>_q@eyTrX<ggA`2=4-Rll;B!*I?{=_h)c%V8hd$>V+*4OpMkH$2R=)#f??8D
zWAut|dzJo4_!TW0z6;!ylf<#B)8tEau2*m}e8%!s>sd2x{)AWh2#Ul9*R$Y3_AP>)
z$9?pfKn!is8o58SR&)`%GQdpSG2hGHr~J(MYJEG^VW(}xaKt2PXz@0a_bdcnul<8L
z152*;(f3R6G4KJA5nnosM?Pi!(zm%!FcFg-V`F$An+cE(1+h**qCprxBxs8bOfHfG
zK;W>gL{-6vZ332kY>{laOR!*pHDKojIT_gO27S|zgbT3`g#*}^_1qv?c*D-fD-U||
zO1@|E?f46xEU?VCH7AIKKGA#cW7PQCVkB82uLXN5(~cW?jR8FFb^f!?Ab-TD)LWi$
zuomaONc9)+3M9?#$A&hh64iqEie^vnXPo7*Jv1<I8nKjq0E<a?3_)sWmLt*7fI9Xf
zU%0Md0*3WViSj33mL%7qD&0f&DHc8Ka;{B3S*mIdo7zuMkFx^_bfnK#_Nt{8gu_|?
z4u@E(^I)v`veD>=Yz+<&)A~Mjkb7`V>K1ch{Hr#BbKoSNFYBbnR);%tOtoU*loZaB
zqG|<5a*i>1M+<^u#WirikW?>Xul6X`Mssg0CHw8(SsXJrjK`eU(==%8cY7#iX%j5%
z9v{@SrOeveD|U0ugx`dau+-|f1r7_)az8sb<KL2$na(r-KoLlwSc}-39ExxQT?Id5
zfDm$5D~uLwU*=|+=5UzXP$))2QIh9%B`y@?*kkEa1Q!ufgJe<ndEtG)wcxY5D1oc0
zrx$pE{gF-p!oE{uj1iE))yAk(zV#m5g~J258tY#OKJC?OFq*OshxnuT&VEkKt%?b?
z1h2e+eT)H{Zt{8a1*QzuesEB3bq_vIG=MA1cb5B;r)6E}{lHAHX0;gIp<HV&BM5EG
z2x-Isy&6B~l{uqt=l4Z>{ow+0lDLSs<hAb)15fnV<E8OYA1!O3SEg+uH1SKm3tL@&
zC}%)|_wZo^v>$l1d2t;$*Taap+6g8qw^EmAR_YA1E_s_n3KjD_38XG@e(-Z})AW>N
zs`#fk3G2=lWQ}`NU+7P85&abYRqIhJV+zmCNv;#bO8Kh?!-~Dj9*k+`8EJDur?p{r
z^Uz}Ra3C4hU`W#pewz#gXneB}q2KT#?m<$@2)hS~XBEKeH^q|8Isc-lFFeRu5V$t?
zlh}m=c#fiz(;qcEh%~r^cMT@IYJ952i&`nXQeJ$ozOOp;ne{Vx;%CbT@f7h*n+1b{
zBVU9E#tI0ht^@};SVCl#V-P#UUNj?`qG#C)hhCPSIrCzVp3kglaDg0X5THJJA8@>U
z?Q~I?OdPD-qvzqd)e^@80#EanF-W}ON9(?>1wZ5?F{0O4%Xot5@>v)~%fc1JAw!Dy
z2^P|0i<ZH5>I?0F?n*4GQ}z!w5G&>vhcD%_qSuq%h&kWqTaB49GvOxew79o=Z)0ni
zRJ(Kc^YhGJUJv<;rZfjROd<+Bwm>UOfcUAJnW?dHuRmvuoQJKtChv7x!nj6);urRr
ztgnZ@-ainIF(N{l1L+bliRY-CnukM7Q#inafz3$8iqj*D8Ur=nFXRcB(!>O`sJ=nA
zIe@lYA)=Xk^)xD=8-KO{3lXrPN9dIWi?+BRW^OXYPKHQ$Kn&9Kif`DLjffehi`K*Y
zz>bAE4%GRri1eZQsqtg*fQ3-u_=UqT%oW%(j+{sGAbX((L@&IXlTFb!jn$fatKtLi
zqSaD6Wk2x8HfIhFVwdt}B6JToyCG^4F2<S<lIkW_+9ST`Gs<QK|7D;B?}&EBOd5=Z
zXfJ<e+xEiCX!>BC@@x8_4V`POkiR@PG)h{C1EHZEtH4LPs14*}1-5`NYXR|G-YGK%
zV2d8&xpVj?7$ir1MRsQL;l?7|C?cvK4zT9NKFDr6&oX<qtMM;$qaFyj7mmVx>a5X;
zVa#O1nzcQ)v?n<j4vlyjclsVSv>8ya{W)xlj|LCK7y=*;jOZoYIVkRroDSd+=y$m`
z_+ivtexfhcjE5f8=E%=|LVaUk6eNk-@$f?;!N!)}tC-R@0T~j*Mu-KR%>`_s-6A54
zw}75@#V6<8fY%rI1;|uUQoLoq3^&L15vvMAFN&Ro$2}^uNgvA{XagirFhPzZu@oBT
zR&gEs>bD{-7~@^Ui_2Q%i~T4su2xa2HuM47Tcs!A4!<a<&pGW-(`;g2-7rn`Tw->Q
zRmeHS0!?P+Z$?5#WSqZwHriKh!o3z7`K=Oj)9|VJr)+5_3>b_l`RadrfVnfL+?1Dh
zvYEjeQWiWWJy8rj=ZV$oSO><urtqnI5TBVm<Fj?SFo!Xyps!b~xyLIv8Z!V!esM-M
z+6Mm_5Ay_DoZ{^dL>=B3C-o1WHysbUe$GB0=-W8jI6FOJJ?KHQ^nRn8GY1pFIo26`
zp2xu~evsce%xG`XBE-|o8UEbj$Fapa#;ATV%``jBV2-FZWAtE8W8Z2l5v93LO#@)E
zmc)0%dNk8MF?nxl7wn-8wH50S%mP-BN63nybe1;TA(Zi@Atkto8t$R6%)+;Zq-(d*
zw;-o*5q>HcBkhVW+FQmr){C8)tK}tNZnVMvM+P8Aw9R%AILK(E4)4=g9XbX$bos0p
zh(jN#TYCZPtzb~I!cT++Jfr+9@5m50#Anv-g?P2dPx#_PQo&az;1W{SB_C$0Hp*|W
zhGDcfo|i$5S>}DZWgMR3BHz}r`(=!=9(@mp45D7458|p>2a3eL648(?e8zc;2ujZw
zsTFN>hlDcGV?mcA#}sy&nrJboc8OWY1xOY?M;K^h4#%37slG%j!(NtL!Ot~T@>%(z
zXTy%xUDdY6xWvU~VndBAjl>#rr|@ZS+SUA;+=E*zU(FLx0sDgSDjVVpW5zGi*(>8A
z#IX9XRd5qCGFvgLs<Gh_S%?^rXH&ZzmvETaD|Ujl8^-4opX!sqFq-429L_{|fNKGP
zfdu`acTH+ENehcA^aPL(1zZGS4?*Qia&6a$xI3|+7&$J8N%sY|IQa|S9oZs=mP_Ph
zcE8v4CWnhI=K8)I2+Nm%CMS#|V?ibfn0DVBCPk;H2gs51IQB=ZMr%1=v9C5}))X7&
zXy1DrQD4^CL=j2Nb=pYX1cptH6c^fBVuHsAIjlH5%GgKBz!VK3h;8nwy#PQC>Hu5f
zg7;wK%~KN&jl^Nqp{}*-?)<F%9FWO#7f@z>_k*5eV!flj)5ZW#7$mVF9)t}IRa(m#
z8F0j^Wt++|;E(wt&eQ`3@35|WrTk}n6F#%tkHIedhuwZ}muF(Nl_>Z2QD>0X((jm=
z><@VYHca9qEe(<YZy%rAJU9pR8IK(xOw80yFZsUDLmn9yM^(=rffK;Pyv`XhaF^lC
z&fVmQY-kMv*K$UnxB&wX4Im>JreHLURqRv98x7s^a|vWl#KxkeXCN>v;PF~98on7Y
z_J^Pm3L=i?-i*!J3kgGE2VSkMa-Rlm;6f@)9z1=@P}M_}_!xJ9Y`}sWZ^BG^kT`X1
zVxc(dK7>#QJnMrv4TocWeh&NQh&{(ZISU6xzw9exV4F@0kz&yR?w@UzbN4-J5N(Tw
z153e4bFTcO?&uNfd4P}^&|a)JhhZ`NcA9gD75tRAFprtI=kRRmKjTAmC>+-D?12F4
zp~hY7AMtT?UwQ@Ts`e09AIQa6Er-$`)6k?Pqqvs%lURuFicd2uG&fjMxzmF}+mCP^
zPHpg#>m#V*XHM5TOU8R#M>@fXhL#2w>btE$<ZCP5)XR!K+1RT6ESG4_1rBn5n8mzi
zbeg>yaY23Q`XE$$7Q!QQ19NKnH^)EXhz*V|aA**Zfwgi@{(3$mjmlAAA+ss)Rb3dm
zndMY`wA{G6`;;F*EKRT$1V{izNkcMy!Z3Z3N>f51)$rjY2)4t5&X^t7HqBV}#QLF-
z9@r+<wpk@^EBDG!kr+n&(zwU-)N1ur@zKGcVoh6|8{NzIn2lTfRq?ujKqI!szj9_6
zLN=5<`~W<NVLWm^c*yYT;v$=va=!LCQ7ksHr1<nb3|+`=;5*jHPtwq^nOZ?ibui+5
zlpOQR1jp(zcrnMZ2VjHzBXH^s!mS=!B##!~cJN{@n6Glp4V?Dqp+<RvBmn}^UM>-Q
z*=G#3E^cx%avko|4iF9TC-izH_~a*U)m{Q)H@(0+@Flu02NBf{+%No(Y@yc~W+M6#
zj-2e+a6Ydo=AF<*dtTNCWTjp9wl&ZAU+O>uVCGo!^reb;9&5k?=Oh{%eY1GvLt#D#
zyC~I)4M-9zAoK?PM)3tBE_Pck<tHmu^UD0eHd7^fwB)JI2C$8L5ku6N^gNhjA|&Qw
z{4^kRWE;5VxSZ5bTDc&Y6{zA2e-JPMx*k^GRm8_)YvWmpsSZ7m7c_i2NVz$JPKgYG
zl;+Q|DUO;$mlxv+$V7}ln)sp9_6#Pgt}MPL77{HX*u{`yPBLd~+01)c0~CU=;5kYa
zV@K{)(wbvFN6rZ84i_uWf+NWnUqf3dEf|)KJ&3ss-l!e(Y>)=BGIFcArmYqARB*L+
zU*<*iuv$}Mr`T{dKgU<JU2Tjeu_As{%Z6^}bR;^Ddk%IO3h?3X#3jckemk8O8-sJ@
z4tlEKk+?-ab9j!pR-2v%c+dz&nAdQc8g299-dXyqqcu1nCMadS=%(-60A%4qc!rrU
z@+o`}UJ@6r<AV%b#oi2FaBuLKdE@M>hZwC7&XeK_)L{-`Y|9^l?JVYIuu*aAV$xbg
zU9#rk2jIdWLTqeH`w8_3)tts-WUE_KaM246Eb<6=sWYW=o0tYCS*Ke|;5T|8xMrw~
z<Z{4J0V~k>Fx&>=@e|rcX-p|Ul3IX2M40z;a0<{O4vc9Qd|9t}M8PxR^xF{K+xcT+
zEAH4N>;6hOT?u%%4&!XaQ*gn!G?o?l8s8DDhZ4pk$`x<M9!sFRg5>-8u=3f&v{fgZ
zi#9tjB$;K@5o5=lp+lDtSMW*L;l9}hl;{$F8RiIxIaM31kNomOXuy!iJZet;mo>PD
zpYSuppIk^>F9^S~4)ZO!qi5ojnzZ1Ay)W_*&64Jlnd~9_sy@2kaOgTbdGt2YrOCQ7
z=$p9Np5mkNt7a_Tny!d@pajtZYQh<d<f_Fb<AS47V4ApPR2;DC*=ZeMK#R&;m3`Vn
z^&nagU92_4k2wN#NB1TWQze~#Iaa6iP$T&qxG-=s@D-g4FZzdaiQLPq^q7^znygiR
zb++;Wcoo+bqr8gB3r}h{2ne2*+6)<zAHqici>};k`5Qe!xCN0!oUcJ*fGmwq5-IPc
z9-M?_{0IYS_HHE>okMdF;bIX9aO8O8B)-E22wFwoHkuS*;Al)?6<HC6MdM&n8-E2O
zRybi~p|`*#v^iS2@JQ=(G5ZW%NW*aYGZ1X!O)UH8j1A>ATg<ij0t<2vf5Lr7evIy2
zD38i<X?!ypp5rIiWE@LFG-!rH=32BXxFs@1KB<Y#<lJ7vw(y$vA`QUTi+!$R!)!8s
z=BKU8#G`+feQxW$)&pvv>$2kx4?L>3vR-Qfe<qfsiVkndy^pV8M(g+);I8q27Fs(}
z11%pF69_Q$$()*(ctKzMQG8183uB{NvVMg3L{Ikvy*6T`9!s-gWY@%%(N~<>8H4y@
zTyVrejb5m3XElY4G`X*`TW6}QA1;zBt*L}VF#&$~xy;K(i=MqO`y2F=;9Gf33_5;;
zt4{005ypsEgwWG3M%Q5k?<dzlGzf6g+>1a`z5_tmQGXVqC}2aNg%|>GB!{3ct&IX{
zY|MWX7CS&9Hk54Bf=v?E*v3N7_+gVFVSyy9b&N@TWW&kc*$p-X9)&lsBA#1}upm}F
zhc#rD1&G+w0gMGStIzrSMtiG|`8@Mm%W@a$C0JvvWMdif8@>`_v>({P0Es_sJm}xa
zf94ChB%ehif(vW1+2^4wuh@C|lRaRwiKEj^$7uk{7$-`=gL59SrsTqTB))P0GhEkd
zujVdmA=bhZVFx}#A95dkW_`3Zka-Q@ptc&Emp(Fk)p&y+I_r6~_5cKNr#`Y@5y^ZQ
zVt`3Y(f{HCyfEivzr>BbIJX*pUd6rBnkIhQH=^h{HZ(>y$zIRTaH~Dao$Pz#kEvZT
zXI1mYCPI3;ceW?U{a{J*(6u--S}Y6%i+PztkIs9;e&RkLMIDyf$eiIuq{E08uK0Cq
zO#fI5*t2TRq79gJ6O)j{FfMZ-5}R}glEh~B+uXAv;v}N6PYsot=qe$L{SkjVAjMYz
z-NdBgE3v4(VO7X0#R076^LcIxCLkWPukSls@P}I^U<%5~JT(pgK)Hx!VX>JA3)?gp
zI!yH-M)`)d5^sqGL#_A({}!9jYwjPqAR8HDyh47}m&TcUqnjxv8f%*;00{M4W8wWg
z6ybS-+UO|6qBtWNiJ0J*K8iFso-Wr?OL-^&f?+_X-BCNmLK!k31i@?^-ZGW=q#Oe(
z4vU(#(8%+(=9K*fTqDM+2hkeoD;o**0XmpVoJC7GCwNbX2OU!KZLN!;f%XfQA&)C&
z8m&)$bGVD$(6wp6q`PDlG>ll$#~Md7OK5-RGin+>lT?>jC67jc2F{)D5i{X5Y}3dn
z*p9xLaAABpF9h>;-*_}0R9s+@#;6+X`UmBbU&N}0=n1Yso~;m0+P5@NaRVMpZVuSN
zJ@@5r^bpwQ;%6kNn!qsJG_BMymMhuD;0$-u;F&qeI(p&(V6m5gWB=(Jn{cJ9ztG<d
zrcr2YD}D;OUJpJ91~!)J%S9M9?;^BZ2mToUrBB$0dGf)r<mA+7I=?Mmt8vHpkjQw3
z@lwMsc$3Cujcb0I=KvJ><%0ldlxSP6r^t=-3omI8Vq^c+2ZV#pNQc;>hONX!a+blJ
zHe;ZPZjuig6u1@aYu>~I$En)tcv9ZS&3eCTfV4C)F?HMXDfxj`R%?7<Jojv1LOqYA
zK$K`6Bgq$Z0BZ14XXYK2@Ofxrtj-xxaz<T|E<-otdA{Zl9InhWHu+ifRC9{h!j=bt
zg+0+AB%e7EPrze8*P?4htcWIhMm06La(_?jnX8xg!!wT>$r1Vt2n44=aK<=s?BJk#
zMn1c|A=*Yy5~uNNdx=iKM!Ozo9bp)HY-X|HmNBycGH?2$;KKb!d@T1&0eb2Oc%{W4
zqYQ=)HX%ZA*f#Ic8!hM~z+q2lqYe{8U}}*tz>vl)p_;oMYAAUXLs^%Y@wY9(xQ~hN
z&BV>Jo)MstBg?@Gyb)%0Vc)o4G@$kp`+U+5)GE><U`0m!D>poF_&)q0{x3M79EL~X
zLp*evn6a<88@lXxQ60{3ub5Jt!3TzRfx%aD^|XeyuDFxht9HgltaF@c06gh!9uMPq
zR$>Oc82G{rQ^OG)2;Q1K<c|im#2)p?lY$2|3@PLwIdfcR5ij(gs<GVL=o!nL>~uD|
z{D<A~fd>%e@8BP`F|>Ih9fJQdZ0Y%kN8&(Qp%BtfKRd!w7aPSwxv8+(G_A?!I0se3
zQNO4G)_%)d>Q0_FddYAoxAYmA8aWw<_&mTM&Kc+UoUhCq#ucH9j+7h1N41hyt4pf4
zl3md|aDr>NW-!>;Z@9N;m^cP+A_b2xdR*&ixBI_WNfBd_0clO5<%G;bw!1)#3^D=5
zJjl2xG@)oHu!JP#lshfoYaR@?JcHLfKrt?m2L_)4lwnkRLEm68&r%46&T6BF>JNdm
z1w*>*vCy@{wVW^!2hGFP?l6*aptxZz-|r4zSO{Rt5rY-6f#_x%1(Fc&%fPMqvdwOY
z;?Q%kS1{>v2kvKMpS{2=^aDeG{5(V893uzg&kZKIcKoIMjWr~5vdMWG+8A~V|4m$&
z3~PlCT_}^m7vKaOUKsQ7V$@Frd$BvK+ZXyQUy&nI9V4c>N5ujlVq=jy#I4nS9#GX*
zQr;dE;1w7Sy+GWQKObn+&I`D(PA&bAHUX#7k5L<Auf!kEhKB3#Yq`?AG0$qh=LOfs
zya)=Ql3E*<XyP8KOO87+6rAMq@EJn~Hc3C#a;#WkzlK~0Biw^HFlG+#i%xLXa=#LN
z&(yA=8_X28bYBK0G_HwY0*0nTbS5`+ACea=vpRvm3Q8l!3tViA)B>PpOntt*Ke^$1
zf{W4p(Wr#L^v5JE7Z+?WW^No+bcyU7&Y6dy|Fl~$i1i^L9)@EW^Wg(>!ua`q;9!}m
z;r+y$vEgAvTva=*w#NRNZ<{-XSGi7p2JTDGwUGy!Y-g<NG}!67`pyr7gCUKAk#)5&
zgD2xyo14avxi!s(;+IB@;g>^5W;1I~u>qr6+giLO#|9&ivT)Gq!iKQJR<SqMG<f9T
zLh;~X4>9hwEm&O;HyXNy=RQ`OvkQBXT(o6$8?>1KbhZia_Mp^pKD_FI0kSfPkn*+E
z9ThV11&1BHuhO|dO%zT7eiAI<j2xgw=!<5=k7fubA|v<LdT+3fyzmS#G>krJe#QNG
zP;-JDpsL6Q<s8q@-gvR%d)P~VWBa(g#76u;9pv)v0Ek+xadft4F0ug|6OWl5&i~e}
zi!*IyV=pyx6{fzAGtBryi8qOibRsF9YI1;q5LJ^DivXaF8|_x2^gf&wT7p1yMnN(*
zNR|3hpCC@fIx$@ejqCxM1-D*M+~hoXP+!3jN(8jVJORFeO~#5bqfbZzFwof9PxHPs
z9F(zQ74NB8j(wI-4U%niH?YAWllaM6iVs6UOc^&GT#^(g*lLZM4%p^r=>rEVH@V>=
zfoX>|?gI=l2IRZc)?B}db&ws^L*<3?#C{fR_q9QBX?(>8=9XM$iegXl4jl5a)V)#Y
z;|+4$Tp5v30Fn<6X|};JWG+T{m*WrYTM?sIe?4w^aZl}e=BQS1ydqx+UiIgorO*`q
zywGLhM=|L7$nc-#+SnMMf)2JhhgXYd#i)rVvqrai&`v*SvU}cZLwoD6f`_UOFT@rm
z4C|UT&|;u`DQCk(il1ZQ-j{LA^&hSME+33Jd#ttpWsC$-8UQwDYQiRtNKmARnZPX5
zC<G&Ev3o{{%jPu*w$3+;VlMx9jAU4fHO*!d>BxQ|MQ-7a8+PU|_az3SP!Zq61LK+h
zMh@bE+{3OdL9vVn5GG8DJ;6IeD!L)u`vzVx6)wlXamKV<#y&dj(O$$YWuDq>a>Bg$
zeS$jhfkv2IcJ^AGC(da-9SysJ#oX|~U=;(gLGNSGH<(}W02M4o3r7qbxv{_?<Ab3>
ztxI#%9)P|m9s{3PH=upk%eZQvVhsbF=9CL)#Lz<$%L78~qrSqP=ys+j2~MOd<~Y;k
zWKugFmO6x?UU)rl+S-FUiMWx!Aqw)vpGg6dXYes>mgfL1Y7=UMwBuM3sOQnAARll^
z&6Tv>@M402#Elrv9wc7CtSUZ%C(JvA!B}?Mp#6+1YctRQg$$o`pY{@ub6kh51}DUR
z4&NGU6N73ZZTg6N^mT`rMqCMy@v|nUh<llH9`v|LSSr;qXk;@BCPX@x;6b1??0KO%
zWihi(L7HEa=?E#*%)HsJ`5;dTL6A}eu(SY}4twoTH42t-UE+`TB1hQR5KhCP8xm>5
z$wnEl8n<Ewycb^jeYD>U_hEBHo@^+qt{d+qPEdj2y%{}6QLH+UFbBL{a426^I2IV-
zz*#KykqdzaHDT~c`APn2vof*6P~bjo;;@-;7fe$_#6@DPzR3QH<_TUgnT8jwGmT{h
zhqKpeT`0E+32+-c2nL#q>M3^<1SK!{Sce~PLyZ(Jh^mgO8b9)#6v=olx<l!7c1;(}
z<BfHzFs<TDF{*J_e={0|m@l9Y<#~V;q?NjeJfK$%#G0Pvh@bObbdu|k^P)%Y1x!~H
z<3JGd$vn|D<KEj6janM2^1yg?7W7=x9q=3bV{WQ8y}gg|MrRy2$ebh35MLlPwn+DL
z22-OiIvfYRHi1G&0_-njpgM|UP)`FuM9`7%urKWgKL~0AbUI)9#70GVwMDp$a|XPK
zMT)2Lko)MsRt8??4)G%i5+B;o7;rrv23*(a9Xja6h0zh`6krZ>*w3||d)vV((GUvV
zdUyeQRh3|yaOOdZJ|XY4vvSZ=Fnw-x+Csby+$k2+Y$T!50P=vQjV`!oV&=S38rt;d
zzSPix5;hYjRZlBpipWyIIhQM6xDMpi@X}~3hbGKX$f?*YI1FO&uwi5m+>AfO^PIL6
zA1=j?%X|i34ttE%zA9oo*MS-N;iJS%XGr=gygNNxrI!IQLD<+FYj7>qN!G<IzfH^~
zC)I6A6tD+8NP9yzq;G5O(!GKo9>RhQ;2;qo9U468^SIz8a}TlaYsd0k@rfsk{MlXj
zWt@%#7D>LKJklTTLBBAoXZ6wRh}dYfN<$z9001BWNkl<ZA^Sa+b#)e6T9MBxEiQ+~
zguit_QCr4A!HY2;fuIP%eh(51FH9_(h=XtI#StHi=+s{#8EZ$LWtD(vc^_~hTx#y6
zj3Tp65Q0StFhGW0+X)|I(YQFK(G<ciMxmk(Ef|E&K4!#+(AA<3|Cw7?2;G5rXwsx8
zC?;zBMs{OA<xsVVYYWb*O^5sQ_yCsG7voIa`Pfqieg>8CidJNJw%W-hIh-)&)wsey
ziG850&L>pEz)J?Wx!P^?QS(M^8|IZ*z<Tsw<5bngZAT8vkjB^%!A7Sv(ww$r*i}oA
zgZL%Q5OAu+#6aUI7>#vcYAiFH7shrPn=`S>fs6z}KQT5CIq6gDz0Dgj#aR%#%|s!z
zxn5_uC+ZGyZ*U^^SShS&k}6}966mpQ4j){@&GWh*?N_|}b-3Q(;WG9a?hpe?4f9pa
z5>8YjU2fE8s75Fr=08K0n3ETfRdUH+;9)OlA=acf#=)xJ&Q9JV5NQ2`*7+eHyyk`m
z4PDD-8^t(Q@eoNLmJzNJUlCJIGa)aDs&*Jicu#vuLr{Ej@Ot=-rj}Tw?Y=2ik}}Le
zat?YCOotH*zxRW=TZWxNC5(a-ZouScHXg)}hX-?n(~b{gF}91JoFS->vM#tVFv#|1
z_N=@>ZmTgadzh<{D>RjnQ??Rn>b2oG<)%5{;0oOuY^J<HoA@5rp^k-r9hRZ3RGWv6
znxWiWD>1#$uu|L2VGr{0@u%pliK*I&j0&!n+=K~<Kgb2lxvxTO5_*X-<7?tjUQutT
zvk^1ZSmaG%ku5sL7aqfR_BYhStfp8q;GDmJbv%}w0B(-49N2(NS`+=A;7*RYpVA}%
z$XFYJt;8lV(u~8eBc)!Wr<kLCs$cMdF_xS&27cb~l{k23gJLZ8Lwy6ENp6jn14r!h
z6bIzX^)z!R!`x~trM5I5v;+EVFTkDnZuanV#6>v+xi}v5v<Zsfl4eW>fkZGth*->F
z%jzp9MT+hMUwKu49Kom!su$HPzzxv--Xtzkl)U191!(cVN+<(o%qw68F`!)|cO(`P
zJJ@e>?}u8!#^SHcg>9-G?3(;dlrWraT<vRwydtj#`ws8Q5Aa%TLaY)y=PmdHSEjSL
z*C-wkD&OXaD`84HA^&-&c^;UG)&ix_BIk}xnE6#sKnISwF-DjO<HIp&+^B(W_{3VO
zFVP&@g`8$`uC^PkYW#BOEBRm)qMr_n?8~zn&!r{)rv6CV{Xt<SCa9kbZ%gZvAKyb<
zS=V6;Yi2H{h7-jB4zFB3*qcB*oUoxGsw2Xo??Yi`?oik9A>7Vz0{F4L+HZNkz8c{(
z7Z>szc{sjCy%>HhHepYhQ=AWqn0_LovCnd6-JfgP_k}kTt|Cs#iSlC(8M6pllso7e
zv77VWd_Vhd-J*jnJNW^+_-qk31GIoKbDw)h5lI08gaPM|j9I?*0Vv~r;L{a^gA0nI
z$+@f{kyPP8OwBV|FQSI7XQi+)4sarP&f4Y}tltysSy(v0H3x3U1MZ3wuEhgX2)Q=b
zVGR8C`pbEOYdh>`^qXxdk?wLuFN{6pzoHhb-f#7T{sugATFXC$&+hQ%gOBBB)??-s
zzcq+^BX^_EXqyIe1_QZ3{iB|Nd-bV@STn$(;7J2<W=+hVCJ)iiz~O>iiLUAZZMjj<
zS7{-60ge*<=D<dpE`1ksB5tj&H9$lMPyGVf?DyPT4)Z4V5-N%@ZOdBJUi#ITQU|G&
zCI{h)?4kW}*i3B4BE(8xXZsHYH_!jDkG){H>vF*Pf!ZosV59+W(N=%8vDZVm!7}u1
z^>g+KiX&cYu7oeoQG$SaIG+)^9LZ0{kPT!NCZ%6U?VvE{apSmP+xTbnP;e^}sNW<8
z0$X010}#aLH4Gm@>_FnAjrS?o5NaxWfH4*%s!&(B*#vZLjLUmS3KX#o9Okhsf@lgU
z;$U%&Tr4-z;emY;+B|S|9r!E!j=UOdYP{@Q@`8N@8_p3!>98ALG>~Q$K5>wCG$!Ny
z5O_)j^-rl*yYNBuJ8}~4K{p(OYF{;@{`o+x8l}r>jH2107CI=P-{w#SFNVFK<ioL`
zE_-eCIsk>yn&QjVR{O<bnSSA;94ruFhx=WQDV7U->1{b8JEEQ020y|@ek9hhzKw~S
zthGKm{muAL+YuY#o7yS(jaZ#>3S1SJGE~RsazFq`aS)(_C?EP#Q1V5s=RsKWhh$dd
z%XlrPBVj~(pj^`|$JigR;h2m%j`$OQ;uPZ#2g7`$sX0BUj_YhfZXp(4H(OiU&l<hx
z$*#l;xsvke74#DyvFB&<Xgm9jIjkX-_jLi9B)ot()b!HUq?=cP*9t*iBUmD_AOy=D
z4`U3X2!Rea*d)wgc_lNy$x<(C8gv+RSZE^w5yN0B^Fd->P;(b?kDO+5N$e9qZ9vRl
zje!+8|9n^lv6W)TFeE17KYt5@_tG8<T5^#%nVwmUo%i?nm&1`Z?1*SJmr~_H5++&J
zo2yNL2xCP2D~?Dd@Kd$gXsBR;zL)WnO~SnDuF0vv3f<tdK|=u6VlaC@YFzVPLL~hN
zd<s6|!wG{#PY(z*5l0I25e6?UQZ4d($k45crNMXDX!~1mM{t`EL#O<blkyx|0TD`V
z@@HBb+6$M0OP^=MC-Q=^MU4Pwjt419*U>NasU{BG16N{)JzKR^`d7t-p@+P+2Z#pJ
zm+{Uyy`T?@!8nh|CsOTkDVQ{TVZ2=q8BFf4SW{h)j;W3mYeKix7Mw~9HKKUexN<)q
z+yE)%Q1FfY)NeE1&@EzLa|z6*v3K^c0IiNCQyNJE;#L6c*D{D0v?#VhtmJe>6Y=J|
zvVWO-64@6-+Gzz-ghzRUKcl6diF2-P9y-iS?rZEUvV5I6Xc(?5_qt*SjdU1vUl@o1
z;6R^qLm}o9W5FZ+dRZ$7)n-$M>pah8EpY;IQz1vzQBy^Y#NmvFX80*X1ot=jCwCM<
zY1)+FP$Z~})C@lApwHY3E>(L%H`M~ih4C7GhMMlQh-*p5IGh{(qB>^ufmxs~V489q
zqbn3m0uYn~)}jE{=$a^O^g|dBthk0SscWbQB}Qeo5dV}Q<25t1u#aUZ@LcK!hjY&v
zuh)Apn9BO@bL33A?&l6M2K&<vVVz1Ec4F274#PM4&o!1-mQ0DB%RytTSzZYz#MaMV
z(m3TwoS=?7e(ELtrQpxHN?$AOl7bkMuwD2Y>7<0S9uf2EyUcLJKQl3~;~mb>STmqz
z2mBu<w}2pC^UaM&g8kU3mW_%Bkkk7CQW^G56B-SK5ifv}=)1-ZnQF{D<RZpMR>ZZ$
zfy_8IHo~V4o>?Jwyx9D`xo03Cqp*y4nU4c?0{Mt&Ay@sfU~nH8?HffIwsUbYA13d^
z3UVx0bZ6ib4`Mhlw1E>YbI+D>Y7>ni0*!&b!6F9mOz<PD>o-CV8xUk196-Q~$B0U>
zp+P;fkGG8=xb{cfbPa(toQDO}8e&QIiZ8Suv6eM4%$V2Qmb`#}u&J7*Y;jC7Zjf_#
zkZR*x;UDoa_z8P0^n@CcxZ=KGm4mjy7_lCafDX7mOYC5;&(X<ba*BvIdC&zD*=wDO
zt#}39XBfTC0N<DyvX=So`-|kwUmC_=phY}1CEf`CfVSu~IiOiED4@71UIQD@I;vmn
zvEQUZ`jBdVJZta<)<)w25=p4CH!PabBJ!iXRka7}#Xj$&oC8<X)eL@=Q*w~~kadYM
zjyF?jzTLnB@=;i{uZpx>&{*ny{Os{Z4qhqg)`vw9CAI=Uh;OBE5=GPXNqQ+T0a}ZA
z?8L*wuuV;D?ixcH#sW3UA}ruen;SNYA*iusWXJZvRziVV$+dlB=hifX9qS}{K-5NV
zDHv&9PzBL+GcPdN;2p$iLv-j$fFbI_X!XD=qwHc$onY*!1;Zy@ymBvx4Aiit=W<ZZ
zI2+voD<C)h;*<Dt9nb}Fm6)4*WE=I3n8N;m5p*G(vk&IEK4%TufU7y!;i1U8eVx`4
zlqIAdHfFKOg91hb_+}Ihj+VT2S_A<5gV0#U`kjrJ2&ov%^nc(+pL5@6wWRfFxjw>R
zRl^rv)->VGD$$ukTt}Qdq`9W)y{^l=a0X+ps5R=_Gc$l<WF8!!m0AOBw>@IGL`9Yu
zyx%)wne9EOk@^Zc1nM|HoWt;p@oxQFyC!edINL9L74vG7`2g+tygjf9?XcLu{~x^&
zQ`SwGprFt)MA8ui<~#EAJ^`10@udME5Qi3|02YCU2aXR8qj0;DPY-p_4ZA8X$3Y|_
z#*8G#Z0e8?hY53{D~`k#xuv*e@7NQXP;LrO=>`bNdTNV4*K~(a<+tRL0C(C8K018{
z<itm9rnUKkt)@WpZNq^MS9sq&=lh8?QW5yZtLmJ2DL4>6fJHmJ^gz(WimbzDI+(=v
z#I_!6a(#_^;6A@U?<+UVi|V>G^;N^i<4^KTS|ELRhjC~S#=7+1yfq&S<brXi4p94O
z3;9AA#%It%r%id^9u8%Oz@H``<+6m)>(Oz3CHA<c$s4*<<_rY4vC%*u>t^Z!^MKsD
z{wCNCyPmbu%v=~|5r6m?D^gTVt<A*T<tOWF4;DUvGcJCN3+#<lp!P`D5_hTJWjxRu
zGI#Uh&rAFr4vdfR7CpDu%LT95J!uZ=prjx+%-cBlU&gR8YX)XE=yFc52c~OwoX`jq
z?MKwPf^62$9ncUU4_=K08vt&@AIqF|V1ciiV|?aAQLcwM4%*^x2%U&6?50iNNU?Wx
zzba1k1#xMU>>4*>(-vfX9dV-=kRvM6*a|UUc<6>r^c@kvU@e%EW<Z~+^*P)v0dDxg
zpBy)7Q1%qxgQW2=IcW5=5--B48P=K~+qb|o@n;)ccZ~Oi@W=hNX@Tx4&Z>pkD}Ur#
z87Re|w^(GOC)>Gvbu7$fc_xb_U&1-Gmsw>1oFjfFu@&BDa7CAn-1oySscH@xy&jsF
z2s5gKgb4TbIkbE@#z>F{T!6XwKz-!1f=PU!-iEf>xygOI&^<l$DE_=Qb4FW<nHBwZ
z2SlzR^ETERZ@(rL46(?;ee7*@wzU`sAaf$xnxDNnuRHAW%mU0OsHV@Fp1L(_<vzv%
z`K3FaH+Ao9tTxR(q!V=k74-vqh=cL07KUq*a8MX)^OQW?Nt__UGGq{D6jzvn#!Oo8
z#FwD9hXJv#IcelrND&iYUAREu&lD0nsr$P|x~fpx_cPaQe1VxfUp~{Ogc^zcQfwv)
zL7Ot9Ise&%hs4k8!V7ikaZmLhA$9n0TwUP;PU8`CMT!ACq8&p-xano|s6oL|IZHl)
z*Wi{=Dt6rE0ECTom9_-e0E8QCwb|RtxGT=pr&<aP&Ds~f-KECmUbUl#FZ9g0rpA(b
z=BgeNmXXM_)O5ptydT>1c-3CJB2PGcHF+c&ORI<iXbrUl2BNNKaYN2B4~`#DU)F;5
zQLJ<LEd%%~IxYh|gTW=rRoACnT(Zt8UofM3Y+5a&kM5vF*rs+!queHHP0V5h5-PEw
z(W2LkfN}>txA`+SGkLVU%1q~2WeC?ZQ>Ks+qJo<EvXj?5itWIVZ4I4GWDtUBz-a+2
zjRnXp0nXZ&`vVXyn5NJGWt<8#prnv<KvXb^z(h|5pazQxa@;7&yaBWfGjoj^_Lat7
z^04@naIh`LWBCp{9LLvi6@;<S8nHqcCO?_ik^Rg-9HRj78=S>!+*kZ932UCgpX7&9
z<ot3V%=v7wfK(H)b||oz6L&Ba-wKzp&3;+PO_>_-HCOLC@CXKtjgw>Cna^2%$PU;J
zyGz|+Lj%<?7Yz>RgPU|S_%ayfMeo%-O3#8d=H%By(=!7yY=NGDhBk&({*jl#1rF1~
zOa8>q5NpO~BOA|M4pt)#=po=2PhD*-wX?ujO%O%t6+NE`qv{>4b~-Bc+0|fDK<$-T
zXb%PCGqBoPtOvq*{a5{XI<SOw_;LJ0SSO-zPqf|T213gmVq35G(Vs{=v==cl=nHTO
zp8SQ=t8dUC*;B2=Y$aWGYYm>y`o$_k%;N4$tcYL5MEsfg1fz~bL&*VQ>@W=tz|lc3
zWWAS(lK4GqnI>+NP|8B?2T;RjGr%y9bkcm|Qi5tu8k5@BCcL8g6kAAIY8i55TkZSW
zoQPNv5~z+y0&!~mz+#00KnDDxL5lCDFd+<yPxMxDA$&wjV8ZaV^4nk<3sn=TBl43x
zV%{JU(&TI{#uJN`Vc*qG;i~v5c&HA>Kt*3-v$3aIiZ_R@-sOwM!WWB$Efx!(7L!eD
z8@Bhd*V%!?PsjRg(`5TkKAWu-utQGz23p)wOt|OSM~>K$<7XY}!NN}&+%tY+h0#jn
z7?O~LQZHK;%+DTq#2!BWj2B<n(;x>;Sh;Nmdik<DVq!Qe-jq+XhDM?Ify0DBFjb2>
zOB!t_hCRow*st<A?okRFPQ_Pa8gW{~{Z{^6jY{TVd0yKoI{X5pC@Llq1N5RuIE7d=
z)qi=a@$sG}c6c^o;aH8{v)|;@i=QSw(RX|~4z7FcRer$EjFyudh)ZmN?|{7Ymx7tj
zM-TqyaHSZQ_NEMo@?;=GMBE@DQ)pz69FQ`SByBZ`Q6m@v4wLknhlTtQanB!E3sH3P
zmE0Qf0oYFampYVUjzz--WkkNX85{2ByhF5bFphN~r10zbmISE7oAb;_!<Y)u$RCLd
z^O7MNj|&IPA7L<i@TM40GX?=kk*}~90V)@;CkhI>OtF*LduNk07~Dksg%{yU{8>h?
z9EqNVi$?Eo4+$#!ww~t_kQ~PVzReF^wacgVOYGpmP2aq4(>6B``hnYTv&(m``C{7e
zgJ-uEUvu?UcI(sUNlrA-)V51}M$v#B#{G^x8@7GlrqMpkwylc}uhiOrjO+m>jol@d
zTOZ%OXPa-|cOT<dIf~-am_*Da1{uP_SCgCM7&=X|1v`Xd=sgl4`}IKGYM0W^Fsp{g
zYQk&;6WdC>l_R!C*o}K^i{_PRhOtmg69>)-dj#G?u1s@ic#Q+7n@b<5qa(C}`5S4e
z#H3s_xFz$-zdl7hS=ulTR!#@}#d8K@zGuRRQ5@Zs_|5T=u^^vD5vz?ztjs}LQ{rK~
z+Vj=&b;3l+IUH6Z5dbT{xr~7&B#wg!0%rxJw1)`6eIk4KWf|L0p5;D)zp*I-Afc`j
zZTq|yqxy>o&_?)fg_Q>rD$+3ClP*JSyr$?F3n`a~4Xe8oK7Ol^c*4FO01~?4L&OfL
zwVD)Gu{g%i>3Bk0$P*BQ{>c{|>^l8ml>}zsBc0e-v$}BydSy*`(pr<}gin(nfXt0^
zX4tk3xL>m>ufXNOt9IJj#^s@-cy{ivPm9U+-0(2tCt9kFt=1deQ_dlOcegutZ`h9I
zp~`rVU>pyO?%CO4HJVezS-6H+^jUuPJNImhm=eo*{E6!sttQrF%jec)>eUVeOjvgq
zwXryOZg|S4xqxzwbz}Z`&YHfjNWFs&*lxxGYdQb?OuAG&X6h+IH0$kWDAw3mi7idN
zh>cP<@Y3|~uHRccne|PnAfBq*)M@SQavz^VpNLokWnItnqv_#3_zIt1_~TkFK9+Zx
zC&?9N2y6QV^?@=^&=<U)nN5J5Z~d)X1zj8a00ABIz>Ub^Tafi@M{pR(SPud7piiQj
zVTAqwXNVQ9+&A#b+_KIyYNU1CXHrmy(geU3=Z|Z~e$5Mp1;pxr0W|~>PhciEM_w$B
z*`^-cVtyfWga&d$Esf8;7*W_o6B>8o1*8<aLwBm-8T%4%i$Q;Z|Ekppaz);mzwC+F
zsOfrn4*5x3#YXaAPBq0FFA!%Y-3_(5gCb#I?uV}4>2c5-nqEHKy}q#Rmv5Sz`SxkD
zD^8vbd@fmA_|=cxZCCEy>C<B2>)Uqt{%dcx^T4<Jb9UPsuJm0y)@;YFy>{)bclm)m
z8@Bt#M_`a7H`ni2^TlGaX_{<WY}>m3+>>_GwO9D=UE6(HU$^bMF7fN${vhSEdu{SJ
zKKZQOdhLGSzP?!6JMXu>@k-mdW6gK$+H2R`a+e?2v(5J0_;5;PiTi`^yv{D&yVKU!
z)_v#R%k8#%o(#UO-?3)XwD4(~e44gmdgjOhf8C|KePeCiHn#1seOKM!Po7U1f)<t`
z;t-E<Big9D+(IT1s}sH<0e;@;CARU9)iv{aV<+L-LR52gS?f4EZR!+sS+q;fJaEx9
zgsINH*pf8@z7WI)JMvY0)4_6v3u7XAuR|<)zzNP+Ut1U?j`P?<+=vC{ptfO6^r}Wj
z1z(7@9Mm|Eie;C(iyg*&mb0uP(NNJ1`xL?}H<6o{{2Dy+kLYC@zQrHph{EcVPH+$)
zY&2uvj5rDyGvXHkgl_`b64E)FD8bb}Lm30;eorTsB&I){&Yr}ZivlJQ&BP!)<>%ya
z08}{<;iMo#DrqZY;o(A@fi19XXh#nE36K;;&9~8Bhe<s&!N8|cC_FKLl>bmi;jxQ_
z0Kvh@IH6|JqkQ3EtRng{tn~BPGgKXaW^%KT2{#%{5p@FyEPV}|$nW8+ciP&v%X7zg
zJ^!Fh)53PY@vynOZJ#F3e@4%3@7luFx2^dV*WYG`PoA{9Z@<o`X|jE{pNLrAb>&W*
zHZJjZ-g%F0-f_V8?O3z*#lm;rcm(3jNY9@;?+5m5`1VWR?aw`T-pt%@-MiuI8~gm0
zcl^E|+PuSWy6y^_7L(oj>E|NXJ!_NgxpKE%cGV4j=iT?2nfZY$clorj*WP)@-L`qh
zyX^8EYrZ}$e9w(X2&Y3g?eoR7Vb|Suzz-j~%YW^fOMO}_?4~2nxV!sv&z-jeyEkmd
zW$*Uq&Oc{<?g`(sw(#9oUgrnyKInJ8^H$rvKH1JI?@Davb)Fg$Dav}j-{=@rquPcw
z;=8R~sBzHrszV>z4o!(JS%etNvXxL7mO2cZ6tDLD`JTR%c%Osjm-X&qk6(4&3OqAU
z#2^b0*E{Ex=1ZJQBP$L+-M#dXhT*y8s>prxFy>*!<!u}pi>F>d9|;D0Y&r9BhROVS
z9ma@r4nQdS#btWf;yE*5>V5Jd(0rUxXbr?L#e>A2n=|5;&&U}%%z|1zYX&TUPr;47
zc&NlC#BnVx3s@9m0pCVQN`itfgAFPOC065LTyRwpQf6klFWE5GF9??#6xqiEh)TSR
z0m_^(mjX}uD?h9(!IcYewwY@~O@q9KeRw&bso0w$R^6(`GZo1rC0+E9+Gqcc@g^a{
z2iS3056?@CSX-8j5=M8yIg-)AS}RTW&fCPMGydvuUuxyhRl9t#w%6|4+_Zz6n|^Tf
zpx^nf+wF=y8@5<%*j-PbcXRjc)55PfaW-~evNqYa-8VS;yLrdD?YLrdEAi(xZCWh+
zjYrN#-8}d7+ifvTzUPKKY=wT8+~2W#n{U5-Gf=*E|9-#j!Ka~)%y&!+-+$;##Ik#B
zVH-QIOODUqXN$$c-|)!U$o1Tr+kCN@wtkx!csy;}riJf&#|et(hTYqIW7jQ#@twOj
zY{%tWf9v+Sr*F1tn(U5e&c&W5-f@#(cf$e3c)nhW7OAdPr&^<dx6`W*Z^Si*Jm^dh
z5KYXUwpeTB7Y%knTVRhh$no27K(?EMCqIW8qeDQ!BqB^4hgaztY#*`6J^-Bn<4O*Z
zqsDe-+|(wltp|)o6IQWHitrKp)b*&4j>l|T$y*#4D382nU2KV9%^w06Y-`MoHZw)4
zAIz?`E9;5x#H`V&Y9fhA?WQ^`{u5|AKy}FA8i+PTkpl+-17V{837{%E0+_%?;s!1a
zi26>7Sl)O3lf*7QQuDmXG5=U9IAngEpCo*Sr)9r@uuNhiyq!fvcvgIrXTmDAOaq`F
z@Emi-#Dd0y<!FQ%2icwDti8_z0`L&K(Hz(yd^EPBYV$05$^{y?6&op|5>HCBjiC(d
z6}bmD!=6##oPVu-h?xdp8f)}JF@QE6ylR(Ci^;bB&D+Tq)8vcAy6@V(&u_culL5ny
z#pL@>o((&D*C*e5>+#6P-R)hwx7m*Uo96EJ^x-RPu~_(X633pkh3~%c5zLtIyK~RB
zI8-HG=4R*oi6e*oowr_Z)3mVthtI^`-D{KWz3D{6cIME2pQeSMM^4>s&-#K6ndhIl
z&KHZxHa~sV&YwHy&z(PS=gyz=Be(4JX?<tpcIWPGw&U{6t$5C#@EwbVZ`=Dif7^jg
zf8y-<)RGSU#2NLOR1q&myo|_&-=b~4^xjhQBSPw7u6B*S6o}TdpLBk6f5e>#fX=ZF
znVX2G=0)i7A&_ifiI9HK?l@pTL)BUdj55&S%kw?pmU|d8wTFl7Jcz?yz^BBIm);NQ
z^)=5p4jd4B_M2C8k9{XZ0oT9_@a8_%<>q*=%^MiboG+B?%+=Vh`a|2M+(fQ=cF4Bg
z$71F_!4~1oVSA`70SnQXpq_8N6Ymfo3Z(^l22dJ|821W52`t<XdDd7UhsNf($5_p;
zSJ5nU!9#$=??@o5Yj7FMsYRO#eZW@^8xSM9N4xP{;!Cgjljlt4S>tZ;DY=m@Gl(98
zF}#QpTH9mO9#B#%tP$J-oFKM3fZLp5EhLE?f*-?SQ4WOUmoTb%0flMJ#Af<{=8}8T
z64+&%>5FY1zIvCfZ~ZfR`3zSq?QUNz?1~d-!^S1+3)^@1ljQTj?hV_qf9sI;#DU9v
zv9`0|{JM=b-*dwe$v=a=bI&&0e)(qPdgkyueBUK|Y;7^w_C0&;%4^=}8;gZqaX5d=
zw`YB_%kO$R5PtH&Wi}3KnA4Tp)_wO4N1}SqKC<7Y#nwN6x0ohdEViy`vGB#T2+Z!-
ziYaWJedJEN>WVadWmH?;^EFN>4lS-N)>7OxNU@@YA}z%!PH_(em*VbTpg0sS5?o4g
zcX#)MgyhZhTkrqFe91cNo}7F4?AhnunK`OJ-6@{1|H}n%go0EWV81y}yF;KW^3y4F
zR$71(Hml>B`?!j|6q?!f$vR!BC~DJ=_#lVvmv_NmobJX4B$6v<@fnHIqndFeN_gnH
zLdoa<k(KR}teMkNZ0nj6ELIZEdY!%m_2IeTP|1?~3vo7j4Bo^Gny!iw!&2V*f@xIU
z@2w{y08zB@w#M=MM=!*C8}ui6>nO;vCTNCl=$K(*hZ3u*Kv?Nk-Oc|9$0c9fqI57~
zr(SGtHZTu2-59GO9rqV=T4ZU|n5%vy`vEb7+tt`=ki1HQhk>N4r-F+84C_I|Pga2%
zzauvyA0|F5?0#!F$@y=CaIK-vl4>{?nl$d#dr|(5WGS-sdEssn;6BZdB_Dur`m-1E
zZ-Gn!cLjYB%&`NaxDl9~TjCHoNkO6+*bcQIzN4j`p+<T)a66O`oi;nHt%~~Y<>xdu
z0{h)=ripfI?6MdM`<uzRcA%q0{x#OZd?)=Vh}xpxb7Z;qVeRf`@fqfhh_4mmXv|-j
zi_K4?vCYr_x0HzFtF~|dyiV8mubf)*Iw$5SlF!-^XZM#g2be=^C-^1^MJK4w?@{7?
zCrDmbynlSgLzUx`VLxV01AA?=ZGBxsl0c8szSrr}zC;>Gf?7@p@DRh;b>fMVekj&&
zp2_EeMJ-%K-4Q|4H}u{t7+`8!YhnM?+40-aU?BRL_qX#<seGphfTQNRv)uEw0Y77B
ztCWtQml+Zf!>cdOYa6RP9vo{%ced5f8&1uL`OS?H_f?ksYoi~z+d<NkbT&Z`2$669
z=pQ*+GgePr2Ulaacg55fn-`to*z%#oP59z(46NaceP%>*IqR*|t$}ARsbo6NSrK1E
z{&-?Zjfwr(h*8F{`}CvYrIak&D>NFz-u?H9zx*&dfoM?k+q(p7+h#{;N+y{<4JXE!
zU@KkG)oAh%G1rK(S26>JG)A%Xm?Stjf&M#xpGc#j$5i`{&fh14x6p2oCs`|H4>a^a
zzL@rl@-(qMd`viWCNkru0EKC@#r`P~^ST+q-#*e12InY9x0F039c9a465ZVW)_)tY
zW`9FY0(rBi(+mm<WK3SR)05&wa_B*j)QSV_rC~(l&BVIdj3D&xYGR}<-|x}WL@oKE
z?TU1qda}&|<;V3-Giz((dEU9|(P2_slamv<mv;lZmo4A@A0B%j=q1Ui^8tPlnlrl#
zQgAh<%hfWcmVw60H4#ZVqBA%t>h*|;+r~`j1--t>_jF?)rCraVb4O_e_$jaJz;30}
zx;DS%#WA$ZscxXLu6-iU+6XV=I-BZ~H-TgIK#$ShPgf0taT_YA9IT$f3J*yU;c118
zUc$1sm7SXo^D}=;u;!K$JF!3`zE|QciAXd$yMz+(^=1Y|{P-7A{oW*)h3eoNw}lao
zqJOLTi|3<#zN0sGPmT5+H@J(Xu!{EZWPZ*Yr8P`ZOw#g#mws8&bQ$wGd}H%oA?lAk
zc?u`pRwC>q@o(tIv6OLS1!H+5%&^c%E4%0S$@Hvf6tO~MpA&IhiRI8f;^N?v90qKD
z@aNmcQdP^|t=RZl67+@$$^fUKWu?}sA1Anc;qCfsqr=L3dK9+Ja3QwPTfRB$w-eA~
z)h|kEXxjyOCtBruw(SHKs+nXsh`3XNy>fCW<!E(qd**RLo2@$#Qcy)jE=+~CpJy;&
z2A+v6%g)Jd6Ta$R%-oRIKf7&;_5Wn?&88i8KhRrifLLJuxB3tl!f+~4XWi#{x)Iaa
za=LPEzruaDve9`IaW1_H^E#_Dvd0HoLR-Gy73`dQPM`v*<3Vh|b~5`JT;Sp!MZ2R;
ztz*RbqGk~n;+y)X>veYnmVQnhD|trd?beQFFkyf?aLpG=WVqp(xq&!W2LK<?SHNx&
z7hm$>Nwo1lt=$05bKHh%5~uqu;86zPB||&(4<||hdiHHe&aQV__X&Hh+py<}o*(3Q
z_M!N~$aO9@U}LM#^Wg&ASKH>0UF`_&#r1SHwIJMX$8nM>FeRpmR)?Iqe~5TzZ-K{k
z$ZWG29H1>fkbgT(YBG=e!t&8zeJ4|_x%uYR5NO4M{PjP9(`_kQQFEp^QF0>F1p>^S
z!uN{@I3HNPC)4yhZD(yp(7Shbh@T1GM+)SM&|ww}>+Puxtth(K0MucR#yW&NjpIzq
z++}u*yd+G|K>yl@@?iy4_<jO6LAQfn1iWtW7%_I$<g8>(l|7vKw@^JDl<T5Que@Rv
zo}6=*_7z88$L@uv4%i<9)(ySO(X27!!(u19(FN0?R2@Ep(#%5NtBCyOa3t@ah4;s*
zQ(530(VCUjlYD2%4T?%cUJCRzlr2Q&5wn`(yT}r35gjFcNV$GylH?U(J9D}Zr4_Z&
z>5)&j5%rMuNP3tBZ3Av?Z>T~{I)=u~5xu{LtgHPyPzvq@X^c&j@(F)u?LTmc`UwAC
zX_toXJxHotf$bl{&sw*oBcH0C?weqaux5{qwgYYOU6<wxB31}|>d0=j<8wWJ;_z_q
zVYt#fIyM%+8c=+(-qyFU&;nf_y@y>e1}tB6S>-z!8a`B}fw@*2q?fuvtbdh`jXye>
zv~M&!RY7Z{(jU2SCm{d3Wb;lOUv@kAWZ(WYNlL=O-+#>OylwS+Tgdhe`?`PU#Zs4*
zJ#G8y8hkfsqj}Wx;&<#_n3ID;%V-TSgg#)OZY#}&<sPSl*LvjTJbRT#<B}^wBVm+T
zY;WFV<)An%<=Nh&GFLJ2arK;%z0<DbtMEb$A=6z<YbpzM1fKjr(dOsqmdzqdcd;Uu
zBYRWa`WK9YHMiR|^cN9vgDb$|tDVP2<|B*zx0HFr(ZXAK=eP_4e-29sOhRh=2}DKw
zO}v}9t%gaPc#~TgYy{G({cdp2ciB)n9;5Cx#%~vDMzTuFc^MMAcPVT#%0PQkhG*?U
ztT?t6G?YO!5>%G2^rJhgQuDFN@uQg1)YkRlKHDeY_fz2s^(Q08@0kKh@nYB%JNBj(
zhyPi`mXO|5Wb`=&rgcfsE;=(SU1jqGvJMVoR%}r|AA5(9GnQ?kh8zndU1J4Muvv0o
ziiBpmt_USH@(-~t|D{uDw*_BD*B(|6D4v?;ls`Y+DgPKLa+VE)vY$CR`DHT#;*G~4
zgXUWc3;<OZnOxnD7q54vb7^|~5Xqh^E9?90;}&uG&9NxZNL{@<kLgon;>e1mVs2^^
ziu2q~PF~xMI>9*Q1vLrFJp5BN!K@n>ZSD;+C3qmW9WXU$_{J1lI*_h<?pSjkOJA%&
zl3X>l^u`{?K<uW1=MS+lM8u{jGpK$uo1_%bF99+f{4*r4JXU!fJ@H$KpF#mdXVDYr
zkPWHm6nXue;L_R}v?tIjbjejeh<r<#Nym+`7Pn$hoqM15^>8V;$&hdFU_TFZA}sUw
zJKK1Mn+!Ro;5x4C9urNz5uSb0uBau~3UOd^&M`o~-%N3Jr`ta3c(tG(?(ms+y6(DH
za?r04|Ds{WVC^;Ewcq_{enhs5DA~JQ;{lEBXu9%?I<dO*M)?dT#y%vKpj$@B*sDGt
zN3(Y&n<e!sH*$Mbvvqk|e|@)k)nJi95mhnQ6|(iXetgE|gw+b&0LABwm(B%R1iN7K
zT#O885~+`uaPw`5<b(ac3Fsb5^)Bd&EET@id}P;Ts5h)#a-3OaMX0ffCn*DIVvo|f
zw=>MCAEggq&DAU8mEW)Xl=5!b;~B61H}cU~;>7XP2JKkk`ouk{N;W4jQT1Pem$t<$
z_}(9%IIOl8b32W>;d=smOjr|z3ntF5y+Z%p#N+oavhQ?MY_m75&W~PRDL+#H0W|^a
zkt(to(USd&`Uiy`Rd~XH1yzp$NMS>!#c+ZSdsEqax+6vyMSrr33}~b^(y1=H*UsEB
zPYx{bg!K{cJ54*#EN>kg;fJFi@n-zx=X7s0jp>px1xy8r;G<m{mL#IF8q%6V%$M)Q
z)pA8bSn)~7*o$6p;LE2DPlg2c_VU!XQ0}u9@kcUa1&Wy>+{~k$OI$wwr4MpbpcsDM
z<)hgqM=OYhJ8s5)HCWCUy#^o12#Rd#PVA{+_C6i;yJc`!(hsrT6!^C<XQw-&KC@VF
zrq~f1aIoE@-??CGT}o{(jgID89zy#db0)NydWU(lXjaa*0O=;;SR9ew=LItgz71LV
zH<8=6QoGi&AUwa|Z!yH(?vA8Ay)2thS{?b;gX)8Hs`9Ytg;#c?x#75Qx?;aFKktYd
z1xAgM^e-#jCdY_qZE%djn=o(=aYd(9Y3X5Lr1@<QCNli%A3j6S_a{3u>M#lxP}%;{
zqwbY-|IaCH^7zLZzbsKJVpf5ZD16Jj%OQU^x-F?Gl?c)gRb!l#-F1ftlmooiGFiUB
z?SjR@;m)s6s?HL+cM)-)m7>n-GDB-8C!I%t_k4!p)F){812p6Ojs)(DjBQq%*j~Gl
z+X-KXp59>E6I5{Q|48g9v>xjYwN}xndTxlu%Q0-Gc~CZJ#T%<g-X|IwL;bP1U?)%b
z16mq(TAO7`T00g<x}&?Exhd&{2~Z)am9=?hsYd+FG~%Do*PG30I6C`}kb%t3))7#g
z#rc;ab<)nuhU4c_Y>Xtuhi{OR>2&pY_%!*vk-wxxUyapDEBKEKPk(06;waitGj0uy
zZj!hRiJ1;odod7o9W2TrT&&JY!GO~T(CzyQs=Rmiuc?wE_o$Sd>#*esa5-}z3D^XL
zn?%vW$cSWz$<92M`G<afko^1cctQYo=4s6@AyJvME&(0zPaj@rIPR=-Lp{EKY~YcD
zPH{SoYyNLpd6jAEhjoL7#}C3!dFf&-ZJt!0=nJ9fns?<MpZ4u-JUjM%q1sbRg`H-c
zmCF%?y}Xhyb>7w~W@m&<aXzGHnT)7k_0r(R(VUKTza5a`{d!&dM0l_p>9K4_l@@m;
z74>>%Ppq=XOgly4WyK=B3a&C)$j9SM7U>i7SDU*H*aj+0P0#<bqq_&}r*Oto2%ZIc
zJ>qYFmI(*CL$Pdrytzl~{yv{JML5{-g1>^OeDmwubIbf2HQB<zFwNTK=M*})qg-ui
z{aLZtjX$$K0)j>CT;M^oyHa-9(*`4NY{>g>FlyU2_?hlk1D`MK&RBw=Y2!W<CXr!1
z>XX4D_jMaA(%zFFfrkxV4^wgGx+l-;kEJ6Rl~znc%}<>BpQr@xp6vx`TZ~a`?%xLO
zP+pgy=S-D{PgOw7YX(ok8iQ{*X3Ld@{piexgtW>=kagBc)|8{z+a-~T(+VpI$s@}Z
zA=<UeKQBKozwp<7w%IrQ!ln3R8rLGF)$G1`Rx4?Muhf66C7W6(q8Hm%UJzf)mixUy
zAC&*T0x2!Lc_NqoUJ>GT^UNc+<3M~n*Js?{a2UcO8!f{emD0(=j<Go$qh7ibxB4t`
zBSA~C;>|xhTn0<v?Z<f>!7$!e%p<1Sf5JZ!x%?6~C3h?Gdv#cnvLiHYn;lB{l0`$#
z$tyvz04*b!>r?%dNcqcPryG2<A>0>yo45$$?o>rm_o6IX)`2&xo3a?R;N5?b3Pi6x
zQ?}}ooOhh@v+qdIE;0>=lZA3HjKuz3`)|+IUch}jtxa*yFw=fezDMgH)gqNTk}Z1N
z%}~S~@}@DWH&>>mrjh2%%4pvg4HT7Qq_<AgbHau0XPhuZHSNA_eIGE!%=d`5(j2ET
zm<JaQp{q9v9v8PUZ$rc71Pi`|Q5)`pfg%j%<CRcGjF_s>=(=Gk4@C=Q?c%L&EC<Ym
zzq&q*Y1YKwwDNDf?KpKL`JtH^UkGlgb0n<9ushsAg9V*I8NKUc%c@nb^!tonJiJ4L
z#BsVntJ^KE>rWj_5m7m4xM~z@eE^of=bH&Vk=_zP1XqF>`<>^v6@iIoF`dlq=<Q-?
ziQqXHo~dLN+M5r<VP~wFk&e{2v6FTkFOrjqskozL=j7|LmwMi_cFlEdYemP(mch=@
zc7G+j``a)YaYl+XFT2*6w{!3gFC;DW)+TVs7d-0I9#Spix-@kNG3TFIWMya?lLy!k
zbN*f*3L0ZMsOPrSz<qW{ZI~^}N}SxCP%9JO_CU(G{l;he>8EU)Of~+Hct-eGDf<^+
zJ3*uQ2>-2iDFgQIUW@6yIxk7JL0)N9LxH=7#&_^uH#ooM*Kg<E`S)Sr+TK*QWk-)4
z<qBju=Hk3rN4Bwq({B?fa6k9IYs;Ttevu}w_HF1?54o5ft$2s86+wI?>?M!2W0Vbh
z&LD$14Nr4*G`DG_hgE>$ZTgh9q`r@tX+om7KLEHU@MKo|yr1)6ZYyeDl3#{Q{sqTO
z3Hd!ern<P25THdWmdj+nk`(_$c9c-S^7oZePu!rK^JE?*RyJ9`9}DX}RSz>>7?DTj
zcLog0O@TzJ*CY|1&j$LZc6}B%LtbW$ui_~7>+Tk;I&skv65)Q_oF{r$7Yt7#vbwgZ
z(If8Gth69v<NJ|A!>t_sQguu}TGD}h0-gs}d0t8)VT;{}iLTo9lhBy+3qEU0JsZ_d
z9nNB)NzWW4bFW=2F854OG(l0eoQFza*7ETv{OxuMZID-Q{bOxF_r0myeVNK^NW<8q
z&$(IGFJy*JPDemo^dje%SpA#R+=^C~3c7V(MwzdT`BWie-bDW8hvP90a(S=wU$9pd
z<qb7o65gOi{HkN|cKzOn1q}rnavNkXmq~yKg|)cW#G@(}oN6i0axHT0i1u*?1-5s6
zUl<JG#*Vp7)O8er>*7xSObX2B+=ol@bT2WB_K4EZ0?DnYHjOX)Js@wdLbw%)Ugy0*
z_lU&Os)=2@btC0w%PE*^A~{7PAP$_}loNUN$?p9J*I*lmWNpVTA9;q*_(aFQv|^Kr
z{qIvC+RtJc$D?pDl^y!)Qb~S1liA4#^LragT1P~^tJ}Xe7#E_%JJ+<E--6GO=5sqS
z)X@LxrkAZZOvyz*ZXbU4XXFq1S!TY(LyPAH?4pVGdq)rWj1g(!x1?%fR||SNc`~~2
zP50klnt)8k&&=PVqf@LJ(2mLQ#x~GqjdU$@KSYdw)Kl!K<LL<N6TP<}fHn*oxs#1e
z(Lt;Lq0E~S0v%SoY_MmMtI>n&gXe?wvhnl>9I^BsgE@&8hf=`W8JiwqPB9`i%osWw
zg@_buuZ)qF&^HLRjt@Ee#Qtz*@Lt-+Z_e6|=@!S8{aWB2=h=R?({D}SHhGjuw>9)F
zX4Y-N-N;9NY13#ovfMH`UfG>*=<nBY&nwT-{8rf^I(amlw)l-Y2QL;arRy$IAA}2J
zBAdQTeiR;zeO9HfgB#dl7b`f>ZEfx*cGWSO!Rd7L+OcqvT;!K^BlRZ{myokn{S!>E
zTGaRG>NglVy?;WLSrT4i@M~s_Ese_?%Sk?PVSHAZeB9?4v5$Tml4y}bs=sO?D?KQV
zu#2WD`Z3rihIRikIy2Y~_aoq6uXIL?D3{zvIu|aru{zzZ@@E>u<iflCU08|{V8K;q
zspj}QZJQUMFE5PtyCZXW1BztayBA>_c@owaej9#I2La~?r_-uDO}2bcbH1eoP@l*W
zF?=(Anb_n8u+nwW+G~8Bln!akIL!}$wZIHPJ0kEA_Iws*Ge=8;989+_yy^k&{yj?0
zn<=L4Ht%qv%=ct`D2r8!FcF)ELX{7z&wfhR^ia+!TW6E+13#fTcL(KE&buc)%WnH!
zyY}MVS;w7}YR0a&f}ZWC*DuCds*Z6N)wc5Wex3=MNRW@z?PTA5HW-?X$hz>41)rAi
z+}QFhjhb|gn%pddYyrTt_>~8LBr!CO-efC!V7JzLK!0VT3u^7?c4IoAE~tyc4lU_p
z-dFF?Bbe&irS8gt>soVB%2x(UEQc^S2zgQv9^;vFJOv4w+C=zz9TU1P{azer8)S;K
zro(yOVd6L?xwni)`}vcRG-VgT#$V~)XOP4%TIbB`K3|_RZj$+g<q1=+K>i`CS2Fh_
z#<KBQLZ<hXHfoBee%tW7OcLQlS#lfA9Sr7&{Sxb$lKFv?;3EHPiGk@n2P9=H8o8Gl
z$wp4;n9NJyCR@eICLCB$WZzpk$PY7~PhK40B3fX0?akncagjoCgnjB(Q?L0X<EA7T
zJx?WH`#^Ih?Bjpmkl)n4{vZuo5&<uP??7-pFr+B@Y&*JZ5`2HcU0)e+2)Z_b#kRom
z*Plq+t#3YpkpA&Yo!RkAQrYp3FvO`DtZAcl%-C&D_x_tn*Ba%FrJv_TJ<4sT7+R6&
zAcRk)sHb>>-`%FJIVwdr)^~F7P5~qxE<-swuhXY~J3sh*+OCrJwbvFv=tGR^I!6Yu
z&({*3aKX(JS1z_2bv|4sjrpCgD%?5-xAolNHBJJkjX13ro#?tv{ufabViYLdcaV>o
z2DvySeGI-cY*_?=&g}gyR>IX$It{sJas)HE;em%E@7Q3S03dk7Z==}rV*h`JK<u3$
zJz(u;N{BJdr99-;i9>w`JQ}>KdKwXM7y&0nZW5n1<UfI6A&&h)pE2UXa~9;aR&kSL
zK7HaGX{mpz?}vOg7I<v&JtQ~6qI4)5oDUF=2rvu9Jo!0~xAnnS;hiPp4Y?1i$iJ1a
zTO%kYMp}0{LJ%~}vLH)X2dWGhrYIF2mw&C~$}Z-f#X-5p>&vr5`!NeT8&%4Tj-%4O
zNm5Q{lf`V;mP-^ghWO6I_KNS}iV`jCMJ3<(fa%z>S*;_RZ_|K>8NbkkcqGA|{{6H_
zUl6m!{wD6m5c40NW!8w`#6GuP<=aX7nguzCAG3FShERIXRx6-VqCfq{jF~+y|LN5F
zOzOfvz7uK<n(x{(>>A+iIy46#7DYQeECl2tyNMBzPsd{|&|EL6!v_cH;|B)d>_sf*
zdT}$f8*c@;8R{hM+)K<LZuPMKkg?`>NeVvLe2tK3dCGgL1U*@Fom6%$qdqit-Cp=-
zJ{`uRt~SDmj6$BZxxvSXX-%z~<l-?IQ}nv7nU0Am%US*Di>iQEF2NhbQmH&KtwcLV
zSzR9!s_?fd>!Q0$nl0mrI?s=Zh`y<dVSTc_iw#Ic9MP>0rbL>ZOL`}m==+g)%@>*P
zkH@7wD88^lbVxZd!WM^4tDXESK^G5QgT{~3=}_}52iOLv&3^*mm;3Z@0z81cVeH)4
z07Fs#f5YM)0b^+JyYQPmmxBBPZ6YkXPz!Cp2uemR*ahr$L&}H?#smQ;LD%ZYanv0%
zIWmD@n;e>4Vw-Gk+^lV!fnn{)h+Jv^EMKkk5C)Gs<2JOGP*h=?_l2Fp9bZ~G(N*((
zgCcnb=Uv2-q?A=vELq|st+28to&zQR9L7Z`=JWH!KUA)c*3LgxtS`IWaOhY6w9RiD
z_^1O*q}6~5t4Hy^S{Uzzg!AkHG2SlRxE>Uu%&dKg&~P(q?01=o@}Kg_2y!cf-`2k8
zXT2C0tiXT45IE@PyBqGwcUj%IXtFX}@ZOm)fgQooSBSN6XW)>+7#VlAiT(V2`<uAi
zkNrZUTr7I7?;tNu(F7TGqm-m8?OD><<_!WL@NmQmN)E=^mS2JQCj#~b5bF<J3jzDq
z0n6Z{Z156K7v$A{&^fd3+P8m#)piZ8yWU(Z(_cvJqF~ccybfBuKn}l=xV;*BDjdqY
zd_5$6G{gXK9AX4mpv-YdLwavWBe&V2OaoS*tO>o+DLXqHnL%9EYeMCf0Jag*hyz5A
zJUjdWdH8f6&WN;yg?A!{|C`p(#N<IA{5W@izw*5S40S>})=)4ZXAe#<?RabL_pd6{
z%NeG(1uluy7e*o$UB8yB>Np5MqpUvbL(Q7T-vJv<5Fg^Zvz`%Sm;C^>E$liRdXFZ}
zd1(DUo0K7c-4%)M(7VNvvyjID%!c0NgVq7piSdwH<fGx)TrI*HF`eEyTV`u!g4mNd
z)!n%Hf^2a@d;=W>wZqrPl;9KRfc*!0>GKE%-&KI;F3;IczV~!|p7-CleDO|Qp7{Lw
z9h6y=<y{xEYr>{<%23rkGl<0~&7~p0RVe7T5L^cXT(_>>Su?ieBTHJAy*iHP5Zmcp
zv#4}g{~Zxv@zXXBA{ca9%$Q1Jn!s-|`P^CQD?zHhkx-7GUHGG_1-TvCIKGtEblDw#
z_Mi}5)#fxVx2V0T(%}yX<GsF(n#+#{g>K?YG#oc!tE=v&v3KeO)9fA8(W7)a)hX~u
zr9rnq;bxtckT(4ZdhUGA{lk#U5QA(a))y{cC*fvXumOO^3_FbIt^7Mks8AUmyA8*O
z)k_Sl^vmGY*DnN<i-tQD?dv%V0mYZU4yTn$C#Eh76LD2*#`<U(lCGW4sdY@H*tK&~
z30o|%HK@sGw}an^f-p&mo>_F8SnT}Wd~!$s4nO<x<JU;-s+(8K1aM!#^B{ly$my}g
z>AEu=m~7;JrO=$g28%#Cw;-cI&{`C2r*2#Ud?uJBAl-bhOC`pZcm^mwXctljKb&VC
zkIxl9Q__^$`_G0nQ1%}THDU`rmgDk(f8%o{&xSPr17b5#z<=me(#&1|eFdSG@H}pm
z^4zXHEha{WfgjfU?gd2Pzx`JLPz^&v<SRopeB{0pLJ2Vnz8yte_7Ph{x;6dk(2NMU
z_J!xd`0Rc(xnkH~P6lU<KmGvpGpD~?#cgBHmrS`dUQiVUc;|U3Q+~Anq5gRkP0!>v
zL(w2Y5%#9ERQPjCjd&>=c~gq?zy*G5L0TJKOP&<6gI*dq40@_|YT~@Vc%TIDvUVA~
zgR3If(^vijNWjwsJgIZ%VSNX5-&5?lQMiMcia_)-_@1f&gatvzxAU<7d~9f9u|C-_
z;*Z6swUTC@@%*G7m*d=o-WnaBC#u)||L+SR<>Nb>>%ZM^veFmtKP~MJ$yfu9g6b9m
zHi(zg{g;SPUnI{KuU;Z70QVLMll2=DI2ic=R{bimb}vePusD&3xr^bkeoG^d8%8|O
zJ45$X_{*tXO6tT#cUPB^RIMbi(I5(uX0LWZh!-LJ`J&A@fa2?if7J1t(_@~U5W0}Z
z39(bUN~I3>+VO8AQYU1pG<8MX{QAXAainU<d>LAtzSej^_`5#eW&64`@EnFgP^fSK
z4re+Z^+y_;_Wgt|G!7kPnCU-5<&8(?2m`x1@f?!$)imvr7>UA{gmNFfiMC_7=so(d
z-6;5kaYb)U20mdeRqGlD|G)t`wkFbEkNYHEX3OSE|5+S7tG1qyhE;929OQbg-7UaG
zPCNT~{v4WTmxh7n^!;N^piclBFyzAN3ILxWhV|gaEj=+x95I4+RY0c@6O?}&h8!J^
zlmWjEX?&-@ZpP6ks&mOOL<mm|UM@cpDj){87kA3e{xe9qfbczol*jUaWFd`W4tU;}
z(h~?dw{i7Ui;!Mvz8YxGpt!$I2bCcEk=Nt_7o88w8~*1PU(|xZLA=a~k{RgJy13n9
zXJ<YtXIF@4wTBD~LGxLU-NrH@W;Wsee=JD@O&!B?OND<R8?EFQm|JE=2j%_i-xs&@
zsr7c#s~=5fMWtUd2lRv7yaS8N+uNm_CRRcsh*#7_HXQU%!M(=t?es<SFAz%5Nc!X6
zM%zZfu{wAY`2hMegFL~FUycB{{sjb}IB#kv|9WS%Zy7?kR=?+T8pj3l^SYfq`u5~N
ze~scni=k~M(XJQ&dE+<7SRUp7+^?EPV{{@uzd3>tg*kX)G6IAc0@Q)-`kd<Yfp-fK
z)U?rEhYFs1C&mXC-a`_nNN6@#rSqBRWA+QgEAB6m##mq8it1on(f<~<9}DLu;H(&@
zi?xr$KK|S^f83w-_{qpp`U)2w8Q`PTf$2!PuKJmHZtJ_W;ZOQ;`ohY3PGaq6O~%g;
zeBy~vB|-|)J5Pr%-4jBVgYT-)KPi*H&gDx(l+jqSpD%t6qdBsYd;dXNb$iptjWpws
z^BJ4W+Eh;PVBn=ZPyba<BQE)mcSUjz{QBG#IPJ{NC-Qy8lII6~(c}#=n(TC2jihIF
z^e~%D3e{<?0JjwNqRl|L*}enbm$Sl{WtSl#jZ>9Eh}E@m6!6xr&b?qB3q}_v$h!?w
zRHE^W`E_o4*D?Z{st*Ih9>Cu~?gzL}m=B=db5ykTJ4|GUA4Zj(8W5zqn68ND(1U=`
zmP}MGi04U*PuY&sC<DO5>SWXN?Zc4M9qQ)?$hB#!P+fCCB_G@YDoS1(p9klZxSh<0
zfu1HU?hV0i?O;TO{SzmmM}OHo3(m^pQx8VmZ8%*34?x$}c|L>W3)=4j&k{)O^W4eD
zMz$+nU=CG<X?(KU4fk<^;U3wX4t#kd7JhQyy=YrusPw>Jrfm_NzMLu6C^vQ>Js$0C
zXRdwz%gT<fUzVm@9?Li%wt8@efH7X0KvPZb^!*pSV5-I)cTUkx4!|f7Y;WTX;PNy9
z1$iIj{!hFS(@UE%LLvFE#Nzyz4F^VvFywGAwL~*q&J8|mE8*!1rEUNC8WnM`99B2P
zAyO~FTPqcm@Uivjdx&-uyr}VRr3V#$ufW&wj6S{6x0`sdiHko&8xV4*W~WtHwdd6U
z<;no1$!WTgZ{~*k%$VoxAzv?Noea0^1m@27`&}N2XScmmRpVI*CGc5=bn4%Kef)8~
z;N`@Ls}2d%re)zsjE9G-K}uDrDnV)S{4u&WViYDs_T(8ciB?rQ$nsHE5jXaC9P5Sn
zzqPDPmod8h^0MnQ7S*5q!k|Qx>x)%$bA6TnApld5EvaQV=Y7m4@A}+CVQHq)cX1?s
zfZe|>KIA6q$;RT_RQwmR+f3<~<3bkBL=sV@pObaA2o^*#8k{*Ww%eLk*1R~OHsrxs
z#q#^lUS<`?W1{bmlJxqAaMj}gEQ1OH{^Pl)tN--+tR~{8|Jed4mj_jv6Fq|L(LcXk
z=(xu{JpgT4AwwjD&(=}0nHYG;2imkKgAdnh4s=HbHAw=wKszM3wQ$3_(G9_z-i_J4
zlSMBe+><9<8xhV!6f?Tv>OhZm(?V+)kPhCHKrtO1ECmGVNk$-urT3jcL-~*<<UYIq
zf145YnO#aFU}EQW>c%;0R}VHT)5!bK^@~A)@l)9dtsO6T??bidVbQU-ihi1gZRFWj
z<im>^>*L}%p&AExSS{7GU2*Np+3bBq+*36{m-cQnR*i19QeIyfy0>JZRUsVY<9#@N
zfma8B2OrpF1Yp<6XB5@(x%QD8G!<=Z8Ew18<F_P?Y<5Cwz^?K;dN%GEk&74NkVr5x
zB>$2a;5`lS-Q{^AXGe&4O*+htT;osdlp{s|<%-ke{<)&<s$LM-VYD_t4EjN{uOTbV
zJ1u^<E#A=4so!ivvd-}E%f*p0c;Zg}ZM@`dD`>MX{}SLk@pL}}KvE#tk+<y*PYNce
zRMB4W@ypsek<KIa`ygU?CJ5n{UrFOAL>2qPdG3xLEC~9*lRbqqK`>4EpfxL8^%7Q>
z28@}2k764v>{30_@sY718NXdH<XL;HMg9Fb<GIYH?y#Dd*C!NmR;FVj-Wuj<rQs(&
zBb}RPJA?CuTR3Ar*ffI0F;H+)CJU>Mg?$&JO(=Ek{dAeBiYa#z5ZwXuF_b6i-BEI_
zG7ed`&pup4Wx`GTz~}cobZ5=JdgF^9m_K5-q3go`q5b|3e17?4P2XGPTAZK@=PrSV
zECugdiQ0N;>N4lu=gWs*JoeLa@Zqm-qFD*}E$IoV071@6JRwgOL^_Zf$rkj6rLx6t
zCCrEma~Vsv;?W#xw4(#OC`$3lmh&%K9jaeW0zac=>M*r?MbJ=-PMgB>#G*|JUZ$K#
zU;vEWOn>buooSvs5vrTMSx|t7Dw-@!<WzrUw;o{=H6o1`BkGI|oVSQ~EKaQq(DgeF
z*aLOuAP(c53N-z#XoYZ$cb_7xY>++FzDIKuvGh`^Gwd7lV(#n{%UW7<_JN%a(;*2I
zpL2Ya$OMx@C-;w3iqdIBvUU2WIe$r!+8R$s3Er}}!S}Vve6Fhm&2?YDC0t+4{81aV
zgMWLxrPGL<B=AQbg}6_!GyJr#eRBLVJwNE^=m;E0)t@dqN506Ff`#|IKBjt-lc^A$
z1o65(GvJlny_e5tV<Hr0G3}EasVh9U4A}MIP4i#1V2`tRFCdE0E(^JpOyB(>Z6;Zy
z@gAp^XI5%e=YeB1O45oS!XguVQ6woK(CK<ef*ij<a3gOg;DRk&pXC4#Hy0%*Aea~Q
zoa^Cw0o<V4EL!LvQ8BkeK6BtOPS=6zc*TlvEB)f`E*J4VIX*1!EV<Q2#pGv|mxga^
zrR6z>S+LhO!MI<iX;k5(rY_)eP=|eeyZ*KH(SZJ!4&>y!r>A0*Jph~sGzh+2H~HDj
zstTbD*y;qXIA(i$TlSxp+l}ue{#p{eIByVM5A30V;eN%yL0hPK7x?+Oz_~UO{W5Ga
z&idOEpvgsS?#(S-oO((U@sZGP02%qPCFcR<&xu!j%w!hnwxOQ{>}V$vX24(uI3d}e
zj76yRyQteU_Uo5RXq|@^KC3bg%|{`hnD%Lmv{K$MV}Vx>(Ywd%BK0Em;(A`utFOjb
zFKA(XmK%^+;D=JFrTz+}-o?F>V5KCZf;#c#hN^x2i(CAfCysRHHAdeTF&)vr^zPMr
zuS7conXg=1KA>@ijOVel>Zx_7>Q?Gwj~(MrR6cwHFH{-#RW3Z?tif91C%wF4e+z2+
z5v$!G<Qs0MIl097#WdZ@CT8$*;IW;=39Tb^#pKpcB*~~!Ub*MRn1ork$}+?S!p2#q
za+>)y)2Wu+LTP0#g-RbDwR71gI+7_|I%Ih|#YbU8<I@d(L^JH?$af|%TJQkiMgSmB
zpPO4?W?ly*_(ww7?@;O%;g8V}NITL%y2C);Gyd5>P*b0R&+*yFx6As$ubBDKzh&sI
z>Yj^Y<%Mm?RsE2pIM#cD7(_t>Dcn(KfwlMC4E)JuQjExes+v5$@;5!w{!{$4a|<Eg
z*qOo<=xAAHh`guI*!PdHI&A7I^Ld<Isgrrd>b5Mv)oFK>XR7O4I?-j(xh8D=()XhO
zVt3#;_=X-T710N_jr7z=8cw*){lu7Pwu^7ZH-w#+VO*d;sCk75nY-s+VL;+OJ^>y{
zxD1<fKz9oWM;ix1H4opo*7sj+=~(=wgy1$*$-hk>HfhH(F*UCgMw<wQ;AES_X8fDj
zS0_olF^t|Dqv#HMzW=mwm7?wI)RjNqnIAuwblJteP20eK6hboVXedt?tIvQl8H_l;
zbJeG7*1mKg6zf=fN#BGnl4G6yivZIq2+u-;@GO;8Zt?C_vQT&Q-%G_oEEW*kFV<pQ
zq#GWkjMkmSqZ=c}-uz{e3~4|ydEl$xI6Sy%*Pn_j6)-!l2=7VmrAmiE#2Ld<iAAwb
zUcrA}b$z%;_s1>_hEt|`j2$-tZ_d1~CJ#jkiQ=zj`gY)}>lSc$bn>bsFw3wkz(yrq
z_=PRUJiFDO=UTLUi!=&;x0VcKHFUGsG?eZ^;cAjC%&gf4+_4F4p5@=c*Cf8wF8I%L
zAKdd$@Bd0DO?+~}SMi;2eM4lpaI;fkY<A1^bjhggN;8q7QTlDZQG68RD`S_i=5ZG?
za0CHfgM5U3yoyQq@W**rNqT>vME<1gY^3-lp8m)LnHY!u;aFgcXH_M4oDbu>mABDv
zq!qchXQ&>+6!rBfjXd|}1VyKR7ACs*`u-f5h+)`2Fv;1(++nvV^3d=*wIoea<Emqj
zI`K$*gA3t*jc2^4SxzazCF8n6as=;c)Kby=X&-FE>GaLUz!$$M{bQ-&Gbx|M;NRO9
zLkH`-`q{~Xx2pk<i%<E5gsI@mW&7GPd%Y_DCzW8mWZogmirHowM1NriJ%)718WmE&
z!IrPDxUF(1dhp~EK=3^QanH;6;>gb)$7<}mM;Q0=u|XGfwWRI8R!#>rT2&W@7j{#N
zg?V%B6f>9f4;3T|OS@YVlXJjSE|aEuWR8UoKmOoJmJlY(msV@{=@7|L^XX`b*|Vnr
za9!$tivV%ZlxdzpUe5;}ZzxhBeIFG<l=_0`*#7v@vMHsndUaUmMG20z=EcpAZM9rj
zT2zNgs@p(ZnL-UeW9~yE!qFHp0!6be-RU@tObHz3R@k~iGmK=*HcekZ3>vJsHh{2P
zLDALSo+%d^I_jOmM7A?2-ht$X8z6i)ThQ&=@p~?md9;JU2-{oHm&x*(h>%rz{WSDF
zFZ0*^<B^V6bb8YxTh`+dP*2LL2ra)`(}6A96C=sY@NmbHEs4Je_2o10ZO+=88J^Rv
z3n3gEYo`#;+xx4yJe-z|8<pkBu2f-%^<LF<qrdd@EC2HLwTSFf5(1^)7p&U6Z}7v@
z+0-E#l8MgQXoXnv$nm|AgRK-xE8}j2p8QaWWoENKA3D7tr!~n#_y1S^mnO1+(n4~E
zIEe2D;?#qNmiktAQX!E-VCMeJ$Q`xIx#?C;#tk2;p!_+7!qLQuAfJFH>iPf7Y-{np
z-zA3ZX5M^P*7dD+IS%1ULBUCcE;^tjz@o24*y$pe&99j-ktI@?T@$Y0dxz=?GFLN(
zog?lNXJV@{g<s6$hMa6@Y-q{%yuC%OPC5XRNVGoL6^2^f2m1vRCC-}9-^BYChm0@y
zY7`9zjGL3Vq;U9%-l`E?F}uhxq_$w}yCQ(p`9K=|xAcQwJzJi4Gz=z*ui~LjjZwLz
z=U9+pJZI)&B$w$nP=e?c)P9JAhR<4n`|xFVC+3oenlmI)jg2h`23(ut8A$$Oy47e6
zzrwKL9aVTrrEz+LlQ51({{lyb8OSE0TpB4S2G8Q$*gS>&eff1#Q-wH_C}?K5#W&2W
zG|8xr!ND2m&w=^O>AH?{=a}C;{FmM{y)Fher4F>yqB!81R{T8P<CL`^>2Q6U)!mmr
zNB8YE%1IqlY=i{ySBd2fl424Q$<=OxV(s0@ZussU9&u#{>-+OZH}2Q}e11FXa38L=
zC5z9x8T%dnRMKdPP?m2Cz&^uP-)v;xuBu*6Wj0<imh(Mh8A&PR$UG78dc<Iq2nfFi
z^XHMZ8+8=7$gXwj$~P64^+-I@G&a=AO8C;k7b(HLw8HvQFGkah|K`%ue}nH!NB`-H
z)I52LsVR00>n|GV8Qb7OcXJQ2cAc<>+~F05#BL7X*&KoML~QBQ-r?%2-}6fqY9#3O
znDC2#k-Q|c>CeFGqD9O@y$V$OSK6Crz9k*T3i_B@#^6R|!>{cH1ed-PjLeH=*>GLH
zx6fn$f-mW}?P!<ln_WT4O06vwkI&uv*Kko=*{_qCdB&&WAa^2)=U9#~cgB|i_z^hZ
zyI7c>Tc+8iQX8XweN)Wig4}GFQ`K^k_b+KLd+cne&F^X`jyP|HS#%Wo<5wGk=&KFt
z-);gHSAJ6mel>ECUv<-CQ`IAwR+RY3!aNmol_|wFq}1=&|CQPa+jsuH(AXfihPyNr
zr+$-D`rgI}eUzJs#QLFA?Qp%+ba%3{{!}2XL%-s|4BubkDXy9DaUMRjN5wp%PpEA<
zJ%r2VNy}!z^BK!p%qQ~SHyJm<CWq4Qm>OJtyp$j(H7%o8XmET`TEcIdUu@37US_#+
z{F3C|7{RYyJK(?cgRf1077=|AFGv4)rGr&JV*2(4iC^B!Zl(rlO#RUCV8ABF{cP&3
z_J`HbrGNWkgs;qvJFU3ZP*fzD5?+L(G-x{!gqLSi!onl;HMtskyu6B`K9-B>2<Y}7
zBV|cJDJJp|=o3qq@oXm3*_-;K=EQjp!8v+_<~-p9pxk;NmFY^eXx;*^%YWF?zHkCC
z<k*bHHy{PPu&5y6OViO%`|(chRxfrguB(F5$=V5^n~!s*yixhy37^Zzvz%b9;z@0z
zr>timO*nlr6)yXc8mRP_l7?`jXznp&?WWVEyUd!ocEeBOYUfGpF=2p=rwl4j8t*DK
zjb);}_85*T0vRbcmnx;?P5%2Ps(K;1yvVnvp)#4Lefup94Ru-278@~vh>!Enks+(`
z>rW?i>dpI~jbqrXW*+_n)Y#2!l!&d>If{D`LAj=dIwV!;H2TFB@u<9bdnbllh>EMt
z3Y9F6(TBH=+<CW)>erX+>E(P7f@mlA2jRD%Bgf0}^?>E6mCf_Kw>>LU3(C?no0^C-
z`Hp%Nl8iu7CJp8#=0vyWd@n6N5h5<zPCuthD#FsPzIiqRXBKGdO!h~1jBV!Gzn+pw
z+!~cp-jEJZPjdZzCHY~6!P#gS*hyRj8UjcA^I9`s@y*iDO;@OjpE;EdRT1HTwPdwh
zR++IK>%0ZhI?IxMdbWh#ld|M2Mfumd_$uI|tO91_Cc+p;982btH(tRv(>+019uGmm
z#PW~MRio}&)`I-sF-)-Y6ez#>o9b@A!`AxZflWPk&w$xQV4pet6kPSz(82wEep*6$
zkG+%^HDgR{v1Fa^o%nw|G+pPIjH5URN$q2=Fz%R_)GYn^-PMy>$nwCZqDkvXV}af9
zM$&(qD@*zcg&=4l_u`}v(8Vxi=D^HbCHyy>q|T|zVLX8)lwHGQvv^4JCc3suLw@37
z>q6Mm#p^ie@chWaHpcT-Sed4>!n!Em^S)$5*U9+t_DbqOYM8dN(D3;5)V&84uZK5X
zX@8Wc22_cDybX$V1K{uBOIt1A)wsH*K*%t-zMkt}Nn<YuI#p5*wD3eKM5ylQ|KzbS
zI396tRsNa)?#h#^wR6mk9w4cXi1hYDDWCw90uo&Q*^|h}K*g{lh0Esc>X}!zKR(re
zDyjKz{N|H=P^tEB5g~o(n5BK;@maRf=Fz;Npx+~klHln1qOiV3`UI{IN$X<S<4h`>
zK4;Vqey6z+(E5wk^w&%F7mz47;4iTeo>QMp+K_f1C1Mum5$iuXP7mYjh+FMXtiZKS
z!Zb5OpZ%L$lb<N9cm3yX;YNs44|<=#!uZfi&RAi~iLSZMF#nyJ!H77c&#2B#%{zF4
zJD7CBtN-VtUuNFWi$_A1Z^2$%h9|`_+j2Wt9^&*tFFSbrjCvmAjLnJc!`~dRY`?BL
zdvVBfz<OAGd1X!k(W&^<`}r{!aIici{03NWsgOyeVuJWL5R$Db9?DQk=J9;~BoIrd
zNsOs&qeAZOtf4j5FJ9c@3R%l5tKQ!=hCzWxzw`xD7iYxq|K<P=++Wb>**fgpaQHb+
z>;J}%qDe6v+<ki;@4Dxjeq~8md(<t~c|3qAp3FJ*xzm?x&3y$Wj`#;diq&ao=*wQu
z+@MJR7ftOvhPsL?d#7)M>jmBIm*GyIyziYV0%aSe^W~^0cS>9xA=hH*GepC&=sVCH
zH<`?D`f}4JPc$Ih7<k7k_0-D&YPoo`o=8*tU3uB_UazlytuyxR)rtLNTvtF6izZEd
zZs*fnonw5;Nm&HL(je_h%QZ?`mp2p_U-s%fo>kF1Xq{Y)3+>7wJU>{~=Y;nxnsI)u
zRaqyoIBa2aqo`%VGRxi6!E*~-Ejqn84go@ZrPc!dlNT(nh5PKK&tIA>^9u93=<Bna
zpkO5_$glC=0_hy5M{CEX`%f`6n<#9|J%iY-D$Q1ov2F9%4e<rV^q~p&DXQ@%Zw36f
z>HeeNrtzGJ)Mn?e1>coImC*iLZFLP98t0YnqxAIP3|)JVH6FRxRc7wvQEjOZOMc=T
z!c?9+-L5pC6^d^?9&WGn!B>v|DWruOa9+)nm~SYE(Cv`@(>rp9usw1bt~-t)@78l;
z8+7unfWEq+1Q*Nhp|8r`Ll4<xJl_bu<XScgbo^<4d!Hg6r1t*epu)>0B<FM>r++so
z(3MpBNA5@211tP?WwBT<YeSOO(yDaTZ|DTiGOs_k#A#aFY8P`=pfL*OTq_)P|G`0$
zRH1t4o`j^r<=CTLElqDVo>`3rk?rEo%gOlc{iw=diik(3UK)%PB$~`B)tgcLDdL)~
zcKU-i%$0?v0~AhwLmp@(HE3c}E&p-zbA>F)Yk*aLQo!tdrGD*Bwo`jFj$)RisN`Ts
zpM`GUEJ`-CRUBxLwU6k{+2~49;@f(+e7G&$-_3N>)l{rJ9?7udn!H^V%M*hNw`i<L
zvZ_Gbr(3ItLOUUG41hiuaqP`ZpWk77tdT8MIrzh=B}8|hNVZ7-?$b{n@AAZoyt9Vz
z%83Vq(?dt+1^q5#u0ewe`4$GE!0e>1POcD>Z(Ss`9h>@}P2b{t@~p=^EaIH^H^)pb
zv%&7_rZhiNaL!+d?cid2tyrL4C1W&qypSZa(A_J*O`*Jmfm~^EDjThB%?ei>vi(mB
zDQ3Z!6Wjh;TTvSLp0XWOY%NFW-N}7|4vFR7GxfFWxNTdf-O}g#C0lFi@qCz`iG{5l
zQE+~@FU0?kh<%&H6ecdp_ZK}L^g7*-$)_b2bne`}*a1i9XO+Hp+DQv*I!_vI*QUqv
z;K%v#bvv5(A8x$|ex&Xx>N7K3;B}Gys)^~ds#9v!7;s(GzyWhjlLAd$cX<OBJ8TRY
zw{axSL-HT5ODsR!g?RI@8SQd%4|BZWxTe_sC;q2sf+PZVY4|SWT0HDUT`<Q8<e>w?
zLa7_-j%WMQA^CnvK(@21&oIO(rxUGeL~l#_c`80p^MD<OzjGA9;ib_DnxGh_t&w)x
zl}Z8bT^O03Q)pBBfsbz2SBy6s_<?CGLm4A7HY#6@^|wMkG%}$-iZDn<7D*9MR#g@2
z&<u_;dF4|nlMoN%qN_XlDySQ<FTXiTh}5tBtR%ALNjWlk=ElQN<9qxisiQ>9SN9d_
z`8JN*_I)Be;Qkr@U7GNs)VRA1yNyR)UsC9SZ6e1z+OTXqxw@k|yeLjRzXVm^nHz4r
z*tcOXIj~l)BpYs4sSC1whDRo%zN_6gyS9=}^ExAB0XNE6voG($aafC63ehj()3;yU
z=x|grJ5@i1i+8ItK-rHQFEr0&OrAq^T4F{CC#lbb0{a6lX>UOjfTgv~i*-<f^$?!8
z6y!q^QHbR1$D)&Z{Ok8dqWNyG4BE?pBos_0{&^(cYlSQZv}{EE|HDsB$A>a;g19(T
zRY>wXDIZ;)mPggBWi+?@Bx3cF^k3z>BFW`mKs#=z;T@fN)4tDrKk+Y*Ye$0t!?Cbx
z3Qe`k8$aW1MB$n^wi)g}iB$Wwq)pb-Q9)cEpJi&_p{5oIR)2nglM>B-DmWYPDAMTp
z<N+KL;tZ)aPhvrA*B_Z^O~#=okJKoKe5I!%7xU|a*HeApTJlCO<HJJNqrcGlO<^5q
z>s+poKP9|kmMmF|ExqgKpg-mz6R!PEcBLGXx-2941q8=!SDL~j`kq9Z`Xs(}#3EIy
zT7hFGISqqog+R?JL41e0Gbb~_3^%B*W7fi#u$Khd8+9bp9!cq!709C~Z&5%Y{k$Vu
z=e@Xw)vP?+s7&eSUeYW5uJ-`@+ZW1-AYNYJ=xOhf4<($hYId_gc~q3>F{&B!5{I3G
zEt&0E<l)^el=FJLa-nJ``+Iu>%?}#t9rkvx=EmuHNyyln-zs}YPWD}PliGc{|6!)z
z*|=7{Q5!QYyqx7I+lH$<^v*|Gx<y7u;70Hk-et!j%xXP9!xsC2D(>vc?Sf@#rI0Wa
zQEj6#@&0%z;eEXX;elQ!4IyG#q)VPw*lDk1H0`F@aV4jQe@O1#+_v)9lu6z@2tjj$
zYax*wMF*JM4mn^L_k8sKasiwpWfK#GO>3#_|8{*%bonl$)ucKv2{y<-!guH<fmAzK
zGF{>jz|66!3*=CzPw7kf{*GVYyrg=NeByV4{T1<f7#^L&kGmaj`&mm<Q626ukvZ|x
zrzUAt{TB~ctFcFpFrUXZU3{11V64%^PvaxRE+zj0_nj4fjbAsw*U=@ZL&n42JQAO`
z&blMf_u|p9#{L7`^IqsM&yR7_<D|COUa$I773J;8*~t`9D{uarrVuf1G|rm1&Dw-_
zsml$oH27C3oT)F%iuN-89``r*-=R*JJS0!lbo<HC?ld~mI=W()T%1HE|4b~qphl)^
zS(uN_dW&H=1I8+v3y&64GRph-z+ClVR~h{OXgUYKO27B(XS<n<$+o5@Ta%5GHQ9Dk
zlWkA7ZM&0gn<v-woX_`p{r-c4eeZqkwccyp>w5VJU0#2=Bp<)>4#^?b2bJz%b)i)L
z`pQwh|AX=ixyM-TZ1{!&4Rrlw^nQ>B_1_tg0`4_0;tIRVf|OD<JY1<P*Irci=^}g#
zqfFt7A&V@-aotfOtmJj;R&z1BH=L^_WR<i57W%wE4WKK=uKR<Tgb2T+FP_@|Q-^2M
zVS>7SH|56(1!+etsegT@B!Hj=(6PXJ>Y%3c`~3L4XqahACIKK!yd*2LD{dV)65H5V
zw?-!bM>m!zfxWh3iM0ZMe{G5|j=t=+?~uqDuog)+&?RYbR*7T6SQ2AP3`YxPlJ>%s
zHw=R?o&+eJ`6-L~vr)Cq4o+vaD~-}qXdbGX4I{MA5mq&6Uv^(4-2b`@f7rLJ6nflc
z&$O_-vj(u6^%8PZ{@@9ZreG!{HwJ_4sA+*~;5VdBH*4(#tp0G>ugZKL*5#fJeT=<1
zZWfr{_V-FcCl#7v|1E;W)At!N>G;(kXsdf{sgv0&L!Lz=afxGEwF>svMfqc6BAKT2
z5@Ws`i|Cx#GLzuEH4E?N6%}2V(nB$ztMR7)o#r9Mq{h>pbldqFy76l5{3Ro~f~fm%
zSN2cZ6vW5kn@;$K26$?Ir;3zjV=6-qYW6cIwZZ}qa!O?Ocq5&6L{ECEQkYLk;xv}F
z*FVr{!QJC4K+jQ+@Ym(sxRyL06_WcD`6t-zCtwI)_PdB+p{?;32lZ0IbF!0J2ChM^
z+Gd_IHDwt(Twm&djzR=={@$WIHMff;+NH`ftb#$;q~-hM+C0Q~<9+?{Mm$ys(<{&L
zXD;CoFLC;$`SV`zn*xUXzmdchRLCbE@(79!;WO7(Ul5p0!l$dT<-z#dKV<w`v~B8=
zO$7M3X1wOE4&+`xBW-SVC);<LVQ+d&5I3G)#m<|=3dsQZpU8=`J)w^ePiNFJ21Zot
zVIxuX;}z8Gr|!R?SVa@3o8eQhk%?6$tURpDR8CU$?^4Pym2Y!XS_}9u&08R|+MH;5
z)6Z>3U+P+}*2}du6g2#~<|F!^mC*triAlPpxcE6{BaXlLyr(=|{-Qr<GHnkL4JDt@
z5mbpLCceuP=I?CDyoPMDY<;ddh>Kk(&r<xuU+4|jOvFn%EIh5F`M+tTGXqX4laqDs
zVDk;_J_q{e>lu&xTuRTsFPk3c#6JJ6l%w^v(?Fo0<o2b1=x|K7^gz?`+=lvXZ27T0
zRKkCYBqcFNBpW%iSR8b{_VdvxA)!++Ga?T;)|4cNvHT=Hl|b&SGE6tr@$I1HaV^|m
zMzpm7h&2i?^oCc{^~k4FH$FA%{MhhFH{u%l8*f|U(@on-Cmu@yX@yn~-B#gGJZ!EE
z|F3tPoS@i|X2vH%ryh#UD9t$1ANrt-r&Fh{Ja-w~JTmd$L0MZYm4a`Yxg4ZWeiwiP
zCUUaJmA2zP0Ewbn9<tBU$4?*TZafM#qG%NrKJJV0TBH*Z8@QWx7D~}Ff|oQAwQ#gA
z%5-K9!bKM-#gisjX-VC9(zh+h5apQk1grR(=k7`q)i?wRcqj2sTB-cF*_fwoYjVrj
zR=|c)E1%a;C(K&e@DuR3X!5txeL5#mQ5IzB;1LxjIedDkSyC|tusD7>nS>H*IsRt<
zdDdcizod8*-D0;#2+oV!eN@EGh{gJb69f;qc-*1LK^KWNG?dZ&{Vjk~?;#diTW(Zc
zN5RzWDc;<ZjnX#mZtY?d<l+8$5s)LSE3q<qbSyJa+C|J~Q1<Jf-J9S))r&>9J&W(h
z5BY*=majyHgfat^GC{{#(PCM&+~Srd?0mPX{SLNHA;5S6P1$jF(queTe(WUlR=CH_
z`^ekGp(d#4_G1Bi09ur42CX+~zt@iT5ud)@^_oJefup)Bxa&O8z~dB;vGThV{BX=Y
zk2~jcjnD_{w#R?_<I+!`eJ1xA1OHdDS95n#(q9URXs69C>eZlt2Bx5lFo1&`0?l!`
zxIH}R<P?zwZ1Q-GyONZH9<`xb!~lhZJTBALcV&XQqlJ;IjbU9P=mKjp=ha;~8kKrw
z+F8~UTbE%ANRZo+FH(q4r$4@vnRu)BzIRl{2AJNIKxxp{Mzo2{VD8P;qFuJD#{{+B
zQIS$~5>)F?vNV{M=b=mMA!Gx`VDIpSdO22;BeF&jGeX<NNQQ=1Fr1-ddYCjCcViKP
zh(@17%WQ(7kaj?%IAm&C77iZOhTr5#enF|l;|%*$kp`lgJKlYTgq5s<{;h{R%yIaG
zg7Bj^S?(7|TZ)3uO<i>^Rsb-ANRd13reFaXUfnlKn9gMElzJh9c3_zMmwD4yynfEa
zp*+uiNIJpoA;Z;Y{&KN=9jtHlunW?3!GnE(bW_q=UzX^5?CpOf+xI-V3NqW&uaWDY
z5!e3Dm}|55oIPHx$)QCm6x0lu7PcoyIOa28L5wSQGCoIZw&ecGhO0{9z1jDsk!N~}
z=FIv2$t7*vi^rvh6@R=R@hAar>tp$;#23WZi3;I7TTD{H%Z=PzZyk_+u^Lq4NyMB2
zgSd2d6{dKVIL%X^s&y+@nR}D7FEmnW?K8E=?kOw~*(sgTVeX3Si{R5$NNUy7RXHiI
zudnX|_6ufbEE7W|GeP~4*qrG{D?j__*s&Xs`Q2P%+_~NEgL8eO?7FM6Rj$9=zYKnW
z7VWPJ1>Q!q9t)B}s?T0>EYjyAXlzH3)jxY1?3lOEPBzaK1YFjz!v?AZxG5RBRyJ2U
zmT4k+2r`7*CGgsN3k<NQ{=4mecd>qCd`4ZNZ017Ia=JuZ6BgAR+#nZ(=n4MxY(Knq
zeIDKOUHyb;8FFiI$)1dM+BRto>@>2$oDEW}$QhkSz{BN>0UWGzXkF-y2?juqs_Jb%
zFDt9eBf`lKuf5{zLO-m9#^k_HloE-C_NqwE%sN1@2O=990-{c_AgFxEQkA6*&_#!~
zpl;H?`7fEkxDC2Z;FTz4u8g1N39rwFKk&uXn_v@&nlX42B7Bo15fG~Di;^*$DGAi5
zhR=8vhvP>#hVgv4MEYXTD`S%+_A#hO<;An@hl?7`Y2{#=HB6%r58@n+SPj=Eaw|{h
z)&%4h`9GJGJa54Z0sXsoYfgrBd1g@wuXkcMKi%IS{4Wku4YFtQH<M24?3nTy9B@lL
zT@<`eO;y^smFiJt3EDRiyWBRd`hJ7XT%X4Kkyb>ZxPvz1xjiqhhSbB<gJ~MwKwKvU
zPlCb|DgXIQ#9Vv~&w8N@eX6pSlcOnmUkJlpeqsqD+?=$;{R}mX@v|`-{UH4K@jm=r
zX$RB9XLG&LnvvI!$Kr<bQd?8`rZ3^=f>064GkPN(4q>t+h>FhgumI5B&i8W1P+hJt
zgonS6`$%f0t!FfkI|mi1t=sA1amMNYncf9@iD9_~k1R9)f79F?^!I!kv0C3ZINoIG
zoW$m^AnTKhWHDtMuAH*J^ghGy^(F228RPxh`Pr*fwY!O9r4`#&EtpCfZ?o7j>1f+~
zwi)p#7V9?mKQXT2+pL)XpVkLQlm-15RZRHb*HJ)1zoF@!;DCWR{yKdgMkJveza@n?
zZ-~yk0I&$ZpVl3o_<|&H7381a+&1WZik-+HU+<LOP?+?vM*h#3{Lrt$jodzVa)iTk
zxBJy6z58R^A@IG)a|ntk#L9#j;g@iXJtJ*n1nj9&wx~E}jPa~PC0s!}yCq(c21Ka0
zApI$Mp72oQX%eqb8w3r;OCfhs+0q}Xmj#XM^3HL%_R&MlrJrw>i174HbVyehq@I<~
zbmW;xUXpig!pSZ{&8bdc0p&2$uBSmKij7ZUe?(yxW)eOjM3I1f6-^XZz47SfX2I%p
z>&boILU3EA#qL+he<zWBs~NWc!T!^2YR}eBmJ9!Am%lGrRG#2xcY~k({0Prg&R#s0
z(g}5CVj_mU;isONMD<UsR3rV>*&bbQZi4o)`U~h{RNdDN@c7sH-(`4pcGs8Mhewyz
zkVzRg8=lBg$)p39@Y@@@PpESyf&RhByUZr44-bs^{(QCR^Zj=uvnZnnZ<DNXU}!NS
zF~aE=gJ<$){mzFwsSjHJ@>l*chlhOuSN5ao|9r`>U|;eE4?TwSrARZDp_xY4jeOWt
zcCJ>+hul_Fkj*>BEtY5}rp71o->-?0mr&j79YVWJal+3#yVs58kutXLvQn|Ri=LI(
z^`}mE9sdG1`7G31h!WaL?0`Q!0?z_H-K;E|brs|LzMiyxFT0aVKQ5_ob~W=R6?&JZ
zsRB<gfI6qIy+(E4;hxBvUo3iyf2XPUo8S;4J1*bCadYJ&f>6_8d7&P&Savw3E1Fd9
z6+bKOP0may{cG~1{y?=U$oau~Id~zN`F2A7z{-?Yz-<%MCy#KWUs+40P{cOSX?Tnk
zRqFLXaapUhyBjX*#b_7;jUpiAvRx))zzDA+Q{<rUuLs8PI^aTkqx3&daPdtKii|1o
zj8n-t(tWe&Yq+7K;xD($oejBzBTLj@ID*86+?}#|BKosqu<cP0?bP*W^RHbrJ*0o1
zLgdMKPqyg}tYK}*>2s;Lb{Cw&FrJml{R&-wbbN_UbFC<k?9z+qKT3!;!B%e;f4lWm
z50f{k^4)S>o?Bw~EwNa;Pl8L&Hmef2$?Srocn#T|*PTB_g8HruU0&=oqZ(MoEV)FU
zp;Ea;TTvwG1q%*c-rO)*IdZN(pe=Zh(>b}a0-dN`Y*?|5mhdNU3nBR#HXO!Bk!?ws
zpnOPV6=DEO&ldzCk^u)|t5<*HAZzB-mzu$kUW)^k6ZU-`52OXzA>7r-m7%|}jriSH
zq8CQj7GJls^|SRZ3p7zTN$@fkasMLnvMV(!&jK9RQ9MNrJQ(qbe66B-9;^KSdJDc-
zb>A-iI0*%R9n_YszFe;p<ulJSUSHk>It<?qw-Q_&?cZp+xhER5sQOy@0>15h;La#L
zV9sNyT>qcUgnhXLP?n}x3)r$&Wayt^g3soYZ>?l8#;rRV_nySPv2dgAs%e#7U`1r(
zrkMV?URmO;1c%=#XYL#Y?4kANu&W7kF*7k!+ddKY7fBDsT(DiOUL{|8i5E<1RqcYY
zYLtNhG@xqSRMQ7->7A4Z-EtT(v2$z9hdYg-(~<~SNk6C$AD2o$jU6t^o+lFpO{RwL
zAv|CnuBhhM=gDulC>?J<>LTn{A%r~b>IK95;fsxZ4s-3y+0{LhR8}b{cC$P|C*!KD
znYXTjg*>VBNOY!rGx_iJ@2f*Twk@Wm$<!?&N0oM0jJ-mI9lX>?nJ389Z8F{9!(HKN
zEb%uEH_vI-v}XCyS$4tkV`u+*&!eqf&vBy908^&NI&P07cdUKj2paH=H^cE31`SgN
z{r9%UkU~2+8dA|XlFAvvyxMS}KtP{9K<Ny+YP%KzwA=8yyVyW~NOej>X?m2g9qK@E
z%y@d61H-50Mz9BQ<I?oVr`V4~yH<8qiN`JBa+#l_c6li!%Nr~Ec*bp(`6Y?NgRU*~
zJ?_37nq4?W+bh3EQ{T5=oLwA%FFp})QX^KDjWR4f+y(PkrfFZFqO)vX)SFbfHPxRA
zvKGLRQNfk0BL9^a-+u?txkZHBHha3CcM9v7>{LF{fflZSa!}=v0Ihy(^Hs(2jAw28
zWdzFG9$Vm;(1x69&CmEa%KDC$SkhNfc<?>vwOlGzew7)~5p(wKOJi`r8&Q}skNh5l
z^;SuU!l3gm?=<VB0nAK3|JGmhV?mJJnno3dSs)I|?XQ=Z7hQegXY=ABb;}uxKI+m$
zmCTUt(+l+j*fnZn0|Og)<t;o4V>GoS?UyjVK4!~fP|~^-dKo_57Zj1uaV%(jLH0u!
zSdk<bdu%*}iLu~2%@WJWK3YA5JO%<GbyavqHHle_JpcHCv$@bIDyEAxBaX%n(mu&&
z@q<L?SHtg<FdPD2+RnbXgiVG|TK3iMV{)h$$|ZI2s%?QxHM(y8x86;7`wCzL25io<
zfnWQg5f));&!SC5E5)~ZG-_3}lT}Hc)w0#ym|kB^Z!>kjm5M%p6`yL0eYC_MOPWrR
z#X&Qc0XiGwO1B5cv@iP7o2r-lLNh_80gYif(~yH({Q2pjk=Jcckbw3Jm1-}LQ>BF;
zp)Z2K#A@pw>*YUY9=e_Rqt|U7s*lGg@O6OSgc}U^@iZ0^J+es$IT7j%xS`KCnYH8(
z4|~WQ&$48FP1jU_#_!_6E;W2mm-HkAR&(G}gw(@!=`#5^MnsN9?u>(JU0ypDO<t^P
z#hbY+poTPizq=%7nJIFxga8`Yo@1HrPVanfDws1p2K_z|Z(i4;cigSxnTZ=YFz}tG
zRwv4lxJIj~9wT_%Z8{P3<y=n=75Ms`yt_!k_O2VG>OuWU49E&16-mfLG>vA-M972k
zOj(_sazNHv@(Rukee6Be`c#fr8Y;$^WT=1Mal))g+;ESBl^QzVpn^}bqOtG5y*>Qf
zV?3quGdkPHN!XTo?2i14$oV*&v66_|Z%tafH5#`+CI*^x1vPTyo4y=Lx5#i2t8UeL
z47wJ01+Yz~J_#SOao@v3xQ3aQj!oe?dO1#7sCr?vhq53K{&x2h%9gUEcEq@ULMoZQ
zJ~a11(DL)v(9Anmnt<WBD}=^hY?8my%#SyJ3E8F{v~mcLqY|)OE(Wyul*RWCD=A>&
z39*+*#a)Jw>8x|q>}p`FrDr$S)uWiWo<Cxs3S5eMotZkdR~{wHoX*XRIa-l+J&EYF
zyYL#t0tA+B>SN)juj&l@wr5gaS>Y^T?7M(wK3=#$0`0IOJ|Wlo6i0-hzwh1Ed_uxf
z671cb-;Mi#@-ma@K7#%TK5d0;-qiPG#h2?HC-n@~#o#qbvXHOqd0OXtbHItRiZ#@X
zSD&vd@K63JBP7Q$o1U$PMQ*NOx#b)mPXkq8XDyS)S%3EnUiS1iUDQ+Rz4n{G9q>o@
zRyFQx<`Ov8ptWC{VLi3c%T+xJ;2P?5a&B;msK!DLnX@WNDLk#)jVpvsLeK|?pbAzT
zq{5jKqA0#@oqhzOEE%cNKb%_*$9F91WY+dZ#g#$D#%6M+ZM(&{igNgO6l}@H-?K5@
zjJB;W_Eomz=JK{wzRz0cizuF7?&v^M#kPis_KkY2aTri5L>RS}N(lXU0f7<B7N5O~
z<Vaum`XFz&<vn`?H^rE~|IQ~3xkJE!Bn{Y9OCzLgF5FUTi`nOJgCuR?JJ87af?umn
zgSl~o*Y+cxWpA`VQdA0?Xl0eaVb4b5Rn1}MdEJN^u7A;b>F#IC_E0c|2|w69uPdOL
z53RN$Z@ZYuZT5<T`|0+)JQZs;_oC<OH7qXs?qZF=i=X$q%hzhabS2t=0AEPnl)=hu
zH>8rtWxe2JcmkDhJR)(_OgRh$A$u)Fa8(s*$5LcVydKoOKLW2ZsFB0JV~=#0K<o>u
z@s&L126x3kX*g}WHJaqHbWKY7GaHWYK9B>+$AcNWLvDjn<*M{}hgbJIDZ`wZLAoIA
zai4^a_V#D+KdxZ08FLG^W7p(jLBk@(G!`psaQkH~{MlZCZ}Q`j3*sja^ZPS%oDu)@
zJ8bQxeXQa=-2`U5H?5y>K4)Lt>e<+z!#hDMdnJAXuoOR#s#-+Qh31sOPGHmAzNlYY
z==LY|U~@m|Me)!Ak~xKiDg*8oRtRxGnvwJXt67eoO$Wu&#z^uL5a%|HJ~af>DrL_l
z)S%edH)eY#24kl^r}?SJ*a`NMXE?t!RZsD+16+1q)l7FB#TO7J{Vni_R5A53o!h9`
zRC;F_lNLd<a)aw&+GU6`KCt%J@Y?TEi2O@KTTjzUWz^zDvY&;AY6qr{s8M(c9Q#_?
zIesGc5+-z`3kcuRWMYt<zd?Hz#N4+deY2?L;KTHsGL4Q|h;G*dnW)`dBA>e^;N-Fx
zK~2zXEmZ>kXPlvfF*NX27)vaWjH5Y9T{Sllr_eZ)+=^W2{8-4A087BmQf791FmCFS
zt(HU3RY%c~He<ySG$r(_mDh{=0x6OU^xUv;)91R*f|4NF0-s(9s_F(S!NH9-t4>=>
zbyHazCL5;<`q+i}=u$$-;0Osr3RmZXp}Ifzdvf8}MU}&>aj!dLrqBF~T^*p~55E^F
z#F(&o2kFbm_krFLx^LgM%Yc4~GO890mWdg$<!BzK7ymoVGvLB9`N1k?Dj>7En3>Wb
zO+GS_n(bEAK&ETWd9FgBX1)Goc(hig9+Wnr9GvjX<#ze_J(R=BeLUXGBLUWiuloK@
z1<N9nX@DMZ`f}B@<-A$h38V@APk92*b3g`-Do%%_1n5TP!LNgALu!qv_|L44v)r8b
zL;OeSgwCwCc29Wo=e0VrqV=(&-^UO9pt+sB>OM3*l>`$R7h?ZG0goJm{`$%Cac!m^
zPP^zdHZ}aV=6JvdVvpeMxt7Q>kCQs#O?j@X<quW|keOpj<QXaB!OPADTFCeQ(J*~K
zLdEs$+Y`^aKaEy*S4=|heH=uNsAh9Qwavrt)q+zDa6%(5sUYYIvXk{$;A70E`*6k&
z2%uqSI_4|N8j&|}WiQbGRa+{n41m%4`}b_(Y|*++$MuH-G{sL6A-9O)yb+NEo{Q|v
z5Eum<yHU^V6iSV*K&P!^%1NO)va%(pSYo@E-Bm$d`B~I1XLe6LZ=%LN8Px1d)rA_d
zra9}t%)apy#&)AhJE-+M?<-%{s`g7(J=(_J=1{5|%0Rh)?AUet7r1_M&_`E@UKpxd
zSInL+-N=U*UaQ;2UA$M&k3PgvEYeM=kd|mK?)7ln@)53Hq1K-LxS;;wWaL}`jb{)h
zA*fvHnw|tK5rBzXuhS+gfpU3VW~)65Z)t@S{ATv!uYi=s&S`ts$lSsb#TcxlL^e|`
z4X?o_uzy}NP;1QtGGAw{dP&ZFg<uh__l=}>uSK2sk2gJuN7He?bZs;~9LJ~_JzddP
zeH;Ho{*K6vrK=^HFpqoD9yaz7{@@X3MSbE}_D@V}c%y%onflKkt0y02MOYd(!6e*D
z8viX*<`<Gzg`;4J4C$7uM5=IbfUyZqUpO?CszsZ>%>GT7mD6a8+CnN%W>CzC<xx^=
zBm}ur+i6I_htnLVSMC9RP2`+;e=Gsq%}dWvGNCYX(;RL8QzHx!)yX)S)?L0_2~db=
z_y;x7F~$eiR=F1OWB`;+qjqq{L}?1aW;~#X&jGM73_}rvygA6d#VhlMW<RWyp)o;;
z(FkjdRm>tM4AP(3f?GLhm0dEd`)!M39iGL!6yPc8rAAQQF2G(v*fXAg!TvNl#TDe+
z)0nE*963XYp>ZTTP$+=c{Hk$8z1qMItXX6AJO%p^Cc5yZET)ft(gqFCl3=rgqdTV{
zmdWa7&QIp?g-$*L_<A$#Pi9K;Zc(NaOn|BIN7e=h#sw9Amr2x~jCWUNEdiIe*FV+v
zlJf+wIV^!2EZ`7ar@Nb*V^b_3F-+wzPf^#RTf`9M<cR9zIuy+&#3~N|*wLQT(q#};
zoD-#vEZUp9Kt*JnjdZht=KLOVoLy)ogVh^X{QS=W$Dt~PSm|(55YqTW>LY<hI7v;%
zBVW7up=@vR;ejQEMJ7he_Y)!RnFv^!$KISiw@_>{-J1d|7A5wZvyY;rQV9dM&Lkg-
z#yUZon?}*Qj2FDK?{^lr{qMaVA!o>SQ~H_|OQWKFMf$`KZ19#pyubGVL1EXfmhg&l
z>w0F8*Xlsozo{JBD3W@mg_U0{Am;h>po4jX`>#cBIQV`~YCgM;Gt(kMVkgHQmg$9|
zXH8D8o(0JErVe1?aeYsD@S+Sbi%DHHS&MLcn9`j|Uv4PCJ>x)epgqr8$bsut5}_hq
z^rM{U6^7Fi=RfpO2UY=?EH=5pSfnh7+Hs}H>>jj{mCvh}6t6H9_c36|77Eg^+%LLM
zDi5tl_X4>vE3?SMq!y$aYJO(V1n+v0yX>3t;!FW$<_a<$yb;rZ3-dE1ao$(n0jW$~
zN#N$C;Wi+Cci)NWAE`_)e}|QTyED5<y<Y7;O(MT~$?11A|2pC9B1Di2<`Seq(e-YN
z98MoF>6F~<C+;fOi00V!#Sq<qtG)?|8FVh!;Sq4pd2mo)e{tqAZgSS!RR@@#EsLC3
zn97W@USC<cn6I;{##>cBL?Xms;bOLbH>?V*C3y=gF&UMM%>J;^x~|K)0Do+zL#noh
zA%*5=8SEdWsv2cNdc=W}%auB1x5G|Q!A15f0-+B&(&LcVymm87c(c7CA-_d8(Mo>9
zK%9Xt#o|k74FWag_&T?r*|pG5rl`tsZ)t#px`ZfxvFsVWc&V+lieo^8H1u{fFDE_;
z{A~Gf_$Zq6>N;b!ETz<3k<SdyAmTNrf<N!%G;9EOxZiK3(gtjL&h1R_>31V>m?(!X
zyXOwWfRJX6I4hO_<X|&%jGx>}r~y>)h7Fm^R0Q;+n)K&QL4LV`LkGe?kQH-CJM9+Y
zs~g<ykiE4I)!!Tf75b*xcoAgigX94j$p6Oz(D7$p1iTktTWi!5WzG|I_3g6xJv<~9
zVvp*6zo2)H!D+nh=iqy&RNQn&*F0InZ@D3C)(q_GbrI7@dncaWS=i4ljGrf4^Xpd+
zs^89;RIC?xB51dT$;qlKXz5dr-EulxS;DMENTaexXAPrPbtCruxgXS!h%tJbTb;l{
zDrBy!IKPjM&Dw@m|0Sq;kBR~NTH+5hcb6b*(E`kb53+X9^S49D3jmXr{fyC73!v&>
zY>7_ZvNr1G+>S$H*ng(LKa(Sx2B*I$7s(|Rzswl^!lqZ0>!OVLbjfJ7RnYvJoF1sP
z<@);9->~J;?(H|OFSq7b?<VA~<t2)h8Q#j)R+$f|<Kc1o4Z+Ow*BgpOqONi&#kp`5
zBCrBtfj(}N$8tZ05s-{^IXP|K6NMW#_GgydHZnJ!6@NlL2kihd(ibT$+LqLCwee`b
zD;4|NXl`^VCF6q1^V=#`X89SiSM_{Ttzk@8D|1}fhTui_>DL*g-F<+6o><W~HOx7I
zbTR^BIo1U^J4?8twg}Ei&|Jhg<`z-zKM^RXq2ufws)5CTIb;I`ud!sTJPAW`+F+YD
zBDgUK(L!v<KV$LK*~22gT10?ch9MYY2s$YI06+LR{<J}_0Mdn=fz&y6-yrCtr(iVa
zcgz}qD$_6?0kPs+&{QkMc(EREFv#xxEG)|>cK9F*RZIpt>^|D&JRH`J#J0`Z=F)>>
zmHF?s#{3?V_Nnhlou{v;l;TnxED8H9(IakRbefqQ?keXCSk52)FE*0x#16MI?L+k>
zCk?SGaO?x|o)^F|q=_&o&C>Zu7}~dlGm88m{wWPq8Kh3pg$d5_-yu7Zx(RKK7R-99
zeyd@Y<P}7m!1Y9UhudTmM*teQR#k9Nc@^w)eqSrx^p0J*DW9$jwnB4Gc@F>7!b<bH
zGc6aNz+vx`OJ<J3%Do`<NO2&G-^S<^X+@CnJ~#9xyCvP!BGPOvd8rmv^g?qb$;)C*
z1mw+);dL4>(of_OZ(%%HN)Ed8rtT<OwQ1^!>S*^Ly-%?QcwozRccHq<5FeZhe`k#e
zQ9IJziaq(eE%8Y3X)#~CKdY4cQvIu7XTTiZo+HXxIW%uwFNHFA*}YeMM{E^>l<^Gq
z(#G}mT;yq{c|Z8qb#s*Tw?f%cNMlnzZ<4Phy*S=JdfDU6bljbXth_NnCT8Pb`keF3
z&D0HGT*YUStY8YxIhbb|@mWte#gWkklk&4V%M{|!4@q;B{l)b8zNPbTwI(Gi&#X$I
z%jSnDTwSJ|a$08vaj=v#Ja?H->2$w5HpXr_B<8OBf2Xo(rdRU%VoK|#(rjS0``!t=
z&QocoD=|urYJ*@Kyz0Eb&t4LZO07S4|7}3rVXHVhjqEMpG<2j^F^Ad}bq!Gful)`~
z<J?Vb?`igpq_9XX)j2H3Rd;o8jp1hA(B8t?z9H!2hG3@jwogTDPq2EcSG9C|1b2|Z
z2lzoiu<ImW=YhjNnR?$7$<~0ktOxzYqX7%>c_M>b7Mm@<TcpOd*yQ^|-_5Kkc57zz
zJ8E>y{Ol=@^iAbRZqtRCWHI;7`;Qg1jcm@uW`kLZ`N3mTOZQ(_MBtG-G|`lRZxiyV
zzX3JIQS3%Atta(;D%5i|)YBH3e7#zlTi5OF`gXuzW%#sGw^5t;%9`!$ieegfz^Bjd
zAI%SnS5uL0WOGa%E)N%A8q4>j<htx3L@AmbtRE!h^o=Bw7ePR&cC+o}j-3((#kTiK
znM`U2>QoE5(PN*VAfgw=jDlY0KC~}Qda)c&Q4WB=+r`FKqQ}s&`VCSIg8{rrEYJ&N
z+lX-tG}Q9bN`R=zlX1E55)2GBqdUYuvk>oPS%A|Wn8HPm^n&{@sK13F1flWt$Z>kH
z>!RFD(6`tP#Q|}MmskAKu4)jqYzn2ZH;zuNxIwfWDNM8E9hfy7994jZ|A-=mgt0@h
zf}eao@2DxfqHZxImEQ)F1CA>lGlCl&Y+b9VU9puUTO!l4kB{PcH-Qs1c~h~p&d6L~
zp+#GdOaOCN4T3PIpCmf;NAv)WJqYZIG5vSJx&j0AUX=50Op@XyE5GojQ9VxlyMHUc
zY6~3MQ;xF39Q%;~c4mO6qWFLS|NgZq$r%YyK2a>@K)&ye7WIf_>HG`X%uV(2A-dp!
zjS9&5x<UDIdRn3TV!Xo2vQXx~s{&Z#6PrrO`L(N=Kfz|v+*4TD>iQ<r{{>OMERtq+
zl+})4$(Fxqo%E?htc*`HcF@4oe*8N>12U6a@eon7jMJK(G%nNW(ZSje%gh*_lU=DF
zR+~-B^AYM5?Ag31cgByx>tZ%8!iXMdj$A9-ai^!xXe6=N+-s+v(u_o?B7&5d2iEsn
z*v3KQjR<I$ZZBS=GQSd;wyQm}$%Jlx9f6KLC}lt(NlWM8N+nnv)<p7oi5{01(c*!~
zrfodVkeYxY?rA%mq?qIa^6Z-#CEOr{IpbF3)#f)edh^OK4jj~lV#?gcL*VZKK*DNZ
z9|S4PSauCY<0a3{e!w9t)IZ^F>E(mb-o(HL8)R|Ilswhy0ns27VB`l8@z>rT<zwM4
zvwl?G5Zn=WUqF>EU><ekKOPk|hVy^GZ)oQGoHd7AKWvU!W@wga-%ug7+gxk*yr;O|
zRy;8@6=ESsBZ}DSRM5b~CVh%VwgTQri2u?m0CCT)DqmM<Wy@ztx0G<Q_(gIlPCa^S
zcuMy_*8~g(K_^6-(mWAf9z0y_%b_;+x}g!W5zg)CVDlh7QXQ`Nd4D2nF~Zmm<tB~#
zO!>$1iEJ}*Sw>j7D`NFKVG%qC!}`gx3>7Z$mRLIqGbOBRzNfW;ZNonB8YLhq1H|O4
zx`$Lrp?lRBwQ4B#D)rRQv-FmLx+fEprzRX@DnTc0(f#v(3$GUBs_>SL^t4JTY0NES
zb5MchLJw*7(u(b!Ax1Co|NbchTK;(f;*U<)G8z}Ag$IM&`0gR0bie<gB}(Yp^c8Ld
zlhAFxsLU98Fel&8kOZZ*$^$+!&>5B>J*o6Y+*GX-yf{w-&y^1jtj#V8bf4dxrrxqn
zivipqN5*ru{7Zwr66A2U6QSY#$?jsse1h3j%O*z;yrgTx%+y;$VUc^d+%Me{hsuT7
z_<dBF5FvYnFo4(ywrO8aU<DT9_|tGi?n&h>pei28CFyqtJHQ`pL#w;gy8n|mnv#$0
z)Y%0h4?hdSMJZ;~0Q63G-94>B@snIsrX>{hB{EH~%ba-AXFZ$$``kg_?%6#kXTZhg
zsL~FXjqd)&hJ|$<Kt=pyDu8u-fxxMqMt1)=_fBPda)eXrX}Uy!olc8}OzZOGXEo}g
zs+q~iJkZWwgP?hPw&hj(J3@$WJhU4eov{QH#+@#!PG=`4qfl-yRkOSm_Z;$Hhye@A
z&;l;M-cIcyvpdm(uDQCuK>JBUMbquC?skUAd?k1pzqRyo0h&-9tTK;46hWF*R<E@}
z0GYN<9Eq8Xx3(4~QuQ6bf*FJP@%3^|`-@Q-flG-SI}5RMH&IFk3!3?Hz118`a$5z#
zd;y>4E~M8*aMa;R;2{bvdmK6TBA*61&1Fr@3vuq}prc$e0E`2bqkz!PlvpTZTIZg?
zkZ7LkG5{>1RGXHVL`k6;yfiTeIxf%pn0aff9`CzsPAJpin1@3T`}c2$Kn0=Pur6f3
z5bz)G_Z)K#(2T-#A-)K7LU)$c!fxQYhJp+Kacz!XoS%sOb(Sh<lgOTw!lj%JiR1Go
zO8@c+u~2#85p6VRgwt|(BbT8vG6yg)smUsZe5Bm{ZrAgKu=%MZb(5wdL5-sTR<!rW
zW@q^dOp;KnG;Yn3g_0n94|7Cz!a_<x!v?@$XcP0udKBuG)mlRiE0|ekV<~Y91WrSk
zk&+VSC8_A{@HSbHUHhd12?3ZKFCSRT1m|@}Z2zdcUn!1!pIWW020iv=Q4CXLyEJHC
z?lvq2gTtL_wrMu^2QGrjHJ6{T>pu!%@zu#`#1z=0ejod<?V+wPi^kf^GJM^ojBYGX
z{V(AAUoI02UWBIpy<YMm?;c0hfwa~b7C6tj#dE_$^`PZqO$m5uH?g7bjzf}6{<;qt
zq@0)N2mM+F=xwjiY}$YL>plZKC_*8sS?FD}ujH8LeJ^dYPCn_IvDK;S_P)jx<ogJ{
z3bSCChkf(Q$+n5(FA~_lf1L|C7Cm=katJX5LpY|0*^|o2;?+i(wAOpnUA}(7X4y|j
z>&UxHj7QEN+{=ow`qrbXGo5xHU=?MNp1q6wXvz*MMTL-NH)f;BC2(-bjdX&-e6Pe5
zxFWeK*K%AkbA(qlTGD~*lY^p}pp*d&@#$+BDxU1zbavY1h&&w-8W_i>Zhs_WexbVy
zv`v@m&f5A)aMh;M9w_wuo$u`a(O}kIeUT9hKl(0oOi#KnXh*3DxpvqREg|k3-5}9P
z13Onl3sP2J;Z=q=H3gYWoX|}{C`_ItiN1cHWmA2+jBk46DLI&$Cd`{%oe|9ADBTiE
znR@w6mTT(#oV|`j%y0&Hj+Eh9ip`Vwu;3m8B_+>pgL!c<Qqd6!FO|XF=Tj&XOtHU^
z^}R?;ss6d&_U;#h)5DG{Pr9B4(RjRtLskapiYvDHeKiAYApk?I^WFQ1Z(#^qemRAW
zkylD?l-(x~cwHo>$aMu6ye$dM4gYtFYp+SM7%mCIk_J8Jd9VqL^pN20*pmUEZEqS~
z^bNj2n~zS~^i7!}UT6tG{0ph-WibvznHk1pP)xrXMeth1&c%(i{Y&%rufFg#v*fXi
zbr*45EF(1)praj}!qo&!1s5!;h4saogY~~Vxf+rdrVwNM=Bpx$f%bOPcoKW=>+03o
z8YY{$A-pbj{&kB;TF~!O#S*TIkOJTyW>C9Ffu`39W7&M0-;64)vzb}n@bnhk=6|TK
z-N%E^)VTUqD8~6DX<mACJFXAoTy+G?a}0L$XnOS6yc(g-Zyd4Nnurwy#|4M;x~nw=
z->5vBbip%m#Qclj$A2~k`V@&)I4;f~5?FQxyy^WtjmOUbYGKkLAyRaa|G+QcGEqxw
z`NhOsd(tA9V(EE%4R&fFU8-l{ppQa1<Jyj$sU!wUXQ)iXy-Ix!(aj|PCBXw*pmhN?
zH6t$8KyfyR!gLPf0T_BGxIuBoc}T;NWOO$rVF|*JVT==RfrHm*MB=rm4N^En;hJJM
z?h;Ttqz?qIK~FuLm)onv)?o?v$D+Rz%-a8m6Ey~V_^=TV!@@DKf|~omi%zD_I8=S3
zNQCT~64Vr?ow&s?K6J#;I#avtm0j)4)CxlH3q7FdfY+{Rd??zvZ2j`gu%%SZ#Y=Jm
zU(4Q%*Ru_#wCl%&!6&z^bU465$5l7A6JF?Pg|j4b6)+aoH~r@ayh=UXv_QfOmT?^U
zRVV4MbXqxI6I0Z*eT|!<j6W;LbyT?70Sq_x*AfcLI`k#ju77MJZ+lNnlmL40S?Des
ztE)rcU7iaa+-NZ)oj9loH`nbI2FPuADV-CeLFQl$&(sf)z;QajzmNz=<~+I>Z3IWO
z&$b^JZOFH3hvZpF6>-_eQfTiqakx$w5OjZ5Fsv9wem%Esp+M-!m-_gR5&JK#4;En3
z&jnV%Jk&s1tgXT^KF)Zn_}e$If51a&RGB2}>$x;>@+0c=rJY>kUiORq5jNMq^sx|+
z-xdf5^m`lg<#MCOZ^SuVfX#+OaRGapBB<HqTk1{|=%WOPN;dw?V=*20lqpyI524#d
zjS8PnBWsa5OlJHl$yKf$SeazDeVk-eVB};vdC;7iW7|&5h!$F)@(k+YoQAQsekk|$
zpP@nR28RaIVe2YpCSnT4>xaP?--B(gKe$5@&wB5?xCh4lI1Vb2a{G0b@Uu+gonBKq
z?Jvzg=Ev~%`JOB-U9$d*$+o4&fa89IOB^)O${9q}&e4XJzf=g?Tr`+-0xP^DPK~3q
z&*S5gTk4%~!VDaNoq!+r8ZBWn>P;Wb0+HM{?M_NOX`8F?s3yN=y5A34Ok+sgdyP?)
z3-jkq7!*zKuCHJxtKoGZgCkT`dZ>}8AcPK|p+1e{T)HXxmQ7GRQKSE`{q06BHK9FM
z`A&E7GVSsk)o>X5FeiC-%$Is?=v*M_seQ3$aIU~zea*c-V_v6=lFQSwu-(n$jByNq
z*2}!{Sw17OL>KE6e6&Yc20Cubwgk|<Xq$Y?c15mOaK!vgX;jaWW0z66j#|W9o6$G~
z;Fm+OWf_OtUqIm1H!*p`(dpRI*!1!tJTmF{^Q?0bJQk29N>mU+Tng=of1NJYcDFQ*
zG-b>l`i$x{YH!V<3_ptetiJ&3W!su^Z*Z5dv?N4owY&;pdS@moA-z2@JZh5PE!q(U
z?l`HiU(bq;svkf-GOrXG`*;k`;W!|VK!n`Z!r~JK!l#y-()Ch>m<k8%*y5+?Pr#u2
zNH~<km_EF+qkPJIP)B(0Ly$o3#MnR0w%_8MvA{FsO$By`a_`%Fa-U^7@x_-x*uXfw
z@Fr%f<6`#ys#w`Ma6v|N>#8OS#WO@}*J}7*dR3n@Ez}mg(OYq>(9aTrO$Q4D{>c&Z
zt=g_$P-!vjiWs`)&e|Tbc68}jHprn6uF}(#o2V{Cz;Vf%CX?(sWJ};YJ{W*%yFk#+
zlVdxIGSF4;o`drB2~<SV1)kzgon+T5zUxD#WiyE;1h;EmKoVqSN3d{?sif$o<Dc&-
zg6yC4@&$#VU%8*<uPRO^u7+StS-Nb@RB%0}szvnwweLqF{woPeHijIeIG}%Gso<!{
zO#@q?CwDIFlK&+X=8!fHSbqAMU!Q{!%1Yaszq;iigFpRC0QRR%a$?==K0m?_EpS_}
z=~ko^-^Cu&Lgv}_lqwWa-V7zGC)XQ>2wL5#u39WAd@Ak;dF*%p7xQ_4q({=4&mZxG
zgce!Of0u9|J!f-*d`kEKrjOKEYXgE+Az#ZGwU2SZR2|LOr#N2__L~f+Ens+Bw7TOD
zinO)gyuR?#e)3>x_P=S-Nc~ckYJ*{7LEJOzCrDGen~soP*z5$Y3jsxd82+PJ>2_SX
ztP*#yuuQ!j{e4SGjkTKV-#^~nF)eH{ys7pU))Q0*vjRvbZGQhn#obLyM18p=CHL2F
zUMP{3(;ClF_ngo4jeE|c6-sD_f6>%xWQE49zozB_1J9sHQ|Kr$6+WqEI8<GiY@1?9
z6qreg@J)z^iS6#d(ZM1U4vQu!1@AjUdscy`r5M|}OLCWy&!sj_iyAMtcj<|TQ7h;r
z_<`CPXqpOh{Q~M}jEgdhW53tMpdXDqfAhohD_4BMuF_hoCo+qiR305nA{J^PT*leI
zPoeDP)iO|)C|{E1B&D=fP})n!Kh5frnE<*B{a_<OlVy}hEWt>Y=sG(^n%J*4t{th#
zjJ(dEWVtR4-JX|DIk$o<3SaZHi?f4?>edW6)oXpOO`|AysZ2HBVJl11tkB1(`}0JL
zQH81A9KLmKGjb|dY*y6%7|90PNRVmz64cZ6T9qp1dpLXjX<cQbgwUPEf~*s*fWHSx
zb)`*9$SjVHR*?2$TfVO~-?>}zeBz1X!}$fOm)rK#FgOK%q0-;RP=RMUfQ~WsLmfr;
zOgASjF+Wbe3<X@VXb-h9WgnPJZf<=*a{zoRxI?Lbqn;fh9q?OK90&f^Qf}3#k6l~E
zV_eDkSf<sr+3yX@CQSuptVg7$uMH}R(rX}*GGo+vH$^zj#aVt$Z}$Es9=+=`jgdt7
zJfFwNAGcWb#I;Kwpx3I_6?Uu#g_Yx+F-t1(%`CT4SyX#U@-X5-^Y&8SB_MXZK|)GN
zY3VkW?+>Cu(wIvnw`a>MMppYU)@9awe{Zwb6kj*E^uQ$(;c`)KK)L;Ld=yWp<r9H4
z$7?`iZoJT$XgV43xIKF?sJb?p1XV!FojcpLLMnR|hjyuT^q)TWU`Pd=yRb<JeCq_+
zwHFjzmPJJ*x7TIB6F7bj>a`#}1gCa9|A#a-1f%R@+E3GbM;3;JKbsGwZInA=u_Oh3
zt@_IUtp5!BtK~LE@chS7QgUbvrh7;U$M1({y{W<(&sSOK-E9ye72+!vPk_a*OQlaT
zsfIkEKfl?f><vA@HizKG0i-Y8FAc<88`Z`q)~>tPtZL3wSUfLdd25lUwZsF3qwety
z0bbFcz)ZU-=lwDZtpsp_RqwhnJBjSj?H9Qv4e;dsN80i-s!X2kSdfL(lXct3eAW{9
zQQrqA`b7B`PViMgDkyN1v~v;vN@A?gzNM%zYN1pPbPDb}=nh+XXw=~lATy}Sn#;CU
z?lUDN9~BguJY>6AD{n$E0mDwvo6bTW++|5Tl?^zAbS?x<y#P|9Cgp1Ls1XOh4qQFR
z?Ha7fSdHS!Ajyzy1t1k1ha^{mzVhn)I?xj-I?fL0ql|-r%p=z?ImvVBQp`ak8)7v2
z>4Fk6V^cRLZW2T?x)^9ETmZK^V837{BBf;=iU-6!k!vhNRp~3<Z8=8g)L3e%SwF2F
zt@y;aiFlp~jr5$#X!22A1OI}BXX$tZ_%+Qs_)W>J&{lIV^WZ_wI_!Av;FeR{XDKxA
zKs-t&JF_uQz@wfka`GY5hUw;cR-?Hb7#eX=%Fdr7L&&C=mA@`i__ewH0f}g*dO*!h
zsUxeu4qU853QjdJMzZlWyMBYZ+c90@>iBX&%G&$v^gC@h6e%z1#bYc6(|wlZQYS{{
z3CdU*5xaAUP2+D^)(;{2H_Gzi5B)}kB6ZcJ_2N>YyduQF6|r;<k+k{HF-^VfcOyny
zDYXw`0^$~M8`F3gIKTzk%csk}`zF@VS}VgXma?m_-??j$;bL7dT)oN7qR8`krTIB4
zLC}m|WEWs_Z)A)7b+c3t$M)n4!gm(j>G5Q6{}jn(9(c)GT{bP>f{D4Y4Jc!wVba08
zQyeZdH#WwMuTGgd_{M`Z-jknhc%=hvbB>(QDRjs1p0^KW;tIH)TM&H8OO+}mx>f6)
z+==r-%uS-oNr+BxHDD2}fmmh=*7F8nxy@Su$zpRyB-o&}&iHPGU&X#Qa*oiV*@r@g
z$z}p$w#0#jVidX$wF$$jhJ>`&8z1b4>Bm1hrj2vbW}PSB*mb}o0qrsKV<&mS<S#ab
zuS|`gl82zORJu<(v`V4LD~ld5VY&Tvl_0KuqYhwGQ@|K`l6J!_W;deLQ1^$Vcd`*&
zy43yB+)<vt=E6SQEB$~^V5Om36{T?>7dppZ*f&cZO_H`_(r{nseLjXHY6*UAH}aC$
zY(kaBk?Y<IxF=*dW|AF^$_hwwv1oR@vNl{>WKkK`?{>3XkY{*UH7Qr02u%Qrz9Mb}
zC$Q`{I+MY*ID`{&YaLBb<XT3Jyt~(;6l8wkD~N&eR!Ic0Sb}GcT92yB<A%hTHn<NK
z*RfP22xr2+7LWwiRGpMg)C8u>Q9aK*H&BiDuT@p6-CY%H0IIHcl;~nu`9*Gq#rLIn
zwiMp#`UGEaFFL;)D9J91f3^O=mY#Vq?%u(*z>HVNR`9Z*CDU{_p;~MCKG*g8vKPoy
zIkEd-r+m$Yp8#!lygShguIVLLJ`&u}vfm+eOSjeP$xzk7JvECRZGNd16CY=oUiKGA
zS7pfK!EG#`=%$HtQvB_du#wM)by$u46|Ii066byO5a}DT5!pUrA=GxS8{@Nc%1++D
z3HFy?Vxl;;in1DuM;H69#P2oFV^|jV=cOhM1nJ*-e@4v@#{4=hn*EqQK6wd35obUA
zPL22F3q;8>h6WU##fc6;%`*nwf(V^i!z3{0mVrRO<|{-Rq>g<+!YxzpXLP8F7$1lC
zhp~W&H8tKsl^3$G!$Tmwp0NhPU9m3Ju83LlsOh{H5fGNud<=GN!B}-HU0^33ef&ip
zSXCBkHxGGPmQP^U{u>{fFN&cHZ?SwMUtr(Iu(F7d{9I39<J5mCG}lEzWzE^%*i8i3
zzF8(F>Nc3b#qOb}Jy6qlS!YXO!(}%xwVcSlRsebbY6{r#^?%adTIv4n8UqLuI$tuv
zyHNFd8FxIvM!Mcc5G^9EQ|?WI@q|uVBe{mwzaD}@zUSKRfIl2#&La(+M2lqpR-p^U
z1cF}v<}IH&jg>m|jI_<(<+V}pPF;Nev{4egZL_^4k!s+Xd_I*ZA-DJi-jj}CxhJ^R
zb@pHIyo-%FNvx1__*UW1zyLs(^J@?%xKQk)Bc}=Au!*9_YQK(p89=s~&3Zt;UV5?@
zDfmN-;J9~uA_atZ1<~XAK4yO#I;9J~iwuO0nY%C2vNgl@eKWk==)vnY@zxj=lmCt(
z#P$yo87<e)d8EfsT%QW6Lw?(XM<;|+jr1A*T>Q>$vqI^e@GzE7x`+0JX-^-N^#@Ds
za$T^IfYK~Jg@5Or|BQb8;POu&(;QE>P7bWAp>`AI*`ODQeR%d{)DVJLXB;0rI7QQI
zXEaa`_1n|009`KyR9N63y&g+$64lc;v!1?ZfYf8n$s`xG2M->(+~W*>kjVfsHdgN!
z6y&jZF(Rljo;g_IA$DGm8FweYh1n#kLBo7O!x89J6UBH~Cp`Pn*i@s3GuQtb9upYb
zOEoq$x;&r<OkTZ(kIrS-X$RT{{;PT%dA?cDuE%DzxgGk#sk3-<$s6=Dwan864M!Yg
z?Nq#8*o&#?wkOeproGBq#i`Ydo?Atbl-!m;OTA__bOr8j4Zi-bf6Vb-V{N57Ih9F&
z8eGzc=WzbPyMpU_Wkf_m*3d(+0SlnJ?wv@PI&4)zAuo2yqJNV#_>Pg4UL%uD`3{HC
zp305zJj~j0*9TO#sNOYSY(YoF-P4r&KNg^v{x-XpVe~g@xnxdIPl`u>dyw9ly?%DK
z&uX&f1ofE57abkXbyMv=fUWAnLREz6)fR_0phOcr*Twk}ybYioo~^bv_v?EN5_aS)
z=Bw*6t<T_6ZXDZ%*_4qB?i6!rvG6h~&20$^z>4u`H<RteZoNU+u5>1IYdC|XV}$Qn
z@ZmZWV%Usmlge5!+1Av23zPof#nH|orE=Jm^N_jK#+(%Y$@~^;ZGi7c@Zy3P-x%mA
zkj|gqHN-cGmTqwP+KXr8fA10IcWfM4LXkgI9j-`Vuia7o)Ol@G^!j4~9<@pb#Z$Sf
z_}W&M#RMwc8<K;pKtx<V7R%?JnIIpdb<FRtv3xQ<@s~A1%r8eG=Hk(za@0X+0h&2E
zIY%_P?|dIG2Jf)GJJ8q1+s{+mdA92$1*=PpuR#Ntbl%goj};gj_wCk!C;=^Zu8mO)
z1M12(3c1y+KXhKW77S{o;-tQs0N=K7Ide`X&sq1Wd^P^77}@qqedLo?9Qx)1f_QQ<
zmTV&Dsha#L)&Wgn()rZuDCqQ#I@c!6C(adn>{jgQs}9_Lj_1`9o;6%0R6P22%4WvC
zQSKaO>d&&S1H~i1l!KtnRT^&EGi4;(MfkMw^v!ld4|UznW?NP+mFd`aoi9Qw!ozVa
zk4j`3KyZohGtQ(X1ZZg@(_JYq&bTLWuHvJ8XTEF_#V|33?@uews4Iu-%Xd0TWnIpB
zZLhrvc&)cn`;2jaWD$?CTZMCALfuSYR3X4C3$>rsoD0Waj8v8V2bWhl>F#U3ZDdFC
z!wfO!D%Bz~m3ltM8{4aY7>XyyE7X=xEZ9Ld7^KvZe8jq~0La<64RT=Sd_<FlD)rVZ
z<|AGIXSP-A`TuA-=io-$uaDQ<Zn?E>Y;9Y+wQbwB+pV#+t<?6mTie{4DO10BelzbM
znam`U<hm#4zK*`v=OEjIm;JwVaYZ9KPZ{u+B%d3^qm>g!mhPf($cE})2$t*x^+9N`
zLQk3n*#g6JwgeN$$ZIR=Rk~sy&~D-Y;p_(?ABUgMIO~0mB!V~nq4(FHLw)5>y-z)U
z2PoV(b^6Lc;m<o^oO|^ORBz4YDES#40+^kzd{iY7jZ9}+oM-NY7rO>|>WSI`VU4{0
z>lF#@OBdh8Wn5#Wm|*Q0G+9j`oOg#9z}OdBfdf!tmP-VaqXccfgLn^l|KtUu;PWu%
z+n(?%Yu~m1^}&CX<cxq*O%Uqm-^i0k{?=I(ZhJ74^No~AdtQp<Z5RG|A^$_y$KH;S
zhl(Rc#Ly*M<tYDwr-8GVa~k9R;PS5sJ2haPAO*N*SGIyQy-!5@S+`l8`wQOrUw?53
z!k`*9TKHH&3a4$=rFuz*Qd`VyywR9Fi0c7_QW|~avu%k#h_5iz!_vd0pIbo|ud(i7
zj`6sdqp%^#f!c<9ymxAR!Sm(N^WO@w;FgY<53Q4{xo1TAC45A+Q<pEk-?imO9yh@8
z5GAMW2HYn8?_@ZWz7EP3-<FjAGRQkZv>{wmcvr5G#lzfDn102$&R!@Bb|LC;#9I41
z0`3<c(;+f*_ZQZv7glOThmv1+r4v(cJgQ|9NJ#^|6ylFWUg-oU&RIJeEA!}9tcIMm
zYRW=nJ)2FL)~r(p1ca@7Tfz6gmM(@^h>KTfW|El==JR@8J?a4W5pCF2%?=ClsE^%y
zyshh@xf+LOA;<zBsE;cP&t5$D)ii%rS+7hDUy$rO|A%p8_%EE|QhPmV%!~VJT5YwX
z;+KB>SE~S_uE@XJu?Q8C7M<IP2xvM(VexJVWrib677U0?y57apiJP?j-Z6EZwEg)$
z^Ep}U`*>sdamD_&(f6>?Z8nZ!qdPCv*Lt*aI^(!C+_ux0_PIdvf%thb^TF8G!c@5P
z`7XRmlkb=OQUCd|Q#qV65#;iZ%hiSnl$>ZqX5i%?d@(>`3WW#ySKw&G-v)cuP@5`3
zda$;E{M=uv@B)|*WeI^xMaPSo7~)fGuWE-bfD!CIj@O_t-DThzyPxC`1`cE1TatXR
z_I<wpwHi<6>b=kS#QB&ByrFU1Den{6x!f57Q>ABnLl^#|cwY+hi2nzf_I!Q1(bv5`
zFx0&}_Zz3mxGDV`n04KG&P+^9d=&Vc5eR9}<Oc7)=OyLcT+=dZw9HHNWBe3{hzuST
zg7FMni#CV_3X|9q<Q{L{9{mk*s-FUqIdj1zZsVF<cGu42xt-{ma;Vjsv+n+FoUpfQ
ztlnlfV!oyPse78Gk8eo2d?)F>?_NMTw`)bG;OH0jI3c+<5BPlXLyc0VXXIUk8FCsi
zPqixk_f<FT(+O)_>)!1iaA*XE)`oKd9H~yHHo$wue~bcte!C&FjGD&E4N0sA%&ziU
zjVP26xUU!gASs;xu;TcyjueaC!a5X3Iq`_vRqTYlmV%D_>mI}5%_Gt`pPk2XVo7iS
zo3S`adW?D4Z|hxQ@(O-<W&fQHUHhh~8$u(vxg`Jf?}yJ4&?@<2k4y64b^|OZ;$ree
zB|N5Ba8#>aT^K}OOa7C9rMG)#78l_g+*pa&wECxvV-;J>i9A9f`lNYJZ;Meo(w$(M
zo8)z06WoPmTF%jYI4Ny*&@|b-YiHiyGVNFmRcj!5A%6{|XuXh(!evbc?w>}2POSLz
zO%KFB`@34_#r*g_Z1*8wIzJlC5Q#s5iGh>8j~9D=@Ao_Njs~7Y?~BUsSo*hlfs%bM
zwzj8by4-ighHunhU<B<YKaaRCs?uGrIQxIl`uL0dfA)rNT%Y5S4n>FH|2+fHGWTK|
zm_qD(|5M0$KWs%==4GPs@3}Cwwh%TffARRH;DUXf?}O4z4y}SKQEV)zC`f249gkZr
zVv-a$9+pkv3*k*`R@C?>(!`y+MKIum5clo3%Wt3W+9A+z>tl%|$Mt^C3~z<P@2W5T
zufqNE>5O~ke*?kv8R1X#_o?^%!$6xacfHVH6E#X(ycFd5pUHyR>VT(y4ia2pQD4-_
z21>tI)alv&=6WEF@Pl{nM_XWI;7fU6I(VdIK!RgC5bo^q^zai{O!Cc5G}yPt6x*#b
zd!6t;aYh0nd$ad_8d_-CgyTp3He4P}B1-XTAU|=-$Ly@HJ(eBao8|PV!Z7&6bLm;l
z2DJjK<GKgK_hTzSr66|u%Q8N_b}&y~YgWb49ZG!fe+E1?R<>i56~tT)p#V7Yev^rH
zs%PP!KztmOXMo!3CX?NCW5%#UFRcDzkMZ)=>k&xPH-7o#m(1<3T_oPRT-=tH&eWC4
z#|IWg_>Y;QG#=YuUl?Qzw`+;O>Rj=5QLjocp1JA>3`Hi&UO1IJO^MPb;t7?R`Qeyb
zj@iY>2?eqTtHY0M6FP>1R>u9%bt^WtS%Oa(=GJ=u6IP9=mkc${X{wlTb9}F(F<0x^
zZ$*i%n@BUb-MgPp<zm?Jyx}3r%~M9s!FF2@y(nJkvu&$uZyAxXmaI{-K3Vv7=*5_Q
z#gC`495ZuDj>6;mLgMjwLj%ThjK?N14z8~DQrXwL2-a(LOo*o?{~`+d@x;cJ{H?kp
z{n_}2C{aD1(6|QMD7meT3gOJOkmy_IfFmxD@lapDNSP)eGV_WO3G_Y(w%(zkA-~V^
zt8y?19<JwD@VZc**&DT9@7eL0#o<{#!0eU#Bx`QPd#6x)-P0)hi6p!5?DfkvKhG4r
zK~6D_VQw*)P;a#}fVchMyTqA$^?}E9oez&)r)Po9Asg%IH|ivBq=9FuPYYhIg#VDf
z$L19&zIo37TX}BESUOj^-}?)Nsjd5aZ5609nzq_Hg`};ag~bC0P35Q%eXrF4*SanO
z>j+Oqc5^?jW?^C$LY`0cQEFhapZ^wS<zkZD_jbr~m;V92OL2s6ARWMN;M%Y=F5u}C
zB>n>GL7hv;v-G|WwhjQ!GLqPU;f%xDd;&l?WxzCWaZ}fC|K3~3`v@wR$3OU3DgPML
za;FfpeC95?8Rz6*mgfm5y3NbxiiuC)87`iPSG<@-`DVxv^!;;yBp@mf=ufg6_@F90
z()a4yH>ND`4D;FM`H|x?cA~)fmO}yk8)*jZjBO!sTjrnp9)-7QMXQ)m2E?^@Yyvdb
zy`dxyGmxF9LWo>grul5HOEvPh8-g5l;(5ZSB0r+Y^ibOSBS4da=$6^{IzH}nKfe4a
z?k>1dn~&=b?mVl*_1NmdDb~D?C0Ce|08bqCw|$J>$>D<8w8mwpKWKi(@y(Qb=QV3)
z4&08W90Cxmx6OieMsBugD3|Jq24k%Wge=5At!jQu8`3nSy`GzjModlU-F#siCXXW1
zlJ0LXDGG9hDfd;{JA^LzBjMGT8WbFNT~*Eub3*vJjWgUPx*Ads<J<3<uU6FQ$7^AW
z71mc*$J{HB>&`Hqb5#j1WK!)!R=Dt7cfiFdHZ$H*xEss??=dqVOU&<4g+G{EdvvY{
zIO=FT$I}<A6Wnte&Qda$`3QQI^%&AqKSf*#o6Aoc_`Ff>xu2yV@*CSCG1c~JZ1lH1
zgWUmRuEBv2xGsD7a(<Gn&OqewTVL|JU}3UMLDIK3hnNc$Hc_=0(@Eu~qtiCRI92+M
z?qCRgPWV^gwP(5?J?gOV%Ut4f_;LQR?{!aNU5|%g-*K}1iQsid*vC|i;UU528`sBX
zD~;FFi80vXBMcp;feiKeWx!}|(CR&u;$-i5b9um@{{XrFnM=n44rurk+3)rOHo4X7
zaS_$4=z&^UDgOW*Dcu$V7Z!1SqOU$q-n%Wfd^-OnKi%9OX3QTwdJy9g6@rI-eJCG?
zc5DwHk9;j?6Zp!yJ!AL>sa3|UX*lcMF*3ZswMCYGCqmoZ!pNuvA&L>?{UcT6di#R2
z4%GHFN`y+3u;)S?gEXx@{T1;&tgNi;1UN=gF8pyIy!Z6J|JrUZOVD%uetrB2;_sUw
zc^|d}k@$Kn^olpT6?n&>D))+}G#~%BX3%gJy)(b}BN3nTkzd+ku6N|oy>Hr0t^mUd
z^UWss>h`}tTr0TOx}OOsPX0asXP!mi`9jS8pc%(v!{;65Vk-Ic*=)}9lR0VP(zP{h
z1muDr@1{-UXd+fErj6W^7t(74B;rhF^l_w<+oOb9-TGm@l(!Ki3d=VK$wMwTB4hN%
z1HeXbkM@7{{FZ_m>QpkiT!F9g$(QKMi&AolN-22)o)W1FdXBf?c@ALLG;)AhZtda`
zd|0EqNew$wza+cYRD`XuXTu^<Pv!PqfPn$I@A2|KLIle#m`yALwi-o5{Uz77|8n{N
zp!+4p8}Zh-o?s?d^$6~Xx&_-PwjvqrT4E+2%w-4>mgQVTBe&2{&~4HfuB6rD7lzS)
z+Bn@ewvfK1?S(}#>4V6zK=s`PH5n}0C7Q^fYtmxJ#i75-so@vF6|X8is|{}M_T}K_
zj*f4=bIeddjS5MfQ-W??)aM`SiG5RRvdG8#HI8WNzeVN81_Fciarv|Ubg%GvEsDv$
z_K+!gl%WA38x{TXNp{Ue3=ZzX;O-<C@h<n|f8^>0z8&f{mNh<-efrzLhrM;_4dtpA
z!6#Ys7OHd+<lS2tQk`YR3-#XrLJ@o&fG7HBV1&paL}2gKp5a*hX=8esokYWAc*I){
zEdB&i_*^|7pZ3099RxmI2jnt${1e<<UY61fbo%BG8b!J980(c%M(vY=A3Zv0p|Awq
z{L{`8dgjXIx%-+c0De@gt62F~Q(g~edCFi2G0|Kyr}O#-E9G^FsJc1=_r{wAIzMT*
zo^~njbw9zX;J%L)VR_+CSK%3wkDJKK^0vsp`(hH=zu)XL#!@Tb-Cfn(6H@fX$ZjB*
zZ29keZQjK6!Y|d&7#^Kv<wkGes3D@it9!%<%#sp48l?!wcB8+R{G$;j%g)R!U<q*M
z|6KWe37q!@Z_V8$webOa;MDK)hU62|{v8B;pBw0t{Yd<~^grvRz;wI;@BhiEb9!>y
zl$9yNSHoF%e*10@ymXG}H*jp8QYiw-ugNfZ3ZyCDT`i~Y7B6zZ)1MrPE!5p>Q1cHU
zvT0S>DMy30C1h?*se>gj+qt2sJAOJspj*Mh{)~|Li2?20jub|>FB4|vS?$K%95hQB
z^Ig`Hf&)d6l>;gSed^Ay!zN(HmD4by>N>Hf>a4cqiR@Y7YxxYXZ+**SmFH5GI>lu`
zb$CX4&+x&haw*FbNH}%o7!<4DH3#r5172-)ostx(&Q9@|V9jlw{5#hh?8)MIoGfHz
zE+HAVkq|aQn(cYrW*6kPi0n!wMIhio==^kBxL9jOP3-n2KeZ?!z_oZn728P1m#2ah
zBce{!CrW0nM;Rb$|0UZWp|-vXdeH?u$Ll=c__)X-GWne08Qk9||7-E0WAgE#6MVeK
z&;fXXU$;RNepzJiKB=_ynp2erHIB%i2J_yX4y@e`+A=GDJ_O#S`dZ$GRW1x03(N_`
z<qwYxY;sUrQN>^y7E|I<SkcDND3nnqZVN<sTeck;!2!+hsXg-z>tQ4S>CM(KAoolQ
z&u9d4E+GL*m&bR6bB@P%NXo&iAqM10r)aG0-A%&M6(SeTnLelV@5^a87eNkLw)jV!
zR9G)NW;OF`Z?MRqTL;aG2I^qkCaL8KPmDBz$)<{>6r;GMv+aT>t9^3?9cIxVEIlei
z^?hsorH2d^CEdw5!kQC_f<0lx{{OqaWHWt61F=|amQu;sjQL_^mc21-mO|-#gTX|h
z_b<Y&UUXB>m!@z1zrF8wYrMhF&m4D!J2#7`?AB*J><YFSHQ#taH<^go#=14Oa`gw>
zvWOfK8jM{B`Pw`)B|kT@iEpCcUi+3UI3hT%*sq;4-Myk-rg;Es-y>VluU<hjfk!9=
z21nLU3I{?xud~m``7_Ucd7TE&j&4KB(sQAS0;9HE7e|+lTyr_EI^b{&)9>UDp3tUC
z`q%RS-*ikWdGdB5p>$f+uO!0q(h2#BkNVHd7k?u|O^%|p)^w74v}>Hk^T7CM6ltY9
zUHF7M2L7+N;;#8ch2T+BHVeIi`JQ{>Z@G@Bg(J!=Wx@eB!F3B>4rvC2cRho?4stTo
zS{JPOb@6fjnnGBss?k|IV_7KWStcbwXFn)@aVbJJ$7f#HJVvGT-u!#f8$-ew;SZqa
zcGnY=L4y<I`$?p5i9B;p>TL(1q04FM{Z#d5?$z%Xd7q;W_4|owDWBrbEL+sy1<+I1
zFlbR{+(CtsN^p=eOxL{bH^0&$I$``6Lkf|Cm^=n~$g}&>C5+Tm9j#RRSH14_w+#bB
zJTG`B{;u>+t6t~HzQg;)GPm!F+3eIsIdqsa_PyQ0ef%~2FwEgEf!`lKiM+cs`sK6t
zg#Kf*#&VWld<b4bBh}?T=bRrbhwT)>(;N-IOxC4c^_Vg62bJZ}RMAbmqNz7aAeV7h
z8C9u6D#?{=-`D=b#3T`RmK&?snxB}G{pj3%GR>JXWB!^mnF+M9IV3G<G^kz=m)*CN
zHpWD<C>tNhr(G)uQ6`QK+|C51@K_Ip^?sFHE8B?UEL$C1$W&ndUcwlVM0WCHli7%Y
z2|(6>Y{C^k<4UZBz<TM07+@Jo7w*`G_~P*qu9&5|!Z(l%Ej*)x3OsC(+S+_>IpVSx
z7U~julNeSx*9c9gL>ou+{qdookI$8p$e=O#L$O1T0I-uB>Ntgsc)MEsvooc9N~VD?
zAQ?2?2qOjaR?TVwm1Wfw%Egbp4Isk24>?M(f2Uf%F8GF%-&3+|KYP;nF3l78#Vxpp
z5fc@iO%?RO@dSuj!5{I0o3v=nDiYq6EifB;GW7rzE^-Eb^nGS5*XxdX?)Y;*ovo!z
z^Ivxtw6`bMckNMsJcuKEKSbmL>@_L+o;8p!>xBnUq-Q97t$#E{g-C|A4^`Ryx|XcG
zH6TYL7CwK}LjN+-N&VV#wL#58z1&_9X6?ZHH!>mb=<IzA)RG$sYAnx~i^>_DH#a;P
z?a)i;Tdw97{C<vZV`Bq{Uv>m>dJWRz!k&NC!0sCs2f!0NlCYw+WHGD;xxtiorv`a^
zMe|O@eQ~yN3#C4pfu@Bke!aW~2U9D{%eNu0$W|w_w$JPt1{2SI3Bq@4@?NuTy^5GL
zisj|$%*UGB6~~&M9P@SS6yS352KatF9WL7;A570QgWiJ{NeEjAvEIWVC9+0OYe0w~
zU2XZT{wW}+4f6opOK)}>lnL^XSezSZ6A{^Vy3ntx4a{l1wk~_9zbMT@ojfM{bY==X
zYR<SB!O@=-egV3_?IW|?Mv??%A|ecGt7h+dHnRSCDdV6jCYm=0@N{!GQeX)n3^k6}
zw}n9uVn5vxmdED$K~b1LbUh%=l4)(cFz-g^s~}GnjFUqZX%H`U9+QOd;X{_VO5C>>
z{@d@?pw*8(dbt*t+{iu!i69%nm290QGeIo*K=w8VR-N)g{45bCnQQ}&H=qf0!h0zR
z1dT5iR!~gkaHFo+p7m#BTV|OKz#+-Lupr<~NULN*Qd_RZIz#uvw(fCa(?#GPP>SEU
zywL<`^bC$3)`jvq*>?rVYM2}e;2Nm5N9-7D?6KGV6tt3jn<t9c^qDP$6nyKOoJ7WE
zE@AQL5pzATE^^k?mQrW{&tEEzB%<Y{h1$xd7kFE&APBR18@?1(==#s7!&-qcj@ro7
zK~(MO?j`3XUSeop$6{wKp0KLZ`D@z#`QTHWQ+J;`iUwT>8lf33^}v5C>L3pLvmnmB
zRRaxC$`*A_swnO9-tk}=%RLxmNb}Njyo*J`Y(^qFiECjmK;r+#)^k74_p&w<sATx6
z!!mK``g`UOgq-17O7i(nD(|`9&!8iKzpt}6xb4zrpL>UI^dbKGgqR@)eJ$49Q3<B6
z0GBs_%g@ml(5}L}11f023|5927#_sN;&btrzX+i6r(7Z7{SaE>{QbXA*I(Kd><IVe
zIp%udxPQvAOdq<qJs)m?>bkD?bGtll!TT(#*7;nvcpQR0?|W{oeIe%a^*4qrukn4#
ziN7wy3gnFhv-e$tC<LYqZYXQ!jZQ|WUsEJb9~*n#U!Q<aeV_gxla@k5&w6<*y(i?v
zHxIT}gG39U@sYH*vq!k?&YobyjWv;tYSe|^P@0a@KV5!2G8fWeNles#s34Gr9oRS<
z5nQH<O8G6GVs*5qItD0nK>M(qF31SJJ`=19brl7NzU&Xwq>c{WiKxWh86JJ^ao}(K
z^WTMaAZN_G3loi8uDciLF-wQS`Nxvz1EO{UKi?NEAQvt@q0FUA0+ET#$@s5+jg*uS
zjqxNQ`uy-Aiz`$lfF^qfrcxBcMx>0|eUW`_(yZU+xJ}<!%Q6cM%(Y{-5yB8Ip<hiJ
zJfd7jVcV)I?xfb_QvH^$&QQC_7=n!x2@zf3yf9Nxi%FKSXoxT=Z)JjUX#j+ghc67q
z!SG`f<>sUj@i>`{KAy>!77-zh+zS=R-H&daf{@88LalROb0XYQS^cgZqyLGwQi@j$
zMBC*abyKyQ(=zDvw^Mzx%|YR2Y30?ae(a9&HurM)qLkVEkcyu%jxy)^!;k5i0ZD*g
zRDKw2;*-Z<6Az&z*~VXVi`?|iHdS#slr^jC<XbhCohYw`<%XZT*M@l`)-}zswYn8#
z7oiYbOZHF1!3q2K%0>@>CE-UdVr>ft(syT#>Mn=997Hd(0N99I{8Kuff<)ca%{tYy
zEsYlD$VZU3-1rH{^4U=-=J1CbOJ2nL%Wlw_*z{1n<{^S5M_Zispk5|4dndrg;L<@D
zcy*UC*CPDE@^U!2<8-)gpISmBPj0;9R~`P9BTwuSKXyhRZ8U@qJB+`B`Xb+ijeq`D
z=%TL<CHd7nUzjn3QtNOyP}%Psl?4884vc1N=4spWs<s2)E%UXoSB%F6@1SlQ_szt^
zhWEr4yLUf#U7?<kvi&+>PuGF?FH7H>i%-DTV)^Os4hPkI#EOuoa!_+0_pFd5DPp|D
zmms`M6jrjH`UZ$3L|T}3YrTCGSYj^d%$dF$0ezowDm?*@@9&S}$JXZwQtO??WaFl7
z?6U4n%}2OP+_@TPMA%C;Jhm|wmpm`qJ@wh0Lsg~CDM6sCti(Ktr{C&72p!l4E}c%4
zL)jNuST-Zk#dghnC@V6*MVa6WJrb`F3CMQYBse86m;MTP{fB%%l>g;mI{#I`^K_Hf
z<Rz~Ri%Aa#_G4ef^xh+`mXwrY-PTY$$C-L4n$2huX>4!Oe)#JJHQM^%$y&3g3Z5x@
zc5Icum>Flsx+VKoh<K-+9Q_|zgPwn|N4iUB>FN&42tu<m4N^}7N5wg5cHc!su*RIQ
zK(iNNWyY)z$@X@gg+G&7J1C}dxw&(Q4Xh&FW5B;VwhS=kAlwS&Q90Abk#Y?*^pgo1
z0C_-e{rn`I;~^|YY$YXWN(j!_lPhxTg3aR()g9C_@&oEk+&v$A+N!^_97mozD~_F`
zd%>~+|BJF?2izDc!#O|*^EFoCUpV_rFwC(aLg9$~Zz<>XF&M>(|8nZuSlt4$_R|Y&
zsS!Mj@Nfp=B~<eeTvO)P`GI5XD4kMEXFCT|3SZU*^%MPHP)k^zP9S0KaTOUPZd?bU
zn*j@K5rQ>>+ZSz7nizomL4{4`FM>TnM8pS{1GcY^L?VXgYx!mG`{+Ia&lW!JuVmYu
z2WWk*#lZ#}b0Qla+&?da4>sK{dJ6oZSIQ486$#3HH+_$osbX-@CnZj7M5l6|r*l4i
zSG&YFZ1TR5sbH~>O>r>#w$Qq$HPa&D1G=MIF8iIgKP)hNI-7qPY<DJJJ&%ZQexC3A
z)2L-G({8q8SJ0T0{(eGk`@@mEq<Ab74Z+Jf=4qHQl`gWX9|W_fl%pNT75Wp5Zk7O*
zT)V)LAIO0k3JtkF{$C5w>;Jq?++9)<w$W-k*81~$@1eeXB*$QDrvA#I;H7Lqin8$%
zzK9EcsV>WQCOOM-#-<@$_Tjoxc1fWTPRjLOz;?YC8~7J<N{@A|iZ!ZIO92fl-l&-;
zJw}8s0G7$J19*eCuJ4<)?65fjMuv*HG!eNy7@hrC97o@n>4DdUR17XofmS_(eN`Wb
z4^w0KwU+Q91$3NyKtjSiMi55Kyq9_>{lr|Tm0AvQ<;^ytB3admF4}@RRRu6+OI+#r
z>n*9+HFldk8cdab%b9|=@{`eH^u8Qbrmok|WEAo_i&TpnPYAt6%PgKuq{{@43x@xY
z$IbjHV2t5TdnR*tJQb^)k{5xMDd%P-b3iRA?s6%z(Z~v$%`gMnzfMw?IC!A>BW4=s
zonb7gDIPaubpdp>ux8%74sjjKGR3lxUXSr>eMt4`Eol=ekMpQi^z11vZzb!Q#)&7E
z+ORR>U5rgH`O^fqNHn+{S)w*)6h}X)uU*^Qxc`+bpef}li>%j$GTY(X6?NuLWv2Vm
zj`~W9RToXQcbgV0?_5lEzf8llLJERVV9zV+zv|AXAZw)sqIOLiLG!r|h)-9Z@om%h
zm&QI-9_CFCt~ywh7-6f$_-e-;NCA^Y`w5&C`^wVz`lX*stv)_?wWf>U3<ZiI<7M60
zsrY$p=mS5DXRUffkHNQs-mxgv;*5DI<iqEh4IzqtmnebJhdhi6{;r|KdVsC+`lIp5
z>vI5my|p?WM_6~dO(~E1EuG)vY_i#6=JuRbr@j+lTG)qHORLixgKNvvD|E#IPxv*x
z15v|eFjjf!D#bJ|?y@|yy>Cpo4YCG}C*@pTUcO!N)gwI>Qz_o}eCJ49vAlBcq-)Xb
z9@Py5B9RGWM*q;89d^b%%9f1ZaKTn0vK;@-spy4iZ|Dk<6Z9A0Rz|1B=@OerIFFeC
zA?t^!(Ed++s@z-CUeIx~Gc=>#Afp5o0nvrzH@mV@DaTFrfSTH3BZU5+6WY6)%mGF6
zSkYgN&5WIBA6d>O@dn!*ISwrT!i|9}{hJcB1CmAsrFnv{H;UXlb<qi&)q$)ywdqsx
zMK;xb(=4tss6rAypfv%+M_urjkrkWsG4v1l>`cLCTd4T_cXY{EbYUU6rSiap<Ne=t
z1ZhVzITwAgT+HbAMQO4?zw?)sJ|G5jf%ilS+xe4>cspE2?)@<uk*UTtO*h;APgae`
zw?A9vQ_WqPD`;#;vaI|Oe7TtC{dusX*uu~zImLYtW5Djw8S;i1K0ouV;!Ej}w~&H4
zux40d$A*uLZA9l?H(F*TN)PC|1f5bsfx+I8=|S-n&1BN~?XH@V6;AOHX6Y*0kT`mL
zi6bcG0Sv=19zB7y#UM_dtTpMjSyfl%v3N5>YH@hS=cQq3-q{xy;X)z&D`%Lp)M~42
zd@*}9n$D&a=|W)JA4<4v93D>n`f#pHA+=SN_A~6L{z^dNVTz`*_nF8+;E|cL<xO;|
zAv;0=i>e}5RWkZ{AO|^>&VaQT_Nu%IwYtwxz9A`k>5>NoS@nH%va`$ynBH-e{^Vr{
z7DH~R%d@E4m*OyJ*t8Ti#T;@NpK&CIx{oR8OBBNcLfq|c(UL3sdrw#VY!s!Rc=9UW
zXirh+t9c+;-I6WRZ)$_b*?q?rlSEH_gJ@b0`VDrCqdEY9)D3{6vJ!)8OQhkJchXso
zQiM(n4M;>)#TT%5V{OCZ5|N{`txl&;;gOJ~^Mqh^!+1?pqRQ()ZGefU&a<fJn;vsm
z^YX-Lt9u>#465Nvnt-yh5*p$UHEJ`tgqsg5RJn7@Qvc!A>V_BJb#SZ)-fU1hEf73U
zX3@C_OEPHuYz)H3DT)iCg#Jj*)BO1&W!8@77cByD11pu`P@aU1$UP(GPw+LR&-dYM
zh{7?;%0gGMylKpqmP;N`U`@q1I7<#Sl7aA-Upqk%L<k5im1T`MI;YPw`VhfDWDxQ#
z`h~{+4MbTfH3-1R--LYbQ}dEgtt(OgsjB|-r?gU*gJ=?DnIi`jcmf}5D%+Fwx&><s
z6kybL%Tb9(*0fiI;1PkoM#^t`G{->r%A5TN0+jvwd$69(7xVX_uV?Msalq^cusP>7
z1m2avemQe*Aq4g=<(|IGpJHw`YbGz#H1vqM23A3rl4_O_z2mt>XVD?P%w$gDFsE8_
zmfg=b=$Fli`gtw2{&BS>U1a~5x~n|4ZLjRTer^eT1KN09BzS5i+|LU4>L37)-&6=e
zAqyjcvK&7e#D&&14XIv#)L7(@XCY@+QQuh8>q5g(V4@c!W|kCcElH7GrK8g0-b-1E
zTfr$Mk&TcdN~E&uUE@>5^J-TdwZ^@^CohnkAxo!ic#~c%>#8qVddBZ&NfCLn$)?bj
zEj||^cZ%$IyEk+U^q}u+eL2eXwtu@sc}Q6r;3C_hp<me1=db6=<Z-r$2P0U_N&Gf{
z&;NvMO>&px+7caN{FPZH=$W1B)U!XEe0Gh~dKtgv0K%R5haAaiV`_TZ&yB}R(jo@l
zpI3q)t`$yM#N3iMH3%IQ=|=Ec`TVl+6Mq*TnO>tKxfYc!xY3U(9QqEcO=hzzPd1!r
z(O*Ux66aAS09Gp@gIB#kUoNWzCBU9~nqj%-AlW?WzF7cLEo+%mpI8n;op#qkh$CY(
zE?*(Ej(AX#h)?p4!In?EGN8{zH@s^bH_|^^%`<Ky39R4x<E;cyekwobwSSFe5!80$
zuMzkd+-^A|#BqBRP1ZkXORd+-qEJ{gfW4Fnu?)pR+STV^wP!HrAOjoUbeOX=%m?Qe
zsP<a$D+J$*>`0$uB<6qz#?DB^jNLKoagf|GmL{moWRUU<joy@$VrHH^$p~S^g6v2&
z^GXH;wW8t%&;Np<S5y(}jWoMu`Ue8bS-(%TlY6Flv)KZnbs0Nu3&=&(JylJ@@Frh}
z(l=+4!q(&Tuk~xOvrgAdKa3)yRzni=wFgzbD4}DzIJ!nkqnfx!R25sGkYb+QM-4rp
zNq9EB{5W|B9gSiRnNW4vuhvB|i}Y{t`PLI_%i^q4I{hg`K^)oo9A{{?b(hxacvs+5
z9A1>Aw3eT{u6ZT-pyDG5qlbbv*g-o-h=52HzW78(i%#vNQ^79W<Mr`;hC*t`#^R|;
zu-n`>7s*@aiGLBI-jPqzU2*&gC35D+!W{eN<}ER(B%d=j+trxQRurrAQ*IggZ{A+7
zBirRRI>Oa#zwA#ynC;U_+s%0wSlO&te-rzSAq9z{u(fFsjRj@UKwD<kK20ON+PqA4
zj9I|)(XN~wcwX24Hkuh6YPZ}uGUJnpmQBure0g*uCCB}*Z$`k`C!$<T@?OMxZ#EP&
za4}NK2zrQ~iSDrV5@VqjBxS$Zn)o#gQ^NmFb{=X?QC5}+Qcu4aYer}sK1WGK{Lb2e
z?-8C4yzWd5(Ov!k?2p#TjVUH#r>ZIbk6u+le)w6_Yv-XoPisv@LCv1dP>s4Z5h~Jt
z*<Zel4YecZn6u%Yyg$`$Hl<0*_YqTg=T6+A=JCbHVN&2VNF61(%|GZA%tBjc8L%fI
zP_JA?svAj+0_ZD7k!d#3qkjXNX$ElHa>iTa=6SRvYM1&SMm9LdGHlqZ9*F%lQ&QFD
zljxzMjkHyMQjN#aZHtg*<Yiio@NU8gVL~mT%1(8i^-)^Tk0V-e@~elk8HE3(G`@X%
zK5ePD#hZfxd>^1~Nk`WO%Bls7^&;*5&CD1W+$!$*WY;TV9dog)366HcGgiR+VIwqe
z`V`BMbG&B%3nHR8dO4OPC1)JV{>`#ba#W{PR$*#yFdX>=T<o{8w*qqNH{(IaFXjew
zq#?c3+RWeBw2dx@1$_n1HPd=k$f&l^lxSwzt@FgmMM6+aDpu+U>dPNtll^SLC^e`#
z+L0xdsj3cr6`VVv8o-qa=GYG6z`Kiu50}C8s(U14TJYi-Lq<DjxeOwG6=$<&7-_)O
z)p~g#>gP`AMN#>wzHqfp5uLR18^IGEU)ibYSjW1nqzov#m4iwwH1a<y1PWWle0TCh
z$`)d4j2WZ^0i!*XR0<@Y@ANq8t?t0{<=-Eey6rugYOB}fSYTA`$cL$X>(eKYL-b@j
zmNdDh^7M2ERIhSnM=+_K#}aa_AAj@Ct*i7)+{*%gntRA~TTK&1>^9G{_cBAUWrU3O
z!4N}-hKSstxm)G9PR{xn!qJWe+d+n1M@P%c$+z3TK4#b3U8dXk98AGgIVuHFg*TpO
zD^aftR_3o}X1ZVo->4NmAdeh_UvxV7wXo=P@rARk+jjSt5pw)=qm_=^8{mXAx*ug6
z2Q`0B-xqbhOw)7rmh&8Ms=la&fk}DdP3zaokGgUwPM^Pu)$k*o;GlI7y!M3xTR7LB
zKWS8IrGqiMryo14r?@uYIO-o*%XS+fr=X)y+z@81zRVd91TYkk#o=nU&L;V-G;2B%
zd*5B+^N_7aw&W<@kv<P-Xm+45!Ps~yO8mJ%r7EoA{LFLkIm^tWR7e;3!da+OWVT40
z*?|b~Z<RHM{n9ftse$QMT)YpwX`|N4tD)ZfO2h~3_I9<0YvxK+kTNy&(ka7B8p<t4
zH2S;Hxl2tgAUS9LTdWWAbk<tIsD@4G1}$rlS|HOm!PO4H1IJy@7w5%1Z(j;yy%&i0
zJ|<=>Co(3E#;)fuBe{&i&c>qE5Cq;8VPR;qL}=(VS=*tihJqMEVYw=Ua5gC^FOxbY
ztX`LF@bmm;6gaCp3#ix+F)}SVC$K|uMGm;vq;vm5A}kvLy*OV(B4)Nrm+f_U?lRrs
zBLP8I*LOTpKF`-h?ny1J^Mh2UT^Goe?lN|LqMxwK%;%OSS1X<nJ3MC^g#`6$dWz9&
zTo<*XzM7UHL_`S7trE={7faEP*H}y3`6ZzP!y9fFf;K{r@Iqg(IT6ofte-f{*L?kO
zw+huZJky^@YzpnW9_QtA3<}NDs%88x<ixhjs#AW`YRHM7cFz|~4ZZv;EsSuX(^@C~
z4Hg6|WJ(b6dmODbTb3?cy$!ZR;Tya*-t@fWd}l7swd-#rkf}q<#E3ASq_)NUhP8{{
zGTXlk2OS%-5R|^A3^P5SjN!1*n`>^nqo>IK$N>y4!(^;7UfLb-H0k{YS<k$vR%0tL
z0G}P&TF=%|-+M~rz~d2tpV(uI`0JZmx_y^+c)tXz9gkmx=knrRnP%JF1m`)Xh`QFE
zPs=4sXwk+?N3z^s=o9*qUQ?AF03+bnqMW{x%2Q)ack<}=GdsT96dFDKS*j?-TpY-o
zGa!kHa*g=gd(q^03t|Zl1kx@!UpcNpr=cy$NkSyD9u-{;f_Sq>bhJ3J;KH;upx_xd
zI*57+Vlji3exqbOi7Yac`bUILn{B^rPf63n<c}j=iGl%D)zmvGxnty%us<4|*4@v?
z)^r@m>!j?jVm2|rlnU`kC2%aMJ5$N)8TW^bEc=+_adnPVRcoem#+?Bo-S^jy$WDwp
zp)x4Yjns%xdbt@Aj;QXU&x*YStCfN*<woej@bwR_s^2O&w)rsc$+vaj%`3*L%>+9D
z|HkvQq%Ybxj_9XN%z!H<7?SZ<9V}1?0Sp{VbWlZfmS{EiX<pWkCS@2N){d$mOZ3*G
z>T*%SZ2A#D)6&~G)C7F?ZK7U1&Um&18r5q^=;tb8K?qEdd8{cIIT@GY;9^~**M#L$
zO(fw0BlOJ?JtF6@gFhG&?rD$_<1JDWlkYEI3($)lIX|bSe2qR)CQ?UJ%Ji&-5QXmd
zUXN0+0D+x`BoN_>V5fF6JGZcj#pqxo$^S@PqQG1I+L&qmL}a&T-(>?Tjn@T*PpIqR
zbGWF;6Q<FasLO|SAZftLhx==)IJl3<hlok7(=pVSz$OY$jU3RpmM7?YP5<Woj2rXL
z=1uQ6Sa*%&5dN${WAnp%M|b7raTcSPL!?L{lQ5bRf;8)f5TGjyC3RPrVFS+3f4AAF
z%VmdDyA~dFhg5rj6xgRpf|wLZ?an7xXW@obcQrXffyze=eu$^(*t@~A5%7sfBn(Vs
z-RuM>GTZ9DNnAaxp&B*%`M=>N7~0iDc9B;jWpXDfocvX04XzZGaMG$SF-03VtRVm1
zbNt%mf7r$oxH%)ka3^r=AKh-|g6fkro9E{mppz<!hc~a$;^BrfgO+)a<oa@qM0y|&
zml53Pih!|Mtx1CK{a0chfNDdJffCLTST+|pjjGn-L52nmAi|ym%h4nu7<GF`Tz0jE
z1UMITZcP{W3zx-Q0!n|+U2?N=$7?pHWyZ8@W*-4D;|*@+VpptmSnoh+I^Xs&LuwId
zthbYxBz&?5Igi&Vodv!&qkGKPL-jE<FKz$6IS%kVm^xAIEe|mb9s}MHEl3~39FvT~
ztB!t{*8Ha9AR#}|7sb{#DE7V{PMijKmyH`RP(hOM$cAKcc$%kCkz@=Xyo4a^{D4xl
z;kv`+CuOras_6`evpum?OscU}P{rX5)U39xc0hIEnQsaP*9pOe7|*ux`0!4w-1$r?
z;J81w$;e>$M_P-fkD|U`!9W0E0s`43TUsdqQoV4<f4|r>r)*98^GtU?Gy}m!ktTG6
zG1EyrsH8Vr88$rbVq?$sj;^bouJO+jXWnjTr1C=H5!x(SaDpgkBd{UdaHl0>`F}~U
zX4W7~7_WC)%;~pU>;12#>pgNy_i2pPMu<_VGtoCVkLR~?1^_R*cs$`~KKF~sX3MFV
zXSMEW)o%F_!b9hO%T8n&aca82LM|g(n)m{3W-jC59EZo~q%YlOME$Df-&1Qwb`6Qm
zh9}L<OBc)ZeHH6EeC~+zdTtO6?rvL+iUhL|+~Us=@Rbn9ef^s&Q!saeAzG=~4)C?q
z|E_qEKlgz17y*~;R{Q$HL)#S^^hWabG-wD3PC_LF^Itpqw;kVkydo;rjq22me=LrY
zzEvXODfFwB&FluReAz21N|4G?D1)91|Glqx8vCXHK!jPMkO>-ok8ev33Plxnf=|}M
zNTD;H6~@ac4pB3hKoi^)xB55LR!z5DWf=Bm@S}Jc382|brBt^Z3j0DO+lifVCe6hn
zGe~H&)v4#nT)zTJU6WPNNVkA(dJ*SCkY^~Q*1hL#LV{e*Tkb4<9*|Cae?uyK7f=nh
zl>y+(+=+OOVDNXYzl%9`%>LqqHvNPA2W1hG`epqJvYS7T>Qd_3K{c^HdL=EMK499b
zdGP`M(wlOK9iwKYhS%(bc^mER#pw=P5P4HRSz5Wp+r(pO2EPQ-LO1?<J@qy5&tm-B
z7TqecAC>req$Ycf+0<L?n5-A5^!P;8>w?<iN6@+#lZ`(f29qOA4TNq?TONw%E-|T9
z^C6*6|8Du3P1#FWJ`phz^kahYx9;xKtpK(s?Mf?KHXG%L-DUVXk&)y`i_z80cEg<y
z0h9Y$x$}`yhG);2^t*(!mtC$jtBW7cMfkncsx>@^@~YtINpATI!b#G5=Q9?O9oW&~
zC)~-a*UvXiEHyc<6L(G4STyo#_+3om1aug%XmD(qj(~N$sVr%XLVn8@R4f5?9OK0+
zjqEddf*ZAMt_$CylNyhkoQVrtitQnv=|-tD9f}FQXk2005=n^#8_xuPfhT~*=nWwX
z1~w~2unJg|HO*6=c_<ovVc@#hH!dEVznMF*x^Lfj9?(Yaa9NVt*4+^!uUV@cP{MmC
z<I-rZeR&9{B@=WnXl*#fs@3cJS!|5i;<V3i+3TKGwZ;%{_f7@H^MH(|T2q;(Se>DV
zV+$vVtfgWw@bvLQhJ-IDJ)~e%g58W@864wbNi9R9G%rG0ssRc2%X$9~uCAXVBhSa3
zGoD|{@%2(Q_m<n8#N8ZbGgGQ<@-^E-s0}SCpQdYgw6}(8otmzoGEf|;FGJ1FVk>Gi
zbOyad{->}2a^@^VJR9lTw@@iD3h$pc&4k7}!kY4BmBr6yS3eei9Zlz2;yMq)4*|+>
zW0ab3L?Ga6aImm`5E?d~Yn6<;?$aWN{>+(k%)0z>?_Xwg8rCD$p7IGUoJJ<XXU3uE
ztxFqs%oa{%kFl-I(|H;CT>k2t4C{v#EpF2Z=hkIUVxO|vo(Pt8Jy_%WLG~j#CGx=>
zsu<QI>U!s_N{|pnP%)T1+m4CED%%FJebxx62EF!~ZYd5~-L%ASH*CCM3EGvFlI0px
zuArmC)m84QKy>(bG|jM|0y}t|x|abAObEJJT?eCR(QJE(;HE1O@9?%a`c&g91mI@;
z*b7wA$YHn0(|c$6G+$Jnf1p_3OZQ4wZD^1}XL=^-i}Ut)mNRKr?dxGS|IK_d&tH)~
zH7(?*R!y-vtty<IjCGAY#h;VbBK_2$R)gKW11aF%d?3=G*4oOrTITT$oKseaOA+^A
zu>?IYzc1s42Z<jG6+wPfcZZ_6-V*8U7da4-;_`XkKo@k>#dn;jvqi<l1|vc25+)8P
z2DPYbWLw>HbiEweY<K#z2)Eoz=JDCXp`eQG#J6qA^|c3b3Afpy^gL^*&R*rJG&}U%
zQK6A3D}CLQfE4n_AK36p)~wwrA^rZX;dv&ytd0XlISNgazHsgE$W^llsxZ@KYOYy=
zP>SNgwdhj5|E2%pnd9V)3@lJ6p3W!_wq%xDScDp#3NJ{zX`B6<FSj7pak-l30s8_F
z+6-S)K!nJBnF`%`-v+zYPC6J<tt{%*l3^NU4u73MReH+{p!p0yB|?3Kb!wM5p#`Tj
zP5ok0LMS&h+pYGacKH-wHsP#djyz9#f68uOa0sO;Or^-fpB2OBR^)wmB+bB8#PnC^
z%cOJw=dvVSZ;&nC`oOiS7t96E09!0-5{WK{!RcN8ecE6wkl0JcyFzTRYD&>66aioE
zPW^X+T|AG0rd2J-5=vdMQ?Tt3$ZJ|iTt~wdpI1s4;u5rEC;MwC7#`rN<vgm=B%)J1
zg$<%C(_cCX_g#s&r=QL>?zU-f)ZhqC*9&E4>}XHqXiKFR;*@WE)yHIzH_rmAdp<?)
z4~e%H08kg@Uc~dTrw3OL=VLu%?XEeW9bb>wKK?A*V<%|AC@Jk|?rQ(ngaenI%a|E9
zJeKdO9&}HCJty8V9njp}{517mt!Naunx?zY30DSoX0*-qMjRNEd=<qdZMXi|KqIV7
z=aKzYrp<v-=s5F19UrB*nM1E|gSl6;sq!l=Btq$FnG{BD9cwZz(m^%*aT1HCM*I8V
zF&ieeYh;4Hp7|GnntihA1!?!@eheOqT=aaZe+Hcqg_vU-YQ@J&*>q)6{r^m7RpONR
zfhEdGYoTRv*F#Ph+^@Zi<HhBOwk!5qwic^pDfbqaWC4%iX#)O76dWd#_8flqJorL3
zgzs-SPYe6U6W*^m@EGncDV0&V-dqwFHV9s5phe62XRKPCzMtVtbN^($xK=+?5Z27U
z6}(r^HrPMc!f<-JKxvm5A@>Gg?DuRc^osVp^<Q)doY-U-NJhu)#$-uK5Nwhb@BHcj
z`QED=VWtJ%`1I{b2x6OQM6}(z6F1k@-+0#NMHiG4#9I-QBB61Ub6#fCjr+Z}YRS?V
zUMbwliaJSwY5`3XexZ~*x%LW4La_7VnXVn_oeP8K^uyYZfz`xDy+OG4xY8up-`ve)
z>x=Gi5FHZ+q|Z0%pA=qP$!g34aS(m*pon<Oa7`g`;YN5GUK<1@@~vC#1zOFDj-3P;
z?lW|txrBzPnza2MC!ZODTz%DUpUT4!PdfTR!Ek)2$T-ZDbiu9olg-%*glF3}oVX|!
zD(o!L%NuXN$$S>Mk}tL_bB~I0MGj2;2#t>Tj`Gs~Y`1h|2N0*Zzd<pvmLk<r+{H6R
zgsLYSl={NustPRL3I7i4$~N(-j9?jgYHBclYH!v4O5DKJ{ey&TB~h>gWo($Q%q#GE
z#StPA*S#9)7_8wm3Qj_yu^vj#?Y;q0aX6m|3fSFi;d9wACK7Z1BKiHGTc_6%ZF{aO
z_L3%XBCk?RHGw;xPKMqAk3TYU7KRYmZE08x#~kx8*`*j>ASIhdPN(9wqo`0{Rj8_2
zC8rp{=xb-an4TRL+EQz#4V&0?cf44ris7!iYgBe0>^ZvgZ^xA|h^ThvA=x)d1z%A0
z9UqH)Rx*?WE^@FSE?nS7C00CO29C|;J1hfRMrt}`8XMHmYP)?toXH<+(fP7PLY~3H
zYOb65W5$x4QN<GD;?cPV@ZGaNb6qN(?~`6-upthQFJbRD@dlf%aFSwW@RNOoGxwi5
zK~>1L-t0OoM5Pms<Z{fl0pf2~z<T)K1=HtyM%dUOr57ECXo9~Cr@`8;yjJ($qozcZ
zbyxdyMZ5`WonD#UJ4NUOpy&r$)5j+X^L9NaY#6Eqp|$W;LriY%AI_F?q_@BS<aDqd
zP^%tUd+@C`WXQ=t@T?w4R4(e(td4+g39{(aY3_)S!vG)nrAm&s#*lie93Rhdo@ylI
z;(B0jQp42PpH$G*u$Zc{q%7M9S6ptpz3=SO1zabLc*KPD+FCg~a!2hkma)x^$wDjH
z0DD#mU)W8`f=E1b4G8um>l0sHW|`x-v6c{|4g=dzI7V%3CRuj^9>^|CyEjDkvI>cc
zGvZ;1vDVYPX)xlq)6S}P{q6uq_AOaP)pm+nl%4<9Hi~~;V7nu?xaeP6Rcfdb-JS%u
zehr}?PPI)l8=iv1Owx4_L;(jLR153D>B^WXIMVRN`-rlOml@)S9J!(+N->dmhr6?T
zsWbt5-rf7wqy!r`w{o~Ky-Ug>J2hOZ?+&)CcO6mfj(w0ECinIe+@8x^)w5+EzyYYo
zvuXeP#cRXe$_0y?|F%Q0OBUEq-vDLw<&DhrHe~N?u1G}CP_q2L7Qj8e%n3dJWtin7
z_2o_W^}kA@qJGLzH~VK7(n7B~<BFPjaz0l=9ux9w3;mCfCMk}vBEVeKrn%9hq^hGN
zm13??Xbhjn-kR$X&$d}e?m@DHKY2cb0!hCL*#HS^^vXXy@e3c=A~|^4CFvE`Q_eb9
z(`+76SfLO;l%tDCI&gKG>vF?ZY+7;Su~Mf^smd6JBnbL!(mVMaUwJnBLDzfvjRuq+
zt!lMe;Vj?>4lbS_D>*C&QUE?fw%vWeONmw6RHy5dxB-Iw@-~-u>hc#(-M&oAJr0Oq
zeB7`?A&4p=Y)l8U7xg|Ugn2Z>uoyWXr^mM+P*d~O?Nd}e&#d#*oY(!CaRxWSZQ7Qb
zB<!dgD&$dx4J0k5S|%$7aF5?vQwCk?4g62abg9L16&V(LJ8e*Byzf0Z%wOK`bEGqF
z?-<&uoXSHAs8#BgrzZU#{nioO)pqRa=O>ub<)|{#7T0vi-zmBC5N*<NmsM&iNNJXs
zV<=Dx%Q8gBFm8`!jie*L=2~qF0Ow+HeJ7#qY|`oidb-ZPvB^P?LC4XVEo2mK;p#>}
zp39JB<HyEBjxpC-2oy)wPRAc>vWCR9fJs3CNW@m|T>IWJ%M3yMd9jm^zl4_SdQ!fs
zoHDHZR~PJCy_Ab3g=gB%X5zemi_rwN%0A83Te9r$r1cEjR#E1nrIxB`M%u7Hi&0Ua
zlePdzr2vlGLtw1}<cIgsKIwpr=_vnQ6{yZ+1bNQS)+mLFf_tIfYJI?5tR?uz*LYu4
z8JjJsJH4bbC@4>>s8a%<AQs^z!Z)F@-!mG&uDQe66H#&X{OaR}8dZWjYvN&^{9nHo
z5J+#8t-;$ok|<8r4Ad)a6;e7HG!$Ld+3zNsS6jc-lkB0JI+X4ej{(71!HH#Gdw$@P
z9&AtVD?}=5xCqKr(XaNOOBaqv0q6S@X0H`+EO5x#7X3kj>al1r?DZFI7~0ja$OYsP
z8l_^NZ$`gzzWc+upR9&k&g2yX?!RlswDG=>UaHZ;3zZAtv!+@vLFmaK^Rjs3!@z`9
z2ID$L1yGDNVg+4&|8!bb=wvzl6J+-)sjZFIV!fl3H9czo%ITvaUmsQw?epz%Sb-pf
z1z+j5Ow(h*F<)x}vwU-CNIDU`_|dtF#<siA#L44Zb%M&WE2}?^mQO42@bgRO)d=tZ
zSd9kH_SY&!dU4WRvJiYKz)(M7ot5P#_v%hwiRaY*mRK-S0bXA)GnUUStWt@cXgT~W
zcn_w{%9M?42fGKpnsn`<5)^b`{+NlxM%(@In?`;B52@9s)L^CAGM_RrkJ`TF&C9k`
zZQ+eZ&Kq>%Oi3N#{C_lEV{|0_(+xJ8jqPmAjlHpL+qP|cW7|$Pw!N`!TN6$6&htO#
z{n$Mp`poI-`c>V!_m=x-_VwFMXxB@-YUU3$>q8+34Z2l=5^F*KA~w|}9kur1S0v4E
z1sOKYLScv93lRcKJn1*_FYAFwdFk%txN~n0730#QvjyeGT<6PES^RCoWh!MA0>{BI
z2zB81*z87nh8j~wQS%I=&%ZA{diHM00FPX9J7VYUfvp9*-hUt&N1s0z(rV;iAoB)c
zavZaAF<UIQNQN9sS;hAvv1rq0(%ie}n_ME^=#~KcnYOG>mm;{B?|<!ZxdX31m;4{>
zvH0aNF7%-Fd3lL6chS;qa(48Qu@8Okn{Z6RaV1dygp>DoXWB5iO7(qwV|x`k$B@o~
zAfMF;W@K%Sf{6g(IfYeTF7k%=I!#pX_b&s%qNM@3f(sE?Mxy~LeW6>)yAq+W7HBW!
zJCp`FA#Xs?$dBVshw25I`VBv>&kj=nNwF-<+usfl0NC`@hf=HY$o%0o4bfq_De_+(
zhk(cShw}510C<Ha?Riku`6>|ndZw9DwOgbf*dJ{smtvuTv6`y61gALpdjiJ-Q0x)-
zGG{%_GZsqo3CKKf(}a@G;0xw<IWL4sB83TeM7&~Q=FPVodiZ@j94HrpPYkJj|L-Fj
zo@xX&XiXp?QD88ZqyWVf9=6tSwMY<mq$MH)G;wJM0qN(gy{_inN4s+!EoEb@KE(f8
zB!#*me~_!|Ex`Ca#%lQipBe6F{5<)Q@Yqtrq0w#_uKh!#Qfnw6H42$@+WpW}TH>FN
zh_|F14nv6G@9G-YJyVYJ!il$)a3FhV!1*E4g2=N)FnJ&0k-EHofap~sj8%sgxAJ=E
zOrb9vJYHrka264tGQmjcvA*I``d7mBf!Gf_7}(ALTFIJ?ETI9DiV2I-WfA38qd`P3
zA4~F&`@nYA<K=NlvS(1j-%o|%IogJ{ygrz@hpTF7fOUvxhj6;hNHuCaI-#lBG(rhU
z#hS5ltHhk~xmO`-Di_A`t-?#SB%_V2F3tQ)Hfh!)71CFzfD>$xyV*4$CUC|n2eX*5
z@|(-stE?#uorQ(ei-LYr!vX&v4oltO6#Sc7jHxk<N6H=}LG*#ApUntX4S4J6JC7Mb
zUxNb@4@au^mEOjYqu<B-0n2n=FDS7-N^uWS9al}o**UY(`8x9QGd@dZ{&wX;B4qm$
z9*ZkJC?0!sr+iZY?f3AT&eJf*s=XvTQ=~!rj3p9e4wDo-U+irr5HLp;(U(JZAyPG^
z(Zfp>{2iiTrld^q%&U)iN25B)dWjvRU_uPii$mWwGBUg4FZ+2n(A=8}2tVC!>wUo$
zQ92#@+I5_6K-|oHz976|;W>W+K3#!gwnsJ;nAuT8#^>^gOiW`r!5S?}m7rGk=}GZY
zv(*+$kkJ_tJ-Q<}C>D1FLSN?EB9%R+2g=INn|XDh`*FRWI6_^h8Ys2mi!x2fb)zhI
z$KC*{T%xhX!j0$_N>GrfbjF@abYTkp$~QTJqB&d-*=x=QRS<e+WN|Ms+W%;WgvZdm
zsApWlwFk=pSy3IX_>kDRh`$gBz66*A(5cp;G_9cmQe1m^TqG^2TWxprE@FD_%!E;C
zi4{3z!RTQ+`V!5(D*png6YD!`&%X7x*G2yOw=&CcohM2<viT2`VT-ySN0(f*S3vD~
z?apDL{j8?4&)GMFOdCbj9%PJS6amz3<9_VZld>}v_y{j6O~4`x&uJ#H&LXic4x}1i
zzq(y8gbnd3KCdEVK$%bpG0uSkMNm5AchXf?JRHq8KX@DgdE>CXtu2O+$IG=WyAIF7
zrGskb#zd<pR%8FdSnpaNH2(LE9nfCu9r3}a(fhxO2Ock{^&o$L_qj=N%(<If-Ki?}
zYcttVC8&h<U6md$XSOsI6~Pj?vAD7ddDbj`@paw_I84irCgzcEjB8ehwKg94Qwt#t
z<G-V#xE#@4vog(pci@CkU37Zv@44qwTMZmCQ}%T>BgyW;Xlz8+?=wc{OXx!$xPPEy
z2O}_}q8dKMsB7l=*|YMc4s_Nsc&qjD6`qVCC)*nCy*Nx=JXV~<j5ZkbLv--GoJx}8
zQ0tcpWxiZP1=j4Bta$D%nDSipXo6Di6%Po^!DaWNjl<<mxXE~BWbmnsp;_rkNH-sD
zW%ySgu6UOO`hd~yiGC{1_Edb|X!6=8A?Cavqm<4io9o<P&TlRzcTM=&;u8<TFN05i
zjTN0R(q52pF~(1^<r)>S8_0so;WJDQl-})wh=&F$YeLsr*qET28ZI+fy|)L_W9W2)
zwXnnNizzL5*=Z%yNc72w+DHK@NT0Wui+k21irsE)JdW?xyTkXKmlaeT<~Hw2Zq0z^
z$G0GGsXC$lC=nJ4f;f0yq}qVKRWCFdy_rf^y;?xGl0>;~0hmGPJKi9b>vbdZ>wGcP
zY$nszIk$Owbzyy(;&m<VMJ$G?3n@eHJbrYj-8tJNHbK&y`g`7YWaf62&OZ1O-jK8)
zZYYVi+;nLvDbR4+4R`NxB=`GNKHaMq86#wsY5A9)vQs8wQnkrF9~8yT(5S&pAf{H2
znKB8!&~U8k1&7cN_mW&H6@`UL?C;2&2nG`FkzBEbsWbQ2731!jp&<Op)*vy(8wR1v
zi_yI=WW2-CLtwaR>YcAtR<IAYhD9S3)-6Jx8>5sl3~ZQ*yM^2s^xZcmLi50fr=u;{
z7S1(VXiqKIQIkAb5DjPkTKYG4KDE?k^x@{`BgrY->yH=*T1WuuS@DtZcvHnUnFG_h
z{>nvnj`m|4{SqVOox=^dh4PR7Ykri;dJ6GNZ?%*|lbs2ERiPj8{6J{B2RVk=6R;nw
zO~C>lmH38ExJ<HcVhHyF25UQ(zbjza6#yv4gONfpj>)AQk;d$edet)Q8eA<w2qdD1
znzmt(#s*x8LqLu`AoFM8SGyc<byY@+zXnd}T73qdKVZ@BGPrdHflh0SGBymUTYaeB
zj^_L$z0Q)%)a33Vq-oC}3YqrsuvlE_L2*jl-nSDTGYFDmgSp}(!z<Zb_Jwv1iF0DA
zpH!CNP51`&1U?G0(nm!q{WCsB#MF&(9ZQ3XH=n_$6I-20N{Wm)b6WMGFA*!^F-ZQc
zZ(9q}0{bh`qX}qd2v<12Wx53j9DKlTsjx3M>iGXd0FFgB8*eNM9nnIgQ`wWOu**bn
zivD3%DWzNvCteBpr9G?fl$ShaZO>Y%y2eT_)_fO|GJ{1~7vaW|X*C*XPBvEnC%qr0
z87|kd7=<8Zk{F!tkm=^Qo6BM`XTL==q5Jz;#LJ@Q6))#I$qjd3VFMrboQ+?>YiP*G
zs0UgkGziQKq{Yp5g@u>F6ojq5?OU$(W}uUuuZmc^isg+ZX2z`44QPK7NLpM&Te^dB
zGu(ugs2VNn@!5ZX?ty-krL;Wikj+#pftN!l9CohMU0Q|8<B^^%|7F6qWE9!t1eyDK
z3st7*;cs(?it7OyP@m7v{lE+!`f=1(f_5bzE_Pv~fYWxXzr!$^KRLf^X&#!PL?KLS
znMc)=cG+%2@AY^lyYtiQ=ak-U%<<Sl@p$5cbSP`}T)TMA=!#9fSI$go?_?aUhK&2?
zW!n4UJcgt}xC%so$X_M)nx?{kuR9raD8<p~0emir*7B2*$HK*~*8R{(RvuP&?lHfc
zlq@r)<$VG8<H-al!S1YJd%~|ldsIQ$_n{HBxq+eFBt)+lN|Q_jVX@&KymupMb9T$$
zFT}`Jyg$)%hKvbH<wGCRwj*ri8uPd(*`_T=8r%2=NXL1%;V)Oh^lQi2;y#~R0k1Q@
zfdm=PtZ8a$mWMTD@|bzNa4HQ{T66D~YfT{Dm(7)Rmw_YomhTR2$4%htc^&1FF<G-z
z!=FS~7Rz<`Dp_j`T~={|w%@0Q;yMH)>EkH{*%>hIPJNjM{WuC7>MMmA_MnNjJ^cPP
zZ;w@Z^ew6}8D9jKjbaE)E2>dfQYXEhHx7g;`|_O^`X;jbte+3z+b8R}8ZFV1t9UbR
zis+V<LMXK!YXkcamqbii<*Y!VQog1mNG?>m-Q15@D@7Wb)+VZRXUaev1L_5*q6yj?
zx^HI4z-jF!x*s9P?RY2sIiSQxe-D#%#J`nfGtDao5BAi$!;j(?Ml7C(?GI#-glY2F
z6Rxsz4%@k8A`yeURIKBu9{7~|&1x%539c3C2a35MrVz!hJ2T^QJ>q~qv=9p2!&Q^2
z3T1`Pva)EjWARy&gf3U`rmAII<}V(U^Cm=sWGzQrF6n~8f-MX%it=<r3WKV$GFyoV
zcLiPst*+#tv*kHdj#zYI5+t%0UQzWT4Dh)CLsMJ1bqUPIdo8#)x&ahP?l}rGh{~qm
znV9IXL7%So`w5?e2)wh#y!K>}eyq`FYWHSNxA)!N&+w><;?^>fh3QHy38|^vQSLZh
z$tbqRD*0|)(8N`hEiLM7`3*YKpv+IiIGZpBHoz)q>2S2Ne}P#(9T|t!XV)B^y^rwy
z1Yz?AB)^De0MgE6ac~SkCDH+>84Q^3!H~e*!dS(5_U-m>3jr?J002^xT#ilACjhtA
zQA@tfP)PhQBJ(X4T;@HGNqQ{DxP-x<<KTlE8+gQ<TldU_QhjuHb3hbf`>amS$J2((
z4DUj@b*mjn&39_u4RpAxNqVU$sbU4H1tqgusqN66)qk^>kUd@HS5w9cd<({}rjX65
zfX0+br|rkczcP+&Nf}(ghHIJ4oX1VEqes%(mkG)R#G5K!y(bwKdF;A>e>mxNz;V5~
zTY`8XFy_u&iC8J&a72d(z5D9DpX!=1j+RJjDinW6XvIIAj-OjtBRSLU#J4In;mNQM
zz%Ki>IC@Y(vsj{4%W)Qo^i6ElA&Y^;(qni1?m9^fifL2|OlDfc7MT>r7|vS}<uocA
zkssBJ(phclukUTs%~J1|Wpa5LhoCe!I%PV9=8{nM4d7gB*+yW(Rt)_q2GqXiJOQ`J
z4~%XS{r1ykH$;TvMdJq%p5l2wk1!wzL>0Ewte}wj?+DP_+3KUufjt~pSO^4lPt0Lq
zcGfl82*(ObPD!ER6EGqq-s-lihYd!?k5SCc&l{EkKRG9ADDud8mlMq+7tBL}&+QU=
z6X!qi6@u;ijHA;M$z+}&<R=xrfiW3lft6tL1Wd*susI`EPb$8lAhVnz_`<cog6s9p
z%qE(|{CsP1WVT;x2)%B5kUL+jKs$2cy#9){pMQ~DcztHDBa1CgvBJrc-Dt&~l1>Ft
zaaW?ugwck>WUt$gvOY#gk4vbav6ERy+1OqWN8uriRO%L%21`H;m$|Vl%G=(r-BCa@
zA7r_5+KeJ!UXc&qXbpWwdN@3RkbT!(M_D)8XXyJMYiyQ?TeR-OUWe`#3lAAsJVD}G
zum|q6d>9|04Wj|UUvB$7kA#-;=6%m)ykNNvw=pvZqev@wQpy9m=NZh)1e1YT(l$)T
zy*RADHuWt&6b6a?4)?;_<@2_)XHMETQoh6n#s8GN$|uj_I%v)&3+)&E!eD8UP^n4x
zt18gZYJPS^xJIkuP=8qTHcMZgPN9FGj#ROZRXh_sh)rm|=FsJM@g`A0>^A(3fbD{y
zzkLPU0rHXM%$rcA&jVS6J<<TOb|ww`8;b%rdYO;;&>kWNS?RuM&uJ28*$FH_XmDcD
zua(oih4~z$hSh@f>wX`=hu9*!g^08B4{;S`N^;O*>J!9?EKNC{ap@|>W~%|&5Kh`)
zvy{rji>hZfOO+bwxWdnCs!3I@9XGgq)?Ux4SV~W;Bkyu&>vl)qvxUU_;$t7hQF^jw
zJL4(|t>yU&*_ww_`^^c>m4<^QAR#_`b&gJ^Bbc&)7+D%jMU8Q=%@E@u?u-qX2`tsw
z;P)R_mK*bOmYUSfwkvu?KlS|^1L;l&qNt1&O<%W#dgLo{)E384Q>wK3#FR0rU^&x0
z)oV6PGMi0PyRh%ia0Gr$>O@DzlUod;^1(V(Gl#uX5H-8dJZ%-0rCKnC+1bo3qtIFR
z$xLd*7nsmG8AH!@eA#HRb*gj4*KiE4g86z$M6mn0%MX<+Xrt#j8Nctk+h1=_E!^bD
z=>z9`L6LJ%_nxPx!t*5O<s%7|ELdg6u&HT^FmcY1@j=dk-BpPyID^^-q6ml}a+y1u
z^EFUu=gG8VPbmsUGx-2CdVo8<Gh4m$(d(|K5+LolQ#((y?ZO{_r!9GpxuQ6ytxqoC
z8~<mnR-J%+nJXQY&gu|EYQrr^^cF%1jnPmbvVz?UN#x~Mzyo>aj|k3Uw~@(4OB_~$
zh0ofO6A8+4N>{lLp_IPbMAVnwUc(Qt(V0K&W#f4F5yY(1<5+Hbq~&=&e<R@Vgv{`N
z@m#N#uzZ|S4!-nj#y$K)==340v3OJohTf5O#c?evpIcu*jb}1lhi7e%^28`wCeLX5
zMpTgnSxVM0=28Vmr`3~SY=3g|am#hRc5?xEouEH~qwflEe#O`K=ns95wTCZ$^LwPJ
zUGK{HdOwNNJm!?8%rNG+&u|%G3v-Eh8lHSwU=X7{^}ATsSIcsUBNW8Vo5g&stpJIx
zd=APtBsSG5pMNf$V_^QoWA(B!ZR~1lAS|MguQpe5CwMlkPF37-iF&%UXMU!9)U2D8
z(5dl3DPd~_wjTF}qcpYITmQnWkb!D;-11{MQ{|%Q$CkrM3`G*UCx(2mX0f9j3HsV%
zEN+6|It&T<@gw;qP|$Jnw~N&?Fi<1_qen3N(fb@@Dzr&aOH0ajqj^P%tL}>DTl0g$
zZ?q|bmp#F@R+ZjzI6q&Q{OZ{Tkz1*Kv4;z3sr+HNOr=VAND5XX%9rCc7!mN&=iwub
zro||gxgUJrQeU~}?s<U#R05E8PbNJZB9c~3^Y66_GLtKGd3s4PI|PzIIJpfWPWHR*
zX*^2Luq?+&Aa9&o%K51AI13M6@LqR)eIy8K9sU45miW-i>x0GsUoJy*tj}}imXBhw
z)21$5;aaU~zhqglkT>saj5?Zq^v})B*WMo8B_N3@Xk0Nlt{^ew(?wPg@TP)mafH<M
zmO$n~O$aCVp8rmqK_!~5*syUFXm>)%rq7Fm%WmSAc-|HTc*ta-G8r~AYnfIFE1|+9
z=O+n+_-MrSH{+>Y6gyfJLWo<F`wSsG8&;63snQjW-UrWshK*E_`^ujw&P!;`71J3Q
zqYZx2N$P6BICza;P{+c+PmptKIH=8g>BxHzVdywD>H*A4Ti&{d-vcrl+kB?jm$h0{
zHIx`pURY-(QIm`_n&RV}tduS=tu`u;wP=Pcgp8%@_b()^ugA!cEr+IB?{;qxj_LrH
zgFm_43La+o<L*JB=yGR%*17XWFq6TX<#w|z>i=<}KNFimyN$ZXY%A+{v7a|Pxj+MH
zFF|HaxUA}9n`z%^nsr_mk1FA?UAF^9zywrtHLuwAm-)CQn+WX?4OBx?u8BYu3!>8f
z*ofI3??B#E#FEOd$Y|cI)-6mxqsy*JEoiou#VPW%(yj4AL9apVzFxtYU~3yZ-&4B<
zS?V~2|H(<xYSmnIXnG9NT*k*5P>tcWq$~P4EFo854yn+`X%;|a)K&t97Qt}_2vF{|
z><zt6$onTHT_M})CaJVO#nxoG;m5Y36@@WTO80A*%Of%_0I~>Efv+TzaA^iChz*f7
z6!5D&w2INWnnGrT%X<P|!O;rC5o{^wA2v8TNoW^ZMMb%Es_Lz=JY}gi%*Yseu_TpD
z_ABRiRE+O?oEE1zh7@(o`Q~$-v&R^5ba;4{m%n$ZlA?}5*4h&@*_^^4(>yXHg7+Jj
z&({;s5I+aB>hv?&kJlQdMx$4n#zZ3Oha*{<3f;a6y`L0$inc|}E12Mb+89#lpOa%!
z^y|I<&gIjM>->Thgp(e~-eLVqHz?4n5>1{sp-P*%Q&soPxM@2;tfgWoV=0p#e5fG#
z<^B2bZd%PrWQ5DGXT1kkA0VEqSq#-T@S$v$C&{k~js1HZ*SE1gxg=H@e@r>vHJyzQ
zBTi_=EK1V8oJ$;Mpz@24mxFQK?i#jMyFh|R{4jSM(N?F;zANeohs9!a640CHBV@hO
zGc-IryjUvBZMW5d;p@BWe)=bGYqSJIRl#WXAB2=k%}Zkxg*>8+@^uCb`8!cJGMSj#
z)w2g<Z<NAsLsVV=18m@O{LOt@hkpu4948)$!!G`x3&Mr{3pM}e&_R>`j^8Kr2Wctv
zJUN>`lP$V`RPZI+caFr1e%vw{_;y|mppkfsjjgd@rshq6#buQO_kBbrBWL<~)ia@K
zeOM#|x7ONFcO}7Oqtb!e``$&C;NNJU%VB)l{?w(ntfmp3#j>UKd!;9tWD0Vk)3a@D
zJ5GD)MIrOES;oHkZpOc)mnX_)ltFroTex+Kc81@i7oaRq?kX19A}EVZynbGc;zKY(
zeGmAC81V6kkCZ=4<M*3eGRYqDP4-#b)YNoQ&1%c8qCmE8B>_xgurAm>C&OB_6DtHH
z1BZ037J-TU$}QG%3?%5UV6AY~wyZRi9yrbBWz*r7N(yQQ=&;f)&LxG!Y6NJ?w5NWR
zC891|8PJ2M+H5-+O|o-BX`W4E#-$-K3;{Ej?ZpluIn>{&JKt21iQQ`!4mq=nH*RHq
zU>As60&xn>=O`10(ZoLf^P&a}JTS~Ya%}ct>AEoaAG4&*yMG?MfdDsgi?#KYW~;Ep
z2lQA1JA)ZjwTiH5rwv)unp_~Fq3n9XfnC|n=PB3qQY*jv=ccJoe<+p`Us}<_40oQ_
z^Y!2d@agCzkKus-<4oSJ@6(d`Hs5+ZVGgcO2-;YoKA`3y#<_~02w+4&LU+NVeS)IK
zTp#5!dCGvcF(0?_Q}DMj2gFQVA@sDLso`8bGcrlzwX?^}Y4j~lF)u$%=tyZ$-jvAq
z8n~I}Y1n*{Xv}-y#?F^moxOKXsa(cDnywp8j{ElOVxu{KkLduq7qFd8D^_f>Bk_Dp
zs+=6U1T>D8GIDV61VbPw)<S8#j{Ce21CF%zOl{S^p!z>GrYX>;m4WOx(tP)rJ6?~q
zPeG<2ydYk`O5PAJ$7}l}dN!bH;J3qow^y!mUgHWpKruk=32)6%cs=HC?16g}*lzD(
zSom{aW}x~`&j%ZbQK-sx10uXBRcas?r8^BD{=#IRYNf>G1?(y7dyjixG#W=3m3Guh
z`d*V+L&4hZXPE~kC_D;bFslXYB{S@^*yAt=3_=gXix88(y(c5bBowQI`{ZP$x=F^=
z{9U&3e|#1Tn4DeT*ujlS=<ZYA=_i7v3z8W@fmD<on6?SZ;^)b?gDt2?OjH8N3w}l~
zyk}PO(l%Sv#5*DH!s}QKAmH*Tfp$E@_`y<fOSYlXD>)i3fk2rw@z6G88ABL+QPG%E
z^@=pg_Q%w!QhGPo*ayIme9<aO%5<nWhEfo9)(s}<D-;3hI8%9rgsz*N19bqO@yOo$
zc@ou6ym|<%6$ABoa9KW(X_v$xkbo9b!zY3_o((>-;;|1f{^cihv0PK6ZP$|ltWOU7
ze=fj!v$Z&u-fSk&|0B!iEm{B8`6x>WEL;^SzRQ<<qU2lV;%W$w?%tarXeev%|EzU>
z*POdqpe+9HWcoyhezZob_4vl;WCO4Zi8On$(K7e-dGmFz|MkQ{|La$wr}IgU_s@<s
z(DH20#X8vPok`c+ei|j~jr9<iC8qY+W@JqCMzK-WZWJxOa_5!rUW30$crZp13A3`s
zoNWi5xMQY{r=LmR88J)YVkt+=N3;qcNcT_uDBsQIU`Az^JI6Eb@I~@=*55E^vYCRt
z0H^&R3z53_)~eI+mDt@gmg92%DytV(|09B2rx|$35Lz}%)hu-$Kh(I6M?_%1|8`$D
zG<@NVz8`0+)l!txEB=WS=lR@66|3hwS#5dwVWatu{FJ6(Qbt)-7Hu|txZ?}QQrvbV
zOKz!ljHN%(9^jq3D=8neoX&2R3ts$%7Qg?6hhJvqKOFmXM6p#$gv~z9r)4TNTx~u>
zk|^}L1os;?cp~OI)v@MQS;0uncTM)3-OLUO2j@g0(Z+JkZOwAOJ?lj)a)ie6*N;y0
zB1gpn<$C-=uOxO*8$B-ivvW3^(>d8}u1nNeBVeWPT;3OJLGSa=itEsVlTJXqWvQ`(
zYJn`bWH1jVdSSSsEm{b7nA|0}GJK|#v{ZX+vH%?3*)}Ad$$E!^gr@Uj1Zi0gGntEa
zp*M(Wwl>*}3_G2eD@x*^Ub`{ohO4kQ3FmTj+*VPlUH>L5N8m^`%;S|=jv`&JvT7;P
zr>3Mgjx?De4q1mIl*zb8H;b)PF$2aWe{*>O+q%cD$e;kcfEmj%(t-*=lEHM?=lFe@
zCmMG9oA*Qv(fHvCwbT74+}uT7@3eBM+#Z9D8_tO{C-8j5%ki#l959rKLHv)A=`NLa
z$A<GJNb@WVFZxV-=M(8u>AB8nqveV-?VH>!d0G?5|L7#naxW-UMO%B&|7~N3dDLge
zx3|zvx6{iI*Mh;=6+3`a;dmF5F7dbbpAe3rte`2RNq;Mzm$e!50=^>lfEL9KO`hVu
z%?L0w0;t;7f^y85>Ok6&t5G8l>24A}?5c1B#=A!uAV!n?DuYhk02!<!Bc<XBRA@_(
zb9N|<uCW(o^@_=*eeVZ5KVVka=WZCwnJ=%5K8JsXA2`nFWpJI;bbh2ud$ha^I+}=1
zE4&9Iv_~G|Z@%Jtm&+Jj&)+@yzPcW$^JeZmPjcixpaCb|W%6aQc>1MC{O_|5SVP)P
zsTr4@FSxJpyOMKT$H*(fft;|i=C?%bnI^NU$82!wpIZ54J9SqmfL;sPF|T;)A8+*Y
ziMmyrt@=thq<8hz1qd5YR(s&%ap7~VRzacJP0*Q($yKF#cPSjE(j-5m?jYB8o-eHr
znVX9>GngY|RMRLc?5&rX%eA0h0YM6sfr+MCO<<FQiR8i$yP5jCAOphoa%FR&g_=BL
z?Xo+*t1}1?o#MFn;R4Yy=oxOW2-QO6FL>8DI61^>@9q8%k59kg?%2@x8%eK}rvf`8
zBZ7^Vw|KG9<)SF{sb*p-(jVR=V=z=m`H+@q%e&Euw9u*#=Z~tDQw!gsGGE#f3nK__
ziOU&P8&f5P^T4XS6k!EYVDZc8Q<3kXPbSL()sYH7v@am%!(>0pUz@O4=R84kjrT9u
z8eQoD<?&cjOvGY;(<rjZb^C@4<A@OH-qAPSO?miTLiT`a$e2#{bMLRu51+4(=LPki
zdsUFx)n?5_%DX<PeL;J4?!if_?IEEaf6$x%1@5`maN6nqj9;pAI}a#e&*$6WV(~rE
zzOFNN6ork2M|AevToPu_7Ro@d$HQ_>odQ7O*WyT491I;0AVC=iMV8A~ItAA=@ezUF
zurUvjH(6O0KE>wgb+H;7F^0#3aK&=*y&~@XEO*}FLRn!M`yIO($uo5^bDlD?hZ5WB
zd(ZsU5JXa8->1~0x&YPS_i^JPeq&l61Md57Z+6r~FTTL_a?q{-dq6PZdjQB+K$4D*
z?!9w|SD62$AL(TPj{Z=Z-f}{?=b5y_{TN^GX&#T~=_zlH?d#JQc(2|&aupp#l{Vo_
zpH>tNLZHIn2?jtxh}?ZQf(J;G=MVjaGg>Dggfh(G&89*3dgt{Be}ZXhii~>u^^STi
z@|iRkws1?#D-=g9%k=7K1``SO<dN^F0ckg`@#PyVW{+^lx2f&Fd4Fmd8j}?NgY$<~
z=KdtJp#kqJWMMjZl6}rjXN8$Rnq;nK1xp?0b!uRSDv1M)f&VhPnSrP9uym;A=FrNF
z)uJ>f+e?oTXKeSu$!38u)>M)C1Kw1l_H#gUjCJFaJvdY~lcopa!`PePY~!E#K8`-e
z&G-Of=Kz9g>Jjk4)`<_W5BYI>(~`)z+?1U4!3%v~Y3Ch7AUb#&g_#X|zGRp!?V!>M
zl^^6W{IBUEr;c)KuJNiBb;}@=$5yl?8_yCn2*u!V*T=uNPSip2@AoA9;50dE1&C#)
zM=5~aOHZED^M0Mhf+8$A=JX^RA2})q0gxCdSrzv!lmI+|#3_O8z(W*v=r_Udb~C@H
zEp(%7{Me=3xO^zX*$6t1xDi}K90K|gDwc%}d%_baIIMY&-dEXwM^2KgHuU1{KDo6W
zmC&+XA8uZIp;)IL($Ot>+b+V59dh&5PN&VnuVEMVW9iyMg2x`zJtx_960<SQ=6?kH
zqGkx<Y)$XFydWU_0@YW^#a80Z!=32UPISi5sOCn4Q}gB(eKh>(K+X2_$wTrCrI0WP
zj0~jN5sWX%eGSf;SwL7pETpf|Rz9)oepRQjQpP)h-k5j^vxZhoQ>$r{Zryg-`KJ}<
z?9qm_)1LJ3%5&rdYTF-@<-dI%rp(O!k&oo}JDD~Jn*_yI(gkOlyi<qm*S8adlP5I#
zw<U?|xn?-fL7dw8+@7kp>WM4fH|bw+a?=^<<#HhdDm9J>y2IxmxVP_I+{i>dNIk*O
z#%{+6f84UUZE64qOw;bX&3BwNz8><vCNYjM01ID0YEZeIhk-^5`bRy7^U|-B{Ox~0
z#%eRo&CRvE+IR&uZ8H)I!IrZ-EKgaB69)}M{EXM%R?fL+X`1!_A?p&(V#zS*mFR+@
zsd}|B4JgUh&B$oILibh3_MC#`uUo%?YVbk_9Bzb0a3)P);wS)-3G*{0fdK1)!++Qk
zkrW2w?O5|w5~Z;4LCIPz^mp}YY0UgQt62r*fvUM$W~smDt}VwG@^Mr`WkktiGZ-VI
zL9|NEMzi`!PuQ|Aenu4iU|U?1&}sD6=r5&dzOq1F12DwlRcwqGyxG(KQsEeZ$g96w
zc%MZL`E%NEY?v!{wFSD(Q(AhWg`Vfxua6-M_Z9pga?>o@Ff~*OSHSn!{A>X=kffp6
zLOSQKdIcqnI=HZ)Q6RSIk1^AfOpX~68@dp@hbu#vv_w;k|8dDdb~**$GIy|T|Dd3a
z0Za}|DgK!WSPDvhL3V-njv2Jb^)+<fvM^?Oz#~c&kc0Dxe!z$nJp+sk4el$fHy>wH
z8BK8H!vdsk{msmPyB|m|8RXI)SL@C1WnU-qc6af*r-UeJc!M30dKW8oWgvtuema}a
z*d=0xc)I*8nP~<G5Z$bIC(xarfC|Bz<JdDlGnC<97J_ui(0)C(xxLvj)!bw>?4(!k
z1XZKao|syv(Z8|tDpJSG)ymOo#geQ>t3OSnMtgEZllpLfMB_19ArHS}Cl|rb^Mc(v
zee$y2nU_zup}*(pu0I3%u>4iu68IKIp$W^>+VPRPFC4cUJ}`3qpC3W3|4UD1T=mr7
zu!zXlh2XCLJ=BQ2MyEc=g!aMibh2h$Puky*;uC-jx|gU{t0DQ{b5m&4=kGBlJhvam
z+42UkVU~ANxxF1~UDY$c-oLMR9$;khw{RRe*LWNeeihC<{mbE{TKT2Z=u9((w-N5#
zzTEX5ET3RU-R1e23-WYEYTrgo9Rg)!#%9Zn)U3>`pU2s!*q=V0gWvVu0Shjtv&8(E
zLqf1K1QT5Rc7kn84NVo+xVLx*EC(4ZP-Lr3`#UyaE<eY(MM>j;Q7a%=wh*g!Du$E!
zx0tS$e#K+#0X+Zn)kdB@zAv7nW>+)FSZ#~O+tUAFLnVBj6K(dA<(r{}(2<#RIqkC*
zHCwqLL;I7}d8Q<ZiRfS|y)y;d=@hRNiA{|};Oo4!BuiC*VudOTnY@0+FQ@7r-?Ii-
z0v10f)EK6XU&dgG^Fn$fe35?zvqhU)a+on!1JxqJvu*D`N3r|#5<_P0j^QD2#8(=K
zXqy!paYUD+Bif6LlR^GvSS0wtEcU8wy-g)y7r5JMc)cNpS#>{)l>%)x70^~7n3_gv
z0?{8JYqae9u`|;Zs|;7E3rsRzw<`|Hzo`f$nm*nHH_$*ZDocCsDXix(`%-{-Y>ciT
zHLx^b;B?>9Er#~ddnkYGlTwBe)hEOlyO#;RWbw-~Q+z!k84OIwWb&Oyc#yA265rU&
zzlGS6aBjc9=gLb*zOS70a=o!nxgRJ(Jg-k!Bdnor(kSBpv9Z%;y<!KL_2)-Nk{bO+
zmoz6_x>4uM@%@xCwBYh4{dPvk8s}Jh^de;Zg(E|dU+qw`4*q<=)~n9^bvw5o`<N!U
zLt%ptZ?ny4a@~EL*O<F?pFUXqbQ1-wuFaAPsoOccg{fAW=9<T&J?kxnG<<%R+YLRF
zGMv=R?6WDgv&BwU`j4NEhu>F2T1T^$sC1m~;Rx((5qmq&V}}1EqwEl*_DT80Dz0xi
z`z!uqu6wepFY;afvgb8d?RSZj6|3q5*_pIaL7q?3iPX7JES<g$J@2XJB9EcwfF^Jw
z4;}F3EuL4le1^VwEF%{|&H*g1WtFVYwKc+*>AQxEe=l^==A=}IhV#bGZ4?E<J~@b+
zcc@urZF(ozz0y6`E3N#o*sgezOGFhx_rPmmEgHS|gNv*wUnx2hrS@N!y>2x+kf8{N
zpCd`Q<J#T5in@iYw-C;gRwdL`!8B@&OOugKqP`CTilmso)pz?s#8IAxcI+oZ##I(8
z8dpw-t&enETG@iX#oU#$Qq6{qy0_7vaQA1;AUFsT<o{&<js)x5^n)sNeFRjl$o!{H
zRI=LW$ss?4ub^GFsXbPATehx1pF7XMeN8@|MpLc<!j~JDlRE$uJM;PMc>1e2RL&&9
zrE)aq55O>|wu1lUDLBs*`j8bci!Ew}#F1%^oN9As$Yk&(fhfHqY@lror2SN`12PNT
zPy?*SBD5ufnMPtvvMdhdcvKeX86+c#fe9Wmf4P2SM*M|_gbb@Z5Xw$?Q!Jxm%WVSt
z2ecE8Jt15X=wjT;7cgMa%2#-s9Yj)IvD1|dW}n9s1-@>vid*BEQDqv7$F;?25ODy#
z;T-|)uxTh_it%%I?e$DwmCiKhjw{54^8EWn;_`Q8Vum>rZ(OZ~1nxggfQO`fZU9za
z2<P;*=Q1|XT>9(}kp?k))6F4n&%>B_)Q81^i!&u2P5oR%gvVz-{o={>Pa7c*ucCDR
zzs^pvQ@nr-ADg5J$2@ZJpSs^$EoF7>E9V@W$4@GrS;Y6;_K9t^9a|IF)`X;F)JY={
z>2s~$GS8ZA>+V9a^!ga+wNo>Nv#S=j69U!!^Yl6VW+IkJwxfk;V)%irU{fDD*d>K*
zY0W4!6t?I4!32PFN63qz=OjUfKaA-7{MvcNQ!f_*NSvD_gO?ljU^`U(*u?&)nen$?
zGd-kQX=?K+hD#M5`Yr#kD+9p!`6d02p@w<i@YXiVsuR(_vt@E(MPtxHgV!edMx{u_
z&ZlU#YF&bbNFgM`2OZ9zOtgCpnEX2bADeti0xnn<S9t`|0SGrs6MAs#+I54&2<XJ8
zhy4aN2)5Z*C^!navH=IiXx(QSAljFhE1V@caQGzYt4JrGQrxJ~*`Dck#aoTbOXpvD
zu0K)jD=^jaWG6{L?%cZA*X(w#GW$S2nH{MbO{dMtGB*U%CZb$MuA!0wU%Kn0ATAw(
z0ummB+y^Qa%t5GMn1W&gl<}_5URVJ{$NVU%43p54J3Q_O-XFsHKEgS+3ujz7!zAaR
zu=$<a@_^WpKjBE4Fq)K3*xw=pG9tw>m}QWMJry>^KSUr1Cn(~(cJ)G9r^5NL=vN~g
zxxIS4k99kC2jD!mIv!^m^4^*#Fpv4069#up*^S-M<~04If!~cfAFqyoL+V2{A)lSV
z?mXM26tzG?J6#~}CeAb$Ufk%xQpg=|*F0=ew1<J_iYE^>XTZ)>ic+QF?#G95Zg*$C
zv;&N08W7*yx7_w(d9hiXu;b$O3izIv-I3+oj$c!*JH3K<E^MpSx?jr+yxp3)k*K4F
z`ZGEK-R$mE>+1d~K#=s_NWQY!->$}c8mFnTe39Y4$&u__<K?hM)9eF~;7!|dr907b
zKY6_IudKOxSyGs8z80LZuPG@Kzj%G^3|FdEb>F`2*DrjuI}ocL?Hy(n^kU=SP|jkv
zec1~qEIe(;_>!<^Ko@T_(Gd0`ti{^*kfBJ^*!a^wT!=qS^GU1`S}=40_FOHK8#DvE
z^1CNq(0d2#)%{~bKTbXcQ^4@gRwI?*EyQd8qx9rvoxVQ-iq%#WyS=Nb68KSxx|QWl
z!GV^zo=&Nb9WUEKZt{B*nIJZ52~7sm`Q~HfZd$Q=V50eXl6nP1W(r^9E-XTEz`Uha
zsmlGP(AI|1R`k>W#Xmg9aV@}NqCv-%Pyut;hJ}(w-`Q|Cq$djz`)m3L#&!5S(tG~O
zk&!@vPKu-f)UOtD$Oz~l12-Sm3&90ANF3}z{*n^%%@$p5y7(GX7a~X7sm~%}r6;mv
z6YxI4a`sYf#WKaa$0Vw}V`Zyj-dT?z^}3zIsR~?2JXjKGl3~;QIk<cpMTe;1^0kjC
zo~l>Bauui{*fAWFXPF#6mSlm8(-n&$WM!FIWYjsVen>oCW*#V+dxE*;Zqkwc9+Lhc
z!)Z9+WiKQJhH<5V{u$O={g2U!p3&UAqh5=-{qFn4kY|xAOJRq<SoQO@qbFzuOjg0Q
zy?fsYxByyL8!+2zGQ^pr=){e=JI`5n_}^kjce45jW_s;6VsUyPw8XEFSsug}J5*_|
z{XXhWPq_(^zmAM6b(!L{PVRXu>=-rY!#68kLHY5+*X1&YAJrd-a-++Xr*#DS)vx9e
z+W7P3R2EbWmdjpD`>f2TG<BPC^YgpopE!GV?7fop?G+V~Qs+%LZ!G7W)t1m$cwZsX
zXJOTP?lon(|Kxsc@9MF&Cg?hpXmT>(Wxji~)n14v7w3#Ud3g}`QBGUVmWJ^Eoi{Pp
zJhSMHe;dxzAZ;xbq<Eh^b7XnS0*$lr4Ssbs&@RkLM@#_Ci0|$54G_wpBW67MXNjB2
zYh}X_2|1AZdVv?R8jC-1F;l(<i$TEbssEOv8Z8HYc`(ZdDmd!<50?-}gWl`R>Spuj
zO2+YudhXA|6{{!geEyaT5}-*edD9jsHgQ3tMLH<z@jB5}Z_f?A?VZ~eY5meAMj{E}
zp4I`VmKiM^)(Ok#X1k@>aR_n^R08QtW(1EI^k1eHnM?CUf1fL1R?6(CMH}sqnF)P?
zIH1ap8Os&qBO08qZt!WOvl>Gxmtgjf1^xm*A_m%HIBd}W-W}0?C{`T$sP7WXAGUmM
zwUOZOt{DnfRG<YC>9aCOys6tsv>W*k`vSC+Te@!1=_=4z3v~*W#JD6{B$PIR50<Yg
zprF^7z8exmcw7qmHQ@~1kCOQV$LDhKGOA!ZT?$H|qTTCX(F}&$zrRs9k-t3OlP&-2
z)&G-hqx2u+L>NV{ItIr~kxDZrzsl=EuinlV_412q%Ppum7G912)-4J^=q7$G>pRXb
z^X;|ReZF<)!NLhDv=L$)CY#hB)dxGd<9YG+(TDoBHtE)Cw<QIlQGgnnU^u1^5;Tef
zzCoypx4YyFFZv-#tM~8q)tt01)ow-nd${4Vel=(we{MZb#%hzTw@7*Qj9HsLN^7&N
zw|>Hm2UQ`-#~$eLiLcahAB{9#1MRZy+2S)Y`25WAkDNJs+#q3Hhc4_+|Fthe{&c$H
z6w;P?AN|Rp2<kI{KaR(bx!SMexW$z~m!DMI_yEttZ6pti6}8Pr;M?geHz5ir$_Y1>
zMs&50JWhR^_X?k1*X?TBHy)qw`rY{`fB<2>rbo~7buRIh&q}cs1wr^wPWP%g<b36q
z6Mp|mUhl`l8~?92z)G(c!B~2(mxKtexgmv%)ZD>^fzkyNE-h?`9qyesc=9CO8U|?J
z%?*Kps_P-#jdA|Qm<-1Z1!;Ty#pGCbWEVh=MI9|2dO(IELB{7!!s2Qgj8~GVE|3QX
zLNTfQHxqc`EEN?ic%fV|9;sM1%$97SA}QI6EGpA85O_>cDEF-{9klkQvFcpCdD-q=
z2GMtV`$F-*E30lR(H_VgDvuKnGn??y{(LT5);<=>Z#9_IFhGn)?t=g>lOXsii{yqf
z+3o;_EO(5nb0%o{r}Ob0ZzP_7xB{;cbff>e@0^0v=;`Bm?=Usi@VgrrR!p~g!U<Yo
zP;(UOdpq)UDWqHmju2gukEB?-9);4JiF0#D_Ji@5P4e_ser}wNXtU1`{E;JI^P;WO
zZA?|}JOci>>WtZ$KjCUWHrdVd<b={?^uf9eNx#_*_PlH3_`zv#K*euK%UPMiia*?*
z;BDc9qbK^48>X?LQ@wVvV&>krwKWf#;MIM;(+We!>HI0pYbIChcsYY-gC;*q@=+>P
zf6o27YqT`-F}a4*_sN@k96py|a(0ai#Ok<pf+2&MfDrF`1dG^Ab$oNvo9$7tACc%w
z2_k3X`4%5BljBQ$)Q3UjHZquI{(Z!F3g;SjFalA>tXN*vwOB54Uyu4>N2tC2L$l~)
zp0UgMiufJD*71z=+SyilyQ51)hR5&SL#y4$bbwnun+1BHmME(_A!r8&nD20^@b_bz
zAf22g_wX;SX}Uo}wZeVjphtCQN|Y9<g85bQjl8RTnO2RWC9?-=FL0Bh5`%61b`vJN
zozlI@siqtS<!;=Z!$Fb8!r0SDb^hlDXO5L9-5}{sY6@DW=K%RLR}5aWYjqv|jtm<8
znd#YXtZM+Nk)N9Z`-&A5q3_bl!_bs+xmpalS?S4lGi62e_Xo59NF%-uKjx*V)Bt;d
z8Z>HQaq@Teb@^_$DD$bz;Uo&#{WLwFIZh-&{a-Ie%pyKyXFRD+ZHC3VghyA<Z(Vxo
z`24dtDme~r<GpoMl=E5E^4J*`x(Vv4wlJ*buh~a*t4ar1_6toFShJ=NwJjR~URPrI
z4f3@!ms{=;{_hL^=CMU(Ojbu)^ZKvCiR)kger?vVme$zxd%fJ&wcQj9a(SCS&!(ag
z;YPc4K22n~PN0Wz20Q$6DpyK#Bksxw;cEPNaVxvN+IY>pu*-+KlJ;Couh*g9qVQ#)
zu7adjd6d0Tq-O+k%)EIB>3|Sx;4p?~FT_&dQsCTY=?i|J?Iar#+^U5}_*z0Th9~TA
zkfBL4y*aDcNvy9r$=7Ro-`WQMTnWr;SLSJ9=rel)<Zg`GA_Wc|d1ISD{6iDmX}=&y
z|FylB&4>_Ho%I_5-z$T8Goy^si?NM)J1X$b`w&cA^O~clIRncDG!B6?za3L7(&Ua2
zK@=>_@61RD;l!WA{#M3!A#=o-oWN!jfn9+1Adw-~SVlb`ka>vl?ZO4XIY`k?bKe16
zY`(<>w;cPZ{x$fnP}awkqiisfXI<BwDjtg~S|*oMx!>44?A$11?~AwZJtS+2Q$V|`
z*3*SwDugSFy+qjcGGv6y-4Y6v2Lj!vaikIGq(QLG%N+UUJag)Ixx%3c_eq=y1iI+0
zAM0Y<b@L%%L1x=tlV@XpIO#TLeM~dX$>Qv(ERIu+qohgpuh-}nSA9(Po2aHEUx(nj
zb<m-7-!@^ylfXk?4&mO~$}xPl8YxrkIX{tE2>k)DwM$lAH^WJYX&=(lM}>|gXiWdz
ztz3fbc^*!p|LWV1RAJ547FTvKnY^nQ`SGdIR31Cc_h#dDyk>so*hk03Xz5K<^Tzjs
zzPPzW<(KQq9=fD)RtS-N*7G~hw&L+fl@#>kJk#N@Kg*M{_0%1-v$Zo_j{nVr+8h>-
zZuvHg!TI9D1&1*JpZ0Cv@8tCAoVu=YV*|80=b4lbaLT~?J+~KF&3EwpgWyloh1er<
ziQH<kuiK7r_?5%AO#*V?W3yFpN;H}lbnoyml>|Dq+HBh%q%>Y1+*DEEW5dqZWTk6^
z%Z1%Y1SD~IGnM#aNj{ojpCH!Z7X^WNT_g*Kv4U2Bci3MC5nxz(g%H$Cpv;8iP632L
zMiz&CZMgc`6=nMmZTk2$NSw!#&0sIW>ra30MMSlb3S;e-&<#e!jT8$f`@Dcl%5Z;8
zq;#KA#H~xqEcOqIDUU1IkzK{ITQ`j;g!&h<_o(d#;(ok|j9v!cqtcEd_c?e1>N2~2
ziAY8s#!YXCM#xXy?~GRYBy#^a5X&n-hR%Vj)C&}*R!;`2*?}tYC2fh%DE=kH&a5Kj
z5J%P5A(iKVE`u7h4M;JJ6r%GK#n2|QuEY+%hmD=vcw*u9PVcg_5;fdI7_N&`W|FZZ
zRj$IA^WonaWIQxXn3o|J@Z(sP0+Bp$rf4h+j=3x?30X5a(p%j~w|#xxO@6OB^ijAq
z{xSn8T@ub(xb0_~(jMYB;MX@dM~@T7PKt{jA4Q|0Pd)(P(IUuWQPbDu0KXPPw#jBe
z?ws&<UzXZrNg<WRTHr}anmEVwUZF+l5uUq}{}<#VYjaQ<?@Ko9=V|jqTa9hx!FYYn
zLPa^-1LY|K!T)mss@B;L#d89Tw-(yftmh#~*@-H@{PuySi!BzCktJw8M=xS_>5N(S
z-BoFCZ%DVP7nsh%inltvrf<J=nR)_oM`w<;Z+g;z|NUm2=3rd2+y2>93!>-3!#6zg
zKWcc&0$%n8A!3^*v!}tf;S(+Vk)gMjf8<EO`#5{WxJC}1xu|;L*Tb-KZ3Q=RZuSZi
zygX5MxizKZg8%#@KiA_4EKU(%5Z1L%mdj*+gy`}4TzV|g)=*6vPut>!_LPsy8S8f5
z0sHxWr`UZa1X>;T1P51I4b4u*6?WO2*5)mKxmXiQlT<ZjP%3A>e+yO|sw}CtYPVDC
zTU|Y3$zMmf#;re1Vz)6Zo%)5waCv%|U_3IP$!5KJ2(F>bL>8P-eTnu8)vi`1-HQdD
z4TgVQZUSSN$Uzlluj6q%@ej4svxdjvdqk_vnvm>Zc$&d4a{!r#le{mPVcNus@ZZa`
zv!c%H50qzqAC<w{Q$si&hd^l7U5PdV6oxpjn+|IRO_R%?=Z{qjrRq7FtLQoXgIP>2
zPl(I!N3&sE38<`Vr5Q(SqiTM+m`(0V7oseli{*342j*N{$f=d9IhTF2;It5Y*>|ky
zS&A^d-B40zE`P+W6j0I%X|3AEx*eKODNPUS;oD?hQd0LUX&mKJaW&vrkN?4#8sV~h
zUsgNHPzi7%I;N@Z3No8c59}C`95n?v+lZ@~2?-QVXa#(_$+5H$S`hhU_QMp;_Y^8$
zGK~yPjuMs}sZZ`XkG3ip3$w`E<;Zda^OWhCS?=yeEnYF4E%sk9?QCq0sTa(ZpZgvH
zeD}APF>9A_bEY>v7f^HgJRvw(+3(tw&E`ve<%uZLBVMl`rORFKJ?tzjjw6%IXGgsA
z983Xn_Ip}$r&_Idn`Ty-4s`cq{exkVvYV`W^I&!VT5hau_X?K{n7QuA^gB%u^SJ$J
zF=Az1u9MX|S~_<ofJ<ekz~M&A{g-+bR@Q~~B<-_~Yw#-J`pH_o8ezxNK!=Ux8Xl8V
z<n3O6|L^>XSOD5NK{t(n&#81sE;Ape>A1n3l(PrH&{{jn=*2L#CYlzeTk7Ma<Ou)W
z=t`|=x1etPp;E?0`yFS~FgIKpe8MF{MglbX94|gyz8kA`U4pP``6fWhM9bqEZ^qh&
zuAa@`suLpruR!tFy}VD<LPG-|ZSBnA?tA|JE9IkNX;7kl)MDn<rSWaBv7P_K1S&^V
zlqJzPh-T&vEoBHqI~j85tmXC~>}(6cZE$-EdQ-;YZh_c=HL>?ZhP@f|yH&S~<1Edw
z?HSA8C_|!*ooM$V(aNb!A&eBtr5L#f;M27T)4hG|XOg-!%vX-5Hd%dsr-d_qGdS|=
z?l3MB@9_rC-5qRo`vN|o368=EzC!KJo8Z#O0}hfpOlVfh#xdv`;tWo7cbwhl+}fM{
z+mqCOa=1=j9@1{BTRYy{9D-B2nQCdWXQnDIfXF~*db4wy*K=8tq~fuqM39Jx&WvIZ
zjFjplF6{}C@`G}fR>ib*GSWqNa2gP3P)}kPG1FMbQ@9?_v`q`tk@6?!<4chvNS!pV
zKjB-8l6-YD5j~`8p-NW`pW-e%%`bzI2=cXRM)<j%$Wo0P7)wnzj?Jj=ZATk)w4L0D
zj>L00a<ej=n18#f39m<`E45o-KFe(g_H-#=wad{5bE~H^;Ty<ZTA=9&a|Ox&k=KeM
zmcYCDi@}6GA<KWwiP$64@>w?_Jo$Xnn->QEb6}&z7UAgkh;=7gPb2_s6#4>Oha^q_
z&*>`q>Bl0Jjqogt#Kk?-dX94Dp7T6GA2%P;J8WAT{_1jsyj#<-6Ql*pM^)9zIa)^f
z|Iu_-QE@fR8pa78f&?c7cXxNU;5LNd?lQOpcMt9s+}#4f-Q5QmoWV6`zJINA+jBE(
z@7~>SRXuMNfwXZ%nQ~_!OP(j5;+arnAVsCEkN4?kqBE9sC+gR+nr>v^bdSG(-M@&b
zHF;5{yu4$x7(Q<h!UVSB{KJfi>x`4$J!WJug-&jN5E@263#s-ZRoa#Z9|1jVVyi8Y
zE1k3Go5%a@=jH3*xRS0qQ~G!&cp4v|S7q8IC5MZ8cX(G!!`QKQUq(u#Vyj#dy|zS5
zBi7dXgnRKU9Un+S^4m0dOg8t2v6Hoi(9E#-x;HOj9-9@6q9`L_7X}?ThUJHgb8xjP
zrKr<Yoq$7wR3&A^K#Tf9Fx_}6Q*WV>=j9@wFcHuohf8lb-1Zw4ZZv{xN^Fr+YE*AT
zyWw6c^^PD@cgjoTboE{+sUpy%lX+8Sn1zp1#Y4qkr8I$Wc{h0kHO4j6^gF4AR!#+b
zx@CbR4B~a03#n5L<@dpi;X+Hf-)6z0Rl%kL`4rAtT(Rl$OHVZ4HPS9~J@(1*r*H2)
zyF$`f4e-}~D7)EzF#pkBZ$IQ%f~AQ=f)1zG?ve8362?+2ZHL&26c_PLS|o2&q7wHB
z<+8s;T1iuQy0{`umL+~Zlq75+vHl+E{m@IRXK+g-eaOV5u0>DafR#;P!SCS8#Ky+q
zP^+?s;JkG<u|PVR<1Yt2{Qy;xBUTcvy<|*q(NFsa-3I*`GW}#`t+C#0p&*^W%`U?#
zj7Xfcg8m?ZS<2$rIga`_m5KN6TGp0yYp6H_Hvo0mYs$~loGg8)YwX**6)<fgD0S~Q
zAI<_I0&Z7W?<^QL818U#bc6icy2#EGDOFGKtUN+9?4eG?Ys>TED&=CiZD#Tu6x=e^
z8uGu?(D87Z4^Q?-j$0mr&CE|$-Q*X?#p<R*kPdg-#*mB=MTDdQ`(Wm9#3MTIEI4yh
zy+K1hwlsP<FhwysLy@j7Oqr%d^I=~OXSs}gF8{<GVfP_6<%!0iIbZ6gu=~{+3#$$b
zY40=prOQusfl%)VQ&m;+&8IiXjfa`(JII0T2E9SM48{ZIg5{H$jB2fN5alNRj+bBz
z$E%1?rwC#&+a75<fxq;{Mo2f1ccY;|B+BZt7?D)b`Z<)df=qV$hR5wU=*5cQ+p5+T
z`D9=vnoMk@FXv8dlN8uC=U4+>ft-Lpy8z{1SQG3rp{bQMo2|PZ-VnPzF+Kums`XEw
z*e(T`_YrZLy*u7*r6QTw104Xr2`O5dQt4)*L-AkhqNAAPkVBLl-4vs#L^3-B#-~wz
zy)vPrV159~eNb7%OF0fT06{P@PbQ%Fuj%Hsipj6x=pwXJr$=XWbYHY@*Y<@BMAaV@
z(>=!sNhNGG@<FSXc_oe0WW&*GYq}s5-FbcS8eJ8qpN6ZWS4<kchw>y0RcKZcuU|`(
zI^g|KKhg$j)@V%|wHJ$ddLceNe+G!KW6ecj{{B~b&WS`1J?I9E2eTJPl|UvjKpn6+
zdPaY;uutb0Ub8R{wy8P?8<W1H=%&w(`unx&KO<I_K0lv}z@dG7q4vw+@aBK1tGs#*
zi?*`63{5O3i47RfCw0nW7FQm}OH7f;l`n4x-$Lv?uZDH}gYcVJL7}8MUHRR~vP+Ib
zS1nVw-2D;of4{$C>0YgH8HBVLuq#i5a`poHlPJDgMq*fp{E-Ki4p(rL3xYM*IZ@|5
z-0drjgS2xSQZs}yn%5Uy)np0X#TKz_&(e-SNb2noKu_pjZTvU9@h|ybIC&8EPnol&
z<hI^9xoyGAXR^UYPAB^yNdh8XRg!-Dmh?Ug$XOV=QK7qRZ|k~v%v{jxQSA1ibhM}f
znt*_{$?!LQUE_}Ga2@Q>JDchTj`y|gv8fTNbUs}@vESVzZYSRzVutuSlrd^FP>-d)
zGV?H9yAMOU3XoOweE5>{W)uH%jLxHXu_#7OVU7H8kC@X|82{7KAAVg6N%<83750$2
z#<1Bm=2m?&SBY%&BrM3XU+aAY(<eX_(@xF+JpZ27p+cSr?>%2+E|MoI7F-WbTE;-!
zaNA@#bz7)!jm^KQ`C%(xMr2JfeK$3PbzoLTqH&+>qLNC!2GE4sw8wXowfmMMhZiga
z)tdM@0(TwF{LXy0>`tu1(J2pv-gmY8-LT5<>LhZj^d4|n^og|Z26vN?Fieth<o#c#
z#yCPq`qjWf0|?-%Af~y&RhI!fW7jjX8C^L}`&h3uwaj62ci5#jSEVh5(GKMAeVlx%
zlK;9nzpm<Yk8y?deqQ!^r5d1q84~}hV0m>Aw=Ns^sxXj!m&)nw&0Rh*CqAL4H?(*v
z4I=Z-ICou++S?M$m`r|gHowdzO?w@*)VU76FQFQ5`A>-){KD67^&rKBkce)I(Yg2G
zOwc}JtSGv1-}(m!NzCryZqi%n^AV|);KAmquc4|5vW3UR8@5M%yEs{sP^OgOD^tGc
z+FYcZA8JwR?93ib9w2t%lYF>J4NCXCyS;uO_xc&|dd&L4^4f_<71QOc>xOKdwQN_5
zDK}T<G%UH%gM_#=X_4?&r>d<l_T%)?A;$l9${*-X0h;(&w#(Kgml^XV%fu1w<9;h4
zpa>d^>ysS#JP9MuVmU*?gLLZ4K#Jx|PWqKe(0zo1v~D<(E{Y!p+aYafEprK{{><`8
zOrFubKb2%$`Az{h+mI$T`p`WLCguY>tBvhGc;0|;e4%AXC<tlhvizvV2&ojcT_dx`
zhKJ*5W^iiC4#ycHvi51%V5I2IL^h&ue3x_m3F+mheQHO_S(4OTSqAzLr^|u>?brH@
zF(GG%L<2FyuixzaTkJw$*Ipnu&!@HXRneBS#Wyt9<E-5z$5>qoXNofZ{2P2MUs&0z
zS?8?@$I1$8M}1?`M_4NRSLY4iVb*7OoL>2V1T|w+xRR5MS}|6xebu#We!_c|{M01#
zNb`!v_fa(qs#JOYF&HQ_=Clc$8+RyP7O*;2F{Impy0aHj@!Ew!L9v%xJ`wND|19sc
zT87W3fS%Og{oaF~@VGt`nGCsl$pn|(z}|Z$O0#3stS#PJifN|eC_Z2V2QB74tw?7k
zev9WEbf4Ubv=wRWA6FYSE{P?at7@84posMs@0gixqZkKf!Z%5)n9sq9<8aC#BEMY9
z=;ET_BpJcerQqN$V8>L;94^prZ!G?uq?Acu8odC6=X*af0Y4l5ZIBJ7Pv`XRR2+6t
z<zKh-LB%}D@p~Zkit&dgGsZPUdKpxA)}Yf>OAJ<tzl+ri!@C3)W|O5od`$J>%syCk
z=`;$Z@p*L{IBGe6oiuPPQ?2c2L0I|*m;p>3y1UK&xi1lV`;)<Cvp^931+`&3KvbDF
z9sF@}hoY{JF8^BkG0Y8<^+(iijPlv!xf5>MzuEH)1D$4fLp3MK=f7MC%sKb2g%|dp
zEX@g<<us1J_|EP!Vv`HFMc7F9$BR7cmhLM7Q}-KF>84x;Q+p1TM3T6~_fYbTUT$9D
zT)((W4KorcSy!rmd8*!zcKc%N=d<wzS#RGw^9Njq%D0XnN-7JURN0d%IPKYMb?1gr
z`Y{St&f(A11LoqXO%Qx$n<8h+_##VcZ9uVbc;t><zfNC!_ZLO5HO!i@Xr<_%&*5kw
zQvPBAWLc^pg1;U?1o?7SNdvMHl}9*Dr0fP!^KFQau<iK+(+9^RH`HqqAa^9epOe+1
z8Tw>HE6~#&OZXxT4ekCm!c@m|$E_C-e`#x8iq)!fzUGtAyS_dx`naq5R50vcuw2xy
zW$kt~9KU}4*?T~`%M<Xh5AG3IO%88WT;;ZLN<Sy{&uFz>_jo^w&9c63P@R<k2fS_1
z%^K{pVf;b7BJ^i8`x8}<E&|tr^t5pExxUcs;1{0{42w=Z?T5et2e+TG-#PPj!x#!Q
z1S%cJ)0h{8e1F#5C{B=N(4+}_LxhHI5{11x-Bpc&MKX@PEQsTpH$BK?hdtqWfnK6_
z^q|WPVEm>EEG2AgZ^&$mV><W;T6R_79~|*@JI%u7+Krx^p4-K{jrZO7#Oyj|*-v+>
zvb3yr#tQSSnc|;hr}-CymSI0c;_-ecBz2Y#uBW3$4x~b`b$d2!7SkEh_1V{`Wnxbu
z!KM5sex_c$e2sdH*MS?oB4Z!!3eFZG7R|3-S=H^=1JaXPzm?gtvU4iua)hQc=_MVP
zE||Ut+G?~IUJX&m?-(Hwvk45=>f(Pv^onv}qyJPq=kk>$Sh56!@C+eHSSp-!v6ozx
zX7b70<1AW)r5rzv^2|Nj()J;-Fgr4*;&A%Kp@%@S4{dj?t?sIULn`8nfJk_fa@0eH
zK%r5Z6P4kc!QW0e`RylYdQK*Yr2@w}<NTp6*UI2pa0hNpf*$LWUP+!1zM3N^gcC*f
zUFQn_G$g6Y|BvMz?)=HFmR+UhYWfAs%QvtmHEI~s;##o+Klq11-54H!WRf}=<oNuE
z{PoJ&`}o>8DYruyLUkwXCRL=jGPde*ZcFW7{dZ*DM6upM3q$2-%jD(KY<%Hxz4eB-
zr#n=n`$S)Vh2rhvoBqnyD4Jl}TyWe}gJTW(kZz-geM(G*x20(I6UIG(nG{7qdb9Zw
z#4k@u$x!!)rVV|nulSNY?3$8z11W`p-j4$g)B_<M1#1fSE~$yE&W<+g!3YjJ1^#bN
zD!FI#r}MquwnJM22?v@9B=Fm&DgZyqiWrVDsF(O3n=qeKG5U!vR&8NolldFq0cItq
z1)_qfKB8rLa$ud}&`G#&(7LH&3<y9A@Lo(Ww;z=~W%oXLfw6*$mH*C^<7URbwmay7
z;&MQs@JJK`AGE)R%WqnTZbk>s^#hYKCXR5}TkQ~4laBW*Ks<G!D5u1P$F!}>L_v1X
zib+FS;qlKeU0`JVZ7t*Qc>jFH@yDxWrk~fzI7Hoc`<KeZyt8@(VY7_2ubA7;#VCY7
zNgF7quNko|NbE5oL2;BfEMsz67XoI>ATj4a*95H;6vi;A2rUlOt_TR_<G1Urb#6vl
zWrMjw`@2iwbM@>I-n4&7JPAGyEvqHXWdIA%sr`D(Tta~)`2Fn#UN}PBj&tRWZhbK0
z$IyebW`R%{de}&b3#cw?)lI+=t(vLX+=@{xO<aV28U~8#^G58F^oG>bt&A|ywCxF6
zp<2Jd*X;Q0WF*Vx*D7(^pFFuey;gEr<dV3hXmPH7E1|VF;hwx-T&Df*hR4De*ipPb
zue!a-E4D3qMTaHyitz8?zv2k=P`NWBxR!Wc5p+_--SBqqoH`4|;}e{ibszTV01mWz
zZR#xF3~T!aoxGhxw@**XX@DTm#4lcG+$084W01r+gKHV30J0x)AUbqU$oM`nI_)$O
zfiZ#w`t0098)|~gh?>afkIh7Qr5N((m=lKkfD-AC2Ajj`oHSIp9CK77S)Daw59C5x
z&k$Fr%ls6ORlj=e<2L-=A1K)r**tA6D~s>xbPT-w*E;NF`#_c^43pKm*`L*7x1ZJ1
z6Y0=q4!`|)7wb09oCR$=$}^{Iye$U}gc2Pe*JOHj(=dDomU$r1MX6<fcVR!1^XAtl
z_vP8oO8`}JgKNb1D_T+IbMp5#*fNnH<&KX`Io)%kjX16Dmht+m(4Zf_LG9{0S06{A
zxHvyzh}t6fAaI0UuE_Xmqc3D3;Ou9*EgQ`=mXKU{T(=E#kQ6o+eJ)?|4RAh=eg0a(
z-yCs2fiYa;PeXUm(7mL;y|$I?j`X6SsN@cCN($;Oc#E4R;)&sL*!Vt#Bp^DOb|tz_
zQ)9&$?jgOFGwV#s<s0uIw~Y+s2YjmZQ+QO|vQ9&{8ZI<VEZ81r7?ZZ5mDq!{aUpcH
zID1*_Vf!PHX&x62XoXU0-H9KSK}c~fd;j?p37CC=Zo6|XO!4y1A5raRT<DA4eaEgj
zn4|Mo>;!lAt&%(HBxTwIf5Gt}CBx&x>W+>`0vJfubf#LQHlthcfR!M4)%`(~tAzQU
z+(7Y(pwF7|MV{Q}{XMP2Eh^wit?u1As;T$(a}5tK(+7Z2fvKY9+w;~7d8wZ$pIO1=
z*l1D~uWy#)t9SQh_pUARW0=9on?pDGRv+(XL!`s&vrNY|bQN0Sy*jb&9m_LzB@OV0
zzNOIS<yldG$oy@5-lH2Zs)ekhO2k&jA^9XhM2E)U#2Vj?sl-JleyPeRItgag%NHpt
zV`MTC=?ZbWj%|{ak9{XKoc*_0^q@EVso+o(i@f4lkmVQRuCu;OF%6w%3kM?hF7&vK
zGL7K|+)l+b2kHn@tcg8vL-l4hMWaW@^mLlTxpy<!x@%o!S$ukRSE*Z%z<Bw}ow+7I
zia`J%FNo3fYyp-M(?Awnw;HDMThQ~FG|e(yf6E2jk_{>fb*D`@alRem3yBw!?V+^F
z7IMjv8?yTLQIP<+u9)8Xel!TJZ?%_SA7q_%P?IjF-Q{@|q-WW1=XSkYtv-RSfv<_H
zhPd1{i>NF%h>JGd&<aPh2f6Dn{{kf)=rSI34RJY&Xn7vk-9LSU>`>I+XaKY`rHmyN
z4b?dlN+DQ3BI`<J$(SEAB_=92f5io~o95dI9?NCChths_Rmas_KxMGu{ylH_4^X-I
z7?eE7N@6h4TsYKRDAUZLtd4u<D;-NFWR0}>US_E3W^=vwR|p8fWqSsER=40w{>iDN
za<Rr;(x#>tSs;G8e?mF+#$7hKFMf*UAsLMa@T$bS3U;}1ksov8Q>{}TF%EtvwY+IT
z`<B1-Q8T$fa3o4;?7f{;{VC2K{^Kty6p_f7lkIpC5eenV$u93jn<_N3ydu&9FwF5h
z<xrozavkaj*6ZJ3-?B^_S&m0k^V#ow>}xapA)gHEwd`+D{*H4YS0<%vh2XeMCwVSi
z6i*U9&s-y0=@*S5e*%<<yjV<S-L|^uepA`GxBxev%8&PWwJP<bET@m*GdRQCIfV;0
z8|3Yto@^Ni=-!DmZ2e2~`{7sk6Msw`<(%;p(*WF-dYO;qQ0o|)w9PX*C%?9w?$>$$
zz%jpEpK`z^BldM<sy<=E)473jg=;;+0~Vx1Z~7x_fIz(>_(n!fOakaO7EJL~Htnq%
ziJ9QyyIO?qWk;%V7D3{AcCSkmLEdSk!3qKDaQ__w%f&gPCA_&C#qdCStu8a5YqD!M
z#(@7XBc}rh&>`?>=a`e5nTkCS{E2Pv3T4HOYt}?1cgd(1E><R%WZ%+It)_ftDiB-9
zvIZ{7s>}W00|%3+Wgu0*yiL}OQgdNG{b^oASZNajZJWI>4xV%@ZMt=pmFns2X{nm&
zjor!Cs`BQhV1>^x=EcQDDg5x&ACEoSnk)$n<wl_F1LjtJQI@BN=loQTAUKFtl@9ED
z1^GkC>ug#r<C<1|<cD<&xf^FK&{r?QgJ=EiKoW3E<G^IYWx1-{bs6O6y9sI6WJCq5
z{(}<~L8Gq~k=YdVxSG0fSgSWhzC7OQ-xTb4dTuwZD6r<~9aD1Kn-z!^?5yyy>{b@^
zyeK|pwJsRqz(}$GlUgRu6EA#E0R1pT+>R4YEN!^5SHJw@{4OI+GXFgFCqJb>sdCvw
zMNLhwX91g3_Q;FBGc<+xT&qcbl<$`_bpk78$_1NEgE;<h#}DrV!NbtKY=Xdtnusb+
z_^!KGMKe_ET>nFB5uXh{K$BIX&jsWldoX+88tE#rpLS#u#2$}-T;D?p;+-RYAx{av
zTo-Co#?;PZ7wNA(N|XhjXet1g#$EDZBd^^xR~;&_yLnD$<O3`Zb^_8>#~tTObEea$
zd!v}?8gg1<aoE=4(_Zd9Qg?N4htMN{jBl+{12cZUK3FyfF-F3E8;hG7m$HIx{EL`$
zX|OT&tT_f0u5UFHLyK5^X@1Qq>H>Z{JBu&&;N@{4kQ8P-5og-cE}qq3AK-EUmQ1aH
zB(9N9!R_k^%T8uSd!4liTUx%X+Af$e7SCed94}&pu@#wMCo!YKR`D};Jb{C3hck_8
zwh$2cVV7a#ehtE+f_2#sHtGH&%@Zks-m@j5-}0lG-v;#D6-dnqs^oM*bC*&V@ZS6A
zF>)*^PDLzizc8b&Lg-n}S?+_Z4;A>(;ssCW6hoIKRWNm)2<tu@$6a8WjanLYKDi-#
zPUe)6L^3g2uFK7AlkZoNy28{<T9#6J3`Au>e0mkU!`Qb6WpYL3<jWtv@qySzCpjW%
zSv1=fPxUu<157WC<t0G|7H)!U7i}(>(}35&6Z!QO8HbE|oH~^azrS|5-3MY}NB5se
zF-7>r_KAtD_GkCSgGzq<5CKNeaB<BH(Z&sYQ~(7wpu1EpuL}4HG&9>Mn&Sx?9myTB
zix*&)(0(7W*j5{sT*YJ{Lynx_bkj5KTcHS5Yax;vZr~^r85jJJ5#Kxsh7E<NF&gUc
zX8=K4*iOC(03<>Vk@;uRmQ)P>7ZU4Op2w1O<HDP%EU88dBc(E^4PX&32}e5fD@~Qr
z)6p2S5<Yw4@rRuuFx-{mV|KsmiO`|f?%LT?ye_T~=oHoM=m7hG$gEP}@5p7J57G!s
zsq3u_Z9$Z*KJrymM48He=v4sT>X?pSn2OFq@#W9+Zw(yUQ;^lFoWX_DW;|{vMlqE)
zb-!qN+j4eRfXLUsm!?&XwUp8A5vxtn=*xFXt60a>81f0BeFKa2<*LdToVWhB;_M)?
z$N)+&yQ2(o_9};u1!xkncc-I`5V~pEh09NXm<@AM=n-<n*hs`MsDWSeVH2Rmdp-nt
z+HZ(`H8m^_WGvzAgOLLjCXu5WQ!A<D-SU#@=DVoeZNCW99i8*G9Qdj`?f%+qis}fM
zz<ty|&Sr;=6!0f9a}FBpKV?H!w}1z6RiBRzn44q~rijJf4G<J<M)V8tbLt1CA=o8e
zs^lVs(H|uUc74FmUXE6^D+~*(zumdkvGxvurZ$&VeP54d9IOZwk>h$5=7~`=eQ(sU
zK;NshW9;)I$H`4Zp5R2U2Q}Q_V$w>f_fnZ--7XqrGmM2*WaCAoYZWwvL}FEGU)r@7
zysmLr1)fQ!RWQ}mE3fzR$Xi=vBr8BkFVU|(HO=!~dIJB?0)&<^`2@ZZ|2ypfn_5E}
zko`KVf@4hX8}VAVycsbBZ3*5ETYKGsGuR_(Mdnh@=~hmcjAMOnP=3x=`KH4~=;MbS
zgZIIsK^EZILb0!1NW;J)Ie35vIYZLha=#AKOk8H#<rS;xq>qH)ay`_A19oRXw^cJj
zNZ{_7{=YP+Y9?1Cz!xlCL`CZ;8?{Jm4IlRCE7b$5mrGF1?;m<kGsX5ey9i9h(id~8
z`k35@WhI+iI`TORB*{^Z!+>uoW__gzV|4JCjw#oLxGcaxf?DIn3ym!ddrw=YStrLP
zHRkft!b$&vlbO{zeVpzwTl7-R<pR1CbvD@^A>tQn^*TB;#s3xuK7o{StGval1XnDV
z>32s@8ogUKe~Zw=kN4NHs_M+z)pprc>njvNdnq^DF2l+s&S&(?F90V}|7tKeiW%#L
zQz+!(`(`RQo8@L%c<{*+Bbz@Vb;f_BYq!2qpG~V_u^|%)zTbHlSZShX_w`7>zPYUn
z%RWw24@FR5c|hK|WA>0T{OUiTObnW{hrw04{vEDbLP<v%I_J#zfVv_VbU+mkHxD~m
zns2TuAsioM|18aEeNa9dq*J01`-5`oiiZFRCI<fS3kQm6Vqnmbm4ybS@#-5DCucJc
zz9!3fFrs&^1rPU3>gI4nq?fm3Y}qf)^88`KxKRvl2OIm6u*@?{+XF?Y0U8I^G?^IH
zCU<KrwmBG@xN6p?oHpu7RF&D+X}KJ%2N^D)t^v!lELv4|55r`L0xoa?9;dMOr=w+Q
z8r9|3aY3Z$)>f-&@G|u&86WcBFWTR!4Q++e^HklWyyRbB3#c`@R1PddRc8Z}Be53N
z2?KFzyCjNa;)=5z0a(urU+;42v&2y$A~}f=FSZP=-3j5(#K90TDXm4koFk>D@7d_-
z#eY0WOY1)x2P?&3J#M<!RBXv*K4bZO=<-+ut?wSInnQ=5-}{Krfa_QaQh$AB)|c8J
ziru%&yRL`y!FsGX&oDm~$kF&zRl9POUUe!g{ZzsNZW<?tzBzsW#({%Rw5>*7XBSVO
zhfF~YMk1b(ThGS%3_7^d402{Y4YV1s7}IdP;ZMP4r%zGI@rE@P`Nx3a%M_G+cfh1n
zwSx|A5;-TL`)o^JhF(|Y$A7ULVo=@U_K=|5;+Aw*>oA9)vpT|h<8hKy%?w)my(W?M
zvp$t?y%f<rBZS|^4Xu`0b(4r~PTb<rDJ2V{2ig^)>#Gj&Y$35wAQ8qZ{;(PUsI~<Y
z{ApyRVsw0_5BK&r;T#y|i`J~r3~##UCWDx_nQGwqVzM8s_gA_5RWRcCr<*dYw15}4
zQq>ysMD?&U#ss|{bH=5QOzlabg7q`BY(=y_$P23>+vs9@p~q~&IBjAU5SR&%rcN@p
z)leO5ssn-cK|X4kuax9|B`!Kj`OdeIkr}{o>V4qZ#NElQl4JQbZY$Hc@9D<%28U_)
z-0GU{u?hMYRFa6#Z3P8EG=PTSfcFDeCEB<fu?P1JHE7s=4r4$J*clp<$>j5-7Ii-3
z-%Dnl>zg{QsMl6Iy$f%M@_aqUgGw(O2a@q|p0gcfWXu`+<yLj|%Gr(eIPpv(Uf!4z
z5OL>Ie-OOe>7BhME_ctt5-p`DyurydtF^;HMpoQ!^brp0=XPZbF4ujWEjmW5LJM<|
z5-Dh%Smx5}WnF7ovvuTl2_9Y$JSYcC14rh9#LQb4xcz~qnXuSQn}Ai(o)1g+Z=C#?
zn57as;!X>yGRe>QVufVNvB@{ImRQb9<bMf^;Y#;HljG9s!N#WbUv^?9dfII8czL<!
zcPV9?$ot%$R=*FIOZ7z14;z3g0~`^KNc#p+T(d{!_nxF^{3brUUi*C?MP@<-W!pkg
z<SKKz^T-%x*V0pWJ_20DpQ&cfL)VrT3F%`NP%h&b@}yI7LrpPye;i}@_AzwgLSD@b
z!&sZFr;p9b+euPq<tiT}zT&y9BjC-kN`XVwarT?jbtO-sm)?(qtWGUlE!{Ld$>13g
z8S5kkPbg!SGPdZm7P>o@+sKQC-oyt2MzaqtrF2IfOLz{xC_fKUwgm%&`X0si4;haP
zGk{`yf~I|G%ti}BKM)Y)p~Vnk5teuu)qAuNe?j4FbwKCWG9SBJm|g8#0dBOmF5ka4
zSsY6+QHu5%_^RV;NYhSZ!z#BU5n>jvOe(5n{J}(Ygb%Pw{RUXIpGbs3gg@l|ibaUZ
z@AMs!iaGwQ!-+-;VtTrHU@0gxK_wNo)>3w4@`5OfF8fYzcK(VQ8vPZf50zmJ??(l8
z+OHr%#8TwiUt-exQg-D)^rYwrEJOZW+dH?VImpX(*;;w|qSutsFm9OCgy(dQn6xP)
zCr<C9=4M5f-x0g)fKhtPQDK4BdMy+3zP!@wYY=1k5?_!p3{Wck<q2NrTeUMB>BAVI
z#k3-S)Xm|Yb|kc^h`&s;ek>LVpV%)}f9QnL`dvZueajSOImB2~kg3))x=~HCmR^T%
zMfLY;wtC@}O2OyZKT>5gtvIWhU0A*179+Cq;lDID<&lQNR4-TR=9^QHhBYj)gxDir
zTkO|mB*QU5FAtXil#OjwkDTv(zG{Cezc9YArYMW~jo~0OLlF8$2CkJA;6M{oKM~5f
z#^J|{CL^Y7axZrB_5FarHlm;Y{ixsRK#jt(8-l)_9!Fm2LUk?du5WBZ<~Owr51>^F
z6z4-Kp6ZL{kPreNGl+E250Zs-cC%Axzt0m$Eu#8Xb8CF7+ruC62$kNslJT~NWuxpK
z6<zgtMPw?P>a5lIbM^C%Ub1x8)m-^aMc~14J@nSa_W}z7`d~-;!Pa{L6+0S2^j_lH
z*s?pv)H`s93fqV!GFRGO*+~9es1gAP*&nStf`{r9NxS`x29}eXKAQN%3%F2!ynDvW
z5NJsZ-SS&sucgFZSDh)l_9@;lXIvhcqo>a|JMWQ<H%OmO8v~P}xuL&2n?31d%Ltm-
z1`(JvR**dhz9B4l@1m3OyEN4sGaKi&E@5jErgxFBtNzf0Ax*OQKI`=x&-_<{zB-oc
zw=mucJVa5aB;fbipWYFP5_uZx3()P-Mu#fkG)Es)CfIbo5~s})CF6d45+KwqHKBTL
zS5mn2>nbeb>7bFgoep*F@l1XmgGQvKG1aCy_*VwN&mRXG=+%_fcMW@}loe_#=G3cA
zM_nrmnOt<!Z|^p`NN~pIb*g@FY8d55;42~%W~AB6;Ix=a)d8RkQGzHuP*XX9u&g|s
zA3$}i^A<96^m)E4eSp_<@QC}=64UW3SB`}zmp7^0sf&w}$UV<_6-KRI4@EqT<+WaE
z&jbwGn35g)o<w`PEzae3Z(cYip@c!}mc=FK?cUALuo%OyJi!`;TxISAs*RYP2k_ZY
zUr^otRqj#I=k5i>b4n%!@f!C+*gC2&q=WuQ>xlvPhM8Cm7_Tndm23J*wjZneJVVbS
zGyWr*Sn~o>5v9ZYwP<y?iV1(J1c8jYvH&&m$?(Yy=uFdBQ-&zD!L#&dPE>|W`F>>+
zQ_N68Wz&|n%*8}B_rBg`MM5&y{d;>$Ri_%JX_b-X@f0NG6QD3g#Wem?1}%?)xkZnb
zx?X-_0<u^Oc4<NgHi2xR7HJN4^yPS`LwNkm6<z0-WA>@B(SB64>N#Xu`}35VpoKXw
z22q`-D!kbJ?K~va)=pamOV;gVt!Hq$Q8^EeXLF!zR~ui~yCF80=t%a*Rp>8a4p&{)
z04RZCbuhx77$4{OArOYmH|g|ywzS;!H;k_2VX~s2AXsSV{_zg$_NK27CU0HsYVhx-
z@9_*wj@cpf_uU{#crG@l2qdJFfN6WW<Bh+Y3!*dAwD8JMb~2u&Ag!L6%jpks<9`S_
zn@4@i{^RUlE{`)^k=x(A{(?s_B|~Y{6&#<~Z{&%#b+2L!;`z<ba_9eGOzNZ*XBVSj
zAWpZP(;vBdKpp?FlR6P_daGjlqx&!A+Kk5?M=It0EpfH)F9*@k1>FA_^vQDM9Q39T
zLl;sSS5Hq~3_^hvfY)y80kTdK5h!obkM%{#QXxsO=%1L|H-}=K07mX1+F``|#f*79
z^AILs7;aP7s=Q+KX;+o($=ri2Y2cUXnA0ypM{S+$xChOpp+}iWImKM0bCVNp2P4=v
zHa2^#{@2k!Lah;DzBV~)_ZMv0a`G?Rn*Im#2*gx~CH4prjUZ{k)P3X@(yp(I@U{V3
z{8viX1Y>dLLznf2;nLQ*LTHd{f*J27xmg_S%kOs<BJ-t2V(F8e3X)}K;QA{Dj_B}d
z&(mQVCAPv)p?T1DgKAoGTSJaQ_GrxoS&O-@5S6-s`zKRYnf?SqLBXzFEV-y6+DgZ@
zhqah|mA#!CZxUhsP7l)jU#q7T$pIyHq?p3Ke)>(s*p2y@s{;h>vn4&1+UQt3#s!Wr
zf#a~+C(QN4sYWMhCF@4sB*gd2=b?lG&~VQVKTKK%@dKOTzx0=TDzOGc-I@U79te>z
ztSyE5j+AO!G=2@+fH0x}$N*05{&`d>-+@Q^`yYAZ%}d_5KZKyUY7PB;ryU@sp%!To
z#wWJCcaMhgH1o93j0}Bf$mcRYEeXu+0e=ie9Djal9&fjw{qfa5$g-77ZGKSE>Zk`9
zJX7EUJ_NZ|(AjjoCw|WF+2`sk3Cg4e{MmdEkqbw<pPl?Kqg6e`E9zmm?s?l`4$TPh
zM?gvO!@?!0|HM>~B-UJ5s%v{WUej6M&F{~$yc1CBc5s~6UE^OL>{ip>C#VSr;J?Ff
zKR<h#reUC0v*2!L$+#FrBT#Vcxyi@QDZIF;AU&%o$_6Jx>|HjfJHkeqgX=Twd(x~S
zWV1lmanW&F#lj|bSiaJznbx1EF^uZYy{K0NXB`*D{3C{|cD$mhuMCbmzY=a7(-sfY
zWN)E7C(4{APC5n4Mxlq~N8EH*kA>B!Kx0W4T!8wUR0efym+v#!(rcs5xvRXIc{ih2
zaXr%AD@H0a=5+1g=lvk~>h5ntql-ro%P=h+-pX(I5Y51{x9@9wlIf?dF#tTV8l(1j
zCpn-!JcG(pt#yi)LiQRWNcHP-)bnT*y>*6uFX6zmY(|D_D}bcQ@Ae}qhR)KN1;e^c
zi9waO8(Qk$4rZMd9?#2AIed>O?Q|`7!Bo-++#^*?<&NYww#0_~%`_i&s?5Vwy+2M-
zo(ly0G1$(d0J7kn?1?UbB+);T`n0Ta&X-BUUj&SSGDrl>x(rwsKeh8?M~T&`f+?yk
zmAtU>SomTJC_@2;%a=u)!Y%BYJke>G6ohnlD=oPbi-L~!rgXdXUo%7iJuVpi4Zlg!
zX1s(sh-uSF4VZ)#O|e_eX|T$&_ha(UCDp<kBrS2Rp+O>WVT66^i<i)cFb)o!r!ujh
zNBnlWyEWOm4t*N7rf*W!ylg8dDb`Em=Ijg--j}!ah6_X|PjRAu#%q5`;`~Q@o8qWi
z=L|q;?}6trw|EGI5z4q+n^x2pWI(%Daqmk{yyzR0(-DyhdsZ7yRBO<vNt$x1W^*L-
zZk_)4$Idx##LK)3))>-&V&i#&KpOk52NYXD_RB1hmYx*!u1&uB$SfMe%iF*FdV^j6
zVc$z!cpZf3;%9~*wj$AWY7F~vXkw<1Ge%|E5pvQ6;xR?=IO5z!J?oJ9!_i3q;q^^t
z#Uk-VsGSF=3gcRq>HMQu854~+M%}KOpNJ|2{8NLz3k|2sF)k%qGp6Civ{p72@BjU5
zd~h=*7!S33NtXcx@ebh4C3DBHimyi%I|_4H|Dgy|z`mzAT(Ti{kc1)amf)STS-SPf
z>VesEuLSy|g)umg^cdqmF{QU-;Gh^ck<R&we?TOHtBxZdTxv!3*Po4(bhfZLX}WoW
z;+@t)2Hk{`4=oSve&=(l<34(0iy`rQSKvuPm+y1WrmhHB5DTM@=92l)j)~tsM}7VC
zR`_iTjP*9`EG%cWtr^0rm6pkz7cGqc6*Fbx916H?mynps9<|%)x4!8Wy>Wx#SPE6-
zI=+XW!~yV*8!$6rsbGID#PwnjT&=;xTXW_h@{GJy3wjU8*YG#a*MrWo$(jNmy@@Dm
z^XzVD&!}hMN&TJ;9j9h+pepekg0~zIau~wCW|tjHCjdioj=!P4e{NlD-@UADiTL>s
z0B$wj(&xbp>_OiOfFf40B%~?aFw!7g5~rq-9SSOl&di!1Lb=ap3~x57{yILP0u5Y@
z1fg*OM0uizJWiuT9_HvK3l*z-px!$9Q&5g=jp_Joj%!;TOa5%^PWG9EU}VTm|La0+
zz@)VLO!v!u2CR#+IYC4QB&x^4@~KML+6P;aT@~=q-0WO;gkHES0HTHj3oWSw)<Vre
z=(sc>%e4=8UpQlthW;7qX{oq>Rb|G?tCapL;QGYJ3kf)1pznFyiw1YeCqIJHjlbHH
z$>FSnP8yOFzZt$P>Y4#jAoZ3J(jz$T3}Yv5(_B8j$W2diQ3#}iJ!iV<jJ!J%CnHUx
zt;?zXn2KdjRy5|=W0-ay{`U64E7opUVBQH5>-m@dCylZKxXmAS&zl2B8}w<$8@$;h
zS-1j2l8F8&NjB*E8aR`f>$TYq1E3a`bW`T9p}j_9EMNM3Y|fv*8Muf1^35rZD?*Z9
z685RftJTmskclN!v|X;^?l~gi>jxmUMi8bJ%Q2jg_EZm{;h1>g)h6&4!R6Qgk(B*W
z?#$QpPFF5WEyJfyBW3(%`@ixb)G;#BVvoQKPyFy~4Oq2pMV^!E*c3ps3NYsi(ijt<
zTv?YLKZ(m#di#TC;gK()awA6N5Ydi&X=g)taS+0&zt(IhJVmOCqTK5w<0n&lV48CT
z0Pt1+<nSB{{RU%UA@>DCfb=VaWeBt;aMX8@)BiIdPFJa4Daa%Ih}VM8)%<12a?AFG
z0~HOUNo9j~Vp&W4$QrCeX5mIR;(C9^&-IX`n13e3oS<`!Z610H%LaFu3e<b&pa~|U
zW`&ow%~gFm3b`UYF?W5hJBJLLtfngd(ioTO4CkP5K@8dAV*#<Hj?iDVD3sQa6*pH`
z#}4QC@rb@na6;dQubYv?pXsXk)H*#cB<sixpFym9WqNJI^u1r81M*yI$oL6bG={WU
z8N8sCs)VcC9;pgRui7uIj%Z&`p4Gd8s%hcrZ|!u-eO|OU*5Yo@V?t1I(gzhMYtzSf
z3WKN_X4te-f2u~RayNdIh$m8SWJDX-8kF9~J#(BNUUYj$1`ZW3N+x{z_Sa&=H?J~|
z0!jVQ?KE}Uz!8Vb`@=kDP!nrOV$rEiK4RVkIN}F<)0mkIEG{5zB%m+ktLTWHMjEHL
z74wy<%&M!53NdUTejtS$N0=f+25xazY;Ei^tCPp|CStd$(ZSm>_wV9-H_#)Nkm=}8
zGo$w)ag9{SstB?BN<sXl@LN+A836GCM$DJ2?Kiq(>rCg}L7Y$<{Xm?<`UmlBxsA)^
zAWD2?oxE9Mb53s*w(JHU!su%R%AlP+T(pC6SavK6wLX7~c_dlPx}dv2c;XnAx#Y6t
zv2g*F5(YYWMuFM`Pw8&wx`93_Ye6fVrs?bOoUMEey1UBX%t`BDYW8j5a*mMMh?@UN
zg>e>wrg710u!<lP@cqa<51qtt-=(RDvx4U*ojmz@*uzAfVYu1YDwPiA9PuMYz>a4r
zCwgQ;x_Vyl-}`fQ@!^i(c`8tnc0Ps%X_7Csc%@EtX=y2q_v_Vus&0DJhg_Hf^`;6;
zsV5{qiysF@#{|`rOHu~~$)rB~317c@<o3LaDVCD1>}J~C_98T1iCpzXEP0p%)8-Nf
zaE=iVc>$>|(O?q$v$09^j%umFFE}>~70{HvgGWu-v~*d*BA4@(o3)Pi*lkM;gzTB4
z_WsmK5NXS*xwAEo=kj>=9ZRxe<aZ_?5I^S+rU6sRd;^P3m|e8~$+JyF87-qrom=I#
z1JLB<8ySB`=u(ZIsW0j)e*2fh*KN9KDVTgL;MqZ)`XG7@j+S5lSa$>L9%mzF6rUZN
zjmmGi@;)SK4T-N?bIqZd;ql+Irno<X1$qqI=ZbvJnP_tP?7d5(&gs=GYuxU+{P=~L
zuY=R7yN0%X3tBbZ)^OQ2{Gw+&s72yKO=e?r?Ov|a6vSlLkHU*^1rh$BU7>O%q!Ztj
z$S}alLq_>%_|;Gz4Fe|Lb6(KABETP9skneb{1ck9BNWvkoC|tCqBo33adI^C|K2c^
z@Y_ZtTdII#Maz-xwiC%!QVow1mkj1^)@*C9e_rnc?@qKr#*7tjd$;6>jeP2qOV`EI
zrpN-RT-^&cC~3wnRfq_453Q>HQ9Y*p2(Leo%j3h>{^aAGI1xzr7S%O!ow<tPq0q(g
zJtW_kH#%QFqh-s37>iWk=f!&O_AV_<w|-B5n5@47`zZP^?%<$&yX}HD$tr?O$}NI+
z7IT3t4G8>9>fYvCGmlJX8mXcAn8NjEGtJP^7=W(eweV5_I#L+Iu)v6B-GM!SiX(=~
zqxN=@XS00{L#vpzF0SDe^UI`gN0RoX;zQqk`6l$j-xdu0crH;(x#{z9@0fW}t0}a_
z*B1G+eLNY0TuU?>)k=fR<jgt;6|~T!=$goFhL82|1hsH|W7+(Q|LsllT$(9a+|bOb
zcT&48h}c=B2PK!I%t0g6Rm$`s8=i-OFmNMwFcIIn+%W;(hi$zHcmw4?L<+NwPUi)0
zJq7?Uh*3!2TGm;v^f}v|R)gsV*qv8yXno+#RQn-#wg)X}h)J7?%N3kH4XR?Y#Qx-g
zab#}f<QtR7J_v3=Pm^pyCRv(~Y#Bw^3P5r(N=FVPF22~S>}CdTmJb5VXc*s+608;y
zROos8E$=hZ3Kgi%C1cFjU>{w);#DdfHAX%QxYE-W7~=^KSeCQC__G}$&mFA~_b7b@
zbbE8hl8fd-)8oP+*cx)%uvYRlMI+Z?u#{R&9WEp<5SO^P7y&qQ8Md$YLJLOXI0{21
zEg~O3bP-DR!uZl-!7RvqI|wa90V~uWh>G=k!1Zugl)l_=4@-ulgVr57F&@JY^8H`L
zRo%R*I!18D<2j<64(#I+9M7FDsaac?OU1n@ONFXs1Xoq%&;vL)<Z|~P2R;l1g}8nx
zATrhrHN5GHX^WVE@VUDKfe0C5I42EaFI@H~h`vu<mCPd50^S~isbPHcUM+rAeibr}
zbt^#p(<MyxwQ53hsaThmTIj{yRt>j5e?ozp(HtUtbCLp<iZ!zMuGl!EGqB~|cH2ke
zXeUwH4b?~16zy=#zD;>|JYRS6B}%8V;vaF09$Z`l8Ilw}!D9|Bf2`^obx&HMp>KGn
zkVz2ySP>ke@I}}z)c!x@Y#{uUi^VYPjD%CDq=?;n#~Z&(6X;2JDQgLFn=fZR+KVuI
ziduA9f#Y@cAR6HsieuVedly2?*vvsLb2$eX>Y}!+h_NNpQYL^uPvs{TCGmM<TIF8z
z(Lo1OBYf_Q&~;w=LpZ`F&@_bsODvW>tP_kyDaLr+Bv}>%()KN;iFZ75DBb1=V^7QQ
z2pb}P$VuXmq)p+3TXJw8Rr4?>0$0-|ns=X+<vw#`L6Zy@JuePgYTJZ*NE4sU_rNOV
z;jhY;zpz~)G|M{eE~!0Ym5P^R6IUGWTesB%f{^9;++nNY@GJY0Y)X-&hEF~Gxte^z
zJsRZ!qP}fpjE;A|7kPg1XqMQcw1Jc|P6$y%G`ALCQC|<5l(XL)l%xxhswsWp-fD8)
zoIC{DLp>VObF?y2aE|4X(X7UQ7JNaY|D0?7_?ru%6Xn_7{nwW&yJ8d>_CY32ZyjqA
zAvAFdpR+HhVPp=2=4+b`nJvrDj;rfser;!|%Wiirt!HQTStZ{q=Os1_XnoesGrx5+
zDBtu^jCkQyp!J~pTz_dm+R~Y(l#K^*`^&_;*Ad)8=PQ1}H9J7Uy+U$dgdEl>ILpMd
z3B&0@v_gc`ZKCcdu12xZGGY8+>3Fz)wROSSKRW#)3+r|h_G@~(K(4SKb$LI_ti58+
z@`Tj*_{+hupsYmbWUo%-#D3X0R7I)$@tO4o`epYOz&p7yX(2ln#1Xm8mxUSCcOxj8
z_mZu1IhQdb+kOF+aO?$kKAJ84XM;GX6@!OA^cwB6L(rY0Nc5Z`bs_<DkratX_o1&q
zF29B~DZy7=x`rf%Lf|MRhSlSgLS9PkLor2LhTR<qjrwjg;+7PHNu5`P)X5DEB(kd9
zP~Bi?#cR?HIns|NGWM;-D`5P1isY{SPHqvOK)G3)H>AGB!Vr<8E*K0N<>Ns=VB#{3
zBO6byO271u=vo&;=Ik%a$3m2=ZQbxx=D`(5cbj?@p1AUbh{p`e+=BlgcIoIf!y^;l
zPXHLv2A9e-&#mi1!(6p+9BmHDUy}wjRQ8pY_AK#7qJISf5tNKKw~F7=rselBt{K3e
zNjGz8<P_f>x1Q!LAselFK-fF<Ln$22|GW>zJpXJqKb62HDVEut>+oEKi$3w|d+yWp
zH2dTsDW};go?jSr>HrE&9~II1oPWY68wq;b8Rz^|ady6NLs_a}YE0$qq?ybq4XvYp
zhbajK1Xaq~U;1^ElW{|@@M?o2cZPmITpoSx-wV1a@!%;HWP@;(WGdEt&PW9v`M?lo
zx|wv@i}p|PY`0^HbTN%?=7dHD9p%=8AClhOIhq;cj2||!Ag?WdZ{LCTzTj7$j#qfn
z+eB5r+}f8TmbH$T9+x4k8kyv7f2Y_?K97%mv!qV|Xzr==UCDBNrXu9SCQB3Q8Hf}4
zqw0=CiUZo@*Dr=2D5FDpa+ILxy8Ov;K{c8T>(u-41Xd?HA7!5kzF%Y-;Qv{GBus%#
zn4kTz6o>P_=@e`6!2-7{WXKBP+=I4BST?cNl5hTDp-Q7_s&gKPKocPi`zn<@=ioEp
zW1P|(d#v*Tp^5J9Zo^7EO|mh$lZd#OGHM9tHeeFpUHFJi`x-{jwLd<j^cv@F7Bw@7
zw!cEEo#>IPL}2vH3VF$!MWTp<?}I%aN@8j*NOmnP;)p31;0>nEb=v~EK|8JA*p{i(
z4;08P@2*`P)PdY)m&;rrdy!3@9D(kbmRepM*Ko}GBoN-|2VLz!KDSAf?!+TK040DF
z<Jz<M?;_dSM@Ufh9VN;{G*>+%@ymh~4}XTalbn>0``VKm5J(_d%N0Ug(gSHW0M7xV
zALpK+kH1U$H3-WuMZ4yiV;fSP6O)d&6KU8vjjz4+eVYsr($e1J#;DkWzMjuz7j+hp
zp30`%;ZC7>CIR2YUWD@iGZd1_<5T`H_n)#K=D3*U%q4b>y~I49;q?;Yx06@VT35=A
z>A_Wzj}Ru<cf>-_vZ(;F4IB^!n;`}tbn{BZ$u2Bv<;~8k2a=434G{WVfXianFG{Ct
zx`S#j3}w=%j5YsF7!2yTv+PgTbVl~fHb?i~bd#TGHf#o~lXcBlANhAvNMf2Zv0|Ar
zHCe53Fx16nvUEkUY(MLIwOlyL_T8}ve@H=JZe_aNDTOwX`OkuRj@ndyus2a~J<6~8
zMe;|}>8zR}w+-8;qP({YGZGA(9|NYNS`5l_4d|b<Q;-!t;=*<OxNo9dT_m`-Nuc8d
z`M;<hq%Sw}ts@KyzDE`vJ?{AE+cv&^o!z{~8Jds6W0ZVhyiKp%7SB;&Z7JL9BxGH@
zE5=-A8qSq77-2lu5(GI_bih<$G{JUjHQYWY?a@j44t}E5^(*={x@I#_HgbBmtUCL*
z(c=0)bCe=$cQKxnzwS#8Ur6@+Ju0RjknqWDd(~AM?uynqkg9#a^Pm|gGc~nolx-hb
z@vaMZEKmSGc1YcFd2BCLr$6%649Sj9kD$V;w;oW0eCmmyladD^5(#6cM;*)47Im*=
z{NAuRTElc&l;bHZ$LqiE@&0JJG?QxouP=SdvFKsiSSp>hEA#ytC$H#q$+5J0yFJ}J
zD<yknks2V}ZtHVtZmX^H0C2isI`{=(jA}KtBEa9Awq$?EXLZLk5wt65u-7iGbn;%A
zyMK!%nTL+<sA+zm_d0%A8VR5kOX(R78c;Z{{8DT3`_+h!%}|!$Q{KgXHj*X_mbaP=
z42I@ON?fxEu2rRR5KlHb0rEL+HImH5JVu_6_selh&h`=OW?Q0QdUgH-tFBb~lx>mX
z5$hh~+M4y#nAUA-z?OvPS-bJgu@yWV^<_)<hb}u1QJ2l%IM4MQ?>2wOEdFzSE@5zp
zVx4}j9qOIu(b`*wi>xtNOr_T;3`yyp(;kUs*XI{Ddr^9-qc4k0cpb~R*`JtbWSrXt
z8RODds}x_ol}ea=49Vk<eZy~<Lu#=(zfJNNc`4?C`Qnl0|H=3%B59Sb%7>q1%hz%R
zr4NxUlJ3ZI9WEOO2*;A}CmD;nGbDB&Ny;N<mXDARV~&R}NUTF+cheF{up+!r$1NaN
zEE*C;r-9jJc~wLr5?F>5iW@SDOp+#+eEE6`Mmm4InS%R)zWtGNzEIlU?Y^z?32d3m
zLrCS_H|pAi!{4#X`i|Td>7rzYI325)#!VSuR{#$EF+YOxs@?J1?B^YVFaLWw!Byst
zS@soy;4%8)Z?ovz^2Ts;WV_rRqao2<qrtZN5s>orxDphSR861k)u)v-Ye3K$_5jnb
ziflb~lS7tUeZ!$=2!r2_<Uie-Hs(FWqh{yzz4$px?SRnU`}51IDW7*`c(%)>5aKrv
zfmYvEb4ymTt~%XD@47!1#n7hYG#&$*We(}Vk|_jx6ZbD*v$!q6X&#(%>;HV1fW{$A
z)AHEwPOsTQed=fdARiU7$XC}kSUc_P4va8*H+=a}7%L4nYXA}#Dx0iDoE$t)G5F+U
zuXJ}nKAR0%0#1ptJ5K3_`2@Y1`p$b!Vf;Y02EeB=+v6y#mYbI&=E8?*1F6fr?V-Ha
zjb`s>+5M*xj@qB*;PWyNqfVnT*7_%ArqPoj<yEYFVv+ME79<I6OO<~ur(3WMTo?ME
zGwzC(p2>tiQjWj|B7Pekn`zt(loe02Y5k^Tm9g|$Oog5}CrPdKGGVr#?IY1vmv|G`
z)Pt!OS2!;n@o}GC=feL1GeOM08Dpd&!KUa6Xi$<4gptvu!1%~pm1{=6sjj&EID;jh
z-~RSDJY>jF?%vrA11w16$jQjj$pI2$IuwR+gmUkslt@EB>>zkc%MI9Zd~`hZ`~!MD
z1~|}%^0c;5ng;n4dFFmAV*#%bV;%>{3w*YE)hcRgZl=SB4<jfP4`K9@!(xh2rP{U8
z^DtsE$~h;8G7$xNDDNm%9{HvzTs<h0<gd9}Sxn{VB&B1J{GnGj{s8|O%MA2e{wyz}
z!&{*jK5wp{1y?h1gk2pa{Q%FYQ_rW%=U-h$qmaAd%h|Zzew}^WEjLg}pIpw)eQVp@
zyynXr=tCd*6kR&Mt-j1VuZ=EWa20=}YY*AM3~=^fwy&$ZN1Zr1XtBWd+d)4n6C@J5
z)(%MOsaf3<uiLTA;gfrD^%gAMd#{HirOzK#9>&PphYbG{2imMGh^$(!=$d)l`*MpU
zQ_v$Mwz@J(Do`q;^OsYIvTPXL_<DsUW&SO<Zs9k-`Aq6q`Z50I*1PRmmEL}c&(jYv
zeEM{0*Y*MEF>m_Dw|DVpuK6;3@E<-*oge><p2C&Qqk7D{JfXX%r=OOuxW>)i*+s~<
zIny?8h8aC^5OsFWE>_m1V7x=G17`toBdIJ6ck=WLXV93@W4y49-=6R4+=#6N`Bde}
z$Pc_dlV9Gs_p`KvU<oi$ffvLE;Y0fkouC@1syY*Av9kSIhkG9!R_Hg;*i%}jsR%HU
zvULPnoL-U>Mr<FXt8%KDuekCGnlW=m(%yPovgM+#LS51(f+nRl!W=3i68SEL;lR;-
zGUZn~z!9^o|D`;V@6l0qP9aho`tziXr2k8KM_7ud+0*Cbm9`1xV2vhb-nMls4IMg^
z_TPWMVZfDR7+`EikXQU&g^AOB%xO(=0Bz<ZPqwT|df3-P?B$o_GfEipB)BuA8a|EN
z9^b6GgFKZyq-2!xOL1<^NF|i=LfPjDm-eddg)}++Fl=}k<>XDwJay^?{Psyx=`&ya
zs@_bcTc;!pirhXW{jS_wt5GfLvw=JAe1N|E&zt$9pZWq_w(x4cdD9(mKYbY*P502(
z`{AygJ<!L(?NoZ104(L|zIMG2*G|&<uqhaK4`TAUfXX_vx6t}=UeLajM~)fGco-w_
zGuTuCki5#uH<hbq!`FlA9v8_hTuwRg69A2lT1=C6iuRWPfat_UqV2Ig|KI=XfANZy
zE9snb{*;Sajo<di6KUQD|ABAZa0eX0?gJp%J-0C+qwc>e^K9LHA6tM&JDeeV2jrf<
z<twfcCrkGONE|$!ZPSgQnuc)g-%jk>-L*RMzylnK^JmMue?PB{|9s|O)7cXy@aQq4
z#dLTB16(!ZT5=XF+#8j5ZX{~6Z%~>V8j-PDM#%5e#`>M}>HZ=e84N<(W1Svfq0YqC
z4bGFaEKCwQs#I4%1n?fX?dyxqn%6C-Z?Ue@1I128(jPc*fQwqeKl|CwRHoSuHj$r`
zx04w~S{;2A<vUu9_=KlfaUve!83{oF$5Gx;NyWg&+U6~vFE1w>p$jnqGS2ZLKU;m;
zy5v9FfB*e7bjT3iwr#6th_nx6843U_3l_|6t)P)XW)1@`ov$d+Psy`NM;}SfIix}d
z{4IfCX*14K;@m>(GIH|m2>OO3;0$G!FM)PUW90*n9S?oIscoX9zQozUb_tuvm7m4+
zJ$v`k-@otuJnXDt)bQpv)Bn8aFX$tm{5);l`F*>HpuBfpZk|F1Pp%e~ux1i>?>qnU
zue{^V2Q)GU-f6#EW(Io>a#wc`!ya}Go3cRn%i~Ghr7%<H_si?*n?=H4oUPMq)$H;D
zJya>_XTRtDe17Yn^O?iW;<anng7A^onUCnA#}+u^LB9Gm=#IiWQ$FjAUIyT~N=xd~
z0#mPFX&<Ch45M#sSPEKDJ5-)u{^FOk?n__dsTW+pMXjK>yk#8Cy>tPu`SL~uhJZ?g
zF7`^0#(q25Bf*g6o<0r0EZ3|Z)YH1Vd-{0UifdfZMGKa!8#UoHu5AFt**x7F(5}n4
zb`)H1$dD5~_5AO-Y(BTXYX-mVPtK)3_=9FDYBjFa3OeVUKcST?R)XNe=p8|o2c1)P
zFUvF!b{1;J(h{8^5?ra>&lwXmuMUs+FW{?6fe@R@54Mi30*|gODR0vHvdUGq585s~
z!<o&~@jlKH1YQKEL>W@ai^M^P{BM89+iBVI<&oc($LXRpE43HypU7)Re6BtC8nERt
z0(Bvt;{b$xdenzp2YXr^fecG>oZU+6HRp_^t&+*ap0}r-MgSB$dNYm*G4YYZhpD-_
znZLN|i@sc!5}9Q@Vk}$hOWNeAb$o^<2Dy{A#>tp5uN9t@?)Xb-zQDiCGv$G`O}Uop
zrEjxqm!uc@2CO1R9F0*IjMq9)4l?ojjp_23%}6J;l|Uc<lPNFD*N8`Erk<X?+|m9I
zG-}jHsucxIn)YYZvGkL?Y3tp#uddg&Rmr|R3zt%^zCm~unTXK~5#$d0vLF7|9X)uL
zt-nM7@1k`f(9prt3kmS5H0YNx3Wm+<Eo|@PS?``pQ!Z$wx19Y}8Zu-E)oL|veDj$!
zbH+@*fB*iB!<~_dmy3R@9B8BNTWU7gf_|c$nW=Eb5x-Lurjdjrl$g&x{+TqYssXXy
zI0`@AhnV=8r=Q^s8#nM@{Ka3<kfB3q#E6mfSF_*CpZ?-kx%=(|Br*3Sa3k&k(0zV;
z4}ybeQ^j)RTW-f#w(=U-hle*|U~C<`$-?69*fcNf6~Jp;^upu?9i9B{_gzW<<Dz%c
z_&@$rKI^PMq*_tqH@)diG<DiE{^Tb<!FSztHyuCzf>T-&uz<j$VsbPfES>V;e9y^6
zfC&fz93iSRMg?fnPA_7_VJ^OdcDx~+IOPgh_4K86X6nEW5&q4l2V<U=gM2W#p_Q(Z
z9a{lWkE}fv{E^2utzXZhMvdZEPMmPfASfa!!x<Hz9}Jau^swlJ9%H8(3wW5}XENgh
zc``h953TL&JFf)4loAPf<%j7{j=vcl^0KbLO?Vse!Kv+i=IN(-+}Y!JQCl0(o1x3|
zCwZ@VC`sr1B>%j`V{oLXx@}Ho@;rxSb4>E>aoh+P74OsY!+yKLALv$<t_Iyg88}&y
ze-hdp^Pq14ZBE{$G@+gH-ZJ7WsDRpR#5$B4osGbs#Fhhr{e6A(iBEiz-}Yb6;aaWW
zKb`n?p5L~Z*KgWEyLDB~?zh$NJ$6-^U3VroUzMkD<@D{|KK}Oh9+|nryWcT1iUmft
z>(KP-QR$!cN>bTEB`bC1-o7greTe?*Z{JJjO+KGm-ZGBg^roR)6a_ao59jy3=RJJG
zjW_a-fBYl*{qJA*@-LYhbS0;M6nXgn{}bdZx>V|;?$N7qz!VG)tg4+UaZnC=p9#<e
ze2Pn{21YF;4D%x>2Sf)(EskD#=_S5n`*wccrI*sMVQ0~q!_J~Vf9GHFvQMp|+hl54
zZoZIHwt7nj{FV=dT-n{zN9EG3#qH_PSvt7Sw$nxkdZb%V{=ntRcKyoV%)N}xZ@q}$
zI{v@%nP(2;T2WAALj%9-UGL&mt5)%S`|sluCr$!O5m=5#?0L<Y$4m$)E=VZ(>SUUB
zQ~|IY>^<vfK41j%a>SC29P0&TI#TxO5D!UR9-r}Vs53CYD=2A3u=%1`zHM<v%VRi6
zV|-2M4m{8B1DN7@>vGAzUXOqK+u!h6!-mnVx7{Yp4vAc63qno`#dHZS<h}E<6t~dE
zq+?<CE;cF2=lPZr8EK0+_rG1+4BN!2bx2=^!C9VG7<K_b;(SJIdkoS`FTKR)O*)Tf
z&6-80UVDur9S-!M`v&2`>hf*N*#;*+fP$3?=|O-vU@<wCJVx9*NN|=$VD@10Nb(FK
zLuoPeM-F?4?F|1s0;5xy@YabI!40wt>_j`8v>WMg=`6MLOi;!KUq1np!9zux`0(S0
zdF{HjG<nKYuGI=2_tx?BXRYt#1#O+Q`+I#5B25lc_GuIiJ+-TM;94N%U3(Am=IuSO
zO4dm@;R1n;^&p1dL$5P+ayUaTJGkP5?L711zoGv=X$p;Q`6E8#O>d%FQKPrK<t;pK
z{(RcBX%qeYXFpG5m-9zFw<GqWd_cD%p9AO|){?&w@5F@zw-yl;XAooSgq_G-9vdRn
zKmr3&ka`p+4Ai2r9`Eo-US_7({_ktF_nv#`>Z`A!QKQDtkRd~P%GBx9zVwsy&29fu
z0_dPlBimhka*(6Ev#;0o2h^8tm%2@$?z9dbx{&KvEMy8VZ13dxS1+bH@A-S0`ah=g
z*>9ad4GoQ4)N1^PP0jRofA@F%<*$5&1_ln%>*al<Afqb9B1oj|cX_~75!poL4<Jjv
zXJ^kcpr-IUNIdW0$ahC)s0*QnSoCkwC5uFHQohKe${9kaL;i(+$`m%~s8huN#%1Uu
ztU=qBIDoD_UJw1ud*G+g2<0tmTg20+Plqxx?MMEyAPC-6;l>2!oCO`&iQ^HSfq-9h
zu&~_;#slwCJ_N)f_9{P>xbTPsY-|1421}@v+56Z8r7Xn<;P%w1*J;+pv*^4@=kd!g
zzf9S>6suSs*zv5)gRBCNVxB5|GUfxUI!wEMr^I~vPT7q(FcAPouzrVu41ENd2jey1
zIJTQ&aUj-8Jy+ga9X6QoGEV4Gxj0EXnK|6KKD8RlDQ_Z;!b>j$>jbn6_w9TC@-H-D
z!UU=n1=nf?j~F?MX3d^UpI&t%b>I1~>fG&tZB^n3;_XxtU+-IY?1dRS+q<p@70bQt
zu$*fLC^eY!Qo3xx)%?!Co<rxpV-k-V-NHptP^~EFoO8~h5B<Z3_>SA}pkF`rYqL|<
zwCVx5$RGLdGr9iB=~cG>2p9;mhC&SekiN(`QRY4&*c{DBB!CJCa2-{qVMw^XkS3^h
zc)$x0(UCjd2lM>?_rK={|Mfxs*vCFj6UL9{qE@3nnfP{|_kks}{u|rM6G3*Tt(+o~
zBjhsmyljQU(SxJgc$XgDy;trXn19t``s=@)%jZq~GybEuzLkayZQ!C-<Do-`@ZbK;
z-_SQUY@o*<KWs#UqQ%b6w+|)eL6-o?m%(Xy34nb0hJ?H$i3TD0fb-!DQw~3XhtRh8
z+uA``nCF9QgJBcfivJ1`s2{PDL>_t_@=6+vYL-`(217Uy-{<%-NGFBH$;kC(_V*8P
zQ7ibdM;|qvtduFfH-4HEoN-FEjMO>K*MT$wPbrkG*wJV4H&H$h`*t`y`05p3h~LN$
zFLU2k`yJZoksi|$)*b1zy4%_o@!4mOqo<#K+VQ~g13GwPLW)gqdopyZo^gB^cz`sJ
zO3>MG!HV)V-^N6Kd3ixcYtKmk%3uO`Oh`$#e4`h2wJbxQS76Y1#)boDe~fnlTOhL>
zU5KwdCPP1If5`ZN^Z_e<evl_Rp=g&Ntu?27{^YSIdH($QRI3$q-lX&R{`>dSi^q@C
z*4wu7d*3sc&ph)?KI^Pue9^o9nwS04D%!UDehX#RV~(C(VOrll_3b<M%6>cjD+eL<
z#wnbHDQExQKd+51{ELg}PtSb^4Iep*YDJCCIO9z`b?P+w_{Tp+cinY2{pPp7(Z=MM
zqc~9BdD~}v6`eB?DBn=@fzMtp&^KlJdIvDj1uUmXU=HAp0*7brFNioHRw&7V6;R<v
zDe^pmF(?q`mpav0vZo52Ma=WqPk+j*R;{K<lcrFusL_9U>jb*w(uKV4E8pZ@-*XYV
zEw)}gyh?d92AsyRyKQMfM<-vo=tKOMv)|2cpL_xR(YSGR#+!z6tyZJAo%6@s-rml)
zZM}^jee@B2-}~N2XTJH({LM|@M7qO(E;T^8-`<;c1z6hXL@*dZGz1xb*$2`p4y1S$
zIQe&C)T_$$N+aMkY=iPR9H7QvTVuQJy;$oi$J6-ap8<QdhM;8N^kp0>z+z5m*@{p3
z0&-z3CL>>=ERP$fZ`S$Me@~t=nHMiv;ydvKKNaO-mkqzO>6BIJdk5jr)*vUw@`&9#
zO88ZQy(CS@m-5)4WjYqI1^n}M#Ii#tpbv~bZ4+iUKCN24nwpxL=<&x7yS#yU2+n{r
z-+tH59FKzh9al4Drk{Kro~A%g#2oNH_%X%<k%@G+NnI%&(!eY(Q~qV~0XC7V@;he<
z+C+g4*SkjE3*`tmpT?oe@svDvV;fG}UWXYa&|&4}m;aOh=~Ms24GoQS_St9Cwyj&~
z_22(K(XCfr`5oVV_uce?4}5?}3?D&5h7O@=7yLPW=)<3)Z*Kh;2$)<Rm@FN=&D(qZ
zVTukrOkwfvmeSnI7SNx+^DpR}KlyLeG-3o5MU5I78|j_zdMAJ3^IxF*?)yHSsP9b%
zn=uG)A{G^9WDG$*qO3_C00&u-?0F+;6&tBI3DYS3Y5j#DgRE=>PeN=(L#v(}u#_mo
zWJXysonHd(04S_K1I(lz;jPKAUhh*+9iy9WTF>u#*Sq+PGtQt<BgfFie>0aqz4}Jl
zdDp)|V90vFWZleJI(e6Wu!CpL`dj{QlO}V^AH9X&bjBI{rZdjq^CnNBWy_b-?%jLn
zg%^IC9kt$Y<BdFI$Pjwp`~IGO_q+ehbdtswP^v^uPSDC9#}iO+_*v$`PNd2aNsPYM
zr$7nH?7IT*L?-f5Ly1Zg`u7YjLK}@^g!LsOWW<xthcuIE8j=yZ|3P>L^tv+5(Uj*V
z6Pta3TB@B8-+ts%pl7h(8#ip^v(7q;fA_mrl;{Xp#3HsWFZ+ya!8M=^zan;!AE7+s
zS&$=?d3su+9dQkmGyp8edskO7tHMz}6dz&Qj4t?w5XhB@>ap^M3>`}Mm$C97SK409
zYy7g#$=;zs$kFAMu|n2RzLXO?B|pdtas}+i_r?oLjXaW<)~;B-uh*~`<dM)-O*@f*
z)bkAO7lmioUZ6dZeac_UmK~(zWs;=_X#x77olt*9c1jP(`}I?&=$qf%#4Rl?JZ#u7
z`oiZwPbW{F1hz2RN-d9=`1RLc=O5hv1OCWIKf>eQ`d_$K)M(;=pTrB>meBf*cQ8iJ
z_}2El8dnzL;PHDdy@IA+G?U-<r{~fi{y{SpMUDUP5B`we{qA@3_1Axy`wkxDQ{_!S
ziehY!_KTs7phH<6oBvW_*LX1bIBch7qfCI`5oZ<jB{yS$k|!NVqNIZubSWeQ8V15y
zMi=_R0T&-J`E2CMs$x)Ru(mDng4rAV|M)-u!CShz=-uyqFP(Yjn|au<v-rXpf6dGO
zX%*l0o$vFqmDkXv3$CJf{^cy5_>M_5re!P_MZt{?4Rp~(7t-fG`#J92*USI;^2;ie
zguj8#pFI39|M5BJ@Hyw4Lk~avaN3@PX5=O5cjFskB+CzEzgN9#9%{PO@ka;E0O$?;
zAc|s`84OczL@_d*1F|p5zq(G>8Gw?;jyiTI(B=&9Kvtl%^+#X`lx3(BDcxSasqBJr
z(e|hLh+jGJ3Y~S<S+r^6rd039lSEAXpC?bzGymsh{`X%Wrz20kKo39hJpbs(v;4!K
zKFvRP<Y~J1&{N#|qo??RNB%btJpLU2<ca^6k39Jse)5@@>FMA6j{f6?ll-5*dzJt1
zsoy93L7t}c16AgQm3(s@nENkrQj~|{gL%GGevqf?RiL;B!6G_8F1b(RofUa!-^*Be
zblcY3RME^VOH+xBSHu-O&FVoq2(fh00aI>(j2z27hbr~#4SWKP*2aYHppTB$Y-et|
z01VOgddI{`j~Mx?{73%4zu|9A{!(V(OXP3LzmWcPj)hW{!vuM}NWEwmkf%({`}f~Z
z6DLljGtM}J+B-Vv8M}5br5$jpA9znh{F9&jgg^V)&+^;f@pdkX8ohPG+j#EfAK)+D
z@J;&m?cd`C9i9BQe}5UD|35FHx1IARJZ#umTq|lkX6#tL^2#guYhU{s|Mc<4K}O(L
z<nT|KcZlC$ud#8Srx7c@ZIP!=hLA>io!Af%S{6H==E5pS0F_n{A(3``rGdhZ0h9&b
zS<8XF^@MpNZeYR&Dh)x1@w<_2pd)A!g?IQlapD!)y=M=7@B<&<|BtaZ4UV(A@`s;?
zr8^5qQ1!l2)r8ntYV3pwR@Ff4{~H)nH3il;17GaPzZkn}Qe#))Etv`SOhOov%wSJ4
zNCJXwAma_N#A+uH3k;}*jU|EiRYnq)gR!NSjbv<)WJ`U{`=R@u^E>z679nY?`+4qi
zwtLR+Id^%kt*GQQN$LOjf2%o36Z+~`zrwY%YWctZ>p!{mop(UScEAe#zM{d{nVBzK
zyukPV<Gp;<RabG{Bae_F8{}e?jf318l+jO_fT8lGK+V>$qSv8sXjdNu^m+`$bNE*X
zz_M2N5yOTy13S?cOkZB-<o~ri0zYx*8`495J0K1>R?vn)Rz?<P3^HTegvEe=<KV&m
zRG?@_*az`~1q<o#|NifJ@WLpa==+rSe$dY?dp_c=J5JELKONzQ=MT_BPj}Fg`W!8(
zZ>1&mExe>YM?ZP&9s21LyXfDaY^Mj-y-&Yd-@&V%*-NXQ+rz(H{~rDP=?=R8i8fl&
z&`L|{bG)RXm6kNL(&C0zTHKJMB@H?H<6?Al001BWNkl<Z*^?dgo9FiOlYclu&%gZv
zHMgDMU5EPk=!sAGWd8-e@cCskrc~b)$W~?Vst_ZuzRyw_*}7_uo}EX=gRgJjmPGuZ
zE4&{29;<)&&>^m<sNjbldN3RVG!boN?t2EMJ|qY%#d<N{AVT+KrvnVe4%jf8Zftb1
z_6a2VG9^MHp?$BfSfDiVNbN+`Q_{cKloF_#^U51J`ZgHXWkgr_8=8vSlWD8`eYOCX
z13imP20ZEA2q0%>ro)F0^Bs5G!D*V(op;<RYt2>OMjrv4C{6c}gF<I!>gw*||M~52
z>HqwH|A*2f<;v@>qiiO_X_C^n{`#-^pa1!vX~Tx~)Oq~4m5Yx%%E(XDXY>&QWsQ^Z
zv4XM;?Md5o!!US=Fy>=<K#@3}$~`2ZpHGm8vVw>V@W4TM#_SCOXp2SRU-YD52>!xr
z#*l>W;F@pzCW!uJ^t|!LcB*e^puKzdg4`_s`W@M}<!o%SzV?}CpQSH-=}S~wTT4Sj
zgF0v^)>nMM#N~wsrb_q!#^nYCia|!?XC&<F&4O#6zR)I6j_L?3&q_P;6s!M*pGbg<
z4rJG&C+~RQWo+6683Y-{su%>>wGVBYh(_2Bi=M*33&r97nRB0U+mSwgv9*UDTH8X4
z8ytXZrGI&BCqMZ64*qS^ep>y9qrCCW59y^{r}?e@XQ}Oj3v}?KQR>MTsJnlhyZQ^<
zlP^$ro~V0(sAr%+UHNhD&KI~lU!ZPRE<eskKE6czdOxT3uFq)avGde&;4J-d*J*n0
z?Gyaet6fz8;vxRejeGfLYuk8nU5<;OGDl15TKG55?%@|&KA>HP`}m`?7f{D>yJK_B
z1bDQ4Y{3VB%#n6s(3(C7i{W_k?aOQ3w|(FCi1_1=KjyD}?Q1-L-aN0rGWJZabJr};
zZ22=pBdvB^`8MzI?zLlagDa2YlJsBFhLM0k?y4fIANVcwk_g)JO16AJGbxR}{?T^I
z@h)Xd+ZKCzzD4^hBWt(@@&N+|eZ=bc{==u;>IDc<y%^tj?%X;0ryu=@uDs$(o-$=B
zZGUq+m-U&Ujd`}K^vCY2Jem9Y`sm50o}`ywd6@>zo@K8OPoP$Jh9(NGTmG?KBSItB
znB52QGl-WHeJHd!^w%0ISdw8D(4wscQ@0Znfz*Go5}mJ8BCvD$H_mw2K8{*nAwh8V
z1RNMnnf7DXp?who8mH9JKF}cXZ&~{M`=#H<jvk}Gx$#E&`VC*_cX#eAW5WS((lR9f
zfI}}Qn+bI<+Gnr6<p+$+lV@Z=sZH5PV1NqS`xAaZS6DybC48y{Ivoumy;3F0J4!ZY
zXO2QNn^NESq!t8T!$L4NgdXEWv|rIIHZ(js#z#+_<82)$so{l#{NvxfON;Asy!?rG
z`H`lB{M_3oc>95~{9eyRI(~Yb5TJGE$GNM2oVy2zdh!M886fJ;6LsYa+?^lio`E9B
zQ@~d&+dWXc*4<y=?g1)-zy1Pu=Zo!h=S$^FeRR8a^5fhyK-7~bI&^B7J3jb~-aK%Y
z8gsq$*vp6b=f7{K#q~K}T;EFnvw1JSnCs&9qkZ)8+0UGCMG7`}TYo@mz2$Ay1<;B7
zO<BNY^=5P&j76Z==$!a`>8!jv@3@mMU%o8&W4uKk!q8UT0QKm!1{d(~m-td4Nl9~Z
z!k7@1F$0|w$SNX#s7J1n)Uo5KbS17wJLse-&$qe1F20qFC>Vq4H)DD&%U9ed5=YAe
z9|UBTlb5RlVvE>cSRcXi$jC6ST=_6xd+oJURb54^*R0{oV`EAy(j?OJZKqTc<pFY2
zQ_=b$7Ecc)>4rD~?9b`P>(^a(eL0;Qx?Fq2@H?(Myl!-@GzM|k8~ax7!hqkmk;O!Q
zDe=*_{6>L5i{`Hy3&q+%p#{S54A}|_+6Chd9G@#~9J=aK%Yy)nf+B;)Gib~}0cB+e
zPr!%AKiR(7jY{9>9F?OZqjcY*MRdg#SMV<%dWfl@#6@X029CxQm$&CwjSLawqWn=N
zfqn@r)AWmOzr5UW07Za{^kIjN(hJfNIz2uj&R7*=>Y}bJ4WcV;2IXgD>g$EgH7Sa+
z(Ef}*eHz5U8TvfA7wH_jILa-1KBoVEZVxZ1Z>41o@9=+Z+RIP>sf)I~*GGF#d=8nn
zaqh`e5v1h{)RQk}=DG){1p3CgCtoN6w>*)8vO=+5e}TK*_kltQ1UgVhrFM#a^$fso
z0g$COi|tU41Bv-U5fly-fv2PQ@Tp7m*1>c9eD2S*dh1bo=zrg*#q~M5|93n1=~oZ)
zyN5pJ!HbuCTXG{bkbU_F4=^Fov=Mx$GqigI2EI*82kJNd@i#s`PIugKC*O3__vrkm
zpB7tnJz#sv3D~-tR@^R0iy_aZELeLP+l*y%{D({nKviyjUqF!c!(QL26JMA1enf9V
z10XtyCrYmwSOLBWWQsH+Z`M>ozvg5d#ANJPW2;BIm7C>Tc=P)6etUN7WMO&a4I4M|
z4PU>3zxtK0@&gY%z!xrF^yGlF8=aKVkLuaV&&b_tS9KG{C=j>Lv+_hig-|Evo*gT$
z|CsFKc8D}b#(*y?=-&-rFuyW#L@Xq>#KeixjCP={`O0Tdf@NM6h60vYRN_d8B(Lqz
z2sNOaKD@ybF%)U9tl+dfSQGH**HthH4S7cC8J3jQ_7Up1cH?~5zL}Y}ZrMuLTzf6w
zcH3=~9~g)#+0$3pHgM)UAwQ_F8jMG?ZP$TfbUdD>175!9V+JwWModo=+K<N*<4;@1
zI8VKY&d%@~v@hf^;4a%%Ob<wl1b5_-v5*jC^oKlYC&WV+FVS1OKcbb-?xkP+{yqNP
zmLvSqj#ISr*adO`4FOxvK!LjYiy1Tr<|HFm%H(yGvTa2`H(msK{VoGn(5c!I*pqwx
zMF6So6=Z6+rvw0tV6p@x2TEDOfr5a%VrH<I{p%{VR|0z^*~AjCJo?cn=MH^B8@Bh*
zuhzXsOX^zq*X!Qnmvdcw_{1QMjTOGw78P80cH-HmsNMa~l?OZV{t9sMZNu1r0XIB<
z{(Sn{Uww_woH<=?ECsYpWPjfMaO_wkwRTJKdxj&hYpkmeU`Q~^uqcB7>_}slcVY@?
z5nn6U37IX))(53tyX68a`QizKw<A+YMs7XbDjjM)5uL_pG50(lX08L@tety&2X&2H
zckODUTW-09(=_FO_~8%f<I|^uHoX30I`L%g-7lj@Xfa}M6YJ5}wKs6V@&c(lQv~^2
z@gPeshGHVY*oSEx+X(ye^{VnLXSZN`+K?DoVpt_ZwG`ArV;eV(MU-dIocU@LYU_!e
zTL+5tL==ElZOZ9jjVmrxD%xn|zGD{%bp1q($!aJdGf*V<uF5V+`@;`=_~yU8nX0R*
z=#A~${dSDw2>1+jZ~JoGnP3#w_Z^0jx#cGSF47(LAq7MG@ykyTSi(9HSvyA<0yoDS
z>V%^-sZiriRb>U^2IR~fwUP3C0PRWx@FVw&f6tvC<~Meq<o|kRH$CulJ8y0|N&8QH
z&I+DN>*xkZ!B>9~IGO7ML_LscbJMF1NI7uWRhnvb)2=<G%w7>N0+1|%J9g{%T)S>+
zwi~B```r|95g>MzGK@VA93n7ufU*QqF{|jNe0v6n_Vj+vFYP$ZbuS#EpFH*sEqnAG
zdi2Hp^yZ$A==8aZQQN|CYsaMZ7uJT*g&F&Wie%f+|FZ;Z_{+@n;DZlRMMVW4I&|3d
zZQ6+1p`k^~`94CJ^~OfopbU12Bd**SH0B)0msJiRD;W3I&jn-8$|T}XO`vtYnr&H-
zp(!VQV!v9{@F*bG$O77p*%|m$^iSTyxa}*_4*FFiJFl+0?_W3m8rna3vX}0;`)*2;
zgnw}B4`}zEJ>+xb`ytzxUQ?f_JO_NBUR=A-4LMdlEZ_qm|GN!cC?}(9D@)(j#U9Br
zYwf|-bo8q=8rzGGGjhTNqCEzj#VCKK4I{TCU@&Gl#+WTDWj=5pm_a6lU1xOGAYx#p
z?2|x14=O3B6SiUX&CtIH+9?-l(tZP@h{!ZzfDtDXI9ey2QvYL@$9Vbj<$T2zSMc)X
zD|l>dEPRsl=yQWY%+4`pjM>twrey8G7*vGE;K>pDv-<LcAJJzyyF_kE)yvyJMDCuf
zjm+hmknh`_^b8VJ+w!!jEV?iQP56ArWM0O8&^FEvj_@1reMJAc>3v@M*baJp>oI!!
zz$g4c32=2|7EY&9$!(hG$``?u18UupSyQ0Y1sg5oT3$hzo8m2&D*-c^?$v48u2L4R
z2rS3V)NPln-zxxcECN6W{4lH7Wu}>3M$%;t3&Ky2%LJCPi^u!M=*|6SdF>yM^Ut4Z
z<0bVudf@3c-nyfQKR)|8$eGL8bNCSD*}4s6GJMq6<2bdI{bxklxN#$2b@kP>efygn
z>(|Co^j&4_GN8}1FQ`klO^*@v34!ISPlE0V`e(ra(5VM*2pxi<F&2oG-q<}dvNt{k
zBvdxWFqHHCt!D!v*s=X0O~{YLL*Hmr520SL51$9mj$C~Rz#$z_ZfNK{{q+8yayFCY
z?|$dI{OYT(GTv7W1$=5b3u25et(=@4q3!~G!#%WR(;K7Q@I!tXPc{Owzc4O_^73^a
zvk&1s1Y{tZXqoaKE0?l$l31|z37zQ4!U;$_Mmc)}#QuvTuMDWf=IwRsgi)EkV(gO(
zes{l(!{K1CdG(Ec0)hHtObtg3NCLHIRDlfaASc%@G4mU5yusIBcRl^>%{TLj6CXy5
z*vj5_fO0+12O6)fgE|Fe2F9$m=d}+45{Cx?!#V`u7KgG`q}rpk7>}-qjSK(Q;h_H1
zID8vbJx29KhCY=B)bq*LHqd&kL-XZ)vhM=@?&X8DxIRa}+OV5n+VL?T`S=pKjFxVG
za64TE1W{LifgPag0r2OtY%VM3K$!!J0<@$YW&}%s&H=1EuEi_JrV9tk958fsWG!E5
zO<orQL;;#^6G%a_e=v2-0%F}1u&x;_fk6i>OB+4%L>*n9(dL$u^uW{YyriL(e!cNM
z-v0id>HNh@;%fpOM|9%p&zP&xr#G&g<$A%KiHYBO>rJ})>Z^If#tmSYXs_Ow_WTJM
zden~nheO8?j$NPr3BZj!uT9`jbgbDvRHCkKIk4rALn#jf*B_4&S%FR?df=dKbwO4h
zQ5k`x%GwCj3+&7CuLKg7_jwI?M{5fE^>y#AmiQbS8>9M$2D<M0>*>1duH*W;I=*~)
z%m^#+i4h3o#Zr-<2d1oC$<pQOYj!|&AIXFT-!Y_=`vjmRkQ>m1Kg)qJ<lU4hPlrEF
zg>Rro$dmCag^fNVANCJS_J|_(ltmzPpvnOkju@fP4}#U-9uN%5hS$Y5A`FqX?$eAE
zdj{_57!1z+QK5VMLyP5<9=l$CaErnN#9?H^%uJ^~I>oo$b{k!L%{8=T%N9f@fsBIw
zoP0ocR$dbur7N!n8OQ|nL4jdL0hAiG$~oq+Jleoou>uQiUb~_+rwgUg@>Lp8&bDp)
zo@`O4N*~@sxkYs2)xq&$`RzS(o*#el5G|?C@ybnm`JKa`6v2yIGl!YF5@3QOPIL;_
zW&9j~DowAtDcmkMB|G5O^OZoBn^JXPQrav{{gyx!W(^(SG{DQP!|R7niI1)lIPCTS
zq3gR_K&#srQUaVVTL=JE`03X*e_aA7-7exH$bGl-JU{)XE?Tj67cH*K@gtk}^3H>2
zXn15CV7|56V631ILLcMo(X*2PAeDX|K6IEXDk}KF|9DUb4vqnW!hxN;K;zTFFf2n`
zG<=owX{MZKpM>Ly?OzycTHX<EgPT8&lzkl|-sr}$UDkhveh|hP$kOp|vWb4sj_4Na
zS_)Cu<!JNeW990V=UBg@R8Lmr`bOHAnO=MKHTv#%zeCw<mhS)QPibiAy!Ma!ME)#r
z1epLqfxHdHieaQEn5ZdZd39qa%miCmMl*E|Fj<@M_^@_YURQ_@92H8ts)e9I?b~Lp
ztqovbCQ)K|b^;G=hL{*LdRQqCh<rB&VvWQI#}E%604)|UMw|dLCW3PEK*6A(QMqtI
z?GywKe4?>JpRoaK4K9$4C?YVB(5Qe;pATd09=*nZ>6Z^Z#8+N<B`>;f5s!?FOkkW^
z-x)ahx;29%><{@4f|F;|5gkSO*U`%EKfqjWP@$2@w@`OzTjcd;Yz_mVwN)c)j|Z!J
zscq=gzPz%cU8L2C)01(;zI*#F(C=P4NQ)bC^y>|~`R)CKvU$NBRno2J)(Mz{BTPzJ
zuhLq&{&4_4<9fZ68FR;|$ZpsY7;=CRr*&mbotq|=jT0oFE}Tj=n=f={tpke=(DeX+
z4rn^iDr@m@?VhadE3FX}09^1kcxV>TWgA_#ugE*mTL;eZ?_N2^|MK`wT3X-AYquVz
z_dD}EHeMiSJARfaY9G#~OkjxyY5ANveVV@ZS6}0K^XH2_;eBWGt`!|RYP`&5OiDdR
zk8k(3oYuo}h+_opR!2CvDQzca+o7CfEV^IbxB|q2awg>l`iIdLjYC-9)b&4b-5a|g
zNAMaDBcg4BZ?Sy3_Eg?hb_QHTg1jwHev76)`hI4n!-o&^tv|SxN*gWs<jIppPAK1)
zZ7|Xe;<9>Dp#*;&t!3;L`80C>%RbOu)W($qkfG(1pp=ti85&S#U>{BwaSQ-@(ne4Q
z(mylULBu9K`7p7~=%Ka1Q<xzN3<VnZ!9vifwk6I90x<@1>Bbm8YoDG&^$Z~@$T)yx
zPyl=nlx7Hv8;Pgnh#Y_?6}2rBr!jDPq6RCU9Xob#byYRrc;nyjk)ubWdI;re`$Q+;
z>o%m#zitB;nr0|d6@%~=>L98MGx+>Ae7>A*m9b0ZgBS;4r11%5U~M7VS8xp-g&nji
zKNm21`_A)YFC5^-^*Q?GhTZh${&Tu+%>kRdPH{R==YW;_+l|>ZxYs2aG6jWtBuWA5
zLVXJ=C41&ToGa&m79OJP&dP(sl*wfO952FCL4clQ;IRF?9>3!FcN;N8HZJ354s{0F
zVa*|C7Q6GsHGSK5=c(bPBeblcmH&11yR_w<6LkKw%L2E2eXF0dHi5PjjF-~CpPv7e
zZ~ER%e8-)4(&e!+=Tx8%*M)m_umPNdKFQYf`~hK;#?P35=DNf$mLJb2cmrL>z9$Q5
zqc{v<(8R`4M3yoC&M@lOg&Uv0GO`Hh^{xke+ICPLk)R$gt3*OSPCg;9jmX<!2}U^u
zK3;rI@t=W#0shgCe#BQ^aV6dI{qOVpyLWR?)=40=pTHg>bVYR+(V4Uz=?4rD<xpOh
zWv>B-@cH!nLOfKiZKYYudip6N3&2>uEJ7aDE+X+!X+k>zu@WiJGlK98H9`<e9V6_h
zB8{+oLPSszp~ji<gQSWf6qu#Q@M7o)g0@eG4m#*BCV0aU8kIFlr5W3a8Ad=av;hvD
znJJ&|=UKJ2^rbI<nKo^DhNHX?l7dF(^(}@K;~QLn2X>6J5#H?+$V5)l=ZUok=`(Pk
zHt6{DB6?#SgygOPJ%9NiRRMY9KxrYlfJUHYsQ3>CatJ^?Ff_ueUp_=j8glf&@89D;
zy`PuO6+M!TBJ;KhIe1vW&$vuq>U3p6j!==^wIwiR&eC()G_%G}0UNIC(+v?sNS{p8
zmcXPOl>$J~Wd)TU&F10e4|9wQUNf6ZbS<F()&b3Ex(ufSkxoty*rJTgbaJW9Bd0FW
z%ezj~e?PaEm(;cJx<7UDsl0nLhqXKN9W@`=t^OSw8>2h!xP!iT)A#7pPcMjnirZkk
zFJs4GkLu6Gg=k#}cjW>o((c;uf+TWEWY~<+Xo&NMNt|c#Amw~(tghz^LU2+>#*v_E
zc~lw{)H`Kb+9rC~^gjsPQEqBJ&@T8kLkCbBX@f>ahI!ShRdnq&*U~q>`3-*I`4@t6
zXhTG<Q;!eu|BjTntRgfq+GIp;UtoWpg1s_i%G&#Aqp`k8TR@pWJVXACEqe4B`Fw$$
z#qo(FAZm-y7xu;hor%gRG<anc8u1Lrl~e+)fyWra`xZdN6>FIA6=J#b+ku~cn`Mm4
z7`J=IQw>OCo<lQWA;Jp+2i047V~!ey$Qt-YJ(SATJ@N=$b@f$r@4ff(XBR(HgO*~U
zF8u4Rk_9}L=ZG%UoI^W`^J^TMUK0NmlVxD1aaz<+)l@>s`~7>mfYKho<gkthKvfoT
z-r2ULfs1(Ofsc7{Lyms_bO$xR-_LF*EUvqgDbc*kX2E6!ml*>P*6r5iVFoTw2B<j@
z7#v{&8!==ztz_z8og8d{5b);K{W<U{N4OMZ9blIOY>r2_Q`lwp@(Q*f3&?T~9~=u)
zYD>-ublE_ciFE7v1jOY@Hi@{YU6=KgH-f;_vIC>LyFTYNTRVAieUAU9X&)c%`GoB_
zcZRI?7`Im~KY#vw`m4YC8lOIMTK!1LlFY-BX(DP{*pIdNSip+fJkTy*A!u2jIKdby
zmPMzl<z<wp4+#QuJWy&3^2RrgS;LRLXFWkE3qL;iZFzp*qpx&VNW*?SVG0l6i(H+E
zjNNq~)P*q!bSLdGZ`!z#zJ9|Ebp3VLb6tHMU%qtN%G%?D+4(+{Gn4^6D6e?mvs0A<
z`$5ctT*6yc2Bf#aFNbo{Yr<U!%6uKEZiB>tqXl?EpvA%ioBNigP){*n@6#yCH1*>$
za@U=}&1MXvBp*FFX2d=%amavWQrMT@hFD|ojQ%4KkR8~eV6C`$V&O#wm7wsLVM#k6
zC671HoGcIIU1#jevuQ6dl%c_1vx203d-u|}zx8eY_P4&pd-v`0d5*R#l5;we!R;9q
z<7N9@`7|_w!0b2<_%U)q{rUDre%+9#K!+e?G(caTeqi<;m8HSIj>N~Dh~>*zEz@V8
zU!o^oIYdk9T6p!=V|?V}%QBrR07?!shV$t9#}&ZA+B?aR34kh?^=>^5<j9$K;UUNZ
ze%uC!e%+*jyKOPc2FIKb9C~avaM)v59C*~-zV4m?M3;4R8A&-8&;mDE11P}KP1E{2
ze0AztcM|Ky4aqc?rh4s8Wc?iaXoS`^ck#bI{w_VVzJqrjJk4X{1v4J(0A~)z5AlN!
z{s&i7R??BfhrO|l_EhF!t&Hu95t?zNz6<Rz7%x760=o~!4F*1Mc$v|OW0%7*9fCRI
zSd<+d_5g}F1PZ=?DbZ?bdOpR-HUbQc%>Kgbq?#0I1eq8W5<JUC{GO-VSUm9LM?}oK
zcD>8D-12?8`l_pW(S3_}aA?T)O%R`*oInn!Q=c25RqdJ?NkdzX*a@^7kt4I$u9HPM
z-YqCa^MM#{Y!O*e=1^@Y%YY8UEXqyV4Icc=N2KA&Bq9r6Cq{>kHjhSq1)3Ms{lNlq
zuz}Aui2sSe)tIfJ2ZW>IAlM2c&cFf(V+~sCqPBeH1ay$!rXewAd}vf5kIKKJ+sSVN
z14ZgXnhE+8GLRrc|AmVe`R;q}rmL>LiXM5S&N%bH83CP!4)`7#IJQGbGxCc+JQ<@N
zRf3*g0(p8Rqw+yHlq^f@Q5kyl+Jv%KJ9K}Q{Rr*xvXSv~sOK!Nc;a39>F;*(Tl>$+
z+b8rKI|V2Lyx^?79?VF&O%`UOg}y<;?Vgnbiv`H(ktwo?LCV5L2|3$NGK!K3G*h3l
z`_-%|G-u&q)=g-^a<DU3Kp3ng)OCpZ&RpDKE7QgRa&?+H4v2Ni8hOy;Y8)W$anr#4
z1wM4@5;wm6XI`;(7cGC{UH((YNxC>ZX2+%*GoF2I+O&zTy80@9^UXIS{t3q|SZ8RP
zC6jWtr9Me~j_a2~`-75f0)E6lg=4SG2ilL<!2-xfd7q;)A(g26M8~O)dknG$tVa9s
zA{X-E$tU>k2Xu4E0v@XmU*>)valoP1Jlzv>@5x@e=k9wbO;Wz+p1b*j4?Zxu1Zxwy
zfb;TYuf&r_3-IP4E7Oj(1CL*VKfa!jH~H=K?#YvF>{VV=m&RU<{zDtGGPZKDeWUzC
z=^8uorEl8wdGYx`Y1=v)kCe9rThXfS3+Xk2Yrb)o|1g=RBISJ}aLxwV4~zo_&qViq
z!!qay1mr6K2a{La26Nv?SsV@r?GqBL289YSA5@?bg-?g0xGeuqKKT@V`Ac7>yYIQ1
z1_uXiLtsSZj0+zC82;6;VC&m~;B*P~%Ns6fTlTs!Yqdv}57d^d1uD&R)}~F>fg=fI
zVz@STt9E7i#daAkcx_1iOP34$?DkGtT$khDG#=!Ge;$!D@67I4H|^@CPy1yG)4Xd|
zr#oHNs-PgTUw7o<fylCv!>xM*AS1`Nz$?r2b!Mfuyu*rh`V`*A0UIqOlb9z{#%!q2
zox-yD1lHxraWJyxFGize9AO=w9P5I#>LJUzix}kMb}@_mbX}ip^eFMr`SE3bW!D+{
z`BUxu<Hz2iXSaXA14Ezdcrd0~JS*?2tFGpan>MQNQ8=OIg5weVSuEgtzjYXZ@vD!M
z|AL1gg34wP!k9L0RqnvBfY2{s#rU@}W3$}2GqM36YviCbks&((!rHs%_ZZ}3<!beT
zG%M(Ev|<t8H%I+~`Pg`4{Z{k?9S#l-@%{JT&zWqNZ@K0Bw5x5GE#vFL`g!#GzHAs}
z>UdGUZ5czilZo%YJ-3K4iQp1~bF^VrF3QQ70^U4(4emw8m-k_jSzvpyvS3FdqtGr?
zJf1BJJ;dbcMfwQZDb`6;Q4z(+Wlty*8Jg3Dw5yB-?SKM25EQd2;6E}LDD3ZxX!ht~
z{i^~E`wGa53OOb>U$%}RdGc`W$#=381vGfdmhQB;D|_tNQTm%3Z=@T(egp5^vBRr_
z^xFE^hkT3ij7A)}(XYWM001BWNkl<ZkIpn0=mt)Ox{iZxBLXNN2fbE|j%ET)IL8Jw
zdiJ4?#o8*gX&t@a7t&O!|KZ1<@&iwI&`%!QL9gsO4M&m`SOJ!TDS20{19Kj5!*yhm
zy>e^S2HbAc0!&R7bQ%~lTC(W_XpxN-@?A4!xTX)@Y9Sj&yw{=O;m!JvU0stWuSJvl
zuoD&za>iZ87C=JZuoKtGN;YovLk3WeUMa5qlWA(%G*VD`!H!>?cGmCXeEdv-x4qX-
zzh2kDi|cc|>Gfm$+3>jW4Mz?ip^A!1dho#qt*xP5q8*`o1hb2MoNqC8ym5+wGulS!
zei*d%8hQ+W9Q_3!7+x?Ag-qlJ*)QW~bfg9}5ED9y33xVK8GWH1Y(=<_K8et8pzi{D
z{W7R)xhFJ5;xzKkboufa*Vona_19m=U;C@C(Z-FNV)4(=5wZbTLPTkOGR5i}yD5Jk
z6=~!Sb`Y<RayIf3n#;tYI4xLK2@oD*bf|g9`LJ?Od3w_H<5^J8&q$g$DRs$~!?s9;
z>K~XKMZIE-N_t>iA)z8;Ww4w>@zJUGTl)wV8>btJtD4oRxj%*;k;=pdiEhBw(LPk-
z^3yyeAaDsBvHnJbiak*pjeB&&WH~Z2%>Q`ry>#UjSI|Sh{3XcSSWm#ad8&f;;&pJi
zNW(x+l)msO3Rv@XBh*A~F7lm}Ny288$~YfVk3h2#;90r`NZ3=N&l@onnEv?g30hp=
zO26LlKJWhUq8w#{J49XP&V83@QZLJe>(R7~PK7!EC~M4o;0WMHr#s!N$#fl?f*Uv|
zPYxq?haGEXP(YQ-l;MU9IqR=jUSD;leF}ig>y)iq_lIlj6yzyiDoc{}hj>`DeGjjm
z4d}9pjt;jOL;EddN8Qe1IS|^>s?*{Q5dNv-4FB7c?ffr~?c_IipX9Oe0-r9Pl}GdD
z&jb62+i+y;c;lC(R_tLZRv&#}xrb65_i_JkP2KMoJO|r4F#f^O$$hfG$8&}O4eIlK
zKLKNpu(~Hl6Esj>W$S5>Rffq`^nFU`D=e+19MEE8AG(y#R)~mSd-XN?&Ue2<*Iauo
zuUxr`hDSy~^~hgb-#)E=->xz3K3<<Z{Q>hVHA@ZoveI_&AMaX>UQbWr_pQyDwxTi+
zTW7-u@~l=Jm!qN4&>NI5*^n;>t6LpOUjVTEu~BL#VQ3<%R6`I52?BCC0z&~h!P)ZG
zS>V$TC<psCLU4j-zmB2Nr-Q?L23<&f!gk4&H3p@0vueW^dKm>pj5(AKi&G3ibjeUW
zC+D~2w7lt=XZYG{ui@I-S{lgb%NvT3f2nU{z|MbqMjvrtF*(ErY>*A`oCV6owu^ML
zX~WoP8JiFt$`2th^1$QxRC~4#S_YIiwu(Q-#)uw&`4BB@*g?;{*~1_7jhQJyc^d@)
zDqM>unIo8<m9=Rw<?AwV?wV|z0FWg|p}36@0+4iS)d5WNx-+Z`XW>akO8}(ZT?<)1
zmL0vC-IMp<B7p4%(5FBafT3Bxh=5bq<LRNyE+eW(x9IL(mkEU3%5pwnK{lv}j=Zz{
zWLIw<-}kGT*Ur;p{9MaP`thSXX!+{5>942W$amgx2ak=72R5t$N`@fmZ)>+;vcb4R
zN96mjU|a>hIWl&G@#&4L7<idr4Ez3Mg1*@wqsW=9Z^yWH0sg=ZR~)uq;J0El1$uC8
z2fFxT*&@xp-%~b?ok*EOhY#_sKe&~yy80?!v}h5Z9T+GP<cZLW+e)|kG>tQcUY~X&
zQ)vU^x3xcV2ID9|+qL>3;MZ4@%G1B*bQ;RO%*VqT`ajmTjgc625GcNEobqY0v7A-r
zG28O(84Nj;U#u;Wk-zH}dJcr>+nY1qKwH`g8Uhet0Z|nF8#{~v2(tDb2T{;xUq>so
z^$xS^AELi`66kBoaa->Q&}Ic^jTi)Pl#jexzKwBAK(A{X+bjF@AlKuA)1c1MuMbar
zNH^bnGgVbr@f&Zvq2)X?3!Rh0o5mjEpxQUOsBWzeM3yLL<D87~E657vqI5;&ZMqD`
zfKRjSBWCL!Z#E#ZlkM0z(PJ;|r=<<=(Dr@j<c$mtbjYq*0dC{Eh76`Nb%OwA=t#0$
z4s6Nh3J1Pq3X=#kdk%czu2RjO>FdpKw<>ND(e-+|W==Ltxas763qZRu%O=OBz$OUT
z4AJ8Q+kVYz>KTAKRjpaUaoK<&?U(w+V_3Q&3ul0w+xctHEwpbA!A&E1ADk9sdf3(9
z-#bE&H16e_|Nj5-!|Qf({*%w6_Ui_T036Tp<2Z?qI~*H0+Q2XQ4{4H3gZ5(C5NrA#
z-L8#jaE7s^4u%-}XFu4-{b5;Pro5K9XMK?UjWU|RuLQhD{fGv1Pfrx|5%8^H7>M-y
zIeq#x{pg?miLSijO1k6DJL!Y2uD}oZG0e4Xbr$(u2E5qzz3bQ?+6^evlvRPkT~C%^
zt3d+8%E+hHmi6V0dVx0L{a86lnUa1<H3wtT>K3p0cnZN<EapbP6a4Y}^Xx4#h?}r&
zix`8hBF2rz3bHmvAj)wCMo#d`d9!G8RRyJ)N}5_zOY2&CwK5U&NH49NSId*DDk#ZR
z@|2odUZ3lwVw0|EU%2`iIp0h)U1M-1P1}ymO|r3V+uqo=lZ|a}Y}>YN+qP{x`OfoJ
zeZS^ZPt~cZ>At6N2~9$B;XGO+P+m1H)ZO^hxm@~Jw(1ThM&o$s+o!)qA_*m_MZZP5
zU3_6C3G|FP4<)F%`40^MhD=~NB9Y;gQIt*iSHhl+wC#;FI=PslHPT>dX6MW{p^{KC
zcR%dX-#;nsO?&ZHy^g7zH737wh^0BVN{C4*x17CPX%HC|b(b$1!6Bij*=@+Fln11b
z3ij`_VMXpOMolh}E>HwAP8ab=hOxWXAl_oo`vo*L!QWEO8Ux(uY~Z4weeEJy%|z#@
z@MvTt6wlM1pSH^KsO1^)6dUhQJubjXe^xE<%!8c=W~eG=KrPaOOu7W#SyOpA51QeO
zX&2cqtpgI1gLhGVLrDGvsQkK@Hr5n$3$-{vLWjC!p@Pdf3R~C-B`9NiX{)Eu@?!EB
zes}7+bIC$u)8axPzp{^513NU03(`w8+vbW0ND(~p7H<!D^7G6zAxj+cZ3Wx)VZR-R
z|HlR0myhXqE!p;CdeZ9yexx+o*Kr1d`f<R<>(wZ`vyRG0aU{+CHL3S(?vL)oAL_@D
zZ&HejD01BBVe+w8RY?3hjcr!w#aZ@uW#LK~1VOM(6j5La)I>EjP7`A4KNUL=ccZsZ
z{I?N$vufS<Xzgd7>~qgo8+kLWdcx^mU%5mgdQ^Ibrd$aLtph3v#dqOTS3)tC75pv!
zrYqCA<<h|w<Z=aQ85`Px{&IL+ZL#x)R)s9I!?P?h6cWEA6A~SWCxyw;<>OI}tkOvm
zQ707BNixZxPl7>xq`cuCf{z@{#}EIGn^K#PH)?ctAAvDRO%8PW3~8rxm4!C|Mj}^L
z^74sCROOvgC)*%)@-%I;md4P6*;KI_S4gdqDWBX$%Jg1YLOF+$0-$+Iv<3$o<|&~0
z)Je!(_Zlx9cQxR2IC@|;P-8z&umH-4eO5yMkPgEW;xB{;CWxwR&Ayche3gY)(1vF7
z-MBkzW+CR^OZ>QLwdvAht05N6t=1rJhpEQD+bojtaI8-;`vUp^%06TN1G$<*dLd8M
zHAY0-M6QDvfByrSnq52@OVyqm2};TE=G!gHwCd!3ak1FnzgC6AfQyw?;pUh^-rMRp
z*0eI<&M?_}XImV023A>FS(v6=bUuv;-r%J0#|1|MiFQY$fAbOGiHaI1Wt24M_$cae
zH`PYcSO6!n=WU!TlNHHZq7vz|_s@dQht|%<IKkV*MBDAo)H<$PPfi;<Tf-%M@1w5a
zVj-$I!-{F5$s{}eysRX1QHDSAuEBo#yP^UH0%jx`ClQ<LUF11oZtO2(^da8Af3&-`
zcg6KKM<%eg_gY?Z8crtKwhBpO$@Ils!l*_QKm)oc0k%^RPMXadex$B^*#X?VR3d#D
zofFHrMMUDcyG}HH3beJla?{<8;%%|lnMp<(EJ~$*GVG?UWvcGtHGa}SkzeVAi4UNA
zJbaVQ5?R2GyY+Yz`_tzWT0l^coEOKxQs1wJ**>0n%~~`DcHHv0ov%z2`5Uv2k1Sp8
zzT`TkZg4mXo<R|I(wHzCU_U80>h?DBqP1+bM;TmPYo#yqEFKm8`Mxfhj%H%!%f2Hv
zzwW@f=0Bis-g0v`5MPvRekeV@y7(O*K75N?o_z+n5i*aTg}pmFm}f#frsw0f9XB1{
zmGCgIjwg%`1h8jKyaq)MW<hDcTha7xd_whk_57>*#&(jySCC53zx+?7zaLH;xEOhm
zs4;}~B}A~<t@CSqzb=$@R73$b%0(c?<}^2`XA1#mv$BckiGY+B_(Tb%avjx?niJiU
zkd&!o772IvkJv@bO}&{lK>tc%pFS<GSS-!24XrM+72b=(F?8l&v$NkHPi3@~)x}|9
zXO!AI67%zPq%$WqnEy*NcjISgLo+g0QbJ*6`~Abm(-Gc)1|Wggt2U>mqe~aDaEGZ@
z?MPnHPIWr?z>`WOW6wlF$!+|W-Xj6rsov<nYBSa3w8bK|NXGsU6LL>9USwzpuTNs_
zY`4dDZS0nvFq7LOVGi36Z?qbiq#9RVyiFfAwVAO#P{hPqG{gNhAhIzpXk)#wDpgAD
zMpgIJi-#h_Rv6Db@tO-28tP;S5y_~p7U*VNnl{g}hn6LLSPcjwA0uNiSpzmS#p3+o
zDzcEAh=G@E7@SmMwy29_I507g%vnBSE_E0e%1)NC(EPH07z`7#)L_h_E}<*5NK3Rl
z=h_P^8O6r(eu$(hFJ0@OMkX+K5@DMuJr1|fg1(T#uIBk07kZ*%R{HnYl(=P>vx&u0
zu;P}vhH5~CIU`owCX+kDly)>|*#Adh$B;wdr7TAF&bno5ctyt-*LJNws1A1z8Fxmc
z9bAiHXHK4&Eoff>2Tm|L(x5CZ<9SH|9CTPx>^u?J#a~B@Ak>?)U-&yMZI}-Ibq*a7
zuqCxVYC%MZw{fTq!SApbumN&(GtI7KZop;+b8FLSygo%)^NV#=YOkG!U%7#&Fduxl
z!!eJK0<Rqt7J$7>z50c8%qDV*YR`^y5^(Y{hT4!(A5^K<0x4p^o39Z;QQsRy?vNR2
zDru5MSc&fB)J|-QB!96kxH>pjbMfS)LtuP;53`yT&00|gDbw+tsT-4xR{(GOc)S0u
z`hMl;`MUXr42xsvGO8dPxwT?oIgIy8r~1RmrklH97E<<bNN~mD7TkP&x#wJiyC=?e
zbCkosCMI?6&{;_MAHU5_!ke15dS-4v7>CyT5%>G-ob4Tu(epUlj-cD*PG99^O8@is
zz~(#V=V~|St2;}za!vH-9RPo7=Nt^dS2Y%P0|Wtwr+PW7V~ACrG5DU}K-PcxWPROU
zz^=Hw()mAMdGxTTQ}3|e;Xo5BnGJ5;PO&d}g?#C+MqgWedTl{XN_}Zx6S<IkLSB~M
zUcaMS0Uq4{LsTmCzNmio{UKlXhax09mN;)wUnv>DEzy6WL`BdIWu3#dwH{EhPiGA^
z!8!{4e4fLpOj(I!w^~foq&E?uKfTQJ_*aT^n=7(SRB*G}Ba?&%Z@4LvO;|?5OEh%r
zD3d_TdA_D{SrTPu%UIlZx&XH)NsKS3x}<w7G(gK`uONdT6nH-+7E{(-;`}0zmgXs8
znov4!VMMvJ)8j3X7_W#%Oj~7WA(FDa;fD0aBn;%~yeoI*@vL<i6iGZl-&kbzFsz&f
zMxX<x{>Pils2c7>@mI+~jLUp!Jjuynv6+!J!(nRRLsHWEB#By0;U@H|hAiX0G3mq0
z08@ZzwJn`_jcOV`>NZkZh}Ah)8JYd=?ZA>Eqv|-h&j9eqWyRghyTHuJ)aCV}v7B5Y
zBhgRyp%nf&zK!`@Qc5Y;MtHn(StB0qiGobaZV@?gE|T$yzj3e)-BJI23{LW_%Sxo*
z_D?^|kqhWS6x&qF#VOzA^t<`1RjN-*q|XBuVv-SqU0lO#y>yW-&US)2Vq6N{*Z32a
z4cu3V&VKdL@RF@`V10U0u<kEBZ|+Y+4*4s%V?}~2Y;4o;GdCwWJnslCc<&-ER{feh
z(9a&mp?FpKN~IqE!u^CeObf-Cq|$lk2fPhr(xjh+*sAqPl#Y50dCb-QG=P^2(ZGP5
zJ-sEhpzb#zpgHqJ8?4$1MSv48R`{{yN@|_itASM3`YJ4cz~s}UOS`9pqs!uG^aW2@
z))dvvC~OhzFR&lDjv_k8Ay8KLB5JZ1;Mv+YT;*m?9xI}59^~+RLtJoptUsGp-51#l
zy82T|SoCZ!Q6AD7au)vMbsSt|{ZGX5)w417zdGR?iMY^w_1|%wwas{5Nax2XI@#vy
z^EJOISq{vR*E#|BsQDney7-Dj%)&D9LSo=9axT|hrW$X21)AH=o^c<kBmC>rlcTrk
z9=_Z&CnIOYE8AneF8A|nj7?t#sJwSokKLE6$HC-*$B-=E&+j^)Z?|2dLG+y&r13FO
zCZEargVcb(FjnD+LA!yse5Zw#Gq+wi<!sNfmwfn6-U2V1-t2nzLuii$zVGDUua9TF
zBbNB~Iw9?@%Yt(*i6;AoR+8p|C+<5X-1%wZ+!QiOx^`Yr=E!AbR=l+rpeZWM<)x+?
zbh*gb+MEUHmdQu^?KDk#afK|_PmHnPcUMW6={zMe9F@{2)fx*Hcrd1_#^(2#uZpG2
zv@MSDBwlz=B9m<$WcI}#e8`M1P1A)e5*A4BCZ^+CtbkN2qnyYk{owJ{x^2)vx)%lB
zyu?DEJGFhpa5p3S{lwDVKL=NC*1Io#UsIi?GN81TSt3cSu5;hWGx}j~pWiDMSLq&_
z9G1USWHY8djD7Hc6F*Mic68JBIAzGg!ra8zjx69u0)4_h+)Pb^kJ+A*$4QkBift4Y
zd(CCY^1?BhITFYc3n>9Jr769R)WA5e%tWy^qqj$$bi91JsrmE#5)4e#W>|=4ihX+V
z=HlF+Cg#7TOc{F;N`KAQ+A|+{JsdELEXJd7Wt6$Qf~lA_(s`V*=(Tc~$A|n;&w&mL
z$L9t6rE7Y=A=Fe<=B9i-nY~{P5aCp;Nx+Qq_8<b+WB(Z7&JnIEhpq00fse<X4V+F8
z%!KmvTP};mi5<PbLJ-JL$FN-;n8b7m(}v8Xy>#u@5iuRH=lah<GSCr|X)vqfn{MmC
zrtxiw?D|215M@Lqlxb;%h{w*=_sRq3S2H>hh^^d24Y1T!TPIX*0U2LS+H3`kxtv{$
zJ_?vZ!kF;pTiwq}XK7JW*#7c|%TI_y6#062I?r3Y?lp5O2<0TvV2*x9v&**HT&$4}
z$q38`zkE7`ZM66ZX#_~bEOj|2b7CUh(=O&;b_K<)IZRWGjKI&o&0}{?UzvZdlL9~K
z<t__{o@hU9<+>+gdYnSpTQU#%yH`f4LLl7rZp^rFuj{9yWjWTx*hV?h`rE}D9M?hD
z={%{#zgu<2YZKbY<(w`bP5$z-4ANh5P4)aN*ni)cy*zvY{+9H=DTZ$3KPejT*E-|h
z>(@{Omz;tI;ezu7E31bue{|UJZ;H+sKBmZoVc+-etp|IbWeNUJwWSp}1cZC<7utLP
zHkEGM^#tj3cpKNN_I5=e1EyxZNt<+k71Ah?I50Y9l1N6$>cTQ#dA3l>l#n;3R6I8i
z&$Ym^-Vr%Zk~bVpR-VNeMb!YP0%t7R1g2nB;fRMTv-RJ0@oAD@{x*etFHQ7^EX+ag
z+L3qGJ&UFj;ToC7#kcL&)?SyZe7Zf2$qAFn+YVy+EKSv=MI_uw%eIy$(+7~|1NEAc
zOiFH+JEbQx5l(Q~>b(;2^XVwWG{|A0DJo`^Q?i7n#Si4@is^-o&xaIz__y`ta9?*#
zzh|?W2+@_uC5JJ(-rM1>#=pcTQ|BTudI&5;ehi~uZ*#MNq4eeY>ilS4VpeAIFj-lZ
z<49PHrX9|m9k=~5xv`JuAJZ+A<H%UNryZ_wktr#4irCmEvqe;xu|?nj^WV}U{!3Ie
zphbGAh5Zlp|5|WS{NF)y+(YZrXk@x9Ii0gFiLvnZpNmxzC4Oahmv@nr6OJ1*^O(5Q
z!NtHSXdMh>$|$ARmGg2jKysfrq?2f;l^vT@U~{f4_g~;;j{xSM%cri%NtQ*<6u@g9
zw_>H$X-L!B(6aa%cL!ALPSdrB^cv9shJ1gYxNefaSN2~^%QL_^WRc7a4@zScW>e2@
z_A?5G#hAz7`aTZ<BvWtJR9Xq)g+MGsE5y@hAMgrJ)i%(h)ifDipN5S&-|&B8$8~$R
z(afL|T}ucJ=C#z^le#k-?Ja>kr7$<BdYoEq5MQ0yVw`ds>!^$t-Q9};<8^d43J!+w
zJ`I<daZ}`$3a3p!LY^L3b2e^QgTP>8AE$><cdZdW5RN$FaZv%xajQ)rM9%NR#Hod>
z1{g)8PN*snq1{@OF|d72k&Xp)M5Euc%()@-83zuNSbh20u6VdKvaZ$E1qEFvgEn*B
zghL2)J+C)r#72!hCp2A)>r*|}n*$Sg-XXtNT5joAZt_ZWuL{+6Zc4oIeduyqxNGz^
z@JR$-VsVpNO56}pOf7(I3jJkhxmas3bto^EtpmEwv6Wb~yl!U-9-jfKmwoOMa{!@v
z!PjO}nBT_=^1lg4POV1@yBYTYl-KNRUfo}XgweP9TLM>L5s`C6X;|E!9;7#vaWKZc
z?l~=uPOn|$$@$3(KuTC}?RmiUd0JA7<7?iYNee;(;;S$w-XDP~FW6y6gng!GM8wOO
zu!xs8DNawRw$9h~gssuz%$a8?TD$NJYs1KhCpik2Mx)i)_(N;Wsrz#4C7Y0Vy>1s@
z`y-DxWa+A6YJR+a0OA#?E#(_w!UcaS2wB;WbI7TpAsLZDMk%3~-elU-s1d%vQ$nS+
z4ixVYPojJ=j={^#lzJ>zerWY1y<Pj{d_Ky$P|mqPIaQcxN<OBZ$=()Uzr<|um27Hb
z>z$=Koz*8ncEsQPUi>2;+}=<Jdo>*C92;&cTx#a!w?_}+LDss~8SQk48C7UjBz&AJ
zBQE~hIKVSM(UgQ)p1oEmLBD{<2%odN9zO2@bfvd`VX50|VT$F75J6)hMn((5k=xSa
zPFS>tb&fM<X%mj_FT@EXbX(y(Z7j*GB=aGp5Vp6>nLsfnJ=dO3u-~`+21xCj@+eX>
z2N*|kdHyO&I~(d-<c>)oIa;qGhsUkiWDQ%mbdn-IAA)4TiyAGEQDf$RoE82b=f3OZ
zn;0H3hG0DGoc;6qI-^Il*7R)Fh1dnEK<H_&$@=0?g~Em@2AGd$DZ5u|7(884hGp*S
zhyDu?U=-LtWb;(21;S$>WJ1mQKe>|`DKg-1RRS&KraB8Uq^>+1J`xxN5K9b$+L4-_
zLsMXzW#k3uR6(&2I)*?(UUayR`RR0Y&ss0{?()%no_p}M00OT|?Nh&-*9h0Ps24`T
zg#&^9q%{XIgWZk(2I>S^-PDwT<k?)LK9vz*z0Va8kLenth8lz?rBiahe8i~oe!`$H
zo4A9e)p2Tr(jGT)Y`saC0o0m=?vu1V`%MqeH{F-Z1E0@x70T!Hx7_J!+Ju90WSvyQ
zn`p_1J$uvJV@2iRk`vH!)+I8IYZ)#q#o`MMb!wo_>bokscKI$FWZMxmsU{x>^E7uf
z++Fb%`KcPV%R+pxDgYIz>U6mv{LAf?P8S{Bw;J3R-i_#mm6%kgN3*}_LWw78DC+e*
z@k)hFDtV;mb_f1F%-%hwvZT`KF@=SPk57Ju*I(@{^;;u7RrH<OkexB-*f&^q@`OdA
z)J3Ys!goR^fpbdIDxXB6)nx*jxP#VJCZB|R%Q3InmuSCx6GxUg;jELMm||sxD<uBX
z7^~g~uqDNxNl(m^aIMPq?h=+B2=v;0dSc;Bu)A_-QEH7blbN1BT$?x(xIwxbMY^)p
zok?JVp3&Ssp7@8`zBhN!Xm~B1t{hh+{bZcY+T-sqQS1=!|H{2CF>$gfn?O~cSd~54
z^l-t^;so=vx0Dr1D*1l<J#3U%qQw8lpQp3ET6!PuH+)|J5<=7(MzdlVTx=09K|rXR
z-H&OtRzn(m-sB>qEtLtCEj`xkx0sFkM&VU5mURYu5;GdJ=pQbmFz#cy{6*^lStZ%|
zf1AsfBr>HYt$*A;KF2aiD3h9P(0kBZY?RVT7KtuE!29d(^;tx^GR*Aajpbdwa}TzM
zF%!wwM)i%c&h(@t;&0b|GT5%Sc(N86IR^MPThak}KCIrv{{mZD>><!5N)r^kHM=lQ
zfV{xDLVzEyJ8tIx)6M-H4`ZL5#udyWE)y=~Or5*?cGWBDb{8NEV+wa9vwp^oXEhDv
zX7dv~(z~m~A=cPpf<Aw@$%VY>;qQ!9{LGHs!_Wh}&?SJIo%AizUjJH}jJ@V?UTB0N
z(}%3SBvX+ua3;J+T!F*6{;lF?&TOOu1><MqC<1Mz%P=xH`dDc?cZl0SClA{iuzLg2
z1?ub$lwQ9kJcB24n>R8FMBuD6<)9pXojxS<>wa24h4E5++qr!WSW-R1RFK8EpTrV&
zp*I!y0z&_+XKvuG&3i|q+gAqr>)v;#K<N$E)GK@3SFEPV`_F&yH9)BUd1JY8dZxyG
zb`==-D7cdvpr(F8Ida`9O*gv+zbjj;+r^sdaocDENG&7sXr@|dOC?0@V62%|>blU9
z7V-IF3#?G;Y8A;dkAReoo=t9EP=5Io{9j?T(vAEqw8m_2ddEXT@UPfM0;3p)-S}RX
zMAE}}W#1I^KZmC7`1-OVrXcSAKNsL<cUg-wVd_@S*MncD)va&d;KRs#<OeTL#bTjV
z-fDi{%EAc*<4Q|PBK`in+hEyquq&eku(cSRWLa-Xo@dEh@+Kbsd1jl+Wszv&y_;#C
zIZB|mn7=%pZ4vs^WGss(-+6lf=f%YQ<T{zpBGcx$c)y^bHXxxWIyvZ#+mu)cjf*cT
z6dJQ6bHGxyANJW@5G!S0VK2t2CR;6j2JT^-t}9d1^_GXyolI#Y9?tINNwN^~Wp3at
zLdlk}i)fUonMz}80>8}gM-h_C_;Z@2)t9csqW@~3)NQ|sH7T)5b9@qze{pOVU%be-
zPeJu<D<eZ{Ql1>fN&tm@#VcTaWexCH61>8_T3lY9R$_*h(ODG%H1cRuv2S+7Y^<-h
zb#-N}uWtY@fyKrs+3mSuTwGk{V6TqC#<!~=)z#HRo3c}ri|SfKYv)0t-O;qW<>h~E
zu$zb1)wQP5%7etFsXma?6J^|w-*pv8810R$(M+h1lgAMr3auntYWNKjo7$Sw8_*p8
zuogWv!5Yn6V#1%Y8E%U3uy72%Y&s%(pH1i;mt=d*^N5z6F`NPE?+S0AcL-pWJ=P)v
z`%P}6Ah?iK{^jP|;+s(ys?eGZUbB4RjtyhW6|PXe_Dz4DoAKQd9GQ+3gpl)3xa=Ra
znCgV!T0;f$--a~ciaHVqr#|SScIh=ncK%xMs}AaK5jC$}dh+pjgsO}|K?=2<pH)je
z%bNiru<ObJBIgYTiy@ucs%x*F(Q$mFa&r++r<h%6ac{N4w%TP_h@mSezBqPb4mQSy
z7qA~$No}#x7elT0cUcIlR!WpETcDIRGQtJQgZ$>1e4@uY9&+aVUZ~dfXlu&AcWVz!
zUOaj=lWTc+Kc?HZf9<3L9j)-*9Y)tir?AAe$1UhU#FR?09*`mP(9P9FpG{d&yUn}G
z!@K>1+aRT3B~dbf{0j1AXj$F;le^2b$O|e$3pqWfRO8*t?^zy&&fYlh%m2aG<Jw67
zh_-wJIfm%u!>EV(4nv<C===8iIP!`3b1U2quuM4%;r}Gey5z+iRJ>K4#l!A7Tp;>Z
z`D9ADGeUm%>X91Yp-h;coJXx3Y|v0iEK5~-=ao!ofZpovUKt+JSW2wQjBr3sYi|~t
zVOL5o?1Wh!c1N7!;aQvnRM7wsn~@hYGvZawghaah!yEE|+DAWSrg6zHl!w`FPQWUI
z9r2t7jnQ!<pbXF|V%#_B6>OWsnV^b?Ki@4br)Uy?I|)xN)%d7TH|btv-I_u@pXln%
zVzut1$$GcYp)6Ztjsmm8YH@I}F1v+Qz!Y8wA0$TjlZ=g1s{Q4YU94u>T5pQL%GRQ&
zr4_wG(-kpKvUk+ht+*r1Q$RG4#Oi3_=m_iD*fO7P(!eR9s5`fAhC0{wmvSnnN8q1d
zpRbsz%a#YzVBZK2ae|_ZcS&B;!=4Gixv^g{i?F<ET7D>TZLzf~Xk#Oz%wWw5fK8ph
zASP*I=4&izRA+jiv)cf`ZBJ%)nvRHglDv0NVJ3MlHM)bhhu<)WBdRM7>8khjtWk^G
z%l($gJE9ipxAmF#?p{+glJSz7&BbBs>yDisLpp%hL~nWKIIyz-AHIE0{gQRvE8vt{
zXVFl7jr<=u^EBJ@Ixph7Y+)6CHU6bFx7~p)KR8ljXmq!UjfAZDQxcb3q&Ls4r^}<y
z59Hn3v#&%3U!bSCA_aZr#9VC!y#Gv$eTgCiOj1ymjb>EHl_>2xLFTs&*OJMnQ&bjE
zN9Q%mlA7DuaoB40pS1V*OYBPL1ZVH{?(1Q21}^;)OYlr+^CdXEZ0yp7An^MVlPQDg
zZ4U;G7>b2LrYLbH(Tn8_P7h$?UIewV;j?v#R8yD6aWQB}KZ7YfJZ7(Q^hpjv^-C84
zg+~|-S!)y^*2*rYv~4f{?^Ty{pU+oW54$bT#=9t##)^jk4eB*erUV(1>FUk);cxp<
zEaBl56V^UH9SF_(4xsC)ciAz?gO5m+<ko9hcGuHkVy~-g(7yVJ^(s9P`IBN7XWEKo
zWV@IPs3(k^<N@K$+j(SN#gqdy%k|TyW<-nA1}Q9dub%x6l@m{b$@&}SOnz|w)9<&-
zhKR>rdLKc(uW_}vWi8vHEzf6+9ynPPoNTTVb2t~D=uVG$-NBauy+7k_-LbE)>6(%W
zFuLu<aT^<2Zd2iFiDZB-<RoS~r5PsEZTDbqX#otmqXtd@5SPqN{N3ZYq&Tmxd05b5
z&qXdl8Wk|<q}ln};`#t5yAVEqhGz9mYI^PEhB-suB*io7NN&Q(ZSlLtvnXw213<uA
z0vRu)oYLLU$and7EIV#zI!~kdGtPE>YF^}wNPlRRKC5FH9VW!BMqA+i@LTe=yrU}}
z5C&9cv-Nx0+VZeXiHcH7M=FqD=Y6AsQpufrrDmtU?N}_GxhQ~HrQx+69aO@j?*8{w
zhNUc?JfvYp19YSo#lRq#{z5AwnUQ)i4saRVP=U3f-cSy)*}B`_rUs9R1GouO5>JsS
zS=HLI1;peZJxJPAEh!~(H9Iz?KBeNVY0Ks{>$%CHhpTy#2oMxvz*%zm$*H|l?5IF$
zoHHc#g`au0uBb%(+<oAO``M;uHW%P1It`{gjV~g7{o_&}i%UT21a-ogIf=#E!@3U6
zGPu-TjJ3!@Rb_Zm3+wlMWV%G+l<IAw1+#_B1EU@9kcZX<I^eirEOSbAcG05cA^rG3
zL07Wb0N_NPmKT}nQ%k^wxAL>i>-nm+^Zolj1KVN%sXSn>y*M?~-@tbm+TBS4pU=A(
zZawz}mlp0^6hdLJ*~r8X4>%<|k>+dD`y7O}+IH{6)r(}rXE)y)4AhMz1peJ-U8=z_
zJ&3Va&_6l{+QD+v7(QXEi3;-<a4^!~lv5$>A<QoZM<Pt}wCN#>zx8X>V8zk&>Xo+9
zrkJyp<T$OBYuUgYBlL*kH5BT8lxnu{TYk?q)~hZ4=4>#_)4=)+8mm6wcCEqE^?nRV
zp_cEH!hWDZvHqxh`qsIZ#nULb9GsOJZ0h9Xm@27?&TFC#u*<;A8nze>+?=J@OatkH
zDBc9AHzARPjnw+E^<(|qktkC%RJ}>kH9SxT%S|lJ`c#^IoY3km89B;okg}1t4Yp7B
z_pH_c#3d-l=ZeBP2Mfjv7#lIyXeWlWkWTCq|2?Jum4pB3Fah8rGPLu0%zpNElGCEW
z&7`YVQ^5XwcK3^74-QJi0=)P=W763zmQ^-Mw@j~h!II1#Ff{0{F+4)uq`pAX`K*~t
z8j@Iwj$L#&HlbM(4YP+8O-(g<n*ylGYDgl{eXP`(|NG4kCpfuno2>x&d@A(tImD~d
zmKK#IR8aoc&*_+*^>xD3znEhl@5_UlSWFaIOV%W_6`2FoSesM!mE)p+b*-=bp{LJr
z<yHaA6^8ey*}T4#xY)pB$jmX>g=i19C+FcbD$?1K4JWkJvc!;eRmQ}ZIx9bg2xL^s
z5SnOagN96SY)0ni^l*cvIA7Gb6ohj?2*ZB^x>(R5G$~08jk~IgFRIH3cHhA|cbye%
za^Z0CR9kZ)al%nJfG1M!3BnEZTwH)6I!y>PHF<NvoSp4NBFEusYx!qv6Meh@{*M1?
zTIQG3^hBLw7Q?PW?}k4>z2gwz<k;$Nh}dav-tR2b-a+3IEwMwRl3)0k1a!Cu3XC3a
z<eKJe+3*3j1JwiblYt<tlN_83Ko_|<qsY6W@pbVB6izz$IC4U*)T%27d&*|I?0BiH
zTJBSwyXitYs5Rmyt4~f0;FKBy+}_~?w3$pQu@#npWMarQ%Cv7spua$`s7Qe)P(-UZ
zE3BqWq)}e|grgiu881gLmhdK5X|g}(Z-LePwg~~ChVy*JE!wJ6b6`B9%553t%af%*
zTs*?^2uHzXZj<R_SOdV|4yNTxz!F||y^sj*K({VV6OSF>sUBh^#w=Oixatrai&0oG
z&0kw<ZftqLrJ&c&?p#Gy(JS^qU5~v^oi|K9&D=8pt1tjS;s^j&I^0*{e6SolT(an0
zy0LhjNUC#t9QhnSGHmZ<*tZ4&x^P_fMfTaEiIjcDe)rP*?~!-2nY^SbW`F)+wmZVr
z+ad+JNVz^%;hy_IK}ln1dxG0O`}EEb&pf#;pFag*HGE>wZbl@(nC!AYk^SOKmxxve
zKccSO9YnHgYx{tFbdnH<Raf*usx(k(9}}(?K^5Vil2T?dKnK7G0~jV3qD&w#>Lfvu
zkbcqe4)q$tMN0M<`c<n?3m2fuZ=$zYqgoh8M-Pr~GK0jZ5(Crxh_Yaym3EFcLvv8Y
zax<dvH&~$fo&h2XG#dU|oPNHA;w2^D3&6TTYIp>)iS=j_XVjN+HlY|Staj|^Vd84F
zsdJn87+w$p{L`|WP74&k?KnikGVt^nJEW!BD*sKmow3whV}Sb+055_6P2Em{hXM+o
zRIZx{Hwc~u1_Mgqs45<*I-OQZW5XpVtym~X)mb$9<K&GW00N3?T)qJEC+m8NCc7H~
zq27VijzDP)^i{0{Af{kE`1N=MWHMU#-eJ!e5mHkr>;d*CbuwjYb?<%rR$8ECS{Ar<
zisPK@_Y_nAyHE)VaGqv&2foQsy&uA+pcqogDI`pPiR{7v8BwDWa6AmuQ1rXtG7}wz
z+vyx!76=Dt2SW^j3gYze6nA{sa+%I*tde{#bv@PjUDtKQ<6_0g899JV`;p_8qPuoS
zh^W&#cn&%1ZD^O*%a6q9JNpE@Wq*>DIc5xS-@Pfx%M*l!Ao3X+WI7Qdr1PI?P@sCA
z#k;deWnq*>I!HY^NKK-On!Y;(X0}()2^5LED~P`NGwEn;-sv>hfrQdWC6qS~@9T+A
z4EY&FAb(WMw)+4ivR04a<zHyDDnL7qTAyGA!L1QB$VXOy4#Xj+fWmsn2q|`!e*Z1D
zA+&$sotH~vJ!lS9T|*(S2omWR$fQrxjgy}{^jHEB)_CE1wY+E#M-?}m_S*RFm55uK
zeOKnwD<X|QD=QGv<@$K4(0*rYbBJxz>hE&Bi9Eisl5#~GYn_|08aO)0H4IT|rDKI%
zw0nnNX8Y*d_=57EX<iFLrqV2s<&}2sav3*dyH&7|t7E@YLS-AZ8zv^~w;h&3JqAQ%
ztFsJ~O2x_3*g7@TF`d>v$lsp%6F<`H(8VVc1So@N5kxfA+3=Bq*fn`VrC_EYc7zKo
zLM<4jWrRqmUa;G|-bF~~)`rD#K?JklO8jcyL7Mz(U{KCO;8^ZiNC)N&zWeeYygJ}n
zv`Uml?kZro0p&JX`T<4~({QxDys3b83pGc(#??p=XSEV;+rBi@oV``Fl%$D^z<<X1
z23R;Nn&+mZV66w~U4fB!)kldTs6ejmbtMEY#cR@AYZWI{zumd-=O}vWA5eK;dv5Ob
z-*I{pFZQKUMwZYq@y~}~4f#BuX=vMT`2KTCI0GEg9B*&y{vnDz$*JtQ_tuB<>wE<P
zq6o!>lJ@359imR2|M!^)sy9wQh;Un!*VFV>A0Hxtb)m<(ojg9L@~|J)QL+bV7(Dw9
z?zFD1f6kd@(GyGJa3zGP*8}EJw_^2K7dv()`BcUd#O3fcJUtg7!P&dlj{yS%hY!sn
zAV`ABB)7-fb)uR3$G5*RS>g4<oUkXmXpDkwUhVPV?ijn65lAjCS*ieI$!{LT6uL<U
zv^P@a)OJGZUkj7KXn;~u1}ocf+#Yhb?Htkn_I7!Ce1jt3_wsGbZw|7;5n7lSm?@sG
zp?qWS&!@_k=_Yp&sb?r}L^D*H3k&6DFY;RvA;z?E0obeV>LAqh9ZDc^TD8&Qg{N_Z
zOz@=sI?R+Dyp#)ZOiw3FVr&DZGpvrVE3m&3@2XJh59$-42Z*JmbLbwx7OF5rNCELG
zZDdA=Kp4`F*hrjy1e5+09iGa)p%ahpyNb(sPnKfikfF(JOF@3(;G|Z9%%<fu3@cC8
zsVYL>d#y<9MWMaZX9Hts%SF)E?z6bkfv$noPLNlvAjImnr6H&lna1#i6JUlJ3{Mr<
zJd1p!j_~@cRc#AKewXuLY3=y6TqAeHm^!KRH^Dxl$4pn1QaB<bWR9orK)2zTZ}C?>
z&p!CHdR-Ae-cNMfTWd2=41>N&pMynn3c76$XgZEptX>l@J#rl`S0FiMyHfkOXE&*O
zEY6I4@3l7l?eZf?HvZvvBfHdDdjEQa#H}Exz!;CrSusGms5vxp^HBMvC)pWi-+k}R
zYd>pesrp8S0x)c=s}1y^qd;<?ov7|6(Fh4qPT|gw(xY%>7UAAuww<v*tkY<P-TXvA
z&Hv2Wwb4xd3z*|m{|0?DNYwC|rSP7N>pPkt?5FPyx(y>Rm)jc>As87i?Zk=YK?R)`
zx-0{YRJUTW8pTkMW{27onpHtvTBg+kKvmUw8{gMA<^(w<>K&JJVtl;WG+oGOEn%VA
z3V69v73={nakh2(c2wEbVQDd$um1otV>{245)uvawCp8kNxFeOCNwu=Xj2Uqf-@&N
z*}yl;VdHh!l6HNnS#U>Aqv;v_G`Otmd$e6YrKB&Lx-Pod5o!2pw8q>90s#f4ESq+u
z<%qM!98=X>c_R)oG4>QVfn->LMm)#@4M`m%Q`ekx0C%yo&)vgji$Hed7%i7GZSNQ<
zEBId|K8R+^G9r^Igz~vEtBrIlT(Y$L_&`7tGi13)O=_J(=cDJE{Ajp_dj_$m{z<Lr
z*khhZU!19|eF^iW!*9+rWcpb9U<+d%#}Z2>16Nw(L%YZ^ai&pH@4opE8w`|s$}yQE
z1PWVTP;f2>kHi)0i{qh~tK1#7>%DKeV6>S;?a>JO&fcBZVfM3(omVpcpU;PEJ?EqE
zUq2>a^?rhPq6S_~d|EgDJ0L=fW{}oyKC+ty71-cK3cCjVG02Hg^d=U)Y%(8$n=glx
zy3nU19*zXlClgD=BQ48xFUUxU{zcMj0toT?w~yu4>CNhgHcq9_{?;VLjA|OG0XwoZ
z4zOGTfscWPw~PM6qDL3pCY<-)B9>r9-kf;?n5bbcCtCVojF97uAgsTH1d-%Vo6ta6
zz#2v0sqW}T_12#uwJ<?hoYb@2f{n%pBge;a;53vqJ6-n&5YKFXo=wZk%lFxJeL;(G
zQ*ut%R#KA{!sBSgAx~$u**)a#QJNtf9v%h!bt5O!(kzacJKDa32HL-;O^!F;NyZLa
zg^diz%Zv^5N6dS!%@=8ct2>xZVkAtZn16ZbVp%kk-2f3lo6qg)fPjA?;RK2C0I9{a
zG3Ynytpx2o=GgGumaseHW}A|ZkRDKs*g;jbo8zw(zU}@gMzU|8l_?Qon+8^I_@+VZ
zJWgU;6mJ3cLFg>a#!+7s&TxL$F5yP|v%fAl>H@8QCB%^2l7XfFSIHH%V-k0j!1V5M
z)=&*`hWMZ3`Tbx1Y28X~yL26Yrgdi1AT%%Tt%9nvI}Y=k`fY{Y?(4(l105Ks?kO8f
zHC+pTQlw~l&_;uGH9^Wt?U2iBpgB(+^f&el#M$|FRiCz|5V{zYuAgt4?xSR_*K~js
zB?R9mm0qVE^<C$HpST-|2!;%W=$nBeCVKAOf_DEUOo?UxBcEV8B4$^(tGTff9keL3
z1NWduS(FioOd?WG4JfSB!vW?kYJ$;x;NcD_W1q{;pOlQc`5md-O91j7aUCKH>CyBq
z_<U|&<&(q?{R$b$AQ70@NjXs=c*O#PLji)o_yejJXBir9gBk2aFIT?}35DYR>Oo(I
z?%U}%RyYNA4|)eAsek?C=wl?Y)dVQlal3T^M=uZq7H$E}Q@U;Ly)SZH656x(+r5cy
zoguiM`w?2F;hRId*IWHu*k0TxK*9l~@@OeDcp!WzvC41?zmDh>SwHIn;vqHY^o%eM
zF!FWwvICxWTqvVU@$M&}&INX%-A^asyqMC11z(Whs4BmR>&$BS<#we>Iu&5in=HNI
zr<<?~qd~-@DY8;8cwD8|C&{k8venftAy6U)i}ASz#FNRF3|9n#yM^i(LQ}vKhWhV}
zPK^_E+Mjx?wrw&E#CZy7?SP+vm=YTmtd~<D1e^XHHlKVAmC+B9!xEG8Ko-ccuhKx+
zE=K7qUGx!{t&A3s``)X|9BZyts~}om^%wLnHh657?Af>zTjj(+lV`m<<fTr1T<!C;
z713DWr2ZMOYzeWsi{HkLa9?2&I@9z$5-_G(+P(8`oBIsV*N4(oquUZbN5<E$ofdQC
zlaG(A6+^GvME$65FvC#%*RK$VyFG;;TcebRCzPbHVTe#E!dS=d<RY4P(V38PZuUk`
zz8pW@yU+8>BK|i7zYwdBS>m^Eo&EC0t1)pH#t$#Z&jY<!L7IUx^I3s#`|wFM^izgi
z%#6^XWA#lKCoP%;KjjIk6{H(hB%jD?UIT;9#pgdFRrh!2`MpGv1jp*QCCaf4^SO^)
z|8%l#$<0@y?@Q{HV2AyUHh_+DMKBjbt=|KMsWIBr--O^3>#Vt{#7F)BE!J6E661LT
zQexM;y}5N<zn;7Ra^r=O5?Mi%W&1po#S(PpONqh=0;D3m04DR94)i+ftEtsm=UMq@
z_KX(=z~VupB-*J<i#-4YO7R#-ZOj9RATSDp4FwV#Mq59KCTOBP6*nw4D;5qxc4Z8U
z()R(#)P=?I6bRZ+Io|ONhrU_{*tWKKMjGC-8Qx`|34|0}1t?j1dCv4gKM;a)7x{Js
zis^8&!)GZWleFZkb{x2*lGT!2A9>k#4+7Rz?;M7MW{xZa8c2C`y**&uLBQnH=?W;l
zn*E=J7GmdaV6e0&SMDhgT=h~QO{xtBh$nKd+P+cmN}Q`Q{CU~qE|J;p8zL0l0VEqO
zfY!Hp@h+7@ssdE`@<f3?0&DCn2pMmWDiBE^U(&$1u$o0Le{yEO-uNY~`KqVYR&9ZQ
z!vCiInR`cmYC8zI)@s!0p7wD%U}Qi3qH>)B#Q<~Thy&G*Ve!==&aQ~}Xdn!iEVx6%
zI38j1%gBla*1OecFyanKUxt4)=X{LSq#!2bQ3L?RHm{5u!fX`MqeuD@feHbur^{>{
zhP3WKk$~}a?@H75NE0x8C<{^iDsWQ-p$&(J3vHSbh*f1+rGG3l>3jzk05h_4_P#Cb
z9gIWxd=Dg{Vg`D6&lv}Ie<QNP#)yh}Pl7*$p7?l4)LS9&FXHn4rL|GpC?IHR%J(!!
z*?o2M9bMD$&9#0%{+pm#8Se4u5k8cqQG#5n2CqSx`Pt}@PBVc_S(mXS92C#V=kgE<
zfZ;2A+`+=|8J{Ch!#nPZ)^pYp;FgSng$gi?4ID!Q{i~;50frjw-s^YUlr|8E^CKMl
z>wW>1WD1sLDo!>V(jj|v3Kzq^Rl2(@zNV97no<TT@?}??1L`?SZK}zjM0qh}hXQ^I
z2@F)J!MtmcOMpoU*=)xQn`y0<FCz#kYjQrVKJ|P5u@wY`W2L5$oyTDqFDAd89b4jE
zFoh$@rnn64bi>maD0hLhdTB8P5lA1z1-KEuRp%H61UWRlDZiY#9}<Mu!%W-hjLAOT
z1m#0<BXF{~y6az=)m$JptW78IDvo?_*#wPKOCw#vY)IV}zR$F?Oo%zatD~jqrJVjl
z=m&ns=#J(&7TUg#3{@L0h{MF|8SK$-2hP+d(zoRf(Lxb25^)QIpJ9>uIiCNyJuc*C
z<tIL77y_CsS?%ECuAA~^j6YJ8j#KE^p^<(rdZ*{{V#WDAh*}c6Zd|R}+$*>_p`Ji8
z(XbF7D;T|T0#*kN7bSTyXt(A!a&v@$C{utyU`)6I<<NDn8;u8KGH)LQObFL%cH==3
zIl|HD1B6MxbbK<S(>qsVF+nGAFWeJDALNDT*{+`$No;BwOpyKeQH_tNn)ZK|SvP!m
zn0N*SAHAUif<bcXMAR!uOxF`E#efeRqcG4&zi6(jDG|VdTelqGh<5N8okryd;HX(V
zOBM$bRDcq|#iaD=1n~97Rz_;&kXoO{QINHAF_2;6v8$8-36|(OcV$S^Bg6s`Ys-<2
z7z;p%xyJ3cQ)E^zUq)nZB(Gcm76vZ*{mK=Uu3&!VK&ZxbcCO`>u!($x2glVJ(k6tH
zd=g|!6S8A0&9aCtz`6YvVp}W%?WXX>4_m0z)oO$AG;TDZ##0PR)NAzM?deAg&e?rV
z?meahPDW9two}s@V?LZ|lDKhkvQHauO{<bU*+%BmvS4ldHins!YTK~K{(Zdiqbwdh
zeq0(8AsHNYEp6ipf;=GdTN>553IY|ziLjm4fH~o{4)^nQ;^XyU&i>vTvCJ3U*Tg&X
zE(-~khyU0o*-#{wpw0*Ji^USNRQQ+IV|P2iWuw8`U=!r#?<*))?yp$_8FAkPUqq3A
zpIp17&TwLPe)aDj^vi-656X&GRExNltQGX)Uq3Ue9pD>2DkoV0mtCiQDw?i8E-L#{
zXn&S=l{s~isLIAkqTT;!j|HOeH+JC9U#H04=Yz88TLm5rx|S>~BRBseT@z?ct&o8O
z#@?8pn}e75v!CxsGPtHC1O>gUN$?K{6UlOF4bd#><|B&nWSwbxdCl|d=f@q>@$=+m
z$~Ll&snS3<#@li1>yQziA5^a6*7eOJshvTl#Z*7ibE02*<J7|18VrNuH_ukeM+MAs
zBY&;dww`W4XMWP*(2bKCm+y$sc~BJu`Pqc7(hX^Z<a7Rm!RcX-uvWsI>~euP{yVWQ
zoE4QPt_0{IMMTv&!k&Gj55Ul>`R1ql#`fn_+^3NLd9|S7nRockwThX4<~g+bRBtVN
ziEP`I)8=JPG6m81Td3%2gzuvX6~>_yt<6}uTZmBM6`AV&f+_a@xd1qR!+sc?ns1gg
zBJZkT0&1mr{_2b=Qip%7i6l%02ElV7(G>sbTlDXneI@;tz#V&Y9L-=FQ#w@xf^U**
zv()nM=q?5)G*X3>8q(5)hL26zM=wtctqjXQ!F9CMq^DL%qq)Cuny!)V{%j)GI;sjw
zBxb3s<w$Ikw#&FgJ8&A^V7q_mO#{25*3ymy4YF**{L@LT#!j}UI)n3!hAjREdvMFZ
zwj#ZnV>{9qnyOUzT2~66sghwMrt)wM5iNhJ@X6~QjUp2&YUKU>!lYTU>(5&(Q4RWc
z_s!hNdd>G;*VhyK_8R`je#0t6ov+HTz#dFd41|_`zdOe({a0Swq-$q@E#{Z|!K5eY
z2=ms*iRXj;$2;t&G+59g{|SGWtC`v=y70tvUSDxs_L#Q08n6{n{n5>%krMfQ<r50j
z*tD_)V=+Rf;>W=cx_Rmg*vq)c1WB|;EX%HyBDUne0oNxU15D<+i|LOAa{X4Bt2S8a
z#!h55V^tW(46nS=`-#trt5djCEem!`{%>3DknDA;nP?;9hPmdeHRpQ@cFl0PERvJt
zgMV2SF_+nTv}#{^--mL|H{Np*>)hLS2y4`rIH1$kG5n0dpMiJy4W<L{m({jxRo-72
zGcWY~4^_{D@7Q0bWo943IiBs_`=8}o&Ngc{-n+10=+!+1dLJbx>8Q~EToG2lX{!E(
zhGKfb#^r`LZkjfU7zgW(0S{54HlsOomToKX!h(YyPElds$1ijGA`qG+v;px1%dWh>
zColaj%-ieOuN+M3Pt-2TxNlDnEu^9rmVg5RR!Pvy$h&1nU8t2Q{YQdbE(RV3*92vG
zJxd8yE3_o9p#voVVgpjvDLbiSa7$o8#40EfxXbFD97->gE>6IuJUG8nMbQ|e95AW}
zw~rQ1kaTEV5*3>Ag|##fCs$K>&xyz|T7(E)FA9@$OoUHyl;tu}PT-vimb1ft$`~(F
zpG)Q~gAm4}2t7^D{uPYqQ=G-)+@A9`sKg5kW3sc;V3va4zlhM@x#A&5^6ajM{X9@_
zw(mROGv@8m6FPf5v-~?0#j(@!X!?`0`W-7MX$&WR&D(lh$uEk&7SH;!<WaDLg-)EQ
zbtS%+z3GmF?>+FRxnM9M0>}ef+Gtd4CI1a8Y~0=tj(@4=?0f7cY?8EDMtIjX10g5o
z@+%cZ>^c0Bv(eVuCG%xfB!V*t-06Mnsu<#xDC4xh>=LUU^vk6FHx@>igO_@k@qLuL
zr+Pe3wSh3k<;us+*Y?fR&(Y0S*Z0kLjqgg&-BZmAhTe13)@m)Id1c_&242tKue2K9
z5`4Zp>7I*ArLP%T{3q=1k+tWJ8?W4-ci*0tuJ7WG4SH=~vyS(5=Bq>2mgj_(Yzy)l
z&aIm6=Vh0BK;yYm$%kc4Pes?>aK}f@*Go*xj{C^hSM?0fMrmi^jTI~b`s-n=3KB+z
z@HDi;eRmIW<amm5Fm4zUreP@}48edsiA5Z~X%Q(@u>@KYv#NktHEK_T%+6BCEroDT
zSpY`itR75c&0XmpH}W7n5V}!dy<;lS);LncFKyf_yS!_7w7=Hz#6_wXb;x~=)2gxM
zRV(Dn1j}sH0cRgjWwYs@>TU7s=-<F-Y}8%y*M-A*>+GTSu@V$!-!P~ZH6e;fEz@X=
zghT&0(SQ6}(`o~xIavkV!&RramKr{jSn~vuskYqcUHE$0yzS}&bcFlIYa(5d^PEbQ
zcP+yUIcyb@c;e><mWq8(v+196I<B9er+dDwev`YM%DN@jF<sp`&qPs|ZN2f)eo_#P
z8SBZliaJvaMoN+$WK-!&+aF+P_v3TpP&fCneovTH>?(|Dn|R|Wtqwns*WfJYm#nFJ
z%2l7ej3>p*K<PA3;xU%)-hOIYR?+wVf^boX*NOs194C)F=ctm|P{0@T3OBm?343nM
zUMfw)x#fJGc#9lPk7fOy`ZifS&uujOOv}bT{`=9K7u9ARt>Lw1aWcy5LDRgtq1tSq
z$mvX9Eq)RBaDAB;X5_o;5BZMx-HZ5)-g8KL1=z#~!0)lY%1r{ZEx&euPn~=e=y^47
zJ<QgBz2W9uuzR0se?+zH?D%{~nZ1tz#>7&IjdhRL0q>RT&eNFB!jD(s*Vt6d6Mxqg
z?3M6~SJ~IlSB1+1dC#V;=V_YD3$fk}A`b7$jQ1Y*8TUz{3yq_RC8?qGYYJ7dc13WZ
zJ$WOwo}~WNjqSuv68X}fznDEfMCFpMf7ixyjf=<<8!Ms8+fhVjMS$NlM!~re<8#N2
zkYLNrKxF-Sg`FV&1~ci9!UeRkNc?&Wv&;Mg0u7bO1l+#iFz<~*nQ;`t$R0&#ei9@T
z&cBOTDUY@mUHg{^72&F#Y0;Q_SQ8dgarHOhr?FC8dO6ZQ0kG)mPSc6Jm8|fsTGpR4
zoq5PyT|;e&v!Jf7;|!5n(Nfhhe35l+d12q6e7qa+Nqg&^$!}I4>zUlah|K``5RX<*
zIhK~E=B>BehOZ{u_JXa)z6N*xYENJ6mjx%ijR$v|5)}S=jD;mWA*+uu3_KVNjN#0i
zS+{Y6Pjv^SFrsQwSzu|w1Wa;XQMgw(X+%5VH`#}WM6M6)!{Fr!_29OfV-9^gq&8J9
z>o&b~;yvnR=TpxU+lXoKnS}CT+Tb|vS02i{S%a%ighYr&gW=|S#`AD#Tw?nE$+!q+
z1j55LoWB5iqD*ez-;vcL@JlvNpWkdzKhe$DR@ujVj(Ba%U7*jj<Rm=YuI>ART`$|+
z&yy<vjnqbt&CUa_Z_kd~g3O0?m2<~!4j`P+tK((Q#B(Bqe?iZ8K<DeQOl#x6@j>5p
zcKy9^^J(0(CmhrGvi1J<JolmYb&&HV=6NWEtu~=?ck9|G%BO6#p9e)@jK(Prp@j}r
z3lo!*kx0pzRsK)N56B&v!s|<%f>9m}kue(}`|~5WC^#R;q&t@5?3qPN30n<fDyeIR
zvx0%P6=5nn*0^(AU6}FkDr;9YSdo{pR{E6$CB;-D8H54%e*n}#E58q}tURjtA`~Ez
z5!f3fDT-!5o~81s@TMq<$p2Gyt@AKpw;-;|Otjc%tc6s=w2t<zlrNg>+td!f-X{FV
z1td-W?7|a<Wj%KnB3O}g=#>iHP9+3EsujMeI70^rC~_d04u?Zk*E+RkA8?43${!1q
z^n8$etW7E=3BnhCN)>uVwXr#5zFWKd&VQr-@{J#B*SzO}_T1k---$KYS@S-LgRS>s
z?%4*wQA}w)<JlZryj81dV;?^gw&Adj>m2j6AC9GKCcxk<_K@^uT;kL+7I94ZGI}QC
zZRv`~(^Fe5I><KQnpE3YTuvjhaMAtXgcS3+k(=auO9XBFS<u)obaU#g_cAzNNX|xw
zf-!VYC0pfRDRX<AM<!{$P{wMfX=%(aJm2C(#Tgpsm`-W1<>&-WMxqNwyXbH@g=GU{
z%^II64lyBoFijzAX*03AX|<ag;o#ABnrq`TblRSN*Ut?%+|d92_k2(P>3{pv?W<q?
zYFWM3pZnJH{S%*EwYPutk^ZZ1zV||y^_pAzuf6r-{mmc#Z2#*|tlGm*en&)!susgn
z%$u?j<9wsTL^d3T(<WYkH-$r?T8&_|0brOwipWrfS-L+~Yz8T0-jQ>Qpt`L#ne+i1
zS-nUS1;Pk`G+97V1*&S}$GL;b6I^F|n;2zvjQNZt)y_8@)UxyyFV2H>n49aW^{@)7
z^;1}IWq(LHkwHwBTafULRlrbYQ%+p?T~S7t4x=7{+&EMTpO7ChU(ZUFzAk6oWE+$4
zT?o@;RdaP=N8}Z5O#*p+jdf$nfDSb-3^B0{_0fk6ef7-R`IW3*b>T%z3Y<u*(*tlo
z*ecb5VP=J=MTk+UE8^-9IEp!}`r=UFJl7!9*#}K-H%ZA9>5GHb?!Hfb?%VBG-+XWX
zowwiDzx|!>0z&)vJNDz_Floezycbt|8SW{hA(JfN)ocvq`SN%AS2)=HTf!W0fP^0y
z>Av|@qGbFkW1r!+euce*U~^Uh+tscdpIV;SnRr^)Cu8GmjqyOaPXlX18;X9l-WMhc
zYPtCV7_S-w0}ir~7i=IH`cMlH3p!Z<8n^ZjqfJRnSll@U<-U1a&Cl5usWTX`E=v8p
zm3hqW&kN>(?YU<@W)M7uQ=8|&In_lO#_z$xmbzId8Ir-7gXU-Jb&t^v`@VDM&h;0+
z_$BQJf8YoD$L{`kJNM{U+q-W$YQO%Ld;7_2PWP*?Io*HrZTGde{KfhHH=q1+d-%!c
zQz(nMR|pX*mrBXkq0DGQ-XMHNbuZKihn12F0x%(=WbTeaYpV=CDZCojN`4xvNv#Hf
zFfpvW3YCUm>B7*IRTYslsEvmS_#8rJu2(7~iLnM5Tso}E`H)yBH?XRE2;*5P+9^W%
zmqZ-INaV%@%*7EHqg1zMlDo=ZUBi%Y&DWE9Lo!uVFIC&hUot6_y-mtoBmv?>JBiFe
zp^~kGU{VniSu0-+lExGymI{~EDUv-Zf2mN0q+X<Q%!ACS10ZYb>=z6TJ0G!pCD4*#
zdXReA)rS@p&&Ze9f8!wtWOnOt{wn#V4<I@?utK?MzP3FJiZ0mYQ;&bE|H>cT(|_+h
z547(-zZv#n;%C{D$Nk!yvq=oWPXClW7y<wQae@QmbBXZaKcna~;=+i7aSwk5$-<oX
zk*A@LDK<fP5g#aX4oDj2JIA-$r_DHNBXF*9Y#IB3s=7-aP%wEP=F*%o*SNMASnA}a
zG<YvUCL3<QAGhc&H#PK?$&&w@4I7Q1Q}u-rz@bWTdt9XC7(KU}2E2FS3z^C`m^_C$
z_wK*#6w#y{qy?Flp@$bT6ZVNyHZHTtEiFwIj-EAZE3M&Zv((Q%LLY5^_q(k<^7*g!
z_x{b<{=dEaU$>w5-+#WHJat?9t+zkW-tw2{`(J<Z%l)CJzN^rq64jA6!>@qQ$($gG
zuuI<18`K<xV3+v*IEL4tf(21XY8S&$P<sTv2!A?RABqUVfKI#zsO{P{xhx8uLTw}%
zRzdhx6#hyT6p%<2BrujFbSXs+B}z3Ja?iE`yP{+zpk;nxQemm2DJ<3!xnTaDKs`t;
za__umAWKqEbNEgwr|d*B;er~ez91obHp0@O&L!X6TEPmk9wb`pSgX6O;?Y(PZO6f-
zi5w+0G>FM^qxEAkL{hjyEgTL9^bM$cB*-hyX=^{#JGs?6Xac=SMM<H6o8$+P_dKko
zIjkJYCW)vHGdkF8O@iZn;$dLv^aT1IiLKT$h^N%PTm>(6dAaSMeC(V3mu|YNUH5?p
z+oo+BcitJ+<Y>+Qy}j<qdCxbt>vM0=xR*H8X7~%N8U=@5`wD!R;KvkWfj|{F(S7RA
zk*jPoOlX3)8M3>uu$#!{akF0&-i&m4Zo0MAwqz&Z`5s$f?1>wJ*KxdsKgH(@T7U~%
zNm!LQ+2J^_{Fw*?*r^R!oqNw@)6_BvOawyI1$2*#Pya1*oy?2>b(diJUOaxrCC!e8
zqeJP>ou#LFKb)u98S-^*J6hkZL3O$|JTkXK9oM)%x?ym#GG5$s;p1n%@qGKhtw-%O
zzkf%6<r{D7zx9q!wEzCm^Zn*ef4M#U)OTIMs?aBrzXLQvAy^v3kOK#hAm~7Sz-Kuh
zFG8vYLZ1Akh$M0#HOhb|GUnuQt7T9ERwi3H-wa<%!LTKWpA;$sj=)SRM1ZIjGlx~z
zAh7}FP-d7X$MCF(O(IK}r_~XyQ~A1+R0xs)f4ME{R)94NBr+&l{UOobB%&b#N`(rF
zq!a7yGs@Rm`8(X4|7CSG2w2Q1#?AE&d!;#qs;Lkt)l`!xhK@~+Q}|f(lOL_?*c|?i
zLyGe$Nm$}QlEc|n|8S5&h@9m9u-Yo#p>=MP738@pxV*zb0OP$4<qwCJT;ZD!D@UpA
zIK1%wY&(8;Uxb8p_y~Vr!FS=mgNnRcr~4lLdjF-H?rMMd=Vx2n21hCQHrZ#3Yy({B
z>2KpgH+JmB>%jMx?%j*k6)$Ip{Nr%0j6IEy7+A?;f<WTqWX|PtBXbZ#4yKHAhn1DD
zh)_oVT(8DyxZVBhm=<Vv@5GL{t*l)yeP*1Eq3_yX>~Vn3!H*N-0O*{&w=!%lYMUB)
zRQ@IoFJo6nic9%KGsvZ70cU*=MyvhrS-5oXtPc=P+PT_iVEA>B!%_Ksyad%zN?TKV
z9y71w=e=9o$-0emtSVw}kFUPb|LA|7>nBg0?!SEFJ?&k$KHkqg`JJR1r0)_-p(KT2
zP+iGNzYWL?zC$dCP0cZ4n6ZTDsQ5_@2$cZjCDfZzc;OHul$0PjuAp_e$wdYxlL8cw
zHGj4p6^<a60JoI)7b=55Ekaff-CEtU5+woy1;crNp&nXIs_IozLqXz#R5^F9e3b}^
zF^GV35%X8i_-kv5nu?Gc6em~ZLg8|*7L_N@Q_1)mD=TcNRF&{)BI~v<pOdf0PrL_V
zbA~H}T!;{F`ys|X<cdmR^!od2N^F}{)U&c81;xy3oI<k>bt~K(s+h+IRo<T|guC)P
zrOH>4<@_}<`Z}X^wCVdqZddkMhpw5<QSw7)?*^3qM0n*xAi8TDj$+Re@xRc=z30E)
zf8qMu`v-16Ohh8>miur>INH3=#&b#d=sMufqI3kIDLw$Zrk{88|95z9AS+$SCHzj$
z3hQ^{<7Z=kX&%7-I(L(~eb}}Kzh`rV0SCOM0>U+H<L?>|EOMOfGL@*~O-<qplV`Fe
zZ`?CDvw4xi^kDkW3o_`^pVti}Nj()pC&Lzl&B&kz8BZMRz-gRnht4;#TbgGkW^)@<
zCwqahkicRrcCbC`7SASUjK9q=Cv#?deQ0kMmi3Ub6MpLam-~Nv_b2<wYtOXbdDo}f
zUp}yI=fA{IsT1^b$TdPqP<W&|0PqHd0EH1!6+jeM{_ZP&T?Lcknd6m6%gUsSDhj`H
zfz`PRErB=^K=_%94C3o1wi(z0>>_j(;btj15sE97z{@;d<sniT4Z;jUn1~)orxVUu
z`I#z@Nlr{^mQYDZ>J(DWA?ln6&#<w>zszk6e{z1N6<DjIS=~yxn>rY5((h2bazRQc
zcK~}96&#YRAZ$9bbF2}+!X*)&wfl^4q6q5BWJ2oF+Uu-qAWMnZh5bPsgQ%veXsL+!
z$`UDhF^*00?>LZ{FgxU$<|GxhkYyf3q>NgHOI5-k;z>aTDb&}!EJHy?m3s;IhL1Un
zo%3+Dj<_ei&)Pd2E<W?nGyUW>r~A3bp59Bc2BeBTyWqfp9|omk+6JZviOSI3prhse
zf5d8#p$S=O`MEr%5kK&g=ghXz-$=~jIpEM>(~Nl;qw73c9wGX1U%0ZT&*Oe(!Wq{+
zj};uqza*X%|1QE3C5~SwK6el`n2i-nQ3jZuunc<qY|3i;@Ju}c>@nVur%=Xak^_s%
z@ppgCh)}Up5Yj|g<K+p<4X2i|&Bmz>#E<`-&wo$=(^{63And`mM?1zf4QzO(p77%D
z=fAt@w}1M{{$Jj5Z~M95zpcILgP-a59)1&>Zv)|g(zW#Fs!-Z00CS5RB5eBD(2+M|
zbqC5*+W19gHUejcq8OTWJ|4erqEtGrS|Vx+53RNa;+2!pb6y~bok%b80h8SjR+UW}
zKo2Sj#wyit<vEE6f|#btLMf#tTFg^2Xp`_%#S!Y<GOJ)xan~9v2u_6H9G+x8m<a|+
zi$kc&^Aho=(uTEI`5=+1okQIMsq$eX6hPZs<Q=LG)lue1vKp3(nSC2!_ZY(pgjIc*
z7?XUO7~$Okkr6S6EmH`Tc9;KHQFk%Yju^#Q<um17lx?WiL;aJg3gtM3OPj;$aiGy&
z0X0tt4Zqj9Vw>u)4+BgqsQZF#9s2<Zd?@$!ONHNKKapyG!Cvpa^|Ah%KRDCB^31oe
zU+>?8tH?oIpppd8Y_t8@xJWo1)G{=_e_Xu3r-$n2nMfuiF-Wyu{!U~{^Tcfx<EXso
zxqV}Ase|Y*wU_L{c8IFOy)bNPFRfq2YIl>y4#aKQa>uO4h3ktl880YK1xERi2yk*<
z&Dn(OfXc$8f6;d(Xj9|0+J?yHoW<MNY5ax!gs-&pWJ~w&C0Aw9{OfTxDdS88lfREI
z*M%k1OWMPEb>e#gqT4m;^11G>^YkP6-#or=eS6zKa?j`5Yp=Vb|MCqV>+inx^X=i?
z7ZDGDzcQdJ-wGiUD<BSMIhi_#Mzsm=?sqN?hzJ!#h4>hLMBzjtFaYc&!4c|Aj6c+^
z1VRxq1OSTQZd_p)${)hi0*O$T1ZJ3n)T?c`s*sfjSLHg_ON1o|3=}sd<SYEN=~O{-
z*mW0%R@lrrT0tVtud?cqDq}^!ps+#ZrLsc1Wul0KgVb8Dr$YM?+6KrA%$JEUHibju
z5I|e4HklaXU}ACr1rTI|;XxM@WWP3P+=^VNDwPBV;Z^6>#XAveW|HgzBZs0{?d;Hh
z6h)LgPrW}@MO|Ei!WAi$S$WOlvjS&AR1`rfYoVe+@iSq@!DN+vl!q+8x1Q7a^nSPi
zOZEvLm(m;KkMOe(KvtruI@-QLhOc?=r`vD8?cVmC=QrBNfu{sZa-kOc{(v3bpJxu^
z{e2eck-XA)-+&c^N;XT8Qu{OP?s$G2|Lpz|lO|)DDRfi<kDJq;pPmqO`dqp`yN0Lz
z5k{LZzF6K<@chd7dN0yi>*aS5y)4g84bO2LYn)iS{S5k;XK5^ulvW&qe~;uOEi65A
zaFl(DnEM<TPajq5;6#vr!XPo;T?>^kxA|wooYJ&1*^K8doceIEQI}~9dCey4<>^iR
z0*a)^7ww$>#1s9s*WcNG_01n|AH8qg4D!w+QuSaEK7@OilfzTHt8GK6Gr0QeA+}No
z{Iv^KuXKtJ<p>IzLXajvQbc?j50zyLLP!ws+?YcpWr;*jVd70E2~AagQi!ZPSgk{n
zIc%e_7ZekRJxzp7*i0N$MT*d?!(UJ+K&VNMgB+%>$q)f_-l3Hvt6Uso%G1<Az}1+!
z8X47_ARzW17C(gYwM}77<&~vyugQfI?2-2+b;!AxB7Y(b2;)Jy6`9_VUKYxv98M7n
zlT)ct^v{(KE>u=)HMhg4TNE2W;l%+2pS#*u2O7M4Aagmlaf`K%J~y`K+GF8Y<Babs
z)x6>>F=r`&q13ZtmkRbaijMN(YHiZSyucg^-=_643EiYa%AtHH-a{+CBF?+@JNv}9
z`x|b&yZ_ml^99g}2W7A4;k{soA*Yau*wCe7%<#(CNqmStB?fVP4V@NTnc;`R#I+9(
zG2?K;z>I(Bud@%{JKk63JQ0*iqosF@y#?M5cM1ASe^YXv=0>6{8;@%;5yE^g#<;*;
z`(oK?GN~hiyA~;RY_H?sd?`&fpIET4yNAlDq4PeCVOYSP=QcC$WHA_~&5j-9YPYyp
zyV*SUIoO1t(JCOaSg>IZd68*@vMKmfGa;F@d9p(@SyX?+i=5l-y|+&veWm^9H{a7=
zef=H%{kJ{Y&MzBC6+(+tb+jQniCH9TN0O}aAT%lx<BikgV%sx#Q(@akVGBhgNQLu|
zKqjP6SlttO67Vx@wv_^6g`<G86rHA=GUXSN%q?;HkA4B9k;7&3fJ#7tKkeaMI29A5
zu%p$gL)pZ{vsQ1WqK{C<mIghjp2(lH^2D6Nls^g8Noo(q!=f66*_I|G=iwvHNh66f
zxeXsdHF7E%QCNCug5X>%hH-uPpkgX=ig2lNB0&sIio!O$W_8fdnUqnP3tQN)L+Qfv
zyEQTS2!e$0C)aC*LWMXG;V_`_2H`<C*m<Y9xWNkjR>cn{fLnx&n}{T;ZF3=plrtCR
zh@gfKO7+~x&YFY#6nh5W*R>CKdY?tCt7_>rlwzy*4pECxj#rz0^QXSjPoBE9J@w`1
zu*Yg2*S<dDOvZ01b8}47-tLXP+}pU-`<9G7<7aGVPzyCij9-Ws<K1ChOEDwiT&5Ip
zFL5}JiAqTs`xNh!0y^4z90TT2KhJ+Bjxe1ILw@PGJ%o^J6di(t_G16O$a3bW4v9pm
ze{{5GVz{@Hb-JD6c({(o(j+(*ctIP7lF3S9z5ZWv)WJ#6_SDG9vDqx_n;Z%A#3JO_
zaJHifR&8s1iS~>&w@aIJT%ER;oj!XLCR%*pE6;wbpL*Y?+R1B9_ZvR=nRf0A&nG3!
z;he3Am#Z9o0yfwfcw<v^I8MMNV&LjJe$|K-3|80qt11|p+nxHC$TtgMNFiK>@=_>G
z3Le3n#I!0TBnm-d7y=EYA%GU`WQCCgm2)-Wp`w!JBLWDOMg%nz9<{L)fGVNBRxTc{
zxxP>c5kh3~OConm5)S}&tcyarR=bV}oI8RVAvf7oAx0{-wz2FGL}Y2g<3xWG!(1G*
z0l|RE7xoPju{NnUS$2pKIfLmvQE?A^lEj{c8_GXjf&ht3SusobujRnyq6y~2g0u&b
z4wY61nOwk;s$<h3gL!jSw3&-o-wEZPLiLwIyLK3td6QOy@lN3&>0+d^Ppu+X6Cr7l
z&p2qB$e9$|hpWO)!e_FMgUEW@{@_m^?Em$h_a_{ikvn4;u!I1}tr~4)d=I`<u$&l0
zY)ja<?`ID$5Z0&X)3qYjj9g^**=)RnP4<ivpx?najvJ$%8~T}HGTVsz6ZU!?W`u0^
zOx%y_F@<8L;s;p6#r}!G;2qbg@C*(Sw{xBHqGspwe}d4K)iX2PXJoBg>m3fjQ&1TL
zDflrCTgj1~k)Kuanty2gtVZI0m^J#HIWMkz6TtfLbC@HqO;3;HvF5qaWW|PQ6KcKn
zzxnv%{pYW{z5V)I?`wB`=4(T4lTXe_px+_hYybct07*naR8A^cs82b>6zYgi?J3DR
zg^v`vLU^Qt1OYka0fkZqGQbK}0g6uYae|Ku#jMOJd<Gz9-W<bJB&p7&i_^ZtKI%8w
zlVnpWNJ}6Gl`(|@b+1Vfiv*HtN1H3GinUuC#86a#ye23_MQO777UVhBX_rG4c3Zl=
zurbL!L)xhVc;zvK?;&R}Rl#arYx|$cD~NAAvqT;i4-V`HO0fut$g34LRw9RO(~m;1
zAP%0p^X711p}kySkd<+MMlybg{!D&?!~_8jwbBPR`n~#6|01#}beyWx)eb6`r6QUL
z>)CQ3l;R!ll!&wsYYwqGl_C*Q9;SArkJZ5>(4opH^#cm0$h{6Sp;R*(vDIgv_}t(2
zpZ|l~`p3?GX`g~o_Th1l&iF72HCE5cb9r-5pO5$(o#g&!A;~Jd5J2*M_1TuWfX0$Z
zmw%sffCdY++%@Oo4|=&i5j8IS9wSUbQquw?5;w6``SE}AaE|$*i}a+@YF@j0_4O*g
z7ivy#!=h{AoPZW@|H4U*9Tu(Uds=CGzoQS=XNydOR93E+zze(Q`O#tbeAbV<mt(HZ
z8joTqUZ}QnZnn?0Vmo%IOxCMY!Vy90inN}#3C>H){^a`W{kPt6fBS{&?&=@7>#6=o
z04<aWZtO?cWTjq(YPQ}spMn{F1o=Q{$9Z}V6PYL)EV%hHf9)`Ve-0Blq-EtQDGpK!
zm;l~#ae&C)CXv|~JIR$RB560b=kVTE1cQ~CC8tn?jUi<L6qGqu`l>L7WO-GpXoodG
zSQUWkJgH0+YV{(+d{+0YZZYRl1XJVQwlg<g)fS6IKO3Ymz}}%s1NrXy1GhZTKX~U?
zrS9ZB%d9LXl~rLtsy$8PvbvM=&8${K^-*Z`!n)pn^8@`ucRt;er@Dfj6|#>i+^q5r
z;Y^T05y}Wjifo30mglL^=TaeHzX$2S0@bZ3^^u3_!<bSB5C%1=)p&FW+~UAxqU&@F
zD}_>1rKFYIOdJMcouopqu^-^Qp(-5xIpqMwSX2ga2-G2EiBNMKRCGWAS>)QRx9vS=
zKG$CNrn~xgw~c#l7HfcQ0FE360v70=g16KAh|k0j@d4mQbLSu$10JS!8=ny3B^=@$
ztb!$6)VT7s{g~@nfdmemBCwWy&UgjJN|O^~(SPP0$wK8mcQ_fR+c8m)j}&#V;l2ww
zdUc^mC^*~PS$3cqf%81zkbQD*ENJ6pJEq4|ouK!;z~O+^fW^odV;FcaP<6b4w9=0U
zC(I7i-~^oW#K!q&{A`$8ncs9R)UW3<Dw8o1xM0|d>)qV&=}$b_UUltl{f|EU+5XTM
zzLOI2O_(<6#O_?7jlzXY#!vZNaq5j9g<c#wtQEVd0#>JKgu0*vc(YA;Tmm&Fo||;F
zq&O&FYd3!7dQl-ne^P3saG`<`;jkmLcLWgg-0?j6U>;B|Ofk3-Y@{*<5X%k*NfTX@
zv_uXf1QtLpqHFMHAx02^u%`=ia@gAh*oTB%9J6g_Zo0A^931qs2#HnlXrg-Ind`2&
zxL^8XH>VKYVe%K-gln!flzPhiN6)Vo6Om9s<-%HR`t?^_(k^}ZY2;dNME>QYLGG3a
zONQ-&go-p+ZR30ALI@OXghCkpu7ilzgt?J5S1{fY*%61ZO0Goa^)67M+jPF~4EI}|
zjXXeCf`^Y%#kArVIg(86U<v}pq>wW5B4d3+1&4}Da?Hb;QzWPeZgF^sv2IOd<uBXz
znWvubzj(vP+MS>NB0;8={kc`)LL`R&g%C5~l5uOmi&4Kp|3L$c6jMCH*rHY7P|MHO
zaba#*Sn3vS3Wg<+@?7gZu#RnF8EqU#AN$F6A%^b9?|f~<d$yU{uj1R(R=x5kci(#N
zi}9h|e@Dd$4wNU5CO=GohAE4iMw8UUI+?VnGEAHxY!S?`+@IQ;j?wqUr-j_j+i1Es
zFMJHo^DE<T<DyhYueQNGdhYMoemCpq(azWC%(}Vr#<=I(-`TVq{`_ov&2_i;GiRR>
z>0<tgPwYIkh5}{~v$|oG#-SjG?-ZIW;YlloIk7o~**KncIZ+ERnk(r-4O!x(4p5eg
z1Jx!au?OJ*n7X>sAt)t&gWO0}h>#+I03lBj!4zhT5D^qC6J>xcLw^b}8mt+Hb9Ew$
zQNqpuXe%$9Ol%_zT0+1ko;f5OfUbP8O2(|PwbM6T*%t?k{vgAKB44zPN#C0;zqnoY
z@|#uAaUKAkh;$GL5w!5RujYb^Q0zD_5+bRs(N+*}=Z{{0`6cbLm*0}YwN7P-`I~&}
zpdjTFgpHwLsKg|lIeZOemnx^inGB_8vS$^x9<Z#+rCdRTlX);v=r@#eDeU^&hn_;L
zvXTweTfbwC<Go$kE<8Liq_0C7h;-ONkpijdE+$I(pCI%>u=Byq?<Cd9Ke^?x{-6Hn
zp0?dj9Lhf500)U=6)YIrni8st<-n2gx%u;15vtev1kXG+b~+b9MsY<rWnh~NBWN@F
z$>LT0JL6ycP6Nz|-u`}L{CoI8w)38KpYk(2)BGtyx6v6c)@zAXrUvupnT^-Uj|)Eg
zJ3SvyO`M1<)}c)N%njblzl}W&CxO8xWY4oc;{Wj!!$s)z*<{aZBRt#lSm!U771BPm
zH4wvLop`z#`}opVp6kDI)7||IH+`%>@aS_&#@ERjp;U$=k}@S?&;$ljC8Stbg$fWe
z@v}0O3J*XEtRz?!P<V@>C6J#ZZ0=5&M)(vVGbi|GLKMJ&LI>x6X|o^0Ng|R^fm{g-
zwP9ryKp;|;haD(sToK9>aUqE{`EubxR^0~GbEjA_2TEWFHHTk+A%Kjvfa;?8fDj`|
z-o6n;7s|`&8?NjJi-Uf42b3>8vFQK$mJj!T@sEDEEe;OaiA%n(|Fi$&x7vd{!tt}0
zo#+RPMLSp=w1b07q!_;M+E?{|{3AcqPF!?R`-eaB<L%ep{TOnsHvJ_RE&BiY@u&Oi
zf95CKr6&#)-hJ6ci}tT?`HS{1e&mPSVzFo^F8;pu&wl2&+qqcN9cg{v8(-Cb^hbWU
zpEz+*`-lJN$NPVI*P}fS89#gJMSZb2=m!UjzF1tWb&nzps@Uh3_*rFJi1<lO_xlCa
zHiw1_QF0N1=g!b*4r@B6mhT&hzDckPInsM4RSxfQ_-gDKBC=NFM6g0#)82shnPF9_
zemqzqth_eq_8#T^#(Pi@HS8@s5QN$sdqjFSwj$KdOSKK%_qIRu#JBs;{r+w3{zp~`
zvmBM_`QN%%bN}W&ZN#^XCqgh|N5$yfjR5R~-<6=fFj1LYAN$;kcd2jj2Pl5TYVrlL
ziaq@lGS!0`PVKAa#`zd-j~RdE2@`>*l|DjN9f@gfci{`!z-5s%MHzJ0YtywlxxCnJ
z7t>A8c@fg2^;=$)xf8Ww)#SE~&kYL!AGS%dZGzO&oWrvXGHT18rT#d^>?q|W2t&F*
zj-|FuN9n`oEj8K8e5A!s?ACj4=fCi^_H(~~TmPMReX5=N!t=`a%7nsU7b#9_t1~tK
zCg%k?w}pw#0dxvk3CyrD2e<`TtbO`U>c|SD6QO11X8GjqP;3Gyo$@1$hiYLdQpm?z
za{LB90Y*}T+(r=0octZCmUFeJ@|oxbNoGR())lf#jHf6l%8iujmy0GuK$8mCn%5m+
zJ}A4nASEkHN9Z3)uf}j#d@06z`o^pJ;^0D#-r>5nm!4Ski!Q#X{nLMceS7~M54X3x
z@s;ghanP@P<3s&$x#?#gf39D9`6cbLfAVMj+~=QbhpTOS{~P{!J6K%O{_p?yPulxF
z@{#_UpSeIDUw!k_3Ol~!#6f?_zxrSMkN%t2_3PhrTI=?*69@gGi%+zF`tPsn@4w?*
z|Km5lvL75Aw5#5DPK5P+Z}{<ku(-JW?C-v_|LI3Q(q8j3SGC2#L4Wn>r`!3}wm<mz
zH~Tf0U(zrACx6z?ef~MCk~<qEk_La2?L_Rt-@~6=T*I)Xa#PDYW@U}4xx<?&jJ|?j
zuIT4Ds6pw+`!Bo5heQCI=A;lQNLz{w==~j(XU)$_JJK4o&ula%g~Q`;6Jg>|kAn=Z
zkoK_h{-HDu?Qaofh&A&8%?BfgpL6bMD2to^=D$2_zxLL93CzHwIgai7sSzi(Wo*b8
zG7>gC4;)UU3Ak$lw0ops_?34|#>+Nlq6o1N@Y^-MiuHvw@$<3&Nk1Z9wnx1W@$8J}
z#Wu(F4F)1&UWr|`Q?Gb0yIuHX!5iFo8N5wAbd(0Q`?sY&J07XZR$3i9P&kh!>E{On
z%?RmW{4$GSUfH2LNm_X+E(~$v7-)C)19CgwmniK8+vS(b&Xw%+cW~Gsl8G4839t?^
zZBO3|`N_jCw^yDz)35*F!~L_%jZeJZOoz}Y3l?0phHzt$#1cLXqQz6RLt@)Z1f;n6
zL>?d)*GMK)C<UQXD`E)SE%8~93=p&g7@=TN*^Flq+EM<Nl)WY;%N4H-amHAn)Ci<=
z-XT@ATp{Q-n5;h7mmzV5I|X6_D3Om9#;NgJRWyJx1ecXwD!?QH?!)0Y6~kZ+&)jrn
zJ6IgFv%9}vdeK4q-pgMn|2SH;_L@sCYL~v^w8GEVUvY7}^v7=5k@=_kiw+LjmDfJx
z{L6J~|M7~8`}h9fH7(}&;)@pjML+PWZW46Cw_bK)(O-1MFCvF=+h2XziFWBv+_F2+
zJk?)xfoMtzJzTZ+A1=SReeVzae<E+!U4C)D^yQ~hNb_(-8z3(X>XpNpC}fC`VjPH;
zCM_;v!2O{NQprot=i-c9yyF5Yk}HLNgCK!SS-nCk0p1~zHy!Xi-}87US?s|AuJglu
zppdT1p(;oy4|q%aoYFCHm{Yn&D4-;_aS#a=oFUoR`<5n|sV^LwkJhc-bN<<O^3<*U
zu`fPb_VqF9qR$H{%cR5@S!E*qA3t_W5G$tG*b;sYpQo<+?BC;mX6;tu8sjYOCFVCi
zTXEZ;7dzH5fFrPtM0gAS&*tK1@%bqJ^ssLlcP80XDWiS;o<q0MM00<`pk&WFagv1W
zggi1#79mY0x92|gEl76m$(U#{u<<e@nJ}}z;!Lf%;qE?%`Qe3XxzT-&TbveMXq>P)
z7d%+B`{e(cFAaS*se;*?eDm(EkDXn%tFO7WzyG!;M7B((w%XhiX#tT)IWtlXVxzYD
z6C}@yUseGff-O~jkvBxepsG*nOcb<H2cZnok_er1Yxva`R?a~70Deq3Kdit9a(T3Z
zQV6mf<j#c0p`EZ1zgEOKPZ%H6hx1$$0JN00w2n}77=ATzcU7U4wbZ}tsCC_Rl5>6~
zM^Z55HxWk6VQ2Oq>wD`>SG5S;9<Db1WfvXvm;L%f8prw7rk}dv;(pmHZjpj{{pFYR
zOMmQiJ6yGP?!H&G#p0m7<Lp=ZxhMX%J^1)H``IV{wteU~f3zK(_+f$jOHLfLm%aX6
zA}EK;ZGY)Si}uprI44Ew{A$~;x%}dO=__vO=U1D4?*3P`gT+C6=h?5e2S5K@Kl}JM
z``O38*+2Lj|F|7o^utonuD{}vcIl7ZGWeI%Ae=wu0}<3u+0s?UBv7HesuEdBYba9=
zdj{dLADcKT$1v6eVO`~-BE;*1m&rU1fjMPBYj4GyIfJOe&%P@%hGLx{vQ!+`TfbLS
z<71BzX+(cg%}dTMl*;^m*v8J|Wf2Wi6}&gF;@j2J+y1L>`FQ)#9gofr_A~NfyzL|g
z#2RB0pU=OK!UC{T{fw9b+Mzzg31;Ij*gb;Zh*?8V<{LnAx8^y}7MWY%hRh#=7PQKT
zNV@hy`p8L&Ez7#p&uDK9yV#?w*^E3d(uGPW)KPg52B5LhV0nE)*piXxG=o7W3!R#^
zG1{chnvZa-^r`1b*k?|X7Z66O3k$=~mB4D(H1?gL)xKNZ`+R+&=%{W#+y1zD-F@y$
z{pWxG_I~=)UzJKG0Fk2LP#;MIRVWd=q*x%NC$$S-a}fkf0AaN$1I#9$m{*aX=EQnd
znxZ<^03njXuVQijj!B`FNLS=Kcg<r&xLC^DCMykV<R>9K$?Cl!=TD$v!b`Oxsdy_^
z`ex9#`WWOK#S9>^{F}ughXCCG&LG1sc8M_D)~XCbb*^aLblW=!8mfP(zN}0j4wu`0
z>kU`+#lfPT-TB{3PaO0s-+iPo+R?hTYp%GYU-pWd<x6k6;^KDMkKNo4m)rh{TYj=F
z4i4JlV9^dP<jJ+g;-D`Ui?&!S<X<no=%8Qq?x#c+W3Df~Xwj~E_oH5;Rcog%zqnoc
z6F2vx^|pQDmVen62M7INvFMA%!G*pSi*|5uAtx`$|Mgc~+%NmF(>OGR|5(vu0fj5I
zsn~@-gkO8@rH;ixMs~M~sr<|p*WYVo<%|cb4T^AF2;=t#3K<l8`6m=b5wK8~F(*X^
z;-JQ{#(@9?ysB_6qGGNtbB9f+YyKZAl&#bwWV?(ot=q7&$9!AtB|&thYUcw}?5A)0
z>&M!Ee)HW0>kOh09R}PH{sf+R^WQ@#MvOZy)hQF4{D*K+zx8@g?bmZG0?Z!5I&h25
z@dE#wFf@k2`*mRtrV6~#p2wO<=3paPV;%|~p7EHgee@HiqJ)HTCHsQ-Evjm!|Bztl
z<LN-sA|@kL<8tcB?=aD_$dhN&GjjAcI%QJxig9z8*5mj1YFpz%*^Oz}4#G8`%kV-~
zM}z%yA7$?4?Qb?dP8n$(@G<9<#~w{Sc=VNi^&4;NXCC~jLQ^Is4b^WBJ7ks1fT;W#
zs|HRwM-B^rs9F#>l)F|o@<W12oWwzvoZ!AyI}WQzaT?ST5n7Q_D{!GOQE730m2IJr
zE7cF#6!wEc3P2Q@77+yT(s-p9#9RUdBP6^9`ObM>%5hv<B?(p11dv}Zf>1it!y^E-
zida?#!cbUZ%|v8FQId)ae+yzL(&4J)AbRI^<9O*s2kol&Jc>SAJ9YWR{j#69rN>u!
zTzC1!{j!(e(#|h8{r=m3rXMU0`U4`Z+e`*_Yxm-d7VXLpJSET%lJc^P4*HevdQ_zO
zXtizEUVh1i(Cup5AGrNz`oY0LdjKRwA#{adx9$2XF7B7T{4~@;hk0wrQ^YOo4ZDa8
zfe^~RB8D5;?{Jm<*tx4M5pRb!eZPIgVP02GQ&~2NcLA01-ntJ&t~j>3kN)&7LM?~l
zXT@`)u(958DQ8yFl*5|dI}pcJwBs}iA5O4O@Lh^`T}rjX%}yb4+J$YwLa4Csw%_&0
zv+d-yx3<++z6s_8NoFdHw4VN*kPN^E@G#w<@IJ%uga<VASw1I$Bc`Qsq|X|<pWx#J
zkE@Q@6BYs{%X4Z!*=VpU?dfYAb+%_uZNomoX|4+w7FcW^Rk;Xyt!qjjL7#=_O$^FK
zN*$L0leHI??eWw>WfnSRz3GN*)MQ}zCykd4hq>bBH1}w!)was>c|M8QwbC!_FpewD
zA$}kGOVh98Y01Of4jmp&%LcO<Z1YE-dbYpvjkopppLtw_grQI>OaxVgR}$zm)WNS#
z8S?uAK-L5U5Eg9W4)0lg3lMOnEGszibqS-&;Kc19lSR28c%-5Ngg5zjC@ZdrbnaD<
zBPO9c?+{>zaHy0FsCoK|7%HL&d5M&VG7>-@gjyucc8T@y{I<?n3_D1{^4}<`Q0Uro
zj_|9$Cc}1jr6-A<!JJ9?Spm85J$j3NcDF_^J8{sieD|Y?09<qVCH=Bj+#(hBO;=p3
zuQEA&{DFROaL|AH15b+79j&+R`k(so{-giuPnEOz;uDL0)t^7514)psmtAzwuX@j8
zJ|L`HyY`9;MDP4^+YcXqpf3&<{ipxOQ&fEVb^qqa`;Y#sKNIo4{_;!uWiP+Q1dCx(
zsL;-b-1s062QC~2M4&=lMTk^k(WQNfBtMipucLGD_;odU|EZ4SAP@%#sf#ggzRQ(Z
ziokBM=VT?!#X0sFhJXDYA{`_Sap_(1IF+8U!~r!9BXNN8AvMiY??*fbB|G+!Tu{bT
zjd+i?X<jDGt-a>=@91}Y>ZvY;Es+KNzT4`F2?bjcMyI`B`@S(Jl(5!`Hxv^{DpDJP
zLwc@z%!QKqxr~(+_B%V{7=USPk2reF4<2vzg9(A2jTM|>-}M3C2X5nlo#)oQ9$2^f
zye<Xzq;}<1Ues2~V0%ntG~iVBthR5%g+e^o(aa#}`3bk};W`tibDx-AVt5=U##DQ$
z^B<gScB+bnfCIJkNDo`)lM&4^I&5PPm`Kx|>~Hs39-HjmXuq&;>;36xztw-?O?R|6
z{@FPv@UJpSGZA5k&EXQM1<sRcRt7eikU2z`60k#o(PpWTl@+WYWezJ^iBl4`!ZHy;
zMxI{e8i7z{H77!^+e98y)nX3Ev;>4yGo=PK5H2fxR!yOVLh)0GS&B-iDJH{GRse`j
zPIq{Y;rCQT5o!W}=y2_?l8~)q9#(rmcAFFJN#LTtATR;Uq3}Wh6krFjlbYpF|IupO
zPTzP{KR7t(XLs$t^u$5C@?DSGZtHD3b@|2p(pTK9aPeENxTJmW5B_5N%ljT`=U3Z)
z>Zg9FEe^h~z52iYNqgUiKipsa|NNVFuvql}_!nQ5vi#x`i+1Ioe=!w}94<HgWfvW^
ztKRjf2*J^+wNqDI+%9{?Ej`q%Yk%s8+QH)c+iQOJPx|{m{E_~efB#c$aj<Cr;UiB=
z<$d!N7q=Jv;Op97-1ksgSE_NTpdyI=iiaA6{|c#z_p7SDR0bWs4HXal25AwA@_O+7
z*LxkrDIGZQzGZ?06)=1U%J?c2T&Rjr-l$YFgsyzMMCg1dmFll|tb|iR`t%;imqEsO
zAjztn2(ZX^I!wlU(9n0Y;<&TLe|zsI+dKd25$)X-yY^sRx_@5?)>r`iKpPZEG7g98
zMNAXe3^+a;V-14>&eC&x+o^aQk4b95bB*(=m<(H$_Ts)Q{unoBV$D>QOC)->2537G
z!2CC_>zU}I_6<8OVuEuCxEOPo)UnT)Y0M_p)$=ged~bG~eb@atC+hLSnt4&>1YF2o
zx+>(aNz)wKna-8%CdZB`)aS~=qMbBOPiOA1a{7)o_Bh+_^UZeKfBS9swO@bh{p~YP
zeYb4DTPQSJ5hQ=T!B)i>+$3vg(i@(u|AIh7D8(UJh8KgB)La;-4!g~td29^TFn2~3
zchO#iS!2%YW?-R82rxMW_=rp`sX~PEV)6^c#0lmcYXY(@zP7~SCf{d8z{J}Co(dso
zQ`%|8zQb1NE9|Oplu4_;nuB8sWenji<%;e4Cozw3nUddEn{LA4=d40Ge0uARSN6r?
zpg*|tr<a{LXji`HQHAr*uQvUf3&j{BiKpNCs{WEoFKQ<)`612i)a!q?zx0al?<Y>2
zX#e2yAMbB?>qE)5FFvtoSAF2AROxx4zY95fA{ndJuDSe@e(6u#B7i?yZ`(Dm|G)c7
zFaN%F;-VA%A6)Uz`y1Z+5W>^jcIK_GY%jU&qIS{6KjilbVRkF7ApamB^ud7~>fOT{
zi|kpwWtxEt8K?qo(|ZHb=fZ-OeZY#>#>(~@mAy+G63T(VhXMNh*5ncIz4HE6c!w1h
zwYts&YtB=&ZKR%Jzw^PbLD>xA=L2ruBSKZpVcV465(gP5g)F2AmGW(W^=SL8x7`cK
ziM>7J%7CTi?*W%8wzYtaj1eS)dvPvd(uhI%v-wy;L7ZUJFt?um$7_|Sj-)HkosDG0
zGE6$<9Yos1KRljFj?*B?4QBJ5|DHHOR_@F#qF?fz1qP89u(I=VEjpMOEKM}GX~V>`
z)qs16V?9yC)1#sHJ9Kq`p8wXE3j5APt;{JeM%O%hEXmlO924!^o?f743xQ~+x$K$q
zbnLyXRk7`bYwtOI*k60yUHy}v`<B4nc`I9Own)g%c`xgdU$=7Z+7UKFf3-sZOVepw
ziRU1dB1cfY&SNa+6KTm`6Or<o6t*&eD6~a#1ac9l?jw+{q@=7&SW>PTNR*WXR|85(
ztH2lF8z8>iPQV@2ilM*+5Us3|2}GfGa=rvWtA_~JuB@!M@CMb5Qe9&%$WtQtRq)iI
zz~S2n)l0Pn@eZ(bB0UJl5~O@-!tJlGFwu!hZ-=X?7W?<`A*z>FKAr4u5+36O5mjh=
z>w`w9T0wv~pOwi5)ulw%MFzqLSm3bL`{u%!P<z=Y73s;l3>(GRM2>JMk}v3BQ&g@(
z4!sBXkRbBI$bk<~_8T17l=^|lf)5ccdN^8}#F}JnJ*KcX+gz7iN~oYYeFAD64u3o_
z%Fnsqfy9xNRszfe<VPP^wX08^?%#QSTQDG4hygv|sZI9#q-bRf8}Pi|U$JzCBgE$*
z9ntYjNJ^pIf=7Mc4<|Ck`qFl4pw59|>U3@7AlZ%;zef%<bU%>ijOVlYjPne;j_Wt)
zKUhD9Zrh||l7#qu!p<koF&}uER9;N~R7Sp=Sf5WYnoVRXE!4P}L2UAP=p>~*8QE>k
zo}H3ZyGl0x;0U(lga8lr&AAddiGZ-CvG+N#=Fj1i&$N@*obI=udj?fu$ln66DW5D<
zDx9iQZeDDl*wC!XZFM?V0<|}KhNBR!wBn=<lVKs`xq$2tIEGM{H&s;S0@$^&b1WhQ
zCYsC<GH8UY(5Jv0d5Z{>T787tCdDQQ^bmR#pis?{x+;<YG9mSZm7WGzC$C#I(mFzY
z^=BK~o$Wz6HJNdBsPe~_o(GAMd_iHfc;4aa6sp9b!$f~8d!@pJAdCq0(Kr1p6kMp%
zsty-vuph?S3<n9Vp>tDR<l?qe7?Rd>+qqt@h%VuAt&QI`spmm5(jg|un8`KOL=tJ{
zX6hga0-uN=*2_c}<ij8>r2qgR07*naR8!adPSdB3;A^b-mNKUU6bLYs<Y?mv{=%XP
z5%wU)QZQ{VDv~bla=6<hkhznw4?$Vw`wt?hbPgS6UD$KD-1JX<?pyupQ)k+vPkycL
z-S|(!r3C&V^#Fi?n*k@jr()T0qJq^vLS*2chdD&QrWhX2Vpc#jjin{@&KyMJC=yA*
z(t+ePO?3YllU>H=(|tYtFRd9KsGlc{E_N^XkN93FXBv0?9=(xFU_sSro<>=)IhjZf
zAg9z6d^pL^y3gViHmJr!)iJfPZviz;^s~nyv!lV)#N;Z;tc*LmW9b7_HeJK}lHGQ&
zML2ghVTXCjiL0~W)}McV)Bn>S-_zdumybDg!LTC~p<K1c(2X}isUQmTYy~O|87ikw
zVJ?3zB`OHR+F-3bxd7m#Qf(YEi4fR|pq462tp*0@3LG3NR`p!E-=Rz<xAUtMQn;FG
zi%6iaJM_F&_?qEfD;EaVP^<D+#~28yToUM67^AT)3ErMl5I8BVF~11SW88-z0v?-)
zf(gD9uckRtX;CPjq-an{9QHLB#~P6oW8H&fNZHB>@eKQm*oq92Kx`b!rdm`E4sj5Y
zy14W>b+}l0o#lJ0ZF*<Ir&CeT622bSqzcJy-NXU!i_}Yx!-YOp(R2Rl*5n3j==Fn*
zMR<2(z+uCw7&vGJdDOaDO;b*-lwTkAlxCpk;I~rbivPzRWun$-JHFfU3+-oai|;@j
zV4OzccRLlJth~SE;xVh7R%ZP!UVZA;{^_HyH0H$lSCY9&1SyFW#Od9=!iu?&VzkKD
ziM?4&m|>qlss|Yx5HS#y7&zk~lWT4x|32d)>7I=FJruo`n(s9AXv+yNsrECW?me$Z
zvZ>dBM(G|;9!Ta8YQOg1T3?7vME}Dgk(#7y8kGMenUGa%|Fmc}v)jp^)kT7eW@cEN
z(MHGh+2rf}^To=>8^+9gy>QWg>mCCcS3EnCww9fMFHggiIB(oD&SiAUVsEwmp*tVz
zula*J`q?MH!@M7zP!;aNiJW1HtTZ^R<>X|Co>JADfZAc4APz|-0imn}ASYJmT(<xp
zks*X%9o};e5-SlIUQ}o{!kK6*jRnLf$c?KFty&6HqW>Tl1XlNFa)mI_`AkaO?$Y69
zC*5y7C#i=4$_S4IDD6N}6^Q^c+l=dB1uA@l#U+??Cm<@^zcK(jxqpk$nAar;rO1y!
z)CC>Rt7HKT!;DrEb+9PPibBZgkkayDLx&%eAg35?q)=*{dJjS|htDERhys@s#tqU)
zRoujxYM9?ml2@voER0D9EFP9tv=2g~N#S=$KS)wKoP~|~&QNLB8sMOjd?+i$eh-k6
z5r<5Y{$gJrOrc<-P5bHw=_NcEA~j%1QoK{kp}dL&uTADv{I&Al1hv}47vl)h|GMk%
z?Dw4glK1rt?8L*2v%m$A023PFKo>4#hH?ysk`?T*NDx+Vu%X?Ge=W}?53}-(JQm+f
zv8T>y_=%1RW{-A~4UcP!^B9OQFd7sfW4D)XXkUyWE*IjPOfhf)-@73DcaM{alcd1%
z*?4tgu`Zchuzi@wlOFH0v*4-WM^06GNTe^W<Fnm7=F_jI4v!0~(Aaiaq&+8**&K?)
z+r{(C9qsz&!44k7WL;7lt*^iOT)X<3Tl>3idEDVOr~o>Z?yfme7|K&R;m1jRlSqV=
z0D$D69tg;s1fIgIYmgTKIDyl-Sxi0;H6n<rD+Z}Lx^Tb*&ttOsg>be2)FGsldlup1
zAYW@J20@O3w1ChGG((XIvK<Nlz_5fAwPrySM5>`C1dy1xBh0uq`6P%3Y1P=HzaX0=
zy$YcrHw$gX9GxG=^)q=g=(ff+NeY@k9_tWF>&kPezT+y=EtDzuPoge0Eo=+07vTc&
zw?dQr*I~~U)Urw*m$6n`5h)coP#uEO?(_kWl^_fv{#%hXs!a?>9>ULS4yaNYf=r2M
zStS*DlR_P2-1|pT)|P%BS-?O=OhgPMZ6MKU4N1CkRe2(XP^i-ZjK0nHaK*jMd&l{u
z-z}=iJnZn`CnX$y5x!zl>Xd_{)wcc0AK%k&{`eCGM|y7wM-ry#9{z1*s9?MSE)$Ky
zLV6$Dn?8e)RdQ3FnYOow{OsB*%A>DjmY75n-7${0v-R<3n#;G3gCuIv>vKap<~}jb
zHd-~CKP#D&ag&(FS}alndj`GV0Ler0!eOB*(`A2^J^QD{!})riO7^Is&AkqVv4ug7
zu>r1g(YdP4ttH1S?dl^mN;{8ZDCBXEJ=0owp&NT9VNYYc@q-WbS6_c;d-#jrL7t9P
zp$t3*gPMmY5`&Yelm(o;4Z;x$gQ@^PB+=kzsjqIJ3K5%sJj0NkHdrT7D`yL#mJ}M@
zU1u(n6+MT*7!K6@gPg4VI|~dPk_C}i8YJU6s&zG_c(h6+#OjyEYw!`-Q<x4!NFitE
z2MP3GZxgqTNU#+OgsnU;ks&F(t5DJ!?gQC^&(PLZf5YEmPA;5@YYKZp`N`q1M7DH)
z%wGo>sgNi_S+}IJBpU>2OYenAheOyA)*}JT_D+hhR3npC&YAh7u6i};rkcs{`ao9o
zo|yzn1q2EAdQm|W8G_=tNrw!EPNgcZ=%dZy%GEZJ$6Rb;B|fR~=^&YHM%8Y})lAA=
zvr3M!z(+HwP4;Qn%Y1Mp;Z*TUQT3Ht627YU*?Yxrzw?3iKks}r;haPavjjqC*FC-L
z`FoVCjBgc#3}+TyCif<E+=HtHOXC(QUl}4jpF{xj{P*InaIeuE`?20X5tS?UBAcAr
zHP6ix?B&t!%VD$VInmEF$FvSu@6vC!%ObJwPB{?lIzN<&$IkNgv%%1L><uee94(Ae
z7m><ijH);~3@QsGGDUSU95y@U=)42F_E<am!Cj*R&?)RMdz^Iolhn9+Qb{(({QOqv
zB$wyV`s$f)_LJA#+TVZs=d+T5&<k>iQk7l}FC`U2AvNae#KvhLV_N|@ydDZd08k1=
zDNF?bR2VJPk~r-L8E6JPgix&JL>PtDqn?Wup{#D5$ENH}+yqgi5lWIPGaXho3CW}@
z<|4wJ)RzbiI>be#$)wAql7NShwANI%BY6q}1Jx?l$O;XVOemYo-K&KUDf}CL07dW+
zKIJet!h2Och9a5BZ}=jJxvIE9_71rQBu_yM!{#D`H4k;GA1B)z@SQr~cTB!5;=So4
z0Eh6)tcnFmv^wk*04iZtno~N(lFwVwmO{UB-f1FFCUeSH6^SDm4|^l5tfD3R9nt`T
zKz+YEkl*IMq#*jh6E?<yC6r1Z?!0%AlrK>b!w{}~AMZN)Ph$@C7=Dz~PPWZsbD@k?
zZ7ABBkM}Ph{w~brn)iLWz4w+!h(-dtG2)c*@P(p2q!XpR_CgqSoIsL7Uce$_SHRHN
z2UV%rHT_#epLmAcAn}HT$t{noj-5m_Jv*q9Gu(HdX^MqgkVG~&!h5uwBykgxo5!55
z)nbeuM&P78Li}C`low|*06j+%nc5f(>A`oN9%zJaqkG)tUjN$s5Pp||S~lEhhj6Nv
zpYt5uW`42QG3}gBL^0Xypy?TnGki160kflR(<uQ1i9X)>SD$IW^oMt~N4~VN!XSb%
zf-1hwK?Dh;%EU|RU!0m<+>n50m4VhL<W1V_L~<g;8-RvT%po>ZDmGR?0yvvgEfE!w
zEhtFboTUt8KoDVp%Ea6+5~Nf(p;J4^0MsBVN3tD&k=3tMSq*AXsFn^pDFiHq0qQI4
zsr6ej-wBnW2zfF;j5$dru~;*NrK-(9=u(BF#-M{kD8;P02Jx55v{n1^S%I;OAf#Fb
zagy@HHcgJHI=N^i$nhrS;VDlM^UDQ8R;`>5iGG$Q&sN)^Ft4meML0Y8Z?Q*KkK<rx
zg)`Rc2<<Qo$v%9L2wQHUk~g)_{79{b-VcPVp=RQclJe|qub7t$8yIG`Vhsfqhb1YT
zQtLq+%Q%=zY=6Z5rtw;-&gyEc^%e(?t=ePCfaVqN+-^O7@4cVy@4e+bai<U1wukiS
zC*h4r4B5zlU3#{(mHH@ArwQ2@#*&Cj_x%k&-~hS3Hns(*9m!kZX`MeAfpNdp&ovwx
zt;~0d*^_Y|L!9%n)~;yRm?Qcv<7MBiUHBfo)W~rRJ`CuN^9VILOje87#_L>Q8m~>B
z_sHYktj-PN)mW>;ge?jwoshH1qRjir)`cT^lmls#Q^PJ;zvLwHfb3A!A#%Uj#;K3p
z2hTqDd^>sSO#9$nPbC#1s~83<5-k@vIMinKCN{#X3|Vn;p+ichUYbl=wJ^9G3J4wQ
zVQyU}nV3(U%7dszh)imgRRI$pD|A*OVpF#A$dDWRPq||vqX9HqC$X>cm>dq>ns7w_
zp-L!xx*5oYRZ=TdR`0e@IY5G9U7&6#6o$1?jwT3%suxM%0??r9P}yOAl*4mW+pNN}
zO16gH6#7PcB)G~&BLT;_q1ZO(t+nJ6_FJge?prEokV31kK7gFZJEfekxGz-Tcu%BW
zGyPzzwMhqpAWI6nhOMXwnb0B}>93~|F=KUTGl`L!&3#}C`+x|ocp%*9AehK`^}A4#
zL6ofamQZ{6ejGAZwiWXG6cO;aVyzIZfCB9TvaLz54pn%Ud@%H$6n%oUaXoT@hl^ig
zJS5RRuwozBDU`qY_WRmLKK57_>IpYT{5mECny{&2wLc@q6m6~c#rr21IAG`?0tJ!C
z3SPl|-4<i4cv_#EUpKJgbBiM2AoDf`KEQFNwZMQy00xe;zx~}kT*A6`9%EYD-3KkV
zc0tjL1<7QA4f-k4&1&%Inf{Q8Rw5yJk~Z5g87|7q*z+Gyt)N@ku;5v2U*jxBkH4E9
z48qyduiby6e=ZCimY-+xiFv}HY2nj+=xg~oxm{V0oA3KVf9>^m`V_l1AUMxvw<$RU
zmBXeYTBy*2vJ_w-l86mX$=I=3YQv`Dk@L`~L}^o9`Sj~tIe_<s%qgTP#R=+z!ZIK}
zAU%hx1{G?Hf)j(A)ER{6m~(ZWpaKPpN%GN8N^%d|0!Wk#7HTCF28WTMYEi8UVk2b-
z;4Q)cK!wUl)l<22NsS3*cBd#Mg*8+$kR1>&<qhgkVEY6JCWS9Zvxs+ArVdvi$spU#
zd9*64f}x^bGA}RrH&j6v<RI5Ce5NQkQtN_z`G8_u2DvZ+mLh4tb{IF-&t#;f99gwh
z$Z1wZq0%N22xWE2J%aD;7M0=l7pbXI1{)4jIxu=Y;yD}^O(2~EIHXjpY)dL}3JE9T
zXXTx#4I<)|C`M>~Rn|y86GYtyC%!LCLCE_k{RpZkNbVbMxVzu>i6_0Er+pp-W5iKm
z+Kd2>7#IJ^|IWj|ZpZ&22SDq@BdQdYr1+^;J}-Tz&&KN$EX1Ja_ms8^>F`)Qr@p_P
z(og<-CL&q7;`%1eRMu~@j>Dzhco$}!ART;S{6WVcDQ)O4pB#ooLofU{lfl$Z_NeLN
z3={XH6Uh?Ev*cSBX5ai{osM@He2DQE+r&C>r2YV>rP^1q5myY;n*2`7wBLTmef`D{
zJ)*>6gfc};7_#B!Yrt^Azr$KMjV^s6CZP$?Vd8rbxSH$dq<RB{!i*%5+E|(BopQ`l
zn8+Kv)fb0qFKocf8_S9Y!eAOhfJUfzP-qm!-H32Nu>m**!83_r?w^RNz?C)vSx-d3
zMC%Z1YK0}*KzNGbuTYdk3bI<J{3wOjwgO7e(SG9aEJJ16v@T5Mcg|P%%tp^;m8Qv8
z1>#CKuu>C!v%=Xx?t&tzqxd}KBrd(yCZ;CUB)u$12vB!QM68ij=|rBP<}!cHhnubZ
z?hx+^b6J@y2toyQ%)WdczM4XpAXd?ri&o+==<5n;qkZl*7!Ul4X%8T7IPj&4Vh~Ut
zKE2L9<RDje#jrQq-=?(@sfFU^NW#`cRI2B;Wpck2X-x%1@_Va-HLOl`_HearKY!hA
z?Gv9}59vY%wi#g{u8p{wR5YksZGt)J?<!n$#jOUVE&daqC&r@B;#uQf!t8MzJv|R%
zv`;LVaR3wKJVvz>mvtdw|1eiROE{k0H(+?OaaK1mXW==;Iay7^G>3@i7I{!MMtVkl
z6atYPC_6%0QO&lM_LCBpooV*BT}N#e<NLlkR-Af@A(B%jgK}Or<ZJ;to=*<0zv-0I
zMNg_~Ph-biGg*Xv{nPm`ZS8BVf9)IJY9~+K+HO1dRVfA{VFA?ISiO-cQ9Zy<o0~%-
zI*~)oVcrlcb_)^HrYi+R8?u2>q$GfMZDQoG<JMnoAaWPvtteq@kk~a8Cp~Y%8qX*2
zBnd&t2kHO{0+7TWAR4M8NCd-Y4&iL9OsuRL*oHyGN!X%oKj-xd5@yvxA?G0439Ox8
z7VGUbGT9Gsr4Qs#aubO@gs*9yQWp_+6nRNuRFNYW0FiVx`>WKW@HH0z`S6elv50>V
z3#eX9XDH;N^B}~wq=G7}>73UgeIS&+CElAA6fM0Awzrg|l?yv$8-}GxwAKtCl595=
z^-#5j`U)beRE^a(k#Q=B8uQX?N98-Ip|GKIHK`z@SSu01Qc!{e42vQBUbIwMoWs6b
z?1fvCPbtkiGETKww!&dB)+tmy9Z2}jZQ;i)`Rr%D_}zB$)S33k=buS9d0f8NfSVZx
z_JlS;B*wM}EaMm|IYdKlC*Au3V_;vq@mM1oslf0IE>s>+ZW{Va>L<Aaaa?VtIdx7s
z=C3*Q-h1x1^HWh1b=gho3g<B)C(W4HbNBp$?0H-%Fl!A6Mox_$=X5lhp5^F9gC{%U
zAF5q$DiKNdGhZzCQH@^5+Nu@d5M}Xs8o?sX49``Wjg5x#0w2?6d=BcDk1ll`TL0)h
zkN4NT>CXPh7oWHCAXUmL8k3;YsTi9wt1A<UP{_}!kw9qWd={T@clSitO$3fAoz<~X
zX@dF{p)(MLnsi;l!Y!Tfp*T7uix6lb#Rd_Cvz874J6DIG7s}aIg$ya&y(THKdPkr`
zt`L+nC<~!3K}nSDp>nE7K!nDjyYm21k#;DwtSB_m!&*zZU||bMjl*lK427a&!ltmW
z*IUn8sq7?R1bye}?feL#LxzB*EG1<se19YGXINVPkd&XD>KLI-DQR1;X;K0mVs|(?
z`=Z{x6+-S-fRr}D+*gHnNl?RXA{IWBN%fPeWo0%U)&^VGT+5b<pptqH(ye?pDAZE?
zS0<6+haz105YV#CO5x4g*O@EneS<!Rl!ldU%uu%9J+E<&WH?`!@49>h3Tr8JOF4cY
z`^>ZL<Ta=JGhhEUL1czu3BN-1slQL}4cG|W$<SMrCyYVlq%;)x+}MWM!~_ppkU6kB
z-@S)hkPYl7Z;g036<cOD8SZWSZC?c^jk!D%eaz;R7%JDJ+CUH=fBHGvm$pw;w<33`
zfq34=uZ%J^nwKC?Cf&oy%d3)8apFBsW;9N#pGRL4=dQ#G41QDy!|8bsjh=~b{<lrW
zfJF`)HjHWJ7%{#~Jdx4>au~n2I*%CZg}>kU{!jMnKKQW12mt%TvS9^?SRo1m2=XK)
z4Y^u5{2)a`pcSWVsbM_jBh(d&!3twp8W5QPuP_@nZHJN#4hknPt;8uoe@%NJPf&p2
zc_zT2T}Tes2Ew=}sR9mTS#3xl7b;<EB->I1!)ClD^4Ktz2*E>@m0E?ilfu>jX3ROH
zdg-vKNg=>}Z6Md@ARJP()>aIYVyh6M?N2o*sa8qtGeJATcw;RUMwEhS#V^QjvKd0K
zsQ`dJA4ELBoTMPs9VyFDl7bvURf{n(3|y6M7SMQIT;vd>GTX&uKjn9p_k@QxhtREl
zI|neUpCVmS;6gPg5!>p$_IhtMxAS-x^d7~#D`Ja7&C2SUR6O~LlxF1JIrmR}<DJhb
zBF?j9(M8PB{;0zc4kte3#esl_Mi!}MbzBFg_JKQ|Y`^%2cL2IF_Du0GVL)I+#*YCj
zg;gX@z`SYO6{~=IXrGuw>@t4me*<p^RWOY+<F$yQ{x1zVpt6wI8Bdw?2kJqEt=b<y
zbDj}K@*w8VYHqP4<|AH{(!MQ+&oBJG;2->_)!&B&868Rg4`hX8r2dQLs7BfMdm4N;
zRM^%ADT}!~t#}ADN$o5-t8I%mL1nA4Ii^;d9Gt0_zX!(N2P0P1u<dO_^QLKfZ?AsS
zo$dX1JSi1H$;5Hehx($8*P9rsKJj@100U7{HzM2tpw1PMCR9=ef?P;V!N03emOOTk
zCs&yI^o~#_2#|BdoL3V$N+ui;QrZCkNS4$U->cABs3OUhQj0dQdxUxr%3}Wx`6#qA
z5M2>dgd(9tMw`k%TV>)Pf+Eo0BqEzau%WO7DU<pW?Ha^f$WUz*<OszKYv+h2auv!C
zePKcjslYjJG!773liWlSLP;_}Tm9R@hdJhLHvu*2&0$7|@qGxQB8;%R4o@2?Y9?s$
z9Nr1o{)q2z5UL1gf<UE|3n+>y-2uuf*HUB?3Y64Lz5^?(!B+FEZrjgup_4<J4L)iW
zl?oWc-3|%kpc;pRddR_{Qu((l%th*M&EGVkbzzB9I1=I0`s@x7Tp#TnRy@;Ta2@a3
zh56p_q0h7%K6rM-qbimZ;2$xeV2&^`<HkP4E8V*ncP8XxA2v?<nE#L`^wK`?zU97V
zA>ty)Xb${*Mut<LwY{*}lpylCagAW~-Eg3Lj_qYz#+Yf>LV)9Ek#5L*Vjv9Y4wI~p
z?w=$^n-@Oy(Yh3@VIi}lim2)DWP-V2CyQTSfVAjwIWK;)$<Ws1q@~dohL(uE?U)^T
z#?tvveWs0{@#pDhzuit=bGqO0&@%$@0Bu(`24Fb+CsiYWlOVVw77nfWv`$i@P$4!w
zr~uv+eL4quXaY8cAl-)mhG8V1+?&9Mn{0rPKo06qQp<F5H&GN(if|{xwjj(yUY$Z`
z23}VCIVaI`OhqIJAF&!!)s+G%Rv~7k49_~(Xl12Q#EPn<?34kEDklpkSga7BT@}Yv
zWFu9M<YtqBJd{8wmODFuT%-d42)9C#ApR^?V2+w{3gveu`L>~zUWRO$4&VX@k6VO}
zDwEzTD!4@n3_=<Q7O8L!{pv6zA{&Rbt?bUwsTEWb>}?_JEShp5f>JMnu-0)TdpT_E
zVht+bCSWP_EHyHdG7(@ZZQL(b_#69HQqI=)IUk<z{)HMT1=8fzVefoEWi@gw=u(Qr
zatnWnkhKpAI83yob!-3m&G+`dy65vf9sH~Ebv!vShQ{wA3C7ncz9md0wi?4~Ujz0D
z>#VrdmZQ(W+oG7EUyLDj2W;p4eLhaAaue*##9^Op&GOPLJod^(IFH^_B(XItYr%hT
z1$CI$1h(9LP9JHlFUCdjzy{J0i!)jH_`9$-4A_HA?ZEwPjM?O9$~>Oj{+@-Sku;8B
zjv9{$SY={^!{GVsdU-NfR9xTxgN5pJn)KN|$Cx>FOr`Zlo_MBTeeJF7+!vm21|)|l
zL$z^O0mN@dKtv*-d=bpKxv~0G;i%;%sR2R0m^f`x7(na1wIc$WHp=GHx|AWF?j3^m
zJguN*B3nUe9-8#Vznkycprf!e2r3A#lI>MI68Bl%Q8-Wu+v>-K6SBkFAi`=)lTe3f
zQ|MM9ErKjUc1zpLxm``;k?odS91@_`EIrpmkk%ZdRalcJ5GatJ<ZnxpSQM2YjEaJZ
zmGd{5bH?>cN|@|{v4+|WHO~2^Ao(PGS?NT6B>fHwsmMFjAd%Nx?85^<_+O~lM|`(&
zfJyx(1rP@vgl%<5SlWLwVYlD%{a`L_B3bzz*F9AHl>>-(NIpoy7s{mGeIGO(GB>GA
z;dGK~_@AR0+hj}bU!iXEy*`BB$p4mpx8m@k9AX|MV(*|bz1;M3U-))EdF`$3{1abm
zBuK=Us{AAj4m``;r4Lx)OT?{&KM+=otrdUbZesHk?||_=-;0Mth<IPRvCrBjtC(PQ
z>#4mw#yr!k%LK-^^t(ly3HHuD%LcFOmN-D21J{H1b<u_S{m9XqoC@|Z<XEBo#>!3t
zXFxmVEHg*QQmDsq+{B&7rWq%L?<c6~XMg(`Ys=&AlSSzoQ(ctZWOB|z9#hI)ICk7+
zzR8x!0rmL<pIx<AUUM6i9T1^7m3u==%HE*}fWg8E|HxUB(&9}`<Z+!gN90g}ROkd<
z2*BDWUWQC{a>of<q$WsZkc=Rs2uC@j2&E?o!8$7)1ZjqD2}Dj3w}NQpGDrbJq9R`=
z111kv<x+TO39tvqkbFboN<b$96zxD2JJkAGWu-caf`mlk3COW_HODNgA+4D(=ebfv
zb};~y7ZI7(NCcH%7sNNzACevTO3Vdh5cU?~ZVIt4=||2*O;xrYXI7J_#>QHZM8u)O
zBymt5of~GgT57w9@m7A~JW9VyR3EK0IaDtn<(f-P^uZ|Q$m(6E+GyhDlnyBAl_)J8
z7PT)RUwDPNDZ&7iQ~S;qWKecAfraAjchP>u_kpT2>~6cx2)fkRdI0dDEe>O8y>tln
z7(aaPm)dLo;P&?2?{4;CmiB$d9sPM=z#P|(`!T48YRE1p&t#k_kd!fN#J0>i(){+}
zWb2c*XW|Ygl<m@i?HKrk1ZQlmALi@kAz6jZW1Wg&;ssu}OwzH&oR8++Y%%n)C|CA4
z5(m^$1F~6K01QkHm{z9rF)VIc$QN`{tm1L^G8}AHUhda;?L}&s3z^$YZIuPgixCTu
z`;CsZ6!}Cn8LNkvNb`KYJ#}&BQ(tJme8b%aUXdZ3CJ|0#K8vdhHzos15IljDLm4D`
z)307I=;5mmvhsBvo3BG82!lij37aY_<N{ozj6tarn1Of>)rbUih4(TEWlmQjC!ruf
zX^?#gC{zbcJ5c}tAOJ~3K~#}ME}c7OasyBg#bRYJcEJM_MTD-Xq6CPtlGZtz1Vq~n
z3Pr61m1;({PYR=mZ>|8fk5~z2s5a-yZJf^su(!$;N{UkwX1<fuyzps<+fWSQ95^J~
zBeWPq$Oix&dWzB(<8Y|2=AhX}yuKT}dkV!noVdF#@+OjR(#$jnlR6d|VJ-Du``xAr
zsj+L!&O3E+LlB-I(GkwIoz7z&sv4ISWTt>*@~U@AHZHk`Qh-Bc+gM@cdq{tl!WZu|
zRbvxDDs)t3b<i6Ky${BRvIqAAD3E&RH~rN6Ki%H;mk$$n3cgkB9LYn)#0dro;~WMa
zF&U&r&jW0R`%_;WdBWRSKa=(v+94Lt@xG(&-t$=eceI)MBGk|LL)-g2@!0l^CyE*h
zyf5}mcAMI0$5A9~`GE#EfgO5Z_)iaKrdDA>F}q#}&0d009E*z}vO4NvdmUk%$jni~
zyxD0nd^<t8WiPWXeQU98{XDmp`i+TZrz-a)`{g;|vuGyYH?aj(O#gi7&d2(1yzPE%
z#;o>Y!hR4shK(3bN=e=8LNahFcW#^27ONvx;S$*i^(<6^s>TJV2|TS9Dr^f?(&1;5
z4XIA+023=Dhv-)!F#$v*uUlaufz_Be7ZXVkzpd<I05VBpE|IHUK>$VA!rt3X@Nx*w
z>Y7wOsJ1Dj2gM5cU{Fb|tk~|(eRMK^kPed?hsCX;X-!E;u%;<A8)SQhoH{8!%sa#(
zA`z)_$XMCG7~W4s8!=aqeWp1$Cyhkb1i=KdNf}~J9V@S`rf$n&#mb`mC+sN#g38o&
zGl_;G=#&GeM1;M=_9!|k#Ki>6KHY})8DeFqU*r?M%ya~;bCAe*4r>!cOg<?h27g~=
zmCXmFh%B(L8alOt=lhVJ5pA!nWa}VAAD^tZ2srjG7uqx(XsNcJd-6gq^~0ZgdV&SU
zFYf(80I~p)@p$r+P;<m1<EC#iw&ciE0z2PRuyC(B2y&Fs*uMk*J?DG@IdFUDY^==$
z0A@0%599QldY)VS5kodFcp);($rVv-;1-&9>&MP9qKXSHs+S~;-Pn5?n9a~C>C-$N
zy4*ups<U;ryl3#7_GqX!Tx%MPZArHo7JM-Bz|_lN;B0tqkMYyX(a_j9KfcfT_hQE^
z?aCRtoLwDV7~lu*c(niK+aE}qFe^}*$n7wNLN5-95p<w3Xd}xTut}Dm?}q}H9SMPI
zm5Lw|ux&aO66RM?6;aqG6iS4cVm#+bB334RCT{=(gd7RviClv8xG(|zDLg}>3xy$+
zs+CD`0%fU|B*U)!OW`$;MJp!T1nSIXGZ`gOfGW7!WHJU7DpgD_0ccAQ_&69WaToyU
zN6|wH`=+od)Yn7~mR9jJeufK^3K(<Q>a+9Zc`C0~$l&X16CCFDNdb$4kO19eMfO_R
z-brZ;z+d^0k#Y`osNnNR>KFN9!Gy_(3$5gvIbRRNM+)lN@4D6MSob(gnYb&b7Vq_W
z*gAZd1w{<SGPLf)#YS^XkqC@|MH_0PC~6LiyFIN76>0Ai+QVG2U5nHB?(l%@{lWW>
z3AyZt!(kB4KfUwG_S)<2=!Vw>WC_%c!Aap@Pfg6QwauQH2^S^k1&|6vYQ+A6lSx_u
z%V7UdtT3iD-^?Xu?Tm9B@HSz59_M&{w9z=OG-sJ*YVTnV7TSh;!dfJH)gIHiU1)95
zht3CWEg30Egu?*KbGhT>54>iztc}lC2P+FQGq~L-SqN=t5pw$z$IRo|`Oc`yVO@vW
z^<Kxv7a<Y9Xe*D^aeiDIY?a0_b*kv+Z$AF{{-18Trw15NJxEn$0RT%B7eI}ehRi~7
zT3Kz0#AjFS?Z7kuYi$*Tc}q?LC($&BxLOT4I;$-}&!K7N3<?|*;RAR{(Q|l(o3(S*
zNCtA)Wz6}pZ5Yy};wd|U@G?9dBt>Do0LlQqb%d>gtRjSpb}KN=$fiTpL0+vYX)XY*
zq-2D$B;P_IORVY2xnooZHTM8+tEN_15Q+@D(<hw}zv&5JP4Y#w!so&lYelAWQ9<V8
zFq70S9|CGxfDTfL6wlt1{LUfgkK|Hnv#Zl>e=77OFNb(Pj_|y~unOCTk_+;T_dKTu
zSbfr5lcMOgXWpQ4C_!$Ow?_5M1kK9q?nhyJkZ>MG4soydx#%xQbCaD(uB8sgI%r>_
z5{x1Z5pb#QCTv)jqJmD8*sb=l&wgpse&x+~xA)v~Xha|`Rb{8#v;!3=J|G@yaW9Sn
zcLoG2L+MjdC;c7D+HNc(zt}$xw)aB!*ffA!qOit7JJva6At;GLl~e2+A63Fa%tAy{
z-{2hP1;svzrSGv<YRg<BeirV;7q~#lNH79FFJ^5+I~Z7TygiGR`@z76#Tbc=)yR4K
z69aJ(JmcCo$LBluGyHMx{+-u2F-X^y56{}p>LV_uHM756`2EfYzt~@Q!(AdNNwHFh
zt_g^!kV&yq2#YEKh!KD^DFD08SIPsF8*aP|@j7&4P;v+`w=ETqWG1N<&b=|nK}|`-
z)s?e6Z5zxsE)D@9pwcG*2Y69^q^jqfEGrvSuw0eru<_9<gEos=DiA@{gYt+_6vI-{
zM;aSRG=Nzuqlq2YTErJbFOwmtS5lZ<#6$a=sBJ+=$J{rmf?A(KMAs%DEZSiK2gcJ$
zB3-ya^~<@f&fhbUbs-PP$2tx>AkInY6p;t%3$=^NaV4d;A5=!$4dfyYbtqa8`IDk7
zLJHr-A;BpOAnzvQN!j!JXmTC)SJ*VjY>@cm6LFA%`W+-Iy{q<NEBbyXSRj)2tB4ZB
z+CVu@?}!v)tG*<#BEL)etq(l%t+n3^ujRIV^!{Z(dFpguKK&f<lzV#f2SxeXC&pAj
zU?h$Nqlz|`?{YuGkH;r0tJgf_hH>;feq!ES!D{uhiTENrff@AttPnFptzkOz4DllT
zI-TRF$_;B_^xwlXhH;j8aeeB*qf4*pVjNIz<hY-mDQ5TXBPorY4-?rrQW?lz19+$}
zG|uWo9(m*9mG;W2j|BKQJLPM60kA;(pHHiI%$kf2#4*OWIj={a_*%RA+B5CkQ{U0a
zH0RxH@}{MeagaZ6PE-^~deSxJ>}18y0JjBkH1Rn~fPl>~f%8`C9+T{uPbdXoMG!%_
zh)RwK<pp45HDn6^Np+*jl{RgKDv{r3RR!u=0GG)VRL8J02yp=75JFEO_^pXbs1i~r
zHc9a``HMB&g{FciE=lB|vO$%yg5+=($%HDLL3FL6Ay=*X2*zuoK%&IMfE1gYFDa6|
z^Tm~O3r${wKs&U`!^<JpaOE7vSO*pbF#pP`CX{dx7w40Oa>N`x+r6euNU4rBq3=o=
z+vvSyz8ncZbID9LS^Pnww#kGwd<O3aNj<~8zRw519P-Y4$q-49BHgsdSWU)(0)A8H
zoQc2HLLNTkw=0lH9w_At<&Y|+*2OS7=;Gj@{cJ~qgX}R!^=RGNufOfSe$$5@B>wGo
z@C>uq*Z1Q?A|n|K|Bm=I4Otd-Za1EMpRpErHX)^ZIYIQZhhz?+Oe$p2H<d+w*72FG
zTgN5T-i?8MfMsTtZnRq_gqRc5nHEYU@jBZx|DJOrp}=|!y1tkhxwkT~eT&fCcl@6Q
z&4qHe$2*GFa*y+AZ1p~HUUz0k;OBL2#USaqFksJZPVG{icjCa{ls)x<{^Le;fTv`z
zJZ7Dac&V(D+V1_iZ*SVkQ)k+(4?gX1gUD5YP7Vtl;Yay(E2|C))qt!a?4+t$hF6@x
z?+}{7I>=5wp)+iiRHPt$tJpwUowt?xkgEN5ASv|)AfH1=20_h1DhZ1Q{4dp?6b1@_
z6*z4==N{n7;t3|v3sj{BKuHYc35s3<u(gSpl*5&6qFkjN`6vY$2qOjo)qJEz#GI|L
z>_`pO)wO{*S8+nQiUWhkl|WIsc12ZmIsnw8<yPce;lfbg!vB^*_DzUQ%);L@$Xj7{
z(SkztMZtAwc`_cU>YGlxDm*Ra%_#^-uW;Vv+95&Ojf7D-hayqP;e;CQ6alYe_-e`r
zg}NL5PZAvWk@T=4`LMo&@INSANtM@u4@xXjM-q`oJ}B}xp~Q>KBV_CYoDUEn=Xy7=
z7iP5>J|LCe2U8#9d}v}3(3!JOx0Bc2+LllMZNWco@D=1cfH48Vgd~hO$9n*Z1K}F)
zCC*PiBQ_<WB*R+5LA5sGHOCcmE|OMOyVRy|F_R6DqnUC>Y|i%VgJ@L}7d;o+d)HYe
zpJ|L3Y3|FPwV~}+?=SOM(9j;RjafR<WGkDbkxlr@far*&PjVU#+5{~YWMa8$e6+9A
zz{DU`x|Q<`&GYY;7Rvc^SU4>7H0BN)YtFSDU87Cv-@Z@OusU9K!rkAm|D(J6dvAXt
zg$|C=X75mua>Z7tS|j;DXhiDVYU>SLc{Ct7P<H}2py)7^WF<*J=*`_HYXd;4kPLuO
zhz}t!0Tse93iE9ZdI<G6XAcUCKp9GbNQT2#3Q31;a>xus!wO~0#i4G5ZK<F@fwVG1
zVn~(7q>lNO4xd{&RW29~1PZx{oSB4j4G&kY;MLl!P>~Ep%xMH$sfH%#ApKf@w@=V6
z1uJbvL^-Y$4ka;Pk@Rg85?1k#$cyvsXs@_mN~=hZ!~YD^hT>-uw;_RYKC0Bl4d(8(
zbp9HY^<<kkWI*}VAqelO#_PPkybn0+dkCLXm|X8O(jcHzQh`(DwNx{ZI;@`ve^Oqz
zBA=BQLdi|xXDM+(&X@3g5$EXN2TbM7>YaDRZ&Iie;mwM3ym#6|<9!#=ZSD8o`(XRS
z|MBUn%yew<2}c5x^5+Eu1-~Ok1eO$np=Zlyx;J5vk!+4XW(6h(RUF|p;qwLDGAF5X
zN(xvWQv$?npYpTE9>DqW`S@pFo9KC;LdT!b%_;}5Ws^;tjL=gXac^lu-=hbc_=cA4
z1kzNDIX7hejKb$YvRW%`&{5-aIu6I_aZksQPdV@(+R=-QrLn{NuSwg-I8brW!8W#O
zagdqa=1%9?&DLPoR=IZLpFh~I|G-1890Ry{^QV%P)Ey}iR(p^%FTg<s>Dpi=m1pgZ
z`cR;PipKy75JYak&Udo15+uzzJSk5J;W?22hgLxxr7%JHaRNRFUr|+#08)t{h)8Zh
zZv3p3g`!f3cy5%t$f68|yu*f4V@%)~8YQ7hIe{RORzF<C5Ne@|DO>?71!fHru`+3*
z0^&7jP>1tjBMu5wgOW-jg*89VTsx8rhdHg>IUHxD=?LvuCAD(pTt}~mLb_`!Oq%x^
zIj;0w+cyzCzXw+Oq-M#7sIF#(D%Q}2A2}~k@3;<fp<3}>Lh+H5ONUDthE4BKgjHj%
zI$Xt}FCPLqHk0Qd+c^i11vgZ>hXYfPKOcPjTzSva0S?gylVTqv(tGZ`QYj5OFf8rc
z^i{qu%yZWGb@15qGv}UeCr_PeUs!#!rCohWBqn$;!Km~jxXXCzpMrqwXTlHmjj0GT
z8rL|NV=yaU8}BP^&+g4Up$atV-q9Ab`AzV8X1~2-o!M&7-*rrtGjU9N?Y;XKL~nP2
z_HFpA44{x97^S&W_mBHLfViP?Iq=)iBo?&oAKMUaeL*s&zKVhKu!?gHPM8N<P9gPV
zP{wbYz^;4Qf79TGdBDBLkUX66&IiBPUVHsr?fi0s6ZS@@SE~vJF^7(}JrO~M0=22;
zTt1$P(<aExF%d?G0EZL*GDxY_2lnL<lgG{k^^`m>HDEWFWvEClJ`rFA0a=AY*1S;@
zTzQ&D80!c?q&%SLPwG~L`w)taeiUMbD#tKekiVoxPVNmbgi7XTa)^}SF{y$Kv8}fx
zxG7=Yc~(If0h&vLrjydkTttRKDRqd8M6u>HCIwR=NZgNu3fG+kqqa{{lodadXDg#t
zhLsZr<=OdPO@zw6NX0JRE2}|NU7c%&6aZcm`NSbjM7fFlNWEWfbRbdRp<00;DfDXv
zR)-oBF63#h@ZPViRP!+6bs!lv$&SO5RB5a+`$w^h-@mM;`JfZ;zV-wXSQpSZvcPCW
zR_#>4vL=DGf_WbHa!A+Y`f%0SBVXLK*Z<Mo{mp;zP!7w@_VM}NK4O^gqIY5r5ISzp
z#Gyd&F}On#Qt+>FFgd7H#!tK^P9+k-e~0<UwaM69nv};o;{~lg30t?ZgUk(jpG5F#
zAA4;$tO58#ZDV}q*mb$^^(v{MtgNL;q`&74@0#$VqjHyxv;T)SnW$Q6JdJ~tZw%@q
z7BCUefrRbo78g7_fS;Y(<AM|A1+Vu{Y)}?A?%^q9s{V0aJ-30ehEaO!y+8M@O?&0F
zXZl~=|7C!<!!C!~_`S&<YSY{ikhsQBQUE*w5a5{;m^V@nbEp<Tjm?#t<xy%M#Su`t
zNJP_Dv;-hnO&Jx4wXYdeO>R}(0gw<W1vt1W5Md~dE%N;c%qAD1wB)d#=gBap3M*E~
zg9161IwF-2N$xRr&E3kaz)Z>^D-2s&XQ@vLqh)ne1tm~HXG*P<82LuJ-<8mn&<DYQ
zGHn%-DxnElDuM}8iM2R{>XMWq96*j>Gpos2!Li~QiXezg5U~j5CAAEpXNC7NspBCc
zD{J9TSuGPO1_9Pw;~x10NSFv>sV)s=5%05nnksmFzA7Xu);I16)r`bg1a%|3$tMs!
z2;!Saazr1N8~K$EkCn_~oI~M-R8#vQ(<z*jswf2a6dw$WO=CQ7|Lf27*Is{Td-l2K
z6@|(Sh*7tKd6o?J<I4*Wi<&!@RGNyNjkjba$+$D}hAC$L|CGIboK@v@HoVV2@cShO
zp7;0D=6y}0k0$xWs70TdbZAAeO*A&CfixeGn5WV{QF;1w5N!>Lwtl8!{9uSEh(_@P
z)QAF#GBlMrqfsylh5<A(GipAxIcFMe(x}nooVDIR&R*-f*1hk8@0<28GiUF8f2@1$
zeO>pp*4j#PF3%u`k=9>Tl?!9-rgTP=R)|@!Nw@yv_!CSH!(s}Q#ea?5fzZ3M9@Iu;
z%vBEJ9Hw(kk&>J^U|u{X8E~$gf#L@wBaPW-7Ah=QG%Pz>Zmhfj8pfA%dUon?Eje99
zwdC=HnT5rwT<7ic%?K)&m56!4Dr0v8@p{<lJVYL0a=nPIerTU8yMM3e-31V6VE2jq
z5`?KnlZR+f*(fB6T)%cuK|F`eLs@NCb&zL9%8&y&hgpTdFCmOXXhOws2u+%j#;T5~
z0U!weX_)fa2Jir^94tXLkpqMx0qp2q?I57y{4UrEiSr(|o3IL9fU+wlO}-w=Od!HW
zs0nO2Ck`qe6$2PKvA!wn<*Ki#YEJr6<tT0@7^p)?kk*yeFZVkl;jZ?Yis@twN*uzn
zHg|#joJ@GT>KhhTXKW2fy<w%)`b^i6$HRpUUc?c|Bz!-rhDI8At!QoCx04FaW*j3z
z|K_hCe8Epaz$yh<zPYnVfGKipPbWPfM(}-Bl7-sE+_}hu3r2!+#~V<O2-x+M!qAL%
z<FLJ@J$TxHZ5UaJB&8kE3y@axXKYS<vxD>z+sv>^NcX_AFTEw_-0*}vwdXZMOIAf3
zI~bp;q$7ioWgFlc2?hpokjE8}&V+1KKh$0Zdvl~EA#?$|#eg{Q4UOm6(9`Y%zmTNA
zlsEYB6K(<9dvn0wgb4b&1SV;Oi;rUx-8mFG2zG(_L@Q$^PLj;q6g`^=8;)(7Vdh{j
zN#n`DGlt8nfp83%2DZ)`gBO;sJrEHL<T5=sGU$rYlEr5`(7colpN`SSnYNY58Ia(>
z$&F(U!;X^@^Sq5Q-u*v$L;DBn^6dDV2r-cY#1C!`S&R{oIKc^OO$1ehjO+o(IaEoW
zixGi@X!!V=k@TP#qU{QxjSmlOgkGR<KoK*tf$*L^m|I@Z!Bu>mv*c=E(+C->a416X
za1)0lN#WrzA@c1=1%QIeIYc1duArD5picN&k&<KNmBxcP2U{TY#VQZNt)#>x%58Y<
z2?M>UDGgc&4?UJ-#ekF4L4?IXOn8n#*_(iExVV7Vii<d?SSVH~`@FFM@H{i}6{y+t
zJCRD{d?w_|2_QBPC`f_*U5%#eOzHIEmWj5n^(YYxY;+{p(}^6-8Eawpc2w4VO)1pP
z;a-s9s2*E56n#l(n^jCwykdCTLf8{@Kl!{;Rj-BWX(D1smB4uT9D9~|-lY3)i=G2*
zkXnvVP*j6_#_vyTs-Ohgv+C-#KhkUN-5H<X37j~_9Z(pE=n=6KOdzKSS?4Jxf@m3Z
zBzVX~OyY6I&;(EEd+IOZZXi=`6YkaeC9F)yR@W3JOoxsKGHI$<g1x~;WYelW(SK@}
zWQ>~r-Tg!JVq(GApZJJ~7Fe5VgVb`)U~c5x0>(+i$@8p?Eu$^kIY_*mjcbaWSxiDV
z`5PcAiu7-JEWI9c2#y|%9s8)5E^#dCAlV{RY|V@3mcq|0nazC9vGVE~s9t;TPF=b2
z1qaPac-7T1<V_i=^00@Is0ok|2A&Wq^Y9eyu1Q%lg2qJxVYhB7OXcB?>Ncnun1`u8
zT=9soRm($;7Gh&nCgi9Ef?=c+Dir4(`S=>7Fwl;llobGS63z>GbskD%;wK?o&0#C+
zlT}tG1-vF)Xu`?u9O8`OHINm~NAmTx5Tp??Rze#fnaF{vDwnKShCDGo=BlERV~{lv
zHXb9?<I%*AoERFRCgsM7l@mHkAE2;o6Mdl#3eh>aG4jRg9;GG_;qm)ng7On>&Zg43
zZ$z7Vs6Jg=zDFBSLC0x~AcZKv@MnV)zo=BQ8fbP6`EE{(NI~^=bOn)!t8E^jo(J;o
z1fA?-_XeqQ*qB&I7-Pp~49|dIck(wTdY01Q^YVLw?^6jI1Z?z3<!`if{SSUFiw1_J
z`JZnIKj#?<3|@HSU%|5jlY<PdCBM^oj*n%ZE(9@PdHc!Vj97w>Kt_a_jrE|8S2Xp2
zi-gCi{1|W>Qzopg90y(p$W-NivbMB;s~8;qHEt9*QhIGz3!~;;IRx1#j+5t1%+ejF
zuy#{N2~E)j8P=IwWHJ&Dx;i;-yE?H{GVNmcuGiCTk})<jbslX>e(ic*knBQauIo0(
zu%tLSnMYMsOpJbj@U$C_`lHn;kG=TQ|CIjab$NRKuY<y60F4|byix(GMa%P8I5#Qe
zoO!r{6Zuh17sAH&5N6;a70yGFzSC}lNcoN%6?Cp%QFsgw|F&O0MgW|KSh*hnPYa5U
z{~jt!sn7u-*-+d765xagiUWmSn*g~~ZJ=TTsuCm+W)*89QDjVQu<#g>)G@NJgA&=(
zl{_NXZqo(`CbbvBSt!(@uq$mCoMboKu!;9$?QvMm`i6gc2-6hlChWqBt*c_LP=UCO
zg>yi7W8niStM=2$6*fF!os0xQVe^!Lu&(Yqk?46bOB3W0_YUmLp;h(=wrx<ZjbNIO
z8ws;}x(T~Faj|)lD(`6oL?lB2gx!l1@EIRxGu}U}5IbphB^;YF-#C(z=4338_BPE6
zYC8&kC|Y3zwn>COZa6|NA1R@<<_K|ze8%#bwBv<e>7s$hrM~Oud2DoC089|Lq|bKg
zcFb_p=>TI26E|U;sA3G0O-YZZxER68#{;ZW9@GJO03eS94-$I(D78WKC-8-Ugf=QB
zrJ*kx4^v^4<hVg@o*TF^n1&{EcDwpNm9b~mIQCcJ10`oG++e9uvWih^b8Fn2hIvwD
zsnWK%p#wV?YQD=v(=k;@Sf+pau#n~kPo>Ua%P#Xs`;BC>s&vNlX`v)`#txG>vcP;i
z-o(ND%#1DL_oAwD-Mu^YU+&nY`y0RaFc#<4aJUI-2IuP_!I;$t23%L?ngkl8U?KOW
zEexvTOjaDk0kp{fB0>hD5>%0(I5=og_|-v+)Q%>IsgW6grGZmav=Ax+0gmA@CXa2h
zLpvxYK3^Lz+n4}~l}ry?lVX92OCr^-+#;mNL;@-%hZQ+wAIPe!Ucon9eWJv5Ut4S{
zn4EK^B3J%~A_P~=TF4o6)e*`5zBx(f(nMGon}Vn!d)Uo<!vWlUmBP#vCJf=*M3Hp6
zA#AECxgfHmfq)Px;bi`pABhc$5jZZIaAIww%<l(M`J4oUG}-qd=abgOHz&4f31p9o
zQf!mxeoBg&D`i}~LTarmh(yk413(q92x0rivz_=Ba%g?-6ndqNVelg;&nUow;wx?k
zR-ZlZ)qNP7j(tD>om{y3X}R^GJq!vJ!eq~DJh$`U9zUd@WiSv}5O69LavZioI#NdT
z=q7~Z)TMM@S@IKxljS71maYfPVO&lKfx8u~#;hWagE$E>4(cjdCq6%_mXWiBpMifR
zVwzO?^55tx*d%+cXb~4p;{bBTj(>;qFhL$p_*Q%kQ)i|rRCXxIcvLFqg~?VX9}Py+
z&&-{i8XSujivF$~Bj;vYh6Sgefsr}qhs`VVOGmEUO4&y;rgTktj`rQF%{Qfgd0p0R
zd&PJ9QJFL1KzTAy4jj-ur^|?vD`W`u0&pzci}0cE(uw%l!xe=Ptfm1VIJAR2!4@8}
zrVP2tD0qkyspMRyP*A}jZ=?_^1E~frS7$)7m>58zsTOi@MQa-%I^hJ?=i)%->Y511
zV4Fga2p@SU+m)}7!-%zXWyq8*R!}H6(@1NhLIR?iLjL0+E+SnaAB#XYgzhGg$H*xH
zu{eOjYfdgpwKjy-cq4*B3MK%kKt?{8+1zbSD$O|7h{EJ;|J#)~4=J{Mj$xDJWQdE9
zqB4s6ta@$8pX87vku%P(#D+!!VdHr^@gW7&{1x|XNphG>!5?Foxk-N2jQ4CL-kkqQ
zxxPlEiA-~W6GG>4(*&Z%o6{BwOK7v@>q7S*r+_$7r)UCF5=teyv_F(aguiezV&wn;
zAOJ~3K~%>k+H&o^&*^2iKP|s&8INFMP$dZdJSXyW06`-_ZU(P_2ZSXliAzP8KzzKP
zDvshq<76=?Gu9k2jp|`k@Pyh)#}mWatSx168@Ng=g6)v@7jd?Vy9fGo7nK5kO1M;F
z8|MqQHsBdKpC~Ge!HeuRC5Q08-^0;zi$Mg4&k2i>nN;erbZz-{?zkB%EI>JCoE~KB
ziZQk8-&lak_z%3Wu`LA=R5)4n{E8!m8<1^8YZl06vX(fx^WEmBej*D8>iX1=e~s!g
zd!P~E$ErC~cIbgmN?N+(<$Ni7kkd|F00`o$gp(X24zBW~L;~PqVCc%40rCWqK_>%H
zPDY8SaYzUu)pp49;lhU)@`im_eG4Hpgs|MsmMHJ}aHNE|QrNUSBoLh#*0wbvuyr-W
z<_e_&N%UN#0yWcYZa_aq$DBBka>G@gSVP#IR8&+RGbtej6tAgB!rB!6b09V)HdO{4
ztSQvn0Ab(|Eay-KkoV9c>_@qKA>_&-!7=t#Q*+C8@*G&(1ci_(HVYmKcEy!89(FG_
z;s$Co^`~+!o^#rOAM&Ot<eoOM$unX{d5+;aN?C|SSFYZbDm<+flXiqf+sgMyrI>}t
zH7nAbD!})>lVo1Iuz6z=CVo#kaSzWw@#{wE{`ULW)jWjj0|CTFPsSQ;y=UkZJ@1Cc
zweich7|$XC<bD?ikBGAs;e^mSey4OKC~~~{CwL0u%aNq?JEA99Y-E*BD$Qhso&?9z
zab%ROiak?1R*%s*cs`LwIF44t9I%i7Py8YOu^;JLvhAo(e8KbMYt`B<Qepv#mM-gN
z91(7k7bUe2iC4sNG7IC2eSn3k7*&*v9)FT?a`VvSXKqYxtoXC)^l|Zd?#aTT+vudU
zYhgLJLbfrE$llFm$(D&^4Q~z(CE6C1E7$x`m#lnJM}GDW!W;g8#e*>r4O0R<L=;pa
zkQob^W(XMNXCcHl0p-f8`xsz}tRaaX`7i)pQlK2XD7;7{&<RZ-kCdctz{)#z0;Eyu
z)5CtGK!(I@BQUN6v<PImNF&WFV*-Xk6C{|o9MCy|-V_QSH;1Vybn3ur{gvZ|qGWa=
zdr)``6{P@cgx<t$3uTxHun`m{24*8yX+V-j$={$LiW3gxvq2pO5pH9xDYS;1KvHcy
zYzuPFY9T9`2wf66HbT<m5Ff&mP?o8HqV!F^PeK931bjB+48lje52Oo#z;Ngi#0R!E
zk_crgD$GHlrA>l812_*93S(3nIY$@I82BLWZzzc<l88B*l)FkQGe;g+v8PQ7?o}qX
zzE-%-#%cFL3>mvZ?9UY@!%$7fCff3EyZ=KL4%B7O*e{bvR`NWLIF%(ij4v!&5CEZ%
z^td5%1w$CNB2-l1y)xeLcY<A+xiNnLeE~KSVLhOFnX^k|96pA?G%zmw%@}TzXIuEe
zbP8to+&ChU#qZIc)Kq5P5)P#H<PbL6>zw1SSE0kz1tDiN)4>LOE*Z4SG}&nrN07?#
ziUP$BQ}&xWC_8WNy3CxycwG7<Cr`;N&ov>CWS8JdVYiU^1ZT#Ok_D7-f^h5UxN`l3
z`6O##ZM^<p@5uQ#{y?v|^BMi|tM4RLt8D^i%I`6vW)I_pa2a642X`C!coPH!A>?I$
zo6><WUwjB7JRCwQ)~=CD+qDxRu@D;PU~z)GgQu${Tx8M$8E|EjNf1=Fm_r6)5t8Mh
zmbgth=MLf0YSBi_p(NGClpI#gpo%#uiGWRDN`xwq<~Sc$W0}lw&YqJ4YLit#C%^z}
zS8QD|_Bl{klgCKvE>ut>I!+RyYC2)2>SO|SR;H5ihe}yiFA<6~;s>Q0W5mWL<PJ7D
zw-73m=li*hIRDW$OdPJHHDm?dHx5v)aF5bCbia<%xLL(=_0?3-27Hv;H9rY`xhh8+
zA6DxdME;E=He+rnR5kHA@rK5IhwgcV{An{te&L%2dTt;+K;rYm$RYUvE6^0Nz<A5?
zKe6u(J?A@*%cDD9Ax;qSpz=JAxK@3>+wu1xLg8G(galJqU10Fbv?pELitu`XaYpEO
zPLVL6F7sd#2LhKTd=(5lu$?e&Z#Un6zOUFX*@=u(6^gp7M>3{dpG5Mq{d+M6HPL<2
z;j}owxI^gDVQwIT1&T&whOZU!<kzOo6I?7#J`ma}w?FV=g?_z<<l3tJ!oqgzCpZEc
zPkw^TW=Jk9D70#(4r($qToZSFqOZL6Ydz<N$L0F(?UB(&D<&-4PSzf390qEV!V#1x
z4sV(w5y6c^R~!a0P-PI}(6K*cvE%n#9~57(+L(kEn=L0IG3lD-;GrQ?XWBj<R!KZG
zHW5jLhm=VT8V}<k@<gE^BLSlgwj~njJ-iDt9Yb{v{6x?ii7LVKViHRszOew14ssRc
zl9iY-wlAx(6Cg4iW_0x^38fl24XPgimK0LkgdkKG!>(;2daUM2AT%M*t`a_Md5)&%
zTpEcqQs$}~?39G#{T%lrvzM#3QANXM1NRP!c;J)X7yQpvLF65>nki1A%+9#4L7q5#
z8LL?BnLxzf6f!4(wAmxY)rb-Dc0q<Ya^M>=Qsg<84r(UC*;M%&ice_sf`X$&5e&}(
zC-LO}4cIQ-u!On0k0Sao)@;kOqrcIAyzxo7`};2@&wnNOpl5Rx6Y}_)5mg*`;>JDz
zw&M|NOaYt1z$)Z{@hwqWd<+49`5GRlM%69iT?M=n!j>NMarnFv)|rAJsVH5>k)Jy=
zfQp#IDqNm~*^dm4cOk3Yge{5VuJk3^A$k~YSQJ`??vr&#vx|IuViT+yFGqY1XyC2}
zNDS-8r80JREDS)>zR7x(W4Spe;|ydsj-T2H$ILdut%Uw~OlFM43A#8^c_|q@c2FI^
zjqXQd|Dg+))%C^=FUX7k{(C2M_E1DFOAMhH0F5%xG?2jT3D+QMl#p*l0!;QuIcnIB
zzwLnQ>YxFZsfmpU<{qLom4SiG!G%Ep06}?6l^i96xEyR{cy*uDibD1_G2Y>g>*SOZ
zj?;suPSM(=$$IEVr_0wax<~dJ5o@;P{@I6Vt*A*+t7)xP)1s(pF?ou7qGyf{Jo+ky
z*NEgb+p_P;r{tl%Zy|(kAm*eD0E|2=*xHpOBl8?abvtA2IdqG>BMHh}tU^Ud*ehTS
ztQ+hX)(40alQ<CZPyi6rq!7M$f`$rG5N*oooB)}EYQ%YDq|A}3nkb8upNYIvC_5lg
zq0*I=RU-4Q5?grK?wg9L9>bD$-v#?ye?~&={wmi1YYnxIH(XBsZLW#pW%qfSBkA*I
zg598T(%A7_Y595w)sq!^SB))#(AF{7T7xZJrDLVIMSf2?s<zQGrPMYd{v4qVsQVB7
z-e{4ZLXEbu?tbNMU2^kwUA1A4wj3+OpS=E<PVq+~el%TGP+VQJ#e%yN2<|QkFu1$B
z6Wrb126qWMxVvkR0Kp0F?(Xi~`TnZ=upg$*IW=?kbg#D6yV(KdV$JmU@_CYrPPtD}
zJ(PS!{#XQH##6>FsV5He&#Tb-L}g24stYq|U7~1=uAiFWBYS$MVJiqyQUQl-oGal2
zWhsA*H2#<y>Y~rkYa()9yW!Y#>_XeuHcS>cL+KNVMzKQ38M;e^#oCyMQvwD<N)@@N
zv*g(MiSbx?%3nJOG@4{d_Ivd0i42Pz1;xT;@WNSQOxTAixgAb`$K3S0{crTU3KLjW
z$wfm?mkPX!=QdKGH%9ID?*`~}nnZtb@D)``;Hu9p+mFc9<}m(vexwR2DR0B6$MqF_
z2-#DiZR4|}J_E2K3q;Ufg#tkdP4Gf1Vi2@{B@hvk`?u$3i_35tTARjHb!(CeG-j<_
zaF695ZD;SZT844(SQ0{PegN(o83shUA14L$qNQhD&j-o0e_KgiY&@l-`W{N0zxGS(
zFq9nWziMxbw%PWE(~LRU7&t4j&FmnO#wSB;A~0hhmt}EpN&_&gX{q&=5!ES~?6-n3
zRcrZ*tmx}=<KISvS^z0F?@1L=BAHPgQtdWP8%3_{)Auq83EY~&oxy2bs6-3jgBN0e
zgE#l-5JDJVf_CdjH77fw<Po(C+7d;i^KCU|*5jC3sTjgRV-i_W=o62KZjZgV5xZi%
z=!VP*4FHjMJX+71;mA3M4Cdy75}&NLv{S;xkr9r#S<w=OUn@n@&R{h;)nqZK^pVEV
z7kp){#tFq1ufA>6NM6~ab5^?~(ta4Oq#YFbONMQ6Jvf<TQ$_sB@h69Zm^`e3MD=UL
zutEgi=L)a)b7raAzzYcm)ZasY87TNM`bqQQpNTwfSge?OqmKkmAw8O!$oP_u&ZK3&
z_UPO*?L~XhPTEs;=Dy2{_RM1VYwiTE9d@eDKv_#vf&!w!ge9^n;a^^dFopJ~Dj9f8
z39sriIf~%9?%(Ie#eDJdO_4tYM3Eb#aVAg%Bo0%kot)i&ma02{WlSlf-lb-jMoM8M
zj;-eHr#@`DM##=3Fl-A02d5r<xlz?2>$`lmH^10QAIf~o$QqU>@CZ8`^O!Yj{S<No
z?!QqIyA1b3a)-I;Rc~ikhicIgArGMCOVQ|-=qaVc;J9O}P!xap0tr7G24X^Uxn|&4
z84Vmon1cjKVbpm!UMy*;7Ik+h+K9_PrlLJ_pk`FTy>GX=j=x^SypQ-C*nr_DXu8#`
zX?o_~1$A~rRY4`tM7k`XMc=wvB>rqu`q|xKWC|^3E_#Ab+PXQDxb>hI-<soB)WO8I
z2O0_CvHU^=!jA~%;qH)*aK(X2ZOP<&<iFu_fCM_AMdDa0kcNhKaa6>Z>`n4nANPfE
z5p7!#TiNjgA6^C??RP-k4zI$;uzF7rZJP`g=`;#?aLHGnHcY|-C8iTFLt{L^rJ10D
zEWC$baaLV!O>@^Z-mw=OO9i!_U0KqAJY`Y20qf8-bLQ)fHKD2G4Zq&(Onz3Wjq)5%
zR#9XN-~CaKRJF!Y({l7($!nPD`=I3hP4whKNOUIg3m(Hev7z80YrXu;IwA4wZ%*6U
zeXgpM32Li~wdUOS52p5=s%Q4|qkh+!J+M>`#mzQ4EJ?`FSC$SB+{K!7IOU<&CyPbt
z#Bl0(pBA!Me>QY%bUb@`?Q&i6)KE=c-2q5)Cu7py@WE_&^)d1%%?YIRDHIDA5?m)0
z+cD7Pt;~~f_xTdSHH4lhDg6;J!X-=$b3(a@kr5(!2}u3~6YN*W<cqznhTFR%`DUx*
zF&?%+u8xKEdlp1RKyjwOBpsRfwm4;(_azbLiv~$;NPXpmej;3m>fW*ysV-f)Q6=@E
zd2OUighYj277rn>MViT;LAne3hT6950cav*=<8q>G6nHrjwPr)>lec9ZEYv>q3<D>
z3;RGaie~s08-h7(z(B2?%#(6ZPFfXq$t}pBMi1M!_54%er0l9sw6qXLqzscvd?GMX
z)QvbS+ByO<shp<scl;NqbD_YK%GV|h23N!KI=NhSZPbiwTIX`ma94>1$SZE``%6pA
z58anPpnkKN6m2yW_+ZDqy-Z?0ldR<9(hGidYQ-GNWE#b!0@}T{AG`BK0Z7Lg1tNc!
zQ_yL^5Z}sslbrs>HbSw5q@Jy&E+eB+MH?&gH5r~*mJuRYWDRjIsvlJ7bgqm60zL?T
zPp1tg%6bVw6B)3Y_%=s0K~=mN3(CY)$im)al?%jol7Wc8VUSx=^NN@s4*#?TXx~<>
zQj37#XG5f%%hvpgg+l=n_7PRd`d2Thc`7Z^?*&SYc0>_G@u_09g-33KoSz9JH$iBh
zNFuBI?{9N{w_qq|X9d5ZV$*+C{&bJ7QP1d3env5Ora&W^;?=_|{k{Z1vRJ?=ePHO6
zwQ)ae;_daxM`s=CdvTB^V#c_6*(tppTiEk3<X3tA$UO5+%)qwE^>+5NM%I2K|8N6b
z4ZE3RxVgCevNxK04MY1@6%W6oHR?$=vMG}erRJ&?(MARHXMzAe0R>IQ_Ge4}wPN2g
z#L=(zzn7LXaHJthYomZK#J%Z+cIYcx?Ph~%Es5&n$?dRbitQ;T<!))`yn+*^z61t1
zSDjhe;sphoMz@K8aD<x&QUwrq3w3rqn{n>)Ei1xnal>laS0?4T3MBlP$o4Ncw9lOM
z?{G9hi^XC7mx?=b3z};gFj=tXMEHX3DeHRx;~0Z!|8%s2>&63zyIhCmnnS-s1TW7a
zn?5xC02E+o81gWG3@+ByJK1<Xw-2krmXF4CUQxPrGLYn(t5QsFZRS;7YNcGsXr2fz
zqNEyY-iC1Eme|uZ!pbsN?9sfb0|GuYhd`M)oA&3;`04(3wnLuC?3p@d)vE<bNpk5#
z0pi#Uv!ItubU}&a#O4L(R^1Jmc>e4{C$cf`wlzv$qJ#wUoahE#=w`Z{ljlDv)==%C
z_3k3`gpTb|Y-qvktS|+Bno41qGK8ePQ6@S?g$*gQ+cyPNmK%vbI3}np#<oFsUYSr*
z*;q1~iU30-fFJ2F(ZPN!)XkgH8@NXp+x&?dW;6*)G-1Cfk4mlmYd!m`&rt^oltdKZ
zFg5fQh;6lILyNlOwkr>drHb0_BIOH)<@_w(tfH>s^VbrER8ezVgy)oRpFZ-3xn6M_
zO`l8zHZ8o?PjlJ|@a2|L0_^Qm;9D3jKQ-M{s;OrkJRu1yBxE%|mPv;9%4ynbflZj+
zsOjI{eJ<e$RW(|*g^3+n_6Gt!yVe@dX`C-^jJlpu&u{t<2_c8*+f<V>T^}d*m<M8!
zYk-ITftYXEe7D#72K+Lt#iK~ZxtQKqZ@34kJBpSpwB}Tt)E$Yt)GmS8iwGL!EIW|e
zYn&5<hu01pw990lywqrG=OwU%50=aXt3BbK`(l?6u!Dav`<Lt1SB!{yiAZsd!x<B~
z_0#RVvmb31U(+Hj+>;Bi5E2z83BI{JqT4mBRU8W*g^$$5(vhX9TU0ZX+MyRftJ^WG
zok2?1G7$mTV@aZ4CVn$%w>ycwq@f%~!R0I-8u~1XhJcDdm_RjtNO+a&Fgh3Pz8lSG
z{JgL_yh>kg)I5xYG3p6PGreetUwt~D5Q&rc<m^b!L`EoU^3MCL*CyI1)M=X*v%AvC
z)5VWB?&@F9qT#+z+|O%o13YzBcvN+*ZttM};&eXw%Z=}p9(KNRmmA!aT-Dw37XG$T
zxXtC>tKF^NK->-&TRQo(_9Txo<`h56n&fOnWnco+G1myO52$xcIgQ;y<~e|s5lZP5
zdooN|;#F*i!pj}(85Rw=DL)Y%bhvSi{Dijy!*8B{QAmVEcDBD9K3mZ$T(fe72KW{B
z<}V9*{$xNz$V7y>*^dIXA?ja0nqut%JHL$-78Ankm!B6ofDZJo(I~h!N)y*xuv8x5
z(DYR=N<*2lrBvbl$X7C5%>Si@YbxSxQi5X--$A%yjjW<v-di3&%fr*M7W-hm*dMFj
zpCGU~Oi5nLsUiPx{f#Y7COHuxBay|le!Elnk{Iu=2lvo(?k~7tdz{KpYQ+XV3}Z7&
zgynZU?Kof1n=<w;y7t3AIW;#sldH8chtpWXN2^aE{qC*@0>5Xxo~Zb<@mrlf6aE3~
zL6{LxKV@Lfd4@Yw&GLxKH!KqyO3Ar2l6WoZIT;N-M7y$gmZnIyC3KhDLC~5r!iD-7
zBP&@Y$hV5eAoKT@q#5G^Y;zhf4S|b)=bWU6GQy^26x)%A!5JwBH4+H9jE~<e`}nVF
z$+s0YavT%`vmL7}^<9mkv!#T|G+0Ggej&qsqPpMYuS<6`p+(n5-68?S?!!#Z6T)_7
z+Xq+mf4eIWsTDFFNG3KP&L&-_8;taw$507;OSXj|aiHi4Xi7PbL!!3m2}8e^Lxf-x
zP~aEJk?Um(4^K;JO4U4G(sqi7k!om>?+w7rLEuvsiOY~d6m)xc;ELz_#Hyw2ZoKZu
zdcU6hx@q=m+!s}~QDHy?v{`i9ve?!6PZ)temCswRly@=}X~-p^`Q1^rpMhsq^(f}y
zeqZ%=B<L{v0#63;&W4MKN@jw<=_^rK;(wFQ=V?sD`bj~GTS7k)^LS3?PQxkpHKBId
z8Qiyp(I0MggePM!J@GANH7L(VS%lQPir(bk5a=%{^2wqc{M*a{$M(mmSn^1D@;s~>
zIkvSBpx=g12nK-0Mr(yDP{PU|A%@ib4gPm|q@JhPs6_$dO{IVE4G-D0rW8P);YxKT
z1|-RQVWdG*c0WJcOgl?Fm}N)sI&%BcEXb=6twSbWoe(0(CojMiP|vtp$FVn8lk1m0
zM=hWHo0G4^hRZIwIjdzvzIBb6Ly%KEY6ZK?Z*%nnboDxPQJmXFSxUsGjduLb9Hn~J
zzS}}sa4^}J{()YA&|*F^h@Mq9v0@i+Ex2F7>mdymxJ6qpVgLIq4+O{~Kz4sp#Qd=f
zZ}0fH8|r$PCgc$X?$t<KVc(YWfZoUr5V2eQo{mF9dQx#^7^@SRtRMYJs}%rzSZ4eg
z^fiJ$IobK5De1dgPFj2g?=f#6zZ3`(To>+$eeQ`#{J~xw*ouE>YFOA0)N6NR1A@eK
z-U+eFoA7YS+#Y^@NARa_V{Ft_(xtq~ev(~y(ps+w8MtMQXARh%9VRYs?11iVACBxp
zjl$`-Z!xDi=dpKo<vnaR{E(>W@hE*@A)Iko?@|qD`;@1(sriEu*%)roIIuS+Dhdl*
zLymF0)5)vpE;U`S$j2SjG?mIg1Cq258qM1!l_KLpWB^3?NFn_k7DqL~%3iF*4lTzd
zjevMfjg#+WW~c@HR+Vzvzhz&sJ%(;XOCC`*R}O+wo56<?&F^~x4)->*OUC!F%EKxH
zv-SUx@BG=;7*pS4CG1;9HfN%yfC-a$(SEl!>B<})x~a2BK9d@yz;Z?lkY_C~Jej06
zyzJhph>xEaCWcvhkyUGW8w`QqqfIa2<jin%+GozS0VW}kzylpp89l0}5g*kUHG<d)
zIfYC;C<+Vrc0m+KGf*n_E?;R1Fr!2m@2m--)>!%k-wix|{SrAtup+W+X#&SPQ9Ajr
z<C8Kw?GATT$F@la!{H@!MYPu5Qj@-36-2AhE~sfb)zr-e)Xh5bQ3cfEY|?1&N7CK{
zek@+%tjTxvCBv$sgnNI{6lX?MU-p8gZ*m+}kZ(}j7E}CIhE<NfDWlLY)LRU}_>$0}
zeB-r!-e%d`$?`Z7tn$=rxqKHt0LV=`ky9hI@CL%1aWE>$uU7BKH#2P^`jK2WGi<2$
zz_H1^D6ITw8c!NNX~QC-$xIkJAqBE_hqpsia+vIa3+c1A6ublCR3yf*@jr|^*~73<
zHHTK-c{T6YPe2+7B3e}!ScQ=8@4wHGRIC6m&g9*QO?8n2ecY6BT}Yz1Cyg?E$@)<Z
zyXpu`uLxKMBo0J`ObVm}nGQ7Bs$2xiwn;5mc8NBn-q3%W^PODVw{xDIRGB-?d}u(g
zTLSOfO95nS7G6K(Aq2u*udER(j*t<>R)Z#mL;Gty9ib_uac&l=J%<x2P-9sG$AP2b
zlY)(KK3FEO1XQ7Y(m|p2HXWtQGhMGemEirYS$@P7QNtCmX}Pz7Q%nsJc*%?71RImH
zez%*s<Y1Y8mpi4OAvaJoE6$G9Q&wVk2}qK^lB;Skxp(iWm|D@KzNSRq;Sj0)lQzvs
znu(+=vH6*Y&}R~b-q$9qe>Y`5j?kPS=nQ%NH9<%uJ4RJlkprvSKJU*klDn<{98HBc
zo$07d>T5`%DsBB4mt~g7>c18&_9`5@o$h1w$#~cOInlnRiL+XFrceUmQS_Mury&%~
zeeJLHE?<`4{-!VxiC!mH|A@ft88mHLUf7=ZQ>pxAg;tY<6kEt-@{en;#DOIN?Ah;j
z-*?9RINQj;!4`kCL6ctP)8Tn&Of%~R36#%MpGMx+B)v>}VhQ8iW0`WO2HO#fEw!I;
zV>232=#D5NXRS%-<_4U5be!blHGwP48iJjg8~%?TiDXwCD?MY$khV9{D$<T=P9W@W
zc{nhk!_Y!6P#1ew)u(VuxkCjIJsI_ywb22qOY(ml_bA2{N7z?Y+4}6cCpp8bp*_Q{
z&73m0MXB!evVCwXIYhM7zu?T1xAG1T6!b$;Lg$5yJg-ZOFPfBNmA<PF;%2WM=Jozd
zzQ&)H#l`&`V~%LX_|<-aggJz%7c?P_+vYm;*kEKfv7tGyy?%gix8XIjE;^sl$5U4E
z_OPC6Ulu?1AFCtarxYCV5`*Gp00;H>YRD=iru6_VWIePgbh|N`MO2?#$&Tmn(w~kD
z+V3bTQhLo1i;kEb$+U>APQ?Y#0QZ+7<mRRgFLB_7Rf}8Ibq6tf`4q*Wz%ZgX9J>EY
zgRiAZzGP1GY`<c1={S@TdvUZHtZLuWJS!aDj|}&rF?d;;XVV<fgM4S|89Q`1BvF8n
z27EA0z7HD&1{zur7i5eQ0tMae<}zNU67)5F3g?8C$bLnIM#%wqhCy=-A{D(P!)SRj
zCMroX8Z}}XmJM|nUs_4|A5tk=?kM$D(x?=XpWX6^bfw>75@R#|0;FB`tJQGq<je`l
zFRt%7r2HK3n}eK4?@$HrU*iu(2zgi0f&Y@RawdGkG#;&#=S&qFi(e%ik_*a4S|2+R
z)W;(hfWw+-IaP3ewjnW!5o_SwMD};LR6MEJ>Gx>zN^tgh^|yE&NM#m{h(q(z|KL8o
zWE;^+ZBJ>Nu{)<Khr$oSW;@?*m2xR;_<a55IX>wdY_8Rj;MyJZd#SGbk!<Zd4?HG<
zM)BnFga?oc+}x0j*q!&oI{rueT?h7z76hc?FggQu!UM%!uU*<Z0o1Y}4n|~tIbm*K
ztaJL}Iq0cXC<5w>lECEaZTm7hTiTriiNF6DU+vq{@JG8-G$Nh}<yH>2oFh~WW9gi_
z2mV=-I!&@C&@U=-FbGtAqBP<KFiv}q$gSK^n8zHXb^L!W0B)z{oTf3-9{m;6G!#<U
z(BhU&laYyPRX0y!u?rR!jg2{{)IpJoTZ$>z7=?FAtEq21-SgfE`N>V_U$@<{)Q+`Y
ztdyhK1;{_Vzv*vwxqP5^35a!(2LJh1%b34b2H}aDB(^lVay5m%zx#AbVwonG%Gb$1
zt}T$F94m!ztAMH$JCt9xJ)fP{eL)xWb8Nn`S)=keF`z|=<#R%(>wJTW{VMzP{%^d(
zytL}8>rrWT%fci;k6IBR-HG4(tE8fu&#Id)yJD5sAlNTcDLXGoq#3vZEfTq?sdjsS
zjw%nqqFia*7U$fRnYhL6M748CU&#=OJ#){N<ZXPCSgA`|&xWV=6OMeejG41JQH>sr
zPSneUoI~PN<k?;fmMVc1tqY6bp0$i2P2@yNhdX4Am*%B=+A5JmWodrs?_OeGggiQ%
zZEzWTx=07;_2h5rFHxFZ(rP9C{FAur_g$L_fhCPj)^;Y7*v0#;kstid8zHoH4TnRD
z1~Z~GIL>?8lOtfG4mOF&(y9u5r@Ec-Wm0im;tCl&(gJtOr}GAu3iCrX_L=|muR&Wr
z-%dE9l02ayR{JF}W*%Z`pQ#LLXOC~&(*i1GFIUR{qedLXX*Okh!D`M4ywz+k+if1!
z(LM4Ti7K7qhl9@1u?aX~tDvV5mY|+wdf*CXeDN*%mY@ZS4_!ZbC8Jb=!|LJvkzB}{
z<AquYr%_GZ8bigMg{gKJUtrnH^(;7C8<S;(r_gA?V~0X5sjLZ5a%gf;TiDa3*q`v1
z1$jj8*G#u9r>CZTcm;R?%-fvxN5?d7Igd%Tv+G(~XQR#gpBDC`QlB$yMG7e^a5e-)
zd}JL~S^2Shw-3Bb%MI@|-rJ+4O##aZIX?Zn&i!G2I-BpZ>kg#SM&C5(6aF|v?!lv}
zP!$M{54}U1{p)f0xmCv~^sk={l^cR&a@ofDM_D<3y*GY<$4b*D%nC70lAV|3KlbM_
z!CWem=PME^yBkWtT|Y^h>Op`k$;xXggXZZWQB88mxQN295Sj`I{_BmDFbP>SI>d~Y
zgZ(@quk>LE1TP!w_LQ;)N~m+A?WUt3=Q+l;;k}GGPPIAb^kiuaI-`G0QE8D@jHnP>
zEnQK`ixHKL*`7YbHRqHww^CW~xdcJMn3CIu8|X?;_*s!!Ul2b<mQv`syLOgD`$m>L
z->0dEqp?s`@d(etmCWCLRT$;JA=Bqo%8D(-{8{$?I{i@RvC5?>aiyyAuRToxNauTD
zZG?qrmGMC8GkOVIn^WCfFctr{4Au1(=Ck+U(>i=}$(Wo$l2wpgdN*=4$z$XAc{VXN
zm>nViXGnNsrNLuUT?IST_ni0iZg7=kF6&~6^r8JaX9yG+n=I(U6JA>M<ZTRnstnPC
zR&V6=g-aPf_B%Bom3_tXG`h#~*zZ19=F=nWe#OV*q;|u1s6N4I3*t%3%bezGkcrTY
zM5rb3<0!_riE)eB2<IN<EV4~h6#lSKu}R!>qCymvW?5k>@$6;F@G!y!awLYuxG3fQ
z3uJ^N2Nmd~U*1a*CznA)D|mHKQw5S?(E?*pj$#N)H3sa0eW*(7?z0Sg3OIdyK#)W(
zs)4F`G8!1zSyR)N9N!2InWca4$wjhNM!N*=j%bBM`@F8(CbbH_TokCepU!3{g%75x
z$UCIOpgnaIz2CI|9{Lp35Ny%}^Tbzre6^T6y?)ma5G4=gekvmROfxTvB*FTk!mv4n
zCI8`9Go_pk4D0iSFK>b-b=k<GlPhCv?ok#WS8uKH27b`l9+Mf;szAu28)#4fTJ1rT
zY`n{SdH|6LB~tTP_kt@Sg8P%{6sdG?nIdMjAB|DsMhYz6kV<4U6a6c=^gpQJfxRxR
za>7)Ef!tBK$u;ZT%g`-hI@qH1c5tRNuVM-OToe5bOp{D5&QcXM$($;E>3_*m<SU4a
zv42vCfJ@z6H4R_#Ltn(mbX%e6{V*iZz;P$_3Q@Li{d)dG{mxN~U7w-eH8m8kf<H>G
zb;#N4T3!{{3)Jbh)q4=en3r!gtj&GB)qY7t`wUv3mQNBDd~@PA`%rJNn#}rm(-M4j
z%m7<Mh9O$kU>^Pr+p*-wiJ5{UwI&ZlPDHvW5o>YzDCr^LUd06hm+w&P!QN62Uu{Ih
zksre_bXSf@`547MwglbJAMgU0@HQLtCws0D)|-2dCw*+Uj*qj4W+Ecjb5{Q#4S4)X
zr@ug7C!HT-9jyBkq4Xy_a5vaLnNzE1c)QRfR#7l|77{w+=RSO*cdl)#Z59FH%rhN<
zqQ9(#L4DWiL<!YMXq}n(52_pc!;)G}C!c-f(_Q24bCia?vCpVg61%>jo52I|yNsRB
zh^KEqjrzrY;ijXge3NWm7aNSCMAQYkPD3rb1~be%J%NV*j@$=H4N~uVN_!*kUaw1Y
zIj26azX*-#+kUfGI%({@sP@pg`8#amz20$Xy8S2N0d3B0<b=lUzW=pZ;HKlS%9A-M
znG&^DXDM8*C7~4Cu-GV{95$EDng*DZeKuW*$+y@4Y^Fp7`ulxVd4w%#*Ql`QPf*Z?
zD0kI(Qy)k&1EfXUTrg9=0yiIKh}DM}Rp}^3RAorhg{s2jfR!&*X-+*~Ci7%mqXIpe
z54{dlH*S4v3!mf%MvSV~1S7Yb7O8zrG%^cQ(?c5r(A`{>EN2bpKT{nV%LkstQ{8f@
zPl&9u)y72xR);c7*^v+~K(%l}1^@W&lR-~|>8AnXZySn0`a$}=>6vuL*kvDzT%q>Q
zrX6i?(SuVjq{t=af-UH6a>Nb`h`a5-;#+5o%cU}0NcD>!or_$D&z}#@vXRwj5`Is&
zqbCcEi?%dzkSDW>Y=*~i(n|(`|8)FvsLQWWUG}l-p=P7$`ipj(uNJY_4GxNRl2M^3
z7XPD{<mJ*YbXt4bfiL#qY|^{88^c5<UZHOToRzzXOT<p}4;c{xmP~OOj@WIcw=G`R
zPD_F9;#-LXg!=-dtr(in7~}D2b%Onx*o&Hn@^`t11}(}k4N4id6;Eot0+=yGk!4l5
zs`G957ZEbMTL#}BE+=9Ee_N*9HFO?~icA#14R1z$M8o!`jc?8NAlF`%RX4!G``1Qg
zuA5&q9tWTkzUPCj=R6Yo&KuUe=J$DrjcFS99%`;N!Gh>iL9%yfx91_k+$poi*rS&r
z!(XM3pArT|=&<zW7@4<v3=}dgg)K^CaX$9QmBdvio>ZV9!bC}G*{ZUuN-CxKh*8N}
z9n-w;4JJlL6pq+3qHg37<RO)ZS{dwz^f={ubN2f@<lOmng^@O(2oW!6Be#L*ekTxz
zR#GLk!E-O^a1jh*c_ItCW`bdYmnv>O>;WG9c^se|5@53Gd|w;>-Om?7N5xsnuCT~&
zRZEF`g$qL=rdn}n*rh($S%wnV1cUmrW=npnzX%!z6__f`m{Np`p@rD5BZxvyr(h|3
zVC-)q9Y+tWiskf0Z92Bp5oZZq&)S>(j)pe5s^!IjJvYM{K}cs-gQ}P(^aZhi?voF0
zElZEGm&~~=jdZbaoA__oRAi?eE0i{P{$&Y7==#CWT@t&dd!K&6X)ve1-C@<A3e?xQ
z#>(;NTYBgQ1={v9z)@+M!FzX1-GU(hD68H2g2W&_Ifn@?6)2M<i=&I*cytyxB(~L-
z{gbL8<ntoEg6|GlAWQ%EE!^E^tg2~U`q{Vf@#s7!mGX5&i(LJboQkMqe8bMis*q4=
z%87p7&?CY5$a;)|mBDixvrc!ux}OLW89XsusT_5ay$*;ZF1Dpv{2`6%6VoTY6?U_K
z>0OXHQ67qKQzj;xYV%i@EL!y?tOMRolcf-vy5Cn*&pf-yY<fNm^t#+j|8tc4f;w_~
zZlv4I*IjP9UKCx&IOJ(nh%0`$!BBpIftE?qj8TCf2ue<&L(Bj5`w@LqP6{L3>^bP0
zfusnTIWPy~1IYdbT_{PQualG0VNx9(SbBwsq^e+y?>YVohj8DXMK26Yn(I@V9<L2%
zbsqTDDCe1RHQ+0YJ@2R-77hZOnQ=PwF%yX#=y7Op^D9;hb2=o+Bn5Iud@DD`_6K4j
zvj^7MjJ;1qGGW=PY8Kil3Bf>#<y%n%NE@U-#@1DZFGVgTdLMRg-y)q9aMwE;^BU0;
zhi?BPiEVlbqf>sCYHs)ew+xiwlQAKrARqe6iw)o=7<vgIZ54*q_5u&hL^M1TaO=wi
zUei^bn694pW^t;ahQNsSiW{)uuw`Iw=KV8ipU@J$ouzbW8+lZe<#Gs+2ODSS!$KA{
z7z82soc48r7zTtvZcgewW`Wb+TM~cUm`$Xny6HD4{g$+;GTg{he>$I0^wMv)>~yLM
zKx*v)jD&Ou;LdVTR!cyEL#bQuK?{sa027*vANMHU@x(DCy+lw%ETmlG{61X%z)xdx
z^ts$S9$o|eKdvPLXJ-@nEA|&e8==5!;C%Jhb`e;H^HeyOIF|8#<5jx;($k;6g}D2l
zoobwZpxVOa;$*M>v$B)GksJ{G)lF}M>38t2HK5c3<wI){94j#sm7T_-39#@EZJ>?@
z_vDb$s#HVh?ILUo)0Uqj!UZBnE?V6a{-LjyD!$T7Mo?7CMV|;_A0e~Q$Zu<Kh#`KF
zXhU}8wjDQ8&{&dtj|7A;!J$wi=s^yT672`DwZkg!vJ!=64zh9r$pI-N+Z=GLv?XM%
zQ^Smjvuse(aGI(<+(Z(Tt4L&-Vl|+=tiA|DtuddwJ|v3srrxcDTnz3a<UpXtaC>be
zuzA1EkJ80XGib=U=np(cxpZMKjSzDoPpFefK4&Oh5;v`$)VIK>NFPX;NHunH^)(Hh
zl+a)X)au!=yoN}&(1vfmM1V>*&`G{IMGJ^Np~BO3v-dGyBPrmenG^`_BXe=d|3bg^
zPa$X1GAkDLf{poWgTSYorYasP^4N(y#j}OK3=C#M)MP-hMcv?`7f%28E?8EKVX|$X
z;4V5&3uzsE=J-Z-fmdAUZI_+&4WxLObRyfY0LVv@>#>hGEY?-m-c32(=Wbs)VE13>
zKC-IPX63!503K2buQ?wxHtxBx3I(qDh)BKBqu-Sh-xp%~Va#N$rq_t!z{OsK5@M7z
zMn*OlTi&EE@<fHJ%rOfM&idZ7)H5v&OhO|6aF=b?A^q$Ml4*Wt*A*UH_snS=*HB$c
zv@T!jkjL}Cx`4|O?#G4#RSaDGwUcpO=P*&xOmFJ=DGWd~5hqlsyPqE7LnA`t2qGVZ
zJvu?snES{0=m4)sfK-i4;>{mxA*pl^2<zlv=mFGxK{UFg9r4;9^;g?sor4G!;jEEm
zp0xGnw>u{jLf>OpsrE9khG+XQRh5Z|{5F)r=)DwSqZU#>VU(qCI`R~hwPxmUXq+Xg
z@c$6j?c-w*JTPhW$zklgbw~}TV^hR4RwsxP6AWioIu+T!*vMw4aB&AY7TYNpOC@np
zSC4+>=`H#p?hSdfo+pr>_xBcEd%5JERRzgegb*XEaCu@-{t*<;1prAG0TT2bNKCm8
zh{&-?ob6Qmv{nd;u>Rtm#=d^<g3DfO?-(tou^Sb>M+tV|@$(yQSxV9B5YBpQDZcls
z9c$+jARFs`r0{$6VB%AUF8OOwFPM97#pKCdxoaMIA7@8rpiBtKi$zp$_y)-q;`t@{
zFMd6yHJdT*K}t*``JUPYl3j_Px_Q!;Z!4|kn`zuDa@n_+k*+@9X#*!F%UG4S5|`t9
zddnZbNu?{7ccmrEdCUWJbgL}I3&O;uSL9>tH^c9vCnRCxKV{tZGVg{%?t`v1kGXe@
zjSapt_eAdKQGr1u-R*l*t$KK4JJlX%71}=vZLaH{-{(N6pg}x2dR3N~mi*h+OPk>x
zb;S{{vGDs;NrSod+D`d=B7dQl>@z1zTgC(seud~XtcZhD9`#krR2{!3zn&yLJOs2g
zet_cMWO65s5b4md4%%#3Ha{Jcge`td3?l}e$ON89vYf!oVtf%e?MLIP9@Fo%|CRuU
z8#IkWHMuQf`7d$}CWs@^c<(wW&-utB<^?8$NxBhZp8BRsh;v0u$>|#&jibLNX@LT#
zD7k-9KP(QCb$Ypc(Lr#GQZwtmyoejcugWhCR-06NXzjW6>4VrJdw+$0-T8!#be5Z9
zT_Ln&t%mh=C}?<@nEYLRNe{dkcuuP!&(e{QDGNWCl@G4vaCXQ~os}4lCsRX763Y^#
zu*pZGt}fCN#SpK6+PoF;;L{z{6Sk+a3!)6+E+}KL9k&hHC)9beTsq<u&w0Bhd_m)S
z7y4f*@-$mR^Nc#-CY(3t5t6*Z({Nx5G(#z7V9bl*r(#R%L`p%4?_XSivaK0rDNb~Y
zbjuyac5_XSQ2Bw1EIak1cRYpU3OTe^bt$TbYlco{y$pD|wkKzqd>w6>7;6$fFw4C}
z6#Z)t6w@!(OnX!6N<-R4pHws+d~=UuQI?td;m)g3V?;4<x~w=`55L0yM}GEs+RebI
z`1>)7?{Q^rPKeXqfqI68@tA9u%8VTz+?Uz2h+kCGYy^tS8?v<@I<*GBRbSvvI!?9^
z%_b-PPhlWQCAN9tXhvJvrfh^DozQ7;Ous{zBk_7b6RAE){rl<?$VO_#0D(cK2&+Zw
z@7Wa|o|uI}%k4lD_PRnUiCUn+AJxL`ieN@rp_3W{Qye-+${PShIv54(yny_azmOLJ
zLq?-80mn*hWT09~i#=x3FUCq6AIW|QoO>-!$j7onS6403Yu;DNu%k_P#R7acqXFJY
z^FORfli!=np@kFb=gUgL&#9sNG?Ik7^P8S!p(90SI!nqd!{A5?F{#o}nDbKHy00xH
z|1!{oQ63gkuU00LzYwJOtWxTzkl(hZQEx){y8ldYO`$%C;1cpK*O@mQ$4f@7PUKaq
zgp)sKR2a$n<M12#=vD>YDg}K?6Q{=B{KJV&l_sz4oCJsaUIE+hp4Ofx8~uhGI(_fQ
z#+%=ptvejNR9|qaBJqc^-qym|B$I3^@r}75s!ZNwu1nZ2&fx6avn@1O5f-U96zX_-
zKO_89>^OSc92Km6j$IS3NM5>lY9Z>tx$J8AkYi*L(QV2ERQ9%TiBMfrD69ZjE1K4y
zBFO6{{n2TvWlKO)zB+xqep>-rweR-R<4;#+KM%+)Nybu`qX;qGiyo?D>p1cvfzL@y
zj`EZd>vNnfYzO~#rR)d?St#>wy<8O*68m}TKP3pGyRX6h3LacNq~JuH^ZfecNZfmm
z^VI<#wznNL2A!&O#2@rF7gU@+O;mH#t0jPoCt~21^j^(e<P~>?5N0$pUoLuui6;&;
z=CiUCtHPlVlvlFQC?q3_RWn8Uvab*k|C}tq_ZKUrb8J$DxTfH0jTYcI^N$Ye_Ro0)
z^+=-NLibFyVIlfRn(^c=<*p_70?8=61%wLBVZ`#^238~V;JDG+K@go<byMiV_MBUL
zW1d*WN?4%%>uUcr84WUGLLwB<NZGN^Zi&Bt0InpnH$HaBh1igmI6Y53CDD8{Fuh|C
z;HGrR{W;G?>aRE@0essS@xffUue*Xl6s@qvqx;~K&}6XU*b~c)s>pon4BWvxGaL18
z*e0JL>KiuVxBRzWd)yx4lj^&IP+xwIo#^;0gA?aN55vp+OdfDKIJDo=AXLa;G#Y^v
zB+C7ueobq~QScLof!<hQ#lZVVpbYZq&C<?iWfWe9f6_Choq26(zFO^wujV#p(3?1I
zj4?{Ll$RL0L*L<^LxU(0O>X`^QgZPM3nA@yH0TnSD%27iBHl)!2X$l{caKy{5Z^WA
z;)v^B?)VdZ?w`5opEHbD4W2SudvDx!1;1o>3;G|t)azz71`vSnH$v{GC7d@Qfs^Ov
zq7;ASl5*E>GeNC8PF+U}rDmrt@`%r5-__TZTi=X82eS3X2V|l&{<xTSR4`~{9A$_w
zn6R$c<Ts1-Q#Ar=InGbvQitHYZ_PB9>3Y}@m{C0BI{%HZ=`$<M^7A=uq|d>i;{DK&
zy7X<p_Be}8_QiaBrkj9f<c@&m_zufldJ};Lyc%6!5NM9^4s-I~H#_BCCVRxdOO2(&
zSZL91sU+LI)hK+^77pqRCl)1>q+C?VK?VI_bP*SlV3@N93hG2bjX-qbSL{$<9;&$*
zE_J%4?h#=TQU$Gu&lyV@Us&+2S5^(o3LhQvIDJJjYG)J$Jtv#mw~DT8QtFX+d06u&
z0?lu$B}FRyb~YmU!kY7#D#te1B7ItlwptN+jn!Yxb(e<JTO-lw4?xN^<-KvHS?Ltf
z{`&cpJAegj?cYXOHS2Zqi*`gw(LK$2FO!#R9N<^3Fa-I8z3{W|QXXeHCCLeHQ~G-J
zG4k&>Hkxfer&)tH=LEbt1>idiDleAuPB{fiPB~FWYTg}yD0vPtA`yT>N=3>?0*pDQ
zj(DkJF|xSIeY;i$kr`!a@udw;ce6XAKHn@(2D7Zq0DBQU)Vcl5ocHq7t-N`QmZ$os
zw}}MakV0e)NlWQ#&iGRO5sMkEQm;W2qM!9tA)=htu*3AiR0<ehvH~yR4xp2c8G5@B
znKhUe?|H5hsrr<j*2giQpbxV3boXMCp<1z6-lk(wBukC%=|oXEu;Q>HO`<hrob4MT
z<_C@&SaBrFTE?PND@-_B$32&$gQIUygm+Ok8~H&(VZR|;Q1@8$4E0w>L6~FI?$^6}
z+P$geH`1!tEE~S39?r8N6e~TpQVt|UX?OwCh*ACAiJ{6+0%vmry}(L}SWhocAcXUG
zK75MuF*;bQYv@WM1y}@M0Px3x<uN~)&M~0Lob~}0Ge4T~8AT!&y+f3@W)T~4GH@~(
zTu>E!+RA^Cob|pxGKo(!iQ_kj<2mr;KS{T`!3%h%dfw^exQlj~OkkPFt~CU48Tx!a
z!GN#s-j$h@jIa$6vkbjWUpt>Q5trlqsQ%^fQ2QT~Tplg+C1B)EFuVA_M_zlpBC9%F
zLIn7l#?)~-PoOIZa6FWV@xqbv%Q8BSDvHC!R+atIA?j}1rOZq91XL;I&z&&`U`Q4L
z+}=4@b9H$zzjq{Mw3QTBXp<a6v5kbXWJx7+Bp{jz^3{P?OrR)~2s`Fcf#4`fBU#mB
zYTz4c(I}@t5TEu^;&3aL9Brr*he*-vylq*&(qc^A_oWu_nUueVrI=V7P^h}ZO-ScE
zrf0%i&S%s;>{C8&SrSzRcy(Vs?kJf)ZE$oLq9y`*!R5nO)R#aa-fGP_ffmWQkHXJ<
zNfMt<-<_k~rpIKOqqKu;vh3G=<mZ{S=a=P4KjnBH?@VI1aVO`y`k}Gu0N2j{o)vh4
zBbm`rmQt>iu3oTe)xf@qEG+#`y-l~dSQ4XaiKg5LNn}$3R`w{fh7uesI4OO6bfD;F
zFF1(3W39Va|GjgfdzQ7l5n1;cUIx5b%z(urH(>vs2=&ROQv{zfoDgUO*Ehv1R&)x$
zpq1Gl`I$7R95;J~u^Zz_P&b8Od!POoatZyw29O276nL(&>@wx$cqz0o*UM|_?!RK&
zbG%QiCXd&voI4jBCXb<&u{*sOQeu|}b?LL)HCH1_%NFUA_&SFDCDm3(%Ptu#VoOdO
zzINWNnn0V_HyOW6bIDmt{}TI!rg{lr)mYH5BIWr=?dz|Fhk{6Cho_SDMTKd;-dV7q
z;MKriAFtM11iVyEeGDayTlkOgZTTpdo!N)TSfB|y25~@a4oKqgRc$}R<Ip3*4W##@
z$aW~FdtlnaTli@-SquyRgAZc2J13nvYn3@fzt30Hr2oWM@vU+4NVEH))%#;WbL^Mq
zdRgV=S{|BTK&kCVtNzQ;RJ^IIUn?qV?9svt@v;iZbniCCvd$)jZkYS&PrrEN1xeSj
zDf@Ns1t!t#&DMp-;jO6%0iGsZ&VYbYfu?)yb?&DogPt9QF5_dwXTfOZIhKFfwfwmt
zvT%}XHYV#(Tyc5SOdj<Yb5Ic&tkpEv>y<su1EAd<n^6GTO6@$i9tH9h$%%OAoT}Nh
zYT{&eszC`M;Y5^^p|=7tb3sb6SQ#ew2<^sIo?1tlE`OvltkD53hGdwd`6?7ccUarb
zNPrfhKT`LNe2Um0B^;{qsjBZYYtYAH+=SbrwASGNqi?^W*-plB(y<IZt4xD*kN}D>
zDuOS3eqrze1?f5SMJLW=@x$<>f|u)m=4VzhohsBJ(As;ven|H6j^O22?ML-Tt~lQD
zzGiKL8P{4h+WV=(^4k)#m+O&aL$d&RNdJCmw<K)1`)TTn{kN*ih2HH6{w6n1;6?Go
z`*-dpUAS<Mu>(87q<@>6bZB;d8k(Ek!Ysc}VBZhKHILH{CKj<Q{3HaN#+_ce9|MHI
z%ph=^isUyJ(A&RYm%Y_7hsAK>Rq=8p(i6}Jq;9jxbeNrvr^)dq89%f#EPY3VeAzmM
zD~VH2uVj{;_We}+K8XYVf+o#I(U2R?qq8xzuxr$(I!Hz=9U2}P(gkx312pqxkzI?3
zZ7G5Q$?h05x_Q<~zcA#2pxE`ujrY~inByY%00~p4cXv(Ci&g2!5+r5|8n@!6sS#Et
z!)YH#nTm2j%+gkRj)*V=F}5g%9OE9y<1&^>{Bkm{MT(Po9}qvdoOM@CD$+kV43K^6
zZr~u-bu#qD5~6cWlRks^!N#M8FS<}-`?;lb9nxMpgh^PBc6FHejpej2h)lo!`is~0
zVNWHkSPiohb2@(;gch6NkjFn5KD{6tqwoIk<mK8*osc)-AXY>#C#Xlu!fJ-grLq8*
z2Xb(YGu)=S?D%!#6O#WWK5ntr_uOHBw3zFJpYW82`+GsiJ;pM7lWr>pmI>1Ta{-Y5
zll=(WZyOZ4rxXpve4JXF6e0cJW;nGl+p7C1zFmDiLI2(RLR^1&&Y{(!{86KO^4rbE
zuV_{Q!9L_(fmb(N()9K*cluOwjq1~9I`jq%c+#l6JB2!x^F?Lzdu1kZ$<Z}hC8CpY
zHnhHut5=l@+@Hu58gi%>j?p;a1_6AL)6_#4l?yL9*a&%8P2iS38}evTg0nb1R^lLf
zMWg%x43?UjB($Y&jj3=3xq93n;mr;=jO4a8wJ)irMtO|V_x&#w;icNWdrjce+Qw<;
z4x?x=Y$uqS{^1OY5VBI-6mhpVC_IK8!gV07Wo-7Zx{ru!GS3#q0TiNC{t3KA#E)1g
zzBatQ1Mo(wJ?y6>Tlh;u`m<yIZB1R=d>q?)I$oYR1&|P3tYPV%w0YR}oA#ikW`Tt}
z<X`f7i0;^HqbSr^clhJ*!I1k%$9??BGal1C%fBp^T<({E;n$6TggNUU{C8+*i#_^|
zaT|?Rg!|JXZstB@J!!ctY<3V?R4T4kjoVo{)G9CuJ0duzMyj*dh3`F2T_0mBhkLm_
zzeP7b&Mzq>O4|08C_jF}`BN^P`384;tT_%xEF}TB1^}PZTG9TF_Mx)eoH8@G@%=C@
ze?r+0-5N1ObKWzI1()N_CD%kLHsJ>m{n}AfUh}5yJq@<;g2pQbKNqSKnXVZawsI=0
zIuoi$>6mP5T<~SnPhS7b*fd6qV8tZ4@-U+u4g%C`jdmq70OKs5Bj;2RP(z{8*@JS4
z9tMK(hmeS4x6v*Y+yU+rmi^&5+Ry?LT$ov<>$vUbiHFSrc{PMNZ(g)bTT#4$+>p(c
z+;==M&?*yd`M#8Jm9Sv#PBD$|<V6(~IVV#Ozv&}hc>wuZZ4lf9m4C`xg9*>RdxbAO
z69SqJZO;Z^fJv0s%}ou$@i+k-GA&HzK4{J?u2z=jI9D+8Ttao3tW)e1RZ$vdD@xy;
zQ1EDxD8m(Q^D8mRbvY(!(FcyWW#7swRqei1-(w=5{^mXRs7aJ;<u8@}c>W4FR?VG9
z^S}C>)=?hL5AX!u<pyN%wSJ-)H5`%|AeNJx##*Z(9eW9fRqAO`)K(1qP$T+DIz&c?
zND=PVP@!HHQ$z1XOpr*&JM<?lGXJpMDH9^OudF~wI{Jj_=4gd9SMEcuovnD*`Hl}L
z_pxLtY3N3U5Gq~f`emsw2~_b{-wVidK0l<eQ5~QDI5fYf<j3?kHdb{Q0fg>l|9RSQ
z^(K2S8sOPB7nSLM74q5YZ$H7;{?u?P)4*BaQRO4X{M$JL<TRMU?lKq&UUK?%d4{Q*
zo)(hFHLHW>ibH8*uY<#zxSOQ0@X5{9`&~-*Eh%$On^GtXl8&{=ZiBm7H7by6JZoeT
zA)>$C99N08{bzZeR~vChFeH8DY??(%6`mb#ioI@|yKjq&g0t!C0aQgsHmlA7oSQDW
zS3V{CkA2+hf_nRt;_6Du=baPW4<B!>&eKe*Zp(hW&FfI^TVy2HeFNx&1~gnTWP>Pb
zn}l$xM`TU~eQ@|D>bu%sUm}gA_zn&!UCMT>O7s7~v5U3I*fO}(ByHM@jVp#TMKHIS
z?WF(YHRw*^D%x!bu)QFE@WzQmDGH0Hek8Lx@C-d*Ei_6(Uv2tAYGR5)UEgJ`s~|uh
zE%JBl!+Z$!c9Jpk(%Ts|)nzGa`X7<@!sSD}!bz$e(ce#@tT};$#1*#spuu`tG*VZL
ziIFNKfy<Va2H*GiyS4rPm-oYue&Jl{6gr3FkVzL+%SE0+G-Z`&^cL}me#n{IIHmfN
zTI)PGa)w~!DR7W7g}{dM1MtvBtnK<i<^9>Om{NqiJ@@03^OP#hu+;E*RMXAdAztqC
zc>b85A1uO!eqH?DCv>Hw|B3aFM?R4#1GorAJ)57VMrCmY)5rY~_R*mgGU6e<SKTP0
z>~%Y+T|Y-~I-dF*MgWKUq%Mbk`Un4*1aB1<y<8O20Hyz?V?$P_FQ@Fgwhw&vTwJ;t
zFMU4Y_VVad?`3ZfPOlnSG~wZT++j?k)YL{<kn$vofWP!Kuk?<E(xam#MDk&(`5DZV
z0?SFzxCo~U^qLba27aaHI}?Ud5^sq0#^Nze4fY|}Lp);VVR(xZ)6U?$IcT=f>0J<}
zwH)fbaMRT$3`Q?j$+2qp!y?XaD<j;q@?zMdaWpz>)~rr(?7j?m-R^^b%w7lypIZ0B
zqQ!~)=DWdAt+d@nn^`z>*Mm90rWf#^B=dB&E?(edY|K`2Sb%6PSdJFK%I^-pdPPhV
zATiUD-k~X(3EkI`jgmm;t9x1%;c?OUA3~^ab{XQbw2R<@X9+PIIEPMT`*e(Fy}D&{
zJ>E^cvtPRM@6XbVWj3SPEY~1|J;3u*;_1*sea6ps3X<6Z+9roVY469dp#<WeSt{sO
zo5M2)*pnsHoCWzeJ(OPgThYG+$hU>}A7TTC(S`yjK0W)fUZ&6tMolu&ISCtR$Wct-
z;So@0HY1_%+4@FOq4O~kB8m~_Bhs;bQfvI4H#a=lB{~GQ9AV+IW2VEE0R!4Qkm@%B
zj#bk$PK<mKM2ZJ^*Bg_mSKqFap(^C~*vvpqe?~+chn%)p-C4!XCfm7qqun`hW9dM-
zjM&ZpB)x(vV)TEvrg57+@KOIW@_$gTYo2k~?qqE>t=WUp|HhxegxkX>`(^?1=|GV^
z)ZJe)Pn!rb?0V*XUdW#OUjlnp@Z-mRPqS!q_F*ahR#8+=2s}JtG7z7W9S4CPiDuM<
z=HGk?%vuUZv&-ix&pS{X>}}taCx5EgckBzeVQP33P)l?&!Za0k>vEw8FhMh1q;TMY
z3ON+P=Mp{Mjoxh-oS&Z0A9wLPpNy1_7Pzn^fVIKLKPO20<rSAEq*zDUUo%M@%?SnU
zXIHFVEFz`q<=-CUFwgq%Qo496#w%Q&PapGltt_rGGztnzg1_T@R0=L|`fzK?UjHfn
zlTwoC*@-SH6Fgd1Xgq#bX%}V~t!FKjA?aBiL)gr1U@9<LO@l@pTjEiPGVwcF<<OP0
zCmuNomt*q}E_O~~V3-I<?`S&<Lo+6SEtdM{Mfcxw7;N@|K^UW@^jnKX)gOR$L5Y~>
z`LCv;odsbRG`}U^{H=g*s<fviTk?4*nw-bPq66)Tv8fNa0g+&gCUV*vx?dYei+)~6
z_0BLkiQ?d7YFXB9yfD&lJA%r7e+JAf&NBG%cYVt}Kc3H^0ns8&Tr5`Bc4>2>TqLCI
zVR(rmib)@6k)c(rgVorhpR@g?BWwSx@wM0`_d&`~G5+EH?&W=Uag_qR*C)U@S+n&N
zm(@Lew|DFJTgCTc+~&-jx8>!A(*eU5mx$XlzHBn!#_p*%-;ZEt*7}<Ij&&CfJEoYr
z+psn@JCc>_3g(xIx{n*po@N^VU@L;oe+()JxL>X+jP3D|t7&cNS}d*@dkY{EAy-o-
zPN~)0@Js_OFp{zO#7=Pp`tuBotCJf>J<H!+yElN8f<I!&_*t4w&Lo>6K;*xN5wJ?6
zlOgFbE!^0jTbAk85{L8ns1rR4FjVLQ6kp&Ku(WE5C}a<0B}{M3P4c_n4k6u<^5st_
zX_A~?{?;$m%x3{d+SFc5bF%KBUyE&0SHc`Z$3b9bs`ugJjbiJ?lx+8_==-$dhA|Zo
z8w!|lRl|g&4}UK6>}T?nbDMrufkesR;>LLCN>C&+ToakFDR09$EUa2GiXrK*=Fqv{
ztzc>C8UKGYeN%X3-ShRtw(Vr%q%*N?JLy<6(ZrnCwrxyo+qP|IVkcj}zwh~9^v${H
z=j^lhs#U9MuL{Xzct3TwcMb&dAD2*?fe5p<<Ft9J;iwtUTLbr;q~U*DgX(m?Xt`nz
z3gPvzVZLjJ+oQ@<tIMFw^uKhme+Rkq<q_t<AEA1o^-dwBD?2-yZVpWP<u;|e9EYJ*
zL}Sw<hpE#g>GR?J_X$X{U69vxg-sZ!+!8p1O*Y!<=C+FKxc-2V-j3A1-T37E#{)<1
z3KZHO#7g`NLoPHHhv79=RL~*7>{dHddd#Byec?~98r`@nz<KIpNR5u%6od4&1v~5#
zSPCX|v{4E<p!zU=SF1Au(SRfY0bgumn5#j+qKX^i@a<-d?4Z=)@bBsZ76r{f!|d)o
z49ca-Hkn{tqWxICShPWi+x5m*oA=(yum2@xQ=e~lUi~#@BO`j+l*+}Jqz9I#Fo~+1
z4Z7FsHS)>&?J8f#c-u1=id?e`_Lt|Uaa~*bX+A^R4x`P<qxpACAd9Xye<lNai&lF)
z;n1b4$@oYl5bS~g_`FC{zvS*Xhl*wmx}rq0<mvH*Hit)hiqA7n-}#bG&wD@1;b=9&
z^e8gT;lY`+z3$3{@!EAGCClE&;*j5C#pf%P_=j2fmeU)=Kl`!PyUD^Aj@5b5iv}=>
zAg)e8$!zgtH7rNdV;fGimQYalpUL{Vz24)x=byNEU5fUIN_m7)<QgJ4Vh-`fIx<Hp
zb0XWcC*nyLg{fLZR<72E*A52&#l*;sLHky!6?0=A4Z3(L5p0Y>2t&c4gbZ1n&v@<q
z*n$+tz`{I2f@yrgqozSeI)o9*{w&5OMSvktEp>xCEztaD-cNUx{rC&)7}*_eb^jrR
z7-W|C1%36Bho*Xy(yd(e_P#T^F;!JfJk{d}<iq~btrPSMt=g>cpY5A-W>1&#5gNaj
zK~{c@!~#{>JBQUKv|*wm4sJR4A+<_b*!?}9mdMk;$Qy(E?0{gW+!9EcU;mnpK^d6S
zR7zJ>fWn_gE-v>t$RK&fZQBSikhAO&wEf;wac_xPuYb@Qndf0i^Dx}beKxUP(_S>H
z3w}k+NGCzl=q;8j=;L9JA1l83D==55ZM~daOi#~#I%1F45nL@G>AJLlx0u1Uy33sy
zJO4gb4IawOMMl1kW49uir4YDf{TP@X-X(G?WC`qOhJ$AH#pr<^Gx&oQUfIrtcU;q{
znXDs)Afv$$DwW8Nd8;I#2Vv8{jjJS#Td4>wTP5Kl$d)w0fzDSA4e>*yLqAtJepD$H
z)3IsBJm8vQYO`*J@ui^}L!CfX!D@sJ5uQ43Nr)$2UbFS8{js}Bl89eEhU<3U;kZ+G
z5R;eYw;9=h2141|hpKJxA5m4B!8WzGrew;q`0?tL>CAV$)AP%?(;}Ho<ze3P?KA{z
z_o=gFKxDhKo0!H{lRge}tIF}@Tif3Nmz+tyT`}(S3-P-9wTwd$88ah;xz%lUi#E_c
zKyxsZ?D*Gz<xW%gu=#qN^NH}$vq1Yg)1;?x?}h;wn`YIBW~2)83d%8&FModg=guoe
z`Hrt*FR%RG+x4~ZY3A(pnPlLf4r@oak~DmtN-V||x2KHbkVIi|#)b7Z(<AKACvO%h
zvmt!xL7mB9tR9#EUp9AOk&QzbIs;&$ek{$*XhJ#Xu@1R`@)kaen&y=}8n?&%gz<4m
zkb?H^k)}qFGnWfXM9E~5fyIac!>Grgk5-%VTSq`#0{Y>xH=}u%>>qiw?uTcgsSS}v
zqS4B()v#^%XLEZN@{+qEHu1NrZbYfC)q~BonGGkd=srX<PLH?JXUAF$Z#%`_40w!{
zh*04Nh2gKf@WgtuYx4<q;lv~+z;!ev8yNWUr9O9Ytc%BRthIqSgvZQ6nZvEck(<<r
z%Xz@P5($H-vOa^+E>LZ-oXW9%PSd;jcIo=GT(`S~bK9dE=<@PV=Qe8A<~Dlh(F^i^
zyonz-1O1$KhIj`Nn1Vs9LHByTeoDWv<j*T6JHTzML?M|Chhff-;5soXfOmn;y4gd-
zU0Q-$oBvxv)T#pn<F1#Y8`U640NJpg#&-WtHhi&Qy8Y++4R`G6wx;mdBaTjdcfg)}
zvq0?X<$+c|ZVWy(ZXEgz?L|6Zi{hAUE?Hs_0zN08nl_0rzHtwd!dyCZepCr!yM9mP
zx&z`y?nv9+)sXbJNDoqDg6O<JF|-tW;sv02y00~RTT&+W7=e0m?gs}lQaZn!SB{T)
zch{E}%;{@LjuNwP?uO#F7^1fRDKU*-af9|xECO`;ffb4;Tikf{=B<*ywjbFHpg_XZ
z^$(!eaRAW!vwN78BU=?a&SY?eb<tF-?KWkc<+XO9a(FeH#%4bDmHCC#d0%&aAMKp6
z`E|J{E)|7qAGGf90exPYxIOk1zOC7QLzi;<`Lf@YcAJMn!o+LvZZ>i*X6CeE=qBFA
z4|9o!eM_<a`MzInu{9Gt|6%yCsuKmeH`8$A-g(hf(zxmJui&`j8)-Y=e!Ed;za>}p
zAxsZVZx9#`ge{eu6j!8d`wrS2+;xn*k!$85Y)VYj5Prq|7e+VR{*X?nL-*JvwZz{Q
z;vdjW6>D7+vwvNPc_W5k<<%%hY*|gDai(x431lpU+d~VzbX`?4Mij6_xf;ph53xrk
z5+Y+8!>04va@8e;fA?zqcq%uE_1ec}Z;%(jT|=Y?z9bGXYuCR=!w?<3i-|p~;$+Nq
zcQCDc|M0_!0?(zj&nm~o2x0~=quQi+|8cZ4SS_5Vq=|u|TCK&F)F%x^^+Q$54&?t+
zwg|7+{UQy&xH3iTYgq25UY}lf{7t>wNMa%L2VQL4nIV?<lR%C9b;~hYtkn36Y`NWX
z#d-zk(PR>jB2S5>nAQ4UB*yKSMU3gVwJcwq5+6^4G{4o3Y9G<hmfyvHA*$%O{3Ju+
ztB-y{+3lx5VtjKC-5RC9a%mwKITKS7i)?U5HqxaR8x!e2pmB>r?1}r^!fK96>oc5*
z(NBqq|1pZira8oSVUvN<M5KZQB(iSk*Shf*9cyO;kBF@a8JndZ!a>MG%|3(&VoH)(
zPcVm=4}Lr=ewO|Di0lqf(HuVNOS-7J!Mg!!kSl%C<yVTWWCD?NbxZNLSz1Ijy<GV@
zH2X(B>fcv;L8{?KTY;(+>%iiv+K6fR8_SUKS!OqK7<{ptzROhZahu48fyYOs&H}u4
zyM4y<QDN8usBPnyw^!5)lS62kNP41OVTO?V;NSc;?;H?%z94Sg)o+irj)yp}vk5A)
zpx_GU!$D9=MH<;dW+6(3K1<Td!+D1`Z;Jz^{>3qmhv6Nvu%bwA!w>nLpc@Zy&}&H+
z-#il9wePf~0YZ*xQS2>IYn$VT2C)&ghr8_bj^Fx%Q%w@R^Phwv$yggmrWq_{`uZA8
zPsT!q#lF^zhlqquzTf2u*USp1{fcC<Ttjx>@f)JIhdS*u?G^RBD(%v_xY6R-(rvkR
z&2ZH;V?qprG2XW;Iom7z{qgwZ@F_1i!yZr&W;qX?$_Z8qD{f!MiyqExJ;02Iq@J7T
zIiTM9&I7K=g4n?L{u2eLDn~801Uk(58cw(2!9)z0>NQl)xQ5T39TJ#WUWcClxYR7G
zgGhzik9&umP8<IoTtFc_ET{@lcy*fnENhlje0#?!{K`adnp~T-4Bs8<B?5tC5(pT7
zkIq?XoRzPW#Hu$t3%G97uNq(?pl+JT6olCDQ(9Td5W(H(J|{8W*S{-t3HbQE-{ef)
zhij{*wxF}EWYGzW0=WOS$jziDKLu%Ke(U+}6A79P?k9CE`2(wJmi(cdD3QsVKQhEM
zgOrQxH|m|U*~A}qs_e4(lN}p@_1r(RuuBWfU>^Bh_TSSDMlPO`8-;y;4^qngsPJFD
zBkR<H3<BuK$x-&JcT!j7EUnX&On>q2CVq>}=l@K{K<G~=A#d!}M-vM|?$<c+jlKGh
zqU;3o-e-dH#c7{Uge>DQ0Onhos={I`Nap|{Aq-W!0J&_nc2NX#hYC~6KX^UoHxF(1
z^^dl*M;OyXo2QhQ0Jo1Z>@G#wzOWA6@7p8GoBIdYcRl=1mwwllm8GMb1kJN|A>rTO
zTSI5s1>3)WkYXNafu;kR@hM(%k7WQAwEr!ufxH+LKd?SR2(o9kJ6@uTr*95kvgzbL
z`TKEF!v;7iCgH)tw2qc@ANcg82XX?H41svS3S;6soYyqt?`+XbkD+v>PkOy0Oysy(
zA~w>`G{(-Fwh13wFh)%bB6q%SO~yPg5EvnKQ2DibG|?u)M)`N>`_M4`?$irZl!@NQ
z;?me-*y-j<os?EHV|&3_qn;}fIDT+e)&Uc!gb_m&yZ95UN5(_6Z*W#?hyCTh25oKG
zXV*#G^_jce+q<6E+Q}3lzk=XPJ>PfmDGXiBY{4lJnG+jbV*gw)_p#3z75eozLz`oQ
z2apGV``v^!ZFJgaU^b@X08_z_r1y8b4UHB9Kf9P{v@7^<eK$aLe1=Z*BqpwQ14aH9
zHCo5uLe<k{dQjjs<v+i0GzIO~`z@H}AWh*Fx31fy>g1$`PC#dg=4%I_M)S?X^Pu|J
zM>M6fMfBS1Uu|s0F`Y@4^iF8PNH5^mR{uibyK|4N*wI&YcY@$&LYhK&0#3)?BBjEu
z&TLmQi^BFU7DI8m@aY4*-WqAk?Ln(7HvEt$`i+BW`FD1^!l<C%n0z@=DzNF;Yej^-
zDgjx9c-oF6R!~&4NmkoxsI3#A=GUv%FbO&B!&)Snc@9BFkC5~o9_od{?BL~5$VLM7
ziA>Sp8t%h~B$LyRgPfD)<FDWBjR@DaVrTtJyK%AAIOU7d@<XycPoe5nIgVS#{Fiq=
zR9;!A755K1?6xu9FZ2eB2uvM7%`JzVwRY;ta+mR$P*B>Z4)PKLu1qyP(xrgXA^O&{
z^rW_<?8&`Ttj}-?_}$=1^sNwXDaRXmL+SUb?i&tTOZHByev?xlZAkB*<-~_sdo~cE
zp>`_*8jbtT^e)|nzi|!K*I_?nzCNB_6`L<+CKWp`aFx~PaXHvpa2_}eGboRXwXT1T
za-|w#e;SCMB@9^kw<Pp44~Z%TAsR)tq-OoSK}W-fHe!q7rz&V=JsSB9<y!l#Msmvb
zn=w$evGR$)AT={HwD#@KCX|0+DoITt#5dQ!@eW4)&;sE77DF;!lzP-zAB9=Ns~U*n
zO*lZ2P5P;*$KBTXcSqjhLcw}z^NQY~*%w0#4wPyO05LxHwoY$L*`=7%m*V!!rym*7
z)*HRzy^C`|d>DVjk-LD6N6la+JxUrLnbjKo4-s`^SjH&L*P3#+QujadZVxi`MgLj8
zfXvlMK0ldI^Nqecy^Cm|u)X|M=RtY?4-(jpa;W~(o{E+?8U9lXr!yVO6_^bcXO`E?
zqWKS1X~wk?uutdCHAcNqY#p5;)T=29tDJ?*P8;c+Jrt||_wCrG^$TfyUJvR#njw7u
z6K3}!)9Q9EytO?hWjddFhyTH2`&<r4sp$aI27JVO!0OfXh<%QRZ==}0^aWo^*r4*X
z0wHdg_`rT;_<|o%_W4GLL>%E1k9n-bC2=#$g=T!yWR+?)#0tb%{~)qQYQwgKeE}XG
z_CaP=)HG75-;^`+aMXx9*P`)sExq$%62xt<ukd4D-PPXdW*eMbdLkFCvUi~m86es~
z`iayjA?OOj-D{T1`6fOo2nru(eIlX!vaQ8&d-K@@KmA6Al-E%WO3-CM5yRlLND~O+
zj=I$mQ=LKzyqDFHsbMyj3Ji`HOs#t!tzMVr-N%t?JYj?)!owiwJsiL=KO4;v5TDkm
zkvh)g&>aIuPO~K_%+}B1eLD9zO<F!rcSaEvFEmD_C#+3LUjH}{r|PH3)@=c)fX)05
z{uLdE3T2Bt;n~OeI=z8qwiTJL65xT+5jh)*{3$3IeoB|wrTcE2<eT-AO#;sce;sZr
z*Mo4y;K%|AHd)xnfHz!5N<9~$oM;rPgsNcRRH-R@6bAE`uKsH*!9p7|!aVws58pVz
zXjw$_FNL^z6;r`Yhk&P?bRnCUGf|wYIO2z50M{odKO=AicuI(bhVuaBT~hotCr@=(
ztfh*BR~aH&6H*F=83s1wumsU<>jqmAovg9OblsX7`Vmk?$=V-7?Kq<;4!Dm@Y(3Rw
zF9d^rJzCX%8%;7MPvBGWjq-x&Mr98h<Y#jRrkN?NWJ_qrSaF2H071^whKd?KgMIj}
zeT7@5WYRECWYcheg|yxP^2B(0`cx-*UAA~I2zh$_Oa3nZ`e{(Va+#;1dW+4VwW7S@
z;W3~VP)DbskZGTv?f%H^!LI(Y+lVxhbhnZ74<4ozGwUfd%>$5cwPdpdBK*__FSpA)
z*JtM)O!*i~XO~H!x)>DqamQfYZPP<yfvJ&>tbYm114}t&_t${HX04-|D_^@}xBb!f
zD9zV_SgB+(%rR*&Aq5SRf()ty4LXHeGj7PUiGWI}Kw*dc0e>x>`IybRy5y9>zEVjX
zDYUTnA#%ubnM}sf9DJUhMz$zya-t-(J%u-+Ej#HGkehk{Gx`V<QZsZebH%hCGm&&U
z2@(&vnmXT(teY1toU!kq(~IWhf;qeDoWxtD8TlINs}<k_W14k)`@Pd>vGU2!=|M}}
z#-jf}z0JpKi1Q$xK6y0VIiu5fdEue52`nEeyhxG-Z@s}82D9xo)OMpy^gjt|n(vJ;
z%e`-6>SJ}i)!;wXIgBQ=6akxIp=h}>UOs>q_{(We=6XNCa{J}&E#^9jCTEj*`ieLS
zi~jdAsIf<npgAu$MD$Y)7jp|&NDMh6N@E3;La$Gq*Sm~UO@D(#zsIzz_Ih!940N$4
z^5b0-jerm_zYm8+`eK@nm^Io10Zq1i1%`Cm<QGpg!`9K7VHGKt%CGKmLY0kTY$1(y
zTDR~nP^%YuNz3L}N}VfG%mv-F*xyfc>)T_*KvVG1giN><pw}t1f#DQhrXO3HZH=G(
z8gR;F;?lhh2Da<Km@t!#X2sm@ZLSH<P`ah4iPgoxTH5wWT*Xz^QvGypGyau&)P|I!
ziVoIqrPo(|+tqvFv+L<&X>D=pmtdWmx@UFgQuET*b^F$}ikXYbpHZX@)&J`Sm}<JR
zEqTr^{V6^J&-DFM@G~%oyeQ(=C{!Drh6Hg`B$Nu;5H3z^qkg`_AQSg&t*xEwZBUv5
zwnvC_J_o3-J+O63Qe0)qTA!7s1jC!cI8nt3b<=+j|0f&6qAS{!@@-<c&jvdr=XF+a
zd}z|d;R1%a;9J!ojIt1~Wu<aO3_T+3k?WIIgiAZN!QPnR-j*e*od-~vpjJXY{OvBQ
z-pe*HuaaolM%)7iy0O_u2}O=@aWqYp$KiwvOS%Y=m#*DmeA`R3>RGTlHs;T><;OqC
zs^pkI2bM1@G}Vh4pL2DVym<b+E+oZbu+e3_XIC_~oTV@>h^?WQ*Sm2hZ6?n(Th7<6
zhi%i|!pz+Vx8HI#+OHFGI;u*Mpw)x+AA%)gPPasdo%6j_tm;e5IykBm9>iN8+on&&
zuiJoqe>k{ajFWs3Sj{dZV1z}Cqgo;4X+<jeO=*L<1XV;LTRelm$Kkhh?gTeF2kcj#
z{3a-;sLp^^Yg@pY97FuABJx<>evZmHTxDUpO1=vY_R_?$9}L;8eF+U_{!~Z5I_h<>
zz0(WHHqbI8cN|M)V;?ry$P9E0tLU~2xJN=9o!W(~B;jW?2~kuMK@0cv<mw$!zFg<{
zuK9jUe?UR<;`s3|q<ZPUg?SkXscw1`w|)Ps`!Lk~UjB%TsA6xn9=NicH+Wrh2#`AB
zX!7hghF#_F@Vrmm__~yIn#Zw?cmA^J{JU?(>?`tV;qxf`L1NIR?8@iNMVF8`_<7$e
zj#r(P{CW{jm@Pn-&<NG~<R?(3MqlSVEalXT<2Z4(ihA2K)@Z}UcR^;(M==@_zslEJ
zkSe(D8_PL>dBfZ7DhK_T-4x;um(7x!XvFD@hMTdIy>C3w>TogkFSHeMrnZGRjPN<@
zp7mFMZN^}ZRL$PQCu6Er=c#4C?LH$n%|kdK50PtPxmk7WS$wpSUYg>M-$@8GjnoPQ
z8Z%EYvo!?TwMpOWeD{9eC{mt^i|y#~JM9oAO~qRuXp)}5@gT+X&c)@Rm1tTa9Fjb3
zFw^H;^{&MY_$|lH?q4P;{kDAki}N3t*PGoY`kX#KTchjfam}fVQhw*q`JaaVvJvO0
zVBaShjcgfR0!Y)q3(3%-N`>VZMi;fd%jmjZEL%2~dqMQiv9T0-4xRBRXDpwZ&;uOr
zBO~Rr)D~9q{c93?o7+P-?{th4FVE~j7kEzSvqXlf%!oafs*@bUawx8<l<+eHT}F%*
zzc4)Z4L-9f-s+v(KD#UD<qcY-iJzwm?6OvuOQI&nyC5O}`nvIJ8}U<w+VNp)`Em<K
zphH@{uZr+mb}m4J)A<I78I;wl1zJtAIegHB$?hLOYNqcDv4aOVP*nsg?a5P6+ll34
z%f_s{2EdO5(!}hW_}*8GTcIoQO6RXAh0}_2a4nd8w|j2Fxo)<x{#n_6KDl?aA@FzX
zz^|L%B+a@`?nB%`HREE*g`kCeWv4d%Hq3L;xI5As*m8uf?Q;lyiibOQ831FJ-$nYc
zngHPRk)Sr$FrD@jhsP0;sG{GekW7g6Gf@~K4-=)urXxGphPZ@7qfmPLuIvw(k`^ZM
z>ud46NacHf_I_DgCW(#l+S742plJ~4dVGL!lFZBZ)GZjkKLss>!*ij+6vOGoELB#f
z{zBNRzuW@0SzXh2UE-4@nIaw3P7V%yg)5<AZM}!%M4O-13F`yqp^Hv3KSUXdXx9ms
zr89oflM8BDjig-jmtMN)n!MwgRQ6hkkdt#Hnne5y0rfqyBARaq2-PAG@1^WaGCf~B
zkK)P`4Q%5rNum|E=+HeDmQFRn>(RTD;Odck@Myy^w|^$ygdDWlZK8|jYOApcNgSaE
zWPXIaCg5TxSPkQn4RG6@Ie@DJ^ZwM$KaGd#UWfqFx;Xsh+X2T+3Hfris_OB{j1MC3
zD^BP^Z&KZ=;6yl7XiW#yQj3a3;-SjUQ*Wo!2FdanlFrw0IpqC+!89?4kz3D^{YK;v
zH#>Kjv|%{@A_X^z=C<<>xDB6Q3249yV|I|pG3bzkw(7i0Q9l2N=vupt)+1r+6<^0W
z0%$wUl&vQ4c$sQbn<pPAeKbTzlV~Oya*d@mKd(`d2O={`Kn@%CaBlIQUE}2j#WP|H
z{=9U+OID`#yvI^f+v>xN^4cFhH2i2-I!bnS`HWmJR~!}Vgis@jZzkPWz2ng~h_w>@
zaPMp(^^gcft;S;0*+g0gSK@{Ph+r6>MWR;nz}nA=Y5<$yk|?ZM_>fUp&5mAy<hQUm
zrSwx^LUFZi;T6_2s%qGS!_X<zm{Pjq*p4mu`-=QWC}Rb~U2)~ZHy+;Au?WbI0M7=f
z<G#t`r*IlJ<x~jz3&w#J{~n2ThsZ4`E2bo8P5lBd2+=yPf4&L}*bVjG*avnWEmM=#
zBfDwy9(J#Z(Zm9@iZPR(P4v~Wir@Ac1w9ys`euW}x+<ZiC93Lnb@e;`L<BJ?p*g55
zbyke49)NSy{WOqm@w663ArzoWs2}I4ugQOCHOorZPYhf02mOmvM^i3F<J5=4HK%8h
zPUXqc<y!(08oevA#ExTKpH&N(GnOM^Cs|%Gd60C)jLrZw4r}IkWmBfd=kje)`>@la
zlW4zVHcRD1!N3X*ivqaew;Y*I4j_g+94XOnUpVO4hoCn+ZupwHJm5_8cf;H}u}|`*
z<bPqlB?}zujHf5sE&gbkRgYsw)U~p+kWoYy&>6?0xE4k`tgv(V2x6234J1@>aAAb7
zHc-SWTP|yyZHbCPd=qJicoExuE%V~GVkZ>{r1d1s>gG>QQBEmnuOzQ}5_YRhdOj7~
z4JM(CR!y?>-Oy2<u9q;chn~o%WjOlw?138s$kf0e+~x-kq%DIeak7oSgaQ$D==J=#
zC{%xbv%C_aK4d|9KL!nm+*@li>DDO6I$h^r;Qt6{bG6o>u|(ieHn>2|1)b<69JBnU
z?;+>IjRLMZF-)0puW@Vu_Ga>e5JeApMi@K_PbxD?RL28W*Uu<SVuFG4tQ6Ng$T)CV
zR~T0SRBR0KV#)B4^Vf5Jv_kg6=&D)eWYx%hEmh@Y*4*f;JyG?ft9LOxRJGl*3uZV}
zR;td7RrOm3@cwE%QF;{~EhY7E%<sUi-a&b}=$liP`@LH;wbTp%jdI{>_2!_@(vFn3
zPKi5!lX1RpIBx*9Rf-$ZPl^;n!!&njVzVd^v&c+^uWH6%UzcX0b4>iVFiRW|%nbcX
zZ6FU_*>R3YZy*o5DDDA!GOs;(RX(OIV0^L(SaYPJ?YamJitv=Y&?qNjHu{(PX{F3#
z&kG$2nCImjjw;7TDQ2%HY&yJk3^0}@2Oub1*>K~=GW8T~j2M;vu5L;|W$n)uylDKU
z#onN`xOvKro#A1q{79^`5O*WauO?Utnpp&JG}SJSVLabW!vF|0<|aG@?YUZ1xJ*YX
zPM(|E2sizyFF1L)#<hpSW=(;`6VelPV->-brEk;ItE`74h)yd+h37-C`G{W*Sm<F~
z$9eF}ionzOiQEI${C)@0w<7}?@UoqLu_bZO;2=fjK^6$%C&fe#C!&^JXu<KP%;=-)
ze7lMMhwdHXLWX>(r7u$)G>P9L1~<(D-z!!<A(16mXNm~^x$^5u3ug%rCY34pS(_9`
z0Eb%|?hNB18wJRo@z06y^kApnsl%R?a{0p8O*%S;L&S5`^m&T(v2wyJJ#Id}sjh1P
z`2eANTm=1E6DXuh%v<g%$U|Zrk9rrpSD^$rX@TBA0Y)Z|k{PFR;RV#8&_0GiWOAdX
z)i2elFc+U;?SMEzw-c~gbgtP(>X9V%@?!2h0>Ik11HUY0Bh0hYxRc8PTD`{B1b~;R
zc=3_KugjBgxk-l8g^h4IxtzJ$vIHI;dyz*%otcsmd0sg>lAehT>3g#awV^>a0tBTE
z-mdQy7&NA)w}HgvS;=9iW@RMY6!pUz_al4tJnc34^ODI$0-h?=mPATt?@pMZAXG_>
zaLG5{uU$p}XzL~_dc8V&%(gS*Fo&2N^d7ANLooZz%OQpj>@(9Xg5&F&4gwj=y_Fb3
zNAO0E-8v*F%@n?QRpudUGfd8FXb|bKTHSDQgZb}Y31RcUj9?wZ9)wQjpF288QlS2H
z81`qWCm<}ubbf4cLK`WH<*%VNxy7jypw%WVtsebw>s^y|{!k}q_`P0pL5QCMr^5;2
zAv~<=*7%kPSx91)q`r+%S()5bY?8^QuOs0L(F|6XBXx2_+OwmlSlmCHb%v31;y*&7
z$LC>iI%--5Ydj{q(As_jKkB0t9jx;vF7Yy!L9xZz3A8#D%%g4}4WM{$^>M=HVR{1t
z;Qfl6nqnSb*r3hI6i|Syde*akr#{Q_G|5z(xFO##8vhS*%P_T@ZN6Joe7*)tpS+|}
z?^p1|iN4b$ZsuyW!$1;HDU_0>bYS#c?oW^6Tyv-LU#kWM+R-ZSpl>XO{@_aHH_RHs
z^(2}OikU}8lqF5H2kb)bUORLdezDl%8{^pa49l!q^^blJrrJLiShL8xPK#ot;frQ+
zj0@9nl9wGCk&YNp2yi)wO8m+VD4c8sQ!Rosxuwl-t`iqQ2*Ji_bj2ngWh|lpe$MMU
zz7=WmbT09x{Cgu>PKUL|uCk7V+Q)u3?N>b1NmSB=vIzLB?Wi;RRDXH+=U}Hvo8#>;
zB<W*-oHn@A6o;I#jKkq%lAtQDR8mbLLUfdfp+H#};lk80%uJB3?fGN$c~i5}{bS6e
z3-Qj;RHn|%zaE-7(;TQ23mf5La|J1z$Hax0%%#&8tTgVXLbkhc9?$|$5PM2k#AL;#
zQH-nP=q8t~QdJUZ$E6iaOM$)uPraQ)NlfL*{VW^6*;M=7aa<)scj?r`;$WnY4bbc+
zVR4i*yBdU*mSGTgS}?96=pa*Ku6VNhdP8phGkZgZXvY~{^S)Ko93l41w+<o=Y`HP#
zvqS&AYJ5|@flvwp%DbHx&39-NnXr8na(Gi#exmxXMd4PE7`P_ZJQCPOY4KU!60uoU
z{M^s;AEm*?Q>*EPlfr6bRPmgkyKFy)MN#6NiPZ)<Y+RnxOPz<UJXdX`wxQ=l;=`Md
zkDC*23ZED@1}pMCJ4oVSRVSFW{!6)T@h^#Rle7BwjWhB`$u(^LSQ1<PT~h9g<Z|Ya
zLl7q{r5%e<$>61ZXq^YWkB&t&)9J-~_{3E8$;B*I7XPE1BpP2EgDRV>PKI9G>qfW&
z32#9?f`!x7N<DzzN5WDvrHG@Mys>~D;B}9em1QtnfFKxKfG|CB(TA7Dy%tuPk<DBA
z(5mX-<}tgkOmm*)9fk8GYp?iR?>ju-8p1RDid&4$BUY`dPld@M!2qBwM)GFbyHoNg
z_nQG5cvs$_sZ@+{Z9Jc$9?r=cB#a^aNVD#66f<}~q%Ug0Qe&p=ZC8m5ck^`N!;r{z
z6EOJ`?inl-s1&V=w*LW%?K5V_qz~~<xn~gupW2O_V|KuHs;hv%xdF$m;S<A!@r>jc
zUVmQ(j!*ABnD`yCr<qJ=-#Clb;G34{39B<KQFB;=U6x9JF(f2t)&QRVz?sCp%O2|{
zj>wPlgX^1ovi3ua34~C=2$u=!_!z2;H}c}Il+}uHE1HR#s5E+lf=`ok1E+aC6Tnk|
zf&T<MZo`23k5VB!1hAcTvG)PjMyVP*R41xY@IjL-j)6uuC9i(?VF?`4W$%5r^2+rm
zt0EoRcvfiV?G?EYN_i|xF|XduAB8|C-@Gf!oOBN(nbm>BRv!dI`kqRNP)K}nUPMX-
za)>krV?TIyqkPh&swF(FMI3o|2H5R<x%4?>(<-HZnUHP%VJ<^fcOI9{ISCQl&S~_B
za4)b2lbaV^#6n|4Cw$&>#w%-A!Qy=|!##r+y|}<=H}0>;L{yj{M^Q3!h@E2E7%jG9
zrnR=CRHa0UJf5fuNEJ_|OXIIUl^hzv2jp)3=F(h&f4RhNS*R)Px$u~j{W^BI&|EaM
zcJa+M`GLa{I!s!gVHNFX|LsjsY86s*W$E&}=B=r|=~4iYzo0$bBz;!VIqDAyN+D~r
zqkdvpZ7#9t<2)78+IY)Xc&b+N(gBZK6fy?am^W(o2RkhY@@{A&x^=~PozE#Y-?HpS
z`JbMC7O9}or&^ycU@VM0j4i??#~<VHVK-$<r&$S?i5nwRnZ!yCm~f}<G_L{fCc4K!
zO3!To&Sz1N&XFb>y=-8jre+uHMc>P&-69!lulu!v15?}2ufXagqm93YKIMHyUSno-
zmmZ8l-n1dKR1MN3bB?9DWnOLBqVIWk+Jicyk!fXOph+BkahJ)p%g+?v*|)XQB@p(b
zE(m&&6A(;z7$mOP{yN^s5;_3CrFFxN_%Jfr+m<ovuL=&iR{|HqhFpjU>h@=CuCO9c
z!3|gatbJq>AK~AxM}-(HEn-NxQhxtn2rMJWlrqm!l>hOk$O{9Bjr-<sX)%M@IbpDr
zj&e;^b<oxAiWZYAc_j;VDlHYiazPTx=*V+Ls%O((PY$!o11RXS)sP2GY-A5!b$?@{
z&`{VILP*MWoXD?<Sitm?rm%o!fE2?}RXXB1gBZ#2igs(y|6&Jk74h5oY<FOV@?Qn(
zL!NzGC=p}^<?0TJ&A-UDrc91TCWnO&lI76ghw#hT7CE&gM<fDYt<I9N0t!)Ne%f(*
z$ETWPL}FKRZVTa-<^5*1gJLC%zY@SA?^F{@7lD`)!>Vv~plG+WvG>@!3AL-$7R)E|
z>YuNB^*Xq<Qj%Z-x(H)E#X?8ZFjO6$wbSR=7~$kcz4$k#jJ*D>ircd3uQNG`P2eyv
zco2^<*q?!^ICe+vq>aD|BIi;zuoK^0I_09Dg;S;nmU>6pgi>D+XX@lSN7Y2$h&*uY
zaY>ujk;Y?ITit{p*sF?DK4ianHmY2jZhA<QITQethl6p$i6=ctH;5k%#b%Gz7cG&g
zg!-a?XRj70SHwkua@nhUMRGaQ70qCJI0d#X7U<;Nn&&U@Ddh;fuGV8@yY#!bc*mfb
zD8(ZIK-^&y_><I|uzymcd{%5|-T)_{J@o_fS$9fsY%7MtF)#Y9|2Rwocc*_KI4r>p
z?F;hEV3o3#Dn4vZCE#FyiNF*9du^aJizym2Ji7-U!OM+o&0gwgRQRjC;b)(oa0EG-
z;g8c%EB(Y(<4DIOCe-!Sz?&q-wHkqaKGUkBJqyK4Ne3%MA|_7PQPx>YUL%u#A~y;S
ztS#v?=7zT+^XP)5=?B^5t_-a~d67!7trq!ISI7`O3IGXp518OWS3{{G<ViBJUM#S0
zApzoG91?}p@UDwuQHux>5%eQk_E)B0D#)Qnw*aMDlj4a^%WF?w%kUst0wqFte;z0*
z<9z7G0b?YZb7*Uj2u0?Eb6q0v!QJ|-mr{^hHK@*!i5SO=4oO8l$zqSOQ0|B|zMyR?
z%RHa%e~wYkAS3PD;Fqh!&qV=Hc;8iU_TLYTJxhX835xt3ORp+9z)4E#PH16f3Lp3@
zXo=3E-2qX(Vpy{1XZp?7ZL3`$bW$vwoqLDYx=r8!txCuU)fH>?AW**sI(!SGeYiHS
z6hphtGgqrQ`NYJ^YwnuF+TU$bL5HAN1jouH^Ga5A_dUDtLC`4Be(VY~$-p{lTD9V`
z<M*6(y~zLuoNPqid#ue#X5i9MqpE&U!HNBfe+s#!Q8qtXl<_I5gRh)p#O$3IH9VMB
z-a|lJj7xW1d)CH~#8LO0YC`7&2_&H*00NL`@*T4-lR0rWl?5JZE5Ri8CN6iT2uRki
z*w<D#8HnwCX@X1A?_vzmt}rA#qjHikB(N@s@1rS97u{;w(d&YLEb?quTcJzsDfUX9
z7Z#uZla8!ED|AAM%L<*2=-WOSU*XU$_IqsIBI6eQU)(MD)LK|IRYQV7wJGa?Nk4gA
z2IZR^WlnH>kn}q8q;0sV@SN#OA1rTZJVDwK`O0zaEY-(r6UBYyx1+JWNDU1|28HSH
zI)`t3#%X*<rC>GojWg=FEs!^c1-U*nX`$^7A~QV-Yb1XLA@1^s-Wqi(rM7!&?*GH2
zUhP<N3b(>KXTTLYR+WO7RrqETW`)f|(@GLA)Q&xte`q#L9Zh*QEw0=IxRyK1dk4Ny
z8-WcxJdB!{id3%HSV`4eramaq?c-}dGqg{{EYL`f?16(IrcZ7u*<d`Wb-16Tk#DgU
z9Yv)Mk$8^sjh9`iN0NpT+XJJg2rY8hJAw}{>&1LKy(xu-@#Xoha8c81^kl166Q^wD
zRdRs1zTox~av>*naMV_Z+#+-J6moH`{-yS9Y(3!h)U*{&{kpF)<)`E<LA+jnNDYUT
z!~r(AaNUZ!>n=6{#WtipL+0S9`v!dwzmOS5ho-eT-??iqhou5)E2NCwrh|{QNzy=F
zx}_wg@`XVC`6|Eb^#{LBnMQ-p@n;{>whI9hTG<d!knu6AN0YMUOmY7dXHZMa)1P@!
zv3THTs)a%SUdG+mL#N5>$ksg7ipa?_5(*rS48KXR$&$n)f!5CoRx*3NnpJ|sE(vDx
zyA)rmDTF%vm7BO&bFOsbHfScX<g+D(F-;lR?3hh^o*#(3bGh}8fJHUls&zLz7GeUd
z{R1#A2<EiRQaY*t<Y1|2JJICK{^h4fS!$)*yMWzOHe-hu&orB{sBt~>BxXSYJhr%t
zgY@)wWQ3>|YZo~}i#6(Qg;$BdICWvGZi|zat!5Kt?M|UN2p>-{u)Nmc^lwO>zG?me
zfl)tH(NV;|%)wy9pc%;1<iSs=eNoNe{Kw@P@d`?Ol-`<<Mo)UVOHs1j&uayd<w#Y-
zG8Q+b?!bT-xX?M$8oV2qRx;Uxe8O-yVh9N4C1MCMdJZ`C!*Z<zt86e<X3LTnJEnQq
z*x|%y!|d9#<XGXbfx{8pzG$sKV=a${8~CODM~R0q-MPbJfjx(GBb9PDeib|vyCDna
zs#_cEo5h9Drn?SE{MDelKsBr6WUXE1(n<Bs1b|8Tuw9n`0({EpH)&hrYSt6VL=mdc
znHz}_8<|IVTfuPEKv{x}zX;2~^7E<=iC55jOzj4A(b{X4RFlOr8+;{Gnp$o2Az6#=
z<-rUdnZiFMR(h^muR;eW*~y9lZq1&so~T;%tTtc<UWFe-OCdx!Ys%_PsLv4`t|9n!
zDm9$Wr#=$p{94r4TLSCEI?TPYO#0=dIWUj$rFFG<yUOx#&1rmL!JemPXgi;33&d(*
zclPQ94YSZ<F)d)-@@4!K+ndt#0$7;t1gL-zT(aN_{<>F(V>Le<vK`(_?luH|@$P+5
zEz|H&@A7jfl}U-+sjM9vz5zakuBG!%q<{V}S)L^oGf<@}iy%*IHX1q|t4Vl@5dWEi
z!Zhc`&ye8I?>vRDERT);S>!eSr7%SN`g0k6pP{zoD{GaaK~$oo_U*>VzKFw>pij(x
zSlmVx;>Lsgb!P^y_4lzoU7ZY`zWiDm51P<~nq5jO9ggrE9I#II(9j(Q;7X>m2L<db
zuIkw|Vg<s!H^W>mDY#>ug6L)Tr!WzLpblz>d#PR~rqMSwzJHYy@Ouvo`oFSAvRkvU
z;eKL^AZ86i%ja1`>>VLSV(TG+^=4?cxG{$H3t`y@R$Y*x4S=Cuu_VT%rKT_ce}N)>
z95{K0OHyA%--HRNAVyT=ESILMP7Tn{{_pbCcx@r8H1S`JQjEM*mewbJ`vARyEoi^e
z_U{Fr306m~2$g6)B8=@4z>Hs+`LyGCNBVa5&1E%!tFVR(=&o7_I%UcdY@DBD=r-Lj
zQ72?vBv-C2>D&S{N2qXA64*>Y$Fhp<I*fwm^D@yyF24#j*VQGhv}{-PHB26BncNHa
zTTz?dnA(R4c)~t{+!_M+jDxpvbqDf43&CZNO)s@Kq-YT$w3aI^z0Mt4f1q@#os91v
z(O3h<7dZw-S_U`PtxTOv3eMHRbsCsX@Gb~g*3{gQRJR$(7>rvNldln(&iS`<=B1E*
z#nEt7<)EOGjLJ;%LW^;UOg2I}o%X>41<hL0Oe~k8KOzDZ5OXM?=gygyDJo3gskgwY
ziP)*&I7h>BxVT^x;_mrR6X^4I@0|qLnNxuxOfod28Gitt5(+ZZeb~aQJ)(j?g^Y&t
zM$Zccdr|LO6(vT&jd|bTh1=bIE;gN{i#THx+YG9mT>BrVM#$EVZ(gElPr;+}GNSOA
zTbr7Nnw0CR&nVs$#yN?(k9zy;mMc}X6LI%3M{ur9KT=Qj_R>|4%nzTjT`SR0Z~Lc(
zwid-8oK*Ql-V=P-g75E9eqHy(M#~Y}A5Q8?m1QJh@(nDJAuMBpwV3Yu1C&Go!+*ZT
z>=d*AtH9`GQ!-)i2R4Tqg<rO1q-?0L`{obRq0L}#JJaJ-w-VmOh<)E_I(TLo*ldkI
zr>vHT>>`qaP3kB6#+Fh;#iqp1?V3Zr6(xH_DiITp5iXD`1~-!0&Zsx&@6aKZ5rYM8
z>M~5u04C$4qyxMuL<)a0V-I9$0o7W4%lJtB5HGU5q;KM_b)$Pl>!1^zH)!nmMK^yy
zg<XwH=rU`0mQ~OLn-%%k$)w_IkOuPG<@pzKkq1|oXw)2BmeV7!52iO8Gk=;A(74np
z80`mLxUO~Bk;g9%-g8_KD;UE}E}lQ#^NkeH`VM+^AA<d1lenkDosGD%`=hG3;g-8a
zMuQI}j%W0(Fu$IDd8wLqf-Jg?*5Sz{;&x`9CN)wF-6R)lw*-=n@P|Kae@+TKHXJP&
zlcY7Ju>UItt3Yfqrlt)p_f6!pjMulCI^y`J)wpH%P-mJhO^!zgPl?ZjP8X*BoFbEE
z@BO~=Q_WnezYm0H|JMr;eE-z$TtR@q%*~{_8_0lxh$lU?`hFz9b6qcAsHk|{UxQj$
zm=(V%nZo+&f4|*F;zlx7XzUX5sxuO5z6C>IvGFS{>yLA98x;cJKIbj(QBh`kpY;M)
zcXs{NVi0IqD+aNbrs3ZfmpGl9^?fWW*0WE~OqqLE=u3&9@|W=C<wYL;nNRCq9KXY?
zTe`Ofol{J?D?HqV01U~pOb9c`C0Z8GF_Q@32Le;U+8?EF45!Bau=q)4uuP07(9C<U
zd?vG)tvq0f^ic?7bPx&CN)=5?91Og3iLl7uEvSxEb3QYH9gnw4z~z0Ktc}`9X?y2~
z3Eyxvh6oD;)|A;w0)Py}Xs<+X0^vz|74lr$ekvD@GBM1sy;}nuEBj<LLU;pYU6=}8
zhy89N;l5;^w`i|0nW_F;BAT@cJNgi7%#lV=Iuf{*ZO2f#M82%Oi3Bzm$6P;AJeLTK
z2SG!#k5tYdk2$?UQlp?gxiC@S*Z>C}F*7H-;yEjw^HqN16KyM;G~o(vny2%|Sd$wy
z_bdBoVXQ265~YeZfj(+m@P&aYnoYmUe-Wxo;}AspHm36K!&c+aP5xQ`5XWIh%rhT0
zEl3?mE)60^H#A~(LRm`(dF_5}^85|hpN6i0(#J>5gyQr&jrNb<QN$yYriAnMLrAuV
zu!^{eehC_Ss)Xp_hBF+t#2ZR9GVfUe$Q|6E(L=JI`X8^pRIdr#5$q}N)(;e$rpVA$
z21}6R8IC2vs@|0EX4*1rAjP>xRTGUO#HCs92AL;rvxycCr^tVEf$JbVmG8!IGj^+b
z2J#4Gi1GLjjSe&cZRBv`4u<o51i%?y4GkvZo)8X}1?nF|O1w)s`B}ikgL}Z!^e#*D
zR|A5D7WGUOHU^R~V_>XUcVhAP=_Gl-v06r~vLXTt<pLpNrZjWa=|N?pB{B~f>ge25
z7XBIKPd^NHuIS&r!a<`c&7$QQf8h=!*yBgwL%UOw14<!44l4i9QNQ;a<253HP3%BZ
zJ5vo%I&ZZ<&V!VkB_NZmsp{CleC`x`{2Uh}Q)hr!6cu@hl=sdpr45ah0wA*Gt+n`j
z0-gCyb{BR~ZxpanX^`tEVHA;rsg{W{$$;z@dT~-V7d5THWiMC~cE$+Dpu1wMVMeoB
zPzp5mh;pbgW%Ouc+mOPsms2@BXrIvp`*(-rfA~_>4r=XqL^)0Hqz=H3L{$I2B^9rQ
z>2MP-gM>r7#A*|3N$ORha>v<WNYS*jTy&w8NSvMz5J{{#pvxh#62r>ivEAm>zFNAZ
zG*SDT1X>yPcWtUv-SUzXF(d+L6mC)xV&jNQJh(cX?3hsLVtGia+2^6$#bkmnBN1wB
zeLLg?5BtytO08io;cEy7@KZY-5fO12m2VkkKhfc0ho(CU@}`SY^}Q$K?P#T0t1s$(
zlj52wwK5DH!jJ+OD|6u3bL(Z)m9onQ#Jo4*eQ<mDFXaeh|AmiGhgiIB3)PVG9xKd|
z=O0~oEEp30T+;85IKhu%-)<aus&zBEulY9)i$ik#+esjtGbGOVtR(PeHV`|a@3+Da
zq9eLi=@kiq_=63*{<oK`?fMe@Hv79&Lf$)v?^mbdz$n93kzpCViZTn^av@AzE)@2j
z?_FhJP_eyP`?aWY`mwN@zhbE-gg$2;y>!adid+r<Bf#S;&zU%u&dc$%b_xq};;A$M
z3)A1d>VQ{{Zx0i?n#)RUP<Z~3KZ&i82V+Jlm*?+#>?nd0cSE0r2P9hQ$Eqx}V^#l5
z_ya-3_j7S8W`t2zY*%P->_x_y7;6A);Q*q7f*mJMC=WWUkef&*?%sI33J<2ia$x+C
zt-MNz9*F3iRsC?7G!_*h1LxSn4*eAxXSwpA)mdnY+D@{PB`f@3r`{aU$yXJf#HZ<N
z*o~V4<zQ6nt?yYAR7e$LZ!Lt>=+=3N?!O0>@CM^-H(mI5AnpfQD>*ZU*fxfh_CCnQ
zJ(3PRek5s}fHnrDp^!@BAr>z34o7d)1)!ySKbdM1`MmX%$`7)k8yvjcs+>IU%&Hcm
zud|Ix6t>^La4xM^E2#Umx*%=Nn;@?G@`p`ydZd_kO=%SE)Ax9*jO0s#(}p-<(84F(
z7~D@-gaMZQB6CMxMoOw@74e#a5b!vFB5Su1O}`5Vx0Sq;7hnOHC`5r{Qq2e)m-rTM
z6?8u1>`1HvASO?v#epk9#kq+)ZYsPw)NbbRNEWCUuAjZTlZ{G{$6d)VwNWkTH5AAh
zHN>)+d-T=mX_N^yvZmGR*z}Gcz5h&N%)H0dwf6fHe$D4EKTm`d{f~pCcy93TP1~d5
z$;Y1?`>)IEoX@?KwqJLteEe@1G-kx}`@9McCXKn~xu%eb$+4ZXC~OzLXd&nU5n%&p
z+)gQ&tz%<q$f{Dw>3?5m9;5S@LERA`spfuX_eBZWpX8Rf;j%~$l}llVa%6}qC~~tM
z8dsr>VF=Dv-L(k)IrmR^>rWFykTU}IH<@Tpk@v**5kB)@XqLu#KlME~kMHvvQ@Bfo
zqR1DUz#4la{sB%YaQ?^{=R$(V<YD@zwEoalTIFk+8-)d*iSwN=&UJ~cjSV{soLG|y
zjrlw9SC|{Y_6rq3%KncWO8~n37(Q(tkQcys7O5rtecy<WSnzuv#}6o2yo*AuI<GA2
z{z-+0H@j<{3M2bytp5ep-V&NvT;+mPK1EUyYdr>&KJC9vWa+LVCxtWWJy4}~iE&oD
z(B9MT0JN?p25WEY0Fy8x>?u@$Q(WyiK|Q(ci~t){W_MZfe%s~1$x8=b9`i+XAlw3`
z_#ZYKaz0|kK+f8Z(ZTu@(O*(j&GO(ux(w{=JRcx^xOlQ)?Rk}%twZ4-=??EFOb616
ziiiiSmP`#`a3wUPC4Og~&_~uy63!c1m;$Y2Os&%ne*b5SZ5nC<EQ6n=Q)8K_iQJ3d
z>*3gQAcna7!pL5L%$&AmWF$HaP~iI)p`+sx9IOwFLjp?GiQ0vxNP0Zf*=Eh*xfN<o
zy?xsQcRMzT%mC^^s%EnRCWeSf`2O@;_Q!Ky!#1CH1`57K-S@sVO7_@Mvu2{Gs9ol6
z?kb2kAE6u4`yGJ4IOTZHlCiu<F*(#Bub&-zK4FiEvet#Ew7P>U#s&>(a;e4Q>9(ji
zK;pWI>~xcZVL#-!Gxi_X^#y|AH`3g2L3Bc{$LOv!W4fs30PtgJOh^WOt7_~`C1C1O
zJ>t0%g-TK1etIS*$l4uDtEJQ!F8RL(nbx0|hf20lh`4aSM7ZsmTiO*X1qenm=-cE`
zIb83Wg#24F;g(e*4To8OkzPyuh=R2Tz`}lCtSo40Haj!;Zhj75-(q=UnH}Y4@}91i
zP!;w-(nCl<QJxSoN3TppS-0p59^Hk_fmCJjJ;+X2)tZ8~LBM5A&K(b5<?SN7-Egv~
z?Xw(dj+ccYz!OCj%VjVcvjJ7rQhPh}FyJ=Wf!2ML6h5uAAXu-IM7l_k?+OJ@VYds(
zK<}i={Iv<cyP0-qdUI6i{N}+X%kygs=Cx3z@=TOBHd6QrdZVFh_uJ|)bO5G?LmCC~
z^hVQBvcZEq_}=YBcDND!<2wQWBipLea_Rf+@?Sh}r{Nbu&+){PE5Tf7w0Ux-><71Y
zhhHRqdC<SBMTDrrDf0xmnEl;PaN3MG@&h2g?CjL*iS~a7Pu}xV&9^#e8W*6yrJr*s
zp|U`t3uE*wANYIgJ1FM}o%ynA-3D1igz~06G7(WS$4jYDa>&b)r=`vfV$l>w2xHU@
zn>@0{Bkd^+Li-^nGa2Knj%|2x#;$UyqnCAuO)l7?>tvQOPTZpKd#QYV=4n@74uWke
zY-rj1%>Buv2GcSSizLCssq(?48Wr$W7F$V=LdLu7JHM%<L?b7zZCPRYHT9uVsa6Ey
ziJmaf4>P+ad694~mkpjYH8r@M5DCLh2Q!gZ{9KHlD01gpwQX0tER3GR#m?7$zczjB
z6eNaYMtVox{o>Iex?4*bd@8jkz5z*5sc>-OxZlp2Vu^sw)wzJfz)@l~5hnaMAA@z;
zYH+h2V7ABsRN=&?zk+RUxjjeTu$Q}aJenY6afuAGF+EyCbh^<u+0vNMdB@uW%23#t
z_ThIA1>`IShxcCzYM2y-^8b&fuZ)VLYr4hV-Q8V+1$PbZ9yGz--Q9hVK!5~y7#Q50
z;O-V2f(*``=e_Iu**|)%KHYVy_o>=@SG5+fm3RX+I}a55-9(_cnY-d}uS4Otgn#!#
zm-yK5uz-wulSX}RV}v8_5Zv5|T^#*z<DA1p<o_pK(RRT~e{KeIjXy0E6E&SJ@+;zY
zGW<HS_IQm+BFjk+L@c+S(Ki8;=Vx^x{<5A4{cqK@FC(_r4tp^a`66*R%-ZGfX9c_)
zH|T`<*Msoc8kaHr+O4kt&;b<(2VNMt|85mbS@^w-x>s2<m1HR!tBuSCRt+D7JiYB*
z&ho0nDm%S6AVeY~0aw!w-})ANtE=|{#{1S9UgYmw6!a3SI5d4>sOiLCu9^FkcPzcS
zMzNu4d$oHg{NVYs&8^#3I{pw62>rewLdk5M_<hmC6PcJI>O3K&sYuzh|60V<rbdnw
zc)E5x9Y8}&`?agA5(Asp6s?R<K>>c$WX{(^^tlyw?8nI%nzlv4ionIQsYNH-QOL-k
z*SJG^H56~*wfrWdK>f$UQP7)}WLY{fAptuc#1qshH!#;@?l=I#O?X$~-x4a}o#~E<
zPKMtT&`T$00jWsuxH7RzmNAJ;$HIcKapmm3q6+JX$m}9~lDNP90`0K3k!fQ@vDRQ#
zm09`l;B9d?j5#xMfS8PUdj5#1N}e8QIsb1^3-{j}qnz~_xF~BYl=|d^@;t!ovh^#3
zjkVzl5B~2&UmtiD^?;71><np!-C>@1QxY#-U6G_S7E&y~As%7H%a22&%yOg&$7{zK
z(uKaVL*pJ;pj?^)`+v((!8d5xTt?Tumzp*|xFP<|)K>gPP2h+e5z`2x@tHm)wVYW!
z!&f<ubs2<u^9{Y4m?2VK%A!|j{7W;g+gg&$ltiika&0U1);x3@c4oc$k0r~$Ym(oQ
zsgX12c9r;;ohb5lI1E=@V`C{t;G&+e8GB-A>9W~}VqI5Y@x+VI8lP=tu5e7e7x~ua
z#eWa@V_G)t)atqIs!pA~hr9DM`)g7L|N9}*8CZ9Rjt3r<uytRY7ccFC5F~lIev86}
zuL*NOMyf=)s^JsgU^;KtfxIZwM1Rh^{k`V4>Rwg{;f!g*k2UEV&a{@nu}-L9-uR<Z
zbYR<QK<rgM<VeQ<7F4s3lY4K~Eh_y=DrDSg{_(ry4mYyy6Akvyf7<GAk5BU8l*r-;
zIwlOu8y8~Wy_(oZT)@c|H+kW+qyU+x3N2VYO4fwSfSeV#tP*d3pe2D4$(sp@^rn-n
zD%T}yOR)R!xDjJ?zh6K7th7j8Gj-?tV~xtQQaf7WI=Wf^MA${nU18*Y#?W7D#3zXw
zZU*R3EQMDPs%tEp0LiH1o)#2LI;%a~?=s7jG;lStDVdcTmH`pB%GYfEc>q<D^0`@g
zK-S8dw{EMCZ~lp)!i6gTK6tjRH~IFxjGvygrd77C=PJc%6O1<0tD)XdCDIV`s~tN{
zpL)%+<WeuD%RUszXCoVTXpr2N1%o+&8>t{{4K-z>!?H-XQs;u4$+%5x<Zo5q(f!V#
zhOb>IN3tk)xe=vr2UMBl#U?+UD6I5ao8u_5$*)9J;XqiGhbXf8&ocFbPUiaOo!!yV
z_p=4G9sb*Rqh#&w8pF`z@ZD4t#9`?NN?~bIX6r}vw117bPD^13B;E$Ef&WoEy1rdl
z8{j}A3Abm)sE0p>ZbZ_->3LeRx2dB}>NF})6!-{*(oyl^SVjyja%7;~bhq12^a^yy
znoOY#;$D7bEb!{eibPLgUDf8rl2;<xokGMTHERnf`UDhZ3{$n^=3l{6R0dup?6@ZK
z>j_PXUV;%p8^vPme7fw!(td5|6W4_U>KAtLZr9h`o4lIKjD?@+AaQl9s9KPSahcfd
z_#cUUWz`(r<1&5vY}&QJ@;rz*%k-rh_{;AZ@qTv%e719`DD;W%ie4X!Q+Z4sZ!cuh
z+-;=eg#hq*VP;?%YuGs}7n9|A3%2Q5Phgum(@yrqJAtYS6pJ3BM|s_H2vE~zzV?L`
zx{b*Dv9$Ji--;9kkqUlIz;3El#2{FbAA<6a4LPA1>7m9ATr1E9#usaUr$ye<!JGEG
z56j8Vkb!YG_Pj03PQ1fF5`!M+GMecPLcxLnrtpUH4Z4#ezz^e3y#D}g>y8w2mWhbJ
zbzx9d5-tgEQ~z}c3V(IYi<)JKA6AKH#tC9v$vTR(6*%Kf$KjXbBBCtH2e5sn{KfJm
zs{El??AX!JteUaj_AhU80hp*;_#gA%&UXQYh3^3+5g)mm->IX>HF#9Xem-As&HL>O
zFdiNxn_=s2tQ->T#UrIi^F$&p?MsffT&Y84g%m6%{AeVSNN0`Th@y7M4cl+K+~9<~
z8R0Ra0Umx|nJDn`-3=qA(ubuQp&|*n#d4dY{xd?<XC;}Q3JmE2_crw1CP#Q*)*zI$
zW$FMqjEYStCs=8o>o?KoyT8qkgmq1%xlKXLq|5QMh9c=hcuN~P<=@YX=>4b&Tun!Y
zlSc=Vua>(*zy8OKhhRKwbqpAnK?nO}_!2>3j_iJvf)NZ2Hhq;GNs%9{gLuvd92%Mq
zj_z1zFVw@+u^O-kXe}3iC_gq~h*9{+k+q9kts-VD<+b$4GNo?durR%^xeyWD2PN}f
z*6fMXDo1nAfyWB5bjz&H9i32|%&N6JEnH^&^5iA9+X>us(*Bqeg{d8vYk>+Bz5!;o
zo6e+-Fb5XksG1kC^&LDwnd+MoNC2S#E$`nZuX*LxkD_f$CEtec&zA#gC$+yYDu<@O
zG^WWP>IoXaQezQp+m^-b5Ip$Dqp<rYPKHrY<cU-YM~(akZ=7ENb>GXvoQJPHzs@wu
zZG1Zz7gP|xgmwS5AK=isgYcjPQ(h@hOymA{h#ZqL)5!m<pGo=$#%~putOg`5Xb$t7
zK^B>ID!l7b;HOwDY;R2m^ov2uP!o;P9arq+dUskg^=^*j3C9#{h0pxg=sCsbjK_?j
zgc*e+wMR}DVT!Tqx|tJIgIn;@BbH&I&38>e6*w>GhS-Am5rq9)8uR`%?!AbVh{!)f
ze|FP0hbK^Fl|O=X07LuZ?~y^afrs!}t)$4Lc@u;*p7WqNYqEx(0EokG_q7`5Nx886
zeM7i7jXEOGjV&LVX5sU~8Oo3~zy~-4Qy&ZZsVEa_(JS>;U5j;8v>&vI|ABq7-EQ{z
zPzQyI2g?oL2?&)fnbHjH&gdBfU`3Z@@7|JXI3rt!ZtV^&mKtI*2F8wmHMbpsP)|;O
zg5*4A^b1TXEpEb(bX(aZy|sKdu&kxrUeoXu_`!yOlEVy1e<5Y0gWUpJjPb7ZD635!
z(uFkcIXWngxC9&~f|r#j9Q(>N&?cnhQ_iBnR)~$4wEoGO-6k?@g%>%Ij}V^TTaf>c
zrASSutg*a`aiEBLiBJRFF3f?~kRW>@o=hsP;W?RJpkb(b6(OPkm>;PeTJ+ojK(33P
zD1wlNLO*ti*hHB9S?TysMnCG3X~|jL#?Dvdz#)bT>B+bvnuOxztJEa7W$B1%<EB6_
zC-H6JfymQM>Hx2+yERc+mZGl9kF9y0PH;U%UY_^d@R$m&%7Yyf&E@^eoS-zO>yIgI
zN7E5Z%Jj__`{&0U$tOr8#yZY9J)c3s%W(0%;AOM0)<)~EWK6|C$FYMQ*sVS~LZ?^r
zDpqvgP>POn%uYV|nswFZI7YR=CzR`t3zg3AI50FN^M@tBB-d~b-Zd$a<AEZLfkN#Z
zycTkEAC$y!KJHGw_89Ackk23OFN$a78x0yX8<p4FGBJ@CVLkK9hs%n?x@4-IgU9lZ
zCDWs_+N`^9g*yD*e7dbzdq0%NU=mHMr}A@dbp8_`r4wZdDJq%`5H-q@jAU>Sd1Rtd
zOl7nH*wBg!9DY$3yXteDw3!T85N$jNa<+N5u7FlU&Qsbl*Q*|1`WV$lzij8Hlo6U1
z15>?LMBR{M>4NC24E^#=6gIH*0)WP-b_IQba_}jEi~yEcmzM@W+ot01Z{0=hC@6*l
zu~R-b-QVbeN0k?xF{DG=_Yato&>Q>_`lX>5uIDL|u#GS~&(WVl_{}*?eg|v^TD1iP
zFaJLGv(xmt0?egKHz^j|z|unD+1}(SpYH7b?6}&g78B*Ek$x$+8u>$g66~P{Wr4UH
zDrxe++%{!BdgP&AV(3^~s=1-gnpUh&GibT%l2n6FBmeFl&yOKjtI&=DC4YO#;TN?1
zyc7b$y`L^2=~9Up9kGgQ1jWRj<3QaC==%6bp&mbdb_zAWIc`Xz9P!aufvG5;MK_+5
zr)~JTo`<jKj_lTHPO3=G&xk&Grc}jFSlvE|$^f7_R@#(kNQy@fXWnY{Jz-xE(z<<o
zuh-WT?jGTXm{=se1Zr-?iw=p}l2&X<=>%K7h;0ge;!wLNNPDwv`W)m#0amEaJT6NR
zp{}3`K*Xe+pB?+z2<~l0yQ(|E1u-5#5XX=YYMRl;3j`ke?Qd@|EGp?xo-+AeDk1@N
zy)toE`42h7gi}2Ts)(_2f1=|twzr>tA&m_Uw7rXBN4(GEw<^j|;o5>XMthYZ(uU#K
z`4Pe=^v=Cj<|DIGXo2T~1|%8E!4QfmQAx7j0S+fBuuEfxb}21$U=Q*nrBl)tU*RNk
zQi99_D%e*@kRODdscKUKm)TXBXt9Cj4s66JkBu?Mx9$B?-z&t|o{2YWhYdk&9Q-kf
zbQ*1))J_Y}<b<>i#os|rbooU|*(0efjCEd{bFJgYm9HHRXZ4`Ho(85VV4n?hY-`c5
z_*<33nh3)><{K@vfQ5>>(TuSr++^)|Z;P_TzWKqn+)k}XC~ER331|k(AD=Qr<?_#a
zr5HC4BjglT_jaBQci{ME3^0T#B$4}B4=zSH1iwMyVeS2ri7+E$)(i`RcT7x-UF^|?
zS5}2YYhBRBmgEbU<h{?c<-HUCJ`{&PA6!R>wfjpUc&m+07fb(pGqL=4{eXS)@lJ7a
z^9~5(QGmWK%|Vmk_8lO7S9qVt|KI}(302J>Z;Vm4(~+vX3UP<U+x(nF)|RBDU}e{g
zTdm0%oQ`af;m)ImE|ujjD&OOqWlU~w64MHxX7r*W%~r0H$u_J{uHu05SU5NG1k}2i
znc#z`;?vn1L9Cuf7+#ra7AT^M%!5^P0XZap?Wpmz)eg)L>xgFjKOnOSr=0z&7{5H`
zm3TTHpi!f@Zk?N!z@gD5$V%a{2FeP`xE7(=Q8N1xfbHP0A{yQ6R!Q3YpFo&bS@IOy
zjLDZIv*gl<hq0Tu{{|ro=N732MPZ&iFk+5^y^=<IE&UIR<-JC(<M*~2rt-i&!J}9A
z;vbKmniaa99!Cjv!n&oFFlc)bqMwFFy{XQCMROfdySd}Lu;m9WSiyb=t7fP7;KYeg
z+8JIZ&!J?u)ZVY8N_vEDxW6^RW_#_t(B!_-wx+hL3=lyGHr*O=u`I>j9Hl$ydVQ-g
z={Ij_+*;ZDIgV(RCeMI^50*gMb*bGd^PE{9>m5@iyVrhZY{XE-x7kfb>fDhPo?z3C
zUOL~N>bJRN=F|gLI*8I)5{DCmV_i0bjlT(-ok-H#r~D~z)oF0;?`P-PrGEDEeQKVZ
zZR1Ww^%HV2YJn~B;&|~_d<%cH-<xk#7*zSt#IR|40~}tlp;H@Qk5KsQho#vwdZ-Ag
zto7Vnctqh)vEBe5$E1ce+6PxoAiaQJP7rU(IrLu9#dYU#vUb2mCTd%4sKz$GCMgP*
zyN*RjpWPqJ%nf>n!HJN`kQD7mj34-=ymWC?w{2~d97ke^EGf%dGW6{SU03t&(}9Tz
z3wly)6bmrWl01akv^cN~5;;b-6{ERfE^lrGY~2sYr+5mf%t0CEP>bwX4c6X2hoxpN
zIbext30*wWSC3#XdE<}com9QAc)s2O1qK<SV0Pqy`E+?_D|q(Pe<Ie#IGn87;+?-e
z8i`1Kk<e@}5W#|Od)KNin%S*=<Mq1~>S53BJ`U_QE%@`)!SCs_k}2K^@h%q~%DaE5
zp>*}>%IcIM<q%$~laD3#s_Xb?dupDF27mttPj=#2w$n_lc<`mm!s+B4DAbskZPMes
zp5pL2r`K#)F-q<&PIO8f^|;7TG25x}jmDn<z#IYXgGRx8;L|;vmsk$tr)k(!^UKUf
zwx`um_uY2eBkVR|H-a=lRtVDmRQXm#|A?z0*Y97pvT|W~!i^oz+X-*Z&>6Ol$YrC%
zaGR{6qEzdsKN*Eo{w0=JAl;&Q(EgThJn5I>{N37^aa^3#>`&M|IvaEV^K5Yj*PjLx
zBBla0@-GR}Jai1>$;=vkubqRVW2#ahB2Jd*L1xf>He-Y?(S0NWsiN~YUg|%PUZ+h{
zb&vJKm*cS7vZ1{3qj^vQ0BVH3N<l_D_<gVLkn>XXH`qx$N#d3OrHe-hX}mC<7XzZf
zYaij`(~=F_gCYk?5UnnbY@_Vdes&9`!l;IQq<p=iTvlpfIjddUQ3|tNAd%3(i5$Ya
z#{>Ckk^3Q4C!F8=sicwHa_sHqW97Zrhgia(O6;MTP0M+BMks6NprTpL8CzY#@V3-b
z#X*qSVG_viZtA$}%Z%u8TTAe9%!r`dBxXBoI8T%&PCh;GbP$ejCt<WV(yn%TXWI5~
z3>tl$B7@6q6Oj-5lx!sGv(GaFoE?p}+2<sM6`a&R5^H%(KP~LZ?oS<VY4!KJQ~MaA
zo4(dy7Us;x4WeG^$9=dP4RjZmq7Ugrxv?dFQ!bKTp{6U^*!({(Kt_atQ=G#|pz(~*
zG2e6f?RKqM4`^mzD>WcuN?xtl;-zaZt{_#Mj>do{-LX{U693ZV9-XklPq%w?G!Ium
zv+6B~oNFjZ9hSKiXskDT(Gf)6osD?k?HsID=kxKoM!V`c_N=@2&|T_6T6fbTM;dUn
z%#X&@Kec*Jp=1t@s3SL2KG<t}IZkb`wT7_%|NUHwzg(NFkKl@mQSx~&f;ZDdTe=pa
zWr6zZkV9C{?UBpH`CA{mWtQ^@38yZdC5-5&r)ZPbU+?B3k0&-alvX_foPrkIV>WTd
z2i_Cu<EHUd3_+t;JuX(xEQL`N>CcKgv>7wV%Sh?CA9CxT9tXJ&({t6NDr88L7)u<h
ziU_|eQGE}%3zEw5sqL>oE>>n}v?8mRSk#dvp{{ipS&d-oA?2Vr>WjuAOurAb*d6IO
znbz3k1*ccLuxIk!^tvr1Hxl8+ZMvy{7k1sz7po1nwMNY8?W>8$!Edj^4t;=RE!l(a
ztqZqlp}JXt_dd$8Ut%w^7uHlIkCdHWP)JS;dN29<2F%EMuM$AxT_)r9^7`DphA9j9
zX!xCP9L6aFI|yDnsTK&R=Klnx8AA%}H^CQICmpPHsoS5yWL<wvvL_S*BV&;E!txIc
z&UJC?$XD{H=JMZ2a1aC)!xse@O{kmxn6#Bcam>!3q>~|Px*NGBio0I7d_iC}RZn9N
zLU;5FPH>oWcCdh|U->bp56rnhr8(J$BF18vmuplfP2*WNsW^JnMj7^Q!J$t9deLXN
z)9%I0N?YJ>#M{I-obdjmobj)E2f5Ec<hD+KUb^2zlN)a5BxN@IzEm*a|3N0VE?jq|
zP~zr_P)DrniXN<x)WnZAS#6pkT#%v*zw`SGGfsIw+x6FK4*x0)=p+p&dOjz-5BA@@
z`U^2Wk!!mX!B}Q%H}7K0h-Tke9d=r=Hk=?!>orXPrnb7^rzmZStajvy+@r4gEay0g
zKdKC(Gsq+?3VAWOWV4tg^kFaaI_>DE?*vASH&ZHt=yL+IC@*364fSAHr~Uuk!f+h{
zi(2RJo33%ufAw?H#2s7Cz_Y3l&$y0u(9^gQw6Hm<ce3ujU53-TWmRL?37d+KW*hW;
z>+iVZ7UnRi&e;ekrn3X^MZUwG9(5tb=NqXI*tbQlEC$^~a}pja)l&sdZpil`jy<*`
zlf_5z05)#_Vt4JnOaCXSXhiu5{Ws5rxdzTW+8#xQ^U{<S7>-na2%mz46Mx0?%|FF2
zJ*Kq%i=iWNjrdQ>=f5M(5JhoM@Wt8vX>y?M)yo5|9S0e$dKUh-TAC`<D54H2=uhx{
z$XV_2F};yiiIRv6b$yV(!*}D9_KfQ0_+=Vc?)$tTb+jpR(bBe{3yQ8gQ9XzZWOn)E
z^6KmYEJB3T!B_`;Ny<c~_NHH~un(yRxoNMg;UG(K`Gy~1)vCE2lRzKH!2C`iOKv?k
zkJluq?H3v?nZyJI2<gVzuTtOjTD<Q(9ISma9!MA?#^%(^7foNzP)o*)=#PpZ)a6@W
zAxgCvY(ahk2<GSG<PHf;<d9&vC6y8lV!6f0jAF4n0B@p<?(TbDULbtUgEVlbn)BP5
zDD`CT0-w=H>uO9aiT-VQj_*kcwBfeghCVkL5lWm8&vG=pBQ?RFOL4{kGAC~HmiHaI
z%bPQ_)3<G3?Ijb>#P^rwZqpf2FyC`ua*))q>IYg`NzC6D!yElCG~?&f);iNg-k%6n
zks_C%6gq1t$>wwShmM14f^RXS@6Rx26hWxn*!1o`E?<879NESZe)S&2a}D4^!hNO%
z8$<Vo1Y&2?1~7JpZqK-I<0$kCBV3bR!47e;=EGM_y!>ei{K48*Jf1&-fK^Mmmj3!v
z#Q`QLJ}a14P7n5vYp7rYOBw%cfNpGRj!rgl+2rp{u^DX+hA5B3Z<AIxYyO@3O@N=@
z05ARoB`0spMuQ7izyYRO<+mLn#lQ#VU*e>SlMW=cfN4zDh+<ALCt+}z*}L5Pvr)R6
zvYJVf_y=j|gx#VdAb1KFnkZW$_E57rA`Y$$(Wy<uC%5WJ+EEG(VqA$M%C%Z>exnKh
zJy+;Wt>fmoXVHBoFj1F9NA!dJDx*sLfw*hG))Y^iBINUtgtWOearG!kvk!fIf%LUd
zx}3YGZvghlqrq!IdzvItmmG1}4)pKKv{TBtFJ|2a?{{yMY0F)g_YkOdSmJF`-nRK>
zuH7WkPy&Tdi+x~tw-(X2C{Hg!Qd;WEMnR9GpPvu9t`IB1Mb#7);ZNQhHQw!i_3MWo
zLF0EJH}h^~5XuixOigcB-=DRtY!n=d8ZwHlvv(ixb@=gyB`LcX>!_mM#>M(%QAwKd
zPkk~+!G<nK4k^J0=r6eN5zb0pYh&F=l+pd8v-Lg+<bR+x?H>;*PX}(EnR0#{zERF4
zLY`R*Ts^WxeDgEmzWWYfZ9GKlnYi4R%`0_YnJR%Nz-e(RWuY_c^?_A!&@Ac3SJy=R
ze48AsyZsm)%mz6N{r7+EfCRF~!=0MqmwmpZmgF48c<CXA^!<opm7hLsj+)pYVv~-1
z4N|<T5^+osSEcvUP-NemGP9=v(E<2=!XzQf1QFElim@298n1u`=J)BCWJ?RV=Q%Hk
zd{+6zZbfIOr-ZyQde~lOQl(*YXB9sMPODwiSmS!jAg278cz2xsCTzA_%r=cwt_=6*
zuU$Gt({-O|o>kYdz1QOPzdjwLRPI)=6JB^kl5-BZ&=L`UKCGY-Xc>+RFV<p3Un4v$
zG}rrczJ>}F-_Fa-kD)E!2U*9bZ_N;L7_68@TArwKLPBwZ>)|+$bDZ!}jLI9rC~PoL
zzWam1ty?=SLGGfL6Iw7ry<2>8#aK)458S0j5-5QE1m8kx{xrRYTnNnoZEmRp$?oNp
zuYVa2y@Nl{|J(7Nb#LVDucCURMZxDyZfB5z5#BF8>Q5;&g~`z9WroIYKVc^1b~=}c
z+8zC4vHYMu_l~A>0S9Fv%B?MMjr`qk-A3(y<ngV5E#ZT<X(9Q_#mdf;&bBeLj~VCD
zzjsP5fl)kkGLr?yfU}tmnH)9mF|7dlj2eP82X%%)i?c9IIainR{07udoFJIFB)<MJ
zvKU-?zPSZi@5Et0_x!}u)%1ghK?eBBBe#w$Lv?~pIaRJ)Ho#o2mFAoc0s!}SK)0#r
zJ8M>=WS5v%sPt;M9o$e-<Gf@<0axwk+(eenn%L<#kiC`e`}0+Iv9s8RBZRed*fuSy
z$6@IHKc3iz$E{<>q0#mL!Y}>f^KQN{f>T2`k;-g#o=CFQYosco2OmRDr%P}NbAk)K
zf0`U*<<DU7-$lxg1k?8|@X47eSQyfBJ_HASBtDOwy+=Ep1m-u6W50hLB<Ao%b(c75
zuX2^S+{6a}M+^SWem<O&(pE9Jc;}%3F4#?k5B$1|dKo@!UsCoN_QocevlZF5xE7nW
zO^_|q&)(A&vSF_0HO_CS#sdSt6nk};Tkvl=1w@T#MtQnUK6w(+t!4!!6;ZA~*n6Jo
zEoJ|h8ag9%p9&}qYjt$7rlVEWeh-&?`M_PWi&8|&zDK@bNKfUcb?A-lDrjd!WlS#u
zu|Xy3u?V!b6p<4qOzck*q^Vb}mayhJ7)hM)X@%uaW|m*|m7f3|FW*GJc(LVC6s_4j
zTPgEz@-e`^%=F&NqR6Qeyza`ilr!;<D_1nL*~HtGwLnRoZ^c|1XqhS~79(<l2o1=k
z-niqbWyazTb&b3(0JDh#0XkdYcTc~|_PSKNvN?^{Ew9kmli;@>wVb`@Rl&h(G55Rw
zn2ha)V#zA7)!(B;_(x5Y-zwHCV84L_LDGN4?sGX$pR4#shwM4Bm%ARokb{<8i{Y$5
z!H3t|j=Xrqe@PEA3kZdHG=x>TPZSmWbJ>};49RLELs0Yh8@gbu!seOkT5e8t*hUKL
zZ0!ZdHeG9iq=1!Z<JroXX!}*MW|~r4+>~_sm@ZqBMVu8|T)ZF~@K!%E%FWJ;Lqp6Y
zmQJ0~?az@=$-N3)2{I2sEG;N}U;n(&fCdITO&vvQrq+pZy!<h@s<ENclGpa&!Ji@n
zGw?3`ALDV)m#W1|?JE4IaPeo{cAtx~#`ke_zYE*$-vV0!(Hr0k`QL?>X)c3`B;|SO
zB^N`ZZ5li=&Ph?s4~y><3r0O&bsqeZq<1~9W|V1doflFyy29Xz|Iphu<dt@uL>XBf
zcN?(4N5IkHH8S)&+NW&(YbFr15gN3|>HAg6NBdX3&1i4=;S{#KmS6Aw@wR8lIp8X1
z!{vkeY2-+mI4a^7{~L;u9`idEo8aY<l4g|jh8Od%`U#~tfnJ+f#9KZsk+3-e7r{5-
z=Ka94ac6VbD_A56F05ySS8L6j$gowSK?kh0Vy`|&?cYXWVxA44xRkTjmxH4pg)Ew5
zJEiu3$u*o|MRxjHl|nS*RAgm439_K2*xT9=#9OOh@t<4N^g9<YFY6+D0%zqWtVcc@
zEOyrXc`9L7d>KDJ#7(|cBINh3A9Okt2q!&hfSu?#snziPckLdt+!WoD3dDhrNM{8e
z6@=pJr6<?w4%!>E(vKuilP)Wu<Dn)|!#!DMb7LdY$h?M70D|P4dX6QZ20hLGv}AYd
z1zm}EYOpTGK|W3e<ao8V{GOB#&T5+g%mjnFZ}+^%{tG#Xq;u9&&+(7=$BOM?Ip8V<
z;M6Vc)cM5Ub#o+qP+qseArN%P-*s}de)zwOz(cRi$HThO4pxD`|H(oByO&k0UUmDf
zyzLY)9Sq0^FL^7q7`E8kwP?<^T=^xN-ax+N&2!!O68Veg(SkU2`22n?lk~#KCI;1>
zCol(!4_g_*yA$da_PeR4CxH^%qVMeiGOR#cwugX?Fau%pA2ncT!!!_zYlg5N9;%h>
zg;>mTnH`jD((c+ge(9)bl>bO0m;4MhC&TR{!<OCOjtBl0fr)}WO3CWaFE7W!%s;uP
zuS-7Q>#_;*8{MaBbO5_41lXD98~Y9OJG%c0W-#);%>E*<QKA=MUQitf_J{001=}~>
z7Q>2hU+2JIolmcAV}PwY0!UYmuko_d-oxa^e?Hqe3()Nr?Qxm8em4wo&W2pb-?#&|
zd~PrN=BL`u{!6OWJ*OlF-iHVfS^+}fvFugWe_LAgqvk4Q``P>0uFO4HsYNsM!{^<|
zbE@oWHgWl*W^236M9y{^ND}SF=<@4U4rb<)rk&_H9I2ie;BrWUpIyAFF-@wPVC_w5
zmznC;F*o?Zy1k{2!EDP-A!s2$gPH}4nyJrs5zm%3=-6q%MKg;0JxDKMcIV06mAR82
z4l@PMb+s7lZRfh0V}zEC`9ZvOW;q#{^P9ecoyLh*7j)63e6roYjOLy){e{Rq;+@M$
z%bIm;EEUTG`dM4HKZ3rX@#fG!*4)Fniu9+AU%J@{W3P_1Z2B%xF#f4!T%izQ9w)HP
z{;R`#93x-z6*+fP3i_;Er;}97{t|U_K^MjucLL1=^_hKhGWS69RV!!*P|RKuD9va!
zf5h!;*P+NQuP%*MXB85=$))5LB0;rPOUJcJkwyW)KfA8Ma=qmtuA!qUG)}H1S_>CT
z!RBzJ7F@D)x=z_{ch+sYT=@m4{it;4*d<u?cw_H)m;;{<U3I8%82iWO`(HZSm(5Yz
zX4<vDdSzB>L!5*<&2(T(lx}XHx8DLG*~{AP2E;KBNo~0Q3)x{(r`h!@KlL`J?K<9H
zK`8XUWB*aBcH$78;o!o=p}M7AG}t=kiDNZnoJ;nl{lF+0CS?ttor(`}gB1jL$Fs%{
zPV$;Lb|)?vy{Kx__Q}$yHz#K|*6WLTB|rOdQ$^+Vx4;yjVJn)Ji>-ggX!vR6KZD^U
zvp(|lX}wLdGVhyr<j4sre!>L)+;C;x*X>uXCp0I=wT%^oF+7nxdD=ZHzf!E1z_Eq`
zbr@UKH|-Zl9IsynsS9kn#5;7p6LjspogMCZo7EE5w5tRkdw)o~25Sq0RgMe)VznmO
zu`ep&0}7RNAT=gFx7|GDgA#AEa(j-zI;W0zf=!<{_QwCfe2uW&LF}7*zy0i$brUJB
zm;b{j?gw)L2e<(D0gfQX;RC1W2@07_1<SnEL?SDuFk|kW>yx50vrX~Z;Fp4dwZ~t<
znb!d`*Tql>15tP%;isjQ3COBmovv8u{dwB$<7<lCV>fkh0t5O=iiRQ>y@d7Rq`yp9
zW7s@u*Ad^8pUKY;%d^g(XVbIuF@dTMQ3#ol4Kbjn7U0zbZVz!daTPJ6fSlq$Gt$3!
zJ1W*O7zM`O+L7?)W$QttV@v2+)Klp>id@k8Ufl9eUCnR?N5IXW`UuOkGwbDPhs^3E
zACBboVcm^U5p_n}vHX2MqWFlXL6O)jcKE}dvKp2^=@Dy4T&@bdXfYZgX)<R29zmxE
z1#6L#Fdc{JGt#(GI3t2{D3^ye|3Zz_vL)Hm@Wo9KMOfi@kEGJ<)6vADTGGc@jH$oF
zb2Nej&AYmHF+aRb{J!#8`F`eN2((%3gKo)X;rPuO69G%TH~&Bts5cyA-Y&|{FrmYj
zk|=RH$~Vp-rRkO$dJ&>%RT|sf?j}Fje}rHA@H>dxz*`4cj~Pmjl!%?rP$S?jF5vsF
zz6C!<Txyp~GcO~hG&z3n8vT!?@J8vDcu(Qy=~3;Ry4OI+wj<O~w2le~sDIEs@{+KL
z8rRh;dt~L)9r8_j=U4mi=5-$jb|4EvTFev@E@{Hd(aGR#&z!*fF69~G#|vWs`6{<u
zsff^!$#`mSl$)S~QO`(%{`|d>%-ngd<#Gd`+6-fgIo&nYywS$u1vtuCNn+>8G|C(9
zE2e)^^PMu7B7;4deBSKMCX?cbS=Vc1l&6@w#0vQ`)7&PEc{BOzHHr*tZ`}UZT)}iG
z$0XZV3UZ<s$-x95)LP6&S%N@DbR^_ITMI~6Z48bD4$vjX(h+|dH(ghY<R}T~Yvw&c
zD<eNhhFRyxmEqB{s&&<&7Y@yUo5fD^;4wh^{t`Ml2r+^Bmp<{bSC_8X|2?;F05}G5
zE5BH%H)3fpt5<9d+3P}q^zj3CnOd+%@R0(jwp;^CkAuDcmO4RNTxu#^SQdv;nvv;Y
zI^M*-2GIyZqV1@x!*8yyngJ_me)A!2L&QB~;zyU2<*>i5{?4i)$la~$jJu$PaxsUg
z@{l+pQ0O^AkYkozSta;hjKU(Qf5oH$y8Zs#inciy75B&0sX8x<lscz^HNEwOM7Bv;
zt=FewAG+RSmf}QwCm;9qbT^qe{84Ra2Pb7ZdG#!gipJ6eBBl;joJ)h`8+#P!Gdq1V
zsQuRPAg0xQE6$GGg67XcL$1_TA(`Kq7Bj2{PkEL%EW^msEvtj8HKj5wJxQIstn8&$
zkE$(D3VzHO4E=mrJa-1`r;njxGlO~@*y%|LXm@r!zmBY51*t<gf|t1>hZlozRs0tF
zK0jAr#yqUEu9VlT;P5w)fmESkitNs8`JJ-}W6zQ(4VxciS|{9f>@;(w&2Gl0ub5_8
zh+YLLoST6X^0q;EMXM3a%&Nph8DH~?XyK$x8p_d{w9}VU5$Oc8uvP5BU6~~FGQLG+
z0oBI*V?}}F!xAAjxiJe<sJXY{E)?&aX(28a^20v6$+>`)k%$qG#Ef&DKjv_k)$a5K
zqj>G-0W^f6YzL12O5#CrdrGgQQA%j}B;j?^TBa6{D|K9j=Dl+dX+xx@g!=>(UwOWc
zp`cmDrH6`nIix0M2ai7|c<m9*KOsGgdMVyuW7An1MpTw0Cvu#XPg%}^7vewxKjx5A
z#eOSPhwVE5W>nQDSy^m68{7O{eU2UDVp0#K>B8FIq9gJHqK)@*<s(X1$M8^<f>rEw
zt+n}#1;C+qdkTKm`ma)wGA|x9gik&F`3OxuWn2f5pBCpgrvlZP9l<dCeOe~2s^2$I
z+&+{%ir#21-OwaHS`n(-X0G2+Tq1OF1);jyju<1%m&!tVPoi&bt^6Z4ZZxWN?=eFM
zjRfULp>Ve=J{$@<t)4b#DY5+6^T1*ByI2qRo{KzH)wD-8Bik>U+D7$V;KfW!O_Rix
z_DcJ+WhB`=7u+V<-4b}@p+F3a%Y&XsuK~I7<wWL{`U-K<I6n8icC!=G_v_@tILzu_
ze7O9oqj&-(HY50!iUKg5uI9_4QgRBuwq?RhL#m_283OY!1^k~5RBb^n<;~e>c56pf
zHH?M+vXpDL2?4u>;cg?X25%=b!LoveQTsR=i`*!{?9^7cU&t9`25$86Tw<LGjy#IK
zIu7hZ|3*nIywMtYjOUwL2z{U_3D+5z7|`h1Fdz2Ll>f@v9H-q>m=q1wLp@kkaYdy)
z)xpWu#P=<R7*(5z6eIUGxk7v(Fj6aJ3l>(gB5*hKt^Zl^@65?!*WEiCs95ip1`Unb
z`qQ^2@FTUNj97RN<fpD*iapd86+~LStjxKm51oj9xxjwTP6h>)6q^C<Rh-YnOHgOt
zK8M(qctqk*wBD*UJ>?$|r2wn&PxEalp9i)npYiq?p@iJ!+fn*Z6tv9*kK)q#66zZP
z3kpcf&ahCDW&71#?*+7)5UsiL)jl;AnG&W#xa|fulN&!nC^`InI9GT|tE5Mw3NErO
zA57mf)TcqdmcT6uyd8w&1U*tt2Q_-P4f>?&{vRc4_bY+xA>?67Lw4A8q>Wu806x6|
zKVF>aLp4EE!2V3iU)UC&!H(6ZY9Ab8cp+~1iAz+Hrc{<TQq~-qh5VS<kUNX%?C+|g
zL4WuKs)>Yi4_;z3bk>mS_lS5aU4x4=VjNYB6U!b|s_7Z-ym~ggmct<eM9<~!@8c5u
zvPt|fGFT>|Duwh&O;lwC{7L*~g@UssQyAO+rE|1SxM$)_`|MbXs&e6NFkrN!ZuVcK
zj)4~ceA{nAk>B<<Ejyf#<nPY;RbUkuW-d5<Bp<_Uy<2@TXFLb!6(x3cu6c(DqCMrh
zL&g&1`>!Hzr3iB-k%l$m)GRi$?z&>yt>j%O%_)n`c{sj$rI_|K2TRttQlvCzfAtRF
z4Ahcs=|>a}?d#1{J6e8%{|3_!*YzyLD$1ea^LcgQSVE?sWKl4b-cHx1J`J23mujLA
z{j+F6tkadH>-!#2tYB;e-?HaOY6>?cB_|5<CWjf@NzO@L@m0>P3z`L@(vgnNVRT~l
z0Vicn2B61X-)@4lAO3`c1bF;|Ez)5|2Aaz}^}0TK9Uo+=szBw9wvexlO|^`Z8nV;B
zm&2e3m$#DWj+Q-gMkGO!s$%SU9%t-7=6`oVSSwj>iQAx?`bp|3<OM5YB$Je}PW|IY
zIWd%LMP^R1olL}L5*a2DZ+7f&jiOZjdZiy2JCQ6AA#XX8w5nE<^h7w$DE))3+9H%&
zbqp3o#**JdRO;EGI$I0bwD9TTH<Q%`v@D|ea|Ex+9@i{{aSWm>E#WZ6dGH)nDZbkW
z%;?C#e>J)fVw>%}2}F|m&L3`KQs6+tkUGGa<MKS*`y$U>UaIb%f9{s^p(A?#T6c&Z
zd_Cef^s>y#Pj;~6zyPkV+E^OlZ&9SCIEnhR=+Dsyi;q+5ql{#a820_@#XUsZD#g2z
z)-lPa>DwE*&@*p)OB)A(KY1*CfboE_$4AIN3NZ~2n|4nFSuERJ$hAC17LI{rks(%3
z1QikKI6{o!m;u;7PGG5xm8&H4``R0B-f5pUtn7i))ikP47Dv8kjE~?#>A@yN6`tVI
z&QEMj#UZ1!wtiL#S)G_UW_VisnB(ON$1)0;9h7v>Xkg~5F}tTo;4-JSJo2q^Jfqr*
zX3zG-elj`Y9odzOL2=8=E_p*tPDe}1UK%@p-<!26^l-mn9`~~u&&bykgO_gQ;-?)U
z3@c8K9kb3m()OBQxetp8;5p!}0yc4kIW>Mp5fwzfIwXl{XI1l6-l2D(LEgnWbW(ko
z3XjVTG15U*lZ;4RBq?4yQ5*dyksuUKyBCy4WM!LWk9MVw@3)a4<9Ua@-Z9WS5n}WM
zJ1>^qclF>nuw`df1se4{u9B`h{sn==MVuv-7FA|wj8H1=4_Yqc;<G%M{#Xn$00Ni_
z>CO#ilA`L{;M|5&XVj?4c!PK7r%&H&a=s*Br4$%v@}@1@y=;8;bqpDlZS&O@k<52Q
zZ+`1WvWhV-R<JTJOS!DGBLAtDqr3uVzq+qp@To)UZ$mJ!Xi)t23lg(+?cHwBy({}{
z-oGz0+*wl}Tt6VC?ZOq|3oncQq0?${t#6l7x<br#)WW$JR`!2l98i(1`#i5AmSbp?
zewmZsl+R}@>GTwdY7b_-5Spf%q|cnyba`$z`)YqI4>Uaw9K~z&#=p{-%dej0KXOeH
zGqF$tsw~QuQ_q1hZIkHz{>+!w%X{6&C<R>gSr*JOC<SIaK}vBzN}M2B6&<H$U<}v0
z-FbS1P2g+Z>+U|aWhsAXm#Zr!0Kj)gKh<$aZ5hP_lf$cNvvMNEq9DyfY=cM3&6T#!
zo?G3F8CLaga1O5YR7-!bq37x5>0qRL5J2q@aU!J`x58D)1y6wF;^Unc1btHPK6az7
z?VloXvy^(cW;UJwS&4nydTiNLSz4-$xx=7XP6Uh`q&84K!%`?=hgZNBq$ktU5Ra<k
z(R`WJ88j$)-|+_P?&Z-&Mq7Gd5vkoMB6vtXDJn8UZJBh*Bmv3wBo%yp*5U0vFX*o{
zlF(5(W)a}KUVJ1ec9!ht^^so{QqgV_YsE;o>G!@++3Y7M@<|=6H`$o5-v~0%3M7(k
z6bts@6Dk0ht&Y~dXsddM;(UvO@^c$;4MVeKcCSFEttXopbJZSYNy^#%`+r;jS+-2u
z>p8vx^^`q@aRVH=KMyU#079>#wHFFatQfK-E`CY8k3$w8V<Ytm-}m)WGC&?mBqj<Y
z2)L_xv?8qwBSgBq`BDDbTA$@8@+;^yt`MB%eflC+kAaLn<+U>D+X$aJV7ytLh~xOT
z@ljSc&PZl-KOaa!sPhg)2=B<jQi*`|STlSb$u0}tChj^3MgA`^dhQ3q@`Emqv7K>W
zcaH;@#e_NPMSgshp80{dq7kN8MuWN^b#x5V9Wmo#nBoumv(2-S8sn~51TxPmbxb2M
zP|}<j$@yCKRjjShIQ@q}uJ|Wa!anWNizl*w4Vo4`J~c|yX$^Sa6s?3qYs2w9I_^pq
zynr@R++(GO2dTBr5!}X*>6|5PZdY`|j2zcoW7f+@@RN+!D{t<K!t&{=T}n<olxEAa
ziu+35PHD~ImqwtaSsp<Brp`QgymqFiq4m-8m)1}BnK1~m{0BC&ZEn4@aM}FYre=*Z
z*)@VW%%DJkM73d`AJXe&MCXQ8@6U#Xlo1MIC6JVbWA<1shAv@7x!j95m2k4v^Vyg>
z9+$JNHu9rbhS+#xUaY7!sLHXesl(>g$Kuu?7#kMW@5E8VXM^HNxt$fR>sN$n>#M|^
zyvRG0q@DN&m28|Yh?EtMds`GsQxph6#zM5KI$G;^e}LHqlQPRZ+B9nlIe`U_t1Zwg
zg=`jA__y^3$AA3j`xDXBG#RHbRKKBwN!Y37@tu?606uirmwBq@l*PQ&3q+ifGB}l_
zG*hgq2~h%(#)Wyl$L_!_(<8kpkyVX=xtR~(h`cM@U#40&w!uJ1uG?&BQw0}c+v@6k
z-+V%d6!4|$yClH0$5x`h)as~X-k_cYfGGiq^xY%*WVL<?Kh|F&byock7~Q~N!b4Or
z8RVGZu0Tm{vQ+f?YHa~6#KB#=+Qe`EQ01_oB?)ojk;pPPJ<bb)3>8SqqSu%8!FAzm
z4fG;|Ny1)W*h3sdcr9q#UDmb{*%Di?nY<kH$C6c0#C?8Q3|fhb$b4k8XKc!iw}ze*
z9?|Ys2XUaVAqYqrFpet_-R#Ug__}P22@>~TU?*Za3hvVWOH(b0(z-o^bDO}Oi9d9}
z<rKMHAS`yeu}Z!8O`VX*fE_q?q2Tzd=bP)thrW*kA@W<vSu}jk3QKJ?kHrUs@Zz>E
z{a+4L@hdW1!WB0yo5OuIN8om+F~?NZnlQ%ydKkW!nNZJ1oX;FI9h**1jD$^r#iE5F
zk^iI7Ro#c+r!BXl2bmcFpIMKMw94(>Xq(xd!<RENul|facceBhm30&u3lCn`8+ZqA
zd)m?eRpR^3Y6Q)0Wzke9XqSm#@_7R;m)kmK6F6&q6352uUhC0^est<Y`d}9&6k=yD
zQ2?|JpM$7qmR*)fQ`z-?B*yTqQ@K$^kgXGKbat1IdQvDg0VjO$8*<s#WPm6vsuY$8
z9PQBGIV?M^a|r1kKmAa3!+{3btainr>7}R*_71TbGa0Gx3aQWx`bSMcrV;&uJolE-
zR&n+lWw6qvW{MzC`b$9q@$<nr!*X-Pq{aFt8g3-I9Fs$C<Zp{JVE;|WVK8qUsMWcI
zLG@kAFDmO`7?Hth|45_j*5BPwcs6CbTIrn(LtjtC5!bD^NH!pD#!MbgBavgIv+K@T
zdZ~$WKz#RY&RvIWFozo$VsZ70=qR9fWFO0n1qHquCC9+LUeXYY^U-h1V8`ArTs!85
zV)bT75bk1S+qHQt-#;7Z99whSDx*`@4~L0IIy`|V-ou2xP)jt5L@H+qvVyWNvZ4CZ
z3^AyTWWAYtU@`t#rSXj$PE{)SdJ1oWS%ti&Dd2V2&?|W;GDX!`3dwyvI#RwW1ORav
zH9VRaRL;5=y7*=15OYDqNNtkQiq#LpIZa;l(O?|>0o-`3K_;&3k&xVU6d8SjKELEm
zB8B1J7bJyhMZ!gz`Ar*%Ryk5x<x@>n&Y^`U;tfj^6}yO|#mdBx$m4|`fU+lzGU4W~
zb9Lsc!kQT;#xFv=A#*uL*D^7hJkoB>A+CvwcAme{2>4=rV^IE1((V<8v|P>T&BYw6
z$h5>bzEQeeO~=EuF9MvGh$}{DA3wgG&dspF6*l{E4kRDlJaUpjwuf)EG+HkoFrJ8I
zC6Gx~P@^lLs*~wd$c^JLPr|hy&{=^}v?yCmhyQlb^m%l=pk^^A1NsoFAxNEBhyq`U
zj3<2RJ~2nsjkbyAvXZ-Emz{ReadYk^2SPsB?65R*;fuDPJsRGedVl3AIkjg6maMkK
zdnUKU=}!?kPgtUj(buApRGd}sTF!J=gUU@){3(nU02DbH5TD7ztg8hN@Gj-Jc+Z_Z
z@D6F}b>@){qZISF>(pK3jk$33-6gr`mRER48_II7E=KKyK|En3`fDk>c`<lqu@UMn
zp=PT>f=Jm%$uG&D$-N|Y7v8^ACTaBBTF~kXks7kN`ODKpO!ii_%z9t#WYgzky$!K3
zI1K^%LVYyql)N<AKSRH5dEsh)Ja%_wW9W{O%=#>NlN6WNJzCzlT7xn&aw5;@<5}2{
zhHRZ$fjOX*eofLW6|WQ9lYSLPf+K$WUk7V<SWH^y(|%odWF)jjU{21S5+iW_e~Y_&
zaFj3Yezl;&mmK@|NP_6VC<m3<TBT%aGzCpst1yk{ArJ?h6pn7;3pH5<XX*(3s5H8R
zX1;St$`E=G<>`$RGj%dt`CqH&FFvI{r@H1!m&}f0CBjC42KU!`x5n=%GPnnb9NYb0
zWI2r57%MW`{ekF<;Yc;00;9V%<JK=USE?#PmlZXoGQMb;j68xsci*_u>ZmI3RCO8z
zbocWIx)SSBT(9s6kJvGqsrFP*<{w+PzR#<Y1m91GZQ$qE8DU~2g7anwHuBEBJiIH@
z&6v8Y(>gYdRK97pb?yY+*b}%zWs=E=V7=&ATl^)is9o|#S~(#!oxR<9#xQUn^FJ~5
zT4x?PPxB`!CTd-ZeeLK_01My-rdWV%M`_KixPBk{PM*7I9bC^TH@fc$y)Er1wzvE$
zClyFOCA=b^NA#MU7(I9Y7jRZ~eJx7L-N#D=WISmgZfwYrOg5D|L<5j7DmpYs_uun4
zp!r--q6SYc%Tc}=pNg9^j%br&uA~T%5$E+#BC`y$1$BA6PQ$}=XOhi0W}9=FO+0Dl
zGd7z<-O#^=o66LEx8QsMrSVR5&ZbfF@OQblhT6}?HZ@<#je8SsKGS*#Hnhn|e%e2R
zcug><*y-ylId&?E=P=qUWhgroaQd`Siw)fv6mcbKvnL4Hbx2%b8JZ6jrDV1{3P@x(
z?0-!o`b3#sSD+A3<a<fzXYc$)U{k0hP_1q>ma=EBb|@1{VoW;681z7*6fUTU%)t*M
za6X=>(yW+ByIfrr$7I_mb>+KMz^dyK&GUyAkh0+|7b0P5T`{}#Kh$rh<8_%^u1SGl
zqyBY=0WU>ykboJMHjPOFZEEw#?)#pu4bAX4o;E2BDLPD`79cNXaU2haCP1Xe)N6R*
zr?#wXKgp&?%rdQKoFXHu+_@VaVOx4Itq1#Ekx4}@U0VD)GLfTpz1UQls(s%F1AKL;
zXRM%N3d#&WeWWuy9Ww)N%36nv6&{N2?zAUiKtgf&Kf)K%ekPQ4KctX$F;eyRAJwxq
z@pv*D@&uQEmR?>cvh7-E-h{ye1f}2BA4SPRmiV@g^;HLP{4~*~SYs$E`eddJHru?C
z#Xsytn;+c+|6Sig>VS<KVqA=79cLj<9quyDKxgAt2XO}J=$XHB?jPqqIbzWuX0urP
zmOF#E<(ntUE!=@}w^v>_eC>t<&-ZHYoy0(_#K7q!jb7XoUJB_P<P}*X$%C7QsGm=s
zLZ;jZJYLaf%K!3?M;+5mqDQ`Y-T5-tXTmeQ@D_+af3a*8lMQGsE^Vz&d0bv33V?QQ
z=#-`tUZXN^c9YIzqbM}z@$%kF=|uGJ9`~s?pKCE&vN;Dl20KJ6XeuL7e6h=APb*O2
z!B`1#1iZ<FMLmrsgWJcBxD5n}PvWD7FHr))`*TkTn2G1qC6z3+O&`C58xDU2J#|Ay
z!}uH66b3R6ZW4_S(93ZEelVpN4I`sze?r9f4t71)3mEl(&4XRAQ%6C|Pt5O~f+ys%
z9eySfkyDURK)P0adldLLEdFTeyZy3^dlTjsrb!<gChNqPP(dyscGrf#naVxid@&fN
zz_Bq}Tk7^tj<k}QlG51Pm|#E=hnY|PedGR!?pM9Fl%Nnt`eq)tW!5?60@DqfntOW#
zfIJQxw1&;7Xo<zp9WaGo2tXJ`8ifoWq%yCTt5sk35LfT{Zqi0GcHm%JXcWP^6Tp~!
zP&-5xvLl2{x0t5$PlD$nppm!gZ#50zZQE<t(8T}5zk%N%w!DF+9VLRupy@!)wydqs
z6{t^JjYRpfJE3V5q=AwDXzT0OS`1<+T$UdRqQk^sA6uprq6xmQQH03KenX-|yKdV}
z{VKpmm4eh@=|qeD`}?`I{K|oEwy66D#Fdy`u<q25(75XV0kJ?%zsg9aPH!1rY<Mxf
zs{lWoZaaCgtM{qGRb72x_odA4(^aOs&MCWJ4)m$E?1T`LZ1y3y9SqsomM~yL60iwi
zJ0VzxB*+ku<eOx$@eN;uB`gEBZh&QOmTXC5^n?B}#y7^C>vx*uxBh>vImaBgIp(*<
zysWA?tZ`GX*BRRc$W;Kd>=+C{Qrk#*$+juw^J7bl?e2HQILOF<zV0=!3i2l75+Y(J
zPXxZ1F_lcBydI2Q)h9<v&IX=;)qQ@9HoLm<Ry64F0*tZV5QT5hgh$5QUn^J}*HN%~
z4hGkQFbLtCpn`IP!vGOVXa?Rq>i7I%n~+9S<y3$v)loqHK_;L9cd;Ec3ba$@1ghWY
z=owpO=u}-t|EIr}X71_Ie224TT%aP<v2vJ90e|t$725Lp32tufqE#&&-17V5{MO;m
zSu+ptSJ$6ufcH~rkhL?Ql};@xIMn<4u?zub9Ne)Zk`<AGa2N-sFqH{|wjbPWAl~)f
zh)&P`V#Bjk6eYje)2r<QNVWA;I`t|8DNg0tbd;?#giH=*DsVv7bzyLHi|7odwQ%7-
zX2f9X&;fOs6125_pi7xLHb7{ZA)WSvOblkRbSlw+if*V-yO_Rp7p3whnH>cF2-c@H
zBWl0`rwvJgCQfgfZeThSGL@QzwB-l7s~D#&@gc=_N<(H0K#bYn0DnLDy4lFqFzUKi
z1&Po{1YFq^z1!4*Ytw93s{nTc|7J(q024R;^bJq*Z`<DHqAd8uwhjVcb`Ke%kAC%K
zSf@KY&F>9-LvJ1VjNg23gkFDVm|pD}q(AIG&o6g<!rMDOrY&!L$j`iXid+A1f`75?
zF#q#!57IyW<^bLQ#6D_n?W9%fJ9$-02d`@BqUM%P{@#<j>8H=V!%yxw#yh(DY2UFy
z>N|glzPfxR83V}=5+TmI0Tq%dY3xqw8~Vt>3g1Spp)j?Xj?ZM3>P{iYF(k%wjQJo{
zxX;R494qh|j2kKtr|o6NNs~EkI{~JCST<roW+>ywV!fNw7o$L+6L&AQdDMwYWu<%>
zxaNT%v7fpHhf4rl1rs3+%yO+RQ|Ou*LCqn9bA$6bWk+QaCbgo%^cpLzDusbN3g7ln
zL5>kX)>KKC(`&$T&}%G<^ijXoeoj|fPU?drqpzw1LI4T2g6gR(3YI~48pOaD36EMn
z+TY3ye*QJT(s72rw{ah>YU!f?`s*J4{oYUb#3xtuN#3$Q0#Y!8AXzlaH0ioE%??0@
zMg}}xPc>!h`y?Y}1D7oVAN2qdrySkFb_Aq4{WLRp9s2Maey+WbA9!jnuWIe2w*7<D
zH%fH+!UW&)-`+<5aL)=iRc2rhj(Y$w;5KO3Iw;E=Do|3urc<8^T1IT(#DN*JK>}dT
zDB!bfD{e?JkY(qux#_$S1<!8ES=w;BlSd)b6o3j&KPq?^`wUMhSQK70>!Z`O2H;TF
zkeRb=9jrIA-Q3d-@Z*%ZP45x_P!Im%?sA`<wkctqO4o;lX$5Dxo^S-fB7kMFi(J>t
zpYZIm!3HD++__!6l2yhGB0dPn)VxfGVkQl<r;sJ@8=m6Df47vE{JW(v<t#gqCG#uU
zOyJ#?GSJbp<NSkP9iZlx4sKrG!Obll+}zSd&8=P3+|o(S>pQu*rIR0cY9IahxdZes
zFTF<_cO0Y5e>%axd%KVS)IGr6?_Z$afs1th)315r>Ld>Bq_Gv^EXFk)a5J&Z$50#t
z;htX(6X-$P7PkqBWXFWqmKy_%ak#Gm-NkFKi`xI?s)YVzY;vOrVf~;1@@;uK4oJ!!
z$E6?{vb!05Slh<8l?8kHQP7iBdxJ(8u@G_vv=h+Gp-l2Y;iDHA4Z%RQ>&b!1P88=W
z8AG`;01%@iqe0bQupBDR8#fAJ+QMS41DU|JatKDz07l0uxps0!Fwl}XN_0-^8`gfJ
z!^GK<e+v9#6W4OwYDYF6O?0rR?@(2a=)D&*c|qn1unrQWIz$hw*-9Ebd}f4Nw;$nE
zt)29p$GiBMKlakQ{a@J*M95;{1`Ey7xl9CXK!9l|9Xw#Y8ZMT%=~5W{HS3`?xqrlf
zhXF9lKH2o^6u*7sQ*Qmk32JWX<nKSZhj;Gn=U4Z9$j$3JdH?Azsc&SOfBfi^eBG>B
z^kz>lWJoM~=B5Tm{2D5qGQ$BHGeR&;iCH|=*RW;7aQ%{HNvCY^ABH1KV0uzBnvy;A
zG;H^((>rGJY#LKGtO$6B$6@HMVb!^SDqHA}Yt7VWYW(WjK+u)#lC^APUueg6;ZE!N
zP}sc;KpC>8!;%p*-VJEVG_?8b833O;HLuf^kii81v@Dlp6mbe1r<mP&bMhbqQ`nXv
z72xW#gu2;e)a1mql(_K$cg9LqS@iY7j<>ih3wn0jpOYQAwnh{l67(T#MwV0OC;4Za
z5Avfg9pcH!DYh7egSzF2G<_7pt;Ivq`WT;b@ew}k;v){>`umz09>SQ4Nf?)Iz*w9N
zHLeYg^sC}?NDk<@WV&<2aZKV^UYT)YSbaX~@>e~+_-j>TPyp+yQysf%enDzjP$tMN
zC>iLgcO*s#^@7bst{g}=SXV2P(Vf8)f4xA1MM8PTO{jpS(PJx>ZtYOQkbmmI>M4-R
z@EWeCfEzpnjOmqyJPFWBl?o1$I=GdsMC&4F%3jK9a9C-N^dBo@Dsv4G)ImdvbE96E
z@xIg}Bk6cD4d<Lr>gJ!sjF2Oqanh(OV&c!g7^m0vouwZ>GqXPCN6)^)zy9+Fyz9LY
zKKb#4Zk*@?AY+>ZWWA0JWVizr!H-Q*!N4?ZU`8@Dcr=U4?g$Wstf6E+PM*I)zu)}{
z|I=>{P;*Nc{bK7u>OMKhlhYzC@us$8^uuSm>Dak(K7RHqo;&X*{)go&A;SiPzJeVa
zRB=aZpUZ?;)&*t9^-c)TY@HW?BpGxe)6xg}@nFUPG7k9e2$N9(Lq<n{k{wksWuOPM
zW@<azx$HJgK=uuRy0qt}PX#y#FokJJ(E+Xl)Tzf&@hP9-(rI(ezS^2SoO0J4oHajn
z*-izMwoJfwN!ye%0zTmtr;QaD<61b-i)2vy{WV>SsC>#a@F?h3Gq{$8wTBPL#*SJ>
z*zeSy(k$PZ;b~s-cX!ag{qMg`y@OZPPi+mItyT3KIc9A4!QfS1|NG<g(69FMm*ZC<
zHgo2CZB!x+(ipEH28MAhUJC=h#y^bn+OsR-C9n|2u*`S^<4ojCV?O0%QWmQCh_fm<
zuF8EJA51V)O?GTErKas!{p6m|SDj>di*zCDkX&~O3)L0JvRPhH7Uxfi?lb&28m7}=
zZ7;vmxiU}Cn4<@JRvLvdkqC&Hl)RuhXK{|0abVLjJ{jeOt7<z@SdCx%0d&~W@%K{)
zP??lZQ*us$Ia(Du^9G8167~V0nab*A6Guq_RgK+h`?;Wz=@4cI;~}eGkj-rDWf5Pp
z`sC|)-NyFvZPw_V8~l>rc;_Q}{P#y`P3vxMUf;?8{QMz${*ANL`Tl2odUy&JutO$5
zrpI(pnug2;PD$YumQ7LGZdAyIjlcjaYu<D)BieWR3*Of85&v@g5nA24o7c4N<}K}~
z`Rw2qS$kc*LiCeo-{HqzI>H|ePVz%P`z6o1ZWg`S^8q86aOb({T0+R+$vP&;X!#wl
zGCgf;>2ONfK$@Svv>nYJIM|dg0^(_CL$Za_x`{z|AY&#EK$4#0He%pKvrsNWX+Q|q
z=h-wctS18>faz-k9>bO;!=pMZyC+ln2vYEDHgbSgL5+YN1w3$6hnBHS9j^0J5U5kE
zkb!eqW%EPl3piD))7)WAt4yB;5U4;?ZRWG2Htmno+BQ|(2Xg7OI)Hr9`3r4taZ!}?
z)RtEgz>S+&#HMyk%gnWB|8$1$->{blKl|GHQxZ#Kd?hTXF%ko+#Y{*7*f^=bAtEMi
z`ixOpMtFcAo{gzm51*W+{aliPfQ=ack!C*Ldrm_Pwsz`_Hw-0{u_y(#j<4+aW%A=x
zW|CL{na$*Z9=2O&yfaYkpiUSkb7OH%2GpkUm*dm>q0?k+3c1s|g)$!<Gzynd3?fwD
zA|>@bVwKC$85Qi1d1s=a#EEk}tKkFcPLyxH!a2UpNcJ5wa;Vr!et{ojCFP0O-OoFr
z)dsz*!k`=)8lJeKj$&Imod#P+{W9Zs&vORE0lVN2reR;UqQ2fkzKD5pa*BIDx<s$+
z?&n8ee2<#fck-GIyXmoQM`(N3N3{FI7#%x1j#Flufzr%CEsFwKAI7YN?&Ooq6if-a
zjSwS5M+e6Fk3Hvk!z=I80~`0zs`Z`xgJ<^f3%gG9(Z0`Ud}0dt2b-DFY4EeJ`8!YS
z=I3{P$nOt)$#du3O#kPKdtt2~oa=_`#T4Y&Iw;(=iWx`CzQ8mafIFNP*ImAnHPWeA
zSPKY%!8R9oK#CbF+e|U7GTHR103ch(hr21=*>jq8thI+z#R$eCz>*A^+T7MHy3G$G
zmOT=n=hkup9hv&nscy|;8ZdQJ-T=T5z}Py$Y1Lt}`DO&BWYs@ylZygP$h2Wr)z-=3
zF5PKDaE$8$?cvD#Nk7=RAAF_H**8vkW7c$rpT&Q-l>Y61_bu)nnuKGL>;c8r&`QQ!
zcb(IYeV@>(mM;3>+?Wd@xwst0J_yYj(BcvlnQ@ZY$D{066XPhvRwDcp;vTf^;)IXQ
zK2H0(k*COiHqns&&eGFaK?I*E?P`pnV~TQ?ACod5RyYDI?DP`HE|e7%5qQ8cGK@u1
zH6tTp9B2sX2K6VracC>mL5;2(gMIn%n>byg=LT$WC}kL%!^WNe=ruH`&-{5{kOO_r
zNWeZmJ;`4*a%js591X*v9eX-M-cqHDY(R*~)8{CEl*4$6jw{u}b$37TM`HYxSCKLS
zYpnkPsH<u-)XfD!G8&0JYySWbi4P?_`yiaPgD;=nAHOn5$NE2|?Qfl-pKLzB%`IKD
zs<n&0`}iJu_}K%z{tqYU**|~4uk8Jp|8nFr>hAr54)uS{C(d7S8yegptF_GF`=4B)
z_xiu#eW$<RH;;bGuXGR6=3RaC#4E@7k>4Jo2R81b=9Vs6)zV3=zdJ&^4t&HPkA7)9
zqMboEIdFWacZ628cG7D-7wDm%{gP+Tp3VD@ehdSoKif}$DXe``(4kq!5g5<`oZ^AC
z{SKh{ET=mw4Ks0?5wpQx=?q&I4KsCd3RMA=tOWz0b_Uu@!L~b2Ljjmh<7(E&rnYU`
zRyUF8Mg#{`aBblTf(=*$DIgfutl1fJutrbU7uwo6%@_~El;|k#;Kg-zk{u<_*C>E6
znWnZWTU$%0)4Gstlj-_V18SOq)T#KehR`iXkoIhPR~|xem$W+u2p$TA&zJwapUR@(
zr#8Q$K+bIDj^Qz&TAN<}W6uRzwZ4OUP7M0E7GgZcO&uAkVoQwKnYfk2eqxT}n<X9M
z7=vLH>cnxuu0aINj2{qRy!_an3g+(#crY<ACdGDA{s4$2bplXkE1B{S`f+8P+-9Ey
z>^gvDX(j=qU>_8w?l|W(ubM<8fIv1)d=Th0(#&BY1ane0n@n;%>wSjrRB)#8#IZpL
zRTp^yg$IGxPKVC;s;9)@5eVj#ZG5njwYD;{Wa#-1bOz^A#;4~|3}g5F6JuUJ_@J?}
z_w#(_WlHph4kW-&oGjP{^@e=c(-&cx3TIQ*DM<vQ70#Np<LytVee_2Fw+T?n_|?SK
zDf;mICEj=Z0=?34hFgDsn18rwA2+vj@~YNOYF^*LGsh`((W>>G{Jp34(LepFhkyS3
zVfyLw@A5;xK0psVxu;fkX2)K0ODC;r>7?eCPJZZ_ef-2LM|nqAKOZ<bL>~=(#gmgN
zJ$g&t)+$4)qg_28(W=%i+PVK6H_f?$R{ZBRHn8fnsjNS=wNbj$7P3dUGqn!}XscuE
z>Tq|mP3Z~%o3b^4u%-)l>FOY_8yf(?!Gd~SONUd60$41=1iX@#x2)8Zf*v>3saZ(?
zy_g}Bj{qOwOAqJPsbK)3x}J>)>l&zrDa>K8$FPAyJl9Rupy5UyJl;i@42-5n*Vyi6
z$m)&SIySF&n9kNIYRd{LIIQUmHx9`TSv-GFvbG3Xby`2Jzr&342p&>Aqtk!?_jj{o
z^K7lA*$St&g{S@zqMbcM+}zql9fv-F7=vSs4ZcYR%8vy;7FNVSj}yq^Z6;Py^3C;c
z#xO-J&we&e#N-1*j3!qf_>A!v|ArVOnG&EF#s~o#tWA@TWfs2(Xd~Z<HNsdF_2LpW
z0U#1Vi+CMs82^@Tp$fUg@)YahI74ou^#A}M07*naRD*4^V4X^ui3HIun1!RDBd1Gg
zU+RQ$QS6t<6n+=c7SR}~AxtAqa!!?DPMdM+&=~|EMy0q<Mo<J<h<>I0Sl<jq6>TNg
zoicNuG<%hyjfORP@h_AQ*D9S9<ToP*dNsZHUaGe8Pn%g8oynbpCc!P^uulI%&fC(<
zD=epe<M@zzA&e$LG1@2N1D7Wzd0_AopE&y&A3O6YA38lsJ?{_l?!)J~<Is6(@A-(^
z-#N!`zxN4u9X`(o-XEevr$^}6nNRuDz~}Vgg)ew~Vp15&gV{ufWZ$y`kGB;w(;vFd
z@T!(BT5;c6nmv0qbssyg$B6X1%!*}$Y|1NlaIIzO`ZU8bt>DJi;K7upltJJEQ;K+`
zi)Q;qjZPnc1DhV5^3#I?m>}z8K+=E^?ikiglT3q-7!a{D3#WAI&vsGEH0Tt^43U8$
z0ZWj5GyW8O^||TPX*<w2WXvSHrfb+B<A_Iw=w=rOnkA!V_1v_%PQ$~-7g*0}JJbQB
zN>&wtnA&Sv!MA}<1Mc_$fglpIbZ!T9?LkD(@dH2F`Im!S79~Hmd4~c-J!=y9u=RN}
zdVOvGAgyZYqP@q?YiCQdBtC}5L<9b1_?^VY5OcKmY7E1E%}F^I=Q87k8`C6QI3N`2
zg;<$n1>;x(bp^d4@NlupVwMdf$d59}M$ffnpjCAUWeKIt=mLa_I`_An&JZf3woX2o
zaSZKaddl+;t$Q6;Vho@!v?}amZ94ukZRsuKU4PH)y0z-+!VxV7r%jAfrAQGV0szd!
z1f&_;R=3WA2W#8zr=XO4N6B@30Xx2p#G$i}650;(CZHx7F&JN+Mw?EZK-6LV6J)L9
zG|t$fJ^dT>h;_V|r8bB<$F?+(c>Vg0mA5Unp9=yBAEq?bdGbJDg@r+|AA256YTup@
zj2s3Q2w=f~GIq4)b2jsOB_e*|jZ^$z*8Pe9rm2bVZC-2BVY-gV*3u#Pl1z_o!qBNa
zI|>HZ@Y$icQ;fi*FM`Dp19EVDj2#2wroIILz*&Dfg-UvUp-!pFR3l9F=^1#KeS{4%
zZtBym7o0|*#kL#Rrcrgu6*7FHTX!}c>OeDllAW_`mEZMj*)5k<3~SUBa0}1`KxjL3
zr)=t0<q)|oOXt>Gj#xGkrk5GBvbb5tXi++~Jz|+b+tmz5@<7(I4*<BHIVtN)M+|KD
zjZE>s|NCV$|8H-lGsBZ44-5!?^-RawLrvfCG{4$CNX@OC)O}(Yfm$|3QRt6223>Pt
zhB1Od`3T@_xN_hz;m-wSsN<s$`)@IR<l>5ztKczPHU>`zG%D-B*oUAh0lwIV=rP1v
z(-~=9rI(S#5(gQLW!jd1VkXz~M_4zj-$WnkPg>2yiFKoHLC(soqvIdTc%W>$@a-1W
zLNee51Z*Nu%49S`Mj$nrGa7(6uu@uIi&YsY<HQIofsHH}0v-Y#@s6}T1$G&uXxlXn
zsT`gbnySiSt|=$jDd}K!o!UEV#gm<*Aw|#@zTF((F)-Gy+BawipnC!!EBR0LAFhFO
zIeSZc1piBDCca_v2yuLPfjh2E93Vi_IziF5QTtB6{^R@fKm5=CH~-C?CVH>;bHCZ4
zHic*dvtN*}Q?_n#JODNrRCRNQ4f3|B1FqZpH_O)8q0zRE&2}i;0mimdGu_duzz3!{
z?To~D{0;7IwX^eVof+t5c-p2;Whzv%YC0_m^&s<S=l<ETGiLy7!FhhRM$&;N$xhl1
zRm+501{Uk#j%qvSQ8RJ6(F3RDacbFs>r|Q*8!^!6j*O9w9Iz1r*FW01i;xKxu!{Tv
zpto!yoNrmX{@Py-QCSr9SnF?Cr}Y(-+R-eS+1&c}05z}g;CD_9k#$puIk~<p-$Ohw
z@PToS1I-x!nFDPAJ`f9%dKwpy$1Gq&aH?@C!&8tI9yYUa5n?Qq(J)MKvywl!?q$xj
zmysW1oqhLXkQ7g3i9uZ-(hblHc!D^~v0aGm!c#p^E9Km8F=NUW1y&KX`teiLZL))N
z)lE2A``(U7zi=0V(<esEI)!Vrey50vH6oBg*7~4?it;LudM6|8+~DkaA@L4or(kcO
zTwPHHW^s_$in^YLyPW9B*#d!S0$38KP`V!Esl=!qZOr{a=f)=u4Kkvo1bBJckw5K#
z-qxw(5|$I22it>foy>K8&&uThtF}zJ0D=A&A8t6Ki;5tpw!m8=UtR`}8JVW1nV$Mx
z4_|j(Bmbv+9|&(jkgSiLrzgNe0T~Y7S_iU2x(Og0!Gdc61uQ{EPp9H!x_ATupG<)Y
zXn}Txj!Ykh%^F%hWbP2;=-NctKm!Z-brT3~E|B$lkZsf{TLrVzSQgKs)6Ak<12<yR
zq&7uu)2;oWR|ViY)h@t>?0{xiXJ?r`djp2wC_(@pZ3Bl)CmYDaH<_5OHOmL<>g;VB
zQz2^%fL_+#LAKPU{cQ?cA2f7Xfqyf{|Md5F^ZdWPjZU4vqCi-uzrhdtM~HeaOwxu|
z-skUb*h41=E{47pKtUR3a`#+6w>akdqxI;DKI(5*v<V?6i5obUX+emlo}Q~4$4)<1
zlQNi%NpjCi8R^!3hq&+R7`WmPBRy{vXd>&-PN;v4@fFy1!QSvwmHmWz7|%KWR{w%(
za!d4(`WqC?$9I%PZ4h;w<0VzDOK!=n?5<m<RL8X3Bm19oG}61ySaI0*ZDn}%^nBZi
z0nGTpQPaMXZ$}lDk+mLh1uqAFbKs}qqx@Otb0DnBCKa?4xR|2TwlYqH5lY+5060{X
zlO6Rey!iGVKUfcu7t-=Hl|SFJ@_)1XL4YRmRN1AD%{i7aaOUZn>xy6I><UyFd<UaD
z84V>2GX1arVI?<Q|2O>7u2Zl^3&Dv$JlKOj$k0H>#T`NnYyIr#5At;(i)cG+ZR#$b
z)#rDxPC@nt*X>yrP|uTttd*{L!>k?vOwD2qdr)I%2?EH%4HCmsT1SDA?l_h8YnI*8
zwTL>kt2;t%I##lG4xqw%N1gt)%%mR5tr=MW)1%}-n>!-LZ5A<rhg0B?%~M+`@K=yL
z4cWo~{%WAx*;=!O@b(PLPFf}wvy!kB;I+37QBjukSnIQFSw5u?=QR?YI6qE5|Lr0E
z!Nz_3$;ek}{|?~C^~KPSwa@x^7rGpPmk^U9Fl4AB{n^43X@qbOkbxg^Bx3;ApkSjX
z!!?PiUS|B4tcH&zQdb9)B>q_&PG+E&0=QrgV9b?EY?6!1qGR7K>dmfEWE4Pj%_j^m
z;CGAdjPyjUX&hIbCH$h^!Om4+(}c1{yxjr-N7<MI-_F)W7)ZhZFW-Z*h@2K23ts7o
zqZmMpH9gZNXF8s%a@AP=DaGLy=VV5}$%O;4cVI6&FiVbf23Q6~Ydb23Gio%Xw&CtO
z9)oW2T6B(#v&feiI5bcMp0$1OlL$J%T8Q7GGpBly?`Su;k&!9kAxUiqeFSBgYy=I1
z0Zjmti6RHVUdp!%Fr*5{w#@c{e-8JctoOH>ze7Vq)Yveam)y02e&6}A4c54bUl;68
z+nOiM;6QoY+yK*(lC8l-{&<Xwy>SDkKXv28H2KU`%mn$(4U$E(b#Qjxn`NldOql{3
z1f?*|Y17BG%$%;Vn}&8tb!2bHAg7}~2S5a**1(7XSex?Hb%qAq?8ugQ{EPx2n?4pG
zsi4d<VGaQ4l&$F*0jO<$@oNkX5c?@xTW=@e7#<cN(+20@**ZsfV9+CQ^e^nb2B81H
zEW3y1|Ltvj`oa}Il{{j0JTo%I@AiMm|M=?z^t0#Q;Y(jm<YGe-F9GSLF-YTukNFsz
zef-Qu1M>Ye8<Ucl<wHlUoQ!7}>*LsLf!gt5^-|uDf1#0#BN(IV$7@1*_P<nTs1wT3
z&~kw<l@CM@F+I`>d@Eg{=fGTuyE%}0tu~^bz@fYj5<rGDf?T0p7-0O2mX^`~Lml+{
z8Mz7%J&@t7Qms)orDeesI$TsBC_x!>AjteN8o`vu2=LhPnQIUE@*OR92*&b0s~DWV
zUgw66pk<w-CNgoPZ{P{*G3Vs7t0c-vbpc=k^%Ya(vD2b05}k?js;$!drX$fC<9~^R
z`?mA4R<{AZ44v3?XPqKGZJIueH*o#fW=2kOWt~pz_$DX?=sNp(9#u~>Wmd0V!++B>
zhyS0)cJY&KC;0S*smyesZHmBb7oMYM3-qTn<DwfB6hKY8?3JHVv*}#iC8?V%bdBGX
z-ot~c?Eq`pnF)shLuSy<HuUHAA+VDSQrvKXhxpn$LDW$=&{)^cS*FT1Y2cefaAz+Z
zKLVhpAHWf=jng%FGEM2gq8+8;&q1^!M?9Tr1)a8=6{dqRYbbiqX=IqjhV^&~M1=-!
zi~;b5K4lwmY~7^r<+F!V{Fj~&c-E|0^l0m|E+gF^Kx^0W&-sC;_V5!gAK|N4DfB%T
z<WmsCp|4vIBHzh<jLZRmY>e}f!GHwt5(j+Wue0&hVmVnu7{8GBC~p$S6Md-gF*ZZo
z@#9G@&PQEmvwH04vx|-S_)393vq}`lD>Q8ylMU1{4FAz~pjURZ6murLMITFiPW0$~
zs<JG!FSd1tRX_S`+7*S(e6gw9IH2SNbBaijWe$)f#)tzQl+!1Jj3LmueO2%4zyota
z$BY+w3&2PV$u*-$fv#x3_A3|zJT;>WUl!<9If8d$1a7D!W7}G+2bdg~1^Z>}zzo`O
zGWme09TEVocuAxeW%6Y#&}fGYG*LbexKln+&luD-fM)cB-b5w?*e)Fmynb_b&e+rO
zn(9)@gaA*2LxX(%^|R?8AO1P7eR?nbWXnN%@58Ud`mHH<n6CjS|CR<ja>R}pu~(1T
zS#i1}6nC>~)(v)c!h(L8lCyPTaD<0u-efHtoGCX-4qRb|&W;xe=iuqa6ah|C4sdEl
zaYQzH*oK0B1U<u+VZ`HU`ay5DqtzdDY?)7+>hy;|Lsn3-i3)siJ)i&{*a2<p?<^ZC
z>*O?(io0JG!0B#Z%go6XKe<etWC+pD3S@OdhF@Fh-{Jvw&@3UySfl&D-?M^m`P<w0
z^!W+16Zq|!VWO>Xf5hK?d^f*-V8A`FVm}BSDT$@pYq4J<fWdwx18u#29bzLn;ubR!
zw(7(`<BeR|+;|{2TwACQH?q}<Ye7Fzr(tX`-6t_hLUkw#!n%u2*2uGOIj19MpJ?+)
zL)w9H#OXJuXZJnfD*@{mzf;?)PC)<U=$r4M4!xdp{1|2m@`5WC%5g?0WkwwV2E&{n
zECaPMoHJfbT_Q-5x-y`qpf7Q2Cy@LD9+JqBl+6wDWDXynVjTZ641?q7x1bx8Ip`XE
zCOAR>KI*I-cyRu1K|oo{Id8m1$aipT3j<&<tLJ2+oKdRVCoCdYg6`Abl+tl_3A#ic
zU4!}ZCTG0nMQ7kIc1W{dPRNY!qCUY(q#qy+Bt=Yo-@W(p%{Se|gCm#d(H9T${Tuhv
zTSq_F=|`Me!>Kx1Tjh2@%3uw<J_TTCrcg6^uwKhe_1Rk+Y`V~Iwm>kWS+o&SaAm-R
z>{Vp82}8h<P5~RxnRai7u!DNztG(bbWXOu?+a`3!Cv2Dy;3s^K!cNy=IL-vxwM`9n
z{+zBwv?*hE-dzO1eIo`m{cc=*(}hi)n;vlepV(J3b9k<yTRW%I)&PJNFpo&qko2L!
zrqv-^2S8qY&34ev$o6JWFVC7ai+}pqQ}&Pm;PvRhH?;1B!}Nnq`}o7bFDUd6>t`Gu
zG$D>aC11yZJc}>cxK;N9{aM0fE-qU9O8Act${2$z62y2HVjAee^Auv4$Q}91fF{>A
z-VeMc@iy>W2QX)1v6Mv}iP}8xqPw7fs|$e>$Bvx7t9b-zjIi+`<CR!b$~l|l#u#J?
z`Kytv8si*TRl7i09CK#M6auJnj(|+s|9v?FL4hd+Bxa6iP!ZmDG}WHxA#o)0le}^A
za;VAl7U(3(;Eh}1#3Vw1ZLK~!B3YGK4xEC0*^JZWIsz!e@t1claXhLn=TwXIh0%=N
zjh+Y3`3{tIWYk5KzXW;nG(aD|e!k5JAoKo8$e{NxA1c9@Tv?7j>9fqKE@Ot%gJ7%J
z*WXXGuDgy}T3UE=dYYc!b()%6yJ+j%A6dpoL5@uYYW8ImGIk@Dank8hSxB!LBY2Yq
zZpwh^J->T4ZesA84J>;XrjY?C*%YX)k@E*T+c7Bycm$MAIUt6+T3v<-z@gg+qB~V>
z4PEX~XUqs%UCd~a%4J87z*Mcs44X3)ltG41H{Jly)#+KKZ<`t*gQ=N7ogUZh862Ff
zAk}B`OkQad9uP1~svpP*0@xFM{=+>hdG5TM>G;{N;6U#g9q&3cLiazpmo~h7l)f6D
zgpdLKE%tWT=a|!&Ui-g%;CGI`@7pmJLX^zKS*w%1mzE7N0Ae6y#AK{bXcEL29N;`n
zKSsHzRLN8NI|8mM9oNxGLSL0i78mhv6+H)Zpp2_qDTnxg*Lw;mbG~GLl;|HuaC1%2
z59o=VK9V*}$LOTKUcx`hz)Uk4JzqE|I5@W`2H^|a4MxSl--HQk2U=HwJmcuT@mlyd
zD`>9Mh7a~0GKQRjqumV6*J;~)FV}%G#^IWiC>PRgoh+(TQJ}|DzD`c>?&E@pR|(v(
z;D|D#%|LeTK&T7oz^0O#j<PnSgf;^o2Fi?0$5+r5$Vy3h*ADs_vQkmcm5uHAC&w66
z+(2O7W%Wswin4}&IrDwx$`y3eO*ix8)Fd%8b)Oib?>yeczj)~=9scmL0f-Sh)6RC+
zBCvDsYqd-lX0I?a<T6n<jcRYAu=nxGu2DJI8K(kuT6YA14Q#By^XpueQZ@t#&#-pS
zz>8%LZTi`=fHoy6K+m#QcvfE@g2IvM>{KLxHv_4X<y79M{F=65cV-_&5Ny-aZfexl
z)<IU)HbdZhY9(_B)76sE9l`en!(q&$vd$2ugfaUIQ^=aVMeqqg7&n{94&pbvKj7=G
zo5c_P>|fn^fXB{_^W(oi&Z}GZ(3|g`!;S&*k1V=sw9CX(h-WU2RDCdxX+7w#`B;{T
z?Rk1WBw3uoaZqXa2od9=yJox^?c^ab<<H6`aXf7!Y18S`Kj*{!KwInxoJ9H{bCf-&
z3y6#ur4zoh5A%urE9~m^Vmx}xkZIHS5&M%hm9zzlQ<|yF-WPNCV-lwT!Ly8_pw-GJ
zMx<c_JgA*f$LO%2Safs*92}JI9N6kAU(jxZqfRz4fFqT65CkY_VBtjBb-Dz72q25P
zqv%7yvB<ZjvIbreFpwwc<$+F}Jjo<Z?kw)WN7QfShmh3FU+d(l-LoAh7idG<^`6?8
zJ(FsmYjpVfa;0qn{p2Ad_(#q*PEmFBDi#ks^!4@8b=S?}=QeLvI}U#S4X=CQUH;w^
zd%11jd0Rt;StXewmEEt9nX$J|O#1_khYbK4IKZ`9(+X^G;XNL(tH40lV%b|Y6daBk
zDAnmm;a{_Cal;61%&=Xb$+W5NUX|Uma33}w*fc8~Lal&RrYZqcD)6;w%y^8Ats8_R
zP6Wsf8{o5po&7n4wh0ENM`81bfNXcB9_UNK@-R+oPeb;x21bWH7{qmUD(gr9be84x
z?J6HLy#8M+?&G=hZsrr`zNY?BqTZ2d{=>fW{J@iY_|X>+(uGgIOk%pmE_(#i{%nB4
zdOl_Q6NSFW04}imLw|&R3~}XJaU**_#x3O}6IbG=UO5*VMNeF7FDYLUUr;zepGmyS
zjM=%EXgcxn*~Q@u4*-f)k7yGImefYTE@_2p>N5FD#)u?<K&j+;i8NKR0P-tz6Lg2^
zT7MtGcmhVNZBYANz+G)5OR$2l=W>Q}qTrh5oN(7tn$c0-U@&)`1r+T3vud!+fy8{d
zgx_pAYgQb?JDGJh7o1FK_%+Z3#rZ62unRhNj_=ft6q=0ca<=idi+ajCAUoPx*4l@n
zp<&N9cH}w?SNjrZ**)PWKIi$!_yuRad--a=otB-BINnjdoYDxGPWg4}vIhX-<;(A(
zTW`IUCMPGYTTU~zzw;5VdAy4sd+8{>_u)5$Svt2!AF^q>HZPe9C7aqDu}lvhdx8K6
zcls*rVVqW!4Ht0MoB|iAW8hQ3nI0HCV#mhdQ6+tF&oX?Nt+GrTzDw6${pMeThSR3F
zfx@y|dJVvly&1%SwVl;x>*EA$+O)RHFl^vkGNJD6BO?Yv6#(NJK3#uk)7xq*nDSMd
z0#L*=4{aUgG#on<<urh<nPazmd8WPn$3CIivuE=|Km8^54NvpIzAyRbFC3=(pV&<u
zhdu@ehgcT_ll3^N>erds2kd{4&BAdHJ6LF2+6?Vy%GM&60US5Zx)_*?9|_+M$XSf2
zh-D^VE{>(~5z1hI(eDOOktxg?B>GoIEpQXN?~F9+@@F)I4l=qI8(Bs(fL+uh{2OGV
zbj-97yfT|c8Jjx4i~f<}DcZkE2Z{fMkNPQbVO2wgz_2+WGMs-piQm1@!5~0CX6=**
z@FkZaNsLu#(D(`RR(<z%z*vBQ>}LjLR~rHJ;q^dP55VrVpH5JB&~DI|>c=@Mv7@2E
zL3NqvGXtoC3>2Ku^PdN`_4I@?rSetq1u~kPDKGio7$_?A4R*o4fcmTjdkk>shv2)O
zWZ(n+OZx@dW9Iwe!-u&nOWLw!OVlk7ef|xtd+`u`Z^IsbwR?~v;J{52c<hQDlVVeT
zy7@vfRj|=OcACQR7;bvd?P?t{AfOvBM#2UUTxX^`I|;y}trx>H>+ls^_=+_=%MOn(
z!S!jD6(pF7#>0vQJi!@)x{FnSonIG+YZh(o9q3Rqe2}%2HjwU!@old`n{ru3&Gac~
zQ&|8s13(+L453V8yEkbFXjb56Q{%QP*nj+H6$A5qBh$R{Kd<Jw^KRm!AAUtIy>*sW
zKfarvdgU08eSO9HM~EL1aq&I`woH7;^xN#c(Eokh2=$@QxtN>A35g$uc&vZNjDKZ&
z7FT?n@R8R6AV-J7?}R?PdKk}8@0oa?#@k$(jJ^>3GGm*uoTr!akd3LH251ESHJ<`7
zgjmDykJ(9>(BTm*khF()uz9dp<TV95sVz+xUWZuG20YWFdoxBHs3Hk>ufm|B1RShX
zP-C36FenmvK*a0^Q>S2UI|E8xIcqD+KPWJxJnt|;S1CZsbz&)3#lIN^>6+3K2ApH%
zc*?YcGE%sYys9%NI!kyoxntYula1bsos)>idwb~c(0EO<ptl;smrr%`(V=nUF$fyk
zGJZsVHJKt`a!rFO`d-Fgq%FxZ2Rp>SUfbX&=(l3$@l!o~cxXJM&&ac<g?;JnWy|=s
z+is()S0^J4B4T>|opZeU@h)EX;(N63^hMl2VQa@mBwGYisj%itrzCZ162alL0vFvR
zAk(-tP-ExtP3z&fHoYesMf{pD%Qo8aEBIP218Dem1~`Lm)PUL<04a9huK_7{2r^_0
zbt)Nml_~%w1FEq5)xB*)H<k#P!YNz<c?NX#Efuh-M0Y8VitMCQsWy#jn?KA3(>8sI
z)4yV4&Ai%LPFxR(>l$^JGOVpM`CzIUb}tJ!-hb>oU4Q*-TKWI}BmL8_yZMJ3_w(U1
zqiLMNV4}TO{g~yNj}>Xmxz?vDURTAFOy5@i00sCMoQ;Ju?G1K!aQE5E9Ir>dh7WX7
zPpuqz!dbq?dk@gzAuFF&2?5?C1Po~u<7Q~p>ya&%1~}r_PUA2u@S@y(@(eqfvi7Is
zyUWsnSH-xmdJ<b2pwT}7Xo&r9uNTlG(nmu?esc*iOFLxlRrs#R2AeUk6PYqnWhd9<
zzbvrvf}!wf*(9SEc>ur{6@&ijm1p&wF(XZFF0=~{hx&<u25CoG(HR`5tI(IxOznZ?
zb&$ulGWsPaqvs3TbdNtA+X9YICioAZ*djlUx72@V?JbS8WamH#h`uANo!>}HcAoQE
z#P(G3%e-mz3R<%07HVv4pj#F!qz5;507)k133__<3R<%87H({4<XaXj;s-Z(x&g!j
zU#*KxoTGIs?&A6L=5X0Khi+eV7jN!3>-0~T2YB6zJ8AyhIb1Z%;oBG9Nt-*)dXAO0
z*;%^qgYz3`N!x(4kusj~-KcY7;-g28P+1ndZQFJvjfjy($Hw{TSKsI6mQLQd^CTS^
zxNL_8OI9fW4Sh$guA{R>{&+5(y%x+i1>i9y_-<8uM=R`5g`KTN*QP)5s1gLC3Y>Iv
zg+BsDkN3cJZ6mhX0AGD3K-4xV;HC&W>rOzXW+!3l+13HVv?_p1oC?QmsGVU4yxK+$
zokqneW(B2A&$iAI52)5G;HXT`i~ekC6*GR)CQfZf8SJ%nUUoZ|&&vHD|M5P){@?sJ
z{9hjZGrzj`ERA28s`<6`XdiblPWhNNbA6mPu3pKD7v4gRjSW2i_JzE5bEhjye3_qK
zvx1f^x`i8R{eA70E)1YPRx%Th56~kk@8bD$=Wy9Dhi+eZ7jNl0=i}M<IeKKpU3|;j
zCMp}6Xu+bpXmjU4{g|iY3GwBzc5W&PTGVnH%DZq&%uExPcF~-o;6*K`Ld=5)V?#&8
zGclEyw4DolxX@i0qm5S_M>y8W>&-$<MCML*D+_?oh7|JSQQD^HD(czkBZ;H&JH*vU
zn=%jb0fQj8b#$GKLDvZ_4sF<P#TDqI(6$4MzJ1pwWb}Y~#^C;X!0Etr6xerA#5#_K
zbC3k|0rM_1hb$)`u}TgGQdG$Y8VK)42gP<A3di=H^VRNx4`dL!IiKsiU|?_x6W=>&
zUiP%Zn!ckf&JocJdHn)p$;ux5iFlj`P9LC_HA}fH3tG~47MrY<yUgcmWs0Jp#ck)%
z9-tS~Q`_<dRKvy(Hvj-207*naRF;jrX8mUF?C#`EYnM||6uf-ffZDa~p4+)78hCZf
zX6ii9Nl&l6hsv^~d$yg+J|z(`Ke}WtHOyJao3`zw16}R3Zp9)l%Ld*yJfU`bbjdtw
zY+A&dw(j8W&USuu#Ud(;M%p$!Q3n8z)4ARQ)UxIdF3XY@?>t8)p7*EdtCWzN;q~ri
zck{Qu{cYbzT>qLW{=r9M{K#+Lq3=Agn_qb2EcITvLYAq4U9JMWbS;}@r1VTY-DKeb
zn`G%^DiPnoYUjmG+u3)pc_V%E1iTW>ZPKu{b+#MTrV4F}(=uq7CDY9unzfw9-KlU$
zFn~YFN-Cf+UEsPl+%@YqXu!HUJ@N&nmErYbc(jXcfDn)>yLbKcs7)(t*3H%uo>5ST
z=LAmcRIoqG&u0(CR+bf<QqX5$68xp+5Btx2N&offx9GZAjr1S>Q!{<_^+XITA$Iu(
z88_%^3?tsTd;t|@1Fvb_LLEJw{Pcs%sVE9szHLAU&9>zWxGWlIb<1<y(cQ@#AH0Xl
zqU7aU2P7ynX^S)MtXn*f8|N&fP21Y&K<6%cWaT0*ibmc#Xj!s#i|2B~oJG88`%dcV
z+C`77Sja`$NZW_UUEGB+icQ7|T5-!9DvN>^w)R3?gcwT1%;U7;mL@978qhOZK0pyO
z^JPAJx`$g=-$7+j(2_Qbd8RWz2Eg~k7D=oPpd*46l+m?O8T*7LY5fEQI(w@i4zQ6m
zt-Qo>$c6|%4yAkqUgdffaIE||?N!xN2XV1kZ<$`8zVbqz1mFViYr5+;I~XfTiUe|w
z5btRn2O7MfmB2FLB{7g(jP*?c@c59Ct)^TeuOR1?W?WTUm6POnpin3090@=*+7@`c
z?#&N^JlWsqHE55hUn}ow!Z-7#KnH%CU8?jWPE9=2eit`1G*UxDBb7x-i`&j7emL~{
zo!r>i$c+sRRF(xV-f`B%iMAnT<{@e*N?y99*ZE4@U30mi>5kg(L2f7tTKe26*Vc}^
z=5gbkJAxn0P#(Y3PDN4h+TJlj8E<ba==Rk|n3-wfQacqzNe`aB<Yc|Qq2vXtj|4w6
z8HU^Mq=v=@ZfI!Wq9|$cjsdk|4zPQ-4n9@8ci=z|m1W6oJ9iS4%{~Ay5$``SL_gfP
zpMSV%AHQ~Bh(5q|Ua%>n&kg4AzE}Z#BQ~ws4_P_`VK&WZQ?K~iuqoSZ3+vxBOQvh)
zZ1*lsHOmf9TX!bFQl?aGy&;~#hp+JRKoGKn!*KSXf+^T+q3Z>wY^qz@!X3W)7msd9
zfvHY&3y>2qsJmMUz#D++5uaW2VAs~oAuV027<N<Zdcje*c_-|Ao`y^>?yjA={@&Sd
zXv2<^+}zSd|KtDmAGvAHjXXAXN&PRNi8L;T80F*n5H%D9-?7<e#M<tf%Z+oE*2)c2
zV>#2`@quT@UGunM&K->PB%qCtwNp_Pw6=E);x6%mhLRSnKFrKam&e+<C<|VD`l1`h
z7C=l0AL!T29S<(%rrYo3MGcUt%ZxW&YZud;1^4lyhLRSxo(6p=yIN=P^}D#Sp^+LI
z8@VV8UR=xQCF5u1c;Uxuv<VJiK_ag{M;Gd6cp#|i9Kkh}8%Nw2?_xFsl~@K7E;7El
z7U5pDO}tJHT-L@v^A+dNC`pZ1vabOLW$>79%i4&tLmxq!ZjBxmM9Zbut2?8UD{EZ!
zbAKH{4hmql^9HOiL~JKZ&vhmP$zC?Q2CX9_sl0?uWV?lXJn?!4`PC~ZIDn^-3w){b
zGthE!pqyDCjht11<><@kyzs@f#n?cN&fK!3#ccyb#<sIFG4s5#V0%KXwIBGue6gJu
zELcEW$NW0C)2$1sY@E-`#N(IRX~FFaXzRssFelTgmPK4P&d>YQL=UZ7w~o$@GfWQ<
zFKjG$;iE@q__^G}>mGfS&R+I1FKj4z;Uh=9KT={RVkVv|!5N*CJiWvhNFG=`y*rjJ
z<!^oK+cO^F`j_a8^e++d_?2mTb?=A#oyT|6kDfiiukOD<9}G>|qI`GU2_DG->)|AO
zB~zMVN2$+V*-;^V2m}@U*ro=^7_wy%0n8!z0{~@j|Cq+?piND}x-tbskYz)l8qWZ9
z2N%l}txbu-6s)ZU#P<waW)$0n-L{&cn|23L3s}VijFW?ob%(D_kLxaCnV!{5BWX6(
zz`B6VX`MRm2f1`T=P+!{(QNBX`JNBH;-}h9(&`Pn>0h?K$Hz~9OtWXtriXw0FhrLS
z&*fp!dZzPPy;Hk4erXpiSa3USyLg$UA2Tucwk)KgVLmZ2U%uGR3vR!iw_ln7;<f(X
za7*ZewKkx?Bae$33tsrh;h9q7-MntyIvyDJS(t^5<xH6nlQD*l^*&7vjdQu{(gZDO
zEO=qdsqDCNsrPAWY@A0OW8=J}p`b;rz3!pSfD5_yn3?7l1ut$JaPb2WWGxIqkT*T2
zu_pix`<}O9#0J+Iuj9x5fdCET3Is#&3A=AJJTC%(a)}UazgESAU(dg5AKT3OY>>^z
z{!m7Zp>es2jyI9Fh3G;=FM>hTP4wS5AfW=l@b0g_k_ee7LE3OWhYCxbIIBS592hbK
z0JzY0#i-^`1Op>iwFgKNuh(iIzd{rp%Qwi^FlH(vIt(;|I?e*bTpP+q1du9+_I2?e
z0Tn?92`E)IJioro44t`U!Lt6&bSXT|G&i>>c}d&ZAOnSRnNB=0K+EPf(7eT4LVpE2
zjt|hXxeYvT$!2ta@58k=E*;rLn>McJ`|i4hn-<+ohsQ%XW*R&EIzPRsh3>m^KF?Wr
zHy@cu`#@qFBAzQ#*ld6@W=J&vl6VicZL~YPx~M2iYHx23KH&R+07b6(*QKu~c*pKO
z`rea!=!cuS>31C;@respEK8$1Vr3(S9W|nB-9`zrSbhhn0+O&^&W=s7=|J18Vbi8=
z$0{!ThoeYr=PDl2;`#Kue2sT|TZCi>;dl^Ob0+KJ3>dj1Y7|If2G0Su5tCQeJmQ-n
z-0ogD^2AM*N*l5kPjxx189&^3;Wl`T*fBT=XfZ=88CyGQ#dKg($+m0w%<vSyd3con
zW&06Y)zU>zzH*FDpBrOlriXw0Fx_y&4Sez9SSAjs59jVdKlgn??zuQUF+j`aHPF1p
zn<4guzA`aD%jPxG+$Eb?I+b+|;bG>=#l!8qY2$jn_pbRoXVEe~ayjxyJa(j=H*Q?d
z_ue_5n-<;8M+G2ic*RgX#CJ3`(mh+xGBNRzhLRSw^oD-S#5_z(=QPmr?K5$4F=X^)
z_M{@FFf-HKqM(@>kV*ieecpmXh@J3>W1a(v3ed@wai1iPLAw!Wc*==QlvQuHc*W^M
zeE?#ev6c9t-gGfI#?BnS2#!O*<+^Pp_p{~1e#(&n0F__M)JhdjiB$#yUln8L2N`6-
z!7fu8*)?yFMB(Ppz6-jvq=6CeQ*=gTKI^<@l=`wq=QAF1AC!@*^c5+?w?wa52k}k_
z;IXDp6WIgJN;wG|&+04MES8fC0IFSou4sQ=QR;dUdyqh$iRTpsFPRBkAb(CT=1hZ!
z+xV{e4cySQgnP#FHXAzJ#&^zdq=q?*`M_9(yio6S%W_)0a1k|?1ua>=me1A#KX$Ow
zt;=cgqD9<P6ue~lS{|5)G6(;y)tgt8ESoXNQ?0aF@)6G<=A}#T;5(My;cVb+tv<?T
zzFP43=JHkkQ}+Nr`1C${;Hf?Q{H{Je_VI)Pl~KzQ^+6U6Uzw!<O?R_STb3vsFM`v%
zx~@+E74BHY4IK(Za93`8m6z}_WtlOdZ|!Ji%^xd52&R(v0_z!cFg1$@Pvg0CdISpW
zti|JA+~x|{Wvm-CR8Cmu2x}$#pqx%2%NjzLbt8MD2?9z5y`l%0jvs;bh{LwFPco9d
zgI9TH_YnW&xp#Q=hCTG+u3j4c{2T3_V;9Hx#v5<sA3yvs`GE-?4}I8tm8#14a?H#$
zc({%4oZmnVO^d1LlCL9lh7Py!owqbl<D4bjJyz=jwOE<&@AuH+MGL8^ENSubwKOon
zgz$rixVPmVTC#8<%_$3BynHR49Vgd=weu14=4H3=+@<UF{^Ev`7Pg!=*=UC5=4H3g
z+&k9m^~H?^EowdO<*)OZR}?d|BoL%c=O(8b$)ad3mO{*8`0FB=i!Gr*V!O)NE%&Wd
z0&ZMAXJhzI(5jb(ld>X394BjaBbW*w#}8GPgOB$K?{{Du<=w_}9A})GiR>4Szg#<B
z1@9x{CYw-lLRSj!4D3unoa;!gT_UUMcyib5x>JUuYdm^>YuZBQ<bI$XKct1wIT#+>
z;K?z{XKm!3z8n||Ks8>A*UeG9bE-ChH>Yd}R`q0dPRYod$?fYPuQ@y86Vl9;xkbTC
zb_`^Jn6x>sEO{|Z-Gcs**%=xW1GM&@B~+G;eCLXFGyqTG+Q!5HJ-B=c6=eh8x$;pu
z>t=hkd;-$-@8z?6XHx^uTe>~(`?WUiY--@SOSf`TCgXGS%7T{cJm+;A{2@NgYkR>5
znVH&m?V_S6xwEq~v90enpy^=iE0fdo)}c@Mp<nIiHLYFzWZMbuJbsaJeVApwY${jR
z%IVHf03y1>7pHIS6=?dJGQazi>;PYXgb7Y7+9n4((!;$Y7T1%>PSRo6@PIp0M+{sE
zJ;@g0F)RMq6gYkbk0X(_bi>oO)(-(A9LHiib@5FdcFtj+1Blal4xUXb;}o?_lN&fQ
zdEt#Hut5cm*3k^09jpNUKmosOJ9FRp;A?ue{S2+$)J@-iau4s^^C5rn&4lX%#Kb>(
z_+g$s`+6Q5yT}+9(4QfwL3|+h8~eTU-|@5j;PS;>77cvoibr^0JoGc>nV7JAF_lFF
z-MMld4UCiH#nYB908L#!%XiLc<he_?VW9ARYNia$y<=OA43c9Sdi`E58W-~Eal5y;
z5i)f(6%4oEOJ(Ci?ln1hNkd69Q@pwUpYk)WC~5J|0T)B-#O5@XhuDO11IJan?t*8c
z8*3q_yUev1pHf*llL=%j4}v9pK&;a?$lvy3slh?^*QG71=fBt0htsR@pz&YZiTb8+
zUF_@HQY92fC=5Dz<`Qrhb!NH{V3$_}(1;EO%5osAs&i$Op0#ZTm<j`W3xkXq6!<1b
zpR871U)TO1Ye6pHBd;gmjVk`SvTDO5^)GT%*#d*D>X`grX~WTwu0xT&v**0Bq?xs8
zs&k5>7zlDsW=g329v^C_1#?PjTC|)x&s_>~%=~kCsGS!ymDIHG9_~0hmdakUiF_^|
z-o`B(x4Ck}%-t()=Z4w_j*CaOY8eLo_N=&lW+MmzVbBk1WNul^Y)T0OowrBj!;N_{
ziC+_c`&-}QrFY!nbg!dF0Fi+&*QaQj>F}8mYJK?#uWIR{ho60y{;=mfz5nrqPA}>-
z<%oeWJYvOV*kl*3W~g8tm~3Fc%^EnJDjPiHxQ}6+CN*${Su%Tdm#w*zwRM^?)3t9x
z2Y{IZL!+(PL!I)qHH<oiJ3Q^Cfb~^pq649cyJ;cAX1ijiTo%=igPB(Fidi?CGPgB;
zHpQ*r7yz{ZTHCZ?AYC@05S{qs3cs@NJU{ZnL0YxGlmBJwAwKZ_FkP7v+(sG^iJ8a7
z#^{C{ZsgUgSBJQUp#Xf?eP{4b>-p&G(%<JST+ST>V=mZ9{qdo8x_wSTO^fc~j<Xk$
zhCSXudlwIH<Mo@ivh*XN*1ci@H#FVB%uJV#Zlm?k-!&$zT)>UBO&;-KxM$^jE{lT7
zqNJiIxhM)Q%96{XprS0Pb9|;?&x-k6mL-=(No7%RQ5IYjC6#4KWm#~?W$omgs&S^>
znWZjzia^j~8ZVr#CEinpwjU$BA)!9%*gg)JCG=tpw(sQ2R>!}p_BnSS8vUzqNC0`N
zSJaJ*qvEweXP%d|UBx>Ni&W{<@yIF|w3BYe5aHPu%ra=deK{OF6d(j3&V(&xnGdwB
zUc!TNn>BjMi&thnaAUkmS-6(1Q{$6n{?XFjK@3O)xsoSIaL8Oct}JJGBhK(#BjZ9`
z@?_*Yi?kQzkbA&4IGJx(WcCrBnQ9v?W}ZGdk-bI`pHQKc(>D|IvZh9wzpRzU(TC9Y
zh<I63Bi*vBg(lEu&X0_LW~Q+t_fSz5d>~B0Zdy2p8s@HMV&bvG%egE|J}~b4#HNK!
z)HrXo{sx7Dyfb>6SJrmjIv+Q?d4L}KQZ{IC+m0Pv6eV|bcKBAae(&s?@F*8XE?uUV
zJNxMSPwk~uEuHjK+ev!ky-__<rC-6C9qx<oj}@Tf)_;xod%Et-fgL;61VN5Xhr*d}
z0hCF`&SmKI+&ADCHaF;N*I<V!u1B+VZwe0WJVMPNO7@U+U7Sw!3ZIbugZJNBrcpDQ
zvh&ujH8gN$>-9{|DfbF8ndZi~jwpQu<D;PeQKC2B`;0cWouoC7@1gH)*v-Ft`wX2Q
z{YLwJ^d*V64?p}Po;`au4-F1gmernYj_Ko0CN@f)WlfEI%iS$JuKgg!G3I4+8u^xG
zEp(aEhunlF5sw{N&P7q{%TRXH!X|E<yM}8qfs3-Bp3A<yrx(p3DPw(fhQ|2W!`#!;
z%?El8P|txL>gn#`1&t*yxNjRD=s7?WH5!)(j&OHR5BK!+P<M9^_jGsjf`)<?+`Emt
zySw=^>c#h2m3eMi&=QE3Ufx>yM86QLh4VUNYAq^7f?lV{Th>o3(hzf1TVd?BnCNX6
zc#vuo{K~B2=vn)fGAH+?PUb-bLNi9y;KzP^4r;8UgQ%-ie@frK83Rh?gscKYsq&#*
zl_PnhBbQEqDuYIz-8H9HwK97eRfY^s0!Fd_f${1oKI$!k%%C4MkoSSSQ901?Ms#u*
z==63{xr{vO0Dy4-U)p-+uYuiQZ`3EyCl-KnHnlP6XP!GQz{;I|WDT!ec^?xIj}Nb-
zqAd8n&D&^a+fLfiwu9StwDFD|ZQR!0$;8a#L+hw0OTKsWcG}UlgLk&=q_(!5v}4B(
zZfoz*f#CF`YiQ+)duzOm(UPVHZd$aQwzqdtPfsUpT(gYJvgEa$L$xxOXvv&LnzLv*
zZQIpFJw2VgY0ceSmL;w298`W!J+g*ZuDlm?!s?pyijo)Wh7+)v>*wB=T!&TNJ13!U
zf9u<H*PVBPsbs**K5<4{Ia;L65>HJLb)OvKf8G8bHMexpcQ)*y)>n@6>+cTJslh9n
zT~nZ@=fm0gZ!#U~UX5niEju~{r#wesU7SoA>+aww&DixJKpd4FuW(@VsAbxuO+2g5
zHbqSPU9te0@Ze;b&egYk=&>kp7&BxX@vJ<XZk@Ji)?r&Kr>~IH>E<c7Hqhw6&R$(R
ziJK;-*`|BpaBJB3(mz7<{wG)HkM9ie`j_A5?{3&lt6DmF{r1Du^Zp=DT%Bg~ixAT!
zN)qwKv5S1ejW_a|)oV0fCB7^%hwwR4;u*TOJTQ~o<;#PQa9I?5@8)eY{kLrg?`Uh|
z9Xob#+v}ao%rri<j>=kpZ>!zY&+8r9-swly@QM}p)neipFP_uDa~9siTiZMMKu;HK
zT0PU3AM6;aF?Ep_H#O3nh4=8b_D()<po^YfeK(b5$q#l6sxFwBPOn?TD^}dA;|KP$
z#f=3mTz`r=T=#vCX-Q+ji)PN-Q@xy8Hxo<T_*wfpGfQ$drD>5xRjfTb!~yp^j;!f;
z?0=`@oog+|8OU1Y^bnE^xp5-Ut?{V(HuA}M>dB_<ViG0RRew)-M)`x!V_zT`XFU)2
zH_<mHaN@X%Z7@Sd&of`aIFLz%jUX@lHU*=f`T^TJ6=)wFQ=Cx&h*=1;hpN2LZX!=`
zQfo)A=4A55L<dS7)#&LRQvexRarD%nVj<K)%7?Q<+CIvOppP@{d7-MnXmA6xZ5=)<
zc%N4mv}7ierFv2Q)V|LvO4*s~%Cs+@OGVMh%uGY=OJ}A!ibAG6s3=P+%96{5MOvmP
zOD@WSilU&IDUpJTqTr%oq4LzecpjBSgX&;>sE6-eeiz+-OA|FTHu3EX@1RY)Y;6rO
z^X0*AzHj+mbo=}{)Y#C(3l=V=O|RQRYa-_MC3C4L8#t$nnN2D1_Kys(POn#hHLXS5
z*0zI-vZNzNk9wby!8HI!{RKAjpx^r$5%ZVdT%o;3&+~?tkJIXw-MsqoJ@l`?J4QQu
z2KmJKt0eE#)yxx2bIMUHwxbm?Te`y*H+X1<%Ccg^mZ@^<)+~z%S+Oadro|&tlGmW=
zj$(Y@tG)kKr%l}k1>E6l=izBK5RWd=4Gn%hqpe%?@3K7uAkC&z4fvh`Ib~`V0idnF
zvxA<o%#pL>{PNyU__3Fc@S2w0w5D}8Keh8X?LB&dzZ#!peb{vYMEt~pf%wHE>(=r0
zv#;mjp&?RV3o*$a2*JP10m0ol0fIyAOSvfB^rrRu#)U-8Jox$@T$VCLIx}5bmL->E
z$we(DFcH7LWG<IwqqaFd)KlxrP1MjZhZihb${SxlZA=jJc&)!LnBPPV4NWBd9R@IB
zX4<uQE)``X;g}?!nN1eGq@rV2)WMv2NkhR4TYJf96Sps!%SF*hs5^-R^U9fZ&u$DL
z{U^kV5WBIzyDDkyRsik;M;t?)ksaMI&Rk=hgK-|}gufMS<{oHGUMrBPFV`XN!5w>O
zc0dq<Ht03zpP&d~Rp82OKtN7(mFF43Wsw~mgqY(I2&3pIaHUaAN$4!d2-NioiOyJI
zNcS*+ATv6T%0y{N1XGDlkZ+)ix~T`iIQKL_##xY2b#Jbd=mX27_gzq}k_j9*rK>hY
zz>FFb-Vg``#{_zw_n@m77@f{C0N7!T;1dYeDSni3*A@%S%0P$ZunbrD4A?X67rARm
zKk&9tQ%FDwWij{x|Hd2fZMWXa%kExgvITqLLrO}kW^HIQf=$%V<?%`CIXT3e+D_2w
z$M;ZkO9!ue@i4!<_Y*ogFzyahmUGzj{kjTh!g+3bVDpr{y<!xnM{SK6X5thWBIt7<
za$2)%dfuE&kHRisUE?NGv%{DPvrMI~57f1Cmf^$Q#<r2gAM;{6WNpW>t$(zsZV&h@
zTZu=<#7!~yW)8^)_MHBLUV7^+|9JC3Ue(%3_dmIpHoty~-a9iwSFTQTGBDMPb5QQ`
z<;#52O*h%vJnehv$JMm3KdA3pSB$a5dZPKG=ZiA;Vt<qNoV-FF+m`=Ji&;680QN)W
zB#j;Zdx%E~3JmfQ63*xn{z5>heIfjfMM!O?93^qb>oxG;DMcMP-6lH7`-O&_;0H>I
zobyN<F1sgm)GTpq4sjmJ<@terL1Ob*Jj8R=ed+^I$JiE1<;E;k0BUze7X=d68`c6x
z<)Htfa?zwtN#1~ol1wp-<-jpRdz8=!nyfYi`(~1RS-DVw$`8~D8nbJutcjDk`*9G(
zvS3WmX%;MT0vO_7Pe0YClPiK6$2$RGggjMxM%|Gy5%h&F<M;tDa{lD>s+}#hU24Zf
zhlxHDdspfTXnQ?Do6OEOAP+D=?l163j>VJ*rBh+k&Cfl@Wl`{vqerTJziRLm`o=$F
z9le=p_v+L%9XazEJ@?0x^t}yxdDZ$3{^#f4<?US`)4ONBW(7M4ssQBlL$<EZ{gyR(
zwtEy09CkZU<*Yh5e@-?^`1iWn?pE8>VH-5u@h31Pi{}dJyM1vz;;>DT>a?()9SFOQ
z-6jbGZvsa3{k1xk3_x<kvW2$x&$4?03_lo}rmpud(r;crLl6C`hgY?9@IOA&L%;9n
zqu!6lXnGp^TZQjuea!d0mX=nUef{-3G&JnWRf9X|*6|@E^=oAgc_p}->j(BlN|N++
z@Auetq$5-!aPS@6%DR5x<D}z_fXQ&(=@()|qR-ejrA^=?X<u%cW_8TT@oMpn0Uv+?
zG-f3hy5_i38GA6UJ8;Q0uo=cr;Vp*;z)4(rW6bR7?NLE1`JR_8@guK`s<@4E2Ip3v
ztCCfOESzA`k$@(#DbhWmxH3u^73GDhFesosb?6+>$Yc@BksaSyH)Cux2Dr613?&pD
z<%EWpS)&s;ejNNkX*uJn9?&thI0PKmX5h*FcFosuLT5KhxdJ^VPcqQyoSu_U#xV&S
ztr`?e*Jz$PnFe<HsMdGg56a^8jP&XZHfA^$*`R}h4n2QVhwntcX&Dxey?S+$Z@cX_
zUcP*}>5OArC}Z>=lm&GTv?}#7^O>AxIyvw;zw|~gegElww5p|(fAFgwYJK@Q|8CF6
zwCBVnIz2e0=fc_BE%3+?+qj^wF&mxsyG`YcIXElMjxmw*>@3UXrjQ|fXqy^fy`F%y
z5z7DyxP<rZlFtf4#!q+e;yZwGSF%i7hxhSf_7J9L^?>7%DFwoKxb@L<m#O{GFmG<}
z<HxohodMgeUG($c9-`OwpXHB7za}%O^DDC_*g5NmI1n?__{2EfeDlqG-@W%~Y)>+B
zVZ=rM!_gR?q@17Hr3@cw{7A|=K0@4K;91J3VpJ#W`w#*gcRyTDWB{F3$0pBD?5{W`
zLmi=?By4j17lL*+mZHL4%m*z5Kk@+@dDZ{WMC6-_m;}DN@g5D4`U?I|{e#o;89NYr
z6UFhZ4oFi&J8S@|L|vKxBR!EaW0Q<bktP$_@ha+ci8E5To+A9HkjNm1e@$U(ZpTz&
z2=&(p(12QoZ&X}X0TpdxTj)qR2XbOLGWCohaT9m|r!ZB6t{qsc@#h>T*JdiafK4CN
zYyZnQj1QDv7W7!GFKr;Oa$p8&D-lwK+Ap*%(ntPNx~abN*Qz>*24=7=W!iwq1$Hz0
z=+6qk6h^CzkGgx<M%Jboo7tV(@6DT^<5{z2QD0v_@WHNpj=tH;`AT&9%qQnlCiaEV
zZ+MV+e=`68AOJ~3K~(?y7x=|Dd+8^e-{Dm)owT}TH~nPGL3-x3Q~YYrd48w=Yx-bx
z+NM+`gND<bqXxeG*?zFuqc#PsZ=%qwpRJ{n>>L6?cihV8wA;|3$G5;yEPXnC3%h)W
z;T3Kp1{VF!T-XV#)4fyJzD?l*fYd46;VC{jc!j!-U8L=Ae?;ql|33d<(|&4h>7x6e
z*i9S$aD-ml_aPnY|BSwxm_nO)Kft)+e8l>59h);VQ%lQwzHZhm?(gqQeA<9tLWdQ2
zK<CT#3y3G#atL6oPY`lRuE~sC&<XXo`wQhUqY^=H;{O^yeLszDv;T)&sVd!rY(7?a
zLtd-TgId8qfT2u0M>B@<&UTLfU?+c_eXN8Aui=B}57#Q^b)L0}{j57iCiiKEYL-`|
z9b}IB0-sB+qrKz!3%nKenec?PLB+RqfK*=T?srv(FvTGt3g865h6*Z*4YJr1l{shV
zwJMP*O2_~p$?+I|%U~>E1Oou8g;FD<msRPpTGwC|Y|{*GddUaa@Prqg%*!9`7Jwt8
zZ3r%*9z;wZud#hHtwucr-Df_jUb8_r8w_2&`d~2XJ#9DjlZ38n$~m1^5OhQIQxr9?
zgZMBoIXOi)-+U9TT)9GHP~<fS?oBRqjp&zZO#dJye=GghK9?t^=;XlX^yhtN`H7d0
z^7l6GrRLTyx_{$7`sMbc^!%<5`7cL4r4#3`>M<_*8aCM^AqO*$Sf<U6KasL>o*tZ8
zr$?;F=7?!Mmc-82!|75xenemUHsW`}+If4nQ`dF^*A7I6>0QkP4qLX*zY<M$)lPBm
z&?I;Feo3$FJ<m_Jo#uz1eV3YByJ%HQ7yb0P1N_1pr+M%33-rn8m!^00!i<0C`djh=
z&u~6pbAj>kak}Z|n|Z~Gl~}=ml#A=qe|+BqPjbGF@uUh!CH=vHiBw+fPdE-lU)FM3
zUO2Kb=CApvY?=5VJSKpl)}U|uuWJu^MjeB8%@&!M>#h;l)5Qp{W3ju7=Q-OXzE$VG
z`9=02m0bHu$BI{seGsgnPSSqeYZ*JjJ);c{=VZ=<VuCu=^rL^uJp?jt*R2)wjvJMO
zxP`>5HD=Wj!`}+!{?(3(0)gvNU`QRp{(>A%Ijn#v_hdzxwzwu|ULJ;ad>H_s@?YY>
z!jI<x3>J;7Hblebb*=JhQE-&3gVpGz&a1ML(F1^x@^LMm((BP)RXnHyOcrlvyGG%+
z^AT6X>DQN+KUKlP>KK5s2co?Ei9JF&aAeRo>Iol;oNl77;CD+)3(uN0i_V-m0}56j
zt?IKzpECm+8J~<i!61VCqOX%<-|2>kYFWP%!?g8{)AZBL2e`SVlbc&Q>4B%Z>1WR$
z<i}q=LC@{#qnG!5%)1VK%H6$R^63kc_I_8{cmW3!+k0B46`V=-&(7w9%$}@&lMm3f
z!;3NND1U8To*gDVt?irvu%{b2YVG$9PV%7-zvj;4pYdx4hUulZ&+=0{Pt#*tkI+NE
z>7g|nc2jdp2S2cJFFo0IjCb`6(5Z8u)5O(jvx)j@@Coc^1YMC*8(1Ch1KEDXOs%c0
zG;7u@>hJ5X=;zoDx_$s&>Jpysx}XZnXZop9$=$0*E7eEFr#bwEz7N+hAXT-Ul`#Rs
z9+(E1OovVu;7Rzg8cG#)kj)e!J-n};LO>H(0D9g((HEnfDhV;=?T<+u`#{Z%u6<HN
zi?iw<JrH&3d<^;V9&6TtGU|Wc2OaScFFjRk=Nf$h$Q26GfRW78M3u9L53%$1jN>K2
zLyB|$Iw~K9j}GG$pYTY=fpb7{(46Cdc1ipo)rA|#!P&&&UG@tNOOA}^*%dYZaFE2O
zPuEf7pz5w0ujrhy?VN2Rr~}5$VG$^(Dx6L9KGKVhjQ5>AYI?%p=5-2fM*BxOy^=+-
zM%mNwzaxOD`Gx~s-YBV!QJYS8QSQjIvI_bFTN=X|`^}V_7$2vbZoY|Du2^Ayk<yDn
zIM~G63_8-jqH^oK;KxWK*9Xzxq3y}ZX}&P}4Ik_Kl>Tz?9B+N=3_ZU62tV}9er|5<
zqE+iVxw)m2AK18$e)jx9YI*rMKl|qo=;b}1@EeClx#xqg_~eDF@G7rqeSfXK$wQAS
z!E@$hvj({xy=QDX7BYUe?oZd*!Mek~;c5P0@G2kd`-a{+_Brp|KS*2N_>iA`<s?1w
z;(Ppqr+c`$rIS{z@8IT^PQHKRK6>=UL-gFAPtt4q`nmh$Ab)t_3;yEr74<)-!(2a3
zVuP4J_?#!=ZITXt&POMwCh4Y|Z=Uh3(1*y?@%$MZ-u?uYqFm@#IF7`DIP#JBx^(B*
z_kbsIO^Z*Owp>g~`Uu8*kc}mdbFMy1oEJF&^#BF4Uv<AX-O0%BY=QN{7#7_qv6053
zOdqa;70`ChHeh2vykon$F&>NM+jKgp&{vi}^cQW{^WfvL_jOLo)!Ii3dT+w=36=o5
z>OVFJgB^@_I53&eu}l#zI0!AXgcp{eEpV{f#Q>O?9aC{oGa(VskfRB*fnwtTk}8O8
zQ1=6;Q-97_COR~V*RW${oD3aA^$`Lv4s5}YKrid)aJ^cus+UmN*%|yMIy=<JkjVRr
zwHtL~ttC9@4Fe1c^qj8+TY=orQ=s|CBMQm@)N;B5&0&WEf6d!P-9C5EwU0jGK#tM3
zDn#yDq6c!`tbV+{rG;l*cO4H64S7}bHDoZ&Wb}gd$bEOdu39Afi@pjjVPFxiOE`>n
zW2VWgQ+(mmZ}?dMr~KBTk7?^$AJB%EkJ3N=x|^F@yQsOPlUKEN(W;hCTGiS`_ix-w
zKYZo@J^b7|^vLrE=@(m%(E8sUqt-v1<V~-h=3o7(m!E(0L*CZ$5x=tc6MpT$1=@9J
zl-@it%5NY4oOT@^p+CMmOt0)4q-~ua(@Sp;&~Mt$@H4NT<_)i$;Po#b=f}1mrJuiW
zkbkn}U3%zO-TeJ0_wkwyyJ=NR7d5wZQgcfOuUg;9-+yWk|8o0b+WhB}^r!B#{LZN%
zIy?9UfA!5(a7nZP>Q4Ga?S9bfU*m(?Ib8(seuD#@@L={Q-m+ygU3c9q>g(@!hV*rF
zZG-(Y{Zsxr{|CP8tE0)lL(&!_E$z}#PU!Qwu_U8Y1a&^Hu=WFEOohtPR86Brj9st$
zjI5sjM6bb*GQN?vAu>9r$(B#<iTrF_z@Vt{A&W3Mi#4JxwX8CST&eCNk7x?w<T~)L
z^_6|IOrk08qdC2>$l}I%uNz-a%94m@jsnI_Y*H{vkP(oO3S)2$b&`&e2%3~pJ802F
zxs^%}?XahnI+)V%{ClH=p-pc2oyg8eKiDSg=oT!&4{LQ}M?`~JSuk*oR|GxTr)|}Z
zvzg;P!>g0W=_C^XBS`Z0bd6T}N%f#4UsY+&w@^1u|4y!iw$aM*qplcif`Zi51F#Qr
z<bpauZB&!fiIfSp@&O0gN_{TsU}9pNZoc^@UcGva^Pwya6iC}k2R*Eqt)H>K@<wd8
zCFpB$6v5YxgOA$ETT?&hN5A2tXGXc>;CXs=&xgEYPapm6?KAY!8@=?~T_@>RuN~*7
zcOIuFUOvqKy7fK&#nyxL&(FU@KYs22J@o7S^!-iy=>82|+`PV%SG9D}cc0ip4?MMp
zfACB<{rK4)`se50p~rrEkk@ZNOsy{;=8Zd#)30B9pSHYyl774E6mR{@2fU-Jk9O|u
z=QrN{m=5-i(nrHz)8#8yO#$9R<5*%=$jKdaPw1IZ=jdm?KPWvZi*d({g*1sLCnx#V
zTW_P4D_2z8h_M}F=SLbyt*>aGL0e*9fPU{}M2`=0`|%*>kHN=$|HOy<pd)B8=qLCy
z*udE`)R+58+mw%OsV;z*q^sp@kM<8`YBD;ok&NR4Isl|p>W~xt<ZwrB+za|jbip;+
z3L+WFcpgx2w7<U?{5JX!`j1l)+&2kKpRsM^OGjwmU(rf|PT)2CCSTjX0u4z@F*g8s
z#$8<Z0m?ZGGUkPlV(B23Fr7F?hOewa%$Yry0B1#7PzkL8PG6VD<Rd`}3~xayv>;q+
zIk@hf2|blvCo*e<-{k6>3P5kbYDORN!<F~z+7kIR&0>dB3k5m`IMEM1uWq1ngMjH?
z1Cy5Xjhfn#IM8LGk@yV~a`vgx2h^lo`Sj`5`>@J@HWQoUs2ps}%(U*2NBH{dXY<g|
zkm(huCi(}RVGqfJMDt<n=hzRjev*qLRX!w?qaO!8s{BS31N6|Ii5)6<&Hx$IBWMa_
z#Co-|=+N+A%8&7o`W6A;$PT2DSKuXyA<j41>LV{kZ_DP*R2BuF>FbN~Cu51o=6t_`
zH?QlOu9C9qyvVZy!9jPF*2i*b+u3V5-z3V*>U<6CW%4*V@VA*p@72ngkGU~U$DNve
zgI??ddUWGEmNi!kK9Qx9`9yt$&}zjTKWG=RV;vh1$_gXC^X-I(RDM%i{dV$vswu?j
zqg;*`*Uq*4OX;agvDaPRSBd3#l?tIqi$!}{;EB!=!Js#{R~9J9l#vE{Q%w*kZ*;O+
zfkv)ucpAa#);X$_X>RWwm$AbkJ9a<H;DAHaL0ZP^AtPTH6gYxu8~jAS;+bF{Vn$wb
zx^(TJlUs4BbVjW~rj=;dP*Ul`V3~9-lRLBp`i)kF>+;=rGoJwB-VZf8B!Mu>RQsFi
z#8}Vk%F%N^R4FqXU396LN*6C)<Qs3ikyo!-11hWlrl74Hf62p%>jTmwVj1rPS-m=Y
zWqdfbov%Y)gk<1{{uKMAnG~*@Dm{-z%iAQ;A<)m--{Nj))clg5DYLYSiaf@_EGq}4
zK8^R7IEf!fpO|@Sa*A%d^;W*S_U0AkGpnasiy4}MX|OZe0E7bjTaQis%<BZ`Yn=0T
zt_h6_P$j24gE7?aRLUSrFs-wv`JI!)cxSHLe&`cwzi>?*qE4T4`ZAk14I6LH=jwcd
z4S|(RnF_wNdtiJBc*10lv}LRbb_c0_8$cn@XTv}_o>AxCK1L_-ocD3#(mYx80jwA=
zUY40(>8{)8WYA%eNlF?FPK}Nc6mN~?3|cD~oZqu&Wl@26&EI3F8u;)$dY*#Qhfb02
zBxJV|$IBUxp^g}=ssnhPDOX83=VakSz?`oe^qtV9>@|}n(Z@A(s=Q<e5XQjGRwnq4
z3x?$Dn2A!}ogd}w6l{{n?gpP|KeJ9E7imE&5_Do^y)?N8n?&aj{8BzWZDyv2AAXpw
zpM5=D9J}a^sy>?X=Jch3li9}yDJy)q>&bxW?2!xFsVuqv8+0QIM;&>$OkzW{1Nx@3
zjkRs&i9Qy7qhmmPOv78oe#l4gPm9$-=kAkS^LG<@gC7a~j4v@WZ`rbi%A({WM~`?g
z6Ma_1F<nrGp4Va2EBIOhOwgXrcB#Ic&dg&RPYH<1`3Ue{Z)~$F(XTwXgNFbt9Q6eM
z0;v8g`;I5;<w3nhFqn%$Qpf8TU8oYAa;%&BJ>~BOUMR<j>ek9j5tS?23jIOqsMd`i
zvrf*=ktWzD)=T{uF;!+9GAScY5~&i~5OWbPA`_lDr)0;oH?k>`eZ^F<!O<!QE$|v*
zS108)=ge8>L?=qyK_f(^G3RMI=Lq$@!AuabQ*<1WHv4p|x+0Focf3G5xsQSP#L0q#
zlJXkmg^&ckVYW#FLv+Rz960*K6*>S=r?yY|AkUN2e;Ry@s(PEV2I@Dx#(^(u1e?y=
zEAp4>$@^F|N{(JmMzjqx@z}+Se8UYl@Q;4<qfA>SKiUHIli^WmgBHD=lwVR$7FqDY
z63Qla^1oBR(;<q;OyKx~cw=4|1`k!Bt5@~G{vY*ddWt&HUrGNpqCn3y;$(F^C*Ny&
zri4!2{@~ihYawn<PEPV|x86#3FS|R)U6aw<2gHOv65CFGSMlz;fnHO!W@CTG$CXsn
zvE6iiKE@!n%DI@Q?J@d-w?V>}(^sDN=yPauKtD-+^}l$}^WoxeCYGS$$kB6Js;~`|
zujuy~e!b3uE}e~xw($`41oko+!Z?=mqjc;rA6A+f-;4UTrgHWTJflq34^1|Z*Xx_O
z$PZW`qw8Rx)WqpCPOXe`O2Z9;LCD|)DihT4D80TBs_3IrR|diVAD^m0FB;S7Iw|jd
z8b6gfj%5W<JEMETIlI)A3(A{GLfyoctijPjy$)<?Ff`tB_Y4F8Aqg5B_2U#@mo_S%
zf?PSEWu(OnSswtOOnLAFvlO@1L%Xp(EpN7=_=W6yg`UBZ4?g%H-EiX#G&VMdyaD};
z&s<{wHLG}f@^4PhV&AHJTGNS@(W4)B6Mk)waoi*{oIFXLC@08=J`2}XK9mJzOzj?i
ztI0CF*ub9kThLby)SBEuCmH?4&$g}GxF`!ca`Z_3*eSjbWxTtA-b`xs1F6m=e}fZ%
zV;J{XA<?VjRY91>6;zswKk0z&spAl=a=P)5%$3oG?l1VG@|x(*`Abgk?CK-WiCR({
zBY&R%Y<nE*I2|}z(oaLAOzLBQwbBm6<@8Xyo*m<Yaq8<Y6*}tA@hb|gioL!LhjN_w
z6~-;sMBYwlB*aLC2;&>b8JsvajDqFBRsur)KhC}%>dNxi{+zY+0~`M|Dotz<I)O$z
z=(K}QJM69<blRCzdaGcSq!O!`3aGADepK;RlInVwWW`isB~-vt*UYc@&dlt+XP$%i
z_a*Ol&UxSGnLm5)nRyN-61GQT=BAvvXF5f-HuWVy=CfT9C!UHDbOVnDk0QtXoKX>u
z*w_pFp6mFHO!E@qa>1bpanCM?z?b$ku>+@_H^8Xapfn1oE>ITatTE3b7!Iq0whE+u
z2gl9};}_4`fJDEQ(|}diR5r0dPWOU#P4B1sW}61!h;!CM$8F-n&HaZT?)mX&j{6@z
z{E+xgtP`IJL&%Y+gGN)qkZr`S*3KNzNPxVMyTVhqPkd@FqBZnEsRd0%iN@V<PmC~^
zH8%x%(|_R^?<WkYFBUf#9M;8R;;UYKe&&Am+*!YP=^{iYdD*<T;m^%Pbe0KIENhJy
zMg?Z!Q~R-Z%^1)ugPLuc2F{2F&~TZrdZqQ@JNC4>;0gsAoiQ8o+0R8^C$q1|f*3P@
z7%cY?$+7O!+QJXxNjuG7*=Tmxd4sC7&yBMTxKtag=}Awtuk1~At~pHStoGdcKKVzt
zD7qqnIt>}N`kZ100+2)s+i1-c7>mq^iL{&B*<Ohce$$`@U);qZOSDC#dd8Qz<524Y
z7%swaD!eTEm532@6Oa3STMXu+LHJ0#ph;ojtcEfOV(q)-3-*hII$X!A10NXcR3L>M
z9uV{}l0PwsGv}UHrLWCOb+M8Z*z$l8@NRjDf5jAR_VPq+D5tZ{t5>f0^Dn$$5AHue
z9#Lo(7!oI8g#6T28dMlFn3he7>srTzN!c$~yLdeY?!+r-WxxlB9dNYv3@*p`+M&EM
zs3tEunQTtE8-&tvVW6q@nuaKk&If9J_xr}po4(y_?anvfaQrgZYYs4H+PgWY`Vzs-
zZh>W2gwu0~8ybM<A%i5XkC*aCSVj+5T@!+PHC=~(loR+>K7s0X5B3Q<4nJ-E)T^JY
zQ<PoAx(`$M;sn?gT%rxay0GYLRz6E}<9v%XFawj9iBrv;a;V-?A$ERRkHsX)C+&y3
zhI@;@@E!*}5k@<~P68p(+S(a@hDph%6W{eACYGlw#*{zYK**kjQ6fo+Sr)Q6$0C5j
zUVxB?3@|e6b%t{h8|Dg*N+2N6#5JAA04ZSL&6+O*1Bfc%K)7imnsUY1bfD5u06v2U
zXcAa0I6PY+>mYz!tMKDJ=10V|Chn91#WZ2yimj6`c-}Pv&=Mc60|ehm{P~{0=%DJ3
z*5A8#&z?Dc-2e0AkEtmWCdwP=UVVmk6FVC8Ef%ORQxuw>ri%vmj(*fe8;Go%dT*MO
z#7FBP3(ySWTR98=*7h|_$a>pva*q!Mbl5P|5$w+WqEUUGTGc(~XV0GVH{W_|+~Zjv
z27&k3YCXb5pycy-X2O#J20Fhm_%S!cbdTn0J~_ys!ic);{Dk(Q*Q|Qi*w45q_8va}
zPZw&TbiG5;Lr$7g{Wbv4VHGQ!fJXc=lGN@Zx9lhR9DjIrAVtC_9lmfc>Irkkd`#Af
z-B2%`UoZkML!wKSmBA|VjY&G=QFCs`3F4Li=(aRgf@GlaGZ+VO80b(*Bpv8VA<m*L
zGK|5VhE9mFVr^?Aw#nBp3;;_K>M$huLI@Zu5|@g=DA<lqz8CzEV8ohvD<4m26qRrx
zJ`}OwLpC|SNr)i0Nn0((K+p!;d2iS=<`{*B9CuwYALeSWPOxyl4~vEu<>_ow?qz;y
z%pl&dBv`HZO`h--)?U4G)lZx_VUHd^ZhFu|HG0UCl}F9i02uOfjmbUg5BZdaipU5~
zxvtftfx}4~9Vdww^3{VB@=SKRFIvKR(>@t=KpJ3+`4dosKlffEn482s=(gt)xtrg(
zal^Npt=~R89OI#R;`t+KNnC@bxo_;zwpAk31E>6#y}N7kX#04;0?y=i*e(?={S?-f
zxA0bZOD(Qq79A6JgZBD*StAd!Cg6@Q^(gaRXQFaC&hoA+h$FBj2_+ENi!%R~9~{&|
zKV@gcO6!I7mI5q12ESv@8SR8&-X~1!eI;J8@BTM>DGn3?1f)%_{K2sMjiO5n3JN?M
zfyH=;d=UcVkR;RE9xKGhw(wbg1{*Z|dfZ+=4I7ESaIK9=K4OdwY!Kn#3q(M?@hjm@
z+=`IAih%4^y4IgleyjNKS>d2@?&6C#{Ttev4;|RmtW;Bh3C1hj6!#TlmPW@}v7kdH
zYKk!JIqbP4euJnnf5AENGrxE52Y>46r~HrC{#Z{OP<XPA4KXFZc{%*7aVlgqX5l2b
z1OQ0$<*yxpv$c0z25oW;;Ctk6J*dZ8TlzG)lR>c1Ydyv4dAQ=f&8Cn5#;kLg&-2Cn
z+_`gh{=)gveAd8H&r}0?jT#UR6I-l%RC0@1{OZ6QbglJB1vSKt)?<D2$#K2s!~Py^
zVvsV-g&)RdpRf2_O}ZV(r!NP+PafH5{Y~c~*go1)`%6q1-*iu&QO+RY71ot$zN47i
z-pVx(eTo%oB4@#9e~c@H+j?a}2A>BW9Acw9DpRsO{-fJWQpm-G$<!(lu-!y2hZjl_
z_w9c7fmvd#C@L`$B-%k>;V#)!;WpnH^hhjW63eV^KzCx&8%7;F+M7eJ7Sv0}K&0I`
zL!aTRXyo7;4=D{?8vmVe#n7bK4CSHtj<K)v0eNVCL&}L87I=Pk-5VTuz9&2gOA3W_
z(Q?9lPJYKc75Cm4X1;gXQf`+oziThQe8L_-dYpDg{y<Y>4!c0KnQJ{oJ<J%7{PH>(
z-*vCYBSg0YMC>(O9XS@j<q_@Cpg&qW4ddD-d#rr*7&#wo@QVGBeaoPEP)Lu_{(#zU
zLnNVhbMu?GZrOIT^~1y4)K`eV)P~Fs;i8_UB9%MFXuzrL$Q+sWhL5O@gn|77hfTAU
zU+G$NKZ2N&gVcJ@>zsEC_FbwKvL840^?r?~3WT2x*y;hrU6330^I4*_J;y{?${HRy
zUd(#&3@}tgWn<TWGLAy<w{x%yug%@i$6kA=sfw?kKVmkSqLel!Kbxs320=(1y~l%w
ztkHsk^}c#e>u_mVEiWW4AWT%gh+z*=Mz$Fb-CLy4n<ogt1Zzvu7+cJk2eri5sH<?Y
z0qwRSv^vP(qZ|&2XU-+oXWrnit*tc_S6DE7&RB3vfe-wrh3g0)HDJ_mUHf#QgVDvW
z>Sd3uh$nIOd?kBaTh@JO+&W-Lo1in?PJ$ss?|ygJpMLr&|I?rT)N?`8)D*!r#xL6D
zd~koR*^8s_heTuZ9^*FJ-42z^3E2p~QKyWrmv5Wwao!Nc)RTrGvBE^__$W{Ii8<z=
ztSEUeQZU9Bw3@&E`Wt@!!Ue`rHC{n#9zE{`1_m~P;>1ttiTxSvOr3)~!4}5ES~l_7
zv9WP2;TyP6d^r3$ZauY4HZtXW%{>iYIcVtmNiRmfpg6jny2n^a90m$A<kra^vaR2M
z>b7z^=UiL+9EiTiGZys+n9Jv(whPnW(8Ia^f!-lUiN^uIF;42qVq?<_<LC_)5$G8Z
z8wx;dEr1uHcnZGu@beJA$2v?XV#8RQ|LSiUI|+Xf$7pA~ARX)=eXZC+0kJ>`0oA&x
z4UzCbJmQnUa{LgtOijXuVx}f#J05XQaZ1Mn4;mTkY{M1gfVb>fV68b42dW{5yv70~
z>C`Wyo9uHDztKnXGp(m}Wm`0s7&~NAH}fqDb-+KacQ0SIS5Lm`zx?vE<W}{kjeTf*
zf??AQV_TA|#x}$@W7KijTfd^?vLSq<J^GB?VJcD=*yo^D(l`p8@|6C|P6jPi?9?BL
zC&@Y8L-%OC3v5GeA08gsX1n#<w-2?SIQ9gSoSB28wWgUQe&JrUrDy_#%pLP<6-8f{
z!$H>orW5w!Bjch7*FB1P+|#o}qq%O``}X_W>kBj4lXpR8UiV6<6)*A%_o9yoR_q7$
z)Z?vRnULmD9BQ3l7`34i%iE~kine-c<y4#?WyF(*D=5J77dFAZ@AN~3CV0V@t%7`)
zN37i7kR`zIwKqm!6ktdJbdgLaej)_{9mt&yX4nwq8w>DO`LS8B34p*aZH_LV%~$y@
z#EHXIg$Z9t^S8}5!EP5JVvTvw{kaJ>UgpNQ!=WN6U8eZS52~exWv&_g!n09JWty=`
zY@rcV!xAo?_M|@;Xq_YBL^M2P+t==N3OzBK$*Mt%1M50hU4U&=ZR`zvCLNghci-Lh
z&1UPLe)_4#Q(4Jt*$2Deov{qRMPJs@LW5|(#f)p2ViXx1d=~oLR|_@Zmn8rIAOJ~3
zK~yOr9!{*oNDH39K73C#qB@&(fWn<H0$lnUUIMzYVP8$ZhPAo-`3o2P^*7#NO%IqQ
z|B0*UK9F4GH0f-NQ`Q$IR$d@iS_gSnXc`OS(Bd`IEvTjCRk~z6RKLnWVhKttDEhwU
zx8u#YOnjKvjGbo`Zk8ONr^<bX0DPg^agkt^HNU{S`<=PjHwR}ss`Wk-7xq;sb>B#k
zpwC^d`5e1YK{R0>>*?>hWl)g;8blg!E||dJ_g+FFK<dCH0j51Zu<-#5le6V#0DTuM
z4Z5(KLlDwWdmwP{`^V;=_^bs|dlZ+>&Dg{z!Sy&e9u!)w%cSc-3RrOtYTE+>Y_cw~
z^yUWdQ5t2D{eUiVuXURu=;a09hQvqMw9KpNL5dRB!{`wWPTJ+?)JQ2;r~`B2qz@n0
z_;_8!2Z>>mxpe80pM*cvYmJ4oE3`4sQHO=ALAcDz0$a(iYOvNR)<7EXMJ80oUJVkA
zqW)-Y`rhRf{|UcgW8p9JMPIZQGednFBm@2t)4ZbsHn@i|ac?!m*xdZ^tFL^s-T2L0
zw}zp;;46Jw%cHMh{0qY(Vc<)6$R|P{E*^3(&;Sp$U06FfL%nq0qAkRigKK_rPij`;
zEtbG%Do|z=@Sc?L-iXk5>r}I)uiy+mPdS_J9dI=Wj`J7R=DLaX*?I>*IuEK3#w+ye
zJO?yA*Yh!+jCi;&@54vhL?B}BiWYYPYp<U^YwQ~$0+PmvlY*Xrbq56Oc)*#&Dq@q<
zYXOXd4Tm1un!!~b++2Ku%v0#GrZ<m~P#6&1wmd5zAUX(N@~L}Ph(J7zg!O)KRE?a)
z(Z!QGYk7<Kh|5Y1a<|A`a^-8cG4StAr!cEE5IYo6m}Bk=t2uAXdHs#7ux+vF8u0~#
zuVMliqwou+!lPjW`0V@kNX?M+oQb--+nqb#_-4EH&p!K%VxuMkvGedUjg@ofA%<j8
zXqtDOZkU%o<N#3yl}8gvRj@+6W6$Bph<_ba>;wIbSnz(}5#_9P35F#egWo+j>1Ptd
zq@SaE7tUYsb7#+u&nUjMO|}NR>~rorqi*_VOq>+ZeHNEfToqP740oG2_c(W)2c<dl
zX|2t#$Pr<~aiAHgzZUD9vm>0wc2V|CpOZa}-Rf8KE4(zW*RjvG>bLlBYqRTNnJa&B
zuj3MPk9#+FMaoI+Omm4xF-0$VYO3HX*IP!q(T0ysiF8P)o>w7OfPEn6z8-Xf$V3>g
zYw?-udme5DbqD$gMfqly`K2rL8M$#@l~SgqaRl&0Uc&^dsR`2L!{DP|MR2H<D;DA(
zxL1C3kaw|)R`MD93swpXu}d6rxOp?88hF+HGoA}=l2fz~xmj*P@G@5)?53^A0*iYw
zsPMoFD|++8Lk<p03^sk$3k^@j2ku?Gc+p>d^;PG5O3#f0)L+lJe^aIbFZzNt+7O>~
zp-;xEz-YQ?dO%)T?^MS&*uh4d`Ovz03hV1z{7P4PA7dqhEL3=*&D8raFw#bvJ^bp>
zx7)4XxOpSv!QO(gl(6uOFk+lLMouUNK-M7e%xRBS5YtL(<}~au#+pmd2S&Ub?~}Y4
zf7Kx9XZrHZ_=#RQH^eAJ=D5Fc(P9aBBlmHA-RoMfGlAgD_z!t1XFL0-g<c1ELGOXz
zE*Ky-bPxNG=8QEy^)WpMbnIwG6fPA?=1ja`&)<(F`rC{NI~&MwD%BFrLaY-(1Yj8v
z0Ak4=kckW-2%47=2m{)kY|&$GqV3=|fLt7L%;ONKv<unvZ$)*+Vz93J;P{Ec&cP}U
zj5S}uPaDF5Ip<1zB3@k!B?U{D1DEYegy0}uYElj{-|}^oUo@Xg0`iFUl*gDe_P5^n
zu@Uqb)gH(bxuA6rGx`j+Ne_@SQ7$^5#E))$^UXKD*>3IT&6|jN>CJjh%@pa-C|(|}
zwV7?PF2F(41&KQL41))4hc(7T@CJbafXM~lVy#uKtAh+{Mc3fLrPT*IF2#brfOF{`
zbolmWm!8MHH{X2A&z(JsC%gR4pa%%SO)si@!fH|T&DOAvhAhNb^)TSidhOhhpSaCf
zuH(SeqUB3$JG;^gD(hO_Y9`I?-qb-VxUk%Z@t1GJNMqW6VJ+*v%oa5<@dcbtyjz-4
zZ6Y2hr{HY&JhwIfs8>h-ct|oz4Y;bL>CkB8ca>-Ct2K+>X)9aRPdKNMr(Hf976=xF
z?pY5zBPV5u4n?cvxh4!KE6}XlNpW+6#R`(#fJ2aQ_^iN^9ATtnEQwIrZFb^`6mZ2w
z+N+EPp=vDjO%_FKRSb!{ikwLh5%QYC!Mw*b46}@d?+Z!!v1ntVu6W6<po<YFVh0Ev
z23p*f0blyowSfCH(4$%50I)EHIx^NGV3v8NeljTDkGX0*+HgqMfGm*bZ@&4aojrFB
za6>7E#v11FL%eh2Rc`omNn#KGxrckrxTnRzx~+A6FXan$gK>`gMf)@mVi^vW>chQ1
zfX`7EB`MYCp4`Gv*R%3*=gvQDyV=@}8#je-=6|XgFgWtaSohwDHWHq!rPATtE1sku
zL$E6b;wF6dJgBA+5@_hHzjkd9kH*g=-gQpVvvgnf0mz3nG+@GdpX%^QpBp}8my4k8
z8R>BsK5$`UJOv<O+;OP2?7uh%Tz0?dOHtPV*r-RvRqztFaPNx8#r=r`>iGqO#<vl?
z=v$yV&w)jv<iO!(3v}K?HIboba}1yRY;vJ8@JhDR?*)L>bU|%xFm_<!y@l2QTdxh}
znVU-bf~88@gyEAeOVh!#Vi2(LI>IWutzZo{+5W_v9!fc<{n}gSj6<|A^~AjzOROtB
zQydFiO!&!X*gR>StZy0zIEmw$$AI$CFv$l5I~+7cUwj~R;wyRCZI6Fkck9-zND<X+
zYG=t0Pqd7y^U7FLHiQc2Qv<c@C*v+r!n(Rw8X9y<pJOmc?DG&ZzPGl!Pv<o)Fjv$U
zes+mpxWeYj@siC%)XXnly6ET5)`1_N6)mbQ)F<DUZ)P2rm2R@q*85DJC)<MiFtk_x
zDejWuWLx=-wH=>~521iwG4?y1L+C%VZF!WvmJj;?gKJF6tX0ZO?n^DyF-IT1ngNUl
z%rOABIBEL<V@n@8tLnL};%i(WbF`;WN16&7jT6@!-GJGpa^u($C)VWd|8=Y4<AKE>
zmm09#VbJdG%{Bp)MxKJmS!7{~$Pz4UyeeMVsJ?W{CFHvmQ!YiA*egAAu$d@`gM`6(
zRo0{gh;<l786U<}YpQ30tb#GZ4F%YJKqK{z0Vl6QtpoIm6Kp<<COzlVn<(h59qfun
z!nJVD;7RWdXG1ExMt(zcYfUlNgU0xvsS$841t7+-8&Ze|$g}YWw4T3k-d=zG4SJ6G
zrs$RWA=g|A19NKZE6&;0un(}J-qNuj`7jgxu}qn>h5w8V-<LxKD3w)ehi41DU<|As
zC#yA*2i>ml0e$$+{x^5-_;$Oszy9^}WWRKYF?Kv4BIq^fgX?xR<bTTrv2YH;Deqye
zfFU9u^|<a`U7Kllr%SV>yW4>KvkyEl;q1$_MS~tcRqvcz`G9&1Vol;<z0mvtyc-|n
zFS`!MX!@S;k(np;Q8B}7I|mr=r5ez+h?mAS&0MI1us8NJ!HaSe|A-;i80g5+FK{dP
zn(zLuTMPmLvZeE|Wf=_~L@>C4P*ec`gQV5^`oM#V;)#8btksiM{OPafN#nNfr6R#K
zrleTl)C#`~0R&uFrjMzJGL{68u)tXQflP){3Rd?CFU3u*Sv2f@1Dpyr?v-I1?kCn0
zw^W!eaTp1EJ|I+Z!Z&JJ_JK{3H`GVRh@AzsORS_JH?5<}25o6ht!X&c6hjkB4{smZ
zX0zG-byu@(;$Ad_6;)ShjyRyo!{rzl^c~S0^HZc$yhisR_VUg8D!8*0;n|>l%G<z5
zk4vxIP&f?svH#*)86+6<fCuD?SQJJP?4?T=?c~Xm_RG(|cydPyjg_VU@vyY$$4mYc
z7s8`*U~Dam3~@(1r#eU67z@xUVA(Xj&c$gznwxQ%@-*JhSR^`{hhWfRggWBf;XpL%
zS4Gl!8+wpno2Q48C-m^bx7@H@)O=wD0rx&%x?Ezi=Yo9tAs2b&M#C{=hG1731#1s_
zbLOAV09W(!YiRSx#0J6RhOsDC2ZNFX6N$+bxJJJMd`Sx1d_3pma+8u-Zoyx?GhEPf
z!@}U)5wtmHo9y+^`I~Ys^Y9Gx)%HN<`^34Yv5EkfO^XHz2A2aatOZo?oP;}Q2~tc-
zGAT_13K?=otvhU$21WVp9Vq<VGj_$k2%GUOA<@1d8yh*-Q#C*VfHhY6!CuKVIl|Xf
z%vQA~Ix#c9aQ?iXzi_@i1MngD${D}-@nNOlG00Cf-oy3kb*Q(FeLaO&dT!_d`9PB`
zFMcR^wK!z(@BjopC0@dyW8U*L*g}55Kj2q3t*mD(wRiWw&GYNmud6P7wA1sL^8xG?
zS3bbZ2PzVV)k|8!_0gZuNBGA%)WQr*b{>u6LT{A=9Z-smiVfo0qo1lp!no!kYljX<
zC{N4q9c-?Ap+J^e<T_<N8=AoQIoFJ><sdZzmtcoj<cik2wLiqK$PIg=ag1~x=)A#P
z$~9rD0LU*Ly?0QbL>{<bbH25I!6iIMoZWoW6RG5~ljxvXBtJO?R`&%(%S=3Jf=ygl
ztP+RO{`_yQuPgmYL}8=~V3mUw27U&1D;C8GhXUeFaT-4#nwY2Y5*|N8{MaAoK)f%7
zHE;`9fu0igqhBSj6ee>T>%2H7Q3-3XLKq~SHEq&k%K(`lVmENb+#1#`x6aX|0e&a(
z*H17u)|K8<Kk^)s?+4SP>x(bHu<d4RUw!ped5^}FMKb6?YZoz6j2WMn*Q7rjE_6U>
zn(|tMx)U^1TOhch@q=hY4-S5COZXofe=8rvLe?8RXj-ips=cAQtgXiZgV&`?7yabP
zlm6?kzYfEOI$!r6{aE^1GBNPUc4+A5Yvj!buW)HS9^`~I7?HSQLO4S{d*a=jOXIKk
z=^CaSSp`xnl2hVs^3liu9RQ9%ale#QN1;aGoaYf>SH4u6bz|ZemNec})3`SCHBU_r
zT3B&2>0e^wP^h=bTGjPRL;6g$1R&P^0XLXEoP+2~KF|N?b_f&)XlsTZ!YR!taD^Wa
z_<9fM4o$H9gl!Su3S=+4`R#^o6U6L~2H?@YNG1zq_ko62HYhxVS(j~#mF79*1lpVO
z!v%nC8Uj*A%#7Y}ApkC&Xux$seBeWxCfF`*;b77xOaoi=Gz^qoqlWvSV_XS7a~%m+
zUNB~T&uTPDcho2-1MQgevx*1qz>tU#G2d9tc$#oX_7>cqJ$Kg5U$`(m*WCM|z@kn7
zv)#U_pEO*9w@i&|p!j1>Xh=2f;Ag=a{8o5SLyFZ><Hq~g6vbbks}}kI3+f7mIuK#M
zX>mb57?+_BisA0vySCkI{j<-mLthiy#-EcWxu5nY+$x{qEp<6-60+y|mpG;v6=%XW
zUxAi^8;$|>1{*Xkt%*r9nm=eQGz@+npQ|krn}u+CT@pV4Xns~*O077PPBEho#&*V`
z`7ETzz5tOne$p@Kw)r-=->|S8cku!EZMqKd8<%n~;zS+?4d*_xhjl?Sl=5mAZgh~2
z`8INkIU1r1va}!yU=}d^P;r3vpxI602BGbo)M>xo%LYoc9-)XwL6&F?_7Uy7cQT0M
z1sZmR)ch4j+5n2^)J2Q66bp}%Gh6zrN7%psTNL4{c~x)={5sA&*e6Zy)>y?*sE#<q
z5Bmlvh?Kx8?AP6u*3l0D>#$k4l!jP`uN^98Bd$an_#+5LjKxlU29-MDK7C`ndE=&U
zHXHx?>#rgH0$gmH*vaRzhWNp6=gBiZm-YERu`BS0W|qU2Yy#~WCukoKr{Mw3He;*o
zFptt|3Bx6ovh8I7Y%{KI5>IUa9Kkl&%s!I2<Yub7%a<=({%KwX%rQ_cYK$CHUGaeP
zWH@=h4m;F8>YMbXeM@@Efa{zeCJ*%rs5QNjD}yi*C&ES#V1lJDo@La$K7NVb+C`jF
zSn|B{SWf}FnQzLT^33&8OTj%5GuVN>z=Ey|KQeDM;f{4Vz{b<_C<S}Qz};XML+7DJ
z3iD(bmZ9~;9b&CD^%l7`-y{?S=0F797g9igO{~%gbC3bx$kljKH+t<;8t)S*(@?3H
zU`SQGD*h%guck)+fG!McB_d~E@u`a!KUdu9p#Ua<w>;7hi4oV?V3KTL3=n^B^zxbZ
zO*RTG#wdf7#!dMd$YY8H^frF0F2RA8CHFzQwS@UKa@F|v^4Xiybm43uWuy^)owX;t
zs9vV^a_`)^vwrd7rD0HN4vYy8$B=V82ED<k#>6|H4jN`Zgh#_LpAGzIEdbn*=3<z6
z=q`0V=_j{WMZ-M7jg2$1H}tKt%5gD|U6&P4+4=77U4Q!Nr|tUnPhp$-MPXw2tZC#a
zdbfTvuV)>v;hs<N1B0c{h(KnMV$nE3{SMgEVTEYRAL34P(%vXOJ$-`OGv-Nukb_(r
zXIrB+)BBN)`&{=8+z=PdZfK>91CB<~frfmrv#_~;4b4=7EVab*3jGeb5Xd~s@%|KJ
z>96vn94Zd<JFJ5~3w?f*8%XV(#Ndg`lmo*b0)%571VM>RKpL(B@FOt{3P~lj>TMI`
z*rZ_%_*sa0|F<$BMXy;@<r!m$&nPUyeGoS<G(8X*`Dr=qGy<Oq>*=5;{x};bHq=?i
zpkWNjR1k`_d`4_Ni@`HTz=YP9Gty0cAz>l$da;!_v2OBDuI53sz)*D}O$oGW&34|z
zoE`0PewE~3KmXh}n~mMM^AFGj$24CUpYSS;tr{$9vj!jPLi2)Y+caPHfiln_*=>57
z>Zz~M9A~bEx@!09SWJ;CE~pXpktvFP0UJG(#r@0gUbdG{obaE2{$;`fh9qN0d;#b9
z%B0k~b~v1Ht@sJ&YzpmpkBzY&^a}%$ab)a}42?DPI?cHC+%pJ==NYR3a00zg{gwR2
zKB<v$jrggYn_mb%SB?8S4wg6#G3><+YTw!3oR`=7mW%qB>VL?6nHM2}b}%;KD&A8+
zAK;8_sS%D7H_!omQ@umQfyTnRl31VVeTmge?Ip50&GLKlKM)2J9)dHyr-CjJ*xoMC
zMjGdgsmegAy97V`4GOEFvOf|<?1cgtL^t@(u7ZUc_Ju11pK${rMa<<(g%1qZT8&}H
zTX7rB-K8jDJ7i$qY-oPU9XI=o70{1h=0+^?ntaH!Nkh#y<e2%!8@3l=DBgi}*ED@8
z=(@MU9HQ-OA)fFrx^cIkfBwZ^J^89%ym+bQjCr7rGKMGM*>D0~lAo3zASQb4_X#`1
z0}p+UdgH>7SjqzVjfiw`a(|sU&RD?Kh#~gArYqK|L8NfMVg!uue)pX}{nXQT?b@}*
z3+FIsy;egmg|Eh%aSVNb{{aod=o(=zly}Z|#Yb_{eI&a)H-W{$R!D2q>LORc$sqx>
z!*hU=T=-CbOaBgaQNKc?BkmK1rD9jCmU(l$q0@anL!*LQ*~5Dg9dkI=iXJM}ZkQ>Q
zTi@ZmyTz!leOP2}6fZ(J?WuM2uUAoUxaW;xpy!1f0gY)_kwS3UAXWq}64J1Qls+7Z
z2^9d*GXV|p4t5cb27EQZ+{=EvK65frOiFUgWx%!8)d7pJ$!B4r=dK445JoRV#Wn7+
z9tcC_0&%7s1_9SwE{1Tn`)1(EY13KZ;@rHGR>p(x^E7bW%Q3aQ8is{i(POn2xQ8ZR
zs2ByEjg9y#(+!*T!Jhg4^!lg1*>3Fa-MfrU<R3mV-U`2B77jTlqa`3N^i|x0)qz`$
zvFtbO9sLkCU>3l0u~`dbO}qHMPjO<AWc{Kq-9rN^&>Zvy9<3p1e);mzpXNP&^cd;`
zF|mA4U*2}+_TtgBHDRO59-pWGOk=6v^+ovz$;*RgiL&zE7ca)Sa|Ea-^1)huMld5%
z!4bK}-ZS;)Rewjr1MUzXyr%co!z8|OjZJx=&R8%*+;GprldaAXsy~er?JCA?R`Y(Y
z$sKJV5!8!Nn)ep5G#kdTjXhxz_Xfh7$r^@i7CjVP@{yJz2uK<Z2s{u5aPn<{SvU58
z&xARVJ_sOULG`hKkf#RvcpvW(J|iKDCB;tzBc6AkYoRcoeE5jlU2tg+VnZLfQ*h**
zQvz@w_(y&PJ8f!33*k#S=}=pJ1H;4l{sOKXF_!YR=D;A<Rg=OY!5H+IoqW5SGarD?
zkZ<KN;|;w0CT*Gj^6M}5>dBLS`Q6LPgTzL}Iok!U9ER#RT#v9~JpossEAj;UDK62_
zo&$o%5E=37d^xY7!$ReYd}dOrU8J<@H}0<wBTqc2Og8-P-Mju2{AnKMshrg_tE93L
z<FhwA7+bLt@OB=uk5`xz2l2!A2YlIfh8=<7VZnPJ;k`mUNX%+A#Y7=9r@)s;pfJyS
zroJ(P6~Cfa_KPsa4y`$w1xYb+N&2cU+&qe1?eJM)(gN`hq|59<k#wHpwy{;Z@XNz0
zx3*`<J+lIPodb>GNq(4%W!y54H`C#VE@WqyczHx1mjSwCfIvFh!*vSoo){YmBopvc
zU^H6}V}Qu*SS<5(c@@%1l;IE8(V&BzDpopotOW`PGJc${fMjCW5RWK|!hqMd`+J00
z91vuL(~}CS`2<@qYtRPavDZFwPnsF_k@cjw{3&i2*IqxFli=N?)-lEW%|;&_q{hV<
zt_}+3?$@t>>Q6uQwBNmZ7bk=P5y(S6=f*eW;e4Q*Yd04xp0n7eW?cuYQKva+>i{a4
z!X6wtofq0y@i)#TU##PHPzf75C~%!>f5ez*slH+6|MA{`*vl`U@JEjxO1Pp&H#USZ
zMrek&7x)M+usrj@S(Aq_xL0^pd~l*{DCoh**h%%?Kuc`5ivl7x5ukZ5Yj437>aso?
z-R7L8{Zv20+Qgjpm3>lw<Sn|@*+G7At@HruUuBTkOoZn-ywE9KAVt-U;D|n?PY5SG
ztEn%6t<W;;2ZHFFC3%sb<U`{Xj!oj<sIe|cCNoaxkX)cYkkn{URyYx9O59WnG^l2H
z5rGdwb3NqwpjSA+y?~huAr%Zt_Xa-ZL1IK9;Qg{O3@N~F7K0A4BB>7+#@}7nBSwf;
zEgNlk`0BA^zJw(hHU2elhFZi)P&n{DL#$DO;&b#T{0P6i&+0?%=R9O^1Ey8X>jBxg
ztr&6$Hf}sHqoByVaHu-vsck?1{Ij2U`Gmjw?qzAbmCI6Nh0(w(bJOdxg+FK<@7v;j
zuN#bEUfXc*xruHdn^pfQ9WUcSF8X`aUbEi@mOiRy_wM~@$DcXwpL}vna1K7J_hUb#
zI-fWXE@{}Iiy4=m3&avylLJGn<3Shr#61%`ihZr0zT{QZmY>kJd}-(XBiG)zSYk2k
zCtIwE5!XDl?Xv?<s&$rTR<Ajq0jY?HzBDaj1FzKESM}I>@h}SzJ9=H{6oO{lXPsit
zH^Z2$+kpIcTymVOw`FdocEYzlizS<~2SK~#B1t|E3QR&dkYcAqTT)`b6#xiA<KP7K
z8P4VsO*R)Q_?-m-4S*X7CV`J4+}TI!G47I9TIi&YwsR|=AVfriV9P$_zl>e-ObliH
zAk>wOc)w_Bg!9OE=7R@-%3=5u4P(<&e&~Nc7A+t0&4FW#7<bDR<C^LzhGQslY!2S`
zm838=);HZtp5tEmi_h^aNWAvPYyQ+zPuq9!ztu||b|3aNpIqh@?U?^c1Ju-Uk3Nqa
z*2AqhEo@;TC8nqmIj|4$0U(%btx7-R5Rt(!O>fF!5sMyz%IDFIi08`HD|X_<%l7c$
zL&~w&6^2K+rESUqv4y#jp|MIi_Z8M4qKpX-1r)E>UO>F;0)C|t#d4S1;(iiaHqkLY
zYX?VDT~)j&&{`!i6EBVjU7)4m2DqYz!UM=heAs{yWK22C^8gY=-m(sg$JD39M>(6s
znR-KthPqPT5aG}%$!@o*@Evg+G$I%1bP*TZnRuu?Rm<?u;^`(WVngRdAOR);?~{OW
z7@_!Ce8>VmFF{q*ln9ZT_d#kCxD2Xye^_+=egYoiD-hCt`W{4J8XxAAS`_Ta#$X#8
z8^zpn)5E5$X4@$hu>)MFZLp+0hHz-H7bqlfLl2X`0sFB*5BmYD{tRLdT&j=)mGX@V
zWGrdJ-1o%5gR*im+Lr#&28D_74LKHy^j@C>hmmJ!)cG}>KYIAcUp{fd-usXDIv%BK
z!ZmHBA|WNl4dSVRkui<BfcOl6tRK=I#m4u1T&Eg@oX7ecFhlw%2OL(G8%E!l&ot<Z
zU@U2U#(VDl_@f<v=D2<I@kbm#^>3$wZEK=B7z>9W3WJh6VK9GLE1s~AVlHs_=$OR5
z-u0MAj1_cH!X_;f28hGJ6=|yQS>?H&K>+`7NHd@ILeQ+UO2z1tXo>p^9^R%HGdO&0
zGXitv&xuyYMKKB&1GjSA*e!vc6EBT3Ng;iJFRz-PW^ZUwXFlObIW}$e`>4~>U(;UJ
zAUrq6|JN-_ejgE(C~8>*Nnmxy=~ITke!~KF?ImAHZNO*T`|U7uymr-uhXaPZ2V_A>
z<RXO^xZwke5pA`cMh@ruwKuqI0{pGlz?-UR7X-o!zjs(bX=oF}fg|^33`(bIhu-hg
z!Mf3^ulaeTvuik&KK@XH(#8ZGZ^@}E=EES<yr4k>p5TicGfvbIw`<p~`SE9-v3oz<
ztNpPav|NLxe8*?JW%$gaVb4v|5GCYZdFRiROCC(9N3nMBH81b>bRgCq(R1UPZswHg
zF%z(jf5?~ZK`k~#?e<)`dc|LO;RSo};DOPzp~ez>jxqOc!(IIV03ZNKL_t(kFTtG0
zSUDol@PIROC)`S2K`H1L^_+@hJCbw3M@HZxO-nzL*x~chGuBuI2<yr?`;DHhoDW=7
z+N;<^BM2Jrb;bpI2Vz*Ew4MyO^<GChmGyv%M?a}}>b|FFxbJIk)Otl-@85^cT95JB
z&*B<5kl1?tk_HNeC;7Da6Fu30B$!L^peqF>0VpBvADBv}OK}c+nx-2GRj4c9BG__W
z;MU<+F_}Q`dC0T=+%z0+6s@@|@X-7LbKr0mN_~dIFo+AkIxO;7VUYL=mt}v>M>_QW
zT<g7|SJIqeM8a{4L+}T?pjol6m}p+sfS^dp7wWrGsyy;O01DcP_0&Xn{-HP=-tN|6
zJ`g89w=_&VJbd)XUwHlnyL$CXDY}BEp*|eemFH%^@e<mU7*|7O_%hI&H}{J<hQ09!
z_mEk|f-p0uhy`m`2BK<fae>?m=L{{ltmpUc-Lq$oANLPG{BWsZ%^e&e5hNZ_>1+@9
zOnZ5^kYP-;2IK5w%RS|Gsf)DQbdDOM{>3)qM*4$%SPNZ8Sa;YL1nVMF_lvexSN6Ze
z2y^HC;23e@AL*sUq2LTx18~TLc<kp8z-L*H5mpAn_`2>N@}F^JE$y}zTY@+0ym6-d
zVCvi}^IrJl{SZ^+RnIrDwFi)mu~y}}&`TLhA4+xue+^&>%En}Hrq@uExEK@=RRM{I
z10e)4b6QqI*vJxN=It{sXK||V3Lk_XCI-eTqEXRC#4J3@jqDY$BOmn&D*&r`xbypJ
zrM_A-S+4y~w&qwNBH{*O-zAF-FlMZoY=cH-<Y10P0GNa??O;{`H_j+G(FSTvVxQL|
z{(*MbiDhgztX6%^S_^+4{^1Yy%<*UJhkN&+UWXwl+KcBICgzRYiw?AzMppQ~ny+d%
zazbrDOcn<Tpak+?4VAs$<ROlhOa0KWCuL$@5Ev<~`CrGQ`o41Isz3ky^Z2KEf@#m4
zj#LpN#3I@pIqI>cBHA<Rc@#(8F1#r=##&=Cc$1*1*7sw%Hz&}S%<TNqrZY~z<sr6Z
zR(mLjIc5mC<9SK72KdPAXZ&$y>6u}SQ@AyC1Dc|9!IT$LJ9B{$)ZPL<w1Z!K154(N
z`KOv2bK4UWaXjcc=Y5N#-t&xTwO*#_Ir-b{6EP8(NiTv);UZrK&J07E$Qg(GWV=r0
zxOQhh-4xIfCz9?NT_+ju?`@zsAge++AruMaR!Y+b%6S#e8hgfTx<?BFKOX_qg%kN!
zDwPH>Q*T&gtsx>|wX%s>3P~F__{#VCx=+L0v;(t_C;3thLA=qNl^dtqWxE}=siA2M
z6;~Zp5c0~^W*aV;k<KVCh@&;LmV47Y=IHkyJg^s@f5ATZ;C<k8%?ZYmctYH`A11NW
z0>U@$As3uCqXRTFtpipq2mZ{sp+v#ws3Yc3{fxu5H+li8IH`-)pp??jg9rER_%p}-
z_aA<knj5*oNJW`V<KuqHnR*N#aMxNPY#>&U18^sCGC_*9x1K1PufE*kL_dw&hy_PQ
zx6k2ajMn3Awz2k?F?rTmO}DN&;~+B;?S&;ztJl=>6z|M!9d4G~)3Xsf<dEz_9MlVR
z_65*}hVp<WHWX**^QB`v1H@j9hiXRF;%nwidRpRDF=2nS_`7aNP$kqcQ5lHjU=ctC
zTglbApb66fR0Wwt=#fwuGcr7jz~f*91jTkByS9~2Fxc|t1BG!WdoiNVwJ*b9yA!^E
zQN~-MD;{e<=8n%`XwLQx*J^%AM}$E*ue1Sr5RQ#~%(+LdX0(uEDl69R&pfnyt6@ww
zrh9Jby9fqMM2n0`d4=xkXji{{t#lZBv}so^)qHr(6NdP1^M@b)-k*QrdHd<7pOSZ)
zaN|C_SYygDa*Fs@UTCMDNjZ1@!Sks$(>1au_9sj^zu%xKn{h_|>aa2Cu6%)N;CA`O
zL(A`f|9gMo`RDzopYA6I=z|8*f_v>NbZ^3jqN;T)M)6r}jJ6P)c$xZ`r5}!qFcacN
zzVZc@&AOv9(EExJ<<aiL{_1z8xlEX~e5of5It5OTG>*E6DD@88se_C&7gjqx{iBv6
zFNiT>AzIKZ5ufWP{jKoAEa)D`Yg6A9$zU#Y?&<gsc;)k^U-G91R(+4)Y~%)zs6b5j
zSg>PZDKQPkd`!)uI%vEC$YfzAEn`NK!n}w$eh?)T2$3R<kaB7QFQMf(qfDohB|;`K
ztI!DJvRU|H79&^nQ1es_r7)UZvm|ZUKU~oDkY{UnNWqk2)bOZ9!aR4^8W{@>|7xhR
z3b{rtu7(N}IW=ksp{!$6<+|xl`6ewbI4mK;CpQrf#6IzWeVEtW|LMLz|HAYB`wxHb
zv>v!a2I-ryFw(v;u*OLTKnQRa`f|n_*Aov!tgKn|Ly66ef+QS!-LtOh%a#YrWlIKv
z`VcI@x7E9Zy!7MlcK`l;fByLw{KG$dNM4wm+MCYmLF`a`ysso^&BX`QDmLY09Q6*H
zI8MbyaBaRJ!Sa<JopzzlG8vUq>jR`yttt5|TcX~u4<N4b-#Umv%C)ZHI%?fgiUo;r
zP?&S8C+2$AW@dxVa}T0B))3xnGb!yeo{%i`gq8=SMrRPf0x{1C0-E$Hw8AoNfi7{G
zXvgS1=j$0-%XjGuul_Gg9sp$Hz$Oeayj_Tnz~l6#-XB26z(<idzlWUj6UW(zEps(P
zFmD|4s^<o_PlE{7p`cA2*9Ins@WhH$PDmqs5a?=>I6?c0Y2Crt8QYd7bJ}zuuj<P%
z&URRY0>=Y5w~N6hz=KVTwF>Xq2Weq(jn7Cw$#>?od&YYwZkuj8k9|1ey0i<_aFfrq
z=?gS3jnx&8*{|CNAH46+zwm<p^wUp{vG-t_P7>4UAXBko40GOO%Zmo&2XU<UlygHy
z7q)9J=2?enTX0ldhdtWwbsvYg=8o%fpo1^wpxgQI4<Fj`<Hzm({rjB*igTz3&Ix>G
z7eX=5byC~82BBV(3$`)lm`hi9vu+T&(ny;nO*4hbLf4tw(1V*6)fe)&Cy!bKbBkp~
zYg)XxUix3|Hwv1#Q$DJHpi~@Sz}l&vw9-iHIg(T7quFRUs5aVj(FxSHCqKfWiM_GE
zV=ry`O=HPH<4->?d91ipk9E*PfAVVy#_CxLW)MXJ$c3(nPoR1Q3XOL6NrpoR4`U?3
zRs)t8Mj@~74~-lTdFjA1d5GcYo(*`#ySgV>O@5_Nr-nV@t~ls7sH$P7_%Vi}L58DX
zPH55_r+ik8mxwpngHg7I4Y84S%XKcCG>&lsSnyk8EIxHm8p1Nv7$|^r?k#7r3A~NX
z0PaV|EL76^^03>nHTU{=v3>Z5KLC`uzHp|`q=9x2%)`=zHR^4Mr(>>|g#FqdHK|zO
z^YrccBmNeLQmUQGXBEGTj+>onC`@`xM`i25g9rBf3orPUt5>0Y7H6$Dv8Ex3P`ANT
z=8802pb_8H8;v${ZbN>F#V!%<Lu+i|a>ZI>M?P3rl51hv{ZcH*tLic^7eBKm(J8H+
z^5Hl^%!B4e{HQ*0pZFq7Y-y)@0qb01e^Nf3k4bB^reeYwHs>Z99I%T0AQ~B~<$JJ=
zLL&Z)gL&T1hja35?s3rDFANBhNu~ph4*1=236+A$W|C=AMq?w+`<2i@2G6tUKndNg
z7c)Tx`4ASa`H=_!%kH=Cwfu}9dA-4SIhPVfdTf{=pAcHdu7Z|lxW0r~ITcQLi)otU
zsgRie0ZYKq%O4I1(DE?!e0<MqfeXkpb1AIBE$xK>am9cmV?D(H(IOULs@H|`m&RvI
zAVw<&C6?5B+{q=Zn=4nY*b6T_Zx0_mqP3huCc95_vYwK*l`X<8xkIQ|x*|$MW4_DY
zN)`F8l)F3_%hl>#-=)?9JLqS?NBUh1K-S=H_0HBGKK#&*Kl6;=yZ7Tfh{J4A&P`Rc
z89cOusoLGsw+lz`7sy-D(GMobM{%2J$@4ZGQAgNgtC^HPEB~3V;D`NqXcU7+i6+tK
z>VC5~#!x)TXLqr?`|m<a$PdTV=YC@2DY;?}G>wKR4$XCe8(|@QCRY+y%F0kv(;2{;
zEuBjZKa6AW%kNRfitk|Gy6%_P5a;lB-GU?V+J=OJ58#x7cQ4rnZI6(kFhMBct2M2-
zPkRQTlARKv=1_wWs2_5q^_Vl-8t(BP@#}Cu1PFPhF0AY>2euB3q%<0D^jZtl8(wHH
z;>yBB{F67#0sQB>+NI442xaZneja)pBbi2w(-u7&F*AxM@t<{?2gqiNwWUKP;-*9U
z?(>rhxbZmY%RF^M++=9I`IjElKd+N`#6H{j@yC1i%rnRB+O<DUoN!)cOZ0B3Qy`A;
z$oN?kJ&yrntfTs@I1DkvT?2omml*tjwxbWCBlDH~2EP=4zy<l>qv9-Mm0a#WxF3I-
zhmD56&|o~erfb7llcBp=S4O`G)yCJ84jyb3;zkS>d+CJLb-ucax5h!Q_vSOh)7;nj
zwf)eG1zW}-wF5j&F`<tgZM~ONzG<&qQvT7e^pGZVw~!d-F<*QrYuE?WQymd69FI?a
z!A|!1$cZr7cb0L}cq2~4tl?@iKRa*fcZn1CHNs?rLf}Dwn&!_u%ro*P94;glT=!FU
zj2jyX5Z7qT*lgQ<AT0dia48ZOg<u%~HeQUK2%Zayg_Va(=Ul-0;;@Lt!3V9;XZT}s
zcu(RZyif5bUaXgfr^GZKpacuW^Z(~+O<OPm$D%LF9X?NmE_s$dQRa&n3kO)t&tuI3
zFXbpDO82^t(gQpT9foa?DWn7(mG-9C-h1yoKk@R*_W1E58*|W0`C-TNA#Q5we7_AG
z#V4>P-64-n!!^W)JUS-aqi9dWVHgIl={}0-X`O3)oO|v0&;R_`jvqhn_wM~j_U9q<
z1nxj*nFzijp12-3?+0BO{<43<h-U+0qI+h|vJd3ThUd7i>_M`7uwp-?_4ENYYnN~p
zxr*N6ex*SOrtWB+9!f$#wR6t_wnA?+sn&xcvybjRm4T=i;NJKi@KTsloEQn?-S#aw
z${d&z8V}6|`pX!2UhMO^s68L<X`f!{qVO<t-()j@fCrGQ8<)VuLGEur6%guUwJ)}e
z!<mXgpC5@>3#Imy{9u29kh-mgNw&dqHq_J#U=nx^*aa{n4*Q!1i%1U+^{iu^T-G5)
z(gMG;up9s4i*T*vdmde^9>u%Hq!enVwiO=r7t2Hwfsn+bT7(8#87jW2zY-F^wkwI5
z2x&g*O9gJ@MyXRa-0*G251OixouQT-Hpkk3{_~&q^ixmUC!c%*d<{MfYD+kd230@O
z(t!_y6_o0%F&!R=E8!UYHZ59@L;Vzn=mQ)7B361Pcn7}@uOP9CvG`X_K6?DfUViz6
zUA=PEd1x5fmOQN7gX$Oh?R+bY)Dtojk?Pq0;ERKZy78QtPyXpy;JUH}&+(8l)<TSW
zTsPsm#s|1Cj~YSzHIIGvaK2+*BSWNS!9MG^@bHXLcw6@^s@*|jiZyb)!WjDBZrT2M
zIn7u=0AgU*QAfq&;!FBqU)E@$LTxD?wFEI`f0Wns3^2)mVX_W*V-p;F8?5ZW1`#x&
z^uSxf6`QFI9(Y2^Y=4o<ZejUA3|LUKS7JBKw``SI;UKXaWurJy$mB1YN9qIhHQ*)U
zafgD7I3`}4i*{<jC`RVPx*cjT{kia)Sn)SI;CQJYXgbSb3_MZ01CW|t@q8$UyFD?~
z6$hJg1=bnsqPlQ^*amKW@xFAqYL*<&$bE%UxJ*M%;_}Ov-?bAbUiM#p{#n)`+}85f
z7!Yq`zSt&eN4SO@I^JX5ALSSjRg)j$ZP<dAK?e{3j0uy^yvuO?!e7Q{qF;=2x5&)=
zlWU*Y@#D|<kN18=0Zbgi81-Ud@J;I%x@h&-d{yRTv-f_|pXx4p6XMGH>iQ{+OfhuX
zlQ>rSv^}ub&_A*55a)EUkwIT!xy@OFNR@;AHtCxLae;E~HA47-=1@N)?hvQOHPsl_
zP`)-lyYP*D$Ct<8PyGi@)py|8a6hMa>rav&^%YTh%6P^=Sm@YT*=c*=)ja<_dSG&2
zvjAdiP!35Tuu6;y+F%W(wzH9TB`$9I03iF(AzH6d6J<w)H2IMR)x=9{%b&M<$T0i!
z++!q!sHLgs;PA1?ABY)w&^-FVb>Kl_qZ}x`VW4(#W{lJDUB*aw30D|zb!NgX{bIok
zu@N`mlQG))vn&_K9O548Ot2DvGNdFvfSBT&8v_R&Tl+8{cpkN!iH!07^PhL^si&T{
z>z{sF!7COND?ckg!?n=Gq}6uNU1<ulOkOy);=kLF0}VD41<9xVjO`p>)c*>%y0Ev^
z{fCbp`iYlc_V?cVkBkd*<(7o?Q9d)RloJfWA^tiPS?W#JdGk|wjaUVS?GQQY5n$@N
z+U1S<0M5c}J*a)8xAir1s)tXqMbLCyn%zoJ;%SHLqG7cMe2U&Gj_xP$fV&3aF3%LK
zDeKzUvsdbkavXV>byT*VfH(M~xf2!8bPD$|#|n4U%1{H6H|=lS8U3!9H$moFv=JyL
z*MQE?U`LzL;A1tM5_!W%D5_Kk?aSw>m^dI6h&WvHKq>aqhmk*yIi4)B3n33;kj9Ea
zXt4sERCuw@psYklB9M+f+~)%$#7CA&MCD3~A#SoZ;dbYmY=v*h6>};Zfi2=zf}!67
zKiS5mkbmQ0v)ki#IOK>qiRMb&lkd_RbIJC0IN$&SrUrew#9KHB_(m&;o{Tm9nY&-U
z{H~uodD4IR<<|ukJqL8xc`8h}K1Q36V+L(tx7MO|jPH|e)T8jY>O)lo)%1rLWl&(R
zFl5j)5BV}6Hi}y_^G`mxW=}o+wB5b?Pk?HnqxvDOrVLj3GQjOnjD65FPst;R0gmc%
z$9Toz)Nc?+>T}4MtYy$99$W2~Kp8K>W^vFQ;>9xSYZ%M$?;MllqVojf8?M!Jj7f4O
z7*=*Ak9_CNM$eIFob+uFL1}~JExxmEW)1MYL@{>ee|Rlpj5;dJc#qnc4uCcLabCe{
z*uOzdR4^D=qM||9Cvb`&s530cRD(^x0CPYdf{3b^n*Q*aVyieJJ!qQZGeaS@g5a<T
z>L7yHD9_#J-s~iP8d8uG&`@YL3_0&T&v{^iD8@$Z6%!6JhkL_7Yu|c`J4`}#HXL}0
zuRxJFRh@=j#$p<@C)iGy*%+Vff#T0WpX*D<_^P(#z*$%W;gl|DS8+s*w0d3Xh4kFk
zdtXz2?%w^UZMPf0{^@n6Jqx{Ox_0!&tn!C=cd!VT1t9xEPDx+PH|VhE15|+F)^E@!
zVm;=GT%evYNALYa_jLS#?+n=d(W8g{^2;ae^1GM&o;1~C)1IE$^%=24F$rX=6q7l9
znW9*xoPR^^Mt))F<6g^HG7i;?#x>2c7H=h~F=;<SJP6KwE0{2prfYg^jjx<tz5l_E
zro{|RYjMGeHDba}_2~tU(~R+sU1CW5K<xAj@XLMf%B|uS88%FU2l7Yr3;34Mm~}4>
z^};tON#MJ`cdS3EOHlWwHpQL-cvXy)3B`#VFNz|cMLtX-<tedYf~7f$XNV#9%X2(r
z#JYAs6CX>l{ssYa<Ei)Upl9-`z9G)audqeDU?X9q2Y7725agIEm29C`cg!Ug<5ih>
zfWAj#bQwp6x`NpGP|#aB<HiMqO}8)ueqf#CSK360iH%4%cu}1NNvPSqH7M~XzfMEU
zd#;FA?Z_C4+r~j*%~}pVtps3~E?%@(Prhou{Q3*yZV(t?skPc`-^u=>PTTvXmOGJ^
zSU{?E82JypEc~?nyaz;)@rK-SJL@QLD$SuE(4?FH@!B8#>8GBuyWicdH7zfvJ!P@*
zrueP2u)>%3a1IVum1oR>1*5oj9sm!vm2ra3+dA$aRItH_Ra|ulLVSuxx~Fl0jv|?S
z9W;hXryZ+(ln?d80b9ctl?>nj`o(xim5~`o*)iR#kHQyon)hq}>H5t`v|o1(Rvw61
z(*K0Go!4Q{c*0(ET{&S6T~mt~m@}Op?z?}F-e?2}#ls&4hK3<{NFIa`un>t|tl(R)
zAb`jR#v>s1eONdu41+zPX|+FyP#a<So8k^Z6lT~gaA0$8m|~AVn%lr7<&n4vK54L?
zEJdxKyFM`9if^B-c4?7N<BDgMA_8<oN5gr%^niq1g)eLpJx?euAABJO`*K#^!si@6
z#o9Q>0U>(F&4bM}hZw>R6yYi-TKA7TcWkrW+UI}$e8PF5D~LHZ$-tA`_F+{#wpj6S
zJ8LP{06@Io#6}M8p>glicczJy7VZTs^I5seGuZp<FTdJ}mtXeFmoFCv3#@=dj5Bj-
z8khWdpqlEa&P{k!2&qDfb!Zr3EFBvJfzoD;0Nc)MDcAAPXJrR{(z7RDf)Q&&b;<p-
z;;jQO9uP}&6F>X~7L{sbf9Pv;zu9Hf>%35*ps9)j?ND!;??ViQRkA*<Gf2i9<Dz^k
zc2ph&E*N$`2#ey8bDA`QZfWMTl;Qgg9^B#?>aic}G>?rb*j4H|TnPplj8mgbT-vZM
zMy3WpaTH<J-h*`(&_Du=VRwxd4@XF*Tn51t3odU(DnvLJ7kw)n1k3kS2<~`a8{dRO
zJsa*N?@w%ADa<9upp(H?30rm5b0j<_PAZ2UI}eJ&8aWBXhzlT-^<TPghgLun=U4qs
z;d^2es{s43H8#V%UlQBH)9|GwZIVbJSm+$UukgpZ9-b%nW$x0&OLp$uS;ikEf%{3A
zL-R*2ns!x@@WQXWJ_kpOuilqA3bXKa<`LsY=o3HAkMbDsP5Z;}fE;jdeZGGEx<CEY
zQ}*3=-?{i5bu$g!=#%K5>MikY!DT!!iP^t$2r;PU6F$)%cXs6<s8ft<HgHW~uF#)>
zyP-B9kJ1y(m(Y*3z4a`lk^eyq1LH`i=bC$wo4x%-cv2jp?$R#yB(PWDdHmElVUIrh
zC3pkj>piSteC0mExRGwBSot31jj@(5_F2P$@)@29KEge5LOkxl5#rp8g|PsX0vn%o
zP=TWokqn(|Vm{r+STb^>I3Vf5c@!4KG1=i_tyoJu(iDWeNEm<|28z=~ajXh}a0s+Y
z(M=T4SnB}a#il~lLk9S1F~B8_8RMvDJ5mXI)eROWAMS$|5Igww`cWNw*;+Ktalo4R
z;?~>hCR3BxIEo^?@=IIFq1W9}2Yuk$;u*^meUWxp+pVUx`BO~DmFV&7zkltU&DL(+
zyw&Ol!V^uE?l8YazoNPrvDCcgI;%Cbf7NsWm*^RWGH3QH7AA)dK^iyu!yG_xn3rn#
zmtTIhldqn%ciw)d+g02fCR0rN@Nds@Kk+=w3Lav~56zCkH1;Em>KAlC`qW&|uajNP
zr^dq6=Soxa0W8U~wr`0i#K}3<d&xbM-^CN3h4l5DAuSQ|H48z)8V7(+sAF9Yd=(c|
zo6%Y-<`J*dLG7DgYdx0W6c5ck#51XwHJ{JtSlj+1EQ4a!=(NAt!+U}=?xMc}EqfJh
z2Czng9G=I^4yH-)V-X~!045S%pwhtsLVe-@uyoW05yn+w9&=4{d<rA?hcNSz#32GA
z|Bh;aft+?mdvvhN2acP7-4^(mU&gR#3IKlQuZM-CG3jgqooyRN3GWaGqhDpqG9c1U
zrG;k`*WaQ`%q8%xWEhJAg7D*5_*raR4T<4^fJPC6b}-7IGT!8OQ7;2-!ZpOw?kV1|
z_QLt|cJAC+^~D1-G)&N<MoPOlY*cS8_Q)WHmgT0sb-rg9y2jmN<$Hv=_JF2f))TKm
z*T`?!&G$zJuYdZfZ?{|f$3OnD;&d^113S(Eh#@`3T0BV9&{^V0T1cCjC(IC4E$}Y&
zm>BKztFf7Kh*2%<u)sjmqi&vr0jnUf<T}eiHs!_#Fk_a7`&O7ScM07h*3z%Wk?-|O
zVtR)-4A;B0xs31CKki5F$Qzt2>N)c5wWn*IVgYv1OViUB>pZ{mGyBQu<YIU28*QMn
zt%BGjWP`lNftdsXA%kErt8qVp<n3OCRY?n2^B#yv0rV8Qh(CvHWNm<H*tEs_o?9Ng
z0uv-*XBQF&%!!BDHiZDH7d+t?<Om|iwk^D<%{Gkbb77|VR~S1@pk@ZYooC?C_%*Q|
z1~%M50K^~QsaoOpbf_5`m<(8?hIJ*FjRO`0-gKLIP?M@W!ob7@4MnH}!VO|a+_5<_
zP9SE$p|n?69v&Y0cDu1Jzx<*#zx4&fsF+!=SDRKLPU{gT@zONUw1j@rIM+e=6&?m(
zj3vaJZz1*|DJw9&2;aMae*XCvfA!=^yLj<p5*!?Y5ZjlH;9Bl^WJqj)b{cM!YheWs
z7#F^`utV$E0>s|1hdtEarB9W=&YhTO&k-*c3u?&|^I)?66r$&y*g<^Ixpy<g%GDUZ
zwmok>O=Cp7G5@jyvBUCFE##O8X6}*Kh8Nz}xF|Wm%$QTCRXQA^1`?CX;fa@JAV<+;
zRN^0b8*D&d$2Ae9U_I&-as{l+edB{jJd|M~QZc@#n2@qrd|_J#Z`T77#rcnkqxZ4#
zFTrm9xzR$bWS4!&C}!LSJn#TwWHE9C|KNKcFWuK1<1}pB@T-nkjmAPAyTM_euTyM%
zaA`!+8ftn_fD>QRA4kn}T$=CJ47#q+Y<<AED!JXw#H`1T4X4FY3A0ng#2^-U?V8|b
zV-!zuSa}XM1PeSSh)q!QQH*pjHS-JS&-;b*=S2^tp%o`9E>~CDiZ~*M6%PX!sH=K3
zKL`9qjfDf*m>*R~9qS4}a`3_`>=rNAuV1(AW^3Pk^G%`GY73(qe5lUmOLPTU3~SMU
z;v;iNF==%)<XmQFE>vUk0r;rHSM)ajeZKkt03ZNKL_t)H$v8)fm-!V=z-H|m^vrA0
z56#^t@<Izb{`tzd*Imw;Fm?P5Eva$D`0#A018Vo72PAiT?fru12l*J{a{Aq{@1K#!
zG^n#!{qH{4mdw+#8&s?Yi%B~Z_LWm|A$l;p=ez&c?aC+vnek`By*R4?#sMdOpda9K
zu+94>(Xl;I941c^t(1*^6M=NElQfaQ0stcj9$@IazHG0sgZLo^6dv(3U3<k;xdvW4
z0ot$!o8TS{5_#p1iURf0iluntZ(mi1RtQ-^uFTh3%z@&;)#hX~{o=qZKN$nYvO2IR
zC(L_k7;(Xz)(5g0QixO99yo&wQOcd^7wWyB8a0Pv&t<m{4{fvE_~GGUrf7YyVkXZj
ztBgr%VXPtKY>~eKhJ|GU&$)H2TCWj9W=V@<e*{eFi<3?M)_o|<zk2djzjW!Mgih^k
zxxf4syrPJ<E-+XO*QPV8SRg1}YZNE-7wAh;lfbv!SN=E-pZGLp(kk7aPs1eB(&skq
zaoP*q)8S_7{R<6{ufmbEgEKC*mto-YK^vT8=UMiFHq!3CFLldVOO1oD#NR`Hi17kD
z)}q(8ovvJR0E{Pm6*FENmN8!R-RvyxEkC<^9`t4rs)5zOPfC*bMuynJHFX~*Yu~f8
z&4XEOM*R;Ut57H5cEBj!>3|UG$wNp98RDLDuVUI+s^78>pY{XaBIagKo^_1sUfI;w
zZ2S~wVnKG{wZ&4{<-S^nSoMK1aGM&GwZsGBNqmxDMjLVjyI8F_)!I7L!xUft4Bt%C
zI@sX#%ORmQE171$;S^Yk2FRBVRn*%`kGt!QH(s|37tVw6(p(*Itov*{LT!{FDQCu&
zfFjIlfJO{M4oI`=iQETOR%;y}lJ@G5fxWflRe4&u#KR5`?Be;>&0DtJZ0ydRf0%PD
zU~|T-X^{AigMcGfkY48p2WLTu^%pp_%4%^WKKK?fHFzi*Lf@H}>Kek<d`LSq3s|RI
zJ1~=UU8%%y-B9bWm$_N^t+^y|Rxv<4l^upoT1hT4DR_f=8R9C8x~3~VsDn~0_@@Jw
z<sFC{_n^PUIfS`~wS^Dn9JHf2z=p{}<byPXt~*Y|%abnYC3s)^dmQu<yb36P)UeCv
z?l_1e;Nv}mwN3<qmV(S!0c3o>0sw@%7)XUf-%GjY!494&xNQJ20g5)nKE$1(p=kQ^
zA(y!+2%fDwLHr_Olh2$94~2Y1{ylUu9)7f$;GP;XX%=fk@=_fzZfRp|+O&uAf$ips
zn_%rNm-M$dQ0TQwj^bJjjq;(~B0hnc#jYinfyZ=^s`%tS>LhpuMc%x5%QoAMe|316
zIJ7*TgbDFnuS}f|KJ|m-f)ZCTEb^c9+pq_FIm|-}vVZDhP$~QTl8>`z&)UU{mlEQA
zerR}+{{(U5y$`l<28TiPD+71HnS7Hr7PE%*2E0$U>yS{km-!7?FY92AmHKDL31c?e
z4=^fkg3l6L@S4%{deRX0Y&n!N&J`0shZs0*&bfVwTg+(a8LC%S5M;ty%WPT<6e}l^
zH|t=@@l9W31dp*7TgSilE^7>=<ZMr{hj3JvNAEYyxQYNJg9052sl6Wt68oq@p9c~c
zYSezg<|O`hNKMztSdYE5Be9j}yWn?G=>T5g7g`xaR(B^c$-QA6X0HD7Vyra2!ZkH5
zMdkFN4Vb-$>3B7V;TG8AnHGwMcq{zTI1yK3b}eLj=FYw|MjX084a6~jD|YfVVvK8I
zujrS;hu;+&#{heWSr^hoIM@zt8o2|OR@z$)Jk1-qvcT8;?76e{=38&hheYB$^5ER@
zKHXFOf=ntdK#R4`y`{xg+C^TqCyI-PDNPpODgHzQI-cT+L#@SxnBBZ_!#A6)fBp4;
zOJC%gz#KZZj2-9W@^I#9+?y6!AD4Pjn>f^IZw0Hbdt!hFXxcCv&Wu|dN>Yf9@#88E
z7fS<lFkx5m&O9u7hEKLSr;r!sVUaoNx#c18mZryC9ePK}+Sy0u0rgmpR3p$Y%AnvO
z{X3WJnO%D>fFkWlc!G^}tz-Bws~`nK`=o_sT%<qB(Ko~@f()QeBC9<`QX^f0qoz7s
zQOxouFig-&JWRqsPPB-~sjX|oj}1Yvf<V}(Q9zBTdRE7bFqeOdB6#FM0r}7d<@u4o
zD2$5>00eTzEg@1P{CLn+9_(%qCS(gggq2{q8h&aY*(LsTJ&$7JOSGi1;A`@e>=kDi
z17QwzApM~-n3@vVk{lVA)Mguggu#&?9WZHYzztDeV2lDLyix0J?l*4S@XdDP-`u%F
zG1Z!$V>>Wr;IKAo1L_n~Sv7ISOY(}HljiwADLRQYC|%%$Vj<hW3D_{sq2+;4oIQ8e
zE}XwWF{V-_kNrK_y06t9)HXbihfyDmgF!#VNpXYvL>o;5Ue4=z-Z0uX*=o8kEsdBv
zoL$CzaERxJomOY;^@|#5hjK)25g*6{ZNysDmN93w3wWe8RA;p&Q(Wr<9pi%u2gXbA
zTj^DEA?yhi<do(r382sXS%=`D<}}yA;CI5h<wvuI`Zn{PcB*UT`%T^u=a_UGm?`iQ
z?NkV36D9$xh^)c|A1DU&*@g^!hLFq8LWD#DG$STQ8V?Gn;&NSEp;-$mpIh)Fu^HPh
zMKP{*n_>_ohP+!t=@*I}zg?4mo9$;5Ao_l2JxU&Qj$*HSR5a)dY<uGl-!~p>0ovvO
zDDI)?m50i)ufYO!L)#f8&YHX(agbGR@1tJEI5Dj~dK)jQcgG?aeE?R1lljS$uiB-H
z7bzZ;E9#>4pNiG>@Z$Bb#jZL)ZP6hFYD#UU^Zi&+zIg+O7S|rXU-dYnb#=l3%x>Pi
z;hXK&zdHP?^Gp0&`LY@!UY}BYBc7aR`p>npul4+rPpeOklYJC!odY_&DL?et+WQIT
zIZwsHXy4e!C2!25%)@LeMia~5jF0*OYyflOx?=D5y1$+q2$yhOA7lkkOA+)Qv$`O*
zrcaqQEf=}p^<De14iw*2T~HlSIum{ao(rGuMW5os{l1>X`uu<0?kQ$E^nnfmJaaUv
zfh-RhG(1H}O>_Z%ELRZfK|9a^@oT_a-2M3=mV}m$2=OGAwx*Vb6yr5!oFB#s9VU4k
z4n25Oz=X8XCe9TzHgI`u0$t(DIP5^H7!a6YU#@|e5Em^xmRI>~I8!qP-NZTzJuzR5
z)vTpFtmHQFDcIY}Uh0c*;sXQt7~|RBID5@>-LakU-RpAYgX)L=)gQ<ixJhghX|G(3
z`HoooAq-Mv!^VDjN!lWf@UV32dJ+tfvy8>2m{dDuKo9NZqv^!_+}U$};lhQ*09zjn
zgr6CsmTT8DV_e#hFE?$d47Pi|5M!BFQ>~wsl6LzS^}5@ueI&&IF?8K2Ud55%h}>uV
z;IHM)yjP8^IanQVj{2{a;0He8B;mTZa}o7mfE>jpxy#+Yu3^>jU>(nRQLHUT#+3Cf
za}FS^{zPYpu3u;S2ALzz%n<-#GT%9=)^ms2;l1wewn@NuO^d#j(Pj@M8rUhonnDXA
z2Ad=rURwa8UBjm&iqS6FDiUq5QF#L4B90(|Vg*T3p;YYc8)LdR3eI9r!=mR@@t`oU
zRl&O9^67nK+3-v11>?+*vBh}laFY4WJ|Jp|7Y=-pdkTHPc#${ivJLV{n`11fYdD7t
z@r#DLRww-HHu<Y2MER!y#f1C)qOMc&@eFic>svl+T#m?xlgfDL|Miz&?c~Xme(B;x
zQXb{73x`3eIQutejFmv5yhz8$M+KethI|oJ{4o)`v;+u!z-@&o4;Fcj7`yowUw&bm
z&DIaUI)oSp&6tP{2bN&da58h@6G=1vxUX(74-#s}Kzdu;(>{Z1SC~z;Hx0@NM!&(h
z_(ulH2BZORFn7|pmxaiXL*m+@*k~8mNZBFrQSK{@umNJtG@cP7t#g=TX-Ccwec$k0
zx%DKT^6hi0xDsE*Aw)R&TwTaN(7=AIIBK)YeUCpli;2d2U7-$wlT=$`u$joi4Fn{R
zrfX2R>;g!55}4AI#fR4cDD*H0#GDdGffBgc5N2_}#h(RqBXeO-gr!4_li>X>`_n~_
zSDH=wi{UU2_5z9oD)u|J5i1N})q!B&a7q)5;}DGNbAzRrf95<D723ekLi|R4OFQ{3
zIPX+abf{5(tX=CqhR=y_{t%~%M{feaq3o%qQ3=vMXn>iE;K}h3c3@Jp7`8({U?cu|
zuDf@?bK<;lH0l`efxLnb<kmvMwT5z?-_IO9k=vD~*zVMG#~}(lH$5Xa?soqC1v`KK
z0_UT>C-6!l(s0Xl^@US)u0xElg7t+u#8jX#t^?khd&VO+1#7ZpfEgCMmjF9&L(Oo%
z8ZaR2!ETvqn!-N9bE4Y|Kh*1>N0VRH$`Bv+I<GynPPMt_XRO!8C)=FtO+ByiFvJK3
zX+}ILZjF_(MRCD>!8-aCJcE$aCKX3PP8qTWd4Kt#d`dWZf46?41yaeN;!yG-8d!pY
z>cBx@r1aHA&qZXz-XIXfFG(VBJjs##4nZ3-xo|jO5!uDC8u#HobVI>Ga8+AoUcySJ
z`WyN?K$uSozjOlJ1_y<yVv86mPROIigMl#L#xZfwnK|Ht`vG6$M4FGz(WDp21qx00
zX|e2-B1JDXLtIKc1{$3Pc8do%6FuYMj~c!e+G!8*B74l|P|L$wZhZLc=U;yIS5Kbw
zcQ0QS{6$+(P?=+~Gsb8bkxD`GLyi-TlHN{tLu}F?K&|b-$3vBQp#jV53737n^Y-Cw
z+io^~`}SeeY9=yhY&wjzLul7tu&VKlSj3ij1|$Jc3odqh4d^xZV^8Yv#7XO6AM!;L
zWx!&Lg=ZCLfOVSwn+@S>@=y8BoDEnETofl1JL*Gtf!;w}6Z<O-O`1eg!+Py=FgV8f
zc~p|7aY`NZ`O+}q;0)K!`SAg5I`j)U;6gPBOL>2*!-7M&CVd_4!M_>93s3-KZ2BA^
zpQaZCLr@|_y+=b~(I9tWlg2nkn?Nlg<NbUnV$(c1Uc);GKo`j*IvEt;a3p-@Lj+w3
z65a#mO~4eh@-O^0Y}s!ifbpY$<7dL`q@6K`Fa}-A%Vz0fZmQ{UEV#O-npo+(--qGS
z4n`Fl@ipel`rPTp$~NvbSQdN4jsVT|PS2?*TYO$)JLNVW5*lxS#h?H5XMgIcr~SLT
z-#Ov}<_BEWUY1ko0QNu$zp~Xv<Oy;{jj&Be+b(u#_c&lnhsj6dUGiLOto&-Vz`hF?
zF4*gDybkweZD^zOjj>Zqd9Rd{h$#otl?0Zp&fyMQ;thyN4#>8V3fKNK(4odV2AHkX
zSMLXdF2m<^c+Ndym+KBRNBG+Ko*AZ3jJ3qPtP%LEhoIt$<C^+mVkbDDE$mTQzXe1)
z$Rb{~-q>DQq@479NeB0<v?tuaI_e~K>#kazdf%E)(p@c78#_a}3hha(;e-B#$wZw7
zx)^w4V&H^?!WY?XsZYWf_R~SB9tgpVa;<^&Pq-3X>tsgMbl{a{$_%rBAl{0r_~s^K
z#&5;8inXL)ykcP`EV<7hfB~C*jV^Ylx55Cqp}~iKahT<6Sg~9e`6RC>bkZVYn(q-G
z_)M6<a~{f^7h}z}6L^4m!BpcO^-?Jo{nh9o#o3k(&jQ!lNOd^GMtKz`2v){jU>n7o
zn1F^JJ$mRTUOr)$-@QC>@+9p^2oT$(Px4PpXH6tFI_jEEfGffZ?>`|QeZGo$<Sq_v
z?uWN;+h)79n>TN&jSQK_+mrl2?+UE+@S+0=<v=`iJ^*jP4K&hc%F#p7Ecu9sr0Mjf
zn9LeVo6LNIracH^UCacBp4f;t#uYSR-Jax?UtSSM!^p@T#_R39VCsPZ)kCdpI6e7d
zo>xBA{^A0-!ImZ14!kg~s&QDWbKM;5WN#$C0BCDI$NW~D;75)-{gw^%54Ox;d&g^|
z#!ECXv`k**5{2y*0UbCL0NkYlk@(mzhy*@U!$xrzE(jwvn~Euna&ED>Y(p&gB3S5<
zp!*~$$Rq6Zq0_Il!+c~MB*vl9)DK~(c`zi^c<KY-O?$hLA*Q}Bn*0!Z?Oo)wF1-Ik
zlVW~=;?!&^!ptB3&)@yd4-ZQpswa1Q{J;NgcYb&z@lev-z-OKy-|hp=p^YK$<OLfR
z(y5v%yR22xo%NVoiS8C(yLQc<dip8<@!ma4JH;3Nwi4gO6JwUVrBBwxpoi4hJ|FIG
z_rJO0-+X(2usLe3={M8JRQKsm4>^qO`STb2+}U&BH%UnB_UavKC|4zCrESS^@mV!n
zwl()^cfc3e#rMd|4}U-OzkmO5Z(jHQe&}ES>ruv~eYfQq^%3>VybvDKKH@6YM;!$f
zZN3GuJfjpZtV0A8rfJQO3b<j|4%eu|#tlTez?rh?VS``D*(zS`-90XOmVF6(yo(Lc
zysER~EBCuT0UO%i^u&F`opd7c1sBbC<<xt3;Dy*^3d=8Vahv~U3<eeeG<2c{F+qz4
z9|h48nndLwSoQ^_!sMv%R-YLF6_$KXzW|`-YjxiQc&i;~Zx@FOT0aXxDI{(3Kz<-&
zxnbbOaz`awdCr34cnQNS)a+3`uT_&6#F#dCxC^KJit)yKjd3{CC_Z${#30)qxe}0%
z-oF3JF?-|Y_jw?pg54$i{woLm`i<`^ryYOL5qH}k`Jb;|wl~iF&W{~Cuvbo>@%OLa
zh8!clhyJIl@A__?zjFFD|KR#z+R{N`?(UEOZ6Ck;roHmwbG|)z)=$6orhj((-x;U5
zxjp>eKfe5?{qDtQZFBIfpL*>ryMFuM%bGa49@(F-UiR0|{LT&zj`{CSpYivvA2R2n
z{l||V*@+V;{OXk}R6oRX<^a4JJrvz9w7f&0?y=6BX0q0Hes}wBoqpC{x^TGEG{qdd
zOBKT&<UJAq{zyml{_v}>e7oJ)jT<*|ThtRAGf1aqkNhuJ-#yaR!GXVW>NS7=GtR~Q
zNK>!B_B-2Y&p!C<Hq>CoTX8@B-adZ!P5<3X&)W9bbAI~FoA%l5?~QPN{BQf{@>~A9
z7oW4u!E=7<%$s)o@L$?T*mfXj?vL(&Vb5*0cIMi*#2v=|@TdRsXEz%=^U1f=4-yjt
z)Aq>!a`m#k{@N>kaB$3CId#TA_>A-lxCI}q9pXD08rCzFH4JX$AL?^4xPc!?oV0;O
zUiF5oSuJR_g50K_fCq@gdakVBG4?(u6HC}=VoPUp^)mR_Fl8|DeA8=CYmA@ckDy?B
z4-eghDWYGvVID)?-6vq;g+Hv*e&J4kGX}~4I7CM)=MA8qd<8)wVlXo42|O&0nItU0
z66qWZ<(1&Xp$Z$b5FgFD#YlO{hl-}fpahGJ^0~lM^0fTKu`mBbi2Q2<3LGk>@Uc1|
z5`W1_eNM^8vlXXv?ug^;n{fsk8vkTRX)|SNaXq&0zx~>;T{&;t?bcqu`7ept-29>c
z>)WsW+SLob-E8fR8~++@BCa>zK4qKDF}w1|PyMT}zw*Dl|F&&6TYLNSe|Z(S`OSAu
z`*wTaSFe3$x4%BLKfnLBZMPeH`>+2h{;+<`{Np!X@?+1wW`FtomVJHu3;X!p*KD&r
z@Xzl(&RG8Q^_T46+1LCpf4gO0-~Q4*y8N1NHwX6ly@yLoZoYHcH`@cda_zbu{{7JZ
z{Qf((-EQsezkT0oCADJaAAkI@9Y22D?%n&5`DgyfXCIccCXTZIX~%8Jh+@F?XvfHS
z#((S7v-aZo!(4<?(w<WikIUWt0oh*F65@<QEpmD5&A0sAxwB5swO3};w$oMV<*UCR
z`ky~|$2QxIz5V(3sgE0PpYrYYz^-2V)DOQtv_F4PnyS2vbnx-(FWRx^&e)$mzu{ls
z{?b0a{F-ex$Ly~^JW6~%e*Gm6P5u4wzx<=iXMD3gW}n}Cl$>XN5c5$^5B=TWJ?ERv
z#?D;(-}Wa|NADi`<yW5b?RIOgUHg{mig?|vzxDPh+iZ{7)jwYM!@y#*^>_aIee%L*
zr@|FEoBIjiG-*q6&AMo7jBu$ED!yHO=p3HD*wiI!#UDKh%y)R=L8Uyze%42?GxQ@h
zgZ3+3#c;@luFeO<J7F>RkYQap0Q7@D#0QSqRF}1{X~*#1jF|u@rdWq&`X_n<9&Cz8
z^K*XduU$<v`YeIrj#bZw;n7dV6li@z03s_!2cDupx{vZT0f!__afjQo3msuC!X8Io
z528fDV*%Bl66A)Zh?ytPK{LeD-nC{0&-I&bqVa#gx%})lY7XLSvbSz-b)cvX2GXd2
zbv<EYjD1}9zIe+H4vzV;V+X$3Y<zdngILV(efgFhJ9c0P$Bx-{yR|oNem@>y3b!Ba
z*mh&*KmE31F!vj8zT^kbT>$?-+QD{f7p{L>4$b}Mn=jhIbLWA!;_K0aFKx5g`Ul_s
z<QTx|gN>cK`VTu=^M!3U8~@;c?gJ+7r;lyz)YbTx9P1Z|AN<&6>ldznOLcJL&6oVx
zvk<d1Ja_l|_kZ%|UwFZ<T)ncc8IQhGTIl`9^DK4hVC(OF|C4`m`AvKA*k-rpv0Z=v
z9Xs>NOLpwwC4cSpH|=kC9*~b?+pWFx?+2vQ_g_4)Q&*1u%C@U79r$LuvF&za+wHTN
z>)$`Ua`Y!)2M7MjYv=thU;dlWKXtJ2_x^p~u3di1UOd=fgHJ)ip%Jve{V|^3`R0yq
zw;R8C>n79>YZC=<bn^#4w%OYG>;DTiVt(tb7wzD=^Sdza`LXTRFMRqx8I`-+t+!sZ
zW6xeND3<i|@TV_)yV=?Y--2G;{q(`sPG9*)uGwt1{{FZ33GdU#wtjkt?Xq{d+wJ$?
zu;)&{XJ?LW{7f9;g!`}Ff5V?W^&j@y!N$-0@qb1;_2!-*Y&V`Yw!3Z~>9zHcyt045
zGw3Bpt%LTV3^Ib+1izwB#TuP|(rfvd=NTj7q=N-vwcD>6q{COmo{U481@@Rc#3tI_
z6F<gCxU@4vk6+%m*#hChS~-C6p88xH8|@vC%7YIcog>~*IW)}xR)EL&2T)#TGMK;_
z(}qAoWEp7=HjSV_AvC;!fhWfOa5e+Y;^S+&*X_*TmS=+3F^I2yM5eDXKE${SWXPq2
zFG5&gQu<qPrZ}Z<!DL@UVf&u1c&A~^UlOKVhnyteF$W)F8o68yK~J54o-59PMh=cC
z`}&W&+e_Q6y|MepvgI$%X-7U@+HUOiTmSB{!NKz3PygkoPMxy9J*Yonb94WnYiE3W
z?3Kjg@q;hz)Tz_<xBHKv(YSy6$Jci2Jeyr&^!RK0_@j^fUyoSFXO3;{wU55ZH6MNS
zv48)V@ji2~u`?gl-%*R#qx)alsne&9VuAbr`^g#G9=t+?AZBrW_~GyUnd8sck3aqh
zGOj_AgRBT&Yut_wdZ#a)_BY;n-*0|-XzuRU-+aY3+n4;~>$mK`55KezE}gdR_LyD&
zSN(4$54Kx>`}?1g3p4lkUp(+ry93LkN004qr=GJHU%%mx9v|iU-~V~uwwvet>R<k5
zUw{3jeRTN^-)^@4@tyn0)v1H6pT2m?Uw`L)yZOaej`AvyL+aeO@JnVOcj@9KKYRA9
zbKSH$DWu%(@q;hy^r=(!`Td84;s1Ve#x@7PGk5pL55BO|r%(Cc?mwoQ4DC^!L`^^Z
z+COH!n49}+sTXs9^!KARkF0hc>CVr5e22KE_|5(Pw}1A7V=vj^{m1tDvHwTe+XdHk
zU1x&lq~r@ZNds0*6(Cj3keMEfaN7xBlT$!V+9qo}wpcS|6P;<9v?n&$>9NT?IAmvL
znv9c)LdqG@?H`h{5>cJlB9*a4#f}Nab_h6a1CT5MBrOpDDT%Tqlj?pT`9$yuU`465
z=HZ^b*7vQw52&GZaqm56@AdPoZ~feJaW5(zKJtpMZ`R#><uUE)4Cu`AijH(D9Xjj-
zT<im)qASajI=Ep_o?gCfxhNuf`N*(VJ?jF7ko%lZ>JdR|2K+JCv;GHnpo1@1_^^XR
zO4Q-&;85%xVQ+eI;kiW|ih5i}u?MMh1_;f$DQL9t+7^9kmYPf456#^2#UaEV>v+JJ
zaLh4ATVo9}IfeLBu9R>~y&=OR<5OCb$2DS%@+&O3YYsP=fShOyR(6PF7*+y@OFBg(
zpag8m$&5r01b^HW%t?ecN20_a3Ed?bEeTlm4M|D*fv`pq#+?STGVugsi>X5J5m{WX
zV-Sc`j)li6__+r0;T4FTZ%oZ?BD}=oK@AWwA(aS2N~qEc0N|&Sg@nXnOtDav{;HDE
z(^m`p^ydRr1#j;P*&T5wXjb2pvHl(z7(Gt<d14UN)i-5Ze@FU9POwj!`6SC1&gikn
z4(qP1>$P`yn=Gy({M{|f7tZLhV~2Iu)^*xDyiFHY2<EJ?69;a;DPsdYIxu?N;}v3<
z;<CKFtoPh=kM7^MpZObN;RYf{I5w&(gPmIX*6(p_m(OTbSGs-by5Qa&eH|GXIcX&6
zscYSSb(tDQ_ln*HQ*dgqPy4r|-<Q0meO0Ynj>8osQQg0xPkPrMwqqMQwf3&tOSu7D
zGxW?y%su3}ie6Y)(5kBB<jIr9wX9j0d?i^~gIu|yWBolcFmk-q+`3U%xuRqJ9T^xs
zQAjQ#sw^)|$+2TcboT@6wRdPt7FIHuvV37uk3D`=c5huLv<4cl`+QwD_jPpp$!^Y!
zbSfD-lCVzeuj`iHPV;LGs-vAshv16d9eSHTzx}3c8|Y~N$nn52!i{8wTG3Kh;((FI
zs;$0CItOyo4}YRi+qmwK@03}A2Vj@`kk*O1syv>hL5a^}u7-Y{`<%-MocvgBN82sN
zq*UM0&TQ~%;@>ihz-WQ~c~Scr001BWNkl<Z;C@M~GAvk5;7N*<#iuz3vw_(UKA{9v
zm8#IV(sLv%8%$tDW8DBW%4;(YmSsl^#?!zMue@kMPB9qK!F)ePJj#T_0q_=I5+3Gn
zv_Ft0BZ$}!g@#9KgG+>A+|z<JV?l(bvCuJuSeS^6-0U-Ah|eWE<~HYvR*p?+Sau&t
zz4*EUCdK_|y8D@iVK0nbyZfu=Y8^mJ@lciiy4I12t5kFezjWMH%k_l`ePCUWbb3c*
z?j|uxlIbF<*B2+`f%QGo=^N3rw@TcC=c0P~@D3dr9@gHv){*V|^v&BecZjOW<-<F4
zba+_$s#->O?3b&n5#M65mg^TL^nrC9>GX}t{IVCY+!pudPab+m-}SC{>CNSvyvE7W
z!sQ@SMK^S69X|A`)sE|P4`^N0vJ7iQMHluDYSkIBy`8F-9aqv7z3!@g{XM#2@1n(U
zVz5v8x6G)B=*pEnTGy4#UcV(PE33M)x}vvl-<AtUhP3XiH~W%3!S>82uYvf&g!#8^
zY)syL|NZjTKmH@4L)`Y*#C&m`Hx^FI1M555=^K^#Tb#FP|FsLJbnE&a>GY1u{7s^?
z+CT=4=anvBw705tbjLoqvXb<9!@7KUyN(PGNpD^0==S|`b;Y9`bM}dC>vUkV56mN-
z?(gXNdeP%!>t$fe5yNM+Q_Jw-SC~0Pj2)lE*Pe#2N^4RG(7uSdP%Qp`4mW(9dIaUo
znldm?vWpjSI0$h|&%IY;VhPApUz5Ub)I@s__TX!&1{dmjaqs~<$?ptzC62f$ss0u0
zBO5?Btq<qoelZ2PkIfq50{p<CuINvRe?XEpJyqUlOq3T2i#Q6zr3Gj5fCq!y0}Vka
z+Vi$=p%K0<8<P&81~+O5uGuT<pn}fy7|FGUUQT3}??>GZBLtDUEZ_Vv(wYQZk=ax#
zk~~C4eIY4DG=`iC0uWJLQ5Hi^Hd+HQQaluR$8y)?f@sE-$b)zs6Lg@i?QPkpGwmO!
zD;=FEe0mkIHkVhg>i!)gT2&o=VEhridYic7e%`(+`?ilrRrTltI}hpARW2Z=3ieSx
zu3pgxdOI?(<s`+zw~FfRH|2r8jt*=&Nwy*$qN1{TMfdG!Y#BcUjUM;|0ZX=siY_nT
zlDqGIr#|%1LuETL9(l8%=YyR}H&0$OpRb-8)w=4pW|8DvIW?kH-EW(Fs#>-;gI>aK
z-+;Y!t0JPOH}uKC=4n+`xwZI!RCTR&T}f3{T2-}le}}J@x~j~F!A_-{r*4o>&LNBw
zG}Hn|78Vwzs%w4X_;JD#B*q-bYsKw1W&e&*t*ef19siQNd7JR-E?v2z`*(~;U3YZr
z_#^7?ZpU1gf?gF_y{ZrNb+muWQ@~eBUD4ZD8%{mNyl6yTJF{D>&X8VSbsR=Il@1?y
z)nak|%x<lFhU68vayZhdb?E42v`6D()3y4h?B6~jb={Gz<A?OBeJe{CAe<1)=D_U?
z2f@69kU)L4C6w2R7+9b91(VlU%&Cws79JJnSPVC2J=j3@;99gP6KJ;LF)5z%{hR{D
z{AS(3@4|o=a0urujM%H;#fxV0iu}PI7VQP+Lk{}sVn2$$NBz-f=S7g!Jzkli<Sc3r
z21TQ&5rbb4k^lhsUI0??d`VXXEGKr7Z8=Ga7KmTkn*&ci1fsVL25wp$in0Yk2NnQ~
zPr%;KwGjg2kz(A~<KiO0H2uTpE|2^u;oh8YaL-=#ATeE89`9nJnqcOuTBz0Vb^n?t
z$$zR#kSHy9vaQbT;CnijhPW65B;7z&>&S$El}TKe{J4F6N(TEX=^frKvv1x4!x@{^
z8&k5Ouhzby?K<=3a)zbg4pmvc@RS}scG8E7M(+Ih2JQ515mC`wi%-kp$4)v@&Cj`=
z8?*;M3=-nBa&1xv`)cVO-XSwrm&Ir!%(<BRm=k;V?$LMMbC2F!UIxyBKNJh|7Gl=D
z8|<lM^XzpyetmAM)>W;`f$t0ZhNbR|8uC4LCELMvRh1omJ+fiXg2|rP(5C}iW<^AF
z`PCg#SC!uM5OY2>KL>j%-8^&Mz>E#Lz&%*zTp1f1)BE3jzr6L<Kl1vu@)6|UM!sB4
z-vtPEi|Fkeld_?&lHQ>dN5mG}L-+aef^!N7k+b82l0JxYYw@HUK6VlrEUGH=<Ad7i
z+stun9?y-h*Q&0xs%x#PG(6W*H_vBQRp!UnX;oKJ)s<FNrFC6tU3J%0Rjo7WcTuf=
z7`k%%#-t4PRnj-SU8b+xY*Z7D_OIBlfJepH6`OBMa}Rq<@_i^thf`Q$S!m}$I-T=v
z4WDAYD`OGw$zLo)rQTsNB41rr>s2yW4;L3od?kl?orKfTCUBGH3R>rwmIhMwf0+(A
z2^WqO8(UkPa;y;xg+VWOjACXDwrw~lBu0@qD1%AXI94iDVOZf<7wrxN%^v6W!M;fT
z^sMN&7W6@Em|aLX*iTwaCTk@u%Y!w_jzsqXDV>)fKKSFrD-kIpo+UBuD=lZ-5z~}u
zc8qnnfOH%&GeY~hGMDb`OYmPy#U<ki=o+Xi8JV~$xQ98cI#AUza{6jMq=X_h*4rcN
z#t!Q$`QoupYsdOJvVPl9xeapARu6Oc+|3I+w5}^TyUIR4Hq@(~{_gLPEidfQs;YGk
zuB51{92@G>&cNPK^*ml<y*;{a?1-+$I3o!Pm<yb`apQ*EefQn+r7s<FpMhf;7KESM
zGuTt>mTAADx4L{rtE!Uilh+h<>W=;%85num0^O-=**bH>4O(54o~o9?Jr~UOi4DDW
zMNd{PXjRuT-VBwA!>6`y(UEPZjV^;dwQiZYPJ<Ax*8<lpZq426ufMKURm<_?Cx|mm
z1}F+3oS>3z>+9&cZAWF*HTWRWY#;0G==yDk^>(u-<gm$3zAP_n*Q%;@el@w$-E(ZX
zPdoj4nl(GLsw<seWgj0K?$yq~UapPJ{*|j2^z7NQa`x=J%+H^d`T05B&{OG#-6wT^
zZeCYKboJ_j&YwLib93`LH#ete&z_aRP9+<5JuP!{bGnjaYPYez9$i0nL~p|}9s(L%
zu}27EEr<}s%p0!DLd+<KAP%U%*jtl1p{}Huhnl6f&+-IuZq;KxF|Tl4jw^E+)@1#G
z^SE>z_z-l4^(X=NHUm=@5yK1nO`dz%i+T4ToNwC~hfes}@W^XcuFIr=vzZ>28Zh^}
zs$fj<=0yof81`kuOx|!Kc?fI>r2TM59XQhivP%i!#^hI@LgL1Nm3&0P<9Z4#dUpp*
zO~2}zI2CP2`<W!58`~%JKpKSD=hj%X;TY{{)^O3z;(^qRoN%ilwQ>v;0~C29B^_v2
z0^XbkqOpI`-sCbAd*En)Rm+HfM_x3eSySN}#8fXI+9Nx6?vmR#4oOwly8FaQnK*Sy
zySE8FeR@JpcRxWYqN=xV9Fn@OW!H(5a%$p~o;o$5rzTG6#KeS7OwAhFm%p@E#&_;&
zjK8TPy*<)9v_no#&gk6Sv_8IPOzNtZeKY9_*ex0D?a|($9s2attel;nkz;$uq^c_2
zH*>?hzx>Ev9UtE%qN*#`9?`n4b@vlb>BPi@o;r0(CniqI>C>lWVrrIsrBLTNv1jjI
zx$nOFbY+G90s`@(<z{jRJC$sixdt3iJ@!Dq);;U=$jJ$rpP$r6n(rVy-u$HnRh1q6
zJ=*Etrc(>A$}4k|x_ziu>bjN<dl#)HPYw1;-}?RX>ecQS_nzFbUaP8K4jntG^K+AW
zXwR5dRW1AHZ>4&!gPmG7H})h!@kK*O0pf^===k`!+<*VO<*m2=$$Tncg8Ar2MD_Od
zLsD0j?mB)_PfwhdiBl6gar(5JI(14X&P=PS%F4AvTGzGiI{vhrZsK=(;<QYho{)*j
z8MF1(FYS@>@!igsz8>iv-mXti&B*-OSvj_MOzW!BeHMdd8SU$6-|%)hIXSI!b2Iu_
z7bo36?E~=TLwj`R_^t*A^sD=Lr1_u)*MA0Yw8y?MnQGDHNA~FW&fO|1x_aY~)O96Y
zKPTk$=?O`kO;|+T$tFqqpnhcaQ}X!wc^J*nhumM_K&*GbcjCVoC+xr2Uou^8Gja~=
zmiYsGl5BmfdyTbL%O#?Tt5Wz>3%0fONWW{T3lYs2i_pJJ7i3R96uOM!3s6DBf_xE@
zV?7aU^1z~xZoAnfv7b9F6+DPn^a7B;3Rji`*>XeREit05Fchs-#EU~ucD~I<AZ#Q-
zb2Psy#aIx)3FkI)0dW)Z{7SHl3!OJUAW_H<B2e^QgwH2WomT}ch$IDa7O<elXoI-9
z5|4wN3<DbZ3VPX34ojeH#MKAAg8%G<9}9yk>W_K`(s$&c&7pV?)U`Ih$Cuf6W@JFC
zx<{`~Zf@SLvfua8^m|`bXV~Q5nA|LNT{XWSR!dz~TGzGKRjpNL$U;3eIv{o3W7e!(
zo7detw#tTeecIFM)xn|7`uOB!z+Pqb#=Pv_zEuX-^=eP2R|bc-$m5grdrvYs(l1rr
zBdRLbC%0(#Ew#F9dtGT=RbBgghH}0Tj-FN`qBpMJkayg5mmE3V{1Se{rHuJ4`DTOF
z^fe#mRaA9Vp4hWpH>@AfPN!FfN4Dxy7x1f8L|3k!(yc@5wbS6be)BFlIot=|^(K1t
z)E*ri=xC>Rz4>wSOFLy~L%;O&bY$J&7CAa`nd}<u)UqYLb(=M<jCa{k{QB!}$X$26
zLysRn?k|EMxA0hj+oGy+?aUVK@}$<PuDjm_Sk+qBl~$c0Q5Eg3>HfZ9?YA!XdYpTc
zqXSac9kcQFjd|I%W2+3V>yu8WPd5y0(PLAu3c9;`eO`BOe?SJ;_e!VJCxgSA<?$*1
z3l^#>QzQLSRXv7FO!U#7N`{VH2LGWAH;cL-*tiV)n*18=*Q)M_is+5WEmC!VuTtu&
zN|<zg1wZpzLNeVBFQE_<djjzkvdPRAkjotBO2Ql6MuB5iRZv#s95@y^gR%(SoKtzv
z$~Z{)1wYFDb`1^_R0(y))?8ve8HQ`=@p&Nh?X<;viev1Wv*TjNShrhNiidj<QlW%d
zZex001wxgB2b&}50d2(D$&2!g1f&#=mo`9QW&kp$wH|1zd`5@xswuLBiOd0Lbd*R=
zMVMG8*;-Pa&}bW2<9>?0gB%OI09pyV4Bxic*}-_Og#$qH%>QH$pik=yde_oN4Y7!=
z$0!oLG+1Z;1WZ!n$ZbnJQ^Pm$j`&rGYx$LP`yRu~o|&@TCt;)`mgHcF6OgDlXgCJo
zH^{I88|9)O5uZY=X${EQIlfcxyYD_(Sxw*h;<4d-_XEw%uK*zCn*O0J$R1S@UA|6#
zQKQTss6%C6OI#}Of`&KDvF`o&&Yg1az4vLlniufWEH+`k#U$854011AzMzQ2Ie5N?
zkF2{8Kd^@$TL`%R7W)!Jo$6As!*aW=_6A>^leAt@CShO9{p1gp%5okg!)d^PT53MN
zJ^KOk<OgABx@Z7`z(zS>FU%in#JSj?qYW`m^gR7549PL}Zgb27vQ<zg@Yxqp%rYJ&
z8w$r+uL8EE^*|eQ3u2V{*%J4_k6cdoY5KZ&1C)N+vo@lu8H>OW_<|0jED#lvAA|;d
zA!sFnU|~pcL?Cnd*%hupKCnFmQ!qec<SqrNloV_e?2#1wTrU_H<Tpv%z$qwE3k4F^
z-ifr~eEV^aYB?ba{uFI1?2SWA5#xYmkweX6!ZYJ$A<?q<<gv43fg@xK<VZG{WqioI
zMzSI|!54J`6k;Z@7X8BFA7T-(aXZmMFQ`(q+&svN75F1a5tY|pe@*YY>n=Hb<S-h;
z@qqQE8<auj7Wkj2=JE++h->hb_y_9~K9Zh9zrkq9^eF95SiJU{-gVbI^zf0x>ULy0
z1BXDaXl66|s4fICqUpqSi3yC@20mr6Xo=IEY-3+Awm_ItERwxuSIR$>k97%5@>|(%
zlF_mb1|ChipokZ3HQYfS4o(uzxm?IW;~gvuy{VKNS)B{~%<7g9=uu&iO}-i?Fb)-Q
zZkN%@Cp&LO#&fA>vN>fr4F>2tr3Z2l;|WO#4of(n8{iq+=<+4rM_8WFV+o>E=&f5H
zNQ4B$z}k5$%w=Fo4yEKI!#okpK`uH8XdrteQ7k&)x%f&)R^mw@NS=t9pOC|DCp`CN
z1pc<*Wy6|U*jz^>YPne!Ux8rLa90^y8XhQCfV=yj<G|~(0!TO+Um=dE<N)JPPYDC4
zI_{50PlMk%=3p=RmSG==4+X8oZ#$OZz&@~jF?R4gYX%l?GaI<ZxUmkBQ^bUBfC%P~
z<&YrGVoVg+rzs*C4+ZbpE|9fze5c-f@4fogKm8MDZbAaN<+-2<!`4^A0iy!W5wG(4
zz-RJBav51Yk>oDgnA^K^e5c%d@4dQu`!=u1n+23{=Z2Ubj)U0=vBLP!O>jw>M?s+R
zwKR~SZP90lYqV1=rm@~oKl1a2F|xys-<cZ{)|DEmO+1A)dA&~fB2Fo+sXqeO(Z`5i
z;CBMbUi6!z!8WX4$R(<&g#nC74=d1Kc%1YK%UBC{#5KPa_J$f#;*<Lcyg-={hKN^m
zkm7<Hi?QbCMZW?@rTUrVczhNAW!MoXBz?UK6z+B--{w%q$KXC1Dt7N-K%x{tB+p<N
z(+CU}DkMPwT_xM+JRs&$qe{tTc@YBS0Yk$0V|?|K*}xG*$1}oFK+)z9lNk6?%*+zP
z#heSe^J952!H9c75`kk7Z;oAa6!8px3TX)TfX--t-l#*N3^;PE5<V0fGt7J=$`v?g
zesQdMK#gI_{Y)4DcC0UpL@AbpKgA5~$}n^{1=ke&mvK-@E;^STYZkx$`fGaEJKmwk
zpEwTZsnPph)*+d^CZ2`i&-RzGf!as=TJVIm7;mZ*1znb>;D?Cl>#x18?|8>ua^&a{
ziaW}5-z*>`r{%`nM}Lg$qOLRg53wMqBj+1Y7-P2pQl?D@)^o?D>=WZ>*l?b3Qw6NK
z4{;4C?JwAx{(=8F2iUiQT;$~)Zl#(Q&xgU0e01I3)5^Ayi-lV3aAf^pZ60O<80#X&
z9$T#QsFN3|gxKP-;_OqZ5h<QA1_2ZHDV^gP%BwEsG0IN4kuWiOBhkRN;2-!^QFAeY
z?Z*1r1R$?1?nVFCTra4D0RRUCqzbG<l2TL2z!#LMCI84qLB%1lGCPYm6jE+7@VMYZ
z>ut@LQT%e--M<pigMAE{%LMKqMv>HrF%;9Z*>H)8$Y}*Wl>EV_bw})QZNjjCrAS%6
zB@r}Nz{d(miMQy#(?Z=QwkM01!Uh4%5qCOfQ8fI~50H)iWBefWZbL{qQ_Eb;co2OG
z&vScr?AW32e)qfOpWb?lI2-YD%MDdHq_6?+?#vIz8aQfBh5@22UU@77mWVWlP-WNd
z-FokR_sQzYD%tL43GO8hz8(JvBMJBrreHTTNNPr=8;FPYAa3+D=z(+G1S!@5w!o*P
z7p;hK5mUhUFqr`&LM6!LUP^grMv|Q_FV$eT3hg3pQ0&;JqD>k1$Rr8`tqIMIYXw@B
zAImsSwhHfwL%iEtu*+hTa7Kp`2iae&trk|xW5-9p7UZVC=th|ZOu&?e;koTDHmlp_
zeZZ$hhH(h<SAcIgNLB^}fM*-Tb|?z)z`2cJW@aSE(f1Y-oscOw6_Xd_yM87VqlR(|
zO(2j{a+zU`_c{+eze<ievfyR`Ef;9QFNbN(qMk5|x-&boy>3>*FAG)X15JflqhLGZ
z6^vZBMr|g?uFg0-zE83sv+OKU0gIMc6u480QA-S*L(yJ~hZsY7Z^D%ZDp5S=lEZ$A
zNgOXBn9dZiC&o=!i+XX4xnxBY&XL{VGuoHit-83dC{<O<@h6@j88k!}9%UFaHrjG;
zLpsaAP^BCX#X9E~C6En6277@g;rO*{*Yut5e5W2ca+G}#ZPlIG0r-2A3LI?V4Ze6w
z@Mm>kZLHgEL)=Yusj({BU@^h}V12+hv&H>@QNi6QtW8=ZI@02&gUx*6n5>O^(H_=k
zG~*19^*!wII1;wF1~9@LwYV5=;8%hkDsX(9^$x7oC?(htbwyu*8eFphPrpy42RuT2
zQ5$h_jl6~Up-mD0jMv=_5N36dAU?h^_btXLzlm0$frwVvWXD}I7CmKE0B!=mlzeHE
z<uAyiL=5{8HFn&?!`P$<W@LkaM53ar0gud|B4+ezz>*P)mHP^N=@`i*e>FdEL`#N~
zjX_7DQG_JpM2)`TF&aGbCdV8qaK$99Nmx!4egzz26JqKqj-~;Z;(Fjq*@jSfLM%YO
zao3ZYi!$1RexZN%vxKb~1U^Wz(76`ZBlp~fLQI{qIVYeAATps<p%Y+)$s%7oPHx}W
z*qGjb|GP<E0qb%Os{iMa4K^aq;BQa}(Tlh!A46>IhH((LA@Uy9?%lgb@4NRtSzTRq
zpGXdHH9NM}Eo~`r8*H@fDBu(JhkBwE3xNlUwVnMf`B$hT7T37m@(g*Ws3+tV+ELO6
z>r5lz4g8PiGPxygs<!zTVxrkTi%({IsG}`-1iXtw6K-qcQHnR=|91G8$FI$2tC<)>
zvl-&4xvU^l%v|%^jR0o|H^U>=tMoY4Y~XikzlR3bmF>o3^w?y9e85sLevO_gy}Iz0
zkU0{_7z2pTz&QbDRNRz;;jQuza3n4Q3ioNfRh1HW5L^NYolk*Jrcg5F;Kl+c`FeU@
z3N-r5I3cD6t&>!9+hU=jz<YR<_riYEfc6ODlr{34ppbka04BS%x6~NH2j#(};G?Sm
zJ%t7hc%r@-hfoOIJu)7t!H0uU#NQl?6lTY|z0m<a1s;(>5Pw*U7TAk1#@2aqr-qct
zkM;uw>5&<ST#5OlstXGjw5}>WH8EkfvZR;`Sqvy&X<$otV!<Xk8LxsomK`z5j%$n+
zbT!KrRh8>EuFKtb-z|sIUkE{BqYS`-ZOULbsIjpn-Dm^*6><j^mpDNQ7<gQG%zpTJ
z<U%R7#ABi@+L;`N;5p#T4=L$DjwENqwW7bV|7p+@u@y0=ksgE{6DS;)AX_pSz^Je;
z_=s47WUvnAW46hAa0`wc>kQ*?zWo;ZPialcZ8tGn7d#8K05NihT$ZSM{cwZ{OXpbR
zxgmvn%6olzDRyE3!8pKLj+In7Afe4`K0zaRSps4cqXgq3#ttG-4g86w!uG{x&54rB
z%?cud=f0S;3>MSfK?kgeNO71zVwOqnJ|ygdy|_R4<7-TP$uIUP^Q~AQBqNZ+BrKC-
zjP_D(vIjn}!66L?f%v>v8^LXjPQ$sDTP|1pX4^R)fUjeb;>S9{&LT%hj&MG$X}jqP
zQwL)fat7Cw<(K21;aO-Jq?`0ayA0Hf(<-I4IUlw@uvOpxf%m&DfdiTES;KKCppKz3
z342_ggU6T)KW=@ICt)Y}=52%R-Lq$}-1Dw`both;QZ5C*m?nrSH73Fg2MwbalFff&
zEb`_lrE~EGS=NaPvSQ7qxG<_wH{t32X^1oVB#8@T1D$KoVNwdoB+xj=3Xko;TG+)~
z-e;Sm0q<Z%<h3L3517vZOP3^JPdUbpyRnZ1W_|%~zL(cxePtZ-IU(m$&SV(kkWq|n
ziC?iWxpxxzk!-bo2ac9-7L(^PQ3l%Pu9}!od)?P`48L9_BXf2$P*vO4kec9-tHQO}
zeFQ<!JY4VbA_PK!j8SV9sI(;53dV3l&dK2GSg{8?;*>W9lgng;b10`oNNj+ZAUUzY
zgc$QOPE@HVE`^vH`P|Q}SVc?$!|t}0bFe1!ols9c2Hq8PCooD47qJ5yDE7Fngoih_
zd_NYWyr74|ob5;I1(_kX(RL&e+Gx3wb7t)(uc7fk?2`dhkODW6FUfwybar-Ds=CsN
z?o~ZHAFz;=bHx{>wx_@eN2E{>8Xr}nZi*i`hY+{$KgP3b`1Nbo^__R$Ee8%f1p76U
z>2ktQRa~2JO>qvo(@v^Q&dub#%fd75H*dn4{spd+3{?{jz6D*}{PJPV<P_|np&;Ov
zWW#W=7N^-i*c%`FE%+*Uh;uOION^77Rl>gAHp3nDg&NCyF%+fxk<{fpOZP&WBYwGU
z6k9<oS&4_wpmhChJW)K(x+s^yCwn18F(MERE0=-vE9J!6d{X3)=?^|;+;)Eq2GCOx
z%)%$x!(@CrVad1_gJK}~xC0dnuANWXk`4?m>vVg?gaa#FPBu`O>|~aM9E*F&Cy8g-
zPr?vbM+C%MDWUmQYB)#sdQ7-+737PV)qoT5SCECIXBQA+s8UGW40qa`suB7K+6sIL
zGP2_4c<_GUj6^Z$NRUS^6}SNFu(Ad_;&I>^+^^M0GyE9x@B+!?V3@J{`gy>mmAg5I
zOkTr}wHkyCORgVz<@N}l-?DkLzW@Cn;5d}|0MI8*ga_p_+RFBd?O!Vvh%s>6Wo6vW
zWPw4V>1y7s<y&NXK__9vHp6qwAmk$GbaOFi&e1}Wvpq3S;5p`jGd{$SwnH@29%_D`
zUr~lzYyz^l!U3<1K~{N?^4NKPleNyc0$xZ|w^HCNbHaUcirDeM0|F4afgEqiZML;N
z)}_HPDU2^Rf=wFmRE#P5YU|l&$sZSdq1qYG71w6{w|xd$3lqSlRPW6kw#SYo&6pz~
zw>$$dF3fL)+^*;$K7e@u1_>H&n#y+`9|oA>hz4Ri0FWd&peU0`uM}jmF9WIQ1H_XD
zH(QU(BuHXXf}a+!gb??DLeLBsG)-I&@QQ}6g52~tOESg=Tuz|pm|;?;z>wVN10chM
z=Jj?cBn;Y}4Sk4PIqtSTDY?_DB6lmdBZM;BA73z(V!$>6j0mejLu<vteYRSK1)X#w
z6wI^KPvfEV001BWNkl<ZypfZ39u31>Fb<|+joNvRi)v<T#2eTV6EVx>*_j!s>PpW{
zo&no&9AW=ZF%@iwrO1Oed#TQ41P06tTn3xKH|KTQdvp1w-u=$I^`VCz%J}DxVZK8S
z6yv0BQi)3?|BXw{#^O4Pu7?qF!CY*P3CM*&Fm552m_uQ`+r#~;P{X`VIuGuUx888g
zZp08A5GDT<bY(Fw^cDchaKl$51v^8J${s7OiNs;*wDO>UIoGJjajvrv?>ui}eliC%
z`YXhSs5eOyJX45is_$7Hhgh2QfGhfgGI=N85+2Ea`!Db*)v%~nNRNa)79oG$_!ny-
zy>*L$%$zI`ASxh~TO8+GE?<IdS|^I$gbfH7f?E!l3CzR@oXY*C={=IA9j|=&EHp*)
zk%%Cs(}q1d?nR;Wipoq5<fAx4V&Z!0!dUDA1Z%~ywUMAc-fs~zKa+YSa=<LZUqFgU
zEaO8mBn>}K<Tf8L9#jO{o00I37F=TNxH+tCe~5GGl_0GpZ%S)jH=BY-(>k^x@(Y3y
zm`d;$@x}(adCL~vvSo`}tav?0O)^`sc1Q~a)$@*hX`W$Ba^u~O5Cd#5Jk0oifAS{}
z={@(nOK;x13Hw+^+l!VWb{U5~)?lu2)v+jGBU;8&cu$$%ZZkJ2I1WK!`G}QT<IMHL
z+Cm-@XDzOxA$A$}3;v{kEj-0zh<~}BWHp&EX~BZz`kJ)9RF4P+umf|mXphxJ0wBW$
z>n6)`d9*)>1Y^iZv<WDJ-nZ}(b0)5XgV9EeFky)r-L}$=`Y2&7i3vex;$d2wan5BH
zaBlNmHGN^S8%xR45)2cL1qV790|7;m8bmP63TQYNn^kMkPG$j6F|bS`w3Y7J#>OW~
zC`77YmzC_$;K-g}BMnuA3+qo13%Za6KaW+xPA--}E(pFL84*X51+m3gK{dz7#>WtR
z*AEUG{>iey59M`^5!-?AhlGiRDqxv4ldP}-R$x`j%><PTbkdpIR&K75za-DF@_Q<?
z;45$w`2m|9=MZOuz12>TTjFQh3(*C8(btsPQ&W>t)s;-o%($B*-?;|{5GT0F31|=e
zgU2-7B`iQUIOH{e@&IcYa^CS@UcM#ode^&T|Gs?)zmRW%%Vdj^Bg_+y8OVYhp_&kL
z1NjK}na`vjy<>a8iTp)ok;`Rnh1_ROI$x8VfEjS4j6+L)kzH7}^H}9Q2yM@Ojch9U
zOqr6)r5kaq+#f=G7)sDzh<(vE&Jn;E?PwlLGJs{%Ko{^!HGu0F@!IV5nx>lBj~R+w
zj`{=l3K(jPaU2@Wi$D>mI>Hb~7a4y<rNjg3wavpSEzSUBAz82pNFY|`blNEb=9QaS
z3`QIdh%B+-8m-7`wxIw@1jd1e^+2GYC$qZ<_8LK<JxI*r8Xh1^=Ue^Ch}CjiqtH4A
z;#josfczm2VFCtQAdYwp<;8(I*%J#hD3x4ZTkO%U+%`X0z%l1VV@iZ?4eT@B96uA1
zbOjvwWveJOlY-vBUm@wtN7v{qgmbqR7iIDCE!#KTsb%xbb+;)3VD_WSIi@~v<h=O6
z``<5{H*Y4N$}e2l2MbK#QJHs%TS0%uchaqCPxL=FQIwbLK5*cGyz}mN>Wv%My>VK+
z#NbPQWW#46b~i69=!MJ6_I$WgX^KyV5ywGQRaRb^*9+HI+zwHV_z^b3@)UREoLAl_
z_9PAgs3~&O;$*m>(9k<TrnqJ1TVBsnj66<cceF3?o$xZw<8!tv=N!mwayp0Ec9$>~
zTa%p+&$F6rL2>DYeQ00uf%ld2+s|PRgrO?><dT@@@Ut|BFpn@Y<@_NVocD1ZQm_pZ
zpkiwcKu!f;<8khR89sTB6Vb{8<4|P=yC8Ci9SI4b*n2Tqaxf&A>!dIN!X#}66co|g
zZ1BqVCpQAlMIwMK@)6fD*&>F3xl<|W=9qX$N`!><OknZ>kjZ5vIXELkySWlaxoSlO
zhd>-MiUU10K`!vLH`*O|MRvDw1lwZ?!(?;L?Up@ojPP)O^M=Cs`haSRB3A_0XFgg4
z0=JQrd{6v~d%<z>r{EsuDa2u7uvhyxPn(*do?14~To*P!_@OEbC->>-@H*}3>DSS%
zJLK&3+g{w!R`j8HI59DybzRH++*}zOu)l;;#MV^U?tE=&XifzH^M`U$Q|2*-$t~2g
zeDkK>bI-eU@18y61IJ6*2H;Ye^QsdY`m}%ZjIAB+RI+8}dO3&e=9#c>eMd%4T`k5i
z#V0mtkDWc0!VTOEKtVRy3j#&i5o4^keB6(L9oSde?Gr@<@j2C}WHa^;z%lm;)`r+(
zfW-q-#60lF>t|s-z{_<hMOia>UU^%2NYpO)6ys+50^gGIU>mw#sEg<;(8#bzGJ{R{
zLX3Ul*kM0n>~U{ck90%Xh_eGx;3eWC=osnJXcO}XdPDa<{bdYw$DjcPr_AN>c#T^L
zPzK%9m)EqtI*txYw9};nY1lMsn9xKr068+grlom0J|6YrE4b8<h3zE5hD1+HNj~y0
z<@b@Cad66Qbtt0mF^16>wwD+SH7-4mx<LYBSl}P(F7ngKnaPugvr6Vy(wn_v3USNM
zmF#vy*ly5^E6o|fGf`*Y6rF1G2ahG}(r)nzA9DlvgtBmuPis$a=#_!Zv*zbePo-Pn
ziV^SWKEHZ$hgNkZyN^7fvy&6DYjeL=JsafeD%%W-Nw=u#`#<mj*|u$4G=8lc+vG>{
z##7>ZjH%kcRz7$FF#ptZ!Hyj`a6sPq&Ufnd>(@9=v3X`S1ftuV$5$4oHuUMhmTB8F
z)TwmK><#B)7H3h>RlRa~UXSkGEOk}O$f+x21Jp$0F6SM@+?u!%^6kf~gd4yX^BUrp
z7kv@dU+O2Nnr2=Wask<rjw`LT<JqwmZWi@NJ|&qcLo#167My#jR+RfG+mO}Lh&NRD
zoZp0A%n!$jdXp;pm;kjJpzSft24_jUEb<3TR-SplR;;&iZ{h&iyEdjuYXB)JoO8U|
zWx8(c2N<XB^Gbt(nGFC`UKCt-2%>~DIY~hVl{_M;;PWC8!OXI3;9_|=HAG=gsvm{s
z$xYbgQjnT;PzMOPjL7Z82>zn|78jDAz4|RAUx|!sClI)dnV+rk#Ef_*zf<xV9&sJU
zRl<GXP{6K$b?_611%wROGN!prG0w;{)?dCsp`;fvE=Ef_qHiu{4gPb(zZ2Jr`b0$M
zPwbV^;dRo}>CtsVo8|GztA@j#fsWL5Emd7>RriXj%5YDuo2TBC$H%wH;6ShT^!Cfv
z@kjJF$Q|vgba2-+V0ukA^i(o*<Z|$r!b`TEeEMmrs!A?gSTIgG?;*0(;M0KX=_0^}
zx6=Si*bzURM$DH`5b*r%)m6FYo_l2Po;^HRQal|JY*6#Z_vpybI_>G{$hu*VkBaEt
z{vNICO6#hYs_IMek<C+A<=FU`3=Z^4r*A+X7(XPpA;)e^Js>?j9qn{_w5n?vnRqkj
zOKkdg<`{EL=#b|}#$(ldj~3S%u5KahYs<-yOLP-u{v<ulHw$ZeK(OTUeXkbo{TzfF
zfot(0V1mN~8x(Qnnpzrm5F5Za#+q_4?@e6Cd2e%?2T)2Cu|<k@7JFG!_o!8I;#uvr
z7Ygo|TNZH0{V<9EBRS^8lk^xpDsW0+tpaxi^m=UaxR)@-Pu;o`4mKK;P-K@9sVwQ;
z(Gp0p$+r#{wi}CP!3ltnn|J`yY-M{;raup|nQ9JtAXE5BWXu|R#GNp*$g@9TAH1R@
zeaVjk4w|pSS-{EEHVo1+8zdsuiAFeB5qc$m@Zp*bBW00sk<%D#jrQUp2N?Bbg{~!5
z;8hlDcP(%%Yf?d%@67d4>Cb(XpfkSci2lMo8%07?=MQbxy6Tg?k3TK*^OO3e@e!%2
zN)9dDR8`T{)m43ZL!b1Io|fCIw?(x(NOacq%GN!{bne1}K5=-rR#hdNk6%?0)s>rP
zw5n^}e|6O}RzxR;d$o7{(W3oWB-7)!-g-;legC^<+t}C|jT(GSYp}@2wRbqyQd{Ua
z#*iMHjWj%{s>+e0N4r<^ZrlKS3#?GyH~+{Mt*hQ9K4<jM&QYoAS`RJUR1wkDl@)z@
zuvZ2~CS<jV&rnaLoppWsz@Eot{=x-4adfv-buC*?WW$`Os`S^Dj5b&FQnkf6I3CDR
z;JhfthjGKWMeHN)rPzcV;XKB0xGh@9-<DVgTO>t~e3TRwtcPGrCf95LZ0ufWhhYSD
zrTq#OI)^zVt{v<kdy70(R|;`Uy`FlRi4m|H?2N~pHOw9GnQCe1b&hd3=7Pv(hb89>
zp9`E>lOGvon)UjyzBCiKoslo$r#~>AhR_<hA)=ZMdU1Ft8vqU}8B!b&?gUuoF!7aa
zV&G!pYLFAwM87P!p+HaqW;UA&9^_bmTe4*MDSJR9wmW~o<c`e{Fe2Hl_@lkpJ}|!K
zEjohpo%@>?^)jcD$A$*^?yd&-h~xop^TBY7F+vjp78r%VMPNqI6>*J7<ruFOlQ^XN
z657MD5!WZM#T#DkD@NHcvwQ-(L{#LO_Ewc_KK?3|-2EH+w0GT6+cYuQrvsa3%-`Wo
zExm*LDCYb7dt}{M_wC)~E4#F=YCU~xm28_IU$33MEyOcGF@J%gqE8$@u2o&@g@uJY
zMiAUsYdo(slW7SCO^KTpLd%>k-O><%cA?DG)fK(>zI%1g-n||TP!R4V4O^<$r7y(?
z2(W*!SNhf;Hrpo#`=o!%tjQkkRNA{?AKAFCzem?^n^Ch5&h^)oj!ax3Zut3_U$BOJ
z&SQszM&1-52Sc$b;j1nSGsr;!)X?rA-)~Hi7*jR5CR=Gsxevmym9Mem5x+R1Ifnyg
zLaSh%W5M_tP*Sj|sDon+nbpE|bwNdpW1SB8XFV3F;8iZ@BOl1_%wDoP<EWAxs12aY
z7sPwQnJ9(ai}8>knf=c&<YTtpkZA7xty_(Bf@BcdTmT7n1@L$c0!K6{flY;$fC!GF
zx3=DvCO|U+w%vG**vw^slaFmO&AXgH<Qv+@(E{9a9k3B%0+Ha!Mxso7<(U`dM&Mew
z=kkN?8s(LV9eHH&6WW8kfL00Cay<BzqtJP(;ew_V@G9At#hrD+-~}9#V0~!*kq>3e
z?qFZjJOL>TO_JHdSzuN7*vgeXT2+<KTwB)F+pDs&vZAZ2tGak(NUF|yWB92Jy*B8n
ziVpYGGHh?bc4PF!`d(ePtr_$#k7-rca$$x2S=c`$b<c3Se_(04f9oIrQQv+4{knbo
z4p@r=M24Btt8T1Yft!iQ5;+F+M=H|!JbsRC$c-b1kLWw@x~uz1TMfMM4HSP-(UmKE
zw5}_izP79@D=WIPvZ^a9E4pxWNUF{{^Lb)JuMTXUHaSE77P&d_#JWCRw{50mw+z&^
zjCKb-!ZP7#Lx86v<DJI<Id1R;Upel9=Y~yUVTgB$<E_I+$XDk^GBDZ_nm(skz$e)i
zIh6MDam>UtU1d<4-_u2kdvS-NE$;56K=D!v#UZ!_DH_~eTY^K;QrtZ_!M(V<yA$Be
z??3Z?cqUIiWbRCM_w3!h=bjZfB3U1PVe}(p!63Y>HxWX#$>b=<YS^pBfnKJAM=8jP
zGnK!y8`8{!7Z#Z;Gtp{%nZ$#!X9%v|!fa|ms%4*33q6&pI?Qw4JW2og>ctoSL^Ut&
z*}!zI%1=*`8q>cOYL<S=H<c2hL01h>d*ooX&J8>^`MtuaKk=3MLQe)0icHfmQ3B5L
zsFhV=OfP3HwAZ5Ib;%e|KtM8;L8`K!$?)^!M^tuN^1(CI<fBGJ_6cjEqecG4^qnao
z7}d&{l)mh7pYY%+hrH0`84;|aM(K~~%(zDE#e^WLo4QiU$>r$a_gXR4^0(lxZ3#RT
zwxs<1t6J>)w^oyPxn%uFy9FUjcaG&KL*{Ju-^v%AdbL6}Z`I{J58Th{YnGe?dfpte
zAz(si{4m^B%4?omvG14*=c6MyIXMSv$Hf`O#jj#u3pv#Pg3)jf1Ci0L*8_vS&o_cE
z&%6G6!go6V_dR@PBOGriFc|G-JrLP@y;DZw(MsWF!7BTgRgTvuI0?LFzU-m9#s;&r
zl+Ams{qA5aON^2*G2LRUSYa3o&zg`Dp2iPbrv4tjNE#XHpw7a*QnbpVUwGC>H%!>g
z$G5VAHe-V{0O#ddn~8x?$18zQ1#bk}>8g81PJLBVANjC~?`j3?O+9n!V3aLFL5fV-
zc1CVozDP}TZ$xyK5#!6b^hH(Z5(33NM><TIb3OJuUjoRqQg9^mRq;b+Q(6D?!wSUZ
z+biCIE+~DzNh$}rWK88|!`}GEdR&B(LJ<>V8>(LSqgxZoqz&4#NdaTxXyY}Kxt_Sb
ziZ3D!1E$GLhV~yU`u5X1+tH*o!_Wj+f7cr{F>n_aIFbMU1tMfgllfMoE<vEHkl9bq
zYVOY}jdK2;=U(wU>cgJQs6Do)^sMPrOSVY{NU>$cEt%sJrX+ORc8NB+T<&dCG7~*u
zr6qfGaEy}nt<b!u9xW^}$)`^Jjgj@65kTf9TT7-Cest#9XV`EvNt2vK2@#tS9)$Ai
zAjNgpuc1+$20LwS7q)l~Qx99Y9N+dR+baq0S|P>RiyPk>$FkPl+w$ozbM?m^HF=Cy
z1;(IRscs7HF$@4tz(?(!a({2-)7CR1a#~uJr)=Nd?+>jVPhujT=K+4Zd|Q`Yc)p5{
z-cJP;A4-n&N?TG+1HKCNXqKNn$KvgSR>jI*H+|(ExmJY=&b-bN3ZCxTfQoBZ5PILW
zr?4Hc|AS6_1zUOg??$-umY!-XFD(_*!q&sLr*j_aXvFWUG9{lq9*_CPTTa%;6B)v9
zsLz^|;nx9i)}x{9@x@ziS2a**hBajGI?RZCp4V<X-21}{FDT39^u9$>3AmDntNAbR
z@6=>u>6Bx#>#PNm*n70VU}=3aouIP>*D<XI8R@3p=LB%5(fTs@T)cJ1kI0)^0@wF5
z{cVc>K5dyR?9EMrx*>54<>A;SKwJjo)C~B34ZeM&A`1!Q394rALv&!jz8BR0ytlIV
zwN->mIwE&WwsH)RTyXKyz4b;pDsc;yu5sQmTEcyo?~WmS0YvOHc^js_((P$70YC_<
zwnH$HqOZLQq!SL7`M|G@0o`PC>$*wNV9FE8ETEKOU-+Kz>&NFoR0YZ#)?SR+FVfT=
zy2+-Tf5M(wALDA!&7>?_R;mN=XokB(nJ|u>I7~Sa{qt$=aH^T6@kM47ii*1t1*5bG
zw-kacRO$k9);`0KmVD#;B?f-Y>~FGZwb6rxe@te(EX#$OFMJOs`t=W`{I4FgxRL?n
zW(KvSrp{0#1gl}YSCTPNhJ$Pu#9d=y64em(SzrbaT&&_Vn#Xu>N2%yciN*ay>Bqm~
zl~lC7XKSy<uSR|cU_T|Ps{?1RGa&4fM?&cb_y%(Jc~J^{_wx9()205b{~(mJ!iM)6
z4tN~Up#{r@zkYe~^Oj+@N-=k_)MT*&o7=i86<Kl(&5R^vrhT6oT!`isaMffk249a{
zC#j9GAEc$pXQh8n8cbt)-nd4QxXLm5*#m_XzK-j}59ati@W2;XD$Ti{IfHwm5c|>G
zt4BKO;NQPDz8x<|j|W*>kK4)q9MRFymzA$KuYbj$9xfvycO}){%i88QL9^OSVpc$t
z)uWP=47VRkA%ki26Q$29l^vSelN)N~`bCw2CX-u7kBsg0G)D&hzx)*9RR)A@xuSR>
zNYL19Ru&Pg<t?`$)zR6vS%B5u2MSC%L2Ow|rM7rUw<9!j`2n737SAz~bjfS3&9R=y
zRP3_Yv`XgLtzc08T9kX;&F82}OZN&lW!c$7d7@+zavFdUm})os&6~h%jTxCbtfmQ3
z9-nDfdI3a0oz^j$2}V4CosTk@7BQG{u_~hFYdw<5;xEKVOqt7e6gn?OJ>-F;HnWN3
zp0*s+SlP}w$IP8Q!)6VjQo&OwGV*DyL<AOLpnb2e{F?Gd6mcqKj}Dw-cEM_CSsC8<
z5w8@Um*N|0>EZ<3%-6MF2>9BATn4{I2ZBlNk}+LQm3<6)(=&9d#^0ad$W5ZQ#PhHc
zciqdDTB~EQ*fTZ*7arf9ntk}F?r2=;_Kyp$HDBU-1*bEg36_`Y-HvkDMeU^F_%1g3
zbr|{8K7qXC;M`_)V^_V%!$>zcKH2yGgm{~U&uGWfczb^~GE4<4^v~L?kk1U4_BDyP
z$HopfrtDlFbWD%?>`qTDEwO3eaah7D$Jft|ueTk)q=e74MPAA~<_6QEc|~gfSXq*|
z{pVlBq;9smc`9Rqjg|o!>4r%qY0)mIs4asBr{_W<u9`)bzGRu1Mu)hee9F8ct&CRb
zZdOI48T9AypRgay*x&iN+~)aQy*@)upSHLTf^#0Jy~aV|H#&YhIq>^YQ*%qDV(#{H
zge=)JJ3IOl8k-ZnBIz_)%Mi807GoL__b=nwSxIsr=zj&0P|nMj$o*}Toa>4umP!L(
zdHJt!AY0%C^|(ds6COR*J<W>ZP5k}vtj)o&;c<P5i2nDZKJItR5Q#i5+>oYHN)lUH
ztQ;PNKN6@^zXPAJWCz+<`HtT&ZFzkpQ~Z*XQh>ryk3zt@PI~-hTK};AHzfS9n>X3l
z3--s)vPpTucwp@vXXt(3)iDcP>V?vT2o{evw;q^<JMY=?6=o$`ebEdnT4QQP2o+Mn
zw{Tmjwr|yyzmee<gs=pD7vbiyMrFgF$zsTxSVbZ*n+PHxOAx3OO}#9jB#`~`v{BHb
z8gPRm`*!e{o6zvPl(8YVd;#GJW-uldkO8tl8j%(hUEcE1Xd1zND_3LcjHWKJ?cXXH
z9u2<}-6j5duFT^EUU#hhdV*P-@TG;HY-Yk%Sn5Ws;EtV&p^A#ZuqQgUH)BTUCe%3<
z`Htc>#3#{5byGT`T8Ck;IYRPgK#iK>cuuVtUM|e%DX1Bv;zmJ4s&!DGKy}ltYT6lR
zlUq{NOryjSQCBcPtDCt~`wwqa^B-5KYR3A7^J&BDXOS%G`}6bvxhkCcKKW`|>v!t$
zs{S0^@kqJw3N=oVdcFjBZ;$8vZ13n$m%6?1XA<-9Q^WJ!aTXB}DNdeN_U=dJZu!h&
zRRre8aZIiy-5D9lEBbvla-HX1`B+GQX69j7J6?e<csWhnQDQlenf~1tweJ&D<t}Pt
z?saRrW$#s(?)7;;oWDIwTu_kN|9Lx^J}wh_@t_sn?`G{J4HA{8adfJs5xK!M^>;Ii
z$Hx6pPz-GEv%)fPCf1gKROrCb+GZ#be-|0PcPg%swh5l8d4sXc8|Ms>VL~s-+548V
zoPcb^R`r76SmSzc+&Qhd%Ne??ZDjWlee+?QuVTR<Sr+HB;I1F$W8wnwp-d5S{+3&W
znU<~<S1(FVYk&Z%OU17k<q{oIZfAd490uCuZ$B#wYDd+!Q^qOzTYraHyDs6-B#I;Q
z9J8Hsh{a2WL*$w;i*s|-ZK-<xD$=>S#^!qK2A4`pGM0bVnBWw19ht;*H9^mP^A0sn
zUgMoKc?o97ND}XS6h=_$gi{aiir8$i#ls7gqU?3S4elGH)Q3L7RKfzR=g7S)w@@<F
zm=Os65-Vvk{pNNP1qSw-tm)7($093T=6LndATm!+0K<S#R~CK22S-pgT4H{Tu`;rv
zq;M`3{2Dyz+jtq>uhtcv@5_+M#G=5RTkfaMU9KYkflOx?^5Yt8?x+wRisuTiq|aO7
zct;-o=hLVES`JS2%hdgWdXgPh9e&$Aw7(`*Dc#Jsn5j=z&3|ltTBzP?-1*H#lagHQ
z_bwUE*{FDGIL^Z{N#-NnQSo*}&XH2@S%;%a`N}TG^666BXgU;fLG62-u{J4Z>}zoA
zyP<BeMk`+S)Nx*Q`WhVWHr}yRxzzaD;AaW*2Wur?rB?`Mr+uH25<k~|rj>$84RgI7
zR(>`H=KQyfV&_^Lp$P2IMHq=JES#?w$6JoO!C3^Z<1Hnd5nJm-wN95?V@=7~tjpx6
z%2YAApp9oxo7vcj*0gW%SW0&X8`(pzrLpOam$*L;VqV&R#NnO5C<`2kq%wwci@vt~
z{*_DEoVfAX8(n`_y)*On2|WeyX1U-uJ~;(<p_eI+KQhFG(n-mNl|{^1IL@8m)}yoh
z#0Laqw0Gd3p6n)NPImHFF(;%SKUlpjs3*dAiU}gQo~QYNGGIyd$tA#<s0nFOKW-^E
zfRWTKnz!tW8hTM+;z$){0W*x7>f>RAz*Z*&L6Du>-%Y-uX&ELw6bl+AV=k-G_&vU$
zCylRk5TOi-mm|ELP|FLgw0{3?frEISD7}+9pnRRyl-v{d$c3u;Pa{!R9dB9i?#{r^
zra0%hUf%|`097A%^3lbhc8$6B2}Jmx!ffS}oUivaPfm`eUjjiljUF!*K6l~c5Bk-k
z`bAm?QHv_Bp^n~4>V9V|mlIt*m+QefGjKm>?O82~6|J$!kF#H9rG35cm<oTnwsW}z
z`j^>Ei1Dqoe-KKmnCjAQ`eDI^<7c&gXy8F-U$Lvobx;lT(SgF@MDjX=_Ge;j#*ZJ<
zpU79{sl^op9eyUNW?U;9i!dKxnzVfOEFzbDy$zT8rS4}5#>HMP_Vx9BwDNba(>OC5
zE4rd$89M8hj1h7UnPVL)^bULY*T3`@O+w^5?OmdPg*il{f+UH*qQ`p|6H62urA|3{
zWoBs^gc#6-_X(!&{dQx?JGutOdV{Ia2NeK~Kxb<>%<v>_yT&cEgx)O2yEkXP6a3z^
z`O+rTZxC3YW;Bf_oXU&1gy~$9#a#{OQ;Wvyr?Dv+HJ}|U9%P*lg^zq7PeWm5Aw$@a
zOGFuO2q3V;Hu+qHAVT-!KEYllA^2)A6Q4@m^Fj|Tl{B5oBtwjR(GlbSxc~?<h`BPK
z)B;Fq7R$vG>X<xd02Oun=rgQK6Ydp1GH)zHBj7g}i*s1M^xtb{+Gl~vS%ad{25h37
zV^qJ=dKQf-Bf6&Q%Qh$;0UC1xWKMs=P!s6S-YU2lW8MGaLBnk<8_b5vjHtRUOBZdR
zVogfQ>(iHf)VA>Q`Y!o$!BbMI=MUOD6VzEsIp&z*<5NzrfVhPhT!Y-;ZxyNna_c37
zA`-A0mK)dByCDTBm?rr`o#rPYxWQsG;8?)?Fc0-trhVMhxtSM&l*ao!q@FH6ELb8O
zznrdaU*|pJ8hbAZJfE(W@VR<#PZGAg;z3y9p$`1dgJK+)85uGJ2M799AJ<tV-#<Z|
zG-yTdwW*)x1*zf7;KK7xhv+=^FRj|!rl(n#tJaVl*tJ#RU)$%2aKWR?a{X+)z-S;_
zT$BPGP2$}cPCN%1$Fv0wORcgl>EbT|Ra30F0Ui5%4S=iHWPg&{48?QQOD^_USL#zj
z>kBt7+1uj_qcQ~Qb*2WzU*@e+**eXy&Zz^yge461R<tO^8G`VYI?nje8}3EIXD9J9
z{tQp*PimkQXYoJcnm)}bqTm7C>8?yci7M57f`8I$q|ee~@)~LzDDM01Os7F-*P(-d
zCQy2|+TKsPE+@y5jh&3p-T1f71`XhPAtX*=iw`hC84^zR1jK;1`ej>whCK@XjU3$N
zP<GUa&`zFA^~+Rd_Qkg|+{4_MFTajIN%Wb0IcJ+s-t;L(W!`q}WElL)G0;iMz%$0d
zqd1r%K*jU&%Pj1|%vd7DoS{P1=;yOSPGmu$=SSmws_0*)gC9Q#Hh0PosoPXzi0oKl
zWgc_t8bL}rUMPDm?OuH}UN<Wt03FB}f6q8MRhwl-slzBS<hl#<iMlmSo-%Vv<EFRK
zKNoH!X$3*I%F9?s`>@(rN~ZReCl)lwtWQF|*w>;)PdHvc;g)8xI6FH7$NRz>fBevL
z?Q@*|1h=RXR8p`gXRTJ9_Nlb^#N%N~zc!gK`f+CM<zp-DY14e$%2InycVqAdGEFj{
z@+ExUiO}WR%i^;rzj&Dt7@Ve^D2M+p4#$bhr6FOOC(I7AUM-yRAd~rFCz=U4YfIq=
z<K>KRRI{<Sni~ZwK|?HUGA@-7t5sApi6g#H^zZR_bK_p{v*TnRS3{K*3vJV!2XP|~
z&OTh{JO4J&o>s3b4qrK0mdaHhp{PbO8SBD&L%JGDQ9*~s5p{%7YR%V1!d*=g6@+K)
zS~3@~*G1ZoV5YaO(1&!UGGkBnR(y0_pYLlgL3-U{hnb0it(ppWEfdIQ<jf`OKt|u#
zmWbAhKA=lv=8_U59b5xCl(A=9P0Wo@;aLdK4V+k4`Q}rNUWYx#Jei~;F;;D|4$&wW
z!PBEX;V}DPA}@B4W#>h;;%=g2nL$0W18qXTA6qU;ZMdNMOMVqorEtY3cJYtWdHNXL
zrG8z9DsMRTF+D{W?BHJ9=apZztQ~g-qki~h{9^UkC<QAisN_qthukt6VkjE}&4La1
z6bm<4eLpvdnQ**6^@35ZCHfkB>cSIs?(x~`br+gcA)eo+)@3C8CCBqT`4I%VT?pqM
z8(}{f)SA9rFa%9Gu`-OBG@fh$9v|ADw$JC(_j_j+Dq;mqI3LdNiyCb*)L$3R(8hjL
zl0E8oy$HJ8IqaV<^{qX;sKcv_2OT$`J+*E09a$Q60|e*%Wp}?6;Y3%2X5vehi-axP
zW=AT!#_z##_EN1{>$XqlGSG`q$)|1IRIUU-TaKL!`Kw9s4d>_`3zn?mHsw6k<p7Am
z6x(-d1W|IE>?2J`3zHe|_fKK5wOFvLy-u1fEoQ>gV|+7=%Vz0^ts2^r@YeEE??82Y
zK6JuCcO<OOCK>sv+n*YS@4}uVGrs$~h_S}O#JqWwkT5psOlW$%(e3%E0&ok4(*5-!
z7@fGIw7h<6=C!gXMZV!kiX22kp&qRCOLhA}^&HdNuw^bs`R&yBn@XaEV|2h<)r;=m
z>{Z;L!ca)#DgfI+@k{?LLY(8bij4lrB#EYmNEFhDOj-vaC}xw|eao@aFyMXM#nR+l
ztWsj*+nrq~g@ne}lWbwKun(;)I=oNI*`3HeWTt~B4qXV==?8UN+J?ig&wcqTzl)oP
z{<TwpA*<#DewB`c72Ac463=X3I2ZNXUVex7S)SWfT#i1n08UQ6lJyoHmujb^)4OQK
zi$Bg?4(QMv8D-hoD*?}nDxH*c4wKk@?7V6oD8MDx)V`w#q6-Ea8JR|xYvduNzW$!;
zc3*`26ASoRbzO*D@Z*)~PiZK2^HEs1SMTjKmBsBgAY@)Odf4K_MCr5+4@7pR6OnFX
z{zKF|Mc6lP5JB8lN95UA4LoHLB1RPUd+TeCV@?SVVApHP{CWFTi0sdUK){>#INV`O
z|L(UtLM0yUO%W(+pZUpb>zeUP2O1k_Vj;wv?;_ZTurF1<9V;bCjM<MED>gY+Jb6h@
zJnlkdt6WSvtAFqlMtrtURB!6W)M6lETA0wm!YxCz#84#qyp4)UY@yKU<gfG%UAB&^
z9J<ZI7+oWcx<qn(jnso-P8sY^g;w(bKSy=!2P<ykgSp|OM_7BMkxA?pbhy<Q)h_?B
zVBCh^7%e-i^Co2wWeQTxztV}_Gi~@B=zbef_9}kCQ`G6jtH!HYCSOy&t&x&;D<$k)
zs!wM<&))`VYd`KVtR3T;-9FiEXw@9Zk=ab7ci~xf{^GlDhYaqX7{l6|lGid)<c$4P
zJWd|le9ncW3i2t14xo~^`Yo<7*Opf-<DZ0UFM$PTGh%%01@XRDVvqNP{%rA57ltCY
zv1jgRHH?i9)Q~}Pm@nk|DcC004ie+FC?#%|bLilQH;J~y^z`v!dnC!{VPB}Q!e#;)
zB4>n!QWnu3vf^VTZnJI>2#TVLZO&F%rvPFMFT04$pX}Rgo7mf0OD#fuMqN-TYCb?B
zNEhLg%IZCWo_~y~GSJTJTnJnQ>~ZbrD(e4nVJ{xR&<*}$@i5fD*HFQ6>)y?N-E}M4
zhfKMoQAO+dsikE$bR)vN^0zTjGkPqh$QwIC{~+p!_`way0&`<iV3JZ|-}7J{JK9I>
z!gsQ=L%W#7w+!cnGMfB4Db9lEg%W99GXnr{Y;2gnrIrYL@;htJYR|Y}{2(00yxez#
znDS#i8q94(FrIf}q{MfoK1jUg3d}jk-7<3S>n#b2j-{wP%iNo6B3*8QSnfoM@$T|I
z8Xay_fz!ID`kQuzr9_my`S^_?%BDc2;)T10ZRF!!aB=*?X(C=Ip{G_9N?3ge&O!{2
z&=Dq;&=vX%ofe$Q|9}_XVI!yZXh%F6&XZnhbnoscniB@ujUw~wa&|r4F0m20-T}0L
z?#>R7X&3(HXSC#mIGo-v(7ycfalfMxx&8-mxdcf$R!lu;Jit-b!hEa$RKIDZ(qS@D
zl~UljV(si?r8xe1XWHA_b``?k{3PK$%Hmpl!LhjebWiaFJ6Z0xYHgXLzJ|DLW0V|H
zY!-(2{?Vd|Paq9Nr7t9nWjgJnAMi@W^ZGIcUNCC%I&AXr3o`$C#XHL0Ia)VnYqc20
z#4--7Xnkq&jrf%Io`tUXfX9@~-jb5fKgnR^*}ig)ekNYx!=g?U?MBp#d``RBQov?8
z#j#86<ZF%58RqYfYIVK!oQ-emOyNb_V*NDXY&vQn*(|OZ-vo`-Y0K~+YKRV&Bug=p
z;D^t^70XzGz+S7!kWEo?71Zu+OLN0uUHr)7UwC538wiS;z(G!`uquRJou72ksKxh(
z1!M(OYn!=ph{WDxFs3lkNZ!15iHyaurCbvYBD0=DC69>U^X8`ZK29PcK*2TF9mf!0
z)%tSkZpYJ`o7;$)@vxb2mFEvi29q%s&mOZz6g2A|yi6kAeTjg@*<}5i<wlqtDjU5B
z_+5GQnf76EOR!*}GX+wLyXvRfksl7MrFlH$S$KMSx{d_;8s|vf5PEI1L4V9uj1T|M
zo}*}-Eykc4CCSH)_yH@A6L|USWsv>2stzM;J5c}K#bPo(!hU!Ge3n+opg)7BS&Owv
zp&FayIDWY;sN{=&&EDF{G+^zX^Yw+!@4f5ecGa^5uK#fJlW8*ly8Bx8i~6|16!c{)
z`HMC&Kl(V1(r;DqUfn_&x|1u|f#hc#5q{e-yac8KWmC<vr;ASn>OJ%c|L&1oWMyoq
zzfi>?p_X%TqD%>2if-dkE0EiFY%MY~%pgMB6Ff3oEo=WtZ{(28>9$U!l&$ttp*#VG
zLutr&w%yizw%y_g5qB=YW-5zbxbt8KBz;fA{=J!i5*Akj@osa`q0f#e1{{ceOr}79
z0p>UZQ6LKmY4G>2J!ks_X;hIhWcVfaE~7|#2$)Jg>6Dc^Qj#5H;&ELW2&NNxW*rA4
zkT@$E|6rp2m9}pXIvL!)isfcDP;MYLb}naH3&wMHz@2B~mL<-0=iS8Y9N(JTw2}ep
zw-Jb1t8H^_B3H*=OyGxhf-ld@=dVXts$Z%2E+;S89=GlI=QDf|mKhI5%|7#U4u9ck
zW86w4q5(e;rnl(Rq?c>v`ubmYISIgg4GrfmLy?Vt(ZYJL9`hHX{dRCGXS>b?(q5QP
zj^*JESX%45QdJmXT|VWsc57_Q2>`zBk$Acp$oJ<^_dSDNryPB~(&2$2Q<I`pb`~~9
zz(aJcpi%2)WF(2^`HE%d3UoWHAPFOQ%7*-}j+$nEUhjbA!b>L+-~H(Do$Win?zM3%
zohNByKG?z;KD<lIx5qi$OzKzR?|0nv)eVQBb3Z(0$Yr(BoGTr0Eb&h!4!U+n1fZP4
z7RG}qLG`z-H??PtJFTw&@e=Cv!9G`nOMaxX7@To+ilC2|F2%u^RJfBv>EgI9*stA+
zs6L|UyszPi^Cdt_Ag^NSXwQ@P4`3g_n9=#G+)Hc1BS&t&`_c^Sd>`XCSd3Ib6HAA7
zB=RO_%t`?0u*@fw1f(Kw9Dj1;`4-4lUj1kN%iF*o#lIQtTGA71@pUZ>Q7-Auzd0WZ
z3$2ln)uLc39{9|t4+eFTJj>T0{2mb#RxeOkQw@J2-eEcWQj04SqVH&TpiB2fk3mzg
zms<?FH|j3VS;wC6J=n1)kbB%2HP2PnuD|to2<aXlka3|sa61AFe4V&f@koen2yog2
z=#S)8Hjq|J`@UB;>-n(E2sT(3yF_D9xV&ob4T%t|izh=ShW9}4UMJ~&H<$b?rTpAA
zjdWYy)n0+0wf^3-3>_0TE4#o-Xot}JuYyOxZ-GDYo`><^jq&@Rew&0jGibE%1J?U>
zmYsoo^`S`MtMt@dRl!=Ma!!OQFl%wGs-8>Pajdv8BBR6fD5v72LgeM->_`r+gE{BE
zw|MHG9C>}9YrgpTWO>bh*gvW8+VTYEp`eASm$<DlOY+qg@Lg37EnrE3n@Npko3Fsz
zlTdX<LmiU9f$>>gKo$z-W?P`ah!;{bx>sayM<RV6&DIH{jTeD6k~8f^pGZeo&OT5^
zJ%QE*Axm9K2B_?4b^qxJp_HFY_m(jhKY1U-!~FJGYbqYSCC5@RDmDT4CrWenKM<6i
zy6dk=CQ>^={0J=v4Rm#6n*ciTlwTxfO3A%zt<g&q-Y^xQvx)1e5vR2dj1<#FYnQ6O
z2JtJ+rZ&<E9_Zc=lc~&P;)f#T(-R0gE%?oZKA;3Gqek!$fRT{wlJF);8oKb6-|@M)
zNMmsO#pphKrdS^8(g4T4c{>$KC8VsIy@3z=K_1A@;}@v$*C*R)G}?R&Z;GRh_LN*J
z>EOcj*(AIsoQP=_>+l_mv@s1s4>2-<MK68wU+jDO^GpDu6whpz8bWQS=B`T3@Uf<R
zesFxRX16$Y-+gU>sbdBUm>$Kn(>przcvZ)({OM&MZsjGZ8Ctc`!39#zK`iCUgH2`N
zkotH#vy}I3k}m?%>$^U9>*6KF?$K=Ly4`!U*mZiT>L8eAfdyy<3#PvHusta?NU`ti
zQGcBZms%(6Bus`kI*!y2;c%ZA4^yX2OpK*;I|cx1Uh!yB2-Tl8j^!8!!w%%1C;7lX
zZkO2}ySpiQ*RVauvs(X*XSM%{mvlEc!bFpRO0-#rqE3Awe210ru6+4zN+N4c;!uWW
zKi|;j-MBf`@%*12iLTjKselnVNLLG0<2-g=c^~Bh&9lanPUo0IXg0XqRB8qC1rOKR
zT@yuRL>|lMk1~7Vx{!EuL(@%p6Tt)jKP>;#>JLltFQ^cf$Of*NWo#?46el%MAD(SP
z&c!GC?<ah1ykZ>TR6+@rbrAc~JWeCpGv5gSQs^iGk|>3uBF4wuj{z&v>DGp=2Llu#
z2wLyg57k^#1B9K7TqyTRf<oQ<ppgl0<B`3%?`Qnw0wdf%*2wj`>LUW#Q=KIiw~&@j
zOziV3QI3a%irfR6Uc?tOWl>u?&-dlXz6eJ~GPBYyeewRfiYyc0gfO0{Q`i=DG3tD+
zYc8)_1HHE8Cr>B<Yz1jGpP~PPQlI*2BUjoK=%Swv!Zf3^t`_Dz{Ad0%^7((E%y;=*
zvUlC=3jT2lQ|9%5v3OqCJZd?=B$nv7$MQXe*@=q1{)JiJ=Dn&>!hS{mAm;SNB$2}B
zu>mf0uL~UkOVt*Q%dKA?!+f=e&93U%&gt=%rVW$rFVsf_*UE())*e`1#KNN=x2(7Z
zucV%u+ng?<+B^?Py<hr<FPEE@Md2z?;{Gp8UN1g(FYsvo;je(#)Wanx8%L+U$=xN+
zdZGM1tQvV!5k}|x+bfu}A$WG(g>RvD@Gfo7Pw?QYeDiO->St@AU3$U$0e}?Yxx-|j
zSJsVq4ac0k_nYY=4AJZLZdC%gsh$395Q1HI`0Vt929>XW7~&;=4~j3nBmSDnyPCf}
z_u%t$_em0|vfn4};pE+KdH{b01ABHPC@hL|;+)rA5RDO77pS>Qh<*|W8M{;c+X*ao
zn<0u6wy3d?Lv@gYMpzJ;Q^X}e=y@WH=QUOu@I#J;-@G|-lHgx_gRRTbow)@jC?n&d
z`!N-N{2ri+!rOt;p=Vyb>`Bv{YCqyE*NQDS==S|Bxui)xB^~^B=z)C9)RjgI9}PYY
zGszi%VECEMR7r3Nz%gJ-jd3)^z3`WEE}=Z`movIg&@`j+gi)|+_ac%`@=kZs(Qedg
zBrqqD_N6Bi{?{gnd)&fLq3jK(_Qu;8$8%c$>~Xez;9`dqDObK&efNCm7+4@(OR(C7
z=XD8J0!VJt19j`}XQM}ccx-R+4-|3%`p?FdJ6`A7EXuUb;Vll5qw6GJCD%t$;wST}
z*YCBb3G@4z*&um8?-zkI(1m~mXhU1Ve`C-4HdM#_6vmV$HrF0>2YUdwj89kBlHN=L
z)Zx-?y<FSILzF{O1<w5z=pT0UBC2;np0OlWZ$ms?E3Bxti2&KMYKTvIUYTUtdeC}Q
zI|PjGOhoo7RZ~cJG@A)u#rw?|NGL1-GHJrbwA2}<0vrL%mYURFN-UCWB03|On>dV#
zjX!rI{JNqS=Th<eZhs{bh@@TN>t#=T$H%#AzNNpJzw6@6@ttC`Po^vB<fH6Uv}C6X
zv1o*xQ*SNOT=bjB$bdcPN@~7$B2KGK$-&Kpg(YpOK-(}f?{PfPE^od)T~fek85%0$
zb@D8#$@JvgxDe8&#Ki184DX;9BtagTB_BSqUWO1)b6rO9`4TFtEd*%b)+S0|Ggzo3
z(>OuaMxwt#`Z9^OL8=06O(e`LGkUMf^qlXq_pVAk^UpEz*`4W!lJ_Bby?`WoW`@gd
z^kj2nV6!GF6;>*|H3RfX-0`$<p7>i~{z^-e!~(gId)|-|=Yqp!!2#ynax-}Q!S#R7
z^~2RlAn<gVDb0VwLga3f?XfnxayV4EV}jJU<pY;d+uuEK#eOqZ$3$~ZJLh=zQ}dX(
z|95}bG&loK+Tgm;*y<U$rKWauwzdEk+#;3%>EGq~Ry#ksTD_hhGd*9pavdGREVBGJ
z+@2SvGF&z`xwc`Ol#iR6c8}eg<2%RWMu~f4hBM7qT!YIG{l#z}c&G*Qw`)Janw6)h
z?OWq%CE(~T`pbSSl3j<_sCb^imwPWw$2nPpJtHf%av(fLpShJ$s`N^lYMjytS@gH1
zMg77YCRJn$GAobH%3dlm2Mq6tKzu06rvq`xB<+avmj9#BVy)#E>2a08T(^it>xh&b
z1q^t`WWqmJ8w8B=chrgUFABDwV@-Bo>A1}93^o>-B{5DXzpu_nbp5Kx&#vYN_STNF
z$xw|oR`NiRMQoH!Rt@u-MI=Br<^JgKi3nRI6gfiQaR60Xwz3S`9{N0A=b2-9c|tRg
zTF!x@#=7r_x|MQ7n2;R?0QD<n3%H5LlQbNSI66nrJz=`P`9kkV0Bj6{g#bP@{nZ!<
zxzLb*5JvD;!E6fz%uD~NT6nvizQ)V$3oH_1D<W6JV7{<=M+d>r*R4zT+oXK@9`zpe
z-R5K%tr?QAllTD-_N^{@VO=q(s={vJRUv*qvUqIZ&i^{o9jz7a0kz<3xF@8SdXG+c
zG=Of{3@<Xo?!Meb>GEM`KQ9csI9}|*jYjFRQOM@9F~#*`W2dy{dMcyk`V#&O`6m{F
z*JeV&ueAnE*F|lf7k~dl@l3<}(Cqf}u#t}YmNB@D@|dxw;VxGjy_K=gf1jLtBozZ#
zq?H5XDHZ$UoG-FQJ_n>VP6vNEjl8vtny#^YFW?KlbdTRGV}V<5vpX1VoIqo+eO&LA
zr_<&iC|vChOA>1<S2w4`?aXT317Nd|3$}CdimL>t_Rf|dInB2z=Bb9gz+I+qSF(n4
zx@SDJPV3k=NhjLlc#bnDoM2n>`6-u*7=Y<HYrAJ5Ofg>19t*SYh3nenuqS)Lfvd(d
zh06tLhj<nxW+i8$w(FM2IM?x5j8lfJlth0vLK6gYp+XSq<i#!PGsUmE)sR<9@g3wD
zZ~iP?HVJwN;~^;jT#26-Ae#sM9rK2b+LbLio4pIm#Z^C|EGmFk*MfWc;_I8^>``~+
zQJOEi@*nfs>X@N$4Ri7F$eMn0KQtF2UlfxXvOEK5x?Gqa^169677OjtW)L)MBK2eU
zW#o3Q6$ixf_Wn`);QcBSZ2nYO7(Og>q0=mhp$$Cw=2dU=?7U}7*j}q(!>UVYp373d
zD8qiHQ;usU#)}hefQVAFYwZV|vPXIS@<N*phR5I3skDbuw$u`J0<2t>5}`Htt83v|
zbL~o_*Iqi}MYE-}3UqhOqcYbmyb7G&sBm(a1|NO=eb3lOejIWimF<6_{U3ZtJaw}j
z*yiDwuI#M@o;<+G40e9S6`-37Cd%~|9r}z$%Z<a8tJu{~Mu0u}+M|bB!`BYKV+?p>
zz$!Cjv5V`oFZWb0PdxioDTlFE%)5-YcI>|akcds2e58X5ieq<tb)?r$)GZ=rM&W4D
z-XmA`Ta<<G?et~7c-1T6VDoTSNwXzEA6?*i1#abCC)$XFJ9Hb3*4k+hxI8{Fe(8ip
zMtA#_kVqAeHzt7zG*E)ABYxKXI|TtRrZ~WgmwYSYBHS&M26ddUOonSADDBHYN#63Y
zXFu)FEk3e=ZD9)CU&`!B)y@Oi8i3xQGu36{dIBavF@)h*dqnHekBC_p+A#@|w_K9O
z$~p)CdiDH@3i!HF)||-ByGeb7@P;5u-%XKOEsre-q@?x+x#$9$33=M&Oe0WM#F20;
z8$-6%ajXS$FevNl*BP9;d^pcz6QZCKXjYugQY+y_zcP8Asi?NC*14hv<FuSm=7e_w
zs0#15q07Y)v7KpVTBuJou1aQU!|x8tmlR&4##WhUr;b{1+dO2E0zZ!Zam<ZUId&ZS
zG{cBgP~Mv~i2W91j;VnlmdHWCjSreqWs#sm)=T;)!TlajFU+uV`xN(3n?bv9AWZkA
z<ilr1LwRNPFY=U0W^c=5*kj9LKE^V}-kx?n->%w~w~uqUlX|VS-aU;iNZFOw-Zig1
zd--i#x^>)MQZ8v%G<|7wm^!7ZSYKHc1ck@0tj!E(SM#*hI&7ZW>mXiXE|@a7iB-M{
zQ@zLUy%m$hzI@E8($T@+>UrB#($?O7>@8L?6FBPA=70@w_4X_g9Gg>asTT1)8PoSW
z#Z!+J^zJ5xz4Ni*>7>XxXUS@Sws1z*+PD%O@h&B%_2w=|r<C>QaUg4d^R++-6Q6R|
zFJ^ni_})`<NL=3P;A$3D{U<gBAeBSk$O5H6i<1GJFlQ7^#W!!}`Vo<KNmpUEqVqrl
z>gDRIRud|K?7&p11D6Q$ll5d&8cGqgj@=N$zV+OG83kYCk6P2D=S$ZLNf1iOQ;6?j
zil9PTf|Xf5{^ofT&w<Rk8dXj`onmq-J-&zzp-4j={m02>$bd+yyX0Q@+U441p}g*(
zh{Hz#ovP*<Hs?tsA0ey|p>89uSx5O^8Xl0mcCTDql<SM#vQ^psH-MR+{waH8Aj7}+
z?3pE+Jb2DQq~2=*;P&Q+n;^W-ul880m)z$c{dl7oyg3f)UEfB>UlEE@A_dP>3D<;a
zNqxoF>GKe4TRVfLt$B~BaT#9OakUfZwAkj?`zo4(X!RZ609?Z<yXJfUowbO1&ihoa
z^bohtvu^euJISBki1pl`d^TtUR|v)}ed07umzXaH17C}brefIwn|M|PLC%F|cjI%!
z61&#AQcaS9IaBB9XCKg@vp<uwcqQhk%qaMe2uf$YM{%BW-A$AStE1azm3h$&ujqjj
zoFi$otLGy}_~ed`na`cJnHM#JDYH&cyD=!ek-@Pdo!0+z0fteFRDJ3fEw5Yq+PYI6
z18poOcV~Ur7}1SeM8*|L0F_!)Y-0EVb=nDpR6T4oxFii4d_rW}i|c=&t2W&{s6^4z
z!n5R7otEK&6)YttqU*y}WEES|CQW~!X4=wk&)>(Zz5#3@Xktw!mLA8IFCmz^%aRCp
z#rbC>7W5JjaR!H(9s3}_Ck6Kq%QBMUK>HG^E7D)0&f;+XqH_0bqEo2~BRTeFkgm-q
zFrGjfKs+~Lw3{f^H>yU|#qzOUW?kbZO}Ssuy%NsfxO@bN7pJ2Y3G}gw<i?R?(%Q9j
z?&hw|Lbb(g<SrIYZeK=#5<t?*<toZbAKxY2LFJ;0seO0tQzzn+b6)FM|E0~(3wBGW
z6_SJAsX7@QEt{kntxF!bI#W{~Z8MZF4f?%_lp~cLI~Oj_Z8}cT2j^4HMoK<xYdR5>
z<4Ydv$m9<%ke<8!6L+x^P7ORoHbXo>GP_?ga%O8&H78o^OgfWx#^SEGdPeS-=6QwZ
zP_D(9neGj^)W^H*snQBB$HN(?u5Zm8G)1HI^Mq@!QjSwxh(B85t8HH=wi3`YtyGWz
zJGoWr-BW@+VN^kDaqT8O62Hq4Q@OVUXvckAvNtf0c?5Fot#)ewhF#ZWqjJNe{Z1<B
zRI5Oq<3mq%8d?wOqV1p83to1a3o&s-sda8;-(6I6_gw%`tb)z?v1kN(w`Jt|duar8
zg@t}T0hD4~k$Bn6UPhTP>j`)E*91qEypS})m@CfE9M%(Ad3(#)e;2=K)383W8i#(j
z$0h*3CDh;4Me)3<1K2#RY|Hi~UJqyvE$6M1;nMNYLQ`(zE(K|zsr>QxU9N~|l4$9S
zurI-7?JF-;lVa^ZMvZ+AZki6Y&s>)T&7E(KZcf@kjb}4OrK?XQT+OrEb>8F+t6O(^
zZT}50sMh>h>g3jUQvUeyJfoW2hpm!#bxf7It*q6MAg0vAxt@z=4Wh**v*rh%5BvN)
zp7ZF~D79V)&xfcS0h0SNk)?Kp)PVK_Ph>Ua)>2WKFHQ|MUa}<gHZFR0{m~{=OLmlH
za6P+XT4TfYKe1iauwiDw!;5zqi#?%zu9obmzKq5+?qW2}h!r3{+_$bfhPy+!Awcn_
zIIv~uCz1+Xp#={;mS@Fy+Upe&zOzLY0kJG@QPlWSjJy;(15;z??bVR;eu?N|3QAAv
z<GJ%5>Xy7cj1K{y!rp7XEpmilF2AG6VN!BM25nH<7kaiDr@}c_-UKnx`R&4{-tXS=
z69g3^i0(IeGThNz)gbIRcXwq$w*wX%cM{TrRq6UB;9XUwDhHpUv6lsEpyhJ0kGGMh
zW4rJXq)WY72G=?#H{6+xx*@Da3H3&-SL*!jZJ4fUK65Bxm0d##D=K2&n<J$-&U41L
zKl^jlhiueGnR6&SKq9>g`02r2YmagxDW~BTsqsV02I%zi@0`1Kh0*8owTl`n`-w}7
zuk-giXv~*vdaGl1TPtI#IzGAYAg#cs0(%3cHZ7fHqu^3E=g=z2<?41TAZXmM-9V+$
zr{v+h=6vbFjqL)`;p*>c`}7<)%X7&saJQqE)<jm9ezdSb%dd5<+D>;QZH)HkOWPbk
zC@M(kWAx4MmY-ybMg4*zToJ~HbQ~IJfPG3=zVmRO9p690MAm)NhnqZcl#K)7*~wQU
zLZSJ(Q-BD<x}dgrcLF+z)3ldVA*=Fq@_t+Fc~S=Ke+n^2o@8`rkFpYa(V^oQ4fkYq
z--R{SWRjPITk)>4PID<S$lhq;$0OPrXDd6Idy;ZsqDiyl3gSCe;~@p12;Q^3_cHDL
zXie~*erA{0B<x-|&vPb2FvLPY(1n6ql*X8T_6^avVBE-oS=cm|FE$EIFDH^(0jk(g
z-@FRGgJwMm=i&@!wL0r?@lvMUw95ngd+k-!R}P-{-?XNMbNYX0X9Y{mzUgPKOy7LK
zfi}g5A~OP;NpOk*zs)m*|D3Zg-#ukXT<MQ59qdrv?sRx2OKDS5mfqvbLp&-3T^g_2
zLE&tmYs6Tew7YT`5pWTT_i_7IOQR`a7-iq6yN|6<<+6i+4f`sf(Qrr1C$#{gx8vSF
zrh{##)zZ#RbvE64)sXen6YYNAy`6TJFUoohPA}Pg_h?q#oh0T|krDp&rPHTkP>?0=
zZhq>sBXbqf&%?O&#IT}LD`uWt<|VzKsqa~0Wnjd-_@rfCy{!&w<{YGcnNK67m#C!)
z?d-P5obEMv&55Rx#i<CERK@v@>lkh`q!CQba#nxvIz_y93P7_6t3cg9ezxN4T!M9R
zTg3Q#+NJ_!PMJ=hTjj*-fB~8A4t(5<3nbl%vVnsff`V;J$s*~?RXonNzn@{~J_4pF
zVcb0MIa92X@0wI&TqmUwaW`2um8(kiLlV0ga4{C%@~PAel77Ud8~VkJKPekhb&i=&
zKQ}A<rEW*)cs<ValKeg%@;18LrqFd)gw|_bXg1Oex=489#BR{f!Alku94X{-CWk2g
zmz>?t!n$ADtnca%myOEG>WbF~13anQr*?^}V^??Yhp_g0QV%LAa!RhA)iE}gn?{qX
zXOE>_Y$1PVH;(=t?b^1@TX)A(vwULX$;(Acwu(2q+U+M%`t2%DDgT~s&M{4VZH13}
ziJ>q(@IB-C+(vtd$I#dj(2;B9)WgVWx`k?%w8D6ERL*ro%=OQ^?E8N#)IJp<1?hPL
zTLR4SJHMyQ#ecG>o^r&Ik=cFTs!8#uD&1<kEU+8^{zV?mS#H}Pq9o|guq(01-LLhI
z>+Q$sAm7GOlF(3-<}qNf{)fE#NlF(hm2^Y%Rkufj(3R$k7XDXGd|C^H=e79&$6M5~
z7>7S&RQNK6*tgq}BSWjp<4$<Vp2*{Q&N2RIEbk8(giwtX4N&~}5fza_^`FX7CUEO;
z@@n`E*WW!i#Em1<y>}<MrMm3g^&`XGZS>(S+GZV6ic7Ehc`xigqCU2vemUL5Q#UEE
zBtpT6LGx`qsoAMYY7_-VoT5sZslayn8+Fj|*@Ri%V_c*@`Bmg0*jDKw*HM$grepW5
zlvdf<<sc$3%#=e_xbqp7HCm=-&WVE<lM!XNLRt9^enx*05CBi-{*McLu<Ic=(8X@X
z^`(7#Jg(HAD&LM(clL^!e=H_;`CzyJ+bS)Kap4!*`G88vL8*4soIibM8^fi*i;|Vb
z%N-p*JQITrWzYi+<UZu|L=3o>;}hMqDG}Q7`k=LTc3Vz@KOoKauchLb-jhIX`O>CH
zuTzuisKM432a;)1Zrsbo$yfwi79fulz$U#x&}fUoj04*or$BcvGra!D(=XGCH>_$?
zK=9^6v77swo?IM)Br;PA+-mx;g3^59ym&-f$T^`eubW~QZ&9vxy<r#u-f72AK2w&(
zGv9x<P3yhX2EvXoSAw!Eq%F}0kvM@Ztfu36^Z-(m-S@k5bY+pf?#N%r?8Vy=KiyyY
zsQ6g3x^_E^B#NL`;9IAKWBGH&)zf*pVid?BmI)_5S*XQ@e!((iPereDh>%Y0q>e4Y
zA&e$UCN1xkGEy13F^p2`4R%(_te;Q<6M{!cwxJh84VB!f!m)}1xV;f|@Agz-m>vS(
z&M7v@ug2)O`x(eE{I-f{4^q=BoFw9|q}^h~;!ix_c4^GMnpU2Ju?d}#`Q-_Apo>(L
z^?kB=l5F)kTfUWq+~@WlRYm^o&>&bVBsFeEI%^HSyXgDXcusrPGh7J_1P5$jWwt|%
zD~(7hz@RPQVn68aP#Fx|dv3gBGcuBbVel`}R_w<%jlwSV<X03OQkzh|%f{y4jQSj+
z(lU90Gx)vhgT4RZAbxDGQXNK`bJlmS3aceO_!Rx<Dr!xMjh^iqlrJhXtLZS|$xv-D
z-aQ_$^DXRs%Fbez;Pc9D=UE;X1N|=bT&CE+T*-!kmEEs+S<XY>`%#NCN%TS>9$)8(
z?E1(Bk&)+UMlYPOw>|#mV^Gg~tX1r9>@o;CDWX$yBo2+?iM`MX(wPf4__(8N7fa7H
z0KQtNZ%wE6>kbgnL<=JvM`1W&ZX#H`*VE+JHsKh@92ufn<gFCeV4(KDleOr6m@nU0
z!SpNqW~0O2mtit6{|`nkRIlp#Hs3GXH~zsXGxC?9keuYKupTbUdrecy42s@*13ZN&
zEIUV#lLp2S&+}Y*ZhbTl{<qm<wEgJKIeTwwpH80hg%kIek=pTvgI|=lzjRJLVZ_l(
zz}aF4<0o&2q{FkdSyG}7)U#4h`)Z?AbKvl(e%l?VQH?KK<;X^{<A&JT;c)C(Th?v&
z`0d`@{*mUnM9}%p=*^w|2G-9bwr{INXIr4>(Z=It+U!NYCvW1s^dE%RL@=h~PCY*`
z$qMyD?F|08$iFX_Ig2dqB9$zYa<N?+7QWxYn8Xq3_H25>VH4`8#%UU_m0wF}ns2I|
zq^QqPlWg&iAfwPN@`0*`KU_$0ol5s%bZjL3fu57B{od$TQFrW^M#XdWrF(cWyHq;_
z0<r))$z*4_Y#dcdu3ldE?&QZqEzoJ1t05Zqn-e|CnR6{#F;<MQJJ1xu59E8N4idZ)
z1&`_;1AGj`?{{_pq6|hF5O_sE=z9q6cB)@``3!zv!8~?%x{uns{fonH`@H?-^^0z_
zUGuok;Q^);JW;9srOlt7DAxOkT}%6=Kz?j{e(}wM!TXBZF!^cSEjFUMZDf&fn<(wa
z*`TFtdk!or#|9N@nrP+bQBSfS8^^xcemsh@huIS>G&29Dr4u}zYfdAGDc4F%GVPxM
zJei5L#`2DjnmMVlIL2*I+*eyvp97xN4y_DcA1*pb$Eo1xnxrA9coi>#>j>g!buVk>
z^J>)Q5ieA_ROI>;@TpD6X-V;=Yfs&`ag8tK+qFroT&7zvx8u<7qC;kwZq}5g+?6z;
zHkiuSQ!Jcqhw~^#sO|T(sN~MX+^ZP}zhO|nYnlp0{|<LqDL|Lk5&vts)R-!OQ%YM+
zG|XU07x@?9S#mz<Mq(!WA9J=D`O&~TON1mEb-^UOjp=*O>5&9d(@*Ezm1M2`NvVjX
z){UcbF$azPq`Da4HNb@y?TS$9K;6Hp$d>D<p)tA66X~jKRBScX)(2kvv8o#K=&tV%
zP~#T%t<t#~^UA}<Mw4-6;shX2CJ}Jr5WT$Ux|A7I2{D^4P8(YxPR@H!IkA~qA-9Et
zf|4@x-!Asqmatx%svVq6?7&QPoh$jqKj53t6?rLDW&N9JCbfUI(xJMSe4U=ycE2Cw
zy*SSYG}d`~k0^AaDR&jbJAuOvO((Y?5Io<UTo2)Z9%hZF!K8bn6g|T^m6M=lmt+f}
zj$0i6ozk@`u<<jS{{h$9HTd<i@}y8_?YiUs&{zzD#wirIRCFxhnM3V}dNE$qH{9-d
zb1rDG5sjCy99HV`(3K!|<Ja{V*ZKI?`cY$WjxA2=9(Ef#$n?fwzMWS?0xqYC+u35T
zA2W4f&{}S9r}dZE#4|I;qFXP4`JeCg4RYY6w?d(#;A8Sz*MBa+Z7+x!e;V}9Cd4^r
zuD5aa$iS}Y+hth8B>#pMJ%J>wX)ET4#Gb-oCOx)WI{v%GlFM=C=Pe8NDYpZ4z-T^B
zBT4B+f7%5N)KU`5hdb!Ee=Lvvg+Tj+=z1n~Py&>YWoK!`BcBjMkOEy2Fj3@do``Ra
zT;&{qU>7~XhKk5r)Y`vo!}DWq@Et+XnP`7^{uN)<hbWR+)(>1V)Xd1D{J1>psyPWO
zSuT!9u086-K&d}z1D^cp;=w%25oMkuYrTlJ-$ESa-<o2nTC%f8VC<%9iJ&@hY|s8i
zcyHdHK@+(`)vwBnFsdrDwe^OjW?fcyrU!XlDb8c*k6q{g0mVQ%zX5liiSx3^g$b2p
z_qE^e5AV^teBEEZ`B(7aih567TnT&a&foZ7-u|Zl*;iikFJ1epU3uXZyKwoMpI*LU
zr&n&+#mhJB^zwDPaOt{VynNj*UcPRpm#+EgmFsr#3pe~f{_#uppT6|6eeq9k*`MFI
z?Jxi3U*(4=aswCNs~0cf=9Rs->wSFrl`Mag9}3Cu=gYs8QGX)s_MNwKQ+FF)p3V0g
z!r#@6ynpv||A+7QJJM<Aiuq;T6z-rB;i}f^>WM>X3)eZXCDJqM4^=8_AH-*D6E#ON
zEz4u=uKz}Sa2>!}Fe69nc@%?ad9_A`3(XVrwcH5EagTU`EA^#58rREw7Wg!gjJG~!
z$gLd7`O;^MQ;rw|vexyY`ZaVT7?di9yx1>rOSp4PSPo|_B5Li`o_;DX+W*kB%0m_~
z;_EvUp9z=_N#$ZPJlO?9SfXtZ0596OPk}83TYwk6Sa9U#c_!eKm|_TRQplggqq&b{
zB6yMWGDfg9361A98w19OW#bC9FkziisyXZ*<}&tOuq5ijf%6zPAgLqd4m1k9Iow}t
z91)|+gE;FqE%tXCUsx!9Y9}}-ePjVaj&+{T{?VV&Y;KBKDAJN>V2i02C%_%;2Xlz+
zT`@g^C-~p*cJ}nM&)bDd*Zh@N|H|Nsoxk?=zwxiV@t^I>H}Cih*S_Xg{`i%{=I!#e
z!$$7PbvwOs{jk})a>FiMzU~(;U-Ju>ulwoc>vr+-4ZC>dhF!RH%`aSvF^Bty`G*bS
z7hd=a|Faiw=heTs<x9fxXVdCEe)UDk`SR=b{=hr6DUFR=eyvJu{_=~F>-~cH7d+m4
z+g`o>P5bws{H*PFJI{@Y0lY>sA8{2Ofktr+s+M@&qD`{j>{fFE5$f1H&P^I?PUsEu
zf|v|6IMh$tRcI}foJ!ipz5^q~1lO?WKR1g6NyVNUHK=d85!3YsK=C*@JKY3p$qAvE
zu<N;kBrrMPX?p~*(prx$Wr(wCO0_U(5XX@p)A%aJX};hY3>JPQTE*3=2ljcwQ{W;w
zRdv?5p-K<=z!=83?#JEwFoq^Oh@*=JlVUPfffYh3syJp5`Vur2ADu_rj`13rP44Er
zLtK`RDc*t~n;z-G+uYhHqfZn%Z$f9hdjT{KAF%;(v^>XxuZ?)vICYT{hwH}}5^fG?
zXK}1xLE$rwzUu*tOgRFK3UBRH84`q8P}Z0#GQ9EBg`9JZ=aD{GERb^@Ynw&kglu}(
zlIvry_!&DLH{573Rkp+2;tTLX|6K46Gj_YUqIb<-di72J+8h7bzH;-g{Oa|u`js!e
zY^Rs6`^78U)wwG-4p-<dA2xLtFCR8>aW(J4rR&><?r<gVu%Ww=8@|&k*X{K3jqP^L
zPcL7$)4ck3IDYw$U$Sd2zaAf+sPDXkD|2zxF*bzxH+S)a8u`V{v6-tcb&e~0@oC_?
ziutzPc<BxQzrXOJKlAMG)Yq%DrZw;e>nat(YiL-rsAZJptc!3CI^I?l@m*R8|1iAO
z*OGM3F+2=w3o1cb#{6&{vJd>tn4)jaqcB?3I_Mn93)Tlrv5s+$lIUU$1|AqEQXY|L
z{>VE(ApRI{#TVnB^mDYA<p3N*{eO{jl^rNSz&YC1oCSQWb55I1sHIjhI@*GNgnQ)(
zx*d7!qClSd&UMh}tY_l5^7Hsxw{g-+nGv8g7*M)Tj@q-Po&cA6hexnLhk!}o?0aZz
z$84bZs!dTGG$#BGSP*9eArN%V^Tn})>%t$4UD_id0#A}}D|F=cXhZLD$@rB`!Y1QK
zypdx;4{_rTbA&^Q12vXrC+&c}R&Y=it2`qQPc9U%iYFiA7{-zCW!nS(=#=%m=CtWD
zjOhAgc@8%5G2vbo5rZ+Nu@Kk%{cdN^Jo}tqymH<C;~#zHu&KLp*tDHqimP+ia<g~g
z()M`U_+8jGY;im{dzb3?VY7GLPUA`+ZTPMqHip~A@$~Xx{-rOy<X?H^PJZ}<e#4(U
zdkx;7S6`n}e?cR^G#NH{`JTY-J%C@m{Vn^mue|1$|M+E#jq20S{*LeWyVZInUO;!%
zwDK4~IcfY3jW6wHYr|>flb=y9IMx~uOFoZ*ztyJ7X&S7ZA@)`)QME9ZhsE&-t8DX=
zt(rS=qieoxmWJD~Nh@3A)hnjSZmwtL1SCT^Fb~)OS69^f@ghd+TFfh9A}2QA&)if~
zeOx8QTCrocAr6Gg$kU`L)J7)Dy%O@*3n_?Sz^pxo_a<Y$eGKxw8Q$q61Ppex%?ayC
zn;l3{1jak-`UMAYND~eL3Ue%utH5YMRvxq{WK1|cc7+L|X2A$?g$d`#0LUD|gK<zh
zimPrUYcnDRuq}Xft{Q9J13_v-pm{Vtuovu{?2r(qe5c$aUxK^XblyN2`ok0{2aJjQ
zf~-+1V=-*&hI#h^5AvTm&SO&hGjD6`40WzprwENUfP?-~_Z6e8fz1z~EqPV^yWP&7
zdG`6km9;C^?Xa=CVW*c48?cM<(rmux?z*4G=I?S`;oCNSm#%G_!o$YyVr&Gr<ENYL
zu$LRX%h%v|9E+=fFZvf>c*Xzp%dgp&|Kg6_{OULCYj1qZ<AWft->DB()aEWWb8poL
zEZ(e7^S=7pH~i&We{Fwq<7<BTk6!YNmk&7}HnN9!pMLgv+wb?ODa4Yv4rG&G9)s(O
z)_+nC8fs0kuNNvgb$VK(%@!=xVScwWHv7tMT05hSVa>o$4C{y=!GtzusBV~9W3V2h
zAF!4EY|NR~|9Bp7S45G(abB+Afn%J5Yq^qzw0pcwXJ~_R?YLH-N1nLWM0~gh7&dyv
zFKpr}hl3B@kTr}Fr!8J1=R@r@M5kfa@FLucF3eX*BU}Q*d83D9B?v1rrW-lzcCq2c
z7NjpaZXgwN-I-<F{Kk@kYDni~KF>7_ozD3&Eb^)r#5&Dqtc#+;ECUx@BxcZ9k6--w
zv9TdQ{T=y6+<pFpdp}n5?ye(tR-#|egM~HtMyxq6@q%N3Ljs>Rw6u}wF(P(t{)iEr
z8*q}?rRWR|VtR5E)~KKp|B?gXU+OCy$29_i;YK*v-z>i8z4!Y^KKilkLlZY*BWLje
zi`<;WOR|@@mtZel_Y0S<ALeZ14lmJe@4dSmR|JPEewVMOukHPOo9%0P^|0aqU)$Bf
z3zx6?#VarR7ryk0{qdjP^sCpt=70X>+ji~Cx9!hwyyk!Q;%&e7<=5>`zx=vgz5c3y
z@r76X@|Rw*i(h;(V~#j3Y*!HTrR6QofBmcf#&)|Mtic25(fryvai|ZZky&@lLu>Bs
z$!Pr+?F{zmhtWiiF{KfL>g!F^1y{Lvok$!*&bk4JJj;IN6g5D8*FPvc*e`Nnw3u2=
z9r$aTiz65l2wEe-mq|=H+XllqPSizaIEVbN)#<XOu}>Eq+U|z5kZ_GUKJ;I*S)2|%
zQF{v3E6X7?CT-9KrjeI{ON<@$W|&&%|5&_<|A0%rN3TdV8qr7^0ETUT6V;e-g5=E>
zNRfS))I>BuWE?Cn1@PE-ClHm4$lLKBK{Nq-H1C0^#SMKo!NBfL1U1D|$zTk|r$|`Q
zKxSNu`&JCS7f=RNbDv-=j5uHA-7*r6$-ze00d0uwb~B%1p#B5Rm2q|OBRnlM;M{?w
zP#)LU$QxpT<HH4VhMT~cjCRPL#scG+E7T79SN{51I6b}K`~BYkr+@cJzp%X@?{H;q
zyV8~$z}O6J8=@;W@+H{V++Dm}o40sxUS0{zu`&L7zTYo5SoO(WKfRor!0l?|_CCPN
zhxhb_-3xI=ar+=hyw|TbgnV@|Hmn!6&1L+)xV>-i!sToJ%(KtiZojwF3#XuogBU|P
zsIB!{LydyAV^(V*XtV1f?+rZWVkyy~eTW~{KPpAER<(xLF8xGzQWMIClWkg)l%G5~
z0gcDH={1<fkMrF-sLWZ5#VdZF>~XK+r3v{nZWt?KGU5htg7I-|#e*@;Yai<=p6lGN
z^Tz(Jx#1If+1Zp`8*Gz~=#IpqYX*(Uh98oSb9zCg))Ke`e9AiOk>lU~hyJsJwphZ}
z#3=?wD(M>tL@?V9A4D~7CRR70#^6THo+5-;pz(`6o90r!P<+%5>;s(r6*GzTyt#mZ
zBJepLiZ|@i{7Jw*9+N9Ro2@7ha38S`A64`KZSiOHGX$mLM)3<rrIV>3MbM;Oil`EE
zJgx;rF)8Dn>(yh=gOUg2EIdy!h!60Om;!#(G)Qp<CymY%UWtFtC-HJv2V>rF40ua@
zCg)wx*sY#=>M7stcJ{<aKX%v%#e3!8Y8<|_Nt?7w_5QuOs<*xDdg+?S1}-*qxLJ!0
zTYO?SH*>MMjF*ZpUC)<}>vqHPO5C<V!w+>_*fxjw^6*96ux>9+pI)k%FI>9r|LWtv
z?(cced+g&+egbqUYYEpp>mhkDMO%ub<v3Y;E1t*?^E$1qapTW5U^$-Z=rkVnu49+$
z+cSZ&Sz<m=yN0!R%uk-LHDBw;bgr3mZdUiDPfqyY6SZbn^nvG&)Isuz4R^K4!(HAI
zSKy4}o^0yxt>+E3WVNxzn#HAg$QMWno5FK6T}NH`5YLc%{+u`86ZT_|X=9u;hHGWp
z=tVk>2sJV~gUyeJ2GRzBnc%z|ySnkvbCycc<Scji)(FDp4fenm7OEfv=X5E+v9cjg
zX%b80$?cYf1b7)m5STAT6<L8U%R8)W%>g$D#UD5Dm{7j8`0;jX5ND-GafbgfA1X+y
z39pz5BM>L#(V7tOvh)wQ_PF3!Lfh@k`WwcD8xw30LE<c2sx9EZ5--0HPj2XCOz<d}
z<s4!Jz#+T^Gu=?gd3Sfac=6QUd;k6Z&_DPIfBM<ywySmd0g3GjS#6F^^Zjhs^QG2{
z@bYVYFk?H8FZ*8JUW(nW^u>Gs;)-CrH!xqyjSc2y_^Ot;dbn-e4p$=KDq#9KjJ>$|
zKKQ*6FE8iD^_gd%x1aupkNA7va}_U)+5i9`07*naRG<Ie=YG$Op<QC$^eMP^j%FUR
z79OcFP->l;9cmbA#k|=g6_0U@^P+A{YY()Uv9&S0wg!wAy$Q}YyOpaf)YhlE4{9%I
zv#lZQ4?}E}RnCdy6dT&Ij3GBga85YLMGE%mA!Ck$tF;ejN{e0wD7P&x$hm1^?9<qZ
z;CHfvcGMpDB3@T9a%|}*a|O-D{RO@wwvbP)t)))s@vfX~t{1_pNT;HYpqRueHmPCJ
zW(39-SDY}#(uB&ydv!Q9DlyM-j<KVVp*b!Dler~M<&p5n1qLy}nyzCgIKdF(KGH~`
z2s@2SdrdeBZ{(ulEF2BSj0H2b!g$nO2r|#bXqg4EBkltST_@XQJ#S=^byZC;Y?szn
zjZrr@5r6s~3Kzx)zt`&#ipqdP7OXZu>_XwGHM5AXxS<dYJ$p3j0ec8Fi(Za9`1<a5
zzhl4ni@#{Q-Oe8T`#)j7_8b2;Kb(;7p}WExzx*_<eo}YakX^`^VBx)e`EqG|AmiHh
z-nr|!k-Hc#55rZu`1Edmm?LAjk@sU`8L=GRE68!?heWR2uwVQ2f9DVV{hzSie&;{;
zb04<ve&;))rN9d?HKL=~n)HsUnAZcX>+vd)r2|@ns?XIGCfpI^Shj}i%ylj{UR<NH
z*jcr)-oz&LoS_!7Z<eTDiK<qGk2wnN1%SiAA;)DrM@z$yPmF{0E3wM_R)<MT`k4Ai
z+L~&k*sEXDxt=?=@|GhW2X2upu`fL@;s|rKwt!I2nh3Zt)}pzHJ!9tB<FVXad05=i
z%CfgYpW1=(0toH{R4&f7X(3FIFvi3~+s0@J7@GukhQ6DxNWpJk@PpryhEC~%$8iWt
z6Cn9Dij7JdinXt-iHjzx3A+Ucgj1ma$_;!LT*N$F00md~&o*rygK1|_v(N##eta0u
zjl;8;8v20r?^bZoZYu_<ebE=T8s#HGf`Tymn{Zv?3ATnY++;x~t;x+CAlFOWlc$9a
zWgM+JC{XeHyWjbaef;B3+I!x6pZ~r0zSn>D@qcc=_Ur%FPX5m?dTqq=gBu=y3F8#5
z+{IV1<V&dW30}N17~jzs@BQ1x*2}}OL5vT3z<cd#(|NeM2(}LAuG0rg;)|Y7{=*;H
z|NOsv(mwR~zwp2J-uL=`x3`af{7L)U?|jEoGl3xS382A|+%%I;4e0RN$j|F+#p&H{
zKI*cqsfDiKJO~yVE0!<Pp49npvG6ImYtKpqaLuAU;h@$NVw*F!hqS&c2i%xcQcEsq
zy=fnboV2cWi(n6zVay%YEN&=Zc#hLL3&;W<j32rtSk`@y3lrq8{fK>mW)2wTZPH@K
zg!w_v@PIGyAe36qW8Ca-x+p^!7^PBpB*v1njIF<nVWp($szVc120V=g60G79I1J+=
zK)lDG$pQ*iVX&O*4vUcegWMno-KfC%o^K~_CMD*gz@z9WHdLL9RE#?cRQXzqHeF+J
z8)8)d6^11;Z9Xt31+DNz*@E7BZkr{-N8_Xg%I8WW9ZTf{7y5|vq!~9^+@dA0lQCpK
zQmEA~hCTCw>k|-#<6vZwH|5AqHFqamDo9A9$2V|+fejpcsyXouS;hU$@Au#NzF)X-
z>Q6lJgza~G+wb@OQ~&T$f8t+$%%A?`XYJ%ad~v(N7GIkZ?~A)$pV+;!y$=tMU4~6u
zeBm;@q#G~4)|W3|&ktGD*SK8I4}Tm!G*X+*{L^cfZ`jHI^+kW?lb^LGKKd*6k3aY!
z-|zRf-|hX0Cq7~qPfzU!@4N$bvuiBCr$)QxkhNxjtLQitEbFI;qc!YKH6ge|)#zH7
za>6<WwIgl2x;M5jo14M5;*+*)yQ7+id2-8m-~i>&>xj{q@^54?E@)(mOmfYa%?Z_D
z<N+{6pDT=j*|eJ>XbxuOi8WU?SgpLdTX00&Oq|gi!4C3vI0god_#tV95=>Tt<j&qX
z9?7rfndjU^E*+b;&ndlQO*OAXGBw~1*7pwhp)}~S*3|S-5T%G1&=>6_HU&*U>LM1h
zC{L>l@*c6-gkD1@0yaNJiH~FHiq0egf`{`-{zw=`SYrIfbLXNyiph0c*^eAWT&wxW
zEf^aYam{c1C{Lc4Gk1$CV#B7=&;$~jFhkrXxI1hrC!H*cf74rNSH@!58a3oVHTsU&
z4+Hd>V&svfV6Y!Q05LdUq-$}){0e*$0*^<nI;;iBtMgfyYi%jKrr6!CzVL#7;>l0=
z2R`rt+wFI@+wbfrfAYVx5C5}&?oWL5SM2Feebzto-0#Et_pUj9?_PYLUVb4nd^jV%
zrX{ZC;Y+eHAHHWVuO8NiF|PY(p8I`&`ct2^CqDWs{&WBAU)WFn#D8!5-675o{0|@S
zPkiD@zk2nmzw`a?mw-ugUKkplH$1W6TrkD8F|9-9sid({Z19+Mw&}8IK764rNOz{k
zCXSmXQ2VH>#7g4}FbNM#)nEZO94nt%E*J~d<Qx*?5e^VEX?wWgqR8+8pUSaTtqp5Z
z@LORAKzN+bI1I!wbKGmL<R-_!5_1(b%G`P^sXYR@`3al2{Zq~qBgKaEEGx@?tDBWU
zgHxW2M@c4o)3A2tJ^@EqKjyyp!eriwRGbN&3N!_8o8Y?G8rT^S+Gc-UEJGm(QdbKV
zns*7PfI2F6Y)BZ(=m*b>00STPH7_c##g$jaz%djT=3V}1Q$%CiCKkDq!d8^Rf+Jgu
zQ4n3?W!%U{vR5GJ<^zeKm{L>SmKiWHX&g9!agbZVPpgSJYHPv8zMkhNLX~zQfQd5C
zH4lB*G@pySbu?YhQ>;3l^j&!{PAffu@L^srss(ZLJH&zczw?84?B>mz{+UmI+Mf8x
z6aLUc587_O^WA>$yWQU3_rQPSKlRfe@PG7=|A{~GFMq|K_~^&{U;pZ_+cTf~tUdF|
z&-&A!`dxeaQ_uS|pZs0>-=6;i%l83pSK|KH=g-+QpZcsn{mH}lXFmB^f96x4wSV=i
zzu_PG=*RqtkABSm(f{~Q{HK5F1OCAK{#)B0{MvrE_lF*Q$RB^~G5^eGK5aK|-Si*)
z;GKpqX#jMR8Yek4z6dX<b5?5)mvF<gbhhbZZq~g4b2z9oT2aVst&grX94s-iKhg_~
z$4$&w8^H+5vsy^`Yimxp;k8*~7Z`JW82V(ZC-WM_{4*xn5Y<Rq*`Dfg6>G*bF{FAC
z7?Z=E^HI(jZ@sS?ELOR9G@I6KVP3jNDecPd)eUr0Hn8Vvzn8H+*BY%kOtBc!(e)C(
z<KB)PM-ChWf>4W`v+bZ#00eyD{r^c6XtzTHze=!MW+;zA#I%Wm@c}6MuX7+CJiqxi
z^gD<Zi`v2;#n&2Y`a@hwOqRJo2~t4-V(nOY?)g@3$N@+ba!4#zqE)>?GBIM>fCR^g
zO$ivHU@fC$ry_pfL+y3{F;6#At9i&1HdGl0*l!Oox;#{Im(Jo?Z_r|jHuo`Ky#T+4
zbLae+zYK<cMI+^9kTGMfV3VIrOjyI34oPr4_RVj8%WmGh>7V}0r|r|9{)~P2!;kxi
ze)hxmPe1e_-|zQ_+iq{W-QITlz3=xs+wXV2Z4wU~w*Ag_yS?xCJKr{NhnHOUd)x1J
z{!f4QL-wJc{W<^ehadCb{_WrPPk-jqcJt;f|K>NoQ5a0Qr&c9j(j#Nfn~SbXa5#@E
zrg#qNfWVZsg*+hcD7`t}dJ;`*hqN-qix{vITsy2O^kXS0K95>z{mkTd`o}(^cIzkS
z6{T}rpScD`J||3$#21ez%#LjioNmMq?i_Lq@{pPHBiFo8mz;l#sc;O9)j+QCI*)jA
zhhsDc*iJGzR+?*5+&r$GM=z{Nw4FH(xZrxJS<L@<GqSm(!D*BfOo2y~00^8CurPrj
z-GF#W?5GGSmXc9VZYCoD8iWB0UE&^nxVS0pM-I7A+z77{7&qsE=$0$R!^#?OHrhHO
z2;$EM`+b~9oi^~gdD9$-2h!cKxG{zV&hmh8iba<2Yw;P8$T7uZj5iLAKAKoS*eL#t
zz2S;E6{zMd7mW$|FHHJIAvkit-D$_yv7hucq>Fg!97rA4K>i1F7<Psh<6k|iubUCA
zWCJy_4SeUF@B6J=xBS&xx9sN4TmI^+x9rxfSM90ae99hp-~oH})-8MIop*TunR=6W
zpw<yrOMR0l?uxrUX)V8SY*ov*F?ZuBP&yjhx?kWjDCs-j@A<9l*ZrgQ1$AUzI>Xk@
zdT;AR@`Th`-^cWan^*K<FrwwnyZ~IS)~H`uKVUC48hNlPTb&T1Fw{ZE6HghZ?g<Rz
zX;`hX#91Ix)*NwyhgSZaN}l%m`Z3_jT0^1aIK}GNy2dqBSQX!>H_mUyj9QtS?@)O1
zY}=iJvvfqp^n6PWxhQ)E{$TwTm?aW0-xdOJPC`?|Be>xQlLnN)g=(wjk#D28K_^8>
z;ltxFX32-+K^aM$Brbq`S&Zm-AEO)opt9&>EHj#<3)Yb09@t>ZMSqrqbx~)2f#J02
z$R`xm{nr@eH#QqK%~72IKII#-3V^+eJ7ZZ=77dGE7T(xcFgE;6xN&Zi9#o&mS6~hy
z-3?c59s~b_EsS9tb7UjXnzLeuxoBgtU}Rzc<m9}aJ#!{wKu)Wcfe+HM<QvCO7ZsS~
z*`G{kV;;FMno~+Ku?1)8NqC7EFlsuhaTUiJN7Srp3-cuZ5oh0Aq0W%UBYrJX9~)%L
z*TFX>x!IA;J;b`om-tDT!jGpe=6b{NP1-{HJUo9}RO@NIu)j8@>b&3?@nz`PER4Ao
z{T_{>@b`4mYk=iQhhJ!Wssq@wP`b2sNt+#y^dWIo0~Q@ohH(V)G4NHBn@teT@`*f*
zvz<ncNQF1V&^540zyu}+%k!#$HG&(^>c@t2@-&Dx1FN}H17^TNxk!S<Bn!Obv)SPI
zAZ{kK1R@KvjoJKJfM_tUj7Oou5F|#t3+~E(F5D89<h(rsIblK7%__#I#{pldc?-=E
zR)*0K*ob-BBW>V1M@pm!1MjADD0-&?pkU899?z3BI2C!of5Z$Rfp{c#EJvUL;xS?v
z@TyF4Z6g(PKBWEWH-|kG-G(0)QfSzMtLmKbH9Ktd&YV3fy<}cLBs;Ky7^D4`gRXnh
z2SI7{DD_4`F&<<y=D-*O_HkUcMmU}s9x#(9N!><Z4ORhth*LB~F#xY4K4Bs}TGpD%
zvEfe`HB2h#@+O!?c<sqCX}j>L+RDdTV^59*3*lmlS)ULvo-t*@ru??vsXoBMRKrLk
z69=$nG9qkL#ij5w<IH;iSo>B^a-9<|iWRMd90!jjN2z0?`<gjmV{DUo#qq|+2feLs
zyEIOTmv;uY2QUcUbW8#*3Gq3rBcQZn!IM}deh<MQNRpRsLgIdZ)*uBAoV3P5xVxLd
zSTj5aw$+Bj6TVS|hH$f}{77t^o8~Bd<taMX#-&#hE^lx+=g=4&)AI!%#0r*<=>jn<
zB`y3Io?sg?&mc6yV3<4H3Y)~KX2ywW-Bo2bZ;zp21ZPGrD@NXMf^Qs`Hfes(mGPKy
z5Ui0C-Y}}(GpMm?2tMk+k4H9fjulpI1IvT$<lH$wbLI>;NaNU98qiFosf5i|;Cn+`
z;w$yk;vhCQ#-iKd`q6D`Q^!23PCCt}HFKBSxG|u3bmNn#RCX~o`p1wjV&AyRTWK>M
z(^_T6)w33PI2gc<h2lkVKwVCiX<cAm;5g~Fjv9mm29EILQtyE;!lH1-T07z%r}^Bw
z(#phX94i%2U5x`hPR6d~hjaS4vWaq&bw#~?+)IQn0-^jMo)J?@dx%$S(0Hpqf!4`p
z!v*GDh^c08YQxyZqQMR#1c~$F(}m0N;oT-2@tfds@xqwV7Lt1ula|LgUK^`<3B<t3
z%oU4=U@t*USQe&i*CZCiezmD7-XXt`nehU^B1t~M1}>V(PYmRkw!;Nl;{$e~te3d~
zv+o>gG|w|9!nTViiZ=L(SgEKNQHHp!ib}gd!$=-clPevqni1<_(jGLu;2R)NJHSD=
zS#6W}bjBEe2X+RjPd=&k0E$4$l$*J`ot&I_zI5vqf6Oi4%E9J^bcb9bR&gAull6%B
z3BHK=ySR-yD8z^OSXRKe@*3Pg+<;Bu)O5z2OFmA&0UyOXeQ>eBm~x}WyWQ2AV!n}o
z)?SqrBftb>6JNYuIfurxtSv-mF|XT5`J=5w0GXv608{o?yg`7ZgQ{ooyR<@^d2V1_
z@15=9xR!(D8)J2yYF!05I)0{eeV9A_MkGNyiAia4^hx%#m!^glGqSzIBGQ0N42t3-
z#U6q(w3o@!;?qTw4qcDKP39z(xbC~CdqG2h3gi+Tix!Jc-@qCkA8-L7@ozYVJ_9Fr
zjYDl4%`c8Bp2CyoRam@`HE&Q2h+3JWg{A(mkV;;)As8?uJgb;a7{hMXnw^NL7S_TC
zH;0B>#xA@J96|AA+edY>zD;?Lc4&o%IEp3V3KFS?N5zZsfg-mU)6Nf=56?!%^*Q0%
z@Zd(>FwSO9Iafn=gEY8^V*xdH_jBjY`PnmPF%HGQ@?B}soZ@}wo8Pi;{g)r4tw-<O
z+vBf(k8w{HEj%>a5KtZ;1e+RQEHiS-w_(4~ZEkWlW8BULdw?(INO4I+B`si{9Hg!l
zU#$`C3)lnmur1~{or2$tZp6SuQ{9GG#C&3aa$WXe;{duLcyL{aooTZH>}~c3{gnI7
zmC1S50NK}bkt2)3h!4tP<Q=(a+H3u(=|j(B-2<!(R2LtPxn(`g$41kp`i1v<FFV*$
zyU7=hg~xhD&vkGCV0^9zIK<z_PPa*T5$JlsH(`<px)08?0Ygnu2%N}Jg)aa`-yy*9
z8Bh|7IcE%I745@3icj-j6qljtSK)_vnvaZwo4?|z#T=`GV5GR`f><;J)&({;<6#pH
z+B9qI0sN-9f+>p;p66IPmdFjrm7C6V1I`(j=4-Y==Of(OG#k2^_zNSAe>4xME_E_-
z0XR`kw$(37%NP%iNn}8y)f|M|gmPRz>}$aP{P`0*b2dJVp`ZeK=xgE^*1(@Ue4oAV
zv0M50k$ZRc_|5NW9H>%r|B-$EsVD7c9(l;`x#u2#@cobYGZ$_)?2#A77S>c6U+6U<
zBc2ii$$i!^>OktKO}+=MNxht6TKL8dZ>kjV@Uls<v4#e%!tvr$<CbG6)V5Kn5Cpq8
zW^kDNg1=nIs{Ot;D~2Eku$XvFELcNhtmspY5%wVh?XOK2od=F_<2g{~T*y`V=sMud
zV)NyCpZQ~q=}8z$m-59Y9RvSXfEeJ<W(H1`f6u>l+mogsdcp}l5krMwoXbH0Ifw=U
zK9VcI_c4x(Ra8C3Mw>B@5?yH4SQaL`n~LROd^T5{^)B)Q%~~bOO^@POh*cZ52&dX;
zVrpQZ;k7Bv$>s_Z`I(%cuYh&j6vGPD#WmzAwwZgz4E0<Vv5_;*Vh6FLoKU~QPZUYf
zAo^@r6Hb`o*ih=0vCf5AW6e3hK?Q(ACts2e1W?Bc1I=CM&at++5G!b>aa8NCW)UXn
zm>PIIIH8SRG&`p;++e~dzy}S|%>C;7@AvmT_G-rY$UQrI{MLWvd<j4ItH1Pq-|g=4
zr#^SVZ@zKMKmYVE`)<GUU;e^(=Q)(qj47s$3E=KHA2%Jfq=}OlQgs!74tyaez0T62
zfV+(o$NNXu2I4g9Gh)T2+<YXrHICM~tlQy6n5@p<^_DsZSyz)bK8AMXJmgxX-T(>6
zGv|Vz3417Vu^s~ZmbdcbeM|`#a%D2PmaO$qalj5ha7tTaKcw?{)Oap)!umvtnJ4Yt
z6)TH3d2Ywuci2bkTqPI>Q7WqiL`^NyPVqSvIy}Ar|5)>@H3Ug!lnoS&UJ2+;ur_2B
zA215tukuAjDOrj|&KyKD<;!A2vAEMbC@ST$U~$DiVn9m5B*d(KuzAp?6XN4Jh5+`w
z(5O|fAidPVQGZx)2`B3bYRt#*rW+uQ7)m^qO8yXEBvSxA=dE?jMX~W6I8Y#W%de!;
zbVd1g9S-MkrJz(=E_EDZr$S2*FsBszs<3<6g&?e*Z|gNQQtRmC{CPXOZS<US_10X&
z-y0X6@}GJ1LA&Rkd+eb{AGgoHSevn@9=O+byTg|-@AmhbnfW94?)~vEf5*;0`Gmj!
zf&2a5`yTLLc=9>_VHU!_^LuwYfBf{@8N0jt)n9nP@4f%AQOkT2&JbsV=1us{JQo+d
zc|}}t9P5_r!}Pegz|B;QvGP;m9rc}?6VVyshrF{NT8I><=&a$??BFQN)F{qYckn!&
z18<<w5kKGwT!VSl|DwKzzWcewqp(T#M(l{s(95Jb#dAAHV?)I&eF10~M|hPQ0gvBZ
z&j7L|4$h&luXqH6+0Td(_^Tv~Gta+u3(V8PvgUNPARA~hcF|mte8>65_sgCtG!_Sn
z86FQdWOZ~fiR)T`!_Hd3W*a3Fj(M7+3oYXVF%xcFY-uj}(>!7*FC!mwAaPn*kGP<~
z_xwrJ74d}ALN9eb2<Z#03U}q4d=XBWIEn!l8_v%Y+*mROL!UJdAA1xawKK05)l_0O
z;K;ThCOEEZ`q;)U4%C#+Ki#I9;5u)8(<U6x*c3nVF9n#^^Ax9{cxok}Up+oIw>oz2
z+&MpU<}89|Rmjs+&VBuN9{2tJe*ewSf5BgW{f0mP<j>fCzxU_A^#gNv`_T`7=wEpF
zK7Zc_ui6iP_#-znf8?IM-TTme_VZ7D-rxAfH~qrre#7^>ojrcxZ{6MPN8i8U4?p~{
z|EC}PnE3zp?>%DsdmbF?O0Nfu0dEqpOwF9acF==Q<$u{DNTb%~#GRIh6-OpIh@3E<
z$amIsCEnu>oxx0<NU@vPNAr*a#1CfRd?g_<k?wKRfqdlp>3*!woo<q<v0tq(GA~Dy
z-bgczC&4`)bA7E%8!3+Blw1e87|n6)paqVPa>{bl`!DBA8$GFEgzd_&oI?~6|B;uD
zvHq=F0`ZtQQ0(g5&{C1Bo1UXK=~zi|5C_~qFbFt4rg(G%Rl$>xvmr?g7)w1%Ggto<
zYxBwD6QYhiz}B!HH%W+DaZ-XiY+#9e$Y&F357c0VL43RvR{{>7$QKA$a_M@QaC|p6
zW7|F-Cz}}?#=67-$Z2y23=}(ziAp0LAL2fiYsN&JlV!@Q<yx%Ptf^Q9gU09k+&B-%
z6F-P=$#uoY<3>CYYqi;PD79yNsN?MmldYayqDBaLbN`;*zuVbkr~gl;YwrHc!}r<!
z5B*-w`;+(IXYYILX3l=}o}J(S@Y9s@(+}Kh4?S^{utDzahkxr&yzgFn-v=)q8Wsrp
zSj{4SI_Aqc#G)uy>&a9nqE?O@0^QV9T+>5GoM^){*kpfJ@j2f0#Bli}HgXu^C!ZCd
zbHfj?9RCUKUC+=+VB>}Th5#Bj2`e6t@|>Cjm1`~#e{R%B87PVEyahJI=rYzCi}M{!
zqTD>!so_k_xbZdnFB>bIFoOZ}<h$Z#@Qlt+SWSGCiFV&p!=C>RAI5-PK^Ip5p-w=`
z%vB|f;Pk5s40saH1*)7dt8?OF4}I(6W%4BAweT@tC<+BJj>SS(@x)^xksBVFSm%qj
z$ev3v8nK)6lLY`6<?${|vR|8CFWiCOv@!Wj&2gHjh$Dr@2HUk^0f-I!94qRWFK7lD
zYQ;`^&&0Z3v-CiL(Y1wQL!4?uA~8y_THY3zO}gYDtnO%GWbKYuGg!x9O9BDWEb=_c
zo5z|2a_kt+ib2uJ#eMtKt%S;0MZ7=!+oycD+uN=0z2iUn@sI7tKmL*Z=*K^{Z+-4j
z+uid}PQCi@{qSK7w@2^Y`=g)xFO{d6UwH6-f9Q!@>}!kb@4j)>fBwOH?B4r7Xm7m3
zJaVp-i{#InL*=UGS({%^+KT_>28b5~91oM_zrsPO2+yDa(Lu#I_=`G_Hd7kY8j5)M
zH)yPk8EdC=AZxX9Z#ZGzP%}B7ayH`)k-Y2LKw<!lF`tyat$i<ePC+rJBVWjQU3usm
zF4W(mr<ATp-<T8n!gGBL=1(<{lP4YkCr2y@UlX6$<WQdz&w$fZAI;74ie4s5V(Nw$
z8@3D(*KM<rVWEw}gY8w>U~-Wxi30##?!wW_B+}v53XpSg(Psd9Y#JB#R6r49(Y#nt
zh+Np9`~fYRXE<poo_TRp10p_pp@m!qY>a|0u?~$w;wRLw@Fs@Re9=B>wQyi;<UZD9
zEV|0cN)O~8<{(h6d1QKnh7bwmsB;0g)p1YQxOw#kI&C%*M_D88Z9ZxzlnurO&jDk~
zh4mxN7z?TDsjwP1&4?BpKX-D@&z?Q&h_PxjCja1DKX3c}&Ud@L?{+)e?{~J}?R>Z2
z`)<EWF0Q`+K6~J?Td9vn?%mmAum0D{%-v2Oyx$*u;?<1G%-nzcU3>bMK4|;hz5WYN
z{*M3cj|4l!rD+6@dHfsj9dHru$4#BpIcPj7GQte?mYfp-kW<CXx?nD_i|1pKsLYFa
zjrBd<3b3GCpU3og@#Hbvi0xE!tJXo5ce7Vghgjg?#t)U$1?QNT!I7$uyk}30Sd);)
zHm7OmI0uSv@<#PaeB)#6x)h5S*oiLM;rq#Z&E-ueS9p*g-wzC`elh0EO~osC0JK#D
z(cX>>c49~z+E|;T#p7n1fX8!?GLVVDL7$+Q0+A4IQ+kV;MS;{RA*@kZF!&3xGWJ<h
zW&VKMRFHUX8D*Y${+I{egN31(<Fm-#3`@~vAM=)6VO|w2JU?PVTY?EIF0;a80^|^;
z6w)C+Euvt8a>s^3TNWucrp(iLG%bynoAIDqA2w*T1=*UdXoT~i<059Zb%ay0QGoTr
zMwO5;j#zAnD*~`<QUCxT07*naRPt`y!YOu?MdB4eiCuFapAbg;fZh4?=k3hdGg6Z@
zhQs4`zWvL#-|hYTVVBobj(_3d`~88(Z>En&@7?+1H~)^}Io+=4Mb1C^-k0tD_wD`u
zM}Em}e&_qBG{~Pdir5s2fCt2vqDmZubCC1M(WEuRyPRg!T&FoE!Z(MB=3rj6O&SB7
z5#Q;z8g^keKCzK}!BpyL7(@4M@X_kHq0RI()Pv*rx7q;5G$*YWxRz<YYJzMVsEmE0
zU+VM74{5atuX91V2Ro1ha}u1P?&C4rtyX4fYn3<Hk(?wS#b8nAQSjAUEAFyWI?>$m
z_>KoyPk|D|pnK99L=zqexOOXfUKi)Uvj~`)!kUbji@?FNiF7Z*7vODqj_?yw8d<Kw
zQ*scWY14~&MjjOp8eL)69@ALe=s->pi$_7gJS@4zV=1Zblk*2ojy<#H4N}Ft81IQ=
z<PrC&nV~X^2Q75uvuO;qNWYbc0e@NW=@xRvrh_qu&Qy2K+Cd&$-V{&7hzDuC5Dp3)
z#v<6zcz#CiWE*qA@jy-E!NfOV9piH?uIKl74-aFbN4~&rIx=(n;WvE0+xaJM{T=yv
z;g=ux4?b}<<GcFseg3}3Ud>n^y?5{N^(x`x^uhb=p^w~5Y(8@TJ^s)~{&)Yet_jiy
zYQZ@F7z)Hqc#Jn0U(2I(B-<!jH?*#0%^ryXjw82q-^znG+p!*+Ki&*RKdKEMtcCTB
z^4IZ!2d&K^j>^T^G)5|#Keomw77N-fbECXR9;O&IFFhcd(;=O&hS_577>n9qXu1CN
z{H9~-3b3)ViE~z)G>y5P+wjsoMZ>vs;gxSZbl$gNoDf(49zEd?|1CuTg3Ljhyy4v<
z8#2IWTis9iP(e2wz@IVM@k2Kgy21bxpM}*$&vR)~#v>w|aUwKBV1d<u2@^kVdf0gU
zl#(o-=mgwB1(whidzUZ<!Q1*AiI{L)=Qv?k>y+YL#Nr{2t}&*Vo}IenZaSYB$i+h7
z#7`|Gm<!ok<qqdcx5u#}+y>itu#|?FcAlm}vuyIR4v{N~JxN%tMMMw?<6I1EK!f62
z8Hn*G=TGd+_8z?vrx?B2`@%0j<oo^m{JGD6!N2~-i}u`ae#CeCy+8f+ALQ5<AHLu3
zd*~Va_IJK*?uYNud+gTVp(^acgZKMGAGzh`?mztA@A!Vd^It#xf?s{%s=x5U3x4&5
z7yRng7yRmrx5|I!)pNteNj0#fta?E3jjW|RTn3B}Hu&_D<A^QY2q6Kbl?=Z$mzGn1
z5vl}RQFDB0k8$A|$yjC%Vvl2o^+7rpKcaQkl3_w%1ILhG2uFKH;e!~uCHO5?_C<UE
zFN|N03t=BHoO)K`=4{94SDV*-*Eq##(+mh^fv5VZg)v}1VvcKT;sr&^dgUkS=8%u6
zkBkFtY%%U=A{GgN0|SKa$;qck!WJYRBP7`)H(ES0&uI)48E6#EKA<V0IQ(b@DY6!E
zB3?toV@y)4OkB?w*O1^Xzca^80N|)$C_cS>iA^|1^D!R5p^I(iahgLSiHH>Ei9gXD
zF1WBkI8q~LT|h87erj|*uHXT%GCe)SOAUC+ap2h(W1A*nu7Q@5cfgEn*1Vp(jsBqz
z=US+S$}w@V#)cKT8~g@Oq(J1{>z`tMT!Z19V+eIo9HJF>KYU^G*=bzn8aPBeUwH0G
zf8_lS*uD4MV-LOmG5fu%--eC9+jp-%W$%CB9=qqh2hH8>(R+9H*v;<|0v8{;-yS@C
z>ejz^<8j~b^SyqD_y5Iv|L%DNbEW(3iBfPE90MQ7pN?l+f_>u2*v*YoZHRx>3u;O<
z3&HgbO2LTQVLiLCLl`51pYoySLG^pJZdk+BKdf<~Hc;bjJvr7t)*#{O4r7GZHlE|=
z&9OtA2~>^?TbAe=tSW@L;R7*%7vxIg2aWgRbj;h6N36+Ucji5lLIOGFh@<JO$5teA
zKIj`<mbX*}?>!V3tgYtoVT@z9NUo7xW0Ke~%*_|@;+0`I9?s*0JXc}?F_I`_tTtk=
z;~=z(Q;98APQ_u>uz5oVm~e5Ngo;XsV|9S>^~zz2)5v5p*Te;nDQ-4em}CshbHfL0
zjn8Dg`z5X_2ahHSKqOF-H|5qA79LSwbsuz#8x_E9-~g?Hu_Ktk5r{7qZ>*Wv$g_>n
zw&OV}6v6@JI~3ExaaxNtIAhlHhzHoU;eIR5ig&P)S`Qvd-;08*T0S5OwV`AT>jCnw
z7!N;A4j;xCaw%JRocv}!Lj!>D%Y7=C^D?rDb#CO3LXf6G;WTa`F43K?-vRT8E&UZx
zjEB^y#(?4kK6$r~KBTb=jz(UXZ^Z`juFz5bq*JOF8Z(vCDjK?p!nuw<kJZ>jj{+0?
z;5_>3bph7=?6Zw8D3z}YNA*@4D%7*{{j#Dq2MmI)z`NmD{Ig9O2WzPcJo3B96_0^o
zgWi?ef<#iI%p^Xtx`6-_$JBf0Dz&~@+D*mBEfQm4u%RYwCW`E3jD5Vpga88?Yuef}
z><#?xet8_)X2G$o42JzBahS3Y19mbAqp?J&>G-iR!?EGK6b<!Z%X5iuk#fX0<c_w)
zF4$!MK!KiHX$fK)7jR^jytMeee6M-r+%=!l$GB;d7~!CdIilV0Yq8O+@!76an<CRH
zWF<#3<n*{T_w<D(W;{6;6T1)`7C6G5QLA%a%~>0@>M+I#o~}A?MZ(Y=M8KNG$#(AC
ziJv`l*3~AVI>h3oF~Noq1*&8Xao#fqU}wH<G3pqR#(^(WrWs?a$<<~y-GY4)3e~l^
zaDcIJ4Q3kXiHpS3=We>=W10VA{f;_XVmn|>og8rQo0%GeO`6w7VU?X7j?F#W93szk
zoDJUx%=s|^&-mkm!FRfV4Sx1(e9UWm;((vzG4^AhRy`G@g#(Uf&4UZHS20&DrdR>8
z&WHA*2{YMO6}Rz|i)7QC#yr@jCxN?|l;R3uA^2f*SR~-poW|Ci2DXUI#NQlrAJd->
z>v0j$kvu%Gt@C-d#2S<g^T~e>HZa$OaP0PO#t?VIaR|Pet_a34Q^a@_Crw&x<Pa}I
zU=dZsk+5|KtBotx(W+=W_=E)`PrxxI#L20)5+0<5nxA^$d^t8MU=W|;F7xj8IQ??a
zg+crR{u|bai8x5x6#E>*WRvo4jixXcEF9MuuQ$kJzyflRixUf-$YW3iaeMCEiJv`t
zwy;FssMw`#tP2s?B7TB^u__+H4%*ik0OZ_|d2;F$tMbhMj5a3OjD#P`iOz%V2nqa_
za!^m|1Mq10(gJVTc4^D=RX844$$XqM^)!atXkuit!U}C6SCdBg)-_yE$k^hn5L($K
z?IEsWBe3Ab3|IynU8{_K+$G##JUynLw6W=Vj~J6zk_ISc(m`pl;l;biVT|NKHI4)j
zCfY`mF$hY1WwUt7D|*(9C^%EX-7$}u$(q5788D_3=QwtX7k$b~&P<71&?h$RoCDQU
z#g&CmiW1nMSjxWBxsDG)-UtSfivNt4{4}u<P9(f73)~bahpWePPVl(rQ}kd?6E0#W
zu<CfXJli6XCS65hiB(~&4SvMq80NqaSumWP$RmFBFzmE*9dpZ*@VM|^6|Brl=R2IM
z7^w-CRn9SnwMJ*X2~2$C+F0<s;vYiCU`M`G%Le(MKY#ek7|Gb8U^k3fUPIFxw7;m8
zf}f>YyyazZeC8SJ9g?s13XY21$T#h=M*h$itlgP2toz*#qLmy=5F@{d3)@`zp*(Pn
zt}ZaFY<LCObDlOQ$c^xa^{PGLpc_sFy^wy&hN03Bm!nv2^F}`d9y0D2$N2krZ5I0)
z18{@2X;nuk$JF{3M}bEDk=LlqNi0e~;h$@BPT+Yhf2lpVKRJ>Qd|`6=TZ^Y+(LzTH
z9|VQP1GYvqmx5j#Yb5lzIsim?Z^{THBAUK}Mq@W<7fGo4Wn@F+*bc06Q6fmlB~-+)
zIUmWcg~j8jL2Hha@YEh8Y&Ak+sI&ourUlYgEe0nW6g%+3y6gp1<M+Ft$AU|`l(|rJ
z3onT0?i*%5dLF>KTT^PfN!!{~R%^pF2Li0dYvY(WS>-qsDCLXs=P|^QkyMXj6g;X1
z<~kIn%umjr*x55@2qS6$3=&{8;msQp)JjH|9B4|Q2d`R8ZJMHRvgZ&p=6lzAG~|#K
z9h(+%z&wM?u2)00(=xQ?UQ=pLs}Z;m4310Afe$b}*U(xAlO~mu05~(4Y&Og}PgW?$
z-eQD>6EiSR1Oh-#jap4&{ge0rYt%hOQe(M}v;Cs(2*(sp+$X*ZL*NoMRI!w1Ykgr}
zg+<48#Wmk*Z&Mg?9f4YvF?h30u{Uiv&dIu`+)lOZ_=hp98O!BpkQ(7O0aG?0U=)F|
zv{e*i^5GZ&<#{84)esP`Ic}o4iFA%hfG^@%hJ^8Ozva_5)?U1{1(JC8BBNZg-*+Ku
z@d?~u%w<msc(*s<uE)X`G19ow90_)uM|41=0A7KL#&0ZA)g8qkfl%QSJPjRMkC!*T
zo2JU6j72-fW2hM~b=!+YQmWhluSW7E-X?#M7dUSkL#|fMm1+s<gqjuOB1IPFmyYR|
zyPZEdZ->8(Ap+{_fHbMRBSwZCrMgk4i~CEQoJm;VuDTX%N1fcg#x@*#jB>0sZ1Pjs
zkLzaALXO9{6W;VSjX8qHwkfm`&uRwDvFc%}5sY1&M~LtajLAf2F4i~9p>bTRY?@ni
zc;+o@EXE-ZRH@QL=MxtCQn$304#si4h@UV-pjF<3t|*29hk0*9e!)ib1GudEvN`$A
z`@q{mgUkN1#j~?c77|V%jlx195*W2}ZQ|;-DyXqolvr%I-^L}k1$u5vaam#fmUICT
zh=as7#SeaMl?#XhZ4g#GQWimGB3N=ELSan)(!jLn8jc9U5j&vg5_LP5#cYL7;(_8u
z*&>F*{S;#X#B&hWuz_}AM_<~7rZmM{P%)mXg-ATTd%Puo(TV!Uc)?Gzoz_5Gfw!)k
zF$Wp5ihFUqHa<9}bW%F*H3bW7;s@2U>4k8?wHI8m*3O-r_?fe3#zsv=T{X49s!mVG
z)qaxT2vNf|#=tpl5S9^geTpM^3^dRDTcjM#9>VK$MNg4**hCyAJ5-l3=b=$Xoe{fa
zbM8AcPu(WEW_`4HDpldPW(|uT`L6q1;0Z%sE3BDrddPK!uf$BYvOfauz{>(_@{y;&
z*76o)2nLF~h1QzA{NHnZ3qP83;tTQX+RFKxJ=HnZ5VqqyZ`5RhUt?(;ReR8b;jv7U
z{xU|8N<flWH4z;<%o~#6O_$m?I9_6kBx=ENaaS<;zQi3k0#Zm$&uJE7=?{Tbqf!VX
z$05H#7?WR_ha5l=7rgLkpxkSD*KM%~jnd3GD-Qtoh-Qcj%&&0ZIFTD_QsoCwtyuCL
z)<wmxfKV)^jU6OTxC9PHR^j2Gqrw{V^OiH>Lt`ebK>n>r512)P7;{}{0AtBxjGz8)
zH#;&0)>jE&5hE3Do@c9=lJ7XS;K$7Bd-N9PSNU~5Ab!<Z^2Gcc<pFU-&9~U5xl&6B
zMZoM>eteGZvz~Dr#OIN7a8aAt#DuUb;5f#SJICLM1=l`UBRM?uoF-PbS9+%YKs`*f
zdMxG&hbx>(VC;l#Vh^e;x8N*=cQ<Z}JDLNzB=3MBJ%o5rv4SVA1Knc)|Eyzbq8TP5
z!SZRGg$5OaTq9HOqL|Smzy&hG4KhWB{)FQiYx$q@k~o&;=zM*>3KhdxY_w~1V5TM7
zjtveOYn+Q}&WD^p*#`Y3CUg*wv>1>qbcOK_KrL?r`HBlY9>nX;F%ij)Y!OB~XKYV}
z!X!|v6ae{2aGJ1?pLVX86})NuGB34P)TE`O^Pp_Es|R2g9+x1n5b3xcA9IyV<gGZV
zlK=~9z865+BtRS-&!#JGt~9oq8QUSAWGhTXnL;lz2Hg3$>7+uxbZ2ln<QDM?7NyaO
zlYJQ`$-F3TgaO1Pe4Lz|cy07>98tiSnzhHt5uP`(H#Jx|{%)>-1kMXRG~Iw*j@j`X
zi8{tP+Quj1l{fk=F0ySk97>JID{XG3hAg_Ox$StG;oAVdKtaDzTt^%suFPwNHN*kj
zWV-MK5hnzZ9J7J5iVNb`dJVOZxXY-dH&6(uD*~|LmK=~j&7*5oY7^n!{Q=)OsBwqj
zLO$hBbEY~T$F18r){D^&=DJw3PChkGLnpSvXK|5+xx@G96%1CK$i^#^7Vz`&uz>^d
z$77&I$m1YKaGJOp+yX9dtgM1{b6#0-j1X*Mnd0c=n>-#!XpO-0U&99R;-(J6BLgmq
zsx1|j;-5bk4MiHQ*g*U}u^D|TKTT(FEIfnFl$YR;TI_aVF=L#}VKq021DvK0(0FYQ
zF^o<EHFKh-X%zA&b2X-1(dLx=HUFiOHZCzBQNC-=^;T(G&8|86xIb%#ISAG&SH1}k
z&6a4b#a%i*ckY~Tf9sZX=*R3pj5%Jo7JrWOW_&yTRkQ0H<0yLD99B%FH(pDFuL98V
zJU43$b=rW)D(v{P-5dovN41Wz#;-KlHldoAXpiumHWH{k+BE2I)r9t=?Kl7|a}dsz
z)&U<t7Ye1;Nu<EC7lJ0J2@@8KIo1X?0sD!CF7-TOUEwB3<rgsq)eIPcZ#XA8sFKJI
zTFIE>7%r*8BgaS&!m(Xm1FxV<UURdK6L-=2u4V&fk*o+m3?P8j6ajokQ>%cms2oH#
zJ;OyYku6yC^=t*^gT4{y&~t!35!#DZE#yWZiKdB*#*uu}zQ%?A1P_yVhsA+~jm~Mq
z=9u4Q<K)GXg2s%F&2^5U<`Hy;xW|3O97)6+d+eARup4*``j(itDeDH&aSqQ%#@7O4
zjjB2@=*Ai6kNRZXw9q1Sg$)%^#nGJXkPm>#n=R1gU2d_4G2gg9X#vOt$KCH*6Lp?2
z2W;?m?&QSr>s1QC%2|C)xxgfNA~eS8L%h`x=pjgYh@ERIWIE^+8-&&h07y6F-DeF1
z8!5iV(E_WwkJ>-7))jvfznBBY-5M>_(WYnUnK&1)JIn$;u$CjP7(~U**hYXH$CeFM
zQ;b)1zF3Fmi}TXo7PS#Tg`OFw0Bp<``?c;rkmtg+`-eKVST_yisW)a|oCqZ_ankAr
z-iIR+Z`VuOl76Q94)$G~HU1J4*60p>@Gn_FSu9q9$$#jvjiaDIP_<=fMDQjO#KLxK
zOmAM(INaB5-oZz#QhfHv;u3%fY|vN%(}^O9t?*KTA$Da~#9lXP&M2DJG?#o4C0Z04
zmx>FXpW>KuMcfkiwh){C8b;j@@{FNzAzfqA$B-`aw8Vn(Gd_&J7T8ThqOH<o0fIGi
z#DZ|!VlEAUSPO8@ORx+>tl?gmGS6I70Lk$=>38NP%qrioDW!r*^r5DFvW2&kbLVoS
zhd5;{Q%xi6iX74^6?pVrfH(Vi95P@adpu}x%F%fMH8T-c*VE?5j81}%5d&FAqRRyi
zL%b!V;sJ4?%>!$Q^h~LjR>ZernoOczfr5OZ1vFqUBYZ)BCN>++avS?H_RMKcLW1Vk
zK8n8R$31t-gEK_!C3lHO9Y35gy`vgttW3v3UJc9Cg>l4^E2LZ5L>)#PlppJ{ENgJn
z`8FEs$G~AfUOG$YJpY+{y>ttSjR7o#A|!%yS_Z`@+rjY~xDV%M`znOuW-7kU<2a^a
zd;r+Ut+BM}i*b}VAd&IGoTd?ui=U0By~atu8Q8LH>NDnqZ?}I}zvDT~h4Ly{*H2m`
z#Uv?=pCq(6`xwb#eu98FL4!uE;BPEr$_X_@_SH8e0}oiBY5aUYe5^MNv7RWG@{!R~
z{8-QuA^^GUQtpxm=1zD_Jm6Sw=eUHGtsIL5QpU`7X8jJ_o4fn@lfxG#6A!d3iW}Vk
z6uxYe;tCm#JY%iX9AR$i8HlRcgD!ghEjI$Pw3g=0UDxDT>y?KBI!)Imp+d5}J7^5B
zqjPuj4|OJ)8Zm&M!Rw&gjFD=3_;LIPtHsJo#y#7Q{L??wajfYnDymPw6{UzEGhT)H
zfHmR8ddcIAZOWRTEJSJ`FI2Ado7jAJt^;$;foh)e-Z93EE1%lbVqHX*02jn-)GJ{y
z`(Lcp%#}9TiInAR;VHGa>%wXxT?B;+v7q8^ASOz@|Gdjh<6vl)V<}ky9OuA#gn5Jb
zoEsD_wgg<_SrJPO#dH(KbK-|Sqj=Z87MzUF(vu)6^eyN47R4wB%GC_X2{piF6-<sX
z3NLk@o)N3xbR~SH8}UQ)A-<L7DCE2I((SMhF6M=U6a)5El*tCNjyu|eF;tmdSF~Z%
z$hby6XeQ+Z3?sLS7d~!{Og1(+-r$(VhP(={)GU#XnsfgAiJd)rhV-0)=lT`IFviGH
z8yGi|jIV7P(oXR&#5Nr@ACo=NT%rJZb_}~ujzfJ!>b!Xjtig9_XthRGegj6~t~dJ_
zH~XNC$Dk|6shc6>f$W<2ARG+ho$G3Xr>jSD&$9#PtNb0XqMQP?R05i2EEfG6j=}j7
zLGr?2a^9JP+FtYnsF9T$)y-MAbKHnm@M9DO&dCil*Hp#{xJE9D6Yw+fnk&Ebv*M#z
ztQdCWyg0Wo$N?kNM?h-;H$W*k1058$jp&w`l0nH$#aI9sgqr5DP*ef8Jl9DxWG00L
zr9V}WBHVr>7A}~hm19K#Zx|b@CG2Iq2~CM?ZJP^|FMn$+Y>ze=pf_L!Hs&2?+~|sE
zdl3vcrI|HtBJ-)e6dmQ(n^hp&^Dn4NOAVujH@aJmff#eG)ux44=*$Z$UOA1mG8b~;
z1BgVmvj$h%U|yzkh$V89k%;}3elt!gs4YIlJaaoaIk7YG((R;2Y>q?SB0Y+qIe#xc
zCmn45U>C)|y|f`%db7n^Hp013qUNGcI9ub1_<&>16OKzP6myGnI9EnGPHu!z^=r{&
z>Z156s)S3830P)4!6soLzT`ZiPJIaYW*-!%^c;$%azOp(De0vF&CD%gOuphg#cJwz
z#H_`eelRY<pYvrbw4aXr;25KrTJ7#Rr6Q>=r5Wb4@GgIZWh%Th0t#@kp&A@|;Nb|p
zbV~`Sp$VuC;sQ_rA#NEy2Ugt?laDMaa3QyenG{@QrT}7fFLND>B>2{bQOCiqgr(T9
zi2KGsy3UaskAv#k8fRdD3lhbA43oklFzs9bUT}QE!{9#ik~yq%-LyROftU_)L9<Ll
zi35T+`A;cIgTW$)8y}u4`L2rHvIu(fsklu1QM^=bYD1t!hqW;9WO#TRFHL^tVa%;6
z+cDi9J)S9fJf1XE<5+Jw554$yMeod69$V}l%ZVDwq?uLh#bu8_=UC0jO@HPfn=P>m
z8I;Xj5R>moQ>Zu43B+-XH@-T7;SX9DPxQp*E^ElxgxC6H`>^h3ZKXcZE^w>7u*MKW
z#eVXs{Su}@-Q^#Y>I(lOPwEQ>z)I~cbxiA*F+yAt_pBq#JKsk9DkxG0<{>;LZULp1
z`N=mzzuFH}{LmOuCWJL{rN1W~-9;mzL+L4H`Cxw61}g|ES_l@kpy$$wfUOHVk9z=u
zNc3?vUIdH9VkX60#x)^i<}NWtILH&vTRwBh_)2|Ld{P%k)Zxd}ETvI{uM!AiQ~4CE
z87dW6ybogwP>?U>+3+w5RcxysriDWwGgcMOz%K^B(3r-E_~E=(kR(skDz1|r)4<;h
zFv8385&y;dsrVG%fUz`z6_4`kyioSa>k>;8O(kW6{q`h*iVNU5G-Vhlwpn*u%!MO1
zmm1Gp>h16+(9Qr3z-47a=O=yAW1}_hcwGHZ<4te|E{e9zawc6Ei+->k4Z22$gb~*p
z)&MlnL8B@Q#3XE&K7_Z4^MXe5qLGPZ*9_UI;4PG=PrgwCg>~VAb*R@?Tp>f;`Gdz!
z+QgbOVs7F?YH`y-Y9@}y+8H%NH6CkpV2N>LfXZ>_bJm9BMCS)vp=IKwuLI^MvE=-w
z8`{mdhMpRjT8}qlQ~y|_j`PI62n&dv{?={sK!HmjSQR<mB6k7ON~}zt5GcvhLIFLZ
z5lpf#x+w+(7xGJUkZ<Pbbic*g^20y}(lB0+g4?l0NfPEL(hR%utA%I`oWz(Gh8T6c
z@b85sif$Gv1lqAeeg{2x>JaOe#wL8BHj1>_Z#&01nP5-4UMyhDJ98sU$S2zB#r$p<
z4fEz0X!A5+*ffTyE-_QS8H=EPjelYaaOx8&EXZU(rCVIlI)?MqP0~;C0$|z6$vHoB
z=Ik<F@(20He2qh&)HYjLt71%Pkm_`6!07?mCVgQ3t4$B)t}#M6CEJbDt&SMRVPJQm
zPpp01z#JV9+QOy_xFNS=oQjcX&Dh84rkYRg2V4q7@YL*i@w~*@AnNj1*o!`b7Q}79
zI=3c+eliEft876SZ60Z<xWV~ld78^Ey#F?hD<6Rlab1Z$Q@gxD+m0{RO<}w~pYu~G
zkvIFIcq>a=`KKBtzIIeh0pd(mK`50R-;oaiFu)b87DWWR3RkzWUa(!XjXT%#OjHcc
zXEO?3A3u{R!ci=#3AH&CE5tkJ!I)P3+3?%Khq1J9u|at@9ONmFDRww^CA^ArXl8fO
z55hSVvF1Z!Fq*c7kC+KQ9Q*da#(P8?67y0c*r1cIpv{~8<Ni>yQ=<&Fk>v7TW6GPs
zsu(qgtT_LxwW#a1X?2;GM<z6;7rV4yN-azpmw-v0lQ}W`{K@%vkDiPxjUCJtmXqDq
z0K^V%U=!Pp%g{&|Q$VEaCFDU^g60<Z4;=AY$S9U}dj8|hdVFZZ*-s>U%r|JWY-s)3
zoNB$xG)2dW3&dF^C&sZJaI7BdwWdG_>}c&o=H_L<iWBWEg%FPG`m%CZxzzBqL3Meh
zZ_MYjMsWZDAOJ~3K~x!WYqi^T{-ANrL;VFh#g$;sG3agL*Wfhc89sn;%%jqt>ss|A
zf+c-M4>0o2*ff1Q^M&^4ie5m4Gb{HnI*1)f#-y=WK>+Pp237h>4DDhG#l}=x0-MG;
z)L2}6A`k(t&J`g=pa74g0UmTN79mAT0_uVW2|CPRz7ca6({irdCoz;LC$aa%Ff8n0
zJYYIBIBCAb31U7qPst&903FbMpsx!2kwTJjsV=JcR)ZNZAW1haOBaYgoIu4Bo{XVz
zmP5vZ%l-m;$WIHmpf}<~I18BpL~%ti4LU4Mfhgg);D>c!<9^Z`9tR=-3yDLy^4#cE
z9Kx?+vchZ=VCF_mi(sJ~T2B4(pyirwQ+>lHV-h=HMOA}x@X%;JM46FB2Q90XFplkK
zg=3K}t|!vgc2fI5<|3THW5sY0>m0wt+SX#k8TfYIL7SZRg6CQcQ=Fg}&AD*u{6K!F
z$HHRLYq#yBZL&{wpvF@jMt%t^#-r=8IMSZX^Ej7vkE^*@8!H3Gh-?k@Wx~6pIj#ri
zG>&VKWjoXq+uoxm3TqoI4v?H-QXCX5GIq=xwT^Hk%8kd_h9=z#S>-b~b<ELSi(pMJ
zbto3g+f?vGsC-WIK{y9NVy?JI2A@^TLqC>`te-J?Vng|ekdW^oIf{XwdGVMzj*2(Y
zp%~%lAbKkS0Vg$M+|*ZehFp{0Sg2(#2X`I8W1XvoqK*%Z`CvYd6_1rK&hI=7*jG*~
zEok8uUN}B&TImMp=p0LIvxX|*alXdF^`i3ZHXwG074De3+sXO!w*3jTBnth2)7*rp
zeZ;)gw>nGxq&=COZ1WAzRZenP@Y+Iz=DG!F5KCe%xzusUA+(d2MmV5foR2-H5T@Fv
zPcCKaKwJ|al!B}QiFxv?H<AbBv*3j@RV_5%K-;=zGNH%xAh=^KZBJm=n!>&fw(?(%
z<9xautPh*1s;vYK)jR9)-)$XaURujBX3-LF#0Y<+Q-6zg5Q`-qpm(%qgN@ZZ=^2`L
z<!8Q|4U<M^1L0t6FjFI^;vm54t@>0i+B2AIJ4jfDECo}6<DB3T3Os2L3>2`80ex<T
z^Z*v(Q&R_QbU|z3tQb0HZL>4s6_|7JR;(O~ejV5Nd)#W9{ZbKkxQ|rR0wDj#bkY`(
z=y!Z<I8<@OT<USg5m{kWqBkrS){b{h6uYs>Yatur-&O&|mAqGCbev<EaSnN<6AmC4
z<F##K-{#}(cDJUKIZ_^u8)hx)u=5klG3CSK6Zq7vWeB`p$`@}Ma~U34ivY&V?U5UE
zhI%oKu<`~>^05PbA*Y6U8q;ItH*vvwVK7bg4sn!$fm?6KbE5$IZnZjXHoIc89u;Ri
zXKLKdXX99LVS5w<RmBzWeWSL>ujxaDjW&?4%w2k>YG(A6oGS}Cr#MEti@Gdzfo(S(
z4x4RR`<VYwb3FQ-u`T@9@>e~t&L!97mt&G#BaQ)Y#?R|_u4VLT^3p8@tb(r2Z8Rpw
zRX~6Y?2L_N+Qb3jDKJ2ogD8YNmmKnU+qGl9(5<Q=AdZZLr4Tq`nmaCniq+CzP4AdY
zHX1j86*V8WA&cg&O?A?Qh;X_ex%b%Dxd;ZWP>!3m&{<VV7*9rF5rCai3=HR34Ikmb
zW4z4#N!(66A#ZTJVbHj3cDE4exMJBrhvESGEKBS!Tk)1e#5Cz^<41A8;FUXyv8@-7
zhWc%I0cVg4Zp1Jr-T0(W7<h8-#Nq2zU|HnYyK4h|VeV#WRP~X*TBE`_ZOv&BTj_}K
zK>H8}umV58#+diSt?>ytkMVlo5^=Y&=u`5qvIlX8#;ttU4${i!phtd;7#5GEc^$8I
z7aA#SM(qrEHEk6(0cC%p(E51O8st=t$GADBIrh{v#B#L%O#Y(h3g-Yn=0q{2uT&9e
zVufw`BQZ%$P`!bjZQiksaoH!JyG}H3!8Rb{8s7NUFHE*{I1&s2;dv_N5<IYXM5HCC
zLLl<2gjY%EE_P*GfmUE=@&-&|24Y04jm2r+Xu<t129c(Sv0R{Ft&R;jG#gVKm^0_$
zRLo@2nDgTd1LFv+`6R?&xpT8xYbfS*4M1^8DOX=+SW)9@N7e&&W5TuPr1-9iTsD8m
zl^QK*i;J-_@}18imaZ9$i|<d(qM(S!%w1ZBHR`V8l+&jF3_rL8A7f0F3~H_NocLU6
zinV<1+=-t(OMmOOaa+FY1p85a3{5b(H;G0$3X>dX;qT-luxU6XW@>xJA?8qXV=OBs
zs?RL$0rR7LC~v){bltW*jl?S4#T}aGR*c|0HNgEaF)e<uAJ$aRCXhrm78M{hd8|EY
z0pn{>j~uHu6eH@<n8UyYJvP8`(yC}N)&#-~LIa>MMk{_r&wSH7%MTtmBc}jdo^<Rf
z9IIl>YZBWBm<5a@2jhvFv*ZAV!S3PrZkRxcO`^kus#5@4In%-M3P2Q%>wV0T0RlqD
z-Rux^pUayG++5&J9*HRXz4#u?9LH-WDi$)LwzdN^5OBtma)U;KLJ+YnW3vRb*af=b
zuoMC04&oWOr$wW`>j9O+#%nvS+7q0T>+lEIG#vV|fum)9nvcZYi>KI8SoO(`9n(#r
zR%?ix#*purQ~4`z5JR(5Yihw!^EJkfa%GHg?OPk;GG^ixpdEA@w{s^ae&)>C5wEVF
zRi1+$245{UwKdhd7-Ja_`58ApBn`<&a-k>lbbQNftTE8&l8g+qOi`^xcVj$`@gUz5
z_lke^EYOCmg_(yYu7i`>%ot+Ou?D~?X2`=brc6NlJlJHMxDSU%(IZ5|m`*h#g~Pcd
zjm5RDt*A}7KTzn}oU~$|zLf`{0MbodD@$^UygH#zwk6LT5)O@L!H*Uv;UIZXj14=|
z3FoBzuj4n5np^(q3zHAL4#c)5#71kOG+=WM07rq5V5(|VJQW1_po*dFgSe-K!a@|E
zbSq_b43IEqFFwSJ@&#**NsE7Rn_`vCf<qZfT7j<=6vEgxV~pFtE85oM<hL)xwn3Bq
zfcorltDhDJNMjLe=zDoSdF+jBDn=CT3Lgdl)&g?k%7tJUTsk#b#0Er_u_57O{MGm<
zCIckctmw|VPj{Tdelq9oziC|?m{}1oeHhMTxR6&Ws-y+SE4R(|$;r98qK7yGpG!=d
zMj(@nzhgl)vSExd3%)Y8`v)G9n@J1q6Bnpwy3Zg`9z2e9JdRn^p-3uf6*fv;Pa8Tb
zn;E~+NY<FcdBPvKp0Lf|h}^(!X2;-4j2Ky~(c{=DM?womA#am5mi4PyTIs!y;Ye)z
zzk-?OU@S1Z!kc){M}kYMGaWnh5kZ#3M4wR4xV9PjCoD@_*uZ)`5sl=68|knSM!6p>
z-lIo`lG8dSJTJ%v(1!(qAW;*Ad6}CAUh*8tfq&iKGUl?Q!fv~HB1ddz04xM7PT>zp
z3h_(=uMO!!uo!2E0UAilgN`9^6?_!=C=eYR5oV4fL%g5>!Kp}SW0`m`wA=Ltx%V-0
z17G1NQt9*5FEtp?e^a4_@v<lkV@^ZtZ-E6`?LHfZRp@ga1NmcaGiI$I0rFgUg8IoO
zH}!yi<yRK9at_>-Z^eVgpvH2n<b(?G_|)xLvD<j2IF8`R=VE;4SmMeb$ekfQ^mwU%
zlwn~EXaX;sT8`C5I@Lnbjo7a9z(wIEJMPlK|4Z5X1>03#cY^1<-1{(+U4`PRDL_?F
zWuPjlva1|;ffqY|!4DI^*)R4?RqU2#rkokvRpZ7<+DRkfPK-MR*h<^38DP>K$kZ6y
zEeVVy<JMISBDMvNIr}sc7$hZAx%Yy=-7!ukHNDn6oW0ii{nlFhh+rSxbN2qe^{w?=
zf4;T9f17m2JR9NM$xYa+q<@>fq2bp$@eu=z&0ZthL;h5K7tFKmxRv%8N~?oTA1OAL
zc7&K~=wM%DG^-q#Ln!E|qhs|r{z<u(>!bY9U*&$*83k6d%uTy48=6Acar70@jM1iC
zX4;?fwV>?$3emF$F@_VbnJ#>0)Dc$&R6}V90yLQH5O7XgBcaIvgOKPjC{>p%5T8@Y
zQYi<3YNeBnqkmFT|F0Mf>fZm-wIoYp(0)y{C|t7MSTChqGJfPgoL=(p#6Jp>tjz0m
zIDv5@-S8o@AhIQLnh>t&CF>%$mA`i%!Xw)z1&)kk;ylwtUOPtzd#E-v!7sAY*l#Ug
z^v`@|+XVgOIwkl3E$Hpm@ZDga{1%f&N=^+_VmQe^5x>HAa``HwmmB#=@47A6MjMPX
zC)Q*8_OIzAbq-Q>g?u@^z{!M@j7{}Df(+@SNuf=o``LE7*ug&O{I?xyA7k=|=y@_1
zl)XQ0^<uh#w%FEyBWyE8B-CFYS2`I?m*R~<C+YezA(4(Crv%}ot&{yt_=P$aqunGM
zDKao`SN*8@ZnhssRT8~u8h&$~Tu+4UHTR8OjuG-OFMx_$SCYNRne!S45<n!GC+UpW
z`@U%kbHar&>uJqWcBqyBp)n#uY&?>i7P^<1;7%L(b<i_-OecaOS)Zi34G1A)I91bG
zO*zOK1%w5fqOGm?n}QmWNw&xVWeQIS3zau3;dX~#I-26;8!TB?=+O9D6KJXEgo7~M
zDVg%M(46ZO8oY|W)KP9|TYyOTlMEz#!!O!p!UPis*NZqKgi+>0ysQw-iT1$|6__ac
zE4GmWz8XITzl33map3EPhW{oX0T7U0=@hIkv5`Et=w65>Vl`zq0D!2f9654C$2VhO
z(%@>uvH(T0^DLW0J&wbI^p)uYu`F++U(~6g7uJ#e7XP*~sH2QJKwV}XCe2igSyxrx
z9S>B7&Cz(P?FCQ8PbA>0eiZ!%$RhlmFks;mz0x1J-b!DL_R0K`z=$K2NBe4d2|EL0
zY0KBdhG``xv@2J!#}Juxf!w29XcL7#7y<{BV#5gsY%i6II4nqew1?0o$~Kylv6FcK
zJ4t%r2f}2JUE*FEMwz_*@f<yG&`rp>YXC}uHTPQOp#4GdKDl!?Gatby2vnYc8z7kv
z=8XaE4cgV}^@+BYHqfvMw2Vp6*HPgp-(*J=s#M^WWa@a$I8pGbdaR#Bv-E0gOw;z$
zwwp1m_t1h1X2B1AhkzNFHFza?k|^mO1@*AO6gTar%bM-(DhX=AJ@JdW&{EDx16q^%
z3@qb5x<R(riUrq$`uR75g#26`i{z6@j>>21Os8eV&}}@&{Ucw+HF~01cO7oV3u5oF
z3UN<1(qK&St@-ZF3ep8S5r9)W-aP7rXc2CR3(7>gDTzSv7(G7Y8+C*KHtASr7b(7i
zL}Iaf%I2iQ-*`bqbY(>fU9%5lq_Zp3K`T?XEfb=-7k-NN1+3R=r9A)zVl)vL<85FO
z53q$N=QBQTRDr#wl4MiC0MQ?1w7wGgZrWpgWBn#RWc*tlq_S;{B%Q9e<u*QZe<DDi
z^ilX~Y-6Tt1ogzG35aAmc%8n7vZ8TTZn7YS|DZkmS$I{e%bhs_Gj_ssuY!?iM`dg;
z1E20q2Pp33UA97xjgs(3YKC$G$7oX0;lD{;gq4#ihLv>hPCd4z&3%-up@&IQSJ&+>
z;~}cqF{xa(0e5IYDG_(qiD20*OPHkxxxhGhPT+PJcJ@K-Q|DnAL;IahvL2kHN!v;?
zvYf3hTTBX8fMug!;xFz6wyu(-6SN|{&-9h;2catRIIu>8oWS$|b&nkRs*mWkxCBRJ
zuNilYDQgoMvTHNpNuAQQBxl$La?t3<V}{#Z@Y~fRUu<nUm$wF+SSX<ncGvJZmeutW
zdIuY1ep;N93?{lb*6|<ICwo#L&vHbS+HUO!&?8#ghW3E}WZRN>D|#Zf&~_P4!>^0q
zW{ki<=Z|4GhDVP@(T~6tZ^dmR+N=FJ>n8YRnF5Et??n3Ty>;{vd+ZmIEr4=z-&|#g
zR@kh}Mxm{2^8zGh8E6zv9MC?%5cnOSz-$g`5mZNACSyq*C&DU~c8FB~P0W#eSuO$}
zkxjTTUd|eJ6qV1wQqc$++#|x#*Oqt40tnX#+GyMWP@_+htwNW-J9Pn)9ta|ACRy2D
zB0z<)hGS>l0PB*!wOGO@Z~~C<cj~~oGZH2P#F$6F5smdSm~tiYMS20uP_GFW3h<0j
zT=6oHK!zy7^lC?(I}RZNIp|K?cd}z@*KnxugQ5&2fMN79<*#US7R?lCFn<C(#Qh^j
zjtK3##af`-2*v`cO>Ip1zr~0yegJlDr;vQXlc^SuVvwCKruhsrmwJD?EI$mmM7<p(
z8N)}{@Q!uR2Mmj3&rX|UnYbp(dU5}?1`>U=xe0wD{WWnC>`h3!SziSQXPNI~AC&b5
zl^Xqn`E*e@;nvFz`VTsxH`A6NCa!>>o@ffwVEhwSP2ZRB$a1gKU0aqzd*`q90~ni@
z!GPECleJ)SLfbPWBB?P_NHnyflRAUq>@HkoE(4v7Bj}a7{2PKI(U@qv3y}HgH|Pdn
z^*3UoRDa!*Kv-GoC+r_$kBu&a;bqZqyCC2+r1ID3kR7Zytj19o_p9la0!d2rCg?eD
z-Zp{-`XONxxTulwg7JrZ7M{VLIB1Lv!S(dlo5ZisTd~{%yrg?3e+ft#^Mr%p!u?XO
z54whuCM@XTLgKGA*vE{<Zm!k=rVi&F)pH-Ha)JSYESmUD_>I4h{K*lye*g7VAAmd5
zMahdUOs3MQLrqRZ$ynTq4eQQ^Sq7QBpLC*`M=HY|fA9>l27~K$i*k^D$RC)7aLuG!
z;IWJI89(?|I_a@8Fq!Z~yuAwHk@<3+qWw7J(2rG{ce=GtO!xp(V31PF*Ldl28py4W
zRXYv7dc6u%O|d)5WIgcj!izs>PT3gQK>C}o$^A9zyY1%^J$NvSvYp*gT&(tiII_QH
zjEj8)CTRE0(&`r^dYT#mxwF7XG%2`cAc%-`^Z*o6VAla<j<TVW;Q)wH3PzCtIOh-m
z2PLj-CkJ378&XXeA4}fwobNH-p!JGfqaRhEMF!A~));@K1CL&W11agu!Qti_dC`lM
z%aE>uWp;`+Np!)W*rBoRoqO0A+FW)RsqG`S()<p)2t>Ty2E))mXoBhG4!7!hs%*&B
z@rdX)?FvhvQ5woM{vPs9w2eGgAE!F?fs%kyqJXymYqV?Rh2;zV2d2^Xkt0VGj#mM5
zkFs{rcog`KZGssIVbtjtFoU{qFYC<Y)>4+R@fHCexSug6RYM%*8@-(c_C?oSJd>RG
zRQt(tRl2!jMENTX#Gv7^`Q(0}tw*-R@>6RQx@_ga812~RdPpu|m46#`u)}u}XQ*FC
z8J(-RNOjGh6E+E-TzkD9jPL9VXhS1Gx9x~4O&f-Fi-o4Y#l}hu8q0<{n3nZNR++;a
z+wIl-zkEh|v)pJjPzm&oV$4DLCIC1=tJfKmDcdFNfk6SBO%yvcROJ#SUi%<nJW48$
zNdUExFd56D*q}hXhV@!!BlEAi2xAZ=<aC23QW5_|0IB+@Ndj4}%UF!B@NCZAw2^Fw
zgJGMLGH;@q>%4<t&3Ln<#GAueIvmbhS^liM#>R4>k%^=Lkt7>I+bX!GHXHjT+i7HX
zy8yjq8w~NI4WS#7+fu|7Tg7|cY$pSkL%CQ#pcmq2eX?YjXTLadWISGlg)Uf@kA$!l
z3uqnWD!e6~x%(<$NbQ4d0l%$2dV6NPlif^xC{AWtu5Um$mE{L!z^LALc?ABA|C=uX
z4=G-^n3MgPO+g*7S@aK53d$w5F4lo6#b!cgCBB1x{#|0F<CofShStOl#{utC4EMS&
zXDSQ)qy8b@la4wZQv0E!(37_Y^^^6dKBn*UDBfkeHbDS0irqzbtak!|n$GvLA9Z+$
zMw!A7^9>rE8Mg*jZ+HQ0dp{G0#_czCng9wSBvh^%t~7jfMpnV0`x;Eeb)XpvmD*1F
z6ZMg|&Oxlsdi=U?LUkP%RCuEYCzCL5eh1#=I&&^`Irs{Y1u<iYYLHLPLV+*go_WUl
z6+_o2+L9){m`ql_Vv_MfjJz|@sE=Z=!@BSafu9h|dYG&~-otJWWD8!96nbB0KecmT
zg$RMVsP~Y?e-l4IE7?S%SFi_$1AD{+ZN_l4c;<R`LX$GOpOU?=?)}M;Kau^{U!VEo
zP7XV;B)DShY!}MKwcuWLgLF8hOA6^bP*Jp9Ztp5>YomMeE41Y*tJinblI|J$up`%L
z!U1i<b-%`*B9>L2QrQ+am$AE_Wrgo7Z*FI_XwYekm)#FRd;MT16&0~>#v9m4^L581
z>o?^A*e3zEgpqU&S9wd0k@Qq_p7??~C8k>Y2^Xx><4Nr^9wB3~tIDJCpEH4Mn^=>t
zOQG%cYdcU{W&lRMD_$QuOag2)&@M0$$s|M_#YrH8@PceGNYaQzwD8HH10%PkT{($1
zJ^3VqvhQ&%KS3m`;-|E1V4T<(!rJogRYTqq;K>#eb_x!%#?Y+-2kej!I^)0{y$LY%
zx~`jqA7cer#wGs|7KqC5gd}6v;m93GvdJ}=Oa|I&6WpfY1%Sf}Vh}Yc$vVLng@2<?
zu?FIvf^-wGk!7Zbop;8916n}YCNyD?W*m$=>8F*&>nqt1!p8PncrJEab&Ga=<j4`-
zzkh$>i|o$7vz-a)Xd+2yY;fYEwT?^K%9kHPL$!#HbabIjungh)6#EDdD|1zu5*BOp
z1@|o8MP3s|2XcD7ihH#!$!(LrAeI%ptIFhz0+!?NYO?|rQ@>`?qTkSWENecdN_M!G
zPgS<>mEC4PZA3~suepIVx^Wr1JR<X)fWm9eXTs6-+}IVM8#=UF*e3R8MNg>@#de&A
zsM%7uI?H73S1id^iFY3);QLWyq(Pf8NI@tlW7`H!5opvu*m&s3dJN$^xmRcmICm%j
zWWx)|mShPd34;!U3s{Sxc7Rs{0y#nP$yr(@0<F|@rJxh_ii3ox1n7kRlrUg3DLlGv
zQ`?Phy87OZw~VEePEekXHU+c-Yi}DUtAT4*N?FFXmZ^F#ZFx)&1cKiQ+f^_?>ZEgr
zkZl}roz_ER!ysd_<(|KcJt1@zTPE76EUIlH_CyyL)H%{?a=Xr!N4@7xyOGyEU;XM4
zy?+1oN<KodqpJ)0K|`pvC86uy4*L#lif1buST-?A3T{qQ+z?!^fVT48(au?xP6m4L
z?reXoO3C81J%|1#Y|(zRu{G@`*+Qm-jbWkwpO7>YwiEF(=}?F_$B2^~OCnM`ku4M*
zb^QTY3-l|w+!$lV_K-KK<2GfVz%P7{_@(x-y(xVI$gG`KZ^f3QoNyu(zME(j{Uu##
z=tWCe#t3Eaa1R|)fwlb!VMM%{u9EGh-!o;#OGCy~{H;nU3Tza?*AwU!VEeDsDfBU_
zL!j&&nm|TlQ**Gm*EwdxCmMhfJ&pgNES!Z=8BS`AE*b+E>^htqW6poOPr@AdM82*P
z04SI@dMG0yq?u~K!CT)ER@sR@7FuJEO2Gj6&-Kum*_PaNi_g?g*n|grY9s!^z`yR3
z<s=(Oc13N3e5DOE>$bg6jQ>Txy?oN6^ObD~+mS>&T^Fp0SWmW#eiia2d!_Q|mw$5P
z$m(6U*rqUzNqHKcCVe*j=6GA>QQ(nzV0t<lMH{noT?w<HIF#GY_Ra<aw8toiI`4Fl
z=rNv5+v7E{9&KU+gj0x-bTu9G<H>=s_CzeeAT0SISPR|mgK@F<<DPd1NE}G&(~yVh
zzAas2n*>G-<D{ozW0k(ErP@M|1B=J{DE7^|ox+#w86#PeCF=tI>v03Rj&&#z$^nf@
ztOyt8%~dfiYe=*zGb<qaKSaD2u6BE=gUmTDHy*ODXFC3md|L3}dQ#~*o*1}uazzOk
zu%)?N-;tC=5tYhGP36U}l2M=$tCtD!itITcvjLjEWK|9cBcB)qK>0;}beP~}jp0oM
zfG$90I@l=$4_FMZ=XSveCV2y(OHgm{Y}yONyuGz;md@2_BlZbvH-v&!Cu89oJL0fE
zXfetBkN@94>Xo;*_0pA><<gb&a{0~ka_P<Ua_P!Tdg+aq^wOK><<cAH_0pBqwaaf_
zkV|h~kV{w2%f&a&>%}WC>E$cu<<gZ4a`BDx<M)^J^7#AG8!!2_OK-fSQRaeQyZq(_
zxqRiq*v<vHcqPiM?wyy5SI&=ZpO=eQUee2No|j8+j69BfT)J{zFJHN^qCH+m`WLU9
z*SLOOFI_pW7vFeEFJ3vX7vDIq_uTgdz4p5QcJ=$pOM3B*mvklT$irCn(pcX3GI=k(
zd47eBV>t2)I9<N7;@dHJbA|cEkU_lMh{fd*?@Mo9kjqehRmSjM;d06NyYkXVZ>;~u
zOV01*E5WDZV*I}GlJ5TJzmdQH$G@BKTl9q~`=`i5@eOaVuT1-r0IlTfmA?`T(B88@
za+??ja`HsU81cb=S`wq&MyZqJM`^8n<g3t2*mT&wlaCWYNaIVeT$8pcGnDK4RESgF
zAFa&|*4l^){J}O;TVW3+E*G7smF@eRxLzM35R=fOW2d5AjxdG11p8rCdgw{EX>r}(
zj8PLc(QHVhILVB!1$;7*t4}4M{PEK{V#jM$Ttk!Uk@G-9Xd_zdkitPX*pY(z{z*6m
z@xCoH2(~>hQ=Y28-AkfnMwtzYu<mh9v=}$jM?eyZ3r4}90W7g#8B^jF^waQEa4o-+
zVdX>z7}LPKVz3g4Y(}70iMs{?Vr<BeZ7?6mf98pCPd4Avsdf%@|MoxswI2Jcf2Uvl
z{_p9b;|JxQV+Zt}qX+cRv4eW}_(3^*{Gc2<W`7Up;bRA6^;umzeEgssK6X%6bq>fq
zM-S-g_d&hq*a1Cs?0_CRdO!~yJ*bC{t!Ry9z5Jo02lXDme?Sh6?H}m3?I!>LAOJ~3
zK~y?=P!F%_jQ7WS#}CLo$Dp0D?L+qW_(3`BWe#}#!^aQE$cNKg-CxzQ_75LFDF5C6
zbi2OmJ^zgyI(|S7jhGmXdyXE|!^aNDJ;zpmtu4DgV&&Kz8q1Dt7*8wNj~|pnR&T`P
zo@1k|$F0nP(8I9<BTolMT!XiJjvgF!=(x!}hS$**o`&5aqkGJL9~|{?!1N~8?%`tx
z<-VsrtN+&zzp8)rH_w5+LWje)>Tzq0e+pV8*6sW{XNTs4UF-saVtnFX@?my<;>~%<
z$w7)4JQ!ftJHF~~PTW#L+<a=>5U-v2^H5J%aC;GIuG%K^DNVi34glid8Dmnw*Vqfo
zR&*M<X8_0aI}BJKOq+OUb?J75Y&tVdUxImTbcdw7sFUxfn6K7;PN1{gGiCz7F2ZB-
zkO5wm;nAL|gj~1MNPwnfVco|CB!lS;!oD^Jl(f~9TldLHO7Ipc!Q6r|B_l&D<KILN
zev8uw>S1UFU*T(RaG-Ud$kaK(K{M=e=`gW}h!n`sU<0wt6&S^|ex~_}4yimnfxS@T
zChGix(hz&XG23C7Ao~LO6I-I7ZJ4v8uZ5IhUGO(!&|U|cs;YA8rN_lO_WQs0yZWbR
z@0aiV<j?f`7rv{fUw%rrUOpjPubhyrmru&p%O`Z}<r8}P<r8}P!U^4a#qOPuv8<kX
z`J`-JIH6}=8Lz!^Qcl18l+!x%@=4ix<)oZ>c~x)g<r8xH!c%(Y<&$#y!m7O8JM;3Y
z?wMCk$kv6YbnC*2_`Lj-o*C=fwbK`#($g=WSY3blDcv&uFFd7ZM!GASQ2*r<dghgr
zEBY@#rKc~PP?TlW#tFY?bxyzhl=E@=<>24scHUf`ld?7Pw36wh%YA0Vcl9^gaNNgs
zw_aJ5IkVEm3j49m70#n9ub8e*j%8N$&%AO{wm|-^S4P=Jx+}e%jB8^%PcHs%{r5lo
zs($T1{ww*{PyEk%_}D@D(`Wuz-unA1)!(we<Ya(ikcEoyr3wEfKfn$R3Q#*z{X~Kk
zv^&ve_mGEWbFe`UYV6`T)XPY<urA3>Lp>98)G1+n!?>r8gCWQ{V#Bj1O@cv>;wfWg
z?E*fIIoxZ$J6DvbP4sJwYr&r5{dgsc2-{M{sJ7GK1A3-DrK!UY1XON9pQKQz>)+LM
zl6jjYNt2TE4^TcaY|8U50Gy;MMBEEN$J-cKQ7AM{b+h2Leq(fay)(86WpDrhL!44f
zPU<KTWuquGFl%oNJd%QfZ7J(P5zA-Zm|f!$(O+YDfTJfVi7zl5vV&YE(Zl;JFD8k}
zh&`5Pogz(>e6*!d$5rfU>XUsyEU`7(&@s7;CKKSEF$Mkt$E2tf$Rn{;#dhrbFaF{0
z^lPUN>EUAs<r`<ds4x8Wk7cnv=wfG~i|vIDJ4;#YEOgji%5rCr<?d3JyQ{y$_MpR#
z{T+1JUe#IbEOfcElwo@@ULSPWS?I7mUf&&LxjV?PyOhPwpo{H62ctK(>A!aty4+pL
zu(K4ayVx1&j=T&ziQdkjt8&9wccH`fpv$q{#rEL*Ep`SSc19XIgACgXUG5GtY_IrQ
zwY920Y%g>$*++Serx62L;Rd`JhTDTKcUEn$=&bM@to_}k(;ctN!tmP}F(1n<wg+7p
zpCkUu5tqfzDBEt}HJDuZ+wfdrDNfI1^Up#}?~75!Rk?+H=db=$?tSuqlt23J|DqS)
zxDfsW&f5BTikta&AD2oL3SYyxG!gT{RZ2`!;v>ZfNy1Qd=g)!%^<qtI;~0f}n6D<8
zpcU|IV?@$JrFe1iWN=MfZFvluD0P!Ci|g7tRF?$^W|;v8$2|Ir6u)|2sV~L&XL9HA
zi2c-uV=0%V{6t$FYx)ayg=tEn0&-G=j8*oLxZl}(`plY(03g~;XS4~BE?Gf^DBMqp
z5$2oGb{H%g!<18U;uS`xYMpFobUJ|apphZ|696WKp!{tc2my4`=oAgVVWEsEh+A|L
z);q;d(qrax(jGCk1mhUEB>q(kMnn^QA<3f1n}r!lo+QfTgpCsGEN>2&YxRg&GR^Qo
z4mboBYmeGR*|{BVKbnc)SZ%r}2jpFSdHWy!PQUu}@5sOY?q}q?|LJk{1a3^qR!PoM
z21qalOMb>gh7vVPSjNAr&)^A#B_a!_Jtksfl0r$_P9$NGl&zAL<(Q}}EZOp;$`aJU
zle0)pt-M_ulfJRsDnVQ&a*^Oca%jn(C6YVCDBB8yVU%lt1b1P{<&Gs}W73$C;#H!y
zbb8AjOJK)jY)r6L$=U#k>xlW7j4rlE9x)lTM15yWA^}^YMM>UBGm>f3#}M{0CgF?i
zh5qH`AIMjp{vEyN*a5w;^V4L{DFE?5)mDoSwmDDnNlJLA4Z#cLLk^+NZ1EHFWn&2Y
zx*XLc>Xe66=u2|n*7Zy6HHd+TOGtsB7rE$nSCXEN?Ya~!Dbd8ZRT6dnn`2dp|Atf6
zix(3THZFFy0nB9_NFEo}+Qv4juGW4K--1u*F7s}7LwOhGLDoFjdZvp4*}WMlp>+hr
z1DGv!fO$ZS8R7D|lPk)~%4L1{kIZ8R*yR9FE$N&}qJk9D3)||HoyvRJ@h^17R?-|5
zWYQe8#3cwvBRYUG2AGUxd9qmlVeAwGZd~t;9&rb;8axSm(L#^(miPxo6W<L_jh%D>
zGzUN)o#tQ$G7$b$-^y2<624UjOj&^)Vg?_y{ogil5}g&{|KrRT^$(x=Z8`VX&+4#?
zqe|oGop<<=gxCmMBqNa=4VGx&=v9-f*(jm4;iF%>k-QCKGU;V83AIE9+a8l0OBStd
zm%)>@1thD(IKs6QOK2^@v82?JpVdg<m}q&@IgSqQE};!ee8*(caIz%UlHTn|bTLsy
zY`N?>n&=~OHd49-3<EF6!g#WgK1(t!S>3jg$-pdhuoP>1F(#%^jz&}e_aFSB{NYod
zk?sHTH*E7}pra2`{{TLe5+nA76e}YBq03MBki{yFw$y<dQSzH6iRnhVCV95|CO7d2
zw8>vFwn6MuXTHQ3mnC4$3196?Q4WbXhx~QPO5j2;v}G8JM8C8tM63Hm)=gzyKC%Q*
zb3;oL0qWzZ9LdBsA`Q>keh_<<9d#7)g)DFdWXJZ5Uu%#&tF$$XVj2W;1GzF0O3qQ3
zkK_b|R|28|X%cLpH!<SagGUC%idd7Oue+YVIsJk`&?jE2@>n@Z2QB^vTr*k~{~|py
z@6kX=)0Dg^w>{#O@wZ|rD0aLOCcVDto(Dm2<h~;q%OqKeKQBjgjQNClFx=@RoN+`Z
zqBQ`C^;;d1-kQJ=e5PxaUuYZKnhG)^`u&&wgC06|Ku#`?jni|HC|IKABT3`P&Hzcy
zu<KKcvcPFUpKcsHQS+o_7ZS+rXw#<#ZF<*|&K;YIT`0C4bq9$NN1J*bB0<}Z5yaqo
zmAph!W7DWG)eH$^jF?%nhtrt@Bvn2w>eJaag$&cpW0^?A7Gts&Ba!21C5_@aZ$2t$
z)6&Zw!#I*Zr?qXPj4;v)cv<pi$*U!NOHbmKp1|Aat?4^3UbT1buYaU}_}$OQzx|K@
z3X;39-AJ@B5abw;?Nxw8_<F7fv872`QcS||2L9CYa`iq!ChtQ$lxW6Vj)Vc*W#%xc
z=;Y3EDUy*Ci;xz@$X+hwDL>?rtP^pq#VIIg85ISd6QRV9L6pDe*ljnAF3S*nPwF+{
zEEc4-les<+1neD;p%v<DB$`e%0=Y(B%+jI@zz2nR1)2sPy^`TC3AzF@GU6;8FzPxL
z5(FfzMnO7*df)&KRtOBhD3D?!MLE+4D<LYV&QcG7%?T35y;4^cFieIvVaWa+?oTI#
zLKvVP7=!MKfW%i#y3<^qb<TV<vQ?(ZU<%i({s0Rp-y^t1ZdUoL?Sc~e05_o<pqB#q
zWL<!9iYKmX!MtxfV?OFk$gt!e{@=Id55N1{^6)eN#z&uU9hv{e^=X#Kz^GbG9S#yx
zghPzlZATIm>&ar;5T|Wz)XozpSiiRL<Y^p@vk|2o8$q-BOTlSbPgrg0c01PY`C2|(
zuV$l(W5N`;#3-bVW(BV?wQHksp7ieEI=aEv9U7kt#C0cd^>ux)CeS}NUAqlQAts8(
zw~xXuB@*!g65m)i=?SP$>l#+8HavlMe8xo2rm15sp`83r|3MEOKPbcBp3`E7qv3b{
zk3PzNSnM2~zm&tosI-9{PSX!?A7}K<f8c}kYC=U1Q{Z#&$X|)i5)Y{TE<QLfH6g4x
zMm>}%c*VpL`zN91BPJ1^S(jtX^4LX*Ucl@`EoK=VkLTDX@K1>w>aW_73!iCnouUIl
zN^7u95A2$(px|W;8*ap#3X@oyzf`-i`m>cn5E#>}0^XhBbq1QOgA5@t-hqimOt#k>
zq%`exfV2t$15V{SJ{>dwH`SlU2%lv0QvoNTAx>P*a%s|6FjesMdM$2X2yDFmJsI7U
zY)O{5hq7he!FASwwaGZs_uLNJSyYP$g6xPR&-o!{Qr5(;HNoE|FalnquSooW-Ba={
zi7o{>D~s2XEq3jU*Z%Ug@9BL{{d4`v-~8CuY*~Wg$sQz7kto=dCL}Ac{tc(}aP66I
z?68dxFdAqhe?GkkYyWKY&897B-5qY&faJsZ^r_nzDfD%HHUfsS`z8(8Y+=*0wq6gC
z*<qVU!~EWEBwb5Pj%?F|VYh8-_;5rs5>wjjF;3z7dOhEKftw~`I(&fSZSbUS(BO5%
z-#6C86t45-qko9~A`)*{i|J)|2l+pr{Wtoj&;4-|>)B7&Cu3Ugx!*d)++%QAZLWLl
zjQchMX8wWk8vTv=4?ZJ7WxtEW0Q@q=N=yo(<%w8Z;w*xYyTcTZBlu{(pJNgxRvoq+
zqvA{E0}~@kSep2l`$cN6)@994;Kj5u-BH&~|1A?V?VoJLMJHfGiAL26@Pjr-Di$LP
zGPE>$dr?)H5zqx30J>E;*Nu*yzN8LHkawMAnyyuz2<Ayai5Yf40Kd>6XTav!)Cf>?
zXd#<qV}<f|orZlIx!XjjF%(S!#}a{rg9j#S8_X54U>V6im|p;!Wy`h%vgLqQMi&Wb
z#Lh*Czg~92PBMOin3!A|nV2SCTAM_BXS}9@HQGG;lpvjnPqrVR<2IL)X0XXD&%b-_
zkLA%H{#zft%hQ0^nGcYRSkmI_$Y3fEc4aCiO*T>$8x_XUEl)<q^>;A!YwOT#;lFL7
z;GMZ+QUarXHo|BlZL#h!*2v}2s9`ro+I-~DM!&WfiqoQ&och$JkEVspv0FD1E1S~A
z^?k7h5l2Y}iBUlqCAFjyHn-q3x2>u3-M+DYE)p}B2d95y<kWeCkwWKX*QSnPdfV(E
zMs;<uGwA6HPwAnf2lVg%@s||ON<5yh^LT)XSmL3l_%y~EA^L9f9EX$=itN+qL-^P3
zTAU!?LmJE{3SVNLv%+*zM+)&LlBPCU;6#p-H^*Wf_84m*E~1=C)=Iy|KFH>Jxg7WY
zeu<~97SMOrN&P7EZ1qvxDp$Zr_xOJ1Iq@Y?%K0z)qogzA7(7q$=-2QLNH%K~104xo
zLxDO&;{;|jNU9SFMh44e%b<{ufe?d~__E(2F$WoI!+9wHQ)NmttZj2#RH_@STcYMV
z1uxQh#SqH{4@IUz6O)-@hzW--8EBHk_9?W`oX`t?EBLrd$4a5*kd+NPzBkDvC7n<Q
zKw@mz<}~9?vNSZc!#sHair92`2_dpSeDHwEs5c@=d^9+SsOXoz`@hP6_^W>(i~L~}
z2#@EmwQaVR%#Ztk%?5N-$aWf$D(m**s1#3BY#p3WA1{0dtnZkG^>MLgFKF@Z+DPhn
z6bqA<7?F$39=ujCM(Z$ni;=R}+<@x^<7gJ&N$l(OBGH9uW5?fi%o<%AIYk+4hjFaY
ziwzNR6b??!^13}w)?p2%kM7~lU0YWP2|gv#F(vIX8a_X|d{*u`c2F-}c?oP7Y<kKz
z&F|e=*!R<eOxQceVT&^AqjV`oVT@JqU(95Hf%@r_L`^ZO#wm#hYxG5o!RX2n=MzRA
z3ha6lue#WnV<`637Gp3XQk?E0CAZfkL=^|ZglV+NE0(j?OMZa7rC8VW5BN92DcBYA
z0s4r)U@w3sv>yn|G;gkDvs0(Tb#g-6<3wgx21I7Y3>wuW-~dRUkpd)1d0`<%@u8IN
zI(DK?8YK$gD~QMkT_z=(?L?NyM%_6u1PgVbN$<hm8snS9nQ1`EobF>VBR#qmg<K&c
zuuleIGN2-fcc)3Z35x}6M_LqYb3ilSO#mN3;J(Hj-_T?vV;MI^rSMs8!h@>uMZ8$J
zMH!HRq(lGBGD9TJIwk#~4Cs_3FqQ}1Y5wcH2Po-2^Y~x?s~kFdP``ivIP9{FMfkB{
zVH~X*6CxW4i}iJbuX*#)9$1g($;`Gb;2&Up*uoQ$vepeo%Y4y4PpNvc64RfMbih=y
zZDOF2K^%?qMA3Jl#`-!;Xl<$(jzRH6)~BVTEgbR0UCX%E(QwA2N{p_LoYKhWK%<*}
zE+4KJ^tE<z6b_AAnx1?l4yNWU0k)AuUn6KEw>FZujL}m|Zg*l7a`@X9_0X{cy7+(o
zvVF)PC(Zp0#xjV46uYt?SrS!zzKKg5e+4=wY3m|S!8zwez<(N9Y~x7ui8Zble+A#4
z?CWwoDX|LqL#*LC!QdDr401wJd2aej#@zY^mc7w|^z@?rwK%jm8s<}Rv5^fxOSaS5
zM_`|9H04yOOay*pjC2?3s5&*?N%!DKs{XE9HWcMHkvSj^47lMYkTRfXSUEWXX9_x^
zQ%>nZk%35VEb}4MW-=hr1QxcNjjc6uRuakS3QGozn7AXcOhj+W0SFG_tCrKiJO>Z3
zqTDvYS`9imKyMS7KaeriZ*-nNM2eE0+=le+HrL`3x^HcJN<Y{>c23cztEDE3EjCs6
z3U)+of^Tr=g!ZNSU;h40IduG>Jonm`Z@}=8JKRy}Q>BX-y~{gZw=pS<#0n2c_R*s4
zm>Ts25t0qx@d-(bO-16SfH*jKAl~BGkvNuRiHV%?1oVv-Cbx8$GE8w|+c7m8y!lZp
zwsz1GE1cqmDP1~%*f&+g(I$AriScZB<Fsq++_e$ReB4STh=>6u%B~k0WnKEZMW0gl
z9mKd+6AxQn(f#A^{crM@uRZOSUgAMSC-*suk;!**LWTZf_dI^D@!1>)Fle$*OK#5_
zs_`ZJr|}<xg-=S9M87QYbUH41Eli%k|HI{Tyn}0!l~Bq9_5cCO@AwlR)P*H^LPtg-
z_jM>~iiuq;>k>o+5%F`J8(YEwkWe@21h7l;swG;CFYt^Psb3HVN{Aj~NBS#vELks%
z%M7y<WI`A%Q;lQ>Ffl@dO*ki}2x!6q1ptJ*<cgJ)1b2`pfXsZAq_GqU3|PL7pL{)x
zoA7bAYeJZLE}!tG1ZB&o^GXJd#@6V=>;P_g+u0wdb)!|TtK!AMJ7YP)M}C@4*VAvS
zm)rL1IS2(_%qL%CBL;jM3`z$DI`TkP>_`FymC^?A*mZg;D*E$ZzAlH4AC%`VZk4Il
zg-s>;$l1b2z?P8o`9=*$=*p-U93kRIgZQq_0nX*Kkv?BHr;+HzhK{`B){`ILi_Xcj
zkv>@e7V8m1CLF1Z1TE^~=9AdP>LY)&R?n~bbaL#%wGmQFntT*($9DGO*?utUW*Z@J
zt>TXD2(}F}F?xr|wvW>JRC?f!Z~gG~l-nq4BzZX6=Z8T12<ZaoujGC3)ZOyzt0&lJ
zBTWFmL;Hk#YhoXFsF)y{FNMFEQ=>moQYBuoZx2%&Xv6q)AA?Rm`z*;7F`(r!+KHru
zV}T$6jCnziV!Q>4E|vw~4YqvUViYArjc!2xHsQ|K1YyDW83`N6El8rqJkxV0>x3-<
zmZl?tw!C(cL*ozr27K6ztNhs)8ce~i0DEkZzl-s}*s0DOY){hw_N=rPu&7%BoCdhi
zFuZaHYrm;<R!p>&lE_v$R2MV>)S-#6I5J3wn3V+z!?sYS(t(Gu1o}1O?-iR9N0(s|
z0|;{_KeW{+T~&_;9_b=ujjX4DiTn_6ZV0SQ=dZCT3ce0-)l1ME`C)9=+G`)!P_<}7
zp;M_>*U)b7BhJxT83z*hau6}ms(t+Y?KkAmv4isLYg>`n`KS#XD}tk0xXHptoMQJV
zB{;U>0!H3q%G6(3rgnshzs-R*NW?46XyndEuy6_zrh8$thQDdU6Qvj}#Kb7?TE%Hh
zoPJ$6HgN0=O|QoBFuu;v*BkNy&3FuqCConkyA#PICQ`m$&Znwjjp9zMZ*<H(DTcL%
zzJbM)Odrj4{rJven^s?FB=+$Z4V&Wj^ARHv*85N0t<V1KWcG82myNAs!W97)%pTpK
z_m$+QR3;H={ha+UVqD{+`EM5|3op`^=Y&C&;;I7gl3K1Y)cs$gw#O+<f&*XfLlT@3
zE-87Sga#s&#d+vlyEq9tPwgk2cYOwqf;oG+zjXa!nS@)iJ?sk+SC)nONQwdda{1hk
zXB&*T-r4ooeyekoJL<wHf{KdHDuVzF-a+F)OR(mkqe((U<Mv(15Q1_RPSbVCw2}ca
zM~z~-Haexl-3cWV9}W>Hr7^zgEFAGnhKeXPMk-j+)sT(V3<dbHL{HI%l3cA$AXQ9;
z*YVB<iOE%<m#|QH;Ak;VxYq<V;go}Pw94%i>{L6*SxZ1K>L5*IhXW)Sj>M0#zsr1-
z02aK9${I$qJfdTwr_WtH6Qee^03W6~aS9Sg(r8r4*7w0?jeO`YuI0n^c0O7NBX>UP
zWXVU+^Td!2QpQn5*c1`3Q-ec^Va-`gi`q3P<5Q8gQ6tvNMY0vUW_c|h9!(QdqPSL%
z%HyUG8};15Y1?@JuC2YpBWY|z5|6F%SDo3^H;mr#*@9{F%XUgoT~9Eb4O6yW2B*Kr
z`wyP_y!_ym6XDYCU#hK5Cm$_-q_rMB^i23U#fH|W1RAftvd)jXYm*P*MP3w}%bPz}
zxw@EUeE>wEk#JLw^ilZ-{33~gx|$!VOHyVuVjuuAj7$?_W=d2tW{4BrLw<rw?aD(S
zPTwWdfO;U)$iEMY)wT(%4&%@iC?xkCfN9DwCa@8rgZ$d{nX4yv)W(uGiVTkgr+~`}
zBk_o7W(b)Kq5x2)QD`>2g2GZ@fd(P@k<6>0QcL;NhTY3bz;FV1RX!WTSg9vDzt>GX
z8FpYGIjbP&NIWD&A&Ca#rh9B$=@S%@jzDEFB5a3wYpl;mWZMyHzD?d*oJ%<~Th}G=
ztKc(%5%5MbfHgY?^_nJMNEJIDz-IcO;&ej|Z~kIe?>Tx<pM7mB&Uy1AKjQtTwzi9o
zT!Cp>eB(qM@*7iu@oF+0QG$2F`ns=3+Wd%@Z8&V$5*S-UxPzm0!I$qG#t|zUorF;_
zr)No}A1e}P1KQ{mzJ@HOGM6ALAKr{dyTk}soDGQQ&{?t?J67?Co57RWkZ%cR)<M$e
z_`oh(-*^#8SnU3_UAVmaHl~a*As^Q|+S*Oi=QwhQJC$QC;vn~*yj!1n<*90qVDmX)
zb01cIh$;S%9UPqu{Drcf6zed4`d<!{z^?~Aj+5H7t#qU1xx3yB2E4;hjae8=FaQNq
z9x#a4xV@JD9A|2Ih=bbchv_7_F_~J!gH;c0^f3|3GVgW)+G()A3LnuRH`>w5*NLuh
zKQb+MZX?Ux*O`IPlnLfcHFCZzC?`<;&?9H6EmPE)8b2LfQ3M4wn}MVDO#oqja~abJ
zCNZHLWSvZA;^~y>+P#pJ@|={E2+$_$olFWm8FkuZ7a#*BpmqoFN1aV!ndJi`?E?5a
z_)Ox*JXt%~MzTTm|JW9UuVd1RSQLIHZPp8x`%>zYQ8A{>2Ur-(#=&ZW*7&<5n!xK@
zzkEXu9X+ULUp);SJtS;!q(<zZg;72j^@~v{NYY?BGG2KW2NmO4aXx~DqguN#%7kaV
z!L)Dez_n2*crylVe!$HOLrgjD!l;@}@A^8lI5H*H6UK2PvF44Bit*!6e0n!V0%;Qp
zZgzmFb6*eVyMPxo@)qBRG;)YjxJ!w|F-8Hcy=5e%p&!_^;fG-FK;rBPWgIQzI-pVD
zg(v<Gocz4T8a<3ZT?`?!51UTW3B7{jTCFQom*Z^q75t6;9_J_u&y_hQk-t^>F!2gO
zU~Hl9lio?vC+zEKq_4T2lRpd)rR~0bM^=>imY|j6F$P=B{MN+Lc{Sj@4=wGj#Rxlt
zBBK(I9v}%jZ`G{OS!&yD_+cD?Hn-i`G3kfCS3XhDNY;#Nosr>khSPLbiD5>v7+NPh
z5O9Wz(+d?O10q18g+gP}Nl0FkgUf;-Yz)M>1V;s*+BTYL?YPmH1J4Qk>7MD-67Dd}
zq-<|%+7MOnC%1<fP+$QNP^Jie@q`vMtRST$Y``v4(ifI0b=+{6=SCi(dVxPCkchE~
zN&eL92Slp&$bl{C!f|P7hK+l5;g%|%t$yBodsh!1J0Q=#b~;|CWgYrB4GJB;<f+KI
z=>kXdU>%;V3G-t}c>2<(8n<KTrXNw_YwltiHKu578h7ENg7_-0cq2#bJdMO~DY4cM
zHb(5&y0e%TjS<P%X&mpo#rNLAnR?s6+YU~V!j!RZu)t|mK42L~;g&E`hUef7C?~FO
zwBuZCLyE7xgUu%}dI+0B^13`)+vo}G_5h=%gRhD7qilATa{sBj^_icYNCDG)*u9(W
zbhPOltD1+n#y2#@7>YTH<x0JXx*Rhw)-iqd?UJZvA0Fi>*K2$Yta7rN<<2p#$7Q13
z;3x2QaHve1$fXa&moBEEPP`oIxyL}A78eZtj)Frz2=u3nApMa503ZNKL_t(}<-W1v
zC(K(Z6L94`qt!3!!1<+zgA~`h0i4=zr~6nU>0DG-YxHW86ks97C_HAoYo9y-H0O$n
zv*MCbM+;qo(ijTT$pUj(7tZ;t#vxRe42kV;V)Tl6@o-j>ku~@wyh9BxOlh;wB;Fv_
z8b(3|n>t~PlZM?SNQ9}=YwblrE>3q@<_LWdTzl-X9tcZzH^F~v3q}v@*=0jpO128R
zCg+0)HN`ssNo9&JxOthc0B(S={rUMXUzfwj4#?S8w_ulRIjSShQ}aX(UUg<07+`m2
zOr^$qZE-XS*V@^Ff14)uLw9#l;$pjFee`I61QX78vz@Jeq)WWT!g!DK-e8xnZ_vOE
z2bM^|!O7U(E+mPND8^AWFnYHe^2Gtlk;LYy)CDAP3rHYoGl(UEw&}#y3p&2BYt~<D
zw*zHi6AHdY4K`)OS%9!Z*OOcv-Gk9z$6#mB`%it|He=v_lI@f1pJD`g@MOnb;#P`T
z7$ews;hyt`ykK~!?XwKk-`6B{B_W;gYe;wlmsU=QUsw%jrhAmLavbr{mt$zcz0pS+
z9MQIHgUCb<p;(u7qh?8}jF~5|(2KOT!!n_bXe44O0gHdRJ?}FVSqgn4&Oyw9#>~R`
z5i4SLT5^W0f5rdG{TbpNxc3>YGn*PE=9ALFp-?0oaUz{(V^3{EIl?{*3<lOEiBK;9
ziln>Cp3%6b_$&PI!^ql%nABbkc=F@M02I8<Q3nVHVADDg%U=!KXd3}`ZkHRJU2FT$
zxTC@{^XR0~^{~&lkM`EcA(=-EqAfNGEEav!!-!jkUqRg{w<$mkX@tr`XUJ!6Z&F60
z7i}V)x88nT?>TxvpL^{L9I^`|H?$)(cE;jC#D1=vb^0)kO7FdmDOx`cBzCXjE?hoz
zx0`D8BUL<E!K5sXQ}H@D6>6Ikb|Nu~w^>;GkhJ+o*buvkZIsj3r{P8xOOoKdx;BF7
zqolDL){{qA(`Y#1=%BwAjy8k@4)o619ZR$qv@VenaT`&zX>H@#bmXIvJfateGDk8<
zn^-KFA8~%*)ZOyT&rYxp6kA;v<IE4B4EYwt3#7xD8^ouH2d3~@D^Hy(`+p=(qQFn`
z;~XzTRL;V3S;>*4V3zMuJT5UH`revEV*XgMZh4!~5hfwgccu2cS^7yBo4(43npFM)
z_~0jl4JH79C*717-pHpKw3xqwKgyHw^gfDsQSR%aOnwkySq%lGACLwVt1mMoUOU20
zxz({M(B@XglZ`es4Cgl7*uemWEJH~lUMvBa6AP1*fYhML^5(xl8<a21M{RdP&fa-J
zch*v+g&5{1AvZ$Rz&ja4t5Yy|N~$#T8Q2;h&X0f~z0EKk_db>@%aeKX_Pu(t9nfd#
zU|Rm7PRna)TeGc5_ubkjhb21>b8^|q|48-}7c$S&{uS)U_qX1DT@M{UAZK4Y<0EIb
z){5VSYU|b(X?hUPOvBM3K8_=j89ZD#M!({9U<*!!a71gHlNC#_a05q7@7lEGf=0ot
zPQ2nR5}{b%H;!6DvgNM?qp4d<sB9C*;7OiunAnD-$VWyk$&D#p8==HA2kG6nmJnK^
zyB)7(1AgMD7+NPcxLlDO+B&=;&eF4u8$R`ohame@xhI9bsl$@}w1d}14<EEd&*KF}
zqZ)f^M?MiNy-4!OiCE#Z`k2xA4A#TAlpHF>o#dMWK21IEL`;Nw=B@0!mb3vKA!Z35
zi#ycE0Xf%8WGcOE7@@EYq&ouZ{ctFvi=o7StAmO79={8gn)OiHN<6VFqJRa;9C>}w
zQ%4I`UGR(VU>lwNVKRw8)%M*|LLaTa#AXbVab1U#0i=#AGu;>_SR0P&bq<;o34#MJ
zB^fe){k~Q16oBAHc}yymnhe0R`~VR2$=H5PP#X*Zb5cnBW<`OZiC2fVI#R|Y$_aAc
zI3R)Vh6}NxuWNi(BPzC%dH5%M00Rp?M$2r%Fsytg+hW?ucEVO7$gv!$9AVnahB|SG
za_~>(!{;GjxVYJW;`>`~zpjUl9#EUQ#oe};Y{iiovBAKnT<N?ue|=b-A-5gVyOzj!
zqC_Kpk(}Y$wwV5e#G_2n!n!pZo!Z5bvRE_c@1*sO7jWjEZ`O!)W^~TpHY9?u4h=Um
z(Ak4yQWd*#ZG9rFG2D%0G0p{y^=^P^j11z&7EjP)>e{E;iEm3bBLRgGQhK!=z1hRo
z>TP2ZYnw*Wdu}m_9QAwusn6>(KZ{+r>7f+-g+c=N1LO<kdK>%AStzcFYAy?oF;>C*
z6EP_BkYjrFHTK3#!)3<!z<AWM%{@*&tTC1fWy>+g<0I3aiYWjF$F#_D8oW4>q&`+i
zxQdG~Iq!4BKp49wf$I8LGXhW$_1779$pyuD&$bn^dKHM}8SChK5_XvE371DbB28Bn
z=WUVb)da$y4MNjS(AX3g76r`=kkXp=m~jRKK|#Z7g9gai-eZu12AFS)2i0$$d@PJP
zxNK-rwB9*F`cCo#_JPQlfMC0ouYiG+2!Dg7XsVyhIJF^?j1%}5C{J|BdW8Na6NSc%
zp!Dq-pCpx4t>wY!6t5+Hb<~K~l>BB3VXqE|gmi28V_SssQ#Ogbh%=Xiv9<Z;FJ9MJ
zqX%z<*oo0LKAIzv9NM&iQ<=7w&d!yiot~CV#gQEJ<^~)o!x1&06>Y`3!AL?PnTaD=
z;MH7|7)D}8ZTqn<u>+XurD;~5>h;mcc<oroV55NpCBHP?Z6j~KHjX#H_!~SdiT1U2
zk-XxxvF&~~JP|WE<e1h^a-tTP;2SUoNRWNkuut8`$e-1F07vwSUrofo8k?$rV*HEi
z?3cw)recQ0w+X)7Wx;pN--7w-hsZ0&j|qNroPq3s%jG^Q`8Dz_rHzW6@tez}qy|`S
z6HO&rxvs@=xK@)c!waGuN-@zMVg$y(HfQ&95^4=w-;K>zJ0<>^7f^hM3GgNKFWA(i
z?L{}mU7^Hx!auHO3}WhbTFA<HV{B}rc&|}FV=SGLR_x@CtMW&NS&g|VkN4wyC?pIl
zr_U8c63X#lUa<{9x*gW#L%Oa8JB@2jDp*c}KllV&$n^k(HaI5xi9~Kfza{91X`R|=
zf)3kGwnuO#!j8WSa_ROZ`Dv`viTz2bDwYp!K{i0p?G;2Ypg7Tta&aZuvtM)k(!&Pg
zsBiu9bvbnGpq_ngE0289rh_<RFLqn{#tIk#<XxK!8u|0lG@EwaiR3Vn$e2=%O&+*o
zH%8RrJ+6a~I>ip!_}~a*Otr$!P&g{Zk`-TX2Ro5%S82QhcYwr`r*|<ij*-n+s~015
zF!JU*aATCtM)BbAV?X{SHpeV{R4~rzi~Byx2&103LBo^8ZNtgW7W5HIKjV<(hV_gz
z8XD^{m%D>J_`T1=)NKSxvR{aW6TUX(_u+N*p(w=zjz{SH98byTQXE4+4qq~Qeq$;w
z8)b}35N8}C<iX<+v}bK9*K;hG@5&3%%5ssOJYJ#PEsju^G0({xx63lb_ppb8dwhqa
zit(QAW1>gq`y<Yz2jtybCSBs-N|x8Epzac%fN9Z#B1Xt#)&X4;sIO5UZ8b*pu$`0%
z;OHJU5{*Xf$)`3{I0#OLRg{~I3&jZ!qxMiZ<UfN<yhWLMA8C`FUA<gGPaD}yAfoLG
zOKmYGJs)s0$(juXWNvg?+iY~3dF-)qxpT5U@g$VmL(=L=Sr~Jn=S`9(h<{|uFmHJg
zv$uXUvC#(v{iFxY<vhB2!Y5%EQLEK)&r6j7`!W&Hx8B~>L&pxtbFXdr$QB;p8y)z-
z2k6=;-gb<RSt8&Y9BdaWtS|E&r#_VkyKHTZ9USd}Z>R8slzrp~k~5r=OzYKXqXcc-
zSj4EBjl}r~W9%A@v-aX$wJ}-->ltm`oNZ*GHEle~7^9)F#w|9w1U@kh98<8k(Iwu;
z3nPa}$JRjl+B;aU=emh?e>e>u8!d)7R}qrH*hGVG;)oGWJHF+CQ+LZVubj{lSE`@U
z$asyz`FFB+j<zXA2|1j9h0c-gi9~GS``-WX!z(<W^)a&Hy?FpLnh-N!M83yrqTlO2
zX@;QG!G5iup)jsX!c@vrl2mCXjG!*?2pt&oCoVJbT(B+t2OUDQ@(kiwd%!i)q~sCl
zN86z+pbdECL^^%E6L&bVY_7+BO-plD1P?sJm?=RRVesqN7AOEsx;4mELzw90qz@<v
zUuVN;?-!%Sdwn_VVC|`k?oSw3D6Yt>xl9=$j9P6SzLq`(kCDgXBwc+r(n>eU3Ko|G
zp}@UVp5+HjA&^ZbLz3!y*{(g;kN7YD0rVMbY*<>FK{v?(e6~2{x=jG;^v;PYsxH}_
zQ%C`)evna7Re9?dagJV0$-*nMY=guujOx(HTrBqY=}Oq0iKAJ*Yt+`R`AAZ%{qlFG
z!df-jA<Ap~e3OSC4Pw)}m{3}hXh)Y=GP)ZHPOJ}%GXp&lwG9p1EH}y<8y4VTW?MT4
z)1f@Q9J_~OhjXmq^Yim!G!HgAL{dk1dx8h+5n;-g^)jTS5T>EWQCENa2_&aH^*)3R
zcv8*sKXB@9ea7E)TM`7pWD5;E?q%QBNUTJa;|@^}@KE$~aDnP4*mfChqZrV|x8@Tb
zP8GGK&5WgM6dzC?uP?bWLp;$h`oAQbV`^Ad%%~4v6Z^7E)>cjQML}m2x}C#HyStY4
zrRBF9Pm-NcX?gGEvxjwHyygKl{^v4=LDEpMmCOU=6opqPJIjSLV?1Q50E%GC3|Pn5
znk1|#Pl|{HK>$nuwiqTF16pb$O9fB)Z{?elS*pP05xX@;SujgB<|Z*kr@e+WCUFM5
z(eNVJ1?i?uO4<?()RxfA^)?}(AvR#ix);7Ky$wVl!FJmunE<6^G<~M7Q`<t{vn|*^
z&;_Qlm{2pON#1NT2%$npFqV1i?KkAmu>*ScwXGP5f?ch6=31PY79&JUOssZbN;5VB
z;5t7@ss>N~@aPrWkqYb6XdT&r3F8h-hr*86I-R?OgOP)tkE+3_SnNW@Yw_1NDHt7F
zGndw;#bL&=Zq7&1U_=quD&jeLe&!vFq<ONq6I0Bw>zI$C@u^}PEsZH<*fDIQl90gJ
z^s8+Mfh0e6K!-d7w&@#ZAd%b|bai0zQ@LMR*=CJb3XVP*(?r(zUG@!#9pMM;XT>+&
z-^pR3T=r9UX6SyByd3%v1B^e)@vOv8C&Yb<`hWO4$5*D6@QJ=3Vormxi2oD3Hu24|
zHo@9BTjQ4V-eF&8=U7@}^_tjy72AoRNr9SpN<3zLR{PcTm+QF=0eD*LcL|+;Z~DWi
zr#geG9fMc@IJ3}**-!z9m6zn2Yy&lFKqKGLeBX}og(Hw^MjiYi4nzwLRtjg;G5s!>
zZ?sU$lH!b?iJ+vZESCp<042~V(hNFrAt!)jEG!$+Le`*BN^XEZq{R-!HrOO?g%78h
z+A4`vV;Af=xr{f>!LQng1wq0vIc4Yx>w)aiD(kZ2{T<p4{Odj<D*DzhUzdB19@J-F
zJ<U^jun{2dTwOwPGGH>{NsVpTfP;NubPA6~u>^)jr+n9EY|_A8wlu{^iDtZNZJ-1&
zXv9$@aa73y60}Ip?1+#^c5RIuzU>2#cZuW{Hk1HOr-RAR4$J4Gd^<482J7g2H?U9V
z;`I68Bc*WwG_KQ&#5}O)^>w}p#70SJt>WM`O)l5NHnt6G9Jd$xz^Tvcv#*|nhd}V5
z<O9{Fi?2~4;GUH_<M8eLy(tIrF%5}{m*-f>1U)K*yOtQR&TsSm)O};$)M4b9Oxz0|
zjVi}GlP|}4#G&W`@Xq}N_C-SNPRowTCh{Oi!RR4Apo%uZ13g6FE73UVo-l}#p;QJ%
z5d#9R4mhA}Imaq_2{c>nB3PfW_sT=u7o|0N^ifa5f|1%Ghb1N9!c<(Ly+H<p*~why
zF#RU6vj4z{xa9^kQWk=aj!_db06bb}%(4R9n2Kx#3-ADX8bJ)$$Ri0U93f`S-*um?
z<F*bPZz}JMvICn;5V8r+Bp>N#LJwFr2L}J1>PJ#m?G14yb7}OY&Pc{fwP5J&3AZiC
zb1!GXzjO5Xu7q8|clGV9w|DjM@dNVgYg_Q9gxE9?i9$@#4bb^Vf&y#fwg(!ii=$TJ
z4G(cB^AeIhy9c98u$h1o$w*9i!vJjdh_^goySTeIUcVMe7Vf5v9k0Ij%r+rJa^)jh
zm;~DUWn;%NtjB}(i8yWT@Avgl&1D>L3>!z_sFc_^;?u%umvA0o1iEqT3nYr$F{&7A
z|6r4jC)Tzb*Vb7^!isM?S!@sb!1q2cKls@RikN2mX|yE8mM#{k*YO9&=%Gs-jql}t
z^!wS@sBfu0CSJGtcJcix1I4EzEBiJ3E7wj~<=9{)YwT$2uZbB>gAxs7+w=({5<PDf
zp7ARWfHd2Owso|tV>wFLR#yS3p@>+d;=}z%j;pDyChj5;&!r$A@bb`3M{8xGaK}|$
z>=w~+8f~K23mxJhV}N>7K7*E0j%;uU0tN#EAqkoR3H_0oFkcLEx<93WDBES<Q^`?I
z*HVyy<_MJzJLabgcC7&k6qC>w7}eE2CE4llYixiaA&i)B(oNtQItKl^4zyl#jF9fM
zUZPE;Z+M}OF)0MSH#$dy0hI^+ggf2~Rwnd-T!wFWU<>|H_sKrSUvIrVz5?yy8Q(xa
zYuzvz^MuM0f;dLSr$b@Wge7;r#tf!WZPe$p`!{6I{xABpalAPLMiDJ3!^Qr190;_B
zBW*bCiLXpUSv=|69`w4+ncVTjR(kuy;O+a{JS>TU5iLKX&ez((Yub2Sp`3mCTk_2_
zXZejAywSx+;NpD2SdWPB+VwSdJ5V1s&-jSr#c%3-KG!e2_<Vj(a2#Z9y7HtulK3)W
z>ipR#qdf@3>+6i~2T$ECKY(-e!rsx&qhr?OF!r@eki2sr3qgpILf3sW`EiMJ9FrhW
z!f%Ll77OUNFx3*<q+U1vk`NSMy2OBa;`j<25Z@xyLez~q5g}`=tPjVMmCE`N6ugnS
zyH{XN_a^Y`+Ca=qM{Q#6`UBcYUtyN&qi_P$TY1P9#M_Wmi*>>LGC$LDm-3133_E`6
zDC`;wn(~Cqj5!}F9Y9Q-Dsb2+tJ0^A5a|KilubbtD4i%dt`Xq!T*a=11>{7uJWV-Y
ztgxgWgaNUDdf<4F1a-={8%Pf^&vdO2V@&lry(Hrj(s|Zb4x)aoG04Pgv_ZNLIT*&K
zZNRN<uM3u7LhC*r*Lywmn5DApAAXNy$Br>!-(a5PM0*)OZ@vAx9y)eFpS!r_(|vTL
z2kh>oH#g8UY8<;l$A@^*kVoNSJ=a~=Z|I)=_j;n^J8f-R64w63bv#!tUR@Sz(PGV8
z?5gzyi2nNY^X?$mZO-M6C$=cDqSwN~rjj^N*mfUVVzXc#eWWq&edWD-WZxZ+z*{+D
zQ$|d4+wNdE3vV}$K3O`>k=***Fkl^?A31aBahcC&`h^#tr}O=MY8s~2J$c>6gwsa{
zdAfYm6TK<KMk&XHdbLLH1bT7u>#$QwG^(H1m;#hAaJoOFha2z{q^ImJ$Vh27Ju}7S
zs7s#7aZ0qt2r38ick!^ssDxL<txBh%hgc;nI{c^NTZ&5sGb@uj)97l0Wf^hp;%Ov5
zBw)gT<!|v!y6O6?q7zG6DfSlo>g%HIn3NK@WGua(G<$)pi~D~`v;w=@&#ubMim=sC
zp|cIZ8GKY23SbffFippUzatru%CvzNjt0C|;J7Xtan=j|?G^8>g<+?WJpT^WH2G!c
zENhIdltG%98^nzWNRx&qm>rSirEN5BClt0Jc&#SBRgUI*TeceOG=F4ykgSCc;`h3C
z8RL3Qlx;WB*Kjzxh8TKfGK$_7y3Paz&UG^{qdq7gj%~m7_8W5O=s`XE+7|3e#pyU3
z8G>nCS{D{OXz^S-Kg*4FYvMV3tHj~1{hP9P|6!Oe<|#;@F5QmA$EGg*xD^`7@^yKF
zNeIfuQ_8W<?YfPb-2UWNZ2X`N21`of`~YW|QuW=bFdd6;q_8RI2j9C_ueswP<`*}Y
zSYl-fB&-jN^^BH$;gmNg;4vNjtPYnSm)U$SUwH9c9E9zgLoCsZWE+#dn1%(rfTMDJ
ziWhbxyN-94<2iayjh1S$M&RdEYzWg2e}ewTT_?wp?6)}(QoM|?!9E35Md5m|?te)p
z9AIZZbkAeI?)s-FUok3jqhDhdx+ccONE<#Yhe}p)w$kbQIq~vP$K#{_P06BAu}m}K
z6n+l{jpcG)($Gn9xZ+dt5VDL3UZNPu!)7-AAb@*2ElHVRRcarM!1>KMVV}XKFFNxZ
zsbKqIHANQ6%q3h&2rvq0E7?i^R1<9_;{s#K29uO9DHoM-+5u!T3OA{$7;l#p2nf5a
zA`U=f(uk|ESawg4_GM8}AU%c2^gT?v;CsO<)5s1kRLn5uGDQx@F7u!GCHFuckn)=P
zBaJ3WD@ii(ebr=g!d{Jb`geVY2skFXr4HaKqWb1IqIdS<Ry_xA2i~J<qhGMwv>bH;
zQ-$R{xG=JYJ6J!ve?#_M|3%+C;k$id)5oxLPVfE9opST_`*d@2pWgC;JLJnxKPQot
zE@iQOPQUo+kH`(zUn86Ex>j%d&~M7OE<Epv)bi2^`RvDTmm9C&C-cos*?0Xd^2skf
z8lzsjgIu>U9}_*828IOf=8c)&`SdsBH-7axnayUh`R;4<_K)8sKk>D7D}Eon|C9Ru
zU%OT}H#X(kU%gfS;LlI^+PhD@XH#bLnat*MozM2_C*HFu*L>gsZ}0T+-_Y4?Cb!&k
z)aiZepWP_)jT<CJMbF6>fBR0kW&bs@v9V8X{=gk_-}lct*2B(HZrq&7$A5fQ{>8`d
zkbN6-9WFku^Z87_@Y8dnJU`ZtePEAn?Eek@-eunC5u>)TQ3c-|g1eV-?Ik9GHq~wC
z=si0gui|l`*lzaY&TqoMxc8wz_D<rZ*X;bNixp$1Lp&qH$Y*IE<5~pC9B+#6#xwy)
zeii>t?La)4hzH_@h>;>+6Gw2=4Ft_?0KFuu^O*3qpO%bbT+?)ILRVdGQTt-+Gu?m!
z+r};^?x(hM9s-s?b?H9w476R}jctH#Gfl}dOxVW^I~z*eGNBFxC6+;;tO(cr)kd)T
zdm~>lVwGux4EP(2b;Si{@oln{l^h8f`MW655pFS!Dm8dvrUJ<;8xfi-{R4^*!v@Qt
z_B~?|E|W0`_^J*=F(i*Fln;Y5JTj(c#6|xAL&lYi-l+hy6LwVXuQ+6~t&l_dd#p=f
z9`yH5wQIsUEXa{!q}eu;K0FX)enirB)wh26hTL=Xpq_p8G_SpaO$_*U41Diu9PT@m
zO#=DolGtgB(|k+0YyXDqz5ZTr!_RGl^=bEh=sKOx_Q_rMKcJ6&`y2A9kK7>h`KI3c
z!*kxo=RS0e%r<Y4Klu7L<k4?GpdbCUy}J4C_sQ9juYd8Ydv)_&x5?)oxKAGa_5*s?
zr*GH!e6F8+@tm&>ymn)zw?A>lr>ygtd$(-Nb>m%|a{H%$Page?WBT>`KdH0%TyA~v
zxQ}E#`n$L4e6~kE@kjURpFi;px$EQam)U%-cRl@_EO!U_$>rze%Qx+neIIyGUbu8l
zzV(?~WWMo!pC*3nH?Py#e6D-md#@+WpWVNy`#$hxUjupX2d|a+e4pI)zytE<-}$<H
z>dqTwKHt>CKm4)UuGbqkW^&`5H|qO7`dj+oqYvqD`CF?Iy`P@bVRw+bK6ssMzWaUh
z_$AoD0=tQ0_it=kaUI5}DU=%&M>c)Lca`Yr4_-Mz4=d4GHF1DEm3-g*86S?DSj7I(
zN71W&$k)2QD#Ca44<=$wDoAkRvyT^9?%ei@;QF`_SVdA6v9}~25D%kniivm~zQo92
z)eq|1+K32LW0=sb#Fqn{^y%~`!*j(q@d`@EE+_~xPi)T#|7;hgPs%&Mh7u2w$kUgC
zXQR)c1H6yFW}F2>Z2=;tZZMqAuycd{w{_a?UbL;rXdR$pRM;LmN*gQ^z!J4dVVNhg
zh+KyGprirO?l8#sK{<0yQe^(EsXjOd$=U}H*I)=z@XS1;{1kYS!6UB?pNy0HP)ar@
zaIG?PLJo!pyrEvmc9m_J%Vi!DMjA<XbYNY;$9i5~{l82%+LOe$MO)Ni3K$SrTH32O
zW7yO!9A|=?Eo|!3r)(Fo9?g>g7~%0V+pH{1>!yU^uIo2s&;G-TZ`PnG)AL```D`wC
zK6={MlnuLseB@o5y6@M&EW`FfUwG+DI-AYplYjASj2>QoMCS9EeDcT7%W`LskACoW
z{p6EdG);NUY$kU+dBzjf>o#U`$CF!PM~V2GFUHZwn>XjO_r0I;b#2R?rF`~18*<GD
z9~yV1Zt0%cTyK5w7|HReoA$__{h#x-cMraIukO43Azkhc^1_dQOXl;LJaT!JY<~Pb
zn{vZvZkE~Rwc~X5^Rjm~*IOUkS|w8#z9F;OT<(1AjKmb|LhpR{rd;#u_xUK`4I6Xa
zd;KTWr&ljMF7w$;zVPDna_`4(*7@cQ`tXbA{Cq@zh22hl->z@Wfa7&M8HaU#alo~W
z{Mswf?v`g>Jt=5^<cZ0)vmeK`8V|sQ$csC_rMAPb)M8>E7o8}@yUedS_dDTPGQ}Jh
zv4F=D?dhVtVlgQ5CKyozU!aee6+Jj!)MiNvIeJ&VvA+f38oR)*KVt{6Fw>(L4{g>s
zoZ@E4M|!~apbZ7PYUr2pm}5YyP|B8gj<%8P8f7o~M!k3r5ek`MB^Edc6(BMLNokZw
zB}NQd>+w3phEQYcko*97=K-`>mDtHgN0~<e03ZNKL_t*6Id^KK3qsgf!X&}bE4*v7
zUI!BbUF9-NKl3`4ViSjgl^2pXCr-gbmKXvGw_|D}{Wb<obtW)UW}$UFR6q@S#w*L-
zw`X)ZJ7|ImnS4(Z5X(4V8?CN7T8+W6{fK{U%l!P8Z^)rz2jtmTPiwrSK3?k;BYW|N
z26~sRZ4R(QgJZ))yspdE&w0||qd@Z6{hPAq`ook|+UVhOcaSqr-Y&D*OrE3lZ-aj8
zGdIX=^L@J99puzQx9M!YC-FbX3zwgVw`ADV<2gC?^q=YBL!Z$3Y^JwAvE{EVyKZA9
zw?A>lckSBwaz^jwjhWtj=vW+OvNPy?H|>>uA9_fK?LmL?qff|uHkXHAJgYBUI;SsO
zJf|;QI;W2xx>@F%*ZDCeUwQ8yz2=UG$Bi7%%ih^cZ-3&n4m;24=6o(+{?RvNKAXu`
zE<7(kdGT{HpU?H-^Q$EK%oBIWY(8I&RKh6gw?1=&%s1Ze>m_g8nCZ>Gd(79)EiOH-
zv-wOu{IU1Td^VFkzjjxg$p@QW@C-pbd^yhYgPp~Y%;C9yaVYeP{)4CP7JM@X`<Hm6
zL%T)Wc7Jl$;P{l{GrEyK=(yiw+)?;9Cp5%U-#0ahA^%RXkYZ1ljJ5H?J)G$FWz$EZ
zz5ae65cnj%SnftX)I}=6G1FV}ku8T83;}AVq)6H%w(U17<_-NK&%{H4%jSa_MklmW
zaSz;*?Xav4lZG5w7u+SFUo_Ygq@bq}Cr|W3DCZzRL#T`qCjzY`!K(mNxB_lsXNEy}
zq;y1p;6xx2z>&4Ek~>3BW%)kXB`dh_oUR21xegeK<53eR&Aej$NIIen>Ms3DJW)&O
z{!|i^oJ8F*&}537K{Ap-K~DW1wrzC_4}gz<CmRW4SFnZr2^mv+>jFX23)-l&pLphg
z*Wn^s<;3#QPS!<ZZ*d6#f9vhn_3*KSt9RYPu1-9t*mu>!1`XUrTF<vzdIEySb>Lyg
zw!8GR*Kg?F{fA)$iFb>hdg%Q+pYQX8!j1;{-Xrgm`Fx)Y+Y9~X@7|)D@4k)R0O8ZG
zV^Vhd_+h>ES8tS!`CRtB_ZI!|$3L!n=kwKZD&xAcYd2<k$MMrX{Tb^OSBdV;n=`%j
z(GzNG;g-9DeEGe5W#0!Mkzr>k&wc-PnayW9pUq`HpX+Qk)A?+!v-#>{yKlep-o3K#
zj)#2&?F%>U(d$0=h&=z(yL7g3tt@wz^8SsP-uCEeJ@w%GW%J#4_)g+e55G_5vwd-X
z-<X7*dgT3LI1Sr_-mp27TOZqsY4eNUT=BJeoqXZ`kLr9j*H1lt);G_<JA&!`x45eq
zH=p>fYMY`pn}LllR{nwSeO{h@^#sP4h<_NBx;Qlv6W014(T_ObX790)0u0B1rVU}z
z-d65A;s!b#_MaRB$Zs<*96j3yWDH!<30d68vKbQ?29Z9=Fo|!$&dC~90&R4-=KH}{
zhmG@@W2N%HUCx00a=K^#fe!r&`~Xq0z9(XYaX?PC&A6gs;W}W!I!C+BHsCbZ<O7J)
z45~zjj>gx3$jk>b!filVFl-Wb4U;IOsi0FR)5-K4L{BIZI86eefNW!Y35TqJ)J9HJ
zoM$NltWg>z2Ab)3JE=Y-8K7IF!-ixu;+jB<eS%URD*(HyuSPy$-E^Hmkj!zk;wFd<
zDb;ybq$zQ|1}IO;kngZ{Ps$qH2^4G~1(S?3)5+J8Z2^rgAapcURet{V>vHJm0X_Tb
zmgcuL_=XHW;$-3L)qFz*9_njJo{jMMZrK5Lmc~@yxc*G`?!PyZ1faXvUg*{ncgSou
zm$N%@e8_TlkZ*qGW}R=oUl-d8{oaG`liB<lcvHuU=VMR*nH)X;V;x?4SU2V~x$U3*
zOZnzc&-qBxjhl11<M@`#bM59_?|5R%M=5<|Z<OKYjk(<R*a=Srhn=N->88E9??aEs
zVrS52|Kd)a&1Q1eM+C=XOKk1pI12XQO?!0T9S`~YX^(&DeX{wk59_f%dY|su|1V{^
zGsstdeV<(O!EeZyer=Cld*>r!BaB;5-Y&EGOwRgr>S~nmo1eKwXB+SHgPL#Ln8|J5
zJ{{{MFFh{v*<3&N?bR_lzjf0d-Tal`kmq;!JVZ~@Y!@(`Ip}Xi@gsL)WHXMiaeJ}j
zR`mW;ck2&+cB0s#bzbK4Xv3<FZ-BGE13QOm-0wgbnD(g}-+~p2H`<kT**xrY{S6Ry
zhJmvZFQdj)MxPK%D<1^4V4X4S+Yq{)ag(Ng*T%#>wLU7>nUIt8Ty>bgyX4UkCAl<0
zwb>`BCetoDB)gt!!)bA1S!qhp<vxkoz<dh?75XkpI>Q5#6WAckKTQec1IQF+ye=jf
zqh!TVYlp6ym1t<CHVGi?SObut9e_v(Q27YQjwG)$=71LrtCx#-i0|>ghHk>zx$g{`
z`3D)fE#{B$2vvunm;nQ>NE37szx&{klbA4k;lCkF!n4R*%VmsmVusd}aLgEX@@8L{
zdPr$LE*Y{<Cf)d-mz@aKUS=%#^Iyh+$#}E|o~7nVoA0W{O%^tC7Nd1GRf@0evQfP_
zYj0fRwtrLhUVpDAm2uA9Dye(n{MU3go5`K4HEMpi@JHUWq1SxiJ{fkG^88Ofr?c5i
z?)r;oV}$Y2<2swq_0Ffy%5y*X4Vlenddhc|4l-OiCY$q_-tpv?ZzQ;GbFOzhaT?aF
zEq&y2wd;1Sw>|b0otO8e_wLbsA9@(hs+;Razr6)Jkq7z8Z{Di!|HuRW`m+abT20;B
z5i>8mc(2T6bNQ|7_sA{3^DP;+7y7+NZk5e<eOPbaoXbbPf7ah@@xuA9>3lZRJOBKQ
zU;=jMdsb@}Eit=cV=lLS`;7SUH<!O9v)N4k;Kg$?><s$+Pw&;)Y%aGyc+#iX<G|&C
zM(tvKUaZN)O*1yK7@Ioc%)eo0ko!;Gt<V0fAJIei%W)~k9=7quXUty&9=HVj1Y<Sy
zi1;u|{Q|i@#1msZ`!@Zi_{aVa{I>~D`$g#=yNtdZI5hY`-x!@BP)mI-CE&u>10STp
z-@87B?_oVtMNU>yJ<<h!q{V{l#MP0ohQ5dOlH#TWUyM(c)9r&*=B$-|lFABZW{rJU
z+1A@3*z#C&M!=E+4c?}4lp!-Aic)J8Dw3z7R1>x{n7B5XOm)TytfFesL=re`2t=<0
zB4}?NPHa@_ilI8m2#V27(+^_`h^&rTJK<k#5oJk#8$FR4SVn3)B<B0*Xc&lz|DuD!
z$MmOfH;<?x4gk#hHn@c<mtP*+Dn14FH}V3R8si)WBhB?>1Dqt=?{4(ZUxD`OX*f<J
z4n>ajSiUw-{QNpUAUCG&Y@HsS>lT0Wdvh0h*Yz8+@t#k}!{2#W9{JA0^6<AGmWRIm
zkUspKhvnF%Ro&nJ;69ygT&JJ=#sl)_PkvoK`_UV9Hrv$0KRoA0wS4N=_Q>YDZqYA3
z{B`-(lV6vQePEw#zUy{<Zg(j!oPSVe^SR#o+rKA|ojIzHJ$9em{@%T^F`wzpzx_3R
zc1$Y$z+^ZkBsPdF^yZDZ-1^u_NC1~|-%WdU--jOdw@BRg(Q!xYm+q6tp7@5`_301m
zd_LDtJ^7rkPyE_VdvwqBpVFg0I_e{+H*U^kKAXuWe{^=0&|Ubl%w}_)&E|UY5}c{G
zyOiJm&^0>WxK=**^#|m!C%++gee_0|&o}hmAN|-jfZVV-lUu*N6|ZBv^i7@3X8MH}
z&-p9e9{k9)I^VoOPhGY%65;S=7=g5;&X3!%wU(gw!KU(I*S00d51#tGAFrbBF4>M7
ze>NW#&HkVK8$0?wK4F}p>+5{Hw3&Ufk3o{Dm+RTrktc~Oe%(aK$=K?KP?hvMN(Mp@
zv!HWlJlf<8zPHI=@GbcQ#Jb=!#YCr5<6tBc8S~&fawmv&z>mv?*9z9+G)VuQ{pH+%
zFao|@cMXkPPuK8nWjkyf)6@naWORH)51)ouKw=;>t@IaxN`F1U4D=cDqP!|F2}gvJ
z0i+Hc<jKYkyhD3U5?b(Jf`vch1C?J5Hp+!yV?bb9%oXu3{ckB&1xYg-Rl^sxlZ`dF
zZJYt@2cJ@!pshd)!b68SVAnW89>omargUghPu_RB?UQYT3Ei)<mikc+=%WRhS^{xl
zUb5|*y+PZQ<VD%>96dSv+8N)tU`L?%h74bawWJX@AIb4W`TQ0LK5Tb9;|&fX9(D$~
z>-r6u&t^KG&vZVY$!tE8`Ft+(*<3&T7tfAuJumlu`Xh4V{(Z8!u~%>Y_1pE!Pe14H
zkX?<8oz>6%4<D8re`T+1zUvyf<@VpyhhO}$k5qm0fluiT`}fJ_=BoaEPj1QAKYp9;
z+1QjjpFS(A5xv!}TX-9VPdhJm2EAotCbvC$g5EuQ-%WdT-v=KNe=EiILht+CkIKzA
z?UT*TO}Xx-TlI4fAB%)|XDO#1`h?#2E1R<M?rS}f{PG9($$UQ3(>sIW=8(<zd_3OA
zYx>zaCtv*ZopQteeY&~1S8o2m?Q-Au&icB+VRtDvY|izzZ=a5&{o>;~pU>s@UpyD@
zq`mYl**BZXjsN{a8n2)me3OQ)Q^d8IxEt4L+d<bb;_AuX?o#eQdAC0E>Iv_}++Rw(
z$TkeVJC#(CgFtQphEC<6{p6bwu-3(j@;%!1<V~tSMz&VsLCDy|hmwwDo)}E(XE15#
z>PMZxOVZz(@ZoQdP!O{skfm~2$0Luy{@MYOjH41IVVcwW3*9F<C|1T#8gQz*OSYTs
zH|rE>uztCJ$rwA%lpY|z(|px?vli^e$-1Ws)^Apb86G#9lZ!m!U>Qms2}xj~9+P0n
zq6z@S6Bw#M?OZn-5+xUq;JP$!HBLuS!C4WELFSWyCffl}fv+jUXJax@LfvFxRc`Tr
z8Z44q5FO+XHOO|>CrFJPSg!J3KjA5p$zR2b;#1eQ(*w|`99)ausPM|kyW0=SE^*&w
zz|OPbFY|;9z4eRN_3-h7^4x1@VtUqhVUC?Wydn$UkqSF&@l6?nkLvg$ejEX!!-e5o
zK3vP^N4UV$uO~UN`;*tv1z-MtSx7+Qox7Hx3_h|IM}ycJLmS-+x%}^r?Ldy#l3C)!
zYuM~nV(`WY*f|^rL&NLQ5Iab+cnzJ&$-89zSQMNBr}dFbPd5D>z%Ui>?;_rfGQJVV
zM=*zY4>BAOZL)<P@i?8;8og&;J%J-NWUJEHHeO4~2l#JtDe~RwtKbO5Cya()gAQJ>
zu^jIrqzKi^KAPf96Za_|gv=1HyiH^!C0LS@X^JiO72BpD2Jwo^NS1+<x)dih%0rnp
z59nhs%1(H6pQg|5%P@_e9_1Pk&(UzH4;e45vkz#iDTno=wCl3)8T>E}xS4Y()Pas~
z#<*Hmjr7f^%!~vTOok-6F~ch-gq?E9qX9H57uN$EL745g<4Jrf-vh7`k7&4oNtF>5
zFrtIRDVTAfNIaC_fK7HhXrYNCgRZM!OzX&@C<PA?BnJTeOGC9&c0f*myfTK^P7X4C
z;tD!LTg^D-It9mEo^_OMq{_s>Ati|F4iu<TU6OZXKOT6ZLX{D;Cqbu-EF|pSvg1`=
zJ5A@~;fwAqk?`HNyOH4dbgw6fwp%qNU7nyUeWxfUk-ljG6EaIg;MHG|^u$#0Vmp#f
zKjH;Po5lpo*15$QfH`rEL~nqk%GaaeIe{>p>F4gjC>Zi=36UqzzP2uK@b|@9vTR8s
zB*K=E+GdiFWgwb(E*`#jI5vnxQtQcFoP(#a7SBd(K@Z!JWYXF_nA(rC_EtFGf9mu4
zgIAs+&j|aCm_t6`?gzOOdTfb1DOPxC@J5aY9Utt=5O2LTilOYMT`b`H*&jK!fEQ;!
zRqq><tR6!H$}(V5@gOWG`6nLjKG3#*l7KG8WbEZ2TH5kp$ACLlhJz$>+-K##6m^|*
z?q{NnXe-H;_$A!Dh_{2^g+!mg9ovjPyV!SXv(cYJ2EWI$Gco}e#2d<u^~P<Am^2`?
z=RV2F&H%|8SQvv39J%&Ev(Vpi2bhzdpl8jKGEs#fvj9&$@XklV2M8uZWu>KS%!5<|
za@uI>NRN0fhU7d4Hi@?;U;%IFoMdoePb{YgD#RDUzF}7|P36s?u`Ef1fk>s6fp$`R
z318@=+A`1%=)BXf1#Ig;h&SUwGHw;WP8Rys==iO-SBc))*G^MH6YrVD-I(KnxPG2m
ztQ)iBg5G7DcAG9e35a7s{0uf2MZ=`X4=uK2)6e&_q;&8RNI&Qo5{*c#26`_oyy3$W
zR^LEC$!i@Qv`rM2och^;hSN@L;;>P*m}VZFR*Zr!DS1WSY_v3vdI3HxS%zfXb%yeK
z5*_O<y^bZ;KAMYX;zc`tp5Sgw&+_?sF~#j0GDe*|c<OHX!7C@oUYk!!RLqU~c<8Y*
zTR4zPNgW4a^ey(G_Fngacm@3h#?0I-1(x(M9)6zs9QO4lCQUr}LX38%*2{zCur8HB
zyfNfO*=Dpd`dq|^>MDrAb`gzWjN?AMk(=<FN;+8=NI#UK&=%1I-dJDAv*9oFyT=IR
zOnq|Bxx!weGV+sn!OAj&p0*m5px~~v7QFId6DirT(*Z%JI>d&)%OF#2Od7-pkjt{J
z&4i69Bhc;I0RXZ<O~0|$D3!lTNW{kLiGb0^#03o$+7qPK=*Er2lO&1KW@Kc$;bfka
zP|5`XIO!>@O`LY%*y@(-g9)*Yk^ja{h(0Azes{$K#^N;8=+}ey9@l)0d<AiC$_w%n
z#sfB|fmh*y^*|a!I|cf0{bE-S9X}{%U)zdgVK=5b2S_-4CoLpxmT)aSnOVfh)lTf<
z^)uSwC=P!EM;t|xrcno&;^gV$n0|~kVa^vOfOhCJ?HsiowaZAr{E*+6I`$()ED`kN
z2;LlF)1-MS)z0v<X;GWbg&nRT4{uyqK;i_yc_eb%M*RkQGsyr+xxK-{M+|pygwS@`
z+FHw4dl@@t1D`mbaHO{#>p5}PZk(GK8#5j_b+<h8v!}@3Bf^JYfitY@Umy;q7yy0>
z{@_0;k>k4D4#gE~FY)8GYTTlDmHSl1ni#7foCg(3086qW63pa#C6+)evo<B&E%l@C
zO7Tu9K9)Efp$fuKO>`~x8x}dnD$|9$3k3{&g18uP6#J>k62?%Ymimh}nU*9A(n;l%
z=;yfJ*dW@wrZxz_R1Z9XXn;JkfG`X1zZ%9t*v8mW9Wo*=la0k0aH9?|P(T5>CfZJb
zRes!Z2++8VZ8wIK3?}11!NSdELg8x@9^@;q$_Z{bO5!8eU!liI06VX<2Ug@4!9ug4
z_OcOHLKl*Af-b5I952wA)Aejao!$Y%XsdPX)TS^UNnO`EJ52VnrtE|rAPYVA@09M(
zfBCu`I(9(MzIH|yFsg-9j@D_@cN@WiBw_){N*sI)$r2pR!AVPu(D{ZCODuO|WXjh4
z#oE3_B%!v343GK1b%DE>1kt*)n3CKMdY&v<GPG-N>xjdj@%_D)uwruM$>%O4#lALi
z>AP?je$SG{Sl1XMYJ)_whY28z_Q9xKyt*vTEadmt#yNO+SaPiGgEfacfIF<;a~=59
zZR}F^>EfNGJaFps^32apxQ~Dncnr(_KyjtF^PC*Id#%EkxjRRdHSJ8sOO6d3KQm7{
z#!e%cBuhz#(II-752laxAdcpKgLxOY55G&_VbqdtfZ6yr#Yf{^5SFG~#?WJD5pc~1
z>oOkL2Si>1u@d-C2^{Jo;R`r5c}w66?Vw%LtuFWJ^af}*wpq%<zZrM0JJOs*Hk_3h
zPa9olhKXKDa-9B}&PPzm0csc|)N>w_s#>~Xq+Xu6a!tS!L!m)W6B^vIGNCOp3Xp{`
z)4;4?1jc6&2#BP}OmF0@g9&_!(FNZrDGWVOP)1t_aYL8j7+H@*Bb8Mk-07r|t-}G0
z-9HfUP#;t;J7Ra8Y<;xJQAX#9yDPxf8;c4abOF<(PaH*U`8InZIDrGB<JUyr`sM3#
z=;%Q```T$7@rvEDJFxBzrsgPNgR}SSND`mA8%LcYIT&DPF1&34Mz?$|+D_E9(Yt6j
zHUhwF)x13$d9;y9TniY}oC8dA+Gr*xZMb2>-|7Jg*wPa>qldEK6gKeXI4>eOj8QqC
zLSHaGG!-66cpPr+)61B|VxkR+XsoG=B-?q5scIj^v(e31s~J0d@i>~i@ng9&$OGeM
zjAXA6kJW;l$Kq+9hX+0OGl~It9Xv3u=Ol-{1KbSzHw*`fzC_HE)K-a20&-)#qnL!@
zt71UEopWj#0yFXxG!c|STZkn|l}o(EPv(#6wfTiA3|IgimWy#U9k?V-vIAF}c3WN=
zJ1TrSYg0B_`(VSiT&LftsQ4vUX^U+#m#uxqj0zxZ`8pU@C>X#23o7@_Xh4Mxut{b%
zloq7MFgs;9KQ4x%=GZu>J_i^#%r!xY4ATMOYpF9%@;dFL186_<Nls;jseXgWNGBOd
zNqiD*&G#$KdYw>~uz?(S5hrYi+5&zQ?->*(R|>3QfWb=+;(i->B7JDZ&3G_Yg^NS&
z6lACk3Svp`Ro1FUzE*XBpSRwAL+&|xP@jEmD;D|t-&kK3qkJ)q$}hZ!bz-nd!{1%&
zbYXKwnxeE3r5F*5wRSi)Ogl?G*@#gxKmX1~31KwQ-`-*E<H%nmqp^$B61v?bPCLiw
zAnoL>Q=25`PV9E2_sas$114y;HqrTlgNi*FgLeu0-`MFJNo}kjv;;R^VK?}QoL{qq
z&UZA!tL0*98mF&A$FRG2vAxjyPu{J*M$i0$d+LbA;I|MQuO6pTyg+)XPpBO^_Z?Io
zAHFn*{r`=<?ayY}mEKi<tqo$t7b0XMfg-mjL?KaZLlhzqihx0p2ngIBr@L*OdTPe@
z4Aa$_k?W~JU2VIoGt5+#jcvg8zyN#m;W=xq-*v6E@9MVidhYw2z1PdNuD$j;`@EIW
zLvG}l=g7}|oXwWlm2!}i2ou{8gPPBX5A0^!G(B`HrlChx!ERx9$idPn{v75@WWg#L
zjT0%8`ZQ5`e(vo7?@A5jq{%J4hdCZSv)@z<vu+4G>Cs8{GJhHp5%)Bt$6I7x@*Yi%
zNDBwfLB)R%e(h~R+4?ufjRvi{L+?rw6x3p~P4W!p<lk!Bw*=b(2M&4^7Cv#jdU<f!
zmtvMr`cO@*)dwM_>1Cfnk+`h1BC*y{c_c~c8;&$)%!DgFNsAmp+xmz7W`O9nfM&mD
zOUHH`AQNZA#=)PK{ORKoxD%71AS?bX{kyqc_7VTuNZn=U!?s`j_UG%JcfYuP_>;$Z
zcW1rhwr)D86|`Dq%Ts`M%CoM0s~ZFEtH@Y&ty>h5RrJIu##k-%yLPi6!b6v}Skyap
zWd$%#**=F&&$3@WKQ2$F){PQ*-QX*n4$UIAicVgOm^UiK-+Ufno^GzknB-l&bti1y
z*fLxn`ML_mj0bM0h-(CSgG-(Et-E)5hj6Z*CI-CD@YzN|UN`0Vsq{R>9CqKYuYd5R
z9j9)U*E;ShH`!RoOolOAGmhlomP@iNM>5BOj!o6egZtI(KIM!x_#pd3-yqL&)v&MU
z1^SxVPv;=Evx21Kr8%?tI_aa`S{x%EBDckVX;W+Ou|RX?Hj&0$*>qN+XSGD`Grtti
zvwUq}m^0SN<I7(}bm^CYGaW;p4?^GM2j{>n^klSH@n92@7#*%up#z&%Y+vb67Cfuu
zkc<Ul^#M%=Qgz#G8`SlI)d~XhHG@+_rUgezt07>pT=rLlc$~p~_%NVr>0k4y;UNR$
zioh~m(%$~=IFg_aFEA~Z8V)&9b>5V1q2_>Rnb~6OgTf2x+Wzp56zj>w`iqRr=pMO)
zIcSWBum}5ZCVY>FI`46AzKWiNaP43I`e*x{cfYWI_~{e9BekyE%DXi4ritsiHz|hl
zl<o68)mqoop-AFmLvm&CD%kQ=aIU89e2fcLyz-Q8o<>FA)L8{sJ@^^dw7sqe9Or|c
zb9D}nCyAB5>=VUqtXkD-SiUyxjjh7P-N3o>7uUx{F=a(_6m>YInm51X^>|o0eWlkE
zR^f<i^6(tMy0f+(SHo)(WB)VoAdAdArCZk$)(UOhB!Zi1Uf-{8eCJDxr*8L^F!F!M
z;d1b~BjsvdsK!&Co5nfECUxbAX=BCn+39nf*pZhwcwOhp(Fi}8kKC_JlO@rPI;(g^
z{uFHIPYRvv^!`(hO<yg9>?^g!3Df8i`f10QdnuAob{(uIqTnsgl|CkMMMG;C$7Y%b
z&Bo%*p{N`1wc=C)X8Ju2I@j-=ciql`JQ-qz!QNuf0Adhn2pFJ*9h?0Ha01b6mf05U
zYae5t*=5TqHdvNg12H6|B`@)9ooqW4TuLMmbsP)=osdsspn9#nRW7T^>N3<v-##VY
zMr0=XZqtHIvo8HS=q*$vcDYYD*lj(1k|G-#Bo<5k5u3aGo-Ew=RMU?vdmOMWI9%I)
z`J12Zue|$({llL=mW%eQNMfN?r&jY>dMsSBV5^$~vfz1zLMBhiqCkk#j9Cyp%ax}n
zR_YGXD9UQ}EpOytF^W@=_b4u(vlxxLLwRTLE3T&bb$g*VirKnmEmtaEm%V)8a-6!3
zB2^zyTm>cXoaN0J@~D^WgX<FC+-H$l52=pA5s#Y5n<na}ioo?*7JIyo&+ib9LY#Nq
z)@$$h9^~h*pRccd=ga#CKlwn$LktE~N_jvAM&~c)$>{emS#qq^*ou8Mu4SCHZKnyE
z`*qUp2e%w&w1c_8=MV9(VDY{eRvTE*t{UAeWZWk8PjwY$S88nYc$!k+YM$x2%Iy%p
z6o<1-G=0Dtd}_KlmrvhOU={SD001BWNkl<Z6v;H-d69jqU7J6PYsRAq6OB6~SUg^v
zo6kjK)2W!XwsMW05|1`!?<U;$>(K;^UA_OV{spA!WKKBRLBIfrw5#GM0*&?yNLQd^
z>lUyZk+0;#AQBIW^+8690rsyns7jx~_eKaKxiQID1+vh8_+>q--IC2~!$uw$po%JN
zoom()LUrK4M;(;(W!~=c5B%;}mahz`#G6%?=-a&?u^$d7OuuYs$+Uo483DCR?fK=e
z<6XCRwNe+8c@$^4y7nA}#ITC<iq~<)N*-_0(7Q6T9arPz4qkghLl%X&8x@aoiJKm(
zXpGgv>zcS+fr=HkTAAXF3iZ6dxHI;d-U*BA&+5Im_jPR^uF2!dWL>w2hd{r|Yuw~<
zF}xG@8H&b+8}O>PY&@@1#Zidi4&f>=tMI*NOnFx>uj6}N#iiV_n~!1%{GR6nw(nov
z?{9qf%j*X}exIW&$ATQFF6De58;7yP342q%>hc^H`B1h=8{}Awr!i+EPc}W*@A;q(
zV-xvc%1Zz+Z9f-w{^|4S-YixY4c(%5dB14CrCs?y+9R>r=v#5Z+_kEhkNBMqx~osX
zhqgnWhV@+*u$JO)TdxBrLr?7NGNfNjoE6hk{92xm|Lx+zF5{u(;%<fJ(P^SnV@88!
zXHz4<nJ3oy$YO8|C5{HV9KB>Lvos-*VrdMN*g5zvwubwCl3r$$%CCJQgYB;Xr8!I5
zODtB<FoSx)NqrDs<U2@HnBO2`|CB$&pmW<)cg0V)B^<!F@Pp6XKXR$sR3Mb7kOLW^
zpK)R$D2zJ((-=4<>4BHq{_0UB6LyZhiwlaA*z&92{%pPTt%qy$Sa9f_t@S*-C=zg|
zD~c@?YH>YR-W<RiBtq`<cI{i9&WzQhH+9;zJ)AfTn<yytZrps-32wIFDc36E>QpmN
zyVm1R;?ygzQ>^O)^YJLQs#tgI*0TlkVbQ#f?KKLtEIv`xVs)-=P{HF;P$1T-Y!%D-
zAZVVR4O_W-8HF-VWApWFRRsInH|oL7Je3=T<JZ6Q<@E!ex?MX9JWN$Z?YE7I&y&AR
z&S_%LeU%b>fr#;f<YhA0hxs9V?D<Ulp+-vo!e9RF#hS^IoIv?)+XDKTE1*ORh$%N&
z9Ms1d&+IwHB*TV^8JI#&pC6{5I?uEmezG;(KXRrb+uD%NXU<7Xl7p+PiSe<pec~<g
zILco{KCaQ5jT4qJn1=36$8H*fiCO*#;L?A=x|;xQn-qgb85KP`Q38S-?&q~l$Ta(#
zHso*E(+g=M6(GoBr^TnSbUPN}6O$n2$@VC&5tFiNCe(p+9@B`;RM?)9cMj0}v?Hur
zgL8}toJ+n;lLC2^eM^+uc;oks+svU#HiM4f1F$@fuN!0fSHJ!F`s%m7uzvXI6TH7P
zR<P<jZw|;eEZ~mKdV~nC>%%szAla+O@-$(+Q}@0eRgy&mR?}Y7o?5|@_p-jKJ8tti
ze6Q=Yt-R(eeSMyf1bL1EELQ>3Zahu|H<#3kCyJ%CTkj;!8&mSSz$&8i^=4T#@)T+n
zu8CU~l(<>qRb4};k64M7K%7Q?RfRbH%R=}KuMyN&vT<dvRxfcw$?N<5^;*$eH3VY}
zNlLJ>$#J)H{3YiPeCH(F#~&upA%AIl(+T@lUhpyO<5v9W^HA!Sd7+K_%0Z`nv(HoB
z({04J6`G!_PWeQ9yD?W~UfWQyS89PiFDhrf7j6ZnEF7F-6d086n_mpSK^}3kKE&}P
z$FVHv<^p@dpyvGg>)6VH|2{lkWiW2nglo<vPTXFGdle3I8bJ}?R(yHEB!gufBnyVm
z`X=yAiy%LO-3Vdr_B22NYW7`JrTA9JEwL1686TR91j+Wro|%*jHdVE`Tl_tC6%r&l
z`h}#W{h)((Y_UIOmpyboFdUNN5c75rK)WJ|B%ZWysZbx-Yw#ufl<~!619w&$Q^`N<
zFx*V1Bv>Pk`2LGu|7^eW?icqDesU+zimTU~-Pc{8StQh5wXynDkJP9FF`p%u7yhFN
z%VLVxxA8S*e0E;0D&?K3awjXUtK&23^18x2J&Kzh@>DIZWy=-9y4fSH8|0%<@-ZrL
z_id~qrtkN%@>Qo_aU%q7nut}uJU#p>^xxOJdh>d{x{)KV7ku^13gfbqwq{Y8MKw>g
zJ}cW$z}KnnIwc;b$>p_mulk+Kv9kEJ?|f;0|Htq77(RcH%!=c4?&Mz`Ytp}RY}41W
z3P)ZWx0{ybZyArnxa|4G=Pk{jnj1KHoA1nXr`)#1HqGN{f8|&$j5-EYT$FBwxZ7*r
z#RvMTbH&7q$bW_YKHI|>;~4!k_tS*{rE@kwkU3%-{_CM3{fQlYu>c&m`AcjSee^-%
zNlfx5?SDi8-C6LY7y@#zJ>@&;i%1iR==4U=oY>wjbO$oM*l}>=vv-qP`Nqjlefiyk
zAefM>xuf}b_;i0~AMz+t^wP>(c7b%c--?DA118)dp70kx?C2EoR|*7e=@a1w?uU;i
z(Bdquk~nI=>N^ZT@qLTjVqdXR_er5g8>MY)!z5AFCUM=nG|HUWbnP9FSNX#Fqo3Z@
z+b;Z$SDprZ9q&#>QG?=xD?D{)?ejXl8LL%s_bMJ6Qg?-N)$M-en=)Q=W$Hdp>((`7
z&v44KuCJ44)V)EGnk!$mYQ={Gd$G&Ym~{;!uc_msWa>tTT+MrpYx=_Wyt7tb4_DXa
zz1Cuu*Vo;naL&`Zaq1LttVh(;bNKS~dY(S6;x}U!r@!-be5~5>8Gz60(JT==StY&S
z-*|X4#uCm>V--JitdPIeKMsJHKYH<?<6FiD$DNETACF=K_HEynHbTb1_LR`ESZZ``
z%ee))sBJSlu>UQ2{Bq?iPYaj)Z_1l<5stjre{&mf3O7^NWP3I!9!c@3@h~6D&LPI(
z_Y|wBGZ;%P{w9By>R4g^%!NL;PH~34LtzSE*WUIVy*5IW@cD;e(XjD%Ok=T4COaX}
zi4<av9<A{EKtyZ^yDGX128UNSfQ8?>GIQCqK&6WbAv>pFAM|0<Ue(WtQ-$HSHUpla
z74a;>3(*tjwAJJq3A6uOKcc(vO=QPGA@NI{Q!yMql|l9AkZ8(*wGM4ay|??xSkq_j
zFSSzwg^TKQ8y_tm9MlyZ+9&M+OxpR2U%%O3{ni(=(5nmo>%qveDp!RIR(awM&{&Df
z)jSj>xF#<Pt+<X&iZfhCS9joMF%~O%Se=q$FiwZ^uF~kw*NySLwfVM<EXa7*Xq|4Y
z!mLhX)~Y105v;djWRV#5%Qb}cj6Yu)%sXFkDwQ|4)cb_FQaPPAjeaPmv*@j79?I!j
zt{i6H`}`iOm31xRv%EVx?^d=OalY~0FRwrR<h`Oha+r;?aSWZu!;tS}NXhuaPR&i2
zEnH`9&u%Jz{#-H#8!I&;5vFd8)66aA<Bj65in_{|HRo(>2F9F+%Ch`c&5nhl;%T^t
zl)>&3ew4Fy8)<-;Pq7$ki^6GFY=$BZ@`2H!QD$$CvDZP}XPt}V>#^X=_RizlKE$WC
zqn>y)DNyh_X;y`j1{NS|4?*tEq_KMjAD)b)hf)UCz)=E5)geJyC9sGeePDyK0hLV2
zIt8tWqxMS4u&aouLMe0y_{~4}Uwv-AF7_(pBTD?qABo@I+*P)rzuICk3Ns*!h>H)z
zmC)~MP2WLmwF|KXwM=fa!;YwqgWmaK`<IJgat0vek>jVye#w4LnX0q22rqx}>!0nf
zeDe#}E6{Z1im&UkXW!+@U7ps&>R+8|#7fkwI^`<YpixHNSiph;*PFf8*M#xT;4GBl
znm(Mu%^MSPb*hTHENXepofJWJS~5@RMv;d*Y3sePbpuG=d7G!0V->7c`f3%i9)A+2
zN9+2)@~f^n#OvGM)GA;-3ovh}NS%3&VqEixf|74SsqJ;jyiVK4UAnx6@Lv4M72yku
zZ+!Pl>-(R)zsWlpGLkum?Hspb!BC^F<&79lH87aSGPmde>N#}!VC14W+x6S>U&{xT
z5wlP`6>>F#b$@EFQsB^+=|^&I00`)Z++p&jxwvfT`KuX%tfX?xSktjr*Io8oeseq}
zuL@ojr-2vITI5N)Fv0Y@?ds!};u*XbuJ-wJwcm!NdIgqV`&*$`<PF?c6F?_qGPZ3p
zfIvzqpAQ9!0)Ro%NC{vDo5r@`i4iReD<g-I_(;-5Izz4xScIpjRrEReiT>^@_@u>@
zP}?*N_~^EfAv}9K)&TFcI@bqJk4q?I(c9y2#^TgxxBb9n><1q>w1mpw5jk6&1HBv%
z%5WaO{ZsG(t;V^%fAO0)`<-unVg1pkcMGd{!zxm|v_78I#%s7@<qOwoy{TfO?pnno
zJWy=05aaXdaEdqYyp7eqd}GDyS}m(pt5}u7wPdfd2*NYt>P}w1i6d?((YHk0?<ykk
z=$5>JLW-*_j`I;LV#D)Xb*%RU*Nqe|k9Rc3Dq@||H9ufO-l2;-g!9IaxS_)e>xx%B
zUgq9nQn9)0it7wt6}DMazrJ5z|IU~9_kaAsz|qCApxbv9KK)?mD(obuE#bG!PcGla
zL5{Z^lA*Wy$#@=f&PFQGT;aCX9OZK0XO3Fnqrw$W&yOwtF-I*r0{=t*j9qr=dAj9q
z^quWRzVvyM2g}5z*<^T1AHic)>_YJ{w`qTg(P+QKbh6Rvm);k1XW-}hqTMiO9<b%V
zHD5y}-i!emHsPj`Lhw%3LvWOU=K_(&d3y!`Hc`fw1d*;g!4%x`fpBHJ+%P5z_*<hX
zys+XksYd%oQXrx2@X7Hu|CZW1eOi%e*iEvlFi-27jKsYJDTB7S0^eO{$5#`6<7a*s
zUsCjpL+R}tIAS8$!pD`+Z)_LmrER*pM7Ck}dGR6fCLRwH)I*P7{pRQEq0oC$#Tzd0
zXR($=AFnr)3-zP$iBp5PCQlyu;j2x&_D!#O<LTCXvjuNr;I(<Labrkc=U0yssprr|
z0gG!4^Ja{=VFTA1;tp4y^3BJ`#OfyO&)1{n^>o+jX4oFr3|8@)r$6&~gs*M2E$*I`
zBJe&>p=vyE{bAmbTQ_9X^>+GD=Q<UxD~LQT8;`ZA0={CN*K_8n<NN)!55Ao5y6p#O
zeXMVxD#zcUEx4^|)brhP;r-xk&VR?esBLnvcUi+koi<-TJa<VuEC1ByP$4O&GSw;n
z!LF1(6`^yHAu=-WXWHw<i4<@W(+3}5M0t7831GHwk6lB|Bv0Br*xF9`vEj)sz))CJ
zFSG|oB*sIHVK)05xPlqi-&Pow6}h4}IncJ{RF%crwWSqT1y-vWtCh%QrCYizpy*cv
z#vBai;ltWCAx{GkelY+Xm;**5RwAo?PJ?@}X(neUTKWcCCXDO9uBX7Ut|ar?(l+d~
zzY|`?li8PO-}(tW5y;{nNguH_dvt#)5yV<NwP<}y@p#!4JVP7+nsdPMUDck}(GD+q
zM+~uV@@=jC%ilb_0_~4}`b3I`C`4-I=6OC;x8B8y8wPMnFdvTmn%B8KtH+(>sux$+
z>c#^Ua#BFlsnvQm9bfyEZ`;Vzn!NiLukw10;^$SI&a7fIi_loX%WYTRSh0%h6R}!Z
z4_U5j=J<$~e49v|2E_^`-*-zppJNq|&(Ev7Wou=%?uM-*Jx?KL;f6bJ^Eyn$u}-Vo
zb%1u4a2EF|v#zC#Li`)w{nCmzV|YF$FMSegIsf{HbB^~_*{UliLm$hUSeDE7Jf%6(
z^hFwK<9e8UO@5Y2GC|e&Z3`@ejW;IvdB0&-`Lb-8`|O)?5ZfuU6=ow2#82lE@xd?=
z+k9>S9?-vW<W3n~=7A5X=74LiN*5q={m{6|xof4O5fjH}_j-v%kG&Z~73S|TKtrI-
z`Ro@)dGQ2eZKiL;nt(lnZGynRQ(+YYt=SBMFevU1$9I>pTvio>3&coZZsV>6MR_ZF
zLHhQ$6MV+-K&qsE4uMsF3#P(#AUnQy{UC!CPJ+AOpKz4qh5wcOD9A=EYQkwev|=yt
zO)-=MzO5-%#x=ppaE_ME-X(@9OuG_d-~qFL`J11wufF?m>bBl<TX)}bqSqBByiN>7
zP8BM8EnBQw$*D`+ZJUJ)ia!=zas3%r8vS%8Z}P~MIGp;_RVke244rlwmIY81QvG>!
z{nc!BQwHCj@tg%1uK8;>c;xkQSncCo(8TmrZ4dc*9b&E~>Z{x8u3_AG5qIIn%4Od0
zQK!Y_j^sSWe~(lAaaumwJYfFy55Ba&f34_EoMlGdH88TMt8u&7-V#jhTlU+>vgYVx
zJ{4O$4^-Y6_QA)#P3<3ZPZeixEzIb{T<lJEA(wHo@_kGquu1LQ(!b{+*oH8par1++
z;ml1;B_`*O?N^_YDN*ylml5w3|L8WsvGI&PAHENEBPe4W$9<q##Bi^;86%w|*}4!L
z47#GS%cW&)bXf-KwtRu(I3DRFMDT70c{nnezGF~p0J~>F=A=jQSO*Waz<sq>3IN5x
z{R%Bx`yuG9&&n?AvRQ~sLbU`IzXgwtMnYgshTg2{!^%|HcgwFS#vH75<kQ=kO=h>c
zr2HmUa&(1GJ^Auj2i(C_RCwq_mUvI!CqBw#XmJet%S(~>zyJ0Bw!iYtFYNFC^k3S;
zjO*26@{F}N_c%RQcaY{Y?B1Zri^qbz=4n<u^X?6bv^Vi43>0g*I`*t|#3{@-&vSLG
zPVvUgAF;w#k5Q?@=f18F%<K2+nm(>3=371DbTjTi<>OvzRWD9!;)aksomp?ss5^*j
zMJ`tgx$2jNFQ4~U&-mlpEaYt-xO=)DnG>>~SJ92Q@kSb+rY9$!XYBMr%sfq-k7Icq
zcVpl0fAHPEwf^YG-{BO&Ol9M<2A(uMwp+PXIDX6#n#<a1Ps=-N)~~jY<I{4<uqxzv
z7-RM%(`Ao2vFEx`2MTLI`hb_=;`3X<zu5V<J=iaa(y(L#RU4bUvS4qu+4E-G7fzEm
zLorLUiZu+<13n{1N1G4(I~J$;4n7}wl4C8T;`bv1;{dRd5f0vV$_d&@IO#!`Az0#=
zPWTg00%144`6vAx{Oo$RDFx5P(i}Jz*t`4W_RO&<Jz6+1^oT`h%eEl06b#kBTnSmH
zgy;#*xH1*Ii<`?<2^kn7*dXDk{h`i&BcA52ehEx89#_XHUZH+bXvZPrWcw_ErfM2#
z9Q49lCy^eDwf6r1{@?#+f92gT?r%T)Z}Yk?e;=wAOLd(X-}kC-V&GdWaHlSA%E&uJ
zaXnuaT(}M`3$R!Ba=lz$&-R+9D(i05x+bn(Vdf7rzDI!>D~0)X4q1t-hZtwE6E~>f
z@iX-bIXnmOb*)s^dxYznx;PbG1#0*kD`Pn24E&?ms#Qu{Q&=mZc^5FBho`aSO)R{t
zINpMS>j{Tz0C^px6t-8f{G-46)BTliesTZVzy3kvv*t0)gEfBQGjSZ8?t{1Ip_Hv-
zo8y7snLmbkPVJ$MSLZToi4U{xwKMm7F4&Y+9w>fW>||bQ7|_na7Vgv3m99=WmoJeA
zE!V`JEqS>1DHh?6BuL<`zAebCX=;kSeLTM&Im4K%uZ~%?1$2Y#HEyRLw6Th$*<OX|
zHvb=SH7CTe0v|e8`@<lU0WuLxwk?ohD%55jDk}8NKnm4qUk3<X%x?5K4Jg3}<dtNS
zVhj(}6QZ1G(Aja4dgdm6*=AS2Vc<wiSG7g=sze5T@N11Wd69IPR++xpklC+<p1I<Q
zg*@-^g5A2U>7gu%=uoVpzaE&>zj`QUvC7yGZ*7C4riqWvmA&^~f9Ko3v;Wzj{9|0#
zW!HS+28=3%>Mqt=Es9k!zEbQN3I#q_4-f5qRjY!sVub>*3bj~i!c7Em`f#{@Fki`5
zcZUuIRh<%*w{GB0*nFiM3fjE>E?58RZ5mP_=QVk?3Rlm}<LaSZhZlams^ak(ir};%
zap`*N5i<H{7Ac6|Jg=3$xTZ2sv&W-vp5--*cD-b+Dh5AtCHL8W^5gHUuYB{1`^RtY
zw{cK8A49$6vOczNj`PYgZ4AkQ7{;yUT;wPpgHenjUvfN3?vs?&#~%-x$MG836h%+;
z&k>$}HVkIWm;)mv(+|wS6hU{9e98iuY?jy*|5DG%CdIDw#_zI8us+}vIo4vp8fR^j
zIdQAS2x4X)()KPhrPObgSD3P$_I54;Pxn_nS!?fn*R2}u!7T4f@D<w}MB27bx-$rA
z*A`fX_$hCp@>PB6BqQS>2-qGB${q+Rm`*-3NZj`pY_=vh5BS+`&snjr<j7H!;Ua@I
zwux<v2;<1nB1In%2%<<vF42AalN@tAG$XxLPRFs!EUtyW32ercgRB*`Q=A&60@3c@
z`@swG)&sM$kJPmz8Rg*B@SpzhKidE4-B;`Syu2IpULGP`r&oDXLKSMUf+W|Jy~fJY
zYZQTT?HpFt@&Utdu<C|KoaEiEZ|ZuuIIUdIZmSzdvgqUu4{00U)`6P`Ue~H)oUV+*
zwrr_8eDNUREVOt7N?m)0LJOEy;RI~+nnB)}q1VY}``2-k3!ep8ck#w*ovu{Y>Rnx9
zSEuBoNawYJ<b$jT#%bYem66X?ynpp<fAdGbx8M2J7uWywH^1$Zy3I9xyblvur4f$D
zOI(Zr8NJ83t5(r+YmSfkpcV2tl5A{aQr<jZ?(!v9=+EUFkOwfpBQY+w1$o1Bf6kq^
z^5rE1`DVcv>DP*o<|}2i*v+v|+c#}5IoOs956-2KbnsL1_f$h<tRemL*zA~nj=t1&
zwo&4tm|Cn919AipOl~9*$0-~ESZL2usW>W5Sx_t(%epuq6Uf(g#9y2RzuKxw*nTyh
zz+DhC1ule#d{H?}{E}YGM!^BN7N$yoz0O4PVx;=B4&D^L+-}=G`BXBIsmdnxHH$>Z
zH6SvvjswtR-abnjQx5-aws^sq1#f9|8}dU=rQ;^=@HxfEw2pi)znt?4*-1|J`|zj#
za=r8Ie`EdePyV1Ds*6Wy=*9YY90`j#u6D(pv9Ib>Xq@WBBT8h2tKGbS6*OG$w^<N9
z!%7!dobu5oulXBy5%UIwurnTWg4HO#{;dk8XL-FLZyeEg;XcnBLh^Ab=>zVP%{yM>
z=9DUg>jBkuQ%T-r@*2fd7J6|#9_|=MF;=Uzb(4p@y@Uli3PN7Pmk)>ztax*VTw8cy
z_g6pKU;CfFy#MPT{sYTb`41D14x1Z=!!U04v_FLAr%2!AGY|L*qZ}Y>@u)tfjNbnC
z_>VkMxf5AT#(a}E<d&+^Y@WS*L!RFBJJGw5cc@c~M~#7E4T(cu3g4%Ej^N-}`)#>Y
z@w6Rp@rSWb6fE{?19{u(nzEy8S2+ZJi7=J(7QX}fh3>PTkH(!r9C2BU@*@UHm7@=I
zY6oB7W|9r1NCo}s+zKTG+6xIK?`qqIKsOxLu&w-En|cMS)aOLg-(JXhz=C;27Slz!
z1F0Re8~!}dl?9u|xB0LBcHX$p)eP-EM?%y>%c(ZSrEJoKcUzZoL;H<KjXRR?^$nbl
zi9`6B+Yrlxo^vr9^2^<vm=M2P6GO=U>%aNy{rBGcx7R=V-hYtSh2=X<d6#JxS9ND-
ztXM^{#Ru^6HDLAji!6v%J)VPick&GnAt#Cro=(OJSDs3Y)3bQY3%BD=+d9RYMVh{|
z7dK4s0l<7OuH3kRf{UwS@<xv=#OgF{_?*`rzJ8X)a-JT~YZ3XF6**;GkFJSg7KK?}
zPkG@_zj+Eauhpw-9&wtsZd|Fj>mAyDW6b~Xr~lP@=UZP`fBu*MYIn{aa>+F|JU^Z|
zT=}5O#yFnFz(&%}QJmu<#-PnxH8wfscJABEO}#M4G1=yd?QP|NuiB2q#_>SEZCj}k
zImvR*cH0yu%fp3fbfZ5Ohhv^yqPiDT^fhBdtOwa?`<XlJzlkpyG4M5UBZkvKxA=&-
z$DB|#O8KL6JnTtu-~*yWyWoTQrLRCkN1aScK}DA2oP%Sa96lH|BT@U25{WtlG+_>+
z#^43`LYzis#MwwB!B^i}dkKUFTLVK(NtR-r5~t#n$%!%&2pgL8^^kP65Ls!HkdSSp
zZ)&9S>H+&4*X$xmyT^CPjyOUJEE#LW*?gXS_&j`V{gY;m$DTlL$%ZWB)G&ZYd#nK5
zCD?o``A=T_{`%^>Us&({=%3YNG;)QkZb*3M#Z;W;%hkVnlm{OhQja;&=k3W27kGpS
zPmk7HIO_VbC>HsC*m_&WGZcYU_~f;DuXS~+ZjuPQ>Sl&IjqAk?_T{y6C<<`{L*0>l
zFU4Qpn3BaWo+TJqqmav@8bwtUa(oDMUb7g5WL`hWhehA#L#Zp)^`77?E??K9TdLTr
z_wv>wapFdd2mJr!vmfl={r!Jy{gcOkyNy#BA2wwV6MP#F58ai&c_6$w;Z9?O+Bk-L
zUY-il%73hPJa_EWv9w*;OZ_tGb9k%Gr8;vM@bvsh`CGnck%3&e_z&8Yy_Y3Jd}f>#
z^VRzzc856Cb|FWz+4(~J#l)T?ecpyI%_c4O1AAB`cpyH+0rtapc-ZU(H%wmVXG3cG
zJTj<80bz_z!diGuO5`ZWoIQc6hY1B-)oohXIGoiFoJ8BT0_h04h2vI1AVrzj9|(oD
z9w6~a5ov)d(hK%me$yYr%Zo0^BTq8b4DmbJ1T4)yjbjQN3gCd|rXD5<u`lgh^KU^v
z`k(-Gf+v6{ySm&Kr)jbv&SBt!4KCk{G{tvY{Hrs$ptwBvd^|F}KEL<JU)z7@+rP7)
z{>2|>fmE+N%NrY(pPJ-#XK|fdJ^JGrR;*Z%;W>S8YSm62pMpZFZUm^6t6Fh-zE~9U
z^=#Ci=ozcZ001BWNkl<Z&xp&rY3tN(JvYuyPv`Y@^_sDIbc+^0_gFQHqAwpp9jl#L
z5Z-U`5qIWh!H1h9^g6^iMINhmwX*oE7034|!0sz9ub#;YTwQOOh3yVmS@dOr%Tv_P
zwyr!r*!EBEes}-<_x_#z^WVH8Uzv+8j)J|KA(^Cxv9@bUu?gEh7#o{1+axc!N;AVe
zZu)r2+yq(lMcrX8T-ndI0g{l*e1JS-w)zTE<pAUf%{6j>oozKwZP_UEa`{(tiN!m7
zAXc0D_<PIWEtX929=3U}7JBd7Z4iy(a*ypp`(-iWzY?dK2gEKLB@$DKh0H?+tniAT
z_O4rZL<S-GVaEEALK<r%6(`V8f$xKh3Bk!-0IUR^?QFFJfWUSosQ5rR*<1RVJw9jz
zxZY0-1aB)06>_$M4h2p1-PMi~Xai#$cF^XQsT9Z9qyq##Nc;usrZ-wdayuQRI(CBl
zwxc?m6y!ib0vKYHuNq(9SMi8Hxuv!qVu%PVZ=+^a;`288Tl>LDBVxI`_J8xo|MC70
zzx_M=Up)WkSaFI~v|911n-!kRqebdrxv@gU2Nmmsjd>R>-o~M)fb*26uFm;eDOkwx
zu3=uQ$A<^&dwuQHWv&q3Z?4$YwQ(%)>IRE^a4}XWYeln8{npB4$%~aVzE>BIeaTm@
z@eLHuQ9$y!b@Cj;SI=-7x^76Rg1m~)d^}97;=O(j?CJ)aSTW2~$FItd|M{~&SpUiQ
z{{8j$zw@{D&;O6V+<WADFG^(Go{GE737zLCqL8y<EN$%DP*XqLo*Uy_kF+tStk~k;
zO`Ev-Sn~sN!%}&g+iU)_+*P)-?Y1`Y{m>WYip|7Wu$g7_w!mAk*MAl3Aui?Pg~>3_
zy(LuH|4_{Drh~R!`t-mdgCyScB1?7Ax3s6#M{@z+@!lm{eZFw1x$M!7$y6bs{n<eV
z5+>CRfnqGkOOj7UM<=iV2r>w=%Rcm%7^1kc$uEBnc3BuVIu_7AFj_EJeA0#+eI~zp
zv9$AhaB)*)BU@Ta8NINKL_q?_?}N=fNpIJ)8@5`!n{34W<hOhdcEOs}{Aw7BeegH_
z)iHU}<uV37q|lQeY4m6llRELFjHCR8aII{(zWe9@-FoNUFRcIk5C87^SO4o%z5Xsv
zslKXHj&-9!6(({c1y;GT5PEgLb(IOlVBPJRcYHq2VhpEZ^OWjy`P8FY^bXQ|{776A
zm^Q_uR_>)JVt>B>HBX7+^fsRt_#E;}H}25I-OTrSJ)+(ak%d{<l{cq6!zyOo43b55
z7Topt7_LP6+eG-bjAtkc>jByDCGV`QYbmS!kJf+xXa976_4ohH{h$58@9y9H-~VUv
zFLPb-a2yXlhBywgNLY{w&d(gzNl)8I9>oEn>K#6I@MyZ!uF^HjtNCEGaZNd9t~0&v
z+quFv>b5!Bb4CfOMCX_{IaPt8J<7GC&x3!fR9A+xc4cv4$K0NF?6gC%DAi*f!oqZS
z{kao5$~JQAp<U^s&8K2C|3B<g`JeAoA$?RaN)-#=8zI3m73gG@DA#xCmt5Grl3(mj
zUZAYF0@DZ!TPrRh5gx$5Mkq|C)HnE84VD(f?a1l^do^FLG%^%Zt2E);qFx~(WllB|
z)A~#Ko!GbJ#Nb*zK-2Pj#jB9*cv_#pmRwD{iH#>R7Df|hv>P_dfeCOuCDG{9;%$@4
zfZvGg8hsr&n##(*8hBk_J6bn9{^FNES^vfN|K5J*-7l_heDB{||K$(=;rbu{?DzKf
zUVMAsy?B2=dGW!@&nNG%C!f5(?ym25`TPC-_~ZBY-N*0kyH7q?PhPyg?&9;w)$c{N
zU5`J0e?R{Cz5V#(_x6)dK3I1jzqjvRyth;Kix1Z0kKfymUp%x6-H$(hf8V`$e?NZl
z{=WP8!M3}PFWoObSa&bpySBf-o_rEA-rJWg`|id2`|h$ge7XxAm+r^W=HvI%wy@{P
zC-1MvFCJt*dGX+X+4BA+FE9xCA3XT`;=N1v<umM!HsSl-$L}SU54gVn@cqSw*^39g
zPhPzLU|+=I#RrM=gN+}g-;V>Q@aqMz{3PP_faim*hwV>3`Cz?w|IgR&{mDOC|M+`<
zd;i^k@jL4ue(>+^r!W7|$7_xEX-xOLC0X;76Ebh4Bp?6T*0<H<Y?G|!E$Ch*+xMTw
zI`xz>r6+Pu_I1o4$K|u28S=&hB20h&opGs5&|@UN8XSjQ7V}!=RFT_pZ^;S1h925w
zys$hcd3)eQG-o^~*)<RMTrFU@j0(2-pt42ZR0|Bgstw9X?z2D%pB_!Z<Db5A;JV-%
z<&ZoEdKqV6aiD}eehuJ`ByY~k1m7l07F8hO5?vku1+Vn6|Hi(ts4<&}sbf@=eogDD
zM~g%G>zHXAGFx^$!PKR;lPXHO^7oRkRK|w&>)K~TEq`s_s%}gq*`BzFpCnN35Ss@~
zXoroBMMJf{jDh8<JWiefK%`qAlH2UxZjZ%A<v4#8|KI-2uh(Dv;-~w6`KyoCpZ)6}
z?hikGygz*T@Ok>_<NfsIllAn|$NTALPuA1Vo~)-YpRA8Qd$K-!dAC3O^zNa}r+545
zXLsxA%d6eh|D(^ItdBmsTTef|+aJArvOfIuZh!RhZhiFf$$I+P-TLt5L%)w+K3TQ@
zN$&sXvugYF<>Lo^FQ2TBUOwy#{U5%(+fQHKJ=pp1eW%SY?;iZgc2CyRPw)1JvH#P@
z`$5O$)62*EqnCFN_My!sYd!t+E_HnP>E+|gCzm}BHin+E^TDo<E*n4m^g+i*mwit!
zTpnzAyq~_jyZ%1>{^+y26><3Jvuj`Kxl3FheqR`TdUv&X{1BVKD=~P$<D*MQe5Z~-
z{fi&0=YRR(`svUAeEsULf1cc)_<JjlW~RuzFKsd}c|LU6Axm{!|1Y~RPMA$L3X~dB
z%;lC_FkUV9WgqxOT+9*2VUjVm>2^>ga9J(a+1$r$#(as)yt|C*SKp;hu(<eloz(Z9
z<Vrl@$I*UhXg-g5JZI+3Hi)<NHT|JxY5y@sb4)9M6}l#)8V9E!fbzrl5!Z*l?HWA<
zc@?PYuzb>4{i}+^f)<3aPwp!sW!<)nTw-end9-&U*cLDX$?dn~$~O7l#<&)P+19YN
z<k>6#fT<^0WPn4lx^n=<kD<a;e-^g!PjZoHMuQ<Xh@tKqxRC*Gff})_41L8mW4)XF
z>Q7npXu@oeVSaexRp0Axacz#%t)%ZbGe`<0=efc6CBU|%n2Dw1;eDE|iN7b+B!F^p
zi>hI}VF<@oZ<EduCjv8IA=zNLj>g#<7ABK?MLYAcVS3`+A@+v?sl{lXgxHN-+wyy}
zRmiF_xts1`9IO2>PVL&VdGN_`M&=siV4K<03YVmnV$#O!(4TXq2-}rUPes6~cr#z<
zUu`lUD{#bdkbjuRSbQx;DYvC?>kC!*9Wq<YEVhH)LyfuJAjPrysZf;-OAR%9n-0Mv
ze{ElA*riZ8)#hv38*&Uc=W6O%iK^IU{k#@npsdh?1D4e0?dCuWj1dR@#YpQLUpaX_
zd<L7+=?X*zRc%I&%Kn^;C@15WeOKDhNDN&vImBNfi(xeUrtHz57Lyb1bdtUwV+kBe
zO)ExjOfn?bO}~vdg)P9#m@fv8zNf8fK;W)ASzK9?0hYx_p8$yw3(1lnzvulPuS}rn
z+oHab(Iy@B-(yk6C{M@9Wf-?L)~vm^1s}BduHt5~X~Y<e;Dm_MDdQyt81S9qS|7pD
z@rS&0K$1fRXQvz=^XOXrp+j-o=v#a)3N8u-668G1!gk3$OWI5afdB@%McPzYB&N9+
z$mqtR$H4iNOM77pF=x!lskGbTpmr_Yr#KskhT(#<)P4P4eP6>CGFd<gXV=z!7DGSi
z5H_3trBYDfJhaId^$#R&^hjpwSWr~j*jpB)?Y2U1As&{GMU-$`vORF>aZ&y=w@6L}
ze&9R@QQ@{}dFhkd;RZL*Xt|6-d%!dFS@2P~L_$1l(LyiG9+Sti{zn5R0)k&5*BxNc
ztdK&4Jef(rKs2{S1`Y>$5<vkB9ineJ5h2rbdhqAs&`8~E_x&mHCQ$@u3<~w#2fbnx
z<}l?5mkg_Nrut2`(Qe70v^xixV~T$o7tYw@d$VacK+zZ{KcpCFcr$t2z{h-ADO-Lo
zv%xvyNp#`Yh_|$l=$7U%KbkUurpgkt+0!ua1ew|dQ^k?iagyt@PQ_M_*R4-=Q=Xj0
z_O^E1&f;u}LH$#ErKQ?th>pBDU_AI<h%Ne8`~)>H4g_PE>~hE-=y%y`>X(=~7t#hy
z%~K4~?lw-!+x)xyx8<#{E4EF1CEtyYV~o<A^sIADLgt)fv1@r)I2Qss$D6IDkC^l}
z><hV$fo~OT)Stp}i$8_=avAu&vNO5e^1>;X`bYTOaqIJp5TZC<DE4?*dw7&>kGWsk
zZ0Rbz6;3^DdZfiuH8x`8e^U{dyAqrNJ%b_+(l7*NB*VekY6C#6pHeNpDzS4f22r_;
zfDbkUA4#4Y!gK)PC=>P!L6=F>iDhzIBBI+NGY3V1w|5K{ZJOq<+Q`XQ2c%-*w$;Z7
z=!w(WGsit`2+Z>cIJw(!OJ5le;UjeRLFO^&zV&TA_9vfu*3=Mpd<XqNQMQE%>){J0
zvf@IbBzX0sVY7WoMvJ0?D-##gm)3bTVTxfg!AaYHyFS7#HrRH@aq?q9pZ-N#kE!vh
z$9$z#J$Ll6(Rr0&6g?U1uoH1#jIiT%DH-!EF>5oq`cSOHw}x%Q7@H&>8a>C{h<L=>
z_Pg)$J!SwRp7Gl1-RQ%)P*4oit8T0E^1(E-zx{5ANwJS~s=NcgUBAol?Y*d1+ef+R
z*XZP?g^>J<b}@!vgMbbHDs~O)hTpV6be!h}QO3o#LEcmotR{Qpa<@GO?S<*10Zdo6
zn}BAhf#Sh&lDZD=HKL9Vk+`Ny$Kh<B88O%g{g8DkY&Z79h?3=nhxt_U>EA#c!C<)@
zjh`gXwVjAbUdYR0V3?p|V3mKJd}UAB#yDv45PBjgWpC4OzE~{eGuYmJNuTSBkh00n
z2sIr2AZadg!M(Mc4E0CkBv=Dy58vH?a54EA#xOReE`N_0N33t`BW5E%%N-WzX=B(0
zPL8@F9!#rC!dkJ(5Kh>~CbQ{Q9L0}NMEp4Emjdep*r&<xh%vV-o`}zodyH1MVmTKk
z<tliUa`vub$n~Cd#CGLDewVo*gGkgPXq$yrjmK)E@wpXe+1~wZ?FQQqpAnk@^JDB~
zZZUnUV?T|Z%#pLb;tTWX!oDnieQpC79s{w#wh4FVI7~RDje<e-Yx1a93}#>BisM*g
zcb(dl{6Z$O?`B)(p3@jP_&(SLy})B{KXn_Rod%@<HzeRCmiNi{^jpY_AUVO%W|~;1
zN#1<eOVla&K8P})Ihk*j9n|rDnEWLP_O#vytKdLrVdoeR3=AUz2i#OZWpY^TYC0sY
zwW-ME_H{iO4<Wfuij>D9V8Y3h;+(jxaL`1MvMFB%pYUsrRmCSbxZ^+Q=p3@i9`WmO
zK5$Uv2;~`@rSe0l$^wQhaSk^3v9`1wZB`7&0wnr`&E){xyEsa|EY-8n$A62yA%8Gl
z(&m&CmlhBm?+8T2$8$*MVwoTqY)oN>b$oG*tE<JvVu~1<4E^2WwV<B+7n)5uUI*CT
ztKlMrZvJaIGjqA~u<@M`g{5=ciJ9nvJt<r4HXK0an^@^@+3(|eDVAm<@ueJ_D+PN@
z!Pei$EHM)-#++;8H*JM2X`}K&dFZ)E@yt0w;4!QnyZ&k0*RZYR&N;k)f+A5oDqahi
zYb}HJ^v7dA+5&uxR*wj%4~QZ{>=vi6ed~5<r$8_%F8r_eI|m|@{UQ1Gz?lsulSxhe
zRj<0tA|(r*%Ih#I_JIKI8wa)zq$#0^&xvd0*_FF&0^HSJbXh!)M}8d-ZPSy)3OOz>
zWAE6DZ;Tk?9z1~kWD_w(_MCNyZ_>vG;%Fz?uu4p|Pt2Dp*}G&pFa1M1(AIpXNes^v
zN8uuPNT`%wBWB`vaV91VDJ&!j!(2C&ygA{3zgpC3oESHa>BLiUUUNhI%}M5Vy!KW*
z+jf_me~aIP+_Kr|*9sc($vIAcv{Cl4u_gmcffM|Qv)EgBL9Y8ld}iF}M<}=*2Q&HV
z+;aWiVxsHv7)<deL<X1m$%%gc%=25x6z8>o5W5cZq~j`FVR(yUA_qWGzi=jbG~g85
zmh|7-`$il3I>kiiQ;~EWrvnFP3`)inv$P!1)%|Du)45VoF&S*TB3k-D*0Qx?5%xVI
zNbDh<MNq<bG@is!g9gIf0vNFXq!uiiI@mGTYDwK}kUkC20z1ARg9>s~$0|(D6UC_r
zygguVk*WI|K%}8Eh%@4t?9Z5WT{@qWKaIG8;eh2*I|dA(NO>m)0NXX#B*h5qYIe7H
zZ?%uMWWS;+W5J_Ri#bVF@w&EY9GAw$@amY%6DW&EC3=rZF+4Ce+<Kh*{(-+%z`l)Z
zI-z*1t#FCIJU|@BRPbDFCNc*Ml@D$|b}mUEN-*ocuzkUqRe#C6;;Uj{{4Y<s|E0h5
zrpMZLHy>NP%1$rh;``EOH6{-DQg_E5;@uX_%-LuOvKIntcV5iAF19S4Mv4D~+by{@
zWXS=<W5l{7WIB)VOU&7FFJN75Bt9ieaMGVW7S5|;m-7Q$lIi?7{?kScD4ZPT>>HRf
zcPs_YF%fJgj;TM@dG=$OJjCk4n|L6?`z%N2&G^_|w?<4DNoO@?2;}TE0PB-Plb?Zd
zQuN7GY$#BjY^1E1Uvlg(f+)q%KonFUVq3F)se$fS1~&C5X-55!0qY$U;vFj*$P(5j
zh*Knp_Ru?EZt?;b;3xgggBbw;aQH^whe7T-6sLiIYTw9J$5!K#30x+*V;n+99}D59
zVG)yxm?JC!G*z=nGBW)uMRUKU=q*1N+N=F*n;hfQP)H0I3-^^v;)k{mEC<YvMZm3n
zjDK=Qc~)wx9VcCwI>-NV^E5#f4|aYLdwp`ej1uDvSLcq{qTAdi{Ej~o&%MoVlM9^G
zh%{GqrLW}I0n@F2S8CECCW%Pxf-n0ERv8P$G<~c<uF<}hFGudlZ;Z~u0sb$QjG3o%
z?rrnUsNd!W;YV_*%K>gHXu9w_5dq#lr_!Dwf0f_H8<I-;EN_->XdBCe(rGn8QVW0#
zVvZTGm+PHAWWe0k?euuul5b|wpNHR%bYmwEk9cH))X5JZp0+2;HwzkMm4RScnj9yb
zTOSf9bh5Y`l9AxxVCfO|rgfb#2fspKB|Gyg_PvD+Riw2BYCq+)n8AiDYT|1UTx8^L
zPV`Ci)nio{6=pXQ=#uyh`^B#mwF#QFRa>~d71b##d{~Kb;woweUQTfpuA_7PRZLp!
zXO30Vf&18(W)m;{+H|gJafl0k&tucD?0JR0l|6#vXmdX(IrAv}H>~nIWtZh6=X4T5
zJc0@vmRS4xTE2yym0^`H7fTy<yNGXC-mp1i;23M{vA_Nme@gdha$_O0%ueMiL)T(y
zm<A@m=ECQgCz^fgEA@^!e^HFbz;Fb2dQO<_GehTCPV<zYlJV%at+L$kYi)hJ>}_1J
zm?&0dPw@k>jyO@b_(|~*+Y-ebFy&j}2jiL|@ok8K@{hcbsV}ind-U%CH}d7kLC4?t
zx?S!<6YeWRYuh6?vVQxZ^uPjic<yav+wR-qds4DY-9FhDecrCCWSWh~g24OrB<cH!
z7iZnUUm>U#jF27MrvX~_>^?D+y-K)2zdE-H8pRoZM<43bcmjyKe~Mql2G!#h*@!JC
z5XxRAR|?C-MmSU3QnL7FFcrp)Pc6397d|_-;$!-M;30jd9vH}NYc(7de~}Nqs9hed
zVZt$Ad|ZSr<U`uIV9v$AMGK5$xvfuBVz1Ce_!k`0_!yVAb9_apVOTV~S#WZ)3;#Bl
zhOkbPEafTh!=3>L8N(i39j8@v!6%L<;@y~#kk)Vf>jiMP0JaIQA@h)Hrtd5?ZWVou
zna_DN#Pv6sByQs=u^V+Xf6nra@6Js|cL}aC7hr4+9J~EdxaKh)w#odHW*08fH*Krn
zSgr=XG7qGux(!$|2^cOegJIYFY5p$h5Z<j)U0m@ZOZBmD<GJ-2cxG}t2QDiNLw&po
zl94DRSl6V4pel*5Nh|#;VDY;HA<j6#0!075RD{dhX=ocHlO1g`8;S}_CR(w7iS`Fy
zW}?xKP?o=vbgDmfmzR{2Hi*3@Yxj-EV#SLoU{?Nt>`Dpgr%8Y~i$1iOF*EhFdr_|R
z&jEk6q0M5$zzgMf!{IFny?_}Kz|_w;2<}!Uf<3eDHYREPhPZ*7k$fd_yDgJWx5Xx`
zOzL7Ek3BS&n#4MAhOzO8G|SPs*<SaLJ*7>zao3oo9mW-qrRB3;EHbCvz_#t{x;fhe
zw&Q_-&>^H`f9yy~o6aG}(m3~%HqQq-@xLTYYdhewo2<0A<S;Esgp;4j0dAZ2x!qHo
z8aB%2e(;8TRsEn3d4Ak47ytyfd(Z*zRz+d5VbFJ&YYi);vjSe_?A_!$cL$8NaZA4+
z;$-8*adaPYxA1674&sETm3Nnq|Bto`eyfz3AzS?_yB<-|vW86f>U23mjAbH+B39YM
zB&9&XhR8f>kH>=?ZtWzfWqcH?YTv5FMu3HoJ^@j_gX_hlCG{qQvADgzPZ)}OkEwi`
zpV7ZqEB05+H)RM$fnkbdnl5VYt-7Oq*@<FAk}_@QUh_|V==%-33YQFg#q(%K=j}9s
ziY)w=f?RY%#^O)omFsrjMmrW88fHno&*zhX2S0`h$Zepl!ez!cICRvHm_nun7JT0E
zU)t~T%YE8)7)PPET1XDshyE*Kzhv(semnmHY2#7V1N0S*8IxW5#MevBVt3J}*sncc
zvFtZ}NrTd#7AxWu^4!+6B}FX(Ipj`r)$IfAj>+WTI@p9syL_sR0~S7Bn(e8h+o8Bs
z+;-{99l%?4pW@W!Hlc9(TMdZ2!e%-OxHc!M9kI=1EH=BLhjNT-$94@{^b@t64}<^R
z_JXSAyF+fv2q$+}3Tbm*&A4gMV8^QG=+WtM0+V*9{Wl5K9Rk2_{|tbb?Gm^|Di!6#
z>dAnhanh3`tAL*%hh-p1w_)!%>Tmnh7Y!!xL3CGb3qn@gl5d*mUomJGsnrir=u|z&
zt4v%ZF!}_Iy_b;+a72%?H~SEez_{C{Dzsk))MDBOpC<w6S?WX%-W#zV?Nb?s6Z|~k
zo|8*Yr1~4|ScYM@%`o-k>62NDNt4-Z8jCqj3>*He)nj9E%8-hUC2t2O>9^%OUAYOr
zltW9zc<wNp@G0??i-i8rc~}W)yxh=Tn6F*AgYjetC@<R2<4EwLPUU+3(+=kPn4rJn
zXW<Ndmy+rx9_Dk!P<`NBu&|9Xb%1smZi|nZ5r=X^d2{(#Hg((Ia?n#)F4?f={+O2r
z%x>u;mm6k1K1Z7;UBcPmu&`^dZ90$h5@fy2k4fI-{}Gcki?*tNig?7`ITvZ^E%}aI
z4*OMq_I*@Ij7et<#%^G`lHzZ+PI(%w@WYZ{mscNkddcn^Ko|%r`}%*$EqHDd_a<>f
z-i>5kIji}6nU?`k(xyx$k=admFkv3%w#3)TC-x6Ms4XX~CIPLTV>R#q;B-D-+ay7T
zI~rcdoB0!ZG!XzBi$%0mzsjE;-(hf?zgfKPE#rgOaAGJaMf4dv8y5pE^xc1_Sqr*3
z$);@r+%jG8#e7^6FOssp(!S8w_)?_}CCgulpW-NOA$zGOjXUML<9*Jt4Ik=ryr$SV
zUWN_*kmC6*F^}<-TTN$9#9O%^zGIv9-EPB_hvx}gxQ#d#P-PoL8{OArZ|M+ImYQW_
zNX9`J;5hC{R^gO0+QDCyzuX}ihcXr+4|cYBFqn~BOuqRKWIr#bAp`o1i`2`Sq~wQx
z<>$m_<i(?1<VOCwcq2HEF>G>8w*<`MnNW6IjfX2^u_`X9C;tUDJGXK^dZZm0@Cf=~
zXaYM=Y^GEUtK^_<tHGp?Nqyc=`KJKH*ETsd9yul)Gm1ms=HNTFH-aiybs2@l*8hSB
zMg$MK<4s&yRJ2dXX}D?o34aY+n@BKg8U?5W699dPebU?IYe?pa9T@Pyr(w`|Ysuow
zTjG^08St1t(Ay?!Si3~DC04R?C;|$it~=Ut;-n(!>zJ~AhGOvflHX7wM-%JI4zz`0
z*HO7lWECge_qFSPJ1JVUE1J#mddq&n>&zR*OWLGcJAXJ=3n%*L@f{8hjnnW~^-9|u
zH;qrKU-zNKWW&KW_<LKn%4zdPr5D(~xI^RBw`GtMb2-q{T+!kYejE-osJn0_Uu7F*
zlwFw@IBo-rW31TD+N4fIje17hX?lw<<GDB&6lkGX<2W6J3jRZ^vtVl6RG!KK$6^IA
zaj|d;><@FDaX$<tH7QeY==_5o{Zv2de?$tP5>*AmL@VtEhkU-xV2#GvfXrYf7Q392
zK<Pk9>;`-GR+&9;@t+3&Fz|)cW!=%g(7os)+m;2bkV>lM=F*d-$~a0iA+L&6II;wC
z4yZ$Hs1HCe&_rk%@QZrszZaS}3!sj%#En6p27~&q(@i86PBgwB`aYk%Zu44V1aOk1
z(`8hF!}v3?422l{Hrd5qv}<E*w&}ogjbrwcI20vNPUY{yUy6r_3utBpfDOPD$zR$H
zes8qnq+tF)2Bd-y&L8D@$04n>q<O%6vfKBU|2;;!&G@7CD|SOMS1^z_kO`e7`%>EG
zo5b5NzIL%a@f*jU_yT*R?SiqSsp7<OP~)$#80VlVK0;OFgUx?qz9cq=e%dEA@;*6L
zr2qgD14%?dRI!;IyPg3<$$@0Q$=rd9jDelGlsMKHzq~Rmx3{O81DA*5aOS;jt2|Qu
zxxM7A+8S{Xegij?piSz>D(RWm)K>LLI2E{tUDKSoN=IyalmSnWg1xF>jfy7&NhY{w
z&bSOW7}NFk0Qjd8fDjHJ*uG#cNY4R35QdC)_LMI&a012xfysOg!LU!+F_4csXIz|M
zWk`KV)->EWNK1_HbCdDmQ?qGKqNhm+{7U<Ea=h$16*S$ClGAwDewQ!1x*+Ih4pKj3
zpG<Qb$Tj^3ads>vkg`qiDavPJE$ic7@wI<eR~8%=eMvXO;}BcjzqB1=>X-sM`CCG4
zZqu;~n#$zG_!I9XG6tI(W1Y_^2qqp<&St&~TNUGy*KFAlgTr|0eLUYVAHgX4Bz!Jv
z6>7p6<8l739NqeLG@A`0ZWqQk4zf0^m2nVbFvqBHk>(i(v46qh#1?Unj)#Mv8i~p4
z#lOlQs66<}q@39Gc~$$fEUEZ(?ByUJZCP#qHu>1M)5f>uQIGjT-${pt7;{LCANL`B
znfNp2qKFN61ih*B#(Zot=XMsA5f3G3$)kVS<e~o~uz1PNE!&p!ySj~mn3C8`G))f1
zXtTj4Jq1X+w}d04q@AnUPs#Yk$8hViuMP8n=;WGgoiHptg<TeoBR&+r2R#!xPlWCA
z19{DmS~n?Y-Xhxxd<h`HE+g^TbHSjKH)E%X-V>RQnY~<F#312dnvr-r?&R{!y9fQl
zKIL}dvs}m6elZ@?XHi1Paej&1LQG`1%#dofHWtOcDQWsRu}P6U3$ZX@!TXj&rh<WO
zS4p4yU2Se*E4}GIzGr{Y6EGDU7clF3+O|#3-?A^QYyPP{9v7LO4zg?;?N>|_sL<~=
z%=#km0p^q!nG1T+OSu^g_^8}P)=Nx!{vQ2Du5v5~?7@MZ00lm~%NRJ3x_~EwQMwIp
z<Ur0dx?SKhPVef1=p)W+k7MuFe4n;eo0!7Y-;Rmo822A~*(PjYTg7e3_R1UJtNR#|
z4JTKq@dZDH12R|SwtambWda|_r2rV{gOOfMz!?Y8y=uTsNlYv8VSB11A4(^|8f+p;
z6YwIGlk*{g?j)k@R~>T^xb^P>aoPvuo%~~*NMN6=AV=tLHnQhnleKUTMQE-B4Dv7Q
za{<x@hbPU(gG16#KTf`Hw`K1ZKjKc^<#)-kzgv?gWm#L1dzvW3m!<ZM?KEaP<1xhQ
z?K%%~LXu%tyU8o+UfF-bh`1aQrs6TQ^L!&Vtm-afVTiT(Wc*u{YVF}a?M(g6-tBy*
znJckKz8Pkl<4eI(9l=e;qhVY@q5Uea@sGd7Kx^0ASDeo6jl0K!!LT-Yg+Fw)0_*Z$
z^7&hAnm(l)JXq3M#<D;rTuVbOF5+bCC;p5!s$C5yw&}j=?>6?u#>G5wn%|~)Aex#t
zT>og}N_lKw5YoRhMq+Q+qH!qO(_hB;7Itgv?;=CRwKn^_GkqRaF(Twx;lZMDLWD?c
z0o(y-I)b2{3zrcD*t60uAsjUfL`gv4@2JZOG}&Z*h9dw5UH3^Fl2`PhpAwS3U_1ON
zU`7leyJNh_0gTWfhsw^Gb48OwvFSbz@l`y1|IC%(krc~e4_wG^<hXG?G0j*)Zg2uT
z)9oqvXlsfBPh<Qv`)5u_GHZ#(CZ=WwVpw6Lt^?*v^{HMO<o4i;#4PnFmZl#>r6D%2
zm7Uo^@`G_Nz9GgELyvm}%;E_PuuTgx>9<?okvl!+Ry=lI1^*e(^u71da4G(_Pq8C;
z2YjcG6pzUI+V_UdYf}P|^Zhm1EtfxVVB9z0G2*biUE^;0zEq#sZ!twcNM-V<IAi=8
zinfG=Ih;EeWKDReb@6N96X!nqy41!Qp8>Z+AIY1B_esu5O#$ZK!I{Kiubn`FqmIqZ
z0)M3j>}TA7(ZCt{7QbzFuYOCmivB@%`t-;L%Fv;Mc!L~)TeYP_>maWp2*^g+C8t{6
zl1r)CDF=aWS6vbKE;nt6RK|&;uyns?8Et=UJK;$Ex^2LKGSbT%@yk%qoXsL5?TUn>
z$!MV)u(b(vD$Wk}?9DIyDds^QC)~zW76NAb6}!TIsTN=ncrJJnK0{~e_ShIQwSBd1
zT14HzN%+D|11Bo2oa9}BO!17zGOfLzbN1M_EI3R)z28dkZJ%=tc+9dhsU{zG<p#%2
zSd}{~2aGys$$-NYADI{+^Jbya#+LvnbdbouB{q~_IMScmUUNy|)Z~o1SFvX1lEuUD
z?fp)eQaiZJF|S<em|y%bt~tg#cwjg*dBNqx?&{+<j=rf}fZ_O+O}WL3MR5YHfEeS;
ze$+lC$<5A&hZaGgR^wpd;~Yre7XO+$<tk;b#N4(!zQPg1RepEg6EE4e1h?LvJlxhA
z0YUT|9((WgXhVn=HX1fydH_NLXk?w7P0*QW$3O>X@UtbhR`dXPky*Z;zz1L=Z``g9
zamHw1ml>)vyh{12w{g5@Y&s53$iYX6|IlxF?4z$Ctoyt;F*~V4Av0T-efKzTNNTa6
z>79q$ZEX0JRG;W7pHT*MoeC(R2M2pQ;oji)5^+5EA(-fIx+-`bv#S#ejo4@Q#sFyC
z72U!ebPF7^&k`~i*x=H-VnW|LC&FUH5;nDQP}|jS#|VCs6KbFE(J?WZw^lv~_30xM
zP+*ffBxZ@7>aCcF?5VBu$n7`IO#a`BLscSa?G9e#{|@rhWNfS7{#STGeTn?rVk6jZ
z{f*cW>4+D7JNolhpONPr+et3xs>UtFFLNH+cz)!(xB`!8Z#mQ3RJ)zSy7{s7H~p<e
z2KbSDg-zPOd~0)aVKXnn)O<hNI_FIHqm7rTO>0jEsT?l0oa}z2gFQPaI5){|#NR>B
zA`CX0d<~8|uTHtsUU=!uwtK(a<b*L`k|@%)iLN37l(oRNiIrOs%&zM=u*;5B4ac_3
zB%Aw58j0`K1^6!4SAB`y_>oCA?C}Z7<1xg|63fl@9JuPgv|q(TB!UAM-G|98@pUTT
zOjkuy(_~K4C!J+~kLxY2^ztfVv0&RGqKQ?tXWtpK=6fdN2!|jsa;Ca!>{6Ucfo{PT
z_;R8IIAd(ePMeJCzlJr(%A%sqkIp-pY!D0DDHG;q9v$Mos^idR#69Cw^3^}Xc&mAZ
zVQo<R6}u8=eb0IlXBle}E5m%(Mmg9<8|1Kk(n-4;E(*7?1Sz=nqyMHu{0FCrulq3g
zrgnF((U!~uo}<ME<!|My3Aa@SsqLxIMpn1kKbaf1>J-vSB!)$n!PZqa5l7}m#a1~>
z>=>WqMxURR!{P_x4Y+f@0>8X}|IKjW@hUB_`rk@ab|ki$U{Ylgn=ybwXaq&Jw~3`!
z#OhS#+D=4G$O(sFNMB+5C?}KfMxa~!40gxa2&K4K09|L2pqaX=%Ob)?EG0$LLq7)c
zdSV5Nigoi(?U+c)0}!`QLmD_ZhdWoM;?MnWK4pBh;b1p?Kl?lCZpmQD&TLTr=3k#I
zYKW^1X>YZcbbFX|Dv1@IngEwLp$X9e0{-CSLm@WE1ka;$acZ!$#m@>R<;t$#0%J{L
zjjLTZ9T9tMe1RZip;pDHZBP69cEcyJ>^PL26VG7Y7<2l+O3}vL)8+*CF(M&z1>)1j
zyYXo4&aF^H9u0AU_~NfDa18NQ8<gj2@9j?wN5_Ksh(*FIH~Ta?lHwgsna5V?bsivI
zlWg&Y96jLB?3(5P*wDEK8T!NGguF<Zx8@v<7r__tEtz0h?BGmi7?v!J_rab+8*o1G
z<J=X9Ij8zumAW1g$Q>vgl78E^${_iz!LTGsFuQ^L>)$t>ody9SR1VJp2PE0}lxV{z
zu1-w$P02X>l-yF}zI5NVV0%t3r|qm~#UI+tqqGUv$+!A=h#$61WOJDvW3;as?m^=9
zy%ltr?3joJ=P5R{yYt8FGb#^UVnNva<fL-K_XaLI|06*|ALHlv+3y2K@R_l|gamtN
z<E9R9O4`ZvkvKhUU*7f*i|Nygj7Xb>yL^xR;Ld=##@FNH6O4Qh--s9VrLP_n^0hQi
zw!tPclU#4MX@7}j7`T~d%xA?*@YZG<63W0KcClSYqsCQY*KxZwp|fqtDzh|Fqa49h
ziVFHfi^9S-!_@dljh76ccUFlt8Krxfe!)HZXvZ2C8lBu`jz}NQS?&*Yx}W^`fq?Q~
zD5mqQ=#CgFN0|e_y3$>E5AlGk1t3Fa02TjPd?#N+ZksnV<|()3328_9Wye%2)Ho8%
zAAUb_1F#cVFi9xD+$Q_m#7dYXR;@kUUf#!&kP_M2XW%AKhW2TPx1WfMglMw1%dUZR
zwxfvEaYBq?BXJ0FNU%Vb7~mJWAd$1DlKDh9CHK-T>W>k2^tp6f{O9lDKQJr)d0Rko
z!oDSpghGBx($oZS<dwv195>F9D+U9u+|FRA47X?GC>?EmX8w7SUbLbAj;J6aT71wZ
z%ANGW9`&V<rxg=Kw}&{7x)WpCxo0^T%frBc#jEUIbh5TDF$LIh3?!IluV|{UX1-z0
zY4M8oOPovH9G&joz<tFjU~-<6Uy9qXt&J1YDSVo2XuJjNfP;B1HX7HRCxSPCnGZ%w
zrt?*Eg2#8r#r3_}0~_Iw`w{kbf69%vecTpwoW_S>WAScz!nI`k!XxYg*o|lW`=C|h
zmNK^4oH4I$p4&VI4YvVj&)vjj;E3W39GY$WWY1(@wS5GD#K|0_$*UgpqG@67Mu2{1
zTzr@GdNBC#@d2<(X(T*tU#`G4^Go~mqmYrLBA*2l+m1zxZrh1jeFNEKKka$29Q!G(
z9sOKxR=ys{7JjG~b8M))C#4}~(66(jViQyE6ob@v!!E-zi(P^?#g?pPtkDNfJ8mA+
zlqqq@Ng@16$R!bF0f;!dzFWVi$xlC7hcqtq&@iSfqB~PWw<k8!=drh#&N%fL7pYAD
z&4VoC6Y;|UPd$of=}USL|6x+LiEj&@;8r>ivCnOyMGFzf81X@){4*9)5(g{P4xcI(
z7p$*5lTqxsK`}c_sy8Ru{AVjq4jdUUk(kRznly~c)|DGXt`{5Sq5v~;vIu<geV${Q
zAIK}ycHv`=WaW|i({f+(WV!CflMVS6tJSw@{;2O|5BIChZJb7j1%PkZ8kT0H8_wXt
z9EVw6*wZrx{<XMMOXFe1S0*X5;ZfT-2KF{6^Tbxd(g}dT;%<;%pj-~*h@L>Ku)7a~
zP7=i?03p*uFm%%0IpI#lM{QRoi2i1OVRXV-5~<kY@=(kS+d~`l5FnWttL-w_FL{i<
z>8i$_jFiQP@6s=dy%zT(_Bd%pEQ&|zuFSvF#MdSy@@e3o#G+4THXf$<7?+j9lF&*v
zLpR9rzMXSD`I~=Bey`fnCuFm$IMH%LA0why;C_p53MTUja1#If<k&E&Fm2UAOa~bj
z`^0DR;exUq5PR%^%&`9wwWfVHb2rcud$!r+3^1E)(p6tG7s68K&mQ9C7*0NTo{|CG
zKeipx-XfniWj>+qF<#D<@LglrbP^wzFFAIaLq5lcWA2t71I)Rq2de?QVjyEb+ZQ&@
z{g6u#ncExAC8=XEZev_zWQ^P!^OME3#ZIHA;|uP3oSl!Hg9^v&d9*>ng`}(hBb)V_
z$)iIk3_P*BVgV?mH1ecQO@7Wc*y+IJJ|oXfdrAmfSbGovI!t!qlIZGpg1$wL;Y}NE
zOiGeNv0<EqP9M0hxCt|5_SMO0IjPgPX@YM+_ZVsvynnLu(rW`MIUd{QNvrhH&$oOe
z_KKI1YvR%Bt$~=>ltp&uB6mzcs;$wViO*!Z4duoqwfVBD=K<TqwZ&BCcSL^hCozk7
zSLA8?kRMuco$d3x@_=cFW0CkT>oahvu%5=kAXDQI-dRM%hccakDgU4Y=yooy`qjBy
zd89n3z=_HdUV5AVYtwLSSA4bY2`9yi)GNM}EW_L;S3dw<7iXvTOKqCDR?*p|+xNHj
z{S$d@1t}-{8!s^y40q2B6<gsA_xJd<efB963J0}kSsQ6vEWkWb?YtNhZZ^AWXV*94
zZ}Rt+MS_L>GKb}O=={{}yS520L?>D={9j{5lbuh=llTk%uC@Pv0u?RD)tM0700000
LNkvXXu0mjfTFZo$

literal 0
HcmV?d00001

diff --git a/docs/_static/images/Wan_load_balancing_exclude1.png b/docs/_static/images/Wan_load_balancing_exclude1.png
new file mode 100644
index 0000000000000000000000000000000000000000..1111535db62ae7f2e5119b9626c105159f6ebaeb
GIT binary patch
literal 382563
zcmV)MK)An&P)<h;3K|Lk000e1NJLTq00Mdd00Qd>1^@s6X^<-F001BWNkl<Zc$}2I
zZP=aXRUP;o8(xJ3zk&i1Z5W9ZMk*9!z8Vi-at4Y-0@w@`8w!nK+LD$@?G%FDOc|yO
zkQf4SdX*~<z1k#YX6!(N6$tn%L9Y@V$#D`}w)JUBY{0V9_PQby8p|bQ@A+}gz4uyc
z@8`&4`@H9z=eh6wvDVsq-_I*MncUsn&E4J19Ny!{>hf}(;dL9|%nk3Qfw@<`Z|Onr
zn=ON|YS%}67N5a_<45=&d15Y^sMGb#FtAE1vDb5dUL))j%azZ-euZG;JN%&!$^>vQ
zQ=BMX1TON4d*-PD$}^lp{EUl%RmnH@n6XLpOVB3;h^ZGY&?f7O@+h1btq+%?uksz^
zNj;Jc<N{zLJ5Amkr{`VNNC2n&7OjE@Vp!`)^9Apyse*5=0oqI5TV|NOB6!2kq&2FO
zs4Y%ddlZDFc$RwLI9K&Tu_an1AM{CfDSpP#X&=Pg^hu6`b&7d)x(-elkg`VoVV{}D
zLhGT%-n<0ogsy)<yemjCU#(kQn>Y)OO9fyZr6z%fIeaqqlKTJ;Tt{?kaRI@EP+|Z!
z_!<1vxX7jDCFOMuZ{Y~mdTu9Q#8s!0f%7^ILgU~Z!|wCaR_Q5Po{FQ^{k&b)L-b7P
zo8uZaDb-C{fjkWhHFGhdlyEj9JIR;kSXY^w`xM54gmwdgkU$Yw0HS~&_igAA(w`N1
z0YCTFwUk&Rt|VtjsUJK>W`VG_&|+f~GsmEZj6$@hXhvK*xaqLPB9AM42y&-lZw4{N
zIqaE%J%>3gYfzlSjZt(JmquraiOU{ipFPINzGz}rQ?ZLMM&3p&5bww}G?ZX8xXNb~
zs9-<`NW@}pu!1f1N3oZC#YW(S7|-EW55gmT(z4TaT#E`VF#s_sFVA~WgH0`x&B0MK
zoN#T`8&Ju6z50;*mNBxH3_e%vXI``Mm1{Fxb05g`i_X{Kh}gTA^*NkUvpm`^p0n8X
zvTq<er*Y#wZJczC`5;9W%>sYXWAwW_+z@RJTqOP`7mSg5qu>@A8&%sL4jMh7&4^3)
zAx*u;+7}Gvi`++UU2WsjCC(fSDERK?@yKaRamrb6wDcn`<i%Lg!#&|5x&eK5np9jI
zG_L%t<rn$acX&;hB_|65JPMh?;DZ8Dh>;e@18FQUgP(;E&$|UQ1QN*r0ERClsgP5|
zy}X^XWljhqeRGN><MFUh#C1xG@36Hgjy11BWQ{uyEMQMnwbsXo7V)*l7ln<nHO*-r
zUyN^U?t)be{T3fY6YQ76@?8GJKWGnf<h2R^I(s0FK5khPL&RW9bHHgIELL$RCW(P!
zPR#@}ml(@oOy3J7l0Vu|-J+~BaLTj#)fnrcx_!kkbw~V(`!P^RbI^A%UfJiNvw{zB
z0|N^=hnN6GX!rng#Et3pwGrQi4~;MEx$H0cT#qy7)!WJ!<3s*0#%Jae^^)5Y@!7#D
zrvbD@-*W-))gHedPaoe?M<u_D_|P(JaKw7-W8t1_fqBLncv*ZNc!wrOc%gTU2S;Qi
zF7*_bD~6$=+&=TlIJ({vIFEaYC(i<+y=o(L#C$-E1;@Y!Yk~U13eT0z_&aZT)_$jf
z<;DDs-oV+>q02@9qA3V%#Ptc2L8*YV2!#|`--u0op+^-8?QZOwe8+sT2$47>GyLRz
z$|dX<j6IjYXTwB#(er>oiJKU6w!tDXCYC;Oo_RP*BV&(I+$r50Pl|217r9WOjO&F{
z*3e92@U|(k9wHrZSvA`<R!CkrqWVEn2uDyR=cL#AIK1&?p&5}K=8k&hd~lufp5UkV
zoAuvttvZ@r1DafID4Y;31J7KPF%hAXE7Fnov$>YsW4LD1tvXB@%<B^gX>%I!4<D>A
z;-|Ll%%kHohHBG`v7Yr>!2<D&VTbWzV5$$qBsN99)N9*UMyT4Lo|1Mrho&E}JR4qV
zy?!sRm6c4si668<n5;q%Gc^vt2G<Q<2k%&m<zY;;i8A9T`}G7E@n5)39Y)*@e#@)u
z6SYhI58@-dhcmrW?1cH5nZb)9{4~t5!4>csMnKPji}n~0GJOv%82M=WXT&>Von!$D
zaai`YnNiaim<L+Pb@RCZskTV~oKz7j?q64MrO@;M)`=~Fu1$`?f~nQ!m9qu}(qSn=
zXfa7U5RdV-2GddS$P*9L4u9P5V7l{Zbid}H_7EWVjL&EH_|PQ5P4=2S89%QFev|ML
z-+D~PCCatIjT!_X*<oC{NX3n<8PdF7RH7qJ#v$=+FaWK@HmRktCG!+rtl?zciw+x%
z9diK<81LcJfcP)51RixD$66YGv~N&kE<mzv<yh=-w&0tF^w>DJ4)MSd)5L=Cumdz*
z>j1bZuWo1u9|iZ!nCwDlxtKmw7orE6U6NPBweYq^vyhX<YGB`HZ71YyUb?5_pv7ls
z5ta{a0zUPymxqGJ2ShTsS%VGnTeO<@c%aZd>>=y0Dm+zNjNIT%&M#d~I1^Z-&U?e&
zdQ4dVkQ>AmoTxS<lrHyDD`nl(T@*0TiyTUbg^LJ~N$JF_gU`|$5RwT8f$NB02Rx#v
zF+~%}`$52rKnK@r^T#4v*`#Kx1y~9)?aXn<c+C~174CAd)<Yg71{`MGT$mJdI_b2c
zc@-`O-taxNoMsz5I2QHE#Z)jOempE1u3CqEhc|@TVvx5ap1?id`v;wj)8KPCd??yQ
z7bd|}J<Mu+rm07cFvzQ|<dE&B_MEU1{G>O<K<hY5&w}+VuLv;kX(f)xA$`VGT9X;C
z(FdOMFn0V-F%v$PW|-?bOaNoD!ZD#P5Dt!uc^FurK36wsXc9)q#XK)<pX%-ju1i^r
zxKnpjL(JZc#*2>gvc^VuDrd!Jn=kmGoM={>v1!Jm@9lFwNOQ@v^!luCh%JAq(C3o)
zuXcuA(x!n<ND~>$@F_8jEvtoTVn$DtO2>88kzgy=FfJy&w>cjZ>5Q&5dj__acuhvl
z9?sCQh>c~Q>9lQ-AUZi1%z~Bc8E74J1THkJX4doR9mNV@jC)3VTyheDfq>=<f1oLc
zDviT(+pGwgP*?kGGqp8Hs^WmbM=%1eB&sryvrxgVazqzQ<4j<P?{r+Bg3M?4a*iBl
zi7R+$t|u9ZON2~$K?EE(H!j7BeMM|dBh4JxKQ=#&Y1~&_N(?x8$KN5GafR*Y>XoiW
z_A<0fgB<ijT6G9m*s8ohKE#9gZTROs7{mxa5N>#y<1O`QNKk~HmsNYH6Kq-oe;R<2
zD{K`m!w31s4VW9_!AO*s<r)sk)R*YA#gwra+LU_NTCV*#jHd_2L53v9QXX75f4B!<
z@gULFAMpg(jNaf7r>xflQ|2`4vfBp&D|jJOJoSnl(4^pwKbt*}5l8|~5s(s)u+sTl
zEb>~rro}S}%X=&R3@mll^?HE*RxqHF)3Z&@8{y2j0jqUbm<ANO>T|ExCm;&~GTt#D
zg(|cn9sVxO8lA66h!Y8)m}G_k4UC+yjplpggL~1yps_YcC@ca~{0;E{ZV-FgG`7RR
z1j%7DzH%Pz6B?<|BM%)cVJCz`TO>ZfWcXFALAZ&dqo0JDyA<gF2O(+HaIb0ysL;Zt
zyw>Os@W7l<iUqe!ieh)cCv$+D3G<|T+{4K^^2egrhaIK?^G`bzcj(1Zl`?eeR#fx+
zAQC~-5NKY+*%&&(J@g+)kadttGAG`f`lRSxY;&GC47vlf{A7&4L&2xfC}|6I1UaT0
zB<{Ryyk7JNHj!Li$2zyT%Xu`p4WBd<W-tgJc%OBX-zxSaetJOZv?$t2R}IFBKM1SI
z6W@%!MmE;%EAiQSyh0uLFo5`>Drml~!iWAp%bRL<nL2O;JuSu>=&q{?AdGZIabAQo
zv}oWTZ4?fg>wr?l7-Ik{7>nteM$<zsme{48{G7de-X8f(*{a6J_Ntljc>?!DNXiJJ
zCc{F8q3r^!Wga9-O`i7wNC4X0Nwx)x8h^V!<42{l4UV_O3iya19Q@{fsEl%t;)K|s
zP<Q}W{IIa$dV_Zr1`a@nbwKYteg$i`ADY504b23_s|C{XH_YI^*i|(OKp6AYYJ(du
z<I*-_#aZz|EZf0n`8MKgV^DFy`Vm`qi0E+ERB?!OuZ%0QRjk<WSVJ%fMq~owB^xEK
zaLxWu#yO1GdDUm&Q#1>KOS6x`+r>fg1Li9`IS3LTh+H&<2XKtp9p5u5#JqB$1C+AB
z2rzz#Wvm%Jy2Md+Avp~jNx|svCi=&`$Tq{&YE@peKYRnG{h^b!pS3G9VX%&zs>Y1{
zFiy_*8ckCkU3{quzBf~woEx&9q+E37YQI?FGe;2bosXxv=aHkvjI*)&=KURa{o3%y
zXBf7fHI)J(9xxB8yAVp5bzrz~rn8REU!rILe+r!$tOCL`0DKQW5HQ6DW08{v3q*o~
zLi^oklFvQ=Kg9$<mBCmWR1~v*u6Wcqcuns!*W#caK9o=q4cI1Mge~|b)Nwxwd*-zs
z)7h6v%n>K+f^|?{272RtlpkUPTvDNElLGr>+m;)(QI~<q(>vn=&4^Em3Bc{2aC=;a
zVZf5(a?u1gn2T@?Y0c)Y@xuCQt8$z@2XY5YgvY=Q7R+m<>d)mn1=L|J&5<5%i+*P6
zZwX88r~01j14C1UZ<`bE4R337p?e43jUU!d(QvW_`{<{|0*){2Bo?SOtlM?3oI&Ma
zf_9*XCKgugk1JJc@K@1UxGP*L=6ycs6$V+)Z`cJLv8Ae`VL$loV<-oi*?qaXJY2Og
zXHKoZUQ?B4;g9aE$qnyuuUdr`*8<bEv81g=M@<~e!O~&(5D%b6j;3qj`aIqMt>b@n
zJA|cVWQ1~xYY12aE{d`_OfaxIC@%tXx$Xo^_zE%rAQq>JC%4nO86v63kdl!z;s=9^
zMB-lU=MIOs(4RI(!6WS<pPe|VaVWpBZ>&LIYdC}0il9k9EL_$VaG@>99SsE@c#H8c
zyiWIxSF{=f(So+CpALidIi+VfT``6;HhHl1KGw!ZfCBzA&1CICZ$^iTVf7D;F~P;p
z#fA$%=`OKEjJX$qzkq%40`{>VG+M^*csLvfnyw*pOv&eZjyPY!5_%_GFVzyO*7(ZY
z`MqHLyj}xuz$2vAYhn-*d=dU5sMVLuIBdm_PMgZDTN6uS`FwKL8bl+>8~SW8GUUx9
zM#fU&Nv%~*WeBXSXfEWt>aNZh+F#?W{R`rTsD&d9mG)G>qL->U&&{+J=YPhS%Nu`S
zYF6u^ZS0?OI5oW?l2t!52fKa^?lt(09syv(5o)A@+a+8YE^(~Eq_C~IFCe!BQ*m3y
zUTnqnN@Vwh%3=%FR{wyF8DYcB%D4w!Onzb<!$I*1XW_qZ6wPZ!XqAg`8FFuMQM+Zh
zHEV~x(Xjat({ME>Sik}&G{w~LlQ|^+txq4ChZyC4Vu)v_I;09VSqCjoYYzd4!9Wz9
zyWHpCT21$SaV@f4Xgq@Poc%c*zzM_wSljSlH8Nru`|=P#dG|3Po{Ud}-<<X{rW8W2
zf!LqeWpF)DUa*?M5)Xzb3(o-YWAw(FPv#$-QrrWF4vVHflYnv{khP5l6l0`dm8WVX
zWTV5=J>PR}#wJl{ZkGGeZ*n|?N2k@n5an;eHQduaXv}rwBKF8OV4?TR+(H|XMF5+#
z6ZV<LF%wUtJGR+t39zW#DBq(`8`wrZ^o*c*XAbC^;|)7z8aHSI;vo%l@5eZiN74Z9
zRr|ze;gNl<_D%teq30A^N5(Le&5FT;Lt+iQc{Ly~5G;b`@Fr4=H7jv8HfBHyanKqN
zxMDG4?us^1Ni0}&5Kly7Y=?XptzQ$jD<^AS+%-zkpujQDIet0*wf?QW?=fI1x3G8I
z!{#qq4c2h}$GS|NY-VFxH|W!D)gLyKkw-Rx%$c+R+yN#la|TJNKjxv;DXvKptBwj5
z?6x^jwKk+Lv>K>-Mh>fQjGtP|QUSnpEG%)78h8M4{R&3LiyA$Sc@FdqkK(@`R6rLU
zwi-8RFi=>-q2)s46#W#u#m8))hgalEzIZ^PGr(eoH}W_5HO6dRtjfJ$+S|e0*4^Wl
zNiVVqy@Y*Hj-s9NibEC(fAs0-%Zw3YPyLkhBYid)<u$sOhhVB@%CVdsq(VrW5EIB$
zv7lJEXWBsgBAl=`sHTWd?76u?Fe{iq7Oog{+Exz2P7~|cXJb3`%)ak?%=4*;wK&a~
z^?E5`0x3yLK@ia;X$=;|#KcEX4T&r`eNqgN0wBp(z6U1Q{DZ^!!w3-^pV@y7BUW~2
zPw+{iBP58AUlNCbi9UAPlc2OQan1n_>jZNKEEr>x`;4=$Lz^{6upiAZVbg&ngPr3S
z9aB=MD@;^k7)=-leK=~GVO|CfFfNu$!Ll7-ru%7Ku_f5L`k<WAuJKn4obnsrctF6e
zj&pt0`i;D1_cVA6f0->m`%oslzNw9ZNyI4qqr{AyWaE_kymtgDFy}r*JI201F1k=0
zOh1QG<=_e)<Fn*J77$;fi#T^6PRIr^K+ReXLDFB<gJ(^S&z&#T63(`w3(|wZS}%46
z*2)3;Z|0L(n(OdS@>GkOf8a%2SQ?9jQV-!%^_YiI#$Z-sqJi?tTnuJra-w!&AI_k{
zk)aksfUyKRHDF_|aSB4g_OLs?g=5qOy6rfb!HI3KP8kF4&E~#3=yhNN(22p|4uvit
z2+)D0F&J_J5UdHL*xA|-9JSeDKD>UA*c~9S;H68WN3uPZVBv&K+z-Hm&MH<Q6eJ*g
zG-OhUNHPjA_GGT;SFtNX?1s%KaLAFZ1G7cUtbw@~H%#Qw@naD?fXvs0!w$1}2b#En
za1hiSMdP6l1pxSumBlw>P7T>~kMI>?&tZfRF-BbtBR)VYuZOjuAId59m$>JE>GH@h
z`orb8j`x@=ibQpRbOfB7Z?~roe7P^2kxjrPE2YsY#xH)AS2;8{TqD(>574Ii##kZ8
zGDt9n<f3pu0}^r;lWpv6PW3@4^T2+b5H@xY+=wYT70l*i!vwG+H1&t`Q1PH+0>90~
z-`VeQ93y-tmu`Ke#riBY0(kK?nfYTMvtN78{7cq|XuAGD?@K<K!yDWm*VFbotmCSF
z9_#g5#oq_Qb36oogn8^<q9^kv|1qD+&=!&szeY^DCNna2*fcTP2a5;LqhSOw7-uGe
zhfVT_5e66uX#ujq0h<uw&@?J&Dnf>chA<m(!BrMX{oEFV@jV(09k+>RkA)A|4U7Q?
z7EXb`%nLqyTucUtzcvqS03`o;4dGBshb&Nz)zgXc59`Cv$hj0-+R_1xCx`T(7)5cW
zZ?@ew>-jakUWo!}(4-f;$cy6F*TAL>gH(uW8}<c&uor1qA6qz@Y4T-|wucmhFF|>O
zCGrb8V&8nfaF;S;JR9tUAJ#F(uD<HvEDyHAY~@545c}yTSHuH~Ipb`u*2bv=aUe#z
z!Iu;@(edX7E6gA9gS|tG<d^j8@Fj1A)+G9l<I)Ff4dRE{ngc!79+tAS#$V>8*I<9x
z&lqr)cD*EHSAO`r_ISMRykC3HOuX{5%R_V<DHL3=0MdSz4ChLm1SPPad?5~iX*b)5
zSJ>TSz_|xc%l*^%5~8d_kHv+KwBfbD<EdRl+wX(4BPx&NT?CSc5v)WcAl6C(bf9CK
zOZ1`0AWp;LN!v}MZT!NZAA75PT3K+J$E?Lsxy0|rML;4>c}r|8VjZ0F>aM3H@(*}{
zPP#)#9bhC*`K^N3UXlw?H1<hv<5S~Pt_xq@+w6U2t|LB_bzDQNJq|~VQTLb0&(Jtw
zT(Pbi6s|49^?^YKUh(GxLOqNGR*0Z#fi%kpjn)?1<Q$~a^smH!W)1fh&3VLbkni{o
zFYKqGe>QKdx7A*k*a}C<Lue_dR+|$J^n#zHJy*lk7IHth81|Dx64lTN=oNh>E@-aj
zF)7L#p!dXXWR|&;UkJ1Cgc!`=Au+11Lo0-#9$0`E!T>1tit`8_^Tj&Mv?<9JQz+9`
zcjN~?$HM?%+2h3b(O2omKIdEKQ|bypOW&M71b``sMCrbx;ZA=VLwD%y`W0Y?`DT9c
zUg9vH>On>bfh`dt0qzj2x!NEQAxVV=whA~%lqQ5CNV^hs6Al~>8lRPHOAl38*{Ib9
zW2QpJNsc!QURvNXU1@kKFWn0<#UVX_B7cKhl&@kBqJ-vGfv5Pa`e5*lKX)Q8n36r!
z6HFz(FC3L36}=&ane*yS8w>L%Yg}U?jbb;cxvMX4un2=`gOgBOnUvt2IAQ*R$jU9m
zp4g;L>ELT=BI*)+;UFACpYWw+y}nw^1RW8I(-CTDbkqX&B-I+k7ok(m=3~I7OOOI0
zX>`%(peDICqO$-pk*>U!cho*0)My$K%o+-FiDOq6>4Oip7{AU9z)CPs8l(pT_G4D*
zcvX%{pCvne-x={iA2bO}a+$FKpd<EhC<v^}9HbaYYYEQy($0*5J=qepFjgEvxtAVT
z1V=$Wk_lc=cQAjFhvqu=cDn9)J#EmnGQS~*VOw!WJBkIZMf((EJ=>_>X8M>9nn!{-
zL-e7*eEA!_rs)o+EQA6`(9i-ouD5H}2~3l$0vjM9=*F`I{SLv+<i%n^n<%RIUIcGx
zl#7l@j7ZXi5;(BIdl`5BGz2#<1o_HYu1k{PTI8H)MJz<i8jgYk<&`lhO$hVXI8645
z-ULr5Mr{n453oToB*k5E!Mq$RXBz}yi^H$3^|TEt1^$o+ykCY7_#i%2qk3JwTZE7H
zRg)3#NV0Iz`tRfB*BB0^Hj~e)<<&)Q?&$|ZrJT{GVvL6X%R5kGh|f%qbi@RGV@}bt
zKr0P?V!y*z2N7$h<QW<jTjrdPU{i7$;frRv!8z`M##}WnV3imk_Mj*10%r&s#u=AZ
zF~ERy!iXjZho-%keN@baFNl}5A2W^6igoG(^&Yj;W6u2QH3MeVS7MM{MM*>&+(%c)
zdSa(>Gsfyq@3HNw=QeiB4Xs^%E1X26<|Pk!xqj}}&c&Va)bFte#g2+7{H@{Mmj8pv
zDJl|51(!+d0i^3X=$cRKf)gN-N=TA2@V3D<v9cM^F#<{h*wi=Wsld}ci5d6L5u`ZQ
z`!w_$SS8lcNCvOC&ES4sM^6pLATqKg_lEDPsm%UjT8OR8c|J6t4TKzYs~AE|jCJOZ
zLs&U!^pLUAd$DWX{q;>+N9?MdkUj?{E^$Q?5r`h9oc1>SHE|Q~me;y`IxUYFG>*_l
z5ZQ3&{UAYv$mRg0*s2`Fl?03i4Ibj!muNHDYA}El%eX4Tp!bIujQBckGe>ugEpR{`
zu%F87NC@j-E>3_9nt0?UHhBn#;5;zPI6y6hZ)#-}J0@Dx06rDxys;#WTW{4JB}_TO
zH3?EVV3>zr)qJ4ql>?#?V4K$zct-Fb{@Snduu<(oVbcQ!r5^JM-2x&Uljut@E?lh5
zwbbhTUc?_ufH-lq8*6fhU|jWI>Otc`9pj#6&JO=m4$HtZACMu+(m*017&5D%>tVti
z0~r9!9de$}OP{<7K+?23UwBv=saBz?*3%|pC2LG=WKGvtve}1$T1bF%k4G#V0T#Su
ze_(}qQJ0+?2q?<&Q{twknto#`YD5OC=kQX!0Qw^CT5L1gg1mwc{s6hzK)$)n7`B`^
zEHsa-x|oQY)JkKQIbmE91JYPvto~;(q97{gSTC(VU9Z|HI3aKG$%e1U^db#g<Is9B
z_8_rZbC3N2){%RCu+curaZ__vK12s4{?(6B%h&@+2dXE;6gde^YK+w{<B0T%ZY=IJ
zeJ)hva!qTfa?x==E+H1J&Q=<tVW~JLFNA$I=D^FLm$o^EsUAn2T|A^c4`aaG&<*ux
zvK{a<Fa-;oH*z1Y=?o9etu8VSru!r~#oh8IbKb;iY!1?gjT9f^ty=803_KQ{2@a!P
zG)`F5_Y!ZR(KuR8;xpZgxKeW<7{t`#-_e6)iIgfB1a9u2hN_N$0x*#wBs51t1tlZy
z*W>m1HR`W@SqeKHXH(~xvR0^J&*0>=Os@f%aHAZ!D!C07D<KR~G`OtIf8?(F0t?}S
z#5v;5Tq0b+viDuDo9>AvAZ)gYUE6~X-UqgWJdLNUMe>p>)=0?*b-~snZi8z)uxSGk
zi~MKvVqWqP&iYI^-~bmvQ4WR2t`8I~N*o36ay{MA@l@A2=UuUB@TmI2e2HtU>9XI%
z*4(SnA^GH?;Jk<R!k>FCxd(w3^Fxbcv8y#@89<jOa}4Q5oaUVd8k~a5+81bC<LS1w
z84LR1iImX%nLEf9{h;91<c5cYc*ns`)HM0R9;%s<CE$@BGPHb8tn(pd#FE?!P^LCS
zL*mE4KkY48sumIC;B}@K*8`kkMEy(w-q*gGa|O;`?9X7=@@u+k&H=@Cx=eehg`&f%
z8N{3X4ICy~u&xj>wftaBBAMewiaTM!Sl5doBdy|1AY_jSm7y7;M+8trX?p%(TZPdI
zwT-L2Hj5XEfZATSR>)Qyf*)u)Brw>K4H2*jTxbF0zPg^WsJLOnnZZ<xHh-fbc}E%?
zbY}w^Y?JdUBhHz%48C!=QjEk4gP>S6JnEVTzX)=sIg4EzO~_~;<&)mRKG!%xHlVhQ
zfVeTT9ZG5JrClTcsCwmt_GsRrZNN<egTjWrsBiECU#sp^pNt>-C#Z;*;Wu%jg}^6<
z-)lqSQn{~vxQg5nZ_$CqgZ8MWQ!b*fURM&&2m$QlzL7oi*V`gY+WZ}_k6u7Eh0#)u
zpsOYasuAZH!Vgj{SSO}c69qeCyU8iyHg;tzq*@QHqBbErjBS-))(7FyXa$HRyiM#P
z?j61&ajtLF1NXoY=b9MjVp5z#)`&?{eLCXN001BWNkl<ZD-eC=fW3RIAD_85cP0Tm
zR;J@OdeGQ1K^uo4IV_Zc2O^5#*;)PUe7_}0guqEf5*l}qN`3~pLcokLXuw1+YXB#V
z40a~ML@bH3u^V_wyd!UK_Ha&6v>sfJ-0;^a*<`w$A#M^X@I^(Kx${Mh5yiv#P}6`o
zS}kcKj(Em;zGpQT(i7o7r^(!b`fSz>c_i-@3#l!|LgP$#vaXF|2H*U7(H!)8pG%J=
zc<W+jd*;aHx>_UbnmF`;G=PLfMT7NV4z-5U1hiT5R;`rW;XBlQ?Q58-ub_eN4foC9
z)bHgL`2hxWAN>tDDTc%>G1ghJx*n8pUQLX^tZ;&NYwua@V&4fP?nir-cjgbsj{KVS
z%{9d)q8YqHgAVNCbMAFXLHioYQ+uKI*_t0_Inzfnn~1XHSZpQm<g4h1d;R*EU`-vs
zF4A&h!kj2>q!R1C=NM27SqpJiinK)+tqs*mr)$7sjg8Qidx>juxM&g-lP8T5hi+`^
z15d(0pri-{mjxj`)-xg|1VzF7u?i^0Il!EASMk9x!q25i@;Zz+wVFy%vgYC;Un>P>
zQw&A&p&D_Q{5Afx%~&f2U=Q}ONRg9T5THAU0>OdHA6D4SH2H>G)r8A;%r$dEStbfI
ze#mCTKMV|hz@Y3cFKA@i)X-%#-vMrI@XTWp+T?DjAjPB6&HC6g+EyC|TBfAN>XL`V
zJTQUvqq7-Z=yid^mG;1TY_?RZGkBoMIS!nnM!UdVT}qmq(R14C>Y`b%!vuNn2U^2*
zuZt49JK03QOcFy?tmJBrxit9$U?m>>8Ct|R<Qm)4np(xfGjhad^<Kq6d;s<WSC=c*
zL9By=Pk4p?81`rNU@3zlzRb}_j|NN)pc=VEKN5`8wlQ8dxCQ}o?xfe%U7{LVE^`(U
zH{Ye{wE0&o9rnaOxyDl8iaV{F<6890eS3*d^gGl9&k6(4m^uDew<Gz|7*m;gu%Usk
zVzS(k*I}T?vQ&L0+6c1~VFx}Nmz;{|UEVWJFgHU`9y+jbk&qxRz({NsA}N0mzBRVU
zt|h)CB#e<`B7b^VrI!e>!6UELV%0Sy!g*hfuGj}MTXIOflCR!gLM_h*@D6^)E{WH>
zn6U_P$mzfxne<H^@xi)Lo+A>*4-lz!N%6;;w3IdmL6%84@~zs7-4rLsNV>-83P*r_
z<W%=&3TVgDf{%Oab-{z1qG0~Q<jTi*8~vf`t;QVe4;+&Nyfy-ZUhKVHK`}6>c}DE4
z<)(i!HrZDa6JE#h7yHOJ^{}KVbdylmTw$;lWRxHI-aY(N9?(;(f6z2uP+j(zqa+I-
zxEJv$xd+#HZLAgEWd4+g`=L9ymVFU^6sa^C0Ys$EX7f~|87u6A8f*6t%tX6GtCT?H
zvhcw*Zn(GP!ZQ~(bu-B_m54bwnZXo&$^4{VK>c`Wcwz%{hBNApj3gxS(!_IBCp;{s
zw5>oiiB&&D48$U$PBw;W(Vl}nBr=Jh6Lg7<f8y|&v!B8gOtbMx!w><hKuvx0+;Xpu
z_iQlDJ{dH4uY50YAm)NC@}rpW!3JmitZ(ue_Qy|*Ay`UI!*<~#QDP0QEa3XUk{b2+
zi>_BJAxDEfilK2Fee5y_a+Q(3GH5Z$+(W!A=Gf#gpu}3@5PbuVnLX-q4l`VdT0#vb
z<|`O8kE~PCHm*@UgKyCz@L`Bp!Afyidw|pKLTX_gsDBo`7(*Ut+J{tM<2$^g9zkCn
z4i!5-$c!XVmzh(uUo;(`&>rYqdS10vU%U=A3%TKt?r@9iqEmOyA33ONn|K^7!Jfpx
z%C*2_4$m|UIj+8=2D|*4_=t}lcen<c)cBgcvj<4XnSU`LI#HXAjuK>8Yp%Sd7If{5
z4j7jV8z*dbBXhxC_HxeXYf=K}@H6hwcm7PI$<WZG#x)b6F!2B!0;%typ-ylqY!ynN
zn=zODXcrE3Qj7>lA4h@@5SrM5CJ{`{ii7fK?`7<zxFJ698Q(!CK@8d%KVd-XL4ieA
zxQ%;`>u|6Qe_B9LJk`gH4&W-~Th?I#8T-Hk+FV{82EozlHFBCCRB*4_3VgzD-T-{$
zfK-Z~b*xXj=!4?aTvy)={)Up6J!nWit!^o9;aB$?ga(>{!W}`ZR<FSxb<(Z@4b1eb
z5sj)k5wCS1c%bbx+4aC?2r>t2UfLTIP(zJUj>K_#1dbe9E9?Wju*X<u3$!~wyoE;;
zz|5K%4OVR<U(%2Jfv#L#9Di&4={wqCtU7LVw9LoLGVSY=v_|XDo_Y2GbdfdL_3yE$
z!!i2^;sIJA+;|;A)M8HQtF{JSis=%Z$P@7sJ&s#wH`|Um#!&0lTH8!>ub;@<@JrR9
zxyf(ztUAp!F$oA-*Kq<sNDVkvT#PJgt|$mB=pryMQ3W;vxah%ZuE1A(nL#`u48)}&
zhOi=`<xPW6Y!j{nunl(TyBn6$oh>iXkRnBa;hLNJY(z=O%nU;vrpz;HaK#{F7p*6-
ztA$nKp36t}B>E1lw6<DZ1>Q~V@EY-za!kG~>@<3UYn=`ZY@j4a3#hYZxN82jS<-j*
zOEFQh$+^d0(gWD0haSjMTsLp`mWKt_3}Bq2f-(+Wrte%I4IVJ$z^l$EM%8Jfr>0+L
z>{3GmhdJN#nl<fdik-$Ye8_`b$%%UP=m!L+W7Nz2itB7HxF6OU`XY=t=I(mES90b!
zEwb;h6(Q4Co@2gpr8x9_l^Dqf$Sl9f{BC-x_(M*H=EDs-D0mHCBxjDd=!;H1s=W~r
z*dFExchFSKy-vp^N9KR+TItUeZ^M4zU?bW>KXKaC^h``7gef=FpprmCAVV4oI)TeT
z<~7`li7MfkXaFaNC~|{BWjHzS3QP`6zBV?pEh4r9nl_SvF=H0eIv@3V4id243z1Y`
z@*7OHIW*!ivXx2IgIE)5EzrVKI55x)h#DYA&LlrNB6K-4_!hiXtB^V!JfrzbZss)b
z^&VKxr0{?sL!}6s2LWRno3vgMTe9CZPT`R7Bk7L|zy)`Lcn3a!1G&b!CO_Q+CdB7p
ztKiceazsCwgWT&ioSOtgsu6Hd@(J{;@yl4Y2V}BC*kO1s7rAB(@8z~yCp39T*Abtg
zeR&DUaUgco7wDGu!#WJSsV%}DHAniJ(L8HJVw=xt{$7L%-iKYlg5yo->G06{2;ezp
zObT+qLmeI%X7eH3#d=WH=+n}7*d~9X&vJ%9+lUm{1b;XSP2LBRr5^+)6ky9Gt{=Sc
z{sC9DVGu6NutWz#9BYIdorQpz&#lo1&B=%1#6C7QLnVPs$QseKpm`?aYHuCL0Yncx
zH*pjm4!UeaeSv0=F$i#wkTQ=C5@kI!I0>SVQb<D)M=)+=8$}c7K@|cvBm@)y<1*H>
zpXc{7^bdKB!B_^IaIRXASl7pc`$$ibJL?sHj@T-%aDj4*%bHi@(%6cF4&XEXMqi$s
zSBzJX2-Xyz9w@<ZV~?);z<ga}M*EDL$)M3!q8?2yq}^+SxdWfT_54Ex0hIX2)q+i6
zJ8oxg$X)!^_B_^4WIvC6eveosFR)Z&#%Rz^uje(f21(sR25KqSG`xhqR}ly9Jy(Fh
zd|aTdm{C;8kXOtxvKgP7Sw>jlArh~Z{Ro)E+T`k^72_<?!x>>ehZo1tTsPvz@ka2s
zh7ZtDJNLmi9<0W_h#vV`34!Mq)xm5m92e!$@)P%C^5)vmj{2khIum(4+XH#3MjJfI
z2i91271m6`V}_y1ye*%HE#Q5`G!gLvTpUz%$W*~~0Aburm;!>0#VEcA+{B04#uyST
zCIx+~NaU$fNJ=vEJ02EhM2RD}kdO0)eV12q5Gi0j#@6|ha7+G2{JM`c4mrabIxHF6
z#K|Mg2CztziI5Z<u7_Mqc4chY?ApTsX`tRm%`|aTUI^RNaO{)Me85c2il{}?a>xQr
z^SV+4#(N^UamDA?Ut}O)vzpawsKKlKuKoZkiYw#KHR2ch6RmSNq$chl2Kq<?Zncky
z5WFde`nh6Dm(%yGzOW0Hwd--jxb-2R#D-S`kBW2A;rMA}kMf}&!0YCFF!%sRJa^!t
z={<}c%n;^9Cskj8U*Jd=40|1-Qt}GP)cmDBAbd)ib(a#AoWWmerP{%~y|dA1s==$%
zpu|M}Es>~NpUWcwr#eT5kbkh>V5>?+U%k#~^p0o<Khaj@%=Du?LBS173HeGrSa{7~
zBX_Jt1EIUyRGf{ZBY`wpp7<Q;;GquSsMrM*j{%4U#AK=PdT@a)&jvr5J*l(A5U{6u
zVJJ3n^NYn1b|mgj6pD*QK;2VR=9&wNJuW;TzkP|IieP)p=9&!V8GK}xDFexkU9H8M
zIBViSKNM3+(sT2iCRAI)tj1_yi~PdEh?RT|wu=AMk6%2#P77IlnKA&(gJN*i$4_;{
z<^h-VLNPG%P@}DON%w%kOfzk5B<qm%ayi%rd{hJ7!6^pkYOS0oTTT!|!K$fiNFVi;
z!2@^652Wd}&LsvJmJtilhOno3GYW#R2^*9Xa06Jd&v{K}Q1MUf<G!qN@3n#huj}b_
z7*#C+o)}=aULI<}t;W;kkM1DOlwW+N?`tqL#AnP{_<PO%{$Aci;Je(Q-IN^D7Wk_9
zjDLoX>bl4TYfIK^3~)R^u-9Tahl%znZ$4v<=$Qn2W40mHD~D;#XIzKpD2yfk9lZ{e
z;ja~ID_{^Q5@RSW2u^}3;*;hzD^3&35>twR-sxJt=1JEBR2dQoyqCWUPUSk?sc{ga
z8n4m5x)+4)F0oTyD_ks%@}wdEKI5YfOmq(GwP}|8Ktbp)xP(DT!zFbK_Q+PmZx|sJ
zm^*12v=ll+okz@J6tI)#iioV!Hu78YCLU@W%8Te#_OlKFhd#CxN>(=VkfAqt;rfz)
z(?Ht+oj4<xs)ay>b2YG4wAyGeFi{;^`x&*wwhK=+*H$xVPva$Q@#I4`n?BF+4&0z?
zrgj)#jKK&W(HwFb_>DLqC#%;oFQ_|^9&xBx$Y;qL>RI%nv6miMIo16fr{qE!?PJf`
zIdE0%8P^gIP^W!g_eK47eYEifr%pqIVaw=pYEQWs`bJ;SGl>t`Td}kZ!sqt^xOt!G
zMV&H!Da%@OcratErIU~b!N<6wx-VM7m<alUt<Hx@7m#xbTpSC4PN6_CNh7YWCdgrj
z8<r0|2N^?nSQw?zLtI8KhYi+2D@~0Vil2p12(JyI5hN3o{^mY|FeC2N5f-lE$~n>+
z9hj6hV=!<_7$JYk-N`1#pFRo(GB5yZPd{cDEcz8bDUPa59Avd=VqU~!#FQa$PDNJ?
zrr}z`wt~-b^PUbr)4i?M&<E;_wbR94wYV~ZjbmMW$>YFE{44j}3%Ns0L*R@RX$F1e
z7WUrw=GsE-WY!TL$RqWD*M>(u<T6&MZ{|kofchUe10HC<a7vs6msum&TPg3@uiC^=
zYmJIu&`!lb)?*qCUW8rIzd>#UrK>K*CiA``c+Jd-JefnZkHW#emJr5uu#x^bPMDm~
zpEEY<cZGl9&cPSGbMGJbDt1WzuvoQOxL#NDm@#RVu~q&u9Vi&!ulklc$|T7jW5C=5
zm$*+b?(#Kn*3Nw%u~5x>>u+MQ8(Oo57zKa`Qh@0@IMu;}2SOB0Nyxb%g?bXaY4QWW
zu$^QC0wSnrDr0Bt%Jr2fDk#rDtMJS#W=z^3(bP_w)*@(kB)=nf#zVhX{vxMbDg~dg
zb+J)UB~SLF@5TiQ-)Y8@PB?Y|MvDU*Flw-C+H>*C8s@Y>Lzr-AiW%fc7&&26Vu=bT
zvQkcnd7Bga#L|xyxNnY6Y34Y<;%5>F>KX?s+y^Dq=R5P6)>7jgma@#!4`|zmUb-O(
z$*pjy>uSG4%oFHzg_;~_ppEjmyXO#}p_9xr8EJdI*bE#XU&)bpV~(0@9Ue27Wz^{=
zvr(!Gw*3J@dktX5wd2Yy1cV=*528bBRpTiw&$CDB9ex@tRa`7>XiW%y9roU0uYIE9
zqVUC<qia}i(Q{*Qg9l*lxqje}wzK!aI?uJJ=@t*v2a9EOyU`5C-Q92Wjb^Rn(a#d#
zD1KDjpeXv<U12|w!?I`$5-~orK9|j}#lBeA!j8y4@2q*{2G~5BB!kv9?6ePo=zh}(
z%U;7!6&t-ahM9Hi9kH6re;g_=<_pC^ha8G~B#i)QE_%2dBF-FmNDZy=flwRkz@S|B
z(RAsr;5JE;oS={*0x0~zb{%%4dy@f<_JIQ|=yiJK&Mx=Z$G`&dLp}%t(F)=S$wZ9Q
z&`s<@4m7-5oH^%#HQb1J%-oM%yUP~S!WWClrp3ahY2nkxrtQ1pYQOF1(*eWgV&MnR
zJcGg{4iT@l2NfEctY0_t^AA1b51sx*n@d85dZpsvvz|ee;3MfyOmm1QF9YgNJou15
zc<Q_p_TU4tju-@sHlJRbVKd+J@(@e+TaAdBd_-PwKQTdU;32<>tIb2?o*2?Pngv}>
z%m>Da?~1d=1eHc{!!YRgp&l*!3-zCYGjKd`Oi?C<l269&7zg-|q?N1qo?(MNu;<a*
zVn4b-fIfS6z#>|&)v9U07oSQAPf#xNCo`00AL67x8lLjIfG2*?PBT|R<~FoWxh1E~
z{HivWul%Fi;1WJ5*fWMXP9IWm1TC6H*cE{>;e|koWfY_5{wx-Y2*?IsYXyf+IJUL>
z3JHB4{dyy_y_g{``R$12KJE<st4*{~Fzm1<d|-t2xs}EzvkZI$9EPzwg;f1lZd8Yi
zHE9zxVB~9HK|aY=G}M;Y)jy?)pbeH$#3~IF2A^RNX%nywTWDA~9C0aT6f4wD=#ADh
z9}pSF9p5biq*zANy8qf;w%EAb4j(@3M~)n^t;2`?_IKQBSMJ)d#kA>L=a+k4dCfKU
zrl+4RO=~Wu7(mSaidic-47-Q+Y`2|PZs|azpRr+;gVe3Wr#cW$imqrFySw?JJ)5@k
z%B{p#bu;XW?eU>LfQetZPJ;?DQXZQZ)zbJ`>%@6I;fE$T7tK+9^JW~VoWn|hy1vgX
zbu*Jo<b%DmtEmp_*sGkPu2381be*y1`0=1KYEHR{<CoTZ#LxI4PwLlPuU`aP=riC7
zDe_^b#6(~tS1cZihwlSlR@Q3F%>j^Nnwi}Qzr$WSB=bX4gA-^s<4rxzo-d*g4x7t$
zQv?7)g>haEdeq1Z=xg?JjnHs%F&8pxl4#Ze_A_x5;=xurYkje{a7_^pH;^J?D=}(L
zIB2rJfmmVCknRf|E0L!3P)r4Hz0OY_K-z$UMFufeUUR@^Zt({8v2h^gBgoWk*rLOk
zt#Bcc^E>4|Q=}MwJ&ZRm(qLl~HCTq07OS!Guqy+qXqW+|?>h8Kte##C9MdOvchN+T
zNt%y?->?O_-ha(5+qStsoQ9sByWgh8<a=*?DE&7YM@-|N`NIIjE*e~2fA^kE+p&L(
zdLZUHpwF43Jf1H(D(0lCs0oOI%$pzDyJ<VFJPbT>-C0_qjMn)itUJ7-=T&XYU<+&5
zX5>`;xab#hvd9Sse(MwUh*63@$WGM>b0of+{@USJd=XxSU9#C?YvveuF6!+23NNy&
z{EavoUli*MZXMUFdvkcU9ISqf2m3NJ=4&`@8ySuM0q7DpS<`t?>gU_oBWp0W8GTrW
z*u)L&%;aX>J<?h1hcKdA*I^c~_>CSnk^Yd>1;vB4fZ?)-d<0Pf5|cI)hh1b%ZCcI^
zWEFh_R4Moo_nIc5zEOH8WW*vrr>L_3cLEqWCE0qP_84q4y<Xx@ZYXRl(2S~Yz^lA*
zUtouM#~rKj_W3F|q^VKtq#ofA)d+fJy!9UVGBk$VVHlYg;y4bV1@AKG5+cqs9irX1
zk<7DRTaKCA#J=Gabp!s(Ugi=%3na@s$FAA!tAidUXYOu$Hx|C*$}M+u-?5nd!0Bf~
z8~ZjEcI`uV+f|qE_Gy}YWBX1!aNX<uInwL}f6I?w<-2xn*p6NM{FQIM+iu&txjH;T
z{jYpqzjK=}rpc#iVbfy!^3HQl*c+}pV0(A(^l4+8?cBZ3Zg|U4%-Q#DEc{iEpZ7Ok
zchGihELPVq_*-6emG9cQ&3EkDXV<;?E_>(RP1|$R>fmZwAIIKty}k7EUB0ogVY@EB
z(%yR46QTbbc5d@&G5Ittd@*e|cehVGc$;5+#a`RKvCTKP@ANCLz0sezFki!32gwJL
zL3-&l1NCcJ33GiD*OQK#GNC#Uv7y%B2Of^cy1owz20GYr)@i($X02K4t{cVF40hvi
zI={BYpY!#MJ>cMb)ORrA5|d~K?qN#$%1Va&$^)MT$QJkW<d8<SVAt&>AT4j|+U`7~
z`O*EE+G(-q&PuqV;@#-9<6w2I%&T4}>tb}H|F7E_0UC=p2mWwQs4>71v)Ud)tfb_=
zA=Fd>vpg%*+&k`xIL7_5R~i_206<&9;97lhpfY1^dgqr@Y_93`q$cfT@ICpG6C_fE
z?2*UF4(%HI=?)7s`LzB5n{}~|feCSiZN|R(&SB4?_d4W5I`AnCh;7WofWDnIjo4v*
zbqBcMMC{k!#B|qL$MjTguEVs~0oEkOB=})Y=yQ3{yRz!=*<(H}7QXk#kGh%pj>Y5$
zPo0l=_H8U|+vYYqaKl^t=&93w_d9N|#bUDkZ$IrL_S>)8<<s`d{cVTt^23L2_x(Gz
z*|ur&J*(dmDi#->yI{BN-SnMT9P($Meb(LG-gNnP-`Kp;-u(7=+OflT_|4ZJv}rNf
zEl*#F{d+eSzW3@qe#Nyn`n&JiGGF?(#pdPqwnKON;X}9i{+%n|H$6l+-v5UEwpeW1
z^>4l1jvl?s-|)&SY%xvthU3qenfr4Wp0juE-L#!AJ!BUyTyTH(W4>o&VSBH--fz2W
z%MZQn7T>$Eu-#YPMcRVA;1XzuG@SY>znL*u0NTWd^I@ab-H<cX32I>Vy$oe2#;7}r
zscM*Y<}?#Yi<mc*E!S4oK=oB>g7%`W0Jf2!somH)@{+xn192!lhx!<6o7QnW7(-oS
z!dJlraS(kaCfVmS#)6ID%_Cmp5UpzeYj_ge+&Bct+tY5TrBzONeRy0Kui#|#RrFET
zrq_tC(9zk4J)T@na105eOEc&Ih4;LU=wyI3dE7SxP6du)?3zXH>3t*N2uLGB(|dsh
zi>b*UMQe`uj{A9lVC*?oiE;H2n-}J&k3%d%J)F(@s}#bg0UzeWxMSWKXR3*FshB&j
zY1i_>g!gK}j_-g&(bV8bv|MbgdNM-<7z{@l8y=?0aBO&UTo2e9*t*!O8^-iKnk9&A
zUEYB!#3{JXX&5=nWp4Lhv)iVP%YEzcVc$A(#13yA_IKa@4m+@S)23<D?tJ=LH#6V4
zSonc6&xD=JHzwcQdsFc2?)HYA+id5-tz|+NwtSi<f7S740<mYGzSS4g!uH(w5apD$
zX?|$WcHg=GNZ5Sk!Gm_g{ZB9NuCDD|On%_l(-F(wZ42MreSPF+7q)ycP4?r*&xbBA
zJawy2)57-L_#p82v~8aje&yRw6Gk`f+3wqSzd7`NXzzC4xqoYA=k-2KlOH<&Y-sIc
zZ-2dCf8%Y!-{2hTuWFv^R=JbXO?$E?{9=8LC~ya8uYJu7`E`0P4<mE405mt=v#<B|
z`LKe^#%!b_FmTi2yM(3jh4Di?=)bIyecb__;u4z?SA#kAP4eNc`kBRXWRGVGLZF#<
z<T7J{?O-$eR=CQYjh5HwZtZ>MAa#IHD30|ANnASY8+#3r$@~K;;op4lEp`ZhSDWU(
z{G(e9S~J2z>OrG>=9)w;Dma9o&|p0hsHCu}+4kB)>F|aA!3TZUoH~(@SmFnZJ@aA`
zhj{YqMFbf!MaYnEUdjQU{_?N^*Z2@H<68vOU|cjYicxZ<wRqrQ9+(%_W8q*OA9Zid
z!y3CZz%<wA#}WEwJr%nslMzRwX&by^b6Z7JyN~8CxemPy$9Q<HjdJa^2CEd}>N;SD
zc8*=M%NC2trfFe|X|icC`Lx*PyY^gZx8C`<58QW53qJ_|HSE4^lkdCbG;(FP@7eA<
z4sN-b`N!`+VAEn@7gnK+F!pX+_@0{{8Yz3;S$=u<p6#|{|CV9Q%hv__*n`LX?YG?E
z(=^$E`#&B!*t;?LzSp0QJU@QypiPT~Jtvs$*;v?~n~uk&3m?0|7t>@%K7QUVT)5yD
zE?n?upMBOJy5(}8w(X96%fsi^(%XeIwqsiO=H*x0t+yYsC!TrE@`TlK%?A{EwY;g`
zhd6^~=66OH>__XWKX5`&jh*agA@wkr6^C^#xp~BGo<)cL$E->lxu42w6%Pul=zgVl
z>2+DOC02_=1XZro5rrkaOK@IysK@VRUFqeFLz$l#1909R3K7TH2-?l-#W$S`0E6TP
z`Gmuu#Fc$?P@=e@+35F<Ii+1IfoRUUeq3nJCnfi0U8<n)T5=^Gmzd!HU@|4102t6I
z0!H5kaW;ui1EB;})L~zecU>G$cD1P$@F};k5}QXyRDgha8L#ba%pD|+B!v46Eda(Q
z{>D9+rbq&cDKWtIp~5IJqUo}3K4%qcmp{igI-JuQ@zG$AIe;EvVXD>O;ET;1-r-j~
z4bGGY>%y@C@PU=Ep0Q!#QyNC@je8m&mO@)Upmf9=V;t&{>lt)tB^xNk?aqO)f7W{7
zb?lnmwy}MG;s<+C*~^38`Do_*woShOt|y4M+xKqw9S4t?yZgs(yTTXSc8OQFt2Z}n
z^~a}~DqwVI&!+FV@<=f9@%!Il`!C<)8`Hvf?A>QqUH2;6zL@Ob(Wipkz1tSP|IVj_
zv&Y|gg)O%2DjZ$4?}}Kk001BWNkl<ZePj9W2d)6&Kpwv^edhQ<TTF}b@8H>DG5KP#
zuxYXIX_`VehxTmRj{S$j-uZ{_@M{n3^KH{)i)r#bFFoM59X$`2XTHfjYQE}w&2UEq
z>7atOuYF`((;=FFr77MEU95?*tF56&%z3ufa#I%@Y1U*7o&aWtdY%+GC!7CX`g$4c
z$`_Up){JiFdZ&I%x~~|8-&QM(l^#44`83-3o8bUtQGRn37{-D$AZx8~f$_=wmD$+7
zB1YyQzGIx>n(T2dvLCNeY+wXq)mQET420_mg_9^}_!2oMFC;}^bH&txI6Q+{V;fEm
zZBQQZasi2NveN^FIT7Kt$&i8ry9}ChSIk5d(X3M41a94b5&P%?h|V|x2Fh#19$sPK
z3XahDBsa#2v4glmP_sP5FldU9W65}j%}#IH1P55g`@z0D`9b_+U){Ube{f+MMzbCp
z+Sr?1YHg6;av$(%d?DVmd^p>?*l!ImE+3kKJ;$!yWgFY~*Su-Z_>VEpM`D+6EPVf6
zkJI|w_iXo_2e!=J?dh%kHZ2zRtmt^}w#oP0c$|t2u^)eQ>uzqJ*z#@D<oj=Ui$D0(
zvw_*(jmZuidpb7l**5u=Tlq)1OW%{XztMv~Ha>s)TAQYYJ=0?spYPba={uJPJvc+S
z`Gxa#^scx0Rab2HX=AsY@9@*Xmv)!tz##J!i-~80eepS@34XYq8h%ZK$pI&Qt*Ncj
zi?K%3-tdRHbulGg<B%h3vJ)~!5x2t^-aA)QfRj_~7z^VlcA1xPKi%t(;TK9#^He+v
zADC~ABe&H2$7RKX&KtCDTu(l_UR$p}pEaUm(EE6Y;Md~<fDaCaeT*f4AvGUIgh0%b
z_7I0vIL|L%ck?L;uQ!n_HG&6$yq!sM5{g}ti)7ZdGHU09IS8_vd?^Z6W$sPBU|53S
zA~(iH1zrRn=^<Hof4Kn<H=_{*mSAMWA^4_$!5pz(^8{b_MpGCN!CuL);bW~I^;Moa
zXX5W(IJANf)mWEn`7SzX*7Pq6c%;Cb)-?D?qkw@rzRQpq@(ul|9xHa>u;+PjJ+K>I
z=Xiz5mU>NnjQyUq81#%y_g}j^4ti@2jlOf5{NU+l;@aig7QX+kCn(R`mVb0>Ztl;1
z;tpRdCcFNj^DC^(FFgG=UrdwlUH<WDl05P=^E>uz_Z?Rrb~p29PG4oywD89<?+d4G
z+d}{7c41c@`FMnT;rt<=rpc~<DF2<p3s1kz7mNH4L6!?2^u=QG>$aYz{O`E-O26Xj
zJ7V4Pw~Sln?)LOu*ZAH&`|LT;%7u^LWQ%F?yUt&5(k}3ZIvU@ZSHM2?OBz$1$Xa6&
z%QaF>YHIYjV!y4O%tiZb<d$L0+J#f>ObxIm(oa)U<(kgA#5<wP_mK?E9E=O*SUsc!
zKr(|lzV5oqb<4~12OGr@c+~r4T7wo!j)YHafrGC1Ip7+`i1L~{7~;Oc31Aw&2{WDh
zHjf$UT;oTLt>vt8P8cC}Vjp`kzV!d=77Wb;^?bm@b)4LILw6`7{+v&3bckD7f_t6=
zXMW($ywKLXuv{_0K}$jzjjV5I@Pmchion>1HmnwN<Fz!nu{fXzjecN`p6l0O3e9`v
zX7HzLXJQ`^58f%)EQ0dnFE|G75lGzkTrOIK95g=28~ntTs`YfY;%ppzB(CT8Dmf2K
zt;^9I?ISjTZ7eEWGX2gbWcVS!T%&AnTu1xIuC4#oE%G}O+Ob&V|GbL3UA}E$SFZjY
zzVW(k&!+D@xE0rKxpIeZY+hk+yJO3b-F>?q+_lqpZ<~By{FkpJ7<YHObI+!4?!M7a
zKXJw`oPW1Xi^=!jc&pui`m`Op>vlV^chj~_3%mTLyZo6|jC(dF-+%Ziz}x(m{X2Zy
z_AC7DhqmngyKlFHyLR~QZ41Brrq%zn%gW#F*X*`w+UYmH^>#aU>@L6ghO2FwCco+E
z`4HD#dpCXi?wjoN<EQP}^M`!fVquqGbCVxAcFgX&?QQ<bE4JIlj)SEqG2fY^K?L!j
z*l3tvTx%c*M-8Zs7+x*1<Qe;3Q?IE>&?DPNvv^)u8wcez?C3CuVA`Ro7}DUkH8H0_
zgSyJq7+cuG+FPLlb;9+DxgqPYKjP2WnI1gMWXX)rF>4F8ZGZE4c$|;T(RasFria&7
z-&Hd>h=gm(PjxV-59K}$u^q!eDVB@cL<|d-;6o2`{lTuTolw{1a7Ef3x+KE_qKvwl
zNV%pW!-cpfKNx;D644N0B-IJbn}GzmHKYy_M?)~aO9F+%0>!O3h0PWhjH3}q?89P>
z56RCeCmTp`bEf=_TyZ{lV8r+dX%#dUAYd)8yq>sOnt^<q!BmPYjb^j8yq2-%i&>oK
zA5M1=Zx>5ZvDA}E^BnOaZVi^hPPtdHRi4-v;%H77;#%Y;QKh{jhR~PbXBbUvHa~XF
zF5lRG<=Urx_vL@-dhqo50BPUGL<c>y@$cwuLH_6M&96LQJGXDMU3*_@w;X=T4{qOP
zSG?tvfRs2se#Z^IXXl1*+rHb(-H*ThCfmDvr)_L(`sG&~@Y{|)<#%3prEhL*vulqp
z51xCrE&R&EPYd?v?Uw5f+Rn{wwrkHz{g%T|`+@Bn_R?F=5Vr2-x8Ho7?c2N4Ha0eV
z_n!TB%c0Xzr|xc#AG+T6?AWkvo4d^2?aVuGv6t@IWt$rd-`u{_UwYN6?EYsiuns{B
z%u~uh4`}0u^o1~{+H%peEH8tt?Z2ZmN6m#RxR=I5uxJzCDGt!xFb?XC{%GhI`eheq
zsa4f$8NN>6i!HX3_!v2aTCm&$Sp!F<H!@!Nh1akS@-rao$sqR35_|WO^}|QlDKX=W
znTr{(B{3l-(RXmJJV^e?Cg00=3dS6z;4X)=jJse)wFci}R;cE9R&fqJZp;4|0|^KV
zmij6aQb8hc2LA(#+!Ke5*a-<b5AK|WRU`-yt*K&{fkpZyVrj2I3^O+Qw;Fih8Zg1k
z)<ePSM-dO?3{9URF0nwxw9N&Dmcb#1r7$8!5IahPb72lh0;v6BAF$JFg*@;Jx#XaL
z=ptTgioVq?U^7Ccgi*1X(+t*XA2q}}F<_wQ7UQ7@42~(Tq|c;wt#;fHI;nyFIyGYS
zgHf!}YBTtwCycsb3`j?HYxpy_XFuj|ee11u`q_xV-9K)di^*Pj=6n+mu4}I+p7rwx
zcp27(kNK^)zQxZxhwGOAQ!3Y;`ULR7_R5QgLeXDd8}QH9W(QbahIh;l@C@szmb8_Z
z#YB@M)fUDh(S!e(6K#xQdj`|!p{OhA`LqUUhdsF$L#^7L;S})HYq<{($oO#0oQO}d
zQ*J>1OwLT4Gg>V5+Qu<@?Yfy9b20B{oDj3a_xb{y(!rWM=I^HuUentga4;v>yD<Lc
zCEyUQtG=9QQeCGl;nI|wz|Pap0C@_bISP(+IzukCpB!9T;F#V(M93%GISjKG0kj0F
zi)chJkr}QJcm&8{!O$<q3MgvagrVjJLe{*QIAc3?5Si|Wdt)E08TXnTCEgl?G<MES
z4tK<#Xh1cSKyZvG+(LE1)YD##BM;dU2j~eevcen=7bsVp6^Zj)Lz1U1)HUEiF?w!D
z5oUc>j$&8U1Z#zKf%q4mz}AcgNezWh%9nFx6Hc)<v0UtaUFYr>?8?n;w)>i!?f!=z
zw<pdVw_9Gh$ES^beqOYH(N}0-R_o4rUa<Y!xB0GXUhhXAdfXpB^^o6k-O~3nC4R%b
zu2{vD-Y0m68jZt2!$r|T)?(GKLGvu}P~2$MJqLNqVQ7VPs95Nb4WF}zjg?Q6b<yi-
z(Du18kJu+kUe8N2>+bVm6RV&ermVy>mLjFB#n8-L99ggV6YMm-%yoa_LUFjR1^tq~
zQP-+*ZqS;8&Dn1;!|!|@w7L`zd`D!kwh$wY1N0Sf8QFn-xwmo@zPi~i{$??S93f_R
z{&)1oi9`hu5sVy+O%WIsRHs{MssI{sIPGiKlw<)|Dk#WHKuaLt9^~F0SVqJ#J~79&
zLUg$XK1ZS;wIb~Co!^m(I7mhO{GRy&dg6ncbshGBS3S_<9*I%+hv|-wjwj)h?69ac
zZ&*Y67E$t(C&tk0rjHTpMhbm?9|WM?f|Y}M<h+J1b70K*!JNF{iFHC|X6gp~sFtwi
z&>J@2F|;W4_<|rnjdZ>M?`NOB)34jV&$e%D*yfJie#OC8`LU;-4Le;;U|et|@0)0d
zxJ;U!d-^WBZvQ^t+}QBVoxALcgRk<VPhC))Wj|^q)5Zge9N-LNE1VA0N`0~xgOiya
zn)g>)i@imQ<`H70zdZ0bUYFS-+Cq)b8~|et<yK<r4s2>S0<PGS<`9R7GI@)b=WWgK
z2z<qb<ln(uBGB>?dsQbU*Uiv5^}2A?<8S;%%1s}Q1}Wx-cTk_9=`KdWPpfF|Fa-uB
z)`17cG%(;mxCd2@^URy6mGTgejFFZUx7Ga-mT=VB$p69QR@CVLl)_@op_zu!5p?kg
zuC<fEhuwZyCWH;yncR$@`YO448uE-|F6N3~jmyYn=NB>8Cv6#iJoHddMfmJ@90KQ>
z;@U$(Q@|EzWj^iUc+I`EA+gWq2>bB5<wC?MbpZED&Y;+O%{a)0gS1I_W9;;s1;h-B
zbY8Czv-p|CoR{}cw}L~&44*N^+(Y;0U!t{(=Gm;L_T6YHW6p1-b{bs|5f!jlkaQ48
zEW={*BYbs!D`u2~1F(n-<IlN@umQoepH`%YbcZ#@c5qcSKXAYl@j;`10295n18`(4
z17B^$ma3)f+nIc<#d;f-Db&>^<sq~oKA|qHGsO2YK2EIGf@hrledvquZV{5i-s&`n
zqmRZ*sOP65=ecYA)S6*?AZ*5<92gZNtNG4iHhUfSBe&jiP_!tuSm(FoMmmDNn+uy>
z!Txx*rvnTFqFw&S7+v6Vhk=g7kqiPs$wA^WuL^kdWDSC%Q*|K+MC*7!M4t%=KP~rw
zwxWdmD`wRW4v;u}w&Fo@R5V?D5qJ@?;XM?b;%#w}I7=M+J(L$?5q>*6vN!$O&`O*k
zD1XGdFW?zHqHdfAR^F=^GJYUf_lx)zeK!0nS9wV|owEblruYYbf~(?~Hfnx#=(f00
z4rIsCR>vXg8-{ql2jxgQ$uxw^u~zB_EEOGVKFmYL#SePOoeOsJm~k$u2Z-Gen=oL8
z=A@qz_NyPYR#IO8F6#kef@2G5FlyDwN5r47pl$(Y&m$ZULn96IXS5$4VjoEh@J?D1
zNX-+qQHCe*hW*3o^Lkw|0w%X-H3Ko=;VZ4wwV2!B%2@lL)8#xGmq)I`f8~H`V>bV6
z_8C*D!Ey#*%s5$|Z=oQppVTMghq!1jb<~D%t(xdHBP<)OX=A5+rLm>T5<*^Dd^lRm
zcu*~7`bW3mL&d}gKe`WK6|gn2R?sa-n207hBAjpFV?h9kPn(G&#RW!YY)2yw>nyma
zGj0oHo`WrMa}LmKOK!kL5)FPxTq_J&tc6n$7k-DmXfynvUT7cgueg_o1Ii6-%xTZ?
zXV|j*TQQr_hZghm*iSx7bAh3i1I)y?)`jX#zAHXM+s)qfcq(3^7szSu$yj-#hR*Ty
zIppocV4bgv#ICpmK3oH-*WM2KaNJ4yYjV?p+VLyCczMsE;@#zKmd2}n<{vdd55sd>
z0O{~y7juSot+s$?eW2+5%6Ij-cCEYm=rHW|Dkk}|sNZovdjn#T2J@}cWMUV6qTH*v
zjF^kxVJqktpTiD!-|X+P$?!ccgTV4O%mL0#`9<;pd(I7%&|nJqgchZCBeM<{@@?r0
zv?BCLh6$48MqVo#rCy)h^z#qa#dk}fpt+_mu~%!TYTwO#0_p`QrlSMX05}2|#i4?w
z%m@B6c8AW2P^`oj-vBr!1&gZzdkA~1a}%ExP#T7f(9nh?n3qsiBOk>hiYVep^J|*n
z?2B>pd|!c0#YZc!L&%UH*B}<eZElb&G_qcYTnx6-6xy76j!}ZcTn0>ouIP_^OB|R3
zjxxO;5UM1qhO)#|y91x3WW-AO(xBqJY3K?^L)&mdfE=ovxrS+wRDMuHY8$ZzyJa0-
zW9-IXx^AG@@*<pRj>Wg5@0s|}Mz)FUkH`&>mmD^H&iaZhQj>M~0iLmiwSsZu!yT<r
zPNWB+&Zurnp9hUZOyeLmJcG^|bkfnfmufT3HtSnF8V#h}*87VZ9(BR97L51vlwv}?
z)c6g)1+FP8j(2!(IN^!_ZbQ3sc{@7dIS%;Yfrjyvbs@h7^DYL$2B;QY6OM&bx>g+P
zdg6m}9|o}hq81t(8AFMUdo|efv`sjQAN+Up$eGbl0f*_X3Cx`A)Iw<O7DDU2nlv<<
z=XC(>ft&T4`IbX4{2aXo@c>d`Z=bW^vnF1&p^abTZLrIj+QFHk$?nVz%7Hf^Jr?FY
z!~<d(>!D%8C5m&zia56U@^A-3=|3utvGuq&i{BcI`$p#jrwl=OMKy80h$r5cHP&5U
zDX`*%cC;bng4U+XXVov|O7$425;RrA21TItOL0>Gmec@8mNwDO+zYiu{<W_GZ+aiI
z#cLP?VTLT!Set8>cUD*%;2Q6PSJth=VTm-@^xrys8qWH`m;v&EafS!7A@;DVAg1g5
zW~#3CdA5W8#XjM$*H^NJongD}Nzh**IxjwB31h`03H3VSsF(>xVYk6f{aEOUbh$c=
z;z2@n4)Hf<0nu}=>oo6pjch?b<7(q%%^;}NJXT#~5UcMvgPJ@5zr-pri~C-&%l(W?
ztVO;7Q{-jDH#28|cZ?0SP~)n9bW0MYp!t)z2BOJkk$`|2apIv%eXhA*h%6$G`#MMf
zQ1yv~YU4#>njvY}>3jPHvuwa1!u38`<l{OGP7wr)t`YPI*fPx77jVdF<zXY5MPrKw
z6Cs1Kh>(Q`jUykQIH$zRM8$ZE_D0O}Sn6x!qdcZRY*?TAZ=dpe@43fry75N)#{cOX
z{c|t7%)bBozu#}a?RNj<CqG&3aQB}(3{;L9y?2AZUC)c?D?KP!TtpP;P>~qT=+2}$
zH`sEl0c^+?FYA-8HbssdVn%(E9wqj1uZ>svDV$`D&aD#%h|?Oolvn=b8l)a0{z0&;
zT_9&|eoYP~#!+h#9cWDXft4Tq=tu2MZ+eqmb=B3jeRI2i^EZ8y-+c4U_UNOJhJ8b(
zS`AUop8LSB>@`@o46)OO=wim!h%s@ge74vkGlLIUA3UYMrS%!TP>)Y)2`e}T8A>;4
zg`Ao^0;^(IebHVIK2+1nCE^kJX3pH_Ff=JYlRP0l<)YdI9g$Wb4#A2w2obFA>3XaU
znQ_ogSd)TNyiZ{$uSI6#L_10d6rGfZS~4(wVn(FGMFUnOh`|T}7<}D}z+1T&PcN3a
za8#XWfozN_6gIxHu;r1G)J8&<`-wN&TJ6fL0S756<NNJlD>0@55qu%<9+w(x4hF<^
zT|-oRGk$qb%hPy^G~hZMc7Ss#mKsN(8*#6&iZIO-JDiK=?*6Gyeae3S_kQ1B_qu;!
zFTLUln--HVriFjySADJhzz_YH{e$cNiS2*c0ej(#UTBMHVc+^K-{Nn4;~V|)$Dcq9
zJUKIs86ZhLSj3w7Q{!OXh@Zqt^wDa%a+E=ZmDK!*6Kvs=bK$tH6}VRQBu#&Cq&})o
z?mHmivMw>k95P$cCu)R-7~%q-@qWH@Ok5ukb2k2Rk8&q&1YfKb!8X(DIK%txIth$$
zNn0O%@Im|4UwxCk;uWv(&%Nw2o2JQM{NmmAitqUW`;qJZsr@hC_rtz(#~0gTv9OoC
z<jefEKmA%ea%2m5ZR1u#3A2cC%m&0J&=G#dx;Y#uN8;BthIAvkwcKF54_>5`R^O>k
z)n3m*UQ@aTX72QIxJMjdzx3!y(NG(|?M$iqDjasWBz6|>$Tiqu|D0FF$C8uCq^@i8
z8`nq(922&Ewj~<JyvBa)|HICNo7v#(cYd0$!W(eLd*3h!kA8TAMaHxJ+zG{X&D@ht
zVm<%8T#G`Kup1w+*{HxEzZlK|$-r@iD%%C@Q*}Ayn47d?Ab^!f1|!_G*tTLBeh`b~
zTPlFGfj{S;JYhBX&^WlM<PgSt5rQZ$)&QWaRr4eReFFB_nBDx7pZp8|{X6fp*S_|r
z?Hm5iH~6KOTxyqG^4a#czH*;m^Y{Ouz2S{-_20Ss0lRnW5xZyWxZiX5VZUeVVgLR2
zK4`!2%eVS>U3IO0;TP@n#bV)m_U!Q+Z@SU%yYGX8{54H6W5ov<#wkTYgUt0i*NQbf
zg;oPMQitOj;uiL(pDwr1EfU`htoG0`^t_7yB3etX$wr8s0xUKlwEjUiu}7Q>PoaCL
zBe|y-6Y3O~#0$e$cnDv}g$@(KmAK=Yq4n8ZWZm-0XFl^8|Hy|wV!!e$zvAEXJ>PAc
zo7;UcE$oY5{6E;i@A_W9@n62dZ+q8!?cS|N?A{{}+dW&4*xiR8_Ir*zY`^}FJM2gQ
z*MH`FzTzu=F)jS_KkxJG@Bi=*+i(8XZ`xmc@-H%1;3sece9atV&K*S$^xg5jVua2}
z!=~$J9yIg7!3BW($!4G`zR({Y2spQ<E)uXlPKrlk;~KcQud;4{m>;3HM|7#HKm-CR
zc#ips@hWc}7im}eSI~m%E5@2%+Q?Ls)dsT>H{l8RXv`Uxo3H+N^tf46Cn1v2Fk`<t
zB{Q07A8;h5Pb&0z24oWEx_HM`K%AFVKTc~I*pYvHhWv!Q$hQ{}D8lefIGGcj2oCL_
zPdvCV7b-9=$i%@gBZI2J*k&=LLteq46J&}t2747O`GvfF1Y8fnh<VlY82;U!z!C>D
zVhy?e#V7y5-}9dL_-lXqwf1#i|Mhn1C71Z6mt5+5zTzwG@BPq^`Y-;{TkUu5{?PJZ
zclfy9yY;Z$v-Pmuy>;BTK6u8qK6uKvj-Iji-FMROIr50zefYTFbL0_w^R54n|KN}O
zBj5FsFZ0E;urK&)U*tdfV?So^`t5i5r~ccgn4_AX6W0{GV2Hz?IUsBdR#Ys({)k0l
zW6BymKuz=qjB)4_&32kXAKEv}iXYaPCHJF*P?IHo%x{DUdI6k`!U4^7{BRtlo($}n
z+{-RN1yFEC9P;}Nwt<7KwHE^k%MUkw<}>!;k9^qP_{LwcSG?l8{Ibg~^TjmT&cFUQ
z>^ok5wf)rVe!+g@Kfc%FA!zj=bnn(9_6PT!^sS?3Z0m!ked~j#{qDod>-TOwY`6dR
zmc9Bl|I)th?|id=)@Of~fA(j6w*TGl_zwTIfAeqb+_@*SRun7FgLt3^9Y7Q|6dfcM
zR@DL36Wj%5sYR-pbqA&9UOmLD{u%R(woqX}^u1luP4-XG0|-1_0CJ$;b-6+O*bi_f
zpyrY%`YU{4s?4P5xIIvzZpH`0{P5*tw#a>eH#uqZ9T*F?^h=D{^AN8cJ#*4vGM*G(
zB${1?46Y$>1&AbshmU9sL=Nm3!E*9=4KbwTgA)Z5T`&=xTVxQi<wevomI&wH_;vbD
z_?37mAMuSAIsZz0!s_Uf?KT6xh$rK*^f)*k0v~_Rh%p2!@hivl3f2-RLYaKbG$FB9
zud7ZFujTze|MO4U@BZ%Z`cM7TPx;q;&DYwcmtNwRUV4dt`TzL0?E9{LrT_fRzh;N-
zJZAT9Jz|INJLMnv&>27ak;nYO6HnNKC;r4wKK7KIIQyiZICIWVoqftqu0EeU`=p;d
z`;?u0?3_J#@=yFDk3Q~4Kl(@h{$pqCws+lYullDyX<vQ$*W0C+UTPcLHtgl!`Eq~j
zt+(2L{xAPoo|==_CT|paJ18nng+tv_>LzgW!RH8V)Dku1ya4?rl!Z;R&k0OP9jxKM
z9*&S_KJe6rJdax*31m%I=Z$TS3-&nSQu!sDgyn4Pu_RGLJc~ZsyaX$>VQ&5zGkf4e
z57;l={7e4w?|ivmcG>6Jv{={|e&J60w(s~J|L3p$SN<FCyxZ>CI_~fL;0gc0u`_n;
z!9TJG9{gkf=%bI@iPKNoi8G@%p0X2X&iRQmPx^_oPx^_o=lsN(bN=w@KeY!RecV3u
z;D53|eBi9z`M!_X>wflTf7!Qxr@!#B%X~2{?5n=|tL$g~kDu`e9(aIqYkDs8(%@nM
zQKW99YVFX>lj$0LVI9zX%<8bJv(j%{{)!IVkXgK!n(8_4`VL{lqbzc;T!R?onWNEI
zm=M&&W{op|t~ir5_Dx>k&^8W%d?vu0`5d6Wn^+tl47HZp+5#J6Yw;u3CVE<F#CWk+
z{uU1muRarGb2hSr)3xrzkG*RgBrft)kul~Pyw`m)_hEO~8GNvqbsrvHy3=}d%`x5)
zBQ}}2ryeW{`t5^=0PH!61{O>FFjzAxV>}R}5?jOB$dAs4gjvhY44;Z;<f3+!e`<v7
z14bsf%+UY*lb^KT`JH$BYySCb?DBnI>z7_~i7gfj|FXZi*S_}${(=4M>;JXA>v!+-
z_uY5GKXCt9f8fDC_D9bAshvD~&Q6_u%1%9Y&Q6>?=O@pc^HYzVTV8+cspYk^%X`bu
zPx{Hn#=$QK+sW0Qhfn>9fB2z~*?aCe>OXno&-pig)60Bg;{`rV3;UX{{W||wKlgKf
z{P;snjY(}s{+{&%h=m3QW2H7&TZuV5e;}WMd959OzyQ8N+b;eM95ZjFhhgHRleCF@
zR3BEhkL&5)biF~`w1jI6pUkuWt@`i`-YiXd4=x!i@n7u95Fspp<fi__Hdy?OnH@cL
z)PMPxf7uQkIN&dQ;friqO#aut;EU{k{<fF<4L|vR`aAyL-?R6<|Af8&*ctoKM;`N!
zo_O3&Mr;yfJpce807*naR6VS;e|Gsmv^?A`ABIkxdD2gwIp=uTJN4MPsF9Orp7fKe
zT03#(&+H?|ANThkJK;C~>aW{(fA0^i{*{QyckcXR`^W$2AKUN!-h1r7Klk6Aw551~
zRw#E=;LsLnkNczcz_`YIdmP_v)M1GWXhVM29GX;98G7Ww{ZeyY^SVfHj+`Mjd6C9+
zU&h0JsD?Cd!isr|1;h;p7fT!>Z|f1MA_~I@_rmeB;pBP0C}+)$`34^oZ(zdlG99WU
z$kLo<8w3p9nRP~CWE>P^`Is^F1-Bxt6(zdw!5sS$p1A{<AX9N^2sZWIuM=ESvw*<5
z;#6)kLg5iH=3xw&d5Rb|&kNMhPk1oGlCJByftqWvAJfJpPOzOHK~n6*o_Xfa{m>nU
z{DvE@x3Au}&n~(2Qd>-ued$ZS+^_onAGDwO`CI&5zk8qk!O>Ip!4IGDj~;*AA36PJ
zt0A-;KFh(gJg~)3I&;oXt_Ib~vrpNn$DXp2XV0yETX8N1-Ev^9hE@Ew@0^X__MJF;
z&L2JVXZGQTK4$kEKJGvJi*NP=FaKWOzWwuTu~_(v|Hha2PyBB`VfWm7ul?nxKaE&9
zbHKVG%^Sdi4J_8_H6})MFP|HpT8#~zv1ME@pWSnVX?)qV$Ka&;8Pjz}J1CK=XTi`t
ze6_VVfQ66U;jiY}-LDVC<Ls!l&>T8N`;tc&I~)R+dp`45f91!H9`l>u@CG|@;Gn(e
zMK7|&w6M?n{4cQmFFR<je$CI=zx@xt<L~>xqjui|kJ*Qh|FIoE{lw~FW_eIMb#`@_
zTYX>F%kt2+{LS5ye(JGR%{;bzP&&1$lQ`%-c5eCGzE%A#?d5^+!AG93Km5>R_G|z4
zo&JMA@+y1D-~4i)rpaFLg3qz5ue#d*{lEM7{$Kyge@%P`=ZYa{AR$IPbFc72m^K<p
zmO%@As&n`Z#}K1n%reqEET!6j)iwHvy3jRb5B1O21slXQVi)aJ9nRHPUkmGAROhJW
zF&DHp!X;o@Ig7P`2h2suFHpx(hx>E8^ozMX5(7BrVEvA`CSWAUh)xfOvUrcg;T^Py
zb~5l0NKXnT3eg#OZNLQpl%$SStU?QH9Ii43NLE75z|RjfIh5!+5(Z#7gcr^e*OF6%
z35ggrN9!}MZirA`tc~n{>Pztl{MPWExg%Cg^18zv<x@3CdFwD7pU;2dydOGr$Zxp*
z2K(Dz`PDux7QUD!+r8_{?7OeJ#{T!8`&Ivs?|#3(?*otcA3pGyee~fc?9nrSw)~C5
z>bDEyHww!^b1wc!>BO1kZzN7V_SEw5Hipvbk8PK~y~yv&-{_rN{#Ii3n~l|)7+T{n
zd1`g=JAUd3zyHDiWbZw4+<*07zr()on(O?pzxYdRv6%dYFMN@I-}imL|Hg0p2m8b)
z&J&JU*(A3{4_&iDJ<RXRwL&Yc4{38TqF>||KeE=F!%gLWG?}3<Pz$7!3D70a^uZRy
z2vuiY?hp^H%-s5ZLl0b$rbn-u%bjtr!##5A_m=$s^3#9mAH45A|HWVY1^@PM`@8m{
z7rn@*#bleCpKsr?|2ym_Zg`!)_3elJo~?)N$k9{&p^yBLKXl?x{M72V)hAba9yM`d
zJk*Rs+Szj}jgNX+{#N|t*`@Z!L(+*et3x8%eJuY~h!ba*hrng6EPvZ~;_Q?D=$SvW
z2Oj!kfB*ew?En6)d+b#|@ml}tec#}hUUI2ldda1J#T75L*T4Ste)81GhBxA+dk8LA
zav$#SUvt1wp1t^!Go;hdPwk|#N*^3G+T?}n#xH2}U{ro_g8|V2gmTpH{cEgTAvw+v
zGjj`Y=7iD~<c9gW+yfjq5RAFO==tPS>T#tC>Iq~!A-m`-g`6Z`{*N)tdqX6|;w*!c
zfxtFaBF(#WAb@O~{k1PIV0VWu5ig_W(CC}k1E^sOeX(7-USoGGQBZvfX80=N86v=Z
z(?-+Wo4hlRIc}505oKLR^)WXTL~LjaFI%hy%wshk64h2l;PkUEGJVQ5H$Q*=yx(!h
z9ro&1zuLdzZ!iCAy~Q;7i@#*Iz2dw7p1tm8e#w6Gj>CS>kw@$gKJci2@PV`b(8(v3
zgJb;0ZTzO~vGGSt=i;|`C&zCp#v$#@>NgB$&*dLOjX%oG-{i$_@bZs!SHB%RGltl?
z_~YP{XW=&)XP%59di>;{+I<f^X77FfBmV1e`)$AOAHLd_|3%_tmt1m*f73U8i@ouU
zZ}c-~&jw-2aX#b?XhFTHm7*=;8fzVOF1lll@LuK@_thGiwM(KCZI3dVso6Bk@zaoX
z%3tb~4hEcSmse9ys%hg}`BWS{KyOA1jeV~1966Yqx%ppx`qTD-4}8G?ub=;U|MqYH
zHh;kjUf|PW^2;vUZr}K=FSCF0&u;R!{JY=wyN*0!?>(}77<%BrKlVpY|7req4gPh6
z@yD+x$8V~~Z?spnaq_XJmKq<r&j+dH0dds8V^8HD)yBW#0Cg9i#{<{uw|*m*Gw1yH
zsXy@#ee{p~5B~5`|E>3Yz<=^z{Jekjw|={A`<&15#k8<5eaV;lYhLpjJAC-Ceflr|
zlDKU(Hfp5Tl<1iBRkSHnXr0ffS?uwK_WwW1-aS0e>bet^$@HX?X>PWe_RPbz1$(CT
z<rKHjo}S5cdODrcK5d#n%f$whk%8EdqzNVoB#@?DEXfHWfuy<FY9i@Vv1Bj=NxlHK
z0ZG_K5|X}8!ZMb*1T%B~n@n@gJae9tway>!UTgi<+WQq8lF$0S_uYH#b@{Em*S>=f
z`;W&C(gaxnPlfg_(n~M2oe%ggVlm2ROjuaq{1<Ue9?h(+NTy$Qq?YhIV#x1B6WXP=
z)X|1AV$fwiiZW%kwKtj+=n9WZ1b)avI50V8GKFRpod3sH8~|NZGyy$(OUkgMc9E&+
zK2lVWfNshFasj1NHbNUJ;gF`FBa{Uxl>tynYh^4ETt}%h1D14aY@_2il7Nw@GkI@%
zuK{BAk-*&tr><c8E$-|p4&SqJd7L)9qe$6GLpTStJaGR5yn5BY=4H#4aa&s(|JuJg
zpZ@gEucFU?>3(hu9O6SqXX(I^X@2_oCOv=bBu};8a3cfr3vcV1ySW7$iO^|UXi#u-
zMK#^@Hp#TC{Fb#y^E!PiYm;OoLZ+eK_Urv*dU(MaISo2xMDXNW{L;&(`RMpOA38cq
z|M=JuzV$PA@rDh*Pi@PV@v>!Ye8Ghm@aONigI<00v=3Mya42KL`y<-L*#<HMPc!RN
zIZXjOTJNI2c)9_jfSRn4tCKIs8_<h2pmj<@-Quz70<rjxQ4alH=VK-glE{6bB%iZ!
z@JZjORdPIc^eBJi-+hGN`#-&x+LkS&_r34^bouXpgl^e-JAG%@03AG1?S?&gWQGrq
zzQU6;uW6uW8;!tkV02nWsIdc6rL9J{b?x2B6x^MH;7)ugjRMZY2;ZC=B}^MOWW8%D
z-`4cKZ9cYemZw^8@C(OI^3z9W`QVXR`s$8{=}-QTkI}EZ{{y^iSsVSzue_gcxPCJY
z4G)2y3;=$V$z!K3I4X_eXwU|J<~l#}mhgMt(anDQ`Y;4+1q{WHU=ICHu#K$`&@TBs
z2qFYEPpN~5_;!JCMpv4ZNYBfZ*#r2tI>x>AI@EITon<teTDTeY3VO-pbutG#DK&4e
zLi~U_sFGNq2PQzHK{ccV;&(G#Dwlm8-^+A>uVGNs<Q0+$9+aIaKMRm7()U4K%$oze
zUb#`pk#Gcsr|tBD0FTvgA-}T1!V<zt{`Go5x{gOPm)D`=myIU!0A(pJnkECPOXD0F
z^qe)$!A>}gQqpe(|JpTcY0diIq3vI|pMJb&KOa0gLkEvc^MNBXeCX&bJ^g%>j!&MZ
z<|}Ve%QrweO)3q9tf!k_sGiMB0G9$TomyRZTN^GJwUFRUcHBxCGIb@R5IW*<${HyP
z{?Z7C(tb-edRV^1)6D!Ee0=IOJv-W@Lq}$5-^e(B=JQ|S%YOIw_`UCaFYVZ|gKKo=
zFzG4?05yaC)K28>?BB=AOaF5?i<NY&@O&NP@;hv5Wmjm#q@Ky~W@YE24cJfdT5)WI
z#^2FJpMiR%*ciw1u_4QSEA!RtJNhg*ee~V0fBkFp;pHo6bNi?H>kt2k_aCnOM9#B2
zaCn+uIKDtLue@oUmy>7HS~|h4uC*gsjxeuSeoKSB`LroX1Gba0RxkP4DH|Q1PfH{;
zpc6kkb(ZGSN2YjX)Z7BXvxGh-ql4OcN<MsI>NG$1;ww}gcQnHfeEoa;$A9{lv|{;6
z`ZvGzo3S4AICcI|sB0sZJQ4ICKPrcQ1g_?=S}F(pH=q^x$gl!pd4F)2l~lpMTxvE=
zkoOnzK2DA^449m5&<BKOz_;j0%dOE5JOwQU$%XsCE7B?j`TDoO8v(s2rv%Ss+Xwy&
zb%Se<$uhP@W<rHwMo{o(3Il=RxxEdF#j-${0^l>llo}%U@lk&k4M#vaeidlwfK>YA
zm1-GCS-zTdKGMnoo5^n4DHvOolhc7<%GB)}j~bqhZ$faIzCbSb%xSz}uTle?rP1u}
zU9Lj|O-5(Unss#b4L9@Nk#QOv8KcLCkI@qcPw-QRCV1@lskH7+)()k0aeggb8d(Ut
z{A4;vrc=`hgETtx(BRBLBP5OCyat13bv<9z0NUn@d1y2>pDtoQ>w-mjW@*pT#LK7X
zndgqt-|y<9Pi*@fZ`!hrH@0u(6)VoAj*brJGinbrnzNH1J@9zWZBF<c%or>Af*+fe
z6~7YqI79#*N+TbRAAR7;wKP72bUy2Fn*7f-AucGB|JMb3k>@BIqn}xs<T7TuEBP<-
zgS^9k>OWHF5fOKFb<uejUQC0-V>~!KMvsk*)4u)3Y3P|LIy^p4Q?1uDz?uWUkdZi9
zyV{aq%k3<Gn<T)~k-5|fQa?(;<9zB+Db8_(E|oE_L8fiOkR80*39}J%l0XszKl7ot
zcxvu7er|k{2A({?pSt5qw6T3FZED|2>o#1@mtL~k{2|x3R=^Hpp?>v)6=Zq5zZC6S
z*8%c_DTw<VlZdIve;t;J11!-$t<d~A`6AKBBL0fFPQHl&9NSZqE6`AVMgColAao!Y
zO$i-sZ_mgtYaJyrmeWN#`S)B7U!;p`B%SXxXx)?2w#h@UoIngJJ4ehUg5Qd%Ae<|s
zsC1-lf_l(m(#*JlpOQ0XMtg_nAZNjeMQ#W%l{Y7n$(%VeKo!mCz{l7KSQ$a@nih5M
z!!V~etk|8*Qi7@vY#3xkWam9L_H;{t2K{9LZ`N=F4#4*BWIJNwHEY+=HP_$F14CoH
zcVwLQj*QXZ&=?;)GEI}MMVg*_ji%?{;MS?1k_2?v5Y5T1S)1<BwLq<fv$mEF8Vuc#
zu>e!6+AzJPL7A@a)AfJ0Nn;KIODRW3^-jXnlxze!`4&&Syg<)9{~|s1)PDX^-yZJn
zZBTb_Kke%2<M!J=OB>s_^2ROOX!-JUxuau844!<)4}Lg%7cd_&6oaI?Km^^Z^c*}2
zD?oi$AK*B8;xs{=dhF!9MBGzOKj1W@6?~(dhkRK}U_1BGU<0L7py_qTHabGw)wPq(
zzwlxn7#iilkue$^8Kb=;WAxbm7wN?Gt32I$on~6E^X&YaJa_V^HoXdK?&e{n4e)H!
zw%Uo2WeK((Pe-UzAZ8=rHrj{BujsB@r2*5q3+BJ*yD1>#skztq`SD45YX7s`*t?H*
z_cVA{Zy)dKZSXz!b<n0QTWMqaR$jN^3cmExRZt<<2PY*vX!{0raw&g?wSZ^Be`6g9
zys6nGouqPnL2|@)onOBjKan!wJ22_7PR4ewH}9VoZvf5chnXCd<;i%k1TLfr!DopM
z>QmW?GUR$fzKV5_^5X5nXslfK@D73qW@c(*#*8Rztf&G*Sz%Pj6BMt?3c-g(DxBp9
zAxvl|MX{_He7W!o_;q>IWVxIXwD4c9Y^NRsv=6jYuinNQ#EGT79KK94ZoJOatj<2j
ze?9mVfOY9gpp*jbeFUimn4U(o6OJMZo!Db_|10u|x*%S&b{$`H!_B;Rc#QTAkJI4r
zC=U*g)A8xkG}T<B$<|`^w|R!9o3GRK+#B3{<t>_DcuPkmY=^8&lfpVXKdlPqft|I6
zXu&p4XyA7eMmBW!U}_vsVK8Z<6Eb=+mm0E{rWW|==U$}8pW079Zam7}ef_k%uR*(e
z8{FO3pxr%vEREOwJ0IeWTei}s_HDd;#kr(`9t34r0WYc7fFrYq!)%~Ip)B_vkeK^m
z^ecR4nFEduUmkxBgAtdcIoV!%{1xjLke5&woRw9Je-6pfm%xWII<b7r%laQVdiKsJ
zCmnWm?WFTAyqE`v##lN<gTtfz?C1<lG#7cQd4?uuPxDmk3{A|Q=IPe!+<N5=YAyT}
zM$ZzK7i=?<1%mR-cbH^EPW(gzNF6b>DPkRImr**I#$B+HK-rm#Yh$NcXZX3%3I56c
zXSi?RaZbKM-F*$(-P^~zd;4iuZ-aOBHu(G9Kc>yMe2O==Z=-dWT~3!=vRdI23{~_E
zLnqW}qI<wtK2irp=h*&13+f;*c|8{3m-j<>=&=O9F>t_KAV1>E`ALCJ{16}zFv=84
zqCnpUU4rb<_dQ+LwA6My1HEFpSkL5jS>~HHagP3LG9n$&c4kA6In-z5%kY~q%=B1c
zMDvz`Q2q_TRek3HRR(f-t~Lko)ELAoD(NKz3|fAT!Xhoml*wiw7hX+o*r0eLl!6j4
zxCbf7LJkGKqN%Y9@~kYxAgc^w2%dr+P((yTPQ&pO8$|`D36Sv+ETEMlmgVGP<*QVN
zOx+HSjMKo-DDNE^qy0yxXkzv>Pc~2UWNVQoXHWBF>kLga7kOfKktdp`d7^omtDx^q
zYM%V59r>^T0oSQ8J*#W*<fxRlb?uNF#gmN`dJwFvU3!akhi%w#*jjjtPrSUq&ph`c
zJvMZJe%!Z*clS29ySJZqr%{ORzJBWN>#qX5-UjdLX>j^ZyL<a-Q~OrhxMdqJUvVyX
zc64Mobd_5vAW~CAyXR@ue4)W`xKj9sJcuw$r3nB%*g<f9fTL8Ie*v_xJj7mYMW6YM
zlR&&neUIqf(aGfoy-68aDWDvCZ)swq1pZRT)6T9gI`4vu$b!6a8XOwqmu64XRO<{)
zHWzuSnS7?X$P=@td7`<<ldUr}J^wn*&b>*q3vcSEnc?4#B9bXo!M?7|lQSq&z$bns
z=j*l7PIH^Oh4pz0a>kzQ+I@?s=U=Di#wY113G8~sAF6;(g1gFZ8nmmYQTa+wA9wfl
z)91c;4{hACmDXK$IbC|`Du)?wqxhFi{k48lsQ*HG*DmK+R(_&SQlzWtkfLFw5J<AM
zJ<&HpQ1uQnQlShEz7;w}MO*^Qpf9g?4rLVd?fD}@CQH7^NJRCBdMMVH-q%FlEWQDO
z-E(8g>@0o@{3_mp&XCu(B6DQgikUp)h2~xirc8hU$e5#%eFp(aYk6k~l(+x}XNodl
z{Kx2MUM=4eko{l4B{@vlb(N@>6Z9)^#NZ}W&IIKa8y}|*57dmu=v?H8WOyKuH-22t
zMCHe{%4<eDR*dl(nawkP^6#1$m8kk%yS57S28OF3Z}0FpJvZLssa7?bH`$bc?+i`M
zF7jlvYRo2EXQ)b(8n?MKJTv!tHN}ey#kC<itBo6;>4hV6bC7;c8#3F3p~pd_sjio%
zPgPT~L;I<xe}H!NG`PFBQ8iM14ce6&r0(9-NcC0ky3?rM?!JB-vFK~iZMWaW8{4<h
ziWMt)$Bqs`Nx*qtxj4Y8jiAv0oyQ8@V>OiF=>u*{m;=oCN(S(e-W38ID~F640>$Gl
z=RN2qE7!jRc@nFPw1rLi8iE3NUc$HXZohJ$M&B#&4II0=qqD1%&%fXz-a9f*vfN?+
zkx8DMt$bp#xmb0QW>52E^9)U;&qV4pO*Jb&db#x)&76FLX6Jv(b0^=lb0tsV8q~9T
z&ZMlfb7$Z|V2JBzaR~$-*)r97jgO8_@>BbtrM`iET#e3Eou2Abb&9%s8)@Xb>J*6|
z?M|cMyLubEyQjhTc6^OCZQ07}FT0#By=1l5wc-P8L+B&$u!NaVf9CHamTEfZfE$nB
zavSaP_=+}SoI?QSeUbcgABY5+<VgFrswSYxbenRzppHs;ROP`t*y)b~J*_&N_~ibg
zeM|Z`zFet6zcqG*swm3u4eRO(4m9<-=(x=@Oo6%jk2MWe5yepeA}rDrR16xTvB>jc
zq|5wyFy=-G`2yWKIgz!@0Zb1H4*d`0Fhs=w$N{m2k9XtLkteZ^xrOmnqFEQjx%B8*
zz<x0}TvDew4<)B2<O<|6{f2Uv!Y!ph@A{i`GsfW1C?9|M)ik14jZDbY?NsXwO{QRP
zDg}B|twoZNi^<j*nrbf6%d=;Adj1V=o_veu)09=~r0pWqbMew~E4uDTf;v6;)h|Rp
zF?Euker}u}duoJx8hdCrG)PrISABHUp|{^PSi5`sQUF*rYP;lF8r8e!z8$=2%T^oF
zb76@7CHD=nRq~}J0<Wd)?}8rlwE#4<vB!-yEadr)-*Zel@MZFVHe6EYd!AIxgMMQS
z<NNU4`B<%A`d|>SA4W77-vRZEw)>ubb#->}c^6((jphxF^1#p-Kl}W2HD%j6LzB(Z
z)%WIUo|s)^^Oq{fn@pqOsl${$r+K<{hG$-RovYD4y8#2wgS4P8b%Nw(7}$_uXHdRP
z)AO&<^W&2wQ?cEB4L>rMg1hd%$`^L^NGC{_I3(X{(C*Y>>hA5QUCC#@`JM0c#w}ZU
z-DOwMrI)O7S}fT?z6boU!?OF7{RN^J0^jg9S2IJpn7WpB4Q4S{l#k3eAs`AmK);Bx
zNwUoEplp)`WCeaoG|N7SI#HgZCwMtinPt6MaaI;NTg3Pa_%Hdgs1@~!X^mBvuP8ed
z?BXb9YEyBMnOY&sKtX~+0|OoX&jF(V?oh6d7=%i@E-*2JF3B6dt2IDL)^Y=9N|j1-
zsY=ug;Xv$qLaK+dkt2|mP6T*K7W>4ipsZ6Y4+DF2LNJ)478}MWj{`R`7xkO#F$1yw
zUyILiv3AWmzWRons)gmlqr7)`JdNC010`#YCYxv6nmq~frdo?M(OgWU7&Zbp*{nu3
zX69bwnOEMR*@ZW?L9)~S;g}T|rI=rMy9(@{KSq!JWQ2d*KTtJ5y{Q4}siu~?Q)8qf
zbbVDrq@xvm{b@9>YP_n(s$sNJ(6_s%k9R)w2&F)eIyySl7qOyM1BvZ}e|wvj{G{N6
z!M{s54LwzFN1@^0XZ3-xUC6IK3#djJ0NwUD_+9XoEXa&LpX&}VY|mKgJI}kx;&=sL
zE9k3E2hJXtHqhwo?Beq;yqNY5k5RRGX`Dun&!uGzr&;`EqIp_7KNGX*dkXNXG>i5d
zg1)K)^%~F2y-CfJZ`p{ptjmKbTRWRFZJubo#?OsU(a`?G)IYc{b!1XtC!=ybHXXaG
zH$Ce$pXnB#kP+~nYRSW{-fCoTcM1x3_f(yxja#;*soT|cxXQ2*>Z$xa+9$Mg_)L*n
zva_QB#uR!kPYf0Vz2H|uUwslj1<XMD62DZI0ez1nzh#*<t$$W-`$cY(-tk+qiTA$}
zy%G(P8S4&jCs)s~<;Fl%Xs8}S5Lw{4mOtz$gaebAHIOQRPIO67Y{q~9&ZH-o5)BB@
zv-%LrDl1t;*Lpt&f(VWfNO|RW;O8S<s!Lxk%1p8ROeZ=0Bx}w)Gt!VoqNrm4q1nu*
zLwY$6_BZwhQFq3Rm)Yycm*;FPhRt~>U<3i0*~IA-jbr6R`7QaHwd?4b8*bvk;ZYtO
z8s#Ss9fv8WMK?k*nHsW*ri}7QgC#+pjQ~!ipl~wLnP@KZWOI?KDc(1!Isa2#mnVn5
zzBIi+hn{<p_x@x*%NjfQXyYVPNV|J&YF0+~x^;a~wP;+YoqBBwsyhXIyHg`qP3iXW
z*B|~aZ))F0%a^a@j*d=>ILz&t2XA0^!w#C;9Ngmx(&KYiPARWE^(B*|5uat))D8-y
zi@!_tfb)D;UZDX|4lSQx6!>9+XF;2#yy`8$OVMV*zu}qKBm~n%JM7$<He<-<rI9fj
zed!hTiwWrz%`R%tH<|E1)m*GPQ7s$Et2R8@2>GOTsH!!w)2&6CoqvO7UwNJ97JjNb
z(B~J<(#vya`1$cE8anVSH3s%+N5^%7q$87-ElA*|qjr6grlD(BC9ke)O>}mpHLu;N
z^VHqfp!VB7N9+BFUZ^7x8(>Elz=8c7Rw?_g`6%GQ*{xJ}dW;z>o;LDmIAPX6CAOpS
zQ*N7$)51G!>p_<KGK%F2kHO#dyRZiz;mb4vGz-3tep=82`eg7WXfTaWh?#u6;PmZO
z<7CNf3_LlEfEDyz%3loh;7_K=x=PS90wxCoXeI7LCZ{|rHdn0H|L(mg4e9#)EWZoD
z^@a@Jol1fsozj%J@)MNdfNJI9I|^lhCcrk}yqUgB_Aqe_a6qNThQOOsJ_0D{Q%b9=
z06?}v1yZ(KrX$Z|rtgA%g}1e9*3mV(MsJ)R`9VK_=ZC#~bbK;fYosH4+NjCMUp2}n
z?<QxfO&e1(s@JrU4w&wx>DC#VoH<R8KXs6P)OeI(%BTv;dQ*ec+XvH5DZrCyTHQ=x
zQ%$?m6w~hXk-#pkN2;cHrIAYk<nEpZfAc%v<4s$(@ro7a(vFTDC7ed=5jY-<REXWc
z6C_u}lM&4E=3L6kC<pxBPjcABGSEw-sG)9AzvPgI^qrK;zDUQH^N-B`Jt;4)lmGxA
z07*naRE_uvasvHQnot7xEtT`;K?(XF<n8M0<nu1Lhz8O*dcAv};T_-jE<Z8+Y_$$A
zP1j22NOrDEFo!|hluqgTj!_B()Aa6X^{>h1BE8&tjrTu0PK|*lG~kjTOh@8+aESs0
za<0=PJ832GtAaostxM}&H5inDu+P@OR_j{ttOC8&t4Z+%frGERzz!ulN4uyWCCcQ?
zRlshj0}0E^@uIjETEH99C!pu^`@kX&24MOEJt!A_HOe5*a%@6?2IUsyM9>R${h8ZA
zsA8MyG<{`Ul+E`y-67Il(j9^{C?$<_cQ-64-O}B?lyrA2UDDkk&C)E=@a+Bjf1a1u
z+nH--&iU3EzwSZ1{7r>Cs^7vfzWXv|O}gh2NPBP9)Gflrz~B85=lQdbIgT@@4<}ND
zJ+XLksdSqqD8!sGB~{Bxh3f|fiK`S%6!(WzZ(4ISpFYE@DlQNtte_mPAgG<z$^B_u
zV*lZnH&17ZXuFc|OoAr4Q69n7aj**7e%)8S{y5VkjB^SjX1j~P#f9_F{2PBlm}bCF
zOW2PUV8{K+n)N^VFAxv^t97yB-LjF2#Bg2`uGuP&t+fu?)izil9=Fe|{=%>_pPK@&
zL+<v<wWh7J{e5N3*HL0m|5t<NG+DSNTXI9R4L}MOX=lZ3(yZ93Vp}EjZMhp46eZnU
zX|iBpGwMka5)z6GQKV&W82`S#WRm7v@ke>LdM5rdHy@8=szZFtq_qbam@sxlcv7y0
z&_3%)Ybh{N_Y6Iu;;B7-V-I|J=@s#H2k7B!i=8z&xk8?E-h}$<=Pl$EdwD@2fJOK0
z#|k_C`BJvlnQeFB(f5Z3SV2)gX7>~VwWHFTWTxB-k!tWgz5BS9^y}QQSLIWUgt6TG
z%B`2K9<y4tjh}%N+LpO`?Z}JV($*L^(lxq4S(e9&9B2Achc3)&^nAMq>umM<W$_&;
zdzrjewWb0b3d&vH3D0T~9|(yk^(<C$@8`cuuy1A+86wdReS@WcnT0I**#-~Gw_oiI
zXeV}%!@5WbIs{GDt^;1V9{npGjEy=+=0*HtFg=~kg6`5cg0>~ZtO7QE8msH{Wz*Ox
zG)l(wxf;DF1XttzUan$|nSvki>2x0kIs;K$`|aB4N~DeHdqT}Hz67<(cH-sQxsw}{
zSzHNQf;e8oxexL`$`U)Ljm7ngTLkIAJA}U<V5!4Ye$z%(>47z*DX97#V@vwCq52j=
zv_nGXXDp%6WqIz?arl&NZEPKbEHiv^0#tj6S3WDNy?8*{uCpLDazD51xmlZRdQ4NE
zhsPHE6EE_}o1Y<20wlowIQrRvd`^-l_ON-*@muCiZYq$$e);0~S|<&0OJ^@>3HRhe
zY?XRtz6>1hG0;In9J_)@8~kPS(@DoBo|c$S!fJuy`MUMcjhnYjgh5c6mOc)+%C;p+
z>4pEP(9O4@HW2ycoRd)p=a9>qXQSPxEZj<F1oWfIiZ#rwFM-1Sz~cHeD7}DS`MBV%
zNNnNM`g^Z0gIMs9cB^c&(#GQI*pX2NTz8?W{|m@vE5Iv<;_2CO?H|AARqFEQsFtB8
zEfj_#=m1w@t9Wi3Qi#l&l9kLSb`h`!1n$KwDE~N;EB(nZx7OPu60fI14|E(81Bm3s
zc-%v5I2mcZJOEMKu{A(%8w7);_Hn!m$JHuoE7gB|$2Gm(`O8ji!5jwN<5l>a41u@)
zrhLn+^;qyemdAn7<~cNci^w?Gvw!fm(7V-Z-v1uRi5}i8FRUL*FKt=JN(7l)!T04h
zx9+GZS<n-;|M=Cd+)sLSPL;ja_sDh1cIz;MllF@_0#Hwmbcy(gLwmV1UoHzzn^}|8
zz2mL-I}uqD4p{O;8fKvghU+E!Fr~dJlpJ*Sp3n@c)e`@=wep#k=rWLIHs$g=)dxk=
zi|kX_IlLT!J)HRj7aJO?@@sNgodr8D>0Kuz&3t}14TxosI%~_>7Zkn$l{x`U%&;5S
z?mQ#kbS_%kM$bi(?ra<9a*|o0mwp9Zg&rsZVRbwPFH?S7c<K7wGCc!bX<049*36n`
z<<^-^Y~NTCc;)Nsu`pZSuY_4;CrmogDI~n>LE5<-^dk*1xz?vxI_r!kYD%3x4wBPx
z{t2KN53Gyu-`XN@MYTpULICxz9z^3<`kCW$5{IS#s{dnQl5j)@+kJ8#<qdUy_j-{U
zhZ%r$QGqotXCdzL5T-%*tMeZRH7d{vups$|NI%;Lbti~Fi|_I+1pwdMD2Y;r|DLTt
zc}n+`G)u!<Ilfcyz$=xD1Pc9@<%t$P<lE*I(weEgbZ@>wGC8)sX&HE$-L?Ode#?e_
z1oU?H$&45+-Fb2A@^fW-R1cIg7=V`{q(bz1(F<OHe0OI6q5VLbV6kee!3PvuXXN>&
z4##G#S8+edIE`6M(zV$nOjV7ZpBI~bV16i9P-R%HIVDIj6@g(F8E<W8wN3LDo6uA}
zge7b6b1y(o7mb%DMjxcLqgt#<gov}tKm5sXi|qMM5Y=CIkF<x==*t%yfd_Pln8(S^
zy~#D};F}`5r>^#Cg7K<Gn?gfW$^)QcuHGEHtSXK+F3Ac8XQ?*dS1eXjMr<mW8oU$u
z@*>moc3c8@zR`4IR)kPXqBBKfAEt@x{$ozAHWq;_SL6f2pbL;)kcGPJl$h<(x}w8J
zHJIG~5f=(EF7ZJtb(vOUWG9wsyUaLnbvXv!IU3*ZrQ^-P5ZXQ7FTzSPBYHU=Fr{Wx
zbL{=AQlgMEE}wm55diq8M@133uC%X<nE3@l7w!2T_rk**Io2Q9h11E~lO0D2t0l5B
z4EATuCQq5Ui7k>h8*HM!OMe8sCS+IK!R9J(j5+FMUYsxCK+#NdW_dVaolyUY?F|VQ
z%}^W>kbcweR`=a*9onaK3oawAXPCF0pRvk}9&q8~zObc5Vrs+DM*>N)H)wo8?<&ZM
zd7L7G?#IqUX95>??t3pKXF@vS6kBF_H8t#_@4?YF&TVKAXxybNDeDv{#cpwy*zfny
z`%G{A#mgx?VDj!9u-Ke^GH&No>=59FECx9@5WazA<n}TEePjpt-0Bpbm8S9zhx7dS
z&a;9Ah$rV2r8`i6OSJ9j!#9g|9(-LowuwOXC|XA`{(R1o%{iEU(Ow&}Y~X=t&>-iz
znRbmxbi)@WOh?9p5Fc*5Tq;mi5j)WXGfn4e_9xx%&(qo|<MyDa@>Ob%=3}PIAOR>?
zZ1=ujme5~;HDMVnFrft;p)$f)qQZod=jRJbroQ|0nLBj7JdcxxptipL6FG@J(*o8!
zn!kL|Ij}>aX}~_YRmNdUPTnk-Aj;ILD{2mez;({(m!RDbF)6ouB<#qpPGrxy@K_3o
zL6flv%tjJeUmIoKa@uonz22x5!noN;)4=Y>w=xEnlnKf3u?_ydTMrcau=)68LMd9T
zjf1$SPUmZPzIS*0C2DUY*7kq#Hy;`18*m$4FVbTd$jS3}FWoP9&prK9-+lHNjw`@?
z^BUQX#mbx4bZ^g;|K=Jw6iO4Ln7eD#f`^W98>59i>@}AU$FjOM1=;MfIqfSnmM+Ik
zZ+q|<`=5F!vip;Sxj(bUZnL*Wt4K3GowTf97U54!AH>;8PMa*9sA<Ht`9wTPSmQL_
z8uS+*lGe~3zPO&q&0e39N~XQgZOLIK-n_Dp>s9#TPR%nt$)ycnoxad5&{=24I632d
zhxsg-XE<@?v#nzgq?s!qz^(Lcy33rDS+}9aah8%(v~zT%ROv=cv?c$&=2l{D!C(IK
z(9d(rw?Vf2B64j12+H>{9^uc=wpm+>6EqO!W+{;}Cn%un_w!$Ut^)(V*2?boVu$7}
zc6LMRiLMSkHPG9yg|u}fPPN{klZi7Fs98J!n10P|avV7D9jnl&kP-9xaA$)lDq~PK
z^2k^_Q1?i;WW$cR#-}`ik%4Sa(t{>pePX6GN!Np~hp}D78}T{n6Zupj279{NU!L^Y
z+mrRskBWYW?t~A+u5x`grP1ZEvnrslA$9o`P-xUz`7fszCr=(}l$G&t=K`L?5bCQ;
zEftkgHA!ApGzu@t3w_SRt;WM^*L|4C{2xy6QXggbM7%($*6BGjC$yu{Xpn;BONp%x
zSK(ARO8neo-}<|6Z~7{k@GS5Ye~ULzNNm3u9>!>5nadxflp8Hq8H{Kd85soeec>H9
z<LLg%9mRk?WC2lJ-Yl7o_^sKzW$k-||EBsb`Zm{{3phVy101;X-)JmvjkfyQ3I)9G
zQr;+Ib%9(zMJuRjEPvIogP5;r!1HOF6=Q0W*nlPpYh1voFxaJ@F4tf3Ao-;ZF3AyO
zov!QWo|;F;=f{z;0i|HinV)aMNDeCA&yXk1fnQ5jcy;ESOvW@LWhUjCeD5(;e_YMf
z)3*Dzu6JinUdfNcT6oi!{fVaI%x7Rvdxkv@kJ=ptD{(~rBNw{|%pj0kj^uR{mh5D6
zTq!j^>R-LAbMo_LkJq~c8`qPUa||thQMFwc(jCwetm_0fzqr?L2fRT<R*1`yPlNi;
ze9(#6y@e$H!c88>zNurn+V0K{yyN?w{2ZP3*k++dZ~48C{m$^%daSfG4{6)YD8g}A
z#Y+ey>(@BBYdlANJl_p*saxk`oHmAVAcb*1cFzhALTO=?epV!<v+RTxC^;GTfz~Ke
z&QPn&OW5k|tiF1I<xNsLMFn1Er13;?3*4At*gLYq|5|Izu-J+pt|XJ#5^a$n^R66Q
zBX`NtvtfzB<^P+|wBJn{BM+aL36W@J9vfdt#dh_|Hh_iL3m{TMHS(iNa);X4tnS$2
z-%?;xGiDa-_*@t_u}vC=4xg_<f{k&pw&QSi+C6*DOuChKgB<%Q(mpe+aI(-E)s7@9
zONnvT|1r^Jdm7;*HfMt@9t7HG`_MP|B8NkOYLy`NnUwpVs7vI<xo-krb3jr}mj{o5
z`(|v@W9j<CR*lnj(7;|tr*lKItl5akDM1Y<_#y<8pt}br={J4Xh-RsWMe#t5U?V1p
zATuK{v|~j$b#}QxuXX!7OBxg$nNk8Fm!Zws@tUS!DE{jVOzukjwjyKycb;3M7~Z?;
zEl7G4`3oJHw8B@CqY1>`agxKeh7_@4qciL7kaxjXj>PRhhu*&gBkzp%3mY4gr#r7q
z*P!4$RH^`Y2wSxs2z8XxH77hCOJwo^wZ*1PpzOR^jhyIhzan?sH5%<y)@=Uy@AWkD
zK9BVs*}PY~%*!vP`(QQqm}*sCf8^q!^*Ba7+P!jJKPfAiRSonMtVWl}B_C;!hnFEW
z*=CccTS%{fcy2F$2eU)*_}?Cz(lMFR(b|fOA2S_b%3(PW*DZrW_R-&v@A6dn|Llhl
zAo>!%w(ZzqCF2C#kODq(o=(8HBY4l`ry}pqMxj0MSrqxsEO|}nuw(YjawxntC}avF
zzI(ch?-1VlkPA}Qj;XyF8?O?eU&F}0PiMdZB@Ud%k-`Lutf}BN9KSs1spt>k>aL_1
z+ds%nGxd<E6W`CR2>6>S?4yl>vJus#qgAa|ycj{QJu&p0CV}v2KS<EmVmZDNmy3ts
zuh8}ME$JWP063Dq_`ypn;1`Ke2lWc1!DdKstsqhtn3gnIo(uLIhG*LtmkV-w`~EdY
zJDrmlabD})bYa2FIB!aYB-`veRk%ZWT7t)4iAN81*zbWY8~+4)PS+*@?^90oXT!O+
zY;zC4(vS>D2FI?M{RlSt{<;d|V$|@>ha{<8EfY??^k>5W43ctdtwyA-q7GPo1HbW^
z1>(yp9N6#jI>J(~{aK%QHtes-T3m$HAx~~6>EcgE&==4TfBJf0_Q3E&FQNN06tkMv
zv^i|A&zEDA+_%V3+5QPd@S5Ai3q!atFSyZ)`x&4;qPjfAE(k44yqp9L4>FIeh^EsQ
zCS{oz=Sg|yejo~Huf}~6tUfyVkGI;LC4TD@6PC;G1hW7ZOGzKs-T}#ZB0A)D<|CCm
zkxh@`)fz*IUsmmBt7-Qz*PEzMEK-y`mTh5dfV&MQaxaG$&q5Wy*8y>cFmT4B;4k;6
zgT(Nt5Pq$opuM2nm^MERqw8}y%iE7zaNSveOa-pMm>VB4CU9v>vi5NAd@i`I?k)Wh
z@UVZ-ZdIUI0KX|;XYk9jsXpQMQRK2_ddC~1K5?(HfHIm{#K=Lj;CNVLU8nGJVI8BN
ztM5HUpj<d4$&Idn6UE+X?N0)Za~^WBK}u`6WN|WLnT}6NtD&e(&L}={V0sAZIZTil
zyPIzfR*^oz`Iv4vkQmO`w8c<)CgNCjet80sqN2~*vbRc=V|`+MXs*Vfu?Jex$#^?^
z#V9NEj=w!b%oAjcIS@DAyv9_^+pZ-tHB8B3M=64%rSpi7{063NY5Ac_1>0pdebv&k
zfA<5UIh#5x*?fRdI2rK1=#+DB^~K?0B38S_H-cP#?ThO!hv(cT-yyk+<1_I)mM@@R
z+%IfF!~-J2(Jgwx;j5~zfiPxakj#L!UM!~>=cti`$7bi09&N{P<;2fd=WxB;)w=Cn
zwfiRu{E37Kln$~_FjA~(%d4vzvB#KN+38sEQ^z=87o|UeA9j><RuewWw=Xi3$oJAE
zB%f>%DmS&&A2G0I7n*n5n;GXn!d2DJn*{?VDah)Bg=U(+rNj};9ejLPUb-JUF1#>Y
z-fY9{c<#Y649Fy_O**Okiq}4lZ6DE>1){l6_Uz9vMLpGnY_h7jSu8!rw}^hW`C6M*
zRmZBFC{2d{Ek@7?cPunX&Z<XmCU?T_rtU4;$4Cx&YfnPqfX>UCnWhmp4b@%okD_E)
zSF=O*Y>>y~8OIZ~JldV3-tUjYa9pS6h^`W|d2waGtgGIQqc1_mXt<L;fkAvx!x$Av
zkPiuHu(Lm2e5ic(K-)2dGii9obD=+8g=Sp~|6p8Qw8N_@S{Sdn_*A0RxP9QPI%zMT
zFs`IY=vGX0e7LA48viU9i2N5|e4{A*MIF&+k0V#X(~<pS9Pg-KF0P^wjEAWvDShtv
zVu7;seO4VQPEBOeZ2zoT<LdVpzSD4ieclZp8i7*@66$qx6L7+(^5mgC?j#1F@5hbr
z-&Qu)3)Wk<r6#nhisQ)1S+!|YKEJrO%_3p4WaCL@^q_7nn~a=U5iy#fPgq`Y*@<(D
zMFK)4;^{C4qaJ9}v0mYAfr2qn1i6%iFT{7d`;x2rx@af7W>ro+Z|Po#B)q17r%t_6
zPdCO2xoS!s9VSmCPl?8!G>A8o2a+A+mVFCuXxk~DV$Qvm!AJ*|S+;I6+rVcp{uu4O
zDFFFNvfcZRy~qj5uAt`X*}|q>E>kbN^3uyHmj1c+(4NM^CyOp(CA5=Zw)B3ExKm;g
zSv^p~^hnya$+TJexL2H^7Dw`}R6aWRR|!|fDH(0xV7Jm|l*SAY*!g>JXh+1EJR~zm
z^Y551CaD6U#TO$}Bjg3sATA=+9s{8$C`c+L%Cq{bZPKfnKN2=F2q%AvzbU8pTX-}G
z3lgK29!^xGi2x0fLN=zUVhUiA!gWm@3-4ftC8R{|`Kn?aCKO1>?5pm{stme-F@?<v
zp7V0$E4k_^Exe_oW1(IPioFyZ;payWT&hJBxCLBwnmbYEe8jEQ>CCI`*|q$SGYKl>
zqWEc(=ipg=megFJRGMpks^I}A7eY5uKB|f{r?Q&Dp%0(xvHAD4k)-%;MIASeeq}gD
zbkm?Ry&jB$ytTYqW_JgP)7#83q4k@y-fDSO>LR8+uC1W}jsMY~e6}I}mQ%uGG}C*?
zLADM5Rd{KJG{oqOFewnxKGlUxMW^3fLTS$^#I%aYwYzAel;z62(8872uUN-cf#zLj
zGyBNI^00;-9jZEzsr;?iUWBpq`_zGu+m)f!<d}Nw?T>KhDTa`AG{Jt~o%QR_f2*s>
zUI>X*T4C_<7Fyo?F*lh3tD7x8epw2Wr;$ErSAc5PGoQ=zz0S+^zD3Iz4Z3c`*RPv|
zFQ`KILqWj}igo<`L?5)Dku28SB5<z~17Y_Tp8c+fC96bh6JfVfktASj<B+$#y<6Y(
z5>5>KQ2Z^PtZq|}dA5)=#y4s?4Y@agjE_Gt4Rg0(zsH#wl^R#7TeV0X*r-eAdCyoX
zQU?iWz{s5k=XhFRe2>@GXFeASq(0h26bkFAuP^te3}NQczl-<VLJUZ>v{d-9mNB)*
zBfjF_c-r)dWBe0DMC6tK-xu;x80-4$C9<eWGN-SE2%~|HV?mSv@tvQOB%Q?H;Jee#
z$P|E{bCF@>fgV#^MRC@$#*E9KZOoRFNMT;s2kZ9~F;_ZVPBr=UMwQmX<8Dj>EoDSO
z0zbW8iD!<N?xYEL|E`rlRTmw1|2n;fZc<t8AYDp`@bb?U11+ocru@bTAtZxR^<*`V
zhA6hIy)acPZQ-skx-gV(_}@%su<fYhWVUxD_2J0Ba!cILPDoxTYz2#zUz`gpVb+V@
z(|p2K_}<acaomN@QDloCjOf$oJe9j)8AQ9yWPEFNu$v{Sv&>9;;1f$_f03}xL(qPG
zyysX}Wnf?_Q*>O4z7oV@cm0B8@I_7v8_x;G;e>Iu6jONW;Nn@(<~973tUJ&%g06b`
zrlp^y3vWMljqthmaJB(Fht6T@9$NeeXId3b@I?9nmcEH7Wt-@aHSR;7&=Bm><84>b
z%ahpceZ$r)p$Iu%e`{)3AnKzQF$`?q#YyK0g&f3J?l~fEOv!_?GO*b|Wbc@G+BJ^C
zN^V)*(1lKFg$LWPfov;sHxq~oViJMRewJPC_T<h;1P3ApVa6fgkyhsLV?U`=apq1C
zd&N$Nm4Rxn@%j)Bj$F~&8_t5nn*z3Eshzw3?Rpz(7QnmbHfC~3HkSzaW=sZdm-EmV
z>LL0-1-ipOWrnRGC0b`$rKRL0+=UW)+Mc0m>Lj2?A*X{p<?dcJ84&{SGp`9a?p2%0
zd%J%pCUxBSB}b?2%|D&1GZhruhxY68YDWl)*YWDk`MS>kby^QaxzWwQZ&1fc2EdYD
z^<Zg9b3CLysm7I&@!%NQ-!bnDULg_v>arq2(zkR)>~-%+*iA?uCv`_l4J#qs9z8|3
z2I=P_Y&I3xVXTq8(%GvueABWb%=g@tYVtIXL5dhTS)C<b(dk5?1w>!SQe$4tF+LP~
zq$qW6f|mpuK-f$FW}&?7)4$P4BG+akv0cWk8bh7*Why-<2J(E-?g`DM^0iejzDYY$
zUJ~bv;uI6$$^AxW$g)FQ4!cgb9Ivu<{71umBUG%e$tul(j=CwreS?@*?k*Vo%Rhf3
zJ~_kl1HOc_-gPa+Nr&^EMsS7gk#dp(A|R^JX!A^n{E|+b(m3#3ZAzXm5RaGqA-H4A
zw7}S?EEU8ecL5d<Cxh~Y%2Wj;=@|!P-JYBY$fhtFmaGR8DZrf{lf<|5>HOs!xRM;V
z$zwYbJ16+YNAg&gf!k#INJJxqSJ?-sa<1a267<Kh!HF6{I?l-=@OI8r_4_09k+i=a
zHt!#rBC`?+zbTI?$qA+YMil5&tCJ53U`mW!uF{#-G78|q#EN%ukK6h__mj{4n>0zP
zbsu$&$*Cr(0LtGN^4#baC2T%BC_Eg-l4Z<Bk(0=9bhPR~?156X>4L7N>gw_{zxugR
z3XIv!j3&bj6<IwjoqPVrO#ZO4in!w)gPd~`6(+CigTE59A?=aIxmJZ23$P6Yx7NRT
zD4q+M^^e#dwi0XhWlB824RdcZr?QC;rXdBZ>>B!q_)~K>QDMcx_Q3TNyN6WtR-w-Z
zJ<I<w_&+KtWonkR%*rT337L$ebdpfiINNsoF3^UzlWD%mM(5iE-xozbWiSrg$4^ST
zNfG<;e(|D?5yAJm3}e!da}9`I@pj-dc58v&hV9tmb=L@huqvhfS^{|f2dCGxpODw4
z#bVG{I53j>os`9^snaPIaR7@Q2O6OBL<Xut8NDW2|1=am66RDzX7I{kC&crIIlIIM
z0RZEjXa-{Ww%V5-Y$O#U)VVJTivj=d)suhxlsWc?=u6~N9rGv{fq7r%F8#*bRnRDo
zD@}Ph{HsN*D_o<RKa7@+_6`c^DV%m{I|>yt`bTR)x-T&J)}1n;|E4h``cmdmpSKa;
zs5p*^6twutkHk0e>WSPf9y~y?61fwUpgee`$<TKTEU1B)@?e|sV<}@W;pZbslomGL
z;ASs(74BCYo?4y8o(`}_n;?wGONrJ7^_U}9JFlpskeV`wt<&mpE?FZ@P~I716U>~)
zbsTwqST>tETQ2!Z6e-J`AoUzjZ9hSaXmTbIy$!4;gQ7+u;)X55Gbh*s?aHNC(()@u
zDxGJD+l1SXK7ZlvloEu^t`Y5<f<J(OmSOS*#vz^}m}~>L=W|CvKMbw#SdJUw6ZTju
z@k7l(!W{}T?Sn`~VywxoJqapA-hUpLZnpm8k_?==uuD4~v3ogzK{-mxr}P*ZKB+Lu
zd`5r%MsC}je^_N~&s7vyO!{2A*s%%)czt3i4b2YI=s~h%NKTyvxO5}9-zmhB*n{#n
zi-Jf$n<HH1{S@+gwMd^Y@ma3ca*H!6CnF#J<gNH*EJjErXiwx{l<y;40hAIV4fyy;
zypD?Zt4P&JLU%_)wclKd_bSe11?BLOj{n|7y3t?MgAcjt4MmO$Qi=3PVLIfh5bwQK
z>*&A`6(+n#t<4diZ=#_PSG`s#B%;VvkQQwY#|K5+Em*A-MC42^;<qnBoZkz{rh)ME
zC*L@*O}tfq8C&z9kP_3ow9hey9#CV=c@g8_A;M&L^O%K%AnC!uT-Dl<<mS0z^?^r8
z#5i-`_zY}`!-n~ZW=HMp4$Y?nqb1sJDB;i!a_MF&r)JlMxTWC-%wAsV1+w!N_h_by
zRRx6JCmdnx!v69d0EVj<2QZ0S%JCHpF8;q3;3bA4gB5&m#mt>qkvdEdogb0S{q%kM
zF_`CG-#LP?cc3XbuP>t21_HTuI05aG3-uecM*fPVTj=~d&Z=d0v_YR4aJUkc(Zm~$
zc8}<b5vo#<>OBrd8~yq(a)<v4;Z3Uy{(D)EjVNlDjKB>4ZTN;H@+)w9an#Zy_T^A?
zZFO-7y5%@pYOO$F2t>XkTx0ofNn$(GRqAQN{({NeX0xkX_yd8VkTv+9J;TrDl%nfn
z(KL5}j~36?-I-(B3B$VeEcP;RwVtWP<@c_~;a{D!jy&abarOMp%k!N((wZH4&03Ft
zk?zEB^Q$8}$EUSL=aFPMb=YYR-bK?pA=;N5uP$wo0hn4K<Qb!{g!}6s9%)5Qx&(xu
zJ;$SOcWEv@o9qk$4lH=yHPP|?BB-jbGg|AvlFnPYBU!^nnvtp2u`FQVAxw@Bph<de
zt{G94Au=gvtZ7k{Y{RV-x0M9$OyI)cq8v=P=cll%Wf3WljXISBs9%#LSPuvo(u>b{
z+m&43UU;l{e|`#QP>v?M%fUu1mEv!AP-GAY@HW<acbVEf&sbgIB)ALn`sH!GqCBPM
zjKU!E)Y;Mj7YkL;8ni|jWl*nkd66s~jLGJaqf>*U&CP~B@mV`lWbDsRteM<jtX!AY
zkk3uxh}033Pm@rgjslLVV&vLv%EFO?I}2Rqg`C{^Yjf6-j}q=m_B76F^o($<{C}lN
z&ve884qkkTy6Fu}qKPXY1HtTL`)BVO+U&W#i`YHLULCPG-s>e3ylw(QMA3T=T`fdM
zjp1$`wq01#S>$kX+rp7wNxY(bIQ=wxJ39m)yU^K{IvqzIu0uwMmlwZ}NT)Hcly4M0
zrUJZnhzL$FR-Z&SM~kP;SHGD}<F-JVBMl3HvSZIo^UrQ)*#;yhKcD@mv+|*?zd}C#
zbYxlfq72CNMt$j3x*GkCGbaCFcVt-8oCm4dR%Uz`?MKhNnV$%ZsZ%sC+5(Fc8=r^|
zro2C%A@-d01{w|c4A%XM>q6a<Kli(skK5{e&X_{)LKAt$qGxXon#D@0s=-R?jf>os
znHb(ieB?~CGc#spo(zJ{v6N1sZxYsA7aaQXghhr(S7AEpe=vNDsp=dGa=UKTm`Z>P
z8bt^rpt<Ov!rKmu+P+yn3Y#4*cqgHHLTbokfGKZ`{>(nw2!{l;4D3NB<QmxlMW3-?
z49Q8etRT&2F=?CEw_#sp^wb(O#?|z^Syo(hknb^Ik+;&SX7NRpVJ=iDEUsx-x2?~_
zLUvOe=dqNRPPQ%Eh-q{4tvXGf9rg<er3oM#B5k1tWp!0Jb5bWZw%Sf>vLo%Irf#_%
zP+QOcU{y_M4;`n}AGgwZ_82Yi^)pCJ`gM8#Th&t(aY6c`5R8QLn!O~6?k^C-1G_0l
zni_NVH-qp#q8%>Zoy-R^W8O;at^oKM7Qj&~s#yuUTt#z<oeImU*+_-mk<x!?S$hXu
z^_ut3vjZ)6;84mLdpdmbZUxV(w#ft$!JUc)DwexoE2<3sSa{sNoyT(ZrdegHzU&p!
z1Wt!ZYz3Q<Y^THBF@C3y%JSg9HelQa+vmCV|6wMryRIF8y9(Bwq^Bt`u|FZ#{*FYm
z_v8##G!YT;8weXs6!<+FmhuyAFb2C{KiXB07ZQN>Jy2~F*SC3U8Q67f7Oclo@+FJ@
zPHM7Tw@<Vv=~Hr#k)W7~sA7$WgoybQx=o|@pBsdYFM1hR3j=EXd^~8H|FR~pz!<D^
zl>}X?;y57ZVeJ##-NRTZ+t2C<|9rv0)R^MIiTW@h#{Z(yMq=<QfFY?aOvZgt>hh@A
z;<a=;=>mfdgGz{Xj2E^!j9s_fx>uS>*b8PmY5Rqy&JP1ozhjV9@K6~p>aUTxscKIe
zEfqV!e7Qh=D5E=KBsx?lEjxug&(n9Nq`YEN2~OBwrRgM(oO$RwC+77pLRG8r01r80
z&KVngcu6B~bcKY(?tI?xL`8XZ!E2z!iBBpQ&2F(T`Op406&Lr%F^UeN7idNNu0NQI
z9t>4;#{%hVhq8XsGjWYF9Wq^Ik7?1y|D1X<!sun~`@x-^Fz&h3W<w6+YI#@R5qgsh
z=BnNH1zM!VG+dmmeLphDz*3-~fV#L`1clek1qgoxiwMvv$7v+)OvXY=+<kBr^#T~w
z+FE8&r%Dv;V4we;xv4dE?#Ef5BaFpzzIupNgFlQJv~b(TS)B#-8Y81mb%eSxK0>=N
zFN0=j4&%{NuDWV$I9Lv1_Nr1fp>O7YeVNzR9!&>r2@=`^^mPX%tM26=!q5gnM$OfT
zqa@0@kPwFgG4F6*Mdl0D6eYHs-wf`zCZxqNY+;BPVGXPt0ur{z{^kq)T=m3_?%!6(
z>)J}$c3EaK+pRCU4k9#HojimMVJdp5K@ct>uKZC|g@T5J3B&R<2#3gvA@CGPP@<5>
zONc=Vfkl!u7I#Y_W|BY0EP0QIxv7B7bb~2Sl8<dlCl1tC0>2|#NCb(?*%Rc;_?oZX
z+Dzi4)UA>@6FD;rSBFg!g$yhTc0&u>8j=DX9oZgh^ug;<ytdEq98iQX)Y0UL7%Fk2
z4T$E2(ydCX%XWW?RcD`V++%YMz~<oSv&dhYGats*XuGCc))ABV+*xRUcKSSfsXg=Q
z_L$OLuFM8~sO<}f=kQkO6b_8uH!`-nd8DHMy7rGXj+;8KJ0j^d{w4Y27MX`+PNcz+
zP%*E-j&>+j@zf~U4f%2U!#BS|!4PG<V3kE13|__UQjU^=oLL5%i&N;98+ma-?PO)f
zPBH(;g-vK(8(Tz`vA?FR8|(53TD4A%%I3wsjOhyNyurv*dNs7m#s>M3Y_!|GnOk|+
z#zs!C12(-DXj}DGj`OR3HS;iA5Oz_F6<rR>RBn4hXYf_`p1F3IFWN?4!qI=%r*)z{
zJ>4XtlD!JoAb%=>|M)wRhm6So(@H@O64ij%k!<pU(@?dB|5rr38)|md1%1NVR$ixa
z9`XA)FZ*UTuh6WD8YLAW^DdL&4K3=c33F%f@+!(#1X9kl{kvc<Q2gyJs0`6Z_uC<2
z8ZkglW2UH~z6e5VIL3Mx9BnDSI21lQC*b#`2cAP!010O#fBYk8`~xG>s^TizND-F7
z)i2*4(v%AQ85Iu_>WfGK@mlH2906faO^qq)v|?tt4ECtxI-o=uy&<auCZKSxl0+X4
zscPf1-O~Ib)Yb`=ZTMK<>><a^$~TtH)7;Ga;B<-+PS^M(<u<#v<W(OC0q2{2gyq$0
zq$)|O>v7q#(UNXE0Y_{Iwt_!k)zq)inmE}iX$k6nedBW&)%}!1v9-CZoW0gMdvkDf
z0|iMdzQ*GYSaN;nPk?*f-X&2z@K5gG|6+(qkq&BDMBQP_Df#6kqdX?bLsE}pS;-XX
zhr|dxqg2(>bSyybiFgb2;miza1x{C-Az&K*!oG4ZXl$&Eo`RZNNXRJ4`gUz|x1bhg
zpWVTnypjmmd{*}i&~F0)c8jG_yAmEc;1;fHd4prj+&XtT*A>Ev?&3_}D(1@a-EUX=
zJPHDKi9B)@_K3Kj+x4VYXB_r3#|~FeA)p*GeXT344IV43^`Gmk)kG>}Uu3cCbNVNI
zIE1eQo)FvztUkRs1IV2xs1B$)=%2{pObv{`>EMQ&K6cF%)39;o<@9i^!<5-9#P7x$
zLI~n#1P<~@<QATLQ4f#bC7qxEcDw<6upSBG*#SD1eB7#}UXmmTQLytP;>fWF@H8wS
zP~2DiJlF)<%_P&pdyOP`jC~bi0FZG94%3wm>BE=qEKLc$AdZj6DdHbt_7AvEP2Fns
zOY+je7W`J<D8%D?zM~P`odl;QA|J)nur_kHOUDRbT3<HX-GR)Z>js5NZ3Ry=kBpX>
z^wzCS?j6^V<Me*<8;kFSj#Mh}T4dQKjwtiGS1jcpSui|z=C-)vMaQi@no;jlX?Npl
z!F7ldKQ=brLbmia!`648s{9+Y)fiYoKq`i@x^oC@?5#YgeuUxxV5S0WNgL52|8T=K
z;u$#r=V(Bc>Mm@$`JrbSF{^NkvDD=<I+p0b$<?RXJ!NrdOYBUC-EJ5j>BEV||0u8i
zXm8^-L7Cc{bS|I2GpK@GZgTv3$5{*ZB>WB?*5lo+(H%kXY2QJct=vA2*%?pw!n;d*
zyORVyA6%6Op4H-Og6QtGmchG|JPo@=5-n-U9)0p<f0mkRwvE+VML$mOy=`0w<cahY
zh|crYILMVwzK#tHn2ZLaY1IhR9w@%*nMZoLF>z@({gA>+m6d|^rKOxpGa--jH@p#G
zWZNM)fC<CtDGbKj(xd_>`76))dUr^ix$0|Fs7X@%j*g_6SbXmbh?S8)20O6;C#BMf
zy-ev6dCtwCKQ&=5`X?A^`2d&#V#>l84B@ejCk(taJZ-C$t6d^8%bQ?g&I}jW7>hpu
zqk^(nm$8JY^)xsu-(eO1SVOmLd~+$?v%B)qa+c0dEH?-Ni}g7nxboj}V;h2j)lf+M
z+%o1Gkhk>(GcG1^>t{Bf_A%4DPk7$u=5HZ*cebq}gA#gPNNY8J1AOwel435qsQ~Gp
zsa5%GHh@))0@o_Ed;e&XEoiSky>zk52BV>~{j|ltw$Kx+$tsra0RR+`gVft&UybTq
z#ykyF!gD#U!mT+VnZet?j}XM1Q>#+Ny#?96{M0N?fBYk~pcSaN%g0+xxA`MeM*5Z0
zbak2VVUwi)haX`CnjHC8Zw7ud42<~eolznU@?tJ1lD}6LuT*c}QKv{;ck-3bvKXjV
zcgxGvxqi1X-gNREOKl0}M#0^<VM_@oo$n#HZF5JjN6oy))apn7Xu*~P3#rH%N#AB2
zWVZ#14?RuPl$Scf$_#~XaPGUDoCQmet_2UG=oe^3XRioAV;GRcB1k3DMUWLt3Q!PC
zi*(5gwx5;9?iHuH{G?KmjCKpS7YpwT^#f@1=y4x9AJDQ{w+{7_k{RnV>Vp~%p03=p
z_U5h4U*Plfi4jIB3qGd47UX#1$9$KFa|ECPLr#Nv!{iuog|+Oln#fd2Nvb0aGT@L9
zVKNhcv5}6dqi`$Sqw;38Je4f~IX7YBQ7Rgy+=$V)&v60ZAlNLJcE+pZRi<!H;s!2S
zb?cxwuIg9=iVrBik|r~GGJknbuDL_inSi<X9hJpEOpN#&vuC5?Uzu8{%V=ZjDdb3Y
zoo?s<(Ct8gLhpGG>c8}{^?QwiPo;fidFzXN%Ood$xy}kv=QE1g%*M8IwJHN<nmdLD
z`UP*XGCeY+t@Z~8EShuBJ3LUew((df2N8KpUqH!E7aK;(xbIL@>ae%Z>O-$Nb}%al
z*qsde?sm*#qS(VAP{-Zc;45&E9ckf{AUN=ab1OmQYfb7{1En$j_J?2xS25Ks{YNS(
zE3N;K)uI0^;z%;XbC1bDn^32ixSlU%V4ZV+UE)<eh56<NiIb+-jlNr^><SApX6;Aq
z_dH&A^kuk<G#gC;>y1s{*}$ofISi=$Mv+d(g%ctz7t`^_tI(gq?-c;m^th1BqVq+T
z#wUCvhyT;(n2FiN)@K>0=%?Oa*($Q4(Q6iXVq^OA{2}_`+Ly?B*8oI5s&<vDF#NSA
zMwB6--(#>_Mv;Y!qw&eS@Xs1d3j|fTtzz;zZyhzSKEUZ(Zb4v4nV#yD)LvoGVK^md
zCS?bcF7-DUDj3&3H-q_P476Y24ykfyh1rg=I3q~SXId~HPt{2QBGkb!e$R%6GOZD#
z@W4M`%700xb&_*myS7;E6<>SMM*B153Dfc81N{MRHZIancIxy>DqCg*O^Pcmws(!S
zW;=`J^NgDLbs?JAl`kUR$6tDR{l;rJ2Eda$f!d@)3FzzR<Mf-cD^1(3Ywu7ILvGJD
zGWdE<HiXyI=YeHo^>+|?USC-&EM)yjScJZxpa!h^u`an44Fa`#9I)s}LnP0O<iFx0
z1+ZwvnI?b0ctT@ZSzB+PxiX)g+@Sl(5yaMKB67H!i8^_?Lt7$UnxUkzOSWl3NMumN
zrEo{YvHNo;pD`Y>%A0uZ7&R>S1g)vBkhzT%O49Z1x+JMyL0wLweC}vzjI2-YRf;Qh
z`%4$Aae!4XlfK;|#PG(l_WGmirmd+`$4Sb4adV<Rd2$Ma-U=-=KEPh`meD%8kk{Qy
zm*^D(F>0;oe@5Dl3HBrTd3<Y}<r+gZN|lJ4hhpPixSkxg#qB_CShwR|?RyJKS902$
z_pD24;V|qjH&^Cd3?oEe0vD`cFTWr(?#BrTbc*c0=UvPpf2=typdqZ;DjZ%>$4pJD
zr?GO`ZXtW$tq*Z-K%2>wy?fZ8)sWg6hUzc|I&!{jH;)*XID{DnB@G$7#va*n)Tja!
zvODROR|psB=Z!T)SN16#VZu`N$Cev>h`Au-3DnzesCXgx;Sni?XKmDKH}_;}oxWb;
zYWWRCtp4k`KQIa1r|NZ~j7NqVoKgkt!fV@iOKs7ZKN||Nr8-V{-DKhdOrKKDY80U+
z7wv%ogV%H7InEPRHXFj4t)O+`Ni&A5ju0nLr(Qj=PngNEoFE()pR{zu;7*f4Q~tP%
zKE`kbvE4;mZu}SMLH{pcV-C9O&~OdpW9E@O1TbC`dJwF4Hqa(GA0-Z?bzlUvXn`le
zNbR)?%@I5CyzHu>5bvGl43+qhV$!B%AdAS-@BqSt6rQQn|2gJJ7=D)G;y7hav#QY|
z%R~`gzde=s?EcfG`I~{D6v@5@DK9ib<hFh+jFZ_DX=*OH1dGp=!S3$L?C5lCE`nLx
z{>&TBBat5xN!3n(d0Cg*?BSyq6Zf==S7nG?Zgc*HVABG<b=eyEcWpjji_;!7`JgYo
zMi(=cl#v6Su}HC@V7T=sF@2wm91%{Zo+E<LrwOp^nf7DHoC&N8<{j_Mr-ve8H^b5t
zl52es>nTn0=Ve$S;)Gh2-jp?mL}JRc{Ydv@A51e6ULA=eS!@ISm&Pl@Q=*Yi&)oXP
z7bl!+O_-GZtyhGp`>T+Cs(DdtX3FhUAAEMBf@#$Z7=)_Ab7ByV&F^~JnFKM*Q49xl
zM}@tx1F;dHpf4<7G~2E5heaTShC^LeZIl!=-QzpUvw{oRCr=>9{`8<iUSL3DO`U+!
zBK<g1pL;IJxnT9ZRkF+DKl?_wEzj^)VnyGYUbRpKK~|Y+G!&CL!kw?Rb!M1v#N`%Q
zoNM-ihJpb-8?N-1sK>b2)SwXo{#^$(7X7n)1|h|?cpe&=IY0(*6y)PQg_uJL_z|*#
zpN+Ic-g=T#_w(YiTpFU8BcGc~E`Q86(t(XN7)c##JhGZc>*q8d{7S9(4_2M<cInFD
za&W}fSHJ_o0A9BuqcPmi=52L;<Q*l%+WQjD4w5$KwzvHJ`RdoS*|&i|3#*GzhlVqb
z25<{XQg;vRomgh_j`IsELD|2@m4#q(ZY+M2HZX!kF1TuwhUYhM=WWM@_{8qaTfdgM
zv624SVY&K(JH6SXP6Act(0onnGHq#xb5opF3*+BFjXOG7=QBx@%LJdU=PEt`Rbexj
ztIrVDibA>GR5FJr;TC1NBY{Q)<Z=j~M<KM}^)~Y_PKi1)3X&?VKxpj9ZQ=7n@nh$W
zaHxEb&Wy}(NV@VGx>(yM!9S3`zdS>HQKsHCzi-@wbPV?bGmOSj8$xQ(xCy*Ku3<`g
zO6m(2_;EIMG6|^a%rhu>sd)!M1k!UR@Md2Vjs$1sNyy>Sf3&+m#!<=PC5$GeH#1|5
zd0F8@cuIcE=wRu)Hq{TB#&;XzVmBoidU4wwK^DTd-j?7|4+KzQ5fC`VNxRWm*%mpo
z2jl{6r<ZCBMwayhlD9SmIC+PEMvPQ8%Y4&FXyuPJ6n=zoiN4)bx_WVwJsNBAme6Vg
zX4}ai6|jYQY?_K@u@sdT9h;a!#&-o;20*KO$5R~EU1@ZYA2hkuWp-%*<eD?0(9KZi
zXK7EP5U9Q#Yptn7(6FQt$TI-*hV?-2@gQsB2P#aw_6F82xO)i){ke?xCbPt}Oydxa
zZeun<dpE~-hU|W1M@^3UqeNhh0*WX$VR{Zd?a}sJc#v6`{K1>?tJA~dzi1{&Xt()E
zo(w5scn;6;fFa~$=XyliaR10KC!}&x2`o*gGtb<)Y(ZXi0Z<0|H&l`@KYjjpMteuB
z6BkIzdF5!exv_vPq2Eg(9tSqEfDeB}ib=cwTQ8MLDf)1JIR_2a5m4Op@k?BFvM~q&
zwh7uY{q)YFfT!L-*2Mu{J|#O-fR*-#JTrvp5d)<#g293#jE`wo{X4jfrZc2p2-f<p
zv)v)Cxt1<irA*ju1%7bKpy`i&u2%-f6($sfop{G4_KDYqer{R?)bn?-6&3H~;<~gL
zgoymoY+1(RvB+`=b*$C0meQ(St}&%}=yhChB^1dAv<kY&p#{DmJQ5Cg>QNagXL7M5
z$&Bk89NJi6BZLIyXkXmahk`4TV2MGr?;K2rlfkh2=;mV%5#7RI80`+I?Dcw)f1@fk
znT(Vgh^GP4`fS)BVFr01(}6Ep=IvYS=5eiaMZ2IH%@(O{HCJdMP%BtIA|dR~S1Zi}
zG$Nfng@9)uJNt&(yzI+ghuj`_{s=#^9QfYw<d-R)>v=<Sm24uQ2WJu|=VOXqZHqDG
z)#itTRiP$}L%UgyF?$9gbv?m#WHOa@1$b%LMhVkFN5Afm4|hZ!hCskqK?rgJ&po<U
zUSo*UWtWj)Zs^mHy`G#=cZxx4$UuwD_ZsXJ_>|9A@&VZ7xebc=Ub#9GMh>O-@|}}P
zOTUvE8A;<W%*d;U$s5-mC0-^N1vb*CbE&`RN(p@v`LgCPf_Ktv%a=6uA4~pU&duF_
zw|$jv2~n(r^ov)%OAY>M=L-GO->F6073txY2C`yU?pp#bj^r<&<gp84WBMpiPG9O4
z;tE7RB$wmIo25{^a1>9U{-z3P4wks2mK{1?xITRyUZ+}68``NXw_{G(vtdgW^B~F5
z)#f)ForfX#Ktt3ACTF(CWz|A}K|XcEcDABY6-A2|CV;Wno|G-Y*0E{-TQpC!hhm3z
znGnv?hV2RyT4NF=&Ad*vSD&zbO~DdeKr5z8e5WzKmjWi$vMw%a{2jj07_5Iy46`)G
z7@K~@ipQg%aS5f#q0;w!I1!ry>EXMT$e>*=5g#e(SE%g3>wOnBFGD~PnkdDZca}c|
zm))G(%6TWbavV#MuV{BV=fb>uWhRnqgk_WZTWi%D9ewipl)+O~Xk*hxE58qGYYQpB
zN{ipYetQ@S!~*dr=4<q<fOHOqSG1Mm=?Ydo4sAg&2<Krjk=4;(X2bEe)zV~q%y7gs
z^%LVk0V%55&Z42>cmCzRuzBY{XWCyqVllr{l@nR*(%lB!cN(?`uDg!~jX}%2pnYtp
zrn$ItX?_lw7*p9(c78>^_PF#D>3Q0o+P;d5UNl24wSbed<LvSJ?H7GT0xapJ64Zvw
zG3jf22BAEi)fpVXW)Qlk^aP+*xYfNHv*W<&;(rFh&2XqP&RQ?Nk?yJ@F!>UPlp_8h
z5GGM`I1XKtlWO*FAOEM`k@{Qg!IU`r4{lXfzyR-$pI1UXx=QC^VR>$<r;=CuAF(9_
zzvhNNVCN&|`I1ulZ651olOGJlX=3mMrKr+32gI-y)f5@ZWtg<Vv0-~e^)?r&ehazD
z2}T^z6_Btn_rVC)s0%wvQcNL%0Z;Cy<RS-Vx{7;2kU5f(l~v5X8&R~)e$cHFRtKq=
z|Dy5Z5IQXy9t|2v!isv4=}xszd#{-#9RD$5rn&kBG9Zio44Cc7;oovKzS%OtyeRLu
zUn+G$4j%!eo9OnAK;OsXdU%ex+3Qj^*8J3O#?x(y=(#PnYX=wHSzI1PbkT#GJ~TN+
z%>%K!3EG}<dDU8TfhtQxeJFYCn(3RJ-5zOM|2X`@_@N;z*=taij=Vv-cArC@U%R+v
z)M2vZC1Yw`H0_+Uz3T6v=hnS}feP9~u1xYZ7DiG^`DL9F&3=8T1_!W<RRf~re-u#s
zaui!TACb=S;G8CQRa}C9<9=QRC5Ff-7*<_`7-0=hKka&_bWAntw#p#KDQMUkWVh(p
z^gCGVF6=nTEp^)-{a%~g61xhGH69>N_K0xkttkxo>EIrlN5)c2yXK5(+zOW6#dFN}
z$nbz>TlF=$Kr_<#{+E#kxMSAB#&?Jc3j52lwo=8EhJGIZ7qnXYL190H>kml*jM9fa
zZM7oS`kXTz#%+>sDV1cng8*1y8ZunjD4~>ppH(6bhfFN1^#EglEZ7vY*{V;pk5Bp=
znrroMF60gk0S!I|5);>I260Lirpg}YSi|lD;|~}++-6jDTwd2r=z)Bk!`wWytT?RN
z`<FHr1t>^N>fvcy=D}9X>}&DVwfyFVG)B648{cEGRzRt_>jNb0@0~R_@xlToh>}!Y
z&vC{W2QFSzr@yd*N__meGSxq^yUz}5w?jqAaW&A=zG7BR2>Bih9FBp0v7ghu3&`w@
z)xT2C6Yb+r%A@K2i=lMg>IT_wdYAG<hEl0%LQf`IwXsAy#KwGZRwISShnSdG#zEe-
zXCFg<Gq3bj#u_P8zQ1C7&d0X;W<hIY`A)~_5-fcn13pSNrY%>|lO|=Y>oA)9uDVex
z-nsQQJ~y3_%SmAmh`aAI*gWVT+6#t-%Nwir&=KeNiwTt$6Ve;YM_>4|8=%4InHgr+
zeIm%*KIZG=;v^B2J+CKE%bA)ZC8OBu?kHqJ@@G;+d!pD5h{+S;tF^nL2aFBapxoHw
zhOd`E17%*}p8@b;d5FJ&ZcnU;fdoi6Z2w;iV6(4W=HgC_a8{={K{^P%@F~Cw-*s9Y
zdRY*C^bSD#RTnq^ZjmNAwbuO+b6^R`(+W2yoppA~YNqbJ_(SopK)asx?9QU$Qi%3e
z{+ea9_F%N9IePpP8Kb1_yf``Ask60(uR6tmQ?Kj&VC;@3E@sB3+Szdj0{;jIU60hX
z12qxo(%c$;K+-}^a0I~ujXy6ilMX5^FnuZ@^NqudE@KLS`{E{r%R=N!!Qqq;?Pckc
zMd|;5^H$mWWcM}`Au8GX+}S%IM6n_<X~|PQt+h}NzfJp1o)DBX5lQ)Y`5xh)UTo3f
z5leB%^;`BD=im<nvjUHV(W8mjMLNPX3u4GfRV&$LIr(3)pY1^19&`L%yo{E>Cd&2`
z;!o~VetV#QM4ZC>b-EE<H}SXWmBz~HPov4IG1s_k{dbbCaJ_L<$BP!uV8pn!lG#WD
zM}wpo=@mG49R)|Lz*Y6d|19p%Fb9qN|Kji-<xbDeFj|m=K4h_s$Pq~${*mFyCOotL
zXW7(!sm`6Dk8AuXBlU>cQkLQC60!w52yhoOP##6$E47Vi5L$<S&D0<WqV)^*%3^ie
z0&^^2hCT7bK`f+c4yS6AbbvD4rv~Th$}*Ls(xoPP%gi!$7?JPAHrvparL6u}vWFYe
zhP$4Fwp>I)t3AVo`Yi@D-edJi&=W&$EoQ;2r+{|jf?`9|;Ibkjb|O-cB5T8Lg7*K>
zbdJ%LG;Q0CjfrjBwkNhV!Nj&Xu_n&Mwr$%^CN?L@&W`=<`}x-Uqt@#F)!nPEuBuDN
zX_sRh>fv{l)m-6E03wRE=oNudv8@dAV08s#30{?Nq)HdkqiK_Qe}(tv|Mp?xVs9vt
z6m9J84Ublr<)wpnCzaW-lg2JoXd?36R0fiN-h4d;o<hQ+0t`L3r2+x4f&DjMsm29W
zwVg>M{`ab%FLPfLZyxt}h)gk^Fd{tq`-o-QjoElP-B+H$S%=V?pkD2`f4r;gpIox~
zSMp$vvfxJ4W|WuCV9%<m$BioBYO%D7y6X#Z;{3VdB^E#xI+k>+e7`0Rj{EU8l7fW5
ze`fCksD4448)>(F?<>ZKA}>n`Kx7_=V}`oF3OEMOm(6y6*<a&~zmQ)KaC-ZTii&id
zQv4IbUFe;IY4Kc%af6jq+fJTI?ZJ}Xko#LEgCG#1I6g<>gJcnoSNuUmo{*6)0^ffB
z7=`wkZU$M^e+@Ao50*Z<UH`gM7rLD7_na_`e1t38pb3d{3NSdz22Fu(8o#)$R>nup
z8gzAREsGF4_3Ou^pD4$N1nf<C3Jm?jmpZuJOD@6OA*GE)?7x7!z|qGVMzNj$n3gZm
zsmp&CRP9s<cO>&VuE^u@?8L2-U;V7~<+Y)?k8;yPIo$FKNxoq=Ql1#FTB>55NCf0p
zmsr~#Opl4(9k2v@PPI1AJ;P+DzsK7r2|apLK=i~|i>}s{ZnrkpYNiQM=E-KU+f6{$
zZW1UEm6YWML>XlZ9?#8Z8JZh>vQ`lA&Z?Nr2@8N3+_;2iu^f5C?g+Piq9lB80JS?T
zn#Jt#k`pl5=|ohti9OxC!#I8(m07EE*~^2HRlrW<c09=XeE#sqIZnil*@l$A*p<zV
z+sJH3(QAY$3y8dHHz;6xX7aDz15c*)8gMq^o`tz-au9xcV$;L#fgkUug6!;r#-G6S
zm#2W6Cu`kJb{kvU!(F|*&HFV_Zz7M~&Sc;{P2fP^``i~Fldb;f*M7oRM(@X!%vs-i
z`WHvT<vI+s`DgCA(B%*8jWt?dYIVR9V?MI5VRaY6oXr6kIW@_d$w07IBA6{d8zgOY
z|GfYYcKMLOU$NjyTupl@rvk#=7S^ySR}Q%cPYa8*-j^B2+cDu!wogEW7NGIx)Y(?x
zi^v_x$E`8ok;N}H@IHaU4=|1dBDu=LCd@7lfN;@!<D6g53m<MvtD7%vtMA--uCsj2
zz%ApFEXU5M2$}Hnz;}@^3e-vjLCA7BZs)|Faq04sLX;6ga{$&W@!51`vI_GCxacK4
zyg2zR%x`2XI7{6Uv`>B`0}p@Hu!^14T3u!BT_@L;3DaR|3K%tsX3ydc|0)VlN;Szg
z&+W)@ywnReeDt{?(K+BG41^sMQgm_HDXx~ancS5k7T9T4#1?WAl-!^s(`Nlkl-s)V
zUHbGsmNjQE=^TXOhIE+ueO|uV_ukgs;7<TT7{+ls{FMXE?qVsZpJ^;UzM8^9*koJ}
zp$vs(mRpx<Sff9Al|*=p{>`Ca7Hkoo!Tp7ZHhO&;e=ydAS!DDVS1Ok<!}-Wd$_p6Q
z6eIKrS<VT?6OlQ`s@gWAi<Y&=^%ki1z{{CSN`Nyho_J8Ts~HL+!9cdicad%*%OM}F
zFDV}|zmR^uK2>J-M`EMJh)B_V_w7-zRvy<JIXBj6N*ck}l7P`EG}+LZ+V%xMmdD1;
zmetDgY`gD{p!>f?&Te-S6os#PFY#vp^|2mcS>c`R`3D7MsBa9ODFb?1g;;U%t}&i3
z{N(SRA9?mTe=NU5)R{F65UPdG+_-MxOjZswOltVQmF0b9Ka%i@8b2T4oO{-`hkX7O
zd7~0O%{DF!yvw?L&a~Y;53ci1$i?Lw1=+%U@DRur0GuSef-@A#%BrVpeaeBK>DqT4
z41uYe8yi+b;kyMy0>t?p9a<CdHW<qyucbiZ<Cb)*^}V|J)am27_vCHICZvryQz)Qg
zc5js^YKhy>1a0wg#04bORBQ^{uV~kmEUx>85Z7i`l^+Qrka|q@YAkSI3CF#HTqCId
zcVw?;GG9r;_xq@-`kU-Vy+G}A)UPLz<GJnIwyka46G$10=lMikelK2VFVN-QzO}HI
zTUsuW{q29)b3i#vK=acC&RJ957rpWA8%e=a?^F7@|BWw+vHNlA*5;<n*Mp_V)C*SH
zH;EQ@@H4m%#OxADg8Q4XD>HBR)Chc<%Yq+&QVPBWJ5Uy0v5r6dv|^?~1<6~DQ<)ld
z{SR%c7yyNeUmfh$y3_wVPU#F~yBX1w1uD{oQ-0-JJkX4S1<1joa2Iv1eh#+ob`Yo+
z!Rb->GXnc*qo;}g0o1+agr$f7hk|cebM^L|pWLq8yi=|=@WOUJG{G-@!|{W0Dzn>0
z(viW@rcU}nt6E345f2h+pMiU&)kLC)hZ81kl3;uZzBQB|<r06bVL+M@F@(0rvK^@%
z8j$ZwS1Z14<`ixToyR^g^{V#q4QQ~3Vb09Ox!#~(smkg<*mR~0#Ci#@Gc-I$;JgAW
zK~YAycr2}gJdPE*q|}rrag*~b-<YU{O({$4@1Zz!1B`R#c)ft~(4#b2t(c}D#Om9V
zU_pS%8rVT<0JmJk+L!gbWs$ds9|BZ>kHt@5&drwuOW<{kr+h>?!egu5VI2OM;VdXj
zOC*53@HnD8PzK}#m1TR0i7=S3exT-Awm$sqNYg3U^Oo*41RPkMX8g=gfD}|hCHsN-
z8ThFzQntU3_WDkgSB9Ma!Q6K$bP6K(yQ0+SePq3Bula}ET)lGNYzD@n5dS#|m9abn
z=>hP&nWuqnOCTf4UjE=%yv(~Q3cI;cw=DdBDn9T-=Dd?Ycmn6^wPd-qI*#QvZg)@M
zx;=DkbX3+Gi64$6IWK)ROm}!w%^j-O=nLK>zT0F5@}@uoo8SIgjMWdj#YT(^ECgZt
z7OK7h0jv2G%v>rJGkE*dl(e5z;*|!{sqpRV^8iPXk4qNS|B&qSOh!bG<Q)+4-`?;!
zAB}Z?^9c}HEOY3~@_73Eg+ln}L}HHXWqh51)8l|L4^(zcZE1XX-oaz_xxC5gd0}sp
zBREx)Z0UV{r2lFSx?Z|-Tr|IP_i;YJOvu&APqd@~l`Ih#ihL%J9HR#8NxaMV-OIlx
z27cYV>_?ECe7)!GN<Xom;#h(Q{Tb4M#FZJsR7YU}X9U+#)wUsvEHyCGdr}?gi)jW|
zPuVAX%biGiV4k2-=yGsOqaeTM#oA<|CEy&iGDbl9*>){DX(oWYWctu7eck{$cJ>FS
z^rhtQQnBSl3$}IlM(ltKu?|l)MN%S^{rqBNE+bs}cDRcU`%WT*0PF)o^A3#vTSV9M
zBTHadrL<hBP225%n3o1U$6-)(;uvd6Tg_6Y>_xU&Gd%1yp^DB1K*>AWNi`I{Dkcrm
zGV(dy24Fa~Gz&`iVeX|`$HcPX-XBZy;|`14UYvD_^4u|fn^@T{tsAtAdc_3N7<qX7
z$AvdgSiEgW<kL;2`Akd`EzY@Y{3rGyAq{CFa~<@ouSd`3VxBZcqx7oJZlUb@)i1nF
z#1P@X=^pgaDLD|*>t>P5>|ZaDe0y!hr=lCucjNg4+<tNgfIKX{_hS5sD&Y#(=G0YV
zkB<1W4irWxMjh2Z{NS*U@vI4@aXJ7Gu?@_tt4kRMe$$FyJ>sx1V%T2n7U1*a$xl20
zPh)+JyujD8uTf=W<b}u0wxyp0+yK7Q?4i@_JL1nc`A;t62ko^xZBN1Jw{YX)&<M-t
zKMj1s{K9jG7<ItmDNCzD@9?ZUN8tP5rlx-P?~VPiCeAhh_YA1G=42voQR9*;Gt)oE
zDBCYJA+~q$BXn+_#_>(CMmG>I$92~CdCOJX<t@zvpSadyt1vIJW?~{cH{U_^GgFxj
zS6d*cqRD5dY=m9@n0)7826uLyc={O&4{o4fkz*(wYAA?_9$Xb2%l=m|86@@mECXku
z@%-`;rT^go?D^c+!Q4wI$vYU6erv2SU>|j<?_)f0Z&Ub=>T@80<n+H^b^J__B+CzE
z>~nyB435C9i6%kM3r0;a{wWYcUeJ^M!;n|LCalfNVc$N<ttQ#g`SM6#Fz~`2r2Zfe
z5=hbR2Pryag1-G|+V*{`LHleVB2bd#>+<qt?Q`X&xw<CqKcWOkNQQ++Uy+?C$p;62
zIk<3{mJ*gHhkbsDB%h~1ao-b+VC4S0Lq)faFhD+yG+zA7xLjc;u{Oaj>W}wT=Kshg
znnm9#1`;c%1n=ENXOWkrk>XQv(-s76+hLX>b89t2h`Rst&7Oy4Gi`DT8qAtvExq>l
z$3F3Ctee%oMV$ISaPle}FTAdL295`=-MV*PJqpN{=BNc}=VYz*rkejURnLsqbI{J`
zqx~hy@SOV>43gW@H%!Cm#kw9gOq%fr9@^dPHCV0+9faFa%=<+BJ}XqaS$wx{ff09D
zX&J%u?3AWR<rCf^%Ua+OiT_rhAF*Pnk^G6p^h)g}h}KDKvLoG9LP1I4cP8V~n;V;H
zHfHT4x%PC9CLLPu>iNSfHV}C4?DILo*AraI2KaTQwkD8I&^bFBPt^!H;$B0PT|hI2
zyx%jw`#Incuy={N@W0^FF3@^MqsI6+?rN1U$$B$Rzw%IX^*=6_ZjYY3T(p21)2U8c
zGZ(k$8=BiHV(_0P*Kn*;ZRjkS&hQSf?+JfYl<qlT7%M`Lx&`q6+ma7y^8Aw89Cv5G
zra)3jAnW8?UTuwK`Fzm4Z>Zv4(7yh{7I{p@c?MV|8}SB2$1C?vs=L<RZHaT`vwH%W
za+kPUY(oDdM{ZTLSv%}AIWTElU2lo6JeJ;XU~7AWFwY%4&+Ef<#KK<Lt-J0dU!Px(
z5${ud?^Ex+fwwHrha_LTPmhm_fp353x><e>Xx+;IUuj>>ZvQm3AfB1!9NOe&c2fP7
zBW`00k&nZULkYvA$G<8eK%1f1V+x_2AL8El<o^M)@ql1P{yD-DAV#CqJ#758vGzRo
z`ETy|gXEpGg~|5tDG(5P-}kvGQdpDMo80$=>g)Zrj|Y;M$W2h}om_Ht1ie30d@`0*
zC9ycfL`54z(7;&^l<yrP5GABHjD9aGS(K&3kx6G~;+#X!=K#~c?~QF|D}cbT@wKho
z{x3WK%^>1SQ{D$5k^eRA5(}I;qy*XX@P3Zc!WQ;@K}9z)G$J$BJj@8BM{HiB{m0ET
zUVbJilhz0$pBlBN5OJhznFH+4o*V_9i9#2vX1AV1VkWluKwXEG-*h`RG6!CIUo@A=
zN8h8JeSq`M#NLnVUt{ZCW0snRAiYX;tY%GS`0p|dX9|e+5duUR7nmnGt&4vuHnh8)
z7D$KXgS4dd!nA78j|vO1YSa`%k`Uo&X~EGjRb)lKLr{_#P)2H5iS&8yEc}@(+h|K~
z2?)&YS$(bbpT&sa7M}2){p*|8(`$RxvSx&%h;=*6fz|Bxm*f4cvFxRRCVk0FnYpaw
zzcH12GM1~SB%k-+@C#29enFyH%iDj$W-NT0!~ymk$2|7}r8rMdpYE#pT)khX1?&^)
za}o)s(x_!x)bF3^8dM^IIPdrE<+OaA?rsY3>_gd$(LY{4TuJ5s<t~e-Cc&PEp$=n?
z^J$#qRFk<J#;~R~toK{c3~E;EBst12ID{&hFkkQPUh7i(!0hh&xLlRJ$v=f%xi06j
zvRzV2--)IWZX0p#p*QGN9pgiC45w>y3rB&Vc0{C3@bLjuACvg?r3_zTk<ac~1m14~
zuoaCKT$-!Pi|TV)05fH#va#I%eHJH+;Uf}gaEe5WC{wScG5cnc_yX~K&JxF7dVwQu
zyCG6;H}7GBH|dC8tA?)LpkWQXXIDL0zF_JAQqudoSPzQ$?B3&Xx-DBN*=%q4(A;G<
zHsiI7do+sviJV<Hq3?j`k9xsKacSd|qf3dT=pjjEw<fsVFX_9D(wDstpurJEiZlXD
z1b*Q3y-tEk^8fu6bURZKK8)qyO`lo_iusDKdtH$1eHs|^o(Y$1*lc;i<+{2l4wVru
zjyD?!a{0&U-k<4rX4Uu@av&WMpCfn8mswpw<T8nkIq(RulWA`=+>~2ASsfyo?_wIW
zo|=Wc?;rfh`Dq+DEadZ0$}!8I+;^AL@P5?z^Zjl2V`oZ?2NrEby;<?j!3G2GnXM%r
zEr93&Zx`{to&<R`C<0CN5v|}G_DVU0KNrv`vSt4MHRx5|2NqMg5W(-9$~*kAyDK7{
z(P&!ad5r|nahfCZ;+H!sbYt-O`15PJZRQp4>-F!-`^IBvcTYhme%8+6$z$>|@pR9X
z%!rMrUdtyGXQMvck0jqgOW>BZ=C{qzko1gX3{w0(h_m9JqB7bBq=4a?2$3UyrZI1s
zLleCRphu?nn;<?PaMN$~kEKhUk(A#MGS&MeL){`sDeOy-gFIhwY4V@%e&KZWG9Bj{
z9iZJip**+aOu!@rhz6Bx{Ors~&sbd+GQD!V9)Se!ea~%@WIpweMMm|Yi3TmyMd1>s
zN?LrEg0ZYs%O!S&=PVJB`3h58y**3@7lKaG(fAD)ExY$P(!Em`3tgn3aag&0+3#P{
z;hJOz2Q-W7PAR2*gP;JFcl_RWdV?&n!n1}%x>1SZ_OP4Zr-xyaCX9pG7%Jw#fdvA<
zu=8%1mBZ5*FRW_#<n|XFPsm)#9`r=%x3b#Ny?SGn(*1X=PM(&iqJOO)FuKP4t~&=$
z6yyQC74Ej!7c(w|w%$}DNjZR!qhdRaKrMI|bm1g3qiuy19<bf<r$KpSPP50YdOq2d
zddU~`9e9~a(*hK&Ho8d)ju3He>16lAqIapz7kK;d0A4`8^oCO6UI}Fn0@b;uAoBYb
z88&(5g&?Hu`iC5ingfu)grzQc<Xcfg<~hORdhxUFFnBXY-AF?tT5f9V*JZM@*T-x6
z%j4!v{y-?~5>77wdiE6Prur3g9?ej9YAgtVtI_RCZtdAty6N^!dAbr2gH7<uA5DI&
z_n?l>smY3n&n*N@M4{7O*0w8AMH>L$D~@QN#$_g6iI7-;IXWN1R!h!|9ep2XG9Zr|
zcB}mc*WUM%l*u3H-TT;C0TOEapv#-P<$*;#enFirTU~9%6mcIp9bZP{va4-LMN;4c
z7H>v)K>Wgl7`97gV~2}{x{ubbF6lT`r2^X{{ZSMp8w}%lz|Z@S<NY<g?=$S_-;RWQ
znxMkrSV9>~jxY1E3m?cynJZcNdRBIG{Y$9#n5EhM^DV%~UxuNl<rJ=G^PZSQFgvJH
zC?iO!K|ZB5{{i-!J0avxMxB#kb4D-$%ILjBb;jL-bKG~>>1;m@4_vQihF<8h_6Gp$
z^7=b*--{AKUw231>2}+%(a*Z6^B7~n^f|sa!q0&|;{gWkUeP>1U_+5C^$@`y$;NTT
zY*SN@FGXXV0VucruaV}ItZY0;Ziw}WXdX;Kwrf)=QlDLM8Dd$V)U29&-Fn{dvn=`<
zA;&0FMJu5#%H+sAJQoYg_`2Qw=LXnPvJ$Gg>MSvlbOu0AYrJ=6nVJ)Q*ff}2J4C&D
z(F}5)zwv+mm1*E`T~=}GzDGyD0ScvJ+!j-1WNEPD+N3dF2%N%_cG9Sd`2ZdCv}ni_
zf>!bigB4{^(Xd0mbP&-B7xu(xK1l4a7vIIMd-k@wV_o%e*1Ik4Pme3O@fZdj-bn=x
zU(7v?1wBS1gd)J_7>yc#^|9|I{g$IO#Ncl@fex5A(^cPdgKYi_ysr5R#f<Xc(Oo5X
z2$CsCvf0D)oGp=DU>~t{SzrHUwjzm!(Wk!6m`deW$Vc%L(j1##kpnY@caxDykOI^z
zX7m$yk0)q%Wc7N{FD7dFJM7gn+yGJ3O%R%Mt<1~_a#~+I#J`(nJMY#7yEkeZm-p51
zI&qg{H0=FjVvJ--o~374<mFcRIct|t9JJWEya*aQEr5MKG1L}xJP9dO8Sl*2-SB?b
z_iP1j`o@Da%`vu|HL4v38mVO(O)CVF+GQ$|u&cc+3NYH}UYKb^#DY26=moBY+?K1o
zBH{yvt+K5}Oc6?(SNs6}I}g`v8;u`eUnegQoL48C)_XiKuFQF5bq33Mj(r~}0hd>8
z=XLjM_u=qmb8aO%qvnPTw1{T9={6LjO3wl`KU_UCwctZz`;Q_VgP2*z+s#s1(bjcF
ze+6-q$#gs32!DP)^~o5&E~bOFpQXR2*)v6-`|R{R?%W?26?!|3LQ&D%pvOBpp5^;9
z<!pI87Y%naSnL$RAS}Ix7GimT5$#Wl7+5~cAd+I{XS&~{Tr=L6V`GZ*ZKUS>q7A*0
z8Mg7Fe-F@O3IhG#rD>0-&pAC~R+qC{JDrE5Le0<CpZj0A!#zG&>cV+NY-XQ{>CA?5
zWlDL`L6B}>V(5^H*h@OPuJ@~{9N6^#YQ6V^5V7K=#<P)?By%5CRji`wW3eF0V&{Jk
zNPuD#4oZwpXX$Md)yT~JDwy1=V8?KBSYonF;4!&6tb1@?hLI}Om79bq%ngIkhz1oz
zWaotz*a#|n7H6u9M?Y2|zXbStv8wVk`rw`_G$j(e%Tm%*omGv~CUM2REp=gic&Ui7
zxr>z*M2>Wy=<I#$+4PNuap~%vCfc1u3gD(yKAW5!4x7F60fAl-I=?Um@~#aVy_qvb
z{Q3rI@D|hE<9uq3e{lrR<jV|43=ZX2FC~q{ycB-o*b)n=Ou9*!k2NFX2NiVChV_|C
zK-D6hY$AXY7VfR+=T0^XoHpq6tytD#icG;VZrIFdRqfvYO86BK;;zKBGiX`K7@i+P
z=aVe}8SgdabymJ`zY?5j6sG8%@RO>nPF-*=oFN1ooWDYN8F=cIa*y$%nmU*Pi#K|*
zs%<rMi(2Ipm7ehjo5g5)_xW{=FK-Ss8)bbjKxo0w-9Sl^thaA#wcFBlH+Cg8Q7$rF
zkHjUVtxvkCZS_i(4OBWOD8VgEv@Rz8Lde)6eBO{|QPo#6p<Nohz|;o~%<sB&n~Du7
zY?KIlY;4PvV_mXcWfe7tZCh@8P*+xh3i=*|dpK)1#edr74imqe=#GKj7k`UrcAd=N
zdw>@Vx#{qhJo9w&)J`WYDY5SFgl!n|MEx?eFp`nK;Ux1foMF7kp-GVg{1Wb;0z7Ye
zhsxZ(F=$oqxy}hBP%ASPMFeV&)LnfCo^<z8z_$c|)@sm0lfW3h88g}V)RLsIvZ2Q4
zYNvn%v!Q&?GN9D@o6b1C`N3~A<T*_<SXkOG#Yy>n8=fZ2mII&1Uq-7AP<#_Oui2JK
zs=vL0eNLp&0-)Arh@J+%Ol{Q}_u(>@3LJKKuFNkjBIYoHkq`NHTD+TpDS-1b!6k}m
zd@lifGmGKC8`G7D^aAXe_-)6byW1v)_;4bAisLIH$|xkM4H7O=@vp`EtnJ-pUBP)O
zelROx3JD>Y@+Kj~sMU{B$>CLr^BUqb{U}(HnuxFZ2ZsPW)+NZKF4SP6Fo#dBfyzXn
zeoGgl8AcPp|8szGIOBBUv;Zw!O~yhf8)0Hrf@HUOpaFJs?tJFTO~P&(l1RYp4EM}<
z7E;0IhVaL@f7?JZ<MH(;CCAVBErE0L<d58IK7Xm?23gioDr`lDG`_%JQ)+T5UKYrN
zYd(nHzzSy6LQ-)+vUGpMsl^uFWI}4Dly9_d<p9KWyy3{?OcFWOKB`kXEwu59+E>p@
zy<V}83c2;!_`-dQ7-SsGf&stLLd&w#-r4z2t1T_RzOEBSk87CY`0CT9F*`F(qm@ze
z-uMk7VL!@`kKd}CZ<crGFB>z=5!<Udu-2QK_RU@ALJlJDiFfulaI2ggDNqtqXm{?~
zkO;L)2l}3vm{Qg>&x37;{$oeQ3ai#SZ4zJ+=2O2ZOf<j*;ztn7f&T`ENC4L-X5IeU
z1oqp1<?8GL(k;LK1rR^f1Qt7N&z=B*&`PBpHBHIBiJ2sU5ds|wgvGDlbDSoWXPpv1
zobWj@QP)NH%oXor!7x(>74~ml6Y>dawKcU==Zt#X$O5d@A?>~FSwLBq^tNvI-&vbV
zHc%)*BbYs+b~wBRiOn!+P^2eSG?p(O(*!B4W@T<TdxZgNK?2YgX6l#%@tJwSLC?SA
zM?M`ye4<gC^N!j)S-b(+|5poeQ<l!{u+Mi#3@3xj;dNhf*k0c5I6RN`0cVMRUC+m}
z4eA#}H!_5yu#TxF!BAiu=Kw5VVK05)hDvS{Jw*tbwKxzgk2xSSN*c*>7<X}Han?Z9
zxbMp9VNFfYAg06E_TSq7wC{P|3BJju{qeKYsba+870K{dw`1bFLx7yx?V#V&(F^-6
zERt3ayDB{%2K5x?K?9A$j_E5O6$}<dhU0L;uEMvjN5MV88g+tEq>-gB-b?~vB>G<e
zcJ08ihLSPL^_UmA9mFxFn~J&O4Od<dJKQ;Y&boc)pRF0(@i5=hpNXk^emr5YQ7eQu
z(`9IVPjH_>Un}<`L&(|cldcImH}E@wAqyse7nyB$b>MZt>eG-njU~vN=yY!Ehj&&5
zlTzW~y-3%#c^VC<J@|_L43LnCFReo+j8wS;R)O`IFU*S$UF(KcwH&{GBNo-gnHYvs
zXmzHJAI174c}VSGBXeO9ofb5GrtS1N;7sEmXR+T<th4(&^{|;~z19_RzPFERkcPlz
z5Xnvjj%7L#y2Pm3$=}~zD3&mg&di4_zxw?yC*t9C-CC2?y=KiaR8=Zaga}FSB!KEr
z018_IZ*C`zqWh{w=>F1D8`#_^FcKE@dVel+cbZ;iWs%L$Ov||0Sbyk{@Vt%3^-D_$
z<#&m86f`X<yCMi%560W!AP&=CjM(VwnFR&a)r*R8FFHJ&iiNdR1X5D$C3zRw5dshs
zS^4Incw`?v4w0yiH6*|(G*%82;jKjyD-7D`Jz}>=$jqc{I%~iM$_3|BTd5K!<dk|q
z$7r7|x6K6|`y+^F)ew;^>c=s4-#%P*+swSGJkrSGIDvd+7bLMF76N%Gsq(YnOk%_=
zh?w{RFzAG@Y5pYE%ophT{Q4noC_c1!1>WFwb-|x(QLrAdrvnn<)TwNgd*sDl{UfrM
zTdVr!wfwmfh31MC5UP=SLXbdUjq?C*78xl-2(`H?+82d83=4+{ndZ6%T1t^_Tzw8>
z{CVqq)UkLq)=3*C=15^-Z@1OLU}W!j1b+lA(!b5f_&@8S1u$3SVQSIIml&*&(dzi}
zsw96t8n-Wx5bgNHW`|>bQhy%nb&p&2VHC8Ref6XVvaXGejTZGY>T*uyL;roln*+E0
z_=v$_IjOtvlT1)$d)0E;*ZnOWTKau~@^BLN?Da?VuAUIeC@{o|&Mv?4@7<tk<@0Kk
zyFO$bD_*-@Hm8?(s^mkP>txn*Us5~wS*fg-!iRqHV?;c@gfS5(ZHx%vN!JD~DH_%k
zl$(kV!6)qj)3@x3Rz#E8UWQmRX+lVTXYkQCnONMBHKp!}oS^E8-I2PRb!A2S9KZZS
ze;c89vKErJ8hpcHLpdz^?@@(mLZ{TntJZM2y!Na7FGPh7EBvt79Ucau33@6Kuj^xD
zqcZ=V{KXo4tq*PQ#jh?@m|0|lx%^LZ4xT3bL0ad>$Hz+CXwz8}DUrFXPjrG(ch?)_
zE>6oc{EON7t4w;|v-_veal;8`y@a7JV#9=dtbI)ajbT`$+8Z0AeIBogY?$<-V`>B*
z)#ZI@T7H?{G0BEO2s@qmI|u>ET8Q4p<Bb#GRh9pEV+V{m*&$Z{#-uAFmqK}er7X*R
zhLJqipsXm$3?mC^J6yNs$7S>&XuHnWyyX6U6tU<Nmqgjt8J?~!oJaYREgULi%%3)2
zSaugXsTMBk={A=yCD#y*Js098!{7Aj8Zzczci2L3_$K%-`@X?5hL!3GiI_d5u5aH$
z@h0Dz=t7ZB-;$1E8G@`ufGT}muf>ToBg|Aiw58yj;vbyt_6ba7^>($4XeLmSaQfpG
zlW!`7-tDK8q<(3DL?LCRX_>5%<vMxPSevOPW6r>cl)v}>U|7I_7&Kj`S#gzq<o#Rh
zDOkj+6g~%WII&24uQea088ae<##v{wSnZq++QX1bj1$6Kzax@Q%5;t6a8H6_=*7gU
zDvU_KP;Q=yA20PeLx9pLZS3v-Z=;b^!A<j3endGn;)TYbcI(BX1N6uO)vk<R-s$we
zJ&L<xrmnMX2fkt3K?!^BE&h(KX9``WbK0`S7Cn@35BrwOwkx>x1DS{~ypP-Jn*!T=
z0=dDEP$zD((1>o^ST~GUbTFDOvSC*kfG7}LPm){2{3B?K1hnHCbDUGJ`iu`WK3#u4
zwRe2{N(;4fxGes#r#TmWgWd9ZmT(XO>I?sZL66MF;-M1|7g9_sIiQ%*MZ8w>`B(Yr
zlZd*b3O`(5Zpc+y4uO|4p3ix0%Qv~Xv!Tec=2(DZqt%qMm;CEVExxX@G>zEj+1VZA
zY^jYTwMwe)vO{vDtEy${nUJ>HxSiooGYyOsh~}mwbQXLZi89x&bRR2|SLBuj$Bm_Q
zB$*&c!=k6FDJA6d#Jv=_F4nsVB<5+$`JU3#s$^q*Ls`MKv9&5Yb46nn_y#ZRbw=6d
z@s9ltG5uaOfc?#$Av*hID{OmARUnfKqfrNi%H@<oaeI;YN|--Br!X`^c(2Xl<}^;<
z15nw*5&_jA3!%c$oJ09`PZf|PS#Wo4{5@ITaz0~f)WzA^c=SbPZ#;Wr6#N*1S?9ZY
zJ`eayW2!)WU_v}mp$DCNAoULln0hImP-jyrt<iyLiEyN%ONZ`1t3i2*ngi=4;&PZ>
z?wt~;VY0wW-J^oiL@-!)#lh-;K(U3YiiCJ=s?!{zo@gxbgwzn%_5gA7+9n69`mpB{
z=*w^&K65cfF5A77^PdI=%Mm!t22jO&DO4?BJs_F6=cx08b4{z$%5*XK#F8l%EkJdI
z_C`oyAtzIoAHkybG$Jh;5z1}Ozc(ZW?7=b->btd%=Of`=Wo*<8cC<iPbBZs&g1Gk~
z`Lubd50=*9(fZ$Y+vbU_6SsDurBaEah@1C1IR<ZrYSodc-)!~=sTD%lh66Q=X4%fZ
z^N5b);2vp|E_CW0LqM=e%EqEc6V%zHIO3ra@n!b$JLQ{F4i+hKP0}VH4*fPkE)(((
z6#Hjs+HXam+f-xUI8eqa_ZZ__0O3W<W{PPjV4X>PTK9Lkzs}y#RP{PjU!bEy5s7&$
zxss+PXKQg)78WJvsC9^@<7(WI={QPyI$A%O=-8vb(>hQ;8jCHPQ2a7Sa#x(R7+04w
zM~_!`v+ax4-q)6=ulbfMpuhq7oWJ@f@S>S8Z<#(_EhUw~*1c)FOj(59xE^eUCE8qO
zG+}=7EUlus>63w0f3cCGBbR{_Y#Bxf7XgFVnA!H5;fEXanHPE`Jwt^|-465dNVvUk
zd&Ps78fKTF2RcnTpU!jjo}Ze0Lq|*UQ(I0x<P}ZF$GGG9`~s>jI=((M65NO|#ObpP
zxiRGJK$E5Wn2E^_JOHIN?<l8Bzdhg*MX$$0B5B`H?ior{v$}d=a7&YHqBiw2QB8DW
z_Mkw9_;g|kWRCJ<&d#bNsM%i&@0OwUQ#pn@sXtB9Y>mXmvC&(-raVcf1y3;B=>#zi
zShw4^IYMDki!L48!wy_54pf-6I$CTrg9fkKBhRn7cnczy=`(-nQg{<A^ZDCHcDi@;
zQWk0@I6u&8r|^!?ib%x!P(2UETQjkSt^j$q83Qi-9OBP2bvnw+QJIXI$1Q{a8M7VY
zLwCjWn12ya0BrO9XI5Tx^^wI`9s?P{5TZ%F2~xx0qxH!D2;Srnr_KaKEd2VAjv4U@
zOo_RTthY8qmjrQH_8bUxy9=w2pJ&>@8M=kLylzcDCxhfe7A@9SqggN1*Y^Bwvg@jf
zbt`x-I{>ko8&>r`9rz>6(K`lB?PB;T>uRv84!IDk&WAJ&@8G+NJfCQYozM(oLCI8_
z7B%j+_mll~7^cy%DRE)SV&t*>cH|S^E^mbb3_MhC<PT}$nx0`jOg)77I&)6U&-H!z
zvz@7QJ(X3|_0@K2ON8hg)0e?+iY3wf@=yu+C+uYc<<o3Ns(mkt%07WM1?syZ4dd35
zwY4LA@`1zGn_XXUj+-4>YxaI|#^t(11X}s%s%j<WpoNgW*hW<aSS+rp=}t70ncR+d
zf9@*GqEjFAJ`I^S!pT4?kaXU9dhbX<vDghZ^RFwLAZW0ep)lF)!+UQ&Sfz9OY-B%-
z0$LO-JXu3mbpjOkw}^qVE#}$b>z}b7>nLFYS9S$cRWIk+Sl;;K*9!f!zJ=pG_kDYL
zV*(a62b48ec6m!g-H$a^%l9jmX~>MzPcUO!;)b##6i|fS5ZP;cB+S=tvpZd}U8`a*
zEAg!?39yD>FJHo)eA2PksBqSUM%b;(t2(0l&kCnTomEwLGopfbtP2j<4*OsShJkHG
z#>){m5nDMPZ5;Wm*Sx}>kl?scco7+d<?cuTPqoWO3*=!P#5De<`7kNi#hM?>1$?Du
zEnrh+meKh{CQ--rh0>vHq<z~+h8g#nB_iN~WP%r147tK{9(E;(?MYe?@l}OqTZ?!G
z8e8d{2}YEp;|p`<J+o~|tomML@lG7SKX=Lr?U})?$vxnH8IpNZm_h5FrWAT@{S`+S
zc2<bCS6^0h?T3;6moC;X?Scv*>WkpUxI+(s$br+By{qZfU#|ba>kagp82T^5Jz=v+
ze{$=2j1z0LmSlafMBm~>aoN$#6g9qr!)li{X)(6~M!wxInU`i<r|?21S!KKPoe8|0
zfJqaAjVb0a^cp!+zOFeoBAzh$XaSLZd`94a0`Uzj`CrRYd8Oapv)JaO*XoATBzRUx
zlui^NFBo<38cAC<kRm*x*p^yxspyd_%j0(E<3`o>(%HdUK#a*=cH8u=CpmMtam|CA
z_Lmr)UAph?DQF`rUX9;%8C%%pZ=+ZI#Yi_#If7TLmiPlvHi$7iv-Cs8dUJNz^vUlk
zh7kt41})y!PUV8W(pIcN{(2zE7i-01(!=<LJTqJ8em#UO=nKw^BlD@c<Dok$3rb2B
zhd1&F3XOO>(*^ftS<y~5LMeS*YyBG=io*4dc%P?x9DNmih2_nTT`D5Jm9GRrTl0iN
zfqKjY4>Y2&y2_{ChO$ay)Ax7}tRGi2<+7L~j~L5~ufim}eo6WX0pq5Bmwv$i#j|Q}
zyQ0(+5H4=>yeW&TyD8SRUAs)QRV!o5zJtYZl4{YtK*w-e*Zf8Ph_zB6+Ln<};N<`F
zxvQ}>t#s!R10=Ah!%Tl+)^%sK;Dl(51jq7w%ijqG32eGl9>1I&x2_x~fccgAPzW<G
z@qkWLQ|fmHTKa!0BV|uCrT9*XtRYpS76n8OIc^G{!gc3FC74cFoD(NBLcuGTgF|uj
zhR=6kbQ<LS94I(LZb?=zp4t%`X&`Wb&HzmaY1>>#6_~?FH6KzaW9J&<mxWD>7SH}m
zLqVh@z%S?hA>)iLR$5#^2A_cgy1w>?_Bj$$)EgVRj>Hq8t0KTzU4I;yachLPyXj>&
zTjb5yKld7#6PV3PM0n{|cES+V*<;mD#fW8cgzLeib4p1IUjypj`|J0FKfMi3zR6{2
zq(bU0fyH>4e<p>+kPl;DLFf9LXAx7VIo~Xk>^m#Usxt(YGEj$J1eu8Izmp;<1&W&M
z^pE`Uex}79fT`lf4{U7v&=~(Q(6Q3&l1>6;QwJP7x6Zx#x+h8oiDY6;p<C8aXVq?F
z1mvGEVt1GR5QUd%Z=DUlJdmgpsj(?vaPMrPfUmX_c-3Dm(oM&ch(;29jHMuPUivI*
zeyEWSs0ct5GVaP`kfN)q-LG`A(L%E!krz6ete4gnuen9w(?tx&sSrSUa+Y#uVtH9n
z=j>>XeS74~!%ksQfl-(cI+R#$q3Ez)9waziV*hQ?`v<8b+3X*Fg>k+sR6AXOQ%%rd
zP`^a|@EY&o6|(1qjFc4g)4y$j;;!%5+lFr_F?1Q|wni>?o0xtOgYn{`SV6cRIARkR
zQ%0`7i{Z~NSB_UltMRDiHHVPGZuf2YRK90tbo}eL;8$Bcd6#Y1AX_v#sZ>$vLI+DF
z9D|uMRN11h59+}_RGR&gI_Ge0AllWcuI8d*qm6DlnJ!^Vk1HxH6rNn??;Ccw#uNY;
zm%xTBG6#uH6&l83#BXq(mko-KiLO=!(1>ykm~N^h&{=NNQSwS~NWestZ|((JqJ?}T
zyHqP$M@wdw{AN%9Z@RA=ho5ptb1Sm3^<9(fVwFlDtur%?LD}_GvDJLs^h3Q*@cT?*
zVoT+^^#zt<e)Z(Rky?|f0&~uQl$5`f38s4tIn>MgoV8DG(Y8${Od{_jrW38iw}~K%
z!AoeIDa`Au&OU8pmN<8VJyV6DYLE^!0XOiO&oLD$Tjnrk7Y);FwDsLpxB2${=;ZIh
zQm=6%Ws2yMO8|1|FR=#%)sxi;w3?F&yX7LID#Y#l5*UBvEtt{l)XNZb9d2J@O0>3d
z-8-I<8C5uQwcLI%>W8^d!sPmMF%q4bhEt}~{|?#niABlf`Wd#$6vI^#f6~LGMKl+k
zKG9^ZJHC70xji;NtRaa!TdzmH4)Mfz<ENyfQAmduZJN8j0n<D~fhW~o6P<+Beo^AE
zW!3|kYs;kwCWW*cA5q|?J;{%4eRHq^!ui81lS(ri3E2ldZwUYb$D2}6gzW^!W{ncN
zBejKbtgf(JGu*wM{&`Pxg>tNMA`?maj}2Qp<)z!tI2iFH!W%6Z==#RaaF9kdpJJ|X
z=zj(}Idxj*^&6SUfmyv9e_>-T5d2e970i%NgZ=c^Jj{~YsomGRJDO9ibL)24B({Cn
zz1Z8V5i7bgBZ~w-oT<g)52Tslo$tp9f?}6O{-MK3G|_rZ8R45sP?tOK?6$_dtH@nZ
z!;YljmAr}Jh7s4|nVbC9AV+7X)r<$!D_QrWQX|HY^(Fjlz0#@IxIzF7DhbMH{MH`K
z$O(Y?gZ@lw^&(#KrlPj!kLS$se`a}bAgtuH7jk^Up$8Q^xDY}LAn)Pp+O7pN_<^Qg
zPfyRzO5-2HI_Ny$_0B;$jbtq71yJd{9?gQsAk$xPkAi3pLQrfVACr41yuVuHM0cq>
zUT(T!#Itiz*4(BRugW4~6DvWCr2Ivpcc%<tOp#8bj4h!1++Rp0GmuFwPPkB(uBz&6
zY}9R)s4a^yUpJM<j6+Hz@qR-)ENWr?bZ(V5n!HCD1Y<7$nqx}X_+!gtlqKZXmHBLf
ztqA%s{o(HfC*s&L-XbAysX?v1zE^n8W^V<ie+3iEZv$N-?*R10d-^QK@9>vG3}4Gb
zi4MGj98clWLOUyqLClJ(a5m8(lHBIjcMglWCj2(1BYK&N+C{`t^2J{hzlEjV0hD!=
zI(=NI#>1Z93Z~Rc=kiS`WbU*>6LJr>zyB%WY&aO9dk^AZ-x$eoamiAD+OI2}Mr0|-
zSoVdO<*3IqnUmHGN{@<)KqZk~Q|gqpesep<e|>OWX*SbNuC0iIR*ttyfTfyE>7Z_T
z412&`y~Jki=Y%basUCUTR93kgc=Fn=(tm#0Gb;;l{}G%_v0C|UnHHO0b#GY2$nTck
z9l1_*D(884DpNmdErji)!ji#T?i}fQQ+u(B6gfy*w^?f=ig~q!P?5m!o^Q_tct2Ib
z&lPfbLr?k6g^O#T?p4(8GB_7SHO7mwM+cxH($vs!0fn+x*t{O99G8AYQE{4>!Yk5u
z{JF{bVqNQgroXY~!;iNJO;xUOlXVKG53<iu!b{0V<`AO!A@6}3h2=C89`_3&m*29M
zlSJSz+PH22md<shC|k9G^=bz_Ut`!AF{(yPXKHyqpGY97&i$*8Y+i%@5HzV-07r%~
z?Xh+0yx?j_qbR%=K!|U^#4IN4xBh&yqQSSO(H~9<85V%O0>2OBw%`1*`niIS-atxA
z+!T&vWN1k*+Zm;a*SgOD5A!PcKbM})Qi?)4d)5Cy)}L`u8mJ!>P9>|f((f*#dgdf-
z2*JALj4Am>jol-Kh~x8$trFSD?HW%khZL=PaD8XbUIZA5gLI%aMJl~X-zAzP4Cfs+
z;Y0~Vd{1TD@nS}psE@VH*C@dXiG5M-2`nHXOpouK&p@ONy!EA`nr9}9>%=mkK$XN|
zN(tl~Xx9Yka4wopkzE)XQVbVbe%5eYXP3!Tt3X3OOOjh1XRN9<=p;Ek$gfaNCWVan
z86W#Tc!w#b9=9t1&vbtxkr5m$sHBN8z=m=nE5`p(BRPb(KCZvmP!KtNi$1%0X$H6w
zH>DJ7|0zXVN)T2R!=P3ysiH{*)QIE`B{2J@@i=&oL2zu$4AMAgS;Z!jsG|rlg|so@
znlk=G<oRc>7(!!n5t2Hys?0|hx@>-eNV2*->4bT?l(uq_SesKyCG3rjWbL4V&Z?_v
zD3e^4?(Do9V9=W{*kV*_r31!bXxEEi7O{BMkBY%@N_eXl!lXa0(n-`!a~H6}i^lrs
z#b}4S5w$^~L~nM#dKl!Mg>OCeDD-~hsI@pPaJsmXEax>?jQ(G9-&vVR-rQVoecJBd
zO{LZt-q{P*=&_y}h~_;``jf+N0}R-`rL9T<&JsQ7hBL$aR+<pBlHizOOyDMQO+Zae
z{oi4wiovJOo(0xg8hi>0<4;UFNHT5Q#tt-=cbOB-Z2A9ktt?NWvK%23U{v5SJAVdR
zz>|9*fQ^|U<2XwkjEW*nCv6FPf!_WzTwk=JX~a5?>3ft~8y*gw2EstZ_e-zLuS9G=
zZDUHlQk&w+4Mhw8rOwvb;H~%T;i#?bNiLu=xy1-S&6s8;vp6UPzKK?+OD*c1Z8SPE
zQg}wjl%mREjj=zm4|Qu6lWWx92ld^qOWTfRW8vat-syOl^0z*Yj2CSCk~!fxY4r72
z2Vn9~Y_L0HknfsgdWf(OcS{sGBx~%}jN^NkoU(EZv$YPum)xk)9Nxd=Yh;uF{U>u4
zj^dxjDTwUlJ`@+t=&8_7e#*(h=Z5IU2)d|YH6w0c=BzNqDX7;XEoa4g<haxq$Up&g
zsHtV~NVF@wG&e*K1cC+=GF(V7i!9=PEZVJ6x*)P|CMY7+_Ta~e69bU}wcBt*FyxOa
zExpL;xd}v_dx)ke(L2M|l)*fp8VEoPi{lAwn&2ppLf!xdb=v$&a_Qo-z9n!_Cb!VN
z&hFSBHladu&hK<+x5m^7-a*qIutYEXn8t3u)~ofPjXH|u?pg^(5k+f-Kdw{M>s8sW
zsR=70ggnVQm4k0H%tP#QF>!~r(jxl-5I((ok1f)-lzkGk;~@0+_-QU?6!(*8;Oj^a
z#T<r{R2(kz=}hBz27Gcit7Gajd)xY6{4a)@s_p>DMOKq}eW>drh}Xr~>u!1@6?q!8
z>9xHM^_w}e<}^9b$Yph=|2it`%QqI$R&?y$&JHS_fndvAu_Tp*lKmu6=p_V#ae-nv
zD<IqkQeACjn(Jr&mS$B`S+GgT%U(r=jt4r|z_P&=k%$B!j6MlY2mHkU4hMK9KZbs^
z;OeH4Pv)-z^)q-zj4Vs|kEpu~l|5hN+r0=10k@JIqS7VJ51}dX0y&b~-vdL>uLO>(
zjS4nV>X%#0A81v1>W}%u7}T*Vf<B4v^HMhsHpP=0KF;WC=$3k`70dCuOpfWV1lI5z
z4D%>YdOyPHW0NL~U82Nl3|6`2ES*%HNsOAU5{tASO%IMCfE_x-rkCP+-V;_LRP`#7
z#UhHs&%J^uJqB|2(uB(EP9`<b)j!Ra=sJ&x@1CSwT7J8P3AhY#AbmUSocA5qY(yNq
zLyJ@Ej(Vp=9801?T>=FQqkvmirZ_6#T7t5!C8`%$b`s{+(fG@+p)xHl*<CO^GFb%W
zj16b!;a2RlzFI?gg*G)t&2&~tdT^83WRBnAxu)ddy=e!~Gc-nVX9`xCRIs6pI3prq
z+peWznzl}zEt^@Yhuz6yKKK#4vEqgvz;R8%3j$I79G)W+-L8hSID_8_97&F_Z!2uC
zinWb4C*%WKvK{_-)5P5VTwKmN-vP?BdngKBSqn?!`xOM^4>;Cw;Tmun>d`!ZQDOIv
z`d?X?G}&Qg_K4qYRTK=rpB#^CBC&d4>ci4l?dfTn1ztvN$hj6(me=lAw0&emzdjZL
zp^vS?=KVp0vS9Z9yVhir_#4FWvW$xb4nA1glG9Tp%9v+*RzNRvKiwVJ;5OppnJ%vO
zPfe<avz3@(N1Mae(%}niPJf{^`>Uhv85yhN3*`40AeGz4vi{kHtoqA;<Ah{aDnam;
zv8VIc-huzexsIMFcnT+@%{gMeorAzEOYLrXkc-LsMLnJ$m^jd^qc#}JRF3;6N-jr)
zvTRKuovs@XT7P$A_>EzGhO{wvd~^wvp4`Gjp*2(#qaKCMLoHnOBCLV@A?*%k`Mqn#
zBq2>fbF?Q1(v79rie<jPY{ow(6ad{=?S&w7S}aVH`FB9r3G5x!+&^D|4Xoq(Mvvs@
zxeiR4v<KrNTc(BvD2ua$BaC6Cv?BVJMH7p_@6)lW?Z0bF%6U^n<!`MsX%b;Mc)W6F
zC;y(0HDOcr$B%(o?x6vagYk&KM7x6^;CZZ)E5CItfWH>CZncl^n(d0cjhj91pcxe?
zXOVX7GOS3mbggX+J5%7u+=U}aF}66cw7z?z)5WaXyDQg!|LgwSYYUpvy74yun?sV~
zHz<ykLuy-`xeOs~`Z1kX%+2QZxLCSSEmY5FfyR~;sdm*6{B~1#ZA7x8r9--spMs#8
z-&g$CGpXoC?MJ)o)LgvFg0@d@VOL&f{}O<?oS?UD{N8Ro%T+O36b@nSAzOrSI4UZ9
z@=(L)W*4gN@1o<0qLWr7P&JoffXmCB;N`5h+e0yWug{`J=i{jL`%+%I>&Rrw{cM-L
zY>>3q&Q`IwMXU#(zkpby77uqz@NV{d`9WE5?1dxjxe8^uYP<>A54BC!%$k$`s|6@u
z<kI3WIfKu^|8f7THr`@~D<S$dckXU#%4Ek*F44iLA;z1Hy92(f>bJPbUOl>F{V@&f
zjQKah=|HCu{8sRF6rL5;d(T(s8a!JW&mug5#OO)6>xHiL(!TZQ(OyZ}(0Mz)IY)%j
z-LyxgjkQ<e8pALC8Dk*SuG5r4r;jPTa)!nr&lY<!j^H~~&31k2Q%kQ*XO>Envz2@(
zSNvV(!+?ykM2+pb{vqR9{2yOiouNkC{x&cQClef#bDe1!We<FGJ`G*Nsi!oS(uMT+
zV~`(02l3_(10@KDS}Yd+cm%BsPFnIRWngLxoxA3a`Z`F4$C2Mp3Eg7~pNCo}HvOL?
z(tACs&zSsWQCFWT^2#~Wd5O~uXs|qg!D&m<IaaYAdiz-rVrI<rQk=@Z*IrpzYV;9B
zy}3}`q+(SoI38vxESUz0q%Lh$f~bF=9|A_L(#qdvicH6RJrsje20X*-p)>njiiur}
zBFrhSQP>|^upCe{d8CHM<{WV^l^Q-oJ;nfA22>=Juw@q@QJ~!V7d`EJG2Z&NcR0m}
z`Q#pW$9ldoZsixr#qC~$_qK5-T^<zCe0qBzWdTN_HR~3d@jQWZr!2?DbzV_x_8KAr
zt@re4`it*|5~9*QP&PVF;aWNH;3S~)VwGI3)QtGHrD6&BD&HpKACX+$e?OXjCAMqX
z;xqZD87pH=6%>umYr~?rG%qNVMrECIGJ)He&mmMs@{J%G#oT*6cBdY2%_S4ptqPb@
zo+GxPdQ%gx0rrc|Hllbcb}h`7Oqk@rR9o=JX>EZ5U8o>=;qGzI4^v@7j$`Ux(1aTc
zHT(*AUor+P&1o(@8qQRbPO3V%RzZ7?Pv{@^=AW%lw(KgZVzg0zPlu?O8b;UNk9QcU
zwB&PO1GXagJ<~sAX!|`S&4Jv`q66U%D=}~H3(BdPzFkJ?dvScrDdMd?3q32o#ifky
z1S3ISSPO|}SO;wg{*4(3kMS0?Q2vL(Xc6i~y|&Ek#}#{DUGe%6^iy=saAo*vE9=YR
zv{j7zi<34`l~&pv6Ne>ii6gxtV@KGHzZ08w-!sCEgD|72SlSWWKYp#g?uEg&<8`bi
z%PG}b`ACDQ3*64d!9MrX;P}FU361wJR*E*g|3}j~hDX{3>pHe3HYT?1i9NAx+ni)#
z+a24sCbn(c_U><=v;XzgtFP|&$Lgw8Pd#<7k6#)ubCfx|%&9T|RmfxQLkAqst=<!Q
z8j6?!K8`G8K~qa5X!w6G`>-3cOZj`&Cr*&pV?YS`_l2e=*i3Gi<fU^jja*(*N>|Ah
zRPO$U{};!}{|f>%ZI_h5n~G!SlrgM(=Z-&PZ4~?AKoHMd7>3)eIoKWc3ZVNiEi8YB
z+B?(a7!7x1Y|GFi?PyfPkroH_^0cBBX~PLf3y0IuT#ZNms?z4XwwqFBbAQH4z=;7=
zBNpTow9L|r@%{j->kM;4X43oP1R-z;3t?v!wL;iG1LHPV<_?yZx`-s4_;=fUTCum0
zC^7oarfb3vF7248Q9Zr&rqdhaKJOGd%?W)RhdR}$AMU{pD(@d_wm!O}^lXMou)6$?
zH2UgFW9}QDApCa+aMgaVh`(rCAkD)DtAz#GiAkwKy(+c0drjS^nv#Caix~!ikX6Ox
zbyurVpajLU8H`F7q(_2_o>}dLwySHv{+nY#9FnwUa)1KufaK)Daa!nK*ylz&zDlpW
zW?74<Lm8cdq0M^b=gU+XY7K`(LzD}J9nX@w1(VALlc;k-=;%0vsnYp``_A`))mL|d
z*XJ+$OCd|Mo9WM&N$9($xz-9yncOR7p7x8A<yDEe8EaAvDk{q?;;UBOeB2m8=%xv&
zYVvyr%J3Myqgu%j-a^ryd_&217OL#7Z0FUUKr`IOU6>x^2{_A`$L2wS-_Jw1`4k`C
z75fAx9NeD}`KayZe{hJK3|DYouDfnH!qMS>c7&q%Wzix1e`n4nz1`|8m_(ISt(fwP
zYNHSjhFr1DEFbPvm+Lzr&{}@{IxP6ft(z^1Gz+Y_ALjM>My9KLn3L?7d%IixNTs-1
zf~}UzHCOJQ3+WxCKKUj_(R}X7vLnQoes%GC>gD?k=-Zpp3%(t&^1ap9RZ6t5OxLF2
z?h>3tt^Co6_=#fDe!?Z3B96qM)y{;rVV*NX8>m9(5<vc*>ece%IgsH)p9Abn7oFR8
z4$`^qX`@%dS)aS#mOt{I-X6L>%mc?~sprjZfLquTSg3VB4W07cSHFAA?qf7MO`f;+
zq38?N35_t<;7b@bRv*mv2gBWMmklDtn%usR*8Mv=+njP3mRBMXp+gmb6ia7t8XWYs
zn9U!I5yYUj>kpRpr!%ps-zTuJDvLb5#H864@BC3m0SC{$jK+HbZYMR28q4x^a5BZF
z$2$B&x4~R74ZL=f*KEpIxLIy%*4~R{s8GA|rsv`Pr4Hr(e@(WaShQ2KB}g)Q^!|SQ
z+wU`IKI0P|7Qjab4j9E}&zo;bJu~=Z0m{5!!Lo5>LD2{85*LF~L=Tl%sxGG5jykN=
zcz^FL_{aX_gsS|c!{no<rD~%fH;r6M0aRlOne(Ualo^uJpK)ycrSe7B8<OeeqrNb?
zh0f(LePNPulNG6n<3>o_4B;zuuh@z0j$}fwfhQG@Dzp|cjRF?GWrp_9Dy@<_S)$xB
zQB1W*V?1<MzYTqLI}B+BYflsbN?zK5B~s)nPWN<LwFj_kjZGvF4rJ+!sA39q)_ZWK
zS4yf{QwY9~7o}=SDVlAHGI>gWB8+X4;=OhCy0tRc%^5JBPbCiT#~mdsQIV3GlYS9Q
zxAaTW!HZ<JkHE^M6-+ko3DJ3tTvaoR*@xslJmY~V5leLiK-+@~!)?B$R#wXTJdh2~
zXI?jEkd~NkK#dcU$t=B-X%?7Xq@Y^aUt8`+BwN3h^mxS8Wb;K+$YzXrYsF|X<UGl1
zb@`F1gK<F^6z3W?DwrH4lWIx%b=Ip*j$yXpCAC{2_7ck^>6o{@TAf*(){D;0qgqgJ
zyu9A4VHW{r`mY!ZW%JUAKVyf%qy<YV8!k~na|wx9BBH+L&w`?<t)Slt_&l)niD--~
z{}9904TZ<X5iSGkpW|}QyP(*Q47-kfy9_4ox(8igqAK2W<DK-qQS^IjYkDyH<aO)p
zz`<mCyp+KlC~u#1h%y1fX;vgL1X3>+$GDO;H>Y2?)JdJ{Qc6@2XQV;T;s6htDhsJt
z^hpL$)fSU5X!5i0BN(@SaMq{Z5WIvHMnJgD6X|;(Ud0aeCxb&!s>qE}d)e-ThY@J@
zUh)Gx6T?lCFQcN>%acT(Ih9;c)U%nrCm60Pv%*~>nQXV{JhT*BdmFvQPe;`~tEH~d
zSU%0chHKBbYR0zUY5-gEfALF-ob&#o4S9}qyu9_Ph?8BjO>}c?wie3fZ?yVq_B~su
z30HY=!8!|+b@OXkir1msxp=Bo8QUml*>G1{t&Xn|eQ1&R9TFbK-HB<HHq&g(3Q~_>
z|6hv~Z801PAu3EGy^-SV--PS6%xk(o?9GipYh|8t97w4DxFx>Pa9;3FB(N$-XG!tY
z@2E@QR?cpfEk7h7vS_mr@l8EyZ{<s*eumfq*faloRA@}WzB7sKEvb&DCM|g_P4gfk
zz(LwznC4?i1&2E=V(tLCxj|ijXUmc}(^TotG^#(W*BQfNzVEXixhLt>sY5~$?uJ&>
z?5D&Md*;;i%K>g{;%cS{XK=q;-`%o(31M~#OIDrE&;X9lmJKA>BIC!MuTy<g7}6!;
z*OF40sZ6VjTi}CC8x>NC>k2bhN2EF(ZUtH}gVP3+Z_(X!5l5G0B68cR?QsOb;u}_1
zIXtBSc@jNm4d%ItlDgqvQZdn~0!>*%Iy^Cvk$w58UEX0w+)xUbh^Eju^TY5|eNboa
zIKG(%?^%e#S|GR}BTds^XgsN&#3`lg+6#s{1mon#1R6UJ8d7MqoHymE?l=466_!(s
zg!$p~b{LV2`ri94UPrH~?5YD9BV{^DVk%3v&HE%HOR;0=6i%v?4zejx(ndI1bQfWx
zhu=y)6px=l5Or*xZwNFDaDCV;{y&KJ$;J`Iu>viJ4}+2n!f5Xl;+oT;5DaFzWp+V{
z!fP*U@o1fxDYEC1>ST^y(1@Yz3BczNr$z-@w_6BVk#9&0c=o%L;lqhUDselSO@G}U
z{7v&1-6Q`<2E_`!3(z77sf}sSIIffyFNkdS^%|7%xenByeb8*M{5OCKh-)3bnI2EQ
z!&OEXS+J|Em&p|eI@RYY!c4Vpt1wTgQR6EPKgnDpY@!~#j|<>H<q<9oS6M6MNx9#P
zL;1W=qDaJ}7lv?Pl3A>%nn+_Jm<V^JT9pkAF1<fI9e6xpY6BcCIfvF~C=oz`He8@i
zxKT*$f%`<jLF6eFM^~nNfKFdI-TtK&&Xy7oNuhdFS$LYliTipOZEq#teY7NRXJJLj
zT-iFJL2rbD`m^6l$JClSk{l(GLcMpkM&px>Smg82njH~d^mDGV;|S<b@YB)j1_?jl
zaAxth)N|o-{5VSzikGQFh+K32L|bYX+p!?k{09qlIv9bM#%u2&B#hz-iU}_~EkqGV
zOGDEJH2SoM*=;Xc1@wLJS<xUx5FPBqk7OU!1_7lNeaZaFsobiB>~-{iSj)?i&c&*g
zze^NA6I4gySj<Z&!Z8%U=xZCLO<j4`)Rdb7R@;nB5gC2&ED4=gHE87TP86lNMB)ET
z)PUo{I`Yfm1RPtE7Rtd=y6YcZ$M;GalYu#je#<hI_?z39kIdwKY~HH>e(j$w9Yjo^
zNL=Vhw)lm(6kwqvQ!pnvt=jVsna(f4{(W@XV%1&^S_VM=d#O2)y^tony=gyB$pIy_
z^0T<{)uam72b7w;QM{T#Yp0@cjLZ+(mRzx=(c?D%qD_80h|VyfDXtKcj!~KAAgrXt
zSBWnKrX$coMM(&L;Mu`AnnNJKgEHr#3DVp0g9OP|_66yOJp3e4Gh<>w1k(g~0=Q}A
zt*h4;pKmVxKW&GP0c62D82?v$h689!hW+w(IWjelD({LPts#zbnB6#mN&lLX&zo=e
zC~04xypQJjpBWY`boKMhQpFvrHya}p$FKuWaf}9+*l3l>qTvn-lCr!VCL-bT#oF+$
zxdhc#JT!^^sE7JmBOv2GM5m?TPqXiC2c#q5h#^4+s7An|Ifl&ek^6%y`sxEHb)1=p
zNcAxB%?NOiiI@|r)7j)O9zu#qwd7SQ^h)uPUnh+NP1xEcWB3$d=t1h0gJ?4c)8_pG
zai5ynI^B)_^#6jYW~ibHKy3vj7t<xwR{sHB>4sWMqRGhikMq=dDXUFq<JkvjC);tB
zr;XmxWFz~;orUyD**BK3-lnYFY^&5IgF`Ozm9{X^nNJ1Tt@sswtA|~9PQ-MikN+$z
z_3uD0qsJ0B<}3wA&1s!KxI>BJb5HjvEt!N69(U*mSw`bsOY6AQz29lpFFyYzT<0uJ
zL}iv>J^io6n%x`#Wif&T8bLnpi^4ILFem251Z)UoNB{+($X`rQERDu$Jx?dU(u?z&
z@*?5q{^GCwW_tM=RYNN9Cquyiy%7X&Z@^shh9MLF1&0qCoM7nQAA;y}$-aDt)#JgC
z?K_ovQeXG|tL6K_&&%)e9KT4aE_jUGuj${W7OY4_>$_Jr19Fb&uG-Q<e_gp2+zu6N
zxw?>=pDbFQzXGRq4gve<Z8Dw8UXV$X)8N_dr+-I8i2wPz&l9(Pp;#nl`ksMK+SYAJ
zZC{LCjC%5yW<9xx-bzs2znp*0ba)%tkd6~b>UEF^L)mAf#?H5|g7Fii?l=L{geAK4
zNa>Nn3kpXa!`Eai>gM|T_>~G1*In*eX43#UaHxl49R>-1K@)5RfSUMtN)HuqmIggz
zp#(97i;g}lJboVzFTp|`Je4iiQoS^adD&_<9}*vx&>E>Ts;3WY`h8yxS{(+yc_w=1
zK<S_c=b^uX@;2={s(?}7fdmov1u@QE?-ukz9J`sjS)s)fB&)Z9X8kV%1U=V=*-SRe
zP5h{FfcC+@1wqUjF$E#BkBXBE-hsZz{13zc^!~^~DNCy+c6M${Ub~Pqlui<HY`Iy~
zZcfPA7|%?t*!$`(+lvIOb4yL8G$BjH#tq>|8hX=^OG!9P=GI)*-!b9j$T>^HRb>U5
z&cD2pUj+>7^=aqpS-P)YngaM}UvyKl4EA)e5S=!-|FJml#<(HQvLaddktmjlbzj>2
zR#Q_|irwmJdRTaJ*HWELT=OvcY9d`V=$qGS&B$Ut_&ROe5F|;}Q?3wv!q^T1YC~FG
zU#gI)5K23@RieiuNJ14lVc#I4@KS-|kZFYT<sxP2nMKGqcpeX<<{lG8#%-;wj8oZ}
zBAJ^uy}1UGLC{y@xg81g0W{=ff2V5ucTT)Ri7ck+z5G%$VQ)Nwe(+0(4rFrL=4;z`
zMZZ6t%Dn0T#Qo0K*?foazb4^pQ1GRMC*>PX3>Do+<0;Ejbg0>Dy((85BXcS?FDh+{
zS59w#6l%;Sp)xqq;*-W#7+SkJ5B||1g|F#x<oUdR{?7jPJCVHd{z~OeomOVZ*|!4%
zX7-1o_b=_cU)%oudznk(VM8AL7UTXsvKJT3TKFT_EsG^b%v&h8caZvZ^=@R8C0US#
z?f37^7h}_f9{q?OxM@p1465@3%u}K-8K=x>#v+@O56=l+o;P(iFOM&kZb6UQWI~@C
zVO$;;>|-ZxLWkS!*~R7Lnf&1#8L^2B_Vr|F6GRQAL;3sjvWmYqk)mf)S^Nt5dYiX2
zWa3NGIOUy|ObIkL|7g#y;iy9kr9+m6vst>LhV{Ash{tqCG2l8d0}*wrS<}Z{z#-}7
zo?Aq%n;8*t%PjlswlK_D-{5YU?*X=`Ye*dUgZoTuA=4;iOE$CyOB{gf_05lhlMJbO
zwoCc`t^P9x^05pmx4jbc$Ng9l-`Aa%5=u*wFeRsxzO|S?1c>iz6LK`z8Vkn+F?xgk
z)8(?^eFG7Ak~bzrNsNdBk5i$9@<%#HQME(Uoz@H(kN<ghQYG%_@}K}5g?^GV%D>ex
zbdXss0QuewP1<otuD>CsP2dlswpp*Q$E4%hs8&2?`AD1WnkwZ{qkf>b8H_d*Mq*wX
z%jah+F2pYMCl5p&spm@cYE_e;noov!sk7lE(q+^Hh+gy}85U8y89Akx#GG*wd;Tf!
zqpRvj(1OQ9hTApnlc=FOn2m(&fJWEoMCaEVc^{m#NLM<L>zbQ}aj-mx09gZ!wnEn?
zs7dlu$U=D<l3(rxo~`}dbKmj|y~<z>{d&6oO1W#}^ZmSro=+-kxvfcAwh9QL@p-Hl
z5_Uysw6pl);~h%gi8;37eD!KFNLMz$RpJFCFVLRp*v<a6flrd*>{FH=KRE-6LUaCK
zgvcLnC|9Z*srPO8$IhNtvjte6HxaZibwx5|WtK#rk2U^=>DD?-2kvY#;d_T37%%ac
z!t1Tn=U#b#1;xF-`580}tiW5r97%1?yhY)aQ&<ihG8|*0<w298+0)=R3QzO{bf2Z>
z8WS@OU>E$y7#+9YBK-6|UjFoSvNPJrK%?^;KWFoKCip+T?6bLTXuSQyn%e0;&QbV&
z>#um-g6zr1(qA2IKZQ-Ps|=4UQ=Z6KJllx~R^a&Eknlh=#JDFy`9YkCe>1B5tybl2
z-Bidd+-6f*o#Vy&IgVVN+eiBK=j-TS<V$74)PawHf;qsI!uMR;_ypj6mG>r>`I4w0
zAY~S|$9*11LESlwEjv$#HXPC&wxHX>xGeOA@h|M@_<N`hW*Sc)30c5P3AM&>+mIv2
zT~j31`jmw^VT4*M@;*Masht3vjc2h5E|99M?2(J}%9?eYU@0CNJW}(VxTdPQgxw3G
z!q0<5OMTg~vK_SPv|{ECtMU))@kBxXe|qFA*v_q_p*b<cX(8?PI`Uoaa<odsN<oam
zzCb#?VLdw%RYW+Td8G&v;ioP{Xv56TPLX;WQSSjJ=y_P02ry4~^~Vc?+pcyCYMjz3
zC@3>Q?_Wa+MIu-sE%AY)zFY<uY+yp3IkL0X_`RyS{u?OOVk6Z?kA*N^uw>wyOvZA9
zOu2^+WM=Dk=PE|@H5j^zNNx&`-75NxLz=+~p(1P@J%@J%P6EzZ^tb1|n%3}#zJfi_
z+%ohuQk`C(Vam?JXBsoxRo!K;ZB09!qdx_7jPB?#Ok+Lv{PlO4L~PuNKkPIkeIbO5
z1QbTk1l!CrxK{>aMwwf4mf2@5R;Ut@&;}iqo3}#L9SK!GPwWus@y7!PZ(<l<&xi%C
zI{{ha$J9CFv#C8kpmOPa!6}UTQ<tG@IL8!ffOx1|8dIX#E++R`9rJln$P`j>j}$~_
z8uiYm3C^50k5hLXW9d(ms5%*hbz;Yun^&fzO6I}q($BxCVM#iI!(4?g1Rv~ar8Ztg
z7GMo1yTtsMAxnvQ-^c!6`sJmSJG4MJ<23iN4bOF_v*kvQj=cLM{qdQry@r$1?<3;p
zLal2u;(k;X%1(Ax(apeEnt~k55ol^*^bAg=s;#1(9IVQt<t-1i=+CRekLbSs(ozM%
zFW?@}^<kJk&iW*OyXx^tJx-lI&IX$P1ix;->qen_33fu-bEAi2!9}Izxr?1$94@hX
zg~Y!P!o*KG5H;fKcXupX<7EPr|4ZOxy1b_pw+h7}z684?j}YlHNeA`(pr8p_?ERH~
zar7dUe^A3Ct5s3M;>l#~D7ne!b0y^z%^2j*@M?xzyHS%NRE^>av5m;0BeIA7bfmP}
zKw9rsa^IsyZUsV8C<}#{%mS$R$44e5E6^2+*JSUj8dDqOKjmg8mm*IK4}_6L7O#Kg
zfLwqHYIcxs%g;%unqmN(i!$y3kLyp6<P4zjfaeMv>`Eu6*udh=eE$p+=sAi@LjV!=
zrBk5ZMlJINu~j34R<OyzQiIQUVU?mFDBo|)Ni4M#B}=ayGQ||!7FR80^`x#M1%8nN
zMuK7B43sbhj{O@@$x|Svf$5GqJpheFmF&3v)ob{RD4YW<f-++0l-X>bO~|DwjCP|l
zB7^$GCTm1F{LpB%p3-7t<y*`=>lTvcYCU!6d;R+;N3b?Yy=uFRU4Xrv<Aux;5>YA(
zKadAdv1ua}E5i<lqEvLk%#isDdiA|zdPi#BZvR$Yc4xPsXHx&vpBV_mT1^^1{*P*)
z-t)xX{@ASD*4~~W!1elPpO>_&OTX`xHkWFEYh<NJ{1>bPs__`DqmZ#JQTPZm;q2IM
zFx2Q+a6#DZK64oBVE%=d0Fz->I5~=%-wBt!2XjKyDR+zq#+RkKpBRN8$Xw<H&Ve9l
z!+T99iB0?5KB@Hc<beOngR+<9CJ%tm6z=h4HnZLJdg`0$E$5_}XuChT>5&e@XaNo=
z?`wJXOIL(r_#9n$#_>ohm%oth)svvow%#je3#;p~2KVqkbv(F(_XzWQKkxZ4NVMqy
zyq_8NDylzz@PED3SZsF}5B$rPi$yquwj@a#Kcei<@gLfTKGVWXLKy|P0gg8qf&yZm
zx)Mt?jYHh~o@INmZh;-1myGavNojtL3*H2k!Cs}p-&3;SEDPmWV8pKcDXzE(^bVbw
zmE)sY|BcfidTY<07n2D=snckt>ehzfpIhniSJdXUJ(izu;MyF@(Hkf&9RWiVPy=q$
zSt!Y&@>=cOZ*pgxHu4j@5`8n74FL&_;Y_@CUI_!p<o;G^H%H?OELO%vG?+<2lSZ<j
zGrl>p{?x)LtS^u7dN?bR0K;p!G!4&yq*PG-pyS$yNQ<Rkj5u1cW))Kipf)?kygi4v
zt@7i(okbH$SEi&8;LzuL-KunRWw`k@Inu{i1LuynX!aw?g2cDF9Vkjjnntm8?FF+G
zE4UC?+DB&3lAs0LRr;jn3GqZSJ(L!Z#IvU3!SuRW`AR5STn9NZex`qloN|2a3w{Nu
zt5oe&RCgv!3B22U&81Ei_`m6IAM;*&2Iy;a$W^%+MaOM;D&0F@9*LKiu2-_N7qO+M
z7zI91rJ-H7mvPR!`#V4);|L_Y`M&-VIG<?X${D}Kn&JuyLBbR74@Ex4pjEr^{}}!j
z%Zr;6ys$6erCH<wo~Xd4cfr7Ia16=rUq+&b=h1GBmKz+6oeFC|!rob7A%DTVOWjJB
z6D&PPV7hn`uMzOJnRc4oW8J4WoBwLB;En<~`j-IC_n`H-MLYx4BZhHe`PFE?AC3iY
zm#Wr1jw;iA`XI4p{(BH8WSl9^l&J&L>FPxq7Hf6`sSW(XA(wjY3~p}*O@qJq>qe92
zauS7on1U~}O&?YMA4tzVFZQo8`h2nXuY8Bjp6xgP;7^9|>~gpH-sxOj@R5QZHRNVV
z-}D^Q6MjG)he1V6pS+pl_v?Xa^}I1XVa&r+?;lah9bdRB+58jw^d5a4-3k9d5&vHg
zIeO$4gP*rTC_$SvN+GrkTW~u5Dd0D0B$YSGIb=A?N}==)tSa&CL3LeOG~0Rb%OQ6^
zjK(dQkO(|-?k|lJfol!S$)t{qID&pSvJ<ZwF*Ga7qbyGyI?OH&%#)A!l4PlPn>Dvv
zV<Sqm;i$C9*T_~_s+GDQ+o1fId{>@2t_|4m)rEhsV~g_h6TF|UY;l%3IbTS%5PD}e
zh4OdW*l4QU&@0*=au+m}Gok6<p1NB73ap+}23n^oy>^IlE!Bvlv?m8~I}N$-X2Q`i
z_(4-I^%A^OKhCIefnp8=&DFWt{5&Zl%;y%@n(|MPTH@ag{w$S_e?lOWIG-y)f5I@e
z$vz<(Du{MN2IAQ=+4URn=YcfU6(z}_jQhXz6IpD^Fy2OUZb^1|Kkl(kUknv=KiYPC
zE=`}b2?T8g{ht>g!wZ!*M}u|%>vT0kPAvgJIz@PaUM`I<y61lLmhB`{q_x#vf9$YF
z2pCV=UC+h8AF{7!e4n=@)|<P8bG~+wfm`J}I3h9<sP_z-fMK8FGWVcD{zce0uF@Fo
zG@IF`kTw(jy_>{%ktv(P#VvesLd;74i`k1vq2fhrp?VnbJ~f(!&e$sszRd+t2(ZMA
z_1RKb%D=$S%dCm=q?#!qB1+)BqI5PS#{PSgGL<e5@k;3c*d;6^X1(0(NIja&mH>xF
zJOCb6Qa>)$PxWhBLyjhB7357tSK&t|iU3y=tM^RLg-{Gq;XVJw{_F4cWHuKd(<ie=
zXJE74wSdgw=QKF9Z?;)dvZJjnqQA@8!tvaQHdX!UzU3~W1yv$?|KDv;WRqLW8x)io
zW8Pp$mP#Yu*%#lAKi4cw2hmJ-Q-JChLZH}U>E%`DyDY3rX_}o3F{)Mu7f7T_gDF{!
zAH|;WnZF3eSL=6G?OTP5vb&LOb#bytqou(V4EbB@l@)%gwn+nBXe8NOvHSOcP>h55
zCVOn;8$jU@e#}^QmnVyQ{Q}o?6KhuE_n9Xl<`BA_vz^e;F>&u<#t;0O!JT1d)2`A^
z91ysG1IRcqEbI_2GTE!mOtPO&m&M|1n?ACnrtEXjB8?)skUq$YO>RE41}yW;Zx@=T
zQS9f54>WF1`tTUcl{0lzuGqCC#d=L&!to~2KLdRP5}-$Z`UGMyYrI_1>W@e<iElsP
zw?j&63TBuWqQL~q{u!Yb&cp6~8f}MA(&mlNz3njS&Bz_3Muj@OK!mP?k=LkIb&PtG
z@1nd5V)!tec@mHn^)KSw_DD3J%o@bfa{xWQ^L%^bgq}YrGyNEtufUcTn{8;y^f?Qe
zt3S{<<^7)U=R7&zXppcUJG=uX>XS}q@4KGw^`6;&WI<W)r;EIvkJsrWFNvSs?^oWX
z{@<W1!f$|DZRZcz$Yg2gp8m$-ztu0@F-tG{_05g`&`k>sSN2)!VVFNIqbaDfxQa$j
zau#dsGaIfFQ~z;3!V8`Ys)nF6W%*(Cr|e>G2i4NQuV4MCt8Y9k);x`$wC3=1aQ{pD
zPy1(v=$NzDma-FhhP{#Bb(gWvH>3Zkd5$v@unap}z8-%FBGQ|Drq>Z??0$1|`irMS
zVz$Yxu7l$-_P_!(te)~cy?;yl3%YPUo<5uYKdzrftLH+gBHM8__s3a9%^W3>ztQKv
zbIjV#Q}2O$gY8|slfr_Z2d|)1CeG4twbVi4+JZgIpD+w~0-r|{`&xt}N+&-NUM7{H
z5UYsXrlYZel4Lelw5jp?8J>63g=Ryml9Y6^n&KAOVnmVD4;cWT@$*}f*<BZ3kF|b<
zS`iR_pi)t;e4a_czhp3id%rtBXL-}oZXnFYpwjx!$2(2Z^9U$OE*$&l{ni6$3C4f@
zvK|!s%io(bTsMbao7<UP%z7r*2J=pg@RK5%P=zEQ=-yx&L>|K8a!k;E!k{;$I4qr(
zmbO)*Mo){zT+SD~=k^JdHVxnDK+1Q`AXo;Sw`s$*oVrbn#YF}^jwdby`11Uj+_rM{
zcg<So<<EapApISSE%Nnt!&5n!QHHA>*17|+&CtOauI6<>e_D1=+<(*lkr8jTbJ9n+
z10mqZs{=!rbP*O-bAmyy@zprL$eRgGcEL`w78#l`=s9>AWkEB@4_2zvDf*YPu^u3Y
z&zNxiGM+9Aa=!PDKcek@vhQB;5l{S?KTq26EN<tHPgc*OKZ1Z$NAcU;QSbU6EiO~3
z-J<`|z1sM)w`+*>{XbnF&PxD$OG`mBMh{;+A0`MyJ})FdT9KFSz4cgRj6`ydp&lt<
z@bxzd>O8Xl#th2|oO8$nOC`xB3-b>1&j(=yT(?iwCvjrqxYjFQ<w#<IeF*l(^CN0!
zB)FZ;X-@eNqMj(Vb$MeUjHrdym2s6mrxV(tMt?{lakeAL*U{hNz9Q9KCvQ35cUW&*
z&)o_^p$K^e60x)MJzwlVVEguQ!xT^C6mJV<^k*v3jP5;Q{#okQL0QYkU&hbl>-pvG
zFS#>S71>vvnEO}!Y~LqtU|rAkb;x*q%(>+gB=~+YKj9fCKw4QhGi@LAuY&|Ru5V@*
zu-SvIM{vz76wGzS{Eza~`E)W>{p|MLgWxNRXh^_z|Bnl5)cN|GC!#UVf5ZS@$BYzj
zosPCYTbthiat<|jDrzGXrJP__jU}BHLYcqxCY`kgl8P{i>}`hn6^w`xUv6m<3i2C;
z8#uu2IaieD@drx&mvr)(mi<iMJP%AK9nc!{pIpw+Vt}wilDQ1RV9J&05=x&Ne4B36
zI||bq&K_L#8;Ki?>+i)6Vi##9ED&%wXh?cXWG*ho3uW2#GAb2SRmJHoDKCuMYmIN9
zYfZ=S2d^3(PJ^xW-jG}8^4$kph5Z(+Rmi^HsxDiT+g&6chgK6DwKCLjh1nd2gyM@X
z8eOF6bRaWRv@|)$LO_Y<lg8QQrgnGSunrF<D#d=57)Y4kbiOT?U_h`<dx=B9&zSa;
zXXm$A_Zqvr@W0vM76TTy9p=pNF_V+p4^!nAMMsG*UC&$l<j9P9_WtkdS>uP)spHNJ
zQm()BKi7oXUsE#6%B>)Y_}%E}QAS+T{1j5$NxDDo#!t&Dsv*EIG9<dLuKR+a-Xo5+
zk2%F8ENC~trEx%FfM67X*rOj?nWSs`zN1aC&#}ikdlrl-ic`l<d|r!Es%nB;f`Gd=
zeBi!K*sy5Ri5af+(&tTb?-%gvF^1G-_d|F*U&?+%#2#~BzKls0{ra3bJ}tj3=;!Z0
z0W5YXtNna^efiYx=W+(dY)OasX-ebuTk2a%O8a^D(c=V1X`}%kfnnZn?ECnrV`aau
zt8)v3Z@+~uZ)9998$Q9FeX>=XAFTdEs_y#3;P21-SDRilxq17iuLRfcgQUgj#~3m1
z<j?vw2m1<AQn0!XyTLAJ50>tqJ>Ty=WyS3weh&piw^)W~N#ln=829u(t=~((!S2@O
ztJpA@^QC1X{q@ERsCSsulK(2+5==jf#I5(b87+Iu-R==LVJJ}s9yr?9nFXZJ`4BW*
zcbDOU*^|$oYS{_deu=0(YsyU%_E=8N8K7C%fI2ATaDt4P<ty6ro~)#*Na?f@Mo+4c
zZYUE4d$qPkSD~3E+dI*;Ldf6ac2)V?ow->uxIB(<Qm58HE+mo5ou*|DeFEqj)mZ@I
zEQT@plf!x1R`Ik$=^>-~8`mLF5@_>PL9%AJQ&&N^@c$6E6MozBO7EjWyR@P89sCe|
zOHy_>bfTf9Ei<p#s+7OZTiVl(4&A{gs`SEjaoiv}x4IK&hSgq6PC)^Z;^DC_NFoRe
z<@%(tHCog_RgL{X_CRR5J&b;+=m+JJSzQrfCDRT!V}3XSr*~n8h|_f$lZ*{b;3DW+
zbL+8_;ixt=!AjsK(m)(*sRMGrGzNO)G{pAFv<*5tpFf8%$6vg#WU;B~XL`JcV&5OG
z{f4LcJ`rlXEeXDJzVE+1wTQPibxbB;nR+(f@5UML)6KKRfWZ;8Q$6J_T`gw6d0&@g
z3b9-Jp{v>4f1OJijzcUb1}R3Zdiq7L-}bI|H@Lr5d-}G~YVqu##13P*s(hc|+P~Nq
zUz07W{joLcOl|SDe6hk(RhOVfuPMU~@IePa{`}nkj8$&Y0WkJ_I&O6uvof~t(~KQE
zxjbJfB*lI;95P>}jL#ps^T}tr+Z>6t=!>=a0Is&sVo*$x{`&cED7d;-cs!P?HhMkM
zXf=7USLt<SVCuUHxSo4*`$`XdtoptCEz*>0H$|vdX$?l!oJnkYMU_m~Gf7Wm+7k@4
z*@0WkMj$qNznkf?xdJu&O^?NEfqBmjr*)w*ccR|N@}>K$%S_MP1;eCq_k#BM9BxR&
zMwdfx14E};1QmHrq~JGE;MwB(n2_IF$y?i7c3Fi8kHcoibR2LHR0W+}6TJx8!_2UA
z%@+Iaw{q~e0NF^RF3MNDv*v!FIYr_g^EsPauk(l!XG`jBlu%;H=ihrnH2b7JP`Gv8
zJ4V981ClcI(a`y&3hw7p_#3ZxnBD$hl=Y6t^Z&DjJFl&*@@mBUX+w`EUUIaV7!alV
zzNQgt={mVsU!b=5Ygt+|mfQl>X+iD1-n{<FYLyM)3?!9)WLrX6+Wa@LS>8x|J8PUJ
z5sKlKNjz;#%!^neEgFll1HbJT0Z9@Ih!%nl$dzO)7k|OFsfQ`SrfZ5T{sZ_Tu_kF$
z{@-znXDG_8xKcM~(raFiEV2Y>RD5g676^-x^qwo+z#@5IUsI-D;*q&`CmOBM>$5`Z
zOEihIOheIBqFJSEhZS=2<I0C$K%I_zY}<G$Hw9fOCd7OyUBZ|FPeN?a_tR(H9D=Q|
z0F*(-LmICg!~{fsO_<~YQevYT+BsDa#DsGJy_9qpXVdx;=gCEph7D5{cYeEsUT+mM
z3SsC8p>nwaXM38Y5ohSDMDR2G{h6p2dE*<T&jD_Jw9a+O2t0~_-`GXoa2P^G`cw|F
zd?)Q<(*dTND2;4++S>TdaoX^_!2RLVmT)uH8$mb6%RH0_jtzD?<>7qjbEw+sxu)BW
zPZx;sNRA@^Y**}YbQS0Pspq=sLFj+(_Dz^Bn3t^J?)-hVY5BSvOAxb}|7A&ve6kgt
z6Yo9J1A^u_?E?s*=ec;Xmu=xgPHWfRZjfM5=*J`sai<`h=T`uic6<LaL8$x=fJ$#<
z)7b?R9r%wO`=7#Yzuqj@qhQZuDlq4f2P5+0hlCl>#wK6j2UbP!q|_S4jHI#q@EL4T
znK^>cKIW3aH<l)X-!W$N?bm)4_%9=`^QW+|U1D_gP6x?pI<Q<9Tb9qlEQin}xUsb-
zAg-Gl&7khSN&&lsK&PtZYf6g|qcyh}LdXf7My1FcoRlBGQ9*Fp4tIot!%_*H9Z;=y
zYJ2>NMbFj^p<V$Dl`0!0MAn2|Yyc%6<I3|o&48W&s9%ix(AtVhne=0h8+98(ccJfk
zc>jX=t#@X(d;fxrMI9Rp@eZ<l=qYNBhKn(xXCObKE-!H2So3NdJcAq=k8aN+9e+C^
zAH7>Py?Ia8g3lVSI~=_4g?Kq%s3cauf}gbYq^Q9zb%ThiZUC_~=z^=!BU7Su0i`=q
zk}nhg$*p>dIq13@*C4qJ77{}E3X~C+{ZZ4a?%fKuXpTZ(?a|Of*V>Y?oW7IB$vaX(
zB(SuO8!Rz7H(CqGbU#P1-BNQ(M#lQC)D=P>_{={BBDWa*Uu6hq{6Rinr~Sh{kye<+
zay;boq!gTth&i1sH|(H}u&G`IUmeFdjTDaN-dt?AHfwm1JB<ZzfhNt}7_<*fsOD>d
z9^hM_Ah$$<dHn>}_vTN8;?SK>mZZSeVYey<t@Li7!1^Tcpl8Sb;aI8DE+sb!+KKh!
zHh=chV}*cs566v7hwIIU(Ca-0d)dy<`^bs!Asxw^(ui=m0PnG<`p4DieXTjq1%H@_
zPORO=cRRmcy0GZ*$B%iWBjne}G|%;=s{i2Ix4`QXc6u2L)F;Ynsrl4-Fm+E3G_w@m
zw|as|0pINB*$+4`CY_9gCEx3`T|@BcA1KtGUw-bBJ@y}4IM;Drl(xu2ieXDbf6LxO
z{+osc0t9FQWUjr5d|`<1NYL9n`eU*`ZM6fL#RKukjm4F3&RJWiE7i9xzx=DRcTYI7
zLPoVBel*e!N-9}fQyvt!j_EfEDpmxtZ>TnxGxtX~sw(RCk5`m?0&6pxs{+NA3k$4y
zioI{T50B2c0$6|<@x3Y4>%f4QOD0$vUv-kY7cJ_@H(U@D%Gnh77MH1A3^r=0{dni5
zvL-e8Om3W8*P@z__cO^qDy{H2OC?%>%D)q~9{#2)g5}B$D}f=C*goJ)$D2C)nuHtr
zUIitE5nZfNaJ;GdZq4Xa{@5k9)q=3fpO(4&utL$b|4{nC=J#xVDyquZ`V;)_H3$au
zgyaa<+lycQEh*T<WmMN(Do{j=_ri*0$2UL2!7hs$?xCea8{@0=Ux(NkqF56)WmaXY
zDMdfS-fZQ1>y8u~r002h4<+&wGSBv;u-E9>dW%g4^=_%G^F$YQPBoqV%TZTyLg+b&
z?aoEnyUnZ%|A^NE&5C>p*asMkJ3kM^M&G?&`7B;4+!O7#<!#<=I8R_-r670vyxO@e
z5=`F^@$<U|y{?Ay0)=(Q%`2X6pNHRPvsHM{L~Kdd8g(MupAFB~J3b7<uF<YOuW5!0
z1=^fvf)?1@-A0sQ{~mnezhYlq_N%h4Il|;iinoWpIyPGrtKWqLs$7t5cUVO`Kd;8Q
zw|!A+JZw1$xSayjHkbi-o6vXTJ?|>F_4`-j)XTOg{NHPYXD2JusxA6cuUA19{nvuZ
zHbp}jO)#+HdkVRx-rjhR7pp=3p5LF;rZgRLy=_~B^F*(?C^>^H5Kxvb!WYaa6HIA;
z1U*9<73L~djoJO8k4LFXonnzNw$KjCHj{A8C)6SRT>u@Oj2kIcHZj1GyC$8BJ}F#w
zZeNmNAhqQp&$nurJwTCGwGCo)cyV%UEL*tB6LI8ZfzABn*J5jp+~@5<Ycp7^rlW31
zePP<V8a#6AyXbC(Awt|jz15kPX*vg?w-XQ$peH`)`=;pW$?f1iv=-qk6#*K;*uac6
zT2g)G-1;*|Z%{C;Y2_q8o1%TcD9Y`F-P>E6Z}VQ0vG3;!4efuvGd(pe^F$NP78guJ
zZ(icP;kkkpPygDjGGzU*E6WD3@p|W4^FhPLL_MEZ)yYX^jI%>cdH%Y!MXh9ndjh6!
z-mpg3*JltFFlni)Qufy!4G*9{iSKRBQANjwd`9If?!(Z7<;@f7slNOM?Ajs;k>?%b
z1fgEU686*N8N+Z4o=d3OTmCKYMAPi~6cZXw0bPS><IZ}!1dEa3C3_0XoZlWT_8wdN
zmo4*+ao1gWg~i9qxUEh1b<}IE+krhX|3e-<dap3YCF?s4n_zqHDi!>!{K-*`uk2=r
z`~DyGtx1WkZvtSXD;`pXZ}VmtF2K4(+VuZ#wM1BbOHM-mE9NCOXXXmHsx2T<fW=`I
zOO-1q;6reH&wVx9MYR1jVYSxn4PB$bmhAk>r`xs%!TRIdeE1RAyeu_;zJHB5tgv{$
zBG5_R=vS}u=$YXS_$lUN8hgd}bQ*J__x+{*cp+|_BXE)A&?~Us>GNy(@tiP_Bf-gI
zKgaHmcN#EXpHE*;0i!Lj{|{8dk)8)0nqmVVVqceE-U^h7ZiBJ(gp_5ZQDRqZUm<IV
zzl`b7ZP1bnOXZ$|KwDvJz#;1$u3iN3j=Lwp{CRoy&nccg7a5|xpH2Fh2Rgx=1aOhZ
z5~H}G;7#wi`J`$RfV>^0D@S#wIklchP8;7;paDob;b3WB%~CqKQ{Fkzs>NhXZTYEH
z#=ZF5*}Eh~XntSy7@koW(^czSEt!|UzRG#HDM4+}3J8i!Mv%+D*l4QU{;!J%BpK}F
zo)o#z*e{xj7yL2kuaS6qJg)4QWH$NfuE2v$3YJRh<fZuBBhqp^K4>u78ta>R+rW`u
zUM_vM+MzyD&H&kvnB@i5p4xm-yeTK4aepOrQ1x~#=J}vg&4>6SbrT9x@2U`JfHeLo
z_BfiTWSa7^f-eZE;idvlK1tRxEzOJ(^c|qbX{wO@+xo23WhtBOXs%8LeX)H~hi;S8
zf=l=hD)`_Zs>Nz(3K+x~EFVj7Q49ezcmTFw4!DOkcwSjfyJ3rNbEnUp7)8Mk4q_3t
z&U!rOR^b+gfOE;bagV9?(JWfCZ`}dX8r#)hK--Yu$4<})Qye+=gR2X1@G;sJiLd^H
z-D+f*KjK(BV8V(_-{4Hw+m0?5JE14DS${jnc@z4V_lo=7d(8Q}bM<<z1_Lwe?J#Ar
z6GQ6pxW2&dP~+FwSJJgWNO-uQXU|_C8$Md!Kd?#n=a$1F2(T`=v>>~-sZV-+csl3a
zwgvH@gDm#%x%V1#zg8duCz%;DO8X>;zTS?8)^X(|@c1^~Q}|ANw)X_Qxlhj?K3}AG
zzubXtmVT?c&wo7&ntffM@zk0^BAx&WZr!g(2g0W!`<X!0wuiqyYQDeharsP`{J*`o
z3k1Ipr~QINIP8pUmTzkc68lr;G(s?M<-9(;dP?rU6;|JeJ#|%I_iIxB$&PXqfKMbf
z&n!`F(?iaFBD~KAZgxiiXA%z;%&cbe42m}moH;ExNg)&cU{j#X5WwJqgbeXm(`xtZ
z5JZX$jrL0Do0f?91#-Y_F?1ZKUq5dBvYmll$aliGll{rg?V9DTV}SS6eU`W0v+H#m
zXymFJnC<SSUBW)(Sz5KGKkpmp{0TcjPfQEKbYJM<8`*>yQ4UnRFp-qt<N#T$p6#j%
zdxd#P=1p@SNxT0vX*;Y^EMwwwee7tVH2qCKjvzlQ_*|XASmRp7x<tjj4LMB3(wXoY
zYgXU9&<yZ)36qHIG?GMW_w|*|zAeD$xvnQ3rSZ*V%clIx874UY^+=#z*qpWSll+Mn
z{VeMa%b-v@j)-ukvRzF01sx20trCxcPoZ%ExHkUG<X@}HhsUb2>?jh6Qx)sSW(0&j
z^g9$^?_)n)zZY1<J+}9!f}WZC`x`oK-meR+jB>G9M{WyV7b33*EFE4j#N{#2T#l7f
zEZmL3hNqoU)^xjOf;PNI9>U5>Sfco^&CJq<j?gv6v?=4^nB%Og&f9|aE@jbI-r-aT
z9Z;Km&ELiSQVTU(3efHY#y)3K_?$d5bW7M~mm`a_%>=|%=5^P9CsC7#JmX;FONPDk
z@pgoyc*iGCFirRk_e8ZCE$T{!W4`|?42R-P+!C%)-TYlH!g!Gs%$fq5mX@dkd2s4H
zx&iAn>`<_?I<5!0Mm?0e)rx1im8tzNUf0X0;I%$K6yp$Y=RfC5>7<R!c-}s&7$O4g
z{lC)g-4*Ns;-;G7KDi0u>6W(xW*JP@al!&pJM|X7SQXNm60toRVn^SW-x-VZ=}u;7
ziQSC^8l6}$#PC>I`8oL#$MXv*V?1#LyPa54O|^A>42bdtW_i-AC31B=X2o2VG|lHD
zd)~9B)D{{PlR}q&IB85{h4E*Ek?IyCv=GgEr$`Lt;+~Qq(_CQ-y-f+>4>FCQeXx1E
z2;&qXv$Vy+(^Z)diOoTO43Ca1il@V69%nf-=nA}NSfPp2*RDs@I8?Ak^)$SPJ{079
zbP#%myxNkVBnBZI9F&C`WVyZC5H&<6iwN>r;Qcg=8q{gv!QAdrG=I0D2XwA&mY!dm
zMCU-o)t~O!Y0Oi$y<RmxrTFdAF05{j)9-6pci4$Zp3J-Wh!JoHw?d-?1wrgUc-?hR
z=!0LVw9`%~9!K{E%_8t|;X}{BP*5dS;H}B7DH~&^Rh?GoZK|1*pUDDbNz{jb+u~v8
z+h1-dAR`GDpI<qs$J#unG`Xj24+jda_Ti0h++X^eO@xM?KSF5Wu56k{id{;wc_UUR
zz|^9sn86)B)*f8+DRaDCtx4*Cn-RHBTpm8b7c0w*bK%v@T0(3F?n{Gp(?M||<!`0)
zgdV$Gj;%wwxWypCpn*HgI?$cuN=7CjV%Y?MatUI-fb+WW{oP?_EWzf3XO2T|yo@G%
zt!wt#LF_D-3;YW6e7!qdm}5zaQKz(oc)#bse?+=-Wx?W;3ZjxgQ!#pPd$LyDM9Ci1
z?=0>sVCvrzCgf&|)mqoG+-9C0FHX1JnBj;`4@VXh$kEnbx7b!3Kz9BfwB1<Y5j;*z
zd&QQsptE?(R?zNM7|3L_D;O%Kt+;DqVO`=sbm{gq!((UD5ASd2hhv?uBjqilgVX!^
zPz<$P6l5jh?M#f!FU$n+!g0Z3S4b0a|Mp(&ydP0ixBLEJEwjlI9T;Hbb0SX`8|6hN
z0+$a9J(k<6cT7kGCZkyIfQXUAwAQg?pd5B@qlzH9-;H-P&;#)obq;aGAelUATAoYP
z29)1W)HZzQ*WB>|Zp8Na>UyH@^I`qxqF<iP+!wUp-1Xylv8|MOy`#`c=FWcBS*5nF
z0DCRg)cclp^l;PdD{qHiuOQ!zGygQE{^8h~r*=yTuL}t>(ZLWu)u}4s;^UdyM!Ib6
zN`=}cN_dI76o9X#PZ4O+xzg%Ufl~rlQbd<;m85Qr5Nz_Z0ULyd|4agCquPt{0{vNE
zCS@UB>U#M<uxSXs!qef+9WLO6O{-G5K=CZVM(RkxiWfYRiqBPEsyfws-mPlvEZ2Kc
zq>%XeQM^L~s@<k6E~$+fufLYT-7M+>y6?{G*?252=ZPZ8DyyhmOPH~CtKHyAB?k4z
z-sBa+076SMY9$ltR%H2^8R9Dj$)2C*Uu5wGHV>r$GJ)?Rj1AzwW1b;RK7mOyn}SCO
zgM>%*L28PcnixDS>u~%zw+9{hQ6QZKli-DePcUG9dp_N>TZdczbcZr&xgund3k@Zj
z7fGJs_q?8(3iZhH>CfSo)1#K2SNd37{s_)zd$)R6;~Zx=tDHH?e{dH5QQJX;tBB%?
z$QC_qf5@~sW}Y{r+Xa7NwQxAhr#H0v-+&SlcE_sGwf>E)-${l>Qvc+g04^#47fbz*
z2?+_eq*{QBWBIw-NRr*Wd&8-W2i4s7DsQ1`lLz@0dyo}xo*o{^HF_?v$zoFQ&wM3L
z-ad=643QLit>rn-h}XNSk!FsXDUCaQ$EtdvDU5~Oy7&0o3Xci}`4&e70Yy}?B^*u8
zifrn5;vk$D(UibX0KcDR6aSEwf=y}vZ{+KgJ@VbxE`Q@wvFC;cCY$wQo^<c<OGJ3|
z29u*|PC@<uc>ySDHU&n2Rbe4->hyj{{f>+pznw;<;Ld?iQO<d)j>6>Rq|Z%Vkl{&K
z`vcdQF=b?l4*y_OOG#KFLNS%Hz@T5?si=4{+GWj3_gvUU89_pd`v+Gh%eR4%YrFIT
zruolH9*43w)1qDQfrplvbe=`GO}nb4QTuq;`ykb^<Uce!c=*6Tg@2SsBmiJY<$=K?
zdyLY?aVP&=Wu!x?<d7X3#ddoEIT~$XzhOBqvA(`3okhfR?II{vaFj}W?9~1~Q{xQW
zXbL}~e}TTrT2~$~Xt@|-3)puc_j!K1X;ngLs~bPbi`G<(UH-?pBM3#KAAXh;8z3d{
zqm`R9C}tQ`Pr%oD$wAqbB}9N7;i>{@WUFGEd?zuz`||lSAk@z#jNU(%{%zqPDpsob
zN`ECBHvt(YforSbv!j++dFgDmnm{JeNW1g!FFgMu7^j{MjQQS{YSs08)aH}423Qw6
zkb*~vr9VvI>|Of#fy3u^!FBUPc<PE1tTw^^D8pN8gu9(*#ZkD6yEoT3z*A}47=}m{
z#eAn`Lqzy4fC;RodUF93jKJ;k;B8`7GT01;L4=t7rvmWW2@Y9JSy7)u4E32PocV&>
z&49qZvd=@5$~x<QM2%eiymNE>Djj(WSAkNWSUKCo<nK~azug~N4u`TCY<bamco~+`
z?}Lq&+xIZ6dss*_fwT<8tdxyPBF1P6=^Tk~&-^7qKPd=p?Dz963=TfmX^)-X55hNQ
zRzwpi6pj~pi9)-V&$c?82<0+a{@~(fo=#BDTRu)vCfS=EWnWh5Bt^?(R!rL*9ffnI
z!_fzlQi)8WrIOPBqV&}F#!D6}7~M@SIW2x=eVu@{RbgYBEu@}*DgH7nl9`Yl2JB@X
zO&_pQHY={q$O3<EpYh@RjV~7Okp2!Pw`>e3UI4^naVI<6uAN|>SHg)Zu3eGCII|OD
zOVhYWS)DdZt)E?kRG-}9)_fMtZo;#Q<g%KDSsn}pH6Hh0W`5?`m(ngGrX*g^;`1}k
zN$U1M`3Osdhrec(9WMg2=>Ao6-`V8aPMmELeq*{o`eDa+ANWIogx^s8s$z_^^Z9NC
zr~Mtx@>F@vTqWNV+2!YKL3`P+q2F2P@uO(`-)dlj+*cP2c-pS4g=W*Octd8|M6oi}
zCW%Ak?7j=!EulO|Prt`o)wJ4O(w%uVqqx68zXL4Ez2Gz|jFrQH*SvCtX5)rAo4H0~
zq(>m|Xsxi?Q>h{GCPDA4bqiSWJTB0L0{FOLMxIVrz1yV<G8WgB_&qnicR=5E6}~o?
zPDT@hfHx`C<A?y5$mAkHt^t?4FreTy_Vnh+`1WQUURP?pBM3WMy67}gM7D^3t}f!U
z1>sgYUeB%HN{#K1-QAw&8t=^=##bD90Fl)~t$p!Qp#Ia`DJR%x+~Uw9S%f0Q6y2y_
zG(YP>MGAASWBJ(!-@_WR`b6=IA4I;5_%F42P6~ZTR%EDxke&R7;&$|6LixQ3ck1a*
zN@BkkfVW8?RJ+y#SmXOP1nGKft+zX6C9g)Y8XmJ4&U{f3287b78O=YA9!t0PCsfMO
z?v@WT=F=Y)R7H^Z4qid}$cbj+hqHGzEl?mjq<k464+>(UN%frlFqu*}6y8)0#|j?t
z{s${T)V?-QV#lE#jsyDU0W{*{$HeBVYZa!|T0DlGEVPS>P7*olcjHH|rF{|!LVuh{
zQNq3+D7ES@$N}($yvDw|(!h&e40aApve`J`%mfS=#GZNEtetgxwPm{)ti46sI#9j7
zt@7&0#EWj)*fGT48r;VZ?t2V2M*f^_9sQGV7X2@5+0{YVsB!QYJoL~(T^lb;o-`2C
z)23|0q^y~jBhKuoGg}w00i4X}>1$vM5;bjFHFke`$&K9E-OI8@ua;f~^_JKUXv$Pz
zUNviLsLY_^j9&>@Egadvlym&~h7&L%K1kckFcJ*Jf9hW&V(wcjfnE(%^1620;6Bo)
z3QgcRL=q56Ft}yM5PxguFzp#SND8XQ{292m`9h|WtK`d7lE=;4ziTN{;5=K~5$nOH
z@BQJ)!sYDIT|aibne5=T;16@{ZK7*Gb3Jv=?WNA{9-4N+3?4hy*63wHMg}F+FUULG
zkGex=Cc#5h2As*rI<NkXcuO1_AaewI2x@eA>_~XbrTvmV<ZuT@C_L9ZW$O5I*DAUB
z>uH&s19!Y-^np6Sd+&JXJ88j!g_P7o=Yl~XdtKBU(2yQtCyDf;K2;UIZNp<mHiSSx
z-6fbESypx@dD~!~()6RU2<^B=$Y^5_hUmiCnmh)5-;^|BNN|_K2Vo~XHY|`!<(k8b
z(+SXYvLptz`9bR7qX)UExtW$M`J8bg<)l5JBwy>vK==&TUEfs9o-vG8a(x@|1KQJn
zT*ouzUELGge!`mud8iMQIH)7)CJl0#J?#_uPX!WS!~4>JCzW}v-qdsKtlKSe4BDWK
zwY3>Md$TsAGk#kJ^cwBh{Sf`&z|X2pkdP5WPQifXQktHn3jFr{=&@>9)Fzv?b0<&9
z?pjEhQr%kvOQ>wQm2A+knLHiKb*-LE($pq-ZeM#Bcg_DqZ5*E4%Pr$uYw1;-<$xX4
z!($zvsK`J&R()U{yyblk5pm&^9KnKv0f4|v!ZBlv#J{n_b%B=~bkeeG*7R}HX{T8r
zCr6=GGk3aXpjscWt(xK6R%PwpCc)p1A>Mxf4`|;*Pw2)AJ&NU^0L)I)_;Iyf@8N?#
z=X<vA@Hz0{2sAuu#dhw<6GD2dnR_D9sbkw+>jJ(Ca5vw&iaWb|xuZ5^%+oHIUcI_C
z9f?^whh%DYfE)2?H_;ysjN!>-gwIIjT+r_W4)+~s03Hn}oN434?Lxndh&CST7(Xb>
zU^^r7qxQsLDb8+k{6^Y|EeXw)D_8K?u`Tq{%P)ogK)r-7kiEx%*Drc|PJ_Ns&Ui$+
zq)hlhPDbf4aOZ<$!=JGLZ4)ap^S%w_7Wq&08iL>qJ><z~E8Qq>XK&_PAx^3+D>EoK
z`oS-UK7kIPxKpj`kCSiqAxyheyZp?v&+r+ipH5v}bATpRv;KRWTOVXL3+||2LDA?v
z=^^l*$~?t9{082VPml#Ef1n;1v>lzON7V(k=WHkO!Q|;h{wQ;;{zv6)w1Z5YUagH3
zC$T*7)T!t4<yT!@do4S#m*wyRo!x_7xLc~zGh|1uY@Xawz23d=fdl-|qyJ71K{_-%
z3s=_i$q82vJ^BmY`=f*IoLb$mcsI_%$;lUxR9Q1$Kq6%g`eZz=-o(jKq<D<!-5WLc
z-X|AdN1fe0+%dP8JGy(gWn3#STedXF9poCZ7x7b9kD>;#qCg)os&rxOFHG@fywUJs
zymerWgD(Dx;6!7=G6ZDJh$vD-L2%#NwbXptY1PJyTEJFY3orz0^Qxe4aHzJ;TXq3e
zGkONR+LOn3@Ba}G|M+K?Soxss0@9g1$;Wr_7ktn5?^^OjOPDOFQh2S-@<G;ZNU<V8
zo(6NW4nU`iasA&$*tNTnzk2%`>YD$z)Y;ubo!vd$+1<nK7tElRmT?&e2U>CZ3kD2<
z33<(g@<}jMH*k*_azPb3KjkvRUk>zv1~B2uf#bA$HiTfmDST(-LD2|?<N6=3W#o}O
zDCNqa@upU#T1o0+KZ*D^zxgena>^-m=h{0nd;k$=hk2f?xri&zcMO<SudYU{YpO~<
z3I5noQO)RppOGQx&i51b;Pr3yLC&HJk6hDrHW;fPsA2z*Pi!xXGsT40Tb4fP#p<OP
z_OO)uLcfl#s{${+_#&Tu)>(AXg%|Si*N(d`nEnw2sa{9Cme?j47aptlA8B<Sp)Uz;
zM&M83X8o`+5qL;&hH`iHpfiCdHfksOSZNxWwwI;;wC>cAxycsk>ECnCIhQZ1&FI1S
zx|i+stxT#^Z_{=Ru}sQr8ys@8d)o%~(YJOE)4%L}lz#Zg&#HBK_6AM!;Z_NgA3pdC
zsvUv0Q71+$ubsVel^lEeTJ|p6fvd-qO8OKD3N_iX1cn=R^M=j<ZrI4z{?qlfwRzpW
z+)<6iW5?G5Js9s2nK~h+`r@1(NNg!$j@eDTAW^iJ0&cqDBCB+dR&tkIm(c%><S-(A
z4(0H^wN-7#ki0!L01euvi><QbN4I%bPZ!l1fhxd@JA-KJzz~0L&m*+|z|X3Klr3rU
z!;p7R^62SNDtB#!-LRH_N1qZT2M;U`)#+c{oT2C7R!<)QT&e%H)oZA0-rrKk++OaO
z+e@9@z1%ssSB^kS4HOMrVUjqw3>d|EsBg$Q*DyF@+=x#fST9@)T)5K0hk+d1cKl)Q
zl23xG=)^d|asK0RopJUc?Gy9hgNoF!y-vKGq01EbA!epIbGmq1dwas0l?}8K-g14&
z%NPQ^dUX^HA^2cM-fD_w=$!c##Dmj21FL!7kp{{-(nMX=)uZ+)28l`8puhBk!Ju>E
z-f3G|{hjE{^$+VKCSu@cGH^0y7f3;0O=Zll9Y0PNUU(s&efHV(yWjoJ=&O~)zysS0
z*m0vq9l855DwC);DGNPGZA*JW5xvlkE1d0LlrQQd#UQqt1b$Y{=vjUA*ObzBSTIY<
z^*Jk3)Jx81d;es0&Y5~1T{ipb>Wx`7xl)bE+XiIwg^anjK~geg*je?}va4#n{kM1S
zr+*uM+%`*A=ha*Gi`rVfTEb*WVdj@iX*!e*mYPg+;>j2s4k3`hPgAR40%o1{s|AbK
z{?ihwf;;Ny?y1)3)e<HzUAC0f+vQ`ZU=OLEaQX^?Tw+6RJWpsbv#imJ&ec4kQ@UMZ
z#8l`=22d&BlTPIZirmvM5p!Q(A2pwPD%-1A+u5T*o#pZ&+x=s+eHI+zj-Y+I#^8H<
z4$uz{{G2pl<D+(F?vEdPlJ5ETcQr+dY|7}<piB}Y!~1@m{d2kT<T$jAnv+L!^4(=?
z4ZgANF8cKKH&I7-FLlh7PY-u=_fqHFUYb^$(Q^S7$dJW(<3L{zWKLK0$|U$eXCta~
zV2fUj@UjD|clm}HS6|vzQYruB1}H+=;9rmf3_8H4af*X7c{&X3`0r7saS+Y%9X++H
z?|7p?zjkl`@O~<af({%w5M`dJgZ+`7!Y>wgAbRlM13l}v6KNfcRec3PJ6m@;qgt8#
z44%l;)iJzlH%1%;SqF3Lx?uwP69WL034{)r{;JTb`${YwT;1<f&)Gpld4%9G>LG_2
zO4>?gtg<1VGpCErIQ?{b=GkXXsAI>Us@W=qa;S>HXR3EkKjnb}K7Bw_XAD!FVm%F$
zoeY7#5C;0GtUYhlSMa6z@^~%C%=2EqErD8;oAfKnK=ABv;mb^&dLCVN)ishBxi*m^
zN1(~%i7c%eus3S8BTM(`xUFmGtNJnt^R2;Q-u?Zb@Q;4-v)V?DgFkm0C~b|Nr6tqx
zQ#UcntX?%%Z?L6M7R1R|yV1Yq-2gPJYhPV;2hU&lDXu11sG}C>Rl!~ljUC^{%Wk|;
z<(ic_X97U4L&Z=q3LP7brj>~go@mz==wTC4sUdhs08~}5D&9F{0L;FA&S;$hxchy5
zYpJ$IZ%9wau-CA)>EUfKoxBCs>}`Q0jtWrO4zAg}?UnD&2Oj2q4;|72m493%a@@TA
zyOuOjUbEf})5wr~QKy0>bqc0Txocwx7VWjIOcUSur4>B)<A2AU-96M%ZNBL2?x{@|
z*MdEscD|g9QODu&Nb(oVB#x{e7;`!bcoX{KF!D|#I1k2w`1cw-v~}mOATW{O%=g(n
zO2JnSyxXM;;~9qxvaK((7%ZgaLc6Zs3FQF&)BmPSnL_jC&jVV_QKlxYtbKbYBjO6S
zp7ynVAAR7hrSdopdK;-NqgVT20FD^-I)pz^QzeqfN{T>tyr}FU*~>eXp|%W6<a{Iv
z?nGvQcIc;F^YZhusu%*kkYAIPwe96yE3stB5^ip4rpFE*L>)o9Qr{qy4p129xpopv
zgtAqyQE#4heAxALELhc6LEgc>16QD1Gc||B04l;VktgSS?JxLDxESTDzRh!qeogyB
zQC@(Bh&T8*JJBNla5bY>oprlS1GU<BTR$&r_iC?cB?X$EXaxrzY{B|FWSP}o-nMg?
z|K<CS@DG3T@BHwia(afHjA0om?A%&7)dJqEZG>F6mhnPo^B@C;?zXLV@2*<2R(97?
zN4Ji_;ni&~wTx@!8*f~ejB6@i95=FKXQi(&Uic5%tK3JG8hivWg)?R`5U89gnh@rw
zc!sYy?idKcQ0f_C09`Z+VyaHYIPFxzBha?Ulfe#q4O?3;Pz(OHz!b9X0+Kv?0x)^~
zi$JS(6Ybdb5Iwl>r}{*(W&3wYUb)I^R(opLs8hs!cjIv>l1+P~1#)+9a%KAN-bmkA
zcNcx>mRso`m)t~M^Zu5rnLCzLDxI}iJ(gL$&bd9@e*O$<X&ImBLGh)(%~8dm!<2>&
zgxvo^0??b&HOyS(a3mlGKx=8!vjIK~CJy|8HUQmSb1i^hbpA0qb5GOZ(#y`@4{ZmB
z$qxHyob_zNj4T%fI+@#d;?=8H@t85E@X@13eUOLF#ww<>Mv0tFRx!YEytzRN`&vK9
zLl9+U;2Mu#gRBF8kxy#}>3AF@^3TYd{eRF-q~Wm^=(_qY5QQ=}07RWQx=z*!FG25!
zQ;f+_UNJCUziu6m8a0aUzkgR!H#&k8XY77UCDPW|`a_PX;44HVDnPI2pu;3)^V-)o
zb#R3Kn&G5)!g@N&x<32gs51?|;$WZn9t`ra8(;?+8Mu1dEXoAkN<G}BJ^^Jh^_+9*
z^4V8cOQLLyt&PQ15LeCaZG%}qSyp8yXUJyC>Xq(*<i+)G+rBlpkMDo*0PTDDe^sw;
zA9IHeNY)BFgkYoXyoH>!l3!1fBg-aA8OP<7?N?WQlW+XeO8(^H>#9kXo+_PLZSzHE
zcWvzLtd>x9%<ZMxuG^)6+e!oIU!r|eM(#m3W)IQ4ypKZih+`M%!INV~xke0~Pc)Xq
zAR;)kpb{Zi{V-yqE1<sGu3HVn1R%2ZPS@$l>)RcWsT+3x=v1==d4u+vSMmVil=IeV
z{lEizAEgcb--apPyZQDz@8Yj~Z8d-8YpeL?TW_Zox2~qId~G$~eA{aJ%GXx$id$FH
z&9|+l6}R0^H{W(Uef}%A&~;01;_Ghw0)2MrP5gI@uH%ni`;RpDZ)!7loi#vF$J}1-
zoLl{t@70q;X9c#7xxF;){24U1Wqe}Hx!*a%SGdLR03iI=21g1y(n`V6S)ldYz6W^U
zlgE<w5xCFq+rz_89RuJSO$%5A(7C?2n-=Wl`>g>FC0MWeK-i#{O^}-(P?JF-@CCMj
z0mq4)fA+fT5AjPczs#qcatf_py~<h<JNI_xbgs5p&mZLV7RxZuuGg2EM1mhd1StXF
zIgw?qolr(}>t>eHK*6=FdI5~9?63sL!PUvoVn++E8#{IMiTE^jlc2`gNd|jWc>^8t
zp9B@IZ@YKzrct9u^M(!Uo$f=xrR@uTTt7pfKy^NBNpzC-L-kk>n>LCtUIT`pAAvp#
zUIO3h;XuOy_ZfXSIr?_lv1MHX8NpxU!}XohJ^-&6Xn-sbqXv!CJjmLz_K5kMsprz=
zS6!oHV{NRg#?2jakin1!f|k=(j!Co07(LlaU+GrMuLdxKhP|QNvHM3fxcdh-(NfL8
zeeL!&R2zd=@mIdKidWorJKcQiD!%!)+v(=7t>&9=yPa0tb~~-OZ8d%6)>VA{@-Ops
z%a-$JZ~Ov%_Qo&J-~9cj>2I$6H0xwaZD|w)ch$0~+Pb{jIz3%R)k7`g+E@cU98Xks
zVZ03XjJSZ=2fOdbr-(gJnb&s#s7XMBNJL`>$Cm?P=om1UF+|T4^vWBAGlaEk*HZJT
zr)o--E!7mT1ZWoINf0QnVr#pA1dy`xXDbANdS)&rfgJR}+%mA27c5#z9T05Qrf_>S
zabhh%>y=lnk_v^Zclp)KT&;fX9e=M}lQLCs*CTXln=fkZNuWnkXWIEQxFrO7nNNi^
z0H0#XbOHJd;ESLQItK^pXC=(x9DCtDYAOq!vhtAOOdwj7J9>C0H<u+(UU5k20`p4u
zg##B;QIu4a1s6p@Wl?ZZl+?cINr%fLKc2~DS=K&9QT;8see+Y9!N%x6|G=F*Yvwd+
zYiQ)Q2~%is|9%L{YUQ5avsTJb+r-JdsDGFu9ijcg)AOk)3Mz_{%d()dD7h#KE-HTZ
zyux(k$$83aQIu4cC6#4SD_<7;;4#yM8>GR3pgqo?KaVC)o+6%uMOSqPpmd<sfW-Wc
z^B3lioXuwK*h0BDu=;CGDMHBi*U=5UkS`abjXM5_d<}LsA)MCpWgbM@429p=UywK9
z_v8T$`hZ=?$sH9Egh>!tLJXMj4?4FF9DMXqZf<Vk&n@{J)F-yGLYEx<&==rcJCKYI
zu0M6<4HzK*H(&!lAg3sZ`aGn381JsF3_cP+XciE7^m5Dc?*asqccNp@zv%|s^s>T>
zUNku#tG`pHo=cZsbv4Y;RqNkn@}+uxs~a=4%w9dRbW8Q-4brhdfH$P+(eMqMZ0cCs
zKd9qnhm40Zo=R|LnJH>xX19*FRb87rsm52CozqWe^;)(=K04WguW@VXRmP5Q<r|kR
zOW+kBhR{U4-_H2}iq&kK&fySkqWToBvKkDK0|%2Bs1QfPR4@ewP6+V)b?uZoh1zC}
zrqfO%T-0d`JNIgC9?8>V`F-|UFju|e#b8d?4af!$dCHJu)MScz#}F@Ad_xs{Rl!<K
z>5OaWs+qWIXKWShSuj{V8T8t$UF``$z{m3LUjjsF4_@Kce%As$Y8g8|HxL0B{L@4j
zSX?~-PNWw<203z-Gi8ra*Mw#+i;^a<JmgtaeIMgF6PmfKg24ov@OfhS6l!RmNt^on
zc~gHsZ{EC_`ZxE}15X|`&Y9`Z@+s8Nd@*m@w23$MZ{q&`P2At#PY*u*3RPB^$nD4@
zE2*(8`Qn8uY3Boj{Dp<JGfo%pJFIjM|9AyA6a~**xPo^+u#<0EFpG<_phf$SBu<%#
znT{T)+TTq5{r%kEzlk?*-b~A9wQ)n!Og_d;bo2mk+SJeeoBK)s_V@GhS*_gAG?QNm
zI!S{9Z%+pf9H6o+czAff)2o|G0Quqo;^Ylji8e0Z!9<}7y8+P68fn=$ps~A7cDYX5
z5Iki32V%kc;M+A;>-eMS^Bg_vj|&tDWdJq;Q5w=oWI)#I*j7$=>3uYV5ZvfJ^YM&z
z0ZY$5^9-MU#u+?k&K&ghPM&r95%eVX7GxZ0kzF@^LkB}}o7%6VNAL_9`#8dH(_~^-
z`G8Ku7{)sEkEk2p&y38psnC{`7g18IpU}<g*MMt92xx14f_@p1YK<Ptney_+3=b-h
z$r#D0CmSR+sMFa!OV1*cH!`uZRrB;!fnGI^uj$_b<6t#*R%2<0Y?P3R5}AS1z^$hW
z*mP0`mPW}NHG4f<Et9I&<JoxMDdTfB?vEYU#><v1b9!@PbAA_~V7|ici?*Gaq&UF<
z9x;m;D3Dg2rx8!YH*2f`;lzL|GqooM2V@q<8w@eisalD?zO~eR>Z$sUU)SErQ-K9%
znizSD<l2)dWmzy96Fo{EAUQvGK+f>1&d{ya>@8S)162UP_w}SRb{e?VfKdZkHA5%C
z-dxLrCp&0$)^4soLD+1dyv~)`zv>C3V{Q+(pC1w?r_Lllvx*MDIW^M}d3{CwQ>=pk
z2Oq)@E}BNoXU?a|4FyeE`8c#|fA=h!M$MDv(Ue9jL%<h$puzT5Zl1gy`1IJRMq9pb
zS}Qe8*$#cf{s-(<rRKCYQ0w$fjI{c%xR@`V_kfn~YHj4U>6@I)H(jY^Fg74GX(zX%
z`*>nQBd<Pm#HvKzjt$eq#s*$>=!h9j)T6T;a<rzkPop_qT|qDsj2NvL<OF-vKt=}E
z<S7+xJR@I}lgyF<69G%+$gD&7$F~vjn8;b-ZM=xD4SumM4JT)Z^W3Zo`QKn>#<y=+
zWD9+S=D;6k<fWy&e6%b+|J%d6zn9a&i@*CFopsh(bkRi@(edNQp&a6%Y7YV&^Yu~Y
zh$<C6$OOM9{25IxhjNDd@;ePG@u9%A>oBA`tBVU~NBGz23S~;!-!8yPG2-iFKV-$~
z>Cy+89-Gd;W00C)2W+00r%pYWF1zY#owd`~w~!}KH#x#udD&$vOQvM@PS(!rQEIYI
zPuJYTTE4-3)VFznIxV29CRg<BSD2BLfXpUZ;Eh<d?!DUNI2T^acFP;IUK#I6#%&m%
z^-WvL_%>d)bXkh8h))kTz(Hy^qLs8t7MD=Wt`&9z0GkU49H<Z+00?NtfsE5@Xjsue
zBOsjtF>~!?j8j?P-w#UCWOzNRQ^mSDgXA3CtrEyVo*&ztE9?0z=_8)5A%I)B_yz$E
z3AkjV1Wy0TVaJ*dB`)ZcV6j`CDypZ13VaeU!gm2M%mDUO=~c#aPKVinC+B>~$9*{+
zxB(-A4|L>jGaWg!iW?i-_<<uwd0JyhQ*L>p8vhK~M-HvxhQ>B};P6qN)=<#o6^{dN
zLeqF()Y?ds7XFy|*b#pG&{KSjN&iQF7PmFhqy-0<j~$^W4n0lB^q!w3(9f}9D$9cA
zA3AK8W0_ZmsVGaHf9M6}DY3FxC-#AuZ<^N1lNas@;`H+TLVGJsS-8hJTyyR@JN5VO
zT)URXoHB-gd-$-^`ABw-7)S$yjNa?nu<w`FPi2x~Q%h4umQcp}V?6&JyeQ`7FAlhY
zSzn(FWoeM;WDhb#)-tjV0ZDGaR{FqGD5rgqvbpx8oh%LjqsNaQrwcC~j{BVe03ZNK
zL_t)%h|fOjY<}^D7udBCXxKFrn^U~$7sn1^8AP7wCXp9jH@Q)42U!?tOsga3yi5c3
zD$+TeAU|3>U?2p)b##On1=#^s35i3nK&~j@6L?O@XgNS;Mkdt}Xe5&;wnoptcGaLx
zU+uygK0OzA$i`w>+gAmM+jJb>Yr){a5U=SUu(5EizNRIc!HY9`@P^HnPw9-E1Z*;<
z>Y8|XRV%w}JL9BG)lM~|hx%vKN7nxH*iF7C*z=gHF5v^Tl_^|h4<2O}ESMal8W@<d
zMX=OkQb;CGTG7BbHH5Wm`yjoFz4zBm7y9aTNO#xT?j6j?T?K{$PTja+DOa`)3=!<q
z)hCk$i?3%3?sR4kX7F^K0O6}xTbI|XGjyFUXcO@D%7^q-ugnVK)NySVk!lH($E6^0
z4#oxJ86YM40$sDxiF(tzNkA#!d!DB^HS(3!+PP_sB~4j*DA0PIrZ+dx75z^UGgEs*
z$&*)Fpy$H3>e`gXf|}c>abr<(S(a25jXZ1NYI+6x%}i4o3Tm2GD_0aH6-6UmvT!vY
z4gOj_uROhgin8R*!~Ha~eKI#UG|<FJlX=0N52{R#J-v|1vgH2ZO+2%G3N<%2(8NiT
zX~DV&!;Ff^EoqCN+c%HP#xwcXigR(VV#mbK@1IX)!<qDJl`hCPV;gqQjQpjSUgnmu
zV|nF@6^VT-Ys!Fh5$)8s>F|`p2=d{&?aR5k8UAzqA&&&)DRT|6i0w-s0v*EJzCUT3
zu05rf@Ez<f8yrEMWcDR@4+jqII{b<QMF=9JOsxh6f6QH7bLjNb&!A_Xc_xvQ@SN*U
zPF_m18e>8i15YWx$+!@LnYuwC$_wxpXI#=57?4HM7ZPnG`nEPA{*tz|FE)Nc8RRY4
zj>$gMM_v-0SepdAE3Hf)ePjZ^D;-XqdLCUi`x=&DY^%I#mCP4|b|Qu(L)N8JRUo%b
z%IND}OvSQSci+Y(SX&16a$o-d%--n|DXL!GR_ojCx=yHQnzCwgMc=&H1dLAL==%Cz
zSqsRzPTtnp>zetNajmsHdMa11hk7&1UZ<#;6ko}MnZ#`YKiD?T=&=GK?+D>L02Qxj
z17?JI(6Mrs7<JCbgQ51V?W3ksPh)(NkQ_Xija!o-<2ic*$SM%r2CsIvN<gQ_wg??t
zFe+fKHe=|*PkndaEm6M(c=D0iJV~&q3p?$J0Rg4EemeYXVLxkF{g#Bu9uNi|HEwb@
z6Yz*9f#*H|6+!_WN^la;9y8P0SrfQz`Yj5;X^kc6MvLlm=d20bI%B00Yi}%g^2$RV
z;DRwCW`2Ph8yacStVML_$>*7m9ijdG%c-#}xcv*mI_MG|=ElZGo-}JQKmOEn%*S4!
z;r^Sru`IcL`F@YdN(M(BzmkixpytL_TDWQx?-_o8?_55I%Ch83?tF@vnT|YhB^5=%
zO^vO*;P!snGrWh_eW8oWvY<=WK81sy%E3Eg;#o}%JmdB!D7gprHmkXTXRLl)^=Ps%
z;{xhIUS>-R7B1v>zT=(Fese)$c4j447K4q%wgqSbV`&E|+CPL4=$Y!b<7Majr7Rfa
zwXE_+t}ajk0@9se3w44Elv&n}va%OBaGoym&ZvF)s|6_E9w)y|2i9jHx@5@`YHDug
zg9i`#U@${}#K73MEB|R3N0Sg%_3%bPr|ECUY@I;V(HsF^?!jtA3~Ki<j`Q|J?!nCS
z>;mAbW@0~N!LpP_o+3UKy=>*#=n5_0FOxHtRZ1jd2=UZ&&ZEn(x&~+3G$qPbnYF9d
z*U6gqE!6=9c5;<vyl}67CBTFHdwv)1UheB3)XfncI@2a^%4`Bg#^X+%h>;U5<dthL
z>5{6s_^MWeNDJ_4?dUQrxJRAcy)<@wD=%BR3?&ctW;Tw#+3PHG-T44dH{jl|s5V(6
z>u2;b1cD(zBPpno-@!2I&OS&7h&`~t?PHsLYx=n9)Ke`F9-NMWL7yF<yjR!W={mjv
zc*R@YlUY7o94b!_+i(hba33vPbc1b>sDe6OtSPT#{f-}d+ORcyvXE1PK-*v;0iXa)
z*751CA^_gpp4t&;E#pTBu2aWhm`Tg%AXj%VLx;iURO~J@5kJ3k9+!=i>CiE&JFTJM
zDYrbK<IAsi&Zn|r3P16RVW+*Zq$w+(fWSXs$zj!;)t)OSa?x<6VaVz_d_8!@L@F95
znQ^FXFdcq!4i`m1Gq*qK@V9-|1S%V*5i`?~r{+*ulyvd-rzn)+vSC`_HOQEWpWAaK
z7mXA7NVEm$*YgivK}ADaCfb7z0Cn19W_tYb$Ehq!e(=EuQ@b=FIa?O$YL4vdAwDob
z!x^8EKDiktZ6%gJAx#*tfRJ)0a0VLL;0G{bGGIqI>4&z$c3)+au#*NDI>_U5Q=NXM
z_84@6zg<}i*l?iF^lAP2^*n0SXxhDNcV^H)4l@B6r+V@=pr-3fUOu_<rVc0vEelup
z%jvqVPfN?7PEpU9pbun`muu{62G78~U>@3J!Ia&B_=_W7`5=|jHbP$#oCAQdTy@s1
zrYY02ZDCWREvwq68!EOA+Q9~L=Ddutwz;yZ3(K)&yq3VRuYW*KsOaprvA4s$#_f?M
zQMOA~H%`ig3(Vx{CdyuY^QNzZt2Ae}`J#I3rpvB+sAYT`-FV}TXj_&1J*JZ}Q!$6A
zKs^wY0b3(x|3Hc3vHc$cy^5e$ykpn_$T5i3yy03W>l#=BxQroH9iwX3?Wy`Sfaloy
zR4cI4N4ID1)r}hRWU&Pof@)@O1E9Sku3q^L4$;Eet6L4^I=Xc&0KBq=**i?5Vq3p$
zd$;Y@B?#bbSFXOk)wO#vn@F-oZ|vA{@CE{)5{w_gkvi(s5rPNGIXHCyl)1mZYeFsk
zNm)?!;j%2LC<-pif*&|WJUnM2mr|xEYAH~PTKbW)C}__s!D-dQ5ivitxt)r#K`~^G
z(hs9gZEmNsY*fCH&aq#wrm`q__4BVd1AS^!I~PT5|I#bZ-%e#w(5mN-q7Bef{nMx@
z3wA~e@)LVlG@*$mTr!w9`0BH0ViQleWRR_%X%xsi2b>O|*5-`q)9H#UuVgpy5&QCL
z{??~l5GYs}>EX@uOo1lw@A~b1Mbve4Xz2j%>L<L#hZEO77Q3*1QA$Jm0owI5Wcn8|
zi|oYyWO$10B9^sWpcQSi5|ClS>(BM4lEbcDyJ^(uQM7*j28y&WkjVxI@tW{lUzXMr
zhpjxO>h=?)9cMON02J^X33-~J7lu}{SVcLo)ywq*`wBr@b%AjP5(9u}qjhDYB8<UY
z;upefXv(vnJxt|)&eZeh^4V82X1>t%cGVhqIZIxbQVkCIGI|=7t-;ex8@5}QB*n@$
z&8auUYc~&Q#)=MoizbH)=<8Hnk7pArwoXr9+3LD^c>5-6<25CVuD92nz4|t;YJ2Rs
zHmY9Tx`0a|m|zXi73@)U#~kXXw&H_xuW#aNMh~67Yn%dO=n&nt2t;QZfwni$I-Sl;
zMOugY`ueEp)Kg)Lw&b|mr%w~Qlc!n(fI0JOV6sGwx?T@9ZrDuU5IkYX;?RAxaMATT
z)oVHP<ke~q06{ib=qp&4d=b~?bwG+03l!mOTX=Hlfa&F09=+*2wq-mxn|h8?4BC}}
zQBxg+m%r+}(rOqSJtRzbuRL{t_6-m7@bED2A0DRR{lhe=q2x2?_tWt3Fdbv2V^98=
zhlls^J}lE%(3$f$)9~;<J{ou-Vm|!%JZ@`i<Kbi87&gsp<Hpu`%GQy`=W}aoEAKz%
z<*;dHD>t^zOB`^G_hUS<v7{O6o_3D4e`XsuG+j~gag--C6g*?yQ%>gn7q?Mk(-mxx
zO?7bW$RL+x$;*HJiW;_9vB>V&3-?i3lys8>k|5@&UkSK`5!F_3)|>k`)2LCS=r_Ol
zZ5@1o)2PF{@k;T&C|`MTb%dYfI>IkLcqDC*YYpiJKa)I_IE;FpLU|Wxxa)RL+sx`1
z6i`2C$p<D;W`;@1()0cHGDzf~@zK^Drh|_iq~_*kTC!w`$}sSRb-a#%UMiD7!w-4s
zxMO-T*^tS~1#O@U&kFEhMv(?zF|f&CBPZ`TW}=TI)o#$~?;WtE_G6u`1nhz^uS*wT
zc>Wx3C|k!H(jjcv%Wdj8=h9`fuht2Ytpk2dot}O%fD<mV7Ei`xe{IVSdrhmedIP%i
zR@d-t8yKR#{sGN@Co^-nw$7G6*@j7(D5;i25iX6=qeV5Fg)GOC$roH&rD;|qg9dkW
z_mJk%L#YLQ=X8L2Gn|ReRF6Q;^qM|Urur&;yy<~U4p0UvZ!7@H0DcE1GeGy<I+9~J
zX9P@Z`qpsMX{Qlx!`4$WAbYkh_S~`8O&!Z-4GHdW4S@u5TlEP7cl``$lE(#$ZqNmv
z7NF^LujJU1G%50$waTT}Yg54PeZMXUh2)H|jzHG`=|WSP>Fc5P^QW_}(Myb*%pEvq
z<sF6p=(8a!7Ti4>fXrJk0U{_2-1?`zp{#b)Ds^Q+=(IN$47+Z%`k|W^a@U;s%zT6{
zZfl^XNtf`Zoe%KvzMZ^c;U!#_C9OR00x))%FK%t5rZX?$%{%wd@c#SgmW7v4Srl~3
zffp2Khn6p(uC967{^P4>a#1$Z!quC2cz6%3UUUf;Mac{IJTHv$p;{SUxVoQ)_wC`;
zi!Y(FD0snxzgF9P{H6um)ivMA<f%>5xGbCKmEde8a3E%Ws(%_6WiuZ`y{V-}o2zG&
zBHP-%<HwKF*s)`I`4^VwY>ZV2>Wt)~r|)o+3F>n6jPLYXrY_Jxc%}ChgD}wReeHVc
zi^Q+R`v#m74E*T7L_fy0zn-C2w{E>M1a^|`6DMut{3_}VuRZh3vwX(sr_-FSIqdMI
zSdgmV$6ffCX(Q^(_~uG!Bb7l61liZcjB%2F$>A^~o3xEA_E73b+l`fg8;1)gie%;o
z%ej6zTl4MUZwy993TzWuJG`5Z&)F@ryt=)ndb2j9M~muuc{l@is|IhfEUFrR2ko`3
zt;gG|vw>T5gC%6jsK)QUO*`~tC<yi-2c8~4V4E-Cym+^Jw!2p+TWoWOjkS<J4^y*P
zDmBQXcjGeKjFIR_$6~M=#EGb((p@r%VukZIqp$`WC*lH#`QR&SsCmP5g96fk4&^{;
zc7jF{43Sd0Yx`=OF)$e03RA%{dxr^<HKFpLECQ{zg4;Q{ED4t-IK;$`8uV4bT)5~4
z*hy>26m6Exk}10xK78j7$EV1VXBrU7tews9LH2KVDh74T)mOL95ty!12c)_SfD^qj
z8aEE6LH{`D;{fU%rFSmV8VjDh@(FA+IudSgEP09sdIt8v_BJlc#u`tDf6NQ6n8{~O
zXr+dRW}e(WlQs=M&k27=9-)O-%%n3XwsAvaGf!!sNt=eB1EXW!+1^HF+2HuNcjbI)
zpFDvY8=Gm;<mt3(5CYGtPuo|{=k_TRsiCon&zwAiZolsk7&+5@?QK*P4NhjO&ur%A
ziOU@w{Fj;O_A{HQc|r`x)X}S*psw{g7&rtUOhmkB@nW7hae@h2_3!Z!2Yc`^iTwkB
z)Ue?<W4T=5VeEOFxWCYU#C1|02qHg-=Nyhfc%HX9L4}h|ERULXb-<3mfkR~{e;&Dr
zbuG#v2?!X-k-yGNzkBgTI{U1%_`(Y>q~ot12Ogv-;weAqdp`1IfZ?3pw62p}PQFmL
zUXX-xtTT%i>sdG9UL3#t;0yY4GEew5^7+1^)=Y=ce^)mb$T>P}rE@w!eUXe4UT3at
zQmJSu;@S~tmtA#@EtS&Os`iFWH(S6MY<cr+W-mGaR*x^0v@3WNTCILx{|<&(H%*=l
zuUq}=SUjA-CSqg^XS`+`H}Iqk&5;W;fW7+4xN~j~w~TM2rAwDNxo2^qh=}@+IQCYH
zIQH=s&~SLKl_-!lST_5Hd_@4T0|hpsfPi~uK(6Bsph@s2b=2&L`_`=CrqfQvSvY%g
z7=T5ec%&HsPG0e9Vq|^yZwDyrHOcHPvwYQJ(uIp|uq@h^KhLImEqSB7>$juPG(mE5
zY?@`>?$+5leA2LES~M7}{cb;hI=74+@0IL7C|CH7cuJgM;v5pkV$??ftF@JJ%ti-j
zc#L@dWadlpkpX=AsbN$55X>zJK(rk66AjPd)CXYj*Y#O>ufwYu6B<9t99ckml`I^;
zNW&^V{mWl+S(LPM=OF8#mD)140rboU;ih3j?xpzA;#!AXeeI*uyC1S_z)5lF`<&<u
z=w$*q1HJL?upVqcWg4(=`eN^dgDkQ0h)cL&IQ3Won)a6*iwwmwHsA^nAAjvNy6~cl
z=&ZBPCdidX9&--iA=rr+_Ikuw>RfqW$M}mf)!zu35!y}u&EYX(&JCx=Q)tV|qOu*%
z1PF+C!7cmph}jY3Bmt{aN7lwObv@mBGI98f&c^dxyK>Id^Z2sa*N_Hzurqec4mr^R
z4l00+lDN4-H(lsS8oC*>%6_rWcI3hV34NOeB+!#QwKgdtvv-gh#nP<knmWml;g(-v
z;Hb-|;Peg4prI#W>F!=V8AIcwfKvh)n_|Lvk_Lxv+)~&$%m$rH`?Z3F=ffL}W3mD?
zHej5a69|p_>#@T*M=G$QSkHvArf&^5pL&|@)X_}a)n<%pb4D$7ia*v&r<ra20NeDi
zrC`xB^$?62K<?#*i*7Il>nl~w;R8poKrjefvvpI2<>}E~LVBzk9GPajaOJ*EQ&+og
zYcqOIhU|o?28tkZUI}#I1}d)`t?Zm#09euvgk(&{lOHgG9}i^^6p?-&LugEtt>XsH
z;5h396$y4FSh4{y*aOHphj051vWRU6|Kw!k^a7Ua+K<8I%$YN3)+Lvqp9#DeUNQqH
z0eyc@wB|~sHts%da8+W;OX`E-?+pETIqFqtBp8nYjOpF0NCj}>89zZ13K08HF=8DS
znI>|#zJNW{nXS@+0R#CQZo1}l(dlQL&M{Y>>p#{Z$ETOA8@NPW!Yilr-8kXfGMmrT
zi!4C>+`x(*j`kj9;?&{*jo3o-bPapmCvr6GC44%1u6?s7^g~YWMhkH#z99P$g?3@G
z)XoQen6M44Jay{1EP3?&Or1}SqT}g+&C1D`E9>bk$1UdJ8?yYhviu58xa#ZQ;b!4%
zQpN9*h4XJ=ojh)W?6o&$kaQXI<+;NVY?&6U@vDvZW5>7A(%KPdmCSP(v+)JTk`P=w
zUrg+69kG(rzhGUk3a@TW=?o3vkMKJ_NP6Q^M8|spKw3Tz!rYTeZAR}jI}Sx=;Hq_Z
zmQp31jgy_Zy35v0I}hosAg=4v*S+w4!J?&>dq);<%C1-o)HI)7$e(9BboHKX*wD3m
zusyuf0zKK*ExUfWv%81e&!0{*qlYr1j1HWfod*3=1}NUtnfN~EZ^g4Xx^ZAV;ot}~
z@M*tZy*eM`E%rYnj}f1UMF!>(M;w6cdxc{+P>7v@Xwd#fYCrVf>xQB&a=tF{_U+&1
z(W6K4FMst*CofeKU<e0B)FW3m?va+4gOf$YLpGqwVJYxlPexA8*#TU6^75e2u$Q63
z3kGZmZIM^73FX%Z0U2G}NUnUx;2il-UKn&De2@Vm!D5i}^-Hd&rlux(^x#3pHgZ1N
z^XheDuD&k6b^GD;CHzbIOk2TL{C$)+AtW+=LB5G%Ik4TNZ=QEx*Ysd?rF`PMD%v5S
z2U$XEh9$k@gKB2)AEgPED$rqophJHSBfeyi(K%Dk<IAtQMvpbK2^9I*S+$rp#h;2H
zn<FJh9$eS5mi|nF$E^cH)VF!if-YV6ZnJFuEgDXwKtklXJusG9(56eQTyo_exNrGv
zJAiJ>_*OmZ*5Sq3B0Jq7&H+q`y_j$Ch;SIo`3(+7pe2nZMw|hGG)Mrngb@ekWH!UD
zXAC>EM?}1~Z!I;QcA86WtZVgP3Ru?ZZNc>bRUoJtwk07lEcld@G~jqNcT&cd9Yefu
z@lsp3DFK_FU)zgk=h;EZE^iO)qLuXp?)Vi87HutnreKlH82aSWe!=uwdX-d1=CBe2
z_xg5qBQO)khAz;?s!#{&g)**e1yEwHr}MN=h{|}Ml9G;|>!*4!io99%9OhjxVPXz}
zojgdP0aIEZ^nv0x9&=BIu^;(|DC0-?d-c^<dBTK={JABcgMJ!K?6(W$>fu1-WoSwq
zmLL2^2=<j-(G4@wMV>rAq<672K8=$820Vg}a{P?+$;cz^i|B!oF9P1GyNW@|U)Mfc
zIg^L{hfdyO5Pdl_(}wlyY1F9Ew0rmNEWZ(hBR*&WV0@d*QAfsWeqd5vORHd;YD*Xf
zi4KFDogM@pCIf3TVC#hX1Y5FeCNq?Q(RbJ64@I5SrK_ETerNib)dA=S1J6`ODOL?;
zd0Ct@^<27a_SHIuZj&=@t5c@zlq%a)p#k53ZIs+nr9QJY_qN_o^4Z#(xqTWK*7E3K
z{yaUBOlIwH;siHA!WgP!H|d&sI}t+<Kae$k_!dtSGs~y8>z0--TRI}1yj?lPM?407
z7>3a=xQD(vST5jMYDDJhG^_@kf=jC;oy*ejV6?y1Wi8uRJL?u^;q2gKdxC&>{*ps4
z9K|9ZsUvF#<f%f>%ax4Y8Yot4^ycEM8*HS|#h`k08EmA09X~b|EbshbSFM25C04en
zWqU2m9dmoB{el_XGIqRo7AiLHM9_hHJ-~NDwTPonfdr#WxNZY$)IGKpo@hsQTnT@{
zc<`Iz35^Jh0-PB%<uR;nMywj|K7gs?Xk%Xy&(KR8FhscN!;i@tyhL6H`ZMU3nXX@Q
zJx!P}kzaf5HS3QIx*2SEKjCQA)0-=3JZByXQs2WWo1EN1rxp|VAixJ!tk)1{DE2g<
zP4y0S6PbqA>fiu~s;q^9qzocMV;}Z^pj^Z#$PRrf5%1o;n?{cw#p~9sH(6N&+4g-u
z$k9$_f}EbRa!7@Y?FaiK=u)a1ybvJ-G#qA3TYydAGbcMQ8}uTIqdGdYwga97mw`7G
z9MTJ+Sjv-PKk%6dE$w5yzD7R~=uE9<^dx<XY>JeWWj5I&XWkCMvM5WkEMu#!@q@8k
zvT8_>C&A<n*o<L`jcx4JGv#%&1n#=kg9aou3go4Q4IFYR2Ao~rt;?@4A+wIzW5>5?
zdX*@BO7xktcR%JPm<jsz*9ALDMeR=W=-D8Yg2(~ct_%Ad8pnUh|4f0em=?1!%hQ3`
zF;2{D`uez8jzGg5w>GV-Q^Wcs;7-Y~wRx61&!<+gTzmU;L8$?DFE3bhz3sZiCj{Mw
z-J`(M89X~e1&&(L9Y7Q}abS{1I7C@@+TvQh_6ufkT%*T{PR-%zUzN5w&gg`JM$|2d
zPSA%Zby4?904jlFv35LA@vqzs0Yb_b0N-c^9uemW_6ZCW?-5W7#v7e&#`)&@6%7+@
zMw%Cyi4nm_>Sc?+Q2NmJFMs(<9zAL_Z{PmySl>oeXX|#)2gz2~@dbK9d6~|gcnECY
zWRM0Qfo{|vU^>-xCRj3@xIWgwN8}?nSQ`D{7hS)NUvq#6mEhz7b9OJtAMDr3L||F{
zfAHWzZfa_#&n@|!<IkFo^o+$U9&+u2+?)&&{-Yj(taA6<{ge*kiS!y^*W^rTIcP5z
z9Hsm~faVnCg1EE~DHcq?b>!;!@$KXSOwTJ~(dZdAqOQP(L$Jc61!-#SWDMI?J7BM2
zbtf$Zb~aY;)n!&&bo|8x$&m7Fz{YQR9W24(n*IUHou|v8Y-UczQ#gMfvR~M#RCY|M
z1dF(-!)EhbfM{t~@a%eO8Q)6FZd_(DH;$`-N5o``4R6C<uPGkD0KhMjw#8iK(W^7a
z%YOjsI-t#6M>>Q+OUv4`QKo)okngJndZbgnau#j15OmY_Jv3+j0{+a>FY~Q^Tj-we
ze&6NS)2ZVDo2ipPZ>ye)VNVe*)k?L-Z{gyl5_GW!UJe}kWWn$xA$fh+ufJ0e>X9zC
zPS4KT1K{dknKf*`U<QwE8IMAaj?nM`UMP8LFwG|*i!>DviNkVQ_kmt;O8B&`10Uc7
zhwVU%kp|asc&@E@A90(no6<CE1!1Ald46-U0}`x`voii%J#QPq-ke5FdnQUh&|%$6
zX3e6R7hg;mKqfM-XWOa1f<2=Y-GIk9x_DO8@4|QRJ?_3kuoXs~YYqQ^VVvf0<#|E*
za6MfyNB*5{u<1GI27^3l58Ko-!PY305&DrP5%V+8Jj<t_eg@C!np0J<zDs{>wkzPw
z+E99#848D?I9|jD8mkBRM7e{Ef|9GMgd8~n*rxW!jK^b&qN*Z)neQWf)Sj6*@gJxw
zP;lm&r|HC>vlHKr*DdH30=yhw6xtZ+GxePF=<?ZDYXBy}oSY56^vkRH<JW$MK7aEa
zv~Kf#x?@&P%^2LLWn*RxJB@0uP1xYrJTSyn9zA#~CU4YWW2DQQ*JI=FT>nbf<+C+f
zn#)!;Uv#=j8X13kbf$3ZxK>)a)Lz}9|1hgI+xz`K&YnTPiH#DJcGr_5(7aLU-~5w<
zwv`82+9%&mxK_80NKANJv!;)mPdiOtrOJ7<)$3Z`{LlYNSIwD6m(K2@OJ~pF%Rkah
zpZL^gdHGlSXx*0k^$0Y1C2Q*ks@Ju+eh<#f#iy19i<e4}WyusR`6B6TA50^6=!{>F
z)rF+TP)`#o<KfG?kppM?D)3FaU^=(dX7m(T&c&(G$0u4R_W(Xe!8sF;uZ+V;2U}kz
zVgmJ@0k8b^vqjj3^pQE%!)sNH;tZjFfS6ua0yzWwe+e{&hOeXj#{oR@?*pZ(esJI;
z^HRGvxO0$;qM)aL`O92c_KldX17@s$CUol~DAnJ>d7S?M03ZNKL_t&o=Cv8aXp~7J
z?*xZQn;Dryg*x<n7jo^J4b_uFrjHq(anQ}+EQh_k`~t?1UE}$M7hmLBuDpxr)#I;9
zPppp+{HFaNrK2*%_9eI+Nv3r^C=0yi@sBLH@k#L<fg8pb7TMI3x5*B4p3!C90h%Zh
z0(wDiIX@8SAkUx!FC*)j_lsd{RiEed<*(Uj;dzF($<t?=dd_)#*;Q8)rcKe;t~-YK
z3tzpHKQwzz?Q_)}`p8E=L5r7sk#Adbk1nZ_89Ys@tP?VObym>E=qkfTHO}|-59l$W
zmI_7RiZT9`ansiDLEgOXUY&HY-L-gpS~^){SvGuHmX>j?eB+JFOaZ}mP;Dvxa@dNp
zM?E@f{(dM|WC@J?VepuQ9l^o2t^*4W-^>F5odd1VCg!z$YpMCP)2j6VcwX(0=JVOM
zV~AF7*iN5W_7%RmX90casxJD_Rde{#tGei#o`w9GWjFI}eOq|Tj_=#qdax*T>tNUk
zv;#J74D98Fi*N87E_6#a=H}_4P7DHZN3E>y>$X`zJpp4bOe@PSA9v)6uIJN)kL~Br
zps_9EOrpuang)3ya|gzZ{FM%w&Eps@N~cWyguXS5s*gbT_3^iJPEbEy&*6^1@Cf)&
z*3mYD6Hn!*9T2aJ^iXELFWxY*4QJYQ4Ij&sQniYz4rkcXcI?~42@`4Y;zh3CA{-3B
z(Egb80@6epSvjf<lm6El1FR{>(jk+d2QTUkWES+`F^sglER}MCUE?k4#9zaK8U3Vm
z$6+>+L&R))-*|>TX7Go+zxLW|bm4^;@>yq}#V@|_Vj>6Wht((Kkr3k$aj~?jz8<=o
z@R#Wug*Kq#?>FdSe-ocGvTSp-V_@d`68Vu@nSmVCoz??hwF87rr2Q0mME!ah695df
znbmb3M~QrKZ1-3uV&+<)ca2VlK$;Yth3mg}53Tt6-So*%-#}N+`50e%RTp16yNfRG
zxQ71b+RxDPTh`FJ&EK=6$gmts#$`SHAOwYLHxJ4Yqsb(R9zb9_V#$I%$eX8uoSlQ)
zVMm)vem+>sr)T5hQYt;ss%2aoRVQO4Sa&`XWu3#S!<LO-9)C_>@UPjB6e+ABxQReb
zjV5IZl<$qtF_W){%#sC%IOtmC+BJQ3Tb*R#&bgIM6}r~0_R4j`mhaI`H?O9ig^T$^
zopY+$zAn0Q&Rkxw_<H){SNnLw)?Id(vL1IPr)$9ZeLME@g4$*b-DN9l<~m@rgyrwS
zojW}myxAGJdQPqee7I&0UfW78K6_HBKs)XH89a9EI43tX(7c234oMA~!?ldlt&p2K
z_ZY;pUe91a!9`X&SH{x<4g<Fo@5g>PT7g%C7eW{UwmhwbcKS)5p3&AA^pOcPjhPb!
zjQA8k(jXamx#^~xcx+1x9Y6kR+F!KjN<N9qa<WbRfkzr#&f+swM0Ac`76BEGRtWqO
zeo-$(o=$Fnq?8t3Gn0tAH7QtoP8P1eaxdu@Uh}*pa+I=NbGrD9)6d}No_o&jo6z#Q
z)b_nRnN1TZZV@}I<%8ZGzO^0Dp?y$Z^}ZXh1MVwgRwU^k^62i7Rb~55Bh+y^ad=4a
z4YG)|oSZ;bDgW%KIUX|Y8DB)~WKE`QlMB`ptN;!wTIWnXmoA@uHOZSb*ho>GFeRBQ
zY60Lq-~B${+IJ5xUh-xB@W(z*ADUg8eEHB-UEDSQ6ZDVQf0=Ll<`%l=yL(B_&6U%u
zFio1|%w4l-fF&q{nKjFAC+F3=z)u4=8Cz}nm1fI;0}gbyu-C?3JcR@E@OAgn*zv6d
zGkTQQN5q>d+S^9N5BoB8ADUH9s%U~4J#UQINU#h~%o`Sf6AT1y=F4MnX>CFq&WQW^
z`lz|ub*s7a;2c^_axD3M1}q2OmK}S!|Jx7nmv3E93l`l#SAKYI4Q#XL(1)(-;%h(i
zdC0S;)5W^ATkb7be7&A=3+v|aj9S~i?Y>*?JUONXw{3T1W&k^VAZS~`A=OIz1vGsH
zTa;bfHQkL!hk$gWbV~`yh%`vIbax}2(%m7_odZaNba%(l3_ZZiH}~@$?_aofTx+j$
z#aw%-h1l_kTap}grgbjO6@`dryQ(26o>y7hvWCm~!;6;!Ty#vGYC3x}v{-J3kZoMA
zO3;6N{VLuVN{CE19~|1)Su!C#d=ol}k*~OfDCPB&F9M(Tf8K$^iPta-G1#J?zrn7y
zr06dk4=!s2pCDf1@KjA)F9Vz0?@n)N$&w4EN428|pv+==y656oAmijQ4&q1!R7)FC
zT?_BBftuQ$0L+hqA8+~;Xx-0@5zyVqtSPvKFm^JGPXx$2od*U5@BmD#d>4iG1jd!2
zbm+4I>W3m%IFG+hy(S=Z8}hj!RZ&8bOeb?se`OsN`D1V+>|0KykC-muuX@@+qFeD8
z00?1>^>OoeGsCoTZZ4x_jescLvX7U)SxbMK&PM%?p&?|jc1}U^8vmtm<-c3}aJp1`
zqHtWKcBl5i{=M+zJQ0go-ugR3b>$44C%cd8KON$y2ZntHSaR%Us`=e0mO+jR+NyKY
z7TRf&fCR}uanEMM&0s!^+nnkH36gD%bVmGd+vu{j73Ejraa(@bsKx`ta`HrnL_zI|
zUn#zQ`jj=x`l;QFgSHgw@rT9YMti*BL&wtGdR|YlW7XQE&~tdiyHkhUKL13EwO{Ox
z<jdm^XO9va_Y<5i3CcZ+w9w_@_J`zr%N4W>B35m;{k!wOa!dRw*9~8`OyAm%XH>Il
zcAPI%=eQw0`M4>qlx2K;*O)Cbv;=IvWt+2EZ*z`qa5Jok=T!)boRg*g;q8WW!ZF>G
zK^zzA;AGrK(0lHE^rH>K-CpaRvrcb0d14Q##XEZ|CsH1Ya!Z1x`Wn}<*%qt6(={Ky
zT8;q11Kyj(FdAfP7*#MIucc~#m!2yJ0G{{9qM*T^ZePQb=t$*ro(f2<=|dS#K3$Sm
z4O*G!McW&P_GC(pGtwT|2AXWEI>){8UTcHF9XA$;=@-SVu0Gn9O$lS7-;H_##N+<I
zO^Wmu*F2@a3dBqK-HYb)+CMNRMD~dd!{x)L4URzX%z4a;pruIe-joj%mzdmy`gc4j
zEpa-*&*4Nw;+?&TCpYxx%G9@g(7v~Ip!R<!orXPC*g*XM;^2C2&Rmb@lz~N!b`7yg
z!yAYzZiuJH=+`B&t6m+>YYx!aCCD*xen&j~N0X&h1I*qxXBXn^x5VU~Ze&p8oyt8g
zS@_<}m7CeMx?rYkzu~+7&&1n>bEZKQrj@P*_tfoKD5t-71}tt$*Qm8tDjV@Ez}>F`
zsCaQ1wzjto(GwKD?gl}Tz0L)=xJcYlgpB88i0pgbWw6HtE9;rv!Izd+C~vw&pQHC0
zW7g|V0$3Xe40g8_KvMO*R^*~x{`@CjkDx8!^tB~fd-2Q$NGlppnl+O=@%ESJu;B_8
z848s{v~EZ%jn}Z_O6#2l?#M!Mdk`I_tAZ!K{}mj{<j-yOTdCw=1m_{XLyW@UV{lwB
zapU=Xb-?>;Jtjy?oY;E)w?<6%4Or|klN|R3sRn~kl|cTzJl`xjDBt+&XOQR_<@-`O
zsRfa*5v2THd)T1imW&Pe8-ayXS@6KXOK%=}8wVB?WG4A><<-yy+>p?wwua8}sPp#O
z@s2k`b&a=bkZ$tvm$P{28V)d7m(Yr`%nZj%8aNP7nj{XUabiJu@T*(@6MOp5t7SL7
zUvIngD)!^n+ORbs*Ad=?w1d2F`3M$LLUM^17U{AY6W!#0po`?CeLs>c#ll`LD-cE1
z=<g<iEhf75+c7ylu=wpdi4(>nwukKpqSyhSO~6m)auL5mc*@Jv&Zv%{gy-2Km;Y60
zIyggJwJ?0CJ05lxB6-yF`h05rD*gaMlPA}1wUH28_GZUSF)_6`?Um>_62%8^Y^_dY
zY-w2{UgxZ@>b8nMVlBjDx?{%Kug`D!sATDT4DJ9OTIS)wl^aUT?iIzI=~lqYZxW8H
zu>GY3@=t=BUJSuxh?qn<#fE2j{YG`88iIwfur`lO6Mp%!Z~pXGAA)iI5Hbzf0Z1%^
zumrU?DRoOM?6Fn@pqG;6Q-RPMvAeFDHV!49JxailGS~UOh0*s3ES{0UVvuI#Qd^5x
zlb$}0HNRKKqdL;3k>OV3nQt2^Cg{v-q5(pCTA@Nh!lAgb0-SbF*91D6z&tiOzby-G
z=jYC{8~sg*sLiWzORlkBV-4G_-FN3*)-$GRgg73$-C0!Uz$ICP-6)AStQmqPMnj@i
zWL1j78F`{6Yw>{~e+Pm|6oM6Iop+><>YHTLf83W$mP)Y2_Mi7xr6}nE+{Z*kk<$@5
z44)w~H5a0r*La3)#)Xu<rsNM{<oiVX*@ozycP=3Ub>FGi+Yxb3<h#P4kkjcLaLUy|
zm>qcbA|bL?mL|le{L|pCW`>7Ge4C;R5y`MsvjlPZFB20@=A(B7Fdy(dOvX#vYY7(;
zACCFWLaml_KJ?C?vEB4ZNx?^SdeURSZsbf$coe0wFh1FJvz*br5XiS<$Hq?Tx`>Gn
z6+D&;^|1aNh|J*bez_XYhu>G;sJ>-oX-Ton+q<zryO&nasgZ`7FMbzzwVr4D6n_V+
z!c4F*`w7%c{z96y`w!i(;oYo&-YP4lKKjFqpdhYJG+$<>D<!$X5VnCYyk^GEMLzlc
znq5K7c<A-o&_xUsLX_vX`5|Bq6gW~WA6HbwQL*D*TMptcySXsvR0HC;;C7%0#~31Z
z^57lb9XN&4DV~ODw_+wvuw*2UO{a<g%)`gOzdklua@4)5B2@Gc^-4UPxxzazen4(|
zyzmofK4z(k+jDeV9X>z8ufBoTwFiwDxd=tlSf#H=9*cM&UUq$pnAV!7#=8LQgQ~T5
zakMwS_NS@?L1!CW@0B9XZq*3dbw%MJZR3}(+o>;-TwbIAuhTW}e;I;Ka2*VIl=)`<
zw>oImw)VjHvO7JVN}>u(6cO$cs)p~Doo=#7?wz$05Z8kKej4HXfVG^kvuZ<)`rlgC
z@O8)jg%QNGx(r+X?lf1A&1E4R#d`764hng#GHXXe$GfwCR4#dG*vxNOm|*{vDlVtJ
z4FDaa2Wbtcv`j_WDNyJHVfVl7Bi);sOBL9YVpulY7seD20>|o<N>SP$%Z4(J>0iI`
zy7h_Zi6ogfsx-T2bm^Lp7JpuEbc2Abrs1-NAX@-E=KPK*xQOqwc>$8L8xjSNp&D8+
z&^m_-KRzVEBIiuKL-^&$?c=X=?|PkXS%DBj1wpuOy1IjjGYKU($MDli+o^OQ-g`s^
z8_9a$9dkUn?utB)Ch9#d?#veKwfQ!!wJSBIp+qw87B6q(W4>0^=5YemPYVqb@w~&%
z4Wzw>yi)xMi~!fYAZm9@%-Ed|*y8~+!R4kpY;Q49+>6baQCu4^!DBTEv%XO9tKa?p
zO~qZD)zv6-LQw-p#cz;?5A1nMfnBSrfcC{$vgdxQ_Q3pNAyQgIN2;<2Me+=*1V|L5
zwt@V;l;6i4?Kefj;lMv(Y?!<l4+by$$`%3zd$#NBA~nwxooteJ^}wZ}U(yB8mmzR_
zRvEs=ytf_dLs$9T&)i-+lHUQR0$b(1^*2uTBINlj`yk{zsUMvVq+1BmR9&zoccg&E
zpA+-aKi-Iw_p8o7{?Ub(U7wR)Wi!7J_CW8<+E}n0?5qnsdrmjt$Mwi-sm8$V?3gzh
zFt0sC2y#yrU$MVo!HO@)US~eam{yzrJse*iJ2xGHToBxL(?oQ1m=~rlffE&fBt#Hw
zmxTVJ&rabzwh~0{k%&vyKKH3oR37TWSHqyrY=rGojm-qvdO2+M8)G$loD^MZm*@bR
zWpCHHoVU~QrXdzrOU}8;a9GqON(cpoQG5KXxv?tDFUbj_LgKXT1g`Uom{yT`4X_($
z7WxfP5cWLo#<<<<T3ySL8jjR<d%Vc<@$0rpbU@p%cWC>|mP78i+Pn&)#LaE>cd=mN
zBLc>Qs49r)g?5^`-;El<)0QdX9!mx=Fyar@cpLrcDHQDzdmog?fOnSCWi{L`)MM?u
zVh6v0c8P+gwV)3mW?o5;D_*@0J61rZ3m%EZsMX7kEOhSP(^Wy6+ws*(bXd#fVDz`9
zkIO=Vky+26$NeldrRNA^l>M*c@FojalTXDZIx`1aP8t;EEyu?fh3pby>6YIgwO^R6
z06W*!jz#b??o7BRK@bS~BKBOl()Hu+2NVRLMUTyPC{pd>jEE3H>Xd#m8IV<?h?a^n
zW=7Fd$RX7$l`$}2xRNI!!CBl1-p*xi`nj!wE5J)&972!Vd5HS{4tm;SSV}GGG5t~7
zXu?c?==xZ#*b6*wv%c~C@Dg|T&_ET#1i;rfAv_jPY&NA^AIE;nJvhgDd#3wn9bzU_
zqcT->p0PIGSepsp-+DmIf|So4#|i=phKA6%qJM2puMb@MUmDG&18?P4djci9At%m>
zCT=Qak+HxWiCur^4<L6V<~_GBu;2B6_<IXBaMLC~hqVZm66a=P_0M_W-8|&HXZ(G>
zzwPDfKEpIY2e=}AOj~Stkz%m~Pm;Oh0=?eLc1L?vkvbekN45X?6I1@h*7IdWN;b(d
z56FvSROK+aasWZvaBjf6LR&!-Igv$Wz}fHmmx^{3C#Ju(EDWyN_`Ig0TK#6#^g6+?
zr-pVU`Qf$?C(=kXAcw2#m|o=ctnty48<;WN5!xEbZ2U16k*439JZ3VvkEMLCNirIz
zmNfD6Pz@ixx~ewAs$Z|2owl2mi<F)rzWZ~!ZOn%FdCR5k0)r!?cNU9quX;Rplk00P
zL@+s+RmmbTcB;OX;Wjt(QS>1of>|{~@juJ(8$Uf|Yy+=r4(RP2yY*ZvEY&?KmBwGd
zJe#MoR3j?|t|#Ace!#nLbksyZAC3R`<m^7>aj?oX^4~Mbv&V`F;B&OH&IgS9pI;bM
z?dZ!Mcveii*Ll&A9dI{plm#sU;u4Xc$!`=X&Gi`OSHWz0(bG>x#kXT4Gh#{zMBF=%
z5Rj=JeOy@Gs8nXKydii5kaQtG^yi9#bnFj&Xr)cC>`3TcU*JK{^FFi9ZW!kGx2Qe-
zv!dSj3WqmiwOgg9Pv)<AB~HI5jy0K`&&YOBW75VJ?G4nI3Qw<nbga(LJ_lPF@h5EF
zq^Do$s>4z?9}fj@;EAIeDevL`zi8+QH!NDq|Mm3txH!RQWr6?7dcJ~zN1Gt@1PSWm
zmQ|*VWV%@6+ERf3XtwQaJ{N$H*er9%I)e{3p(Dx*AvOiD-%8@@$tSwYd;CCGh144{
zoC0`b?}&w;5aYgb0Aum%T<*<Vs$b9{{r&yl(@<%JoDi}mk2&V7%K2|mb(onIj+7aD
z8-R2*NtU^Qd&6#o!7Da+%xNWaD9#2U+^R$IZWwc`S86(cgt1%DN|iL%d5HXWy>V)Y
zP6-)chn~Ob@~RY4J`%BuG4ABTc_JUWkwZhhHLY;R9Bwp~eKfbP@#^khJ)?*uMpn#|
zSo=^wv8D_n$Jg}^dihJdJhD7-yCSO#2xsx!QmEd0#O?6(XDB}0FPg93s2rLDNXj+V
zW___xn_Ynue4U=>MGO%MSCG5Yr`OATx!S;u)29^P^696`0DSJpd7{-i_ttKkWd2ih
zM&|te$&GPOyY+XrCvKc#U1|*ebC!+%@I0t=?%a(*(wD)XxA**8pUazL4~keoCCPwY
z*D}@rEi-8I{9zVel$UK?Of&2xKErLwRDIcNP5&p9f%%B)9w*(nIm$3bvF-xhgcv7o
zgL5jf7+0m;g`CH17-NMjI01(`9w6+MkO@l47yGN6#<9~lnI{9+iqitUk&Ikyn73{Z
z9H(2Tk$8lA080-ue+QQu^C1hmV*c*F2RR8d`BN{p0Y@n}$8lCUeayLHS@6qH(&tqF
zcc(8`wSH?nKGh>{;5K}6v($az{t_p8p-55@El>V8DAFJOIof3a!NB5IdJLRf!3Mv#
zN2NwAZj?R3X(i`Pbj`y1*Ec$JIwM_pR@8_jA<h*XK7)fs?2aIibXESUe2#dkR))Xw
ztlAnIjlAK)!p`U9cjQiP&TldHCQmRhZwa&Mw`8bYmEXC(^~Qy?exbc~%>{>iS-?dH
z`yPbz<!3;f^a<=hTIw0gYh>DkFX{40VoVZGlH4D2F`YwK=6}h*+h)>eK)J2>y4sds
z#_S13?fEBPdkGJmixT=BTP8%rSU#xR9fo)$M=cBs@H!2*NR=&fGv+<Y)-rUJM}Jvc
zVj}o+*lGsr_UoQdp!mFza{+$PweA$Drye?KwuL?AbI+7Z+_5@XTbIB$Pwry1(bVnM
zDm&)`c&6Cx^4=H3K>Ng#?{i}F!RMAG&u26LT0s(u?=~EMsiXRRB(Bq9*wC=i=IbxA
zXAPE%uvkOjeuFAB{}PHFu(k#Z%Tg6hg|Eg?I9k9`=jN9s|9cV0=Id5*x>3OBgFYn5
zborm`g6Z<uC{v0+w^wc(Q<oioo0HQg10n?~K6QKfsmD0k23$)tvF5t(<$P{LWx8lk
z5j=^~cNS`BjEHgEj(EX$F=VLpx4+@rS6^#W=F(@W^SC5gbr;UbgNk~(!X&%*EiZZ=
zwiI1%?W+aM+;k@4<un(i;}Yu=bKDSRXmTTy>uL6;EOWjeQLfwUXE(T2xXGyxX|=_j
zk{WvMh#9L5>wY>U`QS6p0_{bY7=gESDl^&s{l+q<v8l^26-vNr<MgI3sA=1%*LOF_
zB|IOA8(+SiU`z`(FG0>Qa@--0>O@fg-a7o*P_>YHAi+K6J=x+V2Uz7U8J9}zum5e_
zqUAk_{Q!tXaJod~H;5pp0K&{<*!<&Tg0KY+wf_@Ki;T|X!|aXBV#sKJ@yHHc007N;
z%Y7>0Ms)MyU82(3tG`>Q1&beZX^yGxbJB>&Ao&j_E8-f-MH;AKj|p-djd--@`R0Mw
z5VN1(*O5IQ6hCH2;;>$~PY`LMa(4q0gX#X#?djSt7vaFmyI{WzT$C5*0+UBX4m65_
zzZHRh>_Qay;i4ds;50D<tn(<loE)O8&s*IR3W=e0wdT7*<{e2>e`;xt9M_%Eo10tU
z@jGUZjrra2@id}CBh2r@n_358ud9JK$S^R1|1NQ$vQ^g;KHPvSaRU?07U?{k8(W~{
zRY&u8-NXA5vTl-1|Kv~G5mIKr6AC*%Pd>)qoK~^Wouz&0qrLLodR}@N<PJy*55EWh
zXT6qehx!`yPbAqf94~65p8lC-Qu{=MtxB86E%=s>c+B+<SHO&59vkmHk5mOme?6Y6
zaR0+u>>18Lrs>9aghUK7sxnu7h9Ih3Ebx6GbP9F|Y_<h;Uj|C{K;3JPc+G~UpZKAH
z@HD0TJ@@RMVQkVZDcX~+tgSmz(wWRlv6$i3mW37_!4F{6Bcoo}Eg-)zR}}rJG#xre
z9yNwfV(1_ExI;U)wh0k{pNCC(eDRmMOYV`(3B{B92?JLjtOm3^qG_oWoIEEw8M$RT
zh6hZqYGliO!9je}xe-FT{sqr?_E64+;Pj+Kv6<f7WNI+zIs10OJlxNc$NF^+Z>>jK
zz);mxCa4p~KMCIhdXR3k%UhoF_mB40#WOsN(jR)0x^%n(dliMQ)EX9q_6Vuqi(lJr
z!j@fM923O)Vc_Z7M<^{c+5>u}ecKxh+kQpQFOPsN)jpL2plSJj7jiy_g0Rm$-a8~d
zpyR-q!0r>zD!IU9++H<2V|CTHA^0S6(S+rJiRmJm1H!C|T~vDr36qp=7hVq{Y7r;b
zx$|?-i`C{Bcv$ox<zj95*Tq%Fop*yw5q!Gsmd<6b7J=ePr0qLQ=h{WKc59Vr{#sz>
zwjcNB7{6VeAm|1OLUm)^16GiFRBvrR4DM+zwBHpjsV3AfWe}$c^4zaRes#XRxMZd?
zrT3}+zG~WepnX?Zje(fWY^LArD6_Mtr=X-hb*IAF+K_W^90?*ZzT^v!{~<qY;J@J8
z3Jzsxf0SdPZn}R4JmlW-O7IeLw2C%_Z#Z=Hy7Kgr*80kuAbju!9<?#l+5-NMCT$Hk
z*9zEYPMF_Yg3x-&&`e95A!13rai_d4kV2R*>1g&Su9g<J7d6gn&g^o)l7EjbkNCUH
z7#XQf-{@L?96G4#-J3mBEQ9p5Ds~awq+staP_96Mj^Rprg}djL&vBz8RT8|DFii>N
zHoK%Su<$;Q>8Tyl>$Wa3%Snoz(X#HG3ihxyiCz7>+?>igsRqV9Aw8yny&bv=#EUKb
zzS>Qqs=s!!$yulW{u<3|B}6c!1GP4&h;jWFi)S!OvQ&}GFOpQ*c}A(loTGl9eBr<w
z?>rLQ&Jn%K=kJH-nKuuUM_?_juURE8TTp$H_cmij&yXdXp;!v&xDixF)brv4pNm+r
z-y11kKg$CNQP225IBdMONRKOq69&xt?>>}q^W$9#8Y&nl?4#hRUPP!Co*`fb>g!YX
zI|xlHmvCd(#oC7i80Z@Zo2^^b$?-=f9Ys<PqrpY$^gaHz`C9jc5k{)Ou=iaODqDnx
zI6?IG0evs1FFnvBSW$u`^<m8>0MzS?x>*lH4sbqV)q|}%>)oA615fKM_1Y?fNf!mC
zi#p`>G&(~AUAI&__WHzM))cZp_z69qU_dCf9&{cNddiP}eBsXd(y5U36d#dgt)^vV
zqUC6Ej%TQ|Bo%W)ar}TUcx{v~+-qwjGDf*2)~BD<>2+Ce_~RTB)`5NGbrnNcM=P+E
zi}2|vrmHBY`k$=T*R9L`^q$3p<0wT@N@7LC+*lxX{m)X^@=URYu5Mo-WRF(2lV@*W
zkJB{b&^L@Ju`(%Xxe9}g-m&YaF;Xa#@+TxkyX0_S;t=<1!CU{=pKgv6Mg0G#1t6we
ziTPLX@p7vIulhxd)dx(t(#D2!E8_jwB=o$%orl+LOPEMltZsv8{lVSzl}gkj#i0u%
zuR53F*mW&0;&YqPLLD_2e2M<UjFx^kJ{}LUCLUNE2q_ONV*K2;Tgfh*KBe}n>~;eN
z-2w%|dt*PHE{aduS62tC%$FAjZ~`ibw?&nDN^xs_&y{)%4Puay4C7Rn<NZ;-m<@d`
z-LSY7V<7vqUDHK=9(FfIt`YnB9>aZWZ>Z4R7fAqFdJQj(lvLjBs%`Rn??Ay5<g`}Z
zz@C$OIS_#)h^B9(;`>%1xcMv@AU<gHdZJxnIfO$&M#dAqC#(dB-%*bO6CBHWVR_S`
zh0fh)AZH$nE2qPF-Ja}yd=`QzTjjJj@epi6t8q=7qE^b&Lbod4<O2vtbzV>rCsyfK
zWp4vA?{lGdKtfZMDSGz)mQ>|SW}~k+^)vwv3ZgLQiR`Y5mf*M5Y>0J%{>FkZQ2kq=
z)t-so%`C5BPj|B5$Gd4t^k;9!=W@6GSCfll?r#dg6^&m@;{UR=K9IB*f8C#yNfLp?
z%+F}=-viYySl;~Z<{8U<mAwpb%ENcVSDTBP@&cUFb$eIj8?E|=3!WX9DHwVu{K%Ia
z8_yS#>d{{tfNwdzugksIww_m8dBVL@=ho%jm-kno1PSeSR#)CmUOrDBgqX<HjM`Hd
zz(lY;st=kwyj+}TcO}u9#O~%FXzpdgF(CACGWTe%Z&ncfoF&0n5)H*-e`qLwH4lU=
z!Q&xjybJm}_6?FSl7jI}rM&qo&N-~oQ5O7izmqk8cQ#V19sYJlv%SfOP>Bj)j@*3R
zSjaIgu?^xm-Xea<XcGN{(645qR)SAPI0*~9y&iTOhXrCA`HYr|+3Yd~m_6Tn<z{q|
zo&Os(7*Bp0_UH7!1f3r!(0FGUKGwo^p$QP_L1{@nQtNcbl7}SjdCJE2H_Oi3_(M&E
z=kH=8mQ_o*`+stxqpGQZMNN3<=M;sln9he|XQIN-jBG1?I8T`c5}l>UcHar<O2<5s
z{ltH(sr7g^!w!$)2Dtq2BkaRQw`O;m;zvu$E=+oSyxw!0__#FPS_91TxZK3`Z+JRw
zwK5PTQy8&HiO`XkMmLkyW<&||fcvF&8i$!zktjow&=aN<a~nJcHt&Mu69VhR|D4vn
zR=j-CS9QS33D&7lunV)NE-9ydq^87=e{W`{XL<Z0C$Z_D*3#rQ=RZYzXtdQ6L%R5J
zwqd~+w0RUi%`e(<9M@0ltUN62AnqD0iY0sgvnb>PqMO_a%bWIM#}rYB@{-a+45LNE
zDYgH5C+!~*O*BD&i3t9U-ID&ETi_&czl{UW%rVTrYzl7%9Gk5!Pk(vnx#EId%>36<
zf`V|lQJ0_Zcvh0OXecrVlcS<5cv15(2H=&5UIj5>21||m_R<OD?Y7hkAkAnE{cM!x
zcmTBnK<JW>h#PKmU;N<8l73R(SNUO#d%}2XYI|b^6zwhvj_y9PcO1WqM=%!R1F0O%
z?#xnmn~;p7k@fm&kriaJPqatwhZ48aW=wd{f~}^1T2XpUocz_(n|55TVP)<jToFiA
z!S+%-HTJFzR9LvWBB<4A|5ekr>rz=+Q}oexX?hTwR5z9UVCh*%|Lck`zOsdREW*Sx
z3#z-&{71bcZT#Ewed*cgW%6a)*jg#8V6GQu#4{q6(PC5!<2sVDDV~ZG#RB|d1peL)
zx?q<fjJ~cBf>QrfRN@2N;0YtMLPm|pe-sR9&w7Jc1ZxZ+^x$}E0$xb9-3)<BuQ9u%
zJf0u0@H}b9q~oqdA2h4XUDydb--@g_h94>e@=Pq;W#?(Z3bH#wJU{#buY3AHPAN4`
z_K76OW`r0;3VH$d6Yl9Szo#OpkRS(gpMlLHFxEdtL&g^u*;5x1Mnjp{{ak^eKg5Os
zt<>em^$Q5zTzx=<x%W%|@9(tL8UqFI2L$Xd5WlRhiFd*FkJe`Zx?1r{y6rMa2KUvC
z`4!!cO(>I)X!1ISljHJlLp41p5WZ<GB$veQQx@x?+HL^9KNga5?_~3a8r{>zX8O#p
zyL=0@pYdkpQ*+r7k~>zEk_8LgEwlO18+${IB}GrMwisIP0~SH*^TJ@)qg+d*Y_Mb&
zwF`KFx7x!xhXaS7pi5)GgD0_=)5d#R{6lhX>hO}`Gcpa;%lrw|P~5>!@vTsgYL6ea
zy3ZfXCX<yxo_2P!2je^!S9yh2c22!#A!SF}bWGB;Lg5COC0ps*LV39P+oL~ejnWT4
zNi|94l~OLnvhS@RPy{C>t5dJWEO5`Ng#)4=K!cizd&B^V&)R{fKcJ8$psFWyM-_5*
zGbJvrx0>4>@hbgid&`sz=``{}?xTq}RRBixZGae!C=HJU0y7~LNjGh-k(PUUaWK9_
z{PAM$w<=;yzvteE2HQSipKvxpMekyDc?}Fi6RlA*jCA1-Qbx+gBlSU_rLSG=A>k-P
z$BIa+m=4eK-}3?m;tQ+lt^4KG=>AM(3tW@Hp`PR`2+;oZ7@1`7$>n?m7UV&$j^H+M
zoZ`Dh7MG_4uIrGZ)+s;^{>B*BRPm3a;e*VB`A@!wyGz~}G3?Jn@xt@2DrF{4T(*sb
z+35%*t7zF}|CWEz{|#M8sK(DKYCM{}xqqddjxN8y$%U=_{bMAiI(7aM<Vg)n5yg7n
zyJ$#u5DztFjY+dO6oDwwRT}U)l%B%f?wr}L7yl4+eG60K)Th%II1we<mokIf?q%vx
zE)Z~(hH7h5KH703)Qty~BIlp`mqMs(jL=ycIkvCy<=d`Dn42!{Jb=&Fp4KJ?$gkcT
zqD{Z+ljA)C{*iLUrp-84NbadL_~toCL7h7_C?hv-&PYH07T|Nd_zoEo?CC3?%1OgB
zAg`q*0~nH%;m=AecV0(qQ>F;;-BocfdPoU{w`RbICC1`KZ`E)HyPW0YneMzLMx=V)
zOqUlm-WK{zR~OW}!0>mIz=zLLOA)9)s1_9@t$)6kniT*cG6Kr!0o{tyE0J7T_ZOwK
zu;byBGR)T-?f_{k)qG1Mc+d0ltGvsrfWPiD7{jcFTD`EA2?LsDHJxBTC&)2%`D5cN
zlM+%izl-<{`9)SAD&nhR`0U9k7VX=sKex;+N;xROA=5Q<ZL(Avb_BYeDKdX^2)QUo
zgBL1O7QFry{Dn?S^yNt9jHFNRkeBbE#QqgxYBv6p6Dt7l3ii`T>dkK9x~r#=$jTA(
z{uTJxe_Bylnbpz_6}c)n+#4Sm!7ecc3A)Dy*KwZ0TEaOS)N6KqV#$QsC4aQ3b+f!K
zr>n)LNc%^Czv`lY7}7cX>d5A626LfqrgWyE7u!*Pk|T%<k^ejYT+yBT>K4}0eIo%o
z0QtKe6;CvoC<szt(6Cu-K|Xw1+SJZ6JwIk|2x^cJjLWjP<omjS=q^e%GS26b`?Cn4
z$-{cw;zR^Xr24eMDR)Jq>U22x%Mw6gF(K$L@Y@;}Wh7mFV*$dnCALXNyJHHz2ks1Z
z=hT%rWx|!?#n$JT%Qd+N@xaKIp1Fx~Nl2CX?_=y-alOpq+{QrM@w7X4s1B=R{!jw!
z8W6Y}9j)Z^aNL<z78%I9#h}*z=z`<t@lx3hdCStmEMFB@aLK=9W>Ni*zJbRcWK=-n
z7d)r4?ufeOh7%e)9l@H>fIwt32-7X(rQfO8{24VZ(Iv9K#JhC%sdDzmGfMa4E8(<V
zO?r*Hd+u(wBQSIBL*Z#H4D)iUC%+f_c}nbLSn7xnC~Z_0yWYsBMRD!>V%BWhD|}3I
zXXD2+`{Q`Xp;XnHm>%FMuKH)%diVQPt-9Sb8me2kpNKb8(S9#WZjFDa8vQutYKW+2
z5%%pW4&S-gH<A4;E3eJrSJI~Uy`L{BQJ?%C!`a3nF;q2;tJY!KPw`FFe!5JtU2-2w
zeMl7)Y*uDV{YFdE!40L#E8R3-B#rAVa0XIc(LkbTMnK@^=$M9=lLt!3H(wS~1e{ta
z<mEQ!j!pk&M=EnRRj0ocvworq3?%+C<EjZYB*cmwpVH*dTRE0Bd^IvLdYp5upJq!F
z&>}#0ty@P2fXm{+hmYXUY<-*I&irZLmBR=;1c_YoE9cBsBC;{5Tyt=j%`8rA`=vy$
z3&KS8xT{oE$_%AuqLx$8mvSd+9*&t$`v~775JqO3YQ|4ed&@(5@iN~|1{EO}lSiJP
zaU)@HF4&y6kF4R}-7wSw6?%M|qTr9J+1vzyo0v|3%hd2Evd1$W%ge3E+zRSdUKyRg
zjrf1`%|5B9yzD0frrVtNte>+TD*@LK{M>;3PC>1Y6}lBffd$w85v93_@v%~Vig7bY
z)MSbDEw}-C5h2W<$czqUG-_Couur~v66%#|Gy7VjT9k94oDZdkHbqF&VBXr{oFg9S
zEpk6XTExgR6(H{UjmXG;&(xkyT={#Kfw1S>vGH26QeEd^8y-6O+mlD*In^9eQY4IZ
zhk|rIGuFtB3X$fF$eJsYqVKUO19DCF)qfU2EA_(>0Ncc4De<Ct>bSGHqMq&vGCe6N
zauaVOW2fpW-cu6Ek#zh`>!d}+*96i55_2{osnKM6>>OSeW&+OpJ#1P|(ht_|<g<7(
zUvVRXm{KgXJl0y4p2pZ~i)alWK8bjrq?9)2IEzYD=X}bfI0_A*XQAbHV_<%zPU0U~
z6jIjy8Y8_{i5?O@Gh5}5!fb44XN41l?LpwqcZfOvoitmcvtKD}DUxH5(4YKC`q{ug
zfA*D|YDca)?)LKZ;ks-?-0e2>hQs!#0hb^bVPL(fN}oGIS6tWV$m3s!yC)ZM`j^@c
z8=cmeMMRm_w^Qg=xu~s&HHtM8@i=xJzx8z~GlIMCB?QHDzU;ACYf?1+-k;<+T|z`4
zUIg2~>bSo0XUjQAT$4+_T9U%x$=Lrv7}(2zXw&(*1I^1B((j9*S;A$4%!ccFxyj1!
z`o_$8_{-2k4+_BxKEoa;=2}e?@jXc_j1St|=wGjQfNY;Ppfz|llRnbTeY8ROFNybL
z2;KXD17@i*VsM48^yh95sw1-%{31KHy)5S=7O)FWI7U1lD_^muOJs)QLW+?s_Px0u
z`{iA6@rETGt0EoXN_J2s{Bw77h){HU@glv!gh4`hTaF)WUg?e*2MFck^GxK=tNtmR
zA-j>3YCiL8nq6z|DiA2E;N020<A`Wb)3qcG7V3S+reL2R8^>l)x~JJhm@o8eleO)F
zm0qCtbElOnE{YWn9fg~8kUSxf7(qT)rs<cJ+qO)Yqhlh%#x;~07egKR@39FVMP`#l
z3RxCgT`J}JaVLUyb}9hE58MTh+uR(IN?%BeY5|bAz6;w@;e?-@s+b>MEA>XF2@-Jq
z6Nxla_r*VE`ILZ%Fw~+MUPHa5I<uHstQh!D$IuHNChqWg@Z^k{Uhq;x)X>!Jgt#~!
zk^WF!Jk$^7s^B$KiDn4hN8Eh67`E$G5$Ik8#ft^2=qMmISmUt>OQFscVx>jfA!c8M
zr`lzX7ny|P1r@7wTW;6RA%{Y@;*n~Q=kI)EwB;j^V>060I^BNak6@i-Ng1Fo2X8m#
zTRX1NN#5&;avIFZV%t($YraaazFv?+OwHd=b(0&Jp7LhP{qz;EK2!RKcy_d0U#y{~
z_Sy6GI>F+6<whS77lUR#L3fK)prSgl9bE%rKWq~nM`|xgR-A|Lyfx#Q@=QmIct?(W
zoNemE$IH4aIs>C*ZNKCtASs@E_{g*!@sRQm8EDB#IABUST#8E&+l<f5#uRXnn*Ic5
zgJ}-H!X10}qF%<vQoSL#losxYt++?fP`Ul$7gKCrpg;AX-E<=Wl~KYyoU<tp{F*>g
z9<pqG#=wOfqdvdM;mD&z@+Kvn^|w9a8SxtpjpFN{#dq|%pA*^2zgm4v;{i<fxi=iX
z!TN?&T)e=tMo~&`ZQ}d(%}P=ctP($_>Aey<LGPy2JeV#JM)Pj)3<<-vUT44avLlAO
z`<4iJx2SL9Wp2*FV0xJ~TOQYMQGJ@%`$G5A4vkOY+1V0n=+BuR<%g~gf$r`7(|@<9
zeornKNRI!cBjMoyai|5U0Y+$J<|PR(QXf_Ww6}zPuAUg0Dq51DF9QLq&X0C2CWR<Y
z=9TJYyzYW_R%vSedjQ79!!mPzsbhhU$0CBWHq#QXoVKTsH-7FN{5Mz*SZyP1Q8Ika
z4siu*`$-nJ=0Ak9?@4+wUa=BSxv>B~e#)5h?#2RBR9n9`PSv-q<6}q7pA2bd^dlq>
zBMj||1HFy$Idz+pmmDPIpH<&j-_j5I(NJ!LKZIVJx;usrXXf$W!ik9F!--tmVcx<m
zxZk)*yi}p^o6tA-NI@VPD1l~L^dik;+G18gB}B%rILcW%dWY;hcKiE0BzES=T67uh
z$!8i^Pn`gatlGFk7$JH~-(~Dy8YS)2qe4YZEaVO0L13JHm@!iTF-x}R{ra#I2p#0E
z_|rMQYFi@7!&f>Jxr8jsf=@Y$BcA2ujGLr}J~kgB9M&RH%{E*glr{ZLwI``%53C(u
zzzKlT;1ZqQb;Pu53FJ{L+=e;leik%~EEprkLo>rk-$4=}_9QzXu%}}r@cYaQe3z=N
zwVbwU$K#a9m7qX~LE-Z6cqWLd8@_#o4?tlp>z?Da%%Y(FnRcrwn##(`B3tM+g-F0z
z1|XZ;H}Tz|P2*zJC+?w$z&M62O}0((K)T3e1}$HDk}|=s!cJ1b$;fgDk}VecOWHk{
zj)b~9urvQE(j>tX!5Z6>i`SHkzzYoSD*KYorStOh2uY^(uQPe}URQ#8P2*@-t=D}>
zJO-ZW_Em|o6f1YGctVyB=Nh(Z{Qh;Slhiq}whu~Dvm5NYOt`u?R((``8nyb4N4@Xo
z(ScOB4kxX}w9@aQs?7cKk+Tq_URBI(r{n_cje>1qr(~S%fuygepE|wgCX>ako>0Ab
zq|M}>zv(v#kP7*D&{;Y;B?exF+QO{}4ka@&#cKKQ_UKF#!kMh*w)@9cDkz;Sb2>VC
zdwxoI<M0rnGA7wdOA^-6H^e>%lAG;#MPC~~X&IJOE%FBREt!$ikk1!L&t3LS6W<LV
z6NpC;ArS#clXS`^2m|N0rdros{$rfpzZBEHM&6&VMc8{oW*!fHoSl;ktY|C3{3rs4
z4-;M}Tgj{J=;#Oao&AbpWuubF;=y=!8fQxOgG@}3U!Kj@MAO?H%oAF+_s`e5pKW#%
zW`u#KS`^=;Lp7v;TGmt)lmy4br9(6%XjsH!GQ#@IRAMw<ti_7^3qrEYzWV7`Ori%!
zoGXs*JS7hyCflRfr4F&5z2is4%wyW8jS9#=etb!-_4}D00Qv2Lc4*Y-B4dy`Q@!{5
zMcn-J8kT#(ka1460`eG_67zavgUdM^r}I}ui%Zr7k;swT^bNJWzF&D%)0Q(pJKy-V
z1oUuF;THw#nM&%Hh+)0QW`F;6u1pq#Bc^Nua|#y?k20*~(>ah*I$|gX4J!|ajOD-c
z_=z&V_pX9ib4`r8a+wrpbiYOYV-V0R#x(hUAg!-^`^U?#I2Br*j#}c3@|=`m{}ZrO
zA48LkKEujF9gM9wli-T|!PEfg1J&bC&0+gaT?L9Y=KqHPJC;@-L;nh!9VPWTp7RSh
zG&quSecz{a?1-xAzDIYvSZ|N)*7s!<h5CtF)J_GVm5>jylf(AnP^m?wJDuq)O;r#^
z;3}8F+9(yo^GW7o@xrwr7G>XMZUN#XUa&l57@&yJ@Xf6d+INrb;>@^KcT-AxB$~4s
zq`+>wo0LSTS8s}H;QVxOn|tY(oxkzOF-^Sl?%Dp};bAW9<%usr+^d2%Y*~t`ne~i)
z9=rHOjZUj(K(Vd~HBO#4?n??QS)<>tbzXNd(OKa5jV<m+2}82AQKk3GQGgEu7az<*
ziK4<{)r7C38#wq)1pc{V)%Ou;a=m-tJt+Q}$~%;(y~IqBJ<{jMemE^|T^>J5p%xo2
zRbSxgOTGGF-uh#q+ij)I`2{{DiJr=Rj?Jyv?Meq}Q-!X|u1oaNlzgtO1w$}nsWHLl
zj1IS|Le9deGp=;}Z+@`U(!o0jK5fsPvZaso#)F9M-ItQ){^O(rA9S$oH<pepMvPAu
zf;$6H*{B^}^`-eW@K8XMoK%S+RWw~YMZ{%78(ap6kt-T?qS^qD?GDgFK!!+Kv)2l_
zpFft&#t?4nN-=eV->*@4B`I2Dhd~=Tnf)a@mNkhJR;JSTWM*3|1CJ?0(WFe|gp2P|
z;!+*Ny@$YiZm)A?W@{6B<gMrRcOo7q9KTol>)FiAV|jTTH@`y<1%Z85K0fn3X}|Z#
z?YHwWltp`pY0($8#+NI|+N_?3hWz0V$OLgj{F#6k+i-5XjvU9E0~B#l-KVC|_%4pP
zOUV&TGTKv9+SC3p6f;sKcwR4vxhw+QQUZCqLy@;wYc%yADFlS$yWcGyBnh#xb=Q~1
z%8E_4{3wEjFS3*LX4{BTNvZAM<wVE!tH4seTCO-2=3`3U`!mM^#M+P31U)qZ1k07l
z$=^M6SPO{F(zfKAzRU#<$eWo3XDF+;vN$nV^9X6AvBKWdCQv325_j#{%cCi+1jmUZ
z)uXZM7y2Tr#m!QFmoIpn55J{cfG8;lEBT&j-<VsuGtl%><W9#ntoFbV0v|fJN&_D+
zB(I>z=s|`F=pU@l$M^aPt?zVbG{{#q#ejsAnU6k^i<st-OG8C+&kS?&8d!ODxcC*0
zv*BYRZVjXx)lwe1-1)c$1rdfqGVp1D&7E?!-`TAkqSg#`8D4BJA$^BvO9dr4#64OY
z;T-}qdOVdepL)k5p1$MByv5KeB1XHrw~w`pz$<(9C%)~aa;pc{I(DVS*<d#R=B%0>
zVw!_$ax6<~migE+!{M`X{o$qf0)k1j6csviJnFA!VIJ{*JSwLx9#=hLbrBba4+7^R
ze&O7)tH_x%@?x;wNqN|9xumn494f82hYB(qIWnV@ss~5=ucU3|JXoKzbXnB$<2&2q
z!if+^@Y(}Ki-*x>f^Ps5JwNxzPjFo*<*U+wWY{)6bd>DscH}T`kN84(H8+8&%j6D8
z?Ds}nPae9-OmGzXqMXTwxbFkJDeHxSM$mz3%VVutj7NxUWNBGXHydLg1d90!^?ydD
zyR`_?%&{)u2cRi+Vj;NwbY6R1h+sV){w~;2hL9M3k0m)nGrs22D|x&Q=D^iE<tnC)
zy~EV`W3x=}j78Bjpi8_T<b+)%tE$wlxu7$2pv(6a9qfrm_=fu9n{9qeyEovt7dF(q
zAT<hJ^vEVUC(~zYbZ>IqFjz=o0QBj|?Pfyorfr;SPxE2Z7P0jAj+6MR9r@9Dg=<5p
z&;%XxA2a3O&K_?H0U?AZ%18wi4NXLI>D<(HGZ@{`<%OK29C5!4Hje2$mXuV5$n^i_
z8%lbB&GhcKxqz>I8(pv43L@RC<g62kJ5A-PaVLL<oLbpbYsd82Aa1T9KoaCekE=r*
z5HcPQmr#Kqo8wHKdWqb(>CzQGgu;72QQ=NN!WU=tzJ||8aE53SumyZ)i(&DlVBAoI
zhvf+M#L-VKJ8-+fVU-1|*X?p=!C;W>v>47E4^dyvHGK5-Uist;YCd#;*qJw-J!)c`
z1em`10PWU=Hi56W_v4Rd;njC20fXiTO+={8Fg)1qP}|Gk^?ROiq&O!WlqLll2L`jS
z`q4VvNVXByO?B?z*DyEMYRmQ0=AeK@3FICt7VKv>;$^vf3mS}G#KB{9aUursb@$4c
zz<`?xINi7La+3|}e%MscKe(et7<GZL&-M5lqc0#jA{CB><YP>ged)<_6lII3`!XEP
z9jGig_BT>|RdPQ0@Kfd!g5glUQQoe5Y@V3!ELswNs&~j=fk?v6`PyY(w_{2N?-Uv`
z$J;$G7ypnQ`nVqwGcGl(EVUC#q|>=?BH0k$l%NG^zJMhZ5#LoNS%o7HP<~>VLuRMD
zi9_(Y#eLa{SORPJKuDlZ@a6B_4yt!MU{6j(bYLs)CEM#z@0d?46lV||u=>HvOMIJ4
zFs8&+JTQ|~5XiU|T-kpTcO^kEdiaN+SehVuN9XHjG{`$sAdg;2`KER8&p#B8wUqH!
zowPX0hpG)GmiCk?sUp)0<pt=11|z3KSZ$k==MtPqk)wQe2;1A;&HD`zV5q*>W(k1b
z<Cle-?IYxkP={}BM{qyYfZgVRi2&fuLB^Yh8Uw%ctZCL-tGPQL2jcM4DT`w_wxwLo
ziiSbt{0&Q7aZ@H_KfdZ}+sF0zy+wY~$DiHex19>vk4q1iMdhve+t9v3r!Moo^Eknl
zoByW#%z1t?9HM^5p8yB~VbGYmyc<@%8oMBuy{&TGE&xJ_sWA##S3|*G+7+#{l~OIa
zZ=n^wwcz&H4evdL0>sq~Az^4(h&S=K!amJ9$HqGYkDNcM{{SryiFjJxk6;(*5I6o(
zWYiQM&J}elyokjwFW|PAc5buVcX=g;`_nt!H<ggDmxE;hS8i+K{i=I?iBZCJ1@Xsw
z{h^^dSS*BSt)T;}*4r$sYfGL_>qrOBT5YYtJ;<L^-a?YlpR)6Vj}*OTS=9Om<P9=O
zDDxx=?ieDe3>tknTofH;lD{bw(YJ?5iVYc)Q6nQMmbM^D>wxw~VNo_&qID9c{I;SB
z8^#&y^*nRgNG2IU^c9F-8WDM>f(wFcpN4H8PaOSY9?n*X$&#4gk4L~d|1l@>1`i4k
z+pIOT$XZjd;14S^>U=gju=((#(LaP^@2=ZLzH8SlE;d#eMF7<5dh)N_?Z|B6HoGIY
z>o+LYyAjzOWDFr}G?cq3EdD<&fR9&w%>+Z{P^v*&qI<HtJu0een*^tj3(6)l`-km%
zCOoP;P!ki41ybgR#+kne^6BEPj)TVviGO-km$s5pT!S<P02s%!)U6&TnoF!>`qGdc
zK?KS5f}OHI?xc+qVjU_4G-~Q44?a<bzMbhX|Bbc(z(~GNaonW8$(Fe*T;*R`QL!xv
zz2^ER%0)~zQKvP2H;e}TQ+Dz!c*R@u@zj-m55V3YEzrAG&-rPfHbH{Ie;_^J#bqq?
zNhtrmG=M{<6Gb!CNTue&2!#k3PcQL#SwYfdFWptcYXXUaHfY<C{xF7=%f-Ne+Q9uF
z^(D^HFBuL9Xw%hWJq!BBM$x+!eaQX2#aQ~x=6UaABs7870$m7^Z91#B$1PpSuhgX^
zdz9~lH!EUB$tua56ivLd-FUmuTkN)@c&le|m)&DX`Z5@>h~*S8>Sf%k+bhF`@~^*|
zn6VO(IZq-X*N$eu&9E(?V?jKwGL8=-TEbq)>T3uRP6Zva7g?-(GeTv=vBJNCYOCxm
zX=upHjG$m`KM>qUV&J*;bD_vS$rFF33_+VOESnk2Gg!qn?_ZK7zY^w2qfMw3<X>Jf
zzW_nH0^=uEx;ZqOUxfSkBDUj0ES%HscLqHx-KI&8r5nuNJC$hA*1O9qQRXR7aGyx^
zk8-B>$>_RVLbq+iL8)hx=Szax7zNI@FY6jkXj%I~I})8Vs`#4W460PqpqnzY=MTw;
zhK-Auz2A(I%FsnxNzdllXtL?&CL01Kk-c3q8geUBLH6ir27$A+7xasb_upX-6UA$p
zc7k!o!v0wcu9@=aMF(E#9PE!jl(}IZ_WZE%*UqOn&kpY<oszsf8pwYL(Di8Y73_?E
zZ!<=JMc{gS%C}tXh2;`DFA=6^g_1Ny$-Rq3AMkB_?a^>EeKb<m2o1Jchy!%Mar$<#
zgKx?&TsUBw{7BCBDf=3G=TTv^tBvgLC$KBldT<NkQ+H?Rf1nB3eCSco{vLo@`@Q{F
zczC!DZ9z9sPCtzXQ>zTG!NHE95`dN&47k^<c#{F~0vsnw(rokl(_7!6{rs&znNQhU
zGGOD+92^<njGsz~K@z|ohd4!NX}%WI$eT@dlZ=uZ)X<GkjpQ;bHHAE6f;&!%(dd{X
z&stdchc7mj%!Z&Xx_}1S+*QC98%(j6d^u~u!fm~}To~~|T5v>L%2UJAsj-R>Wpcuk
zK=x%`9WY0dZZ!GvBY#Ehba|5yw09LZ|M*R56$4#LH&$OGVr_ikif2x6HP5{T<StcH
zwI(kViMLW(M*+be&P(I=dP!4@+=a$-8FKuO<{fkw1%b}Xk7cJ&mz{r<31F7X-%Y$l
zkTG7>Eb~OA@}VoiFO%mFIu>v>zW*wq)7v4OF=Wwtsxdi-{I&eD1h-spV+gO+60q3O
z&Y|0*%KWTQoY5SP7duMG<q+*YZ_aziLXjaeRIE)$S-v7U!PL=+V)4cFzO!+wM%ry|
z_X0<zHD>9Hwx~f%Zu<zJXJxPl=*Y}z&>adL9<V(g%68bFnTZkFcH;2q8;hMVW_-MN
z=+)yu_|<}s_>n3?8lHqi;@8Ey9e18cTUu(DJzX59EWlI&GkxEmdi{zKKV!_1Fk1fR
z;{$HKi8#lfYc&|F0y^XkcNs-MJhiA2T-y0R*zq5W1}aXF#F8qG(l-~mS#33DLvi~W
z!As+XfN>XmAnoxZFi%W8^CYwlpj=YrW`CJFny9;NZGLF{rClP`<2=HS@~wGAP1G2;
zsDSn|!o%S}8O>8T+Y|EHlsb5kOmtCFm%;cR*e9FW+jsw71)_8l*BeAs1+OFRT$yVM
z&F&0GM!o@^+B<9?UYPv!O}Qpzr-dm#7Z!b|lt_5@rJ@VmV5(WAy_B8~)~R%DxM4K%
z+`w<I?1<j-dUa3jcKgTSAIYLIwG6~xA8nvo)lA{~u&;7aDe)J$`(k6@OY7}oP}p67
z(+{i*L~r@2y-=_Cp3RfYshBjzZR;k&#(6{4XKz~pvWS)`;BJgPneK}4xxwk4#|)9I
zE<k1M@AW&Z6AZX&nQm4)%loo@A^;m9G&WOQPp;g}nY7w`z>Sk;RKo$y>6(+Gp+%K1
z{+^T8XEKjH;S}taTQnAZTPunq%+9W`kkRUFy$C4trk?(3<GNzQG2CTL+ZImXb;&HU
z{!!&&o_6~buEA4ar`ei#&G#dG{77!L=|y!~j2B#h*zD@j5@V(vOKP9PQ6Lkzw<0Kl
zVKap6_AR0dxcovYv7bt=Af#p1w+8t^)lZnepYxOS^sAzl;DLX}&fMciTAVN-+5tW_
zWp-q6avs09+c;<I^!s$fF~JQt;#{vwSq(?vCAM|*Dgwv<qv;xhBm16qY;HETZQGlT
zvl}}b+fF9lIN8|7#I|kQwr#!h`&Yf6Zq2Egxixe8RNwA?AgZKgV*Fqw#{f0%gH+e3
z`UB;s1aB(;E8D5}#_J>cvEG9=ijKdApW3alStNNk3z^$Yem&L!f3xi~xk|JS_51D$
zIje_q(=Y$mVRjlLA1Oa69qG%@Yg#>CI~e)m${Y^$o_MOM92aC=5oQeJ>|M+|)9av8
z8HHO+0gF*2y{+j&rU`C_!ql+T5ZI<)CTX+#t&KPvzunvo=+!A`6-#XTW^znZb@{xi
zgXcI3Iplfde}iCn@f?K~_zKe6W~dX}6!N^%7&37|pjjq`w8iP5Z5h<R$4$aBchd=#
z($S+5&))BPT3bQl0V%1TuH}20oXRb9$w#F(@g5cc45M^5sA?NRp4lr9jOKY!+YWRK
zkCR#x4lRO-OJ1p~8I3`n!sy|+as7_ySM|zKp+a0E7lA~0GNAC8^Dv48?cM|Q(~h2j
zc2XAH1Y2|l0ijJkb_vw2+Qohoitl*^EB)!DW{Os#g=EGzXc20B<n`~gmq1Jr;MwJU
zjIoXE7N>07&YY3NI!BT514kQWmy~8*NOdeYFzCX8CO-yqo{#N;VJ?Shk49=34Pq7r
zEIcy?d7f|-febk%Shp^XF=&DcY;+t?d>JgC<AhIIQ%XaL&lsT-Rm3R?c^&Z1@bwb*
zQD5EY&(*mwsgI=F?T=SC1GcPjjs7&pa;}*srF8I5*slHUQ)(~~A2Ie7w}!O(`YjB~
z@T(`5-8VNCruk|iMCgJB`9ooyIO;@ySE%Qf(1Q3FQ(s~-JJ->W7#+b#xKF(AJ%s;i
zzsmQ*%J~Ad^59}^3ydPiaptppBlO4EBfgI({^DFY?p!fncK+#2yoDy94*aOU9}snB
zVLHK4IeFA<3EHIAniU9@=^>FN2$}f$@6_=LaTGfgBfFMqj(c!(E0xe0RPZfqn(K@U
zvfnIm4&n6sCB)lpPpq?ea?@^K5VCkoU@EN6lVDSSx1f7^pAckmbcWx)e0y|n&z0@J
zoYQ?3`gxW-4h-8X<I(>mscdC>3tX%-2<#sZthXJp&f>^TyTe@Iuo;x|sj)#DGM=u)
z&SxVkpA-b7coiTU!q;r|lbF@?3~w7bbwv7a8#o6lL}_0r!7kidsAg29$XRi9{+vM8
zc0X9BO(^i#oaSc$l&5G(wuIBxH-1W5+AfdMA1VMTMw|d!)qf(c%i!!nkD{wU(Tg<Q
z2d-1f-G4Wz?wD4<(b6anb#N>pq^&NuqjP|?s-!=Kf68tDG3Z&k)g0@Z@jGozO(9oj
z0I9TU>*vD*ezQ*>%w~0N7Jgd@BN{j*3W3f*3q@|)K$*L2AC_K?F&4GO=$IBv!Ii(b
zOM>jTO3mL=+W1W~;goee(!cc<1ww0;gvR{bb|O-^Z8pc%^*k^?&dr1mP=%lU8jx^}
zz@clcwEK;bVy!*IQCG#*bDKH*Z<ZPbWntHRrgy@~DYJjL@R@+6fBbYA%Z`shrSSJL
zG;MXy9R@)jVz9Tm;y3x8!@!{1`ji*5PSUAgIgJkelE=13`1n#g=Q+(=-_(i}O`_5v
zJ>hiLR~#<o(GQVY^Q;r5@AmFDTHw}=+2Op^4G@mL;Nb}WT5ROW&GGqJ>1o3#_oh|E
zm)K}H!Qx98AgE1|5+nx3nP68D$V1{w>ZqZ*-ktJ0ILK(7#OrnexRguhCek>aHOG_F
zr>18Yyj~tdTyG}(1pSev25U8Ny&<(9y2I5cy?9KQ9yN0MOn-!iOk%&xIUTjIu!s>q
zX6{X*3K#C_W?%b1LU4Ah_3@(shS#)OJ!ECMuXx<kT!~L|lkz+66|{+oPo6`y+oonq
zvYhT`R{nI_=hEDJ8jqyp)97wC53vmkYp;IrRR$z#Zhy&`L|#pPR+;qJtbU3(k;?zz
zCdytkyE#6l5x&{SxUVSdl2lz#tv9{EBcqeaK?ab*&A!l{DW=w#;(l@47f0Vpk8(y>
z)itx%eNRur+(#lPJ<v(}J+Z5`+G<44tS=A|Pf=(h52@FNi`*AtVf68%bW1}K|MX0j
zwblocIa_t2B^(dWlnRe;7!+UEgHeT!_-C@&2kd3M`kLb8SsQIv+Sqb=9K!y|!kwww
zc#X5+Ey^^~jw)O16rG-H0bvP;RM(>}%)jrVE7}b&zbnKE*d5~<&QU?-t)46-lx4_S
zaoZLi5^B4zluKtEQYnpvj(RQJ(@m->06FoSemnK4>G3&zqkg%$cbHj<!gh-kD(~=f
zd47njc;RzK6@tfdP56OX`5wm#2;>{XxCEr6S{$EaDZ~XOW#NEzrcfO!r`10zm5g^|
zDa-~XH6r8XXD29n?Cy$JVj)$XyFFSB&6en}ItVF_6mb+b%FCwoD6CgI)2YkpbjRP(
z%2(Q$5MLW^X&0$E4J62K2mKrw*4p4|2&V&D8+I|#jh#$Jb$Bdzl(zl}jP?CE$5mnP
z5;f+kqEl3zJ9Ft~nHyZ;tVG%o##(Fcv35Be^>Kd{e_fgK8C2JEp|snq$HhY+h`(hJ
z2BdzQr;IJMU^lFvg&94&ddX=Cx!3ZNXyIS|i{&+OO|fVqw{Tk?=O-fXy|YWR_4H2q
z`2c7;u5c3uCy{~}HZGmFv7JVS1+%u-Lf=Hzp0-eU`Po=XlhfOdjkQ>Ol1}41R18v7
z&Q~-R%+dBe?8Z6oPi&HIChP|A3DT{wX$BsNB=Vz}sw{$j(Vw<AwMnc5Bywvce`JDM
zTZL!Q>7(p}A`+!%XHB8y_gs=n8ZZS^dz8&rQmIuxpNUI->WFBu*y!xeVZ~0LaI8hn
zY5i=WZerwUC|4%bNtWOaYvfgLmc_4VR*8NP<SqI(^^>`|;>>6h@XXOwUlzaAu_#k^
ziaLF@bon35qTXB;lDTxFCqnIFTe1PUzPQpqX}v4n*4Lc*<8lV8)k+t!YT4dT4P<lj
zc@YNiUfQ#pyCSyPEwoBI)+bsX01eD7e%X{<_OAYTT?%oX)BV>q@g(e(lC|y{ptlN$
zdnCHZon+6xeTncJ;wZ;y$zhm(Sk}lfA~-M%W^NHV^4}@0nz4?gKOVtrgL{uFl@_VI
z5&u!uFW25w66Rxn(eVCI1&I2(4&i^fn-W&;I(+#(h1LHHmKD$Zhp(Bj-1uGTt%?iC
zUZU-f0`k(h9h%Rf+Chou>kslP<T|tKNND8!r|q-pjlvzOteCO8)5bb?VrXfO`Tjj8
zUcC)2w4EY~f1?}+wDbx%FLD#q0zP_m31xB^S?%o$!|qx_2k>`k^Zx>get4eI$SZ4A
z*0ZADore?1XDszg^!EuiWB_R^%<(y1Q<P)#n@|AOud`HgDy)30$&!JSl>jegeiHMD
zW~lpWOf){|rG;ww6_Mo{|6|1qbc{QD3}*eBjJiT6vGWA)QRSp$KO$7lyW0b;!3H+U
z<lFtkkjU6)In)dd@fICSZlvhxdYxWnHn1WSnJri?btfiud1SK?4=tgw<G+wnmP{3+
zGyRkyp&_uv7ZTXWklE2+CJVe-_0J@C*CY*%S-YfXF`W4OtAw_@9MbMS=^0KTqx2s{
zwz<Dk>tI5^;ZO?snG?tMpy7STl#=oQ;k`0IjY`io8xBtgm8j`a^@dAS6(jUtUhqO9
zPUhmP#rpp~KJy<ky<@bDKq?a4?g29<Yc9qwTy~U9sbdk?;W|w>Bww$ene+Dh7^&d{
znH7Z4y46?RI<Us``{R7cya5x~RNBzE<brxZ6zRaZ_B6okp45+nHb`qvU>3hEg-`=M
zKAr(%4*l6>dcHw5>N4j#iovWub*wsgbjHchcwYLY+RJdNn{82be32jbG8lw%$?YI2
z4~}Mck+*aF-xXcN_Z@yW=pe-9gofaKV91TgsoSdXk+5(}w$Dd5)9PKN>60Ny4EWz2
zhOs=}P)k~i&C&Rf{`95W)HH^+){7lJ$}C~o({!FH|NrnO8f)EdLbKyf)&de%`nH8;
zo2S5JZO@XOYwGr=eqPVE4+7#-qP%?K4E0R2SMiPAbm?{RzmT1<iaw%kTCnD4okBjg
zPq6Km4=6t7PWWFoeWagVsN9KQe{{(=Ud%Csn_p<Un$IY@=2nM@zY94L{qwg7Lq8yz
zt$2q!?S6i!6hAjqUQC4Z2KS%u@f}kQfBL%}UqIEdw5cHc^)lf-0ty+%ruAO4$@^z-
z2e8wyo2DE2+jQ^M1j4<pkaQkt483Wt92+mLAARx}6tok<tOl=ruzCsda>V0u^gy+n
z1WJB6!hA$iJ)w$Lm0&*{>-ZG<_yp=ITXqK%PsyyoDGRJk&;nJJU@kluS(aYx-i=dQ
z-u(mDx`;*GwO^FgI*S#=LD^w#g0wP`{k+L<y9{1`J-{A|sNkLbU*8q`{a1)Jk+%DD
zp&b6U>}PCiNh1i)OgQ>qa<t2p0+hLbJVu4Q>=CPUwPg`42b~TQQk~5y3J%V5E80yT
z==4~O1XLALM_@xTX}TE-r--ujQuBFN(wZ$=f~c1=m1;B1i<67g4=r2)YE0R;`>GW^
zB>uu2yvdFS^%fbj7@#CIM<K<YT%Jqn#~trPt16fIqlMyt0#v=+3RsQc5dn+G-J7l8
z3#G;IwYg>^EtH$dlJ{;fsONTv@cVN@6c`UF<lV*RU@BAj{?gy_;t5-@G5UDJ4$sa(
zdenjsfLVfPqIG=^o~fv+N(#4MhODowSgbnb%d1*EL=ECO^_CJB@t5s|)})`Hx`=54
z-g|s_y<49w;PBvJU{OlTIg26Wy=X8)jsa6d`;<=?1%pP}G2q$&gk$HxpbZIdT$T-M
zaD3Kv0F*i3$60rXZO}Bi)X&#=az*F6fXgh*YD%liZ5qr}p#`4_PmX1p-KwKNmq0?e
zV`J*Ftcax@lQBM#VAqT64GL1ty7RUTi2$=(Ud=Lri=J@=8J0N&<u;kNJ@oGEgtHLB
z4x-~E-OijV>c-6d|1!kkfDs1=8y+IWVn}yNZ%t8O!prW!ughoq7(F|WY~oetl&=HO
zPzRJqz8-f3-@APY4_<?xP7a#9nr}A1h1NNZ7rAyx=bHI7H^l-_QHz;1vP0XdBw=pt
zce^`?6zBA4Zf~*>=iToax~iWzzK+VSZhQrtLhXF*v6)M)3jUV4UhAG|J;$m?-z^?K
zz5J9C_H}l3A7_nHuC>>#O07X<`>q79H;MwlGJq7>zVaBx%r<cu4-5=+KC5V&Z5|t(
zd05g{9Ev84I2DGu70VLbhDJd@AAsxACFE-Wg~b8##Djp*sd4G}kw<U;NWJ?83N8O^
zLrNUQ!E3pkB-0QEmHZ*)8NQz$TclBNT53s?2YBI2*gSr`rdlOPa*MhpY(C<KGE}r5
zS=NeYM1J2zTf4a70<B74N8G}etYev<fz3{bD===ILa(VIRWXA{;vaL#4u^0Ux5?Nb
zNh2EjoB^o9nhRQVMWvVTZ*QiXvhX33O{LgbC<>1BXQ&*#ldU>uxjDc3@Y7{EoqhOs
zd&8je+PkMp;#|@_t{lRwHFYenTjR(`E`kb^ZUv%fq9~>d`~{uXqDf6G<Cm1wRm-F6
zdfNCFHfi_Ma}x>^Ij=$?qHIq8GT@Rlp0_0vbWTx!RXXT((bC9+#S7?2W#Ncln}JAk
zGX<$*%@-=DbJt)^);gjupfZ0feI;?^$ce+^@VC&+f~)|Wi2TDCZ*l>LjYmAqkBe;g
z92XR7>E6T_OTG5iEc`Ur>(&D&Ug_Uy4V4iosW1xTKnnR1HvNH!rFmr|C-Mqy)_<T)
z(EOK;aDQ}0PJmOYPFd<)QC0QN%F^`uKc0f3;7h_)(C{7Rbf*J_saCIH864pG9(#w<
zIipyCosF~tou{dq8Ml6)Gf-)LcIW<3ICs>YboW7f^_ly>qvSSKTMh`!DV7SOiJ2?;
zy-bTRRCtV{4i&*SV72uFd_@3uHwP6e)=@!6nCL1GpN3-YxR!$rx@1KJ0Lvf;-WG{6
zYszMscH-X`v6IC=TR@YuP>$-1+Y?}WINg`Hp;E;UrsZ~Vy2_X7xgZBLeS_j?J+V*T
zQ8A#uy2R`lRcQv~2OmqG(iP9}Aqcq<6X$G!3|3^9IA&^;iTSOt+7hYp?iUO~vj0WS
z_B{Id{4wMIs_+qJZn2|gF1N~QBi<SUWt=_r&C8uY>JTXF7dsYF66?)U2rIe+PKTJ8
z?;??!dMozEOL~p@jE`kLg_SSI9A9n3k<;2zLb*q7KEqaee4<~U`#!G^fnMgnY#=vo
zwr%yg8lq5Ld?b#TvE&I@QH%YV!=8DZ+4glJ9-I#hbM83vDEFRzIRTlnyX>=0Pc8ok
zLIoj_z1~mDs=giTc`LSbdK2Sx3@xW9mNnG)H?AZUz^fmYS=_98uFlMNpQ%sgQ%JiX
zwknVJ3%DC{QCj>CmoMYCFB#X7i4QWZ<S!(<H^*L@=&z%@6#z`YgOvuGnwq9*#vb9T
zHTCdZyT{}~auo4NNvAocQGuqWQyNYhem=B%$k*qkI<%Vcz=Q%?&>GGf5)s~ERMo!D
z0`mJauws3-IZ<sqRmOq|bihavmB#-o;wwG*s<zsr((s#RM|tOHCW`KF>Ft6ad$K;o
z)9YIk-|)P)X~EIb3fGM9+f|qn{-L9D1&`K<&Mk7Ij8Ho^r(4oFsR(XVsyaENv)<Wb
zFR1JnTfV}u;9NAhjX@|l#h1AJL^jnD%B3w^mHPs$9V*9Vk5|-&kd3`BG>Wx(GS{hm
zk+HLLjuR<L`^2eFjg~k(x{t>Ak~H~Wwj@x|PAz-OTw<`>rSba5zpI#<3axP_gHA-+
z#0G>xYN}oaXV&aG$29r$aaKl<!LXdiYkmw<=i6o5bDS(wuKwq#x&WJi7?9~PSC7&X
zwZ^9!xjwL#*m)kf5lYB+!*gaY7Iv&)vv|5#A9xRGF8PTrLS*q3`XAt_5fU2Cr{L^(
zeVz_VAQ?Wc?#uwT^b%!Yqfv6$dSwIXiK6ohg1X!yUM_yNp!+wwcWu&yAGKiiBsgZy
zhB592t~&zCLlm}We}o)-n~Pl>=lld3oO|Z@{xB|hybODigZC~g$14?zS3-nGN4m9A
z54X2Dm$K`{s40rZ65Rb65N`rzbnS-$2C|-0>cF00{{1lh|1dd%Z;M_Wd|F6Dw9AH9
zE2OKBk8kz2BY<{L+wAkfU(i|cgVgi2f@#y?n1S%BMZ}yuP4X{8@$r()`;5F0On;lT
zKDf2^qReVTUM-QTAN%meN*kC{we(11?=O)&#bpK+622Mb{f!|Q_m8to@1@rNeY3Cb
z(r_6!;bF&B*5TBTAM)qnW<eyj;MO#6F?isNK!L`i7sMl3CEqFGCjs9#{;i$TQ%k)z
zS7hC0d;feu0;DIa$kB_S89R=+A&8ZN>^!kYA#Xkyu`y_8oAuw$a)6Zi&a-4K(v&8E
z%0DX8&7zJtxH12R#wGGBuJNSLuDhpV4LDX>Uq!EE><`@;L@I#Uk9VlBlTPiKF&6f1
zK=zYEI-9TY;bqGfn_4I@>JcwQPR#|SjvXsKfz4cN3bor1$`4Zt7-`lCRlfm{8*XP;
z<~+P5qn#Eo+y~eBEH&6-XXQ}F<pgx-*mK#WUP^CN*qf5@uoU-`^*1USsUL$}aU!Is
z7K<l>d}SGfP*Ef#GN2S715-7ElF%1LcWxKNGpU>mGk%9X_w+rew0T0Z4N3G*I8i%x
z?!uUo5%H)fmZ{mXe4wFoPoxjGgyZ)Lg|>KHLh*j~6WaWKwQVxyp2Am@jx!!ANQf48
z&~BUK*a;@3UQ-exnp$sgpre$|N_6A$i%5A<`A|`a%P710L}S1Ed8GyFB`+noejCfY
zjGCj7pZ(T(p*aD1=uF!rB|lPrQ0A3a2AegSj(qL+m(n9-$rJQ)om)`XmtT6{6P~>>
z8mgG=*^c~>APm9Fwdxiq%)3eR-OiQ717o!$E*FS<iAEvMiN&G4xs)d6L)jt96PNlL
z3KV~@LOlmIFgK*C`;0_u4hL)-`gqHyrW3iWplRMwfXUYVcJCx2Dp>#Hmk9G`Vs=NR
zT!HYcr?0h6bt=M1xy>FaJiW62AsFTSp58t|P6Ip|*8u=A?EL<={Y`)1(63649zp3h
zT1gef9J%?bU@8wuk>47@h#{BD@TK7hQxu)jU&q4>90(>%f>BnExWDs|84iM^rv`63
z|Bj<My`C$-tanfmvrFtqcjrE`XU4qvUZ&1AbN?ewtZ~ZU50BZrFUBf9cWg$mOem1Z
zrZ{rqtIrcr?9t+T{vh2eGr-xBBeNMx`}vhSSTUkf%{aHNpq7gAPHQOG3**YvhZB45
zO0_4h+jnm`hudnlhyFS7(e@u&?gNyW?6$syFoj;)Gp-N-)XzE7!j?)H*}<J0*JZJf
zsTNzEfcN;bsv~b9DYtb8e!%03nSa&Inn?BW@%4N2EBo2qLT2LK7aomyfgNL^MQ@o`
zNREKRQg8{VEMdp^cVBs;^-uKwu>ge}(jM|xXszOxrP(rtY&eX9J}DL_&oX$zR<bHw
zmvz?Ol!_@W6aS!N251^q*HrpI>0%A;UcBF?A)Z&dRK_IDOev0Po$uUP-Lk-D;k&{t
z-Au(Wcvt>;YKxB+r@EX5v<ZVBHQ6RlMR;SoM|d@JqI6DDGhr~XD=Q6Ky2<%GQ3`?R
zT<2^9DJ2$o6go^C<ju6S{q{70LVQA6aMYps!@kU<D)S#xpnsnejWmX(V@`z3gSukL
zw$4Ia^B-5@JRs22*4B0xct{1h9EO4Fm5HtHi3xduIC$UYH#AO8P6t_8#D;nfWza=_
zyimXa<cbAy6GzXL0Rd$AvdhZKidS}7E2~O&br!r0P4Udr6&F+&<|+2_?wdM+X?F{V
z62T}F$;Ryc7>@Ar`b#z$Q-f)iqw3?6&-l6UEeSy3&BFZnlru9Gr%p#MoRli5rR3Sb
zSFyi&;p@<bhyMPeum8b){=@xv?(c+zrEdGGRTXSO_T6Rwi1drh`~yIoy@oF?k81S{
zqQI$naZOEh8x?&qz#U{Z*zvr}ih@0P`qwaB!;bxs@?FCUh<GdQ_x;j(VJVQ7#>rm`
z{0}-1yyIjz00KkTsYnEwn=)u_ga!G?FB#GXfb-0GoK7p9BIcsp<p@_}{6ugZ-~@)K
zq|U|IZ1Ec~fon={(vf{`x!~f$v{sNRwf<2iGSr@rU90wZL5PyE8;qV|$gRnAQAR9M
zW!!P@<=|40HoNC~a$2?`10XmdI&3}qH<PzY*j`wYu4jI}Ei5qG|6i+XOL(>atjTqD
zG9S{^vYk+*l;}x}%nQ6UHTnULKmZG7)Zb=Qa5{duZUQOI$j6yZpNsq?P%aygql8a)
ziYJ=@_>rIW6uPb7W9GF*)8$f~O}sX%0AiBWkL*=VofkFzdkVjL{yi;qzD0fW1D$xE
z&I2_Tn9Xjc0HS){Aa?H0${uI?-XNZyUIKGaAI1hJ(w<M>gqZcTH`{So7a@h&(NXV$
zbi}v?Hcc*VQhp7zgs*5K;UC_#1OcnA*e>R$it}^^2x8-r(F?7}A=hZ6mGx%$zYQ;s
z*c_j$Da-|_(Zr~9c+~v4zP6T`O=v<|23v18AS-&2?jPrHcSoU=?p=d9zkE!B#-N>0
zMC!p|Wq+DMo-4X@Tt^r14yT_3-R5lc_;}}pTkZ(cCNRwshc0pD?Gt;J;ka)P`z?xs
zTIp#uAZlktJ-{c9gr`<KWuKv6U{nH%V4fT1AavR_rw2SsEA}XSq^`wBo1ByTVtYZ>
z6f{j~cb2mIu@5F+F$^m4dE5WULUMC+UZ)MP(@KBSTAa4ZYSc<*-to8t`w4ER>;x~b
zw{VIG{Y7pHv}iduFhQFQON_9%T!&6Yn{t$Q$)cm4+>KhpD{k>XTw=_Ul#criVt|)V
ziI$d(It=uu);m~1a&p@ptWr{@sS^^QNj6sKh}|7dBzLYY&fBM{P46z?H@CF-t23vM
zSft(V1{1mF6x!Gz7g|s<>nSTTP9WENuE>FU2iV+?tJG-vMb9aP=ddWfOC>YBtW~W~
zdac&$Cii#gc85;cnNDgj(S3GR?SSH$xHO)mYQ9;%`-4X6k2u<p1Ieygs#T;!yS1yK
zC~Q-p`cua4Uze!*r+$*Qb8%QOQ~|8Q4L^aV%aMv3N0WPVOmEC&hW%s<Rk(RJ$us7Z
zAzEX&ep{O)ur#uI<@s`g@=PaX`&R`mjfkUKvD!(QI-XBMACC$R@KcdTxuRMJY6iJ~
zj~1qA|JWVohFm?<f7Z!X$4V^TwTxr6_aXrYCeHTJGEz=Vij;M=X{^R5`iiU&INPKh
zk&9?1CKt}%WaS0#&tTo={v+7?+(yOMH$5oF&&=xfgH@82orpA~KlbkdjPqrEXTbgl
zKFw5G^;>MBSfDPhwa{u)Q)@<);Hv1Z9ao?yz*1~%Fsw*``&t&&dPpS^xEn$Fx%IV~
zy?n}7fQUZ+Nfj%g()MD%XKGUFBk`H`fo!HA)Cta~_;Hk-eeNjRSHW%5gBoygroZ<;
zR_t2S)@u@)GXkSAfU)g!!NXGcRAvSnql|ds@<o$$3bwH_wMSY@RCaMu*$GrxYVyU;
zQsh$ddlpPBa&l$>6WiS%U~DZcau#IG9MXXG1-a_4w%VORM-#dR`|BMJbcGg$6b9Ye
z5xx_n!z~`02~-W08Vohr?x9DKQ%*i&$ikf-i2ucFE9M<<HU)>1jW)21G>ctGss)}C
z<QSx8X<<?DK#!#)B<-=7#%0lDb6}XpZ`V1Te+i=3s>&6qo^d(!Eg}n;8A2bFSw1sd
zE4ztv9?;w6v_3G;Ml<5OKlaOvs!whIs-}#slC(BDBT}jKN4NH?Z=K=oNoOSquRW1t
zp{iN>XO?0xFIufSpc!a{cWJZx;$&&Q8-y@=K<_cT50a}`M2a!_AvizRk9at~Esa4(
zn_ZS89dDP@ux8&UQL@FTT*f1PTjMuAcl+N!pVRsIo}FEOjQZ9TiMrcnu9Q|jcf-H0
z-gpw}zmcue3qqPeMeu357bXEa1}YJdvd&DYM2=E1l`HTx{Vhn%6j<@!XPo%1Q!MUE
zUj$rkp(c;$+-DO`+Fj4!CwxqdJm&tl>^^!#53>BlcfVM~NPBSH%XC2tX@A9Kx^jC&
zh3mmN@P~vwA?|$B{k#-@hXkqTh{%l|Ye!LXXxwp}B=>-qA0!A>|EjS(*m%TvMCBH#
zBw;BeGa5t2wDXn_A|yt-&0B@>u|0abZG`teP!9p)N(aQ3@M#<Y5w|(pfMC-VHS8-a
znUABjfvtfmqG3dyNF??8J<vo%3@(LsnS6cLXaU^d`qhh*`oc>nej-~2;M<B=xBSy#
z=@8#Fc02`<Ug`ARiL25*p{g0SHdM&US?iUPs~fBQaQhj&LQ=`OB@ywF`GR~Cvmwmm
zI4y7axKpE-w&I{C{g!r~LJTUj)f9jx;6DwM<k&izQ=!b!s?$tpDEEL?$Lo-RM1IIe
zP<*NPeQRpQjQMNkdHilJqw3(UMKv~p;RDMkk;Eek5tk8%;D}Rn{Y_;&+C1Ktq1hf~
z=}DEFV~A&X$202D4nrZ3+tB0g+@EBP#shAhhj{G2YJQ>$w<ndAl|J)teR2sttvgZO
zY`+~icK#q@lDE#O7XF(vDyudD23d}3azpC#-$vPtx`QIgVmATb{6P&`BKi{B>S(V1
zxAm^HGVm^q(Pq+%%?T@it{p<zP>;VPj*gmv`%`V*PR(wjU#60v>)U>LCL6m=s@jBf
zoN@<}+uSWQr+|YuCv^)#8jlHG)%tP(Ylufdx*Ah)E@<{oGogB0Ff!*Z*+JCRn=x=q
zQPoOtnP=iur0gOYO;0UXka~xuOh10f%6d0VtH*Z*Q(6kj9YN9@R-4}}<D06)90!6^
zNSI=0@>ikHeD`%B?`j(3%yH)6%6jLwW&=VBCIq)|I*L+qY*@%#VN6B9Kz0$hePHrJ
zsQzH{2BJAy{nNk+QSd4Naq8PKRYC|k`)bo)t)C%F8b8a1>@vQJeY|mBY`V=Mgk*(<
zzs}iT7pi=u_XeZ(Kzd*y8-RaQ@5pSmfP99Tp6z+AX_Mm`$7|4IGE=Syaz$Q*BUjMx
z$Ya0MlZc&PuNSKw?@P!b<owKkWESP8RyZ|Uw+SE`#!z+!Vb%*vA|5YzU2iAV!P)Hh
z;h4g&0$mgUl3@5;ZTsE%l|8jR1WTtQD%!-AXR{N;pPtOZ^yHdy>P0z2|D3_HSFubt
zbPj)l`@?t%U@J|%^_7_N3apwi5c)Y-%^+R1Dtu#ep?W(7D{mK@sNg+U?`GzYf4c`4
z@mM&KPFyN3*N?B|87TFW<x>0k#Zp+g!hZm}WuMoWZ^oJS3h2f#MmITf6&1}F`2M`2
zk*l0cJKSu)BBiken`)e^za)kQJv}lb1eP|z<NQdy^6*P&#>-#dtEk%-aEQhTqV)Ot
z8VX+su8v_#MeOEJ`||3a4+%lpFsZd7*mbsK{ztCzUQkv4WphC%<m&_Vp4@0>m~p2&
zc=cSV49Gb{T)X{9eASp;?9d>Npf`e06x;o2ew|@1V2ay1FZBkGay_8L+y{Lv63wwv
z37L%oh!|Y9Bd0@UzD#lLs9jAQg*j`6h@Od250y2*cJKgG3i7NzTO>!BDJY_$-w#C-
zRl01GEMn~)TTqAm4g_IfX=V{#P5TfZrDES!e_k))AP7Aq>}-K470RdIohWIx&T}Ld
zZs3u5nG|-QS&K(iGrpf$p4r9u=nN?ee{cW}%JdJ?((v$bc(j4kiFLv;ySEX;`1L!+
ze`1R4?1}^7s*D;4^TWtK3^HN4iFel2uYlwm;-=I&**mjNyUsESfmPbXMRpc3@?f?I
zwOjJatADRNi&;)uT%o}XARe9fLTnpFSp3t)Nvs0W;RrUWb48}=0xc9rEcr;FdQ_KO
zMO}YxP5Z-AkKO0WRjoF-F}(%lC~SfKR>@jdDUjpk=OYxf9i2A0vIk^m0y(>&(fS-n
zO()U<L{~78I9!Jt$mArgs8GPT&fi^>r&&65m2$59{)8O=*izWtr!?CT1&)<ZoU7*q
z<E!oCq(gx5O~<eLK00X1C&WXp#%Zcv+k$n<jkQKH%`?*|aiJ2@d7X-6YLi523QeRu
zVxL@0PMz$iYrQO?p6{*^uTP}Ay4<cfk#oTWph^|(33s!zH*`G_ZMe@xWsDuXMDyDo
z_4J6wyI-%?vlc{V2UO>Es^-K2wij@A26&I8bmz&}xL$?sUs#2CO<m{SE{EuemvQv*
zUv-)1%f1`o$|sWF=Fj4gcb0nV#0Mu;SA_!1zeuPN_g5e^&9{nBZ6@CiSKxMZ4R>eL
zSqX^X;ij=Ze!#sVhf0#~DzRt9TEIIIzM_kUk>>RL9W1*QCI5ZM_>-h1*jvhj3zCH6
z9A`Qla{n3DKSK0i#}AxPqx)<Lwd)L^Jyk3aQ#4;AW?%~3s~9>Vu4)Oc?0mJ{>@aJ(
z&wr?hg(S{m)PAdVj?u$h378Ne6)7rqKH)~0&LppE#DNTl>kdoNZW994^Zd^h<k@h;
zEXt`&$L5D)P!F!~0q)LWroVKyd;OxShyowf3iydOQcd#XR%V(Mw|SlOsjLowhR}Y}
zt_Z+c`;BC|8s3<qx$0IS1?+LF;3*=4NL<nho>mK4#25!7n9E+yZpiM0Ov?v1;XYHi
z44J>2-Z88YtIkf~3O4*KK>lR*R%mw%)89*$5HU%SnD8{G-$~3)(5q=k2;Q8zipIds
zIl9(Z@~n2|)i{-r{N(rZtuDu7>8mf5P6kc@;E$SEzmvcXT))+hwc28GHS!poop1Q_
zgQdK-^4hI7>h~}PsB;r;YSKUmOAHC)>|ncQ1BHbadqKd0lfS_zApXexyPt!>c5<lj
z>oNKNG_7hK_KuH)yHeW}G7<KYj+`>EIfSHo6<?Myl29=qjRM$&Q8b?{y&Xhs;Ph}l
ze4nQYPKXVErQ(vDZQT&9OKvom<<P`>?DuT29o)&UCJn;Z0&v2+bRJFo{%G?4Ih-Ax
z^!F}U8f9W_Cfyqj#oaHz$DjFzN4n!eTr(yZr}ZP$U0>pFZ+~M?%zenC=yF003ONa*
zSt1|Sb%akwHGupcc^L8=dcT5@;AlQ-f<W3r$}cPvi>JEAN;_ipyo?S}##$mGqTMyy
zwkW2S``@jgR&Hu>ac>k(=MLh7^y2P0&V%!x^PYHY4$~O2VK%0xawx8CW6Ef;H%cmy
z4uVi6;FHEG$I0sI93PtmEN$Sib#bKPD1g(D3Bv^VwX5voIhd*NcjT2WMNOi+P%2Jj
zD~^_~*Q#}RuY%?t{@LNa`N0qx8oO3W&+lL5Twi&f@jQk2zF)}3JBi=V+B6>dVyj)}
z4PrlAREl(ReF_W-N92F#Jy&88evE>9O5mA9J7n*cK!ktkq{0{>$_v$|ifqk!uumH|
zv~x>oyzvuADY;H_g#a~QIJOF#R#>n)0+FS@kz24~IlfGU;zqEI5uC~Xxy+&KZ9_jd
zaBJ~FaG_%wzy1(<T*wbsn?es3ux+{v%uqd#qU5B?mA)?Bx{#*^%x-Oe>Peq$VPAhW
z2K~wZAoCx`L&Crgc`wN6zn#>F%F^u-S7qLAc)lc3O8G+Z^%p6qkA{hS1{X2o!lPay
z)Q@|@O37EuP?K6jUkzapm=OKUOBq|qFi>bP3Ch0A8pC}sWP8<sX6!+P=otu`659>N
zD#aL1Doci75}FbK1vvO%cg#-~8jOAN@VnEO@G!(pa;(=n&tLdKVn9JCOObT+j5D_J
z-WLS2=o|A2&1%5_h1@<G3NriyE+!|x;Ol!RwrltKPo5ln<DaWU^XzdDJ8!k&r<v}c
zlGOPHGx<)@_feVdI|8~MqXs5puC+IA!U-aj>B0`a@G4%yjSvA6&o71b=#<oGH$X4w
zk+0;WzvvN3fLnE?s0Xn~hgJ5_ZnApLC7<np!fLktJb0ye2O`l}5+qR1{--*6QV!FS
zYq*mV0?5TFUX)6b%s48Np%Aeu?nsGoA_5bDuFGyF8lR6@=MF%ybdJh!J4YDqCoHw*
z%A(PjuiKOG<*^AnTM93Qop%6d^GDFo0H-!yMoZ|PX9y5!z<vTpQ&%FnVEY9jLn(V0
zNUi&}0^W*2f}*LvF`Y9v=l&i|pmZUE51|J2iYxD!l~qUi4zgYK69yY-P90jwSwSP)
z#`%Z*+aMHG4B`A59K6V}gR_29#r`byuHIIbpSis%_DicP+e`R!UFe!^&R6hD0C2Rn
zwR7ctwDx{pHx+J&{DIrriWXBG!RC+dCp{nXO9}eD<UUE4-3P5V=_Y0SsSnl`|1Cz?
zWkzWjQVLBo?{oR7fd=(NimU)VzW*B>g8f2c)J;RV9HnCznxToL!YbFOpEsRYxr7?7
zT4fUUxu1MC-q1Sdl{=<YJqn?xA1RDZ3M0Tgda+wK9i8ZxMizh`BUpl5<vkBznHvf|
z@D}4${2dW2Q4dVd+<Ng^pbyOc;6{=sB^EZeX?Rr~2)9*_evEK}gsgU&uOl%CHVoZw
zsIQqAPtE@lvZOl%>hZn5o~=QoCV*>E_}PuKnX9P@S!RLj57I)t|9ItKTAmiu2vHa4
z_$RX>Fp+h#V%v&>SVYBdqZIe>n@#dah>a5{T8t5Z4x<c-LWpzX1U42RF#;jYC0~RA
z&Et;C#ycdp2#m6Hm4INAGqF^YW#?m3R#DP}HfY&KP##MW?0tw#W1TA}SGYQ9<%G(t
z&Z<;o52_Vklp`ghSv(O3hpHVcr%5FtHrSn^V+uTkbUWxt4{)gsel*dl(RZoL(e5TR
zo+M$1Pn9b<+h<m8nQb)vM+nAv9E_d8#@)T?FJ`t@-Kp@e9vuJDZLT1VaUNN~64CVC
zPmV==<x+RZ>Dz>Y?GR%5410QXHxWxbeYzQ&(#otu^p{Z|sg_P#1Q)0C^h-qk`y~I{
z^N{c-tFF($LA&9BOsoB8`$MBYb6w}$Qy`8yr2U`w?^b8%TNR(Edn6F#52>$8s5d<k
zR@3-Dr1po~@CI4WjL6^H9Epk-nxP5EFG!GS4BwvoTI!{)F*N>5^{MlS<dveY3`8ts
z6mLsirWX`cvVGXKMEzy6ZcYZZaNiT~VRR_;@E2Nz{@kVq@&(=Ju`R1WhC>D_y`nWq
zK<AOnp+3(xD}P_E%Oj}r4pN+2&aqJ(6x}kE?2IhTip3q?iqDWA^RTI|_*02d)?>;B
z*VDX^9ZF|Nj?JXE4YFyQElk#vkxgdYn~A{wRh+}e%CiPLi>LK%cwqF~1xwaK#Hjd7
z*iG1L@aLKWU>uY>n-4mi@VwtRevaK!KoPxM0>csPu~HFLcqR_ynP1a+C`ei@)KU$}
zp}f*g#Qnhi6sB_NM}Ywf*5XSgCzU^zvLU}UPfFJc%0!&oCNdacg(6mCRTGQ)W!5UQ
z<aNW<*%D3%6Quv{&R6{&<2lz9Ga#1cOsDz)uYAH(M`v|%UPA_V?L124Uv0|sCo0vC
zdRgEPSQVsviU<43FvPKFk6E>{rt1@eqGbAk_%xj6Pfb~x72z_}jf-<@cp|QDqKW7~
zP=Bl6yU*dSmaHZhjb+;O-xkQV(B{Rd+E^@4hnZZfU1sQwsU7xYy!2z6F3yU+-avpl
zofonrC;bCZW=(v3dmE82OY}8w_(c66(rNmf2@;K-bX<nLZSJc38Zi8Obo5?~S&yqn
ze}_&?Z$J?vi-ZItu);@m`SRR1h^ai}@g`zg3hDf=Hkq~l&`GRXZz~aU$#=^@1|R=T
z^hZ_3xyYC!GknTzZW4S-xXzd>-mk1SqOcSts!@>_A8$#1(zozOj{r6*jDz_gkx^tS
zkiEPnw4VVbW0j-GFBlj!FNi>Ney*)N*cyn$zZHn}&?o^$91<?zFp-12Ns~=BYarmN
z2PTMW<Kq0<H}|XW{s0Z7AoQIkhgVEI2l4hz>8%!$=?8YBxZFGO)cFyp(S52#o`RBi
zF4Gl&KMo>G@xXW5zRE`PpkD)5sKLou2>+h-J5QjOtDn->!uNl`*`IR&<x(-7=U|Dn
z=&jyf!@sGRAT&;y$QhJk_y>%!N&i4v{Ef+SCJ94va`<h+Jk>~?AP4;Q8V-L10i1+0
z-Prh5yH3W@Cp{ejdU~JDj*ap{gdfai-Nb4sVMh~Cy{G;R9z*WDX9}&8e+U*;smgAE
z-(7KeOPJ{5?O7jgEcoz@0T!U()@p<UlmsuJMGIsFyA9b3{LX;4`e1J)fcH~0|1nUi
zkf+rlsyyp1B?>kEmvgG!Mh%muypAatDtmK}I9vCJq@^IhKihqeV&ZFTOy%kP&#5p!
zln@N4WGn{DNxWnIhB~boAVoh1!vlc(#8I}^L3~C0APL#}+tO`@*psytHB`qy4updG
zSam-(%!u$Eg}uEv<(<BOY+06yC$RqfVMGKu0e<}0HH5)HBA%=GS}UXeir$tpUI@rZ
zs*jK`K1L7y0YoZ`S-9K{Hp2<JG%~67xi9Hgk3)qjr@9^)n3l=QYR<FKHTy~89(>aS
zLn5vZ1W+OdYYk&xN1am6#i02aY$em*mJ)gjD3=qBj@(+-dJp3!AxEi~f<Vk1ANL^i
ze_3UF9GBhd{unH7&1?12t|P`skfSkI=CcSN4g-)l0cc0wzy8<*##m~zefTuFqs0SG
z%Vu*3tRvArAV!H8N;!Vz)^Ng<vpb#aafP#N1~0$}@Cku5vOS%gIR#pp&}lBQLZ@SL
zkc?`H=<2J_8z70~V~8e>I7ZXueAhhjWYZDYA_dDW9!laNiJa>NgQ1wC5kX~7sCGr`
z3Gzd2+U}ykl~0NLJHcdsnG0skBZUf7ccD`QCk^<PIk{AhRjHf6P-tB4j3D4+93>!8
zU7p|X5)=m#|CK^h;p?ty%M`Ds99ro2%knB_nVW&*b7|G(ek=ZHDRG75&{b1dU2Jd~
z{%4Cfb4U3AJ`AvDk3S{+w--wZc5S~1Z?d0D;RWV?w14ES`0+=t*%H>y;?fY?N^bEd
z$mNFMj5*5J@Cmy;=7{*FL@1OI$DV@A66t$&!Uhet>@@S>?sv)Eu<0Q>*nQgFt624L
zU!|l!auM}bMuCZD)+N!&DsV24dH0n=M$m5;rjlard)DBFamnLK;`UtM!uCjD>dD_K
zwar!dYcpRUIEr~$5a^e;@etCsOYL~f>w__>T#orw<O~S(cstaY4v5%${U$?i!ZQT+
z;3DZ+vP3Q$FH*)2m`hpnU{4S~`S##ns^3$K{F={$!q43t>WAI7KJ1)ND3hlvnl^v*
z^}Q1HPTzRkhR*I0k-d98qXo3G;vqVl9WyOqC$yREiIxIBbqD3*q2N<`*>NGj2%6t!
zjCo0n{H*To1^Bcl!9iIO#V^d1oTJTO+5F<LDS#|pI>;JRE`FB`kTKYAVZO5MKQ{wN
zk)F4XWEys3i$jVqwP1h)$vs}S@iM`%IY8K(Y~(`XdfHc3(vOMw(-+}N>jqlX+Ult(
zJjlT9LbdY&M$;r9>~rU$crqF0`V3G#@53QVP{3k5sWKtVo!(I)^kN~0m%ulXVl22Y
z>e5`fTa0}WrxmjUG$%eG(7tc~?OtC~y#(%TI6~KO>hc$_=uWt6+gHwwv0a?qPhTbB
z9y`K;-?2$nzM^nVeGk=JQ_tBFs7@zx-$4Vgdb8r`&mXY_cKMTKT~SX_e+dt6a+*Ju
z@m-xaS^l7|M3}`Msgz+Ufv`Z>Ep0Xh%Bbu}TbKU6Dfo>!L_AnhlJ=}j^+M)9F<?sK
zYCTl5H=-ehLqUNws53s$yYns7fg#h$SzL@;L<-w^liYtA-MLA0m&_ry^(hOrXzA{K
zakWjKbo~ghb@}D1zo_^1A@HVY)!;u?;oT_w${CLK+;$n}A~J!ae?!`&`7||ewu7+C
zVKUA#ew}q~6Cl{PW$6`+@wQ00NoS>W2#IN&BJ5D&2sdR`?QvR_TLg~E$>_GSn{_{D
z)&4Ug9~Eykn=j^5(w7ks4PWn_Otou!Aj+a}=F%fYrsB=@B9?5(-c`l36+7t{V&W=)
z!o4D^d<|h#4Y_0auu4A2QPZ&&K5&SKbl0@kFW6F{f!alkBD7qen=LrG;bqsf;i~<1
zL;Q8~sVw~P^k(!=NNW)JtN7|g*emPRd&ebx)oxdx^?t>I$@=+vPqBf%l5ge8dw*@X
zD#G3rqnfgi{%7(nKx4dGzPl1FPApt$3+gBIeqnoR0;P*lOGBP&s7Xvy+R`D5LkxLo
zuv&Ho>fn2Qg~%^Dl97^mHneP#Qn-nh`B{3c|HlHb%~DLA8V8a5TFwo6RYF1c(L-;p
zc%@nIxNnWg2pea!Ln2i^xQq>=HMZlwvr_B*)VhoFP5w?9+^tUKI5}X%s)#nqhWcEB
zLY@1KIkPII?^3j~k!};Nw(ve+nEboNMz{p8KC{>&N%}Q&?2y=XitlmhPShb8KIX2O
zSl7c9$vhG!Jv8`fQ&tTRh4jnVRyqz{0pQ}jb?a{VY1OXtt@82E&8HDy@{(DvkLs1;
zgH=O8TpA_p0Q)3V?>hgv*4~2bb!Oc4f&REK;v#ka(O=f=o^fZqX%WrXbulybcGi8~
znvJb(Y4bA&%sQV(tQ+SB;>qb0@1J$$+bqPy5{gEsnpP{|R%^cJ+@d)Ok?q5p?H7^-
zs<ey(7L3&ZeCq}Y@31}c=1(Jq!G4@$#yv9&YmFe@p0rL+L6^*{IQd@O*|4F(on@*)
zO4>-_+fl>FBi+VAuYYMno66D+$&6};*~!K&S`WUriawoP$CAvaS6*Llcb-X)JeenE
zD<XX<w<o0;K6^s#PwRJUpW}5?O<gaGPirl9-c6Z+TkVe?X5YGvw?dPykI$-y_$R@c
zP4|h4i&Ff{E11+MOxpeaoiZjz9^`GqS&SX2eOrIH+EcE-RE4EHcA*AVXwexIU<}=1
zHu%?MMGCxfWJat)YURKTcDg7MLKRyTN_y1+x=j(S02-dI>8CI_QYnVpl>&;HA8Hix
zm2zbFnA}zvDj_)NdYK2Y(mR~LWQ@V~#bgr2_Tk<_(ptHABUo~s=64bOxXEhO$nVr=
zpT|;jHN<lFo+e}cO43&8>Pn+9Ariw8Zo6P`lV=G+2)qyEisxgcu%W)acv|*7x)oN6
z9j_HoyjtnIH;Ym>413_C5We%_5zi{Q2fV<(Jk?!Zzwisa*thML#(yL+3-JE>d%D<+
zEqp7=fAJ!1RLp>uB2qgy{gXW41l8cjp!EHSy-jakQdRnHf3uy_dv7<OnSGW1qvFM|
zi}>-qTkSrd>KpHRh`foeIq|ChU0O8nAnUfnGi-&x?(Q$6osGiN#&6%;dx8oaYK(XI
zZY*h7_aySDY=*)gMp8<9>ZE7s9|&y}u=@7u6WzFPdcv~F(B8`#%n23$+<KI|WGN4w
zI!^A>2og2o7-+_`U6o`~J#I12aIbh}7~KmxjW0SVx1E*>TYv3+T?^m)KKOo=eQsR&
zBqvE<6u8`2zU<_r4^o5Vn_u~bkIgz?ox3jX<3E@cvM#QkmrowEh3pl-E`&dHyzcm~
ztnJzl8(j|;idHezvn|#20HwMf@5XJnp#Ld+j~Zmpoo)HwJ3f=nu8zAtvf5U!x~{T(
z-jX}X7ov6u%kW?%jx<u8;rEl*pj5~rWvP?dy_0+Mp5;hu#lC0ULFbYFZb}?YT%ZM8
zSw#qQ0w)yXhvGFjutCVABI_aGE3*k(&-<vWrxh#t^o%Wc%slW8+!kA5o3VoMK46bi
zO64ek@K>pbyk>TSMXkv~U)+C!NHgGmFcLfPK@}AfEBQ{V6KgDH1Bp%~R!kpr1Ro2p
zJ-j4Vf$1OFk{DB%z(lu9<;!%L>saDZK!$=YP~xL@p|dWgI^hv8elWgp@TrxVFcror
zpV%b%>riwAia%bsh^RT|*uLQ+yZz4ULw(cL>8-BI2MT|s+3l^O-OeN8;^DAeQR_R+
zGw&`LYS(4g<rPHhJMJsFKEs<Yk!cU*mhb@oMsi#Bw%e=V`LDyjXU}c}+aw*$rpIH?
znbx|8st)l%<=b{Wee=vd>c-zF__nf-2vXoNYnj(+sZU^FjiSEuOlZbuBJm)1;uSyD
zFyk1j%pOJy#w^UcX<FBh`8epON^v@;d6zA@xTO%^*eA`p0jjbFPc@t^V<9J2>yfSS
zO`-(8ut^pzB2$cO99yOE#UG=5wmO~~vA^~e8<RWEO)h#uh<e*=7QMTJYupL8JPuzz
zkC!^<F5R!sF7}#yTJ*ne=04muz0|)Fn>J@F1$^@K9Uev=K}_sp-|HRb`m?XIzK=la
z&UM@7gRsXi{?1Jym!;CJ=NFf*m!6_m!hhaPTW`m8ANLr-=PHm;U}}5i^<mRHbxLur
zzOXsef2A*WJ~-jg5`!;9lnPd9LPq^)RLNDc;cUbP9L-Th7{ze5vau-aje1E9mBV4e
zTfaLgXU*aLMa$g>>(*TE4gi@@@6nsYI1OFhh=<}>nYDQk=1Pc?8k#s)QZ$HR-<iz>
zfA7(lg3}%Bu==Myii0WrjWk$3f2v`GH%xmnS3<R1te!;JipCTv3>ZU&C_asH1a~{O
zn|<8_$4|Xh&c=!rhBzyk9?EgshRZJM>_0^n%ZxplVo&8O8mb42gC?UsZ0Az#__?WO
z#Z39lcq4?77{=E3dF>)<X??Ns?fIh(ndPx&xv%Y!pH6x+|ITZfV5q~M7#OP|&pNh;
zySa9;1UBD_{j{?>*hYl|>7B8YbktP`8i570c|<zB`y)rvCngM}MRHx*S}iH-ji&1U
zG>n|<<_yzYP&gDW*($~P_BNw>^w#k-$t=eewss_O<D2qbZHpRfA{}M_?Dw*x#<~U?
zQ^xA4xe4E(L^uppJG=WMegi+xh;@c(jbr4h8*Z7VD-Sx>i2THPN7KZ69a_FSPp#2K
z!^tyVsDMwwO@jPDbnzR8W?+7A)S9xQ;KtVg^QYlk4e^`y$Lm?;RgJ>H;PctLnIhl_
z_QMI4am`EU!`^F*-_A~5$0bkS<DujcXeGSn`!#iWwglLfy_ixI-26P<RQ*2y#6Ua0
zzw691?cuLIFI5Rd2;X&v@KGplJ78mSHc67ei#crwk1Euv&?iEh04#@qodf0KiA^Fu
z`Z^A(2`g9knvj{euxP@Sqy|ETMhRjiT*VwOhp4QGq~a4@=dW2wWD_CV6ar5w(ncW4
z;sPsk25Nro2dkQM73q#_1i2zPU74WOuOXp&r=))6{B1?X8S=LJ7s{NKxbYx>@5GZD
zDO<XtR^j?hB6~VqFhsh{Ax)Dm90*d#bBp&~nVo%Qqjg6GF4Qw0T;iUv3q#{pc5`U<
z44#7^e$LHHHg(DZ4j%l@#FX2&vz?z=6L{uWs+xUwZ{(>uM=;VHtU6L%9x9v>&cFN2
zclw*Izpej&AH26e`~By+!FTS@Ep5L-QtZv#^V2?Ea5V49QgSAT_!$=L!v~^k#sK3Y
zamVdsjGDhP5%cfmUI`pF2>Vl?r7w|2%x^N!z2mFAWwZtFr#<{02p`(P--WNR-8A3U
z()}i<#?IzZo>%mA3nxiHt`1S4*DIm-;J`5Ik&E1$2TRhgw}$y*<ufC0<!>2tSd@nM
zdW-?auS6@`W)HC&AC*Si9OYz~YaKU96%Cu`S|xn5+A@#&UcE;>rMK!>Q(tXz9XG8!
z-qAm<yYBk_w|?x$+Asd%FSe(iej0@QeA~}{|M_<BBg_8&zj~zo=DR=FuQ-0PUwQmg
z`>prf-T&m%XWD1(S@j3M`a_X2lQ!mOMQCq>)A%-#IRck+v6$oIP}<qF!EX$5O9Oza
zMS~bE4e|z2t9n5M2_}aiZ~k7ht<)0%uS2a?(jq@A6vCy+k?xBS=8|6x0%A!uPU@tU
zN>r>W|BS^1Qocak1e6Lv8;~=BhT1344uTs6E@9hEB1s}|Ym-OiFfI-5R7+DeCddfG
z+Eiy*oMHviwiL0IY86Bx6xB^yf92q<P0$sJhF$&jG?{q#Ah1a!jMcjSdKQP}g8(yi
zK-X(s+^)Y~W~1jQ6KwmRb5LztD#s~Db>~M?^F*#TCYC{b*U4v60fmcjOrB+vc<y74
zAZ79?J)>5hoy%ucJ<<kpH8Irt9g+O}m%rbB^WC3o|LOgAx9|P%`La(=A(Z>Q_S1@Y
z#AWZ=ZMavkp`V1Vij{?cRJ<d;&#*zzT-xUZ(R;>%y?7(c&U47^iU<}gH*%t#2`89{
z3}ck3j-%JM*>7IIip4E8!2aqwk7K0?kNBH8dV?_ny4m|MNG;Cfq%d8eXgL<5jZQg`
zy!5+0yPAxoRR2tzy%=m*pzeXD#Z2?1LGk(2k6XEJH_Ysvwcm*o&mQjL$oo$ib7!u$
z9ULv&dsz4C_(S`9#yq>H_ud|S=%Mz~m%g<9<cnY2K6~fq+5?Y1)jo97VgH@?+}W=<
zem;Nhciww<f6rf@>3{u&Z?p%V_(1{;5(p8n0RAO6>;O9CMWy^6t7Q&(ng}QtXc?-D
zLrqqf{1qf31j`MGkd+F2<w;M<%*tw;sxhf5NeOY-*5F$d9Vtgp`#|)VN0tcgQVI{|
z<y<s|o^#&X#)LA+6vE0W9E)%(^P^G~ugE)c|I{`J56GQzu%Irv&89ZPR}}u;k!`Aj
zR;R2=s$GQrp!DfbK!qz8x0r-Fzi{Kvf{d)3$H&TT7Zq$<U1RxQyn^g5O}a^(!~dCo
zmhuHb*mLe1Rbb@FK{aP}v{c_%-*OPJPj0*p@k}Xf%&%&}A!7yQ4r>d$yU=8Xxx+?r
z*kiF&I#k6vl1%EEHIetT?Kyt&@$dD2_pZCzRUf{uJ-^v{FD>Fp)~mQ(CXCzN+lRe8
z-Y;Yf`+I4)?C}~)!M3!o10$z<y2gdJGL}uSFKZCy3FCOm9A`~8ypgbQLgol`o<|XN
zCbll)X=pJM$&o+hHm0HVVnhEV$sBPvt__sW-=o*+pu7;ti4v)Ug=a4eemXE3lGDe+
zXQK>`nij`vUY&0=XdZ_<4YpeiZ_iRsUg+T*l#L(v<#~={93R&G^Qd!7wk%Gze|@Iw
zr#bDrkDExEYdyXAjHZ6FJg?vSX4Bf4$DeM0{@175|NN?d)_(5)_?33$Rj2yzz4zYs
zr=L07Zv6b;v<IKuI7z%HBmou*xvZ#;xB!7k@n;0&sIp|JObP%)X%72Hc~}`B{S^|Z
z+7vjL0GZS|mkof?4hh0*CaHsPh~$El?m$mPA<A#U+!O*c(bdl-REreCG;vX7XN0|$
z1X<)StwF3r7#v~?6;7l}p*rMVDJ%_jNFcv8v0C~oG-3`^zZ3?A${A#g-?e7K5O%eH
zDMw4B2;s;T$raW_YgBU9LM4?F=C5DLd6XJwvA;-P4Y^8X^7qO4AjCX3=IOZ@$o{FY
zG1NOfLs(0Fm5S_Xf}PY}5$Ubf?I9FuB5gG~E4&&XRPM0?JPv98>2wG`qe;PCdA~>@
zZYauDt{d9ISM|gpgX&}W@4B_mKlV(2({;D?Kl<nw`^M<sEP8l<OnbccRw9k|dE+L4
zQ+s^c+qHS8cKso?>(Xb&pNa|C*XuPIGpFqY_EyERUNh;_ea!Jn6UVqrB4?Ob+DqiI
zxh;gLvOROV)zrDIfdF#cb5&1`j>1;%aQExNYhH{8vk%6e7@##@y^mpfVD-vbADU;U
zQs)Wg$y8Z+T)gnr7j~YW96O)1IND&<NhXFpdU=oY-`_8&VqKTneH=|16Z`DCMm8;<
za~?A}oF`77>U#Q_*Kf2LZNk^Lo_VhQ#mTenb#J@1z2@pu{Xf3{p8npyI&3$7@f+>o
zuRV{AGJoHfl>iU}g(H3PKNR8F02mO`K`xugj!)$LzAzF?Bz}v0F*KV<CIFn_I)k)x
z?FeQ{T4xA1!ofxL5E%;PLIl`qC6yi~lXJYR!aa+24n+tQZnlyUpa*48DkYUd6BdyJ
zubb5#RzWHef3+1kO8HYFr63;2`BIo0L`y_4ltU=NOvF#>P^`^r3xC+iuFerlgkS3{
zf+>HX`i8HINhF&JuTuj|+@LPUnuNNHkg%1w$ODaaqguBCnc~;KnAlSdWT;-%#Z=DY
zcN~`VH7~n%eX!9Qw@@$-=`RWw!(O3&uD9ABeBg0qv23mouEXghtXaKAXkKG=!4JO@
ziFvDI^(_=egtqTK``!Mg>u>Mx_}Kk@OE4t1YQM$5Bo=%2Q)AcgH}-$GQ}^@K&xo}R
zEKuO#HjHn+=mo|(BTKV+5L*-0%&)7z?<0>e&VX%o1=5=I23*|Rw&qbom1#}b=mbaU
z18nz4S+mxl=y3wG4ok<AYxWr%5@Vb}>b-mWi)J}!cAxLtGwvC2+4Vaz`sNOG4Q&LM
zE(?6rLc5*PJ`A7jl;&LKnWx3}vqP2k@;Yh+!}@tX`yPzp!Ad95mYb~o`rgM^&$K`O
zuMf2=uRhh@bp0LeLnj{Zr=R$N6o()SmB8raz5@xXK33_hY;DTMO+_a{pa5(uM%v`h
z0`wiOB5~P>C>?@m2#kUttsD|dN!?VA65&Ilyh5c0QzrH2@F)l%$b|qo$Rq40;tE3J
zqLq!oJismb4@ET89TJBn!?0WD*5R5Oo<^A1#EWZ}`bJJzkZjs5LWFArKihULqsg}w
z%?LkRbyY#i%669z1&L?aRz4V{%t|!Fp3KFg;^(imF}arVy2?c=NnLX2*$On*L8_#c
zJgIMqwAoH);Nywp7SiiA^Z~)-y7(jxH7O*&_Oov#8WrZUp$~fsGvk@JidYYVx$sBN
z${Ico!kI{&)ZVRf8V})%R#joIwdX3IS#JAXXP;?rxc1ie(Nkx<^$zL|@Q2{d>*M_v
zklFmV?ww(VF(Bb-y>FjzGQ|cp25g`7o!c03g5xCs?zv|#_IKc_E;$0H!-5oQx~-is
zE%*b*7~^u(FoEq9OB1=&awZ$4Hi5AD+A@b|v$fvS7be?UjqmE^K@S6|t1_Gp7*-sK
z2aFPnlO|B)%UA<C`P@-_j|?5d#<KgjbZt`BrVq;b<~+7CFZoKI&@fh-5q3)b(Qbon
z!)Cev<k)-clx^1Qwc~u^y(3RiWgKO*_~PN;wEz6!&$lbCI?;ds&pzKibKkl>@^uvv
zbcUTwkaF$~a+RbcB}HVN)e-~pPAQ4Jnzc{)48Nsnx(LlmF^O;)!jmhLkLW)UzZk0s
z6@UmtssciQm#S1n=0eFcAu$;(_ZK3T68ND+IUfzgk7PLjS>T$<h>2saC=Nnnr7HlD
zN=;5?ci1_6z)F-8>oK;aRXTl@%L*!^2<oPg9H@zd;zUK(^Oq_X>mB49N|IG!RBR^#
z7HTF#g2?|wNIn-(Y!kr=_39Aon?uSuFVlrC$h(wsi?AyW4~dut@st7@hnBF#wme^~
zz8-VkSY@jssUV(9koZ`)bt})Y$*rrnnbskq=>0(lq!ji}>bmxwn5WccuaVYZ?a*<~
z2WA?C2`cZq<-w=h6~|At(~o`wdwT4p72g8BfH&IzwPS0$MPmt%8m@~y{wM;Ku(RM3
z@hcP2UAx59K~yo`WEwH!2>Y>W#NWWYu|LomTFn2V?R^|#7Ks~)=G;!RYxGx|0oScg
zW#kWa-N<fR>wS^D0xcz0UmJl#G+sLxHW_}LWM#~Qv8vOYH^7uAruSN!$uOSAA=Uo0
z%DpbM9x6IXHte{7)A?BPo-I_%7D)~|Yi~wEWh<`v<o-4pce$?TYbUmzId8f5`RBLo
zw)?-<e)C;-_FsMLseaujA8vOZey20!p^!}guQt$aQ5O(iRp<}lK#?3LtXI`eU+*At
z$na##>eDKRFbOgO1(LP|A|NybaHw%sSOVZ8^b;h)?+4*B@q*&AbkcXS2~<T_EV6*W
zp~|?AUlqdYP$(q`iA7@kR-}zZF095Bxncejh;+(d40Se<?+Ei16;ec}C_UjjQteQk
zDkAA(1}n%`Gskd!QInUIMA$!A6ymQH$ra!(DzQJC>{`iVu3J?hnWKiVXCgpJom_g(
zxp1MZXM{OJ&9*{?f)l9dI;3TVT}rzA!_No`P-J6=#jQSTUQ3fs`Y!V*d3f>H!Dx)g
zFJ%9l^u7vMijpa{e--(lE=uCTE7qOq3|S#R|MP<<AM3CCqf>qT^!H=a)D8@&nx@JG
zP7$N^`yO1zzCU?C?)5lk5vF~_X59Pp`<_el=P|ENkuh*_hO1QAawM$cv+xi182WPu
zgKhoBFh|R3N&Oqf6isk_^eUve@S5HFd$coxnbxJO3Hw}3Zk)V0PaDw_Zeh|G-rxvH
z)tNe=)@3%C>?Cjw3~Ia<3qFw0LRx5)i6g`Wx$t@M@Y(3hdSfzg%^CBVE-1!c#)fuD
zBE#l;3EoKXTiG-;k2bj$bJV<RU*G>>YoGe;WBm=+-qzl9-5vcyC%@VrJoiI|0b>JB
z;T?vBq?-7IY{KNcH3KeA=A)v9+?gC!b&@`Fe_XubuZnPWXaWHdP3P~3yg<P)P_q39
zF}2j5bEK>k8t7Y6BMEL&9D+cD45bR<09p~;T&+pMopSotCJIsf;IEgk(q>ZYT&SeR
zhT14lj*zD-9TSlkm|86*Ay>FN2qW5M#cC*9E~428q*YZZaxxZ`m|(O-n%!>>Bl}RX
zP5F8GkP&L9Nwf+q)?N#TS>Zn``)E=+p_G!GCDJtbu!*$nM{=!0M$RV{8KuG&1gnyB
z9VD!ZDo+lCNrfs>(^zR7$|1t1JnT_bU-4P+zTgywLOAtzj05CdWDf;Jad4AL>@n$J
zva;_x-5`|pP5;A>+~0ohy`O78cy3#<1K2p<gDX~%t%Yb%RWfb=#K<Esw_M}*)YTlf
zau`TApuHVN9f|+MY5yMc7{^rY<R&bB<Z<Dbi7oQH+~=P8#{F5y(cESN5*UR>8TX6|
zXX)1~)!c1bzdjJX5;80ew(&h*oCc7cD#mBeN<)@mc7~Yr+fwsp?~`%uy0OrzHd@yL
zvkww9o(}x^d^|G(HGg65mE^$@V!g|}vh(kIpysE7{2GXMG*#v%8`!4fIEwu$VQ#&j
z`og*PhHGx^zxD3B+F#zihC<|UpF$u~$KtgSPzpQ|j^o!gh*;=EUx<rBU<N>k7pa&y
zOr`MP3V<JBww0A3RUt;dP(ErByT$;5syQJ%mceubpkpX5$OIDWgCr;%2!$j<c_NWe
zfR-kw0a#}M)Vw}@Wld7^Hdw#yklz<-hKUwJydbJpWH-+9TDMB5orjhbQx;~VP<qNy
z3!oMe4S-%jnX&2$Qt2>#&e`H;8!1Q5J7k)G6>H~!qOw?HGg-1qjQ&Kj!<TKRLp(3`
zPlScn`T0A8HixR$IFv{YGvRVkM5xd3IUlS<2011x%3enhGpL2OwbWQ1xJ0z=1I)#B
z%7W)abz9;6tk9!C24U&&DcVKt=7VEW_v3(oXU@6B=dV9~?uYFy@4T~p^wb%GSm%Bk
zhxY)gHrtm6I0n%W5g-N@ycjXK55G_FK8<6Bal9u$P6L=@mix_^M|?_=FJmLHIq8Jz
zD~GiG`Bdp7)@f}z|I=rcis=3<prEZ;8(!yp4~H|eZCwXnx8SHSoZ4toqsUrKQv4GW
zsPXRkz_QmhSd5>+7-4RYDcgKhmy)80ixSJ%RI_6ZFS6(8Vh_Rc5X$1BZ`vu3ef&%|
zZdj8&iyiY&Kc$^<PPso5PS~ZkfotQ<FC6|&|II)7Tzmbsx3(K@KGz=k`es5pKn`?5
zckT>BUfPtU9I?_6*CI^oT%@WjksvDXu8|b@Ydw4oLuL-KIW(D*uKk(Gsueo{QiMuH
zY@2{zIYvtZJ}VCSy>G6j-Aa8^^<Mxi704Z-f{H1^sQIn&If(RO8Lz8j4Qe8+I~$rj
z=dVLS{v^mYRmzRlBSM|>2ZcM4&j<gK(ijJUrN@gfBf_^J%Bu*IN=eE|{~+n~IoW~X
zx*&ugAFlER5o8{kLc9^;wt_|FP2?m<Pzn|LIbyycL)lD+u*!wXbg!!wRw$&ZY^4G#
z<qM>89VEzM)=)=-Oa)0li}jY;jKc|^YlT;X{E1-NFGMiIXB9rB66i{47V*UVV_rOP
z9<E3xt>!aKo77A^KPj&f?cDgqZ}cmUpXg7npV8*OcfTI?@5!}OvH&O;5XnTt*8zxj
zpp{gsz~KZ9ymNx}3ClX5XCf{XEaXM0f6lr0@$+(f);v5G+wBPaub4dYg^Kj)QmK-y
z3}*a|_HSI59&0gKcQ+Z<sNbVkj25ylCqSnupINx82Gl*1LBnXnpsNBkEXb_g_^8r1
zF3g?<owUb=(_~`y!yIGrlC>tb^#%F8x)xlpK7O9gU7ka_Sp<A)TidaGULSze6CD_9
z^o?(QuOI*L=lhjco#^lQ<d@n5=bm$zEC^7L0T2$KkXt_OGpwoboHug=e}Ho2A3<?h
z`=l*k6eu9kI)FqV9K;XdoTbBIP9A6VW2xE{c*jXU0MsEkhMA>uDTJm_9>@toKOmR3
z%c!6!_ey|<ujh!ca#0=5s*N0OWLPidJ&Gvjibsd$IVY2(0LDaa5i+GJ=E_c!I`*5$
zX|zS<j$}auBuGXO)mU?^kNQQv;TrZgnYP`jra@7)EvP1r6}Cz3TBDj=idF+jU?Bp-
z)!UH_isYMQfpn$NF~8EshXg(sH9VUOHBw%s$)o(&Ie<7^;Q$u)Wj<o^Wf3xyS%+Kw
z-14hrOp-m<bVyn|wC|!Nll4)d^TEz(9aaUE=eypfxy2e=<vdSJ-}V=$`yYJpUO>%0
z44GhZ8zW7zfu}=y>wQXODq$J0!<bd@sDj?44*@gA*4SFcp18jqF&>IRz@r#j8s`k>
zh2wLZQiMqaZGw^GZT{KN^33k7UPs(b)Nj(qu5YS<yf!${V!SE+E(4Q!%aAa1b;`U*
z6Q|l^tch|c51BYvZfoeL7^&^QSMx5{49=R}iZ=~%@YLb<j8Dxpw1vORwdZXyeF)lK
zhkBt`C4*=~|CV<|HE+D<@%F24ySe|?pWM}N|I)Yd6$u7pB{O@I&V)eWo=gNqYM?UY
zLW@l%WFmY{-e*3{VF9qn&tX_Nz%y6kZnaS>X9}TD5>JKi1k4OgZ`0|%hL1$TQg~?t
zFa?0DtPnW=ZfgR-Fyu1$P-bZW03ZNKL_t*NyD{NiDqJWVq3neH1iG#cb<P}fj;t6d
zyed*@U{tQuk|1e<F0!~Z*;Dl>!j{ez+)Aa1@V9d=;fn@r6PeXEt*^qv0s1SGdWKz*
zobS+j%r_1m#mAU?DsmE}Mq%Qu{M=z|s>K_TF^A2!oy5{A6T+*qt(DPg8x>(d?GvHV
zVZ?cv9(%6n<$=dz#B&PeFR9*8$yrgI@<j1G)j}JEt)<R0pA~D1Jt-Hic#cX#NY5@p
zu5pkQF;0Y5dyo~`I1F&Vi^J3T@qhlY@AY4K+s*B>r@yZKRoF4?_d9SWw(KDi6ch>;
zc`xVgz6S?PcoOi|K81S~C;Z!doayJJo$mj#P?Io;c8WHS=&#sUY(~5%-;0JvtWU%Y
z^Vzi{@vM+owrL`3Tid3#!XDd~*ZDgpIeKm<wU=FjZ%#=<Hcac&-wVs0oL1&zli_TT
z8PgWSEe=#(m|PyS!qNJyEDZa%59dYJTQeeBo*3F?7_%pQl)Z;j1_sb&4^N#=#I=a~
zTm7s!;<@#A`|o|=p7zFTKimGxZBO<uX*1oVP16;gS;cX_3KfPDUS-G$VN0nr0BMKb
zKu7{mf_Mce2FQfkCUwH0C@CFK&KSm1=t(LM0C`2g-IzcM9Gv@e7=&*bW3y^EC<U-h
z1zKH?kfq2ANiYeo2v$q$W(Cn;X~F@!tYhu6T4aE>`lm5M0Z9q}0&pmHP)$YNceX!y
z{pEdeu;{0Gk5m#@q$*^--nM&hy0?Ae)^ExtIS&rubrURv{gI2M_1-`Y+7UO9D;0|@
zVap(eyY;*0#(VoGZvCdifh$%BvjW#)-Uy#E4FCkHkXI8`7ddQ2s9ap(@H@kwB=0^%
zknEW}%fGm$mGrOt?23>nEE-|cAZt*-*CvW7rxGeA3BH~ugk)=BhS$Ty*!il=CG_|h
z!p-}d!_&Hs#CYkwN7dRv`geBu(1|biUw_AE+w<F2_V)z(0z_=$Mv|VldZ~I7{7bk7
z>>-ZDem{r-fTsZ?ju0Cl+mx}my-NJLFgamY)`QX*^0l+{rWv*wX2B8qc&%rWZB*?8
z?TQmhbH>eWa!s;PzRm_pq7ZSv_qH&B^Jpyl#kh`E(mc+*5LtDaE$rwZ8a&#t(WsJn
zPUBd(Hg)0k6Iai#pS@<zl21&je>lXXZM-)Ux3>4QO6K?wXY%QFnXSQmU9$u{AKUph
zZ@lM;{@OpfxxMStXWE13o<oJEld4%H5y}+R1&6h)-T)v_q~VR83DL?gLP#rrl>#bW
zR~euj3Nr~&?oI$tkP9e4wTiY7N&pdZnLrRDyePniz5KNf0Ee~brtlF+LI#tqRG>o;
zgfqn+S+%ed2ZgU$rP_fmlt7L}3XwwJ1YCr<g1|!gbQsfNd4$zcHEH;T!(pwRy#Dfb
zuvqldnKUCD+ob9Q2w!vQMg5YWxk)~$aIog(P@hN%4kAt=$hnAAS3%4heV<>o63Wxr
z^|oDe>4p80pSe-$b_(B96<(6`hf2CBJ{?2{>RCLSJCb&0n5(ONt*~tpDV-g_(zCwC
zI9Db!B5|HaQ$8xlA}Uu+=GP|hDcm22AK23s^joKFKnZsqUnqy$Zi2T#cpirzDU2KE
zghGX7PHYNklc2Bs+{E)Le_56g@^ah1^yH@f`n9+BTfT6v=l#2i1+kwKU?x~r)T1Nu
zOc>C6{XEG@(SE|2bW!Q2?@`A}d;2ibn3S>B`db<=KzF|_TDpd~JA1Fu&cnJ?jGx$H
z#M;6P#%t0X;*A>4t?drczAi=2lc%Amh$VGPmye8Jlb%lqMk@wMQ;9dGPUDI5Tp(xC
zTBUoAV#qdf8b-@D!Tig6)rQlD3iC|1D|X+v7DHRGwFw)IINFT;h9q3%$mEpcXXhLE
z{tut)@A%mL{q@(})^0xibPuq|`B(s1gmoO6f)cbYYJ}7QY@$$t&L%Qoa_J3qBXBgq
z^2W*{3#(BG4Le6FRiIL}6DX`4N=;R=q1>VUAQDLtfl|cqmH-@ti@Ajgvk8R4UdXKy
zDMF(BI`Rr5gqrjJoI_aDpe0GfMg**exJX`DP0KkuA1}{?ii|_+tq`S_4hJW%zq~CL
z2kn7auL$kRUy{<=&aSuZ?U!EIFaDVmCKx+kR5;dz2dM^DrOvFrA*Ix$tu?C10(hvG
zx$ubOa?`K9^rCk0t8S7XCB-jDK#)?|5p6S!9^=)RoGTdzCleMEKPqQDSlADpx{&-n
zh#SZ(iPKr`5AmE(NtA-=LXe#15u`t-7pS;N3U7XHRoJ00I#hqzs-{*ztrn4nQWuBQ
zP@c6PnIz{!SwmZy#4`NLsKc4nrho9JFSmd9&O7>sC{gjVX`}8Le-g5_j4!~SDmBG>
z117nRgzX7X+=el0FCI08Fw<uyZG}S^zY8{d0KhreXri8#`BeM%Hv2o;)rezAjb<1z
zG}%MuF1XtCPZrAbH*HFM)}%7WC_JOL))#SM4x=VuZ)tGZ+1$}l47R9E1G69c%Z^mr
zWm|P}z8;QG<9JZ8b1ZgM4Cj4UJ4~D+_ZwGNXWflIIYg$L;{wv@VArW*miMbttKZvr
zuljA-p}zjq_u6l~^N#-JcYe0t^XN03N&KuDbmH+wN}WO9N>*&D%CAYGGlS*X3dCyy
z0l?KEO7|_GjLjB6wnEVYH+3lqIlNduS7qnQ?NaGu(ze3VR2oDO4O}XYfN~YrGk4B8
zV!Qby!nhT&usUR=BB@+q6RUYv1rgG7exE@peLYMlp8{TzToZv@5E8`N>!zG5Dy<;y
zK{(H@w(ZpQuN2Wcv)uGo99#5%cH^h|KmMtg^u@uVU2xG)w14<7f486B+5eX>zMwA-
z4*FuTXp6;#n$Hb?^qTe$e(ELdf(tI_fA^<;w*StD9&=I0a@${a?4bXjcR$tM@=HJ8
zFFv-AufO8hqW!a*KHdNE-+xJ492~S`7yd;1hrjf@{j|vS`JXrZ(QDd2`1^maU2yDJ
z|GPi+v+cJ(^q7>%U%vQQUmP5?#lb;e99$^1OC$mQ%may2B3Mx5kfRAF)IQld*2#wp
zhBuYF82+blD4!h@X@@bPoI_1L)S5HBfrkVVp&bcZxo_qRlDIns!v`$qR&HDJ?Uj8u
zo@wR-Ixm(*OeXVGL|ILXRE$K9T?pdCs|afBYl>2Mzd2lQ+e7D`Yrpc=oBLf4t!8_B
z!HmGHiW>>YCi^>aFkzRw$tW=j0_eLE5q?e_?79cnOfhK0!5Hsc+01QNsMs_AirwWp
z5r!FV=YGpP=XhOhI2E62A4iORudOEcEUM%=UBq-6C=+9&GedRw5gBw@Tp4^qD5uVP
z6tS!ZfHPv86C<-*xMX!WE>`!?GKbDFPL;+&@~Z8qsEzh%*$Fk>Bkkg!JUMipY=--_
z0FONJt@f*Lzoq@&2kz?+Jn@{8|D_((P1RuzgeXfg`w~Qp#3DdwNd=>|Lu|kXJQE5g
zusdXv!=?Uui41&kVrNJxRai2dta)#|aSJ3v{Xw`&Y8*E8P{$OmvjS(boRjOB(_|IQ
z{VQCI&?t$L0Sdr_xj9G7MCA-X*kSD)LJhUVU%i4*;R<1SDZVT`fZ7^r2^1N(v7u_y
z&#qcKaoy$pU~$my-;tD8TyW4YxbRr}-~RPA?S@+)Z0~yOYx}{$L4W1d5A?I^*6#nx
zv;FvG7qv_N*T3iwJpODuyWX~szWHa{!Q#U9%m446wHrSD>HfN3y1XwIi}v~(zbSuy
z=>?1avVZzN^`HLdzt*q$@Cm6vFTY^Xk6m=E{lowJntsD=54Lx|^|ftraL`}*)`vub
zZg|Vjw#C7P{g?mK2l_`p{omT_e(CbISS<SMPdwEQSFN4?>a*?mr5Ck}|Cf(yOlRPO
zRGH4u$3)DbEEm$`d;Bao{lSG7LAF=~BT^(~6@^IQXC&nycY1CS+GS`o(ga-O<6K*X
ziFud_--zcZd`F6~mHsod4{RhQF>JOw)KHB*#9m~znmK}g&X_8o1LzXZ@(PE}*k^bs
zU4@-YQ03?A*53V@!}eS6`P{gl1CA4ENa{~d`@6Ac+~?b#_W~DY1X8$E@rLhJ{Ob@h
zC^1ah(uk@Mk^n6@#SBA-`R(pFnm2%~cn-T4CZ83v(oP6j4VImZZEjQBYWO>GuCSLb
z-N%2<zox|)lTM~LC&Rb6IbRRCHyI`^Jjlv0*ajQuT03Sk{y2}a&?YZ4BL}%Ei=Er&
z;>Pu5Zgz~Oc8{`QvPa+VAmhm=JqUx{F{#0>Wn-AwFzkK4jV~PjO?&O}oBOq&_)>dh
zxiL{e_*MB%5$2$xvyKyQI{i<`Mw1G{lXA-GDvDkZ5UW(7urWLvVB%b{nj_|Zb}x_&
zhpG&?B9Ci~7b=%?lu|Lp5S~+L3!yC8W}<c~R3xA>xDz<_RU=RuMO2}Nq-sXlycy7_
zMl5NgP&~t41X!<~D`I&F*d(AoLpwsbVOW{@Q$fB@T=&YpSRC{Rc5{CD1qbbKU-s+r
zgTwW<z5bF5+QmP2LhF3(r5CkJUUg!3$oN`&(PGhG`PK)M|NfgxFKRD(@l_%;FT3EN
zz39cSExDxI_VQx~{Y97kdK2MaxAyvrFX$J)`o!)KbguvH#iCz+^#cx5uD9*qTzX-D
z(To33Wa`>WFKU<k%n7GDgt`lb)C#VjG3HYad4}<s?uX*NOeD|BAJy0he?!?y1v&9K
zRC}fzxWc&UP$*Iq1QtqP&J~4nr%-RG$o3QYJMD$N#kOo3hYMmNq|Bm@O`3-kJ=+D(
zAw&I5dyMl*w=ErrbgiQvR*l1kKIq=@$hX^-SD$Q;ef?V%S9>6jfhe|dZs&8Xj=kSM
zNg@gk%!nRQsPlf}q!A~j7UlNSSdDoT%&Oz;?qR?-f#q;b3_`yT*xV-9H)DJvqh-#?
zhOm&wH4x*GDEHiEnwMuy8xLcjjc1_|O$c4fX5xFpAi{hNbLi+Ocaw=t{VcT^i_6cB
zCZD}tvzKsbQ9;Vm{bL)Tjp*~p@o+48AtqxTJ}W<Y564kF&*SYT{^?{_ZIR}fTe$81
zulFmiI?-=9^;K<%<JS*t1Te~tL->TDN1eDq4*8V@DsWhWKq#lhDxQijQdl#>GYI*`
zDH-9yu@cxS0Shxk(3T)CL55<}hEm78J1Z(%5+aA@FjrQS8bop;zZC)kGV`rO{!%rj
zRKK-J)FJF7Wdot4P%u&f%NpPxVM(fT2+OIkgJD91nw?`t0*r!;P;*Hf*RcO?{3ox!
zydNwM`u#f_zx>#uz5I6{6xlwzYVG)C7q*LEeWMh?w_kc;zvNXn^)t(Df8g%dw8i3}
zf8g{}?SZd;uigLnv;F?BJljA1J3rkQ$Nrv_sFxjE^q0To!K7RrE;s$<7cBZK{=<V-
zW>=ej)uk8qOMdRges;ZW58U(GcCa|;A9&!YcKR#N_S27luigKZXZt69=coI@1%FQp
z=lQ(Bn|gYt<WI<BjAte(xx;~~ku0ik0Sd7XOF3+Q2)m!bHD}5*Rf~F96y(F4pDnBO
zTajhwMQ&vW7Cj9)hB#2@(1=iO4O25sL<KTB^dYh!BI!Mg1sd^rO7GA!%|f$Knq5U(
z@(h!L?ZX`R4u-Zj{Wt&QuJ-X;AJyJZAjrZ=z`|ZEnqii)L~Rj6bXCO{-#tK!@jfew
z(O$tI^xg1&V>cB)3)$k>dEbcB7)@$7<7V!zw_eA51b1k(W$A5dC(Wb525AlVu4&HA
z%GZF^_ttt}Xu!M&&VU3nj=I%>7VD<LBm$A%9~L72Jx+Q;G|9>4*Co=!-?bol9$Jv%
zgrhNw1Ezkex$?spAMoT+oqMK`&gPL>ei>1k0~|KlxDapu>~}oywf?JbyQSas#cvRV
zRHTp<1t<+rud14*+$)7Un@Q8k$^%2Cl{C6~ZOnNynK4MHDio?*oT^jhu0mz`l<%BE
zD*;wFknruW3_{Exo1rigz}5a%<jo+>P_RR#PFl|di2#^Fp-^>F!9<K1ZL+XN$|lx6
z5!MxRARXe4IZJ_)tx=^MA-W)TAcd)dQei(UoALX3qPJ-G@9uxa1qbbwA9}QVY^_~&
z>4p80SKp-euet2Pe#y_=)DD;1e$P!m-xrI6wpc9s!NEa4I9RmB;-DQY7X9F0AwPTR
zu|>Q5!(W3Eb$-oXe(a!K{^3XEhiBKVU47|A?UJ9nsUNPk?Y^6Se%IbXUn~~=V6o_n
zct!i`)~>niqJHtKZcIf9K|apN#wNHTz*f83;VQ3}iw2;$L#fhNoum{2sC_(06;<Bq
ztMgy;VMAf(^mQjBsXB0k3JIk=g;7nEOcE8I_Q8URU$m)xBS>W&c-AIk$>)|^Jj>WW
zM9zHBWEx5Mnh!cooA7fT2S28+SS3^;5uU;Ke&%fd_wV{_29u0M6)c5|18#s!BpEDW
zLi61PlPkHLyfnT%Gyz||x9grGFfB#>UQl!@ydn`Vb?G(%i3G)&ikaT09XyjFpt!Yt
zHf!^F_Wk!K^QH9(yie`!+DxHaJCZMMxlxdbR{Da6z$8N()j)fQ$8=oLh_CU_-Gb&&
zFbvT9@P2VxHy;ii^lPTLC33ZYA%B$Dp2fzv@F!S$asD!fY6JFx_1dl0#P0p{V^6g!
z-+HRwa{B2;un{Q7W~)tXN7$C$uyd6mll8GtLj{b@ocS%O@S%{Ll&GCIe<>LT6@VB*
zNm3{RSTeck1WAQ_pt|{UfZf_aYv8bgK-Eh{22kx-k?F6-u<~(;dmT!H0z~48`G<|2
z2j!v%<N~H#Ie~EiWD56g(;B+yW^4N{sd9u0>Hch^@EroH)g;+VYqD*p-g$Xj94z_+
zJKMbCf`fkfhaPny&2rPPzU-oQ$*WI@c$^QD-qa44n||-Dztk27i+-=vW>?c5!hc?N
z!9joJ$DVBP_jb72wwE7Uv{!!cEUGX!{rF`U^-ErTq8+Zc?Y`UoWji=HX!ioh4>8y9
zhifjos9*duH;Uw(1<4V4m(6h~uum$lmE_n(7A9^YVp`i>*fEsBM6^xXBV=m7L+&b`
zi^EKA6fVx{Sr8>35_NFWVJC=Lkf|K*k2xg&!5DJoD-WU$HK+VyDeBBC%=xHkoN)+U
z+iq!3lDfKkenJ(*bHNJUl;60!{<ep{)vvtzWLtgn*`3-n$D%gu{~15C`sb@B>J#w7
zcrKJJ#0h|0aVBAs!o=}m3t;Aa3f{InZnT?lE(<P=6RrxJ#{+yERJ6v%V*a?kj3Eg$
zWtI)^nIw8rdG5hI2K=Akxq&?QO99IhU&JN20t3#5fnJ$=ER!Z#K^w_<aWBT2Cl);p
z3*BIMINRX#bg5{K(;N+~=?raRo|)j<iL*0$Ec-}eGI<_TC2^c@b+T%k;k_2?h4mP0
zS{$*r{^+@H_1C`j=KklWzS6DYc(crTI!-)Jp`if&r9sylAU0u~-gB5F6a^=Q2l;WH
zkI5gu;vlI@NpXmTbb=JfXKcz)nM5>#5CvfH`XG`}-29alRs)#0&ipefI9AIDV*ZK;
zhl+w|Lgf*lLUCDve636jM7$KD+iJ~79;j+sh1q~SjNhZD`H?&$bgOYNWCnm{E*i;i
zkf0!aC(jeTc6vv^r0B&#V!drwU3yW!_|-RxG+uk@h3%48ohM>vzj|LgSRC|U{Mb1p
z>2LbAzwnRRKltB2s^XQG9Xsfk|Ce*hVGKLG;(|qg<%b?^8s}=;j$d|Bzxd~FJm20|
z?`w<2qW_DJozsEg?5eeEf8igspZ=%+MI`&}mtEK|dDTrW!Z5*8nB500sMMimh26rZ
z)+Sn18>yr^ybZ-P)Gd&19o9f9<#X(BZIbF@BoI{`f>3;*Gy$a|Ftn@ZJPvUPov-lh
zgnz32O(*$GMJLg}Lb~$FR7e&F9Oumiq4P86)CLn?s_|4Fy~o6XF2=IK8sjj!ThG_M
z?ba6Gsb@SPhRpGYdwa&hz>)w5fv_<)(1O?#xRm;BY|w20pQkuA5o16v5>lC5#wQ?i
zt)=(b_k<+ECQ}>ivE32vB-;U9$GMO56_)|>)-i)jC))$7ZKm3vF@2GxzTF4vjLwma
zVXNc!WZbw5%a)9mZ`{Y;_bv_{acao&x9;83$H3}gXxV}$WWNKcP2-w`cqfFbj4Rnq
zYcyP+$BVUW=`;MOYdx{WH@@}#{)TIA?N|TBX{jm(7=+kX0KJuSO;njlLJ;A}HAq3I
z8_OtIhz++TLgHk8e6JZc%rgWWgn?c0XO+*2-nOMpRiPAD!MYlDn@P~h<L2pGKodk|
zX;OKHz_D^z`YgtwoTRXq6b}|q7@$&ET&ia!tyZ8|d7RY;hK(lQYbJsmq)sZIRj?J-
zAVOVKPZ7?N^0Wr&Pk@N3Qv&E3q;a?YC$78vd@;suTrWR%&|dk$M?)QMXI7hj{L+j1
z#jn0eMGb#)*@f*zKl$tJGj~7O&aPWK{tGYZ2M0gVUjGLlY=8dgPxaUR>tAS#gM<EW
zKlKd}{g)j(=$C)|N#rN)h~BZqd1ARXsosT(rDh-h=P&68iy!Z=`-2bkKmYWn`|JPp
zKW_(%gZ6L#+c#zNcVBv8f6<G7t^MU)5A-yDsGx^fKdRL_6iNANDt^eyAC#^*NG!2-
zIz*UYQGq7OjAu{zb)kq#k@fTKQ~@ZCL1q=kWyQ9XcKH@bxDJEi^DC=@Oz+?UiFw03
zydA<%a<K>%aOXJs`3my80oit*pvDbSC-o1iEJ^L4(C*gbKY!%&{r#VLxMLG<d2io;
zfH&R{6GDsuc7d=2k;)h{V3}|zN4J2B`eTkW2|alo5wd}kXvRrHOPK$o2_m)$=S+~y
za}M0(`=dRN>Nn;<JfGPkK4&|&BJ87a*YOAbLm+CsFY+RIMm01!AvR?o9-B$_xTtkd
z>|^?QA)=LeH?FLV9rtwHI~aD}R-JoYxVVM}w%76c)Hj)IwKYfNvA|vpHa+4xeTGvG
zPi5tF(j8WJdz<a1|K9uVX}|racejVmJ*Q1@s50Y;p5Y$k(B#u`5Uq^}i<KV$kpRs~
zhEM++Z-^02r0OR?+$2RwVU@Ti2%S|q<nJYA&tMoEFbPtGsA6+ho6e0g&@l&(3YAq8
zp5nRjm!b*TJtvWy5S~f*wWPeHH3||cQjwKVRR#xPR2Ynf6uu_r;!qaJ=+-0+Du$BX
zcZy4>J4|>F#V>q8D(1Silh?hnJ9NA4JB1DNY3=x~I3mV&@=ssWUV8Bb?bt;x(Lvy<
zxBPN{`DH)RE;x3q{hdqyQG4^BJdpA_Uv})EUH<VWO-gr%npYe<=&$_HS>$JJ`teII
zY8U_9O(NxISKD^=n}4~z;?f^)7aY5w{hdpHw!Qg14>l6p6YqIVf9WL`v||^(q-WA@
z663?e#;FAZ>35Nmie(fU1=&!j+G<^@PG1%k5C^hU#i~PzNuG(R4=9=o{Mzc<R)-oY
z;L#5Yw?f5^0~vEi(<`306y8Nqk^NN99&_fDK7zf8mA-yvNv!pJmox)E3%RO2l;H^J
zZ}q&=ci#8kA8Y^deV@yC7${QJsEiL8J1hC97+pUHxiBY~VX6561~F-K;2Om6T|3cd
z<^Y+f9{tMV)zCjM@(4b%-%erG@t#S)bqu7aX--Z5{77>g`}TdwPP_h<qn9LMU0ep)
z#(`8LWoDU;$^|4DggANre}zaT(vuvZr|V`5<ViQ0fs2;&4(O+o@nzC$$JsYVb34yh
z?G`d!#-G+BejnAkJrC@}*<w$~<A*xhd;9Z~XWJXDxxIb<%injnW$7F%B_@*~3FKG-
zx^*}fB*+^o^U)BxRd~uk=KR1=-0-y=D+7ZQsjcXF!$yu5HfV-?W3yF0PAGKTjA;)M
z&k_QHn(3T5B$`J^QlT3cN%(6d5Q<w8<T3V8^0WpdWDYMX^bVjGpo$o7KtLTzrV=Te
zMn6j{BvnOpb*e*$s(f5+5|}#d=^QN)+3+K&xCZ`ESR58aSXv4ULxEOWBHxOK0~OXt
z9jbnfJj@{VtCswPAyJbc6QBGU{W(5ISaE5hASI8_U<!SL<Vy*UkbMphlK7a2#ro{l
zIo2}{atu9^e6QlU@&Qld#rRT{Dz97TB9VBeR1~u0GgA&OB(-|xNTOWWA$3o_4JB{o
zy}?AxDx!0FS*hzVEe}XkUs(*Ly$gp(MhsHLu>AYHP5<)VWxw*O6a9zJZ>AVmaiwBQ
z2J?(%@w-J1UrHb(X3Pjw>jN&fdJUj$f|KL>FHA&_{(SE>BxDo9HgE~>fTDKt{<IEd
z4n2sn?G8J_I&Kn6hPCRvXU}>M@3qcijJyc>1~jO7AAOw-B=hXKr^yI05uFYy0fXW4
z8es6#h2uE7)UA<_?NKA+bBxOa$o+BIXU>bWSR!3@9(xyXcKw9Brara4UL!g|w0U^$
zTkXo@r`oL#J>3#8VpDY$-&T2f+T0Lk3m^<oBcORx_h~vv2Xnj#`l|i|F)<-@D9d3(
zZ>Z@j8!DipT_=4b#EVd{t7skKaRPX@Ly!}PayX|@*G!(2a|BW-C2?i&Q57q}hrmoF
zFq9kEo2sP<2Euj>vj@pM1R%#;O%_XjQVNw5v|V7}VwebBIeaYT3B)}qsqg_QO0hl+
z>snob4+UXI^>X;94hNwK1>s?#kNdU%n`AQV@9?Wh1M>}8%u-VbP$bk%7DGvO$dd&J
zJ``>2$7}d}ti#GbotK6~5!T9T*N&W%aH?IaSq@ij(=+A*2$MvSGpS}s4@q{1q80>p
z4dRJIp~Iri;ZuGt2$_qWHn|uDL^c(#tYUnvnM5NGHboai?j4zk=T5{s{EH-#X$&Uh
zhs#aVvyv4603ZNKL_t*l;$z?MR~|pnAA9oKWxvmR`iOaa59*xYo;cR=*&M5hg-5DZ
z1*BU-;9kaI?9XCT#Z^u{&&y--#FGVZU1{3{H<<(Tw1GKv@dV=iVAH%n9MFUt#K&cA
zyW37PnsA1?E_^NAQC`603?KvHGIcWQerE+55YyuT)1CZhpX2)O(mxcdi2)|B?1(Y1
zZ0mumdl`>xyO2V3Igl)jee$B=XqREQ7&1mYZ8y(lx0bE9zIlGze&dhtXn*>bkGXmk
zr(1+65oSf6kivRFT!LgZ0aj8%5H<<I#R|+^JWv&q+6IW2$ce^~Lo`cYXI0Io>6DXJ
z$<ZpS6be^HC@p=K!IxjdP?Z{24sRU-f@;dD-3Y(>euSI^YRH|7_pyGg{0oA^JVUFQ
z<=!PiZ3-V!0ok~yBm5!4P^)bsz$qa;d?r-dP*4%NQ{|`BzYR!J$?FS(v|C#j>0~ue
zA;=)v0$(aK+1Ht}z?@Z)60J4WY^&I^^~#E**TaN%HwRRt2U&24uiC@+x}PAPnj7rm
zVhkTdqF*XtR1N97Ssk~s$_iNKcPb}W&oJ}t5Cw=fNVa*<&|xGFh8rIUVm<WC#$m^#
zE&GxWqO8uPJ$X2ypE@_uifvZMS=^CHqtsKXjZzCu_+rji96!;&aJUvgN`*`NdHP#e
zlLQR`OC^YzcqD8of{O^60GohSC>HodV4!iZe7+wClfbc8t<0!7;<B3@@H(qwpcw-f
zX>4#djuufj^Qp2<SP?U%Jm=XO%zlqH;@TsLUV6E6X_Qjj>SC9H7pLL^WfRA$3`U%v
zMC$nRA{9fH(?p*+#b6BIQw$uQg(h<wc6!*2^C<mK7c9@IYfKZzovC!AJ?5vp)KAOp
zeDb!(`s?3*TRZ*44@`sv6b_^MD;RR<G{RW?%8>w-l<*x2lfl57^&U`Vfrmps0Z<?_
zCY8;J*50&5wg9jh(0soVy%o;gHj)?SPX+i$4GMsex|a!t+Fv@Pb0|QzVrO;6IdKBn
z9Hui#H5lgbR3*kDlu*sMZlMy&u2{pR!=18Ow6``1Q-~VGB_;2BOwHsfY{dDS)RJ_%
zu*1b4R3-(`LEbe_g?v#g6AH>!e(F9liDAB%t3u-dw6hh|I})d){1&w~A84Et7Gq+l
zS*lg2wmUyJ(Zhiu?BTK6H)5_qs&&W;UkWAGDyInw)Kd~{`7p>14^&e2OzbpHgkZI%
z7^`z)>wXeyEsBNKE-s-`ZsO;BKP&TY-{Dk}Z<1o?lAgi%HIE>L>A;f@9f#~&b8^2y
zT7T`@+uNO|m!q0D!vJBA@y2kQuNk6R6HJ<>3-ys`9*sLqZ5NEnm?#h&@z403?#bfR
z4%;kVfgf;w$%Yk|qt}-E%R<#~pK-NtlKHDl@<+O-+PGH^Q3+>U<{Z7;EiX!oFz>iw
z9m5DVI@|4he>#yEaqiHDj1T$I9)r+{lTmWmG%p<(c~AXJ+Q(f-ElzZn`@`q6`{`7$
zFXq5Dvt!d%x$R-Bt@YJ6p6OQ{Kh^&1#Fq{7D{hQAkv=I%IHjk2D}ZO@rYHw5Hc+ZC
zQgd7wAb<!mr%gY?SD`w^7@UJ;Aj?F<$<c`z`XyCE#SaQK1+XYdT_G-qu#}9x_E&(o
zfTT6sCKq8?!L(9y$Ta}?D|}0kiZEypzh$-^iR=j6xtdV@LCKKHfsnR|l=F>j2P-UA
zLHw%WTOAM(Cbc4j5E)c7u3I{kfPgD63d$i58!0ysiXv@rCO{vAqRv%Bhh#C{4>imR
zmq}C*S1ZZLJ+#UcYgUVJvRa4vkYKDl#+bM51fm`50)JP&s^-R*$t{b4<d>W~+m}tP
zlH0B<EDE19sg(MS{X+BA^A~x2E)H>&!nwfeBgRaBN{240s$qL8dGt%CH+T<p@yynH
z0+nv=ttQM?$(Nh{8}IsDKXLat;hI&k=KY_0{Smmuy}uH(s%{N<6eGy@jyQwAg*ge&
zE4IE6FX$#wxvx&rnQ%VlNZMee?7d>4t|U&%AZmnq9I-b|O#SBhO#5y<jeo`u$ZN|h
zk73ViRP<(~fCNbmd&x)>%c!OcR|hR8jYgXnB^k7+RnZt1hmIf4NJl$LQLFvU$DS8S
z7D(^w_tLHxM%Q7CE#Gb1(8;m*$%Z^}9Qm+>?R?GkpM0pj{@UBx1LuB_R2&scEL{Y^
zQ$LB0!i!MA9C8!^YN19rhsZ$firyejP|*-73UDzI4C026S|V+3BgmY<UnhGI8i7d@
z*a!$hnOH{Xw`t>-QXsJ3_Dl{?g{KhaR%FN^K$X*TG&n*5&16s{Awb$i5opiES8G63
z)d~rel_1IhMTVtPK>?Htsy`#CvGV024HInH6?RbWRm=ej6xB(S9H@ayliZy9g-YWf
zV^Hf--rmwS4}W$JsL8ziFDa2$@tCtoMZBaBxIjk-6CW_7GE328nn5T^B#16dVNrmU
zauEJdbmN)d`AQ;w9G?yX@mzyg$`;KB9y~)-5yMte9%J7Kl}r1R!_FjDNJ~fsIjoqC
zHWW&RV#~siM7p5zM&Bu9jXlZ-QWAFOENhR2%ISPuE9H6ymz(~3@4v5o^7cp5zMjP+
zzeoHqMhR30B9WqSh5U)oL0A~bAuy_lCz*)s$EW>x#n}XgcM!V<Q0sm#^PUm^dbwX@
z(4Dp1Kvp%Knl_MLG?DHEJxOybB)xEum@__aY<$4?5&K*3<^MBA8*gqH&Ys24r{+58
z?>y+)fMEQp!qr8}?~MkW-rsaVajaOR<Pd%6m!mquPF-!yowhDeHWC-RgE!jtnO#>q
zvh9g&>$SVzS5H6Nt~h?8-*EHeO?gV8u*Kg24slwBsu#a2uSB6r69#Q;2(|chza2oN
zChR-Rf&L;i7)k~eIsuQ>G3FEL+87T{?NA7mXGH}Egy%5bgHyN^B8Q4qnHfYS$R0vA
zMQKE_%f=OpCTq^W3Z-pnB2MtL9Syt$y;KpnbYBWjlSl+mNu@x+$<pLN0DC}$zY1hl
zPVHYh6u7`A!m?B>eb~sLDe@*FoWa{|VmtzJs6<fflw%nrI!F|V5!WF5>eeJGk<<v&
z!R92bLCT?I+PAF4$`&NA2!m2xRjL7$MCZ(9C7OiW>p?P8@;5=KQ=TP>qil|%6<o`r
zDUwpAZs_ocXIbeZp_V0e8T*wFQ7pm`G4+AamA_0;NDAzV_S$CRwlawf-;I<2`YxXl
zh2vK~Oe#en_9;9&vA<pQk^9?+Z+ZmVe8$ojz@I*10h<AN5k441XV^N!zG!wI29Ea|
zhY|!%=7KJItM~2W7SYCt;A!G{$a}Ec44R`%`U^?p)c!K%WIfXO`;3>2c1&Z6p^>oe
zX5Ly~>?dPfX%7wzIvb%($ivzFJ1h);#lU5BjKKyX*C|q1GUV|4?4+`14xUF@i0M4{
zEU5d<Uc|BG1(}Swu1R%RjdT8h^RzSC^Ss^P_g4@1H@)Nb_R!a#a}L=O8@o60ZotH*
z7^;sH8>$w_XG+Qiz%)+7OB1C~+Z+xIkh7v9P}in!GH9h>YfuK5>m;tw708iPLz4q1
zXm2qetBsxqav4P?QH2>Q1r@Uxw>~HMJKsoijd9h`phyz()2L8II7_O5RhCd_60sZ<
zmaV|8Dj?Y|O$1EjdTINpsxbZrX;gwe4h_r+WNzk=1TS*tgGN%HY!BI3;X4r*kCmZM
z*->hx2`0moCj7`7gJR{}M*EG4k=8|PNWW1&tPW6CaHYN#-_T)6hZmCy+i$D!P%Tzr
zkJM+|$>|DE#Nz#UzGDwrZ*>3=X$Q&C`YJ4I)r<s_{>9V}<mRRbf>d%J!hBf8vk~)5
zMPPBz)lZP~Pz(8dhQI5X#32-fTdFDMs68as8tpMkan(n@*gkU8BLn$p1z-1u@De^0
z?5mt*hKWbvrSMw~7^`-;+t3^F%fE1F9%n1#_WaQ29_-azl5JWZOTl<kiwT~R(NsQA
zNms^ww+rr4usq?meunW1M~d+TJI0_iSCXZL7bc09NPJ9dQVi%B@Lx~Vx3)CKJq|cA
zJSEe;CyG6W3Idd+(=Z(G8E4UU3uU5|JZcz2>KA>r($_FnHd-I1Bl;Q~H1%0$<mUa*
zwf^mAe%P<L`eggWXP-<(4^~xDH6DQ0p)2Ov=-!n<PA6QEs%-~grjU$6qaqI=WDzo<
zdLVK@wa+0Tg>%;2)SHSWM3B}kZRE^Na%gg<;8{&{?o%eb-r$2&K_x0g&7cAsFRc#b
zyd*0s0{)$?na@bTO?iX>6RSL1gnmsZoOg(|5a>GpE|az#o;Kk!ITU#npl=gsGO=Dn
z5urV*q{+Xik^tnL*O|#RR1_ELi2R~0s5cJ5Go>I76;>BP%AojeosYK8Hm{-KSZn7L
zhCQ9PD5WpfB<2YMnhs1swx~!-8H~0~prwX_n5Bwdk<?J`@%+bHvmb`jq1wy7yS31P
zE0k&<Hj%^YJUtfqq|mCAKZok0?=yI|Z8zsJGWX7e-Ni;#rPMP>61~Q?Jh&v{?p#?O
zMq>T{!=K*WKYizy3r-5?I{vGgMI~uJGRCyhCe<pbYI9=IDx8;ymGKaGlsYDPEcgam
zG73loOi!?}h*#5gj=<c8u}*O~`l#1tqsmTmEN{GC3qEp;o$c!T(Z}wc#iVf?3ymD<
z5Y>^u@Ph0#4z#e+Jiw8~%cjMVWY<dOV)!k;H=D=kpu;N~>t%UqEE8%jf4bk+nV2fI
zrFM=SS9M~Vl}>;*id}EI`&@g&HMghD+EtrSW&}1?U|2QjFi~p;Gm{koXKdX1d*c&-
z3G*Ccqh^j3!(85ow@?Ujn8~3^t76gKS!~MA3EGGl5X?j%<1{a25M!w-)H0MGhLorj
zgffNDn?PP6B!!pwxe3Mw1au2h=C6kESQv_;s)~?eQjrp9iLfvSFo0Co!Y8b_Arx4y
zb#l9i8phj9PGe0$z`U-^A#>>0KAgk4BK?^>h@kOMWA%>na9*EsL_<BI8pP0M5ROEs
zog$!d6h$_Xc#WBf{R}7Cw|t<=s(TPoJu@jp3L+#$ZKE}mudGZYnJZflHzbTAo>b>B
zR_+^6Y8~EPV_(8P<J?M<y`1l6vcy6Px5okxgl@G@<w7Eo^jIfH4WP(EeT?UMAcpnu
zw#0MBy<@d)Z@K=?cFX6#CQJ@6Ex0BOB7@WW&6rpK%6Jj&PO#@lp=LsqGPb1-Dn=R^
z!4IlhIlNkFTK7-8-8VM1RT%`wHy;CFJI|@|4BC7@mhU0A9%C9&pSF?z)$4_G^wa>!
zng=!`YRSrITrGit?CUoz039T*E%(fG@MsV#gTvSh0rDMXTyUhpAvMl6-lr+=t{=@a
zvHMXr!Tg4KPVR@TH2&WE@4xTv{?1Q5qEH7FkDBysfV83^65vg$F@I$U=P~5FYT86o
zZW7dm0Pd6w4@D~H*hKiq3Sm+i42A+O<<^7>A;O2#c~Kw;AW|tr61a)Gjg+uXh03av
zLQO6JXdqKr!Bp;43IDjL0pJOx<`Cl!@+qJeiE=I+^BS3-=?YV*eDsOsKu%4h<quw8
z6)=R2KzKwrKuA#_VVg<8G&p+A9WFHq$%IgTQ|uph94bi}8VrR-VYz%jQenj!q*SUV
z@;^nMVy!*itX`D^5Y?ivp9!`@j6vwNR!~Ugt7RN3kU2d+*dIikObqQqRxOiSg#%j7
z9nH_DLeHymzxEy<Zj>^@J!7|CCY-h%$vDHi9#i;W9N_Sb;W_kpy@yZ{XN7TkKh_2+
zKSTau?|5E*<?Xk$dmdR%u`l*}Gl~&@3ocAPcO)o4V;{L0LXrTRy_i*SZy!Eo%&hz(
zbBO)CA#gpAF_gTC-NYxrGX(JaN#+#eM_l)Nv#};SrhEM_L^DicI))~@3_QdCzixF?
zEOz1iX4h#blN?1aQZl-nu?}=T@Ij4&F@_0NqwfY)C>va|IGv2jb`oLhX*{un?mexh
z=TE;w+xwhnLIl|+`-Tr_WX+=<+OD>I`nx}9S6p?X-+cO;A}~tEFMv$N&H&-lx55?y
zh}i6$2e*-ez$9hm#(*3MP(U(b^G-?2QXx?JiVawbPXfUv@KP?56it)H6p{{dL?8$v
zLL$2MyqrU5q8Xt^gjsW#b`=U5Dg{XZ0MsPeXV;BH%PP%^pFy#t;-GPCWjluNL^c7a
zQdCy~q+8lu#SSLIAoUSOTteZneVNoR^;85-z;808HHq~jh>OIAk7knOA`<(C)`6i{
zsxcxUES8Bvf~G@*6;=2~QQ}e+sSYb!lb0ZTOZ$J=#wi9|Z$FEE9-si?utDNT^(m?4
zYm-ywHQN5Ecq)`-9zeJk$hTS|yeZ8A#Egod=j1h@+Ldx!rGUfNR`#8AFk5=>;Nd2e
zQKoPxEo8SZF@*1D$?7wRsdGc)J{+Pl$;P$ruRV0``F`c`6aA6LpUxOtaiQWFahQ0N
zhyk!{_h!aM;LIF<GX!SbN|;+-y%)UO$1z?A%lO`m3(Uqxq38T>1!sSRc?=>~vD0+U
z!f^lYHKJAei0^YdCgqbvk8@u1$(wrzJ~6P(Gmw+PA@FlTNUEchz9!Ba5?j4?#^AA-
zsgEHqE=JSvhyE+`YOSX>h7-tcA;UucUH6gk?;~jqR_5*XZ?!pDr)Vc;@R>Uw@4xnr
z+xsKCB8-$YuFZ4f(|4TKmsZnKI7BDsICaNq*(Y^{7ZqMHAeb0fy^76P3DP=QTWR5m
zTPn{wLPb^t43Z8XrSMFEBEzoB0z`!Xhr+|~p>l2lG_dI_l%x4XXpCXPq*}B@h@`Ao
zq2yObkZ@Q{aQ>9-8;TcHj-?3z6aHB(n2IN`&dxX7>R>R2y$N2sF#xz7b_dy%I=dCA
zQLd!GuxZVC5ODsP2|E=WRs&Q0VIu!o`m~-6D{;0f$Opz?<(g_T@<&%??bmTY$d#T_
zm!x!?P&g!QH8kZ6hDt7Sw6l+VD2PrFxotbc`HT2(^$b|8g}qlKa}IAil<PUC0|3<2
zM9lO&<sy$thGJcGU=YC%dt#1IU0LiB{z0YKhmqJ9i;}u7dy1Y-?}bvn<sU(Q<Iu|k
zn+Rz-7@t{g`)v<@yI*nDiT?C6&t<ZZF=dJk4ns|Fb-;<jC)xnOxF$pSfWiC8&WKC9
ze<lJ4L=_S<&iAN(jLWIbJk}`(pn_Edm>%RY+a(ihnr&#`qi_@A5^l5F^hdIx+Rbxa
zl#UZA87JV0&JA2lIrzzJaH*~2!DL;@VQuAlOIesYhNGR&cNK@o1P;?<A8-tI)iCb)
z%b%5T=OuZ8#csJBlk_xfo#L*(;lBR%Pdwy&t907ly7Eq;Qim3O@~yyc@Kln#fY*wJ
z!l5-(!3`BeD{sQc%@R2iaZ0&+uJ{X8!o?I&(X1xMJeDSDq2LI_ND2b{*9I&TU4t%2
z08}a{YM~-63m`)UlhP-Z2%$l$EV2Oz0s$WDMVn;cYEpk<PG_*Dsj5`!l-jd08tMtg
zYcjVLS(Zv03RQrn0NXyQA|a7PkO`?wxpGut>Xiuq*4sYpuy4;qx~RNRV3Il{MbYDA
zAx-##h#(F=QolkulWL0)y27sr!I}^{1isqH?jqWuPD>?>XV$*x{8lTZEQqiwO_COe
z1ry^uH!H!)w+p2VYlb<~mdc&;9GH`6<(Nf6YJ*V)?K@DqLCQcD<>RT41Vl3x@2uP4
zgM8Mglpb<UL2Ttep|Dytk3IP>Zade0{T;U&_xA1m0Bzt$!p4d_!~4W4Qkz-7!p)2?
zllC+YA!LxHDG6$V&Wejwz)7E%pMJ&rX)+LO&i`XFX};mV%st36W~5B1Ts@CN_jy(H
zf!H!R&OYu#n-`%g6I9!MfpssAGmsOp+)Aisuf!_GwmhZc9GU2GA^dyoI~FM>MT1OV
zGFsn%4HgH3<x;Vc;d(!O9`8);+c#EOZ89Ez)YHSy#m~0zJz=-kUwdo2;g%<$`Z(m3
z$O^)K+<*_UQ7QR*y=??%g??8CPZKSJE<<4?5CmctF<6lcg~Y%{wZi#YK5?s%0b~v#
zF>mMrND8%B#Z>4}iXKQGmA44pK#kP=NEQ?>beJ!N#YP2C<b%oU0$q@-Lz04($&wYi
zAYlcRml>1=W+22_Wpp@{Bum5?B$KM?S*|CPODZ+=D^-$8*@IfVGU*Az&yZ)z=QHr8
zf(0EAs4Pnrf}dsIu}`d>Q^yKW9fY7Zy8y=rB`ZNz(o;Sm!kf%Lt2vzti^6U!5DB}B
zG%n%SD-dNUy}4M3&nJl0YKt`pKR1z)stM)zF!|gTW27QW^=&(ZPp6968st)k7Wn0A
zMg(L0^}d=X$dEYGJV+43Pi#A-b1b2DgAg9#y?Dm1{rE%uou7Qbgk_4S4WN*~Qut`x
z2W}Ea3SlXKXH4nFwR%7E@iX25vnOP1hIbR()BSmDc^n!GKg(PqbBqy(Q#&^2IG-{$
za$Df9I7-Iu+8){pB3$f}SxDE6M!!J&3s0UGr9tJJI1t-wABoBD$?5X@a1r&fZ_)7~
z2c*gN{P}n<=FmF&r1R{#Kdu?ZKItQ|@FV8J`)BzP=)+f*InohHj%|;|yW3OW`F^|d
z_{o0DgHN;SG3D_%KQBOc<7-wX1*~?AjodjqP2`L~k&@+gl64q3eT~7I;W3AOeY%Ev
zfUus)0hL08U`2$WR>d6F1}P~j3c0mr!jcug6iN)RwAzS}RS*q_gG5YL25>5&0+}EJ
zB4q(mP#B<8y24gq*twpEWqnhH=CXv&0<@t(u&9GMn^c)tp%^5_Dlu{>gKUKDRwm~`
z)ToHYVM4@fo%0$=WY1!qMNC&F!3l^(*g^8CS_Z+wJ@SR6ix;dEfxN9u;uCR;{-ks{
zcP@pkMU)H4;z1#Z))GDtwpx{E6$dQjf1)keQ-pJ)ln3S#T6y##hH82cSy#E@KB&b(
ztaGZtM$ZjZP_MCl(IHomww32;rBG{)1BQQh>IJX&czAHiiZepYJ~%f%pCq{{2bIsk
z&hG#I-Jk29`P}2(z@Kno#Hpf~NteptkOZBC-xcEuvB(6Y+!tJ+v6+Iu^S||PLSc@f
z{U~Fc@Cyz^Hc3Q-_DhU}V_-i=+o!afR5;FIwCg?+Uu~m%is03o29)kw#2ZyrlNjf#
z>rXh$Y;eOXPqG;Bd}}7PDRetuh%O@!q?B#9^f^|hhNK7S7lZZ~lbuRG>1S`A!~8@t
zj1zrmK{3B!ykWCpoY`skd26kI>4~TMl~<kU51f0>zz`cCh~J^W4V8Z&NDM7WO<PZh
zU<$Xjd@>H;Smw>1;hzjdO@vSPB~T3TbXZ7Z5Q)Sl9jEdLEv`_-mrmXwscV8VR2YOE
zJw6aCDR2niDa^-kTM)!;s$5kS9zfp}pM~T?ArKIPEIORH1wn;s=rMuJ1*t*U6u>nU
zJp{-rBnS{pDvuQ?5*?{+B1%v=r5u(u0hx-iq(e(ObhJj$K8$|XnS}U&f&5F^9bx`u
zUK3YTT0JxI-VBF?nyXb+Ifmi2c04fY8Y_(Q%}NeICKV1Z2akB3q&CGqkixO~V93yZ
ztcjlqk4L1E2Ro|Lnum#g9FmlO8e_-vWu??U@A)$f>*p~S%s4j`sTfdHo%71#3Wc$~
zF7g2pyp<1do(p_5o=Y4OAAI76?aJdP+aq6jia0jKCqoJ`dBli0nE)=$-UrqnMXJUZ
zFlcYv9k@%9n%a&Z5S{Ro))?kgaW?S^{a5U%5x4r8ObbD*&F^<BW!~d^<G8~XM`HYJ
zz9Z*Y<bmYH+~W|*>a)QW+d<+qL3v?v$dgMRAE<UYUF<pKwA3G`k>?f5LSoqH%(2cv
zO4InV4e7*%X!dBO#box`gMK1A7MtvOCFf4<wR^v`>aRV1%3xGZ!wCdU{E&d`u$l`6
z3}#C17paTQKQ=Xo$sFF@3K)|rw8ksIPoygp2ZVJ)rAy&Jhe2{amlZOCYJiFD;4q-n
zo)~Wp$qKYLQg~R2m`ET<hRI(5mveapPEv)~uS21(60Lb-2(t%Z*?zWX*d)}yxF1B$
zp>P+e$PQ3_avq|S-vO)&S2EAi1qUVpBs$KUw89*~=pqLzN-FfgA>vHAFBeMW{J{t@
zrnCh4#8xj>$ReG<q2*P!oycI=Er|LOYZrYMUv;5E*xt4}B!O5voUZkfitaqIL)cQj
z7X(e8`_LkiR_0^!R@Bt=93wqsX}@>qb7NcL0C@(_#Ti_e4q7@$W-`X&m87(-kps)a
zj#Y7xuWcr$cy4qkiG$qEPx&kbnGT<~Pgy~yjp7jW$veN^U;jrp_vbf_*f!n!1G5L9
zPgpP|Q4__i^pVI_g3EGw;R3tP5-A~~Q*Aqf7mWFLIr=q>8PI7$TCaDv8drOPb_+i!
zZ5r_f)dOjfZ3aPSvK}PWwmWTMd*t=w8tsT)8ALKjnXNCKsa}bf%$<;v<fJ*!*{R|M
zPY&ZGv*VB&v5)L*#aZATc}(M?Ozx32Gz>cjoyiZV?W$|o-oyrJ?T#eR;l#b4`og*P
z|6G4ZI?YOL2vuYUSgMA^rpvI8Ks`48WhC6^ydV}BoXJF^84y7%6)LpC<<OBsPAo3)
zX}Xz6NHua|IrEmBpB0KvKK*BP$;454UQ`nTELT>3a^9hpnh_8X&XQ7yu-DS6PpnlU
zHn0!X0*5CZR@VApylK5-d_jPqggTtR?OfNCgr7hV#F~T^Dvt8`*7gPGSF*CUiO4eN
zQY2nu_j)DON-DF-jaBDd6cI|U*VeWWIFr1A2q332tJ}*`Yyt&Z_mE75`bMR8>Gnv5
z=o1Jlcja*EJ=;Dhcu7%DbFlAYO{(H*@?{@O&wo6x3ZYtIOlb>o$P48-2$}W^Ve2qP
z001BWNkl<ZD{&&*@Z(JUt(t1Dh{Kl@aOYsgT;)TlZ5M<nl>xp|bM=_hYn45xAFwEc
zX&kWzXV<MA|L7Ondq4B=6z71zNzAbN*7@HQ7ZSRJLN&woXct(PFicR_f_4DMO8@(C
zYC=>n4`VO6LlI>vHd;q1x)|xf0Q2LRY)s>=wKo4ea(;C_<{mw*YZ>2QziJ~Pd|fXO
zc;P<wsYJz)naGp|%l+XV!veU^Jx1sdEH$Z02x0z8u)umTh8Yvbi9`37#T`x)wXLA4
z(H0!1+7gqT%j9739!*^XTWIQ__?<(JF?{OwueAU0zWWk53tXi9uv&A25MuzTl{XPL
zku`*@M8v$|F`q71B;vG;O;~_5Q3P^mFHXz^Mk_i9Il5{tz(#}wA?jV*5wfJBA~0dN
z4Foj-E|iOuPsjTJ7@<B0s1aUM-w6MZL@QTqZD3Na;WFoXr6lk*LdrYB?fkiICrC1^
z3y{o&a*0Dikb{_Gs7#^K1R+I;HiNpsogr2df&}=Qug8sCNf83)St6%Wp+T$8&UI|E
zlR|rIsKr5=)gHp0AU`HJK^AtltRyS>PK@0-msUw##FBh64rHO^;c%hn3E@N+F!>PW
zelj8QA;g4U>N5^BdcJpdrj1=R!6F48+I&c|B9@DiHn1-X9?JfpXUEE!^J}dP(l^g&
z9ijMX?{a&(1}bXq11h=>Iq_VFAI0<Hv7cRU+x<^`uU~QeWP9i<PZ`&UorMe){5H-Q
zQUPxXIE*d8DdHqCaDut%WwK`s-yagr80QFAAFj`1CB`+hRP3<BeiOQik2H(P;J)z=
z<Dj{FeLweg)cotb1~H7kW9izYPgq@Ts2Ibx-8TSok#S<v`-&4W_boYVxUm*Z7if~L
zha%NF$fG)ApL-R$(J|6{B$CwutFhhfekb5{`yQ@pt3*(9o5==#LWc46(pLVw_5R7*
z9&5k*{(GJ1Ex_KG;H~1s8>C<h6>n>x0)SFYVP)qTw3R}#%M8>`nBR(EGRzymWwNso
zU?86=sca@dp}=?^B!Oc{$(!<7&L{qk@ZmC(L{-{B@k}6Xl>`L|5i;@^Tn*?Dv}`HT
zmPm&4B-K{rn%QPnOszsvQ3z0TaX|^cqJI%D9RLtUOscR$bFuy=oLl&b*Dr_XgOF@V
z=#$bUq6pPB=W%5P%;8(-b&&uv#CfIwG}nPe2voP^^8kCN4zLKs^K*fLl`_A-=^Wo!
z<Pi77I{2W)0umFwAi5yIQkO+oT@?)CVj>!9F!E&K-ypw=9QbfZC46IIt!LeKvEo|}
zk>PuBa1g2A=s+RjNL$AB3K!$xvC28L&IJvB%sIx)TTUq=D-gmJ{8M{|Qz`VUtbG_d
zv)uF>ZadfBaP4hvvze0)kpkdZCVRtuCOrvzdbzZdIJytw`+$YH-%K(Cw=yx|1#^)p
z<7`zBJ%(txw9$H=Yn@a1>FY*uD$gzBIoHDD3_G@L5n??=8?{k*QnLThN13Y|Nn>ig
z_eFJvs-)Qn&HqazBpWiX;b{CLnQ}2&b;!h$Wvrp&nS*DiKEi-|u7|Vfk752p%zWwq
zG*Rs<xgKrO$9^V`Ke4fG>b3amyT8(Z<B#uBj+qk74YsbH3vd(JqXI@{DFDym3soOd
zWmzGo3o6evuSX|ts|Zr;pw2m&85=kh3abUodjkm+kXjiGkg{5!xg#fsb4b@zRRwB6
zOZPEME!8d*!IhKYttzw(XeJX@;1a=bcroSeA++ZNagdfE#XC@CPNv8cL$C_#ZDjXE
zLc@ndu1s7U!iDN2MQfXEE|n}uMvzdDIV;D=hm^{RoHyD%4h2gCb|`KP)l(_v;l_#k
z4gMFlGnwaeMG~HJI9JFK#o@;X8b5n}CY&qFkYTFqT)6;AJ`Lg&p;Lw8(*X$cvJ%>c
zJweYh3L}Cr#=K#lMBYi3wcj9;077Xp?`L!tx{rflB6W!*vgiWp<l26E27Qs}+lSn)
z3qg=;h?jFqUA3L^CwFW6rLRBVf8*VEwvXI+MtDN8WWbDyH|gyG8^`x_pYeSVC(8R&
z;nKCbD4O<leH2-G^l5xgyn*upuDYFsxD!r-wg=*uOfeI9=AxFTi951QZL-7*;yN|U
zzYEW)=EVJ+Q|_}({%##rx4FaWFCK(HH@TQOPbY)U&QvCbmZ`B~f>Y;q_cY2rBH5q_
zW}~2)osskGi}AC;(`V=r3_i8*2WdQ6Wt)z#JYg{ZGM3ba=cvzbJN@<kYw!4MbJ&Pv
z$Kjj2apydlAYe|gcP^Dfa#ji)hOOZ>hSfISn0XQ>7=z46QIawhgaKqoo4-Sy^H5eO
z4?!vo8VXH|%;@@*IPZ{JsAEt#mL|Ao0scXNa-NQfovRjE5a5sx3mc@GES($3&=!>o
z=TO0(q3!~7q;_&0Fh43ziB!RlYB4|x#m^Lxm@h(T42zpMN2oBAHsmmdpCR1loHYBQ
zd>w6MRT^rdR2dv55Pr+KaP~=qy8S2TU)s-7(T|8+<kXcz(bD9O;e3U$p@7MjWxZ9<
z6Mh%=*4luStw5+(_KA327~0PS)8k=2Z_4#7%5xmFsBAM|QP1cS=^)WBRNOPLp`PEh
z+h>tY4WXudK$5uF_u?>txlw87p^XJ0;a7vYiGBC4?pw7hkDqMIr=Hz&aIct|2|*=J
z{5%n_f@^GchCiclQ;=(pU23}`<V>_6R@FAr%giGQGBdR+`W$SPC+ztYuF%m{*lt1^
zhj}D!5LRefDBoKN8s`yXffYu9tNDY%33_jRQ9Fo+HEEA+oOEL6avz@vFcUOY?i)x<
zin%8;6DOMa$w2B{CaoUdUJ_W_&@vA)YH>u)30>92*Kp_LY<zhPwJpBi_}5^!j$88F
z9)A3(e#P;V?SXSY=n<A6;Hx?f;h+F<Rk|s}QBTU)ycLcpiV74!sx&E740Vb5LEgBj
zZc&*6XercW(xlv=wSmv!NaPN}CMl0cC-yCX4T@9(yZ|wr-l5tND1+!|u0h6vXiCY+
zRn8IiAsJ*SS!*Y<1|qp+pCmL;Nv%9M94-<^wMFwtIcX^*EYRO{j-RTD^FW)|M+Cr%
ziix<xgwE5;BqIFvZ1x!exD_;zmmo87fT4P`gug5S)Kss+N0tuZRYg|^B#<%tI1UhH
zE+S%URD!Nea;a>lLIjXTtuM$bNn0ug;rc4Ph_&MZA$+X(pnOSW+0U&HIt_;a9OPDb
zmZVUJPsTIs`J_Xi6}NP7i08zGF;L`cIGie-i2l}xUlHhZ;Pqj3>HUr2ejmVaFy3AN
zyYIcH{qcW2U9lnlOA#7l6Pdt>S9`HekWn!i?H4FQ|9kOuY|nr+?`MjrZI~xuP9p>7
zDE8V7x(3Y1cfzJ_f1E=ZV``V<)!VjJv_WABb4g>-`{yS)jCEqy*(-5`uJ6%H@9yc`
zmyO2AhRGbQC{7I%mkBkm&iArS$&RaW(e4ooo*c?HALf8HNlqd^NUP{UmOcl&vdwau
z8W&2W)&}5xvxg{?;?ft^<k=rQ->$s+WIK8PHwT66P@9hd)2fp<{<8q!ssQ8-GjDcG
zh)-ar%@JWYC{-+EI78rA`xKsXd2nASCEi?%N@8H{9+yKmp)go+foceK%xas-n)BpB
zp)`pQk;SG@!l7c0wL{=k(aw+vF!UAx4W+}^ph8nh3zWhj3i=z$B~%gSt&J+rM!BA@
zD&5V04PamAP-P0$DMT152kcHF2YciK9jljKJBFW4&VuymprW4`OAtMRy$B9c1gJh@
zTnqy`uQ5n6!-G`UO^!sIr4VPu*hLLKNcli!Qle)`K4JpO(4&hxg49B(vjXn?QmW^;
z&kC>AFcnxyIfL2-@}~n)dagn(%_$;Ogjtm=^1O08R@`f<35sg){IFO|IeYQk=-?P*
z_Tf@K8|rgWG*ilgRM1U7b^4p_isL8y*S_&=#;``%1y*(M`$=i4f0IbW=Y7B#KvNgl
zAhtx0d&CL=Qtz#{J7D7!Gbe413fd4g>jL)1>k@G+{SilJgqODDl#TVX>Fg15z!lg(
z=GDPso7+FyHZ$|r1z1GGN0N|cW;zfoPcIFiFzl&Q$SCeBjohKt7A7%MCVAAYt+qFe
zhyCvRdt9J2m*MXuKgTF0<4AMMGtN)&Kw|y&czU4SxNfNp|GWF-&F{LiedOlH0q#~@
ztlGq8y|sG4le)-Jgg~MAtxeieV*F}THb#V>)&?V!E}rzQuqafO6sjOYQDEZ4c#=hf
zH`E#{8d77Nbd5xLDK%CAtx#=E3Iv(}X^<P|5(4-G)HE+v4Ck<*$*74oRkIXIMR=6z
zNiCXi-W3Z9KmbFLK&X(3`Xo-y1B`+V6Uw9niu{{QoCPUi;=9uTwkD1{8?o||A=e;0
z4y$G*FZz&8qz;Di<&eKf@d_bQ5Y+Gi+ucOi&j+ef5%%*MZk0!usyUZlABFvbOezFu
zqU2&CtJ^G`QClF6OusNGfohJBW6Fa?zl;KSEw&=8$~Tm~n^nemR-y7Cr6Z~79>*5X
zi3uq8uX#aN`0%E4UkioQ&nr|x`GS2Vh3nH{*mEICr3xBhUHjGfXX_6?{KbCV$G%9g
z^Ts{Fvr1mlzVDxVu`%!{#Fhc40)sr9G>(z1>CL1(j(uuqz)->=F*C#646{K{hxwbH
zR&3vcml#u;YqUAxAIXS&)}@m15;64k6LK2&;f}`lD-R<tS;P$Xg%bBM?ljQ&U2Dui
zmUefBNUC1`nH+3<-(#&(FRYclW@dDaf9C{X+pQQe-BX-A^)sHH%FBIBY+LMDFQ1IP
zIQ?Y4xGvs4KgR1nak^jov4<4qi%nW#+Z8u#gJ^(+LP4PzAuLh}fJjVi>^#X^x$6X{
zlt`{H89+?q4U$Bnmq8VCX@~q9r)q^cS3Z4Pk!%_-!AhXL14EI36!zPS&{}mOaO7M)
zsU8BMmWoCKNCbc)Bv7fKC{o!l0SY@Z6b5yOV7J0r2SLI-&ZfDe;3G($+XvWUJ%Zc>
z04wwx0B^FL$l?kI3W2Xf^M~{`sX9K?1OT)8GyLA6bM&ncA&Zo@X$@oT1^yzGBHAv_
zkSe-OB-yH#{ZLA3A~*;Et{aGVE<!Q+-e|m3>{Ngf2QsLURJWY+(9-%Jmhn(Ul{ya+
zmy3j)?h!;SE5MsfqVX*0_fSdYXHwQsB;{vFW91<)$RpHj<+7%OFY=6&(!F*2aSfhj
zrjbaY1!*O5K6Uz=?aJdP`?=LKbNtLNW1mrFFP3*Bit&he20FBloJC)OnQD|6oDeNz
zUay!+9GfU!N8sqF)};v!<4*>t_cB@-^FV`1jiX9aMW*O_6nVf_GP#?R%^-DcyiZnW
ze4opSk?q<;=+;BoOI%XJFjp9@d~UAc!L!XGYdI`QRtzKY1TZX6UDTGmG8@E`bo(u}
zi}8i|czquHa7`<pW4^=50&AD-ndXQ^<xLZ3_N5aihjZWZ#dH0Q*WBLDEH^1H>u^W(
zBK%;$ZwY*rdsBfdRK2A7m|&UA6*Ue@92KpsIA#SyisIT~F_AGT2|51?8+Xt5c*Av3
z1xPK(OH$$x`eGQ)gk|d-p%`a?sT2zosR-l)e731jLSd&E|I*hxcMt^+AT=VA4hOnu
zMZ^b13<$kRArY9yymq$1x&?`#s>(b+kyR1Lt^5guQz{q91@ri79$U(R(;>jbHK{fr
z*sLaYm<@{SlHo@l0uV~4A1+;l;R2zph$Yuc#0Jj^bJNs@><v;9M3ZXW8sXdcJ(Q`H
z2|4ZVXCjkoT^9sV`vTSv>X{2UO8#pcFmQO%0SyO`6y}s|Bjtnrq1XsS(WEKco(C{1
zx~)80DfF6@XXbx8LZG?(;3YD*m8!3O3x_=sL#egr+k5EA=lYx9b!U6`ryn$a89*}D
zk`Um3CMNMS<6QZ@j~JTU#sH?+MC@z0rQmWRpGBxi?Is)yE--DQm$xt;%-!u~jLm&c
zI7AVnXxn;U=148C&vaa)4Tt$p+G(Z#^jWrA{rr5@t(aqK_<TnYmMVcsBq9x<EKV|5
zVw%N~G&fFeZnT+`B!6gWczX<PqP{OA>XjLtNkn?GfQiB71=6w<M^1A~rewR-*|UcX
zPBEQ#@9o*|J=b6J)?3<V?pY(uY4xlo6#F#pjY^7^R1^c>S%XokoC5)CR52n?M#=O5
zbyrJ97}W{^LzqJnJPCxr&cH~;0zhIS$<0|ObI;!)KZas`+GqZvL)Hcw=X)W%23v>>
zR^<yoNOjT*S92fBsz@RPFVKe~Bw}kt%S0kbi$k9*U@^cVgat*zIZY-Q%oEHC$JTv7
z*@<;yz7<2hCU6d&i(Em4WImrm!B%U7fQWnwoK55gWe$fRtJGn)jR>CzmB~SiK2%Tu
z+b7#BL7Kx?)_!)vZ&TQv2Zu_Qbtu4L4(*EcE=>+u@RRyp+K)vDlL8GN(4oUhoAPbp
z$0m7N50kDX6nGzAOq4l(9mJeZI~I5_N3Y3OwZDn1Qxy%nj(y8du=n6FXO({U{`>#?
zm-`#9xwU`$+2;llP;r2GG#4qFegbW#I5((Ir60C6U{w>aOvAWGDT9;#I1Aw&KR46|
zeL(xIlgCW^ZDUWRkCuK`+e)m7E7*6>Z6tE&0eWtr7zxTL=M>zZ;QBD1-h<ny{rGy7
z!WUvNdnP|O+~`0WSWBH~Ao-dp6Rm4JISq_P|Nj|#_b|JvDqH;Qf0FN0Nq+bHK<_6F
zw6AUjC0f;1-6n)|+aRqCi7lEabQ5n2$?d**U^fsReUXO(Z6pZ+^1?uPBp`t#NJvFZ
zswzSVLV#2f9;qr25!!P~!A9OvXU^XrXU{ptTzj3e(UUrL&fe=W*W7!IHRhbVjJW#y
zcE-pV%jaHI`DiuZV&*8+KYfu*H#%2phst-EaYoV^9Vb0k!dPK9`+U`p4#<+b_EFx6
zhot<b#knk=!$dbhS3_K_K^V-HhY=9NP?(Sq0$1G18!wa$8=sL*kiJUgYlHeoh!Jvc
zpt1pc(qwuhM-zx3+(qi2hn>uZBM2)3c#Q;@5@*M<N{aEa9Zbau`CbI#oDYWFHmHjr
zCIrAE0A#2nNSF_O`+ACiFf)j<4M1)@*UHz9h%-WPl(RIdOfWfLjQa?AiM+vZ@RmqS
zTq(0QV=;&+H}GMk2{4GeS{GC*gfIh;vl>JyroXpvB@y4DWSwjd?yIa$R)`pHwkU6r
zNhlF|Y|u=Fh5C+gtEqYv_NFkalf)5hvOH|g<jvZtgCx1)O5^c@A+i(ua+*Tm_kiHX
zkqoCffS!U<$NdWGEL}%7KJzKsRB;Y6hpvhE;a)(SMf;3XChXq%=yPw%f@^o`LkC`J
zhf!@`bZ6J<XMiHWejoy4t59i+jEjye?XfJ|UX>>R+N@n4tYrTe0JR;q(p<?JW7<)|
zuu|M62u|8_;*p&vzH1{WQQHYt$97`dQt31Lg!gU57~GkiOh(5zsZ%&kwG(rIgxCf4
zuiSocluF;^h=F-?%o^)4#zL~`f>GL?m+OP<$DPu9CWB!Q5&OY+>`d%L?H$K2GVdqn
zwA60S(FR}moy=X_t9yoDuT~B=h@?=6(Qj-Pnj)2o!&*)ZMu;RaFnV}N9E`BLrJJ__
zo9~D@@p&}a%_IK>gcXF&Lye6HRHhU_{Yh07<hXGNkQ5()JS!GN&V~sjv8zYnfahX4
zd4iJ1VJ9wFK|4^EIOGRVhl0t434;V+2=#%Sn_?70@f=R1s>Y!D*}9UtR<VWqnJXSt
z;6nv62?6tUjJa%1BK>nD@*8<(MHxAnqfWMiN|c26n9y+Ep{*UlvQbToYeb=1Bfdr`
z%+{{B!f!pdl5B!XUMOZvNL@ws&6Y5Mb7gXvu2H06fZSmdB(yHHAw&qaI&bo2CpvV0
z@b8!y@ikmti^F`~5V7^}H#VwB!63yFd3bT-U>nHck$BB{`hsl=vAGjhmtA2sTL=i=
z2--ja4XKKBO`9FBzWoVZbjKdX1C96icK7}S-w0>3>JRgT{{}Gw+}bO=1*R~zOF;QB
zn`+w%B@UAhTp~NJ3P(`?FNq?0KYk+f8{-!VPJ-B0k4vyMjH8{<;>WnHXk@BMw+W%n
z*s#)euqzrf9#-SU!h7`tbA$H(85aqY<`Gv0K}N&CbIOx1M#g}ZzOqi#8XQ&yla7Yh
zq+K#(8z;k5%$SO0qj@EkF|%v<jQYr2ywzj4{jgJ^IR!iThj9+&af{YJrpq@!i7G=^
z97Y|i?WP4a!EU0IOGBy_a)dZ!XE*JpD-oz(gF@)JWDW$R#t}GqNU=_;9IG|Hi-)qn
zfSR7`J9rO;a#)H;fss%T&6qO90B58Ip<_<kX7b>m+;G4|{|)30v5h@%tPa(~$LnOo
zs{4otHbBgfF9m|<z-S>dSCydT#T>LI%}LxZY#a!;qkR-g1VWFWtgev_2jjWIgf8St
zdf$l;HYk6tL5iUfRtoVkvE;lw&Sf)SvkeAv2+e+@A#960NvJ%&@o?oA8>oc5368a*
zg;7$Yp>o>XIJb3>=V$&x8yE8fE;Qhrx~R@eMUnSBS5~=P$%69DMJM4N(V%OR$+6v&
z>{?AD0j`QeY4hvau5I%1aL=+eF`_y`=@70KMxS(lZ$yHLjTCJ{UD1O*hp8>kb!{}|
zuAjZ2^OyEZ<G<ca?)6!+7Qf4owF(Jhd}xE0jAxnt9L^0x3G5_@I)02|>}|$qgiLq@
zKu653?Yt6B(dHHG6vQXYCx?vz*JHnqsZ4m&HgG<33UCl(0~LIBV`tZb*2K7Dd2DWu
zW%IQvpW%MTHlFVwU=4Rd`^f%jtC}UO-;I-B)XL(<3xOt@Og6O3M~4N?EjZe2ul!XV
zE>+}skHZ&1aDqxRWA;PG#C}r8jq}5rsj58n{3|+daj!n~%&Vj-2!S{4%3b|Hu8)0>
z{3rt++s*np2t$n^=LQ4|H^7j{P2njED*{}aelztjjFTaR&v>WJA)}BxMhcDnWVM6=
z7UN9RPEs9x46a^)gduOP83^`pYHLyq0%<d~jub5}UI}Uh%@Hal0ih8xBc<LC0lTX^
zAW<L_SQl1kJgg1kNJ;ji6>#S2QqC6zSb``cU$p7rSzb>gSCkti>~o%f<;OLhu!Txb
zCu<<#HdZgt7(uv^)wqyP=7fcmOD0IJc%vW$%3?DRD-UflK{i6@p~R?~a*>XcR`&^0
zvqAot_=RE@zNQ=S6NH2<G}@%lXp^pg2_)FB1zgXlg!QqIf=Wcv!^ZFpq<OH4HUfgr
zVQ-&H9qSE+8%j9eZ#a)PZh~#I3RN=ZG;=;FT^l1!+5Ob3x?ssp>3{r1K!)APD?o3z
z|H@|pcl{X0nB*M$Tr~9I$B~-F3R7$&{2sBc9YG1W$3rw+q%S3H6LYA{$8lXS8lMB~
zNbD=(bZ$;LyR_>Yn5(((@yggx!UUtDD7m)U@&Z;hd7P>mADGOF6AZxgf}8|{D$fzc
zPjaNtMlvaKU8(e`q37VlY}4#`X`K>sRyB0nMaeH}V({uXX+)X~CWgehZ#atg%Qngo
z*Dy|V7`F@gL)KZMb9{gO9{uhud-UM1M?+W?MFX+25lWfe*Z`=W^J9d76cP`05hx))
zubG4>3E+%Gj(~g__#%7*6$s-=$r9$_$2w422#wSh4^vUHIfXVkoW$w{D_R~tYcvBX
zpm4O?)RWFxi69{L(2up{3K|!qP~isw)-ZuASMhq@6RR3z>k4VEgUAjOK$7wU6>x;+
z?O`;mB}j~cdr8VoWor<L8-X2=qt^`nn1;LusXY&M`<$S_c=fF*SOnroO&G;F4cHH1
zRSA6~pANZlkti8Cg-RUABN4rj2j@OZwzX@b^o>E9Gv&78y5x-){Lua0!n?zC?Lkc}
zuSp}rG#;}xh$hHp+&s8~>;4$R{zjN+tvGzninnhdNRdYxhh0nJo06c~Lvhw2@&&uE
zVAF)$S}680orSMMuB1hJ1GQ0}f8fP;<igdvW%cI$1ZxD5bYHjcvXQMILPQ*ip+pCi
z1Q#N{q#zn_T}W^uV$cR(H1wNd7UP`59I1SPE@0@?vp6A+M5!{KHmV)$1g?;uOG0GR
z@zL6~#cC$bpeus&5<I7W+RiJ?&Cc^aaDL4hFHbxn7d)xZ0IN_mgTSDZ#mcE-aN;&b
zuDsH*<=V`A7K{v&IO7aPBE$1iqzjU@NoFC!v2mWRjM{NL13SJ#=Fkp}FOc=rE|u|?
z4*Np=HJ!J(SJ&-$p7K;is|2OIVZ|i!7z#CTfU1SCAu3DLu#Px5Ix#ciNa_!AtZ0{S
zeY&cH8#fdbDim?`0wjychbcrDLo8-6LJ3s@<N{%80x<&u23HF8I3W$BV3gDcDkvd>
z7HmgkH7Z`Fwo)}G5e%+a<vc16)zi9q7}G%><bm@7Irq<Vl|1z2>mv-lo-1hzC97+$
z$Qp^^1bP8*yMl<H5tz+Sp;~gjqbt6RW*}xBVsl~uvd^JkCU&+#;kH@5vX^f_{MtZB
zkMhhs2M{4uR%Jy%(3_N7XCZL35sN6WnFw~FwfB78(s#L1*82-S0#fOr;t|eEwfsd^
z7M<V`kqt!>PQv`2MCv%JxlT;2O<NCA@j{^mshJ?{tUxzm!*HFJiX#zwzYqAl(KiZh
z!Zo1Zzw-&Xbj`!^_8*#r{K62Bs8PA7Qt~@tx8p~^C+i0Hf5VW7L&>=bfnXIYhj&%1
z<#7s~M&o8|O|X{768Q>q3~&PBp;z#h`tf5U7pdT7#m<tnOPEV`O4la)p5H{{R9`gS
zDqo7e!fn-(0g*FR7m*onh&QJshFCckyfUZkD-xN?7|JftSAs63001BWNkl<ZFcU0^
z#|oWbgJw_1JjhUdVfjUnID^|D<794=%3Rbh+;p6IJ0wn)+PVCUCYo^yT6nj9bqz#R
zw><O<nYW}@AA06hgcR+DN4s2vbd9vo&DvE2$`!I5zAICtsu*!3pcx7`bG}hi2#-T8
zP9`xHsCJ`HYMi8|ic6wWr8#{eH>g2i&h3=s1(krLnh`l8qUTDBhp!C;>mUUNh8Bu+
zGHfbT0z_UsLm}o6u5#6tRIhr|Z5|X<5AQ+c@Jds+nXRSy35EL&d`V@5lEOKXA^fed
zF)2ZQ4#=bv9wG)IwC#Q}N-7uD5hTz;@H8I}wL&?wv3Z!;{j(W1F&yS+mDI_sjbViB
z?`qsA>}>=ykeVbM?VA=NbU`&_(t+@7rJ|I`Fv5;@?ZE%Aw%9oE#w4nRG3U{J**9fO
z?s@Y9@*C{Q<ZmQysz5#|PtZxO^_grCNKN#dT2opp<c?HLB6hq{vHJ^B2x9miYIm#s
zJNll}Z(X-j8!x|sdo&{~;~n8piakJXgM@I;XTd1oI21KtBm^E+#y`T)3hBsxP8}28
zfdY6xguzve4LFv=cECDyN%#f~rFMzTvOURw&J&_A!fO(Ffcoew<FCv|^6liYU;Mzp
z2i#X^?c65WHIec;dgKksU@8mC#4R;GI&}+5SnzfvC@}(lqMb-a;gFeeW<JX-c=fp4
zcj3H1{M@+YtjV!ysJ42n9WUHgaMmz)Nu2MGI1$@1yH@mSHdU@z`-ohy{6QUf;VmKt
zAWEJ9Z$QRCL8^u4B{>K;5y~6kaF>w^J0Ia7&-ZbXndX3z@<8Fda6>iq%5LO-<3-4q
z=g1*afNeQH009)iI*}9tL(j#jlX^mg$8)C4jv@5OpV=6p?0HqB0gx+50N!lwqZ16M
zl&-#xa1Nw}nG#?%!tW$EDto>OuyK%$5W0#A2tr#3nR57=t4lpBNvaq7ljmZZ!o$AD
zq_BZdwktrS@NyX3bJ^?|Quipe!293=0k6WP^F2KvqzxG1A!U*XQ>vobXFead0p*Vd
zf<v1G+K_nqf|F}ng9h1@u5T{3V*f{I9Hi70H7AcCRU8Io<=EOt(*oF5OnPlIWj5uA
z0ouSO0(o~t5S_?FwZ$gWjx)s{n<OXgPSRmVtQ9G!)c5u$ej{_2^vS^RZ*kvFKwA@{
z!OVtk?!q6j9#y&DGd8qZ&tgdumPBh3-?zb`fQjjM39bu$<gCU;l|O=W=mY0sykRh*
zttdPx$Zf?=;{QvSb}}B;kqoDULB#EqC6{5mm8csy5Up1{E2A7%?dLgq7!<2sK7z!B
zc;Uw+9OOK09D`YX)k$JIZVVm^bgM9?454I#h6RZ#UTPpo##b?D8ymoW3CZG_CyScQ
znT;9b=&EhpC6)a$uzp@RU*5nW_2pOJlJjnOK(DxEk39X-+nmpXO0p4z1_ueKc-M^3
zDZttk63R7mV!;ZbfA8<1eDLEZP(6o`?Jxm}lLG(F2p@p}seTAmQ^;!sH-9PsagqXs
z1)-c!aY@P+10U3*Q6ERh_kjY2@GC2s0d&|_n2(29iC_hQwz1X$M3kIQN$sSjP$<e3
zSyF7>-V|15Rl|!K5~2VFF)FA2=n~&3K+R(ta=uznT<ZwkyRzy^j5vrJnT>@ZA)K34
zt66>Zjl~E^z_9xy2y7?>XmBVus!hQkOj(DYxL+gZ3}M@$%zB`I_`fUB9wru$dRMLJ
zS`Wn5$s>h1iPRCfL8`{6t7S+FX%Zogd7<$!E6BlhRhd*wx25|Clr+C5IcaVB25FG|
zoI}~JUb}iuWYjlbO!#q4QPBqF<hAVg;8Xu4^Ox?_`yYNj3K@oNguO&y7<7Z0<>yD@
zCzbbk@t}&4<p=5Uu5yJ_GyPPc3~fdnVszy1Qs|2~>!Jmds(}3!=ybb+KSVpG{iJGW
zvQ9kT?40OD(+X{e-@)awYZQE=4VNHJK_jGNYwSFkiGW;b97Kh+Gr`C?77-7&LQdtv
zXR2sB`7BZ!r3GP!@wVG3i9T2UoR<SFWgL{|?!!pu?cTzkgK?3gi`yr0xG<}>PUpr=
zCzqV-7l9vR{fg>yFTJYsm+h2mez;E#{(6+E@UYtrJM0DlvE3}4&=~=u8?31%q&Dzl
zT})-DJhA}b21U_{73Eo37_&|xVNwVHE>H?t?FpgR1`$e906b})LUO1I91XdIC>DSc
ziI5bxWyHAYWSSD`9h9OHNkHT37=<%g^&6qFHcWMjd0Je2!r@IHYXdoa92zzP$pp~D
zzNR=eptN`x)I;PE<ehXnDG;A82qNZ)VjG0}%&z8}2)9y5-pRIj_|wDR9{xmLCdg-0
zLYX*O^*QH#a$yYTuny5Uo$R1rsG+8ujzA%b=?U<sVOnQbm)IVpX!&)S5H_1b%=trD
znAJxQkFx4(=hlhnm{LzFCy{a;=CRQ=f&vTV_4x+DuM^u4#XLkO<+RT1M~D)z(v52w
zHlvLj6ZYU&Mjny#7;_y*^^w8X^k1+0ncnu}rxNU|;!7Sw2`danfa${bcHm3WcHkMI
zZ$6pFQ5~bC-2&$%jE_HS{hm|%pyuW5k%$$9|1`YZ`~x~hRz$d*;{pbYc2)-0BRM8J
zCpa6<OTVK*__#7W$j=qk)HZSKv?`A2tz&AM994;HqjfZ%GGFdHF<fGqDsc*vr!T{V
zXq5yGlXIFdaU*!vRy1wu%svL1RWLa3u%h!NHVX?ucFc`a{GX~bk&}~lj|<tCBlt_$
z36YE$t>$eeV-nH5!@rTaOZ()yjZev7eKaKayNYB4k5nauda$cyVu71#1eyxTN_WGq
z08!F+9iY!d&U5~lTp_&T?X&WQFmuy){;^^Xxj%ymh?|;YH}<|&-BPR7bf1IasP=DO
zCnp^@Ne-JhQEKDI$>AUElCNL9PWM|_v_7gErXMA>T1{)ULW)`;MNw!mexiJ$bGj_K
z|34{|DGua=ji&B@@FCf}?+x|28&H#qVg$?I)4UMUMHmw#oD@?cH);42If?*c<ZV${
zwDcP&9GH{m8B%yPgs4rCAvL!G(5(ECniL5)d;z3@{Fz=(1`{>P{l)qT1eU5+i3G=7
zGLUQg3{~BvY8i2KqGxL}8mfl<00lw%z8a#itLM4-295GLDa;!SPp}#D+&P{DT~8cd
z<xL2OcY`WT{sHybe2a==j408%BkU<;4}2G@b!`J+zC!9T<pKKI^9B^*V_uWwy0JEC
zGZ&%=?oUm>Hw`vMb>O+T^nz8pb;YLr(oF90fV(X5sNhY6$O`B?f>lI~$OaM&0t7N}
zvk(w)ED#v#*0Bs2lSJ#($Lly2#^WS~Fsh1E?QF)_N9Mrii5&y6f+dL<1feOuGI-C}
zTp1THPdb-8Kgi9`-c+KX-hIkT%Fu1>1k+7f>mMCl>ntp1eu1>|KC=i_Bk}L;j6!3_
zkkVtx5b2^s2hGlxNtNXL@I|PSHy9;+9ZBREW6-!R63<WFEN^qsWER|)wYO{Ef9kv?
zy}EeA0VqC1CRkk?b|Qr^Bj+eNQEPw%SZK^|jL8i<m$w7L(M;N=+!`MrlNYFntafl7
zkUz4+R3z`G3gisB!$d5G8cpqA-6cg)ll|qf4{rI67Db_xrq7of?%1vyHg3_&FPbff
z6*c+b-`?Pg++EX-(qjB1xoy*Sy=~JDxozWiUA*)L?LK0>7R3a;^%*Ek9M+nB#CSdS
z=4Uz74K<R&j{cYl52c!#i8Vtw8zIP`pt>S6>N#Sr@Q@$4qT=6y<gtRomA+7T5=GVR
zJIcf;ga8@XO$~M+w+#Ui4I&5bPewqX(Ak<oy)v61FVIwGgq(S7P7I9D+uC?|mqL*q
zS`<=}v5`U2KNmkiWy0^M;tjcsC1D*-2nZ|FOnPES9)${?_gVRF6a>%JERaXf>1|-{
zzR4*4sc%)c6h)!??K-cIYTu^ya^mDka@d3kQj8z3AN*LCe(mD*vfpgnXzGS(M`>%5
z)Or;~A+>Q6^y3}VW$FF@2{oSP>-nF4Z)$oZfWpG?9lPJyXJ#Mr2^72-`EGrF;Kg_J
z^0kl1vJH<{af|5%Z{~69rZ;KS%1+IE<_+OHkS9$)Q>pY_Vgh3r5G<L4e+ibD>8l;S
zQ=1Xj2p@r4gp+Z+IG3<3HAoc~#gAiAC{B)Sn3;b(ugV+3aWrloD8^8>B9*Zw^URDT
zh(RQBiD<2QVEaLac%Ki(PR&eK%zxSEvV*KFXlk@v9A4TiKvdom<I+6s!l@A2_!;*Q
z?NMFSVDG@<H9emP9oacwk#-2yaEuEjw|=;iD>kbf2TxN~mB$X&b?(xBxq98>df>&k
z0j8uZIq|7ux9|ByBZ+!LH&d@zqwq@_?)4pWJ$z59l>sMIt^hdRABYb3$N62HRPMPp
z1^@=IP9_PAM?hYN>P_uk*`>8wA^S^EnRVDWJ>*ZW^iZaekB9D@CAFd^O9tPR;gP0n
zn0}Own>ZDfn5Jw!|DYDNntXWfW28jBA^i{Tl8eroDn+f3V{dxaRS&m!1L_eI1Fv*#
zSfL2=sW?O)a|VfAn<DDrvy$ipa3rG1;Zjp@T`7tAP=RnVSQ=^Zuo_i{){S_v3W%^Q
z!oU`?OcdFmP{JNio|@QDP)HeJb5f-!M2+GG5VT=xBh4lBkbHxxS}A;L8=sKBX=~tq
zZNw>tzC%8vZ(f?=yimQ|pta#mn}sOrya6H~a7C+BLG5~UGK(;;ZE$c+jcWg@E~(XO
zvcJ48AKda?trazyG<|_AzjKFd*tkV6yLgTqTC3^dU${YR<8}A+qog+eSh;o64!w2L
zcD;4uc3pDq_1b;JI4Oz=dfPLcHu1V%cJ`S%>FA?m{J8OQ_(vzn>}$7&%?qxJxIuv5
zqbe9VkG6@T)RdCwuD<^nox8YCSKoI)fA`uuc9*wXe}autxzCSv&jvdve@CN44D!T5
zwM{=ctRZX%3nH8kxQ$LF0mC3|Ip$H@^a-I~7`qKzD@}#z=kU2Q7mS~9n&;ov_Gy1a
zkgIl%TxATN#XN!6Hk{*jt)34~7CA<(eTQ&_U}UkmwOYv#G%QqHujq9cJPsejVeI$J
zt_BmN{@}E5va0iDoWz{6(g!U-^1hwgnJ##|f^z4He@z;6Y^Q2(8V`>v+Af{5_Yp=`
z9n*nd{8kq%?bl1!{9Jy1@HGG+@7gWw=3yZaD_0~~0koTERPqoObW#9ijjJ_X#XzVp
zs6bGRD6GYbN67!N&?VGBS6f(>v@zAOduIj1l%2lST~ezRa-i(Ld*V1fZ1Vk7!D(ZB
zQO`VUfh<4xh72{DvSHd$I&Q*L5E~2kHAFr#u8>0~@9<FUuJxbSapT9y`0?YUs1-8l
z=3y#yF=c^>hK;vA8pxWfVGROeBM(fBs_KWUZ4Q8m;)9|WQc^t}N($fzj`iwmB03?j
zlIGz)L8?orY;J&@28G#GCi5|Ig2lOTp%8&oXC_u*P87a}D#V2iP>hH8JlpJ$%H|~7
zHX=?&Sw$pOk$yTcN!2u(s}Xo>H>NruEy6><br4R@L&JPvL(X@kN_RZQgcS85x()~H
zP3>RZEw!Si2g>!Ib?7)f<WIf}o0e@nbmy5;)CyVh%<DSTXv&7^N6PpKClK*2`+VUc
zDQbm&WbR`ga=l^tpGi?0r?alONp8D;hh92wrWUoDd~wxt2&uDAk1$yWDG!@nSDd+k
z48D1Aq$&43@@u(p^~3V5Yj?_zc0H$WzuOED8Q{|JCxbx=-iEt%gj4<sclNPKM)D$@
z&WbcV7Q#}g4vn$M2brcE1xyn<FaMci9uwQK_(3p~vk7mlf}5$W0o}p0)xN4YTs@C%
z<d|P=D>*){1K=C$>z0UZGSRE>Gaj6=OH=l|A)Zv|KrqCFjnd3vI}LBLhQRmH&#m3K
zzR_qYff4S99LSWq)VX;WfmBvsZl^YVw>vNUV(+%L(hDRdo}rD@iQF@i<E(AP_jc&7
z>aXel`@wEG=h~g}qunpL!ZySJ2L;4cD^#J;BSS`-L@=Nd7!mSZs6Zs`1`9yp<Z_TQ
zRJ3w6UkJ<9N0mt?lq=lSnaCh%AK;c0O1P>xR3Fv8Roz+?h3+p&(vr#Vm!dXKzj)SS
z+5E_FWA0ZSpnCVTqh$Pq6GG^2u-??6=XYsQ6!PISAEHM>fXp0P)a2N;&*3vuN@$)z
zO>7|K#el`i4Oc`CJBhOJ6^Nl%tC~Ft6b&djJnt%!5kVq_T+Pe5o5<hfbI8A(=vi6-
zt6s>d0vShjrRN>;`kHd+!~!au+krxvA;%6OTq=GsH4x;-K6lb+1cS+@5jRRtur*-i
z$VnS*s<_&em2LA4C+(!dy25IqR}Yaxg$J=k$Q5f8i>A1;8I{#&lQ#)=PT$Hdtrdmt
zFUQ?AVZ0nV`TlU7wfyNNJ@f1Zdc(ojb*Mh7cTYP?#!Wl{KH!@wkq?hA^w7yW)Xp1U
z)TDdaQ`lrSM)mr?{(z33Z~_&=-~~HT^|nVb%r~3p+lg~bOBia5>QgVhtLuB8mvffw
zl#5sG(np^Bb)qT(-^4&E6+a?imWKf*E1_NCUo!ZR!LAatQ?LcOAV}izr$p1|047lV
zJ(-u#2&=f?o@DYI(N~}c2}Vi<r*kjj0X%VueO1SU;kam%9cL=ijJ-aB_RvL`WMy3C
zd9|z~k<sJAWM0B=yrZ_~NNI<}3CwgAR+}F<?B!10W)aBdl54**){MhqvA7Qj?ZO0^
z9hrn<y>0xHbFfx}JcwXJcZ@%>KKbvXjfFp=odS*e&3FEwH*6Y^xl8)=x{XiDlP|sl
zFeHFOg&*(mN!_EIr5N@@Xt(kh3Jw7~c!ThuXah<XR3231hR0@D7^VTTiV9xA&3puE
z5$B-cu?q-q4%S=Yr=loipWWzxc|gDR*T-s66j~HDIrNBQ<%_cx>XMC*xuP>P(v%I;
zj*{BAWA(O8JLLAwy>i>;Ub%kN8lCddiCPpB^auN2_i!uE{jj1YlWu;_0iOZZ6)qxJ
z{0Inyx?`x%3uWqVGlbkJ%u3-c3c;GvN?~47NLe*Auw?S?isJ}~gb{6T-^pBj6iP_2
z_b_=0-mXqHeRE;$1_Bz^6{;Ppz94hrpRo$<#FaJ!!`zn>G_(OC3^gdE5Cl>bRYE3b
zp-_oJjhySq>*FE#I(&ipaq`T?NpZuIY=S_3P}oB07CsmD%kq8S$}aWLZGBXiO#Xn>
z%1zR}kNg&6^)!r@?eCs;q>P(z0+eC%pXYaJttjLpvv%q5h{*nDw&+Jb`scdjnb)x)
zYK&^n6_d0!?#K{<fI`XDw^W!xYhZJBb#DY4H9YzS*TUXkyd}#wKPB^)^vn0wKPu1H
zUrj(i0K2B2ivXx4VoUaZAFwLLKf_%{?uad+{kEb4x66csF+RaDw3}jU0Pe^Syj`ib
z<FLy(Mkc9Zf5kotqa=GrOJoU|WX=oo&Gnn(EBt#T+;%K}CN@m$Vee~Ul1V4YfD%J1
zGkb|A3l4y(B{??ZlvziQPHEGv5~Rc!xpPgevvEX&rpENaCkx2OS9c0w!RVsQFE;w1
zPUzyTI121c3!3gs;`^}TuzYj~q4##4&B}(QqC57yDD#)>)C*TVq&<(;k<()!K{q<D
zbaP;rpsx5MAxh8-$^Ep0_ksaZPFN*GJ|EN+QYBm=8%oHDhm%5hs!8D4B*mf$@Ef6U
zumN=0XWy!Bt<_rLCw>IPzGsGY&FUNE>ocdz2Pf8~s1<r>=Pcb-5~{nV9jUdVkXlh_
zQM1>0{ouz=(97<84tZV<MlAq8tX7jrHw~lUg+kp9{;mRH+)%>+&LMO~AwdHzBLQ4I
z5vngq+3@2{1tFEpi8rfsPUPVq-e00RGWi6-7!72@L+%aoI|u4!APqy|=V&0FLj>MX
zY?`j}pb#k*AB6l<8;7j{Ld#B8+!hVk*>elY?oiX*C*7BaX?;ya;*d9#Os+Nu5ey{S
z74)Q%+LbUaNb${{+rih66-4Ww$v3HmeXF~rsMT7<7>%Y3KL4bC{jVoUQPiX;YI@ia
z$I9Q$S}034?g<-@yQUqf#kgbj_Dwrld3qan=<?NTWXi`TNKs6XHT&M6d_pGoO&R><
zvwG5@<K)oJHFW*p-sEW|cI`F9eZEp*OVJI?vFRHx-zb#l?t1za{qEYwbl%c_S$qGJ
z^1IjG37AvChy-I8^Qte#33Z%EF)Or{!6_GJ0!9F*(mcD|D<y~76s;25skIO?W_p3X
zKnX&7CF-dpV{C)>+$*s<kgPzeF?`G&gX6WTtdl_G!dUo_#O`tZqTM8X-;TfdTxvYg
zWFfedxFBS-v@;ujN&>57M=%|?Eu0a?B?GW=!ldIEd9kvu#7OBp(s_s9t8HsK1~X?|
z%*sVbj#(WmldE>bI51jsY7NI~rLC~ml{p4QGaN@m@TK3pCfD5gxXfGHFW<dwkN*6b
z*O(*;!W>-r2yzm@&q$mraSXZw0%4%(H(DgOBUv2zOdL-2DqB_}Jgfz9htkKnQV3T@
zB2b3WSjB0KYTv3ZtrdmrCxDD0oTd!bf2%iqZ;lj2O^^M~Q!>~X)eX~+((x0f`rH#`
z(!)c;L?VV7O+Bnu(@8f!i=q@K*{HJhup*5+<W$vTn3t7KUo%o^4YW8{5ur#ZLI~*+
zS*vr=$S8b<Kc}?~d4UF=q-Y}iO8HVo68+p!ka|i5@O(fHfsSA-o<`81#CuYyLT*|E
z_KTrkCks@$ZYr{c3Nv|y4QynLoVn6Up>@uQ<?t&LA><E2<>N58`2h++Krrn)_zx6&
zQ@)7gd2Xkr5v0|wzMdmi0EF-RR(DISR;E4BW@_Iv&+3|0H|W=9PSX!gtZ7ly<gm^&
zWmid#H%vcLYPFiwikcL)LTa@_YsEM{{9`BRWp_Lm{0JMxrtI2&w@&$!aWZ~lmu?uu
zh5_pgA{*2^e2xuDCY+CaMWlQ1n%gz7<>6oJMXPtqzh3_{*}ebQ@%|p}#Ywb@1p&f>
z9L^YQ0h0}yB!7GaiGW@Fc}6WH+~SUa?GS=mCxzoG{Uvx9aF!xlm>ikSY!=%lIL%}7
zm}5w>I~f=EWj5y%{kWWMZ5*(Zx5>vlKTB<!S<CWW4TcbIgjuTKJd6TkCPxC1P{sRb
z#B{Mj8|-N0!0@cZ@RGC>NlMO;QQe|B#zhRa2qVZifE`;QY~Fv>4oO?+FOs#kFETpW
zh8;gQ*0{#rcktk3-NRatIxDJ=JUt>8uHGf{mh|cM8=sPg2Y-(cE`irD-PjFep%yfK
z7mXXCfuV)T2snv=ArYF3H4L;t%8<K+P#T45>9Hdq5l;AA>7$Uchig!IX#}NjRhQIi
zg&r6YIWV|JilUIK_rFfb=TN`Ce&{$k<YOCUxFK@)^rK|l#1mW<F$KvLIVV$id`2sD
zTgb6DKkGS30ql+ZAk5~fg6GW<X|~^?prJ@$s01p6-jeVX2vB@Hiydq0Vrw@7#fnLd
zt06@6xJU=&7i-3(8;=Y@NHl~QNwxJ2fRo)OlpNkn_)id94};Q11pZ6mObdOIuX14l
z`<oLjCOSU<P*6e&A5sZG$V)O+2dQBahU<uYqg<b1x<0Wv8x5ofwkNV?q2Z{mgDg4;
zrs{XP{)QT(+Pkt_i&~-koD7Y+Pq}Y4Ue@K`n=M7Hrjx$&qzpAib;GoyWZZ<QP(nRS
zPWKs7P={Z5PUcMS)}k1v$Itk#^ga(lkH^B0!s(kV@_V}vMbb<~J@9Q5$uxakP(0T9
z?#cfgm6bnwTIMb7lhyYgkhk9cLj(~5dcWJ#y+5Q`W$-eGDbRD0^Suq#h$9lekDn*)
z3&T<}7KWP=^Ncbw2gqVr!Vhfxj8yHhj>eYYEQ}Gx#K*U9kL=-SJ~oCMUrOiHjtHiz
z=-75i`GEbc+nhnk3EbD14}|4Q2HeKD=|qEpf`bMB@y{d<jTa|Ty~vfy<Ah$pDC`_G
z&qS8v@l$tyWFhI5e9x_UZ(;CbwC&?8Td7FlQf<3xcbgxMb6X|-hb>ZaLA>>j$j1I5
znZIPG%w5taOYS}(yAQtRz{0ssD8y*GI^f|dB6xUAOH?j6FUu7+0;^EuVak<<6j4Qq
zicT&#K(e`q|LO@DV6xzOJEZuGi1fCKF=T(EDZ?W#%VFbc@{t*L`}{m~`uwwc`1qQB
z<m|`9i!mmiKm@|bXspfzX==4~Xjyd|)JRi!EXT`991%DJaU$a!hV(o#UjrsQtgw-S
z)nFiNQb7(L-7-jk$^-?3pNN8o#G!r}DUTJSls>?1dDu7>5V)UlsF>HMfm}upyE&0H
zwJbi$2I?>rJ5CD-Dj$<JCPno)pOipy{w0THxnh|J7b)PZYMW99LWnAB+XO(N4&lc}
zGm^`wQaWix=#~{;`kgis-k%e_n(VJPb^qW^QWQ1)kNvNc58zQctxeM1I@}Q1Fuj$d
z$M+LHhjT0s?B6OMnOKuUj-Da6J^Hc}E-%^%<E1bzhpkD4PK(PZFBw(kK6fa(p~~5=
zkw#N`9;xfUEq_q{ef4gA_N7<jeK_8ilY4ZD1@v#_JQ4;1{t(^~z$AF%phH+fy)on@
zC$&%2%HU?&_kZ{0B8kBijW=LEus0}u0W&ikCVr1TOl^z(X4eR9morUq+>e*Il74O?
z%C)s&wclD8boi2uz~IiuW1>8{Ky2E*=ilAYXhFz$D%J1MMyVqvsum3-A*%kLWZTOb
zE4S#rKslpV$S91IS-`RSw>$-Ns@#P}^U+Eh<j@q-hGVw*8IPxaLd)tZ-z%@aB^&yO
z<Xg-7b?%Zr`Oa;7^xg+w)F*%Swks|{;h^1YctwP3H~;`307*naR1Q_0bL&PCBJ|%8
zV)HyS4s($@!#Oby%BHT6%EMtDkO`<MAQ7Zck!tB6SZ~_nRdjzjmY(lTlUl8&AO5S^
za@n=(WX+xT%aUua(c?clQO8Z}lHOmo0C>Z+BX#_Qsjk8~ai}}!SHgEg^-(>nD0EW!
zz+_i(>aar~AfzZEY=)%vAwJGki>k5+o5cJ+^h=>KBV|F+jAYrXwLR=f&oZkMnXvXL
z%t-zL;$`HWl(<2%qZgHoKtXe|L#h+V5(uV`-ANiioi_#Wl_b~B#>0MA&J&xMs4Sbk
zk?arE8WqwKh@Gj<tZZ`rYgktcQxfqQWV@T%$k!n$cJ5Dn-Pkp1emT;F9n9V%IA(Z6
zr1h}zqV-p0>c7>)#ufUJnfGvkN9+7wJ|~BdFXSU<?a|?eJ%h5WSjRe}vY9qMCr%hI
zhkxN3IbipIpje|Knl?1_$Q)C7eIrCZ6Vn|KkuZWs=_RZX`i9fr>*LS8rB~nfn9N<;
zFI#s%?|(@{7+2`tOPB<Wgm3f7J-dRl5`XtD(z7E*C2exMc}z?iCIae1O-Eh9r0}YU
z73J{>u}hA@x!?m*u|e*5I<_J@5srh8@Hm795xNgLiuDy0Jhq$o|Kj?XkX5ynX!#ty
z#E|?pWwI4Affp8!bL9A6`o9tZQIb(BM)!$JIyf7j5xqF+a11$SAU%1f4So3d#T&<B
zD%!I))6d4T89Re7lEnV==T+LnDu%JAcJ%Kx^I75?SVL+(I1e{u$G-9QyVA4!dA)G?
zE}gfySI@b2r!3oeK>PQ-EC=fdt@tB2IFv<-fj>&Z6a`mZD7VPL3Mz+%5<P#<)G@!w
z3i77-cMtJWH7AGW8g!EnH|iM1?OoZWMXmLS2m`duH-BHh_}5eA!$-VdigDxRgGc<C
zo;2$_x_RFlPRce+J4(h)oLT`ER`)!A&6UAXJ+vrv(oN3>;6`{%go&|-p-6e*N1-_2
zF&I;bGuWoVN>b8K136koNYg?ECgogF?ZnN<n5(QHXSN=kuf_!`T!`RA)HeVeY6St|
zM~@hh3+uq7G70lLd164PuqPAHkfZ9G56mkKX@{bKRQ2XCuWg!0{WRMek%AqX2(1To
zy$OHkYpWbDS8T@+?I;vRYbPOGTnK`K9a2pjquSR}^jd!!u+fyBtEX$NDD)$LHAgSM
zcAeaG$NjSO+G}LW$0o}7iCx<Je9P8%wenlVuk!|1#ah2j*}wn0TB{ZEwWYV~4L9E-
zH{5)WE?>J*uD|(iU4F+7Uu#cC@J$_WP@&3&HKYiJlUyUpH0M;I_OP_y2V4Gh@YhXU
z-}k)EUG_6sbjM@z%J1J&yZ8J3U($OrVX)@#Km#U(_wvU-S2Pm($q<KB?W^(yz<0pa
zTwifKs!1QJ$@x`P(4drX%{rCjyD;`FSCGJ4a#(B=qw%y6Xfk|&-uuwnU_aTo5{gdn
zzLpp)?OgeU{KNu#z|ib?v!@M-NFcY7%p^E()(Lz8h5N1SP|yyyL0(1!_HkDng%>Gr
z=wPSn`IUC;d?<C8P8wpaoa6n)@k5FxSvY6U)D{^6OunqCf6%ORbM)8agCn|X^M0MT
zxKHOT?$rxcJ)}4H4C>AUuXy+liUGod;SmXbV=aNuj(61nH&Un$2;GLfC{`7HXWc~7
zIPI!k?P`ed@7V1_mGYfAg-Am_;Rwyo!@o3dCX3z{DIlbr82Rwx2yWBEmYkbs-~n*w
z0tqL`PTD{qpeT-N06GJ#MgY2?JcVR@BP~YANRe`-)Iw|=4zn>r`A}5k0yKTyN#(`n
z0V=GA^r0+L2)T)zL?>@V_SiRRjHbXj86LrBp+Xv=%b*N;-j@-*lH{Z+CvqW2)%=nR
zWVql5N)gDftp^vdSco`~{W?-3un7XW^zYmrl-Fi$(;6X^N#RVt-h<LA{j0j9s1>^3
ziBVJU<xSG~@p|~5{JEYq>q@zI-|MbwZ<v0hj&J3+I;n%2Xewt@cdehQMN$48>7w;_
zrOP4?Eyhnm4&eyjM<ldi_J-OStGC_uq^7${XzD9%c3jCLn{(T{p8hYr_{N9j+#4R0
z#}1AFVcKG1z!}`_Q#|DRx5PHHn|$i84e<&6yXaxir1|p+>wF9mKbgQ(@t#^|Ww1J5
zYLmu7IGf<0#vW2z<v0xY6`1T8oFK(pK8HVNnK9E2%^!0#TZ$-h^u{13QgIe%o6$Jc
z7YxGWI~V}g3<?(yHX0j-s}iDQ9PFm#3}EUQlP^Av!NaC@OuFdh@j3fJ*{hC;9Ig5i
z&D%3BD~-h)gtKD3s{PYka^uL&F_psOO+w)JZAkhXZ@#NP8+b{-zy5KVyQE*{F7DF{
zRz9e!?mH-b`(7d96|3S<%?g#p6UXax45@>rMpW`;ER5Jl9#cYUk>?4r+GXLt5(M}$
z4G006!a;<FR5Y*B^<6wdpAN<Z%;8yOrWz2iy2{o7IpIga#KH$wyohAjJQ~PFjAH<q
z<=nnlO*$IvjS5#3O0W{id65VsM#APQ5!Mz8Eh$MuWOHjXB*{BT#vIL`ICm>NUc^I-
zv}rK)jzgR76HuI?B%3mbO5>mcStyo5eXfua(S=ey3csT;BOdKx8w`4+&<F?xSBWC`
z)vp!Wa8YrDZH~-G>&St$IojhzpbUo10#&~Y+GV0@1i23Kj(Nd%k$-9GHu4Oe7|}+?
z^9;-Dj*G4+m(=~z=kA0IsR=`LjUhi6*D~IlqDh-hQcm5bPRg-i@-zrrr$*DSBb(ck
zFTGPfcdu9P-}O9Ui-!BK-E-r;zDhcPA<4005V(Z-<Y-{T44_az@Titmj;ZwPSe1~u
zFn_|Vtddy8wCeAv{nB{}n~(9eJ&x!4<MwTgHpxJ=6I-VC8I$N&cohGw+cw7V1``(U
z=U@plgM(+-G5G=V>CthMAyp^jheg80Oc(?_KSy*Q7MbRjI!?4jI65=VDp@6m4efF}
z=*I|cAe7u@n+w=&;S=P4(KfeZzvhU)Xu5uJ{9)(CenRcN`un$a=i@KwbsGj`{*s+K
zZ*i~w>kSXek~{b6hW=ma!v|lNLEcf*t{h=YfF$SO_|2AbxrPWVxgfw4Ddd0QGlT?<
zoB;R$v<4agWN(+r7J(W7lZrivU{V4*-RP?d5EQ_shcQuoYPn!k5oz`?b<k8sBCD7W
ziX=EcG63TUlqTePL7DS$yAlb|W!1<DkSTEvtm1QW5@4Y)3l9>3_gp`-vnzN|?1H~I
z*v29ugg9x#5yEd&6wvVbAtdc#<E9fqE;<;d_2Lk;tD$w8{|E?(hpZ{Q?Rl!C`m!z9
zt{jHvTulxYhfRoY0$ADPT-6w+Mj;d_-*xsOTt6WFM&u9{W`)?V6R2vwnef61Qy)VJ
zn8V+8?T#u)nt&wQhQ)o6HY;QwCyBm6YWlU$d9Cmbiz3iwZp5x3yEa%Y1ffjB_FNhL
z!=Jq%bC>k#ojVSew`-sl-}8alh6e$A_}&~g?KzS}*cmZ1VhV6P<pPXZIKP4|)%MGg
zWH8v(!m)^HGB>t|_hCmS!bLK-Wc*cJOl=GfVn3}vL6dFpHD{Y(f5!c=G{gf`G{x`A
zbM#=yq(g}(XVt1?K?Ba03lrOA7OSCcZ$FYRNspxkOnxNi&|uWtkL`pdNY1a!E$yqi
zFy4M;yy=S<E-Y$vn9BFbTKP|jKb4IX-p0NwbMWu5_Gw>stk7Cz`jzy2Rh2j1`h)I%
zsxG(w_-VcB_D5yj(teq{q)*Si{sH~o`p4w1z89qD(Ygi_U^z{`tB+w=24v0!GvdfO
zWS+cUhf=|cAp;#(?|BhI*(Qgdh8d*o#_tLts&`X`%pU<^M25rJmeXSjWZje!s9hi_
zMm{+d9v}O`N(xuxLg6Ih)}a0x7y~~J#Yqc+AIJbHey%K8s58l>q}(nPO3-6eMofuq
zVr>kpZEPb%aEO>gF@_?FwI)y|B7)R{rmHz1eF&9e-nKzt|06=g#DvJ9kurpqVGA!<
z;0+FuMbCrujZITPkeV9QFIV!2h%+H`-=@L>+aysRoHxsa9h)suUP+ygB$hTFb-tch
zRfXSp&L!5==Q>2!6-YD{?3mJ8UT<E#YwaYPiEu5NN{Vnlr4%&P=Rhj8wau#hpkG5_
zGvhwV>L`@nCizaw*M9WSi#m5nuim=#NeTB=MleZlzmb4cal7)uxdDa~(SZ6hz^LMc
z;eIlnfOF-MguPB!g$KmvVBRe1@XvIvhLvbXlJ+8gB?3+SndvhXLDIG(cJf*XCPL&k
zC4Ra2V{U##c1`^`dMR*66BC#Rhsiid93&Re>|+M;70Q!67_$0V_LZ79X;0i4X;ElS
zZh7j1jKQ;TlG|<vl<q{rJTi+>Rm$QR;yigx*qLDWD09=;+l-;oM>3AY4q@)zr&8Ov
z`lyY}#h%#ojkn*G+qOQX=Pc{jxl8-xx_h3KM+aZ`o4!AOf<k3XB+}|U&OPGL4CivC
z$8$R%FipyDG9rn5B(COkqEP34xC#~FGY1l=Lj*t+YW47KQvwk%Wy*-5D`TYG1aL7z
ziLeoJ<3=6yk>C#{gCCjUs+EU@K|C$I?qp*mDrE@g0n7&JGgefsf2c>4=ai~Cwr&o#
z6e6vI_%Jwg$QFK3edL9MJ1fktmQukG6LlkL-lnf<T2$g-9&AP7*R+7b)io!Kq-q&y
zH2WISF|y;wU_-)0(n*M&YoB>|)vf^|gHG5-6B`n71M&B3IBYUl`Kxo4^Qeb^p(ZjJ
zha%}Jx%J@+B$R5b75M{gbl^j=fGeu>6dDfK2(9S|<)>DzX^?e4o>cCjvimXU<Hvg%
zI(JE*tlGF2_gTU>5;7uLk$B%`ED*m>E6z)?GvE#1&m)HNdFj2sqQd#{VQeWbC(tn#
zX3>27UrElW;!t*M(HIo`O7St^y<!X%`&7s5-;tHVSjzu1-b$t&{J*j$qF!~ISGX_$
zA7*7SdBE;Zbbz-J&QB~xv^+FWaVQueM*vgj$T>xp?b`*we&(O&Y?3TbLV^^l5&FQ#
zHrDhQ&7PC(pWDGW!#X8SnXrDr`|3QB3!TPSu^-tj*)YH+cBa|D*Iz_M-+8wwy?b7i
z3s&yZx!3mV^36}`o}oAW#t$GSWzBBLt^y(K>EWR|2#%{zPJT$Gasom-cq4{R5-fkI
z2|#4R;o~##7^QKccm!csytf;Cx`St+Osglk3X+K@a<ib!AX%Q2ECO@~olJO;^Rk@4
zkoo{yA;F#tFC46r`9WbxDiB@S8m0V13ZvKU(IFNlM$)~jg``LYRnZ8ot4~CnDID(P
z*+^m?U>npj3eVbDP5A@awly*GM8!rnpCr6HO#bObA`K$JPB<j>&sdN|Dif<pX~Mtz
z-Uum-P@VjDFXG`4Y_L!1AEx>e*-bYi{Adv)j%FLrb4)fvAd!5H#bO+UN~!p#0mafc
z5JsSh?0PDKts8ys>bonjg6oMka%N9#3R&T6N>CqJ-K|HzLQxQMe_2WHJMgl6>-wL`
z(jPt{?~FDp_t}t=lf$lnKM}{{{he{3dUE=+LL}Sv&wcXg6`?{6DZ+dt3@A*7hZDvZ
za7?K^;y(%QN&L*mi1RdiZhqc>%r=n+RBajgNCs;$Mm0=t{T?2#5{UphPC6t*u;J6)
zLS*rFf++f^5F{8aI01E*amN3KBaJogxZG|cEDX;h+b$7$7@7NvV}pV!^i7snwK>;q
z5Xd7D;&wK+R){=T$Z<kQ6Q}cW(s*eB({(}vW?{CGsOUrce=X;)+$G<-cBii1a!{Z6
z#Ty<@!3_~PEv|?$c+jrc37dfz?Y8}f979JaFlazAVFk&+F;vwVLBowZ5ELR;6~%%R
zvC(FeiJ(H+09YXjJ^`bK5hf4?1|(KjT+M3076^NR%z_9|t{W4m5s=p*51SgnBo)Gy
zAPRjsp+e<#OnRp<t%WXw3dlr~3My!Rc04~a!^tZVODENCcc^P=&Ssn+RJl}v<-9c}
zfC%N1Ld$;c{>gsrY9R_8JnRoUx{s2Qg}hNFRZaMuDM+LyqPWP`ja9suo62f8ztUm?
z+hj0-@w`A+(n%TQO;a7j9R!vudSMeLYu1Ke54@qG>zoNW7c_C6oaegICdS*Ljg~8*
zcK>1DPBvsiG<GP>RPYlvv7{`MD!uEeSM*<RctEaR_o%+{=DU1{$F10J+Yvt#jI7?X
z>HZJ)Ak>FpNyItEf`}Ic^FdH(hppUK^*#Ta;ID@0Q4U9Oe3*Ybo)cLD<38hP=KHkI
zh{D#Wf1e)j_RV8$n8z6Xt4R4L&?;Y~pT$9F7({9mw>6IoGp(pbbR0sVv43)rF!3~W
znm8HQRE7D+ewg`&W9*db&LKD=&$DXiwBLl4bH8T&3SkZtiyi_m&wtH!qXV4Oj&boO
z=b$y=6KrX@y*NCzwW4u8_tNj>s@oowxr_UB#k~h~;Dxt2Jfgglr7Bb|5KvA;51}Rw
z15)_MZ}@!kWnd>z<*;82%O#{T4XupeW*(F(BNe3PaMC!)71SSVcbM8`#f~c<hY9$H
zXg*F_>mVAOdj=8(br6s5pu9DZVTJvLfE|jVs~aWYg218@l|t`O_=w<go?6IfGyo@{
zjRiU&mad)<z<aTPh00Au^6yYRi4Zs0vQGJh1mLV#Iw7((@y{uQ&T6d@p+;1RTn+QE
z=qQmzkollMrz(??y~IyBe~=%a0=1B;VM*~rVNsL(5=tSHeB@U`b>$QQkQnpPa-(D+
zVc+23kuIU)mx(BmVONgpxYnQw)8@vmZzBJ`acN+@oUUO0V4I|<;KmIj{F;hWZ2rl$
zikwm?(44!8%?GQ|BD)X%UM^U<ORm2CQF-?d%>@4f4#c~-s8)y#<7I-w#HlKH1t`ek
zB0dA41Z?2G5)gC1jEvKMX8KA#b1H@t2@@UQF=xWJ%6zMRVE&Rh&Ty}afB9EngAtp3
z#u*-kxxy+jbT0_q=8P1+LuXi=>hbEv%}%Pi2$>0&(}ZWWZ7cJ6_E>8JJ&?=fozH&Z
z)oeFrG?plC(KR!wr*+7lm9<Ibq8RJKfDPDLDvlFUB4}~r_hhqpwdbAC#}?PYC-B=>
z-_q6hJ*o4S^yznRdt4qm_^O6*3V}Z-E+gz#0x1Ek0VXF?1B~hM3q}IzrWuG{qA<AH
z<0{}N-H63+(s+agwGZVFfXg9E%I)z2hDHEIy5W-oN#P&{D+eS77E*<{XajSk@p!lp
zVKq}pkQ2w@&t?EEF9b0Fq%bN-0)<6KFh(ACS`iFliLe!^ja0Be#GKVzTB{K9H-#7^
z6Dkp@cdlCbT7Z<s0)?RRC5j+Iry+Fd%5Jk#kP>nSopf?lD-{QMh?_#N9xg9QocAvY
z;o@9C<Wh$4CMlm#foX0`rf3u3n-SWCvHd(%fCwE3A1TqMj=36#a4jlsd9%Y|alY1K
zMQl(ZT?L0CI81inoKm|MU9}I_T+{Ow-QU=6>Kr!ah=ARr=>9{Y<UyVzk?x^JQ+_`9
zd;Qk3o%(|<Pqr0H_#TaWcZvrQl5kH4F#G1-@y_q_jxP~d@_prSErTm#zr0t`Tze3t
zG6EB0Q;NO9O=YoO`1^qS=s0iN<b8EaWK$X!NCvfoq4J0_HWJR!Q~Qq&g42LpVBso;
z5F@2TM0ir^1le@e&jh^$DYmj;#^jg<dzhG=oX5|MH(3ygCuW@t1TEu0HtsMFEq4lG
zE=021_gA&E&BsTXJ=SgKOO~pG(H1Zd=25k^|5EXjXlwO#u(lo;cu~)}?q_n*>fO3^
zPlGBPu@g362zfsZC<%iJ@C^~s2%%6WCQ!>X0A~Z$eypk?aXooN0;xa-e#pBTCBT9@
z`1rwB<n~QFbls*Mx_s>>op;_PI``a5bYA&7=?l}Pd-7E6ntXzEPo65>$4%9)<4(}7
z<EBd2aZ{yh@(Fs{%vn13+)HKNd6&rCb1#*PE?=zcHt&%2n|8>$%{zP?sHhYt1E}64
zauLE}luKo*nE?zbIH7`)LDB6n8f@gCYIZagqHf9ZAP*o^B~hesyQvzflHt{s;XJI3
z6Ae~y+26>=p!^1c83+~f*i7+4h}MXKsfs8xXa+(S!@KaMNV;OE4~iCrm`Oz&qOqYc
z#?}#`&yX%a#3B?SnV)+f2(3f)1UcbQEsud!Uak^$Kk%PvNVxTL{pKCAZsQJJw`qr5
zeEDLXd)_57ul3T?X3o;C$tOtHaVKck<f+;<d1`t6l-J8~Q}x6zOxJnmU83{Oy+r1o
z_ideb?j^eNmd&zm<91!QX@@>`@MR~1*r+svO`@$3hKKS#iUJ~v40t7f1M6qR-)&uI
zqDuECCx+sr7NP7IYDdmz%jVnn{zm34?$hm$zCdImLny!sl<(IJXTaPX4rItgK$dv_
zXN*WyD#qi0TT(qYizyMa=v~BEj1K&S#*Drh`{FCnZIZbQ9l&Boz-0Q=E!!SPnHNyU
z-X6YB2qz8?<Eu%vaplG;q(tB(kxb={Ft*{U4wFta4P#cmFaK%dfMfJCro+ZX^nS=b
z?zq-}`}u_L5@MU(X#^Y7%C))3wECa4n!!#3*L^wclz@jhRM*nxnC{T{-*)r*{p;`O
z_4f?u+$Fubre{c={`DV_G+#%^$@7L932C!15S`<Bd&!NE^Sv0<TqVIxI4C?E8s_Rs
z&K)8G8kD8M#;C5}v_mewVu{Q>?-J>ne1d%9m}9k8)TCA`w5ZiuPvS3X^8ODTE}uNM
zQ;zx6r}dameMUZU%%|n!#~iC)_~L2u<(aeO%QI%_X)|ZZmuH@-ou8eopE!Dwe*Bn8
za`dM@BS(Mg)AGq<JEc~uNzrPzY`@S$Cj1ZS{$Eq|v>9j0ymK#+6}N1Xdw1-Cy-dNP
z5Y;fvH-syl3{kbRD^CHyT=_DBguX!9j4&d^Wy*#~R6MXgo);BDxuc$+6+(-qtRYN^
zTu4$~Q3-3{3#Hc7Da(QM>P#n7q?9#45JO0|0W!#s#6VGu5Rr?@4d<*41>ffa6%H{&
z9mJzkOx+a$xo<-C9ZA|60bzE<+DW{rrc|}<M8-n9O@x7Yooo#oOrj_Z-w?TX`yO4s
zc9YIM?-Dub3)7_QFQ;m)D5U&r6<VtmQWQ0L&mo8CrzUmCF`w*^qd)m+X<ajuwBxgr
z^|YC1%4suZ`Om-oyVK<3t?NaP{^V!m=uduHK6Pw|eBc9zx7sagQndQeqE^T!jyYDk
zjypl-o_mR2e8o~(w`sfQapJmYI#J^)<ciWyn?>IcvQPT`gu~H9Hf`fz8>r;_u+bQy
z%?YV{Kiv6(%v;(oPd@(&?!h^6#eP=t1ov-0EWyJPDDwCmI6=gaz%wGY@b{dKMT4Tx
z12zRr3qLb$20^0@R;P1ifr-?ZIK1|_%qk1bsxk&A5hgT^q0Bn==Eh6duKc5xHBe;%
z$zc+R=f!hnFd-4Vx^evy0#be1Q5p#mzfZ<pZMZroIwxmHd`1eTldsr!8-j=9-8WRY
zb>UtzjzSa3%medlZwp#48%i7q44+xcoUQG5>>S*fxpfm&l_#HnMb2OGfSkX4m-g=e
zEmaOey+EE0a&Z7C03}w4JlsU82NT1PuLZTqL5mWc@rVcuUm1CzoH0(KzIVrC@*hiY
z)-TUIQ$Bw5q>^+M^4|9zqQ`vlGdkt3PS&q{{Tq7j#aGF9u39du)^5~$f4oPw{Pc0T
zzjv=}>mQJwzP;Mhw@-Td23oJ)z1q`1AX|I)>bAZC+1fjxJ$(aeKYRN2$+rG|a{u-x
z^uC`wruY8%QQf%p=eqd%TjjDVuhaiK{{sE;%rmv~FOHL={`6y7tJS0^YVy8`6QyhN
z2|D-OZ|lliHpyepybRTh04U^BQJ9j$#GbcTr@T53`64{cYKD_LC&*3pf)!F1q4YrI
zLn8kuh=;9*0cHc>XUF(w9@+#^aUgd^k@LEm1iT<bsMtox*40KQpF~V4R66JY9*Yya
zik5sC8wrG|QEUPN9c*KEbkc`(0}wO{vl9t}^336XTSp36HsCKD0uHLBU9YBqxz9A^
zv1eY^<!d+Uyz?&6?#U-;QIfc#sL3&({Iqs<9j9OU+Bf817F?{CU3r}@UUsYA`{O-w
z-%s}FmK{%&*TBB=nkirX1G24eKzjQ3$=1FB-P*gi_39faUv?cmq4({0Lht+WqjK-I
zM|IWBoAmOluak2xx>8S@F-wl0da``{=wtQ0?|GkZo<4ERB>l$h`EvEroAut_$C2Y{
zzV7#xm|vPc^2YC1Bb1&%3Md|DlN7>uR04jD0xXL}urI(@SKRxw{@Zms<;CB;P7pvC
zp}>Q&2nz6yNS5Pp27Bn9&-Z`EHx`D{aB9StEdE3ukc<sHriz#Nz;zb!wun$gfaP8>
zqYB<fGEHNsv;aisJ~R9wA*P`vJCA>6?cp4t^;IotDj{Bp!GwT4Gr%zUI1tSpPlO@Q
z@{<XTLGZFp!|hW0eo9;vGM}9poTsv@2=n0Md0DY$Eaqh{h%m<LMMUQZXBHp1_{gd|
z5B7x&LA6<=4(e@@I+!`u#~m4^Y<cK8ox7x0uix~PJo&4)6<`Da_QZd>5yr=ca45t`
zACnQ}<sd(ca%?=DSyr_=k+d+Q1hT?_<-l8S>WZ}+^?%P<pobrEq!dLV?|IK5a`dM@
zEnofGH{?54FPHTj`?N*c_DN4k<hJ$=l%KUgsHb-zkhz}nd;6|DUbmIt)ziOEdYtI(
z)op$Ii~zRI>D%j|=6#nWam!El$Tip9qW`?$LixfMPtzm+^rI~$qbTGP$4ruou2?F)
zk3JhnLd?fYK*hk!71&W%@zq~vT>t<e07*naRE876Gvw!j03pW+xqwDMyimfGC8%3W
zGLfr9s-qJZdiI%z1)HwUcoIH^WU<*m-j-J*Qz$-$Us3rD<&YBW%@--h4I$_f@I%g(
zRLG+PH>qr~$cJ*zNNw}VWRO)<_tFN5*BdG}<s8=IqkH^(gc4&#X#;Czwz_xwV|vl$
zi}mA2PtsaZXssyZs1JQq{`S<b>c7mtNN>Dlqu#&c3270webVC_oW0t^*GGSAgVWPD
zP+mX#%Hvy`psjr%c-w5l)Hk5p%ImCk9hH69wP}QqHc>zN=^kCT;ir1;MOVpbGiK?>
zkN%9l=e_UKqA2w6BaYH<%wC|kZ`zKO23DiZp0*J(rPutFm1t5|Lmn&nF>N$a_3dgp
zjyGR46?d>cs?YrTUH$H@kLka!-mP!E^=^7Um+*Uv$%J3n&`07GF*CHQ3F*n;Fe4-3
zT!M?BTt+y7(Ha_S(^n3FGsi~Z1LFed2Eq{e548c_Q0ar_RIz{Mv$p&u62HV`)%oXM
zQ1k*Ruz5<RGe15|0whFzFu9415q<<=;^Se)*631$Qa@yX{K9JLi*3e`7(bA#xJYr7
zK1MSIbFxZbVXpicldJH3N;uPYy>D`sq^Gt!B67ThC}LC+8pRt)<Yp0Bv-K&NyR=_6
zJ@jHIctG9>0~1shPh#gV9NqL>#WOH!aIRh1hV8gL)Im9Q2Ar<+QCQ9trV@<r?R{Ln
zJo8LFWWxWDqNvG-KKwELr#a{7vX$#~Ywv(=?s-_2UVp1BIA@`pa_Zk}cW0-3{=}1I
z{y7U}?YjG9tEqOqB?$HHlWnF%xJpqHzY@&0^#hCy?EKuat=73Ei1iNmxm)QoQ$37m
zZtLGCTed%;7ykQy$O)hOTm8WM|ECs3As;;APj%jTm*}2@FMA#l!i*)jTTW64caK5|
zC3UBoV+Zn%DprK&QBi1WEkdCn_sDIF6_*^kCl!j6NG>u#xSfj&IDZoaD#@=yzLqI#
zM1nYf4moQ?@<!s=IkzpghfpetUdX3MK(OgiJXJe3nnWrn<ZEdVt}LQh!@_}{#z47i
zUesct%hIl1%uw3u@xfPQ-np0P;YS=PwW5&szyE*g7pKk8i!WUyTT35YyMBvY`kiZJ
z)~vJS_~VY(<BvOD=FFa_ORig6`f-b>ZS5;JKmLN6x2<m<T|>5EDmOt<2^UlTwv}Yh
z6u;JHs&#$Z2C8)(4z$MFw@-Su@71Nt*ULA~nlB&v&_}f>YC3Vk|EFJ`IZOKXJm;Gl
z-X!^E!~BK(CX#Frd{jHrMuu`(y^@#1;EhqNDXH;;jZr=D;#+d@jStJxyB?EfGa)4j
zX#i+xz=e2!PjLnS8u2KvP*q+z4q;>CF{Z}`?2>S<1A9B7353fEM}bG!xZ2>h&5?0l
zler5YK->b5O!KdpKf^^t!6(W!um;-MnUAl9FOAgXPR<xGFg(EuL`ogWg8%MoLVf)=
zoFpY;$>OzP`((*Vd&$_^v1(rEO4}6&&z_eqfcH(bvE3N4CV59jW67~$KB?_^HA+_!
zUsxYgbZm?uSfM=Toj;7~vb&#<Z(X}nfAaWmkfY;(As_%rs4C>bxROFi{Tw=UkVEK~
zt7knQ%9T9i1IFq%RIi#swEUJ$+C6!y6h%!xHK|h<ocC?raNmPc5-(|~2m^Zax-D|a
zW!LCezxs9U>g?3+jt=ea?2zuxPU-6G)RRv-S>~T}zOG%rrBopHIv{Q9A8=K|$yndM
zQmHe=ZeRI%3#7Jr-z`Ae);}P3-m^m%FI%e%FT6q*UT}rZKWCxLoO!y=oN<QEoO!y;
zm~n>An0dNRKXsaJ>Ul_e`pf?N2ISi1>-3A$z9R2^&->(k6DR6vGtSiBM}{>J2ueU7
zCQ`xc!%CGuLWNW=e%wbI%5~6UrO3jrf!t7j<p_unSA%j0xN@xfn1%VNUnf;W5Iska
z)J+c=H!I*h)L^xY2$U0Bui{180V_idx)yxQ*ubD@hR7?aI-F-`<L6w}!HTUd*UU&e
zr8ZC=7#9clBThJMT_4rHN1xR%&zz-)Oq?L^|G?q$wSPEEufOrmmU`W{*L`l|)`#?}
zMJwd&ISX{kaZ{wbvqQQ%JEgm$L%TaV_4vuh%bYp$bm?`s2rJYrzc14l%5bf3dXnn~
z8=-wp?o8$0*1u0S_w1GxH~vr;UU0cCyzp{ec;OW~bH?d9bH?d9W9At$bLJT`W5(%n
z(%+n<H?R9qi}3Zg`oDSo{WAAk7wLyS{81^2Lc1qVm0LG$*JRU4>M>MYTqnrkw2cia
z<gvLLV)AFIdY!KuUcY8gbBF3peR$|K{kLTg=)Dg<3!F?DN)<l{W5X$qBjQIG!BI`|
z%zj}Wk&p)e5U(&MyoW^57Q-vYCW1&9dn6tu7E9=_!ZCtfASk7L$3-DGSA|0)-KTS;
zzG%5XZ3xT5Sb{R@M{|3o==lN8I%xrevBF|XY<P@?5E^Er<T#Ia1Z=$APk+zem?cc%
zvx))YH~9sw8adkz#+3F?c1dICsftNsrk~Ln@Q;Rns&j9@7GW-I%j6gm?}hpa4r%Xy
z_u3!iid%lJ=dXB39)9{&aU$mGfT<102SN@LR1<(nGmr=l`x*%HGrUqzvwWJ6pxywm
zbM@R%qbZLad|A4Vn<_<7lfOCXi*o(yAF2^M11kd)<N&o4giSrWb@8%W^sG4xqy=J~
z+TGEqT_u>EeB#ME|62?7rgir@akJ3wHVf~TDn^foo60a#8IB5};WCW1;-<T0;e}Vo
zjG3ovS4XFGb#_WuM~9T}wY#%Jr=2=YH}~uo>$ePV$+rHIJoXOg+<*Ol@}ZCXxzvh6
zF1}(3!b+Z}NJSi;=O&4Q7ea!hx;0&OaGO(Jq=y(OWa|o@k#Z&<o(E_uU^6_<!U?Dm
zGgikCGWJ|Q&zB<qgHmT>BSJ`o61jAgYsjJK1~ww@(+1iU3Po6zLb)SW$bpJjCYq?c
z<#Ad{1PB|(jVfzYD^m(Z2z8UvUI)=|C8|7c?s?zVqNvHAe)!MzobxYJ%QZDcdYcih
zQmNk7Kj5hiYu9a&xeLyhX{S!t?v75u_0ploA9uXWo-<dkT(n#_Z7Y4Zf1l^%IpHH^
zuBUvzt>1inpQT6mnAYF3L$6x2Lgvh#t5YT)-?~OSI<?%KNmpm5c6D^f((7;WO_mYX
zZ6)FB=^v1*7O#@O`kTMgT2bgpUzjeB9ef4%Gb3YmZTNbl*a?;LQFZ0~POpA9zZjvy
zDO<}1ev*o=L-kSp(e9UI{<59&+uyxi6;TMu97Kd+1Of!@`zsh3@dNw;-w{R&eJDh*
zocy&8pu;2P<?$`_-|qX$v5v2V=8Ur}ATh59SkCkGFC%Awfi(Wto@)?Cs&a!YzlZ|?
zhqGlZAFsm3jD}_4CxcnriDO_d;ARcyg+)##n+Y^s19PNp(~WK0ww;Y_+sP&y+qP}n
z8*FUb*2LO)V<+D{Z`Jn)rl$JpyU*#<f<2LeYsm|MEchMkcj+%HNkou9EkAma6x#aA
zo=vTgnV>+(K@-DuIH~Uo`scoqCSDs@Sq;9afoSObirV$&cj$er`*=qtN|$r+7AFe0
zj!W#n9-ej9paCv)y%>iq4)vUCA$uITZz_!3<8?@7A2rsKdRHm>)#5QU<8kp$rI?EB
z_hQ!hG1{eTY#uG{mBKAil=iI_Zpio?5AqYpN9qg$3K+Wov1PeWHe;P#T+Y`41N-^k
z#Q!2XcCJgWVT)DRY`&nDqTu6=-m7PRg1HHu7DaP~gD|(l79;%{fbrDGvE#qU?dp~t
zysnDc_m);a^@^=uJ>}4?R{!<|_d3SjS2d=TPnOdv2v8Mx)0>Py9n-9YFL-{qTKV={
z_4T^(*`eMZ%OiQhfrBFRCy1{>uDjFmlo7t;eP%tHK?VJ#EFJAU-|h(#jg#7E@|;%6
zGj_K`)5ju^9l?d>nHo;pQzGAA8A<+XKa9yoli`+FV?xvxalg0wv5v0D-|w>h4=0`!
zn8qnv%{Jnt6QhEW4eWdLx!Wq1{zcsIy%_g8n(u6RUmwT-(rRLQAiR*Woqp%TvmLJ?
z)B$TsFtl(MPDxcR9=4Zh^nGoj-}}=6i-&snlv*FaQ0}^#WjRr%rB8m}=hpilqnkRo
zuvejWIa%s)&m;SGyLx*+N~Xt}s@1W)NS#n??plg8h{%2DK!3d4fIpg)pm)9f)8hS<
z`^si<ck8`UjEPn!XxlvLD@@)9?tC@Le>@H(_()kiz$V5sd(}TuoOE>xn-r81Oo;IB
z_ygtoKWFie0ScV~h>MRQRuVQ%POqC%78~0M=;=H^?+NqvdIig&Vo{@bK;mRXRzo`v
zU0ywe<ZA3J-&P6@A$^^fTeCDI3gHaz+i1%-x;O73v)!ESIc@R(EzQB2xz6sB)brxc
z)1QH#hB-x|Eyx85_%hwb_#PISwfU=Wzi8*nkM>W9wv!G+=ivBWa(O<J01A1PIOx9h
zvhYU}G_87Ah;~NQnJRO=qhuCI2ET^l%^p+cerr=5`r=|P@FCe?T$T?w7eObL>${8{
zI^R}DSnSsCz$IwIB%D}jOV`6fnuOk6NzV*4J-#e}!L%HpqUKH~<PZiDnC$~_k^NSr
z-0tJYnl+bQ-!hbtLy;hWE5@ij-Yv^x({AJ>2Asoc+f7~O?6U-Y>ROjufn4S9Jd+v<
zA74vNlUh21p4<rb@8Mhi>kU%5x-N;60GpzG@AC{tL#YU0_&IM@D?bB3o=zoO*tn_9
ziA~ZKMfl6@Jz5Vt+t#V0oHflqY(DB8ixGci0#kjNeE1U+W!24g*(D7j__-9k5fcfj
zS26kNSb%coYMPj4k7PDU5-Pz^I4E-0F^e7hi-IRc<SCK!3isw<iE$xZr?r%Ih7kFT
z-4ODLf+`lxFdXO1IBS(J;*?5RG0L5n7IR7iQ6vP$Tw%T*zj$U|<{GO<QyQ&;57L*W
zkpDyDTM_bi7QlOq>nK9EQCw!PRu!<!qU6US!OLjKhPEO^lA-_PC-_=A*M`v>kE8~W
zUFj5?%WvwxyVpOyINPqFU$adN!`823x6D^D)FWKn-YDA6%j2`S!{GIK^6l_mfa@?b
ztH<`VWsKowC|DisZ2>gvm_!(GW68D#SK0Z2-)RNhLwfCoMtR>n38o@%JizIyAHi)y
z-}2{ko@sQGyde7Iq7#)JPBx*-8U`eOLg)KRoHCwePzT&@(T%cDQHe^5=SQOV2agjj
zX6)^)d!%urG>Ge0i)a7qDFP0z{U*xUN8q?QU(a(h9~~3-s)ZqWPQg$4R&4d?e&mc6
zgueU@(n~l&6E|m*iIPHxr!5PEHVAc|SSfKNzAvr&Fv+`0j8A+mu>|D>o<glk_C!cP
zibPH-X`XE52|Kno?5emxwLhYGu14N9@7Z)}nakv|@7d*bTH}uuS*89y{-JoPl2P30
zev#rl`^axGH*aG&!jl`=s5PlO*p1F7(2$mfDHnPw)hMhISS^CwTXrrkaB82}zv1#^
zb^7tLH}#)l_E<Wnq@{K!?ES=dwt14^K{GG~M<kD00&!!f_@zr>GZN=<9*rMRN$>BN
z;rqULb1?|dymZgptv=Vc$7bMZa?$eAspqN(o4f^-q$cqLXe?(8NvQp=OEtA?n#7de
z08!qnxsaU?Z+aFbr(0KL;*V@cHp5LGB&2yfqr!{y?sCb$G`fL+o%Y=Q?8kO-2?@a`
zbDbUnFDN?*!(XFt%sRet*v(EBQ68Adcf7A4Fi0-&9ye$N6-|Hz86~QSdkVv+!eKFd
zw_nLarg`MN09irUP9_-uIiv>Ga7)q>wxYyjWegT4?w1WtxqHYPykaR-tQ}G_w#{{W
zOY6_58;>jWMm5o6%VDv)asMEABPh-dcn-`&E+(-8`AV1()1gt<jDF63!;VTjF5PK#
zil}`VK(=@Vnq?(Ma}sEc6reTqv4B*Vp?go&z;oajn3wE612oAkT(EQNmz1)~4G4kW
zyHErq6wKeAC)|(8Q*}u>K#F4LpNEvX#-fVj{l=IU1Scv@dlXzvM4x&79G7N)u|*xQ
zz$x*=b2#Y^_*Ua>CEdJC(qf9l>Vle<w6O{AL`lv}(F5$XJ?k{KME2_ssrs!aCU#so
zwC3s>>|>Bl0>hRdgkyM6WB=TI5MbLSwRfouVC)(eN5-UEh;v|yoi`fiGn-y&yzq+*
zh?!eJ_2b+fXNS0=%`CSxoYvpvHZ@FykqHK7t2XEk^l<9&qNh`!Z`Pp|;8pXQ0}5h!
z#OTKR#W99T>0$`5DN*o<Q}W<(*L8#%FLJ>(40qJ^&D|mL#m?2agnvF_@|T)TBo4aX
zj_KCBBGQ%e*ZCdr{6j@uk;<>T_;2;lA#e#nu&DjVC7WiDD4NifbcEH~g_k>$IEbLP
zJEkDW>HrZkA!k|S{dep~nz7$SIU%qb&}lLiVzEOInUK<A2*06y3lZj=_i*Jhzcp!I
zO`PB>T<lrX!_ReX1)6v~rK9)No`%J<(|j%EeL8CBlz1f7qJ2#iw6faU+~-$bP9iQJ
zMo5%j4mS!69BlUw4(CR$#0dhV)N>_@%fbi@wc_VBDTv@Kp-MyS=QMo?m<y?Uin3uT
zDIl4WqH&e~$Qfwlt?3-hQn|ozh@GpmOW(>m9B3|aT?58Sd}9-xv{#AOM2oJam2Z8N
z=PMnD(r)<f6tm`w=R=)M@w=f^%8sJvGrx?**}}1I9j%h)e4hf&&YHe-Y)cL)kTLi2
zgZI8PPTK5UR`6aO#*0G!v|@h!Em~LDB1*@!;S!E=*_GV+rL-Gpd%eNP{kv-p)4j_+
z(X0!*=;)3hz+8^lE}CICkxL@o?61(TSS`PRmepuc`>kg1&|Iz`-A=chF1w1vHp6Go
z?Y$p(X35&8?}q63!FQVkFUL9Fvx|A1p9@By9*$$w(<q%|Qn@Dj(d)()73&nSY?C|$
zEd-+$z6HiupmxH;7;9kR;RRVP6u))?>&Vj0FHw~{2$|G!qT+gb`g!RHg0~b;3vHL_
z9AJj)(@LaL`myEXtI^wnr2h(_(d9%c%~;6Zib(yO9fLAMC51mdLY!mHR`ZX|lIZui
zMoDYk!poo{wZkTTGB|6~2c4etug@KVvv=(N@Kn2#RJ7lIjYJ<ycD1j*JJBm~zD7hI
zpV<ok+eo8u$w3P-mXNjwecTDRWK0%b8X)knk}3isL=;A<C@Q}K)Abh$G=qA-O+9Yw
zdZVtTSQ-AaaFSDV<ZX7xIryWf_PtPk-3iLjkHl8+^ZjTRI0+2Qp)H;+JG}3r3LL`H
zWm~RO)%qyzv2vMh)*Nnoxt=ap@0r{6u?;=LfM-N7JAG#iI-O^rbb5b=?6|)BomYoy
z-Ck>u`vwj37V6ZY-T~*da9q&Zo~~Aw=5l`*d`=zGK2Kq2-#R91xpbP+83qa?myLp(
z()z-=O)bM5DLY%G!Bd34xSZpQLqJ3mpG@T-t2bv8|8u#?R_+HlFnr(+t*_huGx`i%
z6u1nHU$#-(K35+$DP6i#7JTh}u+VhLrPyPpbPQt_Qk$_2X<(<nRBmgmD{c1qqNDXa
ze&ncX(o-sU3{Vc*!Nz2M|MkNPpRfz*!^;cfjRWkb1eRbAcxRPm8-t;H%&gF<ui$Yi
zv(8SwyNCPusnT0FP%H^&F!H0uG`L)$$Np`lu>@3A>RtxIS8afH0NNs2Aw#gdQXSk*
zAItv4kwuVbf_OK0tlv0gtxfCOY(fFJX6|7%Zfl6oaYcxz-PT0+%Z5W=p2`(5DcSy6
zVG<Ql;-~AbYXAXiN68KLo5Px5VSV3g1YA73WKgKa?PT9Kxwc-^<ZH}a%#E6FO>(a}
z!N)J6Z+f%H`$^+EvtKPrs;;Ivp)<TWfebR4v4_98w-hnt3_lF4b?`lY#y+&!hhej1
zvvS5K<fZk8syFBPvcVV`w?S*S+(1l|ogJ)a>WnJHAMUE1T$+`=qLd(uM`EYv#t?F>
z&-X~s)lIZc@Uby^E9%y-r?gSICM__G>4OsqB{X_JN=e+6GeSQUr*%D^W$eI44G}3e
z2o$4&NYhjnQaC{=`>RKslA^NW9N|+Y!O<vT?6?&|c>a-f-Wp9Wj&MXARH~Cstq!9_
z0ig@EHFzcGwENuNdOVk)H-EbHVl<5)AV0hQyNoX6QJgPm8D!XFRaV<)$u9^$?VSBI
zq1AT>l*(+6Pux6Qy>ZqI|HC4Sv&Xi{x30E#_Qwwuh91e2C$BKZ!8r~?Fky9^n-!h!
zhk%Es055@Yj^kb24H#ahQi_h^9FRPEtkm@c0bz9_XGQAME{SBN4j0A0IwIv{Nl;1t
zWHp}lWMMJ}aiow4y%Gs8BAY>|g7xJ`7Xw^ErHLZ|LGQYPupQqaQAlR4Z^yiarf-^n
z`Fr>%1Tqf9K^EyXyc!SxxU9invZiM0{ND%6kFh%6m&1r~PU8xU8rJapWZMI&Ht#W5
z<<1T}tKLk<A1<?NYD%v@j|5$-W--k*C2GBQEA?kUY|g;^9qp-gQj7B6_gV@RxpX`H
zG+%cnFD`&)Qd9a&{x6-}>Gp?rzWb=Rn-9r(e|nQddIo2nE*$IHbDMFq0TvdWx5^3s
z2~M^Ul(xW!@gPoKa2Sym+)^XqBt5^=9oH>VO{~twgyEIEP1o<H1@zsTye`xkiGNts
zjvIUDa8UU!LXCmf;iPYQg>Lb1kLY5#9BAWEiy47xrQCpp^Gmi0N}j=t3bbM(%6B;M
zX*t&m#h;Bbl>R~bne&m$85=UDQ{#Bp2sJX=$OPF#F-ua!ACO^?8@)guf@x35qr<aC
z$eHIj()j0U><j(Q3?o<3wTzw{`7QKqf>|6eQThYx$21=oA<F9F5Axkv9>XUWjvQa+
z;<ssLqXpppn9`g68@4VL_#9QMShQ8}MBT`!A+OYFqWoV!>m3>H8tCYzVFWvNhl12U
zxfWBmxNj1RX^wgeei(+EJ$Ze_pI$sJ+4m+4mK@)*|I96FniY`4V(yXvsw|?XK*5~4
z!1Is0M>E=hUIOpga>~~Ug&>f-_uTnRJ<j^Ld$z~8WF;amtHRdlHtTos@juWTeRk#w
zTK49@bfD{%)<5FF0sT3VHl^Zk?uN^8^-X=^<MSmAG0jv$dc#LWP$Id-{li$h=eoDB
z`;U)Q|NF~;q`9x-ROzGOU}F<<A9+{}K|P%1Wh$-XzpUh>^$B7LxBRwfEJy*44H2D*
zeG$IgR6z<3y9MxnODkc^>J&*?Ca*Y%rLO<dgzf*+;>`T;>NQY43l%2lovY?dwLDrV
z<E`EY?W&_&bXh-FrtNu4A1~VKo^_ENPb3a8b7vJ@U*OcS%)M2>pnxFWxj??=lGwmJ
zT!gMSY!+4IeU$T_@W7gi=JYuGaKSpSs%R$S*)gyW)}33)DgJgm5t^XPFf8HT_AhY0
zO)S&InP4|<?XYZ<=e_piJ#(Qx+i<}e2j+ko34GQX-8pnTK&jRH%%d);<)YP-|HX#m
zrG^~~OR`9&%KLc~ap%bZ+V!<suT*mxxT%N#BP-@1gGrg^=f2ysh@Kw&aWF`D^gpQ8
zDcJ6?(?;5ViGo^|$g5J1`Ot=`G4=pR&*?}IDtQR7%n@kl)YeislH@%aGfh#Po*t6*
z=2MbUe(7CdAMs>uX=j1ygs4#zDhPQ*Z9aE=%!Nuse|BWhf;|^j?0n!<lm3>hpWX`N
zLa_Rka|u*D8b8dai`h#w@P<r|crKmfN!Y;+y$hZhcaip<V{hBs;rt}eBCiG$0+;)!
z(`DgD@Li_eb8_qeA#MTXXQtLXug+MBnAIbFJRwp&59`f!UHh3ykICVZVz=$-gbDkR
zcv7)Q5j3)s%0YJxb~znIhiL5`!kvO61jWFRX)4EDLi3(L{TA1w?C;7mJE4z8+pk;l
zx0F2S;h{!SnVc`#FiO+s>lI#?6IhT^gpu^QrW`h}=>J^O@UiFEdu*FuAl4>y(NNDo
zrnI3k!W7zkX?2?@e;Zguu(=YMF?#KE&!G4tL8F)8$osg=JP{0h=Q~dPzZ*v5yc`-M
z-@1V{c;J6NgDQ^p$0CmRr3z9V@*n3Ii>18c6jxyjJ?;GRXhLl!@l#>R@6&nW1=s}W
zr(Lp@^-)A?A2N6%mCF*`_k*LfXJ8&PYt)DCu@oSggv`jWBe9NUMiN<x7H7=4QB<fb
zu=4K@lMz!-KlXLJNI%wCzM-7l$^KTMDpX#PC#{DSqre5-m*|H}WiKxH<;uU`;dbu#
zLO)Uq@$U_f6<BK7Yx8)l5D7LPKnta6c8XfcdC~7?MCW`A)dnm&7<tG2N2BX%yR7Xs
z8r0hthN@j<CV@2pDA-H<`8dI@|M2J-SYI%obQ-G>EZlf&f#x*ou<EeC+_)mOvW*nT
zn6HUa*m$3qLmCfBK$<K`AYQhZa#+;;O$DsxinI<>1%4(IvtwRoq-ss(;0Le>)Oa?(
z?v2&|>&aMi`i6G^ZY%X;dpM{$NNR9@k;cIlf*U(+pt>g`AO)B~iY)jGXf3iz+8cYO
zzGv~5M<=+-2desF?S6mf_Sj_VYq>G%KJs&YbU?$LLL~brI`?O05Tm_-J|Atu0$j*Z
z;n5mkU+aQUdX>loV$&k7%y^z-?0^St3MlrjN6+p5$t5dz$fYkM%WVIyvv!mFY%q6g
zvke}os|NAP%y3%EeU`f79m}+-w?6F(SM|`k>Uq+2`Q0<7ZT6#DUf6Ko#XZvEhZzxy
zeDYbzKLLvM_}(M+ACsMB0kHGHen=K$HkLkVEw&0C7@Nv>uv?YUpkmyEo(CQ5mdUvA
z-Y}bAe4z4pYS`5H9S^<4_-Xyi@nwBw0K*48M}+_H1@MPPJEfV{nke7K{`F)rEChHd
zuK2p8?mT>QGVp!Ec4USGlQ<9VD2&A62~=aqA6xSxNWTdU(}2N1;9P+$op~EP*3*6z
zc_L3u`w}cs{jFK*U@YzpEoE+cS4xz_Us57fAljWc22i<OyM^p{l?$NO`YO=+3oZ13
z`nebJqn7w%Uh1KQxJ$F1nGM|I>v*Q~zP=YQkyr-e#w4|09fWN$^4ML-S{0$+?q&W_
zdQHSz?g98L^u3$=L7rjYowWu_uipbaV+H?cM*Lp7^S1I%Tk?;h%AauUVPHayO-JbW
zV+Uqdw$5VJ<{$m{D5a^9n@;_t$cF3taY_e)`{l#a%#RdrNs=(r;fb~%954`!Cn@y~
z=80wtFTNf|`&(*`3buHrtqkg1lL%5*T_>HRHe@?X6RN;f;%4sx>pS|ktIRPYWEuGZ
z;E>N_X{r>3EWgY-b0`0h@P-~>qeeu4jW_<#%Yl>W>H<u4={KCAZF{e*Y;v<OC|wpL
zZ$@GA3fwn$@$_&cIWX|qv{rm~c^}^xR{dv|qY&bcNZ)^A#OcU>e}_8nnfoZx{ro?T
zc53sbMU0$&mLg^~VsM{ENy68S@~VWyXfP}vT<rQvw|<W(ZrnlZxh{oaV-=xdYY+VV
z3=w(}d!0UYpS(^o`x5LRKl($6Ycvlom40kxCt>YkX@2se#>U%J>an|9vtq5`afK_9
zYY;Nt=U})t)G2bpz3fQSkQypNgs266)@x3=y*Uh3<pS6hbX9#v{-H4EG79e$#t`D5
zh!k}z0q}@aY*>zWBc-)NCo}=b!p0V4?m6fjJO7gqT1csdhKFXc=kJDV2Q%aNG5vs9
zV*Dd5TBM_wWlr`*1*bltVj4bDJkt6N(~66&P0%0`Ax&O1N;s98&OJ8v2)qQ76aYz3
zfD;OvI^32FwfNQ8xa401{$a^xpG`{JGpq%<5jTq4DhYs6&^@6l<@OAs;ZD_G8pFaW
zPTgGp=i#4aaJ}18>G7kJ;pv~{ns(#}8Hl7Yi+f?DS#VCsg@O~|k6|j2D3gBCU$Dda
zUa>0Z!=%d+Hm#2Xim~|*h_TX2-wi~30`zK+l)SwSR87>glj2v+&L60jjdvN1UHIuX
z;X1a-v;+^hf1V4QN$cWe)#O<+^B&r1=r2&LkK&lEZu-%^KaI9)^}dX2Y+w7@#^d|i
z4R5|j#i9|U+Y68h43{U~qNk_p|6WF6W>qt~89rKM)iF<v3B8^=-*z#B)1aQQa>Bx5
zv2x9UgxeezRkG>7lMba}a%9h;c%0bO<<Sf^FOYC!v1#nzoq{!u!$rU^W3m_-fynL_
zzMP2Z%N)5S+}^h7HkV8S3LC(YMG6zc(yO*!e&Qr}Q6_`1k*2zWLQZUout8t1ROS|Q
zAe<9qTbp0IB*AkV(dpH9N_xLVxIWLL0{@hZ-`B4!Jx|H<pKIpd!>Uj3zZ5ukq--+G
zWIp+A$9T!Hj3BL?N^>7nq7h3og|wPt+-@dw?EsfKY|)}KT3^?gcTqy`u{(Et*K300
zW6Nevj53G+lH=!c)3Z7_vyAl9&NeLasu|DC?PREJ<h<uTdsM5`9|yKe&Yg-7hmm~b
ztA*aJ1Ua|%4gWd3P1H){*JyNd4}GMl#tm-S`4v9}`|sD4Y}(g@Q+Em61pQJmPegmF
zF2C_WWgYZkf`9~YWJc!>&}hEswco###+t<L{_2~D=BwaXy$)7c%Lu>td6i)tutzZA
z<m+e3>PyN-WUCA8buYcuy7pCHn5X^2OE?5Y1(xQTc@i9j)B-ue#2WrcW7!>A>?+9g
z!1<XwDrK`^mx$N46<q8-pFYf`2D~T|Wwu~u*#AWwD-Tab7_mV%O1#&+Xvz@(SyAA6
z^c_O|MVsE#pp6079#I_(jfBk@t{NKnn0&rS(K3obNRBchHj{=3#-a(O1p^`I(&lM(
zz3C!dlNSAige14S*Fcb)xiXO@0W{i~x}VJXeT9X)zeI(l*3sWfT*3mr<HvSBV~DgF
zGxu)sA+X3i%hQu>{c=EuZqh2w{R;{5mwQ@LisXmfCNI{U4Jgxi5c!mMslTMneGOk*
zLwQR_g+*sC#Zrq!RxRV1tDj7{^%R?dUb2nQ?XQl%1{py(Ua>^y_;o)cQKgBZiOBsK
z=rr^Jn;0-~G^aS+s*X{)Ey8p<LHFMAP}NAeQNhR7=C1GA#h2HH(S)vvKP~3#wg&m&
z_hFt4r(|rWvpFBb0A7Z3b627{*lI8OxZ+^p9bKq4Fvnw4{T%z=Cz~mT?DJ-*Tjs<r
z+wPHuH~kHlxcT#Eo5}LC3}@<gG8Gp}XSZP*d0G7ADPwcv>kqWsLX8+`v9=1~2S@2e
zQ?SauyYk9l5R@*3!uMdb9uJry1U{DL3&5^BP>R&a-n}g@tcQuA81I+$UxHk1#V&F-
zx<ZZB>`i$-=GCpsxIT6&73WjVYkobtzt!E=@>QOHw8!*CB@5XI^bxHFKAYIwS`y_u
zI9A}lN*1H$=b7ZGy;lUhB>O(uL|E9D;Wo@xNror7jdA=SHkUxtXA24mq%*aSE_zs+
zrOm_cM0-PN;Jm^=w6Tvp#*UK$*;8pY<tcCNnF~G6>l^gMG2-+SnuRn97wH>TOVwLc
zX5pPDEk{~b$=?N#71Fz4Z@+Lb?k@>@CQn@UR;r4r;5USZ#!#FNYosuV|KQe%&3gL#
znW|C&UosVZ;Jzf0r3Voew>-{q^!(9I(XBMrAvpQjbStFup6~y4UE+N5Y6R*0lV5sx
zWj|~YC%E5aGl<M43G5QzPAjGxxPBG~BgHgO9+_*_P@j?wCp8X?fEXaSN$L$wzR1tR
z5P>u|0rbc6^E_xzkvDVapE8y|3zFYHmb^{RYL}G+$j9RA|GqS;8FD-HrTl?pCY!R*
zBM4kfrXgaFu+{!P!wpp5jlmF<ZT@$&4SYlzB_hN0g)=oaE<at%6Rk3?KB^}88sOuQ
zjh#>N8R(@~WsQK9V!KthR;sbf@o5-c2d+;S8@^8{>3Lz&6~c#s(V<T6kU+&s>&n`X
zBie9cf<`wYkp)Zz((9Fe{8l06*`OYc6cstLHAw9W<ohecZVrnN6{E+VY-7f5k+^M9
zu1samxr;Hdtq?^?;;UFKlCP2uwb8er5vMJ^wH~U<ZLStyA#Ms|Y8OX=m&IuM;5wzT
zX65kRa7~myU!`kV!eU^AWu)~u+gUx6xA;1uQB|P7^cJPTtIE%)q{u+ZP~1*E_$>G?
zS-w6@@kq@0H9HAj<bM=A*5|!iiwQ<d?!nYzQF=Q;KILq6N1K(&M=5n-`LGVCURJ6-
zzns9#%MzsQea!)~9$+k}b-O0?QCP)#%&&izZP88p>M;|)9Dhm|7rBqn*0^0a_sMti
zN^KE73ggn0E-pIN1t_~9{HkGmzBXKa_h7bgBH-C1<q$6bs{^eDAp&*LmnH##<}Cv_
zd+bK#dVdf%E$qgw#iqsjJ$b;Yb?v!oQmBT;n*5ao-f+Jm*Hd@}-O%9da3wHHd>*9r
z6q9H<>KutOh=QeB8dHk96E^(Sa0ZclyrDZ`zAsqBJ>zJRMt|nh_7$0sKU09i$dDQ5
zE`;AlVMm_j+3NJ`LnUpizpgBYp-G#aKjr!fZNZ0FFR_cr;BKAQBSlp}di*c>o&q}>
zuOhNe#?hT!>Xc0)UZ|~{nhk=m2%E~>Tu82&?OI(=2@puiJRHT}pdu_T|8=hq`2u|<
z1?Vd}iG}eoKY<^1Sg?vwI?zMed`vZdo)oNZMsZfn{Qle6p^=sAr<<^>IQ4R*=DjzL
z_6MC>+KIj+P53DnB3W-LW;~wp@4y5lZl3OHl$p}h!X|EBw!z9~R1;sDqoz`>x8_Ou
zob2at^ell;Sqgg$pMepR=}kHu$u&q*P;*L;Zp2^AI=vPgLCyWh)DG`Z9Qn!UM~cwa
z8slFqyagAO8Z;0fbhsnTxQ?yDo9)Wn2M6Obw)Z!6eyVbw+bG&^y8E1V;<2MG$!N^G
zw!(Ij3<Ub_JMo|`sG@3oYAt_6syns=i15cDUAB;}SsTHeqKWpDoRTG<w72h{1^gWi
znAd%)Y&YEF9-ffT@{3AFJ{u!jG-@j*g8wP3@xiT|+o>eX{O{A{0~+RndacymS>qhY
zf{reuiK_AzZqL-b|BnCp;blGno8y=9dt|~3aSFC__v<(2*Kd63+;yQHST&ryAC!kn
z6%W#%vGOzS<AB?+Cbqtp+F3>+au@g-HkX56d0Bq4R5p1&WhIVVO@-?Sxce^7Te!P|
zMmH(eWn^7X1dA(F7~Pmu<|p=#GjLvv(!V$dubpzSsAa18@?DMuox)ZlJF9|}KZy9>
za($ob$d4@riqIqVpz2}4!Fx+H(E~%7p#@B8;n&DIq9Dm+SbmfU@B0ntP{ztNatvtm
zQ^m3l45czsJgIxKF7;yRlk4+GJmbDo4`<Zk@do#3eHh%<VGzRhsaXQ{I3`T??0E)2
zxXCC0e!Wl|w5+xrh}QU$F`t^}F4xC7sZ8hv0hB%F&QY(kUk2AVQ1$&&MqZZa9ZXoM
zGnDb<?<el^CZr|5TO<9y>R`9oKgD24*1%w6Ml_QcVKPu7^>it)T1xkNjVU9*lh-`k
z&g;w|4(cJDgP@IQFl@x@b(8YHNUzR_R~N`#*d&JSt6S9t9{6QPmZw#V!ri2IkET^Y
zK_pYtAJ#9`baVI_$CPTNKaZkk8EYp$?y9F5e*ld>H~w*;la*(*@&=3{C#$9IrV^H?
zYp(9MwbRT2O6SyTu1`noszM!9j~yCSdD>|kVU|b3i|lNDAGNd0Lge>yHEewiRKQ=J
zxJ9=t<?_(2xR`=eVHZ9}X`3jXbDVJ(p8Bq1=6}th=<j_>31GtRxnLs$X?)tmLj`9t
zREVygW5%X?k{6|l&!;dJC%)Dsk7V6ihWYFaZ;@g$teZH!h&{Lk&izD{aqW3?J=WuL
z;X;gKZLKMC;g|AI+nb<pyL^&;*|kLZm{X#N$?6|uithdkL~+iOc6sg~J7R5$OySg6
znL_HwP7PJUFh2~Q$%v-+7LyY3=ew2<8q}(7(JlJ765V1kX>|JqL@MihB{{q6*y(%$
z^81(?HV<cs(+vLSDZn5*o6lYCs$#9x)l2p2iRST3RFkvszD|~&x8x~Se%i)J(|=ZK
zc}4OP==B7C>IF%!BbILdzZ6cf)*fC4qi30GCoeyibPI$S$Kngl0qA)@YEZe<E-wwU
zft>1SI=Lp5u%+)lfBRmog|g@3i|Dr|eW%ThmG&+M{+akpN~AVtna_v~*CIh?F&?0k
zagv2QY@Hh$OB4N2eoXO0+a18lB=mXAXVRG3SPK7y_9A{vGr%)CNnp<^MS>vPK+|tW
z7isPp$a}{&hEpE?bQ!JVS@Ff<A#b}6C^APMQ{hW=<adU?R+}{W!^MRKMQ`aTQSk}K
zDT2-B94O|ODF3CZIr*^|H)JM_EfTJe!d{%h!pfmdoXgmWh-GO@<zq*H;*OBz-q})+
z<$G=P^RkS~8C`-n)y~32gbR6XM!$)J+L~K9b5OM)-=?RM|C%79!!qEUi8&rqrz`@W
zjpTPLp6WO5yr5N<NT-Z!{*C_HEv~fK0a;0VnI;AGS3jkjV_9Pz@-=TMFi(AliWrH?
zr!{youFv8}A09W|xO_f)Q<Y++|Ir3=g_Nc1zP5^iDn_12_*hbcwr44Y+h~JLqT`E{
z{PWfgDO>V<x<}pUy1m%Oy>{d<%Lh@mEX0u2-(}lbxuYYGpj)(9KF1c(0*>=JHWobA
zQ~-anJ@n1FF7vmKWL=N`BS{&`ZQg~rY*A>3==xx``5IP@f#FU3fnvzy<q<kXT=0p(
z@xyKA1t*<j9f-F+K~-dAlPE4`r89<>)wQehRQQ`$&^#Keaaa2v*{pwvi32O6ordja
zsvDhG)@S$x>4M}bL`!FNTfyD9LD_WU3+hGTN?q0f-ijtvk=h*en&RyVJV2R0Gh3r8
zWbb<JO3eERx3RC0JD2&=$j$zb8tl)OxW(8Mo**zofKAJ>C@i!3-R2*FTR^=ggJi<8
z>ae`1(-0NpMZy|KH-@J_nOBKI4t0B^pV^g5%*-G9y*Rf#!FQJp|M$$VLwF%bsAET_
znn($TpS5x<bom#}f&cgh9+UCX9Knh-N!6@in?&Dv8Dh>AUl^k5<yaO+as91%n9ZoW
zV>3}vZ-vNLy_e)|$z4!fRb)>i{A~_8)10M--x!K+Ty4wMrp0IKF3aT+Evd`U(aThH
z1<p|X23<xaE3OjfnQ)=tl|C{7vm}HbcMgehOA<NVlQB%0`CBOL<^nt3Sxkvm%^xjQ
zgfd%<k;Dl$-mj27UthHCNCJj1$jsC(lD&K7gF_Wjc%B$~5G?}(NOoeMA^<ocg5MO7
zH-;*DlbhjSW+dG<bCv3J8dtbDi#tK2go13R1IJ5{BIn)z91H3sJdnWAVTk%?wuPZ&
zIb*`uTN;$%twFHK&D0=K@EkWd%jetTC#^!4Qpa=!BHoJRr3n$@0+Y|5Z<W3}^grsR
zgww~jha2_k5|i`@bb@Fc&;fah;e}8k&G;zE*{8A&>aZ@Xg+z2985T54V9u6xn{ElT
z;;$IqsJBjchkhl>5FX4fcI?q3&c#+2iB0JfMDpRZ0t1K0=o0ZZzn!kQY(lpEY8!H5
za;7|Mxtx^hP#TTFy!TJ!+%8&enjMU_pE8TJpuG-D^J%vrRvJVa5tq#ECT^<Y7cHxI
z*_QjV(IuJR51BM}Q5au;R>4Rq^I?h4TyNucj}6bf-K;fhZ{q@n)ZBjuGw?P3W<38N
z47c24TJ@TcphdKs(a|1P=SPU9nlcpK=`s*uM^qrHrW90QglrzU&Fd8K+Y>LPSo$x=
z1wt%J!r-y+n#%RFj^;VG9>SI2n^~S<3dHzheaGHF0;qhMpR+t+NZCde7=dllDn*3W
zLMAapbEm5$dWDEs+Tc=u<Bxw1sn)Yr%br2Ju{0QQ;U$G=8JA|~pybY#ihj1UWK9D!
z<ocwBtZliaY-MA#Uu?;OJMO2T7`_$lDu!#DGfjQUE}W+x43%MAY)H(6<io<v7PUGH
zH(Hfedzp>Svm~YyAg#!mX4$bqHo>%rtn(YA2c2AMXIq3}_P<1VVPnGn)CyA=D(5DT
z4DeK{otV2AcwGGeMk5Iy=<qU2W9hMk*(zE@HFn7(X~s&@>v2p_IRFXw{PHx~$h|gT
zQMF32D}HQrCAOBagN$_sj*K4VM7AyjAkv~8Y#rebi-D>}ADftM3VPsuMg8M9cF()B
zvl8FL?JIp+|F4lw1I1;9jlx6G^6DCSg7;AfB3XmVwbRhLI2;aVry_CKk;j(8^WVz&
zFoDz-Ob-hf%xWYh3IZZw2amyQRs}lz?uf%zVPtbPy|ZSbGLE0Ysire2Hh7Q;lr+(f
zGGf2NL=7LdM@{hCgN?P>BzOB81bV+|xFkeC$4<sqYa;}vg*DhEw)A^itDM|6uUoRp
zDvP~fM#v1h{zkMIC9<d?#0e|%d+9eLVgp)BQ<bs@?VqFQ<FR%cj-EGwxO&~ur$m=V
zhC7s|zRp2Yt_TsvMNo^TrY(wIO~BRP{DangNyC*ak!wvkWXpR9oKsNy+Ym{Lj4P@d
z0zr|LJ|YH*Gl}~s{wh2|bWFC2nG!gO70U~~Pjrj$?hD?1v)L!UNd6-Ud(u;Yx2xUF
z&lmJ<s@r%7+XcKit*Ru0nlRJ)0-n};=cjp!sw=?XG*I!xceE3KGeX}Gf$J4-GrD_&
zDo}DCu{?&7ROoEqvtYO6b`%wMi~5N=@9!`dohzCF{S~p~>DuuKb-TEecc*c?!8AC!
zjQ#z>t;Xl%9xNhVeh20_=EX57&C?jMe5+j81>LgAp)*0<gO@Ls#Vgxi{E230vaxGS
zS%?$~WG)BYRXYuzw}=)8M{%n7S&@+(ooFZ9>-;chZjE-ceKd(~v?`mRBL$Z&!)((H
zbb)efN24rfXzYbz+Bgic$V>qOOM7iKp?PHLq*7_^f89v~XK(-0xi5e^H-U9v3Snij
zzEr|?n8>e^7io7!oi0gF(cqwtXi($ESt8n?-c|<1nFPycEG`sBi6KO&mUWC@(bNiD
zOso(604LF5Y@5s#Zlh-c2Prs35<h#Fx)7*?%cGSmkw?fJ*WDMtAZ^WfSn(>nN*_fA
zJ<)qwe+L7g#J%z73J*v~7pb2J-7NUb%U3f5LkBR-wYny@f7z^Yv*&*_T;ii|$t%3R
z#?<lQlinjZtJc|VyZ92Sdv7_4po$aF>kqbjq~9V`lAjF^k)9K-*-_(~sk6?}KtrTq
zx!q-sOPG%BphPpaaN5b%)PvH5S4zM>*Ka4Z7WIDaOT5kwV0w3-E;BWtYn4P2Q(RMv
z?lluC#3O>_VPebXlG<(UM>}#1ypV{#a)M!#bdxhuVFo9+q6r|IYN42@#s|X}7A*H!
z1q@yEr|?T*e!xCWJ!Z_sL8fpLRqh|HgCLd;TX*zL98sEwz$$pxB3E~N{zH`y<{APk
z^tXIN*B#w$uI^;WY@QN8r#xnI**?maK@jEZI(B;XIn#$Qli8%&B{X<b@8m-6^{~>p
z*}lg}4aGvQX$>);MOoigm7FdHqR&49wT$*&l;s_F3zSC5bg!5QQji)%?5r`L0gLt;
zn)*d<9)_L}ayEb0ofO7BE`voFVP#aFq4~q$bLC^eu^O}^soGpfN6FN<fr5KCD2a4o
z5{KGbvS&Bg-|-gnI)=m_30}dAXy^)cpGOtP#U4iCi-gy2q#lK10a?{C!<ovt*%&$~
z648$?s<YR7ZuKh>5D<DwwW?Wom@AB05IHKSl2lx&23n%JG%3M|V0KLMPR$Cj8^IbD
zs&9#i({9VscCDEV7e+CcHn;jee$epLTDjPojoWjLY#Z!iUBHk<punwzP$rI_l$Ud_
zJq{{_UAQ+WKfsmIn>$fQ3Dt!z2@Vw@{t`H+s0pn5hnqD7H8!D-cwW$9<A;89o<qCs
zF6a)+Olocll|wPt&ON9NZo+YACHuYo{A|^tx?tcVDW+3YnEh66vdvvl>KSpWgGUwk
zjzU=#th!d{GbBoXiEH~T)7ar<{1OZJTo)B5AKd~$rPO!)38pXa#DtcW%!9GVYO16Y
zs6xdBu&;8UC2g^Zkv%KsxNH7Ces2F1pPxMVxfl`I8@p8wR=q{}uRj%fuX8fM<JR<T
z3zIt_N^ome91k#xkIF%XOTyA_t*B$#B|&Be1)ifgd&MTq%~Z~WRstAKM=-bh*Jyy%
z95<jRf0dqpk+R<N%@t)1uGd^<V}7ZeoSM>s_;fr%)!Yx^_ZQbo_ImprBQ07RdT$<l
zWS~G_&d_yD9V%MzF7J1W7*e#9Pp)0$3p08Al`u=Yc?2khevf0-;|*?_bs1d`_|PIh
zOD%BzR+N!GE!Oz18R5=ics7mIV+#%=1W6|p-W?Wnzm_4B%p~-;y_1ssr1Hr?+K6tX
zN^z~RIjkb8l~-)CB^p!L*36$Mp)X)LO(KW+Ia4md&PF82xxdk?{DmoTh$|^fe5D}{
z6tzised9B~eUPSn1~zMKsPRtHNmdzgD+r<!?`m(uofBdo+(LtgBJM>uhBc&}yE5Kb
z6iiIgGiBV2z0QexIL@6S8l&y}+`LG)*qEsUV#00Q<=6e`ty!-~@SnBUx~-ZPpoEjZ
z9-v;XP5I<Ar2j|m+R#lRZY}4xLzjcT;AvcP7(GMS48rQ~k&gib{$q0nD!C48JA7{B
z0AZT&?GVY!;&&WY?-bv;m5ih7cm7?s_q}Ve)QOqhV3BGU$C~8xbPB+Hu4&%er<BeO
zqqk=Gi@Iu%V6Dhe&QOi_Gx`132efSZzj0yege~`8Gb!g@p1Kzi-f0E#n81{c=Mb_C
z-W^uP0sWT7P|y(Ob;l48@LlbA?$XkPH#M}@ztoRC@D(JN$E<^zWnY2!6kJt~W09IH
z;D{;77JvLv-G+{2q}dksbsw@CPeSt|7$sPoDO?+Z4TO;RHi_3th~Sj|<YjagOdXa$
zwxEJunYMk<H_kx0D0>%dT|Mz{ux*w12k!o8CTkOFCP5;*mIP70okiPqUVz%;Zs?LI
zC&kF$BeETd*s{(7yfUT5^x_4&6h~;4aHG%@MR)P-x@|=*To5ltRiP_ZGfb@<dLz_M
zb6VHYA`>yI^CV<74a1p_I_uRwH1e^g1s7X9C#xRpNrW!-trYj>wl|@4orc+6jHkM`
zImPuiYA!Eqx#Iejz*;DBM~!!YVW$ad{RTivH<}a0K)FSOA`F}nG%c5JIyx$i4i2(P
zrW}IX5e`!jKkzb^9oVz>{p3fHps~c58?C#9iojywrBppTcWDeF&G8f<vQw=6mV9Uj
zzybDN2pS`lp?QDKA6N?V25JaWPm<)*&$JrO%Zw)Oe3@+Xvtb@6@!Bt&0(eYl(<#`>
zV!4^bk(>%D=>g@_I(N_(O=`8(=n~OY@I|mN8p7T55gPKZpCRo!T{qygzjaO=i~efV
zEcRK(u0lA3whv?2UfHi;t@aA3<<Kx6pBGT>w7<#WE)&&6K~QVC>A?uLUnE(0{hLsW
zFRl+&!H+^y!2rd3^{L+X04+b>q;wZf4PuFD%<cf`2_ZsZN`FOo!@1Sxd|w(95g?5i
zk?@gc^OdJO(BdP$VU>b?Lb`c{6x|Byi_~lv<6*y&_dpvAkIW-IgdxtzC#n}AzoL^$
zhZbFnohp+rmW9jvqfdbSi>E?h)U}&Z%i1)Dpv#iqdrqva%aHwvw&HKqcf^IoTZ*oG
z$<qJ#0#vtko9rDv6aAoX6X409vA09v1*4#A5xrh^`!0v0vL`Y-jh4hWUsNZCXL#1e
zi0=wX7VA0$IY6i*;BK<HsZ_7gI3vVa%?~0K6!1fn&4Uc|sYRt`fxxZ}5Ml^XRGy_-
z2P6{-;4kQ_AOuRzB2chT5S4#`qRjZkz6i|{NFwb20oT+$9|UOS;q(Y)#Bdvh53VWp
zj~Gan{^^8Yl)<i&lKiK0d++r#+2NWIj*eS2Oq+F<OI|}#ZD~`{-j=XE`@|T=qb!1q
zqY$TQYuV<yj5S1|`J&E5>rgm6OF;L%wy@)U9i0MXe&BJG6cytJTFWr@>`qG=Ce9Hj
z3X1o*G{#w`boLe7wpYDPUt{?1Rl!{;8HFH2m^L@EO=Sw6LE9oNkyiD3GsVps3bN%s
z`We*7fqq5Q-tCEPbd+vnoB;w{+b(x6EPDpyc1*di-l{_p9+pv%CWbuKGrt{?D4;?R
znGu3aB`Yfvm-oT4rfM`*IRpYp6aLV$_4;eqV9d?)%?AzD!z|VeVEjxu9}<`<U4V}I
zEi;a`sqTG&`L=JWTs{|Nb-0Eg0I~Mm2%%cNIt}F~Gh6hWhiuM*SI7H6yXS10arx5z
zJ=seBzUNo<0zuhtq&k4cNpDf|lwh?;^p?s%i(hCZz@$UC<L@lYB5c)nF-);6U{}LI
zx-UR%-+;4GBQUxM)<3iV)Hp&nc(s8k3(xMCwu2lKX-h5hef8X&U~q`6ZejHK{^$Nn
zX6jAVhsTSNb+@ICz6-eONTf_zK&0d<U}$>*sm~>_51l94=b+y!X6mrtBW6w1!uw;p
zszfUZ=q6YAIO*g|)SzUNl>oOXk-dD+ee1jo#v&eWkW^4qG)jPiP3Tk*W2#}11FrB-
zCN>}J{cGn!u>(j;7$shvI4A#Wv~q@ns<&j{kCcM+7;Xba9sf)Zrb82^BH<lrJ8i^!
z*~x0uJJWari8~xlRp+8vs$C8c<@<H+?`}u4>_1}=34r(204B?W(8ga(oT)EG-f@nc
zT{)?fMxF@z`dj%T0IT;+h84MzP-K@=QYw@u4-{^ThJiXhfREyV{FReMaul0>-!+@<
zf-hEpQNx+)cIVYO(t?jOnhBJA^E&Wa8CJVyoRwD=8XY-?nKonSK&s$mF(uhw8NzfN
z(ITYFc+Qqt(}!+gS;0F>z%(U17VwWVsFX!<mf?Kc=q3%=b6~Me)q<z+*gEG+ZtLWA
z^w!q0Iv8#p=il}oj=ox4J&PZLGu5_eb@3P=#Hc2RIEXbE6NsrC26oa=xv#B?2F<~X
zsy~puAiqT^e-Rvz^zVfyb9sNAhidHKd;x^V(vOPVP#UJV%!#Z&f@;<HVZ;s5iqCQK
z(Bvo;bnqOv$EBhgw7BHQr?l%8&ZK=xZ#L>pf7=<nWT`n^e5*KbY&h87m&Lx@XPD{{
zw`=`d8c3SpvW=?VTMqgf9l}1x<Fi_Y`MeGwPhUi74QAHl>=&GcrhiVb@_CfgZr$K4
zjaUYVAQMai$mgY^`!c`_<z=@FOr>Iq3o1)akwvv45eOhz{h+MedqWx^chpuXpW8^h
zyZBhWH`!Tg{lLkcJ>SF`#FB^cbaL}L?3IHD^yMT|X?#`zf-(a6ArKjSMQ{4b;+5Ch
zc?QyQN2*BYp*7BGZWv_}tt=UB(tj`vCiKr~ymOdBg7;)q@I!|Wy6{NWNyM@6B^xcF
zBry)pszcDlRVQ=R$?6dB;lbvi07jLp;UJ!x-n68lvaN}e7U#O~;>l_CI7%=m#|XPG
zc4*_Bh_JYf>+xyCNJ_#5%Ghx??3FR?y<_xmpQc<&fVSmbjq`v?>h*(;n}=th3_ZST
zr?TJ@W*^Rl(u(SY>9a9}*L`9}XaZkU*d8XPoP~*DD7h%Ey~}CqsEm##qfqphhyF^Q
zPJy$w#32&8RC_BsNh2o6V7cq&CJoMFJDgz?i{1gl@>h<@y(*8&A)cr9Pz^^w>zCYd
zSS_JemeYr9({D?>i$9;UPG095#QfnWD>Y~g6x}7U<Ux@rioEH3>c?J^R`4va@yX~V
zf3(x@0ie_=7g&X`wV~Q&%BO6AVsSd|(eD6gWSJ{eJCuau#-iPhIXe7Y3}{Uv;q=JV
z*iMzxN;~W=Hc9##mCS|@V~vt#hM&RatQm+G7a60Hc{6dG`OLTLsS!#0o@8Ac(9xCx
z<*sq<T}2X`ezDoST2^+q>*^AZW8Zi1+fMJ9KX|{%MdXQ0!&hMndC3<6_LuQ`E@0sl
z2s<O;^#f#RW0PnZ@GKs=MmY!l%1ZSL$eT$0&o{U!vMtqq;CZ!MQD=~xoU`y`YRO`r
z|J0tUA;a(6AR4AHj7>Q&m51PQqsP@lO#|<cF_uoRcW5<PDs97PgY+|3w=LC~r$HCN
z_5{PNW$J-R(&NEQ2K-hoySP@QFfUEgZ!tkZvNdT{5EBlTqd)v*IE|r>w=GrE(f|++
z5#VW-Vg&eT0<*Zxt}M9KMW|tL0ID3$0j60jX-%eGr=@^DGCo<G68<5}N-l;%e1IF~
z`1Zwv*8!cSv#mJN#(?_lxESMR19+7Pwta7NN-Qf&tr&E9qL=lA1bYmLn#ir>U1$>9
zjw253p{K^2D0kS_pCQ^HatftoTJZrhh>UTA*dwZV<OiQ=ZhI0R=_75pQf9!?qeaJi
zFR-Ri-D&eob8wigtkz+RvC5Fv)TjV0xLb(f5=&LDr1<w2Kksw<CX_=Z-}CmZr9Tx=
z!CS-j|6phJMR-Y%L`WW}{QGK>K~0R`&tZ%!XG^=os>pg-<Bo3dvPhe6;g~umnH%(u
zCTJa70ipw?_XX=7xt{@R7ClkLDC_>vcrxBdsEXzoy-RnS=ZSi)uf7mHm2}J56If8d
z>diyNO<Tn1CRPe1Ck<zlY_dPPYr-;JmzscBL%n9Hu!)+XD>tf$RsO6>X@Ig}2AtMd
zSvkr+^OfnA%&jjCP(=9^v~?Qr`Y1z4;Fk{H<Q)ti!Udir6pElelXq;KuxB<$WsCO9
zybbS4)ga3x1KS{`ekeLD07^p1`#qw?!&p0kNbld?dEq>2BCatm>)o^v6qD+saCJMv
z$RA;i!fba=cVeAH9zgHqIixZpACFgZc%GaEDT21nZ`U?lR0;C%HUEPp=i8GhT9H5z
z_~Cs0qq=$1AC;{JF=iA_iZp1Kbql42gd^`jt!~`7@=-DeQ4`e6Z;Xozgb}3SF|Wy*
zmwa`+vR;HbvztnxBm81%+kPgLBmxm}9K>>`lPrHTOpJzxinCInltibS7~Ae=mkL&8
z7g`>OTI^+54)e-yEdxeB@F6x|W4y<EUjuZNl0U+|1GjPTcBW{9BeFc3@uA4Dl9iYf
z=j|Di&d=A$yGy-ZIYC>iVidI>a){A_yA`WSfag4)we!Djf9&lT2PKF!mbqx%#jm{%
zC!MBc7z(IODdtwCX(q~)NEyti18VuNan_7J{vdjz=6@%>u<}N&gU3c{7b9^6B3a8F
zc-2p%b`Pi;4Y@hxl`6UVg)6)##lvdB(dluAv2+@r2}apL2p~1!UxxoUb?p6^bY{Q{
zi;UEqgv0Ql@`oaKWp!;<{WWkj`#5(PDB_Lgo{PlxM9LaZ;g>Y-DYw`_Xyf2c?PUV`
zIw9cni+G5vl=W?vrdP{;aa8Tc?Ci|6M7w`f;GOUM$1f`^yXfj4FGs(6$^vE$WRd0(
zE8P$T#+ysoz{}|}?@S9X?D|*E>x69PHj$!XH%&dD0e)A7|D2|EZf9^7frumcDdv5&
zE(1w=z*9mA)==slV5ftm^nWycV{~NQ^L1?7wvCBx+qP}no+J}aG_h@WoJ=ORZ98v2
zzjysV+%Mg$*Sh!iIdy7R?Y*mDA*R^P)!0-MnJ7OaEGlVofE;kRGh9ss<YN6LzXuj*
z43p#;=eSL>=xtXGL~KN(x`y~!hcS{Yygu1rz*tr<yDkng&hlJxO+bYCuD?5;{`vkb
zo9wn`9?|SvPmU!KOCcAHG>`Bkxz%qBGic5wM1({+4?kbwT{Rbt=3%F?D&g=AjSQ*k
z5DO!-aVhjhHb=enQBFz_&c?@GO>MZ4&*2i0wEeB=`bsLd;Cw?}3TRrTeGP-9U6>GM
zmEV}AnVv_QNKP|%yZ<Hk%k1@+Lyz-6%Ergas#4%~h(sp3pGKx;@&3R=r=r%IbTxk~
zQIyY1{u{$9;Oq^2=Gya+ArAp}Z%rh^><lrf#L1O|Zi4(Dzon8GckI5)8Q`d8T?V1)
z1N2W;xMlO@F*V#{(@Gf(!>vnnuAIg6d@>9x)almxtQHEwNZo_EiWQ$;vq!Id{IcH(
zDu3|f6J5vrD3)B?rM*=M@zcKY`)K~Uto4PZCwEK_R7%ufB*t!_-uWqFJE$VsMLSFL
z7_~OD!&0BV*ot5{s`5K$6NdU8imVc}!{#EyOuE)!(Ce6Mvv%5(9L!dzg4zF4m~1hX
zm4YkPuM~piOVPiG{&jASl*?ORdPaHz-Z{)5xI&p>)|AZDFSIFI%oI&u;KDR1wNFqE
z#>NKAp;Pte8Y^yKvw;t_@>N=4%CO`|pLy>XoQ;rd-fe^6<5ZFdfDoPS`9f*@a{mxa
zv_60VX9Ch%Wo`u|u@Q>40o;+w+z^bRLlGZvBO;*>O==RlH<3CP=Jx|K&F?*`xh+UK
z2}|7R2mi3j+QC=@Brl8RGWC<vIJuJiSQzs4^40(<b!^X5Q;@VDR3tEViT}7pwowW?
zzTO%zd0i5FKTM$>J&d8Iew^FwNG7#oB1_E9k%h${+3VnoX9L;H(<evSzhmG`7Q-kV
zX(>CCyBk0bl4oA?=iLYs(GiZv2Z01Jqu5@o4$t~Shh=-5^1iiMA+wP?GLwBiv5aXk
z`l~8Ex(J<vT)6qSv#51tF0D4Bz2y>Fuq=Vl9^!JeawFWnjJz^(UNu;GjDBh?q6bw1
zs6OB*V%!P+nQA+#I<*$%uO6kU?ei_%Hn-x(n(OWn(qEug%2J9LAbC+&Y6EYhLypbU
zTrn~~cL@-gIM(Jxe6c|fKD4Itm+x5?$oPADLbloNm;O^mxk>-D)%Kh?vHzYpk%r#n
z>i$+z_bj6Y6{jlY?m!`A!p<oX+lGz$r+{>SX~BDKMI^-N&N+H~E%mF8?`m1LwCKN<
zvi#4UDP#x9<Z_YQF~nrQB(295;(`cZV@+$sj8QL(ow;6r1O89YO=IBI)esxUCvY?=
zj+*O><{&Y-h=H^!tkVZ#%r&~FT)X|Sx<AT0h6mNCFiJu?0_!Lx8S+NUlIDcLhrr_e
zwU3^v(S7UPd1NaaLD`g;Kir(rS=?})@V-$1$*r4h^LpXl0fhtVV-c*<da5ch7mIv5
z17o3kQ7SAG`p6V#baQG~tNqPhPxCe<Bx2PVtYxQk4Pkz>^vYhzd*bhn@A|^KIC?uR
zL^JFM5e<u;8sE(TsnYKqopwqZP%x1r=PF4SQORnnP|iYO@6!Y<dNO6kmk{fNc{$OS
zE6hV49;`VLytD9!|B|TEqJS_UhmWO1$_h*QwYQZ5UG2UzsG6xODpC4d47vok>U^Oh
ze~@slRP-!sVdz~E;+zGmeb=XTBCVcN_~H~kA|Ti}x%Bjgpq>KZo)co?3ArEOvEO<c
zQ;gaDLZ{=w0rWQrgTAaG!)mIKW#LOip(h<LEAGPJ%p(!8V9|e!<7p50Oy2b$<><8^
zDXEbcwqzEd?YZqKIpZ+VU0-R{8lL;9eq8Or3H>fpBsCIVf3hdz(vLO3j0lE?=Mwkd
z+-bu0CUQD*4I0qv&`&AZX^<xOYo;8gWdEdb4exZ&uU@POU;N%gC(4Q7(JqfyL{j-0
zY7)gK!L#EJO7Q40zNhSbth6fuw)UP0vm{M!*BS|UTMMB9XK%y3GPwQ^!XhV;&0fwc
zL*ze#lBAV_T$piA>976}tuZ`$N*f+$h2A_Ox{qz|m=(WmrpV+mU<kP_M!GWPx8#^_
zFYRbPUA+1hiR$i+B8=QGmdB@bd1F8J@9w{8aR*9NX2kNhA1jkQ85;A2m(EG1qZ#sh
zCYe&KZqAG={v|{h5zxdz(L&YAalozYBU!)BO}^$fa`y)daqS*tH@flDtf1S~4sH6i
zR|rdsu!wJl?gIth8_5+i9Ab>)`3FwRkj13?U&(gAuc=0i!rm=q*j@XO_MB3yN?WUd
zI0ALitTlIY#(S+^fi@MDe@gQ;myX3DjoDbd3MVg@UoEowpi*Di<3Nz*+KjyZ^SSvO
zsky!pf+LqMf3^h1yEr<vV64_fP9JbcbsWuuK>OU~{T<mn3-wpi#@0><yYFX!+S|iD
zvluSP$TTLHCKAmNAP}!yr6MDl_4F*UW!zDSJOrt`gbt5o;4^a5f&C}wYKxUT-C``Y
zS-es~dWsn5rhvP)r+}~U8x$Wz&7VGSNy)Q9X`BIkGEuD$0-X8$kl!=QRj&<%!sqxn
zDKpEph;jwAq2PJf>xBLf$rr>`fPRlUA1PLEXCc^Lrr5pgGiN}gE85Q;lhss1J9`=G
z#QgN@3!*e2!RkNRhVS2_$wKXj6|&eMicIn<KV=IULR(T;@W*ZW&z(E8^WWxi*ppP)
z{MbU4l-RiIN51iwg<A&eGW1|;h%~?3As4eYCrsRS&p91k<A=El%UD61wS}o6n|m1v
zNNM~=9`##Xw6=e!lk|N@SNljqGzzD1BD0M<nkz!=*q_2P;1&l-OCb@ZiJ>>$z4Xew
zK3$1LylGZng4%~`51i9-@kn0yLi6S1ZGDlp`2B8M!Ffc)Iz~!#ze?MC*(%!X9YB3u
zYI{E2f2aEF@(2?(C~nu?qM4>}@l%Hy<q`){RO0D-BZl@6lN1XUdWNJ*ot(8jzor?1
zq8|6<EtR%{ZDPfAkx|h+{w?o0fxTUbviKaJUx8Bpq0{-wAciz%_az_o;n9|ED0k`r
zgv#JC;w{=A3z_}Mc1)Idm^d?s`J~{!K-wKgF2flcVFL5lnnuFTN7ls68v#N;0w+O?
zskdahfCanJV~G1=QE6SY+L}sDmJWOHRwyOakLf7|h@lxc_T9@cYdIe37V1RIGk<TF
zzEigWKAo`C!wGnncs9ITL@g?dU8k0>+p%tB$J+LCwA8HbOnLut*TdVgR#SS1=47*T
zo=mInh=LD&&kez{B*FkB;}P*XiGF~vY^*E<6O<<DAhZ^}X%)ZVENoE<e4X491PR$3
zfupb*ycQm?Fe%%zH(XT*f&q^Cj<g}DhL&5B5FMhyoWemKNy%BKd{wB30b(6%?2?DX
z<B2gKMMRtl%nAAWoh?cAmE;UF8K@i!of(4c`Z-!GVz+k3(cd;d(|)x3sR!tT4>ek>
zbNc?ZtSnvzb2$o!aU(S`tVl;f#YBQT7VTGz*B#$TS;x4Ca%MjqGUGtJ;2-FZ?kgn9
ztLyR@c^wcS*!Zb0HiMq1?Lz8-f{*WcY&rzW2^DLJw|@5N<UB1CKY3y2Fwi3FVvL~$
zfc(R1bntbwonX(AwJ>;THGCbakU8<wK?@tA)-CA)(Q~OLg7v?p6G+STLm-gZJ<#(C
zTkm>A(x(2O<@HYVCi0q^eSI#;uRSgOVy{9m6k`7qnN6>oEMV=*mm!~izbw_ypFxyD
zIhY`Z?B54(gt|PCf_(B2D#)vuxw$RCu>JPbtC%JEoox8c-DX{?yJ+AC;3vxFW;b*R
zzM`~eGxcOj-wy9jLnBzKb85cPKNMZJn{Lg0*<v<-zuf=fb_O}VD=f+gBQyaZ6|ba!
zV#%k});S_jWN^F82&WQ#C2&MfbqMz8H<dKt9GC%|K#$b3tRxxCq{cI^Frq5Wjh9?=
zw5HeJf@Temq3`K?Al0=Kvd*WvbQBxl`gP)jQ>bwh8T{f)N0WH#nQ{lmzYT%SS$)q!
zcmuk=jVq!&1NgLmC^<vrbeOxxlQt!HR4kOq)`WlU0p~rQU*2+-6T_Mu;p0@rIc#Pp
zLHE9=Uv&qmYT+@91-NmGAy`Uv6J>U3dnv<*>`7kXIcT|q2uJVk72b1dQX*VzC|FYr
zE>O3>E$KR(Zu8M)$ZGh(E!Kj|ih-04B#IuhihW-AaxVW%2FIokP<(>}xnR`qjp(Wb
z;ZK&MU$Zx#mELXZ?J*(>^w%fe=B{{`virfs%WRm^N8<bSs6gZf*alq#?I~uDV*`Ht
z4zTig>1W*(@K=W>5?E2uoVwJHuLAD<Rzr^#eRIe(navR01*CConQ>H#RUF)gX%N#}
z8gi_wfEgNdFV^0?LH&4=LfBImQDFIe2^r8NF_Ln&uT%ZIYfU+J7+__WzqiF>Zk+K>
zw7)~cN9gE6?V@OEQ=`UTxr)dnLJrsdtbK{#QfC>|)tAb{G&|}MnxK$rF=_-P!fiIz
zq<O5HT`h{{c|!X2FLifVCro9pS+Q1$1=c+v;>a+};IlyX+_!c3@f~A5Z<1^suk>AC
z;4W?sNqKCCnEmkeR!k()iw>`g<XM)9HF*R(1<JNu?M0}|lqP_vWs_Ss6Y#7sKIA7k
za(xNvCgQa*#rOS&b?VPPO0!7X{21eLHQ^b?C4Uk4JO|;HxBuDfeMdLVekDM2KoH5|
ze4^8HwMG7R=c@;_%wM5_pzR+<<LUvk8f!72lIZuJCnx9%ov@-AM#-}23b#1y4G*N_
zmf45NXX%x^P}_k#WTjX(ZINQX9DbH9@XPto>py0TLe;1dx2WOQ$rD`NNK1(hzBOhE
zVfpDHRH^ybK!?lvg^!)pN5ZKXTiU9T#KGTl+MHF{$X|jgE_gIWdYp%>UE!}+qnhP_
zX9KiDu(!!@MD~o5&)<mKyN`R<d1w9Gz<q#F=A~EsDNvYMOyUVe;#t!|$bzsDst0!k
zlgzaasyF8<!a;BXRFES*HTDT$Ic*LQ*T&DZ5E1A6S5YJWZkqK7{sTfv&QB^?4pQF>
zrj1a4!4u0%C-~gnP1fJ-%$@D$g)-a_rLR(UqVr)$l2i5r31PA}>gjyQPwMb5fZF`}
zM&<RYm-h8)tOV&Y=cmAs)c=4AUze1{^3Xdbll23j79Mg0BXy>I>m~Br;A=hOoAB0x
zV10zu?ntru08TAjI%O}bNBKv%MrA00YkYo(Xa^EGYG69rZ5Fj2wqiQJB4UKaK2_MJ
z?Fs};g~M3tgI!KsTC|3GE^f&(CP)$|4w}>$W!$qgrG2VF42Rj!(3LHmgY~ZA?VWgS
zxhlc$G)F2pNoxbb#THGyt@p0$f82eqHF+MUS6Y3@D3x<+<t{xDrpI<2B;f>Au?M9l
zs+W=bzL&&IiE#(>S6az}n(r6+xIcj>E-=ps7VP$t_d+IK0!WoTbiJ1y#002ydL5Ks
z5&a-T1~SJ!lL!`^0{o0b%;7y6+mDl#H9icQx7k@rh+or`Y)e%aZ&#bd%V_-zb=FQ^
zEWvhRiNc~@Ca9JQml;Z14i}Mm5Js0hkB>i^gqE4N+|;QRKS<(S;&F##VX)`T5Sdha
zNeo;#d_4SwXk1Y<FXsDytA5uQ^tm5!qI&7*aDYI1!3H3{$iGY%SOP>Zp=veo!Xo$o
zawSn0vae?Y6cFD`G9D0#N=i1%_QmJh?j5|T-NM*X&GxD0)8w@SS!Ek>j0Wa-J36}7
z|8-^JB6F{2vz$RUG?v#ocq_2!56;OgC$<*Pnh9C|9jX;iDNf(87#MwOA!*N3^Nq}(
z&wExly%YLkvs~9L?Cy(t2!e=i10O4Xfa}nw<w7`QnRi8pP^>NMXB@L&oHuCAyXXGC
zzb?_OIm>kHz^@!A?6Md!yWc>xuoZ`()FPg`RB!k3lYezfF4}RY`uTbE6`=|?lB}Lg
z#@7HM39TQ8$T4Wspa9iOx}LHJKD}u<P7x3`<a+8?x8OD#&=SA6EPBaIjjJ$~P@zX7
zPB<YO{^r0%%%$XPma-<n`m-Dou)0)cj}wBSdb0-n>)R~pq5*O#WE)@&E*cFaTxFd%
zoFdW5k1*J@sA5eD=o2~+=UK4llpH*@3-6(iP85kT_!IU!f$+6XT4)LZCEEObnf8JT
zG4^JL-IpGlekbkuZZlO6^UwMft*wkyi)d8#`$K2VHJp0IM0Q%kyB+hJO11?KuKxcb
z-WvfKJ$t`u%b|;)JvIhepyJ-s8v`!4o+wZ>3FBOFVlJAj!svgB0WA}`rCU@})_a%4
zBvKSChNuS3u5<~mcIX;r+oJxgd}M)H%eK}qKZSFw*WUQjX8s(@J~mp?gE~5N>hsWl
z>6k@+35S8aK+Nxkaq<@}(#!ziFtzK~>8E<r96fWs3|7c?%To8)MTxg-a5}X6$(n<#
z&>#@2J)=g^i|kRKlb6*u$3Qt;VxQz)8*Q1!YTUjs=00+_)7dO`!I$#0o&8s{m=NXX
zRLt-1G`0TD_yK^5u5g_&Q=HpM77lbm%A0zl+|P@ni|AICrM+v0hLMCUgMCNSHYrmz
zL;t@}B9ZDx7j#0eZJ7`EUP=?2Nlf&@Nd~6rJR**~P(bp`V8(C=;40r1&w1eS{E8jS
zI<e0*c%O%<oYDC`U?)lFzoWIy&?BJ=Bbq%lX9<JXQ%nL(0?t@yK`=>xP1t?WY|PA`
zfgPKv1~mk4H`s!%2(+;MPRcg-b4J#%AnZ3}f6~r|X}3{Flhn5R*80PSn;|3el^_Nh
z%0_KMxp+Mq;E)H*$EjM(gI!Cos^N&N#7B&U7iQvD+Mq{peph6Se#-j-=;9LmNCw$f
z^2T(nX~+x77OXj{rwBrZl@B*<+3fO<y<1UXff^~AtuY9s@XQ4gxmIoR^?}xsqP987
ztSYQVe%3k+s=pB9kf5hii#<I_XS~PVy8pYKpv_ge@aS}BB(<BYB~ipb=9I&GI&4s)
z1ckZS6tf#0ioKBnhD#bQN)P?4${@c)w!{993n0QoD>DIGWRznt1U{6`Ao0B4pS<;s
zjC`7Ly-fz>x(Ysx_ua4w7^VUWjA&xeOl3D8ukW!$k@(eey2)F6yI=SmD)s+9CH(6|
zN)#$yzs~v(m|lpIxtfQ4jfx3*w{e6?#n*h)QSqc2Yl|0o6Yil+NHr8{j56bqn_=B_
z`0L|pCD@ginFE_D8IYL0P%dF79cph$3?%%NuP*fljrn}X#CZi7>2#?q8bs|7XUc{s
zTz?N^<PntekR-(cgJjK0VW4St!-;V%3QI_%@&-%h_v!7a4gbEV3No=^b5g0P+HNK;
zkIZkG;8jihx-^@ko-3M_=e0UM8EBd8`Fa+T3EPs+Lpq3k7|?_Eg=s`~LryWml_+L5
zn=w9SJ<3DzCxf$yLSK%+h6!A-Xt1e0G7C}1Mmx8byYyxRjy2v!w?AgzZj}O-Vt%4B
z&r-OfL0e3-Sqsq5VX%Yodc7m`KiXZ9xPkJHDPN>ehh_OqEO5uVka3PoYSr^$Iqt$3
zB57~?YqvUf=>}frx;+3HdQAI|P3e#FtOf^y$D*sXbdW7rXSh~UZUZYCg0(iaZ#dMW
zG3aA!lwMBgkN4WEt{T}IOyp^0^&E3t%ihfmzFd`6RL%lTc!1S(%G7o7!Q_N#gXY?~
z8b7`jl!4Ev7eN%31+<boLh%cJswq*tJD1oPJUG87o<6KmOHbk)fvUdypZAZ;GXher
z`W^`z?+MpDDy|s`q9~!JOUMxkZ1V!7v3uH=r7KhM?Q%bxR(b8g;E1?nj%1${eo-3Z
zrqD;{M>uPP!K8bwTYFqp*?nKQz4i4xdAQDW)GfXH61yRX0JL?hsU29l8IWnm<!1z%
z`;Q8^rVN?q$G?9pxq}}Uef=IgI1Ty>%wW#*i|vqPaS>?1gS>J{`O~9+;!YJ>lK-SQ
z7`Bl{k#`-8q_~VYXM;N$>H}k2cd<~R%9jK1<&E7VAK{jAebzHA4_w2>6b4dw!riB|
zUiXEaP+m&zrI8{gCz?VB2x~*Uide;Ct|K`_1ioBvY3)9Pt066;3(_-??RriGY>u^`
zWF*mk<S`}R(dXvq|2eO67kf$WBF<S04LV9xI3D=J-|%lUY3keqXhF8YE<}wDNn}gY
zHNX_j6}#eF&$eMx+s#X&=1&B;<upi82~x%j?ocHcXIcvTwd*(tb^x$kegF@8PyzPp
z?uZTVe|(Nf2~j==?3<Xccm9%+!MzIH8>~~t(_g*sQ`2I~v=E_%qwyfm*BOH)8^b6Q
zegUQMSm_{=gXw1*q%rD!B<gq&(2^}x%`o~-`j&C*ItQh55tG3x!%#-Ztg<KiNZQZi
zNR~Zd^%Vy(z~#so!eAmdtG!TRQ&8@siA&Ky_u?jxOEHrY+vH6Iw-{O3XeuMQJ1T-y
zMurt(tTr3ICN&`+NAWtGHEUux4b>1*rAlF(^dObNY!+M%I1pF)=oRTE?Z^uthrFwo
zbUSxb+Qsoya{As=cssBAMy$}Ja~%hs!OWYkZBY#MKO!HcVx&qoT+q;?&>oN^$t-nt
zoi~wQM<=g(h-5?0$iYrs8k#%q;$K7BZyWvQn?l~B9=4nWDfC(miobVT`f88!@9AEL
zgub$7@?K#_7FH*_5gn+5YZ2B1M$UU<W<~ZI0(}sDpd90(+l9b?lQ4bnWWFs23Dp?k
z=Bfp`zdJ=5$Rmxhi(8cxuxf%*cN<WnCF`I$CXWb8H84492r7{wq1wdzha~>7``e*Y
zJ!$L#B{Us*C>Zq*_V;hbT^zyRIRXCyU#O>;%Z*N0MzwdrOE=Ud_oluTA{XRy1oLsQ
zsXk)7CKA(DJOS3QA;T@<i3!U`W~<WnFz(q1pVw^uKL)Z}FS6V(x}A$i!Bgb?X2rQK
za*aJ&_4F?cYIC}HW%o-V$ISw6t(eERKR!#g9{S^%zHcb~@kP_@f>jJ?ke?DgO4}U`
z$NC+>N_?oNMx4X;24uhxgN0y1J4U7;$F@J_Y}_0V0gd}{+~Xa`-LjR7mHA#@d<W#j
zpX{$^1_4CNqa+6q$+7*vY>!>!e@^WlYN9lmi_e*!`@%gtB5z1VFOpNvHeqZY#x*i2
zlk)sEllJo8mHg~^4iGka|7Da3q?`VyUFdn7ar$YC7U@mwnm3f6yDF7k9D$Dkhb#S5
zIct-nPBx`9HtMO0zG*B7AcD_o*N8EeR5h<0|4{>fPA|N&wyWKjEU>{rDNnY_P_epX
zi0`6N7TFn!J=t2#YGM}y5Om!M=zNViKzPQUMTb6t)~X&!E;Va;kKKD&F}Q}v=2C47
zxCH&IJMPh_TCD6oYN<=x_S+_&NMzoShTBXA6#8a`Rak>Zhe>#YI;lHf?-+`r!I*y0
ztS?^?y6rxRrLZrvX37o*U<tj?GkQ%*eI2L)1N)mp4RFcM@Yek#T;43Xw+bZK<J5^5
zYHKhi-!E0)unR#9qo(4F;QB+<C3UE6N?_qUq<13DD)oFVP#Wa(o&NQ3%*^VGf|j0M
zed9NGh9lMZGB|;=pZmj--B1UdHv^u8JOr8r%44W9-mcl5A;f6y&q~joM+PtW-=ESS
zQ%K5^{tTrqQ0|!zz7|(0DC)hMgPCB<w>Sc{+)Elda8v0}lMaxnPMVbDZ&vvF0KHaF
z$Rdn{gKP8g!ky@i7VqO!H2y2GCnuvOj?wws7=v5hYk6mb-&m)f7pCMP4j*eKB0xNs
zGr3L9m!ZX55cdW7?k?z8`&txuR7>u9Og_2dquLD{x<{+sBf~@m?HD@_oc`gWrN6f&
zN>$`7S$t{T!IV=adBC;n%0Ln%fx?k82Mq6NLLbFKi{CH!PU%1-Sr;&Ue$e=ANK5>c
zrgS<T<j1|YO@m8L<ANdX7)!W}?pAouuwerCA_=UB8&^POTg~hGr#+Y6KMQ={BpU|p
z*K`7lWp79KTfh4}XLwaBG!GSydknshCWHQ%J#sRlV_;AzHkJRjrF7IGV^Hk<C8=JH
zl{*a|okWjXZL6b$K1GbF?bv85!DQiTMCysoWO8i<f1bL3Dc=KMGM|o3ZhBNkmC2cY
z()x3(pzH6>kC8V=YC6)1E)tyWU}9LH)pTU<8X~LbLpF85ihpvYgF|Q0X+S7pym>v`
ztT@_jNd4@-ncLm+_kGoWH(3UxU!x=ae}<Uts?WaGL9Y{#!DlZsQk?aJ%tZ2|z7>6$
z?uxcSRR#-v^785B6D+f?D<f|DZ>Cd+p5WbIrBjRR9#O;lU&}H;NVxp{hx?=;aF6*Q
zKOZ1{8XwCTO;q7?kf*)-`tV!~2MyV#FiZQ}Rb|VwTrReC=~2Fl5&6O><@}0|PRRa~
zA)uAod$JJ0|3(SsUKIf@h#Chpnk1gVn9&vL_Fq44aL}P$#=Byk91NNfwFzQi_At}$
zeV-9V?>4r}#_9HJ6bo<vDbnH|w*5cnRxxG=cpOpU56$kTnz9PtOzbDd7+k)iDB9u%
zFxoqc&1ocZqn_1ruqJV5gkz{4{8b>Prr!4aUo3_Sv(xf;J%n{5d^L9{Y54R83#Ae%
z`uQ@sNnyyNE%)ajPq9y<LXZCxHeCQ&NCdu-o-N)ejg!%4kNT|A!eQ`~QDl?i1l{Jc
zXierW-rg@@C0a2Y?N!whrL5MO7bVRg2LQm41pwPAm42&FVwU$<<3H8EYQ==!R$$22
z*Y_jns_Wun<9+1%!DQQ3Se5`itB5&L4Bk%@_`*|s2<_4{QRa{w?D9+EdB5*nzRvs6
z^@la30L?aF@?+S1>KZU@XULpks{yoM>3(H&%0&LS1w1VA5zlpG6nGnOE*#44AIF~r
zJO73Vukd!DhN%_z=Es2<hf5Izr=US6L6&#a=d~;4+)*~iI)_?5N&um!X{GY-E@Nu4
z<1Ke&RRP_%j!KB8O+Tdq6Lz}V;kvNCa`v5Fw55h@$4bP8i(z?BUC-7ZRY#))`i-GE
zdV*xTW5&kN(pM_jrxwn<dFQF))8ZBg&;ui2&RdAkm)d6@a3L<rYS1rMek}!k)w%u!
zDg-Arw1DP9k2*bHk?RlnPW&bAPU0R3d+#WEKQ6}cl~1Nh<NT)j7O5yW5GOMod!#(K
zymK5o&hS1zzrR2QzAv$XYKsip7P{m7ce;+fPd)Q@Y^R?9WI|-|jU&uq{4)+yj^$e&
zaER%B%9z3^D{XjuLM^ZH$2d+rIjvQ^ptDz_aV=uqx$~=>^kckltXm4|V3bHNwdIfP
z1W4S$sv-w+e2S9vTNRm%BD+7!XhWXmk+?|0{{L76Ok0eiFzX@Wx>iV|GZGVG9MCcy
z3DgRqX}>%N9@R<YE|xxDyzL{P#`+?_R||I_T^4q8<)Itlqxq13;$+lK?a4~py!|U{
zFei`?Je9W<>LJ?3Ih08F_iudqnXhMcKG9B}<}il&F$I%%CBk0)$}c<jPaK0zNYO6A
zxu~UxfTy=a+cqzg82hXm0!lxQ47#&TH5!ZS5f#86mqZsK9`MO2t-*pe&}FS^jgp(B
zEjWCpk_}f*Q+wBc8NYM9D5(cHw|ZRS>#GQQi<vzsliQ}R`%d@|t}oh_7G>B<7{32n
zKJ_{7Q`iDx%SS@&9z9^*-D2N!X1fVgSiO!F_{-My?Q#Lbi9_doWZl>!_eR<Bws($x
z(2#@cXF}Wf48G&PJYXBq)Bg+VKT#I2iN)FJvA*bf_}+S!v+ds7eah&R)|UINSfgI0
zTcKH^+s)PY-s21W`s9iE3;7aQd<LFwV3}1_+DEbMl#!d~81y=gLZF#dqWb$Y7tk&6
zwOZt{SV`g9EID?=^rSb$r3S()DpU}#+@y)L$^Pxl?MOr!4TatcOj!urbo7y9f(jdU
zlEOLCJI06TrAlLuat$#^4<!td7g}0)<D3rRgGVit;@#`{H>mo7BezRd<e0s$WTiCK
z@Sc4+sp-RPYXXYTtkV*D$Fm>eZ_n`)Pt02sTHQ`@j=sx&&AJuVExMQXvXvUV*B@SE
zIoo%h0snGlmuuE*{{pWi;FZF-Ui<UXs9oj4@W1!gct5J=ag5k@`pCUixx78sk>t5`
zgZX+RB~+@{W<U<S7=c+O<8}9o!Cl$?R_$@mBjKA}pJ$>vy+(~X9WbCgc+Kz`aT(kh
zt_E%@xH@f{v9bDbg=aeFvhMMq7Ec(0Fu6`UddY&_`_U|+L*g3Q3@0QzrP~w!`_=Yt
z)k4{LbHRLYw1xZmVIcL;v81GyPH(0{0*$+o1_O@2V~j$|))%HOv4K81cu-2)dRU9Q
zF$gPn%Jt-(Fop~Raa%QacyHde(T3=}a*L5rq!Y3!kxjkRq=lo_?|Lppg*${`XGfBa
zqYJ}d$f9j^5~{Qk*zGL}*mop{;%RI+2{@y!sTMab{(5^qjF`S0nH_2f3|yk}44A@N
z9TEJ;(mKVtr=M&fmzF(4Y}99NgeP_v*x2Q=erviP$eMDL<82`B7xmNQozU!us*^Gz
z%W#qN2P!!27gw9aIw)~NAe1t}L;MP()^4GH^7|AFMMvK+gd-ZN$<@S*BGXcU*S`Zg
zF3N-3zx!)_Uh1CuUTKa%Owjq+nPc&<^m;LF+oMCj{S-~$c|*%CDodkO_Y|dB_P3{c
zC1%B(RbF4!Tj%n3<bR>K=fxoN9Qy0T?7!cd13b9L9lRcaL>fttz(eX<3>?<OVBZ<X
zMBMRnWf(A@=&R1G9gycgVg8j@oY6Zf2r5O^v{lCG^2Hm-1w)#-QnL_<SMufb`5o49
zu_;32UkVh4-t&;CL^C&sEFet^%7?$i^8*m_IFDkB>3PdO>hUwjiT94RV-6U!spbgo
z0r*tIku9G@JK-Q?s2o<}1U9`zd@Eck_0U)BG<ipON3JB*!)x8sH6P-hmqd%}S3pNv
z;Im)7>?!=WGsh&ZJLQ?S{IkE_&V$70Gb+`qFl#icbZNO%30<}AUFk3@G%JA#PpN9n
z81HefEYpU2jN!-Cr1?L}>%WA{pU9goo70W|y~O2w)>XbA*k`z=gdTd6m&p`EI%5M8
z*Rj<#GO@qO$*ydPD(3w27IOM!@OxqDmS!8+zo~*AA8k5LLu>+e0YXXb1QNKTw#LP~
zA}BbjxrbIkP^4-fsUZGaiaPoy#uk-{zcUeZcxOO9Wa<Ve;!x=KoUm0QVjM4^&Pgp(
z9)5+Ii9M^;qF$bVQmms2OCcN!-V#s%Vvo*FV!~&f%vTPI#wpymFZW!6&EZPneU4dd
zTpH&^!s#giEF$tt@z2S>qyv?(EH-%4XJxQ$F2phoWNg5)8}1;azc8^E>8IrCA!<@m
zH#Y^*)~;;nsbU>aFL489+qPLrp%dE*=Ux?C5S7UyMnGc2rhgMC->`iW8W@~|?C<Ty
zzhJ4di{>JL{mE-b8F#672Qzh1d}`~mhKNO;(CXKauC)$K3ic}PsMYEYitD}Q4$=eq
zU}?eK#kAL{CNQd!WFPoeq*{vd^CSX20hF_n2|~g_ynOIsZ(sGJ@^Xb+aL2$ZkSIOb
z%*?cag9$m-QXsf+&Br(8U1W*Ujwn!=)XV9czoNr^EV;UJ6<Uh4`P&=K*dV*abz)p1
zejVjVqc(cUJU%=QSCUr<X}>!ZSZ$S)n1rH%#;c<bh)Z&CLABNvnMzQMEEzf<)>XCG
zg+r~5TsqH&k`xKGGt>IzUraVc|7SM#zgri&0TAD}U~TTSb1fIMTO?#?4Ko%sBcrd^
zt28Qzq}A?*BQ$uxu>Mvsk6U9L`?04vt}wX;sXLUfqDXgZTU-NutoOFsg>){E#B{=J
z==++X(S&#tKCbXY*$-jn%0u8#;sE6z8^pIQeM`sOX&;<TyCrb}_uD1J|7dNpWj{A~
zM%qC#G_9#_<=cA`;dp!|Zk5(7Zo_9Qs>qGRcO1frW!15K>~6n<a&U)h5+7&21l`|4
z^dyp=QQk3ajA)kbO%!}5LdVcNR^;F!<S2S>54>}+-RYExY}F^65Y)hEjA`6^u*CFF
z>Kg369A;<um_z%@;74SYo8FSmB6O6}<P#r|2)B0M9M-Z~A+T{f7xhC7PR<!N^_-kW
zHk#0s&6qhEMDqou?${QcKJqB>{ycSlzfcM;$_PJXQQtHS7P<<Weql+siqQ{wsYSKs
zEFeI_fQh`nw-}lfYNb6V%5)++m_>(_n`?q!n3wI@Qx!UK)b0#%j06J(nvxnx-kl!_
zg(RNDjSQ2Ys@#&~;{s_v-Z&hjpAvtfr#-fV2xOfbIV9KAY%d3b3a&(5l#t^w!N6rq
zn#=V7V%lK-K-9tFLgIekwk=JpvH)w$-QD0_pG#h1c%#!`^OI&v=p5TBrnB-S;7@{D
z)#biyQ+-&@R)#1&$i|ahhh7ux<LZSSus6`+WZR;f5(dckEVYYRqDYhSo9RC~w-~gy
zOVqC=ZC$wLuBPnk8-nVOCUznl9xtggdQyI2pA=N$f)p>*DK&fn7)=EDWj;0;@sXk5
z&z6D>jE0JbhENWQB;Bn@;sWP>WE+EMf>Yo0-M^68Aj8<CKFa|l5X@@AS<|$YV-|kI
zz<*F72$BfW`p7QdutE$%&!ZfbS2ap~(0x{~(;w0<1yZ^*<{dGO!bGO6+`1PUL+Ebl
z)ZYfM$ht{}-M?;or*=$FS$%kUE3q9n2;7}fJqk$GJO8ZPX7TY^2MWV&+RWS&Vp_Ll
zUSDH3<?P2k>jjUF`ElK>c~-^^lYky`PkhuRR@;?fU|;};HU$epc@ugfSAz6jS&(>d
zwsI4gUce9$3E17BF>d3kb_`3QOz`6S`IVq=eV1-nyj)Vp9kfSIqhbt9D&I}x_miLR
zmfm&+eS!z_XcSv3QoU!PLUc{X=}N#c6G@ZZUZkl9AYDXD&&45`yOj}8hf5naI3$B4
z7*sox<qLXa=9NJouP80^%3_*X&c^B)zfpf7%AVPm=0U;A5_2pVDx6Z)DFU&vS?t_X
z3t4!KBTh}4{vl?Uyj0`lSlx%14CmSNBL!L3WqrA!OB-E_G&RebU0hcCL<&5>W&Ncr
ze(6uzN_+ms;w6);szS_%C?@zoTf*ciaW93_%k=gV{Z<?0xH8n=QFgK1_^!3=PC=Q|
zhxeu!#E7(o8~dB-Lh5;E8B8j7bD@=1ne!=bh-xlbW&GdCwdWPY-POo~ukrpzcIa=5
z*Hhz3U$2=K8^y=m0>9-7G8#~?OS3XLu<DJ)Mp(p@J0GJKdV)R1Uuj2ukULEqS|F>z
zwZHse)NRGwc~-`{g3Tris6EG<8RG%t+7nMoqxkD*ALTD0wNR@&|H38-TcLc4CJ(~+
z;zP`WM<F8^(z*SyQ=<jnO`G?v2i8odartf1yvR?zH=_rMy`0#S`C_<aW)E>yIWdzm
z2F(!!%Nlz^yZCsCn04LkSsM*H*=4XP?9&R^H8S2#BLk1@q8^t*d<?z@<Um$-=nk~W
zgWI~`@T;{cV%5UHp2k1XCQ;`e^?BoE3%fM!Gq0{CNPu?L(Aa_fX=gAaa{4xGUgcdI
z(mMJM&Hs5o0`q8Br)#rx3kGq^!eN%Vh9dB1Mtb9jo+-k0HWnSFXgvMxFF$k_O(L^p
z+pg4s%91X99b6Bu0+az$jVLric?p-h$?T{SwnoMTl;$jsU!l?QDqhH))5!`KIdEF9
z@-nh8jkDBT;MMagA2b`a-7z*M@fTne*d<lYy;SI`oubcEbZL<XJY7-sT=l4?i;OL}
zXnM)%DzPpU8The$(nL$x6-FhEO?e`sv{RuMQ6BWJ=XuE1rK%|a<e5~5!Ym)7)ywmJ
z^9Ul_KKdb(G}C8c-usmy8gE6s=;!+c!m3!vY{YTPYPR>$B>^Iu^MCe}*+0j&Du_=W
zfvw!*tK2#8$Lrnf^YCcaBniR5IdD%^iE$S?!DF{sPZpuUHU=W|G4(SEGcH_f@Y|4P
zrT9N+YkO{L$!etR?z<p|Uq>vgE0i5SRcPK>l1-*S3FQa|gk&28PPy|kiJ@oeXoyet
zi$!h@An)b~SMty(FHH*NO$WO(un2L(f5pVnaN7(n%O#Ln;{e`6wamUs?^B=Bz9OF4
z59qA86|nu=Akn{({zTpvJxmtdi^g$>q+J^8!4_l!`iFC8<ggk(zdo@8>4H4I)3;s{
zY-(!0@H-mg{Xvvbu_gO)_1(rm9*x~J-=rxYa9Fll*29`X(e~jGz$?<IJoibj;y2u!
zh2E{4$$c3}X|qX6FD4+Y9eNK0?w;Ve`A7;&pf{YZpb!dw#q-iQ?VXWXsk+)gyBeuY
zVMT*cb9<w~FEFbvnx;mqZ!S_&KZ?)iS*OzD+A83+jU0Lv!k~_O0w=2Rs-w1_)BgL#
zMN&N<p{>gIQ=M5c*jQsx8k`!J)j8~f3^kHnLrW$GiPdr;sj%^tx2#hHc#sT=##Yj6
zo?qb|hG$~>3XMXejXxuT&?+eoH*oP{{aq9wk6cM_C-mMQ!0r1}@SV}U%l#c^`1-}D
z*cuutZO7cMeCjhaj#TA7TRZm&a0H$xT_btrt3W7*oJt?7U<ZDWvy|e4aiM)(;NU4z
zE2Z=y-M68a_8-p#ocvG8BeM{-=mKQ%1ux-n=H6-k0IVjFIxZSlzX<=~Bn5eD23oBI
zKWHQhs?4Y=76w_AdS^0XEZ`Skn?GY)1{KfgwD`xRX=rz2_F7&&PYd{)D2dTq{E-*9
zs`jqXJgh9UCXoV*v5#`L%%vy7kz{*Lso83V9+CcuR$%DR@NThnl=*Zh#lTAMO?!`d
zt_!H8p|#MzzPW<*XqQ=IW(0xvz1dWJ>TH?ab5uWg2yV*M=7R=DYsk;ZIObCaaKIz{
zGeJh!y^w304MMjSw?!8Q1R{$q`$>l!B}h^g1W800kq=4F^_4;g`QC9MBqjJ20~n{O
z`9?w-h|FFjcsWP86C(f4e;z>@vJzgGycimIswyir=HUaFBUtI8(0rbGBDe^~2#~S*
zrUy{1tvZ*x@~fPUyr!8nw80zG)lV#>qKy!c7iohqnL-<l{I#59a3t%0OHXq^uE9au
z+uE*T*{Fwx>p>_if+=DP%nF^By|f5ZSeUCsOVH>pJL{@Y+6&tC#EQgMNL*53Eq2j(
z&Df%cb8w1bN`Io|%R9&cCC2Sgi9=<R8J>N_yq-%A8|Gl<eQl33K{)BMrDVXIM?i4q
z;tb;7H8Po8?V8T|d9UT~)LN-Kppgbv?IQ~pA9d%oOFXK(D)P|%@V=Cd!HP$I;I2i0
z|54Q4;g-&7ARye|<EA~Z?zTwC7ySYXHx=QD(wts^d!Q~D@qx~u>0k3r*w!toI8CKa
zf9@D6+Pp52+=WD}9d7u<jv=-_$Gk+V?B%bOS$l_2%$aR%2ypMneVAo8E~cd4UHutr
z$}Q1<&&e1g(^z4-QqIuv5<+3&gdFlaSx($ZJ^gsY0w9a`bQ_2t{P>mFBAdqR-8vEu
zRtg<y3611s%r`gfB_|=9CaVqp5<UR1em!zdSvZo;q0t27Kd_@rvH2h~LgK&MY($<-
zlFjpdq}%tI=|cf}|A0`_fDi}`3r7~3duD<V>?N)d<?<vEy*(&nQeeLfwIQmSI8v)k
z%1^UK6oz=F$Vit&>^o?a+Jb#-3LF4D6NBC(fH0Tx8kR{laT*M#2D)@s22?Q38%dph
zIJIF<df#2y7P>7BeYLEkf0xbea27@@ZBzGB*nEW$@tJyzM4hhva06=kK|eOYeVG}s
zoHDT{YUF>3drP%<EK8f>N*-1{%32|U<>-!^YPY%BQCr(t6z|PV<z;h+2=MOA>5@3F
zmYDF4gXv2nO!gjj3H{)?bu4x9R_@#rh!uRp4*x$cfJc63Q9?5GGXExYpb)32D|nZ@
z7T&pU*==L@Va@ddu(+B59Pf5`X^XS>p^w>`AdfFYUgo%FSrc=<t{WP=_0+H*h+vm=
z<-m`uJ>uDgW}^@5d1{Y<)%WcN6zOSt1_tQ<XImKb{gRsNb5(Hr@hsIadhCx2KZ$eL
zKFE`vo2in3V@D>5x>e~_9ezov!TPUmhxX3xvmn^vuL8k9{B2B+JMCy`yVO2{=WSy6
zJ*6RF$MD1!H$Ev~>A-#u$HE^Ipt>g;Ubm$>{#B_8JC(ziMydR_eK*<|=S+GBWJJAG
z61g~W`Kpr1l8PajO_!!(*F-%>zo6`(Tvdo=CLQLsQo2^;`_O^j-H@WbfswfFTPE*m
z+ZoY`zK1KIteITK{ukOPkA^*R&hlK!ymrTB%<Hi^fN<aSyw<0prZ?Ky5gLjA!ykaZ
z;a4Kuycd=M-Uh5y2Qy&t`Mc5os^V<#7oNz{Zl4#Wo39M(q-DRr8?~xlYe==KM25Dm
zYZ1S?3{bCHjD5Ps_2_rUuIlPvQ$zy4;hG9qrAmduE?UJFrr@yjf+rKK5g7(-QIA+G
z9)q1#)0bQcmYzeD7AuUSm7Ue>e+(<;<E{?#LY=W9#e<)WOE{EFrDJQg$Ul-bo;jMY
zfQYL{8;hh!qJfV1^2UfGV6Fe#mq{SO)d6Frm~WfO!Sd>9B)i0ItxX+rh(m-$52~iu
z+(g-yks(xk@=5eYw}8N;<JQknJ`nL=vbj)3I{lho{5dAjlVl5IAOVmU1ZI$OD7I*H
z`wDG4_twDvnwt`s$^DxqqYg_6wR>))-z}pUD&ArB{bFFzlhpW>-?!lP-Ya;Rk-~ap
z_fkALzRFLJ0%$%Kd_88S`UT=S9^4?Bla4692X#6j^N2d2lvqIgicadUjOMPSWJ@)5
zub7ta!z_tRVYN}pt1rErXQkvjG{Uo|@}`g0h;iRD&L_=sL0GCKL=UGTVSeUr@o{w!
zq(aRvxtowo>NAs4q2i?^ry|+D)RpHL9KJ!5{W9g%I>B7?R22hcjz$)gLhfBs!cYGs
zPbppLb8n!I6O|2!MK{}IVnk~cyY+ibRA+<An<bQ6D+5O}&Fjvzhf5uZe4ScDrI!%b
z=v($zaoXgp`p+CMKcLF@?Da8A*aS}0`MN<b-cV6~4K-XBitapw;YBfjGZI1)rhT+_
z3syZ$KkCZWJR;8Qs+_UQv58Qa+uRYao@4#(0iOBX$0^{Cedj@sq9{oFL8}Kh$H+^w
zwhGCfZ2&oUJ-8EC@>nFL7Gs4pi5Zfwvjd+_Itvp8Ig1EsM!bF*hyqnz$xq%}V{8^w
zh+prR)Y>TszWo7z1LZkDZ^f6&XbWQCY{gfkSwgzgOx!HGCKJsLgy*y`-Mvgjd9u~}
zEzumt#aSB+Xlniq2Vji~!_jteDQwDV$aw+TKb}g>^@ij=lv<8q87GhRTUvMy0{4TR
z-G?7uCx_pF>!Ca)d>F$&y)NV$s~KWs#`J=Y{CY1DJf<jWUOim(uZ6QR5)$pf0N@B3
zCAhDJf8TThLskcG?`7_QOEX`<5OqoGNB5U4A@a=)!*uV7P67Wir+=2y<QB6X(=N}U
zU8%Ot7vDc5L0FtTqA4B~s;a|YE6mPNob>d@hwd@CMgW}&p7XNOEi2DBB4Ex1v}@8o
zdUixekndD#AhNViY`v(|JRT8W8cV52(1MvLorTTc=C2R_h9(C=&&!H6L#byp#oHZ5
zvyJ_aY*gO{hnLxlBKU(e$@~ZSRwx_U(Oh2o5BWM;_sj3^x{Ftp@dM7_MY`RL?5g=8
zY9RgP)~5r=Bli6ilAl!mj6jhCTp`o25p>5x^M+pVQX$-GgBa2nePnmpN4F0nsE}bj
z{aZwUn?N?FYfsS+aHWh=mjNf&bicY>X9O~{h;g$AIi;tyVS}UO<<#JKkS1aZy9`pw
z2f{;PiK3BFEy=Lz@zrt7%~d@u!VCwdvEK<d$0K}ymD5}?nTckvn6$w1i8bgU<Ab2=
zdy>=<!3kH|DAVAVTyXpzi#SilpMy1>#L$2vwnmGIT)QY)NE9)R??*g8NFKr-lNg^!
ztC7<4ljIo-yb5$oy*qNWCsh>-Pc@jY9W}jArE>Dt4o?$M{b$XNfhMWz(9w3x3PenI
zJ6C^Egy21D^EPq_Li@AF#OJ3s?VhPouahs&9j$53Y(xRNCqjFWVWBJ9%Mn&VwMtXn
zBwj+T)yv!5rT?j(a(r#sTrY?p3yl0}M|Sy{a7Av7+*Yy&Fh|c1csC)XoOuzic^=YP
z$xp>%Ek!<5uoWh7h#R>7%zN}u4Y06KuV}mk3>f{MhOi@7v>eSBGW-a_<HI^)HwmI8
zq94sBvN|U@qiqOSgcIDfPN@fFFNwfoXjqtA?hbMGq2!zd;IFeyP>o+Nw5pjsNWCV+
zt4O?L*22@V|ArM%x>Wgr#4fQsv$FQ1fYN!~^hET|6@BaS2%(GjuW&SLz*N`1s6;_$
zbpqm2M&(4DP>>F>|6Q|VUx2*RrO@xkMQj7gT~%7BGH0U^gKn$TA3*sCat9WnaD;wD
zH5+L2Y7g!Lh9_c!Xg?iDhj%>0QGddI4v(eFVMOL(_x(04usH&cLF8pM@JX;C9z#Dj
zbNX`yY#zd5azjB8?H34>D(hwoR-^syn+GLLLI>C>aN6>dw<K~eb;JV34^KJ1-(-U`
zOa_Tf;j;1vo11sa&8F)X7BJZ*&a}Qy^^c_GaiVZYV?xm}0g7(>wVrUaB$TT$R`8z>
z4OzYt=S1QZmO%AcBm`VyQi7va`_ym8kg+t`BUuv)Ns};>^9qs5QdBl#Y>ZoW=5B`L
zyl<pc|8c)zZe|?fiW_aGW<kzsD_tdmcR0#iG&yM%$tPBeyETCX!6^INma?&iKSm4G
zWd)gi-&Z!Ds!9sLZX9Vr*Kxgnz-(yzj1aYu_2-l@Je*oTw*RPqZAszC^Wbc-*QT_|
zn|#ux`^ZP_Rt^)uQo3Rv?sM3Rm$jlEHYsmZ@=3<|60?51HuC9&dY@BIE-f&_-Z7JD
zRAulgy2~dA&V!OYvYw@A#T1~mGUlmrCaVoH)4%!B5H>EnCwjs)hnU!s&r@*C#(F3r
z7w|By_%?-p<N#kw^}rRN`HMiC7FW);P5#>kRn2J7m2n#4A}^7ACCq(ievp>9pc=Fd
zo7oZ1s=N2+D4xCP_n+HRZrYlfCZP|lj*hmnbtmF~Tc7luA45j3NJK9DB}@<`qN_+V
z$@{L1L|qHvwmUK?7+qm6g!<5xgkd-p<_f_a&<k!A(80Wvu=Q2+E(SF%;*Q_GeVUb+
zK6`U6u5LQ1Fc#o^A~G@%d!52;%dCOa&ga!L4TItHB(Sg$xWQEu{m42!5x->mrw-zp
z6h+FG4P-(mf3X{rXWxHy`lYGklE*@ADVT@)78ulogPqVNpn7`khm|*;Mcb>l3#$34
zZO~9U_d~)hrs|h4!qTC2C9y7JK%ae5+?jt`hscv&A(;Pz`Jul~FpI+tLHd+}xkQ!D
zI*Zh*pxb!6*MX#S;_l>Ss!;_Lh)<2@&FaAKQ&CR8!*aiMZZqRpHGr~}Zmn6Pk=oC7
zk~faI3{)wk{0V%a=k+}^vN%~mF10e(=wsudE_h!H2W}|+KJQu7p5q2cT;8YZYW`>D
zc+jVMDu3A<wq%Y%ktYe`u^{-C0>S6c_Hb!hflT)01q`)0$6+=iy;D5OS`d(whmVg(
zG{gQ@v}=`PR|5@^mO%PlA!k}4Ma1RlfXKl69BU-~XzS>MI{Lp`n@hnj8gfsy&inj2
zmSkP!Ucr30zMIq0htFO3$k%euToKTyGIAWoYla=n+R2JA?2;vmJAh+=EO0nTEsIFV
zg|t7hU9G#oR9NI~RD?KRuzPL=qD`ta1tRu1vwc?x+3S!g`yF0+iTC@*&G_{F%EmJg
zsVYnyU+1Ow2H3fNWEVg_jz(vtqzF&^lI(?fK?Rot&J@R7!3<mBRh2|L959H7K&yfv
z1Hn)WE^HRbh&`mZxXyZ|cRhn<KE)3_?>oV~UYB)oFT+!=E~J%#)iGAxiKXr`A-th=
zoYLS`BqMR=SjMR^%2nUJH9DH1%A}`Ps=eXJx-tFY`I;Gr>QGFuCTrrQTq|*I2$iZ`
z;UuHsI#!&^N!eNLCL3Bg!mQOdvO^@(x;QJIhO!un#NnjMCFv-^TlIAtiAOgRt}pJ)
zC{JK4U-10?2>O2ju|Q70l)Y<^m1UML`0WVE#EH{M`G?d$dOE_Ah&gkhogWa>Cqg17
z=IHcHj84yqfD?0OV1CSK$3y~MR(YwaZmn*s1nWX3DwnoOz*2$oLSl6l;4L$`Wu}58
z7a@^M6GR{{Do`q90=d_kAA7I0p0(chOKPmz<lf)+Ue@hh>-pAu`J^AsLI*Hv**XD+
zW~cTS*O8(vTNYJ-oUWbJ%yJdvS(EXc|8_3V`|J6Ti6_`>WK*;@o&b=Jn!I(~s2xw5
zTru;gS-V<ahd#T)9}av&yN+Gpod-sE+rG2>yN=KJ#Xp{;UvBB6$Jg!SC9Pf5($+<f
zJinWNwdEka*>RE&oEW1~d}{@`LIiLw`H^`DR_`ewgq_b#;)9C?Q}}NPS`^!`SYnjr
zJ}!P>yw&&|=wpiy5^z&Kp^nBA=uKjp3u~EV1e7o1RhpsPJ&>DE{-iqbbsR8L`iumN
zmmXBweZ(*hY$K8haXU%qK$!wNRRQL{2ZkK-L;(b2^w}G^j)u)v)~Explu<wcH}QJ%
z9SsiYj>?V(m+RZh#o9z=NSjjH01r9Rkk^cIJpEt|-iYhiFg`iq_qtw!{Bxkz8KBcg
zl&8~U=@VM=8)aOkqq=auzH*IT+Hs6qTDz#WQ27XV9QulUFbUI^us%lD-_@PG0yGI^
z0yxGjOC$l@G9GZWi-3bM2si>XHOpXNQ?nA%|5#ONNOtroAhI=4I}VI$rtF!v-*BZ;
zp?A7Z7_c3&%#^KF1K!6l16g&M90V~qm4(wz0{}P@00P-CSktKB*RnNrnFx=%e#*d|
zfn=Lfw6#(Oj&&2x7;N~!HDaUK24)dq1CD|l;Q>IQW=3VRh#k9vQ}39q)g8JD90h2~
zG_Zk3+lXSDYHSk+W}T`^pH8LfRI%CnNd-MN<*4*J;9}rNZCo?f0>mIA9?Ii}ib2$;
zEH6+yw5edxx7w$UEt^ucwkG`)vSi1{h<>~EeXbM*z0&?Z&^rm)d&_R)CKudHb@0?>
zdjHT@^!9;K-u~eTZR<J9Z|pnAuXTOSn>)_XZ{HcB7yh-MR=shIf3f)xJ@wlI^rIKL
z`QhjH(vsFLTGHCVwZEOz(%Q)nKfjxvTK@sBX+J`5be!ZpN6ypW=NIYQ%hz1Y#Eebq
zYbpE=fid_~fMw_>r}noo24sA_ByoI5DUYKT8(i>$z8xro_`|WyB(C`Qn~N{LUGlep
zz9^Rx9FfLX7ynYer);DA9>hv%!vPF}07^gv@|*N8Wr%~0>Ro#J3rm%%@V!vTSt{bx
zR9M;zwnV->`S$U#0SAV*W8{0qfw_fj97CrW1EXx4DK9`1ncxDCPMJ<&CC1>9{uD+h
z2A4tUIYZ9r!NkE{@dUp`j)YGZDGzbFH{sLduPOMc(%#79lyYFE^Iv|;Z+4#Khu7?-
zB`Z7mA71F@H};&Rk3XN#03Fv#*%1d2%p}{U(|GvgZb4Z=T0Q7^fPm+AS;oulM3evs
z>zEV(K<37;<*Nn8gP&fZ4LeTq4_5EyC9Pewb?;do7^(8{b65F}zr2(FcHv?;dIEMs
zLeRDKWftsh!w4P?V^gj!*lKps)+)tmJDh&?Ko~NsIz3v|`?~1@rmbZ?rO8UNNJNe%
zl^aaM1AsC>Bs;U?^r20|YX;2#V<uxng!bXGR9F`?bfdttf_|?f%|^+R0tNfF#!WI)
zcI=OU^+`rxic`6^#xnrCF|>EETb*K+tR}9dlnk-haMkS~*J)~8r>7b8DrOcHm}#aC
z0jRF|BU=-y%ND9M_pk4vx&L9l*(&M_z&fl+G*CV=$wy9))8jAnP)l1EwX}B9lGaXc
zY3r;3xVBDeS=mvWUR|??o_w)~fAQ)^y!y=}wDFI}Y0G;9yuJ4{?LB&qj}Lvx=fAv6
z6IUlO5I|f>W1)+wWPhT+wHvV=7uQ^@NfH_0k0HcB2*~*2kOY`2mLN@5)x|O8E0u-b
zX3sRXVYC>1NifUG+cBBM6bm`hP%a52^$j9OT*U4{zFx)%&`5DWpe2<p`8J>}>`U6h
zEGRGweCF+gh`C6N%M+Ip;f%^DmLnKQ>P3{F5eD{|8V!KEq^-KaYW1n;Rxp{;h}U8n
z9SljCWJ*<k!P7(*_=w@5Omei7-3kNQ<PyPHP_|a~#0DNB9qC_S+;~89t8-1R-KlL#
z>B-m8&w&#oyy|y-yri|0zqe`^{mUQvsrTeJut@>Wz=G*T&0s+AlqoL>vH<kl8a~M=
zX=cjSSmE&*?r4{KhDx&yGDQW!5|4X%zwb+Gd;KUaS=qrqcz!p(wRec#+Vd&3tnB3O
z{;z3ZbdrDa%=3KHO*ip7-Jd9cjcdLn5bD$|WWekw8aR_KX0KoxQl}zEEX#yDi!s}&
zyDSw%RGkbon<v>Z$mH3SuVpm{6hL6st?KT(O$MU|h7<_m+BczDr+KZc00Yd-;Tlg|
zvvm@|&j@B7{WR(TfG}IzScOcStnst8l$MdRhXh>*Sf3)b^?dT+Vi`PtE~HK8CL0vg
z?k7PnRRl`9G{TlH1pUd>?kMOC0Vn`G+wfvQ*p56g8yN&$42(?jEA1UrR4V-9mhCj4
za+96+0Jhx&mDyzfxk-9z{eFJtm5+FG(j0LXn1Sy~{H}QM@`vHzd(E9WpO@4%zaKJ6
zuIa>wb4shvA8_c}Ra3r7XH+m&s9R2ggkIKI>birvE<PCB8L()$jwG4m`7~MObeQD_
z+5;vvlA+GhHr@R|FWf}_oh%LH26>mnHxH+*&nc277B#ansQp%;M~+A^ZpWB2#?ns7
zaqk#|-@fg{5FN8*W$FqFHXmi~4AGatw#p638K(SEV-ca6W=ftCoYEs5YScneG(N(+
z`F1k8QXUgSFQGA~d(>679?+H!7*9i4mJ<f@RC;7@F10Tg{xnW+?H=UE|79Pww0827
zFZS{ae>}l&9~j|dpHKK{TM0@!jbz7jXohbL&*Ou@h>N!sP)Wu@reDKUC9IFq%>xQf
zEaP?T%vFAU*XR5XFZA$|woZEHl@Gc5<6)kxR@DI4wI89!*X`p&pN;d;p|5#n^R4u^
z3m4g<b_tLQ4r=|owMV0t1;VLa3!avZl+2Ag5=7SejT*SLb%A!Q2_8R#nJV0gt6)$T
zw!>64WM5(W(twSw9~5u})3SpI0B~AUGe@Rl%s^T8&4W;!G8G_fpsA{Qg=yX}J#JY;
z+#!x@9}WCXYDN&Jn02F#fJ)JatP=#ll}uwQ&?f+mwm#7|tJLeOy}*N#n<ADqc|w=1
zS+vZct^30z6q1p|ql270Fe56{-J_E{_pk5a|N7tm6@4;%-RV{V^9YVnTfT5|wDuN_
zU%hsie*Eiw^v(D+c&H7&2z_}j2Bq;4{9AmuhFBHiT`p;X{ui@B2@PfO4P%in$FUFe
z*K83K<dBIwNI}kjhwF}ZtRKLvCTp1SI+LRd>cqGgWh4@{&_!i*3!adMGBMTZ&0R;J
zpRWtDbapUByD8v?@?a~$&OrWw4itpaQzVLU3djmUne+q_b0jb-xCFFBK<Nkt1tw2b
zjDO7_2-*Q84x}Z<?doe^pv;Uiz<B`O<>if(oPjtMIjdCzg(sP$ej-E1pBbIB0kDtD
z^dgdQZFqW-Cc-wrl=2^Mt|>r|Mvb}wxf2ne8TpoW_MYZvU+be~t9EfqTPHpB(tdjB
z?LqGP_$xXwJZX!@$3jLZ1XNpJC)1OYE+b_@)~1kf`cJ0OEQ4oRl9QuEd;9;yTRP9s
zFE;h@vbHW>wyKL?+R@LahA(l-E7R4hll)KXKcJt#dWb$5zRo{->X$ri+BAN*=Mz29
z70)U|;GwkO+9%EK**ZDRn(0(7W^5!wWgA}Nnla0eX;#jG2REhdrbi*`IBMX>HiS%S
z(6?Q-kcsj@-tByKb!9D`W+`F4p{_p*J60w0I%55+4TMatf@}d!3Jz_$Ro8VwmN>TO
z*H0plvZGG0PhI~hz*47=5%2>j#x;?8503{i-MQmi(6&W}Bewfp0hZL!>2u3Astgry
z+xd2oVb#puZ@0eBl}f>@*T12eaLlI5w6e<-8n~q2{NW^j|M@*M^3~-eer0{H2Xs)b
z#5b0;1HKWj`MQ>>@O~a+6HuI?-PLw}H}$7Uyd?4e*q_B5|FG|UQV6yXQ>=oICj@Qe
zVuhy{!-@}z+Cktc#HAqr8dgcmWObRnmItLtxkN7}&uqJ8b%2&6>BDdp<dl<V{1j+o
zj=1E5KhcoPC@}M5nXphK2++WoH-c!KQwgaI0F`Buyx}oq=92PY0YIC`3;E=L@bk)z
zBPL^XCSTC4>&LZU2Wln2nVeZDoru$5$h*4GPX>58Ip=f*I*$(o(as$0nWqsi8{;Pj
z!Y8j2oj7xe-st+2m%scGEotkbWzX)SXEycmrjE~e*O3c+XlR@V9hiajT)1vdr=k4X
zE}M?C9hth*RRe7;fF3?QLI2u&j-Gw<V|rxGUTSIW;KyI+rk8j2bKl7?c;cFvQ)<7$
z|L~WW`R||GO)tGOL`R0c;hD|1@_%0Rpk~3`u2BRhm|gN~y%ebFu^2K%2|z8Gq7zUo
zStp$`wP{gX3kTWEQInHSokOO{GC4LCXgaYeLCqurkjCtn%W6rca4htX8A<`YAR~WV
z3ZAhCU=P43ZYHs{oI0HjQ<}Ig(*P-~`GieEmWd1NLKVRK4LxLab=@05-`2j!7S~VO
zQU?QxdISxEQL!JHLWZ@I@k~U`>_LXlEjJj0EF}WbI&Jg*!#(`({{7u_;{3Hl7m~g8
z8Bp6y_2%BQ)Y8^TpL}+aqK_y8YnY5ck7*CsY55cs=KUYsy+K?`V;e>S@9QY_%Mxo9
zU{Ijn%G<+oDi`Gq;snwTaZma30Sh0{E%YV4K^%*-MM-Q%J`_`w#Eg_4M%qy)B0`5o
z>>_fQ(>Lak2q}m<rbs{DSG52?fRDU>bFu_xOmr$&Vy<WOym5yH%CDhCC&pVB6lvLn
zz=UA78qjpfHDm^8_uwlIm|%n~WsOjzKN`7HM3!f3Dn3a-nk%-SC<S@=bL19AO}Xsw
ziq%WnQCS8ajPA%A7`vFc_AKSZ$c@yj)1^>O+XH!IWQo5~ujAJy>F~gpwE5jn_$TXo
zxn*SsFKO+h?>)Plo_O&C{?+S8_{Be-;5YZ4rFRc~N&8NGO&@*wEgwC5&1LTd0BGi6
zw8|fUevLjFx=effFY&vF$M}uC=Xk^Rll<J)qx7@i?x#nd-@{8*c5+K=C$;|W5WW4u
z89Mvrx6zJ*o{7;`#lh_FAEPC$9sE}JS^m*K|B`Q>KApOce6G`Iw(ie>MsnVn09RcP
z2f-Vr@igP63*a?71xL0_!ZaHI5m-ky0R8G&Z~%_&+%nv3L1Z-Bbe@1be+HaQTOy!6
z382xY8EvXw!4PKeWR2mNO}iU7ngqaPnKL}<$2}Oh^`KRKNU*cmCLIt}Iz%UK8nz1H
z*`}Lu{iJTh7`2R@%b*E31<)$M%0Lnv;Uc;nvGSOu1<-D~7z6MKYesddR=}XN30Y*^
z$aHdalHb_gO+`_m)f>0Mw7EWnz}ijQK`b)*L+?3iY3-t(<HOF^=lmgw>qvtq+xWCG
zTK0iQW&7?tZpp*2yJy}qr6)rJ1drsw8J#TlNmkwg8W%cTgkbbR$d}_oyE8v*F~-_3
znM1ieuR&(Mj?(0`<J+M~y8$)V2YlH5)#`~{W31v>$I0C36?B5UAoakz1ApxA<>^5l
zyiFEDO!-qw+E@mBsDO}>tWjsKSzkfg3Km14$2#6ZoiL+dRPaHFDJ|B0woJU97$9CY
zBM-)D#$y+!>_=o&${!$lxq)6JFOM=glmlI>L;6?xGH((bNn)(|>+svzZFXQ}=*vBv
z7&v8~xOSa}&i#q@9zI7~I|r!k^@IGwb=}m`+R3$@c^$lDWd|>5>!Oy{F8cnOz4Q;i
z?xmk?Jit%=c0c|2*S++E)w}EWJ9&xL>!g;}PWsWm?B(a)JWShm4^hvt^ZeQH*L>~z
zB#O?_g*rAH_iW4c9o?t7Wn~Aywf8fgG2<3m^nWk&yLU$|t6>=;0}F0vD@^kWsIpzI
z0)TLu)^<q>IM8EGTp;!VSOAo6L~$7|IO0R6cVQ<qO!MLNrA>{>nQS&KugAhb@W;%R
z_5;(&w%gV+N4ky>))ETv^%=;j0T~5?cow3c0`(x+rf4l&XGfUek^&EeB|~O_8<!fW
zZgk@V>K)Dq1kmd<z>uwl>?EGSXAcr~rXcVHnQ*^J$Ycp?FeNix|NbBU<^lS5|IJ_V
z$>B+oB?H>tm}Qy~BoB^N>8+k&TC%c(J3jgxyc75!jVC&=yid%;m@sBD_rrK*=*z_%
z@B5Qjm-sU8JDq=Upvl$qO`=!K!~vj_!|%HPci15p2aGN!OH5e!{(KTc1@Ft;pg-lq
z@h&uATtS{8VlcZdQdO8=_HDQd6!lXon_v?Lnvn>*=j*%QKBnuv1UmuUwZDbG>HlIu
z{GK39lZ&It6N4xp`V0nw!p5L2sNC8L#(@ODfbgIjjh{nXSteZjgzc0Vrh&vTP@Ga(
z2SKzr>&P3J!bebUk2_jc001BWNkl<Zl&kM1@Q?>qk!KDvE32paLY=znQ^*p_#Xh`T
zLw`adL;DWw=O0+g+BH!Vk6*n`r-uJT9}j)SM+U#3508&<&(UG(>O0FF`_Iz$p3}VJ
zgU{%_kIryc-#P9+GR*srkMiM@U+}S0U(u)MzNRZzuT9Z+32=_i985IIm5KPxT?5q8
z+QEw-e2k}0znS(OJ_}%~s)5yx`p{`wIOosSxk+XQvP)rV(1Ng?P3EUBbxIc2TH#Jt
z+qGO(@F&xkcIb2+P(fV;lbWHE4Hz)Ri_^Y?01h?FC=34uKq<fr8LAP>PCBro89vK;
zx{V@k3bzWp*g8T7RCWC(OpR+MR)CtVdsN^A)1Q_h!?$hNdNrFOuc|C<rz)%q9F^=M
zoUaG#D@D(C><S*y0#nu_wqya0S;1ujwgz&<c4_-#SgO43-Thn?6<)nzE3TU)_fVkv
zu?K{=_MYXI)(+l#<b3dr?g3QsoR2kW42ciV=pu1E8pcUtLG<sTu8nbDG*tI(f{#Of
z#C7L=jQSF(t91YQzS10~mqUr4hdLSASj)gM%9%N|ll7O-K}tIr&koE&Y;t`%KO0E0
z0tv{A;Cm|Bm@G-#5QEIxg3w8cd{W&?Fmtq9`2vL*O|mQyBT-3!*N*-5R2fLP1?Vtv
zGWC+dO0FMAoL36==Y;{oIYVojB_bift^v(1)0jvVeN0Xs`N87@KHGm3z)hxZxejuD
zhjK~3d7DV<fSl0;OZWrPrE-BG{pSoQ-yhOzdQ`{n`Ec#%*!eRYqN68cUsLHv2~}2o
z`S@h|^3Hz#yA^+=znC$DA8dJ4rw45vmp}5w?QF$tiqzAoSzL<-i}LG1RX0rN6rD}K
zNwC+<lTKw;*=3+c4Kzx2Ou?LH<f<;C=GFx&pivOyHhB2W7?#z-qj3!M!PF}N8=KO$
zjW}-8#;Ac91ER8K5RdbL>1<tB25aU}{;+AmvXKDLHB$&#w)zw>9(?T1c^m;*2=E+(
z^^{?qWU^sJva6#eI|S_jE-l*!8AYG%gq_aNrkma!o#g-cHxJP5e|aaL9KNo$q4p>1
zN(HRf?c(>{=V?i67wtVd%x-+acX8LjDL7~4o|Fk=lKG!>45z-qJ$Tk#4~*c{H?z>@
z+d_Im3Q&C^xHa%40A?VrM&FkBFO-h}LghsIbs>%1Uj$*`r;RAAmp;S-Jw|f?mY&am
zGr-rI9PFB_tM&Z-QmmqK4>|&UD8Eh-X+3@TK)mD>o6!}<K<hEFrG)PK_rf(Oqz2;3
z0x7`GtP)ITro6PhXfWx3A!bgl6E+Wo#6gK-)Ao!>MkPBMy^$bJ@L5PuLY<~$w3!5Q
zMx81KsyV&^Kw{QxDj-78T;vaUW_`pYt(cJ`XqG&!&X5EDDLp`Mrk@C0b51bW%MIn=
zKCX6X2e>S259H&eA~pl9d3^~pCOdt?HvYkZgXIA2Rc89lzaFLk?tlEh=-)KWpaUnq
zwCPp^CT@xhHUsFCSv?Cg20&@V*7<2bhfJPZJdXfz6f#SiIg)#}M$aAJp#j{cE6dLR
zb8F}X_>FonXFGALnibQjNdY~u3Bm0K9hK~sW#I%Y`QvwBqk(`V1;siY?9P(&8(u^n
zwkbu=s)OlT0ndW~0AUBLeoh7&j5ga*?)rhvEAHqNwE@Z2`2)Z)+bKZa)(Y0`&elh=
zJ5EKXgC+B7nP%9%&cA=}09A?#J@f2~N{hX9!|cS)5F~o#y&+!G+Q}ctnmkgBQX1rA
zh75g^j(hb~IwZ|6u>MDGbcS{q{FVnKFrK}?2Va)-r|sqAu~qQbLjMk2sK-H1=6tjR
zzbWn5fN_hzA&!>%Q;ciMf4MJrz7h4TJg6WPqNrUsU8VLBbU}FE#UUTtq!Ztc>dV_w
zi7bN+GWL_D$MfvU0ROfA^<B3iQxX*B39?ugjIREj()xsu1Mq9ou3gL+be=&iYv3hg
zSkRUOab8diQYNem=-c-J21<lv0=*&lrwXYX36udEwSA;FKiC}rR91xctWG0n1-Yd_
zn=<vaL_&)e@B=+D_=E@S)d)+Rbd-V75A>SH1luj^A4pcUcveg<(S{t|)^}n@N=vy6
z&^edrxjIR_=CvN0c2fiW9}hj^rzdsyCG2p8sXE(%Ya0aIS#L7^HYx{4!$Hp@1~6ng
zP_jyR42iuG3o>Mw!NR}~)1C+}^~^Z{QtldTBp5&-ItD<?)-Q%vV|iNfjTH)hbv>D_
z4Yb{#awcF^Gmmc9ab}&M9YZ1@*dOEL&OOw1kFqnjYT3~`D8-$_9<0F{I$alNN1<rO
z7QeeGX`A}DOm5ZbUS*B|5VCA`ej-l!!dgjvK(O7%|HI$h&$s{EJGuYtRUSYYk6Ct6
z)=&1IyT;GGafJVVRTm#Wb%Fdi4dc>#6ns!~_i>!MzdF9_|I=9J{bcwAU*wz!0I0NX
zc>0~vN1(qE-)8>W`)=ev@&x<_pOgB~oSe&ivG<wLSEf9gf7bGhI?81+J*}Zl(#y{8
zJ9;SNtG#X=FHwf<nvZ;7n6Uml02aNOE<uLSW@0OPzbvLn{0~#N89|^>GXWiX45`>e
z5RQ@9lQX_pSB*ulvobDipn6nLVD?DA=+)F1`vr0{!mHmj`v<VB7s-AH<I(ckHyICR
zVSz3%3P+cLT&JB(pGdzesWJgo<!EN0F=$aVgc+^W98#m#>)M2wJXuF7M+9-%hk?+x
z4mi+-@^2#v%BwnzDukFe7+l$mQ?ApS%0J2ys7lH?nX106?En0q7E$B$zo1v&?k59g
zmSM4l{^_nycLc~7)Rn)mR&NjhhGYbBDs|9-G&{1yZETP=eL96oehSj2pEWCVGJw02
z4m9H7$F|VlGG~?n^kAc&frL#W$`1mj5db@qb#$_|jHKI9I%1$ivzs!lDw$1bOQ(0M
z2F^5dX&Ft;*6Gyjr1FbX_Jg1!Sc|9|U-WE4T#JaHR5OTvS2Ubi2S5$h0cu@;R1swT
z{F#RUoCimV-g>9DHt(5L>;3x6QOn{97(RM-f`0nj1N`{9Zu)%eTNs>)Kk(iM{Z<5q
zxra9N%^6>#?mqZ#_~PQI`9ScT-m!!r!0i2m_hUi>`r@SDjL-225cw0z=lzlTX4ikl
z_X?jJ$~#_5{9U%J#qv}~C2b~vFemS{J<yCo`&b@he=6rG;wU-YVHvSA-(CRWig{u=
z*B<g+zg7?^+8IJtfo5bH=%9le8CxPSAfBL<-S^)EbF5|u=z*ObTN{aiBZnCyO+OSH
z&kqKW2?e^WdXy{30{+d(zZ6`d`lDeda)bMn0`0VK4_Zs@L=7z`%V^Yje$|G28_D;e
z_y0eiY`aNzF4(#84;0r5q8vELU3H#wyg5BN{)2g-?FfCtBO}z<a5K-lZxO%N`I!b^
zd!3hM-W<TwY@9BfhaIf2-U>56ux856UbCq=d_5R|0X)ks9Hmh;Ff{5mcDN~2?FZMG
z!MZ#<lEe;d_HAbXl+svLkR%yR1WUT<Ag;ZG45S@g3}8t>*9fj71OTX+N}IaWa{|W<
z___6$kS$bQN(K*rq=0Li?zRl0+i5HrQJ3XIo!WG_?xu##C3x(PWEFL{FHGg?!OS{c
z>(>bmj1v7%_b;S7{_UM~{M=RGY0~fd9V6O5^bP&!H$C*!h7ah{*H`QQ&-}9ZF$G5u
zjnKd7CGV%rN27njd(r>GnC0O6U~p%ACX@^Q!aRZZyV^csx8_s9lczo{0;qbkSwNVI
zDD)=;VnKj_Nt+P2P_Eu9XJcQ&L!xJEH|Uemha)YKw&-Xb7r`%Q>B6=kPJr+n_%f-v
zuE4%jq$p?4uh^6~)Vw{hOx>b!#7aSVfin}lW5g5cfEOqU1&>cT8eFjlV6qe})rF!0
z06}>qZM7gqQ-*I-Y9c(771TqC0iU7o*cJeYtg>zZoY2WRDb_nno*eA2*P`0J7^f>s
zcsn`?)W5XroRsSz8aBJyPIrMvFE{pW6Q!~(`KWC&mPZ>6wgz_M%4C8BVnUZ81U^#-
zi+TvMO6<koU$$%+|C^>6^mjjhn^w1f%>C!C>+u@6z6sY-;bL|>zs+{U+AGk=Wr6TO
zW1PanDNUbAvuuxL<7_vpts#R~rHvw}s@n7)t_>Rlz!Dby`zdJyQ8q=1Q-(J6C;-L3
zY7F>-tR|j;XPa4YO`-9j09rCsW6+NP!7<z*QzbtoO->iK=Fm31SQgQ;ow#PucEQ55
zGOp<Za5><>qJVzO_98&DBU0ppJ97<)VkXteVRVw;?fHbKO}mL#ta{PEDP_d-xBKG@
z^vLSn{M;LTboJ___iN6-2R|U=FpQ-e`dEl11Vs>7=6#EM`1AJ|8ws=^SW>^O9wAF-
z>R&?nGJh8ML_ZAy*V@YP8)a(QCWt~9n*zUC@Kho<`)Hj+pZ>c^(#cq_r2yZ{J&8>@
zKb`g~GDIr#^k?ym;huzs&_vod#{NiCfu_Zw<Mb)X4InF<VpKz>rV=moC`1%>QZ{f|
zW<2cZGo_#*my|L7Qv<Q69q21_G^iOhXnf*{JOyKOGKzAlgJ1#@3{^NelcN_5I2tC%
zLafyBfIoA*PuV7zyUD=cF9T>(*o;0HfY6QhAO~ztxJ(9lLKl_^Eu{22-8lzY*8%&s
zVjF~YgPkQoi>*y!=JUhDJbn7j{G%s+%8#zu!~eAL03H1FG6YjN2X55BlK?L~JXbR?
z0@9L=2{s+9$7}!~iy1MSj`gpb)2TZF5Ssl_P@)G9D_9$Ydjcli<`1M7XqGIbZp07(
zhJX=vyuunneA9_!wk*q5#pzeuwTkQY#)7<M&7%NI0YxMJO&PfE%}<$Hc2mw0)HRkP
zwhqyFw(}Bo-Jyc>N!!Ugif@5|4Joh=(SW|$1TFz^uVxb&$T~vzU|}{kI98?qb-^OO
z{V(t2{<9PMz=1OSWQ1tT`)BCypWQ`&=ow1<PvR#_d{p97lHpBmtY!i}!xzgIGDC<#
zw}gHMI!i&7;zIT9S+Eg#PWf^G6Wby0rjm#Ba-ZgZ1EXHn)|b&}1$_J7KPwIBv!OqS
zK6Cyz`0aQt^`9nNP+69D4^&gS*(f7m0v-~kq*=>@z@V*26NVOVXZSZXPR#lWH0;T=
zARR`-HwLXP1YT#5PDoj1MgC~S#&8A%WZS_yLXYdigVwANk?uG^-QWv`;K8QI1FmI^
z!}pCwhxd#h{Ox6D{Gy)9`V^3pl~JjFyg^5qCWAlltn?uxe$bc<NEpq~lQ?28ALsnc
zimg||-zIP~ci>OLN7Q-AV3)4VNE0xr?HiB2emc0_HP1Wy@((@u5Z!j`ZG3k0BL95T
z0eX1#9(w=KSGtfMkFdZq<q)XE=~CO#30Wu2%J|n$4al(^3JPJ-zJdgpf`lnPS^sA1
z>TFt5rtkdPJ>2zMRgfcf5KtOmg$*JCzF?Dqtm`u%YHQ{&J84-oI0sOHvRlih=f$~m
z@e~Zz!Rn}iAj@3ZQ7E!G#EzG-sbBzu`eq8Z+gSAgn=`aMcngWFoy2V22*`cJvZ;Ow
z89*Yg^@EI~?$A{mve&B(juE}nbAqScbQAs4&)2x+0|M|54qfIIFCV1G*Y4#{&wp)x
zjL?tS2(e&n<261YCgVJe=hUBa-Qzj1l=bIH9E<+R#mT&H79V5voul&p3;nG2jeauo
zaGkAVZaD#Yk<MKF5VA9V5`dc1fdegxUc8QgFSspL%}0aa30yC@OAJFmW9&aCAGn{!
zP9qrW-YB`EIyRm{oOLq5|4@jb-Sk?K7P7jT==EncS|UW(hf}<@p?92#*86dSQ^K->
zv$nl}l^G$=q3~d2uJ<%(Q?8Dq!x=Z+PYe#)H_(*pC)=J?mAYbFdEGdm3i37jfQEE{
zCVDULCzTUAP$#np;_6)h<A4vz{beQB2D`H|pb=aI=qh7JQJ*1TNIlBPs%%h)d#a}(
zPcK*R<Vx*r;N(f3cGEOoxw4ffsY);H=;xN!F53LwXRNzJM}0QU9kMGyT(f32y$4fq
zw)Rfi!0A=D_RZFW$z~2YSXr}%nr)i|5NJTrHVD*#6>R>n%@TF+f@|X>!=_okNdr7%
zFa?dY%euF^EEM?Zw6(4Oa~oU63^>^uNSw|TnOZhcr<=ou3SB>^Q^L660kULvoC-`s
z<N1M@%@kl}Z{0YFZOG;vm5Hp~#El-do(~UuwsZb$su&Newu6?db|xYK$AQsF{@aC%
zsk!-9J~H%;JLr30tV-KI9N~wb+r!Vkeu%yqzYeya_cvi&myVaLFOOr^f}nHMp+epl
zYjM&#@bH}g%Y+92E>rS~{i;vZ+mL`l|A+sT`0c<SUgwN2!Z;RWR?1^8=9~PK@aP-e
z?}!%(<n8H=`~><-_)Yk8bsW>g&@U6RfQ)6pX5K~_`;gzPHl^G}enQ(;rhdGN4_GeP
zis<T;mk5L-2y?<jnUKGpC>Raa4K^)g0u=*J45KcP3|L7N27ILki^1L6Q27MVf`%3b
zR@QjTP>FqCNOqaAgEDhQlhg^u?RZS<E0_|Ud+?d-kHcRSgTLo^=PaKIs1o@)`!N~i
zp2$#7(e`fOh+O@t`9)jsvI!&CjGOG5yBEfv7mb&%lONaQvUu@gzU|gq>H6d(F*EHu
zI?Uf|>*AkpIz%6R`mH<eBfjwh4guDTj9cd?07gL&X3%8H6kh!`ii`4Xotit~cg!+M
zcFvnkC)+Mw+jZ*Cv9qk6X3S*DRkBo)X%b)w)0mR+!?W2eOD5n?*P6LERT!|W>UuwY
zFRlO@0cs&DXS-<q(II~N*4E@n7V#v~;lUuBSy%-yIjI0ovw$jJ%bM8%*d{x_(-uBD
z4PAA5a?{!h@NCnKPT@oL_ubx4=%#5m(T{)nD_bfsMs)bI33~R8qqKBo7r%Spj2mOl
zuS9<x#%2U`>dWAswv+e+xF38F>)4yh_eOtTE9)P!Q~yjES`wefp-+mjBIn~Mwww5x
zQrQ9B0bF@srLh!bruVIXjI~roJ7@S5e^-wK(RU^^<!}M|S?^qPvIz2w?VCNJEn>V(
z@Pq!0*JErmIa|{du0ac`w<!Bsox<$O3?f0>deyE+<pd!?XGR2zV%dX23QQviL5B4j
z2tFII3FvbMf$gKwp<<L)M|08#@{7DcJ)s3<p}pR~(33ubv1eo+KM8$hzun-CGDTy~
zeUuMhF8(f)3CdTT9NI%7Pj7E3QKjD6=3vWN83tLI6f%w@1z@HparyxFf^1Elv2K(J
z1`~E=@xD<f*9Qg$Xxg-!c*Dkx+TQS2mudOS`|117?&kJ==iHhw++5&~vLMUK=ro~~
zchjFR9q6)d00u0B=recjHEg;Lj{w|RHpyO}Ca>$lb#$`HqpH)<n8_2MXj7uF3v?8w
z7DxPAIF}_8@TQq6TSI5-&B%c#$<7&&7LZvr{>Q8@%XAqy#cb%H19t|ZL<W{M#htyj
z5y$OBcGqm`*8rYn8Icayq(ZtuCS+;t?I~3SsBWW69W4Ln#ShWU=3DvW)8Ep-Sd~tU
zPV&}$=joBvduaK~`|0f1H;JD}e5D(1;!FIP$^ojf4?cw1SO@>)#;o;~fB>WgeWdH&
z`=d0@*f__aJr$_K*eZgViYIfO86aCHIK*e90Rz03rM8prCn=lvZyvM(pC}UVWAQ%P
zf)NT5FVkIUBj}{WZcuK<B3NMrcm9L4dmhoAvseW5i!H(50&Zp*5N176G=>6s4v;xY
zoe)6CV$XGHSr*PK#3`Swc0xxP4^FxsJ?j%fG<4~V9l<D3%;W%Ft{!O88@x0l{i0FZ
z_%1Unq~G`F45LJ!={2m#u73QjdP~}tKZF$k^aZ&a^PoqQK@Q9qdEP>@eCF<_gQ;#0
zb&9|iUHMd<P|SbN*iBB(fktP`Y7and34gxS!UYTX&hOsIlh-G;%;Y5Tjt|bz(zY&M
z@k$?m^yy_=qXhuSo&DyrZ8jYlf;CJ5TU+t%6uNE;)@BXBUws{x+Z}6*_2D=b0C9c|
z8csWFW)C)7=+w2YL8}_bQm{&vMHA2mQ_lDX5xZ`nSYPcniWxmw-v;2!)-{@}V8e<5
zG(Yw1H*{2O`V=-h;A`aY=p1}Ih3%l7WSok{gP9dv;(9#+ZMIeu`mqNEm|C`tF$(N!
zZSOmLhHt)kI{o;kE9vCOB<~;int%4nNA&&Yc2Va?pOXuW&LxnJ2f~r9{wEKFrtlU1
zx0KS4bE^6B;k$Y*8J$^>lJRK~@YpTzH;Ip8yjQ}b?<3Ps;?JQUlx^f4gp&7*+G{EU
z6Q-Ao^P}>=$Scqs<Ehz){4Mvz(N^pq<6HU5#Defp4!mQcz|)hJW!@%I{W)EleTn8#
z7a-)?IeM5;F`^>4Gn+Q3=9Fh;V=#A0fh(?k`!~n1kNF@Ns9B;=v#6-hx~2i?W(90r
zlUWCqmWNJ}Xw!ZU9Ef8BxuWX4aRgPzwkXp_RyGLNa>hqUN07bh*=z@-3gt?52?phX
zJjznrNc#3Ab51eQpOXp7(|7;{xqI19*0GwNk&j^S>?;xy3O`V{sh*Jz>9FtMK`x4d
z*Kb&FJ=e$b$X8cr#mfii;pcYqTYJyxl%s+G3ECr&<&h~yU94Y)sXub>XVv34a4Hto
zk=gn%0SRtRn@t0c*xM?sJ=oX*YwGY7UjqQ9@E~TLW*n1saFftyd>cd+-w*<Ch%m5f
z*-6M;;#xhNUd457njx#Yb#rdLq4I+pN$iLdSu^R^)q&ixjL6up?^6)(4_3DO_C|{;
zfHqrCh*R-+uAk2aTejCto7ZK#`2ShPGn;SazM*gF)ptJSrO)oBHCqqU#c!|T*f*PJ
z3O>wy0(x5X8Gc-*{tM!V^Di!J>KHN~5`Cc?seYX2zyyQWwffHIgx|p*LOe_PLGtQ-
zqyIzy=EIoxrm^pYM)5l!mmpJ%FQUIlZ>e8pR1F0QdtMWrPSJ<THN#)fe*}pM5JsCq
z<+HD+;xwJrw4gc&^a#qp`l(K!y!Gu9Z>C&gmUHw10cAlY2*Wxy&G_ICe_dTvpnOGv
zW`&w68Tu(h?d8{juV94fK=%W{fmRi!fmx@BR7rkNl$1e`rLqrv+E=ebt?$Z48nFG;
zm{7myEP_${w$nmRI;JmX4m3@i=%qu$6B*rDx$*uUJ~TXTzzw@2ufv=i6GxA>EBef|
z;T1ZyZEA0cY^SnEyLP3&hYyWRnCwtqfi`vAs52tI|NaN)yWjmTU%z&ZV;|Kj^NtTc
zqou2M(TZ0N(%$12?FbA2QMh9=X6tmf>L^TMYB`(2Ox{sDYKQRp?43<-+AGT7C>32-
zi0_iMou?-i>=>ZYSGSECXtJHh23+jT4suM1I~UI%_KVrKF+93Prg=ShjQ0&7*%UAy
z{~|mq7#_p*c=+lx$*5W;PN#1%>*+GCo<3ZAX&Ylm+r`ZvwoXvi;Q^S#4KNA<-T8<L
zOeI^m@6Z{ZKK*81^#A^d|MAzo^ux8?^wB4yalClnE5kHCT)8s#Adbn4IQ}wY(D}+Z
z*1*qmlAy@?ln@_-FOGeT^mJ11sfnZwKhBv)db_CS)D`yallfQRgot?jcn|jtU-7g$
zpW$hYygA<kf3tCp(A7G*uq&tX0I8SwMHk=Td(vKzImWAueo%hF7QF2szh39yQpp~q
z9e@6N;2-*}f6v8dZ$r>O`?5xi?^DZB9q2_u9MBQNF|CAbh?T(m9w_7pGdV}lmC}R#
zW|i&e!E_I01P#_FYAg{V@TGJ**&qW>;GmtvAidtAjI8~n4JeZsLQd|b{d>7O+D$m7
zBlmA;6O0zy^WRYiq+&z<AHAc2=WaXY<OfvL%QVuw_ERd0vZphqE4+5;BAPq<c5ZBJ
z<U3}~;m0;~21QQL+GUGq-kdwQvBApdpmR1^|BRoa6^rhrJDQugXqdrw&AE>^bPjo*
zuMBa$3{@JNc-HLuczwqyU#4y|7>tD9$L?sLdF`h_M&PW}TD{%G@p`DQkBXu~TQ+ZY
zc3|U-_=`&uv~JrGZfWbJHQSEU!J%(0i#BT6CRrONLH;BF89R!@rb%%<n%^WKYwut!
znXbKqV@44C2rz;jp0Z#cK%z}E%d{e79r1N+I)x}}{Pb^C-v;7n2Eb(3U~Qdd8toNs
zw(At$*{hpbVBH(6`LlQZ8jx}aL5oZ^+X?IZ1T-tCw9OcL?x0NJBKR9K8u6GLJUH2B
zYW+EY1~kcJr_;4~jEbErC`$zXxBvYip8j9`1^?YM+v%-6pYr&`qz=o(r<pVG51DR!
zPSCpgcyDNE;M-@-p~p6K*q9+=;&EQHY!S<Nzx}Q`^yvDIbc~}foH#|x7u`#D%$&hR
zLle!Kb1$uj@y^V|6Q}6uMfdU@Gn=^5FoR~zxtBI}oyxVTV-$J3a$!5qC@M6kt>0&r
z9M~Y9xU`d+iVDqc?WfQV`b(1;6F+)K1JAAd5_Y~ud|=%-pl322q_UB679)}}2#TmA
zP6Z{B_f47aIS{1uiZ3<WNWfdRT@Q}6fe7+a^a=?q)odn~f>aZm^}l_RD{qhF>!Jz>
zev?)qas(8}9D)l+cmN?1sG<U}3|O2KcRp*9C<Ek*0>a>D?L>n~okg%K9VR&>ZCVR$
zXO)mO#9Uc03gpMyA-IJKLj%)#ULR<<MnKkJax(YAVQdKot;wA|ai|#2liET6PfFi7
zoj%b^E0@jZN>R|<ZKu+Q0=mMd`g^H$>3phG3ZA!h$jbtyQLo#+U=|leBQ0xP&t1J;
zwD!>jTq!EFV3X7(-nQ^ADvCy0*0zB<dpc>&V+*)aDQMy5)7oMLTFd7)Q)AO?Uc0HC
zx!g9~001BWNkl<ZyE}I9^2M{cQfc5#!&j8I74w>@v1tyi-PF!KT{~#S;yF}Q8hO+3
zILJ>Npa_4QPxbdw+tT?|6a~*~Kb`6;fa$!vP45rfe?Q-S_g}fufF>wkJ~?xVezvif
zzxUiOdgbjQ>OVVS2NmnoZn~BZ*IViCR@i}xQ<=7=4|lQ}K)@+Tx6Vs;dCK}XoHkUT
zCDWEw12a&^rbZ2L=~;QY*3G}x3*VKiSv{B*#siaOO&;!06(ET3{<Yn=qyW~=#;ZbB
z)y}ok^8!b!?l*3Zfj3atT1crcear4>-4LQ@7Q)drHf^kH4+W&bl&rn>&R$oiAk<CY
zSG9eap6@>SHT~n7cloB98u>r{pDq0Lw^z-E6OUvzA8k9{Z(nd1S1Jv>v~2@*^>os@
zM;B006trN|DXp`0;VdpH4ZLjSdhYD$q_vMOph{7p1zS$5A7dbanQ6t`nbgoUo7Ze^
z=bp~({Pg14T&XnjmXQe^y({L<q{bO@c-@w5)ZMwAmoJ)4m7<Y0TUK7f31)F><X_>%
zw>NR6sPOF86UKQmz9(q$?M+mvRCrEXe<}~>x5s&?znfPso6nU>h32-O4sxV~RRkI_
zCL)+g<Zs>|{EK=hj%5u@QhLo90memT*2NqrM-J^G7<HE@X*<hjy$dLmFCTsMpYZ{Z
zjW(C@_Y5?HejJU$BygJpxx`#p(U9=SsIKJW?`ao=waNA2lw6AVQy~T8F%aUPZcM1*
zHwX#f4B)!Rr{_Ip2OXl<w#of96<Ilas>5s;&_QwVA>V(N9zuC%T8_RH?0R{{dqQ_!
zF3?$?M$qB;?e}p*V*@obG;*a<a1H25sT%pi+wbGX#s+F=Y^Z@j|AZQ8Am(9eEGm4@
z#uLuax86IG8)n>7r(>8KD;1i*zMrwb_WPQtq3ND1?N=^r=c1_4V<#>;-Op+)c-GQB
zB4QrDxPvN{3O(9?(dlqjW5IVV?E_sP&?6q+aW6GAG*Dwh16PU)&)Wt-F95upp3zdI
zOixb_S1J{5Z{J#1TYj7gjon9w>4$6g(c^3P@moE^{D}Ywonkd$q{os7h=PooWWj8K
zzJMp0GKANI!8EHa>^ER3SuQ<zShIV6{a*4eT%8U^5Ql5zY^|QvH9+K!o59T=mh~fi
zlY|{{0*5!tw6@ZZyLWAx`y|N0oizwMab-8NWhUW3Xx$VeU=lKW4opsZAdWj_L#7UQ
zTDvKH$kbsu$sGD)b}WN=;M2?eeEV@)(%Q-Y{r~b`xM{{MeDTsnwPk#OjXpc|A6SQ&
zd4w7&6`sHGge$x4zGiA{nlIy>8Y>mLXZ>+E4z}JqlN+1nQv?{q%vUaM=SroZ$NFKs
zGt;bw3dvX=zp$N)qM*n6FMwYop4Cv$tfhxC?fUW8`RH7lG3z0o(^#R|E04QzPB7v-
zADu@{vmW9(jfDb23Hni9!`tuUhQ>x}Xl$TLQSjVtnTN(CPUQXnlt2V^lJO_x{T7#H
z_CgGHiJDSd5G|3fgYq`Vn2l%hw|-A_$Nn$aLx_=#^&n_*f^q6{%*I5}Urr95KIt|~
zEXdxN1YlF!jA6pUGC|mgY+d6>tP=$V;s}Tc%GOS@_oLvgoe}{$L&I*_8wmTlDPMV>
zv3;d4XCwh#1DZFG3-XWhL|S~GK~A8!gtj0z)UnfPy<<yhr~D#aXxlYIj(lWj@T!38
z#LY#)bK6e={7LK2tQ0hN>#1n0?lW<52hEyw7j3?Hg+(6B#3$P3P^IAxVy-#pS$Ew<
zTP}{f!O_2R4p$oQsPRf7gE}4Kz4Y|*<$P+~%YSx5L9>_l)h>*8^NJPA>GXuRk=YFe
z&w1K_o*yID9uaeMrJ#B3LkvB;vi37)?|^@adHy~3@L%11H(Uueuez>X7@w%}TYHA+
z?^kv46EA+iZ*`xe6X&n%rUqGKB}Z!Lu2Bu@GEHcU@9`}b?p>}U003R)$u?5hS~mj{
z2L7rFM0IDdOn+)-tZG>*-DPW=GGZ3e-uh5gAc%YpA`Jnk`ZMtilqr1z%w+l%ro8<*
zdIqqqZCjt`fg>D!GwRnSx?@{ZFE~|;nMi-Qw6?F)$yEjP@hm}<k-pZh-e&iSuX#=T
zaay)&7yV-MK|0)jnx{{nPES7hB=}47;d#F$9tQ2!jCtbH4w^M<7TZ{^-RiH8ccR*~
z=UuaA(dJ8%iL147ymdAgjklBUs^0W?4?q3%a;`0jGoLrRq2M{o`)Ykb8620h8!I$t
zMIX>w{~!3tizn7nLt`^{T^y&mjTN5V+Mn?U#FtL2qsE42?zlM4^BOBWr}emNXR1$g
zQPJfvE;D7a1l}MS0sRyB2&{wrX8cjoKF2cZUsGM9GK^+lHUgXosx!Q%@g9P1OuUG`
z9nav4%dm>-TG=Gm2KM1;BkO~OoKS|WT`x=I%g1TCU!>^MahYYvWtp77m9laJ^a06d
zo$_FkV;_-GXMI@T8B<QU{<{+*P=Q4Ft~@}BJUALj3<{{p@#px?4wkeZ;Q)B``b+ec
z$eyFVqb%!XQn2a=jdcUGfb302UN18%MY5g*=_F>JSyX85)}gwi!)}n)lqa4zP4_o9
zQuEyPP7Y{5bmbJ^-`vPE=dQ;Q9h_dR)}_83v~F!HJ$UaO+%)@sK6u5+n2Cum_HF02
zYg_rj`|hBo*$?o+afZI5EbKG0s86?)j2qRH|I5&|a@Wz>!IesdckI{>O(7VEzd*~^
zSFX|4-GlV-vt9i7+I{r9&d=!hxoftj3wFfX^ekrKY~ux<F^6l-1hDBVykyOvOcU#r
zq8(x44ri7%VFKO+=!D}u3|zvl+7Vm_R|hg<FbxYkQFX^Et~Jyhsz$%<^tGc;Z1*xu
z+rl(59#bM9&Tj;PqgC9FW~0?;bkoEJo&n6s8b>`WS$9Okdu?IUikCqZful{s!}>h|
zjPLb*Nx$6OM=h;g^!yu#_{5n@M9lo;6Ho9hx7<P(FJ6K`=KYlOIclKJv*>t_@j^$!
z#3{PJxq+MKZ3rH$-X<~A_z*wP+`!FqH=6%~fNy;;Uplmd)~#)$2k*Uun&#Y32glQK
zd*R@AUc0u99=z{%nlbwU>YGSofwg^}@0roS3pWojGt<1r3eBl!^t3E7Gmp^x8I8QK
zJ_S9uu|l&~_R9cQ`jRXfsZXs>-I~n2Pccq?Jn?kL-xS)?(BtJ-`XRDzwd+jmCv|%e
zD}Z0&)pY0E)N+xx;CBJHq%z3JMf-6vHwA0<H+LQDdH$!AozbW=!C+k@3sqjbt#8I~
z9fKkgKrwaagpC{XVeoLio#aFCM3FN<Xe*cHF=Yb{B|I3tUg#P~8NgH87ZctOGQh5<
zdU8k{Ltgn{z{<SQ2Xujeyl#SFMp-fxmVN|nA<&Bko0omsAJQb{nq`^+^o?M(Rz{vs
zWss%1bR-e+@WHKo?;Q=)*ffuOFGc!lKhF2H^SyU8a6{8v>bZz4n#xd7{jCdl-t5`b
zRH^XX1&`9{iF5!SU%7zi&7Q+EDixZ$;4vN=cf%2AcE7o~Qt;gRIz-bq=mN$@sUAUw
z^XJc}d*;t~HsN%T9aFXcT^_&2+j~#bqwDt24_5Eyjc=diL#MCUj!p$MmZ_5CSOzq6
z1OP+9Pt0H$FvN`9Ab>DjgNDa}xE-M~RT(!7jN*=B+cgV^5bM;duH_q**MRvm=JXX~
z07PxgpMf6*p0W;5cBl#+qsFVFQ#PAux$yQ2nHJV*R(JzQ+>NW5$S@7=b~4+!gPQ4t
zsdQbVr(n=Bd^jcj$?!FPtNT3v)A|p1*{WUq^3D@9{M8k;)k~Ky(s#b|9e&~`KXEo3
z{8Q>H!0t8hN4tk>!+qQ6-rF0gVa7b}y_oUyT=xmLH&A2KT<*D)0UkC$h?%Lsbs^84
zJ)34!3ZA?0Q5qTtA6R!5;uB^R6`s5BF&ere{xaon!~M7O%=xYQdtO5w=y`eY#s}`8
z=J{<_E(Zu@Je$+g`^~uSxkS!(-92A>Us6`r2=L$sd^YkUVugyXEfaeZTLPwv{Npu(
z8{xXrYO;#F-7w}R@=Mxc*B1EM_@Eznhk9_2d>su&AhRhyb%_+2?1)poNh>uL4dzY=
zlnMpPpkZJ(EMgb`QCZ}K6w6umOkidJU?5pC5}nLdQSk|nouPP3!+OZ0A}()e2|rUh
zy+k)9MoEsQXe`hVxptsLF8EI+d*#Wsi+X0WvDl}8ikX#)Iwj1Wp_peD70CM4MH+#j
z*yNQ{{Mf>ITojFb-{R$TdOVRU)0H89Y~frgDh+hs;uUmiJR?tM*Ft~2&xzA??~Dd&
zzGq8#AOZ|Nev0p#(Ll}fH-XGEW2Anwxl-`F_Mt>pIDX82bNcsm?A*D7ilX4ot}e7x
z1Mg^O!YKwZX1aQv=)D7H_{YEQrlqTP)9UtP+;QZhuKTj1MBrEu1pos<{Ju}_Ot$1r
z32s^wce;)lkdtXv0Ts3bR6v!jX|q?i#c5{AQW;=TpaL5kYzMHco3q!%S+<dMO4HuY
z8qUd+sb86fl{zvd>N1tEYjtGOPo)Nsr|TPmXFKHB`c!ZV)4)CpX_>h}0L}PXJe(r7
z<8^E;=D_GAe{k{}dU3}|dUS0!J+gWa{eI67{ps?x#8*7=lPBor={M8Gix*_zMrYy1
zn%aHFr#S~EJ&m8@#}>@vqS8qBE?Ul~Ca^7%GW6(zc~lgQbnoJ)lVup{$=n!{@lqS_
z_swYF=6g2h9&&45VSI@1Ym)Jv`pl6X4^q)EhmK#d`g0p9JZI%`7}re0J09dp;~eTY
zzs2(!YMU{{XF?<kva6BZTog2~{$L#9SR!BWH^#4*wesQ~z@;tUKBc}T#26C{>fE>C
z?$`Zl@J*q9iSGu!!pFyIqc8e%Y~KO4)Q=|psEk5vg9?Og$A=tz!13jcF7kgB`$(N4
zWb<6$OweQk;G|ei$f`Rnn^9~)y5#O#Ct#4F3`@hF1rtY5C@R%5bV#RH8WD;;m5T`%
z4a4LT0S-gIRyH*(=h#5GdL0x`t|{Qd=@w{L)nxQ!{ju_Cwga>id));gs8M^P^<A27
znv2@{yGRSlySb=vER!1m<HI{>R#U-Ea~5*Psf(e#8qHURcW|xD0_q&P;K8L@pADc3
zeVe#-&1TdKGc)xpp2ZDK^O>3HQr{M8U9&0Sp?mQxZk#dS@#}SL-{mQsz1%>rQ9g<M
z!6s|<@4owPnm>QO(~<t0wLg=Tv_Z^FRi=ZVj8WU`2f3xKi+-~HLwc?2b3Xd{RePW5
zm`xSpS~YuJn!R#N-zYH#89JN-Hjn{RzP4-BfTFCUvt6xzXQ<y5><&DJ%@?{sL#BA)
zTHLIm8y`k&T2wQ8y4l14s_oW=SGWlX)=e*DnNOX1wapO91MGOk>1(A|Gk+#meftMy
z<q#MGKXw+O@ojH4snYSYSLw}t=jrK}_ftz-7yW$m0q*&Dn66D)yfoiIeDTsH`p$Q5
zp=C>#sUI<45$sp((t(+DltZ0~;T?2WQ-x>DSwNjb7oF`&t?`kaG;2nEyq~&Y{>Ot(
z9iJBuZsyiCn>pU^S$r2Y);DZjIJlWx*KM)!Rxj7HXcjj%*?2eViF+5_PDN3nqEb+$
zQpk5Mih_%xpw9ZVaPOi!s8SSE6!mhI3RjAPE0uzaqQaf<;OZWT0ieyS)RwxWvUNTs
z>p#3sh)c^sTPZk7K@n=wLP_*t^=n`Y@Smdxf&l1m3Z7J2W>*2MX}eR%<VLbf=}|U=
z-_Bqsh_jh{UY-{JGVOr>F8oag+9F87FG;7?FnJ<TDVYJK27!Su4<HEs&!!sEA0EsF
zkRbpk4(uFAMLL{5a>6!)CP!RE;cC@TJ}=J{<av1-fJ#Aj3aq3f>(}JPt}Y1G`U^%B
z3=k9%>>xAvRI7mwrux(8)>FPcus<S_jGkU~JOcd>G&S(;546%17*8TQDR+OZ43B#u
zCm+%4rM?AJsZ^-@3ee3=YiG}(#^$B9;Lx{_i%Nxh#zDTsymn3#HOyS*bc9b__932G
z6g;<m2(NoR;OG`xl931YgYw<Fbt@M|!JVC*=71?<J5D#wzbbvw*XV`I{Cej}e&qQ*
zyri{*S8x58-#+k#?WP3~Wyg-#E?JyP#iK&>J-VX+iUbfESb}wE0>m;qS#|o?HZ0(g
zAi6$Kb`j(HHq4~q`Z{S(vw`(#X92fb2f&<W->NosEVRhxj4-9^UNcsw`6Pfut1D{&
z5s*p7P}bnd<_dh>nze};K|D%EcjMM+di&s)^nClrysWK@zyI7W`rUh<@YydegI{Gf
zGc<Sj<P%Tw%{Ncy^TX$(T?hX`;csg5=wGF;2bvn__6J&dBI66B+5=4ubVqHxn{iWF
z|4bM97IIN3s5i_6teZ1~8k%ck`NF{kToeWMPWUow<}`6*^D?Ct9qYuYKI-Z1p`M;@
z?(Xj4p6(u=)mYG74{he&-X5wS2Txaq`nb2JhkAN@si&u#dwRP0uEq+@dT=w<%Ap(Z
z<5;?#St)7{#wtfH9rMyo^o4rguAATCd|8YUxtK1BK~RdZL0NF|JnG#dXiVY&4c?cN
z-2-Q*bfOK14_r&z_4N3@kgnjioh<y2K-Zh;OL?}s-dEe$kUB-$h|m%k0!7zde!@un
zmK9oJOsKdr#=yAh3W2i7l)F|cXfXt%H7y_bKtLC1N8X}<t*ufc3bIe>G~-p}m^EQ=
zcQg|G4`oBz21pAAfs`VksGR0NyMnXq6G_xD=xk=CVr$c)9o0Y0MQ#0>lLs-MSh18A
zFM5!enI?vpQ>7^Q!S$PX+qQPvx^*kJZ*AxH_IBF3qm!AL$A?!?rBdOCHf*MC?d{aQ
zt(~@Q+eX{kw^94{4i;MbmoMc-iyx}@c9G}JXrLK$7SQJHo!r~gNo$rqz(u9Pk9LjJ
zDY-~<n;NNU&O+L}ql>zGI(gmF2dGk1__5COs-OO+m+_)S57u-OY+`0n(X#^4UfctP
z$VO%4$54D=ASS;1?z{Qk`|i!?GLCg8cep3^AavB)o}47=Id-0ZwdEkSw083Mp4~;y
zZaqqW{9uHRpT9;3dhC6(Re0^%q&vXZj$*Nm3wWf9ZXm!TTJ&fZIBEpemg$=%6!<{K
ztWLwAy9T>e^~ezU4R5pnz-F6HV9FJzeMkK|Kg^!lCKt=%$=Wzvi>GJ*DTuV=RBTOS
zn3i@&+`z79pi9>z%2aTj_9JJm@*h4Nrnc8Vrth_N@sidqTDkckbsrt(Ym-E7jH>@I
zdm$#iaPcC4=R4n_Wy_XASuigSznp8+k?yWb6U59{hL>|uRQSP-n`vwNR&H<KMqAt4
zd0TrsZQI#J%uM6M%c&?T{NVb{+`erawQt?Z+uFBLd;2zO-_fBCwSW0C7C*vtf#)?f
z@QgVNX!DK^?(MCQ_oBj&b`EQqxlN7KG<yMU-q}Sx-JQH{>HW1MmO4kAe><_f=A$zH
zmF6{8NOs*i{}_DdyoUN_4Dj{GmoMW*iyu;%nh0wfyXMs%8l9e?4;L+B6!)~4k13%u
z@nsx;>t*M^fEeE{T2f9PW)o_BSkCk2B*WTr6dJU{ax;zRQjD;ydFVige+UY^Wa6Bw
z2Xr~PVtc?()Qcd1A`Vu{6vjcB3dRcpEQz9ml1vy135+)i0E&_b5}yX5kU%~;gD4qH
z4i*{hMps5IP9Qpny{s}kQCc2p3j=}TAoO~{vR*b`S7_9!u_-O(hDSO5O!ef%`d>~4
z?8MPrsn}aDyp8FnxhPn(en8Xqxy@XuG%ykK@b=n4p_NKOl}d$+qQaF*!Ih$*O2Zst
zW*XT!pNgVFl}f=<rYI^@6csKSW~-ie&TXcmXw?3$obTp`7T!m9-QGkE4NZL4?D@2I
zr$4`Ie7J`mTzGH2%nZ6~&U{+8qu-U;K6fS;l}4tFT$<~EH*?Qy26#^&K*%ege!soF
zor<EMzP^K@yg5qI6$b09Jp|nd!2HwYtGws%d0O?_Azs?Lo0hKX;$OXXn6`DF=cAur
z4ZCA412$mUF?-*xY*f&!AH3pg)If{Av13H0E+LyHYxp!<hU@cW-I;+r+{A&eOLG88
zcE>`NQ4eRfHFuT`l#LE>q>Q~W19#@aF5nScTc|r)gUkj2py|1Tne+V+gvvTVJ37YB
z6BGd2cY1<e-*c9pdF3E4TiL}+pWQ`k+K<ql!)N*HE7$l&59H_rh>2IMSWY)jpH9Og
z!{+16r|N@C;&;)`GJacbp5J~CS1J{m+N9ceuTZ6^aHVlJF)@$qxToe1>eHh#)+?2Q
zi-y@s*Uot}sVEw>ukqm?erVx+eAn$w+}JpSXU(~X*6r+9+G=Hb>7j-9(yZH?xUpdd
z&zgM?t=)cH<CXl~F|U~`MT3n>7(??K3!Wp#tJLKtK@a6o2ZR<im}%#{W-5wC_3s$B
znu`j}gQ?p9SYUV?KV`Z#eSrT4UIcHHfG(}%9vs6rvjLzX`aZBf!t3V8KtG91C4SZJ
z<o%m#BiB#qM}z|GtGw#B<$u;+zFpH+&{+a10S7Q+!$oW`MX%NnA)#hj3=mV*AcGf_
zPqAI#&x8{M4WERLDax9$2stc&$qJyL65vTt`bJ8{{y<*j1P<U^WNq?vU>0S;c+Jcs
z?Vnu#uCLH$dOelV4dsePWj5$#j`uU|I4~XhjCPp2rY-Atu*9tF0>2sHiuQ=SMw!LI
zY1;Dbp#IDF!V+qMu}r?6^&PIo@<hbn{qA@9f&1@I_|)Iz8+1C&^cBZ7h=jf!zs^0!
zhiTomk7?<uU9_aNi=KY<Aiuun3?Di@ZU9L(8H`rlR44Ap#my6V?j3Hl&`lq*nL;v%
zntiKUhEJy_HLGPui^w`UIOoqcY*ZDj>Xh=BWejaSBEeLuKL=3PAL=wQf;%{`&uuaZ
z0C}Ve;LcBh>-l<hy8M)}eRK!%7*Y4}OZ;lbDf-F!4|z#zCqMlBURwW$kNLofQNB7^
zb$%z>ryF-_05uyJzcS9Z-F6!-UAD~I8(4hVI7b^yZ7h!2Ft$j4<iMeS4AN1foaOvQ
zw!bV*>^njJ%ErFRB*QP;O-~1ocJPBJ|B^mRuchNzSP?Q*F*o8rX}1g<WdWhaWY+%m
zVIY7x=UX}b?%T%)3U>FWN*p1dz7M-v-fy%~ci+nw6<H=fv@4HKJY9ho$moI90MQZX
z;ZqrQ5R~l!6#hkFo3W<K2PGSQv8`y3xweEYP)QW7FH7)$E$jLSyny>l0T(-E*Z>ff
zh!U|)<V4z{*sc~x2e29g>eL&k;~v^Wy=9#+$QXo{5BfRdbh1os&Q!!Uxb=FfGv9WQ
zucMVf8yVdPTI?}3(MzNw<vZ#u`GmHK6Pk?tx-QuC;T@;eOU7!vzH!3_Dk=pX>gzL;
z^P?x@pxN3HwIts?89`rs^*YhP6JPN9e?3MIKfi~TtnB2Uy|kaUbbUr2p1iDU_y)tY
zBJMhkuS&DSnC%T1{>(VP!9jNX;=6p|eYG}4sykD0Y7^E4h8?T+ZeGg(+Oa7xRSm$;
z-Zo;JK5*TkdnFuX`g8{{9#JFw>QuPBr`YaUX7S|6B!4norOu;Y@(X|Xgn#_&ZeG&b
z$v^&=9{%0?gVcZKB2}w0wn%Nn`4~cTK%e0C-`3Vf)2H7|!{^U4)=PXv4m@PQ0s8W2
zr;aYX$FWZtOIce@#<SiFo*&BT5R>FZ0!WfE3BD$dLu=LQ#@|{R#=E!_rN{Vo@pkHV
zQP5BhZ#lrF{o%h9|0cdo+#~v8SH@&5?KqvL@<{nhcs5#1)@o<S7y4N)>5J{Zpcm`i
zgzQiPFzUtbZkzo(*(c>(zg9l@ZYr>r7a|2+CY0dsROnj53$P?`r^XF5sR0FAlaJY-
zZ~#IAfq^i6bqaJO^+A=vz_5L=bOgph$iWsc;F<wYXvf|3f+FE5<s+4Ai7b6PLH{Vf
zIGAI9(ZR++kKoqvM!xM*r=$I5?Fn>il!eFl8xLeEFFTbpG(Iw5+4$!Cm?)zK+wnY4
z0fyc8$;s<<=bd-*!i5V<<d@3A>yca?FWr=$9ADQbiH{9^$*;bBoPV%x54E&*^5ZY`
z(yG^w(w45zc=yK_ssHRX-Lb1@_Q65FcyKQq{{a9B0FVGF$!_UUFm|Mgthv)O@*ra;
zYXK$07~c$G$E(=RTkK20sH`*8-LjLmA!H0Pi^<zM?2Q#71DvKt@M@b<B->e|wQuM$
zZ~th7H|`vyXEq(8ho9TcOICLBPhZ;4zu!B=pN)Q#+HTOD5151w%>`a5H$Fa2x7~Ux
zKlI>(cCY>|xZRBHYssX2v8zB|ww=TUl$Ie*#&7OZZtL277#SXXWaXtkLU~r262F0M
zK_Aw53g)t7SqHm4WMZG$c$4}GaO&DtC>Q$ov>^>?#hOka2E=x)LyQ?BMXaluD$$D;
zL%YuN;dm&s8Ap#<NM5hNSypb*pVn>F<dWKQppls3u3I3!#F@)eOY)mQ;pGORpazAe
zfAh?8Y%gOVMpaZEp*}KvCUhcg?ivV>U6~v`IsPJTz_jrOX6)@b$Tt8&*F!Ln{BO2F
z9_5=cU_Yi=NwB9_)CGRew`IbE`@zn<UUDBa5i{yCXGftg7=*xMS$~mELd$S=ii6y_
z;YdS9?v5sqfwxE2rc;|p<&H|(uzmyIH0>rH92`hx<Lt*e^$yY-D6#h7Z7Eo!kEK@Q
z{1;bf-_djQ+qaMNKX3SeT3S14S=%o9$%YU4g?~LkZ}pz14+g&B6S|JfAE~0R-O@AO
z4CD<$77GtBw)e`~fxmh-pKK5j010Q?$wrL<$eiKMTz%t2a*T}a7RLAC+92tj0ssIY
z07*naRB<Z?811MQ<3*-^ZR%RUuN;+P0QC6ztJHP)0&RN#Gj4tT2>)<hH?_2O(f6O<
zMXO#vMBDZZ@{z$W=<6%jSpO5{sPB*Vhe0`%!BJpNf!kW!XxdHFXmD_ld>hWcq_!Jk
zgZq?>9UWU}ZU$D8I!W6U$CvmKqcuM+W8dYzFZ~Yf>No=@<oqAX9D4L)EQ~nM8$naq
zG3>@S`UO@We`7gj=m~zrJ>Z+^P?R+=%F(xIsf4zi?F5^N{bQ?Sa*DCS@sqQ`P=|;e
z%_`dv@6&cNHXd~XHl7(1Y;nh~7RG`b7<Lg1GAdBQ5~u|_cUPSPz)Gev9BD8L%&79j
zqWj1Jh*W@}6#MO!Rj%Y<c)<X%?;s_VMur|yqSG|e0m$8Sr0qu|P339;FLA2o;1asL
z_EfBSP=&12Yn8N#PRDpK894j(HXL;5<!e#JOFfil2Mo=Cg2VQGs$+J}82FZZCW5@(
z;k`sYrcc&pz&W9Of<77BMP)J5wQJY;wp(wd#fug*+6vHuzr6zLW7}y2^_H+Je8!*@
zc!hhHuUz9}r!UYS_nqSBUq4I_uh~mW+PdiB)qCleoBL?v&QJNhLtoOzXRne@QObsl
zxcd|~LD=q8m`a5=b=YCSmd%rOde(;>#Eh>F!`HrPMh-G_dSuBMxy>cGi`b@${Te?z
zdZh{*GV1gVPg3`ZKhc|e&eQ7letP0JA8<=+C$+5X<fk@%K)-$aIPX1tj?RAZ4LMyn
zQ-_fa<JIdv_=GtA+}I!<zjB3dyX{t9v}h5yu3$%g3}o!pd_ihI!6)U$7SbeRLxzY8
z$jBFA<;1t3k99JEF=`LKCS~(4F_wA%=f*|}4dovXOhX+Ot^<%X`2{&>eWzRS7m*$<
z=XH{T9S*-U@jcj|+7Ie5wyAakGN()%X+Mb#DBX#F&wRX$O8RhmC~wQj%;^V24C6G|
zc!&W`KK8EL8yQkGY8Q<2ic~{K<}6etN|Lf_Ic7G-gO$a8m6j<3O1vfm!y7-@*C+$u
zc6|EsV1VFzoxYNGqY>V4P=gVhC(Sq(-+th+%*a570crViCM%SGDkm><2UJjoP!9Qs
zj>2p?%GUmMv=c?=&LU&|U%j8`bd(xrZh4)ha`gQ<Dy>cZjyeKk%iC>6ADQ1?vY?yR
z)>fJ}?Is=^7|1y6Dec4Ei%#EU671ag3-xN1a`q1DqO)II=6y$pdDGh`=&21K(vr3=
zTC%c(A6eZ^|GaTOuX^nWzqoyXU)ytr-#+*S^?dRT_n*BE8z}6k6aOw)*afQxA5ZF<
zH_fI&22a4BWb*74XZ1I0=<C8P+bG#QJ1Rw{ab^7-9N_|+LQV`{<BtZv<*uV&(YEek
ze)YW}e!jh*SG?NCKmK($FJ0BeEv=pO$m+ecy8RIE=siuxPJcxcSE~R@FhB$#05%6>
z)^uo&MXyAA%mItmm90GOrfEDlFc>_$*%8nJ^a(96;B+*k{lTE2%zX>`%7P9A^DP-a
z9X|Fij^ao&v;o3R#trJi_d{A4$BNbS<)chv>?;{p&KD5M8T9PxBxBn-wxBa|*OK^{
z`mn5Q+%1U7*e1rGM7K~g#3|${kxvf1x_E%HQTuh6S#_C?r)VQ-Uy1Dh%#ZO4G6-!I
zN@*zIf+HG-5EvAYeiFe(0VKxcYx-*-HDDqrDlv{sA0<i*?fG^S=Mn)*G(;uZ0ps`t
zsBB>is4yM)rXQyR)EArK1>TjXfW(4)jLwq!QyOD@dUX7uMw7omhb2Hm21nvp9X}v9
z*S~iR;`-CJP=_VF8D|N-`9NV->FG!U8$pK_q{0|fr-FT{K;<XeD`6kZ%rrheLATv{
zD=%KONK6dqt^-~&0v#8rd>ju>LecEN%FVp3FZDU7E$|)keeycdxi2pB;ejvd-2-Rn
zm3L3@s^1;tAHC2`Eh{^C$;u9HY3<-g*6g9DHty%P*FUD;{NWRRW6$UG_D5e(@5yiI
zSRDu=_!|V^r8|0MN3d?fuwAe&!xneb!okmS1|J@cQoDYg_77g6_YZ$XTlbyi-@g4R
zJ^$u$TCwRM{qThz5<Zr!?BIvj?4{)|f5^Z2<1zk2_Yid-JI_PszotK3o^Za1P{cUg
z-FLm<bmDbox{LaA4>4g>OkTfEx7~UxFIv1P+9w)=jSm>F)*6h5Fy6{Psr?x%kzb?9
zk2f1@#ygHBM~g|^29fhQo^r73Ks(ki^DWSuwV<4N{i`-%%s6?cdPyEWbFu;zfvo}U
z^|Ht#(31koOkWnyuuqgz))u^tl9?6qm9#76n6l+uY_%#uhZMgjbR(UaYf%?o9;U-I
zULh@1+BP%ScijrJQSjkg7?aTevmK_20b^1Df&n^5WvoMAY2c*TXNgd;?X=Bcgih%h
zI)TIN0FFijHkmWlSU>QEjoNU@@fWWlPyne0J#wrYe&^+u@R2oca3bXF2ZOlLW&TvH
z8ReJ_6pV6l@{EI{temxl@<BOEkxc)ty^IXdl9gXiR~%Q~9w^&>7OVn2o>q`KF}Jq1
z(M{8)h4ak_dv|sb?K3})^0LgzhH6Z^u~pvg)F0^Q`t?aZH+GqieEJ2wv;Q;R^zKPo
z_4+~n$KUi)%gRn}Y3rnx)-GDo+DR>Ko%HbP-Te5!bn_Fx`GB8(X+Qn^)kE~lEr<Bo
zH;>cWZO8eAKYYS3y*tQTI?vG7y=UpIp0m7T{|LX+H^%QB{))FB7~$Xd4)dFP&heJc
zGxW;)r})L41GMg~<NW-a$EfwSqx{U4KKj|q`}v<Xe84~Ybuay3O*buDwTqUtbx})e
z2e-6!QA=AFJ+fvm{bJJr-nji3ZSOfnA08W_q2WvX&E;!RmWeL1<5y%H248q;$Uj`E
ze!ymPWdbc5Hg2G4({AE{fq^o+OzZ*-mLaftpoM{$q?Kql@{hOY+{2h!HEGvY#`Bbp
zc`UDeM7t%|Zl(?Pe*^6*DGK*}{VDYWGJyW-)<V!o067_24GfX>=4IjJ4}t`njK8(%
zEDuh`&Ms4(nqJG~pcDl8JK{?|W?~6GnyOy(e}v&GUkB}FiiCqB#fQ;cy>O0Rl0~rp
zoN^50WQEElf~ADABmhQ5l_*Whr|o#kLfct7j7w*<-jGnabs4dDNZGQ^Km(0rq?v;=
zy333~`()rDV=QqHc}GTpKj@3ndOp~DStJ0tUfcl^@4z{$Hyi+Dr4mO+zAtC-o=9&G
zK)mvmu|Jh9+ArFA#;)^v%FvMjA8+BLf4y9$=*Q8AHk0%p^gl5%PPg55D=%HTj04!p
z$<XKnUd$F<dF(JR2M}f&WP~TA$Yh5?b3qj4M(pcC{qtX3ro#hY(0lto=WTmF<*mC0
z>9vlN^y)kP^wRcY{OjKz;Wb+i^RurV<dvI0q7|=v$p8FOFF*NW5C8auef-FpJ^b*q
zUA$yv2QOLK$=`c+7eBIk5C3r8UVh@mUV7@K59sHw9H3ur`iNJ(*2m9pJ;c9$>j-c7
z<1u>q?S9_;&Ix|AYmm0>8RVTGe8wLhAK}x(U-QJZNl&$xX|!{9U1gB5<;-uw@>zfD
zY{fU?`h;st%-616=R3c9CofvOSo;VM3R49C)RxMEY8qQoxp-b317;7|z(3Uo>5=bX
zbMguFn4M<Fma|X%?tnoYYi>MvIi;XK5RvWQ_oFSDbSSoq{Q;o#vZVBTqE}T=lx^@W
z!7j10DdqWR*a(Wq(WvcY>Jx+mkW-*FZBuUtDMZ@{wxsrz+HOL>*A2s)G33?_8W6#Y
zfth2rzd2)egWj~`MU?)9eqA6_b3j9g!5qyf1(|uHcY_kzkMw7ZyUdtXF*!K~d7(HG
z<7P*4nSr_voKdnG87M$$gJ3VT0)I~aD#ADz>g{7&pg*NGOB<mu0{Db}OZh^_nA0oD
z)MOFMmC3#2de%Om5BD1=HCy7cav~38Iq(F^$d1t<H26Zy#4DCBr|CD}Od})1p-n48
ziEcT$W)wm{PTpFZ{W$XSDt&?t#%yvU?3S|Q5#=G~h2~$sQ8u3Sy3~($Ep?-Q^1&<%
z$h@lv`bWKF{Z-vY%7TUKLnY<^1zSygs1v(cV~i8T#2Yqj;G(G1vUz9{s7D{76FP&8
z)P9JAoYCG1$(f=Zk#EjMg8jvD<$RO&<NvB{!w3vCz<0E({Fq3Cyy#l=W;~OU0ra3w
z(U&`WvqIT6kbl)-umI4L^KED?8U3IvR5odx@;*1(ZfF$c<z%k*C~_B)y}V0fN3a_d
ze;Ihrj!82Qli8Fui@!5^4RVR?NxdT66prmTGKb0rW;4RcGVYBhb?nj~8g+)@ENvz2
zVL$*S`Etp?w`h=8UQjspofm#kR_bh=jEPgg5{=C1Bh#-Nv{D{^tBe!AON_3>L7Fa*
z7P;i*URKxm2Krbu7v$}2&<rLsAg20gU-46y%M`q3>v(>1^+7&?K5;xqQ<?Kn+Hqi$
z04TYXf`lB+7cX6;TW-09mn~hUG{k;FP&17sbeS0-R8igL`6<(z)ywG8+kdc8sXL{^
zoa&PUZGl)<%GsmQSLXbs9UP3Q&Xosp+MdEDLR~3Mu^-V-);FcJIzJ(DC-!xS`TFE_
zy0iA?l|<G+nM$q<SgER9Ku-8fcy;_J%U0ILN5&?Q$E@w3y^1}@wxF(9rl+IS-ZJ_v
zZ`;uqY*p3DCSzy|V;8pJXaT-*_HBIE^&?(FtCsMo9^UKR>^sN^`ceIr+FxoXNPomF
zi9A*0jwZAT_T}L>ew;o{UO0YyoG#b18>2a!MOELxwwUTb4~a^JopcBcVEHn_0z>J5
ziZrpS1H$%>0s1d@>TJB_gNC(-#)33jXHyH-SPf4{o<=l3lCqh0b9J=?#{Uwzf^4(K
zgtE(nf?%xmexiMpJH*WODd<s}rjTzOEK>m)XU|r`EFeRNfh}(X$TLX8w-x%uHWM(C
z*fxR_XX9E1o~WXH*gKgFy^%(zcjhOae1dPDKAkUKxL|Yy-f;{iV+|w|<!XF6gAKCE
z(C*}8?4w-090WLIW#klq?Fv24o~*@0b}5~Cy@v7cXij`A>N4<D)_*87#r^WJoA6`S
zl<Ek4m-wqF>kS(=Qc)D#*LMhPR~rNwmDo}!2Tm#l8TG0N6hsz2Xj@@lwoLA%|4ZZ-
zWo-f=lZk-@##W>}vC%-j-v|_}?Nl$yA9^IMC|rAbp(Hj;uHRHXX**dxacCWUkJ=2j
zQ`d>pv9;?Y0D3gtf(=F8Bx5qzj*~Ikd6Zk0Z?I=;*ZB@JM2oTHE?{SoCf`5GB!d&2
zol>SLkab~|j7TY9)BperokgOdF}<D)Fc-WcvHD-QThg!4no~L&1DULC@T1OxVTfrZ
zPL8y`H*H5>LaVk~@821Lw67$PH4g?8G^vePAHpjdOOQRPBQaiV-wGuL<_XJyH=|4W
z1=<MiW%U{i75k60IGvIHW6cCxL|LI@wsrxU`F=oLb_t~v17qadWRH#mKuWZqNISV3
z8a$lblWXZ%P+KPA3l}c%Ew_A!pLp_#gx0h^$Y=_ug*J_LRMuV&xQTFcdXPG)pK)4u
z?OMRh@P;}e=3KoTpEd-nY#duTIXW4jTETW)Xm&i8>lex+0U7;SUtorzEXcsxQQGkS
z<n>AV?w#MI2kw6$&;zm#`Z0a@Yi2sWuIu0aWcu^tX-Zv+Eqg}ua&_Z34o8UzoY+qy
zPxbRy#aeSdLpzk;&^i2e{%DGEsjY`H<n@U`yu=set|jd_+fMyl#;<#0^ma>FHukR-
zy?in@Bu1o`=dZ_d5hM`u6Z`PKfLLrEY4E`p>_Er1{f%t`K{3Kj8H1VY$E(PtsSKT=
zCN_ppm#_^Gm`DLUqbr>DLCAy^&ls3G2WKj-_3Qwrpy+4_ImcHf9|14OpN`@{i+-XJ
zL?gy_GKOUBc$vsQ3LC|^e7X8}0wLw~Abpet&{!wyXvA8=pa?Q?zk{xo-Yg9m4n5)8
zrfb_;4fLn>7{peWnb%QX4(!W#{y|hem?!)gove07ct=75ipuQSE(Mzb+8=xLQNHCn
zxA3J)7eUs^-$Yhs$gvE8-I+a3A+N+?X7rz}o5&gOSpm>H+6~+{)wrOPIA&!d+9pFk
zo|d4qKr4<dG#zLUY%Zu(>v&d!J*Q(Om816Us%8Qi!S&kr&099t-l2S`kI)vQ{ByF3
zJjAkI2Wi<PCM329zFwu_X%ZVYnJV{zU+34Ojb>$vx{t9&$8N@6kOJf>&{+O)eK`Us
zl_wgG&;<QVHEy938#7MMMu5m4r2}O}+-O@U%cvdCZz!KDQ~qI*1?t(wJd~gC5o{w%
zm#Z&2F}_0`r!J74D;M-=6a`tJ9tst#^q>uf!m04B3nbhL+YBsNMphu`@Qn0~0;6*d
zf(ZkwMEK!}0-`Qhr9<Xr#*+jo!ulv*aTMM_+`vGEdfKx==|&$HG|^DWe?$32o{V-+
z58ksD3EGW+P4-Oi<PvPoeFz6%y+bhUjI&K?<it%_U%_^O2LCtG5c*E+I_k*Wel*+~
zeF83~<_ElC=&w}P$;W7~%m4iFdA|APoB4?+{y)mT9$K#ISbAnHqzef@i9rb@NXmqi
zpiIgj6B%SuW@l0c8P5?AS&nQ+h{$}AL}XqhDKbPBk?}%a#*syYh`20^)%^u`y1S~n
z_gtRv+&Od3-rdzzwR`Wm=I4F(j^`isW9M?w12`T+Ri7D*>fW1TmoW|AD#19f+)$bF
ze#Jt)bUrrH>7d*EsyumZiaz9^o;z%M{Usao#G83~Ec^x>R=rXmbqiRFxCYN(xZqc=
zyjA0Z)20E(YIPviilH$F{|WC>JM}>10^@Xl1+y?_)L~q=OMZvCTCHU3=J%x!;%UUI
z>EOS{S&RiwbKWXbc~8$QbcHy@Lx402j5#SkaV~qd6Q?6L<ps>Y<}kDD*&CNR9M-k^
z3;0KUaTM<F%)t~V2F<=p%)5^pd`Jft0rg8>M!58OIZ)`sXJn?i(duU^Y0+f%$7v_?
zR#PL<<5@Kfm<yPq2~hJNYVCRDnHYYUll5Xgt%Vny#4wuY(->@Oicy<eBY!kM@LH*V
zf!{=z)y6R_p5(`T;0bj~*dv#DxS{9hgI$i4XBQbdTj#EHtY;9v;&sndOf*sAAYAa+
z-TcP&>-NG6FZkofj}t?FL-&d^`>JEsX9|s;E;Md+&KoUz2>2S6MJ5E#cxY36jk_`o
z{WbvgqZs8WrXYL_d|BPc%_lj{0Wg2?ivS)u?gtZz5nhPLyX((ByJOq!)*t-sZ;th;
z7RTM|+)kQ?9|IOV7oGUo@t7v>mbAbTo4v-NZUuBN=QzLcLr5ICio<&nJcdI@_>K6C
zy^B3OuQ9ln^|}5@ZrO5`FL>cE3)XV-zB*{u`AAH}f8=u+Us;+Ch+8>>IqQ9c_OiBC
z)u$Z;Xyz{cmbnMMDi>raJ<RK$x=oRxI1VtGqyvpO<h;SCN<N92aJgYFUclK*K9abj
zuO<$H4|RhlnS7XFGAA#2G~B5QP}|~dkEqGdZcsHqTKYzx_VZYi7o20QCO?z2e7^f@
zGOFm&;#tM2dd;ypEqu{(As!#%$_bFU*IT4>)JEPxLw5cK%oQKULAY3Fps&=39RJ^P
zXJGU1zWdIee)<{v@WT&%HQt?nLfdm{imf>U#W?}ulkK&sv(xZPX=K^gBeWrp2f{D}
z__1qb2vlTVbF6jny{b7mtg0Z-fPXhOyfUqoB^HM@0HAja=coOLrK8UmE?lrT-gtv_
z3!WOk3y%_+5F`Gov2iv)T$PxxjanGYC4SwtKE4M`mG>z&VKN$Dn0X9ppuVh%<~*w&
z*!W_;UGMAOMZCiJC|SoOJ{w~eRYUzb57sn1le(Se3r}4GvGH`MYv&xpB(dKp$Lg)J
zP~Ju^^1Zxlg@E~OI&$x%+Db&?0{bx51^>e2c;m&zCu?{X0YR1`rvrBZi$t%+8o&ZB
zrPx8-9j=Ky*_;Ohi0S!MKzfeY0WocUVQTV9QAdVl3?8+K!W?rymaN0_eaJU(s!b@<
zPxrX=y_o15Wh?_}2I04<sTxGX4MrC@=UZa})T}?m?F)|mKGxiF4z-{aDIV3|YAVf2
zG8hd_KfxQ_7w=rZaotb7bjp7E>5w(nHAb;hLiU94RmcDna7G*mPj#rHF-;4_h@X)c
zm_Lkb8d6P|D>FhY@|kc_`MIa6F4Lyu@N8J8@&-KPmOXeIfHN0KNRm=m?daKOckb9`
zv+;X(?<y0cE&`y{2@Ow-)Z;=v;Gz3<e9i<x`B?u-3r|i=;)eG6ivWC%{NsVNY9%~S
z_t7(5XTyPH;z|3s426$vt}Hj~(QTgvp9K%JsH6u29_@jwMev2`Ydt#u!Mlr|jP~mL
zLhJQ#O@~1w262UNxL=k2*yE9&?$HH?xb8k@h09+XoQS3*5*EZa(qwM>vy+_!)$z7(
zrZ`W(rR9O8kV~1P$T*_Ni*2Y0S~+t8vnixO!X~?K^KXJx&OH1`JRQe8@J5)2Cj)#D
zd!?7gMV|KX+3KRjZy_z!)aDk>C07$>)+@q8<7@R|E!-U8b9~H4%%|o=FE}+__2a}D
ze~T^c`^GEU5a;n(IS$JBK&P*;`lCnx@e@y-@S8VpI>zk>aPf}#xYfAMO|_O8Kmci$
zQ_g9vf%lV(^<lqqrgngO(md}$g(f^lyppG{KV9pSUwMZ^e^h<6)^Q-dVU3_pkzeT`
zG`{Dd+0FdI`3rve@@1;0@j7_6U1Pr}O1YJw7Z#o(pNh_yv!D%LO*$YJc&zUA-m>1m
zV4UheUSKT9ImLlGnZKw_dFotc9K|ea3GESc*4#KAoM69<JcE9e+l3RSd963ZUDZ0}
ztvO@;fCJYxUqh}r2Gqg1;&S>D)o{SRRl7OAckTv0F&^C8P-9w86f<#>B+6u*3P+7M
z=BSyIJczY0YRIlaQx2S4=HkN=inTC=)nSlN<Ass)j<H<EIbjs;948EBhG>I<B^UaY
z%$y$}?!a07;d+*J4h_ILSK;Kjmh*e;R&S08eddLa+DBQ5r&mO|>Ptoa6>)XL*P3#?
z#OFp&G>hi|r+9SO*iFZv9{OBvn7iAxYgg^msZ;jT;ZJRi_ZRpEI6)4YhC9;WFrgl(
z`?zsW_>n)1-?U$I(R!ZrBh;J5<L0w?Mw?K++Z-1!)B{$4nn#b(Xwiq}XUP6MCo$i?
zecQL2t=+wQS3IQeSkmB4SX*2Z>yoTB{+;K=46cPR1>Ss^n#T~tX*I(XW37X#TK$Lp
z!Z4d~TxbYy`f&H&>m#nSKADGgQGSC-=tHuxRn8bEdwJIa@Q&Ww^=imvEgpNI^WNjr
zx&pkZ&Tt+8lUQnK4tq%zlRnJx(4*Dwxk2>$aL)8a74R{+^??t1IMh(Tqd4_{-3}XM
zMV`eRU(`4e8;}nbG(!$zBC%5=B)oYqZ`nlhqFxYxPu<uUu$p`?L*)T64LBK1G=+vU
zY<3Mt<&MRZ#2WgAFe#6u3gZimt3wtyUm3HD!yBsiSd@;rk>%BWhUnd0{ZrqTW=*l_
zTVO?`^JXfLyJrB~G=I64Vxb;C4s}Lf2A=v!exNb5B<-7T9{N*Ho$x>Y@ek#Z!7Hl<
z?%=%@?!cp)pn)QdYniLhC|6q-J~aK}8e{FPO*Y46Z7W_d1#T9KHDMqmg~&SMd}{iU
z14M>F%wc4~ehbAS2Nz$z=$9^CZg?Em3-x@feQ%-dxPEew@sF-u@|<7HaDB+ysJw`A
z;vOgif{pJ{9MrY=Hw<U(Ilv*M2Tp_scwVR^cAGohXWY;et;OWLszdNj`$5dNj5*=c
zFJ8U(@;)>luvT>gq3I8o`Ec6sG)%3x&Np#j@ZS7M2te$L%p6J{?&}rb2rl_K2W_~8
zSW5_1q!6;Pl3B436_Qqb#`7j-KdcZVYQ=W2>+cIwn;v*LP1*|0z(i`?Q5@vV2tlj~
zoGzTxVyQ!ba*H6f{%U;0HEiU3FZ{0>L{8kGhfSGGjRz+@Xd(nW4C&%%bHsb}(<)y^
zq!?cFtw5^B7uxc(&Ydmq%XQ#DjL9o)BJnOd44jJ}d~XdNo-8k6)4O`@n!kGbReSRD
zlOzZX)4dM7PaIAgGRvsXsF{y-=o%;wAx}LATAkucXLkNHuRALq6NA*<`q*l{2p+AC
zat!yU_=8W-EJnA8tU82GI^4f^&o<kw-Me=$xlzn}U$EYr4$5)zA#)7x?=TvT6tAhj
zGKd5~oWc3XG1+LWUFP$C1(QZSc6V~@&PO~}K&Zst4xakF!kW`Oz9wH|Z8J||H|aG)
zjLdCxZ9VU#Yg(i3*DdB%YvG>N`Kx!dV*orNj~YefM0t`QD`9u}vj47mk@}7FDr~zt
zW3Q9k^xwMe&16?d=79SI0LOLG@HI6K6<EhLqmpDj4}Oy~#w?pX+*9)wqnVK70{&q>
z8cpysd&CWM3c)E}`UJ;=_<4}n-6JC~R}h1BsRLToP7P1=jj^hq9ssD02@A!wtfO(=
z>&b^SHav~okxr9O4aacIWD9T+FLV!KmEU$haw}CY8x=cv4E9Rh*f<uBXu6>oSpPpC
zKD6y-<DY!;3C)2#l&{_AH3Ioe3y`&M5?2n7%JnV|f6;@8=}RE4Yg8RBVzG}XpB@gx
zdbJihAex&sgTG0~V_%%3=FYjB=cPYRYkR=s?rxVaUABuCU#IbHEa_y!b%w0jUh9Im
zCw&7mNF#VxYq~i1@{Gxx&_D6_-iL%Y?j}EU9svVzyMK=GYc#&%Mo-bTV?BOc;W+f7
z?)RJz7O&CMx!xTn=Uk<k7so?gj2I}3ea<k_ybhB1=6lNB#sB~y07*naR1MBE`3J!Q
zMkyZo1^!2(>aFFQ)>HEt<ViY%W3=$m$BmNMiX)SWNK}Z!TNy1EE`r~)AtU%^48esB
z3u++4ROneqgQyuNHV4>5#7HFRz#TV+VGR8S0=aC)V_rayX0D7&d=7EPXJD6RsL~@p
zi)JN78PcY4_&meyC~MepJT_{hG1a7<$B=hv4;Nk59^?9!I&yQu`goCNgT@+?Jl4f)
zHh2@?F|Tq8)E0??#baZD9J|+*D{tAWuf}ins!?nGff04ASAEU{SK`DW+yg?$T<5v%
zL_u0Z<<HfP`DuPoJM)*%2Ci#E88jzrWwz{L<Kcrm00Bmyd7s~WjJ_@Wdaw9F+*3Y`
zdo<?Wz5BM=Z0+`)JIN!hsmgFHc3s%SKk4q(i%l`X_QM^r=N;ybnlJ&vD{||64|ym*
zOAbKDxm(}OC4&29tRu82gxFUPdJz__a6)Z<#HxK$*K4c6SvPfx&a(lN7eRE+JMPu?
zdg4lYnhdCYsW8Y|PEAO=q>lNmo5?g-1n~+VTx;fReF9K3ac&zHS_wz+aA+Han2dq`
z1*12BbWe&blN$`Ld6IF89rGEHn4&P?x7_9C#<__LJlGnIA@173#yGn1(V-SFXU@2z
zW*v0xng9n#Fm2A@G10#^<jOBr#t5xmnk&s6&09GGC)`6%0NcX3_zDjNt`oW@8fW%w
zVHPf`PG%$5l!b4&CzRJ(9T3+9ZTDDd;&{~#7G~~WJ^0GDn~mMNb!#slwN{AB(O2?Z
zfsr=xC6ULb)4=z1hc*Gy47~+$Q;_a6fERTNY|A7xHglv8q;B9nd&Qs=YC}DxkhCu^
z`9Hy?d?BMf1}~b5XMXw8CA)Cpf|YOU*)SgtbJKI;H8~|c2{Xo6<y-KG`pmU<{bE?^
zIOMd3sf`_QP|b|pP&W`^|9-UQ7(>i^frpfPxGP<P6IuJR{`YZ(#ZF%!hcBgoOXC8T
z>PjAK8UXJu_V71ir|}qz&L+I3Ip-9kIM7@ZZx9c970`o+P49EfHyj89u)rmX0Ecqw
zkDPE5U<e)a+u4>()=%SFIN#&dxpy%n18O?0Kj%opjXZl7UdQ{3o;S{&KL@5N#n4t3
z>^a_5ZdD)5&xXTit844?bx{^><*heo-T0<>QYk3J{6rH78fJe%*xm35jyT~t@H=@R
z4kdIzr{<3oGDkqLQSPWI{HXPVf3b-y_|sQ=cIC<yJAL|e#^yr;Z3e9d<$~)d{wf9>
z<3Ov<jmGZ>%(ijh96;X>?!jZA!A?avTw|vkX<#CU>MI>R2dAO?`e=OOCJRYteG?Du
zMGa#5YL6f8-@9*{ZT>dTC>YM8wNdqxKDc3FK8Qe7A$Ja09O7_1$&YJ}_aMv`&!iEt
zx}^_tM)iyblEvqq%W<2bOyom5nw<MGaznc8ygcQRv77^?spnK*zHvU9hdmkbPrQgP
z<O`o=ofg}2tOdYR>q9-=4$EQ1ss(r`X~!Nq9_H198k6+1aGTeosu6Qg|0U09r&5ZK
z=1%|Dtq7*VlweVbO--}MOE!ok5=-(^`dzV^2N!&*#RgB34FPnK(36w#QYd*Yi;1y%
zzPDV(g9u-EaRI~+G<?@23b2~Q*yec)QzoxsZqi3^PCh#3aDn`@F1-4dc#|9Ct1k!>
z{%8?r;{cyUeIw`CL^3eXoiISH#G!t(%R^mc(HKc^8P^8BT0^6}V@-7L!B-D#v)$O8
z-Nr8dA7kNRIM-y2%_wnIwi`TQIF3E3eBez;R~!dVpi?cZqY<PT>0UUbDGjfxY28aY
z9uYJTW>6sTTlhc?$fNj}N0VH0&m_N^x%r!KzG3IjpLc!MyhHR={sauYpEzJ&aa}BI
zae>?<loksx(Zjr)JP5U^u?qXJZU|q$@5pK0C$8Wcr$DW-XPSHbG5|!`izj+rS&4Z>
zZxNrmE{J=e$znMB3MLs<&oOvE;Hr}sYW^_~bHZ4xMc1T$>A?M3jJNV64Pzfodokzc
zFXTMVR=LnG$ko(ucU<JZUd5b2mUY&~?Tswv>o~ZtLbRp|MS|fb4CAJ=A_PUn`YMDR
zme>IBoXkqOmw8>T$)wXf{0aQd^Ty2&H(W;T<2c_Pb{fA}qe&q32y>13bQ9gvkXqfm
zw?RWF<oQ<?-H#>0<1&BqnQ~m$O)?l?bsJ!>AC}J@@kR+uM*0tq8pfd#mtav36^`IS
zH-3D*@#Y(T{``49{Khb7Qm9J9-94I}xA}9y|00g^>9odaqtSWl49cFhR;;RyHVo1p
z>#0UwCYI(+^$vQsS8+U7uO8m{W#8tn<Y!rE7xxDb{^pzQhJTx<FPa;8jNf%#RYELi
z^uXRjhm((i+g0s2pS%qE*H6?C@3D-8i?Gr3LM)z#tcWe=i?2sK-2<`CxVH<J=$VK&
z%$<BpHGmF+2WVP*Jo96oX+0A$^1*BG!nIl;1WCjm;^V@oRk72qq+Zrj{zEIGzQiS0
zK(&z3AZ_WFH?e>1#&1|yE|fPk05UdJp^ijofDKRuZ4F%EpxA6Ka;5LiXLwA-BfuU(
z1_KtdE>1mHa#3Ju^ka^4%fO%EXZ<FYdD$tzFS0;|np&7J837u(qJ__k-)l1Dm^WR?
zOQnzpaVMPl-lJ=%MUAeKK|E(K*3UAt(fH=uSfJx3h51_@IDQ{*{XW8hXMJOWdR0ql
z4l(!c-Fv>-Z0z>!+auo~d3C<@$1l`q@Sqov#$&F@vV@Twv~jh#G#(m}@;u|j_^e%p
zDHbs+(G2A2hPdcOKnaW|-ax~?7Qv&!#h!b4edWp(yKw%3XD3m=lo;qz6b(40HO8;h
zkq<;kr}#dJWd-q5Vy0oTMw$kb4@mZrPlJKf^QS{f=^y(9m}8m)nC07V=`iJ)*=e3g
z4Y_|UabryC+pzZ6U)XTG;~&X|LNW()J?LHBe=AHsa}1gjy<Ya7^EMq;^#t~X*6DFP
z%*S38So%K6nB-t<?nnRBEh23~F+d>Od@)ANITS1REEctrorPh{V~EtnMaD3mfn*@L
zkSEEVa>cl1KClYRA7VQ2Qg|jK2CmF0xQ3054%kc~8iR17sg&pPplXdN>-my9<%`jD
z??A(5Zp7$hUl~O{r}(wNCJw=)dbmRkwARwvBqCg)cTDGFQvl5<4%P&mB9<6Sw9&eQ
z8o91ZmoNFn*I#!Cib511#E1TZwGhZ^qlK`#xunNC2UuG)$EgX^+`u4ptA@d$sil!m
z(Ma_iUe1^+zLir-Tl9>^A|~-?ufIafYlUcs&87aBKlti_Z8lr~^PfK*;&VJ*BdtH_
z9MBj)=lvoM`qbpDu8G;88RdpjC!9;(VADlkGJi{-g#V^>eRP-Chw7@{FAnn|;&tRU
zpN|;JN1B5?3ZXk+q9epiK8b69NI5{`;F|gXN+vuL55r5JfjSHu{aeOF9SL8;-s#vl
z1`d`!+wZ~t#doM5S=r6sG_nd#GiW2pNTCuYNMh03^NKScvT%HfU1aBiiSimY%!&OA
z4-+IBK#E2YSXRbXt^ywr3#^lA0T4BA5im=mdrLfpgPdDjXMWa)8VD>+(!3gvXjB8~
zTUcLkT9;AIxZiLy<~FBYYd!6r;T=8D0({AbT3LCpFqA(#{vve37PyehQl9<6)OJ5i
zhwzLTQ6nGMp6fCAzI*qsZ#Emdd+#3OHs`tNBTN8m+d_0iKJbwDu!fwc+Ilnr468ik
z!AgB=U<DVPkVg-u41dDT_c3qw$1!H<9RbM;f{QsR{3~8p-b5eCHzj-Ptt)o=)zkj-
z&p&f70PcG{scX@@_HM|7|AF;&E}ajSOFdB!jyK}0+Z5lmmT9kC`fje7a781hH4E!0
z-^mw}FLNz(f|m{4SM#g?)ZSYd)6gge)u8>A4@F!z)<c^%jH|ieKk<NZ41gux$(l<q
zC&+97xorL(xTd-rz8pXMBz)C<1htR#SK3VtR&i^P9ta3%TMV9KDHAo~y@ta@I}{Fx
zhVcX0dvhgLFfZksur~8WiD>XdM0ku01@Cl-LHZ@fWT2Q^Qs#Z;ZivyFfD@-_viy?=
zf#PA{E!0~y_~b()NWD`X@LU{C1Q_NYc&|Ds)Z`h~HA=598m(!WLe!YFXl?dhK8wGO
z&rt_}%!xe44aub(q@Qd4<x7|S(&bCV&2Yc~pNNr%x+a}5FNwtZSdLB)mTv*e%tQAe
zacQ+iDKB^{H?N$7l#s94JMmmOAxBG{kei;9Ck?a08_c1#kM2{RDyqBNg9l&PcDwOg
z@h{JY5s9-Ds5%$Dr}NIQRga2whB@%dx%j?u#GI3FWV_Y-!4&eDRP`@d!YObe<LZF4
zGZPk~996!FH=NH}DnXU8?Ch&K0Uh=2hu;`C=uOBaf7WgMnKa+;5&10rku|DyAiS*d
z4f$!I?!1CMa(K!7zyNMdk03z9aV_4`*W%>j$9<zsG#*s5KN2H<o3dxYa;&(XlLufN
zyf7?zVrt-JUda`)R)zug=)O@}{38#F=eUUnMvya`vG6e9vR-G|mUKdW;J#Cqn4fcc
zt8Y1W<Hy>KV<Rpkgh`tD*EwCUqI=(~aH}^We)pA_r!*lCOYW$xjx@An$KTL|Z|NR#
zukV0Abb$3&yLiXT^HB4y4IPfdpHMR$1<d{PzkKf7&DQSUzsKtwMpp_wh#*DjDmeIX
zQx$JP&0s*{pklKhAy*FTeyn|h#9He|oR$y91OJdqx#6BBwUIw!bnsRAa#x00Cjgm1
zX1^?n6F7!F*-Fi$0P)+rCr|#1q5$X4I4Tb5Hgh-Jx59(9HH_2)dmQv!zt27d9IkpL
zZ}5~ort7K5VEqI~*2X#_w}}X}<@=UuQEiMzIU6`ha-qCR8J@*)+Fwxj`cr=7oY4I&
zyc#0+16E?wngBC#KzuQ`#E~<9$lY?i<5+aVp!F|_0lH)`YdNO5%tbp`JM=>{-xOa=
z6OclQX$jS!wo%Y)GI0QD&3O=XdX~PhG706w)MQ{KUP+B^+{DIOwK?Mk#G9yGQ%ruQ
z@wtoA7FU?XH2jjo0buLjiah?H_PBsYJ=>uZ4Sozx#+8Mw{4(O1{FWPqvK3s2uA)cI
zlU>Z50Tw=Ppgz>=HIBxX2aHP1+W1R{VG?-0i&L2#cE-%1o8?NE6`vO_T(C=*E}0)Q
zhc~TcJ-TROGC+}hi??V^BzWS3HuY=_gXfE<q37)Lv)B0Y1WJi5NW5A#<hYUhNgLFY
z{HI)k-EqB`<%1p@YjO%5uWuec^v!l-AAkID&jazISK;xo>NI+9HBWUg>jM{IclL|E
zxW2jP!5SjQoac=5DF-b<aJ}4H;S}#Q41tw6-0=sZu)oL!;C<w5@VnL)$?&8w*CG30
zjMaSsc&(9ZZlFjQBYSXL3q}PT|HVLR6Yhw6%K>@VZa&1mUCp8M)#imUE5||;cul%h
zJ22n<>s1yFg-lFlDGQ=AJLy(gVUOcx8s>}nAaBO(B9RD54%$HkgKK~X0=3Ox=A_3I
zlC`!)9XzLs$HN7E+Y4)FZp>3aBcC3+qOq6hU=t-H7N_{0UXBJ_OCYal6Kp1wG4o5-
zJja;7-Hdz>da#FT;SQLDOk+^pW8y`)NWYYE@jf=j(xqZXC}VFxT}3r$*|;anFcwOT
zds&D0+RZ<^^O<co8~gH$FNrJJaM`P}9_k*o38H(&G1i0|ThpDm!5GBWm<Km@;v=e3
zFGNV=n8nHDS(%&KgEsJ!>e|g2zaWE__zbR#JJKbeQk-j7uiC4pU-h4Vev-1`sW5rM
zxqW>TpK!<I-sD%%26-0^!Ur{@>Cs+eFOj)(uL9m86mQtA??aua>vZ6N`R$pGhr{)r
zy@gv+>bMIy<EHn*4BGep$@>)Ob94{(3F1aM2qaNfUmjW4#EbZI)V}ql)I;iD>0?kK
z_<+~&u^J+?$rNb=V~8Kt+x3~ryPMa)M-PjdPm)cfnS^0(6eEWer&|+_iRd&E89hH^
zKKwas){tk$JdK@5UoF_uBcse40-9?u1cIm-k$i}2XcW!o9-CteWZ^VYx@#JXcB*B`
zMRC$=jd-+?I_0YxxjE4yZ90y%D<(ZetzJ-{@+V*HP}_mK7$48DvDFa<jj&u-zzblY
z+kywUh{#-f=N(?>&!4v|Z@rbcb<-+8g15-N?A4s-F@MA>y2Zg43q(DD_uOE(cH#lG
z$b66+IYCy{!;l}nR<%j-L56NHoXZ$e&z*G;^`a+u6SpbgjmCZR%|n0c#8Y<b<6D@U
zaN(Cyr#kpq@nDdzdka6bI7~cl)}s4vUr1p~`@x%>pCvbpRop4};w$7S*=Jssy#{zn
z7r`0>06G`q({tjbhDG!>53MRQANdhJVzR~t4hbI}7y;)|+3XYTw+#a}1c)sh0OsL&
zZrGKt`ZO@QM-%KtBTgBMkUK8yk&8XI`L}bn3FF}+z~)2sU^kB;rl3I1!BE;%2k}P(
z(_)!KLmWh|5OK_g&W)GxHXjuLm=F8_1B5kh(IQ5J<)>!q;MibnucO|^rn1P{$0d*z
zUydBFvA_V}kUI*32Azy!^THwTW<#!h2RE5rLHUd*U~lAe@di7V{Ka~eb*VcHYhl_1
z(sPJ|TLSyuC;=9hoD#mERXR8G3%IHn|Mb&OZL`_<gTFoS#Q~YIsCT`MZ}TS4#t$fR
z9E*BWJysuT(^9-)%Y>BoaYJHk<p(-oG;Dg0Kl3J6aMYJ%a^<ONT&%@GBYo{+T)TGF
zUpjRv{@%PI1iYDbdm94S2At?i&|zA0=-twkH#|5YWvtQ!#)03x0-GWReRyviyvu7K
zEYIr#H8x3MsIB<D<`cT{g?mEATg?G~(ickrSFIWKqj$iqo^IMmnaXAH!!<z-qc<8?
zz%yW!*w|BXjPf31(4yc-@s@B;waFO^_%(Pwa)9(w-H3+>XudSV-{_@Tz_bl8i_n^^
zkUKo%LUfZ-!T>B2v@&o|Q;ub^SOjSyRHK}pB_~os#_D*8kCG(E+fXA<w^<Y9aW{@@
zR~&5KsR<0+u+C6|#G@SWF~7mqjiWF$KE{YgWO4M@j>o=Wy|~b396nOci`PAe5j7Xp
zi%oOjy|93u2^F~njO2mju<}iK+UCakICONwIfgM3X9@1^_VdqA?A2FK+gn$z3^~!0
zsAbiOI%7Rrdup*8Z$muNpvQ;ZrTZW@5#Eq79&-y@$FZKM^sw=_xvX>62A<D3d)EMN
z*vPeTG{+d@K79DlPn>wlet+}#$E^W6NE2UlUpU5luy&2_4Tt#nT;rz00cq;pZ!tz~
zl77n%r9;kfh=G1WOzADIJ+QZRo3X{81uF52CqP2vmN`=HA`knFNXTU1B6G!qUM@Vw
z@pUZdGV$g<jprJS%(wPtWLWq~$F?tFmE26o!cJeXWFIqF0Git<E^cE?n=R&pX4EK*
z9_DL<Nvi-c3EmroTNNZtnQS=4z!Fyl)~aKnTXB(nA#SpRpDCu~)%t2|nSl$WntMZ1
zo{H@WFDO`8V6jNITErNy7TgG`@EoZlc_J>3K_9^^I=CdCjF2|!h{-;YZ;w(}k4fB*
zjRhJYbG@@&J_G#u-Vc;i;BHd!;t-}nb5CIpk&lKZo(hS_Fb;8>Ic(&rz0CcSPj1;}
zyRm=%^PiwqqtT1M3XHt!7t6q08Y{+j%^Xi!xAEX9));7kvA98kR;h;-mjjqaNT}Fx
z68}&t+K20a;o$AUm7mL($uZW-c+9U}y=JFgI^~By9Wutz-`#V#W{SdH9(>M*AH4>}
zlYg~t#F7L82lIHZ9)bKqztORRBXiZ-WR60V2!I<qY7qFR^<DheM8(#>)a+29JmOG(
zIB+91D$gV5v;wMDI?w?k<$%9<&9wr5s*__3=<log7B8bX6KA>ZNAJo!gNIEgjNR(#
zu|^+DjPN7i+hG1KXdHk{isB}tr(HA@n_GnwlOP5y7!!hc02~$@&uwJp{a$b4vK|X_
zN$gfrU8Cv1D|<}RzVQuw=$LjmfQ_YbzzhHvU`#c1)z<kNw9*Z{YKaYgtwYdk4vNkj
zC;1jmcG5t-AK=7`e82#l8FJ)ZJ{y8Z9HdFp4tea2ZpbOMl~e24;4OpO*mwa2)zuGU
zN4cK-{KQVb`l?^OdbP!`xmCAuU4)aCRI97}B=xwww~c1i&k7cE)HerQ8{opuYv<W`
z?&^8Nr~S1&8zeZ5g+l|-JNSd~&X|twfAh^Z{?v)5{N~M@sW;-DzX-=0c&h50F|qqg
zW9f^?5nl%lVc~U6RkC>1Drmz7*W(u^WQVwgKjS>^XT4AAoFT^KnL(H81%L?sM0%1p
zMawL-^I=F=@lZTd-h4LPr)PD9P)&<!)x7*U9ku}zc&vYUX?zd-#9ZKs=X>TLLo_Tk
z)cIb^SMHh*iNbeIvLn$p<z@!N<arM~EMh8L7kyRHNR<1KqvFLSnhGGVL@KO2xxH3~
zJnn^?fbu4ohB0-I44<1TsGAK9$=QPoHEWx-=jsF|n~{^dfYvta@_-LKOy-qC0C~b%
z{48X_n*l80S2hgNBIc(pf+MI)npuwzxV`;Z>YON;tA>ksfU#3kYNsW{i@B8tdJayI
zI_uC^AwT~3mOpjkggt!tO=^U`EG~!qvNqyCiQF|D%tOng+-Rdm?}E#^K9l~y8y~)>
zwU7N0>nVS=dJv)bzcqDSpU|7N?zSdY{SSQa=Kky7{O0Jld51sh*s7PfYrTpOcrc!L
zhi1k+Ih3gUul0#FkZAaMYG%edaKCGMk}k^wpZFS%=~;1G2bKc+6r*G7>q0EeeZnPQ
zVg+qtq*dCo&A6Uw9~!wpFHv2@u*}n8Id=dKbyvUX{qYzcf@apFuO*6$&xhK{Cm40W
z-IQuP18&I$AlLQbx;%=pIp)CNIynfSqMFIVHO7Sz8DffvpXTrJItj4Am(3aCJ0hna
ztyU6e$oq>p!_6Q!OZWz1WMUDJ>VXEujT!T%tf<fqN10DOjhL%tORe5CkVZOklXVsr
z)=s%XlNMG)UN~?r)ne`7z&x4gUUL{D7Pi#dSi`E1?)N&Vw)Ai*5WeFEv+&vE*$gEZ
z1TX7^+MrK*&L>a)>o2|Zl3l%ewXM$>7wZiVA4WNv{{d6f&<{w63)jiCG3FSIwa|3g
z=v6tw#vLVV@4YDXBvlj(eTH7))H`@yWwzlac)pr{=gR!M?;hFH&pd56e|Hm7FfQ~o
z_T18=>K_jSX*sl1=e}Z0_kqE_M!fQ5vGqo4f_Sq&USNwJG*7)T`70IR7-k7Zbgvx8
z?9+w8P-Cy2B7R{`AWz0{+(%%Z@(hetP57*jH^3A5027Wa<Dn+XD|i9t!c+8T<f5~~
z?kUAjY`ljD7lQ`GRp+8%FXkq{ltbls1M357ueAutcie7D9uXDHyCk*)a-7Fa4d;Xd
z)yOPLCp5<AC<;9-h7ucjo{1&wyB{Mb@LDWvZ}C{xl~I}*hJ#IUfHYz}UAVw+<0n%t
zjRr9T%cwscFi6AhCCP_)(Hap;yd(OwLw+ny#fjY24Z|Xe6K<H(f@E%wStq0k#)117
zKRFGZ0d|c}fP)XUc@8`<j;^cGIHMnKH*emw6DOYXhu?g|{AXQO8YX?9QN%UuK0EGd
zGXO3m2m3nqkmeWQxXEAGgGc02bdadbVfwLfS5>?T_4xdZ8hCyl4>elrq#xufO%T7C
z`;F_@{iT;q*^h^Z6tnjZ_FJnfFeVQx@6+0|U-|+LfK%3a96#(ilP2;-Ge?4vX>IHE
zd?=B5Hs^&>)NOptIu3J6JNnYAK7h~BN1EQN9#R>KtK<OknM;pSJoRkRv*C*Cw-yWf
zaz1L@EO5Yl@GteEl_wj&-eTl_74R#jTUA27#ktiN=d(_)uejJGjaBxzaiKx8ve361
zVFFQAL6%yCT?|}s{lGN{ls98mV9dEr@nt-ai}xG(!=|dZFc@uW(+d|C8oir`-W<o6
z%;z}fD-2SLvL|n%Pfp+sRyQe~Uzmx@$x9he4|B;G>XGlFci-HQMEd5GF!1xZL11%&
zY`xBg9b;4x#IMA_Lm1aa7=S_x-y1xn6yo_wtJHLEEQdcG+DoTi@?ZbvH>9K1NuLuS
z)`(-OzV_{!mKSLU1vM@yM|!WXhvY#0KzdlsPh8e<C6sYJY7Hi}g8v5Jwc0}O#{HlP
zY!=0f`J+ew@n@cS+CTd6qtpR%wVYLxC9<q%G2RF4$UJ^iWPXc_>@(;e-5*w)q4a^a
z1_fvLU-=i>N5(+Ns7=O#YdQ>Ju*?s->;B4a6;3CPiLcZ@kt0s!zvX8?hW>TWDHmZz
zUhvt3ckp=mppX`hRh;lU=hk&>jBkpIzyTN73h^-yr5S0i9_i1V@5P_RK3}+Ni64E4
ze;A`O_64%LHX?@_3pI_wn59UM50(j0vhh`IYydHhL{R*zjiehStV;`zb;jk@MBmNj
z`wJ6J&w$5fnql6!$t8!#3K%A|M3w{><yY=|UY?`c^bM63Nj1=&_h3Hmc(hQ66T}4-
zf$_DDcHbJ`yy&JzThI{Uu8h_|tHxvSfZ!CDm}NbHFHx2ksrZ^VIy(3iXx>C)Z3gpZ
ze)Hz<{F!H-_V2#?4!xmqV1<CXJ8H9OA!jDDux9b!!0Y^Z?n|OaqFb&F0ckrjyjB(o
z!-s@+Z}tS%&YmdMQeKVK_`%yp7rKUTT)*KjJpa6Z|NY~kW}2k^0eAo>n!G1>sj}nx
zCnq;vCXSjmIj?gHTGA%Ue#Ba*J!C#m^n=8hD=Ex}qgJsffLPwt4TdFbyzKZK&|%k~
z_xa9g;Xr?PF0g0HSpZBp@rpGJaYx?CF}Mapdf)&6AOJ~3K~ydLALf=d^xVPxJJ*1`
zb{{UiDSD)~i}O;&!b-<+$u?oe+BX<L3C9BiikCD^MK)uQ%kZKK1s)rjMMTZ7aU5^N
zqa+&4$rM>XnY9!q0((prK?w!C3$E7qTf@;<xQT#4_vafH0OjUGf#%e;i}`TC$UilG
z!70rk1R<Zn7_xT>$-<J{C{;BfxM{d-*u0_*R>r*0XM?|n#jt-3^}_(ih7G1@*{^%S
zpE;(@7oJOvS;^r~KiTuoKX2D>T*tA5p_XsQmVQmn4GGA5fentCW4yMxY7JKNlRL-f
zq-kLrby{$p!`B;7)!H=XwU_}|uU_LycfQ~JX6}z3J+fz>e#Zaj{r8De+=NL&i}MI#
zE=p@`+^ge3!%ZJyDvt$Bq>oJ3xV28`GvEV*xD#6KFP)Q#<91L8t~?GAA}01T^rps!
zY4U>S-CxLE#>=s+^)ik!jN|uut9Z?`K#VcC9=y!)BgWt%-HZk=)Lih4=!MS!9BJQT
zE_Kp9a+s6KEj5*SP~!>@_znV@yW8fdCL~ge84^aYf@DtP+M#fFUF5;;TtuUllsK=s
z6M;n7FF54z!DX%+7<O3rSSA?~5K4^_PtAe#$YP%wa}ZOTw8`Aam*n9)>jU+JxC6ct
zDRVdOaGjw}T^q#Q7X!Ptb5uNMEb)*YSf&?psP!^^RRqrEv03@h1hIaXXG{%yhU1j<
z;56rWV>29Ti)K1CTfB%(3gBiP;iC87f8U;Y`e}azztz*GgGJJ3@gj&gYmmW>Dr<+a
zp{~3WdFL@rf5O&1QJX{4L1KXSkpt!<uwlG3M&G<mpyl(JW+P_o&)2VCw-;V`!G8GR
zht!XFPa!8?RdOhX)+qNH7%a6`8gody)QfsZ%uQObXAfFHjDD~Hj*R1uRw6G~4W#R0
ze*&6-V%YDHN0SN0bA%VFnf-<}qc-TRx~85a*eQ1NW~~eI295zrMt=c0vF?i_Uu(DU
zJ=Rsl&oPjkT7sCP2r}1a<$dx5cz?NvFj1Hbs5Xg#nwQ^W8vU0sVqgc}7Mb(-_zdRA
z2W85+;mibuNv4xH%^_a2_&qO}w;;5PO0^r*%=mOHZ<3v7=4-;fs3W*3@TxbQb4V|}
zrkH$>YU3JFFNde3V~<D8ZeM<#EAy~1@_nRi)|2ZG<*j~ler-Mw*E;twCbyYA4L&hX
zbqL3?mcXm5KbpxoC+r?*jFH#M)3Ig_(dUQ9kL`sQp0{`3eOI}y<~G)<bt2_$oa;EO
z!SG{@YH?7vp*iOd$W;ui{79H<&AVLHCo)XafPF+fNj<5R^lOZ-o>$NO@WT(g-{$>K
z=M?ji*P%Aj4Lt+bxxuYA)b0!I>5U(J9_t>wwofzD`ht{vPs^z$<K9wnMxQ%jP5Ql5
zQy$?bjPH5*9><1<m3@d$y|4S4awRQ_V_s_-CtD9YlX9ThXwIIvFoiT=DZy8y&u*M*
z6Hl8*1`k7jZEL3rCV%rgucw;N^Q_G?oH_Qzz?=WA+l5H9A<4~7HjyqMSzrQQO>)42
z!~vg8lm&io^(n4WlGzpE<GD0}8e~p{4~<1@=S{HJM}jHlG+yD$@k7Hg9XD&Yn;zIe
zOssj2{)|0%-J_4-gZRv0TP&0dYDYozFeY_O`O}Lo^_y2c11AgbHJlblz_C8Xy~Ntq
z3^X9-J911|@X9!5A+mbT%@be$^Zx(%3(r6Aj~_qY`M>7wIp8_gQn#?zM9$t|5nq+U
zInsY1qi~)WbKQ!r%QYk1=bHB7Q4E&-hGL_hLJH}J>)qfXYG1^RIQ8E9@4xRaJpa5s
z{{DN>Xs?$?4w0krK!;w-Aj7y~8@_y?1U;@z_j!IQlZSm;e;i=Oj^n#0bT7p(gY*T9
zJlktq)iUXaej2=;WB3pdd4&748rRmosD<Bkouu)Rs$LKF)mkC_8OgEoG`;X1*Bk``
zB8U-dAI4~1L;pdpX$>mY&JldxUk9%9u2tQeJyUTuFgS~zNYsN*2B|cLg_gm)Kn$ME
zON+yK;lOK2q>>0HoUtZs1pRqU&H1tc;zs0HKhes$tI;@ZVuVpRb&ScIMdKN=q5(J_
zXgHf>_0su`yLPX*6LPpCEKEP^ddwKs6dD&Ds3wf$;}B@7DZ(*+^e#W=AgIZV2g)eP
zn+BpC)i5@k#9c+leM5JM&L-mstGhq`;Rk!+h3D=4-~N``XRxtPFFjbUdq+_k2P@B?
zeJmal8fNT6JB_C=y|S3;3llF&@+ILx@QRZUoA^wn?rT{wwsp}PZEafS{=*MH*bC3U
zVDG>G{sKeCkD%&!yL&WojPugd;;rTn@Fk8{&kh{+dwlQ)y;kqTfvSm6cPEUbX}{k$
zdq-U3OAfor71Z2v0CYok=N@%zZw*=u;x|ub&4^{y!*HzfmIc6PJ-C;z7z-WR)Qc;>
z?A3v5&jTLJ!M(1<R!<z~Vd~FW8Dks_nf(kj(f{i<698u<25)5M1fUC^->ASAbP(kD
zEN&jeobOk`MsgP^K+u9j5vG`wW`tznILn8VXhc>na*a6(t_K6de5oGr4C4*wkhvjG
zu}fo+#0b?k4v0gk$YPLz@Gkfd=#xg6HcY?^4ewV>s3iT`a7b+}=Ga`2bL5RfV$%U!
z-~p&hI1NtnL+Os{N#n<#g`u$2HR?_r02bt+@y9$t?04UN&z^t&dH><@<Gi2x7L$(n
zXq_OZRJZ!DV&JRhR$bG<0RHD*TxY)#9wax{Z}Pco>G;R+-r|76HIbK>>lx#6Um5v0
zy7AlJ{??v;`Wg5qZH>nL5_~=X?(k=>^IOjc;~DwnxO@_4dZ9k^;T<8BuXAV1A*^S_
zMxSbJc*v~zp&j@}dp*CJmW8<DGz}8&eyzM=5l-uK#U6V!-OqQ{k@D3LtSV?UJZGzB
z#XgQGtwC3~=Gvr&GGKDBT+>r+8T%+7`C#1N8F|Hl{AhF4W#(OK>uZ+|dSPHB4qcF7
zB6%$*BBqO6V^CN*Owe-#PQ)85m&uqw<eq~R-OpJ0sK(BQ6@10cD2gF7U})vuISyhX
z6$nSZ4F(3C1`bkR+O&`Z+yJRo;<xxBXtb$xv&#a{4<?8EMRSoC%^6>ihxmgKlW*um
zD;-EVm4kR|6uM~_^nh5;TEpPUy-sQrg>UktZn*TU#$!%tmU9z)^xb#%^wZBA{Z<e4
zNcdcL^CiU8W{+PQ5+lT2)nt;pkHZ?}O9c2dc}2Tu-mzau4mZYZ_<5|?>C27ukm{om
z3oX*uTi|^B!()5lg%|Al^&9H#)LXyYP<4@G<@eoC5PQ<9RvxXL!QYaDldO0je7(yx
z_!m;Qd9L;0o|H0SAmq;qGjnXDf9DZ<VXG0r;Q;7a$~W)tlu<B<4&09hK4g49prXSt
zuwd60j;WZ2A&AeIH29>J6f}h?=ltsV40uD1fmN_n=`Bs9Ox*O3d6;9T;GjM3Bh|-_
z#%zF2GB6P{2(KbcqTu4DpV+j9xqV@<aS2D78{hkLtW$AUJ%f4n7?18VS5OzkG<P%y
z^E#VXIGAxuUGukbHS2s`o8nyOl%IK+IphUldEN7&Y^3fOAG#|Y9NJ<Lu8!w{@27we
zpEsH%MwkN}M3bkO?hJdEJKI(8W_`122a>@{qo#vi!#FwA0}i-$^BXs=+w;#qFaLD~
z%^iM~_rbT|gSL_F^(s1N$B&Mu*f4MT<znI#uxDJrLpiHcd*-405M$DX{7`suL#YLo
z_kf#F&E3r3fB(1k%+pWXqeuTK{4fJ`EzMZ3&Vy_+S-Wbg2Q7)0G(c?RspG}h?0v}5
z)*Qv04?R>9@;vGeqDMA}GvI?*!ku0-S8F{iJb`neuIe9fuh-pPQ~%9r%|Ok&Rclbx
zd;qvA+KA7<Z{QiK)4^>XXRVB>p9e05Bh3%`C-3TI$T#Zbye8z!8v8~0f-1|06vy4;
zH+lkut*Pw6voJ1_QC?*NAXF8`g_oKm*+@_(p^YX+n}Em}gmpAyF61S#(T^j?EG%xs
ztHst#6>-Th+&p>ATtjk6pQOggxE-S-Mzw(RMOhBxS7XBocn&L`4WD(sM!v~ba^Lu2
z-qZT)o;zL^roy9}F)u1Q&{|(ft45hPxOP3<VV%lX$YmUF)Y!02I5_t4=rvx%yE($o
zqeqYYnWvw&-`~7B9Lg77%{tf=rH!cAbRV&lPT5SkzWPyw2{SwoRPmkmCVbD{g3<(2
zU%#EBcBmIWrRSWJlut=Jd;Iw5@29+e{W=nr!x|=|sJ%Yr)#jMM4LpNQnBq_^RxoNk
zK+c&T=@*l~5eJTs!g_6LGK#}vr!m++@}ST(q}pq3roqM<gcsrj`%+<9^PxVZ!w~xs
z;tswEkB}FO+u{d!C*R@Tx4(Aev>)E~`elxbd(yx|#{?b+LgF(Yj)cdlHqy#4m@78$
zS;oZpn+6^yBUmV)H8+nUJpLF8+c#)6(Jsc+U{X9Ja1vl8R=+PN=DJ^uL30nDr4i-0
zmHB$TiV=5^MdK<w6{Ym49Q+f-hh~C&Ms2};%@g<3bJO_9Ct@=Sfrf8!241TC+)^iP
zxpQ<~s(Q`KUk(QS0xZYCe#7?{ug*p2fU$uy@|TO>_T(Vm$jd!8@&VfS*vMm!V{MQN
ztoJv+{<WVvb;=G8e{8y-2D%QZ5$5>Gd#oGQTKB9J!g<=i*iUs@#E;11<i)+O@(L8e
z$i!dC`{3DDW1)i@Yb-R5y!XKeANteJJY(NI`mV($&+Q6^=Sc#22d;A;;6_?l5NTxF
z=Wj$MKEMz4oYoEa1o&*w01Cgi4On~C{N+Wx2nir*tF^{)KJXxMIqU_|(`bD~F7Q6<
z(yqN}-}dmqFTI}f2B~QkQ!(cK#(%|=y^`z_Z&u?M_$n7)gJ()RJ~;Y>Z#b+?-uS;f
zN1T*dW00{^w;jFa=9~RM7x%@i%=Tc0*1Vh1J?2)kw=rg(*keu#TXV>qOJnqUbQ7c+
z(wsHDFShz44m3!_wNtHJw-vk0C*ibYE}pebAz}77+~mX16>Hyo+yHZYTCcQ2(t*9o
zJ2aoVaZEF%e83pS1w3sngFj+XsCHGS_*gce!pSib5Bm;(HlMfqSxcHPbL>61px#R_
zq3q&yh=)2tVd>#`{>{U0{KQiy?B>mzFs}|x#D^h`v&K~?vNmAs9P_3kUQm7Z@f3JK
z;^aP!-TDlyZhlK%TJFI+!jCt7)ElubK$qA%4-XIh)Jre<jT<*w%>&O!+Q`|OtMDx`
zVyv6!3qPw4>vOR_IE*Onx><}8w+6uwulR3>J*}?*N!8H)fc_=#Vl1Rh=2{%$VxNqx
zpb6&~Fb`fqY@iF3rF9FJghBX=zB-SMF_bf_rE8<<Ey&Tms&D1Z2{-AYdI#^w2Gmx(
zVXQef)-&zX$g%t)0wA&$2EIs4h|%3QvjEs`m@xe<NCy*6<uM2>pBope3qi?lIE5(o
zJ&t2D@xg)wTZ*%2CTb9$a3)WKu$6YdDOx_Q9S$92BHo}^hYmOt4flDItmkkaMKc;h
zMAtC#P>jcMQuECFj>BE^vlwU?IOp=g74idL=}_r>v+lwb1qeEd*U``F3*6Xxj+zQ%
zN>k=NKhd}ap3$$fM;L$8*WApnUAtzdPMz{6PySmd5~m#Y#OF5D)-|ZHiymS?n@KL=
znC(JwQpb3Qjh5=*ag8(eoN!6wY67h%=*#&9uQ;u1=MdTX&EmgJ{ER<(^r+@S5tsvB
zU~Kezd8zAVG)E7iJQl{#E=3+CzH~nMDeHD8ZqxVOXQM7yzt&+<h*2(`vww{x8EfC{
zdEt&e`l-h#?1LYTd4;+0R=RXNR7YyYISN4Pwc=;!kL(xmS0yG)v<DbMkDBW<*%KbX
z49c<K82m!sgL+hR!6+W7%(c&HPV9r+50BX1P$CsBtPKDlyJgF+@+xu3*+|ervk?Uw
z(!{Ee3Q-G9*Vu6j4Gsm_06TG2hv!&cd{Dz$@U{_^XsMiQuC7VcnY<)n<`lc<qQ+Sb
zVc69cwZ}7Z+>$TMGk*zSvqQ)sKh%9pzQEQFs=3$%$8Kz`AmWa(5<Yz6jkxnJzN>tD
z>S=x~{z>}`l*`3%>;lj1b<%k92y3LigPJ1#!-xO0r=EJsZ{51Ze4y>LCb&<{3hOb>
zBScj#v~fY6lujBt;UkWVr_4PZf-x5Q3weUiKpO32M)<o{bkJMsiCjip_ro85^p{>b
zWxxK-Z)yzi0)IrBAwS@dbq;H8shMHme8#ajX0qJZ8%nt6fCPBdck+CAF&4u~v_3#p
z4<4%hkiYUL#eo`l!=A@553IqeHufs;nQ>tR;v0GzWGL-1xA9!kZm1uT^-Vp5mhs^m
zD~NOm({~2W6_j#03NRKo*jwft9$H0&c}?h2P~SBSfS<W+hswn2zR{pd;wSUdW`hLK
zrZyX-@IxVGJ{cz`TZt*ck66`|XwHlcCg*05#z8LlM2~p1URVITDV<X`5DRupZD}GV
zg2s`x5qIb(yvjRv{xLqk=vjs4SaG_NRYc)=aeyD(8iolIoZuSIwOKjkD0(`7ny1ko
zNZO*Cblb~e#!kOr1?saMpIYkptrPMF58%lex5<5IT$UJdn%lK&*ZlP9)Ary0{?}6r
zud%UVVISd~tasB@u%@^58P+RtFxS3=ZD>l`<8_n<?`<;%uW+35q>incaO|Q6xQ{(8
za^1Z7J3sN%Q~u9~|EySuyZ0^ea(HFv*^`%X9P*dlaP3XY5dC@j4cJibYW@xvX&1u=
z9<g2%jFQ{EVy}EaxwE&F-pBQTikmrVZry;+I#?p|z<SNmwO*(v*3HU694&mO@dq%Y
z-a41=@!&D1%=eTHc~eb#y@iL+#ux)c;x*}E$l0>LRUIDZ4Xhvc7VLNO&7P<kzW})V
zrV(9*2OmvnK>>b)qyo4%YAUKN)CLwaNKT5KLe)KePW1%ARQDbu#*|(^8ITt`2;_Lc
zm<}tGnZYPv#KI=n$(Y(qCd^KlI`_b3)(-r!M#HAuxfr?C28%v1Oy$mY!G`X6Z&jn}
z6ZrHXI$(6JQ}EYA>$yO~a2#pq`q^kcY&J1pHNc-#R}s+s)^fp|$R~#?*q{^>bMno@
zhrZcv{Ns;5uJzI}0Oq+-(a;5cY$!l>^C;$pDMn*|Sua{X14EG?<|Zun*jyTue3<NE
zQmH+9@8OR}e{bH^t5-cYxoYmqLx+Jj_@2Ft{M$U)FymUaiq>mmvn>6}vAu2H;1|Ni
zhx$1Wd3+a)#K1>8o~Pc<{d4vJ@{9$I>jAOO-o||{c}Gr4gQO5Rr$Z2}Is9@*>Os!Q
zN0mf-wd|EOED6^AXT{%fdzWIF?gPO!ZqYvqs{t_aRq!(PWuqX(LG=w{j=2TIniDm1
zKl+WHPY?GHG?Jsh34|D3H$zxFCh9N6twMuegLliz$`KUipGs9lP(7TBg&MzU7U78n
zK#rWz_@zOAkrp*(X-qOQVr661qwz3?brQe7&@W*L;vluaHC}!g>)LT{8L!ptz+cr1
ztb%0+oCf9)J<_H;H$Fj8mUS&Tl1-Q9?S8H{!^Jw~gC^rB9rMqq5mwMQM&@Jn#plXf
zZ~3dIU$y@}c_KW8`n68+px<gu4uX+lx*EL#XJ1SQ0QBI5BQHU}UcYD}o^}}Bzucjn
zhQ15FSUoo$;|?`M|G9bdrayJ!DS!CSe@gn|4msjl880YDB+eLjE86N9WDo-gPCS$k
zQcUZKzePb_+9(IFCmyXYK_<TXEraOm_=tRkw6tGzL=T<z5RT2y2?flt)UbJyV(}qu
z9!DH1rWub>OwyyCsb@5XV8<{M-|YWP%lyaZ)!v?SVwG_Jsb`Cv-k*7Tc){(|i<L9!
z5zIMwhid8Tp>q1}@6juf*pLKfHxM_90*~ZDBNz+rKyq=5foZG-u|-Z>2*!e!xj1&3
zeznkYK~%k(PmM`D>RdD#<PBlMjkJM~pwr^P`(hM__%R2sWjzf#5jR?QZ0gzoN26i1
z9LhexW?KtL^(ojI3^fC*j*U+>5fO92kY;(m`;qW1bf^5%Y^_1yHOKs;ABhX9d#ZKR
zSa9nancf-atT#6E2M-?DcDwOU|NQ5^9xNw}n-wNQti8@)rekcYf1!(NG;YMrw<uG2
zUB}gRXs4KR#R}KFi3RJhu3HY;cy`xMe*W2Bdg+v1y>_*{Tjpu&yYWjKU}3F;Qmj|j
ze&XAzDp$`z@Zlcl;_<m~?9-{{doJ6>8lCQC58!Zap+%b`9%e}Jf#;&(t$J*ZDZNr_
z!6R-`Zua)W<=SKK0{>`Z(mHT)Eocm^#qqXDE#MojS#gf@jIoX91@Lnr?ET(=`|MRa
z?{g0DSn~nns+;>YQhw0)eP8md3D?)AWRpNSi-Yi30_9LdzYlXJU>Ofc$j#6yHkprz
zBs0}wXtm)Ujb`bF^>nLxM;FSz&Ap<x&@ey8(t;c7TfBg`hEwORW8s351q$-CLiXs}
zJp!kk1?TxN{fgvQ`qHoX1TB{sAzYv~j(JpTYoY^R@;uljeM8%-i+HkWJf^NZtAphJ
z1E$<>3m}FC9{ijIxm*ms0Sw8j`CC`6_=O7>yvD8YRRe9C4sN$S2Jo86K}*>%h2N6F
zu-}7~ggfv$`v+<<&4b?Sn&co_e`Bq=epWov#^LU_Zhc}WPMq+6K76QR!W_hih7=wr
z?@7K21$}tfGzaWBQPMBwk&XMohIFSamalq9Pen@IteO8>QbrT0e(9$zUgNg~&0Odo
zIs~=x(8Fv1iV6-|PPj=6t9h|@sBc0K;Wf=T_v{(9UpVR6{4UK`<0j{LxPTgx?rC4@
zxkbP9o7RXJZH(RONoc4ytiho-#Aj$E5Xkr+#?T^CxT;E<=JEw#okOhV0K-Z+6Vr&q
z)3qV!iKx{J3dLq059vgo;<dPtpEq(IOGe&J6LVvo87E1BFE*_fiaj<3T-Zgq2exUm
zX08H*-p8bUUOqz)<rsa3<^kH5E)p9EQA`6zRWJB77b?wxije<+ZWxxmh95c};ckVs
zd51Ix=*3^a8s<^`xS`8?(^?8lZph=UK_A8Y^2;x6yV>~dJ9mnkp?<;Jeb@0!<kJSr
zpW``JzlcXov>zboUG+d6t<NJ4cq6swH4!4UG|9l(DwlZZ=O;hg>C><J+wZ(he4qxh
zNsNAR^sKDes2|+4_H&Fhe2lSc&U7dld{ZIy8T8G*u2&w6jT8<mJzwJn_Xo73`iuHQ
z<@Xi~$w?a04vniR7b&v9JKTdhW*^{s;Qbcoz@AxN?S09t&Ffsvb>aHcHK`uYd*H&j
zXN)0J;Frs?uDK2#eIjcbM$#B-n8YvBJXg%Cy|y63zc3jI(MhxD)EFjH;UPiHs&V-+
z15sjJnWYLDM6cX9*4%p?E~Wso5DS5+d=n>K+!{v>E9>cT78}E`Fr9gb5^8g38ZGd~
zvZZFZ-cXk>UQ`fUw}KIqN+)rlz8YW>6Zv;Y1AOgie#9q^0q<$k4eZHx)jM)HZY~x=
zS<k_K%LZim0RdtI#(Ik<FbeU7b4m!%f}X9tEiv-?@}<jm{=)e}h}e*anhLxi9lfd5
ze8a-g1vswq;k9mFRG-sl7)xG=l)7<X%@l7~2N5W^(6!JsBhSZm@%PCmpV(%z^#@;l
zRR<+n7}l{2{?;6@DCB;>=gYN#x4It+YQ>{9ubPN|y1z}6j`flkFh6(-+KAOX@lDKy
zI+i^W2w_bHn`@5zpGzF{57#VO(4n^NiREe9ACt4<N@MoVf<5YQM(7&FE!0@KK`l#E
zlh1SfiJxU%$IRDxsSQGa+Tnguu#Br-g*mIf=r;dGkKX3OFdzljMAVdZk#@i^Z}(Xn
zDG8BL!GHtV0gN`T89$u;fIK$;XaK@RB}DVC8<Cd}n!7x@Kzgof2r4?xHOLe7XujQb
z;)}&-6@09->9WA6)&;&*pTvg?ASg8qqZYwhrD-|dms)@eftp?%J(wjN#o)uZ1AfLn
z9V8$&)eT$P$Uh!5c+&&G*jUSZR-N19PkN-~0%Bqua^1(nW+zSj{{8#5*=+suzkHtY
z%*vaRaEiaqOI)&lxEAIeHlN}K--AWyfwlHx49rI?pmkA*dhb4C#aIOSpE2^`7r2Md
zX6{d(Jn_@7p7twmz2%50`4BHQ9_iVjz4*IfLM?LctS`A>$G7%=TEkGU)~);_4q|`p
zrT)y|A=jGu&>O?13>e5e3BT%KpEAFyv+&958@S?etP^`;=R9Yu%!@UQ;w{J^eGk?h
z#~?m)FG3%p_m8gImjkK=`CabY(6f$yK(XymTyYFV8$5(#*o%qVAkW})-6wPpYvdzV
z<IkH4lq8M?&<|>I7`*0>Mgrq9(GfR@t{mVQz!_EqPa7pbb2G*j7BJ8xTK<Jtyq?f_
zgH7H-*qAqs@4_Oc5f?4yxxOh!<?8ytJ^YDY@Z2DUuhP5B%ykIAhE@XJDxvB9!YQ$*
zTFN2y6EWk4DhrBu7fra%nok~dWJP$=T*`I5Xgw~P6nV7WL$7ijP847x6@OL<h>?JE
z6N)I>0o?7<rAv0{(j_|dHXnsQo3F63!KO-aj(|jeU@jAN@nJPU^Aw+gQ<`aDs9pnJ
zSv;p}*sOr{bS>3bIrGghCV1N2?bfZ2eY4&8S6@9y-KK*bazy+P=TM#g%sP=n_E2(Q
zUiy${Vs7^VImvu6uhwpDl!#~dQ+fyYLFvs<m$(^M#dN)TQH@7jAWy0{doSis7}1Nx
zp>QWJQ8hV1K0xW*dux7*NjwZau6ZI;4eJR*Wen65`XbjuJkj&?puw|YE$lg@GbV_y
z9%`IG?+DKN{<zSn<AAdr(zO5pAOJ~3K~#MMIE=LE2kwKLDd@DRtPLZ?P%;#Vnq3jC
zLX(Ee=7Fn^g-%i{h}NXF&}TBXM~Q{EZWzvKF-c6SrE?1$acS7d8JE$M%2OMp0moWX
z@lrL27J#Q}q{(zJLln-RvM6hMPZ}fE?n6id^+5wd|Lv)7@_-%&+eQ&ms_)u{fjU(p
z(n-ftf?8X6Z4_R7&)Vv%&EaS4;Z!y71GcvD!d&)z$9MPMUEgdrcK6;rr`)a9cmg`3
z)>P6sf7rwsbE*tExEQUGIo6(6*9)Et57oqgCO`0ots7@%i<qF*tEXSJx30VexP;GL
z>~S6LZclpwaZ2^pwRmJ4)9wieRkzNms&&t*UjzU;d`@!^J{$&!2hbTbK>g`(rE`-@
z;CT<X?Ve?@=8?YMdHs=BGX1Clt4aKZHnT@cC)7U1LLMd?b!<BEypDD9#Bqn(%(rKc
zgA*lOl&^Z-;3d?8crQ)z=gw1tcZna)O{q!pMILN(bJB(iz@nOoKq?MIV9*ZeRz1P8
zVi;-^X?P~5bBr4gGiT)Q@kg`n#93^d6@Ou-f<>RRA8-R$@hk^LSa5k4Y68uMyu~)^
zw{LOieaJf3EemE9clin)QV#+`_e%p1(K^0tu)*gF)1YNL0EkYtDd@%!b85rkHI`#}
zjy9lST-9Mc28}C!<>wg#avu>(YlFMT`5@;)?9{F_xOnlRUAlBh@>V|JDsBKzEw|IP
zXoU6BMkJfp-g&q|@9>yY^6^`D=SMXewO(V<1rbiDtfbBD+qZqY+1OWKeZ?C^P9Oa?
zaNRZ64LmlpwpMdIh;3dan&`sbR(-_7!Y`Y?@z=OaX?L0~JpkOL9~om`=Kx1A?K?OJ
zL*qfIc>(<l>`dO9IBK4WT4cY<nBq;`dvFZCYCJ9u;<lX&3=c-jI<n4vd~zO#7x`+&
z9Q?@p3JX5puW_tfU;}H)eB!g+Gug`FnTZF<yW@ZBwoK59LvyW)Ic7s04639lF*!Fd
zfFWzqqG4v-drh$ravulPh+14Ad&gxFOZl4F1!Fe9!4Qpu7>l^~@O=#b#dqB*Q|SV&
z=M#^>LC>#;m*B*J!95FYuU5(bv~YHDf$RiZrGxKQK9O<Cjq;KQ25LCkV?tw?ho5&~
zwdprb9RGwjpr*DB!v@%E08e(V2|aOB13&xhj%~MFzjybZCl}&{z^zTIazZ-PF{=$i
z5jWy$_t9zNv*E=xiXU=Q5ph8f;#2Ph8+-DDmuhU}JAeLyzqR{&^Hg{I4MXs15~J4O
zj6r&-5;z}dxnBa_)rKwJ7*dMuw2jbw)~5$^GpNDZ9B@(fb&ZoatoU3UEJltz|1cNe
z3cf$^77D@XhKOl=6u#+8DIJU{1QFeJODd&)#XQs?I;d2n&%V8`^vY2Bg)x1O_2L)K
zj922YpOdeUokHVe+xMa`OA;6Pi&_dVkuBany51bkr^XE%5F}oiQi`9%(sva~Md~jh
z02+mo3|PatcvDW^ikrnH<ABk)q2b}GH!QF`^mByo;K8V`UymC);b3lc<J4C(>0pky
z10E;4<A#B`<lt6uhK+;9ne+3kA+wJ2#`+u%i=Zhl3dy0`A@}0b;)CXR#KdO8O@wpn
zMp2KLhvK-nQ2+KhHss<xBbw64=N_$Ga_jiEULom)3m5E-H{a|UcAg|h_f&3Zpe16^
z-wvo(<DPZwIDVIYJdn8ZH1Q*c9OG4@Elb9tPo>7lh5g~qXP?=2v#~F}_#(zuJ<Y$X
zm-di~pEy;I<kFiac+j9ahI%G1b}y4Y;GaEn7kdnU@qsd}tlMG-kI62_hH6KCF<SQ|
zzb~JI2D6@hJUrjkMnW*Yq3<2@Dkg|u@3Gx@QnD54iorD1RA0=RdUV^r;T_h2=<7O9
z_cMS!cnB#a-??~ZFPF7<RgD>e^W+2KQncp(GR82dcNi_0OhnI3rs9UDd3E8I0<jk@
zj0Uh6LMzrN7CzfU{QQl!8!36{o@bjXmSaT6ZwES;qAqHQT7h>Yyl>_m6V&B=O6WLf
z{Ahmm6?|KagPAE1)7UkaN&=strHcRAo3NoNUX&Dcu9lDvmHEP{OWeXn8nDM30BgS0
z_^3<F!0}xxTHjjLYU6}lSwrU<_%`;!?K`)9v)%fG2M;1Oic-F>z*d`Xz026f|9p@f
z?oGTvuc9N_u!-ortjSOkOkJAC{n%KO$Mwd#E3rQh4$ogWZ<j7#rufs?Rg9b?^Gc%y
zzbh{K_)H)NK)?*o5H09id5T>0A@d8VDTcfcTxqPVCC5r!h%xz%-X%A4w2OdR9E&e}
zRD6&Q+7l3G)>hUaR-rid$K<2k%-P4)>!Z&PdN<DYdQAj2z0|Q96S#p`s!!sHDtQkE
zwy^#jcWfP1bB)D4dEJkT+MEw_`0vpJ;z@`hfymvO`BD%dBy*|)7Dku^nv12)4jU%U
zU10<wNlcAPn1MIU6}IWT<pMN`h3_gb;9T4{Bvtq}XT<}H(RGchW{}&PaGC28=EV4(
zzj#!w^c&0EIN7+oLfM;ZZzS~&@o0=LeA2gJ!o3cv8@w}V7x9&kD!<kQ)?-x1z%xI~
zq*KmCET7^eiXymNKVV7bf|~)OnfvL}r>*|4#f*q~iDC6&z7`u-A@><4dDd!d#0*Ws
zn-mZ<hR?J^CRO4E8Xv2u`DN17m?4vkqw71jZ~JDm@%#7gTRlQSdGZtkKi7Jfx|cYI
z=avI<?E|ZZ@!Qb?iRZps@KqD`ITUIbxo{&z;+5zvix`-k>M7LW6ZRN=A;3xqvg;t|
zZ*{M7T94D_mH&asS`&#CV;PT$n0sPltyKcYtu+>$M!9vLxM_T;-t1M%g#Ajn3O;1*
z;`50o1H5d(N&=^wVmoiJhN~Ct7nAk$rJi#Br*5mzN&H<EmI5eIQotzuipYtCq2QWm
z6i=Iv5YVvh@?gU;fDxnH&eJx_90{X%p~$Ye<i~jYqJGTb$!RV)F$CA?a3E_r<ay_8
z=2AG=GZ%60d$k6%<|7-#6t`~}$boPO61Bz)wKhAbpJVej8P|B>d72M50j>#nQH;NQ
zjj8TMkoY_O<5E-NgSFFi#E}UmH^E!CKC$g~;}0JEZGl%_=*`&^z-^Y+dI44jtB#EV
zxhQ@Tq8vj$(slMO@rv^-Cpy<?ltk{4XU?C$V3#jl?sF&3tl@^Ad*(Htb?-$a*?sBI
zmqXYaklW$i5FvS<#!fz}yTn!c8okPzLM@ozJP!|p58HjhUBi$UGE?3Y9)dq1h5Enl
z&9jeqeP(`)sWljlpKuz?tNl#0C?8i!zzrtPXSCj8Z4Mlxmcn$~Bl<oT+eyWS6Fc)q
zzC&J`CR6Q&A@pxPqR%bH?7O!2)Le^y>UL;qx_D8<ypIc*fWSRNQ%YH~E{^%F!z`3E
zjV_88M#O^KCcH0<SuxWLsjkc6L~9@(v;M3P7AEl~^^c7jVxuXs=3dj-pe*NtANJ)Y
zo>7AtXI$tPhiS8Ei&FCQH&28r7_jN+=8~V1#HQ0+t9lY42R2x6)TCG!@?+UbY73xD
z4eSiid}Fb**N|AtN(`_7PrKl1nT(YH>K%x%%)tc#(?{c;Jb7YA|N4(BEC^~iY*O4n
zcVomap~G|-p?MIO=B7-rA%?D~h19M*)CSh^p-1w-oPC84AcRpp1S9_P`Cojq-Q+*$
zGVzkJR7Wq{NH=TTV2$9?<b9rJG=^%A>&b_-#*ufe1CXEwl7HV9X{eCKcYK~YQGAVU
zTF;~ha>+5I&$ao}FHpcZ#69XVaL~AGeVWIzm)I8*2a$Lllb<6b88BC}VVJ%)lq2EF
zg~lN_<P&^LFAHYog|%qoOtlK1rNKIv{eX%P)*5X<Wfm2gAv0Kl(ZzEF0{|NB<uwD0
zQNO*g9I;%Cvarxxd5t7h7AC@ITFcQIP8JPfjf<KT;@=c`<8w5l3jd3m1nT0(F_ISG
zZm3^)=en6iZd{1VG$wc?f$VqyzCbG3NPy0%0pjNg2c|+jz(JLdG!x3*Y6xSX`H-g{
zq~rhws~JyAh_h{MIVD~^ZqQD=rG8!diRXGBJAYYd_khQ!t+3y^b<4Ngt$p*&Lo_ie
zQ=NtIA8|>CF41Si3x|f9)93Xy2X*P@n|=x{l5GABm3X*{%UCjp^_&hWdU(2g>5^T(
zblI^tM|?ayVLimVG4I{ufEDUxoHdVY1uq+qA#anvD&^4EjP(!xl>5>O`R2nyXw-Dz
zI)*iGZOjhYyuO$%)ss9GtDxx)<I7TmZw4Qa{(=KW)xUb_K7zi|y<a(rYi#VKiRjz#
zu6h>s0Mv6&9U#K2^{8F+ozde<+_vO`_}*K4a9w*@)7FcJ9%~b(Y^Td+5NNDgL~oWb
zeLoqiF}M)%WEO>thJ~><<Tr2eloZGL#RD{(w&`F~0^Be@VhGle>+xHf7@GK7@c`V7
zu>xUfkR10PVk&$VtY<To1EW#wtaYW0BWJB<_CdUp=^AH<wJns+k$O98T*NQ3bHi%i
z#3A0k-vZDY6t|}LARo<}HkVy^COIC>9D``4InYzY&)!#xZLz_JZ=d}9vz>nRRl9oa
z+Cn$MfchK1;bso@E8M*?S~Ts3H{-F6Q%~u*(GuO;c#r}!9?K{8L&CYczIXq=ZMGY~
zcke#&)z&`rYCdEPb;-JhXM$y@8=vPMLBb@boUgc=;?p(lJ4nmKQDMh}hL0RreQ3N7
zJVCwlL7evtQjT~cat%NoX=#{BG?~5Q@}532<7Ab)?TL#T(aY?SssH8v3G-DG+Ru=$
zT6u=?I?wZ(#@^+ES#xnd*~=gw_Emk}Iqdjky}8WyT)RV0C%jPaLO*wR-w5G}p|Y!)
z%Dh;#knT~`2vmeGbRbfU%epytIo9hrv`@nV=4bmF9bq6`P;WH@Hg+=_nhQ#<+y-H)
za*U+_>_8L0F*P>f9?ce%sh-^6v~J1=jbE|XixKCN!Kx?+cuAT+6a{{R&}1pDKS#%+
zHO=8TOMRc*$}-~36KgQXk}H9Dg~kE*q<z;l4~e`nP!)wEOJ@*p)qEtcLFb*8*jU)h
z4w$<4VS(d@@TWih$xfU&VGqA~=+rNIbN3$e7u8~`u|ZbjS~!9LIa+*#bBL6-wm?hO
zjd4o-@!YM&b9cXV>5{*G@pY-OYpC&3Gw~&BCRkMu^s{JFA*_vWhtQ$!;xz!qdd{b?
zx%YVB&fLJ;I%+zE&vA!J9^kXb!k~J_L#%QNKcMl9{3<_Q#K7JrhtpP<_*KV1pQOIm
zyu$N_epGEI;s!@F7vgJu&?_7e5e8U~sRanb<56!MRR9ow=VjDl=5f**`!ueDDu(fP
zy$60Orta&#bDD23DI0nU1Tz;Vt`RHXFm|~quvv>}S$aZ7Z=OYTEbtX(oG(WQV{0g8
zbf4svxO@2s&e%B2H4sy}AWxWw4ayj-NERLFz%gnNW+R+)(}vh4c$l*Nadfks`Q#d+
zxwLPYS{v2@OOITf*Xb121#02Njn}A4>WC|id4c8H4i#ksEz3|-irYCG*8}l~pS@z1
zmXQ<hb-%=X#1Wqle>$|6PQ7GTuU-R<>K*g;*oCH+4%f(~qE^jo$}L<(9q46)N6KHw
zUwcyXHPkvD`~+*qo`L=Tz5BM=Z0*ixpA`lGr`U$t`PmZ7;(o+i^<VKuy_OhqVU%wm
z3XRPe<QnCzpcstlI%==c4RpGm`Amgi4*XDWIhL(I#lMiR`oLP(Q9mlXYBqk{zJTI2
zuIXuCPK;1T)rwv-AO|?pj!T}wu~_rKyU{?xTQYP%Po6D2M)9@gU-C*T5Ol~dnkUfG
zu|3ywPT<{?v`Q#U&W%GGQoN1DDJUk&hUZyynX)ZBHY(@@IVL>35C~#%JkQOh-D)Y*
z(dG+$qIirY=8S^Et8nW9LAXA~X!HHv+-Cz*&Rn{`+|+?FWA5ABC=a*ejDxw2uWMyf
zeC7yhgLPxWJpLBG+bBeb9RJflzO=vn=djg<{`m3le{~&09TnDF*P*bG2H~TDi}d!S
z7xB=ZCnX?$-2-nTHuZiTx&fb6DZl&OO@HdC6ZYu4@6zYxOU%PuQ!e3JxU!nqIbbi1
zbKC3jS6|tKuOH)Fv_%1h^^Kbf;$Cg$tdn>a%DH^`lAk|+0osGCiD3<-ZQ2cUox8#{
z<tqIGWl_J3<8&X*?K;lP{LvTp?XUm(5s8N9N1wm@^1glf?V;5gfzY5wI|OvVM3M2Z
z@=2_<>eRXR@<7TxcHjbhu-G>h4_Oat0qOx!93TwfbWQO-eQ`BTn3&TCfHdbuUW|+P
zr+ox?Kn(I+7Td5!qRz_Ibi=XzI%`J$!{3G@Bp20}93tGI9@JX)<;vAP$@<wiZWDt^
z+|&)sn>S6yWzf+$WP+(EAff%%MGXi9#KO{etx>^-=|}=W_9Byv(dx+>SX`(P7q#%J
z!dS1lzjpN`7UbVFEi{>2EJ%4hssl^naVI!jH^qZGsDUtF^4w+9E1h^_ANhdNXK(0z
zY<TdP{RH}S|MMcGo??g>Np*ks<&$>t&cCIx@w$5Vl>@(c=U)H<3q+iU_NVLD?Df}P
z@slSH{N*#R`MaOo8xG}1<1W7TvY$M8(q2CEn!WqU{qlM6j@<tEFaO}$oBr~P&)W9j
zIY0B-oBr{=e=!F?{o6jc_NKq`;&Z+^`K+CN?M?sq?!U;7sN>P+AN`LvuG;Ibz3c}E
z2mZ>L*X+Gd?hl$(jKjl2J9X+MyME((x;V$iItpiF9VJKdF&<`R-LxE{QU5ZlvD|N;
zea?S%>3-JIb(WmVe$eBS>1V7Sz2olPyS~|M{PvyOUenmm{4zKD(f@e;s$V?!iX9xB
zv{%lavv)tfE8~B%KOT9?4o;r*m(QH@_io)q-uutPZ|%ctZ}=-OK5N^9XZ`GJZ`iH-
z|F+me+}-@}-}d3vH|&)cpY`p*vwrs6(HQhaB(YG`>iY2ezxZ>Tjh*}b*B}+{MeaZS
z@VPy=-TJxT{XKnwyhRO1Zu!ywc;lMy)|kC==A6HG>mG4A`zhH}P7EjJ`lj9&0Ibca
zaB(sF5517QQR4ixLs8a2zGCcD2flzjIRk*U6^COA)|y}Myyhz@?X5T$`a;F89#OvF
zeTg&5zJn-*Kg=O&fiAR1QIBgnT9}u4uRRiYOurCB;-C9)--|b+u&cvI8yh5L_7WZp
z?s>0(S5cPpFt#)*5F8Bw=Q=Qinug;lDJTjaO9rEpKq4AUGfG<<0Xa?Zi7>Qae#xtj
zcZT-HScZ9ZbL4}L);IW}@mjpJjjzo&<-uuDK;6p?OY?`vCcJtdbn3AO?U5VuUt~V?
zZ@>Q1et+YVZ8jUfc;{a|hX3gQ`ui9D`x}>SyWQC9x4-S1KIij0Z=bd8_Q0;+{MhgQ
z^`8In-M4MK-P+s#@849{?YGbPc6-vV-@Ik_zr1gMc<*iBY&Q1Jr~fLNurZqZhp+$2
z4xT;dfBf{ee{t_G{?WB_w%r`~pC272FCV=Aq8~ha&j0Y|+y2Gf&;5gIuX&6Cyhj}D
z*5YSxpRvv6z;68Rmf!vBUH`+o@A!7JvA6%<w*$|m*@qu|;Lkksv^{$CX!c=x%N?(Q
z!!?&??*5p?r?{{kRIqW4MgO>S_E~%J@;&xNtU^P30#D!{^Y3A;QtElV04`jwZ@%%S
zpTBUvxGAnOW>66G@4R!yHrtbS<K`{D`^7!~!+Y=ecC+z!KK(Yw+<yD4Z?-4x`pr-5
z{+IXdkMF&0o6XkKd!<5R{ovxS{N!`z{7;|WvA^E?+&{Q>&bQl>_UWS^6Uzs$|H==Z
zdu`{t&+Wsj=WM$@us=UK9M(fFvE7YBzxv8^w%Km|wVVG~^oB#b`tq~3*>3!`-+eti
zFT7^vpS^R|wwsf7{pKyZ`^8=V(|hmOcDu2+KmFFnIm6ZL6~+di`#jbS%p->sUO9Y!
zFP0Qv^5Xi6RZwHWXMN8j+->|kW<FHqld%rXLFbCj^E9_sSmcK}(={FBY<LeLT09hc
zz*I%!@V#ELb<Fw#w9=^f-ux1i7<@{y;hlntIThFh1Wm?9E50YADGr&?aPY5piX=XP
z={r6{L-a)$hea|E@VJOysOj_0NaLYX4y1w7Oi3GcvdU6A=;6#s12Y^0i)_+52?<P2
ze~i$h$C6*8al(!1+^NRkg%4(W7{qj#ANWiy>N$QBGk1UVzi-&dgOh%6aA4cb#x8#L
zZS(qfpTB7*PagQmgM*`kUi?N6{DYXy{^JLmjbHlYABoA_{LULM`oVLTiWGa~2iuKZ
zzV#2{=gyli+R5iG8-d@|^V1LiYunA%-uwIaaof$!&z#))+3R1K`_XSjHruVe`}glD
z#MzTuJA2~+HOSKMk)7OZ{PL}TP=o&L%@^(9xl6@AT4_i3<HwKv`R8Bo8#it!C!#%Y
zHa?4WZGPrp>%ac@4|enFoA%<#?M|;lzxCcb{@TmG@`IBv`nij5_@@sZr;p9ePi{8;
z&bN<=&-Y$D@H02QGIzJ@FP`+xX6u{n);F7H^S4l6+`8_sAN`ihUp{xq|M)o{iq0Nv
z?Kj^(_M6w<^cN4dnU8#Jai}YgrF?mL6z{=<uWYm3_?<hqp;tsa^gTSXM}Bg%^~<;Z
zL0_~#d-GRz^4ZI~N&oSa+l^hi#fPaoZ~V#*p1lk;#WFHKeEh$**=+6IuOBBqGxM`2
zw|?gO(Z3Y?r^h?ref>Sve&*!H&fds>aW>$NwS5%u-n$p=*|Wd#*A6yz?&jaYyD`c9
z?z^x1b7z0!=MJ`h?&jB)y9)GzsLAX<ez4v6rCVQ9Gr05Si+=FzrDD6nqgLX*{OtJ5
za4ye>K8T(k_BxqI-0WEoeSL6m29M<4rGBK{2G%XkuZ7B<L*Hu6Fpt)5t=~Sk0xJF;
zu*_HUBTw$}6oS_l^2+#lf1<srKF1%h<9u#eXyo<TJP&cicf@ojoT4N7W%qRBcpF8B
z%{+))9@I!YsJu|?xU33RT`M@FPy>rkJf1L#h<Lw=BqY+aoLOO$#}YU1fO04%RK$5u
z6kOm2_XzVI)3m&KNP&jZu_cwVz>)8wuVOOmxzH?muNpE6<0a3SM)P(*V^@w|i?z9c
z+1B$IN0m}Mmcj$a5c9>&)?WYYTa8T-ezp6JUUA{=`tXO(?aY}o{^!U1_ws%HyVrbk
z@N&4(fBgP)KXc}c{rUStQswL4pR>)u%f%sLKm4nI_|Zpp^tU;cf6krU*lQm>IEww#
z7xv+YAKJeTx#rhSZv5OwUx|N?P#-@2UpsU5jQzjIhn5?Mx&Qrl=X`tcN-myu_}+2z
z{%_y6qu=U%#|^i6GqiDu!@fIva%*R=oUw~<zvp*8zh`dlx88i&H`^Ee!&`U!i~FD3
zdvBe!&E~*w)!*}F2b-<G^X>QKnRkD6aCE@+qyMY<(=*Tdix=<s;o(o_?*7FGmwdB%
z&TjnS&;G@i|7#yzyJ(y3)<1+p<k^F*pLy$yU3}+VyYu-y!tSxiu%4=qH=13%D{sAJ
z7cN{-9b~=m+CF^z7e90MtbO`@{^r)*%)kEqYqmLf+0A_Csk8QJdC%S5{&Dl1ZBD+z
zcmvl@U)V<<eQ5tatnuz{uN`dd+(!?N>iO{t|8N>}a^vSd{99iru&%%V`Vaq~v-c0O
z>O9W`&zX|%mGh%ps;#1>swtS6m0@fr-7(a5*Us4VR$_~-DH}4g7TAdmlZu0Os$!Vz
z?tqh2WRPct;vb;ciP3Cgfl{_m5}78p(%s1@bW0X=gDkomB#@0P$o?Vti{>wyDyiOg
z|G4LS-{*P1?_5+X`}Do{obP*oJkRsK-*?aL+i0gVq$h9O(y>mh!-p<H%ju=E{KjGF
zc2>#E@+}?f)-s&#=z+%YxYff#k1gLqY00I7BU*P?w{wHK6og&FnD)75qv0p)qVUZm
z!I72>>giz}38hl>TRa4PkrB(m_XTONP&|xTdQJdk{vsaXdLLbYx?AkoTI+_KJLE~+
zd5jZ)kenxX?spp%f54dxBjxy{G>>;v$h3G|dH(i)RfTWe#-JE{DFEEMSaUK$Mq|@1
zB~t|09t5?MlkEji6qh##!HregK|`Lnp~x2<poNJ_?5F<)OgTz>-eNNnS<a8d+=g!&
zXXzn#hLq<lN%+|&%wtu;kK+u7Gn{Kc(}uvu<alSzG;mVf6c%+xR8V8_EB!Id&!tJC
zy^Y>g?9(u|hv!gTDQpI{WD8Yg<8EJ(&8xaHG<Jj{#m$YXimqId%|jhoHTIN7yEdhn
zxO{F(4<A0LJ2$P?!I8~!?v`e?u)H`ehYvp?J0Dyv10$Pd;TGFM@z85g)s?q&%c`!d
z8apDO9;hqNarx#=x#!+{WbfX+P*)~KSCZvhUcj~Sw6;_0;F{eI)$)|ob*<Z`t`qOu
z20F58?3lgoRF!PKa+Bo0XO-X4Q&F8*Hz2FVXPTONTL-I3Hy*h}b+C8cpbV})Wa+N!
z);hRmx8JoZ>(sJJR}C}BePMAy>bllr&mQZqO;lk~2cmlWs%&1>(MDI;k-TPZUy&`V
zx-v9+gg02I+2--axk=O1z{qA@xSjX?n~T$O_{k^a;Rn~~;K&wPT=95}bF+C}HV$+(
zeVjVlsb%DeOOS)A>NOo7=*re(y}PJmo!-a05jUtS#WldNSh*rwR&~^Bhx&{GDQG3W
zj&Ck){SUUX%?9I1{^Q)-r|X7z3tAAjte9Im8|M^kkcBKJ^56<?xl3t)+M}doLLA5y
zCS8cdeH7{;U(3sLK`W`5Qw&h0rL_-|3AmPg_KBll+c9Zi01Qxrs2$(v;Yw;_qO+WU
z=+pyG`@B0|mEytx03ZNKL_t&uNBmU_01R-_fxu?O)FN@5Kj#J#0FI9srxQz?2_;*I
zUXg%;a5G|xV#(%X*a-w!?E8y16;d9f+e2S1i&2qF!rSa=KEF-8X@dc-%_eOM?vP`v
zF3Vgnu86tos!>3ghy3?~9jYoFJ^q$)n)9qWRM$E>apjJ9`h)28#S^k=O-DO}qjLI&
zf_=b9Rjw^e$fngD?F@{`{4!!)Sky%H;=!#tHax6@btR))_v)1uz@tg|(xI(7Ix?bz
zRV8Cv_vqEzSeuM5=5T%Sggm&WE8W3SnY)4GK!2fz_U(H_?z!h)y?K*AI;EK0K(=6_
zw%2tl9e(Vhv3qTPlhjouH+;IPiZ1S1Cw15V23@DFb=zCZ27rj_-c?;$w|mjnmWj24
zI<)bms;aD9-7QsJ>+H2<xwW#Qw{G3im6hAFaA-uT?ixuPuItn?a^MY$Kjwp4LR@T2
zlgs8UTl9ekJ|OSD`!4H+>c#MC^>uAwLN~4HNOxdN=WmAEYW!VWJRzGJ9_Mc+?SN&d
zPZ7~K4sDgOkzpCED;e9mSFVJ+!Xly<4{g)YkzpCEYZ=?NN3Yy&ELi=E>F>zqH8M1Q
z&}@u$dw2AZ`lDOc$k6x`7WZhU*5N1K2n%1kRz*bLUO27~uI@^AU{p@u;5R!MkJD4^
zB{V*@E#okZ#eN6m0SD@K6yr%#1P6LOhFXs{xq7l3dNW!zh#N|po5yWAYV<>R0;p+<
z8b?s&h*kFHo_xZ5#07HUJx;LI;F9;Zz@rEz1m}Z)xK4YE)W>qH!A$bQoVrQJGYHi9
zsnR4^lqg}>4F-}wC%sE>N>nAKA;U<llA%aYS;!!CMu>w8bBQ9#8*OAoP{e@`wvWY`
z3ol?$$gkv^=FxdA%_|5Ugd9YX#g`YVMw=<$D0);>z`GSUHjx*NpUU}9*a52reI@;s
zVklu3u%@PfzMDIG%_c75la5tYEn_FHLhYnH*{+JH-g-;-Y#Y_8?&_u;kIR*nv>6T<
z-@Yn)w~b0&cjUnxkIP%Pax7!>reozT-89hAp^eWNx2DH5XXUDF8tBN-_%WIb$x0fx
zck7tebyqiSKOk3ca|xt?u$GfHmTxTU-S2<D?A!MU*e>JP&R6fr+HNfyC$E{0t0zXK
zu7)hu^mygOs8sbT^U=Gbw@mr%9qQ=XUAEB^{4&P!!h>2@mDW|QbyZ7M*HTxN)K#r@
zU76jr-AXr3UH4d>9fwd9;v-y*$c2Rksq0#fJar`Q06>$;uGbssc;zkKvvpMJs-v5B
zJf?50Fvg;ydh3er*)}Rw-IYz-59rm~po_p|%tcj2Ze7s_2f8{m?wZPYTDhVR4s;YX
zh1!05>S3)q!+LSW_82<Wt<pDYRaEub<W8-+BXa4scZ#u2rRk&F!UE|UR8d{IBE1^x
z$fg|!^vW&9jC*yuCY*0v&kE0(&mvz*0Ls^!+EtuSho&Cr`yKXC+U!~UaLxA*AwQg_
zd>$i0fiT~m1L4p5HBN{h$c6AL#Deux;=$H|I412-3OT3iHV%A9^pAPBjRQ0iUKu}>
z6Y}VGcs)j39Lse0@93pejo|h~^22d=A3@CEqhQyQb`ms8Okkn1N3&)=kTE7e;&m5c
zk>J9)tf2E;k?1zO0No@pip^fTp22n@-yjU9A&yC6br?LQf?yHfwtOTsAwgRD$7wl+
z1{OD0WUqzCQbYD4F6+?&0LU0W0TO~A(u1n1tg0#<o4ATO2mC}=)y>Dd1W(kY%I)jZ
zvUZ@B!I7;xb7dI=cP^W8>jo+v7}+MXS8uW|twE`!e`Dd8K5_V2##uy9Z(pbBm+fyZ
zJS$H;`K+)wMCW#_)6U?yWfkjY<@&U&9jtY5c&p4@xk+(G{IH=T`nz}Sl6&vHSC?<z
z^f@q&`aq&E)TC(d4%+zaHM8;d=}lVKwJsxfBD%0=Sn7`5(bH~S$<`~&#=ffP*1@i<
z+ht!EkcoAJI@J7ml^d6~YF*c|>`>uKW^u3WR<d#C?a=(4m<W(cl4o<h$$QJ@&GLZ<
zKA`Ws^G=SBKV<cmK)&_%q^=vRbYOU!%wAo_ZG=r;d3#FN4puravQ=iT+(5ERcd_K=
z!n1Pl@Uct}b34{)XJA}JL~opXMh|`aSePq%ddFJr4vh1g3!A@M>Z+Eis<f(VsjFJ6
zs_Jd5>sn@3L{D#D;~VU{x4CY{N>$f7vqJcg?wi_?fst)8bM+?UWo7TRiG889A4Z)E
zo<^QL7V7taHAx8l1>X^Oud#BB=|}6vA#Fe+ZsphQIJEV3dw}c0ws=1PTRvK6#1k>R
z=@Iga7`5pcW8`^g8;nLy6m9Xkg_wHGh!@*T8^U}}w$CW7)6F^B=qZyeWH>Cm1Ob8r
z$y-AC+>ltB7JZv@quF=Y=vIAa0k4HFdY*2vAml<5qfG}&0dmT^b_qvBF&B7QXpuy~
zDZ|pPm2kwhhp&S^Enh&#{n^3;cEl7H-ob<zd?KHt90Jb4jxPiSTQs(uKgXEkX|WV+
z+f`$P#@Oqjx|Xr#quaJPhN?=&CaySUfPrJJx_O{0YqlKJTc`ulWzX&Afv&9H{DiFV
z^(@a6|MKEisj5onR#*#94i89YXt#>0-Z<C$vncboSto}_2DGzkml6iBP;D9P>gvr0
z^>);8$_@0BbJDYQ{rYve`~7#zfddCj7ZPnng`u<N+}chp<1_x}T2_`PwXSN}HhrCH
zZriG^42?c(_0g>=eQ@@guOYY2X{WBV_if|es1xf3n>%`<y0R#BUCWM>ZyPEiq7&OT
z%IFsV*DBU^D;+<14WrH%JkvO6B6Tbg{psb)T359kIeMh1Z!#LVN&Igf?CP2=PslCM
zT|Bl7c4YOIgSt|vNiEE~xwuX0q$vYV^ziVYc7}T2q`q-(n^sk=^S5!4RXsdBpxvQH
zQz`t0##>j;>D>Ih%$=Uo({rbFZhl_Ybt+x^@H09$H!mxydi&~v%+1Zo-2A-E&&|vH
z+?=fIRI={jXXW(i)4Brj##-Av*pW3`tadCW#1F^E^W`;*a4Oa=b0ZpfvNs{ti(_XG
zoSSx#n^aepLyFmqWc?NAVl22;iq)&z#+x(5Bh-Ds5rP(&gl2QRfFM(e=TF6xbH@B*
z{)i8AK#+nT;@Pk9rY?a@F&O74^uBip(-k64Fd@k}Hc!1L6$RG<j{1Ls#t4+M;EUqM
zgao}(Q9&{wP}o&vws{wY0xp3N01e^^xM<rL#5zV6&*XQlI5&JGTm{5z@ut@){8s!G
zxB+3L+3%6J7M`<Ba52W9CDW{9>nof}A>YUc*ph6V(i6tV`xEllk`qUp;ovgzIYYJG
z(JRhVQC(HlI(h>CNURfo>A-H?zT;uNef@E%s#<p*eO6AKI3Xt{PRNN9CuCycxZ*c9
zSFRn<x~lZyr;h1~i3yoFKA{s66FPDHxK2#ZSPqvS-z7VC>}+CR*0F((432D-XQpQK
z^ywKrylacpb*+16t~Gcq>)2pN2S&EZv8h>^J3XUM?%pC*UF)8iYgWaV9^WlHcI;GD
zm6cx1vh&C@dg8<hIX-b*Cr(Vr#Kc7JTd&L!U<oWV=XUMhCHLKTpRBChraD0Z=XLBl
zSMB{Nn2j^n(6)Yi(~wr3)q3ce2|YbGsRy>LmAdZ8Q&;@&xNTk4)$Xb-GQDs~-k6_~
zZNmdvRh6#YwP1dx*AB|yn!S4IO7C~Yp4qlq>uQxAIQ*>4%}wfKyS8XuRkCO9rY)1}
zI<;<`x$YQ9TAMg-$Hbb1o!_xzyFBo~2lSnH-(kJOLYr{RZa=7MkE2Q+K5|TtPaM}1
z6DQ>O@rfQ^Qzunb<@WW*rLJq;`P4BzabiMFOiVP|o6w0#*WSegyLJ2ahnpmpb!?z3
z1H)VO*yN1P&&|r=-J7MZD%m@8t>N#6jt+KZU}UR2J3TA&^E2|~t}RkmweFqqJFjm%
zzFW3$f0#7_3;0;KmXSl31ar0a(I7Y4t#ssxOA;6UOONlC9orvPRngnm9+$eRbm!4$
zW#ag8oj7qqCQh7?;}a8lVtOX{Ho?(G7L8*+b+`Y&da2?$?0dBSVdE&wr7<BEwi&N`
zT-f6jdUVhj^|!V)1sDCac}?e|z2bUST;l|zEcgU_IYxc?L7)D{QXC<`CgV<8;%ce&
zxDTKltoQk7Jnx!we{lm?;ne6PHB;Y_qo~@*OeAVH267LHcu@E}k%%NoA<^7+;vX^s
zAr|5;<^tD>8!7ZjL`!_293Yl5hA^vqotMVUPT{Uv;8wsx*^i3`e6(+lNT_A8s^W7R
zgPSnY5zZ-ZX5FhdENdJEofd2WN6B9wJR&c~fA7ptUFm4LTbJugRaJ)SN}4~aocWs?
zT_tth)oYXETG#0#s!FP=mb$K_t}3m%!`4u*O>gX->mAbj*s9X1uB7S?TTWA>tF)>*
zCjVR4=JesM59-=AgVOB`$hwhnJv?;@s208T_MASvb(5}JGpOCpfUX_hs83E^B3!0M
zhqS6YBBFYIYNJ@J5Kmp#T6adWg)Q<ASm@i=uIc;U_dYpv@DQ#xEj8*IMdh#U);d1(
zHf;bzZ|RX;+jQNURodwe$ne-EId*QDY~Q{*ArB6(k#1c}Rn@v?<4!#`GN9{rpR?+`
zGO=6M4t2CUxZ36&JFs0x)~?cSw<~MbZj^%)7m<2d*R6HDx$B48A^io-Vhz0c=9_ZY
zUGI~po_b0_lVbYoi*4`e+mqv3^>ie4Rf&BJT2)eYMpQ-g+T=!s^IBJxR&^~^RY~0)
zA@1wCYr4LDeO`8M+azmO4{EnNpzB69%HioZD3)f7u3bH-o$i3F8yS~xPhO(-GC4M+
zb=_%dnQKi{bgWy+@S#hgC$YB1I<^1n8P-Wer^kk*uDYtKa&2m({T^j6zuw2cRb5Nf
z9f3v?Gzx1{yt@>28a5c9#1xV1Bis0)t;`0#(JAz+5J#?yCSvg*Y*Pu@@UoR^Ol)qO
zzt+uO<2>|QEQnIP8Ls{EZQ0xr_KYpXlHt_4&NenU_vE`|AI8u=CXCJY2}Fe3V{JM=
z1%Fi<AZ$$2hAk%G{v*)5Fw>@ufXf4+4M{qa!Z47*d$^YS;mx4}`L?|w%t8Sa$?-{j
zHb%C2BA@R;pqL)zMw$p>DaM|j`b5F8$ZKel(ljp9jYpWr8?FUUfm;WguL~H9^GZ3F
za*g^Fp3U5WyYL1A!twkx+ObU#jUy~kso{AaJz#SpR#*=<MrpjyfYihL91NRrEZj-R
zBY-$?FH(9}uAr01q2q;q8{Mh>C#ottc5K)C?z>-BZmp0l8rOnp=}jK#tfVbdv0q!h
zwrp|d4b=UMGWLi;tO=i^Fah^1U<?Lr-@aY$zyCgY=bd-5jU812^g2VJ;NN-h5t&Au
zb<Of%ZN|GXEo03Sa6udzHoTFDo2qy~eJIXDbW(q_;nwqTUVKyD8=m_v>LJUM*9!nV
z1rgp<^STR)?CaBGPnd>rymkT97?+(#UHHb9gQWV+ViJA|aWglVmr#;9t`cH|;UYNH
zxz0Ir0}+?B_7$~`nh6|=osYReJi`7g7F2G5U-J@b8s}vBVw}zODmKcJpgG|bPyj4A
z&B##yU*<CtWg%%u6pNGX=i-a`5KPf;;auVFn9$}WBNj36*l}~!uR%n=88=brjR<U^
zKsJbUo@dRu6f>g{_y=KQULoh!hEytIiWm76<vHm!jBnvY?5yM7j&;H?i`ma)Tolfy
z*SL6OjYTQ9EH2>78o_(ei{~CW30f>4eXo1C!6s@ejtQHI%#Y!dl68F2tIL;vs(0OW
zmmE5Dh<SEMX+g{G{`A>!P;SU+S*Ivc!T=Wqs*9+|h_}H<F>q}G_itW)Q|@}-UHZhK
zLlhfG&K9ad{^Zry0~%b^xdkDftJRhV=-i;zEEn(xbHt4)Ju7fy6T&%$4KyZXq@d??
z9_uAOvKDBu&FfomuIm)fY0)m`8vC-C)rd1FDEKD)14le6u9;}3fJM0vXSrLvaJ_w#
zp6i8kYRRqTx=W;F19AxKI;~}fn~|2`PCdMYh1VjTM-9<C@2rkm;x>D@_k{IAmHZ~V
zZGSL112-<deZc2{69CY36RVN{V~`+tbYt)vE@IZWK&T<XoE~u@e(`HKh8laB)QreT
zwl{ka2-(D5>Eoz-M?6WK><?qJbD$-QDToFah}eA1Gm0`HObx`x2Y7;D@f>1Y80!#l
zjwQQ*OMwrK3z_SPRTN?)n{9s8ut>!R*qN>1f$Rmm(YJtRAWzf{VQ02!A*MxH!fV5d
zYl(BE2I=EWs#%N$tZZrt!*YY$v3<MTcmI9z?z`^*C!Uf+A2AQX6>2!v6X8qe(#9>|
zh5DgKly-&(*kEl@ze3(cbo-9&df)x`%gV|vpaXb`K1z6GTp%Ty^+$|}v9tX0dZrrU
zJgpzvn1DO=kOJ0}H|0-@9_kY-&fYi`bjEQ&PW|wsl!Go)zL=}&RkBz!zfEqa0ml*j
zCA+Lw$_H6a$P{oe)TmE5-X%^93kar!FKAPI9OBgqC<>V~&F$h(k{ZTqy)j@NW44~*
z&{^ZPevmAZeI*PHmC&@YJ^T5B9w`yWIpvb(Ar@x48DAmbWhWsC4@e<W7pAma%fJT>
zr=VlgB=V6>PuQDv1|9*@deCBbhq0Vvsus{gHed5xyg1@w%Ve<_nP@lfM?2maD}<!T
zE#?$)NMV+WBL&UZA?_@1ik-9-aR?i3vPr0B^TEDf4|ZHrlt0dg#wtZ$Qkd)4f}VqZ
zC7g;p^+1JpG!{b}F5t^FmTcNn`yXJRYcvT|$xg2CqVDnq3!%-lt3EHs`10kS>Rs=<
zOOGBoA{J9iQ%rAIvOG|aR<pPuasIr5mh+~1Q6C?3FYCtZyuGHxM!xyxWl6uU2(!!m
zO7Lawmw0Q73H=AHfO;|x5eL(n)5Uy;^8hNdn?lJnRp7>Hce_as#(BgfXdu=C^ni#H
ztsP-}j;+V#9?&Px%ejS(MJu1#CQHL3y`f_~eQbtNx<<@64ZgJCyfO{}Oa56HBNjrN
zo^cHe_+<MDj?soDRl|CYH$OZM<O1{x{WxKl>!-+zueYMXcSZ@w#5u?}fCV4Q-@45g
zaxjppEfYbqn1kYDr69tBkTc)P4IrC`#8?U-h=PdPHWoJAyGj8(Qy-rvQSyR$XTQq+
zilTMVP{R$)4hWHm1#cPyOF`6(znJI?+y{(2Zz|>-BeLTQ0&9SL(lQkF;l9jzvfF}(
z=iP)GbYyxJGHW@<hKk&$!Uv8pchWKDZHp*i$_*#em*bvk5|?Dc+-*}%Xj95#7)Ni$
z$Q^ehSDJ*^Xe;BC<K4P-n>_G=2jty%-f><M55m5X6N@KcQ_va|MxH0lLlkqrQ8Uh2
zsMR!=`(|^lv6CA9&Ye5u{`>Bim0P#mM${$NfFmFjh5LZ({c1lyZw`ucuoPOZg_x-?
zVJ@B?Eu>l+51OGKEM!EJzxD+j@i%zbt8s~ov2stKh1<`0WWsrqsslrW2W!(a4q7O2
z39+Pl6jcrR8&}rDT<fqFyP(L2hwru!NYtSe{DxY_z7gIuyU^0w6fpAc$9ly6oRVTL
zSTmMS(FY>{KIv?!9<secHU^eFL*MZ$Vw_`XzWnd#l?Eq)h6OS%h#_%o_7+G<P*_AD
zRTFGc4AGam4Y!M%lak*oW=-*sxFXmk5g}=`*a7jdbWt})FgaFh@+~<RHjd;Q7EoXA
zGaO3-EHr-HbjI)zyYw7qW8q}}V;ndWxG255B|I#>a9x-u<SX>67?XzQJSM~hgaB4X
zV_1_p4q9k~27+yME>j$oTX>cTdk-2a=|I6wj#E3o(WcK;$j`mlIN^EVYhhtQ>#CBY
zM~;BL*$=;K51caztq12^&=}(v?1AQjj!_Tx81jq@PCDLx`)$4Z?z{ES!GmPejr-cG
ze7Z?J=O4AoeMrcTgxADV5x;~Pv1~Dl;MH<%G8bat2<XGs4IWhFBgUO?L>vp$Iq4cj
z5VS;^DeIRwj#$z2GPYbXrc1Gz;*t0U5LVTau5gaUT!=kvKhaZbo{p6&{2&{x*l-N}
zeBgBwO?V^9e9`lCISq78(3+m=1nMQIgER=iWjJckW`;?NMpOm<SHueRlW9xocl1)T
zaY1H6Q3IkBP)?TmwP-`(d`PHoWA<xp8$ke1Q(obD5JLt`iyagI#vcm-TAp_}4b8mi
ztAb9-gj38!Ce%_An<mc|pYU*OI3=GYY!&gMce2JA%newO54&DC9~YXEJq{k{Lzuy4
zt2V(7G)<2=<S7J{KedSkJ!Xp(E?zO#3^&W4^a?7o&2Y>oVu7)>EqYNCq$iBVv5jN~
zj57}DO@qPg*5i?eZ{EB`9(dpb;0BS$y<BXb5L!#Vu_wgX5s#z~)(PiKuZeqzqL6Fg
zKvhI{?cSyL-<N(jj|`zs3LK*q1UoEt9t&$7@!@g-8^Bvj?OKfPfqcca#x7y+EbxXK
zd+eiSJX0Ft5sAkT?IyfhaKgl0aV2e~zHgD1`7Uq9wP=%Uwb|_BE5%)^{m2>CH*VrR
zJd{Vk5TY&42i{BgWSF22LEpr?olE#hAqHd33qN8~<`Xc&p1~N2=_|wze)!Q@HHs)_
z!Y;!avKMu~s1&`!moc)1$hjfF3WtN>sI_j)=zyd%F-igv?bvgaD5D$~l1$e2I*=LW
zWg?~V;If=2k7JV6Pw;CH1?$qAt;MUMIdPnje=85cZF@eM;NfQue}T({fix3}KKL9K
zsx{)0T_K8#dA2pFh*fM*aXfAcjVHv>xX~=uyx?I*)Er<@#2#=#970YW8O}q0V%x_y
z?0EAUY~&iuVz|?D5_QUdVPR3~s?y^V6QH($Re{SgZm3q&UXC3#|58rkHgn8CZW-oM
z;tDh(dhOaZx%=+B<*~;Oc$mmB`fTA{JPBBU6Kt46ra@a+?3F-xgqK)cAT-8D^T)n@
z67d%blExwCsUH*sgzp4Wu<iZ9hLVOXZ`V=6h426h`mcFnYgM0ESaaZq`@RR1#w%%s
z^I>1)TY?=d(M<P(=onKzA;-0lQ$8kf<w@{7N6i@t@q~UIg>Dl<6O4E;#sV^Gcqa$s
zg7VUoZ`zMU4HfVs%zWeRamRJF-<sIl=%tH+$Uch(6Ne%c`;jPs1_8k^2zL}Z#Unf(
zWf`woTy)qan2(o`uW~$CczrfP*!(hq=kq+=SbS{)fOgl4UAoGmK-it*B%a8J@mIjb
zuX!x6!RE#o=7a+WCM6*N{c{Yq%pWw4Y@BiJaeJIOKgegBX1&RHTIkn2LZiR}rOk<<
z&|CovWYZxt-=+AZs4doP>2;<DiH=d%8dHZiC(a9qN!mC@-EG?Rpnl{dzaofLx|lCc
zjwU>_DMeqxv3Re#^PGq=ox?;OQ5=&2qT2h{LGHQt9$j8u4mDQNW?BF#UcdzFA$jC6
zcm@$np$X0tFwFYM;tPJMXO(+(lL^j)-b6XaHHx8b)s^|NzEBt^j%Tb%_a~4O*mP-9
z4*t_v;hsW#G_jSLDdy95jY7t8lsm>3%qE@-+DgyEnt~S@H?<jVllq9~Nt#m_pT!K@
zzLYW7b5a$>l;MQ+4xE)<6B0o;DWz8ZNzn>wI?PYG<$5HWW|g~OMMQ+>=-qt<K_#=X
z;W@Tcps9HR=llxvk+@1ipkgZ|isLi!^eF<H+dKg<GGV6}g|D#v(0m+F)IuOQZ~Wyr
zi^ThUjGgnN^(MDpnB(yWEc3A~J`+}s6U7`}(?Xjy(1LC60wE?TJcmtEz`nE@FJrDr
zVD_3f1+HQ9YPsc@72+?%BhhC(IGhkS5P^Xd8@9i_Eo093w~Q&}Nw3|1drgM(jj!36
z8L8`ZR}ZmI5ILT)2IHeoa;;I1f;jtOK#Lm?!6C#2Jg-}x+x%|c``@pReEG|L{5u9E
zKg?07M<;nDJUj=~D{tmG&ajx~c``WEKN$y}XT1_)g2Rn_IMf5(A#aod2Hdw|Oo*$b
zxsWd;holoCh@sg~oTIc!33@B_Rqn;Yk)~%^k5&9Hv!mF*Vt-VA?ReW+;-+uxIKQ#c
z(n}au)Dz%U@K5#;?^3O!jh0$huv7Hs@dHjgPBYFdnaFz+WAszNsr)9?b&1$j5Pe37
z1mh9(a<YYMIIqxbeDP861qJE~ED4LmWuQRLePT5d;{pf`!i9yDB|?Z`%8f|4(`LeH
z0GepQ@mPzT#Ri60hK}g*NP%BCC*eBs#5O@M7#?vG{P-M;AM&M~V$*CZhJr?EGXPi0
znq$2ea$qZP-4<O(U+6jNPOwMjS{8gt_8r^u2GVf~O;%BVw2>hwBX(db*rV5Jkti;d
zP+$Fe1Ztn^Kxy8_jT`kNzw!~lGlc*Efu>Sig=Sn_L?Q;oI19S-Ko}Q%oiu_2Gh0m*
zyLau<d+xnQmT%nfG0A!6BcT*{HS=w;=a>-33iVUKCTh&*G>_0{aiIib8Fn-v;l<}6
zCg8FkCn2Z)b5fj0U(yF*kGiD1Q|``3FLv+4srT~u6jRh?TxTRjQy5En2b{BYgyRQ&
zT7W=Xj#<D0*BBH-#zEX@b7VvnfeW&@6URYQ;Li(y+CfUJfi?33z?5?EnisH_a)K;L
z)h=g>FZT00<Oldce3WC)B!3yB2_!aU7D+A+KS|t3X?{Y6&bfEqU7KwNx|K-s+X9-T
zANj_M8i!{7vezW~@)#$N3LnJdpu++MN(4%2K;{FKo6fmu4LGrgTk=NuiyR1#y>lTZ
z+*8<DOzFR<tu{^q|3RC`unmD1Etp^|l8;xjU6>!=`8fwZw=LcbTZv(`H)!DA*8Btj
z03ZNKL_t(S5o@;vzHN~R8|!{Jm-wOQt`BIIjumr~>8B4aq~nt(XSA+snVgyeUpW^9
zq+JJ-*x&l-HcgG2Z<=G*BaWhmOXfptak1BpjpgMVdiUM^?&f(88SPO+rahLmVPK{*
z8;UWt<=W>BeulHZ%;&Z|4~q`#f>OY|N*vl;e=IKOpdZ4ic?}nfetf+6grJFFH|rG`
z3&r8*372Ruat0Vd{(+~Und~~|7Iy^2eiY&~yQtm93e{)u4UHs?1#vbe<GIL7@{?c7
z#sW^XCPNI-7Uv&z<`u&_#DjAWocnWI=QHh6{u%!&w9zXB2obgcl{Z=CpjbdHcTCEl
zla6@N%<Oo&nP^dW2xcs7T8uM+8oD`N`55*kY6NB2W%)M3MM9zRWpn#9Qp6mKiVCbG
zF60!m&2m!BxG32Qq64S{-+*PI(ZvlzEVeW~VHVamcvZr^PYp!u+j20T(FSa|@tg==
zb(=BA<TvMlUVAL8hl~$@9b%7EQ^O|CElxP0@jUTT&P~By<S6}!JwR1-e0*HT$HyUD
z$!(xE6gMnsgT*ltU&f2`oX0^JtJ}eH@P#P>$n7E1n5d|J`O9C{d+xbMmT%r9ox3f>
zGisTfYxqxiZ0VfO&*KaH*}!rxru(e-2~MO%->|et$I<7IKO@M+P}rb`e63%=T!4!=
zCZUI6ydXgLE9xRB<w@E^q&Y92A9FEto*1o%K@*zy=x8rpWzH-ziZJ?ft{_(KUb$~p
zklFQqkl|av0Ly`GmvBg-XW00K9u}mf;Eyo3$V=<4y6&?$l2^(fPjLLKk}OZqv^^55
zt>3yW0OZlIKqy`%M;X9AF7uJUiz{zPGz}0Z1Qr*iWC=-pVE<WD2xCh{TP&PH0Yu@N
zzZMevz59r9hUUn4K)fhqH>(g{k_9&eUf{^4W|;NK*Exteg__84O{oR`OSr>xZo`Z(
za2T%}4u!F{Fa%u}VrD!H$9{TCm-A-b*DlJw?VwFUxp^v=k0A1%BcO_Q^SD@hmW#d4
zHH=F_rg1ap=cgv8w5}?hnVrq~2Mrfv?1NWWzyM=7cL%OL|6H>mD)$#+TE2Nx?!D(;
z*}G?Nj$=Vf3X5a5;u_xtPTFiHR+893H!+{=K>R?yNqa<S0f!<_tXYT?HIZ;^i<5B{
zv=ni$nGl~+4B{q(o}+dM^YZ4C{Ht?GbB$lf7xFLZ$VOVu{e5G8asBr58L^mez>~+d
z)gtz#h-qAln1fPngl^J|DX-NHBZZz=*du84TZ%1<CH2xIEMTTolfrfpMZX?-l!C4b
z<0{2COjs?VfFS58&c!Kr0K>@0d?XN9a0$Sitb`d~W3m`%CNzsB7baVR5S_R?E#O8P
z#(-d2!3MDwIN^64K94ylh>sx%^Vkm%CzfN>Mxk-Pw}bt}Ch55WH+T}UY6O_&QN+=W
zCyl^K)<IrGna?6lu~DLyESzj%%JViekw+6&L38D%ddCCsiwh3dx2iSh=K0NqMOnCX
z!y*~()VguznnxdUDCK0a<M2M(`jwCTij0qMq(#nj;7sz|bk0_dph1ic7f;R~_(skF
zAA2ZjJeEIhkaXX^eRB8v-!Ip%Uw17<U1Ba2zb`I$eR<)WE?!!;u_K*Y#%JE<eB4RK
z%dLxZx^R63(#|&Kg;)x_Nl<Npe|Rj$(hmdkA<0Md1NDNnOSA!Rg<hBGgf!u}Bc7zk
zLO+cgwOD)X2Q`;+kT3>)vk$8>=wEg|o=ceJcvzg7KC}766^zM!<(LLufQObj5gRSx
z)Rrgmo5rO&$5>2X*ymf<MUFp_ifazX#raS?#Is{)V@i5x>{YyAg84fvLT=ozA-H!w
z$XPb0yjTTMc~qq_*^$4c;{wQXi^M@gwt@-vjWolVvE;l8g2gxj1}Lytd~HP$iV?B%
zF@R^V<31V@mKH~Uoh<+<I5!XIrH4X{fDPbBCNh3GUOJ!50he@<=kVpck(O|_aa03{
zl^A!~oD54CQ)ryj7*KZ!$L1goihc?j4|>jg6OO%S6Ke-$)%c8U0!F%(Zk)O9i=WvB
zt%~TvGkbJ&c(ru9Lpru;tIl0paZb#)cutVO@rmPFRkhB~&1by0-vV!>NzPNkd2q-a
z-pOv736B7tSdd}<&6~?|&pr3b?%lhit_vI>t)Q9oU`|z!uN%~%jWZTcZzFCSJ&)D&
z1lXwRo;6(=J8_kKWxdHHM2jV3S7_=H2SFc-DS9vSDM6ztib5VVCPij>rx&Q5$Sp-o
zno*x_&$HOT4xbkq;0beHh?Bq|u1DUGSlogpf|g2Jw(-b-WtZt5L|49Ub&%FBjM);h
z9DP!{82v^bIA`w{pfK<k;&X+y<Rj#n(1^Jzjx6{RGfPaCar69AUX~8w+JZY>t31yn
zT!H6qozFtRAu%c<b-N})!ak7_0VyP-vCzxFl<bt75)0eoMFGHTj3fGQ5qMa}Gyn81
z3vo+=jjshH*(RWLt%xhgi}InAvv-yNfG>7Jz&IuX=i2<kn2?M8EQueR1jmf$a~!h;
ztdAaiPvN$4j^)k~7jlgn<D3bvl746bqe&4@P1yJ%hWYryf*Vc7$<H}Nkbkayh(q-F
z+5ug)amKJ5?pCsK_L}nyxuj&SJhN4+y4HuEI3gz}kL$zZLsECv%9YzKTJajOD)^O;
zd_=cw*+OeIbt+28F@Q`g2b&*#1|HM6c$cKad*Mz<IFJj`N51@szW?sK<=VAtfj@JK
z++{kjVZ^QK#M%K}H9qSb@lLJdGuPM#2(l-o6}@_CUJmXa*Q%~`^!SzBXS;3#E)-&R
zwDpM$e@`sazx%}TzPYq67JC8mAj<2DfCj9-m@`~`z0dIGl=aW?`)jO|pc{x47gf%i
zu*v-eUN{b*j%cz~JFA1}$D5-2O>2csZ{xXSJH(M)^BfHGvTeqpSVOT+K_l2RiGzYa
ziTnlobd#hN3j{Fwwxru}YvHMC-%ZA#`U9B&&&~;xO^d4QGh3lFfKs|E1!S51V5{em
zZ0E#bjBW22p?li1ShaLA#|vOpbW+ALv7N+*uCQqF6bKL<-l+((L)aJgGHO01Ms@52
z;{m_HCPk~D5gIE^;}xDuOFIN7U@-7oh{HKE-dp0OgSM!qW9Ng;g$4^AlcxG{BYwHi
zMEGa&%T*DY7jOC;|NeTMduq3ijjYyArz>lQH|mp9S0%;2YpA1jRY_G>T33UjqB_#4
zb>rj}J-mIhu3I%Ioxvg5wBs?o4Y7_6)VlWJ8F({sP1kj69Xa#{ZP5I><CczN$Bs!|
z*Sc`-9IZ2PLn|fz3C;utbCK5#$)@lcxhFk2=B2(SqAM%6^xk{!(Qr49Y{vQN%IPD!
zbZmHybUIyKGqO<*PrhYJ-My+KbyZ7MS5j4j(%XpFIzIK59^SE8)(s6vcVI|2Z9kwZ
z;P2YxgWBzMq|@zcT~#uA;tCdBh{H7{n4H^#=ZFgK4>Xif$_}+a7;wF!uYNoxG+}fR
zZ((g%N=?9~vBV*Agz-n5!fVPOF^n0Rwk<z6-{6Yt9HS?M70mJU0$1($z`3Xa#|)t3
zaripsZtET6PRAYBGV%WrHjrts$9ob0R{RmJ8Gfa;2KAb9%C%O?p*637G5DuBxz12W
z6*nFfEIOdvJ!oJvcg)Un00N;9d~A@8eZI&70O<m~>#<csI48uuxcNgnARi;2{JUVm
zmf6jUt~lT046$aI(z_Da0JI8^@oz+*b5&Z1{2HAs2@-r}{9)c2#uV|eF_=?m*yToF
zSP+9<I9f0+_=DV>-iF`8d|Skm4q4Y=%P!wJUK`twgJSJs7>;}5!p3+`>Gk~M8>OxX
zW!K?nbZ%~14(u3{s;=a*b2n5~^!Du)Ikt9CR*g;Q%I(`CB0AEkq_bvFAKZOd=NA^_
zse?PUs%jlS+S?$m+?<xWs&&s5|Gh6!)rpZo9bEH-=ZZQAyosp3`_4P^zz04cn>TOa
z+$hJOY0Yi=n>l_g9i><(E=D`>or%t_9XfPK?|%Q?a_!pNY8p;_nw`|c4H%s}Fs@ZK
zD7&6~R_5oX<gp#2TGf?2wy><Ks<&5G<k@wDvTF2%+*(;tRh5x$C7soS^5Cw+GQYSW
zN1xa!RaMLQk+%qww6PkhY8jijl3a%Th0fdcs7Aj^`sTgKd#PF1Mfs3aS%fjJ2?{kN
z1#QF)S(_f>dWe}8$Ky5As<h4}J=$}d4EQq#h-F+8a2;bCjvdAYaReYO;)pNhiWlv*
zQxWg5IhrX}Sl{w^<9@;OqVsXxNHvrQ6mm*&r(_sg&O76k^#VUxN7;Ive3#(n12GGD
zgT%pKl>*2DPM{zmsrWGv6B&!8Z?nvRC(&piKev$qly7okVV9anT%`Lgx-3p7#J4~}
zP(kbwPs1w2%sD%@QSiJ_u^5Ft7jkdqhPi;n7WgT>yCg13JaGZ#vE6BLW$`ChfPs3f
znSPMZplNRiKF9lNStrhV&~dULnP>>(0#+fnT!YSO69L2|rFdF&jF|I5m^Cq6)4{sd
zjYr-f4)?4Z(81LQ&Blp!12Qx|qiM`Yr<Q?rd%%|Ho}sR+-f~h^MQ>i+DRo`R#PSN}
zuk$-rOJ{IA<_v2~>Z2~<BS(%%RoA+>u$XJ7Pags_m2fA1(zS#$AZXY|`@oA61U7?a
zRpr*L6}|ty`(@XzU2F$<X7<x@T?Xn}HXgY|vF}+sD1)mHS$xOW4(QPMN$00q$-vsZ
zC_mY=sv~PQr!hu}h^P)#wT>Qt%j%18f_lQ(BZr2EVaYo88W%%46%{VnW$k)owm}8W
zVBBGoWBJ>QQjC<BWY>yw0o#H-9+UbI#Tj)|z&@1%Un7l^Zm=&B2Fx2=Vw;lS444(T
z4#C2v-q9%JmEjCAdP2^22@{3qj7Omtv~7s3#xdH0Em*VzM$uj&=4`(Z*BKHL$Bg>Y
zXgk=I^mp`lk}ZG?JOg8ADR6ffHgBL?)mT8xQkq+C(otllmk_fz$e45rD~j09p*V3Y
zT$Jc5+Tc{nqAI?dbQjr}FfJvI@t9mNrt-TYSTEB&fydl;3@%`Y3mi-l3qq+lKttA?
zHH=B;NYL=S$&K*Ja6!Hthq%EM#<9@kQ?3QBVdH^377nF(fIg1$m{X+vVgh{nE`;UW
z+nTnj%F0{2wW=yT`SuN6xphl#t*q#+Teo!K;ILNR)n;#E-JlMQ00}|%zMnKf4R<RU
zK6DARsCsnufUMp!qpB)5E^g7Ps&rw+b*Lh`xMxJ_?r^THpgGjpyYIX!4}9PQvUS_G
z*1o~DYRbVAP!p&%t`%y`;W_G#iXzzX^M3u{p@VwYUGLND*XWzJUJH;o_Mh8Vc1u-P
za`M`ZhMN_=y>eR?4h?J7S#8rM*7Y`e$@fUN(vd?KDW8U)EH4$+RaNaD-KIJg2rOtk
z)idC2F=to@ybYsJzs!#n3EFg9U=w?vgx4H*pV~<|hJKijE$PgP({RApOB)Q#%doJ#
zS!*$O)JTlk>IQ5RzByMKa+ZKOVbRX7@zn?8pgYq-j&r%5`|-jtad}0ab6pS*8I^R-
z<MU_=Jb*3Jbe?0@iz1YL^aqTKYWmh~2qG->S~L`e7QxOJ9Y!c4hvV=tVX2FtIFJBZ
zZa;zMMuBvUr(m1BV+<)HGgyir@QFkhg~_7AM%tsPghRPO`8Y=(S)pdE99xT!D7F|k
zH&7{XmHUc$hdHi**z^Vcu~rIkm-JaU*UDYC32ejK$CJ*m0P@BjVq!hDj0J}w21upQ
zc<Be?z`3RnmKQcjRaH_|mDF{ubyaEacfD$<>e}p1tR0k98&8`5;ZCjNC*LMNM^+E&
z>Mb)WD!TmEPOYn2r*5n$_M5pKYo#+V4t%g?12=Z|=#isx*Zc00H!r^l7&)8(5H;k*
z#YK7PrI+Nz7hjSm{^SYWzkk0xy8ltxzyDF$w{M^Bf3$hrw@>%&->3Wc@7G5keN^^8
zx?lG1-=}}_&2P$!voGpPFTE%W3+I3U)>Z7WsF~X<D{|lc_sfp$J9s{FA9bDhIrpGe
zRV{T@_xP!+=5?ikA065_V|GTmm25ouw$rboM^+E$>MgS#GstmOUCHS2w-n<Jnpf9a
zVe?Wh2kPIrfg`>J?Xhhf1G?aSGRM-?AnILxZse%c&tq=fV0ms^{RVv)7I*OPSRt5@
zdlpM<73FwrQ<2t4<lkp!wS}+ao5q&dxh4YsalPO-3}nyGNt98<9Wqet2T?P|zb4JK
z^y(H)k~^dYxrAs4`*5zL*=PsH0^j}Cj0zij44}`sqA}NDPIA6}g}D#|7bpk-K=fip
zahG#RwkR&xG-)`WZx~pZ?89?T&U#`Bpks9wu)|omndMkIPQ*wNYjW8lf?&__DHUrh
zyy!b>fMVcWvkhFZgAKkdR@6qh*%=|F{NXjsBW*=oQv)hv*^jSevu!SF5}Pfx+qU?{
z)R$q}de<t(5t`|ZOIx+BE4g7gJCx=_L{F?6w2y98REN8jj?Z4F+@4x9sH->kHWDj0
zCbX_A*>mMK;Wjb4O1f(fWU)f_z>UZ7?mO?w{rBCc+jndypD(`nlKkz76S{x@e*OIC
zx9dkg`Y{<87?irIwW@2Ws#@#1>U~+E*&KcNmp`H({P2kW>kkj>2R}R_AN=r$eDFiV
z^1%;{=m$SMtRMW)h<^A(Bl7b<|BJm%Z|~5muBEPeo8iHMLHXFnKBk}h{O5H4qx<D=
z|Mmy+;!7_IE?nt&;)z4@zW2RP-n@J{=KvNlc#~(>moIM9x~_G(#3j_>#JT|)+Bjo#
zd;IvfqD9k2Zzk7+sIE#M-MVkoSl+MN^c{Nw)LHS38`OdKv@}l4M6V~4Z8cw%PcoWa
zbDJTSh`HS`z?iV!^4u948|U-MN9Nniv}_&<d4>aff$5@Ti!@glLpX#nu^$)kr=A@&
zU`M7U=!01<(RMo)*~U%_nnN9x56%7c(>v#t#|~U%d=&6&nQyVDdPsqSjVjG`5hfsT
zYyiWqk>OT>;U);;h|d@l6hlfXEKm`kG}-+CkOp?NL4ZbK(PPXLUju4{l|P3?I5cy&
z5y&lWVmymvGxJ^C*tji=$DqhD%Q<0Pl;RHukd%uu+9(P;J7=az+}NBVKP6r;9$REg
zJ%Qs)Uj_o>n%OnMDRE0}onE5e0B>wfd5%S#P_d=l{Ty*m%}Z7E_JY)PE!)GU?fBMl
z9o>Aw2KN5E%B*R8xLfPS*=qooXxiu{T!y=~uH88gvD}uCPOT#c-Uv8Q&hf!;{V)IJ
z|B`?9&;FTy{&PF@!@vB?T340Sb)|Jx>FR&+uk^#e^b!5^XMbCM>vwj`SN{00KKAt|
z<*~2-H+}wv1)V&()H`ODbb98zOwBCn)a;T>p6tDzoLSWA*(I5pIWLnZmvn08yiCn3
z$>hmJeg5QvPQGwX4julk{@-8wwtnTSe<uI&3%li^&-_RE*B=^@)vNy%+zGAZ!@u-P
z^7$P*^ytx}y0EYy|J#4~54vOfj@CDji7)81uBF?HQq`4ipSkAsAfhL>j?3s4<3~=c
z9ccc}VQ=1W$2a21CvL<MbCKR1y|Lzwp7KwDcwEQDMauP`jSq8Boh3W4716c@+kA#K
zBVh|pG|p3~sl2udzO2llpTKo+#eQ(}0rSf1gdszH0Q1k*4|u>ihJjmyoD+C39do)9
z9%W7;K7qExHEwf*z7R9VQ#79U;h|!HC;XXuQK}mZF4m%iTpUA>BiW+3EGJLP_5!d%
z;n?CE5nK;A7u+}l&c?ckh*tf;WwIb4G)e(TcFwbNaHBu02wNZlP<S_+#Rn=N=1Y0-
zW+@aMl>?Y+yfFC4CI}#4m>k5|6NoIy686bASO+ffoM6l$zc8BPKpfDQcnC`8vN(f{
zEN0FJgbPU)=TPGX(WaoX_)8c97YI<yM|>3ELQ7JXFWXN!cs}l~pkFsk`u8z~+*<2^
z<Ib@FTkO0AD<6Ms+iI!nAvtjPSvfs7r3ZFxk-DmN@7%KanO-|6gKPHc#VeOoRdl#h
z$;R+^+K#Rnlr@`YERRc1ZPTjm$bn;1a%pi+9^bM?s?IvSbUWy>r8aKfT$aE6+aJj1
zKL0rx7#wImuB`N)d;bUB_M5-0zyHYB<*D!fU9&-3(y5t6ojSRsQ?pCb+sri^yV>(H
zHG5vt<J4^0*!4DZQzw^tHcl?;<V<gq*VvTa260g*PcG`z?0IQ6fSPPi&NSy|&&yx@
z<qvi5AN{d@`ZK?!AN<g;{M^s|qEuBSgM)**ZQC|E`t;Mfyu2)+x~xW>XV=cNTh~Zc
zuaX0YpOv|}Nj<Q8vs6{3d**JK>ZjHX=-}!-a`DPVRaNQnV;|j$YHuUH27X5myVFqZ
z-@4TnKD;y{XXWvw4HUL<kSUZ0&C#UiJKBa?FTbHw+sq_;+2*m3N4EI4tvw+I;1J@^
zbBjF@*4Q$pYX5n>jSXD<<7QMnpu+A?>3r7bI0kqP>n)r?PTLNlkQjR~2l53>tixsb
zK#K<sFdoDt+b0Ma<Cx1DFRhnt>r`PM0(KG(g;-0y64#REdc{2FjzP*Lf%~RKa*gD+
zf~>P7X*1??Z1F^#6}Rj`WCR9))7VU;f#0@x!v;t*`v54~^bHKnu`&E^jTUefOPS)&
z@d|cuvmk=ufxzLq7Ge<?o;5q%0ErnB!Sv9jRb|+eY2L6B)^WoV3Kl&WZ-wFs`4oKv
zkDiMk)FV(p1s}+P7RQhuXsS}SlU5&(KJyc_l}!zrO3xz~5^OhiF|KD0Y}b)>tF+tc
z=$duodg#O@#9H2(*rn@+I?@?fqbj{GV~pD!z25(yT0N+%H_uq^qN;OG?v&BBYoyy5
zlCkm4I&<wd+2tDP1^e{Ve<_<cZ_(b}x>`s7=Z*4(|NZ}zKl^|FO85TJSLLy<Jt+sj
z^|bE(y}kOWPyTz|zT*q}_}320#MHb@&MawfBe$eeC!4!=_Plp~diK0b&)8;A{BGZ3
zZ<9CEjBD=vO{b0H?2=5+F7-ByzERZanckhi>6vCTIkVKvUy^S=`B%E@|JW!0)7VGt
z4&;_CTlDFpPaE}dp*N0zpJNBM%gEYQ(&=_|&AN?x@c2d2{FRAavUXKRI)kf4M0KQF
z%lHg`@#DxE{2e_$hN?=(j$hH#H}l@$aiyYjy+w^uE?JIR$UEu99;pwd1Fpkk>A+17
zu5fuDk@sv94u}O#VMl0<$Loc9E98cC9I^Bs4|zc!5Ij$Hm18Yr&m8AGW|(DdM?8*%
z1zpQy!tvP}<WBQzMf)JNLSKQ*G8{l>92df!bC_Kxyij`qQ;$TGFE6IB>5qFG06m-+
zRh0^yX<7tW(2@ZVf#-8fB5w#%;>n#4qay&|==l!>K937Q%zc<37@cBXzK;hye1P2v
zBHYYAKbpN_%z5tkE-Tt5`&_^XJ*vQl;X68O-7XPNFU1lC7_ss}rDonz1QxT>b!bqA
zV`~8yu*mpsi#fBY{C4rZXgxG(fB;iN{EM~={Blvd-e@e~X?e!xm-qz}kato0`4M=e
zW{37nL}5c|L8k%kpT=SSX`1NGn>S_OzWw^o|M?oJt6F~T6aP;B=qm^HZ+`G2oto+0
zU7MO+l4p;flrQeyD<A*WkIUHl4LZ7hgN&}<prac$$k_Vzx^3HU$Rl6*hCcJ$KkC%U
zW;1rOcL%O_$F8~SH?w4$vZ<ML$FF&Qa?!?{@5cXRGxzXc{Iwqb&fn;PuYOzie(5W+
z=lB1s?ETVLWbf}ks=I%0uWa4+8~XVjzpWF~^D^1QF+Fo${&3&d^?&)*|5bnf7k@zq
z1_osR{{4F6#*LQ#>ttdnk?xGHvNj^-N=BWl*w0Xx5Q{~F3vmdr9KX+OjWhiyZAw^E
zP=t_Q*d*H<VLwNGP{Lyow^)Y}pDZt^Nv}h~5b?<HwsAtm9PnhUp(@>`MV0%6+UEFB
z1F>c)kC+322yajUYfY67M3-_SPEriGk=0-`@CEuYJ#icbo?xzB5AiV`HYVGEQ+h#z
z{vdSC$CP-Fxq=a&C))gZ6;Iy9moKi8kVz<`%~o)e-LL?I4F(PZ^y`=`CKdcfVj>tV
zg&5~k-uWCqpEVs^q(K-g635qNDoALK2jGlXqHh*dTdrwS+7FAwwIpe3DPM{y<sX`i
z`D_wL30bOrn?{~z5%1)yPzZnxJC6;K@GIo%HW|M%?%`ZIpZ2hAcsf9FVdD*3!FK>R
zDK+AV^{w<2djX&j<ID5nbDS5z)vmW97OL_m-~6Tw3=Zh3q5I`GxBn-7?uS3>-5r~0
zJ}N!A)O<XeKBDbyypBEhkGk*CZ^%QR{;ZB}STAE6Hptk9-llJK{Ra8er~bV@^5{48
zneV^Qd?ef3+)cs;aB^l*r)QSZN3}XRvuGdp+VAR}^pAh1W_ugH!%saYJ9d0QKK5@u
zCZp>&NYCebX*QlRx?zJH`1+H**zu#^lf8}RbI-plpZ(lUT{U!{3=9nDpM3M1Ao0YH
zgx5f1tnY+vz}PqzcqE;aHQuI&Ha>9;0b|}LquQcx7#sS9=WZ#AU#FO1;iSm|F{C(B
zkAzswoZHPYhnxums=<I)p{A1)?r(Ne0c|9o_ULx(3gTLdHA9wgCoM4sz#ZmBJp_Az
zN5l4|<$Bhm*jCBjoetL?;RpiiXAg4>aUxD(4RRbZ+hl_^kGW@dK^x+)&?Yu@^?w-y
zlQto^*oe%m*-Mz4#<FO5ZVN%GKCuK$HeSGOzIa8kK+khoXQE2Tar{(h{tV+WvRcHd
zIA2J50;dq$AONOW!6IQO=CFtf%>(hG0rgx2W^fLiJIBDh^X5d9Q^D?;001BWNkl<Z
zabQs<Pua#1ZM5hio}=Oed?ok{4J+GB;TYe1Cw>t1$V;<m<OOM(Xl+&$V`&UR7UzQX
z&`imH&?oQuTIOW1<>N!V6n|+m9P*W$H*d-(Kea{cy4K&={-2tUS$iM1PN%zPCl|H3
zi`Lta&EW6SE!swHV)C>e`qQW7cXsa5PyE^^dYeAjfPLzdzb^Z}@(ua+cm7%reC^x1
zW5*Zt*!NHR=CS!*ymaSos`+Sla%NFaOwGv?-}+10^ZQ?sty_On8@oETe!Y%vSTCP`
z=(Dot_xH;q`@gPRKDk*(*RR*dzV>bHebK{z2XH#wMV!UEgXiV5pZ|hZRV5$&*tje&
zFKfaq)&_Hmb?o?C|D#1BU-W%rQM9iGetq*37w%AV#YHP<F^WmyES0PW%dv}Vo-$7H
zgoU|eC;1Ac?eThIbfZK<d=#tomROI?|MPk)W1ac(SP-MQ7TJ*Kr@d~ox^x3@j@Bp~
z>l_e9iGwBw*PCkenLy;+`^4)L%CQDLBp<#vVEnVbovgrG5M#5oD{>~u1jdAR8WAMr
zC5v$n0lcv+SvPo8lu#5PDx)lh%wSmrO0OfBH~|YtTm9t3F_?Hh63u|Y?j|RV$QK`>
z)|7w*5(J7SFW~q(;)+<O*xJa>ecQV*5JBcEI|#QJ2ky<7L)u6or`cGy%gvtfE8`OI
z3e6j^3c3hI>TXe=nmT=!qZM=JAN&@1Y13SzA<{VHNDCca$9P+8WDTxdADBOG7P5sW
zi=AjfJL;Qq)wGyfc<3wO8hA6iH<y>?mw#zk{^kF;R{!kJ|B5$T&9`IiPFV9ed9t^u
zOB=u``@#i$W477&9sS-9W$%|BmC^O<wYk$LV;eSTy5l#tVS_xf?;E`@RWx@D)1AI&
zzW;(A`qtCB>-YBPr#|`XI=W$f&(8YwGPYs8Z2r_1`Qq-q^5mcYb@MxaOJebyT-0OF
zz0kzF)O<|rzq^<29`=48(0?cJ+kf%b@-P1713EH1tT&f$hQ7=j8keSHPHz<9(KjAx
zK4{sgg(4}}rG%e}d#=0ETnNdQ$Y3$X>$ze_QP6VcE9i{su`O?mS%OWh)o@@cxv$)4
z=$lyilG!L8<qZnOjq6Hz142l{wPKEa@r?b%HIiarP5J`t_`rXq{X&j;!pl6hYXNJe
zeP0rM(mKU@aKXnhVXr{c$JkJRf`KA(EwQ$&PwXlE9X%I90YodotYE1i3%giIo;6+|
z6#Wb8yiH^&HWU!z=1I42l9(Jdo1Rpx&1la#i9%Le^bC4OQia@Sgb{62Kp-GZA|mWk
zY#H6~JZu8ZAaliW0#=A;u-K2Q$U&j$IR2nF-ypF_00;X)3zRQq7I)MYX+v7h6GZmP
z^B3?zta@ninqg4D%+C>*0W*#PcyY`KQ|H<?V~9?nHnMlKK}-3OUn}1!0bKEVb7lMX
z-_oD^xnGdK`N5C0cLyzP<eG1_rayf$d)~f5n>I%2<Ikz|#fau3(a9O#Tpj-NztX*5
z+An*)w7+@Wrw@Jlv-;4dKO+x4^jZD%r#~ZK+`Xr_X>9JcJ^THW@`Z<Y$>{p^GPZt$
z_I?L&y=?i^X8Gdoy>jTAPwT|=eDg7{$1r6d{f3Wwn=f_nw|1Lc)0a7BQ*P(wuYdR>
z{rR8&1>Lb@yT6e`l_k!Ux#d0p<ES@N4HtMK(Q=)J+IG%SJD@%LAJ6qRY5&m>)=44G
zQXGmn^w%ZUu-Cd9wmA-jKxtCnkNvUa-!}*7BAIQS4>emp&p2RTfZXtO5gR^V?Cq?I
zuqas~cslnbiFn44?1q>yw8D$RSbmfcckA9ja1J0x{5uc6cJfl3$AEn`<{2~@Fe`GL
zMv4|~rq}*EdXe-rF&apV1PVJPD9pE61v0P!QK7prPRbDDV&|A?jdPR{2nW&zsTY->
zYiTH@cZ`@j<(XmN;sP^*80PsajL+;BkE}pZUQys>v1dNqzsXl|J{Jd^vyel<vDN?=
z!Sg~Ef);QC!g;8}-G&hd=!!&wK>w||=Ffw6i0qJ0IVLGwOW0Vnf;mfZe9K`tW251P
zq>MAxErARf<kw>j<%@1yK$3o|s+K?c${|f3#ZJ%k?x;<{$ETCcw`P5#w`3cq>6!Fx
z+9milt&i<}6Smo8HGdApzi0uQNB_vSxvSTkd+=LF^}yE;%QMft(6iNSJSV|Ux+^yg
zU*<?3FZ-WwY3|&m*vy~*oj%;?{^6Iup><W8KE02q_vFB*^#o!3p#<&Cit8`6+}K9B
zHnKH<#$?*3$(jC}guKY;HMS^;Ip(^HJ%RB`wds*$HA=CW57T_9Zlb;gC$i2{ZlyTE
zl3Re9H1H`n?iCW|DNW1j(1VM41)GL*;>JYdT5yIXvlC#6x$_%Vf)4v}%iQvHT8&b4
zk|E3(6>yFAAjgCpimcT}zP|9hqCb;e9FvA1ZUqd~Ke`1HqM<%Xr!lY*!N!sSNkZh{
zqHuXZb0T;HsO~q$3F7f<5eUM@#bChzDHt1r9{lGxX0erUF<~2VeR1baZ`ypT+pyTv
zxLhPDE>~;fg1BQ|2!9_Bpi8`7YNY<8i8gbGeuZMdnEQ?)jNHE3e~3*x?uEw4n|rsQ
zsN1kgSP-c{#s(J)xwv?duDzDfKH}{DnG1{4>^1Q_4y-xh+%yD~jfYrc9KjEy*UPJ}
zD*5Asf6;90n!9=F&z8)jk73iMD19{Be2i;%$(rBYOMe&7zPRDvlAW4al4IXLDF?oK
zSa<IHqI~q<eAIqtZ^!oEk-cB~uX6NzKWsKyJ$p}n=Q%n2o#*86Q_snh-}xKc{E=Py
zoxbzF!GpVZ)6F>B(4F)zeoWiO(C_L^&o0SVpLj~@x-QgOrZ?71-~u=Md0z;cCyh!H
zZQzu(9qktN1iE6)Cz(R6Hg2uHER0fa_B<)GH7CBDdT&0jP1mKqP{K6!gBCoDQ>+hf
z#Z=Q&w`ij+uD}lft!Nfvj@UJW`|ulf{6+}5bnERKD%?*%95JudO9D2<4Ud~FYBI;m
zrCq?%X0>TK{>PZ22ZNI}SjZW3wLM5!t78pF;-ZR+No?f4SX)G%WSRx!S-wKbwv23S
zN~4({_ZIF8!9#}y@Rb)S&xPU;vTxuEf*(lt+zSmh^NSlCDp;}?{W+-R29htr`Nlx=
zxdlNM3k-Q6K|yFac18P)8QKZ92s2=VxMRVh{kSm;KFK!P$lsxYZcFoXPRco?*gcm}
zbR}+ceINmCnxvz3A&vEr?6_sGy>u>*n|NrZn_8o9pNF7i+7pNZq^}~PRbA^JA9~7u
z$1dF=o1R^QzhSo|cE=1q?zF#w*W2LvH(Gm}uV=phf*$z#ld|*S-_=bYf3Wwvb-mxQ
z)3FU3<m12kas9&1UDCT__mBR&fX!XLFYMgi%;|lRqxbuL>t%HP1|8e5UVnG@UOoKh
z&+5d~Y4<&w?lvyz6n-oVA1zPW9mwXRUb};N-ZqP0J@_51(j7hI=sjqR$8p^_2Mr^o
z{t7i<Z-lX~+O$%x7mC*}fmS62%;(y49{jZ(NpUnD?4n-%Q3^UQXu5cqg(UENEG}`p
z33nsHAwk3ubHqA5XYO!J#%UHC@<lkSW;rBaL#z_=;tf$hjx46ImFUF+eqe*71^bL!
zUwwey%(&-aiUaKNO*e0-(~p2F@)p*_K5v-9oD9ppN0q2^?x@ho2t;Y*+G`S30MlUP
z+(>W*(Uw7JTfA`LLJ@=<O!f#=6gi3#NVP}ChZ+o!4U?S2kf-%I@SO>RF)HI0ani(W
z8l6l-Y|R{698h$KQ_Pb&<9LZ9;{io0CA%nc)G=+wl=+7Ui12bOYMbwvXT+S|@k+~e
z_n2`jcpmWP20<dvbT4ofSS0?<f8dY(3!N(-0-Im>X;`*2l=o1#JfAiR$cwS7bydq_
zU;l5--8<i8r48Lw`Y5;AB&EAw)6K`G2fp^C?E24p^yo9s%QN5qM}6$8hxOrye^(y-
z#3mi>eH&KC)~}b*_3PymzxoOJ!p_}#;A>CHGv9v!?h>At^yLowXVFeB>5=dKK*u($
z*U|MG^r447)BM?#WV82e+fRP#*JbyA-YbW{^PFwk%wCg2`lHGAhm_OD#_%t7q(ApE
zHM6Au@ZtsivnP*gRaK_Bwj&h~EXZLza1nZeX0?*(4G+=`_e?0_lKw(BfrXmtkMz~1
zwd^R=YvVh<IgI&u9RwVL{sT-lp~y$b&9O^%)5}x=ZLup|Lp+@a@l5QI=R`hB8!)K;
zESIcy6Xvl;i2Jf-7UCn!1RgRhlb+LAyo@*q&lL!ypb<Zx>>y6Ts_7sQf?CCMlo#qU
z;z%hoCZ?UnX&O(_5eNlM_r}^sw<S^wM+DU9p`>F`C<p08^yV4dNs1y7#28z!&x!hL
zAC6#^MI1zeK1v3YkP-q=q%2mJXS#bs8yE|*B*^?gOcJ(!SBUY&JTt);7u+D!qJIO0
zF>3RpiBrw}W#c0L2C`??U?4I65JS`ibCJi;(vb5QO}h!_6w`Z{8^>4&6wgZ&2as{V
z+MoD5=gv87d(&Y#heg28AzwNFbcOO!ujyddje<^abI?RxSG9cUk+13VFPxL<+4FX1
z%fF4f=pVt_pH=DI4LkbG52d#eTd%!u(yq5Zm^`{+y>9u`X8GM+d*sl!{<62Rn_1NK
zFJMgB$G!NwbdCLH-1N+O`Szbbt5Y-n@$A8G9@Q`I+N+=V)sO3_e|uNQHmui={o9Y~
z_U*qTUw-r(dhEG>RI`g4Johcx-|joPq%WSiq-W0kM80+SsMJ**xdW_`f7U{LPFhBO
zs2=+2S&_@E1{-SAlk81yORp>Xq+J#2Sje9DcymtqnSnkv3O#`H2{p!;Vyg``Rj41%
zHPtVk=);pB0gzjppF$1esd7)C;IdfhT<e+zyax_aj|g+r@oeY6e~&Hj(>53SH*#0x
zDXi0){v%x$aMUEl_(lO~1=rbrz+>`WnQiifjd(1m$EpNedBcH#xielUFmdzVCLj#a
z=G!9WN-WveNMOFG!?iRoBV7RR_IzQ<_45`j5Y`ZCjiQi4AUJQtfn>v3?LS90V4KHZ
z;?b;yc^HTLir9pWY^Dn=gNSw8MwYlEO$0p^;-vURt*A1-Op{IujBEAd!_#Y%glpAo
zB_Xz8FDcAik42th{2{0kKkPjBQ{33u5afhwoOK#}=8aJDu|mGgCp5t%fU2rx&mSJp
zBj1~p7hYPBSI+-TW=~)8J9^DsuJpI;(nq;RzV}1@X!;|?>o@2}|LsTR(+_=CA8L+I
zKlB+r^ruhDQ{Vle+P_JQ|4wcCL&)|KtAC7|e#fr&WevX*XW#s7ez)$a@BL68+5ZiB
z=+mF=eVn`AHkmTEVZA)~@lE>h!(Y@VzV(+fF?rg)aFTw<a0>3|&78iZbLV~{bFaQG
zr_Q`4e`*^&#|t^2jWZ~%RCh3!xXm@2q~`S>bSQis>O#~W^NoYoQ&z`WtXO-^95Kg&
zzVah!H;;*Y#0>)b#Hxfjm|uIX;krgvvihMq3h{(l_7mbv=UX;6g$+yVQOw5;nmg>*
zDaL>puW`8P$@UI-p0$Pf1?~Xjlz)!H9eOQdjJ`464ATM#tRv`~`FVGwO0NwIe$zpi
za8LFE<D4KNzoVxdh=aw6C=^-VK+thUMm$HmYEF^>%@Q!60|GF=ASR9#WCS4~xp}-y
zP9a7dALok46c^6-B0|f+vP_%GWYaF0XpDbx7sj2^Jm4<P#h3s?+yEpSpeYun&&QoL
z`EP<C9f(G|nKtOPxIKkLa&7Tz$^rClgIk(5vQUc4a!3Re__bJEh{YNx#ho0`yOnZ2
z0B1o@R?As@_OrB5q}sqn<TaTj?TH1On&D>H_fn~=TKE3JWBSy0pV#N7PRr@D=k>>n
zKh<*=uIP{Ef1=YbUT8kfJrBS8wxko&bN;1>^d*h-xAtsP*KFR>h6?QX7dO(svXSm0
z_U`gc!k=lGZZ?PM_wLfaa*^)XP0cRJiRn2x^sT4m3p;no$A9hPI<{ehZ29D7-SegW
zdgOaQ&=g1dxOVd7lK#U>ugQyNF3Bqkmv!#d*Y)Ky7xd-%3wr9z1^w2ON2IRmVr|A+
zi3_xIguLKd5cCCo0BZv^A!w*gE2hU3s`n9^1O6c9pgC#v*LE)E=UR^%ZNaf{`1Mey
z7$4Mw_hHA4d?KENVK&ICm1~PRhcz0m_rZlwA>1<`Q9zbAU}14!Lgtav!bjofLgQKQ
z&{3RMbA_>J%*U{eYedvyJiL$s{@CL~4P;zVUEYby0;Yk7((6K9z(=?7phb>QBM12+
z(S)B!_9;-j&84uAMxh%)#Z8BY<eMG@S@A#5={*33J7tm^&*dB~{#;}*(xS(WPK*be
zY@A<u&i*WMZjyjqE`(61Q3ud9(tO(PL4z@S=+nleoLR(h&BYcmq49RTs2Q6d77Z02
zo5h^20XIbqr4UE-lk|-K^7#2Yj*~t(Al|?qdH2^83;HfK@|GCMmwRCjOYuaSvV(H=
zadlnm-aj~?N53~IKbU@5Up{kQPoH^BPQUWHzOr~(7hb<AXP17ar(U_Nv-6ka?_YdP
z@b}y7?pSl@55IMrzMx@$4rSKA%#r?-iERLFV+VKr@K2w>$Gqv!ve?G6;49tz^9^Wk
z^ZDOjyr3_i{fVAk`kB7^+Rx<dtC!@|nG14i{=A+(bD{VA>;?JLCyz)~RfN@@b%@M~
zH(%qh$PH~wkSpsJTo;*cs27L6g9RDpH`fbq(qI$7y(-mNS?^K5gcszSy)Lg4u%Ae;
z!7o84DLNhxW38601#n)`Z}E8(Lvh`KHI+7027(|5f^!&`z+Z|zVUIQ=Z=AcLq2icu
zt%L;_D{DSp!*v|Bgc^-875cns&%I>&VJHc6)>$8am{Zt&LhK=Lcfp!z_^E_PfnYNM
zXCNgfyd6S-{H#AFkuVv!FgRKT;fUJ&<kuH%MjRKjyg`^TnoHned^ER&SFwR)V-$Vj
zJiwD)m24qHL8LB9$B<yj`~=yS#Eanyj6*G?EWHfdaN=`?f}*3eFqK42X@Stox%D|<
zU|T#ze#_W}*lCnaj5ZBldW>2v#ZS3=GfoZJ0YW@!5eSWht|Rx^T*p3phhN4RG{82i
zy3)OW_?RB~-t+qW-=CJ3&z#p&XJ3<-=g;e@Gw1d6*$Z-N{({cGdQo3pysV3tuIjnh
zuj=VnFYD~wCH?!CUh|EbeaT_T@4n5Xzs=YD+qm#i@Dz>lKaVoi{2t(>{lVt+E#TgU
z&3>=0*}zT1rZIhiBz;u;!ppDgkIwu==U=@nXBU1dKVJBWoId+{Z!>%5H92+Wf}T3_
znw*-ypr_BiCa2C`kke-_$Ttr^rBzksI!Wrly1<PQ=__KNbAkMY#a!q)so6JJ*&>u=
z9>zy~VNS(0f^vqsvUt-%oYzzK=E(eLF;<RG?Mzz^1S@Q!GK~uj4$mWA+10=wbIZF7
z<RRnV0#BJ?{Zh~JL4gPGi*XCP5Hlk|7vlbco_wuz+>1GeSa4rpv0$uu{N|T8G#Fc^
zgW|ckQ7rpcuPs5Ju36LxW9%`pPND{Kor`GmJ9+^qOP&Z!&l!Y5Lr0P%9?@<tu2#EQ
zW8=iQG30kWm|WVFB)}z+md749zcG`@nPg)_zL}o<TwM4tA8*9uoiVj(!B<(Z9Eitb
zgJ~`nt6vP9Nw6O|FC57NEiya@F~(fNMnBVz+XSsq@x|B>Hy|j-0l@}1GaS-?jE%EV
z#Dt|mc?G{|kxgcUwkdQ1qU>9;vBE>%OZ-y6weMk$>$;XbfB3i@`R?=j{NJCFQ)kXM
zA77qtKFU0=r|hw}5t=*uy3W6PNzX1_)`jzL>bcjh%8$=q(X&fe^vvR0a_W_z>W|L6
zp);r6kpKSjMf<1H@Ef($%^z1zAJ0xUcjeN*j^Teuxw-o{>wg<B{m$Ox$wmE#m(J@8
zFTbX<a~E~~)i>qGOIPL9^FNbU&c7w+&c7*V7v9kMAHQxJ*i-Wt^z@kva{BCRa{BBA
zd3pYV_BMGJVAFSA|Mc)tX})!vG?i-xb&Wm1dmrg0*ILwp*IpwutL04HJeKN&dzjGJ
zOeZO#g0`@?3i!lK(2tFYJs{>DaiN~luSWBJ<^433yN|`kbPeaHjdiK7Vtr@v7Gon`
z)B-|WjIXE%2{9ypW{qnX@r~L_<9#7;aJW~NatUiWVx=@Ut&Pb}5|;@?czkjX5(Rg;
z?lLTbmirtIF!W>d$Jo>QPO1gXAWxQq8Ffrk@cHlPwG`JKlCT^|gn@D>3O_5Jn4il?
z5hNkKb0q5=cZfITmgiv{M-4KOXgL=zXqH4^u@~|yi6q+~w28>hbDTn_VnX4LOv6W8
zECEX(IulvsDvd`0lZFt-7(-Ei8PCe`xJHDYYnB^cZ^@T7cOiebku@`J`L2&J&wbl<
zaSx2G<~9ri(jV)tluNcTjeJpqh<bEim}Oy{F;IGk>p0nUn~xjQs;Xu0A3UZ<zBeh)
z|NSXB)okcqp1;uB7&RYj+VeBLjnS$3^LqMhZ`{lCz0Kj=E3fI9#h=KJmwu|RzV<U&
zyznzwym(a>U;igPfARm7rPuyRmtOxTUAXv9^6G`F^6Ju6d1dJ>nP2#s&Y!z1bFaQB
zr+<7|=gz$;^RHf()35$i=g(c1`Gue9kI%m)XP2(%E9c*mbFckO7B5_t#n-OLxeGs&
zR~IkqD+@oBGw0rrUM#(jpVKDJHgL`F;HBKshVRt;1wD24f}A>YUV9(izSjHbwypv9
zb`2wMxX2~#lIDbDRMwgO%<I#5&H9-uE?wci>F0`XIx^iSNpU?zjp8}ca&A7i(X(K>
zS>3=~@%5*KgUzRac|KID^*@(?(JpfWyfHhzd5mk0$HwF&oC-CJ`6BNgvlEi+)4I%j
z*_fh+68^XmGL;J1pq#|V#C#DCkQ`nw$I^1pdPZ}dLx3gdGUXp_c&m(BE3A8vO&AY;
zF|njK`h&?~p~WCL=qwNpK8ZXmeR(3$o^mYNqJ$zU2s_1FY#L}M^XsppU;vKdCK&T?
z^BXZl5i_<SUnbl0gIt@l<$0mtLeuk%#SEKJO}H4ZLC5$Nb5?Gg<k4&gJ-FiY^JFYx
zVdtU_5UkSmpxHDI@@KgS&%J}DTF1Qy%m4vu9_fFSN5}=V;Wib<1PLnD<eg$xHo%)%
z!weq#*|D{abkMup`!dGka^$;zr+@bkr{&a{3-+<?sWa#GRJ!YBo1)$(DqZVsqRyuc
zm7H!ihA*GF&>MF){odPa()<0t-t*JVaq8>^nS14;%>DSHo;~-5oH_S~%>DRvoqOfA
z#@=hq+@8Ic&op=68s9HBo3q}=uDAI-mByX9U>nx-I&JD+PH{K6oNn&qy*%IZ^UcFY
zw65)r9&c8-C-A}<`-9bunAQ@HO1f&*I@Bif3?&+`Yw3DE4kadNH3&H5YdC<nCRZF2
z$FofY0>MFpurQNuF|6i9cn+IkvZq$hVJ*u1c!S7#q~YPilEv0d5MYqu>2Zds-rId#
z<P2l6!L4tuvF|hGKuM8r=#yxZbc}V7<F4e+T*m8V>^PPde3b*q=UGmWGOukdvBb@J
zF_y+gc1I82nc-rRlN5wz1ecS+@o{sBWVJO8D%M>1p+L$Y*+S%;+k=pmNVdJExuhK!
zqU^u?6ALMe7x1y@;9V5rhr+PAo@9JCggC)#w!twL1;*lZJWAs^zS4ov^e>jYsN3!S
zf0Vsz&}C(nCb$p6_eG%Q7XcAmB7p3H8K^d$qyu}3ZYaqP=`JI>xkQwuOsNfJPfTg)
z40d@TW1xWQA4OvQ5W2KPt*ZQz3ckckYdVsdph#v`o0*UZLJ6op3NW<8<VSHcghar#
z=EvD<t>;;5?UN3A@|?5x`>xBgo^?6<T)sL;lAm4xxDYb74uwWuR6TCJXsqinLHw2C
zo*GiNrP$_cr~HQ(Src(-3na)lTj|A`aSMC_!KfqoE!Bc-$EabL&1Ca+H_Nu|yJhFM
z?;k&(Hx5A$!a(=neBi>jJ?Fz#e6H=_I8ga;IG(qwZ2KR0Oy}pvJ)=y2>vSBl?8=%A
zaj3(d?;q_t=!5B8_P9rF@Uw5y+K}mQ(Skkp7PVaoJb36a`Rr}mWS9-Ye4XM-)bcj3
zjEx@7mZQ^oXloJ=y*60oqFMzp51KUcf?q(c;L4Ow#5KTUx@i*s7GEF;UrT3RAp7X&
zYYqkkDR=T7d&W^A92N~%*!8$4SKV_63r^!XbTj*9wmNt$<0u0d`GS~3+(3S+Vc2F}
z7Oqn|26B)KCa3fhT2t)TVk6+u_LD$VbB;ra<b9|&!cuDUP{@rE7ZKOZrXeXDVZZ{^
z3F6h`HE;}~;G+N}=@BGY8j=FUupNgOvPFc^2E33=M=cfrzMJE&F2X$F0UPU89JbFD
zRB{oe;uPY~#38v|Y-oG+nS7uaEFiEZ6LC+WtP_s$I7+c6I?=i=CZe?7brfNaQ)xa`
zE|a11vmZ2FEDlUP4!&l@n*0TykH+ERcaGVjII1<76eB=jHhvjn>->tI`rDV|P_%!1
z+jf6k!4n&#>>H}%pf$g@q3+Q9v0wEYue70D{M_6D8v@5KMfean4x2WV#gJ)Vrm(AU
zkBOb%KYodX<vj*(>%vt=xDq*kJReraL9fNl!HazM*Xg<8r}!$#5)urhE#<MK<1Ke3
z%SjE<xM-3hk$FIDayRuG;wAY?o(js$HW6-(9q2Q{UT#^J)U~#datRjlUd9w{wKZ5^
z={UNc`X3Ej#SaI8wKeO>Jtj!Xd&Ew;=JuQ>s^JSN001BWNkl<ZpL_j<2h|seAh3ue
z3+)jS8Jq!GuGh^ATY_7Of!W3g4%B4d-RQAA71u-@!Z?AhAtq%6q5-~;uo+Ai4TtrX
z4T6!~d`m%CG|<>i@S{Kv`pVwkb_N>mOLK*F1eX;HN(U@}en>45Jtpu!B%E7D$LJsw
zRwU3gZg~)b^^Go*jVGBOxv`+nh;JmE3kC#|jUDGG_Mj8O<<L6znq+h0Hv<!MK;j_(
zo4Jy1hBV<P1$*2dr_e9kKh5E2TF4#aqfYKaJ5f%Y%b0Y9c^cbRU(z)UgKWNTi*CJR
zr|!P@{_!o%@ygx!&D8zlz~)!%4#5>U|B}Xh!16C}jDyud`|R5|nE4R)KwPbhD{YU%
zzy$-N={f{g<_<mX_RI&&@vYeh;q6+qZIpEo-by}TL*pU;e4by){LF1zbvDcrk5g=&
z8%oDBk6|!q2Bg>%+)F&7145*xnpU`g+(wy}dtg7-$nX``$C}K~+K?f)DF2!qNI3_(
zr*o!oS<88Ff%7J<NCTM10SmtkU|CkAnuT%N&e~7M_$4ebeuTf-Sl0-viuxR_5Ge@$
zv^8y%f%PNBu*6bAZh!FxV~su#_I(_~@D#^tKjH<lfKFyV#}YO)+-l-b{NgnO0`Erp
znj*lBa!MjV(8$Q$CIHFk20$cRfe4S+CLb<jfD5UMF18%Gm^^CNwSF0-nILX!gUgi6
zG&DL{&AvP=VZpTcVGPS40LJ#O(py4Be9QUl7q5Z1)fl-Q6Y(=&1=M)-vEdMn(vY6;
z^yp?zfG*lU$r<2hJx^4iihmS7N!kKIgXV_9J(eZcScgtL_Vp$ircFLiGTXtP{Eygy
zU8*|F2Hkw^7FoSxr`~h#{eD%>2d(jnmwyq%hPwytvv@cl*_!#VWmnGd^K<*h&-3}W
zUH!@+eui)S0?2rk4nLpgpTmQ<eeEq;8w6pXi>rqI1(U~o;KVPMn9ug*4IA_*e)%4A
z5%>q(n2txp)uO{Og_X`N%qKJ_v8Y@~VA-~aY7P)JI0boKIgB$C^Z=}{g1pT2k!vCk
z04Xo14uDROFKBVix0>4+yObx4T?8EWki8|=H6NW5T^~)gt>X^bhQ}heb$V}WU#!pd
zjj#vby+;^^@Hp&<j-YH4<AHi6`x?jw-n$QpqZ58dEGBZ2a|--rY+Y}b0}NJG`;1;Q
zI3#ySd2`IIzzS3djL*<WBwp1EiBk&}HhYlFU}4hRo<@da;bf6)d8`Jkd`*K-#<jyS
z4SJC%4Owt+4M>io&p6;K<4zqz>>i@f*$**6x%pKI>_OMEZYeQsVo5$=k`k9-9Tnmx
zHuYHINc`K}CXNdg&g?Jw2EG^Bxv(rMly<7athY0kqjg;zQ!xY;z6G8UzcNp`p(c(h
z=hQG8<eKYl(yeQ|boaOK_p5RK_NEO%<3MGfiQ5lf)`-vOJ?5X$v-SR2I~xq`E!t7O
zeGbq5B1L=y*1jxZ!zO%o@Q^*Xw`lE46_5KqfBV<JJc4f-$JM`s{`tT8e%tri&u^1q
zm<eKug9YMg!O69*<pjot*g6j+B$n@&EQi=-65Y1>v)aH@L#?*q@L2b-?`BBmAlcg3
zXtEG9>=`)xSlQ?X1wR}`x70GivdNncm;UC7TjCnYNxr!~-H_$>OvIqYYQYT+@_!rI
z<R{>qF~JuAWj*=MYj9v{>?2=<%&I<uzzNJ7jtU>AVbfv)TtTAHz#36ZJmZ=hv?P+r
zfKM<f(fG+mi9iB@U`(QY1TGdN^8%&=Y4;)NvNL^vyIb2_+n{S57+O*{$CLdSjM4oR
zM$Pvv!6Ot(5<224`Ow>rwx)PBSy3We?488Ch_qr_k5@nEzW6X|D?^epcfs#$AI83I
zJPZ6WFw&Yd!~i^b;6dGpT;Kq{Q2cWO`xB2H#{~1lITvzDQ_TLPnt<m?A9D{p4+KaK
zz(gFyN;w+_*?jHIvh|LgdiS0OC5EdX#1|**r&h+dUww$ew{h*Wd;WH=4PWCGGy4pk
z4RyZeF~7p+-}cSl=Cv<%9Ez)i{^g4Y;wl~vlQsbQ4<oyc@#T`aFLniS{K=K^b9<k;
zZB+;QTelN=$XuaDkOv3|Amm@o%SgOtD4EK6%7&h6q!)V#a1eP?_C#`EH3)8YHGp!O
zM%a?c*qAfco~y$7Daj9xLxXEd8=8F#_Egt2;w+|f(q_oPse0S_=W-#2H3k*iZXk4<
zsD4i9Ha~1<!`t2lp?&?@X*m;n0LSF3*XG=RCS<2xZpWA-3+y|}t<-AZ$>4^XLpa!w
zQULKcHVT~r5E4NhgK4lQh|)VaB}>SRDIHZl+T1naDhDyriGjvh)cZ`wvd$>bE`OpS
z(|-5C&T&!9wzHVtx87c|wcrgw>IQ{;1O2IJC!P|I_}}i;PUWa`g#9gi!RM7Lt|G@O
zVa9svc^}Xx^K5|~LE{OYJ7yAI`(v=T`seygiQCQ`81p*xkYtcS{)y@^40_FVH|gs3
z-Lm_>2mI|%8{iHcir=BLFF_o5AO<}DOxy$Zwx_+tYH!PqzqNPBzVu*Up!h)yeTN={
z&(4KR|INEY_HEwyQia<DpYijzh3#r1Tv7CI{XW2N10NW#3dU#k=2r?o^Z8Yo&4$Q=
zqr@fUhw~v1ANi^nb3`as9KR`EM!sfF!x74F;u+OgO>4n@@R4Ln;xhS^WWjlmonD~f
zK55Q}4d!1Ap#eanS1>>9I1aF$V*u1-PB#A4eg$^>8uZ`0B;_T<Z~_;sE$JA!W)(JL
z)DGkYcSe_WrOE|8rXO(U(1O1lr^M;vzsv4<h-McV)T=l@IA`cS#l4FkoPe4u{I_ls
zO=@Bg;X)WZXQ;h_B=E2SvV#N)1>Q<eE;epA?#IDL@`^;lYKtS$6u|He^aBa7x%oLD
z-DGie`EWjAEWA1h13uOp+9Gu=MAi=AAW-b1m?NpHzKBJSUGNLT1pcb}J>lq~PO(gO
zV*&2`AX}vFg{+zIt;Rp)j-rbgH}-$}W_D0foQxsk+;M`6Zi8Xi79yq_OT^9>cKL+5
zBNqZ|07+#09lh(e=<3=oz309M?Mj{hq=^rG`5UzGw&{NV^I`aQ>0|U)HvF5d<LB*g
zIP)Jaw)HlE9f~hZ*yrlvs@^#K*=P2A5B%)Qp&$5py8;<sF2T2KW9YQEl0WmgtvZ{{
zu$U`y2(RiO4;ID`vx3vT;Ua8-CJOA!yjI&+ZHQxhp&_lqe2S#xn!-J(@(l@{d~0)@
zbJe$mjeTC(c{F}1$J>D@V^2%Wwl-L8TzOEdy;vr2W3P*@h=;FdJ-n^q8=2PfBl(!+
z2(K!32S$?5r}@Dzk|ewWAA#QEI}0ySPdpYs!mToJqj{$5;Unksi|9DV_Jmx<W>C$|
zjsUL&O${-Q&;Q9u&PGqm?p__RZRDmX>&jPiXzy>TA5dhws?Vf^_n^TEpNg9wn|igC
zvCIXl8B}5)5L@6-!a*B-B1t|9PQHeW34F;%jGrNZg~I&FFyr&70@dKv*qXW0`4cv?
zEbWKtN(;1&IGlA+k+kzsTyhh_S3thM3|ELZ$A~Hp6c7diu@aI=c0xFFG5U>O*r468
zZZ@0$VDi>GcIvn8J0u7F>REi#HNH_BSIPWaul57P_7^qAt7-UcUH?0>_+!iT7dGOp
z-}qw0_<Mc$C6Gh@Em{BE9sOJiTtSShgZ9?#_!&NU8``cG9y|nt;pqQg&cBRNIR;o`
zY@El5BN%Ipi9P2b4)_BNIS)2DzPYgh%Sx{0Jg&W<U+Xo^ZDOut(_qp91>N?Zr;%!i
zY4tbT8}1jm?ubXro@KwooiG^V(+&pYT3aJ&QFA^lPdQC~8|P9yxSlY6t~)sEgVrdr
z_o*I3f|b7C9OJzTHiXS+C)M6&*5Ei~{YiH>Gl9>jo9BV>F`#Dq%A8?xJc9GnL+F?w
zZPQe%BlH|?r>QkJ$<&A-7n@)M$dSKIa&&tXo#wsVgeO2FfBWEKdXSwEDE~*QJkV5=
zbut!UuRB-#cf0)62N>sTC^p3hCE^L1AQQI2F$9-z;rcs9B@sG~`+X+2o4|1iNRn(a
zC&vb06Evan5HY6b36F4`eWgK%WOHFb=jc^<w}0ZXVUZk&!}OFM`u<#`%dPNwVx4n~
zxnnjBv-o+HZ{7ERUu}!4YmfOCDC{$I@e?YK!?$bgXHeqjO>FG}AGF5b*@JJz`VctE
z@IPH<f6d}SyfPPmbz?t#hVS5m>5CZ;#9O#NM7l5V*}y~ic|Q9)xAQfhxouTu_$SaB
zuC=*noPui5#V)pDz5x$p{!e*PiF`OpJ*FYWm^IpF4cc{(%@gv7zsS9bK?pgWi@!Zp
zzMqhVDU*(+wJ`kfa1f94@DQS>eRr8|uXyB+GK93aVCi!le}n!?drDm)JIE#iI^mdN
zsCYpI>%IHc^n|0@4P0rl&ApA{6h?;ro+H$gh$Z$!@?zobzd;Pje%?2b!J{J?_!tt<
zDHTsda1w)oK#=oo5Q3nSujouaaS+MD<g|vlDCp)Jtg9sIWw<**%A@F^^HY3?vS0-d
zlf-XKEW#|?@5ebNQLvkWiYmPl<uwf{Jw6E!=ZTn4z$f^(+yrbu`7}5M4%vp_bhw@E
z?RD1YZF~XKG&D}$!XChac)|F3aWU(g_53OyieiTe#kc5jOihx>c<%d;=%YV+UQ|`i
zT^?l9zGtA23+-dO=*5M2?C?4GG8<;H`PwbAb#0e^Yu|%@wGDsD#D=$naMde@y7=td
ze)zmwd``~(3dIlNE#E^iSmBQ#$G2hQiy!zILA*+5e@(-#%EeW>@%Q=0t9mvN`tR_W
zJ@^+q;P?9Mt>VA@+^WW)mvW-!LgCZ%k3J%g{`h$j5j}TlCY$ygu6c(!J8l=$<$9bb
zDwzWv$DC_)AlZ((ab3ty`9eO24tp+<FZq}j1u3sXW;A!;X}2%Mz=o5A3nXRxf=+13
z<a6{Xa4vf!?Stk{wFGdbIwoPG#3n_1d<cW%-H>hnME&Quc#jl_o1>J@1HUsrd)*cj
z)ufR_;)uaHha&nU&kTw8z6NE+8lOuNR$|^H9_9FjU5KHOEC*veI}k}=LkLQa6yj81
zDLK^Yx?o(9oscM|4@n6DEsX&KGiob-HbHEX2LX(A0x}u!5<Kv;SrZIPK}>~5e7GYL
zVoX8?J0FG6^^Sli{{;yEIAcHy&JcX5`XPQPo~4*U42ZDkAKKMnZ`S0355AQ6M8w?{
za9cxdDs;^)^T9EIgl+uMvYvPlK9_hwOmTJUx@E{>8{0TkA6mWh$KN=6ot(UBpQws%
zT$<@cdk**ULEn%3M7CV{PC4V`6&;q>$=T=ru5R7)l#=O5#{A0|TXgH%PQ7=}_Y{BU
zj=p*8pO;HNRD9?M`rU(%>fZnUh<<zDLwfJue^0*s_utcd_kB;l^Y;(Qefz&3Uzj))
zZvp$CH+wMN2DYni_T>y40R6Z2VCb{Y=i$$(xJ>wBNc<qPea<j`1UkMn@>rZ3uQY!4
zwrv0aLI1wuf9p1L5OM`M6zQz8<Lq^M@}|A2s&ekqpqus_CRx;ET>8s;+efdG^Ea;7
z<)vjg<D7GK^VU7A8}kg)NuuU^eH9iT**1}LO|y%I(B#FFtqz<e?@@Ek=P)o8idyf$
z7Ti+vv0^oqi?xRU1i2ok-bDS;j|1T73*cb#&}Ft6{)J93fknon#VgGLIDo>SM2nLA
zrVb-S?7!>CJ-)A~J=ZcOkXwq!crW{ad<wsF{FDFXmX7-dw4W(F;2={69V1#+h`v`N
zFlg>O9a7g=WZ*~v#{}&FFdSq@UHWsG1K}ls>-LD5R|C-p0i-9nXisXmUOhbVf;_@{
zk&x5abL<*ilMaDh;al}P(CYL~++0VC6|x}Cry@LcBaFJ3Og9Jt0+r)fc=90HC1r;Z
zHOtXo8rCKn5fwklgKT0g;pWs*?QFwFWydK5u`Vz)HDTk9v)9SV7wu6M)s4%8ZrXd8
z?D5Co-_7TrB+Dxs^|m{|A@}dSTW`K{qs(SY`lZ81f(xUs=I=263AAl%yX8B3zbEmw
zDE!bd40-zwJfb_lbwIv$*Wb(buYX6juI<#VYrAxH`)=8`eV1&#W2dg(u~S#qcFWc~
zcFphCcIxe4x?BG4tM}-gU%OYn{LQ^`*WLT|+xxy3f7T5CN{0VAHUHU@$NY14{?_gx
zeCs&=4liD<voB@%4<y^SZtcq*KFt0A-aeko`-@M1UWZ{8QR;F(C_~&*Ro!v+ik@`Q
zUJ;Qoe$Q}DWIn3sH{NrO46`Nu=&jpi-vfK)^VhsbhS?zR`O;5_ziiKB?oAzEcyrmv
z@1!F)&`vibMpKjOz!wJFz>477;M)1#tn(a$Rg~YU9$>wgz%v9U96J0wox6DRxpW>2
zN65uh4W3ayW59>O$X@~Qpk=by7PsEeXl(&IavTL`-^6j0mG`n%f6OuC+6BJ!12gK%
zJ~$R;Tbu})g6s^k!EEH7Lqi#QqmuLa7#hrv%as#J=d+F|68P!_ZTAqSfIv_{NwH--
zMpt?uMVzR<H^8o9(Gp2VfDDN+Wk`eIwpVZf>yX*w*cMqNjZKogFX<y3W0(cZl8tzb
z^aa7XgoNUWQ>C3_y$ceLe83}&E!Y|A$ZEnQ=m+?7v@s@BJW8W!ap&g~vEif!-Srh|
z(g}M!7$6G^M@H@b)vNXVjc4f6@{+7Scaz?B&(mb@M^9doVK(S&Hq+U#PB$(OvT65I
z`uQs_mvc^9(WP}K>pQQyNneINN1nfX{ten6K2I?`XL-=GuYRP)V0<*pX0rL(ExL7W
zm)^VgdlFaE=0nnVANU9P_P#^1WA}bp`|7uKb^AEL`9QZ*x32Bf)jM|SwzXZd%?G?)
zvTge=*|vSR%#Y8Xuimj!x8AW+{rTE1y>rKXa@XAl^uF&t<Zu5T@GpNn=AX%npFnwx
zzh&z`!}0_F$&~m3W&1n5@%F9_mL@a44LpCm@4%z-|6KnUaYZlj=>Bb2%WrR7FUw2I
zdd9gI>23G?g!p^)$xAw$4KmCInax&Y<MJSz?tV%?cje`J&dKX^dELqSyH{<Immz0V
z56jYQrWbAf5%K!#?>t$T*KKkR(hDNU;mS40>&*4yQy9X{*w<&8V@-e>;09^7mu#x_
z1-7QV7Tm^l0&7-dWaDoPjAlO$GvX`adBrR0h{IN5p=vR~H9}Uhzil7taGvswM@$;#
z3f6E=(mmI>h-0pOG%uw52%D;(fjJQijW3+YdID44EXtTG#5UUqC?;KHAWr%^elRzO
zID;5uA_drhC?~^soEj<_Z*dwOg@mz(Ie-YVkrFz1540T%61T)nV+zS=Zgqd&)7fn6
z17aR#@~~rsb0ks`t%L^h=d~#boM0iHaD(70?gsps<Q0pICy@=DXSqeKAdehZ(WJkc
zi~i6^M>g0x;6xdg3=^m^33FK3@g;GD%q;^o+Kr7ZVcr!Yve);!tghK2PV;m3-@HkN
zVMVU~{GD>};BMV=)%iLMgKT-^1*hGSSB}V?XRni!&)=a(j=ZcJmj_uoV?}=Vqo33J
zA9+MpKmA8K41;dk7FT-o<%4?jmYe12BksSbs%%^uWaE}cB;tg1!+u9^i>$8gl6(LD
zA^GmXf6#mOd{1}m`mWsZwR`77**KuBuFZ$E)$O}v>)I~eddK{>ZTs%=%HB?0U5j(`
zVQ`mjy<>jWZ`=0W;}yTS(zk7G*L*PCzDu^Q?bJKIa*yu1_W}Q`9A04@f8GV&qV=Cc
zfiHE$&%*fU2H~w+|NFNO*x<<D%DwyE`}OwickAZsw&*a-fD`loKd@zt-{<bsgZJO9
zTdw+T8D@iSdE|Mu;`+)fN90TAtdo<@|ArhnazxKv9%Om_ioEmc+vNW5Kcd@i`JfEL
zpckz^?X~9R=XUGaXP+Z?K7S-?fU5lX)^laHd<M{o^Bp-#9iXl2e4OhXOVX07^qlgh
zABeE(kNdD{#eu0D7TQBKPCDCZKUMZ(U-&`$tVa@N5>lhO0DPb`vR*<g=<`~X{6>#U
zy$OT-Ibuh9CI@~sd(r-4i!iRBFXX4*Wbz<T982+k(0AMuI)Gn@Rc}+(hqC({$zc{y
ztdm@AVsBWdxkq*U9lam~80E3ExXNP1h2%N7u5*5eC4ew0WJ=`ANiqqz+foKl0Hy&S
zascIwJ3^K(%t;%7L$H*nK%`q>i-Zng<ABgkb}$Mal=v*V<vo}XbuAu;$LOfAJWO0k
z=O^Vig&P|LxGQ-LQW<@O7dBEh<k$!*G27uta916->>Kbqb71lqVP`gHe)qBv8>*X5
zN;BsfSvL%D)n>l#nsZiU-5Iy|Ara9X=d9C{HtkVWm5s}TuAIHueNt83eDboczkF}u
zt*XlN-`}mb-FAz9@SW>*-MN>`_m2Q}!52|gnau{d=GrZ?ddDuk<E!72`LG59o4++X
zzdGm7$8)P|^TBU*ZTI{(u323h2gJ4AvTghP+<f2s-mdbkZr>%VckEKT&G+oo?O(fB
zzIERrALQ)qRevk_5P$Ikf4^_Pe-_W)ise7i7Q^HG3mW?ld|&VS_CZ<uZ}-aT+T4cC
z*WIMUY=-<3(ZjlKHj_=;enc;5H=nakSJvMG)K}SY_BuJ);<q%Db?00|yxV;8vaY{u
zPvH~YUVch1J9$}8{_WLn-NL<@y9@ZQSU>6J^j(|-#z7h+AO|%z)<GqXQ4L@}I@_o=
za2`iSfZez*_VP<q%A>rVpL@MdzNoLRxWh1@sn&b1qx=MMwZMkv#hd^g6l=9w!{LC~
zryf$U_w&lJuUugn;5#&Gj5q13gM4yIBSX;!0oBM$00v`S{e)xjLa3}Mw*fHj37QC5
zo1qO~=@pGhL=rGPTH{Ps0KkE^ZN83^OFd|rSitAbkL<I{k?<`i8^g?`uZfn3M8r{&
zo9qX<K$&zNj4y>KV4CtZUI}!=8xobGm$|`)V*W~zLpJkl*x<+fncxoNW_MINyCk64
z5axyF8U;i${~$7GL*^*h4qOijy^ZAmw9gSUkXd4lb{_f3)iTUxy65N5>yej_=#iI?
z=qs-rkw<SmS7u9RsQIos4hk3T6;+ju%QM;d=^v5q)iYLf{bhUA?ULZbk8im`&Oi5D
zSvL%N{uS5AQ!nRS2>*xKOs=_h{$&h%OLcyQZ5-I_%G@}VZQDK$Xye<nt9C^X2Q^z`
zgPdRO8?Oe!+qbKC?9}-nI3EJ%dUyHN!)<roBVXR}9sS1c@9N!q9+dm`J*3|~_z!+n
z4*v$P|D=n3PS3yCG5+S>INa^q|A>Bj?}PgP-t%4AZo}O;c$#h3T(?EjTeo`TsgLR~
z%w+H3=k%3Vj>wTCWBhK}D8thFs4Ob_^>bEqKIn;VTpHxuTYpTv*}8t6uD^V5$y2-i
z{E@HgJJ&Di^2+&g@VWZp3wh<e!&9u*mGQ*<f8v`;-htfU^Hi=Rn`n@!GMjwI7ovP`
z_EHXe{o*>1?aTE6uEx07kjdC}S8mWB%$<sXpaQO|UYZi-aRSz7eVD&BZftAD3T-8R
zfXqf#>aiq?hPI4VZyT(`==nYoIF>m>Iy?g90t9rQNsfkpn%5qsZ+AZR{tn&d2n5Eo
z2d)^0!(AE*XkXx<nQ+pr_eP8UD~OJu2ps1I9Yy6Rps6KvXN&vBMI^S8fAe(<gHwX<
z9uRhUAR!|9c|tK_l=KH;-~%lJ&kON{_a<@)x>L?Y99)j=60j+r6dX*a`yinUi*$X}
zg|R@+y0O#oR&PnX*KJ9K+l3_?kfSCQ?KaoDrbo_>yD838RwrV|K0o)!@9JzAWEf`S
z=kErY4Ko>rL1)7Nuee2boU`KJ+T6H2$fmuA$<g_sw}&u{1RqU0^0dBlWm!(zv>h#t
zxU0&W-?UCH|GoE)Z^@2V+w4jl3_h!CyJ!%!&*9AnvR&{Nub<OxYrAFJ+U{7hw$rZ!
zZd=<uUu$3FSc3s?ZI^}}^ZTu9yVPZG-zB$y=^okswQuWJzOh$#?EbEN^X>zB*F6X1
zo4fbx&btrFH+S#XZ{BlIzOn1S%a^|X9bNm{z4CWozQ^Uv2iEz38lNkSx0V0*_y3<d
z41;q{RrG~N-zl?UCbQW*hQl!EFq_FR%w#qUR9AMKy`m>?+9#r_8<%H#(cYgE$F{9s
zkuxsa3&b7oUwK+KUva+7W=rzBSKg#QIbwBxlpO&~`DV;hu-S{oM4p9SF9Dt#FitJ1
zsWo?|>RH!oK$nCymVYP(ACUgAk<O)o&3rJyShKt)MyT2Dl=mnvuxn~nbAw<mxBy}a
zOmLdjWDD}5?NPSRbh3?v5BlxZx5eW(c#ha68|*pR&|;B~v5gReKxX0kz{>Oji2ysZ
zT^uv&IK*kRasJG|jL|gh1XOi8_9CYlTo=?3B(2Fn6<z7o6M*6-hhAVr9Zm%{r)H_~
zZ+DZd%`wY^M<Rtoj){;lK~sADQ}KYnhYwvbfVjmC3rvFt`N70Pe}Ugk!BJn8{l|D?
za`<sCy69s>zQY4Fk)H~7rH0mHRl?oi-^82wjy4}9u8<djqXUugBD*mLCEpUe4Zr7q
zbcGJHnLN*SK#dJO-#BOd)~(J5y)r1Au_EJJf2ykT!lQS}Ew^n~%rQ~XgIArSOY1hd
zBf*3D{p!|L9cF|4-+%I_eno8+2eCVLj-SJuU!Akh-uX9d?d{z0D&Tzh8{fvoD}+8M
z@_=W<-|8A%85}>$XW!u62H)tlA<>3GdwY4?_!&R{%;0F_Hn7D$XSmI;R*qK{x5t&q
zZEL$^^R+kWY&MhCZQBGos6O|@_Zw8LY5)Kr07*naROm1a@*HymC=;C9an6dIWbs=X
zWYgZm;x9B*{fb_YMD)nvd*qyTgRX3RkL>-)3r+pNve4I0&Tm_X^+rKusjzLmV$Nft
zh&KS*hxXZV(=DV35NzrP=z~|#h`OZb_%C3BvMmOk&5*|;@HE#NvQ;}>X70i|#J0BU
zz+>2#%ZD_00v~Z;!60Bvr)<pl)v>4WgmHx)<Mw8MMwEjwgh})!6blvr-mtUjQzdpK
zW^Rvjc*5oqkB~nkB}lYzB$ClL1G%a)N&p}y5|^9`2j*LW+yF>~vj#akPLG@6qyxp}
zcTF4zAYoeo2__1XTB4wub8Ig_#b6~rjQ~Le2n7+S#3*dSO%aE%hwNff!@6A1vk#^-
zW0Uu^Tu`7<AG?qnn7BM-bKw%|%W_k(wMa8MlH)gRTX&p_AYp*~=bVG{aG;Y<7!?1E
zOXJ=nkIFC%a@Ah`O}riN*`&XH*$&q)I{%E`$(#15itrVoQODNx>*iPV#^=v}{|X&u
zgC0BrHi+ow&s`@=CtvNwl&~Ia&D9_MsLqC&T>h^2sej1=-e$$m(AnFvHgwq#w>o}~
z&)<Tzw{FL8<Jw!p^S5(t*t5^^+10fe?BcV1^TE;v!|`oo^|y}4!Etr_IHa0v8z#pq
zb#`TO+c?PDXAQTFS1wn_FNXZVfBYkP)0^L{@4xEG$Pwen%iq`8Fq5nH9;ST!`g=C%
zZ(sfm9`w$R&sd%t@$-0XUB9AdT(*z+d-=L$IpgwM<dwvqk}Z}?iF00Ui0{TJH6g$=
z;xsPk^UO`j%lq}XFXu#T=6v+yx!z^|3UA7?d*3j3A#c@JInw!Yeo-EFCH!NDnjU`y
zE2d)93|$ppwq@J}m|?#P1&o^swnfA@QJ6zwpV$@>!m*QT2V-hA-olpo0`0@a5Kk&@
zpqtxpl@0eww(^>K%rQ;8%v=%Cfrc;Ji^m$GaRXLKn-<=j1u3rZ0FF0~2<<O&<8%tJ
z3Ll@caY2(s9BAMKv+Zn{nt;b)L@`;jZ7}o_)*+KdO=(O(8$n;j%U@0Aqy%4+i;Q7l
z)yHN6Z`d3%Q?-fnghRM#YnT_b5Q_l~uE1x!@41W!1g{dG^I8!}*g>(vs~L0?0e3Q%
zxEJgY@i?*_g&TzjcV2OZ%!ZTXrrWmb{rBIkH+}T-`Ol)<|J=A{zV@E8S7c@VHS(jU
zf28Lw53*^`&q?3b_3QKu`i$4}a{kJatZckOx8J=-??1RlKljngbr@!P&7Pl!@4#t%
zymjkVebdT{uK#Ce$u-yAq^mFh*_S8m3mMydxQeTMcHD2{6}I`+xZUy7D*jo$@t9q4
zTZ=1d_T`UN`?l|Pd<%KE|7?rB)r!B@7gq@9GUHpmyZr6pZEL&dvPT=Xt?ia;uDwZr
z>n$7QO>bT&x7>OwmPh1*Zhy~u9cCxVO`p3{4<6jDTdux*{#%6iKR3c_@mnV=>o@C<
zpZ>9IT%O7Ncl3-yqN``D==#g|I**PV-Xg<nCLi2(r|j6VLw4-=#(4jA-LZSGQX@}!
zP_9UHYp~{&yoS6F4l2s<`qAj}f3U7#4$?l#&{`i9<fLPZUhrA1DKBO)Dw+QP0_mpu
zfacJevbJ0~L<q^BR8L}2!lRFQZzmaA@Ns!Z-LK7k;tpU){k6ztefeG`$pv0D11}HN
z-QH$TtR3YRzAeV9^wVH29w)noEQs1tv%v%1fx#?-AYd}EgSprzV`1pfqLb|gd()tj
z0}^t>SH4tY$L-W4VU=VhLeMbCc80sQpY#TjO)^(vm>ApQn1cV4`xjtjv7U@^gFnR7
zHuS{puu1kJKMLN=%?=mh8iP(c85;^OVbtQ2<>g^ZxY(yE&2&f{0UaCzigDhT>=xeN
z`K%)Pr7c&<xo4lG%S%hT{+vyE%MSk*r~Cf&j;r<Tlb2<A-5GlB@}Qgc;SVN@uFeNN
zGUDaK_v;6*c&D7benpp-SM=<S7wPBj<}Y#Zz>0RMKK+xQ$fcKFBC}!8Gyd6``ky}d
zComlO7cAoK+%@}b-A=!{W>@L_Ez#}q1&eJl)Zv#f#D0IzuJVNryu!Cj>?d06ZP<8Q
z7_RE!TeJ4fV7q$gU$__t*R`Gce|+#ybp8KymJY+9Z~vX&k*A-2nqyc86uI-}D`n%^
zC(F|Evc*p`AD-TEwVr*_vM#Tz*K?O5ekNyi{fgKXJyn%w?!HK7!=U#0zu7S8Fbp!x
zW;!gNtGN&47v}y#RM3u`^NF*t7HdlIEZ31#=cXGi+3Nc|pGsa9*@d&1lU!TC5qt{u
zA@z)+3u*>pQpB4Z#qYGJ*l&wc-WljoIy%4AUcj0lswZ@dSk@P!6T^|~?R_I30FNps
z58C3v3T{Ej3VsnYj4fe-aV5NX=1Kg>H_fuM4Sd{|a{e^E($5W8WSP{l*1#&{24|y@
zEhJb81Q;H)D<p}6!ABI-X^};@MwjnhP_Pg&3|vi&h71w>j4`e4l2p+m!h_<NgYO8{
zTlPEo!2V1TG8H4VFyfzaBsw;J#(IFV6d*wkRvRs;yP^-;CayGKpwMRG3A+*ZV7%~g
z2r+UT>~stQN*a7zz81R+2FL&~B*&EXcD@$AC0+w29j~%HEQl<-5Zay0+<5xwr}RI*
z|0;R&n^xrbH@{ggyy)NQfBK_8k-z%uFUJ=#?5dhyv5TKkSslMrfj`F*pO=H5Wr2aq
z-zN6Af9=PW$G2d|&(y7Mhhfp*h8^YmX9Vpn=D4!BbsQc)_cvdb|Lfz|>xCEnTRHyC
zZ<5(C)AzssN`307r!m;VumwIaY50Nw6hpZv&d4L+q4PzEv;7Ms&f}xRyR9|en3;A*
z;b||6<R#8yIiP`*@~-edu*t`R<BC$U3@DjlgQAU9XQQLm&ax+BNb!Kjc`%2lO6;wJ
zSYF2_m%#{ZpWkW?%P%}RPBc_5-~#pv@*&|3g9NN^F^`zE+^cb%l7aU;??g<~x_C~0
z(|*nIEw2E^P4Sm8Ab4nSCA5NIVyYI0I{?6Z0w0ab#}ITAW)>$9%<4vlW`8&^NRC)5
znFNjf$%mwO(W{-#jvjZ`my^%b+Mx#b>bE-H85c+n=acg)ID$o#^%UDu4g!{70}vV)
zI4|mpio6s#<bk1>_>k3eOseXBUH?in7p#dGHf!*hJw`vJVnq5R?Q%bD3%LRqB~E89
z=jL90s6KjOHjP+p6P~~!z@%bscD?ZY^Rl{iRWG~jviUblXEXih8#c=2?|PqZzWy)d
zum1W=^DAurHtnwX4ZU&5^3ToTZ|m8xX2YMorF%!b)oO3w+7~Xy0Wb!+HTzvZ`@v@a
zmaf0$yLD}+{?!-1tk?YM&3f7Iy;uL``4{@PW;b1Qk#5_zDla_$g2Pl&f^rXO%(!(g
z9vAVRxuk8pye`sxlLMZADTh<+A@a!;wxRAndQC+;L8^Kkaa>ZWPvGPGOa9jN#kK`9
zV~|O;QQM|nWk?KT6l3xctyk^q$!J5eod+e530yM0?SQBLU*UlJN445_l-`<O0Jk#T
zCh>ccfxOOrF7?9t;sxVjj+2uu2L;bAh@r{NKDk~$7r1qELJWVg6b3y8H91O7l8}a2
z8vg~j2viOh0tHP1$=DA*NK9*JC1HxLG8{4~8`(^%N|Kh`8Arkc8>mjm>98an?j0th
z9Z`CI6gwS5v~iAs$&G@NhmDM5<BtmbFYM=aWb3E~hX&sxp)MK%u8`OZ7_}H+!9yN)
z+#&yvLw$jCxdgBM%lN`tz<*kQTdbM6WJ}@lQR1Z`pX`|8Q*26jW1ztHqhs8kGd*Aa
z@|X3r(@&GrPdiQj{eSrP^1r_ItumX<bePTb%(MO%{hfdFZ}swby;nA0|0(^moBk4q
zGI|?!+ZumfFaBzVe<{QNn#L-84sa_R-!@*!vv1XIwX1(?JN3_Q`b)j$Pd_D>z3YAY
z_J8y5<gBy)XB}pP&W1tX`qsDVl~-OVJ9g~Q_r34EI-3pppa0}P>x;kmMdA_jEoahE
z27(qtAOQ{(pa=MuVwvk1+BL<I=#1H}oF{c(;Vy9-&ar)o*Zde3kJ1Zn@uHUcMUO8=
z$R&!)=RsQiKPkCda&a<m8Z0Kys|^zX8pK6aGLIl$IB?ZiwDD1khsP)3JoQ2ZSEV)D
z=|U_KhtL~_6nuaJ=p%6jJr&a9@oV}`n2%hX;uzX0U=-OZt}o+Hm?z)tHkbiXP@oBe
z<F$E!AX-ZS;GqV9=$a2iEg7DO*^xTw&+GFVn3N!)DVRlPy0QI&D#B*---B+1NP#E(
zp@HXD6{dyxQ2oaJolmT1!dDL~?yY+mZ>9ZdovKdk%ksLU2vcGYt%KnN&P}~y#s*em
z%)SSn7=FJal#1^n5VKAfV85tIQV~HM&|@z>(|Q>9>~|C`j7yhyWk5*HB8nKsfo+Zb
zrHQ22&euQj#N&GLJKmw|)~(2`x7;ePzxJA^(hDy<FMIdylN)ZlK`+1jGFgAd89M(>
zz?lxSnVfXeDe_yt^;Y>8|MFky<?nj0UjDB4=^woRkK~%`|3WtZ>CL+N`cLWR>u=W0
z*MCa>%a+ghU&OEh?!RpLjBdXEX1(T5KPA^(f3se5{ik&E^`DYIc>f>CWxw}cz3g4@
zlYjBQ{cHWLfBsfE`Q%e%n9X!H|7@GAKV!XIbkRj};|(|JzI}V;x#ylQ#eDz%1G-_u
z208VVQ)K)0H5!gH-VzaEj5K3huq`oTjMd9IH$I9#N{RRhh)?I5$23UsG*P%TzZXm^
zOhm9Kx>v%*{vlw<Z^xK&h~;E|@P#i$ggNYcrd}9R!?*vZd@6Q0T+9>1fpjbFOupD%
zqYwSF{U}EQ&p-~t5~NJ{wY(rd3}QEfV_IcJ3~DVUo<Tf{&jze!xsCpgBaA!O(xb@@
z`;lTzF7(*pvG8@61Q|(}!2&EwP(oK31{{zCHm-9lNG=ULAREn^41`Q1i-v5(Utz$4
zhFN^!;C1KlcuOeMiy=0YyQFIf8S;Rm;9p15u*)p2`r4tx1`Zf{Fv*iGtS{tgdLHpI
zOp-k@Re`S3D8S{cGsn2)1#>d|Vw|HUgRksC95bP?DeP9pPT*|eaK>ta^PP;IN8Pc!
zp6+Rg2K<EFW%(4h6br;WVNLZ%MD>LiU(}C%{9}6DvB%20fB)U`^TY8Qe(_?4?KYW@
zJo2dQ-M3F}yx~T@;l>;FcYfz0z2L&P%fG(h!tn=&hw*CQct6b4esFmHL(+o`_9N1>
znf)*^{ZR40y5Iu6;KH}-+uy!PZn)tFx#7kebl<+c^5~<FP%d!oEIFXBz5bef>gJpE
z_%|M}7r*0Ted32tI2XHoM4q7Rhz06yVkf*WFt@m=mut_nBG)J{D4Xo?=whCd9ekgC
z<8xuV>1Do??u19a1@Btj;XLRFY|t0dZ>U65>18+m;n2r1FFZ<h7BP&03**kXb~Qij
zCcI-mMAO#ha~vP@--l?*hbAtfX^r)#SX=6NgWW<M5In>m<HY+C-fes=_8~xGF>!-<
zhxjzHa1hJ6z}YzuvK>nm9Tc4l%ZgAUSuV=)49*oI7VzUA%^u0(+vr(IOjI*bG_pO(
zSGw6Me~xk|_0OSAg|c0j$y(4)Sn@4lwb0jo@XGs4Gg^=ffli(qu`wAA9^;AF;hK?<
z?XcO&syI~tAs*SUqN8AFv4%a1xT3wCU9L<I@S?4b%tK#T@h_NQQ5Fmf`Qv*lXQDt?
ze;J!vd|e4EE|_MHaZ&%fzq?&dIrUW8uwjGjxo^)D{t1IAjM2WzwdbCDUia?XD|`3)
zP512CqkH!5(Y<^3%AP%Y^||Ms(^}_Lxlv3HW?*bXi}{+L{`6;h$t9P{amOAjpZMe_
z<)vT#5^?l=37-r1#^po@vbWgA?8%(M=RF@tt}R1>{DQ!T3g8ImMjt~%egXdlO(4HJ
zo(GZ?8|qIDR(bd)zwo%Ic6ER=2_TClz8`(0DdQ+T0{2hx5$uZd9d=E<r^i$~lCJW+
z42iC*wUdCW{vfZ6WRtQ={2LCFY^Sg0p_7Jb!~o<+PxO^!M;Xrg8$ytHXm}9k15r`<
zc@-cd1CKT)yi;Il3df=cj@00YT7vs?AcG}90O{&6IOrddhJ#xC133IYcx9z@pVopL
zGgm?@K7zn|(j$VQnPVVmBKTCu)cD1rR+2>xsU%a;v#3ybh>&d6hNJ46xGAo!iHojB
zZ0MD7%M<2y);aEmsPH~GJ85rHP}k+8BuvZ#J2b&-f?>L-<?vTqxdHb+0>+5Vf`Z9S
zFgVLKptoB@_2Gvf(hDxQP}i-j=q;bVMPGaMRfr5?Fd0j-HT#kE;Rq4JC{8^lP4Om-
z8$O~AQ`6aX*EjFdGtW9pPCNZH{pMZY^o0wXYK~!!QH>eLsjDyTKoQ5HSv5Wi5<9A5
z3@Q`8q<ZKt9>m+Ni&2nI>r2dv-<oZLgcls9Fk}+TOU<4bi~#=-!9Eo3gfD4uK>y9h
z@YaR(xT?Z#wl!pr_Zj~lL!mWRnR0AljrG7<KfoSfZ|&s@slAx<6o0^(0^0DO_er)D
zijJ90F;CIJ7-URiKjNQaCMc}NVKL{1_5@UY5-LG~FcOvU+IA2b4_jfiM3F2bH-O}H
z2}CB6Zwdly4Y2sJ05P3rnH|XOanP66Pd4OSV5XWkB_R02#6`WKw$&Z+b{VO_1p(P(
z3AxDkz!hy)Trm~D6dx*RZe#H|{Gu2J=C}sq6|bnwXYc`6Hu1t6zq-!rng8L{G^g11
z#374C&YA9J{z1%wTNIQ0im>4b7e~J$gH2-8XQH5#I2H|G0~=NOr)Qtl5B>3n<d`=c
zqgP&er5yhGVa;pt3JK*2`hd(!`X=PzG2%N!YT=cUjF-ni(O%VLq|!dNPk;5RSM<+r
z_%m5rT9QjHy;T44$$tz#0Q)$W{H>h!b=@#Tk0&{eISo!M#D><Rwn@1hJ98{JhH^QC
zR!@Q3#y`r1;IAtHE`myz!|Nl)$^KXa#s`kcZ!TbfyRh?+LjYKhxm4Rg#YA3Iy?xIp
z$G|ruU5%rHUwFKG!RRY7UJRvUQtJ%J0e_1x<+*@nb}sMb7b<Kg*yhoW1K@9iEyn}S
z3tH3IU%BizzoJLOR<$b=5J2x6dPyF3C_kT?u!AfFTLq}G9g<T~1}8UHMVDomdP+gF
z48L;_y2omQTtsIp2CxQK%K((Ih7OX}@N>i$?C|G>fQ5)`JL9%McZCr5d!|NXjZIYe
zyQ19KMUHhgj~vL279yNHLm7s<;WlbPzWHMh3h}{(kD!!JU2sQ81ZBgy>?e?~iDB|`
zv?H0(*x@0={RIqMobl^#BEOc;f8h&y!U-qJdFQ=N4jwq@e)Kt$Z9<+P>Jo-@xJEFj
zE;xTVmQ7QyvP-i^Cbh*_oRbM%zdiNTlXCGpF4m=`CAr~-8|2kje?@T?@B`(x=iyk}
zWFdGJf5f?uOJJ8{!n!dAG*mhaNNrr}Yar6rrzMU+Qo@kd+Kje!zOo<TTRQ-_t&-Nl
z3nA0c=w#OtrW3b>Nox<t&HESNLgpZ+wDXl>CZQAzM4gN&aj4h{1ZZrf`Xw$nN|OY6
zFovcrh-X0~m1gf`&g4BN2XTQ~1RzZI>6~}CC$I~fDHdQOy>%M_3`42_RAPeIIs1nb
zmj}`&uvOOrot`X>Z8R8Y95chvFX~TG2w<h4q@Iu*tpfN|G0e8YTF2G-*x6^cr{aZ}
zq`{5s@O9Nbz*txoCP@g5R*-QoF`B?4m7wsrV2c0do1#sKZ_{`aws@f02nj;m6_!cs
z!natF)`I~JACSjAZiG=@gRu|2;5x0Vc6(t2KOid1^OoEGUsvRbU;7Un(DUAQo}PH(
ziSmWde?fo!>t824!&e+U_(cG$0ZMUAWB*h%8gF>j#ujmi#|>AA%3M>cEVOMBPc%r@
z*4E_IQ%{vM&pb=M^PTV1`XY+Qm~&lDr+6oVEr_oZYnr1uU&uCR2w@qqTU<M<Jt1rg
zV~!W=@0u#cGnG=PDdA6U^eKnpap^M+pWM8JIdBDePRG&ah93pHQai}Ui8a0`d@@w2
zPfX_u=?K*Oo;3EK$rmQcRtmdCsKKgx&V4@64q|2ubBsq67WESF&Baxc#cAUh>NbW!
z?kH{@{~h8KqB0SX9B8$`mY_nM2?PShNsFY2eSm>+sOpLR;su)mg)Rv`sentsl>J3x
z!bNK-f{Q}7WPOX9g5cVMQ%P34!{g?>78#Ch!Uvme-4|<9m4n<2{lrb&1G-@$;#&Pr
zm|<(renByfJs8V4MezlvNuQ7@3Bwj&_R;YuvJIcw5Mn(M7J<&TBcq$#kQ#&LMn&3v
z2&u&<w;}N0<7gYwnUCAPXP$XRuDa?feZw(tkU##=AM3NvJ{!Ex&9I3F288@cJZ`ub
zK1>$xf|H^MJ3+am@t9-~hJpe!CWLI0-=eDW!V53zCqMZKIqtY)<%%n=ke~hZr@ox>
zwZyGr!}rjpN{rcN^ey8`+^211k0U8bDeI^_Z1po6JZ{~-42au;Yo~Zc`H^_p^+>JN
z3v{NuM_44uEj2BCbotTviTt)a0P+4;YJ0(d;?`ixwW7qk*qiHpn4Eaey_oE$TJJi*
zH|qz64#kTCQha1ce4)oA34neD)R@L7<352g>nJfwTtL{&mcaz&!jo2mu3EgiqLQ77
zVu(Q^Zm|PyCnpVNZtO!sanNv(p@Qzm(Z2#T1BQ)fqL3qwU_aQ$IMBHogT^K)vhoed
zRT7a10Qj?E4e7G)fqe{C3Fi?QWOvaESWa?~y`lnwg3!K6KZrU-XS<KP0^-11{cMY0
zj*rm3+#u{&l1F&uy-~;n>N(2>5Gs}sXRnVbpNb!deQs;Ok=(RifBkj&^evy(m6a8_
z;DQU~;qN~zd1#8QnHST8G7VeEN5ced^*rEv(+RaE$2I;#u7|DIWi!?hE00sy+2$+z
z31>uq_`@gU!V50cHy-~+z4_)(>8r23Mm|v7ne#5Yd7(%9JP?T^xHg70mK`=TmjT2Q
zH`6f&6?n`DWLtV(1I~ayX_Dd(VNA~e!*OB(PATd!^IhLWkBM8-uAmF=QLb~ht#=dH
zG<~M<ZlWFmM4^N1&iuzR)N;eB)<kSuEZxTNUn!Rsz0gX&v%KJ2=1a(^c?!PS4vDql
zXb7q~C$yVwAw6!MYl;?$>k;Pxm4N^T2FYw70)bu2M34aV4txhB8^-`hP-3Fdp>CFA
zj}atH0$@t<A<6Vd5lFT%0u`7RvSwT+Z@^4Rd+2zq$3{1$C*!ADa1Y3oY_2-hWyF!W
zL;)d<t=UibFC~9q%tS_g%;TUax@K5R;EsGGd;9g=xKS5|2CyN%gkhY_#9bB1T+W<}
zW5kmP4>B>%xrneQY(cCD8{$`pRW9t@NQ%6J2M@@Gw`|Z;PCZp`zy0r+haUOb_yKbP
zPmUTJuq^n(`OX+<U=i*~NX{|wSn?py*_E+E7$q!;sBx`LybPQF_HVb!2`8SQZ`tq`
z*?(YvS>ryLjhT;(Tb_v!C|^?t7nGH9)qDcJq)H`*ZLPyuHtnXM5!X_mG8<CBb9{`5
z<s8Sn*~?Ic-+8_BY|7VUOOn+Me1uWuOvuCIfDPMh@>4uLURuu68I*xG=Rw1w7=fhz
z!Y@ErS5VlLWcPS~wH+8vdN7J`yvH**>-^|Bg0!wNi~X2?lXDY6NJ7B}qyc_LuSuk~
zk#tT&3<G#2qur>EM7}&6#Rd|L&c!3COMq~NW74L5K~SbdQ_O&jqR4`pfI_h@auD0@
zxJ<|m``~z4i+kdn6?(t-$F*se=ZJkk4%k7=)BebDCZ^fi#&v=I6gP^mBzYdJ6bL&^
z3JAWYVM96_Zk;{V&c-LQF{l8z@#E<R7)#)Z`<IG99#Y&du0)f3<YP*EQl&*R^zh+l
z<jSkAl4FlOPCxeXkLwFBzS!xhI#MjsAer`wy8U1a8Pf2`{HWZ4FhFdO+s#@jHY{l9
zx!EE2%Ai09G3L)c_nds-4?m#C9CM6*-~%7f!-o%#R*@Tx4V9aw8*xeNy?zvVqt5Ap
z#NxmMbDA!>-k3dU4`Hl!KFNR_K;)3Sxwer$v#$8c@jfaiCeBe0S+HI#N84I$`y`H5
z83s|*ey`eDuT04(HYRNGzr>61mjc&vL$l1<e;WI&pC#;JT@y#MtBFBYiapafVX@$O
zr|N0&R<JRJG{vpfyk-q5hx0Q39lg52&N=`SfFcIraUw;C!(*v{ksQ3CQ(QQ}J^-6;
zzP<*qtO4^;R+ybVFq;wvnQ(nmDmLT-miz}>$rn5i;Icj(o+s_qybtuaDgdYW1-K#k
zAx?aw*s!mtFYgh%6WG@9t&6pXWReFuj>3R*Cm-W4eh)iHU*4YwEv8hmm9Z(YCApk0
zYE`Kg;^eX`w!Eu6!Uo#sI`NWhd+pWN^wYO|TGy>xrx#y*u{{3x6Kp4OF!02ajqfcE
zu(x1uPUlzPO>qoM2xGz3WEIv+ls!7*!4%x0Q73G`be+Di!`jc2y{7-b{{8xvw``D=
zl@<A~xBgfCbxaZ%csvGpOkkR9&dqVczRG_;4m>k#lU?GbI=KLjCikVcvAJ;*7T>@m
z!2VHV;PLX<rd$jD#QugmKr?XIut83iJdV7S-bR+)#k1ezJdqS<dhvl+L_pejkc_mp
zf3eJ>5!0?#<{FnW6<>3Xu7Us9O#wyk;R$oUZ@3+JY2YT>VHR_4<4@eo5W$6DOBwq8
zILaB2)<H7&G6ZL&fQK2>bORaH8BBb<N1zNqWGy;~7IlG1K`cZwVUlGsfHeR;Ng+Rp
zgcz*YpLDc@sC$5*t^fca07*naR74X(-!Yuti-VCj7dJ(S8kMX`E;nQE`;o|i3D}ln
z9Y~-&%RM-jhL4VGrT~XDBKvgFN2Oq_`y3pfl!16v41`a1aVh&lF3X-O(8%3@5BZeF
z8Vx~=Kl`NdpX4>E5rdn7>3#QoM>lMEi=1})Y4X*td<C(gbvoip%<JSY;P~VXxd(m}
zUIVW5Lc$g%EE}wf{|a(|Lx?Tv2b?JaU?1qpwFK6__WJAcna_MyR#sNzyz|~B4?Xly
z+n`||$?9$kV;u_??PEK;SdKLkn<nQ#8d69`so+T`#4YjI@JtLWe#BbM>soC6|6cQi
zY@XyH*hD@j9TWKw68uq?6WgH%D9Wva&bY1|2Y<a#W9^RHBFrid7^4zI;Ees#oKG>0
z1{k)5j>cEg4?ePeh+W;=<wfeD_BiJXh!^YA9wP;8&40ijZv$PCaCZ|hZa)`ZYN`fY
zAt(}#pQlFA(3F5Q!4XV>!1aW2yH!)87PCQJY~Kt>c376lM#c&#VY1{sxQPo`><zqV
z1DF=1qX8-FbnI|VCWR!yg*0FdCl%qsb`-4bShj7d8QD21<$znpmWr~iY7(Fnk5+%(
z7noC-tg!|Egr)Y4Zafa;<rttJ#Qnf8H%RTcfV|9XB>5%^%$;gZP>6o|v!Ckk|Ngsm
zX=zEWz3y85<u6~V@uhqujAJckNRC5L3y5i+RDRk4#uKC_`$XHv4VDuzXFG+==s9KZ
zwzf~noqPczs)wIBELU7{g&gySH^_%S@?rg_Xa5O>*BVDP9sn-B5YAd{Wt-9~508&E
zD~vxj<2-;ApWB>X92<&p=9j?Y##cKB#?;tg?G`jK+tgwt#?j2Vx*qWa8vxJL=*TwT
z<$C~M*3Y~brL%DLpsWWQDnDHk&lOSQGFQx2lnswlJxMW&z7zIO4)=*n0uf0sR00vy
zOY=lCci7{uPPxW~e%5}L?MJ;sUhGD9#x=&%zep}O5{Q)v4UqC=-RR38!Shroa81Zz
z8<YxMk{bgB6K4uU7%H;vPCgwI-otC)d`H4aPRrjMcuL1Yd|vCzIG%-UWM+z|pb)YE
zUwH`a4V#b`Q^leB+3=?FpdT<=K9Sv0WLFSqU~b|$xzCPc(Xo4~B8@$6<Agn+JPKvz
zc{&f9h&$GdxhY01#@v17m0#&iH{B%1AAh`Da_J@d<daVV2PbaSv;jxc8H{S;#mAjH
zi9_tW)b;qha31&cyi~vk_6MGmjj&>$W7*lw7{Kw4XQF!Fp8Mp?GtZP0PB=mT`fvV*
z8W)D4)I=N%Fji=j>r8vodBUaPV_@RQbDb36q`;am9-|g|z%Gcd7GH$dGw(&SEjd0-
zFC`tO1gz_G)3IlK!VHcHfR}h_e#h|PAu$Xx-y#I1j>H-RvfE!dV8gCtdmQJq)=eW$
z<j1Zra{&c1eo~I58|oxm5&!T>U>(RsUz^yLJd@A`vNT>KG`3n@EVZ6>+bssYJS0Fe
zOuk}FWOLxv2yM+sfS`@@3yidNWqO?gAQ8fnHQSlj6%aG<te<UZfGsi%hhituU5Gq}
zT3VU$aACqaN&_>TF?uO>7^j5Q|8M*jlGH7z$%p!}(qo~>>nR4kUiEuGEjOP@p8$8B
z20$IOBab54C!_=Yp3X67IJ90#N0v8vjIjxv@wh>r(F*fh&hNZyr<{4#nR?o3r^#JA
z?+RFw-%~zL+1(9p#4&Fq+1F4x4_V@+z{&AGWc2aq_&-%+;!4LtS!_$<n)_DcR+>N;
zlUO7A$}6wv4L9DPOUui8;f3>`w5h%p89=zm7mEp2pTIrLGu(yOX<i%0r+E;2EM6f1
z`GA5FF4b1#66k{N6}p<b#`a|%fSmxBKknk?@~SS4{}_2wP{cwXPdt%seZxVth1XAU
zc7B3i7&e$s#>Z-`DTqOi^MI)tP)zC~Tu@Jszp1U<>1wq!viUqdH@=yF9;6;`lTU{^
z^b`Hhj}65!+R#3BFm3PTbZV<55z7c+TC<@_@{tv8qJZ|~TpG*})F4IH7UxCDj|5&G
zwn}2dF|xUkA`!h{fH#7_*py^4xiUUPT$I%vhe4e<lEY&0OeCDdfMTQc9Bk%_rMRcW
zp~WEak7De;z>p|(o*zqNdY2zwkQn!#-!<MXw(xI21TC(_9(3ot(>ge~PT~_{D&;)#
z>B)b5QZK#a5?x+elIyO!R$qGQC6?`QHoT7Gp@-x*wl+nyAC&7lJ|+=`6nC&W49W%B
z`PKMVY9y{f?xO#gNBKMv5A=3^Pt=2P?Nd)aC6`=!sT_06G5X<;d{}<*i(iDzwRTlG
z)}k15j*+hu<voCP>>RmJ8!vM?bV{d>_7k_5=Q{EQ^v6(#II9o;xi3PXQ+yIjU`ez@
zfNw#3V=q+1mgi<a^Cqy0!71myug&qKTG;5s-a>YEG7tpz*W{DEP?;6=SKmo~t`n17
za;$nhay%iXS+_>-##k??$zXRQUr`rvC6j5wPRA8ut}04@>$Yv^?u5zVAb8@k-!&nn
z8i_$h=SvajNJK#caM5*enms~Ul{^#4)a)e<88Py+9SW0gxu^#W)gI_X2~RC+3A5ZC
z#G^?VyFC#6sX>$*6A~s3J)LcK-f&1w4s46iAR%jU3Lk~{IPshK28V2Kf(!V|CQM=7
zHEC^hBVNg#w&5fH6W<W$Mkd^JqN$HD<L1`*A*w1bz4Ve^ckOk$ytJ&BTym*C_2iT6
zYu1UF3ELh604)m0!aA~*aSYv2mk_7q|50LB8sd0@@yc<tTu*DP6{Aaz3N&I{Bhctl
z-Qb2yz>X$1{=#v)-+9+gIqkI5^^{Xjk?m{Sv4~07lG4iQnqr*tCgU6RZ*o{kcvbw`
z^Tr9N?~^b5Ahw3K;=zga&KS=ZhzV9q-=FjYrwOO<+mBCS<CrhtE$gf6dOUbQbpPma
zs=~?6qYeCYy!3*s+vLaj%v-d53X2*`A${~h+%>~+<k1qkM=Wz~2@3fp&G7;!v*tL?
z{>ECUA=IZMI)abT_W>39MlQmzeKJXjNYq)Ap$%x$^300VxIq?x8rV80O|ZKG6r2n2
zQgIDE#okH#85{N;gSZgW(YL(Dk2QONY(iuU+v^^un}(epPct<qQ^gYTZC@cK+t5CI
z)ju_~f|X!a9}{Z0;^|<HQUA(V`{P&;rUD7n)=TubHWtKaz@&@)C@2>h1B_&jc{bJ5
z6l`zLr*)+;bvCQYSHAicJ^l34<*YN$(w+0SY10j`M(iiJjy@KydwkeWi~`)?V8llA
z+6WdmHfd#Y91|{}nAfLxh5Zrw>_o-S9-|+CXkJSZa2VK1u=C}YUY1XO@)L6GamVS!
z7hfz-Jn;m-*jdCGZ65WUR?m|X2gVhQba@?jGT$LNU02!@QAvCA4N=avVO@-KXczE4
z^iSzki0j0Qxny6jo3Y@1>Rbe@u%^SP0C-}IC`dhKxn8IJKtJ-IId5y}bdJl&Y^i(8
zt;W9aO;}b}@1P$|$)7y#a#2V8o9bEcpz}?n#%ZMc6u#~!{f=HJ4Na_s1i^Vp>-af6
zZh|;LAW%>1fV4f((2P4WMlc}3Y!5d2^bbfK$zicdfob%obwIiaQr8>O!z0K(8~%dI
zCX$RiN$0xQg~6>Hu&r+p5W3n}7yI7uL+P9}w`OmI6YNY?4_9@AG}Sx-IoT$*lW?hc
zM=a33)Zj=5?gJ_-4Ywd8bed}kBaQ>eU<{u4;S=(Xi!atUzVUdy>83xISAO+M;E`g(
z7!who0BUa!@r!V1{fB+v3*Z_Qbk?WlM6wA~ialf1y#Q0N-|8U{H<gD`n`Ic=<_>Zl
z4Yz9(3hGuHg*gp;{NWFOC>LIMp&obKvGU1JenMV)=_SgGh!bO5Vi6(E&Czx7K0KFY
zy6t@2A_~5Ajkw~TZS<4jDEOH3ALUHFIQJK06X%(msaKjs6Z>-v;2_!NYlMP9bpbit
zVDI}F!^Cy>fJJhQseB1aPTiFBqo3fP;#%f7u1$7Ajvzrh>?8jg*$Fdk<is&m&ROJM
z$EhqEI81S~lE`%e?T(lSKZXWmCT#|!IE#TnCr7ta;d9DhwaQ=y(Oo!zLHk2|Z(pja
z3^J=AlCWGM9S$M|fkFoBkkBF1-5pPx(7?{U^;mF`2EsNt7r%QlRloAh5FxUnyFHo1
z)b5=509Y>~K4VPr;<XKryGGI6K+))5(v{<g7`8HrGlUDC7g{=HPsO8sbqAOhERW6w
zU}pGkI$nI?Mg7>vKQ6}}cbxqGyWcH8`{_?L{AuhcGCK_5Ut39BK<F|TQt>3;>X3m2
z5aUcar2b#XvF8i?%=HnZLL{kRXE|+bJg;+}AYTe@wzm4;*_&@`Yj^0Wr<|&%pMIKt
z^P6|&`sQV2GVj4ptN~Ml7}{>VDAz9JYByL1UPjrh3$XY5UVg-QL0_DR7xDw`;`pQ(
zj35y|!T*SJ^{oujAcJBC_;&ti*a;YMOv9(ZhkO%=d%`2VLIM#2_f1|PXC<FA=xD#m
zC}<ET7w{hf$}vLO0$XeY#0!cE<pb>_zfzq+Us-i*&UmDln6rjad`7R3q7wv*3@~tl
zl3FwZ5%Q9g2qcgRofXL*m%wBvDNubgD93OLCOd#w2^Ww-NsW&s{-5laD12BQ)4B+p
zts`P1xp2GS$ru<b4#ii*Gn#JE68MGb9bPqdl4Rx>0e|?$geE&(e~N*UMZx!uSDg%w
zd{emH;<6VOxV>$`f!Ofyz+41Tgh`+L6FfiK4P@PZ`!+r0lv8!XhPUW__wC8mll;#$
z5E$BEwb&kfwVEU*j#e2M>!uNKyry_YA+MY+&RQdEoAS6b@MvrfwP38E3~07)3pOOI
zW8AP>EC^@2{o)rd%11u(VR^$b$H=9ZUNV06GB{DVN%#x8Nwyao@woYiwob_RIDj4u
z74ZvVTmD5I+;Jo1v6ygV%-oQc#~KTqe-OfUUz^Kfqj1KTWivlJ&R1;Q0TN!YDmD@S
zh{su9nh!t?#X_k+l_Aw)g|B)jcBQvbU1VI)b!#5E_jP%LAOUBH*E!zhyoqh(Crq(V
zN=Dp{Nm&ni^542m4aLn1OiN&p;H6lCdxlLRa73TLViGd&!osQ@07VXR1|W_H#%K~2
zpKN<rT+Vqyx}0iH@yl%iofMx$7H}c^^c&m)zXoUEGD6eZ9M9c=ERTGTb1CMX{5F1>
z*a>gIgl$PN3bA-D<J;p$uh@n4EYL}QA5BNmhpSUu(g5Gd=5smM8*YC8;fLjd3oq1l
zD=TvAEw{?+uf6W;CU_VRir)~WT+}F*G+!k?j1q)&xo;hhm_CV*6Fg1W%+GM?ZgfP9
zf}V*3F_|>=$~C!dk{-J-3VrYi0L371V-wz!_%3MQLk~ZsZ+qK$y1cw3H{NigzWS?I
zk-r&Fk1fUzn|{W{4}$HvN#PzE6eb$8dJNpg*bC@lFzpP^2(`AcE<v;b-yFvTJlEQ$
z4n$OHt`uA?BTzrd?74&?%fkn*MZ17(paVjWk;k}47$$0AJm`m>smF|Wn3v<mI!n%%
zUIHQObW$t?6=%#sqQ%quEeHT^pbH$YWPjt6=SJb}{CK&dM~0$3Iq)P*q7XVz$b$+L
z1*Z#uI{>5t_bE^d0%B`&6U0Uhg+YoY1keM;O`iM#1|*U-_H}-==R?P6Yn&PFLVDrJ
zL;&-RY|Z)_;s;h0$MAt2ApM9?+M{J#O;EIj^@kuRQe-PNmk}>l7FsE0#7%q#_G3a)
z6JNmNRJ;q8j2#!h5Fhahk3l}->gp2T68_jk|LNIh^+O-}kR0=dH|UjDU8&DJa~QB=
zY|$3NT(evN?LZR0i~;z^282zGT^N%otkI6z;Bs78FAUQWW6+5OHRBokAVyO*@^NSc
zO7h5G;vLz>@d)})#HZRs#)JK$qVj8z&wlnZvTogqo^{q)vS-hIc^~oE^Bn3jzDV($
zA-ozsi7&?k;2ro&^~z2IMmd(4i;P9V2G`SB1~g*U@V&WFY-w%Y=g(s%aVWFzgkj=p
zkt={0>`VQWJf|Q+d;wR!U=wl1L3vSM^jev4?Qz68jr}im)|o?b=Qt1!c#ip%*cO-t
z8eN>nB|zbHOWeV=1tXWwuD}{qydO9)0X$8Ki9ob&5uww$KxtwRte*%#u}2zNw3lL`
zjA0H`B_EJ8)&l&KHk8DIV?Jyo{ob5<ys6oHlp#jQ&bbPVt%<{AG(i1H!qIdW&Zb0Y
z_AqH<SW12&A%P#^?-UjV+bO;x?qNd0E61ID7qqp}!LQU<H}0)?VSIv1-1M1u(UU1F
z1Y08Fnlb8l=eDcp7ryvKIq}33<!$G^O%EJ6K(Rc^4c1Cno?|A7Zy=jD=b?&Y?EXT|
zm=9F^zz)ODV<G@L*<$jNtOcB#x+T*5COC#kOjx%mWas>V<G7FGpo)*MNnu?`HTLI+
zf36?+!w={%8{~@jyhnaIen!&;3rp?tq}E$O33WZnv$)Xn1~br)Nzh?LaqW6aSC2cq
z9Rk}KHDl3wwkIG#IEf6R+U=i`N4Zk!QeaNErmne1#C42CmNQjbJwmO`*{9t1HI&k8
zZ%*>LuQV(IrmbEEn0Pmp-_cW1hPa-rH|>vJ1$q)l;_d*RfJnAUHH2ht)Sp-J1>U?c
z@KZo3_=&6q(@LY~z=dJ(+)EAxOq;bN(3032uUB*n045@drb)_+y~TzXIr;N&(<XO1
zmkA`{5s)lmkZ~z-@K7h4++xEa$k343Bov>pE=GeyZY1K9d;zu0FTySH#OcHwDkLuZ
zcwLQ!x&sa7uDIRHnD>n~W8g8#xF4l~fLncjK+MoL$IW!(o*Huz6@B=jhxLLBFO(Bb
zI6=So#V?5bT0Cfyb+{jV4ATr?9pUbAO2;9hi*e2VkepmM8oy=1J}^V5(NE+quCMl0
z?&AKC%@Jf=I3Jlu79g-SV;7-BnAz^%$Vbur`w!@b4IAY6<KHMZ-+Z&a{`zaJ&)tg&
z3^DQq^UdlYayV=x9)+mHugW!XMP1!YzADN<u7gsK9bSeBQxgwUosfDQ|0_&TcQ4Mf
zEf8ELMdCijMEHM(A=nl+1STFYw+G{4wKavf;}Y=<@X*-a)>e)KH74(&E+@{lH?#{C
zr(0^9g$IjnZJo&}K=qqs!*PM5@Sqd}_RaJT=-^~A4z-CaE$O=^p5(JWDd(s41Pj6@
zK&1dQadX)~(-4tVkZka$wNH&`AtV=#MOcGDO&l_QAg^gsiJ4RKxMN_EbyaYbeOAbT
zF~?wC_E~s;9zq1<b@*UIz<Vr8EvBy1;Q?Dv7vdW0auOZ2fE2kHE0a6V7i=UzuafYQ
zTZJr>zH{ETd7;le`<#5}k3Xcx9ebR7=tF-j&prFxq(5%IMUD^?(&Z89c<F0;T(SG|
z`Vaz-NFL)1@+}_C;E{%sf@4}A((^DQX>Z|WiP6-4x1D{iIMP^{F(!*kw34m7AJUqd
zoT|#JufC=?f9hsE{*A}WhPQ0cg9i@)9HUhPW#8<vzGTd34eW=)@0<zN0Dr11jVWc(
zKvH5va;OeAxA4hI&ct9)Wfu928QY6>z;Kwd$@C>Vy#7QVMt%esj#&^9<DLD9ng+H}
z?T1<{-Fl8e{M*!$)Ndv+VA*IU`jgIqzY<co??SNM%*FQ5IeKB%#L)F(3?OFNzbOnR
zujru@6!h@Ko1p*C?Fr?4DF}>6K@*UffyoV%UTqNh=LSd<kPK#2vSuw|3q>XeLeMDo
zyTvq^59Ai}WGZke@Z*30n5mj2NLV6us2-QL7>!28!AiW=reteylN)b{1$8-&nIni5
z6^U3Q2|wbc6hkNR#msj|0V~8QW1Sz9*P{{C@FD&@@Fm=HbPN6#&)APPB4z@1y#DK7
z>leTHMLF?=6ZOIiE|Bm0-#yJfRlS6rvn+hWdI1vy$X?7VY&gZ2X&GcwdQ2SYY)ZqJ
zqDxZN7OXiQz+J+zSx34db~trp+yfW(317WX?m-MO*UYe~Ja-vnd+hz$&weJCUUG@f
zhMD}~2R<Or9Db(DgDP{u`LMIWmf~8^N3xW4;ct;kwuI&q!pgIL=tPco-0t*q{L>n;
zIk7Z+guU2PB-xkT%=RfdU3oE{69P8zB5<P~hju7%(*s%K#_M{n2qVJ2^pAP1*OW#N
zaHsfTM}QyUueLI||8%|y;DDyrI5EE#_%OzOkOXcIj1~M!p0X}H?LY&=tO-{m82~$P
z<aG<(&ZaS>={yCf3pi_srh@)}1`2-i9U6D=7?A6U$?|AIi9OM`z$a#IJ|6hwK?JdK
zxk`HxD;p9Ub{A&SK7rxXQE2=G7YwJyo<I@ocU;X6l#d+l_`yD<*rR{xalwprWo)|Q
z-{w+Y*T-$*J|N1nP5=J=2lQ=kJ5NtJ^;Efi+wGXIRWHP1(T#>Di?^uO_%T%%%g!MO
zd?R`(Co+~AcIg71Ak4{TaFX=r_~b&q5G&YUc%q$8e2=xH)Ee|}3X{e09No$kOg4@S
zciwfEoOR}zva)WS+<NP+`s-i64)rg%pv5oo#~EL=RY*Ut?dlH%Xn~Kp9;5FRLp36U
zUgro8GjW`N%drq1w$bDsXRtKc=<A#wfQQg}_P6R!2u^Xud<ehG3&So)VvlOEt<RN0
zNVEa$ggFAt1Af7M#7pTM7}exL#T(A08G+}Ksh-OihK^!`$rbP+kfZoVo@E?G2LTm2
zl2Ig+O9J}Rya1;**Z_D#Zaj{FmjrH#>Etc1X~@e>zXOLiV?)4zMdG7xO>il>v4~c^
z)t^}B^4oayn3cyF|7KrbbgMjig)Rhkz_-vwKo2=Uu0@hAYM}Ktv6et&K9GDt^T+eH
zcM8w0fWw{?N#>$)qQf5S#oj-KhbcA%BC3a<IV@LRb)_DA>~Zq3k9}NU{Kbm`2G9V~
zG$qOh#>kp^-0)o7H#k=Q6)e>qkNql>>m;8?z*4Rg);Qn?z~Kw|3=O>K%=eTFivN(m
z?ZBsiP=gl^02X-XazI`=pMADPSf{97Dd{mznVw($>Q{2(4L9iW@{*i)-g)})Ll0NH
zIv+7#1j(J_8To=Sawox8=)5&Aa?VJEnFp5qIMTD=4te9}EH5D7ydHb_1RrcK#xZj{
z=VQjkgce@#Xq5L(-9(s+CS98N@Vc6F)drKn{63mZW=F)I*H74yIEXsgcB(tcKEls<
zH*%@Y4!}Q*A!2HIg*GL5wjEzUWo+4H`^y+i3?ZRt2z3~61XUy=(w^#g=mj)0I1Ugt
z5d;kg2TJ^S)M_9Y7OGGRc8@Dl!b+S9I}q81l#Fpb4{!j6;wOW^jCUp+6^u-VPA?=$
zbDaO3iYqrfiUB<byjdS@7R~a>uTm7tP2v$qM>!Bph%5U>Zg>p2VPOb@-<05!1p#eR
z&=azWUyaY<R|ueUu>bYfUz1yI`LwQES<wqFyg;7#;S>Ffn^MG6k?OFTvP*P&Efw<l
z`QZ41eewTNvph2qPvj=#K4P^fK3x;d_FHkMoOJ#%NphSt$;ZBo&jTZj5Bq^c%KrEO
z?#|^nBG)IlmN`hgjoXt?Jt-Hz<6=GLm^a9WKk{Myr)Qs4s(+L-P}5LW$M>S2dsJtO
zW9U%D+KgB0W3Z=}jg~ij$-SzREohsl@*b>DeO<|PPr6l6WQti`1K47wB%f<NLjH$5
zteIF_td}PUi1%<T%v@0Wv;7!!_tkp>X=M8`nuMoDZO7b(e4u<4&}%BG5jVahxsq(C
z{s#le)+U$I-?~i@fT1i1lur=blwfmkgMi$nQFZ_Tfs(@{qnU79`%y*=aA{v`V(`Rj
zc?1PqO2s&w2Q8W5sc|&NGREEdCN5OegTp8faMDP~q#KKLX>v&PgrE72HVEki3@2>k
z2Fm=1g26HBWbpu|q}P3h;$v7rEp+`B|B2!)Yy%4Dc$j4%_DGYe3$U!`M!Da)?>qXI
z4R4WCPB~S!-M$SiiWr1vC`U<;RJ+=nMIwy$n%?l;CBtTn!vbuooH)%G0U*H>^eS_O
z;HI9`?|~RH-$%}KBnfLXl6hr~5&1mwFZ-Ng7-pj(apxgOVDY}+FxK_vVcEWYyPR_B
zDSE<*C(2*{_1`#7P+v0NAZ8Umbf?z%5<|3mL9D=x3I|hX+!wZ)xD0b}0DA_;t`3BZ
zJ#v8>f3YjeNq9mx>dx8Wre_gWExvKg?KSHYX9!c6+8Ruc9z!@XH9P|r94p&zzUD!?
z!`YO#cvrhawu{WD2s<KKw$a6SQ1OI;XVQN}N@V;KXbU$apxIH9l?@6YU?Drx8`};V
zfDVlO6nLjc=`uYLd>xm_J`od$9u^uBh@3)|75u`Pf^<#B!TpKhMk2X>)0lxX<y8{K
zB76$s0!H8uN5J`){3gFF?$tik#_kj$*J~%yC-jSo>I6pN8|$8kf9O!5gS?jT9YG9!
zWG)eR{9&I59bN!Do&O*I<A2DzfB)Tb?6Jq{$3OmY`NfOBXokx0wGKjzt704zZ}Z;#
zVxbg7fksC8g7)E>-hT^@6RYJuQWNx~nAUwIRtg!=zc9i2gt!ntp@1`g(JI8W;cvwx
z{EK=-F+$(Q*yj8t+<{pDPO?EJ&dr6q_~Hxt;g5VojydKSx!{5e_3_6aSHltf4qO)I
z2-`mqgC=J<{$39nUCt!Qd;GteLy03Mv&E#?iVB)xi{sPgFZmhSoP|o_nD+wrKb-7s
zB@+_1*!!X>0sk9ZVi}Mx&yQhWiw)TZk0Tn{4_8<Qyop*n6~{yl$0BS9Ot3{}dt3X|
z^1+M+e1R4;1Wx3R-Qq7}2nW6vc{>l$O60*HyOVT2Kp}(3IGSQLlf~?q04fh3ebImz
z5l6doAG!blAOJ~3K~$%Lif0N5vd_+>4tVtfoPrN$G!wzKrv~av6IAv%lDHumTNB5y
zz=!SGSq~tc7kDBV+CEmrj|FQ@E@0#OVC<&Y2WP-mw@dsv`42Ww5oAV(cUUYn613P)
z7RU3zM*uhGaSSsf2F@WN8KR=EzWS>C`Jex}9RJ4S<>Gg|Lmq$p3B)A%DWrpK4aC6@
zUNhP;J!B<J0PD<EM&8!2e*qK4x#WxAuuNO5Q*4s`wSXpD*{_IECmU^Gj+oUflNuIr
zHbC%ojr&}hQ`HJvh<i*11$n{vSeyJSSavvxKK$@Qdf^2Z=&{Ehr=R@9C**|}UV!+y
z(Lx9`m=uR|EEaH(jtLz!Qn{a`$8GboVF&VA{lA1ql}R{xPnEPkDh=0sQ_Z$`&X_NR
zA!BO$!#?JJUQ74^-*F}O5wb1WLAWpI<AgyIZ^8m`lcTMN&<5;*+mtO+JfOM>GJ+7)
zqiO8~Z{}i6Rf@gY%V-vR#bk^o4G2_t#EsCbb>SFZ45Uc~Cpie<To#`Vg;3jpJmmOs
zayF3`&ZQ(^y)_u*XV~5hTjpyjq=b__8ZpYr;AU|mF%b!oKB<dehz-ch10UnS1=p`W
zV62&7NJ>zflb*=UjZNb}9&6Y>_dUr+f0%RCZhr2LRt{Fz%9?y0{0IgU1K3Tl)&0Vv
zS#H3w%)^~KcgmS(o~5UscDnwzuYNVK3&4?k!8M36tS|9OHe?wj3yY}BPjSn!$U5R2
z``k5uvb()iOvy&K4{(6v@x16zA)IVIK{B3C{1;sB=jmj}1J(fcIS26=hO_7b9MGLu
z8&j#<#yE8Gcg}}gQPIEs+rQBhPdq_RIrS7-yJKy1A`LpA4>4daB}@=DSd{t^2U6;x
z9%qOh_}s;%*fO%N%LAojn&dS-2Dv)LZ<J{mG<H($v^=wXG@pe8acsj$enAqfgnHcc
z?ZywZ({*62nvkFT)I~ZF^ARy#FWqyY%^7o)i#Bw#3hlEqd_MWhxRd=2cXKU6y#oQ3
zfHJ^|5EF`gKLm%b5=4MHvNwh^=mctYGVAFIklEA@tnPFM6l5g3LzPe@NmN7fW@s&I
z8XJHlQwi)YhScmwE+8FoJ6uP-<y^KCFk#%gb)hpz8tiQJWn7p`1#c8;5_9lyCChJz
zRJhN{N3ZC*+ffUzlF6pF+v8S?>XT1CC6`=!i7qcK$+g#Ar!T+!G88fg#)XGJBbSgJ
z)qe<A#H2J{u{>a$e20f2aU=60@esQ_{8zbI*B_13?hg=D6ynMp;aGRNtl^NqEo%c8
z)18Milb;(}@z-@F?y)Y$fNY>r*<e<P2#f?fT?@{H6dx58efHUB^#gzShdRs#dB;00
z)~B9)DsrRa%v7A?Jle#(W!keW@S^H5mxJ{{8OGPtqWukDfWgSWVpHIn_~6k9xp{Ce
zH8$BT>E7k|^Xg+@F1QACq6)%aaBpuL+bN)i_KyT(yP5B;{IEZ2Q|`xLIbjGh0_7&-
z8eD?<QGDw7>v}K-;bZm(>j;q)|BVygYi!+Mgib6V1>{IF8j~92GzFZAAM&}-MsS<8
z?h_<HB9|)f^CoK2vwxtk4rQpGb$FwPpyMkjIIkU6KmuOxmJ*{olDa7v|9GA_0r+B!
zFu8J3#70B6L^9NtWGEKEK4FNnEFX!>WCsjfO9Vf2P-p{|48SNg+XlyMGZmt44U`d~
zD1?orkWSwaTv1i|<x4N=b=O_1OUp}o$)%U*lTSXydK}L#hM7wk3tH1+fL!JE6Z(nY
z;0IvQ>cGXAe@aoTO{@9?BDje}lmhAYCQvIIOsDu=<y2d}#zI{If`@MNBk4+hgBv+!
z;VWv&LsrpaygEvArH1D|v7aic2M!*T4I4J-^769WaKnxI%U}Kya>7BX_5>(^o0hmx
zJDBVZhBw#=zy*HXH2LNT=5x(j^MPZ`y#!>Yx;c%3@iJqbm@Qc@+KAMtK1EGMnUd}o
z-yGuF%L<35YJ!fzz~0oZMT{ouGs<EgI{SK?*?tt1>k|&DzNGV)?C5Gro>SUmNyiXK
zfg=DSZVE%S16ZAB3HUrf1Q1P|3r+tYW$zkm*;Snj?vp?ri3D4+I}#Wy@yG=UOSS|=
zYMDO?s9PWbky?q}YDMG*a;uU6H$Yz9xtNeT$7$Pn+B{O_^u^>RhCFGgQwjAjt~%uh
z*tp6L?7eSQg(BEx%-JU-7aQBbhK$ia_8Q~+zA@)IMH}|nd#^Ruoa6b;F~*#8*OH3j
zxK`U1X2pmS96Ji)sl63gxkqwIKq>50qY!(p3Sc?2Xc~jDI!L`vn#pG?5U}8kDJ({U
zV3Y5G2i8TjOOO>7$j~~n8MBdUPoSNJ6&#D%CBJf=X=hD3i0>vaEght<(w=2iWKO!!
zcHB=#4#KxmG1#>GU;p*r*yWdB?k{`U%l*KC10$0V^%>JA%aZ976Dxf3gs5~2PtrbV
z)oH2)RnHs2FiqH{T^o?p$%~k<!j<8+k-V5s=f`WmO|V`Je%yY`nCUabdGj1ehNQvf
zpgJDoqvwZmt=wmzB|qYOY(G|X^8LJm|L=bHd-kDQKI9i)bg^B2`Q^58aD(QS!bZpL
zSPt>Wgf5a3-77EdtWPWR*xE0Dr!TNIp;4ag*o=H1wUJiuu#yH-Sa&`C<k|N5yeGJo
z<I?-64CDDC3%2iuylB%2kVfndrZK{E59<q$kR{zQ?UNLxeZc?|b72%!1~S)z<Kmkw
zZ0=wKeO}#tIE+y^OXUO&jX(wbK&#PT5qKrWMm`Inp1rb@wE|PRtc-6(fh5<==$OU`
zc32^7cto@G)m41g=+Os*z0yQ95+5Bf>L|aZqoc<HTyZbN#wO}+7tj~ms^fD*kFwT0
z%X)9^p|p+3qHPzt>e&a$YjkpAd$Ym*h^C-K7?HkMdLv`PrevH(cEx7geL9``>)-GO
zd)^N{&wl6n>+RWRpAkLNWS8R?P%JhtV|I0Ca+`HEE^F?t7c7CVVy`qQaN;I%r16{R
z4A;6g1NIBON;T0x*u<D_JOy4MTxh1}(ND`idLZhhakVG3GuAsEDY6zG<>jm^46U+c
zzw1oG4tbzW&?K56`X2knV}9*5*ZO3#VsC!STl_0u`3kY2GQ$MQax2X3gbOSaC4{dv
zHdYlzxZu^l8f<FxAXd?_CvU)#-|PIeBmIqxf{q}~8amj-#``sVGVk`&@YdLt{FU*O
zWi~6wVFcehG%)ueFKCe3!cI#cMQ+aXc749jJLyx18lgQg4+Qk&V`7iJ@q<qr4r6qc
zl1zs=6vZ~q)|s@$P+DS|pvGhXYTp;4xg{+k0G_BXpacMD4ek_cdjJrME@sgN#?Usd
zr(9b_Hnin<4L_`E%D8$;-@y>s$UF2y)`oGIf6_tKZ{^X59GT2V#}zIcUIaA8c`NuD
zIv<z4=!wkI-IP~2ePd^x*_CvvHk;3KJ8JdhlTZ2ke&v1soaa2(f9j`x+Rs0F-r7Fp
z1qOOFiOxu`4IM(C=$)_kWM?DSL1Akz-Oph~V}9Q2KMB(>z=|%+lfFd`9ht>b4G#8c
zB3?+0Y|CuWjSL#OUchh0ZE;NAAs>>}g?J&+_Ux?TmF$}73_3n{#~uFim%rRsS9kdb
zKkxy2<~z^e`J($O>n0HnT@~k*2^H#P-O#lhCMjq!S>-LkZ?U(&E;*2d4jNtVFyE$}
z<$G&KFlDl{f@R9T@=G0%JF3sI{j@UDw%Je714z(^*ml@Pts$hyqt4JYUX4L$Y_U4Q
zM((HbS8<DFR_u)B+UY+G%AM}PRxo!q0WMqW@O{!`&1AIlnE*+IR~T&^4r-K%&x9Rv
zlxm=<Shl-Hup%_2FYgt)sKeG_%OiY`9&Hr^8ag1Ld{F-wwdo6Oig}0(n17Xr_LGJQ
zJ+SP&>aNi2<9#!&tqpYTsOqrtBf78hS(<F+r=7g2Q`J5?vXMzj+w=XVPnOZh7$Jgc
zM=Fat_Fw(gU-{*iU+!1D>Q(-^&)wO|wB;A{XfU9JIONNH3jck1irwubmuM)q6@D!k
z!g66KVm8&*lLsq(@4%Zp&j8u6d%g!;anPBgk3TyStQA$TylVUI^DWM~yf<TWd$n(p
z_YRX*Gk#+q&~&E{!1PXin)x%&JZm5Lz;F5Lu3h%>m%q&J_}m?-92&;?nV!D}(`4$6
z?CNK3*TumyE=1jLFKs)z@5xyv^c`gte`<dtV-c<Nz3m%pWk=d=AXFWj>;brpxvRrV
zVz;Gzkd?G{l=DhwZmkIz%#NPhK|d^a;FAclpDa~6v!6j6Y*VRIp0`*AkRe?~uRU8V
zIMcRUUZ3bq=3&ezo$o8icN7q#2X)XB896fo$&xVT6BJSzqvsliS&>z_X+$P{#l&X(
zIiy^`g?Vfh4B~{huHisFY-CBhp^Kb&NiMCPc+wVWwz?IABwFd+xMelE(r-_uMH1Ck
z+KE{oQr+$VgcvT`RKDB$7;VsR3{?250gX6as-i33a*OCOFS0V9&X&ux7hiO-|G^*p
zfj|4*XNB@2gQP(w;i2EKVT?sI6r1b>ZmI98y9PiD@I;$7AQ|XjH51wH#EH}QI$re3
zwmkxRc&UxCEOKm?SFvrqP7RAaCQgjWj=z&l(O{$UWqqi8dw!&2G49p-H9>}=RBtN(
zjve)7o^p2XQD|H8^3|`Nvp2uxEw-{Uv1_im#?GIAL}{qcsQjJAENu(66<e<IHfqBD
zGsb6?pD3yD-PkADVUEpIkUx$Eff}@gc0g0drd#@Zb4266r499qASUL;;eS1v+qsJb
z(VHvUF-CPzcxQT3uOyQT%C_{yenE{o&$hfLUo5NW90pqKQf1%evs{noCuvKCP!K``
zh!No$4+i66ris$pe-c&{lHBc}G#jBo7;TisHk!0Ge7R7X%IamweSR=eO2#Q;4<o4X
z+sq*-5wIOIM)cn^x;o(&E8;dZ7VCrvFS0e<Y=ej9k&b@IUIbLDzI%KdHx>POfDO?u
z_S(ujYykr8^2+U5$Dl-jKl@_4q3iMCTaSOsf8~Aev*$kdIsUV6dz(M@jmJ9Ai4FDT
z$u`C`<$Dki!?$*Tmfr0b{euTmW+ON5r_zM1w6RHQC-hVsgv{B_SneHrXSuP?|9`zy
zMo!m8ZKu&g%93a-vft4Tg`Rk3<bFP1KZ#w9@LEMrvL1QXy8Vsm0(5K~+^`p4e!2h9
z5B-qcc;gNJ?6co3vSmJ7I~AX-&m<oair_kYb+`kQ6TMVhi9T8z>hRgKvyR@>Pn;eb
z(<j=?-9}#39+`Fn|2;b<+S`NyG6(*V$cPrm++?0aNZaa?ZAtOf(0`86*mWzjt{zev
zUi%0Gfy?aF_xQc!TREn9D8?cACZ8hA94mVZvWEK;ewc*o^+70(ge=Aa<$;HIfu<f%
z$rb+O^1UM@<`;(1IG;@1<Nz3__U*whE2MsAtM;M{eZH&g9<7aR+CIf;sOzqwisQkM
z1`)K<?*>zh?9m74sO>>e$i6nQ>{SFv;u@D%>7>)HSX0_bvAZJA7&kox_9P^B#_}TQ
zp6n>tknhfI%-sL<<A3TeeBlf1HLrP%-*eC1B1`6npJARk$tcf(N7ARtqc8Wd1V?Fr
zkqKPy1av7A$WH9*0<VUC2K}}lmIpnbl=jChKq}X1%#JK9?I?&LqFP%LS>V1oGbEU&
zHr>h^!!d5_WZDU;8~rpoN<UGyjOgm=pBM$d=^w-+`gC{mC!c!KfA!aX&7S+5=lZLz
zc$MFM&pl~p!BeFdU(q+&Ncwpi?FH?u*G6epQ8xWBRoXx6n&lv}>+(wMsE*6f4G1@Q
zRrO?LJTLY?!b2PMLDwo%+_Nr?^qGx;+Hnxs@Oc59_GltG)9`AeJz7Nv9`mZ>8Pma7
z#=woR$M_!NZ^ucQ$Q)mI$w!xO6Bi<T%!i-A07>$r1~8&zB1|l`5x#(1hY40T&C3+v
z6q*cyP2VUx1}(teKGWfMM20Yu@d+jRXBq8asCA;TPTzxE`eQQhXrs!hZCM@+EF=83
z_xrk0LsohV{RmTr&!hTi^{Gl4d6s0#^pcVbu<$kRqbnQmlFu#sJ$34&U48ZI?9xjw
z_5J(z`}e;0J?OP#-=YhZ9|w8GMt0Iy{~p^c*%A#8+h*yq-1Bm=@zO?Yj&<C-UxSEF
zTgc=B;J=hF=u29SzpCvg&xD&Dds2C*^dvEl!T3H)S!Cusp^Vx=BkP{5bUgEVKk4dE
z!eesvF0WPhY+K1spB{I&*>vi!yZUOMtW5mpe(vY8(oKvQK(C69?7Y$&J|^Q8+v?1Z
zJ0>yA`|!u4YZ@aFSnX7Uw~;xm&?K^Ul8MLwBBRb)xfHntDWzWt@T**!KtG4!`+eK5
z^8or7mpg$k(G%>4t`$2BMD5V06V-)Zhn`sWId4?Hczn{ug?I`o^c(5C<D=2>gf*AK
z@Y){EAdIuY4nQeJV8Lt%QYVduQ0cQc3kiqC-VZX1VN*LcEFHJ<)V7uW>vOezQ6LL-
z4D9kbl5=$od1a^VxI{N(!TN*sS7X-iX8cBNs-ZDZc?YzKj*k9AMi5xYPb6qPdGr9G
zrHusuU}q<`A`_7jHA`B-ShffG9UBw-S>FHVzkJhw@fUv4e((o=(0}%AZ?kXy%QwsO
z1}h1WQi3415#Wb!cJ0i2ZI!3;Tq9pnOk*eVYR4iSfa4-}_V|>8;~BC6$XdZXWy$hV
z+aY~%yE-=W5M%U$ly+RfnnD{05XQy=HF;ios&>I+CVf5GRQ-}2m~(rU8$HIdDSa22
z71_diVUlbG4KIIw`|bXM7rwwQzUU&q`IcMkd;k9L-Tud3WQ;;b@<8;aZL@6@i8H-4
zHwex&^F--aWzTZX|B_aa2U`ld+j-UGdQl1jSejqkIZbFGI`YY+p$+Vc-OzZg3`q{f
zUin#IVUbPgTa!0$c*Appt{U6v$^r7I&m}%nKL&O>d|R@c@>IU6JX78xFX)Fa@H3Mh
zIES%TP?G^!m?{jSHUyAbhvJ$Er5MS`ga*UrwytetP<M1g{IS4Hg+s!&`r^TQ_mlQ2
zRvy3UJ7fu3m2c1~?U{z;OaPMphy|&!bjBM2A?1N>-)euu)u5@^Sd~RVdDvgi21y0%
z@XR~&BMCyWg|P{@(wIC{uC34{Y#2IFy}Oy&{(bxXl1nc2*Sz{QcJDp+^z|Fy(deki
z5jtym3?9fQ+l+F&Z#Uw-?-!kG4REm#MtD%+$AF;C@`_AG=p20)olD?c$BfA^?F&8X
zv*g>=-h1|4ZKKj=OhoU#Il3K@Svxti<tVL<eLzOQe3e_JOA&@zsSZWRF=iwx-aaj=
zuk%i7oh;<>Cmy$VzVn^_gFpBK_Uc!^+E1Q3)yhvh<NyM2L)VCoM(?$q(%!#r^}{f*
z`T(=u>c1l=;<G0&$hkL%5gEj1YlAd0@n=ncB1^f>GAVN8Ydl&bo4)@wbX5IOKkSzc
z4i_0k<DT5A{CYB2vK_K7GAlOi5L)f4)4u4f*hedm(ubK(#4sx{9V2R9ePc@kF8n;}
zx(coc)?5vN7_vScjUm*2#}qgIB127cZHyCb3jJM$bmh;q68-o*uqI=Bm1paO5qROM
z7*UZ~8vqnp(#VxJBGOY*9Y=1*ZfUomJZDEA?X%F_<D-$8j7#@PRypxjeK$c<AZJf5
zZhrUOcl&Ez{c6AD(o1dst^3XF-?^WL27FW-qwF!CQQFB4#D<u(q`Rw^rJ3h&**<zJ
z0kGHz>80Oy*QU&w9-f4D4n~P@whsk{&ZMz}E!GKFY?Lg4-$AhOC3KQ+VJwvq^e9GI
zCpE&D=pJ<S0tFJ5$c^b|g9|(EK%CXSTfGZDdBbDJ?jTRG%`UE+nV&p$(q8?VSKAN#
zzz^Cxf9aj}FW>wZx28{Pu8|jX^sl(uor^~8kaZCKaI#WtPkqEgCp@qdJ?(Qak%kYK
zzNO1P?Vj|;_qM+dAEy0}`soOrUAa`*3q}*~Zq$&kvu%?NXEPRfDpz?;)+&v1tr;`Z
zAyYcbv-zDtBtW~dcbQv;d-S>DNC}Ab2a~OSA%kURcAEUFfO`P@{V2Q@q$;2lK23Q-
z6ElL(Ayu8I=ovM*c!K)x@GUk&f+yiaH*Vs<X(%S`>AlF2<r!H72vB)5-~7RHWC2}9
z1D(o5-Z=?40U7CDsVvWDpDJsjr8|jK88o)Y<5OSRo><Es)Sg)B)GujO#8vH(`&Zr`
zd+ag)*|)vTe((o=z<%);e!>6sU;b5}YiCmpU})?*5eCmzc?3<Q5cFMeT6F4si*-=G
zV<KdhX|SZOm6z~bX`@T6f6L1m93>nV3l)1&o*G#R2m{N=Uu&RZOfmVc_6b&T&)^2d
z59w0ME8WI*{DyuonmCl>k{m=%>U%DJp8i65-ASL-RttUYGo65lu2o+S62JGo@A)ks
zy2UTP=pwu1l1uGR{+~Y)n-Atw9t{@hcTxb!UFhbI)fUM%tUMF;Kr$pZY5SpPh#r;c
z@NTW_+Lz^!X~!75_w0Co(7?F<EeB}keD$Ry!T7y{&0?d>dyZS)S#BdQjM3n48Gjgt
z{fBY8(i%Ln0d@5}BFpYvKh_7?T&3BaPTh*4!jOoGpb|oDKu8H7V>Ap>CT|cKLUbOr
zCp`4R$gh3zdp_Ur(+ZU)BgyD6m|z^Y)$3^y9x_em%yzIdl58_cSH4KyRq;6%{nyAl
z43+t=-z!hqFI(h}z|zXP)jR1tz^}tM%dg6U1rU8^A0g-AYEUBlw`01<n(qlOV|@4R
z^n2g?p8eq;{h?ia@kRc+t6!JPOfZp=KG}9je<ByPqgIDtg!_j4h=yJp=A8&gngWa|
z0BD|vPK@43LWP$i3(q8`q0>^I#3TRL+Fml9Jye>N*6~*{G7wkw(8x0h$Kx25Wz*_a
zCO>`<<MFfdU4jp>Bhd!zO|gV%VPD{W<hiUqj3sW+Jw#{Jl?tZFuOt3%eB&GTAAjyY
z+GH~E*Ij+J&89P<v(JB;7|9WYwsfluO!R0pn&_CtsWPYj#e%XY&^wyon)Z`2$?q4C
zW3jXFMFQBa+(({g+T6qzXnxK9`;WEb82g#&(8`<6VaClW%`9-$X>HGR60f+2?<4br
zFvs^&n@mGPFaD1DMWMs-pG^uFbzd>G1RG9DB*vQHK=~sjkY(>gLl-27wnmX`C`H4q
z(S`|;5c}g)J_}nS52n{z;d5UyKAUj%-U%?EhpKSt0l^wgY>=C?UBGsVE;OK1T|ibG
z$hJ12ebKW#mPN1!+N<649FTb+d6UT18Aux}6rG%)P>~mPYHhzge%(KJ#~psf6<7ER
zU-$z1(~tit<dY+?Y?Z%;H>ezRFs00o2Q(SCE3zwru1Q1qYI$xcuF_6)Q+XttE<B|S
zn*O9QbSHk$FrKzppW}d70{Nn2neeMl<6bi+6GG##uByG4emjAN+EUAx${H6ugE}*5
z-0Ryab#iU+$uZhmd9YH3HdW@u=K8!<cAEAoKLmzm?)Tn%uf6JuEBraneXjrNul}k(
z@x&84j{r+r*%#W9*e>7g1g)|iI%lp)Mvbk7&XgvXzG>_#*Pd*6T#>1?FVC0^EOPG3
zpPQSG5q$NrrX9ob8NEl$*Kv)xsPT*j!~^|B-_`H=p3>FO;9<LcUW8G?TkRw6!A{U2
z(c9;pNl(C4KF!*H>lT9sjU9ovgB1l-)l?&8UP(wbV3Z)IGszcY2oo6<2(^HLu+pnB
z_FpOwT!mpl^5tEGIzk)YYulNUf<BctD4XwFUTBPu!8Vx+2PGZx-|tUeMtu^=^<|*5
z2R^DZQ`^wCpfCGtX-sQMQMI~tul6BE(D2B5ef0c!`{|$hDSys$p5wprzW4dJzV)~~
zWBiQp;+~ZomIn;2vB%V*DP18ap||OWWnKe;;x9>QSN8JG!Gd$2*6CA?viOkNS(BI=
zv6KMU@(0<foT@G>e?{gEU65(V9_si;M09LnV5s!fwQ(JzGl4;lV#AH>dSjJ)9eXGK
zg`cV$Pkm|vrS!C>Qt5=EAPd+FD8S$Ee)qe6;|(|X^PcxSf8h&WXt&>fdzrXtj38h{
zj^i?_@)q7kUpfatz6f#}y^+kB2a@{^w2xjJ!S6Brl`HhOU(D#!-|eYK;|{h-3MBhr
zm5?P=J7#0^!1R%^#I93OgxwgdYft@tow1!+(fEb$hl=Cz7DHKv2=qYn1P_YBN(cRp
zMRYq{3t?t30k2iVjUIxjG6||6)fP;~OJGUGj4HFsPgR0TAc9YA`|hg}+8CQs*L5^8
zGBUb4X^=dXhvEb|c!-IdpZhTAtOgAxG-05WN{5z8>yD0wF?wzIdnm};d!);j9^4~c
zjMD;3VnF6`o_Y2eyMBG$pZC1y+3Vl%2AfW&DO*XgS{}yjh^Mh)5B-<W)@$cGKVR&0
z&{1ZcJ$f$if)R?mAP*5u`(EUhvQqP?x-IfF_5m88Yd1Xca%VDbXKdI+B_d@BI&{46
z15auYT;-D1S?!p>e-!6gJ&;k6sq#yBK5Dn}4AZWD(De(tQu`G?lj0QrvhDdt&ik9+
z{AOEOS+Uo@;r0HNbLW6lVb3u(P{1R>Rk;>h?&t+`9Qv#})#qvMEqZ0yB#&a7(3Qxs
z=ncFSy~>zu-Y_!mgZ0UHP>dV0ReniNt~y{{r`X6|3mvf2lsIT7p)@*b@mKxWwJViJ
z-v=>oG`dhfNpeBEans~Pd8=d7%hT8kEszEDF=0?L8c-%Nz#@ofnCLq|v}I*cNBKM}
zmxaL6hw!Tan8CiGT@XZb5({FOUe=-rz^a470sGJQL9sr=if2`*VWUt6?V|tyAOJ~3
zK~!R+y3(<m$&l|S&rRirbthb?MHiYx4n29-khYG;0E@7Sjl1Zw*c|v^n<#Xp!FtMZ
z%r27W>I2QV?st6dbN;fIzsxVc{BrxNzy53Id*l7b2!)2UBuo9Y@*^5xMXK}Uk7dfV
zhb<L;$fn@)+J8HtXdiK{H(tLT>{@sw0qS$bmS7?IUb9=4g~+LSJo+sD*3i(%n@DYW
z)LY<*gzBt&X=idxWnb)_?Md)MY;l|)p`@c%6~ExE4B~0a!GY>b11Q*>-e<cj?TL`Y
z4ig&8-R;1}hQIj5m;0_=tNy_ce$bwJ`YF*}l>_K4`YN(uTdf#)ftT=A`(&B-uyh1(
zNq$N%83yPzr}@L1G21!R^?P=#?RJopGcS^GfaejJj9e$4QlNQ>No-|ZqB@N$+Ry0R
z^`4;<*d(;v#w(Rx`d^h>l~dze_49~*cK7J1@sg0jNU}2`keRH8-;P1DK;JtkgJsgR
zYqQrXtnpV1O0584G=sIr#9!$k1L)Bt2H4>h21K^ixU@Te?LR+ayh&Fv@UC3MS_Q1L
z-_G*{2&wmO06=}|q=fN0{R=IyI~DTS#LPg_20Xalm8F&MB>zXwKjJ_2(?4yycJ1=t
z{LTMjPd@q7IPFDNNec@uNhmUDU!b`ouhu>kvYcd?Je$$b-XA~drVcG84wcoiyAk@y
zk2?D3%B;#y>_EpM|1|k5@4-ta$fz<TnaHzjE5;Pk^U7OxB;!JMgG|hr3XwhOrI~=a
zE$ch~GOuh3Beo*Rtk^6%Z{#{+tJ-&CqeS~)6Xq!g_V=Kn;hFmuV>f^L>8I=izx7+b
zy1L6Qzx>61U}K}oRfHvYo=yRQrR~bR7kwCW)yy*^lefyj<OAJ@K3i;%ZaQ*>Vqwtz
z_M>(c_uV?QfeyA$Q3dO+JP+EO|C9SL#cZ?_M)qxjWeY=32ky+e+8@-ZJm+Qj3g4^G
zDMOw9TG_d@ORr9U6kamWOJUQb0ta(98NV7cjD`k<6gr&s1lAb6m}@((gpg_&*@uvj
z<I+XqRd_KDvRZmO9h>&eN&vkomy|bV29iSqT+Jk<24XE8E!~Y#_6!TO(zQm%ZD7Wq
zrN4&mdLKH4u4^XQ%Awj2<kkZo)8S0UF^u0nH(X0~sjYnHneX`ea+%iO@|HLISI(Uy
zu`2ylu8rMe8U_!gp9~1e^2`DZSe&6Eu_x%F@Z9r1)gN>y<B#c~@R@C_eWtn2{x@zn
z4Jg&?H90LNXHEYh69)U1Uj3e6N_MO^nq$+P*YX7G5L-@qTt91o!{b%n6>50=UU03G
zXiF!LTWpag(9vt6qada$FCrM@_VihF=g?gvW1{D)=g!&dU;hT5Oji6YZ+?rNKmUl(
zo^t5fI*nDYr+~-ooY>_~cakAq8dQ;liY-xp<vtsL&>nIY*@-O?PtZI57Q0j1thQYx
zE4Gg3>pWcaUu4BXNj$V_-<F)IiS_-h`{H&)gV-@C*-HP)pFxVrhdK8FA82T5WY)gm
z<Ml9x#o(bWF)njuD3s1jbiiJi_wId<zF4_@vjPh-8~=$xgI<xePI|3!T<`ODk^@;D
zeNTDy9E@caa+V098jC2oHD=~HCmT~5#gN2NTH_!Z8+nR;`M&6#6iG_%1gRdhjRiW<
z-s)r7CzO*iCt4a5EH>Nlx5EpvR{+@9*szzq>}CG4m%ZFJP#K`ERSz();xCPy#eSUm
z8FA{W8&S0SZzG4U&ouAoy)UP@*RxF>$7AebE3Mqwd8<8`>O1JCLC7XMe3D;`$)ly6
z^<s@)IJg22WP2c;Xyi$=tJ^|bW9uyV95b%96EYqa+>vhLZsD~@U*W$)huFJdYmsr4
zwez2lW$;yL%&{N~V1yD)ocry6e!IWm1uyU)dfpHD4L98A&ph*NJ13-NDZfdlP7q!B
zkghEBCr_omgl+1l(A2Y23vyU&q>G$y)Lx`5^h1O|e{91{kLaDdV%t~Ud&rh`Sbe(b
zt==zoW8U76>lMFyeI-9UZ+2zRHU^G}1|8gkWAv+i%C#J#XX_j+tE9u<oBqswS<&;#
z99d$e*V34>sp(CArs<<K2&K0OKtRyYx@V;2S{irSN|{_nfF4MxO6@8m`Rpi=_-6-(
zUTfQE9QWG(wBPaj%{}TnLD{Hj$_R>x@BjSd*X{H-9<uwsdWUbG*|5zs2W|Pj;hSeR
z{P>v--#mT5H_vX^@zcv|o2L&9*O%W<oY}B^ojquqr<eDRpV{!uGY9;{nS*xX?8fjq
zXeZ7dwBu(E_=&R{%eH3^+UD5}+dO;FHqRU!+HBb7=>vXZNsDcsJ!r>IZ+P50e)_<Y
zmNP?}(+7OGw(RT7h95t@;hSfdbZwqJXvYUykDuP~6K4)C#|t{oE_pxn&|mwW-~QkI
ze|_8kY#+S!SMvEK?*|9D9JJ%75BTvj%Q2VzZP@WaUhzsk&!CUvXAUg+J-vKCetMwu
z%z==noj9|6E@+CeLN6x<U4)F5d>uspXATU!qyL~K=^kF8tIdI~<=7kkz}JrZ*~ORq
z$$$G+*H+DpzBp`(%(EA`8sKfjw)+9AfK6Z&9DpN*u5Yw>$Nrs6w3x$zotM5xXfHt&
zIPS?$U;$(H+RHn$M18PWp8C!c{?%{J?c~FE+vY$1-O`7{FV3)Ez=xJTxV#_!6Lz$;
z|M1c9%Z>C|_RsL$r9DQUOB+5;pEtwS2U@}}kB2`Gwi&pwd1l#$F(qjZd^)pX;g^TL
z{8#>ee)ygC<NwF2?SK2F|HW^=<D;Imo#tl_0yB~(U}5-0_-6Xf!0YDeC5<Ax)8Ur`
zUWV@u{&|AsdiJ1g1}3Il2AmpR;nUGJ{X4Pxz<?u5d4_ygj+<vT{Jwv>!{^^PX^Y1n
z&A_y^<#6Kgui<J2oPA%AV22Ep4c6$Ec!)+;;(z3r4IUYK8cir_z*Uk68mjemp0oS?
z(>NEzvkt~ECLq>eO4>dOUQJwy6-JXx`X)hwvzRG%2+<KCAb^BoqyTzG$78aJ5*j07
z9t;N92$lL$zRNqe6GC9HWzsQLLiADOasfVq^5LV(rz1;#8#f?!2;;|;9&__&zxN&c
z?3e$-e)rIOeEr}aTi@7Yzjye3zHf8QZ#}VQ`%kRf{>|n4zRfk?cYMwF9pCG>Zm!#{
zC)REGeQ0}p&6jQ0Z2#t(@84XveaH9uzRkV9f4IMIb8Y$k_+H<Ce9iYC-|M$-uG#+0
zwW00u{=VaTmwj%oFJC9tEuPu8IgG!#Zu>Xa{MOCoy<0cemh^0{`Tou2^Fi;D{$bpB
zKQYjHe9iZtShHJCtlRz*OFEWguG!6p{)_+dvAuTdiM3(8y&hvk`xtvElQp|F`VHFS
z-e$;UZOQWqzPFU;{>>#lw+`~yKj>gz$adg2WVGaGDgV^RCUmrabD(u|jbt>)`~+kk
zG6?wwoqv3Muitd&Kim4j-L`&kx7~c?*ZrQepLMml#>eFIm<=MW>-lZxbMZ+8Mv6)3
zu;UXg(B^}RDYXrENqtsd#kC#%G^wcmN)lyyD4<pBNEtWsa5wi;UpwI+Ire^E+t}ml
z8@ug>&%WC}di;awTWrf=Creu!Y=``J-(YJ?yIoHo-yi<F$+$4s?&e<L0QvkrwzuPh
z4{z?x_Z(xO<<{_v!H;hp#tT2)e`4u-`;Lb#uLlk-?<Eau{>OKGz<>YXZ}>-#{k8{B
z`-slO8-71dejC0u`0L=C17@wKEcOk)w|~Hdpc(uQ{hkQlj~6g;|M1)}R^scegKU%D
z%{9n<bDc1FEiox@A+Yt<6YKT|M}OVd4(#!@1AF|2L+`RrJ@{Y!>1Uo~hfx0tzisB)
zXbV3{n-xq@8|L@kye9}lzOs{V?dZRZRdNgSI+HgRn8`C48_4aJkAhnmf}tp8W~Hr(
zvj{<k2t1#`(yb{-Fyji25OocjvLBMkxX>ATcIYn|L4T?i@YT>DxX8jEAFF+7o5r{@
z@CA>p3}GBP?)OVW;SHSSJ(IuannAyjDI4YR`JevzwEh0!U-6p`{jz=fq5o#b{_&7K
z`1J>Twl(wFVrKKj+~(Uen{7>fx|sTOYwEMDsm~TOpDm_7+n(F<+RSH*<>%>eeZH94
zvfa$)i<!ms+1AWw+sk|NMSP#zY%%rOVs6XNvt^%KLz~5HIrd_1%h$|i+p}Sexy`rd
z!}od8JRQcK1>HlxIp$(H?sPHDYtw;`S&p^jcN+J$X9JHj$C$GmJH{J$Pdeh>bSuUh
z<P@^m3jSu0Tgotao-W5<OntsRx9Qew7-yROr@lgG1MN#%=c$jSJZGUxn=Y0-O&6id
z<rwpU-`Up8Pd$3SeeTRb`^zuxxAl$P_Q%IQXxmRbCU)8NC1Zcc#^P%Xf?faX+OqM5
z?quZI$nm+*D0oS2IN4pctJv3EEB+0xSV93yJ>D+(0>WLe?UUbm!f(6#cYS?hkNx?5
zxA+}rK4T9&e6NL_Eq!QdN3*S&FYRXOKT8{%SzaG(C2ViDH4FP)`u$>gf9dC8%dkKA
zTKLz}Czh`nu5ZK6XWL7^j=mBDwwL}8elrh0iSYxUlK$oW`QWQ_!k+N!dEmg{C-Y$p
z&^+MC;P=b>%P|8hmwrAYYyu`t2RVwL4Zc0}Pp_q1W?PJ}OP(OBC9g|e#ODDEV(bAQ
z=8F+|4Rp>HGyl?K583gr9Q9BC!|ndNhu`NneD>Wof9wI%=mO576H_w>!mr1ZtAY{L
zchhs^J$x?xr}{ozWYjN;GXX+&m^+nyq9dK!1q+hy!bj=9-lK7oAQmt%i?9{XqRpfZ
zssRiQl^_@*LC02=(g?BvyUsm}&d@L2%eGdo<=3_f)_FAs+6t8DR4Yr)lWI|ZTTKw<
z#V3(LF^=FOClYsE>M3%qL8gzl?ea%sxVt@c{vKO9xZD2Zt{d#Z^Iu#BAr!bIurFp5
z1Od3GLl6{T6Mz>W9_{7>cxQmJK+rWUfE&Tej3yHX@iNu`m_y(cffxm(^9Y;<I%8sq
z2_XW|>^p!x0#XhXBcL3fi^(YDHj6$6x!|>&pfaG031<M?Y0`$EH78mMm}A0OPIg1!
zJoFzRJ{yA1S@I7(#6-pP@VyM6gKrLGNsqIwso(ccC;a9+f75O{^vm|u?K2+s+4DyR
zU$#H-Lvk4L8}=i#5g)HULOz*(9M4PeMmRU-#~u2bNu>msg&v|H<soh8`tU!FJPqRP
z2g@q&z>@7JzHYyN^w<0k?)X)^=PP$+k`}&@iALHEUE78aM$i|*e<UIiq=oMwxtnJq
z6bZtV{2~2s2&5udjOW7M=j4a*otbgKm;M`lM}iZ+7(wSE616G(XTeEZ@V;!r0dFLm
z5g1R01S$MTlhL4YZott<{vr`xj;pjz;kS!vNw$LCd1BU5W=OVm90Y`++a;eY%fON$
z7>~eu;OooZIOTtK-yiw<!QFQ3zki12FR$<F<5JY1xv<loCc!2c%-K?=WA3BiO9_JN
zIKAL6ame_wGRM|?{khibxEvQ{3?n?2z!*KX^d}A`I*j;zs>a;iCel$I43xL`i&C4x
zL~*SW`B?_U3~qYCTIU)eWvXy2;6(p@+QwwTlSGg2ZXj#fi4mpV8V8il<L*#$rlg7$
zTjbgp*YHg6f&1?6cK_Fo`}KeKOMd9|r!w1%;06F0+59wtVM+kQ6{7&Z1i=Ne_W+$)
zwn0TI0=uX#Wx$iwr^seeNti9>nTbZ#YzdwNkWq#^Cva{7kOIV{DaHeEXGMV~s%caV
zBG5|^55DFAd{h@5RX>`9coNRQGO7fa<Z3{Qipdl~7>!@`kn}DnP~D2jgme|vK~yO{
zgUAR32A=-*!H@a+#vc3Hzn)Fosy;?Zk>bl3wh%rPKO~<T$=n4gMlehKVFY`4Y=MJ5
z{p?;Gtf}voKr=9oCb(YJFzD>yp=+Dv=Wl*{%WgRIF1!8ykJy*L@ef%s&jcu{!<0ZE
zQ9<Gnfk{@kB1s`1&9+e)ql#JjP*&@yVjdN5BqCDni`9W9cv)~D$hM0rcw)i=J_4Kw
z9x#3;qMV>c)h;Sv+vJy9R9)m`ZIBP+PgYKo4^&DMLo?x>k*<ayavQ-g%K!pF{l1t3
zL|!=wS`ZLMWpD`aGf13M1#+4}dFpO!>c{@^vwq`ef7y@D{wB=Ly0)3OI{wuJBh`0k
zy6nt**69ax8yeu5bd7!iD6l98)gl&1QOwwBerEqg&trZZG?>@m%?d9(uFmfrIU4g}
zo)x_=6EQG=xyxh~1eMwP!sseEna@7V&{&yuz9veE`xF+Jr5&m!#G_$iHE>FWK{}0`
ziitw#4DPV}B#QWwKAAq!VCsWtib<g<r|<CU8O2xsd1mVydu(I+7YTaP48&+jaXXe2
zhpJC3AMo<d0uut37b!@K<r4zKtk@;c2S_3)tnC8)qN*4`Kjn#p`bXsg6|C7Xq0wZM
z0hBIr&ZsIU!C3~kLN5oz)Hhc{V=S#+&htCKpM%v1DtRe5meOYk5Tp7)RhFn6MCBsx
z&!TF{ljt@kH!PcDQp@01mZ!0-`)Bw5k>7OaKimI!>YuxQ4_5_7bds0Guh|DG7z@_$
zGdZRLE4$(a{6>6}D0cpoZFIbLY^Iw=hy<7D8^_N^mK{GI`uMl+KIMOK<kx-wUDs>1
zjT4Woq)jC$%PkLC@kPabmi|#H$5d&`3R&0|`C}${xm+38K?!4G54Kt$xtkJAHGqjK
z8LbxNXH>p(yt-7HL6B~r$mQ8V4l#BlIa!_KC1^?*c}0T*(mA~nlNR8SmUE?22dtRq
zcT`z(TLyw&S)~a7O*%4BMbHSm2;2GGnS;K*vD?1%=oi>O#D{mVQJ&M;7i(LdsjDBb
z*X3NFvm$$5`dZ^h>6dlIter{=opm0zwvEUE^blascsWd+r#rrHNj%0NdA3O*1Tg_H
zd6)QxVIta?2?+|j12(}}myyDLH)sSU4TyFHBmxA#7XnKiwgJ(W7ouGP)Vwe9=e{sr
zTw`ik?wq0I^M!BAM-hA%ei1PKyWM=}|79ON{@b2eFD*UJ7+4pv)PYPn_s38Gmu(_b
zjEq==6zAod3{Gen6M%=kWW02n*=h!x*keMU0nD^Cn@dMA#uk=Kc&RutciF=inea9y
zt&mqNv+yLqGC~y&6CW?ZM&{1@`(o0H@iV9-(8e<RJYT$2oy#*@EPvcX#RGedqUtzZ
zK!4z8>RK7Xp00oR`a|~nhkwQY^8OEdwb$y0>__r4_v#yfj2(P7Y+L}p<jRfT7Hm;}
zl=i)G83VihfcgafUIktgKBA&Gfn+<a00_Rh+h@Q03BTdcyX@p6UvLg^5ZuMy&N&5u
zx|E+=Gf3ZIkG$V2lMYI9P<5M&PiJK~my7Xi+WG=Eg=#aZWSqG1_Kg|gO$IFsR2g~O
zMSRcCiAC^b2^`^@8AK)4Wnv7hNIYC%?;miJ0@>6B_QE14jU<g%7btnoDkQ4#_>N>e
z_dZ7=NAd_vWjy7?IWS_rJ+nXk{2%#Ehkn_fe)j3Xr2BI&`-KK>JHNPy0UrwgQSV?(
zAfJ_B%&Dsm4aMhZIPp95OURJlW9;Ii{drk=(`W4alM@G3ic5-FK|ck0Rd`KQnb$yU
zOEWr0wA_Lkk42wr^qZY`XjADkr$kpWN8^7V#%36!%|I|rBm9z&u%PQR0?;Yjw$Fy{
z>Hw{t>Z`q%{JEd{+FkxTfB$Yjb^iV=*=tpfgAC2SbMG1jS6J!;@Mbo;1z^mjh?rDp
zPYp8EVLV!1%Kak=v@K}Kfsie&K;*;~lLAd{u`Cl{noAip(PW?&fVyBn)+HrWGf^q2
zd!4WeoAy4&<hQMXEGADZyN3Muz{ZR~8P}$me6pgT%S57QswyC`j7c2h<bI!&=d!;O
zUp-=b5A62G9)H-Y%{9KxPRo9t*IoL^&&97ekc-cORbz=I-z!*^*VvB<fYKk^q)x}n
zyNqk(pT=kqIMU&n9uQgb%V_M!|LuR+`o?ZMGW%O3Gr5dNOPXOnVaFMWQH7WTeX@Pt
zBa1@`SQ5+w4~z{IoM9PK_v0ZUp@USpOdQE4Dp9$AkL)*sN8WCb74%p-&VFav2EI-S
zZTfZK6|iqkz9`Gvydn^?<tp0n94A}3w=t`PQQ@Se+=cF8l;n}NQsmZ?47>-OEP!P=
z&_%rGI7obx=dGE4>9GgxrbF-Z6K4*lJx3J7#;)et&R1;_r`R>--n`$N>%O0rEFCA&
zNMe&xU@3l8c<9715^gko@OP@$Kwz?p$j&eQKqflxo5)|V&^=Dw(#<hoC6H?r#>9>=
zCkm3vA@P<$m4MsOpf#Yb5Y-Sks)sUaU|P$stT4fSnw&x?V|-ykLnp2LS|xTr<Ntb%
zjgxo`8FBkMGY0*CdiPEKXP>_X%N|+wpC<5N4;PmBPz9sOKbI4cNlWD*f)c7cWgx*7
zq%8m<FWc%Ng_uluj}Z301uvSdV)+9VM_r~t7E6-~fjw`S7J$zTm;$sdUJm2Ei`Zw#
z6-OL6VIDAv=A^(&R13%wCyWt%^D;6f;dy??=I)tskjxcbmId!w%t@3he4(4IsekDB
zb#`R_m&I3IZL~>R*v{2=)u)ZUsEz^LAaHCF*Yt{lUmV1dA2Z6}T4($gE8&gYM$x2*
zrsW9~_b@o66Mfj{&mH#PJ^UVQp-7uV(uAOds=r(Cg*p2(SF^(QX=yX}f>DKxt3<rd
zj;q(XZG!xg4q8aXnD_n3K?169XJvh%fg_S01d9k_c^Q{&c}7d8u{?|*nUhSeQbsb%
zcqNtlT;@fP%KYW_l2|%t`9%eDn{ZmHg>;&hRud$^%jBFYs|(PK0~)-H8+(*z{x=W)
zSNp>wzXm@|KjHb1EL2>p%uyxr>H1=wtF5$C-|&hnOpko;`EK?@eP|rPG+5IX6EcDb
zi|!RgG$DlVHvOAEr(;I!r0rQ&6XIBf3b5)aqFY(&DyOQi-%b@Ex++X|l*0`6cp1%n
zhnoO%lYTVnCR(d<4Sf+sJp(L7#$tpiGF1|fA??AJCq1oB`Z{vAXTSR$+q<#HH>RJo
z$lkCd5&>8QT5&|5_Pu4+41mp_7};j<k06FO1fyzzN*yX|nSt}N!2%P(v;Z*$est1Q
ze>x>Misy0;P69^utIHn23k8M&+*_34FDOtVx^NnfmxC~oVUs%c%;9G&u(wBk3WX-p
zT*9U*n;c@<#@;Kb)Me0%z?PQdsY=H>!LmIj=qdC>RnCyzpWT16{o#>c?b<IqNE55p
zro%V8I0d_B-(bM(_`ZjKSvG*rD-ApPkOY&?a8Z3Q@C<%k{a>-5Jf9dK{HDKmgTEn(
z+jrOX9(yq}sHZAk?(?FgDD60W57m8~n$3iamT);CqJTdF!93lY_Cl2=RNk_``V&bK
zc#x0rvZN$f6om25#c<UueJd+^2=;OxY_rrFJnKP|=4A3VZKL1-Iq@p)QI#;4n|Z6r
z%mv?~3O5AFSauHi=r$Mxm@^5SrSiD|hVVfg1j|%u-JaQz(+7NQW4CR6`%(7E#`a|%
zqdBXwSvX$DZwMc9EN<J*uO0tv{f+vOgh}b^(AoFf3%`H^@qH|DD+Mm1SKDZ@iE)tn
zwc!VomH5hdA9Q5>n~AcB0ab8aAqx{pW^Ee-*85)j<LVZ8QsK4+X3hqY0}AhKg(T#r
z-O#oerWhY}W!y_qc0_U*1MjV|i9t8UMRJpNU;Edyw!X33?ml-X?XSW9lc>OHc02>1
z(_WYWZP~LX0U&^!K%16LsA?F2L<F0|eH>EIrBz<0$bC75PWe47sx;7kzYOef!i_3c
zxuh}GcC@@Hr{pNh$8s?Rei={_C~IX*PV?z9Z%hJ_t#hR=mUghop7#mmA&>34H!tKA
z*J;mI>XIrAQQasLVOC<dXLjIApYXK<d;IC|KBfLqfC$MJd{C<X<U=+2Q~wAIz`Ocg
z@$ZTqiUPEhLW!3^SL<(ik1=or(~^!7tmRVf&V2}8FfV}z|M%a&%m4c1pXBNHOhzbR
z;AMBQ#|51%rRq5aSvaVX%l|_)jg}>`e@>Dh*enHJ9Pn`RkQMJzUCiKy5)(ebD*M}V
z%K}y1B0!Vi3_o8oWBcFYy?oRB85$f80X9y>7qx27m?ghtuwcJKRgjmj^#tyeRwwlI
zZ&`f-?qsD8c#LIaPTVQzjp}abaNzOeqxaeR!9Dg5k9=PJa?D0|3b^VEUZT%+f=HSc
zTVFBmu=+e>O!TdOWYjq)X-pSkf$~T4AR0(aiU+kAq`@3L#Qlz7T8VMoz5cvPBNq-N
zSfVWYBE&}6;H4M*<)0p4js%McU5euMVI30!;b2{&Yogy%(VfXc`7Lrn$Ij36G6axG
zw6(@S?OU2e8{j8-iuO%O-QA{N|DvxS++$yQ>>oU{@+|;5{~UlEj>w>de{N+;!BYfy
z1m09N;>rR4rd4L~w1+46^~C-asq|4`xzG$fPrK$sg9=pgm;lJM(kZ^I3Zepn2@rd3
zcu5BvwIetLeKElSh!y-%oz&$QTK2(YyiFV1W1KBaU^oDy{bf*_6Z{kbWd`@So_n7t
zumnE{?Bu6mhT!tVxjTGqV~_vq(+l-&_MgtH<1_6moups@TwnZ~s^sEa)Y&K<=%?2%
z`u9$kEx*7Z#if#11Akn{Z70k=?f-87ZhJR&`_cdYX#@nRQ`+}Qx<rMD0{d<3#lz30
z@bV#@TJI!<2#V$u2vLHR7(;>8VyZqDcDzj|(lbazAj8`lcxhHn(38FMPo+>0NXaZM
z>1KdQD-fB$a#9(=QP72cb6dtXRZl5V)Sx#LZb{Jcbg~5WhHc#d03ZNKL_t(<;qw|e
zBXEbjSWnPHdw44=__?GzRjgl3{dbSN$L>9M#M4)b!K%*>j!FI)_T2YFZRaC?%7GC2
z#CP$%{#-7JW!IPWdvvaJH9;eMyq~NU+$yx<nkK=DE5WD{UMLT7X(EFb0-4FIFpXrG
zouG{V5Cho^!qG92-A1riIx7k@h{<ArQKiAyWNf0bubjNs<DU&ha&vB%IwAhNp`n#)
zw)M_)m6rB;sf1=<Ztf4Bzt?U&{9aj>kxl$qj%k){WM4-BeoP)w^3UbUDT0)3R08DC
zL@sY&`7*QT2s{^@rOuKL0wg+>OI0x}i<GL^%yGD6mcg1VU2S1cVe&ozH-5SS6%O6F
zJk`o(RzM;<)~XqwJjBu}FJsLi6REt?<OKkiJvF%`mccLus<d2#pMpWPBPTan;>+b?
zS{8$TmNGth{ytyd*ll0`*4JQn<6v6wgxjLR-S|pvH?(boG<MxlpVLXh!j-Cjsc#a!
z*{qDkeye>j=GIBj>3>NIjW;rJxw}32%(s1QW4GOP?hZLkn@fG9<M5$e#-!vXZAO*^
z`4lZDd<epH3j|l{s5-QuL?Y~%mQitVgjO21*v4^cR+5aY4)VbX1aG{3A}U~cB6)kB
zSc70xwm|THKK4Z{iIP9g$+zJ{=uax_TZAo%i4k1Q5|eQ9cILo@!N<2WVG~&t9)Wd%
zYvkLDSz<RQaR|7l{*mMFw_|5ML%z&r%t=kL`D|DH$;EHWbMOiFZ$^{wC&OHsUfcSx
zSNbG}>I9^%-?xF7@??^EHvHDMOlQbvc-M*`(J&T77W|tCGp;u)c(^`Z24o@`SUW(@
zVCved`^Yn?QwgP-KEbGI&oLech8^Jt{g_wOKzNBqmV20nK;<_0B|~W^BbEkLAgq-&
z$)M{DLu)elC_VF-r_SH)Hy(a(E;Z(X2VRnheJ%@3=6X6500{6RFxp~}$9}(<Tyihk
z0sx~M!;!hp5@Z4d5wzu!XDq{%r3OCnhs>S!&}?x<lb3}{rb|^d-mosqJV6`p4NBm|
zq>BAS2&6HQ&}lq8mrFaCMCLhJ<-rZAI%cq$%fl&qs-TjLW75qD0~163^hC&wm-b}b
z<(MZQxzE=R?y*N7e>g!aY&K9mY&3l$eZZtGPYlM^o_HueFM&`ulW&r?>@b~#k)wE7
z@ny#I9^O^nf+k>88<-N#fL&wJba@;4dFngg_O*>YcGtN(Brp))p{)+;lklfVba2=J
z)n7SKm3E~2UL(ojs#@;*i@+``?AUeyT%ptHvcw$Ao6`)e<dixke+X<S7|oyx)vO3)
zvbq(?5PTRF#%<t9B%^t_X+eI>L2^{~vI0*POi7gBckn^3reOtP#`HzS6<A8Arghmn
zgUM~sNlWOmYQU$0(?%9^`{=Rj?AV#lurGE!MuM`O>#8ra9n(GbZ=O{#mQ43CZjBLS
zE~MTnZF~*5G<>VEf`I@GQgDb}R<Q=iS24x(i_sulMj~Ofm{VR8lkXs86a-n&Ez<xs
zQc_i5KMHMO6bctD_MfwS$n$^HN6^dR`)H;w{f>{>(8tfTJmz0fP)8QMz`Hl@PHjf%
zr)N){zsGMl{9Zaes=%5{BpD>&Wa*3p6k0~aNi$UFa;b9*nK);$yzh_quz)5kkD}Vf
zKM4?Hp{m6b5SC7+v?p+my+i@l5hO-sjF&faasklAB%vqTPzjaOtTFLX^)my|ZK}G_
zQkiV%PLQ2uWtAtTm{{^BW+WJnY68oSe<Fe^i8=X3rGx_Vx&#yx2kV0PdEk*R_}-1(
z{@4=_BhDk=21Wp1;Jwvui@yvVDk#%4>{lhh(O^%!lkra5l5YxH3g*UVO-8Zm(Dv2%
zv+z{-G4wx*S3@69Kl^Q4JGk5KI(L)~0L(Lx=YS=vyqq*;po9wFoPq#UcW_b^r?#~k
zhl2vs^!Yqwloc+jLLsT5ljJi>MzOVnS0T6(&s!npgk4<SuSsK6&E{;|RGp8&QVuXl
zz(^|zQYFok?FiB`v7?|Z@iu}*4!UT&2DV@zSfoG~i5>PH^3T|WkISjvE$AmJgut-$
zeNMnXdi*-O^USBae%GwJjn7eO(xa<}jW5Ui2v;rhX>sRDQ#-##K$X{GoZ)eqlZCt{
zsLTmou9rDGc`eT>-=L=ke2gK~a5Ns6#FJ)yqIggiTHA)eCj~Ut4~qe!Q)Q^pFrZf<
zR6!xY+d+s`V5C^N=7o>wDK9tLZ~N>BUWcOVGDM*}?sjAr7SvP*P5P4l9(wd%yXo+I
z0^lWU!%u1;D8iB}s(13U1(}g+Wl;8z5TIw3AOR17m1K_;ki-%Mfhwv}F^L6WQYA5$
zk5RcmptOwu3CpUOSjxc?0&-q5rR7~-zQ%GWKzl(|$CyxJa?8M!g0-w5v`fKlB|-yj
zR5z)b8vRA!OXKo>NnK__#SoPQn%Hx14=OGvAHCn!4(_qXo_M$bkm5vQ!dT)&z5(+O
zyYFKXc@g=XxP)|;{#*jc;zrU}aZWgNGfsm!jc;S3A<W<jjUcTCkrW!|I8Q(Gq^)i2
z@w?9*l?04`{)7{XsDN{V7J<Qx{7b9aQAI-aDVJQyS8*6A_NZyXi2a{j#h>MVH{P$C
zdvGaufql~90-_C-DqcRWfh8YCD;3DC8Q}<RsmQANEd2=kRcVDFDvh#TW56Nue<Zea
zP^91rpO)uS?{$Bq>YT8<EE6X!<jc7yGXwdlb3zap`O#z7*`239Lq6BB_Z{qiBuVoK
zvaHxYUNQ%k{ztAC>}fD0=44FDIw!}?Ahgp?pF#gYR}D0K^z_E2_s;VO_6#F8{Y;D~
zXX14EAc$3BI>ORHm@#u!UbYPaYq@r8ToK4<&?!bmLa+3v;x4Q(qIpLkPlK^8Pbt*K
zc*n*@4I!0zA)Yaw$cp9czO3lobmYB;Yz{#W4na^h8C9z-0+iu<f;naM1Y#0AG|P<{
z<WSXsCxdNTUZU}3pUpPFD!`97e`C35hH6Cwn=v6s)(t@AeMG3nQ6NW4BG|Z2m6D)s
z3jq_V7W1S9``)HmiQv<Yya^jiQ~J{r*lS07YDxtmbwEouGO=WEjsr4$UjhND%4GFs
z;Pd49`+V)dZjU{BJ-<>r&d&;k^o9Mg_?7r_zkl-k#5NwSpO}p#OQZfPxVUrhN;I_3
zLnbD?)&!Ch;qde29=$zw_qjW0ivW@cUY@Tuk7asb09UlI1RP6_Gx=Gd8Tm_$A*b#W
zBWO90mmD*}naNg-v}g7QNjigmjGakc`XR<*AIwz*8ViRS;8VGRL3qV0An=!{{(+`k
z5eT|CQKjW+mUC7MY3Vh8Az^`_3x_gzFJ0(wCiu-i_kyKn{^=N65+|SMUsITF&HTf6
zzTc0ZJ<zp%_PzYun`_5>B<FT^wZZQN1xDu2#)n$p*{KK;!JQ;<L05wxie2=s^mX{}
z29}8*oqNPN1qgjPQ2Zr(^m;;xPDHd7tSm>X40V{0>~n<B(wFKS!srU3HI^p8%QhA&
z9TAkvm_!?~=F*)CxRq5?vTY_hrKRHpGCQ#bIy^M|Gp`Rma*yA5_`L{zaycLZ84BQd
zBH(3`$lw<Mt6bWp{UP|d1uP-p1S*|A+otN0RNhc=OmK>cA~Np<-gDD22dY%D%AhDK
zb*P3(AjE-ERL!Dtl~p=Sbi9c=PbrovUu5%h1ZGlc#EG|9Vne`Me>O!nOY>wLfoNv!
zkb6#!8KBV;^fvYkMHPi7j;NUMMsHLWxDq?{2Ojx?uWd-6C;nRjjSRX1J^X`%n&Knq
zs|nZ`Cdcujxz~A8#%=uDO2s|tX7{ap0TUE&1bY}AN;}ujW@i5MGf&#y1H1jMuN<Yr
z1PFX6n6UKutf*^sSoZgEBFEMJY+IH(BcRG^8CBva@sPt;r9#COWbBQj--?VRGJ;fE
z(&d8?s7?Y`g8zBSAre=u`endMOTxfJs(cOD&?JzY43p2`<nT-aFkXhn-d|Kkv+7Sv
z;&gZp31RpsV>Bhixh*4CL1r0n21e3qj3mk*x%2&g?973*adKw$ky;oro;2YLO)?{X
z9KPSf1(}z-zC8M>^oAcMCPlDUcp&<vJt*no6L{k`O|aYY(dSotVyq~5$G@XT{iwh@
z9k-w;5qk`-<<|iBt}s9dDWEkPX-CRPf$1~2Iv#xW1lezcb{(OIqA(_CD7M%rts6iW
zI;j7m8=2_HD0}>I=6~w^-G0O2_vX)NVBgjZ0m_2*gKf_V6m_$%Y&Pa4!2l7SG$LE%
zEI*bmwr9xFX+H{<QKRaJ2?GHa?dMs<BtrX9a!E)l5*h3bz{<fVmT-9AjP6w_0Unk)
zx96FG=VThy2<+Rz@+(btx%5MmG@q8MvWbZRlb;622xL*6$mMTZn&Rpz^BxlxFCp>I
ztzgM{mXpl`kKE_$8++`r#~(?LkY!1+TXLQYf?VK3I!;!y8owN$99lo_jpH#)>wip(
ziO&-r5I^MTNt^g_jAiB70?>77H~Xfso_h94TR*tRPMkY}Y7H;7X8=G!N!Y6-D!OEf
z;Dah)RQ<sc<{W_s1rN2d$O&cGFA^<YisZzN_79RR!UriS4Ic{(*ajxmeTuo=B$FFj
zLC7U)9GXBMz^mN8z}59kTG0lF(pYA(KUbHX5p0G0XgQse#cg0xCh17>5(}Xp9I%0o
zXNJHOOWuL6nJjG2?W4!vFH5(uO`2?afnR}v^m(4!8sB8!qPbD$TFX#Pnp2+w8-=dU
zeCp*t<0pl-9{wnO72fi?`nf`3%8O;x(zz5h7eGObd;Ak<I{~YKAkMNCX9<jQKmk8z
zFl;k$5;)zDfl@3I2zvi>H4e-KB<#-kY;g?6RjEBil0hf6F~LwT9GG#>L<kudD--s{
zULaNzBN@gYp*gQV_~<=$<B|8~CSaU)n`Zz(Sud7)G9yMX5TJo7!CWg^u}qlDk(s^X
zq-z~Bmr`ioUG|lG!%$gVlz^@VA+iKDqkt)vI3u9LPl@DSzXj;mpcqTt`3!?`fcUm<
zVCTxmJmp({H!Oo$UXq?BpD`&&0M5(oQW2bGRR9&itZrc9reHf{k%4+nrlnFNlj$r2
z&r|2`x2)({W8=UV>$zXJg@BrZdW#|LbK(mvpvrg^)9Aj^Zt(ej5LxJ}xCMHItt78c
zr_x3k(;4&WXP>ma8@v6)xg)tHLndm{6Am>XK;nuKF9&k9Jg<dKhJA9dw*_3_ASRQ(
zZB!4jHx~gO4j9$#7t>5ixSE#%%@$}A+@fRzr-lQk!k<xrlcZ?D&!D=<KO@8bD*-fB
z!}6d>38Z7i0{iCDH&Z`Y)tKuZMqXB?@qrb<+FZttL^f9iLQV)0b6Za)efVjetmyGH
zD_+vfQR$Q6QjM>fm0sF{Mi(Ev=?iV}*?VJ(@26kaHt@+hN$Y!|r-M!Dzafv|+bC`Q
zYrvc?PH2LgzoW<DrT~a`mX{)GmVl3B6v3VXTOSZP*efAxpTW*c173cP$L4P9xZZt+
zgzux(GVVK@R-W}c6WrsoRyT##ZhIZK7^4_Kw14pYJ$A$4_sY)$@KPsEUs51LODCvO
zMQ|`z0LrX>04u8gaqyJ;`Do8c0t_wL%&9-@6O7Yt0ArzZfgpuX04H6MCDXD?PI$Z=
zv%pd_SIBr%b1v-=ur@z!Ap3A6(8E$K(;B=-wqBO9b1z*6kL?mm0{RdTGkE9n?$(U-
zi6vpKcFtL5RB@b@>!HJwk9@(`4(_(co_Iw45O&$vbPePritE{S2mEW_6?4XXL&qD%
zp5eNoryUa4?6W(0kUuu#wLx6dCWqE%%*~e-z1?=#SC8r*y$Hx+>3^#%qb|@EepXJ<
zW|bGoNd!`oXk~Sd_m9ma2+LEoS^a~*XH_3d&a~fFw@hSmCDr$+bi)TSv5WvI6FQ|U
z6W+wO2;e9vTaY}cGL}oSArD?=W%-rWjJX7ad^jX3jVdE-^U$Cdw4geg!DXyyM54FA
zJ^V@muf)(YFRiL91HJ3~&eNZ1<}&szO<Kn0Po3)qOC~q$%z0${iUsgB!`#~XUb<uP
z?fleypl8Y7X}s2_oqU-48mayj`nXf!^Fnyk!Hh`<&;($D*s-811vw&!mU(5E#`EY;
zR3nP9Y~v#|7Jh~i<NBDPb-=%;h$OSQW<@(KzX;X}%NJ61$ho#v{&(y{WQylboxj^}
zJoFw^czDTn8x9>nfebe?Qv#lC1cH2mm8wSAGZR^JR`z%~l><urG((&e%%Cj67W;ZK
zFp0`V1elZ|qfIQSVEHH}K?HhOBFzjpGhPDQ?HPgNT!Jy#P)-41RwlPFeoQnO7-r>d
z26}i|h4w~eph+1wg3B4kqACej1ferj4I^-@ldBwDk)^g-PHNMwsh>QLQ@09k)qgua
zseUT=6Zimz4fsVyt8E3d21F@%G>UWde9%MK!q<d{f}JC)5=?lIpY#ijHTWZx<Lgg7
zyWFF9_g9a~p@{UkT$-C@aF=`KGReSlVA>Q{h$-QVr9f=*pCjSf!oD}DIu$%XWg7N8
zC7a^P@?7ZFZ4y)R^W1hoK0teG=`<-NV!UOA63kdW&Z;%71mqTtZT<O^d~LH_1{@6;
z(h@N50nVlN1>tA<E%ql)Nv1eit3R#6TUoN|nw7n|Y!QiyBJ;yl%fOtE9(%vV9z6}H
zicirTn9f)W8QP{ZkFl?g_><y9$6r1Evl`=szcu%I@l89fDSSW%J^ayeTg+)_>)}ye
zXW0=Cu7phDp$aCw05FBr2UpOog8-0-kcJ5|f__%7#vnmef}Qv1CS$pf&?wLp6F~n$
zQ{O0yL0ajX<(!=wnzsE#kk|_(l`fKxS{S}k+lS8IV>cXr53*+hTRzE#B?<v8lO;r|
zFyZ7H{j^DD{?o|LDVRg{j4BeAF1Uh#suqHd%&fVp#>=J|JW&R{0H0WH<)xwEk@w&M
zuz6DCNeZX>u*VVA4_cljzNxL{eyXgfQsy3$QB>v@SnirrfHhCvHR#Mu`5DCX&#<IS
zoMnNH@z7)LbIRo*-p`0Y_T(d9@U;VbmcOHyCg1UIIGK^Zu)V77B6#xj#R8CF`VsJX
zKFedVACaF>hF&Y{9slgUXpEfLDlWh$t(#2ussVzT9gK+<Pe1c*+k0S--~H92x{NsJ
zKliAjswexyreuelK%gC+V9(`4I{1(nK|U7GWYvwTMHI+Il^LhjDIt@}G56K-gKNw`
zwuLZO>4{`sIz@#s1GNmIxH1a<k$}#cie#Q%UC_1{T8+q+jjU=SDdZEqs5nxPnaLR)
z`iS=kytfHAsbZS}Vb}%fm#dUq75vDt>-^Z6PkU>xWR#sbO?(}`Mn31RaYF64&i{@7
z!`Jy9P1!;h=1Ykog0vkH%A}Rp0KH6k4=2*SEB!=_(5HUhV1e+YvYf~RBB*Y#*9{6o
zuoWazB{XP<>26<8R$o{I;8vc`C)&V}Z4ZhHAw$`=1D&NZp#pXulVzFDdeg7a(V?-S
z`TKbF=<{kE4?c3Y-?;o8y<FD8(k+(kcr!BZ^TDzNRl+i80_e)mheX!8O%p%>>ozSf
zY-6d2gFC5oMX<ulhgtnXP>KrTEP-8k%_X78beRXr<O$euicj|u<>#mtB!67ZqYckI
z$<d@38FZd@rAlcAbWxR{NhvF!ivaKhXrWIw#7CgMHRXvZCk{S=%%^HOppQxb9SpIP
z=kK?@8+-igk3X#bM1TuFum0^w`Vvgx^Bgcr@JI<*22kNaG={h=`AvqR3am+V2CNCr
zegEV{Q1GvVr}EyBgV5K-JRQf){K@6NjNvEF9Yr9M%a)OBX*G%L5EFa`L$ov-zPLb;
zhN=@1A1u?NY7{n2NnZvtx%?}>PDvn^DRD4}mu@o%8xm8hU`fR>tK1dO=tO>E+Kdx9
zR7AIdQSiUP&k|2#r2s*6^Ajo&d{Od*>Y@hLoYZAPC6!PdB*AtIR84s)7boPgYJf^V
z?e8PJ%Xwi)06%j4Iy-jy)6Rtjo*&cEO>QIxbU&xjbK9`*osyxBA5-9ze$@Dv0FhCU
zLjBSB*-3n2TmoK=^6exl;iLMtK3{O68+;}XGA+ZsNfnkxm1W>$mfGMB`beSjHSU+&
zc&AM(<oY=SGX}bpfzdntEwf8ARyLuoTO%SsO$LgQ<sf3HqkMJ18_y5_S0nG}iyWZ@
zbiMMnx%-3X@9~?CyeF3}b)zy>(zXc<C?m`ht&vqmU=U!50E++x*);=Q24b0Q@`hrZ
z8jMVz1IQ@>q@3cFEFJ+HvULDxPJlV_wR?tg4<Rp!W;TyX04im??{SvdHpapPjEQfG
zfQpvRG62g8E5_rjJo?QbkgF8Dj8y_W1k_Wi%JM!S4w`2i&{h5Ar24=kU+}eqd+f2t
zA68swFeUE-UDz+u&)Vd(&HV99US*7-KGV+|w<W(Eo=3J+F{8qXqY^-UYm(bwQG+pz
zi^6Y51|6CDQ_p<c);E@W^zaiPRH>sSMNVAO4zqHL<S2Y1_h-ryB?m~7xMc-9w}OOU
zQ{@RK$Rh!o(lX~f`^m}~Cv_2YQn1H|CHQAifJe0Sx+oYx{vfB*!{@hYYecE+@nI&}
z-?u>0j6^H^ntYQhakR9W70hi4z<D)-aV*A)6%N8cNrD#?#PX^@1jHpsPV5?R@uSDz
zZ^zGmrZ>m5zSR1x7n|+*70qco_z7Go`;+-I#!P<}pHB1<976L38yXzz^Ny8BiGp*W
z`b_>cYOCWn0bf_%bT4_FRAp2Fi6G)~C$cWgdc9Twxks>OzQmzGT%}7hdkinxaYK*L
z#Y1tZ+%v9n4KyRNXCp#j%w4JyYF{1sgZ#=98D$zVMzUUiVSuO3-{UtNdJmQAQ3c{X
zak8A5dq9vi&nXDOPbJ_dLbAUMXed)&0I>6vCsnEdY60F<#oNL`h5WgN;2{GKU82BV
zBmIeo+<V8tR01(ATW0l&_dFp$Bl>B1mIBzOvVkRH-kT^VVz*`);HFH1ub9wisRaQk
zXXxz)c$~_k12;6u$SJ$5PR?j^Jx$a!A;x5V>im7Smj47=@yiNo#V1i!OWSqWE`eGD
zhKfhg&q#2jK0!%RNenx$>bv36APCR%yV4KVmd_#%RT(gr2_W?F%FLg9<_TZh*ll;8
zJBpwx?Sm?2TL^;Ms@@cbq&P^SN-!^lV$=RKZDK~_gn#AIFC|u}(4|l0_Jw-7H}|g5
z-Z50Y<{5xV5(YkT$~b&9a3Pb+X;!@w55q6ED7eb+gq;yAQ<8~_pax(FxOk}>2`x?~
z&oY_j@nvuILVt<{RoQwt1N#gG^E1c?zVnup@OMtoKYZtPe(dyT(gu4;RL{4=FE8Z7
zBf(=k5BL0^uZLgllw7eN#`hsMh^k%jx46mtDE5>jliLLbvd?Ne@ph64yL)udc{Z_c
z*|q+>3dG-lrZ7v2=qrPnjzLqzO<TlT5JnPPfKKQ`gp-1;{Tq=~>1TQ*y0^TkymV#L
zUK3?jns+eBhQ6LWtL#{ANsE<h{eB-je~;gI_`Q^k(lSo&y+Y<F8~k~X*EUXR(ne%C
z@s`050tNyk+FM2ejO-hXKu`cW#zWxAC+cv*3;|6pF-EYqHOmPG89m+O{Y1QMn@b%C
z9y4RlWvGzDTqc~%lDAO-$;pkzM+GE+92?PTQ+IBT&WSAoL|&4iKs_c_EO}w+i7PI-
zBoy>Vg)x?og6^%E2FSyhC(qyK>j(GP*B}3ySDO^XlDD+y#_!m^WulO_jh&N^qaWk3
za`MS1GC;&<YQy+bd~fG!8?cnvw5H#JjnXf;>R@BEF@O5m<sQAe&K*r1=jQvZNJ_9o
z%RxZyNevs=B3}r9rvxw$2Sj3%l_(^7xz9HfLp|sqOS8GWj7mKA3sO~{gRl%(aHxp(
z<R!jkMUMOhCxhuA8v9vPvZ)d}C10(F*rX!K%iIwRhYlzp&O;IrJQCK0uX2DkOFWA4
zQ0Y%Ur<H_A!gEUwCxlyqkJv)P?_3ES<nxhZ*V(b*cl5N7)3fDv&g0?)-^24dk8*qh
zFWULp^ck9);m_$zb?$UcG!;k`w!;70@yaqVd1xn=BB8VuPsKJsS9w+mBwUJr8AAvb
zF)HYE2M_v4FaXjFUiyL{*#^mck(lm8{47KSbX_Hk(9Ph;^jzQ>5pu&s0ceh5xzD0{
z-0smO%6Fr?#URHgv(D?(`Fs4vBk$q8TDnXV!4w4v`g07(1i3nvRkjS2C`&HE8#e!9
zAD)8Q92LE-nR9@N6J@1}n9H8A{EFZz0ywT#Vwsmt%;j<hmR(S#qYB>^9YDz73(HR_
z&r+R>KDe@$OU_w|qt8qaPsj^B<T54M(y3;t<nV-6fAU54?rkHG$I=a!o<&|VNiO?5
z_2~V!zOlz1ef(<*YKbobT<LfjRHZ93_9!lq(c`lvkg<<-{hG%TbTlS_Fs0+e&1WH#
zo@X4b&n9-VWRhz2VMC@a{Sv)TKfC<5ZtpsG6bEgnI+Od^%08{cfvAG>QXy5jx~Ik|
zfQjHqD(F-hLS>w)+!+kch&Ci$Y>R2*TO91oWt^yfWkO1cNMHu<(WQh*PWm!N2_{B@
zlYtYKl@p&L=;P`f1(sYbL-32GWv=33@37)&p1@rIi#cFNr4Iomwq5|E5(^V6BGHR#
zEmsg{{*hzX*|D>6>NcitvEF9BESKBj49}bR&Tp+hmEcIyz%n0?`Xu=u#xGa{u<6aG
zG;<rZqwzX1kc`>EHjHg~QCCN*EPH|TGSDl!P|(Oe30RVm0k$OjO~mXlRm4I46POyc
zaRGh>Q$b7!qXKT%*z`qGZSR3q5mZ%^%+|L603ZNKL_t(SM`2a4E!~xOX`>3{ib6A4
zr7_XHV#utMp#7mo@3EVXyq7jb<9FCJOC{hW@YP_5mLV4Nl6_W?Ah6n^{sS<#kg4WA
zm#B^fxYNEA06ib5Kqk%=3f?z_rAN?*pMHqyS6NCTAe7T^WvK{qLNzq^H*NEzfPFl?
z{H@Di;61Z$3a)YzqyRAYOU8Hs)>{nhv^S8J_nHGCR6z*6PigE~@}^7aryjk});IPH
zzoUnwuklY4XIAj6cHRft^taK8V|Z2|gYif`+o;>7FZNGsuBEe;XEnG@x`7tNPnSm;
z{{qzvTb{aI+t_U<&K<?_B2}By21@`XmHAu}oRRP0Fa;7m*d+o53Tmj5p0=C5j%r*6
zcvMA3r5j6)xwlOMw+Nb$c;wPDC4Q)4lFujq@tG2>_%2D%9R8ZuL@tyV@s<xxgmG8}
z!7T!+@a+h)q+-9IK7&^Z2zgmH5<tk7_AF8mDkqRL*u<XVW*f)$+&*&r{Tb-VJfwc;
za-T4O?X~rl>JyQFkso*N(`2n<n`<ml=1uWE#1ZP-;j!e0;=$s(l%VRL;?w8@bGMF*
z#JFG~(E{jc17COgmoY+c2}b7LfM#}H6xDg9V9_uGw`2xzCxY&SCn-AmDvGQ^${-Z_
zqkGZ5D?p{G$inLV<d?1oH%4^IwK8t2%tp3U9qh^+Z6f$C(S4a{AAIy4yXo+IP|+$&
z8E|mgQ^QL*Q4z~ZU4VA%k;$bKs>a3Uf7*Dw0QlwR<N%{Z`Pq&LR!}9&i7WcU9u_^}
zn-z)Jr$WJ-9-yF%Is-V}H^a+Z$cm%VK*2ICcjPje1fsJ9&kUfsvYN644fS`h_@wI$
zGDSs$02<3O*tat)6J`c^v?PSUah?<GoF*ik@(aDpZMjEpkAMAJ4^tu-5UBnYHXn8?
z!0LE5-@5^y+WJo8c+Z!bAh8dw1qY;kgE3_cV;Txwy-Zvt&ya&)Abg!id-~aL+un`c
ze%HC9x`{q2cv%smD(wRMHF>XQRPLoZmCLDGF%N%`M2~_OJ|LCLt5{;CQ>oZC5&pz`
zLUUgnDufvb;Z(0Ca=enjiES<?OBH_V9FWQi16Ar~giF|BGPLFDW(0tgxZ%3Cm4hj<
zg(H&TOzhyJxtEWsk2tJ_J$e~9h8(D3pGh}W9ufRvTTLW_)2*oJeJ1@W=X=bdnA><R
z%I`Xd_g=YrRsB2d-m^~$n#3DQfLF(r`53e#ZlT@^Pdmg9mYs0Sqo^iWf;qd6&$JS5
z36_9&Rl)K({lR2od9?ypIaII{L0Q|cDw&lcV+c@clnZ%90BL1xVO}d?MY%G1vI!&d
zGIp2No^gs&YX$-B^=J~7;<M?P9itPDYA{Eo3VF_K`ET9cc=$cCOv?M_W&)~`y_yC!
zw8XJJ&#XE(24{5;ff-Kgwfo0-pB)D#d;%3e8-S%4{A>c2DrNaJCJoN0w<)m8rCppv
z<K-RfKf^(iIR!@?i1KOWoNNMEb6E-5GY+XB>&6lp+Gge*nLd_`u(_J54XC8hPg>-X
z(JcFBxuR;IlcX#s;hF^WyfpQ|`7ij|#%_D`TVGS(Qs`8i8UFNrui8F=VqU`S1Pw`c
zTz%5q1*_c3cLn&)=Z1$~Tk+lC2DA{5;lsjD9oM*@UeNp0Gf$$T$H`XO?mUx?NUZYU
zKn8pW<fxjR%ZPb`HGDpNj1oUi(Acgt5JR;oPp-1P=8G!(sGOl{7(wb5s(ySrmJf2(
ztq$0dLiSAoDf57RhXb97A=7Nb2UqgIRV0T|r5t=52drobcpG#lEvXNzg5)wW>x=vu
z%icJ2!oMcK%gecpoGS+r*i*GL^uL(dM~_`+$Ig7Fu|1jJ$#ctmm)^F6jb|V1AGt(1
zIIviM&YL5CN#Fvq%=HoV?-CDr6pr|IoyT)5!Z03BAJI0_m$et#Kvl4@0ZMoCi8g2f
zg9aJ{Gih7K(1EQBq8PU*u=b%r5Q8Es&q(<gi$Il9gjP6dEcw;ywGrBLaHTmZ;cP!x
zZTqXG$r>2<U!YNV$+3#ehF1i7x_O!b28Rmdci*-#`E%x-6}n+5Bf&qG`4-3|BcS3X
z9$q>QAUt)~?f$o4dH^TE0!(SCmNyu4Pzu1JKv0%AB9o2^0y6pt1f&1y*3=)o>vsFp
zmrv#d$EWjn!#MNHRmW!ebuqJ#{p4l-Gk1L<mvZx`D;B62giHgZBM96)c$<Iniw__u
z%WBPxD;MCOmgZ1Zp-N{i9ns#Ztf)-0AFgiZ#6VSvn7B_pdcW;Gu*V;L{A)ei#kKIS
z>Su%9Hx&Z*4e?QH`W!qU{fE%0pR6^L3eyQX80_h-Vqn{E@l)Y-ptEiTX=K(Uk3o~?
z^FyHL_<5CC9_GnljF#mxP><js^^A%zZxhfxXj#e6{bEQqW)cYTl4w+aAG-S!_P1X;
zSym1RE4FA^cN+mwJ($438xB5T>6fehyafb@NND^8{2xoMlz?qVVm3qa8&&SC>@Bh2
zwzpnpKXcc;2yPeQGf0TDeeg2`qbL6UHv8oLCu#3-sk%v`j3Ao#2?kHH&oP(3A&Uqq
zdE1BD1_#75|L~pf_aV?zf8x28=1BHEy;tVx;X_^+o%fn~6Mf{1Tu1xD-_~c<N0Z7r
z5A)Q^KF#td^p~Ww<zoaNn8=EgG`@BF9}Z*ih0cKJm?2icg+Gsi6cM6|=U}M!OrwDK
z#Nfuy8U<2aIlEN*h#yfJO)*Avicr}olLv&{%C~8M5Uon1Z$OrG^Lw>cp&w?~t(HFY
z=<;92(7iaE!4U{X*?&Pxegxq1(;Bf?i?ViPw==2)p#ql^24%z3t(m|5#jAehZHMt2
zPtpHkZhy1y?SAE}F0);$m-v-G{zm)6mmfftP^w_F3@HD0|J&`#D_&%)tC#qdKmI2B
z<d;w8rsE7gnVtZ~#nj*a;$42_ZHHU}pWtg-s-5<!{qL}=u6U8}TD{b-8pc7@Feav%
zzxJXR*+bhin=ek;Z~gpF`c+q4=DSu`{jwi@g}>wGk7JU|F_#n9snh%X`70~-inR@)
zKldJGFotDtIYF7rad?J<P1$gtGSI^uc^a3Nq<IPV<fHf7+JW8v*yE1?VbcG?Y{mD<
zhn@Z-Kb1>_Gv<vylVgtpYx80sk@oOwPFQ)chBqP{Z>2xNJyb4~=MMkIe-nFv9{%Ka
zzU}K9d+e@rM-f29#7)bq*t|~_vIuaHP|<b?N)&QAcuqg}p-B$^Oc9^LPmI}~+1oGQ
z<yU>|aH+&CZTM5SzTK{T)r)-Bu1oyNpLnBx;!6+c&yp+%e+E1J)U9u~E3dfBS9e|F
zSN`}L{gYolWfII#MRQ5(1O9=Zf2&{hsu%g{>Z-lyM_=jhxcN5uS(x0GkeE30zuor^
zzv@+&+3M;gcIA)1$v*L=2dFBBirJ4{^ddjCHTCJ%N&moqdaGZ#9LF#F(O23#ZoUn;
zMwQX&*33_x-tW&}nb<4$9-xC>c_0oaonz}t=rjY)sJ!R?$XxnGB@)=hmCHF{b6`0t
zn9KL&KY{j{bb<8oV&`@48GDr)N1e1$DXhg5#()wBNMB7bs4+nMs^j>M?J-=8t(dk%
zjd&i=0NGV~7;{?rshl}Rh+)C=q+v)ERRraoj&evStGU)w_IOo`#~L$`&ay2t=Glh1
z5P3;Ia;+Vs8dT5VL}!p?$jlp~N;xBV^Zs~AJ_X7W@KsvakfA6piMlWM=q*p(2B6JQ
z&JQrANq~PAA*(rDO`-s){v-lGnU{~S&x|)GPq!ZMBPagcf8#&B)+dvRUG=fU34Q^F
zNB6(cCX*GvcKvtkwolyb*Ia$6O?JJ+k3Ot>YWP&@(OchSE0c*`yZ$?N+b3_fYp%Y;
zCc9o@cRY-YnzQC*AoGA9x$AcSjh}z5O(qk&>b66&0bQycgKUoMd!w&RR_xlf>;2<@
zaf@Ah^(DTt>!p75VOo0Hn)*XuzTPf<&F}hbF|!Z7^(8i0S+$>8yWVg6yW8xy-u)(@
zOeXfG{fAHm%<TK5zxBn>_m!22y<+Wv9F~#2k6Q@Fba{(T>e8}0@4bwmG&g6*@-{D(
z$8uI?{@5=yUCjLC`TK1B;Be}e9Xb9~U>i*i;k*Uh@O<e$d`_<Kgg4Zu($=)s{@8!v
zUD{W{HJyyW82f)SsSqAA4s|8~cXNO8J5TuDjXi$XxjSr@2>>Ntxm5#t<O-Nn^Qdag
z2Z`!|Dpbo+rI(*Iq2<K+_DMT>;&%UypMR}SRwm0pZvhONZO#11zBl>G%EYf(yWVd5
z<Slm1)tC5W^`&<7VI*!5+(mMEWd9p|GFkC!*4F)FpZFuc=5?3&WY<gm$iuX!Ft;=;
z{p3S$eThvbtM)T%>weq8kNF4R{YG0^nfRObAI_D9OwI<`9ohdTUzx1<wQJWK`}iG?
z;MDANG4+S0zhjra`uA+QHT4g_^`$mhS@oaUd%fTG_qW+^y?aUPoAw>j16x}&pDva@
zKAEgI0zFQ~X&+z&y|ir2dz1MmkFaML0is}YS*^$wlB_ghTgXR`z2EMPe*#VH6E@n+
zc|0Gtwo5Kb{@raSb7SMfv4Yku9ue+Haz^-)j$Zw+`f?<FEjAS_YVRoq04sVyorpp_
z-SwFs9=O}2O#VsK4v{OjZWzL=CtxOuk!^geHcJM`q2I8su7KJ;3Ktv<WjmOi^S4o%
zjNcnEGO8}d=y5$stcq4SX$7FYzY`7aZVx?ruibDcen$^`Sm@^hB&(YNwE2{5R+(~7
z+X9mY2ZvY+;lmu*;})6i<|nWA)zwwswQJQUD-*lww!;a~QFXiW;uU|%+dhV6kgZLB
z$?6gmrxZ-#wA$3Kym;a-`PtjDx;R^$u$Qh*>=o+=my;n)RIz-s`4_LVU8}o%b#>KN
zR#xoF+YZZqqB#Y!Q6aeUqKUucZMRW{<hZ|d*NVMz?}lu;{?xl(VQ=`<rq35AY;|SD
zUi(J}u+MNY^$-8}CANC;YjY9}x^8>dmG=DqaE-rW*NVMz?Lb!Cc-a>x0H?L$m=y_H
zs?DFm2%X~q2L0?q?#rTO+FY*1exInyoP6X9zDB2RBd3KeDj1L1Z)Wo3GkTx=yG;Ns
zy{Y2TPX0pU^uXRKFHJzlFvvJL{13>H<JH8JK!@NUFr&pKrtzs~zin#=_bm75Z6l~h
zk}{>lW=8uyV_6l;kkK|OK3M_G!~#JO2ZiYuSye(s`}ilX_FcPHZFSc!Us+l4D+eEs
zW#Rc^ZdY9#eiXDH_m`|r{1s~(d0;~J$t~t~)kQ1*(zo4)gF%ZE_L5!8XYeyhys~iI
zcdbnP$8J7|{j-ayf9NMJ_0@}COV#ZNz?Rr?<wXPjM6$bm!d|*-GT;xEZU5%oukhFZ
zzneDO+Vs`Q#9n)I;L{SzKKv7x+Ui9=mP_VA<8AM{%6|AiTx+k`HL+Jl)t-X7+>;l{
zUoN=@?(%^YI((M8Mk1X18mU?*fqUA3Bz^XgWAFE4r$4j9{B3Ns#;%3vMl4%q-teQ^
zf0KZfu9{duXb4|J!$P+gUv7CD!G=*fxz}+SC9e_}l;Vtc#*%(n%Jl3cgQT&+3y8G=
zmrJJI068hUjq6&bdrOe=y_3yC*iE0M4{75N>@X&eI&@5f*XKKy3d7l{(op#_qOPUA
z7<AC3BR2**mKAV+4?cRY-EjE5vPUI?EgZw2XO_vQyygTb^1D#HER=yk-CT@=2l$Bu
z1ddUGnlI*d>14&1RWwwm9z3((RwfgB`va$FgYwKje8msj^DqAmoWjfM)65?{v(G1!
ziM`{Cr!v@?ZB6|{uX?`y@a4aeOSbsg1>R%0<oVK-6~F3Zhm%gJb`11AczT~tR#xoo
zUwi;d&<oHuCz<`^|MYx6^6=CjJbSCX^gq1BfA8$6tb$AzGv8Qyg-=#5bFQX+{;un6
zb=M{Su`>_&m8%nbMP&OCq{$L5RRMBBMjHz3B*>Hfm{ftqfs45z+vf>@_x~*S=&c>x
zZOeb_wudvVty0#rqu=QBj75z<_k4l=?y!8*1b0M8vJ?12{z!N@=AY440K4zAiinIU
zfWqV@`h4;`Px#u#Zolg*N7esmPn#^ca<I1`-IIUj-c(N5a!;Nv-|`;496PIm2uNmI
zQ@?bwVpo3b5KeY(P5spA{k}3;vA2KmBvlfp{-Ia>us{FBzfOBgVWSV7z11d@6@SMU
zPtkJa)IWU158Dr4{_Aw00m<isXKuBZ{^(2nrqd75uL8{cz}hQ)W%aW31>Oen;MrSk
zWo5<Q{>4+qdlYZE;`#pk7yo)DYV+;6{p624-;O>q&vAb5%&FWjH`|)}fwfoqWY>$3
z3~x>S^CzzJ)zwSw<7ZFWRl8RF73&9$F()t&2RpF8lJ_|Bax?rHr*kz(j?@3-!&DW_
zG<{`Ul<)I3v6M7Ox3n}!w@4!;N_R_lF0g<g(hbrrNT+m3H_}UYFTKFR^6dBbeEzTZ
zesj;>*Ieh!oSD<_)%sQ7HlEt_%grCX*B-<aH@`N1eD*mdch-AUehIa`3Hz9tf~LAc
z(##TdllagTDY>E%6XN1zDj^gvPWg@>pX+0|unA09IB%F<yo>xD@$xbKO%5{WO0w$+
z{g3Has5^@nm9G@TRQ=W&lx)locTgfkX(dDj`q3AJC30?DSqBsJOmO(&J3#}7-Fdot
z3+2~7u-M4;Xq*(Gi&3m)dB=*lV|=cOzx>WtH+p!ZpG-t9<zdeeoYEmo&_S()dYl`U
zp!p&Ee^Jxr!SHB=dzH0COSaUJeiUMnkEv0>ay<$u@vF1`R%rC%{pjcq;NiHk*acsU
zhDktXjmguB`THMck?Qvf-tB_7sw^B`*$HpJB`OC<5zzJEDh(D6_?7@`iT_=cgX!*X
zvd)F;*H`^?EeEFX-0}J%gLGCDIw=d6`^3-PH-g=kzt|if<BdDUHX0!bQ>34|zj|%g
zthUQ``?0DzBzUM*wkq1Q$eJFD3A>}7enMXkQb5#*GCop4BZV3U<}`9&LTg-3n`?qk
zwn~;;%vM5k%`6R<<0{A$MQ2%qc`UW6vWLE*TBo~m^_Jae-Mb_+35n>*_(bN{o8>Tq
z&Msz6%8(ZSTgB9Pi|7Xa)s36gmSon_*_r@4gY{<nk32cC-S^VfqijfCP0bQHI`3p`
z-Q1%XqLm`PX)Ejc$`lu^+Up)cAp|6dRL}d+4fcTTHl;6DN1LchPlP%FOz*b^n-LJh
zP+dCY?G1v&xJ^VmF3Q))-@0d^8lF~7peo?gT`j&0R~SDYpSWpDr}Nl)L!KA!t*i%J
z9$wf2vh>=kPt-2Dute>_A#;L>mNF=_M4GrtA!lmYnUZy^BWgd3*JMx<4xP(>zN*k>
z1HaAxz`_;vqkwMAiT#cItF&Df>#}i0@yB$|#5p=T_95u19ygflM-ps3UB#!6ZpdBC
z0lJyn)CDmN$Wd%c{_O)1g`IW=b$8ww1kiN_ks8vcUEdAg>MotfKjV@1k<r@GJycQc
zg^;?eWtjR_0?$p)n#UCAOfd|l8#RJG(}7#-g8P2?WHr_L?@cchC5H*iP9@oP-K%*f
z*&N2O+k3v^zmbdYu=QA*lAKzd%MExAAdaFRZ`qwYXWF9Ek&5p5PU;}YZPooc*fHmY
zOqpJJ{d*os#%niulY6XOw}3s4=Xf5Q;K8Pz*1ru<!vU2YYf5^%T)uyAa6&lCf1McR
zp=uO+qOEglGl#Z0nxQE56Qt$!N)o=`;oJ2=w>u6lBf-+w=y!3^HFij}C!k!i`>ZL?
z0{T;QpcnCJQ9t)E82G$8@QDjDV@QBGIJilYE>Nc!zY)2|tQhne^=xlDcB$?S8ofCh
z#a^PD1pW<y(F8d2KzdQgMj+q@*Xlar>>CiOy13-HDCo&gvWG}yzy+HI+<+St^(DOD
z1;7JUT`=M|t)L&BAzkGwtSR$m>4+=v1W%f@am;~I;UegA&eo~9ZiW_!n!FPz=(6!V
zJ1+$G^0HFRecCSrH$f#CYLqVN&sxjQ9rGUko;Sk~y`O&RUcfbCq`lA>o+<5QGTP?6
zSZUl4oGfIz(?qHraXB)ND!RdVbjH}j%xgLufN3A*o3ikxXFf>`C9-$YB(RlcY1P4{
z`?~b;t>fn>mSv}%jjv-*M?f8??kjVjD^H$_5xSiRmMZLTK@r$D^VFZMX3f?ySz`o{
zC^TNXFkveJDQ2G5Yc}j*8mIPCFQ>}ODqG$xW!6P0L&%#b`ZQBAT4s^SEuI!@uw{i>
zg65`O`egO8YJolPwZx&K3SQGma3+})7!fGgIhrF~CeOiHdvIW^(`gsWU6?{`JtZ~S
ziVt@_;=#6f)2cFc%epB3<66qoNR179L=c?8&vhp&jMDN=Z$dZsrYActmYeyqniMz4
z6L5_uz&<bcU%^XWA2&CNi{dRcnD}j{q=D(c{T6R<b-W3fHi#y3PWt7E#CsV6x7Sgv
z21_>lhPup}EQvOMz3<YSYE&3}9nIANPI~eqiPW{Dil(jY?>a^^|0m(<S4Vl8YwJ>P
ziy+bCk*RrU&|M05&z*4zQP~3@t+k&9oZi=F!Xzj7s&E6IaTedd(?2~6A^d2+9k+vi
zmZ8as_=6h#;jOW;FAHbtqltJ%m`9Y@#Tep@tKnujL|>|v3K#=_P@qUPN56TK&X!}Q
z^95NFQk?SIk+MAI&n_%gEno+9Dy7!eo&>s3bkF!|xv=uUSHv118fdyqRD(=@Sd$if
zDCvdF?dyap<bnUX$1jSUSp$D~w=;0($8~*drZKdKxbD(l4_Byq^(?C<Z(w9;Z<@9X
zUg5RisB9VInd`Ur*vtp64G6AhW>uzZg^xC$6b++X{Z^=*H61&sUmmXpZemff5m4F{
zQZ$p@%`Tt(_w}CB2oQFmyxigHuAIjQiCMwQ^6tOW1cj+rJM%bR?(f`1cKhTwjeECD
z83h+f-m<KJzI$q^X<4rR?Q|V#i$?0bR_#Vaa8XLu=*);Y6wsup5`Ri<?Qn6<#{(M#
zvZH#?QzYZt0(7y(Vf$leJtLB9(x9|w`p_QNQH1DtgkIlz!HS;^3Cvry*&V`)`(9w(
zD_X0M)8G4*MnGu{?J;cduS|w@xO9$$+w-$&H`rOKuBG!Lx@?w1RWo8w&7b=HRTV+X
z+MtPuRLRFov6jxIp^+N(*)!ZkhHH2WMth)Tk?~1%>r9+U;B7>69pZ(7&yH5~kxtN}
zjVPI9r<(!Y8kdIU@pB+Bnw0+f?(C$-z!o`O#7sytM96dke6de_r`YXdoHgOy^uG{1
zL_ida<%o75WQug%kTOGa*!A9Y7qI_x^ND3%+>f5Tpl!xG8R|)LGS3q?$L2b45HtdK
z7A0JJyVV+5<3iP5-8_LUx2egwPyK=-FwaxesAg?HR0XP~f?Y=R@GV+exm)7%pafB$
z_Xs7pNWeY^oZsH3^ZgLj0md9?H7$;a;xCTyV8i0!tAsJN;Ro~V8(Vc5>Y2%@-GoGJ
zGQV9Jc$IwBdYR6(hiGy>sBR`bd97P7-KH<^_C#Go-INd!hcO|0#T4>P#LOeTeaG~%
z{9JrmwXax8j{5^PvI}iiu58|19(qsON{9k$cTw5lC)h{Jx-C&2Gb76TPEN1~nMMmZ
zcc}~#`~ww$gnT+eSzAblDuuVbZN+B$!#7?vMb=K5*7kK_V6^bQsT8=@fzDS=eK!X-
zlH(+l)g&Ew>sUER1`b<$9vK5yYpg24qDYZ#YC40`Cu{^@{kko+P%BXvAK-C)^GVCy
zj1=?ahx^<jL0*%ty3%i|%4{c<$ahV7>-G)HgGy8;mhMni9+!6MIv1{XVY-(1r{5cj
zuC0_S4|E&0x<QWpQdc$78??TAY9S4_y4}Ej5}_=o#@N`{+l^&~tO*;ZX1<1HN1I3<
zdb?uXB?8}~#%L(W@6L%Z8AV<D)6pbq$gs2j7XYmFexQmwufe5j^)7GK(gkLYBdpw)
zc3Ng$Lvc9!em33cLO&#}MdO~{%>EQBwI&)u-fH$WFOXLnEK_UtHL&GLNkg^C&RQ6v
zs#4Vn?G-=UCk|LCH<cjCy0Vtt)8|^qvh~v}O*yTFc{)x)tH`xp-N_f)h9z*lF~u6c
z_%^T?G#sVUauDoaHeu6n8`MtXdU&p3;@mD(7w-yy1)0K*a)iK3wbK69(dsdiVB@?F
z$5`w-6663}M5J?GE``CVbZZDe0O>Z1GzIeUpNuo&eSHvVxKp%kL7|G6?^wGn9|NCn
zP+lJN?VK^boIyVIyjya(hMkVaPp$-C*L0iVcle{%v{5t^#IL%_gEO4;?r&FGz=Mv6
zOEZ(E;Ix#dZ9g>qLK)ELTa$0QEvX3|jlO^S;mP<J<j3i}Gk4}8;>B@YMgjJ>y-uCd
zCw{RzYI$^#i{U$J4<`m;9O?w>HrUfwKir~Zr6{?-DE|yWd-n3O`<nHXr>{zGHIulR
zADq?n0dwfJ{0IZ_hQZ0}rRjdaKNZK`d%PV5SGM;#1l0nwP{MF3_+6lRB{v&mkrvFH
z5?f3~u6CQ!Ae};H2Q+rzlcwz8eLnF|tL-*~W0duE4Bs!;K~@=Vp}X0mswHrQB=ds~
zE#2y7I_XeQ-fh>P+j2udp;H(2%6z+x_Z}I-+Q-t+d!jni_&PPYo+A6G%?27_d^_O6
zkYSY5;Nb1FG;exG>|=7iDanqR!JXx_<fWK9Eyt#{J{UCM;O(-MY8v>x-uB@1c#Z1p
zxW;j%mU88K<0aepx&-2Czbpl<Tk{?`c<Ib3!?IR)7kN4MIZdRKaKsOOF+59z1pk)2
z3X43eSQBVJj>b4kOvZ1zPN|9_8vi<tQx0%?y3$|y#g)|-8Iiww`>oQfquF}k-44>|
zvasn_40YVU&jSCa1vqbNfp4K8hh=%1H`Il=b!$^^qTzLD!;S<jBV5*#1?~Hj6@E$>
zbm6~5bZ3pA&JdZA4U2q!Mf6h1@?qz|y8f+exgc!bWg+0k<o@9k(OfIurPSZs@F@z$
z_4vUc!V>LKf<X}WS_Mc=KSkj{%O<8yk@}CL<wCXi)raZ5=wS!%sg=~1offl2Fd`Jj
zh*0q4<#!hN4$L5s!q2q^?|HIr!K=pFfxCsn0M_kBaVOha^8oWa*kSeE<<tvozbi8A
zP0IZB?AdqA#nTl#UEpN_CR^m0hr`pum5rez&uQewOQrF1iK4R5_1$uOoD}U9J&yh)
z*r6t9sOvc_^1rBB#b+DA9zM4VpN{g-I&Q$>a^68WX%CuNJE(y{gxD<%frMqwZqu=M
zmdP|1<-uunJO*_>eu3s!k9jfzOQr30!euraL<i=E>2SO1Fqe}z+|1FN;>2An9$wNs
z6_DF^#Om|p?|Of)L!CQ}BMm31#|95;stG}+q|aJCXFO`nbBUqRucYKNC|(yFvCFcA
z5-WKP)}ek}lT5=W--mRDmYdRMp$*w2zph3p#j)mBS?q!mE=iN@X;3I(odW5Mo9oDT
zo(4XhH4j0Rdj?@9_pSgFgpqb{cOeLCT_8A@xhLS%PFmBsJNA<F^*C2^<mKEMv9EDo
z2A_oABAKHQc>WG}z3zQ=6zRA@R&Cd?rn|h4mcp$OxQD+2F%FiqA`pT+K0Ri_&YOre
zB<Gx;`be7VU@G81;($5z|2?$kDycrJy<mYOR(Ie8=u0+zK!rV1Ie#ZQ+|MzsT^_7%
zhIGMBcLng5V-bkg>9noFDJ~!qFX*`b?qEmNhzyJ!a5f}dy#et#a5_6tJa4R#b}d^2
z-p6?_qWUzp(+0^1Fm}1vh&DR-xHLN8WyeUm*ImWM6l2Ukn#iqB4V7i0Zn9s{?TYfW
zn`@MvxBr!z7`QVtM3kb0UCy0cUUtwfq1<w*b%mx(dmDn)fEy%JmQn6fAd%}Y*pT&8
zHS4QJBL5MLGQVMcSovE;!2&homw61x3TUF!`<P5)z)C7ydbZr}?Zg$f$K?v1)hbXn
zqO+q5!!ZQc-HTqO1a%9e+0HlL=V5TXTJp-5`uyrZWA*YIA`{O$cR-}Tf&1p|m)LYJ
z4aT}n$z-eWeW&ZO;OU^32r3I%clWaZ@14#KN7g*QrT=2<WV!g+`>KyXc6LAgr6&jy
zL50W;r%iMa#6>sm{Ab6k9d<$EbmrsJ+)nqWXzg}*YpKG08?ikG5%TJIw9_bYsSO*d
zcBhR_=*mbLT|MyshrB+gqxLQ*EU%;T`QgckT3zgA2k0aOu04T>EOo(qjJ=_VP}k74
zj-5-nm#sYyqYf8;d#QH2Z9^QxThK?bR*4Vvqb1HW1sEqOBL}*i=DoszI7Z%5$$zRH
z-znaiJB%UByyp=%8B?>_<kvJ)il?7CP2XTzD8_iF;=i{1XO}wVxl`O_*PHR&4GN0H
zxm$A$9H5B9wo@B?TOb$2l6~nWvUwAfy5Vb)_Fd%%?>neWL{9_29+|hTY*Q~rnLnkO
z^QAn<P4XA#INKcQgqq;5cgo^1S-yvgW{+>tl&A~{JtcbC5QaNF+B(NSSX=*k3BFvr
z<bG|D>caospW3zi8rGQ5M8U@Uowx|BS5R0PMH~=_LJC>$=P=$*Nl%aLT&+6`xS_@F
z*}IxyY+0YKem>(^sWwhuZpwQw67PU7vRahDCp1hD7oG9V)oy{LJNVXnE!gMV*}9is
z`<*~u69(LdV|3_xuLF3UoZhnRsB6XGJGH&nkZByS8<jB^7}^d=PDfmoKGCP!?(4K&
zdlBAeF2NmV>%dlHXy#NC#-Q*c&lf}Q0mWcemJxHoC44$~4g$;DQBeti5#9#NgZDt8
zhFD|W9hxsjaVEGYlKvP%miUB_;3V98@X=mVB83cAB%bymTq@<3&8#>~EZcmErCp!P
z@nn0fIoRV_Bj3I%(U=vcxwSYVZB@wj^qI_7+)SNM^g-saqg}Wf>sM^cqdfbL?ZEFx
zMrjPvg)`5@@0ZCq+mkT5j`kpP{#54&UR>L`147RuTGjPmQ<<CQ0~8w_<kQd=w`CqY
z8@~rn>X)n7SiYjNnv+bP$h$K`ms*El*iN&<B7!<Xf)?UpUH}CcB~ak8JK~i{V8{o*
z{Q~aOPQXpw&u-w(K{W9v%M^FA-{00?2qfazJQlGx9dv(D1|D45SaIy6=_?FuJNbzj
zasE7KjW}S;nU{*r?d#RBGY&`S`54%%8`kQ5KV&=f<L?*Py`nVDe5|=>;{n|RO_tMm
zVCBq|?SDKoc1>5<EZ<gqvCI3c`ZhpHpXKQ-scGOA7kV3yaP34Gux|&G(q4k+<SGih
z6sDH>G;sIGi+(m^S;myN>zBR%?=<hYx6?G4=L6mL)T!zX&|=23TuR2a-!~^XUNRo)
z{XOz2c>a&1w5VEDU0uPp-lmNK=adBI2nh6nLz3W*MmHQpvPuRj56Y1N@EwwD+FA$C
zOO~V$RmQ~M$9I`^qd{<;h9J%-`FljKviMj2p!br${>>2;XX>AX6M-{x25oAYT&jvc
zD<b+{^R_N;3_7=2%-rpm5;TM!><EbK<i@k$00f&Lw%%bfZ-a6N;Is(U&OfWV$Z$Ng
z%7o7EVd#xy-!?u+rqk|p8lr-zA^md86jaj(A52?J2caAa=;3}nLG0^?F;I)vz^GET
z8eav#yX)UXe~KxYn>Rs&QBfwsJB+T;Xh@?jDdmYcsAp?#2F=`Eb9Z@qwl_@Cx*-gr
z=C)IvkP@WGKvUP4z<<x;3a+P0UBkY@gqr;L%h1m2-LVVBtwdJ>cY4oPVrXh;BqhPy
z2haHH_QH8fVD;xG_T(tZP_zYxJI@gg?=RsPU`!lxe2Fnu*ma=!)*WGqf;7o_wBTv-
z&Xp^Gx!j+C73#N&iRYCFBK{Sv*Z9F28P3p4(kx{bOo>Os0G71MgCaR(lFEQo8#m%B
zC^>h?$H<(z{=5+#^v+Cp2;Ei1uuj{g()Ss_?l7^Jx#Mxlijo{`oWhS>y>MAO)){Kv
zn3`W6`bb+WEpL_zdplI92TCZ)V8kNe+!{IbeDvjW(RfyezPs3U>#>ad#Lhw->;um^
ziECMi6+WSIqtB|254Zki|7G+6RmmGb9P*K9DL>LIJ0&WlmMr{VP2JaMTWgf*7j?D?
z*j{y`v_u{tkCi}3T4=g2p`A!~OoEXu?Xyg;ob@|+->xXgFvaGJp5*pTc9{Lj9}QUF
zwsj63i%FrE%p3X}B$P;$8)NlE<sZ*7m|rY-qA)CwSYKt=g7nmj`CQhy>vcr*DQnU$
z%p8=LxiJnfBYvgGmwe=jpF~@Iu!0cCYG+%-XzKzpmtJ!ri-s;_V6ux0usEhnN{F-7
zm=;JXiCBNvmckpkP}L>lYsKlK!>e#K{;wWIt+BQsvjqESd%bIE)lVZ;AiH9)4NNHO
zKbV8IAJF(15c_A?gfNFR;BOji#%<bQtEIvz8?wT5Eq`JKq%@lXFLKYM>slmV8d#}F
z`Ia6Dk|i+QQ@+I`vGL0+rBlHK*#8X$oL{JqGlXK@U`ro3(vhnBT90JAS*1QrlYMGi
z>UrbzjgL{p!{n*8)~zoVb2fz0U8xt9{i<BYIhMbInlqYS*S^19K2bhiMy!Hf?_Obm
z(G?5%&FHn<g+LiSw^dipg~c}~>R}cO9!pLl-Fyc<yt9-4YM#$WSW(|K)lb93pgvwy
zmy-2<!Vtc7dU4_Bg<s6E`BF2?8I2#4oB3GKLSl%;(pf5|BVfH=Ilt{M%0uef6)w|m
zhJ3dyVf`J78W~mO_@(5&1{^g$0Dq0rmN)#darEib>f5=mB%1ybb4CxQ)SG1*ZAHa=
zcG5zfw^GyBdQ1GUCXRAQZyy#_d*oQl>qW-GH;Xa7bGx`MX4xVYRAe(07(b3_@`R$(
zVPMX{;gjMsD_+mW_+1$p1g1xdYx$$d8yXVFkDV<q7s6`2IUH{89+e*xMj4`){b4Uv
z%7kyHm#$lroSw2Qj!|4zUwks?f~jvg3bX!z!9fbS3iKAQ<F82$+ZwkWe?Czx#<b;f
zny~Yb)nqcpk-mw!Ea>4qOA>NfYFMe40t7*55keL}j~H9dWu|4PJ7V<JOAvK8U+us(
z&0E2p=8<$3<Yw%AK;`_4B@sJmUaUQ1o^AXsydm#xj|@`d;Tc(wB^g{JA5q(3#ch6%
zJo)2R+9p^xg>d@}$ppQ4{PXFSL1JgXV0`_ao9oC}%j>zzBi#=4a6IeFbqzcM%K(&A
zkZvxs4jp-)X&?;6g+Uf8g{<kP)*`3GXpZMnIBKP{7Pe^w^$pOsV^40cNQ7$dc9^#>
zI5GBfu&v`R@Sh&iKkqn_oYk^#9*70o*1ZT)41CVaS`m<b$Tj@^$P2TSUhJLh|9tuG
zDGG9FWHcVX-7fJl^!p^wkiwRsSN;Hyv?C!vA$@yoKhY_DhAH^V%8l?&R(R_>=#JE{
zU8y%kij<l%Np@mr2JdycuShD#H^*=&y_m<zLZ>1apz``$lF4Y4XK!=a{_OGbHB&L6
zx}2BslHwX41@!7p9@Yi@V)o1jGCi>5WHv2w=hlI9|7fAMyE?Dz$RbfeW}+p<jwIEP
z904HOkeML5n-<LcxX&FLcsPe$kvuFcE0!#o9{`j_EHhYPp+BASI0@L47wBbtFgJ&e
z%qEyrM*5NS&T%EQ6xgX@7R72G_gsVc1g&CDO;5XbHidSl_U;)*E2Ne`_~k;4(Oj~(
zdH`%Cl7J!7%pY|?s~ZHHJZ-ok?2CAfGBP^v^b>aR%>tt8&hVvm_o~f|>w^7>w`ok|
zeb6r{gH7El*dbjlGyIhrE^_R-VbcH<8hl+%BXShU_YQjuqV(6Cy5p-geZUaA>RVI=
z1@c}@_1&UI2zi1dQ=lN8N!8qx+a`t-js6J<1ouYfD?w0ghI^I|{LnZjF>x`uE0B^D
z=2~ZlBUMy+8kyqx8}LLbvBUdnH>Lu~Dc04|h-*0V;o|41Pnyv1Pya8$3C~eR?-h8z
zSDs5e1PwEd&S4UD!^d?EsRuQ~N`AavZhMq!jhlp=|2~$MSWJ@s;gV$9*r$leY9(c@
zA+(7Gqnj9wg)5Sq`<2FB%G5NaEo;NCA>oepYTL{$P!8@eio>GS&j1q|&2pKasPRoE
ze1E;mvMG@=6Nxm7as(ScTYsIl={=2Pw_Sj~HLwrlcYML#B3LX)u^3Na_smHtSFsUg
z$A7H6o=9eF5_{P{@&@k+AODyQizGox9%Uc}tqR>)xFNlUsaQ09&wpdGMz9x!*mG1e
z3PWPtX)Zpss8paiJVY9L)mxDM+p~K{VsP-chFyKs2r4Ydg4h$F#WwP{ml)-v9~Tw`
zNHH{2YJ;bQeCl2?Z+(dD2q;GVsHZnE#B$3<5nF$==@7_bHT63nk6MDUzB2&}hnSWN
z<()`=kI(b-sv!@;ttJ2rh8UUceuCj6y^-D)vIi;AGr@_;(dT+MBuw@oGg_U;U-ERv
z2_It)$;EU3w!ebKaO>>&nNjio>&nT1O8d5)ZLErSDaP09B({3PJ_x;n=o)>PCIHc+
z1^E#NTTO`&cfaQicOp!be2ufIoAI|WnT)5-NrvyO2|f{Wo-MH!gPGbEj-eGZaO)V9
z>JphB)3UK6XIoESBF~CqMjc4e3}RIm=dYN?fW#|Uf2+XP(LMnB_2lWiDjUzsEgqB=
z@RP*FC`~EXNKM!4*|=W)cz1eFD=E0VD=zVp$W<mf`H#aMIqlIAXeu^9=nv?y%e(m8
ziYHwL3*ri0z~35EO0t&neGs#VjoWySelOabHORFka(Psz`()U1gsk8C{*yQ_JE}~t
zer7tn)=dWad#%8~P+uJH&I^V;#1JSVv!RuuSj&=HTJ2a(oCr1#C+#x@B!&gEivIgB
zaI~)?b+94kbV)0T0n$sob`Xs~GIWffMWQwtEVyDz#}rN2nnlZ#*h>!Ze-#5A4k4`^
zP1M4!E#iD{MW2|N{Op9}KlL=jV#`gU6{RF#v@V<~27F^3vR`M}r2fvAbS8{B*ai#+
zk*18@zRMmZAQny6V+^@Q@)^+=0VFMT@AYWx{eGt$J|6g<hBdY-ng<M;xcoLU(&gdD
z2>To;d<V(_N^DH&F<h%t8p;N<R$fU{gpp&9tZj`DJt4dB17n06xmBSs+t;iMh%O3k
z0NhqX8$E}=hQomK!$?{Sw`PPt)zpV+h!8oH9ZV;S%_a7QFRe?3y;-~GJOsC{NA`}7
z-#mo|C+k**R76mt3!AD$G9o58T=?;4M#@0Agq<pO=qwtVPaxN0K|V#Vi`7!mYP1~T
zk{os9a-ex@-*#-vz%YBjur$|u5|4bBQGOLsn$+}w+~=<WcdQ!@7kdc3(Yv<fr&#KO
zJLIeQx>#<Mp)pLnkGV5QNzWz+(=miMIfG~}%+4kEku`3#k-!w*P}lIHZ8eQZ+&%$-
z3Dbz<m$z&H#eB9t;?1`qwMd0?Lh)FqjC-Uw3zpjk)3)T<smW+Zuju_bag-jF8WTdq
zDND4HBBzh*mEU<uuvi|P3_d3!GY5t079Kne2zZa(YvdPrMiST4_V6wR2(gc%ab*99
z#?b@FEYUF{byKQ^VjHlJDI0~jgcQ4w#^p1GV1~qZvgNzcC+sJOb!`ufiihwD74D=0
z9%E88(=)yYTJ-zMsgbG+q_>f;TDxD+$JBq*(k_~Z%Us2%^}cG0!abMDRAP@FT~0xk
z^+tRFkjR*rX(1N5(--~t2Cqx&c0Uh|02tl6-C9NCHI;#2*-5R_ZBfw7kd)O$iG=JQ
z2x(9bP?@D{;a^|IKw`0$!`)(#1@d_+|0uCW={z-h<CN+1zA-r1J-+kenw5R{{m~?F
zl+|VQYgrYl&aB~9{%d|qlYPq<z2WWXu^i`}z+<uiliN8UCliWd2(n0u4E9I-aft>p
z3V!OJKk5ZZ`4eZd8K>XZl4J7?QQ}K^L8^JSeGSp+I+DT&L5X_zBNjv?$X1XR>}<@J
zMR``b>F<(hVC(^I9v>c%7xt{yX?v_1-HhZ)AEL({KI=4|YOh|{+H@m4h<p`%-y$}W
z(%rXr-7(@JIn`vJdt*BRe3zTu6TvPvjX%}?AjQWcqWuW{d&`|xK=_B>;!B5Oyk_I2
z3{8GouO5EKr}sx8S#NC1kTcm)`jd`S*_mF>!rl<~ew>MM(@Bt=8aX_M|G{NvUUTV-
z2JQDHFf<fn=kh*pU6V~MRcV~|D+J*)b#QKSxUU@aS{rdAn_o>aBUjGu5XhwHY5u_F
zjpIbFvSW96y@xkCs;r+nS|^dn&>uN5$j(SktZQ{(m-kW4Y?97;_5K4xsOWb5(DxDI
zfZ&T!vO@-b4otuiFV@F2Fkh7URkU&ziuEfiMr@SjfeIRC0l+V#?VXVv{Ow_QncEh^
z8H>aFI!f{*9IG)WFvN+x)JYHzliS`%F?ita-+N`g;hW>hcdzhNlnxdL3zj0cD!S}a
z(b1uJ5(FmtEacsydi9knH9^-1kl#9VpC|J#xq)roO~`;u^ZdGl?)65iCp*mCUTY{*
z0ICmgFj4<-m#J~R6AqycBG8lF8@OOtlE~xT>sO%diNN>0o8aSa7M?EmeAN~RdfmGz
zbUx-CMS{_Y*(lmhxp(X&?W7vXtQ|#DRtg&Gkp8K<<&HGL!O%f){jHPJ!0jr{I<9k6
z#OVZi8&R}sk`#uIk+U1GPo!_Fj?lrZuufaAH=Nb0_XoIH5`6n=tfluaHzR+@B2nJ?
zUuOzFhz}yiOLlGcL&<ehAU(o(G1#K~5#!n320w`yaSCy@0#M}8Em+!!eXViuzE^b*
z=A-`<M@HTyYJFoD+>G=%QVHUyDY2cckO8f=xupPwY?{BZ%YAt?cP(O{YlQOiNFDIx
zHXG8l^9k(@nPjs?+tDjn<F4FDq>(b#_Lu^!JyAT%WpVMiT>Y$MK_scMpF$3nx!~<)
zNTneu_*t$;_297jSmogcn~Xs8%ED)#6yV|7XEkiwLAGCgCKNZIk5?Vgk%lCrZP^9X
z0489lJN%(opgxCs*WZ-TlgC<`H1*0}z*ns+m-&V-A|t!wc{!S=<(U<_!m}7~v&lme
zBKD^)o~iqHNc?l#u`1c8P6+GkD0$P>lc%IW=Nl;d({#LGAKn1|-D0Rq30YD?!12M^
zf4m+h3~eS0f`?n}STYE$h=Kp`7~FqmC;D(H6h@+M-0#gU&JAWsz`7cs-NB+G=qU^x
zt(6r<i`W4I0zEAx_~+QlM@L|v2kGv#Vq$HNTr>WuS$_f4iUe+hc=LYZc6%*96n;mQ
zD9F2G8$yXe>2~7ue`pd+6#ZyzK4RgYPlwE^>r6^G_a>_hd8d|oWiijV+oa^@%kPJu
zl{5~bcN4qOIq|}mLxZ5yn~6p{q%X|cR@uLHnOA_-=M}*cLk>m+*B)dc^K`DVmVaD6
zNho*JuA;FH+J;~WoOK{oyapBlnZN&xQW;LS_({Q4XeIOe!*=?yDM@c1(POO4J3!^r
z9#PDgCFN<V;JGw=^~cx(jjYB`@FWv@GJEKXVcA*Q5Y#-mwnnXJE)*vV1GVl2&}(|y
zv;`IMGemb<$B4vT1gz&W=cg8-a;UE%#u#fVA1*LQ6Ah$dB?V1J|B~yO|NA>sb{PsE
z{_7{2tn!{iO)4At!r}5QF`y#j9XpJIf6v{;N<5)l#!UG}OEX5>dwN{fIi;mAynU|T
z^;CQt$2{iuvJw`#Vrx$O{SO2eFYA1s{MH!fNSO79?zhXe3z8nmCgFPnxbefc)dO3K
zm*I3jzG2nf3ods@n&dhr1G|l5Xq0!E5vtJ;fISK=iyZdf-wyXDSs)B005FR*?&zCJ
zCB~@<x?oMqpfjt~nYO@&sm(!$P6t*Em#^M%^He{Mr=^eq37Im!g<!HSdu^De=#BV1
z=#*mw4v+W3caYN38}#wCM_CNq6}tZ%M7N7bc3AlPfhIf$uR(PFD#7ZOUl;i6qdD;A
z?D@!}zZmRl+d!$N)~u$UZ$2D^ttpbe&v3DyEyZc^)j5uQ{``z3RTb3J74>p=?YfAu
zgB}aw#YEn<S~Y)<WU1Zv-D17^NOyI`e03EPqlC`a%gD|iaftBx%~v?rH@o`#8dTtO
zhN@s@zqIWaDo=`|!TUWx|4<w|D|H?_ZI9&n_>Vo#Ln#quyH1!AdYF_)kKYLXN^Zcl
zr(w6EhJd$7NfeM<L^D4*1l>~SF`?5ZEJPU3V7g13r&T0DS)Z)ti{A7QbQ^$#zR7qf
ztBgWSgVNzCsq)U31TC-hOdULk*i7TuW|UA6<H%Swi$Tj#pPBnChZIduzO1_L^LP1O
zN&}fP?N7d56Gce+?ig~t#-D8Kn-ShnX$k3suE22wa%)0mh3ZgrlA2(G@#)^`&aIV9
z3Zu$wp3tZZZtAwULjr%W#+IYe+133R?vabE8RxL`9M5;<=Xy`9{t3JFYn5OCWD(N*
zoP}s&=Sj0um`rvInS8W5PIQv9Nyj^=T_?k=wEzucc-KmXwMd3f`OBn*GKx9Mkf5g6
zYN=EA#Y@N(a#E0L(dvli8A&m>dl?=$3Z*AnBFpQQ2SCu1SkKH$x$x`GtdBC3u;mw#
ztuYd#SSh%O;aA>-Sg!Uk+>@NQsP!6)WEXKhT?9sabZvH>2d!DBnTszCHuQawbNYKi
z8z)3;?`+X&6BY>+E;g=`_f5EweXjXqk1Xe9^LJ#nPSih*1t%t+?CJ#ey~xT9=A^-i
za6|Fkf`tTmzgDQ2vu60qwASdeW7II=*c4+LRp97RU>TOC4!w~l&L-t2V7UC@AF9wy
z@cx!MJdxVscDsc$m+K32PRESI?Q-D2#u3xaKGd|`cf}d#NT;sm%t#fXwj^;rruvTN
zsfY<>v%i8815@I#;3~>bGgTv1LBSD=KDtvzHAFmJAGHJ6N8eL2|2Btzelh+-DHjUw
zDF5RJ`Cclz%1s<)YCEh8w1lySl*FAFtg39Sg%a&E8DjR9D4A#$UMqBTgU$n}>jV`<
zaaTLh)`?MoiWsXN%_wOf_aOT0n^WiQ4+PEnw+@fQUbfqc3`cEKAzB?V8<qWpJIo%U
z(nYiThYm5_u?(BT0DalA>|n_$t-1U)0VE>l=L0pBzQa7_-GEf7ws;>OXlN6J#KeIa
zNijXOR~w`gnTOyaw{FtZ^3kP#a#67L^DhL&_8_21ce}5qDn6$L(J_CViMQnBu(1kj
z?`7`-X}#l6X*~eJsye(C&!cTVcpwVAVET;I%~>*EEe0f;flwj-*k3VbTau&6kMb<)
zruxZH9)*E0UV{oo+V2V%qo6wi>~#cyKYsi+k~39TQ$c45XBD2hPJc1ol)ppEE%a+E
z{=*Dog2nlm#||pp{53k34)E{fITD{(2y`h<fE?1l5qCRHK_ZqR2pkbPUbGcQrSf_8
z4XZ(r9>NwA=X&H(CQ|}|CFK?WVKO3OdJ$@+ZPY-^H{K{j5)4oC>;I#jR*)ad#P-C>
zh%0*cJGOY^a{nRvWY!5l);Jmu^w+A_`;a!Jib`}ZU-}A(v8OkA>{WoXCmltVcTtD<
z(C9x@db~f)Si^~0svtTPN~z^zs(fVca!=~|{CvAC6uME(d>*`C7n9`~hk=E~Nw00+
zYi$>dgEaai^yP&H>?62cGXTVFU(T1>$%w@?*it4ga4=8J<3a>jSk&g0hP(Hnr&&Br
z&#adk`SRRcFz-QP1MFZ3O3C#9X#td8zQE2ehwrOR8ffx{#K!4nPW9If_(<}vlBtVd
zp}og!uQE-WIkJp>tXufm2|e*abVnsgUlyt`th?;;D^r&4+^ez6N%-{x_2kINd=>b^
z>wGs+DcGa;^cmN)ns+ZX#bPUScsNBE53xU(+C6xU9y2g11{_KF7KX&(7n{}XiG*DJ
z;#s=)>(~#ke>T=n@vQsn{mKftTue5zZ#s*|qy;FB&JX;R?Yp1MH{vDnA@v)+FYZ^W
zl&X@Tavk85hw!q1bOH1*vA5534&wcDvF=+zJefOq*Ye$~c5lQ^+wMq>S<f{~owI-2
zQ1-N|Rw>eyH3>&!jh`WJ?FGL7eAJR?Tvdd+tUZQ(d!NKx2KpSVx;dB>VXpbw1R(qT
zA^$z{GzFaK`s=&W4Qu%VnU#ONqi*Zk4j6Vqp=zdUkjG5w_K()6k7n(}ZcsINcDL`K
zGceH9Dymj2XQ&Hz*;8X#694;s`2HIZw|bTq7UNwtE>h6cTf+M>+N^m38M?i!VFN8?
zkuS{|YFA98o@h$i6w0GQlRT;REv-+=`a_$s>eS*iM(YJvb}4>#eINFb_5|0&l|g?n
znsP}BX2~$lwP+dJ9t4SKH<d5iDR~naVUz(C76Xtgg91}4dvtKyy*s$Obus86o-7G+
zhNI^9nLAV3&96Hmt5ki_T$k*SFG&-21O8hU4UdKM!i#ax{aLAx2FZ*pIx=5bJghvz
z5M4l9M0e&NLhh05)<(&yYLAT$J0ERm);k?f-^Dm@NHHJekRmYR>idGRlm&jh7B3Tl
z0C9AXZ-$p!Z1*^jDmhY)GvSgLW<0+M=2}#5hW=7!d(PF>$On=SgxTnEn}YJcOzzXr
zIajtr7KOHcZla;=h|o88Y6co!6@J#x#86ORNg$0iN8Ox&MO9$gz8f%E2nw1KFm;+5
zF~=dsu+AcFXKvS!S^>Agq@d!RNK8JbU?fHV;4Pt%nwua24Aj!5neEuxilMquTY2?4
z2wvc9A^)eO2Sd{YNq?F@A93G+=ywVg^U&n5sINyeuvG2Y1@U&#K7=?rmdJ!w=jy)y
zVi5VORwP!U3TgYT{9WCGYcAW*12@sYgCJRyvErhJ#|r_z<|ePByR;#<V^WxcZ;@1$
zS!W<|vba+-o~!XR(>BugdiuM3uI*andc|vWnVWnD>!yyU<7E~Mc;m|5_?M7$47J3q
zzTcP@5~Gu%kPf1KRN{JlKjoV69yr4?Bw~@-*EM{Wf(3K<Ba%4F+tI-)P4&Wjj!+)|
zv-hWAF+D;mio<u8K@3=IEp=u5LRTJ9z^F}im3f2$tn*%5ytZ|59X^DeL-+fo%{U_Q
z4rz(p10Edssv`mZ9CYPyEb|mur|_^<mV)0{6c{#A#1hLQU2m7W=>vp3-_lC{SFJhr
z4r}B>sDwvlV0UPy!{4er6aqo~WlN;|fgNQ+cwbz5`t*-TP&)K><?TsiX+j09a{c&P
z=-Y}Q%un|8ZD>Bt?DsJ^^r>Ii3HC!K!V1{D6l<fN``tr@ZM!YaBhT0`B~=DGxCY0@
zHYMv5z`hPBJZ7@^u4G~?FQy8cJp9(#dr8lWL(oHIGe!^MAv-UWC>Hi8!nWqXnj7Mi
zNBKoxDQ4{}z1`xu2qGnZg><v1*7mU*jfay+C*gsB;e|TTF7A>chX0!$fa8;u200pK
zI(qq&#7k93Ls7}mb7`-(tYw)RMfGdW*UWcem!f()KiPf9fphhmmT$rYDL5q4arr6Q
zFjk0MebC$Be(;G;|Dktz1zgrEOkTTGR!C%FB}ph12Kx%?`x4clmrp5JY#{)oqFtgr
zLKOX=kKyO6{T#}N0K3ZXemvM;mXVG{gVToNE(-v;-!=COkOZn0EQ3?7C-W(h)Jx8X
zzZZV!hec6$h&Dt)5zd(@Sk6?;MN7g=6mp{~A2uVexX@xfd(fJRi0d)dcJyp{y5^kM
zSHasGZPwkmh9qQUFTYSIcbWn2UpG!!#9>$g63_Olq#I2eIehVhM;C9>N)B1MRvyuQ
zZ<p@D?L+Hq&U6vy9KqHa5o}Gzs@iYrYqs_+7r-(tVk|DnKAw}5rnt{L1id|!?n5SD
z1zL)=4fv*qcQglEiYrdCmi^C;6Mdbl0RurI=d)0=|KDw9$7NI@6JPiI76P~*@(&e2
zX!&O9^S|FzT5&XU-NqP<x%YbObj?1R=+Y>1Cc`Lls4dO*e8&{?Bo|b$R~QtkP{vQ*
z!A84l*W(}0mc5Re)z43F*bnAUJx1<kTnth!S5=*jn01r7dy87TS%A750(3FV)GbN`
z>^dZkK0pnO_WYKz8hj<gEM<&2LV&HMk36fC+NZDLvb;qMfea~HbS*`afOP5gj3ar!
z)GeJz2i%>{p*CILzcE=QDt=deWD8R-{HmQuJQ&v%?)}@o@G@I!HQ=mD-~@VDA`=H9
zVO2js>MOCGzrZWQ^rikIfx1b-k|*J*fvHkT$cC)+;Ki6hee51?i+%AEJtg&?N4-T`
zlx>umc9`LlsOc;~i2_X`I*RKHR3~Y>{&jj#t+4IIl@QXrKwj5lX+A}!!c?)Z5XkDF
z7a>DOS)nD5T&F&S=^FYT(M%nIk}+qQvk(K3ciaETsypw-eAcP!QgQgeEg`O9bQCo@
zADu*y%c`AcBF$5R9E*4^h@9SLpoq{PI8cv+?oPumtkGbT5JNwjxm!K6l?_;TP|JVR
zFXwUK(-PwWHuI>qYRCr)QD_~gw)f0dU1$oX_bEz%lwe6^Gl;-ie&tZ3Ox8XcGhKSQ
z*@8pf3X^@a5@p;8P)kVduX!Xf^d3)tip{zW$Buz16)=Q0H4U?vsF~@rlU;PZHz$M-
zT5g3<s{<@e-!&H_wWI61jv!O@mdFFDjGV9nS8QVX`_`=`DkJV<|C8*SN^4E(^5bX1
zl$HdjhrMr5v5*9UTwg8-$9q2qpVqADEyw?&*@rxd4`DNR9TgI(=dNHK=Id|f#)I%E
zp^SP8BIeC_HzF4@4h(-}r~i)Y>^jfg$pv%INI6<yguO{%8hZ;Pk~KQs>9rwDyuPoi
z$3v}-edEhad0i3q!1s0fdi{~FQZPqP3~1mmG1=|cwsy4?t4GNFX?l~`zcQlpU1U9H
zcQxaeo4Q#O#JP+eZ6u2b>t!>w_{NjfQ1oHEOs522Y?XIf>ZdG<PIe&;vIAAGQHcIq
zxgjQE4%h9>hF6Vm&+pz2{^>ffCoEfh6DG@?yQJGxh$Mm>6e4MBVH8vZckP=+<wt@V
zvFIHntDC^A$S6krZs?LhV@m?uiF-LMw+Ih{GcKMrB5pRjMR+4Isb|*&JS^Zs#02Mx
z{HX<6;*4_~1`)KHQM8Kc+HARPAns5%`(@7)@se@#0LOqdKC=#zu|xwmdyv!{@vYLI
z*HtGtr`U-BR2Qe(j?v%MXh{8uQk?L&H3)k?Xzsx^C=_|9JeYe05GBT$C`nh^;(8wU
zR$}bmOV#f)-9{g&c2Q!Ai7P#4bD)11JW5&5>XZf$eAG6j_br!ZNkvFLzxpsw<g_ec
zvwD$PU0?`B)HTFPekok{nkmqT>ooVE>+4h(ymJy`U}~ugS9on|xO~*F>V+IX?ZCp1
zW$jX5BJfX*dVOT1Vf!Zy^n@!;^N9~I^q(NyPkQtwA7veH$JH;#Im?Vbww1B@6LA{T
z|HUBIC$uh5Ms7CoT}B*GmHpCCK7VwUqCW7EXwi_FBT4Mv9UX$mq3<^5!gg33#BB+!
z7k4yOxDT3q9u7{=w4H{uU`2gSwblDLNs+*-BxpLl!?y#1?CH^j(crqsc->W<E1Avm
zUZzoYk0b1waG4&^rwR$>X%+7QPn5r5QlqYy0K%FgJ#+0HHA}o|-vL_Ih$7C|5qSZ|
z%}+0QZ(LGzG>PJ_X0?MYL+62hd^6hng6eR-X_(b11riqd&?$p8;}l{7=s&T<h<VH_
zR&oz9dMd8=D+Xg`pOA{6(k}KOS{mN8%jeN4)(dmb&&l~|_D6xDp>o4E76p|zd}lQK
zoi7LgKf!v}d=Lz0N~OT4=NVlHr?Y4Wp&QbYn`3`i5=j?ew#y&ax9TE|kjEn>9fmVB
zR4)hK|CQN!SZ~1O9jQU=#PdCnPvf~@YLDWCX7APQ!XwH5p~|14Dv(O46n9({n{n~}
z1rED~p$On1Swf0=sO{aNfId%RBw|&nCFW9+W3ujMCV-k@h2ug3!;f8;r@Cj$x6+`6
zB&WU-m5tLgT~y(p#MmzuFDwc4Eq(V~4=R0_*AHn2S4IkxZW@<~uve^pU6385ebx=(
zLgbJBt+FPPIX2ldMJ7oylErqj?BNUd6ht1ptQJ2l&b8@GxmgGK<;cGw&;OmJe9ii#
z2K^maN)qhxiT$3CMK+q_q~Dh0^A=N_cHGxr$~KqJPxpPhdS_fDA{J8-whg|_?Zrr8
zs#Rc2%BvCG^`-Fur3(W9z=!Q0w?zppOp%G4%I<1&oL)#s@xd!=l+8rl{V^@WX!n+g
zJDntFb_a>I-bzQiAc|9^;dSu{oQ@KoYAbp?&lXdw6h+B{fJT;|MLDIQJZ2xENY7AN
zO8AG8i9h+hI4Swi<(td`YG=!k%oI?g7VV4veMfs#h_Try)2OZ4KpuM@l9^3j5*(XO
zBg1O%c{gC;C%VIA-Y1j;JOivr0wtnY35v`nXz;VMxT|{&BC974uW$(>^`nII2XuYE
za9kEjmrV59>C6&|VJ?{(tTC3&Oi>4_)(R3hHKx)J7RsY@p;&L|ZK8b!WJC0fh`cW>
zqUzV&uNI$YQS;_QdDU9p^5Q8hY>*Xe;iWz|;mTG(vii-*0AG7p?n}}ev{nXuDJ9+u
z$pOkL6bBX=c)#KKYt9e4LH~EK;~+EG;E!<55rXlIl3>rS9S^1ehfQ?R57Haeol3l*
zClg}E-GgT%PE(@TwNQ?gjK-?my@kD}Q-n)L9_Not^)ySm%eWd{H|70Qn>T7<qqG^H
z<k&7}U-8@Pf*7grFkFk?Gmff-NK<@npB*4)Hv4Tqe#5-u1y4S;qDH7hq^4OeU96&%
z(;N$WYt&*EZufV%*QFf(n~A%AIZ+(Mi}_cc(I^Ry_+0P2B<~vO{sxa)bAPfydCUkQ
zAGX&~`5yDyc9KBn2%f9gIU6Nq;O5avXl;!@dQqw2?8^*DulhIYABB{l+l74`EnFMP
zIfO+>RayS-m_lKc>4M#WD^Gq<FjUb>LF-5V7D0;Bw$7Od1z&t(?{~FWjKq|IRfT=V
z!!o4jIi6f63?b;!M(6dILM{n`x%1+3DJlb&tSI>#X;<v{S$pIKSGG=85aWYmJVhsD
zFJP-vd>i*7OtsT1SlL82i~Dtx>9ot;RP)QONx-p7_hKr!Ti=R6TZ(=W&PBEt1ew$}
zzGytlv2g6mjL8OxN=Blf5d$`vH`_g*#`1fsj=GPQ=EL6R1%JWB`{4o|pTkhM*pd}W
zkb6I6zdJx%Ac~ee=eeW!7y1e;C2>gGV`@eUxs?}^zB?RzgBR^GvO47D$S@Pe{mXM#
zPPa?sZ<Oh&)?X=UQ+gb4*iNv8ZO~=7&F)CBZ}rflb7Sx=cC+m(rur#wk0S0QmF}8)
zHwkHrNoETiz;(u^;t^?lRc%={&f_PNv)!?)jz+Jf$1aadpFuH|(=@<AFH$YzGW&Gj
zN37ZRd5^+aP0GPP-{<I523l}pRtv{yYgTzJ^0I(qq<*V}ajqWvS$JU773QhVB(XFV
z;~zU<h#KG5NdGq#=~NbU`7RU>nTUt=J_rv3FU4h_2oMwC)`9;jqA;6)LoMaSHHpmH
zoSX1Mxk)r6BJ{2Q`dBQ7U)6VX$@PVXK%=(&tKWfTog7K!ddSm^zZH`8)QHMgM}Q|0
zN1`7sumRCJU-pC$DV%j?*yv5qF7D|PRrn(FZionq`KUjl<(4tc;6XjyvwQKp^-_zP
z6>z58?HB(<#Vs>f)hrg89%dHFj*D#49N_+hWm<vM(5<m4i%b$<)_5-`(aaC<k8LZh
z17WGz_BCX44U+>n>%33!;eTj0+N3?nu?5&Q`kW=kTJ)Inpk|>BTj1J{6McSZt7A=D
zWc9b9(AL4AO-xUMdwOy7z$7`Dt&KL9FL!C^LA-RB2@#lmH}fibfQf!xziuPPEWI}g
zDRS80u4%^cn=>lH8$3`Xk(okf27gJ690y?C1Mhti3NJkYbTcb-0kg8iq9B#z6stJ7
zw}|>>|BMS!k!b0>+mFVzS$|NhS6vdCi1C$jMG{_}Y<GVvnlMOnqvk1p#`r_0`&wvF
zH_+%eJ-xZYMb=ZAr0CP<duDshJMO<25wS3~OI+ix1cu$b`noMxY7Yh`vGMWhC{A89
zKXmqC4rnwuP$r%@`e?gMs@p;N8-Y%%*3OXM^juX2DTD8YhzHMwn`(-uRjXOP=Dr-|
z1zTgNpVv)1@QIZimk^v@9;$HTt+smppjTC|y<`dlx_cm1Sk2vkX6O)8Ov9C3lu&QI
z+KNDuMc2(UYbKOHaTS&6KNkPew}cv|tf`_-ds=`aMDU9dn-4z-Ri+#<zaTZ-rd)fv
zmqB8^E@7GY*biqo-Pochzz{DCjCAL*7O#sZ*gF`$;u2kgZc?1l20c)D4<)|{Ex&u<
zqb|C3yKH|Ol64_^t9#%0SlukgJEE7#8^%I>vv&P&W+n!U_gpczh>vET?JV=rVK&lJ
zM#TGmj_Zua^ba!%mgu-#rYN<4K7S#Gk=CSFmK<q@MvlLba`XQSC_vZ0JcPec#?DK!
zE7*{1*`N%y96XA}p_fOI`R7xj9Oy*=7y-`$+4-ngptS43=s-LGAAmP<`j`F8v++?8
zp@ruX{-K#M?8}qGF^-Ln9aMrwfJ}!-d@)AYic`Ck;ap-79{c)YF-|3F$8M)F%F}E4
zJpKCj+s!BTwAFiW%be^^#Q)d%wD{uabnKbwx+G`VSGDit;|W6qYTQ*!{=(C#pBfKn
zK?OW17imTvmOM_xSmO3Uw6+J9gkZavXY3DwUf={X03yK*m}ACz<vECwvfTtS&?S)b
zzB#b$4W^eG(bv(!Jo309(JY|uS<oW15|5civ6OBS(tce)8kCVSv-xFXZ1P`j(HVP|
z_q{LdZx6q6H<c57e+x2Q^7;V>s}*I8wy|F)fS1ZL$b1b1R9aq;Q?vx2QI?D{GG*!<
zuwwrVedmnRk^;0?MI&&-z8ZZWR_syR_P__PT;bI@pQ7`9e{%*=3Oup@#Y-|2m_<-c
z!E&_c$(m0BdX{3qgciYDUv`iCk+IY)E05=sG4^yt=~n`W*yFg3iFm#m+Bcs6kGA=v
z2ODDsT$LB7>JPM>O@2teZPwYiw-L+<+<`~N_|{sDE9{r>L2qB;1h?$`Esasq&1_3M
zks0V9GE*?<pXXjb(GEWTC&&y@mWdBtMM;yg%{<xrUa(krU~y!y(^%|DV2J%=0|jDa
zzg|}EDhdPo^Pnm+&Au2#wwho4!TXJorAB2T;|jliL>5s?U=wG+V`1oRBl}61#2LBR
z@`6k_?e~*v2m)3FZ4vZ(X_)*huxFe1*m=ntcpJf9;I1zsNj~%!nNr^N0UZ49`3LN_
z$M^B{%g)Uyn0|hu04scur@`dArT>fH#PnJCGaRK0g0jz7{>o@&?tG?{Bz~Fbj^4D;
zlSQWTGf7j(+~bZMsEVxD-)0=Z)Br}E1Q{ck7AsR;K6d~viWDppVWX7_Jkc14SJ9H`
zpSsV6IR&igdj3%Rq+*gM2hb59XL(1P(U_cP9lLSc$>5av)=*zG`O5$KjNS5sf78yt
z{VK|vsdUNvxFUd|%pS@P490k7SZOd3<%9@0c)t!-nm9~>j2XXz#Dm0q3K&70_qCuv
zWx%R`MXT$`%+Wp_E`LbL8bNXF?HT0}rC497N9ltC%_vWCR&)ea8Uul_PX=Bt8e-z(
zau1y_9Cd?D-?6Wf%U7OV;cN`afn_eIdE*(`SRMhvusztBH=ecqC-$_r|MAVz-@=8-
z5xRDS0h7U>>7rXgyeUiz=y2TV{lb06`p)3wnM&z@0*_ML6a<G%V$i^fdNGY>yJ^+_
z?|=IHwtsW4J@a2q#y%|GS`qdg_UqdWJct_jggg#hEP)F+j04^0EV{mWBmxMWm|am{
z9KiWvf&<BAU=URaxa8|6*lAxL1x@@$06Bo>!Cx#K=U7NlCX@RPnPHLC#9wJqJggW?
zxRT+g?GY48Np+h7LdLr72*jK3PmKM3+k-Ahw`mV?SE=De<`CG*`=I#%*|5E^zxm~B
z?Q2i`JA3+XA0_+GGe22lSY>xj+&?9mCSnqr*Qn2F-=MWnjuT>m#J*b1lR+f$WuPYU
zERqnsAz9?HK%3BlAXXD*nE#pHBny(=Ogc<~NHD;{mViw=%SuVnFQ{;?Ed`84B+X%J
zBCJ%t@*#|agwA+asbpwQUou*WqVs1;9zAb5F0TWK;DXjx^dV#JX!NPS-~7u5?e-`3
z*#l>8k4#?d$%qmof--uwNtAm~%9~Rl=&NQ1l(hGU%937EiOg4k9-R*K(k*Q+#y%Iy
zR4pl33!XTehf{6-EP`7JTq3CTgAjaRg29u6;|LZJ3?pNSReJM4I!fc7Q5boXlaI0T
zrn2)2034;GkQYznK3VfY5y|XfKa^)+qWsHQK*%#PAdw+L#$>+yvEBLPe`pV!x~&Yf
z;y>gM0#$0$;dQ;;tFLta#Vg(p(~3!?@@WEJlYXh6)?-Ap1G9;L$0q74SOI^6wG|E|
zyprF|+IP49(r$bFPugp5ou>@;AlV_#DC@x*eCNYIak$9+g|maS5X=jR2p+eQm6APu
z>~~8I7Ez8}AfVy>Y#cyRR-Ci!aZ=U;NG=mc)(Yk7C{4$r#{;V&wlu(3=Tz<$8e);j
z8N4{a;+Z~gw~D~JxnEKcE2U>&U`9aZyl(U2m;yk`&i4yl(swKdu&<d9f*d=0ul?D{
z|Ec}zgZB^*@Vu98HV0SLJP3z^2M{)p7Z&~iUuy6H^&Ry?^vy93V?qiF`>Z?-!9z~-
zwnMVX>8@m`KCPk#Z52*1o>Y7EMgS!sazZQ6f$XGXS*eN<fXaA|`rvU=pjLrh_pFFr
zgyD2aU#d(NbW$D%kS!TNJSWO!GI+kI`4Af9TT*nV+>mccTX!w~gZ8hy@w6S-++)xD
zmmg3W)ypXqWKg+IvT|O2AYkCrs=U#ePm(DZMM(yy?gIRDe-8G;@c|Bib(9#X^b;pp
zJ&5#DhX=0_v|*nTpOTBcGn7?B29pj|(4-hy%59y<G$=&25GQ?o0^tJ~T<Z3W2Fkx2
zIC8cl%D7a@3K>%Nz}xX*3`|%E6t!%orx2abN6#H?`#1O48-M@0xS3?irhQ?@>+HYX
zg0ut03a`Rhrm}>29L0fR;fJw-A;6oAgTPhzV~JmsaS%rr4A3!xg6Q_YzPq&jn|s=~
zUcOsTpi8NfGF_Ch;?vz&Sok&#oPPC^V`Sev<GiGx#eH{4en}avcr}P)0WEr9^W=NJ
zz=|x|94B*^SnOaM3H&{R!6-E^7=MfpB1zywiyFp^2=+W%FF1s9E}#Al{9>O9oYP?1
zeGB*pUip<UT&|8Fd8LbX1o#MAxx#@hCi8~C7<)EfeB*gLu({Ws8Xn!zcQt{-{+VNk
z)^@}LOm7qO<>)5jLyQ4T6Z{X)tIw1^DE>^exPOu#=EY;igJ!tM{c~Htj<{=-QPsZ$
zq$vSKRA``Q=r9W;1|KO6)pW{(a={y-{tnoj0n&ymE|lp1mkcK<mK2(BRRorwbz>0?
zg#I&t_hWa#qxK8UmiM7eXn#`qAVBYB<AX9~Tuu!qOSJ!d{*e8}6aTioeBpGgz_}!V
z{bJbb!zB=Yy@9-nWXXXWt;kn6-Nu`?V|BmHK&2<kBoOkF$_iP9Apmj#x+6n{z>-fA
z5Bxlra)WP_HaJ7c`(k)M5bw#uNxJlkhX@K05C*T5)o__W&Nvx|QW<X~M@E5z?+6CH
zjJCoAC}rer4!#lGB5Q*(nUs8&L;K;+o@_Ut*xO$G*^`B@v%SJTtBhOa-|z+Yf%Lui
z#dxHj42lFp0`Cr6<UdM}W)LRukp|^Vp!lZp0Cx@yG`*&Mr01+HetEVX*xX}}{q0}H
z9$XGua9Cp@*_#O9;vTZXIDnIEJO>%>YfCKb=v6|E$Hw8Mbf{~E*Mi7_CEZVkg$&^W
zA5uaInGZhUKuBZ>BWN0fp$LpHUidF%*St@81yz(;kwuJ!B;g0D2?J&8AaiVIkwavW
z8Fin;AvP`{r<2aqhO_-qb)m&EA09h@@vPnb%vbDNFa1S7m(euF3oZ?e8tlHD<KWto
zq^Rtgd~(XCt>r$%r!jr%6m06-{emhl%)|%b#od3sZ}o2ta*J4^;FDqpOR~cMBrceh
zgm-vZC}e^FB?j=B1Po$TGo5fV!#Vno-ziv(KZc=Mh{O<EM?8n%voj8isFW#9WYjru
zqo7hPvy=_`@n^$$5OD9Phw=m3<JzNV|FRv}++*K+?ZNIyem+skhXVMu0sy!nfR11H
z5kX4;3s$<cp*jUx`E(rsQ&#ZXRF>t^5Cx)h2DDfWBaq`m3UX+I_wPv1N`0hfW23XT
z^R~{LWZ32!ta&yiN>CKE`UJ}*Fv@;%(8@rK12b6Z%ck$hOpN^T<Uz7U000_(y!??p
z^y)Wk|H-}f!=G*nKuu<>vW>$Y3oz+GsrMVS>A{r8C<7uqis4HCYTzl4PveH)DjmHa
zDh@C<#Iyc%0`y?D8+XJ8lEJw*o^Lmw*xQc2bcg-u?Q;enna6@cvg46qrYr>F^V|Rc
zAOJ~3K~%n!|B%7s6W5xF!lFP9Uu`1*ifsv;P3J8d9?W=f(k)^Th%!G?j@(|*Vr!25
za31KAzsMfs$P)U36?@s7F89fh-{_}vmebPr%JE{9WEvPt<>F-ou*fuS)3{#!h=nn-
z>a=e*X!XyWv5XdIC~>2*5gFj+y!~J})^7dle`626c)R`PpMO1BNuyX}M|bX?W8Y)D
zp70-XMvfb5nz)ZNPoppX&i>|igRzJY(x4XqPw_|K2t$+jIS0LP<cePYT`lUWfYte$
zDBXg`E{Y|h6o@Ro6V@cfkadtjOe!UaRRLR55G#a&|8~(g(Ukh=0x&Wn@LCEwo=<&_
z&zi_ljFiXW0F~v&CLHq9g~!xns@_)c7wTB|_uT6z+WyTwcJK2C?A5nkialSxPlro9
zctrzNnF|W00%$1fht>Kb0ubyqL78SDffEH%Q3gd;45b>{cjp0JWV1YLHDIz@((6~K
zd=Wq$C1?LVf@74f7YKeLOQ2a#05i&*kx?7_;((4fzt4HBC7wsAnoCP4r83Y*=7q8`
zy!XemF6f(1=&fjS^9j+jK~&~_{%23OJD>g!cIywm)aGx!TKFY_90Re5kvb%Hev*SN
z@u0v3;7$02W$a9}WdHAcyy1TtSS?-4c$08K_y`P>MQce@g<mE1F`JGJCJft~fB#ea
zi^u<@-S+sOv}a%cYbw$6D>-x@pJarWv}mD#NA~4X_BYC+v84c6V3a-MIvup|%-Ng*
z9c0NPGw<1Clxiu9=Gi-5P|~3(_ao2f6Q=R$V`RT*|Eve1vUP>ao?hx40+%8)8aRl>
zYh*IVwz|Lu=BWHpGM4?as{yp~mJP}j%1L8iTt<mkvw*Mt@>M&0`k>vsxwkzw|29Gg
za$Wdv@)2&Q7vZAhka*T$=n)j5Blgo=4Um{A4^jAyMO*GmeYk4hak+!fHo^hNqwM!h
zu%MG=5LO1*99U*r#?MTHiUL$(90{Bg6FPu}IgC#vc<jbwwfiISmt$>k%0Xk0soxXe
zm%&g7R)ai?XIPL~Ho1?TgGyHhlvo8`WqLTv&e(b<42tC-M#BA72G#8UdH?U)$savv
zfByadrG4$Ge`ojp@XzewSMIiBXAiYwXAiaG=MLNPbBFEGbBFBFbBFEt*8Oe$_plv1
zdw)B=b=V%=I&6<_9kSzF_qXF`?{DiihwS*dLw0QI{&sxpkgY#s+jEEQ*w&$T{OtX0
z{oJ8-Kj#kHv90^tv9pKTqvzKBKN{n#pFci+2R(=E*xCErv8_X6+jU>Z<L~|L_}Jg^
zk<N9S_4voO#%Irs{co-LUh{q^Xnl0+(8%X{Os7xoog4W)duWuy`rdlH``hu6zvJWh
z$F>fw$3MHicl_-A?YQ@`wWjU()+mduQ5R>|&$;~9V;>s%T+1tX-#QHWpIgi9n2#~G
zKNfTy8s&Z{_;9&=>!myGe}Dcz*}=zeY_~o3zuMD(``z|W|NLI(i@l$ukJzi)zJq<2
zRTH0?@PoqlDnBOFHSW_2x_V#ZZfgwf#xKX?c0Tr0Kh}+<SwM!i9&7*KfBB7_`q^LG
zUp)Em?DofQv~NE9pX}(FueD=ae>vLb;of#edkniBeg1e{8|@`*_E1~f%4kbx$>051
z|LxCg9g6YUmmF){ubdXQdH=YttTE(J*!QusBX&3zxxbw|1Rp+kc*HixvC&u0f*v2^
zQTH47d-szq$A&}ZJ`9;0a*QHh9{tsy+d3Tm9&_GCx#jPmEwFSgkFz7jhO8V@N9-E$
zl%I8cb^JVj?yx=d@;&V@U-;kbYft=XJMjJgxg9(E&GvWij{mw1Eh55>DTpE8$@bgA
zUy~0>zRbT_@+<WjEMyoTOvlh?G^;l4&x%!fTz0M)%j9C<Pq`p7Z9`o$?&z~LaT6hs
zrMth#i;_#NwfHB{oQg~w#E$>OKuNH4SA>;;jr*Jsf-o8FJHgSoE+36%@<h`TjT98>
zN=1}MM#pV11{9_AB|{3v)G-R#A((4E)wwo%UdyrYR4-FJEBeq$x3ypY%Lna8Z@$<b
zACB4aSH97XoVu+YJ$=xQoW89cIfc*B(+As;)3>z;&)jZDPv34wPaSMWPakYYPv6##
zp1Iu~JafApIel9@dg`|IwNtmXBd2d`M@}DX51u(_51zi=j-EMaM@}7#Ye!BUT=#v7
z+MK@Kj>eed?=!gm;OT>QH2PeBKYIGMwtn_t^FEF^eW%u+Bd5K;gKOH)pr4~>Znp<V
zo{yfv`0L*X*Uy|jXb+Bj%Gl2L>D%qdIR3gX&=|i*88}Vre%JDT@Qi;SWjxYx^bGon
zK2EK9cG(53&fn>=?^Cxm^b7jeG>kO6tVcN<J$<`9c=~pG@Wrp$cen1hXMXY>dwunz
z!p^7tAPkZ1&tTNBzsk2qFU$UD+8_5>`sRrEgj5V~lRlMsP+#Kl6TSq^@Zs?5#CP=6
zjax2Mlg}$Z$-%j8YpvNEfA<r6=5PPX{_6ap_N|w`W=BsQT>H>y|3^+A3_Cb_=3w}-
z`>D4-;(q3K8GgC;$s^(S2g4WLo*h5ZZ?)6$nKdRHY!99pZFBUoqa&8Y?^E=9>?7zp
zebD@`_u+j$IQsvQQ{d;whzE{e@ZZ~m@1v){Tkt#j*V@NN-x_`K!81Ni@M<p4^>}0Z
z(}8I*renz(C*Z@OlQXx69w9fUXXJmx(<6>Gz=3x3%<XpU>^JPO`9rpK;kout|NQ=B
z^{TW{Hu~@de3xZgXS@77`~D6=n&pOQM7|nGPz8UP2SJ9hQS^iM`W(|I*k$pY@MhXp
z7mN6>wkg_X`U!8SF-o@@WH2Dnu>QZe&BCY#R8XV)!f+9kh#)mREA$v&t3I88sXxSo
zrhoJIDIV1VO$H^!&|sFqzR`ckm^(W1<cWG!A@@!`WQ6kF%4gAsb-&pv$`uRgyAS%4
zTwsu$&S`vlMr9X#bn;I6sq|U((~n))lkin6KH`5AjdUug`o>KU3JUr|4B-cA*PQW|
zd!YiquhM|Lifh@nLVYG$^6^XX5!r$uk$q+B<S!h^$QULA6}oSIzfMPx9=}R^7FucS
zq|{6LB|YN`@&CvDj6+>;D8k70LyOi4dBg{(o70nt{vIo39F=DkV28cJ5LsU#JGNn!
zz1thn0b7%Px@RkWl=dyQoB0*{^8Y|RqR8MIG&%o4a7|~Y&t8Wyr-i9yyRK!<c*=Z<
zOx314eeu224}HftFnG1&p5H`s$2X|~!gRuwe%Mgl*8Z|B%7wx<_%Y>``$*a|xnAj;
z<y`X1vTDIwmT@&kNO3flcwsWZUf+3i;sP|%TNWP4B@qkSeEeRpdCV>XzSKu1RWc}1
z2>R@lOEikXhE2iPdkgGo?G(_-bV^Y$q#PtW><NG9L)%7cmCN*G%=S>w3|Z>)GM>vS
z{b))A#_nxTMLGpi7RJl~ArnICvjg&Me_)tED$5!4dSH{~SqET!5Y*|Rpo?ij?-)01
zM05!H;(N<<LiA+bObF2lyTHAyvxyG`6a(@M!2S7mBU)H4&TE$)W2qP815gZqSQd&K
z`MQo%@dtrJPT)xONdVmSo5mydqn)K|t>~|(QMym|r8JtzwbC(cD^Ea1_Zn%q)Jq|k
z@Mp4*9osWa37fJmDjrl0cy^L^R&^dH^{b%~8605-O?0KLNT1=HOeqnR>?Hn%Oj%$0
zypFHFhqkSyxnx2YmEEb$sEs)#Y|}a-5u)=e<4R%MZWl>cStFeuSvN7JF&`|PX<Kp}
z%hx*@c^d`b(he*?ulnoc+L}?IR~Y|<!{@<Tv;MhhC&>bVaS4GHcoIWslbiThdHiC6
z5@XIhv`RrlGyWS9jmTM*&W>bCQ74ODk)1qMCZQ9)ruv%xkm-@sr$I+Po$g&C&_j|N
zJ4O$9y)1l`4&>Bsv;N6gf>PH}{EX)?M#neP&tNt3B6O$cwZGmcG+>zqPz#HLyh)0c
zo>Vq$qby5m*H45@LlgO?$%161Hb=&!ba!BDb${GvSX;7C)o_CzQhT!22qJgjneC*L
zN0M*Sh8QT1Ej+OhjfK_80sJPpC;sVoZ)bchMSW}xlYFu~t8p?dM841qj4SnuXSlzN
zG1-pEzVIwPljNVrW;&rt#$%e`T@IlOm8Ht2m$Ucfik=LR+>R4(ojkK&jkcs1OvW5|
z(giIY=0e6bHo3yGOgcGF@#UlPc$J-s&Up-0uMpMQN>f@wcceA7{Vbcrn~p*EjDI#_
zH1W|AU5r_kO_aK-ZQRgTa95qWEd(jtmdq*u_X^T`1Qy2Msi!HSvS#bw3Yx?)CJhlp
z8q*rLix%uG^xxozpJB)F)-qEP@5xBA!n%9lN)#-sHRdXV1j$W#PBN{WBmhEXZ6!V9
z2!0<38tsBUu{L2qXzk>|ys#YcFuD|7CO#{>Mc*Td&Ik9N^+zO;y1739XZKt@l!3SS
z^w%>)vRzE~(|s8F3IHaN5bvSiUZx%Y^gP;-9W>VjbEDm3LUOxwQ&T%*8E`wMi6^|q
z_w<?@wCbz`WbU8nOg3jdEn=&kJ>yH#S8K|j(v&C8st;)=I2NNO9LG3m0mhR|!52gs
zOoe!Pu<=^%2Qnc&bh=|jLq@EX4jVv6{6Ba?2dqb?lzk?R4gPw*<Y|(R@W(Vx*-Mb5
za{v~J>0b2H*;)8?Z<{0+=1Xa9(q2T34)__H_{MUy=n-;eRmYe~(?nFZ--!=+to$#v
zPyF|?RI3xi5}Fl03%np!VLTcbvQ8VMY<_>%cgln~*Bz7kq5A^<WIWY#0nXEXN7u;~
zF!{1Fqq+9k%@mnVlCsb|$#<HDVpQ(Jfwk@@&m*;brsWm`S+;L|mIAR}N5ntldLN{Y
z{NXuz-tS3wi7%H2p6n)kVRh$8sRB}w&y>A^hyXN55_IHo2}xV-FVPX)CA;eA(7rgZ
zLEr&krhcaUMQyO7mFdM_o&bDOD0m|NImoJX+~|HhQ%(M2gECSfubThhqx0<v89Cj>
zeYaT&U`m;@ov=lVef9bc$1n_*p7F`8!i*e<u{>pAn`U$FC;O#E&-y&%+QO85>?z-3
zyH))-y_F4gvNV?I<XD|-onF`=%?!y_#$R%w^JUgKcnCS9wk3~&{@k|FXuxQ)DbWqv
zTl!vNF<ocbV~kFot?DO4qc#V=9P3Fgj9>YgXg$h(%Ku0mGG}Ewkcp|nmaI><VX||l
zMFL2g5Bd45bJm&mooVf9^XJ95CfarUTY4_j+S%v&=L};IJH4@oa4ac(Lcr7alL51%
zAuzIr-;Ml|ggcHQlQs9>8Iz0$CWW6yBl%AwajE-f-dF||_)g2r#Z6#IAh45T05n>(
z&qmq(ZUXw?s~UrzjW$Jp&YMmeYQQQs<w4q6(mMe-^PKn#E9zuy_!1LtraReDub)cx
zY=^{mtH19oyAY6qNMSFXtkEYasNz#?ROyOt<vAfxbO3rG`^2-(BE1aqbj1DdB%>IG
z#Rj>oY4dv|BbGfe#qCudh1@FrRnLQ_kj)Nyh3p9Icp|OZCK}UtChfS7FqBHxp&R*|
z_!E;;EhhOS-KTr%k2wfu9kR&~Q9b>nkKXq%zbJE%oZ5)kF>qZlgr@AEmGqW$-6d8!
z*?Jo>QE5klov_mscJ=zLu64Fc+Ldw8MgM%pf5=^V>1gic)VE=|1fPW=_Bx_IEsv3H
zB<VwVE9jp3boR$`G?170Oo5vVChS&p?^iM(neS$826?DJSPBIJ#^h5=>jW$fK>LJ~
zw(@&9IWt25h<aii-7gFdyvQme0EcukA-sAlqBHs@rG&zQK{X_}P-j#^FP;mYvu*%%
zstZhx#B0)j{A$rS{*>97XkCdS>&&kyZQf`3OlKQvo84F$l)6b=+n4%Ia>|a|FA#PD
z0@i`jUQGB?{EJ@LA2om&uZS%teTUwAoA!SEZVo2delSMYPjmW+F`6(P?^vG7yXY<J
zDovIt<cn*a>?iH1nt;hD;3QLeRv8HgNwvwoIWQm@(Qg$26VCFXa6>aiNltA0HC86Q
z7q-rLkmbnoA#7or>|~HyDR<efI-1k(qVGhnTubyfZ6kfR7|)`Ej`pkrAFK28ay}!u
zF@J_W$zIU^_#eyzmitN9F`UBDP8g=L6}yEYlyYZzOb4~10>O$-$7&$mSa?qLJ3ZHV
z+gc}8a9)k6pKhK^^u_O9MnVeMtmR4CaJ?3?m_bKy+-#&RsP2?SHc}~(O(+W`3zhoL
z3aJ3RSB?w>fKI&$ZP~y}gM#A7SP|(ao`VQBj@p1)Q_e)*J)J7Iq;v$aB8XnrG->Gs
z({v0YVw{E!ywH0JK!twMm1{8smG#;8A$^gZhQ{)JeLl;Bc*}C}=RvO%R7{FBji3rP
z)6<pd(`!k$olF$Qgm?Mg+f+%j^xN4phf&@iXi~sYeS|zn@&QO<OKbzh^+eC4+~x6#
zKZvXVX|c`BM=8GvJI(sI#3#w3mtT#+N{G|j>7$Sb+jqyu*s&8+%OdyJ>i#NTi2jNG
zO1b$BmHmi&F+sWvq8&>|WS;w@#&pfP?<5QDljM~868VL|3X){;RNQN#yWV~Zn-yQv
z#h=;{p6U9BT?k#h{_9|F>U(b=BEf>zJlAI0n5WPWkCB`r<61#ulB>4k|10TYS((}@
z=+p6nlTJ1&SH^f~-^bGD&8*F20`HWLAi@QrMjH=wgb)+eHBofOybFmZT*KH7K$GK+
z&vuifMhYshXvZrR)|E_pqLy;yw*z=9og(<4BhQ@OvxPGu-~**W?S%79uU3qS&vMSs
zggr3moAX98r~r!uAJ3MuDtQM$3eYH*oeZ;c0<4tI)C0z5Yn`GM2HTi#p^te;dLak#
zfi&19+Z0DfJ8H$YLC;J)&wPMcrZdgwg}pO>d9sm*Nh9IgJ4`G>hhS3yq{O@GCX`e3
zt#)5v7OPft$i(`6u_eW>ph#>X`CNWJ)0=EiY?2zt#Fj8g`7Nxolaa_%@7MZg{xZX%
zrI!1EDpkg6-<H3F>gbv16<fEiZ<TGLNqiCGPGfvEKlQp187A4XUGdoDmy>j>yo`iz
z)pM<vL9$(Lmh{Y1)|5Pm6H#I3C&BqzU)`J^O+x)@dqm&PG^oAkZ|1%3i`!~+Aa<(q
zq`69myoBwL+{hT9qX|1}ZG4YjJY=PU!X%(j%nJmrJ!5e{39tiW3sF_V-&xQqP!#|h
zC$+nT(lY&}!f4{6AVU@1O}?by{1?1{R+lNuT~tvSgS4SwgLRwbD+VHbmH`?6W<L5!
zHuIMB=FhgKZPorNy98T>tz@|-&?DL)U($_Cu5MR(@{P8j1DK=oOQRNcmhp<{E_BA@
z7BZ1<UE4JE=QjCz=EaqfC$9ixr+`S;Nx86vXgDDsen#cdI-5*-YM?4~6#P~^B>U`b
zzHy%-KMpi8j!egDuak04{Z0dTVo3FuvBt#hb{c=;y7McTz_hBovJvE9i|OmIpXg*c
z*PryPNW#SgeT5ui>|{sGu@TKG^GRQUolWVD)YsV;>24fe6u@>%JP7V5d<rr82+mi<
zyU>8~lYG_wm?mjwJ*{CItz}<n@;BjWdcM;=2`X!hg2YAxCb6=~^>*zvgw8`hOpaKr
z_yc$}2%zL4(Pm_jrC+9NJ@8s<&AfEm87d21R^h=!NJE7|O6gXkg>Y--xv+bM2m_M<
z2n&JSlTa$<Wf^3e^xN2@&@#o3DsDn9>QqcOWCB?m8U`O@&^hrOo*i4qSJHP$^O{}_
z>{zr;igolC6Hqps7IdLE#%$4$6>{z;m?r$_IC?$HU*v!buxY5ew^;&Fb`Z2t8uTxl
z=ak(rA*72P^~^fp0M==Y=a^5LV8p(YT5DU$a*=V9Jmpy*8m7?qCpaVQ_561<`<$4r
zXWOax8cAoHaeoLshUj`51-~Nj{+>+OH7(QfOTiPHKvN>Ke~501{wu#r_b?v?{l=4Q
z_P4_J$Vy00M*RejWYbyqQ*@FX!f@*6`M1bVe3pa<nd#i5{Th!+eYO_Ao!6Qc?x*0<
zs2}f{^dT5XT9Dv!%HGDF64pW=Y-6NPl{?!f%Pq9tT0w)@Pv^VwzYfnqBK6<dgUbdq
zQ>QB1j-MTL6yq}0{5;8D^ss|1Cc6;aO1gl2*S}}%h^@h?O2UQYB=7{HtQ?ulL!l(g
z%4kcWiQ+qf^unYo-Joo|5V-Kgav{a|z0S#LfKV{EBV!6x@wJX`4zQ-$p)a{MEw>n-
zWi(C0^yCNm$#b3jnRny+{dgkpZt<X+n6Q(imqJ$6*x6|kU{8+az+gL!yVHUv=`3hd
z+nSJ*14*Klf!HTo7iYPW^r5m$3cm$*k-w1rWf`!(J6R{0?PO<D{ZHye<j_q<sc)u#
z8vk_0xdaU?x57U-$fo`v3zZu^)7z5ziPe43c!gXqp`#@GtYg)7zhEk9o3NK;6H|O=
z`NVI2ekUIfJ=4Tq@%JHh&4iV{ekt4<DS$wG8|`EgdS&&Fd?sF)$K2P4`H(P5nHWfE
zkgtrW?MFGWzd;|Yr-IguN0(?v29oZpL|jCAKRiV2zq_`R?ARu~f9G4DXXhc;RC#52
zVgM`kYmHx+oSa#e<N~v<lNLjeata~DbISCDBZ&~uhpqo3hTI7$F-lHg^ncVZl*WI<
ze6!FXi;nILM$m9=1Y>*XNZOKjvM$u=VU7NXjyV}j#dyhRTm}{$;J5Mb35Qe}bQ8H)
zesIvqN%TAA_`Q><Ec|N;oZwc-1#cu_bD5yuYFy~W^{QrB>W%1Z@=ON7<_bu1Nwf%P
z!pD;0v#niXBBC*y_8YXa+E_<uq<Twqs;Sp>nCL6rBbQ+xXB&1iBN_uZfh*RUsU8ZN
zSf6U+1^rG<H7O9^q>G|Ip0pa#%BqcKNp=aBD!FBbWO5Rl#3el2+XTpB<4(Vs?}~2X
zkQ+HIDsQz>o+GkOG9J`=Ax7E8g)RQwRAww+5;1u4|At91<Oq-X`JH{0a8|_4x`re<
z3W4lYFGhE!7C}?`>u_D~hpp|<Mr@x}6>YLT)85;h$UnN|vDos||0m>`v7PSbv5oJk
z+{L(v)zBKv3B8?Vo?y4FHPb+^00dDwn?x8U8Dnn*tdL~*I~Xb%Bnx)BJ>3`J2Cd$o
z8*9-gGo{APe0IjIj*(U+nHEvP1Rr7i)uc*OTAs9Gz%B?A`Ly6)@mA&6^V&Iir^lc<
zXl<}5YHLh;-+w&Z$tg5Qv|C6lcu&kppj8DPkgHK&we2zL_Bv#J>9b@FJa(f&v`?p^
zoRoUnA(?`fDZMIhEnn*Zuxq=c9kU&R@ah>>kkBrZDKVgO_OT}VEqJZz)=!fA#51xG
z5+2e-5N4?gWO>o|cwh$|V0@kkxlj3zcL91Uo>g5e*DMd!NtRV!XrPJ8Cg=b?+E*nn
z0uQHI<s@=til=Q>fxong2q4AAR9-Ag7Mtpr<v`-~Nqk}q?MK?gGf6KPi)7T{51Xai
zXs?&fCX!+$xPTpkMD$znNBR+;Pj=@rqIN3#xX{^BHkv7)4!V;~va+V<aEwn5+1WDl
zlKPmWDJ;Omp18f(0b|3gXBG^`#H|L@6S4z%lz^g>&eSs@R8clh;3H+C{HZYup>;I*
zwL-zQVpTSkBTWHngStW~IUuU!=EO5FS?Z7Fh&eRV`XOZ%_j{vcCr*4rk0evrP?BYq
zx6?{c!bn86m|{bcXF+d8qsT<)qUTkwsw2_$l>UsL--(u>AAcd^n$Du137y6OjV6@f
zZM4Du*_QswIGCs_8#LVGwpD+0k9BIf9r_j7@NDmN?Bo|LH}N~618PkHg2-+Mxyv}2
z7J#<XPTl*JWK&_+X_8=2Pqcz(@%g?@r<aMz%yqysw8#KG32iVy)AlkJ^VG?6>Qg)m
zHC4}O0OC{?0a>Pt`(qv8x>#s%OfpaN$qsyTdzTvpQI=F>sSg->Ek{#+8x3QrFVaQV
zm-ImxT#nh<Wv%b*Gi97|N&ObIvY$A;C3cN+==w?XO16hA&#?~{By46vFNuG2nf=A>
z!$512hs$ope5FBJF`zKe5j&|g^yMwc97caKB136m!^_S%DWnX7ogxcEDHLEme@%ou
zWq{Skf@iwK3iBIb3^WGwL=$pcW?uk}(M#rmj70cMhQiNb&Z&6f!AVkzL}+K=p5(~R
zMFtH0vy813^jtz0*>1CKbdw7KS2wZd_IwSx4mla?t!ZBjq#Pl0zww>z!2d7XF2vd5
zJK0L+vjTD>-UXm~GV^4>4@R3(PNVFng5Lg_vTevk1F6=xL+6F>GVj!j;ez@an;-iY
z%iROBuJIHNLVNVsp!bq5IA`s{NoJ}qqF-znH1e1+OgBy;`(!hGUol7RmmGBmoeJbx
z#e2U9!kF29aUU{}vBUPb&r*-+d)KCuMbJw0cQ#i%oBcg~<hh>q{K+;l${qyr*G4wk
zFi#Wxt?g(dBKOcqN1y)>@~CB?><Uh*eiGgW{-~`H9mU)u@&%*lRb(if)Ur?5RrMu&
zh_8~}7z-1+nxTV&2qV_jaL`E;V~D0{#ZrRv6v!1HFjN_P?l(;aBAk|#(kU-ZB(?EP
zDG4}%A=3D1VrJQ^7+LJX`%cb4Y=Sn^@l^*?vMhKu9o~)Dn)KUr(&0zhSv$T+{$N~q
z?46;7e$r&he7P3#WLJzqsw(VN0OeBhbK8lB`~Fg2Q*?#IIuodUA<=~Ip%;VPGUI8?
zzHfk{KAP>YmJRenHUh3PZ)$f$yqdBGE&}3K@Rs@~LCJW|TX&zRh2LBMd==!RdwKFT
zks8_%4u@e8z^g7gKPh!(`V6sAwMjDQCvg5at0MPe(pR3jR*L`t6aq;^K~$P}aVvd=
z4oOa3e_4jwwx_Sqwd#O1&(8%bNiZ_uPcBA8S1y*(r_wWd4r9M#TMzyM1F20#TTre2
zL+?EuK1P;m(9OD__UNNY8@1g_*vZI~if_CY|CgR29p%1Q2YK<zb9qOv%YtO7@+7^Q
zv4}d_z@~oJ08InW%r!j+YHOP_3iPaN3=Opye}d>}!-8?ic1orn6o|C0KO$5Nwl*kc
zyc24{rz*O0G8eBBl<Do2>`m2pJH85K6CG{pK4}U3WI)I?O&NiFg1b(~?#w|;c5E4A
z>__BjAy5G{`rfT(3%Mq`l3e0)p>x+2L<@uA?mS>X%RE*FT6gL!FMmP?O|s7PrROmL
zl3eriEcBl541xZ8B+UDdznQMmhWQ@oG&D->JNdvKgcsHY$<?w9sXwDfajgexF;SIK
zIr)Mn?m>Dq<-zS&>^Tigw8dDYMAj$d+Uwknl;{+C1tY|^q`w+F_;0T_mRm(*@uA?O
z4lw9{M#eNT9*+x5f-R#b9fxHwfsX}`lk|4qm5Xd}pwFK%x)o!Q#fdIRqcXlRX$kwS
z(KQiL$Y%Opfxq(MAm+o#l6Y@<jGbx7ZA!Vr9>gAf-eNWQE$B8qm)cW*76#bQvuttP
zdo@>*m3F-J*T@#f$CE9w4fM~gzszW0xJ{+Je2Yv-qs~zfhIoLZro>Gb7}3()aNC<w
zU_hekg12}8N-6Ir@=9T4CADM|ArqZ6xKlNjIuNU5UMM{H0@nNY&S1OoU?5~^=z0fW
z&(~F8mApDY?&TPA()%j2PA+U8+^3Gq&uCi?AYffd?!sSksH!dV!)#Qt1V|WLc&0n?
zW}t*+(6ry^$oN8$Eoc+EPO{ccc}$|cwAuO|gj3jdXY(}osm;M&8q2atd$;}ZI@ClU
z%@;{VVINH=iu`dskerDNTFG17C)E|U(dkL##&%d^h{`TsV}{9UHFHq(f!}zXpD*R&
ze0!S-dcvY0HL(uiDfn0W(O`%u>*SN<JIZk<>=l`(c2oAB^{z4rNeIoL4Ysm_Y*j8{
zhwBg9x{OH*sd$zCRAD9@Gp{W*6*cts5Q5ing(laD1XKRU(K*?e@DTn-_DVdJI_Z42
zvghe*Sx%}OlF`^m>@KuJ&$ZltlRmpeh+|8VV;g;Arf$`L+;TesOaKxo62uc2;zK5)
z{WWHifiVXRSkXa{I*uBHbS--C_<}JSj0=1^Jv46pk$bs48@%cu$u=83KP!_Ho{h<`
z&`}<(qp>jfaJ(>B78T^fflr{GLIUyC8sDg7So47YPT3Xcq0VVSqZx)kM0F#9JJV<S
zy#)5^Q`<^IKSuHrdkmmrn>VIv!sbelqPC(>z99T6O>Bz{SUs>#%c8KtEI(#Z>>-{L
zQq%M9w*rcI#-jNYE%85iU$!~nS7}lHSyt$PzV-U5_>5b9aDuk1r$*mPePr8FUee@O
zO+MYVM$c3e*QDP9V_HvZfn|Id`WCuJLMj`|{FwA;S+YW7rjPARFrDSddWV(N^6cbb
z^prf)(%;NuOTPoFr}PszGtwb44ywBuz8gP2rq3!bttFqrJ)uunrM^L9_mt3NaxYWQ
zHsmB_EUWy7F@)Rp_Tk;@{8`8d7*XRV)6t}V#$eTLYpvNVUjSj*K$M{n$Vhe=b9@DD
z?Bq0esxY$9cNlX@*xa`ZD}y~*LT8jDi5}FNi~)Tn`9wR_f*Oh%Fd1$O8FqSLxyWxA
zXB*|NypnuG^aT%W?2UB6AgVHt-jYm%wrPN-;j&Su$w~p-riKi%;A@3`lU?<CWm>H4
zhaNDMlvQmDoso>h`6pyynGTX`Eh~Ctf_}ddHp64n-`s!n*V8EqF=}fODkWZWA5Kzz
zy_Zh5rF2)hmFrAfBZ^p05(tzu75Yv_Dc3GxA57bn4Wm1Lh8Q&(GwH6iu+`|RrU8~{
zxdR=$aeI~(WZ3gT^h4&^?_3tnR<siZT~eN%ZloWTWM0sx!Ij29(|pef?4QYaYx3Rw
zBk0OD*Xdp7%W{qZuOWa&$qO-m)qOm!<0Y9!zmtJWvKv$7)qS(o)OMffka$wAXL?0P
zF|QHNg^x}y6zN(QFR<|@T14iM4AF0a%SvaWhvY0{qn8+H);02n4TD6d1lVCT(Q~KR
zPQXEUZ^Slrt^ZVQf@nsxM%okUhGLrwQJ$F`TLCpIa+FTG-Z^b;&{Ll#8Hq_b=YH5|
zpf%}(K(1On@MIW9*XtL;O#BfbC;DPqCJWj@=AzRq@AzM)iX75;V0ol#mZ>qaDw&uJ
zeVfXT`Ve|{uwjaZ3Ombul=AQUBbD^QLXuyl_snbkEZGBuQBBsZqaoY3>jG^U;Nt0m
z?#gf3ZoRDpY&6^M(5~q?Q#J^>W89u@vEk5*wWOb37xD~+Po*4*R;7Wkyn2>sb*${{
zqzV0M3u&$*nq0_=C7?rB%}E9(%G5y0{}Ru=Zd5O-Yms~Z0SfdslJGpsy7DQdsUJ6j
zF1Aw_g6cfPB{s=pLnHP0(H(tPnp@yK+Y(ub(lj+z#)F>ch7npPftqf}kDVV6k&CDt
z1+>Y=3fkg{cwX%#|DEJb=q=>a&3(>e@Cv5UPfb75*kNg#__uDuSmHs`4(VP$h%-P=
zVU?i4X!xlx;gn4qOCvJFV1!xjp8|twf)io3AR#@B_F`++_d4?5gCrSAAuE!1G;?`{
zL>RO)U1{dbItsU<uprB`yOs>N579z_!H@H&Mnj~jPQ(EUc_|$%hY1<bxPAW<&ceL$
z{Tz@55R!S6&t{s1T-QI1PjaE_=v_ML?4{tPwPK-wnOpqt|7+}Qmn+Lv7~1du(Dwat
zH)u)VlgZ5K><=4+5a6V$t6LbUWFKY?*$4oajLGd&3lno_(gs1`aT|RdTIx_tcoj-x
zf?i)bYh(2-20@{?hRe7jHa|dy2ABs|j1Pe14~;o^2#r8D!n|<^A3Bt>=V3oP7Hh$B
zxBVc1W*|&fx8h-NMCMY*j45&^{G-=^LvX(K+thF7uU`M)aKts$FYc0emo*HVe%9G)
zy5F_0-2Cwl{l#iJW`%L;dcK=B6}ab-+*=(l{jfcPujGE7Z9c57F4{U5kvK1uBkHyF
zy!m37e$DvJo>6@7{1*AR-`~2O11bby_*2lQ85h9gbYw9!;O}{oorCH6L1_C#3^(8D
z0J_BsLK7?TpUYtczg|ds;v8DBqLjtcH|&;zRbCdMB%fUW#a#flftYdo?CE6MGdUKo
z$*I{CLXRZ|&+E{#$M>lWF#)mXMO7zcpg8q)46zLaCn0sa<)u5k9FLlK>KN@Ybb)5n
zF(yZrv%cw#jOS-#f34e^t>q&!0@Y*!h)47$$KVMkso*W*u+$d-aMI6D_&erL9J^-s
z>&Y*|3qGaPM-GH9c|a_|eee$*20wWK;&t`TQCJUc6u&;0r&h+Eg+uFI$m9612HeA3
z$F)8w9i!FKniI!;l$gEG>fOHo$mh0ZYB4a6!`!&uaw2;tcaYn8FriP=$^Y*=o4h9G
zl~biS(EQ+CK94M{8p$6jHlB0;P>6AY-i&=5HQax?YwfWcOT~xfBe8L;Wo%cT?mho_
z0D`CA1Z(`k34`?a0)AT%J80T@G`^XfkAo817sDC8qj5`vN|lSTu5-W?k+-QUdp|@5
zKP&?7-x`F5z;O&vMDrE?&8LY-_w5T}qJJ%SE|m+HP4Zgn&<M46@b&#~1);cL(+bF`
zFYWA_)U(C6@#|Q-u@ytm#KY#y1xXtEza4wprEO_@YubM_$fz%J+W9g6=OP-`LC5hv
zm>=xpK&W-$UpIj{Y_t{Tny>;(XtBDle8En}=P_>|dlz+<y-M%mx#dj7^YXcClzz#<
z53Oumb<Dw=cycaFH=FLp!Q)JO9yjw#AIPn~#=iGQ+tjGgS604(;Yz>azU(w{L$m9%
zZ~b<l=$W_JbB;|qf!Fv@-vV!0=W~8bFro~6Gp3aX?#;Qb^-yhN%{d0)?0jyxmbk$3
zCBExmITVf4<{;<ns-3_gg4(v)rsqL3Z}P)fdC2>T;miHM4(LA=iyt;*yc~8hM6<#o
zYe0OKO~GsiX~ophJ|kfyL1WY!o{12OT4J;z$mfuCrsd$Ri`)g)SXu;dtG$JD6Li?w
z{7J#d<q)OCoEWy@@&lXag6sCd?Zv>non-j+0eooo*$5CSH4wRq_bX@o&U_iq!^Y&I
z?_fU~Cf==l%x69<(a&c-H2@degU<AUJWd^|ZV#cpv8yhStJ_~w?}s3@u5;np3f{!K
z4#MT1`P%Zh=myoXamk`^ep9E4)f#-JwUg?6Pdv|OGW3eCF@g7c?iheSK7S3U(|)8g
z)C8|Ja~?Ll2a1-8;WcNHALnN0r-SpZs8}86h5dWiIOIq5Uys?_n3p@SEpsPgy!933
zK^wKS9gvvNbiFFQa_`8^GG|EfKBtUFXqb8!zaUt1rnN!f&tC=zT;*V{HR&jxUWX<;
z_ZIS{zy}ABbN1Vcvi>p#s{@Ipz~QLwdOe6P>dnpRXYb!w+^e-D)UVTi3j$bLjwrf}
z%MO_oK#<ngSU)Lqo;ZmHE;h(TBwVu<=s5<0?i+)@XVz~`*=aX9H<Q9^@osh&%&gk6
zhKGa8=V8Ygp6`MeEiY{<4+Ecbb!a06Ca@>$ja&{}o6md>5@|!+wLV6AEznDSRqoc>
zV>qyLKb`n-#5u~^sy&Pa*sFd$JT(3aA+g5rtUfZdX7_1h=YRT0ZRO#rkt^o*cLS3h
zP-d>V)`+n>6OJ*!{9b7zrh<~s9K)fO;0HPEco^^CtM@HhW6q@h`J0!QM(fgg_aA-`
zv*iu>-1bGzSG^;v&z!c;!piI_hdrxuri%R~PWojW14sMZ`hUcDFP9R_oGW^MgaS5~
z{H7i1ukl^uKKsfapLU;|2+N|kk0bNdsX?qu?bLJffTXPYc^_`WH)B8zTM&O}@ZSEH
zF&MLfFvk8A+XNB<LIa3oPR!!UM4+tP^LyQLqOaJy*}*@)d2(Y7#8C-80$&k&f`*O8
z#dY(3=UdRH{XDQe3x2nmg6sy_aeg+sA+9`X!Ip;_)F%8k;jzWb#5bESht$xQH~iUv
zZevev^?Hj-n{6H5Ls=BP4n4-5Fs?bBP1>=Mx5GWD$8D|o9ez9wi*^Rr!fna@F=!Ty
zuGsbcsEO6y;|I+7tg#;ZZVkR^H31|RCOG}hT0iNh^2hzB7zFgI-b#Pac`ZKJqI>yu
zEk><e{kLf#pQ-+=4o7af((W?sMotFTR^udw1K0c=|8725-^}5XKk0&N%k~+2o6Am7
z)JZ5k*8~qo_J8H%@nQXUUnf??V=CeOxyjAer{h`sc^&rL8@-YiF%fg95x#mT=T4`|
zY!Ng0#VoQ5@6X<c>+okhUGlQLH+>nuk!#n;fjyx9-rK)*n}zoCq-cU(5{1^#>~-O7
zi8P^`0Bz{*19Ay`eq7A%tG_VxJl-UCknI9u)1c5g&P)u=Zus@h2dDkvKcR0NSVV(^
zJ`Bddnd`t99@v_-nP#rBruAn<RCsQ<Q9#xNpe6vila~kA*=|Co#sze$>xK8JHT8o)
zeK(yRqrIO$ay)$9Wu4Vj=fc-{FPL`YbTtQ2J@oankKDXp_)cEYm2J>v4B+@x6N8&o
z7p2X6=b;F7cPOohY1jq2y9{jPkNY!@<3`M;=_~ZvdSj{#)4*xX>KHx(8Tv3zXYFq>
z-%(HH+PE!ts4*>C4tB0Z<B^Klv}(0j_>?&<S!`#{nws~T|H9Yw_1D26-c_8Hr-r0{
zyxIz$R@{foT;pxS?#@k%fsgtqo5~&k6n{*iM7nZPz7D{=bkl&!e)>(DGY|C#=bo@F
zbusz+^9R{~P*Vd4qCo7ucK;Bj9G^Q0pCB_}u8*H|g^Bw`Bc6e@PCfl2=>rS)od@Pe
z!nb5(!C=ECh>rUVdwKW_Kg9wr1Z&2Z2O8pvTy!e^5NIMBe)i#38XG#ZgN5Y*LN;BQ
zT1f!8#v!jI5gIYS-~W$hM853PjW46i7)-}}uodoOodrs5-ip^63U%Ce5&PGWOD}df
z!{YqGj(l(rf!n&Wf4~oLBTVV17X26~ug|kq$_MN+w2Fmzxeu`#H;z;FdloL0zvNUp
zwhG7`FoA3AmhWbKXctKSgI(s#bx?en?#i~=3f*d*;hoQfo$M|BdG?Woml><&`u?zS
z>x+61t$7VCc7`^+w_7ad+C1Q4JP!_DTX+V0#%pUFzLS!RJr+agx;ues?=>$BgS|7g
zVoq4SK6BIHSFWK#a%ephT>t*iM8;U0+<>#Jd0<`Z?D6p&;QNQ|Upd*txHn3Xf+0Gc
z9HmG>geZR{<l2Ek;T+q!>>Gr>NitGD%n`GQ*n}1FP%Oh253PSEuI*Z~ov&H6B#UvK
z`7F43V~QO8`anf_(5WE+XMfrA1HqQlY!Jv<qnN_)c*bG+<A96ee$kHNOHRqlU9{l`
zr;%v;*pitue?D}1WW{kfr@tC<<fi=O;V%zGz!AfQ*UFKHn0!w>WhZS9uHmEc{~8+5
z-aV3!9ojmq1*>Vx@^O8T;`O56jequ|ZAks!!!vhLlSSB7y;)s>-+tu@GF(kBc{Q7v
z8(a^~tXkw12$L?O&qA;dKHVz)guXr2;Sbu#n6aCEE%(J1=_&DE_o=m_kM-Gk{%&R-
z>1M4ra%mc@OiazS9;7+m)s>$MT+hg(`0hoQ?-5roF9P%MYk3+RbN!MJf$83EYZ3(D
nFrbLd^F5y<r~A9r-go~$&H$RPX`X^J00000NkvXXu0mjf_uwJ`

literal 0
HcmV?d00001

diff --git a/docs/appendix/examples/index.rst b/docs/appendix/examples/index.rst
index ca3a6251..58251378 100644
--- a/docs/appendix/examples/index.rst
+++ b/docs/appendix/examples/index.rst
@@ -3,7 +3,7 @@
 Configuration Blueprints
 ========================
 
-This chapter contains various configuration Examples
+This chapter contains various configuration examples:
 
 
 .. toctree::
@@ -18,3 +18,4 @@ This chapter contains various configuration Examples
    azure-vpn-dual-bgp
    tunnelbroker-ipv6
    ha
+   wan-load-balancing
diff --git a/docs/appendix/examples/wan-load-balancing.rst b/docs/appendix/examples/wan-load-balancing.rst
new file mode 100644
index 00000000..7093defe
--- /dev/null
+++ b/docs/appendix/examples/wan-load-balancing.rst
@@ -0,0 +1,170 @@
+.. _wan-load-balancing:
+
+WAN Load Balancer examples
+==========================
+
+
+Example 1: Distributing load evenly
+-----------------------------------
+
+The setup used in this example is shown in the following diagram:
+
+.. image:: /_static/images/Wan_load_balancing1.png
+   :width: 80%
+   :align: center
+   :alt: Network Topology Diagram
+
+
+Overview
+^^^^^^^^
+ * All traffic coming in trough eth2 is balanced between eth0 and eth1
+   on the router.
+ * Pings will be sent to four targets for health testing (33.44.55.66,
+   44.55.66.77, 55.66.77.88 and 66.77.88.99).
+ * All outgoing packets are assigned the source address of the assigned
+   interface (SNAT).
+ * eth0 is set to be removed from the load balancer's interface pool
+   after 5 ping failures, eth1 will be removed after 4 ping failures.
+
+Create static routes to ping targets
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+Create static routes through the two ISPs towards the ping targets and
+commit the changes:
+
+.. code-block:: none
+
+   set protocols static route 33.44.55.66/32 next-hop 11.22.33.1
+   set protocols static route 44.55.66.77/32 next-hop 11.22.33.1 
+   set protocols static route 55.66.77.88/32 next-hop 22.33.44.1
+   set protocols static route 66.77.88.99/32 next-hop 22.33.44.1
+
+Configure the load balancer
+^^^^^^^^^^^^^^^^^^^^^^^^^^^
+Configure the WAN load balancer with the parameters described above:
+
+.. code-block:: none
+
+   set load-balancing wan interface-health eth0 failure-count 5
+   set load-balancing wan interface-health eth0 nexthop 11.22.33.1
+   set load-balancing wan interface-health eth0 test 10 type ping
+   set load-balancing wan interface-health eth0 test 10 target 33.44.55.66
+   set load-balancing wan interface-health eth0 test 20 type ping
+   set load-balancing wan interface-health eth0 test 20 target 44.55.66.77
+   set load-balancing wan interface-health eth1 failure-count 4
+   set load-balancing wan interface-health eth1 nexthop 22.33.44.1
+   set load-balancing wan interface-health eth1 test 10 type ping
+   set load-balancing wan interface-health eth1 test 10 target 55.66.77.88
+   set load-balancing wan interface-health eth1 test 20 type ping
+   set load-balancing wan interface-health eth1 test 20 target 66.77.88.99
+   set load-balancing wan rule 10 inbound-interface eth2
+   set load-balancing wan rule 10 interface eth0
+   set load-balancing wan rule 10 interface eth1
+
+Example 2: Failover based on interface weights
+----------------------------------------------
+
+This examples uses the failover mode.
+
+Overview
+^^^^^^^^
+In this example eth0 is the primary interface and eth1 is the secondary
+interface to provide simple failover functionality. If eth0 fails, eth1
+takes over.
+
+Create interface weight based configuration
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+The configuration steps are the same as in the previous example, except
+rule 10 so we keep the configuration, remove rule 10 and add a new rule
+for the failover mode:
+
+.. code-block:: none
+
+   delete load-balancing wan rule 10
+   set load-balancing wan rule 10 failover
+   set load-balancing wan rule 10 inbound-interface eth2
+   set load-balancing wan rule 10 interface eth0 weight 10
+   set load-balancing wan rule 10 interface eth1 weight 1
+
+Example 3: Failover based on rule order
+---------------------------------------
+
+The previous example used the failover command to send traffic thorugh
+eth1 if eth0 fails. In this example failover functionality is provided
+by rule order.
+
+Overview
+^^^^^^^^
+Two rules will be created, the first rule directs traffic coming in
+from eth2 to eth0 and the second rule directs the traffic to eth1. If
+eth0 fails the first rule is bypassed and the second rule matches,
+directing traffic to eth1.
+
+Create rule order based configuration
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+We keep the configurtation from the previous example, delete rule 10
+and create the two new rules as described:
+
+.. code-block:: none
+
+   delete load-balancing wan rule 10
+   set load-balancing wan rule 10 inbound-interface eth2
+   set load-balancing wan rule 10 interface eth0
+   set load-balancing wan rule 20 inbound-interface eth2
+   set load-balancing wan rule 20 interface eth1
+
+Example 4: Failover based on rule order - priority traffic
+----------------------------------------------------------
+
+A rule order for prioritising traffic is useful in scenarios where the
+secondary link has a lower speed and should only carry high priority
+traffic. It is assumed for this example that eth1 is connected to a
+slower connection than eth0 and should prioritise VoIP traffic.
+
+Overview
+^^^^^^^^
+A rule order for prioritising traffic is useful in scenarios where the
+secondary link has a lower speed and should only carry high priority
+traffic. It is assumed for this example that eth1 is connected to a
+slower connection than eth0 and should prioritise VoIP traffic. 
+
+Create rule order based configuration with low speed secondary link
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+We keep the configuration from the previous example, delete rule 20 and
+create a new rule as described: 
+
+.. code-block:: none
+
+   delete load-balancing wan rule 20
+   set load-balancing wan rule 20 inbound-interface eth2
+   set load-balancing wan rule 20 interface eth1
+   set load-balancing wan rule 20 destination port sip
+   set load-balancing wan rule 20 protocol tcp
+   set protocols static route 0.0.0.0/0 next-hop 11.22.33.1
+
+Example 5: Exclude traffic from load balancing
+----------------------------------------------
+
+In this example two LAN interfaces exist in different subnets instead
+of one like in the previous examples:
+
+.. image:: /_static/images/Wan_load_balancing_exclude1.png                      
+   :width: 80%                                                          
+   :align: center                                                       
+   :alt: Network Topology Diagram 
+
+Adding a rule for the second interface
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+Based on the previous example, another rule for traffic from the second
+interface eth3 can be added to the load balancer. However, traffic meant
+to flow between the LAN subnets will be sent to eth0 and eth1 as well.
+To prevent this, another rule is required. This rule excludes traffic
+between the local subnets from the load balancer. It also excludes
+locally-sources packets (required for web caching with load balancing).
+eth+ is used as an alias that refers to all ethernet interfaces:
+
+.. code-block:: none
+
+   set load-balancing wan rule 5 exclude
+   set load-balancing wan rule 5 inbound-interface eth+
+   set load-balancing wan rule 5 destination address 10.0.0.0/8

From c46473a849f20f8587b37ce5996979ea686685fa Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Mon, 9 Nov 2020 21:16:02 +0100
Subject: [PATCH 064/295] docs: add ..cmdinclude:: directive

---
 docs/_ext/vyos.py                   | 159 +++++++++++++++++++++++++++-
 docs/contributing/documentation.rst |  38 +++++++
 2 files changed, 195 insertions(+), 2 deletions(-)

diff --git a/docs/_ext/vyos.py b/docs/_ext/vyos.py
index 4ee87d63..e42d4cf0 100644
--- a/docs/_ext/vyos.py
+++ b/docs/_ext/vyos.py
@@ -1,6 +1,10 @@
-from docutils import nodes, utils
+import re
+import io
+import os
+from docutils import io, nodes, utils, statemachine
+from docutils.utils.error_reporting import SafeString, ErrorString
 from docutils.parsers.rst.roles import set_classes
-from docutils.parsers.rst import Directive
+from docutils.parsers.rst import Directive, directives
 from sphinx.util.docutils import SphinxDirective
 
 
@@ -49,6 +53,7 @@ def setup(app):
 
     app.add_directive('cfgcmd', CfgCmdDirective)
     app.add_directive('opcmd', OpCmdDirective)
+    app.add_directive('cmdinclude', CfgInclude)
     app.connect('doctree-resolved', process_cmd_nodes)
 
 
@@ -148,6 +153,156 @@ class inlinecmd(nodes.inline):
         #self.literal_whitespace -= 1
 
 
+class CfgInclude(Directive):
+    required_arguments = 1
+    optional_arguments = 0
+    final_argument_whitespace = True
+    option_spec = {
+        'var0': str,
+        'var1': str,
+        'var2': str,
+        'var3': str,
+        'var4': str,
+        'var5': str,
+        'var6': str,
+        'var7': str,
+        'var8': str,
+        'var9': str
+    }
+
+    def run(self):
+        ### Copy from include directive docutils 
+        """Include a file as part of the content of this reST file."""
+        if not self.state.document.settings.file_insertion_enabled:
+            raise self.warning('"%s" directive disabled.' % self.name)
+        source = self.state_machine.input_lines.source(
+            self.lineno - self.state_machine.input_offset - 1)
+        source_dir = os.path.dirname(os.path.abspath(source))
+        path = directives.path(self.arguments[0])
+        if path.startswith('<') and path.endswith('>'):
+            path = os.path.join(self.standard_include_path, path[1:-1])
+        path = os.path.normpath(os.path.join(source_dir, path))
+        path = utils.relative_path(None, path)
+        path = nodes.reprunicode(path)
+        encoding = self.options.get(
+            'encoding', self.state.document.settings.input_encoding)
+        e_handler=self.state.document.settings.input_encoding_error_handler
+        tab_width = self.options.get(
+            'tab-width', self.state.document.settings.tab_width)
+        try:
+            self.state.document.settings.record_dependencies.add(path)
+            include_file = io.FileInput(source_path=path,
+                                        encoding=encoding,
+                                        error_handler=e_handler)
+        except UnicodeEncodeError:
+            raise self.severe(u'Problems with "%s" directive path:\n'
+                              'Cannot encode input file path "%s" '
+                              '(wrong locale?).' %
+                              (self.name, SafeString(path)))
+        except IOError:
+            raise self.severe(u'Problems with "%s" directive path.' %
+                      (self.name))
+        startline = self.options.get('start-line', None)
+        endline = self.options.get('end-line', None)
+        try:
+            if startline or (endline is not None):
+                lines = include_file.readlines()
+                rawtext = ''.join(lines[startline:endline])
+            else:
+                rawtext = include_file.read()
+        except UnicodeError:
+            raise self.severe(u'Problem with "%s" directive:\n%s' %
+                              (self.name, ErrorString(error)))
+        # start-after/end-before: no restrictions on newlines in match-text,
+        # and no restrictions on matching inside lines vs. line boundaries
+        after_text = self.options.get('start-after', None)
+        if after_text:
+            # skip content in rawtext before *and incl.* a matching text
+            after_index = rawtext.find(after_text)
+            if after_index < 0:
+                raise self.severe('Problem with "start-after" option of "%s" '
+                                  'directive:\nText not found.' % self.name)
+            rawtext = rawtext[after_index + len(after_text):]
+        before_text = self.options.get('end-before', None)
+        if before_text:
+            # skip content in rawtext after *and incl.* a matching text
+            before_index = rawtext.find(before_text)
+            if before_index < 0:
+                raise self.severe('Problem with "end-before" option of "%s" '
+                                  'directive:\nText not found.' % self.name)
+            rawtext = rawtext[:before_index]
+
+        include_lines = statemachine.string2lines(rawtext, tab_width,
+                                                  convert_whitespace=True)
+        if 'literal' in self.options:
+            # Convert tabs to spaces, if `tab_width` is positive.
+            if tab_width >= 0:
+                text = rawtext.expandtabs(tab_width)
+            else:
+                text = rawtext
+            literal_block = nodes.literal_block(rawtext, source=path,
+                                    classes=self.options.get('class', []))
+            literal_block.line = 1
+            self.add_name(literal_block)
+            if 'number-lines' in self.options:
+                try:
+                    startline = int(self.options['number-lines'] or 1)
+                except ValueError:
+                    raise self.error(':number-lines: with non-integer '
+                                     'start value')
+                endline = startline + len(include_lines)
+                if text.endswith('\n'):
+                    text = text[:-1]
+                tokens = NumberLines([([], text)], startline, endline)
+                for classes, value in tokens:
+                    if classes:
+                        literal_block += nodes.inline(value, value,
+                                                      classes=classes)
+                    else:
+                        literal_block += nodes.Text(value, value)
+            else:
+                literal_block += nodes.Text(text, text)
+            return [literal_block]
+        if 'code' in self.options:
+            self.options['source'] = path
+            codeblock = CodeBlock(self.name,
+                                  [self.options.pop('code')], # arguments
+                                  self.options,
+                                  include_lines, # content
+                                  self.lineno,
+                                  self.content_offset,
+                                  self.block_text,
+                                  self.state,
+                                  self.state_machine)
+            return codeblock.run()
+
+        new_include_lines = []
+        var_value0 = self.options.get('var0', '')
+        var_value1 = self.options.get('var1', '')
+        var_value2 = self.options.get('var2', '')
+        var_value3 = self.options.get('var3', '')
+        var_value4 = self.options.get('var4', '')
+        var_value5 = self.options.get('var5', '')
+        var_value6 = self.options.get('var6', '')
+        var_value7 = self.options.get('var7', '')
+        var_value8 = self.options.get('var8', '')
+        var_value9 = self.options.get('var9', '')
+        for line in include_lines:
+            line = re.sub('{{\s?var0\s?}}',var_value0,line)
+            line = re.sub('{{\s?var1\s?}}',var_value1,line)
+            line = re.sub('{{\s?var2\s?}}',var_value2,line)
+            line = re.sub('{{\s?var3\s?}}',var_value3,line)
+            line = re.sub('{{\s?var4\s?}}',var_value4,line)
+            line = re.sub('{{\s?var5\s?}}',var_value5,line)
+            line = re.sub('{{\s?var6\s?}}',var_value6,line)
+            line = re.sub('{{\s?var7\s?}}',var_value7,line)
+            line = re.sub('{{\s?var8\s?}}',var_value8,line)
+            line = re.sub('{{\s?var9\s?}}',var_value9,line)
+            new_include_lines.append(line)
+        self.state_machine.insert_input(new_include_lines, path)
+        return []
+
+
 class CfgcmdlistDirective(Directive):
 
     def run(self):
diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index 92af881c..e8d1dba5 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -200,6 +200,44 @@ For a inline operational level command use ``:opcmd:``
 
   :opcmd:`add system image`
 
+cmdinclude
+""""""""""
+
+To minimize redundancy there is a special include directive. It include a txt
+file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value
+
+.. code-block:: none
+
+   .. cmdinclude:: interface-address.txt
+      :var0: ethernet
+      :var1: eth1
+
+the content of interface-address.txt looks like this
+
+.. code-block:: none
+
+   .. cfgcmd:: set interfaces {{ var0 }} <interface> address <address | dhcp |
+      dhcpv6>
+
+      Configure interface `<interface>` with one or more interface
+      addresses.
+
+      * **address** can be specified multiple times as IPv4 and/or IPv6
+      address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64
+      * **dhcp** interface address is received by DHCP from a DHCP server
+      on this segment.
+      * **dhcpv6** interface address is received by DHCPv6 from a DHCPv6
+      server on this segment.
+
+      Example:
+
+      .. code-block:: none
+
+         set interfaces {{ var0 }} {{ var1 }} address 192.0.2.1/24
+         set interfaces {{ var0 }} {{ var1 }} address 192.0.2.2/24
+         set interfaces {{ var0 }} {{ var1 }} address 2001:db8::ffff/64
+         set interfaces {{ var0 }} {{ var1 }} address 2001:db8:100::ffff/64
+
 vytask
 """"""
 

From 58b3a577e5386e52ccfade8c5d9c3d5bc36f2839 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Mon, 9 Nov 2020 21:30:06 +0100
Subject: [PATCH 065/295] Bridge: convert address to cmdinclude

---
 docs/_include/interface-address.txt | 21 +++++++++++++++++++++
 docs/interfaces/bridge.rst          | 24 +++---------------------
 2 files changed, 24 insertions(+), 21 deletions(-)
 create mode 100644 docs/_include/interface-address.txt

diff --git a/docs/_include/interface-address.txt b/docs/_include/interface-address.txt
new file mode 100644
index 00000000..1de05c31
--- /dev/null
+++ b/docs/_include/interface-address.txt
@@ -0,0 +1,21 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> address <address | dhcp |
+   dhcpv6>
+
+   Configure interface `<interface>` with one or more interface
+   addresses.
+
+   * **address** can be specified multiple times as IPv4 and/or IPv6
+     address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64
+   * **dhcp** interface address is received by DHCP from a DHCP server
+     on this segment.
+   * **dhcpv6** interface address is received by DHCPv6 from a DHCPv6
+     server on this segment.
+
+   Example:
+
+   .. code-block:: none
+
+     set interfaces {{ var0 }} {{ var1 }} address 192.0.2.1/24
+     set interfaces {{ var0 }} {{ var1 }} address 192.0.2.2/24
+     set interfaces {{ var0 }} {{ var1 }} address 2001:db8::ffff/64
+     set interfaces {{ var0 }} {{ var1 }} address 2001:db8:100::ffff/64
\ No newline at end of file
diff --git a/docs/interfaces/bridge.rst b/docs/interfaces/bridge.rst
index a7343a0d..26e67690 100644
--- a/docs/interfaces/bridge.rst
+++ b/docs/interfaces/bridge.rst
@@ -20,27 +20,9 @@ Configuration
 Address
 -------
 
-.. cfgcmd:: set interfaces bridge <interface> address <address | dhcp |
-   dhcpv6>
-
-   Configure interface `<interface>` with one or more interface
-   addresses.
-
-   * **address** can be specified multiple times as IPv4 and/or IPv6
-     address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64
-   * **dhcp** interface address is received by DHCP from a DHCP server
-     on this segment.
-   * **dhcpv6** interface address is received by DHCPv6 from a DHCPv6
-     server on this segment.
-
-   Example:
-
-   .. code-block:: none
-
-     set interfaces bridge br0 address 192.0.2.1/24
-     set interfaces bridge br0 address 192.0.2.2/24
-     set interfaces bridge br0 address 2001:db8::ffff/64
-     set interfaces bridge br0 address 2001:db8:100::ffff/64
+.. cmdinclude:: ../_include/interface-address.txt
+   :var0: bridge
+   :var1: br0
 
 
 .. cfgcmd:: set interfaces bridge <interface> ipv6 address autoconf

From b7e61a03f09b93cdaa91a3c6b13d967621483f5c Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 10 Nov 2020 20:02:47 +0100
Subject: [PATCH 066/295] interfaces: extend usage of new cmdinclude directive
 for bridge, bond, eth, peth, vxlan

Commit c46473a ("docs: add ..cmdinclude:: directive") added support for including
common text but only replacing individual labels so there can be source of truth
also for the documentation.
---
 .../_include/interface-ipv6-addr-autoconf.txt | 20 +++++++++
 docs/_include/interface-ipv6-addr-eui64.txt   |  8 ++++
 docs/interfaces/bond.rst                      | 41 ++++---------------
 docs/interfaces/bridge.rst                    | 21 +++-------
 docs/interfaces/common-ip-ipv6-addr.txt       |  8 ----
 docs/interfaces/common-ipv6-addr-autoconf.txt | 12 ------
 docs/interfaces/ethernet.rst                  | 32 ++++-----------
 docs/interfaces/pseudo-ethernet.rst           | 23 ++++-------
 docs/interfaces/vxlan.rst                     | 36 ++++------------
 9 files changed, 70 insertions(+), 131 deletions(-)
 create mode 100644 docs/_include/interface-ipv6-addr-autoconf.txt
 create mode 100644 docs/_include/interface-ipv6-addr-eui64.txt
 delete mode 100644 docs/interfaces/common-ip-ipv6-addr.txt
 delete mode 100644 docs/interfaces/common-ipv6-addr-autoconf.txt

diff --git a/docs/_include/interface-ipv6-addr-autoconf.txt b/docs/_include/interface-ipv6-addr-autoconf.txt
new file mode 100644
index 00000000..22f9ee59
--- /dev/null
+++ b/docs/_include/interface-ipv6-addr-autoconf.txt
@@ -0,0 +1,20 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> ipv6 address autoconf
+
+
+  :abbr:`SLAAC (Stateless Address Autoconfiguration)`
+  :rfc:`4862`. IPv6 hosts can configure themselves automatically when connected
+  to an IPv6 network using the Neighbor Discovery Protocol via :abbr:`ICMPv6
+  (Internet Control Message Protocol version 6)` router discovery messages.
+  When first connected to a network, a host sends a link-local router
+  solicitation multicast request for its configuration parameters; routers
+  respond to such a request with a router advertisement packet that contains
+  Internet Layer configuration parameters.
+
+  .. note:: This method automatically disables IPv6 traffic forwarding on the
+    interface in question.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} ipv6 address autoconf
diff --git a/docs/_include/interface-ipv6-addr-eui64.txt b/docs/_include/interface-ipv6-addr-eui64.txt
new file mode 100644
index 00000000..40f22e5f
--- /dev/null
+++ b/docs/_include/interface-ipv6-addr-eui64.txt
@@ -0,0 +1,8 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> ipv6 address eui64 <prefix>
+
+   :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
+   :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address.
+
+   .. code-block:: none
+
+     set interfaces {{ var0 }} {{ var1 }} ipv6 address eui64 2001:db8:beef::/64
diff --git a/docs/interfaces/bond.rst b/docs/interfaces/bond.rst
index 9e67809a..78099f01 100644
--- a/docs/interfaces/bond.rst
+++ b/docs/interfaces/bond.rst
@@ -16,40 +16,17 @@ Configuration
 Address
 -------
 
-.. cfgcmd:: set interfaces bonding <interface> address <address | dhcp | dhcpv6>
+.. cmdinclude:: ../_include/interface-address.txt
+   :var0: bonding
+   :var1: bond0
 
-   Configure interface `<interface>` with one or more interface addresses.
-
-   * **address** can be specified multiple times as IPv4 and/or IPv6 address,
-     e.g. 192.0.2.1/24 and/or 2001:db8::1/64
-   * **dhcp** interface address is received by DHCP from a DHCP server on this
-     segment.
-   * **dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on
-     this segment.
-
-   Example:
-
-   .. code-block:: none
-
-     set interfaces bonding bond0 address 192.0.2.1/24
-     set interfaces bonding bond0 address 192.0.2.2/24
-     set interfaces bonding bond0 address 2001:db8::ffff/64
-     set interfaces bonding bond0 address 2001:db8:100::ffff/64
-
-
-.. cfgcmd:: set interfaces bonding <interface> ipv6 address autoconf
-
-   .. include:: common-ipv6-addr-autoconf.txt
-
-.. cfgcmd:: set interfaces bonding <interface> ipv6 address eui64 <prefix>
-
-   :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
-   :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address.
-
-   .. code-block:: none
-
-     set interfaces bonding bond0 ipv6 address eui64 2001:db8:beef::/64
+.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
+   :var0: bonding
+   :var1: bond0
 
+.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+   :var0: bonding
+   :var1: bond0
 
 Link Administration
 -------------------
diff --git a/docs/interfaces/bridge.rst b/docs/interfaces/bridge.rst
index 26e67690..aec1c5d8 100644
--- a/docs/interfaces/bridge.rst
+++ b/docs/interfaces/bridge.rst
@@ -24,22 +24,13 @@ Address
    :var0: bridge
    :var1: br0
 
+.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
+   :var0: bridge
+   :var1: br0
 
-.. cfgcmd:: set interfaces bridge <interface> ipv6 address autoconf
-
-   .. include:: common-ipv6-addr-autoconf.txt
-
-.. cfgcmd:: set interfaces bridge <interface> ipv6 address eui64
-   <prefix>
-
-   :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
-   :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6
-   address.
-
-   .. code-block:: none
-
-     set interfaces bridge br0 ipv6 address eui64 2001:db8:beef::/64
-
+.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+   :var0: bridge
+   :var1: br0
 
 .. cfgcmd:: set interfaces bridge <interface> aging <time>
 
diff --git a/docs/interfaces/common-ip-ipv6-addr.txt b/docs/interfaces/common-ip-ipv6-addr.txt
deleted file mode 100644
index f53eaeee..00000000
--- a/docs/interfaces/common-ip-ipv6-addr.txt
+++ /dev/null
@@ -1,8 +0,0 @@
-Configure interface `<interface>` with one or more interface addresses.
-
-* **address** can be specified multiple times as IPv4 and/or IPv6 address,
-  e.g. 192.0.2.1/24 and/or 2001:db8::1/64
-* **dhcp** interface address is received by DHCP from a DHCP server on this
-  segment.
-* **dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on
-  this segment.
diff --git a/docs/interfaces/common-ipv6-addr-autoconf.txt b/docs/interfaces/common-ipv6-addr-autoconf.txt
deleted file mode 100644
index 838b299f..00000000
--- a/docs/interfaces/common-ipv6-addr-autoconf.txt
+++ /dev/null
@@ -1,12 +0,0 @@
-:abbr:`SLAAC (Stateless Address Autoconfiguration)`
-:rfc:`4862`. IPv6 hosts can configure themselves automatically when connected
-to an IPv6 network using the Neighbor Discovery Protocol via :abbr:`ICMPv6
-(Internet Control Message Protocol version 6)` router discovery messages.
-When first connected to a network, a host sends a link-local router
-solicitation multicast request for its configuration parameters; routers
-respond to such a request with a router advertisement packet that contains
-Internet Layer configuration parameters.
-
-.. note:: This method automatically disables IPv6 traffic forwarding on the
-  interface in question.
-
diff --git a/docs/interfaces/ethernet.rst b/docs/interfaces/ethernet.rst
index 95aef851..6d7d049f 100644
--- a/docs/interfaces/ethernet.rst
+++ b/docs/interfaces/ethernet.rst
@@ -10,31 +10,17 @@ Configuration
 Address
 -------
 
-.. cfgcmd:: set interfaces ethernet <interface> address <address | dhcp | dhcpv6>
+.. cmdinclude:: ../_include/interface-address.txt
+   :var0: ethernet
+   :var1: eth0
 
-   .. include:: common-ip-ipv6-addr.txt
+.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
+   :var0: ethernet
+   :var1: eth0
 
-   Example:
-
-   .. code-block:: none
-
-     set interfaces ethernet eth0 address 192.0.2.1/24
-     set interfaces ethernet eth0 address 192.0.2.2/24
-     set interfaces ethernet eth0 address 2001:db8::ffff/64
-     set interfaces ethernet eth0 address 2001:db8:100::ffff/64
-
-.. cfgcmd:: set interfaces ethernet <interface> ipv6 address autoconf
-
-   .. include:: common-ipv6-addr-autoconf.txt
-
-.. cfgcmd:: set interfaces ethernet <interface> ipv6 address eui64 <prefix>
-
-   :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
-   :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address.
-
-   .. code-block:: none
-
-     set interfaces ethernet eth0 ipv6 address eui64 2001:db8:beef::/64
+.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+   :var0: ethernet
+   :var1: eth0
 
 Speed/Duplex
 ------------
diff --git a/docs/interfaces/pseudo-ethernet.rst b/docs/interfaces/pseudo-ethernet.rst
index a2066555..eec28981 100644
--- a/docs/interfaces/pseudo-ethernet.rst
+++ b/docs/interfaces/pseudo-ethernet.rst
@@ -44,22 +44,17 @@ Configuration
 Address
 -------
 
-.. cfgcmd:: set interfaces pseudo-ethernet <interface> address <address | dhcp | dhcpv6>
+.. cmdinclude:: ../_include/interface-address.txt
+   :var0: pseudo-ethernet
+   :var1: peth0
 
-   .. include:: common-ip-ipv6-addr.txt
+.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
+   :var0: pseudo-ethernet
+   :var1: peth0
 
-   Example:
-
-   .. code-block:: none
-
-     set interfaces pseudo-ethernet peth0 address 192.0.2.1/24
-     set interfaces pseudo-ethernet peth0 address 192.0.2.2/24
-     set interfaces pseudo-ethernet peth0 address 2001:db8::ffff/64
-     set interfaces pseudo-ethernet peth0 address 2001:db8:100::ffff/64
-
-.. cfgcmd:: set interfaces pseudo-ethernet <interface> ipv6 address autoconf
-
-   .. include:: common-ipv6-addr-autoconf.txt
+.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+   :var0: pseudo-ethernet
+   :var1: peth0
 
 Physical Asignment
 ------------------
diff --git a/docs/interfaces/vxlan.rst b/docs/interfaces/vxlan.rst
index bf3b6dee..dae08508 100644
--- a/docs/interfaces/vxlan.rst
+++ b/docs/interfaces/vxlan.rst
@@ -39,35 +39,17 @@ Configuration
 Address
 -------
 
-.. cfgcmd:: set interfaces vxlan <interface> address <address>
+.. cmdinclude:: ../_include/interface-address.txt
+   :var0: vxlan
+   :var1: vxlan0
 
-   Configure VXLAN interface `<interface>` with one or more interface
-   addresses. Address can be specified multiple times as IPv4 and/or IPv6
-   address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64
-
-   Example:
-
-   .. code-block:: none
-
-     set interfaces vxlan vxlan0 address 192.0.2.1/24
-     set interfaces vxlan vxlan0 address 192.0.2.2/24
-     set interfaces vxlan vxlan0 address 2001:db8::ffff/64
-     set interfaces vxlan vxlan0 address 2001:db8:100::ffff/64
-
-
-.. cfgcmd:: set interfaces vxlan <interface> ipv6 address autoconf
-
-   .. include:: common-ipv6-addr-autoconf.txt
-
-.. cfgcmd:: set interfaces vxlan <interface> ipv6 address eui64 <prefix>
-
-   :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
-   :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address.
-
-   .. code-block:: none
-
-     set interfaces vxlan vxlan0 ipv6 address eui64 2001:db8:beef::/64
+.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
+   :var0: vxlan
+   :var1: vxlan0
 
+.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+   :var0: vxlan
+   :var1: vxlan0
 
 .. cfgcmd:: set interfaces vxlan <interface> vni <number>
 

From 0d8451f1dd3ba31e9c39ebafd2dc32f25d5f582d Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 10 Nov 2020 20:25:01 +0100
Subject: [PATCH 067/295] interfaces: advanced-index: also add ethernet and
 loopback

---
 docs/interfaces/advanced-index.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/interfaces/advanced-index.rst b/docs/interfaces/advanced-index.rst
index c666f7ae..f955c6b1 100644
--- a/docs/interfaces/advanced-index.rst
+++ b/docs/interfaces/advanced-index.rst
@@ -10,7 +10,9 @@ Advanced Network Interfaces
    bond
    bridge
    dummy
+   ethernet
    geneve
+   loopback
    l2tpv3
    macsec
    pseudo-ethernet

From be6c3c1624174c5762a1349e31111d34db642767 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 10 Nov 2020 20:26:15 +0100
Subject: [PATCH 068/295] interfaces: add common description include file

---
 docs/_include/interface-address-with-dhcp.txt | 20 ++++++++++++++++
 docs/_include/interface-address.txt           | 11 ++-------
 docs/_include/interface-description.txt       | 10 ++++++++
 docs/interfaces/bond.rst                      | 10 +++++---
 docs/interfaces/bridge.rst                    | 10 +++++---
 docs/interfaces/dummy.rst                     | 23 +++++++------------
 docs/interfaces/ethernet.rst                  | 10 +++++---
 docs/interfaces/geneve.rst                    | 21 +++++++----------
 docs/interfaces/loopback.rst                  | 14 ++++++-----
 docs/interfaces/macsec.rst                    | 19 +++++++++++++++
 docs/interfaces/pseudo-ethernet.rst           | 10 +++++---
 docs/interfaces/vxlan.rst                     |  8 +++++--
 docs/interfaces/wirelessmodem.rst             |  7 ++++++
 13 files changed, 116 insertions(+), 57 deletions(-)
 create mode 100644 docs/_include/interface-address-with-dhcp.txt
 create mode 100644 docs/_include/interface-description.txt

diff --git a/docs/_include/interface-address-with-dhcp.txt b/docs/_include/interface-address-with-dhcp.txt
new file mode 100644
index 00000000..28968bea
--- /dev/null
+++ b/docs/_include/interface-address-with-dhcp.txt
@@ -0,0 +1,20 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> address <address | dhcp |
+   dhcpv6>
+
+   Configure interface `<interface>` with one or more interface addresses.
+
+   * **address** can be specified multiple times as IPv4 and/or IPv6
+     address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64
+   * **dhcp** interface address is received by DHCP from a DHCP server
+     on this segment.
+   * **dhcpv6** interface address is received by DHCPv6 from a DHCPv6
+     server on this segment.
+
+   Example:
+
+   .. code-block:: none
+
+     set interfaces {{ var0 }} {{ var1 }} address 192.0.2.1/24
+     set interfaces {{ var0 }} {{ var1 }} address 2001:db8::1/64
+     set interfaces {{ var0 }} {{ var1 }} dhcp
+     set interfaces {{ var0 }} {{ var1 }} dhcpv6
\ No newline at end of file
diff --git a/docs/_include/interface-address.txt b/docs/_include/interface-address.txt
index 1de05c31..4ca75940 100644
--- a/docs/_include/interface-address.txt
+++ b/docs/_include/interface-address.txt
@@ -1,21 +1,14 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> address <address | dhcp |
-   dhcpv6>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> address <address>
 
    Configure interface `<interface>` with one or more interface
    addresses.
 
    * **address** can be specified multiple times as IPv4 and/or IPv6
      address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64
-   * **dhcp** interface address is received by DHCP from a DHCP server
-     on this segment.
-   * **dhcpv6** interface address is received by DHCPv6 from a DHCPv6
-     server on this segment.
 
    Example:
 
    .. code-block:: none
 
      set interfaces {{ var0 }} {{ var1 }} address 192.0.2.1/24
-     set interfaces {{ var0 }} {{ var1 }} address 192.0.2.2/24
-     set interfaces {{ var0 }} {{ var1 }} address 2001:db8::ffff/64
-     set interfaces {{ var0 }} {{ var1 }} address 2001:db8:100::ffff/64
\ No newline at end of file
+     set interfaces {{ var0 }} {{ var1 }} address 2001:db8::1/64
\ No newline at end of file
diff --git a/docs/_include/interface-description.txt b/docs/_include/interface-description.txt
new file mode 100644
index 00000000..992d4945
--- /dev/null
+++ b/docs/_include/interface-description.txt
@@ -0,0 +1,10 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> description <description>
+
+   Set a human readable, descriptive alias for this connection. Alias is used by
+   e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools.
+
+   Example:
+
+   .. code-block:: none
+
+     set interfaces {{ var0 }} {{ var1 }} description 'This is an awesome interface running on VyOS'
\ No newline at end of file
diff --git a/docs/interfaces/bond.rst b/docs/interfaces/bond.rst
index 78099f01..e23d2c52 100644
--- a/docs/interfaces/bond.rst
+++ b/docs/interfaces/bond.rst
@@ -13,10 +13,14 @@ Additionally, link integrity monitoring may be performed.
 Configuration
 #############
 
-Address
--------
+Common interface configuration
+------------------------------
 
-.. cmdinclude:: ../_include/interface-address.txt
+.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
+   :var0: bonding
+   :var1: bond0
+
+.. cmdinclude:: ../_include/interface-description.txt
    :var0: bonding
    :var1: bond0
 
diff --git a/docs/interfaces/bridge.rst b/docs/interfaces/bridge.rst
index aec1c5d8..ec946041 100644
--- a/docs/interfaces/bridge.rst
+++ b/docs/interfaces/bridge.rst
@@ -17,10 +17,14 @@ standard.
 Configuration
 #############
 
-Address
--------
+Common interface configuration
+------------------------------
 
-.. cmdinclude:: ../_include/interface-address.txt
+.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
+   :var0: bridge
+   :var1: br0
+
+.. cmdinclude:: ../_include/interface-description.txt
    :var0: bridge
    :var1: br0
 
diff --git a/docs/interfaces/dummy.rst b/docs/interfaces/dummy.rst
index e452ae73..02680f90 100644
--- a/docs/interfaces/dummy.rst
+++ b/docs/interfaces/dummy.rst
@@ -22,23 +22,16 @@ you can have as many as you want.
 Configuration
 #############
 
-Address
--------
+Common interface configuration
+------------------------------
 
-.. cfgcmd:: set interfaces dummy <interface> address <address | dhcp | dhcpv6>
+.. cmdinclude:: ../_include/interface-address.txt
+   :var0: dummy
+   :var1: dum0
 
-   Configure dummy interface `<interface>` with one or more interface
-   addresses. Address can be specified multiple times as IPv4 and/or IPv6
-   address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64
-
-   Example:
-
-   .. code-block:: none
-
-     set interfaces dummy dum10 address 192.0.2.1/24
-     set interfaces dummy dum10 address 192.0.2.2/24
-     set interfaces dummy dum10 address 2001:db8::ffff/64
-     set interfaces dummy dum10 address 2001:db8:100::ffff/64
+.. cmdinclude:: ../_include/interface-description.txt
+   :var0: dummy
+   :var1: dum0
 
 Link Administration
 -------------------
diff --git a/docs/interfaces/ethernet.rst b/docs/interfaces/ethernet.rst
index 6d7d049f..424f2766 100644
--- a/docs/interfaces/ethernet.rst
+++ b/docs/interfaces/ethernet.rst
@@ -7,10 +7,14 @@ Ethernet
 Configuration
 #############
 
-Address
--------
+Common interface configuration
+------------------------------
 
-.. cmdinclude:: ../_include/interface-address.txt
+.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
+   :var0: ethernet
+   :var1: eth0
+
+.. cmdinclude:: ../_include/interface-description.txt
    :var0: ethernet
    :var1: eth0
 
diff --git a/docs/interfaces/geneve.rst b/docs/interfaces/geneve.rst
index a4bc22aa..acd22c84 100644
--- a/docs/interfaces/geneve.rst
+++ b/docs/interfaces/geneve.rst
@@ -35,21 +35,16 @@ Geneve Header:
 Configuration
 =============
 
-.. cfgcmd:: set interfaces geneve gnv0 address <address>
+Common interface configuration
+------------------------------
 
-   Configure interface `<interface>` with one or more interface addresses.
+.. cmdinclude:: ../_include/interface-address.txt
+   :var0: geneve
+   :var1: gnv0
 
-   **address** can be specified multiple times as IPv4 and/or IPv6 address,
-   e.g. 192.0.2.1/24 and/or 2001:db8::1/64
-
-   Example:
-
-   .. code-block:: none
-
-     set interfaces geneve gnv0 address 192.0.2.1/24
-     set interfaces geneve gnv0 address 192.0.2.2/24
-     set interfaces geneve gnv0 address 2001:db8::ffff/64
-     set interfaces geneve gnv0 address 2001:db8:100::ffff/64
+.. cmdinclude:: ../_include/interface-description.txt
+   :var0: geneve
+   :var1: gnv0
 
 .. cfgcmd:: set interfaces geneve gnv0 remote <address>
 
diff --git a/docs/interfaces/loopback.rst b/docs/interfaces/loopback.rst
index e15062cf..06486faa 100644
--- a/docs/interfaces/loopback.rst
+++ b/docs/interfaces/loopback.rst
@@ -22,14 +22,16 @@ services on your local machine.
 Configuration
 =============
 
-Address
--------
+Common interface configuration
+------------------------------
 
-.. cfgcmd:: set interfaces loopback lo address <address>
+.. cmdinclude:: ../_include/interface-address.txt
+   :var0: loopback
+   :var1: lo
 
-   Configure Loopback interface `lo` with one or more interface addresses.
-   Address can be specified multiple times as IPv4 and/or IPv6 address, e.g.
-   192.0.2.1/24 and/or 2001:db8::1/64.
+.. cmdinclude:: ../_include/interface-description.txt
+   :var0: loopback
+   :var1: lo
 
 Link Administration
 -------------------
diff --git a/docs/interfaces/macsec.rst b/docs/interfaces/macsec.rst
index d7af0c16..8a613709 100644
--- a/docs/interfaces/macsec.rst
+++ b/docs/interfaces/macsec.rst
@@ -16,6 +16,25 @@ used for their own specific use cases.
 Configuration
 #############
 
+Common interface configuration
+------------------------------
+
+.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
+   :var0: macsec
+   :var1: macsec0
+
+.. cmdinclude:: ../_include/interface-description.txt
+   :var0: macsec
+   :var1: macsec0
+
+.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
+   :var0: macsec
+   :var1: macsec0
+
+.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+   :var0: macsec
+   :var1: macsec0
+
 .. cfgcmd:: set interfaces macsec <interface> security cipher [gcm-aes-128]
 
   Select cipher suite used for cryptographic operations. This setting is
diff --git a/docs/interfaces/pseudo-ethernet.rst b/docs/interfaces/pseudo-ethernet.rst
index eec28981..7564ce76 100644
--- a/docs/interfaces/pseudo-ethernet.rst
+++ b/docs/interfaces/pseudo-ethernet.rst
@@ -41,10 +41,14 @@ Ethernet interfaces:
 Configuration
 =============
 
-Address
--------
+Common interface configuration
+------------------------------
 
-.. cmdinclude:: ../_include/interface-address.txt
+.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
+   :var0: pseudo-ethernet
+   :var1: peth0
+
+.. cmdinclude:: ../_include/interface-description.txt
    :var0: pseudo-ethernet
    :var1: peth0
 
diff --git a/docs/interfaces/vxlan.rst b/docs/interfaces/vxlan.rst
index dae08508..5229f81c 100644
--- a/docs/interfaces/vxlan.rst
+++ b/docs/interfaces/vxlan.rst
@@ -36,13 +36,17 @@ may be blocked by the hypervisor.
 Configuration
 =============
 
-Address
--------
+Common interface configuration
+------------------------------
 
 .. cmdinclude:: ../_include/interface-address.txt
    :var0: vxlan
    :var1: vxlan0
 
+.. cmdinclude:: ../_include/interface-description.txt
+   :var0: vxlan
+   :var1: vxlan0
+
 .. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
    :var0: vxlan
    :var1: vxlan0
diff --git a/docs/interfaces/wirelessmodem.rst b/docs/interfaces/wirelessmodem.rst
index c41e71bf..5e2eac40 100644
--- a/docs/interfaces/wirelessmodem.rst
+++ b/docs/interfaces/wirelessmodem.rst
@@ -11,6 +11,13 @@ The wirelessmodem interface provides access (through a wireless modem/wwan) to
 wireless networks provided by various cellular providers. VyOS uses the
 interfaces wirelessmodem subsystem for configuration.
 
+Common interface configuration
+------------------------------
+
+.. cmdinclude:: ../_include/interface-description.txt
+   :var0: wirelessmodem
+   :var1: wlm0
+
 Address
 -------
 

From a3b5c8083e6ab28378ba187ec9aa0f3ce3d101df Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 10 Nov 2020 20:39:39 +0100
Subject: [PATCH 069/295] interfaces: introduce new common-with|without-dhcp
 include

Now we have one single include dealing with all the common interface
stuff which is present on every interface.
---
 docs/_include/interface-common-with-dhcp.txt    |  7 +++++++
 docs/_include/interface-common-without-dhcp.txt |  7 +++++++
 docs/_include/interface-common.txt              | 11 +++++++++++
 docs/interfaces/bond.rst                        | 16 ++--------------
 docs/interfaces/bridge.rst                      | 15 +--------------
 docs/interfaces/ethernet.rst                    | 14 +-------------
 docs/interfaces/geneve.rst                      |  6 +-----
 docs/interfaces/macsec.rst                      | 14 +-------------
 docs/interfaces/pseudo-ethernet.rst             | 14 +-------------
 docs/interfaces/vxlan.rst                       | 14 +-------------
 10 files changed, 33 insertions(+), 85 deletions(-)
 create mode 100644 docs/_include/interface-common-with-dhcp.txt
 create mode 100644 docs/_include/interface-common-without-dhcp.txt
 create mode 100644 docs/_include/interface-common.txt

diff --git a/docs/_include/interface-common-with-dhcp.txt b/docs/_include/interface-common-with-dhcp.txt
new file mode 100644
index 00000000..34eef941
--- /dev/null
+++ b/docs/_include/interface-common-with-dhcp.txt
@@ -0,0 +1,7 @@
+.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+
+.. cmdinclude:: ../_include/interface-common.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
diff --git a/docs/_include/interface-common-without-dhcp.txt b/docs/_include/interface-common-without-dhcp.txt
new file mode 100644
index 00000000..8e995ee1
--- /dev/null
+++ b/docs/_include/interface-common-without-dhcp.txt
@@ -0,0 +1,7 @@
+.. cmdinclude:: ../_include/interface-address.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+
+.. cmdinclude:: ../_include/interface-common.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
diff --git a/docs/_include/interface-common.txt b/docs/_include/interface-common.txt
new file mode 100644
index 00000000..56d4a22e
--- /dev/null
+++ b/docs/_include/interface-common.txt
@@ -0,0 +1,11 @@
+.. cmdinclude:: ../_include/interface-description.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+
+.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+
+.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
diff --git a/docs/interfaces/bond.rst b/docs/interfaces/bond.rst
index e23d2c52..6cdc08ea 100644
--- a/docs/interfaces/bond.rst
+++ b/docs/interfaces/bond.rst
@@ -16,20 +16,8 @@ Configuration
 Common interface configuration
 ------------------------------
 
-.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
-   :var0: bonding
-   :var1: bond0
-
-.. cmdinclude:: ../_include/interface-description.txt
-   :var0: bonding
-   :var1: bond0
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
-   :var0: bonding
-   :var1: bond0
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
-   :var0: bonding
+.. cmdinclude:: ../_include/interface-common-with-dhcp.txt
+   :var0: bond
    :var1: bond0
 
 Link Administration
diff --git a/docs/interfaces/bridge.rst b/docs/interfaces/bridge.rst
index ec946041..a880c023 100644
--- a/docs/interfaces/bridge.rst
+++ b/docs/interfaces/bridge.rst
@@ -20,19 +20,7 @@ Configuration
 Common interface configuration
 ------------------------------
 
-.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
-   :var0: bridge
-   :var1: br0
-
-.. cmdinclude:: ../_include/interface-description.txt
-   :var0: bridge
-   :var1: br0
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
-   :var0: bridge
-   :var1: br0
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+.. cmdinclude:: ../_include/interface-common-with-dhcp.txt
    :var0: bridge
    :var1: br0
 
@@ -40,7 +28,6 @@ Common interface configuration
 
    MAC address aging `<time`> in seconds (default: 300).
 
-
 .. cfgcmd:: set interfaces bridge <interface> max-age <time>
 
    Bridge maximum aging `<time>` in seconds (default: 20).
diff --git a/docs/interfaces/ethernet.rst b/docs/interfaces/ethernet.rst
index 424f2766..09c72ec8 100644
--- a/docs/interfaces/ethernet.rst
+++ b/docs/interfaces/ethernet.rst
@@ -10,19 +10,7 @@ Configuration
 Common interface configuration
 ------------------------------
 
-.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
-   :var0: ethernet
-   :var1: eth0
-
-.. cmdinclude:: ../_include/interface-description.txt
-   :var0: ethernet
-   :var1: eth0
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
-   :var0: ethernet
-   :var1: eth0
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+.. cmdinclude:: ../_include/interface-common-with-dhcp.txt
    :var0: ethernet
    :var1: eth0
 
diff --git a/docs/interfaces/geneve.rst b/docs/interfaces/geneve.rst
index acd22c84..8518fcf0 100644
--- a/docs/interfaces/geneve.rst
+++ b/docs/interfaces/geneve.rst
@@ -38,11 +38,7 @@ Configuration
 Common interface configuration
 ------------------------------
 
-.. cmdinclude:: ../_include/interface-address.txt
-   :var0: geneve
-   :var1: gnv0
-
-.. cmdinclude:: ../_include/interface-description.txt
+.. cmdinclude:: ../_include/interface-common-without-dhcp.txt
    :var0: geneve
    :var1: gnv0
 
diff --git a/docs/interfaces/macsec.rst b/docs/interfaces/macsec.rst
index 8a613709..242636f1 100644
--- a/docs/interfaces/macsec.rst
+++ b/docs/interfaces/macsec.rst
@@ -19,19 +19,7 @@ Configuration
 Common interface configuration
 ------------------------------
 
-.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
-   :var0: macsec
-   :var1: macsec0
-
-.. cmdinclude:: ../_include/interface-description.txt
-   :var0: macsec
-   :var1: macsec0
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
-   :var0: macsec
-   :var1: macsec0
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+.. cmdinclude:: ../_include/interface-common-with-dhcp.txt
    :var0: macsec
    :var1: macsec0
 
diff --git a/docs/interfaces/pseudo-ethernet.rst b/docs/interfaces/pseudo-ethernet.rst
index 7564ce76..4244284b 100644
--- a/docs/interfaces/pseudo-ethernet.rst
+++ b/docs/interfaces/pseudo-ethernet.rst
@@ -44,19 +44,7 @@ Configuration
 Common interface configuration
 ------------------------------
 
-.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
-   :var0: pseudo-ethernet
-   :var1: peth0
-
-.. cmdinclude:: ../_include/interface-description.txt
-   :var0: pseudo-ethernet
-   :var1: peth0
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
-   :var0: pseudo-ethernet
-   :var1: peth0
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+.. cmdinclude:: ../_include/interface-common-with-dhcp.txt
    :var0: pseudo-ethernet
    :var1: peth0
 
diff --git a/docs/interfaces/vxlan.rst b/docs/interfaces/vxlan.rst
index 5229f81c..742485dd 100644
--- a/docs/interfaces/vxlan.rst
+++ b/docs/interfaces/vxlan.rst
@@ -39,19 +39,7 @@ Configuration
 Common interface configuration
 ------------------------------
 
-.. cmdinclude:: ../_include/interface-address.txt
-   :var0: vxlan
-   :var1: vxlan0
-
-.. cmdinclude:: ../_include/interface-description.txt
-   :var0: vxlan
-   :var1: vxlan0
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
-   :var0: vxlan
-   :var1: vxlan0
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+.. cmdinclude:: ../_include/interface-common-without-dhcp.txt
    :var0: vxlan
    :var1: vxlan0
 

From 861225aba395884eb91f61117b7a1bcf91d60798 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 10 Nov 2020 20:58:07 +0100
Subject: [PATCH 070/295] interfaces: document dhcp-options

---
 docs/_include/interface-common-with-dhcp.txt |  4 ++
 docs/_include/interface-dhcp-options.txt     | 46 ++++++++++++++++++++
 2 files changed, 50 insertions(+)
 create mode 100644 docs/_include/interface-dhcp-options.txt

diff --git a/docs/_include/interface-common-with-dhcp.txt b/docs/_include/interface-common-with-dhcp.txt
index 34eef941..585951b3 100644
--- a/docs/_include/interface-common-with-dhcp.txt
+++ b/docs/_include/interface-common-with-dhcp.txt
@@ -2,6 +2,10 @@
    :var0: {{ var0 }}
    :var1: {{ var1 }}
 
+.. cmdinclude:: ../_include/interface-dhcp-options.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+
 .. cmdinclude:: ../_include/interface-common.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
diff --git a/docs/_include/interface-dhcp-options.txt b/docs/_include/interface-dhcp-options.txt
new file mode 100644
index 00000000..da1975fc
--- /dev/null
+++ b/docs/_include/interface-dhcp-options.txt
@@ -0,0 +1,46 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcp-options client-id <description>
+
+  :rfc:`2131` states: The client MAY choose to explicitly provide the identifier
+  through the 'client identifier' option. If the client supplies a 'client
+  identifier', the client MUST use the same 'client identifier' in all
+  subsequent messages, and the server MUST use that identifier to identify the
+  client.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcp-options client-id 'foo-bar'
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcp-options host-name <hostname>
+
+  Instead of sending the real system hostname to the DHCP server, overwrite the
+  host-name with this given-value.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcp-options host-name 'VyOS'
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcp-options vendor-class-id <vendor-id>
+
+  The vendor-class-id option can be used to request a specific class of vendor
+  options from the server.
+
+  Example
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcp-options vendor-class-id 'VyOS'
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcp-options no-default-route
+
+  Only request an address from the DHCP server but do not request a default
+  gateway.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcp-options no-default-route

From ab3552884ee1c5560fb37c5deb5e4ee1662f20bc Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 10 Nov 2020 21:29:41 +0100
Subject: [PATCH 071/295] interface: document dhcp(v6)-options on CLI

---
 docs/_include/interface-common-with-dhcp.txt | 16 +++-
 docs/_include/interface-dhcpv6-options.txt   | 92 ++++++++++++++++++++
 docs/interfaces/ethernet.rst                 | 37 --------
 3 files changed, 104 insertions(+), 41 deletions(-)
 create mode 100644 docs/_include/interface-dhcpv6-options.txt

diff --git a/docs/_include/interface-common-with-dhcp.txt b/docs/_include/interface-common-with-dhcp.txt
index 585951b3..1fe38a92 100644
--- a/docs/_include/interface-common-with-dhcp.txt
+++ b/docs/_include/interface-common-with-dhcp.txt
@@ -2,10 +2,18 @@
    :var0: {{ var0 }}
    :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-dhcp-options.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
-
 .. cmdinclude:: ../_include/interface-common.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
+
+**DHCP**
+
+.. cmdinclude:: ../_include/interface-dhcp-options.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+
+**DHCPv6**
+
+.. cmdinclude:: ../_include/interface-dhcpv6-options.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
diff --git a/docs/_include/interface-dhcpv6-options.txt b/docs/_include/interface-dhcpv6-options.txt
new file mode 100644
index 00000000..7213079a
--- /dev/null
+++ b/docs/_include/interface-dhcpv6-options.txt
@@ -0,0 +1,92 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-options parameters-only
+
+  This statement specifies dhcp6c to only exchange informational configuration
+  parameters with servers. A list of DNS server addresses is an example of such
+  parameters. This statement is useful when the client does not need stateful
+  configuration parameters such as IPv6 addresses or prefixes.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcpv6-options parameters-only
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-options rapid-commit
+
+  When rapid-commit is specified, dhcp6c will include a rapid-commit option in
+  solicit messages and wait for an immediate reply instead of advertisements.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcpv6-options rapid-commit
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-options temporary
+
+  Request only a temporary address and not form an IA_NA (Identity Association
+  for Non-temporary Addresses) partnership.
+
+  Example
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcpv6-options temporary
+
+
+
+
+**DHCPv6-PD**
+
+VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation
+is supported by most ISPs who provide native IPv6 for consumers on fixed networks.
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-option pd <id> length <length>
+
+   Some ISPs by default only delegate a /64 prefix. To request for a specific
+   prefix size use this option to request for a bigger delegation for this pd
+   `<id>`. This value is in the range from 32 - 64 so you could request up to a
+   /32 prefix (if your ISP allows this) down to a /64 delegation.
+
+   The default value corresponds to 64.
+
+  Example:
+
+  To request a /56 prefix from your ISP use:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcpv6-options pd 0 length 56
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-option pd <id> interface <delegatee> address <address>
+
+   Specify the interface address used locally on the interfcae where the prefix
+   has been delegated to. ID must be a decimal integer.
+
+   It will be combined with the delegated prefix and the sla-id to form a
+   complete interface address. The default is to use the EUI-64 address of the
+   interface.
+
+   Example: Delegate a /64 prefix to interface eth0.10 which will use a local
+   address on this router of ``<prefix>::ffff``, as the address 65534 will
+   correspond to ``ffff`` in hexadecimal notation.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcpv6-option pd 0 interface eth0.10 address 65534
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-option pd <id> interface <delegatee> sla-id <id>
+
+   Specify the identifier value of the site-level aggregator (SLA) on the
+   interface. ID must be a decimal number greater then 0 which fits in the
+   length of SLA IDs (see below).
+
+   Example: If ID is 1 and the client is delegated an IPv6 prefix
+   2001:db8:ffff::/48, dhcp6c will combine the two values into a single IPv6
+   prefix, 2001:db8:ffff:1::/64, and will configure the prefix on the specified
+   interface.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcpv6-option pd 0 interface eth0.10 sla-id 1
+
diff --git a/docs/interfaces/ethernet.rst b/docs/interfaces/ethernet.rst
index 09c72ec8..cdf3622c 100644
--- a/docs/interfaces/ethernet.rst
+++ b/docs/interfaces/ethernet.rst
@@ -73,43 +73,6 @@ Link Administration
    Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It
    is the size (in bytes) of the largest ethernet frame sent on this link.
 
-Prefix Delegation (DHCPv6-PD)
------------------------------
-
-VyOS 1.3 (equuleus) supports DHCPv6-PD. DHCPv6 Prefix Delegation is supported
-by most ISPs who provide native IPv6 for consumers on fixed networks.
-
-.. cfgcmd:: set interfaces ethernet <interface> dhcpv6-option pd <id> length <length>
-
-   Some ISPs by default only delegate a /64 prefix. To request for a specific
-   prefix size use this option to request for a bigger delegation for this pd
-   `<id>`. This value
-   is in the range from 32 - 64 so you could request up to /32 down to a /64
-   delegation.
-
-   Default value is 64.
-
-.. cfgcmd:: set interfaces ethernet <interface> dhcpv6-option pd <id> interface <delegatee> address <address>
-
-   Specify the interface address used locally on the interfcae where the prefix
-   has been delegated to. ID must be a decimal integer.
-
-   It will be combined with the delegated prefix and the sla-id to form a complete
-   interface address. The default is to use the EUI-64 address of the interface.
-
-   Example:
-
-   Using ``<id>`` value 65535 will assign IPv6 address ``<prefix>::ffff`` to the
-   interface.
-
-.. cfgcmd:: set interfaces ethernet <interface> dhcpv6-option pd <id> interface <delegatee> sla-id <id>
-
-   Specify the identifier value of the site-level aggregator (SLA) on the
-   interface. ID must be a decimal number greater then 0 which fits in the length
-   of SLA IDs (see below). For example, if ID is 1 and the client is delegated
-   an IPv6 prefix 2001:db8:ffff::/48, dhcp6c will combine the two values into a
-   single IPv6 prefix, 2001:db8:ffff:1::/64, and will configure the prefix on
-   the specified interface.
 
 Operation
 =========

From f6ee81e58268ce1a666f68504f327f49c4402130 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 10 Nov 2020 21:42:38 +0100
Subject: [PATCH 072/295] interface: move mac and mtu documentation to common
 file

---
 docs/_include/interface-common.txt  | 12 ++++++++++++
 docs/_include/interface-disable.txt | 10 ++++++++++
 docs/_include/interface-mac.txt     | 10 ++++++++++
 docs/_include/interface-mtu.txt     | 10 ++++++++++
 docs/interfaces/bond.rst            | 16 ----------------
 docs/interfaces/bridge.rst          | 21 ---------------------
 docs/interfaces/dummy.rst           | 13 -------------
 docs/interfaces/ethernet.rst        | 21 ---------------------
 docs/interfaces/loopback.rst        |  8 --------
 docs/interfaces/pseudo-ethernet.rst | 19 -------------------
 docs/interfaces/vxlan.rst           | 21 ---------------------
 docs/interfaces/wirelessmodem.rst   | 18 ------------------
 12 files changed, 42 insertions(+), 137 deletions(-)
 create mode 100644 docs/_include/interface-disable.txt
 create mode 100644 docs/_include/interface-mac.txt
 create mode 100644 docs/_include/interface-mtu.txt

diff --git a/docs/_include/interface-common.txt b/docs/_include/interface-common.txt
index 56d4a22e..052088df 100644
--- a/docs/_include/interface-common.txt
+++ b/docs/_include/interface-common.txt
@@ -2,6 +2,18 @@
    :var0: {{ var0 }}
    :var1: {{ var1 }}
 
+.. cmdinclude:: ../_include/interface-disable.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+
+.. cmdinclude:: ../_include/interface-mac.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+
+.. cmdinclude:: ../_include/interface-mtu.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+
 .. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
diff --git a/docs/_include/interface-disable.txt b/docs/_include/interface-disable.txt
new file mode 100644
index 00000000..83ef3e53
--- /dev/null
+++ b/docs/_include/interface-disable.txt
@@ -0,0 +1,10 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> disable
+
+   Disable given `<interface>`. It will be placed in administratively down
+   (``A/D``) state.
+
+   Example:
+
+   .. code-block:: none
+
+     set interfaces {{ var0 }} {{ var1 }} disable
\ No newline at end of file
diff --git a/docs/_include/interface-mac.txt b/docs/_include/interface-mac.txt
new file mode 100644
index 00000000..29157555
--- /dev/null
+++ b/docs/_include/interface-mac.txt
@@ -0,0 +1,10 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> mac <xx:xx:xx:xx:xx:xx>
+
+   Configure user defined :abbr:`MAC (Media Access Control)` address on given
+   `<interface>`.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} mac '00:01:02:03:04:05'
\ No newline at end of file
diff --git a/docs/_include/interface-mtu.txt b/docs/_include/interface-mtu.txt
new file mode 100644
index 00000000..e727c3e9
--- /dev/null
+++ b/docs/_include/interface-mtu.txt
@@ -0,0 +1,10 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> mtu <mtu>
+
+  Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It
+  is the size (in bytes) of the largest ethernet frame sent on this link.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} mtu 1450
\ No newline at end of file
diff --git a/docs/interfaces/bond.rst b/docs/interfaces/bond.rst
index 6cdc08ea..4565eafc 100644
--- a/docs/interfaces/bond.rst
+++ b/docs/interfaces/bond.rst
@@ -23,22 +23,6 @@ Common interface configuration
 Link Administration
 -------------------
 
-.. cfgcmd:: set interfaces bonding <interface> description <description>
-
-   Assign given `<description>` to interface. Description will also be passed
-   to SNMP monitoring systems.
-
-
-.. cfgcmd:: set interfaces bonding <interface> disable
-
-   Disable given `<interface>`. It will be placed in administratively down
-   (``A/D``) state.
-
-.. cfgcmd:: set interfaces bonding <interface> mac <mac-address>
-
-   Configure user defined :abbr:`MAC (Media Access Control)` address on given
-   `<interface>`.
-
 .. cfgcmd:: set interfaces bonding <interface> mode <mode>
 
    Specifies one of the bonding policies. The default is 802.3ad. Possible
diff --git a/docs/interfaces/bridge.rst b/docs/interfaces/bridge.rst
index a880c023..8704d334 100644
--- a/docs/interfaces/bridge.rst
+++ b/docs/interfaces/bridge.rst
@@ -39,35 +39,14 @@ Common interface configuration
 Link Administration
 -------------------
 
-.. cfgcmd:: set interfaces bridge <interface> description <description>
-
-   Assign given `<description>` to interface. Description will also be
-   passed to SNMP monitoring systems.
-
-
-.. cfgcmd:: set interfaces bridge <interface> disable
-
-   Disable given `<interface>`. It will be placed in administratively
-   down (``A/D``) state.
-
-
 .. cfgcmd:: set interfaces bridge <interface> disable-flow-control
 
    Disable Ethernet flow control (pause frames).
 
-
-.. cfgcmd:: set interfaces bridge <interface> mac <mac-address>
-
-   Configure user defined :abbr:`MAC (Media Access Control)` address on
-   given `<interface>`.
-
-
 .. cfgcmd:: set interfaces bridge <interface> igmp querier
 
    Enable IGMP querier
 
-
-
 Member Interfaces
 -----------------
 
diff --git a/docs/interfaces/dummy.rst b/docs/interfaces/dummy.rst
index 02680f90..a3989138 100644
--- a/docs/interfaces/dummy.rst
+++ b/docs/interfaces/dummy.rst
@@ -33,19 +33,6 @@ Common interface configuration
    :var0: dummy
    :var1: dum0
 
-Link Administration
--------------------
-
-.. cfgcmd:: set interfaces dummy <interface> description <description>
-
-   Assign given `<description>` to interface. Description will also be passed
-   to SNMP monitoring systems.
-
-.. cfgcmd:: set interfaces dummy <interface> disable
-
-   Disable given `<interface>`. It will be placed in administratively down
-   state.
-
 Operation
 =========
 
diff --git a/docs/interfaces/ethernet.rst b/docs/interfaces/ethernet.rst
index cdf3622c..578ac517 100644
--- a/docs/interfaces/ethernet.rst
+++ b/docs/interfaces/ethernet.rst
@@ -48,32 +48,11 @@ Speed/Duplex
 Link Administration
 -------------------
 
-.. cfgcmd:: set interfaces ethernet <interface> description <description>
-
-   Assign given `<description>` to interface. Description will also be passed
-   to SNMP monitoring systems.
-
-.. cfgcmd:: set interfaces ethernet <interface> disable
-
-   Disable given `<interface>`. It will be placed in administratively down
-   (``A/D``) state.
-
 .. cfgcmd:: set interfaces ethernet <interface> disable-flow-control
 
    Disable Ethernet flow control (pause frames).
 
 
-.. cfgcmd:: set interfaces ethernet <interface> mac <mac-address>
-
-   Configure user defined :abbr:`MAC (Media Access Control)` address on given
-   `<interface>`.
-
-.. cfgcmd:: set interfaces ethernet <interface> mtu <mtu>
-
-   Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It
-   is the size (in bytes) of the largest ethernet frame sent on this link.
-
-
 Operation
 =========
 
diff --git a/docs/interfaces/loopback.rst b/docs/interfaces/loopback.rst
index 06486faa..ed241eb2 100644
--- a/docs/interfaces/loopback.rst
+++ b/docs/interfaces/loopback.rst
@@ -33,14 +33,6 @@ Common interface configuration
    :var0: loopback
    :var1: lo
 
-Link Administration
--------------------
-
-.. cfgcmd:: set interfaces loopback lo description <description>
-
-   Assign given `<description>` to interface `lo`. Description will also be
-   passed to SNMP monitoring systems.
-
 Operation
 =========
 
diff --git a/docs/interfaces/pseudo-ethernet.rst b/docs/interfaces/pseudo-ethernet.rst
index 4244284b..52ba789b 100644
--- a/docs/interfaces/pseudo-ethernet.rst
+++ b/docs/interfaces/pseudo-ethernet.rst
@@ -55,22 +55,3 @@ Physical Asignment
 
    Specifies the physical `<ethX>` Ethernet interface associated with a Pseudo
    Ethernet `<interface>`.
-
-Link Administration
--------------------
-
-.. cfgcmd:: set interfaces pseudo-ethernet <interface> description <description>
-
-   Assign given `<description>` to interface. Description will also be passed
-   to SNMP monitoring systems.
-
-.. cfgcmd:: set interfaces pseudo-ethernet <interface> disable
-
-   Disable given `<interface>`. It will be placed in administratively down
-   (``A/D``) state.
-
-.. cfgcmd:: set interfaces pseudo-ethernet <interface> mac <mac-address>
-
-   Configure user defined :abbr:`MAC (Media Access Control)` address on given
-   `<interface>`.
-
diff --git a/docs/interfaces/vxlan.rst b/docs/interfaces/vxlan.rst
index 742485dd..5ecfeb0a 100644
--- a/docs/interfaces/vxlan.rst
+++ b/docs/interfaces/vxlan.rst
@@ -90,27 +90,6 @@ L2VVPN / EVPN
    Source IP address used for VXLAN underlay. This is mandatory when using
    VXLAN via L2VPN/EVPN.
 
-
-Link Administration
--------------------
-
-.. cfgcmd:: set interfaces vxlan <interface> description <description>
-
-   Assign given `<description>` to interface. Description will also be passed
-   to SNMP monitoring systems.
-
-.. cfgcmd:: set interfaces vxlan <interface> disable
-
-   Disable given `<interface>`. It will be placed in administratively down
-   (``A/D``) state.
-
-.. cfgcmd:: set interfaces vxlan <interface> mtu <mtu>
-
-   Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It
-   is the size (in bytes) of the largest ethernet frame sent on this link.
-   MTU ranges from 1450 to 9000 bytes. For best performance you should have
-   a MTU > 1550 bytes on your underlay.
-
 Multicast VXLAN
 ===============
 
diff --git a/docs/interfaces/wirelessmodem.rst b/docs/interfaces/wirelessmodem.rst
index 5e2eac40..eabb17b9 100644
--- a/docs/interfaces/wirelessmodem.rst
+++ b/docs/interfaces/wirelessmodem.rst
@@ -51,24 +51,6 @@ Address
    connection is established at boot time and remains up. If the link fails for
    any reason, the link is brought back up immediately.
 
-Link Administration
--------------------
-
-.. cfgcmd:: set interfaces wirelessmodem <interface> description <description>
-
-   Assign given `<description>` to interface. Description will also be passed
-   to SNMP monitoring systems.
-
-.. cfgcmd:: set interfaces wirelessmodem <interface> disable
-
-   Disable given `<interface>`. It will be placed in administratively down
-   state.
-
-.. cfgcmd:: set interfaces wirelessmodem <interface> mtu <mtu>
-
-   Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It
-   is the size (in bytes) of the largest ethernet frame sent on this link.
-
 Example
 =======
 

From f0ed78b3ad3a7806b0443a2771cdeb6cbd13ba5a Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 10 Nov 2020 22:57:12 +0100
Subject: [PATCH 073/295] interfaces: consolidate vxlan, geneve, wifi, pppoe,
 wwan to new include command syntax

---
 docs/_include/interface-address-with-dhcp.txt | 26 +++----
 docs/_include/interface-address.txt           | 16 ++---
 docs/_include/interface-common-with-dhcp.txt  | 20 +++---
 .../interface-common-without-dhcp.txt         |  8 +--
 docs/_include/interface-common.txt            | 37 ++++++----
 docs/_include/interface-description.txt       | 10 +--
 docs/_include/interface-dhcpv6-options.txt    | 60 +---------------
 .../interface-dhcpv6-prefix-delegation.txt    | 54 +++++++++++++++
 .../interface-disable-flow-control.txt        | 22 ++++++
 .../interface-disable-link-detect.txt         | 12 ++++
 .../_include/interface-ipv6-addr-autoconf.txt | 16 ++---
 docs/_include/interface-ipv6-addr-eui64.txt   |  8 +--
 docs/_include/interface-mac.txt               |  4 +-
 docs/_include/interface-vlan.txt              | 50 ++++++++++++++
 docs/_include/interface-vrf.txt               | 12 ++++
 docs/interfaces/bond.rst                      | 18 ++---
 docs/interfaces/bridge.rst                    | 45 ++++++------
 docs/interfaces/dummy.rst                     |  8 +++
 docs/interfaces/ethernet.rst                  | 11 ++-
 docs/interfaces/geneve.rst                    |  7 +-
 docs/interfaces/l2tpv3.rst                    | 13 +++-
 docs/interfaces/macsec.rst                    | 12 ++--
 docs/interfaces/pppoe.rst                     | 68 ++++++-------------
 docs/interfaces/pseudo-ethernet.rst           |  4 +-
 docs/interfaces/tunnel.rst                    |  7 ++
 docs/interfaces/vxlan.rst                     | 61 ++++++++---------
 docs/interfaces/wireless.rst                  | 28 ++++++--
 docs/interfaces/wirelessmodem.rst             | 12 +++-
 28 files changed, 385 insertions(+), 264 deletions(-)
 create mode 100644 docs/_include/interface-dhcpv6-prefix-delegation.txt
 create mode 100644 docs/_include/interface-disable-flow-control.txt
 create mode 100644 docs/_include/interface-disable-link-detect.txt
 create mode 100644 docs/_include/interface-vlan.txt
 create mode 100644 docs/_include/interface-vrf.txt

diff --git a/docs/_include/interface-address-with-dhcp.txt b/docs/_include/interface-address-with-dhcp.txt
index 28968bea..10838e72 100644
--- a/docs/_include/interface-address-with-dhcp.txt
+++ b/docs/_include/interface-address-with-dhcp.txt
@@ -1,20 +1,20 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> address <address | dhcp |
    dhcpv6>
 
-   Configure interface `<interface>` with one or more interface addresses.
+  Configure interface `<interface>` with one or more interface addresses.
 
-   * **address** can be specified multiple times as IPv4 and/or IPv6
-     address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64
-   * **dhcp** interface address is received by DHCP from a DHCP server
-     on this segment.
-   * **dhcpv6** interface address is received by DHCPv6 from a DHCPv6
-     server on this segment.
+  * **address** can be specified multiple times as IPv4 and/or IPv6
+    address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64
+  * **dhcp** interface address is received by DHCP from a DHCP server
+    on this segment.
+  * **dhcpv6** interface address is received by DHCPv6 from a DHCPv6
+    server on this segment.
 
-   Example:
+  Example:
 
-   .. code-block:: none
+  .. code-block:: none
 
-     set interfaces {{ var0 }} {{ var1 }} address 192.0.2.1/24
-     set interfaces {{ var0 }} {{ var1 }} address 2001:db8::1/64
-     set interfaces {{ var0 }} {{ var1 }} dhcp
-     set interfaces {{ var0 }} {{ var1 }} dhcpv6
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} address 192.0.2.1/24
+    set interfaces {{ var0 }} {{ var1 }} address 2001:db8::1/64
+    set interfaces {{ var0 }} {{ var1 }} dhcp
+    set interfaces {{ var0 }} {{ var1 }} dhcpv6
\ No newline at end of file
diff --git a/docs/_include/interface-address.txt b/docs/_include/interface-address.txt
index 4ca75940..00a9ec09 100644
--- a/docs/_include/interface-address.txt
+++ b/docs/_include/interface-address.txt
@@ -1,14 +1,14 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> address <address>
 
-   Configure interface `<interface>` with one or more interface
-   addresses.
+  Configure interface `<interface>` with one or more interface
+  addresses.
 
-   * **address** can be specified multiple times as IPv4 and/or IPv6
-     address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64
+  * **address** can be specified multiple times as IPv4 and/or IPv6
+    address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64
 
-   Example:
+  Example:
 
-   .. code-block:: none
+  .. code-block:: none
 
-     set interfaces {{ var0 }} {{ var1 }} address 192.0.2.1/24
-     set interfaces {{ var0 }} {{ var1 }} address 2001:db8::1/64
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} address 192.0.2.1/24
+    set interfaces {{ var0 }} {{ var1 }} address 2001:db8::1/64
\ No newline at end of file
diff --git a/docs/_include/interface-common-with-dhcp.txt b/docs/_include/interface-common-with-dhcp.txt
index 1fe38a92..3e1394a3 100644
--- a/docs/_include/interface-common-with-dhcp.txt
+++ b/docs/_include/interface-common-with-dhcp.txt
@@ -1,19 +1,17 @@
 .. cmdinclude:: ../_include/interface-address-with-dhcp.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
 
 .. cmdinclude:: ../_include/interface-common.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
 
-**DHCP**
+**DHCP(v6)**
 
 .. cmdinclude:: ../_include/interface-dhcp-options.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
-
-**DHCPv6**
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
 
 .. cmdinclude:: ../_include/interface-dhcpv6-options.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
diff --git a/docs/_include/interface-common-without-dhcp.txt b/docs/_include/interface-common-without-dhcp.txt
index 8e995ee1..d861f003 100644
--- a/docs/_include/interface-common-without-dhcp.txt
+++ b/docs/_include/interface-common-without-dhcp.txt
@@ -1,7 +1,7 @@
 .. cmdinclude:: ../_include/interface-address.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
 
 .. cmdinclude:: ../_include/interface-common.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
diff --git a/docs/_include/interface-common.txt b/docs/_include/interface-common.txt
index 052088df..de29356f 100644
--- a/docs/_include/interface-common.txt
+++ b/docs/_include/interface-common.txt
@@ -1,23 +1,36 @@
 .. cmdinclude:: ../_include/interface-description.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
 
 .. cmdinclude:: ../_include/interface-disable.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
+
+.. cmdinclude:: ../_include/interface-disable-flow-control.txt
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
+
+.. cmdinclude:: ../_include/interface-disable-link-detect.txt
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
 
 .. cmdinclude:: ../_include/interface-mac.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
 
 .. cmdinclude:: ../_include/interface-mtu.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
 
 .. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
 
 .. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
+
+.. cmdinclude:: ../_include/interface-vrf.txt
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
+
diff --git a/docs/_include/interface-description.txt b/docs/_include/interface-description.txt
index 992d4945..1c6a870f 100644
--- a/docs/_include/interface-description.txt
+++ b/docs/_include/interface-description.txt
@@ -1,10 +1,10 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> description <description>
 
-   Set a human readable, descriptive alias for this connection. Alias is used by
-   e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools.
+  Set a human readable, descriptive alias for this connection. Alias is used by
+  e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools.
 
-   Example:
+  Example:
 
-   .. code-block:: none
+  .. code-block:: none
 
-     set interfaces {{ var0 }} {{ var1 }} description 'This is an awesome interface running on VyOS'
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} description 'This is an awesome interface running on VyOS'
\ No newline at end of file
diff --git a/docs/_include/interface-dhcpv6-options.txt b/docs/_include/interface-dhcpv6-options.txt
index 7213079a..94e80309 100644
--- a/docs/_include/interface-dhcpv6-options.txt
+++ b/docs/_include/interface-dhcpv6-options.txt
@@ -33,60 +33,6 @@
 
     set interfaces {{ var0 }} {{ var1 }} dhcpv6-options temporary
 
-
-
-
-**DHCPv6-PD**
-
-VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation
-is supported by most ISPs who provide native IPv6 for consumers on fixed networks.
-
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-option pd <id> length <length>
-
-   Some ISPs by default only delegate a /64 prefix. To request for a specific
-   prefix size use this option to request for a bigger delegation for this pd
-   `<id>`. This value is in the range from 32 - 64 so you could request up to a
-   /32 prefix (if your ISP allows this) down to a /64 delegation.
-
-   The default value corresponds to 64.
-
-  Example:
-
-  To request a /56 prefix from your ISP use:
-
-  .. code-block:: none
-
-    set interfaces {{ var0 }} {{ var1 }} dhcpv6-options pd 0 length 56
-
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-option pd <id> interface <delegatee> address <address>
-
-   Specify the interface address used locally on the interfcae where the prefix
-   has been delegated to. ID must be a decimal integer.
-
-   It will be combined with the delegated prefix and the sla-id to form a
-   complete interface address. The default is to use the EUI-64 address of the
-   interface.
-
-   Example: Delegate a /64 prefix to interface eth0.10 which will use a local
-   address on this router of ``<prefix>::ffff``, as the address 65534 will
-   correspond to ``ffff`` in hexadecimal notation.
-
-  .. code-block:: none
-
-    set interfaces {{ var0 }} {{ var1 }} dhcpv6-option pd 0 interface eth0.10 address 65534
-
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-option pd <id> interface <delegatee> sla-id <id>
-
-   Specify the identifier value of the site-level aggregator (SLA) on the
-   interface. ID must be a decimal number greater then 0 which fits in the
-   length of SLA IDs (see below).
-
-   Example: If ID is 1 and the client is delegated an IPv6 prefix
-   2001:db8:ffff::/48, dhcp6c will combine the two values into a single IPv6
-   prefix, 2001:db8:ffff:1::/64, and will configure the prefix on the specified
-   interface.
-
-  .. code-block:: none
-
-    set interfaces {{ var0 }} {{ var1 }} dhcpv6-option pd 0 interface eth0.10 sla-id 1
-
+.. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
diff --git a/docs/_include/interface-dhcpv6-prefix-delegation.txt b/docs/_include/interface-dhcpv6-prefix-delegation.txt
new file mode 100644
index 00000000..61e6aaa2
--- /dev/null
+++ b/docs/_include/interface-dhcpv6-prefix-delegation.txt
@@ -0,0 +1,54 @@
+**DHCPv6 Prefix Delegation (PD)**
+
+VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation
+is supported by most ISPs who provide native IPv6 for consumers on fixed networks.
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-option pd <id> length <length>
+
+   Some ISPs by default only delegate a /64 prefix. To request for a specific
+   prefix size use this option to request for a bigger delegation for this pd
+   `<id>`. This value is in the range from 32 - 64 so you could request up to a
+   /32 prefix (if your ISP allows this) down to a /64 delegation.
+
+   The default value corresponds to 64.
+
+  Example:
+
+  To request a /56 prefix from your ISP use:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcpv6-options pd 0 length 56
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-option pd <id> interface <delegatee> address <address>
+
+   Specify the interface address used locally on the interfcae where the prefix
+   has been delegated to. ID must be a decimal integer.
+
+   It will be combined with the delegated prefix and the sla-id to form a
+   complete interface address. The default is to use the EUI-64 address of the
+   interface.
+
+   Example: Delegate a /64 prefix to interface eth0.10 which will use a local
+   address on this router of ``<prefix>::ffff``, as the address 65534 will
+   correspond to ``ffff`` in hexadecimal notation.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcpv6-option pd 0 interface eth0.10 address 65534
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-option pd <id> interface <delegatee> sla-id <id>
+
+   Specify the identifier value of the site-level aggregator (SLA) on the
+   interface. ID must be a decimal number greater then 0 which fits in the
+   length of SLA IDs (see below).
+
+   Example: If ID is 1 and the client is delegated an IPv6 prefix
+   2001:db8:ffff::/48, dhcp6c will combine the two values into a single IPv6
+   prefix, 2001:db8:ffff:1::/64, and will configure the prefix on the specified
+   interface.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} dhcpv6-option pd 0 interface eth0.10 sla-id 1
+
diff --git a/docs/_include/interface-disable-flow-control.txt b/docs/_include/interface-disable-flow-control.txt
new file mode 100644
index 00000000..2b319b22
--- /dev/null
+++ b/docs/_include/interface-disable-flow-control.txt
@@ -0,0 +1,22 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} disable-flow-control
+
+  Ethernet flow control is a mechanism for temporarily stopping the transmission
+  of data on Ethernet family computer networks. The goal of this mechanism is to
+  ensure zero packet loss in the presence of network congestion.
+
+  The first flow control mechanism, the pause frame, was defined by the IEEE
+  802.3x standard.
+
+  A sending station (computer or network switch) may be transmitting data faster
+  than the other end of the link can accept it. Using flow control, the receiving
+  station can signal the sender requesting suspension of transmissions until the
+  receiver catches up.
+
+  Use this command to disable the generation of Ethernet flow control (pause
+  frames).
+
+   Example:
+
+   .. code-block:: none
+
+     set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} disable-flow-control
\ No newline at end of file
diff --git a/docs/_include/interface-disable-link-detect.txt b/docs/_include/interface-disable-link-detect.txt
new file mode 100644
index 00000000..a9c0e85f
--- /dev/null
+++ b/docs/_include/interface-disable-link-detect.txt
@@ -0,0 +1,12 @@
+.. cfgcmd:: set interfaces {{ var0 }} {{ var2 }} {{ var3 }} <interface> disable-link-detect
+
+  Use this command to direct an interface to not detect any physical state
+  changes on a link, for example, when the cable is unplugged.
+
+  Default is to detects physical link state changes.
+
+   Example:
+
+   .. code-block:: none
+
+     set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} disable-link-detect
\ No newline at end of file
diff --git a/docs/_include/interface-ipv6-addr-autoconf.txt b/docs/_include/interface-ipv6-addr-autoconf.txt
index 22f9ee59..e16cff0e 100644
--- a/docs/_include/interface-ipv6-addr-autoconf.txt
+++ b/docs/_include/interface-ipv6-addr-autoconf.txt
@@ -1,14 +1,12 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> ipv6 address autoconf
 
-
-  :abbr:`SLAAC (Stateless Address Autoconfiguration)`
-  :rfc:`4862`. IPv6 hosts can configure themselves automatically when connected
-  to an IPv6 network using the Neighbor Discovery Protocol via :abbr:`ICMPv6
-  (Internet Control Message Protocol version 6)` router discovery messages.
-  When first connected to a network, a host sends a link-local router
-  solicitation multicast request for its configuration parameters; routers
-  respond to such a request with a router advertisement packet that contains
-  Internet Layer configuration parameters.
+  :abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts
+  can configure themselves automatically when connected to an IPv6 network using
+  the Neighbor Discovery Protocol via :abbr:`ICMPv6 (Internet Control Message
+  Protocol version 6)` router discovery messages. When first connected to a
+  network, a host sends a link-local router solicitation multicast request for
+  its configuration parameters; routers respond to such a request with a router
+  advertisement packet that contains Internet Layer configuration parameters.
 
   .. note:: This method automatically disables IPv6 traffic forwarding on the
     interface in question.
diff --git a/docs/_include/interface-ipv6-addr-eui64.txt b/docs/_include/interface-ipv6-addr-eui64.txt
index 40f22e5f..5f32ccad 100644
--- a/docs/_include/interface-ipv6-addr-eui64.txt
+++ b/docs/_include/interface-ipv6-addr-eui64.txt
@@ -1,8 +1,8 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> ipv6 address eui64 <prefix>
 
-   :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
-   :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address.
+  :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
+  :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address.
 
-   .. code-block:: none
+  .. code-block:: none
 
-     set interfaces {{ var0 }} {{ var1 }} ipv6 address eui64 2001:db8:beef::/64
+    set interfaces {{ var0 }} {{ var1 }} ipv6 address eui64 2001:db8:beef::/64
diff --git a/docs/_include/interface-mac.txt b/docs/_include/interface-mac.txt
index 29157555..de7f2d83 100644
--- a/docs/_include/interface-mac.txt
+++ b/docs/_include/interface-mac.txt
@@ -1,7 +1,7 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> mac <xx:xx:xx:xx:xx:xx>
 
-   Configure user defined :abbr:`MAC (Media Access Control)` address on given
-   `<interface>`.
+  Configure user defined :abbr:`MAC (Media Access Control)` address on given
+  `<interface>`.
 
   Example:
 
diff --git a/docs/_include/interface-vlan.txt b/docs/_include/interface-vlan.txt
new file mode 100644
index 00000000..c1472018
--- /dev/null
+++ b/docs/_include/interface-vlan.txt
@@ -0,0 +1,50 @@
+IEEE 802.1q, often referred to as Dot1q, is the networking standard that supports
+virtual LANs (VLANs) on an IEEE 802.3 Ethernet network. The standard defines a
+system of VLAN tagging for Ethernet frames and the accompanying procedures to be
+used by bridges and switches in handling such frames. The standard also contains
+provisions for a quality-of-service prioritization scheme commonly known as IEEE
+802.1p and defines the Generic Attribute Registration Protocol.
+
+Portions of the network which are VLAN-aware (i.e., IEEE 802.1q conformant) can
+include VLAN tags. When a frame enters the VLAN-aware portion of the network, a
+tag is added to represent the VLAN membership. Each frame must be distinguishable
+as being within exactly one VLAN. A frame in the VLAN-aware portion of the network
+that does not contain a VLAN tag is assumed to be flowing on the native VLAN.
+
+The standard was developed by IEEE 802.1, a working group of the IEEE 802
+standards committee, and continues to be actively revised. One of the notable
+revisions is 802.1Q-2014 which incorporated IEEE 802.1aq (Shortest Path Bridging)
+and much of the IEEE 802.1d standard.
+
+802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The
+term used for this is ``vif``.
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> vif <vlan-id>
+
+  Create a new VLAN interface on interface `<interface>` using the VLAN number
+  provided via `<vlan-id>`.
+
+  You can create multiple VLAN interfaces on a physical interface. The VLAN ID
+  range is from 0 to 4094.
+
+  .. note:: Only 802.1Q-tagged packets are accepted on Ethernet vifs.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} vif 10
+
+.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
+
+.. cmdinclude:: ../_include/interface-common.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
\ No newline at end of file
diff --git a/docs/_include/interface-vrf.txt b/docs/_include/interface-vrf.txt
new file mode 100644
index 00000000..92bfae93
--- /dev/null
+++ b/docs/_include/interface-vrf.txt
@@ -0,0 +1,12 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> vrf <vrf>
+
+  Place interface in given VRF instance.
+
+  .. seealso:: There is an entire chapter about how to configure a :ref:`vrf`,
+    please check this for additional information.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} vrf red
\ No newline at end of file
diff --git a/docs/interfaces/bond.rst b/docs/interfaces/bond.rst
index 4565eafc..859c25c3 100644
--- a/docs/interfaces/bond.rst
+++ b/docs/interfaces/bond.rst
@@ -20,8 +20,15 @@ Common interface configuration
    :var0: bond
    :var1: bond0
 
-Link Administration
--------------------
+Member Interfaces
+-----------------
+
+.. cfgcmd:: set interfaces bonding <interface> member interface <member>
+
+   Enslave `<member>` interface to bond `<interface>`.
+
+Bond options
+------------
 
 .. cfgcmd:: set interfaces bonding <interface> mode <mode>
 
@@ -246,13 +253,6 @@ Link Administration
    The maximum number of targets that can be specified is 16. The default value
    is no IP addresses.
 
-Member Interfaces
------------------
-
-.. cfgcmd:: set interfaces bonding <interface> member interface <member>
-
-   Enslave `<member>` interface to bond `<interface>`.
-
 Example
 -------
 
diff --git a/docs/interfaces/bridge.rst b/docs/interfaces/bridge.rst
index 8704d334..144e5f6d 100644
--- a/docs/interfaces/bridge.rst
+++ b/docs/interfaces/bridge.rst
@@ -24,29 +24,6 @@ Common interface configuration
    :var0: bridge
    :var1: br0
 
-.. cfgcmd:: set interfaces bridge <interface> aging <time>
-
-   MAC address aging `<time`> in seconds (default: 300).
-
-.. cfgcmd:: set interfaces bridge <interface> max-age <time>
-
-   Bridge maximum aging `<time>` in seconds (default: 20).
-
-   If a another bridge in the spanning tree does not send out a hello
-   packet for a long period of time, it is assumed to be dead.
-
-
-Link Administration
--------------------
-
-.. cfgcmd:: set interfaces bridge <interface> disable-flow-control
-
-   Disable Ethernet flow control (pause frames).
-
-.. cfgcmd:: set interfaces bridge <interface> igmp querier
-
-   Enable IGMP querier
-
 Member Interfaces
 -----------------
 
@@ -82,7 +59,6 @@ Member Interfaces
    deciding which link to use. Faster interfaces should have lower
    costs.
 
-
 .. _stp:
 
 STP Parameter
@@ -118,9 +94,26 @@ links providing fault tolerance if an active link fails.
    Designated Bridges. Hello packets are used to communicate information
    about the topology throughout the entire Bridged Local Area Network.
 
+Additional Bridge Options
+-------------------------
+
+.. cfgcmd:: set interfaces bridge <interface> aging <time>
+
+   MAC address aging `<time`> in seconds (default: 300).
+
+.. cfgcmd:: set interfaces bridge <interface> max-age <time>
+
+   Bridge maximum aging `<time>` in seconds (default: 20).
+
+   If a another bridge in the spanning tree does not send out a hello
+   packet for a long period of time, it is assumed to be dead.
+
+.. cfgcmd:: set interfaces bridge <interface> igmp querier
+
+   Enable IGMP querier
 
 Example
--------
+#######
 
 Creating a bridge interface is very simple. In this example we will
 have:
@@ -155,7 +148,7 @@ This results in the active configuration:
 
 
 Operation
-=========
+#########
 
 .. opcmd:: show bridge
 
diff --git a/docs/interfaces/dummy.rst b/docs/interfaces/dummy.rst
index a3989138..e0557d1d 100644
--- a/docs/interfaces/dummy.rst
+++ b/docs/interfaces/dummy.rst
@@ -33,6 +33,14 @@ Common interface configuration
    :var0: dummy
    :var1: dum0
 
+.. cmdinclude:: ../_include/interface-disable.txt
+   :var0: dummy
+   :var1: dum0
+
+.. cmdinclude:: ../_include/interface-vrf.txt
+   :var0: dummy
+   :var1: dum0
+
 Operation
 =========
 
diff --git a/docs/interfaces/ethernet.rst b/docs/interfaces/ethernet.rst
index 578ac517..1d3aeda3 100644
--- a/docs/interfaces/ethernet.rst
+++ b/docs/interfaces/ethernet.rst
@@ -45,13 +45,12 @@ Speed/Duplex
 
    VyOS default will be `auto`.
 
-Link Administration
--------------------
-
-.. cfgcmd:: set interfaces ethernet <interface> disable-flow-control
-
-   Disable Ethernet flow control (pause frames).
+VLAN (802.1q) configuration
+---------------------------
 
+.. cmdinclude:: ../_include/interface-vlan.txt
+   :var0: ethernet
+   :var1: eth0
 
 Operation
 =========
diff --git a/docs/interfaces/geneve.rst b/docs/interfaces/geneve.rst
index 8518fcf0..b59bb311 100644
--- a/docs/interfaces/geneve.rst
+++ b/docs/interfaces/geneve.rst
@@ -42,6 +42,9 @@ Common interface configuration
    :var0: geneve
    :var1: gnv0
 
+GENEVE specific options
+-----------------------
+
 .. cfgcmd:: set interfaces geneve gnv0 remote <address>
 
    Configure GENEVE tunnel far end/remote tunnel endpoint.
@@ -55,7 +58,3 @@ Common interface configuration
    decisions or MAY be used as a mechanism to distinguish between overlapping
    address spaces contained in the encapsulated packet when load balancing
    across CPUs.
-
-.. cfgcmd:: set interfaces geneve gnv0 mtu <mtu>
-
-   Set interface :abbr:`MTU (Maximum Transfer Unit)` size.
diff --git a/docs/interfaces/l2tpv3.rst b/docs/interfaces/l2tpv3.rst
index ea540c01..c456a58e 100644
--- a/docs/interfaces/l2tpv3.rst
+++ b/docs/interfaces/l2tpv3.rst
@@ -2,8 +2,9 @@
 
 .. _l2tpv3-interface:
 
+######
 L2TPv3
-------
+######
 
 L2TPv3 is a pseudowire protocol, you can read more about on `Wikipedia L2TPv3`_
 or in :rfc:`3921`
@@ -11,6 +12,16 @@ or in :rfc:`3921`
 L2TPv3 can transport any traffic including ethernet frames. L2TPv2 is limited
 to PPP.
 
+Configuration
+#############
+
+Common interface configuration
+------------------------------
+
+.. cmdinclude:: ../_include/interface-common-without-dhcp.txt
+   :var0: l2tpv3
+   :var1: l2tpeth0
+
 Over IP
 ^^^^^^^
 
diff --git a/docs/interfaces/macsec.rst b/docs/interfaces/macsec.rst
index 242636f1..f841e17d 100644
--- a/docs/interfaces/macsec.rst
+++ b/docs/interfaces/macsec.rst
@@ -23,6 +23,9 @@ Common interface configuration
    :var0: macsec
    :var1: macsec0
 
+MACsec specific options
+-----------------------
+
 .. cfgcmd:: set interfaces macsec <interface> security cipher [gcm-aes-128]
 
   Select cipher suite used for cryptographic operations. This setting is
@@ -41,9 +44,8 @@ Common interface configuration
   A physical interface is required to connect this MACsec instance to. Traffic
   leaving this interfac will now be authenticated/encrypted.
 
-
 Key Management
---------------
+^^^^^^^^^^^^^^
 
 :abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between
 individual peers.
@@ -63,7 +65,7 @@ individual peers.
   distributing SAKs.
 
 Replay protection
------------------
+^^^^^^^^^^^^^^^^^
 
 .. cfgcmd:: set interfaces macsec <interface> security replay-window <window>
 
@@ -75,7 +77,7 @@ Replay protection
   - ``1-4294967295``: Number of packets that could be misordered
 
 Operation
-=========
+#########
 
 .. opcmd:: run generate macsec mka-cak
 
@@ -122,7 +124,7 @@ Operation
         TXSC: 005056bfefaa0001 on SA 0
 
 Examples
-========
+########
 
 * Two routers connected both via eth1 through an untrusted switch
 * R1 has 192.0.2.1/24 & 2001:db8::1/64
diff --git a/docs/interfaces/pppoe.rst b/docs/interfaces/pppoe.rst
index 8fa35492..e85c16aa 100644
--- a/docs/interfaces/pppoe.rst
+++ b/docs/interfaces/pppoe.rst
@@ -54,6 +54,24 @@ vDSL/aDSL understands.
 Configuration
 =============
 
+Common interface configuration
+------------------------------
+
+.. cmdinclude:: ../_include/interface-description.txt
+   :var0: pppoe
+   :var1: pppoe0
+
+.. cmdinclude:: ../_include/interface-disable.txt
+   :var0: pppoe
+   :var1: pppoe0
+
+.. cmdinclude:: ../_include/interface-vrf.txt
+   :var0: pppoe
+   :var1: pppoe0
+
+PPPoE specific configuration
+----------------------------
+
 .. cfgcmd:: set interfaces pppoe <interface> access-concentrator <name>
 
    Use this command to restrict the PPPoE session on a given access
@@ -102,16 +120,6 @@ Configuration
    **default:** A default route to the remote endpoint is automatically added
    when the link comes up (i.e. auto).
 
-.. cfgcmd:: set interfaces pppoe <interface> description
-
-   Assign given `<description>` to interface. Description will also be passed
-   to SNMP monitoring systems.
-
-.. cfgcmd:: set interfaces pppoe <interface> disable
-
-   Disable given `<interface>`. It will be placed in administratively down
-   (``A/D``) state.
-
 .. cfgcmd:: set interfaces pppoe <interface> idle-timeout <time>
 
    Use this command to set the idle timeout interval to be used with on-demand
@@ -167,43 +175,9 @@ IPv6
    Use this command to enable acquisition of IPv6 address using stateless
    autoconfig (SLAAC).
 
-Prefix Delegation (DHCPv6-PD)
-^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
-
-VyOS 1.3 (equuleus) supports DHCPv6-PD. DHCPv6 Prefix Delegation is supported
-by most ISPs who provide native IPv6 for consumers on fixed networks.
-
-.. cfgcmd:: set interfaces pppoe <interface> dhcpv6-option pd <id> length <length>
-
-   Some ISPs by default only delegate a /64 prefix. To request for a specific
-   prefix size use this option to request for a bigger delegation for this pd
-   `<id>`. This value
-   is in the range from 32 - 64 so you could request up to /32 down to a /64
-   delegation.
-
-   Default value is 64.
-
-.. cfgcmd:: set interfaces pppoe <interface> dhcpv6-option pd <id> interface <delegatee> address <address>
-
-   Specify the interface address used locally on the interfcae where the prefix
-   has been delegated to. ID must be a decimal integer.
-
-   It will be combined with the delegated prefix and the sla-id to form a complete
-   interface address. The default is to use the EUI-64 address of the interface.
-
-   Example:
-
-   Using ``<id>`` value 65535 will assign IPv6 address ``<prefix>::ffff`` to the
-   interface.
-
-.. cfgcmd:: set interfaces pppoe <interface> dhcpv6-option pd <id> interface <delegatee> sla-id <id>
-
-   Specify the identifier value of the site-level aggregator (SLA) on the
-   interface. ID must be a decimal number greater then 0 which fits in the length
-   of SLA IDs (see below). For example, if ID is 1 and the client is delegated
-   an IPv6 prefix 2001:db8:ffff::/48, dhcp6c will combine the two values into a
-   single IPv6 prefix, 2001:db8:ffff:1::/64, and will configure the prefix on
-   the specified interface.
+.. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
+  :var0: pppoe
+  :var1: pppoe0
 
 Operation
 =========
diff --git a/docs/interfaces/pseudo-ethernet.rst b/docs/interfaces/pseudo-ethernet.rst
index 52ba789b..26d8a364 100644
--- a/docs/interfaces/pseudo-ethernet.rst
+++ b/docs/interfaces/pseudo-ethernet.rst
@@ -48,8 +48,8 @@ Common interface configuration
    :var0: pseudo-ethernet
    :var1: peth0
 
-Physical Asignment
-------------------
+Pseudo Ethernet/MACVLAN specific options
+----------------------------------------
 
 .. cfgcmd:: set interfaces pseudo-ethernet <interface> source-interface <ethX>
 
diff --git a/docs/interfaces/tunnel.rst b/docs/interfaces/tunnel.rst
index f20127f5..9674b0a8 100644
--- a/docs/interfaces/tunnel.rst
+++ b/docs/interfaces/tunnel.rst
@@ -13,6 +13,13 @@ GRE options that can be useful.
 All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's take
 a closer look at the protocols and options currently supported by VyOS.
 
+Common interface configuration
+------------------------------
+
+.. cmdinclude:: ../_include/interface-common-without-dhcp.txt
+   :var0: tunnel
+   :var1: tun0
+
 IPIP
 ----
 
diff --git a/docs/interfaces/vxlan.rst b/docs/interfaces/vxlan.rst
index 5ecfeb0a..40dc5400 100644
--- a/docs/interfaces/vxlan.rst
+++ b/docs/interfaces/vxlan.rst
@@ -40,55 +40,54 @@ Common interface configuration
 ------------------------------
 
 .. cmdinclude:: ../_include/interface-common-without-dhcp.txt
-   :var0: vxlan
-   :var1: vxlan0
+  :var0: vxlan
+  :var1: vxlan0
+
+VXLAN specific options
+-----------------------
 
 .. cfgcmd:: set interfaces vxlan <interface> vni <number>
 
-   Each VXLAN segment is identified through a 24-bit segment ID, termed the
-   :abbr:`VNI (VXLAN Network Identifier (or VXLAN Segment ID))`, This allows
-   up to 16M VXLAN segments to coexist within the same administrative domain.
+  Each VXLAN segment is identified through a 24-bit segment ID, termed the
+  :abbr:`VNI (VXLAN Network Identifier (or VXLAN Segment ID))`, This allows
+  up to 16M VXLAN segments to coexist within the same administrative domain.
 
-Multicast
-^^^^^^^^^
+.. cfgcmd:: set interfaces vxlan <interface> port <port>
 
-.. cfgcmd:: set interfaces vxlan <interface> source-interface <interface>
+  Configure port number of remote VXLAN endpoint.
 
-   Interface used for VXLAN underlay. This is mandatory when using VXLAN via
-   a multicast network. VXLAN traffic will always enter and exit this interface.
+  .. note:: As VyOS is Linux based the default port used is not using 4789
+     as the default IANA-assigned destination UDP port number. Instead VyOS
+     uses the Linux default port of 8472.
 
+.. cfgcmd:: set interfaces vxlan <interface> source-address <interface>
 
-.. cfgcmd:: set interfaces vxlan <interface> group <address>
-
-   Multicast group address for VXLAN interface. VXLAN tunnels can be built
-   either via Multicast or via Unicast.
-
-   Both IPv4 and IPv6 multicast is possible.
+  Source IP address used for VXLAN underlay. This is mandatory when using VXLAN
+  via L2VPN/EVPN.
 
 Unicast
 ^^^^^^^
 
 .. cfgcmd:: set interfaces vxlan <interface> remote <address>
 
-   IPv4/IPv6 remote address of the VXLAN tunnel. Alternative to multicast, the
-   remote IPv4/IPv6 address can set directly.
+  IPv4/IPv6 remote address of the VXLAN tunnel. Alternative to multicast, the
+  remote IPv4/IPv6 address can set directly.
+
+Multicast
+^^^^^^^^^
+
+.. cfgcmd:: set interfaces vxlan <interface> source-interface <interface>
+
+  Interface used for VXLAN underlay. This is mandatory when using VXLAN via
+  a multicast network. VXLAN traffic will always enter and exit this interface.
 
 
-.. cfgcmd:: set interfaces vxlan <interface> port <port>
+.. cfgcmd:: set interfaces vxlan <interface> group <address>
 
-    Configure port number of remote VXLAN endpoint.
+  Multicast group address for VXLAN interface. VXLAN tunnels can be built
+  either via Multicast or via Unicast.
 
-    .. note:: As VyOS is Linux based the default port used is not using 4789
-       as the default IANA-assigned destination UDP port number. Instead VyOS
-       uses the Linux default port of 8472.
-
-L2VVPN / EVPN
-^^^^^^^^^^^^^
-
-.. cfgcmd:: set interfaces vxlan <interface> source-address <interface>
-
-   Source IP address used for VXLAN underlay. This is mandatory when using
-   VXLAN via L2VPN/EVPN.
+  Both IPv4 and IPv6 multicast is possible.
 
 Multicast VXLAN
 ===============
diff --git a/docs/interfaces/wireless.rst b/docs/interfaces/wireless.rst
index 8b1195fa..b146a21b 100644
--- a/docs/interfaces/wireless.rst
+++ b/docs/interfaces/wireless.rst
@@ -1,7 +1,10 @@
+.. include:: ../_include/need_improvement.txt
+
 .. _wireless-interface:
 
+###################
 Wireless LAN (WiFi)
--------------------
+###################
 
 :abbr:`WLAN (Wireless LAN)` interface provide 802.11 (a/b/g/n/ac) wireless
 support (commonly referred to as Wi-Fi) by means of compatible hardware. If your
@@ -22,17 +25,30 @@ If the system detects an unconfigured wireless device, it will be automatically
 added the configuration tree, specifying any detected settings (for example,
 its MAC address) and configured to run in monitor mode.
 
-To be able to use the wireless interfaces you will first need to set a
-regulatory domain with the country code of your location.
+Configuration
+#############
 
-.. cfgcmd:: set system wifi-regulatory-domain DE
+Common interface configuration
+------------------------------
 
-   Configure system wide Wi-Fi regulatory domain. A reboot is required for this
-   change to be enabled.
+.. cmdinclude:: ../_include/interface-common-with-dhcp.txt
+   :var0: wireless
+   :var1: wlan0
+
+Wireless specific options
+-------------------------
 
 Configuring Access-Point
 ^^^^^^^^^^^^^^^^^^^^^^^^
 
+To be able to use the wireless interfaces you will first need to set a
+regulatory domain with the country code of your location.
+
+.. cfgcmd:: set interfaces wireless <interface> country-code <cc>
+
+   Configure system wide Wi-Fi regulatory domain. A reboot is required for this
+   change to be enabled.
+
 The following example creates a WAP. When configuring multiple WAP interfaces,
 you must specify unique IP addresses, channels, Network IDs commonly referred
 to as :abbr:`SSID (Service Set Identifier)`, and MAC addresses.
diff --git a/docs/interfaces/wirelessmodem.rst b/docs/interfaces/wirelessmodem.rst
index eabb17b9..4590a3bb 100644
--- a/docs/interfaces/wirelessmodem.rst
+++ b/docs/interfaces/wirelessmodem.rst
@@ -18,8 +18,16 @@ Common interface configuration
    :var0: wirelessmodem
    :var1: wlm0
 
-Address
--------
+.. cmdinclude:: ../_include/interface-disable.txt
+   :var0: wirelessmodem
+   :var1: wlm0
+
+.. cmdinclude:: ../_include/interface-vrf.txt
+   :var0: wirelessmodem
+   :var1: wlm0
+
+WWAN specific options
+---------------------
 
 .. cfgcmd:: set interfaces wirelessmodem <interface> apn <apn>
 

From 750387723f2b9bc7ce6d82ce4e27dd58fc1a3c3a Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Wed, 11 Nov 2020 10:12:18 +0100
Subject: [PATCH 074/295] tunnel: add tunnel keys

---
 docs/interfaces/tunnel.rst | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/docs/interfaces/tunnel.rst b/docs/interfaces/tunnel.rst
index f20127f5..24fbed44 100644
--- a/docs/interfaces/tunnel.rst
+++ b/docs/interfaces/tunnel.rst
@@ -124,6 +124,29 @@ ip otherwise it would have to be configured as well.
   tunnel source 203.0.113.10
   tunnel destination 198.51.100.2
 
+
+Tunnel keys
+^^^^^^^^^^^
+
+GRE is also the only classic protocol that allows creating multiple tunnels with the same source and destination due to its support for tunnel keys. Despite its name, this feature has nothing to do with security: it's simply an identifier that allows routers to tell one tunnel from another.
+
+An example:
+
+.. code-block:: none
+
+   set interfaces tunnel tun0 local-ip 192.0.2.10
+   set interfaces tunnel tun0 remote-ip 192.0.2.20
+   set interfaces tunnel tun0 address 10.40.50.60/24
+   set interfaces tunnel tun0 parameters ip key 10
+  
+.. code-block:: none
+
+   set interfaces tunnel tun0 local-ip 192.0.2.10
+   set interfaces tunnel tun0 remote-ip 192.0.2.20
+   set interfaces tunnel tun0 address 172.16.17.18/24
+   set interfaces tunnel tun0 parameters ip key 20
+
+
 Troubleshooting
 ^^^^^^^^^^^^^^^
 

From e63e0eb72b79a08e21074da012bbb4ab6c02b809 Mon Sep 17 00:00:00 2001
From: currite <sll@disroot.org>
Date: Wed, 11 Nov 2020 12:23:58 +0100
Subject: [PATCH 075/295] troubleshooting: add interface name change

---
 docs/troubleshooting.rst | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)

diff --git a/docs/troubleshooting.rst b/docs/troubleshooting.rst
index 2d6532d0..43f86b64 100644
--- a/docs/troubleshooting.rst
+++ b/docs/troubleshooting.rst
@@ -155,6 +155,39 @@ Neighbor Discovery
      Soliciting fc00:470:f1cd:101::1 (fc00:470:f1cd:101::1) on eth0...
      Target link-layer address: 00:98:2B:F8:3F:11 from fc00:470:f1cd:101::1
 
+
+***************
+Interface names
+***************
+
+If you find the names of your interfaces have changed, this could be because your MAC addresses have changed.
+
+* For example, you have a VyOS VM with 4 Ethernet interfaces named eth0, eth1, eth2 and eth3. Then, you migrate your VyOS VM to a different host and find your interfaces now are eth4, eth5, eth6 and eth7.
+
+One way to fix this issue **taking control of the MAC addresses** is:
+
+Log into VyOS and run this command to display your interface settings.
+
+.. code-block:: none
+
+   show interfaces detail
+
+Take note of MAC addresses.
+
+Now, in order to update a MAC address in the configuration, run this command specifying the interface name and MAC address you want.
+
+.. code-block:: none
+
+   set interfaces eth0 hw-id 00:0c:29:da:a4:fe
+
+If it is a VM, go into the settings of the host and set the MAC address to the settings found in the config.boot file. You can also set the MAC to static if the host allows so.
+
+
+* Another example could be when cloning VyOS VMs in GNS3 and you get into the same issue: interface names have changed.
+  
+And **a more generic way to fix it** is just deleting every MAC address at the configuration file of the cloned machine. They will be correctly regenerated automatically.
+
+
 **********
 Monitoring
 **********

From 627ccb20a88f11c14c29e4e250de7d8be4c093aa Mon Sep 17 00:00:00 2001
From: currite <53279076+currite@users.noreply.github.com>
Date: Wed, 11 Nov 2020 13:02:19 +0100
Subject: [PATCH 076/295] Update troubleshooting.rst

---
 docs/troubleshooting.rst | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/docs/troubleshooting.rst b/docs/troubleshooting.rst
index 43f86b64..0b3420f4 100644
--- a/docs/troubleshooting.rst
+++ b/docs/troubleshooting.rst
@@ -164,28 +164,28 @@ If you find the names of your interfaces have changed, this could be because you
 
 * For example, you have a VyOS VM with 4 Ethernet interfaces named eth0, eth1, eth2 and eth3. Then, you migrate your VyOS VM to a different host and find your interfaces now are eth4, eth5, eth6 and eth7.
 
-One way to fix this issue **taking control of the MAC addresses** is:
+  One way to fix this issue **taking control of the MAC addresses** is:
 
-Log into VyOS and run this command to display your interface settings.
+  Log into VyOS and run this command to display your interface settings.
 
-.. code-block:: none
+  .. code-block:: none
 
-   show interfaces detail
+     show interfaces detail
 
-Take note of MAC addresses.
+  Take note of MAC addresses.
 
-Now, in order to update a MAC address in the configuration, run this command specifying the interface name and MAC address you want.
+  Now, in order to update a MAC address in the configuration, run this command specifying the interface name and MAC address you want.
 
-.. code-block:: none
+  .. code-block:: none
 
-   set interfaces eth0 hw-id 00:0c:29:da:a4:fe
+     set interfaces eth0 hw-id 00:0c:29:da:a4:fe
 
-If it is a VM, go into the settings of the host and set the MAC address to the settings found in the config.boot file. You can also set the MAC to static if the host allows so.
+  If it is a VM, go into the settings of the host and set the MAC address to the settings found in the config.boot file. You can also set the MAC to static if the host allows so.
 
 
 * Another example could be when cloning VyOS VMs in GNS3 and you get into the same issue: interface names have changed.
   
-And **a more generic way to fix it** is just deleting every MAC address at the configuration file of the cloned machine. They will be correctly regenerated automatically.
+  And **a more generic way to fix it** is just deleting every MAC address at the configuration file of the cloned machine. They will be correctly regenerated automatically.
 
 
 **********

From 85206b1c287de9f45d74181f636d08b11e37cd50 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 12 Nov 2020 18:22:11 +0100
Subject: [PATCH 077/295] T3048: add documentation for "system options
 performance" command

---
 docs/system/advanced-index.rst      |  7 +++---
 docs/system/options-performance.rst | 39 +++++++++++++++++++++++++++++
 2 files changed, 43 insertions(+), 3 deletions(-)
 create mode 100644 docs/system/options-performance.rst

diff --git a/docs/system/advanced-index.rst b/docs/system/advanced-index.rst
index 4e9c5699..310dfdb0 100644
--- a/docs/system/advanced-index.rst
+++ b/docs/system/advanced-index.rst
@@ -1,8 +1,8 @@
 .. _advanced_system_tweaks:
 
-######################
-Advanced System Tweaks
-######################
+######
+System
+######
 
 .. toctree::
    :maxdepth: 2
@@ -11,6 +11,7 @@ Advanced System Tweaks
    flow-accounting
    ntp
    options
+   options-performance
    boot-options
    proxy
    serial-console
diff --git a/docs/system/options-performance.rst b/docs/system/options-performance.rst
new file mode 100644
index 00000000..32e95520
--- /dev/null
+++ b/docs/system/options-performance.rst
@@ -0,0 +1,39 @@
+.. _system_options_performance:
+
+###########
+Performance
+###########
+
+As more and more routers run on Hypervisors, expecially with a :abbr:`NOS
+(Network Operating System)` as VyOS, it makes fewer and fewer sense to use
+static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and
+earlier to pin certain interrupt handlers to specific CPUs.
+
+We now utilize `tuned` for dynamic resource balancing based on profiles.
+
+  .. seealso:: https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf
+
+Configureation
+==============
+
+.. cfgcmd:: set system options performance < throughput | latency >
+
+  Configure one of the predefined system performance profiles.
+
+  * ``throughput``: A server profile focused on improving network throughput.
+    This profile favors performance over power savings by setting ``intel_pstate``
+    and ``max_perf_pct=100`` and increasing kernel network buffer sizes.
+
+    It enables transparent huge pages, and uses cpupower to set the performance
+    cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us,
+    ``kernel.sched_wakeup_granularity_ns`` to 15 uss, and ``vm.dirty_ratio`` to
+    40%.
+
+  * ``latency``: A server profile focused on lowering network latency.
+    This profile favors performance over power savings by setting ``intel_pstate``
+    and ``min_perf_pct=100``.
+
+    It disables transparent huge pages, and automatic NUMA balancing. It also
+    uses cpupower to set the performance cpufreq governor, and requests a
+    cpu_dma_latency value of 1. It also sets busy_read and busy_poll times to
+    50 us, and tcp_fastopen to 3.

From d20c299b9dff3226e886a10a0e7223704fac32a0 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 13 Nov 2020 14:46:04 +0100
Subject: [PATCH 078/295] interfaces: use common toc and chapter style

---
 docs/interfaces/advanced-index.rst  |  7 +--
 docs/interfaces/bond.rst            | 41 +++++++++-------
 docs/interfaces/bridge.rst          | 52 ++++++++++----------
 docs/interfaces/dummy.rst           |  9 ++--
 docs/interfaces/ethernet.rst        | 22 ++++-----
 docs/interfaces/geneve.rst          |  9 ++--
 docs/interfaces/l2tpv3.rst          | 75 ++++++++++++++++++++++++++---
 docs/interfaces/loopback.rst        |  8 +--
 docs/interfaces/macsec.rst          | 19 +++++---
 docs/interfaces/pppoe.rst           | 24 +++++----
 docs/interfaces/pseudo-ethernet.rst |  9 ++--
 docs/interfaces/wirelessmodem.rst   | 57 ++++++++++++----------
 docs/routing/mpls.rst               |  6 +--
 13 files changed, 210 insertions(+), 128 deletions(-)

diff --git a/docs/interfaces/advanced-index.rst b/docs/interfaces/advanced-index.rst
index f955c6b1..6e35dac2 100644
--- a/docs/interfaces/advanced-index.rst
+++ b/docs/interfaces/advanced-index.rst
@@ -1,8 +1,8 @@
 .. _advanced_network-interfaces:
 
-###########################
-Advanced Network Interfaces
-###########################
+##################
+Network Interfaces
+##################
 
 .. toctree::
    :maxdepth: 1
@@ -15,6 +15,7 @@ Advanced Network Interfaces
    loopback
    l2tpv3
    macsec
+   pppoe
    pseudo-ethernet
    qinq
    tunnel
diff --git a/docs/interfaces/bond.rst b/docs/interfaces/bond.rst
index 859c25c3..21088c02 100644
--- a/docs/interfaces/bond.rst
+++ b/docs/interfaces/bond.rst
@@ -10,32 +10,35 @@ or port-channel. The behavior of the bonded interfaces depends upon the mode;
 generally speaking, modes provide either hot standby or load balancing services.
 Additionally, link integrity monitoring may be performed.
 
+*************
 Configuration
-#############
+*************
 
 Common interface configuration
-------------------------------
+==============================
 
 .. cmdinclude:: ../_include/interface-common-with-dhcp.txt
    :var0: bond
    :var1: bond0
 
 Member Interfaces
------------------
+=================
 
 .. cfgcmd:: set interfaces bonding <interface> member interface <member>
 
    Enslave `<member>` interface to bond `<interface>`.
 
 Bond options
-------------
+============
 
-.. cfgcmd:: set interfaces bonding <interface> mode <mode>
+.. cfgcmd:: set interfaces bonding <interface> mode <802.3ad | active-backup |
+  broadcast | round-robin | transmit-load-balance | adaptive-load-balance |
+  xor-hash>
 
    Specifies one of the bonding policies. The default is 802.3ad. Possible
    values are:
 
-   * **802.3ad** - IEEE 802.3ad Dynamic link aggregation. Creates aggregation
+   * ``802.3ad`` - IEEE 802.3ad Dynamic link aggregation. Creates aggregation
      groups that share the same speed and duplex settings. Utilizes all slaves
      in the active aggregator according to the 802.3ad specification.
 
@@ -47,7 +50,7 @@ Bond options
         in regards to the packet mis-ordering requirements of section 43.2.4
         of the 802.3ad standard.
 
-   * **active-backup** - Active-backup policy: Only one slave in the bond is
+   * ``active-backup`` - Active-backup policy: Only one slave in the bond is
      active. A different slave becomes active if, and only if, the active slave
      fails. The bond's MAC address is externally visible on only one port
      (network adapter) to avoid confusing the switch.
@@ -62,24 +65,24 @@ Bond options
      This mode provides fault tolerance. The :cfgcmd:`primary` option,
      documented below, affects the behavior of this mode.
 
-   * **broadcast** - Broadcast policy: transmits everything on all slave
+   * ``broadcast`` - Broadcast policy: transmits everything on all slave
      interfaces.
 
      This mode provides fault tolerance.
 
-   * **round-robin** - Round-robin policy: Transmit packets in sequential
+   * ``round-robin`` - Round-robin policy: Transmit packets in sequential
      order from the first available slave through the last.
 
      This mode provides load balancing and fault tolerance.
 
-   * **transmit-load-balance** - Adaptive transmit load balancing: channel
+   * ``transmit-load-balance`` - Adaptive transmit load balancing: channel
      bonding that does not require any special switch support.
 
      Incoming traffic is received by the current slave. If the receiving slave
      fails, another slave takes over the MAC address of the failed receiving
      slave.
 
-   * **adaptive-load-balance** - Adaptive load balancing: includes
+   * ``adaptive-load-balance`` - Adaptive load balancing: includes
      transmit-load-balance plus receive load balancing for IPV4 traffic, and
      does not require any special switch support. The receive load balancing
      is achieved by ARP negotiation. The bonding driver intercepts the ARP
@@ -111,7 +114,7 @@ Bond options
      than the switch's forwarding delay so that the ARP Replies sent to the
      peers will not be blocked by the switch.
 
-   * **xor-hash** - XOR policy: Transmit based on the selected transmit
+   * ``xor-hash`` - XOR policy: Transmit based on the selected transmit
      hash policy.  The default policy is a simple [(source MAC address XOR'd
      with destination MAC address XOR packet type ID) modulo slave count].
      Alternate transmit policies may be selected via the :cfgcmd:`hash-policy`
@@ -253,8 +256,9 @@ Bond options
    The maximum number of targets that can be specified is 16. The default value
    is no IP addresses.
 
+*******
 Example
--------
+*******
 
 The following configuration on VyOS applies to all following 3rd party vendors.
 It creates a bond with two links and VLAN 10, 100 on the bonded interfaces with
@@ -275,7 +279,7 @@ a per VIF IPv4 address.
   set interfaces bonding bond0 member interface eth2
 
 Cisco Catalyst
-^^^^^^^^^^^^^^
+==============
 
 Assign member interfaces to PortChannel
 
@@ -305,7 +309,7 @@ allowed VLAN interfaces, STP will happen here.
 
 
 Juniper EX Switch
-^^^^^^^^^^^^^^^^^
+=================
 
 For a headstart you can use the below example on how to build a bond with two
 interfaces from VyOS to a Juniper EX Switch system.
@@ -334,7 +338,7 @@ interfaces from VyOS to a Juniper EX Switch system.
   set interfaces xe-1/1/0 ether-options 802.3ad ae0
 
 Aruba/HP
-^^^^^^^^
+========
 
 For a headstart you can use the below example on how to build a bond,port-channel
 with two interfaces from VyOS to a Aruba/HP 2510G switch.
@@ -349,7 +353,7 @@ with two interfaces from VyOS to a Aruba/HP 2510G switch.
   vlan 100 tagged Trk1
 
 Arista EOS
-^^^^^^^^^^
+==========
 
 When utilizing VyOS in an environment with Arista gear you can use this blue
 print as an initial setup to get an LACP bond / port-channel operational between
@@ -463,8 +467,9 @@ Lets assume the following topology:
    virtio network driver no LACP PDUs will be sent by VyOS thus the port-channel
    will never become active!
 
+*********
 Operation
-#########
+*********
 
 .. opcmd:: show interfaces bonding
 
diff --git a/docs/interfaces/bridge.rst b/docs/interfaces/bridge.rst
index 144e5f6d..ba6d70fb 100644
--- a/docs/interfaces/bridge.rst
+++ b/docs/interfaces/bridge.rst
@@ -14,18 +14,19 @@ standard.
 .. note:: Spanning Tree Protocol is not enabled by default in VyOS.
    :ref:`stp` can be easily enabled if needed.
 
+*************
 Configuration
-#############
+*************
 
 Common interface configuration
-------------------------------
+==============================
 
 .. cmdinclude:: ../_include/interface-common-with-dhcp.txt
    :var0: bridge
    :var1: br0
 
 Member Interfaces
------------------
+=================
 
 .. cfgcmd:: set interfaces bridge <interface> member interface <member>
 
@@ -59,6 +60,24 @@ Member Interfaces
    deciding which link to use. Faster interfaces should have lower
    costs.
 
+Bridge Options
+==============
+
+.. cfgcmd:: set interfaces bridge <interface> aging <time>
+
+   MAC address aging `<time`> in seconds (default: 300).
+
+.. cfgcmd:: set interfaces bridge <interface> max-age <time>
+
+   Bridge maximum aging `<time>` in seconds (default: 20).
+
+   If a another bridge in the spanning tree does not send out a hello
+   packet for a long period of time, it is assumed to be dead.
+
+.. cfgcmd:: set interfaces bridge <interface> igmp querier
+
+   Enable IGMP querier
+
 .. _stp:
 
 STP Parameter
@@ -94,26 +113,9 @@ links providing fault tolerance if an active link fails.
    Designated Bridges. Hello packets are used to communicate information
    about the topology throughout the entire Bridged Local Area Network.
 
-Additional Bridge Options
--------------------------
-
-.. cfgcmd:: set interfaces bridge <interface> aging <time>
-
-   MAC address aging `<time`> in seconds (default: 300).
-
-.. cfgcmd:: set interfaces bridge <interface> max-age <time>
-
-   Bridge maximum aging `<time>` in seconds (default: 20).
-
-   If a another bridge in the spanning tree does not send out a hello
-   packet for a long period of time, it is assumed to be dead.
-
-.. cfgcmd:: set interfaces bridge <interface> igmp querier
-
-   Enable IGMP querier
-
+*******
 Example
-#######
+*******
 
 Creating a bridge interface is very simple. In this example we will
 have:
@@ -146,9 +148,9 @@ This results in the active configuration:
     }
     stp
 
-
-Operation
-#########
+*******
+Example
+*******
 
 .. opcmd:: show bridge
 
diff --git a/docs/interfaces/dummy.rst b/docs/interfaces/dummy.rst
index e0557d1d..c36d0024 100644
--- a/docs/interfaces/dummy.rst
+++ b/docs/interfaces/dummy.rst
@@ -18,12 +18,12 @@ you can have as many as you want.
    destination. A :ref:`dummy-interface` Interface should always be preferred
    over a :ref:`loopback-interface` interface.
 
-
+*************
 Configuration
-#############
+*************
 
 Common interface configuration
-------------------------------
+==============================
 
 .. cmdinclude:: ../_include/interface-address.txt
    :var0: dummy
@@ -41,8 +41,9 @@ Common interface configuration
    :var0: dummy
    :var1: dum0
 
+*********
 Operation
-=========
+*********
 
 .. opcmd:: show interfaces dummy
 
diff --git a/docs/interfaces/ethernet.rst b/docs/interfaces/ethernet.rst
index 1d3aeda3..71a340b1 100644
--- a/docs/interfaces/ethernet.rst
+++ b/docs/interfaces/ethernet.rst
@@ -4,18 +4,22 @@
 Ethernet
 ########
 
+This will be the most widely used interface on a router carrying traffic to the
+real world.
+
+*************
 Configuration
-#############
+*************
 
 Common interface configuration
-------------------------------
+==============================
 
 .. cmdinclude:: ../_include/interface-common-with-dhcp.txt
    :var0: ethernet
    :var1: eth0
 
-Speed/Duplex
-------------
+Ethernet options
+================
 
 .. cfgcmd:: set interfaces ethernet <interface> duplex <auto | full | half>
 
@@ -45,15 +49,9 @@ Speed/Duplex
 
    VyOS default will be `auto`.
 
-VLAN (802.1q) configuration
----------------------------
-
-.. cmdinclude:: ../_include/interface-vlan.txt
-   :var0: ethernet
-   :var1: eth0
-
+*********
 Operation
-=========
+*********
 
 .. opcmd:: show interfaces ethernet
 
diff --git a/docs/interfaces/geneve.rst b/docs/interfaces/geneve.rst
index b59bb311..47068687 100644
--- a/docs/interfaces/geneve.rst
+++ b/docs/interfaces/geneve.rst
@@ -32,18 +32,19 @@ Geneve Header:
   |                    Variable Length Options                    |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 
+*************
 Configuration
-=============
+*************
 
 Common interface configuration
-------------------------------
+==============================
 
 .. cmdinclude:: ../_include/interface-common-without-dhcp.txt
    :var0: geneve
    :var1: gnv0
 
-GENEVE specific options
------------------------
+GENEVE options
+==============
 
 .. cfgcmd:: set interfaces geneve gnv0 remote <address>
 
diff --git a/docs/interfaces/l2tpv3.rst b/docs/interfaces/l2tpv3.rst
index c456a58e..e9b00bef 100644
--- a/docs/interfaces/l2tpv3.rst
+++ b/docs/interfaces/l2tpv3.rst
@@ -6,22 +6,83 @@
 L2TPv3
 ######
 
-L2TPv3 is a pseudowire protocol, you can read more about on `Wikipedia L2TPv3`_
-or in :rfc:`3921`
+Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that
+can be used as an alternative protocol to :ref:`mpls` for encapsulation of
+multiprotocol Layer 2 communications traffic over IP networks. Like L2TP,
+L2TPv3 provides a pseudo-wire service, but scaled to fit carrier requirements.
 
-L2TPv3 can transport any traffic including ethernet frames. L2TPv2 is limited
-to PPP.
+L2TPv3 can be regarded as being to MPLS what IP is to ATM: a simplified version
+of the same concept, with much of the same benefit achieved at a fraction of the
+effort, at the cost of losing some technical features considered less important
+in the market.
 
+In the case of L2TPv3, the features lost are teletraffic engineering features
+considered important in MPLS. However, there is no reason these features could
+not be re-engineered in or on top of L2TPv3 in later products.
+
+The protocol overhead of L2TPv3 is also significantly bigger than MPLS.
+
+L2TPv3 is described in :rfc:`3921`.
+
+*************
 Configuration
-#############
+*************
 
 Common interface configuration
-------------------------------
+==============================
 
 .. cmdinclude:: ../_include/interface-common-without-dhcp.txt
    :var0: l2tpv3
    :var1: l2tpeth0
 
+L2TPv3 options
+==============
+
+.. cfgcmd:: set interfaces l2tpv3 <interface> encapsulation <udp | ip>
+
+  Set the encapsulation type of the tunnel. Valid values for encapsulation are:
+  udp, ip.
+
+  This defaults to UDP
+
+.. cfgcmd:: set interfaces l2tpv3 <interface> local-ip <address>
+
+  set the IP address of the local interface to be used for the tunnel.
+
+  This address must be the address of a local interface. May be specified as an
+  IPv4 address or an IPv6 address.
+
+.. cfgcmd:: set interfaces l2tpv3 <interface> remote-ip <address>
+
+  Set the IP address of the remote peer. May be specified as an IPv4 address or
+  an IPv6 address.
+
+.. cfgcmd:: set interfaces l2tpv3 <interface> session-id <id>
+
+  Set the session id, which is a 32-bit integer value. Uniquely identifies the
+  session being created. The value used must match the peer_session_id value
+  being used at the peer.
+
+.. cfgcmd:: set interfaces l2tpv3 <interface> peer-session-id <id>
+
+  Set the peer session id, which is a 32-bit integer value assigned to the
+  session by the peer. The value used must match the session_id value being
+  used at the peer.
+
+.. cfgcmd:: set interfaces l2tpv3 <interface> tunnel-id <id>
+
+  Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the
+  tunnel into which the session will be created.
+
+.. cfgcmd:: set interfaces l2tpv3 <interface> peer-tunnel-id <id>
+
+  Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the
+  tunnel into which the session will be created.
+
+*******
+Example
+*******
+
 Over IP
 ^^^^^^^
 
@@ -129,5 +190,3 @@ L2TPv3:
   set interfaces l2tpv3 l2tpeth0 session-id '110'
   set interfaces l2tpv3 l2tpeth0 source-port '5000'
   set interfaces l2tpv3 l2tpeth0 tunnel-id '10'
-
-.. _`Wikipedia L2TPv3`: https://en.wikipedia.org/wiki/L2TPv3
diff --git a/docs/interfaces/loopback.rst b/docs/interfaces/loopback.rst
index ed241eb2..a6d659b5 100644
--- a/docs/interfaces/loopback.rst
+++ b/docs/interfaces/loopback.rst
@@ -19,11 +19,12 @@ services on your local machine.
    destination. A :ref:`dummy-interface` Interface should always be preferred
    over a :ref:`loopback-interface` interface.
 
+*************
 Configuration
-=============
+*************
 
 Common interface configuration
-------------------------------
+==============================
 
 .. cmdinclude:: ../_include/interface-address.txt
    :var0: loopback
@@ -33,8 +34,9 @@ Common interface configuration
    :var0: loopback
    :var1: lo
 
+*********
 Operation
-=========
+*********
 
 .. opcmd:: show interfaces loopback
 
diff --git a/docs/interfaces/macsec.rst b/docs/interfaces/macsec.rst
index f841e17d..ebc8f151 100644
--- a/docs/interfaces/macsec.rst
+++ b/docs/interfaces/macsec.rst
@@ -13,18 +13,19 @@ including DHCP or ARP requests. It does not compete with other security
 solutions such as IPsec (layer 3) or TLS (layer 4), as all those solutions are
 used for their own specific use cases.
 
+*************
 Configuration
-#############
+*************
 
 Common interface configuration
-------------------------------
+==============================
 
 .. cmdinclude:: ../_include/interface-common-with-dhcp.txt
    :var0: macsec
    :var1: macsec0
 
-MACsec specific options
------------------------
+MACsec options
+==============
 
 .. cfgcmd:: set interfaces macsec <interface> security cipher [gcm-aes-128]
 
@@ -45,7 +46,7 @@ MACsec specific options
   leaving this interfac will now be authenticated/encrypted.
 
 Key Management
-^^^^^^^^^^^^^^
+--------------
 
 :abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between
 individual peers.
@@ -65,7 +66,7 @@ individual peers.
   distributing SAKs.
 
 Replay protection
-^^^^^^^^^^^^^^^^^
+-----------------
 
 .. cfgcmd:: set interfaces macsec <interface> security replay-window <window>
 
@@ -76,8 +77,9 @@ Replay protection
   - ``0``: No replay window, strict check
   - ``1-4294967295``: Number of packets that could be misordered
 
+*********
 Operation
-#########
+*********
 
 .. opcmd:: run generate macsec mka-cak
 
@@ -123,8 +125,9 @@ Operation
         cipher suite: GCM-AES-128, using ICV length 16
         TXSC: 005056bfefaa0001 on SA 0
 
+********
 Examples
-########
+********
 
 * Two routers connected both via eth1 through an untrusted switch
 * R1 has 192.0.2.1/24 & 2001:db8::1/64
diff --git a/docs/interfaces/pppoe.rst b/docs/interfaces/pppoe.rst
index e85c16aa..7b2c319d 100644
--- a/docs/interfaces/pppoe.rst
+++ b/docs/interfaces/pppoe.rst
@@ -14,15 +14,16 @@ encryption, and compression." Typical use of PPPoE involves leveraging the
 PPP facilities for authenticating the user with a username and password,
 predominately via the PAP protocol and less often via CHAP.
 
+***************
 Operating Modes
-===============
+***************
 
 VyOS supports setting up PPPoE in two different ways to a PPPoE internet
 connection. This is due to most ISPs provide a modem that is also a wireless
 router.
 
 Home Users
-----------
+==========
 
 In this method, the DSL Modem/Router connects to the ISP for you with your
 credentials preprogrammed into the device. This gives you an :rfc:`1918`
@@ -35,7 +36,7 @@ few extra layers of complexity, particularly if you use some NAT or
 tunnel features.
 
 Business Users
---------------
+==============
 
 In order to have full control and make use of multiple static public IP
 addresses, your VyOS will have to initiate the PPPoE connection and control
@@ -51,11 +52,12 @@ configure it to open the PPPoE session for you and your DSL Transceiver
 (Modem/Router) just acts to translate your messages in a way that
 vDSL/aDSL understands.
 
+*************
 Configuration
-=============
+*************
 
 Common interface configuration
-------------------------------
+==============================
 
 .. cmdinclude:: ../_include/interface-description.txt
    :var0: pppoe
@@ -69,8 +71,8 @@ Common interface configuration
    :var0: pppoe
    :var1: pppoe0
 
-PPPoE specific configuration
-----------------------------
+PPPoE options
+=============
 
 .. cfgcmd:: set interfaces pppoe <interface> access-concentrator <name>
 
@@ -179,8 +181,9 @@ IPv6
   :var0: pppoe
   :var1: pppoe0
 
+*********
 Operation
-=========
+*********
 
 .. opcmd:: show interfaces pppoe <interface>
 
@@ -211,7 +214,7 @@ Operation
       backlog 0b 0p requeues 0
 
 Connect/Disconnect
-------------------
+==================
 
 .. opcmd:: disconnect interface <interface>
 
@@ -223,8 +226,9 @@ Connect/Disconnect
    Test connecting given connection-oriented interface. `<interface>` can be
    ``pppoe0`` as example.
 
+*******
 Example
-=======
+*******
 
 Requirements:
 
diff --git a/docs/interfaces/pseudo-ethernet.rst b/docs/interfaces/pseudo-ethernet.rst
index 26d8a364..b373a617 100644
--- a/docs/interfaces/pseudo-ethernet.rst
+++ b/docs/interfaces/pseudo-ethernet.rst
@@ -38,18 +38,19 @@ Ethernet interfaces:
   - Network switches with security settings allowing only a single MAC address
   - xDSL modems that try to lear the MAC address of the NIC
 
+*************
 Configuration
-=============
+*************
 
 Common interface configuration
-------------------------------
+==============================
 
 .. cmdinclude:: ../_include/interface-common-with-dhcp.txt
    :var0: pseudo-ethernet
    :var1: peth0
 
-Pseudo Ethernet/MACVLAN specific options
-----------------------------------------
+Pseudo Ethernet/MACVLAN options
+===============================
 
 .. cfgcmd:: set interfaces pseudo-ethernet <interface> source-interface <ethX>
 
diff --git a/docs/interfaces/wirelessmodem.rst b/docs/interfaces/wirelessmodem.rst
index 4590a3bb..f9dfa228 100644
--- a/docs/interfaces/wirelessmodem.rst
+++ b/docs/interfaces/wirelessmodem.rst
@@ -4,15 +4,16 @@
 WirelessModem (WWAN)
 ####################
 
-Configuration
-#############
-
-The wirelessmodem interface provides access (through a wireless modem/wwan) to
-wireless networks provided by various cellular providers. VyOS uses the
+The wirelessmodem interface provides access (through a wireless modem/wwan)
+to wireless networks provided by various cellular providers. VyOS uses the
 interfaces wirelessmodem subsystem for configuration.
 
+*************
+Configuration
+*************
+
 Common interface configuration
-------------------------------
+==============================
 
 .. cmdinclude:: ../_include/interface-description.txt
    :var0: wirelessmodem
@@ -26,8 +27,8 @@ Common interface configuration
    :var0: wirelessmodem
    :var1: wlm0
 
-WWAN specific options
----------------------
+WirelessModem (WWAN) options
+============================
 
 .. cfgcmd:: set interfaces wirelessmodem <interface> apn <apn>
 
@@ -59,23 +60,9 @@ WWAN specific options
    connection is established at boot time and remains up. If the link fails for
    any reason, the link is brought back up immediately.
 
-Example
-=======
-
-The following example is based on a Sierra Wireless MC7710 miniPCIe card (only
-the form factor in reality it runs UBS) and Deutsche Telekom as ISP. The card
-is assembled into a :ref:`pc-engines-apu4`.
-
-.. code-block:: none
-
-  set interfaces wirelessmodem wlm0 apn 'internet.telekom'
-  set interfaces wirelessmodem wlm0 backup distance '100'
-  set interfaces wirelessmodem wlm0 device 'ttyUSB2'
-  set interfaces wirelessmodem wlm0 disable
-  set interfaces wirelessmodem wlm0 no-peer-dns
-
+*********
 Operation
-=========
+*********
 
 .. opcmd:: show interfaces wirelessmodem <interface>
 
@@ -109,8 +96,26 @@ Operation
 
    Displays log information for a WWAN interface.
 
+
+*******
+Example
+*******
+
+The following example is based on a Sierra Wireless MC7710 miniPCIe card (only
+the form factor in reality it runs UBS) and Deutsche Telekom as ISP. The card
+is assembled into a :ref:`pc-engines-apu4`.
+
+.. code-block:: none
+
+  set interfaces wirelessmodem wlm0 apn 'internet.telekom'
+  set interfaces wirelessmodem wlm0 backup distance '100'
+  set interfaces wirelessmodem wlm0 device 'ttyUSB2'
+  set interfaces wirelessmodem wlm0 disable
+  set interfaces wirelessmodem wlm0 no-peer-dns
+
+*****************
 Supported Modules
-#################
+*****************
 
 The following hardware modules have been tested successfully in an
 :ref:`pc-engines-apu4` board:
@@ -120,4 +125,4 @@ The following hardware modules have been tested successfully in an
 * Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)
 * Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)
 * Huawei ME909u-521 miniPCIe card (LTE)
-
+* Huawei ME909s-120 miniPCIe card (LTE)
diff --git a/docs/routing/mpls.rst b/docs/routing/mpls.rst
index 86221104..82e99a17 100644
--- a/docs/routing/mpls.rst
+++ b/docs/routing/mpls.rst
@@ -1,8 +1,8 @@
 .. _mpls:
 
-####
-MPLS
-####
+####################################
+MPLS (Multiprotocol Label Switching)
+####################################
 
 :abbr:`MPLS (Multi-Protocol Label Switching)` is a packet forwarding paradigm
 which differs from regular IP forwarding. Instead of IP addresses being used to

From 2bdeae5f7c9a0be6ffaecb2fc8c2b9e369030131 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 13 Nov 2020 14:46:18 +0100
Subject: [PATCH 079/295] wireless: improve command definition documentation

---
 docs/interfaces/wireless.rst | 403 +++++++++++++++++++++++++++--------
 1 file changed, 317 insertions(+), 86 deletions(-)

diff --git a/docs/interfaces/wireless.rst b/docs/interfaces/wireless.rst
index b146a21b..75c42f29 100644
--- a/docs/interfaces/wireless.rst
+++ b/docs/interfaces/wireless.rst
@@ -1,5 +1,3 @@
-.. include:: ../_include/need_improvement.txt
-
 .. _wireless-interface:
 
 ###################
@@ -25,52 +23,271 @@ If the system detects an unconfigured wireless device, it will be automatically
 added the configuration tree, specifying any detected settings (for example,
 its MAC address) and configured to run in monitor mode.
 
+*************
 Configuration
-#############
+*************
 
 Common interface configuration
-------------------------------
+==============================
 
 .. cmdinclude:: ../_include/interface-common-with-dhcp.txt
    :var0: wireless
    :var1: wlan0
 
-Wireless specific options
--------------------------
+Wireless options
+================
 
-Configuring Access-Point
-^^^^^^^^^^^^^^^^^^^^^^^^
+.. cfgcmd:: set interfaces wireless <interface> channel <number>
 
-To be able to use the wireless interfaces you will first need to set a
-regulatory domain with the country code of your location.
+  Channel number (IEEE 802.11), for 2.4Ghz (802.11 b/g/n) channels range from
+  1-14. On 5Ghz (802.11 a/h/j/n/ac) channels available are 0, 34 to 173
 
 .. cfgcmd:: set interfaces wireless <interface> country-code <cc>
 
-   Configure system wide Wi-Fi regulatory domain. A reboot is required for this
-   change to be enabled.
+  Country code (ISO/IEC 3166-1). Used to set regulatory domain. Set as needed
+  to indicate country in which device is operating. This can limit available
+  channels and transmit power.
 
-The following example creates a WAP. When configuring multiple WAP interfaces,
-you must specify unique IP addresses, channels, Network IDs commonly referred
-to as :abbr:`SSID (Service Set Identifier)`, and MAC addresses.
+  .. note:: This option is mandatory in Access-Point mode.
 
-The WAP in this example has the following characteristics:
+.. cfgcmd:: set interfaces wireless <interface> disable-broadcast-ssid
 
-* IP address ``192.168.2.1/24``
-* Network ID (SSID) ``TEST``
-* WPA passphrase ``12345678``
-* Use 802.11n protocol
-* Wireless channel ``1``
+  Send empty SSID in beacons and ignore probe request frames that do not specify
+  full SSID, i.e., require stations to know SSID.
+
+.. cfgcmd:: set interfaces wireless <interface> expunge-failing-stations
+
+  Disassociate stations based on excessive transmission failures or other
+  indications of connection loss.
+
+  This depends on the driver capabilities and may not be available with all
+  drivers.
+
+.. cfgcmd:: set interfaces wireless <interface> isolate-stations
+
+  Client isolation can be used to prevent low-level bridging of frames between
+  associated stations in the BSS.
+
+  By default, this bridging is allowed.
+
+.. cfgcmd:: set interfaces wireless <interface> max-stations
+
+  Maximum number of stations allowed in station table. New stations will be
+  rejected after the station table is full. IEEE 802.11 has a limit of 2007
+  different association IDs, so this number should not be larger than that.
+
+  This defaults to 2007.
+
+.. cfgcmd:: set interfaces wireless <interface> mgmt-frame-protection
+
+  Management Frame Protection (MFP) according to IEEE 802.11w
+
+.. cfgcmd:: set interfaces wireless <interface> mode <a | b | g | n | ac>
+
+  Operation mode of wireless radio.
+
+  * ``a`` - 802.11a - 54 Mbits/sec
+  * ``b`` - 802.11b - 11 Mbits/sec
+  * ``g`` - 802.11g - 54 Mbits/sec (default)
+  * ``n`` - 802.11n - 600 Mbits/sec
+  * ``ac`` - 802.11ac - 1300 Mbits/sec
+
+.. cfgcmd:: set interfaces wireless <interface> physical-device <device>
+
+  Wireless hardware device used as underlay radio.
+
+  This defaults to phy0.
+
+.. cfgcmd:: set interfaces wireless <interface> reduce-transmit-power <number>
+
+  Add Power Constraint element to Beacon and Probe Response frames.
+
+  This option adds Power Constraint element when applicable and Country element
+  is added. Power Constraint element is required by Transmit Power Control.
+
+  Valid values are 0..255.
+
+.. cfgcmd:: set interfaces wireless <interface> ssid <ssid>
+
+  SSID to be used in IEEE 802.11 management frames
+
+.. cfgcmd:: set interfaces wireless <interface> type <access-point | station | monitor>
+
+  Wireless device type for this interface
+
+  * ``access-point`` - Access-point forwards packets between other nodes
+  * ``station`` - Connects to another access point
+  * ``monitor`` - Passively monitor all packets on the frequency/channel
+
+PPDU
+----
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities require-ht
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities require-hvt
+
+HT (High Throughput) capabilities (802.11n)
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht 40mhz-incapable
+
+  Device is incapable of 40 MHz, do not advertise. This sets ``[40-INTOLERANT]``
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht auto-powersave
+
+  WMM-PS Unscheduled Automatic Power Save Delivery [U-APSD]
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht channel-set-width <ht20 | ht40+ | ht40->
+
+  Supported channel width set.
+
+  * ``ht40-`` - Both 20 MHz and 40 MHz with secondary channel below the primary
+    channel
+  * ``ht40+`` - Both 20 MHz and 40 MHz with secondary channel above the primary
+    channel
+
+  .. note:: There are limits on which channels can be used with HT40- and HT40+.
+    Following table shows the channels that may be available for HT40- and HT40+
+    use per IEEE 802.11n Annex J:
+
+    Depending on the location, not all of these channels may be available for use!
+
+    .. code-block:: none
+
+      freq		HT40-		HT40+
+      2.4 GHz		5-13		1-7 (1-9 in Europe/Japan)
+      5 GHz		40,48,56,64	36,44,52,60
+
+  .. note:: 40 MHz channels may switch their primary and secondary channels if
+    needed or creation of 40 MHz channel maybe rejected based on overlapping
+    BSSes. These changes are done automatically when hostapd is setting up the
+    40 MHz channel.
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht delayed-block-ack
+
+  Enable HT-delayed Block Ack ``[DELAYED-BA]``
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht dsss-cck-40
+
+  DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht greenfield
+
+  This enables the greenfield option which sets the ``[GF]`` option
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht ldpc
+
+  Enable LDPC coding capability
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht lsig-protection
+
+  Enable L-SIG TXOP protection capability
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht max-amsdu <3839 | 7935>
+
+  Maximum A-MSDU length 3839 (default) or 7935 octets
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht short-gi <20 | 40>
+
+  Short GI capabilities for 20 and 40 MHz
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht smps <static | dynamic>
+
+  Spatial Multiplexing Power Save (SMPS) settings
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht stbc rx <num>
+
+  Enable receiving PPDU using STBC (Space Time Block Coding)
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht stbc tx
+
+  Enable sending PPDU using STBC (Space Time Block Coding)
+
+VHT (Very High Throughput) capabilities (802.11ac)
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht antenna-count
+
+  Number of antennas on this card
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht antenna-pattern-fixed
+
+  Set if antenna pattern does not change during the lifetime of an association
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht beamform
+  <single-user-beamformer | single-user-beamformee | multi-user-beamformer |
+  multi-user-beamformee>
+
+  Beamforming capabilities:
+
+  * ``single-user-beamformer`` - Support for operation as single user beamformer
+  * ``single-user-beamformee`` - Support for operation as single user beamformee
+  * ``multi-user-beamformer`` - Support for operation as single user beamformer
+  * ``multi-user-beamformee`` - Support for operation as single user beamformer
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht center-channel-freq <freq-1 | freq-2>
+
+  VHT operating channel center frequency - center freq 1 (for use with 80, 80+80 and 160 modes)
+
+  VHT operating channel center frequency - center freq 2 (for use with the 80+80 mode)
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht channel-set-width <0 | 1 | 2 | 3>
+
+   * ``0`` - 20 or 40 MHz channel width (default)
+   * ``1`` - 80 MHz channel width
+   * ``2`` - 160 MHz channel width
+   * ``3`` - 80+80 MHz channel width
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht ldpc
+
+  Enable LDPC (Low Density Parity Check) coding capability
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht link-adaptation
+
+  VHT link adaptation capabilities
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht max-mpdu <value>
+
+  Increase Maximum MPDU length to 7991 or 11454 octets (default 3895 octets)
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht max-mpdu-exp <value>
+
+  Set the maximum length of A-MPDU pre-EOF padding that the station can receive
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht short-gi <80 | 160>
+
+  Short GI capabilities
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht stbc rx <num>
+
+  Enable receiving PPDU using STBC (Space Time Block Coding)
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht stbc tx
+
+  Enable sending PPDU using STBC (Space Time Block Coding)
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht tx-powersave
+
+  Enable VHT TXOP Power Save Mode
+
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht vht-cf
+
+  Station supports receiving VHT variant HT Control field
+
+
+Wireless options (Station/Client)
+=================================
+
+The example creates a wireless station (commonly referred to as Wi-Fi client)
+that accesses the network through the WAP defined in the above example. The
+default physical device (``phy0``) is used.
 
 .. code-block:: none
 
-  set interfaces wireless wlan0 address '192.168.2.1/24'
-  set interfaces wireless wlan0 type access-point
-  set interfaces wireless wlan0 channel 1
-  set interfaces wireless wlan0 mode n
-  set interfaces wireless wlan0 ssid 'TEST'
-  set interfaces wireless wlan0 security wpa mode wpa2
-  set interfaces wireless wlan0 security wpa cipher CCMP
-  set interfaces wireless wlan0 security wpa passphrase '12345678'
+  set interfaces wireless wlan0 type station
+  set interfaces wireless wlan0 address dhcp
+  set interfaces wireless wlan0 ssid Test
+  set interfaces wireless wlan0 security wpa
 
 Resulting in
 
@@ -79,32 +296,18 @@ Resulting in
   interfaces {
     [...]
     wireless wlan0 {
-          address 192.168.2.1/24
-          channel 1
-          mode n
-          security {
-              wpa {
-                  cipher CCMP
-                  mode wpa2
-                  passphrase "12345678"
-              }
-          }
-          ssid "TEST"
-          type access-point
+      address dhcp
+      security {
+        wpa {
+          passphrase "12345678"
+        }
       }
-  }
-  system {
-    [...]
-    wifi-regulatory-domain DE
-  }
+      ssid TEST
+      type station
+    }
 
-To get it to work as a access point with this configuration you will need
-to set up a DHCP server to work with that network. You can - of course - also
-bridge the Wireless interface with any configured bridge
-(:ref:`bridge-interface`) on the system.
-
-WPA/WPA2 enterprise
-*******************
+Security
+========
 
 :abbr:`WPA (Wi-Fi Protected Access)` and WPA2 Enterprise in combination with
 802.1x based authentication can be used to authenticate users or computers
@@ -170,39 +373,9 @@ Resulting in
   }
 
 
-Configuring Wireless Station
-^^^^^^^^^^^^^^^^^^^^^^^^^^^^
-
-The example creates a wireless station (commonly referred to as Wi-Fi client)
-that accesses the network through the WAP defined in the above example. The
-default physical device (``phy0``) is used.
-
-.. code-block:: none
-
-  set interfaces wireless wlan0 type station
-  set interfaces wireless wlan0 address dhcp
-  set interfaces wireless wlan0 ssid Test
-  set interfaces wireless wlan0 security wpa
-
-Resulting in
-
-.. code-block:: none
-
-  interfaces {
-    [...]
-    wireless wlan0 {
-      address dhcp
-      security {
-        wpa {
-          passphrase "12345678"
-        }
-      }
-      ssid TEST
-      type station
-    }
-
-Operational Commands
-^^^^^^^^^^^^^^^^^^^^
+*********
+Operation
+*********
 
 .. opcmd:: show interfaces wireless info
 
@@ -324,3 +497,61 @@ in station mode.
   00:53:7c:99:ce:76  Vodafone Hotspot                    1  -86.00
   00:53:44:46:d2:0b  Vodafone Hotspot                    1  -87.00
 
+
+********
+Examples
+********
+
+The following example creates a WAP. When configuring multiple WAP interfaces,
+you must specify unique IP addresses, channels, Network IDs commonly referred
+to as :abbr:`SSID (Service Set Identifier)`, and MAC addresses.
+
+The WAP in this example has the following characteristics:
+
+* IP address ``192.168.2.1/24``
+* Network ID (SSID) ``TEST``
+* WPA passphrase ``12345678``
+* Use 802.11n protocol
+* Wireless channel ``1``
+
+.. code-block:: none
+
+  set interfaces wireless wlan0 address '192.168.2.1/24'
+  set interfaces wireless wlan0 type access-point
+  set interfaces wireless wlan0 channel 1
+  set interfaces wireless wlan0 mode n
+  set interfaces wireless wlan0 ssid 'TEST'
+  set interfaces wireless wlan0 security wpa mode wpa2
+  set interfaces wireless wlan0 security wpa cipher CCMP
+  set interfaces wireless wlan0 security wpa passphrase '12345678'
+
+Resulting in
+
+.. code-block:: none
+
+  interfaces {
+    [...]
+    wireless wlan0 {
+          address 192.168.2.1/24
+          channel 1
+          mode n
+          security {
+              wpa {
+                  cipher CCMP
+                  mode wpa2
+                  passphrase "12345678"
+              }
+          }
+          ssid "TEST"
+          type access-point
+      }
+  }
+  system {
+    [...]
+    wifi-regulatory-domain DE
+  }
+
+To get it to work as a access point with this configuration you will need
+to set up a DHCP server to work with that network. You can - of course - also
+bridge the Wireless interface with any configured bridge
+(:ref:`bridge-interface`) on the system.

From b2d18af5523fceb1d5222f2040aa28738780524e Mon Sep 17 00:00:00 2001
From: jack9603301 <jack9603301@163.com>
Date: Sat, 14 Nov 2020 18:46:22 +0800
Subject: [PATCH 080/295] bridge: T3042: Document VLAN filter

---
 docs/interfaces/bridge.rst | 90 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 90 insertions(+)

diff --git a/docs/interfaces/bridge.rst b/docs/interfaces/bridge.rst
index ba6d70fb..058d7b01 100644
--- a/docs/interfaces/bridge.rst
+++ b/docs/interfaces/bridge.rst
@@ -113,6 +113,57 @@ links providing fault tolerance if an active link fails.
    Designated Bridges. Hello packets are used to communicate information
    about the topology throughout the entire Bridged Local Area Network.
 
+Enable VLAN-aware bridge
+-------------------------
+
+.. cfgcmd:: set interfaces bridge <interface> member interface <member> native-vlan <vlan-id>
+
+   Set the native VLAN ID flag of the interface. When a data packet without a VLAN tag enters
+   the port, the data packet will be forced to add a tag of a specific vlan id. When the vlan 
+   id flag flows out, the tag of the vlan id will be stripped
+
+.. cfgcmd:: set interfaces bridge <interface> member interface <member> allowed-vlan <vlan-id>
+
+   Allows specific VLAN IDs to pass through the bridge member interface
+
+.. cfgcmd:: set interfaces bridge <interface> member interface <member> allowed-vlan <n-m>
+
+   `n` and `m` represent a VLAN ID, which identifies a VLAN ID range and allows all VLAN IDS in this range to pass through the bridge member interface
+
+VLAN (802.1q) configuration
+---------------------------
+
+IEEE 802.1q, often referred to as Dot1q, is the networking standard that supports
+virtual LANs (VLANs) on an IEEE 802.3 Ethernet network. The standard defines a
+system of VLAN tagging for Ethernet frames and the accompanying procedures to be
+used by bridges and switches in handling such frames. The standard also contains
+provisions for a quality-of-service prioritization scheme commonly known as IEEE
+802.1p and defines the Generic Attribute Registration Protocol.
+
+Portions of the network which are VLAN-aware (i.e., IEEE 802.1q conformant) can
+include VLAN tags. When a frame enters the VLAN-aware portion of the network, a
+tag is added to represent the VLAN membership. Each frame must be distinguishable
+as being within exactly one VLAN. A frame in the VLAN-aware portion of the network
+that does not contain a VLAN tag is assumed to be flowing on the native VLAN.
+
+The standard was developed by IEEE 802.1, a working group of the IEEE 802
+standards committee, and continues to be actively revised. One of the notable
+revisions is 802.1Q-2014 which incorporated IEEE 802.1aq (Shortest Path Bridging)
+and much of the IEEE 802.1d standard.
+
+802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The
+term used for this is ``vif``.
+
+.. cfgcmd:: set interfaces bridge <interface> vif <vlan-id>
+
+  Create a new VLAN interface on interface `<interface>` using the VLAN number
+  provided via `<vlan-id>`.
+
+  You can create multiple VLAN interfaces on a physical interface. The VLAN ID
+  range is from 1 to 4094.
+
+  .. note:: Only 802.1Q-tagged packets are accepted on Bridge vifs.
+
 *******
 Example
 *******
@@ -152,6 +203,45 @@ This results in the active configuration:
 Example
 *******
 
+An example of creating a VLAN-aware bridge is as follows:
+
+* A bridge named `br100`
+* The member interface `eth1` is a trunk that allows VLAN 10 to pass
+* VLAN 10 on member interface `eth2` (ACCESS mode)
+* Enable STP
+* Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64
+
+.. code-block:: none
+
+  set interfaces bridge br100 member interface eth1 allowed-vlan 10
+  set interfaces bridge br100 member interface eth2 native-vlan 10
+  set interfaces bridge br100 vif 10 address 192.0.2.1/24
+  set interfaces bridge br100 vif 10 address 2001:db8::ffff/64
+  set interfaces bridge br100 stp
+
+This results in the active configuration:
+
+.. code-block:: none
+
+   vyos@vyos# show interfaces bridge br100
+    member {
+        interface eth1 {
+            allowed-vlan 10
+        }
+        interface eth2 {
+            native-vlan 10
+        }
+    }
+    stp
+    vif 10 {
+        address 192.0.2.1/24
+        address 2001:db8::ffff/64
+    }
+
+*******
+Example
+*******
+
 .. opcmd:: show bridge
 
    The `show bridge` operational command can be used to display

From a9335b16639635dfe0a92ff68cf3f6a41c572949 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 15 Nov 2020 09:56:25 +0100
Subject: [PATCH 081/295] system: move performance tuning into options chapter

---
 docs/system/advanced-index.rst      |  5 ++--
 docs/system/options-performance.rst | 39 ----------------------------
 docs/system/options.rst             | 40 +++++++++++++++++++++++++++--
 3 files changed, 40 insertions(+), 44 deletions(-)
 delete mode 100644 docs/system/options-performance.rst

diff --git a/docs/system/advanced-index.rst b/docs/system/advanced-index.rst
index 310dfdb0..7d956018 100644
--- a/docs/system/advanced-index.rst
+++ b/docs/system/advanced-index.rst
@@ -7,14 +7,13 @@ System
 .. toctree::
    :maxdepth: 2
 
+   boot-options
    eventhandler
    flow-accounting
+   lcd
    ntp
    options
-   options-performance
-   boot-options
    proxy
    serial-console
    syslog
    task-scheduler
-   lcd
diff --git a/docs/system/options-performance.rst b/docs/system/options-performance.rst
deleted file mode 100644
index 32e95520..00000000
--- a/docs/system/options-performance.rst
+++ /dev/null
@@ -1,39 +0,0 @@
-.. _system_options_performance:
-
-###########
-Performance
-###########
-
-As more and more routers run on Hypervisors, expecially with a :abbr:`NOS
-(Network Operating System)` as VyOS, it makes fewer and fewer sense to use
-static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and
-earlier to pin certain interrupt handlers to specific CPUs.
-
-We now utilize `tuned` for dynamic resource balancing based on profiles.
-
-  .. seealso:: https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf
-
-Configureation
-==============
-
-.. cfgcmd:: set system options performance < throughput | latency >
-
-  Configure one of the predefined system performance profiles.
-
-  * ``throughput``: A server profile focused on improving network throughput.
-    This profile favors performance over power savings by setting ``intel_pstate``
-    and ``max_perf_pct=100`` and increasing kernel network buffer sizes.
-
-    It enables transparent huge pages, and uses cpupower to set the performance
-    cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us,
-    ``kernel.sched_wakeup_granularity_ns`` to 15 uss, and ``vm.dirty_ratio`` to
-    40%.
-
-  * ``latency``: A server profile focused on lowering network latency.
-    This profile favors performance over power savings by setting ``intel_pstate``
-    and ``min_perf_pct=100``.
-
-    It disables transparent huge pages, and automatic NUMA balancing. It also
-    uses cpupower to set the performance cpufreq governor, and requests a
-    cpu_dma_latency value of 1. It also sets busy_read and busy_poll times to
-    50 us, and tcp_fastopen to 3.
diff --git a/docs/system/options.rst b/docs/system/options.rst
index 82ad4801..68f715c0 100644
--- a/docs/system/options.rst
+++ b/docs/system/options.rst
@@ -6,8 +6,9 @@ Options
 
 This chapter describe the possibilities of advanced system behavior.
 
+*******
 General
-#######
+*******
 
 .. cfgcmd:: set system options beep-if-fully-booted
 
@@ -21,8 +22,9 @@ General
 
    Automatically teboot system on kernel panic after 60 seconds.
 
+***********
 HTTP client
-###########
+***********
 
 .. cfgcmd:: set system options http-client source-address <address>
 
@@ -37,3 +39,37 @@ HTTP client
 .. note:: `source-address` and `source-interface` can not be used at the same time.
 
 
+***********
+Performance
+***********
+
+As more and more routers run on Hypervisors, expecially with a :abbr:`NOS
+(Network Operating System)` as VyOS, it makes fewer and fewer sense to use
+static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and
+earlier to pin certain interrupt handlers to specific CPUs.
+
+We now utilize `tuned` for dynamic resource balancing based on profiles.
+
+  .. seealso:: https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf
+
+.. cfgcmd:: set system options performance < throughput | latency >
+
+  Configure one of the predefined system performance profiles.
+
+  * ``throughput``: A server profile focused on improving network throughput.
+    This profile favors performance over power savings by setting ``intel_pstate``
+    and ``max_perf_pct=100`` and increasing kernel network buffer sizes.
+
+    It enables transparent huge pages, and uses cpupower to set the performance
+    cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us,
+    ``kernel.sched_wakeup_granularity_ns`` to 15 uss, and ``vm.dirty_ratio`` to
+    40%.
+
+  * ``latency``: A server profile focused on lowering network latency.
+    This profile favors performance over power savings by setting ``intel_pstate``
+    and ``min_perf_pct=100``.
+
+    It disables transparent huge pages, and automatic NUMA balancing. It also
+    uses cpupower to set the performance cpufreq governor, and requests a
+    cpu_dma_latency value of 1. It also sets busy_read and busy_poll times to
+    50 us, and tcp_fastopen to 3.

From a1a1afc52077fa1f1bc8f96ce799bcd836816e3d Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 15 Nov 2020 09:56:42 +0100
Subject: [PATCH 082/295] system: document keyboard-layout in options chapter

---
 docs/system/options.rst | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/docs/system/options.rst b/docs/system/options.rst
index 68f715c0..1b95a101 100644
--- a/docs/system/options.rst
+++ b/docs/system/options.rst
@@ -38,6 +38,25 @@ HTTP client
 
 .. note:: `source-address` and `source-interface` can not be used at the same time.
 
+***************
+Keyboard Layout
+***************
+
+When starting a VyOS live system (the installation CD) the configured keyboard
+layout defaults to US. As this might not suite everyones use case you can adjust
+the used keyboard layout on the system console.
+
+.. cfgcmd:: set system options keyboard-layout <us | fr | de | fi | no | dk>
+
+  Change system keyboard layout to given language.
+
+  Defaults to ``us``.
+
+  .. note:: Changing the keymap only has an effect on the system console, using
+    SSH oder Serial remote access to the device is not affected as the keyboard
+    layout here corresponds to your access system.
+
+.. _system_options_performance:
 
 ***********
 Performance

From baf330c08cbfca1a29d3918586f708904acf2ca5 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 15 Nov 2020 14:09:56 +0100
Subject: [PATCH 083/295] dmvpn: improve blueprint with diagram and full
 configs

---
 docs/_static/images/blueprint-dmvpn.png | Bin 0 -> 41398 bytes
 docs/appendix/examples/dmvpn.rst        | 161 +++++++++++++++++++-----
 docs/vpn/dmvpn.rst                      |  18 +--
 3 files changed, 142 insertions(+), 37 deletions(-)
 create mode 100644 docs/_static/images/blueprint-dmvpn.png

diff --git a/docs/_static/images/blueprint-dmvpn.png b/docs/_static/images/blueprint-dmvpn.png
new file mode 100644
index 0000000000000000000000000000000000000000..04b7bd6f6bf9aee802bdf05bbbe23f59cc9800c2
GIT binary patch
literal 41398
zcmbTdbzGGF);=ntAYIY|Dh<*lEiK(3;DB^DLx)JWN;eGBB@IKjGy@FX&Cn&1b4Glg
zz2Cjxv-kP^&L7;sd~UwE*0t8Uu0@!Nk_;9)8Tx|<53pq4N~%40fK-6^vVDSr_(U!7
zt{3qQ$yrTC{6X39vmL}QkIcms#U4DUh{3oqe2n-V&Ec(%^MeQ2oxi`3dhH8L9z4jF
zmz5OLaM$0zMfH9*6;B&!?6i0^<mqbWdNG&&UGO?{#@@~R^&07Lr0q=QI?Ze)h()i~
zWacGpipEQ+FpX~v9B*looQIP?JR(SHd+-tI(VIsv@%afJA%0%DJM<_oYAm_}@;u1y
zJJ=L%U3xJM(9GA@Uhv#n&@R`f{et9nfD71dlCHBq^?SLDT|PfMFIQ)`P}zcp1A*cK
zu>Sej4i~$8<H94UE%Da_RLG37f&9-GAkfgfGLkr)f4(89O`QTZQW5!|<3w4&{(lZ6
z`-?u#ZM$f8#kP|Zr$OZ>cGLjiDL@ed{pX`eLe@cqt)i-!;;P)TA@*H)ZeftXTsc{y
zAR{;hRQ%5eS~JZz)9j{FqK=Kh0g5J|9{=i4D&Nrm9+2fC>*hI_3{?E$uLop;FyO?0
z+bXmy_^*egx;AD%DySHb1+Z*3qL{lx?y|70cGZk{=}fDRZ41j2zZGQt_en%q?4TQ=
z;<qA(#AE(*IRD2VfmND=Ddkh%(3i$^!BaoSNy@&co;rTz=Y$0<KD>2w^2QggooqA{
zF7@CnAOs7AUe&}rzUWJH=-17{)!ocW@S>7k3uv7n&Zi5!<Mk$<?lrE?o4s1ZsL41@
z3J&QiN9?F8{Ld9q>w=LOoW)IdwUc4!`r5yS;mBGWRM}%8{0)i{5<XPyNVc4IYZc3-
zM^N(+vA`r7Tq`R7lO3O5q}iWrC6xlyuAdyJljm7x*6M_dg_TJQ!RQPFa8II-y4Wa-
zI9c6ranuVb7P}@0H-Qg--=F5Ay-1S|clczB?g+j7iGiKwq_R>L8mlq#_d$A$<DlNb
z4-6uvE*-Y-vPaFXNT`V6OZz;p$X`>&2$OQNjUT(It!k^g@EA++p)se1?l34Ur84YV
z^@CHIb?QoM6t%zQE5Z7w>ID0ZAE8Kc7Q|ZV*>83qE!fl459Icb7MC^tXx*ZrBF-}C
z!5r^!i(Z;soU{|dQKB<Sn~4MRtl2KmeAA^fDx*=5G1T3BDflAL)6;WsK=}94&%gZ=
zk;W_hTFZPB3NTy246ji(qAD?jJ;X%SWR*$YXYG1`Wr|(0cJ1})$@Lua0w`NL#HZl!
zS?^O8?Q#AmDt{I(seN$oU!dGw@pl27N#PiixB2>-zg9RIdfl|T4-*#{-pxIps_Mu4
zk=2yBpdt;8;FRGuxA#zG^~yAiv1Fj}MffJQmP>b*H^N{cW55?Srr~=G^TME(Bm&&w
ztodur&6O!lVk0HPWpiA^0}2m3elM2<;?|LDMwDE{pBxwb@#oNlGK>|b@$c~^e!)h;
z?OAcEfn*xfk&5y8i2+RC?Or?Y<a$W*GW6Ozxm-6~lGM2B6^Ho$yYa9F7Jk=!Y|Ea#
z==!C>ke%Vs%{Mu!PH^b)VH@g&4~Lu9q?a=m2ZR0P4Q5p$-IKRB2#1m``3qxypFvXp
z#QZ`YGkjE`eNmtMO~IEWO!V)Vonwx6TikEY{ig1?13WXF8v6GaL+0Lh#!t=WPlZA&
z(5;fOVqg6GcAmRFKmP5&6`+6Y@V|bP8t5nPA=7M3iE|Oedioi|^l-F(Ug|f{s5o4F
z5V&KNyRix{GmG4&Yrkyj8fLG<ze`CF3_E8BKF*-wWpPt;;gPx^1GIWB6bU?bL*^@6
zV9!8J4I?wp+P3P+vBMv$R9V!*SaI6iz+N1Sg&U?|tT_=&{kC8GaUR~HMVQf@2qY?_
ztc&fpN&jsb|HRe*8|00;R=dz5hMd!Zm}w=4w!+9p@Sqtq;P2rDp*r=S82mW=^er6m
zRNK`+5!Rt{yabvDIlDoHl34j+ti<?$Qd+PFfOt3{Ndz0^9`XJLyD!_|L~`<NB`;c4
zYb4bnJW%EStOKVgjlh*W2w9YN_S6^@M<1$nYXBnjQ>;EK4<&;0LqPDJoARr}vDS4{
zc!b6I5`pcV0Ax}o^yh8p_K^xG(oxdmbh?QbPm|)qxN+z1x=*ELcfTVp08;Z0s0<u$
z?j#dVm!z=4J=d8?Z%!Gq5F+mzkkq53)4hY^4Z*2FI;~3F*V>_*Hz;uU(g_?M*lNy|
zGSXAM+{y(<g>=9R8$M!TEDgaiKpsuQP4KR{Tft3xtEib0jzgT8F86drgO{`LSE`fO
zlHI%fT!KmqHT-E6HL%LdH>+ZZ*oP1J1NUFp!F67tcH9ItCIs=7941YjI>UU^@1_;Z
zs=l;+Hmk%Nx-kYd_(@ksa^(X3dUu81#PyR-RB%Y<i_i%OM{UpBfNX|Chn@4{I|nn$
zTRSTwl|!SQd#W$^LAGhKw#$*|$%KQ}lbM`w;lsna>SLB)4<T26&jnsbGWe0Iu33VL
zc_i!X-UYcz{L8ZNF2GF2R#QE311OcJ1CkMbQCwu$a1-9#LU=G%SXB-*jX#_DunSd^
zSPNH^iXQyF-^j+Q?q!ooU!Y*!3@$%2SWQVIQC8!7G?v{<@+k}(Z+KU5w^{t4&ZJ8c
zp))0%%FOkIWw<E%xR&KgKM5Hh2NB5-)*w6mJg|vc=r|&zC~|<Jt5d@&gpUIl<dOd1
z-mnjYStE0sBeBc{%(?vJt3wqn@5&t#0__@?=ygv;!?2s>G+Gi1a=?Dl6Wa5e5d?YK
z9-&p7!_||OIzzvNL49f6id&UK#+~nvMMI-8&5Z^7TC*ekVnw9!aS(w$88QF68A${<
zUoA@NXsb^`Ba?xtDTVarC<`-pt)W^@!IjI}{OX1Qy6rP+vm>E$wfF!T*Df7&g#fnj
zM$|=OPQks##()AN(ZsMQr#?TLlny$cr~&Xtt|B13jqWF9jW%(;U+P-jmFgt)|0^Is
zBcl%#!HXJlE~}_%Jh$ecjWm`Q&bshK$$b5-lJx>gao<y26ZH<C;$0R=?RSUh=0*$q
zO+&WU*+}f^<hGKDY_Kw6wz+p}{j~a9l{NlBseEU?WW)IBX<0JpN~W<X$EY{(*5|Xg
zB&wPzT>*#;NWlTnfciTZ3uOi*_15Tu(*=?&xWN7OUk$EP(}IMC2yc`?#oIkxIB(b=
zO0<tC7^SyvyxOA*3+Kf@e_umH_F%0KAjW+SujDx4ogVIsAFT0{sXm>P+%j|UfR$je
zwBeTXGH`(;sQDwVoOzi@_FCy@@34leUB@=^=)zDTnr~eI91K(l44>cbNGsFArSM3y
zSS!aX-8@?SxfFULx;aQ2QuUO|7%k){J})0{xU!Bl%pT8lWKu`tbz2jA{Y%?dkYk+J
z5!a(bKCRDnfAUGH`=%;xWroSQ>5zMVj4X<}@UdfsF!9cr@XiL=)X%j@PoZCo?%NID
zy?kyrocj1a5B)2CtV-841~K30NbbHaX}2|4jx=Y2oRjHq*Wu`+ICE7rCq)HgF(sdi
z7zYSklOAq`*Q6s&qo4%a31Nb_mwg1o+DY^%>B&Ysx!~e4d#9Z>(!)OzcJ}tUco(GL
zU$_cocCgPJANb(%Z4G_;odcr$6>}Z4y&6*sE=eHmVrjyT@5;?LBWnlyQ0vWI_+uID
z@y&G)D-Ay$;sHKvawx;UGHgUhR_WM_m<tCDoJ+LaN&!$34;eufC49Fd9+}o9k3~Mp
zuJ9N0!-Fg)4=ZFVjyG9oU?&`M((lvwQ14?w)?d*KV_`R~biGxg+F!yG!<;OHe{Gv#
z9g8|{ZCDXBJ0yACS~9eMv_wF0g$m-{MB3En%}<9bRA1{!lCo7L6K-Ei-b$@`EKa3L
zI_o&^6Qrr;>SDZnP^JIOJFKd}z%b{=hj%E1U!J*!C<TvrYY6FIPFnop1Pw$DPqg3)
zIWrq}VP&BM&ls|tA%WM+oTLo;k`<u3AlUgJR*L3ef7A_pKP}yK=hglxs5q)%1yi*T
zdr}F5f(8$}o<8V2|I|M9bXRiVj!RWOqh>U+{<S^!eaw0DSAI<lj%o~Zy`_V=V(;v?
z%1^i+oSF($pa|tdo%}5znfOENuh18~hxjMOxmH)3`0vwpq`%Da{dPx|D?EX>fWk&a
z8y}K&GL!V$Sq<e}#z+N}dIY|&EhYpvIas8&|FyVy_8MR{FHs#5g@#hI;}&XFhrbXm
z^i&V&BHIo?3!dqdb_ft%swFxje*Zj)8oY7D&K{g${6Xr8$BgZwoBc<|q$80cotx{;
z?_w;M#=HgZ*D9W<ttuem`kFEy+VB>wYj8vS(Ny)kY)MEV^ASx2qHMV@RFDhj01b-d
z6WC>K$CwipelNhP*3biykNnW828ufj(8Lmb{~f8h!OUcb?}N?Yo!ApC2k8q;NQ#)}
z6{s7&IMe`7uxMYx-6*f+jr>@AF4@~lpxE&|%&#-WPi{d|r^ncki*h*i&t#+W;<`lr
zb5<|j4>!%X>v^7tDmWXyKLBkb(wxn<9kot7TNOb_cklZPJxOAE0w9krk2lHl@xphK
z)hig1@*a&625W=spKHETwQ;Egk%#7eUkqF_9%`K|UuY}A4X5V5XnpJQ8LpMDM}GCd
z`P>jCBH6~KYC4PP$bgr@s-J^0;yLXwx0E*5oy%o7=HoHu*CblukG>gBzd$EOyRW^F
zi>%#_+p}Cb>e$`x%x{+uqEM`9kw2(x*r<@tsA!$=?kv$-2^+HPp@LZn0PhA-x^<~I
z)curTn&cFkcC`jZT9ubBy5zw~nB^8&knq+C=TnwnerGh5>;(z$t!e+K!L)o5$BPk_
zbUAbe<crM&%I@DW^G4!?3b5%idwygU!DL%Hld*X?9nE~Fz*{(<nAG`c&@hMpl-r!e
z^3M5k<yM*hG*rZ_)N#}+VS=XO7Re0M=Iz4_=YyOX(5LinR)4O_e+<{clyf1(2PBqf
zsdTO3;4NIgpR!i@0UCwoa~6u4I~xWRDx>Y6bPDGT<Aa)xC1pZzb5{%jyn)p4Ua>px
zZ9ga8Gpgx9t)2F#D<32CZI~fNt@OHQb&|bH#<x$Zblm+}n_)Tcqaol3+|58QEeyCy
zYAi|Iwk`svTRbKH-k&;(DFI!4NBq?an<MWzwyH#tIXcZEJW2qxNiA8EIvtpR2hd$#
z@dk}qO745CU$?P>F$LKWV5D@6!aBt-{I#5~Z5e$&R^S#b@lw!6&PJTeH-IZ&^n<hb
zREDV%!ndqnK!BJ1SW-fFxRB-%;4LQld{3b2{_?B!A5*W5J@rx{8#cp5DekCW1_YN?
z4x_D1a~Pi&P0Pex;w2ud@@BC)Om_8fpVpmMOS{%(kZ3%(Pd2=}gI`kmg>Elyfxlq(
z(?wbl+}+VZ7Ded=j@3aR<uI5lUQNae7=!7!#onA?jweQwFmZ4o622mTT6_hg>B#fh
z3r<K%yQH(PeCst@c}}m2Q{?0+S*#)l1H_aD%xX}W9okFv5`58MXOD&6b<24EhRr$Z
z+^shgm*R@foTD6nLz%uvme#7V&8#ChD3M6NcuOH-=<!9!(enP#?v>bk64C<7{*A+<
zBNpjR!(rhjcU)u&_P3y#&jqjts>9x(oU~?JzfTsI20Mmp>b~hwVf<TD)7~HCM0!lr
z5vD;JRyLq*#;|%E5_;fMR-7krWn1+^$_SmHe5;N9)KnpIbM7d_#svO0?kBhEl>?{*
zCzN$rWP%QaK3rS$lR%Toh+42D46a>?r0KvPUWdEELN9R60TJVET1d;a^$fK*rXo-b
zd2w4rr!O8FW&j;^91+fY8<?N~qyeLqr3PY&{}AjTXmu~>ub&qaQpk06Cs5Z;nnF`S
zR5seq4}gXKipCfADOd%3lG2ZJX8WtTifIQg2l*9vx^bP$&eMlHCf%MdlJdkB>f8P3
zD#0O0{&mer;JiI_&B9CKvP7zo&nAh|jbbW5gd~?{iKwNXA@~7P0uG9x9WMe?fTE7}
zseZ|vPJ(zfTr_zopRen)OH!P0(!=uo?*`uW31L&c)K%iaHAxMh(E>hkwAX)7dVVK*
zI8}{j_!0SlcIMd=<I0A;)-mW9L67l@$;)(OHdDZmq&^>7VM16EGupUnQbNNIr6<`L
z8I-3^IQJPUs@#RE44&$6gxTp1i=o;NkWH*O-3Cvg=HSMlX=}gEpgk_j6$LLQ353dm
z^*jGZGn3Wf7m|tck-Z(VVO)qLERqk<GA7<W6MyE<iKxU`UF_ZPc=k75!7#FW#)$<Q
zul8P{+wTB+CF`gZ&@YM-;OMDO&E@2MW4Vf!HX@n&gV#;_c!l3}qB=S*KD(#PKC&8E
z{xL*Qu^Ag1nK^I9;#jg2zheI|=mTPfqYHIuRRy_eQY@FY!{2;IY-o^&r2O92U9`M$
zn=L*=Iun~u<HNYe&(V$IS5J?BNl0qDKrwMBJS4Y#-&XHV4WUes|I91K(V0MJj?fK%
z1#_Dg8m%#BkN1DMh!lTC17P8ouJbC>6BQ6z-E7kNdsU`?uj*r2%RsV=;HhlcARLPv
zJ2kW~@FippiW)1fojLXGA;71VaG|Wl6p_QgV<tZTocu?!*wXO_WTmEh(&y?5i|-z(
z9<YT)-(W!~hwT*T)_Watu54nRfamSsUK>|6UZISABZA`{9v+59N7EF^EAO4sfzd(5
zNPrgb-vb4gdZ8ZrgSitKPW94!Ze*7lZ}(pH|6UAY7!Hmiwo&NCwOQ2;1_ykx|9AS#
zK+XaW{)xU@CoA+9te6Jf!%BEr6z)Q;0_c;f<c@(!&XsZ5ncslTTm4xbjq=8;=?96R
z;zMT>)rh+Q-n=2WxJ%l=dp|ii3dY~HkoP~v!OCIP4{+STgmhnoD&17^GR^0N$7x;y
z&u1h?AkZytMksVD<dqeK>V(&?pUkgM`WNBwuSHs`55}CB)QRq+xPU0hDa8)a?53PW
zju=Zu@kEawL6vS6f5&Fwv3;vaHnuK3XB;@s!pyCpX9`Ucw9LTN_yn`$C`F?l)g4)4
zgg-*}q|rtw?-gum=Rh!NY?bW@Y@<Mam$BV8G9xra0I*--G%6yNXb=lSy{{$~XkKR~
zPLpnGbr_60(N|FBm9@oo<!va1m*s6+EeZlAw=MFm_Y-$?^{9bycKI2f`XqIfD-3V_
z(sXY9=dx^KD;uwFf-_`bFukixk5sl35nlxtPqGCjrQF>_@`h*c6I@vd`psTdnR!23
zdVcSI*F~v;)vw~}pyKsu9t{C?XX}1Rn;n1AE<@9!&GYYM`0T5T#0cHWG$HA=Rfza>
zPVR!yi=V!=x4AwQ7VVH%b?EoK;fB;)7amqs1pkrOJ%1%*qkH3q;a3-*XnW19-?MAy
z_qmQ#F7EP$^&lP7OwrQ!2yKV=w(GZmY(e3vhG$NTh%Dqc4>KUlAR1cM<CE{TMF$ze
z1|66Q3wEE&OQr|GfQJBJekf~|KR~2YNO1y2<2TihGLbSgm^&Pf31T*VpX51d`2uFB
zIFE7q+$=_d<X?!Bzj<T?{j2yVH~pJOMifunz(4HW{|Vjv<uf>nk=rTQ*A)EB08;Zm
z=&iSJ0VESyV%(wp$8QgTb8=%AKV{Y|`@)EJ^`zY}C=3KLdPd}PX6--;1o9R)GR_R=
z;y!Qc8ehhLU8<>V)KV&}>V<4`<Pge4k;)t@>M15C&O*VypZ~JPKlC@vx3bPG?tIng
z8ir?Ca|w+p!M={TQS%x~ds1WzHF2C)>{w*r@bEIA`eoi1?(K+9iy6xhu?@Ctb9Ygz
z#^`4$r>_p3j|jMJo{~=#kBmz&bW+D|yXWW%zoMb!MxZAI82er9iHD5)Dlv{GX`*0g
zNZ|ywy%7xkQ~>FZ70NFJ+foLMJ!@#5X%hJXPIP`1F#Ap#@bdz|Q@xKxG9ky*G%ICF
zZm1$rBc`*l-)~TYg+5nPC3fqMD|}=}#<LV?M;vcME`ftdCf=9t{c|MFee@|JNFdy;
zpUy}Cef)wBK_6F^nY}O3s}I&cNmBpJ21ya`<Q)W;<eoh&KRt`vkIVQXoBZL*HRXz6
z@xUB|p{gjOGO@V}<@_PbP!WcWwx1D^@X%ay^{Z4E^Oz+J$K%#u5HvwBEfP=EbPOCW
z&{xaboX-qHb7OsmAQccH>OZs0&?a**P|q@OAP!Su7<;Dd{Dz6lN|)H%@$rV6e*PF1
z^+VD)z~Zh)ga!(akpv^aejslqP0XXtZ+Qq9x3sxv@PwA~cZS^#+@Soe(NMntN*svs
z^M6&ty!ez=d?0o#Ffyo=lNKSR@n|y-lD6gE*s>Vl>48Qu!UpQNc{M9y{93qeAf%K5
zgk2Lv`Zv_wt2<GF6IjM7)OCW=TOJP<7BRmTEC@!U;COzbqb$LUtD~h(4#xES*t1_s
zTZxH&k)`Wi!DO#Ur0B);3-J1_kOji<LA!rMA$&DHtDIlIjCWAT_}y`_D0w5W(?;?^
zd)&GwoNQEs$vThiH-@spofv?3)@SUAYnM{|6Dy|#h^^h*%pdPTE1X-}%JMW+aVZW!
z=ZhYf=tcHU>ak@T+cYMRv%Y-pc@u!8F_HJQQ~Y0;GlWC27u*ffKy($M-KH9I_}}TJ
z`G6Yn>K>XHKt0aUQntZwkv@8i8*hl>`2?oSV~SX&F3OXFq&75kXXv&RT?i$$k^e8`
zu6hIDoIttyc>M4K@;QOR%Gxk8Hn;i~zKV*{fbfCh!t8T&p#EXy)1lDwwdJ7SL<0gJ
zVvm#=4h!4{jdjCEO(~tS_bA8`8yS9!TcloK)ZwQPa_71+<Z`9_Rw@CHwqN@k&Xzaf
z!Y*a?0@au|F=>4F3EU|*?SCe&wYd^p*y1$CBQnc4QU>0f-sTDxb{-2F?Ys^x+x}Dm
z`tL9;>|6Gk(%Z+Z?Ts|stkfK51Y;u%9Z+z1Ge5{=pRFl#vc09w_vq(wM;x?hS2<B)
zI29355Jjdfg1<tAK;N1y{4Ac@`BJyZH12M)_fX)owiIxR!RkHmHQxs{`@y-Q{?9*p
zwSOy+Ipu$;XOffY^=6rz5#>%OKrjeu!Gt_CL?7{xuI5(KPMpf%H(e3c@|Wm{uUVIS
zYt_c^c_wL)M%UYZ!?$LMO7UIB_g>=r+-AG@FZoLqSeLuS5c_L0sX>~6<3xiKYheQa
zmuMbCibH>u(no&o7wqwnx4Mpu^{=X$_&-FO*04A&lKe@v{zAy2gKsqg5u`N^iJcnW
z?u=5+RylPjz-=zxycNbcd$^wpCxz21`0(5*^iG}Ybfbymf08<HH5TfK@)!b=>Q_Ps
z-r1}{sujDFu{cBr(8wmt+s~0VP0M4>pQR{qdAW{R)xd$4=Ij4!01gaHl#Twcx)$9I
zyrj$+=!s%8bnE?Jn|3`#x%@a~Mcrx;RjAnSv;50!qa>j`q#7cN!MpVa-$X+=C<e0j
zM#^lvv!32B?Ftd1|7&4zO1YbYDQ7OGAIw3aTnA{yf-PI}+apAe@G`pHf6MQ=^e266
zCwoFk<05=G3iRg#DzU8kqK(l!ylwx$uEC_Dc#-MLO}P%2r+KEVl?37i`T4y~^Af*x
zm?5u1Yn-pY+;3MtTGlHTxLsroqHIuh=O;GE9N${3GW|Z0{Ea4^duce%>$e1r*j#!o
zqatZnDF58Uyle~7n7na~SDhUf>={o`HguOh$NTt9*wnzQtBC*iUEJnl#EaeR{xB(m
z)o*adSe$;)ubJh0w=~PT6?Grc|K^!Mu%F*2we@AS=s1k88FRi!Mo^pCt6x)y_(*h6
z8r<vW|HE(r)w`0<V`n__1}*52hh`c%k*|fmXeW&RyM<5r7>@OSG<?PX*_J!r{{wK#
z_R8dTrL9F|&S8`(AdT;S+<#o+6icgy{D|@-HLQ(Z<eglmt!%y`eFOt-@tL#peuejy
z!?~E}QIw9q&+_>puhGVDzn%>x{F99I+=3z^dw4%v91oP!jHd+Tmo{5>%{qoYx_6_$
zwfh75h5nv_YKJLDGG1E>EK<SDmh;WD2d!w)8Krl#OFmImAUM|<*Hvq0UU12Elxo$)
zQtu+*ZTZN8I5~D^t~DPR>YEnYy|#>SdBn|F!01*oRTfnblX|P4W)BFhi_Zvhv%0DN
zE;hODfXZ>TDq|7kJA4MSd+%Zxdw(ZrQrcB9;Cr#3Yp^u16_J}72`d2n>BAHU((f-_
z;nBj`CjnEH)()3a@|+DUnR~N&2T}abOqbcsZbora2`2hpi-%x+*)xOt-hv?!SikUZ
zY8#QKCAqLo)S_a-Je5@>qJPWf2uwEkN6uzA);v9m$6gRk&R1%0T-UU6&p`eyU133>
z>^lj323RB-yU^t)!u%}=;RInjKG1(O6v)=WPHH}i@l-E;Z;4ts2@bfQ;BQq_QoHk;
z-bkJaxyJd%?qpqs-lD@jX8nD2_v_OWXhcTQgg8O3cwGm`vF~U2TlPe}9cy=ep7BwP
zkk3_jsmIQv^WOXaAsT~<5nGt_Vg8_U3Ecme85U@4aK#t#GJbVSX!dMiuNpGdbfzYO
zJDQX}-m{fxS#v{kGbq58B9^1(zYnhEf7SH9dQ-dw)u)N?m*_j}F=YNIHIrc3w>1h~
z?`4ysJE{kzT*aT9pPeNodfi90<R{?P<1sT+6?(apPfG*Gf0{k^a?0la>cWtIy|8q<
zL1e1ZE0<DgZ`9aCcYjlV_c0&@yN;c^RPEXw))tWTZt65^`5!{@pNA6V0QUQ(8_rqa
zbBQ&{R{_u`xJNr9sXw$c;)+&W;O-OHrYen2yCwf=ibRgaI5FFSvWk|l{gae`zxgNm
z*XG7<%mK45h=vQg+5zi(;ou*FHzIjSJAk|MX_8LN4$A$<Ri3u%o2oD?0V@Axj{nSE
zD_}0bxqMqW3%YkU+7CB=A#fNGZGWo%SK>JgbnQm9ua3gw>}Tk(K*Cxcc7MbFJ@9vp
z-sa0%&Ss5;2mFUiV)OBQOFB`FO#GiN$=7xk&s0VIC!x+#m#c^3znga8_-#+5aetP`
zqWT9Pg1HTze>Yt`rHd~*JBSyilkNZ03y=o-II$@CzN&vYz`r|`5SO(6DYieW$EL65
zKfN%xifO7+ZZGs7r=TC;j2DY~=QsQ>*Zkj`U!V%O3&dJ!S|~g==gDnuPTmN3LtxzR
zk~m(m3laVf75|h6*R~5=#JghnBdkIPS0Z@6dawV)%Ig0bD<wxMT7H&r7G%B}!t`bP
zCww~L{BB#iw{L?vcYV^QDDu;v*Zy=mLA3u-oCc2jILk+K7UUD9{j1^q^V}j(T?|#0
zGTl1<Wz&E6c_D23T9B2YERGKr{Lcu8J-=znXTM;!sJ7SO5iwitqT)89c;1}p`;r2c
z?cM_sIi4tZL0H)Ts(V1sD#_I*{z89ukq-qJkqFp@<(cuO-K@%MsExl3ia&R0DM?W>
zXp$ri+K9{07Pp)Us)j4Htcq+76U<a!xQI}^)_c?I&ObT8RFt(h#>7-mlJj*|y2uW!
zpje`(sjduI5PrHdMZ0=j<0uLf&q*D*h89m1G&cv7y|>gZDJ;t!u+@H;SzcYIZf;J$
zP!HLdU0S$@5{LnSA?JnH1`KFbKd+QXrdOD>o75DpE1<0=mHgiR*^fcZa|{@MV>DXj
z$3#L%-;I-g-KXfS_uuAE$e4<(vcj*-itKIkYlnAT0@g6GEXl)sy$Qy$zOyK;o8Fb>
z<tirQVVa7f_7owLa(gULdirfBc>)ilJ@3W|&(>uywi^$Jvh7=hV=3K@nQnKB)y041
zPKo5&H}M1nHwlJNUVoqz7W80@N~`kkVO@|`=R3@gM^%FKNF?{Sg%^<*gew;3-ZB9W
zolu`T)I|qSNoud1ZiBkL)_Sl^<)Wg7G*nfkq@-x$3{*^xL90RDw+&fGF9{RlRDp^V
zHMO;>ThL;wdfO%{R8g9ugHi;OcRPz!w2ors0pQ}(+TH02Qk!)ZN+mi_%9q`}fapck
zLB8);ZzqSzZ$mD&MyU@6vr(56w18oS(U-7-!n1TYv+<n6q1;~4G-U~oIX)sA5Sq2?
z_zghDa=fC-Wtx+9Pd%B4+=!r8ACyrS$Wc&Cp}jL3WoIilWb0Ctm8L~8n02AO_l-(f
zR}LpimKR0J?{Z^GG#6DyImbRKy>Jk#=R9{RZ*)ppF(+R{_pLFJZEld)*p7uAnkIL(
z8gqXy>9dD|lriPoV4zoh&3w;{s-@0ja+MeH+8S!k1EyAM3gFyxbRO;+HDT>%A0&)1
zczB!xf)oqGE;Lnj6dOE(;$rpQ)Bw+2qL{(MKb81fI7%W|ynZzf?*b;KC$lSa(n%Y*
zZO47DHcEg+*zU_wBauKUKeXnMUIlaGRK=x@tBn_TaBY2fWDA!a(XG)eQ%bcVo2`<l
z45>%A#sHQhiP^<aDvU1)cc6Fb(f0pq-sHFpgaAV(z_r;y>RaMh7Uy=JMmIM|I7HQ+
zxX%nWFn4$7(LMJ9F6Y5B3IiAE-v};qU6$W};iMn0U0PeFsN)V&Q%c(!EQ$ixH&LVk
zx;yWqZs}Y%R@B!q^mq#B6rbAe25(WJwaHpx?uq<77^|~V9(q%k!m0^9xxxy69Ml~b
zAFs#*1^V0cCn7kt!>_FN;`MM$<NmEzmX~+xXJdmkX=usi=OdkL&J+QjyVhy4?Mc1@
zru>SF-(!B7Y^VyDn_JkV)=G5#GS4i{;-8BdO^%3nX;>pWpP#rGTxeyx8`i^58<F3`
zbY@<;@Abq{*It%2LeQ0{x^+={oc!JK+(F7O$Baz4*}ph2y7*nvZeA>9%Gk5cf*zi6
zql$4QVn_#Q5#DVAiqx<9?Cg`tF>RjI1ur5*hn=m62BTf}J68I`jpG_b*XXEq<Gj+=
z@P?YHCYHJMkOpAxO=6LC;U~pjDc)k0$wyB*I}DOEO*JV@O)|1qS2@8>m*I{}yaczu
zdQ$8ZeK2f=T@$2-^<|bky@IW>Ko?yu>3)<VT~Ui$GbSPn^_i~b`dR&X14S|g*K{Z<
z^LZ#`yCNGlL)9!6spKxcB0yS}C9hB64N4t{Xg9pO7u{pW=hSCkmn;9#!MYxRD$~VH
z+_S-o9eEH{mKvw0B_BJvpG(iL=lQF22lgmgY5vX8R$sBjRjq^-?qj=;FQc#<RQp;n
zlH)DC=nb{r;V@p$$=5;pK5@e8Ckao;k(*F^`QktrM$fyFo%uD?^^|MUI5ba}<c7Up
z9^?O@`=(R8&BJP<WnOh!@CmNp=-XNEC&h1{qB?22TQ5f*la{@b#)9SH#_JPBp7}#V
zVd`va<6<#W-Z;@V|GcR+0*VD|;jw%C+8?hQ!<B-|?vVDt)W>U2!P7s=3XPl)#c^ke
z*l&yF;6Myo`#zf|q_RH#dw9mB35Vi>_s8J`jUsM$#>`0N$=tCY{JT4aXc$nReE%PL
zE$uAyE)=WM47ywo`n4gW;t@Ze<ulI1bgJpo_1HI&h*m;HHmDSJ#hu+Kb1T7SK<}pd
zIfN%cXn|sy6%}!D2~}b|1%qfgyw@H5R(07PipAgd@Y6T;O3GSP_eUP_+ap>lyW0|T
zw$Ls1#-7^Uuzs7`vIp7H5069Ujb`1?Fo)KInNXy&<*_b4jdB@*Yp=yg&{3>yg`5(~
zoT-1HkhOcgPL*5yD(&q0O!Yj)^4dYt=h12Bn+P9sjETdTx>F);6iu}`$*NkaJgQ2L
z7Zmz#zpBYtP=&8IX%(njE0wS)MB@OGdSfFHZ#xg~YBRoOPV)fHnvkWG?8sgE*hEO<
zfZJ#c9V<u12VBNmci#L#5PA(x+_TbDj5HBt-PXhwc)QRQFDjGt&+}eP2$NS_z?19O
zdhbccoWkSZG-Lv^-O{U4s?42{Hz%mHpwrx`M4Y7^AhrG>=B$JSE$c(OA0FeO!K~7E
zl<NX(-ImPIw!oOFyrOn35`kztZ?6YLC~udK<6<vO=h<7bP>dDVf=}k;YYT%<a}Gz;
z7cQ451tav68~t~a_Is?UZaB&3oz)Y@b?scJ$J-Adeiz03*!JN`+=dq-3fMbI%zVQO
zBjFFVv4XZMSlQZYU+h!A&>Gg8CwZzwsf!om^V%S)UoSnOu#!=9nvaj;8G%^P7GCt`
z(_#qUkB%ch6R9dS>_S$)Em^6=6}QFY?g8xL)SM?I4=&P%pBjL0wD;Bg*XB1*adVJF
z^&3M@W`3oG#=ns@SwI<n2ZNCpfIum7{1J@C35nW8*9t>6Pp8TNIeB?R{X;Ao051~U
z71|b@y1_mxAwJ@sYNq6Rzud;FqKOZfZ0k*ynANOc=m+W6xB5~B9&22l_8Ut5tI`Kh
z^6afPv<Zw-im3@_Wnw0)c$5swPYusc1qOiFWCIqMUiK2p89bOa+R~Ifj%#FXhvMl$
zS6Fk;8=dUN4PK6Wd3L;<?a(1RyFZBcBu^)0JfrqdNl}9xsi}3Fw(323AB^z5=xmp;
zt(OVpp1I!pLhvpaIQq5CihqO0DlVOiBu>oHjN7eORZdX*o36sfIg3k@;(og6-1S1r
zF*PTn3!zbcLDW06ILV11q6~xn0p@QJ-KH+bM#=pj!hhL2%JRoo$gX7Ig3pIDTi+xy
zSwEE47|6?;dFnsuIq8a2<&>l`TH>Om*=G8KjX`U3J1C7W%73E!M2<J9LS9Yd_F)UJ
zJ@wFZLLMR-<~wb_v*Xxspl~S6mJ;?_-`{a~Xxb@EokUz+zPPO>%#VP~yyC>i7d84D
zw>CnaTB4$T=h}{n1f}Z=TYbkEDBrF}WhX3uOtOpl`xL)?X0*}N9VBMh^=!<1OPDgU
zq|@Al!@{zup9Rl^=ZE{G!>%#0x$HKd^km>(VMY|j$O{jD0;o%_`hr4N73MHO_=9!_
zr*AX%EQ>|pv*4k3#Rn9HoJVNAA5n!gLK3F7gHoXuts?~Q%7^FP%;Z9~b`FM*qXH!-
zx<A{QD0&d1?|3WulNG2ejVfTJG4k-%6q%=_B(Z<(h}d>z))?5Gc7c(ltsi!bRh3QE
zcaRVr$fOTU25$#-1@yduEq<WpPte1!FSA{}>TzR_$R5`&7I;7%Oq@@t9UKtM!I_7V
zXr+k~#QNs!`)hwE5QldK_)EsMOG6{Jv5x}wM?FmUZFqpDpk>Fb@Y#af7D^=M%)DFA
zkXExawOM(7rm|jPaMm1|5A7gv07qKX2ZBFmwc!L4vgsjPL&A~4v~f3EHHsHkHZh*@
zyb*%d>Z7?_#yiMAu9AP&*HEC#o}}~eB340{7xGZ-jj*uc3)FrlPvbkfD-+uyGEd*_
z8>#r=82x&wWHUcSbhF0Wb&p+!`Sdk%w6HvkD6`3qkB>~`Yh||w-;#&&z7(>U>o9{#
zC$g=r%q6sS)`_h)5}mV`#a?-hfJduHtaP!fj8=WMEiE6zQ5xtiJKn%L-c3@77&lRN
z;`R7b;&AJ8khv`m=fJLH+^8t~Wu$`-JWZtQl^?5L&rHO(09-9xjQJ^(FZ<SWxxFU^
zpj83Vd>PqY!fY<Lx9+QI@jl7io)TvwE56NCe;Li24*9f(By3mv(1X`PosS4+(vxLQ
zT`AOaTry0#+RmidDM`>PUtsFsTzqD`ij-lQ2I)TE*6yi78&>s!4%zmX^f=S;8T}OS
z%+OQVPLK?KJl;{z@wVrDKF+lIRHJO{krAy5zHD7{j)bCUoLlx=@>r;*dFoeAx>3&O
ziI?AHJ;EXf<i|agDDo{ISC)R%;VCS^UWi=0RzZj@$b}L72fPl{geZn!I<HPD@1{_#
zXFpVQptGI%P~_Sq!-rA&Nu-nhmszah!mG_xk5@05N@C{FlUyDIbU5G)wg4Q1sxr=+
z)OemFb3xml8Jdt(l%T2(YFs<GQm2GU*O0^^-9n`>5Y72Fx>UY_XfHmpr*v08%k$@^
z1h^cQO=l|!iL6n^aam*|J6GDLtzIM@09TmLM2&G#529>^GfH*Ew(}%Y;E$}Sv$A4b
z7I;}6F+@)AtGv{DNUQ3?5m{eb=C70{R5~b|`jwY%jyuh4qQHU_=a8z)MJfqg;D%|J
zzs<vLs+C~KKgh(^nuJyKsZ77oEdD*Bz1jFV@c8{2+OU#?&)k%!LD=<b(!t<Fy;L2U
zf~Ca?Q+)HXYgY`1DAg3wusMANi!}XO0<tgF$E)tEa*TSv#rEK!Yc14a!ZCC^k~KVX
z6M)52V-1dsrB9ap^tf#zpQEJ681R_4SkTA=Kf49e`yQ*rJ2nJte^L=_3M*tD+<i2y
z448M2%w(gph?)@CW`=zAu<CeeD)duULhF&Um_U@_=J2^eYO8G2LA!u^8&P|pmmWJ!
z9Kq6><O*NX$JAo1L_rOd;3aOuAxcxN(Vn=s@@g@~D`k0WAN+_DI9wMM1^`W{U<wLt
z&F;)ty#mEPPP)0z)r^m^Xg^3#3Ny~9j@j(eo?rd^8J^$~M3T^1a)Kd0;Ubrwt_|2g
zGzmO=3$QRe>O^IBBjZXPk>GYP6sO*_Q6bQt3t(26${N6~LrdH3R3UPt_()2llAq-(
zwizgZBpvScepIC=H%{E&6YZi2yV7xGML&tC8uH+-?^~{h>Jo@sp|``VB(097#O7sQ
z4!e)NQT3Ft_vS;>O+xjPyjw(w5oL1>;N;o;L}q4{>F`KG+Av72t~ogLL#M1v(Jfv6
z3<)K66h}ne*xr5!<Aw=#I!l>a04J^r-SRT^8<=i+LH34wG^|~9d^;A}xcxzkl469F
zoib!mWfF>6XD6jYn?5j{Gj<}E$T5@mbkMsx`O#oOjiTaD*e0P>!=A(|w-Owza*xMY
z1GZX^ZB&RyAL{_fPss5%-Y2=UO|q00sFruU9bx^Jsh}^CMHi%pk~E9i{APGD0X*rN
zQfcV-b~4y!jh{&YSnY7(I6O#HVDsb@zS2+<kIK1ybQxh)Z6K5M>WNo-i$K|u3f=iQ
zqi3jKo{qerkH0IGXnsZ`7X=2r@k$fz3n(X^Gwq6{>o_Oz4BCr8Rn?vi%AYb9%QFwJ
z0-2pKd1Qk9#n6XiXNd){P?0GdDj_Kq#;7<OD|vJor0hctK`s=eIBK5XhJQt}3fxe&
z2ipmH@s9zMrq4<(tzHZ1Dv<04BtVi^<#?D-S?C@O@5Ob(44V;UZr0S6U0z~dY0eAd
zt#Q7kG>Ih=o(Q-Tco-hjWgm&%y7;-`)PiJ}bvjvz5Ge2#<gpkzAlx(uj#3<gEfPrg
z&-APhevJ(7G8>1jY}EeLhcu>7)qlz(<Yp!@wbTCsMh!v@1hl^BiLrljUFh{HKaj3O
zE*Bw}NiUHZM{nKf6D#|EPg>NkPIt{1)VwY+<a$?o@yO=~=|nO}p4+=8#TQ51VUkT^
zF*(O9S<IL)N{zg}?yS8Z029+!kHLizV50UqO^C4*&o8!xigSmaGy83hb7j6#z1S4h
zZI+1=@A29_x?@awLC4-UDBvECTidBXSg=c1E}yH+caS3x&3{<o#v#4>g7rX*LP)RR
z0AuBD=+nYZ^@cld6ac&cts@J2-Oi?fh<h0l#<0zReww4mPZWagegu@?J8zj{`DY~C
zezBl_nWY~6?ATsCihi}y8v(U<=kSQ{2jjj@YIy|k*_QA%*?WI=ogI5fCaPZ{ShU50
ze-O;NI2E|EE=4TQNKbFD;3X&On9|>0T+MOb6NlLoFlBWXojn)K^~zRjwt#)`=5-=L
z=NvP$b-e1%5|LgnA3j1!17=71-tCYXH%SL9k=K3XeI`&$7Fw?a$(nDEk{uKY2>$Nl
zSI_4i7-f7AP3<kb>oshRldjcFGdx(BRiwWV5e)gYQ1%^F>lfbK95UNcC}w4;IX#PJ
zY`4)zB2JF^!ycL{)DgnMc0A8Y*uKWd#)(8pmjohh9@7w#_(=XSiRek;0W5%&+p67c
zDyqjpqZHpxD(f1Xg=|p4U!ey@x~4?bTbDG%U>Wlfo(B7Tu9tFA2^t&Cb$@Z6f5c|R
zMdE0F>bT{2-%GhZCJJ`(!zz}YvtOw4$k(2R{Z{cjS1bBG66)r}>94G_3F(<FCcxuo
zXC1K<gG-l4o>5ps8Y&+XQHhF)(IzJ+)p^XUzUzDVx8wCEJ<R(y)WM6LSm>^ZYCoj8
zxA$0hj!B?8x%63#Sk;(x&{icop8>78r~8NckA5=7#`2lbhij+GW4pT}W1n(NT?z`m
zFzGEIv!>OPPdU=;4ZV8OMf+<&N6!+{QuVBn_C>{wNByb_YjceWj?Zzfa==u3elZjn
zBfU1jr8T~{FQZZ3YyQ3=N9hS)<&>;V1kw`{!ced2A#H(DgS^Ihc51AQ+zx8?ynWPg
z3!%=W9%r+lon`hepR<>@zc9##N!nkbn7;7?+6HvA%iylOF@Cc3R7vyrXFnmTQehbf
zCg@0h$dBDnb(t=gxZoQ{_UexYa*-)6l$B7orYtF5I~{bE1-Gx8&hi+sZ&uUQ;G9lY
z%i`^ib$ZX=RyVlA8`?w+<n-++9&>>xa9C_!Cli)d(^Y*%Fy6|d`d?+?uaBSKu2?h1
zovrrZW-!=RJQa70z0m8Fj!V_c%6rvuCItjW6|Lf!u&^TyC&h8-EHMfwbXqd#k6Ru(
zoD|^%>^AVEnL*o8EJ))ynQb)$ipSabyWU{CT)aqyt*=2-*Yp;>q3(OWUcZR045;=H
zM4hmby^Vmfb4=XW-3<zpEiCd1xEC@m74PqUbKIrrQeCh}Qit4!ah~pdyN|i&cEomG
z6OMi-gYfZF7bCK2Q}5>C_12{GcFIwcmoU1>X`q<`ufsD314a+)6qsVz1oAkQ5z1+z
zS&3@rD5N<=wm?+3N=DIU_Zbok3L(lZ6i61Q=u-89w)gW8=^QphLFD-D__3dmO9Xu@
z$B%YPUiU9A%yQd=>4mBS8>*rW7&M(v4dn>Fb!_`OXAIuqladE}7=4va8mneOg}(pv
zoUVzY`9mzzl4#76+SOXq1QNDy7LM0DV{I*od;FFZmnxW&LN4?5vgXWe<H6&a+=gyQ
zw=OzFw*%`EXF*eS<jiXH@DJ-+S938x$8)Np$L92$Ei`**<)K(-*2Yix4>+>L>zLiI
zTd?oIm2@He2>j)yH&2+r7QmEIC&!aU5!m5nWUr5!`SyKe`EH-Hkdp}(68HtnNRDpa
zB-*9<g|Vk!@8hfXPXuSm1moKn_L3sQts*uAx6noeb*i&-)_-M_;!zOza~(R~9gMA=
zD~Nl%+|5PBqVD)>KCVUs>Nr4B4q0tv{`t5pz|Vu$9n1I;TLxDLCJ)JjpaVgdg_Rb3
zPrJ`LD=l2GmtN!()IYKu8ndcvWf!E|-aIxjcJJhcJ#^{y(GU1Ux>`ZX?ddpzDKV(Z
z+Zf$$em3^O$mX!tNX2l}01zw2A9gpJ>Ga&E+Nut$6B<W^6m<5iv))mh{W;Qndb~_(
zOu9OwkQr%@qBN#OTSSY(tgqzftT{ZNHg}SX<QU>YBFr)ON9W(Lyc#xu@8ZoJVQA-^
zmBg{yjf*{(IGtxf9Kc=2wQd4iy8JYiYdFlBt0N<EF{5sGp>Eq7NX{av_BL~mF^gC$
zBd^@sHR<kbD7^<A(zmpda0|b4pc3Xid=xeFRX$>TVCP3SU6JkhLd=&{%%x86;f#SC
z(5ln<t1rSp6~$5>^+y>VMZMphwth5!$a_frBqe_C+e7JzopqjgNK&Y2N``G(o+&r;
zZ~>-t(6yQ-6zK9wI5vem^%~d=Xqi;hNh>THC<4XQe>s{zd380#7_zM_eaN0czy^1k
zr@TTaT4yII&fJz4kLCKxvTp<;wXj6X_3U9Gfc%q(C|`6IjUvY_2o_+|a8c~cJ#dfM
z`>iCNRiL%6$l3JZ5-{#-1LX1;wqWHh;3+;@A0%rd8lN-Seja1E?#@*P)At%Gog?q~
z;edgROg)Mmh{CpsCg~ai-mg+bwE)L+81hEcCD^Dhc=-ap-e26pTa*o&N-9hzcdtIJ
zlo5JNYB+m5UL=N@f0n293K3b2L)A-8b|LzYg>md7gg*mzf^Am)1*$<ueveQmJLLzD
zVAzjnb=95_4UY3!4%z9}UnhCyp<hd0P=6vuvH~mfx_3PVs@{wbWU5|nP_6|L*y>xg
z%EC|N7rNb#Y`y@`7929_4)p3YbK{&^5=0gZBqg*nv&$6)#o>o~jgj#wvA@OOtKEx>
zv5U>^gIo`pev69+xgv`et9?eHm))dHcNmx5{aLID??D}_=uE4v9~>=d<Kr|{Ej@VR
zHJ3L&*1&`n;-Q{&$7FUplao4|(2rYRsvUU>A;8)C4<xnz(>kARb!!;`&7KS0!^Jnv
ziA@>f^)^+NJn3c|+)O53>@xu&(c|49H7n~z{Nt3}f%8e<=8))h{Z-7muXK4tV<QcY
z$IwEV?bgUJZ~b=o)lXK>&uh!wn&uY$EiY%C%7UGW%15DPsd&2~Q)c#B$9#5|`o@uq
zSgeBX`te9u(uY784d&Y1n%UU*onmN{_rL|EHgd66t|?Q%8yxIPV$8rdx1ZcNvJG!I
zVTpyz6VD4X1z^PV98Ne`(}@j`8~okQdBndQ)e+gN<NWgN!J6lvKkB)?P<-FIe8&Sm
zl^%Sbk6BWOEYOwJk<|+J;b36<0?0o9bW#1>SUjaAQqg2C%tjzV8<f$}b0#yVyjegV
z?vAwbk~d-FT6yfmhu-qI%oxU%;iDUykUQBaS)CLv*$iIODC__6{f1&V?Xy^RCYX;;
z6CS2#UC*GOQZeILQ9T;I5@0d<+<~UFe!b;$)8G>Km~P^wPPEr$;rg=Muh!<pqo@6D
zC4AnKTAI<MsW`>PF$d3FcK7;AbJhd8&rW8Y&z2`T&kzbaIWs-IpXs*rRYXPO_8eCX
zgqgh3^5+WvY~s=zQxpQSg4dm$en~dxM-`Y%P4ASpPFd9sf{gl^8FFtrIGO5ym}z>4
zMHPPyk5`3$SA|xpLRF<qDN;3sH93o?zZY4*o-^t!GVClWwcac#PL3*;B2A>r(Clz<
z5L~OQVlk1dHPp!?WT)dTu_hAkF-_GhPz8b`(J%5ppPQx+XB+o&mWmM!S;ZOEukoq$
zUU-hM^p`e>&%HJl&oP;XRh`w0V4pKlwuzF~q_^DcyttYPA5YUE9t-BuENZ+!Pkni`
zyvwC|V>|E)yK6mrq~x8c(rdy<O==$_Jp<*Rz&Htly>p?d$sn+jCd%l{&=k4IYk}m9
zO=*q;)%I$K5p-(ji}b$yGmKnV1>pp#HGi?V1SyubiBM6r;VS$WwlE93U`b;Tc|)(0
zyyeo4x8~OLVVY+w`Bc*DpQj2W%=ZEHRtRN7=Gy@~`#eU+kpk`vejZJ`ih{$dx<LJm
z2I+l+(#`=YDp3Pd$?3&!b9#4c16QAZeK>D#3sQ4q3<_R-c#;woHVKA3ti2O;QU4zC
zXfs!I7i0X=FaJ))8mG|dW;a!SyS23{#J5|e&;4?1&9(R-!=Ox1W_&!{(oLTN(U?-?
z>{W++&7^&nbaviV=o}ZTJ-DeMPW(YhYQyFo;cSvz@#_e5GZjJ`r9>u)D73sl1-Vo;
zW~ejo<Cn#VzWGo5i~&|1&80^+mOv6>PL{iLcBa%?!^eZ+iGoo~7Fr3iIu`{98ndMc
zoS<Zymb<#@RKpS-LyQdcZgznEbdUzTTM`p=hFJ*knc?Crt@fa;Zfl3warQ*V`VDTH
zl1oUFQn?YvYDESoMTOl}l(x#}N!<9EdM4!YzPW8~K4^_j%j-WLp&pvDHV9)CZj8VN
zqS_(dxR2p$CO)sK+$A~d`e0EHKouU?eJ;N{fP2xxUWSPd4?KzX>=n|@Lv%m6XuL(}
zI6sw%XVAxt#@nOKXHm`}v)sMiff&7@U873UrUI9rCUuWW2bmpI1$CpfFvjh|JlTe0
zrl_<wew}7l0pff8eB|BcF!g+b=??nGFP>SQ3!|>_BOi(jxhF#TxK*XKcvA_?l`d_R
zexyvNX-sOshEl9%l3*PqvGKHw65x^oEJh2VArcXripM6@=-I{;-J8t*wiVBUkz@TW
zA4m0bGT*UUXtbB~$1Cbw^nEThly+_EL{Cn>sGr~6O(It3NS*45?dIm%f7#qmdQM#x
zGY&tzZ9Yq7v)AJIS<GhlghWH@u|m&Gz;dX1<BA!_C~gGqT)Y0G7!QwH<kp-1GbEmZ
zceMIC2E7#)0_I4I0lTl`+!+4t|0PwW+`mp&&-dNI4n!O?GSW%zYW9x%RRWAWxftHR
zt=(}?@L-d^*!nO4u{Fugv<<jg3}Loh=;Q2XvRjt>&gITpa*D@%ybRFl(CNzVq}NQ$
z;G{2>9~n+zk5}YRja^7L=cP-hogw{dD_7e$y&0fww!4)e;3;D*$o}EoVAjgaMZG}W
z3y;P-n<^($b*;oqN=b-x{>Wy5<(IM(&*3%v-L2BB%Ai`)cn{3}Xh5{7w()?qxPUKp
zH?IgY*Xd7o63=G`!~tYg78voTJj=pVN{bQhNBEwyZwJIZ^jHE1k`o1gFp50G8-Gud
z*f=c;XcE7?`;qmDIJz;l<NqP-tmC5k+IFv^poFMMmxv<W-Hp=S0|?Tc(g;JRNOyNh
z!!Up}(nEK{zzp3fXRFWid*i(CIseXQcCEekz3#QveSNPMYKF7!%uFNDax(|D?42P$
zJ_{c9qVWdqgwv~C@sZT=ACEsLr1vEkA9ia)9RyNYW|F@3#L`zcV%9m+*15TLi2wo0
ztGR6KyR1pTZ4L=DL*gshC!6cdQpPE<X>wT}IAS9#v%_9ihSyMES2p2K;3_kH;?QQG
zX>qz453Z*(zlyAg7>->&J|OD?r_`^lk-c18^M^6zgGq;XB1E<^hJNkr<sYz7Tbb&6
zMl%}DWp*>pekAqcGGriwQdbmad!a=IalOOzJ1~(uGizp^`8M{|54AHXT+Zgcg<g&e
zHn=}=@~Y0BrlV@0kMoDgP^MK5x{2MZzJiRUs%rYQ4~=r@Oxm40J8$zmMM;BCk5LW2
zZT6xXdvPXy^RY7GlLAL@bY_0~Dz15=aqj6B;eIgb^nER<P9#DfXDAbT9ygD=(L%6*
zMAeR*W*ikLbdDEch|~a!qB`?;rj83gZjw<Dz`#xBnCTuLeK8O}-~A~md@P*TZ)dB)
z=92-iMjMbA7pG=l_p-P6!OY7&-`Zji!?R|VMA~1g9;Z9;&P?ccLZ5&6vC_OVyoKIR
zbRXa>TxL@w10Qu((CytC5>F{7TK0HiODk~2Z=nW+)Ncd?pq^;pS15H?OTrTUw)95H
zOnxEeV}D4j4rW5Nl$cY{%S)J8z3wCMD1MP!sX-F7Buy-t_4U7t#jTB<qLt?COO|$l
z@qzuAt&wOID|y#N;B_`Ey>uP=X)eE4`hhscSYF<!O725agt1_nhzsrF<NhBI`7wvY
zIJOdHNn=yhNUJ_h8qCi<`}g8zXgfBR^7I;}WwlHl#vfM8cV4+wAHKCbnNQzA*MOp8
z_QmaL_UmeW<EfiCT@7}0X3$E$(njYTmDYx+68`Y{U;qXdzpW2X+C`CfjN*<#x3Dfp
z9#>vsY^e8Q)<UKDwa7w6D+`_7b2lv7gBb{Q5QLRBf8qru3nQHO?DLs>x-oVuk5rsd
zPsnn~W?FEq>%oID;<N$og20%PfuB98x>_-DEapZCJHnVW8fR)=te+pMSsII`u!!P}
zUG;JdXC*f{i#Ux7srdq1J7NtKx2igARa@iSSSk5zun=9tlf@S)Ky5W{3>nxE5tzI=
zvI5D%>-BE$<gBwdd4C^81<6ZnmrJEwht=m)M)lyMyz37F73P4HnDOrBa5UnP2n_H8
zqJ{@;P9ljOv`Vt**bis%AEkf7)_easitg#g!#=wtI(ZyJ7P8a^&r9@;bzIoxeD?Rv
zm!o;6NjQ+>8Wv~T>c>PeW4}L1cW^mmdPD3SGCj#jKUXRm5gHQS$0}#6I;c??-A}?^
zgjfGT%`osx+jwNg-a^sxX{!3+`NWiovbkkFi+s)?zMxJ;-@zbDwa4jKFX(fXs+Baw
zq5_BCg)zw9pq{_?OALN+P$k445)owH%1O%tx&F1CFq=DaN9w6~xW`-q4Ip!M4xGJP
zci!9+c%{D9CaLkco`^cydo>)gw9fhtnI18gIue(^&-QV;&RUk>Eu4ia>gNyFauAZQ
zVzwr{pR?pZ(s(GpJ^3ZE!{#<g-%p0`k-?Is8C=Am1+MKZrD|1@mPXfl7WJH;Gkk30
zEo~fV)mw2q$Z?(Ww3r{=bg;y`Zk@4-IdW#C9AA%mX%84{t2<8Qegk<xk?=vb5cC(R
zdC7KXC+}e_Pkv8NSl3S2v5xIvPBTwjcbHjbqfmWl3!6*J?Ed+pmavA`RW7jmW5v!<
zJMx6HP$sVS3RwG0JsCL^p7f{h8cHtR<DZDbH<X>#oDUq6o2ocZpAuf|F8Y`f_p>ne
z1532rWr`}>og`;bvgAaW8zWzav@~sLPS$g5_+a-?OxqKq!}5F?4I830mrNdkjZX%x
zV_f9wApMyDV|IH`v3Jqdy#WHpieP-mY6N7zY+7CmpQ-2=m+A1HFxMU?y6`hKyAAN=
zzPG=*NJDm1LJi4Sg2CDGJHgb7MN_rjvZd5fqEl&$Yf(3&75Uj@C0Tg!>^Pq#YUoU9
zJx6t-B*Q%J^wiW+;s^XbWGSVkWN8nI-I^qRT!My@q)A;dbQfmRn>r$gXCXh?Ohso|
z)pQgNM1QCG9hQ+Ay{|So4xfN;9i5Q0ipD3#LP^q7u;9I1Y#5qbT5!<uW@k3Y-NfsF
zqJ=EqT0lPN$dbBZh-CP7BjlT;cEdTnz%A_P$FD`LDwVi4#{JWB#?$0*E_~~(o(pX+
zGg${+_P~$%%v8|PwYWy)L~70%#)mZqvdsToIbiq2`OpC}J4si=%Mg>E0@ZC!d9-gA
zQaetv;p@8^k&<Xmx^GECUy-%9m*Tsm{1bQRV7tv+e-G7%#h4>*g1s@aDBAu7_O7l-
zMjy8fei&UW%cFs!uAbC(LY(kUBYNfxVy>$pq(N|eN8wI+t1zcAAiGsXjj1BvdQ?)3
zjH5}2Rre>0;pVZuU$xf_F4!)qK)|E-@Zi=$c+}u}s7B+8<LlN~LG5OpW@WT`ypi7U
zyi#=ApAtz2RA{%eR}2=}vy+h}ZAKW~ANk+>BVyj)fM}vsoOdIkW7Qbulat_+_5!-A
zQ||(^XJTtGHD>c&ve}Fzv4jRu5w}Bm^0ECH?{)fSRwEPv1A!QpksEYmWNJ&ga%5^q
zilY_VC`3~aq$TEYPL>aazV^xpnW1xZAc&cIFPlH6pIlX%sWdYaJF#KPOyhi4S_ba-
zjtG@ugtdWtXx{N<BoigKli>h*w(dR%^8!!G*jCcv6{#F-IcIHi>>b_bu}eQzBf`{-
z6k?simX;94gTqBn?yzo#Md>JqKtsslKIcdIB~K43pwL91Y~CYv2tUqIec?SYrL5uh
z1`lfT^Z*5_vj0u2@z|D)gYld>88X#aJ2vSSN5oyyKIdRxfxhq4ep}qr!$k0vYvby$
ze?GKL$LVmW@F(#ZY}3e;rYScRkvvye+Z<DFf4Q@?n6ftFkQYPL(50)ZSH^zO^!iZQ
znR22&aVkJhSSWBvN8bs1eJUwI$6sAa>RlR7nv8jnyd9_75U!`xkB8-;rZ%eayup>g
z4o`@CA;x+sUXu0K`ipu@`mF7FDUAe^kzS{n8sDr^*+|k@QZ||8iT&#{^1RY9c;l+o
z`e{>m&+Gathk?}kUkI0D7c8qjio+Y8@~|N!m+rL_tN==lQD?pBT5M&OrE+Op<NBGm
zxyi68d3#gG$W*eH_?Z^5UiIO?yRZovr9+}ju^9=ctcw?S<(w9+?rD(MByiWTpav+~
zM!<)2s)7_(0xShtqZ9JI(@%J6Ba35~HLg=ir#86I3Ua20;H+g*I@ev)#f^uC_qyx3
zLETIH_Lfg<#~=D!{Csh$%mSS_YTn?BeX94WZcUYOmoHAtZG%JA*VKlwUWHGCTEJ5j
z`rdzy_$h3B!KYkw@XKv`=$NXP)_F<Fy#+j3oKA)%zxEfr_DA%j0?8kwq8dZaX;-jn
zSCVjzlh4dyv`a7}t>RLtNRxvlOkPJ$4dbB1Hq!kxR#JFM{ocsjoWn$Aa!ZBqDm^+x
zb03w9(PE~sIE7Kg9E6j`RFa?5_!c3e30*QDz4Agh6S=l+4;PfVOfbD#R6+BOLMBRG
zvLO<BT+`q}Iv<!6^u>OcWkxkdCbuFJ-R~pX93`CUa=%G4XS~_Rsfd%x!B0~DUH!>H
z&Gh}LEJn_RG}A;Oo+1zNhv&o^WTrZB=@RNNEc$9iww&*&qfD_d7MrY3FJtK(QHC8P
z{ZBu-K9+tc%|><liOr(Wc2!;65LKFfOOXBaYq3*ny65=SB&N>!rkqW#-P^@ZlZhX=
z?qXt&k73T>nGqy{D7-(dw8A!DIx>xSu^X6t_)b_WyI;)pF>FAR-6yn9I}U2$<CRy~
z6?uxti3_*Ax9QG@^(F9pqS%oiSgP#dG8QS+cgmz2u@fU%rTlTuGtL7*&7H*QOtF3y
zqxyH)#E4e8PiQgGxB)Y}3)8W8xqaZi*AGru)V`OIBIi}MN7(5)cW2;UKHEfb`=cm4
zF0G~H=-!^JdI)pgUC`i@9?MRM<7E9xbYai^U^S4H@hq!4AOwN^3tQRgw|7U@s-RXU
z1d2EJ!XXRsB)Q7wLn?mwF|H6_tNG_#KxO@^(qHj|eT8!jHXa)7?6*J{<lMpg@wIy=
zYUde(JeiSmV$Yi-aIU$7Z9M-auG`Doi$e<dmKQ4_<<Ir%i@rP^N)!Lt)c<q;scbg+
z(gK_oWwYhP-y{FYyBD{Aj_VE)*-$(Reu+Ny!G5aGqbzlFQ;t*Jz0yGxNA5gA4z9Lw
zmC>`48yJWeWWzN<mMFH?9i9&(izH%8-?Uzmiy<QwA0Ft>dYX}a5uY&pxi1#R?rk1F
z`dDXChg8*@J%Dp(C<~8{d2jM?w|p>bT#lH!?Dcq{^+HA&Hz{`@m;1m*NP_EkmJtZU
zoRqS|Su>NZ%o%DjyFG4R!n?`CTA0Sd1q-z$?``y)m^Gq2uAU)`DyZnh)0uC28ZRQp
zl#D=D0U9qmcf`lPv73J+2B@iHv0}$eyo^`&Nc4T?=@u|*cYP=CZgTR-KtUqSXZ%=7
zhldZbh>Z!yC+`D7AwUM*A#(Dg$$Y#$tRud@DPCC;E59vAx$umUShZ*Sle?eK=cDZr
z{E-<5!MD4n*7@wnwJiW}q|CKSL6%Bj1|o>{#*$*qTdF>C5cqPgD!`mvhrc~_F6B2_
zR?uCIG(YMWGdt)Q9&5<!DLPB86}`7Go?0791-&IJ8?dNr!HCl2vHc(QBRdr~Bbhs&
z8?7wu%6$_0Jb367w`-S9N{QvqO)!k*ef;|Q{Uzlx#MXQUHhf%3@(S-k<v@cHHKte0
zMBz)P2d>hNw~U)0o|eE3#zo?V0=#tPIE0X#?D15ywm4nT)9g0eTtzwj7Ndn^C+Bk1
z!$*8a5is^WFi#CbNjzl7+Qvm?<`66PW{=u^BLdqT);2ogI7`M}XkvN0y&sjOWE+{S
zWYjaZ3gQ_LzjdA%t>Z#H<}m@Udquc&C7s1OD_N=u8e65yt@RxJ5=s{HaL}%?(ZJZq
zEze%Z?ygKaswyI;=3@#wqtB3Ba|K;Dog769YeAA7&4$|#+4lzR*=<&d`U+dhTWp8@
zM6j}hGKhc9MdTcoq*W5~w`A-!5inm@$64QBxVOK?jgo?bY8*XAGv;pd)X9yfo3lMr
z@(}{<*!^jh&FwY^J3^o5mwuwGV}4|AP~*)ogVU7K?j^C=ILd`J*xbs(`GEIv4*~EV
zexqyuZ#COas|}u<J!;gTLiGt`@+u2rt?F*YA?F6?aNmt!Ia#cUhy{5?FdADG#HlRh
zu-G1)+qOuls23=Sc-b}8^&QuE{d!pIIgp#@#9Xh$v?gua{uvF1ZSqNJEsnET5UN`H
zesh;Tv!B7*$!1tN`3R5w-3V0R5%j68O1kvES4@3Ue7Rt~aYep9CYgAL#vx}}Ud`=p
z#euC`Fxe&1U3$=Bj;j1Fc;lQ5?VOeA+Q)McISs{!(3mnlq8%^O!u<u2gPU&;Uq0}1
zri`o8hD==PV!3a<W51bLIl&P`1Eb#hZ>DuNTIKjL7;RBRW>xUBrRrVXA8OMula;2a
z<#9$<n{|&thvte@7qsO(#v9%Jy;)Z|h<;)I8iw1Sx>>9pHyo-Fj2oSVX<Xj43Ir%u
z^_vX`Ey4Fu$FKvnukTjvw9^*wf+<0qrLD1%<mpmE2F+~>*acIPH-2Pdo<2Sg@+in?
z$IQE{sfCcOHyBrf@dA8NRTkw+Yn3z>pqt1kO=NRkupG#H|L|7F^38gE0Xfz$$uJb>
zMQAww0wSVg;?l{H+xkQ|N}hHB@nF_y0=Ho=!9fh|@N0`b*%a0dDdOwlG4<P=WW>&q
z!-A4K!RaW0+TFl(V%Om#xyb$r-N*{4Bu#*|Q*FzaI)ycN#M(rxT8KMMSlzHlbC>f>
z0WnRp|J1fwZg``R`kd7Od>W!GXTC<BC9<?Jy<)AZwR>?nD|VBD8r0qBTj{X)?Q49%
zQJwbV1U9D62l44Q*w{}2k@&R!0!cF73w{xKKFi5wC8%$pcQn%#xdZYjBAWeVf+u#y
z6%4=&a_c;9By66v2JZwq>*;-f>$o-LlW5;Oa3ar#ONQr?dj{OyRZyDU2Dm^Ll8e|1
zwUSihYrjc)n?J+4G{BB?c2Sxcsw{5zSni=TTaO}N-X&j-m&W3N)90INB0Fw5Ai5e3
zW}NkX<U|>g5x{PpqzV?ADVy<-yQHxq8WOyr0j2Ai`aa*)RB=5VGpcHQ)p-+h#V52d
zB&vP+nzhhc)eB{*k}>5+=l)@1a*CLSJ2xKVt`b8pJpSb<t{_^N54zag4|t?=NtOA6
z%+M}_HXNN$bu7Y!_kuBFDuXHSMxL>vd03-fNy{UmFEe#+si7fVZ#A&jF>Dxy>$!Ow
z)%7a@e-w)^vJ|MUPZ%Chv1i?WUp?Eh-TTJo33itGJIf+oXA*%QGcz?Y(C{d+pXu1<
zy_r4c+Uk6u6-<OZ{n{N`A8F?G#oj;>M&d6-xb!*X+&p#0O8W4VqI~4Eq+Fo2%{e=)
zEouhyf?wdAcIqu<AZ(h!*!P%kYX!~?Fq(%2Fw-d5Z7c;rO>Pm$&_mjO!jo}kqRaMY
zwNX6<`HtcC0*1zl#8ty%dkSQ5$w9{&?yzAG6{^9_M2UF8*z;rVy1Q*dUVRO@l*Q%l
zQ3ZUZHr&{fu;R~=*=_nHl5`kN4dJ`7Jm)+_H{)++W9kx#d-Ss^J&Lyix6io=DgPAR
z2W<2ct3Bg^IT*6)_hOH^Vp@C;{S22+;G}-)H%>dxyp?~nu*PlR+Kf`G>T$2_m|0FR
zw+TFZ#8n(>-P^e~KAOERg5~W(AkeXS@}m$-)xZ4iY576=+I|pIj&eEF&e5x*|He%f
z9mMU&%Dwkow;GbuP#e`JyP}S^F))T2H(A(PW&b&{LTImUFZ<+3SRz@+QNjye(%<8R
z8(HLx{eD{;<mv07IC<Ogj{DlWNIuWLxT&MV6s{O~tR8txrurEpPYYFT<R@Q)v6r{a
z6Wm(=MX-fny6n;+f-Ok)Nq01eGq!$^weY9Zslepk&0ECr1xi<Jb+8eoxFvJMoQ_Oc
za|7B2e~Xazx2#B{eoJ-FmE@XtINLkF^UQV}Fm-B!V{NLs<2;u8N0yE09HV>t%@%@7
zjt$-fCox*F`e_O>Blo=B;>!8BBdbi-Zl2~~;q#peP;*x6-;i{lW4<LX+aM}Vu{cLa
zN;?EbVuR`r;U~J<XBd&UTy?016&qWh$~)3Cd1gq*qnknlz08A)hiAh$&A_XH)j2hi
zoqcXHkHOM{_>u`IMo%6*M&8<yFz_hK?{YPxcEyRP(MD{dBa<WwwqDYL(R!3<GpyAX
z^B-sn`PKWlp~OwuFJo1nv~Yhz>6>lg^bGinpr-vw5$oAbG!IkCWo36F=CDU<iD33!
z1!6zCySwwUOehuyB!Y`qoPIXsn9_veAfgDk`YwtQr=p2Bg|W#eWp5F|IE|WzM6Bq|
zEYyj~ZJBnqk3sfg_#}UbBA+Uu@s@8D9t9pHW1&;2in!6G!(CVV5W-J!@n$v{@@DJy
z^sv6!ku6nimYkG`aTTpy@0~5vt?t)zAGc3swuis!761l_eJvCxviy%KoQil4epo7=
zo!(BsYHoL2h|XUji1hM}r>(wef#uf4(~K3}Tg9jfO4@ixf>(%X_=ZPApObh{PO3C=
zFpF|kWn{fIWl}~oVLL7)$QI2=#8wMwIa6YTzR7Qp@OcNv9pf#ba)?E}KbqL>ezuIo
zu6Md}9N<~ZIi5+YY_`5Ea&i;O4<f`gIi{(_EEbgcjFxp|KJLr41v7P0Y+(+nBGSrH
z(s0#xb0#!i-$0|IEI;7IXn54&%kB`v!QOnx9dS4L%H2vEf>=~~2CizM_+8bZ=Ju;e
zqaL<l*%sETQD1@ToQ7pQU_f+|7hQ9qNMWqsTQCZ>qHS+<%C1M9FuC>Vb(Q8BgbTI?
z_c7*=HP||a-#8IzJl#;$QInTwlyG-a%fLj}8YTH9Wa@*XLS3C3cr<LR?4nmRTStkH
z#LE5{HcC(VDMk%_a}7gw8k8ByqN!Lw?%A@mI)G6v5|R6I_;ky^%p->?NEsfXzTg6u
z(!$b;5-IXk)+d)jbHFZy81||Tt(Rq^RppE^#ES?B3%L@VbCc)W&%v(8<Rl^`LqV-C
zLG%U5o7&P|cN9b?7wmn?Sslo7!tP3eWMu~hRN`?)M8lDI69zD3t&V5T`{Kw0*j62^
z%i3|+f*eCZ!pO0wq2w-Y0lhP}bjHq6=xgbeEQMbrHUTc5kQl#`Xo_N0^yIgZP8jCX
z$*&Q0bn!D<s_B*fft5u9H#W5Ok{0H~v``<f5IoZLcvowNIJo1htag<JFX#>rXLYf5
zpO#QE>T!z+i6v&d2Bx%E%eVu>2qeROIs0lTu);<kD^%#SM(*fEK`IMJu%yi?|I(xm
z7_pVF9Y-^#jXiR4yAj*!NGkvzA!pxm(~eu3!VIN*;e^6KS|sH@D<0r4^@5vn>3|5;
zOmnIAyZC2P7HH2@Nb99R1@DjoJ$I4dl7hX7Xt0Re^)Y6HV>MWst-7$ZC2Ux%F|N#x
zUln;AhAB`|lZp(*Vh@!wKPa&*L`dUS^w=N&Fw=JSOV}uYk(?aat!;8o;h!-dN0<(c
zrAOKMAl$UuyC+u6azDjQDl<&!@LX;^hlsu9vsZXwqAt#WYaSb(NQyJCY3&sE9zTQW
zs)Crka8U@YE3Vrm(U)?I%owF`_c7)-yQ9k)UHg?%d*iRwhHvW4{QAkf#~@Sd#hToS
zbvYYsiGX}*T&X3fTVQXph7KBUb%KJ{>SJ<c&oN7{sK-KmN>~9C&bw?CoG%dMTPf*>
zX9uvw9u+@zhQ{s1NftBG<v8%sts3d-v>`LY22oSwwVu~|*B2<e0BC|wrTf;xQ<ZWa
z);zc`)yA;sj(3-bhipVVhkg!ak(3K7+Gj$ibcze9uetNmmQll+%RzW0R>e@c2~~An
zN#9k_+9bP%%~p4H)`>!%5~59(w#*S~<L@JN*+tUVw^_Pi&(!JRnKtcEPW4q{<?dW1
zHEE;*p2=tm3xDS~#lda$XbP*LXKPTGj7-Xsl{Su%NGfJV+^-*eo~%18!eKm0a&p5T
zC#w~aFDcDxthc$Q7*~d-I=v*soy?g@vF=Nt`tU?Q0jpSu?L+2k>J5zZE&IOJNmQ;8
zHxQC+96uxHZBP|8QXCIg?NO72mD4z$(q<OB^f05da~BUCUfFQm1KXtl^rAX{X^g7v
zi>$R+$LC2YdRSXFD}5VI@mFNS?_B%m7J4DNl|_>+D3vd$VUq%Sqa=mQT<Jx1laE)u
zd7efye}xcG6cIfn-w6vl;sqwSf5}GbTEdS^$7mQR-%Vds5>;XQ^v=k4+w-P_<Og@j
zK<u=ofnn83umxoq<F~crW*i1ewz2x_fuV29h-e7Soo?8t_;j%!_026v)|%xmd%(Y7
zp&i_S%x&(g)jM?K-~as`cV^zexE4l4UaWkb?xCo2B2V{LRf}Irb{o(}1d{0g)&bqV
zYf}1ht?b~5_I_$C0AoI(r|nA%VlfESIf$06Zfr8Gr;wi=!-Yb<FJ%j2$p*$r4)kE~
z|9$MFm#IfO?_MjX6;2vmdGs3JGYG&MtK|w%u1-Ty-|JX25Z3?yal^DBKDR9`AMe8A
z3I>rZ02AS9&7Sq9e)wEY<eiFR)Xzg)P!~W6`G)}(sB>-sSL?@k1Pk<9MO%d?5tKO#
z%@^y-{X)+B4KtK+lpC=vdh0+-o0bh)c+r-xaJsskq2XOilg^Y!&A4qpG7Fk|oOg1Z
zBV)c=Bn3BqV<rtSPYT=de}>rJexem9tzvin#YpfOe6Z7Oi?dF@K!~7HO)Z>!r@=t?
z-46n4ro=+XQj(i&T963N8F7LKVOY=oGMl!A`;oQBp5k<5dk6t)5vS*6$9N12(a37G
zyo;s9MY-r$qbz7hsYl(B!>h1l$kHulGX9|p$wQa~``Su5(fH594=2;J?ns=q@rTmV
z(&!tmw+FA(DzbWHm#(wZC;5}aapbkgQMf<gkZ5Q1gN1oeu4UcBC%L5rf?{VH=bN#o
zY_TvL-Mspjc^TV`VVJSLlLGn+c!kgK3leme0(+VnnZ9m8T6N=!hI;nx)pb5^1lGQJ
zS*g7E9<q3q@4agjX-WIugLL1amG|{MX9oFYx+N41fsdMGUz&#AyE|Y_Jr?ngpUK*o
z4JwFyjG^L{(~4o{hR|Aq1V0~iZLmZ&zI(qUt&?VTeQyf~pa1JswND;7|428^GOOV6
z6Sey*k6)0!YRgp2h>$Ege@>lY{Q8%O4P%85A%9OBM0n`HCx?(4rR;hdic`#b1OI@w
zmJJooMovz0jrq7c7Vt6&>ATHpzX;W&smQRYKoG07=}g5P-+j3v$r`OMx1VzP0-rtC
z8y0azU^WTbjWg-RVEs@DazoOv4V*^ss{49DkO_9qN?E6b!6y9kkHA&hkAIt)l*g<D
zoPP>v_j)Dp9c;|M-{bgTM|%ElJ;3+fvvyS3$FFb5T94dU=)vcrhMBTs!;)NzsLG#B
zZ4PR&`Gyfwg5vGX^c4};BA;QERX-X((6K9s<I8MdP3&5G<xFAtEL<{8;c_s+ky9Q5
z#l|a$qQ`c`e&u4GNL1o<ciM+ug|@G!s-s}fdt}^l2(dqRWy%+WpJ%mmszUWH$hjAz
zczLpXH>@9>JSoQ!`g$Ly1xjIO5x`Q2U&kTI0o=%WSO$qI?lLyMai@fv^*j?qUttnk
z?yf&p3|NjbEQ8vdl(&TFz7uCIRC#w=M=@pO@6PyOenXVd6Y&h~^{;fjDX!=7@6ttP
z4*2Ywxr-1#PP$1%vA^@WSy}ZhyC!jUoq}h(ahXN1m}>^E>I*lTEhHq+2^0uR*PcyR
zoL(yAr-fK#V#e-4bMk!g+`T~_0|`?h*An>HGIMY<paje^;uUZgCKnSl(G@&urs8JI
zbO0aViIqVcBpaU>-JN*9cDK}4v~NeV;Ip&##S&Q|xmWm5c^IQkhOb$-m=!@RZ?8AQ
zBjl&^>h`I&%?tTQYU}YKi$j&^xS01z_f7HXb3!#Y5ALJ*$KF@mz(yS-dYbIYTv(n`
zzYUahD&j5y3v(>`dQ1Qt={fS`*!(wB23h+~m_DBCrQm5q7JmC9<Q4j7Imol_%+#eu
z;>HyNYq;*Pj)I#I---@C&x-!iy_G)8(l7#8c+fO6HOa;Ici)*dANsRUC$uPN(fjie
z>J`QimRnJ@S&CkK*#;4w*oFi#w%F6SYo{?mThe%K=EE<K-0g+7>p;jXAx{B`v<m$y
zEuQCL8(0z-mbxH~mMJTy!6%O!yRoh#rteM7olJJNPw2EbE8UC6>QmKgg-|CSe*MS$
zWH#_$-X}Hu!3StuH@*{SW5e%7KXTuvKrQTlvG-;>=J`)ecEvNh4He$!;2{#`W+w2W
z9`-kahU3jm_!NWrj%pk!H)UDpm7q(%<t6}<gWG-QJ9GUIW^_AEUqQTrAkL81OOjic
zEW!wsG<%<xNqb{ARmG^VPqgfP8b7@6kcE%BaVfWg$X>n-*5iNkKS1lw7?FDpE?5_6
zvRn6&{UMI+P7nB(2>od9wZ1yFfoo4)U!MqG<1%|2D<aVnXdF#(td?VV6ybyYz9Y9V
z(OZk4yW^F`Wr#s|{8Z<)(s{-^#C-;APj~7DMgs6g^Ngd4{!4V=KF?2age#hQ`I#r)
zrtbrq<?Absi5H8g<^9x9tw`In6>&4KHO7pBMXa1KLW&3Qc3yH=aL|9Tn975H>0rlS
zG`9Qk>gGZBGXnJ=5BF-PYZM5crXF?%!m3-Qc!yBR`;99q<kbzDU!k}o{0Un$?DoLh
z=+g9Tj}*<^uGIsV1DF-z46zvs=ZYVVGT*jrSk?Y+N?X@O9|(bkO$HyP$kbAgi5qA_
zuHmYC#Ou*k-;!6eukUWh1Q$a4gy7{eR1!4DgS@Zc_1r*l7{sX1c#Fuk+o(O;F0ZFo
zsj4NJ3n&Sj#LsT29F{s+U13}VzYr&e@!Do+oLj0y6{6ep?yOC65mjn0+5z}NpUR_f
zULT*UO?k*<S(C}?HuvM~Ftctjf$9T_WZzN!1%TZ7fZ?DtRQ)t9LX*CNd{1NH>Wuj0
zdNQ{qhqG&GO9mLZ23?<lrC*7&DPEOaFD=3LiQL@=wN7V3{`}u`!5obdm59ic5foXn
z_9~b$+j$YNJ%|$yHpx7Z`fO;CRXpNtdVyEWB`Zi|xe?)i4LaW!63iTee>TbMnXrE*
zjt|`Z2=2eGP^{x|S<FhMYL>BMFV8?IP9LY?M2Xz{S%UpZNhS)fXYk(#G$T<1RzgPh
zu?{9Bx6V<si5G;oOZH?+P9vP14g<t~ALmhUy`y|99Vz7DfxiI7y$r~$v?IA!M9#ii
zw%AyL`W8YIQl8?{@_J-c&kgbI&*-NI+ikXy=vO;+_fDOwoI5JD?f8okJ5l?)-2!Yl
z*iw-z<4$W7kX5#DP^$OQLA=IpU87p+AL|ub*SB!|`~O`3RjlZmD7~wg7x~9bYw+P@
z7r4P?BLK}w4*8I}M}zID^W9ams&nMw>W4L6ygwW$li!I_RS1CGI%y86D$g&SlfJt~
z0oe-(FfBC9_lpZWHF#aowECVoOnc~#tIUWkItpA`LRjYfKV&g1Oy>Yr5=ZHCciVC`
z>!Vt0AOVV9D<O=6C=5(h?A`(8+C)=Iz%Kwv!)rY5FO6?;%f)3OmkC-4Qq!y`8~nEB
zLB53tz}1M}knb{nkB3n7{5G1qD*o$nu@$kGqT`?{5rF?<a)PV>uvx)rY0h3G?OdM_
z5-pv=TgKt{mt6F3nwt11L+SqGnp`*;P4rrSLx$7tc4@j+YL+11e?4(<Zdm9O+;JgK
z2WG}Tr2m$MC)t9tmYOeWU->-mX&TlaO50x;(wnNifKc99C*~MVaserwsI>D9yv-{V
zt(pxpm)@!<F0vdZXoL76*jdU<=gMu?kw1lq=~{>!<;~Hd+@}Q$+|$^0`?c^Ov>u=a
zl6kAlx%^_<fj&ijmj_nDJr|!YhQ@YWRK!qIGJ*j>CPK=A2M3Ff?E-A1&HeWUwh>8U
zK0;0o<2;7llDzg=^Rph*FLp0@qs<_d_<RnFU&N;XjGV~p?eu0%iKv$9A8JoL&(i`<
zPNe8iV-+IwC9$EL9km$>Q{>;JS0rDP>NCCgz{P1KHAD>LX#mLS{mTV5e7bFN{VP?_
zfj&`^tfPyu^2arf;wDL@wO{kJL@XXUnb~f(+l(dbB5(Q*IVhBzjJRCZq4$Aa{_i1U
zOxgcG+hsvLAX825TTN@5B^ab-<Bn?9-O?1=sZD%ziZFT^feq@CM(9VH!%R1PXCq$V
zROVC-HvbFLMMC4)20>-ZUC4M)0p(4r0x+F)erAq+n?}W$W+7AK9M|z&Bu1wffkv;l
zx}A33{5bp#{PWlQ->kNd_qGKuu4J8khZO{@OYiOBwcgg*gyg*4(OCQraDbs<5EfFP
zRoQWLf7`OXT67+cQ!T+DrnlZj*E>m2HroR5%8yCXMK2@!Ud1xh7&g>0I=0iCAKl1N
zns4RD|G3*dMfHkb)3!az&nYJ9$S+edMp?bRxT08e?&uyWTK^8`j^$x*)B8LEFhqYg
z^Aqs>Vljy%<*^0QPym|+T<}o#1>?>;A>B>LvNh$Q`a>#&bIi8l^4(tO=7?#0q_O+Z
z-CXx0n|^vF<IC=?nPMwpD7n5+XOm6CblW9oQbdRasN{Zb{h0l_Zlr6-OQX%{=wsA3
zkl%RIRnX_bwlPHeFF?iO8@4d<;AvuTbzVPaO?X*+S(<SG0d^gm8h!e1BAP>qs#XiT
zLozM#v;Cea?89=)P*Sf*uzfZ$_ljZ9)#5L!F3@+SPd)Ov1Q`FR7ebLlSfS<`>@LQ>
z@ueV&h6FcS!hKU!s*l>ei^GPBE6>9qD~3`TQwD)JoGwsFqpMQGccS4eU776w_ZeXL
zKHG-?MXhorhTo^@z@jD7SFHrG#E0c`I^a?EPWd-r^iFwy0;5oo0I7esmWQcg8}T@z
zx`eK~^+?z_Zwd!|^m@@5_*t+Lr!CX3k`i?TK<NH)k^xRc2LMy7c8y!k(Z179f16AO
zNNAE!<XK;)r%{g)JB2+il{z$8mZk9EudPvM(_TI$d_3T`;|bjZe7>!r%v9VEHLZv7
zGf3^Euf?BI<5ZZ%s_5_v@~gkiIM?aMJsO^z4nAK)2DwfF%f5S<eL^ndkod!f)m|LF
zk46L9Hvf9n|1T`uU{kKgs%R4A``u-N3JSi*chQ67ujRU^_WhG{eiL!unvRrkLvo0z
z4${ijv^XtI18Mse-j!qO=m|;ln=LXd*j27^7QU~<VP{C#CNS(FFv63oq=d_{{U&Sw
zN8mRpEz{AMdaqByDFK>Cj$!EH-!4#TuTu9ESe^wk*uDYya-WSrA*9Ewza13J%2NDQ
z`^5+1`~io>e%(*+{1p`xqTCvTvP<0RorH8-bU^b_&8_|x6^ktD_h6e<;HxZ!14A{i
zty_oks>m@T0{A!qe9T|JDzNxSnFW-@71VBdTt`gjYvuq*?Svn(xh;5?s1k+Pd3I1d
zcQWGp8)W{3L)e1%Yc9L2yR8_tnrq$0N>PIM@ik5`Q=L(i>sz1z3Q^B(Umpbq2#?R@
zxm^BJbbGT<*5e0y`)V=x>gtA+-R5%f{>HR%(aCWU@fJDBHIbkf3aHV2f%e0*5GT*(
z_iq-a!~f%BggIf*5pP8_>VV?p*h78_XzcXYoRNi!^R>voNw(SPicIBt^{3x{Erc}G
zf4?;2^r|xClG99*Ca+i|UPhxk8~J)@xwWsSPjX??Ufg`LQUyX(ID&A5J`PRWeTm$N
z)%3uK5*KI@&PL2uvbhbm=yjn?y4fC{edR`J<+RCL-3s6vhbyS>=kVw}b=-;7_Q1gY
zXN<Vks&A+qyVCcJoq7TofH^OOVUbSWu^To+^#D5QAELaS(Dv#vQ1^6tG+D-nh)BBd
zdDD9cfLF0%7+cu7h*nFh*NU%*p8(v!zvgx!*<r&AT(+>&avMa$VxA3eea&ZOdpC}W
z+8QMg61UjODsL1*MO$Qz`O#bsCr+K?0HRTtRhE|QHrG!&6+1LR406hWQ!P00OEAKB
ze@z4&o)l^#v*aUdIrS=bl(9JM!Z~zpusgMrC?-QKiMB;Q#33Y0ZLKwsT>9I&>U5L5
z&n*`O#ygBL2j0JeGi3dtUhm?u(UOiip#9_gI=F>cTzB@cS<Ej_*8zBIp@IFRu^?@^
zCe|af?Zp^&<27%0#})Of8B@Bg?I^sFbD>0qC07qBuZ`2;Eq(p87owg*>&=ZP7eU9{
zXc_d``a@a@`;1E>KXsmtUUd{~157wvH7*BZr!<>`Uqr;oMNI`kKIEAFs`4qo$grky
zj%ORBiQLo#({R)}E8Dm+<e7jn0hJWYH09|?p<BvU*ZRZ>I0_$TL}Ix_(qDNN$TQh8
zP<htd<mgm-c*QiVEwfL*B(K6np2=aJ<OI-D`YK8_uyP?+l9BZ`6Wm8p8~{)2ups3j
z{P+c5$Gr4~rS{&N$&PW{KeC4pfa6I1o-t=m=?$y42Qzrl6z4bV<ixuC85xN{L<^?{
zt=DNp(aAlHr_5<gt!Fe|Kl8Jy>{!2(9rsuG6xRg}X=oi==H$b~Y^lc1r#l1X^u;pD
z74k^m4XF^;2hTM=vZAFUhyqZ=V2HH_@0PC8BWwOt2^{s^Y`73eeu<Ea4pDjL99c`T
zKaii{h+=tk)g1fHJCad-5{And1t5=hFGBY?q(%EF|8aGgclV_<{FmFM<FXShZFG84
z<a!uyw9~n$?`zB5FWoCnjhD<=y3-9Ka=0Qs!J(T<lRjR*sI+VN(&{Ro19Ui{@0fAD
z9Y*<Ml)Ao|xHq%Vh?+O24*{}7_L(IY|8E>dI5y}LZLjWA_{*_3k+t~w<;&q_>8yD{
z7pX!&0@+6@IsL1Pq8&L$plMPx0Y=tmXOtF%XDBG17Yuxpo3P*+r1`HQqgW-)tg1_c
z8GtOmrtl{Rh<CQ%hg*HX)&Cx}okwW71t7<^by8`vy0)7~gs{n%Cy{Gw_#;~ZIt|~r
zB>~!qvYtd4B<jnxW<$YuUWTy-hTzGQ^TiagVR>z7TZS1);;8g287M=f2tBzz&YlLy
zX#v!rDudA=!s@xHebweKK}#pK*5fpEEkiI0fa?l~gqX9N3yx_Dpn;4WHN_rEX2H7y
zy&N_e-VsJvfoC}(GG^m`gS3qOh~&$28UA~J>|DW`<6UyAvNjY$)5($@CZ+lN4jV!v
z`JZqIr$@Fe&3N~bnl?`+*y~}n<u=Zg^Qfr$%idsf4<;DLF|dZt+yrpfVizYOOI~2J
z6wggK#tbE>kIj=xnO&6D_VJG_nDEwTB=kb{6CvLO7o5I~R)wijqDC;!uT{Z1%J#$C
z9oEkD+Dp^d194d|@~-8TpK}%4WzfF>EFS*Sbu073!tl!4H8yPw)->f*IQLYzB2Dv1
z@_%!=mMB$362cHREV>O|6tofK)xahZ&iL$*q@SOTG2{pS&E$#ItkVv?+?>NmgBQ0b
zKH(BtiOcBX06)aNS!er7WL0Dh(0JC=95xCRutw|4>PV1REQleWX5{l&sgsv2meKyo
zkk`tGOxXzv*_O6lJi~G1b`<T{z#An)?F)c;ZAmZMtz$B*(+|}Er$4X6hK~XKN<~`J
zPx<CCsem2EU+{A0HyaV-w7yT?7e5W%&AYXYWpS|>Xmi@_=Ccu~aay~4F%=M)9fc3X
zUMNB*UbHo}R-SO`^HN$4El%Q;0u_@Ah^E&<7N7I#Lg_Lb-uD>NaCdK+34$l2S1lD$
z<(^E3TcavR6b(#$@f(lk25>)O5Wn)a{Oy}CkF_ugF-fjR7KTP=D1ann&eIjCe8bTf
ztS)>eyU=;<>V!EI@%DMjC6Ucdo=p&J|6OJSR4q)%?#RX&Vm{(zu-=qt?Ox?sM7@b!
zsZGHN^u<Kp;~%*rY5Z}u87mDwM>&sZH)Vlqd%Y6V=}+Q=<Q;m*{l|m*G1|P`Owi2^
zL7tBSY&8jhwDCbF$`o)kSeC`6GFwAr`W3tLdS}JDr1mLwc(bsRBux#eG&)_azMbIh
z4yJ>5g;V@c@T&QWb@&WdjYBgu7xmL8ym-2?>$7RCa%(|srR_{lR}(4{puc37>5Mrg
zndFmX@B1((c()UdCbO$<?M`Z&{AhR<W%eeGo?0b}t(5<379>kZE2S8fD>M3-*7RZ#
z^?6{N&mGu}-TYP%VpqhdsLoGoA4x2V(?H>WEj<KWC1bszJLkEaRSgx;rhmE7h9dZq
zY#vAvj(ZQve!#-&My@Cew%^OM0AXf*pg5h;o+==ofh=6Sge{f!3?pV63M=~+#cB)S
z$&#LHL(U|^v!G1Fx+M_t5$$qo^PKp|5(}r75En8cqalbO_Q%*H3EX1O-<K0t!SC?V
zARkZ+^wsRx;&GxO7xan#O{Vi4T8*xyG}>?Q7Be1Oi9HmEUu(0AMY$qa{<72OHvDqt
z#xa8tZtUh%2~l$1=Wyio3N-TA8MRJz9<=NFDg3Ns#Xh4XC1L_21T8`n222gxnkTyi
z$epANUZ#!-E4mp_bFpI2e{MfGdh4Mul3vPhtR0Zbk@dQ*uFQ&FW9I7)Bkwx{lhah=
zk0XB7#+IKOGgkpkIA?O>?pLDmgZTowShpFZfj=4KKJ4^}J!O9CvbqeW;k{i;Q)8w8
zVb#X@{mzPXl+>hz(yHb;o;`pQR{9R0EPU=Yvr9MN)RIV0MJa-|BoVV{sB$rwcrf?O
zlExWF=r_xB*$8KZv~e?+vxL<-OnQG+ucR@wizJPqMuA}1+u|<#6k2b<p5j;_em!Zo
zR0FxJQiHtuC!m~b<5R9jZpH;VwOu~PKhBwdAc@NUahFWn{uP)lMurweR0Fe$p1<Eu
z-Ok=R#+{Yi>(14tFV}R8^UWuRhSo104|?;Ng^d&@1B8(m$KglrG1X%8j?6$T0sPy|
zO^+rTIns!6p5rWSoU$0e#W=~r<N55fWC@>F;UrENFA5QnHdHvX*K00}b@r;nqz?+0
zHb-ct<PaG$_pCFR(++*T<sXiCJFmcDy+j<j9!M(r(4FEi6F|iOH~U<H7qw#LvU0!u
z=m+%>E~h7jXm&!w0l|AjswDV8#-u9J2;n+d3{5-9`5>cO^0Ms1Gs0vxnd27>lUzJw
z?Pmo{>cut$9=W&>OojD?5-Vg6PC_xGuqv~=aA5j}dvTE;rhZN}jP^2?v62B@WY7$e
z@30Z&%bxEzM%?Z?Vjxn_yk}c3;FR25F<Z80OhNSwr8jX$6NBq$zYX^Dgf=i}Um(j6
z57pGvc<V?|L%WPfO=tu4IqU7OPNH<u&M%l__Fr9tNf&;jqpot~{+O{pJ%J2D<y}4!
z3Y?gHm&vUdcT8s39FS5F0b>y2SB{0ZT<=*Cb(a}@5^h*-#^)AXljM+nszm^?d?w6!
zAe4w3|M4Ln#C<41ZR|{ihu!k}V;te_*ZzAk$0hv0@|75VC|!8Z1KCbMErB=5KwXym
zPB3w4pJI)+I=w;Mc+FSSXw0sAmJ*72PMmRP)!6q{_V56}4VOrcMA&pDm!G5x%a9Th
z8Dio5e2rX;OOgTrp%W2rY&<`jV6<v__-LW0F;H`m1&Isx9M;*qP-ehk(Rcw+u^1eq
z)1HY6%+GQ${$2(1D4Fv<1yle|DTo3tkXiI&Hqp1w_YA$R)+8*<cu_?&^R$(gM5P=U
zN3ZEz8YVl;N-mp5CuBDZnadqz@TwC%=&<iCef*9>hUhwxY`~uUG3#1P&ald`4L94Y
zV|TtAX!#hq9Wz>m(Kx!zNro1J7N#_AZDo}|%()viy+9lp%+Xp@n|@*DOXRCP;iMIj
z-Qno9^&+*#yTVeSQ~YR>z1YS^rSf5pDD)CY{JSGLaC@*A5M+ds&xTecM~N{w>Bjs8
zt2(W9pPs(@z5<Lg%zypIm-UdV?P3}qcs1sM$W{OmOvOKfQ)t%?%V|k&yXCn@^1lrA
z<rz58eUWZ^WOLkk@u-*|NbE*DtPCjOrSJG(@%sQ`hF2Q^|C%!kkE6YxXU-q%Mo*Qq
z_dByL>G@AZ!ZuHqhh!Zq#$Ww~vWq;nP9E`gz(1d~mzDcsqO_4an$+&g`u4f*Om8hW
zbT~;0U48n{dzE;4qv#S1u?_GgY)x&J?;;_4DT#tssjNJgO9riNN=^glZm>020KnRI
zxBdlG80y0<&4wa#iaoF?QJeo6$>uFVC-pg9JobZ(vu?Cf5p~4DAM4!-E_pd)Ss^A^
zJZJ__kx{8i9d>fZr4(VJlgBrvbgGX6@z|)4;%8vA;KNtzkIUaLYD3io?))0(6unhZ
zT_sWDa4-+d<XP_G2aEF}mA<%+IL@@h^ldT6&O8KyvKgX$!AChFTWr#Is>onGl?&Bf
zhA&K1Y%8FsgnCyuixp=FO*p^$_EV(0BC*(D^IXn~A1WpU<?suWA=ZM+S>_WcEh=_q
zYol2SEAs$ONFXjI7A1y#)Jw7X!y8=4?K9ITD4W!vs&Dtm4X8)esQ*8Y1QPY#vo-Y2
zQD*JQ3kaHvq7>}ncgJ$5FCrVh>!;L*;2lU@w)Lf*Jl7v_-F%$$(Awbr6?%&u%i2R)
zl$fW%*XToVO<D0ge=F?sH;U@>OMVm-bM4GV&~GR?_YYGCr8)DvJmd?b4FDNOmSdip
zddU3mrq16B71*|Td=7N{(PA(m;_yLuJW{4qpm*j##){s|$@9BIf_s7ruPLAF`2CIh
z$>mOkGx7$k-j%3pM><d2A4e0ekkLrSuQsdL(og5El5}(U$zev&biN8VpIMBt5ML%f
z<^rT1+-`p(DzK>8Fa=?zmNoZBe?WCSRJCh?PDy~Z_k6`~M{dK{T4`qa*Yosf+ENQU
z0fUgF2VdKShxfaW;BRYSMBQwRiLeJbH72$)Iq-aX4J}d#W>@A7;MfKf+&fEF5l#Ei
zqa2<+=b}9z!iO%lJL#qQi+rT!Au|?E{df;tjUjKm9i&j=NVcFkW*=2bHpa{_?WTH5
z_Q}fq#rgzrXMa;ipx+gUtYnLA`URODx+p=7p5%kQ-JHOg7#$wbv*Hq8QkL?sMTI5A
zO5E+9Q~r8gt9dO}W5=TNC?C=mE4LLXVu@!Ah$h=$>V}Hv>QkK5sTiF^d&DaNU(DWb
zJqh_-yn_$MY)`^yA#Y-TYgPJjx#MP`XM8!;tdod{H`wUY2l5Izweu7Jnx1>k6GMEo
zw<CPUgt`&+?}Xv>4_ztiQE1~3CmEj%Mx$XH=2+s_<4c<U@tr|4fz|ZrW~{v@D-<9A
zwA$o+Ao%WN!bm!)g9qPS31RPS`_oA%vqHQJd@bW{ILCnyP-O0nLt`@=q$sCX-%-VO
zb+5+(L+T;&;HnT;VJ?QDrOgvZi|!XrY0Z6b^qD89L(8y-1v8m^_~$-5QcsyJuxG|+
zzDe_b(~<2z%gFsmf*))IZ@Cid<c5SDM$#_GLF4kRrhBk5V=SbZV^2Nykwqz~b0H#^
ze+^FTDx5nAW94+6wmf>|3`&EvDAafOvZ%nMwRT~Ms2(IMvjFDaT`E1bhKWDkTkY<O
z?^!FjXtzbw-)%AVd#dG_DKTSz3|d0{?pLgK`&YSQ(545puV)c>orbNeoh+xU6o|d}
z{Ww&><1n%j+}CTZ{8qi>mE=}jVlx|$Vv+fP_Qv#`W2sk-urv1SNrQV0wxL?5ERKRi
z^k<6uEzhn4?-y%Uo3OS~kCB&n$d{;g2jYLW5wK5pacmr62)U1^f1bpqjM+#2$GQaU
zQAYeTGu8j2f%t;Vm_`v?koo0}>c_^buo?0L-H-*+i-FFr;*IMq5648uiC$`_=h+VE
zJrqz9T$J#~AnL8E4sbKU1XubXHb~g)<67W_?|`nFo1AXFMr{j=Q9#jvUZ}`|4oC=m
z^umNCcJTgi^-4gTYs;>I%kwh%e&r+qB5|`<6q96k2I<MLhm~LgQF^zvek#nz5sap#
zAIXH-YrJ_pnu%QR-(pD(kLcOl7&Pz%rYU^H5wCc#=bO}r%p-^uGL+zY@-Os7e%@oy
zCIx=qVwQblSa!(_AIK@Xbj7NG3)T3w<mgAdCpC8PJ#J|}`ORW9%0r@ENIabr>-lTr
zm$5L|{0nKGBw%KjW+FDAOo?XQ{%VT#v+4TihjPq=1Il#g_JJ|eu#&CbOT$G*8RJhK
zrsXPevOcD-6;ajviXt(40K_O;=pPo2{XUwcADW@5gV7_gi70qnaZw4Q`naNvL|JH>
z(aplsp~Ax>F_lt=IY(Uq;sEYJTB!J24mnljIaxUO<bgUoLTadRPqGu;Brljfo1NsN
zVz9^WOvs=+_<!HosIG^Um1&sq=zqWEpjLG5YA(+>=*g|_H5nQ7v%)}m>3z2CaMd*)
zSFE!q@#}iCeGsu*^ePZxn7D@l-GOJ6sV>j}lPF>5)67R$q^h!8ul)sSF`Rl5`(S|A
zQe(XQ1}<@w1b-SAGnsS3zF<Bp!C2!qR$66X;&&sgoCo$9=nJhbr7KK<?sJua^q%Wh
zbd&iG^i&n=-4mi}=|HGB^ZCLi^zVEw*Z3diJT&j!9k8Vhuu1^`-hHRTXS?v9nXjMY
za|b?M%dQXUyEh#1g}}@=w5^c@cLZKUa1$J@;R*`g)_l*e8J@lO=g%zQ`}jkeqJg$O
zL}rn-zl`5UbF(M06{Z@l{cW}1Hb213Ww&3TP&{+~_tynuFVxHdewF%Tiv*-4p(2ld
z2YkRxv+#o7Hl+0TLa|3#SmT8qo7<~&xlpv<{dhsmLm^nCYsF3G({EoBAn*=!L(gS>
z5m8*APa)k(7+fVu1%IZt`FrI!Ga1N$fJ1Rv3(w-rfvZ!If98dIwTzq09WoCN!<B1n
z@Osb>ufNrk<re3wBd41F+{6NORR+;m`|IgKB>wA3=1bPa8zew?{%iE}3eSm!12+9u
zXCjz)tSg?n6Wn1wBT=j~_BS8k<f<DfAU=QV$+cueKA^JC)PafA`{&ZYlvGPqQm--{
zl9!<HvxiuTf^ptiw)u$i@9a2iX76y3h5y~u5?Z-Yl506Sn^Nply=Ln?*1so!BJ|s2
z!*oiwo30Ib`#P*3&qK+Z$o=rNJiTV6rP=aGnZHX4AlX;pmnSV8E|Tq?M37Sh`IxDF
zl}&#mBfme7@&DYh@J7T>aujLx+bhtf@8cAr`Af;={hqFKk_gI?PNt~eQUjZP^-fG2
zb)z+dXyd7_t_G7%WNW^?4-ON%0aA7Dgn82V=py0KTpF+m7moX9`tXN5n+@ze?*c+f
zNPc=9xquw-1#h3eDXkQ*`NX2N_0G~oX|W3(5ObnmHm?xKz_Yo+;m(J5$+Q2bwet>!
zyIuSEgCJ2NO^6yKdhgK^T_k$9maq{-@14X(OOU2T%Ob4qQ8r?+5+#JNSXK}l!m45Q
z)pLGJo|E&OGw*rloq6|<-|Wo(W@qkSx$gV^Uf=8bP>qJJDK)7CLJ7hfRl3rTP&-?G
zA)dfezDFz<kXaAGxy@tUmWoWz(>oV=kK4G~1LV)6Hm-vh48(Rh7vLpX5P2g}AqO!m
zO92yZWKGRJd=}eP*QJ?F1nsxhcN&t6^{p5YKDXXxM!sx=-V<KH-L-A#*F^NB0TQxA
zcy$1Slj(ZGtXyhb!l}xLS5+d3y^I#d-6^M$16Z!r_W(8;U>`y)vF)t4Bxs5Y>-Bo<
z>XtiQHf^&A&76v0$skTNS_PDATb~`W8-*l$ns#-|>lt}fSePDQ!8q%hZq@u2PeZD*
z)$8c(S7dVyLR*$8X(SE1!N?xT$r3(y7VLK^Y=-Q3R7gV(wnG5k58#JbQ*E5XHTq{-
zD^?WGDkM2F^}n5(9TH;j%4ZdOzPI)6m643d#`;vwxn+w9_8SD@5iOu+G3JABv>&S0
zy2%Lf67(H6{Gg+I6~ToJF`dT)_?q0>$JI1K&a=ffo07VX((CZoqHsc^6sW0l-~u0o
z=3SjR-iRC`5x2%(8-(^A4dk_JD#0783;EkLPd-KjDWD$wm7psb3od_Ba;>JNjBY;o
zYV8wHauD$}&P&l7EZBqy$_&X|HsBR85{nAmI0(L9RHxUdKgH^aHq6iYL0I_-=M~O-
z?IYwrw;{8!+nBg<_?TVVe_hqOjj`=xzLRMhM9cnKHp)<qzTATRm9c!=;ws}fY*|LA
z22h90o0Pl^cyXJ_n(Kk=`9Mi}iDj!0=-EvkECA9$E#lL2s|tU9A2;rd>zfEpglvxE
z$IN(9cLI?imu66y9ly&`v1`H2f+h>~E-9iHR>Q)0xQ-J;{7C1`JZ=}{z)eU0o{~&n
zD5zO6Dci_XeLR3WQ?}~E`@1(x{|GW8#_(VR_X9T%U)DlF-Qrx0^2;0Tw@eMK&?82f
zT{v-(^OtA!rXq&g1JkG96&#eX^d?#=`t6cCVJNfk7mAoJc_@UKw<kYF@W5RX*<C-&
zQ0uS$G${2@XryPUN;Nb6pk=C^k`-U)RW?4SRhRu&-pZ?a!NGN&`xKBNrF$cK;f(7x
zD+AtN%}*w;_}G4N1mij;aupr}G68SKFGdp}i~tMT-)H<+p5Gn})SPIWksg8W4z0hE
zcrj8kUUu4#IaQG#$V`g*V_Zh#$_L%7mmU1NL-S{tMRMdvu4DffXF!bs(vfw(Ko#nI
z#<%O{x`J%J6|NgT+s{CytZ{zJjCHtbe#jjH0qyo0%;kPy=okA~Sy;9v+vE{W#%{C0
zad1aGVvI+6AL!mjkslDIX<@Wjh`Atyjq#+5%*hAix}CT?GH%M*lz~NW!p&aBV0ael
z!lNTrSGBrI=!Q=0nc$q+sr#F>{<UjUT&%{(S&5$L<E0GsxI!<iOjlj%Rc|KNB*8Y=
z$VEwN&OXEM&B&i$RpHAiYCwHm+Ro&2X?N@umfZqX>FptUQ|yT5&|U|o)s9WAm9HnC
z@l*bs{h>QUWU|(f99@Pj7~{iqwO1Nogz1}rt7Koi9b&~M`UF?biacg>wH^PnDj?S5
zLM41SXNOYHraH=8pS{>&X|;HMaB!+$dVW{3e`*r9NCF$SJ@SAK!=$x67{XsC-U2Ex
zd;-w9s}OC>oWvA=u*pS)U!ciO{DllDZ?;4hsmHd#zTD;V>F94D@`R*;soMJs@`#@4
zf@0G)+T5{wmj<Wv8^3|rlWSZg6Zgbl8H)w1Q~<Qz{vei)v4q#C!~xO4(y2agpl{uT
z`$tYStA^qLqI}4mKB?L(b?PaVg>Ti<h+6aoN$j_wIl6^evf$HVBqgylQy)WDCF`t}
zgh<tj^LS(#iXXCY9#q6Q59M-yvlMb$Hb=^d3ZG_m^(#-Ue(PYD@4TUC;zA5QFt=&8
z^i8R2$TGH_vJ3@^pX^LBk(ZA&H_|@r)VMfR0RTZ}^DIBT5MZ=qYXgJM#pl|%B(P|;
z@)jB`ZC=z3C6eJhPAU@@_(SFeP=>+TPWL$B7excK52;u_iJ(;(l+<~&l`5?>pthE3
z*LqGv6-@OtK^?2r)Xp2b+zZa1^RA(Dg$?@tJlp#2#l+8_&KDi)Y~X8pt<HUE?-Cf1
z<_oBIK#7;Pcp?tmZ5Ef`sP`&)|3Y1mos<R317Ozm^KWHNZl87w1;a%%Re`YwYzs+$
zk8OG)<JUw<*Tw2u797@fzDz1TCph?u@*X{I<_V8;YrFn8%SE-|N@-(%Z!Sl7gTh&A
zhP+uOykYF*8Nea%OXyY`9)<~9i+p|HVW5cr9I6HWlXb0r$Ym<k%!LlD8EsMDh`8!^
zXKhN_S={bRL3y$aRP2yi3$UwND8=&n;>FXomP!f$VWsGipQEIk%W1&$f!{cB)oCuF
zVrToxZZC|0sWllw(lI=ROLuEDlp4EiP&6)O<iS*B82fUb#;g#6a#HUqb}c+S8t4JN
zuD8Zx7LBugnlV$Xu0jGekGn&go)6p+J?pT95Gfd}AdR=tTp*L>bM*B(-{3`G*?!9;
z_-tBsevL|1Azg`5ib~j*Lv}V-xPRj>ZT0v*0~XLgQ(8tQek`lx{nG_Ac@1q4LmS-3
z*7Nn}nAJYT_V&k|Z9I&-a}fj1)Scp(HYYT)mGll$6>ROXIhmCRB?-YbZ6r=~L43s%
z$4#_IC2YD7wgRkm`RL;dL-#rAi)~m3hkQm=4kc`Vp7Ib`EE7Chnw5^d2AH_&laL-s
zeo@bEqx5HyWe0b(F3RAYp~idkZ7fFJ@poAqA_)`E1Y!js!P}O;_Y5^J2}ti);g(lF
z`F))*0{9Qdd%pC(C4w?PjN)MPlQdllwRM`AKNpo5f}ma@El;5k{2XW>fMtvtI`bA(
zhA!u)xogO9eeVSQOtZo5oB5;59)eM)=tE*&Fiacvw{r^$3%>cB;8t?KUJcQpy^h2x
z^J!^sWle;Wdjvc6w!VGZ7pvG^q}XEr63}icJgyT|$?PE_&V~r;kJ<@{*TM>%ov^P}
z9~%sbujGZS{jz*avmB4g0EgcK)T@TZtaA4{Y!8F`xtqTqHn}#~i%($iiOIpGqR!l`
z#}^ltmtlFEJT5CtvHd0Fr2|2JO74mlS|gW=Yv-<3@W&*;rxM3aQ7%^&8FE)aHAPu<
z2H8Ldwo4f=ht4)q`@`aVWD^Ui<!`anqv94MXN$U~<KqRA&8%<9;G>fxxHCt;cmumA
za|yxpwNY-}ofUgmJ9FAJp*OKOOTAZ2?;N{l%uTKJMUrf}`HsTOq6~jvj7MuJs{j_u
z_Nj0n3Q{|b@2rxYvV^Q~B=cbv7LqXATs9T6FI*TpJR|gF@vqTv>)w`qhw@U{*a0cp
zqIq3K#GN}I`9+7*v`p@&Fq_K%^G&li3}Ct?f5I;`L%^Nf4wlq4^H4&-6!*}BDZECZ
zv%_W0b{wz89%kSCWKZ=2zBTop(YhX*AGK_)o9R3*rw|!mo$6CC{pDU?{&@ikIePh9
zf}@WzzivrZJPTMy1wCJ0_IAtfEMLUji+yo)%lcrqFCppEM3HMD?5+kH35W%u9HX#a
z%WnMb`8l=_TvZQD72PlRb&rPCb=>rwM>-^Y#h#@ug&yrig2f-FXeDxKq1E?Z#GObJ
zwK#*{vGUt@zUah@*mbBS(C$A2!Qhet{&or}vbMvlV-vK<0_i6Mr&j~aMun3-Ok`3R
z(~QcOIQwQ3;8~#71&I4K{M|Q3A?93;ObhliEM*pE8djICkts(fSqlmY=B<y+7Q_00
z_Px4PjDVNL5z11P(gJ#U6!6Dt#S)XUKNtGUGW)(i?@Bh_dyf$`=}_KKo=Sr*z-%ec
zC)<tA&2h+fjAm!Dn`UHdQU`kE52{}yV<+XJNJ_)s@E#<`><VvTg?Qz808ot+8qdtK
zvLaH_DB!oF@=C8wAOp&poX4Rrri756{|>V4Nw=%Z&8a53<;jdm6~E#75Rn;MT`{8!
z8ouPZd1`Bn4PbTVBmOf*psYND=Qtv;{yvZ<;0-e-zLSxm6mO7CzyfT;oT*f2|2`=<
zc+29uFp{*m0;uGdWzPt$0tyyoe{7qTAIT)wX8~4qyKMe_(sq$1k0HKhj?{$(R*4if
z1<H6{@b=wY<XQd6d*!N;@k!`n78_yzP{P{8U1X)T_*C-7G)qaH%Kbr11|QV=X}Q0c
ze;%nOC!DwckqMTZvM%ZS_Jo*^=i+|3ig*gsH%dRX$U5Ka5zXydWo@lZShE!l&*7>7
zaW7kCZ<ceQdzS;$(TSjLc96&R#|WKQ+1<(#3vmY5)4Rq>gSKpj&pGvz7{{u1{uG9)
zKh96n?6y>ko%8pW7o-TU(kR+kq8&DgFM6W9l3j5nAq6^$t76z330{SaiEGV|V4Kk5
z;wcvFr4uS@5p}-xPUBv2DM5g;JNdnpa#+H@<ITY};{wmjCk-t`w?*G&?sn8JTOr;3
zZydh#GP-gJ_$581(r*vkp^G=OG%ZLr>+m7UjrR5!aUA=KZID>k8I7WZP0cN4LPzNo
zMDXmSgp^s#O7jOwH0849_FBlq&Ny!BM79p2A!+D?OXI6sEXMr%Q>Goa240?bj<SG@
zRZT_nQHA*Sx)*(8#~OxrEk^U@w1S6;p;=@{ZFhiyKimb1V%mRz>_ZdYKhmLU-y>5K
ze0EZ6lEI)JhIisUy=_6Kg5P|9S4V$bXOGO`D#vnxM`co=m_z%|u<YrB3D2T_O$9W{
zs~v^iYBDE}^8-hVRWjk^X#>GPA1EpfljDK;f0+GF=xHw%eP(Mj!DXFVoYh8j7Lg1c
z+cmXLl3YYvt7BF|2MKM}I7fH;$cB>SjfgBpx+Ha-c0Q^hA@JoNt23V5W&;7yoYx{+
zm@mBMW9*1oU!V^B0kV1uEnGXX1=%mR-QM5QSrw*YjB@^s?XIEtjqR4G@&})EHGD2a
z<xY1{wo*<j4D&SGKPyD-s#tkV9?|p~Y&fPZ>bp&YiGnwNffs+5%7OktAZ+_{|5#0W
zmb;!Rs2`3t`@^2D>ykluJi}}VZaeV|8YRJUW7<{REqI9dVR1JispfM2|KyDNq%rLO
z;e4kmOq2OgjlTW{&*eAdl0PiKwGmdaqrCf?oDVz;uuq=koPFEk_uk6Zb7Tn(mP01Y
zk|h8S786olRR57OPJY%Nt#0@E)Jce8#S%}4wkPD9Tn-P5SYM_keNECZ%t47GD?xkw
z?=>EPAch$R1To&X6||Fdf?tVr;SV#?qSbXYVWNG8P?}JQlC_P2GxVdX8Vf&%PlD{J
zCMuW*cR8RflC>2Hv#P6yiFRyEd@byRm6S%6Lwox7C)FJ}93F&Zd#(1TeR;};e(u+j
z{*>1K`$&Fd^T$`2{TPy+9*7UL_M#U&qgij*CA2*3qv`Zr-9hjVRePnx5V^6hDIAIW
zD4e-C7apjp31!RbK8Sb%6pk_g+47T#43`_N_@^Y9Gp^reM8TsNe3kjP+fjjvXrxE}
zW}CAmbJyaC!Iz+|GCuE%V3K&YVKz)jh<4<%={5^TGu5W;k~7%lZkyfkpr=Qm5Ru_$
zkwog4^cPK^YdDEpy)=bS@n#)@?>Gqoy$A1vRHaA{H$wD|5{@lp#?2y<pv06Bzy_)R
zq(jGuiZT%k3)}8cX_Zsicc}Hm({rLv$EikNKH6gbpQ2#Ymm5c+icy2}cle>KdT1FR
z8(J<Dr*fq?uau+|q84ZzjxUA9nQ)zdMu_%z2RQOY;>Enueh^qkcmIAHCYa*8-cdmQ
zw^aQn)4woLN5FER#^H#Uomct^dDC)4<F>Z_E>7c!bPmi5j$pl`uRpr~8}$75e+Up^
zVMi=+K(#qSH6I0(ha@h1%&)`oyMOfKuLDU7{ROQ5b=t8F^#A9NUalDM6N&;qL#!Y7
zIdb^q{$K~1%lzBWgJWMzgxNYcrGrjI>UC$gg`^|N4bEkzD*nsJNZ099(|^1_zXavN
zxno%Q(Nu{`4K<ATH-+IZxb$B_L>~Os#!qUELs=TbLAk^~fX_`$eT@pWJ5m1tKs=qB

literal 0
HcmV?d00001

diff --git a/docs/appendix/examples/dmvpn.rst b/docs/appendix/examples/dmvpn.rst
index 44c08de4..08a51838 100644
--- a/docs/appendix/examples/dmvpn.rst
+++ b/docs/appendix/examples/dmvpn.rst
@@ -4,28 +4,49 @@
 DMVPN Hub
 #########
 
-General infomration can be found in the :ref:`vpn-dmvpn` chapter.
+********
+Overview
+********
+
+General information can be found in the :ref:`vpn-dmvpn` chapter.
+
+This blueprint uses VyOS as the DMVPN Hub and Cisco (7206VXR) as multiple
+spokes. The lab was build using :abbr:`EVE-NG (Emulated Virtual Environment NG)`.
+
+.. figure:: /_static/images/blueprint-dmvpn.png
+   :alt: DMVPN network
+
+Each node (Hub and Spoke) uses an IP address from the network 172.16.253.128/29.
+
+The below referenced IP address `192.0.2.1` is used as example address
+representing a global unicast address under which the HUB can be contacted by
+each and every individual spoke.
 
 Configuration
 =============
 
-VyOS Hub
---------
+Hub
+---
 
 .. code-block:: none
 
+  set interfaces ethernet eth0 address 192.0.2.1/24
+
   set interfaces tunnel tun100 address '172.16.253.134/29'
   set interfaces tunnel tun100 encapsulation 'gre'
-  set interfaces tunnel tun100 local-ip '203.0.113.44'
+  set interfaces tunnel tun100 local-ip '192.0.2.1'
   set interfaces tunnel tun100 multicast 'enable'
   set interfaces tunnel tun100 parameters ip key '1'
 
-  set protocols nhrp tunnel tun100 cisco-authentication <secret>
+  set protocols nhrp tunnel tun100 cisco-authentication 'secret'
   set protocols nhrp tunnel tun100 holding-time '300'
   set protocols nhrp tunnel tun100 multicast 'dynamic'
   set protocols nhrp tunnel tun100 redirect
   set protocols nhrp tunnel tun100 shortcut
 
+  set system host-name 'HUB'
+  set system time-zone 'UTC'
+
   set vpn ipsec esp-group ESP-HUB compression 'disable'
   set vpn ipsec esp-group ESP-HUB lifetime '1800'
   set vpn ipsec esp-group ESP-HUB mode 'tunnel'
@@ -43,47 +64,82 @@ VyOS Hub
   set vpn ipsec ike-group IKE-HUB proposal 2 dh-group '2'
   set vpn ipsec ike-group IKE-HUB proposal 2 encryption 'aes128'
   set vpn ipsec ike-group IKE-HUB proposal 2 hash 'sha1'
+
   set vpn ipsec ipsec-interfaces interface 'eth0'
 
   set vpn ipsec profile NHRPVPN authentication mode 'pre-shared-secret'
-  set vpn ipsec profile NHRPVPN authentication pre-shared-secret <secret>
+  set vpn ipsec profile NHRPVPN authentication pre-shared-secret 'secret'
   set vpn ipsec profile NHRPVPN bind tunnel 'tun100'
   set vpn ipsec profile NHRPVPN esp-group 'ESP-HUB'
   set vpn ipsec profile NHRPVPN ike-group 'IKE-HUB'
 
-Cisco IOS Spoke
----------------
+Spoke
+-----
 
-This example is verified with a Cisco 2811 platform running IOS 15.1(4)M9 and
-VyOS 1.1.7 (helium) up to VyOS 1.2 (Crux).
-
-.. code-block:: none
-
-  Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 15.1(4)M9, RELEASE SOFTWARE (fc3)
-  Technical Support: http://www.cisco.com/techsupport
-  Copyright (c) 1986-2014 by Cisco Systems, Inc.
-  Compiled Fri 12-Sep-14 10:45 by prod_rel_team
-
-  ROM: System Bootstrap, Version 12.3(8r)T7, RELEASE SOFTWARE (fc1)
-
-Use this configuration on your Cisco device:
+The individual spoke configurations only differ in the local IP address on the
+``tun10`` interface. See the above diagram for the individual IP addresses.
+
+spoke01
+^^^^^^^
 
 .. code-block:: none
 
+  Current configuration : 1773 bytes
+  !
+  ! Last configuration change at 14:46:27 UTC Sun Nov 15 2020
+  upgrade fpd auto
+  version 15.1
+  service timestamps debug datetime msec
+  service timestamps log datetime msec
+  no service password-encryption
+  !
+  hostname spoke01
+  !
+  boot-start-marker
+  boot-end-marker
+  !
+  !
+  !
+  no aaa new-model
+  !
+  ip source-route
+  ip cef
+  !
+  !
+  !
+  !
+  !
+  no ipv6 cef
+  !
+  multilink bundle-name authenticated
+  !
+  !
+  !
+  !
+  !
+  !
+  !
   crypto pki token default removal timeout 0
+  !
+  !
+  !
+  redundancy
+  !
+  !
+  !
   crypto keyring DMVPN
-    pre-shared-key address 198.51.100.2 key <secretkey>
+    pre-shared-key address 192.0.2.1 key secret
   !
   crypto isakmp policy 10
    encr aes 256
    authentication pre-share
    group 2
-  !
   crypto isakmp invalid-spi-recovery
   crypto isakmp keepalive 30 30 periodic
   crypto isakmp profile DMVPN
      keyring DMVPN
-     match identity address 203.0.113.44 255.255.255.255
+     match identity address 192.0.2.1 255.255.255.255
+  !
   !
   crypto ipsec transform-set DMVPN-AES256 esp-aes 256 esp-sha-hmac
    mode transport
@@ -93,17 +149,66 @@ Use this configuration on your Cisco device:
    set transform-set DMVPN-AES256
    set isakmp-profile DMVPN
   !
+  !
+  !
+  !
+  !
+  !
   interface Tunnel10
    description Tunnel to DMVPN HUB
    ip address 172.16.253.129 255.255.255.248
    no ip redirects
-   ip nhrp authentication <nhrp secret key>
-   ip nhrp map multicast 203.0.113.44
-   ip nhrp map 172.16.253.134 203.0.113.44
+   ip nhrp authentication secret
+   ip nhrp map 172.16.253.134 192.0.2.1
+   ip nhrp map multicast 192.0.2.1
    ip nhrp network-id 1
    ip nhrp holdtime 600
    ip nhrp nhs 172.16.253.134
    ip nhrp registration timeout 75
-   tunnel source Dialer1
+   tunnel source FastEthernet0/0
    tunnel mode gre multipoint
    tunnel key 1
+  !
+  interface FastEthernet0/0
+   ip address dhcp
+   duplex half
+  !
+  interface FastEthernet1/0
+   no ip address
+   shutdown
+   duplex half
+  !
+  ip forward-protocol nd
+  no ip http server
+  no ip http secure-server
+  !
+  !
+  !
+  !
+  !
+  !
+  !
+  !
+  !
+  control-plane
+  !
+  !
+  !
+  mgcp profile default
+  !
+  !
+  !
+  gatekeeper
+   shutdown
+  !
+  !
+  line con 0
+   stopbits 1
+  line aux 0
+   stopbits 1
+  line vty 0 4
+   login
+   transport input all
+  !
+  end
+
diff --git a/docs/vpn/dmvpn.rst b/docs/vpn/dmvpn.rst
index c4f53a72..9ca28b3c 100644
--- a/docs/vpn/dmvpn.rst
+++ b/docs/vpn/dmvpn.rst
@@ -1,17 +1,17 @@
 .. _vpn-dmvpn:
 
+#####
 DMVPN
------
+#####
 
-**D** ynamic **M** ultipoint **V** irtual **P** rivate **N** etworking
+:abbr:`DMVPN (Dynamic Multipoint Virtual Private Network)` is a dynamic
+:abbr:`VPN (Virtual Private Network)` technology originally developed by Cisco.
+While their implementation was somewhat proprietary, the underlying technologies
+are actually standards based. The three technologies are:
 
-DMVPN is a dynamic VPN technology originally developed by Cisco. While their
-implementation was somewhat proprietary, the underlying technologies are
-actually standards based. The three technologies are:
-
-* **NHRP** - NBMA Next Hop Resolution Protocol :rfc:`2332`
-* **mGRE** - Multipoint Generic Routing Encapsulation / mGRE :rfc:`1702`
-* **IPSec** - IP Security (too many RFCs to list, but start with :rfc:`4301`)
+* :abbr:`NHRP (Next Hop Resolution Protocol)` :rfc:`2332`
+* :abbr:`mGRE (Multipoint Generic Routing Encapsulation)` :rfc:`1702`
+* :abbr:`IPSec (IP Security)` - too many RFCs to list, but start with :rfc:`4301`
 
 NHRP provides the dynamic tunnel endpoint discovery mechanism (endpoint
 registration, and endpoint discovery/lookup), mGRE provides the tunnel

From 0ab34ddda4eba65688536141d3d12b5e05484d9f Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 15 Nov 2020 14:19:03 +0100
Subject: [PATCH 084/295] dmvpn: fix blueprint chapter levels

---
 docs/appendix/examples/dmvpn.rst | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/docs/appendix/examples/dmvpn.rst b/docs/appendix/examples/dmvpn.rst
index 08a51838..74dc169d 100644
--- a/docs/appendix/examples/dmvpn.rst
+++ b/docs/appendix/examples/dmvpn.rst
@@ -22,11 +22,12 @@ The below referenced IP address `192.0.2.1` is used as example address
 representing a global unicast address under which the HUB can be contacted by
 each and every individual spoke.
 
+*************
 Configuration
-=============
+*************
 
 Hub
----
+===
 
 .. code-block:: none
 
@@ -74,13 +75,13 @@ Hub
   set vpn ipsec profile NHRPVPN ike-group 'IKE-HUB'
 
 Spoke
------
+=====
 
 The individual spoke configurations only differ in the local IP address on the
 ``tun10`` interface. See the above diagram for the individual IP addresses.
 
 spoke01
-^^^^^^^
+-------
 
 .. code-block:: none
 
@@ -211,4 +212,3 @@ spoke01
    transport input all
   !
   end
-

From a9d70999d1495c36fe596fceaa5beba3bbe63a61 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 15 Nov 2020 14:50:24 +0100
Subject: [PATCH 085/295] dmvpn: example: remove cisco boilerplate config items

---
 docs/appendix/examples/dmvpn.rst | 91 --------------------------------
 1 file changed, 91 deletions(-)

diff --git a/docs/appendix/examples/dmvpn.rst b/docs/appendix/examples/dmvpn.rst
index 74dc169d..df6a051a 100644
--- a/docs/appendix/examples/dmvpn.rst
+++ b/docs/appendix/examples/dmvpn.rst
@@ -45,9 +45,6 @@ Hub
   set protocols nhrp tunnel tun100 redirect
   set protocols nhrp tunnel tun100 shortcut
 
-  set system host-name 'HUB'
-  set system time-zone 'UTC'
-
   set vpn ipsec esp-group ESP-HUB compression 'disable'
   set vpn ipsec esp-group ESP-HUB lifetime '1800'
   set vpn ipsec esp-group ESP-HUB mode 'tunnel'
@@ -85,49 +82,6 @@ spoke01
 
 .. code-block:: none
 
-  Current configuration : 1773 bytes
-  !
-  ! Last configuration change at 14:46:27 UTC Sun Nov 15 2020
-  upgrade fpd auto
-  version 15.1
-  service timestamps debug datetime msec
-  service timestamps log datetime msec
-  no service password-encryption
-  !
-  hostname spoke01
-  !
-  boot-start-marker
-  boot-end-marker
-  !
-  !
-  !
-  no aaa new-model
-  !
-  ip source-route
-  ip cef
-  !
-  !
-  !
-  !
-  !
-  no ipv6 cef
-  !
-  multilink bundle-name authenticated
-  !
-  !
-  !
-  !
-  !
-  !
-  !
-  crypto pki token default removal timeout 0
-  !
-  !
-  !
-  redundancy
-  !
-  !
-  !
   crypto keyring DMVPN
     pre-shared-key address 192.0.2.1 key secret
   !
@@ -141,7 +95,6 @@ spoke01
      keyring DMVPN
      match identity address 192.0.2.1 255.255.255.255
   !
-  !
   crypto ipsec transform-set DMVPN-AES256 esp-aes 256 esp-sha-hmac
    mode transport
   !
@@ -150,11 +103,6 @@ spoke01
    set transform-set DMVPN-AES256
    set isakmp-profile DMVPN
   !
-  !
-  !
-  !
-  !
-  !
   interface Tunnel10
    description Tunnel to DMVPN HUB
    ip address 172.16.253.129 255.255.255.248
@@ -173,42 +121,3 @@ spoke01
   interface FastEthernet0/0
    ip address dhcp
    duplex half
-  !
-  interface FastEthernet1/0
-   no ip address
-   shutdown
-   duplex half
-  !
-  ip forward-protocol nd
-  no ip http server
-  no ip http secure-server
-  !
-  !
-  !
-  !
-  !
-  !
-  !
-  !
-  !
-  control-plane
-  !
-  !
-  !
-  mgcp profile default
-  !
-  !
-  !
-  gatekeeper
-   shutdown
-  !
-  !
-  line con 0
-   stopbits 1
-  line aux 0
-   stopbits 1
-  line vty 0 4
-   login
-   transport input all
-  !
-  end

From 2b7e8e29f58539bd89b79f7842c201002e871b33 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 15 Nov 2020 18:58:02 +0100
Subject: [PATCH 086/295] dmvpn: blueprint: add spoke05 as VyOS device

---
 docs/_static/images/blueprint-dmvpn.png | Bin 41398 -> 26830 bytes
 docs/appendix/examples/dmvpn.rst        |  50 ++++++++++++++++++++++++
 2 files changed, 50 insertions(+)

diff --git a/docs/_static/images/blueprint-dmvpn.png b/docs/_static/images/blueprint-dmvpn.png
index 04b7bd6f6bf9aee802bdf05bbbe23f59cc9800c2..b07c190d769842b3156f428a79423dd829d91dca 100644
GIT binary patch
literal 26830
zcmd43bx>Tv(>4mhU4sX=KyVEnAh=6#PjGh@cL*9FxD(vn7Yzh=cL*+v+alkR{PcTo
z)myjjKX<G4Pzz^!dU~Fxr>DCQ;YtdUXvjp!P*6~4(o*6oP*BjBkhd-(JmfdGy7N_#
zAJ9%JlA=%*qa^!~53pt*<Uc?`RmY$_7{Nh4BiT!7IYB|8_q@EJ`|XN8LqVCFNQ-|^
zbJss^M{>uNOau+JU+k<boMeEQIc`RV)4-+%C&ON#G{q^wJe~q&mQPD7@{MVI#4E08
z4J(EwLs3zYXni&&3rC2kuVC=f=7Th;xx+vDiAa(Ai$h~$FKSTJOOt<ESijg5m-zI>
zG^326SSG)$<N^#d$txQ6HT{^*OGnAh=!84J4&3?ld_H#k#D8G$WF$y5oA=L4;eo@Z
zauq4s;l$rdCZU1=^1uH)%h3}q*#+P%lkE9>G37m@*Nh3dGXHxS8>V0Oi+Xu6sq}G>
z!u?YWL}1EBZ=T_Q48@V|j{7e$oMmPqI57eL6ax`BZ2$jB4^+DU9-J^(G+`rJ?M^A`
zN|a+3Wki#O)1-Yo@@n}1XIc_hRlmGG4!ZaKZ`Pt*2FQI5<9Rj_rCNRXSqy;Kb7R(o
zQmpNc42S4!hecs#t2Ym^kran;bL2UBJdDTJp@fu<^kdUir0xnky2J>xvM+SPFezM~
zgccLpZ@heqg7Z3+<_JNXG^2E2Whl1Pg?VJ)h)v0Sz@5M_(X10m<95lDw9=x!z2}8%
zjgT{%SbK8p8e^3YWJIvaDe$vEh0n121^yol1?edEPq7`ndZ!yaqImEIhCeZ9YOvD?
z4Ho`$c4zdL<-Q_1ktjNz2o)4fTQtMW4lXnXr4852bCF%T4vfq!3eENRo}>Ma6{L0N
zh5^a~kP#-yy#|~W7J=?%?&tWu|Cq1XX9V0gdA;m1Tt;&#G^^-afk#ETIEmU4#Ra3h
zh;nbpVu*S7z$*%HHFYY_+Ot>!0bjOE3&S5_vc%eMAu`9kq!A7=;#JyiBcfHWAYkq;
zH|qt8&Bwsg)bzmZ)j1N2Rdp%|d)7|RBoYSfUmlQLk>~NX0OgE`hvlIA(0#kQ*=0Un
zf^df2@O#sqt69*xlLXd%v{!o5I(XIXaFLZm_*J&W>fNU}jEUb>)h<NSKe|xEs8uOt
zpt8Y1^Ot=Xz=f^5V9n}a!0AVF_i^nK%_!uWcTY4x-4&k!88W3ljv>AnH|UpB-`KQ=
z>Xob(CwNHd-6TL@OF2kqEKILzyzm*Q^ky2KL6aabkPB1uTNaq`Emgs~5p}ZPj$Hx+
ztL0Y56^LZ7?e*D??~&|>`#3m3i@q2AVsK(0D3aJSG@1*q5=frN>Lz;ktHXw`^r*-`
zuvHO?oxD=;7R?emAb8{9M<PixkxlwyEbZz;jQ3k!gYyqG`Tt(+F+{?5Wf|Jo!$o5O
zG0_D%F??Ul3iw*G6fA`dw%(`IUv=)d1zDltC3fb;h$A@pNI*b2pA>LGV<osR&Gc^o
zbBMyDSpKHtXN^7|DR7ZUn;<20u2U#Gw!0m!Di@&ZVJlloH6<%>;;|%#NgKJt+TJnI
z8PnUKOC}75P{9CsHA${t{R+qKX;V#5LEx+XA=@_!h{8xw|5i0792H^+IrBeD^w$Lc
zuZgt!Uw-c6@ZpLjjJYthQZ4lQq_&^x1r)LmY84%!;Vut!O$Y7KA=J_n966nGf-t<j
zp+ILf4-^9)lrA2a^B88Y9rg57mgXRMDUi0{vP?*=dU`Ij0r|Q5Ug=CnNN9R$CO_e^
z=lBE8@e9M*^4*?8_SV7BqbxA<JPNR{z9|WT_58MTn<wy)z~b{>Moz&a6sSWJ_G!*W
zLqT5<#WKn|V17NKiwv|vT`g>8zgZ^b7BA173FVIXjIBVnc*-LrB;NH$d^d`DQ?5Bl
zsaq>fHnU_Tt1o=j2@BMx2l!6xiMIK(sh|;@2DSOYHSCNh(8t1O3XvxksOTS1B)-Ji
z<{<<rK2Y|Xf@e3*e%%J)6GuZ(o>|!8J6X`59)Wngc!*$4f`i<r!Dqy(9So?382BPx
zdWFkeJ_;gR10u=2eIe)5U8*gy*50y#O|fMl=R^gac18%}*FFcp$psW0UAV|u8dT{=
zrvs{q;O;68khcWvD=bV)aglwzrB!Q~+w;uD_fkLrxx!@$@2A%yVnBj?pLefDBcKjH
zo_2kE7j1jiL=gMw8N()gdl0X_meAH96>G++3c~?BDc+iCZb4K*Pt?D+Qij0GMY!&S
zir#JiJM4|y3Rwi!-XRoIKlF*d1~CQ>fmh3DxbjJ5Jr)x@1FB{gvd&}ZqPFj&LVY!S
zBg;tGUJgdaZGNq{xokiThO#|)l2=`^ju}k@cO>j^<JZJh#omwHefHpu$)9H3=l#&r
z$56MFyzNFg>aZnZm6nIMO`L(d4LiPHojhe=n<bi&8d>DUuX2||>6^SQ(o5*Hze6ly
zDt=|l19S9D>^G9TU@r}O{7Vt4;(KX%z`A~=tC@C86_`gY2krLmD#947ZQ!I4Au?XV
zUFRpu*3=g>2V>9Vd*utK3HFW1P8>P566?J*?);bdgctEYE^YPOUsXwS&T$(xan^uu
zpcXG?3Io?4M2|O__344J#mF{Ib<l<(^XMR%Ztutj&3R-aPx0|?a#8=oJN^!o({J<W
zl2z{Q>&xs{Ill7-=Ax6Wb8m=+oGrfJkE1lQM5$hh%TC&VoQMotO=^Uy`KWq~+3;ch
z+XR$>ca9JVHGYzL1}RKe@Jz{gh|U}1pk{>ZyRgbPnYmHoYk01%#fx3=ZLCpltVXe2
z->ghB?>kAa@lz=de>P!McZ~ms&*hpWZs`hEv$24k`;GC~Zpr5>fcs%vwo=e5dqE@j
zA(x<h6U17Dqrt4QgyCQE&JQCPel^P3D1+g$=gh6{_$<I-hpcC1)#|s~Ow=O{XYIky
z7RU%err&09%B2GN;bFeQ!W>S(PPckU>kut4Sr=BdUSb@}O-D>@0qSFbYpzB`wVw#!
z(MYabGnM#Jq1#aQHAGEPtInO(3H**t>RJ=+djXqh>QX&Vq8!xiyr&e`_(X*V;dnnb
zzUGEEtu`0dqj#uluDpWWzRF=t&A|8N3IQr9SlyRiBB`4>*Zb9Y)9dvvz4|lEW>?Z|
zxky(w!*xC{R%Z=MSx!b@9K$VxVo{<O+wA}J|7#n?I&ugY<$JHLpYcR8&1p#-t~E-#
z>9?Qc{kVL8JW5chKCEFJv2cn_M!=96`{p>5WSR>?sF50W_~zDz$^18Rt6n8?UV^_4
zrRGDhYs5P`Qk<R=d<3E1C($i6!3hATt}-Xq+|ctFl;=l|jm7(VsuEV2=9O|i;?5=G
zGaf=8L*E?2IDL{^Ofbp|4h|<EI1txW#2|8Kw4UfF>4tJXf}dw;=zp}FQrp11J!kIx
zd9~O>KKGR0P+`mU;BvP>V;KsS{;1X(h(v}r5Z>Qgb?`rCcbQ$SI4@yz6)}V0Q)B>t
zu1tShdRZ&19xRsK47ENdYLdw66^*wVOnvNK`Nm7jb6A@EG?(>h9aFNj^of{`6y-nX
z6!3RW9PntmdHu>(PJU|woMqEKmHr(nl>o`t=+Isk_)je)l0WjD)Hg6YB?}CzI$OV;
zHtPs%of&CfZFYu2DDXnwZxD9TZUO+~B0c#rdflu9x|cYpiw%}kOD^54<G4@xRl+>;
z&oEVz35~X&_~(^6#K2voPc;J19_qYO6-U#V?vc=27s3;-;OR)oLeyE%y}}-Y`-%a1
z_AuPLL?pL@b`Z(RjH@|8A9D5#dZkX2EoESCFE=t(p(=3M1|Nhv!+mS#=RRWI!uUl)
z#iW58ph<irU`w;0rma<jKRD)LWv|oN2$HTf=EkVF3_akSgKL7<=0oSxO>?;{PJ0a3
zBNcJD1-Hy+2zXDQ-IK7H(-NZL_864-BUx|rI`ix-V`}?%?KgDZopnX``T0X4>;D2r
z$zMa}1%%iV2-r8nWOW61$O%8pL8&`I0T`!8v2rW*J!e0i;4Fd|?FGpK;e}L(h~7DG
z^_m#}rx_Ffn(+xD=6>%r41$m_%5xUWD=80Tkw<_7`)-0}@?I%SQw{O@w6$Nlon=RH
zXQRaC8_8Qc-!4%e1p(UsFkNo21!TvgtZ-X*^9~dz?+NAGM8qT82?ObMiPYSXK}QQC
z*x%bg&0+gVOzc-CzS8Z;Zb#Xc2%G~{hOyX7d+EcEI}@xwF!;rTtn5OD@1kAZu;39<
zaoxK#I@;BVu*m7R=<t&XKK+~Avju<2{q#J=Ll0}>el~xrX4J-yWMCJWC+#)*+SS>s
z5h-y$#5Zq)yJ^@T-}y|s)7=3d23823?744DBV3vDHEIA?=GlKsE&MCBx+6bOl)T5q
z6P3jM@Ev?KiIF=NAq(x6)Ta)0JjvQys;=)4+!?Zd=<%(5h@nh=pqm&FL&Z!un<|z^
zE&UfQgUrVN(6Z9w{Tti>HdK;ZVpPawN1CMGc)hcKYYW7CiV$!+`rW02LL!Eex9m=^
zB@iR@O-d1v91V;z5_|bC)C+|C*|IK?pCi$cyOM#r0sb(OWdyvJSd8%KB=raWR2%{R
zTMCW$j+`%kXEws&AAaW)@5S$6O&q@efDmLTM^=4cb#?EE6s^f-zaI9Qg{1O1W-;tF
zOuuDreCSlkY!Qno#>>c8#>;>C#)BM8-}9#UJcsBo*nDPaFB>ybD@nHOpQ9h{cJO=o
zZ}l!+-qaF+Wz8k_(Wc9DAE^kOnjkSj$cvND6#bWzN0q5GLFx3FC@${A{1xd&zi)Nb
zq?=ngBWc|H!<e+O5)ErA0-7v${W>4wF;B7oXg=5K4Yz*jw%55nR<w=1rQL4UEKb0j
z<n^SpfkN^=9O{^^Zff_MCcH>L0gMUvXIl&keX%>QMCF&)og2crFhLm`VKZxv;iSCw
zy$mptVM8>xFddE;vb~USKtdeDdvE;tBlv5^`+x1=0znXK_bCG~dV%hx))T@L9|CF&
z6J;Z<uEYqdZJ*Ylc7?DED#S91@L%GesaA)T2_fgoQvHl#-@g$?Ti}a;YQTvJRFXb^
zZMJY>V6bhIt}!afeb~&ODG%`{_(;M=KZ_zD<k>tB`{l7fbN+tib)}S%zygWeqQ|Ga
zi%wb0*CuS5yv(Q8?rt$5K}_8t(pdHjM3LK9vHkj-{m$vcC7)#Z?DvLf`a0Q?x8p{h
zp{hWVP`f`J7NbQKlb+YM_g=y$1v^+TL{cFogq!ZaAu7j9h?=VcQo!j{XZvcc53K|S
zBGPV&v)=Kr)jZPq1sWIBJo|==oc9~!g6SY{NeIe|5gB}$p78vQ6e&9?s=XIHjXB%2
zBPA}xm0HSz+U-5Zd%x-%=mb|{WRM&miZyqa3DrHXd3)`B5-V1@#%M%<=>NZDML3Xo
z3{75M5ea9J|06+?YcPh^Tv;gM3NuIcQTNbgS9I{Oxm(PO@Z{pKawOPe%2d?$(T`yQ
zvB<5E?EWV++XAUi82-!gWpA#hHy#QJsoOdr5^I{cXfOyV9EZGikQjIQ<AveT-astV
ztB<}Oe39ULj*u~gY&JSL?5t#jFSb0mW74zHh1N%PsPxwC2n39fwdpAd4VSD}mdU*1
z?eX^66WfaC^kp|L<r#<mDN9G6B@?o*wVOi*s_|J5>DCG-HIS8(3QB={(@n*dTO#;?
z$?|gkn5Z<95*VChoRNer!nfRfoBka(ywX(kESQM5#_9F27bP^d!B~idutE4zlBwnu
zYPe*rvwd;Q!vR`TPF^wAvN2A~YM_tS>;^470S0{bm1F%rM@P7%HOTfDDo?F{V<A=m
zK=~Or;ltUEn)~IqB#P1!1KJ<U`va^#3PMdKme~cL(#5je`im?vgnJ`i(ixYBceJEd
zv1|c=4JiTXTI4P!i61AWE=mHv@2CZmpqa7gjv%}w{3Mvwn`d1-B%xS$vEjkmRcnJ>
z#$=UfW4G*k6lraLRV<i_Y_#fhZx+t#@rBJ9vGI&LQ~O($LOzPGY)Fbn)VOXY%thu*
zBmS3G%WMPcmTs+qSWYT~6BO?+RloPelbdqj;ZHb4uMY=UJ#_NS5>0~sY|ej8mgJrg
zPHqBw^?4I3i>4#_Rq>Q+e!f7&5MdWxChWH+m4f_k#xY;Xqa?)Q_s)jn8-Mg|?adoD
zGhH@-(Tc}5vesr!*f<i^)bpg9woayB^x^)UIOlh0Pb){70kwtyIuQJc>bC+8@Kl%Y
zH{SOTTB`yCF#|ucVF0XWVT5w`i_Xcsd`K$Xt=R_F9s5^ovAl0#kQw!q+PLB3;#4V~
zWtcv9q{40`C0YzwQ7(LL=aV4GLtVDT{~?^8VRs%;OL1YI*ANx(?<wsHpZ#cK4hYyN
z<}Nam5uo(QM&mmZpb6+~u-3fZAZDeICOHg7Jxf_k_xl5c2inZHu{G0<@|b3%PQ6E5
zMgqgSZ{rlLI>uGQC9@`k_Cjm6w<tCiP<cJylbO=ei4Ims?ESpxSr{m#bQpOXvco}n
zR%9ZNi3DfX4^w`}dQ6;qL>FHVJw|=3x&L!lJXbmhX-IvOuv06#V2c!!qu`#1o<9{O
zg=~{6yP6eLbW^tQ5{31LOJY3&xWoH*Bw(gdnx;RcP~a#^<O5x~v*EI`et?<lkp!20
zUctvsUGEMa%W{-K?nSWUteR<^qA+FNk3DaizdnpNnhED~+VuA+(&AU9j&bI7LBdgt
zOW$zEj*%i5Aj3<=Rt!jH+U7xX#~zy}B#h07FJGweqPH>+c-WVYE%QRY*Q+{jhCoJQ
zIPNr-&#jIyB^{|)3$lMfLSje?D%XJJfd?Pe8Mhl8^A+k_B1V)qB^K9f(feAYMWP2i
zr_KE`A++G3kK{7RMS7?W{(lS%@96}se+j~SqF8jv7E2pxt2sl}O$dzkP+F$&%4<bs
z*T=2h*6PLwh*M%dE2O8weYf#muNV#*2oH~CFconuX0l-a{QC9RV;l+x722j$E5n70
z#cSra+D<0{w!GEv$kH)mxJWX?H40{(95IoBm*+kNdsabx=p&W)hZjcInrwmEZ?UoI
zNdGhK#RbW<zB;V`a9zq!^^TrOh==&#DzP%i3_HvJ`?h!H`D_5^E%d7N@9r9*qCp=r
zQZD#%$wD#Lk37pKR)H`eB0IZ}p11{Oi65-8Kxgn)%fOrz=}IGhIb|Ep=L8S_$wh_k
zxU&$~Hyp3IzjKLgAMCb&F>hfB^KMZn4}KftF6?<(F0Zukb}(Y6r-?09*rmClM~yAk
z!}Ls=UbqQWpW8Z%)#z<H*3z0SbKtN>yAPMGE9tb$%?G_}HL2;wkDh#J=(^YUOpy2h
z&q6TsWo0nT1orJsSpja#<C>K#%!fH0VhJ904nHr5?RiAyJqQ!j!)?&wQ~ZUhZJ1UU
zwP6Z}7>4<{AzK-0De0*DJD#My`F*1_E1S~#=3SzgmSzza9ty9*l1+hWP8WBUhnu_@
zkH_K;vAwTjX_a3u#0*sX%{f<91<9|A9sOmG=4jyAu+v|2&4_3zvo)R0hm2tTIWzuq
zck0c`+}?Rb-1KCwIrh&CxV*r@fR<9c>v2DNg)q_on!tyA?PJ@X_tlI>)$yK|yMsQS
zm(zjDZIbkbXoDS6M$)cX*Y(!x1Nv*owi)>&^8_az-wrK8F<ZDT6*y8U{IZ$;amxaG
zZ-fmHOw7C_;3Mo8a6siDn-ORSVZfKKC9HN$%Jv-KxIT44cJ)8|N_9nJ<L_KLf(Nfv
zy!lVMXfrEr*{as0CF(9KAxv~7>&@@e1p4XeOFv0+Lvmpp*npmGoUU6K$llzx2bq0u
zjlR595*^gLd5<_$yp5XoOEE)R4~L8wIXP1|>CJ-Xl;!wuv#Kr-Y%x;ZCy0ZIt9~}L
z13#x7J=AiOPzQ=N9cR=d{61UN&J@eUSo)<y?H%ywKVk_<vG$hegRg|RHg%!6=1$`L
zDVANUFA@c47wdsK2XdT{sEM)|-y$pf!5@;o)4znU*H~TApx@WzBQqhc*9e@2s$&lF
z^GZ5OJT^9Y`E*N^sU$uiE91+`&UZz(Ut6T_cq)&bAUP-%yKy1qRP=bq<xJnLhz)K|
zod#voU7Sz8>(|-ge?kGx8J+q@P1oDt4;5QOomg_4Y_Qo3ccz2Ryq33K3Jnbn9l-TE
zJ{&YiWG8iiHcHnkB7Q5P6y6`BsQLIG%GrHfMOxTM`kj~@5QIlCz2}@W)QB1wA|nuA
z;68K(g-icoWG&|nkCSisKV>c41vxb2*4Gkq%bg`k3o8$NiObQobMqB4y83HQNSPr_
zU6B3Pul1Z5i4iJo2KT*iX%x9dpLF+JjhJ(!_j}|^@u_E;*zt>yY^&g(QV->)t0M9|
z8q5g7_z3w^R^}}G&2W7|gRH7y>jaB|pU*036BxW_^F4r<0+X@&n9!N~+*(v$INkM?
zH6(<{q}}S>!kEoN`tjn?O97?DC<B(w;_z^?eu&&>1TeA1x`b=G*&E`5gLHM=YDhm5
zbORIxp1cC=m<<J~Ae(Y^iJ9AB87cu~wv_6SwYhd@ry~~U0}W|J2r$ali@!bu=gK^b
zm8H=GJF0rw-U&Lz{jvioYkjF$YwQ<2ZZ4|ZkHJvOGW=9Db&$-I`of0f0m6@w<GEiK
z$e&-llyJKg7<L<DnKVbM?hq0YVhsW8%I9hLy?>CUT%4o|xWMZ-{Q;%)e?dnph75ZU
z@adK!2U3+wwcme1cFU^0;488yg9yWz_^Xg1y4!k0VAV@m?yLLw7Je5T?ds+2M|(&`
z4u|<AVsxL_(l7wikzU=-%mJ%N<(pnGsTtF!0J6#=@mKCxM!!I|{Jo~@%Q;b`vEqUA
z)br!G#=CZ`VUYdBJ^ZyOq{8P40JFFbc3v*2x{CHkwd(qEi|4IwWo5?N@H=>?Fl^k{
z240!JdeN|oG)lPLY%V<!`e3`P_T|R3)yZzg8u@2>7mUkQLZy6NUss4G<Ph~BrNpyB
zjiniuK-|UE8i4u%8DvnpJtNPj9Y+4op0@9&a%H$)+*b^3?4K07O%b<^RSK$F%&?%G
z&nTYY^~z7lFFHc)=dgG0iFKMH&0a(z{kS<Tty~{7J4%9PtZh>MzSwgm$uS8a>_7NI
z{IsFtVSha9tz{Z?_)@6+htBe>0AiW6FXQ)9`(VTME-`hPm+!;@(B^Er?Bo~TF4^aq
z%Od}mNxBYbM&@iQecW!~)J6Z^tysoOvt--7yQ85=uyGHmqNa+xM9GlFDARvhfG2Dl
zFX6K*Q89o_NkRrR6`1rT?eV6#+5W0eQ2hX9jto*~g`I@($51e}Yp=cLE*;fav4XwB
zWg2mgY(#30s}<A<0v0e;m-Em3kg@oOVIWa2q_B!AQQ7(|^st+t#~!<#0aD6JhA2RY
z)P9!r{Z|73;8M&`9r~XW9x=SadsFef>nKZ@kNUZx`$`hWqJ2z}d(ics#W;I>)>Gq;
z*&uaY|G$tir3WNCvlba)*Sy>-Ehxv?@!V&-AVC;fZ*~k9@L#f(F6~p$0*RPgH_p?r
zDuf{(Xk(J70fV{T;So|uhJa8a2lGo4mAa4`r0V)^@zN*VK?S}sX)cTHJAxI2B`F!J
zX2FXp^s8!0E7%Wg&5(@fEC=z}izPYK1l#h7U`Q5=0U$F7Y`=~7EajgySXjr8eXUEX
z{pSFGP)>_0_`voSzF9H}w-~!Zn4dByR2cK;bthTmf&D)e`R9FJUg$y+2!U^eJ|Vo=
z%~sG07rg;Sh^X*skx6~<$_(LfB1jhEt{^pO(U~5EP~*-Xgz!z6kIhf!A*vW;_u&}N
zy{?_1{zQM5{SQ|mGv&PmHt#i|0&35h9Ud20(*a|Zf>ejTN9V@so56of)}0S=SrCG4
zj5D@4%EJrQU7*dWLC)V#=J2JB`DGtx`GM<b2A8J)*WHsnb0#KGUXJ;oqBMx@AtA`^
zfu&b47v%QI)W3`IFUgaKd#xxP<*Rp&>znH8mKYE$8D7#>%&nq>Zwu+vidi6L{D;4I
zVNc;|TL2LuV#oCWmbx+IX89^Wie%{*z2{KrrJPg))eZkE$o|Rma>R{Dcm!!7d=^QM
zcguW8XL7c(JPZ()o;fiFo4e68qY*Dj5&c;-9NYGh!aDrE$2o)TK`TsGi1lIfZq6l+
z0opYip{*~U|LvPhc`tq1R6J+S50@DJD(8Rc`l)WH<zwr(kJvv^x$zI4Y>YeAubjg6
z*A$Rmg%d&u>I-m#C+*B?Z#9@bL})#VZ-D^t#gQfbgC|M)2k1$tv94~q5UkuzrIqOm
zK9&FMZ+^0duukgl$$rFse`8PgIcgx0gQ;d1LcXXB{R#jAw)Ph*vbiiYh_NhQyq63{
z7L%*pI!co_2-sht2a130aI%9U6?l-b*@v(>O4)7(=~yDL!w2NYa0X$G*#64%ImN?_
zoJ*tO(-*Bi2#?BEU2@Eh!7YSfA&8~P+nW>w_5_Y8zooZnB3RvI`Q^99bVm;By1)0v
z5xAOQxIIJ2>S|n52$l5VTI&a%?TFq^RBCj`*J^Yr?wWS<r?hUwm)})wC?SzJ&4}LR
z^EEM&@L*2p`bvb9@Bq4$30Z}gHS%RR(=WY2tL+H#^5yG}>K{G^qcAYCh-}|QOrC<i
z$|$=&y_)9X>>7E}IsHyhwI{y$pueO|acDo>ZBo*!btTC*3FrfM9N#Wb+&m&>d7Vt%
zSS_`B-wQQ{rZmY2+;rSxk4|%bFztHl?tRDY?$uZL!z6eJNJZkd8Gu&hzKg}Hq6Ncq
zvaD*hNt1doMkY4H*tX0RNc%KieRgl7eh_(aczhh_L|LudriM1RB4~d&`)03o0%LBu
zeVpcU9Aaqy%vIu=wo-7*{55;JkQ4eMKi@_UqHT|!FPPbR@Lr73?nFI*)WU$Dvb^x-
zaqJo|N@~r{7UiK1omzj9Y6oY`<pzz{`Gj5W*$ZEQFN3rz$kL=2anH<Yt~*XI*b&y{
zLG(@Y%3krs#*AWP=WO1#eZ2;l%cG4q6+ORDcyYVA-b`)aSLRwE0!F7xHBm{4)yJA<
zCLB3cSp-h*#wBerr?gvN;<^Td?@M#jvtkzeT1|@+<q3}*2_SI3l(jEEqrvQoB)C+)
zI3#{Ci4q&&c7nm%0#faD^d$IKYYNjOKqHmk=w$YlR3<RUIY`O6uF6d4iDbu?(J#>K
zr}=Gx+mGmJH+{Mr4kEszw5;vUw{x$XT;iY5B_gh`PtB5amQT|vfB%AN*|m;%M_hby
zi1Q(*?uYL1=Q=`pCo2R_EqQ7R1FNJ0I?CnB@;nq7nW1bTFkB#UBIMlLV1yybC6RYG
zY|Ko-(qJ$|m1Xu`=*z?^kd0?+|25dRhK3CI-iBgfZ=;Gw<Jga>e=sLM?FnrVAA>Xw
zys%(JxU}wA`dsW@*AV)ezdZ)Sd<;)EU5EaeH2lKz_LKrQDKW6MP?0t&v0>D2HgdK^
zCp57LbpX*!B;RcGgN|n*AM%J{huu?tX$^2(f#?1{XKHb7(0=cy=vqwv^{J#B4XLiI
zw^tuKTe%(-<27DaXA(wsK{*O~f?mM3NB?j7t#E_NSSs{EqyVmIgSIV1uea%PyZ(sU
zdzUOsqX99EB;+?2W+toJh>SNGv2$?rxz&R75Bragl_;OdM|kyxDR(tA<`9|6kJ<MP
zy9pxe>v9OO<0!ClGI*7ddF%iN?`^(Rt=*6bjUOBYw(q2|JEzYBCA!O#+|G67E*~{5
zVnhIJ@$TGjnBotM*1X-`;_4Nt=5q>e5`4e1soMGs_io+?QD3VC4#?w_;vArLc++{E
z>m)Rqv(%_MWu&+dm;b}xYM|K4_1hB0>?$@DLmQ?g&EjGYx-Vd1yPQ4wsY}Phm=<ff
z{+oTqS`wvF2A?{*-imFCd*rMw>!F#1l?@NwJ3+#YvLawLoC01_>WMoCd-A;}<8E77
zp|5JK*jM*c{0z+laC<wD<uEVo`Z_AS*J;nXo+R9BYXr_dyA9bE+bss}l_YDEeuM*b
zU{7mGt2fD(q;an^Fh}n=$G`vn3m|c<A!q*KNK9r$ma{%o_|^W#VG3IjuqH?C`z_u4
zg_V_6sH{4dl8WOeYCra~XLfo)Z-rG6`wLUyx<)tA<L~h1pra7<m5N-wS~eTv<<-yJ
z;fOd&;k^28H!dy`rUB)`ZSWyifuD30ttiemS*mAmcCAM>4xYjx>fZMTsvcC=vdcw<
zPVGC8`M^*0B2t=+In4X+<fglB$pw(w-3LV92Hqrs_kd02dFh|*Soly1ONcihEKg}*
zBhnB1F$hB#y;`C(Jm;00FZc>e3ZyGrNmuo$?y^|L^VPl)dDm|h=S@z|#=0ICw@Oa8
zF|;NMZ1h!hJ!KE*^NSeKLMeLE!^vYlqmZ$g>&&3f(&Cwf-=suc(3sd4lwoyzpNkTy
z%(nGZXgJT-S<WVJ-sZM@=Lwx9%rwNJNfAazW<I$`kxY~c*<(kmO^YnKtgX-b-Uy|a
zS_K=FFDo3(FSxB~A-^SDs5&tWe;DZ;+pVN)MCnW1_V7gw6PNXbr6g!CUaHThPJe`@
zj9p!D+U;`5(WZqHB;1o0m1UjV04S1O-mJyBRqMU>HF#Z%T^Y_kiMpg2A2-=ZODQK3
zijfsNFfPM-b#tw7eCPT=DH!Fx55|RXTsh1A=p+rJPhYc2pU*(ApX(QsLsxn^-08!E
z%jt+k#INJ>5MgZ3-HVl2?}vA~wlfmyeD%k3zd;C@_vT#9cI0WbGXmSuiPwnYtN<R6
zH}tdjfi2<Z#w;5M2c9m8h|+S(9@=EMwYw+c(NcK^nzrlTSZsP~mV>op2D}>BjzDRV
z!_s^1%1F!2P8u0GNg`KnbrRqlChdvuRwa<i=V{WvH9hUu6l+(7D;ym#{vqle!cAIu
zRO;3lBdm$EhDk+xxGU`C3%A@1damZ>ZEE+ngJR}(={!;0HJXU-Vg0i3>2An^Bv^~f
zh2NPO=!?ngTglz>tQ_*J6_Y{wgm^i=vE`VULqp88u@~NzY%U<Z-D2AG;Cc+O!`xZv
zr+Yg<{R8`3W>Bw3LVAT?rvBPD*X(<+#g2s*+0;W@&o3!~TiLct@2}=|Yek9zx8#am
z3fMD#IrAteJR)vcH|X&|9XBHlhx{?uQVer{EW6;NR&R|=#VY5kYcUHKDr;r|7>?N;
z0H-e>-PG=AgE_>lpi0<TX_ej&k@B}UG$^nwIamxx(2xjDxW`4Y4K#60RYL1Q4kSj4
z4fjBR=()6b2(`1sa3=uJ7Sk|+RPa=zz|*e=h7S~O*E|B>9`RVM6++1WCYV^fcKdZk
z@WDOa?azQH+Cs#i`Z#&mB*g^Hlm%nLb-KUAJ)Q5d-=C+p9%r|)-cqq)157?Pcm+vh
zCU+Z{AH^!{$BbqYvwG~C7T+Wj1ZM!<;atgBs5)45>|O6K-xrlzvD1*))hJ7g(x9h^
z1MYugNRGI|EVpxqWDz#}e2hXGNDG53xttaaCpTyO?l3p+7LcqR?}{TcJ=e*2vF(G9
z1)eXpsY|rsFz>N99fyVx`pU1AR8x<$@urxGGPh1mrv37dr@fG1X!`s6Q;QR2k3zHx
zlr6pYbj;Hpq?)(CAtCG?0`bitSuSDt3o?IPGK?9-jVVmwL_3&L#Ya(C7*cj2coUU3
zf=oqfPx5G}ttiiFDdYg|Zf}H+7m*<)IblJQHAO6>o<&dqTjAB?P47|v;vZI<P@Wm~
zY%nFb6K{@gUYyRiUPl|(XN~Hi%-Jo+38N12Irf>gcx@W%jpLJqTJEJcJuRI8q3w_n
zezGeF1Wxs=ZK@dnDanRCj^^Law>~3IPjj0iNh)$vV#N;hrK;I3Cn%<&TPHpSrC@(c
zeQhBvB`X3K8r>5fZ<d|ANx6(k#0RP8JY7b5KMw~pvMv49iS{fzC;r`#AiTVut!6z)
zTuC7e&90H#bJ*phkHRrNde6mAH^1pR7ctubkJ~5Dq4l-3WQ=F-FQi_(<%%0?20F0M
z>=yc(M^^E>JvRlFer}(3yC=Rb7Fn!`)HS$<iK|j3Rh{;yG}^8Cr#&`)!5)u`GIBMM
zLhk!)Bu{?}&Lrlsd%@w(BbqcK8cwX7sP?OFV$`}H(+G4CW1Zg_qs~2hWjwR>3&FHy
zzXYL$!S3GkUh@YXQgt_vTEy3>_rNDYx=eC{eHK$^p%qfk8`XU;_twv&XSL@F*oWK_
z971jbzuH-VLCY#hW_%>fJt$$f3fVg+r1K7KB(%d?j6=`I^>?2OiP6*Q4C8fk5rb6U
z;5WM$!z+AG82TLOzv_<G&)K6q(8pU_Ez5pO$y2#<ZL)eC2~NZLMuAl9bUNyH{~P$T
zaPW7tgsd-0@2;mp+!LOyr;P<Sq<U~P)fnk5tazzMck?JHY5)RDZ1v*6Qa%1G>dhk-
z@&c`JwXU0giAo<l5%h*$)yblp(~Yuf)!?fbhzO!%ndu1;%Rf(%A45i9vkW$N$HHde
zvt_`g(sg*JVbYqeFDx{5IL$jW!9P<s<GCU71&8wzU8Jxm+FrB&xN_ZEmZfao0Di#E
z?AMmpbH?lO`TY*P^n<1flo|Fj!)zYC{<C;{RxEd%Xs(In5T807iB>8!1E|6@{el!X
z9TU;qxLCbc-D}tD9GkiM9d{-UqZ39KMuWZ`TrS1B6s*@=D^;M5M&_|X(DUBow|%hH
zHEH89_|rco2uX|O(R9?p7L*VAzo8o)kTmD~`u1+)>rj=kBG&L~9Y*GpdA-*!@_M_f
z>+<QJtUlKacU2vVHIVZpzCLTOoAbJ=<Jk%RA(hZLHX28U&Ci+7{V0Vq&7dB}tdrP&
z@ZEA$4e7Cc?w0FU!zd0oFOa;AH_9|uUH5CFt0<fC@gPu7mj?E_YHp>djwDYV%3<5r
zM)j=~oBK#9SvhUdgE>gug}kx%Xuuo-&8upi$>AlB__%S3ILz;Ur?<)U7Z`71QlCuw
zD{ywHc6ub9AMY72yzb*?Anft7iBMegz1|w@S-iow75+VSV`eumd+j~Qdj{Jj<y&ot
z6Ekz#ZxWwq9Rl}0l>BDegI>T1t3<r2dx^|yv2|nlJ05+7rC-L+?^VZ|&Hdb8Eoz?Z
z9=17ccP-6BS9OeqH_UHAUK{2S4ckMlN3T|{0<P-^v_n_yr$4&ZZB#Wpg|a>c)}J@&
zpo|T+{IE~m+T1clC&A5={ASO<G97R@`MOC{4?{hPIJ>0*$+Cj8^z$?=wsNbKxHh(>
zZ96hkxAxEMJo!4iGy?Aix6LWo3b9ZrnGB5;b~e4^Zk;SPwvAzN>U<#^*C1)Qcyu8b
zsN;s2cLP$2qEFbEqrI$mB*G3v*T;gd>g&<YGen;3wLQsi`4fLnZ)05<<vnk9MjdFl
znjVAAn0f9l9|I{#HNn7%OQ7$LF^neICj@{d#_F8~@n|1dCk?EN!uv;0-!{5$fbdax
z+>eqXYJX$Qj8AeOhbBbYWR9J>DzvdmJ+{0jkoD3_J8on3MOo+ynR1k|{9T>(Xr56f
zi(L5rWTwK(zHN^)y+acPpLwQ>Mvjjw%3g~)W3dJATWlLg7A@O_g)JLhy6ZQ4)`fLc
zDOqko`}$UdmT~d!t{;J}$J$xRgcCa_U0Nu#)Hd(YamF(EZ{)&%3E<Swl7IJ_<|1zc
zqY2wtTl)tD_GcINKP{$BEy65l035`<G;h`_;n)t5`XIQtYfcgJCSywXUK{-f671<R
zrItE?B_pn%@Y63`OD3JAq@-dKKUtnw(^`!NOIx-Ey=_+da$Ckg2S>ZzwA~TIthR&+
zSaUZC7Z6(gB(uTU&-C6KZ`7d3A4Q#VfBl^#^_#<Y{k78)v?N@$-v%TUIahxKaJ*Sr
zHm4j&9zJcZJLC}nTMS5zL<=BE(NIuAr<e*`E?_kF=u~+AT*Fnc!uZ{ThT!Ejf9SMt
zul8Lz#HR#Ya8lWl6LP5`>{9`*T&d4AuWOPLpcf}Rk@}7?6C!JOk)u*`miyB_iilsq
zzx3zyM%kO;x#cROuk*GP%r;HrBhwCNwYc-+@1B_AldtW{<I`Zef?{|Ex03WMPm8y@
zG=DsN0j>5pTFBGBsjmyEP3IeXC&^U$4M{R>fgnCAQ{=LDGH^CxmTdm=Gqv2@1Wqy=
zp;1jv;<{WdS^Z@Q5~5wed@Ts`a;-^z_5&;4z!P}#K^~8+;XW^_IEXSnqD!%UOc};|
zCM(PH@#a}J2du%l7)pE{du3fG)c{g@7fU+kE-`=E>-1YC?MSK*D?5`qk^@gsl-*U^
zn^>`ClD|BExdvnL!ii^SOJjCI(Vukxy1s@Hl+Ck0Z6S@2G)pv7Px5}q0$;kHcEen{
zE6!Stva3<}`g$d9){K*l_%b<1cj?p8SaMjTG-6CR2cv+{Qxp<>JUSP+YwU7iY~gFf
zCjXsK>8QoAe_Nf%1;t3HdhYn6IxT9+Fdt?O_3KOZOPvm%ldCmN8G*KGyqE3aw761j
z>tlo#PK@Gi9My-J_fZ++2BE#)YP;y%XAi3^JOI*G5Or;hi3ZSa@@)BMh}{F{u;VE+
zw^(=A7dF8S0-PwG<}fY9MfsJJPWf(utkUDFAZna%GNRflwY1r!DX>@kN2e!z>3S9%
zWKQQ@JSn8ioWdz-C1iB-Yx3HbXGTug-;nx#k4>X4yOG`5DF{$cU}qhN-S?_4j4N>K
z*J*b4Qpq1C+=sC#ZJs%6mwrN}&eUr~L6w$l&7`s;A5WU)JImm|e<!&@?<XB9!waZk
zqb1z%HGiBuSxg0Hyd_MDi=}|pG8J+6MjFG4ry3nTZR79t*s}X}snd4mCe(V4Jl!~(
zebA4DM}H=z3M{;{U+)d{A^tUX2GW!h$U0_JVX{@M>ow!g6@r|bVzOk27g3VZ4gIlW
zX5WV^>=lXu_#o?Quo<41-|%=BT#ypI3s69Sw*yV4+I3@bASre$*S`Mt?(*}NG(+P_
zH&e{Yg~=j!Q+q=t4^|E{X-}$OSuI)mw~hB(sAx$DXRYhQXlNZ6qbFs&<${<OD#Z8S
z?Xb^uJCH2<OqwJJ&B76UZ@(&XA&OHk%}F&~LX;xUPf829YL@A-@V8|i=PN%*ubDc?
z7(dBne9{38-wUZp&dGJ~M#R_`zIgD6=@J&6WHY{yA12z`9HWlYsFJe0A)ig;*c(Az
zHt{QsY#{EYn9Q(CYH?a}2lPxUkvY3Cr=xfdc3sDwHLR34MW@0xW#hS%Jt={BJe&I4
zDz0$%N3Dwwl*I%OYKfk45gA!qX4P&^UFR#3>gD%zamQBFx&XFs?wDTPM~y0ZEO$zc
zs;afP&Egai{<n6D{T$w=^Q%)9XaGz8Eo%g(Mccx@wKEbyeTKMbSNZ;UXSq2i@op?>
z1Q<bhFVu%V!sxdf1aXM8-}&9(%^D}v*eBy-6<>A#raHin&vLoWqsb!8`W?7t=eGLc
zs=WQhh-*v5Oh}?=$&o^3;2fbmNe-LJ3T2tR2i=sDj$1HsiSNgFrumAM0Rq%-)&^7?
zlMyMsf$L7OnF=~$+$E|}z9KRvg`tYf^R+is>2Ggo-=t|p(`_JLNb}BqW`}YE!JD~_
z_g>FZi_?&MU*o8qV<FWy*W;j*p6eaDL3S*vM;MjMwats9yb93a_1>j3<n$`N=4uQk
zLQ2wyB#vMWekY_Dket^hQGSuOW4aXJ%Op$L`kAF)ia1CYG4!Q|jk)rU_6^q%R(~&S
zHcRmxHHoY!+Y&xrUc<z2x*sYB`QcGN_nrBi*D3$&EIt&Q<BS7hPX}Yq$V)1xao@9t
z+-lHP?Pd$Wt|Zmj^v|fnG^B65POyd0?gth|+s>fYESv26jf!jz!uDYBCUPGsau9)X
z$1-~HsLSm8>*uL@lSq6UUeGruXrm{&TFwxUZxC=X>~j<!<1>N~uOusra5Pppcb~CH
zN_7>hwBj4J3rTYp3OVkeN`b&k#+{#k79W@5Ft;l=eR!wiHpj)Q<w3Y(BS<bGmGvze
z^KFltXIm|R?ucKVLZV@%;NszPkB?%1)U*{AsjugIHMN<vQ7Y{tz>Uj%<1?aen<kYR
z`yvj)E9y6CL1HusIms>(zvV^lk0hDewc=vh@Mh*%8k$k?dv6x%ImlWnQy-~_ta-iN
z>7R(1yoE`bOw9!NKDFbqmGoXs$8du}cX!GI?K;|%ofDL7hSN|s=pe}((C3qok>D@(
z%EQ+7(%oOr9=J&bw)UHPY^qNwd4C)Ydw7f>m?7Pq6#Mz!0B<{3&v<Bqz&GvOtf%>N
zz*}tK?dFI15%);&%|xBanplrh!Y<9xlOH`9W^Fntujk3Dqxoh7>dYa>@-_6rMoDS|
zShLGD!%+<I)3u42<PVSmh&1KezC?eShLo}KBb52Uf&W9?#d-VT&<$=E>ISQ-@Dhaq
z;??gXby8yR6EXn{3G(yfv}CT_e8TpEBN%Q8qo*Z6)&55fJTsR;@O^=+3+%Jzm>sV^
zaU@=8B~YT>-=F34`sj!tb-Yq0>qCdraoB^e?JC85h7J@2a@i#%vv%DR;UU*y)1{SB
zsN3KJ@8{m1d|AL4&@OTTND;r5z-kRdao|k7L`4AUUAPICq$6l&ArlH(YCI|Fcz{$N
z|2%-Xg)4Xjp04scgw#v_mOK9S?B@UT^Oleb=hE2ZSPX|_YdLC-ket6qD8He|cjaEu
z$8tuCuf^AB@Uwa0uI+n@0xQk2=K$vUVvOCptGS)-HVY1l##Nr*caUBvj7Q5PtjZ23
zNGHc|dhPi@zhVUgmW?iAZTt+Cs$3$f#ln)&_59~#E!Lo3j&bNajyQ4)fROX8Ma&b*
z0xJs>%-5?Z*d7gEnDHjzH>NBjp%Oh6EM<)GS7-O8U@|a~0{|TIacumC%G(F9Hs%Tk
z<iI`KBfJ;-sMZ+jF9N9k=B`FAGjJi;XP;^C(*3BIin`E6ONzDkHA&$Vb|mFJ*Z9ot
zjFX0`*ui`?YvnJuwIYicDA+u=d~o9KH!zsR`RnK+^cS!b1wS3ij=W4z&_q0iw;1<l
z&|oM|;q_o|e9I7x0sJm4pNp>>f^Nx;H!@U;JKs`vH4uyM9#y))oHSBiA^72w7@^M^
z0?fKCP4rzh8DA<V+A$bi#Mdg1SC|J?V4V9boAY2%{W08IkC9GfvQ$gSq^M-G<uH?P
zVJnwx&yt$?;pg~`!Gc;L@*_^g#T3}*Q&o83W1Qj|i08f=h9{vs1r;frCH|~ermoQr
z;>kuPyYjs$t7nMqht}6Wk;w`Q8Y)f5!iPx|SzYs`uJt<APtno4kYu6_<k5*rd?3WN
zQ+WNHiJG##B3guXo>V9j=Q!xDD8M_^1r?F!g~LEkCzJ$T;ZwfnDhB+*O?}WPHR5w`
zMea7MIcB!Cn`VYp(CdWq%oLX@Nr$B}o9M3tiy$X3ka>O<tG|kovFm8KS_?=)q;6%6
z4O@`WFR_#~3NNm5m@`gZU(lFWy&&(9cKYgH;1$^C#u){D%nxW#%tQ<B{uo>LI8&ql
zbhPp~?hBGF9}j6dO@i{y5<Sqm2lh_h$nO^31KF5w<pp~Eeou}<B5~nTnfGj?ju)m3
z9pUl4f&X}v*Jl2bsG$cp{^G5U(oSuRskc%+9a`p@HUCFmMIN;>&!2VA7^|zWW{Y*+
z0G4gBMcBt$ad!_3ifN?EV}?|Wt-dx?t=B6`Ztg+?@wfDHV-+D4C?2O9@%Puc)<Yh9
zj*VUZZe+o1cDn=Kc8wW9G>UZH7o}rjcDo+G^jXP1Rb*m}37^AAF`Cz=JK@$#hBcgh
zZbz-?;P_IQ40o9<3_1+qkj?V%MUvf+D`db4-+k;CPkYA_#8HSsaZxTwu@U@TX<-5F
zd#OQ4uVkU<&IUVgvr~@UO3NX|%`qG64$}l}##QWNDck9uPTIP-2O)_j^R@S9<j)2N
zfiI17T~uQ|gO6X7w3N}xqh_jJx;k$sRe0@7P@~JzUzzkeII?W9Wrg;V0WlUn?&eIY
zW1#g1#ZU{uT)0JeM>O<+g%$i9P!vQp%<2U)D;x|L7*qT5xsUmU1j!r~Er@s-XUFc+
zP@)I#?-o+AK{w>@m>+25ygL}IzFPPmf$0wGFNkH<6g{=qR+nxrR-e#UZho@04Dxg(
z^!Ig5-xNTe^F);YHtaRFV*OG@;@x6fdQim^WJ4ZJO+Yl6a?B|!fwzP_+y%dW`8Dgq
zCQdCyV;j6~D2LIxIh&}y8tREoR4hLe5_YC+=z}AE`Y(mRGv02dJwH;Ct1#vN>S(pe
zx{U}{(%cW&tT(0&9OBflqyW!Q6Li$cr5UeT1Rc%A8!j)$JE}#Y*6oN{I(o6xKVEqv
zd^UXKZB&7jJJZhGE6z|w`hD28+;xYsQ$Ice8NA3HUj2}h4d&5*Oi8boTUN>&3BeqS
zL|8gTAj2QLCMX&S7?55(>T8(}Ip#bj76sGAQ@8*aekgQny|z6JNkzkv-wlNx<Y0vK
zQg6ODp|H?q<_y2cO!+<IzJ<Rw$2sa8Cu_rJcG$A<oSaT|Xznc?&u~QpF|f#*Vq;6}
z9yo>N?%I37G!gi`RR<&F-SN&YQ*kY;!x3n=mX)wEbu$MP=qm)p7*Lx|8)qF^46qtm
zuuZ4SBn?C+Ee06&b|f3@%KE=WX-KmZz??b~ow%!xAJctHQuUfDNJaqAi3wd{edjLa
z&J8oFj|WZp9!tfQYtYZ7RVPx-;PohfAwlXG;;w3cDtWpL{5!0K&mtb1ADxsKgb=ih
zJCKIHU!Wn<WuzhsCzr$VQLo~RMXum~5qZ4vkhEww#8&K*lOnZ}5*Ql|8Maxda$V8>
zH98RdAme5qUMR$GxJk%QC1!4F)xc<QJ6YZtZU%gRwnudSpp;kKZ@1ZXuj8Pb_WJ3G
zxHYFav|<dB`4{mP{!+YMKs9lLG5q9zJG^`&Z&PsdNQZxa>7BwFun(Sv4&MWp>R%s&
zO?F8FWf4q!=Ccrej|pOj+#nrj+Yt-ASw4Bt#i9767n2m*4%NqVbYin`jqlGygs00g
z=t=0`D1;YZ5C5hf(^F+XYs*A@>ETUh`4E|Gf2{8Y1a;JplOzzOlKTR%smD~p3)bLL
zSi<(X`KU-$Fvr3RYw8u@RqM9u=gix?s52F?L=wM3o!`p+Dt|p7ws+-*!g0M1Nh1-2
zN59U~(TykDa|>*3g-;aBf(loy?F>e_Ybs!=L+E`Dloxm-XngsYt0AV3lR&h|Ux7t5
zRv?x_Pi7zCB;l*PcXcyeqN1fCJV>ADs}t_x`weyvjN90H=zR}t9#LEK-NeZPR*tB>
zy7A6>G06K4qOGYLx(YsMuo+<`BLj!-TrJh&63>$@^C>J+B>$c!Z*Fn0v7CT#3Y}fb
zn?2@0R4m*$vv5D^SK^7tm|Wg4;{Zz<IR&{OH8$k9DVw%VO*Q%kMO@V*IeV^Bzw-lz
ztnBF~lq7#sWV+W~N6zqa1cIbH_#T4qGI7RkgaqHh>?bh2KDSe`V-1&7I~1{E`_W-|
zi8d5P{(+X%9>v#PVGh$KYYtjHG--f_Fs4DE@B=mJSz)WL&Mcc%Sd-d!xcH8Wq=+Dm
zLqW6lr;61!$g%8GW?Aje(4LDUc3)l<7Lm1^50_oDA>3I&U#z9!$(xP~*J#BxH;u2?
zHJ6XW0bXlBMN}yUZXkp&6OH%$L^%Zw653j$a_*OhV<Ptx5>tkOln{#)V8@K5R&+{M
zD)P>%!kfv<1TWv~IQDJ17#a;MN)hf?4hP_h`AKDFqHz(BCtMgQ?N^SymKKw1{fSy|
zB1hYH8}>mKL);esb2wJKz7XU&g=rVhF&2HCu@+T%c0XhCc841jEz?4taT_2Lp&jqI
zot^~zJ>PGenapVZaf~-tT=w^u7UtHkIq=lW0^f90!w^fhZZ{u%B|==!P`rv-pVbwy
z-V2dH#k>+Fj)%`Q=-^F6B@%^!i8Ac8c`xkY*>HnS=OM7=K_4|$$S6P*HjT9%Rj$v}
ztLdvVr2VBmM?H)%@0;c|K1K-ed7zs7Qhd#TeRZ5geXYMMpb%C5@=?ApZJXKuUT783
z@EAO8*sbR|SqO5|1QM~-BjxTy<XkY-lkF-20EK;iIdFIvBXFyZFbpDU`Xx8;T&NPW
z*|`Ckt^09`N^xO+vzptl@ZnjjGxi@o$KrmN23UWXu9Ji+12lqsk$lrzG~ma$=!n%V
zj(iOGAss3f@z-KY6Bi>a(Gd~%9G8!VSAeuq2%yvRweNw_ie!ca2%IIL#uCq(DDSn}
z_8gF`pe$t7%|A6C$Tu1-ZTz}s#gt;X$5Dg|n5tdYT@RhV1&&U5n&{-CrVq$|RSSoQ
zbmgeqtq+BsHiCAC_|m_-Nq={IT-YexZH4@EfXBZ*Ub(dm-F4!|l4V{7bbA?`4@4bp
z%^Ke=A%9i^Ae6QUTxq&%=`j4h&&#<i8_I)p2mQ0F(v<hA@0|c`;Pw)~cajXGHSFke
zb;bL`?6$C%5)?+q{nx{>mvFic(#mK^9fd@u_Q*H0bMl@AX8So6h|tnf5x-Q0HVRC1
zRhr%ZKh2$IR8!l#?op5;NJNm{1QguTlwPAC1Q9``gLI@L0i;NmDpI5<pmgcIgGevZ
zi=l)LfzXR|q=e+I#IpAu=RfW^_m1=7@QFZ1)|_k3_2!*(KF{wB{cwF@Sy}jo=i`HQ
zL8qy(V3Kf4+S|_4b(}t^*Y_MB>V%%O^(rJA@{6j1;%=2H!{E$?nwe;alONAyT5~sh
zLO9!@?yUFfX+&as5J$-O*?^Ra{iSy^LcRV1k&W3jdZ2n2aZ-4iH_V*vV|YU_aiSqY
zQBtcq%wM(q;jkgz^>Rpaj;iKE{2Do{kGYbC>fcRNCe3NHx7O1L1|{i{M&*4T9lguO
z@RDTYXCAEs6~DnlzsZE^J=do?S|=7k;!f_YT|D-OVcq!>SjnUO8p`C})@e@#3sU;@
z*h<6XEoCEL$GJTh7cYI!^9d=#m4Q+<I`85g^1u=|cHI6NRWFsVP=wP{F?4*}9y~7S
zH@hp&AROVqke-Yu^g1YJ5w46l)*DJqWUAhKM<fnD_S!~~kuPt3exfo9M@c2FS&CyM
z^=ip?=4SrVkP&#YOhbwlbGB~PRjI-E@+dFmy=%9cjYIlgC&!^hJd3oolJ}~-L4j&#
z;}jtf;ZHeJS9%mW0+M7EDhSyj5@n@wvH(a#Jd2Qt;Kp(@5=epty{puct`!RU#?F0)
zQ=}P)yjEkn^g$1*L)hwrLZtpxYQfPD3b|UJc|3uyg&E41NUiEYcUUQ(G%ymK?>Lvz
zV1L&;Yu+~kxFYPKoxui#>dLs~IeLTVrcluriQ@^GMZy}F+8ye`Z!u|zg*N6EwJl`0
z5X?apXS0*vNzbc8Y(9H4c*{!lgSR9b?+pR^7^&*Ru!5~EUa2%iFNgUbi=sxZ<ogBk
z9g?I&&^#~%GT%&CZqthwKKIH|bdKW-WddUtdA?}^;{yrM-f{jNheY4y<$<|Qq&p^-
ze0jTVua|z)s(YZItTC;rQ{jl^%0u^hS3-nJ_EyY+G$*F)q%90LifrULdliqKW;t!o
ztNTQ}Y4d;e{yBeMlwB%g|B8{OMHw6Throo4ExjRF1*2?%gbH_zM2DMOl~->0iNauj
zxX&Zji?^E4bt-Bb%mLqb(Xe)Yt2wdaLB{EA7=iB{p<>l@$DJkn#EFW7xi+Y2*GT^I
z#r)PNpGm>bDM3QU&L;T7f@5SmQvQ-fr89{umOk0Z*Q>T47n(}=DRZx_4z!-0a6;5W
zXnuX1u^3oK3x40MDHkpI+ZXyVDVbt$t{~zXiTQ$2GXyg94Z=Hkjmu&O`Fd$jC^<$)
zZ;R0z@<20~boiX)^4dt&+Gs!9NW<2G<-IK%tKiOoP3|YlBI=>S^*$%5cdJ^53zwA^
zn<t<tDHIX-K}hZBc*$6FwNgOCgAVQDX5Eal@nZpI>wVUwyP~hZRuEPSCX%my{>W~5
z${;OZduyNzO154#sCwWyRKrjip47U8;$HL@D=I|>mP<uG-si2Djcg|0eC_U*8Poq3
zP|t4{7P;#&eqK@Xfz62;@rtlaF2#Qd5x)bBhl~2Wu}sH<2w|6(rDQLT`e~W6T?mr2
z;ipFS?`_{Ux^Ll4X}mRY`DfsGlWxa7lKgmkHfzc6wCYEnrt&7Scxh2wg@Om$(L;uw
z#aU%cgOa6arI*-F8?7?5!oyI~7wiS84R?K}TL0Gw)Ee?F#90ctyPP$|6Y=l2id5Sa
zOCG`Jk$G*QYQXqNu6VguC|7~{<%=s0a-LwqhH()L-3vr8S}VvcJE({JFl@J$f_>+c
z$n(XU<MLo#bBsDZJNtpxhi}k4j2Q0@ARet)nd2tHpGXi}UYykg)U#}bqcg5r{ca_N
zP(mu=e+jq!VXf<8w4K{0<Oa)W2&_t4s;=FCGcah>8`X^4N%<vtzM)<JWhp<ILU0CV
zPJ~rpuhvKAO38w@T=syMII%X?J5m~G4K_^I7jU!PQQdVCw$Rn<5IWj({n1^O&`_8-
z6%@`h^%E;akRGgZy{RdX+OjJM(Cl&?Y(F4$Kb@l_=lYkF8<55pJ4JM+3f<a@#;LZ=
zGY)2ER-^5XF#Xa$wc3BnvVn~rX$N|IxZ%K5wjy>T2uUF2=`K`tUAk}L;y)GTfH0Ov
z%5_1)g<soFRJqZz7x-^D<^Hy-)>y3N5i<+>PZhAjPmwdAh2vK9sN5~LQFb~Tzij7z
zl=Z|`&C}^-L$mt7bmV|CcIKFzF4f!AkzDX;W8Z;=tl*lL>nh23)j*+Cy5eW_2B53O
z$>4WBjjlG3+;UWD5@0cJX>6<_Mn4;@i`>Kt3`}!-5J@97(27r*Od&y&{s4D`UiV7|
z7`1^sFy12)+z;7$WN5rjImIlv^9gJ60J$@OlCSyS|GZh5IsVPNUWI9dteOZA$;)-K
zd@GQ~B5Zy;iA0xkIEj_?>S@T;h40C3;k|g%CtDdYY1lj-YoJ})NESWYAK7t)mbjH#
z`r92Ol8E-D?&Jha8S`>~s7+Y=nhb2xJ*St_tm>*(%qzC1n#&EKV$UzK%<DC8M`M;L
z!?0#?^gi1v$nu>E)FZ$gR@5QDELX55<#}|KBbzra$-7mRhK{zy&h89kj3TmGyj@N0
zZs-vXSi<fr+H;`J^{xHg$9(rwMZWHSbPI~d>@F>D&&}MZ4zI&>=U+~vOpzyOU-Nwu
zoQVnNx~T_=Fh(YMIX8>hU*>ug91uWYWtF*vFsjH)q#AGm+(cOe5xm1cobP>{xN+?o
zQv`k0aXZ7qh0@~L&zb!}ldTa7t5N80fIG={V%+x7jz=hKLFWBYHMkMxHLoa}FV2p^
zwzC%4S_HcENVh`6W&gZZX!f4zpu*#OEwofhS$<JUymwSHn}W>GoXGC#B6h56j9aO8
zwgP7s6G&L>-*q&68%z6jDOGgp^@|VLuJsz~r3We9@jh!`r~JB{H$rzDJQ;Um0_%M=
z(b&qoknjuwcFgUgWZj45P}{0shV`iP-zH+W%UGwYcbBhTa<swo@Gf%M=>8(?EIh^R
za$j*^4b(nf%=zH)vvU)=Dd$cP7>vKDP`%g671#yg{O4FFO<uA}DusFCPUqdU0dF#P
zb)Rzt;30Hh2<K(xp>)(MYa2Vd5z+FUQTWk^Lwg@@(|r<U$zPK%-yJxO;ua{_A&PO^
zhZSOs+CqpNJ{lm}(m(7|Omm*U&YZF?k?2<N)0m?@Li*0F0?+iR3CTM*C>7(>E-5GT
z^6CX8$rIN5HxgJaBv(Y5xnUOp4^s-@*TLDRFd{TLO(yh(c^M|IQDgjHu2-t#$siL*
z6SHZym(DwTb%>^qOb!<nmOh;{h)<eDShO51oyW9=VqG#kE_UsC`eo@1_9+L1m!(8s
zH^SPK+9?IwEOhS<O7Df~UP{;NQ-?+`C2gkC*(YW8hx6>pAN#+I{S^JiR%H$p^onE}
z{<&VPCek}S%**dmxP{~!?GYqPq;*L$A;$OJ0T)~0PoEX4lkpOK2mx6tVV29ljhBx7
zXvkh!Yr5R-wKQ-_t!mOM8en=VtjP_seB(;_+r2i59Azs>rts$R^8w5~Pq8kUozxCK
zKT;*h)tykp#vi{^D0Ab<1b8Q_qqrgK_aFakYQugxpGG{6Mzo;6l=yF_YeewQL~77n
z+A6JU;L)NVA5hE9t;NH!=0KR8m%}2yG!IIU$cdA#Q0J1(BOUE8r(C_Ay@50|&jYfh
zbuWO?2!W%+$<^)7;-%9uk(sB&;FAMIH^;-jj#j6X+&G;?Jj;Ywgc<*OWm=@0W49Gl
z%eKM_L?&2K_NfXwS1|@tm)LNV12gWL*RlY10X&ZPYiIsx6T6T<IyniFdoQ#-KEoEj
zyGo4}$(ubUj`M;LB&7`Kft;!teetvT?k-mv?AGC&uH%mn<hy;AELh08062qexdP5d
z)`wM&H>Ekn8J{fIB4DfgD+1~a?DECngj(v@jlbTNXCrCWIydE2l0e08d@Bzu#hz}~
z=k{Z{OMMD!V&hoO!zX?09icza{kj63i)f9M^dcD#ku8O_Bp)9+#n%?%ktY`ht&7;_
zr(6G0n-eAs3rWmvyr(`=<T(KBieUlFCj(Q37a|T*M8G|_kKZx@ax@%o@b!&)gVF&`
zz1_KlA?j!*VaCIyJf@OGZLx|MKXTGP9?v(+I)WuUcuX0dKCkZv08|_YpT>Q#4*j2S
z!ip89+=5pf7To?YHJYY3^>X~%i}*QK>wfsp;*4I-+!mAZoFBclU>UX6)J(s|H{(Fi
zKy^+A813LYM)eh<q|!5vzEcA!;V*5jaZh@wOY?DG2Dl<=YjU-if+<(OeHH*WhT{|7
z_n*m1f97}zRlCI-_=(hcjq)RNnx4)qp@gz#liy}A;(ewb!b2dgi(Jy?jCsu9MSr&G
z`r+pAi!n9#dpE5R&c4G!wVj(pHufQ~?K8dx^=>S{ByHtu88&3%(0VPa?zL~@dQ=yH
z357@0osU>b@>q*OG{ZQHDv|ETTJzv7^Y4eN!{96F(|eaTtwEP0;e12oo>iB=0>l1f
z4M#*7k$6!ho^=-d+j_4IZ(WRJsjHqE-htjUn+i^87QB7ZGv>s2m{P+Prv&Aob-VTu
z-=8@1bpBJg;{!7fn2xB%G%+wg`YXa=+iZ6<m^+~h`qM4Ii9u^_Fj~MxGbk5r+J^;o
z;r#J)X7yzg)Mb0BLFp6OU;}nYdOj#Ifc>h_H+jjDa?E!xQLWL7jk+~S!=>e04dql%
z?vxo%H(wD|8zKOwG$v2+((1*!DkX*UVR<gFP$G;mmLmmxg9OGLY<TZo4y!LQswZP~
zW*P-FTNj+FsGIioMw>;ldDyC}>CsJFNdvC3hdbra8Vv@D_2DYRn8q`=we*pNhF7-z
zaL>#IQULSvcz?e6XM?e>B&RC<=azK4`tqMQqPXQh3|m+t9crE(kOSVCTXPI16*gz6
z;H_d`i63WRIKe2&ewM*E^bu3Z>F`VK3M9XhPL&3FjS2Ei^U<^m&HI?yIG(z8bnB8J
zlJ0Fwm-`WGJ4kpTDv6KE!+4Hx<@>r8<lIWFGmXnttrOeole?uTMtjrE|C@@JgB^D#
zS`S++GUz4+8J9Tzc}p(dvPu2YaKS*gu4_0=wsf@Z^%ckm`JxI#e->R{nRF>}uMkhq
zt|>dBMY(B~5Y-KaTL36QWmoYjG_6#Ykjm%9;goOJLy?E|9kXXtd3v>o?HcQY+@CjJ
z76a&8+siN|SS}jy%mdvKlUqhC@7;N}-NbUF1EhxLPs`k};@a*RoVa#w6eq6b)A=vr
z+BmABRV0%JPFyQ221xvL(9P}jyO01E;M2+EKxfNe<rqv_e3DU?LaSh)$GC6+En_Am
z-+1A6dTU1JOZkzc<YAE)XZ3{2a#7&A$n!3igJ(=)$ns$aoKiM4*qT-wy4j#i5H2DI
zZ3c8@27nDE7L`5i<-gDJ+vqN;qXJ^I9BYnSWcJVE6)Bi-Wy`_yOM*YwKZ{>~gG!v>
zV+>lBuxT{_qDIhE^xk&;hnbEIr}>>biSB4r$1Jy;2<P#@kJ+K*WM9Bf%>S#M$+w{^
zhhw!V-A%8mzbw7~vY>w#ZWm_mX&xKpVdzOxV}gM;x;|^+Opyg_PL|)lQ?NgyQHn2z
zTQK07Igo;RN+H0?d8+bA&Ehc{K)L}uG{7;&xvu(3R>TuJ@3Fp%;4--DGV7aUGWi3(
z+;!lH{DOKPVY7RFtLxzb;NZ&joPn2ra$=~Ixn1WQMiVA-H94xoQK+gXGpgf~0As!b
zt_%J<DfQWWqTN2sdokYtZ5jXo1HMX?;d?ZqVX>(GEAd}U7&b&5l%>%br9GE|Z}GOi
zk&@&07?O4aRE~@IY`I?kmG+suu_D9>e|kXj$N}kbE3KY)^!IGJJyT=mB^jFZ=R#Kb
zjtZEUK7g9|Y&ks4?gpm$$6mnvKL*#J<W;NnQETIahr+FXiL#L%Ym$jIQv@13NxSfo
zvWL#l?~0^UT0%|z^NM3G1&I~1iyDp+TCx)RGhaxB*c1?rdvcMTkKe*TFFK-sU3P9e
zg(p~139U9X^XO!t-A@g;YW9uC=yKU!+m>Gwi{WpWZ_x7u(EDg6`<x&ZuJ+I>N}7UT
znx(>+!$H4GkyTcW9R{Z_LYK=8xu5d!tvzW}0)3U9DhWn4SZ?s8eNg3NMg;?8zt9Rm
zRtDTchPBrttH8pIuQitj^v@x5m@mb~-<*z+4j}qG!X-Y51;8tSJV>7ogf{Hs76k_q
zIbgm^m&UER!Ja3&)sbZzNFM#6dL$NT0eUN!I?L*T!>hUWEB}sTKzcQ2CWRU~ieV{a
zlQ68HM?)!6tc{3p!S0(+GN6g-fhSsP{vA4o4#?y58Q~TtaueGQJZLOfFVA3gF)RM?
z&!ckRpIMseNG})0B1vrv<}kdt1Ojk?kM~V*X~0h!3Xl5{S$_5qJd$Z}6|0>Y^WNb0
zyxPXV1@Ka2MnYXMT|5p^=+@1LNOeG6a!&7s4g^ADwjs`zQYh#AI9q2>kJK3cW%}{Z
zHyLl1s!sY-(4+#^xC_e(9_Ve!K9)X+5`dH(6~zTgkjsY7vGHRQk(D$|K@Xox1*Uge
z*JzhT0tcVMW|)2MAZF=+z3|Olrb8qc6}Hh9Rkqdl^ajfZpI!}8SDs>sJn&xmCj%>B
zm44>&TFydj(|)2+OEX3Xr*Dn6fG6r$k`t=Q8_o_*%3^}8O|j`5MacK0-s$b*8Me=3
z!xY<D=YTwbb2U5wW6R6UeijVC8-6Z7bhZxb&jE6fsIB%6*CoDLHG<q*)vdz=E}d~N
z=eV@0OSg(6%Wt55sIe4AW0K1x8O&cJN{mj8wY8uZBh=wdnM?WKOhu^yE(JHx$<Nja
zN@#!d<uD9lYk&)L(^(&vD`68yptsHL^oG)&#O=2^am)6px|fsK<nauKBWV0Tva?%Y
z?$b5f-5HNAhnajHD9$&L=uHr&bX+G=CkcN$ljOa^>9T5_!`V~Vrg3^PNJHgF1z=ER
zV90)8#U0UT%Ev0lZ*}bPu%{&HhG$l+c@wQ5VE^U!ZW%yPGrBZ6_db9?;j-}c+VC0k
zNa~Ga=c|3e4yFb{+*&NhHP4x)T%{Oww!<Vx0|Fq%?(ml@Yn0+_uj(-shfLp+4I@F$
z(+%QZz5>^0(3F}3tI6!Aq$Q^$VaC?Rj|WyC@gLkS#?;kST-KeQIRl7OEk?MtbYS`c
zv^`xs(R>y0ghl7}>Q9i=ea!xDs$r~t-lqBmLS{1GT8%KS=^5Bf!ib#*G1n44?sRTS
z;E9Yj+W#9VwX@X~sWAfj-pw5^1!jmy{L8=0PT-oDF?U8vRWUn`l{pvI(e8s<qeFG1
zXQMh+*qH;s6$VAZUU0)?<&(F=0!MEnMtqpP?sM?Wfe|kEybW#xSSrCr#dy3AG<9kz
zf522gyFIVGEz4|Jg$yzHwzuvX`B_X-!FKHLnJT}r!juY>-6Oky9sf}v|CSgaOo*>5
zqZPk@cN?HiQ9zY5TLaq6;y;WMSFi0E&y=4WcJbRGtyXAW<v}&?aP)P?oyr)}nMo!P
zQ;H0~78q>WW5^i@dIyuqPL+Ls(t_oQVsTeWN1(#xb+Ap($KVBUa+~Q+%F-@l45oKV
zL-u4KI=c_;zprK96ab@SO^>EjVf~r@SxN!mDen3wcASy!XF`!eH!0e)7G*xrUV{@m
zfynOm1%*T&wb^#^6u*j*h-+Sek??y1EE;<uneP=G3U0hiyFL1kV?{viru>&f(yjsr
zpRclt9|eb`$FM#tCp{TC42ijuS~7UytBsmbuj`C2>Q-gsne~-0LtVl%P+Qj&_PqY<
zY-o2=xDWEUW<3px29Bvsn5kSCT0`h?12le}`I$T>>M~kwbjE6zWpqwy(8n>fEewtT
zOU1hpW5)MSXk#!O*R!M1F$Zh3Z!u(oi?S#CA(0&YVpi_Fg7kTRI93txy#%)>tj}_P
zw3H6FMj;bR=gW8aoid4;3q|j!hb-5SLFc-^j+k@l@m^^vr-L3kO7|)$2fWh{pXj_o
z*`Cj~-Fq{rr{n&-DsWVO-j58g(Bzau^)RL@Qe5il6VAC(Z!#>LDpdgsr$W$PK4+De
z#ZEbJH@M0ha}W|aXYt_@kR8)SC(pJCd|d!vY4MpFRi9Ty`#*gC4zoXhOoz%o4pWd^
z)0W44IJ~54zMHa>fiY|Revopmn)ISm8LO9d*_iivv)wRG)}MJyMe?Kh2Y@mv2(qOd
zO#3oRwi{_OS*#LNK>FNiz6MSvWW)KUKZQJ-*BGG?&91I8Pr)R8+$y6s|KM`^G%D+y
z3ify&zs#vDvv4{d|JkKSkzgs3Xp5`XKaagRTH1t6-rYL?-lo+|LCKT(j&jYThn!T{
z1b49ff#eFf%AFdc<NT>V(JeJ)pG5`ei>Z>NJf^wLbU$T7|2P9v;Hi8JVtzt&wkDQn
z_tIkUPo`LrtTImmkX8&THmRGLAR$aAmKD^zCWxahNv`j-zWr<Lkvk@SD+|ZpU~2d}
z^RvL|d1{u*hTaE~7)r`(8ev9@PxPV{p2`K9oZeSRd`D8WMBk}CS-ag`B5I)ToFqDf
zC-_}4Fr&lb4IaCESGEI>L6}+3Y2~{3gD!rlT5+Snd%y}PC}TOs?flf!yGH}J7zW}|
z7OAyi`zhU3(lMCMOyL%vSSkBMmQA+?^j<GJQV_HHJV4%==KRbjDFL0{R6wisdzBUe
z7vNw{IdCI=0^(Z(KO+`=kQ=Gz^DsiYz8Rvu3upsIzC8DNMx7CM=p8F5#bDhAX|J6)
zS$Dd2RRXnpCr2W^aL1z}StlnvV4An{O1gf%CyJ3GzU`(nRqs2Sz2wcn@TB5c1Tn6~
z0FX};bL{|_`06*zJ7u?7kotD=n491nebar*Re_tKn6QK-P83A%#-VNKp{+Pom3uJ%
z-?yFlMzR>^2n!l^KsaR*psj~5R2hzlEp7I6YF-_>nm2XVC%8&QEx4+k_w)2PVfev}
zp1}^0XZXqT$>BWh)%MA9A^?T8cs_1SWt47ZsH(6)6u|d-S*J#wTu%iaG;;;_c(>OQ
ztP~Pb`4~WG!-d&7d4FyWq%qb&h<W8bM;d?;G`zZOvCZNo%zpa_gbsrERXdE<rWWLo
zJ*||PEfE9487`N8Gd2nw@irYmTHFPtMQFx=-vB(2{2Za}j&V}u)yED+<l<i~V@?vo
z`%+3VC4oKvp@hPJvp_<8=Vg0zM}U0Yap>=&01Ioe4*b?GAt$7%W`|s~LfzI@tkqnP
z1m0)A@7CY2nj}N+dr7^!`w?QwX!~64EA@XkDUCTuv!Pv+V{3fdXF-5N@%wLIzrbt=
zHvjuN*~nGes(br?*?K?Oq8%$GOVT7Hw_)W+kPNolg}I*}c5^J}s`Ooi<1Jy&LeF1)
zzI+q(!h81=aZKlTA-R0nlY2R@YIMIa1=bdWtwzuuC%91a`fPvqpEVOQhC(A$P3ST|
zmaO+)F=ee{mB?EO$c$CZ%M~C$uh!9lB)212yZ5tXLKa2cRL80Qg2jC85xW6E{<n&3
z$hbm*4tECfUobA|C9Y1Ua0=!(0n@+hB&SIo()Fv{*e@5cNm70RN5t~i-7|1e8G%)v
z1&&`}QS&WrH7p_K|D<_>#@4Pdyf_#~2AwBS!X?$%;tRss+W3Verx9j;7pXt_ub=Cr
zBG@P)ysmcnTYsx3I!}p_6LCC#fz&y<-3aMav?ht70EVi8Dv^(Fu8lHYVLe>tS~nDu
z=b1xo?=HXL7g#DApC+DjNxg)hkjRF$1bZ_1L|&=6Re}FpA7=OUgGu-AYXW)RL^iMu
zA9<i6!Txo8cpGJyTzMneS76%{*vtnCW_)XIDWWufnM!Wi^ru3Cw|H5E5FTBV@+LUv
z0x@;_UU_1zbju+GR}CYw!K~?{o8L9fKb1KIfWihg*|7uyYvqXabgPwg<?#=>5#Kpq
z#}ACUDVy6#l^iq8>G}s=-(KmGJDtp-d8&^qC~;x^p#iYYyD^Ae=gq;fAA_xrP_i;b
zJtUr<IkXyi53=4Sy*?9Uw<tyzVLYu#NLN4g;=8<^sZqHY_|uf9ZBGrudXw%y<{W2o
z(|uj+CgA^f36cN$gml~wa@zyn5S;Hb#3d5{suF{JN^w6?cL0puKMThE#?<|)IP;%X
z%fE`v{Et_O>HX&(ZK;7}yL%eldZ2lMh4BBbR{nQu>agQsz$4`nsO(6^OrQo4-UB)1
K`$aNFe*Xs#A`sF5

literal 41398
zcmbTdbzGGF);=ntAYIY|Dh<*lEiK(3;DB^DLx)JWN;eGBB@IKjGy@FX&Cn&1b4Glg
zz2Cjxv-kP^&L7;sd~UwE*0t8Uu0@!Nk_;9)8Tx|<53pq4N~%40fK-6^vVDSr_(U!7
zt{3qQ$yrTC{6X39vmL}QkIcms#U4DUh{3oqe2n-V&Ec(%^MeQ2oxi`3dhH8L9z4jF
zmz5OLaM$0zMfH9*6;B&!?6i0^<mqbWdNG&&UGO?{#@@~R^&07Lr0q=QI?Ze)h()i~
zWacGpipEQ+FpX~v9B*looQIP?JR(SHd+-tI(VIsv@%afJA%0%DJM<_oYAm_}@;u1y
zJJ=L%U3xJM(9GA@Uhv#n&@R`f{et9nfD71dlCHBq^?SLDT|PfMFIQ)`P}zcp1A*cK
zu>Sej4i~$8<H94UE%Da_RLG37f&9-GAkfgfGLkr)f4(89O`QTZQW5!|<3w4&{(lZ6
z`-?u#ZM$f8#kP|Zr$OZ>cGLjiDL@ed{pX`eLe@cqt)i-!;;P)TA@*H)ZeftXTsc{y
zAR{;hRQ%5eS~JZz)9j{FqK=Kh0g5J|9{=i4D&Nrm9+2fC>*hI_3{?E$uLop;FyO?0
z+bXmy_^*egx;AD%DySHb1+Z*3qL{lx?y|70cGZk{=}fDRZ41j2zZGQt_en%q?4TQ=
z;<qA(#AE(*IRD2VfmND=Ddkh%(3i$^!BaoSNy@&co;rTz=Y$0<KD>2w^2QggooqA{
zF7@CnAOs7AUe&}rzUWJH=-17{)!ocW@S>7k3uv7n&Zi5!<Mk$<?lrE?o4s1ZsL41@
z3J&QiN9?F8{Ld9q>w=LOoW)IdwUc4!`r5yS;mBGWRM}%8{0)i{5<XPyNVc4IYZc3-
zM^N(+vA`r7Tq`R7lO3O5q}iWrC6xlyuAdyJljm7x*6M_dg_TJQ!RQPFa8II-y4Wa-
zI9c6ranuVb7P}@0H-Qg--=F5Ay-1S|clczB?g+j7iGiKwq_R>L8mlq#_d$A$<DlNb
z4-6uvE*-Y-vPaFXNT`V6OZz;p$X`>&2$OQNjUT(It!k^g@EA++p)se1?l34Ur84YV
z^@CHIb?QoM6t%zQE5Z7w>ID0ZAE8Kc7Q|ZV*>83qE!fl459Icb7MC^tXx*ZrBF-}C
z!5r^!i(Z;soU{|dQKB<Sn~4MRtl2KmeAA^fDx*=5G1T3BDflAL)6;WsK=}94&%gZ=
zk;W_hTFZPB3NTy246ji(qAD?jJ;X%SWR*$YXYG1`Wr|(0cJ1})$@Lua0w`NL#HZl!
zS?^O8?Q#AmDt{I(seN$oU!dGw@pl27N#PiixB2>-zg9RIdfl|T4-*#{-pxIps_Mu4
zk=2yBpdt;8;FRGuxA#zG^~yAiv1Fj}MffJQmP>b*H^N{cW55?Srr~=G^TME(Bm&&w
ztodur&6O!lVk0HPWpiA^0}2m3elM2<;?|LDMwDE{pBxwb@#oNlGK>|b@$c~^e!)h;
z?OAcEfn*xfk&5y8i2+RC?Or?Y<a$W*GW6Ozxm-6~lGM2B6^Ho$yYa9F7Jk=!Y|Ea#
z==!C>ke%Vs%{Mu!PH^b)VH@g&4~Lu9q?a=m2ZR0P4Q5p$-IKRB2#1m``3qxypFvXp
z#QZ`YGkjE`eNmtMO~IEWO!V)Vonwx6TikEY{ig1?13WXF8v6GaL+0Lh#!t=WPlZA&
z(5;fOVqg6GcAmRFKmP5&6`+6Y@V|bP8t5nPA=7M3iE|Oedioi|^l-F(Ug|f{s5o4F
z5V&KNyRix{GmG4&Yrkyj8fLG<ze`CF3_E8BKF*-wWpPt;;gPx^1GIWB6bU?bL*^@6
zV9!8J4I?wp+P3P+vBMv$R9V!*SaI6iz+N1Sg&U?|tT_=&{kC8GaUR~HMVQf@2qY?_
ztc&fpN&jsb|HRe*8|00;R=dz5hMd!Zm}w=4w!+9p@Sqtq;P2rDp*r=S82mW=^er6m
zRNK`+5!Rt{yabvDIlDoHl34j+ti<?$Qd+PFfOt3{Ndz0^9`XJLyD!_|L~`<NB`;c4
zYb4bnJW%EStOKVgjlh*W2w9YN_S6^@M<1$nYXBnjQ>;EK4<&;0LqPDJoARr}vDS4{
zc!b6I5`pcV0Ax}o^yh8p_K^xG(oxdmbh?QbPm|)qxN+z1x=*ELcfTVp08;Z0s0<u$
z?j#dVm!z=4J=d8?Z%!Gq5F+mzkkq53)4hY^4Z*2FI;~3F*V>_*Hz;uU(g_?M*lNy|
zGSXAM+{y(<g>=9R8$M!TEDgaiKpsuQP4KR{Tft3xtEib0jzgT8F86drgO{`LSE`fO
zlHI%fT!KmqHT-E6HL%LdH>+ZZ*oP1J1NUFp!F67tcH9ItCIs=7941YjI>UU^@1_;Z
zs=l;+Hmk%Nx-kYd_(@ksa^(X3dUu81#PyR-RB%Y<i_i%OM{UpBfNX|Chn@4{I|nn$
zTRSTwl|!SQd#W$^LAGhKw#$*|$%KQ}lbM`w;lsna>SLB)4<T26&jnsbGWe0Iu33VL
zc_i!X-UYcz{L8ZNF2GF2R#QE311OcJ1CkMbQCwu$a1-9#LU=G%SXB-*jX#_DunSd^
zSPNH^iXQyF-^j+Q?q!ooU!Y*!3@$%2SWQVIQC8!7G?v{<@+k}(Z+KU5w^{t4&ZJ8c
zp))0%%FOkIWw<E%xR&KgKM5Hh2NB5-)*w6mJg|vc=r|&zC~|<Jt5d@&gpUIl<dOd1
z-mnjYStE0sBeBc{%(?vJt3wqn@5&t#0__@?=ygv;!?2s>G+Gi1a=?Dl6Wa5e5d?YK
z9-&p7!_||OIzzvNL49f6id&UK#+~nvMMI-8&5Z^7TC*ekVnw9!aS(w$88QF68A${<
zUoA@NXsb^`Ba?xtDTVarC<`-pt)W^@!IjI}{OX1Qy6rP+vm>E$wfF!T*Df7&g#fnj
zM$|=OPQks##()AN(ZsMQr#?TLlny$cr~&Xtt|B13jqWF9jW%(;U+P-jmFgt)|0^Is
zBcl%#!HXJlE~}_%Jh$ecjWm`Q&bshK$$b5-lJx>gao<y26ZH<C;$0R=?RSUh=0*$q
zO+&WU*+}f^<hGKDY_Kw6wz+p}{j~a9l{NlBseEU?WW)IBX<0JpN~W<X$EY{(*5|Xg
zB&wPzT>*#;NWlTnfciTZ3uOi*_15Tu(*=?&xWN7OUk$EP(}IMC2yc`?#oIkxIB(b=
zO0<tC7^SyvyxOA*3+Kf@e_umH_F%0KAjW+SujDx4ogVIsAFT0{sXm>P+%j|UfR$je
zwBeTXGH`(;sQDwVoOzi@_FCy@@34leUB@=^=)zDTnr~eI91K(l44>cbNGsFArSM3y
zSS!aX-8@?SxfFULx;aQ2QuUO|7%k){J})0{xU!Bl%pT8lWKu`tbz2jA{Y%?dkYk+J
z5!a(bKCRDnfAUGH`=%;xWroSQ>5zMVj4X<}@UdfsF!9cr@XiL=)X%j@PoZCo?%NID
zy?kyrocj1a5B)2CtV-841~K30NbbHaX}2|4jx=Y2oRjHq*Wu`+ICE7rCq)HgF(sdi
z7zYSklOAq`*Q6s&qo4%a31Nb_mwg1o+DY^%>B&Ysx!~e4d#9Z>(!)OzcJ}tUco(GL
zU$_cocCgPJANb(%Z4G_;odcr$6>}Z4y&6*sE=eHmVrjyT@5;?LBWnlyQ0vWI_+uID
z@y&G)D-Ay$;sHKvawx;UGHgUhR_WM_m<tCDoJ+LaN&!$34;eufC49Fd9+}o9k3~Mp
zuJ9N0!-Fg)4=ZFVjyG9oU?&`M((lvwQ14?w)?d*KV_`R~biGxg+F!yG!<;OHe{Gv#
z9g8|{ZCDXBJ0yACS~9eMv_wF0g$m-{MB3En%}<9bRA1{!lCo7L6K-Ei-b$@`EKa3L
zI_o&^6Qrr;>SDZnP^JIOJFKd}z%b{=hj%E1U!J*!C<TvrYY6FIPFnop1Pw$DPqg3)
zIWrq}VP&BM&ls|tA%WM+oTLo;k`<u3AlUgJR*L3ef7A_pKP}yK=hglxs5q)%1yi*T
zdr}F5f(8$}o<8V2|I|M9bXRiVj!RWOqh>U+{<S^!eaw0DSAI<lj%o~Zy`_V=V(;v?
z%1^i+oSF($pa|tdo%}5znfOENuh18~hxjMOxmH)3`0vwpq`%Da{dPx|D?EX>fWk&a
z8y}K&GL!V$Sq<e}#z+N}dIY|&EhYpvIas8&|FyVy_8MR{FHs#5g@#hI;}&XFhrbXm
z^i&V&BHIo?3!dqdb_ft%swFxje*Zj)8oY7D&K{g${6Xr8$BgZwoBc<|q$80cotx{;
z?_w;M#=HgZ*D9W<ttuem`kFEy+VB>wYj8vS(Ny)kY)MEV^ASx2qHMV@RFDhj01b-d
z6WC>K$CwipelNhP*3biykNnW828ufj(8Lmb{~f8h!OUcb?}N?Yo!ApC2k8q;NQ#)}
z6{s7&IMe`7uxMYx-6*f+jr>@AF4@~lpxE&|%&#-WPi{d|r^ncki*h*i&t#+W;<`lr
zb5<|j4>!%X>v^7tDmWXyKLBkb(wxn<9kot7TNOb_cklZPJxOAE0w9krk2lHl@xphK
z)hig1@*a&625W=spKHETwQ;Egk%#7eUkqF_9%`K|UuY}A4X5V5XnpJQ8LpMDM}GCd
z`P>jCBH6~KYC4PP$bgr@s-J^0;yLXwx0E*5oy%o7=HoHu*CblukG>gBzd$EOyRW^F
zi>%#_+p}Cb>e$`x%x{+uqEM`9kw2(x*r<@tsA!$=?kv$-2^+HPp@LZn0PhA-x^<~I
z)curTn&cFkcC`jZT9ubBy5zw~nB^8&knq+C=TnwnerGh5>;(z$t!e+K!L)o5$BPk_
zbUAbe<crM&%I@DW^G4!?3b5%idwygU!DL%Hld*X?9nE~Fz*{(<nAG`c&@hMpl-r!e
z^3M5k<yM*hG*rZ_)N#}+VS=XO7Re0M=Iz4_=YyOX(5LinR)4O_e+<{clyf1(2PBqf
zsdTO3;4NIgpR!i@0UCwoa~6u4I~xWRDx>Y6bPDGT<Aa)xC1pZzb5{%jyn)p4Ua>px
zZ9ga8Gpgx9t)2F#D<32CZI~fNt@OHQb&|bH#<x$Zblm+}n_)Tcqaol3+|58QEeyCy
zYAi|Iwk`svTRbKH-k&;(DFI!4NBq?an<MWzwyH#tIXcZEJW2qxNiA8EIvtpR2hd$#
z@dk}qO745CU$?P>F$LKWV5D@6!aBt-{I#5~Z5e$&R^S#b@lw!6&PJTeH-IZ&^n<hb
zREDV%!ndqnK!BJ1SW-fFxRB-%;4LQld{3b2{_?B!A5*W5J@rx{8#cp5DekCW1_YN?
z4x_D1a~Pi&P0Pex;w2ud@@BC)Om_8fpVpmMOS{%(kZ3%(Pd2=}gI`kmg>Elyfxlq(
z(?wbl+}+VZ7Ded=j@3aR<uI5lUQNae7=!7!#onA?jweQwFmZ4o622mTT6_hg>B#fh
z3r<K%yQH(PeCst@c}}m2Q{?0+S*#)l1H_aD%xX}W9okFv5`58MXOD&6b<24EhRr$Z
z+^shgm*R@foTD6nLz%uvme#7V&8#ChD3M6NcuOH-=<!9!(enP#?v>bk64C<7{*A+<
zBNpjR!(rhjcU)u&_P3y#&jqjts>9x(oU~?JzfTsI20Mmp>b~hwVf<TD)7~HCM0!lr
z5vD;JRyLq*#;|%E5_;fMR-7krWn1+^$_SmHe5;N9)KnpIbM7d_#svO0?kBhEl>?{*
zCzN$rWP%QaK3rS$lR%Toh+42D46a>?r0KvPUWdEELN9R60TJVET1d;a^$fK*rXo-b
zd2w4rr!O8FW&j;^91+fY8<?N~qyeLqr3PY&{}AjTXmu~>ub&qaQpk06Cs5Z;nnF`S
zR5seq4}gXKipCfADOd%3lG2ZJX8WtTifIQg2l*9vx^bP$&eMlHCf%MdlJdkB>f8P3
zD#0O0{&mer;JiI_&B9CKvP7zo&nAh|jbbW5gd~?{iKwNXA@~7P0uG9x9WMe?fTE7}
zseZ|vPJ(zfTr_zopRen)OH!P0(!=uo?*`uW31L&c)K%iaHAxMh(E>hkwAX)7dVVK*
zI8}{j_!0SlcIMd=<I0A;)-mW9L67l@$;)(OHdDZmq&^>7VM16EGupUnQbNNIr6<`L
z8I-3^IQJPUs@#RE44&$6gxTp1i=o;NkWH*O-3Cvg=HSMlX=}gEpgk_j6$LLQ353dm
z^*jGZGn3Wf7m|tck-Z(VVO)qLERqk<GA7<W6MyE<iKxU`UF_ZPc=k75!7#FW#)$<Q
zul8P{+wTB+CF`gZ&@YM-;OMDO&E@2MW4Vf!HX@n&gV#;_c!l3}qB=S*KD(#PKC&8E
z{xL*Qu^Ag1nK^I9;#jg2zheI|=mTPfqYHIuRRy_eQY@FY!{2;IY-o^&r2O92U9`M$
zn=L*=Iun~u<HNYe&(V$IS5J?BNl0qDKrwMBJS4Y#-&XHV4WUes|I91K(V0MJj?fK%
z1#_Dg8m%#BkN1DMh!lTC17P8ouJbC>6BQ6z-E7kNdsU`?uj*r2%RsV=;HhlcARLPv
zJ2kW~@FippiW)1fojLXGA;71VaG|Wl6p_QgV<tZTocu?!*wXO_WTmEh(&y?5i|-z(
z9<YT)-(W!~hwT*T)_Watu54nRfamSsUK>|6UZISABZA`{9v+59N7EF^EAO4sfzd(5
zNPrgb-vb4gdZ8ZrgSitKPW94!Ze*7lZ}(pH|6UAY7!Hmiwo&NCwOQ2;1_ykx|9AS#
zK+XaW{)xU@CoA+9te6Jf!%BEr6z)Q;0_c;f<c@(!&XsZ5ncslTTm4xbjq=8;=?96R
z;zMT>)rh+Q-n=2WxJ%l=dp|ii3dY~HkoP~v!OCIP4{+STgmhnoD&17^GR^0N$7x;y
z&u1h?AkZytMksVD<dqeK>V(&?pUkgM`WNBwuSHs`55}CB)QRq+xPU0hDa8)a?53PW
zju=Zu@kEawL6vS6f5&Fwv3;vaHnuK3XB;@s!pyCpX9`Ucw9LTN_yn`$C`F?l)g4)4
zgg-*}q|rtw?-gum=Rh!NY?bW@Y@<Mam$BV8G9xra0I*--G%6yNXb=lSy{{$~XkKR~
zPLpnGbr_60(N|FBm9@oo<!va1m*s6+EeZlAw=MFm_Y-$?^{9bycKI2f`XqIfD-3V_
z(sXY9=dx^KD;uwFf-_`bFukixk5sl35nlxtPqGCjrQF>_@`h*c6I@vd`psTdnR!23
zdVcSI*F~v;)vw~}pyKsu9t{C?XX}1Rn;n1AE<@9!&GYYM`0T5T#0cHWG$HA=Rfza>
zPVR!yi=V!=x4AwQ7VVH%b?EoK;fB;)7amqs1pkrOJ%1%*qkH3q;a3-*XnW19-?MAy
z_qmQ#F7EP$^&lP7OwrQ!2yKV=w(GZmY(e3vhG$NTh%Dqc4>KUlAR1cM<CE{TMF$ze
z1|66Q3wEE&OQr|GfQJBJekf~|KR~2YNO1y2<2TihGLbSgm^&Pf31T*VpX51d`2uFB
zIFE7q+$=_d<X?!Bzj<T?{j2yVH~pJOMifunz(4HW{|Vjv<uf>nk=rTQ*A)EB08;Zm
z=&iSJ0VESyV%(wp$8QgTb8=%AKV{Y|`@)EJ^`zY}C=3KLdPd}PX6--;1o9R)GR_R=
z;y!Qc8ehhLU8<>V)KV&}>V<4`<Pge4k;)t@>M15C&O*VypZ~JPKlC@vx3bPG?tIng
z8ir?Ca|w+p!M={TQS%x~ds1WzHF2C)>{w*r@bEIA`eoi1?(K+9iy6xhu?@Ctb9Ygz
z#^`4$r>_p3j|jMJo{~=#kBmz&bW+D|yXWW%zoMb!MxZAI82er9iHD5)Dlv{GX`*0g
zNZ|ywy%7xkQ~>FZ70NFJ+foLMJ!@#5X%hJXPIP`1F#Ap#@bdz|Q@xKxG9ky*G%ICF
zZm1$rBc`*l-)~TYg+5nPC3fqMD|}=}#<LV?M;vcME`ftdCf=9t{c|MFee@|JNFdy;
zpUy}Cef)wBK_6F^nY}O3s}I&cNmBpJ21ya`<Q)W;<eoh&KRt`vkIVQXoBZL*HRXz6
z@xUB|p{gjOGO@V}<@_PbP!WcWwx1D^@X%ay^{Z4E^Oz+J$K%#u5HvwBEfP=EbPOCW
z&{xaboX-qHb7OsmAQccH>OZs0&?a**P|q@OAP!Su7<;Dd{Dz6lN|)H%@$rV6e*PF1
z^+VD)z~Zh)ga!(akpv^aejslqP0XXtZ+Qq9x3sxv@PwA~cZS^#+@Soe(NMntN*svs
z^M6&ty!ez=d?0o#Ffyo=lNKSR@n|y-lD6gE*s>Vl>48Qu!UpQNc{M9y{93qeAf%K5
zgk2Lv`Zv_wt2<GF6IjM7)OCW=TOJP<7BRmTEC@!U;COzbqb$LUtD~h(4#xES*t1_s
zTZxH&k)`Wi!DO#Ur0B);3-J1_kOji<LA!rMA$&DHtDIlIjCWAT_}y`_D0w5W(?;?^
zd)&GwoNQEs$vThiH-@spofv?3)@SUAYnM{|6Dy|#h^^h*%pdPTE1X-}%JMW+aVZW!
z=ZhYf=tcHU>ak@T+cYMRv%Y-pc@u!8F_HJQQ~Y0;GlWC27u*ffKy($M-KH9I_}}TJ
z`G6Yn>K>XHKt0aUQntZwkv@8i8*hl>`2?oSV~SX&F3OXFq&75kXXv&RT?i$$k^e8`
zu6hIDoIttyc>M4K@;QOR%Gxk8Hn;i~zKV*{fbfCh!t8T&p#EXy)1lDwwdJ7SL<0gJ
zVvm#=4h!4{jdjCEO(~tS_bA8`8yS9!TcloK)ZwQPa_71+<Z`9_Rw@CHwqN@k&Xzaf
z!Y*a?0@au|F=>4F3EU|*?SCe&wYd^p*y1$CBQnc4QU>0f-sTDxb{-2F?Ys^x+x}Dm
z`tL9;>|6Gk(%Z+Z?Ts|stkfK51Y;u%9Z+z1Ge5{=pRFl#vc09w_vq(wM;x?hS2<B)
zI29355Jjdfg1<tAK;N1y{4Ac@`BJyZH12M)_fX)owiIxR!RkHmHQxs{`@y-Q{?9*p
zwSOy+Ipu$;XOffY^=6rz5#>%OKrjeu!Gt_CL?7{xuI5(KPMpf%H(e3c@|Wm{uUVIS
zYt_c^c_wL)M%UYZ!?$LMO7UIB_g>=r+-AG@FZoLqSeLuS5c_L0sX>~6<3xiKYheQa
zmuMbCibH>u(no&o7wqwnx4Mpu^{=X$_&-FO*04A&lKe@v{zAy2gKsqg5u`N^iJcnW
z?u=5+RylPjz-=zxycNbcd$^wpCxz21`0(5*^iG}Ybfbymf08<HH5TfK@)!b=>Q_Ps
z-r1}{sujDFu{cBr(8wmt+s~0VP0M4>pQR{qdAW{R)xd$4=Ij4!01gaHl#Twcx)$9I
zyrj$+=!s%8bnE?Jn|3`#x%@a~Mcrx;RjAnSv;50!qa>j`q#7cN!MpVa-$X+=C<e0j
zM#^lvv!32B?Ftd1|7&4zO1YbYDQ7OGAIw3aTnA{yf-PI}+apAe@G`pHf6MQ=^e266
zCwoFk<05=G3iRg#DzU8kqK(l!ylwx$uEC_Dc#-MLO}P%2r+KEVl?37i`T4y~^Af*x
zm?5u1Yn-pY+;3MtTGlHTxLsroqHIuh=O;GE9N${3GW|Z0{Ea4^duce%>$e1r*j#!o
zqatZnDF58Uyle~7n7na~SDhUf>={o`HguOh$NTt9*wnzQtBC*iUEJnl#EaeR{xB(m
z)o*adSe$;)ubJh0w=~PT6?Grc|K^!Mu%F*2we@AS=s1k88FRi!Mo^pCt6x)y_(*h6
z8r<vW|HE(r)w`0<V`n__1}*52hh`c%k*|fmXeW&RyM<5r7>@OSG<?PX*_J!r{{wK#
z_R8dTrL9F|&S8`(AdT;S+<#o+6icgy{D|@-HLQ(Z<eglmt!%y`eFOt-@tL#peuejy
z!?~E}QIw9q&+_>puhGVDzn%>x{F99I+=3z^dw4%v91oP!jHd+Tmo{5>%{qoYx_6_$
zwfh75h5nv_YKJLDGG1E>EK<SDmh;WD2d!w)8Krl#OFmImAUM|<*Hvq0UU12Elxo$)
zQtu+*ZTZN8I5~D^t~DPR>YEnYy|#>SdBn|F!01*oRTfnblX|P4W)BFhi_Zvhv%0DN
zE;hODfXZ>TDq|7kJA4MSd+%Zxdw(ZrQrcB9;Cr#3Yp^u16_J}72`d2n>BAHU((f-_
z;nBj`CjnEH)()3a@|+DUnR~N&2T}abOqbcsZbora2`2hpi-%x+*)xOt-hv?!SikUZ
zY8#QKCAqLo)S_a-Je5@>qJPWf2uwEkN6uzA);v9m$6gRk&R1%0T-UU6&p`eyU133>
z>^lj323RB-yU^t)!u%}=;RInjKG1(O6v)=WPHH}i@l-E;Z;4ts2@bfQ;BQq_QoHk;
z-bkJaxyJd%?qpqs-lD@jX8nD2_v_OWXhcTQgg8O3cwGm`vF~U2TlPe}9cy=ep7BwP
zkk3_jsmIQv^WOXaAsT~<5nGt_Vg8_U3Ecme85U@4aK#t#GJbVSX!dMiuNpGdbfzYO
zJDQX}-m{fxS#v{kGbq58B9^1(zYnhEf7SH9dQ-dw)u)N?m*_j}F=YNIHIrc3w>1h~
z?`4ysJE{kzT*aT9pPeNodfi90<R{?P<1sT+6?(apPfG*Gf0{k^a?0la>cWtIy|8q<
zL1e1ZE0<DgZ`9aCcYjlV_c0&@yN;c^RPEXw))tWTZt65^`5!{@pNA6V0QUQ(8_rqa
zbBQ&{R{_u`xJNr9sXw$c;)+&W;O-OHrYen2yCwf=ibRgaI5FFSvWk|l{gae`zxgNm
z*XG7<%mK45h=vQg+5zi(;ou*FHzIjSJAk|MX_8LN4$A$<Ri3u%o2oD?0V@Axj{nSE
zD_}0bxqMqW3%YkU+7CB=A#fNGZGWo%SK>JgbnQm9ua3gw>}Tk(K*Cxcc7MbFJ@9vp
z-sa0%&Ss5;2mFUiV)OBQOFB`FO#GiN$=7xk&s0VIC!x+#m#c^3znga8_-#+5aetP`
zqWT9Pg1HTze>Yt`rHd~*JBSyilkNZ03y=o-II$@CzN&vYz`r|`5SO(6DYieW$EL65
zKfN%xifO7+ZZGs7r=TC;j2DY~=QsQ>*Zkj`U!V%O3&dJ!S|~g==gDnuPTmN3LtxzR
zk~m(m3laVf75|h6*R~5=#JghnBdkIPS0Z@6dawV)%Ig0bD<wxMT7H&r7G%B}!t`bP
zCww~L{BB#iw{L?vcYV^QDDu;v*Zy=mLA3u-oCc2jILk+K7UUD9{j1^q^V}j(T?|#0
zGTl1<Wz&E6c_D23T9B2YERGKr{Lcu8J-=znXTM;!sJ7SO5iwitqT)89c;1}p`;r2c
z?cM_sIi4tZL0H)Ts(V1sD#_I*{z89ukq-qJkqFp@<(cuO-K@%MsExl3ia&R0DM?W>
zXp$ri+K9{07Pp)Us)j4Htcq+76U<a!xQI}^)_c?I&ObT8RFt(h#>7-mlJj*|y2uW!
zpje`(sjduI5PrHdMZ0=j<0uLf&q*D*h89m1G&cv7y|>gZDJ;t!u+@H;SzcYIZf;J$
zP!HLdU0S$@5{LnSA?JnH1`KFbKd+QXrdOD>o75DpE1<0=mHgiR*^fcZa|{@MV>DXj
z$3#L%-;I-g-KXfS_uuAE$e4<(vcj*-itKIkYlnAT0@g6GEXl)sy$Qy$zOyK;o8Fb>
z<tirQVVa7f_7owLa(gULdirfBc>)ilJ@3W|&(>uywi^$Jvh7=hV=3K@nQnKB)y041
zPKo5&H}M1nHwlJNUVoqz7W80@N~`kkVO@|`=R3@gM^%FKNF?{Sg%^<*gew;3-ZB9W
zolu`T)I|qSNoud1ZiBkL)_Sl^<)Wg7G*nfkq@-x$3{*^xL90RDw+&fGF9{RlRDp^V
zHMO;>ThL;wdfO%{R8g9ugHi;OcRPz!w2ors0pQ}(+TH02Qk!)ZN+mi_%9q`}fapck
zLB8);ZzqSzZ$mD&MyU@6vr(56w18oS(U-7-!n1TYv+<n6q1;~4G-U~oIX)sA5Sq2?
z_zghDa=fC-Wtx+9Pd%B4+=!r8ACyrS$Wc&Cp}jL3WoIilWb0Ctm8L~8n02AO_l-(f
zR}LpimKR0J?{Z^GG#6DyImbRKy>Jk#=R9{RZ*)ppF(+R{_pLFJZEld)*p7uAnkIL(
z8gqXy>9dD|lriPoV4zoh&3w;{s-@0ja+MeH+8S!k1EyAM3gFyxbRO;+HDT>%A0&)1
zczB!xf)oqGE;Lnj6dOE(;$rpQ)Bw+2qL{(MKb81fI7%W|ynZzf?*b;KC$lSa(n%Y*
zZO47DHcEg+*zU_wBauKUKeXnMUIlaGRK=x@tBn_TaBY2fWDA!a(XG)eQ%bcVo2`<l
z45>%A#sHQhiP^<aDvU1)cc6Fb(f0pq-sHFpgaAV(z_r;y>RaMh7Uy=JMmIM|I7HQ+
zxX%nWFn4$7(LMJ9F6Y5B3IiAE-v};qU6$W};iMn0U0PeFsN)V&Q%c(!EQ$ixH&LVk
zx;yWqZs}Y%R@B!q^mq#B6rbAe25(WJwaHpx?uq<77^|~V9(q%k!m0^9xxxy69Ml~b
zAFs#*1^V0cCn7kt!>_FN;`MM$<NmEzmX~+xXJdmkX=usi=OdkL&J+QjyVhy4?Mc1@
zru>SF-(!B7Y^VyDn_JkV)=G5#GS4i{;-8BdO^%3nX;>pWpP#rGTxeyx8`i^58<F3`
zbY@<;@Abq{*It%2LeQ0{x^+={oc!JK+(F7O$Baz4*}ph2y7*nvZeA>9%Gk5cf*zi6
zql$4QVn_#Q5#DVAiqx<9?Cg`tF>RjI1ur5*hn=m62BTf}J68I`jpG_b*XXEq<Gj+=
z@P?YHCYHJMkOpAxO=6LC;U~pjDc)k0$wyB*I}DOEO*JV@O)|1qS2@8>m*I{}yaczu
zdQ$8ZeK2f=T@$2-^<|bky@IW>Ko?yu>3)<VT~Ui$GbSPn^_i~b`dR&X14S|g*K{Z<
z^LZ#`yCNGlL)9!6spKxcB0yS}C9hB64N4t{Xg9pO7u{pW=hSCkmn;9#!MYxRD$~VH
z+_S-o9eEH{mKvw0B_BJvpG(iL=lQF22lgmgY5vX8R$sBjRjq^-?qj=;FQc#<RQp;n
zlH)DC=nb{r;V@p$$=5;pK5@e8Ckao;k(*F^`QktrM$fyFo%uD?^^|MUI5ba}<c7Up
z9^?O@`=(R8&BJP<WnOh!@CmNp=-XNEC&h1{qB?22TQ5f*la{@b#)9SH#_JPBp7}#V
zVd`va<6<#W-Z;@V|GcR+0*VD|;jw%C+8?hQ!<B-|?vVDt)W>U2!P7s=3XPl)#c^ke
z*l&yF;6Myo`#zf|q_RH#dw9mB35Vi>_s8J`jUsM$#>`0N$=tCY{JT4aXc$nReE%PL
zE$uAyE)=WM47ywo`n4gW;t@Ze<ulI1bgJpo_1HI&h*m;HHmDSJ#hu+Kb1T7SK<}pd
zIfN%cXn|sy6%}!D2~}b|1%qfgyw@H5R(07PipAgd@Y6T;O3GSP_eUP_+ap>lyW0|T
zw$Ls1#-7^Uuzs7`vIp7H5069Ujb`1?Fo)KInNXy&<*_b4jdB@*Yp=yg&{3>yg`5(~
zoT-1HkhOcgPL*5yD(&q0O!Yj)^4dYt=h12Bn+P9sjETdTx>F);6iu}`$*NkaJgQ2L
z7Zmz#zpBYtP=&8IX%(njE0wS)MB@OGdSfFHZ#xg~YBRoOPV)fHnvkWG?8sgE*hEO<
zfZJ#c9V<u12VBNmci#L#5PA(x+_TbDj5HBt-PXhwc)QRQFDjGt&+}eP2$NS_z?19O
zdhbccoWkSZG-Lv^-O{U4s?42{Hz%mHpwrx`M4Y7^AhrG>=B$JSE$c(OA0FeO!K~7E
zl<NX(-ImPIw!oOFyrOn35`kztZ?6YLC~udK<6<vO=h<7bP>dDVf=}k;YYT%<a}Gz;
z7cQ451tav68~t~a_Is?UZaB&3oz)Y@b?scJ$J-Adeiz03*!JN`+=dq-3fMbI%zVQO
zBjFFVv4XZMSlQZYU+h!A&>Gg8CwZzwsf!om^V%S)UoSnOu#!=9nvaj;8G%^P7GCt`
z(_#qUkB%ch6R9dS>_S$)Em^6=6}QFY?g8xL)SM?I4=&P%pBjL0wD;Bg*XB1*adVJF
z^&3M@W`3oG#=ns@SwI<n2ZNCpfIum7{1J@C35nW8*9t>6Pp8TNIeB?R{X;Ao051~U
z71|b@y1_mxAwJ@sYNq6Rzud;FqKOZfZ0k*ynANOc=m+W6xB5~B9&22l_8Ut5tI`Kh
z^6afPv<Zw-im3@_Wnw0)c$5swPYusc1qOiFWCIqMUiK2p89bOa+R~Ifj%#FXhvMl$
zS6Fk;8=dUN4PK6Wd3L;<?a(1RyFZBcBu^)0JfrqdNl}9xsi}3Fw(323AB^z5=xmp;
zt(OVpp1I!pLhvpaIQq5CihqO0DlVOiBu>oHjN7eORZdX*o36sfIg3k@;(og6-1S1r
zF*PTn3!zbcLDW06ILV11q6~xn0p@QJ-KH+bM#=pj!hhL2%JRoo$gX7Ig3pIDTi+xy
zSwEE47|6?;dFnsuIq8a2<&>l`TH>Om*=G8KjX`U3J1C7W%73E!M2<J9LS9Yd_F)UJ
zJ@wFZLLMR-<~wb_v*Xxspl~S6mJ;?_-`{a~Xxb@EokUz+zPPO>%#VP~yyC>i7d84D
zw>CnaTB4$T=h}{n1f}Z=TYbkEDBrF}WhX3uOtOpl`xL)?X0*}N9VBMh^=!<1OPDgU
zq|@Al!@{zup9Rl^=ZE{G!>%#0x$HKd^km>(VMY|j$O{jD0;o%_`hr4N73MHO_=9!_
zr*AX%EQ>|pv*4k3#Rn9HoJVNAA5n!gLK3F7gHoXuts?~Q%7^FP%;Z9~b`FM*qXH!-
zx<A{QD0&d1?|3WulNG2ejVfTJG4k-%6q%=_B(Z<(h}d>z))?5Gc7c(ltsi!bRh3QE
zcaRVr$fOTU25$#-1@yduEq<WpPte1!FSA{}>TzR_$R5`&7I;7%Oq@@t9UKtM!I_7V
zXr+k~#QNs!`)hwE5QldK_)EsMOG6{Jv5x}wM?FmUZFqpDpk>Fb@Y#af7D^=M%)DFA
zkXExawOM(7rm|jPaMm1|5A7gv07qKX2ZBFmwc!L4vgsjPL&A~4v~f3EHHsHkHZh*@
zyb*%d>Z7?_#yiMAu9AP&*HEC#o}}~eB340{7xGZ-jj*uc3)FrlPvbkfD-+uyGEd*_
z8>#r=82x&wWHUcSbhF0Wb&p+!`Sdk%w6HvkD6`3qkB>~`Yh||w-;#&&z7(>U>o9{#
zC$g=r%q6sS)`_h)5}mV`#a?-hfJduHtaP!fj8=WMEiE6zQ5xtiJKn%L-c3@77&lRN
z;`R7b;&AJ8khv`m=fJLH+^8t~Wu$`-JWZtQl^?5L&rHO(09-9xjQJ^(FZ<SWxxFU^
zpj83Vd>PqY!fY<Lx9+QI@jl7io)TvwE56NCe;Li24*9f(By3mv(1X`PosS4+(vxLQ
zT`AOaTry0#+RmidDM`>PUtsFsTzqD`ij-lQ2I)TE*6yi78&>s!4%zmX^f=S;8T}OS
z%+OQVPLK?KJl;{z@wVrDKF+lIRHJO{krAy5zHD7{j)bCUoLlx=@>r;*dFoeAx>3&O
ziI?AHJ;EXf<i|agDDo{ISC)R%;VCS^UWi=0RzZj@$b}L72fPl{geZn!I<HPD@1{_#
zXFpVQptGI%P~_Sq!-rA&Nu-nhmszah!mG_xk5@05N@C{FlUyDIbU5G)wg4Q1sxr=+
z)OemFb3xml8Jdt(l%T2(YFs<GQm2GU*O0^^-9n`>5Y72Fx>UY_XfHmpr*v08%k$@^
z1h^cQO=l|!iL6n^aam*|J6GDLtzIM@09TmLM2&G#529>^GfH*Ew(}%Y;E$}Sv$A4b
z7I;}6F+@)AtGv{DNUQ3?5m{eb=C70{R5~b|`jwY%jyuh4qQHU_=a8z)MJfqg;D%|J
zzs<vLs+C~KKgh(^nuJyKsZ77oEdD*Bz1jFV@c8{2+OU#?&)k%!LD=<b(!t<Fy;L2U
zf~Ca?Q+)HXYgY`1DAg3wusMANi!}XO0<tgF$E)tEa*TSv#rEK!Yc14a!ZCC^k~KVX
z6M)52V-1dsrB9ap^tf#zpQEJ681R_4SkTA=Kf49e`yQ*rJ2nJte^L=_3M*tD+<i2y
z448M2%w(gph?)@CW`=zAu<CeeD)duULhF&Um_U@_=J2^eYO8G2LA!u^8&P|pmmWJ!
z9Kq6><O*NX$JAo1L_rOd;3aOuAxcxN(Vn=s@@g@~D`k0WAN+_DI9wMM1^`W{U<wLt
z&F;)ty#mEPPP)0z)r^m^Xg^3#3Ny~9j@j(eo?rd^8J^$~M3T^1a)Kd0;Ubrwt_|2g
zGzmO=3$QRe>O^IBBjZXPk>GYP6sO*_Q6bQt3t(26${N6~LrdH3R3UPt_()2llAq-(
zwizgZBpvScepIC=H%{E&6YZi2yV7xGML&tC8uH+-?^~{h>Jo@sp|``VB(097#O7sQ
z4!e)NQT3Ft_vS;>O+xjPyjw(w5oL1>;N;o;L}q4{>F`KG+Av72t~ogLL#M1v(Jfv6
z3<)K66h}ne*xr5!<Aw=#I!l>a04J^r-SRT^8<=i+LH34wG^|~9d^;A}xcxzkl469F
zoib!mWfF>6XD6jYn?5j{Gj<}E$T5@mbkMsx`O#oOjiTaD*e0P>!=A(|w-Owza*xMY
z1GZX^ZB&RyAL{_fPss5%-Y2=UO|q00sFruU9bx^Jsh}^CMHi%pk~E9i{APGD0X*rN
zQfcV-b~4y!jh{&YSnY7(I6O#HVDsb@zS2+<kIK1ybQxh)Z6K5M>WNo-i$K|u3f=iQ
zqi3jKo{qerkH0IGXnsZ`7X=2r@k$fz3n(X^Gwq6{>o_Oz4BCr8Rn?vi%AYb9%QFwJ
z0-2pKd1Qk9#n6XiXNd){P?0GdDj_Kq#;7<OD|vJor0hctK`s=eIBK5XhJQt}3fxe&
z2ipmH@s9zMrq4<(tzHZ1Dv<04BtVi^<#?D-S?C@O@5Ob(44V;UZr0S6U0z~dY0eAd
zt#Q7kG>Ih=o(Q-Tco-hjWgm&%y7;-`)PiJ}bvjvz5Ge2#<gpkzAlx(uj#3<gEfPrg
z&-APhevJ(7G8>1jY}EeLhcu>7)qlz(<Yp!@wbTCsMh!v@1hl^BiLrljUFh{HKaj3O
zE*Bw}NiUHZM{nKf6D#|EPg>NkPIt{1)VwY+<a$?o@yO=~=|nO}p4+=8#TQ51VUkT^
zF*(O9S<IL)N{zg}?yS8Z029+!kHLizV50UqO^C4*&o8!xigSmaGy83hb7j6#z1S4h
zZI+1=@A29_x?@awLC4-UDBvECTidBXSg=c1E}yH+caS3x&3{<o#v#4>g7rX*LP)RR
z0AuBD=+nYZ^@cld6ac&cts@J2-Oi?fh<h0l#<0zReww4mPZWagegu@?J8zj{`DY~C
zezBl_nWY~6?ATsCihi}y8v(U<=kSQ{2jjj@YIy|k*_QA%*?WI=ogI5fCaPZ{ShU50
ze-O;NI2E|EE=4TQNKbFD;3X&On9|>0T+MOb6NlLoFlBWXojn)K^~zRjwt#)`=5-=L
z=NvP$b-e1%5|LgnA3j1!17=71-tCYXH%SL9k=K3XeI`&$7Fw?a$(nDEk{uKY2>$Nl
zSI_4i7-f7AP3<kb>oshRldjcFGdx(BRiwWV5e)gYQ1%^F>lfbK95UNcC}w4;IX#PJ
zY`4)zB2JF^!ycL{)DgnMc0A8Y*uKWd#)(8pmjohh9@7w#_(=XSiRek;0W5%&+p67c
zDyqjpqZHpxD(f1Xg=|p4U!ey@x~4?bTbDG%U>Wlfo(B7Tu9tFA2^t&Cb$@Z6f5c|R
zMdE0F>bT{2-%GhZCJJ`(!zz}YvtOw4$k(2R{Z{cjS1bBG66)r}>94G_3F(<FCcxuo
zXC1K<gG-l4o>5ps8Y&+XQHhF)(IzJ+)p^XUzUzDVx8wCEJ<R(y)WM6LSm>^ZYCoj8
zxA$0hj!B?8x%63#Sk;(x&{icop8>78r~8NckA5=7#`2lbhij+GW4pT}W1n(NT?z`m
zFzGEIv!>OPPdU=;4ZV8OMf+<&N6!+{QuVBn_C>{wNByb_YjceWj?Zzfa==u3elZjn
zBfU1jr8T~{FQZZ3YyQ3=N9hS)<&>;V1kw`{!ced2A#H(DgS^Ihc51AQ+zx8?ynWPg
z3!%=W9%r+lon`hepR<>@zc9##N!nkbn7;7?+6HvA%iylOF@Cc3R7vyrXFnmTQehbf
zCg@0h$dBDnb(t=gxZoQ{_UexYa*-)6l$B7orYtF5I~{bE1-Gx8&hi+sZ&uUQ;G9lY
z%i`^ib$ZX=RyVlA8`?w+<n-++9&>>xa9C_!Cli)d(^Y*%Fy6|d`d?+?uaBSKu2?h1
zovrrZW-!=RJQa70z0m8Fj!V_c%6rvuCItjW6|Lf!u&^TyC&h8-EHMfwbXqd#k6Ru(
zoD|^%>^AVEnL*o8EJ))ynQb)$ipSabyWU{CT)aqyt*=2-*Yp;>q3(OWUcZR045;=H
zM4hmby^Vmfb4=XW-3<zpEiCd1xEC@m74PqUbKIrrQeCh}Qit4!ah~pdyN|i&cEomG
z6OMi-gYfZF7bCK2Q}5>C_12{GcFIwcmoU1>X`q<`ufsD314a+)6qsVz1oAkQ5z1+z
zS&3@rD5N<=wm?+3N=DIU_Zbok3L(lZ6i61Q=u-89w)gW8=^QphLFD-D__3dmO9Xu@
z$B%YPUiU9A%yQd=>4mBS8>*rW7&M(v4dn>Fb!_`OXAIuqladE}7=4va8mneOg}(pv
zoUVzY`9mzzl4#76+SOXq1QNDy7LM0DV{I*od;FFZmnxW&LN4?5vgXWe<H6&a+=gyQ
zw=OzFw*%`EXF*eS<jiXH@DJ-+S938x$8)Np$L92$Ei`**<)K(-*2Yix4>+>L>zLiI
zTd?oIm2@He2>j)yH&2+r7QmEIC&!aU5!m5nWUr5!`SyKe`EH-Hkdp}(68HtnNRDpa
zB-*9<g|Vk!@8hfXPXuSm1moKn_L3sQts*uAx6noeb*i&-)_-M_;!zOza~(R~9gMA=
zD~Nl%+|5PBqVD)>KCVUs>Nr4B4q0tv{`t5pz|Vu$9n1I;TLxDLCJ)JjpaVgdg_Rb3
zPrJ`LD=l2GmtN!()IYKu8ndcvWf!E|-aIxjcJJhcJ#^{y(GU1Ux>`ZX?ddpzDKV(Z
z+Zf$$em3^O$mX!tNX2l}01zw2A9gpJ>Ga&E+Nut$6B<W^6m<5iv))mh{W;Qndb~_(
zOu9OwkQr%@qBN#OTSSY(tgqzftT{ZNHg}SX<QU>YBFr)ON9W(Lyc#xu@8ZoJVQA-^
zmBg{yjf*{(IGtxf9Kc=2wQd4iy8JYiYdFlBt0N<EF{5sGp>Eq7NX{av_BL~mF^gC$
zBd^@sHR<kbD7^<A(zmpda0|b4pc3Xid=xeFRX$>TVCP3SU6JkhLd=&{%%x86;f#SC
z(5ln<t1rSp6~$5>^+y>VMZMphwth5!$a_frBqe_C+e7JzopqjgNK&Y2N``G(o+&r;
zZ~>-t(6yQ-6zK9wI5vem^%~d=Xqi;hNh>THC<4XQe>s{zd380#7_zM_eaN0czy^1k
zr@TTaT4yII&fJz4kLCKxvTp<;wXj6X_3U9Gfc%q(C|`6IjUvY_2o_+|a8c~cJ#dfM
z`>iCNRiL%6$l3JZ5-{#-1LX1;wqWHh;3+;@A0%rd8lN-Seja1E?#@*P)At%Gog?q~
z;edgROg)Mmh{CpsCg~ai-mg+bwE)L+81hEcCD^Dhc=-ap-e26pTa*o&N-9hzcdtIJ
zlo5JNYB+m5UL=N@f0n293K3b2L)A-8b|LzYg>md7gg*mzf^Am)1*$<ueveQmJLLzD
zVAzjnb=95_4UY3!4%z9}UnhCyp<hd0P=6vuvH~mfx_3PVs@{wbWU5|nP_6|L*y>xg
z%EC|N7rNb#Y`y@`7929_4)p3YbK{&^5=0gZBqg*nv&$6)#o>o~jgj#wvA@OOtKEx>
zv5U>^gIo`pev69+xgv`et9?eHm))dHcNmx5{aLID??D}_=uE4v9~>=d<Kr|{Ej@VR
zHJ3L&*1&`n;-Q{&$7FUplao4|(2rYRsvUU>A;8)C4<xnz(>kARb!!;`&7KS0!^Jnv
ziA@>f^)^+NJn3c|+)O53>@xu&(c|49H7n~z{Nt3}f%8e<=8))h{Z-7muXK4tV<QcY
z$IwEV?bgUJZ~b=o)lXK>&uh!wn&uY$EiY%C%7UGW%15DPsd&2~Q)c#B$9#5|`o@uq
zSgeBX`te9u(uY784d&Y1n%UU*onmN{_rL|EHgd66t|?Q%8yxIPV$8rdx1ZcNvJG!I
zVTpyz6VD4X1z^PV98Ne`(}@j`8~okQdBndQ)e+gN<NWgN!J6lvKkB)?P<-FIe8&Sm
zl^%Sbk6BWOEYOwJk<|+J;b36<0?0o9bW#1>SUjaAQqg2C%tjzV8<f$}b0#yVyjegV
z?vAwbk~d-FT6yfmhu-qI%oxU%;iDUykUQBaS)CLv*$iIODC__6{f1&V?Xy^RCYX;;
z6CS2#UC*GOQZeILQ9T;I5@0d<+<~UFe!b;$)8G>Km~P^wPPEr$;rg=Muh!<pqo@6D
zC4AnKTAI<MsW`>PF$d3FcK7;AbJhd8&rW8Y&z2`T&kzbaIWs-IpXs*rRYXPO_8eCX
zgqgh3^5+WvY~s=zQxpQSg4dm$en~dxM-`Y%P4ASpPFd9sf{gl^8FFtrIGO5ym}z>4
zMHPPyk5`3$SA|xpLRF<qDN;3sH93o?zZY4*o-^t!GVClWwcac#PL3*;B2A>r(Clz<
z5L~OQVlk1dHPp!?WT)dTu_hAkF-_GhPz8b`(J%5ppPQx+XB+o&mWmM!S;ZOEukoq$
zUU-hM^p`e>&%HJl&oP;XRh`w0V4pKlwuzF~q_^DcyttYPA5YUE9t-BuENZ+!Pkni`
zyvwC|V>|E)yK6mrq~x8c(rdy<O==$_Jp<*Rz&Htly>p?d$sn+jCd%l{&=k4IYk}m9
zO=*q;)%I$K5p-(ji}b$yGmKnV1>pp#HGi?V1SyubiBM6r;VS$WwlE93U`b;Tc|)(0
zyyeo4x8~OLVVY+w`Bc*DpQj2W%=ZEHRtRN7=Gy@~`#eU+kpk`vejZJ`ih{$dx<LJm
z2I+l+(#`=YDp3Pd$?3&!b9#4c16QAZeK>D#3sQ4q3<_R-c#;woHVKA3ti2O;QU4zC
zXfs!I7i0X=FaJ))8mG|dW;a!SyS23{#J5|e&;4?1&9(R-!=Ox1W_&!{(oLTN(U?-?
z>{W++&7^&nbaviV=o}ZTJ-DeMPW(YhYQyFo;cSvz@#_e5GZjJ`r9>u)D73sl1-Vo;
zW~ejo<Cn#VzWGo5i~&|1&80^+mOv6>PL{iLcBa%?!^eZ+iGoo~7Fr3iIu`{98ndMc
zoS<Zymb<#@RKpS-LyQdcZgznEbdUzTTM`p=hFJ*knc?Crt@fa;Zfl3warQ*V`VDTH
zl1oUFQn?YvYDESoMTOl}l(x#}N!<9EdM4!YzPW8~K4^_j%j-WLp&pvDHV9)CZj8VN
zqS_(dxR2p$CO)sK+$A~d`e0EHKouU?eJ;N{fP2xxUWSPd4?KzX>=n|@Lv%m6XuL(}
zI6sw%XVAxt#@nOKXHm`}v)sMiff&7@U873UrUI9rCUuWW2bmpI1$CpfFvjh|JlTe0
zrl_<wew}7l0pff8eB|BcF!g+b=??nGFP>SQ3!|>_BOi(jxhF#TxK*XKcvA_?l`d_R
zexyvNX-sOshEl9%l3*PqvGKHw65x^oEJh2VArcXripM6@=-I{;-J8t*wiVBUkz@TW
zA4m0bGT*UUXtbB~$1Cbw^nEThly+_EL{Cn>sGr~6O(It3NS*45?dIm%f7#qmdQM#x
zGY&tzZ9Yq7v)AJIS<GhlghWH@u|m&Gz;dX1<BA!_C~gGqT)Y0G7!QwH<kp-1GbEmZ
zceMIC2E7#)0_I4I0lTl`+!+4t|0PwW+`mp&&-dNI4n!O?GSW%zYW9x%RRWAWxftHR
zt=(}?@L-d^*!nO4u{Fugv<<jg3}Loh=;Q2XvRjt>&gITpa*D@%ybRFl(CNzVq}NQ$
z;G{2>9~n+zk5}YRja^7L=cP-hogw{dD_7e$y&0fww!4)e;3;D*$o}EoVAjgaMZG}W
z3y;P-n<^($b*;oqN=b-x{>Wy5<(IM(&*3%v-L2BB%Ai`)cn{3}Xh5{7w()?qxPUKp
zH?IgY*Xd7o63=G`!~tYg78voTJj=pVN{bQhNBEwyZwJIZ^jHE1k`o1gFp50G8-Gud
z*f=c;XcE7?`;qmDIJz;l<NqP-tmC5k+IFv^poFMMmxv<W-Hp=S0|?Tc(g;JRNOyNh
z!!Up}(nEK{zzp3fXRFWid*i(CIseXQcCEekz3#QveSNPMYKF7!%uFNDax(|D?42P$
zJ_{c9qVWdqgwv~C@sZT=ACEsLr1vEkA9ia)9RyNYW|F@3#L`zcV%9m+*15TLi2wo0
ztGR6KyR1pTZ4L=DL*gshC!6cdQpPE<X>wT}IAS9#v%_9ihSyMES2p2K;3_kH;?QQG
zX>qz453Z*(zlyAg7>->&J|OD?r_`^lk-c18^M^6zgGq;XB1E<^hJNkr<sYz7Tbb&6
zMl%}DWp*>pekAqcGGriwQdbmad!a=IalOOzJ1~(uGizp^`8M{|54AHXT+Zgcg<g&e
zHn=}=@~Y0BrlV@0kMoDgP^MK5x{2MZzJiRUs%rYQ4~=r@Oxm40J8$zmMM;BCk5LW2
zZT6xXdvPXy^RY7GlLAL@bY_0~Dz15=aqj6B;eIgb^nER<P9#DfXDAbT9ygD=(L%6*
zMAeR*W*ikLbdDEch|~a!qB`?;rj83gZjw<Dz`#xBnCTuLeK8O}-~A~md@P*TZ)dB)
z=92-iMjMbA7pG=l_p-P6!OY7&-`Zji!?R|VMA~1g9;Z9;&P?ccLZ5&6vC_OVyoKIR
zbRXa>TxL@w10Qu((CytC5>F{7TK0HiODk~2Z=nW+)Ncd?pq^;pS15H?OTrTUw)95H
zOnxEeV}D4j4rW5Nl$cY{%S)J8z3wCMD1MP!sX-F7Buy-t_4U7t#jTB<qLt?COO|$l
z@qzuAt&wOID|y#N;B_`Ey>uP=X)eE4`hhscSYF<!O725agt1_nhzsrF<NhBI`7wvY
zIJOdHNn=yhNUJ_h8qCi<`}g8zXgfBR^7I;}WwlHl#vfM8cV4+wAHKCbnNQzA*MOp8
z_QmaL_UmeW<EfiCT@7}0X3$E$(njYTmDYx+68`Y{U;qXdzpW2X+C`CfjN*<#x3Dfp
z9#>vsY^e8Q)<UKDwa7w6D+`_7b2lv7gBb{Q5QLRBf8qru3nQHO?DLs>x-oVuk5rsd
zPsnn~W?FEq>%oID;<N$og20%PfuB98x>_-DEapZCJHnVW8fR)=te+pMSsII`u!!P}
zUG;JdXC*f{i#Ux7srdq1J7NtKx2igARa@iSSSk5zun=9tlf@S)Ky5W{3>nxE5tzI=
zvI5D%>-BE$<gBwdd4C^81<6ZnmrJEwht=m)M)lyMyz37F73P4HnDOrBa5UnP2n_H8
zqJ{@;P9ljOv`Vt**bis%AEkf7)_easitg#g!#=wtI(ZyJ7P8a^&r9@;bzIoxeD?Rv
zm!o;6NjQ+>8Wv~T>c>PeW4}L1cW^mmdPD3SGCj#jKUXRm5gHQS$0}#6I;c??-A}?^
zgjfGT%`osx+jwNg-a^sxX{!3+`NWiovbkkFi+s)?zMxJ;-@zbDwa4jKFX(fXs+Baw
zq5_BCg)zw9pq{_?OALN+P$k445)owH%1O%tx&F1CFq=DaN9w6~xW`-q4Ip!M4xGJP
zci!9+c%{D9CaLkco`^cydo>)gw9fhtnI18gIue(^&-QV;&RUk>Eu4ia>gNyFauAZQ
zVzwr{pR?pZ(s(GpJ^3ZE!{#<g-%p0`k-?Is8C=Am1+MKZrD|1@mPXfl7WJH;Gkk30
zEo~fV)mw2q$Z?(Ww3r{=bg;y`Zk@4-IdW#C9AA%mX%84{t2<8Qegk<xk?=vb5cC(R
zdC7KXC+}e_Pkv8NSl3S2v5xIvPBTwjcbHjbqfmWl3!6*J?Ed+pmavA`RW7jmW5v!<
zJMx6HP$sVS3RwG0JsCL^p7f{h8cHtR<DZDbH<X>#oDUq6o2ocZpAuf|F8Y`f_p>ne
z1532rWr`}>og`;bvgAaW8zWzav@~sLPS$g5_+a-?OxqKq!}5F?4I830mrNdkjZX%x
zV_f9wApMyDV|IH`v3Jqdy#WHpieP-mY6N7zY+7CmpQ-2=m+A1HFxMU?y6`hKyAAN=
zzPG=*NJDm1LJi4Sg2CDGJHgb7MN_rjvZd5fqEl&$Yf(3&75Uj@C0Tg!>^Pq#YUoU9
zJx6t-B*Q%J^wiW+;s^XbWGSVkWN8nI-I^qRT!My@q)A;dbQfmRn>r$gXCXh?Ohso|
z)pQgNM1QCG9hQ+Ay{|So4xfN;9i5Q0ipD3#LP^q7u;9I1Y#5qbT5!<uW@k3Y-NfsF
zqJ=EqT0lPN$dbBZh-CP7BjlT;cEdTnz%A_P$FD`LDwVi4#{JWB#?$0*E_~~(o(pX+
zGg${+_P~$%%v8|PwYWy)L~70%#)mZqvdsToIbiq2`OpC}J4si=%Mg>E0@ZC!d9-gA
zQaetv;p@8^k&<Xmx^GECUy-%9m*Tsm{1bQRV7tv+e-G7%#h4>*g1s@aDBAu7_O7l-
zMjy8fei&UW%cFs!uAbC(LY(kUBYNfxVy>$pq(N|eN8wI+t1zcAAiGsXjj1BvdQ?)3
zjH5}2Rre>0;pVZuU$xf_F4!)qK)|E-@Zi=$c+}u}s7B+8<LlN~LG5OpW@WT`ypi7U
zyi#=ApAtz2RA{%eR}2=}vy+h}ZAKW~ANk+>BVyj)fM}vsoOdIkW7Qbulat_+_5!-A
zQ||(^XJTtGHD>c&ve}Fzv4jRu5w}Bm^0ECH?{)fSRwEPv1A!QpksEYmWNJ&ga%5^q
zilY_VC`3~aq$TEYPL>aazV^xpnW1xZAc&cIFPlH6pIlX%sWdYaJF#KPOyhi4S_ba-
zjtG@ugtdWtXx{N<BoigKli>h*w(dR%^8!!G*jCcv6{#F-IcIHi>>b_bu}eQzBf`{-
z6k?simX;94gTqBn?yzo#Md>JqKtsslKIcdIB~K43pwL91Y~CYv2tUqIec?SYrL5uh
z1`lfT^Z*5_vj0u2@z|D)gYld>88X#aJ2vSSN5oyyKIdRxfxhq4ep}qr!$k0vYvby$
ze?GKL$LVmW@F(#ZY}3e;rYScRkvvye+Z<DFf4Q@?n6ftFkQYPL(50)ZSH^zO^!iZQ
znR22&aVkJhSSWBvN8bs1eJUwI$6sAa>RlR7nv8jnyd9_75U!`xkB8-;rZ%eayup>g
z4o`@CA;x+sUXu0K`ipu@`mF7FDUAe^kzS{n8sDr^*+|k@QZ||8iT&#{^1RY9c;l+o
z`e{>m&+Gathk?}kUkI0D7c8qjio+Y8@~|N!m+rL_tN==lQD?pBT5M&OrE+Op<NBGm
zxyi68d3#gG$W*eH_?Z^5UiIO?yRZovr9+}ju^9=ctcw?S<(w9+?rD(MByiWTpav+~
zM!<)2s)7_(0xShtqZ9JI(@%J6Ba35~HLg=ir#86I3Ua20;H+g*I@ev)#f^uC_qyx3
zLETIH_Lfg<#~=D!{Csh$%mSS_YTn?BeX94WZcUYOmoHAtZG%JA*VKlwUWHGCTEJ5j
z`rdzy_$h3B!KYkw@XKv`=$NXP)_F<Fy#+j3oKA)%zxEfr_DA%j0?8kwq8dZaX;-jn
zSCVjzlh4dyv`a7}t>RLtNRxvlOkPJ$4dbB1Hq!kxR#JFM{ocsjoWn$Aa!ZBqDm^+x
zb03w9(PE~sIE7Kg9E6j`RFa?5_!c3e30*QDz4Agh6S=l+4;PfVOfbD#R6+BOLMBRG
zvLO<BT+`q}Iv<!6^u>OcWkxkdCbuFJ-R~pX93`CUa=%G4XS~_Rsfd%x!B0~DUH!>H
z&Gh}LEJn_RG}A;Oo+1zNhv&o^WTrZB=@RNNEc$9iww&*&qfD_d7MrY3FJtK(QHC8P
z{ZBu-K9+tc%|><liOr(Wc2!;65LKFfOOXBaYq3*ny65=SB&N>!rkqW#-P^@ZlZhX=
z?qXt&k73T>nGqy{D7-(dw8A!DIx>xSu^X6t_)b_WyI;)pF>FAR-6yn9I}U2$<CRy~
z6?uxti3_*Ax9QG@^(F9pqS%oiSgP#dG8QS+cgmz2u@fU%rTlTuGtL7*&7H*QOtF3y
zqxyH)#E4e8PiQgGxB)Y}3)8W8xqaZi*AGru)V`OIBIi}MN7(5)cW2;UKHEfb`=cm4
zF0G~H=-!^JdI)pgUC`i@9?MRM<7E9xbYai^U^S4H@hq!4AOwN^3tQRgw|7U@s-RXU
z1d2EJ!XXRsB)Q7wLn?mwF|H6_tNG_#KxO@^(qHj|eT8!jHXa)7?6*J{<lMpg@wIy=
zYUde(JeiSmV$Yi-aIU$7Z9M-auG`Doi$e<dmKQ4_<<Ir%i@rP^N)!Lt)c<q;scbg+
z(gK_oWwYhP-y{FYyBD{Aj_VE)*-$(Reu+Ny!G5aGqbzlFQ;t*Jz0yGxNA5gA4z9Lw
zmC>`48yJWeWWzN<mMFH?9i9&(izH%8-?Uzmiy<QwA0Ft>dYX}a5uY&pxi1#R?rk1F
z`dDXChg8*@J%Dp(C<~8{d2jM?w|p>bT#lH!?Dcq{^+HA&Hz{`@m;1m*NP_EkmJtZU
zoRqS|Su>NZ%o%DjyFG4R!n?`CTA0Sd1q-z$?``y)m^Gq2uAU)`DyZnh)0uC28ZRQp
zl#D=D0U9qmcf`lPv73J+2B@iHv0}$eyo^`&Nc4T?=@u|*cYP=CZgTR-KtUqSXZ%=7
zhldZbh>Z!yC+`D7AwUM*A#(Dg$$Y#$tRud@DPCC;E59vAx$umUShZ*Sle?eK=cDZr
z{E-<5!MD4n*7@wnwJiW}q|CKSL6%Bj1|o>{#*$*qTdF>C5cqPgD!`mvhrc~_F6B2_
zR?uCIG(YMWGdt)Q9&5<!DLPB86}`7Go?0791-&IJ8?dNr!HCl2vHc(QBRdr~Bbhs&
z8?7wu%6$_0Jb367w`-S9N{QvqO)!k*ef;|Q{Uzlx#MXQUHhf%3@(S-k<v@cHHKte0
zMBz)P2d>hNw~U)0o|eE3#zo?V0=#tPIE0X#?D15ywm4nT)9g0eTtzwj7Ndn^C+Bk1
z!$*8a5is^WFi#CbNjzl7+Qvm?<`66PW{=u^BLdqT);2ogI7`M}XkvN0y&sjOWE+{S
zWYjaZ3gQ_LzjdA%t>Z#H<}m@Udquc&C7s1OD_N=u8e65yt@RxJ5=s{HaL}%?(ZJZq
zEze%Z?ygKaswyI;=3@#wqtB3Ba|K;Dog769YeAA7&4$|#+4lzR*=<&d`U+dhTWp8@
zM6j}hGKhc9MdTcoq*W5~w`A-!5inm@$64QBxVOK?jgo?bY8*XAGv;pd)X9yfo3lMr
z@(}{<*!^jh&FwY^J3^o5mwuwGV}4|AP~*)ogVU7K?j^C=ILd`J*xbs(`GEIv4*~EV
zexqyuZ#COas|}u<J!;gTLiGt`@+u2rt?F*YA?F6?aNmt!Ia#cUhy{5?FdADG#HlRh
zu-G1)+qOuls23=Sc-b}8^&QuE{d!pIIgp#@#9Xh$v?gua{uvF1ZSqNJEsnET5UN`H
zesh;Tv!B7*$!1tN`3R5w-3V0R5%j68O1kvES4@3Ue7Rt~aYep9CYgAL#vx}}Ud`=p
z#euC`Fxe&1U3$=Bj;j1Fc;lQ5?VOeA+Q)McISs{!(3mnlq8%^O!u<u2gPU&;Uq0}1
zri`o8hD==PV!3a<W51bLIl&P`1Eb#hZ>DuNTIKjL7;RBRW>xUBrRrVXA8OMula;2a
z<#9$<n{|&thvte@7qsO(#v9%Jy;)Z|h<;)I8iw1Sx>>9pHyo-Fj2oSVX<Xj43Ir%u
z^_vX`Ey4Fu$FKvnukTjvw9^*wf+<0qrLD1%<mpmE2F+~>*acIPH-2Pdo<2Sg@+in?
z$IQE{sfCcOHyBrf@dA8NRTkw+Yn3z>pqt1kO=NRkupG#H|L|7F^38gE0Xfz$$uJb>
zMQAww0wSVg;?l{H+xkQ|N}hHB@nF_y0=Ho=!9fh|@N0`b*%a0dDdOwlG4<P=WW>&q
z!-A4K!RaW0+TFl(V%Om#xyb$r-N*{4Bu#*|Q*FzaI)ycN#M(rxT8KMMSlzHlbC>f>
z0WnRp|J1fwZg``R`kd7Od>W!GXTC<BC9<?Jy<)AZwR>?nD|VBD8r0qBTj{X)?Q49%
zQJwbV1U9D62l44Q*w{}2k@&R!0!cF73w{xKKFi5wC8%$pcQn%#xdZYjBAWeVf+u#y
z6%4=&a_c;9By66v2JZwq>*;-f>$o-LlW5;Oa3ar#ONQr?dj{OyRZyDU2Dm^Ll8e|1
zwUSihYrjc)n?J+4G{BB?c2Sxcsw{5zSni=TTaO}N-X&j-m&W3N)90INB0Fw5Ai5e3
zW}NkX<U|>g5x{PpqzV?ADVy<-yQHxq8WOyr0j2Ai`aa*)RB=5VGpcHQ)p-+h#V52d
zB&vP+nzhhc)eB{*k}>5+=l)@1a*CLSJ2xKVt`b8pJpSb<t{_^N54zag4|t?=NtOA6
z%+M}_HXNN$bu7Y!_kuBFDuXHSMxL>vd03-fNy{UmFEe#+si7fVZ#A&jF>Dxy>$!Ow
z)%7a@e-w)^vJ|MUPZ%Chv1i?WUp?Eh-TTJo33itGJIf+oXA*%QGcz?Y(C{d+pXu1<
zy_r4c+Uk6u6-<OZ{n{N`A8F?G#oj;>M&d6-xb!*X+&p#0O8W4VqI~4Eq+Fo2%{e=)
zEouhyf?wdAcIqu<AZ(h!*!P%kYX!~?Fq(%2Fw-d5Z7c;rO>Pm$&_mjO!jo}kqRaMY
zwNX6<`HtcC0*1zl#8ty%dkSQ5$w9{&?yzAG6{^9_M2UF8*z;rVy1Q*dUVRO@l*Q%l
zQ3ZUZHr&{fu;R~=*=_nHl5`kN4dJ`7Jm)+_H{)++W9kx#d-Ss^J&Lyix6io=DgPAR
z2W<2ct3Bg^IT*6)_hOH^Vp@C;{S22+;G}-)H%>dxyp?~nu*PlR+Kf`G>T$2_m|0FR
zw+TFZ#8n(>-P^e~KAOERg5~W(AkeXS@}m$-)xZ4iY576=+I|pIj&eEF&e5x*|He%f
z9mMU&%Dwkow;GbuP#e`JyP}S^F))T2H(A(PW&b&{LTImUFZ<+3SRz@+QNjye(%<8R
z8(HLx{eD{;<mv07IC<Ogj{DlWNIuWLxT&MV6s{O~tR8txrurEpPYYFT<R@Q)v6r{a
z6Wm(=MX-fny6n;+f-Ok)Nq01eGq!$^weY9Zslepk&0ECr1xi<Jb+8eoxFvJMoQ_Oc
za|7B2e~Xazx2#B{eoJ-FmE@XtINLkF^UQV}Fm-B!V{NLs<2;u8N0yE09HV>t%@%@7
zjt$-fCox*F`e_O>Blo=B;>!8BBdbi-Zl2~~;q#peP;*x6-;i{lW4<LX+aM}Vu{cLa
zN;?EbVuR`r;U~J<XBd&UTy?016&qWh$~)3Cd1gq*qnknlz08A)hiAh$&A_XH)j2hi
zoqcXHkHOM{_>u`IMo%6*M&8<yFz_hK?{YPxcEyRP(MD{dBa<WwwqDYL(R!3<GpyAX
z^B-sn`PKWlp~OwuFJo1nv~Yhz>6>lg^bGinpr-vw5$oAbG!IkCWo36F=CDU<iD33!
z1!6zCySwwUOehuyB!Y`qoPIXsn9_veAfgDk`YwtQr=p2Bg|W#eWp5F|IE|WzM6Bq|
zEYyj~ZJBnqk3sfg_#}UbBA+Uu@s@8D9t9pHW1&;2in!6G!(CVV5W-J!@n$v{@@DJy
z^sv6!ku6nimYkG`aTTpy@0~5vt?t)zAGc3swuis!761l_eJvCxviy%KoQil4epo7=
zo!(BsYHoL2h|XUji1hM}r>(wef#uf4(~K3}Tg9jfO4@ixf>(%X_=ZPApObh{PO3C=
zFpF|kWn{fIWl}~oVLL7)$QI2=#8wMwIa6YTzR7Qp@OcNv9pf#ba)?E}KbqL>ezuIo
zu6Md}9N<~ZIi5+YY_`5Ea&i;O4<f`gIi{(_EEbgcjFxp|KJLr41v7P0Y+(+nBGSrH
z(s0#xb0#!i-$0|IEI;7IXn54&%kB`v!QOnx9dS4L%H2vEf>=~~2CizM_+8bZ=Ju;e
zqaL<l*%sETQD1@ToQ7pQU_f+|7hQ9qNMWqsTQCZ>qHS+<%C1M9FuC>Vb(Q8BgbTI?
z_c7*=HP||a-#8IzJl#;$QInTwlyG-a%fLj}8YTH9Wa@*XLS3C3cr<LR?4nmRTStkH
z#LE5{HcC(VDMk%_a}7gw8k8ByqN!Lw?%A@mI)G6v5|R6I_;ky^%p->?NEsfXzTg6u
z(!$b;5-IXk)+d)jbHFZy81||Tt(Rq^RppE^#ES?B3%L@VbCc)W&%v(8<Rl^`LqV-C
zLG%U5o7&P|cN9b?7wmn?Sslo7!tP3eWMu~hRN`?)M8lDI69zD3t&V5T`{Kw0*j62^
z%i3|+f*eCZ!pO0wq2w-Y0lhP}bjHq6=xgbeEQMbrHUTc5kQl#`Xo_N0^yIgZP8jCX
z$*&Q0bn!D<s_B*fft5u9H#W5Ok{0H~v``<f5IoZLcvowNIJo1htag<JFX#>rXLYf5
zpO#QE>T!z+i6v&d2Bx%E%eVu>2qeROIs0lTu);<kD^%#SM(*fEK`IMJu%yi?|I(xm
z7_pVF9Y-^#jXiR4yAj*!NGkvzA!pxm(~eu3!VIN*;e^6KS|sH@D<0r4^@5vn>3|5;
zOmnIAyZC2P7HH2@Nb99R1@DjoJ$I4dl7hX7Xt0Re^)Y6HV>MWst-7$ZC2Ux%F|N#x
zUln;AhAB`|lZp(*Vh@!wKPa&*L`dUS^w=N&Fw=JSOV}uYk(?aat!;8o;h!-dN0<(c
zrAOKMAl$UuyC+u6azDjQDl<&!@LX;^hlsu9vsZXwqAt#WYaSb(NQyJCY3&sE9zTQW
zs)Crka8U@YE3Vrm(U)?I%owF`_c7)-yQ9k)UHg?%d*iRwhHvW4{QAkf#~@Sd#hToS
zbvYYsiGX}*T&X3fTVQXph7KBUb%KJ{>SJ<c&oN7{sK-KmN>~9C&bw?CoG%dMTPf*>
zX9uvw9u+@zhQ{s1NftBG<v8%sts3d-v>`LY22oSwwVu~|*B2<e0BC|wrTf;xQ<ZWa
z);zc`)yA;sj(3-bhipVVhkg!ak(3K7+Gj$ibcze9uetNmmQll+%RzW0R>e@c2~~An
zN#9k_+9bP%%~p4H)`>!%5~59(w#*S~<L@JN*+tUVw^_Pi&(!JRnKtcEPW4q{<?dW1
zHEE;*p2=tm3xDS~#lda$XbP*LXKPTGj7-Xsl{Su%NGfJV+^-*eo~%18!eKm0a&p5T
zC#w~aFDcDxthc$Q7*~d-I=v*soy?g@vF=Nt`tU?Q0jpSu?L+2k>J5zZE&IOJNmQ;8
zHxQC+96uxHZBP|8QXCIg?NO72mD4z$(q<OB^f05da~BUCUfFQm1KXtl^rAX{X^g7v
zi>$R+$LC2YdRSXFD}5VI@mFNS?_B%m7J4DNl|_>+D3vd$VUq%Sqa=mQT<Jx1laE)u
zd7efye}xcG6cIfn-w6vl;sqwSf5}GbTEdS^$7mQR-%Vds5>;XQ^v=k4+w-P_<Og@j
zK<u=ofnn83umxoq<F~crW*i1ewz2x_fuV29h-e7Soo?8t_;j%!_026v)|%xmd%(Y7
zp&i_S%x&(g)jM?K-~as`cV^zexE4l4UaWkb?xCo2B2V{LRf}Irb{o(}1d{0g)&bqV
zYf}1ht?b~5_I_$C0AoI(r|nA%VlfESIf$06Zfr8Gr;wi=!-Yb<FJ%j2$p*$r4)kE~
z|9$MFm#IfO?_MjX6;2vmdGs3JGYG&MtK|w%u1-Ty-|JX25Z3?yal^DBKDR9`AMe8A
z3I>rZ02AS9&7Sq9e)wEY<eiFR)Xzg)P!~W6`G)}(sB>-sSL?@k1Pk<9MO%d?5tKO#
z%@^y-{X)+B4KtK+lpC=vdh0+-o0bh)c+r-xaJsskq2XOilg^Y!&A4qpG7Fk|oOg1Z
zBV)c=Bn3BqV<rtSPYT=de}>rJexem9tzvin#YpfOe6Z7Oi?dF@K!~7HO)Z>!r@=t?
z-46n4ro=+XQj(i&T963N8F7LKVOY=oGMl!A`;oQBp5k<5dk6t)5vS*6$9N12(a37G
zyo;s9MY-r$qbz7hsYl(B!>h1l$kHulGX9|p$wQa~``Su5(fH594=2;J?ns=q@rTmV
z(&!tmw+FA(DzbWHm#(wZC;5}aapbkgQMf<gkZ5Q1gN1oeu4UcBC%L5rf?{VH=bN#o
zY_TvL-Mspjc^TV`VVJSLlLGn+c!kgK3leme0(+VnnZ9m8T6N=!hI;nx)pb5^1lGQJ
zS*g7E9<q3q@4agjX-WIugLL1amG|{MX9oFYx+N41fsdMGUz&#AyE|Y_Jr?ngpUK*o
z4JwFyjG^L{(~4o{hR|Aq1V0~iZLmZ&zI(qUt&?VTeQyf~pa1JswND;7|428^GOOV6
z6Sey*k6)0!YRgp2h>$Ege@>lY{Q8%O4P%85A%9OBM0n`HCx?(4rR;hdic`#b1OI@w
zmJJooMovz0jrq7c7Vt6&>ATHpzX;W&smQRYKoG07=}g5P-+j3v$r`OMx1VzP0-rtC
z8y0azU^WTbjWg-RVEs@DazoOv4V*^ss{49DkO_9qN?E6b!6y9kkHA&hkAIt)l*g<D
zoPP>v_j)Dp9c;|M-{bgTM|%ElJ;3+fvvyS3$FFb5T94dU=)vcrhMBTs!;)NzsLG#B
zZ4PR&`Gyfwg5vGX^c4};BA;QERX-X((6K9s<I8MdP3&5G<xFAtEL<{8;c_s+ky9Q5
z#l|a$qQ`c`e&u4GNL1o<ciM+ug|@G!s-s}fdt}^l2(dqRWy%+WpJ%mmszUWH$hjAz
zczLpXH>@9>JSoQ!`g$Ly1xjIO5x`Q2U&kTI0o=%WSO$qI?lLyMai@fv^*j?qUttnk
z?yf&p3|NjbEQ8vdl(&TFz7uCIRC#w=M=@pO@6PyOenXVd6Y&h~^{;fjDX!=7@6ttP
z4*2Ywxr-1#PP$1%vA^@WSy}ZhyC!jUoq}h(ahXN1m}>^E>I*lTEhHq+2^0uR*PcyR
zoL(yAr-fK#V#e-4bMk!g+`T~_0|`?h*An>HGIMY<paje^;uUZgCKnSl(G@&urs8JI
zbO0aViIqVcBpaU>-JN*9cDK}4v~NeV;Ip&##S&Q|xmWm5c^IQkhOb$-m=!@RZ?8AQ
zBjl&^>h`I&%?tTQYU}YKi$j&^xS01z_f7HXb3!#Y5ALJ*$KF@mz(yS-dYbIYTv(n`
zzYUahD&j5y3v(>`dQ1Qt={fS`*!(wB23h+~m_DBCrQm5q7JmC9<Q4j7Imol_%+#eu
z;>HyNYq;*Pj)I#I---@C&x-!iy_G)8(l7#8c+fO6HOa;Ici)*dANsRUC$uPN(fjie
z>J`QimRnJ@S&CkK*#;4w*oFi#w%F6SYo{?mThe%K=EE<K-0g+7>p;jXAx{B`v<m$y
zEuQCL8(0z-mbxH~mMJTy!6%O!yRoh#rteM7olJJNPw2EbE8UC6>QmKgg-|CSe*MS$
zWH#_$-X}Hu!3StuH@*{SW5e%7KXTuvKrQTlvG-;>=J`)ecEvNh4He$!;2{#`W+w2W
z9`-kahU3jm_!NWrj%pk!H)UDpm7q(%<t6}<gWG-QJ9GUIW^_AEUqQTrAkL81OOjic
zEW!wsG<%<xNqb{ARmG^VPqgfP8b7@6kcE%BaVfWg$X>n-*5iNkKS1lw7?FDpE?5_6
zvRn6&{UMI+P7nB(2>od9wZ1yFfoo4)U!MqG<1%|2D<aVnXdF#(td?VV6ybyYz9Y9V
z(OZk4yW^F`Wr#s|{8Z<)(s{-^#C-;APj~7DMgs6g^Ngd4{!4V=KF?2age#hQ`I#r)
zrtbrq<?Absi5H8g<^9x9tw`In6>&4KHO7pBMXa1KLW&3Qc3yH=aL|9Tn975H>0rlS
zG`9Qk>gGZBGXnJ=5BF-PYZM5crXF?%!m3-Qc!yBR`;99q<kbzDU!k}o{0Un$?DoLh
z=+g9Tj}*<^uGIsV1DF-z46zvs=ZYVVGT*jrSk?Y+N?X@O9|(bkO$HyP$kbAgi5qA_
zuHmYC#Ou*k-;!6eukUWh1Q$a4gy7{eR1!4DgS@Zc_1r*l7{sX1c#Fuk+o(O;F0ZFo
zsj4NJ3n&Sj#LsT29F{s+U13}VzYr&e@!Do+oLj0y6{6ep?yOC65mjn0+5z}NpUR_f
zULT*UO?k*<S(C}?HuvM~Ftctjf$9T_WZzN!1%TZ7fZ?DtRQ)t9LX*CNd{1NH>Wuj0
zdNQ{qhqG&GO9mLZ23?<lrC*7&DPEOaFD=3LiQL@=wN7V3{`}u`!5obdm59ic5foXn
z_9~b$+j$YNJ%|$yHpx7Z`fO;CRXpNtdVyEWB`Zi|xe?)i4LaW!63iTee>TbMnXrE*
zjt|`Z2=2eGP^{x|S<FhMYL>BMFV8?IP9LY?M2Xz{S%UpZNhS)fXYk(#G$T<1RzgPh
zu?{9Bx6V<si5G;oOZH?+P9vP14g<t~ALmhUy`y|99Vz7DfxiI7y$r~$v?IA!M9#ii
zw%AyL`W8YIQl8?{@_J-c&kgbI&*-NI+ikXy=vO;+_fDOwoI5JD?f8okJ5l?)-2!Yl
z*iw-z<4$W7kX5#DP^$OQLA=IpU87p+AL|ub*SB!|`~O`3RjlZmD7~wg7x~9bYw+P@
z7r4P?BLK}w4*8I}M}zID^W9ams&nMw>W4L6ygwW$li!I_RS1CGI%y86D$g&SlfJt~
z0oe-(FfBC9_lpZWHF#aowECVoOnc~#tIUWkItpA`LRjYfKV&g1Oy>Yr5=ZHCciVC`
z>!Vt0AOVV9D<O=6C=5(h?A`(8+C)=Iz%Kwv!)rY5FO6?;%f)3OmkC-4Qq!y`8~nEB
zLB53tz}1M}knb{nkB3n7{5G1qD*o$nu@$kGqT`?{5rF?<a)PV>uvx)rY0h3G?OdM_
z5-pv=TgKt{mt6F3nwt11L+SqGnp`*;P4rrSLx$7tc4@j+YL+11e?4(<Zdm9O+;JgK
z2WG}Tr2m$MC)t9tmYOeWU->-mX&TlaO50x;(wnNifKc99C*~MVaserwsI>D9yv-{V
zt(pxpm)@!<F0vdZXoL76*jdU<=gMu?kw1lq=~{>!<;~Hd+@}Q$+|$^0`?c^Ov>u=a
zl6kAlx%^_<fj&ijmj_nDJr|!YhQ@YWRK!qIGJ*j>CPK=A2M3Ff?E-A1&HeWUwh>8U
zK0;0o<2;7llDzg=^Rph*FLp0@qs<_d_<RnFU&N;XjGV~p?eu0%iKv$9A8JoL&(i`<
zPNe8iV-+IwC9$EL9km$>Q{>;JS0rDP>NCCgz{P1KHAD>LX#mLS{mTV5e7bFN{VP?_
zfj&`^tfPyu^2arf;wDL@wO{kJL@XXUnb~f(+l(dbB5(Q*IVhBzjJRCZq4$Aa{_i1U
zOxgcG+hsvLAX825TTN@5B^ab-<Bn?9-O?1=sZD%ziZFT^feq@CM(9VH!%R1PXCq$V
zROVC-HvbFLMMC4)20>-ZUC4M)0p(4r0x+F)erAq+n?}W$W+7AK9M|z&Bu1wffkv;l
zx}A33{5bp#{PWlQ->kNd_qGKuu4J8khZO{@OYiOBwcgg*gyg*4(OCQraDbs<5EfFP
zRoQWLf7`OXT67+cQ!T+DrnlZj*E>m2HroR5%8yCXMK2@!Ud1xh7&g>0I=0iCAKl1N
zns4RD|G3*dMfHkb)3!az&nYJ9$S+edMp?bRxT08e?&uyWTK^8`j^$x*)B8LEFhqYg
z^Aqs>Vljy%<*^0QPym|+T<}o#1>?>;A>B>LvNh$Q`a>#&bIi8l^4(tO=7?#0q_O+Z
z-CXx0n|^vF<IC=?nPMwpD7n5+XOm6CblW9oQbdRasN{Zb{h0l_Zlr6-OQX%{=wsA3
zkl%RIRnX_bwlPHeFF?iO8@4d<;AvuTbzVPaO?X*+S(<SG0d^gm8h!e1BAP>qs#XiT
zLozM#v;Cea?89=)P*Sf*uzfZ$_ljZ9)#5L!F3@+SPd)Ov1Q`FR7ebLlSfS<`>@LQ>
z@ueV&h6FcS!hKU!s*l>ei^GPBE6>9qD~3`TQwD)JoGwsFqpMQGccS4eU776w_ZeXL
zKHG-?MXhorhTo^@z@jD7SFHrG#E0c`I^a?EPWd-r^iFwy0;5oo0I7esmWQcg8}T@z
zx`eK~^+?z_Zwd!|^m@@5_*t+Lr!CX3k`i?TK<NH)k^xRc2LMy7c8y!k(Z179f16AO
zNNAE!<XK;)r%{g)JB2+il{z$8mZk9EudPvM(_TI$d_3T`;|bjZe7>!r%v9VEHLZv7
zGf3^Euf?BI<5ZZ%s_5_v@~gkiIM?aMJsO^z4nAK)2DwfF%f5S<eL^ndkod!f)m|LF
zk46L9Hvf9n|1T`uU{kKgs%R4A``u-N3JSi*chQ67ujRU^_WhG{eiL!unvRrkLvo0z
z4${ijv^XtI18Mse-j!qO=m|;ln=LXd*j27^7QU~<VP{C#CNS(FFv63oq=d_{{U&Sw
zN8mRpEz{AMdaqByDFK>Cj$!EH-!4#TuTu9ESe^wk*uDYya-WSrA*9Ewza13J%2NDQ
z`^5+1`~io>e%(*+{1p`xqTCvTvP<0RorH8-bU^b_&8_|x6^ktD_h6e<;HxZ!14A{i
zty_oks>m@T0{A!qe9T|JDzNxSnFW-@71VBdTt`gjYvuq*?Svn(xh;5?s1k+Pd3I1d
zcQWGp8)W{3L)e1%Yc9L2yR8_tnrq$0N>PIM@ik5`Q=L(i>sz1z3Q^B(Umpbq2#?R@
zxm^BJbbGT<*5e0y`)V=x>gtA+-R5%f{>HR%(aCWU@fJDBHIbkf3aHV2f%e0*5GT*(
z_iq-a!~f%BggIf*5pP8_>VV?p*h78_XzcXYoRNi!^R>voNw(SPicIBt^{3x{Erc}G
zf4?;2^r|xClG99*Ca+i|UPhxk8~J)@xwWsSPjX??Ufg`LQUyX(ID&A5J`PRWeTm$N
z)%3uK5*KI@&PL2uvbhbm=yjn?y4fC{edR`J<+RCL-3s6vhbyS>=kVw}b=-;7_Q1gY
zXN<Vks&A+qyVCcJoq7TofH^OOVUbSWu^To+^#D5QAELaS(Dv#vQ1^6tG+D-nh)BBd
zdDD9cfLF0%7+cu7h*nFh*NU%*p8(v!zvgx!*<r&AT(+>&avMa$VxA3eea&ZOdpC}W
z+8QMg61UjODsL1*MO$Qz`O#bsCr+K?0HRTtRhE|QHrG!&6+1LR406hWQ!P00OEAKB
ze@z4&o)l^#v*aUdIrS=bl(9JM!Z~zpusgMrC?-QKiMB;Q#33Y0ZLKwsT>9I&>U5L5
z&n*`O#ygBL2j0JeGi3dtUhm?u(UOiip#9_gI=F>cTzB@cS<Ej_*8zBIp@IFRu^?@^
zCe|af?Zp^&<27%0#})Of8B@Bg?I^sFbD>0qC07qBuZ`2;Eq(p87owg*>&=ZP7eU9{
zXc_d``a@a@`;1E>KXsmtUUd{~157wvH7*BZr!<>`Uqr;oMNI`kKIEAFs`4qo$grky
zj%ORBiQLo#({R)}E8Dm+<e7jn0hJWYH09|?p<BvU*ZRZ>I0_$TL}Ix_(qDNN$TQh8
zP<htd<mgm-c*QiVEwfL*B(K6np2=aJ<OI-D`YK8_uyP?+l9BZ`6Wm8p8~{)2ups3j
z{P+c5$Gr4~rS{&N$&PW{KeC4pfa6I1o-t=m=?$y42Qzrl6z4bV<ixuC85xN{L<^?{
zt=DNp(aAlHr_5<gt!Fe|Kl8Jy>{!2(9rsuG6xRg}X=oi==H$b~Y^lc1r#l1X^u;pD
z74k^m4XF^;2hTM=vZAFUhyqZ=V2HH_@0PC8BWwOt2^{s^Y`73eeu<Ea4pDjL99c`T
zKaii{h+=tk)g1fHJCad-5{And1t5=hFGBY?q(%EF|8aGgclV_<{FmFM<FXShZFG84
z<a!uyw9~n$?`zB5FWoCnjhD<=y3-9Ka=0Qs!J(T<lRjR*sI+VN(&{Ro19Ui{@0fAD
z9Y*<Ml)Ao|xHq%Vh?+O24*{}7_L(IY|8E>dI5y}LZLjWA_{*_3k+t~w<;&q_>8yD{
z7pX!&0@+6@IsL1Pq8&L$plMPx0Y=tmXOtF%XDBG17Yuxpo3P*+r1`HQqgW-)tg1_c
z8GtOmrtl{Rh<CQ%hg*HX)&Cx}okwW71t7<^by8`vy0)7~gs{n%Cy{Gw_#;~ZIt|~r
zB>~!qvYtd4B<jnxW<$YuUWTy-hTzGQ^TiagVR>z7TZS1);;8g287M=f2tBzz&YlLy
zX#v!rDudA=!s@xHebweKK}#pK*5fpEEkiI0fa?l~gqX9N3yx_Dpn;4WHN_rEX2H7y
zy&N_e-VsJvfoC}(GG^m`gS3qOh~&$28UA~J>|DW`<6UyAvNjY$)5($@CZ+lN4jV!v
z`JZqIr$@Fe&3N~bnl?`+*y~}n<u=Zg^Qfr$%idsf4<;DLF|dZt+yrpfVizYOOI~2J
z6wggK#tbE>kIj=xnO&6D_VJG_nDEwTB=kb{6CvLO7o5I~R)wijqDC;!uT{Z1%J#$C
z9oEkD+Dp^d194d|@~-8TpK}%4WzfF>EFS*Sbu073!tl!4H8yPw)->f*IQLYzB2Dv1
z@_%!=mMB$362cHREV>O|6tofK)xahZ&iL$*q@SOTG2{pS&E$#ItkVv?+?>NmgBQ0b
zKH(BtiOcBX06)aNS!er7WL0Dh(0JC=95xCRutw|4>PV1REQleWX5{l&sgsv2meKyo
zkk`tGOxXzv*_O6lJi~G1b`<T{z#An)?F)c;ZAmZMtz$B*(+|}Er$4X6hK~XKN<~`J
zPx<CCsem2EU+{A0HyaV-w7yT?7e5W%&AYXYWpS|>Xmi@_=Ccu~aay~4F%=M)9fc3X
zUMNB*UbHo}R-SO`^HN$4El%Q;0u_@Ah^E&<7N7I#Lg_Lb-uD>NaCdK+34$l2S1lD$
z<(^E3TcavR6b(#$@f(lk25>)O5Wn)a{Oy}CkF_ugF-fjR7KTP=D1ann&eIjCe8bTf
ztS)>eyU=;<>V!EI@%DMjC6Ucdo=p&J|6OJSR4q)%?#RX&Vm{(zu-=qt?Ox?sM7@b!
zsZGHN^u<Kp;~%*rY5Z}u87mDwM>&sZH)Vlqd%Y6V=}+Q=<Q;m*{l|m*G1|P`Owi2^
zL7tBSY&8jhwDCbF$`o)kSeC`6GFwAr`W3tLdS}JDr1mLwc(bsRBux#eG&)_azMbIh
z4yJ>5g;V@c@T&QWb@&WdjYBgu7xmL8ym-2?>$7RCa%(|srR_{lR}(4{puc37>5Mrg
zndFmX@B1((c()UdCbO$<?M`Z&{AhR<W%eeGo?0b}t(5<379>kZE2S8fD>M3-*7RZ#
z^?6{N&mGu}-TYP%VpqhdsLoGoA4x2V(?H>WEj<KWC1bszJLkEaRSgx;rhmE7h9dZq
zY#vAvj(ZQve!#-&My@Cew%^OM0AXf*pg5h;o+==ofh=6Sge{f!3?pV63M=~+#cB)S
z$&#LHL(U|^v!G1Fx+M_t5$$qo^PKp|5(}r75En8cqalbO_Q%*H3EX1O-<K0t!SC?V
zARkZ+^wsRx;&GxO7xan#O{Vi4T8*xyG}>?Q7Be1Oi9HmEUu(0AMY$qa{<72OHvDqt
z#xa8tZtUh%2~l$1=Wyio3N-TA8MRJz9<=NFDg3Ns#Xh4XC1L_21T8`n222gxnkTyi
z$epANUZ#!-E4mp_bFpI2e{MfGdh4Mul3vPhtR0Zbk@dQ*uFQ&FW9I7)Bkwx{lhah=
zk0XB7#+IKOGgkpkIA?O>?pLDmgZTowShpFZfj=4KKJ4^}J!O9CvbqeW;k{i;Q)8w8
zVb#X@{mzPXl+>hz(yHb;o;`pQR{9R0EPU=Yvr9MN)RIV0MJa-|BoVV{sB$rwcrf?O
zlExWF=r_xB*$8KZv~e?+vxL<-OnQG+ucR@wizJPqMuA}1+u|<#6k2b<p5j;_em!Zo
zR0FxJQiHtuC!m~b<5R9jZpH;VwOu~PKhBwdAc@NUahFWn{uP)lMurweR0Fe$p1<Eu
z-Ok=R#+{Yi>(14tFV}R8^UWuRhSo104|?;Ng^d&@1B8(m$KglrG1X%8j?6$T0sPy|
zO^+rTIns!6p5rWSoU$0e#W=~r<N55fWC@>F;UrENFA5QnHdHvX*K00}b@r;nqz?+0
zHb-ct<PaG$_pCFR(++*T<sXiCJFmcDy+j<j9!M(r(4FEi6F|iOH~U<H7qw#LvU0!u
z=m+%>E~h7jXm&!w0l|AjswDV8#-u9J2;n+d3{5-9`5>cO^0Ms1Gs0vxnd27>lUzJw
z?Pmo{>cut$9=W&>OojD?5-Vg6PC_xGuqv~=aA5j}dvTE;rhZN}jP^2?v62B@WY7$e
z@30Z&%bxEzM%?Z?Vjxn_yk}c3;FR25F<Z80OhNSwr8jX$6NBq$zYX^Dgf=i}Um(j6
z57pGvc<V?|L%WPfO=tu4IqU7OPNH<u&M%l__Fr9tNf&;jqpot~{+O{pJ%J2D<y}4!
z3Y?gHm&vUdcT8s39FS5F0b>y2SB{0ZT<=*Cb(a}@5^h*-#^)AXljM+nszm^?d?w6!
zAe4w3|M4Ln#C<41ZR|{ihu!k}V;te_*ZzAk$0hv0@|75VC|!8Z1KCbMErB=5KwXym
zPB3w4pJI)+I=w;Mc+FSSXw0sAmJ*72PMmRP)!6q{_V56}4VOrcMA&pDm!G5x%a9Th
z8Dio5e2rX;OOgTrp%W2rY&<`jV6<v__-LW0F;H`m1&Isx9M;*qP-ehk(Rcw+u^1eq
z)1HY6%+GQ${$2(1D4Fv<1yle|DTo3tkXiI&Hqp1w_YA$R)+8*<cu_?&^R$(gM5P=U
zN3ZEz8YVl;N-mp5CuBDZnadqz@TwC%=&<iCef*9>hUhwxY`~uUG3#1P&ald`4L94Y
zV|TtAX!#hq9Wz>m(Kx!zNro1J7N#_AZDo}|%()viy+9lp%+Xp@n|@*DOXRCP;iMIj
z-Qno9^&+*#yTVeSQ~YR>z1YS^rSf5pDD)CY{JSGLaC@*A5M+ds&xTecM~N{w>Bjs8
zt2(W9pPs(@z5<Lg%zypIm-UdV?P3}qcs1sM$W{OmOvOKfQ)t%?%V|k&yXCn@^1lrA
z<rz58eUWZ^WOLkk@u-*|NbE*DtPCjOrSJG(@%sQ`hF2Q^|C%!kkE6YxXU-q%Mo*Qq
z_dByL>G@AZ!ZuHqhh!Zq#$Ww~vWq;nP9E`gz(1d~mzDcsqO_4an$+&g`u4f*Om8hW
zbT~;0U48n{dzE;4qv#S1u?_GgY)x&J?;;_4DT#tssjNJgO9riNN=^glZm>020KnRI
zxBdlG80y0<&4wa#iaoF?QJeo6$>uFVC-pg9JobZ(vu?Cf5p~4DAM4!-E_pd)Ss^A^
zJZJ__kx{8i9d>fZr4(VJlgBrvbgGX6@z|)4;%8vA;KNtzkIUaLYD3io?))0(6unhZ
zT_sWDa4-+d<XP_G2aEF}mA<%+IL@@h^ldT6&O8KyvKgX$!AChFTWr#Is>onGl?&Bf
zhA&K1Y%8FsgnCyuixp=FO*p^$_EV(0BC*(D^IXn~A1WpU<?suWA=ZM+S>_WcEh=_q
zYol2SEAs$ONFXjI7A1y#)Jw7X!y8=4?K9ITD4W!vs&Dtm4X8)esQ*8Y1QPY#vo-Y2
zQD*JQ3kaHvq7>}ncgJ$5FCrVh>!;L*;2lU@w)Lf*Jl7v_-F%$$(Awbr6?%&u%i2R)
zl$fW%*XToVO<D0ge=F?sH;U@>OMVm-bM4GV&~GR?_YYGCr8)DvJmd?b4FDNOmSdip
zddU3mrq16B71*|Td=7N{(PA(m;_yLuJW{4qpm*j##){s|$@9BIf_s7ruPLAF`2CIh
z$>mOkGx7$k-j%3pM><d2A4e0ekkLrSuQsdL(og5El5}(U$zev&biN8VpIMBt5ML%f
z<^rT1+-`p(DzK>8Fa=?zmNoZBe?WCSRJCh?PDy~Z_k6`~M{dK{T4`qa*Yosf+ENQU
z0fUgF2VdKShxfaW;BRYSMBQwRiLeJbH72$)Iq-aX4J}d#W>@A7;MfKf+&fEF5l#Ei
zqa2<+=b}9z!iO%lJL#qQi+rT!Au|?E{df;tjUjKm9i&j=NVcFkW*=2bHpa{_?WTH5
z_Q}fq#rgzrXMa;ipx+gUtYnLA`URODx+p=7p5%kQ-JHOg7#$wbv*Hq8QkL?sMTI5A
zO5E+9Q~r8gt9dO}W5=TNC?C=mE4LLXVu@!Ah$h=$>V}Hv>QkK5sTiF^d&DaNU(DWb
zJqh_-yn_$MY)`^yA#Y-TYgPJjx#MP`XM8!;tdod{H`wUY2l5Izweu7Jnx1>k6GMEo
zw<CPUgt`&+?}Xv>4_ztiQE1~3CmEj%Mx$XH=2+s_<4c<U@tr|4fz|ZrW~{v@D-<9A
zwA$o+Ao%WN!bm!)g9qPS31RPS`_oA%vqHQJd@bW{ILCnyP-O0nLt`@=q$sCX-%-VO
zb+5+(L+T;&;HnT;VJ?QDrOgvZi|!XrY0Z6b^qD89L(8y-1v8m^_~$-5QcsyJuxG|+
zzDe_b(~<2z%gFsmf*))IZ@Cid<c5SDM$#_GLF4kRrhBk5V=SbZV^2Nykwqz~b0H#^
ze+^FTDx5nAW94+6wmf>|3`&EvDAafOvZ%nMwRT~Ms2(IMvjFDaT`E1bhKWDkTkY<O
z?^!FjXtzbw-)%AVd#dG_DKTSz3|d0{?pLgK`&YSQ(545puV)c>orbNeoh+xU6o|d}
z{Ww&><1n%j+}CTZ{8qi>mE=}jVlx|$Vv+fP_Qv#`W2sk-urv1SNrQV0wxL?5ERKRi
z^k<6uEzhn4?-y%Uo3OS~kCB&n$d{;g2jYLW5wK5pacmr62)U1^f1bpqjM+#2$GQaU
zQAYeTGu8j2f%t;Vm_`v?koo0}>c_^buo?0L-H-*+i-FFr;*IMq5648uiC$`_=h+VE
zJrqz9T$J#~AnL8E4sbKU1XubXHb~g)<67W_?|`nFo1AXFMr{j=Q9#jvUZ}`|4oC=m
z^umNCcJTgi^-4gTYs;>I%kwh%e&r+qB5|`<6q96k2I<MLhm~LgQF^zvek#nz5sap#
zAIXH-YrJ_pnu%QR-(pD(kLcOl7&Pz%rYU^H5wCc#=bO}r%p-^uGL+zY@-Os7e%@oy
zCIx=qVwQblSa!(_AIK@Xbj7NG3)T3w<mgAdCpC8PJ#J|}`ORW9%0r@ENIabr>-lTr
zm$5L|{0nKGBw%KjW+FDAOo?XQ{%VT#v+4TihjPq=1Il#g_JJ|eu#&CbOT$G*8RJhK
zrsXPevOcD-6;ajviXt(40K_O;=pPo2{XUwcADW@5gV7_gi70qnaZw4Q`naNvL|JH>
z(aplsp~Ax>F_lt=IY(Uq;sEYJTB!J24mnljIaxUO<bgUoLTadRPqGu;Brljfo1NsN
zVz9^WOvs=+_<!HosIG^Um1&sq=zqWEpjLG5YA(+>=*g|_H5nQ7v%)}m>3z2CaMd*)
zSFE!q@#}iCeGsu*^ePZxn7D@l-GOJ6sV>j}lPF>5)67R$q^h!8ul)sSF`Rl5`(S|A
zQe(XQ1}<@w1b-SAGnsS3zF<Bp!C2!qR$66X;&&sgoCo$9=nJhbr7KK<?sJua^q%Wh
zbd&iG^i&n=-4mi}=|HGB^ZCLi^zVEw*Z3diJT&j!9k8Vhuu1^`-hHRTXS?v9nXjMY
za|b?M%dQXUyEh#1g}}@=w5^c@cLZKUa1$J@;R*`g)_l*e8J@lO=g%zQ`}jkeqJg$O
zL}rn-zl`5UbF(M06{Z@l{cW}1Hb213Ww&3TP&{+~_tynuFVxHdewF%Tiv*-4p(2ld
z2YkRxv+#o7Hl+0TLa|3#SmT8qo7<~&xlpv<{dhsmLm^nCYsF3G({EoBAn*=!L(gS>
z5m8*APa)k(7+fVu1%IZt`FrI!Ga1N$fJ1Rv3(w-rfvZ!If98dIwTzq09WoCN!<B1n
z@Osb>ufNrk<re3wBd41F+{6NORR+;m`|IgKB>wA3=1bPa8zew?{%iE}3eSm!12+9u
zXCjz)tSg?n6Wn1wBT=j~_BS8k<f<DfAU=QV$+cueKA^JC)PafA`{&ZYlvGPqQm--{
zl9!<HvxiuTf^ptiw)u$i@9a2iX76y3h5y~u5?Z-Yl506Sn^Nply=Ln?*1so!BJ|s2
z!*oiwo30Ib`#P*3&qK+Z$o=rNJiTV6rP=aGnZHX4AlX;pmnSV8E|Tq?M37Sh`IxDF
zl}&#mBfme7@&DYh@J7T>aujLx+bhtf@8cAr`Af;={hqFKk_gI?PNt~eQUjZP^-fG2
zb)z+dXyd7_t_G7%WNW^?4-ON%0aA7Dgn82V=py0KTpF+m7moX9`tXN5n+@ze?*c+f
zNPc=9xquw-1#h3eDXkQ*`NX2N_0G~oX|W3(5ObnmHm?xKz_Yo+;m(J5$+Q2bwet>!
zyIuSEgCJ2NO^6yKdhgK^T_k$9maq{-@14X(OOU2T%Ob4qQ8r?+5+#JNSXK}l!m45Q
z)pLGJo|E&OGw*rloq6|<-|Wo(W@qkSx$gV^Uf=8bP>qJJDK)7CLJ7hfRl3rTP&-?G
zA)dfezDFz<kXaAGxy@tUmWoWz(>oV=kK4G~1LV)6Hm-vh48(Rh7vLpX5P2g}AqO!m
zO92yZWKGRJd=}eP*QJ?F1nsxhcN&t6^{p5YKDXXxM!sx=-V<KH-L-A#*F^NB0TQxA
zcy$1Slj(ZGtXyhb!l}xLS5+d3y^I#d-6^M$16Z!r_W(8;U>`y)vF)t4Bxs5Y>-Bo<
z>XtiQHf^&A&76v0$skTNS_PDATb~`W8-*l$ns#-|>lt}fSePDQ!8q%hZq@u2PeZD*
z)$8c(S7dVyLR*$8X(SE1!N?xT$r3(y7VLK^Y=-Q3R7gV(wnG5k58#JbQ*E5XHTq{-
zD^?WGDkM2F^}n5(9TH;j%4ZdOzPI)6m643d#`;vwxn+w9_8SD@5iOu+G3JABv>&S0
zy2%Lf67(H6{Gg+I6~ToJF`dT)_?q0>$JI1K&a=ffo07VX((CZoqHsc^6sW0l-~u0o
z=3SjR-iRC`5x2%(8-(^A4dk_JD#0783;EkLPd-KjDWD$wm7psb3od_Ba;>JNjBY;o
zYV8wHauD$}&P&l7EZBqy$_&X|HsBR85{nAmI0(L9RHxUdKgH^aHq6iYL0I_-=M~O-
z?IYwrw;{8!+nBg<_?TVVe_hqOjj`=xzLRMhM9cnKHp)<qzTATRm9c!=;ws}fY*|LA
z22h90o0Pl^cyXJ_n(Kk=`9Mi}iDj!0=-EvkECA9$E#lL2s|tU9A2;rd>zfEpglvxE
z$IN(9cLI?imu66y9ly&`v1`H2f+h>~E-9iHR>Q)0xQ-J;{7C1`JZ=}{z)eU0o{~&n
zD5zO6Dci_XeLR3WQ?}~E`@1(x{|GW8#_(VR_X9T%U)DlF-Qrx0^2;0Tw@eMK&?82f
zT{v-(^OtA!rXq&g1JkG96&#eX^d?#=`t6cCVJNfk7mAoJc_@UKw<kYF@W5RX*<C-&
zQ0uS$G${2@XryPUN;Nb6pk=C^k`-U)RW?4SRhRu&-pZ?a!NGN&`xKBNrF$cK;f(7x
zD+AtN%}*w;_}G4N1mij;aupr}G68SKFGdp}i~tMT-)H<+p5Gn})SPIWksg8W4z0hE
zcrj8kUUu4#IaQG#$V`g*V_Zh#$_L%7mmU1NL-S{tMRMdvu4DffXF!bs(vfw(Ko#nI
z#<%O{x`J%J6|NgT+s{CytZ{zJjCHtbe#jjH0qyo0%;kPy=okA~Sy;9v+vE{W#%{C0
zad1aGVvI+6AL!mjkslDIX<@Wjh`Atyjq#+5%*hAix}CT?GH%M*lz~NW!p&aBV0ael
z!lNTrSGBrI=!Q=0nc$q+sr#F>{<UjUT&%{(S&5$L<E0GsxI!<iOjlj%Rc|KNB*8Y=
z$VEwN&OXEM&B&i$RpHAiYCwHm+Ro&2X?N@umfZqX>FptUQ|yT5&|U|o)s9WAm9HnC
z@l*bs{h>QUWU|(f99@Pj7~{iqwO1Nogz1}rt7Koi9b&~M`UF?biacg>wH^PnDj?S5
zLM41SXNOYHraH=8pS{>&X|;HMaB!+$dVW{3e`*r9NCF$SJ@SAK!=$x67{XsC-U2Ex
zd;-w9s}OC>oWvA=u*pS)U!ciO{DllDZ?;4hsmHd#zTD;V>F94D@`R*;soMJs@`#@4
zf@0G)+T5{wmj<Wv8^3|rlWSZg6Zgbl8H)w1Q~<Qz{vei)v4q#C!~xO4(y2agpl{uT
z`$tYStA^qLqI}4mKB?L(b?PaVg>Ti<h+6aoN$j_wIl6^evf$HVBqgylQy)WDCF`t}
zgh<tj^LS(#iXXCY9#q6Q59M-yvlMb$Hb=^d3ZG_m^(#-Ue(PYD@4TUC;zA5QFt=&8
z^i8R2$TGH_vJ3@^pX^LBk(ZA&H_|@r)VMfR0RTZ}^DIBT5MZ=qYXgJM#pl|%B(P|;
z@)jB`ZC=z3C6eJhPAU@@_(SFeP=>+TPWL$B7excK52;u_iJ(;(l+<~&l`5?>pthE3
z*LqGv6-@OtK^?2r)Xp2b+zZa1^RA(Dg$?@tJlp#2#l+8_&KDi)Y~X8pt<HUE?-Cf1
z<_oBIK#7;Pcp?tmZ5Ef`sP`&)|3Y1mos<R317Ozm^KWHNZl87w1;a%%Re`YwYzs+$
zk8OG)<JUw<*Tw2u797@fzDz1TCph?u@*X{I<_V8;YrFn8%SE-|N@-(%Z!Sl7gTh&A
zhP+uOykYF*8Nea%OXyY`9)<~9i+p|HVW5cr9I6HWlXb0r$Ym<k%!LlD8EsMDh`8!^
zXKhN_S={bRL3y$aRP2yi3$UwND8=&n;>FXomP!f$VWsGipQEIk%W1&$f!{cB)oCuF
zVrToxZZC|0sWllw(lI=ROLuEDlp4EiP&6)O<iS*B82fUb#;g#6a#HUqb}c+S8t4JN
zuD8Zx7LBugnlV$Xu0jGekGn&go)6p+J?pT95Gfd}AdR=tTp*L>bM*B(-{3`G*?!9;
z_-tBsevL|1Azg`5ib~j*Lv}V-xPRj>ZT0v*0~XLgQ(8tQek`lx{nG_Ac@1q4LmS-3
z*7Nn}nAJYT_V&k|Z9I&-a}fj1)Scp(HYYT)mGll$6>ROXIhmCRB?-YbZ6r=~L43s%
z$4#_IC2YD7wgRkm`RL;dL-#rAi)~m3hkQm=4kc`Vp7Ib`EE7Chnw5^d2AH_&laL-s
zeo@bEqx5HyWe0b(F3RAYp~idkZ7fFJ@poAqA_)`E1Y!js!P}O;_Y5^J2}ti);g(lF
z`F))*0{9Qdd%pC(C4w?PjN)MPlQdllwRM`AKNpo5f}ma@El;5k{2XW>fMtvtI`bA(
zhA!u)xogO9eeVSQOtZo5oB5;59)eM)=tE*&Fiacvw{r^$3%>cB;8t?KUJcQpy^h2x
z^J!^sWle;Wdjvc6w!VGZ7pvG^q}XEr63}icJgyT|$?PE_&V~r;kJ<@{*TM>%ov^P}
z9~%sbujGZS{jz*avmB4g0EgcK)T@TZtaA4{Y!8F`xtqTqHn}#~i%($iiOIpGqR!l`
z#}^ltmtlFEJT5CtvHd0Fr2|2JO74mlS|gW=Yv-<3@W&*;rxM3aQ7%^&8FE)aHAPu<
z2H8Ldwo4f=ht4)q`@`aVWD^Ui<!`anqv94MXN$U~<KqRA&8%<9;G>fxxHCt;cmumA
za|yxpwNY-}ofUgmJ9FAJp*OKOOTAZ2?;N{l%uTKJMUrf}`HsTOq6~jvj7MuJs{j_u
z_Nj0n3Q{|b@2rxYvV^Q~B=cbv7LqXATs9T6FI*TpJR|gF@vqTv>)w`qhw@U{*a0cp
zqIq3K#GN}I`9+7*v`p@&Fq_K%^G&li3}Ct?f5I;`L%^Nf4wlq4^H4&-6!*}BDZECZ
zv%_W0b{wz89%kSCWKZ=2zBTop(YhX*AGK_)o9R3*rw|!mo$6CC{pDU?{&@ikIePh9
zf}@WzzivrZJPTMy1wCJ0_IAtfEMLUji+yo)%lcrqFCppEM3HMD?5+kH35W%u9HX#a
z%WnMb`8l=_TvZQD72PlRb&rPCb=>rwM>-^Y#h#@ug&yrig2f-FXeDxKq1E?Z#GObJ
zwK#*{vGUt@zUah@*mbBS(C$A2!Qhet{&or}vbMvlV-vK<0_i6Mr&j~aMun3-Ok`3R
z(~QcOIQwQ3;8~#71&I4K{M|Q3A?93;ObhliEM*pE8djICkts(fSqlmY=B<y+7Q_00
z_Px4PjDVNL5z11P(gJ#U6!6Dt#S)XUKNtGUGW)(i?@Bh_dyf$`=}_KKo=Sr*z-%ec
zC)<tA&2h+fjAm!Dn`UHdQU`kE52{}yV<+XJNJ_)s@E#<`><VvTg?Qz808ot+8qdtK
zvLaH_DB!oF@=C8wAOp&poX4Rrri756{|>V4Nw=%Z&8a53<;jdm6~E#75Rn;MT`{8!
z8ouPZd1`Bn4PbTVBmOf*psYND=Qtv;{yvZ<;0-e-zLSxm6mO7CzyfT;oT*f2|2`=<
zc+29uFp{*m0;uGdWzPt$0tyyoe{7qTAIT)wX8~4qyKMe_(sq$1k0HKhj?{$(R*4if
z1<H6{@b=wY<XQd6d*!N;@k!`n78_yzP{P{8U1X)T_*C-7G)qaH%Kbr11|QV=X}Q0c
ze;%nOC!DwckqMTZvM%ZS_Jo*^=i+|3ig*gsH%dRX$U5Ka5zXydWo@lZShE!l&*7>7
zaW7kCZ<ceQdzS;$(TSjLc96&R#|WKQ+1<(#3vmY5)4Rq>gSKpj&pGvz7{{u1{uG9)
zKh96n?6y>ko%8pW7o-TU(kR+kq8&DgFM6W9l3j5nAq6^$t76z330{SaiEGV|V4Kk5
z;wcvFr4uS@5p}-xPUBv2DM5g;JNdnpa#+H@<ITY};{wmjCk-t`w?*G&?sn8JTOr;3
zZydh#GP-gJ_$581(r*vkp^G=OG%ZLr>+m7UjrR5!aUA=KZID>k8I7WZP0cN4LPzNo
zMDXmSgp^s#O7jOwH0849_FBlq&Ny!BM79p2A!+D?OXI6sEXMr%Q>Goa240?bj<SG@
zRZT_nQHA*Sx)*(8#~OxrEk^U@w1S6;p;=@{ZFhiyKimb1V%mRz>_ZdYKhmLU-y>5K
ze0EZ6lEI)JhIisUy=_6Kg5P|9S4V$bXOGO`D#vnxM`co=m_z%|u<YrB3D2T_O$9W{
zs~v^iYBDE}^8-hVRWjk^X#>GPA1EpfljDK;f0+GF=xHw%eP(Mj!DXFVoYh8j7Lg1c
z+cmXLl3YYvt7BF|2MKM}I7fH;$cB>SjfgBpx+Ha-c0Q^hA@JoNt23V5W&;7yoYx{+
zm@mBMW9*1oU!V^B0kV1uEnGXX1=%mR-QM5QSrw*YjB@^s?XIEtjqR4G@&})EHGD2a
z<xY1{wo*<j4D&SGKPyD-s#tkV9?|p~Y&fPZ>bp&YiGnwNffs+5%7OktAZ+_{|5#0W
zmb;!Rs2`3t`@^2D>ykluJi}}VZaeV|8YRJUW7<{REqI9dVR1JispfM2|KyDNq%rLO
z;e4kmOq2OgjlTW{&*eAdl0PiKwGmdaqrCf?oDVz;uuq=koPFEk_uk6Zb7Tn(mP01Y
zk|h8S786olRR57OPJY%Nt#0@E)Jce8#S%}4wkPD9Tn-P5SYM_keNECZ%t47GD?xkw
z?=>EPAch$R1To&X6||Fdf?tVr;SV#?qSbXYVWNG8P?}JQlC_P2GxVdX8Vf&%PlD{J
zCMuW*cR8RflC>2Hv#P6yiFRyEd@byRm6S%6Lwox7C)FJ}93F&Zd#(1TeR;};e(u+j
z{*>1K`$&Fd^T$`2{TPy+9*7UL_M#U&qgij*CA2*3qv`Zr-9hjVRePnx5V^6hDIAIW
zD4e-C7apjp31!RbK8Sb%6pk_g+47T#43`_N_@^Y9Gp^reM8TsNe3kjP+fjjvXrxE}
zW}CAmbJyaC!Iz+|GCuE%V3K&YVKz)jh<4<%={5^TGu5W;k~7%lZkyfkpr=Qm5Ru_$
zkwog4^cPK^YdDEpy)=bS@n#)@?>Gqoy$A1vRHaA{H$wD|5{@lp#?2y<pv06Bzy_)R
zq(jGuiZT%k3)}8cX_Zsicc}Hm({rLv$EikNKH6gbpQ2#Ymm5c+icy2}cle>KdT1FR
z8(J<Dr*fq?uau+|q84ZzjxUA9nQ)zdMu_%z2RQOY;>Enueh^qkcmIAHCYa*8-cdmQ
zw^aQn)4woLN5FER#^H#Uomct^dDC)4<F>Z_E>7c!bPmi5j$pl`uRpr~8}$75e+Up^
zVMi=+K(#qSH6I0(ha@h1%&)`oyMOfKuLDU7{ROQ5b=t8F^#A9NUalDM6N&;qL#!Y7
zIdb^q{$K~1%lzBWgJWMzgxNYcrGrjI>UC$gg`^|N4bEkzD*nsJNZ099(|^1_zXavN
zxno%Q(Nu{`4K<ATH-+IZxb$B_L>~Os#!qUELs=TbLAk^~fX_`$eT@pWJ5m1tKs=qB

diff --git a/docs/appendix/examples/dmvpn.rst b/docs/appendix/examples/dmvpn.rst
index df6a051a..05e7c73a 100644
--- a/docs/appendix/examples/dmvpn.rst
+++ b/docs/appendix/examples/dmvpn.rst
@@ -121,3 +121,53 @@ spoke01
   interface FastEthernet0/0
    ip address dhcp
    duplex half
+
+
+spoke05
+-------
+
+VyOS can also run in DMVPN spoke mode.
+
+.. code-block:: none
+
+  set interfaces ethernet eth0 address 'dhcp'
+
+  set interfaces tunnel tun100 address '172.16.253.133/29'
+  set interfaces tunnel tun100 dhcp-interface 'eth0'
+  set interfaces tunnel tun100 encapsulation 'gre'
+  set interfaces tunnel tun100 multicast 'enable'
+  set interfaces tunnel tun100 parameters ip key '1'
+
+  set protocols nhrp tunnel tun100 cisco-authentication 'secret'
+  set protocols nhrp tunnel tun100 holding-time '300'
+  set protocols nhrp tunnel tun100 map 172.16.253.134/29 nbma-address '92.0.2.1'
+  set protocols nhrp tunnel tun100 map 172.16.253.134/29 register
+  set protocols nhrp tunnel tun100 multicast 'dynamic'
+
+  set vpn ipsec esp-group ESP-HUB compression 'disable'
+  set vpn ipsec esp-group ESP-HUB lifetime '1800'
+  set vpn ipsec esp-group ESP-HUB mode 'tunnel'
+  set vpn ipsec esp-group ESP-HUB pfs 'dh-group2'
+  set vpn ipsec esp-group ESP-HUB proposal 1 encryption 'aes256'
+  set vpn ipsec esp-group ESP-HUB proposal 1 hash 'sha1'
+  set vpn ipsec esp-group ESP-HUB proposal 2 encryption '3des'
+  set vpn ipsec esp-group ESP-HUB proposal 2 hash 'md5'
+  set vpn ipsec ike-group IKE-HUB close-action 'none'
+  set vpn ipsec ike-group IKE-HUB ikev2-reauth 'no'
+  set vpn ipsec ike-group IKE-HUB key-exchange 'ikev1'
+  set vpn ipsec ike-group IKE-HUB lifetime '3600'
+  set vpn ipsec ike-group IKE-HUB proposal 1 dh-group '2'
+  set vpn ipsec ike-group IKE-HUB proposal 1 encryption 'aes256'
+  set vpn ipsec ike-group IKE-HUB proposal 1 hash 'sha1'
+  set vpn ipsec ike-group IKE-HUB proposal 2 dh-group '2'
+  set vpn ipsec ike-group IKE-HUB proposal 2 encryption 'aes128'
+  set vpn ipsec ike-group IKE-HUB proposal 2 hash 'sha1'
+
+  set vpn ipsec ipsec-interfaces interface 'eth0'
+
+  set vpn ipsec profile NHRPVPN authentication mode 'pre-shared-secret'
+  set vpn ipsec profile NHRPVPN authentication pre-shared-secret 'secret'
+  set vpn ipsec profile NHRPVPN bind tunnel 'tun100'
+  set vpn ipsec profile NHRPVPN esp-group 'ESP-HUB'
+  set vpn ipsec profile NHRPVPN ike-group 'IKE-HUB'
+

From 8a3147fca5aa6e1623a09d3ce120886463006418 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 15 Nov 2020 20:10:57 +0100
Subject: [PATCH 087/295] vpn: dmvpn: move example from blueprints to the dmvpn
 chapter

---
 docs/appendix/examples/dmvpn.rst      | 173 -------
 docs/appendix/examples/index.rst      |   2 -
 docs/vpn/dmvpn.rst                    | 644 +++++++++++---------------
 docs/vpn/index.rst                    |   4 +-
 docs/vpn/{gre-ipsec.rst => ipsec.rst} |   7 +-
 5 files changed, 288 insertions(+), 542 deletions(-)
 delete mode 100644 docs/appendix/examples/dmvpn.rst
 rename docs/vpn/{gre-ipsec.rst => ipsec.rst} (99%)

diff --git a/docs/appendix/examples/dmvpn.rst b/docs/appendix/examples/dmvpn.rst
deleted file mode 100644
index 05e7c73a..00000000
--- a/docs/appendix/examples/dmvpn.rst
+++ /dev/null
@@ -1,173 +0,0 @@
-.. _examples-dmvpn:
-
-#########
-DMVPN Hub
-#########
-
-********
-Overview
-********
-
-General information can be found in the :ref:`vpn-dmvpn` chapter.
-
-This blueprint uses VyOS as the DMVPN Hub and Cisco (7206VXR) as multiple
-spokes. The lab was build using :abbr:`EVE-NG (Emulated Virtual Environment NG)`.
-
-.. figure:: /_static/images/blueprint-dmvpn.png
-   :alt: DMVPN network
-
-Each node (Hub and Spoke) uses an IP address from the network 172.16.253.128/29.
-
-The below referenced IP address `192.0.2.1` is used as example address
-representing a global unicast address under which the HUB can be contacted by
-each and every individual spoke.
-
-*************
-Configuration
-*************
-
-Hub
-===
-
-.. code-block:: none
-
-  set interfaces ethernet eth0 address 192.0.2.1/24
-
-  set interfaces tunnel tun100 address '172.16.253.134/29'
-  set interfaces tunnel tun100 encapsulation 'gre'
-  set interfaces tunnel tun100 local-ip '192.0.2.1'
-  set interfaces tunnel tun100 multicast 'enable'
-  set interfaces tunnel tun100 parameters ip key '1'
-
-  set protocols nhrp tunnel tun100 cisco-authentication 'secret'
-  set protocols nhrp tunnel tun100 holding-time '300'
-  set protocols nhrp tunnel tun100 multicast 'dynamic'
-  set protocols nhrp tunnel tun100 redirect
-  set protocols nhrp tunnel tun100 shortcut
-
-  set vpn ipsec esp-group ESP-HUB compression 'disable'
-  set vpn ipsec esp-group ESP-HUB lifetime '1800'
-  set vpn ipsec esp-group ESP-HUB mode 'tunnel'
-  set vpn ipsec esp-group ESP-HUB pfs 'dh-group2'
-  set vpn ipsec esp-group ESP-HUB proposal 1 encryption 'aes256'
-  set vpn ipsec esp-group ESP-HUB proposal 1 hash 'sha1'
-  set vpn ipsec esp-group ESP-HUB proposal 2 encryption '3des'
-  set vpn ipsec esp-group ESP-HUB proposal 2 hash 'md5'
-  set vpn ipsec ike-group IKE-HUB ikev2-reauth 'no'
-  set vpn ipsec ike-group IKE-HUB key-exchange 'ikev1'
-  set vpn ipsec ike-group IKE-HUB lifetime '3600'
-  set vpn ipsec ike-group IKE-HUB proposal 1 dh-group '2'
-  set vpn ipsec ike-group IKE-HUB proposal 1 encryption 'aes256'
-  set vpn ipsec ike-group IKE-HUB proposal 1 hash 'sha1'
-  set vpn ipsec ike-group IKE-HUB proposal 2 dh-group '2'
-  set vpn ipsec ike-group IKE-HUB proposal 2 encryption 'aes128'
-  set vpn ipsec ike-group IKE-HUB proposal 2 hash 'sha1'
-
-  set vpn ipsec ipsec-interfaces interface 'eth0'
-
-  set vpn ipsec profile NHRPVPN authentication mode 'pre-shared-secret'
-  set vpn ipsec profile NHRPVPN authentication pre-shared-secret 'secret'
-  set vpn ipsec profile NHRPVPN bind tunnel 'tun100'
-  set vpn ipsec profile NHRPVPN esp-group 'ESP-HUB'
-  set vpn ipsec profile NHRPVPN ike-group 'IKE-HUB'
-
-Spoke
-=====
-
-The individual spoke configurations only differ in the local IP address on the
-``tun10`` interface. See the above diagram for the individual IP addresses.
-
-spoke01
--------
-
-.. code-block:: none
-
-  crypto keyring DMVPN
-    pre-shared-key address 192.0.2.1 key secret
-  !
-  crypto isakmp policy 10
-   encr aes 256
-   authentication pre-share
-   group 2
-  crypto isakmp invalid-spi-recovery
-  crypto isakmp keepalive 30 30 periodic
-  crypto isakmp profile DMVPN
-     keyring DMVPN
-     match identity address 192.0.2.1 255.255.255.255
-  !
-  crypto ipsec transform-set DMVPN-AES256 esp-aes 256 esp-sha-hmac
-   mode transport
-  !
-  crypto ipsec profile DMVPN
-   set security-association idle-time 720
-   set transform-set DMVPN-AES256
-   set isakmp-profile DMVPN
-  !
-  interface Tunnel10
-   description Tunnel to DMVPN HUB
-   ip address 172.16.253.129 255.255.255.248
-   no ip redirects
-   ip nhrp authentication secret
-   ip nhrp map 172.16.253.134 192.0.2.1
-   ip nhrp map multicast 192.0.2.1
-   ip nhrp network-id 1
-   ip nhrp holdtime 600
-   ip nhrp nhs 172.16.253.134
-   ip nhrp registration timeout 75
-   tunnel source FastEthernet0/0
-   tunnel mode gre multipoint
-   tunnel key 1
-  !
-  interface FastEthernet0/0
-   ip address dhcp
-   duplex half
-
-
-spoke05
--------
-
-VyOS can also run in DMVPN spoke mode.
-
-.. code-block:: none
-
-  set interfaces ethernet eth0 address 'dhcp'
-
-  set interfaces tunnel tun100 address '172.16.253.133/29'
-  set interfaces tunnel tun100 dhcp-interface 'eth0'
-  set interfaces tunnel tun100 encapsulation 'gre'
-  set interfaces tunnel tun100 multicast 'enable'
-  set interfaces tunnel tun100 parameters ip key '1'
-
-  set protocols nhrp tunnel tun100 cisco-authentication 'secret'
-  set protocols nhrp tunnel tun100 holding-time '300'
-  set protocols nhrp tunnel tun100 map 172.16.253.134/29 nbma-address '92.0.2.1'
-  set protocols nhrp tunnel tun100 map 172.16.253.134/29 register
-  set protocols nhrp tunnel tun100 multicast 'dynamic'
-
-  set vpn ipsec esp-group ESP-HUB compression 'disable'
-  set vpn ipsec esp-group ESP-HUB lifetime '1800'
-  set vpn ipsec esp-group ESP-HUB mode 'tunnel'
-  set vpn ipsec esp-group ESP-HUB pfs 'dh-group2'
-  set vpn ipsec esp-group ESP-HUB proposal 1 encryption 'aes256'
-  set vpn ipsec esp-group ESP-HUB proposal 1 hash 'sha1'
-  set vpn ipsec esp-group ESP-HUB proposal 2 encryption '3des'
-  set vpn ipsec esp-group ESP-HUB proposal 2 hash 'md5'
-  set vpn ipsec ike-group IKE-HUB close-action 'none'
-  set vpn ipsec ike-group IKE-HUB ikev2-reauth 'no'
-  set vpn ipsec ike-group IKE-HUB key-exchange 'ikev1'
-  set vpn ipsec ike-group IKE-HUB lifetime '3600'
-  set vpn ipsec ike-group IKE-HUB proposal 1 dh-group '2'
-  set vpn ipsec ike-group IKE-HUB proposal 1 encryption 'aes256'
-  set vpn ipsec ike-group IKE-HUB proposal 1 hash 'sha1'
-  set vpn ipsec ike-group IKE-HUB proposal 2 dh-group '2'
-  set vpn ipsec ike-group IKE-HUB proposal 2 encryption 'aes128'
-  set vpn ipsec ike-group IKE-HUB proposal 2 hash 'sha1'
-
-  set vpn ipsec ipsec-interfaces interface 'eth0'
-
-  set vpn ipsec profile NHRPVPN authentication mode 'pre-shared-secret'
-  set vpn ipsec profile NHRPVPN authentication pre-shared-secret 'secret'
-  set vpn ipsec profile NHRPVPN bind tunnel 'tun100'
-  set vpn ipsec profile NHRPVPN esp-group 'ESP-HUB'
-  set vpn ipsec profile NHRPVPN ike-group 'IKE-HUB'
-
diff --git a/docs/appendix/examples/index.rst b/docs/appendix/examples/index.rst
index 58251378..b2f7bfde 100644
--- a/docs/appendix/examples/index.rst
+++ b/docs/appendix/examples/index.rst
@@ -5,11 +5,9 @@ Configuration Blueprints
 
 This chapter contains various configuration examples:
 
-
 .. toctree::
    :maxdepth: 2
 
-   dmvpn
    dhcp-relay-through-gre-bridge
    zone-policy
    bgp-ipv6-unnumbered
diff --git a/docs/vpn/dmvpn.rst b/docs/vpn/dmvpn.rst
index 9ca28b3c..1a6bdd64 100644
--- a/docs/vpn/dmvpn.rst
+++ b/docs/vpn/dmvpn.rst
@@ -6,8 +6,8 @@ DMVPN
 
 :abbr:`DMVPN (Dynamic Multipoint Virtual Private Network)` is a dynamic
 :abbr:`VPN (Virtual Private Network)` technology originally developed by Cisco.
-While their implementation was somewhat proprietary, the underlying technologies
-are actually standards based. The three technologies are:
+While their implementation was somewhat proprietary, the underlying
+technologies are actually standards based. The three technologies are:
 
 * :abbr:`NHRP (Next Hop Resolution Protocol)` :rfc:`2332`
 * :abbr:`mGRE (Multipoint Generic Routing Encapsulation)` :rfc:`1702`
@@ -26,390 +26,310 @@ peers.
    complete solution also incorporates the use of a routing protocol. BGP is
    particularly well suited for use with DMVPN.
 
-Baseline Configuration:
-
-**STEPS:**
-
-#. Create tunnel config (`interfaces tunnel`)
-#. Create nhrp (`protocols nhrp`)
-#. Create ipsec vpn (optional, but recommended for security) (`vpn ipsec`)
-
-The tunnel will be set to mGRE if for encapsulation `gre` is set, and no
-`remote-ip` is set. If the public ip is provided by DHCP the tunnel `local-ip`
-can be set to "0.0.0.0". If you do set the `remote-ip` directive at any point, the interface will need to be `delete`'d from the config and recreated without the `remote-ip` config ever being set.
-
 .. figure:: ../_static/images/vpn_dmvpn_topology01.png
    :scale: 40 %
    :alt: Baseline DMVPN topology
 
    Baseline DMVPN topology
 
-HUB Configuration
-^^^^^^^^^^^^^^^^^
+*************
+Configuration
+*************
+
+* Please refer to the :ref:`tunnel-interface` documentation for the individual
+  tunnel related options.
+
+* Please refer to the :ref:`ipsec` documentation for the individual IPSec
+  related options.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> cisco-authentication <secret>
+
+  Enables Cisco style authentication on NHRP packets. This embeds the secret
+  plaintext password to the outgoing NHRP packets. Incoming NHRP packets on
+  this interface are discarded unless the secret password is present. Maximum
+  length of the secret is 8 characters.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> dynamic-map <address>
+  nbma-domain-name <fqdn>
+
+  Specifies that the :abbr:`NBMA (Non-broadcast multiple-access network)`
+  addresses of the next hop servers are defined in the domain name
+  nbma-domain-name. For each A record opennhrp creates a dynamic NHS entry.
+
+  Each dynamic NHS will get a peer entry with the configured network address
+  and the discovered NBMA address.
+
+  The first registration request is sent to the protocol broadcast address, and
+  the server's real protocol address is dynamically detected from the first
+  registration reply.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> holding-time <timeout>
+
+  Specifies the holding time for NHRP Registration Requests and Resolution
+  Replies sent from this interface or shortcut-target. The holdtime is specified
+  in seconds and defaults to two hours.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> map cisco
+
+  If the statically mapped peer is running Cisco IOS, specify the cisco keyword.
+  It is used to fix statically the Registration Request ID so that a matching
+  Purge Request can be sent if NBMA address has changed. This is to work around
+  broken IOS which requires Purge Request ID to match the original Registration
+  Request ID.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> map nbma-address <address>
+
+  Creates static peer mapping of protocol-address to :abbr:`NBMA (Non-broadcast
+  multiple-access network)` address.
+
+  If the IP prefix mask is present, it directs opennhrp to use this peer as a
+  next hop server when sending Resolution Requests matching this subnet.
+
+  This is also known as the HUBs IP address or FQDN.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> map register
+
+  The optional parameter register specifies that Registration Request should be
+  sent to this peer on startup.
+
+  This option is required when running a DMVPN spoke.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> multicast <dynamic | nhs>
+
+  Determines how opennhrp daemon should soft switch the multicast traffic.
+  Currently, multicast traffic is captured by opennhrp daemon using a packet
+  socket, and resent back to proper destinations. This means that multicast
+  packet sending is CPU intensive.
+
+  Specfying nhs makes all multicast packets to be repeated to each statically
+  configured next hop.
+
+  Synamic instructs to forward to all peers which we have a direct connection
+  with. Alternatively, you can specify the directive multiple times for each
+  protocol-address the multicast traffic should be sent to.
+
+  .. warning:: It is very easy to misconfigure multicast repeating if you have
+    multiple NHSes.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> non-caching
+
+   Disables caching of peer information from forwarded NHRP Resolution Reply
+   packets. This can be used to reduce memory consumption on big NBMA subnets.
+
+  .. note:: Currently does not do much as caching is not implemented.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> redirect
+
+  Enable sending of Cisco style NHRP Traffic Indication packets. If this is
+  enabled and opennhrp detects a forwarded  packet, it will send a message to
+  the original sender of the packet instructing it to create a direct connection
+  with the destination. This is basically a protocol independent equivalent of
+  ICMP redirect.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> shortcut
+
+  Enable creation of shortcut routes.
+
+  A received NHRP Traffic Indication will trigger the resolution and
+  establishment of a shortcut route.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> shortcut-destination
+
+  This instructs opennhrp to reply with authorative answers on NHRP Resolution
+  Requests destinied to addresses in this interface (instead of forwarding the
+  packets). This effectively allows the creation of shortcut routes to subnets
+  located on the interface.
+
+  When specified, this should be the only keyword for the interface.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> shortcut-target <address>
+
+  Defines an off-NBMA network prefix for which the GRE interface will act as a
+  gateway. This an alternative to defining local interfaces with
+  shortcut-destination flag.
+
+.. cfgcmd:: set protocols nhrp tunnel <tunnel> shortcut-target <address>
+  holding-time <timeout>
+
+  Specifies the holding time for NHRP Registration Requests and Resolution
+  Replies sent from this interface or shortcut-target. The holdtime is specified
+  in seconds and defaults to two hours.
+
+*******
+Example
+*******
+
+
+This blueprint uses VyOS as the DMVPN Hub and Cisco (7206VXR) and VyOS as
+multiple spoke sites. The lab was build using :abbr:`EVE-NG (Emulated Virtual
+Environment NG)`.
+
+.. figure:: /_static/images/blueprint-dmvpn.png
+   :alt: DMVPN network
+
+   DMVPN example network
+
+Each node (Hub and Spoke) uses an IP address from the network 172.16.253.128/29.
+
+The below referenced IP address `192.0.2.1` is used as example address
+representing a global unicast address under which the HUB can be contacted by
+each and every individual spoke.
+
+Configuration
+=============
+
+Hub
+---
 
 .. code-block:: none
 
-  interfaces
-      tunnel <tunN> {
-          address <ipv4>
-          encapsulation gre
-          local-ip <public ip>
-          multicast enable
-          description <txt>
-          parameters {
-              ip {
-                  <usual IP options>
-              }
-          }
-      }
-  }
-  protocols {
-      nhrp {
-          tunnel <tunN> {
-              cisco-authentication <key phrase>
-              holding-time <seconds>
-              multicast dynamic
-              redirect
-          }
-      }
-  }
-  vpn {
-      ipsec {
-          esp-group <text> {
-              lifetime <30-86400>
-              mode tunnel
-              pfs enable
-              proposal <1-65535> {
-                  encryption aes256
-                  hash sha1
-              }
-              proposal <1-65535> {
-                  encryption 3des
-                  hash md5
-              }
-          }
-          ike-group <text> {
-              key-exchange ikev1
-              lifetime <30-86400>
-              proposal <1-65535> {
-                  encryption aes256
-                  hash sha1
-              }
-              proposal <1-65535> {
-                  encryption aes128
-                  hash sha1
-              }
-          }
-          ipsec-interfaces {
-              interface <ethN>
-          }
-          profile <text> {
-              authentication {
-                  mode pre-shared-secret
-                  pre-shared-secret <key phrase>
-              }
-              bind {
-                  tunnel <tunN>
-              }
-              esp-group <text>
-              ike-group <text>
-          }
-      }
-  }
+  set interfaces ethernet eth0 address 192.0.2.1/24
 
-HUB Example Configuration:
+  set interfaces tunnel tun100 address '172.16.253.134/29'
+  set interfaces tunnel tun100 encapsulation 'gre'
+  set interfaces tunnel tun100 local-ip '192.0.2.1'
+  set interfaces tunnel tun100 multicast 'enable'
+  set interfaces tunnel tun100 parameters ip key '1'
+
+  set protocols nhrp tunnel tun100 cisco-authentication 'secret'
+  set protocols nhrp tunnel tun100 holding-time '300'
+  set protocols nhrp tunnel tun100 multicast 'dynamic'
+  set protocols nhrp tunnel tun100 redirect
+  set protocols nhrp tunnel tun100 shortcut
+
+  set vpn ipsec esp-group ESP-HUB compression 'disable'
+  set vpn ipsec esp-group ESP-HUB lifetime '1800'
+  set vpn ipsec esp-group ESP-HUB mode 'tunnel'
+  set vpn ipsec esp-group ESP-HUB pfs 'dh-group2'
+  set vpn ipsec esp-group ESP-HUB proposal 1 encryption 'aes256'
+  set vpn ipsec esp-group ESP-HUB proposal 1 hash 'sha1'
+  set vpn ipsec esp-group ESP-HUB proposal 2 encryption '3des'
+  set vpn ipsec esp-group ESP-HUB proposal 2 hash 'md5'
+  set vpn ipsec ike-group IKE-HUB ikev2-reauth 'no'
+  set vpn ipsec ike-group IKE-HUB key-exchange 'ikev1'
+  set vpn ipsec ike-group IKE-HUB lifetime '3600'
+  set vpn ipsec ike-group IKE-HUB proposal 1 dh-group '2'
+  set vpn ipsec ike-group IKE-HUB proposal 1 encryption 'aes256'
+  set vpn ipsec ike-group IKE-HUB proposal 1 hash 'sha1'
+  set vpn ipsec ike-group IKE-HUB proposal 2 dh-group '2'
+  set vpn ipsec ike-group IKE-HUB proposal 2 encryption 'aes128'
+  set vpn ipsec ike-group IKE-HUB proposal 2 hash 'sha1'
+
+  set vpn ipsec ipsec-interfaces interface 'eth0'
+
+  set vpn ipsec profile NHRPVPN authentication mode 'pre-shared-secret'
+  set vpn ipsec profile NHRPVPN authentication pre-shared-secret 'secret'
+  set vpn ipsec profile NHRPVPN bind tunnel 'tun100'
+  set vpn ipsec profile NHRPVPN esp-group 'ESP-HUB'
+  set vpn ipsec profile NHRPVPN ike-group 'IKE-HUB'
+
+.. note:: Setting this up on AWS will require a "Custom Protocol Rule" for
+  protocol number "47" (GRE) Allow Rule in TWO places. Firstly on the VPC
+  Network ACL, and secondly on the security group network ACL attached to the
+  EC2 instance. This has been tested as working for the official AMI image on
+  the AWS Marketplace. (Locate the correct VPC and security group by navigating
+  through the details pane below your EC2 instance in the AWS console).
+
+Spoke
+-----
+
+The individual spoke configurations only differ in the local IP address on the
+``tun10`` interface. See the above diagram for the individual IP addresses.
+
+spoke01-spoke04
+^^^^^^^^^^^^^^^
 
 .. code-block:: none
 
-  set interfaces ethernet eth0 address '198.51.100.41/30'
-  set interfaces ethernet eth1 address '192.168.1.1/24'
-  set system host-name 'HUB'
+  crypto keyring DMVPN
+    pre-shared-key address 192.0.2.1 key secret
+  !
+  crypto isakmp policy 10
+   encr aes 256
+   authentication pre-share
+   group 2
+  crypto isakmp invalid-spi-recovery
+  crypto isakmp keepalive 30 30 periodic
+  crypto isakmp profile DMVPN
+     keyring DMVPN
+     match identity address 192.0.2.1 255.255.255.255
+  !
+  crypto ipsec transform-set DMVPN-AES256 esp-aes 256 esp-sha-hmac
+   mode transport
+  !
+  crypto ipsec profile DMVPN
+   set security-association idle-time 720
+   set transform-set DMVPN-AES256
+   set isakmp-profile DMVPN
+  !
+  interface Tunnel10
+   ! individual spoke tunnel IP must change
+   ip address 172.16.253.129 255.255.255.248
+   no ip redirects
+   ip nhrp authentication secret
+   ip nhrp map 172.16.253.134 192.0.2.1
+   ip nhrp map multicast 192.0.2.1
+   ip nhrp network-id 1
+   ip nhrp holdtime 600
+   ip nhrp nhs 172.16.253.134
+   ip nhrp registration timeout 75
+   tunnel source FastEthernet0/0
+   tunnel mode gre multipoint
+   tunnel key 1
+  !
+  interface FastEthernet0/0
+   ip address dhcp
+   duplex half
 
-  set interfaces tunnel tun0 address 10.0.0.1/24
-  set interfaces tunnel tun0 encapsulation gre
-  set interfaces tunnel tun0 local-ip 198.51.100.41
-  set interfaces tunnel tun0 multicast enable
-  set interfaces tunnel tun0 parameters ip key 1
 
-  set protocols nhrp tunnel tun0 cisco-authentication SECRET
-  set protocols nhrp tunnel tun0 holding-time  300
-  set protocols nhrp tunnel tun0 multicast dynamic
-  set protocols nhrp tunnel tun0 redirect
+spoke05
+^^^^^^^
 
-  set vpn ipsec ipsec-interfaces interface eth0
-  set vpn ipsec ike-group IKE-HUB proposal 1
-  set vpn ipsec ike-group IKE-HUB proposal 1 encryption aes256
-  set vpn ipsec ike-group IKE-HUB proposal 1 hash sha1
-  set vpn ipsec ike-group IKE-HUB proposal 2 encryption aes128
-  set vpn ipsec ike-group IKE-HUB proposal 2 hash sha1
-  set vpn ipsec ike-group IKE-HUB lifetime 3600
-  set vpn ipsec esp-group ESP-HUB proposal 1 encryption aes256
-  set vpn ipsec esp-group ESP-HUB proposal 1 hash sha1
-  set vpn ipsec esp-group ESP-HUB proposal 2 encryption 3des
-  set vpn ipsec esp-group ESP-HUB proposal 2 hash md5
-  set vpn ipsec esp-group ESP-HUB lifetime 1800
-  set vpn ipsec esp-group ESP-HUB pfs dh-group2
-
-  set vpn ipsec profile NHRPVPN
-  set vpn ipsec profile NHRPVPN authentication mode pre-shared-secret
-  set vpn ipsec profile NHRPVPN authentication pre-shared-secret SECRET
-  set vpn ipsec profile NHRPVPN bind tunnel tun0
-  set vpn ipsec profile NHRPVPN esp-group ESP-HUB
-  set vpn ipsec profile NHRPVPN ike-group IKE-HUB
-
-  set protocols static route 0.0.0.0/0 next-hop 1.1.1.2
-  set protocols static route 192.168.2.0/24 next-hop 10.0.0.2
-  set protocols static route 192.168.3.0/24 next-hop 10.0.0.3
-
-HUB on AWS Configuration Specifics
-^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
-
-Setting this up on AWS will require a "Custom Protocol Rule" for protocol number "47" (GRE) Allow Rule in TWO places. Firstly on the VPC Network ACL, and secondly on the security group network ACL attached to the EC2 instance. This has been tested as working for the official AMI image on the AWS Marketplace. (Locate the correct VPC and security group by navigating through the details pane below your EC2 instance in the AWS console)
-
-SPOKE Configuration
-^^^^^^^^^^^^^^^^^^^
-
-SPOKE1 Configuration:
-
-.. code-block:: none
-
-  interfaces
-      tunnel <tunN> {
-          address <ipv4>
-          encapsulation gre
-          local-ip <public ip>
-          multicast enable
-          description <txt>
-          parameters {
-              ip {
-                  <usual IP options>
-              }
-          }
-      }
-  }
-  protocols {
-      nhrp {
-          tunnel <tunN> {
-              cisco-authentication <key phrase>
-              map <ipv4/net> {
-                  nbma-address <ipv4>
-                  register
-              }
-              holding-time <seconds>
-              multicast nhs
-              redirect
-              shortcut
-          }
-      }
-  }
-  vpn {
-      ipsec {
-          esp-group <text> {
-              lifetime <30-86400>
-              mode tunnel
-              pfs enable
-              proposal <1-65535> {
-                  encryption aes256
-                  hash sha1
-              }
-              proposal <1-65535> {
-                  encryption 3des
-                  hash md5
-              }
-          }
-          ike-group <text> {
-              key-exchange ikev1
-              lifetime <30-86400>
-              proposal <1-65535> {
-                  encryption aes256
-                  hash sha1
-              }
-              proposal <1-65535> {
-                  encryption aes128
-                  hash sha1
-              }
-          }
-          ipsec-interfaces {
-              interface <ethN>
-          }
-          profile <text> {
-              authentication {
-                  mode pre-shared-secret
-                  pre-shared-secret <key phrase>
-              }
-              bind {
-                  tunnel <tunN>
-              }
-              esp-group <text>
-              ike-group <text>
-          }
-      }
-  }
-
-SPOKE1 Example Configuration
+VyOS can also run in DMVPN spoke mode.
 
 .. code-block:: none
 
   set interfaces ethernet eth0 address 'dhcp'
-  set interfaces ethernet eth1 address '192.168.2.1/24'
-  set system host-name 'SPOKE1'
 
-  set interfaces tunnel tun0 address 10.0.0.2/24
-  set interfaces tunnel tun0 encapsulation gre
-  set interfaces tunnel tun0 local-ip 0.0.0.0
-  set interfaces tunnel tun0 multicast enable
-  set interfaces tunnel tun0 parameters ip key 1
+  set interfaces tunnel tun100 address '172.16.253.133/29'
+  set interfaces tunnel tun100 local-ip 0.0.0.0
+  set interfaces tunnel tun100 encapsulation 'gre'
+  set interfaces tunnel tun100 multicast 'enable'
+  set interfaces tunnel tun100 parameters ip key '1'
 
-  set protocols nhrp tunnel tun0 cisco-authentication 'SECRET'
-  set protocols nhrp tunnel tun0 map 10.0.0.1/24 nbma-address 198.51.100.41
-  set protocols nhrp tunnel tun0 map 10.0.0.1/24 'register'
-  set protocols nhrp tunnel tun0 multicast 'nhs'
-  set protocols nhrp tunnel tun0 'redirect'
-  set protocols nhrp tunnel tun0 'shortcut'
+  set protocols nhrp tunnel tun100 cisco-authentication 'secret'
+  set protocols nhrp tunnel tun100 holding-time '300'
+  set protocols nhrp tunnel tun100 map 172.16.253.134/29 nbma-address '92.0.2.1'
+  set protocols nhrp tunnel tun100 map 172.16.253.134/29 register
+  set protocols nhrp tunnel tun100 multicast 'nhs'
+  set protocols nhrp tunnel tun100 redirect
+  set protocols nhrp tunnel tun100 shortcut
 
-  set vpn ipsec ipsec-interfaces interface eth0
-  set vpn ipsec ike-group IKE-SPOKE proposal 1
-  set vpn ipsec ike-group IKE-SPOKE proposal 1 encryption aes256
-  set vpn ipsec ike-group IKE-SPOKE proposal 1 hash sha1
-  set vpn ipsec ike-group IKE-SPOKE proposal 2 encryption aes128
-  set vpn ipsec ike-group IKE-SPOKE proposal 2 hash sha1
-  set vpn ipsec ike-group IKE-SPOKE lifetime 3600
-  set vpn ipsec esp-group ESP-SPOKE proposal 1 encryption aes256
-  set vpn ipsec esp-group ESP-SPOKE proposal 1 hash sha1
-  set vpn ipsec esp-group ESP-SPOKE proposal 2 encryption 3des
-  set vpn ipsec esp-group ESP-SPOKE proposal 2 hash md5
-  set vpn ipsec esp-group ESP-SPOKE lifetime 1800
-  set vpn ipsec esp-group ESP-SPOKE pfs dh-group2
+  set vpn ipsec esp-group ESP-HUB compression 'disable'
+  set vpn ipsec esp-group ESP-HUB lifetime '1800'
+  set vpn ipsec esp-group ESP-HUB mode 'tunnel'
+  set vpn ipsec esp-group ESP-HUB pfs 'dh-group2'
+  set vpn ipsec esp-group ESP-HUB proposal 1 encryption 'aes256'
+  set vpn ipsec esp-group ESP-HUB proposal 1 hash 'sha1'
+  set vpn ipsec esp-group ESP-HUB proposal 2 encryption '3des'
+  set vpn ipsec esp-group ESP-HUB proposal 2 hash 'md5'
+  set vpn ipsec ike-group IKE-HUB close-action 'none'
+  set vpn ipsec ike-group IKE-HUB ikev2-reauth 'no'
+  set vpn ipsec ike-group IKE-HUB key-exchange 'ikev1'
+  set vpn ipsec ike-group IKE-HUB lifetime '3600'
+  set vpn ipsec ike-group IKE-HUB proposal 1 dh-group '2'
+  set vpn ipsec ike-group IKE-HUB proposal 1 encryption 'aes256'
+  set vpn ipsec ike-group IKE-HUB proposal 1 hash 'sha1'
+  set vpn ipsec ike-group IKE-HUB proposal 2 dh-group '2'
+  set vpn ipsec ike-group IKE-HUB proposal 2 encryption 'aes128'
+  set vpn ipsec ike-group IKE-HUB proposal 2 hash 'sha1'
 
-  set vpn ipsec profile NHRPVPN
-  set vpn ipsec profile NHRPVPN authentication mode pre-shared-secret
-  set vpn ipsec profile NHRPVPN authentication pre-shared-secret SECRET
-  set vpn ipsec profile NHRPVPN bind tunnel tun0
-  set vpn ipsec profile NHRPVPN esp-group ESP-SPOKE
-  set vpn ipsec profile NHRPVPN ike-group IKE-SPOKE
+  set vpn ipsec ipsec-interfaces interface 'eth0'
 
-  set protocols static route 192.168.1.0/24 next-hop 10.0.0.1
-  set protocols static route 192.168.3.0/24 next-hop 10.0.0.3
+  set vpn ipsec profile NHRPVPN authentication mode 'pre-shared-secret'
+  set vpn ipsec profile NHRPVPN authentication pre-shared-secret 'secret'
+  set vpn ipsec profile NHRPVPN bind tunnel 'tun100'
+  set vpn ipsec profile NHRPVPN esp-group 'ESP-HUB'
+  set vpn ipsec profile NHRPVPN ike-group 'IKE-HUB'
 
 
-SPOKE2 Configuration
-
-.. code-block:: none
-
-  interfaces
-      tunnel <tunN> {
-          address <ipv4>
-          encapsulation gre
-          local-ip <public ip>
-          multicast enable
-          description <txt>
-          parameters {
-              ip {
-                  <usual IP options>
-              }
-          }
-      }
-  }
-  protocols {
-      nhrp {
-          tunnel <tunN> {
-              cisco-authentication <key phrase>
-              map <ipv4/net> {
-                  nbma-address <ipv4>
-                  register
-              }
-              holding-time <seconds>
-              multicast nhs
-              redirect
-              shortcut
-          }
-      }
-  }
-  vpn {
-      ipsec {
-          esp-group <text> {
-              lifetime <30-86400>
-              mode tunnel
-              pfs enable
-              proposal <1-65535> {
-                  encryption aes256
-                  hash sha1
-              }
-              proposal <1-65535> {
-                  encryption 3des
-                  hash md5
-              }
-          }
-          ike-group <text> {
-              key-exchange ikev1
-              lifetime <30-86400>
-              proposal <1-65535> {
-                  encryption aes256
-                  hash sha1
-              }
-              proposal <1-65535> {
-                  encryption aes128
-                  hash sha1
-              }
-          }
-          ipsec-interfaces {
-              interface <ethN>
-          }
-          profile <text> {
-              authentication {
-                  mode pre-shared-secret
-                  pre-shared-secret <key phrase>
-              }
-              bind {
-                  tunnel <tunN>
-              }
-              esp-group <text>
-              ike-group <text>
-          }
-      }
-  }
-
-SPOKE2 Example Configuration
-
-.. code-block:: none
-
-  set interfaces ethernet eth0 address 'dhcp'
-  set interfaces ethernet eth1 address '192.168.3.1/24'
-  set system host-name 'SPOKE2'
-
-  set interfaces tunnel tun0 address 10.0.0.3/24
-  set interfaces tunnel tun0 encapsulation gre
-  set interfaces tunnel tun0 local-ip 0.0.0.0
-  set interfaces tunnel tun0 multicast enable
-  set interfaces tunnel tun0 parameters ip key 1
-
-  set protocols nhrp tunnel tun0 cisco-authentication SECRET
-  set protocols nhrp tunnel tun0 map 10.0.0.1/24 nbma-address 198.51.100.41
-  set protocols nhrp tunnel tun0 map 10.0.0.1/24 register
-  set protocols nhrp tunnel tun0 multicast nhs
-  set protocols nhrp tunnel tun0 redirect
-  set protocols nhrp tunnel tun0 shortcut
-
-  set vpn ipsec ipsec-interfaces interface eth0
-  set vpn ipsec ike-group IKE-SPOKE proposal 1
-  set vpn ipsec ike-group IKE-SPOKE proposal 1 encryption aes256
-  set vpn ipsec ike-group IKE-SPOKE proposal 1 hash sha1
-  set vpn ipsec ike-group IKE-SPOKE proposal 2 encryption aes128
-  set vpn ipsec ike-group IKE-SPOKE proposal 2 hash sha1
-  set vpn ipsec ike-group IKE-SPOKE lifetime 3600
-  set vpn ipsec esp-group ESP-SPOKE proposal 1 encryption aes256
-  set vpn ipsec esp-group ESP-SPOKE proposal 1 hash sha1
-  set vpn ipsec esp-group ESP-SPOKE proposal 2 encryption 3des
-  set vpn ipsec esp-group ESP-SPOKE proposal 2 hash md5
-  set vpn ipsec esp-group ESP-SPOKE lifetime 1800
-  set vpn ipsec esp-group ESP-SPOKE pfs dh-group2
-
-  set vpn ipsec profile NHRPVPN
-  set vpn ipsec profile NHRPVPN authentication mode pre-shared-secret
-  set vpn ipsec profile NHRPVPN authentication pre-shared-secret SECRET
-  set vpn ipsec profile NHRPVPN bind tunnel tun0
-  set vpn ipsec profile NHRPVPN esp-group ESP-SPOKE
-  set vpn ipsec profile NHRPVPN ike-group IKE-SPOKE
-
-  set protocols static route 192.168.1.0/24 next-hop 10.0.0.1
-  set protocols static route 192.168.2.0/24 next-hop 10.0.0.2
diff --git a/docs/vpn/index.rst b/docs/vpn/index.rst
index 9ba31ae6..c208b3c0 100644
--- a/docs/vpn/index.rst
+++ b/docs/vpn/index.rst
@@ -8,11 +8,11 @@ VPN
    :maxdepth: 2
 
    dmvpn
-   gre-ipsec
+   ipsec
    l2tp
+   openconnect
    openvpn
    pptp
    site2site_ipsec
    sstp
    wireguard
-   openconnect
diff --git a/docs/vpn/gre-ipsec.rst b/docs/vpn/ipsec.rst
similarity index 99%
rename from docs/vpn/gre-ipsec.rst
rename to docs/vpn/ipsec.rst
index 6d4bf1d0..8b0ad3b3 100644
--- a/docs/vpn/gre-ipsec.rst
+++ b/docs/vpn/ipsec.rst
@@ -1,7 +1,8 @@
-.. _gre-ipsec:
+.. _ipsec:
 
-GRE/IPsec
----------
+#####
+IPsec
+#####
 
 Generic Routing Encapsulation (GRE), GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any
 other stateless tunnel protocol over IPsec) is the usual way to protect the

From c405bc37679b21fd21b9c68d4b77ce22f92447ae Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 16 Nov 2020 08:03:39 +0100
Subject: [PATCH 088/295] ipsec: fix toc level

---
 docs/vpn/ipsec.rst | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/docs/vpn/ipsec.rst b/docs/vpn/ipsec.rst
index 8b0ad3b3..647f3753 100644
--- a/docs/vpn/ipsec.rst
+++ b/docs/vpn/ipsec.rst
@@ -4,9 +4,9 @@
 IPsec
 #####
 
-Generic Routing Encapsulation (GRE), GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any
-other stateless tunnel protocol over IPsec) is the usual way to protect the
-traffic inside a tunnel.
+:abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec,
+SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way
+to protect the traffic inside a tunnel.
 
 An advantage of this scheme is that you get a real interface with its own
 address, which makes it easier to setup static routes or use dynamic routing
@@ -26,11 +26,12 @@ what needs to be changed to make it work with a different protocol. We assume
 that IPsec will use pre-shared secret authentication and will use AES128/SHA1
 for the cipher and hash. Adjust this as necessary.
 
-.. NOTE:: VMware users should ensure that VMXNET3 adapters used, e1000 adapters
-   have known issue with GRE processing
+.. NOTE:: VMware users should ensure that a VMXNET3 adapter is used. E1000
+  adapters have known issues with GRE processing.
 
+*************************
 IPsec policy matching GRE
-^^^^^^^^^^^^^^^^^^^^^^^^^
+*************************
 
 The first and arguably cleaner option is to make your IPsec policy match GRE
 packets between external addresses of your routers. This is the best option if

From 3db37d469a576bfc6a74441bfa7c64a434de8626 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sat, 21 Nov 2020 00:43:56 +0100
Subject: [PATCH 089/295] system: option: adjust to new CLI

---
 docs/system/advanced-index.rst          |  2 +-
 docs/system/{options.rst => option.rst} | 24 ++++++++++++------------
 2 files changed, 13 insertions(+), 13 deletions(-)
 rename docs/system/{options.rst => option.rst} (81%)

diff --git a/docs/system/advanced-index.rst b/docs/system/advanced-index.rst
index 7d956018..8e855789 100644
--- a/docs/system/advanced-index.rst
+++ b/docs/system/advanced-index.rst
@@ -12,7 +12,7 @@ System
    flow-accounting
    lcd
    ntp
-   options
+   option
    proxy
    serial-console
    syslog
diff --git a/docs/system/options.rst b/docs/system/option.rst
similarity index 81%
rename from docs/system/options.rst
rename to docs/system/option.rst
index 1b95a101..e7661492 100644
--- a/docs/system/options.rst
+++ b/docs/system/option.rst
@@ -1,4 +1,4 @@
-.. _system_options:
+.. _system_option:
 
 #######
 Options
@@ -10,28 +10,28 @@ This chapter describe the possibilities of advanced system behavior.
 General
 *******
 
-.. cfgcmd:: set system options beep-if-fully-booted
-
-    Send an audible beep to the system speaker when system is ready.
-
-.. cfgcmd:: set system options ctrl-alt-del-action [ ignore | reboot | poweroff ]
+.. cfgcmd:: set system option ctrl-alt-delete <ignore | reboot | poweroff>
 
    Action which will be run once the ctrl-alt-del keystroke is received.
 
-.. cfgcmd:: set system options reboot-on-panic
+.. cfgcmd:: set system option reboot-on-panic
 
-   Automatically teboot system on kernel panic after 60 seconds.
+   Automatically reboot system on kernel panic after 60 seconds.
+
+.. cfgcmd:: set system option startup-beep
+
+    Play an audible beep to the system speaker when system is ready.
 
 ***********
 HTTP client
 ***********
 
-.. cfgcmd:: set system options http-client source-address <address>
+.. cfgcmd:: set system option http-client source-address <address>
 
    Several commands utilize curl to initiate transfers. Configure the local
    source IPv4/IPv6 address used for all CURL operations.
 
-.. cfgcmd:: set system options http-client source-interface <interface>
+.. cfgcmd:: set system option http-client source-interface <interface>
 
    Several commands utilize curl to initiate transfers. Configure the local
    source interface used for all CURL operations.
@@ -46,7 +46,7 @@ When starting a VyOS live system (the installation CD) the configured keyboard
 layout defaults to US. As this might not suite everyones use case you can adjust
 the used keyboard layout on the system console.
 
-.. cfgcmd:: set system options keyboard-layout <us | fr | de | fi | no | dk>
+.. cfgcmd:: set system option keyboard-layout <us | fr | de | fi | no | dk>
 
   Change system keyboard layout to given language.
 
@@ -71,7 +71,7 @@ We now utilize `tuned` for dynamic resource balancing based on profiles.
 
   .. seealso:: https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf
 
-.. cfgcmd:: set system options performance < throughput | latency >
+.. cfgcmd:: set system option performance < throughput | latency >
 
   Configure one of the predefined system performance profiles.
 

From 47a08261ab21cf6b0eed24ad3bc72680bf4bea46 Mon Sep 17 00:00:00 2001
From: sever-sever <v.gletenko@vyos.io>
Date: Sun, 22 Nov 2020 14:09:57 +0200
Subject: [PATCH 090/295] pbr: Policy local-route

---
 docs/routing/pbr.rst | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/docs/routing/pbr.rst b/docs/routing/pbr.rst
index 2a1a56bc..7b0341cb 100644
--- a/docs/routing/pbr.rst
+++ b/docs/routing/pbr.rst
@@ -104,3 +104,34 @@ from PBR
 
 These commands allow the VLAN10 and VLAN20 hosts to communicate with
 each other using the main routing table.
+
+Local route
+===========
+
+The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)` for traffic, which originated from the router itself.
+That solution for multiple ISP's and VyOS router will respond from the same interface that the packet was received.
+Also, it used, if we want that one VPN tunnel to be through one provider, and the second through another.
+
+* ``192.168.1.254`` IP addreess on VyOS eth1 from ISP1
+* ``192.168.2.254`` IP addreess on VyOS eth2 from ISP2
+* ``table 10`` Routing table used for ISP1
+* ``table 11`` Routing table used for ISP2
+
+
+.. code-block:: none
+
+  set policy local-route rule 101 set table '10'
+  set policy local-route rule 101 source '192.0.1.254'
+  set policy local-route rule 102 set table '11'
+  set policy local-route rule 102 source '192.0.2.254'
+  set protocols static table 10 route '0.0.0.0/0' next-hop '192.0.1.1'
+  set protocols static table 11 route '0.0.0.0/0' next-hop '192.0.2.2'
+
+Add multiple source IP in one rule with same priority
+
+.. code-block:: none
+
+  set policy local-route rule 101 set table '10'
+  set policy local-route rule 101 source '192.0.1.254'
+  set policy local-route rule 101 source '192.0.1.253'
+  set policy local-route rule 101 source '203.0.113.0/24'

From 6588e905512e80e6038fd210837b52f43a7632ad Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 23 Nov 2020 17:32:11 +0100
Subject: [PATCH 091/295] interfaces: add generic VLAN documentation

---
 docs/_include/interface-address-with-dhcp.txt | 10 +--
 docs/_include/interface-description.txt       |  4 +-
 .../interface-disable-link-detect.txt         |  2 +-
 docs/_include/interface-disable.txt           | 12 ++--
 .../_include/interface-ipv6-addr-autoconf.txt |  4 +-
 docs/_include/interface-ipv6-addr-eui64.txt   |  4 +-
 docs/_include/interface-mac.txt               |  4 +-
 docs/_include/interface-mtu.txt               |  4 +-
 docs/_include/interface-vlan.txt              | 57 ++++++++++++++---
 docs/_include/interface-vrf.txt               |  4 +-
 docs/interfaces/bond.rst                      |  7 +++
 docs/interfaces/bridge.rst                    | 61 +++++--------------
 docs/interfaces/ethernet.rst                  |  7 +++
 docs/interfaces/pseudo-ethernet.rst           |  7 +++
 docs/interfaces/wireless.rst                  |  8 ++-
 15 files changed, 118 insertions(+), 77 deletions(-)

diff --git a/docs/_include/interface-address-with-dhcp.txt b/docs/_include/interface-address-with-dhcp.txt
index 10838e72..45bc9b03 100644
--- a/docs/_include/interface-address-with-dhcp.txt
+++ b/docs/_include/interface-address-with-dhcp.txt
@@ -1,4 +1,4 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> address <address | dhcp |
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} address <address | dhcp |
    dhcpv6>
 
   Configure interface `<interface>` with one or more interface addresses.
@@ -14,7 +14,7 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} address 192.0.2.1/24
-    set interfaces {{ var0 }} {{ var1 }} address 2001:db8::1/64
-    set interfaces {{ var0 }} {{ var1 }} dhcp
-    set interfaces {{ var0 }} {{ var1 }} dhcpv6
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} address 192.0.2.1/24
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} address 2001:db8::1/64
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcp
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6
\ No newline at end of file
diff --git a/docs/_include/interface-description.txt b/docs/_include/interface-description.txt
index 1c6a870f..50c08d45 100644
--- a/docs/_include/interface-description.txt
+++ b/docs/_include/interface-description.txt
@@ -1,4 +1,4 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> description <description>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} description <description>
 
   Set a human readable, descriptive alias for this connection. Alias is used by
   e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools.
@@ -7,4 +7,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} description 'This is an awesome interface running on VyOS'
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} description 'This is an awesome interface running on VyOS'
\ No newline at end of file
diff --git a/docs/_include/interface-disable-link-detect.txt b/docs/_include/interface-disable-link-detect.txt
index a9c0e85f..1cc97146 100644
--- a/docs/_include/interface-disable-link-detect.txt
+++ b/docs/_include/interface-disable-link-detect.txt
@@ -1,4 +1,4 @@
-.. cfgcmd:: set interfaces {{ var0 }} {{ var2 }} {{ var3 }} <interface> disable-link-detect
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} disable-link-detect
 
   Use this command to direct an interface to not detect any physical state
   changes on a link, for example, when the cable is unplugged.
diff --git a/docs/_include/interface-disable.txt b/docs/_include/interface-disable.txt
index 83ef3e53..f0d22563 100644
--- a/docs/_include/interface-disable.txt
+++ b/docs/_include/interface-disable.txt
@@ -1,10 +1,10 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> disable
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} disable
 
-   Disable given `<interface>`. It will be placed in administratively down
-   (``A/D``) state.
+  Disable given `<interface>`. It will be placed in administratively down
+  (``A/D``) state.
 
-   Example:
+  Example:
 
-   .. code-block:: none
+  .. code-block:: none
 
-     set interfaces {{ var0 }} {{ var1 }} disable
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} disable
\ No newline at end of file
diff --git a/docs/_include/interface-ipv6-addr-autoconf.txt b/docs/_include/interface-ipv6-addr-autoconf.txt
index e16cff0e..c0c5650d 100644
--- a/docs/_include/interface-ipv6-addr-autoconf.txt
+++ b/docs/_include/interface-ipv6-addr-autoconf.txt
@@ -1,4 +1,4 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> ipv6 address autoconf
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} ipv6 address autoconf
 
   :abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts
   can configure themselves automatically when connected to an IPv6 network using
@@ -15,4 +15,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} ipv6 address autoconf
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} ipv6 address autoconf
diff --git a/docs/_include/interface-ipv6-addr-eui64.txt b/docs/_include/interface-ipv6-addr-eui64.txt
index 5f32ccad..2e044b9d 100644
--- a/docs/_include/interface-ipv6-addr-eui64.txt
+++ b/docs/_include/interface-ipv6-addr-eui64.txt
@@ -1,8 +1,8 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> ipv6 address eui64 <prefix>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} ipv6 address eui64 <prefix>
 
   :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
   :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address.
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} ipv6 address eui64 2001:db8:beef::/64
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} ipv6 address eui64 2001:db8:beef::/64
diff --git a/docs/_include/interface-mac.txt b/docs/_include/interface-mac.txt
index de7f2d83..ca2b71e6 100644
--- a/docs/_include/interface-mac.txt
+++ b/docs/_include/interface-mac.txt
@@ -1,4 +1,4 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> mac <xx:xx:xx:xx:xx:xx>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} mac <xx:xx:xx:xx:xx:xx>
 
   Configure user defined :abbr:`MAC (Media Access Control)` address on given
   `<interface>`.
@@ -7,4 +7,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} mac '00:01:02:03:04:05'
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} mac '00:01:02:03:04:05'
\ No newline at end of file
diff --git a/docs/_include/interface-mtu.txt b/docs/_include/interface-mtu.txt
index e727c3e9..fd232f5d 100644
--- a/docs/_include/interface-mtu.txt
+++ b/docs/_include/interface-mtu.txt
@@ -1,4 +1,4 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> mtu <mtu>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} mtu <mtu>
 
   Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It
   is the size (in bytes) of the largest ethernet frame sent on this link.
@@ -7,4 +7,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} mtu 1450
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} mtu 1450
\ No newline at end of file
diff --git a/docs/_include/interface-vlan.txt b/docs/_include/interface-vlan.txt
index c1472018..7b87c3eb 100644
--- a/docs/_include/interface-vlan.txt
+++ b/docs/_include/interface-vlan.txt
@@ -29,12 +29,6 @@ term used for this is ``vif``.
 
   .. note:: Only 802.1Q-tagged packets are accepted on Ethernet vifs.
 
-  Example:
-
-  .. code-block:: none
-
-    set interfaces {{ var0 }} {{ var1 }} vif 10
-
 .. cmdinclude:: ../_include/interface-address-with-dhcp.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
@@ -42,7 +36,56 @@ term used for this is ``vif``.
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-common.txt
+.. cmdinclude:: ../_include/interface-description.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
+
+.. cmdinclude:: ../_include/interface-disable.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
+
+.. cmdinclude:: ../_include/interface-disable-link-detect.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
+
+.. cmdinclude:: ../_include/interface-mac.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
+
+.. cmdinclude:: ../_include/interface-mtu.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
+
+.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
+
+.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
+
+.. cmdinclude:: ../_include/interface-vrf.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
diff --git a/docs/_include/interface-vrf.txt b/docs/_include/interface-vrf.txt
index 92bfae93..ca715fb2 100644
--- a/docs/_include/interface-vrf.txt
+++ b/docs/_include/interface-vrf.txt
@@ -1,4 +1,4 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> vrf <vrf>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} vrf <vrf>
 
   Place interface in given VRF instance.
 
@@ -9,4 +9,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} vrf red
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} vrf red
\ No newline at end of file
diff --git a/docs/interfaces/bond.rst b/docs/interfaces/bond.rst
index 21088c02..eea35e2c 100644
--- a/docs/interfaces/bond.rst
+++ b/docs/interfaces/bond.rst
@@ -256,6 +256,13 @@ Bond options
    The maximum number of targets that can be specified is 16. The default value
    is no IP addresses.
 
+VLAN
+====
+
+.. cmdinclude:: ../_include/interface-vlan.txt
+   :var0: bond
+   :var1: bond0
+
 *******
 Example
 *******
diff --git a/docs/interfaces/bridge.rst b/docs/interfaces/bridge.rst
index 058d7b01..045ae2a8 100644
--- a/docs/interfaces/bridge.rst
+++ b/docs/interfaces/bridge.rst
@@ -113,56 +113,27 @@ links providing fault tolerance if an active link fails.
    Designated Bridges. Hello packets are used to communicate information
    about the topology throughout the entire Bridged Local Area Network.
 
-Enable VLAN-aware bridge
--------------------------
+VLAN
+====
 
-.. cfgcmd:: set interfaces bridge <interface> member interface <member> native-vlan <vlan-id>
+.. cmdinclude:: ../_include/interface-vlan.txt
+   :var0: bridge
+   :var1: br0
 
-   Set the native VLAN ID flag of the interface. When a data packet without a VLAN tag enters
-   the port, the data packet will be forced to add a tag of a specific vlan id. When the vlan 
-   id flag flows out, the tag of the vlan id will be stripped
+.. cfgcmd:: set interfaces bridge <interface> member interface <member>
+   native-vlan <vlan-id>
 
-.. cfgcmd:: set interfaces bridge <interface> member interface <member> allowed-vlan <vlan-id>
+   Set the native VLAN ID flag of the interface. When a data packet without a
+   VLAN tag enters the port, the data packet will be forced to add a tag of a
+   specific vlan id. When the vlan id flag flows out, the tag of the vlan id
+   will be stripped
 
-   Allows specific VLAN IDs to pass through the bridge member interface
+.. cfgcmd:: set interfaces bridge <interface> member interface <member>
+   allowed-vlan <vlan-id>
 
-.. cfgcmd:: set interfaces bridge <interface> member interface <member> allowed-vlan <n-m>
-
-   `n` and `m` represent a VLAN ID, which identifies a VLAN ID range and allows all VLAN IDS in this range to pass through the bridge member interface
-
-VLAN (802.1q) configuration
----------------------------
-
-IEEE 802.1q, often referred to as Dot1q, is the networking standard that supports
-virtual LANs (VLANs) on an IEEE 802.3 Ethernet network. The standard defines a
-system of VLAN tagging for Ethernet frames and the accompanying procedures to be
-used by bridges and switches in handling such frames. The standard also contains
-provisions for a quality-of-service prioritization scheme commonly known as IEEE
-802.1p and defines the Generic Attribute Registration Protocol.
-
-Portions of the network which are VLAN-aware (i.e., IEEE 802.1q conformant) can
-include VLAN tags. When a frame enters the VLAN-aware portion of the network, a
-tag is added to represent the VLAN membership. Each frame must be distinguishable
-as being within exactly one VLAN. A frame in the VLAN-aware portion of the network
-that does not contain a VLAN tag is assumed to be flowing on the native VLAN.
-
-The standard was developed by IEEE 802.1, a working group of the IEEE 802
-standards committee, and continues to be actively revised. One of the notable
-revisions is 802.1Q-2014 which incorporated IEEE 802.1aq (Shortest Path Bridging)
-and much of the IEEE 802.1d standard.
-
-802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The
-term used for this is ``vif``.
-
-.. cfgcmd:: set interfaces bridge <interface> vif <vlan-id>
-
-  Create a new VLAN interface on interface `<interface>` using the VLAN number
-  provided via `<vlan-id>`.
-
-  You can create multiple VLAN interfaces on a physical interface. The VLAN ID
-  range is from 1 to 4094.
-
-  .. note:: Only 802.1Q-tagged packets are accepted on Bridge vifs.
+   Allows specific VLAN IDs to pass through the bridge member interface. This
+   can either be an individual VLAN id or a range of VLAN ids delimited by a
+   hyphen.
 
 *******
 Example
diff --git a/docs/interfaces/ethernet.rst b/docs/interfaces/ethernet.rst
index 71a340b1..343a7d59 100644
--- a/docs/interfaces/ethernet.rst
+++ b/docs/interfaces/ethernet.rst
@@ -49,6 +49,13 @@ Ethernet options
 
    VyOS default will be `auto`.
 
+VLAN
+====
+
+.. cmdinclude:: ../_include/interface-vlan.txt
+   :var0: ethernet
+   :var1: eth0
+
 *********
 Operation
 *********
diff --git a/docs/interfaces/pseudo-ethernet.rst b/docs/interfaces/pseudo-ethernet.rst
index b373a617..d4eb8eff 100644
--- a/docs/interfaces/pseudo-ethernet.rst
+++ b/docs/interfaces/pseudo-ethernet.rst
@@ -56,3 +56,10 @@ Pseudo Ethernet/MACVLAN options
 
    Specifies the physical `<ethX>` Ethernet interface associated with a Pseudo
    Ethernet `<interface>`.
+
+VLAN
+====
+
+.. cmdinclude:: ../_include/interface-vlan.txt
+   :var0: pseudo-ethernet
+   :var1: peth0
diff --git a/docs/interfaces/wireless.rst b/docs/interfaces/wireless.rst
index 75c42f29..b51eb274 100644
--- a/docs/interfaces/wireless.rst
+++ b/docs/interfaces/wireless.rst
@@ -274,7 +274,6 @@ VHT (Very High Throughput) capabilities (802.11ac)
 
   Station supports receiving VHT variant HT Control field
 
-
 Wireless options (Station/Client)
 =================================
 
@@ -373,6 +372,13 @@ Resulting in
   }
 
 
+VLAN
+====
+
+.. cmdinclude:: ../_include/interface-vlan.txt
+   :var0: wireless
+   :var1: wlan0
+
 *********
 Operation
 *********

From 0687796d57981d4f6e4747934857a2ad611f29f5 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 23 Nov 2020 17:39:54 +0100
Subject: [PATCH 092/295] l2tpv3: fix inconsistent title level

---
 docs/interfaces/l2tpv3.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/interfaces/l2tpv3.rst b/docs/interfaces/l2tpv3.rst
index e9b00bef..4c9cbf9b 100644
--- a/docs/interfaces/l2tpv3.rst
+++ b/docs/interfaces/l2tpv3.rst
@@ -84,7 +84,7 @@ Example
 *******
 
 Over IP
-^^^^^^^
+=======
 
 .. code-block:: none
 
@@ -103,7 +103,7 @@ Over IP
 Inverse configuration has to be applied to the remote side.
 
 Over UDP
-^^^^^^^^
+========
 
 UDP mode works better with NAT:
 
@@ -130,7 +130,7 @@ To create more than one tunnel, use distinct UDP ports.
 
 
 Over IPSec, L2 VPN (bridge)
-^^^^^^^^^^^^^^^^^^^^^^^^^^^
+===========================
 
 This is the LAN extension use case. The eth0 port of the distant VPN peers
 will be directly connected like if there was a switch between them.

From 182f9bd3b3fdf503a6676ee2348f1a7b0dd91576 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 23 Nov 2020 17:40:01 +0100
Subject: [PATCH 093/295] pppoe: fix inconsistent title level

---
 docs/interfaces/pppoe.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/interfaces/pppoe.rst b/docs/interfaces/pppoe.rst
index 7b2c319d..313edd84 100644
--- a/docs/interfaces/pppoe.rst
+++ b/docs/interfaces/pppoe.rst
@@ -271,7 +271,7 @@ assigning it to the pppoe0 itself as shown here:
   set interfaces pppoe pppoe0 firewall out name NET-OUT
 
 VLAN Example
-------------
+============
 
 Some recent ISPs require you to build the PPPoE connection through a VLAN
 interface. One of those ISPs is e.g. Deutsche Telekom in Germany. VyOS

From fe3ba9b2b731f5571bfa9ab3ae13492dfd0f7c30 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 23 Nov 2020 18:37:17 +0100
Subject: [PATCH 094/295] Add .readthedocs.yml

---
 .readthedocs.yml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 .readthedocs.yml

diff --git a/.readthedocs.yml b/.readthedocs.yml
new file mode 100644
index 00000000..db36f18f
--- /dev/null
+++ b/.readthedocs.yml
@@ -0,0 +1,24 @@
+# .readthedocs.yml
+# Read the Docs configuration file
+# See https://docs.readthedocs.io/en/stable/config-file/v2.html for details
+
+# Required
+version: 2
+
+# Build documentation in the docs/ directory with Sphinx
+sphinx:
+  configuration: docs/conf.py
+
+# Build documentation with MkDocs
+#mkdocs:
+#  configuration: mkdocs.yml
+
+# Optionally build your docs in additional formats such as PDF
+formats:
+  - pdf
+
+# Optionally set the version of Python and requirements required to build your docs
+python:
+  version: 3.7
+  install:
+    - requirements: requirements.txt

From 7c49078eda18d708642f99480c02b3c897123962 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 23 Nov 2020 18:38:31 +0100
Subject: [PATCH 095/295] console-server: fix error in "code-block" directive

---
 docs/services/console-server.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/services/console-server.rst b/docs/services/console-server.rst
index c9b48114..cf222544 100644
--- a/docs/services/console-server.rst
+++ b/docs/services/console-server.rst
@@ -82,7 +82,7 @@ Operation
 
   Show currently connected users.
 
-  .. code-block::
+  .. code-block:: none
 
     vyos@vyos:~$ show console-server user
      usb0b2.4p1.0               up   vyos@localhost

From c8e751e4d2a8e0b27966814e8a2f2133d092f6a8 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 23 Nov 2020 18:39:15 +0100
Subject: [PATCH 096/295] firewall: fix error in "code-block" directive

---
 docs/firewall.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/firewall.rst b/docs/firewall.rst
index 2d9001a6..870e9a08 100644
--- a/docs/firewall.rst
+++ b/docs/firewall.rst
@@ -571,7 +571,7 @@ Rule-set overview
 
    This will show you a summary about rule-sets and groups
 
-   .. code-block::
+   .. code-block:: none
 
       vyos@vyos:~$ show firewall summary
 

From 45ddcdc8132fd59032d4fb204f509e4aab8031f7 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Mon, 23 Nov 2020 19:25:17 +0100
Subject: [PATCH 097/295] cmdinclude: fix leading spaces

---
 docs/_ext/vyos.py | 28 ++++++++--------------------
 1 file changed, 8 insertions(+), 20 deletions(-)

diff --git a/docs/_ext/vyos.py b/docs/_ext/vyos.py
index e42d4cf0..4001f0fe 100644
--- a/docs/_ext/vyos.py
+++ b/docs/_ext/vyos.py
@@ -277,27 +277,15 @@ class CfgInclude(Directive):
             return codeblock.run()
 
         new_include_lines = []
-        var_value0 = self.options.get('var0', '')
-        var_value1 = self.options.get('var1', '')
-        var_value2 = self.options.get('var2', '')
-        var_value3 = self.options.get('var3', '')
-        var_value4 = self.options.get('var4', '')
-        var_value5 = self.options.get('var5', '')
-        var_value6 = self.options.get('var6', '')
-        var_value7 = self.options.get('var7', '')
-        var_value8 = self.options.get('var8', '')
-        var_value9 = self.options.get('var9', '')
+
         for line in include_lines:
-            line = re.sub('{{\s?var0\s?}}',var_value0,line)
-            line = re.sub('{{\s?var1\s?}}',var_value1,line)
-            line = re.sub('{{\s?var2\s?}}',var_value2,line)
-            line = re.sub('{{\s?var3\s?}}',var_value3,line)
-            line = re.sub('{{\s?var4\s?}}',var_value4,line)
-            line = re.sub('{{\s?var5\s?}}',var_value5,line)
-            line = re.sub('{{\s?var6\s?}}',var_value6,line)
-            line = re.sub('{{\s?var7\s?}}',var_value7,line)
-            line = re.sub('{{\s?var8\s?}}',var_value8,line)
-            line = re.sub('{{\s?var9\s?}}',var_value9,line)
+            for i in range(10):
+                value = self.options.get(f'var{i}','')
+                if value == '':
+                    line = re.sub('\s?{{\s?var' + str(i) + '\s?}}',value,line)
+                else:
+                    line = re.sub('{{\s?var' + str(i) + '\s?}}',value,line)
+
             new_include_lines.append(line)
         self.state_machine.insert_input(new_include_lines, path)
         return []

From cdb3550aaf1beb0d2069f33c5e66a232f7cbdee1 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 23 Nov 2020 21:19:44 +0100
Subject: [PATCH 098/295] interfaces: vlan: remove wrong arg in cmd headline

---
 docs/_include/interface-address-with-dhcp.txt |  2 +-
 docs/_include/interface-description.txt       |  2 +-
 docs/_include/interface-dhcp-options.txt      | 22 ++++---
 docs/_include/interface-dhcpv6-options.txt    | 24 ++++----
 .../interface-dhcpv6-prefix-delegation.txt    | 57 ++++++++++---------
 .../interface-disable-link-detect.txt         |  9 +--
 docs/_include/interface-disable.txt           |  2 +-
 .../_include/interface-ipv6-addr-autoconf.txt |  3 +-
 docs/_include/interface-ipv6-addr-eui64.txt   |  3 +-
 docs/_include/interface-mac.txt               |  3 +-
 docs/_include/interface-mtu.txt               |  3 +-
 docs/_include/interface-vlan.txt              | 16 ++++++
 docs/_include/interface-vrf.txt               |  3 +-
 13 files changed, 88 insertions(+), 61 deletions(-)

diff --git a/docs/_include/interface-address-with-dhcp.txt b/docs/_include/interface-address-with-dhcp.txt
index 45bc9b03..20cd53ac 100644
--- a/docs/_include/interface-address-with-dhcp.txt
+++ b/docs/_include/interface-address-with-dhcp.txt
@@ -1,4 +1,4 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} address <address | dhcp |
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} address <address | dhcp |
    dhcpv6>
 
   Configure interface `<interface>` with one or more interface addresses.
diff --git a/docs/_include/interface-description.txt b/docs/_include/interface-description.txt
index 50c08d45..4347b837 100644
--- a/docs/_include/interface-description.txt
+++ b/docs/_include/interface-description.txt
@@ -1,4 +1,4 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} description <description>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} description <description>
 
   Set a human readable, descriptive alias for this connection. Alias is used by
   e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools.
diff --git a/docs/_include/interface-dhcp-options.txt b/docs/_include/interface-dhcp-options.txt
index da1975fc..2bc23efc 100644
--- a/docs/_include/interface-dhcp-options.txt
+++ b/docs/_include/interface-dhcp-options.txt
@@ -1,4 +1,5 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcp-options client-id <description>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+   dhcp-options client-id <description>
 
   :rfc:`2131` states: The client MAY choose to explicitly provide the identifier
   through the 'client identifier' option. If the client supplies a 'client
@@ -10,9 +11,10 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} dhcp-options client-id 'foo-bar'
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcp-options client-id 'foo-bar'
 
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcp-options host-name <hostname>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  dhcp-options host-name <hostname>
 
   Instead of sending the real system hostname to the DHCP server, overwrite the
   host-name with this given-value.
@@ -21,20 +23,22 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} dhcp-options host-name 'VyOS'
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcp-options host-name 'VyOS'
 
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcp-options vendor-class-id <vendor-id>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  dhcp-options vendor-class-id <vendor-id>
 
   The vendor-class-id option can be used to request a specific class of vendor
   options from the server.
 
-  Example
+  Example:
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} dhcp-options vendor-class-id 'VyOS'
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcp-options vendor-class-id 'VyOS'
 
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcp-options no-default-route
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  dhcp-options no-default-route
 
   Only request an address from the DHCP server but do not request a default
   gateway.
@@ -43,4 +47,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} dhcp-options no-default-route
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcp-options no-default-route
diff --git a/docs/_include/interface-dhcpv6-options.txt b/docs/_include/interface-dhcpv6-options.txt
index 94e80309..00b5e817 100644
--- a/docs/_include/interface-dhcpv6-options.txt
+++ b/docs/_include/interface-dhcpv6-options.txt
@@ -1,38 +1,38 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-options parameters-only
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  dhcpv6-options parameters-only
 
   This statement specifies dhcp6c to only exchange informational configuration
   parameters with servers. A list of DNS server addresses is an example of such
   parameters. This statement is useful when the client does not need stateful
   configuration parameters such as IPv6 addresses or prefixes.
 
-  Example:
-
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} dhcpv6-options parameters-only
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6-options parameters-only
 
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-options rapid-commit
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  dhcpv6-options rapid-commit
 
   When rapid-commit is specified, dhcp6c will include a rapid-commit option in
   solicit messages and wait for an immediate reply instead of advertisements.
 
-  Example:
-
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} dhcpv6-options rapid-commit
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6-options rapid-commit
 
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-options temporary
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  dhcpv6-options temporary
 
   Request only a temporary address and not form an IA_NA (Identity Association
   for Non-temporary Addresses) partnership.
 
-  Example
-
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} dhcpv6-options temporary
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6-options temporary
 
 .. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
+  :var2: {{ var2 }}
+  :var3: {{ var3 }}
+  :var4: {{ var4 }}
diff --git a/docs/_include/interface-dhcpv6-prefix-delegation.txt b/docs/_include/interface-dhcpv6-prefix-delegation.txt
index 61e6aaa2..21721400 100644
--- a/docs/_include/interface-dhcpv6-prefix-delegation.txt
+++ b/docs/_include/interface-dhcpv6-prefix-delegation.txt
@@ -3,52 +3,53 @@
 VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation
 is supported by most ISPs who provide native IPv6 for consumers on fixed networks.
 
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-option pd <id> length <length>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  dhcpv6-option pd <id> length <length>
 
-   Some ISPs by default only delegate a /64 prefix. To request for a specific
-   prefix size use this option to request for a bigger delegation for this pd
-   `<id>`. This value is in the range from 32 - 64 so you could request up to a
-   /32 prefix (if your ISP allows this) down to a /64 delegation.
+  Some ISPs by default only delegate a /64 prefix. To request for a specific
+  prefix size use this option to request for a bigger delegation for this pd
+  `<id>`. This value is in the range from 32 - 64 so you could request up to a
+  /32 prefix (if your ISP allows this) down to a /64 delegation.
 
-   The default value corresponds to 64.
-
-  Example:
+  The default value corresponds to 64.
 
   To request a /56 prefix from your ISP use:
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} dhcpv6-options pd 0 length 56
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6-options pd 0 length 56
 
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-option pd <id> interface <delegatee> address <address>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  dhcpv6-option pd <id> interface <delegatee> address <address>
 
-   Specify the interface address used locally on the interfcae where the prefix
-   has been delegated to. ID must be a decimal integer.
+  Specify the interface address used locally on the interfcae where the prefix
+  has been delegated to. ID must be a decimal integer.
 
-   It will be combined with the delegated prefix and the sla-id to form a
-   complete interface address. The default is to use the EUI-64 address of the
-   interface.
+  It will be combined with the delegated prefix and the sla-id to form a
+  complete interface address. The default is to use the EUI-64 address of the
+  interface.
 
-   Example: Delegate a /64 prefix to interface eth0.10 which will use a local
-   address on this router of ``<prefix>::ffff``, as the address 65534 will
-   correspond to ``ffff`` in hexadecimal notation.
+  Example: Delegate a /64 prefix to interface eth8 which will use a local
+  address on this router of ``<prefix>::ffff``, as the address 65534 will
+  correspond to ``ffff`` in hexadecimal notation.
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} dhcpv6-option pd 0 interface eth0.10 address 65534
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6-option pd 0 interface eth8 address 65534
 
-.. cfgcmd:: set interfaces {{ var0 }} <interface> dhcpv6-option pd <id> interface <delegatee> sla-id <id>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  dhcpv6-option pd <id> interface <delegatee> sla-id <id>
 
-   Specify the identifier value of the site-level aggregator (SLA) on the
-   interface. ID must be a decimal number greater then 0 which fits in the
-   length of SLA IDs (see below).
+  Specify the identifier value of the site-level aggregator (SLA) on the
+  interface. ID must be a decimal number greater then 0 which fits in the
+  length of SLA IDs (see below).
 
-   Example: If ID is 1 and the client is delegated an IPv6 prefix
-   2001:db8:ffff::/48, dhcp6c will combine the two values into a single IPv6
-   prefix, 2001:db8:ffff:1::/64, and will configure the prefix on the specified
-   interface.
+  Example: If ID is 1 and the client is delegated an IPv6 prefix
+  2001:db8:ffff::/48, dhcp6c will combine the two values into a single IPv6
+  prefix, 2001:db8:ffff:1::/64, and will configure the prefix on the specified
+  interface.
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} dhcpv6-option pd 0 interface eth0.10 sla-id 1
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6-option pd 0 interface eth8 sla-id 1
 
diff --git a/docs/_include/interface-disable-link-detect.txt b/docs/_include/interface-disable-link-detect.txt
index 1cc97146..efd45e46 100644
--- a/docs/_include/interface-disable-link-detect.txt
+++ b/docs/_include/interface-disable-link-detect.txt
@@ -1,12 +1,13 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} disable-link-detect
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  disable-link-detect
 
   Use this command to direct an interface to not detect any physical state
   changes on a link, for example, when the cable is unplugged.
 
   Default is to detects physical link state changes.
 
-   Example:
+  Example:
 
-   .. code-block:: none
+  .. code-block:: none
 
-     set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} disable-link-detect
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} disable-link-detect
\ No newline at end of file
diff --git a/docs/_include/interface-disable.txt b/docs/_include/interface-disable.txt
index f0d22563..a9511d8e 100644
--- a/docs/_include/interface-disable.txt
+++ b/docs/_include/interface-disable.txt
@@ -1,4 +1,4 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} disable
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} disable
 
   Disable given `<interface>`. It will be placed in administratively down
   (``A/D``) state.
diff --git a/docs/_include/interface-ipv6-addr-autoconf.txt b/docs/_include/interface-ipv6-addr-autoconf.txt
index c0c5650d..e349a730 100644
--- a/docs/_include/interface-ipv6-addr-autoconf.txt
+++ b/docs/_include/interface-ipv6-addr-autoconf.txt
@@ -1,4 +1,5 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} ipv6 address autoconf
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  ipv6 address autoconf
 
   :abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts
   can configure themselves automatically when connected to an IPv6 network using
diff --git a/docs/_include/interface-ipv6-addr-eui64.txt b/docs/_include/interface-ipv6-addr-eui64.txt
index 2e044b9d..10732bf3 100644
--- a/docs/_include/interface-ipv6-addr-eui64.txt
+++ b/docs/_include/interface-ipv6-addr-eui64.txt
@@ -1,4 +1,5 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} ipv6 address eui64 <prefix>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  ipv6 address eui64 <prefix>
 
   :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
   :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address.
diff --git a/docs/_include/interface-mac.txt b/docs/_include/interface-mac.txt
index ca2b71e6..2daeaccf 100644
--- a/docs/_include/interface-mac.txt
+++ b/docs/_include/interface-mac.txt
@@ -1,4 +1,5 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} mac <xx:xx:xx:xx:xx:xx>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  mac <xx:xx:xx:xx:xx:xx>
 
   Configure user defined :abbr:`MAC (Media Access Control)` address on given
   `<interface>`.
diff --git a/docs/_include/interface-mtu.txt b/docs/_include/interface-mtu.txt
index fd232f5d..8509779b 100644
--- a/docs/_include/interface-mtu.txt
+++ b/docs/_include/interface-mtu.txt
@@ -1,4 +1,5 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} mtu <mtu>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  mtu <mtu>
 
   Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It
   is the size (in bytes) of the largest ethernet frame sent on this link.
diff --git a/docs/_include/interface-vlan.txt b/docs/_include/interface-vlan.txt
index 7b87c3eb..f1948e84 100644
--- a/docs/_include/interface-vlan.txt
+++ b/docs/_include/interface-vlan.txt
@@ -86,6 +86,22 @@ term used for this is ``vif``.
    :var4: 10
 
 .. cmdinclude:: ../_include/interface-vrf.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
+
+**DHCP(v6)**
+
+.. cmdinclude:: ../_include/interface-dhcp-options.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
+
+.. cmdinclude:: ../_include/interface-dhcpv6-options.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
diff --git a/docs/_include/interface-vrf.txt b/docs/_include/interface-vrf.txt
index ca715fb2..450c82aa 100644
--- a/docs/_include/interface-vrf.txt
+++ b/docs/_include/interface-vrf.txt
@@ -1,4 +1,5 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} {{ var4 }} vrf <vrf>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  vrf <vrf>
 
   Place interface in given VRF instance.
 

From 7399b53b9d09ef07219631f79aeebd87c1b98d1e Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 24 Nov 2020 19:38:52 +0100
Subject: [PATCH 099/295] interfaces: add generic QinQ VLAN documentation

---
 docs/_include/interface-address-with-dhcp.txt |  11 +-
 docs/_include/interface-description.txt       |   5 +-
 docs/_include/interface-dhcp-options.txt      |  16 +-
 docs/_include/interface-dhcpv6-options.txt    |  16 +-
 .../interface-dhcpv6-prefix-delegation.txt    |  12 +-
 .../interface-disable-link-detect.txt         |   4 +-
 docs/_include/interface-disable.txt           |   5 +-
 .../_include/interface-ipv6-addr-autoconf.txt |   4 +-
 docs/_include/interface-ipv6-addr-eui64.txt   |   4 +-
 docs/_include/interface-mac.txt               |   4 +-
 docs/_include/interface-mtu.txt               |   4 +-
 docs/_include/interface-vlan-8021ad.txt       | 143 ++++++++++++++++++
 ...face-vlan.txt => interface-vlan-8021q.txt} |   8 +-
 docs/_include/interface-vrf.txt               |   4 +-
 docs/_include/need_improvement.txt            |   5 +-
 docs/common-references.rst                    |   3 +
 docs/interfaces/advanced-index.rst            |   2 -
 docs/interfaces/bond.rst                      |   2 +-
 docs/interfaces/bridge.rst                    |   2 +-
 docs/interfaces/ethernet.rst                  |  12 +-
 docs/interfaces/pseudo-ethernet.rst           |   2 +-
 docs/interfaces/qinq.rst                      |  77 ----------
 docs/interfaces/vlan.rst                      |  69 ---------
 docs/interfaces/wireless.rst                  |  12 +-
 24 files changed, 227 insertions(+), 199 deletions(-)
 create mode 100644 docs/_include/interface-vlan-8021ad.txt
 rename docs/_include/{interface-vlan.txt => interface-vlan-8021q.txt} (93%)
 delete mode 100644 docs/interfaces/qinq.rst
 delete mode 100644 docs/interfaces/vlan.rst

diff --git a/docs/_include/interface-address-with-dhcp.txt b/docs/_include/interface-address-with-dhcp.txt
index 20cd53ac..4ff78c01 100644
--- a/docs/_include/interface-address-with-dhcp.txt
+++ b/docs/_include/interface-address-with-dhcp.txt
@@ -1,4 +1,5 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} address <address | dhcp |
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} address <address | dhcp |
    dhcpv6>
 
   Configure interface `<interface>` with one or more interface addresses.
@@ -14,7 +15,7 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} address 192.0.2.1/24
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} address 2001:db8::1/64
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcp
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} address 192.0.2.1/24
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} address 2001:db8::1/64
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcp
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6
\ No newline at end of file
diff --git a/docs/_include/interface-description.txt b/docs/_include/interface-description.txt
index 4347b837..064d9559 100644
--- a/docs/_include/interface-description.txt
+++ b/docs/_include/interface-description.txt
@@ -1,4 +1,5 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} description <description>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} description <description>
 
   Set a human readable, descriptive alias for this connection. Alias is used by
   e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools.
@@ -7,4 +8,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} description 'This is an awesome interface running on VyOS'
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} description 'This is an awesome interface running on VyOS'
\ No newline at end of file
diff --git a/docs/_include/interface-dhcp-options.txt b/docs/_include/interface-dhcp-options.txt
index 2bc23efc..1a0ce260 100644
--- a/docs/_include/interface-dhcp-options.txt
+++ b/docs/_include/interface-dhcp-options.txt
@@ -1,5 +1,5 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-   dhcp-options client-id <description>
+  {{ var5 }} {{ var6 }} dhcp-options client-id <description>
 
   :rfc:`2131` states: The client MAY choose to explicitly provide the identifier
   through the 'client identifier' option. If the client supplies a 'client
@@ -11,10 +11,10 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcp-options client-id 'foo-bar'
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcp-options client-id 'foo-bar'
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  dhcp-options host-name <hostname>
+  {{ var5 }} {{ var6 }} dhcp-options host-name <hostname>
 
   Instead of sending the real system hostname to the DHCP server, overwrite the
   host-name with this given-value.
@@ -23,10 +23,10 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcp-options host-name 'VyOS'
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcp-options host-name 'VyOS'
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  dhcp-options vendor-class-id <vendor-id>
+  {{ var5 }} {{ var6 }} dhcp-options vendor-class-id <vendor-id>
 
   The vendor-class-id option can be used to request a specific class of vendor
   options from the server.
@@ -35,10 +35,10 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcp-options vendor-class-id 'VyOS'
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcp-options vendor-class-id 'VyOS'
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  dhcp-options no-default-route
+  {{ var5 }} {{ var6 }} dhcp-options no-default-route
 
   Only request an address from the DHCP server but do not request a default
   gateway.
@@ -47,4 +47,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcp-options no-default-route
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcp-options no-default-route
diff --git a/docs/_include/interface-dhcpv6-options.txt b/docs/_include/interface-dhcpv6-options.txt
index 00b5e817..a54a7dce 100644
--- a/docs/_include/interface-dhcpv6-options.txt
+++ b/docs/_include/interface-dhcpv6-options.txt
@@ -1,5 +1,5 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  dhcpv6-options parameters-only
+  {{ var5 }} {{ var6 }} dhcpv6-options parameters-only
 
   This statement specifies dhcp6c to only exchange informational configuration
   parameters with servers. A list of DNS server addresses is an example of such
@@ -8,27 +8,27 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6-options parameters-only
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-options parameters-only
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  dhcpv6-options rapid-commit
+  {{ var5 }} {{ var6 }} dhcpv6-options rapid-commit
 
   When rapid-commit is specified, dhcp6c will include a rapid-commit option in
   solicit messages and wait for an immediate reply instead of advertisements.
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6-options rapid-commit
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-options rapid-commit
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  dhcpv6-options temporary
+  {{ var5 }} {{ var6 }} dhcpv6-options temporary
 
   Request only a temporary address and not form an IA_NA (Identity Association
   for Non-temporary Addresses) partnership.
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6-options temporary
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-options temporary
 
 .. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
   :var0: {{ var0 }}
@@ -36,3 +36,7 @@
   :var2: {{ var2 }}
   :var3: {{ var3 }}
   :var4: {{ var4 }}
+  :var5: {{ var5 }}
+  :var6: {{ var6 }}
+  :var7: {{ var7 }}
+
diff --git a/docs/_include/interface-dhcpv6-prefix-delegation.txt b/docs/_include/interface-dhcpv6-prefix-delegation.txt
index 21721400..99132d17 100644
--- a/docs/_include/interface-dhcpv6-prefix-delegation.txt
+++ b/docs/_include/interface-dhcpv6-prefix-delegation.txt
@@ -4,7 +4,7 @@ VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation
 is supported by most ISPs who provide native IPv6 for consumers on fixed networks.
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  dhcpv6-option pd <id> length <length>
+  {{ var5 }} {{ var6 }} dhcpv6-option pd <id> length <length>
 
   Some ISPs by default only delegate a /64 prefix. To request for a specific
   prefix size use this option to request for a bigger delegation for this pd
@@ -17,10 +17,10 @@ is supported by most ISPs who provide native IPv6 for consumers on fixed network
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6-options pd 0 length 56
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-options pd 0 length 56
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  dhcpv6-option pd <id> interface <delegatee> address <address>
+  {{ var5 }} {{ var6 }} dhcpv6-option pd <id> interface <delegatee> address <address>
 
   Specify the interface address used locally on the interfcae where the prefix
   has been delegated to. ID must be a decimal integer.
@@ -35,10 +35,10 @@ is supported by most ISPs who provide native IPv6 for consumers on fixed network
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6-option pd 0 interface eth8 address 65534
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-option pd 0 interface eth8 address 65534
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  dhcpv6-option pd <id> interface <delegatee> sla-id <id>
+  {{ var5 }} {{ var6 }} dhcpv6-option pd <id> interface <delegatee> sla-id <id>
 
   Specify the identifier value of the site-level aggregator (SLA) on the
   interface. ID must be a decimal number greater then 0 which fits in the
@@ -51,5 +51,5 @@ is supported by most ISPs who provide native IPv6 for consumers on fixed network
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} dhcpv6-option pd 0 interface eth8 sla-id 1
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-option pd 0 interface eth8 sla-id 1
 
diff --git a/docs/_include/interface-disable-link-detect.txt b/docs/_include/interface-disable-link-detect.txt
index efd45e46..1a766715 100644
--- a/docs/_include/interface-disable-link-detect.txt
+++ b/docs/_include/interface-disable-link-detect.txt
@@ -1,5 +1,5 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  disable-link-detect
+  {{ var5 }} {{ var6 }} disable-link-detect
 
   Use this command to direct an interface to not detect any physical state
   changes on a link, for example, when the cable is unplugged.
@@ -10,4 +10,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} disable-link-detect
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} disable-link-detect
\ No newline at end of file
diff --git a/docs/_include/interface-disable.txt b/docs/_include/interface-disable.txt
index a9511d8e..774c1cdd 100644
--- a/docs/_include/interface-disable.txt
+++ b/docs/_include/interface-disable.txt
@@ -1,4 +1,5 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} disable
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} disable
 
   Disable given `<interface>`. It will be placed in administratively down
   (``A/D``) state.
@@ -7,4 +8,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} disable
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} disable
\ No newline at end of file
diff --git a/docs/_include/interface-ipv6-addr-autoconf.txt b/docs/_include/interface-ipv6-addr-autoconf.txt
index e349a730..fea1125e 100644
--- a/docs/_include/interface-ipv6-addr-autoconf.txt
+++ b/docs/_include/interface-ipv6-addr-autoconf.txt
@@ -1,5 +1,5 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  ipv6 address autoconf
+  {{ var5 }} {{ var6 }} ipv6 address autoconf
 
   :abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts
   can configure themselves automatically when connected to an IPv6 network using
@@ -16,4 +16,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} ipv6 address autoconf
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ipv6 address autoconf
diff --git a/docs/_include/interface-ipv6-addr-eui64.txt b/docs/_include/interface-ipv6-addr-eui64.txt
index 10732bf3..e6a58372 100644
--- a/docs/_include/interface-ipv6-addr-eui64.txt
+++ b/docs/_include/interface-ipv6-addr-eui64.txt
@@ -1,9 +1,9 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  ipv6 address eui64 <prefix>
+  {{ var5 }} {{ var6 }} ipv6 address eui64 <prefix>
 
   :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
   :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address.
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} ipv6 address eui64 2001:db8:beef::/64
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ipv6 address eui64 2001:db8:beef::/64
diff --git a/docs/_include/interface-mac.txt b/docs/_include/interface-mac.txt
index 2daeaccf..03aa6106 100644
--- a/docs/_include/interface-mac.txt
+++ b/docs/_include/interface-mac.txt
@@ -1,5 +1,5 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  mac <xx:xx:xx:xx:xx:xx>
+  {{ var5 }} {{ var6 }} mac <xx:xx:xx:xx:xx:xx>
 
   Configure user defined :abbr:`MAC (Media Access Control)` address on given
   `<interface>`.
@@ -8,4 +8,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} mac '00:01:02:03:04:05'
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} mac '00:01:02:03:04:05'
\ No newline at end of file
diff --git a/docs/_include/interface-mtu.txt b/docs/_include/interface-mtu.txt
index 8509779b..76812507 100644
--- a/docs/_include/interface-mtu.txt
+++ b/docs/_include/interface-mtu.txt
@@ -1,5 +1,5 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  mtu <mtu>
+  {{ var5 }} {{ var6 }} mtu <mtu>
 
   Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It
   is the size (in bytes) of the largest ethernet frame sent on this link.
@@ -8,4 +8,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} mtu 1450
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} mtu 9000
\ No newline at end of file
diff --git a/docs/_include/interface-vlan-8021ad.txt b/docs/_include/interface-vlan-8021ad.txt
new file mode 100644
index 00000000..a1e971be
--- /dev/null
+++ b/docs/_include/interface-vlan-8021ad.txt
@@ -0,0 +1,143 @@
+.. include:: ../_include/need_improvement.txt
+
+IEEE 802.1ad_ was an Ethernet networking standard informally known as QinQ as
+an amendment to IEEE standard 802.1q VLAN interfaces as described above.
+802.1ad was incorporated into the base 802.1q_ standard in 2011. The technique
+is also known as provider bridging, Stacked VLANs, or simply QinQ or Q-in-Q.
+"Q-in-Q" can for supported devices apply to C-tag stacking on C-tag (Ethernet
+Type = 0x8100).
+
+The original 802.1q_ specification allows a single Virtual Local Area Network
+(VLAN) header to be inserted into an Ethernet frame. QinQ allows multiple
+VLAN tags to be inserted into a single frame, an essential capability for
+implementing Metro Ethernet network topologies. Just as QinQ extends 802.1Q,
+QinQ itself is extended by other Metro Ethernet protocols.
+
+In a multiple VLAN header context, out of convenience the term "VLAN tag" or
+just "tag" for short is often used in place of "802.1q_ VLAN header". QinQ
+allows multiple VLAN tags in an Ethernet frame; together these tags constitute
+a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a
+frame that has 2 VLAN 802.1q_ headers (double-tagged).
+
+In VyOS the terms ``vif-s`` and ``vif-c`` stand for the ethertype tags that
+are used.
+
+The inner tag is the tag which is closest to the payload portion of the frame.
+It is officially called C-TAG (customer tag, with ethertype 0x8100). The outer
+tag is the one closer/closest to the Ethernet header, its name is S-TAG
+(service tag with Ethernet Type = 0x88a8).
+
+
+.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
+.. cmdinclude:: ../_include/interface-description.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
+.. cmdinclude:: ../_include/interface-disable.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
+.. cmdinclude:: ../_include/interface-disable-link-detect.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
+.. cmdinclude:: ../_include/interface-mac.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
+.. cmdinclude:: ../_include/interface-mtu.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
+.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
+.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
+.. cmdinclude:: ../_include/interface-vrf.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
+**DHCP(v6)**
+
+.. cmdinclude:: ../_include/interface-dhcp-options.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
+.. cmdinclude:: ../_include/interface-dhcpv6-options.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
+.. include:: ../common-references.rst
diff --git a/docs/_include/interface-vlan.txt b/docs/_include/interface-vlan-8021q.txt
similarity index 93%
rename from docs/_include/interface-vlan.txt
rename to docs/_include/interface-vlan-8021q.txt
index f1948e84..2c7e58f7 100644
--- a/docs/_include/interface-vlan.txt
+++ b/docs/_include/interface-vlan-8021q.txt
@@ -1,11 +1,11 @@
-IEEE 802.1q, often referred to as Dot1q, is the networking standard that supports
+IEEE 802.1q_, often referred to as Dot1q, is the networking standard that supports
 virtual LANs (VLANs) on an IEEE 802.3 Ethernet network. The standard defines a
 system of VLAN tagging for Ethernet frames and the accompanying procedures to be
 used by bridges and switches in handling such frames. The standard also contains
 provisions for a quality-of-service prioritization scheme commonly known as IEEE
 802.1p and defines the Generic Attribute Registration Protocol.
 
-Portions of the network which are VLAN-aware (i.e., IEEE 802.1q conformant) can
+Portions of the network which are VLAN-aware (i.e., IEEE 802.1q_ conformant) can
 include VLAN tags. When a frame enters the VLAN-aware portion of the network, a
 tag is added to represent the VLAN membership. Each frame must be distinguishable
 as being within exactly one VLAN. A frame in the VLAN-aware portion of the network
@@ -106,4 +106,6 @@ term used for this is ``vif``.
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
-   :var4: 10
\ No newline at end of file
+   :var4: 10
+
+.. include:: ../common-references.rst
\ No newline at end of file
diff --git a/docs/_include/interface-vrf.txt b/docs/_include/interface-vrf.txt
index 450c82aa..1fa94f9f 100644
--- a/docs/_include/interface-vrf.txt
+++ b/docs/_include/interface-vrf.txt
@@ -1,5 +1,5 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  vrf <vrf>
+  {{ var5 }} {{ var6 }} vrf <vrf>
 
   Place interface in given VRF instance.
 
@@ -10,4 +10,4 @@
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} vrf red
\ No newline at end of file
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} vrf red
\ No newline at end of file
diff --git a/docs/_include/need_improvement.txt b/docs/_include/need_improvement.txt
index f7556465..1ce50685 100644
--- a/docs/_include/need_improvement.txt
+++ b/docs/_include/need_improvement.txt
@@ -8,8 +8,9 @@
    <p class="admonition-title">Call for Contributions</p>
 
 
-This page needs improvements, examples and explanations.
-Please take a look at the Contributing Guide for :ref:`documentation`.
+This section needs improvements, examples and explanations.
+
+Please take a look at the Contributing Guide for our :ref:`documentation`.
 
 .. raw:: html
 
diff --git a/docs/common-references.rst b/docs/common-references.rst
index d7e376eb..79881972 100644
--- a/docs/common-references.rst
+++ b/docs/common-references.rst
@@ -1,3 +1,6 @@
 .. _`accel-ppp`: https://accel-ppp.org/
 .. _`Secure Socket Tunneling Protocol`: https://en.wikipedia.org/wiki/Secure_Socket_Tunneling_Protocol
 .. _Phabricator: https://phabricator.vyos.net/
+
+.. _802.1ad: https://en.wikipedia.org/wiki/IEEE_802.1ad
+.. _802.1q: https://en.wikipedia.org/wiki/IEEE_802.1Q
diff --git a/docs/interfaces/advanced-index.rst b/docs/interfaces/advanced-index.rst
index 6e35dac2..7b9bde1e 100644
--- a/docs/interfaces/advanced-index.rst
+++ b/docs/interfaces/advanced-index.rst
@@ -17,9 +17,7 @@ Network Interfaces
    macsec
    pppoe
    pseudo-ethernet
-   qinq
    tunnel
-   vlan
    vxlan
    wireless
    wirelessmodem
diff --git a/docs/interfaces/bond.rst b/docs/interfaces/bond.rst
index eea35e2c..7faddd6f 100644
--- a/docs/interfaces/bond.rst
+++ b/docs/interfaces/bond.rst
@@ -259,7 +259,7 @@ Bond options
 VLAN
 ====
 
-.. cmdinclude:: ../_include/interface-vlan.txt
+.. cmdinclude:: ../_include/interface-vlan-8021q.txt
    :var0: bond
    :var1: bond0
 
diff --git a/docs/interfaces/bridge.rst b/docs/interfaces/bridge.rst
index 045ae2a8..dc94a761 100644
--- a/docs/interfaces/bridge.rst
+++ b/docs/interfaces/bridge.rst
@@ -116,7 +116,7 @@ links providing fault tolerance if an active link fails.
 VLAN
 ====
 
-.. cmdinclude:: ../_include/interface-vlan.txt
+.. cmdinclude:: ../_include/interface-vlan-8021q.txt
    :var0: bridge
    :var1: br0
 
diff --git a/docs/interfaces/ethernet.rst b/docs/interfaces/ethernet.rst
index 343a7d59..8b1ad6bd 100644
--- a/docs/interfaces/ethernet.rst
+++ b/docs/interfaces/ethernet.rst
@@ -52,7 +52,17 @@ Ethernet options
 VLAN
 ====
 
-.. cmdinclude:: ../_include/interface-vlan.txt
+Regular VLANs (802.1q)
+----------------------
+
+.. cmdinclude:: ../_include/interface-vlan-8021q.txt
+   :var0: ethernet
+   :var1: eth0
+
+QinQ (802.1ad)
+--------------
+
+.. cmdinclude:: ../_include/interface-vlan-8021ad.txt
    :var0: ethernet
    :var1: eth0
 
diff --git a/docs/interfaces/pseudo-ethernet.rst b/docs/interfaces/pseudo-ethernet.rst
index d4eb8eff..c2baca39 100644
--- a/docs/interfaces/pseudo-ethernet.rst
+++ b/docs/interfaces/pseudo-ethernet.rst
@@ -60,6 +60,6 @@ Pseudo Ethernet/MACVLAN options
 VLAN
 ====
 
-.. cmdinclude:: ../_include/interface-vlan.txt
+.. cmdinclude:: ../_include/interface-vlan-8021q.txt
    :var0: pseudo-ethernet
    :var1: peth0
diff --git a/docs/interfaces/qinq.rst b/docs/interfaces/qinq.rst
deleted file mode 100644
index 01d9c64a..00000000
--- a/docs/interfaces/qinq.rst
+++ /dev/null
@@ -1,77 +0,0 @@
-.. include:: ../_include/need_improvement.txt
-
-.. _qinq-interface:
-
-QinQ (802.1ad)
---------------
-
-IEEE 802.1ad was an Ethernet networking standard informally known as QinQ as
-an amendment to IEEE standard :ref:`vlan-interface`. 802.1ad was incorporated
-into the base 802.1q standard in 2011. The technique is also known as provider
-bridging, Stacked VLANs, or simply QinQ or Q-in-Q. "Q-in-Q" can for supported
-devices apply to C-tag stacking on C-tag (Ethernet Type = 0x8100).
-
-The original 802.1q specification allows a single Virtual Local Area Network
-(VLAN) header to be inserted into an Ethernet frame. QinQ allows multiple
-VLAN tags to be inserted into a single frame, an essential capability for
-implementing Metro Ethernet network topologies. Just as QinQ extends 802.1Q,
-QinQ itself is extended by other Metro Ethernet protocols.
-
-In a multiple VLAN header context, out of convenience the term "VLAN tag" or
-just "tag" for short is often used in place of "802.1Q VLAN header". QinQ
-allows multiple VLAN tags in an Ethernet frame; together these tags constitute
-a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a
-frame that has 2 VLAN 802.1Q headers (double-tagged).
-
-In VyOS the terms **vif-s** and **vif-c** stand for the ethertype tags that
-are used:
-
-The inner tag is the tag which is closest to the payload portion of the frame.
-It is officially called C-TAG (customer tag, with ethertype 0x8100). The outer
-tag is the one closer/closest to the Ethernet header, its name is S-TAG
-(service tag with ethertype 0x88a8).
-
-Configuration commands:
-
-.. code-block:: none
-
-  interfaces
-      ethernet <eth[0-999]>
-          address <ipv4>
-          address <ipv6>
-          description <txt>
-          disable
-          ip
-              <usual IP options>
-          ipv6
-              <usual IPv6 options>
-          vif-s <[0-4096]>
-              address <ipv4>
-              address <ipv6>
-              description <txt>
-              disable
-              ip
-                  <usual IP options>
-              ipv6
-                  <usual IPv6 options>
-              vif-c <[0-4096]>
-                  address <ipv4>
-                  address <ipv6>
-                  description <txt>
-                  disable
-                  ip
-                      <usual IP options>
-                  ipv6
-                      <usual IPv6 options>
-
-
-Example:
-
-.. code-block:: none
-
-  set interfaces ethernet eth0 vif-s 333
-  set interfaces ethernet eth0 vif-s 333 address 192.0.2.10/32
-  set interfaces ethernet eth0 vif-s 333 vif-c 777
-  set interfaces ethernet eth0 vif-s 333 vif-c 777 address 10.10.10.10/24
-
-.. _802.1ad: https://en.wikipedia.org/wiki/IEEE_802.1ad
\ No newline at end of file
diff --git a/docs/interfaces/vlan.rst b/docs/interfaces/vlan.rst
deleted file mode 100644
index 55656d5d..00000000
--- a/docs/interfaces/vlan.rst
+++ /dev/null
@@ -1,69 +0,0 @@
-.. _vlan-interface:
-
-VLAN (802.1q)
--------------
-
-IEEE 802.1q, often referred to as Dot1q, is the networking standard that
-supports virtual LANs (VLANs) on an IEEE 802.3 Ethernet network. The
-standard defines a system of VLAN tagging for Ethernet frames and the
-accompanying procedures to be used by bridges and switches in handling
-such frames. The standard also contains provisions for a quality-of-service
-prioritization scheme commonly known as IEEE 802.1p and defines the Generic
-Attribute Registration Protocol.
-
-Portions of the network which are VLAN-aware (i.e., IEEE 802.1q conformant)
-can include VLAN tags. When a frame enters the VLAN-aware portion of the
-network, a tag is added to represent the VLAN membership. Each frame must
-be distinguishable as being within exactly one VLAN. A frame in the
-VLAN-aware portion of the network that does not contain a VLAN tag is
-assumed to be flowing on the native VLAN.
-
-The standard was developed by IEEE 802.1, a working group of the IEEE 802
-standards committee, and continues to be actively revised. One of the
-notable revisions is 802.1Q-2014 which incorporated IEEE 802.1aq (Shortest
-Path Bridging) and much of the IEEE 802.1d standard.
-
-802.1a VLAN interfaces are represented as virtual sub-interfaces in VyOS. The
-term used for this is ``vif``. Configuration of a tagged sub-interface is
-accomplished using the configuration command:
-``set interfaces ethernet <name> vif <vlan-id>``
-
-To assign a vif 100 using the VLAN 100 tag to physical interface eth1 use:
-
-.. code-block:: none
-
-  set interfaces ethernet eth1 vif 100 description 'VLAN 100'
-  set interfaces ethernet eth1 vif 100 address '192.168.100.1/24'
-  set interfaces ethernet eth1 vif 100 address '2001:db8:100::1/64'
-
-Resulting in:
-
-.. code-block:: none
-
-  ethernet eth1 {
-      address 192.168.100.1/24
-      address 2001:db8:100::1/64
-      description INSIDE
-      duplex auto
-      hw-id 00:53:29:44:3b:19
-      smp_affinity auto
-      speed auto
-      vif 100 {
-          address 192.168.100.1/24
-          description "VLAN 100"
-      }
-  }
-
-VLAN interfaces are shown as `<name>.<vlan-id>`, e.g. `eth1.100`:
-
-.. code-block:: none
-
-  vyos@vyos:~$ show interfaces
-  Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
-  Interface        IP Address                        S/L  Description
-  ---------        ----------                        ---  -----------
-  eth0             172.16.51.129/24                  u/u  OUTSIDE
-  eth1             192.168.0.1/24                    u/u  INSIDE
-  eth1.100         192.168.100.1/24                  u/u  VLAN 100
-  lo               127.0.0.1/8                       u/u
-                   ::1/128
diff --git a/docs/interfaces/wireless.rst b/docs/interfaces/wireless.rst
index b51eb274..2de3b126 100644
--- a/docs/interfaces/wireless.rst
+++ b/docs/interfaces/wireless.rst
@@ -375,7 +375,17 @@ Resulting in
 VLAN
 ====
 
-.. cmdinclude:: ../_include/interface-vlan.txt
+Regular VLANs (802.1q)
+----------------------
+
+.. cmdinclude:: ../_include/interface-vlan-8021q.txt
+   :var0: wireless
+   :var1: wlan0
+
+QinQ (802.1ad)
+--------------
+
+.. cmdinclude:: ../_include/interface-vlan-8021ad.txt
    :var0: wireless
    :var1: wlan0
 

From f5bd1461748b232c085891a21e28d97db6feddc7 Mon Sep 17 00:00:00 2001
From: Eshenko Dmitriy <dmitriy.eshenko@vyos.io>
Date: Thu, 26 Nov 2020 11:54:37 +0300
Subject: [PATCH 100/295] dmvpn: Fix wrong nbma-address on Spoke

---
 docs/vpn/dmvpn.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/vpn/dmvpn.rst b/docs/vpn/dmvpn.rst
index 1a6bdd64..5100b92f 100644
--- a/docs/vpn/dmvpn.rst
+++ b/docs/vpn/dmvpn.rst
@@ -299,7 +299,7 @@ VyOS can also run in DMVPN spoke mode.
 
   set protocols nhrp tunnel tun100 cisco-authentication 'secret'
   set protocols nhrp tunnel tun100 holding-time '300'
-  set protocols nhrp tunnel tun100 map 172.16.253.134/29 nbma-address '92.0.2.1'
+  set protocols nhrp tunnel tun100 map 172.16.253.134/29 nbma-address '192.0.2.1'
   set protocols nhrp tunnel tun100 map 172.16.253.134/29 register
   set protocols nhrp tunnel tun100 multicast 'nhs'
   set protocols nhrp tunnel tun100 redirect

From 4bc9e94a7ad57ee6735533da59a808dc8caf3ba5 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 26 Nov 2020 20:12:54 +0100
Subject: [PATCH 101/295] ethernet: document mirror CLI option

---
 docs/interfaces/ethernet.rst | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/docs/interfaces/ethernet.rst b/docs/interfaces/ethernet.rst
index 8b1ad6bd..f2ab3f67 100644
--- a/docs/interfaces/ethernet.rst
+++ b/docs/interfaces/ethernet.rst
@@ -31,7 +31,8 @@ Ethernet options
 
    VyOS default will be `auto`.
 
-.. cfgcmd:: set interfaces ethernet <interface> speed <auto | 10 | 100 | 1000 | 2500 | 5000 | 10000 | 25000 | 40000 | 50000 | 100000>
+.. cfgcmd:: set interfaces ethernet <interface> speed <auto | 10 | 100 | 1000 |
+  2500 | 5000 | 10000 | 25000 | 40000 | 50000 | 100000>
 
    Configure physical interface speed setting.
 
@@ -49,6 +50,22 @@ Ethernet options
 
    VyOS default will be `auto`.
 
+
+.. cfgcmd:: set interfaces ethernet <interface> mirror <interface>
+
+  Use this command to mirror the inbound traffic from one Ethernet interface to
+  another interface. This feature is typically used to provide a copy of traffic
+  inbound on one interface to a system running a monitoring or IPS application
+  on another interface. The benefit of mirroring the traffic is that the
+  application is isolated from the source traffic and so application processing
+  does not affect the traffic or the system performance.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces ethernet eth0 mirror eth1
+
 VLAN
 ====
 

From ba76cefc39e0b9b50dd8416e76f4d3e6f6ce8aff Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 26 Nov 2020 21:49:14 +0100
Subject: [PATCH 102/295] add github actions

---
 .github/styles/Google/AMPM.yml               |   9 +
 .github/styles/Google/Acronyms.yml           |  64 +++++++
 .github/styles/Google/Colons.yml             |   7 +
 .github/styles/Google/Contractions.yml       |  28 +++
 .github/styles/Google/DateFormat.yml         |   9 +
 .github/styles/Google/Ellipses.yml           |   7 +
 .github/styles/Google/EmDash.yml             |   8 +
 .github/styles/Google/EnDash.yml             |   7 +
 .github/styles/Google/Exclamation.yml        |   7 +
 .github/styles/Google/FirstPerson.yml        |  11 ++
 .github/styles/Google/Gender.yml             |   9 +
 .github/styles/Google/GenderBias.yml         |  45 +++++
 .github/styles/Google/HeadingPunctuation.yml |   8 +
 .github/styles/Google/Headings.yml           |  26 +++
 .github/styles/Google/Hyphens.yml            |   8 +
 .github/styles/Google/Latin.yml              |   9 +
 .github/styles/Google/LyHyphens.yml          |   8 +
 .github/styles/Google/OptionalPlurals.yml    |   7 +
 .github/styles/Google/Ordinal.yml            |   7 +
 .github/styles/Google/OxfordComma.yml        |   7 +
 .github/styles/Google/Parens.yml             |   7 +
 .github/styles/Google/Passive.yml            | 184 +++++++++++++++++++
 .github/styles/Google/Periods.yml            |   7 +
 .github/styles/Google/Quotes.yml             |   7 +
 .github/styles/Google/Ranges.yml             |   7 +
 .github/styles/Google/Semicolons.yml         |   8 +
 .github/styles/Google/Slang.yml              |  11 ++
 .github/styles/Google/Spacing.yml            |   8 +
 .github/styles/Google/Spelling.yml           |   8 +
 .github/styles/Google/Units.yml              |   7 +
 .github/styles/Google/Will.yml               |   7 +
 .github/styles/Google/WordList.yml           |  79 ++++++++
 .github/styles/Google/meta.json              |  16 ++
 .github/styles/Google/vocab.txt              |   0
 .github/styles/VyOS/Terminology.yml          |   9 +
 .github/vyos-linter.py                       | 162 ++++++++++++++++
 .github/workflows/main.yml                   |  32 ++++
 .gitmodules                                  |   4 +
 vale.ini                                     |  16 ++
 39 files changed, 870 insertions(+)
 create mode 100644 .github/styles/Google/AMPM.yml
 create mode 100644 .github/styles/Google/Acronyms.yml
 create mode 100644 .github/styles/Google/Colons.yml
 create mode 100644 .github/styles/Google/Contractions.yml
 create mode 100644 .github/styles/Google/DateFormat.yml
 create mode 100644 .github/styles/Google/Ellipses.yml
 create mode 100644 .github/styles/Google/EmDash.yml
 create mode 100644 .github/styles/Google/EnDash.yml
 create mode 100644 .github/styles/Google/Exclamation.yml
 create mode 100644 .github/styles/Google/FirstPerson.yml
 create mode 100644 .github/styles/Google/Gender.yml
 create mode 100644 .github/styles/Google/GenderBias.yml
 create mode 100644 .github/styles/Google/HeadingPunctuation.yml
 create mode 100644 .github/styles/Google/Headings.yml
 create mode 100644 .github/styles/Google/Hyphens.yml
 create mode 100644 .github/styles/Google/Latin.yml
 create mode 100644 .github/styles/Google/LyHyphens.yml
 create mode 100644 .github/styles/Google/OptionalPlurals.yml
 create mode 100644 .github/styles/Google/Ordinal.yml
 create mode 100644 .github/styles/Google/OxfordComma.yml
 create mode 100644 .github/styles/Google/Parens.yml
 create mode 100644 .github/styles/Google/Passive.yml
 create mode 100644 .github/styles/Google/Periods.yml
 create mode 100644 .github/styles/Google/Quotes.yml
 create mode 100644 .github/styles/Google/Ranges.yml
 create mode 100644 .github/styles/Google/Semicolons.yml
 create mode 100644 .github/styles/Google/Slang.yml
 create mode 100644 .github/styles/Google/Spacing.yml
 create mode 100644 .github/styles/Google/Spelling.yml
 create mode 100644 .github/styles/Google/Units.yml
 create mode 100644 .github/styles/Google/Will.yml
 create mode 100644 .github/styles/Google/WordList.yml
 create mode 100644 .github/styles/Google/meta.json
 create mode 100644 .github/styles/Google/vocab.txt
 create mode 100644 .github/styles/VyOS/Terminology.yml
 create mode 100644 .github/vyos-linter.py
 create mode 100644 .github/workflows/main.yml
 create mode 100644 .gitmodules
 create mode 100644 vale.ini

diff --git a/.github/styles/Google/AMPM.yml b/.github/styles/Google/AMPM.yml
new file mode 100644
index 00000000..fbdc6e4f
--- /dev/null
+++ b/.github/styles/Google/AMPM.yml
@@ -0,0 +1,9 @@
+extends: existence
+message: "Use 'AM' or 'PM' (preceded by a space)."
+link: 'https://developers.google.com/style/word-list'
+level: error
+nonword: true
+tokens:
+  - '\d{1,2}[AP]M'
+  - '\d{1,2} ?[ap]m'
+  - '\d{1,2} ?[aApP]\.[mM]\.'
diff --git a/.github/styles/Google/Acronyms.yml b/.github/styles/Google/Acronyms.yml
new file mode 100644
index 00000000..f41af018
--- /dev/null
+++ b/.github/styles/Google/Acronyms.yml
@@ -0,0 +1,64 @@
+extends: conditional
+message: "Spell out '%s', if it's unfamiliar to the audience."
+link: 'https://developers.google.com/style/abbreviations'
+level: suggestion
+ignorecase: false
+# Ensures that the existence of 'first' implies the existence of 'second'.
+first: '\b([A-Z]{3,5})\b'
+second: '(?:\b[A-Z][a-z]+ )+\(([A-Z]{3,5})\)'
+# ... with the exception of these:
+exceptions:
+  - API
+  - ASP
+  - CLI
+  - CPU
+  - CSS
+  - CSV
+  - DEBUG
+  - DOM
+  - DPI
+  - FAQ
+  - GCC
+  - GDB
+  - GET
+  - GPU
+  - GTK
+  - GUI
+  - HTML
+  - HTTP
+  - HTTPS
+  - IDE
+  - JAR
+  - JSON
+  - JSX
+  - LESS
+  - LLDB
+  - NET
+  - NOTE
+  - NVDA
+  - OSS
+  - PATH
+  - PDF
+  - PHP
+  - POST
+  - RAM
+  - REPL
+  - RSA
+  - SCM
+  - SCSS
+  - SDK
+  - SQL
+  - SSH
+  - SSL
+  - SVG
+  - TBD
+  - TCP
+  - TODO
+  - URI
+  - URL
+  - USB
+  - UTF
+  - XML
+  - XSS
+  - YAML
+  - ZIP
diff --git a/.github/styles/Google/Colons.yml b/.github/styles/Google/Colons.yml
new file mode 100644
index 00000000..9a4b4b4a
--- /dev/null
+++ b/.github/styles/Google/Colons.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "'%s' should be in lowercase."
+link: 'https://developers.google.com/style/colons'
+nonword: true
+level: warning
+tokens:
+  - ':\s[A-Z]'
diff --git a/.github/styles/Google/Contractions.yml b/.github/styles/Google/Contractions.yml
new file mode 100644
index 00000000..905a39f4
--- /dev/null
+++ b/.github/styles/Google/Contractions.yml
@@ -0,0 +1,28 @@
+extends: substitution
+message: "Feel free to use '%s' instead of '%s'."
+link: 'https://developers.google.com/style/contractions'
+level: suggestion
+ignorecase: true
+swap:
+  are not: aren't
+  cannot: can't
+  could not: couldn't
+  did not: didn't
+  do not: don't
+  does not: doesn't
+  has not: hasn't
+  have not: haven't
+  how is: how's
+  is not: isn't
+  it is: it's
+  should not: shouldn't
+  that is: that's
+  they are: they're
+  was not: wasn't
+  we are: we're
+  we have: we've
+  were not: weren't
+  what is: what's
+  when is: when's
+  where is: where's
+  will not: won't
diff --git a/.github/styles/Google/DateFormat.yml b/.github/styles/Google/DateFormat.yml
new file mode 100644
index 00000000..e9d227fa
--- /dev/null
+++ b/.github/styles/Google/DateFormat.yml
@@ -0,0 +1,9 @@
+extends: existence
+message: "Use 'July 31, 2016' format, not '%s'."
+link: 'https://developers.google.com/style/dates-times'
+ignorecase: true
+level: error
+nonword: true
+tokens:
+  - '\d{1,2}(?:\.|/)\d{1,2}(?:\.|/)\d{4}'
+  - '\d{1,2} (?:Jan(?:uary)?|Feb(?:ruary)?|Mar(?:ch)?|Apr(?:il)|May|Jun(?:e)|Jul(?:y)|Aug(?:ust)|Sep(?:tember)?|Oct(?:ober)|Nov(?:ember)?|Dec(?:ember)?) \d{4}'
diff --git a/.github/styles/Google/Ellipses.yml b/.github/styles/Google/Ellipses.yml
new file mode 100644
index 00000000..436e6177
--- /dev/null
+++ b/.github/styles/Google/Ellipses.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "In general, don't use an ellipsis."
+link: 'https://developers.google.com/style/ellipses'
+nonword: true
+level: warning
+tokens:
+  - '\.\.\.'
diff --git a/.github/styles/Google/EmDash.yml b/.github/styles/Google/EmDash.yml
new file mode 100644
index 00000000..c6018db1
--- /dev/null
+++ b/.github/styles/Google/EmDash.yml
@@ -0,0 +1,8 @@
+extends: existence
+message: "Don't put a space before or after an em dash."
+link: 'https://developers.google.com/style/dashes'
+nonword: true
+level: error
+tokens:
+  - '\s—'
+  - '—\s'
diff --git a/.github/styles/Google/EnDash.yml b/.github/styles/Google/EnDash.yml
new file mode 100644
index 00000000..194876aa
--- /dev/null
+++ b/.github/styles/Google/EnDash.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "Use an em dash ('—') instead of '–'."
+link: 'https://developers.google.com/style/dashes'
+nonword: true
+level: error
+tokens:
+  - '–'
diff --git a/.github/styles/Google/Exclamation.yml b/.github/styles/Google/Exclamation.yml
new file mode 100644
index 00000000..c4db380b
--- /dev/null
+++ b/.github/styles/Google/Exclamation.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "Don't use exclamation points in text."
+link: 'https://developers.google.com/style/exclamation-points'
+nonword: true
+level: error
+tokens:
+  - '!'
diff --git a/.github/styles/Google/FirstPerson.yml b/.github/styles/Google/FirstPerson.yml
new file mode 100644
index 00000000..d2290611
--- /dev/null
+++ b/.github/styles/Google/FirstPerson.yml
@@ -0,0 +1,11 @@
+extends: existence
+message: "Avoid first-person pronouns such as '%s'."
+link: 'https://developers.google.com/style/pronouns#personal-pronouns'
+ignorecase: true
+level: warning
+nonword: true
+tokens:
+  - (?:^|\s)I\s
+  - \bme\b
+  - \bus\b
+  - \bours\b
diff --git a/.github/styles/Google/Gender.yml b/.github/styles/Google/Gender.yml
new file mode 100644
index 00000000..c8486181
--- /dev/null
+++ b/.github/styles/Google/Gender.yml
@@ -0,0 +1,9 @@
+extends: existence
+message: "Don't use '%s' as a gender-neutral pronoun."
+link: 'https://developers.google.com/style/pronouns#gender-neutral-pronouns'
+level: error
+ignorecase: true
+tokens:
+  - he/she
+  - s/he
+  - \(s\)he
diff --git a/.github/styles/Google/GenderBias.yml b/.github/styles/Google/GenderBias.yml
new file mode 100644
index 00000000..261cfb66
--- /dev/null
+++ b/.github/styles/Google/GenderBias.yml
@@ -0,0 +1,45 @@
+extends: substitution
+message: "Consider using '%s' instead of '%s'."
+link: 'https://developers.google.com/style/inclusive-documentation'
+ignorecase: true
+level: error
+swap:
+  (?:alumna|alumnus):          graduate
+  (?:alumnae|alumni):          graduates
+  air(?:m[ae]n|wom[ae]n):      pilot(s)
+  anchor(?:m[ae]n|wom[ae]n):   anchor(s)
+  authoress:                   author
+  camera(?:m[ae]n|wom[ae]n):   camera operator(s)
+  chair(?:m[ae]n|wom[ae]n):    chair(s)
+  congress(?:m[ae]n|wom[ae]n): member(s) of congress
+  door(?:m[ae]|wom[ae]n):      concierge(s)
+  draft(?:m[ae]n|wom[ae]n):    drafter(s)
+  fire(?:m[ae]n|wom[ae]n):     firefighter(s)
+  fisher(?:m[ae]n|wom[ae]n):   fisher(s)
+  fresh(?:m[ae]n|wom[ae]n):    first-year student(s)
+  garbage(?:m[ae]n|wom[ae]n):  waste collector(s)
+  lady lawyer:                 lawyer
+  ladylike:                    courteous
+  landlord:                    building manager
+  mail(?:m[ae]n|wom[ae]n):     mail carriers
+  man and wife:                husband and wife
+  man enough:                  strong enough
+  mankind:                     human kind
+  manmade:                     manufactured
+  manpower:                    personnel
+  men and girls:               men and women
+  middle(?:m[ae]n|wom[ae]n):   intermediary
+  news(?:m[ae]n|wom[ae]n):     journalist(s)
+  ombuds(?:man|woman):         ombuds
+  oneupmanship:                upstaging
+  poetess:                     poet
+  police(?:m[ae]n|wom[ae]n):   police officer(s)
+  repair(?:m[ae]n|wom[ae]n):   technician(s)
+  sales(?:m[ae]n|wom[ae]n):    salesperson or sales people
+  service(?:m[ae]n|wom[ae]n):  soldier(s)
+  steward(?:ess)?:             flight attendant
+  tribes(?:m[ae]n|wom[ae]n):   tribe member(s)
+  waitress:                    waiter
+  woman doctor:                doctor
+  woman scientist[s]?:         scientist(s)
+  work(?:m[ae]n|wom[ae]n):     worker(s)
diff --git a/.github/styles/Google/HeadingPunctuation.yml b/.github/styles/Google/HeadingPunctuation.yml
new file mode 100644
index 00000000..5c39abbf
--- /dev/null
+++ b/.github/styles/Google/HeadingPunctuation.yml
@@ -0,0 +1,8 @@
+extends: existence
+message: "Don't put a period at the end of a heading."
+link: 'https://developers.google.com/style/capitalization#capitalization-in-titles-and-headings'
+nonword: true
+level: warning
+scope: heading
+tokens:
+  - '[a-z0-9][.](?:\s|$)'
diff --git a/.github/styles/Google/Headings.yml b/.github/styles/Google/Headings.yml
new file mode 100644
index 00000000..5afb968d
--- /dev/null
+++ b/.github/styles/Google/Headings.yml
@@ -0,0 +1,26 @@
+extends: capitalization
+message: "'%s' should use sentence-style capitalization."
+link: 'https://developers.google.com/style/capitalization#capitalization-in-titles-and-headings'
+level: warning
+scope: heading
+match: $sentence
+exceptions:
+  - Azure
+  - CLI
+  - Code
+  - Cosmos
+  - Docker
+  - Emmet
+  - I
+  - Kubernetes
+  - Linux
+  - macOS
+  - Marketplace
+  - MongoDB
+  - REPL
+  - Studio
+  - TypeScript
+  - URLs
+  - Visual
+  - VS
+  - Windows
diff --git a/.github/styles/Google/Hyphens.yml b/.github/styles/Google/Hyphens.yml
new file mode 100644
index 00000000..f9779637
--- /dev/null
+++ b/.github/styles/Google/Hyphens.yml
@@ -0,0 +1,8 @@
+extends: existence
+message: "Don't place a space on either side of a hyphen (unless it's suspended)."
+link: 'https://developers.google.com/style/hyphens'
+level: warning
+nonword: true
+tokens:
+  - '\s-'
+  - '-\s'
diff --git a/.github/styles/Google/Latin.yml b/.github/styles/Google/Latin.yml
new file mode 100644
index 00000000..f032b349
--- /dev/null
+++ b/.github/styles/Google/Latin.yml
@@ -0,0 +1,9 @@
+extends: substitution
+message: "Use '%s' instead of '%s'."
+link: 'https://developers.google.com/style/abbreviations'
+ignorecase: true
+level: error
+nonword: true
+swap:
+  '\b(?:eg|e\.g\.)[\s,]': for example
+  '\b(?:ie|i\.e\.)[\s,]': that is
diff --git a/.github/styles/Google/LyHyphens.yml b/.github/styles/Google/LyHyphens.yml
new file mode 100644
index 00000000..d5b6a942
--- /dev/null
+++ b/.github/styles/Google/LyHyphens.yml
@@ -0,0 +1,8 @@
+extends: existence
+message: "'%s' doesn't need a hyphen."
+link: 'https://developers.google.com/style/hyphens'
+level: error
+ignorecase: false
+nonword: true
+tokens:
+  - '\s[^\s-]+ly-'
diff --git a/.github/styles/Google/OptionalPlurals.yml b/.github/styles/Google/OptionalPlurals.yml
new file mode 100644
index 00000000..7058932f
--- /dev/null
+++ b/.github/styles/Google/OptionalPlurals.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "Don't use plurals in parentheses such as in '%s'."
+link: 'https://developers.google.com/style/plurals-parentheses'
+level: error
+nonword: true
+tokens:
+  - '\b\w+\(s\)'
diff --git a/.github/styles/Google/Ordinal.yml b/.github/styles/Google/Ordinal.yml
new file mode 100644
index 00000000..8c429e0f
--- /dev/null
+++ b/.github/styles/Google/Ordinal.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "Spell out all ordinal numbers ('%s') in text."
+link: 'https://developers.google.com/style/numbers'
+level: error
+nonword: true
+tokens:
+  - \d+(?:st|th|rd)
diff --git a/.github/styles/Google/OxfordComma.yml b/.github/styles/Google/OxfordComma.yml
new file mode 100644
index 00000000..98b07113
--- /dev/null
+++ b/.github/styles/Google/OxfordComma.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "Use the Oxford comma in '%s'."
+link: 'https://developers.google.com/style/commas'
+scope: sentence
+level: warning
+tokens:
+  - '(?:[^,]+,){1,}\s\w+\sand'
diff --git a/.github/styles/Google/Parens.yml b/.github/styles/Google/Parens.yml
new file mode 100644
index 00000000..3b8711d0
--- /dev/null
+++ b/.github/styles/Google/Parens.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "Use parentheses judiciously."
+link: 'https://developers.google.com/style/parentheses'
+nonword: true
+level: suggestion
+tokens:
+  - '\(.+\)'
diff --git a/.github/styles/Google/Passive.yml b/.github/styles/Google/Passive.yml
new file mode 100644
index 00000000..3265890e
--- /dev/null
+++ b/.github/styles/Google/Passive.yml
@@ -0,0 +1,184 @@
+extends: existence
+link: 'https://developers.google.com/style/voice'
+message: "In general, use active voice instead of passive voice ('%s')."
+ignorecase: true
+level: suggestion
+raw:
+  - \b(am|are|were|being|is|been|was|be)\b\s*
+tokens:
+  - '[\w]+ed'
+  - awoken
+  - beat
+  - become
+  - been
+  - begun
+  - bent
+  - beset
+  - bet
+  - bid
+  - bidden
+  - bitten
+  - bled
+  - blown
+  - born
+  - bought
+  - bound
+  - bred
+  - broadcast
+  - broken
+  - brought
+  - built
+  - burnt
+  - burst
+  - cast
+  - caught
+  - chosen
+  - clung
+  - come
+  - cost
+  - crept
+  - cut
+  - dealt
+  - dived
+  - done
+  - drawn
+  - dreamt
+  - driven
+  - drunk
+  - dug
+  - eaten
+  - fallen
+  - fed
+  - felt
+  - fit
+  - fled
+  - flown
+  - flung
+  - forbidden
+  - foregone
+  - forgiven
+  - forgotten
+  - forsaken
+  - fought
+  - found
+  - frozen
+  - given
+  - gone
+  - gotten
+  - ground
+  - grown
+  - heard
+  - held
+  - hidden
+  - hit
+  - hung
+  - hurt
+  - kept
+  - knelt
+  - knit
+  - known
+  - laid
+  - lain
+  - leapt
+  - learnt
+  - led
+  - left
+  - lent
+  - let
+  - lighted
+  - lost
+  - made
+  - meant
+  - met
+  - misspelt
+  - mistaken
+  - mown
+  - overcome
+  - overdone
+  - overtaken
+  - overthrown
+  - paid
+  - pled
+  - proven
+  - put
+  - quit
+  - read
+  - rid
+  - ridden
+  - risen
+  - run
+  - rung
+  - said
+  - sat
+  - sawn
+  - seen
+  - sent
+  - set
+  - sewn
+  - shaken
+  - shaven
+  - shed
+  - shod
+  - shone
+  - shorn
+  - shot
+  - shown
+  - shrunk
+  - shut
+  - slain
+  - slept
+  - slid
+  - slit
+  - slung
+  - smitten
+  - sold
+  - sought
+  - sown
+  - sped
+  - spent
+  - spilt
+  - spit
+  - split
+  - spoken
+  - spread
+  - sprung
+  - spun
+  - stolen
+  - stood
+  - stridden
+  - striven
+  - struck
+  - strung
+  - stuck
+  - stung
+  - stunk
+  - sung
+  - sunk
+  - swept
+  - swollen
+  - sworn
+  - swum
+  - swung
+  - taken
+  - taught
+  - thought
+  - thrived
+  - thrown
+  - thrust
+  - told
+  - torn
+  - trodden
+  - understood
+  - upheld
+  - upset
+  - wed
+  - wept
+  - withheld
+  - withstood
+  - woken
+  - won
+  - worn
+  - wound
+  - woven
+  - written
+  - wrung
diff --git a/.github/styles/Google/Periods.yml b/.github/styles/Google/Periods.yml
new file mode 100644
index 00000000..d24a6a6c
--- /dev/null
+++ b/.github/styles/Google/Periods.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "Don't use periods with acronyms or initialisms such as '%s'."
+link: 'https://developers.google.com/style/abbreviations'
+level: error
+nonword: true
+tokens:
+  - '\b(?:[A-Z]\.){3,}'
diff --git a/.github/styles/Google/Quotes.yml b/.github/styles/Google/Quotes.yml
new file mode 100644
index 00000000..3cb6f1ab
--- /dev/null
+++ b/.github/styles/Google/Quotes.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "Commas and periods go inside quotation marks."
+link: 'https://developers.google.com/style/quotation-marks'
+level: error
+nonword: true
+tokens:
+  - '"[^"]+"[.,?]'
diff --git a/.github/styles/Google/Ranges.yml b/.github/styles/Google/Ranges.yml
new file mode 100644
index 00000000..3ec045e7
--- /dev/null
+++ b/.github/styles/Google/Ranges.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "Don't add words such as 'from' or 'between' to describe a range of numbers."
+link: 'https://developers.google.com/style/hyphens'
+nonword: true
+level: warning
+tokens:
+  - '(?:from|between)\s\d+\s?-\s?\d+'
diff --git a/.github/styles/Google/Semicolons.yml b/.github/styles/Google/Semicolons.yml
new file mode 100644
index 00000000..bb8b85b4
--- /dev/null
+++ b/.github/styles/Google/Semicolons.yml
@@ -0,0 +1,8 @@
+extends: existence
+message: "Use semicolons judiciously."
+link: 'https://developers.google.com/style/semicolons'
+nonword: true
+scope: sentence
+level: suggestion
+tokens:
+  - ';'
diff --git a/.github/styles/Google/Slang.yml b/.github/styles/Google/Slang.yml
new file mode 100644
index 00000000..63f4c248
--- /dev/null
+++ b/.github/styles/Google/Slang.yml
@@ -0,0 +1,11 @@
+extends: existence
+message: "Don't use internet slang abbreviations such as '%s'."
+link: 'https://developers.google.com/style/abbreviations'
+ignorecase: true
+level: error
+tokens:
+  - 'tl;dr'
+  - ymmv
+  - rtfm
+  - imo
+  - fwiw
diff --git a/.github/styles/Google/Spacing.yml b/.github/styles/Google/Spacing.yml
new file mode 100644
index 00000000..5f209a9f
--- /dev/null
+++ b/.github/styles/Google/Spacing.yml
@@ -0,0 +1,8 @@
+extends: existence
+message: "'%s' should have one space."
+link: 'https://developers.google.com/style/sentence-spacing'
+level: error
+nonword: true
+tokens:
+  - '[.?!] {2,}[A-Z]'
+  - '[.?!][A-Z]'
diff --git a/.github/styles/Google/Spelling.yml b/.github/styles/Google/Spelling.yml
new file mode 100644
index 00000000..57acb884
--- /dev/null
+++ b/.github/styles/Google/Spelling.yml
@@ -0,0 +1,8 @@
+extends: existence
+message: "In general, use American spelling instead of '%s'."
+link: 'https://developers.google.com/style/spelling'
+ignorecase: true
+level: warning
+tokens:
+  - '(?:\w+)nised?'
+  - '(?:\w+)logue'
diff --git a/.github/styles/Google/Units.yml b/.github/styles/Google/Units.yml
new file mode 100644
index 00000000..220de3e9
--- /dev/null
+++ b/.github/styles/Google/Units.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "Put a nonbreaking space between the number and the unit in '%s'."
+link: 'https://developers.google.com/style/units-of-measure'
+nonword: true
+level: error
+tokens:
+  - \d+(?:GB|TB|MB)
diff --git a/.github/styles/Google/Will.yml b/.github/styles/Google/Will.yml
new file mode 100644
index 00000000..128a9183
--- /dev/null
+++ b/.github/styles/Google/Will.yml
@@ -0,0 +1,7 @@
+extends: existence
+message: "Avoid using '%s'."
+link: 'https://developers.google.com/style/tense'
+ignorecase: true
+level: warning
+tokens:
+  - will
diff --git a/.github/styles/Google/WordList.yml b/.github/styles/Google/WordList.yml
new file mode 100644
index 00000000..d5d6bea5
--- /dev/null
+++ b/.github/styles/Google/WordList.yml
@@ -0,0 +1,79 @@
+extends: substitution
+message: "Use %s instead of '%s'."
+link: 'https://developers.google.com/style/word-list'
+level: warning
+ignorecase: false
+swap:
+  '(?:API Console|dev|developer) key': "'API key'"
+  '(?:cell ?phone|smart ?phone)': "'phone' or 'mobile phone'"
+  '(?:dev|developer|APIs) console': "'API console'"
+  '(?:e-mail|Email|E-mail)':  "'email'"
+  '(?:file ?path|path ?name)':  "'path'"
+  '(?:kill|terminate)': "'stop', 'exit', 'cancel', or 'end'"
+  '(?:OAuth ?2|Oauth)': "'OAuth 2.0'"
+  '(?:ok|Okay)': "'OK' or 'okay'"
+  '(?:WiFi|wifi)': "'Wi-Fi'"
+  '[\.]+apk': "'APK'"
+  '3\-D': "'3D'"
+  'Google (?:I\-O|IO)': "'Google I/O'"
+  'tap (?:&|and) hold': "'touch & hold'"
+  'un(?:check|select)': "'clear'"
+  abort: "'stop', 'exit', 'cancel' or 'end'"
+  above: "'preceding'"
+  account name: "'username'"
+  action bar: "'app bar'"
+  admin: "'administrator'"
+  Ajax: "'AJAX'"
+  Android device: "'Android-powered device'"
+  android: "'Android'"
+  API explorer: "'APIs Explorer'"
+  application: "'app'"
+  approx\.: "'approximately'"
+  authN: "'authentication'"
+  authZ: "'authorization'"
+  autoupdate: "'automatically update'"
+  cellular data: "'mobile data'"
+  cellular network: "'mobile network'"
+  chapter: "'documents', 'pages', 'sections'"
+  check box: "'checkbox'"
+  check: "'select'"
+  CLI: "'command-line tool'"
+  click on: "'click' or 'click in'"
+  Cloud: "'Google Cloud Platform' or 'GCP'"
+  Container Engine: "'Kubernetes Engine'"
+  content type: "'media type'"
+  curated roles: "'predefined roles'"
+  data are: "'data is'"
+  Developers Console: "'Google API Console' or 'API Console'"
+  disabled?: "'turn off' or 'off'"
+  ephemeral IP address: "'ephemeral external IP address'"
+  fewer data: "'less data'"
+  file name: "'filename'"
+  firewalls: "'firewall rules'"
+  functionality: "'capability' or 'feature'"
+  Google account: "'Google Account'"
+  Google accounts: "'Google Accounts'"
+  Googling: "'search with Google'"
+  grayed-out: "'unavailable'"
+  HTTPs: "'HTTPS'"
+  in order to: "'to'"
+  ingest: "'import' or 'load'"
+  k8s: "'Kubernetes'"
+  long press: "'touch & hold'"
+  network IP address: "'internal IP address'"
+  omnibox: "'address bar'"
+  open-source: "'open source'"
+  overview screen: "'recents screen'"
+  regex: "'regular expression'"
+  SHA1: "'SHA-1' or 'HAS-SHA1'"
+  sign into: "'sign in to'"
+  sign-?on: "'single sign-on'"
+  static IP address: "'static external IP address'"
+  stylesheet: "'style sheet'"
+  synch: "'sync'"
+  tablename: "'table name'"
+  tablet: "'device'"
+  touch: "'tap'"
+  url:  "'URL'"
+  vs\.: "'versus'"
+  World Wide Web: "'web'"
diff --git a/.github/styles/Google/meta.json b/.github/styles/Google/meta.json
new file mode 100644
index 00000000..3ae5fb21
--- /dev/null
+++ b/.github/styles/Google/meta.json
@@ -0,0 +1,16 @@
+{
+  "author": "Joseph Kato",
+  "description": "A Vale-compatible implementation of the Microsoft Writing Style Guide.",
+  "email": "support@errata.ai",
+  "lang": "en",
+  "url": "https://github.com/errata-ai/Google/releases/latest/download/Google.zip",
+  "feed": "https://github.com/errata-ai/Google/releases.atom",
+  "issues": "https://github.com/errata-ai/Google/issues/new",
+  "license": "MIT",
+  "name": "Google",
+  "sources": [
+    "https://developers.google.com/style/"
+  ],
+  "vale_version": ">=1.0.0",
+  "coverage": 0.0
+}
diff --git a/.github/styles/Google/vocab.txt b/.github/styles/Google/vocab.txt
new file mode 100644
index 00000000..e69de29b
diff --git a/.github/styles/VyOS/Terminology.yml b/.github/styles/VyOS/Terminology.yml
new file mode 100644
index 00000000..cd0c5089
--- /dev/null
+++ b/.github/styles/VyOS/Terminology.yml
@@ -0,0 +1,9 @@
+extends: substitution
+message: Prefer '%s' over '%s'
+ignorecase: false
+level: error
+swap:
+  vyos: VyOS
+  Vyos: VyOS
+  VYOS: VyOS
+  Gre: GRE
\ No newline at end of file
diff --git a/.github/vyos-linter.py b/.github/vyos-linter.py
new file mode 100644
index 00000000..05bb6bbb
--- /dev/null
+++ b/.github/vyos-linter.py
@@ -0,0 +1,162 @@
+import os
+import re
+import ipaddress
+import sys
+import ast
+
+IPV4SEG  = r'(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])'
+IPV4ADDR = r'(?:(?:' + IPV4SEG + r'\.){3,3}' + IPV4SEG + r')'
+IPV6SEG  = r'(?:(?:[0-9a-fA-F]){1,4})'
+IPV6GROUPS = (
+    r'(?:' + IPV6SEG + r':){7,7}' + IPV6SEG,                  # 1:2:3:4:5:6:7:8
+    r'(?:\s' + IPV6SEG + r':){1,7}:',                           # 1::                                 1:2:3:4:5:6:7::
+    r'(?:' + IPV6SEG + r':){1,6}:' + IPV6SEG,                 # 1::8               1:2:3:4:5:6::8   1:2:3:4:5:6::8
+    r'(?:' + IPV6SEG + r':){1,5}(?::' + IPV6SEG + r'){1,2}',  # 1::7:8             1:2:3:4:5::7:8   1:2:3:4:5::8
+    r'(?:' + IPV6SEG + r':){1,4}(?::' + IPV6SEG + r'){1,3}',  # 1::6:7:8           1:2:3:4::6:7:8   1:2:3:4::8
+    r'(?:' + IPV6SEG + r':){1,3}(?::' + IPV6SEG + r'){1,4}',  # 1::5:6:7:8         1:2:3::5:6:7:8   1:2:3::8
+    r'(?:' + IPV6SEG + r':){1,2}(?::' + IPV6SEG + r'){1,5}',  # 1::4:5:6:7:8       1:2::4:5:6:7:8   1:2::8
+    IPV6SEG + r':(?:(?::' + IPV6SEG + r'){1,6})',             # 1::3:4:5:6:7:8     1::3:4:5:6:7:8   1::8
+    r':(?:(?::' + IPV6SEG + r'){1,7}|:)',                     # ::2:3:4:5:6:7:8    ::2:3:4:5:6:7:8  ::8       ::
+    r'fe80:(?::' + IPV6SEG + r'){0,4}%[0-9a-zA-Z]{1,}',       # fe80::7:8%eth0     fe80::7:8%1  (link-local IPv6 addresses with zone index)
+    r'::(?:ffff(?::0{1,4}){0,1}:){0,1}[^\s:]' + IPV4ADDR,     # ::255.255.255.255  ::ffff:255.255.255.255  ::ffff:0:255.255.255.255 (IPv4-mapped IPv6 addresses and IPv4-translated addresses)
+    r'(?:' + IPV6SEG + r':){1,4}:[^\s:]' + IPV4ADDR,          # 2001:db8:3:4::192.0.2.33  64:ff9b::192.0.2.33 (IPv4-Embedded IPv6 Address)
+)
+IPV6ADDR = '|'.join(['(?:{})'.format(g) for g in IPV6GROUPS[::-1]])  # Reverse rows for greedy match
+
+MAC = r'([0-9A-F]{2}[:-]){5}([0-9A-F]{2})'
+
+NUMBER = r"([\s']\d+[\s'])"
+
+
+def lint_mac(cnt, line):
+    mac = re.search(MAC, line, re.I)
+    if mac is not None:
+        mac = mac.group()
+        u_mac = re.search(r'((00)[:-](53)([:-][0-9A-F]{2}){4})', mac, re.I)
+        m_mac = re.search(r'((90)[:-](10)([:-][0-9A-F]{2}){4})', mac, re.I)
+        if u_mac is None and m_mac is None:
+            return (f"Use MAC reserved for Documentation (RFC7042): {mac}", cnt, 'error')
+
+
+def lint_ipv4(cnt, line):
+    ip = re.search(IPV4ADDR, line, re.I)
+    if ip is not None:
+        ip = ipaddress.ip_address(ip.group().strip(' '))
+        # https://docs.python.org/3/library/ipaddress.html#ipaddress.IPv4Address.is_private
+        if ip.is_private is False and ip.is_multicast is False:
+            return (f"Use IPv4 reserved for Documentation (RFC 5737) or private Space: {ip}", cnt, 'error')
+
+
+def lint_ipv6(cnt, line):
+    ip = re.search(IPV6ADDR, line, re.I)
+    if ip is not None:
+        ip = ipaddress.ip_address(ip.group().strip(' '))
+        # https://docs.python.org/3/library/ipaddress.html#ipaddress.IPv4Address.is_private
+        if ip.is_private is False and ip.is_multicast is False:
+            return (f"Use IPv6 reserved for Documentation (RFC 3849) or private Space: {ip}", cnt, 'error')
+
+
+def lint_AS(cnt, line):
+    number = re.search(NUMBER, line, re.I)
+    if number:
+        pass
+        # find a way to detect AS numbers
+
+
+def lint_linelen(cnt, line):
+    if len(line) > 80:
+        return (f"Line too long: len={len(line)}", cnt, 'warning')
+
+
+def handle_file(path, file):
+    errors = []
+    path = '/'.join(path)
+    filepath = f"{path}/{file}"
+    try:
+        with open(filepath) as fp:
+            line = fp.readline()
+            cnt = 1
+            while line:
+                err_mac = lint_mac(cnt, line.strip())
+                err_ip4 = lint_ipv4(cnt, line.strip())
+                err_ip6 = lint_ipv6(cnt, line.strip())
+                err_len = lint_linelen(cnt, line.strip())
+                if err_mac:
+                    errors.append(err_mac)
+                if err_ip4:
+                    errors.append(err_ip4)
+                if err_ip6:
+                    errors.append(err_ip6)
+                if err_len:
+                    errors.append(err_len)
+                line = fp.readline()
+                cnt += 1
+    finally:
+        fp.close()
+
+    if len(errors) > 0:
+        print(f"File: {filepath}")
+        for error in errors:
+            print(error)
+        print('')
+        return False
+
+def handle_file_action(filepath):
+    errors = []
+    try:
+        with open(filepath) as fp:
+            line = fp.readline()
+            cnt = 1
+            while line:
+                err_mac = lint_mac(cnt, line.strip())
+                err_ip4 = lint_ipv4(cnt, line.strip())
+                err_ip6 = lint_ipv6(cnt, line.strip())
+                err_len = lint_linelen(cnt, line.strip())
+                if err_mac:
+                    errors.append(err_mac)
+                if err_ip4:
+                    errors.append(err_ip4)
+                if err_ip6:
+                    errors.append(err_ip6)
+                if err_len:
+                    errors.append(err_len)
+                line = fp.readline()
+                cnt += 1
+    finally:
+        fp.close()
+
+    if len(errors) > 0:
+        '''
+        "::{$type} file={$filename},line={$line},col=$column::{$log}"
+        '''
+        print(f"File: {filepath}")
+        for error in errors:
+            print(f"::{error[2]} file={filepath},line={error[1]}::{error[0]}")
+        print('')
+        return False
+
+
+def main():
+    bool_error = True
+    print('start')
+    try:
+        files = ast.literal_eval(sys.argv[1])
+        for file in files:
+                print(file)
+                if file[-4:] == ".rst":
+                    if handle_file_action(file) is False:
+                        bool_error = False
+    except Exception as e:
+        print(e)    
+        for root, dirs, files in os.walk("../docs"):
+            path = root.split(os.sep)
+            for file in files:
+                if file[-4:] == ".rst":
+                    if handle_file(path, file) is False:
+                        bool_error = False
+    return bool_error
+
+
+if __name__ == "__main__":
+    if main() == False:
+        exit(1)
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
new file mode 100644
index 00000000..b6797ce0
--- /dev/null
+++ b/.github/workflows/main.yml
@@ -0,0 +1,32 @@
+name: Linting
+on:
+  pull_request:
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v2
+
+    - name: File Changes
+      id: file_changes
+      uses: trilom/file-changes-action@v1.2.3
+
+    - name: Vale
+      uses: errata-ai/vale-action@v1.3.0
+      with:
+        files: '${{ steps.file_changes.outputs.files_modified }}' 
+
+    - name: Set up Python
+      uses: actions/setup-python@v2
+      with:
+        python-version: '3.x'
+
+    - name: run python based linter
+      run: python .github/vyos-linter.py '${{ steps.file_changes.outputs.files_modified }}'
+
+    env:
+      GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+    
+    
diff --git a/.gitmodules b/.gitmodules
new file mode 100644
index 00000000..d3d92138
--- /dev/null
+++ b/.gitmodules
@@ -0,0 +1,4 @@
+[submodule "docs/_include/vyos-1x"]
+	path = docs/_include/vyos-1x
+	url = https://github.com/vyos/vyos-1x
+	branch = current
diff --git a/vale.ini b/vale.ini
new file mode 100644
index 00000000..b7dde1d8
--- /dev/null
+++ b/vale.ini
@@ -0,0 +1,16 @@
+StylesPath = .github/styles
+MinAlertLevel = suggestion
+
+SkippedScopes = script, style, pre, figure, img, a, code
+
+
+[*.rst]
+BasedOnStyles = VyOS, Google
+
+Google.DateFormat = YES
+vale.GenderBias = NO
+vale.Hedging = NO
+vale.Redundancy = NO
+vale.Repetition = YES
+vale.Uncomparables = NO
+proselint.GenderBias = NO
\ No newline at end of file

From 3e5366f95ce02f8c9e31a9a2e1001621176100cc Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 26 Nov 2020 21:50:17 +0100
Subject: [PATCH 103/295] add github submodule to readthedocs.yml

---
 .readthedocs.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.readthedocs.yml b/.readthedocs.yml
index db36f18f..7a4e84da 100644
--- a/.readthedocs.yml
+++ b/.readthedocs.yml
@@ -22,3 +22,7 @@ python:
   version: 3.7
   install:
     - requirements: requirements.txt
+
+submodules:
+  include:
+    - vyos-1x
\ No newline at end of file

From 27022c6a9c7c4ec57eb79cc17475b4d7d03a22cc Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 26 Nov 2020 21:51:54 +0100
Subject: [PATCH 104/295] prepare coverage

---
 requirements.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index fc8e190e..2b1f7796 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,4 +2,5 @@ Sphinx>=1.4.3
 sphinx-rtd-theme
 setuptools
 docutils
-sphinx-notfound-page
+lxml
+sphinx-notfound-page
\ No newline at end of file

From ab14c6a43a4fa56e35f6fd8b48bc267611b02f01 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 26 Nov 2020 21:52:17 +0100
Subject: [PATCH 105/295] move vale stuff to .github

---
 .vale                                 |  16 ---
 ci/vale/Google/AMPM.yml               |   9 --
 ci/vale/Google/Acronyms.yml           |  64 ---------
 ci/vale/Google/Colons.yml             |   7 -
 ci/vale/Google/Contractions.yml       |  28 ----
 ci/vale/Google/DateFormat.yml         |   9 --
 ci/vale/Google/Ellipses.yml           |   7 -
 ci/vale/Google/EmDash.yml             |   8 --
 ci/vale/Google/EnDash.yml             |   7 -
 ci/vale/Google/Exclamation.yml        |   7 -
 ci/vale/Google/FirstPerson.yml        |  11 --
 ci/vale/Google/Gender.yml             |   9 --
 ci/vale/Google/GenderBias.yml         |  45 -------
 ci/vale/Google/HeadingPunctuation.yml |   8 --
 ci/vale/Google/Headings.yml           |  26 ----
 ci/vale/Google/Hyphens.yml            |   8 --
 ci/vale/Google/Latin.yml              |   9 --
 ci/vale/Google/LyHyphens.yml          |   8 --
 ci/vale/Google/OptionalPlurals.yml    |   7 -
 ci/vale/Google/Ordinal.yml            |   7 -
 ci/vale/Google/OxfordComma.yml        |   7 -
 ci/vale/Google/Parens.yml             |   7 -
 ci/vale/Google/Passive.yml            | 184 --------------------------
 ci/vale/Google/Periods.yml            |   7 -
 ci/vale/Google/Quotes.yml             |   7 -
 ci/vale/Google/Ranges.yml             |   7 -
 ci/vale/Google/Semicolons.yml         |   8 --
 ci/vale/Google/Slang.yml              |  11 --
 ci/vale/Google/Spacing.yml            |   8 --
 ci/vale/Google/Spelling.yml           |   8 --
 ci/vale/Google/Units.yml              |   7 -
 ci/vale/Google/Will.yml               |   7 -
 ci/vale/Google/WordList.yml           |  79 -----------
 ci/vale/Google/meta.json              |  16 ---
 ci/vale/Google/vocab.txt              |   0
 ci/vale/VyOS/Terminology.yml          |   9 --
 ci/vyos-linter.py                     | 117 ----------------
 37 files changed, 789 deletions(-)
 delete mode 100644 .vale
 delete mode 100644 ci/vale/Google/AMPM.yml
 delete mode 100644 ci/vale/Google/Acronyms.yml
 delete mode 100644 ci/vale/Google/Colons.yml
 delete mode 100644 ci/vale/Google/Contractions.yml
 delete mode 100644 ci/vale/Google/DateFormat.yml
 delete mode 100644 ci/vale/Google/Ellipses.yml
 delete mode 100644 ci/vale/Google/EmDash.yml
 delete mode 100644 ci/vale/Google/EnDash.yml
 delete mode 100644 ci/vale/Google/Exclamation.yml
 delete mode 100644 ci/vale/Google/FirstPerson.yml
 delete mode 100644 ci/vale/Google/Gender.yml
 delete mode 100644 ci/vale/Google/GenderBias.yml
 delete mode 100644 ci/vale/Google/HeadingPunctuation.yml
 delete mode 100644 ci/vale/Google/Headings.yml
 delete mode 100644 ci/vale/Google/Hyphens.yml
 delete mode 100644 ci/vale/Google/Latin.yml
 delete mode 100644 ci/vale/Google/LyHyphens.yml
 delete mode 100644 ci/vale/Google/OptionalPlurals.yml
 delete mode 100644 ci/vale/Google/Ordinal.yml
 delete mode 100644 ci/vale/Google/OxfordComma.yml
 delete mode 100644 ci/vale/Google/Parens.yml
 delete mode 100644 ci/vale/Google/Passive.yml
 delete mode 100644 ci/vale/Google/Periods.yml
 delete mode 100644 ci/vale/Google/Quotes.yml
 delete mode 100644 ci/vale/Google/Ranges.yml
 delete mode 100644 ci/vale/Google/Semicolons.yml
 delete mode 100644 ci/vale/Google/Slang.yml
 delete mode 100644 ci/vale/Google/Spacing.yml
 delete mode 100644 ci/vale/Google/Spelling.yml
 delete mode 100644 ci/vale/Google/Units.yml
 delete mode 100644 ci/vale/Google/Will.yml
 delete mode 100644 ci/vale/Google/WordList.yml
 delete mode 100644 ci/vale/Google/meta.json
 delete mode 100644 ci/vale/Google/vocab.txt
 delete mode 100644 ci/vale/VyOS/Terminology.yml
 delete mode 100644 ci/vyos-linter.py

diff --git a/.vale b/.vale
deleted file mode 100644
index 05e6de93..00000000
--- a/.vale
+++ /dev/null
@@ -1,16 +0,0 @@
-StylesPath = ci/vale
-MinAlertLevel = suggestion
-
-SkippedScopes = script, style, pre, figure, img, a, code
-
-
-[*.rst]
-BasedOnStyles = VyOS
-
-Google.DateFormat = YES
-vale.GenderBias = NO
-vale.Hedging = NO
-vale.Redundancy = NO
-vale.Repetition = YES
-vale.Uncomparables = NO
-proselint.GenderBias = NO
diff --git a/ci/vale/Google/AMPM.yml b/ci/vale/Google/AMPM.yml
deleted file mode 100644
index fbdc6e4f..00000000
--- a/ci/vale/Google/AMPM.yml
+++ /dev/null
@@ -1,9 +0,0 @@
-extends: existence
-message: "Use 'AM' or 'PM' (preceded by a space)."
-link: 'https://developers.google.com/style/word-list'
-level: error
-nonword: true
-tokens:
-  - '\d{1,2}[AP]M'
-  - '\d{1,2} ?[ap]m'
-  - '\d{1,2} ?[aApP]\.[mM]\.'
diff --git a/ci/vale/Google/Acronyms.yml b/ci/vale/Google/Acronyms.yml
deleted file mode 100644
index f41af018..00000000
--- a/ci/vale/Google/Acronyms.yml
+++ /dev/null
@@ -1,64 +0,0 @@
-extends: conditional
-message: "Spell out '%s', if it's unfamiliar to the audience."
-link: 'https://developers.google.com/style/abbreviations'
-level: suggestion
-ignorecase: false
-# Ensures that the existence of 'first' implies the existence of 'second'.
-first: '\b([A-Z]{3,5})\b'
-second: '(?:\b[A-Z][a-z]+ )+\(([A-Z]{3,5})\)'
-# ... with the exception of these:
-exceptions:
-  - API
-  - ASP
-  - CLI
-  - CPU
-  - CSS
-  - CSV
-  - DEBUG
-  - DOM
-  - DPI
-  - FAQ
-  - GCC
-  - GDB
-  - GET
-  - GPU
-  - GTK
-  - GUI
-  - HTML
-  - HTTP
-  - HTTPS
-  - IDE
-  - JAR
-  - JSON
-  - JSX
-  - LESS
-  - LLDB
-  - NET
-  - NOTE
-  - NVDA
-  - OSS
-  - PATH
-  - PDF
-  - PHP
-  - POST
-  - RAM
-  - REPL
-  - RSA
-  - SCM
-  - SCSS
-  - SDK
-  - SQL
-  - SSH
-  - SSL
-  - SVG
-  - TBD
-  - TCP
-  - TODO
-  - URI
-  - URL
-  - USB
-  - UTF
-  - XML
-  - XSS
-  - YAML
-  - ZIP
diff --git a/ci/vale/Google/Colons.yml b/ci/vale/Google/Colons.yml
deleted file mode 100644
index 9a4b4b4a..00000000
--- a/ci/vale/Google/Colons.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "'%s' should be in lowercase."
-link: 'https://developers.google.com/style/colons'
-nonword: true
-level: warning
-tokens:
-  - ':\s[A-Z]'
diff --git a/ci/vale/Google/Contractions.yml b/ci/vale/Google/Contractions.yml
deleted file mode 100644
index 905a39f4..00000000
--- a/ci/vale/Google/Contractions.yml
+++ /dev/null
@@ -1,28 +0,0 @@
-extends: substitution
-message: "Feel free to use '%s' instead of '%s'."
-link: 'https://developers.google.com/style/contractions'
-level: suggestion
-ignorecase: true
-swap:
-  are not: aren't
-  cannot: can't
-  could not: couldn't
-  did not: didn't
-  do not: don't
-  does not: doesn't
-  has not: hasn't
-  have not: haven't
-  how is: how's
-  is not: isn't
-  it is: it's
-  should not: shouldn't
-  that is: that's
-  they are: they're
-  was not: wasn't
-  we are: we're
-  we have: we've
-  were not: weren't
-  what is: what's
-  when is: when's
-  where is: where's
-  will not: won't
diff --git a/ci/vale/Google/DateFormat.yml b/ci/vale/Google/DateFormat.yml
deleted file mode 100644
index e9d227fa..00000000
--- a/ci/vale/Google/DateFormat.yml
+++ /dev/null
@@ -1,9 +0,0 @@
-extends: existence
-message: "Use 'July 31, 2016' format, not '%s'."
-link: 'https://developers.google.com/style/dates-times'
-ignorecase: true
-level: error
-nonword: true
-tokens:
-  - '\d{1,2}(?:\.|/)\d{1,2}(?:\.|/)\d{4}'
-  - '\d{1,2} (?:Jan(?:uary)?|Feb(?:ruary)?|Mar(?:ch)?|Apr(?:il)|May|Jun(?:e)|Jul(?:y)|Aug(?:ust)|Sep(?:tember)?|Oct(?:ober)|Nov(?:ember)?|Dec(?:ember)?) \d{4}'
diff --git a/ci/vale/Google/Ellipses.yml b/ci/vale/Google/Ellipses.yml
deleted file mode 100644
index 436e6177..00000000
--- a/ci/vale/Google/Ellipses.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "In general, don't use an ellipsis."
-link: 'https://developers.google.com/style/ellipses'
-nonword: true
-level: warning
-tokens:
-  - '\.\.\.'
diff --git a/ci/vale/Google/EmDash.yml b/ci/vale/Google/EmDash.yml
deleted file mode 100644
index c6018db1..00000000
--- a/ci/vale/Google/EmDash.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-extends: existence
-message: "Don't put a space before or after an em dash."
-link: 'https://developers.google.com/style/dashes'
-nonword: true
-level: error
-tokens:
-  - '\s—'
-  - '—\s'
diff --git a/ci/vale/Google/EnDash.yml b/ci/vale/Google/EnDash.yml
deleted file mode 100644
index 194876aa..00000000
--- a/ci/vale/Google/EnDash.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "Use an em dash ('—') instead of '–'."
-link: 'https://developers.google.com/style/dashes'
-nonword: true
-level: error
-tokens:
-  - '–'
diff --git a/ci/vale/Google/Exclamation.yml b/ci/vale/Google/Exclamation.yml
deleted file mode 100644
index c4db380b..00000000
--- a/ci/vale/Google/Exclamation.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "Don't use exclamation points in text."
-link: 'https://developers.google.com/style/exclamation-points'
-nonword: true
-level: error
-tokens:
-  - '!'
diff --git a/ci/vale/Google/FirstPerson.yml b/ci/vale/Google/FirstPerson.yml
deleted file mode 100644
index d2290611..00000000
--- a/ci/vale/Google/FirstPerson.yml
+++ /dev/null
@@ -1,11 +0,0 @@
-extends: existence
-message: "Avoid first-person pronouns such as '%s'."
-link: 'https://developers.google.com/style/pronouns#personal-pronouns'
-ignorecase: true
-level: warning
-nonword: true
-tokens:
-  - (?:^|\s)I\s
-  - \bme\b
-  - \bus\b
-  - \bours\b
diff --git a/ci/vale/Google/Gender.yml b/ci/vale/Google/Gender.yml
deleted file mode 100644
index c8486181..00000000
--- a/ci/vale/Google/Gender.yml
+++ /dev/null
@@ -1,9 +0,0 @@
-extends: existence
-message: "Don't use '%s' as a gender-neutral pronoun."
-link: 'https://developers.google.com/style/pronouns#gender-neutral-pronouns'
-level: error
-ignorecase: true
-tokens:
-  - he/she
-  - s/he
-  - \(s\)he
diff --git a/ci/vale/Google/GenderBias.yml b/ci/vale/Google/GenderBias.yml
deleted file mode 100644
index 261cfb66..00000000
--- a/ci/vale/Google/GenderBias.yml
+++ /dev/null
@@ -1,45 +0,0 @@
-extends: substitution
-message: "Consider using '%s' instead of '%s'."
-link: 'https://developers.google.com/style/inclusive-documentation'
-ignorecase: true
-level: error
-swap:
-  (?:alumna|alumnus):          graduate
-  (?:alumnae|alumni):          graduates
-  air(?:m[ae]n|wom[ae]n):      pilot(s)
-  anchor(?:m[ae]n|wom[ae]n):   anchor(s)
-  authoress:                   author
-  camera(?:m[ae]n|wom[ae]n):   camera operator(s)
-  chair(?:m[ae]n|wom[ae]n):    chair(s)
-  congress(?:m[ae]n|wom[ae]n): member(s) of congress
-  door(?:m[ae]|wom[ae]n):      concierge(s)
-  draft(?:m[ae]n|wom[ae]n):    drafter(s)
-  fire(?:m[ae]n|wom[ae]n):     firefighter(s)
-  fisher(?:m[ae]n|wom[ae]n):   fisher(s)
-  fresh(?:m[ae]n|wom[ae]n):    first-year student(s)
-  garbage(?:m[ae]n|wom[ae]n):  waste collector(s)
-  lady lawyer:                 lawyer
-  ladylike:                    courteous
-  landlord:                    building manager
-  mail(?:m[ae]n|wom[ae]n):     mail carriers
-  man and wife:                husband and wife
-  man enough:                  strong enough
-  mankind:                     human kind
-  manmade:                     manufactured
-  manpower:                    personnel
-  men and girls:               men and women
-  middle(?:m[ae]n|wom[ae]n):   intermediary
-  news(?:m[ae]n|wom[ae]n):     journalist(s)
-  ombuds(?:man|woman):         ombuds
-  oneupmanship:                upstaging
-  poetess:                     poet
-  police(?:m[ae]n|wom[ae]n):   police officer(s)
-  repair(?:m[ae]n|wom[ae]n):   technician(s)
-  sales(?:m[ae]n|wom[ae]n):    salesperson or sales people
-  service(?:m[ae]n|wom[ae]n):  soldier(s)
-  steward(?:ess)?:             flight attendant
-  tribes(?:m[ae]n|wom[ae]n):   tribe member(s)
-  waitress:                    waiter
-  woman doctor:                doctor
-  woman scientist[s]?:         scientist(s)
-  work(?:m[ae]n|wom[ae]n):     worker(s)
diff --git a/ci/vale/Google/HeadingPunctuation.yml b/ci/vale/Google/HeadingPunctuation.yml
deleted file mode 100644
index 5c39abbf..00000000
--- a/ci/vale/Google/HeadingPunctuation.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-extends: existence
-message: "Don't put a period at the end of a heading."
-link: 'https://developers.google.com/style/capitalization#capitalization-in-titles-and-headings'
-nonword: true
-level: warning
-scope: heading
-tokens:
-  - '[a-z0-9][.](?:\s|$)'
diff --git a/ci/vale/Google/Headings.yml b/ci/vale/Google/Headings.yml
deleted file mode 100644
index 5afb968d..00000000
--- a/ci/vale/Google/Headings.yml
+++ /dev/null
@@ -1,26 +0,0 @@
-extends: capitalization
-message: "'%s' should use sentence-style capitalization."
-link: 'https://developers.google.com/style/capitalization#capitalization-in-titles-and-headings'
-level: warning
-scope: heading
-match: $sentence
-exceptions:
-  - Azure
-  - CLI
-  - Code
-  - Cosmos
-  - Docker
-  - Emmet
-  - I
-  - Kubernetes
-  - Linux
-  - macOS
-  - Marketplace
-  - MongoDB
-  - REPL
-  - Studio
-  - TypeScript
-  - URLs
-  - Visual
-  - VS
-  - Windows
diff --git a/ci/vale/Google/Hyphens.yml b/ci/vale/Google/Hyphens.yml
deleted file mode 100644
index f9779637..00000000
--- a/ci/vale/Google/Hyphens.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-extends: existence
-message: "Don't place a space on either side of a hyphen (unless it's suspended)."
-link: 'https://developers.google.com/style/hyphens'
-level: warning
-nonword: true
-tokens:
-  - '\s-'
-  - '-\s'
diff --git a/ci/vale/Google/Latin.yml b/ci/vale/Google/Latin.yml
deleted file mode 100644
index f032b349..00000000
--- a/ci/vale/Google/Latin.yml
+++ /dev/null
@@ -1,9 +0,0 @@
-extends: substitution
-message: "Use '%s' instead of '%s'."
-link: 'https://developers.google.com/style/abbreviations'
-ignorecase: true
-level: error
-nonword: true
-swap:
-  '\b(?:eg|e\.g\.)[\s,]': for example
-  '\b(?:ie|i\.e\.)[\s,]': that is
diff --git a/ci/vale/Google/LyHyphens.yml b/ci/vale/Google/LyHyphens.yml
deleted file mode 100644
index d5b6a942..00000000
--- a/ci/vale/Google/LyHyphens.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-extends: existence
-message: "'%s' doesn't need a hyphen."
-link: 'https://developers.google.com/style/hyphens'
-level: error
-ignorecase: false
-nonword: true
-tokens:
-  - '\s[^\s-]+ly-'
diff --git a/ci/vale/Google/OptionalPlurals.yml b/ci/vale/Google/OptionalPlurals.yml
deleted file mode 100644
index 7058932f..00000000
--- a/ci/vale/Google/OptionalPlurals.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "Don't use plurals in parentheses such as in '%s'."
-link: 'https://developers.google.com/style/plurals-parentheses'
-level: error
-nonword: true
-tokens:
-  - '\b\w+\(s\)'
diff --git a/ci/vale/Google/Ordinal.yml b/ci/vale/Google/Ordinal.yml
deleted file mode 100644
index 8c429e0f..00000000
--- a/ci/vale/Google/Ordinal.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "Spell out all ordinal numbers ('%s') in text."
-link: 'https://developers.google.com/style/numbers'
-level: error
-nonword: true
-tokens:
-  - \d+(?:st|th|rd)
diff --git a/ci/vale/Google/OxfordComma.yml b/ci/vale/Google/OxfordComma.yml
deleted file mode 100644
index 98b07113..00000000
--- a/ci/vale/Google/OxfordComma.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "Use the Oxford comma in '%s'."
-link: 'https://developers.google.com/style/commas'
-scope: sentence
-level: warning
-tokens:
-  - '(?:[^,]+,){1,}\s\w+\sand'
diff --git a/ci/vale/Google/Parens.yml b/ci/vale/Google/Parens.yml
deleted file mode 100644
index 3b8711d0..00000000
--- a/ci/vale/Google/Parens.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "Use parentheses judiciously."
-link: 'https://developers.google.com/style/parentheses'
-nonword: true
-level: suggestion
-tokens:
-  - '\(.+\)'
diff --git a/ci/vale/Google/Passive.yml b/ci/vale/Google/Passive.yml
deleted file mode 100644
index 3265890e..00000000
--- a/ci/vale/Google/Passive.yml
+++ /dev/null
@@ -1,184 +0,0 @@
-extends: existence
-link: 'https://developers.google.com/style/voice'
-message: "In general, use active voice instead of passive voice ('%s')."
-ignorecase: true
-level: suggestion
-raw:
-  - \b(am|are|were|being|is|been|was|be)\b\s*
-tokens:
-  - '[\w]+ed'
-  - awoken
-  - beat
-  - become
-  - been
-  - begun
-  - bent
-  - beset
-  - bet
-  - bid
-  - bidden
-  - bitten
-  - bled
-  - blown
-  - born
-  - bought
-  - bound
-  - bred
-  - broadcast
-  - broken
-  - brought
-  - built
-  - burnt
-  - burst
-  - cast
-  - caught
-  - chosen
-  - clung
-  - come
-  - cost
-  - crept
-  - cut
-  - dealt
-  - dived
-  - done
-  - drawn
-  - dreamt
-  - driven
-  - drunk
-  - dug
-  - eaten
-  - fallen
-  - fed
-  - felt
-  - fit
-  - fled
-  - flown
-  - flung
-  - forbidden
-  - foregone
-  - forgiven
-  - forgotten
-  - forsaken
-  - fought
-  - found
-  - frozen
-  - given
-  - gone
-  - gotten
-  - ground
-  - grown
-  - heard
-  - held
-  - hidden
-  - hit
-  - hung
-  - hurt
-  - kept
-  - knelt
-  - knit
-  - known
-  - laid
-  - lain
-  - leapt
-  - learnt
-  - led
-  - left
-  - lent
-  - let
-  - lighted
-  - lost
-  - made
-  - meant
-  - met
-  - misspelt
-  - mistaken
-  - mown
-  - overcome
-  - overdone
-  - overtaken
-  - overthrown
-  - paid
-  - pled
-  - proven
-  - put
-  - quit
-  - read
-  - rid
-  - ridden
-  - risen
-  - run
-  - rung
-  - said
-  - sat
-  - sawn
-  - seen
-  - sent
-  - set
-  - sewn
-  - shaken
-  - shaven
-  - shed
-  - shod
-  - shone
-  - shorn
-  - shot
-  - shown
-  - shrunk
-  - shut
-  - slain
-  - slept
-  - slid
-  - slit
-  - slung
-  - smitten
-  - sold
-  - sought
-  - sown
-  - sped
-  - spent
-  - spilt
-  - spit
-  - split
-  - spoken
-  - spread
-  - sprung
-  - spun
-  - stolen
-  - stood
-  - stridden
-  - striven
-  - struck
-  - strung
-  - stuck
-  - stung
-  - stunk
-  - sung
-  - sunk
-  - swept
-  - swollen
-  - sworn
-  - swum
-  - swung
-  - taken
-  - taught
-  - thought
-  - thrived
-  - thrown
-  - thrust
-  - told
-  - torn
-  - trodden
-  - understood
-  - upheld
-  - upset
-  - wed
-  - wept
-  - withheld
-  - withstood
-  - woken
-  - won
-  - worn
-  - wound
-  - woven
-  - written
-  - wrung
diff --git a/ci/vale/Google/Periods.yml b/ci/vale/Google/Periods.yml
deleted file mode 100644
index d24a6a6c..00000000
--- a/ci/vale/Google/Periods.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "Don't use periods with acronyms or initialisms such as '%s'."
-link: 'https://developers.google.com/style/abbreviations'
-level: error
-nonword: true
-tokens:
-  - '\b(?:[A-Z]\.){3,}'
diff --git a/ci/vale/Google/Quotes.yml b/ci/vale/Google/Quotes.yml
deleted file mode 100644
index 3cb6f1ab..00000000
--- a/ci/vale/Google/Quotes.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "Commas and periods go inside quotation marks."
-link: 'https://developers.google.com/style/quotation-marks'
-level: error
-nonword: true
-tokens:
-  - '"[^"]+"[.,?]'
diff --git a/ci/vale/Google/Ranges.yml b/ci/vale/Google/Ranges.yml
deleted file mode 100644
index 3ec045e7..00000000
--- a/ci/vale/Google/Ranges.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "Don't add words such as 'from' or 'between' to describe a range of numbers."
-link: 'https://developers.google.com/style/hyphens'
-nonword: true
-level: warning
-tokens:
-  - '(?:from|between)\s\d+\s?-\s?\d+'
diff --git a/ci/vale/Google/Semicolons.yml b/ci/vale/Google/Semicolons.yml
deleted file mode 100644
index bb8b85b4..00000000
--- a/ci/vale/Google/Semicolons.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-extends: existence
-message: "Use semicolons judiciously."
-link: 'https://developers.google.com/style/semicolons'
-nonword: true
-scope: sentence
-level: suggestion
-tokens:
-  - ';'
diff --git a/ci/vale/Google/Slang.yml b/ci/vale/Google/Slang.yml
deleted file mode 100644
index 63f4c248..00000000
--- a/ci/vale/Google/Slang.yml
+++ /dev/null
@@ -1,11 +0,0 @@
-extends: existence
-message: "Don't use internet slang abbreviations such as '%s'."
-link: 'https://developers.google.com/style/abbreviations'
-ignorecase: true
-level: error
-tokens:
-  - 'tl;dr'
-  - ymmv
-  - rtfm
-  - imo
-  - fwiw
diff --git a/ci/vale/Google/Spacing.yml b/ci/vale/Google/Spacing.yml
deleted file mode 100644
index 5f209a9f..00000000
--- a/ci/vale/Google/Spacing.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-extends: existence
-message: "'%s' should have one space."
-link: 'https://developers.google.com/style/sentence-spacing'
-level: error
-nonword: true
-tokens:
-  - '[.?!] {2,}[A-Z]'
-  - '[.?!][A-Z]'
diff --git a/ci/vale/Google/Spelling.yml b/ci/vale/Google/Spelling.yml
deleted file mode 100644
index 57acb884..00000000
--- a/ci/vale/Google/Spelling.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-extends: existence
-message: "In general, use American spelling instead of '%s'."
-link: 'https://developers.google.com/style/spelling'
-ignorecase: true
-level: warning
-tokens:
-  - '(?:\w+)nised?'
-  - '(?:\w+)logue'
diff --git a/ci/vale/Google/Units.yml b/ci/vale/Google/Units.yml
deleted file mode 100644
index 220de3e9..00000000
--- a/ci/vale/Google/Units.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "Put a nonbreaking space between the number and the unit in '%s'."
-link: 'https://developers.google.com/style/units-of-measure'
-nonword: true
-level: error
-tokens:
-  - \d+(?:GB|TB|MB)
diff --git a/ci/vale/Google/Will.yml b/ci/vale/Google/Will.yml
deleted file mode 100644
index 128a9183..00000000
--- a/ci/vale/Google/Will.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-extends: existence
-message: "Avoid using '%s'."
-link: 'https://developers.google.com/style/tense'
-ignorecase: true
-level: warning
-tokens:
-  - will
diff --git a/ci/vale/Google/WordList.yml b/ci/vale/Google/WordList.yml
deleted file mode 100644
index d5d6bea5..00000000
--- a/ci/vale/Google/WordList.yml
+++ /dev/null
@@ -1,79 +0,0 @@
-extends: substitution
-message: "Use %s instead of '%s'."
-link: 'https://developers.google.com/style/word-list'
-level: warning
-ignorecase: false
-swap:
-  '(?:API Console|dev|developer) key': "'API key'"
-  '(?:cell ?phone|smart ?phone)': "'phone' or 'mobile phone'"
-  '(?:dev|developer|APIs) console': "'API console'"
-  '(?:e-mail|Email|E-mail)':  "'email'"
-  '(?:file ?path|path ?name)':  "'path'"
-  '(?:kill|terminate)': "'stop', 'exit', 'cancel', or 'end'"
-  '(?:OAuth ?2|Oauth)': "'OAuth 2.0'"
-  '(?:ok|Okay)': "'OK' or 'okay'"
-  '(?:WiFi|wifi)': "'Wi-Fi'"
-  '[\.]+apk': "'APK'"
-  '3\-D': "'3D'"
-  'Google (?:I\-O|IO)': "'Google I/O'"
-  'tap (?:&|and) hold': "'touch & hold'"
-  'un(?:check|select)': "'clear'"
-  abort: "'stop', 'exit', 'cancel' or 'end'"
-  above: "'preceding'"
-  account name: "'username'"
-  action bar: "'app bar'"
-  admin: "'administrator'"
-  Ajax: "'AJAX'"
-  Android device: "'Android-powered device'"
-  android: "'Android'"
-  API explorer: "'APIs Explorer'"
-  application: "'app'"
-  approx\.: "'approximately'"
-  authN: "'authentication'"
-  authZ: "'authorization'"
-  autoupdate: "'automatically update'"
-  cellular data: "'mobile data'"
-  cellular network: "'mobile network'"
-  chapter: "'documents', 'pages', 'sections'"
-  check box: "'checkbox'"
-  check: "'select'"
-  CLI: "'command-line tool'"
-  click on: "'click' or 'click in'"
-  Cloud: "'Google Cloud Platform' or 'GCP'"
-  Container Engine: "'Kubernetes Engine'"
-  content type: "'media type'"
-  curated roles: "'predefined roles'"
-  data are: "'data is'"
-  Developers Console: "'Google API Console' or 'API Console'"
-  disabled?: "'turn off' or 'off'"
-  ephemeral IP address: "'ephemeral external IP address'"
-  fewer data: "'less data'"
-  file name: "'filename'"
-  firewalls: "'firewall rules'"
-  functionality: "'capability' or 'feature'"
-  Google account: "'Google Account'"
-  Google accounts: "'Google Accounts'"
-  Googling: "'search with Google'"
-  grayed-out: "'unavailable'"
-  HTTPs: "'HTTPS'"
-  in order to: "'to'"
-  ingest: "'import' or 'load'"
-  k8s: "'Kubernetes'"
-  long press: "'touch & hold'"
-  network IP address: "'internal IP address'"
-  omnibox: "'address bar'"
-  open-source: "'open source'"
-  overview screen: "'recents screen'"
-  regex: "'regular expression'"
-  SHA1: "'SHA-1' or 'HAS-SHA1'"
-  sign into: "'sign in to'"
-  sign-?on: "'single sign-on'"
-  static IP address: "'static external IP address'"
-  stylesheet: "'style sheet'"
-  synch: "'sync'"
-  tablename: "'table name'"
-  tablet: "'device'"
-  touch: "'tap'"
-  url:  "'URL'"
-  vs\.: "'versus'"
-  World Wide Web: "'web'"
diff --git a/ci/vale/Google/meta.json b/ci/vale/Google/meta.json
deleted file mode 100644
index 3ae5fb21..00000000
--- a/ci/vale/Google/meta.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
-  "author": "Joseph Kato",
-  "description": "A Vale-compatible implementation of the Microsoft Writing Style Guide.",
-  "email": "support@errata.ai",
-  "lang": "en",
-  "url": "https://github.com/errata-ai/Google/releases/latest/download/Google.zip",
-  "feed": "https://github.com/errata-ai/Google/releases.atom",
-  "issues": "https://github.com/errata-ai/Google/issues/new",
-  "license": "MIT",
-  "name": "Google",
-  "sources": [
-    "https://developers.google.com/style/"
-  ],
-  "vale_version": ">=1.0.0",
-  "coverage": 0.0
-}
diff --git a/ci/vale/Google/vocab.txt b/ci/vale/Google/vocab.txt
deleted file mode 100644
index e69de29b..00000000
diff --git a/ci/vale/VyOS/Terminology.yml b/ci/vale/VyOS/Terminology.yml
deleted file mode 100644
index cd0c5089..00000000
--- a/ci/vale/VyOS/Terminology.yml
+++ /dev/null
@@ -1,9 +0,0 @@
-extends: substitution
-message: Prefer '%s' over '%s'
-ignorecase: false
-level: error
-swap:
-  vyos: VyOS
-  Vyos: VyOS
-  VYOS: VyOS
-  Gre: GRE
\ No newline at end of file
diff --git a/ci/vyos-linter.py b/ci/vyos-linter.py
deleted file mode 100644
index 3bf65484..00000000
--- a/ci/vyos-linter.py
+++ /dev/null
@@ -1,117 +0,0 @@
-import os
-import re
-import ipaddress
-
-IPV4SEG  = r'(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])'
-IPV4ADDR = r'(?:(?:' + IPV4SEG + r'\.){3,3}' + IPV4SEG + r')'
-IPV6SEG  = r'(?:(?:[0-9a-fA-F]){1,4})'
-IPV6GROUPS = (
-    r'(?:' + IPV6SEG + r':){7,7}' + IPV6SEG,                  # 1:2:3:4:5:6:7:8
-    r'(?:\s' + IPV6SEG + r':){1,7}:',                           # 1::                                 1:2:3:4:5:6:7::
-    r'(?:' + IPV6SEG + r':){1,6}:' + IPV6SEG,                 # 1::8               1:2:3:4:5:6::8   1:2:3:4:5:6::8
-    r'(?:' + IPV6SEG + r':){1,5}(?::' + IPV6SEG + r'){1,2}',  # 1::7:8             1:2:3:4:5::7:8   1:2:3:4:5::8
-    r'(?:' + IPV6SEG + r':){1,4}(?::' + IPV6SEG + r'){1,3}',  # 1::6:7:8           1:2:3:4::6:7:8   1:2:3:4::8
-    r'(?:' + IPV6SEG + r':){1,3}(?::' + IPV6SEG + r'){1,4}',  # 1::5:6:7:8         1:2:3::5:6:7:8   1:2:3::8
-    r'(?:' + IPV6SEG + r':){1,2}(?::' + IPV6SEG + r'){1,5}',  # 1::4:5:6:7:8       1:2::4:5:6:7:8   1:2::8
-    IPV6SEG + r':(?:(?::' + IPV6SEG + r'){1,6})',             # 1::3:4:5:6:7:8     1::3:4:5:6:7:8   1::8
-    r':(?:(?::' + IPV6SEG + r'){1,7}|:)',                     # ::2:3:4:5:6:7:8    ::2:3:4:5:6:7:8  ::8       ::
-    r'fe80:(?::' + IPV6SEG + r'){0,4}%[0-9a-zA-Z]{1,}',       # fe80::7:8%eth0     fe80::7:8%1  (link-local IPv6 addresses with zone index)
-    r'::(?:ffff(?::0{1,4}){0,1}:){0,1}[^\s:]' + IPV4ADDR,     # ::255.255.255.255  ::ffff:255.255.255.255  ::ffff:0:255.255.255.255 (IPv4-mapped IPv6 addresses and IPv4-translated addresses)
-    r'(?:' + IPV6SEG + r':){1,4}:[^\s:]' + IPV4ADDR,          # 2001:db8:3:4::192.0.2.33  64:ff9b::192.0.2.33 (IPv4-Embedded IPv6 Address)
-)
-IPV6ADDR = '|'.join(['(?:{})'.format(g) for g in IPV6GROUPS[::-1]])  # Reverse rows for greedy match
-
-MAC = r'([0-9A-F]{2}[:-]){5}([0-9A-F]{2})'
-
-NUMBER = r"([\s']\d+[\s'])"
-
-
-def lint_mac(cnt, line):
-    mac = re.search(MAC, line, re.I)
-    if mac is not None:
-        mac = mac.group()
-        u_mac = re.search(r'((00)[:-](53)([:-][0-9A-F]{2}){4})', mac, re.I)
-        m_mac = re.search(r'((90)[:-](10)([:-][0-9A-F]{2}){4})', mac, re.I)
-        if u_mac is None and m_mac is None:
-            return f"MAC-Address Error Line {cnt}: {mac}"
-
-
-def lint_ipv4(cnt, line):
-    ip = re.search(IPV4ADDR, line, re.I)
-    if ip is not None:
-        ip = ipaddress.ip_address(ip.group().strip(' '))
-        # https://docs.python.org/3/library/ipaddress.html#ipaddress.IPv4Address.is_private
-        if ip.is_private is False and ip.is_multicast is False:
-            return f"IPv4 Error Line {cnt}: {ip}"
-
-
-def lint_ipv6(cnt, line):
-    ip = re.search(IPV6ADDR, line, re.I)
-    if ip is not None:
-        ip = ipaddress.ip_address(ip.group().strip(' '))
-        # https://docs.python.org/3/library/ipaddress.html#ipaddress.IPv4Address.is_private
-        if ip.is_private is False and ip.is_multicast is False:
-            return f"IPv6 Error Line {cnt}: {ip}"
-
-
-def lint_AS(cnt, line):
-    number = re.search(NUMBER, line, re.I)
-    if number:
-        pass
-        # find a way to detect AS numbers
-
-
-def lint_linelen(cnt, line):
-    if len(line) > 80:
-        return f"Line {cnt} too long: len={len(line)}"
-
-
-def handle_file(path, file):
-    errors = []
-    path = '/'.join(path)
-    filepath = f"{path}/{file}"
-    try:
-        with open(filepath) as fp:
-            line = fp.readline()
-            cnt = 1
-            while line:
-                err_mac = lint_mac(cnt, line.strip())
-                err_ip4 = lint_ipv4(cnt, line.strip())
-                err_ip6 = lint_ipv6(cnt, line.strip())
-                err_len = lint_linelen(cnt, line.strip())
-                if err_mac:
-                    errors.append(err_mac)
-                if err_ip4:
-                    errors.append(err_ip4)
-                if err_ip6:
-                    errors.append(err_ip6)
-                if err_len:
-                    errors.append(err_len)
-                line = fp.readline()
-                cnt += 1
-    finally:
-        fp.close()
-
-    if len(errors) > 0:
-        print(f"File: {filepath}")
-        for error in errors:
-            print(error)
-        print('')
-        return False
-
-
-def main():
-    bool_error = True
-    # TODO: path and/or files via cli arg
-    for root, dirs, files in os.walk("../docs"):
-        path = root.split(os.sep)
-        for file in files:
-            if file[-4:] == ".rst":
-                if handle_file(path, file) is False:
-                    bool_error = False
-    return bool_error
-
-
-if __name__ == "__main__":
-    if main() is False:
-        exit(1)

From de9eaec2cf26bb67738d953fbc87a3f3320aa3d7 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 26 Nov 2020 22:12:04 +0100
Subject: [PATCH 106/295] prepare coverage.rst

---
 docs/_ext/testcoverage.py | 351 ++++++++++++++++++++++++++++++++++++++
 docs/_ext/vyos.py         | 264 ++++++++++++++++++++++++----
 docs/coverage.rst         |  43 +++++
 3 files changed, 626 insertions(+), 32 deletions(-)
 create mode 100644 docs/_ext/testcoverage.py
 create mode 100644 docs/coverage.rst

diff --git a/docs/_ext/testcoverage.py b/docs/_ext/testcoverage.py
new file mode 100644
index 00000000..70714d6b
--- /dev/null
+++ b/docs/_ext/testcoverage.py
@@ -0,0 +1,351 @@
+'''
+generate json with all commands from xml for vyos documentation coverage
+
+'''
+
+
+import sys
+import os
+import json
+import re
+import logging
+
+from io import BytesIO
+from lxml import etree as ET
+import shutil
+
+default_constraint_err_msg = "Invalid value"
+validator_dir = ""
+
+
+input_data = [
+    {
+        "kind": "cfgcmd",
+        "input_dir": "_include/vyos-1x/interface-definitions/",
+        "schema_file": "_include/vyos-1x/schema/interface_definition.rng",
+        "files": []
+    },
+    {
+        "kind": "opcmd",
+        "input_dir": "_include/vyos-1x/op-mode-definitions/",
+        "schema_file": "_include/vyos-1x/schema/op-mode-definition.rng",
+        "files": []
+    }
+]
+
+node_data = {
+    'cfgcmd': {},
+    'opcmd': {},
+}
+
+def get_properties(p):
+    props = {}
+    props['valueless'] = False
+
+    try:
+        if p.find("valueless") is not None:
+            props['valueless'] = True
+    except:
+        pass
+
+    if p is None:
+        return props
+
+    # Get the help string
+    try:
+        props["help"] = p.find("help").text
+    except:
+        pass
+
+    # Get value help strings
+    try:
+        vhe = p.findall("valueHelp")
+        vh = []
+        for v in vhe:
+            vh.append( (v.find("format").text, v.find("description").text) )
+        props["val_help"] = vh
+    except:
+        props["val_help"] = []
+
+    # Get the constraint statements
+    error_msg = default_constraint_err_msg
+    # Get the error message if it's there
+    try:
+        error_msg = p.find("constraintErrorMessage").text
+    except:
+        pass
+    
+
+    vce = p.find("constraint")
+    vc = []
+    if vce is not None:
+        # The old backend doesn't support multiple validators in OR mode
+        # so we emulate it
+
+        regexes = []
+        regex_elements = vce.findall("regex")
+        if regex_elements is not None:
+            regexes = list(map(lambda e: e.text.strip(), regex_elements))
+        if "" in regexes:
+            print("Warning: empty regex, node will be accepting any value")
+
+        validator_elements = vce.findall("validator")
+        validators = []
+        if validator_elements is not None:
+            for v in validator_elements:
+                v_name = os.path.join(validator_dir, v.get("name"))
+
+                # XXX: lxml returns None for empty arguments
+                v_argument = None
+                try:
+                    v_argument = v.get("argument")
+                except:
+                    pass
+                if v_argument is None:
+                    v_argument = ""
+
+                validators.append("{0} {1}".format(v_name, v_argument))
+
+
+        regex_args = " ".join(map(lambda s: "--regex \\\'{0}\\\'".format(s), regexes))
+        validator_args = " ".join(map(lambda s: "--exec \\\"{0}\\\"".format(s), validators))
+        validator_script = '${vyos_libexec_dir}/validate-value.py'
+        validator_string = "exec \"{0} {1} {2} --value \\\'$VAR(@)\\\'\"; \"{3}\"".format(validator_script, regex_args, validator_args, error_msg)
+
+        props["constraint"] = validator_string
+
+    # Get the completion help strings
+    try:
+        che = p.findall("completionHelp")
+        ch = ""
+        for c in che:
+            scripts = c.findall("script")
+            paths = c.findall("path")
+            lists = c.findall("list")
+
+            # Current backend doesn't support multiple allowed: tags
+            # so we get to emulate it
+            comp_exprs = []
+            for i in lists:
+                comp_exprs.append("echo \"{0}\"".format(i.text))
+            for i in paths:
+                comp_exprs.append("/bin/cli-shell-api listNodes {0}".format(i.text))
+            for i in scripts:
+                comp_exprs.append("sh -c \"{0}\"".format(i.text))
+            comp_help = " && ".join(comp_exprs)
+            props["comp_help"] = comp_help
+    except:
+        props["comp_help"] = []
+
+    # Get priority
+    try:
+        props["priority"] = p.find("priority").text
+    except:
+        pass
+
+    # Get "multi"
+    if p.find("multi") is not None:
+        props["multi"] = True
+
+    # Get "valueless"
+    if p.find("valueless") is not None:
+        props["valueless"] = True
+
+    return props
+
+def process_node(n, f):
+
+    props_elem = n.find("properties")
+    children = n.find("children")
+    command = n.find("command")
+    children_nodes = []
+    owner = n.get("owner")
+    node_type = n.tag
+
+    name = n.get("name")
+    props = get_properties(props_elem)
+
+    if node_type != "node":
+        if "valueless" not in props.keys():
+            props["type"] = "txt"
+    if node_type == "tagNode":
+        props["tag"] = "True"
+    
+    if node_type == "node" and children is not None:
+        inner_nodes = children.iterfind("*")
+        index_child = 0
+        for inner_n in inner_nodes:
+            children_nodes.append(process_node(inner_n, f))
+            index_child = index_child + 1
+
+    if node_type == "tagNode" and children is not None:
+        inner_nodes = children.iterfind("*")
+        index_child = 0
+        for inner_n in inner_nodes:
+            children_nodes.append(process_node(inner_n, f))
+            index_child = index_child + 1
+    else:
+        # This is a leaf node
+        pass
+    
+    if command is not None:
+        test_command = True
+    else:
+        test_command = False
+    node = {
+        'name': name,
+        'type': node_type,
+        'children': children_nodes,
+        'props': props,
+        'command': test_command,
+        'filename': f
+    }
+    return node
+
+
+
+def create_commands(data, parent_list=[], level=0):
+    result = []
+    command = {
+        'name': [],
+        'help': None,
+        'tag_help': [],
+        'level': level,
+        'no_childs': False,
+        'filename': None
+    }
+    command['filename'] = data['filename']
+    command['name'].extend(parent_list)
+    command['name'].append(data['name'])
+
+    if data['type'] == 'tagNode':
+        command['name'].append("<" + data['name'] + ">")
+
+    if 'val_help' in data['props'].keys():
+        for val_help in data['props']['val_help']:
+            command['tag_help'].append(val_help)
+    
+    if len(data['children']) == 0:
+        command['no_childs'] = True
+    
+    if data['command']:
+        command['no_childs'] = True
+    
+    try:
+        help_text = data['props']['help']
+        command['help'] = re.sub(r"[\n\t]*", "", help_text)
+        
+    except:
+        command['help'] = ""
+    
+    command['valueless'] = data['props']['valueless']
+    
+    if 'children' in data.keys():
+        children_bool = True
+        for child in data['children']:
+            result.extend(create_commands(child, command['name'], level + 1))
+    
+    if command['no_childs']:
+        result.append(command)
+    
+
+
+    return result
+
+
+def include_file(line, input_dir):
+    string = ""
+    if "#include <include" in line.strip():
+        include_filename = line.strip().split('<')[1][:-1]
+        with open(input_dir + include_filename) as ifp:
+            iline = ifp.readline()
+            while iline:
+                string = string + include_file(iline.strip(), input_dir)
+                iline = ifp.readline()
+    else:
+        string = line
+    return string
+
+
+def get_working_commands():
+    for entry in input_data:
+        for (dirpath, dirnames, filenames) in os.walk(entry['input_dir']):
+            entry['files'].extend(filenames)
+            break
+
+        for f in entry['files']:
+
+            string = ""
+            with open(entry['input_dir'] + f) as fp:
+                line = fp.readline()
+                while line:                
+                    string = string + include_file(line.strip(), entry['input_dir'])
+                    line = fp.readline()
+            
+            try:
+                xml = ET.parse(BytesIO(bytes(string, 'utf-8')))
+            except Exception as e:
+                print("Failed to load interface definition file {0}".format(f))
+                print(e)
+                sys.exit(1)
+            
+            try:
+                relaxng_xml = ET.parse(entry['schema_file'])
+                validator = ET.RelaxNG(relaxng_xml)
+
+                if not validator.validate(xml):
+                    print(validator.error_log)
+                    print("Interface definition file {0} does not match the schema!".format(f))
+                    sys.exit(1)
+            except Exception as e:
+                print("Failed to load the XML schema {0}".format(entry['schema_file']))
+                print(e)
+                sys.exit(1)
+
+            root = xml.getroot()
+            nodes = root.iterfind("*")
+            for n in nodes:
+                node_data[entry['kind']][f] = process_node(n, f)
+
+    # build config tree and sort
+
+    config_tree_new = {
+        'cfgcmd': {},
+        'opcmd': {},
+    }
+
+    for kind in node_data:
+        for entry in node_data[kind]:
+            node_0 = node_data[kind][entry]['name']
+            
+            if node_0 not in config_tree_new[kind].keys():
+                config_tree_new[kind][node_0] = {
+                    'name': node_0,
+                    'type': node_data[kind][entry]['type'],
+                    'props': node_data[kind][entry]['props'],
+                    'children': [],
+                    'command': node_data[kind][entry]['command'],
+                    'filename': node_data[kind][entry]['filename'],
+                }
+            config_tree_new[kind][node_0]['children'].extend(node_data[kind][entry]['children'])
+    
+    result = {
+        'cfgcmd': [],
+        'opcmd': [],
+    }
+    for kind in  config_tree_new:
+        for e in config_tree_new[kind]:
+            result[kind].extend(create_commands(config_tree_new[kind][e]))
+    
+    for cmd in result['cfgcmd']:
+        cmd['cmd'] = " ".join(cmd['name'])
+    for cmd in result['opcmd']:
+        cmd['cmd'] = " ".join(cmd['name'])
+    return result
+
+
+
+if __name__ == "__main__":
+    res = get_working_commands()
+    print(json.dumps(res))
+    #print(res['cfgcmd'][0])
\ No newline at end of file
diff --git a/docs/_ext/vyos.py b/docs/_ext/vyos.py
index 4001f0fe..cc408784 100644
--- a/docs/_ext/vyos.py
+++ b/docs/_ext/vyos.py
@@ -1,25 +1,41 @@
 import re
-import io
+import json
 import os
 from docutils import io, nodes, utils, statemachine
-from docutils.utils.error_reporting import SafeString, ErrorString
 from docutils.parsers.rst.roles import set_classes
 from docutils.parsers.rst import Directive, directives
+
 from sphinx.util.docutils import SphinxDirective
 
+from testcoverage import get_working_commands
+
 
 def setup(app):
 
     app.add_config_value(
         'vyos_phabricator_url',
-        'https://phabricator.vyos.net/', ''
+        'https://phabricator.vyos.net/',
+        'html'
     )
+
+    app.add_config_value(
+        'vyos_working_commands',
+        get_working_commands(),
+        'html'
+    )
+    app.add_config_value(
+        'vyos_coverage',
+        {
+            'cfgcmd': [0,len(app.config.vyos_working_commands['cfgcmd'])],
+            'opcmd': [0,len(app.config.vyos_working_commands['opcmd'])]
+        },
+        'html'
+    )
+
     app.add_role('vytask', vytask_role)
     app.add_role('cfgcmd', cmd_role)
     app.add_role('opcmd', cmd_role)
 
-    print(app.config.vyos_phabricator_url)
-
     app.add_node(
         inlinecmd,
         html=(inlinecmd.visit_span, inlinecmd.depart_span),
@@ -46,9 +62,11 @@ def setup(app):
         text=(CmdHeader.visit_div, CmdHeader.depart_div)
     )
     app.add_node(CfgcmdList)
+    app.add_node(CfgcmdListCoverage)
     app.add_directive('cfgcmdlist', CfgcmdlistDirective)
 
     app.add_node(OpcmdList)
+    app.add_node(OpcmdListCoverage)
     app.add_directive('opcmdlist', OpcmdlistDirective)
 
     app.add_directive('cfgcmd', CfgCmdDirective)
@@ -56,15 +74,17 @@ def setup(app):
     app.add_directive('cmdinclude', CfgInclude)
     app.connect('doctree-resolved', process_cmd_nodes)
 
-
 class CfgcmdList(nodes.General, nodes.Element):
     pass
 
-
 class OpcmdList(nodes.General, nodes.Element):
     pass
 
-import json
+class CfgcmdListCoverage(nodes.General, nodes.Element):
+    pass
+
+class OpcmdListCoverage(nodes.General, nodes.Element):
+    pass
 
 class CmdHeader(nodes.General, nodes.Element):
 
@@ -200,8 +220,8 @@ class CfgInclude(Directive):
                               '(wrong locale?).' %
                               (self.name, SafeString(path)))
         except IOError:
-            raise self.severe(u'Problems with "%s" directive path.' %
-                      (self.name))
+            raise self.severe(u'Problems with "%s" directive path:\n%s.' %
+                      (self.name, ErrorString(error)))
         startline = self.options.get('start-line', None)
         endline = self.options.get('end-line', None)
         try:
@@ -275,9 +295,18 @@ class CfgInclude(Directive):
                                   self.state,
                                   self.state_machine)
             return codeblock.run()
-
+        
         new_include_lines = []
-
+        var_value0 = self.options.get('var0', '')
+        var_value1 = self.options.get('var1', '')
+        var_value2 = self.options.get('var2', '')
+        var_value3 = self.options.get('var3', '')
+        var_value4 = self.options.get('var4', '')
+        var_value5 = self.options.get('var5', '')
+        var_value6 = self.options.get('var6', '')
+        var_value7 = self.options.get('var7', '')
+        var_value8 = self.options.get('var8', '')
+        var_value9 = self.options.get('var9', '')
         for line in include_lines:
             for i in range(10):
                 value = self.options.get(f'var{i}','')
@@ -285,22 +314,41 @@ class CfgInclude(Directive):
                     line = re.sub('\s?{{\s?var' + str(i) + '\s?}}',value,line)
                 else:
                     line = re.sub('{{\s?var' + str(i) + '\s?}}',value,line)
-
             new_include_lines.append(line)
         self.state_machine.insert_input(new_include_lines, path)
         return []
 
 
 class CfgcmdlistDirective(Directive):
+    has_content = False
+    required_arguments = 0
+    option_spec = {
+        'show-coverage': directives.flag
+    }
 
     def run(self):
-        return [CfgcmdList('')]
+        cfglist = CfgcmdList()
+        cfglist['coverage'] = False
+        if 'show-coverage' in self.options:
+            cfglist['coverage'] = True
+        return [cfglist]
 
 
 class OpcmdlistDirective(Directive):
+    has_content = False
+    required_arguments = 0
+    option_spec = {
+        'show-coverage': directives.flag
+    }
 
     def run(self):
-        return [OpcmdList('')]
+        oplist = OpcmdList()
+        oplist['coverage'] = False
+        if 'show-coverage' in self.options:
+            oplist['coverage'] = True
+            
+        return [oplist]
+
 
 
 class CmdDirective(SphinxDirective):
@@ -308,7 +356,8 @@ class CmdDirective(SphinxDirective):
     has_content = True
     custom_class = ''
 
-    def run(self):
+    def run(self):        
+
         title_list = []
         content_list = []
         title_text = ''
@@ -386,7 +435,134 @@ class CfgCmdDirective(CmdDirective):
     custom_class = 'cfg'
 
 
-def process_cmd_node(app, cmd, fromdocname):
+def strip_cmd(cmd):
+    #cmd = re.sub('set','',cmd)
+    cmd = re.sub('\s\|\s','',cmd)
+    cmd = re.sub('<\S*>','',cmd)
+    cmd = re.sub('\[\S\]','',cmd)
+    cmd = re.sub('\s+','',cmd)
+    return cmd
+
+def build_row(app, fromdocname, rowdata):
+    row = nodes.row()
+    for cell in rowdata:
+        entry = nodes.entry()
+        row += entry
+        if isinstance(cell, list):
+            for item in cell:
+                if isinstance(item, dict):
+                    entry += process_cmd_node(app, item, fromdocname, '')
+                else:
+                    entry += nodes.paragraph(text=item)
+        elif isinstance(cell, bool):
+            if cell:
+                entry += nodes.paragraph(text="")
+                entry['classes'] = ['coverage-ok']
+            else:
+                entry += nodes.paragraph(text="")
+                entry['classes'] = ['coverage-fail']
+        else:
+            entry += nodes.paragraph(text=cell)
+    return row
+
+
+
+def process_coverage(app, fromdocname, doccmd, xmlcmd, cli_type):
+    coverage_list = {}
+    int_docs = 0
+    int_xml = 0
+    for cmd in doccmd:
+        coverage_item = {
+            'doccmd': None,
+            'xmlcmd': None,
+            'doccmd_item': None,
+            'xmlcmd_item': None,
+            'indocs': False,
+            'inxml': False,
+            'xmlfilename': None
+        }
+        coverage_item['doccmd'] = cmd['cmd']
+        coverage_item['doccmd_item'] = cmd
+        coverage_item['indocs'] = True
+        int_docs += 1
+        coverage_list[strip_cmd(cmd['cmd'])] = dict(coverage_item)
+    
+    for cmd in xmlcmd:
+        
+        strip = strip_cmd(cmd['cmd'])
+        if strip not in coverage_list.keys():
+            coverage_item = {
+                'doccmd': None,
+                'xmlcmd': None,
+                'doccmd_item': None,
+                'xmlcmd_item': None,
+                'indocs': False,
+                'inxml': False,
+                'xmlfilename': None
+            }
+            coverage_item['xmlcmd'] = cmd['cmd']
+            coverage_item['xmlcmd_item'] = cmd
+            coverage_item['inxml'] = True
+            coverage_item['xmlfilename'] = cmd['filename']
+            int_xml += 1
+            coverage_list[strip] = dict(coverage_item)
+        else:
+            #print("===BEGIN===")
+            #print(cmd)
+            #print(coverage_list[strip])
+            #print(strip)
+            #print("===END====")
+            coverage_list[strip]['xmlcmd'] = cmd['cmd']
+            coverage_list[strip]['xmlcmd_item'] = cmd
+            coverage_list[strip]['inxml'] = True
+            coverage_list[strip]['xmlfilename'] = cmd['filename']
+            int_xml += 1
+
+
+    
+
+    table = nodes.table()
+    tgroup = nodes.tgroup(cols=3)
+    table += tgroup
+
+    header = (f'{int_docs}/{len(coverage_list)} in Docs', f'{int_xml}/{len(coverage_list)} in XML', 'Command')
+    colwidths = (1, 1, 8)
+    table = nodes.table()
+    tgroup = nodes.tgroup(cols=len(header))
+    table += tgroup
+    for colwidth in colwidths:
+        tgroup += nodes.colspec(colwidth=colwidth)
+    thead = nodes.thead()
+    tgroup += thead
+    thead += build_row(app, fromdocname, header)
+    tbody = nodes.tbody()
+    tgroup += tbody
+    for entry in sorted(coverage_list):
+        body_text_list = []
+        if coverage_list[entry]['indocs']:
+            body_text_list.append(coverage_list[entry]['doccmd_item'])
+        else:
+            body_text_list.append('Not documented yet')
+
+        if coverage_list[entry]['inxml']:
+            body_text_list.append("------------------")
+            body_text_list.append(str(coverage_list[entry]['xmlfilename']) + ":")
+            body_text_list.append(coverage_list[entry]['xmlcmd'])
+        else:
+            body_text_list.append('Nothing found in XML Definitions')
+
+            
+        tbody += build_row(app, fromdocname, 
+            (
+                coverage_list[entry]['indocs'],
+                coverage_list[entry]['inxml'],
+                body_text_list
+            )
+        )
+
+    return table
+
+def process_cmd_node(app, cmd, fromdocname, cli_type):
     para = nodes.paragraph()
     newnode = nodes.reference('', '')
     innernode = cmd['cmdnode']
@@ -401,21 +577,45 @@ def process_cmd_node(app, cmd, fromdocname):
 
 
 def process_cmd_nodes(app, doctree, fromdocname):
-    env = app.builder.env
+    try:
+        env = app.builder.env
+        
+        for node in doctree.traverse(CfgcmdList):
+            content = []
+            if node.attributes['coverage']:
+                node.replace_self(
+                    process_coverage(
+                        app,
+                        fromdocname,
+                        env.vyos_cfgcmd,
+                        app.config.vyos_working_commands['cfgcmd'],
+                        'cfgcmd'
+                        )
+                    )
+            else:
+                for cmd in sorted(env.vyos_cfgcmd, key=lambda i: i['cmd']):
+                    content.append(process_cmd_node(app, cmd, fromdocname, 'cfgcmd'))                
+                node.replace_self(content)
+            
+        for node in doctree.traverse(OpcmdList):
+            content = []
+            if node.attributes['coverage']:
+                node.replace_self(
+                    process_coverage(
+                        app,
+                        fromdocname,
+                        env.vyos_opcmd,
+                        app.config.vyos_working_commands['opcmd'],
+                        'opcmd'
+                        )
+                    )
+            else:
+                for cmd in sorted(env.vyos_opcmd, key=lambda i: i['cmd']):
+                    content.append(process_cmd_node(app, cmd, fromdocname, 'opcmd'))
+                node.replace_self(content)
 
-    for node in doctree.traverse(CfgcmdList):
-        content = []
-
-        for cmd in sorted(env.vyos_cfgcmd, key=lambda i: i['cmd']):
-            content.append(process_cmd_node(app, cmd, fromdocname))
-        node.replace_self(content)
-
-    for node in doctree.traverse(OpcmdList):
-        content = []
-
-        for cmd in sorted(env.vyos_opcmd, key=lambda i: i['cmd']):
-            content.append(process_cmd_node(app, cmd, fromdocname))
-        node.replace_self(content)
+    except Exception as inst:
+        print(inst)
 
 
 def vytask_role(name, rawtext, text, lineno, inliner, options={}, content=[]):
@@ -430,4 +630,4 @@ def vytask_role(name, rawtext, text, lineno, inliner, options={}, content=[]):
 
 def cmd_role(name, rawtext, text, lineno, inliner, options={}, content=[]):
     node = nodes.literal(text, text)
-    return [node], []
+    return [node], []
\ No newline at end of file
diff --git a/docs/coverage.rst b/docs/coverage.rst
new file mode 100644
index 00000000..f003f9ff
--- /dev/null
+++ b/docs/coverage.rst
@@ -0,0 +1,43 @@
+:orphan:
+
+########
+Coverage
+########
+
+Overview over all commands, which are documented in the ``.. cfgcmd::`` or ``.. opcmd::`` Directives.
+
+| The build process take all xml definition files from `vyos-1x <https://github.com/vyos/vyos-1x>`_  and extract each leaf command or executable command.
+| After this the commands are compare and shown in the follwoing two tables.
+| The script compare only the fixed part of a command. All varables or values will be erase and then compare:
+
+for example there are these two commands:
+
+  * documentation: ``interfaces ethernet <interface> address <address | dhcp | dhcpv6>```
+  * xml: ``interface ethernet <ethernet> address <address>``
+
+Now the script earse all in between ``<`` and ``>`` and simply compare the strings.
+
+**There are 2 kind of problems:**   
+
+| ``Not documented yet``
+| A XML command are not found in ``.. cfgcmd::`` or ``.. opcmd::`` Commands
+| The command should be documented
+
+| ``Nothing found in XML Definitions``: 
+| ``.. cfgcmd::`` or ``.. opcmd::`` Command are not found in a XML command
+| Maybe the command where changed in the XML Definition, or the feature is not anymore in VyOS
+| Some commands are not yet translated to XML
+
+
+Configuration Commands
+======================
+
+.. cfgcmdlist::
+    :show-coverage:
+
+
+Operational Commands
+====================
+
+.. opcmdlist::
+    :show-coverage:
\ No newline at end of file

From bd631530b21be71277f8e0d5545f087d5c4d49cb Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 26 Nov 2020 22:20:53 +0100
Subject: [PATCH 107/295] remove submodule

---
 .gitmodules | 4 ----
 1 file changed, 4 deletions(-)
 delete mode 100644 .gitmodules

diff --git a/.gitmodules b/.gitmodules
deleted file mode 100644
index d3d92138..00000000
--- a/.gitmodules
+++ /dev/null
@@ -1,4 +0,0 @@
-[submodule "docs/_include/vyos-1x"]
-	path = docs/_include/vyos-1x
-	url = https://github.com/vyos/vyos-1x
-	branch = current

From d4863cc15079682634ecca21dd87442ae3cb5666 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 26 Nov 2020 22:32:45 +0100
Subject: [PATCH 108/295] add vyos-1x submodule

---
 .gitmodules           | 4 ++++
 docs/_include/vyos-1x | 1 +
 2 files changed, 5 insertions(+)
 create mode 100644 .gitmodules
 create mode 160000 docs/_include/vyos-1x

diff --git a/.gitmodules b/.gitmodules
new file mode 100644
index 00000000..d3d92138
--- /dev/null
+++ b/.gitmodules
@@ -0,0 +1,4 @@
+[submodule "docs/_include/vyos-1x"]
+	path = docs/_include/vyos-1x
+	url = https://github.com/vyos/vyos-1x
+	branch = current
diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
new file mode 160000
index 00000000..64d6e689
--- /dev/null
+++ b/docs/_include/vyos-1x
@@ -0,0 +1 @@
+Subproject commit 64d6e689a8274845a49e6931eda6cda04615de42

From bee2a84c89fc24a54b3687027ff0ed9dd951082f Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 26 Nov 2020 22:37:40 +0100
Subject: [PATCH 109/295] increase version

---
 docs/conf.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/conf.py b/docs/conf.py
index bb32aa33..4bb2da3c 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -26,10 +26,10 @@ copyright = u'2020, VyOS maintainers and contributors'
 author = u'VyOS maintainers and contributors'
 
 # The short X.Y version
-version = u'1.3'
+version = u'1.4'
 
 # The full version, including alpha/beta/rc tags
-release = u'1.3.x (equuleus)'
+release = u'1.4.x (sagitta)'
 
 # -- General configuration ---------------------------------------------------
 
@@ -70,7 +70,7 @@ language = None
 # List of patterns, relative to source directory, that match files and
 # directories to ignore when looking for source files.
 # This pattern also affects html_static_path and html_extra_path .
-exclude_patterns = [u'_build', 'Thumbs.db', '.DS_Store']
+exclude_patterns = [u'_build', 'Thumbs.db', '.DS_Store', '_include/vyos-1x']
 
 # The name of the Pygments (syntax highlighting) style to use.
 pygments_style = 'sphinx'

From 865e4632a2f1dd52f443c072fda5c629dc38ac72 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 27 Nov 2020 19:10:54 +0100
Subject: [PATCH 110/295] include: ipv6: combine autoconf and eui64 into a
 single file

---
 docs/_include/interface-common.txt                   |  6 +-----
 docs/_include/interface-ipv6-addr-eui64.txt          |  9 ---------
 ...-addr-autoconf.txt => interface-ipv6-address.txt} | 11 +++++++++++
 docs/_include/interface-vlan-8021ad.txt              | 12 +-----------
 docs/_include/interface-vlan-8021q.txt               |  9 +--------
 5 files changed, 14 insertions(+), 33 deletions(-)
 delete mode 100644 docs/_include/interface-ipv6-addr-eui64.txt
 rename docs/_include/{interface-ipv6-addr-autoconf.txt => interface-ipv6-address.txt} (68%)

diff --git a/docs/_include/interface-common.txt b/docs/_include/interface-common.txt
index de29356f..f9bc640a 100644
--- a/docs/_include/interface-common.txt
+++ b/docs/_include/interface-common.txt
@@ -22,11 +22,7 @@
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
-  :var0: {{ var0 }}
-  :var1: {{ var1 }}
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+.. cmdinclude:: ../_include/interface-ipv6-address.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
diff --git a/docs/_include/interface-ipv6-addr-eui64.txt b/docs/_include/interface-ipv6-addr-eui64.txt
deleted file mode 100644
index e6a58372..00000000
--- a/docs/_include/interface-ipv6-addr-eui64.txt
+++ /dev/null
@@ -1,9 +0,0 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  {{ var5 }} {{ var6 }} ipv6 address eui64 <prefix>
-
-  :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
-  :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address.
-
-  .. code-block:: none
-
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ipv6 address eui64 2001:db8:beef::/64
diff --git a/docs/_include/interface-ipv6-addr-autoconf.txt b/docs/_include/interface-ipv6-address.txt
similarity index 68%
rename from docs/_include/interface-ipv6-addr-autoconf.txt
rename to docs/_include/interface-ipv6-address.txt
index fea1125e..bde3f50d 100644
--- a/docs/_include/interface-ipv6-addr-autoconf.txt
+++ b/docs/_include/interface-ipv6-address.txt
@@ -17,3 +17,14 @@
   .. code-block:: none
 
     set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ipv6 address autoconf
+
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} ipv6 address eui64 <prefix>
+
+  :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
+  :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ipv6 address eui64 2001:db8:beef::/64
diff --git a/docs/_include/interface-vlan-8021ad.txt b/docs/_include/interface-vlan-8021ad.txt
index a1e971be..6ccfbe82 100644
--- a/docs/_include/interface-vlan-8021ad.txt
+++ b/docs/_include/interface-vlan-8021ad.txt
@@ -88,17 +88,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
-   :var2: vif-s
-   :var3: <vlan-id>
-   :var4: 1000
-   :var5: vif-c
-   :var6: <vlan-id>
-   :var7: 20
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+.. cmdinclude:: ../_include/interface-ipv6-address.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
diff --git a/docs/_include/interface-vlan-8021q.txt b/docs/_include/interface-vlan-8021q.txt
index 2c7e58f7..69e8227f 100644
--- a/docs/_include/interface-vlan-8021q.txt
+++ b/docs/_include/interface-vlan-8021q.txt
@@ -71,14 +71,7 @@ term used for this is ``vif``.
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
-   :var0: {{ var0 }}
-   :var1: {{ var1 }}
-   :var2: vif
-   :var3: <vlan-id>
-   :var4: 10
-
-.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+.. cmdinclude:: ../_include/interface-ipv6-address.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif

From b2a38e4cf36971408924e93b9fc89ef12ef89408 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 27 Nov 2020 19:14:49 +0100
Subject: [PATCH 111/295] interface: ipv6: document no-default-link-local
 option

---
 docs/_include/interface-ipv6-address.txt | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/docs/_include/interface-ipv6-address.txt b/docs/_include/interface-ipv6-address.txt
index bde3f50d..d57cecde 100644
--- a/docs/_include/interface-ipv6-address.txt
+++ b/docs/_include/interface-ipv6-address.txt
@@ -28,3 +28,8 @@
   .. code-block:: none
 
     set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ipv6 address eui64 2001:db8:beef::/64
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} ipv6 address no-default-link-local
+
+  Do not assign a link-local IPv6 address to this interface

From 0d1faa3231ea4f72935b330eba51dc898b1c4e60 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 27 Nov 2020 19:55:19 +0100
Subject: [PATCH 112/295] interface: add documentation about interface 'ip'
 configuration node

---
 docs/_include/interface-common.txt            |   7 +-
 docs/_include/interface-ip.txt                | 157 ++++++++++++++++++
 ...ce-ipv6-address.txt => interface-ipv6.txt} |  22 ++-
 docs/_include/interface-vlan-8021ad.txt       |  12 +-
 docs/_include/interface-vlan-8021q.txt        |   9 +-
 5 files changed, 202 insertions(+), 5 deletions(-)
 create mode 100644 docs/_include/interface-ip.txt
 rename docs/_include/{interface-ipv6-address.txt => interface-ipv6.txt} (69%)

diff --git a/docs/_include/interface-common.txt b/docs/_include/interface-common.txt
index f9bc640a..cbe32cfb 100644
--- a/docs/_include/interface-common.txt
+++ b/docs/_include/interface-common.txt
@@ -22,11 +22,14 @@
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-ipv6-address.txt
+.. cmdinclude:: ../_include/interface-ip.txt
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
+
+.. cmdinclude:: ../_include/interface-ipv6.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
 .. cmdinclude:: ../_include/interface-vrf.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
-
diff --git a/docs/_include/interface-ip.txt b/docs/_include/interface-ip.txt
new file mode 100644
index 00000000..89937806
--- /dev/null
+++ b/docs/_include/interface-ip.txt
@@ -0,0 +1,157 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} ip arp-cache-timeout
+
+  Once a neighbor has been found, the entry is considered to be valid for at
+  least for this specifc time. An entry's validity will be extended if it
+  receives positive feedback from higher level protocols.
+
+  This defaults to 30 seconds.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip arp-cache-timeout 180
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} ip disable-arp-filter
+
+  If set the kernel can respond to arp requests with addresses from other
+  interfaces. This may seem wrong but it usually makes sense, because it
+  increases the chance of successful communication. IP addresses are owned by
+  the complete host on Linux, not by particular interfaces. Only for more
+  complex setups like load-balancing, does this behaviour cause problems.
+
+  If not set (default) allows you to have multiple network interfaces on the
+  same subnet, and have the ARPs for each interface be answered based on whether
+  or not the kernel would route a packet from the ARP'd IP out that interface
+  (therefore you must use source based routing for this to work).
+
+  In other words it allows control of which cards (usually 1) will respond to an
+  arp request.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip disable-arp-filter
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} ip disable-forwarding
+
+  Configure interface-specific Host/Router behaviour. If set, the interface will
+  switch to host mode and IPv6 forwarding will be disabled on this interface.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip disable-forwarding
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} ip enable-arp-accept
+
+  Define behavior for gratuitous ARP frames who's IP is not already present in
+  the ARP table. If configured create new entries in the ARP table.
+
+  Both replies and requests type gratuitous arp will trigger the ARP table to be
+  updated, if this setting is on.
+
+  If the ARP table already contains the IP address of the gratuitous arp frame,
+  the arp table will be updated regardless if this setting is on or off.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip enable-arp-accept
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} ip enable-arp-announce
+
+  Define different restriction levels for announcing the local source IP address
+  from IP packets in ARP requests sent on interface.
+
+  Use any local address, configured on any interface if this is not set.
+
+  If configured, try to avoid local addresses that are not in the target's
+  subnet for this interface. This mode is useful when target hosts reachable via
+  this interface require the source IP address in ARP requests to be part of
+  their logical network configured on the receiving interface. When we generate
+  the request we will check all our subnets that include the target IP and will
+  preserve the source address if it is from such subnet. If there is no such
+  subnet we select source address according to the rules for level 2.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip enable-arp-announce
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} ip enable-arp-ignore
+
+  Define different modes for sending replies in response to received ARP
+  requests that resolve local target IP addresses:
+
+  If configured, reply only if the target IP address is local address configured
+  on the incoming interface.
+
+  If this option is unset (default), reply for any local target IP address,
+  configured on any interface.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip enable-arp-ignore
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} ip enable-proxy-arp
+
+  Use this command to enable proxy Address Resolution Protocol (ARP) on this
+  interface. Proxy ARP allows an Ethernet interface to respond with its own
+  :abbr:`MAC (Media Access Control)` address to ARP requests for destination IP
+  addresses on subnets attached to other interfaces on the system. Subsequent
+  packets sent to those destination IP addresses are forwarded appropriately by
+  the system.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip enable-proxy-arp
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} ip proxy-arp-pvlan
+
+  Private VLAN proxy arp. Basically allow proxy arp replies back to the same
+  interface (from which the ARP request/solicitation was received).
+
+  This is done to support (ethernet) switch features, like :rfc:`3069`, where
+  the individual ports are NOT allowed to communicate with each other, but they
+  are allowed to talk to the upstream router. As described in :rfc:`3069`, it is
+  possible to allow these hosts to communicate through the upstream router by
+  proxy_arp'ing.
+
+  .. note:: Don't need to be used together with proxy_arp.
+
+  This technology is known by different names:
+
+  - In :rfc:`3069` it is called VLAN Aggregation
+
+  - Cisco and Allied Telesyn call it Private VLAN
+
+  - Hewlett-Packard call it Source-Port filtering or port-isolation
+
+  - Ericsson call it MAC-Forced Forwarding (RFC Draft)
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} ip source-validation <strict | loose | disable>
+
+  Enable policy for source validation by reversed path, as specified in
+  :rfc:`3704`. Current recommended practice in :rfc:`3704` is to enable strict
+  mode to prevent IP spoofing from DDos attacks. If using asymmetric routing
+  or other complicated routing, then loose mode is recommended.
+
+  - strict: Each incoming packet is tested against the FIB and if the interface
+    is not the best reverse path the packet check will fail. By default failed
+    packets are discarded.
+
+  - loose: Each incoming packet's source address is also tested against the FIB
+    and if the source address is not reachable via any interface the packet
+    check will fail.
+
+  - disable: No source validation
diff --git a/docs/_include/interface-ipv6-address.txt b/docs/_include/interface-ipv6.txt
similarity index 69%
rename from docs/_include/interface-ipv6-address.txt
rename to docs/_include/interface-ipv6.txt
index d57cecde..e03817cf 100644
--- a/docs/_include/interface-ipv6-address.txt
+++ b/docs/_include/interface-ipv6.txt
@@ -25,6 +25,8 @@
   :abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in
   :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address.
 
+  Example:
+
   .. code-block:: none
 
     set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ipv6 address eui64 2001:db8:beef::/64
@@ -32,4 +34,22 @@
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
   {{ var5 }} {{ var6 }} ipv6 address no-default-link-local
 
-  Do not assign a link-local IPv6 address to this interface
+  Do not assign a link-local IPv6 address to this interface.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ipv6 address no-default-link-local
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} ipv6 disable-forwarding
+
+  Configure interface-specific Host/Router behaviour. If set, the interface will
+  switch to host mode and IPv6 forwarding will be disabled on this interface.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ipv6 disable-forwarding
diff --git a/docs/_include/interface-vlan-8021ad.txt b/docs/_include/interface-vlan-8021ad.txt
index 6ccfbe82..a6ee87d9 100644
--- a/docs/_include/interface-vlan-8021ad.txt
+++ b/docs/_include/interface-vlan-8021ad.txt
@@ -88,7 +88,17 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-ipv6-address.txt
+.. cmdinclude:: ../_include/interface-ip.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
+.. cmdinclude:: ../_include/interface-ipv6.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
diff --git a/docs/_include/interface-vlan-8021q.txt b/docs/_include/interface-vlan-8021q.txt
index 69e8227f..c906feb9 100644
--- a/docs/_include/interface-vlan-8021q.txt
+++ b/docs/_include/interface-vlan-8021q.txt
@@ -71,7 +71,14 @@ term used for this is ``vif``.
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-ipv6-address.txt
+.. cmdinclude:: ../_include/interface-ip.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
+
+.. cmdinclude:: ../_include/interface-ipv6.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif

From 6fdbdf1f4a92f1085d6c1734594d3270bfd6fd12 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 27 Nov 2020 20:05:22 +0100
Subject: [PATCH 113/295] include: interface: fix ipv6 dhcp pd

---
 docs/_include/interface-common-with-dhcp.txt |  4 ++++
 docs/_include/interface-dhcpv6-options.txt   | 11 -----------
 docs/_include/interface-vlan-8021ad.txt      | 10 ++++++++++
 docs/_include/interface-vlan-8021q.txt       |  7 +++++++
 4 files changed, 21 insertions(+), 11 deletions(-)

diff --git a/docs/_include/interface-common-with-dhcp.txt b/docs/_include/interface-common-with-dhcp.txt
index 3e1394a3..38a60346 100644
--- a/docs/_include/interface-common-with-dhcp.txt
+++ b/docs/_include/interface-common-with-dhcp.txt
@@ -15,3 +15,7 @@
 .. cmdinclude:: ../_include/interface-dhcpv6-options.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
+
+.. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
+  :var0: {{ var0 }}
+  :var1: {{ var1 }}
diff --git a/docs/_include/interface-dhcpv6-options.txt b/docs/_include/interface-dhcpv6-options.txt
index a54a7dce..e7eaffb1 100644
--- a/docs/_include/interface-dhcpv6-options.txt
+++ b/docs/_include/interface-dhcpv6-options.txt
@@ -29,14 +29,3 @@
   .. code-block:: none
 
     set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-options temporary
-
-.. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
-  :var0: {{ var0 }}
-  :var1: {{ var1 }}
-  :var2: {{ var2 }}
-  :var3: {{ var3 }}
-  :var4: {{ var4 }}
-  :var5: {{ var5 }}
-  :var6: {{ var6 }}
-  :var7: {{ var7 }}
-
diff --git a/docs/_include/interface-vlan-8021ad.txt b/docs/_include/interface-vlan-8021ad.txt
index a6ee87d9..e293fb48 100644
--- a/docs/_include/interface-vlan-8021ad.txt
+++ b/docs/_include/interface-vlan-8021ad.txt
@@ -140,4 +140,14 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
+.. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif-s
+   :var3: <vlan-id>
+   :var4: 1000
+   :var5: vif-c
+   :var6: <vlan-id>
+   :var7: 20
+
 .. include:: ../common-references.rst
diff --git a/docs/_include/interface-vlan-8021q.txt b/docs/_include/interface-vlan-8021q.txt
index c906feb9..39f10073 100644
--- a/docs/_include/interface-vlan-8021q.txt
+++ b/docs/_include/interface-vlan-8021q.txt
@@ -108,4 +108,11 @@ term used for this is ``vif``.
    :var3: <vlan-id>
    :var4: 10
 
+.. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
+   :var0: {{ var0 }}
+   :var1: {{ var1 }}
+   :var2: vif
+   :var3: <vlan-id>
+   :var4: 10
+
 .. include:: ../common-references.rst
\ No newline at end of file

From c4b2276ec861a23edba12541eb39b27891f5d057 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 27 Nov 2020 20:10:44 +0100
Subject: [PATCH 114/295] coverage: add 'set' detection

---
 docs/_ext/vyos.py | 12 +-----------
 1 file changed, 1 insertion(+), 11 deletions(-)

diff --git a/docs/_ext/vyos.py b/docs/_ext/vyos.py
index cc408784..4b4b1a89 100644
--- a/docs/_ext/vyos.py
+++ b/docs/_ext/vyos.py
@@ -297,16 +297,6 @@ class CfgInclude(Directive):
             return codeblock.run()
         
         new_include_lines = []
-        var_value0 = self.options.get('var0', '')
-        var_value1 = self.options.get('var1', '')
-        var_value2 = self.options.get('var2', '')
-        var_value3 = self.options.get('var3', '')
-        var_value4 = self.options.get('var4', '')
-        var_value5 = self.options.get('var5', '')
-        var_value6 = self.options.get('var6', '')
-        var_value7 = self.options.get('var7', '')
-        var_value8 = self.options.get('var8', '')
-        var_value9 = self.options.get('var9', '')
         for line in include_lines:
             for i in range(10):
                 value = self.options.get(f'var{i}','')
@@ -436,7 +426,7 @@ class CfgCmdDirective(CmdDirective):
 
 
 def strip_cmd(cmd):
-    #cmd = re.sub('set','',cmd)
+    cmd = re.sub('set','',cmd)
     cmd = re.sub('\s\|\s','',cmd)
     cmd = re.sub('<\S*>','',cmd)
     cmd = re.sub('\[\S\]','',cmd)

From aacb7a54ec88ee3f8eea1e669f6f31c795cc96db Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 27 Nov 2020 20:12:12 +0100
Subject: [PATCH 115/295] CSS: refresh desgin

---
 docs/_static/css/custom.css       |  74 +++++++++++++++++++++++++++---
 docs/_static/images/vyos-logo.png | Bin 118757 -> 68746 bytes
 2 files changed, 67 insertions(+), 7 deletions(-)

diff --git a/docs/_static/css/custom.css b/docs/_static/css/custom.css
index 7faf7b7f..6d36283d 100644
--- a/docs/_static/css/custom.css
+++ b/docs/_static/css/custom.css
@@ -10,8 +10,45 @@ span.cfgcmd {
     font-family: SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;
 }
 
-.opcmd-heading,
+span.cfgcmd:before {
+  content: "#";
+  margin-right: 0px;
+}
+
+td p a.cmdlink span.cfgcmd:before,
+td p a.cmdlink span.opcmd:before  {
+  content: "";
+}
+
+td p a.cmdlink,
+td p a.cmdlink {
+  margin-left: 0px;
+}
+
+tr td p {
+  margin-bottom:0px
+ }
+
+span.opcmd:before {
+  content: "$";
+  margin-right: 0px;
+}
+
 .cfgcmd-heading {
+    display: inline-block;
+    margin: 6px 0;
+    font-size: 90%;
+    line-height: normal;
+    background: #f0d481;
+    color: #2980B9;
+    border-top: solid 3px #6ab0de;
+    border-top-width: 3px;
+    border-top-style: solid;
+    border-top-color: #FF9302;
+    padding: 6px;
+}
+
+.opcmd-heading {
     display: inline-block;
     margin: 6px 0;
     font-size: 90%;
@@ -34,7 +71,7 @@ span.cfgcmd {
 
 
 .cfgcmd-heading .cmdlink:after,
-.opcmd-heading .cmdlink:after {
+.opcmd-heading .cmdlink:after{
     content: "";
     font-family: FontAwesome
 }
@@ -97,21 +134,44 @@ a.cmdlink span:hover{
 }
 
 .wy-side-nav-search {
-  background-color : #FF0000 !important;
+  background-color : #ffffff !important;
 }
 
 .wy-side-nav-search img {
-  background-color : #FF0000 !important;
+  background-color : #ffffff !important;
 }
 
 .wy-side-nav-search > div.version {
-  color : rgba(255, 255, 255, 0.7) !important;
+  color : #000000 !important;
+}
+
+.wy-side-nav-search>a,
+.wy-side-nav-search .wy-dropdown>a {
+ color:#000000;
+ font-size:100%;
+ font-weight:bold;
+ display:inline-block;
+ padding:4px 6px;
+ margin-bottom:.809em
 }
 
 .wy-nav-top {
-  background-color : #FF0000 !important;
+  background-color : #ffffff !important;
 }
 
 .wy-nav-top img {
-  background-color : #FF0000 !important;
+  background-color : #000000 !important;
 }
+
+.rst-content table.docutils:not(.field-list) tr:nth-child(2n-1) td.coverage-ok,
+.rst-content table.docutils td.coverage-ok {
+  background-color: green;
+  color: black;
+}
+
+
+.rst-content table.docutils:not(.field-list) tr:nth-child(2n-1) td.coverage-fail,
+.rst-content table.docutils td.coverage-fail {
+  background-color: red;
+  color: black;
+}
\ No newline at end of file
diff --git a/docs/_static/images/vyos-logo.png b/docs/_static/images/vyos-logo.png
index bc1abe15fc425cddd9d0db4022c230c31b4098a6..e3d6f68b18721cd35fba6ea113f6d2a61e0a1359 100644
GIT binary patch
literal 68746
zcmcF}Wk4L;mM-q@?(Qy)2X}W#kOmreC%C)2y9Esv+%336aEA~yNRUU)m2=L_ota;+
z>FV0G_L6Ve-qqDas3=JzBM=~ffq@~*%1Eezfq}>WKHy;9DE{3%6K^MQXEo_}V4o(5
zj^8d;fjYA0ii%(iZ(}$xSa1|Dh_?~u+hGEZ0S5VY27mhl11A83{$mUV<_1pq@9{@)
zx_|P#Nr4OeAq)S;7a9fvgZd}`n|&}ab)cP#6Ufz;Ov}^WnM}dn!u~fE?8Dpfru`ph
z8Dl#$W_wqcw`-_)$Uk&py^V+R!T-dO5AiR(;PLs8e~#byz}VhifIr@3{~Ca8wMj_4
zO~E_J=sJUep$z;!z*87e2;aO_2WjZI=qM@xOzmx1jLqy#fGi%i4!<>l33>qDhPFT#
zV=@n08#`x!hY-ad9Duj+Z!#+d*&i$})<P6IiYjE{_D(=DZWb;UHVR<`GBPqjCo^+^
znuOFp#ow-kC@fuE9007W?(Xg^?wl<4P8O`}{QUf^Y#gi{9L#SV%+8*6F2)|rcFvUl
zQ1UN55<q8DCy;{+$li|Zw_anDw<rlwQ2aLZ@7F(Y$~w51a=k&9^mt?Vr@=Q#(?85P
zyO^>5g@KiWjg60)jf0tkpY=cKa<H^_v3It#clfs^JLiAK=`CWc|DI-LXJPw~3d~IZ
zE$QIuWb+3GGgDTe4bb+j9Gu_e*#D!P3&{M>aQ)5Z@0ov?`y<N#a9;2)J^^Ha#%4Ak
zJD~7?uQ<WKI{zo*pHUS2w@UzZ7h@M7>tBuhWzN;X;U6v-+larhS=c*)fX;v6eS`H!
z{@)o}{GIx*2^)~GHqgWw<N}lcIluLViR<s&`lzTWi8+~Cg4}@b*>!=&PJ*nzv;D^W
zC&b?x{-FL{x8R@I0I2_8@c!baxD(I}<nr%WF>84$tN&HkKj;6n{})*eCu2KjTadH!
z8+0|GInW7cXZk;dOyVs}Z@S(-&4hoqDf1t1jeoW2Urqj%^*`Dbw|9M8OFaLF<ovJs
z|1*dGX8X@3{*l%H$%eYUtCQ)U753kv_RsnMLG>SftnKucd?#UXrN6o^Zv5A||0phN
z_f{{iroYR@`7LcgGPSpEGIj>ORmGpq{f+5Asu2gdcnZHWe)Gb{-p=^1vVY9{MaIk&
z-~w{70sfa7{9Tx0HZFgs{#o9?mpy=uv7Lnwg$J`4(A?P7#)abFW%lPL@V`~~-_;AU
z{s$z2Z!{;6g{8}X>b}3rzhV17;Qh6rezX43W`9@m2Z;Y>@HYx)R}(9s>3@mG|G5bK
zZH@ZhV)0+Q{Xbg#jl=YJli54{JuiRYPzO5xo%&}ug#Wek{%;WeF8@a){=2c?5X}DE
zt^RKC4;X(B=<l5TbFs7m{eLQ&|BOfQ_f`T>ep|WU_T1m?B+M?z`rl~(Y=nQr<uBXt
zACCQl`nJgnBM7qo`-VXnA^d=e8VpPnOjbfn!vp-R6O_m_ns8`QZ+5WOvWloF3La7e
z&gJD5N`ZwEM%hPs0ft55FP#r3d4SaciQ1!F9IZmfL26!F#vb$8e@Kf?qtmPQ<h!-G
z6x6GTraJ1KjC-6A<xXdv0xEBdq@t#x;sOuvkLZ`@ud1ubMSC+&gK>IS?)ldI7xb=3
za-3nI{RgcQ8}tvSJL6m_&#u&pgUU$hFhwZmo*}jbEx<9-3cIuf)^WnCg0KrM59Px4
zcXHdI(#j96^xr`zrE}*YH+8T5H<R5D?(~Ka-XWx=#wUb(2?!_9=Z1)@BU9;tN%O?Q
zipTr4vpKK7{FIkqyV0TJ)csr%0hE@Br{y`ldB$wA?j1$VKcze5DopbVwRYZa(j3On
z#yPmN)$W^q>W6BET{PXd3o;@(N9d9FXrs(~YEO6Uf6aPHsmfo<$cG>N98`@b`-Kpj
zTGA@#9kd%<R-s=@?4IY^ZpU#;^i~W$8YTw(@HuY)_QFvt;%tXO{)>Ct`S8^jC~UJB
zuROwNU~bxXfs`&ysX%*VEZt{1JG*9{o-6`E=)8)DLq&&;eeSImbV!VpHUGI&><;Qc
zhg^lt+sF6xFY=&P?X_^OSkdaQT%2|#x12S`Higf2g%dEs*;U~DOOdu@9;6-oC}&>J
zKL9UTRS(!H(K|L7vtIkB7Ewsj^G9v?@!DNZK}A*V_62oJ;;WyQUO(-2D}1wMU=?H?
z!fy)O*=CYj(-Og6pDGma8%aG0`b-#aTebXPeV*-XQ<2X!7GhZYYB=mS<Fyv*!xMu2
zC7mF8xOrh}>~h7)w=NqTgs+4H!6%<daf#!#s2jkz^_45&dz0&0bNn~&<S`;RaL{zF
z?KMA;P5+E_uW^2I!U4|0>`VBj2|?<+8i_kK2cBe4en<|;S;ayTaV^~Z*`HmyS2miN
zman!lHTwRG$lWo`wlQlAxf2vryINc;#&rkiYla2#vZ_4>MMs_X)<Vgb9PidG@nXcB
zP*`cd(Y%`Z+F;rp28^#Fk2FZwR0kfYax@<K1M%ypx(QGw)N8Bg9bxDcA%by`6#<ax
zYKf5;EFnLNc?pMd2A;8{y?kNJ7zt03SJx%8%i^0Vj$-g%XaWzb*J}E^BR;|LKH>#L
zBcre$fA7euZt-B5X}jh+X9GXwA0cD##KnXB<oF$;OTd3ui+&UO#I5QgucT}Id(BxM
z^$(PiiurLyg+mlgSz#gzO}rnBuA15FvV18pT|ro96fawXZPPX`(XbQ(I+zx!pNc@Z
zr>9K7HDZpK;i{~@Rn1*h5`-TN$ogbKb5OR3D%JUD_o?nr8W`E*km?GEN}LJbu{kjg
z`>uS+8TWgxVD>cC+PzIVS{y<sas_rnITUsT9y;)w4w_)ho%_57IwK$4rZopa+q5nU
zLK%ob>lOycu&KOcRlP;%V@;tS^l`GB^u?_svoT19iWfxXD%0pq5fH|u@}#o_;y6-w
z`pupdgza<8Gy7EgH|Ja~c9}Pw(Ry)ey<6$yDOcJyKW}>!PRtS>?WY$qM<(KjXOPR{
zKSF$@L8Wzk4>o~fq1z1(FS*`Rta^IKMMbNArOcBUYLXd*SYV?xi)V_A%btU_0Aec}
zJcMA+b-hW8sZ4nSj5`prTHmYfm$h0v(4N%R_i2-E(@8z-dfzipGdN0b=CQTGjrV>b
zv7&?tQy7W16AHPNb2{E{Ee_q@mM1t}kyP((zw8A~q$?hQ-}K46XFI<5hT&X{$N+b7
z5&oIVRb-#Z^^%%oL23y~>X-8;#Gne`JlINVe)CUCqOwc(XBabt!0`)50>|;5PkXl5
z@$gKgGXl(AY8NYEXd4uz*ew(b8*?K85s%giEwSMSZa0C|ENhqegmLgb$uVdC5bxH<
z33|wqMlh82Hm51|V}KYTb#>!8gYl02OYyFmR;t0NB{^wah<L*_$seirr_`?8N_Ch0
z@hB_qz89Z9)n}UHl@2QR@)0Z~n;qgH3kw+DN&4F0Vk<63ujwlySkgl$ExsTSOer#@
zGFnDm8hZX(GtoP&7zjZc8Oz{D9a>9u%Oq2X%6m7(bLB<onAtaEb(83-2Hjj(7Mfdq
z2^hxap_s)1XY4ah`fzn*nnX9B(ut$HDfLiA`7yMv4QWI#ogXss7u8yCKu+zet!?W9
zxP&c`cNM{sLGhWZv?`<>RZttnrs|2gH#h@%WRfwCI=x9{k-iV(shZ_v(nu|#ThN`|
z`)8ZFl&7=BdMc9oiK+f{^;WM;(P%545S7E>ZDap|>F^2dYX6>mwkoN`xq#Fr{u3cY
zDM9=P4e=M>3o6)BxUq&O1D;o^_PN}tFCC!!31X2F;e*hY9i%ypmkf_1{IwX)WgXv~
zQ5TvOHyE2^F0Bk*=aw+$v~CXDsQX{GeU@PQ!LF$g7RL8|S6x(gDJjD=CaEk%@E2Fx
zh}X6cg?DI+qXEpRZJJ4jH(OuX0NXqan;0Z#YdYRBccw2*^tu+Zh>>hf_zBCs%Nj3w
zeN)p-!Rgrn3$d3O^o-Vgx1J|;3<L(gsY{eDB)M}{IkeB7&UL}>XOxNsPfs>f8gHnn
zJSS0Bb{ye4+w&4W%e1<>i#PXFZi%BeNGZ$zs$z8g^t0uwleY9agfT&Y&E$NXq#yVM
z?pLSKjhGMYLm!>bNO$YxyEt!K<VU9bt+Ou4zW7oxj59Sf8eirF6yhiDNnKPfeMib(
z{!FF5B<dEEFXf}noLv>V6n<|`G5Hyn4>6(^uREwa>Cx}1?SrD2pJ^n;@wq35V#&<>
z`3zftqw0Ii?b_vCDQU99zHwKLJ-~-tL{4)?s^m4Bilyum>^)avKX^jYHPszZ#*4OF
zQ#)xuvXxI+N9`1x8TNvj-9(jt3y|#uYb~|F113i+yCkg{M4XSjWWrp>WV%oCz-TQv
zsc~!vt@3`~3*wg(v0Zv5PX^>?;BaGY4LJPJWc7z;8M;OCq~18!9wXQZZG=sl6)S|W
z0-UfbJy`cC!h=|4V^v&ZiPe*{jukJI{Z2O+GrPg-NW_8lCqCE$8^)cKK3*y8LE<T_
zs0+C<Q}Z5{Ijtap27oi{XT_ryzH<X48PlZj&_-35uhW*ik(*wK_SIRQk%pxtX_EOR
zXDgz$`7dh@mJysdSv&9wWz?~9{8_O@%(Mj_3?H9&{3TE6^fNlantQ#sU=XgNz+z>>
zP+~LgKte(ZOyNoHB`C|@ydtn1n{VssK0<kY-?b@^MJ)e#^-s9?F@n+R9wtnkpscPb
zmDcv+p2{9ZwQho3K;~h=M3)7-cc|R6?g}#;+QOJOwL=U*0K!6TaYUJ4QNb3?T;D-H
z!EnDO_;XKWc`G3v$;|>%f^qQ)eX(P?J*XAtC*H4S7-PPm0@D5(i0R#_Tik4ppOn6@
z;+x?0jMXqRQZ)Ce=#+6pf)hrl>GwISFASoz9ISUb2@Ct8%-P-qu8P&xU$w`YI>2?)
zn>5WPNM|d+HH}3hwm4-O;jz~$9VYiCk2&L4ooEot11<ru5kjABvI1zKEpVaP#PJ#B
z)xu19NL*DLQw2!edtw49sr~qo%J*k4l!uZIp0Z8R`1o162o+!0x>9AP5~`zf@xz^Z
zh(7+(Suj7&gIxPA15kw(uoKNL6Fwro#!Y|&C<?Bc6{F2&Q|5BE`g4W~Z;!uQ)|<p4
z8<bw65v{$RIj}&ktw+$a@KmfTt1G3?Iupd?xM^KuXkq^%O?O(jA4iS|_o@z_@Bu=5
zEHBgEKrLx1UoN~Ax4VZKi)uHqwNO-ODSuvL2+)Tt*{|0+eeQDUSwa5Z5XlJpyK2Ry
z#ZAPNQMm9fQ@M--%_=04k>Ww<UdmSC4$j1Tu&hwC1P5W|fK8tjy$brG%<Uf?;Pg;6
z17#dJC0hV~MyLiYgz*f*=SinA8x!I0t+Kr~V;-VPTMGlVQi;yNGviYnV9D+qXZ7(U
zlDGhKf<Ei0vOtS1ND$3>M^jp376LYy86rvgrAmJ@Ne6of1Uu13X?|%EL<Y#Ua8et9
zPpejXTL9v&v2kI62d~se{r-wA-TrAJd!G>6tMu-~Dbk^~;jT<Gi$H^ygK=k=aEP}R
zm?9Nff7+u7N8j88{$-LdUaJrr{@Yj09Mjb%j|@k31V-8%rpB6Z`VZPT#F6frV2B$^
z7y{DZz+A=g#o$*#w$hY(%Z_c89r3n)G>^2xn)H-yX3?IXh@6S9XaGj4Xqn=xnYF^E
zPaK=e{(N@%0vx8>L(p;#(6vvFPd4>mMHbH^Cl*|wvT|x*c!ec}%##V`z7hnGOzur&
zmIxWj*0<0K60Su`U(~|<M%VsPwyta<xj|${k%^GYo1AHPfV*qUhWo@uch@D!aW|bI
zT2o|U22;)sqf9gH8;t#;5#BxT?h4VI*3Xlj%FjBzrNQoPC^{c*T^2g7x6B@#f68Tm
z(eD9Fc9hIkrmoEm9Vn&)ivt<+^#r3YT@b7&hGZuWSA@RlRucLv_iWW0xO2}$L4QV$
zI|$J!T0ewV%@WpG2lG2bhLdQaFNmCm;<VyVf#fV=cp#XA?P*=2t={5IaLFZ65xV&~
zjrK(2mD#se@QK4MkQ_4~@-^avH_~9EE&<I&o(Ge4H-I1Pj#Kv}Jcj@#*?;fjp?t7(
zwi<mQQM>HR!Zuu9wl==JeDZTfw9?JTIskulgd}#?5{(tiG>zZq`~x_b)o1run}uTJ
z$j;32hl<ZGrk<Sk{_VRkR8Tb;VspW#Hj{3lnsbab%_PkNP#w@Tsx_aNQGE5zZiYCK
z`@D9`c9;4D3Yw)Bzbbn$SMG~GjK?LDL8KOva}=pC3h9+r(AiueG*Fld+Mi60At`xO
z=8&Q8GvXaMK`^gmXmjcOvMwm82s3|>zkoO&@LieGRq(g=u<7k4A6^YAYaCKZANN<#
zGo|z%3M7F4RJFwuf|xJo0||lLyU?K`+9%1V;)(3{4U)EJoArp|Lu3~DC>GqpQBMg$
zdv2LYr5VgcfcE;R+6Da~>o9sw(3*Xf`G<-ocprv)H5>gIbYA!(sE@jroKRZ@>~b{y
zV>|fQ1(Pwi^J2lVvF>g@d!?HrT0@5h&okge;Ybci?C45{<crv2N^0gNVqw(kRP|I1
z8dnD{N%z_tjTzB<{D*nbR)M@3c92s*p>_XfCmrs(29zTMm|~QkvHnucbu*s_$u3bC
zm}GwaNp&~_C8DVW_YDCc{u7-FI4~Xf+EHhr_`Wnw@H$!6$kNiOrY=8YLd+W(?F#lI
zbhTQ*zDENt$m&B4pgeeJBA?MyA}c{y%x{`dG^n)nLWcK;kQ9-jn>L6y$wB;~Fm>DX
z8V-u0V^hRFp-KUD$)stUgQA0t>LNmBSNnjOI3<6H!r9}(4TD{VOWT7Y->ap8qdJ^^
zNgeY^=F7a{e(HE8xYmltM7)nxBIgCiX_@&1eDkosf~lFUAa*=`gg5iPuIPyuWzB<C
zfF>lmRd6**H_%vH-s+=XDbbH)o_@O+)!yWsm9=!2KoRKnE00B_{MfJ<QA!iN?SxMU
zMr3N3xMGdP5lw?a4it?~(1t6dav<_$N%C`arXEy!wU+=AFo6Ldyr&-OE6)NuBbr@`
zuMgkwK{~$zXiIPzA1W#4q|FbKhhW+t>jPxS9i&{O+_JlSNYdv@(`7l2newhHrdg9f
zT30p$Q&7jzg?aQ#*%84?$h?)J9QqUv*DwPmf*1VW_7U!SS2&WY=Y6g?66o({aXcj3
zGlWd-yc#v7%(Q^ZEQD63*=FYD&eR5}B)g*q)LNLFhirpw7iqIVR>AAzWF*n;Ywl!!
z{5$$^1u4cgjf@N^A=K_s>)ZDjfwCS+d|w}s%(|cU1$dD(Dp?3~)brn)8l_!iG<KxW
z!b*$N?yk(>8>(#)f0Kq(v|VXTq$6&MfmIUZ=X~I9OBfcH)3I_nxR5ti+-TTF%YQJd
zhqu({!)jU@d~_VShmYaxuof2@w%zcb@HcbDsP8VaH<7I*+mLEgjBplei<T%++{of+
z2@zOBgnXwKT$>C`h@=PF-)fE7D(aGgTA8Cig!^&&TP}YtVO+!awJ`>sFB}*cl9f-X
z8l-HBxvy7Q>Xv_GQ?piuGJhs2LXX7hJ!LB%@W>B$PS5R(F%vAnr8bmwhg1##mm}%k
zc(>%sHrqII1poT!`*lLLtF6MmHKiP+P`vS}V0)5)M|8IniYAu$y@VmB38TTNJYM#9
z6aU2njjaobR%NV?<|_iQs(Xy66HM;>)=rpWgL-Z%awaZpBLIP1y2DT~j5$^xFq*D@
zoWS6Ch3xC4X&@{5$o-HI85?b<k#>!4=nHU3Pgs_AHtl++mTO>CMu_uNh1roqmGgN(
z!Y0KY9RP2A#b0JE{eeS$-*Yi>L}QS>XI`AlmX1+*yBpk;;60?*sUa{ry^wy@KRR$B
zjL{@Vo=$o#--hK0Y7BLXh}x6qum@e;+&;UC*;sUf&*c}5e%a4zhrFWksMFk`dXg5Q
z+=9&!tM~}n#8dOn0hqU3ed#r$qZ*Y``CZ^EsZNmHCHr*u3u;>W^FQ(9=@FRm4ke5Q
zz1p*pFj1Z*`k66FgoZ1H%XVlaE3>U(y1@vP@EwvlC)=o=*z@(?C-WZ2f9}9LSOUTT
zua+(uXDK%nCpYoj4Cm8fB=vw^3G-wY;3$B|kqn{0+2|b&I@=~?bC%tsCmeSIOU^Fy
zj>2e1;(#j*8Qk!Yr$@M;Nl0I}kI(NOQdosD-%)M4@$EJ0N2dmVc`C9SdLK=Qa#58-
zn3rP|9fOY_vcjWZg1Et>5r$59i<ZsHLKoDt0Qf+$d+KD^+k&z|w1DpN35qu53zMt9
ziRh47vZwCniI-qDN3loQLnpv_cb?KLHe#ccu1r6kx#VEQY_i9hLgg6vZuyFjk&=eZ
z`e>9Bd_fNK;#0-ge#$d=g>0{6hhFZz>VYP@Y3}0F*y4Op)jQC~%spjd<gaaMQJ_*U
zB;3bwKF#Ovp=4WW*U{u@zEPv^dtfmTQr&u0kMLqt57|18eCb}P4V$73U@~wRmGHHH
z_`o9v2kX3Ad2Rd>H9Ek`JteTj4+HTXQ6ig*A5Zv;h95C3#3j&pvW(kg+>u)s_v1_K
z`I!*cCQ4sq5u=&Aql_Ns-}KMSxoq#b0Th&-pIhCW!@;w>g-~t_ICqkI#jP2$wH`xO
zj$Yf)(-%_>%n!^U7+bmT%wjVw(9x&{go3}FW0?R)iZ<Y{i-?+rR)?cr!j4y!U(=FV
z{7B)|0k_TVuvd(zfnjb{WcVX``Ll=K$a;;ilK9;Gg{_(86m-SyaD38n+bt7l#JS4k
zPLW_N(lukb&Ew{65L6;_W@ZSltILo_2{@5!>+@GBZ8GA%U`Rb%)Vq$`zT7e6a<l4|
zTLfH#If7XZWb(w3uzH9xLA3NaA8QWF+HaU3cWy?qkY%vtk3vdu00<iz&Yuq8*Ex~N
z^u&T-4Yj(?ZQzcM?ObHV0)7^4mcqVnzsjU3i>N<UoTU%N5L+$+QI`3*3i@}KJQH`p
zWS4^*UHH$UQSu~QDSimX>2p8?z?&vshM`wrh||FY8+&a^k(dj{eyldT(I5+pT8$W@
zsIAB2fvqZHI(JO4Gs3;t5w`z0%bMh#a7A;i0P;^7Z8^c;n9*M@)(`co>Jc&H_dvTk
zb0;NNDvfAL-o(NME&8<F3G0yIl6q@@cgkU0N8)xEaEu#=xDkiApZW~H6s&)d?0ui0
zK5I&}BX`Van3^GNA!(pQO58YN=Wz2uQmSo?r&fItVz0x~dX|?Uo>Qxe=DH20ms8b<
zW+OV5`O~P!vgNzL0UrkAiK4|DrKqRW+%gI?a3>1;^+PD*PKGNMax`ZgUByog+e;iQ
zP@V8YP4}ffjlo4Aq*v~%T5P`)rKQ5bsX#yZ2Q8Z$hY)yEPkUH=)+Aeislroo3e%<j
z&hii=!H{%lIE*;z$(Z&Qp|M~RTD#s6XqyzRw0-f3VaW{?fN6)((j)Jlg-u^ZZi8?R
z<J^@;SI?6+Z5>nlb)H1WTC{o60}8n<HxQmH=5hp5ESSh}vD}i2gCZ4A9a9L*KZZQ|
zIoQ50<ifVlCZ#PA)Pb`ew7@Kz8fj&_B`=oC-Uw$9Iz)YOXM&&d1!<*mRJi=K;)rVh
z5T72<ZPv^8?UI01BF3In-Cxf`3^i^>Ye!gi7a~1vd&xYm!HV*mxlZzIO6iJ^6m&nF
zZ6)Q5`6EN=f~<h;V@<(GNT8T~LG<?w1{gDIWa$VPQwZ0{urcGW{n1hi#*T+-*{?}#
z@7qHfpS;o;L=y@QP?mvJB~&il)Y;-_(aS)KlsYkp)cwt?du{e`+Hd{(!^DxcQMKcZ
zsdX3_ZOjcuoQo5#PxK+Wxfs!!yUQ@E(<AVaZfC8Yhgyze>d_iDy(EuZF(ox)Rh7X!
zT&jLGm+}|YY-CwHBxpJqQ4F$}=tI$Pgj+L5{iO|iDHkz&7G^fy6Zq5wzs9JiImrwr
z&o8&c8ec!<>oIf=tjHVbj#10v-Qk?FSKg4FCNbf+6M@g|ef)N>Oz7W~$~t>Wz2x07
z@~pQRq~CC`+UVV>^`QRAx@`U3Nyapa@UT+ND+p-<_$!<;5=pQEHgBK6gmuDWj}Iy8
zZ3}pyczt_JD^jORJ`bVcM*ta>Y<(m8p$Lgf%0J#|l}AJu{>!hCekEy@`ITeeAGq1%
z)OQ$@!ODo1gSL7H%#rWk^#Oz$r}ZT!e9F0G27E+QWjbvh6g8KuJbGH_cQKln5<h=}
zFK`iOZJVtLGN8!ctC3&9X~udL6Hfci5PUqqz!9v^frPHQZ#k!HyZjYL8%B3jb$DGa
zaG&%sCS(f2TM=$DL_Hu#@IGb5i}^tqMCgQ3JF;VpV`4q)PsirA@OAL$J5|G~cn;~X
z>_a+fpW6Xk*BOQH77+~FkxufsbqOhP|E$#_q+%r)QGQTt4I?c{UpF0)pELx*dX}4<
zGsAAw0wqx|kMq-ls(bT@4EE7-qtFFr{gtlmp1=n=ff}36$o%XgSr3XXC>)unHg>D1
z{mnzYNJvH34y<Wyvg>r##c(~k)h00I9qmC21!*Dph51|1BEFTB7&I23q@d0b5Ti=7
zC{NJ9L}Flm+<@bOfHO!ilI#*CJ@rmB;@2EhUsyByu>4TFH9_*==*r=`^9Of6v`ngV
z#dQ1jPN<Jt0e*A$T$dm{kBr#%rpQ`6)LH4=_8Y|D8oYHbq(yttQezd&O$K3Vm_b1h
zUczHdyJ`<#QGcA;&~}1Tmv>JF>k{8>!`tJ9@4ntB+54hNKImQ5XSvL_ZSg%7@D};X
zJL{=#{5Iy}-|y=l(bp=5rRt&?JsRHa+@%nr#4|S*R_q!niRW@e3Qiq2kNIm@W>6&`
z$_3^phhIs0sPE|PR6=8c9d_`ha3kVf?d+T@AO89xXOzu)V6;l(2@5lRWv}~Gmhv7~
zIm2~(a_0Kg5GxJn*`g;`U}7Ty;WiEP$x(70;gU7Tii1S;4B>}9P}IC&yfP@w@jh7>
zv8aQi3ayC20=}jc<Q1tG<*nY{d;z>_?#-cQ;lsFl`|U-Yz(ZSm?l8pkg8BS9^$XLB
zs@?h_bKcGPo?&r^Rqmj>SjyU0a}b?66b*19yb6)=P<NFSy7{P|Q|7ClC80v^GBYHH
zY&3i92|Re^#yIvNJGuztU1<qp8XL2%`ctK&6+;=l&)h!mHn+UTg<ldEllo7Fi}%G(
zl2;RIq**eJzD*J}eQytO3mWADsDC(3WX;Eni)HcO{Uk(dHm=iT`Eo_^=z%Pe@bg{n
zxtvk8`gUA2bsluc0?Q8Wtp<WF)`<C4O*Cwl*rxn9vRCcCZs(qE_$kNTWi#m5FK5o%
zNtnDdZW~zGtzU+vwIuVKl<!?(4?PTUrjYStMZLemP`SxVI$HdIHjSz1U68Gya~9m$
zL75myW2B9ww}`59T^}#6hI}D07l3ukd5zj3HQAiZ@jYvE^hba%;gsK>NIY1Ne_x)z
zk1SIKo$Of`v(6mNKoB>(rwT<GWzqt1Vfz*GamZc>a_LSBQWST8iy2q*r#=;1-~NbP
zX879X9g#-}U)^_(E~Jld5eH!h!O0(eh4Zw?xNl7sfBbrDh|Ezs$9J+pu8*K$h*B{+
zLo^?)<(!LeGDP4RIuJz->Lr@o!U3Q%a0rB-)H=2im?`g#KIlzXj<%w%I)9i75P~gr
z_&`$fZnd@4|J%;dpfp(xWgK&<N8D;Iq&LbLe;p#xa&c@<{n?-t87IVM2w-)$^|0sn
zoDDH7Plf3rop%@d2$6rwr*}W$zVp}pp3|QM*GGjH8u!iBtp|dloDTgtf5Dl7Z#i$(
zE4Tkc_>3P6)~14|b|Dv68fX5;oHQ9CgfMIS-Ts@!-yF3Fu#u?W6w%Be6I_>*sc(Os
zQO3gu{*3zr(r<>U-JXmUhGcKNnAX})ttq0J!VtQp>AK-8oU*{Li6w!Fofhwg94D`a
zEh*X)Enfdn`i2=3wzym8m2Oc`E;34WROd@dJk3S)0{viKkUKX_acVn${d<}p(UNCL
z|8(Wc1o)YRq^1@LkF;(hIQ{JrZ`elHo)GL$qGji;g#*#Kc4^`TMnZ>bneL_9fND4o
zV#uGy{{}f35E4DyP!xxKa(4n}7UF*g(eN+#>m-SEf<BVQi7tZqMCr6h1AnLDCy|FQ
ze;v*92I~(aFW<H=Wj_C;LcdY_(X%U+j3tjI+?kJ=1W2{@u=Q}}@xEhkal`NoY7ecV
z>V?vqHVg@ad0M^RrdvHF_i2$3FB9U>*p$Ra>#3;sHYMBa%X|mVWrZytFLWAyf6Efs
zLxZKdVMM?ora?^%et1qs2IVAJv157fcobV=deVKF0?6f2?rm$dk%VTk5LLLaVjv4f
zrW$|2DK2_slpV3&n$oKCMTIhseV$#199h}JuB-CS?-7Gp`n*F7{YqSf9tw>WvFikW
zexYfsoVz{YnbnMd`&7#)E=YI+q1^8PrPOBZIPg)sAd=PM^E{LW<e`LDo{u#jnip0u
zmHZ3u(5IlMbR@|Td6paU+yZ%pV??1{LE!uF_x#moWh*SZ1_0Q;EVuAW2S}5z@9N;)
zGrb~Dfx2Z9v*MTx4zg5G#`wHMD9F|>t1=&pWNleT-ygLA5iG|E7gm#L7|IJMEI7$(
zLKN7#3-W26770)`Fpp}g1ij2AX+G}ChQu|9?tbnQ8~J4)oB6IN5l3p0e98Ro-Q-mO
z6GNJ%JO<g$8q>>XmO+f|gb&192+HXBX5KBkMEM*=UCx7{L^_8Q!NqdsS#V6us|$sC
zxt4yhvMSrk!6wwS(liN`(0jsT{L_VVZx9;U8cO1I8(Oqz>u9NFHdeEtF9_zyGAVDZ
z-Z{`Cu)7A7)YFr!q%38UNSs^|3Kb?ufdw61pFUJawVX^1d4%`YL=;CiWclz24lJG5
z5mCO%c%V~tM4b4S8q4IXOLeH@HpQF&a7%=Qvw=%E=V{=5chq97p%@nEFxoaMdA=G3
zI49eL1{>FT&M3vDS#{;UZYqmzjb0CrS}Y@bCzj;B1ih>>#g0!`Ii+@RsC~v0^P@3Q
z0G>A2xs%ym6k@9yPO-EI#gUHj+s;fMjbAFWHO2-)Zoh~Bm-j09<4j>*XKeu(X_&3F
zcQ<c0NKX{KK9io<if#P0DTbJ~L-Z6N$9plMvVHbX6atqBRLHoO-Ys8<>Hx(UMeoGn
zm=ppqrpxWisg@rf(JdiF4`3`VksWc?6I+<|(GQ_rdZk~X^<K&~2BZm9brUA9(xm30
zJG6TmS%h>$quw{vzx{r}+b!OOwC#$^L+T^Z2>WqA3RZmxJ-tZQrjs|%`@72rA;pAl
zNn%k)$2;1OkTmSuq{Ch)zkd4PQo(?x`4{+txDz0$Pj!+`8H$iat2MoTpy2hK&CtZ;
zHUg8(e>CSoj)cg+mrcm5Q(1x}yg|i_NK{%_SM|M{t*A7N2$g{e2%IK^Xq>=MAT(}q
zoEeCV)!VAx$Sg2HSIQEyDB6aXRro^q1?FZL-fd7@>!NC?4W+qn(L(eDAv>YG8G#uQ
zxFSM%bW02AncNUMS?4b)Nb)7K(qwxQ_ZDzav~mz|_s-+tX!tQm@&)0C#z$+&l7bke
zl<*veOr=IdS21xU8FPAs`-6JA%=|KJf2*e#5G~)9RkEG9BC&o><;RSoJ{dFk`WcP|
zTW9S9Q1QYeO-wywxC7$OPTCSdFQRyu%j`2g(l4Hv{ia#61|N&67B?bo(E|mt)ae$^
zUVE7)FUSTeatjSr<PKYQBDjjtf_N!WL+D1OY2Jm^gc&{=+DHM_F;l}09b4fQ2_nfD
zQPzWOZ6Gjj+vD^ytl?FGor{hXy<TJx#Mdkk*(WWFn|v_6C=Q`M_MN~GY;Tl(8}!31
z0@6jS+%I|{K(_eUj1s)aDbXt@O|D2aELTRTiM@g<-4b!%-T78z0?z#_23bK9C);=U
zr6R5)lHz~?qK9+*%o8^H(xTJ{xmJSbR;PBov3T$dwTBu6%l&d5NGQ|-0QB0ylXW<}
zLAGQWhQ7i`0Lz70>nlZ$@T)ZdPbg7AWJc1SH1$rc#X3oxAeqip9{O_;GK?d4adxm_
zg|g7HLa>Iv!^sSufR#TUwwFuMIKAP$${iuX7rMy3h5al(!m%~jA2_h(DiQIcpOV>T
z2j+nUozqi6$+^$`uHIAgQPN5Y5&b^WQjrsKjJ)*LB&#o9CeTDj-0BhX#fs*d2&I$*
z+F3@qjFdYON$E}+TyHvlN$qs%W5bpb#)GJtDY$^?{C=PHj>YJT367=^#780s?^4IW
zre^XS*?i_tj;>uK<An5;kHj9I(q6R*gztgvE<OT=GE*VW+Na3$ooCh@^517>(~h#U
zoice=GtFMjyoO5#lD6^!*GCGt9<6Mog)>jOWW>KRqRtruNIFxxZg*elOL$*dTv>g@
z@sp(<s;~J~C`&HaGy}Wu&e34m;Dq5F3x|UDexj!*BwviL(fd9(-h}x*iBRLaQ?Cst
zYAU)Rvy5ymY|1Y@SIl$gl-{<<dgd~L=(2Uf1Tir1gr%sa%mi~uy0T!FKE{8%uz$6P
zNj<tUV0(OuK~&8o9Lo5~uG_;esGo&<K5a!wPq5<I0m*@An}lFa5hp(-u|-3|4&$lU
z@Y#c5-K>Lqfrg?6(F}SH?JHQNXQyXp(z(wisD1W<!%%@B1ZiGA@mz?+YCE%Z_?{qu
zzO4ZrWF?BjA{F0Ek1WXC&wy=gL||Y+XCqC(9mAz5iFqpADCGeF$W3uO0Ul1YkGDF1
z$mZu+h1Du`)ob*mT&Zpdva-Q@y>=kJZ3yW4S!<V<jY6ds^u&UStljrzF8lX+b0s&D
zCvirlxj$XqL(?XFTmS?GE=sc%!O?<AEM^UgFErQlLa^EGeB|+7osh`s+#nmuhjr=`
zBjvZ(9PH+^H!!K75d`3kcWn=<>(q~i)Hf9s_0ytkz^kwxp&so&nh7@1eVYIIeO6vX
zqx*%;(C02_{?~O1m(N29K~-tk(KmY7B5W^wVTcSgV=V7;3T|#PL}~E(7_gDNQR0F<
zLZT-(i1Zb6W+0hQ?kE}PTwmQ0Qc>U6^^o_tGs!P!c91X=zFQPwW<fp-NgRnwL{(2*
z?AI3azW)h}8+#jDx!gjpDlLW3Tc|f)6x+GH@*h9u6D;ZFE@FBt?O^GST2of1tSAk@
zBZ%Ais@YID#SZ(cr-i6vDe2~+Ll`Qea<+@4Oyo|(#C<9rC;cehL=;IeOo+GDFNeZk
zFnGB({saF-3ExxVv4(>zVE)s(YR*m9(OoMUN7EhKdz*Qm%LVtj+q<qLrB^QjVp0*A
zFyH+nV+qSpqT-%fC_X|YAqBp<SxjRuqzqQV_)Iy{m0xrVX9?KVpYe)hzM~L=A|dtz
z3RR{WY9IFcZ@9ksJ?avCd!};jx(p>akt}ITM%*NfWzcrNiFizlCTpWy@YSBHKHksa
z>bO32dE9Y!#mX%fuL-Mzc}Mzj8kj%;+1Cdkj;*KD;zN5^Dk$FuF{w+}yjEFttQB)0
zV5Lo5YRJthDA<v0*L7F_Sx6V-v#LnnfPN-e<r420Oe6TO#*j`Wa&E8Uh^HDZG8#_#
zF+<GWDim1lM|MzoK@-#*Ugfa5EaMl^_I}3WlV2jTuTNpG$s1?H^tYJY?T5`(qs_{z
zeZ?G5oz5D$b82&e@<k|FR#s#L>lspwIZU%q;zGuJHdb<XL6g@m&wX<)hjXvl8xIGY
z6`lz8iUaliC3Yt@1?j#Qi%wu|Nlz}mRt;6IvAF=`;|tK^)!b|HCsH9<X;z?MJUqPt
zQmCS#><+%`v?BpSx2pt?C}mF3<Y+})XqaBy3{1-IWQfZTPm$-XED_E3M}e8t>WxD7
zX-({<NL=rF*Zo_lbi4J>qPw?Xug=eevOSEbubfXwL}ZyRRyT3C{70#1%w&|6z^cWp
z1WjNhq)MuCe|`N?)_=OGP&Tah9#1%4)%Y<I#ALNet}}D3MWzdF!jXk+9^S7g<z;y(
zUyFn%9s^(_7p~Sef9AAx%%_j`zWbOq+b>cf?QRH}s!ydQm=@QK@WFfP+_6WB%q0*F
z@)=aaD0Hvx^>q7Vwq$bYM8&d6fflx`$wrZPAq(j5C~s48E3x~&G|z;=jR=reYm0y=
zXv4|kM7OSV>$K~5=hW_UT9mx;Tma{#j^S(OGD_LD092pI98ja&o;glEbahw1k-+qB
zc7mD>K5Gu4^jDA~56-N10^e7PQ!KDKRy>wE$rDtt_q~|A*}C(a`D9oVE5m>HUD0Tt
zit`$*6`!$wwY+$Q)*#fpU@?3g9D&(s1kR-iv1~XzgdQREwwY1dV~qt3KjD1W<@;>S
z%~sTAF`>2}8J29;S^>F;>ivsj3!lG@SwIgSm90?s-Glw?Z4|5e>ma6f*QyG+e7+8T
z@FyfVj-CwAVwS~Yln*s;5mA~`lLzewZM8tyOFI}C0^be=?OB1%M*+otL%AZvr3IKc
zGpLkeHZm&rT`?6x7s>8NyV3T*>#ug-*17LP0M3GN;%wrT--VU>>*i(%!aRpOV!woG
z`O)sskW_&VeIQZ|A5~2ox4QyEtMQ3CDh6-ztUR7eX~4OlgA;iqk$-s#2;IG;aBsle
z@h;wOgx`X-$*)VcF11|uJZyCbFe7yN=%T71hk6@qS>Q@bL8cA*;G?gdpz`gC@LBa5
z{0MPT?pBIBe^Oh#YIayUC!D3LGE}Ym#@rYd%zG~B(_}{R(@qy9fBxZGE(3BE>Q@aa
z=k()n6zgo#TDJ^r(65u1x?@QEUL6nDwfrQMFznGB#1$q(Xkl*0eU}62=7nttlp=yJ
z60pR08(Fh@<hByv?a8IB;jqH@6^*4)&^L2I?sGF=MCy6m$Bx8h(KMYyXd!;y0r|<8
zRr@s=Xbe_Jjh#1Ya20YfbYR8y)w@1n5OBe1)WK3vnN7&4_ntk|490Jl_s%!YN{}QL
zQC7u*g&ClTBvljf55_%Oz*(@3mFjq~=PB^L6I57IyW44*8{~cAaqWIlC+KRe<u{81
zBAFtHB7cw&=k~B7%2exv!w*>Wr?04GLr_CuCebS@WKYY!&c^~{m5T$is%yb01rW!C
z)A=q7Exe=OH)tv*u2~`i3H)e0?3NE=eI>u$c#JiIo#E0FjoGO|bD$u*Q$l`s42uYi
z^k<W^?u)+f%o+mU8#<ZBILPE}W7y9&bDY;+mt~N&BaYeqLht*Mr+)WRyI}n)N9;Ok
zu1!p$?~v-4P-uagtLThVWDb@bl6Q!ov)5bJO|<}U8USco!J4zR+jL_mx~V}(sIa(e
z5s8uX2dcM5PuBNINiWUryEpxGy!CGIT*97R0Bj(Z;3_PV2AKzlJ<@>^g+v9F!#4VK
z%TS>p3y6fV)AB)9eWg&UAJl!k?^iPOurJ+OQ*^`~2@3dgo0MjokWwfrQDX!_(d7qu
zyYMipXe9ebs2O0Kj*-AtCQ6Rh>`&{DN?xTQo$6B5s~E@E^<uQG;A9f|MoITXaVGhW
zx{#FLmJ=Gk6O;*_5{{ug%wu1uzOxEf!-K>ZqoM8T;`Pb>bdy_*d-sv`rdTF)^`K&-
zAOZn83v!ALO)M!;Zo?4(5fx3+@oEST%b{#+AM(QjVhEVw_#sF9wzA#V@y`9&>s1#p
zJJJ}}N{-HB^3|15g@$_Zv$PhSbN#sSmyUw7;fA<wD$*;AsY>#zA0TX*6&JThuinpo
z^g^UYGE18exwDpQ9nIOMd>xpjs$Gc<3ZOx_yS}RYPE2Q<YVk{UL~SJIT~AH-rf5(m
z+RoM69Rfd=^4z!U{PlQ!OmZ*9ErTt3`@yMeubjqjnPQ4!;pMDJL0T=|$t<1Mip0oQ
zQh@J<s=h$T!Wqe7DZF*+3u7uLotg6L0sv|Bd!Dl?%H+&h3uF!<QIqgqV+oDuuNa5U
z4HM<rL}g*_!b=dR7AIsUmN+rlkt;9_D;fq0+~r0PM(Y8#v0wvA?jtK-sQKbO@lWa|
zlncv8)|(?A>)CdmC=6=TssOGwqu)eIyjxxi147+Q>y`4q*XNS*@ds&Uo@m<wyrv=z
zmNTmHH%1hWIl_}8W>oZNl4}*8XG<+9*}s+G!YOkjc&@Z1qI?Fv^kr?L2@$nGsBBwy
zfX51;-X1zy4s=P~y<=sSZggSq%O8j8U-_ce4R3>KfUS>C03`#WW$lk?GJp$tVT#Ee
z_rS!N`aCQ4Wc95T?_sC+{OJSQO;kfNxGb(+$?1<5(d#Dr;xwj0Ogm(XXxOo=7h*p<
zf18(;Cw%*R>fL}q-k^3U{?O9=R_8AL+OH1zNE@iVDyPc_y%9sIth3i^d6tW!_Ve!C
zoyM*OZ~rkG8ScgYq8>+L)TS>cA-c9v6AC$L`4Q0qbp-HzRePbs&`g9wLg-ky>1P?b
z%&Vu@&q4do_!4VwVG4P2w+*Lq93OJvt40j$Jy(-4QXOOY3o&xo@R<P2p``JeM)gJ`
zSlZ_{#)3$s!{;TX-AbsNGE4K#vnjmT`}!w}#2@_Su3#n&MEwa&Q_gEsICt9#A{AQ-
zhBH60-9)V;rjLkylSDqW9`J@U@cKFKSQuK<U+@%+$|MXR+Y3V{$8nsRsE~nm+-5*W
zZ(aTtNyHmaFF}#()vbT|(~BHgO#H0q?qf0uN-bzoYfi8EmX|;Z4@D<2f(IQI1((lM
zP-PMiwL9BQlKChab6QkruXH~>-wdXrtUsYWQXpRKxYMWnn~t8s5_kfr_<Js1dUf%Q
z3SU@o!jzaBEQwN6I@<`Lq~86Dg%L{6Vrz675KPin%Jzfcg*qyW_&O}l*!;~xV|S@^
z<=V!vX$_%AnXwDOsYA4cM&c;2r--deM-Wlqlns2=q0ht8wm+J{cq6nUN%Gf>b9lnO
zSa6faMrZtao)y$pOm~V*Wl`zAUuQ+3E78SnQ~@5kJAalb2`c(S<)${*30<QsHwJ}H
zXWV#YC~rwEV%dAK);rcGqk0XTFf^4Uqpb5N4)K+vHkC?r+&ePbVq+vmlS=oinvs|c
zGq8m3`4r~5QL}7hhKh#Y?u`KLw}y(QhKjW8ikg<I>#dwvMf^YX-APmxN~gw}P15es
z-P&w|P#e_Fg%J`l5}fcY2_PYzia#gz_s+RI-YWylezfTI-+-9BqJ>iuPL~Ke!8tk*
zW)YYWW3kA+rxJ<aW>|ZIsnn`i`1g7Elwz$kS9gEW``)g(RJ!}3e8!n=G!<hbDBk<T
zl^XF=hFnx%ObCL}D-~vW-!E9f7_0{FnJ(rwi%E2Qq-!>4u!1h1+0gUQUakH1?Ey5m
z<P1HeGXH1x)k5dqAZCUgp#`lcExvZEr)Y~R+D7~92<le$+O}|i4Lp^=V|yirEhKd(
zFnq;1k4@f&A;L5kc?_dub+}+J%AZ0%IN2z9-6^u_7|Qe)fApP|dnmISVRB(v;^IN%
zU}U-s+#ug3pKm^g43PoIHDW@{Kj`B_YM%-*B&i%KzIXRh;j{8eL5U@lxP7D>lM=yF
zP)6HN7(bJ#AUeseCX}9<O%mvq)9$)t)g;VbM^y9?ln*_e2xLg_%Uak)-s`N|_17$<
zFi^_Awp;I{zBm=$9341k_}=hqd}>y)GvH%BF1+_@gav)M@|s-L<Nn%?{{ifDE*a$(
za6gRS4y?d1EU9?lNc^z}VC<jzp*?vvK3=x_9_3Ng_UL%4Fef>G*Bx5v3oJi<rjLJf
z5Cwghn`|993n^;wQ5%-ocGe3xvjKc3TqfbdJ3qb=&DT_G`-Qq3a4}Cz7xmPbgh;e;
zf7L)p%tKQ%dS`W2#4toRc)_s-2WnQiRA*1AV`Rbr7nZlLRX2-gJ;JtCbk<l%o2u&u
zTsW{jwY9vh9L*n)><l8`5B19Tuce=4fA+NJJ}CIP8%DmQR<ii6OKIx-)ri%~x8i37
z?pGDIP}mr)s2sg%7d_(GUCr%C*h~3Drv}G~4PIE-2|L{5aVJRUgfCZv?V)`YoTKT)
zhF51%HyZZ2cS>Ee1mVJDgD}X!(RaZLD25Lw#%Bx-LMXXYup}eMRx%%50$6?(9i6Rv
z_$Lv@>d@kkl;_;ARJ|{C7ulHmLfYAq@*bv`Ha(#`&?1OPN{p}r*Qze?2OjwdeBw|+
z*4;522Se#zY7fThFeRQ4T<V>iGv8E(Sgz7@027-FZio98925bK;7B)A#%BR*lI(9m
zPMiU1=|e4szT8u48Jiq<EW1OJz2FOppDry5i9Vysk+L<N8>IMjCu}@klpT-1e<CM#
zAqCZ|B_rBfx0-#<CCy#0<0x%<*vcE;5651wUN+!GiG|&Un)0Zy_E$Z%VmJkP-R!t|
z-Ly%OlXg{ozx7(vetV>mH&y3})D&L$_6z_X7C|f1!bZ?w5x)8-I<u}Sbs6aXNy*FW
z*U|~v`r@LYZS2;*SaAyA&}j4nD#H5|OhHbP<bJQr7R>W=E*SOzSlna!tl`8wNUW61
zq%Y?}r^P>>p8XhoYU$4+%S$jRVJq9K>2-Ssrds18!ms_1J`H_i3x|QuO$n#JXXe<^
z3B=X2Fqx@X!G<A+8<VAcQkcZ3Po;^E`oa-E@C(9}oH;rSKDn&d<DU9K<s}vgHgB#j
zE$ryH0ejJ_Lv$hyq&u5zSaIQWQTarj30VxC5($I>Gk9=Nul3_}wf9K|obc!53M-Tq
z4HJNhs)2CFw*}R@Z1Z0z*axA?9oesRQ5!I1z!3q5FMOOOo;qn2yhTBzIb_wijVvSK
zf^FBb?LWW08p#}o$hw8>)1!Rwu#=2Ir_niA@Q3~3r`;2<o*Mn@B4a!T77)^2r&1*^
znNjFju|&s3{jg7aT<K=)s&sp06fG=c7%dvP*ajg;D~6|q0QI`Q3Xkx>;}t$Pc#|q)
zB0g0i#WI}P1(?QnK7N$e<LxfN>UgTG_zqS<+Ym<d&Wk_tsKzPa1E!j)yW(Y3Fe`kc
z$h<tS?I$)YWN1k?Z1qE??j{jR^ryj`fibRG3TC!Q+{AQw+Q_EV0h1Kv>l{2(#RrGn
z`H?O~vVh)jHY6TNY2|dO-Q`vhHjRtQ99&NDg?bh#gcr-N{p`JT28zcA!^amx?z7`x
z@~mdmif9Xbd(g{PgY09LkEWduGPp@dpr@pu7kj`^G(HUyg%Z)Bm}8{M6%wiQyhAJG
z64@XYe(PB)@|@gLfgcgKOa_nTQ*~fSqR4e2+0PYhM>aRYW?Co`IR$2yysa`)TvB~X
z9Mgye93;xO-{PzR&ELwDWkn57ha_uBwf*g?G?W3G_C5U`BL%cBge@j1an(o8kb2pw
zunOOpl)j~4^Pd|iY3mAhQ&3Xin|&S72o{yPW{)?+UAM`NW-5zWMg~wWkE62Kpk;+b
zo{OAULab)vO$mDBnC5v*FkEd@2oGC2ACw3hY68^jhR7Jy#=?Cdbs?+F6gT-ui@a8#
zCA{c)I4M4DF~x9XLx@9g&AP|sxr(UtRVDH#Yljov$x0s^jlF%v%60z!3t23s)*u_s
z#78XNl(wID+T_t&MCtuWV?of2_$jxmnZk;{WyFUz4!(muCK9CBZrYuC`I!&peW(6A
zB#p{gvec>y23Cbc(te$Hd_pg$Q*#R~FNA~N=1W`@W)hN{oR)Jg#>>$527Lzz72T%r
zC%RvCkzt1fZ+}vqV-}lEeN&Mk&s$eke!04KxfTuGlfYeYuaw|H+_KFLvC6IqYP0l!
zj_uWd>J!nuKxzseG=urzLd6_Ux^1#4yad<jCpILWBSW0cch+5TSNW02hsuv2Mh6q!
z=)*?i#54pGHF$Fec9Um0)X_tBP63#Sz{z9F%h%V%SirZB^iO(W#u0p6l7h~p)+kd1
zm+Rt<(_gkF;hmF>&u-+(+GU4bVpGVwdo=*+Rx)4Qz+}UpH2nI2GVvrm4vhjL$qA4V
zIwesJ2<iO(6pkmymtT>+q&iSdNaJT)#1j|A+U=iJ4&^#)nt!D@0L9ct`Y{RGKn`H(
z{0-8apCRnYu`q%0HsI23u;k%C;{(hwqAh+xp!ICm+Q}{BD&oSTa^GHNxo9HR9iL=D
zNIch5%HLAxl)4j@_c=gM8xR^b41f2-Jrup*KJV2|%VIEC%|Z$zmMjuy&+`Kn#f{V6
zslBf%Sd?cir2w8$M`iO`<g`WBwQ;x|M_g4>e|@3K4)*FuCSYxFOQ2m9DWWd@q+sDP
z7a@%2S~<m<7tIy9<US=}|0*MX*J5_x^jN?|t0#X+?FWJmuCtWJ+7*OXN&z~#`TRcs
zT0o`0_bJO9=%)+Xz0l^UxHjinx~O1Z=t3f>d|hE+3`Pzwj0mtL9Oh6!TqTDx<+2)A
zTFa*(2?pwx^mYWG37h9NbO4JhBn3|dTFlCR%212qN`Wl!d*g6A{iqUci|lITbo6ez
zdh1*1`1A|ST<QDL`s8h2qbs9?MIT(j5}rNG$1{p33bd39{KzCp$(x=pa;ppl__z-*
zh3GP#>qSo0X;+Q(g4S(boP3?0fAxoS@kqx<9BCSEfKk_#@j}h`i-s9SQ3f8uGL4n+
z{lokm2>!y)@MkDgCqX#d;iq+u-pe%7fu7HA|8wfUyqhlT6SgN(((1O@hoX497)VSB
z+0?Q<@FQ0M^T*|WK`!9ZK7=Up7VX*Ezk*33aUX$~Hp_6rbzg6uUw!*~lDl_>^bHvh
zrm~S*B#yrrqf1ZZBEU6RG4>F;cZ+gBN9EINY;gt0Thb7f(-rc?b6wsDvpY5GwTrNN
z22WrjjBwHWkT|$goC<I;iS)!M9bf{sCtmw6MS8K05eV>XF5}bDyaD3uDPv^8zWPf_
zt?xF!_g#HK^yiX&zMQ6pZQo5-ddn|@)R-8ZSb**hpN6e6O}SfX3;#Hp`n85DFxH^G
z6l16*5U+chHc)Sn(*SyEsC`XiU6kVa^7G%NkKX^6%C9L94v4f<RdqKwL3drn5EkVu
zjQ&1j!2$SL!&9-Cj<~G5E{#6)?v6fqE;)OgzWD2J(!08M2HK8&aKPlG{Q(CxjQK~h
z{WM+yGFebu(Z~gADF<?1ih~Ings>SAg_?|e+4kOtrb$QIsyoy=;?aBhXcWeSHAF<M
z#}8|&;LdbuX%uF-15X!DMMaPY?0*;GfD8z|#@QTIjVo2-H-BUR06+jqL_t)`Oc}En
z=DePzSWwR}sq8w3`YqQw7<h=a3guQ#1bPL^w66T=VfA<$IXMb`@yBF9IOpW$l-~SF
z8eRGa$-NG<(}8wAbZ2x0m2#$t{YJBPp)YgGA$j8Ye;uPhRQCeK!ec<~Of2ykqs3Yc
z4Yeobb8`Q;(n+6b8bJ+Nqbl#^s&1sUz$_ZEK~sQXs|TkfV&}(upCdQ`M`0)&Ms9El
zGsUbhbTLVIyWFOW6*ka$S1&(L$6tS<&VY`jA)KjdO<$R9(0T*Vtc@116+qys9r7ex
z?c6n!d2iQ_NEC=Xfs;n(bf|il((vL3DZRz|EyhG7<fNqXmKJ$y5LOf{*}E1V&B&Z$
z#~YxgT_`}VY3U~8%XtDXQ~Fk>SNUX~cy_E1DlSi}6Q-=GVEPJdJi1DR;>XS*2Hd!h
z<LCDU<^>J{0bKjZ_`ory*$!-Zoar4!_`ecrF@5w=y7aAoo1Uv7bu~XtdXA`uKs##P
zHW{ctC5i89_Zb_tx@d$-3*ce?3tV}d-ws4WbC~vU&bXn-P??6)x=dH=Q9Yf0Y9k+Q
zV(9Ce4R4PAoL>C?{}r<8*)o4_h|&whfb_E&6iixqX*wGN!U2qKNEEks3vd9Y>L5gz
zOZD@}C0X)m9N*z+RZ9X(qiy@D!<WDR|I&N?FSPcd{Hn{I<lunak~Wd$XJDZm*sNup
z8ss+12YnhkGj;*9&4pam-c87bj|yT_jbyB&GuK%6(8mH4OhLLRLocZcLw(6}kX~va
zb>rjzL4ogCxW!{Tg)pm(v^BnhZfm0gO_S0C|M|yn_Dt9^&Ttz80A|xQPBr#nq`3+g
z{<s$r*+Y2cntb${X~v?2U8&f~VrG5TQF+_pn(;Ur6D-&U%-wj@U{ausP!|ss0p^R&
zgWg*@;r)9$toMy{^5jzvH?hW~#So?SF^A=5NN?JKr`#fnVi%PJH-QGGgd#}tXi&ZI
zf`Ulq+ah&B@8F)+K|V<rUVbg3rv|O#T3of{{FYO>&Y(!ZnZSagy=N8<z`w8>$b=k0
zxst*-bMLSg$+{X}xMcl98z2sj??}X$R@KxM`MB)IJf^#w<Qu&{lWS6hk=aI0LKvJ4
z2mJ^*Q?vxwD2Sb$GJ15r26|Wi@aj9M|MvH_@#<}LY#22;rF2S5673~qUPN&lyF<<z
zZ~?3vcHQlPfEnC8X<NW$scT8Gk6I%K^2*P}Tj}bJ@1|kz9kp?!j7BZFP_NL>DkF?b
z)m1+FVU3v03c9C8`{d!>G}2*w>GY1Wq0s0Kx?(GubdV5tr8v{r6}ETtaG=6W7ZHLa
zJHDF1gRf=y<_1OR2%2>Fll18R7kMgjp7Pd^)=1z7RirEL0_$qj%hq8&YG#CKD8va}
zFZ3ydqc^{+mj~ar^f8m6hrP=jfSZjD!@;#8NA2w0hB#nthq6!fYT?^I(HGV9oe;ek
zX$Q&;)N9m~l}#l@<1)o;WA(8R%-j`RJ&}x$P*7JccGBIy{!H5{9}6%4lrPg$Or*Fl
z>laVx2zfm`D~Hvi_8LKild1=9&Q!lMC8|F*kn1DGN<pMX9~YjaJAe6ybXBvbeTkCS
z;U?LI41t?AUf3m>&?5%KR?#$a8rt-iu-7JyN1a>g;x~S(2O%G$7a)-4b#<_iOK#;{
zFy0Gl!+mc+obMa@&3$l=d4Km`rb}8-KRvvvjZCy`L_rsg#HO#Z_QlUdbV$vHu%}pd
zh;@cf(!<+7*D>#(XcY29uLEfWCDn!Uvh|XzBa9To*$oRSZts@kfKL~~VDX&YdL|co
zG^N6W2e5;Vx=HtblOF3N=$;*)qcGLd=A2JeVIYPw9)5u@R3SUs7pC<YMkR!t=%n4g
z-knMxYS-Vvb)il>P$$dU%I2upmXf3DYw<C8sEuh4tgN>P$i(x$1-G+r{jpZDTG%|k
zmM*^W!}RdvKnv<L42eT&i-Y$dL8l}pCGYwXtt&x>K<|Vcu$X@NWqSVEe^tXiR`2mx
za)uERw$LZ%6Ix8CFcE>`67pskH%^4%x0^rkjwZ|<o?=8w442opn@~?0eW-4p{Q1A6
z>j(O1l(t=Wv>sw_m@DTd9GLQ+s$pzXvoaQ<#YRQ;4v3^)3X6%}7uvr2@RZL&Yv<Le
zcKeMqgyPe+M*AkP-;Oe)^~C+WvDzDu^XB-O@>KPF!{G4EbnvDY)31GyPWo(zRn^2B
z>3PIqBX(<UG&vfUHN7(s&o6+c%@?U(=-srh^=A6-QhM~6aDS#f02*I_cSez$_jMy+
zFM7+?6P*g*?S}er6J5Z}3}*ueyB51_*M0P9dZcr&x_WuAr}uceZ0(H-Dl(p<$F!ah
z)!nw5NM0<cz)3Wz4V-EL{e?DX^saxPv#)+2L->Y}<meJ)$a9<{)>~IpD+iE++~gKQ
zd}740AAu~y#dT#;)zbyzK**k^vGi8@1s$?D=)a*?z7PvFpo(<xT)LK$j7(DqSk0Zz
zZ0kk&C?UO9aG>KchR^P#6TVhB&=>B&o$Z;WVw@Plbd}4CMEm;!9DtvpNag1-9QCJa
z=rJ9{ZaIDPWAyxPIvPILi=f&IYg@0BV2v)esW#ma1V$NlNoM%0fhj4IEg{Cst1=X)
z>R?@bOC7A6A1P4pPigdl2<_cwIk4{rZj}Etc!uph&&yFDx4!ZB>Dl0>P8!v;R`E48
zkYwF}#-8V`$!c@IYiLH%>!8?@3njpTnOr07-S0|69cYJ)zVMzd>S*`-w|}V|_jGA0
zi%}HLrXld4-3Z%@9o$%*gP+I|_iRD(&9p4<=#0KjcQwU$vGbD6<4VaCqfax+vo_bh
zJ|V*)8TKhF$u;XVCga(tnYi#S(UCq~b~D}l=wC_v)!C9ku^q`l<Jz!a9bno{n~Szp
zq@itd<+gYxzDU^Mp}6)U>oZ2%k9&QpB6Q!93s!8%V-;;nhSCA*SzY}oUDS8ePy5&O
zt!MSJvXLl^M~pz|sVyWSQ|N3FblNKyr!KpnNfhCs7Yw_4!K-unG`)EE$CMuYv+M`o
zOh-XEo{`rU&TZ;JQG2&S4tPhzbjFz35)twL_+d)=isb2|Kk18-FVZ3JgqVU@lMKyB
z6=;HoPorTx;t~}m_o7Mfd5rX(^8;;jPuIVrHlmSwbU*~a=mpM>x>^I<(gwGU%)J5G
zaE%}<EG_$ay;>CP=!ojKew-d2U({my1<eAfiZB{6@}SAkaJW_}XuxWN*A%Cbh$#Z$
z+0(Sh;pm>`*?*;ZYJF?l&Rs$&2xUiGX)U#d?SGcz0Gy1=m8u^fQv|Ybo^(c;>f-U|
z|CBBb@9T|oO<kdYRUe+4`-Yr^*rfsCn2>RyG}6@WP-n(HQd_w3uD0%~ZTM%Co!Tam
z+z>TO6??{zOlyx#rBSa|w@nFF8@@LntL5kX(Aa5}d-OV{Q2ra~@RsI!FMm_-gj`i0
zUP?hbouVi21t^cLsC)C9ztB>SSp>DFrTWxEz>&lX^?qOHW1Z?76MSsyi5AnfRn*SL
zf<z@9zwN9C0^$lV`}<NHFx{aay+S13A~QO9SKpdRkN%vV-}!Coz4%JiB%=b~^}{!O
z@&f@IaXyd+A>m?1ggfHRwq5N=>|EFA<KuKCj&0YQ=p+U6SJ4$yRkO6qMHv9|R>Z))
z0a>&XR+Uc%gwZ+`!C`T!ryW@OQsMQtf2s!bmcH+UQOQGlDxHsM*@v4HZkoWf!K$!1
z3#Z0-j1#GBP&0wlmeB5rMj+49>EqAS@UFgAIMAEv>IE}Nf$@kPrk3B7#2C`vw-^Uv
zlSAaTktx+egtk|w)7$#$;Lp?W!C%tF;ZvPomZudtZ%wk~G8DPb|87&7$g%$Y!lUkz
zZpT_Ef1>aG9C2vkwT~32DPF#%Lx)SohVP|&YRmF^|5zKGfd!;nq1zjf6*6-XP`(+L
z&6rdL4O&}zPcEcu>Tx|e)~Ta1AVWJa4-Ks5qW$t6YxtyJWA)9{0}?*A2|!2i@$QFu
zyoWLvm;1-*0Y{r0alj(S;(@o&jY}ThRIiSz^tg9RaUg6xY_?+*wP2ol57VPBf1R#$
z^(}kVk^1$LCm9iYL2uIrgej~n$E?e6WsAVH?y;8p@10&uSKt4!2$Jy_Xk!T@5X-~V
zY4l!}V%tVD$24@@*NO~+v0}GI4YXoRUqNuLPo+#vS*t2|nTjpFya#giTRI=>BQqeT
zXe|w`ON)y6JS<ljxy7xDKUU7HlBTlFm<dBhNxf4U5cLeTnEpiX9He`H6jn5HIVaXV
zHdWy(KeLu(F!nz+90<lrj%<kM>uGS;jxPD?_vy*KKcv1sS=;BdTN(I)>WXQu@jE0n
zV9zZG8PXw%>KqL#FV2E}KV5qJV=aArtaTjTjgkRT+Spj)vbFmX6viX&wjM%fk*m#(
ztG+GOTI2QxWUcI-4&3@+ER@srvULr4yJ{$x-c46@N-v-8955>3V@=k;Vmq&CfLs8A
zw#b#UFLSf@s~5m}8X3vo<H+~pCpx9~>vaF~UkLIO^%u2p%c-x{9-vcc4dd8>vkU^S
zdEQ*@<NZ|h=~+!<0sUz@dHhGsBHoel&|<p6;kd7nFb!lCvM~l)=@|!bwzuN-td%t3
zctKz2yqs>nr|GNCHC>E6L;+%NGRM<q@dtydD-f#&*FJgLp@^Z`a~~TF=qk}h(h6wB
zEwTn0VB=nk*L;C{12P}KR+>8Mk-N1Dd8{X<p4Vu2F<sHV_fh{_>BaD^^irde6Eh%E
z#seKgp=Q>#XEK)|P4^d#P+G@FKa$QO5P0)A<+W|0nhw!-sgpj<dsPPG(#aR;@n8QT
zrN@63Y<(=NqjQ+_o`^PW+0N3D9TZt<74sCjPn$Vl2En9(FL|gJFaGwlIIiVq*^kfD
zoj?A^bp7bD4o;NZXsh)=+hR=_qqrE6R5jE5d=0s2xi?9q6>a(00<JYQ;lr-O!NFxs
ziQY_yN8i*`?oTu#za<&d$XlPk>xe+UQNl>vFQ9LO3t5hP9ZtmQ$|FVYUA3J~bRcyv
z{IqEURl~g^ysnHH!lJIMF$!2bbDwk=_?ByLKqeWsv1gicyzQa>81IDWyU#~gzoYjH
z-%c;}L7kz5jV}WtTRyFYHeMXz7&0#mA!HlO^=^laE08xW)E??HsfQ<ep^*1NPVY(q
z$arY#idR4k<rr-(T=+gCeB?r(GG!IjL2o`C>okCSe@dN~Ur9OZot%-@L&W=@)~xJk
z6D7v(FC{=^U&;wj<k_}j0Z45?NS#R5IgQ~+)41uPj&0ZU6=(DM#sCCNNlktrfQJpc
z0tISgen&2^J@OX7vY+R2SUF8y9PzWcnXoMzmm0r`&}_x+Q>}voOkr7L(9L#L>X}Ih
zI|Q$PIbHwYZ_<-feWZzFK~A)uz*H9N4kmS|j(Uf2s520CVf7GZ49&f%9w(=Q6zj5d
z4pn~V^hLV!nNI0F<U8ELRm#g|EJR9&x9sx*{EQ{-lTC0y95mGeyBUA5-GXl~*{;2V
z7wOAC{!9i$BR@?mTCZ1I;d(lHrq3JSrnqNPArqyp`VqMhCE69nktHMbicf{!gX6<=
z?VB2X9L9@-{`R@Ob!3Fg*r3q%ZlfI78<35%Uxk<301d;;2Od>TM+e5~<2eV{K2&45
zpslbRYt32+T3W850nO5|W=Z3PH2*TA&L2eB{53|RtNlM(q{Xgq-qKTcV?FwVlDsfw
z7Y4+k8o|v4>|>^K01?0z@Z}GdosFXd9h~^p@6zKhKhYr|$1*HRgu$k@%XoBTP?!p8
z5TB`Kt~3FHBGg9eObqE9u|C$nqOWv*tWO;LK+jqalwq->bClFh?<M_8k=O%UlmmMM
zvMA?Pl`pqqnm-Lm|E>h+#>;4=i|^|M(!WW){tYP#O=GEn(Nl9rGa5G~jKZX0h_JZl
zj4QiU*7BsuhWe(p&QBE$!*oGw9@h^arKf-SFCvO9q^AniR0<2~=AZ+L_ij-Rz(JP6
z;I~%JbZ3<MB0c@|AJfglCpxqC*uqh~X4SRMU>1i0tJa*5^L2UjiU`Q8$%q{4)9C&5
z^hGbd@zLK4zZ=3;21KK8)&}@2uYEpUSen$^+QIpvys6Tx`ZiT~OSz$mT9WLe&VvK7
zB;YDl;=;#rhT3^Dypk@z^TYH)`{0K<g>+<dL>Z%E5nT;xj_%|<X{XU%m@f#>gU(LX
zABQYz_5nlj;tN08M04>;FS2QdTOcu)zTi6z{yu&-4zR9a-#ZtN)5|*=ef&nd;qGd@
zis5Fo!KDg96XB$cJ1k7cvxlDluZ+mh7Weg~7<G(J_|C`CTj}7P@7qqq)bSmNzILO@
zUEyn;t@FopttHM>4K%i*!L1dYnSt*O$jq!-Q$l)yCF!ws1Z&mwCyz9u*A_<m4#E$$
zJLL@<fw0_ea-_UAi8P1tSPK;<*bw2nNc@-+mOb@i;pma<#$VIP7oTW`<$*}`(Fe+G
zFMO-14MfO~!4bUUuhQ^~U#7v6zv_tnCmP4fV2ANQ(CD?>>N#r&t0{jeC>b9!4C*uu
z4{mA1{X@M6^?~rzyC1zv!r7;6X&a@cQt>Z^!-g{lO*SAa<FXC)Q^u#pzi-1eOgYz}
zEIlDaMHd6(p!Y#WyaRH2L36_2PhUSj(*Ag+wj^070W^o2kxe5jXx{tsBN2LpYSuRT
z5H7m+)z}Ys%bBT^p^gsM+Q(IW3Gew=|E%3Kyo;dSSeU)7&|c?S(`zcswTzo%8R!1v
z^ze&c7|;9cypqA@)k52>fy%WbOst!t=_1w9MjiNQ!w8q~V14h=sYcvyYwbf{AGD7~
zvC#q&wZnw&5)zMeaerl;S7DW$2;&}CIYq>m!`9%Zowi+j1F{CDF9y;!Dk`f6=xQA{
z2(eb8pF@p8-u_|g-~5g?E?tz}@TP>)FvWl&DPJ=p;3I_@6E`KJVN<p#CM|+8UwukL
zm(tQ=I$v|>ym*uzup8^a9|h%Q9(g#OO<?!ovv5FKM7;)%g)!C2NxM3-{pnY~PQ&8|
zdiMi4Voij9IvVnrV0m92#ogx2$d~1+&ff-LN}TCM{R|{ShDrBA8eREj>U{7oG>xV8
z4~3G3_Fy9?(b<zh)Jlj2c_az8-&q@JKodSgqVb!KRWPO@{i=f7aH0&uXG&r15;P_A
zK6-T=VDZzZck=pxKqE)iH`9^U>GFr^!dpMk{&?+)XCa+kD^@(BS8~&O_E}i1O_s7P
z;texK3m@5nCJM^5mO|Ws@MhbArcsUtS_8TB8%<+9RGjyWU(MO<ML4;59!3|8_W0^x
zda09l@BBI)oa)VU+x0d!(l$LJ<DredvhnQ8nvk0&6ilI^)Ecg)d^3eh>V+cHZ>M^}
z5!t@-&W~*4h#gykv7^`m7Cts;h}Lmn5xa|?GwpEQbWPI_b24#nK;~rFs*@uxT-GRP
z7$xUToZkbr-)rf*4wZX!awPSu-C3NORqV!6l4#(i{1xxC_)6mWA6y~HcnmdP%?1FY
zN<B;Ua+!y})O(yBaJ0$jiF(4%MX#n-jKFobnE7ehl^nMIC7BsARVAMCE&6+({Zl&9
zH(C1H^=1p_W+*W1uBtHfL#7?Kh4<PXHk8bqXtDgU4o<xJ;ok~Zjkq~=H=N-b4;V}?
zxoAB8wEu16z?$0s-hi|*{aoY9t)ZB)_O_y}jic`M)VuX<eJkYK=~xTvL%prr%{??T
z9!<EeNpQx+fwx8*MVAm|H8vom!&vl(57WyBe^L)w?}eOd6r%Ge_}iNgIJBs96VhXv
zN+Y}U^&d5T^#?7UKh_I{9HUQ9UD`J~8Wm>i!G<O6WiyS@cD3hjkL?IIu8|H&JUP(O
zC6evV+uze7$8}|t0T~aVglkw4jE8Wq(9&McD;qlt57ylN_XcFs(p3mSG!U<n@%J;-
ztM6V^ThjdSKs~f?{$2W7UueUC%+UVVOr4O=C+qsO0*xCwLabyU6yMRyg}u&;bgBO=
zJ^u7(TIki=(HciFb6=3ZW=vm2@bC^J%nO96`y@Tpo9EXLPxQ9=Gi`3rdI;+UG9DeK
z72&k%qAP{M<pv)Jo2>z+Xio;cbYI)lZ+@h;51j!w(C$Mmf(T#mF1u(W<*?V>9|of7
zzGn7BOJ8#_d+@CsP#g9sAR0)ik>s{Lq6dk=IM68M?eC|~<@a?i9#ch@u^w~?RDEpG
zt89p#DH!z31eg(F`YlhvMQ>50U_eGva0fjZ5%r9pu^a2*r%HQl24tp!_K6xffDyLo
zE1i4w?91Qk$g#)z<~c@1Z~p5&9Pi~vGnX;fmfoH&Rzs|d-w649B09)0r%zvbKOKBS
z>mLW#d_AO?X7d(-tg+3+pCnkNW^z85uDKKloYl>fwgG00DjT9_4i3qhIm15T3OOJ_
z7>^>@apD&`p?F)E;%G1SDzVl+j^0l<-v5Et7S!lYQ34b091KTMq8SKGi16TiCGIqA
zGay7lAg>lOog!s6kWzbbH;r!pE}iO|Ax>`rZSPr#0|<w>`<Gv*3xkJtd`w5@T@_#K
zD^FojKb*j-3qzs`%GW{#uPBpVjXk`auD++Kt4r?-rjG2<`kuXUjx6CMM~*26wy*(U
za%AGkcKO$u%`61Kh$Y;r3`d~wni!C1C`)obxVFOk7$X`53x~PY(5pxJs)n!~U3<4e
z24r+8-F*9R(qnxq;h4pA>y@d2DGiq?1v4TZfSMq`mxD*;#FPdKCC89+en-O=WV3>l
z0K9BS3@@$S449-)nc8C7>po8x4j!kc_w|7zEv6sROIDsS56T!2s>^8ca8eFrh<MZ8
zTzy85+m+u;rqfnh70Thx&rEMYv=dHu<B%O~rw`JT`@a>hZ;RL3q=2zj65F<G^+3h|
znD0v9AD~*CQ9ccpWhe}lqoz6{HVdBBq0*Tlh;R~iw4Qe<J?UIYH+c7B#KDP2*8d1>
zZHiQFL6CIu%L}%4x|hp4L9dhBGJ2_v9dUu^1PATWg|VKHLKI8U6EI3K=jjcl4>sP|
z<q1;MX!!J~O;OlqJP$PWpzXY)H+8_`k5cEopQOk4UZz{epQ~Bv{Hfd(IN;?lvlvp^
z+5t7t)Deo}fT;pmqmCIJHD-O8&Xto&cgwQ?>B_5Dh|v$Wr`&J{t{mTOA06u34Kg5F
z14%L--L8(=NcYp%cYcwsXez6J^QJnS-w>VtfhlMQ7CNtEBO3X!poSu=ESL`7BkAf5
zcfDYV?t*R@xQh;2u??c(RCPps+fnNrR}(g)pZRIu@qkF`PHDy8uFkdUvUOL7RX(`)
zi*%!ZTSl7oC8=&sa8?@5k1BvM70NTlgIB*vDTez&nD$utna)-bAXp|p_O>`>`HPDK
zb$E!flYdY3f+G(KBb+i129jBwef8ktTj}Kb$Eo+u-w929_XGI^MQs8Y+DoUH4bh=a
zkK-fW$YTTYjO}zhD`ait!T4NLGU4Xp9UC4atR}suEk)$)rI1$d<hvh5`K`H{BdPK2
zbx4L?G@7_3IX3ZZ6;Magtm*3Vt~ac}tni=$P!--UrBNCmY&aq#^72x;_}2IBd(p>i
z=aq37$_V(ZgcwF<<C~2S?9tyAS9RNt9ID+*@cUx)QG^>G;Dsnj^HEpkP$C!-Mm_2k
z>mx_q-qUpD;>+~>_OGQ~bj<rGE6BhH6b*mnF(P#1SwE;)=ZWAGX5qx`s0$i&ck1}{
zKcgt(;e#<-p{B6KW0)kKVwg`p|5dtlLFbHVt2CPv_;A!vBfpW>&G^zCJaeW3(4A%1
zV}OnD`R}w#aG~OKnPz8{p+CZPH=~scL=JiPgJ3ft8cARK#!s{)M(2nTh`v`MFpQ#j
z(+TVgm-CU=UEzs<-Mueg5gVbsZ{M=sNYT|o&n_Y(99%9nh@?B+vDOk+cs@JdXHS_6
zI;R_S)!{~uOUl=}qTIvDU}&N7@>@FQ{enI;_3ZO>pxr86^-yg=5-VcHmYyJ7)t~W7
zt<scy@Kle+$GWnktm$`~R<NNI@WY`zP;!c;r<)ZCHx5%A96wB7ees+0;m5c2g5=xU
zY{Nm3%-b`^tu&xyiU=bjr;I2Pe+|yRmf{gR{tKO%{qWH_2nVRcOuI&LIP|aBBd0jk
zao0v@G8WIiNMC;T3;TdqN5|(|Ga<X+n({ScP5?l1VOC!%(dq@5i#m`39}1J7yCI3(
z<&FfE8OZBfx{NG)8U>Ad2Qqa>seAaAj=lP^WSXtJbT;%akX@Z@;POj57vTyw8bH;^
zAb<;J0q%WWe&Oj7ZrPDX6kTrh5w?*#B5?K!v*OGOk+IM`<fD<;SNcMjT4gCp*a(R=
zg^npIh$oeTX*3v+uC0rds)-RtS6?f<`cb-}QOFCOmBlEetF(Q3fa<q7C#6g@b%fGo
zu6#TnuGWbXQjBv~-i4j`iE*-WDO;D-3k0A*vJyer<sD;P9rxbVA%8EPe40jg^=7(W
ze(MbR;FM2Lp){<A3QnMj1EwCFmb|87;rzS;PUJcF%p8jYCIF&aw82|0{o6=_I1<BK
z9os(Ao98c|ekz_m)=oFA4v<Ij)UM55g(5dLDbni7%VCEW;FfWQYXQXJW0!0lMxBBo
zBTO3_gS18$QhZ4EvE=$?H?MtM{y;cOrWviunJuzZn!2)1R5qqWLZ6j~a4d;DpmxwL
ztNfSEUuGGv8(1}L=8pKy@&}GCEP<yFZX;Cjk~$MS5}1&c$=r5-O=D2w#whsZ4ahm5
zhR9mT@zr$W-M_ULu;|G#o8di75wCy$d@Ke;7mN`kXCY;=F2dvTjIwQ_1{(#z1x(7r
zcrZQ1CBMRbWO1UG3ZJH%m!79Pd?!Sw$0ki}vDMe<%Zjfs9+p*c9?J(=`Lkk{M_<4<
z>@p3EH@WyTO3SQNfK{PP2%L2O%IKbamG0gCuj%?lZQYe2=4*pyY#F`D=-P{fc?9Cz
z^Kh8w^|l=CVSfxZKjv|Qx-uS&C+*KV72dHi!>00&^={M4{>}8}H~*D(9AiAR_5sdh
zHxO_`Th}olQBZ+yv=^tU2!6#quHzP`dD;AR?Cp0=^VCJ1M_3_sDlAKmNf3__7s7&k
z(!A(Thq3}k#WQTSeB^NfCT2HW2t*0@2oeD?twZC4M5B&l9(r1Ey!mnJUHzs`N&i|3
zMvJNH-D_^c67g;6E*e|id3x@yfdGsO!u--$gKrCRN(kBDz<5ucWW=ot8fEIv)=?5_
z6w=r2NZ(BF4DY3vPyU?JV_i3IX<Fl^R1Of7mih%8-s0wUZ#%lI7p(}va)yv<M;$cC
zVdQ(_ksAoBF*mqGQl;W4V>BOODwU4LPxt?rp56alx;p$yYF3*Iure4A7TlG|c}X7X
zC79&}+OJt9e^!D895Uo^F$`W|en$kXRE9w|ic&ObH5wfX#}iG%9$f!cN;kfvnX5Mx
zsi`{ZTuBhifNDShR5%{uBGv2ReAKWwy`F#dyy|zXm$-Vsvq20&AhnB(Yb2f{E*bzS
zNJHa5(!56#AIfpoW(id6F1S{4fP9=1L6zy~A_KiLEjS*$ldiq{lXOqpVy}0!!zo^0
zSEJ?obbJPsNdcdaMm>vXHg^tBY4Uy*U==#I3p~kK03uLj<oR$n@ZfAm`ROJ@*U@ns
zC%4n1zy2&;yZLRUX8~0`QNxyLH`gNQLob5Sm=tHBj1+3hOIdc+75st#rxF9{la2~e
zd?fMdD<736ru@XeN1y#n2PfXu=;Miw&DR^~fU(_L>R^aZU1@P^J!o@ts&O+KJV#iL
zTIhzMqh7$0k|blmmyAV`_NiLd=rAN&+$SkVKRz2>O>chVr?MOGC`{k|V5$}{2s=(-
zjP^6A2HwP43QPXV{#boM-D0$^%Wwq0_5H|y4FCDx3kjiUJyf(L3Mix}ga+wC3Fdpc
zlsbC(Xrwz$h2~Z7C@5g$6pPhIJ@}<U-7Gc<2rLLi0tIaAwS{SYt+3m<mM*>hqx97u
z{-cb=Jw-lJZ;n0kN-5>-{a78cXN{Y_EfBc)g#k5uvDjIEGCXcJRpKDM1O<hMayVpB
z0Z@xk>uUApK<8sUzWb|m?fAb_$XlvfWw3hDovKtlLpxx|$0U!-2<Zs*n4C$^yXU-a
zMTaR~(P&23DKqNeN9GCg?K4tR)W>%;`uIfKnIFo4ywu1JMv1fVnO$$ZH$-Q_;35(F
zlOLI|Zi9^qQTk17W;!o@XCLK&qhPVtVfBLF(Pp%PEHdWBh7dl`CkakvI4<Z@&4~}D
zNtTDo2bjXygArZ?xreaDah?FSe_WCS{k#9+-?f5RuLa9e1_tsX>!=BL2)6`Yk0x5y
z+mu34BjKCi9rbFScRx(u{@4F&>R$RjDGh+72Tp)7cnT=sX7F2a3u=wXDn<qVj=9Ze
zn;}32r~#=pc9}Q6`f<AQ<`2{97k^AWzQbX?JT+=f2@JK@zK<fIXK3Fcr?J!cRIc5F
zEAVF-M_r*ja$N;{n@%B6<#y>6XT>6A!*?Anc3-APkA9!hS6WPe`(xqC(yN@&t{q0U
z6UlcWS&(%w#&~XPt&TBl_aWDeET|zk=XE2pjgJ;0zIm@b#){6G$7%HCFVkc3?Sq3C
zT2rEPKqgFcK10eH6D9{EOiAPvlx#%wkP9&1f<M6H0v0vrGGKQTDajf*$$*SR2U2o+
zqB=ghmabtuu6|2#7fn1sU_5~*`7{HlK;RhBq`)~H5fpcidkufbif&B2Rfs?G-p4w1
zc>n4^`|)esItv{aXHr&rlsM!d?>+0mg1iA>H0)a#ybvdaG@{3v_{tr3(sHkJh*?uy
zUHbD38`E5r3c9#_ckF3?Tu=fn^y)MU8Qn-X^bLi(fBpB;w@2x)r@o%OG}xD70yfhf
z<U+~d2xD}zDvrQ+;Hq3es}9U8VxUanW3b{PAw~@R^)i`oyK?YEU(owyy8ib6sGyfx
z3po^~^jA?xz>)!pBFKibdM+M3Y=?hCy?fm_JJAbj`uYhzP-m)twy0^r{IPbh-8g!d
z`h&c6*Z7Jl;)35UE7SphQ8$bftUO~M^|81c*E7JtHOm-at^R!zh<5}A8hPko|Itx;
zqD>(0y!#_1@>6#mQ{V96*nq#ARiVCj^KhVKJm$%^XxjdPefIKf_VY3z6$_b#-5L%8
z$t8x^4p6hS7!WB=-bz(?&t5`9{BqjjzC%(6>bSTY>Uyxb3O&#e<xn3aq4}doPy*tB
z+S#qted7n(nDu@-d3jIo<vo;Q)^ve-|27?BQzC+6N*Cn=G{sQ_-Y6IUGR_oJ34kqL
z2tP9-lmrfX6g@W8C>;ChwH^-cr^jFZCS8B@7cHp1BVBV%@$^O6#bYW;zsg#{v+__X
zbho_F6*LwEQZKr!*5zU3$>oMr3R-7~r3Zg9qkH*8-~CXWcj3w5Q+~xdhq1}HXS{bK
zPu&Oqa@-PZ<C6kF@gF>bZFMeu)J_=z4fX!VK(rj|ZS~_reQEI0H&R#cG3oqvr5DbY
z9pmHE&>3QeS;95Ey4Q8Q1>p5{MV+263p8V%dkvH2np8{%);uqbxC$!Da#8Y9vSASX
zZk84X{Qf~4Qm|`<^ySNQdRPH80(awXXnSLF#?TOjx<+3_`6LekZb}kIdhjyVdw-Lj
zes)`(z~j_E)f?YRY)#V)5WP8IIs|#-*vkf-B^}B_|EM|xue(i;0h*~Ri&rcLCfAqU
zl$Znk4u{XvmBXj$Sl{tJy!Ab0(pg9vbvSl;Rm)&0D$q9o@vtQR8_f<4@D9@4Zx8nD
zF|d!CW@%juA6nyjBwqbfx}qaXjyOw<_D3DF&R`%&r$=j-#3@kihwcaEgc0!(LM}7k
zEPBo#;Cj~vAQ-VMXVkr(!GqmpBh45L^v=@B!J8(l>EgS>O`j+*+%S+CZ-YTzcRqCs
z<_Z&yE<1W8XbHR>`YZ5j^}IPcm<K_o7QYbCWiFd;ku=yagS(KiD~DOU!t`jJa*pW)
zUp+IW?oJOTQE`v(UATjDcGe(h=%|crM52)xkC_s{khnr1YQ*s-+C*?!`{|#K-p~}m
zMXjSNo$YjjLBumRuFH%G&p3FR8R-EF{0aj@Uw5@^@TOI}?!tJC%Nl7aW~lAE13n}b
z20(c)DoOX{{d7;evC_-Wq<^##KyZ9z0K9=&a(SeKfpPN^3@WABDKGeA%Ebu0L5@`o
zY8CYit#W#QCY^ki?%)2I@$4eK1mr?8!EFd{IYUZ(_UWX|JL-XYqK*uZ{HEYt$?It$
z2WGrk?#2pO)K`XSojwW`E(4v4AaT~JS9(0Up00ePcRzH53F~waY;g3;XvKD8nXEg?
zw1e>#VM?}lTfu=WSyXh*Ws9B?!nS)|zInn>CZ<qw`Q}IPbGfBBQdlDp{O~*8MC_u=
zG?!3^GB+R?5u>tNHQ9jB)QojZQRyg<boD#w@Y=Vv`R1zHEBUll*52@@d15?r1E*n|
z5;<FT35_|tE<%Q@;M&xuDJ;UlQcg-Ar8bli!H~pA#4L>#fct}I>BXZz>b-{FngQ`#
zdO0$$f0TL(k_xy30Y-#@-}N7ABDU@pm2K7Ib;k>J7Je+_diR&<#X}uLIe03z(ng#Y
zwotA$2>3keYNTRoC&YW!GQSuzn4&kCScZ>+Wa}Q(3PunE!bJ@Nm%`}?2`@T+y({U$
z&5!in&$neKu2_0fk<&W^%1hHHTj7u_jEJ{}!T=J#;of(F;ud;nhv%^jp$@HTYvLNI
zCu5hwS*UKjc<*4TOVYx}Z@9GhYj-=ML4JlC5eGgBA1MuIcY&L~X}yItH#bVOmT`-5
zAHOt8{<0H0?12pgYWQY66fm$+gcQv1N_ywRpQhte-riNS<coCnRXV{4<54IKhhNiL
zqqG_C-uzWj8bC_18!o60g=0Lx*^pM9VK{Q{m>oGr0MSx{2kM(%yYwPG{QTz%@NLJg
zG=W2+7>$j2V!;J-NVA*H`bR<?RvEiY@#nYqjXutVLMiJ(BajE0zPftxnei-HM}ay}
ztQlzxh`xo+yIo;GoPpGcd>AC|sBAhET+28hQkT>Vr|h!RPPj_W40YNtyR+0u=&=5A
z+Lw&}SbZA|qNXV=k^Sgd@`8Lif_8T=ZNTf@BayFgkvN|B_wzCw!D+p`s>+$TDz#Xy
z(Mi9gpUQ0=p`cV6FO-|2?T6;0ixx$CE6Z;dPg#tE5mx;6i~xlz`y;IGK5M$VylV^#
zU1>$ogQIbC&u-jm#2Oy_a^9)Yc5kJ=wnlbzz~Z2<qfVIKfS2Y-D_G1$6IKZ)Zh42%
zFvAhe+seuHC_k!;Ao?3owVqUc7<CHzI+laoSm}k1HW_IR2b2tbWFpIjPz54a5pQWo
zyt|GXfD9X1SqI8@UWsr;&^MRdk2HNXxR)N^{zNYi-q)6A+5$8yXRc5GTx||6g_DX$
zf6r94WIW@?JQh9oPboX_Y_bj9{XyVVLv$jjC{3vj`j_?2*4ydeeQn=8cuRp{KuD0&
z)}q7ooln~;VbvM^)u5eys-?Z2npKevoMo@R9jI21=Q)H*m?d-O=%MC@09iJqMN#HO
zHY^PX#hC)Jt_wYJ1drS(C`IBYivg_r$q6E1U6OMR16dl7V?6$)heof{sPgDCQI<zE
zi#Hs7P4BP6mdJy5)AeutG(G#%=h8QKw7!6Wcklz#+?psUj57esKuI`*Gu}r!L1#)#
zj@>v0T7EhtcG9bLaFs@t=KFChsp>74D>~>zGYxWi_&~VcOZPtguj$rL{zmCv>X~;M
z=#4`K;}leBUJ*bL2ws2$<=PGh{#<glX-#()C3}n>cyC6dv%a+fy%TeMTL<s{T%VKw
zLiH+Ra>zz!cCukyl$?`pZ9Oc@4EZc?E<m@Arja;GhPGszG4LaP6HKI2(#BS{i5Kzq
z?uj7iWkwM3s+Bx)+zulO8UGg|?yKWo`rxNp``~*v>6X?+I4BX9kqCfs&oMp{^|nyp
zS){>JJOFIB992Wz<u-JNl1f{1((2OW8m^_?I+(RFs|loLHs?af;UY|gVVOg|-BS-N
zqMMZG-VMr0>ctbDVW-nVmWC*+v50I<=b+aATSe5He>E)7t>Q9H1B<%)I8R3l=tpmU
zS4#M1I_NXUEG?_XOUh{SvD?LYI)+h&J<k(N6uYf1BcG2DEu0@ELAgzq7S-R=G%35s
zdOGI)>HR-x7VC4ZuHR64w3}#<Y?Sxu6mYy~O4w-^^gs@4A=ag^o_ttIz00EyaXq>7
zNxItOFiL%l37#Iv+?)(Ny|`5v=HNyEw&yS`Ig(Lb4$mIDO;b1(<6$*QA;6-2GCQEQ
zsfsOdQ77R<Z=QFwb+>ctyV_)j0b%!*RjZXLpWiF^MyOf1oNn?qkzq1=2cC_BkmI<|
zf;VYbMgBbHPT<y7I}=IwkK4up>U~`IYQXebuYHuR-uP}B9^BBW7HX&{7X9*G2%`kg
z5z=R>YId?}dPK8lu1m>iBAW)@Jk}TXp56U}4w?OD&6DeJNK<mc*%srSQp`{xw1uY*
z_6~$m9eLDEmxzmBR)yS2G4rm|;7K~Y{oC~Di{FZNjZS1x8A<l&Os%L+FdQ-RsMAXp
zUmkg63{8pA`QsAqd_c@*1~jT<t?O7PCLF6XbL|b@JpZ<26q&THjhUUX{06|+?>^0F
z*K&k<Us2uH!k;m4H=5uUFlt7AZY-G}1EB%s@J70##`@^wVtQ_845^C6KkLw1YvqTF
z@a3w1A;B+k2*bt{oNe2d@$1NdT<<+ePgqRn)2zHjZ|LSlStVt%&c-q}-=0UMC78SA
zjk;hGG7Ly8nxl|KpGF+1_dGrL%Ri-S`kG_XN25@{U5+o&_E=Ia<IFI$w67vws5X^l
zRLFqX<f6{vVv`4R(@dK_*NEiN;6l3g-oFs;8hzMT5;<!?-X?&{5VT`?%WbIaZzZFp
zzFPCGA#ynlvId0qAm`@*oxdTwU1+%7w{<Sz-|Cq6Z)rc%WxWAR6|0HU%5By{KUfoM
zy~NGfiYJ72W?^q7M|hwJ)syCJWj=^>^zw^zqOGdw(VrEE5dnbr&0R%-zHkl$;t5(y
z+3rXxMbl8Cb4;a1Ak-T)j&xLyruAOl{dKx<dM6$AHDa^3M8yNXHNGPHkpiw-C*11e
zs2n0OY5Xab?WEE!FX4VFqF!k6{D5t{?`!>||Gw%}FN!LeiDhkJuU}wcq^FQRYq}|5
zRvNuq1|%!7ZDiz1Yh?~#q1SyOPKu|iqarSUGhKP>M`>{Ih71VHTvAfGt(QFRomLhF
zL?JotYK%t)M$c7?#cb5<YVr88jw$ax{Yx5trFTMJ^06rp_w^H$Sf268;V56?chw1Z
zo2G*frla(jNnxeWw&EV&(+LB=NTbJ}>h1HV8gx7p#nh(~$AN=uAirp1C7de7sQj`V
zD4CpoG4A%DMShJwP9=j^^~r&BB;&z1Y_wK~gHF$5kFV`dnTKbXfThi@HC-gyz<qZN
z$b=GuSKG?e^Q=dgF?y=1N=;euR(cv-)^QQqjWy&WO$sxuOLJYm$*z>=C>yQKunB-~
z?RE6tN^kfqUDNc{{m=N!z<pipHA3O!HJl0=%hMy!n|G!sTv<ee9NGwk9cT~Iqc4Az
z-ne+IX{$#zN;8BxRMAF}V<oc)A>=MYpni)w7JJKa2A_7A+oCVaD+Sdc8S@Pql0~`$
zdOq#w;Kb7#>H7PBFPW5Fny|)c3YbU?=iZe$Q1Cti%k}a9v-e(Ik{n5*o@ZvM?y71n
zfCd`CU<Mdq<j$(YLtgQ~7m`1Re}X@U&-Z~3<UQx=yW;MS#w=!lfd*Qu5}C#CGY^l9
z%*rg0S+YC4Dl$A=n46oMo4NMlc81=CU(XOqW2jWjT3mM#xOlvhZ)>jO;JzII;k+Sh
z{1QugIpX~Slj&O=m)&<|Oc=ve#+Gliej9GZ@5J69+eM(zlIF#mAsL?T_G2c~f6Hx!
ze+0*Tny@;sX4a5d=Gx4@EGFkA@=0E!m*LV_4o=*9_(xV=u?w9ZTF1?_4EZ@d(xAxE
z69F6!L|v4a;XK!@Rv_?|J>M-Z30t}JeoD9LfiRTSEWliPDv;CUzoRGHED%SO_ACHS
zF-~14PZWpJiWyT56LDyC<Hr5n2QgyCzehY@z7H#GK3tI%FZ4jRU9#(ll?vne#q`?S
zf1NfuYwW1tJ8HRpj86yMl@Rl{01NZarr1G>F>~?WVGbwjITvYfr>iS3(zn0+Pw2-7
z;EA6?6O_f6;8@*F?K8#$=dzfcGe9ShIdkKFrzqFK<Mi2Y{sT*QA43Or=zDaDEq!Y(
zN27<<oiqQ<@~g{mFXdq!8-Frd3`G*LI%Qy!-tddTrS$fD{{~)M3w&eE24OA7Vd?Sl
z3YcB8s>-wO#jmFSIiknOE0BXIjdMi6(?!*ZOD9rQBorle+xqEOTDp-sYwxh+{&w2x
zuF)dQ{?QDyCfn3?6PmU8)QrN2byXn|#lxXE+<5o4zDxb5pRj@MEA$)!)O^A_Ie%hJ
z9^x_lc{Yu<xLJ`5D$_)spMAyi8N2lFF+W7k^=HvRJ~=}BF_ax34@}X()d&bdUls|=
zjvaop;S%#6TzHl^fmb89Mv)m0bKrDx@R$0xD3QqIIg*hU`N<fGatOkdmeI)|cYaf`
z62>3`me@*xpmjppgX_}Tn`!m>`>BsI+3dKoCu9@#-E)f&*0DRis?FmhIAnQ^M?cKB
z_hp-p9adr~g*r6B7f>3VXJ4cjU;i52@h!fb?FG(Wi<&Vu*E!x{(mGpV&2?6U=E=Ne
zr9hu?^V{^`b5^6NK%hn3DbDExgHRguLhJ<u)qEe3k^K9C64COMu&xSIvt#7FtsX<E
zTrqIz7Uy2Ay-mj4)M{geGAs!gUO2Ub_SV!CIKlc?r#XY=_!Y<uggB2~xfy7G1W^>C
z?i-+1S}}R-k!;%v^kBQ*<#d@9Fi+VVvc(3jen=>WK3r-^;HmZZ5Q=`jOn?C`>MTOd
zhr=>FoVT&aT*xwarpIJ@m;2s5%G_2sQF2zR49C}eSe$O`VQvDCQ0fd<bsnV099^<R
z?}Nc0z8Umklb%<|#)`YFZHN-3IDZx@x*iS?kz#1k$nq4o3!zLlm^^>RO_`VP{EYJC
z&U4C$gZ%kpQ9yK6a0;}KU;G>{KW*s4Qs7LLVB71MrTFs3EgPoRN!#RIdl=Ee<Fct6
zKTf@i-(yEGm-#55J-f&=lb9^=G9N2<ZDvsRb=;XOBJD~em+*499_J^;>B6zcV~|$3
zGkx>BU#0XNy^tM-ba3w?fRwTBz>c2ROzEDLNY4F`wNTi3Mkn@uY_tF6yWcT-_sevV
zWzAd!3&QN#NAVk~qw=VSAdes~(sMsBgvmm`5s*l6QJDCnG`6?Ek<$;Jaa76jmG_uD
z=i1s(dazua)8))ZNz4=#Kl`TKNbu#fjtpO&vn-yP0vT5pZLeb%&anog5ELv5UD|mn
zkOls_4lCFTS$Hj7x#cOnm+@6#QRD-Muu284(hVUt3l8(dQ7YN1@bMV>CBFC@Fx0`W
zbgx^!L`!^=mbk}x#J&i^X0c=b=1Kdk#5EsYpQXlEQ83rTwY4uk`{#6h@o`#l6&h|1
zU3r~z2wckw`W(p|R*~mGp2dh#^nl~|m1PF07TGJvrBOFoeZ?M-nA0MQ-gTeLR~2Hx
z8S!N)!&xYo<202=(>^=IlZ`1yo~RjD990wSL~(d&60;sEcc_{kWx}n~l^r!g-Hg2<
zTdV2fYd=C~Twrq3o{2?nPsBSscnRZFln3dCAgKi5HaIa)W8<1p^uVc0?_`BL(;t2L
z8|DJO!%cUU4N+Z@r2U*5ch#%(Lvg4)R18n<rAMFtCM~}Bnvz0+m{&q|UF#h4R~8%%
z274hvj2VeQbW@()pw!d>Hdgu+oV^fwk^|1ZTD$W@+*UG<czKhi_nMd!8wr^~XHWT+
zh<R%D^5E1}nw+wcg)<xHU(v~f6Zu5Xp=-2Q3br!8^=G0X&Q!mN5zf7%6;l=BWTn@P
z#t|VpF0d!$%J)+D;yY=(cZ1G~N2D_l;*fPsBxzjeToJYwPLm1Qj3J~+ra+wJSGyS~
zl!3h`R2vhp9d|1`>5o}pPsrATPdL%zQ)DbkB#w8-BU-OHg~=F3^r=6_nI+y-fU|fM
z1fn-+UT6Spf0G8!{*?L;K29qh<x(jR=RkTa-CaOf=K~Z8Zy`oYVTQy@+EMPAj+r8Q
zWHCSd#;F7uORB@XRL3zzR*nrQx2?{#bm1Dx<LbNgKrT~Exp8B37j9(8d`*Ej2L9Fk
zJcRO)l(RfXLEQNjh#B4M8N<?UTJy=?WWTCJDh>Z?k_4lV`4gr~h1$i1hambGTIct(
zB2}NEgB`}69c2z7>yTFL6+mIIBmMf@|7&{EzssHw1T%9BoKggp+2u`7#K~)iAuNIz
z(+*XHIzl+OaMop`SVFEu`9wgzP09!Bq$h}KylDnr7|^QT;aKw2b)UmCjwiR5<f<L!
zZ@_Jl-pF<Kggp4;zbBE;cnD)+;*d9l1ZsI;#KiV~CizZ7@7Uc%#*s(z5+?@O1L=H{
zzW(Unr5h_x*$+aG%X>9E{@kD(d7rj<<a6m(%1sbs51-SGfx|$<7=vooCCWOM4EwHn
zIi;nhvT8gQLC?mBif?g?g&I8;Y`l@K-~G41W%!CR?07<SEK7btSerQRUaG{-t5{zv
z%9mFek!ikj(Lmh&OkIxq1>D1bP8d~5?vcQ;dlf>JHwlud-1}%IUi^KRr|CbzJ|}S|
zKs<v^W>WF#swxLVDmqoeJ67_vz)F~_AEt%1chfev6%HJ7sAA;M{$?8%iJu?B)F!Nr
zFtrDkjKbu1Gu)WnXnmDPfJIo*Le1swjDTGvJ;<B)gnY{|)`Q>k>14X?Sd0K)K%l?g
z6-o_E!)y3ckQ;Rwew_guC`RAWygm9TZ9MoLoe_?4u_vj3mlh$^L)-A3GoI%j4vGJC
zLS;aqEHcds<?_2CbR#)A4y_gq4391uEM7=U9@&1C9tb_(fyzb(3`ODYBpW0Jj!;`O
zHw8uu30ed3FwdL_oSFhD8h1|o+vt@ru`)-6wuiC95Rk1rg@MeZefes-dh1=hE;C$x
zfmS}Nw`^oayj;2S$|j>x$(7N;h*tRVO5fyA;m>Xy0?7%fFr2%g)y)we(K`x71}e;b
zEH7+uXF7tF^Rl{JdCO%OfmUQMk}r5R-+GkqVvoS_)ASj-o}f(xtbx3{gXgr+H`Dzu
zexEKZF&spzJtl+#9eV<_@`E-;@S)6N;lz*v2Hi7H&7cbPNj-pQabzgN#z<{535<X!
zw}4@zWr;q>a(cYAkZ#@m03_Ih6gZZ!;ww+OP@>|~IvvBb=G;-B;vY-)#Er_MHAhQ<
zJTPE8Rzd7!Yc5(vL9}4|%jv?M57MK}<@AD^3wKa59adx2!XRsl_{_ya%&L-)3@HXY
z%dh!_;|xCt6M9O~=q)`Ck1Yv7X=@uH#f2eVmBrSB^ngp1Vt2MjoFlSa4^XfuiTgb?
zIrsT{XxBFU8iqa<n}~EdM6!cY<n-bDpZ_)uHXkthh)2-h9I4<P-pWHjA)JF~&?ggb
zf7F|Vsp}t((TXTaTrgF-rp*&WmLt#wR35Dyp~C_Qd1`avN?LmBCvg^=ohP%Fe=I0?
zk}`I{$G3^C002M$Nkl<ZR9<b(Ii^6(Kf`9iiR7m3bsPhkE5VQ}X7v#-m4iaSG^xOB
zD&)d+PU-!Cox)cbd2no<Fu@E~Xr7qsP^c5r$3Np&iUeCWN`_&e;(F+}U{rG<XsXSP
z4D$26$%DWIr-7@IurDTV<$LsL+Gcf94DWQg))nCw*&{@t$y-z0@|QI5slOsU(~NYp
z^Blj;ln(%=1osUBgUBb!gB4dVKK&(n@>7=X@?C^%AW7LoZ$kw_Nk`*ArJ|C}X3zXo
zdCxtD@=;<|WnTysRIyY_$y9IoBzVR6)f04uhdL{1Yw>DYyUoxQrys~`gPP`ICNE|q
zpZc`s98#d>fg$d4$BCG>*Ktf_4gsSqs)hzkCfxXm2~WO50XUhyny$X}^K}0OyV7Yf
z=2oE*D&<iGgH8g8ctwy@ZsFGuBJn-@Pu4>sT%O!QjaI6yV_M=4)hsZ<etB^tJ>YJP
zw4{J_A%FsP)Qo?R`0nXB5^{!**?{lF3B)YbUD@C+`~Q)yEN`YIZeoo5$FU`#0+9-J
zoG(&!WTUd*C*9&bF`S-0Dv=Vfq(r&L1bf3P!jw3;iw8Z64SKiVJzq{Y-u+8Jacnyi
z|1LR}{UQvOA@l~H>fM_2L4k?<a{@h(w%2it{88#UNhsz^Yarx)R9@50Rd?HAE$&HA
z*Wcr`_jj2Gahw{rkO!rD8@@6%kdlb+2%O)g2U3fM67eu^V3t)tq3ryw9)wz~0yA0c
zED%kL+mF)5y^m7*hRJl6xaRYf6n=*=byiDW4iR^1&;qo)rv@DA$tqv$#vw0Eo`3zD
zv`O9;UOY&PgDnKGJ&gzyWS88UOdda^Q&#R(sPG^8G1!Dw<4Bko!is=H=ei7pT%Z#s
zkT9&qH-0R)-eHl(`t1)>V!u&Lp0iXuHpLa8L$CmuV`M&Uf)-qB&L#!+;h!RNW=Fp8
z-YoCgQ*C25DPTS3FK<Z8RXgf^2q1SbyWvYw#m271Tj|Q{KV~xhD(!cU4=HmG0k72R
z#=90KRf2k9N^$3}8Gi$|!yB?;1<|3b5RAe^MQ~P@*;rsd#B%=yHx@oj4?q5IM0r6h
zhq`imyh6)JyUn=gksv>wj6e@-$eSAl$;*>Z{voZCx8(uLU0K<r0FHh~r8#0QB8K^x
z=h7``loiOtR1btsCWJF*!7l+wVimZBa5-Eqqmmka9Ea0q^WekHg>>yr&b``R$8#l0
zBt{$@5{-NeW6Gy>VhwA7+P=>h1?E#A@|CsQXNqa=`Iuy%5^XN$S8BMdkiKe-y0O5P
zc|ALzY^W;nw#uS&HLbt%SKL;($_c$*HpS5s3UbHQ%M;%M_9?<+SR{I9Q^J(*!@h}M
z9mQfVBcAwn#ZFE{A*%4~GIpbATI6uSC$!cRC-p9J>w71T|4;-nU*gOywq1=Tv#`sU
zc1~lL*NHfY6f4dWheSUAlGRuL%+S^Sbdh3U*+7t@!vcbAc)POBqiLc%q?L-+9^`~P
zOw4ZuYSIgZl%q%!)2!YBTOS^me%E!~G`Y0}h4z%Ww4DpL(#oBmvhCw_a+D8c$;sq6
z8M<Yo!mMBm!lyON^I4vfmqr838}dt9%gATk6b_w^W~q(S-p1T3qtoIQ_vtCOKKoKY
z2D4(yfEJ~X3dD(L{a`{EF)I+Ou`6NN6SDGJx^VqnCO)sk(GxqiBoWYYK2{ZNw07(0
zQ<)GfM^XE&B;XwI$cHUfSBCX@0w2^zOc)a;2LIh|$I<2+Uva|wA6V6TpBy{sZZCwL
zBjyzpt$RMTY1(VYqqa;>q*RaGu#t|Imk$bL<9^!t<|9@vf5p%hd2`VKUZag5V7u%(
zdLTKknQoTnSh|g3!t(%TQiKAt@{99jEE|+GNA3?O3(w{9%Gy55!!O?aJ~t`fA+1Zn
zV{%#?_!y}ROBc(@GA?{-{^i|C=|{x&=NwSL(wuA#D&R})C{PX>uY_;kb5Ov_XGK)v
z@Crekzpb)$)pV(BR91&Yoa9_jm)`twdf2}}wPu&IM{%P>6bi1938ADg57+@%;5_+N
ziD^EHpb4MZegbEsDolJ#U%{9KjS3|8r9|(E+Y0+nX{A3&4?p9s3{I*|><LkMh<R2d
zzR7!?c|d870M!g=(r*D?-lJhuX0e+eJcsi((wE^Y@^JspoVweiC*pyT_M&R#DI7B*
zTrS?Ce9T*R%k=THv|8gvz*7Ipo6sYsME5;nOrv_jj~|E1bP{h{$sV1;;|-F1dO!Wn
z#q@|%1FpUEbHb=RSeQWs%OP+i<ATbZSojHm0l$352ccSXrYJCte<~yk&&h?m&92(F
zJIF+rX1u0-V&K;CXecmV0i(u`f%ckMAB&rz5SR4cdY`Kr?$U~6UWAiUcQ|rl2jQUj
z%}scM3Mzz176Vny&#)EzweZhQGyMj-!mor*BqeNcRiQ=p0ujEwP|8z!AEy`JF_Hf8
zPsHQi@K8LJK&pnZ2)w@%iL__JdP1bhz;Z=Hfkzf{@4=0cgBZSIb0ABTpMCp#Zi0Qt
z9ViZIkq-iwVaHquCAp#`&8w!7CUk0iW$y$124WLJMnT}7%f(B+LJ>q`gH={cl)vEG
z+TP{2IJTY5gDm5fw^SeUS}2KKGN5v=Q;Wi_zgo)~p}?+k8^x>HJ04XaM%*XzD5%EQ
zq<E9u8c|y7QBj~09Z?^xz7}icR#j#Wcn<{<@|C%dw0f6y`yX=n9UH(HHR&s`5e^<d
z;p!hJujAIj5FlBIWT_y|!frmg&1MuzF)17phji*yLFU2U2XB)P32X+L$#Em$Q}%>>
zNiU@Drb1fnp41z{7kJggyHSkMe41pz>)4Gr__(uN5ghwIsy!X{p0>aIb=rCIXXbM%
zMOfv(!<<92qGlp^`4+vcs8><g5vKG!BD{Xhr{u5@p?o*rGz6lTS2qX<Z1GCDssUki
z=g8!f9p=q8x7n%FSxxJASb4SjCP9~@^Rxh$g#r;k3_nIhzAR6AFtv#U>aW&v1}ISY
zW(q2~F%+Cohp<$$38pL`?fZOCz)DCF))il@t)ydP<N7n~P-OFf@$}Tcm@dD;Jt2$h
zh>3hKpXX0GgypI&Crv|UD?k(^@$k|F51ID7LO|uAc4#Unhq0<900^rXwh2LGqWZBX
zgw<E;3s2Jh&$w)A%M)wMoKF)@AW8U9Q=>lWe9T|;9D-D3c+JUVFhTi!_t|gK+QKuG
z0ty6Ldv9MZD2u@AX+*-Rba+CZ2e#%!xQJ#R-#(F0^BrNQ{Ro?QkwzfcDCP{ml#MLZ
zhcEI*M)<_V7d?3B4$F7pr5z{uA%8AT0*~;du$jYYDv<Cm`J0Ac>waPs*hl`4HfDxc
z<uQVNA`gR4vCSKQ3fR{9AQZ3?`d~r^_)}VX3IU7)rIH7s52(xohp{f*NmsAGo;J4>
z*hP7SSR#_bqC^TP)sOHSPnAS7#DVQ04YOdZ<5Yq&r-1?~tyta77IQO<!gI{~!?f|}
za~5NL8p<vv;A7sV64sTyhTE{rgK`5*Wi7PW?bCG06)@8?1U{aRKL1nNe9USxCeIh3
zh4UmGj%^uqSw$B;K*I}PqmuN|=%!y$n7Yks3jFc-zz=4T3*?WA8{j49%(l08(yiCt
zPU+fPta<R*b}umlhA54oC7xnz;Wg80@NI->e@=x0%I-bn_oQA&6VFQWG@VB61;Dg-
zW(pZ&@>B4e_>P^nnZa^}7)^Whs~Jvv`5p~5^3~+m5s#PUgAA6IUX|BjDKs1kxqMUN
z9Rxs3cy_O)-n9?YVCi*)7A;7HH2z-r6Vwe5{6rc<$d+}UD7DEs2Q5iNp&7!p#u1o|
zv&Hb40+q?zXst)9TKq$c#E{QY|3P~4mA#N}@c{Qwq(v|h4!n!t6U$}}N^-i-V}ecv
zKm%x&qeBOK6Mn@}<_@=Qf0Z8n`5%*caQMn&(N&hYI0<RqqhePuLYSM7<zXIiuibQ?
z#bk^ERvo=cPegd6s!!a-4t*D*BKOip?|SNS(`D*8_i-_Jss^E@!55{E6aJ+T{D{mp
z0!D!LXA%XPWXqLvQmB)6lN0werE5I-P4r;$lD*yUSVcp{nD)+zm&#BvZ`JbIjacO$
z6fE}Lp<XGMB3LWZkCuR67)x2X>x111QE%Ev-5cy4{#WV6#Shaa%V!517vhPpJ6sUt
zEpxFy#NjTNkD87q1dHW`5R3;mdkM{_DXL2`O?f-9@9c~xwZ<h<vC_w38Tv#hG)CPk
zL0YA4Sa@!+J4kEYXKCZ}|HwT0N91LTRYC5R0AF$50$+6z@%v0z2lfpdvSP`tY9P;K
zYH&>pc0ajkg><!H)Fxr&&Ua3&?d&jl{`A+W|LOmmR?|azABgC_3ZojbgT`*V$O^)U
zen=zBf(NQ(fHh#g_b~yFFwHkeMeo9iF&lGnMWuG}AuOj=_GxVNZCsFkk0rdlZH|zE
zzR%Z~IDh-!;(is7;zs;}rk_<hMR}BDi+g_S+M0<Ju-JVtO)AaZX2>89{9DRx+FMSX
z(=@X;E2xT6dqtnBR3=5Ln0b=dE8tcNyUuEHC~rJeA?yHS0`z-~W3vp?W8M*5mW02#
z!617W$<}kY5~sKsQURtZfO$tzHotW{z!O5Tz!oNeqO~hPp9W0r_${PosrTa3ls@_I
ztcc~dLXSYF<sQLHwB|>+6^|-ECN-}SwP;8QJ7bzt$=}%#<p3_R&5qM{(`WyXRyIFJ
zZ9ZrIL*+p{=#-Z%3s9pYulV%GGV^Kp8*Eksn834ui-f|Zf+)t$iSb!<l}8|Rbjf9R
zo?m<ej}>sX+(fH^Zw<3TKSH!Wvr<5EHb^=vm?MvuOMV8hWk_p=sBM%pLjj7PO?zv1
z-b;@+S6EfUCPT!st9*Jql~@RDL%8V@JrP-1-y9+WC_qDq#@F%xM0(rl!tz%7(gPOR
zN73uBmxANq*^S3H_;}SSBD-VD-Rc*$FiXO)9s!o7;1e1k+XAYTvGtwP&0jkVUG>tV
z!1e1-ew|j94Iw^5vnO7WP!;w_=&gbff0RV@AWc2vT2SvXu@N`cqT~iloNsk6rKdZq
z9PCUFgq2t$JW!$5zRm#!_T!)Z{HrWBB*4Kl9b?u958j46vlO8Cxm=1f-qVGv-{-W9
zn;i4bpb}E06GIvZx7;))2Tjq2onfum86EPtDcMdSvod#J<l!t&)6@GOr^H^0#4#ta
zFGK~hz!*#{39{v%=N}?cB{H-9D1U<xnO=Z(6essN5Yi}JM}*?om2GhR=6C7IgFiD&
z<;7Y09KbY5T;=}&vGxp-dzE?dgg6$eMk9f8j~)ecQ1XKl{~mj@xp*xt-}nKO=Xc2@
zyb}s%&tzK9vqpja_-8-=Mt%;ZK-ykMgK{r}mGSK?1lH2ccmA3i<<=RlSjr9e7<Mv~
zl^{`p)I%pa6W2%glQJ@PgSovkWTEpUU0!*{e!Ra&X?Wf31|oSo9`6egyXc6Bqsp)v
zi)oIw=ryZx79n<*n@|IOR$IA$p^DgcXpMssQ;)+S|NQr9ZHdDmt6lV_9nrN+GFh_c
zyf^YcDd^$cOjQNqlNDWw?>yK5`q_W8G0}4_g!!BM9GH0N?k`Z*Y(Qo2hw)o;PAD)|
ze|BNLpZ~51hiE>uy^aagJNHhsA3UUQ=^8uJ*${T&F7qG=hCYI&^ehk}d81#+EYeK5
z6D?2MAMsH<>v!<WQ3|^Wu$*A;A%uJMJf684>+zq!n}q-%ugp~_hN36}IIwHrJK|oW
zeh7;Is-8!IZGz&8vsQh5@}xL>J)V3LE5~}<4^SZ9`>{_C#3VEm@}E8C_!V}{U)V#-
ze^H!}XaMq2?wkzlCR9%{*>JPq8a<EKe#{lg*NMu_mJWTj=Im2oKmOUze@YJbE&aCF
zF@<t3g|o{>Q6P+Kr`5O8C3dEFIAD=8Z?n`>sHi|f$SDSqIDE%DB+YL2IdXoHv8OP%
zgDwk9oUbsMo}PTl#58juY%J8>zK1RArpdBc1(KCWLzOgx9nzkmW|%|Rk}95fi4BTk
z^I=NP*Puie2aiyG3}HEeJ}t$7!OxWZPm6X?cV}SYk0d&wX;o$>YNNr;j^GwJxI&M4
zq=n1r${RmR>B_soGxAB9DLZJIZMYMrz#jD{Fxk(4A9Qz1fPEsg-Y*XYLR7@qH@%K6
zb`^6a>1JA^WyyhyJr#=zM(Lu`7(SytlBweF*a;OXf(o$E-$?7dC+w?0IHOFw5;u#%
zqAIdj)GZIW$oBawoaXu|N<)}F)wkez@)td&>fVosU;LVz6`!S*?gqne+qUf|r+!rE
zO@>~(mX%*wkyT|JTBEYZ(q1;6a&Y34ttF<**!$7<GBOU~ba6s+ShI%OT3!_jv<l=^
zDd`FMR7SD1-<gECt*~?B-E`r~TWNzcj{5y93~kF3iibC?(tPwt^^FKA8v&2J=P?1_
zT~0Ai!;Tj6u*7ce=lA}Y`d|JF+f$y#x~tF;W|AlOqWmZV-~70<TesOwZo@YeM-3mC
zfL6&ZLgCKV!!-Enqx9sPe@Tn|N4RaGJWP8+`V*XH$8hhMF+q+J7EhnjP_Rc5-&{@W
zzK=e=)HRQ7zs<uk-W?83j9k+IY3>o*JGIvL>`{RF5cO!bcdJ0oUWuM8M)D1!V&GBS
zJ8LZI{V+Y{xcBYeDm@W5_c4tcGPi1x+8fE^8YheA#MDF#<;OVuBEvx!doR-Cuh~?%
zz|L+q54yi1Ox2<exong$MOe-wtyLdRm)Agn+^}PH-$&d!*n5^9e)-$9+GEa!Gq5_I
z-z9zs@1lI;9W8!vnsaEO%H-ZJvtB6=mu|<De?_Z!nHM%LZZR+RaPtEDg_tMf&U1Oi
z(B`y}+r86jeUFC%g-@ovk0;d{>Qn_%n7R(xT3$*D3<ZF_5YETqy4%5pH_|hDA)6lk
zjtC4<VL-Sgw^Bp$;Gh^eCQ~ZJp5RG6R)dKOJLqZUKmO{s%rSgMr|C&rw1*M9<%d0u
zdDO)?D(1c9KPXZ@3|M=z>zw1~o#21O@Ktx~F>@c_<E*q#(*UFiqUlxJhoqPMvzwr=
z=>tT2{l*RL5$K~l>}hOv)>7xv+bOwuaOnze@<ariJ^eQ3sZ!vm<oiSgBJkF{{1hm{
zD&7`3N+Y2>F5LPcZE<J%Mof}=6JBAH2$VY@lIOVC<WT%45?SaivV=E1`*TWP|C$Nw
zdk8sCxaClhn8U$Zp`3^9`8tB}dt2(cwJt#_V?sexl!tR4oA=Y!7r#t9PxG<u9@TEQ
zE;>jB2jP_X$Ne6muk_>br41yacY$RG1>$`%{pD+EjfO>1iE#YCYUjjo4XoOqqolx5
z%J(7}0>7iuN=KR57S{1nKn8FuJ{Z9xxp%InOK<&UdOWzmu45+CUFPcw97RSYYqI?q
zM2LcIM7Zsjcfxy)lnMf&+@rT~Y2i`&_T&GI8#}&ToyGiv0<ReDW+P9go3D{75IzU~
zsp*kpxLz%89`rEC()&??>^$Pu!GB0sme?&%zb@yIp)cka!kCTy5*<rxzu*)74?y2g
zAdXqmv$OZH!QPJtOrEd4^H=Zz$KAMUPZPbTAvLpO`+Jrta2)czu02PomCiB|Tik{e
za5&24rEx(~2q+Xtk3Atb-%Bf3-(cdDl{P95&p+Zmk!-NnJ(3};xowA1993#I{oQr$
zgXyA7x|`o{!{6^xy8kCumZ?O_k%ndP4Iyvf$ghIZk2y^ZBY;Ma$7Qf?YE0W4ukz^2
z^z6Gor0({2sTW7J6V9O39*RQQIkDI~`kwR^14V&Hn#AH=>?jZ#6b@rvxPCV!cb_la
zfSQY0*-86QNP8#S`koC69G84YcH~LCvysgfi<7269)dv_#N;hP#PhKFtLf&OKS<9U
zfr(y;`zajKK+q_w%d@9YI$%yh2q{euZ&U>e>H%WSvz!!ti|KJ%r=|b+GlsDiocmCL
z6ai@(epl(umh32^H4LFbm}<$hyW#EqaC~ig@ab>U+M)x3PoSsg^n#D^BCfa{quG<b
zrd^)g4|U34TJA&-gySl=yXn?DKcvi8$;~?9ORuSBf@4I!1wAhXj$6LNDKhhn&%C*d
z_*D%Qhr-O-{T$Y^jAPYGsys*i4c?kVQy{OfB3caO=kt!-nZESePuXpJha)&Rt|Ek8
zmUw-~?xW=_&k&ENQF0^pLnCwO2naiPCExGIdMMVUF0#t0v;A#)@->s`FTMsMlk0(I
z!E(qwhfZ!%gy7Q*Gqx=TK3T^y`N1gK7wO3tzhd(IJ47$Iai=?7K2(iDTBR&<{7ic$
zrFoQY*0o&OqLZ1GtqDk1%KpOZDc$)ABbisoO`PFOK3v9a!4o$a$ndQ>4GI(mG3|Za
zI4z7WK|Jo{#^GCgFi{D|heq_Xm4k^|W@V#`9glWfl9hiB)&9;xfe>6(MCK84J9?Ef
z7Jrm3zxF?;=l}9~T2W3Q9Ub4_Vrg%eA+4otXs__`)Z1xB*vBYf;uKlh_1SP*Eca~e
zut9H;RZm+_|CrLJ|B%uT--5l|U2kZ6Dc(S0hNdBX2zOveg3!HQ8EoquHdZ;<k`D#)
z$$w7EPkx^+a#FB!G=1;hu%pM&P=`BMx+u7s&-Y4t8op6C_KLWVpH&Fh12)sRpe@$i
zS;x2&<OQ@{zw<X7+x~vq?z(x9{)cy&M7f#?p4OZy1?n3+r(v-lf9z3xr-5v`pDqVj
zDWdk73qM51N4vsD_maa1-0;_@_~G1|*(gv*=o=C{Amrp}>fTK2*FR)G$W>P2*b9N$
zl!x*rj{XkGS;}O#r00)?&_?RTg+>e=?J&q<ed*FxUfB93z4+!gbU+@)#I>qXqw)~z
zn!oZ#xE%IJh|z=*MzyCy2U7^eFnAdAF-zOuu=j)BhZi*wNz&!G8K=Xhdt~7w`CQ+e
z*7E!-Z$aEa8TPx&X`7=<E_?3P;!W^%?xW!AyVTP;2zX=}d4&O46!ScDl1?r-HzxGS
zxxx0FAnHZdAs2jS;p&yPPMj~i_Pw;cem8A)FS8fG30B(H^eAE%z@h^-iqD9ADw$Q-
z#brzbZyZ#4czWzIt>neDwD=-@=P=fT&r+9-d!8km)t|#J;;rDDU-;D!9Gaqsp#oa~
zk0tK?=(98a-q(Lf3*Al9$D7^#Tm~8TI0zDY4uvuSPQzHK?0NDUu(HY?(tz&fX7>uK
zy6><r=-uE2=a<CQW8agj$I39~Y2e(ZNwuTEe5RTG{HMh`r2Dy2Am**Euw(W^=DQ6Z
z6p)&*KnH<<Wb+!^Y<P3`L*ih?%dG!@xV1)`o?b~W-xcEV7qN^}VN#-0F;DWPK<l!j
zJ1Ym?;MeJMb}Y)T%M#v&bT2*m{Fh|$S?&>pvQv4eMCLb<^`b+aJZCjnkc3T*9VYW1
za=2r6=OJzz(O#F%U7Gq`6}3CjQGBPVfTQf}IjI=<D@T%Sy8C?bR=WHK^I*(<$P4CG
zdUGfXsw5x(K0gIp2s2S&FU29i{rqQ2baJFqS0K|Se{`Qn2%LkN_fWo*v)Z~&qCi=E
z<*-T-t9h!_VJueNyv}vEtM8-@j_%%M-Xo5@=)1az2nXSwQjXK!laM;F8%*F5-hqcF
z@)x|ZfOunup~o=R;2s^2zhff%(-79tb3z2VYAZ|;{s&HPcfioOG9>9I=Qrd_j%oMA
z-Dh9?6TK0J(7+{zxIACXi3Wy<?16M+`LPjB(ex}t2!SH$b9B3u*=GOGlg^E_aEE(8
z7{*HM{qRnZ4*By~NR>!rQ~I^$#3(RTCKe1z9V_1_@IHtLI6gFj3ju%1b?Epqcs?Mj
zM2aj3SqR#L*!RIk!nJqO%Jm;I$$Ayp$Nkp~b9Cb<4n&R3?Nc=(?y9B=35Qks<OD%z
z3xB!uA`Kq@ft~4`(!2R6f|Z3A*0pGf%!z;0SztItA1e*qK<NGKU()k=^2fBy`CP69
ziyoU=nu+szXTJ*P)R{jk4;6^l*SZjTo5K=UZ~r8vt3Loe&b>nE^}0L`V}h?(%QL55
z{NVAbm{1;jWi}XkuK>s6SE}CeKtBLfMbK%Bp#z}#(gq3oE7u~2F5*-aGE^1g+)SPi
zE~P7Xe#)KcoY2c5dQn!<a;^l=sZvHMrY68JJmk;{+Kmr}lAOb#XL5OoUdSi^3HRp+
zL)*@Izk{;eXKv=B2IUl84Q6#BorNdq@hAU1t#=-P2L~sXbX0KmKzy_t{8Wwf0|AEL
z7SIR|tqpn?)AOD6boEVop6M!nlzA+{lVI|Pb0MucF$zQrrQ-2PiSFk=Db5kPojMDb
zyi8=uJ?K{AweR^UAP*`Sc09orn|DNH$->;o%JtN}@m}hzyp954lVJ#xXoH48nLqV;
zA;=`)ivo#WfE*o@(>)GTWbIJ@+w|-ntFfMcj$V0M2|opRR+{s$m~n?sRh2kaK0W_)
zdddp0-sZRY;6xL1tScr+oPg#DOmI6*WAfD;i2BUs5#9&0y>u&eu7967Fis_)#}v5I
zUa$v}PZxIQ%^4~F)1+UU_UX5Q>N21vHmg%<SdPqtDCrtz-)>zaY-^oN0coD+&Q%_a
z%OfIUKSKn^m&5cJ&qz04{}~IjuBVNd_eGkxdTY`cMrjd^mDS|b=XDkP{J1~Jjd`(x
z%nZ>3aom219sxIbr-y(1FW~&B;xWY_0??>)8E0O+f87;c8q>X>o^lq~+Ts&h^-rTi
zv;!_#)u4DIAVS&1N7*?b?D^BAZL#keVSmq{7mE)h$o4k#8;dv6wKthOUt<Fyy^mON
zC7v`K%&nUU7v&SspH%$&r`U!Vr$CWozRNQr_r@cfq3^2Mbov-YU9Kur*qbOh;98ko
ze#N7G&qaZ}pBpI>8v+`{w#U(5PHS)cJU!jI6cen;dqNszGFQTLN0uYX?hXgw@*`L$
z{JrwF$6k<!&VxMtguJkyx@ITU$UH_sd3metbdQuzgYQU-V^r9AzRWQu4hu<Bg>Tkg
zeuE>@S6nMcW1or%C16=nrrT*XJ>FVRm+x|H`+(ugx~Bwc1_bXs07#x|8lDQ;ZK7v{
z0%t~n6nX?>PGZhVVAUGBL}=f0Qy`16EY6g3*=S+PS<eMpqSxO`t5<)R`W&|C5#KS%
zZY%gy4ahn6f*_V}MAc(f@_~T1_IYUiFLPejv+sVD1`mFP0^!c|;3W^{sD|R^$b$oa
z_IqOL#XHZx{S8BAzh~%*jf42<9%5GkEP|B@MK|VF{7&u-7J&ma<jUF|dLOGdewflN
z9?IOjsUYJK{fgEnhhLl0R0<qX4|FR01A3e}1tQ*!dN!JkN?v6p1M^qkqk-D5!&5*)
zO7#Xi1Z{0MYoW)nc`@C%`-}95yVJS*k480ar>;QEX-KvZ)XwdT?I6bWE5XNv^&;Pw
zm!G72pL4XyqUTZB3vsW;>^+cZ$dH;_FJnLqh2ap{y+8h4y0YxP4|*fe$6io<Gh)UL
z48<~27R%`x$Twi0$Me3o4swVlWt=Eu%RKf4?Ha3c_)R_u202~aU(wX%y|ZE(6636(
zv^O48mCN4ITHie>AVa!}h(`jKC*o8KUwdpQ<5-LC`a9`GhkGFm>)82e8u0XZ6-}3}
zQqP`+l?%6y$EoYpXZb05VugFipL|6R<k81CvNr<-BJ&@HpGxm{Sb^<h2*aMvePI6!
zn+JcH7PmP@9$Y-Ttw%4&Cx;|(C@p(F#`HODvy(PJ=Xv)k2Qj~sdLCWE$pdAtM^MOK
zN>R4n596j%ad-3NnaBfZyaJ~1-&xA)*;gRrbxgj6g366yMLtU;Jx{n4At27QI6Vwd
z6H*nChv3M45EMn+R(LyIf0O+I%h$Ol8`e3D^v#fu^jFr%3IrQMuoL5L47{K`a__<r
zPNsW{_eL5#`64}cexiTRz~MI!Lh_&ek4U`tIKBAuKc>s{aFzxym}Dkh=Z`?F69*=m
zQW3<s)xuXCPtlNvm=<5Tk*>U9+1>(8dYI9#vhh#~IV+2xx#))CE{gCJ@qa~<KC80s
z94L@R1v^7sx0i))6%h>zXBij5LBZi;2<8>oiJtlwINkdLCeyj*lwprx>LOoGg&?-_
zSpnscl?n|7;+a?>u;mpeu&dVd5*rJzUg)H+KmQ*L(R`f+U?`l~G7x!>33B7Jd60Y9
z?|sR!?HdnJAWWVsfCD~$?mr148&*Mlwgj)kk<XYwU%mSya7B4=gnwQdAhzOM;Y}X;
zSbb_Yt*tpW3dm<?Re6}{<5wV7oN3QN$=*;LQD+4iOnguPZMbO^P~<wvtFf4JJ2Mkk
zp_f-@NpHd|a;(MrTWRsqTdBXq`B=CaCt^lmn4PGxA0v7*w!ncH*SjJ}t5(0Q+vqts
z%#<Z-K$+zy^FhI!t%N9(n9x?}h4Ki5aAWD|#-sF@VXU2pA0zXbvxp<<jhlz*hGKmP
zFH<B_MOW`bu}@*&%(S>M9)-l!xex!u{QReBaqxt+Hba3h6HN^0Mi8XH@ZmE|My-6!
z^v>9uK&i^mS%oIu!;>;Vx#n=WKbaHKh5V>^m)0rTyD43Mi!#0xC-G*8=2YWve)4y5
zD{1=OnuAjy)4mygNa0NB;uqB;3Xc%M?D8Ha7ibA~YHv88U~=^DXc<m|A1y{1+=q0_
z*mb3CYpvT*98zsxr4a&y0;t}nM%D9@umoj}AR5HrOlgGGcQzsF5lvMu#XTXt+v)WW
z{&o6pn^tQtUoBLGY`z;%jsm93KnKpND3+N}=A_zq#|?+hwa{}=u|%r8W;S`4Ep<3=
z$}5j(9{0#otj1!mN+>??l*d*W#=5n{ME6JROy`8&khxp=ehV?#;K_NHFLBxC7?QrO
z=7GCV7zzuFA)6-wM`(7tb9PDk=J)?Ot?Yc07CKJSyTC(+byyHOIA0WePV8`3@Zx_E
zW4!W=g%^XI3Gx{`+(iuBeNdQrvU{0o#?B4u+79kf<Qyx%;{y&aIG^h~Zry$T2i*Iy
zaDx?goH#(kz&$~Wl$$4C0f@&kgSJ=~B4P2jd|M>~5oRzFG50Q{<c>11m|_hc%T2uc
zH~7aG<tdR)=Y6aS#HyW{ukluC)b5qlyjMh%EF)%&P5}wG@*WA>ejJ_x72OqvWjHH4
zN#tA_(FzKhqZk%A-s0k&v~uljE|*#(h{Bnzbl!D=>AJx%n45RZ0fck)BV=J_&af2g
z<eR|`Y|pSV$cnEVHlkJS&`S)rm@5Rojg>BQ6HD9o)AplJnDG7#y@2G5?#d{qM)Fo(
z4;nNH?EZCFG$6hiXFbTX_paanW7=W}tGn&dCG>1U;Y18Z)v_{+SfL1vXOF-%wfoF#
zCc&vNCCv_HlFKEsLSl%ch(g(M+V17soHTIdE%d>aP#aRxQp`C8PX5pNE()shjbQE1
z%oHf4UrI1K@<Iz<nFh9mp5}jY?wL<cBE29;u6ietT${#WDWKT!sYF`HAJ~JIZ6`LA
zWpR?cT<YS@bnV6m$Z3wc;H1_FN(;(Xciz$`9D5wLUMm)hqSuZaJ&)WG_q$Xftg{%0
zV0<E-^5!!HoxL0sqpk7So$gNi&Gh8qXKBmJra0!ro{-Yi!6w%hX|`)YkHU<+XMr!K
zwz&-(>e3$6BKNO<{!g^jAM<RWbAlS+BwW+Cr4K!#&hwKcH~!%Oq$%bA^+gD|%*u=f
zE>-g3W!`q^L4l`zio`MP?u&7L#*+k`$9nW)C0%`;$@3n^)X-ZhSVfqKL%hH_Ao63*
zBlq)`Tmjg=&oKq8adVo&a#P+lLr?ObGwC+^{1m8)CHDmyZQ@$s)0#*AsS?5|#O!*y
zc;mzL`1vYJKpCcS$b-{b1?A9)E1-4|)H?%*e{fZBDYO(wp*#@0(G@q2vF0(xmyN5(
zxf%qXb1VvOJ48J$Zr0c@SpcuqrOkBzD|V(Y(tBX|X@Ia+?u(@%T|MOz-1^`{aCctE
z6wHMu{u+mi&e4;fr$^uZD)nD{lNPyD$|KK%V5HTFt{dO+HewT3a-IpQ$EXqZ0Zs15
zSUNtyk7c$hK0h5)WEd`X$n&C0=1IUE%1UZ%IkdI-T1wa0IJk730M)%8k-Ygg$37Xl
zDKu>rLxgMlGaCi!;rc52$b|VJ_+Ylw=Z}@SV`eyVsV2B}_q%RoP4SO-0igXkEee#P
zK^o+xuUSmg=paOD<q(dv(;ddT`eC|s{YU9Jb0Mzc>GoWerI5<Ptb;IR)}R7|XpXrL
z*v(cky^s)ODwg1pI<-Sun*1kh*}1rZjJ*$A%l1C_?4ek?eQx?5JYcstdqTecCmfkK
zAzX(cuAx9Dd<?${kEiBioXMY)=T57{$-CeDbJ}|R5%VjL*|6vaLen)p6^9Qv@Z>5|
z!6Q^&xKMBv7A6Qt`~w@qHl9$*^pT{ipvh2>#9kjmdtPScZgP`x{lK%WrF4-pOjl4K
z+(78bVG+&rBhN#6nu_OUNzq6%aLrbJTXTdI7*Qfe2=_QZ$su!^u}W}IXos#W2L;@Q
zn~eflFqDz`fT2^v;%DC<_k`@+NH^d31!rTq>1-J>Ei2_7Oh{t3g?E{84Ve~0Ahvpa
zvVy53oWOWyHzD+EJb@Lx4|Aa-k8^HuM~HrGD(r8i748YS*u9tT|M~9;;{l6KgcCND
zU)TUMidUV4_@a<vr#TxE?|tz<(rWKstiJNxtw=VAgw?bozr)x#RHo6})5ZEQlQCY2
zE6$nD;hM9Yp@K?QT6r<R=3pspu{reG+kb_}4Wg|BC5r<ggo(n-&~qwMwWL)7weO>%
zz<E*}CC^8oKnkb>zFWm{Kti2BFy&2oD(g@fHT@KXSrmqhaUNvpX6mqOd2#iPw8h4=
z4V$zGT_<cq5Hs%8Szyoz36Bl2gIID%BwDrr%MvNz&i<2ynOO)EmP!R;kIx8#%~eXQ
zI9g;Pe37BG#qICX<FA<qdHiSmo)DdYw9Xy$sbP)bI7|(jahQyM{MD~hZ{us)?({w!
z>x+Dn7O?F21l)j)RizY9ai={$cYUak4CGAE{FAC#j!$S__Pg-yIx^>Y2EEH^VfC#z
zT_A5Bq)atLj$Twi5kPh;mMS$qE5Gc~{?18(^Qb(`^2sZZISJiHKQ0Pnfv{UFC^A$5
zw61w8BIDvF&cjN}H`BuUT~=dVNt@gov7_>Ee4PpPekc?~5eg)Ra6;gyK=2Q?1MX<|
z0r$fhajnE<1xulci$YqoF|qn61SrEgajbd|Vc%!7ABQTw_&ROh`vcP;ZY*@dTX;gP
zB3G|)!p*<j17m24yFRubd<=}Q;^>kE?>7&rZT@l|ZSf0DQ}xX%Jf)&8BrtQ&Bf#dL
ztSJN;aHVUY;wMUT;8nUV6J?@jz;N0YmxT?MZls<HWQCpQ3tU|c&RMsWUGf=6L6kgb
zx0ez<71N6JbZyO%Q{X80;>eNO4e-zkL`~Uzc7xo<CAid@T0Q#&4{yU_n!^g(o8J+j
z{h5gZ%7HBG6nI&LhSZSkj^8_vfC9-%L?OgykGT*won3kVZ_|SfPHtUVMS&nV9R@-`
z_3$5rwB_4*fRHw_8-iRV5=AQPgPSJb6?+I_6;V9GD^g8m<s<wmUDr^l2f@)nw~Oq*
z{)+t@X~m_tTeQp#n?+>A%WM}g6r1s>ZeXKeT6&tk`0alT7%L3dxj!PONB&F)39bxq
z&LN*-i*qQ<OpkdEas*PtR7i#r(K)aB3Uv6|VN$)@b^ngxw(~-)g_ZQ}ljU^vNB@Sr
zvyzTEtQ?)Z#~c;PFy?K7AOg*Kk6$Sv5n6MU6llt`kZXsLk4K5f0brH7=i8cfEJom(
zcx#{b982mg(8E(e<x$vy@>1S}Y_c2`p7uf%&{;saBReUWuD+YrUi%>Rxkq~|CT|s>
zMs$T$qX!a-NIp>bgcK%NhK<8)#^_<RD4280+w@&hoHz4DCh+%NJp}iF!(~p;-LePr
z1rzF952EuF3Q6rDZiQ!s8+nHYg7DVCFMpl-^gx8si+v_|sIY>D2C7oiO|lhJ=)iYm
zzqrr!&glh+5d3+nTU>Sq+|=lX80KTFi<{uHwXl}fUvu*OdmzEl{6QCEmok=~6%7Jt
z&Q<PDl{{7+?dz4IK#}Vu(?w#G??b-@IO!44cw&bJ-bOeP3Mk03@{k>}2+h*1NWR=J
z8Tu-q6xb?@%jufOyl<=^oD@bmRBnM6!6qDgF$!gcS!TNo1LrwRRulp-4Ik4m7v+zS
za0o~2;)Ey!k0o}IucZg+>8Bj?zVHG!@9?PbjQjyF_H~#m;kiVaWwE{I+*<pO#C^zo
z3a9!;^W8jEc`w;EX+XH*ET>yJ=ooP_j(E;wa?VIBw3><PBK|51z8qGp(g{C?7&kfR
z>i)CEbp36PZRb?w<e6rXy2>N>6Eoa!<VQe51(JKJC4(hQ`+nIeP-OggK66bTcRlQP
z;kd?oWNZFm;kDsUg#tt2P!(h}krfv1f#}7rU!|2EyU>{j>Cu|)TzH)Uk~KuvaCk!@
zmPL<mg}cH{0|WrYlO1OK&DaP}g_q}A@=%isLct!mMys5(V_9vL6n;HcO)YKTOHaT4
zEh}=rAb(sz8%jdBAg}U>xPCcsgOGLdeB-P1@bh1$h0X5*Mx-A&5Y0<TqL*QQ!3E_}
z6o`9ARGJ~CBlGiDzkFgcNkv)Za*KwWJv|;*g5?#-s6W2F*S@#<X6kY%CYyPPXnAGj
zfd%897jx>nqC;pSOR}Nx3h8sC_V*>Fz%<2CvU?O946MRU`JDyFsM~m$__h+Y=1fpv
zSQ1qkB0fThA~v#+ag!PQJrFEekPHw;Owe|jfL(hlUAgrm<khvb<%F%mY=LmLjHC7K
z1g(NqA)W<mhCWPnW+Dhb_(+IZ5JnC{aBIWe9pi5L>p8YB4u(}24%oZ#jH69HjUlOo
zLa>+7hk>^}nkCRf<i~Pc>44h?yVpNs@5jSW(h_mKEGkBVh1td5bUgRVG)=oG3Ma9F
zmye&<3wSZ9ABo^Fiz#t^n-=M-F#L<no0L@G6cay8{c!Z-!tHeBCU<^Zegj-rh-I^Z
zG9kJ+?NG)8mKnI^ayY_`r}$fhIi-xO9|eW%(*C|;6tGqtfhn9c<sFp>zw!4Gq}+m-
zlL8@3fq{G|vLIv$4q4PIplPK#bIy}n)P~f*%i>j!dB2#hz4l?+<lT>O3NjvnmPzwy
zRR~cjgwT~8>J)LF!6+#6oJwKijJe5{Y(;tseuVmt4+3>3dKSh;Tz0r$ks+x^&V%eQ
zw?SBsZYgbYXM9`>;CIZx6XpR5WS!mYOWtgVzxi;vavWPylvPYdn_uIJUu2kfF}m4H
z(0_I_>?P#VGM(Jx$#YTN9(hNp?etl`%c%id+n3XgJ3l4eWtI)7Br=Af&{S#|-OO(u
zj^wNAf#^|Vt7S-JqqXK0qCn}Hl$v*>S#MWI9Vt1F5m*)#xmQ3kepW_n7EYDm%MMxo
z+qw_`F2h!w_UbuG*WXU-m+#QRWp!3H^b;#fP(B?MP#A?=Q7j>Wsx&I^L%)Op3m5n!
z0<FS3ln1Mi6r%2qSAnR&A}t1M7;@@xPx_-TKT7GFkI@laJf$B8DH03CfQpC>9l&#`
z?)^{GQ^Iuz40oX<@-k(-fEloX7rl(q(=j0c##~LL>5sUnJgk1^VRmCh&bbM!fmvWn
zbL?>nGONZ&szZ<Ck`w1Q-zR@4dli@_a3riCu=}d4*l^cmjbH1Goa!)C4%Gg>>=Y=9
zqvTVz!anPh!Pp9$^vI2l!4_uQ^^R6)K?N*i<jPcRo0)se-Ee_%!@b07-$z9OTj+Hu
z>;hWmOX5BZlt@~8Gc8^Fe(EmYpcjG?LEsD+2Fhh_>%8z7g+{sOvfe9&T}e)N0CWtu
zR4wStG$r_?Jm3Zbwy_<u>M?nKapyaxHn^>jqfI=3kU=b-{FmF}3<EvCmv+AWUFtvj
zBMRhM6<;RIs<xy!@{WuS88zpd5Vd6_^dUclOCF+!AQ8-Kr8q)SqwuJIj>c_UCT#v(
zxbpodD;F~7T|LH;9>bSvtyXQ7d-2CBtiD?V1*8w<pG}ikl~Z}u;Y!${hmDIc@vdML
zyYHrbg!)yy0_qsv6*hJ8kAKt8odXGJ5ei~D=6N^nbpLUms8<E0LhDd8IQp*q#x>zM
zoc8-56p)yT3QR@U{8F%I_xSdw^3P%QUtpvh0qfz3?*HgqPs{KB>-6PE|6jT?xJ;*p
z;UI=jcDf2<!qei8eoK@o;=YuvW9tVrO%!qzTEGs`L<-_i0V+Z}DjqCeD=dN#CMs+U
zu@N4J6)sKhZGD-Ze)e~1`N#i9TD-7^`p6T>LUcMgjxO2$HhulOf1hrxJSF$GzJ=w=
zEEDEo-ob`cn7YyvE+-nHvZ^r*cn7}tADjdkcJ=FFjaj(?h!t0PxDaqL@9{K}70oWU
zNpAM9rTbe~(;M#n;QsS2rRU!BI3kk0Dp<mZs*rrb=+LaheDcqef2&MXfnU9sO^l(*
zR2hB`Z8oHWH|mCi^n>Wpo9FFPaErl45Y{M<aN}EA2R~(28KzRwF7IJ_Q*9wjr}|Fz
zXv7igrV+cDO#$Y6+H)Y_<N5b{+^qs6{Ufa@{s&604b-4ODY>Cjc9BiBVM>tlE{-sD
zM+E@W@2~>PBQdUWul8W^I-BzH^3Xh-V>L7KD7#hA1KO-V<w{$ZtL`xWk{cG(z?$hz
zGmAv;FYhR5qo*Px(FV5x#B$yR@A7!|MH+ni&rFoxLqQb9Al9_xH}5mV#i5DZr*7Cd
z;Wh-TJpdk(j62z#827Ql%cDWFA+yG(navTj&1GtZWkMljOaW89B*PYy=Y7f~?mWM6
z8}!zZQF%E;E)xP9zKSEo$`g*E0EhlLSR(>nt*MANkr48lJTT;gA;EJmS0yc(BZR~k
zobPbS@$+yg;el1^l_B;t0&SWoOWex4={L<jEiCSV;<R|<?pDs$v=pc*5KNvKRN>6F
z=CsVc+7Gs!pmpUH>=mc*E>t~^+{%*cY}3cEQw{8BEMk)}ngFlKzVNdA%$h4I>JE#>
zIE$7E^{@WOo{%Mvq1QMO?L)+c=jppY|1)cp*e^o=#5l%nf;7g7nZV!FDmq$|qgz+?
z?o_BaS@-)a3V1kJNvrQNc}~wmg{lIv@79{rpg_f;D1tt7WqlT2<TJ{)v2TUl1sel;
zw}bGP(+uNDZG@qAdD6A6d5|~{#@fdje{8sU-9p^ZIl(`|!z+U+k9D;6lV=R4Tjg%;
znAx-nWoFX7BoV0yo__^nhP3K&O7G3@vp?-FH^zPgvptJ^hKQq;9)Xl-!PHeHGVV!;
z;ijao8$!0^&<z~((b?qErR~RQ<NhB~`i=?ps|>@DpBUoVCLi~HpPq2|;ze#Cbb8%t
z9H?h89r--5pBjIVkKSKyy=FR+QT|=V>#&J4kXyZ#)Lp%s(v5dHWn~StEfELiR6oQ$
zF~nc>gru~OlrL1*?$a=M71vk_A7M-Q94>$PTh+ft^rm$LGIg&hvjYZhqmY}iciYDo
zNF7*#G!quA--k(fH!7{md8dHPX$wYPSg@te6}M^mwX}Bkr)lfsk66(3AZ~?quSC8>
zJa@f~qd7|c*%MZ&MYZ6K<m*amOE0P+%3*!^UV6dK^pzVwMZ{J&CoXKIXSl6%1bmMb
zTb%`RK!kb|Uj}#lzhn4kIb=_Rr2ya)bguMtm!Y~ob5rz{(l%Gsu2UxI;_G}}h!xg@
z7&0;L(U!yU6X7LFf!0fpdecMMcNx;`!Bn=d91^v1^c?o0fe<2|@508p)P`S&qKFBM
z^AS#anNS+zajFRWDv)u-VZ2Fhdm+&Jy}T3%HddM{xVYZd<1yBm2l?#d|A)%4!s;fE
z`k=Kg14bo){dvcb@JW!R)U$~dz?OSV?Smh?(piDEx%G8=_{Be^mG?eRoi%z?nkS!g
zZ2K?M%Ep)6I>_)AmEAg*=l}PqeF5MIekS5y!40~ioI}*)47&?|!0_QFgKkfE)|s2)
z>?__LUE&GFAx9$m3E_VPBzSp16q+*>#C+Kx7GLBwan>UTiBu*rKSw#{VW^UO%QrXP
ziy|p3UP3hArN=NTvvd0Kd*DSZIZlC7;O?tHn#gD`0LI<h?^m1x!NtsjaI|~6_HJ6g
z{b3q>evb{=-=Hi|AYo)egf?NVBo#|mezUzYj45%Wu1&9A#^s8s+~Q;YpxZ&*?mS43
zS*F|n_BW|_0fF1^r%jZ{Hf~FtebwPIDx2`GD$DtplJ-$K@1r;rCL_j78HYz4w->JE
zgA*we*6^bB2!PP&vd^WI%1He7<9I1x>q!$Y=AydGT*~Gda?EDv#<?@rjlK$mhDuf*
z;ekCE8vmj|^v`YqbHYy%^f}yw05NYi!F_^L$o_)9Ef7rJiaH^1aoW{V9OKs#u6@6n
z6v(Vi-enYOz&5>(UVjw@@}u<eNB@=k$6fV=Uo?61cx%2ZJdd?xHmtaE1`<wf(3s>t
z@M3eH_k<fV0<(B``$@XE_&9DWym6O#1Mq+T?XT0?!c(@0a1K_FK_SAr+%l$hSZX=7
za!Qt}qV0pqjNWEaMa*9r>Ig_?2E1t5KHgeQZ@%^u%D{8Vmh(J&2%yMy&i0I{x6uwk
z0kuO2(_pk5v2!6kS!BKt9&)%UPTU`O-7^ZFAx3*3PGE-;F-AnSVUS()fdeYIT6UXp
z{u`+;Mz(J5VT?Z#XDsaG9>^X*#{o9TF$TK*d=)5A@ibXQA;hv)?$uu8j)~WQn$~W8
zkhZ`3n&Uzgbh4U)j&?75M+UJ&T9@p8q_i@*0|8_@*~tS<96^G9U?=$^mrXtWj!lJ+
zzaKr2M_>G7y1M-+R%*F?GUNd9+}To}d6l7@=&u4qy2oNltv-R11mNV|{z6*3_Jh>D
z^K&N8ui}j|XU~g5!(1PXM#5~(bPDWE#eA)C6imqK9GYKc?CPEL!T<JuVt28L<zl1C
zCx_2z%46C}I{NWMSlv#yBzG&2J(P#pFykdF@!kHsvJ{XHGB3c;6;tGPEw?<Kb8sh5
zwDvdJB;VM!xv_2AHa50x+qP}n#>Td7zWLo-@2yice@)eNPj%1q=|0crL80v$)~~sC
zc-rwXUQ3R)#>N(-iwQmyi-q;C9H5iHW^zhI#?G(jRniP<+$eBqtR1BZ&p6>LW(J>O
zH-CnLmHz0E!|#fkIaO}E&vcT$@ri+Im}jvoaM@j#@ZuOgJBt;CmS(>I!mQf{bCG$K
zNNIIuqoH@3ZW@qh0c3|7&cK@<%34H60T*!pqJk8H+s|;X|KhpMXYxer@Ppp=bY#?F
z{Bhos5b8-_6$G>YHDq^p(nOK%24I6M`K3%pAlJZUz~EIoeM-tJzWp`v*eHI!nM48w
z-GW?}<Wb+8UG+=UNXVF1ZmCCmSWSxBA$oZ_Sr9Tq=@R_(mFzo8d>ZH}M6V4aN@S#X
z>M!;#VWk(+M$$?j_ESX+40)Y?n}UIe!}bU)6y_UM%feX(FNo+7PikLSJ;j}v1`gU4
z%!bA}8(6xKOUGZ_V0(S1Y&2}j5H7hSFTna*=-95k;8){&ysZYm6<5K(XYVh?{HEy|
zV6a31Xz?)t7Gv`{(MQ|XaDoKK$IC{?&v*0pul>bM&sbD8L&}zH2#L&4XC))VB*6hh
z$dY)R<01`)zRn#0N%<qNM9p{V{@Ux)9z{j_ZhN(X!rky0io=e>;8Cv=?eWU(omrv+
z=yZ^!2XV)bnBxmKM5|j;-PUe<E&=TSSOD^i`BYaj*_0IqJD;JqHhs#-D-o<p$8PZR
zatI9LU0?Yer#T);g7K(6P&2M+;K5%Z4Z`gq5e$g#D<Bwl*1Q@3>_FgpyvWL55evo+
zLAB=R)3I0cC{KYOT%V`++r{e_2UoM<F^oQmE<#DK6~c|+;+F2{dY76}q)W)yWk8&j
zjhMC@BLXv=3u%Le)_-b0*y!`x2Gp<oh>|)it^*Q(`*BSq;P?+5j!ycah|0)oacq%`
zb;_&;!4kYZuyk*#N!s{a+nl&+feakxHUfCyR>K%&C)IH<o@jCr0Lb0s*Tp4=u|0x5
zhHzg^o{dA`HI!0HHI(hrjh-+0ou+a`sz4QVWUuMfd{6pE42--S!!GfqE#_H}fWcbi
zN$klSx9#RQ(VzX}&l7vi-DylJ>Ffsou{u1IXs5!6+UV=@=E?Llg;$d>Jd_#@9>_0e
z5nwFRSMDD?N?jiM-*X3Bkke8&4({N#Ue4`1QJqPJXlAJ218nb$E&9E|(wTYoJA!}8
zEWA^5R&Vo5BW#MNaa45c=0liyc61+Ml^=w65})OFw)rZWPytei7q)6_s-Acsf-fes
z1~vZUm?|})@*jIsF~({e67?Zos-@U0>AOF3-3z^qJX#&mV!zW8+4f_}+18j+hZcH<
zPwuR$XDsWKSG+6cJJC72p>gq@fiOCul{}ln9>_kl<?$H4&jlQePpef3Pw;RT7cvfw
z#-egN)$BZvDN_%QBp~1zP1q-Jw|#?f1Ll*D_NN<N`nh~^5XruUlY;6yZMFp3UI|&p
zv)M@90wcnvg8C>(ct;c5XWb6Cb&W?W6mn+TU2f{wwpzxuDBh(LWiN-eyV&&kbhm{&
zA-{tC;0&lvu!%1c>Ev09Uz(<Az@CcujyA&ss^D*&tXJH>p8ye+Dho+1-toBBv~~L9
zl98>Ls{D~VXNd%fvuyolJRZc_{+9>`J32f3Rg<Nmo%9agjc-B)6x1pjWM2(EMCuM$
zVJM(TE5yEF5t|gJ2`)();3MN`YzEf??yYr$QB9Ty7d3-<$wvmNh(b?nqhsb*G8Il~
zLBK^9<C^GeAtq{j%CF1(4*QlTIs1|AD%~X0`rCp`Ce4?;VLZRxmt+6A!jAOMJeKLn
zADT3AqLs4T*~#^?L#xX7Ep5Ck-yUciQD;FX29R~@6rN83@L|=o+8=qa?y~p%Uk<Bd
zaaa!AkUg?N%2G#Dl6vU~r1k~DrJ79-6SeQIfiP+z%cG--Oht_Ubl|U166c!_v2umJ
z98Mv9n@r=NxIL;p@W6%&WLehz`Z0k26~_XZ_&_9`uvlddp*as_;Hr}Xq7G&5P@9=u
zbZ&kbl~Xhw<ubZ<C`TDLkWZC)pVx7iJOkbK%c6L04Nk)Eb{=Cm<7$C=UcWT2s@E*}
zbGD@wR$Jm_!8IoaSL}2t>vzx^({mo5{y{K)e|ZJcsaFln9_`iRGOtw3n}r>#aE)n4
z5kN_Dz=Q!tP5RiE^58Dgb@~Pfd&Jvwkf>c2<;9m27loEYyq~=Ge)DGdpP>j+F4YTA
zzCN5q7J0Wa$JB#BTb_TWr2SRE)=0uvQRDdU=|#<er*>svQCFCoSHnU5VX4Ns=xE@M
z36BjD2mXb}6NMbG`Bypoqe=xrK(;fkNpe0<G#h~gkR@+_F^!5FR`s1R7I(DZ@$^Fx
zt9N=knoh}PL<Qsg$GT4$7*Vqz#%tbQnBWkn*$z^GZeXAF;6s`vC7wGCr_9BO=M=sb
z173aazy2;wUL)rP!*xSR{Y2qd4f|!sXG7RGS&>R7uOV`L@GQv%%D4t4%Ub!ygTAu(
zknVa{g{a#7r}^jk!)2a>CDkK-GrEw!c3qYWi---)OkQ<FpPtc*cBy-1eKnyW0;y7d
z<GR=t@Hp3o{Bf523p`!X6F>Rk1Irgxpjqh&BD2^@$i1B51Dd79&)3%<m<AljU(IS(
z9$;jbExMESJ}YF1{z`0UjG#;rTQzYJ{sk8DPE$;yF^<EEg(-@UX{?cIKyke%!3X+Y
z$AT?Wxh!w&bYSf5R!kWa*ZV5CR(H@kar2KwFi5sVWj?5*r}y^v4A{xF?gNk^zk1{%
z2BTTF<Oo6aPfnSd1bnRFhh0IJmXu$k)hThK{Ho$-l$OXGE~pvs<4#RYxM<y-vSj^*
zZ{^fxI&fIiVWetDeoa7MP<fv1he%hrL)Y8cjQP~*TRfNp=pj`zqB!<kv~p3Q`i7V!
zDTy`6fV}^QbqyB9&L5Xo#pSCedxzw##zJarGyob)A=dKW_o2A=rxqwGe3>$`3+lem
z3x}`_Tr*MdUxKiL3O*;32dAawk9iTgVcU<=`w{JwBH?s8Xz-v$gP2J?S{YOWEZkLW
z<Tu>Pw)_W74!Z;QZyy=6j)H5*o`Y30W)jB8_#uuOloNr}&~X7R+Ws{mMy}JE5~?R2
zHi?`u((J=ZVgU=}auJ3{Q6Oc0Yh4;JSZTk88oo&dL0@c+5UW7LVm=a3H;RgSIr}Ly
z75rD8fU|SpW5dli`8A#P0jCPB{D3_<nPjylBdC@-JYW@yD7Vb#8L7HXu2)-j=*^uW
zxvmIvsPtl1wq|Y2g3L`X+>sXWe-}0{KPl&RD%Z7;#Vs!pGFt+`$gvez;u80qjp)E)
zZgeju_)l^rpAxR|0#Mc8O`3jmd42Np`Hs`OEZssN@DD2l{fuFL@;F=|PbJD$H$b&)
zs#{_R1UA(-GGOv0*(?t-GA0h4KlTOlGmb?V1>OYfu2T<1#pe_e3;fipvI_)eHDW-)
zkZjbj&YzQ5khAS$r9t=o!@MR_RMD*GXHbR%o67h}VHf}Pzz?BZM1s+R?4W*59~WdV
zy$Scx36zVl)RnMk@tK@{IBfj4J4t#ZAfRs>niqn(w(i*Q*Nt#ZEZAPcLvk$+0?1+V
zFqBsi8|1!p3+4fET>(nvv525j>x7z1(D9x_XXz9M)j7X|NUl~y11?ghmY1Xq#uVW&
zqD1{lo(3`d^)pBlfK5gH)Yv7A(_+i=)jZMO1NEvF%H(^u1Q4zW<7BIq3xgROaP2_<
zjC8u_eA}H>ZcAfrN?wSW77z%`<UiN;D>U2f0a+vHqU#6Nm=`N<)X!9J+hyN*Y*?ul
z64|nqJ4#$ra2U3^kaj7-a!xu}I?@)whA2C4?d%LDo#R`h%K)nD<rFF12@D&{xnuBq
zXhK!vfrDmb{@gRFG!mN0z}>PO=K8`IQp*6nrwDg{!l+YqfF{^6xj*n_?r67-(Jjd?
zOpjYk2ITS?`~jgkJ8^@@^sVEkMI`4Heo1P%lJ<aX8R;lvOMl|dpFCh@wY*p6PWnv)
zLpIYHFLRb4eZ_@W*_pk>cFRWN5Jh(!2{xrXN`1}z*DnwyAtrllWM;5LrplaxjuA{o
z*Kab?9qX1_E;rP6MswVMY%H29jLN%hx1v>%{$}v&r;Z--HR8ecT)};g%(7bnu4kiP
z<tuu;DPF=2>NVCRUM}arS*(_*FUZ9#^~jN_g@|qf-1a^eUmqvk-vnzN>U3`DpX2Lg
zPx1TjP31vcp_xnxIE`Txf>x!F8oh!<wwg*!mOyO$)p*Z$YYMtBU{e*pMAT*C!U)ZE
zD2hb3td>145f!O!DIfeoE<!u<Gnm~J;OGt}uKwh_6vs>O3&>afH37c|gy6PL7<HHh
z2u9F+)G2s_FCN355EbnAT^nz=a?5200TeICEfEZ@JhBvPS4YUkpu6hMyLgKIRX8Ql
zmyC%(hFZ2eWXL6F9?-vyCa{2?!p?e0J0?n#3c4fmQ^RnLu@>r7co}sbiuQ76W<d(O
zuwX1e!J#C?b_UwK#q|dm4kB$9rabasM3P`A&x8)26CtBXexD$tKq@YcZ6+FjU&c11
zw!c3oH$b`!k3O-fHr=}CK4muEiv?YFMcFTLSMbzSJXCuVO5ROPEcGJc^3q1qPo3QM
z2zj(nsxjOUQF%IeJ#^H<ld1A=U~G)~@3R4VQc0;79gmc*pcX}+S3s4?w6#E;PzF0N
z;gbPI&93nR_3!(4%LA|cUS8tAu(vSBEmMYZH%IFsHnNaMR|{%ty{0`gbC;V=Pu{g1
z-*=p8$&(>sWCTWnS_Ou|4vM!3)~j93&B@8YjPkwr*~g5^6K0gL^Zx0WdW%GqkTPkf
zb=VAF<c&|~Y!tbk3XLI|_Gbn0>fsEV{oE|RN(Q<*5jHNxjFa_mCK~Tw-#<e3_nCPt
zXsaqj{n<?uF^d4sF_cWcXTXx4LXQ>WaiGA-9wV#I#l&|Ulw!JBvG6u0YOciK9jvqf
zu6C8l0nXE8AQ-FJTnLYLq9vN}+;M(s&BEcs+sqe=2k#2sXpuI1C7G_VChaeaII_FH
z<(NsllxU;}uNKlj?~y`JJ7=a5*qi4q>wcx_Mc!Wjqk6OUdJ!g4LqSEN*ZldP<Ly&O
znJ88J_l+Si5tq50X`V{|ej!Cyya@ooh*}HQYp`buTl$xFCtO7Mu4JY_2_U&Z9p_x-
zb(m-8bPnURA%4o^D8;4|?icOl-kL^~BUP!9<X813v{I5H<aGx#4VXz0UqF@#7`-7E
zRmcpo;;?&(Ys>U;An?H0wm3us;mKLY>G<Qd!|`HJV;PfEBWWR-RYv!Reg*c(Nmy-v
z=xz=Ae$6qI$l!jVQ1plu+}9=&QG?RTmhap>ys#<N_$`r&<Q+Dg-$~eEH`r%Fkj|Qx
zmUxPFXU6>FHG;_(3qGI5f`T3?ATt_xRnRUq!g<=TxSnevZhZCtA|BSzs<Ox;Gv-k*
zfI`n%1uo`~AG4u-mjXUOwf~radKI;A4SATzH|Eta(+A776baV4Jd`{R2;m+28s<d0
zl(^s-0T9^9V2Q%&kt>$%pnM~E#8=(b*M%406mNem`m=1wgawmP@w=G&%lK|pv+tO?
zQ>d`HiKTyHyz6|n@nx>j`KIE|k;{D986t9s;J?NWlu}Y3KEVweeX{;u8sus|eQY-J
z)&ci@RmO!WVFEgG;+M;(=Ej15JvR^zc}uB;Jz<?KPd6FRc~ZBsGmhhY-*DgQ62a&8
z@)y+PeNJH~klfZDP*{DF;LxmFV>mO;j$w4}E<z#qEOOyjNR^2{Ve~^Gn}53d*Q)-f
z&0_PD(5}@WxzmlmT#(CNVE6Z@%;?2H4_Lu~KGBz3>G&ZKNsJK}a<BvuD$ZbRc7U6<
znIlQn_G@fe46A&73gqk)AFSv-%Y(ea&JVYjr>faZoQ2X<kt<QcoM>uXsXHeA7ft0t
z9v?Y^OOeOs<&wsa7uFA3IIE&@(CNNYjis$ElGPon?ZCw!VX(y@)b-sf(gg3z>h4^K
z8c>eJ?L_T>GvJ%Hed%|bh>Jm0S2%TlmE;(u{b3$Kq|Z?yms?l)_b+DE587})ulEB`
zs8nly{dv>8bz%H;zfEO*?s7x{Kh(h|`8Eu0o(B2YM<@`-Nt?;&qJz(hRojY|FIBn>
zIG8lG!2^w$N1tuEse_Ae`7j;|gCav7@wPi#_VwUJUEUVYI{#UvVrMmWn%m|WX<R1*
zj|lnwz(*(GGG-z}gDcGjabByF*@n?M^bJ<fTinSD2NlEgpRi!5`qrOM74fesZ}^73
zk{q+3;<6o5o*lyNB<nCX%%L=)5>B(M#yb&fi!|Ne)Keq*=U@`NT-rFyw~A7Bt?yRa
zc=2aUFpN3yYyQmU%>1T0ecJ5l&w&ZV-oGMb<|LQ@Q_fKjWqUrWu!Bwkul#_%i-+x)
z{OJ*b2gR6g^c21NmMsied6MIO8K^!x)WoyDzqE>W(>1OEnQ)@nfxyowXM?Z(*M%x3
z|M7rl2*{kyB7oZbsa7L8`7Lpm&L|2O_|eW`;h-PYmcMR(dIT;N=X!V5e<H7cOuInS
z{|5vtTE$O^+cyB7)E&}r7mf%@<IoPCGUt+x;BA+0sA&K7bbj3&g`~d8F(Lq1d-^Ol
znmS#Q6Yf3{SM1XAqJZ`82;B#l9Dxx9gH!Be)|VaM&fv5fz>r8h{XjW+iHdaid8laz
z>fL?^yEc5-kw$674WZD;TO#CFpp0*rmdcXIH04F@{{9M()8mWCnDa7XPB`9BXnmUA
zE`G;4hd!Wdn<n<y$cRo<l5;+dUyOndv3!}SsE<ySYaovv$fe6SA~aP$W!hwq*d*Xe
zd9rq)Eq?zw1|R428K^~dv}<D=-V*<BMw5a?%lJhqw~I>%w1{7oi2Jf!E)@8B)S&I~
zt*_Sk*~TS5KIRlw*nH3ssj9NwkMV?@f$^ugtPOSg=0txp62&u5$Q$$H;_mN*1Xu&U
zy9hC=S@vvD4#NJKtYJ(KSe0;!t@9k%MQp7GY5sr<NPh%iTl;d<{fryNwkHee$-pJT
zetLavh&ghnq!eM|)(%DMBHk3_@FP(p7;3Pav-MZH(yUt_6%Q|E``=fS#Xkj51^e~X
zpH|64mfVI^*#-IimErqzr?QEUD*X3KxMV@?lR)&(eGOyYsiHF-r@<*Ab5P=z#7Z{9
z4yldnwKQPSe!%wEap`u#yU(rbailB2oFmAiQ%|%2gOIo{9L;^G7KP_GaC58AN2Xlx
z{JWb!HRn~x5c7<GT!-9r#5wYS9LfEUsIe)>>1w_HRQ%W)sE4)g>wwM6u5&+oKg_Q+
zak|}kzB2b?W`{lXdO(ylH6gS8$dcQD*`uTy&9hYj2gQyd$|6t?<QyAnsT`Fo8r^BM
z-A}j)r>b!Y6O~fsD@;%RY*#gl)q5gK5y-q39=z>o!wBi~4&>LP0d50*ox)!q<EKw)
zT-zF*$tpHKzyIf!TfHwq<NdYcR;r<o=A#dJz0nfE3@z?A=CQ-d!z9Huh6Wj7%T5d4
zugy@lvXVNo2gAK@?RP;;w&tY<5g<^r%4K0Xjv4(wfo-u+ydUciV?V00uC}hYcEH3I
zs`o{lo?+H5C&aSMAQiy4+0z(xW2&e_dw2&A;rfa$Z68~<r9r&=*Lcr>Q$)bfLuW(w
zRnhwClE*jHtF8%;Q7r23i?q2}!LZ)jxvxwVfDy^;VDTRD1aoEbZLBFcEi!@YX~fYM
zi^Vl|{t)wXZB**+$zIPn5_9!@MdzN!M+rqjgjVJO3+{F9Hg)q%C^l2S)UFJESlZ2B
zqAUh5`=U@xe7xa626Fc48Fg7S_4$s^SHq2*y;9&Z%IqlTfOU(sl$LxIRo6)<i{F3K
z!5b8*KwzV#pf#;*p65|Lcvaf|kZ89KK;Vj|kW&!*4Tm{@0l@xK!tWuIb1^EwBjJRU
z3a?-nlShBhh7Y;4T~w3_9sJs3-ZS085cf=tX6Zagki$gL2##)d0NqGf28kwR|2!v7
zoO)Q)%t?s_4)3KNsF2A06~*p%e#-J=9r^Nxw*cih5<Z|ghm==@t1%!!56*u!+CjB#
zog%_<U%2{9k?0y*b`(^>__P|+Af#vtE34?i^4P%rl6IuIfv{=-_EU~os`B{B6oER4
z%e>$E@@EZ_Ty%a>3ic#%aL&_Zi7`7MBpE=7UG6uPZgZGKIhhR&g^s0>&<|13`=c<~
zfFdb*!ISYr*88VfMQZ<F9svbb39LeJ4y5XR|1<&KtmREav-xJXW`uk2x<h5X=OE(C
zcZc<j+t}J#J1Bk~CBZidl4f!k>KIb@!R4%2GQ%RCd~k#S6MRDnRxh2blgssHS*qoo
zg*(b1nnE0H*HV-3Pr?)7N}^f1W;oI!t;YdY%rI#U7tw{9g8H^2erD|*HD4P-gIB<H
z;N!}jD7q0+um`W=XIh5U?0(-=Qa7iJ7|j-l8n#!=J>S=L`bTd6@6!!$D=<Ybqu4wH
z$bVhn1UsYD+q@w<3q|$7!dC3QQ_(m)xkJnG&Zf1rE*=U$^rUfJ^w7U)x8JQxDRW~%
zBqY8D6wig93&BU({@@Yz)Jk}vxlS71pr5m=q&0J(Xg7^}txq{bH@-u6D_Bc=RT;S>
zkA4e!(5Ou`kZlbVYOIIJ=O&7|nWk~)s_x1qal>HoWlder+k9PrQ&m}grrli*fYg1#
z+F(MwxL}Mc1!7H%Y<~pl-Vp8njbdVVXnW?D(n}upu6t*}*-nsR{9yY2L>UF$SwPH8
z6gyv1(E9^WvdSz~S|s!*6x+PlA5!bguHO0-emjo&64Vgvtya6Wg>yD#=voi(0_m;I
zmyxD=admG!<xwQSoi-HUM)W1xBtU&Rot=+ps6nsx*wB@|?itvM8OjJWxW{L*`_9Ff
z1{U_Pn5G3IwNpxDA|Due;Nw`AmBY;`wpjPcRcnz0sE0vgi3C!Az~&h3H@1P>h|sL4
z`XPhKC-Ud1$`kHi4SnZc|1=uCP{l10;Rg_(0o?YN?U}#mCcZ3RnL`R&_Z`6{=)+h-
zce^0uTU!ZTRoBU?&W2NG(&G=Kux$!?kw)^h_O+I*3p?J5e$K;`ec9kT1PWU6Bm4Z<
zT@;?3A`y3N<8bx64sJQ%v;5^I#uZ#7AI4P!x%MR_3sjPZ7w4FhOS`?p@7qDks{p%y
zQ!x#u1eiXUL|cNBDi$In1|~Kyhh9WFq*`LPMjmhHY9wPHfz&f+lClyKvPFgl3;<@Y
zY-fpQESD(iN?RCJMRhuE!7KUv^>RHQWUPwo6te#%&l#mnsp{t%y(NKm&o7LJPt!cM
z+3;oG?s)HoS@gg~s|9@>OU7TCH_A5B#v=;GgjZfvq$>z%<&RjqSx}$5j8Gy~!PPk8
zqJlUarvFF1aPPLfN5kPmj{P4+q}o$CPM=KFEZ7oL7sHs(9Z#$|JZ2cmxx85&aD`Wo
z2D02Q5pF=0yqB_8mMpb?%g9;AB*8a1cjqYm_4>16CYwlbfeE}v4JHE|`-sIdzdla>
zmC?qSAhqm~oOp0;a|c@LS6kZB_Q6HPzvTtgF1SM}QUuheaYyutyF@w^(`-F%a(k=R
zgks+aVy5x2+5-H$V)>0Uq|<u6!M6MAE~)-@@<H@D3q5ZE)>k7fKcnGgqJbEp;*X2g
zd<*|HREKmApt*+}uE3&lb}3=<*mW04KSB9kfRctLCCEQ<<Jj~!XAkV!R(CRO@5_P3
z@3V}?hDUsw3(LKLIMIv^t-b6LR)PLWa{M>yO&r@l<0yCOa;aq_)gOfTggF3cWWZ~~
zzjT;;;p1!wWfh$?RfLnI`rJrEwWWGo(^JY5@{AboOVMUC-wQM|k#CVGoPb<J3a@1P
znx}@MUU|9RtJVsId`(<%5?HEWYXT*d=uEzjVSWE+7TURAJz`Lq&a!0zqBLAVngcxH
zT30{=7jO7%na3v%XIBAHO^shH4m`N0{r$#qVI<RayumY}dT@pOoLQO<)8w%jG{H5U
z<WufDgYDds9u#(4X#?#^+?dc$95YLd+J2c0duDUoImn}i?I>5mxeSGh<*K81BuBtM
zkXzeR?yF(7V<sex&E_So9P7-qsmM4+d&UwD#5fU+(7-E+wGDO2uE%RT%MK6T*89v!
zc7Fr{p{86cAq?;6UJKr7a<KCLiVl#pFs=B@q#@3`PH$M#VNH)mE348=lbCB)8QzM7
zkXjkM8q@&QaA0AEcylU1Qh>9Iaf?7-F_lg6<MKCy)%UGrvm}>6ecI_!A8FRX=Ncc(
zipSid5u5=m<`sS|^uU2z4pcr1`~KhF;J%5PPq6X*$I%8;qsQ>dPy{~{ou&$R4TolO
zTX^pZ0E*5vQl?;uAYN<z_{!Do$(tb^j;lR%aQjEK2BQ9>1D-=>1A=rksAL?j#}j|`
z<IheJ=g&W<UT-MaTSc~-E_{>*_rry@Xu{?z6X24zo1L_AN>;ghCPs3Xw+&?Uos+rp
zwF`^hk4gsKJfe^4<(zI)BzZc2j;+n0My4CV1#N{qgkbYaGKVh6x=HZXY}+&$IH*Dt
zqpVd%M3b~7QkynzI}NfDY3h2R?z%0~Wf`$?jNMXO6EG<Tl)BXh7YTm**T4|x9!Q=Q
zKJRsuue&2f;rQrz;m1H#Rx`&-qT&;1fb-2z<h+0uob`T?+m%vL@F)UxjN~3q)#l50
zmnzy?cZX#d9`%WiFLns5jxwr7-<u>A>7<Gs3z<ApiT;kZFx+PVgp3oDJA5_X(M>2)
z4?}3!_E8C$?W(EXY%oO>cD5@w9XkW^A$?XE^U%C~#vn&z9Asczp%B3ndN1@lRhMX~
zv<cu6DTE_k^T`1XhMZ=sN2*dBh_B6;YcFv9B%#syIN<1WPl!fiCmYH+H=veEcB6)r
zF|%O~9Gx9hQFCQeSqRnQBX+d<+}9VD4UU?rQ6*(@MC);o+0tVg1)RL-Jsdw}FXpTO
zF>$UwyRQS#q#JL2p|#l@#vPdYJFJg$*Rj~k@p`KrL7C7cMLK{>@DyzgQ%?9E96C=i
z|FAx~3vVMjybou3Eg#yB!YdETev#cInVNn#t$TS*q3FAJQan}e$PNxgS}SBYf&FuU
zY$7x|FQVC&J-^u_^|}3>()f6w>AFKt!<Oa;DYoU-T0;4Q$Em^wb<t8MzT}p^u}8^2
zdi;QCS=e*D$0xho`oJ%`{)CZCwu#*)(I~i3i2jZEy4#~v0P8sZF#)J5cfUyUK6mp+
zCI?g4+83Y5m?E2~QfMyX#<o-dA5it6xPZ_a>BaDP#g@Io-v;u?@s-BKg=&}di+shq
zaL9&^ERv(D^fkXq?;UYCcX?zAi0Z@s#15f9TldbQ1IuTl?%d6dLKm{29!F*d25~W<
zp-Q2s+K{qvF)Q==s94-?9YIu;rF$f(Wv)S;r$i>WG<<?;AcLRBCI<zc(-)Wmu;OlC
zk8cCDT9M8!+$A}l!UBw5G3ipJj$QgzmH(CYiP|o@4EkL!W#Rxvp*#{}f-tz~F^iAz
zGmT?7#6TBX0J|<~R4p4;Y25E9D?f&Ca7@a6i~gQAqoT)}l$+$*F|giHr;&>IXq{E|
zQ?)v?2|EM-ZY-$^4QPrjY(D8ePg$YN)4C9|9zaR@X|4B}f|#E^U0qXyDP&j@R_Y*G
z_c>9^-z<ZX+@tWm-mDfn)(GKZSWp+9uewDcJTz(7m}jn_;NdA^+w_-|)P9y>wk+gy
z@_vzwUv>E!$f6`{(acq-FBrvqsL6zEgezIfj-lba&%zI=t!N({Bb~b6{A->!iIAf(
z$?f%-s$Uou<S52WGz)@xTr@(cZ&PovmwV|`YVkwtJyawr$fAsuPe2ZM>rl({Ye{&8
zj{7w2IFpyLa1NLyO&lL8!ttbSWDI#DjOl;h|0(SJfJNpr>+G4RCc^aRNFTx#`6$Zd
zqSa$+QTi|tk!k;t)wKPTpjfbP>UHnz4pV-#CoWHc5H8Kc^n{sih{pg-dU$XDens`t
z(|A6+cODz2@ZM_KH4NDP3y6w1EgosMabJFwAdi(RqMe|)rwW8)%}j58vGn=Ls|mr*
za7WeUvFF|jn?qxgNWYB$L(de571D2P6m-aOO?P~@<tWHaUli3pzDdGI0G)5hj^=Hd
zjG1n6$$t_gbyS{O8lTM6+@^FGu;`JGiT5q#K%HcCCXl-O@<rMkpBo$MCN7_x6q~y{
zLU)PJ-mSK6z~;_49SbL=VNnTB<9DX->k2ze6t%NPCksM_g*Y#ZNlo@NNki=#7bF7j
zJjXxNp&VHRKV>GKDx{`=&JU+#0&PLynV}+SOG0&3?d9UR$AH$TEn7F%#}j#jM|5}_
zDKU^-Wh&F(>T?<Z=Z%9!Ms>B<^n($za9MSe(NTzjiLdMq-<JfYjqO@vnjRR}V+4HN
zy<nCo!!CU_BeT&17P({96(*s%B_}`kvB@qz6>S7Fxxg%~W0Kq<#8E<5$lYNE?v($e
zujw2%-shCmd_8Q#x2yg&mPh`fF>Z}ITmJ5>2gVri$N?RiJ61n7X@6Xs8G`~RqphsB
ziS+8C?2=0Y<`)Eo83q#R-;cihS%x5$^!D$n`2c(0H~WvPKSpuT`zL%UHJ3`=W-FAC
z<}Pt$fdJGR<)7LXMaOj>+R!*6PPvfuZ~X3YBQ}t{k82h>zB!LYiqN=9jGgs8A%x@t
z(Ry>VpN__M%PK`00H<ls^q;0*Br9BHxWIiZClxY&5=SybAkx|9I%L<@MJsSwrEH+~
zM!8i&WV#|F3Heo5TImJGl&sL3f~~<wyKSyz1J;+0rvUxo!i!sccChl7C<AVi9Z=If
zHzP2~1e|V0ANCQ-&`ODL$*{^ElO<$_i>H>N-Z?qFYJ$oF{ycw$vG8UCYzpNW7`g~v
zH9j|uTG$9)fGSvdGxqfQ`&*^KoeM6QLJ7$YWbvfB)J?zmP)QoB@pZR<_-vRf{;$#T
zRAv3?A05{$8+&3&PxpVbw-R}!<XC>5hZ7(aDd3O1Slm;^*S04ExA2zv2S8qW83YOy
zDK_c}lG9dpG+*#swnk@(hr)ok;S0_b6k`&V<7Ruk;&E%9rF#<<F1F(tP)3K-z5u-o
zW%0)qq4V=6OZx)`TgoMMWJwY0#<(@i8-gsycjVkn^j#E`HB<~Jsz*6J?T9baFy2{J
zhKP$9oFrX}Y7#anzc7-*_Z?_(W9S<H>v_C2A|`QY2-+KGR0?LVLM{h+KaUihA8r2}
za!fw)1s`4zTcV5~gn0RWKq2=Jh{WW|PmN^5sT$t6Hk>}AHbNbeD&d`pD%!gtRee9I
zkQp4_g(rCY0Ogh82i-LNaf-ECc+OlHL%Tcv->!djC@>>AoT4?#D8gJ17$Z0srFfdA
zx-kCz4>_#lF0gls5sdwpAUDgZDLsjXxIHSm!w~&0Lr6eZCbjkrqVtL*+n8MNL%QFQ
zKz`H*rJ|n5ki3|)2y$pro;pFeSEb3jdZz^J+Vg7>ABE(W22MC8><RJ=rN?1|L6|!O
z&NcgaZ}!8wDr;2T39X*T%lToZ=#_(B7}r^Nkvq(;@i;n*|B&n}dhlPX;}~F6V+xr%
zo3$Bt>myZsyT*Rp)yV4CL=EKWAW!Lf<^k5thFWrb7c0c|mgZ|e({m?|AFZ~_N;Pf5
z2u9XUbU*OzG@(+3-CoU0jtK0NqzBwLmy03oXu>X`Wi;LR_)$ID!dX*2eT_#i4~#;i
z`7|F;U|JDYhUB}Qo5OGWS(sXBdG_p1fBVEZdx*`L(a9P<;Iu9_j2@8v^+3TwkP%M8
zzm0k_QNTq0b$-HA2t=qA8xsV)4TuD+PG7-kcpQfxXN-<m!4_7>8Ng&3#iFHLg>N5#
z1J4xg2ro&$WMCRF9d7`3-5xop1&Uan(9dz>tU_*4?}Uh-p#t`|kH>O7v1GJTL;00f
zah|%~us@E8<qHZ===Bco3#fOHJ}bHhbb4KOcTyN$icDaLLX4}}?WlsIsf2yoMofp~
zovX2S``9MCUPa0#$o~&U?pdT!DN(29E5H9j_4XI7)L*U42Tipa2BLPH|Gf<iZcz+V
zW#|aB-^Zs9V644O8`>oz60GA4=lDONwFHuZBsORN<$*^bLYj(Fa}oT#mZ6hy`6i<^
zUMh2qd-4;ZuD<VC*W+2f=QeE3S`2)ubUbo+K&_FBJbsgX1tL#bKG78%vd?@!(Yxb^
z&ky~OML9wi+Y3ZXG*QFo!Lw=(aAf}9_Dpc~TD>dT=&w$&YwDV49AEv<15R+w4uMGF
zMtNm{>q^bsB8R*GuYngwK$auB$)4Gu^%+?0`TyJ3D?buk2qf?k+;3=5F=TC@lfK-C
zdXL<n*n!3sBY`zoPvv`nLr`4mBSDPyd~nj!m9a;}q}oE^St+mX{_i$Q+*C_8pcA#6
zB0C#{u-#_sA&hn<=?MmNuk#5p)ZGMI0x@9mh8_N=1sfV8csyIU?;W#g|5O!8s-jjQ
zA852M$i=a9%|Yf=HYE|z0}P7ye}uOA<6(BRK1!qNp-jQ9gQc;9)jz$^8UpbyiKdmG
zw8`3^hvK<X{9?6#af#~g>e;^H^-i!}b>KZ1>$kc4qr3+cfOhhv@kjJo2*UAhnD^;V
z;aFeLko`P+0ni}>sw<Kxi(f1KLLaRg`kIC%B;UlSoHfwO8?g9rCRhQ71qz(lWOFvD
za^GB#BOLWZ?}D>ne>zN%AqX_SrXAdu!}LKzR$-lxt^lpNgfXd`-pPfgTIU)0X~t$w
zYkexWcmGLNxDSpzL+d+hH#W$ni#5wMHVchl#wb@gLK-~6y!=V?dDHOhGj)sPHDWus
z^S!T(@wDlr{<L8Wxc)I2l)J4{9+x0HUfDWrTZ8<}$E_rLo=xjOB8HX}{y!w}UL|SV
ztu%=6abeAV((iX%=Ix+Gg~W><1;>en@@Yu1S6tqVKid7yD;|a4x@&!#t;M)IYlqm*
z_bbyT)~^e0GO)?N#MOcHYIh1GgU*ADdo|12j67&bV<l2EQ%OdTC{0-4fb|3g<!ND?
zORVrqS+(z`No{xVS(2mE-(|MHC!@~1{u_ccT=1H0(ZM#}xoJ+z=e4$YwpC-SHbt#c
zgxVNeW4*6Y%<K1Op#4+{t5_?Tj`vnBnT(#{w$iJ`RYjC7w;}Cw%}9Xx0cSQ7EPsbc
zZ{dvT-PLFVIJj0Ptm;L#bo!-fAI*}$SW+t<C=BbN1Q+c#XAhlBzEn1o0j&tjW?;5u
z_7`^c!N8m8EjHR=C+w-!y@v%t8R@4wE?8sksTw0m?ixq&<-1?j%F=L+G*M2P!CbNU
zOtjBsd{+A3MS)_^2J=go>=}H2fwe7HFMxzFlIejC_;ad8Txa+|L`V_#+JLPME{&gi
zRd4xPX&o+YwHv&+b-g;0zPh4&i}z?Mswik?OQc5=C7HY4ZteKB*L8C0@hQl2P~W7y
zI{WWIgm=^;C^)e$HOyv?x}r-wa?8L!UU5{+FV=c(w7vfz(z+$*!7Vu%#&0g#$h~RC
z#>A{kdn4JuCvN+CLf9DDkoqWQphC>(_)*6?U{mRACMDh+N&br4K4`sv8r{MozzOLp
zeI;;!s3GqN3mIc19o*YNVhCJ5S`HtE#91T2IR%nA7Dr42-g7q&1N$iMfluTIvEvwS
zs%0s~pP#7?NSS>^8a;-)tv0g!>OT4u^qzZd?ea;`bp}igL2NnW`rN(WI13VsO^G9Z
zj)CHHP&{5TWQO_zc?Qe3e+Dh5eP!G4(3nQ(kic?p@z`KZ4?EJk-SsX}ZGxoS^tO_I
zTB0pxPFioms^aH7XJqe>>pZ%C#I{??xU9DL4^*LHa8lbc$fYFBbRQljyc`lb4i+JW
z^1!B4@W5aK-}U|*Edd>2*ZijTRoQj)?w!$-syJDF??pX>-D@CmpPh;6Xe>wZENK~H
zwW@W4W5T8`8dt471-`u2-2_3q{h3m%ZXtM(Yp*mWH^~X4F)pmnPHTp#+a-${r+edk
zh<5vYyKCTRXaIJngT0#c_mQ86-(%Bq$Bqq^oo(Amium{WoGcg>II;fyc&CL9FS*u{
z<Gtbhaop&qkzaYHeL1`jwtS_R8sE&DR$y!Dd&L7OaSV4~kQ9CMRZ?8aycD^(DDS$<
z;5Gx=pL?S5b(dILx*fx~e8w8_e~k(#%2;Rxi88uz9Sy6Z1!^<A3;vYgxN7y-%Q=J{
z17dI;Tnd_10(*>Y(P~cpizbV2n=g)kCa4v(!#5i{CJ!DX0te&svNLEPlze1dnu)Hy
z=LUNTgl<!#V;*Ff5ulx?*J$|AQ^ar72dnKwrKF0b(A%Osv-@Plyfb>6DjBt(zzo-3
z#+$i}PVP1CpTKK`I2+652^_b=`*F?wu#{x2l1OH`ay!+a9f=Ef!++daAbjV0bWR4Z
z?JEY)wn0Ok!fZPe2P-m049sKK9j%E98d>RM+y9G*ch;Zd?ZYU63NA}7_uP^%$8#e}
zxh&^C*U8SYHm)wh!SU}i-xi4I3|{t*KJC8VsY$m-o9GgqbzOn%GtN!x+rr!IuB;M-
zj#H~CWkv8breis1eoN*KpWWSJkR|&_&scHz#?9yL#N`vO54`v3@{1VV_8{@%p?-V!
z?-IeFG`|1{?n<foXmSwjUUT|0_0W~OFKr$l8kgEH6&_y6PZ!|iglC8i5whEG3R?S4
z;}^298N49!qTj;60gUt>H)u`C&4pLA^eK^Q!|P{@R<z+uPg6s7$hvdinVzD*1_MXl
zhD2>oa1HHVcs6rlg?f2)yf(hxw{5nsdq#Cg;r<zWl_GZ?gJsP2?_M~t9(7ek&pE|p
z1lc%bVp(Wr=l#8XdRgvyC^Z?U`R!Poscwmy?f|9}wInU!e|NmDyXpP8xov)m4U7BS
zXbAlaS)F|$8$D8KDH@Du2rB_=-uJ8z{Hs<nAxMoZ;cl}B$2kS&S<za3)265AbGzl|
zvd{Z@fBE$86YKV_{kcO8OLDzZY{6{aaZW-U7L&2DopkUO;`5%eKEwM(PNvr*kv&3a
z|LnQ_VbvN!iVPUrkACG4X;659Uzkr`JdTW+ifH4Y_SQUpL67pfqG4%l#z!x#su1$7
z&;v8R1#u(bx96fU%HRMDj3v`X{i5P5vY`}fcG>{yeK_=`2+&+W!c5&XM~xqm_4%q<
z*BuSJ$=Fuiyc&9pMW|#LW0l8;fg^2JJ&y%lk(-QsDy!zpzU9FJfLA08A#B_9Z18x$
z?_ZXTX0gcxuOcnV5=RrEHs{FDat%CSfQd#Gc|h<qTfwmJT}cmu3jC8!Ygr%J)YbOn
zGNSVC`Fwg2KMD#wzxN3eXED%s?o`?9bNYoz8y+j~-S+wMn$yzrdW+ZcJi|LiHO6cG
z9MiGo=g~1S@#`+9P_zyNWM34WcQ{~!{X5=N65|Zc`1K~}VD)k~TVWkA92U&U*tFRG
zSow+A9MXNT>p1Kx=#iXX;DZ-ms-{axG*ojgDzhV}ky$PpN>1~s4vPrUIzMW^Z+Ccm
z`Bb6vqnscGJ3+;j!k)`BuY_tMe;-2<+aeD9(x!dIeaqAvpXg0ORf~*aN*dLZ8iK28
z>8DA3o;(Vr4R#R27qC^ur+s^im1YgU7I^M)L-5#Km$bJyKM}NPbE7hg90o}_yUKFu
zeD+R&Q^+%cdn{WiA#Im@PQ+mG4xPyDhZ}ukC2@q@3?kqFR`dNcXp~0gFy{R7w&XpT
zWQQt@Y)O1r6=1ucJF2m2kfTA0#WcPlKCFTC`LM8CKCmx}6LRMA@3aM)I0jbVaJ;BW
zDrK~ngXJqCQdjyfv2*Xfm(wYzzxiWz%I}p*e<C#Y3Cw*YOxB8dVDceeXBC#x5L|OM
z?R^x8VlrKXo{8djf|_gZab<98qtgb^rdL|4&MhoPz1i8;{F6@!2eyNjdw&Qv1f)Ll
zmePl`q{Pzwa1a%XyOar^6ko;$?uDXZl*vCsHFR3a2i@@7nUQ<LroTsOO-A+y`*qom
z>8wvD#zifSXfcs~D+kcjP5VJH65#1g+Hyx`@;ApdG?%|F!!@fphLHpY)6Qtd!V?;O
zUW)Ca>bXDoaUTio&O-_{Jnypx=9jb5^N*ml?m-0twn=MN<Nr$RTMGW8Y^O8Ni+I}z
zOpf9wLv=I+NmiKNVfNbz7sYF2Z%<HP{(?8{jyep8(So6X&N+w`I!Fr{xK4nm=Cf5M
z^sK$cd5&=^GVuH$w?ZxQ?%E5BaJEJAB0gr3V@^48;8Qc%!>eB-hjm67ws@=W&?9fu
z&u~>2K(W)*fE9?B{lGjA_(10_AzDt6KyC~$R5mqAZ*Qp-=@{d!38X>DyZ_Be3k`=;
zFK?vaWkjpP;nyqY(wsqu@jIjhiohZ;1g<gjLx2g;QY(Rlj*GGKVu9mP3ztj^w>yi*
zrj)W12Fk!>(ZliqvS@gU8YD~Xs#AbR4ENj&d2=r4=oMQ%Ou7q;<vM<ZyeZk(9YrB-
zg->K7-am>_QMHD@gZF1L8-;fQjn>ZN3-iQH2`M~gz&GP^{w>0<PbnN{_)pzcdL!9N
z=9a7kw%Xw{3vXQ`shTClw$)H<?d2Y%P-oC+&~VUY{Qan``aWgq)s;MZP^i3$BlY0>
z?cgsSRxGDL$yoam-S`me;&IqKus)9VPqbzZ;l15fe;$5FSRER1%>+o%yewIK63&0h
zG*i@VtHU(GhEuML!%8_t16@-%H<eFez}QdlInb>UUl?qnkOW~20&i^j)=_Wd%#AUQ
ziAYkxb4oNG4enBSW=Nh?jUn9-LRwsYq0B432Ga$3VBoRRl6Uo)j-;4HU|R7gPX#a@
zT-p`$o&(n!bXX4|0jVgREUO%XLW{)%MSNbV6>``tWb^t9WXyCz>0+$W09b;vf$X@w
zVdHK=A7ix&$E1g(H%WXt-0r%NB=vM%4p+bL%4~M02$CV$kK~j`MDM#IqmYN#9%5c>
zyk<eSlM?RIfu<KV%oDB)*9pV(gQz4JK{Q3x3>6vtCH|%+K^;qABS+X4rckiXrT{*v
zR8S0RK;EKkCUwrs>sCdM-E0(`&c3j+cV9RS+Ottoz~`M%;IUiN6xrfyk*KfS$@aOw
z^xd4t{fVIFcpl7H?z>&tzt;n*$O=#RevP_Js=8Z}58B)UEOH{U1g_=>#gX{(e}-z6
z+RfHp7+5XHN|V(^_G317$+l{oqfi>qvXQ~`^caavs%;>__Q0zXYG>+*Cu5{SKqwQ7
zg{!%HZrxy}2b7w~?>j`|(0H`J+W`7^E5C~R<)-D5;ltWrp~VM?5uAYCW^4Be25@G&
z4P?6*s@t+Zw23dx0(rEW-!Q?%m3JzFKPIyoI(_inE7j*(gP=Lke+@*RoPgE^`$5ie
z#x6h-?>~^XqMl)G$MfAZgVO24+?ZKj{?6Ia7V^%f%Pj@FE8?X_25#2G{$aL<+CwJ5
z-n2v~o{!d~Uh_BL?FA_RiaEx;5M=<pd<|91d0kTQ<<o9c;WNq1$eD%bZPaDSU2CAK
zwqj2@k5K)vTyHx1SUyq`*;g<GE{&vzZ8WT%nBkrdN-Pn93>FNHAppU6n>=gvPr(Ym
zqzE@Jz9L+o{AA1KGl8Y`PaUWgKqK=*f@58BB01>5Gh>H=w$Y}szW4u~B}R#@>un-e
zCXmXMXkT2@s>|oZE#<p5UqN1W+VAiwx?aE3VKLY78Zq~Qed$;Bg@DH*_9R@1^ERqj
zXNk|*7$FW?nn!D(zlOg@)ia!u=y$LmFBVU-Mn6ov)|J)D*T>{XjoylLXb))(EHz?2
zi!o`wyoY)?LaGqitj16Gi(&I<95yp;-<SUmBN7BHJLo2gWZ5UUVfmI?!Y?C;?e~x-
zW2Iapj<b7jRM%e1R~XEeMj=prw81?IOApHh@1jao<SrE?Ua?u2oxabc50tRfDiOV3
zm-TO0MF$4bF#XImDux-Mp?s11OSd3@dcR8a&e6A^$pNFMh=fZrdQ2&-IkIRsP~Noq
zNtDHv?NqM*DA6RvF|~H-^s?WMs$`<54hu3NLuIjt#Z<7Yg~LL}v`m3B*NG=XrTTU<
zn2NO^Gl`zrsFT2$l{mu;bw3Sr;d<xtD{?sMx#hZCWd<^+uH+^(L|}*&yoS3RO_k$z
zMIwMx&sj74$Z5}puyEpnlt56Sd}&^LLynDdl#vRDTrZ3{j3keloM~c@UN1E$cSJ6Z
zn6cp+D8wmlyczqpj&IwRH@m~QX>Ta8+fbVDrdbL2fy^wYa&0ugKC}rcf&&e>UJ9_^
z#i~vqd-Xdy4j9JhGc%=g^Jma`^e?pQ(@o18FB>ivvkN5OSw1R`i^NTI^7=K3<!FW^
z+(ux!8B?4@C>^A-Qli)J*-OZ*wM>9ckGK?=8r>22{tZ=R%AWH(G4KENW;-zs?uGVl
zsxDRuM5vur3nUIE4&Nrwjlz3E2RIBi+`oZIr-J344>fKlGo6|UuD(}A!GQ{-*3&kf
zt(Wf$r-a+W_`ZcC9`%jD8SddQ)0RxLB|UHU5%+@3WpA(Kf@!v_CU+uA3b(G+i;uDF
zy$X)`SQYwMg?rFfj9%>=EdJZsYhJ^JkIvL-MdH}^0pD?B<K4>0omrKq%kv`Kp8U6S
zQ56@y#9NEq`<`wk9?`$s$n@`Qw<B6=*)+Dv1l)GZm!a=$9H+e+J1v=^jB7jxc`6CY
zG)*41p(4I#&K9`L81zW>P<(t&30@B0-3#jT9irwYxo(~Z|H|?Z2GTDfAVTRE$z32i
z`F;q?(G~ZiXfR7OJCP4-Z4eXFfOqHAEWcV<RRa6o@12nmT`%Z?xt^We5LD>XN)k9?
z)``JhE%>G1EO}>{2bmxeq4do=g_d`|A2e^0FXNwo68K2Nh>TkX&(vH>d}#^|<9Y%K
zpe}ik-fQPbf$1M|ARGGxJh?FR*K3U`Bwri)-G6rNN|Ade$lyt%4Sv04YdXqP{l+4y
znmCZQ?5M(DOw!cwEc$9UOO|YSvGl4gWHvk+zw*4~mZSGhk;Q*-b{0Gv3$Q*rM1@O4
z)hY9dxWY7S*<0u64u<(dI*_duRNRJ!TF<G;M!ane-;*MapLZPG`*48Je#B)ZWws^2
z4p+_=Kfg!yI8t;asvREl5ec{cPH>g}*F9JMgEoh+|AUJdmhD?P0UXU~3UWy-IVxl+
z3<rq=T89WaV=x&N_wDd|0hi>1;3k&WGUTJn%NmX;dixMbjKLjkH7EYX0Vfq%b;UCZ
zh9wT&zQ!32`@%1RrZAujrF=V^&sD^n1g$=MQ>r<5W*ig0aZMM>8Ro4;={Jt+qq2<k
z?PGYzbcQPPl>iXuJLvw`JSdq9UUFP(*_M=#(P-cz^0$y;h6oU^&QgsBGBD2OjRm1u
z64zgY4MHd&W4V^mQ^OAM>OH^y?E0xlm@)n8z2cW+|CQd9zMfA&U@L<}?>v`XX*`CD
zbAQ4X&Jmn;V{_p3%bX<Q%Nua(@|s7u9pmx+&9SizkUOZ~>m8yZaU{rkm27^gspDz8
z27btU?x*72IVhS4m^;+Q=@lPrhU51Ws6ZGbgri!12kxuzvyxP!%O@Jdp)RWE;!D|a
z8!g2{ulkW=sD+6~3o|Q{EHeuh+G1OTvf>VyIyZ{(dTZ_$br{nCFGs-D&)X468~Jxc
z47c01XV<fBlXK@%a24|o^SFL|d`VDrkm$Ym#HYWz3X|J>hIuy~ZIcjHw=!s^nYfs2
zT03ZfRFFn6Q6YWHJK)!D0$F%~{bV!U?+`!IaG8?V%j=#2>bw_uzNs6gHS8bpi-wwK
zdbvTv!P(RFaox89{@d@mGAZCjRTjS}OzTV+IR{M^_Xh04nD-6ZC@z7+VF@HCNY$y^
z#IN$4i?iEF1*`x-4`@wc)*OElOCL5v`!G*Yk;OMxrt%;b@4TR&VA-H@QpM}k7zng<
zdUr{xxovDVf_m#48HlVia(=eY24{J%MsE3k0p$Z4{CP00$+eU1n`3lh?`}^ZK?W>2
zi<{u!liW_I0j?C~6tDpQfNO4LD?HVY-+VYh7AER!f5@#XJ%qsL9~i-Y*LjZb0h8GF
zF7ZX1B@hC4wIsOJ{{;^Ywg7nS*sMP$)X;M418j5VZ;Gcic4NlsY6?3A9&JNTe+j$V
zP@G}3v`v}A?=|KSZciXv&B{4>hH+cfpJBZI$$vzN_M-Gr(`O*kzEAw*I+1iv^BQSt
zmeD3S+SrAr9=4yfy~`YiT;CozCvo3HVb}5HJg{MoAD=+hM(gSeYbO2&{>8V+=8VRK
zu-1cLd)(mvgfEBwukEJ8tZ(iAL4G3sTMZxNZxxgn-&%e`ZAiZ6%b+K57i{-z0008I
zNkl<ZUg*r(?M3*noiO+SktKcfbSsk`dz2;rm-_d>_?30E_J3>ntz&m0{MWhyIg#U5
z&5^6)UuAS=5bp19xO~n?j(3&(U+Rxb?bKQxXzl+N@*y*PPSrvWeB4UzhWK6Q3gm>&
zTjcjFer%-nQrgxRX*nfxc=d4z$gKYbQK|nB&|gStYyY>DZ)Mwh&G5C7yAk90uRu=f
zxY>R$;`e9aiJWoht)AINo|v)ZfAsHp6?9@(9RjTspRJ%;%O}2=9?-(86Y|e3V{+$?
z-GT4$1d=;Defx3?n^^><t3TvVn4mgIBswucCjSmIWu=N-d{>J6Qp0loJAd@QRH(kB
zv8xh@ozz<=F*ZiZV>xV=dXN0VS!B!EgP5)U_;B+Q^}#Pn+UogZ<~w7o_8edb_0#$*
zBw=D*Rc@Jsa}>tTuuD2i{d4qQfhXph6X3S)-@1z|P9Wg|Jb^!66aqu*6X**+BiR%{
zyBanLy5`_95uXHqDITT%lbG?UFlxJhb^>XYIIP_18McJ5wzYOvw3H1!)#OVe8Ing(
zxAye<OL@Sqi%S?*n(w9l+D10k*F14o#$Q?75UpYYx!gn^Ov_YSc{8JOdl#-q>}R{g
zF5#RWxYU{}t))_bix4!{**rcK@mCZTjZ`s#L`Pkf*utBT8Q$w`q35bT@3?1sp!vo$
z8_7i(8?U?O@o9{|MO0V+4g}6@?$DYRw+xPzZR@k~^U7lOfX?`09=Oz6n&W${gUni}
zzJFwN&4F9uX&#@(_(S^&;R)H3?ZsChwH*n0eD=YTI&5Fkf>Os`fr;oT<F|=J>i&7T
zyH!;(toOfy2RPSX!4|b4vJR|m)$J|lv%1&RtK$tpG{)ar-Qoli0_yD=9zY^N_CVQ>
tB_1d(aGsPbk$ENFuWtX9V)cqx{~zL+>oL-Ps1X1F002ovPDHLkV1jk@SOfq7

literal 118757
zcmeFZ`8$+f{69{LO45c`$r_O?ZOBd%iD+?iTf+=Bw$Rwu6v@lJ@0BIFZ`({`-zu_G
zblb*Owu~*ySjIA+Td()~^S!=*!S|Q%T$k%|jq_a3InQ&R&*$R^)xWFBcKFO;1_lPU
z+gdm8Gcd3M=#Sn(CiELy_v4}r3``9AIuA86{Vb{~O6fifl$mMz<|>^|C;OiJ<;%0~
zbC4du5*HO7;_n{*I>g`KKOn$A$lse@j_>*2MNd)4&d#QP&zTKAPw>;B&-@rkHv0Oh
zW@u=rq!3#Avq*1>p$}E1Bqh*;Pqwvu&Ckmn|2aZmnrQKrp=asPi?NA*wosfOJ>pzw
za1i>b^1Dg@^pZZ=(ez4Zb#;{vo6%#%<6j3v`a6B9tB#9{3kwUQ50L&W%vV)a(Vrig
zot;fijHmc;lx4o6x2H8UG_-te_}<x;{U)ugtt~Ar?L%(%?DRPLfgp%Zou#A$`F;lU
zIr7fp&%wSQ=;!Ci@W+oI>7(^y5vmoXAL*~T>D4~;QWturI{gPUlH*8ExYF$_(Ho&X
z7sx}85+TRjq1Qd9|7<9IWwyPxO#c!_&jaXPZ>JNqV<W?|U%SwA?|<=CNb$qaTjJ?N
zyV-xQybH7>$LWXrJIDFkmBzYO$2!CXI=uHY%=R;$%6E->@r+nfgigo*|M~yW12@%U
zuAt%%J=FqT(G7BP?}w2gCG8&u27ZRyH`N|`q|FVFhMglP^l!c^&wudr*c0O~PmcAk
z2F<$l-28cO{aQDF*qK?ieIMkQ1%k;vx$HtR9#cPioxAj@W3+J*b(JgX_vc>m9QSTA
zwrg5n!T9JI=4L-^Fnr5nSI5nWiZ+AYdOB$3nfB8I0~?<v{ga$Tw#L1#4i{wmPmhh<
zrtd??T*8qQ;K<m`cW@Sj9k5cCD`Y=3DGjnQFa!kKKr^&*hv=S2-<tk~z8*w}b{ww>
zp!>Xj)V{1GsM1w$w2A6WBo6mtq)}Geb23{FV{d9hXE*(bv3~y+L?h_8dD05v)|~ja
z1!ZkPEp7je6e~E|<SBJ~2j{1lRF!xcfinu+dcN4yC@zS^&bujhE$S<Q)!TJt<dz8!
z(?Z#h8OfIimQh|M?YX`pRE@Qm-duT!5|k=8b<*#O#l}byt$SeeS>ojRP;PzH@*9H%
zWsJeT9}^w=+<J}Q#~{RE%ZkNolfowLWn0uw8xnaaGs{<IxwUsbZaU-6b<Nr0l_#(#
z7BspvW2M+lE14M>)MXUrxZYCos~Q_VyBzBQl~N1Wqm?z%ZA7$Hlu>d<V#m!-Sc=I2
zCaVVSu%Y5kLV2u3qrGFgd(6$wu1ZtE-0c)n3p`Tb?Nh;ZQvJ>(s#;~zLc9zWEX~wb
zQFojoc+p~h_|^@beu6r@yUZkbBv!H7-uZ_yHkaT<N`6(-KVa4M{1^j66g-fdse7ub
ztyDe{Ol`rjT{S1n-=A$dhtAVcH%*No70QQdjKevI+U`+uRsJ|SM_qG|CT~!=UnatA
z7*geFsj!*_@}6_H3lg*o&1FbN6yrCL5`>_7ma1r}TxF0aJM`Yk`<OwIH{5rDJj1(l
zPl9Y`%=%6qvc*lGkBDdYVAQ{}vUEUds<rS2W9XG~+IT0>m2<ZdR6+<DgBnW#Tny4O
zzt&Z=fKm}SusP;Br;V#b7)(N)^W+!4bIMLwN+^ICm@4W#a<epH_W|R58I#mk66^yv
zG$TK><B%|wg_3{vU$V{LhAven=Uq40cOj)9R{m7}LA#fr!-CsGNsy`Z?3|BdlSkVU
z$18!7yv_>;?eL(I^s~3L@WL&9#)rwqip@v*Z_?PAwe+9gOE=Lf;(m~Tq*kn6>;`gw
zD?eo50B&dK+;@xHjb)4>-d?*ddbT%(FgQesR5)Dg!=P^`=$ogiep<GeL5-)~{L5-d
z|3PJv7h!Pq(lV<<>JEcP{b!u_RJZ>%RqfmldN*22UHBSF7*dBY5_#no$W$rp8-Ly)
zhAT7R<J^gv0_}mDVqc$O@M8DU#}_nIuPzvVe0*`omPyFU?QFBaC52YF4T(ZN`0}V3
zF?sRiupfIYVC~Cu>_(-#m~sqgC6S4I(7;C&Gk-ku?Y6LRw>mN4)Ld!z;)LIA@sfm2
zN?d~fDXh0-A;aO0>`1o9SgD;5rX<-rkFMNQAE;fA=O=*a%bz#rw2YW2IysR?9>0{Z
z42TH+xI3=9cu`G==oP=g^4`AXtet9d(5f?IK@_4YQnjCJh&HfRC1xlI*|x1(SS{&Z
zV;maP;^X*s7-V}UU}QSrQ^(~%^DA<Gjip|y4R4;Ze{%FOAwgO64F}=OV<)leg>;`1
zBe#yl>LwGemjo~Qq^f(9w_=z)ZUW?+0Fy(g<WUdb+1H&i^UkkGTEP3-JX*pJEf<E!
zW?X7B?oCemL?<Dvk0GVS@hO>nz%CRvXTOl|dgWXTqoN?>AP5DzVHT|~PDK9sCwH#D
zYh~CUV3k-(=IfiS>GxX5aJqS5O!YrOugvrPLNk9YUOB#FU@l*rcw$xodYKz-I~{$N
znDyhmOz=FTSQH`?ji|DIhL{Mc@mv>Yat?!hJp*2yxVM{p1G9=pE2LL^M_wJS4}?oY
zVdgU?x1B27%M>X0*UDN#v>Ha=7xlrM-Y-YZ!B5gF`@A3TD_8$3TbC!B<urO1Qi$Ds
z`E^`l^+S`d4XHozc%$JO|HgpCZrh<ZXF!LOAlo&eQVJDW-ZdP2Mb};mAyN|&g^GKK
zY!N(>;wfpw^!Y!hM8|Kh@rO12il*m$9d{Ud$zOvdja6=v4c$a&mZ7Y@0iuM#^QiZ4
z_%Jqmq{X*$X0%!qM(|iEVM!BBxm$+7v-g=xN$5EK|Hi4h8BqsH=eWps=s-o@Ie4oD
z_m+|0cD)E*P4T?-oWbR<*m|<I*NtbA7t>GF#MHgc2rEC99SL)$82CmjJ%m?1rM-<B
z+24qCJNbW92bgMe#k%npyKSND0}3WLtLg{T0agdd!(h3!b@zs~jM@H%zrGF-IWR6`
zE`GKz=s?ri(O0F?I@>U(`OgPyt*u4L7IE+d%Q3#cp4o`bgxr6@y+Nx^ZpZBc@pEv-
z?V>*ye6czHA1=E~?z{4ziXk4)%-V<R-USPIi^PiZaLPfAh8uBpgkRh}({-m=)dF^-
z_og@?BtAx%bNuybH-dFU*t=&&LvRA$(k~CJG@LBOJ#&y>@~>m^MEowS<S(;9R?Q=~
zIW3>#+u;n|256Als*RczDld0j_4I!ObH;5NOYF)=;$QDm2z%;#)e2ags0({qN08s$
z5OjKbXpHx-6+faa_@5fMe%JqQd40QK+yg8SFuiCF^4Lv{>)ze3f9w0wSvGXrvHg_D
zX62M#--kO*NNhX1LNW<UK+fE%epo|TR$seo^oVWs_1_gJ_T)5U48(KD_uIWkwt+0q
zZ?@uiikv1dLf8&PRydINud%A}$q_|kdSbz|W*;6mK%U<UBVrMGlv^F)Oz>Q~eKN`}
z_&;{P^9qUW)_5pGz+0{_BC6nK3y$ZUImH}gL&YZj-*H23V)?V5XFKw31w0&&U;1K&
zAqA&$H1QU}Dd;I?x}SCf(3FnEuZlp7A_fNOo@O+IYZxi6OJ4*rq?qGU)FL=TdS$5m
z;OYxF0_XK=)$AI`RxWz_)6<`FC3gqjUN<#l>7pbjm@q1tgGv{-zv%7xW}rk-y63w+
z&!pHXknQ?!BX@5DS<}V%cgR@9BW}syPE=FXuYN^vuJp>0{fsnKKr`NADS7_fS+E87
zCM`p1M6bHerw<>lgmUl1DamGe)eus8+gUQw4!$`8@*taGKZa#C4#mRE+7}>70o|!^
zQf$uPP2tg0#4CSrG2ZM6jq*axTh#}Hf7nM24f)mt5YC8Z!TG*>jy>(_!;uRG*^n|)
z@A+DQ2JicePqr||=~FZGx@M!@IX6b|=;*g_ep9&HKEtb18)909A?-K~R;-T&sLS2M
zlA(3<&3=%_;OFzNV!uz=5zcsI7v!fJ{7Vq<9=~M9a|z<8srIuz8Nbs#{+Ba9lvTNz
z@$}5oQ1o`DsQ>Kp3j9<5s&G}>sr|nxPr-r<`rOro%HH-KMAa14*u8C0=2PLVXrx}r
zESCCJB7s0bRYow*9u<$kf*EzqSVN#Es^&7c<i6-=<lZn}y-ky<rV-&xdDgUBY1mYv
z7h>kfu5bC4VEn*9)*CC$HozUSk-fh@9FCwYZIDv-%gIF{^%4eI?RU={>8t7{1U^#h
zGhhn*JKhINDoB101-@#g<h35PP+Pky0tIr@^5yNmXHkOZ!WHx)55^+-`IR#lAxa`2
zs<RHN^Q2}G!&Y)Eq8eQ&XCqP|69&j)oQCj&&QWkLM{c+U=-{9BO!^ob$P+(4hWLh3
z9}&Fpzgy17DEqnFe8*J}IDHqp#o?#;yIjHI72JD`DZ69R8*eu?gX8BU$cs&vK(l^R
zOf3}k4TsSOaSmVXuR0_Z3fPFux<yX#?|3K9xKtmCLMrnsJ1#<w9g41N0a~d3Vv>iR
znOG^kf{#A)p61sH_H8sCfL{((&s%?YANCz`QELO&VE{lJ%t7D3vW^nu^Yfhs<>zgc
zU%-H@lrBk4FUt%HOE|ifC(7;WlOR3RpZmrYxM-sGeIXtxv&ryn4-`cu<v)1;1y!&a
z=NrrOjQbBFf;GIVCtt0ONc_``O)X`AZwJ_Ic?_d8GN@mucONoLqEwVZ{<~zqp9%pm
zuxVCq6Qp!UtSZH`+Xf9zpZ9UQm$wvH|0P?CAJ(G(ie&a~V6YN|vhr0<l7_kzci<^0
zV#(TQPik&K)m?d5qnB2eNix0mO#(6;JfHQ^56fXL^0>s}c)%HX_OX^f<@G&|{pK{V
z;EzzYSyiZG?}s$4zWE&e%_w7wp}9EZszX!YS`qwJdSy$ph%MmC2P|I3uyJ<lvsqXm
z*NiQxlkly8x@_2XDx!CGTl=x8xU!@7kC`}xVm_Q;ebV(zU%NXEIG`H(gWx5w^P;rd
zr{8=TELf<rU=8+|zdicmrE`E(AA(GP(81Xlgrfbi?IPsVJmQgt-$-IW_jQ4K&rW-6
z7sb)Kh9#exhpBpK-Zx+SGX3iTrtySvReAI(+@&*Y4&vEuhp@+l0`6l-C)g5=L^2UO
zLZuwhf2Uxky^CS=jOftl`97N?x3=JsJa4>0E#VA1&ffay3k?7&v2$@f3WjSYuR^`D
z>FaAGo@D2h=4%nMr^_lGO7OrecUnI+-e7b1F!?isS~T+dn$d<TF#dgvU_5<df<Nde
zM}(a66TgWksmNg#5jQ`q!S1IkwPy~7!o3atDz1bxk--Vb;dOC7mQ>d~D%-c~5+*jJ
z&rX7s=;^{GA?z>1NV^Hl{;JCKTxPjJsC*fSCDm%|t5~b@G4XgNvEXc%jL;<Kf<3VK
z!eqYRx9+Q+!jNQo3c6<E;ICPhSW@?7(<isW2ePIM?`DjL+`xjTxLdCbfuF4j&gGHM
z8Jcn7K70Fh>9G-5u;^kVIrQj2xOIfynJFv;10JpxNru4m>9UR&TnstSYFo&61R&qw
z`Dn!BS|0jmxvN}H@9^eC7SE&v%76vVY%Xum;ep{~&OrTUTs(l^+u$D8vSFZd^?Jk8
znu|G*X^MH7Lo{;O$?(Wp>)jkat%`{*QB{j(Tuv?`k}$#k9D`?NYQ=^BjAyOn`q(Sr
z-Eqt6BdX=B_w(W2_e-B@&MK5U96uNY1CYyK_c6yI+Kbby+h$&|Jny`aiH#mbNc!mA
zBkQd=)3GZyT(1152*yPQjeAiyGB_5Ym6DVXrJvU}th~m}^Zhy`txSn3f;$Dg=SmO0
zPy_5rT_sD-qyD%A7P#twFUoSd!<NH=GqN4H_&cpZ;krL)3{94N=PsFINREX&?JbmJ
zgp4{&q%Vi#9)&0F#bqomWKQ~VaV}V})X28gDz;Pj(#$g8STk<&?4Caa#J$a@j4Di(
z1KwgtUrA*Z)*B)DZp|6=j$}5X@#KXIe=b7LI(*8LXX^t#C<f!BOaX<xDN^4qX{VV@
zm51-Racco~H7`;dlXjqIpHzcb%R30h<DV&GMQ|&NoQ<dSv3;OJ{p!*$W^mZdk8F^M
z-ZGAcZsjq@AlgOLmpp~;IZvxTg;h+SdmM+zvxqSJV@ZX{db`#88Z-fuOTMq_CfNOz
zFw`gb$B`(hRLuCT?n?yY*~@LRSGl{(e{8h7UU1BU0XgAw+ZUlV)<jW0wm`M-UaxT%
z8(~S412+J7H&CmeoYS?!1>ZaO<QP~`swLR5V<11}F;{aW`!)bo%kYiIBb7GF+h%3;
z-=dJg4(&zPbC3c#(_i1B?W|N^;JaJh{HRQXti=UU3q6<8nY;NRd_+c=b1|~1)uc1P
zB!3Qych%`fspvVTi=8u1lE+DvR(@?tXdte7>;ADUyA^+2#P1IC84Rg4QpZ_xEPqGA
zrj_>_8(5Iys`3w^66zyrs)QXjw>506){zc?dn=E(&zAB1d}1bbX)W#S&rC%A!PU?G
z4Qahn0!ajxXX?O38P`SgyMX&Of9_=DPHA<`qvK>t2CxAC;zom07gZTkHy-5<%$iEq
zy}B&pobBFhUXAF~Uy4G!3><h-zdS5w{Sb+bXspQ?S0b#U(=Fj(%T~JLcynHCD6MPQ
zX9O&8IiywXB=DoQP@IXek{=?uIGFg|0^D6!wt3#|=EeR>78}9lPY{i#AC8A<?c{i{
zHTTaN7dinKhr1O9o8{6o1;6f53P5-l$^2S=NTH&N^#bim6M5s6o3gGlWFTUbmR$F`
zs4MeFk>XlAt^k_KGOIF3MH)F=7*Yfw>3pMyzG{HGOW(flnoLfPex@I#vp=B0ys@l^
zup{{_62?XD@1{&+JZwn4!V_Oi_J6)|><ufy_^s{^V<Nn;YUpC260JA0?oMp1{GH+j
z%+}PpM@vjqI80ZXcXfT#r1p>NPb4C^qE_~WgvQIMpBc=e5Q>g(f>0D<rs!kBx6b-I
zg!H;(;l>?B=)H3W=}%>15(SZTrz{w+w&EIPZI0U4j~qhj(4tc-jN>%0h(dVcbfR9<
zls&f3$aP26G!Ttfc3#T{$0PWQ&NT$%#SGbT@vkwjk{6uJ3A#J#4EnEO09(4cZ4(7M
z7TJp$wI4r;jqUqony;+@&7Xz#2#HsG2*xX~Upbd5!8Rgh7QNp$Gr{?Hi*ASkoFk=5
zn@h{z?(f7!Y9L$~ymwBQSwl`bmaFO)=4Llo;E`Nk6Ntrkn1?BY1zs8r*DbDP&emSD
z@~639>EIKTd^h~zP<8~|Yh6iI8H_;+<Q$tq*K+JP-6!rj#^}gH98xFCWsBiL(048x
zk$0Ey|K>|q8@{9R`X6()k2e9kl0n%DG+LESJq|EZUpu??O(U5j(FM53SLkm27&KG5
z{!SSx@Hu`t8@6G0eIraT4jCW}B)^0mces9OXJ{F!n-x9$_o=oVM2e7>y!sI?R6dK?
zlH#QVnd1@b1>^n30+2!8$cO6v;BdkU=J<3>^2!bKfB6!h0#NPy`H?X~rAwo#1E4t?
zej&~hEA1|^uOK@C88DBhczYJQbvX44KqmR+v!boupK9h-kL`vCry&Vm7!S})Zn|6s
z>ZmUL(n>L6stRn#NkCdR>;c679`yh?e0LH{I;cVrEB>sfq9qIIn!&t}0K@r15770p
zZs>EV7`7?Wc*BNXx@hCw_QSZ#40|;Fc?ahK>2BF=_t6;}(i)?E8FLcC(Fn#Omo>k#
z$P~kO>EcWcXwrbL@^CH#3nBmduvi4EKs>cyWyT;gBxv+yqCG&ac;k7c9xg05HH$@p
z@2aV{;ezKFCH|4m1s}#D3U%qNccPGjANJ~JX|xjS@)1OA)hw*VhEx!S1hwPbT>#X9
zKfNm6V)2tPo_}v^Vni=Ddkbd_o_lgnR>rEqy4Xv<^_&#s_`<@!xL4qOt*Kc$lE6DN
zMv%8|=Kb~$nj;thWhQ$YuuR`S=AicsY}0ak1Do@~hEx)Ud}+tox&k(&95cV*L<C^z
z-4}yi3Wva9x4+(d-ej1f=6<gbbh&c4*5>+mxYVu0D+!#hHZ@B|65KXVqrMz*W!uY$
z;x9sEslD)!x{|`h@#k}%p6N@aj`Jx<uOz^J4Kn)<#v{4tua}{Llgy7_!x8z46P4nB
z381ru?i^2>GrB4pie+!-CL>?J2K*b6f)sK;g9w8^8Yu!cq$Wd02FEDmUc3$UeEmLi
zLS>2l)f!Q7xw>-KspnDRt(}E;>|U{$6tvQ3MO7sZQn@Um5t~v86>clQwc^a<SExWC
z=so$^`xAu9pcv}&<5z6Fhd<R~HfDd~y|>;>4+s$ldzr&Tm^yGxN#n0!86a7`9VcnX
z#D*p~N*Fx!ceZ#|W08F-k}a@|k>K9QdoAh6SJbMjP=zVmHFZD}pNJ5#c`FCOVMfs5
z6=}7VO&V%*I_zdkA~m1I{8c3w&4JdgowWMvVRV$%7>}3N<sYzQ-NpW7WJ>um+kf29
zwAi4Xaw#lds+n@M8K+>=+kH{CAC??uXh}v&|8r4$A@dmlD9fvjqW^!#>8wpYB33^8
z6mSvhK$ko2uh8eH&=gd)Z)PPel)EUmeRWQ>%R{iF_e3FFT2^iQ2JD!`y*Y$#ggb!y
z(BF-U>UQf}$AtG)bQqbbB^oJ}F;YB@1Kj<G>I2ZZNGEu4x%{sc!8HYsT$nm3F%p(%
zL5DvAN2MXNE!%yfYJescEuk0xuX-2VoHO3{Gp8ZrO%j%^L@%4Co?ZIHLDwcD202vt
z@ME57=q{m>i7<HBl_=O5oQ6bRU27!{{z|qj2Iu=#PO2UXW06%)DESoyF9g6cpC_Kx
zEEN-J&R@+v0q$xer6F{4`Y^pfYiV)YmJzU{00}PjdUnPIP}!|Ww4tie`s}UCK{NTN
zv#O^dk;1p=anBEh7khsBRZpb7Rk}kQoVcSf1oQGKs62Zlx>qRL^FH_7JeSMm->{!i
zh)Dt>V=>5Ri~pK%DL`beqO+$hv-j3Z(<AZ_pQEvO8!lC9K7d$h&o38n1w+!s;8`%F
zL!6q$>1+znqLh6ChV<S0UPu~Ze~8KBZ(R~qLASW#i<M(P=<9Du6oSGt+)&ennb4}h
zWiKCY#lJH4R~@?Y2d*V6W(z^*YAdYIJOfmY3bE*)zYEyj`4Yl@vYB!iKYA$^;e_oa
zPc^eCLW{X2N;cFVzwapghNp5h>h=DGJI^aX<g8>hKtbXtp8h_cNb8?mxw+k!qY_-F
z#q9w^Cdx)mUWN)Xc$m`>Y|~|iNWrwKsZBv~h~@6ZX7nn09ol&f;sHI|w%)$wm{wdC
z>j4+_E(&?urx{0Fe|J;?s(5nz&k03{Yx)&GG%g6;!IFpb{GdY!xU<Xv#3op#-v`KP
z_C7MJa3}rMs3L|mfO;bx87SOcVmz3RY?3~oB*;q=D%*c42EADr%29$ev(&3*JuhHM
zlf`F!fKhm#XEQEVL3}DW9hv)h(Bn`l65H2B#NbUa)U3X)XKO^-WZh%e5}6!WrkeQ$
zTszaX1($9qHPjO;w=$(K?H3?=`FU))w@}KPDJ*1^B9};$*RbsSbtFw6AUhOY27Rjz
zPbfq4%B6v})D3+)1LKP}N+ZETQee-bMe)N+DK~-0Td7|!s-0-XRn1GEhnx%phipj*
zH)jiFqDx-&;9G(`d9+hZ7#i2!W#|)!oaoz>-3@sx-mQBg(JmFq8YuZGOnyNaTt0J*
zKs&FxNEoDiqo9&y(WRMu2~2lbbeBP?1);F1GJn6z1bLHoktV8TrAhjnTS&)px!J~k
zHzJ?=15A%Y7V~Wp$WWKJR33wO#x<A$d^!GQYrz@FI=P!k^tcej6}c$0=Tn+)X*HBo
z52j0$wtXqAjsvPXoXulvc?h&g&&SL0p7NlBhg8yKP^lI?;F5^ANdd74nWlO0h<QLy
zpE@$pyyvm9_rHFowp7kq>dMQK3+<Xng-4t6H|FDzEM%lky}JcRyxM=anPL?<VncmM
zlbwC^2ka0#_Qre~?&O8eYXVIgfQ7jB!d(l!{P^um`&N3}&R5wew>Ab9$@L9By&4ru
zp;+YNm&9vL80yCPdPm~ma<V1LgLz7|rVv!Bvv}xhxjFWP5%j%J)4gqqwhR4p7mv+i
z2!nIVKDHSA<vo&xv&RT22K)gbj$qAGKaanTY}%9+-f?)ZV4~aC)Z(^;s~wh-jo|3}
z<mqUep#yLiu@fpiUR1W=+U!)DaX=sgwGu;}Ep!w9Yjw8*c05TpF;?SApAFi_n3>dZ
z{ZrwUsSR|ATXdg|MJmds$Ie5#ng9GHB@No*sW~@#H1(L8Df#Spfr4IgO0)OvS@rGF
zM%!0-G0=e)GnE7@d)DOak@-Ioguny)e&EuP6-u}cx-ywF5wdx&Kb(N?S&<}!u6KkN
z%;Q3g(1v8NCU<5OA{EisbiW-(=1Xd(IQMRKhzCeZ5appQN%X9<8w1U@*0~yTzuSlp
zD0|H~;rucmqKzodFlz#Bf}|D(I&3kW1Un)wsTKgBZ`}h=H1Zd!+2TtVf5x=f4{UEy
z9H@rZ8T~#`1bRa;q@^V<47Fu;*r5?F-3bhZdFzu|e&_1~DsvCb(WB+!W{`;nP!%j6
zd~GHDiTlOWrrM+jat-p)u#B>KB&=Lj%W)WV*hVGt{Bq*fGF^e!QtMRr)<M&cDQ)Vk
z6W8WzJaQxICSh><QxM!aFBO>+g_N#mi$JbQrau^T?7Y&@W{tJGe)F1alq?z<zfT)D
z$%kKjMI-B8O!O9sL8eCEWAKj7p5iZI8S{7ywfyNtv4Hy>gvzcRS;78W^4|{r^9=AV
zSa2%v8@rYMm`Ha+?m#D7aN`#be8o^fH#x8xOQL#CV5rv{Vi~dv?g8s1dD7<zgAtXC
z-rq|loXYZOcjMyup}`j935K+pgJ7rw*orX|fXrK@31k+37t}9M1J<wp5Z@!BnQ?Mm
z-sN=<+`aYLqIj($^h!7^Q};0i^@Vt$UmK1*PHm=Ky*0-eUrnqm(w#?(YV&{ks}(;l
zOyYyyawmnDNs-nzcNPENRI^3mU^=-^Mdwj-B1n7rzgPf8;^4+R3M*moXeP{SYndpF
z=)80kW&LL-!<~FS8d*z3H!;`r<h~-%VK-hFat)(}96FM00W|TR={<>36~RZhJe@c;
z7SFNbyL_k{k-zkgtTJive6BrwqM1TmVQK3_m4BQ8cVaJ?S~2}vYN0d^?$RRnXuDuZ
zp2Js6oW$ZYIo&=roho+^8j|xbYie7p3SHNz6(S7M_6?yy4Zmx;nSxAlb;KefQ%;0^
z@AA7SNyK)qTLAfIIwIV*J6mfnsU)FeeS|(JPir;PZL6ZYAQ(&S6JUCMRUE8L&fsmc
z1GxE6XQTJ+Wk&fAZIpJ~_bwMtT(`6k_Q%*oA?)gEgBa?y&PqK^!z~;97o{Ju&A3_C
zr)U^4aP#6V1ReaINQ1s#f8pL}>jEK}B>qsiH0vHvm-gqie;#oP<oS?qW;UOUn2)O*
zzTZqq-`o&{EYcH9%!q^A-8cg6-$q0=z7>uroeVyPPI55lOEkQ<0!IKyM4_AEgP-np
zwIN>UN>{0ErWn4jo3aDQ7T5HEOksQp+ra`sh<N+T-aQDXaK;vIDXKLNAN4P@QUeXW
zF;vSDMe2iQ+{!vByeN#XQcDQZI~RdYm@f|1xN!pa=D7k?u(-F|O0zrxu7yH}Bm^p7
zzaO9W0!OU;v=RCI6hS^z_Q|wUORNW{B#&1MrINjhISR2AFJu-gC&;&Ue(OFVXNVSk
z?<c<H?;v<_ZeB5N*~Ym8nY9)U*LJfuV!b>pt%!UU<FlBGwYkw@cehG={}#%JRjD2x
z(6@Jo{13n7B$)pB?xZkk!XTE4ZT2F<5q|mJLr&k*k&wh(`O@(G{RFSR<+pnYdRQ?}
zDt<d(Dx7vEQ;KXskPpO5V5p65?DaYDHKM~icUlbM_OXM~qaSq(9R4!1`?GiRHJl+q
zmb%@N%`P%brSo>IZ9+uWO6MJq?>Ug|+ulUmrVh*bDh=CHn=Gw&01^GTVWRxo2gewk
zLeWSh_}1EZ8LXKrzLF&=<VcYJbu3DDrOL^F2&|E<vkksnWFf2*#LG))u^GG{(q&Lq
z_jyvGDQGP7VeOfz805mXrTfka_k_=}3~!Rf8~4(15|0_7^6rve_4|{<!&c<|wa4@{
zEcHEBLW5t|uzd~nz2g|~liBDB6gBvT1T3tpI*9#PZMIj|n{ndMGImj?zDE5-Yo%mN
zRbb037^4y6p&?)7>4Q5Rj<v2Z`HpOc&+~OTh<%^RcDbCrarh7CnQ|NDZ~R@2v`KL#
z)~)%&0Y;pm^9-)%-i{vwht&iic3=FD`J)0D5~sUUcIj24xC-tGAz88{x<V`IDw}P>
z@64JTCnMeYWRKZMch3Iv{n4F2j1BP%=;9rW@*`9>ks@T<(6dc~_tsBc4W}hmL4^_j
zY0<KiZL29r&1lJn+p8lL<szwkee>c$+m=}J=L0J*?mkxSj^WuK(|zw1yf7vKc@ODr
zPHkBejKg9M^{|l1jGUYXbukLd4u#<GdTa`ZvT-)C+}7EZq!@T_tX@?}zBC1v$wn(V
z_`Yz5rSH@Y*Lykk<D5Ml0L>w5D0<POg)-9jc4)z&Qu|T$=y+)IC&2)o+l~Y+fV=w+
zu<lhTA=xGbkwiz?zt5epYYH@3XqK(O;1{`o#ms}_qiPepb-~5-qyWa-&S-nfL6Z+0
zUina4oV*__cxjiql-?Nha>ede#deAXp>o|)C^A#3x3p+JAw9YUS06(V_WBAcK9EN%
zKBisezI3JP^qCf%gejWCEZa<FM2M~Ha}r&Fbq}sDU<=lpII8xq*||!1Cv=~B;t*N`
z9*p26R3`3lgmF4W7EWiTCD|({>p03PsYr%7+Fr7EJnL9`4NmG&A>ut<O)fv!ye>B|
zk~C^G)a*#27Z4CR$XjJCp)j~aergh*H^M_WQ+&QexEEb{XwFG@zg$yTcpj?y?eOqB
z<#Fz3PBUh)X&YJKXq9fyrSuG9<vPQ&v`U?Y?3wKb6dtkGUgdBxhZS|fHatSj)G30X
z7Ru4JPL-5DZfdeKVdrO^xr*>aTa0TfWmh)a+3a}Az-HdFdrP4xKH*5dQL*jOzqAX!
zr0I>1a$h&UAKIRK*uG_!V)H1JWEZL`)KTf>*-A;D_OE#gYd^{Oyudk}e5TZ};?xSE
ze4640{s_k+ggmZ0VTMbL5Uu*e2`-f3D$JR@=~eSh8z}3;lhm!*q`KA$*PTvr*GR9w
zhetei%0}E<MkS2~hRelMisYZ1-pG4~jE*t1eHmnQl`kScKx5uH8z6HxZRhT4pjnyU
zImo1qMqksRRx$<#xn@~<k{<wD+n;RPMtB3`+5EkDT-($R{k{j_6DxR7PaY@I&e~k@
zKa$9infA%}WHYYu4y;kDZGUai*RPdQ)8s!ed%5FtaZRm-sY2hMz*DQ$K2k@~iG2n7
z4r)~Q`L-?k$$-OwTEIm!S^j4a9pjL&2Y~lkFJi{}?IbZ3o>ls<wOTCurKg9)O8~#K
z4$oo7#Z@z6^O>kVQ6b3WWGn7v>T0NONWUmVG{``ByN0XRrh{`m`_0c^3WC<vcI(HI
zEv$3_@^LAs%djy!moaTr9fP;C0t*~MNkc!&L11xYbC|Dso*pRbt-*TJ?cZZGX7+zR
zj;vX}3POEj4oEFKnb9({yq*1iHdA^h2*$_>yA~;SZY<S<)+yD$AHCjl7<k@2HaMCD
zGw=5(T6b~m5xzYs@R5g5Nq*q|idxhsr=bK6XJCN3Q#ldBy@ayLYi*P-3UzeWXxLBg
z#BY;Bf_Um{nE9rMx$uDP;oB<iXgn)OuQiYFXPpvKkVr-?jqSkku)4ggleSMlX5IbV
zuN=gZDlNTT!n~Vts;~OQbu$CCA4kHD^Kn8hTs(RPdO+FvbYz*;#hb^*G#3P<MmIZ>
zq7<?VR^j>MW<w}2<o=b&^vu7v?@~-6aHmMEL{AZVnP?={`|D(K3YNN*KANZ=6LL*r
z{G{*Qf~6=VAdQyeyO#&zP2Ml2q`p+s58IwzydFr(;fD^`@<RP8Zw9Jt>77ms5x)f-
za;<#c{aHVTk>>xfka7s*;R1(ymFay4WR<UD-*(ksj=LX?+_(c@<;hA)@$I|fIV~G>
zdn4+6-MrQL9i{ysTXX&{MtAQTTZSJza%;J3<yqIe7^!r&`!UD~_sUST9`-l^A-kJb
zeQM_G#)QmY*x-E*GiMtVFr9<OPpGgoa!NpYPXs;pDGd`vN!;PS#%P3^O-*h%Dv*O(
zH>3@O-SzzbXHV2CD9Kn4Xv!Hod&=-5tejpe)c5GD9=qNju3}w1V7;=z_;E-Sdf)Y0
z>Rdc($rf_$gQd5;%%$@X<AF49I0kWka-Btk0~LoC^xVB(^Xz$8Re0Me(_ZhM9;)uZ
zq2uc*So~UNQQxz(-9ow5k2jmqcyb1_@?=Kgp?y_&;5X-^uSEgCcJs77$Moph)h<5X
zlWT+B@n{xH2r2F*<k8+a1Kw=4-(9q3z56pVB6XfyYcigS<KsYQ?_*lfyU=)KdehB$
zcb>T}aO{Q3cpMhbeh22z$*)DOLp8gD$k}chPwD&L=TKnN<9lm7oFGqPimSeO34!*k
zz~~x|xGj5(&AaCZ7GK*SZxxBr)Cg<oI%7-fqX)iIH};p!(ss<>2!NSaJ*vmijO5OD
zInf9sbOW>5oJ93KS9hfG+DnkfIh2&avF|`Qad37gml7p2j}?CP{H>P;M*2<5nj?C8
z@FeED>K{Rct~Oj~#&tfD_|Q%<Iwy3h;F#z?s=&I-Rm#ro2WLRGJeT!Psi>F%Inn9{
zV#-w`6M3S1>u1L4G+|4WyIop#srumDKkG{Qi^$}g{i3c!oqy5cWI56DJWxV@WTDzy
z&bBz=qYeJgg<j*Yg-Wku5$~B0D*sfmQh1Rhi?C|?XY_R0tAezh)C9;mvXI5@W2V~t
zGo{0>kJAuy+n}t~FJi~-`pt8f_ayv|ttsS0SCt@CrRXfaujGy^z%q2e4qCLDf_`G~
z+0rZWG6p{NYKOl4u53twBf{W?<%Skp=`!)s9C@f_P3baSG_}UpoG>`s6Wj{>dA?`1
zIP?yeXMP-H`~A^qYEl2MGC4f~O5c@^>bXLvi~ABNV`pE|pkZy5D6w#&*RPe)3mufP
zFKg%XgDD&+ZVK3ZDEgO5cys>I#JcA-U3VbF_y8f!kKcef0a5E~w|#8^63%?HtNN?C
zNlfJ6gZ?mcDOq%&_knB{{FlDh%!!C!mQM9!<)^VofEBn6(!S(w{yuvXhLuMz{quKj
zyRsbeiSj?3^<1rGx^P7;LHT?xd0F>z?OBqzG137)1tGG0fqk5!f7;YaaMiZ-^%SDl
z84A0d<c?PUkxP(zjRlwXBA|E<Vm!i$Mt~WYd$9jd(-UWG`EC24tm}~Nr`^IU@l^>H
zdxIqg@9#LH=Ox;(MPp2K$=ihbQs=|D#oWtmuSa0>13m^^UVKx>P<?beS!Y=8?+rED
z8yeR5-0o6m*^u+1njOyj>RhKl@<<gYOA_*S4cqbKZeJUUcxFbYWwrg#(O*Wz+&Z$_
zMEPyyKGy<PHMITksWwD^M^sLX@gH$QWkC<+)+bnrZQpU8G>5cSc;vun*rJBay-g#O
zU&y1PLdrdU6jqH)9gn<^%APK=oaD4jqX_(PZ&lB}ByHQI<%Cb)GHq(XHEw0=F!4%q
za?fav-vXHQ=PwQ4Qn>p!v>PW@*)FY)Cl~c))WRb-x1(}PKBLnXsB#T!LgIp3a18mn
z=Q5tQP<rpacPeRXoDQ2r8&`wqy*p&uv=mtj;I8%L%%~E_bx`nstUXE%y~YJWHdWI0
zy9V(&j{rmTh<o4Iq442q^V;_B7k*xcpBYTy_;#c&D2PGDHvToPC~i93<!pCFc?it>
zhP+u-Yw&Msax-NO!)2H`9tb<?830Az7ouMlT6%ZvdX)tey*M07lD;-7p{5TP-uZ21
z`iCDPD-<{?-`bkKnEoD3gLy<-Dc2LPw6#kYG&!K#$on;=jq=$2T}CFCuGGxwJ@v}I
z*lbLCqLyrJk7l-}-H=S>ibdu>e2Bh2sxJ4~IFdY9<i6awconWh)3+bBIWxja=*r0h
zuG3lS7SJ|}`(PCIJn`_vm9#`u#g_9IN)}R{b`yEa1}ql8+W>r4otib@R$?;H>3&#M
z0dsoP9VArNtVA3Ugj6Nb!V~2v3i@q->m_MiYG%LISLHLk?*B#%%CcX4aHH>pUB#1K
zhOwUuWXhW=Zq%MMM~0Kh2d>m9%LitrA7*o?U@c9?pVR)2)NfigTJIjvWcJYaPR|}-
zApp1D)CSf!dZ8uh>59WAu+P$es{&;xfW;T+OP|YoG@weX8|hG}+p%87;O8`uGD2ty
zdL2cV60el{3vL&*Iq)=sY~$T{AlfYT6>6U%v{g{(eK>*b+SY7(EjN$Pu7U)}vudIt
zg-bAsMNPc8<tFu`tZ7dm%vt_qX@mCLi~fD)SSMvSm{Rddiu>_uU+Vlwc&;-2Z3LVE
zj%1Ay??<2$ZoD}l)n0QKB}~lur>4wdjpiVQ-cTL`>%||elxAA&(Zi0~xv0#{2G*P~
z8OgG`B!^C)bW`A!W(*oOgV5B$ufmJI_S<W><-+lH%18*M0%O;LWkTuJ96v654o<ko
z9PwPaV|~U^Qy87Wsp{QhkN6IurS`YnEX1;v^QbgaV7-pgtLxHlo>e!}*nAag>{HXK
zt6nb4ia~9IHjIl__UWR+?0|Kj3Yw9}vzpzpk6KiWMb^Jchs=lVSNjzFTX03PDNg}A
z4^OVohI4z{#-K1^cEk4^IQ(h01?scp5BvPwh)}7N40E2%pB8k(6Tjcpj!lHuDAM0y
zpv1;cyao-~s7I*B31rU{Gzpte(a*Hl;&f_3LmOJe3f1M9J;WA;qA!{hA>R?(7_b1_
zvCY~d+$%<JW*p03`25AOdw29aq~Os;dE)=R$8)J$5VcMf(8J0YtQN<=D!v8QbP@-r
zwL}sT76Z8p<qgKj3IoGBrLN1)KURkV?nKg?=$y+r<pxHd`ty!eHaqT~LARopg?~Oa
zQ1wEnrT5nPx-o$+Tqd3M1DxSVs;RcR^EXC#ipQo(nDDmj*3nPV`7h2$snB)%xw7(}
z_NGutM<zU0{)iEb$#UlD4t4&aMAEWhHvOR8az=}rC$Q!7Z(Iv5Ju~^mRCN@>z>9HJ
zs$Nij;%P)*a<b;L!s1&go*gr9`vpS$I`db^Qf?QoSYN1;E%gJ7S_G8v9hzP171G9X
z@deAUx%YPB32>N3xMhFE)jUr5G=q@D{-d{eNVF5nO)9tPgU&l4YiL>AR{D;mljI_m
za73tzHS;w*B3cuW+w`vP*SAaf4t1FsXJIX(l!y7zW+~A3&xX_iH*iRFw_T{X!OP}X
zB#&y{5gR;ondyTqeilMNzmtZsaG~8F{)O1LS0D#dL5|hsPan36YyeBVH7);Fq<%;4
zYigR_?Wa{Xi;43WAa_4Hw(g8_%m}r%vT0i30E4>q704v5t_9aL>rWG_u=!IzKZE0-
zLtP=<I%x8F|66GD6q!iI8iomW*?!xR&2!DmXnSYn&`z05PB}I2bT(18S0j}>M7PK3
z{@QzZZNO$}mpi>#+(+cc;)z+_qc0fdN|KR|brcWOW?FaMAr4teH0<Il6ap~RNu5f{
zCEw$0<-7Yx7HvKgyrt8wCD&snFF-Y=;GDB_WPDcv7|C?X-A9A@%?ku}tjv@H&3;kO
z{t$<({WrlFRw|moq&N~<>AT{lZ9ZeB5eo5J=|@pDxOoZvtE8C5POjr-ETUeLVS_xY
z^MZ#}4^)A}_9zUCwv^)!O$LKXuf4P{Y`Ks{AnAp~^f%oqDo~Hn**51%w6~H@99*eN
zY{Z7QmgHH5w$h$j%TtZ77CGI=$7?haHlOU;J2(v$zNn0^xUHhiU<`Ir&huyhqZJkT
z4~Sb0*520!$KL&v0!oz$Xop4Vk(0o4CE=pGM5%~p7kEn1Z4fqqCg)_g88O$=yc#LN
zp*yf_ciowQiR4ZSGgD17#iUI7p6dyzifpd=hpF)q;|0wWGRHYUDs^z_&)~J14z*;0
z0h0@;#Fvid=>jJUVHxz6oZz~Lz~z@22j`Vc!ePnQ-ZGKzXyI|z3-4*LWlQ>GXZLkz
zGO=Z@l6u`<PZC-=eSJ~Lj|sg2f)9P$O7_CQvD8g?ZAd&B_FE}G{q>pIht+PqxI(x2
zgGNiN$`b*T!iSiLBvZ7ktu}V@87pY5ETz-n{8dY-Jb2Z?b_3~XEo~Ek7#nO<pdCs5
z7^LV1n|pZi_SJ8q=0)trk8LeH-t~ZOep|O6I2u{+j<lnf+0W)$!Xo>|A#cg6n@;FH
zwAw@M-Ce{`HR|UlpZD1nt5x>~sS?Yu@@gVQnAn^x?ojP5{sYEmOJzB>W?PmkyNH8M
zpUs;yedxT}j|%UW*3gqA%cOqw$TCd&ae7;PjlQ+lOH1j|Uj}#TXjrPygxjG&5e=s*
z-L#q=WSel4_Vh&kgKvHH>TV#8Z*}3DB-vyC;rhO?RD}v^!zO=}E1;Q1dLUNiy#k_V
z-K<|Iezc2{+Qr8hw<We#`|r7UxUdTU8dk0uoRr;P%IT7Id3xmRyvMNix{&YnLt~od
ziS-X;EO?K$c{Yb7lO2nElgQ_Z^FJs1jBX!|9hi!oibFVLXTCbSJ}$1#qxE)_xjrX{
z)7N-aEA*@u+pfp7P*R+BTPR~cQ&`t^oqzx8GGs<}9re0HVi}ZKycmVBW_9X^K7Lg&
zX%F%<ems|?lJo%JqwRiQDGLf(@4v6dQI-Gj&}t8>CMWu6WL&Dd>5!@f!MNnZR+<)|
zU|ZpK(ndgw(}l4a8k8bDXr_$bP^5o8pKkGFM)O$njN`8dK#>=HAoh+Si}^z(i@WXx
zI<jvaU)6}0WE=vhWs(2GPI{WFJgAHE$1q6BhLKsLi8e{`D?3G?-B}ESzFbUw*{ij<
z@>@{Ow_Fj6U(8ZnKCVXeF@N%nFO8?F8ctP}vMV*?lX=H9@1Llw!{8N-R8~lmjwnJz
z-#=77r%K6&e>d9<=#CdK)Geps3|}^R|NNAkXk<ET=>nu)VE07GM0}r0bb7wLsbScb
z0Zo+gw+3KmSbOPdKd8ihm3{C-4@Y6h1*1U!ve#E#Pk=jiA=BoE2(-ECf2Puq<6l3o
zJAJ1z5yvXS-_&aJ2{Y6*<EXjVaM|B*#?9)7zA`4IY_s~QJ>~wyA4K`UpEuF=jOVkT
za!{<1<j9g0sXje5dRxdhj$u_0MfurRT>lMsKEDe|_KCqnhq=7M+K7ys03GA+jF#Ko
zc1KW=3NsexUvx^%NrrQ+g(`3|iV%#YZExjdAoL1H2mHUcxyx*3gTJ&8ZcmUdkW%*x
zM<aamQfReKPf~%W_Rh2be)mUOb4}i84*Q7!^v#3KLJjqP7scN~_K?u$Zxqd*taS;!
z0iV-VtM5tfz9{vg|GG~rRS?oEon~?E#6^2^s-J_p%B_z-MIYu38VrqI*+A2>4}D56
zNETq-HT){}g0i=9b~KV{$M@b1ZO>tamxZAR<+jnV@|KYAzYM3&L8SbV#sHXCGtJD`
zt}NqW!DI6|*(Jm5>k0j%x6eT;NfxHMK&GkSDq8&>B5DDdiq1`fW4C~d23N<!(QZ$P
z$b8M9Lqu#yPVayZL9sy(M-Tti-Hh7`Lko+hZksYQG04s$@gH8$H|DD|^D7i6Iiv4h
zb{6ynluuz~1~PQka<uP8q|Vp0__@|KV@gwaWoD@^6{bb9A;Xkie+vnbb^5JBp`A9r
zA+UwncbB_S*roDnU3m)JX_f$35WV8+tx=EkTOZF;1ujmM{F?yRig6#l@49TPvRjRv
z;p_3E)cJUqI@jQ8RTeN?e@1)5>7r=!M8#X>QBE^uh<fsuG<356@Jm>EQ{49j!?kk|
zvPAoui3ZQ>r-bx@=_<ZOc4chM;6w2`w6GUjMJKFzhrQctME*h>J{oR22~#PE-OOm7
z0@^s0ojJGv&1tZp<LfN9KY=!7P>1UBKsa39J<TC8o~ytx#2Qa?Yo-jBet&WuZGP?<
z!pkK?t3@#wyFr4Gt35N*Llj8)Aye1q7BHGJ8rKffvThSmSFh|W7kihBDi5C(p{}eO
z+mc4nmd;HAZ70%(-GqnWWx8?4FR}Cg;UNurwx3r%2Q6}hJm23%3A1;uDSJvt_g*~J
z^Sfz&l=sCnN{_aDY4^}>E!XZ`5!yxzzJ$RqaLtS}y-A^->{n_7l}u=St}PUnfi=9S
z77RPSHvnWetv%wk0sqUjsP2BA3bnP|7DV}}RG1HgkH|q(IS9sVb$=m>p?z=p*NB7O
zxg+5ZQ9ajt^-2$8s2+;`zL(Ix)!s(h`85-^`jb&V90sfg=ccX^Dj&KjhLDC~WnE!~
zjjkV6(K>*?<N5}PAF^<l<l`VzPW2QrVyH<U&{s_a<CkA$-$x^bDgizE=o8xEKPLgT
zE8x!C$&={Q7bV`hValHrWKF~{7O~C+n53I=2aMq?VJLn1Eq^d^&{~TBJ%&K5nLmy;
z*T^0<RzPYdy4dSB_<f%;JUa(X@)-NbY6FHzdh<5;*kKFa>{z7E&4Y6y8fjFEb^>dN
zyT#4uTNUmHP@p#Y4xtpWHuR6{(339sie|@%KXW`Cnt~UE(&1f+&XYe*5-K-NRb#1n
zlS)iDv^W2rcgC9OjVTT+X!*D+O7{65m{h@tX3x2`W(r)4zb^nqcGnqdqAuIMP3vb6
zMR5@iG7%!4oHZ9&x8N1f7Y;j~ONagFD&vakJN!^s>Pt=n4Si~YzX@D5XU|hd$EP9=
z(|O^45nVevMf(Jxur5^rs2~yrF`q7C`GJB}KD1CI&+#==B%5)2BToAOTzvtjh=a6O
zN`#apFI66bd`2sr!K1+Q2<;U#<Cy#!JYRcV-hd?w87o>S;j2!)Y@pKaZCX9U<2?=I
zk$IW-e(Hd`D!~27lcRZzNSit&YC~Frg`m3Id|V7@U)uu(5L*5(Fsxqli^At4N{~};
zzz~L-hg`oW-Au8_j${o$lTgJ%c;RCn?fD**tF-=4#3d9+lq$_%20D0WX%JE*I0I2Y
zi{d0W?EJs%KCx8EN*qN`9Wt%D1xGfM+kkD@4(f-&5$~@-vX-}Wq7j}b<h)PhiV*eD
z7+6#8dr21Mwx?){G(UQ(%4fvD8Nu=&(1s5>Zu`XaZOSJU`Q@?o2nCI-ibcJ(rJl4?
z4KPOKvZFZ2_sb{#gKw!Mn;p0^2Y0%au}{fBhTV1MT<Tr8-hjUbFA%&+k9cSa?_tRt
zHk3Mvr$&oWh|&80<tdG_MD4xi&gHOA;xCFC9eBz6=@~a*lwLE60-Fr@nf|ilZO^D!
zt!kmn$jmLp{q@VIx!;sMXhx;?C3n!FLYyT78O@127;pgP_Yyu@o@e95h5o~a|Nbuk
z>Pts)6Vv!-3pA?#5vn$}2WgyJYU(JYlM7eAs%nH{Ndw=JpiaupPEbV~<@-&Vti971
zxC7Dx7>rOv>q-iuh9X*{kZ^3zfW`oO^{x~2$POQYRhb$Q_?>wR2Rcx58wG6fYfs;=
z`2u{|{*7xW3QJGrHs3J@)@I6Mv<c|@*J-Y?G(K*Z$>|-{7gvbI{@fq1)U8(+1FcXf
z-souYMiN4N<DR^V>j!tLR(~>F3WOu3(hRDu%htvs9avtG#;06R%@yT8^Cm4=()TYt
zQ7FdmC0eG4jOebjw)@gaL2p+~_4~7?C0Li?qjh_W$nodWjlm$_dOpL<C4qCwiKc-6
z$BM%k6z!xWS>lEE^9MB1>%#8ZJ=#--q&-_>klDv9_Xw5YG2R?bx<R#%R=N#_4*W;T
zJ^aME9yD{&{G<*<T8W3vHohU!3}=EEA2ESEx~2bmtf93fqoJ<dN-mGaP6F-yfjV5G
zIT|=UE4)yAp_}?AYao@!OlbnPc`Q8^viD@tF~>%}>HMGDi<U1I3&z?OdfF)KDmPR#
zegAO;5{LEvBq26@BT>YZw@3irUtD24W#;Tp%~Oi)e<Thom`Wu+0{n|T{<7~)j|6#q
zs1GbqER01C`+<Pte{qHi@jY^%7k!Q5myS>UE1ZNZ*0J~}{NlC;5=Ty%#vp)`@!6+<
zit`u2|550}uZDld<I3>#@`Kz-?~@SDNd2G=N;ivn4Dz#2g=$?7cCdv7yf+dl@O<&O
zo|{ma^IE|Bo{WJTC-Cn{``6&k65nSPy%H4U%9WGl)JpI=w*!@49fNH`H0mFu!RGe2
zdPM1$B%3LvY3gggwi^=?zlwG)cb_8CcKQzLJ;bPYP?lR{v7i#6qUYCBVhRr@qXi0d
zQ|PqPIQ&0Ug5m1Vj{G0?-aD-6=6MvQD4;YI6$Jz=fYO46A`rlW2neW1Akrli=|zg6
z38<h50g)nI1yK?ZLX|2-igY9(T|i2Llt4lW1kNV-`hL$n_m6w;bMAR=`Td!EW_M?1
zXJ=<;XJ-4^m5y(mXvS=<N!6Y|)TdTZhLA`wxepuMl=CQsQ<F%R3^FJEV74*eoxsAq
z13Zh7c!7KyyyDZ}>Tr`paI3W~F!AxZeL8&Zh&enFC%56A2dC;#gc*M9S4L0ApX7!g
zI|LuTD<`!Pw13Lo<duzIa#7}e8*+TwJ7xHO5Rq%DKLA2Qr(RUn*pO}UAq*B8KQU&Q
zPovB)akrvzbFsS93fDH=td9zv8UNmD@2ivmVuDS5rDAP8Um4t_F(}ZcOz@|a9n5y4
zWcCmpM_;%mxn3Z{_$4v=gi04it|Vk#xM1LOrrkqWQgXh04`xf9vX9}&fph4Ruayul
z#%)XG>rnLe*?X{fo$0W1CJW<dC#=-{-h!BCcQR<{nLiMV8<Rg8;gSxglGG_|psh5T
zw<I*#ATRKU2rxcX>stwpcmX#(BKJ`tiE;fldxv;*XacT19G8oUltqfY53-Rpu3_MO
z{EguFFrJH!CNKA%ed`>7-p3(#>$7O_+=d{CJB1gW0(WxNPO!8g^Uzx~6UN^XW{D@8
zR5@6&WijP||DiJ@)_#RydU9yhfie^57mSxV#><A>Ix<NB&A9O;suo&dnD%0k0xl4B
z-bB!K&hn^N?bCU#D&70|_v3<rAHNBVHbooviq4}s&2j}1FjfDkfK}%AyP62<cukNG
z{2VhsWuvIExxeh|3zYnEr7=u#5pH}DJCI*9{_H$@&Xm@uz~y4+^=XXC+#NHoO*Z1w
zr|j_ITW|dCarKoaR#QuTc(6R}gjMqisKXd11O)IhNxRy3)-O1nI0^!`^ZD#D9AJ80
zxf2>u-WLR#2$6fgUql{FFR$7vOxU013QGc%m13li!q*#8aQmxEpIL>$+rHYTzjlU0
zy@hP(gyov?hO89Sdbm|)O4!tkCF9<#hD6xA!Ygx;GV>TY@6X6TZKTD}>bRO$bi%~T
z{W`k)4i#uOXrx4?xWlSZRM!2SomiyVx`j9viTLeKW++HJE39^94lIWcBW=W!Kb82o
zn+WaF-!I<d?kiWc^&2WLeA!MI{ms$OZv?Z&6@ei9hNnRs5cF$MJ^&|&F354XMJBK9
zC$&W=Av|rTkIXD6dw*Li-JkXVESde}&+PXt;Lwi&G6rxbNA%Y*Ygt}&(EGbK<cgJg
z5ZSE`^Y*3?6nj<1QA;mSelQ&+bl^FU&qyP93eLn5T%AQ^YA9A<rtZmh8lf=(KR#Cc
zUfWOMj68uYD|dwQ>G&$QwY}48(gis(j+QDI%t)Vd!Z%E@=VzoVoQfv-3g%_0!}>s$
zfS_t^^;hCk441{(+0~4y$YaE3wneXx`-XfYs1M`QLDb`>#bAFYmI4e;TC0b!cre@d
zygD0uo<!RtJlPrpSpBT?w;6ak?9X3W0ZA#bb!2xOe0bs<W*#I=re%&2A6?SXyECa2
z%iq;fB?RoPD@~3mzwE(zZy_)~;3<{k3>qCeJ86$CL+R*VIcfw8+&E2r%F1CMhs#a*
z79oson-N3n$N0elI|KUed3ArTvI$>SJw<gTSd-1odJ*KA)6^rIoRa8jt?E(6@I-{?
z)X>KvHtYZg*ndF!)v9TDzgt=2WZ5<~ZR>TvJ+dd&(sNZJl2CxOw$)3pv?hDwy_GC(
zhhTDld>jgUg{5?K>)C)yD1ML_J5_#|H^4jPLc#apWOfv4pC{bOj(z!(HTk<s_k!1#
zQwx|}Fc_^7>Te_RhMs+VkdI`j-4$}ii&oo151n9*!^jI6m#k%#Y8Y}rI@ah-=v<Ti
z`6hxK2qZ(U-X$4vb!q*APp3Hg3xaGN6jwLu9ZXIYzuA1>Ys-6zg^)OgR8tCoo0jN*
z1{=~*fZUZP0z_3?wS~(~8l?J|n3hzJgVUjd5LRCGag{+}aaU!jZL2FZT`CPzOy9)i
zLNLx&Y;fupnp9vS9ZvR79rt7oU}uJ6?-H&2@*~b}+h_Vsve%Ix#SsbyKmg#$KNv>i
zv_cKJWzdyzk9@4jc4w$Y;yunM`y)sCWE-i^)r>viDGl@}NgBf~5oF#JZz(S4{b8dA
z_Elp9&s2Gp|6U>(+=PBg+Bg(c3@#Lx|D7L8L{Yc3a7ejzm%Mx>mXc1c3t7zyZRiOw
z<MXIK(Rs-lmPAi(asnBW4Qe1&_gvKV^-M1pmktr(RCvzn_c{i{)jS%cI*fmmmR&)I
zyh(%Hx6tl*b@o!rw*F&tSVv)GLs%TnUR5Tdv0A&jj<GHoo}zQ$?j8R(WDXn?NF2Tb
z9O6l}h_j-i_mAO|*Il@$;&JaHdcVCW+UI_f`XxCv;AKDv^V82*#n-fpZTcjH(A%`u
zRde?^t0@ozIRH*xKAs_=17RcI_n$-uae+*Xd|fAM<Fk<oBP)cgAg36*+Ak&`x8-r#
z(fqi8>s&fd+t+Q#T6jQMc{jRJQFW^w6kG|xV%j6|Iok@y(QUvSI-(1-hR)=<s7_Yh
zqRjqZEjLC%>ZJIIZ*LzKIW#xw31y59J-UyAr-)!_5yy1VX9Q-Uc}Cjrb8kX_-#>=x
znsGzg7WG;S!(TizLdt(xSEuA~{#XI&CS1q0qHs1*I47_YN5PUT*4`zE&GN(&E4uhD
zZDV>B-JSOb=w$SUDhh(HR?H1hvz*jZzWIrmVwy<Z1euWE%zluWw788pRh8Fliw4LI
zjZYya(45gLGP`%pWFwqBk;~biUZrLZ2!n)O(7@xHSrcTVFjv-j?Fc`jsCR&)3Ww@l
zIG(`7^Z=%~2Qj7^({pf#3>V<*3!sWq{o>h5&D3UfoOF1j<eTktP!~y2(4wppa>0yc
z?yWhx?v6zxR&bAITk^IhOkO_EV_YL5DIt^}n?-tGY{QP$0Jl>QIv*aDUxcaN<t=|v
z?H?VW&ph?HIHdWu2?!EOB8F~*dqrov)y3@$SEOg&abGPLdxt8)x3_4fF?XKH1UHXC
zp;?TOs{hLXZRVAW@(?|GTwH_D)>W9iTt!d;UzTC$T}ZmeYqxOCTVTBRq|?XTEi<}N
zToc4k-7a>*jPn>l6z|8j0e$2b=aW=SfEe}Q;Q23IMroO8%Njv)lln+~<M7u<K$`HZ
z0Y!8}YryZZ<0rOVw_<S<MCJD4oZDbcZY^eU?}c0?tdNpOU01(w<87&3%1ufZ(o`9(
zqR$6MWza>^pSa`^diY%V)?Vh|5A6guInDb*9@v2ws+*eAa>zu^CH^7QUhgM+h*D|o
zW5^uX5s)^W>2NBTvtOT*Z@Eb_ptNzEdLxQ9=MrssK)Y|WsQ@|9?9qu-l~xzm>P<;%
zy(*gwLT_5fY3>`=4JJ`}TgV<Ql!9_j7itMwv@cN1qy^g@eF#G*Yh!TVKh<IEV@ssG
z%pvJZ!A>n_JlYD7nafwy6OQ{j;2Xz4{U%`!6o|1Nyh<M|8TdWKo-p@3pve7fHZsR~
zdQOv>lwxOh-HrU^oQl)x)7%BW@M+mMjJRfd7{+Y5h9I}xzn4}|iyM650oKYIel;!a
z=EU@9H5WxIrpjQ=H1zk!ijO(?`R9hf0gQ(!951HaT8Hl9K?k{RVilw5*v4Z5h(v9@
zfamW*NBuf=QuIsqR!<-qV|g8nAyUpUI7L;XT|WpK)2sXH1~vDFHOiwKC!SD2Zn^#W
z5iH+_cP;|gOUO)oKy0epEYO(L`+i(^&GQ1^Elt$6tY4)_ab(n~f+jg+dXpym3ybQ*
zCpM*%mhJ=8>YPvK0JUX3+-^+$uqhZkcqk|;5d_53F+<2Eu4xV?RB|27CcZD0hW1ON
zJrCP89`{xJR8zpsvG4Xf5KIQgNI^hK{M?!`-kasdt&%gg8^?Y3y4cSa!YZs`vlUMH
zgN5*j(JLGed||?g;1Wo%!=F1(!XE_F0$i3f;f5t(;k%Nr^qvtNv?1F;sHNHu1^~Uv
z^I09;3#P(nA_|bnIu-4_XtssG3Q+Zlf1tsz#1xXg@V*!`Xz{rhp0hOjRl4IzL&u)q
zxoo?7mC@#rSPhikZ<@g?>pELNN?Ot_f5O9xH{ZC`sB?1Awx}Vq>DbfXXEp`zweH&|
zTqp-mf#l~x9|OGvs-zqPfwF~snpt_L%5`HM(s1I2I)$SIjft<`PaiS7DQY3a>t7pA
z0bw|_-WLq<C6hUFv%5*dS$z*-9-$aP9kS_9C+I=zlhma6^%ZrB4tvIXCs-e?aKJl&
zK5JQ7*;gc^f4pt^eBFo?S~jxZ;WG}^@cG$<%Zpy-%MK|xPjJ@?OlbR`(Ya2oN#-*K
z-ui<X8&`3<aOhq1EFsS07RjIctRT&Pu4BUEqrf_SJH7@|4Ao)GD3xpip<#A+PtHTO
zo48{I$ikkL<U)RI$?a7cvusKXY2(oKn^{03l(a9i(9TJmuR3u!9iXnuKT2IS@NTnz
zGB{CqG~(^NZ&-ZxmN?aU_wAmu=wVuM0>B-$qXwqKu9aV|^&e`RpUw6#Ex2nQT@2)N
zcy*s6GxODMS@d!xlh!9YIxp4E0BF0)N5x44wRb#MF})>MbeC<fjSkflA>9jigms1s
z258q{!1QPN_K`pky|VIZxaaVPY-R-chOwcoP6_3ff(a^{Wt=S<H-SOWV!8mvrKb}M
z`Yf7Ku}K5L7<9X52chf6;M?V=##FlvFr{&mY8NhH%N+keE1V(NZ#z_#NjH0q?4B|J
ziTr&y@&*SlzI^s&Hp{&|uW+b8{Qfc*FNXJ?iCv9?n#vay9rYU9cLI&`B)@HjsVW&j
zoFcPX-tLJ5+}^aQJW9vp&Kl-D+FyS1drt)XOEy;wj!;(Cd_H5=H;h*`V>DH*mdS?f
zQz6xQ43t>`b1!a=dr&kQ1=W!+vTlo0=mC{)2Fl86qAEX<7LX_hoZ8h(K-lNZ4TAyu
zsB6<Q)8a)<_79ddwGDka`@cWXH*OjJY|3O^RGhm4L~_s-n#~t>#t}B%cTswJAIP{A
z3fw<ql6eRo5vc+;{CKl94DU_QY69;jd)c}Oo4c~Lm>;*Lvv3oqcIQn2#q$q~de$^G
z4SngbgKyUl2jhYP@H&pY+8miV;~OThoE=nJYfDy0`qgL+%I5&JvpngNF`8vdzOq6h
zjaM{>u|vkNcj1N`PULr>0k7U2*?sWGnD&K}Y0)@0AT~KD)jN`Txu!6;n;!X!KSX6*
z0B7t94VP~`bpF!>nC&msmfivvYK76l_-35~2*lx5WHIV<`j$2MzBoOEoEvOIp80TE
z-@mx^mZv`zk0x#Gziys^3D`4hv@PR~ko|e3F};%T%=50ZJ-d?8g193L6^ASvutEz#
zN3T@)P;@B6Y#eHZm}_9^{#5^}7KI_WlW%AurI=6*pV^Xu>Gd+p;rCgD-gh9OCEVQ$
z>K1G})x|pE7rGaE-N;Br5&5Dg)o`NZ1DHe^lZg_-<qVboFep^jy>Qh6l<@$S>%M$%
zG@s-RzQfV4@2+qBIO$MFur1jxdy3Ds4W=q_3^Lce3Z(yv1;{O<K_><8?wuzyiOXGV
z-hBVHXuk?tLqclRr<bE26lFuY1o*uQ;9+9EL@y_|bx<<TOUeY6pK-h!ONe2E=h!~-
zoCNaoG=Al=8&1uI-er0a1elxF$F8i{@JUxVpOiwYJd4I5S>_DD^o)b~3?V<-+9`N<
za-0X#(#L+f^rO^hmBd>GpkZcb2*5AIj~|^Q*s{zrQjgPX?b!ruz*nHgWoBwMI!;Bt
zYF-D=po@k|6}+hd_D^Ts3Qly=vuFA2t|O0M?~j76Ck?!nW@!HU&0b1gx@@KM)*`fi
zkGup^<xc6o29<E>U1#7B;Q)Q(`aQyiU0CFWnC+YAytw-H&&d<<KxuOwIYO_nW;Y))
z(<_6zvXbFqpVa44Jq)kFz_4E^MiewY!C(mlsjGGDkiEMr$5K#kl4m4TX;7omka)rd
zhBmS=EyJPKR`-bo*0n!Z8{L779o?m2G@8S^uj-@ItrD`=ky}7fzO4GGDlLS~vK(Ih
z{z($ef&>@!AaHihZ~eG;4aG~O;J1!b%#T%Zv-&ndyzQ;cGS_CwL!4;+R29u?+@s?=
zgcYkiix?<BiWO5dfp~D{u}OQuB#hXW@^Gl9W5`iB1JiZjD+a2d_m{L0Zy)>hk)GbZ
zOu{X0z<8aEPn@HH*DmheR&g}s3ftj3m&%@;JZX-89<W<y8Q^S*1$P75zK*ZxKi_nP
ziaufh#u*TzboP(Y!k=b$+uQ@1Wn)X)07Ypgbm^`gt{Kb;$OxT<QZ201)j%>62*`bK
z@<JUlK(JA?FKD?bDRy*L1g%l<ZsyQ<(s5tbv2dK8dFH6`mq$AV<TQk=<xE>eTgbN^
zWnGJZTfsbUsluiFr|(&!g+4DFZ$AR#yuL$t`zhPGXHBBk#_{zyLm0}&w;5gU(t_&?
zuHIc9%M9)r0h+>(Mz=0ea)z?hJ7!gNL85!tjId7)(vAA%M0xf2f=M<DVrSTWX<wfj
ztx6g9Rxg~GIg3^|G=j*jFD1U7xp_d^fO&kUvlo!d=Px09mp4)J{y>>rh&BF^EG4?}
zY=+4N04?nRy-MpgzbBOsLYhZ0f^EO#&+{%tw0&dT4ZgnYAXG;M*jii<*huv<T7};E
z^kEt!7~wT|{3-eSr`Bwi3p-O4rP6#Oe_s7llDNtYEqgg)<~GOvQPu0!Aq>eotH{Xw
z$;x?@Q+}Mk1UsULG$m7M#e769Vl)HAYWD=ga#{N<hIh8AB=ECXG;UpMAKtb~6|>E7
zaQ%e;RW%8O?7pGKp4z)A*_mJwD6+YD{fN&Rg>N(3y<ACAY^L0RF^~CgCU){UaNd#v
z$HRUkn>MEU{5EsvWGLwtqm!R7I_QYXd-vsW6ZJdnG_9%?@QhsYNhotvhQZmb<E{GW
z2&klXs+#J&rCs4Dp-6pqT?TDli%fGjQl(zL!%XnI;dpjT#!nO-<fHOqL|8QGM&{@j
zm#YQH3j;d0IUVNj?0P^E_jgsZ(i3X77k-}>aF)Nf|CXc1*K@US;P{CV*t<kheP*wg
zg?ffLCGhgo0)Uc!=MAxk-==CQqxCsvv&;iu1_Uy=u3M~Rx89^~rD9md&zBs&iX))d
zcf(UcJ+-tih1si>bTsH5yRs^^y@Ub)8%zD2BD3r6BGf9WHz0SfR`IoL?^W6K5n4#a
zg~hoGn`sypByr4;r^M6N*Pl0A?-c@2uYFIvsl?n!pL3>>Y_HUApaWy}UtiPQsIPP^
zzg7H}5|N0}wTvW}biC+czOhCsAdNAZr3O@+WCK2K`K@o7I>Bw1GqbydyboFz5mR{6
zssc}BGfGq$mCM^ER8>0P(S|WsQt->Fr<JeUu;X-~x8raSu4|3K%G5Ps>S2b?dcA6K
zW!v-_U(0uQv3xUwdIQcDJ^m?_8z8;Z1VNoUubs{4tKzpsRC+}re{Zvl1z8+^>)F;R
zp2emP0-HoNbJ(=QrKz}Y6udVqkU{Ov_6h%c&tG7k!h}?tJ6Pa1<U|vZ8RyaFH&$UV
zc;Lp9ASA=S{?YAAl){6&aL%tP0c(=pU5bO!S@zQb%C{47@46hVEKmtqLe*|>_!!=T
zef5@kz((daUbuhLC(r#g<+2m3+DOU(!t#(pm5|70Oy>q!6!Wiop+%lHG9Nt>3n*Xb
zKRh_w^xb>@_O3@&ATwjHkg6Y*DCK_FHvHMgCqnAq0LUFnc;I$xusy>JHwZJ|@3uIi
zeapDwI#nwWR{cY2nrK$@J~d!kQI>%e4nq6GK;}&m&Y{QU27(-pyZiOni_rkTw;vhP
zT|oT4Mh0d?tD2iR?<Edm6H2{&E+?&OdnxF%5Q8u+EkGEZ!eQ;{T#_1=LFS47$f(8z
z1_VVAj<yhZ3-Inq<k!8RrgW^*K}NNGJ74-+2r>AwwB5(`wijo`Uh*+K1|jW&h@zM-
zOnVMj%ZHM)0UN~EP|$!Ggs_KTyv`-##Lzk!*sYYz9)|SYJH5bxr73wEwjH(gZa0I;
zP7gfrIW-vbBR+sND}3%MObNtPrL*k7N8`9awC#sWFlJ;FP8U(c4612^3uW5C|F3HH
z(UvTfnP!pBh#h!_@e)Qeszvk^&|H=>oeck9rTPExd@6%f2EKnMG?1c!kI^wf$VwhZ
zr!?8KV)+<)0LP$B_P{_2!mu!a;087Bzl`ME5w{cQV@>u9H$!%W`@foj75G1sCA6!y
zyOcdFd_Z&jVJ_`2&HwSQ91_n^%=Vh0*;et$a&^x}c;E^#(08Leu#Fl^iuv$Y+&R`z
zZB$&^CUveLt$Nii*<)t2t8etsCJ`056+&tj&D~yEI=$T%{=JUc7pTAZiF;dBerq<+
zn<BK0YS~^|5T~-b1g<aeQ#4cq7ll{uLba>$hyKCN9;dEfBy*h1YjW=9Kd}J3satE)
zEbZ~ZiR)P`TeI7XE9Qyo-rG45)tep1FU;{RV2SPg{SA!B6-ocSHy`crj}UX%uy%8x
zy_~p3S~ak*8Z7@jVlek<8zQv*t4fAMP{pl7wtXYY*sl(s3s+-$w33>s*ShzQu1eV`
zUy1Kj{`5q1o65k@`K5sL8vc(4@YoioE-^8rH~)8k0%garyQACI2AEfLX>X?${y(U!
zo%Z@4+7xNe2Haef^tXZigQEb@ifT3gr#o8p?uI}Z7!v>Q>HU8in*Y_&|3aDAVK(po
zAc0Xhgy(LW`rQ%8|Ns7^7LZ!l86JruWZ|Ykw5{BOzGnaH=YMhIuP|)?kIGpnv*X`w
z0h}KgP78ye;k`7AHf4hsAJ5Ccpwk3y)0t?-@bs1$WpX!z8V@!RldDEEh%W*o=n>QZ
z>Ysk#PTvsCNZVZ);W{uwVf3-oCc-LB;N|~C7MNWOd;g#N^Ku1d<d~elQR6qlr?h(;
zbKxZZcZdIy1P)Q<)D!I<sc{QwvF1FW>i(aZxdmbvQ4jW9gwnh@0<nLIy!--V);6I$
zdY|%UJs2df{9#R46i%Wy@WPU=8;HOKJ2p*0K4F7bMl3sK&GO<`L;3%LvZdi#6!g4m
zQ&p~4UrPSB<3&tr{;rJt(acd{-M>2JxDU)_T)9uv_qNg(knO^d{s<$AmH;8nn#t3O
zPWD-#e(67>{e-u<Rvr$B4G1j-C#XLtbi&)Z335HsAQJx{$`C~?V2tC^f5!;I^nx=X
z!<Rqu<p54&3>JSTT=r%XE^zPWG$X^K`#U<W7lb-&8~jw|W?;B+az}<)Xk8uN*%R)9
z;~#jQX-6J%XtDz$GwHf=XOLjkzqSk~jdsa32mJX0CYt&GzXMH2$>Kb^png2%FN)xI
zd=dsFv`jd%-bkY#L~6$14&AUJ-@7odvS?+db1kM+^<R=K&Y}z2>@Lg^-93x>=Ek=a
z{$d#X6{7-O*jQ7YCaf(@MBWNy`ipOk1<ba5lQjofZc>?`9te&j|Bx60uT<U6uqFvT
zh=W{wnE!13Je>~udS1aI^UF3f9{x^y;N>4{HF8SxFE8`rakH~1#riExv3}Ch#J&Ig
zCKHca?w{=-ST~JqksH-3G++KptQ5MSZm{FIGI@S;8TLt4dR*t_zqmNSp=Y-8O7$0X
z<DLldE{JOWOIkigg}ZMS9~uFvBad(Y2hHHa$X20ekI>4v>+*zLeq0buTy}WqXiaYW
zI$`qbxbNyGS4`3=ke<mPNvG^RD7ZJeU3#Ub{IE-W@{4iKewr4`ql;t0H^TZvN7B_z
zw<lvr!|10pp<LW9@LpAQa~cksmOUz-!vDlX-sqB^^@|y2K2+!ZcjwOQtAEg97uD-x
zJm}1p%EG@N|E=lA^W=o+Ykc=Jw)#TF%}gNEzZD_AX+?dCqaEDKFB{{<E4U^hSzdFT
zcC-oSN(6O05OI5s%lFT6P6;~in;N8{)Ja3>*ad5{{Qxt|5W>Z|SyQ4%)R)FHJ|Ln+
zA#X9dQ!aw6{$J*QPoHe$=KXbr&d`58j_3u}Tc(F<x9bbdE7x1m<ZEX*Bo^uHQE3|_
z*RO5r-o1DEIGx!*h_M5g^kCctg6CRuy*-j<q3p!}{G<a@+QNo7V!fl+T^UvA0+CKz
zTuOG$gw~`+ZWhLQAzSH-dzPd?4(*?z?qZQ!fHFp}$`%v%rJtP}@BT$Y3#;hwQR&K^
z=$<;UYeDGcslPP8LU;}|OY%HTjStF5nN}DZTFvI6$-@qc8nCR?)^qr#g^7#t$%UJN
z*J&~aoHdCUuba`hqhbX&7R#GceVa8~w*Qk`&oS+audQpJbu_jpbhrgi>#WeE9XNKI
z?O8eDa|0#|uRC;B4ohDoZaG~`!ufN@?_yv8aVdb&PciK(udRctbyg1aO(8orow2+?
zb!dKV0WW8P;$DDlmtbOzDfy&E->uP2sB2X|au@;pmj7TCg;UM+bMKl>Bxs0*>fKf;
z_1W62K8EzS_)Am}Mw;YW<=yLh87#9Mu14XW2!ecRhV&ZR2y_72)N@{=NesgCO(;!9
z>||(U3!~Yg^rKVAu=aMH03%kB2W~nuMx&4Kw-!ZciY*EU66`N?(~ROy3!ufo-pq@n
zEu}{+K=lFFL|JDYZDuYUp-t%jrJ<t%r<nf^`+_FB|FeeNZ|&)xAi2hK%a+{y)^>rW
z)^~VxH3rw*oDK?Iur^M*Skv~a9SP4zc$QEXh0yH;U9_y^h7xev0ZM6f@6&*Zg{E``
zR?JjKK+(o2;qDTb{>nk<5v(HonDSO*Vu9k(?R%Z}La}>5cKsj0I}Xwrs(ztCfr26~
z?ah0@mG=jWFk4Ueu7~TWa`r9EbBr_R^MyVCPUCf3au=~a(68_(_iPgZhOV4h4T1l=
zh8<z6PxZIm5-_@DXt9mZy5(iBa(@-&p=zVKDc_e*ux0Y(>6P%|Jld|eqYzFNAl<2r
z2@9A2HUf3|65+d}Q0fEi-_!B(XyXvv2}|JQ{(~2r4f&Suit5U1oaQPb;cgF42YIvh
zb*}-o45tXmJMj3gfbMG{jErpt`gMavzX+Q>LDlnGMNMxzCf1Bahlcvf1fD(kgO;ND
zN1pe6BXr%GJhM$?!lM#4^lYG$C%6q~nvYEn{|8W1Gr{>=#7_&Bxv{OU;0EdkVP+y6
zKbv!<>0vTR=>Ibv!qK?qs%h4?3kuZ=TK<>c#r9o{e|G14a}h0__8*ui9GW~NVMYq7
zpPU@2<(8#H+4B55EpJvZ^Y4Fu8Z);oP5kv)Ct2XwQ^@SsMi8X%k2J{IdScCIzCRWz
z(tG|p)&BwqHTkfhtuElxRY?O6q?ebMI2GFSoF=iLrUiJ$h}@cDIYN~;BduH+#hT^O
zaUl;rB(E<I*I>#!)J=zZSBml$(qLNsra!T71FE;LA)|^;fQ1yQSb&`Ruq3P)x?9(B
z{fvK|YFbANjo@J)5$F9l3y+*q?%Dno=Rk*EQ>prSGm1#>Q*b%N3YVa*;}7T2dbJRS
zqjAp((Vt^_Dph40LqKhE<G}4-b5!b}-bKvN!IE;*&dF<*-Mrs_G{lmWgLt*eyH)qe
z`Naw%Drt)1O|QD}eK85jE8Fi8j+a)c9*|F>XshDh_|)JtgWBE9yHj&Cw-t`$i$R+}
zt|y}CN}CXz<1-f`@9qN~GRC6(m84>0GA451Iq9GyJU&%y@wYA|tLEu@YVHl1;_-CJ
zix+sJXyIlgo2}6y-J}@XUV98=K7AnSeKPd!Ufz{Tlqld`?e@SNrD>9$K!F<xb86Y6
z*#SMvfpv<Fj8h2Dp5B0H!H_d)8Pj`|FIok~^Okgn?0|;}n9T<cMl3V&8$f*AQ&r1K
zEgUK}5S~M&nUng}@FW)Dd#V|MM;z@2Xtj0qfdB3pW+hPkg~w`HtrhtQb<WS%E(Yi3
zdlJfG%th;-a*A4DQKx~w*c(BcUIZ3dcqXhmZyrNQap>q<S{RZ5X}6`+2IH?PPMRG&
zM+Sef4u&7YU)llBz$$tUM(7SoRo1h{7UQ&I5c7uTn*5xXOG<g2w$Fmp76JJpKZ3_8
zj<<_C6pfmv{9vF++Caasl(7Yum0VZfn!qTETdkE#OLm|ZR_;f86+~sjycA`S4C1Wk
zQ%C}i52c`b76@&MSj|&!z_w#Fwq3U&54{(*#+DsR&n`ecZEh#L<{x5T?MXV|0`o9;
zbJRd`75mX9=O?>^T7^Q4AYzWb4P8Ln%J05t<{Ba|f*w>+#VD-TOW&@p1hJ+L8>l^?
z@`u9skE|_T{6nUk-XaorFem5G*%%tWj|-5<E9K+xV^e12wTGD_pW53A&!*!%c3K(j
z9>)~{Sp!crkUD}uqyA7@qk3>tex_+T&_n@!1%nQVE2{!7J)wAo1W*cn_%%t`@gW4N
zmyR2V+PWz7=2@DWC~bkTVUZ6%ZxjZ<wS#dp!8|De!t4b|*V{G*d*R2Rx{rzXLuU7m
z_htriINFVifr6CSf#c6H0V4+yHzm<ZBi_A9ajgsHDJi%KRbx9kb|kJ0F-vx|nlM;R
zSzn%tZb`<_#QGGRT6*Ss4Q9n}?~QLUiGwc`H;!xgCLSEzvSNZCtJE2hS$Sq4998__
z3{~Hv*7`e_w9s)Henwbi#hL5*m=Vav^>t5M?sPY6a^7Z}2Uam)G*iR!n+WgW$HQ9N
z`+h9KkdX)I_@!b5pLj-NxQdEKUiCYz2sG9l9HEb*DmSrYuZK*vD>Lj?WtPKecidv4
zO>g}x9D7P1Sq<_M*_#rDBW~0hH>l+A-Gz<&5k3;?gunRQqRs$V6;80UU4F@XD)E!x
z5avN-6iX{kDm}rof9%&CNN&dT>G24Xxi3hXxN*0DQV}U4d{Rt*R1iLFBKeh+9ldbu
zq+nWRAk&RCYYk-N3A%jThxHZgLLiVwK_PpSiu=EDl_cdZNBM45Mp4Xl)GZboa;Mt}
z;g3+~-pPOF2T&G%H@=F&g4DY2np4ESJeKeFcy)=U2Y{aIa(iJmr|0L3@C?b(<gSb3
z?q0qcGpuR8ElLWENqxsb(`cQqaW&k*uP;12%>f@q2w2SXfQbqdvJooIXgvLxCPa5^
zJe7W0WhAWifXXF^iZ}|XoTSiYVT)lTjunvvo-FDy!spV@p;1gK*Pj1cn*^qDl4DHZ
zbN{l~RI$WaH3~uA^4-U66}q9;fXM~X%)jP<|Dg+vVEIh~@Amfd+O3s0`Jsw5Z5Q&N
z5N6t_x>u$EBHw4CIlRGHMUO_=-hwjIX*pq(nKL*5M-&$xhjQyDK76_B#1}}DiisBL
z76+Y6t%Sr#sWcLn#!AP9%xO!l^BvG@yQ;L!H$?qj3BEf*CqEt+LUDmXAVMnsfKLTE
z+8uST_`!&8d<L7tr>cgp(nh3UDKbBq5d=C+ov9Xg{j2i;=5=o7CqEv(%`rB5SFdo*
zYe$IArL3;Xr0=1i8u`<W)6jkTBbq3lw)%V0LVTMO+O*yh!TV<<hN4vCt?yqaN;F{d
zLy;u48}MjBvBYPx!h$6JO&cB>1$N&EV>65^b^iYGSq8!g&+l_udiAeZw(B@9`dzIJ
z)$6u8NXPCumg1(w6)h_aL4zVj@5^IS!_IhjPh900);3=i6#!zhkIs;91R|$Zw7=T5
zl}4HnKCn$bIkq3nwuLdJti-}fANeAfE`uPRIbNPS#D9IaV5kmEenbo(ZPfj1@^w@#
z>nXoAap*Nonw^$@8r?WJyC-?~@{Ailc-w)<m7#I(8#iFf!`zHdNS@rx#?#Me@<T$9
zC%OqygZIjdG`RIZf1>4VK0Uus&`V7bBm<Wk>v!At={7zngLrIM`mpg`YGJ8jr^+cr
z(FyZR+k2YZ@}SfEy%`WB&phaqZU%r(efkK?H_c5~h|TuuD;c);v|>tl9))>#_f_mE
z0jyD{u^Ne0{53qTjC|L~{h%Zn1N+6!n&4Y6zOTnoosw8$;jM{$@s>`r9t_1DvZt{4
zB8oULuLjtYv!{Fn*)!u*Cj3b1oPX&{!FQ7MNshrypg6wy-y`DpJiZw56w~_)hCKb=
zF9uBBlM_ppI>;B;(lD^?fh6qG8q;)0YRlNnp2wd}bzu(Jdd4Y1Cz>?WHY^KXpbCi5
zdb}Bft0Z0%4yy8zp7=V<d#UOIJm;G&{-Y7LM&v19K1+S5JfMbtrm)8%{T@72>g4U1
zM36XY{cK)hV3RkH;_oj|jP~?IOeFi+QL5SLlOu`-)ir}RW}$O=yi<!0uy=V^4lI7?
z3Kf3mY~0;fzB|JFGo3-8OM#+L`rsRrmbIyvUJ$5aB#D>zMN9V(UR}8jwcAv>@lTi9
zGFJ<b6>gph)~69g(pi`elARth*)Gxnj~-?U;Gu0FfN=k_6hd%Tjj}b_EefIolc-Z_
z7Oad<6-}I|B;lMHRr6`x0oUU-*hIer{<9IbYt7gEL(2gNHD#lC!FLLDKF8uLi%VM0
z9EAcWj}**~^0m7ALvt#r$hk(Ynw7SH0B<HgJc73({&$x#{{GuDBU<LOhbvyDzE%Fy
zUXtk}KRm_R6e$yD;=amG{%I=8?Uj*r8buRIP@&+*o?Vc*;!H8CJ!rL?;l_B0;b4CJ
znQQbjeGkI(%Xu!3y*}+H;W_OR_+}$_2vp|+uu}k((!Wqen{F}_ZXVxGG<aozj?#iI
zO9jMNb#u<7Y3iM2`op%97b}!+`~VM@4P8eyyyWiwewAmjJdZUkBkRb{nK%Z=7;o|G
zpzG1S@SKhmlAYxGX)st#EXmWkCWv&<itd5{8nf@=8X-i@TsfZFwd#G~mp14!+3nG1
z)p88eC7+7AJHrj{|AkgOYV9cjM8#SG$)rJ-s!lO{zmdBHROd&DsDG^Smzv3we=v+k
zX_%}0Ff^CEk4jaOZ|W08A5x4;jSxwe3HoVNGFg*KI{1!`1aM6F75K>Z7@9l!l~=^<
zS|30ZT?U&*S1##-<>+&gfir`Kd<0#OgFP4Gba<##@#pbyM3EK%+AmgeTt<a+jM2Ci
z^$*B`i&$yh$QrTE(O3tDE);_bXy;~R?U@a@Za#5%adv@z+MQ`85V?FqWWr^Z6a=7K
z>It6!?1MAVV^@rJ2Y*?6;pVxSph7e5S)uS0j%()Tzt4xG(u_C?i<3ZI3^Sx+oGU-a
zC8s5L7(qo_@9Y6O)naHN)q*27qcZ{x8#Xbx1Xl^@G3_;0{!9KbRkcz-e=cdz!GM;_
z5@5MIRPn>-zAQXKvsxR~7{!mbtSw&XHY{b7=)Uq|_l|b8@BfOM0M+SbMg8LhQ6fWZ
zSJZxo;%m6^XBvWOB6rZ*^PI{)(blt};X-~D*d$CthHUZgrD<JcV&3n&6pCDWN6jR#
zn1NYw3#K|Eqr$ODHZ4N|T@;}yAT!48B6CvM>-8sRZDd#%U0>?Jp=Kj~k_CGa+eEPG
zo_&_%3LS?X35MU3ZzberW*y<AuLKY?&3^VOEJ!(r@i_YI6P<Ep<Vhd{MbiGB{I1Q_
zEFd5g45<%;q@e^aAs|uHw*WV=B2eKgDw^CpUipoFo(q|wN4V*o#p8|vqpU8=1%+ui
zsKPeMEfjWH2E+IfEVD2o9V>shl-r5c3Al_DmhZgo`t(2=GyZ<9xUO^d{Hh4xMF^c2
zHbq}T53i<GL$Q3{N3`^s_Q~<734hA?<iwnt5qe}lZLFK1K;wYi;4<ssX8YFhcQ>~j
z^Y-qt{H<j^$nyI-_t_Kl={bvbs5bQ{F3m;b5{iLg62`GE3WzHd^|$8#QndtX4g=b(
zV154Ol<78mEMGxxh6aKSt+ub;7B4Z#pnEBWF4y7(WmAJVRTr>lBz%pK2?TN_tiV}>
z-Fi*hXSJk*6xc6}J`d6=k@CzB`&ly7VOE0Mh>hjD$b`I^8<aA+N8T?*^Yg{Qu6Q2J
z>N%pM9ufFYEI_VG@)~etwU))CMjs!|4BZpHwm&Db1A2oluqp820q(Wa=gVSf^9)bw
zK7a1<MD+eIV))s+)hep5W9S6jhk2JV3fX9Nr*6`^8WVB~%mqF9wo|&}ivk2pRG!e7
z`U+G)GwnMU75>qsBN}Irx(}XnRLGnd8dy0t97Hm3`jSf8H*uM^E#9*Bbh(rWD*Vm9
zt(`d7Id{X~Hxe`Q$yF=~)BBrUzOJJG=Oe^gv53FHtoIpcT@%f8yK)2WkDXCX1x$zw
zx&dKyv+*qVG^6;6p$&W?P?0O85-c5Z@);0&>O7E^qqG?e6GNAC?=}`j&-Pa!1E&T(
z0D>O3mM%u)vgb7Qn)ktiz7+Iz_Z2dhfK@~{+Uj58D(kxJ!*_e9XJN}^IYx0FJYFDj
zeO4$I3Eup)*N*SD!dhJcY@b4tWOGJyNgP&JXcU2`xv&%;6`wbtB0)u2-)rg$sD-n+
zCic{Ni>b+eSVarf9OVgCZJd7ZqdP0Q$gq6+S>iOdY-6b9D^{_`%ew>F=rKAn4%|b!
z&qskf$Fn?EFy=UB{IQ{AS2m_v6k7j-&WBy_l;71u2c;8mma4@GttuuGhOm;mbG3Tm
z7?`smQr9bQnxSHx`D<*>^$r<Dnv@Es;WT(wAESl>ALM$lGL|bIeeVYtE_h=zzb;rF
z)asiY(d=lBG6wh^R9U;(A4KAKN2jVAKAiNtZ#P<T%0-AfI7KB!;60crF@+*7-@Lo0
zF%xYBoll0La0f@zIZm|N&#p2O88gbVy|<MvTm2YaY4^0^b1$*t6ACvCvkX1wfoH5e
z9Bf1KX!xCYZeR-)v^|qqoHnB%dl$+{924|W-@^SbY`p$b$DXy0+V}J>>&r5xUo|ot
z&2961-TfVbb%~hX$mM8if3%<|hb8BA>%Q*uFSuzskj=&ua?+H2Zx`-<8cb4pTNGq?
zc_sgv>W~1GMIOVW;nmtI7Uy@4rdY*`M<uuH*9F~cSdWFz7V)auOFxtci8r_nY3Lax
zFYqRdIWQz`s3Te(GMDLWjK!InPb%KNmt{BYp>6DVTep1zq*jrAQplkO!i!IGAQBtG
z&^k7vyB<ub3E|nm%A_q(_9o>!VW|JP!LI?}`+}jETdAL43W{PBVyfcE8!7UrDf(7)
z6{ad=FyED5vb(n`T-9(HY_0hdkL1g{3mzYGJZ*lo`qz89b_>GHBiEIG{+^gJcFJFC
zUN>e~x<_=ILV#6hG0zR=pz%2=6C<>}D}x3eIsl6EesHgTE_5_?<rgBAAH3#SOv3#3
z5rb;~a9s%ppn|ONS#(hZ9!)r>tNhyf8+ONormHc=i$kC&%ny$*N&I+t?Ngy{Lu`OI
z;Pe3+r+bocsm0mt?k2yR7LQ&!oK@jUbC>bwi9#imC?;NuL3Mf(6F-+O(Aaj<0UT2A
zZWHyDR`*C2AVY)FhN3WX^Vg6@UasLBf{rVh5CmC8vqJ`41=68cD;BV47b@-;v7!hb
z(*&SFfyrapUlXkB1Dq&|y$eM^Qs^fS*-trK6?+jFQ=c=}<w*th5CyiEnBt%E^AYRa
zsxd%3e!Q%T#0`SY6eMwgzE^dHHGdpxMX`hqZ(0v45g-1vO8lx_)ojnRW;m22511X0
z#oryDk6g&KJ@U~LUvu>lrv1)#6|UKS=Ebp#BOM04mAK{3*-GApyE-s_;$7rjFR&@Z
zx@qTQq4=ZM=tqOAx^QJ;z_)wAH)`KuP^h{3_Sok6SL<HXlV}}<Nd^y>ACDLeD&wod
zaD!7nmmbh1D;mex@%XjBTw`7MJF|1f#hTrw!!CWDD=Bp*fuNH8{!OL%wjh$^n_=F7
zmK?%6pmpfh^Er4*5&4?!=oyj69n;%AW50#?3p==1A-XUPY3Y^Fxrx_}^BI1zL)@#U
zoSN5U7HUw4BF>5*$N~|lwq1#sKj&=8NobuBQ40v{b!$(`3V-AL_9+olz1v$xSVc+q
z^A-Nl#AJOzXW8Y?DXoFSy9WbrfH-%faRv|b084hJJIgQ%9}M+fw}5`QHi4-=CJ)*2
zQW0eLAguF(t?JliV2y9&Ahx?60xE<ur>$9mvCHY8mW>pH*4oiU9|41iX*7P{E-JwY
z1`?^e)2=J4D7yu`&%X?t?x%T4oa!S<pniZfRD0&y`kk-y#Mh;z;DpnKNgX_h_!-%C
z8D6QpWjEez=_|wAmr^sKag<m2Gf-WhPx}aS!ku=rCTw)u9%9S>ner}Mp;VcEwq*lK
zonm(5&ZlWi0P?ZfsvY@W;I^xR@{o}KgZy%t59fuXmC&n!TZeuP(NO@M_}1k&e+cfl
zc;~AkhJGRuPQ~db1@CGmbnmq$k1Y!|S5g~yVF#X{#|QNj4Ulo2FUUp)<bEX;`iNJf
za6C!DGaZEG1Gj+eENLR|*_dGW?wa(Es|vtPtPVKRBw?RAjfW3Yw-u)_g4;H($$@&6
zXF#4RYd259#9d_E%@=wAfev#y`u=tbEwptG#k<`XZR=Sxrz#54q?1=NHEbGu@$kzK
zn3aKNbIoKwZ3{mR>XEtZeR~njs$Q}UO5h9v1Q9ksb~B0nW7+eW8b{9m*)cVef(2&V
z2=DfeD!`rCG(>$1fU@{dbi$vQ?JWVVO`y#g*o!MGDlDeU6AH=>fCm#qxV)F27zm%n
zzbG;~<fM&~v8U5w2!p7>`XVvXzs-;~HhE<{BE;sgY+wN$k);i`b14;}u5!JjHPRDc
z{80+8ZCGyZGwDs!NPn)JjAp#?Z(i4Ay}$Ww>M1D`Jsd$|0|l$Wp1X6!mERdl>TE52
zB`ER$Ddj(zy?O=t*zG^Atc>g;P}=LY;`?3^O)0gw-0h_QP5UEBzVy$o-<*{Xf#WeP
zIqdKCS9oP~YU0t~OHU2}UyCsrIE4QD&(sFi_kN#aQ$-FUA^!dLjf`3Bw59Opn(Nn>
z6|<^}mx3asv8(U16~gW_{s-LxKf=Dm1CQYzf4kJ|wGWF-CiniMp~m}){^(SZp0VWb
z&x<dPJowL+%0@$YcH7hMP6vF<3ClDL|IZO?(7BN0m8ZeZnV;ZfpK!bAWBC2*K#N`7
zxz2ki>7>ow&XKEja9Iny!V_t3&3iW{^%l)VNMomi3Cv^kt-#j()yV?V={K#pBoXv*
z3TfAb294o+v5F6)<8Z3mhI-t6{HfeRoKr&cYwLkZB#M7S63*{bg}}%u(i3Cb(~rkL
zJ`ZW(9Y1jroIAjaEk28<=7_1=B~~un%B{=(sT;_`v)BOv=hqLHT3&;JzA51)VC8z<
zJa_2F--8J9Qa~!}$m)vgux_MF!R*}FwI+Ly`3x~z78lKTVf=V@SUEF(k2u|U<^%7r
zcqJhlzVz`$O`05CfQ&Z+;C66@ka9?(``u$v+wMNJmp_-ZIsMM@0_ePXypg=#^%Y^+
zz^xn@k0^qsWoX!{rx^%0p-P^KkN;c}pxeFbFtIsx?!gtG0!596jgi2|nBr+Q<O7?E
zXhD&KV}1S4S2Dyt&~Law5u2}p-!;sHoNqO3M66k32i|_?#P`E%#P|Iw?vJlBi7o&2
zPp{yDk=<+h2y%XCcMO@I*n%k11e-VT0z~n<958qQfnGX9A6)|mS+x(iY1^<7>4P1}
zfa3dK*Yxgca?qyS!_C8x!QynK`x4`|(C#)y9YaRytT6e3v+gBerPdV$M?8rBE~@=0
zyFWHH9i$e3vw;ZOwA@3$x7zo2t4~MLY(y09@US*_$MY>v2jES;1Kz=)yrY|^Cx~Xu
z7b1!ryd!Z8-0=do(8P{oSdg4~cvy?O<An=g=>hXhh`}Vq;U8$=uUMHEm}XS;e)v#!
zcI@(1Ww=w<0iZL%IZkWF^;<34{)eZS5Ka1lzo|cPFrZ_9U|cM5M81#zI9i7y357~1
ztZ{x`JUjM0;JV(;Jv7M97#tkn%YrO@foFLJSa8bB*Z*^zpvWB`3I8|Zjaf(B$1_tv
zkFRj}a*s6?jm@l{7u-BVP!LO^d!k^xoOJ39W75K%dV4g8J)$3LvliONHUx-i-RD#~
zf#-9ObOq@LBUN8V9oUP}HqRO$=H8@RA?at(-{tz*^FNOigs+D#S6^8<0`lR+&TQ0H
zuNu9Ol0tv}b)Ey9BY?m7Jw|shrEcTmIM0-PKl>pt`mNE-Y1^;9c+JZ}PWYBP7X!X6
z(d}Ua@PeUI=(b0_Sevz9SQ{CL^t)UdD9dVBUQ;B=AbXe<zbBjSJ<rA>KPzq6S<3bK
z#wF{inj{><#)Ib-;}o>}W1#q3Cy<8SydT}c8;?Eo^Xvm_^6z;8#`gVb=VFL8CsHxR
zgh~=a&QI!n$y%Z|4yd4XLAnS?qO-iG+1w)63hSCf*^92o!JT-0d3<WKKIVOSO_I$X
zjwJ0O(=AO<o2ybuqqL2jN*0w9!aoiN6CkOgKDo#6#L#>O<kqBf2I~hlnlWhCLTDbo
z7@T}k#p=Wa^EEK_hi9SC&+)0JPBe~b<AyZ3Z_*FcopGSdrpMzUlZF0{7u-hyr{GF}
z^_^jJB7h?MYEAPu-^d+cMbUfx&_YNn_uybw?S2=(18pkbeX=lEd%v{6{kv^qct(5r
zS&{%aHTZEhx*_$vid}sS&MSZXdkm^O=4y|Mrg{3eW7oNF(t-=UI^%I2<sQ2fHT>GG
z8bYa6P4?yO3SWk}!6DExCapkA!Sy4XSITjquWZN@^8#-GFXh|U@{|zZ31>I(dYv&|
z^TfT;42a(3k0VuK`gk{*R?Uz>$Ln3=K1dKCK5Q2D0mDD7j7xoUC>a*yXxts2<t|`#
zcNd*Ut%R<5ftvRHdTs}l$D8fzbT57xLXBpMJ@au|(ueKQ#_Xl<c@c2xBJb!PuSlQg
zzZ6JZ{fHuKnr_JYa=fL8^!1~_U@b45YViW(`eq(by4)dL#{eg-eY>v|j%y)bh8?ah
zhj~aq)lBIkZwp(s&mk-}*|)?2Vo|1m2$;EaCPa7G3(kC-&ghv|dxs|b@AH{ic3%@o
zr}m#2*`GaCKw^m9*@P8Y5JmTuy7dc#12>~1M@`UUKbP*&`UaPq;Gy8bT+)$<(rCd`
z<AwEnQCbS66~a4v9Pk<rf`jf0n5#bLeU<Cx3E$jYA70woS{p&p$B1{%(1&7B&8zr#
zq$eMZ(?VL<>8k`w8_-Rn+vCDLb!1f70pGbhOQy&G!p<gl47|8oD%9;!7;GS%&}bWs
z2KpeKe#ix{N`hB`=L;dw>nFiR@r(`FRg#{A7T*bU5Bm<b!`}Eyd^K^q6TDCQ!wD-e
zWB}#ge#;!d$1Y$g+7O@pwD*aI{0UJx5{2u{&(9T81-;G;X_~((bJFh6JN}o<q*WO5
z<uzbS75uQxdMSZlKSMv9AUrw1vwppqV)yHTU-Z=e*E%ZPChCD2$VYo=iUSlA1hiC$
zaLKHOFptSZ3`<B@Le}W_g*&*8#*$7){CFvN>O_Hvzb2s}HCE(bTvZ}5i&h~aac9Ae
zO>AC??$N)Db!Jd8nrsB5oDlz%3AsM(vzkS}XcI<*8Ik`24s(2$SS`8@@$9$d1GJ^+
z>Z6GOXyjbvcY*nW4eN%2wZ@wG+I?}lSBL&h=Zgk<vosFif)(?>NLVpL2GDQI01+X9
zF<X0@ufjI!PTW*I&A3T2qqz4t>HPr+S-?1Z)@_;&u5fp&9)I0rAE+yzk#+xyIhfi;
z;Bn6`H37Pbu5*7v(S~%$PdkvP()=k_?;ndVzH3VWhqP)YP3UTTVM0&W%jM?!0>!92
zFTv%0*sjG817RO8i2qqaL(SwQeN$Y;*tmJR5v6lP(Us$z4iGt?X+FK;Ovp8yS7u|@
zA=--c=^*q5Bvd=r1yJ?zLQ#&0B0ZtZ#{0VrMFfYn%%7K4#-ygfXk7iNidOQo%TM=F
z&1<q`3;+&qA(u?nXV*<M0ThsF`fU^dGG>koI=JK#C`w%(TkPK^cOlBVmkWca?2BPS
zAH-o9jai3j;{sEw_pGU@T8{x$%$qS6#o{Xl)jR17dOVHMG!H8~cD+MSiY8m2j73hn
z{edZ$p;Ytja1u9&tDVCg1$(L+5b>))=KAOv7p;F_U*d9L8;|qa->mipmijK`<W<%>
zd+&vtkM>{W^zgsX`<&$PhI0`3>BEJx?5ng<dJy^$uRyab=;Oh4w-42R^#nCaQD>Mj
z5FIAl?)W#(ecj97!)eAqu(j-?i%CEceU+enbjg5R!AU=qz+Tu{13`TL@d0NGE#nP@
z?fhR>aTr)7eFG`g^b|Jx2U65~cDu5qtzx(t42hSJ0nc}&pR;G?6?1DPxY;^YPrUR*
z+@~&!76J=S1wo3#+SPmmc@j{Ku)&vAYz7m&-)T|Tw2U~y0|~0V-7d6R;`}SrHY{Hh
zs@fKpk;O}oXyfd;|7<y~a!nF?oo&KuuYs%ULy_)@a0Yk^c#Fs0Q-tbnR~JDNIR3km
zB=TW^A5X-KLaXSJZ}#c1WXmyDmwWR3LR&e(AuZ_WRCBsfEPE58YqBz~i;Ub?B<9bU
zT`U4snar5x4N`*-^K*f#cp?ns{gcNX6(B|e1CGEIJzhjwdxiEi+9s!MFIP8AZ|{l0
zogA*4;TTNWG-QQy_Jp^+-UJaDr*=s>X`2TolKTtG5-Hcn3tQqA)o&loTaI8sc6DO@
zXf7{?=|0vI-=bHv+CA|-H}?{?Uv*R5G{&b(sny#v3a8fg<7jKRUbn~NbX0eIn*A&d
z>itFP8Sm_OF9kT4OpYOBZx)EO=Pw4gaqzv66+UF5rKeYkoFa7$Wk>4B>w)`gwc)kG
zSWtjun(eGoH*cCfSOZyRQdSiGY(-F#njJU?)15Kw<Y1lJ#PBPz**~HM(~zDw@Eu#;
z_{UeD$9$zz6k*Cy@$-84)Ie<2+J(W`)YJga7x+&Z%m+TU^P16+C^z)15FhjwhH9|E
zW2#7ZthiIY*(Y=dTJO1@d^n96gbo*3S%09>o2`V`)+<m^sxpMtC2WO1P&rXYe2WIT
zjs$Q0x)!WIKY;mg2*8~8dXLF{dUm&>fIzINWSJr;Y!EQyv^<^!CitE{rB*+pNFVnk
z4d|G+MXra~0N)odLR+4n8LPBA_MZUvJ3fg-K@{s)WBoj`iy$>%1;R0R`R&~<8)D$k
z0xaDXfD{Lp%~1AQ6h19;Vn6%<mM^UH(pul7XlY#P$z91yW_r7Qft@M53Ep7_t_-yo
zv^|}5zCyN39^ax{&;p@<OwP6@cRkb4NOdnveD_8pv~q6;h^u=G?qXHI@joL7!~=LG
z4r}XmJYMw3j>9>njsAX^nKiB*`JIz}2Id2@Z}w$YE<##$zKBOnjiscDJ7+f9US0#n
zCoLFTS37>p{5Aj2N|L~>atD04Zo#k!p7?rSz)b|113ddP=)Yz-#ZsDafG?D+f5=2r
zujA<=s3mR-;-H6sLBPHuYnP}$GX3#UNJ}M~>S-(zWFuPy%`HOOIKg=D;qg_!E*M9r
zrtTjTQ-^hc+*HZMi<{aW%plBRzpSr>fAjs7D@f$E$7u)QP%ue(U*K!;Q=&%ksVD7=
z>dTcU$^B8?s6|lEhBo41_@3>7A%@>|gOWlS5QVnlj4WIAHBc#tMoIW48|~v@x7F1g
zGfi{X#Qe5$u`y7lh(0Q|IsdTAkXFZjPl_o8sqYvfE1dc`?a<Dkov=0DX_mFq&}%(m
z{%0gC1_jJ(JHUgoAOO=SY+~GRErrLD?=jUw{O3ev)!$b8SdD%1PeL_%rms=#^&OMU
z)%^FUO73vrY^3E%&~idji0K&#9}y^2sg^r@r@t4>6MjD?MNO=LA>f!uERK{P3;ly*
zaUuWK<Y&gFCk+;#R+pSJLT#_F-QOYZqRErMht7{W0C75UnGo5wc|iKVU-L{8xQCuP
zJZHvh>*Rww9}>qNRcSgV!rUW0E9t=bf2}7ZWu#@}6jWKe7PW&*QwYjp{mbBBo9h6$
z^F62(m6|Ft*0_VrubO+egp77~a{wFQ!dHdTp{&K_=cm!Ebw_-taiEZl^hoc@BLm^K
zMFYxZ{TCrE{{M}rua0Z_`~H6$h>C!yh>`*#N?N20EE+^W1_K7t(m7(3ij+u~)KF<Q
zVnaYiDIv{tFgitIqho-hei!|I9>0IL8|U70UgzF>;(1Ohl!W1i_;Bnu=Z&`6=1zF?
zgDGF?stOOpqfj>{XBDCJ05Qs16l>fY#7e&P>4YyaImJ9VJ>|FV_N!RZ1CZbj2M5HF
zv`~p73PRI|@5-bVQ0)*1+mY%obhC}j<Xe1S#4$&1EJKmViZ?u$U|bhqj05G5MZCY}
z)@&B3n_9lz6NAWEG-$oUFaeOKGu6xo=SKfa1AF#j_d~)K4C(#-O{T$P*r-g@x39C6
zK<y@th6IK?{l`>Y>SSv~WABOJx(*pWDUS=o(d5F9w0!%o)m~~_-Q$>psus(u)p;AA
zg@h^CcB1bsD+Kt&7(hLi60dKjpEy1cc-_9kRZY#`u7;ZsS}8*y(s|9$V&0CqPBogv
zY&G|ZEr;LQ*E=}8Cnzg70)1VtB=yyce1k7P!!*0(W~~A5GzScR566DriT;~u7RPgN
zBgw@+E3C06Po_LNG=ZIn8MfXgBuag?2iuU%L7rDHQ4g5fh{P0g0V?X3znNwqe#948
zexz(n=L{H;CkOwp-#B80jeKGPm2L%&UGZjl6=nh`JbOsT?xDUp2906gRHadf^T50L
zzfMoT4o{R2!54hC`bmzsSTpcx+MNAI;F0tzvq#YP7iib~U2lN<(!PWcdRR4Q_SY#G
z<A<=t3Gp7rQbCB~8=Qc@Bf0t8^pU$lAZj?`WCMuqeR^E*jxQJ#{bcYp?(;qJB&-($
zf{f?SuO3DpU--6f#%;VdD3UcGlqbg|#{9t+HfqOJ@-_s4LoQH<LG77!>BWX11lYHC
zTSWaN6Ha69hwC`QyO?<X@o@mY@V=$4hI>R^i{(M-5i6f@K(x;JGCawSC;Sb92-(^%
z0&oaEX?qjmy_;|~&}u=|)Bs5x<Q9Bm4Lo~@u_6VGZzK8L;x>r?-o*C5qE8pJIX8??
z{@&sp6b3<8E7zr;$*o^s7kXg$5U0R}W%2U{nE@W&T)V;eBL;NlKhF(oC4JA0f6xSq
zwF<D^F@r3S{!HA_=4ylnf)xK_zF|J4q7cR7U(Hl=urg0BF@j`}3P-NK3w>>!MQhyw
z$AMw@m|f}cD|+x=dK1W#QzBIBy>soIk`;B$&DmN&DKDxNHL6>ZMBfE;Wr6|ozS`)2
zCE0l=4?GW>I_22dJZr?!crna24M+u-sqV!BDU6S{mn4q;>1)<(?gg;uu|*ZrXUNs5
zvno?Kq&y}_%pEnXt7Xm*Cjuy>TSoW-AB^I*r+~jEnF>RCLM6ZpHMzQxT>r+!46>uL
zn024|*=bN|^BY`-8ALjq95*<o1I;wOeasesEdO5Wg#5l)J=!(K#wIW250EnQza5z&
zjjAxSpo;eR{51=xsz^_3iMwFTXzK>rfUkk_7wyA?=INB!wmssQOHlWv03kJ?iZWo4
zU6eo3=V-Oba@Fddf+3NG;0SohZo~Q9WE4cOG?cKCh1H6H>1m<U&IuYVS(kQdzM`@e
zHJ&dU2chO3B41>_t~VI2<byo+F2CXbfJ}vhNNfoi^sHBcQwGnUlk-)Ph4XR*?0*0j
zVd~0uM7jUo9WZbn50Ndwq@P$;h8~1L0*wY6Pk6hd)w{C>^AAtAIoEcf7z)t8Co?Ou
zO9ab-M<6}dhPul)*H@}zKyZA<)sI5z0^Ehzl5eI(ix#Y50=v1eAtUnOWl*fB0eMYa
zm{V*lZ7`qaO`1ASjl`U|FvzfP=g5P;FXAKWFGHq2KzfG6lK9JfCleXx$0j$DSL^LF
z^#Oa@lva}McLKm}?)xRzrS=Xbac5XrQnLo*joKYXZ&hj|-uO~9!FQs$6jX0K+`@aw
zGkwk18kR1_eipXpAckR3S{+d$?ZhgB*!MX%j@{`YdFZPFS5g04<mM_BP?uK$VbiC`
zRyCZS-nmeqZ|3jm*g9eBlmEY10K5B%<3aT%!!46;)-}m>NxgVrBek`pW)H&U)=*ON
zUZtHk`~Gddkp4H*lEc-r=1s0Q3vH&H3CEy3@1F1Td2+YE>>tmqA{m>7<}-m*1_0}s
znjQ9>5V%3~Iq-{*@M-;2Iy~0zCnrvb4{Z9!bMx&^oUgH3jnV`+lk_T9uI?w$^1s9U
z2yRS8565xy)ffyV)y4H9MIrZwTPYXXC>yiPWsOMBotT;k>=gK>@w?xX%oC~gDq1Y^
zrQ%Ou$(W$iZ!u3Ks<F!Ra-tZUXq$HdSrqUT{?G|s(RbJ>&Ivuq1MU*acD2de8Nfv!
zGU%8;E48Ka#9FElTADX@0SInL5fZ&41bMs-fF`*L%EchEQ@|MRK3jc8u*}EvW7yk&
zf_vLR2s(NKegDirY~8!wA(J>17_j`2^UU3~OtM^M9xCczJ4w!0+M^)QK^q7;TBRtO
zm{k^q@l3t<b9eReS`~zPSLu*<jn=g!Y(?)&j>9%w<exBL>-}*reV<|8_-a{b`usmp
zeNndIyVCElK5*)R!V@K-h@cKo7>F%(GzFQfxSrm4=>{M_l<{mK;1UwV9mW_g11mN+
ztk&Rm^^C>q;(r9m`aMI-LSN;#_+(ju*Xj#P1b3S@(m+A9ybm0*8)n+JR+ytdm!8qi
z>3|7>b|BklMJ*BSeLSKW|Af)sd#75~b4hRMKJB#5JTQN629IlxDnS+Q&P^_iXUtG}
z0B-OHg7pfU<IYk}XqcU}<L7L7=icMW(AfmHO2hd&q&N_Sk6PbM%e$r?pBa5JNS}Q*
z>Jno#rdweCQN(N^@aUhoK)blBHw?r%-&53oFCQTa!Jhyb=kG`Jk#X%)teHR`Jj~<x
zW?IoTl`TW6Q!`aCgs(|zdRtN-mI;b7Su>e%7Vb@eGNUiR%{mbnXwI^(L|DQ6@;{ug
zq#mu^OUbWOu|CkU^EwW`ugJ~U^$x?po%J}Oh50^=CtJDyxMjJn+pYJsdE`(&QVg@D
z7XtY7;`4?5nj`Dr_zYX~uFlN{_PYL)fa`8<a@1rAS0lVs*(j<#$P6qmXJ?{hcxF+J
za5m@gSqCu$c6|`#=b+r9J(_Cr7_uYt{aY~p@SIF^3aWP+29DRq2_Ob)@de2=o*T{|
zLxKUJM2)L!`2#fDmro{5zjRG~&oHck=@Q>={7!v^c_LM<jo7&^kP@GjqJY56PbdPt
zM|NLfb6Pi``$Qrx6Z@l}&R{8LED@<=F0#_m`gh!9Qfl)u{s>xt%aUx7YrC;k4R3L8
z)J9^K-hl?vqw7ADkT$GKKrqX~GJyI;9nzNrt~YLJ;JOuZeO8Uu{?kq!>Bjf~N=O~m
zb)I}n2Jq!sk+Zf8O6FipHLl}<(~{A_xoWH5UdNfJYZddhQf%AW7L-Ubp4q6qXdU^n
zO9DVl?c(*WB(5fXQ3DoVQ)x9gN-g@Z>5Vce)H*6t+Bc$FqW5eckR#I8g!t&ps4C&C
zRZV=I(`TeOqzZ&S1g7rnPL_Th3|}|nI`|fG*buRj{CDN&c!aOp!jW#851{q$M@5%w
zj2yx}Zm+Ahj8x*Af!IL7iF28Q|Aoi*wLG_qWUxWNy%axK2G@})H2L5qJz7w8(Hhtu
zkCcy{2waqmcJyPV@%ocqP}Pubkq@BJT_;=z7xQKtXnZq=+fy!o9JE@F-#DW^B1lFn
zp}ELy5+`7_#x7YDy1N-KK-Lh_kv?#>;?UE0M!UCQLotgr?`>ZQ2DMXamS=vFfbumF
zAU1*tYo%GUaL34(KV6q}5D)ivw(HpjKJEOWMtVk@Mw&G7aJt&Q*Y)0MEkb7z0|vOO
z@|i|yAvV;JQ{gDj<@ck7B@2d&r9k?yX%i)5eU1)5{F?pDcw*eP8FBKF-4t*_?qx(t
zZ{<Yu%l%9TUm3_iqd0P-?<bg5Z^nHg&iDMrpx|h2Ypq%bcd3TG03RMO+AYtOA_sNA
z|C!ni)~wzW^vV5sRUi~-G=FGEHuAUSH4K5D0pwTxa1h?^s6_OJh;hDt1}utg5~{jo
zNY5bh&0$1m=8GlA#Bcx(_F-^-LVSD%*u{C@8YI`5d>)EN8OPtfgSH`DX0EK-@H0^M
zkUs-HHcvduE_E2cOuX}$g;Uh9dz$TV#PelHr!2}|jQt(!^J6Vc0Vu#yJIvjp!uqR_
zN53nZSX8FLm9bbmHJQXKS?HN|@28(a+~LlVytQg@_T<Za^~^;52xuiS-aa80)K=f;
zEEj1Hy9+EE_a&Cb^nfihq;)xQgY>CaY`Lws00zszX(Kd!-917PMKfX`x7uUp(k|Ty
zzHZ}W?6A(Z2^IiO{!Y!&hH-gjQC>51TQA2x1e;cwF(E!NgH?XbZoDW^q^ea6V^1KJ
zap?62eAxb}VZfsv3KYt9klv(+J^eTm6nJ>6BTNjkfB)SQ;q0jed6k=C6m<KAzL)mo
zAFx8F<=6GEjlA0Mx}w`$xOASwmIGx-YD4rO;f$K7qr7bQrN_37Yg!@TB6*Kt|FqK>
ze&b9m0VHAQ{45}7f1<vHpob&sgMT$RJ*)k?0KKXQEEGZhr}xh}arx4OTm}7eu9piy
zzU10IhpK0`#HEWA4uWNT_{Q|Q{*6&(m(W=*Xm-hkoPpF@>#h!pStarO+PC>V5W@JP
zRCnxh2?YwaZR(wHZ31I}BL>!kqt$dns5tP-m;1xLD=~tPCh|Y#t`XN|G8*kIg2CYP
zN+b}8@E^*UK9I3;$;)Zh_G{kB_DTLKg#9yUWmXs%`K6S4@;B3_qTyH+??sDpU72LC
zY!tXX9~wjePTbezoeA+@eYJ7iycc&s2=R3USilS~nhwnB_vh@c;s_oNebuy#-q8DW
z!MV9N3Ud+M8dk3DqQ4-rl{b>WRkuBIV}d>G-|sU*+u)BHZSGnK+5U0CJ@PjIL@Npy
zKGDS_wI(!_2&VB7_m7<G1+hfN$6`rG0sZ?fyT*$3rKhjDEqLj63xYmBHCM24B=^Jr
zc2Dl#b^-@KOM@evc3PW~wlR@<eV1w8lFA8Ir;vs@S`fzUsTc*nsy-;4$ZdT7-<aHv
zbb(xzPMXL!E-+x;IQla@r~}yg52xd<W!jf@;^MgWco9mYJq5W!E|HI+48RcM?a@w;
z7cz|H<~1I8giCPjmWjLn_mAzSO$)ufYmkT1F2A&IfJ8g{Tx%<YIB)^~mpO3#V<GUO
zJ+1)nR&nNx0V$owS-`J~WB=;8qVF~}Fd=2WoL$0{Aw8{f0#*c`rW1PL_j$=2<uHv&
zLjTS1(E+O%(&6*i^L2fk(P6AbtK0Xwg&Y@`sxvr4@B;o%YNK!{4s``r6I&<gVeZAj
z3u5rVW3>;ylI%7`!yFCQ+t#=hzGVs!v=7Je&Z+?_kcDsbTC(S5;G+lbEqjoJJdtE#
z1y0*A4|<}0$P;6N4tpZ0MbP!q_HHiNl_q5?U<VBEN!m#K*i*hS!j9I4b=`>Q0fvot
zJ&_aQGv8~IxOs^p*b~|BfEg~xUIb_OACMm@rkf>UUR_xmhBW*Sa?!>}YQ#TLa1`H;
zsB%sA`!1}si#KS;|Nnm$LB@uDlU?sgQS6t3cjL*~^!>(`<>1Nj(rfFRX;&nOJ$=wQ
zrTJb5q+9hp|G$4K5C5tD&1C8avI1CT7gY#F-&*aC01hlCc?Q*|b5sgK9(Eey6Y8!%
z`!(VA;9s}E%)`H0gkt9WV(PAWfPh`2`2Q2S47xxWsVKcGKmT0!*Uaxd&_p_ED*fg5
z@zQg<)DdY<frv8<X=;OUC?k+Se<(RefG{GRIBi}$wpOOS{Skib5hykJ_m6b9Zg+`f
z;`ye}!errxIgCt_asNc>%?f0j0q+Vv^(K&m#PCo+9x43x?*^Tmls)`s3;dHUF&1zm
zDEed=-{0@<;Y9ZA+loPktJlB{G)PUvDo*hqUEfkXSY2h|8UsVQ@1lto_R@b@a3zd7
zQ8M?v7Dz~dtOcXW<z2h$|9EiH;@-A8-mx0+m7YT>2`db#$mK`Vr8CRPiX6xR&a!)6
zMTZ&rubvziyjUC0ZPWuS7s4Y062P{P8JzTAw=2#T46{iy?hx4M2fXmW+8|2iwF$aW
zhQJOuQ`+M!Q4`D^=}hc@ttJfUsTn9^2QQ|VG7G9u7O5R`tbqTGe2*)Titqerj(3<7
zon~8a-hy!bv(ZUk;?xHQ5>Q4{u_TaOe{9nwx+Il@eB>94a!ArD9O-c7Z-)gRu3g1Z
zN%=L_aA4hdt=3PpI0n+=EG3>3$W|-*h+*KB42#WSBr`n7>d+-ufi&@(z}yyA?MEt2
ze0V|n=I3`HZwPd;1YOQTbTq*Y?X|ayxIb6EhcHAkh6Ff%?1ZT6OCJg6Y{8SozuY{N
zvu97>@NHmoK1F{s?Q^tXRXGj<e~u<f^WQxRvhKk06z?7WF@JCk^58Rg3egE+BQ$|y
z10?kyi3g%sJpBCu;#bm_5cLWFq(dhlnB!V4!#>_=7<kxUdl|P+=pMQCZ-E-Jhre^C
z9jNVy_@ByeLU0_z;elL#%>{3~g$nS-dp<R)VtSO_QB{kP-{>2?CR7=qcRI+P+;4E=
z@aJ<V68As#V#5&WaOqSaHyex#MCg~=#tRi>6ROF$rR<XbA|=1rWu28rk29YIIKIGF
zGPeQQ7Or+2*@|x#$~`xxuEl5}0YGyr!-(L-&6}Sn0n;XPKQGHzby7byPqb*f1d9Z5
zbRT+>J0`>zb5{fK*X22$Hb~MZx4gnA9okVS^4sdwj{U@A4xd+iZ(Q2YM%sBlhVlc<
zn(I{F!@qVL1?CbYt_UosL^DPMAoBynE0sm@L;u448%%-4GjV!X+`vT_Soz2WlczWq
zBrb6*9I=Me1v*v&ujfm~@A8rYBVYrx{%vv@xW82le-}D?OC8ugivzDgB;|Pj$&2~?
zxSCkK3UetIq>q*S6a?d4{wFZ~X%pg072uwrwk>jN?mi$<2`Y67SWBCMHD*K|^cZlj
zm6kM&rvKOeQrZF3t&Pln8+e;be(HmP=>G4I;RL-#*pJ)NZTZKOM4CZ4ltYnou;t(G
zsJ6u%Wx;+Hg?I;h+Y9jhlNKw#4Ro9%`Hw_T)W(R!Fa57!|3o4Qt5Tk7L_Q*UZuU|l
z$W)Qo1r<dALGQmOolXQvPp15%D$#J>F@x|^|0W)4nJ8J#Wf49q&Gq?>FuB0&=)d3D
zJD#BjW4WIn179#+$)2d&c>JFXRg6xEujIO(FAV@GE&4AMkuTo=n_|F|ZI^EBGY24w
zaM>p4A~<vG{`Z$s_Or&cc?8Jjb_=GZfx)i+8|({sYfftJh(PMUPreof87nW|Km1GY
zC9ku)tYddC7WFyASL(m@6@^G>0B&?zK)v`#V$N$F*S7;0_9wD<C1t+WoP)mVjW9hH
zQ7xB<Vh08(#u-6$s4~dY=Pp8>8J=3+_LeyHC;cF&^kA{=U?*^S22rIwut7i^xOr`1
zC>_iVJM6mxW1m6JyZw7n@+;vD6F>)G<ojrhlh=8&bJi2p<=<Dsx9;szO@j{PwD8o`
zb8kvF?P{-fnz5=BJpln4BlwNpo1h%%O=egvkF&WXvE*PplkOmVKRnr;uFj#~TXCRg
zRy0Kxu1+xe2*PLz%-F#`lgems3ZuFX3@w0zkA0-y>w$rXAf#UD6wlR75DLT&FiRMr
zGU%<G`eU6tl@kg?@IGgBny<bhV$P}(nY8`V(G?gl8$r3GZ-v%~G+)v!8hS#Z2PEn+
zf+&)j(_ml1n2%m)QT^}}Y#zoA>XlP}B>N9_obKRbz(Xi{rK))T+cl<;Vgg7h5N;C6
znLC{D7CMwj;34nxZZlKQgCehG_+t7r5cgg3KrAP;=q!D*awx{B^exQ)>fUbbQa@h4
zTm?E`s?$S#uAAvp&_Pdz2{$?WuO7~52xT^aaiI@5ck^g0u%gE3)MEN9rtI1NOC{OL
zML(p-AI+k$7--F8+SfZJNu*h-g4u7~evlGt$0co%6(<U0iH@gOwD>>~$dZLH+Lx=`
zsE!&!^+J?m<S~1H`10_Zppt6h#N#<3S{~qE7#CSpxar$8%k4x`TPcZ5+H#SH$Wci&
zp3gc^^d9)=aqPO%)x~kZWo{n^oaDkFmF#ZkokWr{^Z1XdZmTQIT6<qM4`bv(?#}5v
zhrcl`jIR8U7ye>0U*sMp;bd*2>-ZCQbl+vt6c?k_4&mf2*msWT|IC9^fKAsX7}!=q
zE+pY-mb+Y}z@Gk~RoxQ*BMdOd3$RGrc?md+5)gtCmZj_#%#WgtA2AJ2p@Kmz&IOxk
zbtDLcidQ(U@^|tfqNir^8%;kk43k5N$w2W&XUzAf&}9XG_0tOF-rF0!_VSGB7|FMo
z?`Py0q0PYL)o{;(qqRX^ote=V)Ja*+VIeK<_W1|QNCb|>{cZS;D>dizrqRje`^Z)r
zIDA7x?t0>o+v{mMn+46kcc)YOtJ}E$5(=wnG@%0{0za0eKQ!AW<e4>&_TpEX-8`-L
z7lmMBvOFu=W|swWjDD>@*E4qG(|D2Qa1=JcO#aB5n1~5Dj2%-IjV7zQ$*p$U@6`zW
z8x><*^hO=>*_p`SX9MzxU#M6KptW-AK*hRY5?ef>rjKA0M^XYQT8-fORg=h_=>y_!
zG0ZI&6x&sx3eLq_8ro~r+~JDuzwJngBu)yZbv{+>bXrBd3W4y~ZS`)kmmk67w^43M
z-S4c-v5Bv>lwR+(9|15vhntnI3rb{y1ot~jhRCn9(g_79PY|Il3bWKroqXDHJ0@$;
z#$@V$i(@$G&bCTF$8}NP#>_$Myf6oB)X3k1Xb1P;xzR?k9PsJ2gX{%*P=>idrUV#V
z4%}PK)6Sc{{#BdMu>C?E<6ucG0}l-a-}RNw=s3Z0$o0P);iH}`0lz3YszxB(4VV>n
zFhW|lK7_V>6m|^*f$%_3E=-y(i28yMhMtDN){b;xatbd4j0@ln@5hi-u(~}~X6L2o
z9|5~`i9B%5fSS4B)v(Kpj<v4Loo~oBBClTd6owf4I|0stcwrDEyZs2t-&LJj%#h~Y
z0|DbrQrrb0cP#nPz+T(PgJZV^`r<8|ygFFkv~yh%ME8Y;XdHs{*p&=aT<U74v>S!Q
z9CAjbT&E}444gXKordw;Me><o1_#hE0F987yHQGq0PqUr3{I&0>|fbbDhx^$JCg=d
z+X)x~F^e>t2E<sDf?1N6Z~6A8S-bADSUgG9nOeF}Wh;AYi6GWW^L&=`5dFIe&(b*Y
z+DCZKF$8;Qza0X}Az_Lcq_&CK^Nu{ln-}-#70d9I_;KzG=P%pBY%U&hojdklwS3BG
z<jc_rb-5}Kj<0PgLG&*nx0i-bW6aX`_#iL@a3fd)de<g<-QmWaf68RZ#Y>qA`o7f-
zx*C6oQwE{~eN{lzz2#Q>Z#{REAc7@(!Fv+T&ZmjLaTSCZ_=7vZiO?@)NW@wJN@Ras
zrcAa<nnxpGI^wj}t>%?K^PX#!2v9Ux6N*5u5kWAF5RRP;9Dp^iSpip?*<(Hd)7HNc
za64jd8@6MZu}s>%xo0Mtw;T~Pbmr`-dB2GJ$oP83XQpTW>LLEd;Z!lkGy}SGM|b2e
zZfYZ~UBd67lL@A%xqxozuJV&tQw-t6;+j<R8MIcvU9nAqyCY(2Ho3U&1PFwFi%|+;
zmVmQM)`E}_)delxfufDhiE}=nmb?O?(U>L0*Ad|+zv?yN!`Rv+6timzSysLnZKCFF
zK)w+bd&u+FuirTIN?|T1jffU{vmp{!v?Juu@w2lj%TaExqD7vF=x*YfTU&n%#iR>=
zaCa`<T8jt?WyJs050;bf=T1uxiM`bI^cQ){)jM_32P$6KLcqnBp&1-Xx7<^3%Mw>~
zt7JR>G#_@|{p{~>`mX}yXP_U_TLp2yC%_xAP_}+$7(QYS>Zt#Wm*XiKY(1Y(2UM}b
z0jsy^vD?_wSG{nvofK_7g<?~glC@o6d^#k&se*yE^mJ2w3GtC$DEg)wcxo(9%2fDH
zo$UTe`csDA(jo2lztq4Sz5IK$nE&9(m7TV2{YcJXMzP0-I+(vFEme#uo>mXUH(j9b
z<psnQ$el0EC{jmD(UkU96dt+Sa?#xevGs){8)%%n5Xjitu^N+gjMLpZV96i76~DUw
z(u67GDms!69cvrUzbN$Kh2L;IcY!Q;Kt~&I0MtJ3Gp*V>VhfZSkV|(d5WDI){-6DQ
z6!et`UNFON$8i=^rZN?cd!$f*=HH6Ge`jC?UUEYE7Li|XwtAzr^!^5@=PZw&CPN*Q
zu9AyU3kn{yZQA0nAL;0f7IBHOI@z!6F`-U8d!yWYe%Zlpmei()?=9zYZ2$3Rir<{o
z!9gvWz<#(sQOIqPv;NS7yCw$dwEC-~<et`hEsf`uMWdZ`6vQ;2ggoebDOY^-vchAp
zQWtG+XX-DP?U>G%#>PF8(@Z9pzr*_U*YAq;(!c$Z4$B=&;6z>X;dJBKEjDLn&$E{E
zg5f`bOlf!q&T?wbC1x{&YdJ5OI(HE<`={H5xVieX{zBudjV!)xtlMFCtj%Sn&1-0<
zz!suM`o~e13CFF|-t=Q7zT{Vh>rkYn!DC%$wDVrK2g1!QeXlEnr_1ZbZHMv`qnQWw
z4}iPU@Zb+a^d_gwQtn>L@9d2I8u}ggz<`a<{`wLyM^+ePC^c1#IbL$R=Dj`$($<>|
z0y`R3h%s66%=JoAf1>03?4TFLIPd!V1nddKk+0w8;r?{W!abC)&5YFRpZ%?Mvv8Vf
z97!^k<YIuwkZCu=6N}^*Ribq>9Lcd}yl_~pUvJ9D{8X!J9&OM?NU4Qmo(}&Y!?uQZ
zjIwaxs7*v^C2YT#e0xxM4PC^Co;<g&H(t6$?71_ohD@gzt45z;xY0q;)>mMoc=JRz
z%L*#op}kn8Kl$hq&&2K3yGijRI<LVNlfKw@c)2D~Pu$RT9J|;EALhA*D$*|rWN_-H
z?MHz%#Z+Lp9bsGBuNs}Aj7R_yMQe6!sk@r2yu`?+K#rYi(Sk-5%C$DI{vF{-wFLai
zHIREth>;+h6_)V<zU7LcmFa`LP@ZqP=gH@TvUFLGIqqVAyr8zPkIp)wz@Xo6>^~(1
zUFrDtSF)r>Ngl7>0}PG8F;!;W3}DS_G^gQ^Bc#!YhvU=vjXhB5{uiI`O-wni#~-af
z`))rzzE?|*2CCL8LP2mq5xT=-{COZWJG9{Nfo*A^VFrzsEmKK}@_@GNxQfW}$bFcF
zsJz{K_`}ZhT|mUi^#l;6-)i^8zmR<T7RWuXTbYMz8xi>*F|n87Ux02=^MeM2N!P5}
zy>kReuk*3L$HNGd9sZ$)Icu1>Lbh@NlXw+-ekbLe?a*o5BlxYUbuM+e)#t+c|3-Fn
z>h%aW@Mtr+f?CN{eUQwll>O>E#zd5w5n`ySeP8F7q_6OV((vDLFK!$52$-Ln9r?4$
zQ9r`k#33Mby^~^+a<5MGmBsTJL<fZ0c%Sg^{&v(?0?v2sFtjYJpBVJa29C6BePjw!
zT5#j@!Lv3xy9KjjcD_m<9FP3nSdp(sW>_7{PB%q}k{{SL2ImFUVZ<t9%r%ggRl0S-
z*bO2Kf`=*x+v=~`AEsIfq-heol<9yy_OhFHGD)Cc``sz=V>c?V?XITK`#iKP56e1W
zp~+qaJsb~v@Z{v#G?Z^#B27-XaecNz=+L5;!$xdxcCaSBJnjpUSi?wtt2~Xs^A;H#
zP(tRzzDSmuf_RHVlpLM11w;HmmrA17a8eE2UuQanC)E3}%g^eIvk%y=#*z%?3Uecx
zt~zl*D?udsYj8I>^9Q6RtlNzjPb^X_pORBT4<Up^&1){@uZO;@{{_0dC<0xwg~{a0
zU#;&d0;B2e-&rDPGzP=XQUiyRtr72sL8x|Ep2TLL`?&>ku#y2aP5p4iYGUJ^m&{!k
zH$WC&t11l21KkUlmONH~!y&JJjr7DBHgzcLAL!=mlH2S=zPJ6H-fIwwX&?B7{cwyN
z&MOFq!CiTqgC0c_a$~Xz336X0uYp;@xy<&LOkc}^Vz14TI}-3~7yXk^D5Qg;?o$vQ
zU;YEsE*}0Y5o1WFV@n?&`=2j(-0@wLGF(^){c@$v?)O()&S~uF?7|hYS*JdjMI6lH
z!>EF0rTA~rUA(wpzR#Qx^UM8zu>j#$(TW<&rt;g-`;GWw%nV$WBz+HGv!A-L@p(9r
z`=ew(@%$r`lGmnZ<je3B+V3QTGthbh_k_wNu(}28{l)q{bwc!0edxGe^(WqW5J^1k
zx~N~q54rCsHYf~_te(&hYQZe|Y=;c*qn@zrkTQK*cHo+z^R8{$!MF9J;CATa!maGX
z*`?iO1F|{X#UZzTU$lY>Ufw}Gliu42K9KI>xApa=jP;kqkoa`Orn-asIe?FF&7g!V
zdyA}rMB+z5uymRcSZw8`GW@XolLH>Pku}yKb3!AL(%DQB%yCA<fv$n~I5EgGz+(l{
z-}*g18Z<SVHm7WCe;%}A4C7t}U<B{0bh6f**!eH-D3qM&a^&gIH*DM}85OHdI}U@y
zZK!QWoZgq+TVChcgTJzra65JIlf4?KkUYcfm75{%5Y})}bo`z+CC8>bIq?Ea!h1j#
zQ}<Ourfr)dpHyPGhg)5#ynWs4IS&j%obMHxuV`dr)}P?Vu~)5BVNXlu<mFvf_Pe;w
zaF1~PoIX?#9X(rXX^EI_e6Dnx>5UAhs7q1BlB|quH$Ka6aw>(HSiiZQ9J#3-KKle3
z?d>D@ExP^>PXKg3p41x3T0FfM!;Lbx;Z%HfW;yc3IbEorGNCf-4sNLB=rm@9%Q@V?
z#*o(@Kg&>u)VrKn;YU;FxL8k8g+@P4AOWg){NI4@&(B-Du11U4sJn0<={>Y^FZ~*T
z*j%0^+7@5}ynj2jVaQyboTj54g)UyuWa&~+8Z{imi4_GN%#!MXzxU5d8+HvC`)@=Z
zlaH7*)D=j@1Q<Wtvn)MWFpo=K-j-9Px+zpO!N)^w0#`Q{f<SHfJHE&n1^sk3IH+|S
z{WytKBz~YgeaLP%+OwV<bC%F|N##|%kb71YKo#(rw^5qZy)WMVBZCV+uwSjNLyM#9
z2>N*$a%*d59nc*=ot^EUmK;26L&G5R6|l#ss9vVv%OC)`NcWbilQYc2^b@msLV`N<
z!UfRD@$qfUSD8+%b6oG;^didKxOfY$@N?l2*7Q^>C3YLYVbb!lOwoSofEwB9GK-wm
zZa)}!LgsazNQ0u!X+jkqk4>sim+SW1ZbbR}waf|%vbk?=1qLjxf7+q%Pa-YS&$?d=
z;JUHh+eV26qDo@lR}Xd$$0(Tq=k%C8dGZFLojt}J7&y-a12$;++P-@;QYkxyX_!6F
z+2L^Fwrifhw}(e>h61Fi<4??Gj)hv0%p1Fhqe++Hn+&rvTkU?A>-UtK|MUWbHB0FK
zz;84?Re1)hO$QjrcP~m?t*)-eSQ+JR`Q<?@^cT+a5JvVYb<F!6fyN?Y0=6Y6^@)s!
zUx+9in9eVK{w5To;~kp)UY-2v<NGhTA^-MInUC~t_o=?C_bh<l=Y|v=Z)>ISgJG&V
zR8sPQAU;kbWvzF1hyn<O*kON7wg^SPILw8Bc;T7EjjvBN8~`AdKSBw*6V~&tD^nQ;
zci@PGMGHT;jT=(OTZxzgxS*=P!=#gn`VRiES=9kKsu~5v7&N8!1IuPhZdVjolZGE`
z?<t{WmVEH&*Ca>x_08#sLgnP>rO!6jh+k7ZNtelT4v5oB`g?1bR?2j18NPFf8^^A=
z(C1Np>9ea4L@v@hF#A0RSk{M2Wk{K}p&t#8(yg1HSMJiHGm*0})3HX}%3#lPle!JF
z!Et)PfAA>VQ0;9vgn|9NRh5fw{sbXU+JZC2+&hJItsT?-+w4)K8Uy5_8t!y|qs_&#
zrLyGuHn1Zgj8LG$?<zWWoZU!2`MXfeFVF1ITn%vTFu$&%5A_lbtPg6Zf0R7+adg*4
z1O_=52(6S2yuN928WwpJYKJ#Iga4f#)d0dzaytb9!PkLC_YZgbJ~TTaw@?M&NV19&
zRD_D7K}N|$bnxMR(e37w-LPSLSAwxg_3w}UuTKQzz%f;KTJMVE!PX#<ne8(CiW9|B
z;`Dapqh+<~WNwtKJ&|8Gr0XYDJBd`Q$ou7M)erU<&QsN`;a}bP&=xCR!3vt{(5$ec
z)MB<E>4L0$FVG%fpnQG$9)~fJ$80WIb7Bob-xB1SKDhvqTEmEy3CO@A`HJoFCL+I#
z$*&FCOwV+@+xVG8B01^P8>nda+#$#^<emeKDH!gAp}2I65=)+g50o8!|E)|s_xsz!
z4w1#t6`10R7L$Qd>cxDIYS~t%YnD`%CfMkoM+J|7Iq$-HMJ~hlE6`UL&eushO!i9#
z_X2JHbU%&j^cbdiv-1%Kq_6Nar;%m@P1cO~(Ap<kRFgs6j~pBr9@SHfzy?VpKrXu>
z&9_T7w^WR^;+7248p9F53wtQf!K!#i0Qlxl!-k5<Z*R>dZmc{T{Jrq;q37TwIIlk}
zBf&)D*2b>JX@zy7ufA8q0>dRMs15hC%WCNWeIS2j>pnE=y}kte)(IAQMNXAy^%Mf}
z*rQW49KIptW`h^HBhc<v(=2Q9R3~N0XOv+gtCP~G)-ME$G#}9TQo{v=tidFz8Ms!J
z0Oa8A?Xy*IbY{YCjaB|Emnn3MY5u_2_6=+=nsq$m3R?Szre^ZH2l~V^UCa3R(9^J3
z?n~_e!U#R>Rd{~%)Nfu3^?(=HIbPqYOf5@ThOx)-kPC3=!JZw-C!TaYjFDZf8W^3O
z7Gg{~nZd4{LBKNJJvqXYwCmL9w<camOgqLM;xp!I1z>Kz;PWN{2bM_yoiFQ(yc!h5
zlehsts4$%7U|1AafqBAB{9Klro={`K^&-|yemV)ttW<v4`Z7>QqmV!v9$|y1?0ok6
zGHv_6|6q}y2DUMG<)KMzvrMc2nBr!_ClR#r@XIqwqk3)vt@qb-BXX9o%=nI4Pc(^X
zwTZtSKoNJi7u-Wfx4#pJsmOFjVU)DT?eNxT@Uf^2c3)za&Ws`Q`E^BblFk<OtxmO6
z;ivm<@F4vp=@Q#3r^Yra7xnJKGSW3P%BsB3^ny8Fg(xLxR=%#h2DDGyp4iy)x<`&-
z@HwgONg)pJCFeR^;Z?U?oyPWpevVUZkzxDu_SE#X+S$Ads!$$H$2rm6D&op*Pu!nh
z%kc$3S}X?bZI`oc^62dEpY{=kh$m#-Kr2h-3$k5KHhk{Cv`D_-p|e}{g!9yG6P=}<
z8_lt#+LY#7j9rxa^)H>F7$vis2d3=9AEwL1AlI$>a_B?cE?7~uZ9LWA4PNPJ_D!ED
zyJ<FCF1U<|F05()=9`1kWdx8w1o?0!YigkEnv4;SJs5ZiZT+FIey?dGpW+?LPCPDX
z1-Qdw8xH!{Mt=!Ecq2I|?Dv~CVMz<`K7eYc_(8Qq3j>H>G2FZ5<KN;)*Q4fcMDn~b
z-fk{B+kKfRw1j!mojHD4OU$sSTeUrNj_J<uig$g+X5hs^%aXa-UnkbRa+U3$hbSDB
zaQB^20dUs|k{`ZXA!eEDDt&m-+9Qsd`jHPXN82ovksA2jhJZQ4<_ywkOU6xZg|hy(
zxuUT)A2n_!rs%khE-BfgX$t}cUZmm6)hQm`x`e?rTGLEyX!TM9ECU;oXAARRI?(-W
zDe=~5sECZi<^i9Y9Aj~IOE$xfWFe~;uw{Gv&gWLvlXdA;cJpuz*c}PWc;f3#^ncgg
z>%!n+{ZXBg*DG6VNp*1wjOqTP2;JJcw#l~OZE#gAl@u+QnCCxAN+tQrXu!_|9<-S5
zDS!+4xiON*;H4(s9+?ppEmbxXIO(k{I{qj7E3@13%+ubJkeTd$h;6wTzBXJ#O<|yP
zQ*)Cj)$eN@Ni-VesZg#z?{T7KHk44$Z0VOV*`wrJ`}1`SMN9oATEAoQ9{0o1WfNde
zZQ06u$`ebvKDm&bTFl`KRMeAKcgVcthI?0#z(iTQsw=lJBVSv6ukvS0z>w5v@y`Bl
z#i6qIhRr{_Dz_(B7dBfomY?m5{l?*&lr<Y;J1C9yC)ZC}O0-Y>w~hmjjIs#R?Y^7A
zK^;^;ePG{<ZUo0VEF*jDLXl5=?S}7+?&XX-=uF8W`<*{x**N5{?6pfOqDTL<IKBKE
z<k>ErPsShmBRy9^PEf4ac=l{C(Y%}T+bT1xW|q)pgP`3I2|}t1A%eFy_O?cVVx`4p
zC+fcfU`TE(1X}d16wLn4OM76#OTZ46kQ=a}z7Y}WuCA=uZ#z85=5&&RR8EJlsiXip
zzE^W|m#Ze@5iQ_q4@1qm4b}VDe2chtdB;@%+$7{4=KJ*Ap$_8ZNyI4K7`Ml}ESRyj
z@`1;8c84$7=VQ(LGTJPA45pT9onu+Pd(F41K|T;FsE{0?Kl=8`6?B&2v%SYx&<BqO
z=1Yn(`yvq8Z3Mh0*y4vhd9XPucqe#4mB28qm`;k9p$x&D9~wdh3)F8GI%mZiQD%^3
z9Z%P6s7-}Qjc*B<O$<t*K<-4j4PwXnn8HIitn1eE?;?)99@7KsAYwgs_%~7LS6omB
zE3o=&kTEFQhw)!~R3#!#mOy{vk=ntJ-wUr|tAOG6S9JmYam@_o$vrR}(2;A&A9;Y+
zT4qZEF0)yBv2QVL<D~~kt7j8Bc`&$41o`>G@M6tXoibT}-|8XB!H&vi(=p7_lSG&1
zaYjlPW&5I@LcxK@haatW3F{wog<C!xE-un)Cm0+l)+{#E&bZ%ZQ8ZNo#cwO(Ses9Y
zoDG!VSN;}#pVCQr7vB!@g_9MbX=U)991DUz`KRI{c<n1Ls1X?Sn$k$;=>`FgG;N}6
z1JhlJmw8tsT<va6-NzD^Kh|NQ+_iy^4=;inN=K)ParuhD=ze_-HDdq?-{Q|$oS_P0
zqjQ|hdC~k{?X7m-G&k3l9>saFsDO_};lO9Bc1S1&kCW|FBmpNn4q$nB0xyEdrjrXW
z1#syB)QR<ntg8V2?GC_%Z-@6<T!ulg$2Q-{f^rqiw1{4t_X@G`OB6HT^d=H;RRTwV
z6jhv;+Y$i-Kp#>P@Ozu3JuVeF>SS_0jt|fSAhX#-C|C@*$7t+~tz-I%uT$T(OeM64
zCXg&tw|=jD8KM`rZ=;w{#{D(^66D+9TxG|KzK<(XXI4(;0rUs}dM>BHL_fEgh$B`X
z4e5%YK;H#$&_1ror=5bqFTxy|Z8VZA#30q)SXT=cj<myGjBR!wH8*vfdr^51yEaVm
zH9u&{cYMJZ@MD9$`%siB#_elB7YCBO6<t2ZxM{Xgu9hz!b;k8;cJ=ih<BzmPyt7Fp
z@S;2T(2PiUPqPKH;FOiwy^V(hN8weu0D|nA?*oPM_t}zGw7fHs)>OAo69J$?4It*n
z4X=wGz}*|7PmI?NR-_F{Tti3PEf!Q%8?%Gj8^ARWd2iHY^1{mXm&XaF%R;}3HoiR7
zwg4qL6qN)KiXlAY`6oJ({TvGS%3xg7BM}yV_g8UY=xJZh#vEVyHOM76K=xr^l@LVV
zkyp61)RrBfcH7atmZbye1-}c_ZU9*gIHIUNVk9yTMS8jd6c9E&PuQoDj974mh{Vyz
z2kv!=ME=_bofn6D2%gXu|8Bm&#1mUm#dv%HsGisp02H7dtglCXXG#6}{KsY6^6v-H
zP`m6I`LyN;KdBa9LFTBaC~nknbK?Pec(KoAbE*uWDNkZIvko7c$;}G?U0dw+_%l!j
z0?w~zs75QYF^TCDRG<X^E4Lio=N?96pk>v3F@JJK*0(;}*Vw{spvpB(_!&&G=Nm0C
zONqim)#{n8%*M~OBmxqLsdwT?S&A2QbrjydPsN)7k<`&YpO-MV-^p`1#9I=kh3mtZ
zJmG_z!`-0=e-yZa10Lhp^=i;$8a6aD>;eE~{nQTdpFiFfhC#|^`2448*rh-f7MI&9
z)xq+$b6<3)*kkZzvV8)5KtrIZUV+@3ysdW6zEy8pErR`cSWnH#`*fN<dEVw4I&bZ+
z@DuxCOL5h%mflBPdB@~_#3j75fq4PE=`E%yBXjuSgJb6bPXb0sV8m1;A{gu5AQd8D
zM4Wnvu*M;UwC+rKc(yeg49PCM)#1s@ph@d?D8BZ8c{>rHEqJ4<?gQY#po2>*W^H!Q
z9-c}B2}d5QAOtNOAP=+zQx+_#k5Seww&GMVw@s6N0aj2!<@)bCuIJh))6)apci7q}
zq2suH$$>{Pr2O9rTZ`%-9R=<IKpbs8sb*@T8B60y=Y1$)JxH*NqwD7HSFg7b6u2hp
zsv@33TRc%!PoWCNEFUit<4O55_L}-J5X{jOfXT*JSd+}nCU-M|Bz`NcZs3<Tjfo4T
ze>cy$IC=1?_*Mn*8~?%?L!*-n#JzvZhFc-f>k7d>4mfs_alZ%MAaG#f2Ua)?SwM2{
zYkJ^tm(j}Lc_8w>#_GZt&yJ6PXW~=QM`DLrRVitUT$T3Mk`EuOyW<b#WMPqZNn-Z+
zH=Sm~leT%rs&vM<6HQ0efwBJ9eiH7Yk(?Tl?ZvhqdoWw7+#*L@#evDwxWgB^wL^ve
z0q+u(woZ25;;F7j2A;&RvyS$AoJv^-_(*fVaDtGtdO+S8<Us+VRmWe7UZ@_0Cv&dg
z)b66D^8n11UFC;oyC|LOogBb)()V$zT)|R8i1xHcz>>MeM+4yOGwXrGVLBcSE2?*J
zO9O&PCs{8nfEX;@X$+ehr>B^_18`=SXH%ra&_)Lx!LvWXrrK5J+P88-Uul?2XtShW
zvkWQ%*Fbkn_H|dOs<2*un~S523WmGNN6!){q0W8*;fVFa!Xf)v{h{DJLekUhkC6d)
zPz{4*?ogrS>=rt4P;<$xB%VLookzq(sqGk%(3t*l>EZ)uUb@X#(;+sb|2|X^npG%K
zQ7lFd-Iz0PVBb5s9oc!(0;r7Ctf(HT!S&CKEp|iw+#<%1VMwu$du{9`91=|31<SxB
zt+c=x_GeWCGxqxj|1_F<@1Ve^QK8eLXbB>9+nOznknE{0)0fOd(e9_dw3*Omkb)5h
zk6sl<T?N7DcS`P|vt&}OSNiLcKnh0wf~F>0tjvh}E*XlvR0y7L3;}m<qa!k28?-78
z>2C(S%@V`{pgXs_tHUZ5z@!6AMD-hMkXX=D3i>MHF<0&L;D94Q&riMP>FT6xXl}}F
z7?+B3KE4Zs$P#v~!Vy7bL;XH8K!*$$l7(*DfIN%U=L#uD>(sRvP#`|O$63gCU{Y+v
zapf#uJ0%>jHUl6+>>m)uYUQh9)3;E}gN!@xJa0Zaf9B4cpHCgDn5#Mp8ktJ@kN+5r
zN&a!>%17VPJ7=$r)QE6>yy7K&-jKV@bbx~+id0`0ss7QmP3W1G)l7T}b+5+dJ>RKk
zR@bBzEETBPuSgFuN{B7aqEB<_*!eF2=a}^YC_w?gnVpL@tUfMls!uJn)>4vcLmSiz
zVT-*mPIqbb#m1)&d$EN^C24yE#GzzO<zi9cF#v(#t{pr24!h^G(d(ZF&6|!A%n^5N
zyXqEuAy6syMN_>RL34>S6EEd7ckhB!-rEAk>V%6L1@;(dWpeTR3q_Jm6<;e2Ai~(C
zvuNktN9CC=XVGT=Df_&Tt&Ty-Dm*==^Zg!~{Q3qWk|ary=xvdL7K>n8>JNKdgO1NV
zlO?1ZFrJt8Htd0rQ`V0`*wwe=HypmbANo$2xi7()h!T_2tNrw9_Da#}EvVG_mSZzE
zU_IXzpGdaf$Ap~n;w;LV1L0pX3LwZWG-f5*R*u4fj@)XPKS45f{@!7*m|B9xxBJXA
z*}ZpJc)_JO8<R(H;{5ri=FJYVht2{t)&%Oiw~MM_g0*d;%yeJzX2sE)l1I;D*_D2H
z8l0~sI_+MCF!1{DLyT_bea8;D#6uzkKMg;`IMHg1{IjyWP%@xtjo0UxPmfqtg4W-t
z{n0^IJbw~tfl!KvbX~zPk#)=T9WG(<WS>LQ$Nfz9QDLN;zv6hN=0DQk@+YWIp8WW}
zR|bksTVUKU(HJy#URYg!t7%S6pT**TZdYd}*8wJUPJFzhNyxT&0?d&zCr{CjwPbf=
z4fkTql;<B{QMf9Tjt$l{MU2ylvuKWt9-KfQShCqcJ##GbD#U$FS~LH+;qC9)eOSX$
zOXp8z%??Y6oP1EJM`5H$rTX7ncl5EesEw~*ar^->C9|%J==)-GNRts(`jgGsW7weq
z?y@zPln~FLyUJmtuAAnF!JbZdvmJNm+p*}VBpnZK6+-%F8{(a_=k^66)oLxu@ogw2
z#m{X*j$WYsS#!j}mKEDoEPKe=sJkExD*dxEXd5>acq&4@%cA__K36-6kBgvwKaAvF
z*Fxzgw3qM$vHLTL%__f;hSz_^2?WV_lug}X31)iBq=oX%sYf74;}b^U=hDl?Ghl1|
zG2E29epjK53HHkNH)O}b9GK;t7KN*F+2`1H6sFeiK{;-W-_%q4#r}^G(KYf+AqHIa
zUQvBI9wus_c`|W|C(eRA_*%O>ngp>b6rz@XqzNch6c2EkBYNfyMiu&Z?UXPfH|RN^
z7tcOM&RA;8J>vvnak-mVyiXx}((R(vxQ`UpkbP(9d9+PUBq?J&!BM~VAtvOOGnZ)Y
zTunSmMzw{Q#S^zhETbz6BT*XW&S`G;P7kKqe7FZ#N8><CFzFlf0%Q$!<%k=y<znxr
zI}BVijnxPjJNcmc5KlQ<^nSqElz4;D4GAdlD%3PUSkPwOaAouj$@1c(A3gHFfcqj{
zV;Jdj)fXVCRzl14Pmlhx#XK=|YUyq<82zJOe(MUfF+Dm8s_S95dxc%$*Y(LN@Wlb1
zHVZ|yOI&^J_l`7LF-5z~Y(c$WosSGRV00Igcm14hzWxw7^BWx9J1^5gqM}0>NvfB?
zd2y$@U66bDfdka{652N?jjh-RgYrQ426h6%emqj{xFIP42y@B*!jmJ&kjsKjOO*Y6
zd5$31QfZK(G0XOB-T)%0ee4k?<Ut9SXx`jNGD_x#GLfGr&IW8!PZ;SA&8VBwW7#l(
z*%W~a7EP<JNkow{3Sx5(yU>S5_31jGfb?BxUyZm2ApGXeqHR7iWH&k%OHJuvmWt~>
z_DVtRGoBR#b)l-oRg^a{l8BPNk-*66B?^Jvj52`a4R-TiM(>+UUgIOmy(P7g7t5ui
zNR8nZuwz5}i3PrV(8g?fFpWnY&@-2nZHUKsV!QxtQ$Sc#yYhr9YLaF&!NJ=fXneNa
zx<0q0w{h@b&*uBsYXinC>2O0W&1gckAY|#tpZE>SZ*u0;hx!uIJB2dHBU1fos{$ak
zT550p68c`=wfc8p&w3e@8H6MyijMxd0{Q^^6zpcSL2b4ZE;$o%qOktXDeJN!!2eNh
z8m*ZURMIte2dE#e9=u_PAo!>RCjrRVNTVxs*y+|SeyF(Z-NE_7eKo<D8RQ-LCJOZv
zC1<FaQc^ubQJ4WrXg)HFl{GDzcwX>T$h&6J#_Z)-erR59;bfaVF8O*Uq|76`l64J>
zEXzk0SYz>lPP?-lK(90x_#jPGwbGBXw_MQgScd-uoqFMr?y`f2>eSgCUaN<z2BUiN
zH`s}1?FQbF=<5rRI#oxp?ACDN@PiH*z@lc#KXPMX<xo)`!6Fs8;_rB!Q*UuOIN3r$
z;ZU_ESmc^Jhw}qWh*=4zXu*J7GD>>uMT^16BXZko#wJQ)oaUw)TjaL#U8uO0kp890
zE{>U9)KsWOzd3cA<KEwn3NnT|*a9;rd=mHi%bFyV$iRI}T@KjB)svsT^GA)vz9WfR
zxj$s#`e?A%Q9ppR01Bsi;y-uM&~o%qnGbC~X8LS^%N$`O`vk`I5Q+l2Cx#&9hQ+7(
z^nUm+#lZjOcJGi8IPKU8AIVjM5Z7W5GQIk8h51D~=%Ti8-=2$Sile|_lw-lyB9F6$
zqCgn;FfU`_$Fk=R9*8TZ+v(G}DI=SXt=&iBp3`BG88{O|#HFekvsqMZIH|2SlNK%0
zf~Cz$Im<Y~{I$#_G_vZ0P>uM#^n=I9rpDFn|LX^zT;iTBR7f6`Xwp50mA!nU#UO6o
zU^K-rK-pa4-IVHGh=i}uq5-nz7?=+CoF0pO^zE8&xLbX>fNQhf$tDU)OOd2r9C1Iu
zrWP7zz&O>ajtodZNmrs&qP^~exH+9Bie`JS)WE)OUZDaj)V=odELK*VDgAB>cIXH=
zn5Ob}44DFBP||tQGj*k)z!05!7%2^3m|Zn$sr4t6T{81QS)(fkih8zm#JpV09Fb9j
z_*`hdu7Uhzj8EWRd|8u>5;1s)8T;gbtMqxUqT`@G9Oz_0Rr&Kik3Niq4<jKSniF-=
zT5Z1MpG+!?hN=B0ut;_1z`@VB|L%PTk}YO|=u@5Mz5<;u)O-FFuG}GXI}}0L`pUZ%
z3^G}S2f)}Bm2D_Iy!F}A+w!UiQd@z3Mxhi78o`3LpU%p%VohU52+GUGb1%36Srhr&
zK}v$n$!QUykCk1W%XXvtOL<XD%7$DVO4<vh9*vN;>;F-s6h^wIROm`6v6EBdY@WNP
zjK$B}Yg5l*4cV}G6K+{U{n)BFl$4hNZ}4igO$}(hDHm%nk@EeibU2BdO-~#Uv1%HE
z^jUlXZ_bs}yP_OQe8d%HDDh0q*W!P%0AU4}&8cG4fDK%riN4IcBl0B!9_P^U1ucMa
zO?L1m3bN`@azRAE?CJ69(*W5!j0Me_5SpYhQ=c=|-gmFXC_TuaXk>Wn%wM{!xn&Fu
zVhc3i(6o`+joN7?hKR=)Xsb+G%>;SI%mr(-NM^Y?|99&p)@!qZS<}40&?gkSu7iSS
zmfyI|%iF8$@~yk%dmSHk=alHj#}C<+_|A9z+t8Vp$2!YLVo}mk3whx$(tD@rFO`Gg
z+Z=Ft4#oXU5=m8*<DW#*SLy%K;$$Li2#YOH4MPe+x+lGbA^N3Z21VHpxPG!?FSx@E
zy58iU?!RDq_K;cgGXp={-*#a)nyOq@43O^|T}^>VvtSK12U(py?3#uW`wP1!Z$#)u
zt7F0sC8r!j6dRhT5YiZ!vz28yy>ezxOR}Izy*osqjGJlmU0)(dQpYIHT4(>VcM)9U
zKJ&TrL7c^E61b;b{1SlhJjQf?0HmLL0R%r8J2Z99{$E>{msKd)XRpA`q<1iO!}!}Z
zbHoWmd@X$H<(-sagHa8`fFy(SXapnyB`e*s+G}XH62^|$3igjd2^%P4x(|gNE#RNQ
z3J#k(RFw**PZ3j`=^NDtwHyQV`g?@mSSSa>3YjC4vf-AyuMbZ&IjB?`WLh^9_m?+R
z_xr42QDxic`*XG?y=D-aXdfF^HXheDR#Cj62jxABPU~{|SRyR;k1t^}O@?FYgfz#k
z9A#<F=<M0ko-F7)0(6p4dLkPvTm|EFO_Y$j_<xPFHa<T#rF$6tz5!hBSQq%9HpAnV
zAcGcp=QehzdcE`S_98r{{~u9b84zXjy^V;VpaRm3q>=(69g2jYAhj$@DIL<?0#Z^+
zij+vR3%I1Tw19wsOLy<mv2?tHzsLXkeP-@+&zw1Nofu2kwnd)(tFkMWhJQ@Z1%YO*
z82YZPuHhFsCEsWZpzFHf!hg>>+ENX{zQgr_6}^2+k+&DWQ22y^^%_0=KzNj>x_T;7
zAAFwGU-^H>=DOG0k9q%mfne1)o^jft^<vL@a`b{za0WX0W|7$NXAjmK&jj0(l40R%
zMT54n<=(6M6`2cc({Evk#IQMO+yxK|#AiL`@+N`rE{Ke#yld#bPYbtLPKHm*tOdF<
z0lD2zrr6Cb2)Z!&KAvv-%2I-li}Z?7SKV5}o7A^g5QSKzS*Rk4-$QRjY>;KT0RKWH
z#V?j|@>QyVav#MTR>(4)DREi=^!{^6$h42Wdg_0pQw{?f6N%8CWh+5@Gx)3+d!0{U
zY`0zMFmXLzYXo47TnS*DV+sMW=;|yiMe_2%u6bWuCKx@R4h~%07|WRaVjtWqggBEi
z7SZap8XS(&2ByIv>0M>TR;DCSxkeY+^2y&k;2Ibk{#E&PF2lKb1t+p5`Aq`gIXEy`
zxcnAM=6R-`wuSG@OC_XpjVL0fII}tpZyJnBhNH%plU3R<kgdKixqyuK;JyMU$G%eE
zVaHs(4=~0)Df~d)UZ*ODzZ=iq7`x=T^aLr6?${y=6EhY@90yS6%m?k&jT&EQRYN7E
z0Y_ghZ;{RTo!ae@)O*zGaxzgHW^k+T;29u$xFU;!GRbn)TKBfRfr=UhJu_tUqbtkv
zEsLgyQsDj>y-Jkh1s1cE5zESkpdum!G^#3QAK)V)h{+*%L`|=6NYIJ_#)Sf3;G8w^
zPrWX0i)x75#xp!5Z6fIR7!4BFdZK~3FMK(es1@T=pH|#e;CLvJ($I!63$IW@82&kS
znOk`RY;iMwdQd8=-==%1ef5L3pL!L};3CDRt@eKdmMs#zFvhM)I)AiG89KgsZE9T7
zSeU1F(=uFssba5AcbgOa`qpK=J(!^*!s)ReG(EZp9Miautua?171E@C_5o*28z|cF
z@Tt4;N+&X+UIBZPOY||KH}3gPyB)Kyr?w{zTz+Ec`02}WV8Z$uiNj1BtKTCVX|Fw&
zm-q3J8Uie9`fyke^KQyC2AT$gW5Z`&dVy`15O*&BId^B?irGG!K$x7AsVv+TTsB?s
zLc|mMQbmLztOSe3lP(ZywT2%2?q`Wmd8f?`9z>yyw2Zmh48&73x}l%w^pM0DJHS?Y
z0+^)6JDO5gp9O&n@Tc6Su-yRdHD++nQ^e)?TiGG}<&W%n_Qn{Eh3UTo^};}$z1$<p
zXvll7xkT$FkO#{6C!zdn9Nw*%>UCJgZyWD0l*4R6mNsS5ifV~;EMxyGpengUpCEew
z@IC-t515{S?g<6h8+DbT&|6fDqA)W@pc)?y0$pnPVD9AcwLf7f-JO)xoIpG9H|gm0
z$R{%uQmxkC9kxdL1tYp8(4In(iaJE%nfTd!U?}W_z@B5_iM}y5^6L=i+9jc>9%#$t
zw#A&i@?_V?S#5!aN@^6qpRyPk*5^mv_OJkkv)1tOJA=!eCrd5Pn@56?@^YU7rNt7{
zxxNEZ9cuj7C~^6~?^~db@%|2^OTGG)wb%ojwdW855ad;$Nh|dnQrKs}r(Mm9)PDXY
z@^ObTgF404-{#1C{+v9*UJ`ghY^L?M5L?s*tz8`(#A4|9o&M!_>5~4StVKVjKZ;9#
z7Gr*|7q}H%qH+ibZ9#kCVE180P6-4^@e}5rw|{qZAt5W6G6|p+<|IAcM03+!w09wJ
zwk}(=)euMJ-XaDZ#PIQ++*C0Kq~(Se<tosiwo9k7x0D_qWakkASVp^7TTYk=hM|5G
z+hF*j)p~I_JNQG&8Yz4h52WhW0YaQb@8o}JAp*i%qSZP$yM(sTQ}=D@W2OAy@4yxA
z`kJ2O@RyWeS{#OLtpI%$VzYbc%6;SjK;X_V+dZxN6Mmw97$}UAg1~KjHCkjFd4$7J
z4#Av5E&yeEq$z4ycJDS{37IjrxLDAZPp|ksUFkJgnBD=j2!XApu(l;e()QAe!>rZA
zbAyp*ha};k@Fh^C6~k~u@Gjq7v?cPBa108QAvr-<amhOt`MAFw-0n-+hSYsv?0osu
z%~)!O6z-mXkfoDQS=ds1mAAFX6EWre!TihR(TKMA<wS$rYV)7rd$J)c#c{$&U<9We
zzx`0rKynqeNuV31w+XGkVD6E%@t$bI=$t5!^k>yT<k+;CJ2I4rO_{%nU%Bp03a`3P
zd|g*2Q!<^yyCNEefn|u=^=l)d*%-bARz(lNv{(voJz1opGsBi>w8??Zsloh^JIFl@
z>|!*^vj?m3dI(5|*<N3mjtyvrXsb~7k+EI&=?*WUJXrgliX;bJvaSKgomY45(o8D6
z?o?g#ddmTJX2P|6<m(;zqdz%&_d;0Sk199<gB(L}r#8jkvQI9mDc>0}HK@-|VSKrd
zw|!l}XeT!|DO-G>`%>>SJ@}+F9U`Fhnb4EEQ%axNd`E=p*x4<c1C;K?bdV2u0`!)9
zLyl`j2zBfbD2%(=`ugT{=1ZUp<(gUy;|bc|Y+9X^v?IN`kBRT&B9=x00wO`oP*j=!
z^moe66R(?cpl59E3^mfrU^c50MKQ9$|DD#@^*yvG7#gK8Uy+5POekZ@&MPX-$nJPR
z4gf5|Xj1qv*hzKl;mZA8cgx`Ktr&77j0i~^)!vqnwMd!ZJunENk;%EYgn9D6rC)?c
z|M9NX3w;YsV}aP*h0M2WDt7a7HR<5%|JFr*vH{#;(~8mSd@1|{!)W8(XMFQ<1ypLK
z-K0MET<h4l@MId{Uq}^(`o8_6-zlOCJfKvr{d8UJF~|ZTEGC8918O?ONwfbj?Q2y)
zZ`oImDY1ZWG-XWiRDB1oW99op8hHWEOn?6;03)Pub*@L;T8RXqyMzD|IIBD&M8*Ab
zB)}mntn>5vSAzGRH;EZz-|xKru;zrm{u$i0zoR<r67}?NxA?`bgXGrWxrWPOCl|~i
zci^ZVDcGog<`048bXJHWusQOkzU$gM-l*LiV@1yr;aw;U{a)m(OwzuGgpKO+^Rp-Q
z&Q9I^Z)EM|$Qr_h8RXv9wK)~A89*eno4rtEt;)?ZMTPluJsMeUGda5gdfl{X9r%x*
zzXV=~fct`FlRW#1U;92>ao&M)hfR(Q>GkXk&v?V={y}6`=!#z2SNjS|V_`}|F_@#e
zC$p3d1+a?iWS=@HNht$tp<FAdti;H0<;8v&>b~*ck)l6gEv#r=_{>wUEnL#`*Prjj
z0D#54CgS+?(<!fA1_@lV)ta}}nnxd8cP9bQ)1bX_tE>YRfzXFV#jF7FT+&^@4E6?D
z0R^B+3a=o6BU@*gX`7310TAL6aQzsmwZa1F%b(x2yfD(LB(@rFd?obn>xq^oh*_A|
zP<g*P@{>cOXeKVu3^mtW0~$Z!O<t<fzr16Dek*s-<xOuL{=-+1K~m100)v-z$Jo_b
zNUMlk;(<Cym|;?illsTPe=4$ssS*I*lN&C**ap0sdtpFD3U_fQ(!x&-z)k!g>)xlO
zvAHhnHkrWqU6x)&jr=JIT<G&EmT13|sJfF8DK3u~dV**t<Q?wv=8>}Uibmvxhyu}j
z?<ZL7k0RA=oh}aV7UnJhfc|eMA?czp7j+Phw}DA36YDX9%u{kxux5=Xd2id8!P5oO
z|8^3wMV%4?fQsD3%)M{Hvuhe&UzvlT24a*tk&A)<R<l!g(3=Y1%SM0yf}j0CXMpV5
z-BwJOJUvB(65hXsCcZwDl?x-Tn2cjAmjzDnz3T<Oh(}vLGmk%Z;8eoH|0B$fLH(M>
z6d77~aO<(x?`8*&yHe^T8VAs{NbM{^-UC`Plnveo@qeR-NUFMszUj6C>-J0VtRgx*
zFutb4nzf@kKPGOw@&9kk=i%r?1Fa2}KA6>WXMw(KPC^Z9M!2`aZ6>w&&<x@tedM!$
zJ8dKSLtoD0#Ynm`u`V@eXWsw@CU|;i)bNP^zO+UDcOI+2!*v(9u_3f~)hL~?IuRUO
zfjeTO(8(-M?>soS5Q%O0@9TH;+1_eTOTgUKZxmH;UqxRbYLx(Veu8yaW6MIWrs-%%
zAFX)H0)#6J1q(xs09&Lv;+ds3Gw4x386w*U-r2iU2E87z7+U<%|IcPE0LSC!2w<Rf
z`k|Be1iWELz5p<Ox=G_lmD}qi|2QJV<bR_a&s4qYa7l*{&H3UT)@G0Qpw6MA(Bw+F
ze?OEmB?|Kt0Dac2awa}97C+chGf6{<Lg?(KU*{Ku0bP0d-xupYau1>*hR>S|am6l2
zy~7&ZFuxqu+hh)V1u*9SE)_cV>Ms?E6NuN4@|RzEAIez4AAdP+x1LvI<syFbr|7<8
z;J@qA&8?`y&(W8|S@e!`Ac!I)6g(0CtRf2aOi!3z`|H=^8$Sz>+>ie6c6Cc#4!>*m
z;Qcbu<-_P7w8o*fnXFSv*jR>`s{dmn;A-F-S%uDO-JHn#nHL5p0t95&v}2y?-Z0=*
zPnIxfC;fW^7ft()AD>COmhT(y#O-BM?C0#g44y66lYFdYV1g~Meo&bHXiD=ovhkk~
zQoYmisJD`DGYAZJ)A7o0-jel7XD-YIfg9)gctOO;`2Rm5y1cCfcWULHAEY3E<I;_}
z7glHiJc~jkHN=1N+ojz8pSW5BX61GpTRi7Px(cxt^@dU(nJG#L0%zhw{052_^8dvJ
zgUcg6{&?6#=)hHq5EHa#AOhBI?dmK=R<yNNUkaeh|FLK7N)u%4HMRCtf<JG`w-o?|
zJf%>BH%23K>81P99xUH-0HXXq`4>SZ*X7M2WffeP$e8;8KxLfQBe)@)EiASo2u7h|
zy$WAgeQE8(fAY#8DH>w*yg45?)6<yrF@pjz-Q0Ur))T26{K9|-s1mtJ6I1)KO}D~>
zyZ591J7T#2zzns7nS=|Wa_HBD&D?<O@_gV19d4ba^cpP6Qm^tAp-8=lK4)7GukHL3
zD&#9v>W0_TqBEWmYfv|fO%NnLrGV!};j#}@_C5JyT`I!g>6X6yf1~+4N{h-#3S|NC
zJI52xvG9!}7h0d+I5O;(l|vg6-IQj$c=hAigb4H@N#}(S<v&f4@8eK@&T{9+4Ho)6
zO{MEbA71G^M|y3S&!kt<l|A`rz@aw-Fm62#M`yjIw*Q;-Ti|QmW)7z<e{>E%TVyWZ
zxBFkAY5SGk#Ce*id!MAf$?MjoCGG3DvbGb}Mcn=GYQGel8Lb>B{yVLY2jJ+RnfcS9
z^<!)s3&EPMS+`qWh=Q!Q(ySBAeMQZ6B|?^e^J?76aaeaarva?3njL!Y`nkVUpzC%k
zW;}MO&Y^G|QWGCL>bo98XPs{F@8X9H97I#TdOr0`ZH$p#+2|+mZ362ojj>)=qt_e?
zrSbYb)`Lq2*x&(%rIgqnNY<L%fBcZy-fM2fpR@cXhHBs{`8zVSRUpCFaMY?rooR?B
zcJSTOZsu|I&&ax=3U6M|q-O}jze-Oo>Lz3?d|CU_bG&!mJ}2)6V;DQcUYg?*%1tio
zAdS(CN(M`3tKhpUu`KrQ$o@oI85oQq_p%pj`XVVE+>E@^X9ARru|qWcG`9ID&We#R
zb&QZj{9_mHfRy6h-g;%@OWYF}ax@#_us~AJyHXa_Q!2!2Bpb?VWIhg7XA=2w(E54_
zgk5Q#Yw`E=<`?^J82Ov-?4AGq?&GYAqRImnzof+-se-VWfk8Z`5gE`j6)`m#0&xw8
zh^&0maus-4pJdGKwTxB>RpY($-xW1IO#B>BD!pAz*m{1hck?!Yw{A#>u|f`Vo%5pF
z7hE3XjqJWi1#Y#020*_j`<t`-H~C25ldPBaBx|>vqRj&qX_*aBW$h5S_0sF}Ot2_$
zlV8O5h_UKV>hoXZ?-D9AE{j@5+8R6quJr%xTOJUFZwfoqzqX@%ISqC>?YPz2b+9&-
z+EBd!s3U9LzxIwPz-M;>byZRC&QeK&fVlGvq{5KF6MC?3C<T)&ONZGY-G5Jtbx>0=
z;sFbIkDg~xZ9tCfT^`s3nLiwmgZLgSf|1g&uG26M${X?5zJ5+j&)XaZ?1-}GOxd9v
z*FkqmveTC-(4w_p0?1>JFEyQp3d^L%6>NX4GeHJPw{k+(oua*LGf`j&yzNNOh`XVK
zxdX2)#Irh4Y7taVhw_I1UHJ`&tT%@p!mjOrRPDf-15as(JPstx7n6DXn>uJ%^Xt~T
z{~Ov74SD_4M=Co;{D|e$caGc+#RfzpQ~8iSzxJHKvwCQnR-y5~OZL-o&XPu<wQv6E
zZIBYoj&}}eZxOIJ!M+k*-&YQ4{{=ND9ZeHp|9qSf4H^Wvh@*9^NdVgOR~CMpug@~0
zCY2#>TtW}B_!P|qI8U`>My<Hg_Gjw!jO88)L6Rgtx6v<>KI}5s5k!hVQy83OLFyFV
z=KSxf{%i^u&H*6-p&T3Z>l=Y3eJRai_9m|U_01`7Cb_=brcuBn7}@L$w?A(Lg6TEO
zE!!BsLSJF#fAd@VeazC1px2(LC9#~ID&XA!1S~0>J@pslC1EZz#=dl2mLo_((J&}!
zdH-rNb}gwt@<M&({ZHL1q%TJgy?&am(wE#Ufqs0WSq&Vn{UIH^icsV|IjIF;oeRs=
zK5o9$!YQB9lV!pUh<%iD#qEH9dc!jsWLhFZ2b^<d^ICCli+!iR?{9)Nr<Ud|twMke
z({r6Ke)3x5Tc=?^%ZI2>hDgcO|Aaj2a7;9%vE*%#gO!=3a)n+$ngYyJpo)5&d72-M
z>f&?v<z#10wr@-cjgT(=gvb!k6d3(?xfZ;ZEbl5Tr0=D!f4T4=?E^1xpKpmkN|Myb
zB~A5d;HdGojZ#f;uYx545Hi<vx8s%mT@ih%hmw4&L0~2TCfM%I%s5T#h(e|n(%hPg
z%*+rFN)akwd9rvQ36yIiL`G_PtqW=vRsS7$%+MRNBb{qI3SLT29C)Qvw!%O}%q^wL
zl3P+6k!Vv~_4Uou(n-^jrwB&VdIjBo+jL~fqCN)FB*vXGHs-GZdz?&i&JoctX|X~6
zyr~dc^oCyQPXh-7#<WrUhkD(0(@)qtIsbJ1g2aqtRjH5nepHzt5rApf4_lX^^*_ba
zMwi|o^RvQGZCnp{xHUpG9zqVrqT0U;_qCiA4*#EJMG#zVb~IG5UcC4A-Awo%PZOtf
z2gZ{^DK8;)I=hi2uj!t#Yt!;IUhV-?dniKBaC0eStbR#SM+dyV4Jje{>+*E?Dyj&u
z_-O|?;QC$x(SIO3=bRDgn>)Qvdh^Rl+6)J5Ul6p6Dr`7Buyxh(cPp$}em|KmydXTP
zQnMV?`Q6_+;>^$6sm5)aaPoY|<L4+hgpcIk6&MNa=`B4i#GTFlg)91<ezh(dHR+P%
zmB=9kvic{{rZy7aWs>*J{q@u6-204?ysJ+?XN#n*=^Oixbk(4S)(;{I0*1!_?evL{
zOF8Ad<Dzy+W#~W)DK1k?YAAh)iL0RMLB0h=o2{9=i+v$t_xsVjNT=7A<EX$F-=Z{<
zJk%1by!R#KQ0cCM<6l+buVWuC(vmcqxXw9!{-2e-9L5q@>Lae(>L(laBia20>D?}n
zfdO)!P-`Ud=XT2x8xJ^X+~U*Lxeoe%f6V7+SM)At;9g!%oZcwsL}k?Oi9^&nf_@oz
zgDCx_)gH0lTgv!MZS=GEKoBYJMf6s{y+#x4=h5C>x2$?Y^tZ7GTVFCLLHI_0z2{U$
zWl3J*7UhB~BAs(`AKhC;<ZWNcMgo`F^xIDE9A<^I(1Bcqb`N@Gupm<o0V|%LlqsQO
zQ!D1k+}5I=M?5((rVypZ@h8W}!zl*a@z7!%Ytllu4iZ<&eU&Yo(oe|qNCT0_yHlGN
znbU_s{XqJ+(1BbAh>0W!wu}<S>HNslY1{fhrHYv1;ca;KL^rteDBG{K#ICfe!=pkX
z%|PF9@v~1fYL(z9l7P3is6EFRtCKYyxg7Uu-{M}Y_2GO$7K)nKU$xnfLyG+FR)Hmf
z^!0lX`-jb+M9PMKQ;s1Tsy))W*LfNh7Al|gFS#S8CZ;!`MFbziP|psG8c)oQbIof9
z0a_J9a7oqak^Xi<K90ZNcN`f!3b_6FBhIcMBBBR+srn(HX@lWz3F!%)`>H|gFtVm<
zH~Os8vro0$jR77vbp$ey8xFfxy2;?PAGsB~1sFH8^WLD}7L3REUqiAZplOVP&<14t
zz{@vfUP3hqH4Aec&l4Bi5s;*wU&le8m<aQb;#RjRQ=U}zGz7t+FVyc6exJ7#YoE{A
zi|6&_mm;|fTu_y*7q5_Bh9;65s{7NQG&<~pHyFG4#!g-gv~Wa$+#eC4Mv3GS0!K<v
z6Vj(8Q}IADvDMmRVWi(FvLl?631Nc{xc-B)W1tLg`W+=4D^h4-N{s)<vb4(dJJPUg
z7g{8_BgH^kcJ?^671LMaKPsi^+_ZIi2R<7o5<LXAC(N3Fb6}q2tq53Q6ORgx?JivW
zyqe?kd9BBVC+*cdKqGmJr%b=egkhoemRU(+O(9eO+LQL&w3KR}kKT*#*)|Em1;M#H
zb!3K!-pSTq7L}7vJfF3Tt$OQ@$znm=?|@jR<0Z0g5_*OfX{27hjcwhcyCgtG^#>n1
ziYfy^HPAxxwoC=B8|dB~fihUvAgo^Uy5EDb)*DBGq^h%)9ML|*h&JfivcK)70aCNf
z{uv^~2w*!Owzs|#zMD%sV^mhVb4sQU-gws(VI9`Dw^|q#!JRh2PC=$~H7a_ble`YM
zKcMXahU~G(sYoQqC|#a(X-9a2zrMKqYi@Yd=8Z({S-OBUn*%Axrg!@ww6GF}S1O}J
zS8~J&Y2j8(4KRo$CT>>0(>RR^2I5gBv(5VK4heeSOZ$B@uR-l5(o4;;qFT$gs`7aG
z#0mR*PXhcUmFg-tdaYqEUYOQBhu|)bS`Oz8MnYc5sv9CbPVy$lsz=;c{71z<0S<AJ
zbt9-?Y=<=hOfGrRco#|Q=ecAl-##C{7r*_*iWF!*gMc=SdPQx;pZsF#$$hW=;>i<e
zn#d%FX2m+bw>L&M@`4TI?ljT^bBQhMuF<ufoIMh}8G#F2W1UyXngR2Q;Ec+om$qeN
zU2YWzNb$VyW0r-LQ&r+3Ix$ffB*D;IeGZ03&vvw#%k4+|k~EiQ6TTU{x?kK{j71a|
zYv|gd$LeEHJ-<RFdvdK$I+_+1F-Fw>BF4g!aysFq*)cR?U-3<4_>Y;JMP9dI2yJC4
z115BW{^bJTr37eMUM+nky>Y|@FXO1QKa>bLYw31&!iuy{M?!B+JKT1A<{r$sR=tOV
zH}ljZdM59Su`5cPkWR*)-+KDl#7Xj|!MZ=9_i+0iT5BEPPs^Czy!Pn`FcsuwaAY~U
zu}QpU$|hjO+38DYR(#xsc~8vK8zxl_-419AiQ*!;FmY|CDhNm0Q{M*hk87GILi6?j
z1hwa5DC+d^Ax|q|%D*zYsn>r$uq5z3D#1o}&7z5obxT`}kRu`Cpj;^T0x7;qqdi!3
zhoKc?`bi*KM(Dy2@Kh+@PxekoKwV<P8BX1uw7VYN9Z;z*ORv`~pDTr?%7h;vsZvud
zq?D^fnkYZ?cd(%|Y(jqF7`qN}G|uYV%0Mh~G41v}jWkHwsiPH3^>(>E9GTl&qnp(W
zcuhtGQ*D^3Z~ZzKs>U;Z5;Tqo)XH;i&I)yjvaVLyGvy(gVUd;rMk@n*9He;JLBy!O
ztrWx}4`T$ocL4ZS!X@#ZieLqU!^Ekf1-<@lVGxFN@*=|u8dro{j{Us;r6^^ZHinBm
zb?VjrF%7cD%gWW<5qmn`{?ejM3ZT|!@rC{Rwi1^swzoEqgV;+3koIN|83|P>JB&9D
z9y|EW2$vYU4$$@$-)DuSgyrgH76@OwC~~N&+e5S9n73lqpxS}Q+)c)0M*mw<$brMT
zViB4aS4ihCaN!2_FU)!}md#yGtihsj*lF-;;}JQ$wwvIOpfUDG>zVnxCV)W}<2_TD
zUt9%-=2f#<-2ncgsQZnhj3DeKCg1U@xRMSYSK=J9-Pb-H4ZX#5=CEj~t1zEFqVG6z
z>ZfzM8hY~_92iB45Xcpb>!u0`AF$^1L1^Yq)J{gdaUI@+aJf&Us}qcl$L>Ds?AZrt
zpN5V0&edbq2-Sw}>d?pv!&^vNMz001s$4PQLfT#t!3^w;+l+(}*iFBbZSle6L0g5d
zR(UeRqow<tT_J<!g2KO-vcmkldrZyNmsC}*UFMPsHu!dIyYU7i^=*Y9oa06WA_`Jj
z^(w+(3swTM%xG>^bA6B)sA7D(nZrRawaW&HiPU;V-GAS^+0)66ZHum-zwGj#4Y|)~
z4r15EK^LkqW5m=mRO5)K{r0f=v~2+N7BPdvThC`2sM=qD{5VhNLwV9$F+&Q1lOswS
zd65(L{@*rSYFt2)2BTi;0l%(j28DklZ2Xu0$yR%Iz3sZ1i*m*EZ5BvLh~0!9KRHY=
z9=_g&nbb;qlWJmjy7G(0SlDN;xxXf|J?06SE06E|6_2|QMXtZ)M0!ajKRT{=g&!|F
z_S%vsIx;?o=}iuSRFT4B$R_1MWPEtOH?l~ZNv$ibhw&-GQ0k)?@s~uWiVA3vGODLS
zU+U43IXBS%Vdap4gqIZ8r~UUO5|e4){YZk=pHE~Q3-E!^*TjI#bsydK*nYe|B?M%6
zw%FJe4JT%S@TcTQCXLs)IaL%vi&RlI)#CHA{qMt2Ti~VOq`l|n=~GJ6RTri)iJ{Y{
z;i#%>Lo}15k?}^$t(f=AJRG}E5+k9u*@5zDO^Ha@{Po=j##r=PPdnWB26y$C24V_*
zWhY_}HmH9VRV|_i0-;G$60lGG9$bPi4#Y^DOZer@@n3J<hw#T0OyYZEh8x0BIbE@+
zB$;*7HfvUibqsTD80u=21C0VAouOFFFolk;dJGsy;NYt32QvC}yq395>?;B1@`LKy
zXM)<yJ}0BAYf8q(B-cxfv8B2O3W!He8n4^cCiB?4V}<tcY0^X^eb`?TH0UCRYL5ZA
zJ=)PC4cpM4D2OpOPprTz8Qv&_HB13JKn8YzP2<{=qF%#Tg6<aY^fruVxT_IE+#5#2
z^iP<#soUat9K}-ej!IFx6iLIhPZ4&N9eOf~4>I7ktr)ech(tf6XF{1ciHeC5A|zu&
z43^ygAs@GT!Gh4cli_VRjt3Py<(UX8d(`uZl8-OYJ5Iebe2A=Kjb~j{+Ijv$k<iJp
zYWw->F%VXKhLRa?Xiw2U;}+Vih=SgdF#y4o&&Us=cTckRUYu;cT>HZK?nfgut$IGi
zJ=#^B!DQJW$z*OUO2mW+c;>|u4#kg{;EiL?P#NnDHsb@<!1~lwW8m$vlys0$EXm#+
z^%snZWg(Yt$K2#dKk2r_GfoSKFt?{5gF(9dvh_T&Myas(^c)H#Z94D_trX_Rj>xz5
z(SEo_ZX_Sxf>?@#vK2{pAbxt)o8*Svw<Z-pK8r&*{U>T_{IzqeZNP@260$02BDj}@
zo}Qf;Zg5_EeB(ZZP83%%OFh&VRU(yDUK9AiqymUxQOIU4rVrj|c>}ODCI`&AwM>`A
zl)X9P&u`Foqxp^oqSy~I3(YSdYpsCC@Kt%eknXU~ss?X8PI<!m*A0b{wC8g;yRrI;
z->+KB?t^~b3xxL}Iwjd8k%0*%lODH}W{_j1#gAy=?wS?j_0~WSyUkfTw$CBwk1~&a
zOUODj1Ahafm%D02$WU>1V@&9?rw*wH;?XDgi*`)<8w2c3pmDsw6or=Up?mePeXlt;
z1(H;tbxZ4sp|Jrb#cjpD*0Zs=F{mY{iYDmf_=Zl_+7)9eFs(-I<6|-YiC*Hq_zh<_
z^ndeE1Q+jm0|gw{mzbcD%n-Ux)UyHGBBsF6jGJnCMd?e`DG~)<7-?-_Qwv15^L5yE
zHeE%JW2X)B$O3VKDd2G1BUL;RINY!{xCe6`Xn*}lo3u(H@%QfSEmlWzv+f#LDl?-d
zJY!+do4g+r88XQA!3JH6opw&z4IsH(K>J>V9Ym+rjVJ-7-ijftu5p*1@K;bfDc33o
z{1>A7gdgOE`!j%xCdLO~PezsLqJ!Hp^t}Xu<WPhv*TX*#{FF0WY(%E<vuP9&L*2lu
zDBt>+mi8L%pmD%@Nw^R#YtnA}?8NU2hY}_RRf1+P(Qdz7?MhYY?CQ!`D5RJZfNUS(
z-h<7_UYSBX<reFT*OcO*w@Uh(i?UBPmX?C|>W?>*Ye!|jJc&RZtDT24e1o2iow(6n
zZ6}4REMZI^YE8T44WbWDL@soWYUj~YVk6H`{sJCxIl!?&5`BIVzdJPghyJ&=PX?UG
zqAcL$H7dCK6RpS6**_LsE?l`>czjvI*dR%rsLrEa1=qZ3#^-ujb|u3qu?tHVZi>r;
zk82yHMAKgT**3@&d<K+lL-oZrU}_Ud4cZq55-B(FxW7Y-#??)@46i!H)$Q?3LW1ph
zkTnj)s=0b*qG_Gz{G@FQ?<}<GY7BAhXv9k2IEA#+-<9f}%cV^mmk@;S%DncymaX|n
zinoki%ktdw^5&{*BpPlwE%Hym)IA;|YoNudy&`d&9{x!&*%Fhd91nkST^lV(Nh*Y=
zgGvI6c-r{ADb%munm!q1=RGZkvu)OClNdKRzjyoGFH5&u;&el{DpZVW2)<ajBAq<#
z`dP&QS|vkm=weP*j7DZ!74<|)mJ-}pTH^ME`9i{XWDgFUe3sY)$@LMcc29b<O*unT
z^u^&mX(OIHC0{^)4f(jv^Hl>82AD(#$5&{*h|a-KXubbu&7Mq;^{An{X}gn+wQ+?-
z51;Y?bG1ahSuYwsU)mVopnf5?))n|F7&vL3T|7xImJ3`eUr18^LJdCrkYH^zX~o;1
z2<=1(v|&#5)1D98RTTYf^EUD=ubdkj@8ff;(!dfombmeQOu1Q+_qV!^271ctVjI*p
z9Ua67uk%3q1knhNug_&Zn5kpeO7?SZ!%_|GEvkd7KW^_tSqw{bqacLPukTTw)it#c
zPoYkpd{xR)zbfzXPbFnXr>ky-8>eG`q^v;Nl>M8C#CeV$UzJ-wrK20Bnco02UDw6B
zuPQYT(p08>T!d|$_;`dqg=8~P@EGe#GmDH{R(*uezegoki;FeZ_f@iJ^?CW-<XCs~
ze?5_YGq)(6#mL>>9nq+FQr+QpEzF}3B=a~cW{ASReiS_!YC}jSHN3d!FQ>f*<dB7L
zhE6bj{gXEG)groB&$}T_tM{$*aM;CozrB_+WcVy~azaU){FD+d<b;Lw_joK*@0hyO
zOv>9AOiMGYKV9v&9<QA~_Bm>_bsv%-Q9}W-x{;a1P8+fO{5>&a%_n?3{(Pu!%}3R^
zp{W<s+e44Jc02IXMDUWO_^Ky+vT94jeX@SP+9zBpk*I_g{X$jcmAh2xB^~6(oszDU
z=jmz7*}OPbrK<L-#m&B}uOkIC{W8#ZUy&Y*uT=SfYp|RiWF>p}<UML|-K6dSZ*{V#
zb15J6O6&Pnaj;UDa^kw{Hh!Xa*K3H<)B2RwBm(tbe-bu14`KQ=RSt!>Y@^Lf8zxWF
zWfaFI8RbS9nTdemw-E{u{D*feZWj_C7M2lT%wz&Rgsq<Y*kbzd*Uyl&%$=W`y6yGr
zaDh_FKzz7+-_+gBw8BOT7mnI#f;S78Lu1$dEJTX!cI;5PFXq;IQDe%6T8wwk^zo;{
zaMae6CRm;FcA@O2Sl{%q47^t6RH$!Up+unqW9N}Wo_M9quQy*G!8PspMfhsd!VBQz
zeo4JMu(*_NJ5$5w1CwIR-agLgLK*23=~v(RB%7gWs0N2DPD3Zd(oN5-Ms=A|OaLgY
z&+CyHK5ECFaaF%Zfn149bU>CcEzyZ~J;5o?>kNV+&MWF$AlsDV7et{j{i0yw2#rW+
z>0v@wapo;ohx-0HM)A7UTS)v!Bz)4Fgykv=<vDO+dR9|}o>@wHY#}Ns#e@~)w=7SG
zmt8<_2!Oz3v0=%{{g<&N-$)T<FgCB)!n8I_BMU@su*pOx;^A$JAsL&#Z2Nxin4^Q+
z!5)loMJshD_~6PtxVRnrq=Lyw!NbLj6yY&C-u)t520^LuK6=iGb}w%}@7KSnH&0kW
z8zZwPoBJ>5-;e>QcL9Ul;O|tL-#e_{KJKGeDBQo>kPX!B>A?VsCF&hEZ;|oYbmqav
zNILG*=3S^1)b3&QejY}5Q69N7@0nFUG?(4Jew)F3Zz;f45Kc)=B@vJdYC0I+8BQyu
zxuzn$mOT!!o5F21g67Z?HuSokr+3`t;Y}mq^0eW^m7EL8$G3eCI+5%5W!WTSP~GiL
zHgpwY@7pov&Tg_lorVWMq2O}F@Ww=<<EADXL`1RMc0Wa3K%Jb?3Nh7%TIHqbQ<2Qi
zuUlrDe?c3CYjlzd1gyWke$jyFNHOk_;W2*wLHh<CGoxPzW@GJ6-Y%c{H5d<h3~D#E
z;Z+WyDMdAhyhsbkjFk`Y6db>|PJJj&VuP5<zp8s;I5=2z@x5Z`x-WdBHB0LSLIG#0
z7MAnT!`5B=Uf1Yy{p1Z<$<t`m;E`}|G#gK>ABgymb_x<bDwOqt*TD|G-UEYFB3}L|
zAVAfwza3NY(_5lGp{g*c%J(F2wdd4F8QgQcnb<)^W#ste`i$DZ!E$Yx3Y_e1m<NFA
zQ2WN2Qj2$xHLeo4l!dar_D1!V$Gp^Vdn2!Wf6oFB6Rh>8F${@*+d5Lvh99l=*XFt6
zv1py#J_|};AH>&e&d+^OX>9@^txAc8qf#a&hAJABRUvDYNoZQMR=L7w-Vd!m&h0O0
z=w`G>sP;+My+Gj;%4$>*XBInE7y+dhMIz~5@tk%0*OF=7hX#pFG0_hMAGgFIC6(q8
z!Gq1nn%XJG9v_OI3i`Ywge9*KhU3gdhOQ*G2-R_y3F)E{6k0oN(M>qFjRW7$<<%V|
z?UnCe2(!uI+RT!&H661bduA225bmggJ8*k<Uw2hr9gq+%l9H9|acDny)P6mNsNN3=
zO-r3>*!VK1-A)G|<Y1_pwyY_9G<a-BeE7`Y<A<H_%b}R!AuIYfkN}|L#r|rRGQT11
zU}!z#$@@3Ql#!_MqW(yofHw_(jW7T3Q^NCBOY}UGq=umN^f}{lVu}ik5dEqy(8BAL
zh?8WDK&$n;x6Wr>NDsGtGPL(@I_eI6Yuhq(64v+|H>DvsCJ3EQJfv(peyo%4cZA|T
z;LPKV^M#94HASQe#jy@RrC^3LT*sf)P&U(TiDnbizI@JQ%3#r%w`5An)s-R??m3%1
z?mDM>q0Im-ri%*bI3aUR#`oTRBbBbmGN{eGyQRmX-bVrIjgCy~KV>=<M*)|*TL9+T
zT=ubW*a^E++iUdBP6y=jG3(dD@*O?itnVt6wfOS*<vezgj7C{WTf2+}K}uvh<qDuu
z{-N0t4ABxHa9RAar)lv#{r8T48uOnC{=PRN&bHZR9En29rNKGXZw+ggARe_)*^eBR
z{l3Lb0w;avUQB7t)=(u(%9OMD%Nu}nb71vdrlkYULG}JHm^h@5U8<!P1rzR*r(5eW
zY!nesv)9w9-?(RjEyXj%vWBJSX!+{Zr17M`J?m|*egfhM*MqPZr>%=QMV?=R4;f=@
zqa=+N91+qC#C^49rSA<9`*Pt>sU(-aP;I@nHfs3b5dE@VW92LCr@7L)<6(`1x*%xO
zgWtT><a&Rra@?0{tK9Gz9YOdisVFO78}aCFJG6ccH#VIq{^qV-=2z{s&admQFSwDl
zQ=rzGdSw;TD<Lts6}RW>x!I5wpqL8&2!xrs!yiEG4{B4ECLfyxJ*?xeZ1rb#8`lH$
z;xXJ)_IzzYDXlb}w7D@x<NowLbe+Jsg0y>?V(`v~;sg%ns(}tls%w)|k|3vDf!PC6
zOfJFRK=tSC+ID}}cUDNNwG0XT1+;zTSxv;7ou5t#sNzGG-V>(~P@^1hnAmHV1GQ4x
zh8-9CxP!Na?*;u`{zkVlrd+YZY6?sD5&v+?=bnGQ&yyG$z(#YK@CsT2Zf$0@oXswG
zV%tdZIeEnXRpi*)MRV8Vy07bZJ|vglG*xe1?{ouhR_3d`@^~^LO$XUqKN(ASBgI)1
z5QzzUlp#^uI~UweTTz(@(Yz3TVsl-HIdrYa9iB0i!jqn`msJC9|4V&<xZJ0NX-Ix(
z;G8xv_{8MW$`b;eWQZAe7P)V+eewKM?6XOXU89h@5JkjA-XI6W2Bu~F5Wm}~@}}?8
zotzejhV3a(7;_z;;(CsxfXr3;yNw;1yC%{3ATK1YbKl^I>PYZbWl4R-#U}L~J%nMR
zMqUc4GFoTi&!|UjG}Sc7Rk@Duos$E##J2Yl?R&iP`$bwoZH!eVwVjS|(0p#cIySyB
zC0+`x|J85hTQ-@9s(Lit7s175EF9<vn)Bx9e@=hvKH$DkE3@54-xbaRv9IzGoxTt`
zb!_llzn$_7*kpQiSHB-DMUHy3Ac?0}zy~`RbU@MXCXIi`#wSL{R=#Lx{n1r_cT^|G
zn@2isqbe-L(0ZP0%I+uYBEu><QHqp{l8qE}Z}q_G%#Wa~qk_;}AA-ox5<6)LhO=S1
z^hht~Zuf-+-YA+P120&?>Qj9Xk@=2TRO6!8hV=1P!E1Mo4!3@@0P*NKZ(Xf0OV$E_
z68LCPP`5gS4e3>%{F%5ZH`3I@dtFt<8JMgQ_7JpC(6VQe-H1~Y@6Z=w*E66=7V6=P
zv;-{#R*eY_Ow%+aHIMgL!cjJQ4XPqOQQv*7`)$qaw2)r9S4(-mBK_VR)ws0reyt;r
z;ReYT%!<W{HuQ$c48DGlZyi<U9dyDZDhRvc&ugCj5t*sl4Bu)&m63WIX3;&)ET3V~
zpxSYHHEBztT0n^uP8zFIJY+-O8wm-}SDudEyy+kDnBgfIe2~|OA0`kVPl+qxHzZgH
ztsmjqu$PoxQ5Lt~EphYzVDuL3*aD}{s_^Z;7tvA_qTZ*bPUY&v{jC_6?%|+}rlhJ-
zy50nk_ViU&s_2U2;g7jrPII8B_ih+8>Vtl2HSC+Zho#fnrt);ua_^zY?VL6;IF&kA
zs!8`SZ@L?uc*FiDW2~SOKiqO6RnN~x*W-`gMKCj9jpi#$X7r57bVn);{R{ImPVrP~
zAeKuJa!@zdyq2o8JiK85s)s8Yp*%I?IdUtN_@*cx@9i%OPd9HjQ2XY3?~VgD=@QZ*
zdUP9q^-j9Vbi`(QGM&vIg{Mfb%Ei@TN^8eX*;h$}WgrK${nolYWyEoW*~hX~+7CUV
zC8NfhOtb*Rs(%lS`a-W?4MVCwfL_~qd2A@@-X`OCkN+!(s(SW6gsPQno{ycqN7d`P
zmb-n^kB9I}D7oMA6@9O_kE=_bu|lEaKWTZoLnLJL78>;p=mMm=Xx#(h4N$IlFjsA(
z$r>ddejlWzIlJ4Nk5!LfmK(QW7F_%U#*kk9d0t{6nnD>-cM@Zi`QF3*OI!)2d(JU3
z=gRIlL*Psk-HRb_=nYe754;E5=W5+^6=+@WXo7;UCOgQqga0~!ofmv`D>LcfN$V6z
z{=Tu!qi%ai2Lg?^>P@5@_38#>sPpjvXFcF7PJBb|_fU8Z;6ts>oVob46?e2j1G1@B
zOh0DDbMkrhy^|H91c=C^t7q=8s&A2~s9qy3|0WhNmp;>=eU{i<;p{E#2Os;MNFnPG
zsDTl{eW$ke<y}p%JK=3@{1Zu#k}kESp1~6suT+Cx{g6zw^e}x0yRk5?bB2Pw8Fe8p
zcx0L>U82_BJXKw&6?41;aMg&yBo`Cx9M2asZ18F^$|g%7<{(YY)o!-7LWd3lza;%3
zy^2Oird`(_QJ?$puLoInVJPh4V^Ft0A4P?Vii^0lxkv`jOOPh@O6)15qFaO&$)0~d
zcS^HLP$n@JezMz-`W)4qnfy2ppKV%Es3o%IE@U{#2eDCEWvC?r;WxDKbU1T3FfO9w
z4|O?@uy?V0U55>1J$nT#O-oBG<o!oYWk#jx;N{+%j27YImy=x(8|#cA`E>A;Rex^@
zc<paprUCxTd1tZ53CutSgyxc)NeT)qxDfSOY>hDdAw<?Rn1ay1c3r)Bto~G|lfTXv
zQl;ami23e{5OYq*s!kx#^z@7w+$}%R{zDh@Orj?1O@B8j78p*Tmi05>mCBkp@>*W*
zMC_m4G^e6=RN*$Ye-=vX9W-j@6bM-}$$aU#)TX%2u94S?`839^zBk%2cJ1N3HAt`X
zq>j!peto?m*S<}gd}rdW5}K%z3&getxcbW<;o5Z9uI5=cerO=*qp_|EJih!%C}QJQ
z>6E9FN&f5eq$DKlt1Y$=1a6ei(W@nm=ac-(UDUCl9mQYD(>D!@#_mZLpO4O)cKb}z
zLI32lUw*$0gL<}@dm|mc%zC5hgxuWB|1kH>Hx3A^Z2WPey4c=iQp43gn!~xk&n)1J
zAel)4V@+^15$R>Rigg}cOFnaF=Y9<CIEnlXvxx%n3AOCaAI|*G5mtYILEgY-?Am9n
ziMBLx9lbnh+}3?78cuB)pH!RVn4s>=2*9HoCfFrFK^q;ME~?Qkf!Z7}#9lk9CaT%7
zqNzbLuHi~!y+B#6x*}jlCkA*Cg*LxDOt1doeZ$M9Fk!&as8Y{|X8(A#>}_xUA}bov
zfoZ&-)-a>g=ZLV=wYxW&xQ166iK4X87jNVf{|$CC?A9Ma)xul*-00PV@zI=Q;VAJ^
zM)<}4?!Y#Y-C9pZZiMU`N{Gn26G(~3NZD8CW2=5gupvrM>jk;A1GXqQrnxn3XoXE1
z3;O-zV~iZ;e5U6f80p!T-1-@Hz7sDWVgJ$gOq7}~gk7}@1npzqO!8WzIdzCc2<_oF
zvCe4t!Gv1w&_nB=eu#6>2jCjj{sscJf)|@Q4#(4FG@K$AtMf_r8h10SKZ6Sft?@v1
zgET(5IIdVPwtpFrb0y9xnX(TBaXjCB6KtdUwYj|d9F$vh(6couR8=I(jVbb%?`CV4
zcZ}Ymv>f<dbOAhpE~tzUXv%=jj;6)@ACGstF0_UGn~KlsXLuM4r+SLxS8QOX>l<@e
z-gW9_49}ETzy4yz`O7IIi-tY^i@Ejt5v|tL*k7owsAjUWfCf(A^>lA@yBAr0^sSi2
z*R^AcCn9j$HjMc|7Z-Aa-HQ^-GsHyq>yhEq=qVLzl*A#IiMV*<QQ_X<9XM(3)!PsF
zGoMggm!bUG2FPh{Q&+i=lX=^enEfNYxCrXIyP@g&o@ZNsDx|IV#AQ3e>L}*1SxcK<
zU(8qZ%7nZE;v95eERjbjd@-zn)d(CuJ=t{!C1b@laW=FS^9y*I>99T3OhOB9WX<T>
zeSTRWK|X)JN!j>8)ZDSgjp1T1xt+o1IA~6LoHZ>82v4m|ecs7?mQ1=&kS`kEb3(r^
zfkcVMV=9d7X)HNc{5KkSN>8zIqdr(Cc5mlX8}1@+JMYQrts%ZFdU?e8>U0usA;?r^
zeF=K27&aSBzV>7DUG$U4#K+SXEi^mHa4Fdj=j!Jgi9+>cR}6~C{avTj(RI+=`AtQ6
z)wGYkf1Wde1hPg5brU$c?^cW86?E4o+qZQFs5YvU8Je!>#DtyhPG9iX+`VGXjyWc}
z){Q(~(on5>ln6w-;4}V<niC7kB)UHl=UzrD6F=NQ%VU2HN8tCoG^l~qsvqWy{G3)X
zs+!)j8493rS2Mh*@;^DbI94M*ZM>M~D8iu5%qJPV3@*x5BMvgk7~$@{Lc_r0Dw5r2
zWU`uYdO*3HdjVO-e`JCk_8(#h0};SL@K_+bB_q<8*LTtn*ace77l((3O{*FEUXZb%
z`2oHd<*e&nECiscH*(0N!3|;PasibtyG!Gh_b(S<rQy4mF09_eSRL+>Rl9G!{?YBM
zgC0rSG^e$Gr+2SV*3#tDYV|DpEgTiT%d*zp@jEu_(0Zku`9<B(;t2TQ0OlzD$eqIO
z)e>=IF(m*?u8*`O!%=isi|{;nd{KT9fG(WG?;yXJeF!LWbyTWb<dpy0Y~46)#9{K#
zt!!jXbKH9naD2BK1f~UrinE?RIW9cgZ`ym0|CSvz7220{UWZQV*Znx!Sws-`<VIDU
zB}`rCF|_(3gIfiJ-mr}hTm(N<T$}l!z%T6BVJ!aJYwm#S=zEAn_T(1l1lnB2M{Fs6
zwsUwI*;jco!a2n)xHbT*=%?a9+v|6(`WPL5K6CrI3&VNiNCT%@PG0T6$dlbp=K2uz
zK;}>Fxq8-i$H)Cidoblys<uX;LR&K#+Gc;8b(fnKhcdMta}<C%MvCh`B-c$e*-MR7
zvmPBTsXdP<RXFQX<0=Lk>p=}yk^}VoNL+-In_x8{7;L9=v<ddbgQ5>SRJ{8GQS;$(
zS71ur(o1=3E)QcIpG5`(RI6FxqUw&a4zAIFHG7{49r)N%Y6phv5nNV572oo8jYqdU
z6G;y(3CJkCPLsx^>;ZFgkx@26P8*Iu`*9vnX(0?D0X+QOvvLtuvGzUw*r<u?2tZA#
z$-ZVpEtlT4W`RV{-smD8E1XX^xFG!A0ofEZyqv7%(j;-%Dk^Zdf9Id`&gxbp&k_~5
zJvYX5!K!2sges*)7Y`GSOQk_t`nM6Rg%<e!SW+>i!%byKz$u$=y`Q(eh5XeY&!HgA
z{^u)`y3+*sI>v>5i6BWtI-%ys6=?pbJdE;pu3?L#%ss5vdZhmV4irRh4Bb#FwK7!(
zH~R}QCfiHWlHY)jy7JSHJ-!gP`U^f=%+TvCoR=>_qL$~|BetThmG9J9W?5^CkR$uH
z4POQ%?d#fQ>uVh|HNSp3J@ny=lH<Pe<=bx%xrH0n7)Uuhc)A|dgV~g(syzTSyj!2^
zLfwh}p`HBEm&>=pkb4qx4X5k+rF$8mD?izQCB?WTZPw)@9=RTS$OD?A_jI0wJ6|Er
zztX8$b3+s-o)m^qt%46W-#k&{%?<iyc~x-RqzpKszoi^1-kEHb9)6dOYk)L@=m8Eq
zFap($!JO~BO<ZIwl|nZh?%exq)H!*G4-~RHuu9qz@^L-ce2Wad^@|G#apK7hL9^0a
zQRulKQV%~i@hy+qR~oNUU0`f&0fE~h;GyFIEzs@LG#+QddH4>5e)A$CR3cIpAsw8&
zk95f$^Flv$vqD&1I*NxJZf=k>pf+<#{@4SB^`jUESfT=Lj$R>$)orsh+3d^_usDB;
zTC^?r$IU3XJbggi*PyOGoSiykb@~<NpU^bv+)s%C(6v&L(Z~%r8-EP2q@)}x!c1Pe
zq+rzss4x|r5UPhbcr@^&7yGnDMMiX0@B8cJrK&hVmj%EaQ#oMKAgZ?Z_^!|T(_;qx
zI3&ghRn3jU0WqX=n5X|L*8i?+BOy4F&0@GVeL&zMk$q0dppE-_u?5a`AxPfhpLLYo
z&Pelbga)>>t2OHmFk_6jCQw|_O=nN!l<U3HmlFX2?|_o%wnJTwsIJMV9MTIp)P_s(
z1BP!Px{b%PVf&FZr<kLUh9K$cH{RdSG#(R|v5VqSAp-)ZltRUb*f@UEjfYo}w4{eK
z)-;M=UQ+z@M#J~U2*y`waB!ng=*$Ocdr0}gKHg{@3g$_9nZ`^tc3{Ll4G5}?kl+T9
z{R*#iiy^9qZ^wv)A$bP-;_wZ6g%|<*5<qj^LX2MyxYEX3R~2z7b-svAEGF;CAFp8u
zPPl1hC$E9DnZ?%;RqTD}3*#T_LwkbSC)&_SHVEtO;o>1jJi>D149#!J;r(GDu=*oN
ziCdn1#Fvz!hL7NplqyhJvMu2TzcN2n4eKBk9ly}^VfT$PJeg_=#DD2N3&3f2&jcHZ
zP6bAN`swuJQt*iNR&uM9Ign@g1f0c`PIyzBbUm!%@C8vZ2jtf)fAqftsC4XeLs5wx
z$Dk^TlxAW><zUFYksw25!VHvie%)$DJ&FD?#r45^Kxd^Qa9ImimZGU0vjJOJPn|yB
zq!2+2R~8QTdfhK^0-%oi_lt0N0)0chHuE0$FU>Vc2Aq7hKcE2>PnLB3q_Ju*mK!l#
zSZHr(;XUs?qwWi)IDTQ*cQjfeX3tw)08a_w@Zr(IYsdRN2WroH7PLz4WDAXWe4Lco
zBJ#idfaBqcHM`=B_W8?(#0Ke-^&?eW90kA(?i#LH0*3Yh!*rH-tF!Ig_tcWMId#b3
zq@k=ZUMe@Yc!_wmoRU5Z@Alg`zpe{HxHYimS2|ws@Ku{k(jY=HY;f%ik!o<El_Xs%
z;#s!@?3sy0^*B4^bXI9(>w~G`2?aGs-RpwzD8BQpIggqn9fIzQ`sp*TRkicxIB8J3
z@icIsqHPfp01zqhl1b-^^ecb#-Xgs?wM!o5iijXA^oHiw^)#q6>=-h?j}@l-RCu%1
zaGrr0&al=i#A6ihAB8@oLX+n|<f3p=uk%CfE9z}rU^XwXV_7{ise8F`b?wY)`{lLT
z!;X5|Quh3FR>f|>){Q7(mnC3tYLn`tQM8tIl60+11>bc*!T=y!_=q;@wf%`b+vM)7
zN7X=$5TmMMr(4mU?F+Yy6nVd?9+dPS9f=6k=0i$~m$+?2ZHrphop1Z36Ko6#y@e6+
zLbx@t?Lr}RwmTZn2I$h%)Cht)O$Dh_Rr~ZNK?gq0K~%R-y%z<)GdP$2S1A?W%GNG(
zsfL%zxI?>XWQ(qWsG<foYRdL-{bnVR#C!B)2<H4~jC*atn)nzLLzCXZeeF1^&CEHF
zv{WW>JL&SH+>p&|3|0d(G`1Tar#`xn;xg=IV6Pp^CUGX)`u9VkZWW(cx9-}IY^oR~
z4|_btd&>&44kxsvxM!g!XWLrZiyzIh=%)9bW8Ujaeb^{dL?}p3eTVhTO8f%uHn*>t
zw1i^~*d$#gkUUyw*Q=_de{r_2rEXUAp`62}q)z<;dCb~?y$alHM&QFOT{p!VHE{dB
zmiFFs5xbgS1|o&$T9Xs^km)oT8wL2FYGnU-6-1t7HuXSP1y;r+V3a}?D1PSbxgM=W
zZk*ug-vA;L<XeqKW0#oLA_<mR<sT~zto}dt-aH)2=zSa>+1ij&itLp(OAE3~MJUQL
zj6F*-w$Nl9OPeGiB_)(4@r>PMAIiRGdC(M+EyLJn?EKD<^7&rxAMZcE?{&S``?)Uu
znRCv4?sISFKKHrL{lu^lqkQk;h{>ia&LwN)2-8oCaGhffc_CE&$oJWgvSW0m3Fa1<
zX5Fs0n3+y#<IGkktwAhBCI0%zlDEwMPmAAEakAk^Q*A25w-p#Ok1@2g>QB52!@R|F
zq48Zj2=U`D47!fTq(o)6JnJ2s7n{HPOuPqsJ(i|O?9w33<;#m9Ms1aFA<O%Gh?84E
z@`46@rg&Oy(yEJ(!?t=zCsrQVv8i~7a*%LBPi)txMc1X@-hc?{;ue^BUHR}FCM+e`
zp{U);aAqd5%UGn{2J9D+azOZn-T`7C#a>tN8eAK|4<e%}-TLXyPzTZHq;r@1X%UR$
zQ^hs;uVDiui?o=2Dfs4~zG9wP69RqWfkAO}%3_5M<;wFJmDbNzWJZ}js?|C9@gs>r
z=Zb28+kSC?2;XDvfj>9??g}Ryi8a}A(guOwtAtC7OnFscmo6?6o1{aS`382z<KV#Y
zd+X>viED3SK<JY0T)!_)GCW1fg5vS8ZZd&JyzA2EobhpGxve|;?{S6N3l~N$BFuwl
zGl|zyB=<q`v<b@xQlY&(gfjBGYWi5|?k8Y6%zzh8@?}ax1zK?dy#Hk9)a(&;EZp9o
zJi|Eu6ik%Y?}1b37^lmsFvbCO+tLJHps~L$OpCZP$LsLy2c3g%R@X~Z1A<gLZh$3V
z&Mzbrt#H)$G=#$Df1}j`#&5g!^IkR!X;P@g-2~HNaNU|PaWDVX>`dZ)W8fiJiJtQ<
z%wXmgQg!`eZ<BHc$P8DkCB8=2K@wRvOIy6;TMmQHn|rrP@P7kI&@>><ILS9Dpz!Xb
z57^Vn2l0>u4<UHZjc1AJl{P8i-E^hAz95-O7bIb64AC|+*UxEoH^$p5$q#2L-0hP%
z1rVJB4mioTDZy1FWh`~{umjj9F2v@2X=m#n<d3$O6&^zPnGh;T(YjsG+`URmjK6}H
znfHzUVBkJJX5|st?&V#$!^>>J(3{F{lTYWz7y}*?C)2XkI@k`)qx$U5I3+0IRPM0y
z78=66Ub$Qn&ywn?kzBhF&*l$64M}M3Oc_Oe;rl9mZ0#vD3(BVV<zcZg3s==|t3si?
zNV>LgcN~(jX}BGun+nBbvP07gqar@gLWloOu;PH2eGj7(7Bdbm#E?e~Xi6;vDi9JI
z@+7tK(FW07Z2eHp(kl_m@f>iX+gj|5$Cb@GN?Vz!n?0@qk6`><e`R{+?QzM~p>$qM
z`NRQbyMUKlbFfo=aqAHa2|<uRlf`Og*fXKNpe#o<y>p8G<Kbb0=$Tw?$E@&_1`ch5
zCosvli(AaM`4i?NxNBiA=toS)Y3>uEiU>svk80nQ02mD$$ZHjjoa)d{`Lqwx!%|m%
zXsxcA`B+b-f|5V%LR8ZoMr|yLuLwIsig%mVBS@EJkYd_1XTL2`M0Apgrr-@^I`3V_
z)zuy@ECk~J<-b8RTgF>#ke+&N;k4XcEq8zxn55V}%jqSQnurd{^pw(1fBgmv?FB5S
zML%vZJDD=Nl)GEY6or~LAkdf3A%%x4#{~7iYrvA07}K;*7=Dn<b{*J}xWTTzF*UP?
zYve)nf}6(Tj+6RES74+iMl)^9NM_d~gW#j`uK0|y+5Ve(J}(GcL*&Cv>j2v4kg?r_
zZ)c^uJiWq`iH^9&MwnSqYQ@wQ;5=Ll*Rpm;sr21zuDt_77YGJW@{vj`y!xrT3nbAW
zgxnVW6HfAMy?|4Bn`V+aI$@HP8{22-c^FXqn?dxQtezkCDW7<tGp>}<FJ7R^3@E6l
ze?r!KJo#eNX8`U{btUOK)hm~U^YHg)Fbc!(n==V=%P)?U!!4}cT_6GQboAwPO9bT*
zH^ltf$w5Z%J4nUv7Soez$(*hSw<2MlztFY;A)-CsV%Ga{LE+BrvfNrQ)e<uvLNYq=
z&HW4@CnmNpFUTTWW)E;kLj|~@?Cv~=PidZ&cX2DO?fML|%wGUcp~AFw$zK?K&%N{?
zk2M=~)w-MQNG9IJjZw3inj8Ja0YOOl5I)#l{*`G30<C@)Y4ZXZm5#6_f+Enhj<zkU
zKjsQ)i{xZ>iBAEQHS~7A`)~*p7PiGl-`|#6Npf=GVw7C5U+4mk`r~$H{UGkl1^(hk
zbZsxKaAVfR4z~*7q5KO=US;EwVAISoEj0WAic=0t?0lC7z})1*htU#~n?B56um{h)
zfzDTi{rE^LyTU^M@kEV5s)C~RO68y{NH30lJ9fb0#M-LTRnw4Czh*9bGSYt(`D_qv
zCE1h_MvGk?TD%<9X2aAYI&c!Hc%tArLWkgnFJMm^Pt+IpBkl%uWq;(d4!o%74^r!%
zesZSd^xWNJHkoe(FP)>Ep+5fXSK0t+_S{}Z-^kl)vbD!IItsT6kA4Tm1=%w>(;}oS
zW|Tdbw|o@)Y#?7#a=I*^=-5N*kLp?08H~R2v;-U@uNRJ^J%m(d6FbEG7M=&e9*J;}
zo75Y~fzPyiX-U7N=3L2Ay2x2c;11k8XwK>Yj#Wy}jB&i=Vo8uT>WL$SEiKvj>UKST
znB56z|Ls*;yW7{s1hG;rGxc;+gv1d}XqJ*V^7KBaUG`jYHL+OdmP79{V8FL9h!Xr8
z6vvfDNV{YfM9(%Z_j-sW5J{NWS)XOMsG0@N!5$FE{wRM3U&<a8&|=4_6dhPWGQBzd
zw9$&l^84KW#B{?le9NTbn{nD!&^DHD`15gt{4jpUyT)=0jK*?A-{<Nt^gdTRG8a@%
zb0yRiOeat33nPWl%xx?e>JD6m=(g?#2~%a;Y+mxUcQ<+92$LSOHmm1+%X+wcZ7n2z
zQQP3{s>U(u>Bb2Bk$q6^o92e&iYEzCS3tq7<$*#KOEjo_4nO{WM*qY?XOAPrE_7{g
zba7*;B~5c}+5=UfqF<N24;7y0tTcOJ5S+&Yu9SW~u6a50h4Gq`cIJW{He@BkI&Uc8
zjWO=iJ%ixt;yd_q_V8CNBm0z!)hbB6qZIPY(lsIEhye0JrL4Zj!Bf%^rnv~x)uTw^
zWzFyB!4wvFP|52-ku$!MJ!H?Y-i~*J2^N?-(<U~F^%l9c7U33XpHf3jbk^_vnTDY7
zk+P_*N$~SV(L{X_zc)h2fIx%b-^DKYYW5)g7Q1~)UF=ZVMV!h^Orc@_;|kYdi5>68
z9>X`lDaundAPp(~>$dx$;+u4BJee|AfLe~<hxDGETRK{7LDvS#x2*kyr~NdMz83+C
z0Eq)>RAd!bJ)qCra$=tnD4Ixv&LZc6uV=q+H%!@%SnG40{-F7@-Q8;G`Uw6tlw{mT
z(a}QQG?7~e+xB^f{>Z^zFM(o1IzI!RqZSgRp9Bc=Y@+LxX(~bq$I6k(g}>baE35t<
zQ%~2UfdN-}hI1{nUkEQuAzGikpw9&PHT3dXMl?<O*mkX<BM%NfE$rZ7=83%su5!{f
zcIZ0Wta0j{2jrL;bw)p?Oc~vBbXyrCb7Z_9c#{5dJA%am^YJnKF)%4DLPnXY>lwYJ
zbm!XY+sf(nHFyNP_=`2^%t763uq&c}fjXa=9ewn}nC%E~(*;O!ozu-Y74u*uappLq
zpR@%g62J<w)VJg5m5DG-M2M^6SV3KN{A49;q584=a{6_I!AEOc%#mc%^jDY7UW3Ca
zx~~|jcm^K$o5mwDc7ak=kI3B1ZA2`lWi{1Rs6N$>)@5psKE!iFrtrm|PL4602mBNY
z;rz$&uGv}`tr}^nmVOOk@I)GXOm_?Y*XIOvPzJ26%9S?EQ?yu_&ivS*LGg91==UPn
zV2~;DF(l}WejSg13@zMAcr1gIV)hy@Ie`tNwT1DSh`2p?417O#p)rH5k<t8R|Czm@
z?pnM`OupgR*5)(Alx>LQJWC28X`ih8@QyYRdkd!BwT^FX+6%Ua36*|OmUpOoS$AO}
z2M|dZL<MBOxQZ0Z(3u~e0{5>2T|MXO!HsF71w}r4gyrjGBkZZ_4x~mCVGs!F@CQiG
za?+}g0$bUxH}N?TVhs8E_Hz1FMBZL3uF(UX$uo8n`2UotcKDv^t#0){EsilayG=i?
z1#v#UT+B&()bb5GjNgXH{S^Yg))HX_1tzxxaT`d3_J(Bqcxn0?k#S@NsCTlH=nsGm
zpcwc_?g`!-^GAzM)0tldvT-_aVh~W|l@ptZh{uEe38Uec+YokWP-oNxE~e1?m}aWs
zRLDT;`q`fcw2bUVw8H{`mQTE7UlBf{!N}JgX%TYDUp({>McP3I(W8=UwLgK&A>sO&
zZm`oCBTy_#XKo^5ftmImYFBA_rOTelg_&-H->9AgHcK7Rc?}f9ZnbjSKSx_Je!7&_
z!h88oOV>e%ZiCMC6-V8#O4}!|Jefp4thWupjouAKl~p@FH3%l=_o17GIK&b<4k7GQ
zG=ObW#P4?p<OQNNM1U@ZT)PcasHyERQYy)AcJF!%X($-d3lT30GYvyzBuZv_l9MaG
zg8H$$pzDg@Na^{Yw|M3WgP#aK5N>EEeNuKxlL9Wx@<Hq`^f#fcsx2pWBR;hWBZb2U
zOjr`r%R%Nn`u9u7I%HSTbJGw+Mydh`d7H@L_xr5l@jIW^wsfeNm(JWM7*OMEToe$v
zN207Isa|vAp)_Gk(gY<rrQ&X_%>**>rI9pG)|bQqMGXZXeY1v}YLhXo|LYkvgC7t6
z3EXg(W1Twj_fP2W;3E`**AR%6WPRM&U5j-<;0Y%9Xl|FrFn%kdkhB+yO1&%zs`h+L
z0ts3Q-m{vXB3nw+-c*ooft723_!ClL>8@Zg2c44tno%GPr$R5;N{U~a1|r@8%LLS&
zawnF)-nkFF-c)BmFs>VgWN=_o@CNmHc((X$UpFuu%#nSSs>7JAh~w+FL`T&otzBUW
z0}_=GMHkmVVJM$rVnB()<#c5Ps6a`x@dch_G`Y+yJyBl(adh1ZoA4YgFkG5|1!%gr
zXB~RGj(!jy!Shft6P;4<y7?OMhbq|2uwwsyB8_B1Fq@)$gsDFw^v`-m9@2g)4&D4y
zBz?UdIoxu1?^eWtwLK)h5`-gGCYrg2Da;7e#!rQ`pTN$?hR9mC$H68pejdTmChF;m
zh-&5a6;W&9g#ce(^>hV9^`AxFZKC}&rndPf=K&HuqQ}_e^1mPPm2`u6imoS_PDyf|
zsuHZ?>8Um?c3{GFN~F?Wv0ar{2sQOWgsv}}L{5aX5KB|qo&$7B;Qc1eMCV%S$0Fvy
zXXohVo&ws~WG)m#FSot`i7WVW8u3+dtl`-P%k8i_gSy8rk`N+RF3i*o5gM>g$gvh!
z6`?>2^qH>jy9IrSX)e#h#UunjsALKD&bBUB{aCuW`>G%5=Ki2D_NyKaKoHK+EUwS`
zFyi7*(glQ>cc`f=A~a+j_BbA5qw@wI4QilMQdq~f7>I7{mbu<1G$nYp)@`C1PD1$P
zMVLAxGMLw9{OJ#A(Jf5?rKI<hUt<V8v#$%~lpmYsM>@KnvTLA}`W`|dblwxnp2c*f
z3Tsm5UpXn9robEuvV><m>HV<lLxU?#^keC(3r`di5$0m+W8)_ip(eV1><d!|M8^6u
z-!;!g0MY0hH5!JQ5MBe7q`*7w7bAR~DLtpbi$CgDn3=8xuv!AqDJF%S-7`G%c;{*t
z>{|z3SA3J#=VQ2BC|ul*FfaLG(DhqAN%bRkr73O22vl5b0*a5_%|8NAO{FXKna}j(
z=iz%#HEUe41g#x0GK)u*+H{6rG9eiIt4Nw!GK$Ir(<RPSK5$ei0&*fTspOeRr$jfO
zS#T<$fT-HYYXBa7x#^E7><o21T-=Dj4TqdrvTS$aXn92tqo<aWD)aB$D^FWpavEE)
z15@;j<t>UUHEIlFm~b9<vDjtFvbqtMm=%NCGX2G6zSW^s!qn=EY2Upwde3{aaXm*9
zq%b$Wju{vqT(rO>9gY^rBrC48_xd(~rGC#W)1og2M%H^ud4WD`sApx_b@;`v;_kL?
z!W;oC{jCo3uUD&gUel7dy8`Q)=&itRciOxQKO-#oU2&E3eZgZZb35nJU^uwaZ)l(V
z)O?RD4l#cMtaY}0n0bpJIJ%uSk1okva9X_}lkh-LIydLs_HvTSP)^k|JfFfUXOa=@
z3!W^`ib|KtdD^^cfp!`UIp9`ov@y;)vO)2eafD{xx49}lS!cUfC&vl%>Av%PtAlrw
zJRgBq(p{L9WIxOFgpU0gpT8R{$42bF{^I%jmlfB=k&BR}Z4nPOW11_Ii{K@?Ea30Z
zlt}B>VX&+y!Weg%f;$VceQfxV;AW$@P>5AL<VSDV3>UrR92azq?$}UU<uC9ed%d}s
zFH!Mu#)#_hUMBmgv&hxpL^+PswBQO*OIQhK3clju)s#T%@OoxDy`%>hwA!uB`vhqb
z?<J8bL!aphUa^jw0R3-E6HU<HpD~;~6QE2kIXUp&9WQbcXg-q#Wea#3H+^Sh>rG>g
zbTRWf=3%yn#1f<03zJ#RJ02K-;?~9Bs~M}^YQ9&@TV;nSjP{dfk*%ibCoS+>GKr!f
zbDwr@W0#c<H8m^UrxgU^HrAl-{9_o@6=(P3Y>C~|Sypm>;#m^Lrkn&aGr=8E;hYxN
zmfOdcrTyh+6ZJVWfHl~*0ZkbIYc4oZ{K*fz3%|T;1JJ#Y7Cw$n@S#)(I@!l?7(Wu^
z3zLE0&cI3gUAYxK2kg*aAfR~DLiiS0pk*h`fmZGY1#LAgY%&62@JfWCH)ckd@orIs
zDXLV|0(0mwd|Y1k{_<=~ET~Zha**#|7!KKPe=fmRLhd5&8AGPwLjwokTHlzM@n+JU
z*7Y=@140B4(|Zgf!3rNSxA5)l1oh>>?~3Za;%#V7$SD4ab!j<zuLWKYT!{68lAJb-
zgYqAk7!(%xmus#;CO8F$ozNvE3;gy>;&E_$=&ZVsy=8jra{6(l!vuq91Ja6lhi!cG
zYh=F5zdk3IQT`rPEztIBfg(uZRzl)Y>yBaj(+fL=)r&WB0YqrITu1?=5k=Y4$NygU
zWnTkxBKNQa<I#$}P&l&3@I}_hol`vIw6PuQD=^V$61(=*YnW}v6)&;k4~WE%ph&^#
z!o*NZaPRW9$a`aYWpE5!w)IB=HL=@%?a5K(EK~Hn$U`0oL#wfWyc`XIOTx+%!&*D)
zfz6LY;BNs(ku2tPY{H=H)>90vqWeZCS6Zh9HP1_Q=rHh-{H$r0_5}FEQRE9T@HHrC
z7nBOvx}Wo)Iqypl>)6Zq(ZlnjU5!Ck6s}8~0rcDdq6?%|{poiwW+j)^6SzEtC%qF>
zR%gOh*dgxdX_wD$3{sVGpTHsMwp{p1UTK0&%gDCsT|OYkaxp5GLzVUorufrhN^7(N
zp87dZhe}aQd<bkOz0glf%Ew}?MkcTomIiU<e?j@VFYw9!{@KIpUf1et3to)G2wtt+
z1LkY}LQ93Cv3n_rg{~Jd{TSG_qP=%;nwqjti~zBuxR&E+-(vbB5&c>%eETC^1dAj5
zuFzGH5+sn_+PYwAw?eivg6|5f3x)C&a)F*+r&~S!FuxA%Hcv;lm;(h6e{^XKd>dhX
zb)i3At(2B>u!;thC<nvE=LbbDaY8$2HS1|Y02X#_Ox@SQywYU&C4<$D=@%7NDaTVx
zrw$=!A6b7KK_M5sn$8Gs5c4Q7HK)Y;;%C&iWPzKp>?bL&K$Uo%>^=B#IoA!e?z!AK
zvK;2WjaC35gmFJq7`|jA!w1|igB6v)#;*g1yr{7nBRgHr2>#U^kE65!Y>6H0p+b4!
zQz-pyzAvOi-7dO2n}qA<e{G_D1?&$$Po^g-o)+)L&&X_XVb}+`X&z6<wQcJ?Y^A7;
z`h2eN8}DDBv|4IgX|52+BnC+eRs~sc&HIVlOaq7KN@iBG-AYQF4-Ul*F_yjHU|?ao
zi6rpf-dU0nU3#l(KR5Hi`+^L6cI@V7nHT+R+?gp!l$TQRcJViuv`FNvS}YOs`j8yM
zN4cYq(T8>PmY0jJTtPpQho_@sNGaUMIBL*)vSf~CalM{b_Nq58P`p+0#7{vQd^OKp
zn{qTrJX`767P&Tw8;Y)3#0NOmCpeXx3SW88M2^vu_1V7)$KoW%brrfWp%dFDx4pCO
z1|OZ06oBpvLSe7nO4@kOMw05>@Mf2kVvVzis|h5pDgjY_u`+LlJm2a^$J(v%+fY0l
zsNf&o>GHS4;aOt3z&rgTDC{w^?%4UqGgC#kC^5^+^&2SW&l`JvHBV{6n_W;!Kbhru
zAnrhq3?<g2n=`dLyE7VmTr(;ZJ|6~GvvNn;JPWQ1%i9S)rk&)%w&kP=_P`8X`dcz?
z=jDw~jatNbrq-o|<?UM*4#&duvM(2Z`VN!$gOE<dLW8SF?yxmjjjAQhypoak0Jws-
z>;hJqRm+CO7Wn<X)G^*kAJOOV5i86!D~YKxra_ctpG$%$1xGDL<=1?1^L}WQ<2lfI
z$0K@!Cb7P^*toAudXYQW#QEoOX({1;c1r2<rUf#;=_SRC{?6G{sD-a$sr0IigD;yf
zp?G{eDVaULx98uYtR#@YmsFLJ%$JZt7wpYrGR1Pt<V!;jX2~pB@C%#9pZFOEOZ^f$
z3|*}zy{krB{XRi<zCTH5@u46tOjVPLBGOpzIxMHyH0<7B=QBbp@45XWvg8g{@uRQS
zaN-t;nYT|1S7LLy5u@8B_y<=1Z!sc0v*q%oMLhk^T44wx9sN;&QFxWcnsbZdv6?2a
z!OerqA3<tMdk8U|$NZWm$^=e&|G~h^xS)V_YX5*5EV40k1fh*rdjF6HS)Wz>B!pv?
zs_^V}qIdOZCS8i{4sgSqotvxvBb=y(aBB7EbG|J;1BkNIb)*!+&NCIn?=3Js?-r#Y
zOSPvytRnT&O!yyWWX&jO=-UhrFA~!anj3&m4Rxe;2z)T$TP!dZ5i`WL%~~c+U69R1
zUsy*)!YV9jHYb3!(p_s2LvK(m1~DfY#CF&A2Yn$#r0wHORTyD$I|YS^@a<otJtdY{
z#kqgLj{N@qDMGtX7h<1FJ;{H$eo;GRU-}&{!-4|ZnDJ$40jSAS%-QKL1&8C=@Kvlo
zuybM55vGh#8>Bv*STv;Wq#mgMa8c}tQ6UE(a#hc!uWz^8aVdW2>K1E?D|s?(E6`5$
znP4{TO7e0Fo&6!ty9eq?G0XK{I_lj}MN<p>>tr~zqAUqgu{AiJ!%V!K?%$M==|B<M
zc91ja-GGcp_yyZ%7o<cC4Q7l5HyavXF0X5Wrw)aGU*Y@FMC#K>I&uhNQMRU}6Z?eN
ztt3uUSbz!*6*{ere41_e#-htNc-C-1<D~bM{kwb@zutM!g;N;mO8()8ljMiWfWkwH
zx7c{|7VcB+m@=MYkouIc8&5F4rL|G~3kC&-ra7KJnRBy=*4mh$e<SQ@BeK^<xFNZd
z4A_i0_bpDlqwRxDa|(zxq|ec{EY)cGESZy8T;CRSy=F=qe2bvv=XALK82Hh0J#&`l
zs3DJJ`6Y;X(NPFWSLu>dLvn}0H^AE4XNmF5j)V@M3dG&1CQ^#bHv)?@KSVETB7e7;
zgcgEQ@6w3OVzBKH4Z5cpfX>4GN@&kvD~ukW!-uJ_sR6waX)(72mR8PxBkMXUA-Nya
zqCee72|;1$C1^IjJo7%6{<z1u?(Qb<qgTpAOhi7AOXFY|iwt?KD?j6;rG(s3O_Ips
znqN@!nk%i)BBpbeY73ySoOMoxE)$+k9}}U0ODatJQq$T|Sj^e?TWbESb$;P@GIh?s
zILY4lnK4H=tcNX$oi|6;Y3OS~8OJm%VxO%kCQCIb11R|@GkKEUEB022A;M_Dieh45
zmj1zjO%hkMvpWIIz;ZBPUn;?sl%tbRhjLIt1_0Y(S<=C)m@(@`*56?cCEy4rzE9H!
z;l@w}p6ZW8Dio)_#=#9ju@h|Rp)ivb#sEkJwIP5=zx9)XRiBGhJPrq{Y;Xr1;Jg70
zO754(ELlW99BU9xrIGNJS1E(?kZQ-6fiwg{FmPMFW<*2FpuqD>9IUVb&4ubuMchkG
z&oMjUhyRsDRDZmqPQcA62atH3dEW|waSPP?mUnPI(gqn|P#{zPfIPgq#9)Q@!<hmG
z;7e|W@ORD!QBN>tNG0J+yJLFxbZp6&;j0_ek1?#jb|7#=%J5Bi)m@|BY0K(#qYX!)
zkn)M(--5dO;eQr3RS69D97G*qxGf%wi<nh<if(D?l;4m#kHv86u6rz!qN<vM;qa8m
z!|PXn@S9xR!1H@9*c~qHr_LCWJGT8aS3qGCmXl1gJDr_5Hb^qqSt>^lwpDcmrxnJ^
z3UhItp0jxB{x2Enc(cQPJF;X>XUPbzN%`x=!DK4`mrxq#arL4QXT1K`sNe3(<KZxS
z*qU5-`J&kbcg`nK?HF#KF2sRDY83fL+A4MfLcZ5~`N!h@fCUV<m6288Pj!vuUVP{f
z!I{Nti+i`^2|$(tP@mA6-WHqXsIo6C$1QKC`w<FfhQgCzp3I58S+h3e>koVs(Iv_V
zDJ#rLD~vb5eB74L+&oJQAHcrgowB@uI2g7u1gKokEU|1W7N{H+@vNF;P)(X!6VU!~
z*N8OD&emDH8K0j}mdw5^8HKgQGP-Md9Xwwt&GhXrLcc`V80TJ5&)pj}Bc`*K?nUwJ
zK=JUQc=n-!w|Li`47HM9MlQm1d4m5|aQ&WE4)g9qK>j5WHh&Sdl2D)UBKtGcjN{F?
z{myKf_3+%FEIEuJdz{eh<A7+~geXVv4q5}Smk0c0H;uS7r{s0$^C)n6n0`LPJ$s0I
z7P2Po?A_M%(}%DNY19++w_p9vHJi*@_)W6U?3}xQa-WTUu4qXvA)n}4^ka2=gBCA(
z-G~>q9Vuz`F+m6|#mV2U{{?)l%vDus*W^r%GBdcXah=ds615Zg)NA)@hKT7q%pZKS
z!Dp(9@%W7A_YQ^ZT;<syit>`4*U1|_W_Yu`rTeWYVZG@tH&*RNvX}X!Ovy+7@c8=U
z*qo}})a8Wb6htN1S4>7jE!*`p|42ssE<W3k!=sCr7xn0#o=0-qI2#+S8jeUG+CW5o
z@;=r4OB!E}*`Cs)R`~gt3*ULOOZvh#$Z(9%&U>Ykf~VST+5ZriMuL_V>%L?t$28-6
zojlP?Vl{u{;Ki?~Bx3xw?=e}<(o+|aB`n<{pEUIOxP7SQb7s%i<Sq<8TIq`pIby%4
zMb>8!XGJ;0R6AR9T4|KU>ULKBo$(Z*h4*SF^(FPhmi+;s#){h6r5p9H-nvN}|Ngt?
zr*0*!yqcXeJiw;wSYfPV__2-@4VKm{wg<M~HkMW!_S>u17zn>7LPdQ>cefNYlF1zz
zyMHB4TPl15qpA>M*|sR3HXnI}P#Daj6aGe$zh@w;Ut)s^E=7xpRCi_I%Dkc%--qfF
z7cp_j^v`c)3f`D!`;-)U@<C%yju}g-ffdHGpJ}k2`<2v&RB-e!_uOJT`on91K!xb`
z2jNT)<of4RDhF8BR0UUp<})vipUq+B7@G{_nHPlgugvoDvMsAD2G?<~&r$DtQEeqr
z{@v|ypg4@?XR|yTZX_1vj!KC-t*bO3ZH+3hs*jWSY)kg}HG`e0l_2UOnBGR^e&w{Z
zW5Y5%nF^#n{z4QcrZbq!0VsJpJbYhBk9qtRm!o1isvPa6w@P;VO;(d47MTWFX#j@)
z0T>G)Uf3SYR?_Tq7||C7iwv>U+m+oJz0`Eaena)G!ExjA`^ksY5k#aP&QaRQ+>xj}
z_+f~7gCs8o=*a>PE18Mu^yXW#7Gg%22GcZ5{_>>WjcB=jyl6U_3Lzrz;RrTG3ny1)
zhJp`l2ph-XpB}PgeL8VQ6t=0eX3E$$=`X>oB(_iIQzO5~j)T47IN}38)FUIY<k64f
z(cHwD7lY}<``h0lL#477MEaNpwO<_=zdgD<yFQKk>IGY$7GB*swM7ZU6=h_}K#pD9
z_YJlIw<2*qf~Ec?&1S8&yBSN0yM52|?#taU=SLgai1Fw#pRYcQh}KY;C!ni3*eiN=
zb#X&-o=mfmuS>X@*_CYZv#lm+IuJ{Lcyq_~RSs|~DkD`d(rkPDIX)n6DQt=@>rfU~
zYxV(L(>AXofTdn9(^=X@73m}{GJfOanbtUg3&mG9Y=E4ZEgR&qsJ=Kyzb6ciy2AZD
zN>V&`d0aAVLkpUE6k%R{SL$#NK15NR9aUW8Lhm}XnVc_vNBxppio?$MC-0WOf7BXp
z+c@)i<*ls_cGl6jn}5R?@k@&9&%{%knLh|Zxsj6MJ!ZXS9(_~bob$)d7Xxi7eUmQM
z11l_)>RM6uK`ixGM~q@wm=13A*}Z(#%e<kZCnrQ+`~a%B;pXhc*2;lO%-pBH!rq)q
zq_-n<0uMq6%6<LZ!;Ri`b`!QwW@4z-Z=l(n5IJ!k0Kwv3KpF2))Q0$R4BL^zB=lEX
z6sAh=SW%w!erH#;HzrJ4u1k5Wi!ZzSOoI;jy@XcDyvkxVeQOvzxN2Y5{>vjGXo9@4
zyI%hQcI#A+g^P=M^t_?4>{Fv+dt|nApG%Op&;~s|a1t-r#hBjWb1S9K@_c1$Ib|2H
zYPPX&$6p!u`6&Ns@b`sA;iGh@;yQPUg2fV5hfM_iD3(*zeh~W}+eXJ%O)~kA-^!h>
zr1Bp<*w%WyTkj#id;<HF2&Ay%`5&j^D4ayRZ|9=`D-8N^T2W#Wdz)tNnvgu(HjDCt
zsn_j>rtzE*>7R_K;v~YUrRXuY>j!h4J??Mp1j!0E!=!2-pjW4ui}*oKNrJ1B%k1Bk
zo|F_18BHgu9-O!jvgpn<$GhFTthiwjDu9!Gr=dY>y;(BUN#kI?^L%B<UmV+W>$e1w
zhI9XP*u~k*ZQz~GxgioR*f{y3!H2<h*SBX8m3~ZB<mlCB4wPtZNVqX@c}=IM*vNe>
z?#jrh%iJ$Qy7G$7|84Hc@b|dL=M#@DqSFHB&OW_iqW9kKF05Nosq4P&XW+;Q0!Q$a
zPm=tb`WM;6vjGd{(mtCc_g*FdVP?zcQ2OfP>~rl#^o@#;W}0nO-*C<ty=G;}bdr2M
z&d1N6sz%2r-WVpGXkERvnTRzjaq^{ueVk-V7WWItsMmLO&UR(|XAgxAUi0bCl><ka
zQC*8>Y+2toE##INIwT{1PJ8h({Yof&Q==@7k11l4CEy@y5rynUR}!!ZbiUPSf0GY}
zo3-;S;L!s>#9dj2=7v|CV##svUR0|8n!od{yOq~sdLoAE%p@lWF;*r*Zr?VK{gjRm
z=#=wL#lEErsYcf%SC}>3-9(-&Y&p{)yWH~S#dGw$Vesx&ra@VdpSdPHBV|rGA>zB*
z6!BG^2bXjfkJ2lI!Os`mCqitBHwjp;>8+4VY4`Wo7j&`J=rCLQX$Mu&RfP>1_<{vt
zn9tZMTZT&l&?U;(p2p4WX<0t+75Z|VjaapR;t4L|H84F^C7XZ`ui)gXYiIqbr<jTa
zA!c9YJHs=;@22^~VDsz(M-tx7S2*DZS)p*2XY*o`Yv(4iy9W|3Mf7=*g?7%p{4FgM
zh)ZkqTD=2y#($gqIF@`JSul$a5&y}F>WX)xpMF@jNx=pz>8IZTdzB~vdCfSQ`;11~
zZ)^g!vrfb^oV}tgpIPadtOBhbra{q7kY9|)_uLA}eh%#WlMBe%;culsFn{H?a;JBk
ze4{!wklM@$jLzbWz4=(qzg1W6Tr%}~`*L)asLDAJj2pv<tn|K>{O2@8`n$!V*>YUu
zt((yt0k|>zi-@$lo8--s6&(3)4J;@xc5dkogO?KwG5^sDqJ^MUeZ3W_h#xAS?-BlE
z`c5&A16^uSr|`HcUE|FvFvH$l%9dV<_`4OL=7Ok~PrzbC)qN8oI9~Ja(xtZLf5Ugg
z+J)q3FMq^Z(XCdKK)DLYgflg*8qKnH#2W0?Aiqa`5W|O@*o8pJzatO`^77+vW4cYv
zWYg31!(gtp(@A}q7V$#r72g(xG$q8Q<HKOD5jfob1VN;#y<7eMdHt1Fmfp#?tIyo0
zUT0M1|91>Iwa3gZ1iu@biq-Yswdqh%U#`lBX8Sbd4Wd5(V+7}FvV3Rlv=-TNI|DF8
z>n5M_0#|vZ=qs=NfX9366@UH>P^EMGIL~}$8YEz6-8K(kRzX^d`ZV*}C*J6D;druv
z=u=#!@zO{6PW9<{Dm&ws4MgdMpi|sH0$|@;d|LdwHV!%BSzOt`6}C<zbST6q@dw5n
zuSV-z;ptF3`%%H)=8#@FFKL$b_@@5TlltUd<a6MfUghWbkKe^;zx%c-yiq!uT}P@2
zehyK983wKj4OImN&lLIY+Q}C>%ugf=aqTK=4V7L(H~aUHCy~$iazYO8+KJ*hfZ}0a
zoBhDNnpe@wK0C7IHiipG)%E@WkP5+i-(%sPVhDTE-yEFHUlDyt_#LZF_77<%f7&{Q
z$8Fj2w3jp&FK_9s7lua8kV`1FVXHQulxfFz|1dZ*eAaB~JNTa%cx6VIy$@*-Zc{mJ
zd>3oJl@RVyf1R*VbetoNr28(66IFL_wNXHsn26@AcDiZOKjd8t1*#zF5no?l2Z0U>
z*(m9kS^uxQZ*?+>P6eyK50y_F3P2!4Q(BEiAY@!?Nmp}Q`1<Yd1P0#lI!M}%hf5Ub
zP$K-0k(C4j5&ilm277q<e52~B=6p=`?T(MKf5^{*P_p@e!V0dO7hP}D2?;UYSOEfY
zN4*{$6e06!g;#%%@|Cyg4yQ5`OrNc~>90jF0ACS)njWZPIldTI0W$*v&nla~#$>u&
zQHm*6!Z~=?T9o1`jtTKj#}L_(yCW#Me(G6JxF{E&MhV89Ez;BZ_T96G*8@}Qz;2+h
zZN`sy8%f;5P0nYM%hD3f3isnE1*n*D_b<i4|FBN_h*LnBiSj;eP0TBw$&ue>H#uu+
zwDP;+H#D%R*E<lr=?OR&3IB?Nb<SKdE%5v;JRaojEITEz7A`VhBacN^0Rij9{p%VC
z2IY7<EVaO0562*99o$;TY#lQJl!=*R!ql}dkG|(xduKQ`^5sh(xPE_auFgfG>VAaZ
zgBM}2u+c0(YegowT=?BsAmuqsO11qK<T^{cjsWuBIrOJvC`_5Brrx7RiS!tpvu-9y
zc+6J%M+vy`wtd6f?E+y|E6h4-OW6g4?ym3FK<Gpai;sw!V9!jPylb>t>&%JyN8WHO
z(rir2hPN6G0^EU_@czO(_}<+M4_mJ|ZR+HKjEzKRDXJ#fpHjGDy1UT#QK0S3+Ar3$
z>lfgKtT8GagX~DEd`xaaJ2#Ww7j7q4Yv|9ecuqfX3iz{z{U{(bL&9XKn`feM-Lbk|
zqz2OMAY^*5aj{lG$kbd**3N%qYb?p>iEMb3U7)}|&N@og_ef=}@?rpA9v1yRFrapF
z_Kfg9A<n-^$r2Xw$_C+FqRzcwqXNT5blv7jg`03`P6OM?O(es}bH6MB)#f9rNA`TP
z?%5-go%j0rAJwEo{O*s0DPiZDEv%i7>>0tB)5&?^^Za@ks_qAo!~W5BXSQLCu6#vs
z?v_2T(qgP`{RbUPkYY`XA2gm0fqC#Twk<kuyQq?av=ApSG(azFPC_F_&W<x@efFiA
z?zo;848_MVuf>Of?gP!qswELKbn=C1&EWt%NhJo{A+4JR(Cku6vVI&zXLLW8K_(P5
zj~Q>jw22E^$c|t4zVgl)=6GKH!Pj;FVMeU<rnwJ8716cJ6Zl&c;_3RUL8&MD?uP!8
zdf^aUn%Mo5DIJseTbL6+?O#?tyivP-({Mp(@$T{2UzM(RAEF8hEIVlzYim{wkj@H-
zrtMehy)3>#$Xqt*-%npwejDSk+k~4Bl8;eKHyyA%n%TF$@VoLRaow3E^V0<*5(^q1
z8Wk*bkL_L;{57EwUIy`-?_a}}yhRPW6b4IU8L9g8o2=LY5E~aMYfPRfyhSmrPJ}=u
zd9Y2a8EPPM!a-nkc<7GNd6OJZk)JJakZY@p-+!!{uw&%54vsU1Gu2eF+gw9`Tr<US
z6TgiCaxz{7&?>uqx*5#?*u;-eyLevLJpI`NZE#1iVNU0*Fc~H{yu}QQkpXkNGV=Dy
zhW#T@{|i`euLYayDp(_9Uc*$JO~E>CLD-p{3BfPmVU5u<^XfTRxf%!C2^08!JCDn3
z#xonoDqcYZjUpwp1~F>kDMp(XQAoQadw)r?G3}r+!}0VK85t*&QJEg8YZXDQ?*lf;
z*Xeq2Q8ik!>)_~utJ1RDIqKE_SnI)T&s$G0wkWK(?e&07@SAXBJxxV8oaFkQ!`e<o
z6UPP;;aK}6Ys$~HJHWp}4vHeH6Pt?O;Ru=C2H>i3LrVJJf@=f2r_B~w3$-`@+`52W
zktRRU@E48|<*bD(-GA<H{`?*T>tV7=Vm-j&{#<U%YUZY0CaVcuX5j^{MpiWkm^LB1
zitFxal3T^`68{6#i%?h(|KmyRk8IE0v&jXQ{%KWhH7TXwN2Eox2U7Mwd9R)2>G}lI
zjv~wb$ABj_q!hz$t<1)AkjUD#*k2i7w5EJtuFq~DJtY4JQefk8oITSd0f~K(yZuiq
zbPSN`)H6+Ipmb5;<t>|jH$+M;zP5P{kDbtS68a}%1J;x)|3s4~t6<l^bqC-?8UAUj
z0JH<dO*a@-O;Y~1as9s^w(@?t(q08wDEJQpF`8xm=ZFCf`_FmR&O)pEj|6O2`8WCQ
z29jA>|FzGKTZ+zAqv=rK`WA5f&>L9mOaHZeQZ_=2HOo*5nY-qb1m2|7iA(FIh41<w
zzsjbU&0NdWys#NY!W&pIVEDbZ2&aJQLE1G8&|4su+70N4PS@+P%pT66@RlsVYG8TQ
zBq6?2EalypNKWQ|E{;|9LUh0#d}=(uj#4$6{SR&lQSi8&*WM3->N?E%CYk4HcV_L1
z;4p|lY*RZ2^>_?f9x-4`Nxy(IC|030?xXE)!oxV9p=eb;MGxN28<A6nrmDBSJonsM
zsoMT;zVd9DdrJD{-~fPQ{)cciI?M3lUpN7{BhaP)HvX3gK(+p#iO}A$?huB;R`|!b
zeW7q_?7DCYKs7*!Hyn7LtT(uQVShE?zm32Q{I3upnhjV<I1Cp2XV-k&eJqix$e@1)
z@GtX3Xa^!z)Ybn_HZGVhZly<r?)ocg6j=~&LMSQ!|IVhhgD^4eIQPHI*M+Ec|ItbU
zB?1DVR+u1@ePDb2U&dl>OaJej|AX*KE8WXCdsKT^7k@Owig;55v8xMG!oCZpQ+0e)
z?@6uj*^9BP3lp~XM5lTZ&HY%n++Rn!u)eDw11{BG-Ck&7mhV0pLbpl{5AIpEPB0_<
zrZn+AT`3r99lwjcrKCvL7y8G}P_v2G*qir@p8Gaj_jcRo?15!IxX69dVs(3GhnT51
zBz{O}VNk5Z;Eb8TnT3l4N9us@=r^`=?|Y36pJmX8ivRIJ+TCKkr@E<_cgq=%D-Fbv
zH;H1tExfTeu+Z`>cyB1U?whF4ZEqsY;#Udaz2Tot=xC`HvF{A7>3{s#0e(D*%-@1w
z+~|h@-V%uGu5C?RjQqeGB>b_J@dyxEDV18s1kK?Gf<SXB>vl1CODOQ|dj3%9IszEY
zpWN#rFR@(-cz7U?yyi8j&;du%&*{ID{a+;GoSK*SBMO1q!-*IK4hYT1;9{H$r_SvR
z0xbJ4qyMjqFk>w#`~=zU<#1LbDLbk)-a69KsMvGPV9|QV720vfdk2U&=*1exnu+A}
z7=5UgfH<p$RO^&DQ#x4L%vL*^awM{70Vz38>QuIVfWQcpGEQ6&{65kyeUtL7fvm=J
zHn~Se&YRLdaE8ozN_;m>W&4|}n#=;Ol5$A{&BM;mUZuL$k@U2yq(3<E5Cl@gglQ^y
zzC3}TFD5pvG4eLc)7hI#K6#vnu<&%7Ks74>5&3(vZpcYcm{RQNaVG|T5Ne;bFe=#D
z75K?iaWxWP1XQ<_BSg6=kykhNN4J%0vrGt%&{BA%m^=a7gyfj@`hna<ggCKIcr}g3
z)Q-}8iPt*%Jd&>mZT6v?`Y209lm_8wh?#;u;Yx8TK~AyNr{h3`C$dKZ!_|>2#Y6C!
zy0$pLYCy9(W4t9x63HJ->)zqQ8%YpHlqWgVuDzOOo^H>~4NUi-Z6Xd)vNWZjCT;MP
zSK6C$rfy8Yfo7s=;)OHyTU>Sd4tq0O#-WPy&Z!qBcd+_mYl!@pX<@63*-@L+#F@7z
zopekvVl_B|`sk4gg>=Qf=Mv9p46;8g{T_TDR!(c`Ip!V;>-@UxA*r!9T@25>#hk_%
zoZQN2@ZD?q$?1EFtfCE(v0a03n_ar1rRY}ei=h3a+!Z?sc@5#3)SJ;rB%jTxcw+yA
z^p5-d@(*n&xkg&l$+8gNm7T{H<_{04@>_=}Hd?6QYo^YoK0Lp>mQ-=+mxk|*tapX+
zu7nR0xRr6O9)(sLMLVbTAccUEWiicArMMU@)o_vH)Fmtyw|p~4;5E+l?T~9!+|P-I
zrh3Nn+Jn#GrkJm7HL~8*nIv<B`OMMPX&bCZ{PNuyq#z0#(M;sSMp^|Y)E|Nr8yD2;
zyblsAx(@N53dwq_U7Vzl|JCOL`fwQR(VcWl#Xv}4x|*~khOe)*yLk_B%p<btp6C7D
z+eR3Gcoe+-=(rS-p>q6Y7+iv8^XQbd65Ja4RF&}(rmx?4@#-+YKTcF6g*)JZM2mO;
z&L>U2yZ2Y<2&}}#yU$(CBAKtf7G=^h6LR%|#PbQMu1Oxla5&bM?QWh&!xEaG?(o&s
z&YZTG?Qw75Am#Xi&j;-e{S<rCCtFmA^U)oYy-;In8?qgd2ztH4PRCgwIWrPW(>tyR
zKKNudQ|Y$T4YjQ9^|owpD@14ARBNz&LE8+SW|{g5<`gFS&j0Kd5874mq=^(jynk@4
z`xe^{^LAcesu4L{=@zB=C2{dN;GJ27>}tI0+zBJ9vd$#R<fn+#KwsJ=rDnPI`E)1z
zr?VY3r0jU<i<rKNZ92I3Ni(>WlAx6%*#=GcDn@Z5w$+dFE0)cM92bQk&Lr1BQe|%w
zF@Ec`o;T8t&FSf+p_eh@48<O~<9W=-(OYSuu#|OAa^85u1#;Mfe2^pk?!u8OIxdB%
zZ?j&MurF6af1|JxQS*G!Wka~O?R%{xw9EU^{DfCdIjTP1lwm>YqV^~*23`tj1e{W$
zM+I|amh<j1>J1_VYFdbW;*^3y>dbVtZqGeQmuKe#&Dam};(qzBs}}f<P%uAsw4cg0
zbk(UCAU8AwlRi8PC<^D7$>KWp%WCUI%5VSf+ltb~`T5tPSGe62ryrwIJs=BNhviZ2
zae><-g1<nLtzZ_{<6)cPc|Hnx!5)h%Ft}82#2If*`DHknT|4ky^}WoFhnH~d2f)l>
zu##Me=`mL7_r+GqOHwq3UCf}W77goBNRFI!mR&|i^38)kR-+Rh<Cx;E7wMYl33tse
z7*F0fYe%klbAv}1(i78j@-{4RO`TVYyb+v7>)Oh{tL99D1_&i)3IvVW`@3`E;;ryg
zTlni5)Ff<(QOy~Lw*C@W$Fr}mCxw+#*RY2gOu7*G>Cok;IHW05(A~|sqD%R#J9_ik
z<Mr7s+^Nu*A<TW|Hn(aD+lMDPk1%t%b`xwo@eQ%{>k99$G{|?L@lyGDq|hZRiCv#B
zknt%_xlNq~ZX%MT)`@YA&)Ewqi%kYSqY8op%y)()+(ZSp1F8x_{u2tV-AL#BLR?qs
z6n%l~0q^AEuc*{jRXL*972>O=6Jy2~57C%B&$jjIylF+{{Ma$C_gGgW>%2CSQ74X|
z9eX=d7H>oOm?QR1%2d9U*EN!E9dfBDS__e!622_UfZ_aR1Ua!d9pPncAO$fjz-Pl$
zR(E?=T-;Tzw2pH79`ZK+FV;7f?NarA2l5MKFG%{Qn7(P(QS0^EdgLBI@E?x-`oa9*
zMJdCs)}24@GdSiNp&q^6x?2>2^%1C3Vyn?#W_RJX-kVsb*cNRwx`Z2%{@<^eSvei<
zf5QJcYvEkri7&!m;x&GGJx=i~YZu=NUIsm>M)MzpyJ~xO-xL>icKsfG+v{~eEs5iU
zUJsT(EMi5o4|HB2Ymg@c;=<s|>?jt7>5E?8>HBSdN<PoaCpW5n+}7@&CG*f0c1x>Z
zj;x&BbtOXuB%f=S+p=vv6le>-JWD^z|1#=(%I!V4`&JY|@ROci9iNK!Ja1e|%$d(z
zpF`K+KA1cTfV`BWpKW|dwJg*hPld>r9^*94@gzJ!dN|pe?eq5bt&i7He*8-93N-fG
z|NG_sFLodI;^?g~Tv8{Hm5J4|HK1c~(AI$Ujt|Z{B5?~he|Af2-u$E#%FVfKL+ja{
zT#+n4QkA?sCzGD<%zk4X1%}Ydh9`RCJAYK-seL01dCtvV$k-3sFg#Eybk#bgHo7bX
zuPRh~agAj^yZX%V%v2+KNICX!YoH$ftXR6d|2R(5rZy{s!$bJ}xPZYfhBe4TvZcAY
z5r|~ZeI12vDa%`>_Rku`esKbIwNSZfT#>}==U?xqrU(-+>^=+(4$$C<(Qn-38_Vsb
zfYS+%j@cf0jzu>y$9IfKFnyq&)m{LU>#RArvd)mXm$hF!gWn&>W8T*FpktyaJiiI2
zpmFPyi*+{d4fUQ2y6}ktE^vULG0&YM{_?QW@t^~F!4E{gESTPEvP8xv-q9<uIX0!K
zP3y}yjCKb%^+htB+n(c?yw$DqNiTZ=Y}>9MNR+}&jg_p0<B2NxxA$Y(W_RgP9tGb3
zi7~;Gn)`D78$+!mel}Mf)5BNn{Gp;8GzvapiO<Dp-rN)UQm9Tf8VtB2;eA35Dw*%e
z39xV0WMxegz5hT0#WEMJt7p_uDu3DD=fZ%i<$g0%bUPy!N|qm%A5HOWcoZ}dh^usm
zlJ7_fIKCEu=$xK^Gjy&%GdcDdFNTff&A@O>mQ1D`KGr9ulQs!R1v+KAxZ*yxI;x4J
zCwNEb>dE4^M7IcXvY45Wg`qtV=`#=&TahgNW*FoZRl3i<if&B9#vZ9bmxkx05Ivd3
zqPfXc1$8?5UNxlh6yjZUlRCQR!dH0WG3ecun_m@^WDpMf@d3tDz-qOPrX-f`fT*=*
zYKqp|mD9;sw)6UBd|6z54w}!4COmy<#1CsPLccnY=a#nHPF2eUBpkLH()W+Gwq&-J
zm8gxCw!jk)0dS*PUJ*_Cm}3ByfVLD*+uXeFVk2@@VU?=BRuic$O|S3@8Kq_)RxF#2
zvSITHh4(uRMXY2CISqLN$>C3ZNjaVi7*^v@({Y>S^8FfAbepI+OI>2MRLpsF><)tx
zE&^?gQ{qV{+P!V*of@!&U!Jqi3-cSm6b+;{<V;$M&d^Y3_v|j1n|dmM%}S#3Op$8L
zqI7RKTxz98Ht4?n7U<sCpd{O(h-N)$CWUyzx!7x)58L(PIH;En2*j0FF-xO1fciRz
z^<hiVnIlp`d2hPm)-2DkAHu;47Uiv%C%hh$UQ$CZZL3B<wOLV_tt|r=qFj-`Z@B1@
z<>+(6eh7NGHI-o-%OccJ#h1q&OX{vS3FT`syZOMpIY&!5bt>H!z>~Rzz~`+rUX-2<
zF<so>XBwQ+-2bV+P)D}gBi~XRnKXOKvb-%u<q42(t(*XnDOIGU+~i7pMH{#Tmk_VX
z_MJUbEzfm|KG!*AIgdr<s+YT+I#Spj>gkj|HH=mI=sxoK4j{lteyZ;;pTW1^{f_aL
zOi9!hABc)O*8M}0x}6MOS!zz4sr;BMAI!k{4N3uKB0v;m?OGOriha+LuFxHV{Ezui
zB*7R7FwOhr>Z=i=Q5oa=V`0v15x?gG2e<jC<c$C)$ddClNP_7u70lT~1(*2#+hV*9
z4#r%`BSigba7bIc<j55bAJbG-I8Z{idfsy(BUt(f5cTe_-K>4IOMm}K1r0~`P&KF}
z(I8ys(<#0vcv!>$J8L_9bJVPtzj<7s(~%vdEbn)6ugl4#C1RN8^h@gFj?|Yr7~3g&
z#y5W#c~(z4^eTZ{9&dBF!lrx*j(h}UQc{+kFGR-qIb3Q00GeEV?e7&j2-p+L;i#$*
z9fpejReON);MgE@G7tgz4&E=-2T;+kthGne+MlBALvTzgo)O*m;P9JZ*C@(&m?0kN
z%aZw=NJ&AD3I}=F`mj0AWmEZ8D#3HdE3d0Q+${GQ1iaC_r!jKXWJtPso-N*~?BGlI
znCKR5xK%+UaY3G;&VRq$!f1z7XtC#ttL(8@T%$$=3VZwZKtU%jisfnePeFbio1fkJ
zYG+C+MVL<?fm+{+o^r^oQF#LdAwA#0`Foinn(z6}gDV{*>kG)C!>zcxw70NKD)Z7`
zlWm>{0%t=f;xpT=wxNgYV1a`CcilR6UY-F$8v?cg7wwoN_Y#$R$kqUWv{e-RZ1FXa
z!ToC8Y3HngE~q)y=m$p`gPhCoCEZiDv|ltGlk*&$b)N63Yq>M`0M~exfFgfdLpHRZ
z{G=7^s4ajtZ8+yyoaWTsipdi@9o44x(C3Ocs^4yEx9Tc(1T%pvV$rpkw%VHNy-@&r
zD{Q+f{z%?A8_b(Cb@Erpwh4eZxgy;fE*7XPRz7fosF8)pH0hvo)A|zQqcSB9WH4=6
zj$zD>x!@)yuFm?3iSf8;93abT;|%F#m6{J@M4DL*m@5YUM4QVmo5M|i<}6Uj-wh69
zt^&r{G7Yx7HTZPAxPs0qO8lUNQT;UOIiaqDE50#IDsk1MnYZ6Y_m<riU);zA07tg8
zn8PSI=H^e{1ev{YF0uW;B4JxiT-p)QO9TOUT)>^rP|fuw>I+ySM<|S3eC;YjZ(JOB
zo5^L!mdR15qN|WQt?)~pH6||h$PuyiF_EU&A?G)-?R!*^Ly3=ZpJ*u;Oa~LCGl}29
z&Uwel(KXtX`~nW_PLX!Gua<pLQCb(~{-9qneR+}JDga1~07^a&q=2yGdAuIHbl3^7
zJWw;>wn^moV?bOC$WFlOrvNqclt7WkR%c`+pI<-<kB~l!0nI5@dvgNmWoSI!E!c1(
zHx1G+w8D4EcQ?cFcO5tnFUptqRuSoqcu?dgU><2yR|##Nb82_0n6!dMx-_VRpAzeK
zx&+`9G;^f1qS;JJtV#mhm#=tP*$F`=fNRH&L5usogUf$T#UyFQ@)5Afq)6pTcYPiT
zg##7L(gE>nX!f>+mq?`DH)Bkn)Y4v<0?a<gpM{9iGzz45%b1kln@AVMem(n^i7kCd
zb=}>7-2*a{_5%I<l4bZ~jbaJ;pJK*=PoSII?~1zoRR+>o-qq_0WH!+Bm6K$AJ8xIP
zpDF6lv}fg98MCO-Jz<A?&fI2u-c?=b@><0)3Qlf(I-!713L~jL{-y;oP}Wu<4h7Tf
zOsQdtj#5!msl!{e;)yWI_O4H;XwplM+yMrM!-dt|^-2Dra2jC!i%6I`XxWVoOhGvZ
zALC!K0rKLtt)o{k%^I0hpjO+m3T$~n&xLv~uC42|4MaH@-U24Z9=mT@&Pup^=MP!V
zn!#7(n?ZNMwt@MSS%p25d&txGro^-@zZL#OmW<edHQvK$KbYeMi6fLBa6NhO1I5^-
z5U2U+v`NJ8yJ2IaB-Gy}h(L)~X=H7Is)YrN&fi2zwM3gZ<a0gNLng_7J6wM-^o5PT
zu2T+kzTgI3-(VpBK;9#snZ#M9py)fV&V4F+-E<t%DK^VYxqvlRKL-shJv&>1i^wY9
z2N)5T^~PkMf3kM5nR5)vL29z%2(%}L{ZyG6zbnDc*$0Ka8S@4m4CF`+<xrqE3GAD}
z{7GU>6}(f}-@qp#qlR=x7}P-u_CEZrrau_Cr3G(}q5cn1UmghM_x*1Pl}bevNl8hz
zA{1GQNVZBIW~|wbEis5}2}!b*H6*e<GnO%9-^#vkJ@zeY#!f>Bzf14W_xJa6&pqd!
zd+xpGocp@xiC<#)dd|XyYdQ5D0PG8cSEh*B$Qxi#92vveIxQ=aHH}%f1PPLpA;<D`
zjj|p7<gPvJ5s`tT*baH+{xG3z%5Ztv(*o%p1Jp_3KG)v+6wjL4Io4k5-nkx`Ply%o
zl-Zlb3*q`2Ih4)ZH63jcad>v%UgIjs4Hu9@O!$5cF!nR0j56E-%3g9PW`kil#<OYQ
zba%M%m&HF%a)^^bJ91cJ6Q##fveZz<+wZI2P>++rq>fI1LR!cb<DLm%*Z_ARu?H}r
ztvXln{#j?tXy?}LP|*#U=_f}LQyB6jk?m7bl$Dh08%Jm6o>SZ-8)ScO43lnNg*Cb_
z$}ZyaF{i+LWMPnYMR?^1?5Edw{+zMMbkkDHA7E;H-&4W6p%VMCML$R$6~FoNP3r{Q
zZPn)7C*D=Ys$@!8DU~iQvY>qXw(*9|@+WG0eYb8mQBP|PWqZpo5Jyjc>1D;(`v!@k
zAxl|W245G!V`h}1HPIY#7?)*$VRAjyiqan`=UmvZAe9#RzXO9=K-s#x2%?T2*%X`W
zt4&4$bdY`!EyxH}iEWTxm{H<T!=zsTY1dI(JVj>;7&|OxngQgZ!AdJ;EARn07bncb
z+2HAqh_AcgF;i^ktb~1>Hl!_U&Gh1^9jZ)vsQeAC+@0Ny%V}>92j_(p8*uYNP1m&t
zC9-kn(77eDaJI<RmKZb2tVO?xfsYCRCl0tg0`Jg0r0xPt%!>vIc!<>pcrDai3{owB
z{*Q{;P|v=pncx-~G}mW=^(d2SRcRoXuw_<h-2wXTGbfD~Trm}E7pBxu@|yvYZ-*Ic
z52ck0tw$D_QO>gU<+Wm}p2tp_VnHQ<wP_%oX)IEg#i$4}5fyEBKN;PPK|xFcgq}F0
zPavx&S{Kr8BL#T8j6~TEa;K-@@+)rMho&cgU%sSWrS$o_u^&5u{TF4f;DY+Kq-H@F
zUM=VCib7sUcl4Q2e#+1LaK&pudtkMXACY`bR0HrbbJenEO?Lqr<@W<G-e@%dbv7HJ
zzv+RBM{39$W>^ZmRvFUD4Ipw_1&5n3O@3^9u4x4Feh*D1);^7r37Qo%k3!0#V0VIK
z-mw@%sBQ5%#R%&0S4Lixf6^_p;14o;1vp83Le}#B7Jz{zPJ0GCw_I%^7f(OOYCzN2
zTsMD|bcJAZ0HOb8M)Ai75SKo2&75Fx`nN}ylTmI4C-9#A32xPUkg=n`>n#RWNI<j^
z)~V;vbe`=-|B*a5=O}m!AXw*v+7$@J`K3pjJKI@icc&<ZD#uWqKjik_vI7v2&$$?V
zT!IO--kimn=N8tMKWQ!6OzzXqT4*9~rhA!=d^)YSP`oSqs*IJsJIuueDFH`R@UmOp
zrg@{(0o2j@=OsGQb+|0M8s3ZMSUWZt;H{8mA?<ZjO5n&TuWWhF++pmC+L<_jz%(gM
zz%A_FkN~M7(;~pt3~I`Qzv2u`#q-=!QPO!$h%rEZGF-k;a+t*YSbF2PNzTnv!e_&g
z(;Cg><$d*@Z(J~@2mtV?zMvVFTl5iUvj}V<UV^SCZ+3g(=r?t&NGEfot~-J$;Vnh8
z`MNY71GlP=oWW9vLB{4Vd~hC+w+)xj*N@Z!sOI)CT_LOG$tO8286ho(jS<M{woeG_
ztmGb*vgbdlNz4V<enqAEg*l~ENIQ<uznVhM$@U+{$6OX!Xu1O;1x?71bK_5oso433
zMPrI;9@<TojUZVOgow6~U+8BIw_%=wY9*yVs)RO%pE9YI+y{K@W#Ir;CnDIdUNwvB
z=*3t-D*VTz^CYW+5XTmBl~O;i&l~4F^kBxI@A<0R)lMIeTDT|DfpHZ?Azi@q>M?Rl
z)m`U<tN@1G*i&Q*cdqCnJ`<qLDSBHx$2-)aCQ$g~_~_)QM+aHDPHIFn4DjTIJyiFw
zir#(WJ;VN}+d#hlPw}<5^2Y1erel!`k5mu#Hx~T+7}cNMySayREGb#>!m)d7KO)*n
z=QKe0ZnTzH@sza<46{(rwwY|?{`B>Y9$Z3~)DJ}{Anu7r+b$?Uv9eq~_mv4)ia4Ra
zCxzVoP95zXaaI^=6NjzGC8knwt$D&0aY#0obt1!;8Nw#dlE9?@`j#_*T5m^Q@Bj>Z
z%8Y`WnpMHAq@wWld*c16SY%29s|h7yWIG?3$00~vKkq9`@hphTZxJ)1qTTZiz<ovc
zc`l5Iye}KEkq4yNFGEOIK<iqMh@+^orI$~+!#B(+9P`X~Zp1l)bEsYO>dT7rk$1T8
zxAvG8w2~X7K7#GdJ1{5W8F`QJp5swe{7CsE|7r_)!{$()M<dF=oVI<n6S)AYfiN%d
zf?&)b0!c;M)4;hIairjtRkH-Fru+RgL9z~^WZtr%yzK5B*yiy%>EtKfcCqZ3gzY``
zy{Mma13<Weq50OGv7_sXwuj;x9cAG>J^k!hEX36cev?-wTz_|gVccEvN#Q-%y)ytr
zSxR+LKI(75EQC&y-4I+}|59yvB7(}w(r%H2;Y5-Kec0)#cshN{wpmckCKdNPb#E5P
zMrjHJ_G_-pm})xlahy0V7no7ZaL&y|TtbstQ0>4i8au}E)wnpb=vgxDdc?m>(42d^
z^tHNJ2S~feUBg@$7A<?~FpSb~nMl3&Q)s5iC@)f4NWV;W?d44_*N*W0<k4KyZ~vMX
z7L*;eAa~Tf2h%$p^LTLMka%n?l$GnScuoH}&>JXQapo)@<p01WjC+EaTh&-;o?C^q
zOP*v82dhN_63|A}IQXdE+KoQecz#jLfm^10)-0qv5BXRVEBznYb0EtUs?4Qp%noud
zQ|8Y^Sx{8%&~v(1cX{g1`42~C$#AX{BHAGT{aPb?`RTO@z^OUU&3=Ax2-iySuK`Ck
z7YT6sy&$KxzG&fz?U(<nZ0M^Gij;UI1UluTKMe#w`Io5GXUdDG6<Nd$56sx|g6%-9
z2@LY*#d*!UM`$@p))p*=-G#GW$|j|?#jJcmw!4!3@{pyy-C0_Z6H{bPtj8GjFwZ}|
zH4H{tv})=Mb`j^6>n&0+%-f&#`ZPT#Xe7HjjLWLYdzFTIGzPC`?oPi8QQ1e|I%^xA
zn|2RUz6?648}I3_dS3d%0$V0Zi<N@e&Q!!T--ZpX6Pb-qgX%GS-P`<1Z*MK|=3tgZ
zHs$g;S|R6sm~);vrxQUEJgDeh78$v9UbKxolwDGgCpmBrhWo%!&PHbC0|>8-NXXJo
z&swiCdt|lpW%&}}dD*CheGMwjUNYN9X&Wi!2SM6-ZRGe_^8u7?uCX@3JOM!*=OgYO
z5Jw5B<u0_5a|>9|{UgIfF(;8eX<bgKV~+^^4cj!o_TN_I%sbSAtu+CW+9>*npaLcb
z^EN3a^Idmcol&-+=E`VX^pN|DvT_0EMay4DhMIFc^4WX$V93r6FLsv$_Mc1Sd*Gz6
zq(!?!T(;6Nc-&fHn%+ytHgZ)|f12MCD2Y=vYqP#|%#^Z2pR#^?uvY3hC=Ih^L%NCe
z@(V}S#AV)v?L8E#%m;q(Bnu#%N1fM2#jl<X1-dwE?xSNtdMdl>gBvc3axp2@@YGk0
zeo9#8!LcC&3eZ4*tmOWqCt6)X0<FjvZg`=s1=m`_Z;^-u^iTUOoh7*0%dRF3IE1A1
z)U@mSRb3ur+E}x}irMj*5&BzO4ek~tGKMQb`}B7qdrFl#WFgJ)8kg0WNH_KYk<!Ek
z0Khyb0Hm_&x^$^W=F0kheWk_)!n?ji#>fAkvW2FvnT(tE4n;(x=|Hfoh3(V#J*#(H
zq_-1E25;sT+MwxVE>IpOX;|v_f246M3AA@1?Ko|7af0M(!AU~#U(TnW^4v_`0w*Q$
zP4>IML<uEfv_8HKO1=yZ8uA?qWv4D-u8l6^BJ86kObVE|VM>`22nE5$3*qRuxN^<E
z@2@SOhV<U*^_G>&3+n3!1wp#+3iEvVxAshjd?6~eDq*+iyo0G&4&QW{(N%(*yI^iG
zZY?J?`ZA%|?TZKIpsgx2qVb8-u2&8e!zn)OIY-zlYcteF{JwGL(DbWnFj@X}+5hoQ
zu-At)4435CQ2J#ZG7_)Fh2Wm1+ea)Yf7Eo{f(?nqFMet6OlJPUdAgvXMFG~XhF!hT
zo51#$9=a>2D?s)Jk+XzNovlY|3Xt~RZgb2hxS5Q6sb&=wn)nLW?UZOO*>*6nBp?i$
zU@omz)p!0Ap^d0Cp#VnT(+MOnP*gpG($|u;PCQG)5f84jh=pTkO=rl5f*^M}C`i5f
z*5bWSjGZ8_!7*$ZQXg1PZeg_4hw5A-n7}*IOhXdjt5%QU(1gA-Hv~aj?xP|EbPh|8
zrVYz8q5B-DqfQBvWu@m(L%)U}51V7x>_O=ctujxXhucB^XVAKUzVxPcV}|GavJZen
zCgXvw58q@<3C7V&zOc{L2}6Pxf@TU(@f#~{rj!RiRp#g#z)ybHh?gq-TQ!sjn;(0=
z*|A-Qk2-^bNmqXAh28+3@<dsU@jXbQ_|h6+IMp;8hVc6d=duBJx1d+^87n3L=woC7
z!16DBVhjfZv!5&n0+y|;*~R~lQzI9tjp?ahJ;s5lI{j`Ls1>8%w7Rpw#s5DN=|&HX
z7;4D1q<R=Uo-*5&0oGWv&xE(a?(adTqFCH;cV7B%Y7O?)U614>9~}MgCd&P`x+0{_
zp)xmQfqf_D1WHqJ2$M99-|?#_|2#weC=^M)X-+X~`{LHX|1)?RgukU9w|`&=#g9gI
zPc7t0Ze<`q34IX&+^cO$p?{jTqW58`))C|c7A9p$u{eXGkiacmt1MpwS+Q>`Dgw#c
zNn2Yz+<am0y^rIgY7Py6%2|+Z_5`ArJ(n#iZXqwvu3YxT*?o{Mk~9K0&{wQ<g&#t@
zAsNZs4&5N~%aAm?SGo*#{!xP+O}K&lajOBbg{JqJ@w+|8R^r|hZUueYexGJaxdKuh
zloT>_!u~cuvKB_|0?FMbJy#3F;nhU68kBuX8fe8C%!~-|8Lo~6rvb-t-4m8R3!DxP
ztS+-HWKprFRJX4lZx06UwPad+k`Tl_?1~0KNuw76G=VMl6q&`zba~zYB@6fiLP#1X
zsl)a%DnIu|Sj*AIjyg(|={^^{_c>~oH?Nh<IIlDgiW5Bl^Kgsj#BtO-286V^nlFSJ
zUB^MWET3-2`Ho-U`{V4yW=Ytd#1+h7O6hOw=MD4*xgc=HZ0c=MyFK}@Yp@0snd-?T
z%D{#stkTOGg)?x^@(2g_b<Se5I3c4)Womw<%eYXavVWW=6^cOcSpO`7+oMX(AX6+n
zarEh4pRMFg!Utspe|Ojw09}mclh%xW```?8?GNTPl4-<!Gcp?t*IC1nOCx#rp^{j8
zC@L3N(toY--YrJAO|gg8*R|Hy1!S&Fozd5j&iYzved=W!HyB+ODt;T-_Sa9J*}+x?
zedi47;${5s%*zn#)i&m9obX7R;z9Hlbbt<*TZ93r!K=8Cx3T+i)XIlvb;j5m%M(zw
z!bB~3`{hT3-9@0Amp6e|U$s=v<5BI|&@YQ99$3Fc1lBmbf1c65O@3Zy>@g-~!fTM#
z?Y2v?qqtZS&_8{@W5oJuiblL#JIyiWnZ+`a6-9-}-(Olw(m|#q_>4LB#eOvO@Y8X7
z4DI{a*<%(32Esh*=q9J1v$;Qd*d*ALVzuvUuM3EyICl-olEuB*(hPQICTCiZD|ORR
z3Fqp;!|uK@^kV%vnUm5@dT-{_>&c(y&9HpH`Tg(#(I9GEl4Bnm$?aXp@pv{xlAUc@
z9S_^Ux{b|TAo6D#yx8<G0ae9bes(C9nHk<_W!dVg2xc^UYlt};$zN#*&jEPFtGa}&
zc$|<$+H>D<0(wh<CWU*gcOY8OUGMw*OZNKZ@qY{2XUS%(ixMag_ASHV&B(Rh9zSEO
zF3j}lqX=DvlPR{<Ij=ZH|CGze4+zzhAG!sOhAdrtx)HnYkuT3lPKpsoZqS$EBDIQl
z7fVXM>RxwTVzdC}@qJ1EW7q8O&L!KZpR@uf>4ssR(7X29HURo~S+Y+Cc1?H#o4MT6
zDr-VoINE9blyU~+w{<GR@WL)5twB0RUedpYkpllL2lSgxr=cG?{ue<XJAy%GLRmck
z@uW&DU@@R(c5unI!WbYnLb0+Bbq<;e!>h6ce}uu6x!E@qQIYQ{oKwW06+NE1hD9I|
z(X74v4*b#d7A#cEXQ1d-kGGV`9ZoSfaAt<Of6h7n<^sGbL#SPM7(TFi-V|#at2(+=
z_TK8nU&kshB}gOpk72Ea{uI0Wr$<z(rh|o-rUMI`II5UCo5)j(?omix?ykNGG{T9h
z(R!5HyG!#*;@i9X1p=|oY$8~P-RvRb2Nndkw>7)hWaqbUq3A~6(HMPE8E?2W0J?EB
zQ74;WMP0UizVjGefEVA}_;bZzs@RT~9x_*G#B>Q9+Y)xhRPlfR)8&)5=@o1E>1!wf
z{Wm90wDk(rWf2Q(DzigPSE&Ic@nWlTSy6z?S(~O|qdp-z>%q$9=o1b;(p?HPRnh_G
zsn$caegX|-z6qSrv$tY<s!&G7|3ue~iK(^V>{ix%Y_I-kN}lbWkL+4iW7D<EFV(le
zP2(?SU*vyDo$GnIM=2^!Jzt>U$2Kw1yrUW?-f|~z+q}-x+<6qY<K<q9rrsnJFN)en
zf^8vz9FehswTUo%0o+lk3PU}^{;8<NO-TbY67pfnRf2lR)X{X?qph^}dHy7s{3kN!
zm{K#QE9z=0>9(rs?3?Jtr|03cUu~Fi!LbdHB|*K-XZKRn#LXsH$G+DnmZ-4PD{z%H
zG$X0i3YnBkn>{zZSZ<bR<|birY(k$^jbB68v%m@S=h3Pu|79Q5+&?1>30}(kcWLj1
zE~;BJnR45Ca4g!76`GCPMj+w^PZ5U-wU(dtwcD>^@a?`~d7IVG&d(|8*#4=$B*4UV
z6W$Fm5^mrT@Q*sV?(#?;xCYJbA`4%A;3M6VGH*A<QgpSs#84h)%NJJ!*5$JFgiDq3
zZ|FB136$oL56kOkse?x5PuB$<zvq)zT#20$N10-8?Th2DI^y9k-Nmyr@A_M`xa(+W
zlo~W3pv$>knCf9VJMe2nU_hPh$A1eB=7{EqTJ1F}+AA@U@ck+bOD>Rt9|B$bk0n;K
zO&{`-9xiyOa9%wM{G1gU&|?Vpu+0yf1D6yL>VGs9husMM#LD89D5=yq&aXv~DTT!u
zg<rYTD+_LOF9Z+YcjmThRz`*ltN36x7nH5zhT27VF+t@mztN8ehI|o-&u>!_1qzh1
z*)M#h*=tVvP88hTWA9XMt@4~ZtCKAR6eUd@G9$GRPv8que!s`{mx!V`?;AoPgO!6{
zYk}#_<rRDH-{{JtHG4bb-oV&nE{)`paY`jd;&d6mv=t}nqwx9e@J*=?DZ+4_t<k~_
zm)Bslmtd0-nFUUu_0VCf+1nXSv2G(bi_Iu4`p`gWqP3?_Y%7a3B9&NAmfIw_4gRkP
z7~dcPy=s!n0MfDYZ~JoZTX1JhH4F&C!V84{RJ7LgrBsm`$$oVuMN{ngGSqy|V}m-k
zy}ByWekPEv;nGbh<%c3YY*f|Bo0oLCnH{j&j?bIOT_w2u4eH4OkH<F&{ROu{9P`_p
z<UqUXQ|d5q&mRbT3x@m2UAY5REL3+NC6q*dSI`>*R=dbhz`%rK1@+m247TdYUhbbN
zRRAUwWviF#F?!i>zv38$1tgve_Aa5$AMG!Aot}-wd8l<QZ;x({`XEe}vM}usUpJo(
z?;VJtGZCp(X)CK}bFfzgo6B{S$GU_p=VquXM0?-Y(<5Cy_neGA!}OZxGpD6WbN3(?
z0(!arsuy*x;yx{@OJT-;9MlbSd+PvPXqB$AbPj+zwYvY4CrkW9fy@IVUg3gu-w0m@
zXh7tuje*@Wvpm+%F7k_&Vc<RHZwu1D@?@Y03tz1{WhgCixZ=p3)K;IWL$prv1nv*G
z2~fl0UqM9>C2=1xuV8xU32s(5Sv`E4i9fI-+l;^r$McH4-U58d`J)-1s>d~|)h1$7
z-66x?zb+YjiS>IwF2+@}9k&KkM2ng)_9<%GEA8U;_7JGh6BdJ`5A`=y9}D9hyX>ge
z1pvZK0&B+Ve6Y#6zT(}Wu|gf9cxV#NdCs)%FfYs-1MtLHZv7(wosx1PDZ;gyuUnj7
zyk>08^Wk(9vi#oWs-YYXOz06a(g5xlC~2l$k$_7uGKNMxo{Nu|X#myAKjvK?kGL{j
zo04T!3{b|t!von1mp&p6?`<UiKe6<if3?o|Qq4(DYOnXCtX3bpo~o0ERm<CL>`f@a
zMM`A$hU!28iN^7r|AyxaOyRo5Y4e3yP#H&4wGFdsKx-=IeIv#BB$Lbu36gbe7RuwJ
z6~rZ=E`P2srQBQRB20S*?3z15o%B<7pdQkWGr{c$7s|us$J*uU2!yILbXfVXz=Xo!
zZy>A%rBc1wdd7@06jpW&Ys$PuV;qb-W_k_QcfJT}r-6!18b5jA^*xjZARJTvd$XMb
z3h%kWnO7{?Dgn!L_D%f95?pbpv<tE2yLi6FovYFW2cQ1{{?Wd6VtJRZf%B*)=E*G!
z64L5tWsZGwF>dtV0IN{8vQPUR##azwFd0jcNDIqsaL(nu$>@l1^$siyH0b(-g0^G`
zR(LYO4+wV?o{w68Huz7t>u^EpKjG$-2Ul5UO|$oAKy3<G{%h$q^Z1E>Tv)+X<GX$q
z1JY02H5N-?U<M$x*3=@f%dwx72{d%Q{U{-2>$XJ{Ldz&vc+Imf@i0O1cn~gsNU{U_
zZ}E@d7XC3Za@$h&L&|v}RkrNMCoTgAI}zf7Ekd{RcwpMx28^b#;hPFf(?g*MMDtH8
zdCLrV-Czmbf*BU-3$)Yz3RIbrte#tm9Pto+JH!9i39Ou6Q_{@W+zOwf)!IqePz}-;
zm4$mo?uGB^{Q0xB3J1w+_=1n`&X`k{(~}E@CxtK6lZ|W${jS1e!x}g3_o|bn9Sj4S
z11KCh_V8AWVV+#LohreNm?A60xg^5{E<EE5INbTCZ~fOe9BC1pIU+%&d|wjA=g;Ja
z{$?2j-M6bf&F?Hn&(A0uM`=L=bE||KHinbj|HA^DCH)L}36$ppkm@JHoS-eYagm{l
z4@c^-*B{iAzcIeb4_7~KsBuyXN9Z@#e!gD;j=}=WmGJcwGMw6U$wSN0NTZ;PHqr~)
zD%OerGkwXv?c~55q2GzmO=?D!jVNdiOjHv%g^iKVA$Q#X!5OVj@p=7Z#n#t({nO$>
zd>V_(>jJqoLT~`Dx~^KqFmS}~K(tqMi$NY)8&S^AnT|&4Vk{`R1!vClE2Z+kw_4h~
z-H{6x#PQzEFQ(P|`vgFc%JqfMw>W0cMhq?1eEf_uBTWm=z#l?z)4XrpBT@QHHb!;@
zMAFaoaD;hZ8cT>P@lR_u#X#@S^HvN@c@*AE_G{bVvj6I4N_$)DhCp7iNSTm0y7&3T
zT4|snQ|wK#pd&Pg?u)=}uLSP8#Y}NT>Owu*AkQ5<vcWYp!qak*W2)i1B+O9!;&bu6
ze<Zv~tvOU@d7_b^RXMKW*;y8e5@*0o?KyBN`4?AZ#dogqo$E7db6x=1G_T0I^u66E
z5|;p~l}uN!4=Ph#Oj)OMtJfGL%?MpGdyn#1tHgK|{{Zh5IMx^&4}{pXPfJ<k14x6<
z1|a45$F!wWoH0M{z=yBU#S7V1;_Bfgw--Ml;;XWnx*Z$bfA4*W_~FL$M>K(d7AKDX
z>{7AySQ`984bj+F%}<=+qPCAgG}T<nM<fZ5Kh_Ozxem5moagxroJ{#U2fD8^53DcW
zf1P$)0|elMi(l2I%O~=;@TQd0KuPP_R;fC)vEhy6gFQFkiAYoM@?!FvuSwjlP!jH#
zBW<R#M{H+U@b8rAI!QRVgpTC$_x-<p=?)aIx|VDleJP4cNBIgouGeM5L*j{Zgmj0r
zKdM5)>L$Yq5$$363NQOtjT4a-+rU)DKE@L5t0-wY6lZI##I@xtGpgP&RY*yi=||K|
z^8tq@GC0~SZkb`{7B6<)B3L*i{(0AHL2__Gw2m3F?}Tuah#vn(-CdpPs+~b)qs#-d
z<+9Od+H1zVnT<rEP-fU)91qnV$BfHE0ef8Or!M~UjY5&1bA!UiEz~c0b6S~_YNc75
zZX^^VwRZ8zz6=aSrr39YuJb0r6no_uO3>Cw1{8Bc7I|P^Q1H92>}V8Ux3@pb;R)5B
zvE~<pFZB%)HYF2rP^nJ%_pnQ_yhA-^y!fxu`2XjXZI?{xKHMDR30Zrls6SN}FTlx^
zHDTgZw#X=tuaYETpPIFL@<Z^efSUnsfB#z+l4r-igbCy`D5NGJ#mto_b;4T&;kHFW
z|J1hLEtq1jpe?&6pb*OT(|qoSDSw>{a2k;Bx|!Hk3~er-1!+O7r8aOa+y<0^cZ@>B
zrITWj4tqJV$HNaJaK~yc!NIedh9SfITQ`_LlU5ALUC%q_aSJ(*rMBcB-Ah1M0$Bpo
zY}`vElLHfuB;7P4Ee9=w;(mLcMLqc$K<)h`pSpH278PGD*7CqzSv(Ego2z)`7+kRN
zHh|KcqTWsIYo(FgxRU(Q1AryLp7QezD!%pWF(dll1j(=Nd^aSffvx2M#|<@u=7%+P
zyObB}0kc9-N|V-+w&efThcqgFF!0QkC@b>QBNmbNZ*%oB%i?Z<Lc$Ip$YbTb-*x!l
z^#oOJLphsv$vy4Zp+MQtmx+`A)9I&jAg=gxqjMnD|1G4ILh1~+Q3vPo*h?dl`JLS}
z;-NRvmiRbP1WA?xTo!IY58FHY0hjO!cg*5fir3j+ml%yA9zY{0E^2vui;E8qiN)m?
z5mG~unc-&!iTr2xDC=<fu}uHP0eh5xQW8fC0_8wu?9Ho5?)~{00u56ikRCONizfyF
zX?sk{Gt-8EhiCKpiB1%u*?TZQ!Hu0Dc{V7*^VJA5?bqx0QT8XrJvaE{FZJ1UQ(R|3
z>V(z)7j}X-d~-c$IRrQGJ#cTY6)!L=IV%8MuQ5WgdH_QD;FOJ__RA?rs!RM);rF(J
zC$6fe4gTV4#K!U{il*VGU39PG%agmG!mjt=@(VqBCXK+{utXu#+6_6S0k3P;ymP)}
z<wR|YwJ1(p>eDOtG!Xp0Rk=Xp!s+0qaoJEnQJSD`c(>Be8e;Nt9KUf8#1C(qFhgZ}
zb;@qv&xMvr4qIIau#OE*9}tq%$JwO@%H-(hfA%sfs)@`K)QysRZ@=(cpFw$*{z<Z>
zQY7Cy>LPQ>(ovp&^?`wHvG7QrVy-vv7}y$m1a27SC$$%KzrPT_cxyP^#zI}IES3Q5
zTHD#H!R-a%=`H74gH?E9w)BM>GAm8!iL&RkEh-;!DxQ4V)Y4dEE0cIb1i(0a9o6H@
zPx0<8m9A%#Ypt}Efr)?7+m~;lS7O_>)|-P-dJi_R)^Ubxww^@><@V-*!)6q2w}uDc
zic>4(>q}G7=%m*e1*nHM1Cv+LSqti>fL%c|tVc@Zn)aALZE2R3I8YX=8&f8#U{VMk
z%F5a}PqZXUd}fco|MM<1{p}VU&@Dw6`ET9vnmELc&u~Pa0SS(hR1`&^AvGFl;pw;x
zCwuu=e2R~)I+}jDQ#DjIv30Hxc!+LFc39vD-hp^|qDtbu&xl%3c1MPb`1wL;pE@z$
zRWiNp%dGV9Uf6NDQ>HA7y8=N)f2(Q;SW@v<$1g{ncfOgJa23d4VVsqCZKTZ^QgMaf
zI(i;52&(jktjjMkC8CIEh6S|rf(%;$;~D%hYCLNVIelH|*h4ybw8vu`eqX^p5e#;B
zdY<IA_UK{-8gD^MJ|E|kb^#^N>1s)_WOIq~O1}eF$-#a}q+fIo4^^Ot__D0lju1_o
z(hyrilRZMEt^)AFX=rl2nJk+sxztY1r3N*7y*tRq+c8${M_A-UWOWxl_S}d|$_*;9
zNt_(Mg6kpo>H55cwtm~nagJ>@JAbfs8cjk>G_&=hJlpr^Ud+8MOr&LLobIyLQrKQB
zxujb@{k<&dPBxOq293ZTlTRdM+HksYV)gzZPzW*088IPB9w4H*&2DE<zn$2g(Q1}@
zw$&HjV#TBTWP#PS2UB;`@@Ab^0GC)$LHPocflaav$!di6(bZwvhio$Fq0`gWl1GIW
z@4)hMu-W(9j#L?c8GkC`t@7*ei5~OWj|{3tbP4k-LtYCSgC$T~_F7Y&;V6saw5#>G
z;hSooVrIN7oYxkvjs`|ShH5=wtJ;V5)!nFW!lviV?n)90Do$&;Sy}Z;NWFB+P$gf#
z{L7R_-IzSAea3TZ<5{1QzIQacrv&Bfn^n&)JNMl3hcM(D1=*`cg{=l3-tSB0NBAMC
zY7@t@8SNj!zsyZJD(C`kCYpH^qHLq`I6JD2fSKO?vvS}x<D1ol-c<eUye#j0ZDvE!
z#Z%$NM=MoewPLc}3rp<r4d<6>NoVor45@EVm4Bo<_;l@v-Qm0Tdbv9XCAJ$ec_Gec
zUGPFlX9jh;M5PV~(w<8Tc_PRcsr8rGf30$GXsd&Kz8%vLogC-u>r8z$<+Xcn{bf%n
z^-CX|<9dSUlMuR6;WJT__!tj=clNvRT6kD8QbpS=U3~Qma_7U+eYZ3Lyf{<aJ(xOy
z<zc(%hnP9OuNRibeYV=k9t%v&>Pxea4=u7v`$<R3h9)B|qdUDpTiHsmFEBzA@IxGk
z_BP+=&uj+G{PHlD6l)?n{%M=BO*@(4=hM^Q4t9cHI&1Atkh`uN#2=%<v$h#sJB+7y
z4bN_Pegm}8IO<`ErFLiS_`l{lpOHJCk?+@uwfh2HlRSp^Tsl&9n^^4q^O7aScQiD@
zv>l_}j?w>+iliE7TZ&ai&}7DfFBamzGmy=+sLu$~S{Fkm8?pZs5zS_1MQL=^N=B%J
zf4dmV!;7T}QyTcSUh7Loh@0xxXJLIBOA@~&N$5c*d8poHPqw6r%s^=5#l2^V=%LA-
z+uuGTE^psM$w=#Gr1**wd^Cy73z#x)YpD@8TUTCO)4+FE9PxohQ0iQ1#{WcPNk#&e
zc@LwHE*YoE=mqchW{Adno}s~)YdR6x@y_)4?t2%|9_$OyHUntJL;<}OPa7Us|B8^K
zF0_*q2+4>gNfZe7wjDEWQzP4s@%Bp3#(Y7fcex9N@zBUP9e&|VLWcg4fASx0C)?RC
zzgB>$caqA%0M`Eojg}M9+ad?hLz>S2vGnuAm+MF?@At)|os38a^nCl<g_)<l(LqkA
z`u!9`k9VfScl$ZxWl#onV3b__)5}Rni~E7~M97-!Gti5r%Qr8&j?YLI&_+8R8A8_h
zUO}{flga>3iN#}^8nD!4fFC4redi$I4y=C%#wMX){9Qx?FqI{0i*=BvwnLUQV78_~
zuB%6g#eohEP5*H<#^*C?$=(4YXg5F<;JEcTz?JK{SNgSfa_Y;#2kA(Z$K`}F-FA#{
zJLbZtNOg)hk$v>&<eCrUMSQx|g_(?d)Im<QYO>3YdICH8Lhe3LP^HY1?E_#|<zHwq
z<995p*3yth-MJ*Brl3b29s=TBn7}wqjQ&*xnj3z&$5-~UUWFBDp(WiCyF5>6$G8An
zJ6OaXuk(ThSf00wQ$ephEZd(`W<^n^Y@I~wd(t1+pU|2$Zu%w_i)q$OPfm;eCK|aj
zTff%BZ{308#s|KYf-YGOqPHCknt1%6L`SY4@lUM1EyY}ou~IYno@_$E3f})~q2k^{
zwq9Ujr9p2e%=3L<K@UCnlQ;iZkopTU8W;?f1Y{<DMyR;bvw$_U%*-1NlO+9!&Gcyf
z%{MjozVH*J?RKwWEDI>rXGJ!)ys{b=_y8LbJOU@X_#MU5|B<5%ixW5H<#zce>)Xkl
zN&-UWuFKXMsfP2M9s{SD7afln-G#qJ@ZpE!X(RC+81O65<?`ZHU&w2)LxzZUJbVBj
zdEETI>T|p}{Cf9fe6F5H%muXo$d{KHJ%1+C6WGJcFSqDkL0&8q`|VTQ@LA_+!*^)J
z%3}`@8?L)BC;n7_1==U0Jr0#R0}dKD(&RFG$Srl>{%SWSX=Njm>(t8G$dq=3x8JAF
zUc{p~%VcD<q5kNl^ZV2JN5L^*oJ`tW^<T?C-fEsltg&=wLeJx6&?(7XERpgLMpY6~
z9QL1q!XClC|Ey1#B~1>~L(W!1C8F^+#SBZJo>1yT?c|nkQvog4Ef)<3-|5G8*-~1A
zYGfw-eSvuN_=Q(lb!=cAu)XE|{v!)9Z2O~uhyIp7DS_e`@pM07WS*3_@iTatjX`Yw
zpp|eZ6Fif(gWMsq-#*h#R{5lK0L-f2Sl~61HKph6?<i<it)(Xm2^byM_D+Nfnj(gn
zI2MoU_infTSyUfU;u1ZtVL<!Ey&bb;dLP~vt_F7QZU6Wvor=aJdOQBqpH58KqRK~W
zQjyeiWmhYTo7q;?avUUkF#T19B7ou_>cA{bXv6Z6YUOe;b@{F8O}7?xK<SbF_diO?
zi_JfWE9GGc_gSuE4RRr!n-=-It*~LrDLlP~C((^7cWQ6;x-zg$jik*j>Rmj78Hpl;
zA2mC9xQ*hF^@pT+rZh|RcID}pi>Yth?Xy*+646g*dg##c?}YL1S@viD@8|A2fF==F
zSpdNvhMBrB|7pG9@pPo^A!(ASp!TfVvk~Q0S!q(tPm@z)6T?EM0e2aqBszWb5Kvgv
z1M7nYcKDrJoA!8Upt#r$pOs`q`K|@`u%&T{M}4TOSRVFU%6``Njb!=;Op`sD^ZGxl
zxM$6upGn#*Kzc$TYfg$L3DWK$y8TQ=;yk8*S5Z^{vMMzh7>U`in_b&h046Srm#Oxe
zNJ6M8EN%7mNzks{!cGSUAIA!JlO@FkiY>A3J1@GT|NK-?gA@OVpV^SkvlCqa(=$QI
z(fR7i4VEFGtbqWfxWo>E`MOWpIXUA;g18uNIFAL;#;WL!4xDuV<=0T-_@F|hoosrW
zC|R4bLJg*t`UCoY3tGB;@Q*h9(GHD6!TfzWmUtxY+wHnPOabri5;yMGss)Wl4J}E&
z-p;&@KAP|wJs*3EK#!+CUFj0~%pB8A_A%MrXKdX~ejqM@9(L@X&-wm-cWEhoD&c0y
z{dW!X%OPfO)^%o&0rImEulF|(`Co%Xom`0N)C4^dZBd$Lj2ADk=ReAbKX*_|cl%j!
zD#G;6L$P*|xAsS=S)C}b=UZ8WTer}@5bcp9(bu~FkxDkQ;`=gm;3{D&K~+%6VJ<9L
z)@I@BNvq}Bzl@5y+95WIq}VneFh{nHE8sZ1_PX`BT@6~AcuYD4xjHUQ!H{m9(mSiE
zJvHT`ku}K_M-l7p8PYp8^6r{j31QE<@KpeMy7R>U*(^f-cFb5FjTaf#%!cB|>1wX$
z&MryD`p<wrVOlqwh=pYD=Vm*(CEP+EJqgYb`bTHJ<F#RiCNp0&{`#;c9xC`6*TrFi
z-oBM_o4w=YBdgXft1o>9Gi(fKJTsBq=yWjmV?4xUZ^Q8e6C9v}hqSx&?XPDdvo~nY
z<T{03p^-h8s|auF@R!nIXn_9Bzvk%a0|Kr;IZ(*LmvChgTAGzt=x8!z|Cn<6-A&c*
z!D7jGb^^x1&{n%0K*Q!!ydm1t4{!b|hVbG}+^4(AfgScIGk{qmPCdG(Np9RvIPW&w
z(${t)N$*s@gVU*K-BJOL01NVT;jgZ2G^xLxY@`F9T2RDm!SETnF41%(@Gj!QEr$0D
zeP*ALTXPLP|6uD^#~X;34o`nADceHfE83R)-Mk&+QSyi%AwOxLi8*3Lkwl$vJ+VRQ
z1On3d`?y+?E@qz#w!}Ve$51gdU^lfgpt!4Mz(bji{)oZqhol+e?bi85__+(FG>Qq=
zZnvGqJCE5fNu%RG6ffvfsi*U6_hcZo3kH|*?~6C38L)t;hRlT**SH!YPXwlPQo{Dk
zTb*P?NMKipmnaF2BkvPf!S}O2FebRJ6okx^r;g8>oB90}sr#{d$)rRJ)1bdScR>lB
z-`F3_R{{r{H*<d@qJ<&7VDWndlfJ_65AsigiOH2DBsron`S`X}XgZd{F>=D1*dO_S
zqY?c_Q^eo{Xi(-K(fR{bGivbe<D8i{y~NFLM`Gf${hKUFobwcZ_16&Z*L*3!sId_d
z!%*r6P4ggrFtl`pbPARwy7{-hTDG@sV4NG_VC%qe^pD&;fsSVZmUF;tlFUwWOL>}w
zf<IcB2cz|e@@6g`c&?i8<o&L3Ob(V3-?ZLx2%m41u5=M7jclh+rT(k48PH7hNq#|!
z8<A5OteLGG>xeGvfLXuH`9tR1mu&URZf>iW-GkHG8jL<2#H;VEAOEaj(3YYTXrlmQ
zgVDH$FwCCgI-T~-pwSyUv8QTs_2@xIqT6Bl5XF5>S6<2N1a*B$R+VG%*YOKC%7l?L
zWS0CEp&d6mnNJ%yNZfqU8SXK-Jz8)If37Z?=kC76y?fq~Vo0%~yqGhpCA#IdY<F;`
zYrqlqUJ-SbODp22YDw@*`MGn)#*EW#KO-jZN<Sna%3#^mZUp~s_$rA%7vlIHgAF%Z
zQh1Vv)Q!@1*Lg#{9HeMV>u<kQvV_yV&QyIt%=>5S-I)F<@zVj_sfb7MPzcvjI>f;m
zdGB!?R6sk#_}1bf%zO{WEQs**TJ-C;7-|yx6-v&=cLeSmd9+-Ibh<cx_+8XWEeZX|
zrd%AaK9s4(Lytda7sh%&Q$^Oz*+SM?{w{n}RsZ_ib5`s?$jdipGBDk#2=hGmWg=R`
zrd$MnZYTgPpomY%l&<}&<)d(H5m!s$!k;r0?YqbDPxXEY1~wn9C{Ie>9Kv_6I%TMW
zUC$)=U6Gx8!dq=8+S9vfrrPo)vbT#~I-EAT8|0!nqCs@~#q!QCGcmnrc?S5P(RbUX
z@*9b67>Ab+U<4=s<12y$3wm8MxSJ4d;faZlo>5i5R$R60{&<7Rk|JCY(a0dTKN+fD
z%wNCIM@z?4#&=@GW{+d7upSXc3#yky6>0Mtj5+zvbdh~);t%3?YDN4jWP{{2tMGha
z-?SpWoQ6BeGY1w@AZt`W`UAM@=&7)llrtgsaEx7Kq$Bn7d&rBRd@D-yy7CmW8Q9jM
z6;&e2GKp@RM!Y0+lca(gIv$hy##NxX_fwqU1DJvLBh$mpk7KDwAo^1q@NOQSd4Nl~
zjL-iSCWS}FdM=!M)O!#uc=d^tVt5!gdya@n*RRr7#D4C*^LgjukX-8v;F(;NcSDcz
zsr^Kkb$>C$-wV=X#7CA{FT3_hAC$=+TIG_wZ{IE5@wU`Rpv6@>U1QRcWCc`GeD66s
z1O8mhlPp>y`)BdBqKZrt;xr;3`#l+}u_bBiSD~bXttWv{xP*0prC{2r1sVIS&-6D}
zZ2Viz&ST={1mWdtNH*6hllLs>K=MEuUHCh<;RYdVwAzu}4zl`!!)45fz@G>2Wi%9+
z*UWEUYb!m1&p)~sk}MLNXdqXhQgUb<YfhlNYYww}r8MLs#DR~Lvc9ghWnQHH9KU*s
zt1x=GE!OK0dMH@^Di;-q(A4RyXz}#vOu1G*Pv~SCilQ<$-ZJ5c=sD*f4f%uR_4qdJ
zZMo+n<BOaaI!ls#`lj*;nOm=dAq|bIJ=8$IT*h5A84K{MCL~g=caG@BdqXi{Zc4zV
zHg;&>anjA$Ws7Q1tU57rp@4%}T*ex@TL{kRCvSdCAr0q*?uHcP+I=@qLxOypY4I8`
zY>V=!>w7nn=5?iqyg**%6xe<q(@E~eJT5v02FHFPmKCgWK{Pay`va4dfHFMD({WDi
zl56zx2o5uZwiV5I>D@?ji!g@Wg!bF_mlhWve}kQ7*2PDjp|xVhFD5+aiVj4lManLV
zjBA%Y&V#aFj;v;OlX>PPR(*hEfz1}$SY1~9^im&&)b8$Pc65#W-uut6egc3v4aZ(C
z^a^u12SV(xhSx5l@q0@_#QvKnaJ1Imyz}9)(k;_*dK`r0pE%BdXLU1<;Nh(iXTfbh
zov^N5H#iQCNKZfk+=><DNm@XJ<<8@{AG>qtF~?!a(tEwuq~@0zZ=FcZDt~Hor-aT+
z@0gdCTOydYhm?r1!4<{`2u^$=Lj}~%CsN{*@`pW$lYQ)Xa83^<Mr@E}_V~acgW2b)
zJJ*<KnhW*Mjl~CU=x|k)W5Iz(y}wwgG51W5O4Lk=#|&K`e6V^9Ex1};YZwq(B$cOJ
zunaNXp|c3I_iM;_1P_?SEGAlt$>E*2C0?TJ$MO_SDfteAJyTy0k*X6N_U+vA6Kdb>
zUb#Jt8Lxlfhb|M!$QYIa1f(}dloag0oYxfLsQZ!{1TjkIhV@)9^^cA<*VHkj<pK$a
z%r0{Npcp5xaRY_a(<Tyq5wVq6evG6QsoDP(XsnP$;;}YQW+e81Bop0G3j@4hz}LBZ
zI>r}{MoAv3%}t+4MYuI=2C)Z|O#1n`vj2ei7VPPE{kDMvr$BV#{r1F}&>Z_I8()QQ
zHiJR2@6m!Q)wOy7p?!+ihU6~lgY3YMG(;^=D5uDP3G^+>tyy@zqVX|vVb(o0C4A%y
z<BKwiev0k~p%IWG0NRMlFMV`P8jKE^qa$lKx7glgE^NK0rj2KPVLXnPKN!4r9Ovl`
zl{^Nu6Q7=D&>S3HIR}Pk$0Lq?-}6P)lBTCDeFleccL{gcb)L-b_YY{_8{Gp^asB)A
zpxdGQsy`J61~1?6nSJ!bsRt9rEB@H_fh95E{a#)|I};(N_I=2&-dj2Et63H#J97`I
zjk*oOgCz6>%lG?gYX{1&-{7NH#?S#p7z0I^pt@K=*xDa<`oo(%kt?9z@yK&%L5EV)
zPuPQDwncII0=EuQgT}wDEmUE9!+2|D;F++0c017RG;U)T5mQOIirKWJ81uKmCO1Au
zoSC;`v}K#}ZC^)y`+-LaICjcEeFa0LIzYB~m%%Q=T*#5ln;r!*4(6XW3Fs7CzjNgK
z*=SkQ@;~=eo$+?D*z0@UQyo~a3(EZ>L?}wIU=o+bFHCG7`rdPa$By2pWQ=zuOX}xm
zM6E<%A_O?1-U^zBdOpZ6$e*sxL(irmCkq7WwXt+r_#FLZ#+VW5qG}sN_#`8K;bQl_
zmqEZYJYG~H=%n^=>Mqfq|A+>j_0M+}%yAlFtyF%`i_f-IZiGor)Ym+Kx87hEnAoX-
zFsvs7R{X^Kn88?wbEjd1M)1Zn&bwc7?pYHJj;shtHGJ5G%rlUC3b+mo)vqv%q^Ew2
zFU<Nc^IRRpBP#~c-!H#ZvB^?m4mF$@(wKPst=ZigFLWNb)3lYG4q-^n$@hg-Rxjhc
z2bX&=FJ3W+%SZMW<106sPK5UODP9%RlU+l5Y`NQDmG=5CyqImRP(LLe7}S2@kq;F<
za^3&L=MyK*g1g;(56;C3g^&5WF#Y_36vzgWC%K4<c7*{{RE*<${|I2GIyaZ{6_Ssg
zQ<jRn{47I40j?>#wvjD=|J_<Ux~+0XV9DlC^3WCG7Bn~))f}Ic>QdwBy?J@9%0&Mv
ztsGJv^%tc0Tarr4j|@}vt%MJ%eJTq3+R2%va?No#D>D@10t_l|sAPTT$}uaK0g!F?
zzLtW}l+BjJ=g`g^D!D^vMJilF%4d($%*x%s(MMOKVB3q`CpDkaferNlw_w<uRJg{V
zP}yiJ@hMuc72bYOI+nR00SlFjvCG{&hqh${fy-VP@%s7kDa3OGW2Loz`L;JlI?_oa
z<GHu1acwc+*ehv-fgm$)#P%Js^QWKczu#6|X;2vzl24{dLYL_@Nao7S9$$%_rE^j}
zkbY1WpZ^9p^?P35_Y>W$O}tVU1RFbV)QwWv<v=Q1u<KxUjr5&d3>E)NQgNb%jN2-U
zi{=$ZB0H!QRob82lUI7cu24&<9rKi$YaM&=DaBbalD2m&8)05;?jWat-TQjs+fKIi
z7Td9th1Y2cPY}^MW&JNW@1lteFntaW$Pk*Ff^cuo2S0z9uxVL%Z17}MWpL*!L4T-e
z1*6R`J+V`1XoOJZzqZ158K_A-+V_a%&MLeh%}$A1t@qsw4o<ct31mC#2K+K5iG0hX
zo;&n|EMqMFmr12$h>ae7^!TAiw~iNtz3e<$7*^|7-GM<F%oC4Y5a{>SqU~kIA*ugU
z7i)NFzb#K<&i30}b`GUZ%%d$<{q75|N!%kqfHeh>!Q|Wvf%dfZ<w66jub6RAWmJ)a
z?W78P4}m!s`kDq4DYTNa)P=|8VTOy{`{9_k>p^nfbk3-dfDcDf-f)B^TCf40kDF_F
zy9RnyukIlG{Et8Pt5P@H-6Th^A53E?tO7prM%|zr=iMhni>m79RJ_Jkl=-JiDAPOp
zhET20dUmxthw(21s)eHWonKSo2j-4}ZOO6Rw(UD3fvj`X>3**0A!5_I@cDoGz50BN
z25;7<{e-5+Vxc%J8eP^K$hXsvmw)qiO+oJ!Rr>2U=<PHA*;)0y_u2zueGwljZHG2#
z)K6%^Z1K^7e$edk@Xd5#U=iA1FxW1e9kJ<u;jM!CrLU@%J*FC}C)U<{E{=qZVJKfB
z9`_Vj5qL9-3<jevc}u>*A!_a~r|R1GEhG1q@^!7aPlQj`T)T?j>m_m%pr)D6mOnF$
zAIx?bMpBW_=R+gqLDTNl?7(}Mxb6LG?)6PIshh^Lw092a1!>IQcfv<@&X@rWsk88H
zHl38?tnMN2Tq=-<nZYSgt@J?8$n9X^rvrAc%4?TN=*G&L2JAsT#>+<p7?wc(cI1B(
z#Bwl@QPtKiBBD~Q!$;5uVpML`&|0gx(UY8e&YRbYSZwwFE~Kdf!twjB-ZiiMIDYK<
zdJj(-_hU;^sG|G$>~UjsSQpKK%BUykqgKE+I?pHLZVfYRhHs5a2M+2i-aCnB4PQE=
zA8?#dANPw$^MraoTXFsbH~Xu1O1hU`e!o1Fm45>*Xfi(5EBQJUn&@_vp&n%;qQNDF
z+*O4SVj&l~9^R*MiNI*<Ud6L^SeTe{-c=;>_F2)T)BI~CdEkSX($#NLC$4{-inh_#
z6~Ra5oP26W;7!(5F77(~5cs9)U{iX1@Y>nc`!XjE4Sv`da6$_{z4RTdgfFLV<zl?$
z+A;B9!SbDW*nPvJ;oglN6-fb}B#055aGPDWqF!0&%qyv0zk+5#7<B)EOKX;)KjM1m
z&>;5jnQQhu2>CDGz#kk`fX*FFok@l726@2H=sB~NpDngDD|{`tY<0(p=(1mtF}tsQ
z3l{%&B#1Bn{{dj0Gu)w%n>%!W^s;?rqz;@{as4P>e!@Ph-~tuRaq54gd=47<ix*64
zjHYTF=IJ31+N;ve9`8$*R-!pibzKg|f(^2{@`AnXp90TlX&))2$LGr+3r~|x{eYXM
ze{Za7R9~b!e+;Oikb$Q88=v*5Wfw=?g#!x$%06d6gj_iB(qz*hpq_L7>47710{`@}
z8j8Kqyv`==LgSKvx{wF75tZjh=^1Dc8&`Uo%`K<;ubF6=Xuy_qxUfCXO;Ep&chwTx
zoq9EK_V^3kFnb}<?J{c2KaE^t8xl*T2*}DP4<A^tiR+*0B-aQT!et>={<mhQK4emV
z`KRIN5Uu>H4qFDw&9Rm7@RPFWN3iIEvWH<np{W3*nMwbK@n6bIape@Q$3BtUg2ttF
z$66GFEq_HBkyMBh?w8MCKQI1o+EEQq&JO=c3)Rt9olJvf80kCQJzt?8v@smneS?bn
z&C!2-85FAu-r4y|S8P+Z(?2P2RBq>bHZ)Csy8TkCq2PF@9iJAh0>l2iUXzG%(~<4U
zF0p~6x1P+#kR%5lS5Fm>B<4*{o`DaB{<F%;zow0hxPk!N{Df2U*tOWHIdB5aiME-<
z#P^MSq`FG|&qjPcm94FWCa1>Sf!RuMUCq;%t4dDFUHXhjg2hA#b&1^=oXD`6YA4qi
zV{!Lz1D7_Kyr2C0DiVfAmggoit)@E212HX9)z2^Yi{Ue=JAL-ewEkXJ!g<k%?9><)
z*xn-luXbt+uIwarChb4QA%|ZT&R;jw7`FizK&}a?Zd8HbG6~qw#KZ@@Xx(j7Tb8g#
zaFeH*aT>SWb1=_2?-@d)w7$8si89a;FxaAO)%h3088TE_os&DMzHGnG($%+oZRfO$
z8@%JwjMh)pDX{4GqH3l><0D??Dp9#U`l4eIg`r04C+J*6s6>4rIK}KblN?PH7PWav
zF7qBRuH38labXzmJ~>#6(BLsdRp~2#$5`-grXTp`aMg6x*!}Af+G`y88@7@v6R}&x
z)ZT1ScWYN|*SJ&A?;v5;5}N*b+x+`tm7nw+y=K0}N1l?Vy7S@qX`QA%20=xb!t@5E
z@<NLy-9LV(?v96mqoEkp(l=!n{XFRh?3RM}Vf(W`gcR!~VJebb5t>ubLyjsXsW6Mr
zRw+&ZZy*3&mG9<wYH{i_>wRt57homjB;zkwzxb(ZwKuc*jpC{KDY8_A+)iwX_r(Gg
zs+dn%jg2hxE8L5o+#0aG9?RtPfGB?~)tSE8B3-#Io0N}{RHIz+U#{4d^u299^yUYc
z;{xqRgw%&eLpe*)Cv?QTZPa^${dF-VABvOI(xDNZz>%2ZqPH(KY0}>X{nn)`Jx@(@
zo@*n}hhnh6SgeOHcQ{e%6}H6S&EniNxK5jsG&EKIn5vS#<7p_Vd8v-E13i?84ii?3
z%lm;acwg-(3MdnbzQg$W&5*%_zLuw|Tp=X9U@mBFPj1OT)gL%sYvukV>>w_}x$O3{
zfdlP+H}dRywCS!>Z-AX_fG@%C_O-2u#wuz#o}q;U+<gu`2Oc)4t3J&;m9YIM;4r?t
z1HV#`XBYB7{VEj|mE6st$ynWr{+7o}=W2wBme{t1&}_>gyH++a-c#WF`D1C@gqBpp
z#>X_V#NssBg1p2ZEh};{?BE+YMb}o82QQ(GJ*8%g9&*&2-5~tG038A1{yv-Y9;F5V
z0D#JwQ?1+eRb_t&jauEaJ6w~W+|5znYZ3qe06-#6`*ZTF^=7$M75sQdt5)}Pr^7i-
zPp$T5)Q6MSa|!?e0Fa1omCCK#n^Eg7XlmB#JKgEBU9O|ab-P*jrxc?G0000m(47v~
zh^5VTb3E@?s*U=NdaZtNlk0t7x%NN5?Phbl?h$GL0000hcBjKONWa>?oOwO0O3|-E
zwE9W6TOGF7zIfeQo#Os~+Z>nIeK{u-0001BPP)@gzs_#@wLYG&`^!mxf%=28wEB<R
z8NM9$+w1wfTpri!_2$LxzmLo1`Fh>nT$<ru00000ap-n$`t@#KfBLmQTng5&{{iXR
V(7%}e7p(vQ002ovPDHLkV1k$dJ=6dI


From faf357fc1fceba32e906d1398c7393060fbc204c Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 29 Nov 2020 12:42:12 +0100
Subject: [PATCH 116/295] release-notes: update with 1.2.6 and 1.2.6-S1 release

---
 docs/appendix/release-notes.rst | 204 ++++++++++++++++++++++++++------
 1 file changed, 167 insertions(+), 37 deletions(-)

diff --git a/docs/appendix/release-notes.rst b/docs/appendix/release-notes.rst
index 89454fa0..7ba8baaf 100644
--- a/docs/appendix/release-notes.rst
+++ b/docs/appendix/release-notes.rst
@@ -4,39 +4,156 @@
 Release Notes
 #############
 
-1.2 (Crux)
-==========
+******************
+Version 1.2 - Crux
+******************
+
+1.2.6-S1
+========
+
+1.2.6-S1 is a security release release made in September 2020.
+
+Resolved issues
+---------------
+
+VyOS 1.2.6 release was found to be suspectible to CVE-2020-10995. It's a low-
+impact vulnerability in the PowerDNS recursor that allows an attacker to cause
+performance degradation via a specially crafted authoritative DNS server reply.
+
+* :vytask:`2899` remote syslog server migration error on update
+
+1.2.6
+=====
+
+1.2.6 is a maintenance release made in September 2020.
+
+Resolved issues
+---------------
+
+* :vytask:`103` DHCP server prepends shared network name to hostnames
+* :vytask:`125` Missing PPPoE interfaces in l2tp configuration
+* :vytask:`1194` cronjob is being setup even if not saved
+* :vytask:`1205` module pcspkr missing
+* :vytask:`1219` Redundant active-active configuration, asymmetric routing and
+  conntrack-sync cache
+* :vytask:`1220` Show transceiver information from plugin modules, e.g SFP+,
+  QSFP
+* :vytask:`1221` BGP - Default route injection is not processed by the specific
+  route-map
+* :vytask:`1241` Remove of policy route throws CLI error
+* :vytask:`1291` Under certain conditions the VTI will stay forever down
+* :vytask:`1463` Missing command `show ip bgp scan` appears in command
+  completion
+* :vytask:`1575` `show snmp mib ifmib` crashes with IndexError
+* :vytask:`1699` Default net.ipv6.route.max_size 32768 is too low
+* :vytask:`1729` PIM (Protocol Independent Multicast) implementation
+* :vytask:`1901` Semicolon in values is interpreted as a part of the shell
+  command by validators
+* :vytask:`1934` Change default hostname when deploy from OVA without params.
+* :vytask:`1938` syslog doesn't start automatically
+* :vytask:`1949` Multihop IPv6 BFD is unconfigurable
+* :vytask:`1953` DDNS service name validation rejects valid service names
+* :vytask:`1956` PPPoE server: support PADO-delay
+* :vytask:`1973` Allow route-map to match on BGP local preference value
+* :vytask:`1974` Allow route-map to set administrative distance
+* :vytask:`1982` Increase rotation for atop.acct
+* :vytask:`1983` Expose route-map when BGP routes are programmed in to FIB
+* :vytask:`1985` pppoe: Enable ipv6 modules without configured ipv6 pools
+* :vytask:`2000` strongSwan does not install routes to table 220 in certain
+  cases
+* :vytask:`2021` OSPFv3 doesn't support decimal area syntax
+* :vytask:`2062` Wrong dhcp-server static route subnet bytes
+* :vytask:`2091` swanctl.conf file is not generated properly is more than one
+  IPsec profile is used
+* :vytask:`2131` Improve syslog remote host CLI definition
+* :vytask:`2224` Update Linux Kernel to v4.19.114
+* :vytask:`2286` IPoE server vulnerability
+* :vytask:`2303` Unable to delete the image version that came from OVA
+* :vytask:`2305` Add release name to "show version" command
+* :vytask:`2311` Statically configured name servers may not take precedence
+  over ones from DHCP
+* :vytask:`2327` Unable to create syslog server entry with different port
+* :vytask:`2332` Backport node option for a syslog server
+* :vytask:`2342` Bridge l2tpv3 + ethX errors
+* :vytask:`2344` PPPoE server client static IP assignment silently fails
+* :vytask:`2385` salt-minion: improve completion helpers
+* :vytask:`2389` BGP community-list unknown command
+* :vytask:`2398` op-mode "dhcp client leases interface" completion helper
+  misses interfaces
+* :vytask:`2402` Live ISO should warn when configuring that changes won't
+  persist
+* :vytask:`2443` NHRP: Add debugging information to syslog
+* :vytask:`2448` `monitor protocol bgp` subcommands fail with 'command
+  incomplete'
+* :vytask:`2458` Update FRR to 7.3.1
+* :vytask:`2476` Bond member description change leads to network outage
+* :vytask:`2478` login radius: use NAS-IP-Address if defined source address
+* :vytask:`2482` Update PowerDNS recursor to 4.3.1 for CVE-2020-10995
+* :vytask:`2517` vyos-container: link_filter: No such file or directory
+* :vytask:`2526` Wake-On-Lan CLI implementation
+* :vytask:`2528` "update dns dynamic" throws FileNotFoundError excepton
+* :vytask:`2536` "show log dns forwarding" still refers to dnsmasq
+* :vytask:`2538` Update Intel NIC drivers to recent release (preparation for
+  Kernel >=5.4)
+* :vytask:`2545` Show physical device offloading capabilities for specified
+  ethernet interface
+* :vytask:`2563` Wrong interface binding for Dell VEP 1445
+* :vytask:`2605` SNMP service is not disabled by default
+* :vytask:`2625` Provide generic Library for package builds
+* :vytask:`2686` FRR: BGP: large-community configuration is not applied
+  properly after upgrading FRR to 7.3.x series
+* :vytask:`2701` `vpn ipsec pfs enable` doesn't work with IKE groups
+* :vytask:`2728` Protocol option ignored for IPSec peers in transport mode
+* :vytask:`2734` WireGuard: fwmark CLI definition is inconsistent
+* :vytask:`2757` "show system image version" contains additional new-line
+  character breaking output
+* :vytask:`2797` Update Linux Kernel to v4.19.139
+* :vytask:`2822` Update Linux Kernel to v4.19.141
+* :vytask:`2829` PPPoE server: mppe setting is implemented as node instead of
+  leafNode
+* :vytask:`2831` Update Linux Kernel to v4.19.142
+* :vytask:`2852` rename dynamic dns interface breaks ddclient.cache permissions
+* :vytask:`2853` Intel QAT acceleration does not work
 
 1.2.5
------
+=====
 
 1.2.5 is a maintenance release made in April 2020.
 
 Resolved issues
-^^^^^^^^^^^^^^^
+---------------
 
 * :vytask:`1020` OSPF Stops distributing default route after a while
 * :vytask:`1228` pppoe default-route force option not working (Rel 1.2.0-rc11)
 * :vytask:`1301` bgp peer-groups don't work when "no-ipv4-unicast" is enabled.
 * :vytask:`1341` Adding rate-limiter for pppoe server users
 * :vytask:`1376` Incorrect DHCP lease counting
-* :vytask:`1392` Large firewall rulesets cause the system to lose configuration and crash at startup
-* :vytask:`1416` 2 dhcp server run in failover mode can't sync hostname with each other
+* :vytask:`1392` Large firewall rulesets cause the system to lose configuration
+  and crash at startup
+* :vytask:`1416` 2 dhcp server run in failover mode can't sync hostname with
+  each other
 * :vytask:`1452` accel-pppoe - add vendor option to shaper
-* :vytask:`1490` BGP configuration (is lost|not applied) when updating 1.1.8 -> 1.2.1
+* :vytask:`1490` BGP configuration (is lost|not applied) when updating 1.1.8 ->
+  1.2.1
 * :vytask:`1780` Adding ipsec ike closeaction
 * :vytask:`1803` Unbind NTP while it's not requested...
 * :vytask:`1821` "authentication mode radius" has no effect for PPPoE server
 * :vytask:`1827` Increase default gc_thresh
-* :vytask:`1828` Missing completion helper for "set system syslog host 192.0.2.1 facility all protocol"
-* :vytask:`1832` radvd adding feature DNSSL branch.example.com example.com to existing package
+* :vytask:`1828` Missing completion helper for "set system syslog host
+  192.0.2.1 facility all protocol"
+* :vytask:`1832` radvd adding feature DNSSL branch.example.com example.com to
+  existing package
 * :vytask:`1837` PPPoE unrecognized option 'replacedefaultroute'
-* :vytask:`1851` wireguard - changing the pubkey on an existing peer seems to destroy the running config.
+* :vytask:`1851` wireguard - changing the pubkey on an existing peer seems to
+  destroy the running config.
 * :vytask:`1858` l2tp: Delete depricated outside-nexthop and add gateway-address
 * :vytask:`1864` Lower IPSec DPD timeout lower limit from 10s -> 2s
-* :vytask:`1879` Extend Dynamic DNS XML definition value help strings and validators
-* :vytask:`1881` Execute permissions are removed from custom SNMP scripts at commit time
-* :vytask:`1884` Keeping VRRP transition-script native behaviour and adding stop-script
+* :vytask:`1879` Extend Dynamic DNS XML definition value help strings and
+  validators
+* :vytask:`1881` Execute permissions are removed from custom SNMP scripts at
+  commit time
+* :vytask:`1884` Keeping VRRP transition-script native behaviour and adding
+  stop-script
 * :vytask:`1891` Router announcements broken on boot
 * :vytask:`1900` Enable SNMP for VRRP.
 * :vytask:`1902` Add redistribute non main table in bgp
@@ -47,7 +164,8 @@ Resolved issues
 * :vytask:`1934` Change default hostname when deploy from OVA without params.
 * :vytask:`1935` NIC identification and usage problem in Hyper-V environments
 * :vytask:`1936` pppoe-server CLI control features
-* :vytask:`1964` SNMP Script-extensions allows names with spaces, but commit fails
+* :vytask:`1964` SNMP Script-extensions allows names with spaces, but commit
+  fails
 * :vytask:`1967` BGP parameter "enforce-first-as" does not work anymore
 * :vytask:`1970` Correct adding interfaces on boot
 * :vytask:`1971` Missing modules in initrd.img for PXE boot
@@ -67,33 +185,38 @@ Resolved issues
 * :vytask:`2252` HTTP API add system image can return '504 Gateway Time-out'
 * :vytask:`2272` Set system flow-accounting disable-imt has syntax error
 * :vytask:`2276` PPPoE server vulnerability
- 
+
 
 1.2.4
------
+=====
 
 1.2.4 is a maintenance release made in December 2019.
 
 Resolved issues
-^^^^^^^^^^^^^^^
+---------------
 
 * :vytask:`T258` Can not configure wan load-balancing on vyos-1.2
 * :vytask:`T818` SNMP v3 - remove required engineid from user node
-* :vytask:`T1030` Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4)
+* :vytask:`T1030` Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare
+  API v4)
 * :vytask:`T1183` BFD Support via FRR
 * :vytask:`T1299` Allow SNMPd to be extended with custom scripts
 * :vytask:`T1351` accel-pppoe adding CIDR based IP pool option
 * :vytask:`T1391` In route-map set community additive
 * :vytask:`T1394` syslog systemd and host_name.py race condition
-* :vytask:`T1401` Copying files with the FTP protocol fails if the password contains special characters
-* :vytask:`T1421` OpenVPN client push-route stopped working, needs added quotes to fix
+* :vytask:`T1401` Copying files with the FTP protocol fails if the password
+  contains special characters
+* :vytask:`T1421` OpenVPN client push-route stopped working, needs added quotes
+  to fix
 * :vytask:`T1430` Add options for custom DHCP client-id and hostname
 * :vytask:`T1447` Python subprocess called without import in host_name.py
 * :vytask:`T1470` improve output of "show dhcpv6 server leases"
 * :vytask:`T1485` Enable 'AdvIntervalOpt' option in for radvd.conf
 * :vytask:`T1496` Separate rolling release and LTS kernel builds
-* :vytask:`T1560` "set load-balancing wan rule 0" causes segfault and prevents load balancing from starting
-* :vytask:`T1568` strip-private command improvement for additional masking of IPv6 and MAC address
+* :vytask:`T1560` "set load-balancing wan rule 0" causes segfault and prevents
+  load balancing from starting
+* :vytask:`T1568` strip-private command improvement for additional masking of
+  IPv6 and MAC address
 * :vytask:`T1578` completion offers "show table", but show table does not exist
 * :vytask:`T1593` Support ip6gre
 * :vytask:`T1597` /usr/sbin/rsyslogd after deleting "system syslog"
@@ -106,29 +229,35 @@ Resolved issues
 * :vytask:`T1708` Update Rolling Release Kernel to 4.19.76
 * :vytask:`T1709` Update WireGuard to 0.0.20190913
 * :vytask:`T1716` Update Intel NIC drivers to recent versions
-* :vytask:`T1726` Update Linux Firmware binaries to a more recent version 2019-03-14 -> 2019-10-07
+* :vytask:`T1726` Update Linux Firmware binaries to a more recent version
+  2019-03-14 -> 2019-10-07
 * :vytask:`T1728` Update Linux Kernel to 4.19.79
 * :vytask:`T1737` SNMP tab completion missing
 * :vytask:`T1738` Copy SNMP configuration from node to node raises exception
 * :vytask:`T1740` Broken OSPFv2 virtual-link authentication
 * :vytask:`T1742` NHRP unable to commit.
-* :vytask:`T1745` dhcp-server commit fails with "DHCP range stop address x must be greater or equal to the range start address y!" when static mapping has same IP as range stop
+* :vytask:`T1745` dhcp-server commit fails with "DHCP range stop address x must
+  be greater or equal to the range start address y!" when static mapping has
+  same IP as range stop
 * :vytask:`T1749` numeric validator doesn't support multiple ranges
 * :vytask:`T1769` Remove complex SNMPv3 Transport Security Model (TSM)
 * :vytask:`T1772` <regex> constraints in XML are partially broken
 * :vytask:`T1778` Kilobits/Megabits difference in configuration Vyos/FRR
 * :vytask:`T1780` Adding ipsec ike closeaction
-* :vytask:`T1786` disable-dhcp-nameservers is missed in current host_name.py implementation
+* :vytask:`T1786` disable-dhcp-nameservers is missed in current host_name.py
+  implementation
 * :vytask:`T1788` Intel QAT (QuickAssist Technology ) implementation
 * :vytask:`T1792` Update WireGuard to Debian release 0.0.20191012-1
 * :vytask:`T1800` Update Linux Kernel to v4.19.84
 * :vytask:`T1809` Wireless: SSID scan does not work in AP mode
 * :vytask:`T1811` Upgrade from 1.1.8: Config file migration failed: module=l2tp
-* :vytask:`T1812` DHCP: hostnames of clients not resolving after update v1.2.3 -> 1.2-rolling
+* :vytask:`T1812` DHCP: hostnames of clients not resolving after update v1.2.3
+  -> 1.2-rolling
 * :vytask:`T1819` Reboot kills SNMPv3 configuration
 * :vytask:`T1822` Priority inversion wireless interface dhcpv6
 * :vytask:`T1825` Improve DHCP configuration error message
-* :vytask:`T1836` import-conf-mode-commands in vyos-1x/scripts fails to create an xml
+* :vytask:`T1836` import-conf-mode-commands in vyos-1x/scripts fails to create
+  an XML
 * :vytask:`T1839` LLDP shows "VyOS unknown" instead of "VyOS"
 * :vytask:`T1841` PPP ipv6-up.d direcotry missing
 * :vytask:`T1893` igmp-proxy: Do not allow adding unknown interface
@@ -137,12 +266,12 @@ Resolved issues
 
 
 1.2.3
------
+=====
 
 1.2.3 is a maintenance and feature backport release made in September 2019.
 
 New features
-^^^^^^^^^^^^
+------------
 
 * HTTP API
 * :vytask:`T1524` "set service dns forwarding allow-from <IPv4 net|IPv6 net>"
@@ -154,7 +283,7 @@ New features
   multiqueue
 
 Resolved issues
-^^^^^^^^^^^^^^^
+---------------
 
 * :vytask:`T1209` OSPF max-metric values over 100 no longer causes commit
   errors
@@ -194,18 +323,18 @@ Resolved issues
   improvements in name servers and hosts configuration handling
 
 Internals
-^^^^^^^^^
+---------
 
 ``/etc/resolv.conf`` and ``/etc/hosts`` files are now managed by the
 *vyos-hostsd* service that listens on a ZMQ socket for update messages.
 
 1.2.2
------
+=====
 
 1.2.2 is a maintenance release made in July 2019.
 
 New features
-^^^^^^^^^^^^
+------------
 
 * Options for per-interface MSS clamping.
 * BGP extended next-hop capability
@@ -220,7 +349,7 @@ New features
 * A script for querying values from config files
 
 Resolved issues
-^^^^^^^^^^^^^^^
+---------------
 
 * Linux kernel 4.19.54, including a fix for the TCP SACK vulnerability
 * :vytask:`T1371` VRRP health-check scripts now can use arguments
@@ -247,12 +376,12 @@ Resolved issues
   correctly returns a list rather than a string
 
 1.2.1
------
+=====
 
 VyOS 1.2.1 is a maintenance release made in April 2019.
 
 Resolved issues
-^^^^^^^^^^^^^^^
+---------------
 
 * Package updates: kernel 4.19.32, open-vm-tools 10.3, latest Intel NIC drivers
 * :vytask:`T1326` The kernel now includes drivers for various USB serial
@@ -302,4 +431,5 @@ Resolved issues
 Earlier releases
 ================
 
-Release notes for legacy versions (1.1.x, 1.0.x) can be found in the `archived wiki <https://web.archive.org/web/20200212180711/https://wiki.vyos.net/wiki/Category:Release_notes>`_.
+Release notes for legacy versions (1.1.x, 1.0.x) can be found in the
+`archived wiki <https://web.archive.org/web/20200212180711/https://wiki.vyos.net/wiki/Category:Release_notes>`_.

From cfed91c1d3e78ad133d2b18029cc7897156ea4cf Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 29 Nov 2020 13:49:19 +0100
Subject: [PATCH 117/295] ssh: fix command indention

---
 docs/services/ssh.rst | 84 ++++++++++++++++++++++---------------------
 1 file changed, 43 insertions(+), 41 deletions(-)

diff --git a/docs/services/ssh.rst b/docs/services/ssh.rst
index 6da8560f..0153d918 100644
--- a/docs/services/ssh.rst
+++ b/docs/services/ssh.rst
@@ -27,80 +27,82 @@ rendering them susceptible to interception and disclosure using packet
 analysis. The encryption used by SSH is intended to provide confidentiality
 and integrity of data over an unsecured network, such as the Internet.
 
+.. note:: VyOS 1.1 supported login as user ``root``. This has been removed due
+   to tighter security in VyOS 1.2.
+
+.. seealso:: SSH :ref:`ssh_key_based_authentication`
+
 Configuration
 =============
 
 .. cfgcmd:: set service ssh port <port>
 
-Enabling SSH only requires you to specify the port ``<port>`` you want SSH to
-listen on. By default, SSH runs on port 22.
+  Enabling SSH only requires you to specify the port ``<port>`` you want SSH to
+  listen on. By default, SSH runs on port 22.
 
 .. cfgcmd:: set service ssh listen-address <address>
 
-Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be
-defined.
+  Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be
+  defined.
 
 .. cfgcmd:: set service ssh ciphers <cipher>
 
-Define allowed ciphers used for the SSH connection. A number of allowed ciphers
-can be specified, use multiple occurrences to allow multiple ciphers. You can
-choose from the following ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``,
-``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, ``arcfour128``,
-``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``
+  Define allowed ciphers used for the SSH connection. A number of allowed ciphers
+  can be specified, use multiple occurrences to allow multiple ciphers.
+
+  List of supported ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``,
+  ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, ``arcfour128``,
+  ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``
 
 .. cfgcmd:: set service ssh disable-password-authentication
 
-Disable password based authentication. Login via SSH keys only. This hardens
-security!
+  Disable password based authentication. Login via SSH keys only. This hardens
+  security!
 
 .. cfgcmd:: set service ssh disable-host-validation
 
-Disable the host validation through reverse DNS lookups - can speedup login
-time when reverse lookup is not possible.
+  Disable the host validation through reverse DNS lookups - can speedup login
+  time when reverse lookup is not possible.
 
 .. cfgcmd:: set service ssh macs <mac>
 
-Specifies the available :abbr:`MAC (Message Authentication Code)` algorithms.
-The MAC algorithm is used in protocol version 2 for data integrity protection.
-Multiple algorithms can be provided. Supported MACs: ``hmac-md5``,
-``hmac-md5-96``, ``hmac-ripemd160``, ``hmac-sha1``, ``hmac-sha1-96``,
-``hmac-sha2-256``, ``hmac-sha2-512``, ``umac-64@openssh.com``,
-``umac-128@openssh.com``, ``hmac-md5-etm@openssh.com``,
-``hmac-md5-96-etm@openssh.com``, ``hmac-ripemd160-etm@openssh.com``,
-``hmac-sha1-etm@openssh.com``, ``hmac-sha1-96-etm@openssh.com``,
-``hmac-sha2-256-etm@openssh.com``, ``hmac-sha2-512-etm@openssh.com``,
-``umac-64-etm@openssh.com``, ``umac-128-etm@openssh.com``
+  Specifies the available :abbr:`MAC (Message Authentication Code)` algorithms.
+  The MAC algorithm is used in protocol version 2 for data integrity protection.
+  Multiple algorithms can be provided.
 
-.. note:: VyOS 1.1 supported login as user ``root``. This has been removed due
-   to tighter security in VyOS 1.2.
+  List of supported MACs: ``hmac-md5``, ``hmac-md5-96``, ``hmac-ripemd160``,
+  ``hmac-sha1``, ``hmac-sha1-96``, ``hmac-sha2-256``, ``hmac-sha2-512``,
+  ``umac-64@openssh.com``, ``umac-128@openssh.com``, ``hmac-md5-etm@openssh.com``,
+  ``hmac-md5-96-etm@openssh.com``, ``hmac-ripemd160-etm@openssh.com``,
+  ``hmac-sha1-etm@openssh.com``, ``hmac-sha1-96-etm@openssh.com``,
+  ``hmac-sha2-256-etm@openssh.com``, ``hmac-sha2-512-etm@openssh.com``,
+  ``umac-64-etm@openssh.com``, ``umac-128-etm@openssh.com``
 
 .. cfgcmd:: set service ssh access-control <allow | deny> <group | user> <name>
 
-Add access-control directive to allow or deny users and groups. Directives are
-processed in the following order of precedence: ``deny-users``, ``allow-users``,
-``deny-groups`` and ``allow-groups``.
+  Add access-control directive to allow or deny users and groups. Directives
+  are processed in the following order of precedence: ``deny-users``,
+  ``allow-users``, ``deny-groups`` and ``allow-groups``.
 
 .. cfgcmd:: set service ssh client-keepalive-interval <interval>
 
-Specify timeout interval for keepalive message in seconds.
+  Specify timeout interval for keepalive message in seconds.
 
 .. cfgcmd:: set service ssh key-exchange <kex>
 
-Specify allowed :abbr:`KEX (Key Exchange)` algorithms.
-Supported algorithms: ``diffie-hellman-group1-sha1``,
-``diffie-hellman-group14-sha1``, ``diffie-hellman-group14-sha256``,
-``diffie-hellman-group16-sha512``, ``diffie-hellman-group18-sha512``,
-``diffie-hellman-group-exchange-sha1``,
-``diffie-hellman-group-exchange-sha256``, ``ecdh-sha2-nistp256``,
-``ecdh-sha2-nistp384``, ``ecdh-sha2-nistp521``, ``curve25519-sha256`` and
-``curve25519-sha256@libssh.org``.
+  Specify allowed :abbr:`KEX (Key Exchange)` algorithms.
+
+  List of supported algorithms: ``diffie-hellman-group1-sha1``,
+  ``diffie-hellman-group14-sha1``, ``diffie-hellman-group14-sha256``,
+  ``diffie-hellman-group16-sha512``, ``diffie-hellman-group18-sha512``,
+  ``diffie-hellman-group-exchange-sha1``, ``diffie-hellman-group-exchange-sha256``,
+  ``ecdh-sha2-nistp256``, ``ecdh-sha2-nistp384``, ``ecdh-sha2-nistp521``,
+  ``curve25519-sha256`` and ``curve25519-sha256@libssh.org``.
 
 .. cfgcmd:: set service ssh loglevel <quiet | fatal | error | info | verbose>
 
-Set the ``sshd`` log level. The default is ``info``.
+  Set the ``sshd`` log level. The default is ``info``.
 
 .. cfgcmd:: set service ssh vrf <name>
 
-Specify name of the :abbr:`VRF (Virtual Routing and Forwarding)` instance.
-
-.. seealso:: SSH :ref:`ssh_key_based_authentication`
+  Specify name of the :abbr:`VRF (Virtual Routing and Forwarding)` instance.

From 7710c7e959bffdcbdabef559dc0d89e2d4befbd5 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 29 Nov 2020 13:49:30 +0100
Subject: [PATCH 118/295] ntp: add documentation of pool option

---
 docs/system/ntp.rst | 33 +++++++++++++++++++++++++++------
 1 file changed, 27 insertions(+), 6 deletions(-)

diff --git a/docs/system/ntp.rst b/docs/system/ntp.rst
index 5fd1837f..223447f5 100644
--- a/docs/system/ntp.rst
+++ b/docs/system/ntp.rst
@@ -40,17 +40,38 @@ Configuration
 
    There are 3 default NTP server set. You are able to change them.
 
-   * 0.pool.ntp.org
-   * 1.pool.ntp.org
-   * 2.pool.ntp.org
+   * ``0.pool.ntp.org``
+   * ``1.pool.ntp.org``
+   * ``2.pool.ntp.org``
+
+.. cfgcmd:: set system ntp server <address> <noselect | pool | preempt | prefer>
+
+   Configure one or more attributes to the given NTP server.
+
+   * ``noselect`` marks the server as unused, except for display purposes. The
+     server is discarded by the selection algorithm.
+
+   * ``pool`` mobilizes persistent client mode association with a number of
+     remote servers.
+
+   * ``preempt`` a preemptable association is expendable.
+
+   * ``prefer`` marks the server as preferred. All other things being equal,
+     this host will be chosen for synchronization among a set of correctly
+     operating hosts.
 
 .. cfgcmd:: set system ntp listen-address <address>
 
-   Setup VyOS as an NTP responder, you must specify the `<address>` and
-   optionally the permitted clients. Multiple listen addresses can be
-   configured.
+   NTP process will only listen on the specified IP address. You must specify
+   the `<address>` and optionally the permitted clients. Multiple listen
+   addresses can be configured.
 
 .. cfgcmd:: set system ntp allow-clients address <address>
 
    List of networks or client addresses permitted to contact this NTP server.
+
    Multiple networks can be configured.
+
+.. cfgcmd:: set system ntp vrf <name>
+
+  Specify name of the :abbr:`VRF (Virtual Routing and Forwarding)` instance.

From adf00431bcc81e270687882e672d59dd2c65515a Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Sun, 29 Nov 2020 19:05:51 +0100
Subject: [PATCH 119/295] Templates: move draw.io template to _inlcude folder

---
 docs/.gitignore                            | 1 -
 docs/_include/draw.io/pbr_example_1.drawio | 1 +
 docs/_include/draw.io/vpn_s2s_ikev2.drawio | 1 +
 3 files changed, 2 insertions(+), 1 deletion(-)
 delete mode 100644 docs/.gitignore
 create mode 100644 docs/_include/draw.io/pbr_example_1.drawio
 create mode 100644 docs/_include/draw.io/vpn_s2s_ikev2.drawio

diff --git a/docs/.gitignore b/docs/.gitignore
deleted file mode 100644
index 69fa449d..00000000
--- a/docs/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-_build/
diff --git a/docs/_include/draw.io/pbr_example_1.drawio b/docs/_include/draw.io/pbr_example_1.drawio
new file mode 100644
index 00000000..0d496572
--- /dev/null
+++ b/docs/_include/draw.io/pbr_example_1.drawio
@@ -0,0 +1 @@
+<mxfile modified="2019-06-20T09:46:15.910Z" host="www.draw.io" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" etag="pgW5M9QC_GIVY4GNWbyF" version="10.7.9" type="device"><diagram name="Page-1" id="c37626ed-c26b-45fb-9056-f9ebc6bb27b6">7VrbcqM4EP0aP4ZCgLk8xkk8u1UzW97K7FyepmRQsGoEYoUc2/P1K4G4CLBNJo7j2rLzAGpJrVafPq2WnYl9l2w/MJitPtEIkYllRtuJfT+xLMtzTPGQkl0pCQKnFMQMR6UINIJH/AspoZoXr3GEcm0gp5RwnOnCkKYpCrkmg4zRjT7siRJ91QzGqCd4DCHpS7/iiK+UFJhm0/EHwvFKLe1PVccShj9jRtepWm9i2U/Fp+xOYKVLjc9XMKKblsh+mNh3jFJeviXbO0Skbyu3lfPme3pruxlK+ZgJn4MU/ArY39bX3eKfT37yffHh8w2wSzXPkKxRtQ+XCIWzCD9Lq/lOecr9dy1NnXG05TeQ4Did2LdiBEFPXDxET+H+lN/kBciyD9jZtpkp3mL1LFbIM5h2ZcuuQGoctGPUUn8+LkClSbimVKYvIMS9RYVsyDghLryiS9/HUa/zCwgswzSAMcI5YxxhaZZYK54Q8QZE3zNiHAu2fYRLRBY0xxxT4Y/7JeWcJmKActB9KMIYMSEgcuSsJtcdJZQVait6NUpv1VxOM+klzujPmsRWLWlpME3fnEsEnjAhQ5prkspBEcxXKFIN0ZPJ7SXbWCZCA9PcM7DISrkRErqOaj9I49B2L0lBTX2RUhFNEGc7MURNuAkCv5yj0qkTlM1NKzf5SrZqpSVgqbQLVT6Ma91NThAvKi28JEU4r04RrLDzgnOEdZwG58kRJ/bUKZKEZYzwzjVJnDNJeO6lJQnLHUgSHcBRJAov1cxRnIjdPjSiGUqjW1nPSZgJzHMcCmErSNAW82+t9+/S58ZUte63CoKisVMNGa0tBGf2fO66fWSjKfIjZygWXHdmzee9uLFrIOWmDsMofEDXLEQHvBcMw92Csyo622hWMoYI5PhZN2MIYbXCguIiK1TR5HeiyfV94VZNS7kDNbFdY/Z0TXVdoK+LQxYj3tMlsIe71rBMDsgPmd1Zyp0GaqnR1gnz9CnipbSjYUKNxyvIEZyNHOb/jxzWu5LD87wqgOs48w3fbj6/SxXPORtVukv1qPI2cQ+s43HfPTFDnIfUEIe6OOdz9dRDXTtwO7Fq2q4feEOx2hzevQLgaPUxXEkUhUf75G9qgpAmkqA1y+YwwUT6/gtiEUyhEqsvQ4B1qruDr0eq5Vcwt9li+85AZVCVCyevDGxwPAhkEZft9YD65gcuq+Hmiz3jAZ0AU98Z8AzwBxIJqDLJ6WumnmO+fLz9C9RX8iUbLvH3lfMbZbUs6FPKEkiGS3rg+obA2xD7msuCcE8R38Fos8IcPWawyNUbwVWdlSPZoLMPjOOHM1CLT+Vfj+gpTVE1WZkO9hJ4FOUOxPTBM+nMsTR0Rx+VaQU4WZFrf8A0+pEhhrMVYpDkRtYpMS4j754cM6XGcbUEMXCj8vw+oN5b4TniOnXF8xCeUx3P6TvjaY8ohd78FARmtb9LOgb7l6PiGDTPcwz612Pw9yl4/Gp25liqflS85s0Xg3aZ5yAYcXu4AnoRB6FoNj9ml18hNP8xYD/8Bw==</diagram></mxfile>
\ No newline at end of file
diff --git a/docs/_include/draw.io/vpn_s2s_ikev2.drawio b/docs/_include/draw.io/vpn_s2s_ikev2.drawio
new file mode 100644
index 00000000..b240c191
--- /dev/null
+++ b/docs/_include/draw.io/vpn_s2s_ikev2.drawio
@@ -0,0 +1 @@
+<mxfile modified="2019-07-18T20:12:29.116Z" host="www.draw.io" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" etag="se-JT0q6YZwCfwyGJaAA" version="10.9.8" type="device"><diagram name="Page-1" id="c37626ed-c26b-45fb-9056-f9ebc6bb27b6">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</diagram></mxfile>
\ No newline at end of file

From 371bf8185f3cd0628969a8603aa92503b2fc3853 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Sun, 29 Nov 2020 19:08:35 +0100
Subject: [PATCH 120/295] rearange changelog, cli, contributing

---
 .gitignore                                    |   3 +
 docs/automation/index.rst                     |   9 ++
 docs/changelog/1.2.1.rst                      |  52 ++++++++
 docs/changelog/1.2.2.rst                      |  46 +++++++
 docs/changelog/1.2.3.rst                      |  62 ++++++++++
 docs/changelog/1.2.4.rst                      |  65 ++++++++++
 docs/changelog/1.2.5.rst                      |  60 +++++++++
 docs/changelog/index.rst                      |  14 +++
 docs/cli.rst                                  |  10 +-
 docs/contributing/documentation.rst           |  89 ++++++++++++--
 docs/contributing/index.rst                   |  13 ++
 docs/copyright.rst                            |  19 +++
 docs/draw.io/pbr_example_1.drawio             |   1 -
 docs/draw.io/vpn_s2s_ikev2.drawio             |   1 -
 docs/index.rst                                | 114 +++++-------------
 docs/installation/index.rst                   |  18 +++
 docs/{ => installation}/install.rst           |   0
 docs/{ => introducing}/about.rst              |   4 +-
 docs/{ => introducing}/history.rst            |   0
 docs/introducing/releases.rst                 |  29 +++++
 .../index.rst}                                |   0
 21 files changed, 504 insertions(+), 105 deletions(-)
 create mode 100644 docs/automation/index.rst
 create mode 100644 docs/changelog/1.2.1.rst
 create mode 100644 docs/changelog/1.2.2.rst
 create mode 100644 docs/changelog/1.2.3.rst
 create mode 100644 docs/changelog/1.2.4.rst
 create mode 100644 docs/changelog/1.2.5.rst
 create mode 100644 docs/changelog/index.rst
 create mode 100644 docs/contributing/index.rst
 create mode 100644 docs/copyright.rst
 delete mode 100644 docs/draw.io/pbr_example_1.drawio
 delete mode 100644 docs/draw.io/vpn_s2s_ikev2.drawio
 create mode 100644 docs/installation/index.rst
 rename docs/{ => installation}/install.rst (100%)
 rename docs/{ => introducing}/about.rst (86%)
 rename docs/{ => introducing}/history.rst (100%)
 create mode 100644 docs/introducing/releases.rst
 rename docs/{troubleshooting.rst => troubleshooting/index.rst} (100%)

diff --git a/.gitignore b/.gitignore
index 06d7c4cd..27188bd2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,6 @@
+# Sphinx
+_build/
+
 # python virtualenv
 venv/
 ENV/
diff --git a/docs/automation/index.rst b/docs/automation/index.rst
new file mode 100644
index 00000000..a3df9bc0
--- /dev/null
+++ b/docs/automation/index.rst
@@ -0,0 +1,9 @@
+###############
+VyOS Automation
+###############
+
+
+  * Ansible
+  * Saltstack
+  * HTTP-API
+  * startup scripts
\ No newline at end of file
diff --git a/docs/changelog/1.2.1.rst b/docs/changelog/1.2.1.rst
new file mode 100644
index 00000000..4f22dd0a
--- /dev/null
+++ b/docs/changelog/1.2.1.rst
@@ -0,0 +1,52 @@
+1.2.1
+=====
+
+VyOS 1.2.1 is a maintenance release made in April 2019.
+
+Resolved issues
+---------------
+
+* Package updates: kernel 4.19.32, open-vm-tools 10.3, latest Intel NIC drivers
+* :vytask:`T1326` The kernel now includes drivers for various USB serial
+  adapters, which allows people to add a serial console to a machine without
+  onboard RS232, or connect to something else from the router
+* The collection of network card firmware is now much more extensive
+* :vytask:`T1271` VRRP now correctly uses a virtual rather than physical MAC
+  addresses in the RFC-compliant mode
+* :vytask:`T1330` DHCP WPAD URL option works correctly again
+* :vytask:`T1312` Many to many NAT rules now can use source/destination and
+  translation networks of non-matching size. If 1:1 network bits translation is
+  desired, it's now users responsibility to check if prefix length matches.
+* :vytask:`T1290` IPv6 network prefix translation is fixed
+* :vytask:`T1308` Non-alphanumeric characters such as ``>`` can now be safely
+  used in PPPoE passwords
+* :vytask:`T1305` ``show | commands`` no longer fails when a config section ends
+  with a leaf node such as ``timezone`` in ``show system | commands``
+* :vytask:`T1235` ``show | commands`` correctly works in config mode now
+* :vytask:`T1298` VTI is now compatible with the DHCP-interface IPsec option
+* :vytask:`T1277` ``show dhcp server statistics`` command was broken in latest
+  Crux
+* :vytask:`T1261` An issue with TFTP server refusing to listen on addresses
+  other than loopback was fixed
+* :vytask:`T1224` Template issue that might cause UDP broadcast relay fail to
+  start is fixed
+* :vytask:`T1067` VXLAN value validation is improved
+* :vytask:`T1211` Blank hostnames in DHCP updates no longer can crash DNS
+  forwarding
+* :vytask:`T1322` Correct configuration is now generated for DHCPv6 relays with
+  more than one upstream interface
+* :vytask:`T1234` ``relay-agents-packets`` option works correctly now
+* :vytask:`T1231` Dynamic DNS data is now cleaned on configuration change
+* :vytask:`T1282` Remote Syslog can now use a fully qualified domain name
+* :vytask:`T1279` ACPI power off works again
+* :vytask:`T1247` Negation in WAN load balancing rules works again
+* :vytask:`T1218` FRR staticd now starts on boot correctly
+* :vytask:`T1296` The installer now correctly detects SD card devices
+* :vytask:`T1225` Wireguard peers can be disabled now
+* :vytask:`T1217` The issue with Wireguard interfaces impossible to delete
+  is fixed
+* :vytask:`T1160` Unintended IPv6 access is fixed in SNMP configuration
+* :vytask:`T1060` It's now possible to exclude hosts from the transparent
+  web proxy
+* :vytask:`T484` An issue with rules impossible to delete from the zone-based
+  firewall is fixed
\ No newline at end of file
diff --git a/docs/changelog/1.2.2.rst b/docs/changelog/1.2.2.rst
new file mode 100644
index 00000000..17ba941f
--- /dev/null
+++ b/docs/changelog/1.2.2.rst
@@ -0,0 +1,46 @@
+1.2.2
+=====
+
+1.2.2 is a maintenance release made in July 2019.
+
+New features
+------------
+
+* Options for per-interface MSS clamping.
+* BGP extended next-hop capability
+* Relaxed BGP multipath option
+* Internal and external options for "remote-as" (accept any AS as long as it's
+  the same to this router or different, respectively)
+* "Unnumbered" (interface-based) BGP peers
+* BGP no-prepend option
+* Additive BGP community option
+* OSPFv3 network type option
+* Custom arguments for VRRP scripts
+* A script for querying values from config files
+
+Resolved issues
+---------------
+
+* Linux kernel 4.19.54, including a fix for the TCP SACK vulnerability
+* :vytask:`T1371` VRRP health-check scripts now can use arguments
+* :vytask:`T1497` DNS server addresses coming from a DHCP server are now
+  correctly propagated to resolv.conf
+* :vytask:`T1469` Domain-specific name servers in DNS forwarding are now used
+  for recursive queries
+* :vytask:`T1433` ``run show dhcpv6 server leases`` now display leases correctly
+* :vytask:`T1461` Deleting ``firewall options`` node no longer causes errors
+* :vytask:`T1458` Correct hostname is sent to remote syslog again
+* :vytask:`T1438` Board serial number from DMI is correctly displayed in
+  ``show version``
+* :vytask:`T1358`, :vytask:`T1355`, :vytask:`T1294` Multiple corrections in
+  remote syslog config
+* :vytask:`T1255` Fixed missing newline in ``/etc/hosts``
+* :vytask:`T1174` ``system domain-name`` is correctly included in
+  ``/etc/resolv.conf``
+* :vytask:`T1465` Fixed priority inversion in ``interfaces vti vtiX ip``
+  settings
+* :vytask:`T1446` Fixed errors when installing with RAID1 on UEFI machines
+* :vytask:`T1387` Fixed an error on disabling an interfaces that has no address
+* :vytask:`T1367` Fixed deleting VLAN interface with non-default MTU
+* :vytask:`T1505` vyos.config ``return_effective_values()`` function now
+  correctly returns a list rather than a string
\ No newline at end of file
diff --git a/docs/changelog/1.2.3.rst b/docs/changelog/1.2.3.rst
new file mode 100644
index 00000000..653beec1
--- /dev/null
+++ b/docs/changelog/1.2.3.rst
@@ -0,0 +1,62 @@
+1.2.3
+=====
+
+1.2.3 is a maintenance and feature backport release made in September 2019.
+
+New features
+------------
+
+* HTTP API
+* :vytask:`T1524` "set service dns forwarding allow-from <IPv4 net|IPv6 net>"
+  option for limiting queries to specific client networks
+* :vytask:`T1503` Functions for checking if a commit is in progress
+* :vytask:`T1543` "set system contig-mangement commit-archive source-address"
+  option
+* :vytask:`T1554` Intel NIC drivers now support receive side scaling and
+  multiqueue
+
+Resolved issues
+---------------
+
+* :vytask:`T1209` OSPF max-metric values over 100 no longer causes commit
+  errors
+* :vytask:`T1333` Fixes issue with DNS forwarding not performing recursive
+  lookups on domain specific forwarders
+* :vytask:`T1362` Special characters in VRRP passwords are handled correctly
+* :vytask:`T1377` BGP weight is applied properly
+* :vytask:`T1420` Fixed permission for log files
+* :vytask:`T1425` Wireguard interfaces now support /31 addresses
+* :vytask:`T1428` Wireguard correctly handles firewall marks
+* :vytask:`T1439` DHCPv6 static mappings now work correctly
+* :vytask:`T1450` Flood ping commands now works correctly
+* :vytask:`T1460` Op mode "show firewall" commands now support counters longer
+  than 8 digits (T1460)
+* :vytask:`T1465` Fixed priority inversion in VTI commands
+* :vytask:`T1468` Fixed remote-as check in the BGP route-reflector-client option
+* :vytask:`T1472` It's now possible to re-create VRRP groups with RFC
+  compatibility mode enabled
+* :vytask:`T1527` Fixed a typo in DHCPv6 server help strings
+* :vytask:`T1529` Unnumbered BGP peers now support VLAN interfaces
+* :vytask:`T1530` Fixed "set system syslog global archive file" command
+* :vytask:`T1531` Multiple fixes in cluster configuration scripts
+* :vytask:`T1537` Fixed missing help text for "service dns"
+* :vytask:`T1541` Fixed input validation in DHCPv6 relay options
+* :vytask:`T1551` It's now possible to create a QinQ interface and a firewall
+  assigned to it in one commit
+* :vytask:`T1559` URL filtering now uses correct rule database path and works
+  again
+* :vytask:`T1579` "show log vpn ipsec" command works again
+* :vytask:`T1576` "show arp interface <intf>" command works again
+* :vytask:`T1605` Fixed regression in L2TP/IPsec server
+* :vytask:`T1613` Netflow/sFlow captures IPv6 traffic correctly
+* :vytask:`T1616` "renew dhcpv6" command now works from op mode
+* :vytask:`T1642` BGP remove-private-as option iBGP vs eBGP check works
+  correctly now
+* :vytask:`T1540`, :vytask:`T1360`, :vytask:`T1264`, :vytask:`T1623` Multiple
+  improvements in name servers and hosts configuration handling
+
+Internals
+---------
+
+``/etc/resolv.conf`` and ``/etc/hosts`` files are now managed by the
+*vyos-hostsd* service that listens on a ZMQ socket for update messages.
\ No newline at end of file
diff --git a/docs/changelog/1.2.4.rst b/docs/changelog/1.2.4.rst
new file mode 100644
index 00000000..397c9bb9
--- /dev/null
+++ b/docs/changelog/1.2.4.rst
@@ -0,0 +1,65 @@
+1.2.4
+=====
+
+1.2.4 is a maintenance release made in December 2019.
+
+Resolved issues
+---------------
+
+* :vytask:`T258` Can not configure wan load-balancing on vyos-1.2
+* :vytask:`T818` SNMP v3 - remove required engineid from user node
+* :vytask:`T1030` Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4)
+* :vytask:`T1183` BFD Support via FRR
+* :vytask:`T1299` Allow SNMPd to be extended with custom scripts
+* :vytask:`T1351` accel-pppoe adding CIDR based IP pool option
+* :vytask:`T1391` In route-map set community additive
+* :vytask:`T1394` syslog systemd and host_name.py race condition
+* :vytask:`T1401` Copying files with the FTP protocol fails if the password contains special characters
+* :vytask:`T1421` OpenVPN client push-route stopped working, needs added quotes to fix
+* :vytask:`T1430` Add options for custom DHCP client-id and hostname
+* :vytask:`T1447` Python subprocess called without import in host_name.py
+* :vytask:`T1470` improve output of "show dhcpv6 server leases"
+* :vytask:`T1485` Enable 'AdvIntervalOpt' option in for radvd.conf
+* :vytask:`T1496` Separate rolling release and LTS kernel builds
+* :vytask:`T1560` "set load-balancing wan rule 0" causes segfault and prevents load balancing from starting
+* :vytask:`T1568` strip-private command improvement for additional masking of IPv6 and MAC address
+* :vytask:`T1578` completion offers "show table", but show table does not exist
+* :vytask:`T1593` Support ip6gre
+* :vytask:`T1597` /usr/sbin/rsyslogd after deleting "system syslog"
+* :vytask:`T1638` vyos-hostsd not setting system domain name
+* :vytask:`T1678` hostfile-update missing line feed
+* :vytask:`T1694` NTPd: Do not listen on all interfaces by default
+* :vytask:`T1701` Delete domain-name and domain-search won't work
+* :vytask:`T1705` High CPU usage by bgpd when snmp is active
+* :vytask:`T1707` DHCP static mapping and exclude address not working
+* :vytask:`T1708` Update Rolling Release Kernel to 4.19.76
+* :vytask:`T1709` Update WireGuard to 0.0.20190913
+* :vytask:`T1716` Update Intel NIC drivers to recent versions
+* :vytask:`T1726` Update Linux Firmware binaries to a more recent version 2019-03-14 -> 2019-10-07
+* :vytask:`T1728` Update Linux Kernel to 4.19.79
+* :vytask:`T1737` SNMP tab completion missing
+* :vytask:`T1738` Copy SNMP configuration from node to node raises exception
+* :vytask:`T1740` Broken OSPFv2 virtual-link authentication
+* :vytask:`T1742` NHRP unable to commit.
+* :vytask:`T1745` dhcp-server commit fails with "DHCP range stop address x must be greater or equal to the range start address y!" when static mapping has same IP as range stop
+* :vytask:`T1749` numeric validator doesn't support multiple ranges
+* :vytask:`T1769` Remove complex SNMPv3 Transport Security Model (TSM)
+* :vytask:`T1772` <regex> constraints in XML are partially broken
+* :vytask:`T1778` Kilobits/Megabits difference in configuration Vyos/FRR
+* :vytask:`T1780` Adding ipsec ike closeaction
+* :vytask:`T1786` disable-dhcp-nameservers is missed in current host_name.py implementation
+* :vytask:`T1788` Intel QAT (QuickAssist Technology ) implementation
+* :vytask:`T1792` Update WireGuard to Debian release 0.0.20191012-1
+* :vytask:`T1800` Update Linux Kernel to v4.19.84
+* :vytask:`T1809` Wireless: SSID scan does not work in AP mode
+* :vytask:`T1811` Upgrade from 1.1.8: Config file migration failed: module=l2tp
+* :vytask:`T1812` DHCP: hostnames of clients not resolving after update v1.2.3 -> 1.2-rolling
+* :vytask:`T1819` Reboot kills SNMPv3 configuration
+* :vytask:`T1822` Priority inversion wireless interface dhcpv6
+* :vytask:`T1825` Improve DHCP configuration error message
+* :vytask:`T1836` import-conf-mode-commands in vyos-1x/scripts fails to create an xml
+* :vytask:`T1839` LLDP shows "VyOS unknown" instead of "VyOS"
+* :vytask:`T1841` PPP ipv6-up.d direcotry missing
+* :vytask:`T1893` igmp-proxy: Do not allow adding unknown interface
+* :vytask:`T1903` Implementation udev predefined interface naming
+* :vytask:`T1904` update eth1 and eth2 link files for the vep4600
\ No newline at end of file
diff --git a/docs/changelog/1.2.5.rst b/docs/changelog/1.2.5.rst
new file mode 100644
index 00000000..231e92f2
--- /dev/null
+++ b/docs/changelog/1.2.5.rst
@@ -0,0 +1,60 @@
+1.2.5
+=====
+
+1.2.5 is a maintenance release made in April 2020.
+
+Resolved issues
+---------------
+
+* :vytask:`1020` OSPF Stops distributing default route after a while
+* :vytask:`1228` pppoe default-route force option not working (Rel 1.2.0-rc11)
+* :vytask:`1301` bgp peer-groups don't work when "no-ipv4-unicast" is enabled.
+* :vytask:`1341` Adding rate-limiter for pppoe server users
+* :vytask:`1376` Incorrect DHCP lease counting
+* :vytask:`1392` Large firewall rulesets cause the system to lose configuration and crash at startup
+* :vytask:`1416` 2 dhcp server run in failover mode can't sync hostname with each other
+* :vytask:`1452` accel-pppoe - add vendor option to shaper
+* :vytask:`1490` BGP configuration (is lost|not applied) when updating 1.1.8 -> 1.2.1
+* :vytask:`1780` Adding ipsec ike closeaction
+* :vytask:`1803` Unbind NTP while it's not requested...
+* :vytask:`1821` "authentication mode radius" has no effect for PPPoE server
+* :vytask:`1827` Increase default gc_thresh
+* :vytask:`1828` Missing completion helper for "set system syslog host 192.0.2.1 facility all protocol"
+* :vytask:`1832` radvd adding feature DNSSL branch.example.com example.com to existing package
+* :vytask:`1837` PPPoE unrecognized option 'replacedefaultroute'
+* :vytask:`1851` wireguard - changing the pubkey on an existing peer seems to destroy the running config.
+* :vytask:`1858` l2tp: Delete depricated outside-nexthop and add gateway-address
+* :vytask:`1864` Lower IPSec DPD timeout lower limit from 10s -> 2s
+* :vytask:`1879` Extend Dynamic DNS XML definition value help strings and validators
+* :vytask:`1881` Execute permissions are removed from custom SNMP scripts at commit time
+* :vytask:`1884` Keeping VRRP transition-script native behaviour and adding stop-script
+* :vytask:`1891` Router announcements broken on boot
+* :vytask:`1900` Enable SNMP for VRRP.
+* :vytask:`1902` Add redistribute non main table in bgp
+* :vytask:`1909` Incorrect behaviour of static routes with overlapping networks
+* :vytask:`1913` "system ipv6 blacklist" command has no effect
+* :vytask:`1914` IPv6 multipath hash policy does not apply
+* :vytask:`1917` Update WireGuard to Debian release 0.0.20191219-1
+* :vytask:`1934` Change default hostname when deploy from OVA without params.
+* :vytask:`1935` NIC identification and usage problem in Hyper-V environments
+* :vytask:`1936` pppoe-server CLI control features
+* :vytask:`1964` SNMP Script-extensions allows names with spaces, but commit fails
+* :vytask:`1967` BGP parameter "enforce-first-as" does not work anymore
+* :vytask:`1970` Correct adding interfaces on boot
+* :vytask:`1971` Missing modules in initrd.img for PXE boot
+* :vytask:`1998` Update FRR to 7.3
+* :vytask:`2001` Error when router reboot
+* :vytask:`2032` Monitor bandwidth bits
+* :vytask:`2059` Set source-validation on bond vif don't work
+* :vytask:`2066` PPPoE interface can be created multiple times - last wins
+* :vytask:`2069` PPPoE-client does not works with service-name option
+* :vytask:`2077` ISO build from crux branch is failing
+* :vytask:`2079` Update Linux Kernel to v4.19.106
+* :vytask:`2087` Add maxfail 0 option to pppoe configuration.
+* :vytask:`2100` BGP route adverisement wih checks rib
+* :vytask:`2120` "reset vpn ipsec-peer" doesn't work with named peers
+* :vytask:`2197` Cant add vif-s interface into a bridge
+* :vytask:`2228` WireGuard does not allow ports < 1024 to be used
+* :vytask:`2252` HTTP API add system image can return '504 Gateway Time-out'
+* :vytask:`2272` Set system flow-accounting disable-imt has syntax error
+* :vytask:`2276` PPPoE server vulnerability
\ No newline at end of file
diff --git a/docs/changelog/index.rst b/docs/changelog/index.rst
new file mode 100644
index 00000000..26262932
--- /dev/null
+++ b/docs/changelog/index.rst
@@ -0,0 +1,14 @@
+#########
+Changelog
+#########
+
+
+.. toctree::
+   :maxdepth: 1
+   :includehidden:
+
+   1.2.5
+   1.2.4
+   1.2.3
+   1.2.2
+   1.2.1
diff --git a/docs/cli.rst b/docs/cli.rst
index 4694cc5d..b138b18b 100644
--- a/docs/cli.rst
+++ b/docs/cli.rst
@@ -1,14 +1,14 @@
 .. _cli:
 
-###
-CLI
-###
+#####################
+Comand Line Interface
+#####################
 
 The VyOS :abbr:`CLI (Command-Line Interface)` comprises an operational and a
 configuration mode.
 
 Operational Mode
-================
+################
 
 Operational mode allows for commands to perform operational system tasks and
 view system and service status, while configuration mode allows for the
@@ -73,7 +73,7 @@ When viewing in page mode the following commands are available:
    in the event that the output has lines which exceed the terminal size.
 
 Configuration Mode
-==================
+##################
 
 The list of all operational level commands is available at
 :ref:`configuration_level_commands`.
diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index e8d1dba5..9dd0c495 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -1,7 +1,8 @@
 .. _documentation:
 
+#############
 Documentation
-=============
+#############
 
 As most software projects we also have a lack in documentation. We encourage
 every VyOS user to help us improve our documentation. This will not only be
@@ -15,7 +16,7 @@ guide how to do so.
    documentation.
 
 Forking Workflow
-----------------
+================
 
 The Forking Workflow is fundamentally different than other popular Git
 workflows. Instead of using a single server-side repository to act as the
@@ -102,17 +103,20 @@ access to the official codebase.
   push origin master``
 
 Style Guide
------------
+===========
 
-Sections
-^^^^^^^^
+Formating and Sphinxmarkup
+--------------------------
+
+TOC Level
+^^^^^^^^^^
 
 We use the following syntax for Headlines.
 
 .. code-block:: none
 
   #####
-  Parts
+  Title
   #####
 
   ********
@@ -159,16 +163,17 @@ render the documentation.
 cfgcmd
 """"""
 
-When documenting CLI commands use the ``.. cfgcmd::`` directive for all
-configuration mode commands. An explanation of the described command should be
-added below this statement.
+When documenting CLI commands use the ``.. cfgcmd::`` directive
+for all configuration mode commands. An explanation of the described command
+should be added below this statement.
+Replace all variable contents with <value> or somthing similar.
 
 With those custom commands it will be possible to render them in a more
 descriptive way in the resulting HTML/PDF manual.
 
 .. code-block:: none
 
-  .. cfgcmd:: set protocols static arp 192.0.2.100 hwaddr 00:53:27:de:23:aa
+  .. cfgcmd:: protocols static arp <ipaddress> hwaddr <macaddress>
 
      This will configure a static ARP entry always resolving `192.0.2.100` to
      `00:53:27:de:23:aa`.
@@ -250,6 +255,70 @@ URL. This is heavily used in the :ref:`release-notes` section.
   * :vytask:`T1605` Fixed regression in L2TP/IPsec server
   * :vytask:`T1613` Netflow/sFlow captures IPv6 traffic correctly
 
+Page content
+------------
+
+The documentation have 3 different types of pages, the same kind of pages must 
+have the same structure to achieve a recognition factor.
+
+For all *.rst files must follow the same TOC Level syntax and have to start with
+
+.. code-block::
+
+   #####
+   Titel
+   #####
+
+Configuration mode pages
+^^^^^^^^^^^^^^^^^^^^^^^^
+
+A configuration mode article covers a specific level of a command.
+The exact level depends on the command.
+
+For example:
+
+  * ``set zone-policy`` is written in ``zone-policy/index.rst``
+  * ``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``
+
+The article starts with a short intruducing about the command or the technologie.
+Include some helpfull links or background informations.
+
+After this a optional section follows. Some commands have requirements like the
+compatible hardware (e.g. Wifi) or some commands you have to set before. For
+example it is recommended to set a route-map before configure bgp.
+
+In the configuration part of the page all possible confiuration options
+should be documented. Use ``.. cfgcmd::`` like described above.
+
+Related Operation command must be documented in the next part of the articel.
+Use ``::opcmd..`` for these commands.
+
+If there some troubleshooting guides releated to the commands. Explain it in the
+next optional part.
+
+Examples:
+
+   * ssh
+   
+
+
+Operation mode pages
+^^^^^^^^^^^^^^^^^^^^
+
+Operation mode commands, which didn't fit in a related configuraton mode command
+must documented in this part of the documentation.
+
+.. todo::
+
+  create structure
+
+
+Anything else
+^^^^^^^^^^^^^
+
+Anything else what is not a configuration or a operation command have no
+predefined structure.
+
 
 .. _Sphinx-doc: https://www.sphinx-doc.org
 .. _reStructuredText: http://www.sphinx-doc.org/en/master/usage/restructuredtext/index.html
diff --git a/docs/contributing/index.rst b/docs/contributing/index.rst
new file mode 100644
index 00000000..c3bb2688
--- /dev/null
+++ b/docs/contributing/index.rst
@@ -0,0 +1,13 @@
+############
+Contributing
+############
+
+.. toctree::
+   :maxdepth: 2
+
+   build-vyos
+   debugging
+   development
+   documentation
+   issues-features
+   upstream-packages
\ No newline at end of file
diff --git a/docs/copyright.rst b/docs/copyright.rst
new file mode 100644
index 00000000..beebc2a2
--- /dev/null
+++ b/docs/copyright.rst
@@ -0,0 +1,19 @@
+################
+Copyright Notice
+################
+
+Copyright (C) 2018-2020 VyOS maintainers and contributors
+
+Permission is granted to make and distribute verbatim copies of this manual
+provided the copyright notice and this permission notice are preserved on all
+copies.
+
+Permission is granted to copy and distribute modified versions of this manual
+under the conditions for verbatim copying, provided that the entire resulting
+derived work is distributed under the terms of a permission notice identical
+to this one.
+
+Permission is granted to copy and distribute translations of this manual into
+another language, under the above conditions for modified versions, except that
+this permission notice may be stated in a translation approved by the VyOS
+maintainers.
\ No newline at end of file
diff --git a/docs/draw.io/pbr_example_1.drawio b/docs/draw.io/pbr_example_1.drawio
deleted file mode 100644
index 0d496572..00000000
--- a/docs/draw.io/pbr_example_1.drawio
+++ /dev/null
@@ -1 +0,0 @@
-<mxfile modified="2019-06-20T09:46:15.910Z" host="www.draw.io" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" etag="pgW5M9QC_GIVY4GNWbyF" version="10.7.9" type="device"><diagram name="Page-1" id="c37626ed-c26b-45fb-9056-f9ebc6bb27b6">7VrbcqM4EP0aP4ZCgLk8xkk8u1UzW97K7FyepmRQsGoEYoUc2/P1K4G4CLBNJo7j2rLzAGpJrVafPq2WnYl9l2w/MJitPtEIkYllRtuJfT+xLMtzTPGQkl0pCQKnFMQMR6UINIJH/AspoZoXr3GEcm0gp5RwnOnCkKYpCrkmg4zRjT7siRJ91QzGqCd4DCHpS7/iiK+UFJhm0/EHwvFKLe1PVccShj9jRtepWm9i2U/Fp+xOYKVLjc9XMKKblsh+mNh3jFJeviXbO0Skbyu3lfPme3pruxlK+ZgJn4MU/ArY39bX3eKfT37yffHh8w2wSzXPkKxRtQ+XCIWzCD9Lq/lOecr9dy1NnXG05TeQ4Did2LdiBEFPXDxET+H+lN/kBciyD9jZtpkp3mL1LFbIM5h2ZcuuQGoctGPUUn8+LkClSbimVKYvIMS9RYVsyDghLryiS9/HUa/zCwgswzSAMcI5YxxhaZZYK54Q8QZE3zNiHAu2fYRLRBY0xxxT4Y/7JeWcJmKActB9KMIYMSEgcuSsJtcdJZQVait6NUpv1VxOM+klzujPmsRWLWlpME3fnEsEnjAhQ5prkspBEcxXKFIN0ZPJ7SXbWCZCA9PcM7DISrkRErqOaj9I49B2L0lBTX2RUhFNEGc7MURNuAkCv5yj0qkTlM1NKzf5SrZqpSVgqbQLVT6Ma91NThAvKi28JEU4r04RrLDzgnOEdZwG58kRJ/bUKZKEZYzwzjVJnDNJeO6lJQnLHUgSHcBRJAov1cxRnIjdPjSiGUqjW1nPSZgJzHMcCmErSNAW82+t9+/S58ZUte63CoKisVMNGa0tBGf2fO66fWSjKfIjZygWXHdmzee9uLFrIOWmDsMofEDXLEQHvBcMw92Csyo622hWMoYI5PhZN2MIYbXCguIiK1TR5HeiyfV94VZNS7kDNbFdY/Z0TXVdoK+LQxYj3tMlsIe71rBMDsgPmd1Zyp0GaqnR1gnz9CnipbSjYUKNxyvIEZyNHOb/jxzWu5LD87wqgOs48w3fbj6/SxXPORtVukv1qPI2cQ+s43HfPTFDnIfUEIe6OOdz9dRDXTtwO7Fq2q4feEOx2hzevQLgaPUxXEkUhUf75G9qgpAmkqA1y+YwwUT6/gtiEUyhEqsvQ4B1qruDr0eq5Vcwt9li+85AZVCVCyevDGxwPAhkEZft9YD65gcuq+Hmiz3jAZ0AU98Z8AzwBxIJqDLJ6WumnmO+fLz9C9RX8iUbLvH3lfMbZbUs6FPKEkiGS3rg+obA2xD7msuCcE8R38Fos8IcPWawyNUbwVWdlSPZoLMPjOOHM1CLT+Vfj+gpTVE1WZkO9hJ4FOUOxPTBM+nMsTR0Rx+VaQU4WZFrf8A0+pEhhrMVYpDkRtYpMS4j754cM6XGcbUEMXCj8vw+oN5b4TniOnXF8xCeUx3P6TvjaY8ohd78FARmtb9LOgb7l6PiGDTPcwz612Pw9yl4/Gp25liqflS85s0Xg3aZ5yAYcXu4AnoRB6FoNj9ml18hNP8xYD/8Bw==</diagram></mxfile>
\ No newline at end of file
diff --git a/docs/draw.io/vpn_s2s_ikev2.drawio b/docs/draw.io/vpn_s2s_ikev2.drawio
deleted file mode 100644
index b240c191..00000000
--- a/docs/draw.io/vpn_s2s_ikev2.drawio
+++ /dev/null
@@ -1 +0,0 @@
-<mxfile modified="2019-07-18T20:12:29.116Z" host="www.draw.io" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" etag="se-JT0q6YZwCfwyGJaAA" version="10.9.8" type="device"><diagram name="Page-1" id="c37626ed-c26b-45fb-9056-f9ebc6bb27b6">7Zrdk6I4EMD/Gh+lSMLn4zgz7j7cVk3V1H3svWxFiJhaIB7EUfevv4QEIYCje6eOW4XzIOmQTtL5ddP0OEGP2e5TgderLywm6QTa8W6CniYQIoCA+JKSvZJA2/WVJClorGSgEbzSH0QLbS3d0JiUxo2csZTTtSmMWJ6TiBsyXBRsa962ZKk56xonpCd4jXDal/5JY77SUmDbTcdnQpOVnjpwdccCR9+Tgm1yPd8EomX1Ud0ZrnXp+8sVjtm2JULPE/RYMMbVVbZ7JKk0bm02NW5+pPew7oLk/JwBv/tf4d9PP749rV+/8DAihK2iqRwg1bzhdEPqfVSr5fvaQtUeidQCJmi2XVFOXtc4kr1bAYWQrXiW6m6tjhSc7I4uFBy2L7giLCO82Itb9ICp43pqjGZqilytZNuckOM4SrZqHQ6qccSaiuSgvbGMuNDG+RlDgTs0FLADdHeWOsNQwhXW8jLbJTKqWBEtI2YJ83FSlPrbtFaMy1VlWVs0ljRNH1nKikobspEXhL6Ql7xg30mrR/tj3VP7tzDpTBqeiijwG16Q9IWVlFOWi74F45xlrRseUprIDs7kATZHLBdycGnZiFhGo3qFLOdznNFUnssfpIhxjrVYR0AAL8aA65gMwNDtMYCCAQZAEF7LW0YGbsmAg+4PATQicEsEfMe3XBOCAKCPhsA5DQGJRTqmmyVJMrHh50Y0I3n8ILM80ZuznJg4kB3lf0lbi62r1ldteXn9tGs39q0zabExQ/O55/Vpil0SxM4QTZ43g/N5jyakJ3ohBRXGk+SqyXNhSLXI6rCrdrVMK6ybzUqr1r7d6uuL51SeQtVS5pQ2fB8cYXK2KSJy+rnNcZEQfsqx+yC2IKsz5DZjtawgKeb0zVzuEHd6hhdGxUYazgMPWQFqPp30B3qmRrVrraSdHPf0hu/p9UPf8lof15xF2aw3iwAX71u3reUN5bubOxLHjy+7O8LxT4zwbfDuCHGh1t14/eGU/3sgcMdA0AoEQXDPgQD+EoHA8aDhsHbHZcWbutVx07ODAfKBBfruXqt2PTAQKy4dDKADf9K1nbqmclPXBkOZnpeK454txEXCKzqVQPqc4fXePxtWd0zLKid6EDeAYL1rOmstwIcWCCzRbYmNzqFTqxUNpdmcTYhbK+iEG5FrcTOImA6ug0w7GmgR1qlgJDyrSlC7OWJG47iKWUMlADN1vETq13sGuHY/+weO2/fFujR1+RrAUOJ3FSYs6I4YqAd7FwOvrvu0a0H+LSkYeupfhwIZ+UYI4DSEdvc1EDWiDwPBG8PBrUlw7LsLB/4YDm4MAewWBg9l/w+DILh5tgjHbLH9bhPeXbYYHkXi/xHwxmkTCBZF98DLNc6PK9/qnUv1OSsynA4gZlvyT25f+tWBI6W5h5dJXYewE/8uPLPibJYiwOSsGrQz6VU9lq78O4q5HKyXDgaQVkXyS9AK7O7LdwgGshlYv/0blQZ0JV5rR/hlgUUjsNcCtle1Ce2PpvUK7+LQGcK3qHYzPmWrUlwv8Rp8CxsokF7tMQuv8Do+DEJKliMH+vnldP9FNZSBXwYD0Wx+TqbKu82P9tDzvw==</diagram></mxfile>
\ No newline at end of file
diff --git a/docs/index.rst b/docs/index.rst
index ab9d3f66..3322bf8d 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -6,102 +6,44 @@ VyOS User Guide
 
 
 .. toctree::
-   :caption: Introduction
-   :name: intro
    :maxdepth: 2
+   :hidden:
+   :caption: FIND CAPTION NAME
 
-   about
-   history
-   install
-   cli
+   introducing/about
+   introducing/history
+   introducing/releases
+   changelog/index
+
+.. toctree::
+   :maxdepth: 2
+   :hidden:
+   :includehidden:
+   :caption: first steps
+
+   installation/index
    quick-start
+   cli
 
-
+   
 .. toctree::
-   :caption: Basic Configuration
-   :name: basics
    :maxdepth: 2
+   :hidden:
+   :includehidden:
+   :caption: Adminguide
 
-   configuration-overview
-   interfaces/basic-index
-   system/basic-index
-   image-mgmt
+   configuration/index
+   operation/index
+   automation/index
+   troubleshooting/index
+   configexamples/index
 
 
 .. toctree::
-   :caption: Advanced Configuration
-   :name: advanced
    :maxdepth: 2
-
-   interfaces/advanced-index
-   system/advanced-index
-   services/index
-   firewall
-   routing/index
-   vrf
-   nat
-   nptv6
-   qos
-   high-availability
-   vpn/index
-   load-balancing
-   command-list-configuration
-
-
-.. toctree::
-   :caption: System Operation
-   :name: system-operation
-   :maxdepth: 2
-
-   information
-   troubleshooting
-   command-list-operation
-
-
-.. toctree::
-   :caption: Appendix
-   :name: appendix
-   :maxdepth: 2
-
-   appendix/release-notes
-   appendix/examples/index
-   appendix/vyos-on-baremetal
-   appendix/virtual/index
-   appendix/vyos-on-clouds
-   appendix/migrate-from-vyatta
-   appendix/command-scripting
-   appendix/http-api
-
-
-.. toctree::
+   :hidden:
+   :includehidden:
    :caption: Contributing
-   :name: contributing
-   :maxdepth: 2
 
-   contributing/build-vyos
-   contributing/upstream-packages
-   contributing/issues-features
-   contributing/development
-   contributing/debugging
-   contributing/documentation
-
-
-################
-Copyright Notice
-################
-
-Copyright (C) 2018-2020 VyOS maintainers and contributors
-
-Permission is granted to make and distribute verbatim copies of this manual
-provided the copyright notice and this permission notice are preserved on all
-copies.
-
-Permission is granted to copy and distribute modified versions of this manual
-under the conditions for verbatim copying, provided that the entire resulting
-derived work is distributed under the terms of a permission notice identical
-to this one.
-
-Permission is granted to copy and distribute translations of this manual into
-another language, under the above conditions for modified versions, except that
-this permission notice may be stated in a translation approved by the VyOS
-maintainers.
+   contributing/index
+   copyright
diff --git a/docs/installation/index.rst b/docs/installation/index.rst
new file mode 100644
index 00000000..af265121
--- /dev/null
+++ b/docs/installation/index.rst
@@ -0,0 +1,18 @@
+#################################
+Installation and Image Management
+#################################
+
+
+
+.. toctree::
+   :maxdepth: 2
+   :caption: Content
+
+   install
+   iso
+   virtual/index
+   cloud/index
+   update
+   image
+   migrate-from-vyatta
+   ../vyos-on-baremetal
\ No newline at end of file
diff --git a/docs/install.rst b/docs/installation/install.rst
similarity index 100%
rename from docs/install.rst
rename to docs/installation/install.rst
diff --git a/docs/about.rst b/docs/introducing/about.rst
similarity index 86%
rename from docs/about.rst
rename to docs/introducing/about.rst
index 383c95eb..0411344b 100644
--- a/docs/about.rst
+++ b/docs/introducing/about.rst
@@ -8,7 +8,7 @@ VyOS is an open source network operating system based on Debian GNU/Linux.
 
 VyOS provides a free routing platform that competes directly with other
 commercially available solutions from well known network providers. Because
-VyOS is run on standard amd64, i586 and ARM systems, it can be used
+VyOS is run on standard amd64, i586 and ARM systems, it is able to be used
 as a router and firewall platform for cloud deployments.
 
 We use multiple live versions of our manual hosted thankfully by
@@ -16,7 +16,7 @@ https://readthedocs.org. We will provide one version of the manual for every
 VyOS major version starting with VyOS 1.2 which will receive Long-term support
 (LTS).
 
-The manual version is selected/specified by its Git branch name. You can
+The manual version is selected/specified by it's Git branch name. You can
 switch between versions of the documentation by selecting the appropriate
 branch on the bottom left corner.
 
diff --git a/docs/history.rst b/docs/introducing/history.rst
similarity index 100%
rename from docs/history.rst
rename to docs/introducing/history.rst
diff --git a/docs/introducing/releases.rst b/docs/introducing/releases.rst
new file mode 100644
index 00000000..6d95c4bc
--- /dev/null
+++ b/docs/introducing/releases.rst
@@ -0,0 +1,29 @@
+.. _release:
+
+########
+Releases
+########
+
+Rolling Release
+###############
+
+rolling rolling
+
+LTS
+###
+
+lts lts lts
+
+
+old LTS
+=======
+
+old LTSLTSLTSLTS
+
+even older LTS
+--------------
+
+even older LTS even older LTS
+even older LTS even older LTS even older LTS even older LTS even older LTS
+
+
diff --git a/docs/troubleshooting.rst b/docs/troubleshooting/index.rst
similarity index 100%
rename from docs/troubleshooting.rst
rename to docs/troubleshooting/index.rst

From a6c226d4b4e79c07121b0a609d2fb78cae70f3b0 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Sun, 29 Nov 2020 19:24:16 +0100
Subject: [PATCH 121/295] arange installation and image management

---
 docs/appendix/virtual/index.rst               |  12 --
 docs/appendix/vyos-on-clouds.rst              | 173 ------------------
 docs/installation/cloud/aws.rst               |  54 ++++++
 docs/installation/cloud/azure.rst             |  53 ++++++
 docs/installation/cloud/gcp.rst               |  55 ++++++
 docs/installation/cloud/index.rst             |  13 ++
 docs/installation/cloud/oracel.rst            |   8 +
 .../image.rst}                                |  78 --------
 docs/installation/index.rst                   |   3 +-
 docs/installation/iso.rst                     |   2 +
 .../migrate-from-vyatta.rst                   |   0
 docs/installation/upate.rst                   |  79 ++++++++
 docs/installation/virtual/eve-ng.rst          |   8 +
 .../virtual/gns3.rst}                         |   0
 docs/installation/virtual/index.rst           |  12 ++
 .../virtual/libvirt.rst                       |   0
 docs/installation/virtual/proxmox.rst         |   8 +
 .../virtual/vmware.rst}                       |   0
 .../vyos-on-baremetal.rst                     |   0
 19 files changed, 294 insertions(+), 264 deletions(-)
 delete mode 100644 docs/appendix/virtual/index.rst
 delete mode 100644 docs/appendix/vyos-on-clouds.rst
 create mode 100644 docs/installation/cloud/aws.rst
 create mode 100644 docs/installation/cloud/azure.rst
 create mode 100644 docs/installation/cloud/gcp.rst
 create mode 100644 docs/installation/cloud/index.rst
 create mode 100644 docs/installation/cloud/oracel.rst
 rename docs/{image-mgmt.rst => installation/image.rst} (51%)
 create mode 100644 docs/installation/iso.rst
 rename docs/{appendix => installation}/migrate-from-vyatta.rst (100%)
 create mode 100644 docs/installation/upate.rst
 create mode 100644 docs/installation/virtual/eve-ng.rst
 rename docs/{appendix/virtual/vyos-on-gns3.rst => installation/virtual/gns3.rst} (100%)
 create mode 100644 docs/installation/virtual/index.rst
 rename docs/{appendix => installation}/virtual/libvirt.rst (100%)
 create mode 100644 docs/installation/virtual/proxmox.rst
 rename docs/{appendix/virtual/vyos-on-vmware.rst => installation/virtual/vmware.rst} (100%)
 rename docs/{appendix => installation}/vyos-on-baremetal.rst (100%)

diff --git a/docs/appendix/virtual/index.rst b/docs/appendix/virtual/index.rst
deleted file mode 100644
index 7ede37b5..00000000
--- a/docs/appendix/virtual/index.rst
+++ /dev/null
@@ -1,12 +0,0 @@
-.. _virtual:
-
-Running on Virtual Environments
-===============================
-
-
-.. toctree::
-   :maxdepth: 2
-
-   libvirt
-   vyos-on-vmware
-   vyos-on-gns3
diff --git a/docs/appendix/vyos-on-clouds.rst b/docs/appendix/vyos-on-clouds.rst
deleted file mode 100644
index 33b7011e..00000000
--- a/docs/appendix/vyos-on-clouds.rst
+++ /dev/null
@@ -1,173 +0,0 @@
-.. _vyos-on-clouds:
-
-Running on Clouds
-#################
-
-Amazon AWS
-**********
-
-Deploy VM
----------
-
-Deploy VyOS on Amazon :abbr:`AWS (Amazon Web Services)`
-
-1. Click to ``Instances`` and ``Launch Instance``
-
-.. figure:: /_static/images/cloud-aws-01.png
-
-2. On the marketplace search "VyOS"
-
-.. figure:: /_static/images/cloud-aws-02.png
-
-3. Choose the instance type. Minimum recommendation start from ``m3.medium``
-
-.. figure:: /_static/images/cloud-aws-03.png
-
-4. Configure instance for your requirements. Select number of instances / network / subnet
-
-.. figure:: /_static/images/cloud-aws-04.png
-
-5. Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step.
-
-.. figure:: /_static/images/cloud-aws-05.png
-
-6. Configure Security Group. It's recommended that you configure ssh access only from certain address sources. Or permit any (by default).
-
-.. figure:: /_static/images/cloud-aws-06.png
-
-7. Select SSH key pair and click ``Launch Instances``
-
-.. figure:: /_static/images/cloud-aws-07.png
-
-8. Find out your public IP address.
-
-.. figure:: /_static/images/cloud-aws-08.png
-
-9. Connect to the instance by SSH key.
-
-  .. code-block:: none
-
-    ssh -i ~/.ssh/amazon.pem vyos@203.0.113.3
-    vyos@ip-192-0-2-10:~$
-
-
-
-
-References
-----------
-https://console.aws.amazon.com/
-
-Azure
-*****
-
-Deploy VM
----------
-
-Deploy VyOS on Azure.
-
-1. Go to the Azure services and Click to **Add new Virtual machine**
-
-2. Choose vm name, resource group, region and click **Browse all public and private images**
-
-.. figure:: /_static/images/cloud-azure-01.png
-
-3. On the marketplace search ``VyOS``
-
-.. figure:: /_static/images/cloud-azure-02.png
-
-4. Generate new SSH key pair or use existing.
-
-.. figure:: /_static/images/cloud-azure-03.png
-
-5. Define network, subnet, Public IP. Or it will be created by default.
-
-.. figure:: /_static/images/cloud-azure-04.png
-
-6. Click ``Review + create``. After fiew second your deployment will be complete
-
-.. figure:: /_static/images/cloud-azure-05.png
-
-7. Click to your new vm and find out your Public IP address.
-
-.. figure:: /_static/images/cloud-azure-06.png
-
-8. Connect to the instance by SSH key.
-
-  .. code-block:: none
-
-    ssh -i ~/.ssh/vyos_azure vyos@203.0.113.3
-    vyos@vyos-doc-r1:~$
-
-Add interface
--------------
-
-If instance was deployed with one **eth0** ``WAN`` interface and want to add new one.
-To add new interface an example **eth1** ``LAN`` you need shutdown the instance. Attach the interface in the Azure portal and then start the instance.
-
-.. NOTE:: Azure does not allow you attach interface when the instance in the **Running** state.
-
-References
-----------
-https://azure.microsoft.com
-
-Google Cloud Platform
-*********************
-
-Deploy VM
----------
-
-To deploy VyOS on GCP (Google Cloud Platform)
-
-1. Generate SSH key pair type **ssh-rsa** from the host that will connect to VyOS.
-
-  Example:
-
-  .. code-block:: none
-
-    ssh-keygen -t rsa -f ~/.ssh/vyos_gcp -C "vyos@mypc"
-
-
-.. NOTE:: In name "vyos@mypc" The first value must be "**vyos**". Because default user is vyos and google api uses this option.
-
-
-2. Open GCP console and navigate to the menu **Metadata**. Choose **SSH Keys** and click ``edit``.
-
-.. figure:: /_static/images/cloud-gcp-01.png
-
-
-Click **Add item** and paste your public ssh key. Click ``Save``.
-
-.. figure:: /_static/images/cloud-gcp-02.png
-
-
-2. On marketplace search "VyOS"
-
-3. Change Deployment name/Zone/Machine type and click ``Deploy``
-
-.. figure:: /_static/images/cloud-gcp-03.png
-
-4. After fiew seconds click to ``instance``
-
-.. figure:: /_static/images/cloud-gcp-04.png
-
-5. Find out your external IP address
-
-.. figure:: /_static/images/cloud-gcp-05.png
-
-6. Connect to the instance. SSH key was generated in the first step.
-
-  .. code-block:: none
-
-    ssh -i ~/.ssh/vyos_gcp vyos@203.0.113.3
-    vyos@vyos-r1-vm:~$
-
-References
-----------
-https://console.cloud.google.com/
-
-Oracle
-*****************
-
-References
-----------
-https://www.oracle.com/cloud/
diff --git a/docs/installation/cloud/aws.rst b/docs/installation/cloud/aws.rst
new file mode 100644
index 00000000..33684bb0
--- /dev/null
+++ b/docs/installation/cloud/aws.rst
@@ -0,0 +1,54 @@
+##########
+Amazon AWS
+##########
+
+Deploy VM
+---------
+
+Deploy VyOS on Amazon :abbr:`AWS (Amazon Web Services)`
+
+1. Click to ``Instances`` and ``Launch Instance``
+
+.. figure:: /_static/images/cloud-aws-01.png
+
+2. On the marketplace search "VyOS"
+
+.. figure:: /_static/images/cloud-aws-02.png
+
+3. Choose the instance type. Minimum recommendation start from ``m3.medium``
+
+.. figure:: /_static/images/cloud-aws-03.png
+
+4. Configure instance for your requirements. Select number of instances / network / subnet
+
+.. figure:: /_static/images/cloud-aws-04.png
+
+5. Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step.
+
+.. figure:: /_static/images/cloud-aws-05.png
+
+6. Configure Security Group. It's recommended that you configure ssh access only from certain address sources. Or permit any (by default).
+
+.. figure:: /_static/images/cloud-aws-06.png
+
+7. Select SSH key pair and click ``Launch Instances``
+
+.. figure:: /_static/images/cloud-aws-07.png
+
+8. Find out your public IP address.
+
+.. figure:: /_static/images/cloud-aws-08.png
+
+9. Connect to the instance by SSH key.
+
+  .. code-block:: none
+
+    ssh -i ~/.ssh/amazon.pem vyos@203.0.113.3
+    vyos@ip-192-0-2-10:~$
+
+
+
+
+References
+----------
+https://console.aws.amazon.com/
\ No newline at end of file
diff --git a/docs/installation/cloud/azure.rst b/docs/installation/cloud/azure.rst
new file mode 100644
index 00000000..39206f3b
--- /dev/null
+++ b/docs/installation/cloud/azure.rst
@@ -0,0 +1,53 @@
+#####
+Azure
+#####
+
+Deploy VM
+---------
+
+Deploy VyOS on Azure.
+
+1. Go to the Azure services and Click to **Add new Virtual machine**
+
+2. Choose vm name, resource group, region and click **Browse all public and private images**
+
+.. figure:: /_static/images/cloud-azure-01.png
+
+3. On the marketplace search ``VyOS``
+
+.. figure:: /_static/images/cloud-azure-02.png
+
+4. Generate new SSH key pair or use existing.
+
+.. figure:: /_static/images/cloud-azure-03.png
+
+5. Define network, subnet, Public IP. Or it will be created by default.
+
+.. figure:: /_static/images/cloud-azure-04.png
+
+6. Click ``Review + create``. After fiew second your deployment will be complete
+
+.. figure:: /_static/images/cloud-azure-05.png
+
+7. Click to your new vm and find out your Public IP address.
+
+.. figure:: /_static/images/cloud-azure-06.png
+
+8. Connect to the instance by SSH key.
+
+  .. code-block:: none
+
+    ssh -i ~/.ssh/vyos_azure vyos@203.0.113.3
+    vyos@vyos-doc-r1:~$
+
+Add interface
+-------------
+
+If instance was deployed with one **eth0** ``WAN`` interface and want to add new one.
+To add new interface an example **eth1** ``LAN`` you need shutdown the instance. Attach the interface in the Azure portal and then start the instance.
+
+.. NOTE:: Azure does not allow you attach interface when the instance in the **Running** state.
+
+References
+----------
+https://azure.microsoft.com
diff --git a/docs/installation/cloud/gcp.rst b/docs/installation/cloud/gcp.rst
new file mode 100644
index 00000000..66e75704
--- /dev/null
+++ b/docs/installation/cloud/gcp.rst
@@ -0,0 +1,55 @@
+#####################
+Google Cloud Platform
+#####################
+
+Deploy VM
+---------
+
+To deploy VyOS on GCP (Google Cloud Platform)
+
+1. Generate SSH key pair type **ssh-rsa** from the host that will connect to VyOS.
+
+  Example:
+
+  .. code-block:: none
+
+    ssh-keygen -t rsa -f ~/.ssh/vyos_gcp -C "vyos@mypc"
+
+
+.. NOTE:: In name "vyos@mypc" The first value must be "**vyos**". Because default user is vyos and google api uses this option.
+
+
+2. Open GCP console and navigate to the menu **Metadata**. Choose **SSH Keys** and click ``edit``.
+
+.. figure:: /_static/images/cloud-gcp-01.png
+
+
+Click **Add item** and paste your public ssh key. Click ``Save``.
+
+.. figure:: /_static/images/cloud-gcp-02.png
+
+
+2. On marketplace search "VyOS"
+
+3. Change Deployment name/Zone/Machine type and click ``Deploy``
+
+.. figure:: /_static/images/cloud-gcp-03.png
+
+4. After fiew seconds click to ``instance``
+
+.. figure:: /_static/images/cloud-gcp-04.png
+
+5. Find out your external IP address
+
+.. figure:: /_static/images/cloud-gcp-05.png
+
+6. Connect to the instance. SSH key was generated in the first step.
+
+  .. code-block:: none
+
+    ssh -i ~/.ssh/vyos_gcp vyos@203.0.113.3
+    vyos@vyos-r1-vm:~$
+
+References
+----------
+https://console.cloud.google.com/
\ No newline at end of file
diff --git a/docs/installation/cloud/index.rst b/docs/installation/cloud/index.rst
new file mode 100644
index 00000000..5236f092
--- /dev/null
+++ b/docs/installation/cloud/index.rst
@@ -0,0 +1,13 @@
+##################################
+Running VyOS in Cloud Environments
+##################################
+
+
+
+.. toctree::
+   :caption: Content
+
+   aws
+   azure
+   gcp
+   oracel
\ No newline at end of file
diff --git a/docs/installation/cloud/oracel.rst b/docs/installation/cloud/oracel.rst
new file mode 100644
index 00000000..72c40127
--- /dev/null
+++ b/docs/installation/cloud/oracel.rst
@@ -0,0 +1,8 @@
+######
+Oracle
+######
+
+
+References
+----------
+https://www.oracle.com/cloud/
\ No newline at end of file
diff --git a/docs/image-mgmt.rst b/docs/installation/image.rst
similarity index 51%
rename from docs/image-mgmt.rst
rename to docs/installation/image.rst
index 143d02b2..074a0245 100644
--- a/docs/image-mgmt.rst
+++ b/docs/installation/image.rst
@@ -90,85 +90,7 @@ configured to be the default.
       Copyright:        VyOS maintainers and contributors
 
 
-.. _update_vyos:
 
-Update VyOS
-===========
-
-New system images can be added using the :opcmd:`add system image`
-command. The command will extract the chosen image and will prompt you
-to use the current system configuration and SSH security keys, allowing
-for the new image to boot using the current configuration.
-
-.. note:: Only LTS releases are PGP-signed.
-
-.. opcmd:: add system image <url | path> [vrf name] [username user [password pass]]
-
-   Use this command to install a new system image. You can reach the
-   image from the web (http://, https://) or from your local system,
-   e.g.  /tmp/vyos-1.2.3-amd64.iso.
-
-   The `add system image` command also supports installing new versions
-   of VyOS through an optional given VRF. Also if URL in question requires
-   authentication, you can specify an optional username and password via
-   the commandline which will be passed as "Basic-Auth" to the server.
-
-If there is not enough **free disk space available**, the installation
-will be canceled. To delete images use the :opcmd:`delete system image`
-command.
-
-VyOS configuration is associated to each image, and **each image has a
-unique copy of its configuration**. This is different than a traditional
-network router where the configuration is shared across all images.
-
-.. note:: If you have any personal files, like some scripts you created,
-   and you don't want them to be lost during the upgrade, make sure
-   those files are stored in ``/config`` as this directory is always copied
-   to newer installed images.
-
-You can access files from a previous installation and copy them to your
-current image if they were located in the ``/config`` directory. This
-can be done using the :opcmd:`copy` command. So, for instance, in order
-to copy ``/config/config.boot`` from VyOS 1.2.1 image, you would use the
-following command:
-
-.. code::
-
-   copy file 1.2.1://config/config.boot to /tmp/config.boot.1.2.1
-
-
-Example
-"""""""
-
-.. code-block:: none
-
-     vyos@vyos:~$ add system image https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso
-     Trying to fetch ISO file from https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso
-       % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
-                                      Dload  Upload   Total   Spent    Left  Speed
-     100  338M  100  338M    0     0  3837k      0  0:01:30  0:01:30 --:--:-- 3929k
-     ISO download succeeded.
-     Checking for digital signature file...
-       % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
-                                      Dload  Upload   Total   Spent    Left  Speed
-       0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
-     curl: (22) The requested URL returned error: 404 Not Found
-
-     Unable to fetch digital signature file.
-     Do you want to continue without signature check? (yes/no) [yes]
-     Checking MD5 checksums of files on the ISO image...OK.
-     Done!
-
-     What would you like to name this image? [vyos-1.3-rolling-201912201452]:
-
-     OK.  This image will be named: vyos-1.3-rolling-201912201452
-
-
-.. hint:: | The most up-do-date Rolling Release for AMD64 can be accessed using the following URL:
-   | https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso
-
-After reboot you might want to verify the version you are running with
-the :opcmd:`show version` command.
 
 
 System rollback
diff --git a/docs/installation/index.rst b/docs/installation/index.rst
index af265121..e5a2a6fd 100644
--- a/docs/installation/index.rst
+++ b/docs/installation/index.rst
@@ -12,7 +12,8 @@ Installation and Image Management
    iso
    virtual/index
    cloud/index
+   vyos-on-baremetal
    update
    image
    migrate-from-vyatta
-   ../vyos-on-baremetal
\ No newline at end of file
+   
\ No newline at end of file
diff --git a/docs/installation/iso.rst b/docs/installation/iso.rst
new file mode 100644
index 00000000..f48ad91c
--- /dev/null
+++ b/docs/installation/iso.rst
@@ -0,0 +1,2 @@
+iso
+###
\ No newline at end of file
diff --git a/docs/appendix/migrate-from-vyatta.rst b/docs/installation/migrate-from-vyatta.rst
similarity index 100%
rename from docs/appendix/migrate-from-vyatta.rst
rename to docs/installation/migrate-from-vyatta.rst
diff --git a/docs/installation/upate.rst b/docs/installation/upate.rst
new file mode 100644
index 00000000..a3a887f0
--- /dev/null
+++ b/docs/installation/upate.rst
@@ -0,0 +1,79 @@
+.. _update_vyos:
+
+Update VyOS
+===========
+
+New system images can be added using the :opcmd:`add system image`
+command. The command will extract the chosen image and will prompt you
+to use the current system configuration and SSH security keys, allowing
+for the new image to boot using the current configuration.
+
+.. note:: Only LTS releases are PGP-signed.
+
+.. opcmd:: add system image <url | path> [vrf name] [username user [password pass]]
+
+   Use this command to install a new system image. You can reach the
+   image from the web (http://, https://) or from your local system,
+   e.g.  /tmp/vyos-1.2.3-amd64.iso.
+
+   The `add system image` command also supports installing new versions
+   of VyOS through an optional given VRF. Also if URL in question requires
+   authentication, you can specify an optional username and password via
+   the commandline which will be passed as "Basic-Auth" to the server.
+
+If there is not enough **free disk space available**, the installation
+will be canceled. To delete images use the :opcmd:`delete system image`
+command.
+
+VyOS configuration is associated to each image, and **each image has a
+unique copy of its configuration**. This is different than a traditional
+network router where the configuration is shared across all images.
+
+.. note:: If you have any personal files, like some scripts you created,
+   and you don't want them to be lost during the upgrade, make sure
+   those files are stored in ``/config`` as this directory is always copied
+   to newer installed images.
+
+You can access files from a previous installation and copy them to your
+current image if they were located in the ``/config`` directory. This
+can be done using the :opcmd:`copy` command. So, for instance, in order
+to copy ``/config/config.boot`` from VyOS 1.2.1 image, you would use the
+following command:
+
+.. code::
+
+   copy file 1.2.1://config/config.boot to /tmp/config.boot.1.2.1
+
+
+Example
+"""""""
+
+.. code-block:: none
+
+     vyos@vyos:~$ add system image https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso
+     Trying to fetch ISO file from https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso
+       % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
+                                      Dload  Upload   Total   Spent    Left  Speed
+     100  338M  100  338M    0     0  3837k      0  0:01:30  0:01:30 --:--:-- 3929k
+     ISO download succeeded.
+     Checking for digital signature file...
+       % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
+                                      Dload  Upload   Total   Spent    Left  Speed
+       0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
+     curl: (22) The requested URL returned error: 404 Not Found
+
+     Unable to fetch digital signature file.
+     Do you want to continue without signature check? (yes/no) [yes]
+     Checking MD5 checksums of files on the ISO image...OK.
+     Done!
+
+     What would you like to name this image? [vyos-1.3-rolling-201912201452]:
+
+     OK.  This image will be named: vyos-1.3-rolling-201912201452
+
+
+.. hint:: | The most up-do-date Rolling Release for AMD64 can be accessed using the following URL:
+   | https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso
+
+After reboot you might want to verify the version you are running with
+the :opcmd:`show version` command.
\ No newline at end of file
diff --git a/docs/installation/virtual/eve-ng.rst b/docs/installation/virtual/eve-ng.rst
new file mode 100644
index 00000000..d5134838
--- /dev/null
+++ b/docs/installation/virtual/eve-ng.rst
@@ -0,0 +1,8 @@
+######
+EVE-NG
+######
+
+References
+==========
+
+https://www.eve-ng.net/
\ No newline at end of file
diff --git a/docs/appendix/virtual/vyos-on-gns3.rst b/docs/installation/virtual/gns3.rst
similarity index 100%
rename from docs/appendix/virtual/vyos-on-gns3.rst
rename to docs/installation/virtual/gns3.rst
diff --git a/docs/installation/virtual/index.rst b/docs/installation/virtual/index.rst
new file mode 100644
index 00000000..808439c7
--- /dev/null
+++ b/docs/installation/virtual/index.rst
@@ -0,0 +1,12 @@
+####################################
+Running VyOS in Virtual Environments
+####################################
+
+.. toctree::
+   :caption: Content
+
+   libvirt
+   proxmox
+   vmware
+   gns3
+   eve-ng
\ No newline at end of file
diff --git a/docs/appendix/virtual/libvirt.rst b/docs/installation/virtual/libvirt.rst
similarity index 100%
rename from docs/appendix/virtual/libvirt.rst
rename to docs/installation/virtual/libvirt.rst
diff --git a/docs/installation/virtual/proxmox.rst b/docs/installation/virtual/proxmox.rst
new file mode 100644
index 00000000..3ee9d70a
--- /dev/null
+++ b/docs/installation/virtual/proxmox.rst
@@ -0,0 +1,8 @@
+#######
+Proxmox
+#######
+
+References
+==========
+
+https://www.proxmox.com/en/proxmox-ve
\ No newline at end of file
diff --git a/docs/appendix/virtual/vyos-on-vmware.rst b/docs/installation/virtual/vmware.rst
similarity index 100%
rename from docs/appendix/virtual/vyos-on-vmware.rst
rename to docs/installation/virtual/vmware.rst
diff --git a/docs/appendix/vyos-on-baremetal.rst b/docs/installation/vyos-on-baremetal.rst
similarity index 100%
rename from docs/appendix/vyos-on-baremetal.rst
rename to docs/installation/vyos-on-baremetal.rst

From a3f7e4ae450248bb5b28474d908e51e6560cb68d Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Sun, 29 Nov 2020 19:36:16 +0100
Subject: [PATCH 122/295] arange http-api and command-scripting

---
 docs/appendix/release-notes.rst               | 305 ------------------
 .../command-scripting.rst                     |   0
 docs/{appendix => automation}/http-api.rst    |   0
 docs/automation/index.rst                     |   9 +-
 4 files changed, 8 insertions(+), 306 deletions(-)
 delete mode 100644 docs/appendix/release-notes.rst
 rename docs/{appendix => automation}/command-scripting.rst (100%)
 rename docs/{appendix => automation}/http-api.rst (100%)

diff --git a/docs/appendix/release-notes.rst b/docs/appendix/release-notes.rst
deleted file mode 100644
index 89454fa0..00000000
--- a/docs/appendix/release-notes.rst
+++ /dev/null
@@ -1,305 +0,0 @@
-.. _release-notes:
-
-#############
-Release Notes
-#############
-
-1.2 (Crux)
-==========
-
-1.2.5
------
-
-1.2.5 is a maintenance release made in April 2020.
-
-Resolved issues
-^^^^^^^^^^^^^^^
-
-* :vytask:`1020` OSPF Stops distributing default route after a while
-* :vytask:`1228` pppoe default-route force option not working (Rel 1.2.0-rc11)
-* :vytask:`1301` bgp peer-groups don't work when "no-ipv4-unicast" is enabled.
-* :vytask:`1341` Adding rate-limiter for pppoe server users
-* :vytask:`1376` Incorrect DHCP lease counting
-* :vytask:`1392` Large firewall rulesets cause the system to lose configuration and crash at startup
-* :vytask:`1416` 2 dhcp server run in failover mode can't sync hostname with each other
-* :vytask:`1452` accel-pppoe - add vendor option to shaper
-* :vytask:`1490` BGP configuration (is lost|not applied) when updating 1.1.8 -> 1.2.1
-* :vytask:`1780` Adding ipsec ike closeaction
-* :vytask:`1803` Unbind NTP while it's not requested...
-* :vytask:`1821` "authentication mode radius" has no effect for PPPoE server
-* :vytask:`1827` Increase default gc_thresh
-* :vytask:`1828` Missing completion helper for "set system syslog host 192.0.2.1 facility all protocol"
-* :vytask:`1832` radvd adding feature DNSSL branch.example.com example.com to existing package
-* :vytask:`1837` PPPoE unrecognized option 'replacedefaultroute'
-* :vytask:`1851` wireguard - changing the pubkey on an existing peer seems to destroy the running config.
-* :vytask:`1858` l2tp: Delete depricated outside-nexthop and add gateway-address
-* :vytask:`1864` Lower IPSec DPD timeout lower limit from 10s -> 2s
-* :vytask:`1879` Extend Dynamic DNS XML definition value help strings and validators
-* :vytask:`1881` Execute permissions are removed from custom SNMP scripts at commit time
-* :vytask:`1884` Keeping VRRP transition-script native behaviour and adding stop-script
-* :vytask:`1891` Router announcements broken on boot
-* :vytask:`1900` Enable SNMP for VRRP.
-* :vytask:`1902` Add redistribute non main table in bgp
-* :vytask:`1909` Incorrect behaviour of static routes with overlapping networks
-* :vytask:`1913` "system ipv6 blacklist" command has no effect
-* :vytask:`1914` IPv6 multipath hash policy does not apply
-* :vytask:`1917` Update WireGuard to Debian release 0.0.20191219-1
-* :vytask:`1934` Change default hostname when deploy from OVA without params.
-* :vytask:`1935` NIC identification and usage problem in Hyper-V environments
-* :vytask:`1936` pppoe-server CLI control features
-* :vytask:`1964` SNMP Script-extensions allows names with spaces, but commit fails
-* :vytask:`1967` BGP parameter "enforce-first-as" does not work anymore
-* :vytask:`1970` Correct adding interfaces on boot
-* :vytask:`1971` Missing modules in initrd.img for PXE boot
-* :vytask:`1998` Update FRR to 7.3
-* :vytask:`2001` Error when router reboot
-* :vytask:`2032` Monitor bandwidth bits
-* :vytask:`2059` Set source-validation on bond vif don't work
-* :vytask:`2066` PPPoE interface can be created multiple times - last wins
-* :vytask:`2069` PPPoE-client does not works with service-name option
-* :vytask:`2077` ISO build from crux branch is failing
-* :vytask:`2079` Update Linux Kernel to v4.19.106
-* :vytask:`2087` Add maxfail 0 option to pppoe configuration.
-* :vytask:`2100` BGP route adverisement wih checks rib
-* :vytask:`2120` "reset vpn ipsec-peer" doesn't work with named peers
-* :vytask:`2197` Cant add vif-s interface into a bridge
-* :vytask:`2228` WireGuard does not allow ports < 1024 to be used
-* :vytask:`2252` HTTP API add system image can return '504 Gateway Time-out'
-* :vytask:`2272` Set system flow-accounting disable-imt has syntax error
-* :vytask:`2276` PPPoE server vulnerability
- 
-
-1.2.4
------
-
-1.2.4 is a maintenance release made in December 2019.
-
-Resolved issues
-^^^^^^^^^^^^^^^
-
-* :vytask:`T258` Can not configure wan load-balancing on vyos-1.2
-* :vytask:`T818` SNMP v3 - remove required engineid from user node
-* :vytask:`T1030` Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4)
-* :vytask:`T1183` BFD Support via FRR
-* :vytask:`T1299` Allow SNMPd to be extended with custom scripts
-* :vytask:`T1351` accel-pppoe adding CIDR based IP pool option
-* :vytask:`T1391` In route-map set community additive
-* :vytask:`T1394` syslog systemd and host_name.py race condition
-* :vytask:`T1401` Copying files with the FTP protocol fails if the password contains special characters
-* :vytask:`T1421` OpenVPN client push-route stopped working, needs added quotes to fix
-* :vytask:`T1430` Add options for custom DHCP client-id and hostname
-* :vytask:`T1447` Python subprocess called without import in host_name.py
-* :vytask:`T1470` improve output of "show dhcpv6 server leases"
-* :vytask:`T1485` Enable 'AdvIntervalOpt' option in for radvd.conf
-* :vytask:`T1496` Separate rolling release and LTS kernel builds
-* :vytask:`T1560` "set load-balancing wan rule 0" causes segfault and prevents load balancing from starting
-* :vytask:`T1568` strip-private command improvement for additional masking of IPv6 and MAC address
-* :vytask:`T1578` completion offers "show table", but show table does not exist
-* :vytask:`T1593` Support ip6gre
-* :vytask:`T1597` /usr/sbin/rsyslogd after deleting "system syslog"
-* :vytask:`T1638` vyos-hostsd not setting system domain name
-* :vytask:`T1678` hostfile-update missing line feed
-* :vytask:`T1694` NTPd: Do not listen on all interfaces by default
-* :vytask:`T1701` Delete domain-name and domain-search won't work
-* :vytask:`T1705` High CPU usage by bgpd when snmp is active
-* :vytask:`T1707` DHCP static mapping and exclude address not working
-* :vytask:`T1708` Update Rolling Release Kernel to 4.19.76
-* :vytask:`T1709` Update WireGuard to 0.0.20190913
-* :vytask:`T1716` Update Intel NIC drivers to recent versions
-* :vytask:`T1726` Update Linux Firmware binaries to a more recent version 2019-03-14 -> 2019-10-07
-* :vytask:`T1728` Update Linux Kernel to 4.19.79
-* :vytask:`T1737` SNMP tab completion missing
-* :vytask:`T1738` Copy SNMP configuration from node to node raises exception
-* :vytask:`T1740` Broken OSPFv2 virtual-link authentication
-* :vytask:`T1742` NHRP unable to commit.
-* :vytask:`T1745` dhcp-server commit fails with "DHCP range stop address x must be greater or equal to the range start address y!" when static mapping has same IP as range stop
-* :vytask:`T1749` numeric validator doesn't support multiple ranges
-* :vytask:`T1769` Remove complex SNMPv3 Transport Security Model (TSM)
-* :vytask:`T1772` <regex> constraints in XML are partially broken
-* :vytask:`T1778` Kilobits/Megabits difference in configuration Vyos/FRR
-* :vytask:`T1780` Adding ipsec ike closeaction
-* :vytask:`T1786` disable-dhcp-nameservers is missed in current host_name.py implementation
-* :vytask:`T1788` Intel QAT (QuickAssist Technology ) implementation
-* :vytask:`T1792` Update WireGuard to Debian release 0.0.20191012-1
-* :vytask:`T1800` Update Linux Kernel to v4.19.84
-* :vytask:`T1809` Wireless: SSID scan does not work in AP mode
-* :vytask:`T1811` Upgrade from 1.1.8: Config file migration failed: module=l2tp
-* :vytask:`T1812` DHCP: hostnames of clients not resolving after update v1.2.3 -> 1.2-rolling
-* :vytask:`T1819` Reboot kills SNMPv3 configuration
-* :vytask:`T1822` Priority inversion wireless interface dhcpv6
-* :vytask:`T1825` Improve DHCP configuration error message
-* :vytask:`T1836` import-conf-mode-commands in vyos-1x/scripts fails to create an xml
-* :vytask:`T1839` LLDP shows "VyOS unknown" instead of "VyOS"
-* :vytask:`T1841` PPP ipv6-up.d direcotry missing
-* :vytask:`T1893` igmp-proxy: Do not allow adding unknown interface
-* :vytask:`T1903` Implementation udev predefined interface naming
-* :vytask:`T1904` update eth1 and eth2 link files for the vep4600
-
-
-1.2.3
------
-
-1.2.3 is a maintenance and feature backport release made in September 2019.
-
-New features
-^^^^^^^^^^^^
-
-* HTTP API
-* :vytask:`T1524` "set service dns forwarding allow-from <IPv4 net|IPv6 net>"
-  option for limiting queries to specific client networks
-* :vytask:`T1503` Functions for checking if a commit is in progress
-* :vytask:`T1543` "set system contig-mangement commit-archive source-address"
-  option
-* :vytask:`T1554` Intel NIC drivers now support receive side scaling and
-  multiqueue
-
-Resolved issues
-^^^^^^^^^^^^^^^
-
-* :vytask:`T1209` OSPF max-metric values over 100 no longer causes commit
-  errors
-* :vytask:`T1333` Fixes issue with DNS forwarding not performing recursive
-  lookups on domain specific forwarders
-* :vytask:`T1362` Special characters in VRRP passwords are handled correctly
-* :vytask:`T1377` BGP weight is applied properly
-* :vytask:`T1420` Fixed permission for log files
-* :vytask:`T1425` Wireguard interfaces now support /31 addresses
-* :vytask:`T1428` Wireguard correctly handles firewall marks
-* :vytask:`T1439` DHCPv6 static mappings now work correctly
-* :vytask:`T1450` Flood ping commands now works correctly
-* :vytask:`T1460` Op mode "show firewall" commands now support counters longer
-  than 8 digits (T1460)
-* :vytask:`T1465` Fixed priority inversion in VTI commands
-* :vytask:`T1468` Fixed remote-as check in the BGP route-reflector-client option
-* :vytask:`T1472` It's now possible to re-create VRRP groups with RFC
-  compatibility mode enabled
-* :vytask:`T1527` Fixed a typo in DHCPv6 server help strings
-* :vytask:`T1529` Unnumbered BGP peers now support VLAN interfaces
-* :vytask:`T1530` Fixed "set system syslog global archive file" command
-* :vytask:`T1531` Multiple fixes in cluster configuration scripts
-* :vytask:`T1537` Fixed missing help text for "service dns"
-* :vytask:`T1541` Fixed input validation in DHCPv6 relay options
-* :vytask:`T1551` It's now possible to create a QinQ interface and a firewall
-  assigned to it in one commit
-* :vytask:`T1559` URL filtering now uses correct rule database path and works
-  again
-* :vytask:`T1579` "show log vpn ipsec" command works again
-* :vytask:`T1576` "show arp interface <intf>" command works again
-* :vytask:`T1605` Fixed regression in L2TP/IPsec server
-* :vytask:`T1613` Netflow/sFlow captures IPv6 traffic correctly
-* :vytask:`T1616` "renew dhcpv6" command now works from op mode
-* :vytask:`T1642` BGP remove-private-as option iBGP vs eBGP check works
-  correctly now
-* :vytask:`T1540`, :vytask:`T1360`, :vytask:`T1264`, :vytask:`T1623` Multiple
-  improvements in name servers and hosts configuration handling
-
-Internals
-^^^^^^^^^
-
-``/etc/resolv.conf`` and ``/etc/hosts`` files are now managed by the
-*vyos-hostsd* service that listens on a ZMQ socket for update messages.
-
-1.2.2
------
-
-1.2.2 is a maintenance release made in July 2019.
-
-New features
-^^^^^^^^^^^^
-
-* Options for per-interface MSS clamping.
-* BGP extended next-hop capability
-* Relaxed BGP multipath option
-* Internal and external options for "remote-as" (accept any AS as long as it's
-  the same to this router or different, respectively)
-* "Unnumbered" (interface-based) BGP peers
-* BGP no-prepend option
-* Additive BGP community option
-* OSPFv3 network type option
-* Custom arguments for VRRP scripts
-* A script for querying values from config files
-
-Resolved issues
-^^^^^^^^^^^^^^^
-
-* Linux kernel 4.19.54, including a fix for the TCP SACK vulnerability
-* :vytask:`T1371` VRRP health-check scripts now can use arguments
-* :vytask:`T1497` DNS server addresses coming from a DHCP server are now
-  correctly propagated to resolv.conf
-* :vytask:`T1469` Domain-specific name servers in DNS forwarding are now used
-  for recursive queries
-* :vytask:`T1433` ``run show dhcpv6 server leases`` now display leases correctly
-* :vytask:`T1461` Deleting ``firewall options`` node no longer causes errors
-* :vytask:`T1458` Correct hostname is sent to remote syslog again
-* :vytask:`T1438` Board serial number from DMI is correctly displayed in
-  ``show version``
-* :vytask:`T1358`, :vytask:`T1355`, :vytask:`T1294` Multiple corrections in
-  remote syslog config
-* :vytask:`T1255` Fixed missing newline in ``/etc/hosts``
-* :vytask:`T1174` ``system domain-name`` is correctly included in
-  ``/etc/resolv.conf``
-* :vytask:`T1465` Fixed priority inversion in ``interfaces vti vtiX ip``
-  settings
-* :vytask:`T1446` Fixed errors when installing with RAID1 on UEFI machines
-* :vytask:`T1387` Fixed an error on disabling an interfaces that has no address
-* :vytask:`T1367` Fixed deleting VLAN interface with non-default MTU
-* :vytask:`T1505` vyos.config ``return_effective_values()`` function now
-  correctly returns a list rather than a string
-
-1.2.1
------
-
-VyOS 1.2.1 is a maintenance release made in April 2019.
-
-Resolved issues
-^^^^^^^^^^^^^^^
-
-* Package updates: kernel 4.19.32, open-vm-tools 10.3, latest Intel NIC drivers
-* :vytask:`T1326` The kernel now includes drivers for various USB serial
-  adapters, which allows people to add a serial console to a machine without
-  onboard RS232, or connect to something else from the router
-* The collection of network card firmware is now much more extensive
-* :vytask:`T1271` VRRP now correctly uses a virtual rather than physical MAC
-  addresses in the RFC-compliant mode
-* :vytask:`T1330` DHCP WPAD URL option works correctly again
-* :vytask:`T1312` Many to many NAT rules now can use source/destination and
-  translation networks of non-matching size. If 1:1 network bits translation is
-  desired, it's now users responsibility to check if prefix length matches.
-* :vytask:`T1290` IPv6 network prefix translation is fixed
-* :vytask:`T1308` Non-alphanumeric characters such as ``>`` can now be safely
-  used in PPPoE passwords
-* :vytask:`T1305` ``show | commands`` no longer fails when a config section ends
-  with a leaf node such as ``timezone`` in ``show system | commands``
-* :vytask:`T1235` ``show | commands`` correctly works in config mode now
-* :vytask:`T1298` VTI is now compatible with the DHCP-interface IPsec option
-* :vytask:`T1277` ``show dhcp server statistics`` command was broken in latest
-  Crux
-* :vytask:`T1261` An issue with TFTP server refusing to listen on addresses
-  other than loopback was fixed
-* :vytask:`T1224` Template issue that might cause UDP broadcast relay fail to
-  start is fixed
-* :vytask:`T1067` VXLAN value validation is improved
-* :vytask:`T1211` Blank hostnames in DHCP updates no longer can crash DNS
-  forwarding
-* :vytask:`T1322` Correct configuration is now generated for DHCPv6 relays with
-  more than one upstream interface
-* :vytask:`T1234` ``relay-agents-packets`` option works correctly now
-* :vytask:`T1231` Dynamic DNS data is now cleaned on configuration change
-* :vytask:`T1282` Remote Syslog can now use a fully qualified domain name
-* :vytask:`T1279` ACPI power off works again
-* :vytask:`T1247` Negation in WAN load balancing rules works again
-* :vytask:`T1218` FRR staticd now starts on boot correctly
-* :vytask:`T1296` The installer now correctly detects SD card devices
-* :vytask:`T1225` Wireguard peers can be disabled now
-* :vytask:`T1217` The issue with Wireguard interfaces impossible to delete
-  is fixed
-* :vytask:`T1160` Unintended IPv6 access is fixed in SNMP configuration
-* :vytask:`T1060` It's now possible to exclude hosts from the transparent
-  web proxy
-* :vytask:`T484` An issue with rules impossible to delete from the zone-based
-  firewall is fixed
-
-Earlier releases
-================
-
-Release notes for legacy versions (1.1.x, 1.0.x) can be found in the `archived wiki <https://web.archive.org/web/20200212180711/https://wiki.vyos.net/wiki/Category:Release_notes>`_.
diff --git a/docs/appendix/command-scripting.rst b/docs/automation/command-scripting.rst
similarity index 100%
rename from docs/appendix/command-scripting.rst
rename to docs/automation/command-scripting.rst
diff --git a/docs/appendix/http-api.rst b/docs/automation/http-api.rst
similarity index 100%
rename from docs/appendix/http-api.rst
rename to docs/automation/http-api.rst
diff --git a/docs/automation/index.rst b/docs/automation/index.rst
index a3df9bc0..1f2b40b1 100644
--- a/docs/automation/index.rst
+++ b/docs/automation/index.rst
@@ -6,4 +6,11 @@ VyOS Automation
   * Ansible
   * Saltstack
   * HTTP-API
-  * startup scripts
\ No newline at end of file
+  * startup scripts
+
+
+.. toctree::
+   :maxdepth: 1
+
+   command-scripting
+   http-api
\ No newline at end of file

From 0abea04850dfdaa0b56fc6dec94e5303300ba712 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Sun, 29 Nov 2020 21:18:33 +0100
Subject: [PATCH 123/295] arrange firewall

---
 .../firewall/index.rst}                       |  0
 docs/configuration/index.rst                  | 23 +++++++++++++++++++
 docs/index.rst                                |  1 -
 3 files changed, 23 insertions(+), 1 deletion(-)
 rename docs/{firewall.rst => configuration/firewall/index.rst} (100%)
 create mode 100644 docs/configuration/index.rst

diff --git a/docs/firewall.rst b/docs/configuration/firewall/index.rst
similarity index 100%
rename from docs/firewall.rst
rename to docs/configuration/firewall/index.rst
diff --git a/docs/configuration/index.rst b/docs/configuration/index.rst
new file mode 100644
index 00000000..bce013cb
--- /dev/null
+++ b/docs/configuration/index.rst
@@ -0,0 +1,23 @@
+###################
+Configuration Guide
+###################
+
+The following structure respresent the cli structure.
+
+.. toctree::
+   :maxdepth: 1
+   :includehidden:
+
+   firewall/index
+   highavailability/index
+   interfaces/index
+   loadbalancing/index
+   nat/index
+   policy/index
+   protocols/index
+   service/index
+   system/index
+   trafficpolicy/index
+   vpn/index
+   vrf/index
+   zonepolicy/index
\ No newline at end of file
diff --git a/docs/index.rst b/docs/index.rst
index 3322bf8d..4612d5f8 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -8,7 +8,6 @@ VyOS User Guide
 .. toctree::
    :maxdepth: 2
    :hidden:
-   :caption: FIND CAPTION NAME
 
    introducing/about
    introducing/history

From bfb3814cd120d1bb661af26b3c55341f1697b397 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Sun, 29 Nov 2020 21:25:50 +0100
Subject: [PATCH 124/295] arrange loadbalancing, high availability, qos

---
 .../highavailability/index.rst}                              | 0
 .../loadbalancing/index.rst}                                 | 0
 docs/{qos.rst => configuration/trafficpolicy/index.rst}      | 5 +++++
 3 files changed, 5 insertions(+)
 rename docs/{high-availability.rst => configuration/highavailability/index.rst} (100%)
 rename docs/{load-balancing.rst => configuration/loadbalancing/index.rst} (100%)
 rename docs/{qos.rst => configuration/trafficpolicy/index.rst} (99%)

diff --git a/docs/high-availability.rst b/docs/configuration/highavailability/index.rst
similarity index 100%
rename from docs/high-availability.rst
rename to docs/configuration/highavailability/index.rst
diff --git a/docs/load-balancing.rst b/docs/configuration/loadbalancing/index.rst
similarity index 100%
rename from docs/load-balancing.rst
rename to docs/configuration/loadbalancing/index.rst
diff --git a/docs/qos.rst b/docs/configuration/trafficpolicy/index.rst
similarity index 99%
rename from docs/qos.rst
rename to docs/configuration/trafficpolicy/index.rst
index 6826b83c..babccd6f 100644
--- a/docs/qos.rst
+++ b/docs/configuration/trafficpolicy/index.rst
@@ -1,5 +1,10 @@
 .. _qos:
 
+##############
+Traffic Policy
+##############
+
+
 ***
 QoS
 ***

From e7f01e6efc8578603592ff86c031d46f1f1f9d82 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Sun, 29 Nov 2020 21:32:45 +0100
Subject: [PATCH 125/295] arrange: nat, PBR, policy

---
 docs/{nat.rst => configuration/nat/index.rst} |  6 ++
 docs/{ => configuration/nat}/nptv6.rst        |  0
 .../policy/index.rst}                         | 68 +++++++++++++++++++
 docs/routing/policy.rst                       | 65 ------------------
 4 files changed, 74 insertions(+), 65 deletions(-)
 rename docs/{nat.rst => configuration/nat/index.rst} (99%)
 rename docs/{ => configuration/nat}/nptv6.rst (100%)
 rename docs/{routing/pbr.rst => configuration/policy/index.rst} (67%)
 delete mode 100644 docs/routing/policy.rst

diff --git a/docs/nat.rst b/docs/configuration/nat/index.rst
similarity index 99%
rename from docs/nat.rst
rename to docs/configuration/nat/index.rst
index 17698c26..85bd41d5 100644
--- a/docs/nat.rst
+++ b/docs/configuration/nat/index.rst
@@ -4,6 +4,12 @@
 NAT
 ###
 
+.. toctree::
+   :maxdepth: 1
+   :includehidden:
+
+   nptv6
+
 :abbr:`NAT (Network Address Translation)` is a common method of
 remapping one IP address space into another by modifying network address
 information in the IP header of packets while they are in transit across
diff --git a/docs/nptv6.rst b/docs/configuration/nat/nptv6.rst
similarity index 100%
rename from docs/nptv6.rst
rename to docs/configuration/nat/nptv6.rst
diff --git a/docs/routing/pbr.rst b/docs/configuration/policy/index.rst
similarity index 67%
rename from docs/routing/pbr.rst
rename to docs/configuration/policy/index.rst
index 7b0341cb..4be494e5 100644
--- a/docs/routing/pbr.rst
+++ b/docs/configuration/policy/index.rst
@@ -1,5 +1,72 @@
 .. include:: ../_include/need_improvement.txt
 
+######
+Policy
+######
+
+Routing Policies could be used to tell the router (self or neighbors) what
+routes and their attributes needs to be put into the routing table.
+
+There could be a wide range of routing policies. Some examples are below:
+
+* Set some metric to routes learned from a particular neighbor
+* Set some attributes (like AS PATH or Community value) to advertised routes to neighbors
+* Prefer a specific routing protocol routes over another routing protocol running on the same router
+
+Example
+=======
+
+**Policy definition:**
+
+.. code-block:: none
+
+  # Create policy
+  set policy route-map setmet rule 2 action 'permit'
+  set policy route-map setmet rule 2 set as-path-prepend '2 2 2'
+
+  # Apply policy to BGP
+  set protocols bgp 1 neighbor 203.0.113.2 address-family ipv4-unicast route-map import 'setmet'
+  set protocols bgp 1 neighbor 203.0.113.2 address-family ipv4-unicast soft-reconfiguration 'inbound'
+
+Using 'soft-reconfiguration' we get the policy update without bouncing the
+neighbor.
+
+**Routes learned before routing policy applied:**
+
+.. code-block:: none
+
+  vyos@vos1:~$ show ip bgp
+  BGP table version is 0, local router ID is 192.168.56.101
+  Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
+                r RIB-failure, S Stale, R Removed
+  Origin codes: i - IGP, e - EGP, ? - incomplete
+
+     Network          Next Hop            Metric LocPrf Weight Path
+  *> 198.51.100.3/32   203.0.113.2           1             0 2 i  < Path
+
+  Total number of prefixes 1
+
+**Routes learned after routing policy applied:**
+
+.. code-block:: none
+
+  vyos@vos1:~$ sho ip b
+  BGP table version is 0, local router ID is 192.168.56.101
+  Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
+                r RIB-failure, S Stale, R Removed
+  Origin codes: i - IGP, e - EGP, ? - incomplete
+
+     Network          Next Hop            Metric LocPrf Weight Path
+  *> 198.51.100.3/32   203.0.113.2           1             0 2 2 2 2 i
+
+  Total number of prefixes 1
+  vyos@vos1:~$
+
+You now see the longer AS path.
+
+
+.. include:: ../_include/need_improvement.txt
+
 .. _routing-pbr:
 
 ###
@@ -135,3 +202,4 @@ Add multiple source IP in one rule with same priority
   set policy local-route rule 101 source '192.0.1.254'
   set policy local-route rule 101 source '192.0.1.253'
   set policy local-route rule 101 source '203.0.113.0/24'
+
diff --git a/docs/routing/policy.rst b/docs/routing/policy.rst
deleted file mode 100644
index 4eeb40d6..00000000
--- a/docs/routing/policy.rst
+++ /dev/null
@@ -1,65 +0,0 @@
-.. include:: ../_include/need_improvement.txt
-
-######
-Policy
-######
-
-Routing Policies could be used to tell the router (self or neighbors) what
-routes and their attributes needs to be put into the routing table.
-
-There could be a wide range of routing policies. Some examples are below:
-
-* Set some metric to routes learned from a particular neighbor
-* Set some attributes (like AS PATH or Community value) to advertised routes to neighbors
-* Prefer a specific routing protocol routes over another routing protocol running on the same router
-
-Example
-=======
-
-**Policy definition:**
-
-.. code-block:: none
-
-  # Create policy
-  set policy route-map setmet rule 2 action 'permit'
-  set policy route-map setmet rule 2 set as-path-prepend '2 2 2'
-
-  # Apply policy to BGP
-  set protocols bgp 1 neighbor 203.0.113.2 address-family ipv4-unicast route-map import 'setmet'
-  set protocols bgp 1 neighbor 203.0.113.2 address-family ipv4-unicast soft-reconfiguration 'inbound'
-
-Using 'soft-reconfiguration' we get the policy update without bouncing the
-neighbor.
-
-**Routes learned before routing policy applied:**
-
-.. code-block:: none
-
-  vyos@vos1:~$ show ip bgp
-  BGP table version is 0, local router ID is 192.168.56.101
-  Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
-                r RIB-failure, S Stale, R Removed
-  Origin codes: i - IGP, e - EGP, ? - incomplete
-
-     Network          Next Hop            Metric LocPrf Weight Path
-  *> 198.51.100.3/32   203.0.113.2           1             0 2 i  < Path
-
-  Total number of prefixes 1
-
-**Routes learned after routing policy applied:**
-
-.. code-block:: none
-
-  vyos@vos1:~$ sho ip b
-  BGP table version is 0, local router ID is 192.168.56.101
-  Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
-                r RIB-failure, S Stale, R Removed
-  Origin codes: i - IGP, e - EGP, ? - incomplete
-
-     Network          Next Hop            Metric LocPrf Weight Path
-  *> 198.51.100.3/32   203.0.113.2           1             0 2 2 2 2 i
-
-  Total number of prefixes 1
-  vyos@vos1:~$
-
-You now see the longer AS path.

From 4abded8025a47990e58cd0a5fe9b96e38f4a3715 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Sun, 29 Nov 2020 21:52:28 +0100
Subject: [PATCH 126/295] arrange: interfaces

---
 Pipfile                                       | 16 +++++++++++
 .../interfaces/bonding.rst}                   |  0
 .../{ => configuration}/interfaces/bridge.rst |  0
 docs/{ => configuration}/interfaces/dummy.rst |  0
 .../interfaces/ethernet.rst                   |  0
 .../{ => configuration}/interfaces/geneve.rst |  0
 docs/configuration/interfaces/index.rst       | 28 +++++++++++++++++++
 .../{ => configuration}/interfaces/l2tpv3.rst |  0
 .../interfaces/loopback.rst                   |  0
 .../{ => configuration}/interfaces/macsec.rst |  0
 .../interfaces}/openvpn.rst                   |  0
 docs/{ => configuration}/interfaces/pppoe.rst |  0
 .../interfaces/pseudo-ethernet.rst            |  0
 .../{ => configuration}/interfaces/tunnel.rst | 19 -------------
 docs/configuration/interfaces/vti.rst         | 22 +++++++++++++++
 docs/{ => configuration}/interfaces/vxlan.rst |  0
 .../interfaces}/wireguard.rst                 |  0
 .../interfaces/wireless.rst                   |  0
 .../interfaces/wirelessmodem.rst              |  0
 19 files changed, 66 insertions(+), 19 deletions(-)
 create mode 100644 Pipfile
 rename docs/{interfaces/bond.rst => configuration/interfaces/bonding.rst} (100%)
 rename docs/{ => configuration}/interfaces/bridge.rst (100%)
 rename docs/{ => configuration}/interfaces/dummy.rst (100%)
 rename docs/{ => configuration}/interfaces/ethernet.rst (100%)
 rename docs/{ => configuration}/interfaces/geneve.rst (100%)
 create mode 100644 docs/configuration/interfaces/index.rst
 rename docs/{ => configuration}/interfaces/l2tpv3.rst (100%)
 rename docs/{ => configuration}/interfaces/loopback.rst (100%)
 rename docs/{ => configuration}/interfaces/macsec.rst (100%)
 rename docs/{vpn => configuration/interfaces}/openvpn.rst (100%)
 rename docs/{ => configuration}/interfaces/pppoe.rst (100%)
 rename docs/{ => configuration}/interfaces/pseudo-ethernet.rst (100%)
 rename docs/{ => configuration}/interfaces/tunnel.rst (95%)
 create mode 100644 docs/configuration/interfaces/vti.rst
 rename docs/{ => configuration}/interfaces/vxlan.rst (100%)
 rename docs/{vpn => configuration/interfaces}/wireguard.rst (100%)
 rename docs/{ => configuration}/interfaces/wireless.rst (100%)
 rename docs/{ => configuration}/interfaces/wirelessmodem.rst (100%)

diff --git a/Pipfile b/Pipfile
new file mode 100644
index 00000000..423092c4
--- /dev/null
+++ b/Pipfile
@@ -0,0 +1,16 @@
+[[source]]
+url = "https://pypi.org/simple"
+verify_ssl = true
+name = "pypi"
+
+[packages]
+sphinx-rtd-theme = "*"
+docutils = "*"
+lxml = "*"
+sphinx-notfound-page = "*"
+Sphinx = ">=1.4.3"
+
+[dev-packages]
+
+[requires]
+python_version = "3.9"
diff --git a/docs/interfaces/bond.rst b/docs/configuration/interfaces/bonding.rst
similarity index 100%
rename from docs/interfaces/bond.rst
rename to docs/configuration/interfaces/bonding.rst
diff --git a/docs/interfaces/bridge.rst b/docs/configuration/interfaces/bridge.rst
similarity index 100%
rename from docs/interfaces/bridge.rst
rename to docs/configuration/interfaces/bridge.rst
diff --git a/docs/interfaces/dummy.rst b/docs/configuration/interfaces/dummy.rst
similarity index 100%
rename from docs/interfaces/dummy.rst
rename to docs/configuration/interfaces/dummy.rst
diff --git a/docs/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst
similarity index 100%
rename from docs/interfaces/ethernet.rst
rename to docs/configuration/interfaces/ethernet.rst
diff --git a/docs/interfaces/geneve.rst b/docs/configuration/interfaces/geneve.rst
similarity index 100%
rename from docs/interfaces/geneve.rst
rename to docs/configuration/interfaces/geneve.rst
diff --git a/docs/configuration/interfaces/index.rst b/docs/configuration/interfaces/index.rst
new file mode 100644
index 00000000..85d2c177
--- /dev/null
+++ b/docs/configuration/interfaces/index.rst
@@ -0,0 +1,28 @@
+##########
+Interfaces
+##########
+
+
+.. toctree::
+   :maxdepth: 1
+   :includehidden:
+
+   bonding
+   bridge
+   dummy
+   ethernet
+   geneve
+   l2tpv3
+   loopback
+   macsec
+   openvpn
+   pppoe
+   pseudo-ethernet
+   tunnel
+   vti
+   vxlan
+   wireguard
+   wireless
+   wirelessmodem
+
+
diff --git a/docs/interfaces/l2tpv3.rst b/docs/configuration/interfaces/l2tpv3.rst
similarity index 100%
rename from docs/interfaces/l2tpv3.rst
rename to docs/configuration/interfaces/l2tpv3.rst
diff --git a/docs/interfaces/loopback.rst b/docs/configuration/interfaces/loopback.rst
similarity index 100%
rename from docs/interfaces/loopback.rst
rename to docs/configuration/interfaces/loopback.rst
diff --git a/docs/interfaces/macsec.rst b/docs/configuration/interfaces/macsec.rst
similarity index 100%
rename from docs/interfaces/macsec.rst
rename to docs/configuration/interfaces/macsec.rst
diff --git a/docs/vpn/openvpn.rst b/docs/configuration/interfaces/openvpn.rst
similarity index 100%
rename from docs/vpn/openvpn.rst
rename to docs/configuration/interfaces/openvpn.rst
diff --git a/docs/interfaces/pppoe.rst b/docs/configuration/interfaces/pppoe.rst
similarity index 100%
rename from docs/interfaces/pppoe.rst
rename to docs/configuration/interfaces/pppoe.rst
diff --git a/docs/interfaces/pseudo-ethernet.rst b/docs/configuration/interfaces/pseudo-ethernet.rst
similarity index 100%
rename from docs/interfaces/pseudo-ethernet.rst
rename to docs/configuration/interfaces/pseudo-ethernet.rst
diff --git a/docs/interfaces/tunnel.rst b/docs/configuration/interfaces/tunnel.rst
similarity index 95%
rename from docs/interfaces/tunnel.rst
rename to docs/configuration/interfaces/tunnel.rst
index c14314d1..4b9da26b 100644
--- a/docs/interfaces/tunnel.rst
+++ b/docs/configuration/interfaces/tunnel.rst
@@ -210,26 +210,7 @@ that are discarding IP protocol 47 or blocking your source/desintation traffic.
   4 packets transmitted, 4 received, 0% packet loss, time 3008ms
   rtt min/avg/max/mdev = 1.055/1.729/1.989/0.395 ms
 
-Virtual Tunnel Interface (VTI)
-------------------------------
 
-Set Virtual Tunnel Interface
-
-.. code-block:: none
-
-  set interfaces vti vti0 address 192.168.2.249/30
-  set interfaces vti vti0 address 2001:db8:2::249/64
-
-Results in:
-
-.. code-block:: none
-
-  vyos@vyos# show interfaces vti
-  vti vti0 {
-      address 192.168.2.249/30
-      address 2001:db8:2::249/64
-      description "Description"
-  }
 
 .. _`other proposals`: https://www.isc.org/othersoftware/
 .. _`Hurricane Electric`: https://tunnelbroker.net/
diff --git a/docs/configuration/interfaces/vti.rst b/docs/configuration/interfaces/vti.rst
new file mode 100644
index 00000000..62cd13f3
--- /dev/null
+++ b/docs/configuration/interfaces/vti.rst
@@ -0,0 +1,22 @@
+##############################
+Virtual Tunnel Interface (VTI)
+##############################
+
+
+Set Virtual Tunnel Interface
+
+.. code-block:: none
+
+  set interfaces vti vti0 address 192.168.2.249/30
+  set interfaces vti vti0 address 2001:db8:2::249/64
+
+Results in:
+
+.. code-block:: none
+
+  vyos@vyos# show interfaces vti
+  vti vti0 {
+      address 192.168.2.249/30
+      address 2001:db8:2::249/64
+      description "Description"
+  }
\ No newline at end of file
diff --git a/docs/interfaces/vxlan.rst b/docs/configuration/interfaces/vxlan.rst
similarity index 100%
rename from docs/interfaces/vxlan.rst
rename to docs/configuration/interfaces/vxlan.rst
diff --git a/docs/vpn/wireguard.rst b/docs/configuration/interfaces/wireguard.rst
similarity index 100%
rename from docs/vpn/wireguard.rst
rename to docs/configuration/interfaces/wireguard.rst
diff --git a/docs/interfaces/wireless.rst b/docs/configuration/interfaces/wireless.rst
similarity index 100%
rename from docs/interfaces/wireless.rst
rename to docs/configuration/interfaces/wireless.rst
diff --git a/docs/interfaces/wirelessmodem.rst b/docs/configuration/interfaces/wirelessmodem.rst
similarity index 100%
rename from docs/interfaces/wirelessmodem.rst
rename to docs/configuration/interfaces/wirelessmodem.rst

From ad0dc9cf1a2161cb0bf2cfbc9c6fd4df2f78ab3a Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Sun, 29 Nov 2020 22:00:20 +0100
Subject: [PATCH 127/295] cmdinclude: fix errormsg

---
 docs/_ext/vyos.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/_ext/vyos.py b/docs/_ext/vyos.py
index 4b4b1a89..89cc8ab7 100644
--- a/docs/_ext/vyos.py
+++ b/docs/_ext/vyos.py
@@ -219,9 +219,9 @@ class CfgInclude(Directive):
                               'Cannot encode input file path "%s" '
                               '(wrong locale?).' %
                               (self.name, SafeString(path)))
-        except IOError:
+        except IOError as error:
             raise self.severe(u'Problems with "%s" directive path:\n%s.' %
-                      (self.name, ErrorString(error)))
+                      (self.name, error))
         startline = self.options.get('start-line', None)
         endline = self.options.get('end-line', None)
         try:

From 904bc5cbaeb2567d09b44bd5453b9db340a7d530 Mon Sep 17 00:00:00 2001
From: Eshenko Dmitriy <dmitriy.eshenko@vyos.io>
Date: Mon, 30 Nov 2020 17:23:13 +0300
Subject: [PATCH 128/295] Change IPSec ESP mode from tunnel to transport to fix
 issue when Spokes behind a NAT

---
 docs/vpn/dmvpn.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/vpn/dmvpn.rst b/docs/vpn/dmvpn.rst
index 5100b92f..662165a9 100644
--- a/docs/vpn/dmvpn.rst
+++ b/docs/vpn/dmvpn.rst
@@ -199,7 +199,7 @@ Hub
 
   set vpn ipsec esp-group ESP-HUB compression 'disable'
   set vpn ipsec esp-group ESP-HUB lifetime '1800'
-  set vpn ipsec esp-group ESP-HUB mode 'tunnel'
+  set vpn ipsec esp-group ESP-HUB mode 'transport'
   set vpn ipsec esp-group ESP-HUB pfs 'dh-group2'
   set vpn ipsec esp-group ESP-HUB proposal 1 encryption 'aes256'
   set vpn ipsec esp-group ESP-HUB proposal 1 hash 'sha1'
@@ -307,7 +307,7 @@ VyOS can also run in DMVPN spoke mode.
 
   set vpn ipsec esp-group ESP-HUB compression 'disable'
   set vpn ipsec esp-group ESP-HUB lifetime '1800'
-  set vpn ipsec esp-group ESP-HUB mode 'tunnel'
+  set vpn ipsec esp-group ESP-HUB mode 'transport'
   set vpn ipsec esp-group ESP-HUB pfs 'dh-group2'
   set vpn ipsec esp-group ESP-HUB proposal 1 encryption 'aes256'
   set vpn ipsec esp-group ESP-HUB proposal 1 hash 'sha1'

From e33e1268f944be445b5a771df0e97e913487512f Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Mon, 30 Nov 2020 19:46:59 +0100
Subject: [PATCH 129/295] change include to absolute path

---
 docs/_ext/vyos.py                             |  9 +++++--
 docs/_include/interface-common-with-dhcp.txt  |  8 +++---
 .../interface-common-without-dhcp.txt         |  4 +--
 docs/_include/interface-common.txt            | 18 ++++++-------
 docs/_include/interface-dhcpv6-options.txt    |  2 +-
 docs/_include/interface-vlan-8021ad.txt       | 26 +++++++++----------
 docs/_include/interface-vlan-8021q.txt        | 24 ++++++++---------
 docs/configuration/firewall/index.rst         |  1 +
 docs/configuration/interfaces/bonding.rst     |  4 +--
 docs/configuration/interfaces/bridge.rst      |  4 +--
 docs/configuration/interfaces/dummy.rst       |  8 +++---
 docs/configuration/interfaces/ethernet.rst    |  6 ++---
 docs/configuration/interfaces/geneve.rst      |  2 +-
 docs/configuration/interfaces/l2tpv3.rst      |  4 +--
 docs/configuration/interfaces/loopback.rst    |  4 +--
 docs/configuration/interfaces/macsec.rst      |  2 +-
 docs/configuration/interfaces/openvpn.rst     |  2 +-
 docs/configuration/interfaces/pppoe.rst       |  8 +++---
 .../interfaces/pseudo-ethernet.rst            |  4 +--
 docs/configuration/interfaces/tunnel.rst      |  2 +-
 docs/configuration/interfaces/vxlan.rst       |  2 +-
 docs/configuration/interfaces/wireless.rst    |  6 ++---
 .../interfaces/wirelessmodem.rst              |  6 ++---
 docs/configuration/nat/nptv6.rst              |  2 +-
 docs/configuration/policy/index.rst           |  4 +--
 docs/contributing/debugging.rst               |  2 +-
 docs/contributing/development.rst             |  2 +-
 docs/contributing/documentation.rst           |  2 +-
 docs/contributing/issues-features.rst         |  2 +-
 docs/interfaces/advanced-index.rst            | 23 ----------------
 docs/interfaces/basic-index.rst               | 12 ---------
 docs/routing/bfd.rst                          |  2 +-
 docs/routing/ospf.rst                         |  2 +-
 docs/routing/rip.rst                          |  2 +-
 docs/services/conntrack.rst                   |  2 +-
 docs/services/ipoe-server.rst                 |  4 +--
 docs/services/pppoe-server.rst                |  2 +-
 docs/system/lcd.rst                           |  2 +-
 docs/vpn/sstp.rst                             |  2 +-
 39 files changed, 97 insertions(+), 126 deletions(-)
 delete mode 100644 docs/interfaces/advanced-index.rst
 delete mode 100644 docs/interfaces/basic-index.rst

diff --git a/docs/_ext/vyos.py b/docs/_ext/vyos.py
index 89cc8ab7..4a974b46 100644
--- a/docs/_ext/vyos.py
+++ b/docs/_ext/vyos.py
@@ -3,7 +3,7 @@ import json
 import os
 from docutils import io, nodes, utils, statemachine
 from docutils.parsers.rst.roles import set_classes
-from docutils.parsers.rst import Directive, directives
+from docutils.parsers.rst import Directive, directives, states
 
 from sphinx.util.docutils import SphinxDirective
 
@@ -173,7 +173,7 @@ class inlinecmd(nodes.inline):
         #self.literal_whitespace -= 1
 
 
-class CfgInclude(Directive):
+class CfgInclude(SphinxDirective):
     required_arguments = 1
     optional_arguments = 0
     final_argument_whitespace = True
@@ -189,10 +189,15 @@ class CfgInclude(Directive):
         'var8': str,
         'var9': str
     }
+    standard_include_path = os.path.join(os.path.dirname(states.__file__),
+                                         'include')
 
     def run(self):
         ### Copy from include directive docutils 
         """Include a file as part of the content of this reST file."""
+        rel_filename, filename = self.env.relfn2path(self.arguments[0])
+        self.arguments[0] = filename
+        self.env.note_included(filename)
         if not self.state.document.settings.file_insertion_enabled:
             raise self.warning('"%s" directive disabled.' % self.name)
         source = self.state_machine.input_lines.source(
diff --git a/docs/_include/interface-common-with-dhcp.txt b/docs/_include/interface-common-with-dhcp.txt
index 3e1394a3..1cacdd53 100644
--- a/docs/_include/interface-common-with-dhcp.txt
+++ b/docs/_include/interface-common-with-dhcp.txt
@@ -1,17 +1,17 @@
-.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
+.. cmdinclude:: /_include/interface-address-with-dhcp.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-common.txt
+.. cmdinclude:: /_include/interface-common.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
 **DHCP(v6)**
 
-.. cmdinclude:: ../_include/interface-dhcp-options.txt
+.. cmdinclude:: /_include/interface-dhcp-options.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-dhcpv6-options.txt
+.. cmdinclude:: /_include/interface-dhcpv6-options.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
diff --git a/docs/_include/interface-common-without-dhcp.txt b/docs/_include/interface-common-without-dhcp.txt
index d861f003..73d39dd0 100644
--- a/docs/_include/interface-common-without-dhcp.txt
+++ b/docs/_include/interface-common-without-dhcp.txt
@@ -1,7 +1,7 @@
-.. cmdinclude:: ../_include/interface-address.txt
+.. cmdinclude:: /_include/interface-address.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-common.txt
+.. cmdinclude:: /_include/interface-common.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
diff --git a/docs/_include/interface-common.txt b/docs/_include/interface-common.txt
index de29356f..68c9c448 100644
--- a/docs/_include/interface-common.txt
+++ b/docs/_include/interface-common.txt
@@ -1,36 +1,36 @@
-.. cmdinclude:: ../_include/interface-description.txt
+.. cmdinclude:: /_include/interface-description.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-disable.txt
+.. cmdinclude:: /_include/interface-disable.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-disable-flow-control.txt
+.. cmdinclude:: /_include/interface-disable-flow-control.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-disable-link-detect.txt
+.. cmdinclude:: /_include/interface-disable-link-detect.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-mac.txt
+.. cmdinclude:: /_include/interface-mac.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-mtu.txt
+.. cmdinclude:: /_include/interface-mtu.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
+.. cmdinclude:: /_include/interface-ipv6-addr-autoconf.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+.. cmdinclude:: /_include/interface-ipv6-addr-eui64.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-vrf.txt
+.. cmdinclude:: /_include/interface-vrf.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
diff --git a/docs/_include/interface-dhcpv6-options.txt b/docs/_include/interface-dhcpv6-options.txt
index a54a7dce..a47d9f32 100644
--- a/docs/_include/interface-dhcpv6-options.txt
+++ b/docs/_include/interface-dhcpv6-options.txt
@@ -30,7 +30,7 @@
 
     set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-options temporary
 
-.. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
+.. cmdinclude:: /_include/interface-dhcpv6-prefix-delegation.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
   :var2: {{ var2 }}
diff --git a/docs/_include/interface-vlan-8021ad.txt b/docs/_include/interface-vlan-8021ad.txt
index a1e971be..12925ad4 100644
--- a/docs/_include/interface-vlan-8021ad.txt
+++ b/docs/_include/interface-vlan-8021ad.txt
@@ -1,4 +1,4 @@
-.. include:: ../_include/need_improvement.txt
+.. include:: /_include/need_improvement.txt
 
 IEEE 802.1ad_ was an Ethernet networking standard informally known as QinQ as
 an amendment to IEEE standard 802.1q VLAN interfaces as described above.
@@ -28,7 +28,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
 (service tag with Ethernet Type = 0x88a8).
 
 
-.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
+.. cmdinclude:: /_include/interface-address-with-dhcp.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -38,7 +38,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-description.txt
+.. cmdinclude:: /_include/interface-description.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -48,7 +48,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-disable.txt
+.. cmdinclude:: /_include/interface-disable.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -58,7 +58,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-disable-link-detect.txt
+.. cmdinclude:: /_include/interface-disable-link-detect.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -68,7 +68,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-mac.txt
+.. cmdinclude:: /_include/interface-mac.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -78,7 +78,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-mtu.txt
+.. cmdinclude:: /_include/interface-mtu.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -88,7 +88,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
+.. cmdinclude:: /_include/interface-ipv6-addr-autoconf.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -98,7 +98,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+.. cmdinclude:: /_include/interface-ipv6-addr-eui64.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -108,7 +108,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-vrf.txt
+.. cmdinclude:: /_include/interface-vrf.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -120,7 +120,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
 
 **DHCP(v6)**
 
-.. cmdinclude:: ../_include/interface-dhcp-options.txt
+.. cmdinclude:: /_include/interface-dhcp-options.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -130,7 +130,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-dhcpv6-options.txt
+.. cmdinclude:: /_include/interface-dhcpv6-options.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -140,4 +140,4 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. include:: ../common-references.rst
+.. include:: /common-references.rst
diff --git a/docs/_include/interface-vlan-8021q.txt b/docs/_include/interface-vlan-8021q.txt
index 2c7e58f7..37f652f3 100644
--- a/docs/_include/interface-vlan-8021q.txt
+++ b/docs/_include/interface-vlan-8021q.txt
@@ -29,63 +29,63 @@ term used for this is ``vif``.
 
   .. note:: Only 802.1Q-tagged packets are accepted on Ethernet vifs.
 
-.. cmdinclude:: ../_include/interface-address-with-dhcp.txt
+.. cmdinclude:: /_include/interface-address-with-dhcp.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-description.txt
+.. cmdinclude:: /_include/interface-description.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-disable.txt
+.. cmdinclude:: /_include/interface-disable.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-disable-link-detect.txt
+.. cmdinclude:: /_include/interface-disable-link-detect.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-mac.txt
+.. cmdinclude:: /_include/interface-mac.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-mtu.txt
+.. cmdinclude:: /_include/interface-mtu.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-ipv6-addr-autoconf.txt
+.. cmdinclude:: /_include/interface-ipv6-addr-autoconf.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-ipv6-addr-eui64.txt
+.. cmdinclude:: /_include/interface-ipv6-addr-eui64.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-vrf.txt
+.. cmdinclude:: /_include/interface-vrf.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
@@ -94,18 +94,18 @@ term used for this is ``vif``.
 
 **DHCP(v6)**
 
-.. cmdinclude:: ../_include/interface-dhcp-options.txt
+.. cmdinclude:: /_include/interface-dhcp-options.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-dhcpv6-options.txt
+.. cmdinclude:: /_include/interface-dhcpv6-options.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
    :var4: 10
 
-.. include:: ../common-references.rst
\ No newline at end of file
+.. include:: /common-references.rst
\ No newline at end of file
diff --git a/docs/configuration/firewall/index.rst b/docs/configuration/firewall/index.rst
index 870e9a08..d9a3ebe3 100644
--- a/docs/configuration/firewall/index.rst
+++ b/docs/configuration/firewall/index.rst
@@ -3,6 +3,7 @@
 Firewall
 ========
 
+
 Overview
 --------
 
diff --git a/docs/configuration/interfaces/bonding.rst b/docs/configuration/interfaces/bonding.rst
index 7faddd6f..8ec8f34d 100644
--- a/docs/configuration/interfaces/bonding.rst
+++ b/docs/configuration/interfaces/bonding.rst
@@ -17,7 +17,7 @@ Configuration
 Common interface configuration
 ==============================
 
-.. cmdinclude:: ../_include/interface-common-with-dhcp.txt
+.. cmdinclude:: /_include/interface-common-with-dhcp.txt
    :var0: bond
    :var1: bond0
 
@@ -259,7 +259,7 @@ Bond options
 VLAN
 ====
 
-.. cmdinclude:: ../_include/interface-vlan-8021q.txt
+.. cmdinclude:: /_include/interface-vlan-8021q.txt
    :var0: bond
    :var1: bond0
 
diff --git a/docs/configuration/interfaces/bridge.rst b/docs/configuration/interfaces/bridge.rst
index dc94a761..766d2aa5 100644
--- a/docs/configuration/interfaces/bridge.rst
+++ b/docs/configuration/interfaces/bridge.rst
@@ -21,7 +21,7 @@ Configuration
 Common interface configuration
 ==============================
 
-.. cmdinclude:: ../_include/interface-common-with-dhcp.txt
+.. cmdinclude:: /_include/interface-common-with-dhcp.txt
    :var0: bridge
    :var1: br0
 
@@ -116,7 +116,7 @@ links providing fault tolerance if an active link fails.
 VLAN
 ====
 
-.. cmdinclude:: ../_include/interface-vlan-8021q.txt
+.. cmdinclude:: /_include/interface-vlan-8021q.txt
    :var0: bridge
    :var1: br0
 
diff --git a/docs/configuration/interfaces/dummy.rst b/docs/configuration/interfaces/dummy.rst
index c36d0024..c9845230 100644
--- a/docs/configuration/interfaces/dummy.rst
+++ b/docs/configuration/interfaces/dummy.rst
@@ -25,19 +25,19 @@ Configuration
 Common interface configuration
 ==============================
 
-.. cmdinclude:: ../_include/interface-address.txt
+.. cmdinclude:: /_include/interface-address.txt
    :var0: dummy
    :var1: dum0
 
-.. cmdinclude:: ../_include/interface-description.txt
+.. cmdinclude:: /_include/interface-description.txt
    :var0: dummy
    :var1: dum0
 
-.. cmdinclude:: ../_include/interface-disable.txt
+.. cmdinclude:: /_include/interface-disable.txt
    :var0: dummy
    :var1: dum0
 
-.. cmdinclude:: ../_include/interface-vrf.txt
+.. cmdinclude:: /_include/interface-vrf.txt
    :var0: dummy
    :var1: dum0
 
diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst
index f2ab3f67..9311c947 100644
--- a/docs/configuration/interfaces/ethernet.rst
+++ b/docs/configuration/interfaces/ethernet.rst
@@ -14,7 +14,7 @@ Configuration
 Common interface configuration
 ==============================
 
-.. cmdinclude:: ../_include/interface-common-with-dhcp.txt
+.. cmdinclude:: /_include/interface-common-with-dhcp.txt
    :var0: ethernet
    :var1: eth0
 
@@ -72,14 +72,14 @@ VLAN
 Regular VLANs (802.1q)
 ----------------------
 
-.. cmdinclude:: ../_include/interface-vlan-8021q.txt
+.. cmdinclude:: /_include/interface-vlan-8021q.txt
    :var0: ethernet
    :var1: eth0
 
 QinQ (802.1ad)
 --------------
 
-.. cmdinclude:: ../_include/interface-vlan-8021ad.txt
+.. cmdinclude:: /_include/interface-vlan-8021ad.txt
    :var0: ethernet
    :var1: eth0
 
diff --git a/docs/configuration/interfaces/geneve.rst b/docs/configuration/interfaces/geneve.rst
index 47068687..9e00d621 100644
--- a/docs/configuration/interfaces/geneve.rst
+++ b/docs/configuration/interfaces/geneve.rst
@@ -39,7 +39,7 @@ Configuration
 Common interface configuration
 ==============================
 
-.. cmdinclude:: ../_include/interface-common-without-dhcp.txt
+.. cmdinclude:: /_include/interface-common-without-dhcp.txt
    :var0: geneve
    :var1: gnv0
 
diff --git a/docs/configuration/interfaces/l2tpv3.rst b/docs/configuration/interfaces/l2tpv3.rst
index 4c9cbf9b..a4b7be36 100644
--- a/docs/configuration/interfaces/l2tpv3.rst
+++ b/docs/configuration/interfaces/l2tpv3.rst
@@ -1,4 +1,4 @@
-.. include:: ../_include/need_improvement.txt
+.. include:: /_include/need_improvement.txt
 
 .. _l2tpv3-interface:
 
@@ -31,7 +31,7 @@ Configuration
 Common interface configuration
 ==============================
 
-.. cmdinclude:: ../_include/interface-common-without-dhcp.txt
+.. cmdinclude:: /_include/interface-common-without-dhcp.txt
    :var0: l2tpv3
    :var1: l2tpeth0
 
diff --git a/docs/configuration/interfaces/loopback.rst b/docs/configuration/interfaces/loopback.rst
index a6d659b5..f7386c62 100644
--- a/docs/configuration/interfaces/loopback.rst
+++ b/docs/configuration/interfaces/loopback.rst
@@ -26,11 +26,11 @@ Configuration
 Common interface configuration
 ==============================
 
-.. cmdinclude:: ../_include/interface-address.txt
+.. cmdinclude:: /_include/interface-address.txt
    :var0: loopback
    :var1: lo
 
-.. cmdinclude:: ../_include/interface-description.txt
+.. cmdinclude:: /_include/interface-description.txt
    :var0: loopback
    :var1: lo
 
diff --git a/docs/configuration/interfaces/macsec.rst b/docs/configuration/interfaces/macsec.rst
index ebc8f151..2bf643aa 100644
--- a/docs/configuration/interfaces/macsec.rst
+++ b/docs/configuration/interfaces/macsec.rst
@@ -20,7 +20,7 @@ Configuration
 Common interface configuration
 ==============================
 
-.. cmdinclude:: ../_include/interface-common-with-dhcp.txt
+.. cmdinclude:: /_include/interface-common-with-dhcp.txt
    :var0: macsec
    :var1: macsec0
 
diff --git a/docs/configuration/interfaces/openvpn.rst b/docs/configuration/interfaces/openvpn.rst
index c6934335..7646959c 100644
--- a/docs/configuration/interfaces/openvpn.rst
+++ b/docs/configuration/interfaces/openvpn.rst
@@ -581,4 +581,4 @@ The following commands let you reset OpenVPN.
 
 
 
-.. include:: ../common-references.rst
+.. include:: /common-references.rst
diff --git a/docs/configuration/interfaces/pppoe.rst b/docs/configuration/interfaces/pppoe.rst
index 313edd84..decfd348 100644
--- a/docs/configuration/interfaces/pppoe.rst
+++ b/docs/configuration/interfaces/pppoe.rst
@@ -59,15 +59,15 @@ Configuration
 Common interface configuration
 ==============================
 
-.. cmdinclude:: ../_include/interface-description.txt
+.. cmdinclude:: /_include/interface-description.txt
    :var0: pppoe
    :var1: pppoe0
 
-.. cmdinclude:: ../_include/interface-disable.txt
+.. cmdinclude:: /_include/interface-disable.txt
    :var0: pppoe
    :var1: pppoe0
 
-.. cmdinclude:: ../_include/interface-vrf.txt
+.. cmdinclude:: /_include/interface-vrf.txt
    :var0: pppoe
    :var1: pppoe0
 
@@ -177,7 +177,7 @@ IPv6
    Use this command to enable acquisition of IPv6 address using stateless
    autoconfig (SLAAC).
 
-.. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
+.. cmdinclude:: /_include/interface-dhcpv6-prefix-delegation.txt
   :var0: pppoe
   :var1: pppoe0
 
diff --git a/docs/configuration/interfaces/pseudo-ethernet.rst b/docs/configuration/interfaces/pseudo-ethernet.rst
index c2baca39..0471d2e1 100644
--- a/docs/configuration/interfaces/pseudo-ethernet.rst
+++ b/docs/configuration/interfaces/pseudo-ethernet.rst
@@ -45,7 +45,7 @@ Configuration
 Common interface configuration
 ==============================
 
-.. cmdinclude:: ../_include/interface-common-with-dhcp.txt
+.. cmdinclude:: /_include/interface-common-with-dhcp.txt
    :var0: pseudo-ethernet
    :var1: peth0
 
@@ -60,6 +60,6 @@ Pseudo Ethernet/MACVLAN options
 VLAN
 ====
 
-.. cmdinclude:: ../_include/interface-vlan-8021q.txt
+.. cmdinclude:: /_include/interface-vlan-8021q.txt
    :var0: pseudo-ethernet
    :var1: peth0
diff --git a/docs/configuration/interfaces/tunnel.rst b/docs/configuration/interfaces/tunnel.rst
index 4b9da26b..7b1502f8 100644
--- a/docs/configuration/interfaces/tunnel.rst
+++ b/docs/configuration/interfaces/tunnel.rst
@@ -16,7 +16,7 @@ a closer look at the protocols and options currently supported by VyOS.
 Common interface configuration
 ------------------------------
 
-.. cmdinclude:: ../_include/interface-common-without-dhcp.txt
+.. cmdinclude:: /_include/interface-common-without-dhcp.txt
    :var0: tunnel
    :var1: tun0
 
diff --git a/docs/configuration/interfaces/vxlan.rst b/docs/configuration/interfaces/vxlan.rst
index 40dc5400..95f8de35 100644
--- a/docs/configuration/interfaces/vxlan.rst
+++ b/docs/configuration/interfaces/vxlan.rst
@@ -39,7 +39,7 @@ Configuration
 Common interface configuration
 ------------------------------
 
-.. cmdinclude:: ../_include/interface-common-without-dhcp.txt
+.. cmdinclude:: /_include/interface-common-without-dhcp.txt
   :var0: vxlan
   :var1: vxlan0
 
diff --git a/docs/configuration/interfaces/wireless.rst b/docs/configuration/interfaces/wireless.rst
index 2de3b126..82f66cf4 100644
--- a/docs/configuration/interfaces/wireless.rst
+++ b/docs/configuration/interfaces/wireless.rst
@@ -30,7 +30,7 @@ Configuration
 Common interface configuration
 ==============================
 
-.. cmdinclude:: ../_include/interface-common-with-dhcp.txt
+.. cmdinclude:: /_include/interface-common-with-dhcp.txt
    :var0: wireless
    :var1: wlan0
 
@@ -378,14 +378,14 @@ VLAN
 Regular VLANs (802.1q)
 ----------------------
 
-.. cmdinclude:: ../_include/interface-vlan-8021q.txt
+.. cmdinclude:: /_include/interface-vlan-8021q.txt
    :var0: wireless
    :var1: wlan0
 
 QinQ (802.1ad)
 --------------
 
-.. cmdinclude:: ../_include/interface-vlan-8021ad.txt
+.. cmdinclude:: /_include/interface-vlan-8021ad.txt
    :var0: wireless
    :var1: wlan0
 
diff --git a/docs/configuration/interfaces/wirelessmodem.rst b/docs/configuration/interfaces/wirelessmodem.rst
index f9dfa228..a65a47f4 100644
--- a/docs/configuration/interfaces/wirelessmodem.rst
+++ b/docs/configuration/interfaces/wirelessmodem.rst
@@ -15,15 +15,15 @@ Configuration
 Common interface configuration
 ==============================
 
-.. cmdinclude:: ../_include/interface-description.txt
+.. cmdinclude:: /_include/interface-description.txt
    :var0: wirelessmodem
    :var1: wlm0
 
-.. cmdinclude:: ../_include/interface-disable.txt
+.. cmdinclude:: /_include/interface-disable.txt
    :var0: wirelessmodem
    :var1: wlm0
 
-.. cmdinclude:: ../_include/interface-vrf.txt
+.. cmdinclude:: /_include/interface-vrf.txt
    :var0: wirelessmodem
    :var1: wlm0
 
diff --git a/docs/configuration/nat/nptv6.rst b/docs/configuration/nat/nptv6.rst
index f4e08325..c09c8336 100644
--- a/docs/configuration/nat/nptv6.rst
+++ b/docs/configuration/nat/nptv6.rst
@@ -1,4 +1,4 @@
-.. include:: _include/need_improvement.txt
+.. include:: /_include/need_improvement.txt
 
 .. _nptv6:
 
diff --git a/docs/configuration/policy/index.rst b/docs/configuration/policy/index.rst
index 4be494e5..557911d9 100644
--- a/docs/configuration/policy/index.rst
+++ b/docs/configuration/policy/index.rst
@@ -1,4 +1,4 @@
-.. include:: ../_include/need_improvement.txt
+.. include:: /_include/need_improvement.txt
 
 ######
 Policy
@@ -65,7 +65,7 @@ neighbor.
 You now see the longer AS path.
 
 
-.. include:: ../_include/need_improvement.txt
+.. include:: /_include/need_improvement.txt
 
 .. _routing-pbr:
 
diff --git a/docs/contributing/debugging.rst b/docs/contributing/debugging.rst
index ac2e0510..fcd62c89 100644
--- a/docs/contributing/debugging.rst
+++ b/docs/contributing/debugging.rst
@@ -143,4 +143,4 @@ order of the scripts.
 .. _vyatta-cfg: https://github.com/vyos/vyatta-cfg
 .. _bootchart.conf: https://github.com/vyos/vyos-build/blob/current/data/live-build-config/includes.chroot/etc/systemd/bootchart.conf
 
-.. include:: ../common-references.rst
+.. include:: /common-references.rst
diff --git a/docs/contributing/development.rst b/docs/contributing/development.rst
index 86371845..0a7fecb5 100644
--- a/docs/contributing/development.rst
+++ b/docs/contributing/development.rst
@@ -711,4 +711,4 @@ http://dev.packages.vyos.net/repositories/.
 .. _`VLAN (VIF)`: https://github.com/vyos/vyos-1x/tree/current/interface-definitions/include/vif.xml.i
 .. _`MAC address`: https://github.com/vyos/vyos-1x/tree/current/interface-definitions/include/interface-mac.xml.i
 
-.. include:: ../common-references.rst
+.. include:: /common-references.rst
diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index 9dd0c495..0276a7d2 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -325,4 +325,4 @@ predefined structure.
 .. _reStructuredTextDirectives: https://docutils.sourceforge.io/docs/ref/rst/directives.html
 .. _README.md: https://github.com/vyos/vyos-documentation/blob/master/README.md
 
-.. include:: ../common-references.rst
+.. include:: /common-references.rst
diff --git a/docs/contributing/issues-features.rst b/docs/contributing/issues-features.rst
index 60e49974..473d49d9 100644
--- a/docs/contributing/issues-features.rst
+++ b/docs/contributing/issues-features.rst
@@ -77,4 +77,4 @@ the left side under the specific project.
 .. _Slack: https://slack.vyos.io
 .. _Forum: https://forum.vyos.io
 
-.. include:: ../common-references.rst
+.. include:: /common-references.rst
diff --git a/docs/interfaces/advanced-index.rst b/docs/interfaces/advanced-index.rst
deleted file mode 100644
index 7b9bde1e..00000000
--- a/docs/interfaces/advanced-index.rst
+++ /dev/null
@@ -1,23 +0,0 @@
-.. _advanced_network-interfaces:
-
-##################
-Network Interfaces
-##################
-
-.. toctree::
-   :maxdepth: 1
-
-   bond
-   bridge
-   dummy
-   ethernet
-   geneve
-   loopback
-   l2tpv3
-   macsec
-   pppoe
-   pseudo-ethernet
-   tunnel
-   vxlan
-   wireless
-   wirelessmodem
diff --git a/docs/interfaces/basic-index.rst b/docs/interfaces/basic-index.rst
deleted file mode 100644
index 425792a2..00000000
--- a/docs/interfaces/basic-index.rst
+++ /dev/null
@@ -1,12 +0,0 @@
-.. _basic_network-interfaces:
-
-########################
-Basic Network Interfaces
-########################
-
-.. toctree::
-   :maxdepth: 1
-
-   ethernet
-   loopback
-   pppoe
diff --git a/docs/routing/bfd.rst b/docs/routing/bfd.rst
index 1d494332..b8fdf489 100644
--- a/docs/routing/bfd.rst
+++ b/docs/routing/bfd.rst
@@ -1,4 +1,4 @@
-.. include:: ../_include/need_improvement.txt
+.. include:: /_include/need_improvement.txt
 
 .. _routing-bfd:
 
diff --git a/docs/routing/ospf.rst b/docs/routing/ospf.rst
index fe05178b..19787b11 100644
--- a/docs/routing/ospf.rst
+++ b/docs/routing/ospf.rst
@@ -1,4 +1,4 @@
-.. include:: ../_include/need_improvement.txt
+.. include:: /_include/need_improvement.txt
 
 .. _routing-ospf:
 
diff --git a/docs/routing/rip.rst b/docs/routing/rip.rst
index 68868e37..0d73ad34 100644
--- a/docs/routing/rip.rst
+++ b/docs/routing/rip.rst
@@ -1,4 +1,4 @@
-.. include:: ../_include/need_improvement.txt
+.. include:: /_include/need_improvement.txt
 
 .. _rip:
 
diff --git a/docs/services/conntrack.rst b/docs/services/conntrack.rst
index c361d293..55cd088e 100644
--- a/docs/services/conntrack.rst
+++ b/docs/services/conntrack.rst
@@ -1,4 +1,4 @@
-.. include:: ../_include/need_improvement.txt
+.. include:: /_include/need_improvement.txt
 
 Conntrack
 ---------
diff --git a/docs/services/ipoe-server.rst b/docs/services/ipoe-server.rst
index 3aedf966..279f0c6d 100644
--- a/docs/services/ipoe-server.rst
+++ b/docs/services/ipoe-server.rst
@@ -1,4 +1,4 @@
-.. include:: ../_include/need_improvement.txt
+.. include:: /_include/need_improvement.txt
 
 .. _ipoe_server:
 
@@ -146,4 +146,4 @@ The rate-limit is set in kbit/sec.
   -------+------------+-------------------+-------------+-----+--------+------------+--------+----------+------------------
   ipoe0  | eth2       | 08:00:27:2f:d8:06 | 192.168.0.2 |     |        | 500/500    | active | 00:00:05 | dccc870fd31349fb
 
-.. include:: ../common-references.rst
+.. include:: /common-references.rst
diff --git a/docs/services/pppoe-server.rst b/docs/services/pppoe-server.rst
index e710ba6a..4deb6c7e 100644
--- a/docs/services/pppoe-server.rst
+++ b/docs/services/pppoe-server.rst
@@ -394,4 +394,4 @@ a /56 subnet for the clients internal use.
   --------+----------+-------------+--------------------------+---------------------+-------------------+------------+--------+----------+----------+----------
    ppp0   | test     | 192.168.0.1 | 2001:db8:8002:0:200::/64 | 2001:db8:8003::1/56 | 00:53:00:12:42:eb |            | active | 00:00:49 | 875 B    | 2.1 KiB
 
-.. include:: ../common-references.rst
+.. include:: /common-references.rst
diff --git a/docs/system/lcd.rst b/docs/system/lcd.rst
index 441becf5..2509946e 100644
--- a/docs/system/lcd.rst
+++ b/docs/system/lcd.rst
@@ -41,5 +41,5 @@ Configuration
    .. note:: We can't support all displays from the beginning. If your display
       type is missing, please create a feature request via Phabricator_.
 
-.. include:: ../common-references.rst
+.. include:: /common-references.rst
 
diff --git a/docs/vpn/sstp.rst b/docs/vpn/sstp.rst
index e5567cb6..f5e4ad05 100644
--- a/docs/vpn/sstp.rst
+++ b/docs/vpn/sstp.rst
@@ -344,4 +344,4 @@ A connection attempt will be shown as:
 
 .. _sstpc: https://github.com/reliablehosting/sstp-client
 
-.. include:: ../common-references.rst
+.. include:: /common-references.rst

From 8943fc9f877cbee3301a8261ddd27b4b1f15f174 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Mon, 30 Nov 2020 20:53:36 +0100
Subject: [PATCH 130/295] arrange services and protocols

---
 docs/configuration/firewall/index.rst         |  65 +++++++
 .../protocols}/bfd.rst                        |   0
 .../protocols}/bgp.rst                        |   0
 docs/configuration/protocols/igmp-proxy.rst   |   2 +
 .../protocols/igmp.rst}                       |   0
 docs/configuration/protocols/index.rst        |  22 +++
 .../protocols}/mpls.rst                       |   0
 docs/configuration/protocols/ospf.rst         |  70 ++++++++
 .../protocols/ospfv3.rst}                     |  70 --------
 docs/configuration/protocols/pim.rst          |   2 +
 .../protocols}/rip.rst                        |   0
 docs/configuration/protocols/ripng.rst        |   3 +
 .../protocols}/rpki.rst                       |   0
 .../protocols}/static.rst                     |  61 +++++++
 docs/configuration/protocols/vrf.rst          |   3 +
 .../service/broadcast-relay.rst}              |   0
 .../service/conntrack-sync.rst}               |   0
 .../service}/console-server.rst               |   0
 docs/configuration/service/dhcp-relay.rst     |   2 +
 .../service/dhcp-server.rst}                  |   0
 docs/configuration/service/dhcpv6-relay.rst   |   2 +
 docs/configuration/service/dhcpv6-server.rst  |   2 +
 .../service/dns.rst}                          | 166 ++++++++++++++++++
 .../service/https.rst}                        |   0
 docs/configuration/service/index.rst          |  29 +++
 .../service}/ipoe-server.rst                  |   0
 .../service}/lldp.rst                         |   0
 .../service/mdns.rst}                         |   0
 docs/configuration/service/pppoe-advert.rst   |   2 +
 .../service}/pppoe-server.rst                 |   0
 .../service}/router-advert.rst                |   0
 docs/configuration/service/salt-minion.rst    |   2 +
 .../service}/snmp.rst                         |   0
 .../service}/ssh.rst                          |   0
 .../service/tftp-server.rst}                  |   0
 .../service}/webproxy.rst                     |   0
 docs/operation/index.rst                      |  10 ++
 docs/{routing => operation}/ip-commands.rst   |   0
 docs/routing/arp.rst                          |  59 -------
 docs/routing/index.rst                        |  22 ---
 docs/routing/mss-clamp.rst                    |  63 -------
 docs/services/dynamic-dns.rst                 | 164 -----------------
 docs/services/index.rst                       |  26 ---
 43 files changed, 443 insertions(+), 404 deletions(-)
 rename docs/{routing => configuration/protocols}/bfd.rst (100%)
 rename docs/{routing => configuration/protocols}/bgp.rst (100%)
 create mode 100644 docs/configuration/protocols/igmp-proxy.rst
 rename docs/{routing/multicast.rst => configuration/protocols/igmp.rst} (100%)
 create mode 100644 docs/configuration/protocols/index.rst
 rename docs/{routing => configuration/protocols}/mpls.rst (100%)
 create mode 100644 docs/configuration/protocols/ospf.rst
 rename docs/{routing/ospf.rst => configuration/protocols/ospfv3.rst} (52%)
 create mode 100644 docs/configuration/protocols/pim.rst
 rename docs/{routing => configuration/protocols}/rip.rst (100%)
 create mode 100644 docs/configuration/protocols/ripng.rst
 rename docs/{routing => configuration/protocols}/rpki.rst (100%)
 rename docs/{routing => configuration/protocols}/static.rst (73%)
 create mode 100644 docs/configuration/protocols/vrf.rst
 rename docs/{services/udp-broadcast-relay.rst => configuration/service/broadcast-relay.rst} (100%)
 rename docs/{services/conntrack.rst => configuration/service/conntrack-sync.rst} (100%)
 rename docs/{services => configuration/service}/console-server.rst (100%)
 create mode 100644 docs/configuration/service/dhcp-relay.rst
 rename docs/{services/dhcp.rst => configuration/service/dhcp-server.rst} (100%)
 create mode 100644 docs/configuration/service/dhcpv6-relay.rst
 create mode 100644 docs/configuration/service/dhcpv6-server.rst
 rename docs/{services/dns-forwarding.rst => configuration/service/dns.rst} (54%)
 rename docs/{automation/http-api.rst => configuration/service/https.rst} (100%)
 create mode 100644 docs/configuration/service/index.rst
 rename docs/{services => configuration/service}/ipoe-server.rst (100%)
 rename docs/{services => configuration/service}/lldp.rst (100%)
 rename docs/{services/mdns-repeater.rst => configuration/service/mdns.rst} (100%)
 create mode 100644 docs/configuration/service/pppoe-advert.rst
 rename docs/{services => configuration/service}/pppoe-server.rst (100%)
 rename docs/{services => configuration/service}/router-advert.rst (100%)
 create mode 100644 docs/configuration/service/salt-minion.rst
 rename docs/{services => configuration/service}/snmp.rst (100%)
 rename docs/{services => configuration/service}/ssh.rst (100%)
 rename docs/{services/tftp.rst => configuration/service/tftp-server.rst} (100%)
 rename docs/{services => configuration/service}/webproxy.rst (100%)
 create mode 100644 docs/operation/index.rst
 rename docs/{routing => operation}/ip-commands.rst (100%)
 delete mode 100644 docs/routing/arp.rst
 delete mode 100644 docs/routing/index.rst
 delete mode 100644 docs/routing/mss-clamp.rst
 delete mode 100644 docs/services/dynamic-dns.rst
 delete mode 100644 docs/services/index.rst

diff --git a/docs/configuration/firewall/index.rst b/docs/configuration/firewall/index.rst
index d9a3ebe3..2615774f 100644
--- a/docs/configuration/firewall/index.rst
+++ b/docs/configuration/firewall/index.rst
@@ -766,3 +766,68 @@ Example Partial Config
          }
      }
   }
+
+
+.. _routing-mss-clamp:
+
+################
+TCP-MSS Clamping
+################
+
+As Internet wide PMTU discovery rarely works, we sometimes need to clamp
+our TCP MSS value to a specific value. This is a field in the TCP
+Options part of a SYN packet. By setting the MSS value, you are telling
+the remote side unequivocally 'do not try to send me packets bigger than
+this value'.
+
+Starting with VyOS 1.2 there is a firewall option to clamp your TCP MSS
+value for IPv4 and IPv6.
+
+
+.. note:: MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting
+   in 1452 bytes on a 1492 byte MTU.
+
+
+IPv4
+====
+
+.. cfgcmd:: set firewall options interface <interface> adjust-mss <number-of-bytes>
+
+   Use this command to set the maximum segment size for IPv4 transit
+   packets on a specific interface (500-1460 bytes).
+
+Example
+-------
+
+Clamp outgoing MSS value in a TCP SYN packet to `1452` for `pppoe0` and
+`1372`
+for your WireGuard `wg02` tunnel.
+
+.. code-block:: none
+
+  set firewall options interface pppoe0 adjust-mss '1452'
+  set firewall options interface wg02 adjust-mss '1372'
+
+IPv6
+====
+
+.. cfgcmd:: set firewall options interface <interface> adjust-mss6 <number-of-bytes>
+
+   Use this command to set the maximum segment size for IPv6 transit
+   packets on a specific interface (1280-1492 bytes).
+
+Example
+-------
+
+Clamp outgoing MSS value in a TCP SYN packet to `1280` for both `pppoe0` and
+`wg02` interface.
+
+.. code-block:: none
+
+  set firewall options interface pppoe0 adjust-mss6 '1280'
+  set firewall options interface wg02 adjust-mss6 '1280'
+
+
+
+.. hint:: When doing your byte calculations, you might find useful this
+   `Visual packet size calculator <https://baturin.org/tools/encapcalc/>`_.
diff --git a/docs/routing/bfd.rst b/docs/configuration/protocols/bfd.rst
similarity index 100%
rename from docs/routing/bfd.rst
rename to docs/configuration/protocols/bfd.rst
diff --git a/docs/routing/bgp.rst b/docs/configuration/protocols/bgp.rst
similarity index 100%
rename from docs/routing/bgp.rst
rename to docs/configuration/protocols/bgp.rst
diff --git a/docs/configuration/protocols/igmp-proxy.rst b/docs/configuration/protocols/igmp-proxy.rst
new file mode 100644
index 00000000..cce5f948
--- /dev/null
+++ b/docs/configuration/protocols/igmp-proxy.rst
@@ -0,0 +1,2 @@
+igmp-proxy
+##########
\ No newline at end of file
diff --git a/docs/routing/multicast.rst b/docs/configuration/protocols/igmp.rst
similarity index 100%
rename from docs/routing/multicast.rst
rename to docs/configuration/protocols/igmp.rst
diff --git a/docs/configuration/protocols/index.rst b/docs/configuration/protocols/index.rst
new file mode 100644
index 00000000..271b6056
--- /dev/null
+++ b/docs/configuration/protocols/index.rst
@@ -0,0 +1,22 @@
+#########
+Protocols
+#########
+
+
+.. toctree::
+   :maxdepth: 1
+   :includehidden:
+
+   bfd
+   bgp
+   igmp
+   igmp-proxy
+   mpls
+   ospf
+   ospfv3
+   pim
+   rip
+   ripng
+   rpki
+   static
+   vrf
diff --git a/docs/routing/mpls.rst b/docs/configuration/protocols/mpls.rst
similarity index 100%
rename from docs/routing/mpls.rst
rename to docs/configuration/protocols/mpls.rst
diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
new file mode 100644
index 00000000..ff7c5e64
--- /dev/null
+++ b/docs/configuration/protocols/ospf.rst
@@ -0,0 +1,70 @@
+.. include:: /_include/need_improvement.txt
+
+.. _routing-ospf:
+
+####
+OSPF
+####
+
+:abbr:`OSPF (Open Shortest Path First)` is a routing protocol for Internet
+Protocol (IP) networks. It uses a link state routing (LSR) algorithm and falls
+into the group of interior gateway protocols (IGPs), operating within a single
+autonomous system (AS). It is defined as OSPF Version 2 in :rfc:`2328` (1998)
+for IPv4. Updates for IPv6 are specified as OSPF Version 3 in :rfc:`5340`
+(2008). OSPF supports the :abbr:`CIDR (Classless Inter-Domain Routing)`
+addressing model.
+
+OSPF is a widely used IGP in large enterprise networks.
+
+OSPFv2 (IPv4)
+#############
+
+In order to have a VyOS system exchanging routes with OSPF neighbors, you will
+at least need to configure an OSPF area and some network.
+
+.. code-block:: none
+
+  set protocols ospf area 0 network 192.168.0.0/24
+
+That is the minimum configuration you will need.
+It is a good practice to define the router ID too.
+
+.. code-block:: none
+
+  set protocols ospf parameters router-id 10.1.1.1
+
+
+Below you can see a typical configuration using 2 nodes, redistribute loopback
+address and the node 1 sending the default route:
+
+**Node 1**
+
+.. code-block:: none
+
+  set interfaces loopback lo address 10.1.1.1/32
+  set protocols ospf area 0 network 192.168.0.0/24
+  set protocols ospf default-information originate always
+  set protocols ospf default-information originate metric 10
+  set protocols ospf default-information originate metric-type 2
+  set protocols ospf log-adjacency-changes
+  set protocols ospf parameters router-id 10.1.1.1
+  set protocols ospf redistribute connected metric-type 2
+  set protocols ospf redistribute connected route-map CONNECT
+
+  set policy route-map CONNECT rule 10 action permit
+  set policy route-map CONNECT rule 10 match interface lo
+
+**Node 2**
+
+.. code-block:: none
+
+  set interfaces loopback lo address 10.2.2.2/32
+  set protocols ospf area 0 network 192.168.0.0/24
+  set protocols ospf log-adjacency-changes
+  set protocols ospf parameters router-id 10.2.2.2
+  set protocols ospf redistribute connected metric-type 2
+  set protocols ospf redistribute connected route-map CONNECT
+
+  set policy route-map CONNECT rule 10 action permit
+  set policy route-map CONNECT rule 10 match interface lo
+
diff --git a/docs/routing/ospf.rst b/docs/configuration/protocols/ospfv3.rst
similarity index 52%
rename from docs/routing/ospf.rst
rename to docs/configuration/protocols/ospfv3.rst
index 19787b11..f0e28983 100644
--- a/docs/routing/ospf.rst
+++ b/docs/configuration/protocols/ospfv3.rst
@@ -1,73 +1,3 @@
-.. include:: /_include/need_improvement.txt
-
-.. _routing-ospf:
-
-####
-OSPF
-####
-
-:abbr:`OSPF (Open Shortest Path First)` is a routing protocol for Internet
-Protocol (IP) networks. It uses a link state routing (LSR) algorithm and falls
-into the group of interior gateway protocols (IGPs), operating within a single
-autonomous system (AS). It is defined as OSPF Version 2 in :rfc:`2328` (1998)
-for IPv4. Updates for IPv6 are specified as OSPF Version 3 in :rfc:`5340`
-(2008). OSPF supports the :abbr:`CIDR (Classless Inter-Domain Routing)`
-addressing model.
-
-OSPF is a widely used IGP in large enterprise networks.
-
-OSPFv2 (IPv4)
-#############
-
-In order to have a VyOS system exchanging routes with OSPF neighbors, you will
-at least need to configure an OSPF area and some network.
-
-.. code-block:: none
-
-  set protocols ospf area 0 network 192.168.0.0/24
-
-That is the minimum configuration you will need.
-It is a good practice to define the router ID too.
-
-.. code-block:: none
-
-  set protocols ospf parameters router-id 10.1.1.1
-
-
-Below you can see a typical configuration using 2 nodes, redistribute loopback
-address and the node 1 sending the default route:
-
-**Node 1**
-
-.. code-block:: none
-
-  set interfaces loopback lo address 10.1.1.1/32
-  set protocols ospf area 0 network 192.168.0.0/24
-  set protocols ospf default-information originate always
-  set protocols ospf default-information originate metric 10
-  set protocols ospf default-information originate metric-type 2
-  set protocols ospf log-adjacency-changes
-  set protocols ospf parameters router-id 10.1.1.1
-  set protocols ospf redistribute connected metric-type 2
-  set protocols ospf redistribute connected route-map CONNECT
-
-  set policy route-map CONNECT rule 10 action permit
-  set policy route-map CONNECT rule 10 match interface lo
-
-**Node 2**
-
-.. code-block:: none
-
-  set interfaces loopback lo address 10.2.2.2/32
-  set protocols ospf area 0 network 192.168.0.0/24
-  set protocols ospf log-adjacency-changes
-  set protocols ospf parameters router-id 10.2.2.2
-  set protocols ospf redistribute connected metric-type 2
-  set protocols ospf redistribute connected route-map CONNECT
-
-  set policy route-map CONNECT rule 10 action permit
-  set policy route-map CONNECT rule 10 match interface lo
-
 OSPFv3 (IPv6)
 #############
 
diff --git a/docs/configuration/protocols/pim.rst b/docs/configuration/protocols/pim.rst
new file mode 100644
index 00000000..1dd373d8
--- /dev/null
+++ b/docs/configuration/protocols/pim.rst
@@ -0,0 +1,2 @@
+PIM
+###
\ No newline at end of file
diff --git a/docs/routing/rip.rst b/docs/configuration/protocols/rip.rst
similarity index 100%
rename from docs/routing/rip.rst
rename to docs/configuration/protocols/rip.rst
diff --git a/docs/configuration/protocols/ripng.rst b/docs/configuration/protocols/ripng.rst
new file mode 100644
index 00000000..dec6bddf
--- /dev/null
+++ b/docs/configuration/protocols/ripng.rst
@@ -0,0 +1,3 @@
+#####
+RIPng
+#####
\ No newline at end of file
diff --git a/docs/routing/rpki.rst b/docs/configuration/protocols/rpki.rst
similarity index 100%
rename from docs/routing/rpki.rst
rename to docs/configuration/protocols/rpki.rst
diff --git a/docs/routing/static.rst b/docs/configuration/protocols/static.rst
similarity index 73%
rename from docs/routing/static.rst
rename to docs/configuration/protocols/static.rst
index 523627fa..fbde8228 100644
--- a/docs/routing/static.rst
+++ b/docs/configuration/protocols/static.rst
@@ -132,3 +132,64 @@ TBD
 
 Alternate routing tables are used with policy based routing of by utilizing
 :ref:`vrf`.
+
+
+.. _routing-arp:
+
+###
+ARP
+###
+
+:abbr:`ARP (Address Resolution Protocol)` is a communication protocol used for
+discovering the link layer address, such as a MAC address, associated with a
+given internet layer address, typically an IPv4 address. This mapping is a
+critical function in the Internet protocol suite. ARP was defined in 1982 by
+:rfc:`826` which is Internet Standard STD 37.
+
+In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is
+provided by the Neighbor Discovery Protocol (NDP).
+
+To manipulate or display ARP_ table entries, the following commands are
+implemented.
+
+Configure
+=========
+
+.. cfgcmd:: set protocols static arp <address> hwaddr <mac>
+
+   This will configure a static ARP entry always resolving `<address>` to
+   `<mac>`.
+
+   Example:
+
+   .. code-block:: none
+
+     set protocols static arp 192.0.2.100 hwaddr 00:53:27:de:23:aa
+
+Operation
+=========
+
+.. opcmd:: show protocols static arp
+
+   Display all known ARP table entries spanning across all interfaces
+
+.. code-block:: none
+
+  vyos@vyos:~$ show protocols static arp
+  Address                  HWtype  HWaddress           Flags Mask     Iface
+  10.1.1.1                 ether   00:53:00:de:23:2e   C              eth1
+  10.1.1.100               ether   00:53:00:de:23:aa   CM             eth1
+
+
+.. opcmd:: show protocols static arp interface eth1
+
+   Display all known ARP table entries on a given interface only (`eth1`):
+
+.. code-block:: none
+
+  vyos@vyos:~$ show protocols static arp interface eth1
+  Address                  HWtype  HWaddress           Flags Mask     Iface
+  10.1.1.1                 ether   00:53:00:de:23:2e   C              eth1
+  10.1.1.100               ether   00:53:00:de:23:aa   CM             eth1
+
+.. _ARP: https://en.wikipedia.org/wiki/Address_Resolution_Protocol
diff --git a/docs/configuration/protocols/vrf.rst b/docs/configuration/protocols/vrf.rst
new file mode 100644
index 00000000..e7609a77
--- /dev/null
+++ b/docs/configuration/protocols/vrf.rst
@@ -0,0 +1,3 @@
+#############
+Protocols VRF
+#############
diff --git a/docs/services/udp-broadcast-relay.rst b/docs/configuration/service/broadcast-relay.rst
similarity index 100%
rename from docs/services/udp-broadcast-relay.rst
rename to docs/configuration/service/broadcast-relay.rst
diff --git a/docs/services/conntrack.rst b/docs/configuration/service/conntrack-sync.rst
similarity index 100%
rename from docs/services/conntrack.rst
rename to docs/configuration/service/conntrack-sync.rst
diff --git a/docs/services/console-server.rst b/docs/configuration/service/console-server.rst
similarity index 100%
rename from docs/services/console-server.rst
rename to docs/configuration/service/console-server.rst
diff --git a/docs/configuration/service/dhcp-relay.rst b/docs/configuration/service/dhcp-relay.rst
new file mode 100644
index 00000000..445519b3
--- /dev/null
+++ b/docs/configuration/service/dhcp-relay.rst
@@ -0,0 +1,2 @@
+dhcp-relay
+##########
\ No newline at end of file
diff --git a/docs/services/dhcp.rst b/docs/configuration/service/dhcp-server.rst
similarity index 100%
rename from docs/services/dhcp.rst
rename to docs/configuration/service/dhcp-server.rst
diff --git a/docs/configuration/service/dhcpv6-relay.rst b/docs/configuration/service/dhcpv6-relay.rst
new file mode 100644
index 00000000..2d105fdf
--- /dev/null
+++ b/docs/configuration/service/dhcpv6-relay.rst
@@ -0,0 +1,2 @@
+dhcpv6-relay
+############
\ No newline at end of file
diff --git a/docs/configuration/service/dhcpv6-server.rst b/docs/configuration/service/dhcpv6-server.rst
new file mode 100644
index 00000000..64e523a0
--- /dev/null
+++ b/docs/configuration/service/dhcpv6-server.rst
@@ -0,0 +1,2 @@
+dhcpv6-server
+#############
\ No newline at end of file
diff --git a/docs/services/dns-forwarding.rst b/docs/configuration/service/dns.rst
similarity index 54%
rename from docs/services/dns-forwarding.rst
rename to docs/configuration/service/dns.rst
index 5c154fdf..f332c55c 100644
--- a/docs/services/dns-forwarding.rst
+++ b/docs/configuration/service/dns.rst
@@ -145,3 +145,169 @@ Operation
 .. opcmd:: restart dns forwarding
 
    Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache.
+
+
+.. _dynamic-dns:
+
+###########
+Dynamic DNS
+###########
+
+VyOS is able to update a remote DNS record when an interface gets a new IP
+address. In order to do so, VyOS includes ddclient_, a Perl script written for
+this only one purpose.
+
+ddclient_ uses two methods to update a DNS record. The first one will send
+updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second
+one involves a third party service, like DynDNS.com or any other similar
+website. This method uses HTTP requests to transmit the new IP address. You
+can configure both in VyOS.
+
+Configuration
+=============
+
+:rfc:`2136` Based
+-----------------
+
+.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name>
+
+   Create new :rfc:`2136` DNS update configuration which will update the IP
+   address assigned to `<interface>` on the service you configured under
+   `<service-name>`.
+
+.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> key <keyfile>
+
+   File identified by `<keyfile>` containing the secret RNDC key shared with
+   remote DNS server.
+
+.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> server <server>
+
+   Configure the DNS `<server>` IP/FQDN used when updating this dynamic
+   assignment.
+
+.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> zone <zone>
+
+   Configure DNS `<zone>` to be updated.
+
+.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> record <record>
+
+   Configure DNS `<record>` which should be updated. This can be set multiple
+   times.
+
+.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> ttl <ttl>
+
+   Configure optional TTL value on the given resource record. This defualts to
+   600 seconds.
+
+Example
+^^^^^^^
+
+* Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``
+* Use auth key file at ``/config/auth/my.key``
+* Set TTL to 300 seconds
+
+.. code-block:: none
+
+  vyos@vyos# show service dns dynamic
+   interface eth0.7 {
+       rfc2136 VyOS-DNS {
+           key /config/auth/my.key
+           record example.vyos.io
+           server ns1.vyos.io
+           ttl 300
+           zone vyos.io
+       }
+   }
+
+This will render the following ddclient_ configuration entry:
+
+.. code-block:: none
+
+  #
+  # ddclient configuration for interface "eth0.7":
+  #
+  use=if, if=eth0.7
+
+  # RFC2136 dynamic DNS configuration for example.vyos.io.vyos.io
+  server=ns1.vyos.io
+  protocol=nsupdate
+  password=/config/auth/my.key
+  ttl=300
+  zone=vyos.io
+  example.vyos.io
+
+.. note:: You can also keep different DNS zone updated. Just create a new
+   config node: ``set service dns dynamic interface <interface> rfc2136
+   <other-service-name>``
+
+HTTP based services
+-------------------
+
+VyOS is also able to use any service relying on protocols supported by ddclient.
+
+To use such a service, one must define a login, password, one or multiple
+hostnames, protocol and server.
+
+.. cfgcmd:: set service dns dynamic interface <interface> service <service> host-name <hostname>
+
+   Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS
+   provider identified by `<service>` when the IP address on interface
+   `<interface>` changes.
+
+.. cfgcmd:: set service dns dynamic interface <interface> service <service> login <username>
+
+   Configure `<username>` used when authenticating the update request for
+   DynDNS service identified by `<service>`.
+   For Namecheap, set the <domain> you wish to update.
+
+.. cfgcmd:: set service dns dynamic interface <interface> service <service> password <password>
+
+   Configure `<password>` used when authenticating the update request for
+   DynDNS service identified by `<service>`.
+
+.. cfgcmd:: set service dns dynamic interface <interface> service <service> protocol <protocol>
+
+   When a ``custom`` DynDNS provider is used the protocol used for communicating
+   to the provider must be specified under `<protocol>`. See the embedded
+   completion helper for available protocols.
+
+.. cfgcmd:: set service dns dynamic interface <interface> service <service> server <server>
+
+   When a ``custom`` DynDNS provider is used the `<server>` where update
+   requests are being sent to must be specified.
+
+Example:
+^^^^^^^^
+
+Use DynDNS as your preferred provider:
+
+.. code-block:: none
+
+  set service dns dynamic interface eth0 service dyndns
+  set service dns dynamic interface eth0 service dyndns login my-login
+  set service dns dynamic interface eth0 service dyndns password my-password
+  set service dns dynamic interface eth0 service dyndns host-name my-dyndns-hostname
+
+.. note:: Multiple services can be used per interface. Just specify as many
+   serives per interface as you like!
+
+Running Behind NAT
+------------------
+
+By default, ddclient_ will update a dynamic dns record using the IP address
+directly attached to the interface. If your VyOS instance is behind NAT, your
+record will be updated to point to your internal IP.
+
+ddclient_ has another way to determine the WAN IP address. This is controlled
+by:
+
+.. cfgcmd:: set service dns dynamic interface <interface> use-web url <url>
+
+   Use configured `<url>` to determine your IP address. ddclient_ will load
+   `<url>` and tries to extract your IP address from the response.
+
+.. cfgcmd:: set service dns dynamic interface <interface> use-web skip <pattern>
+
+   ddclient_ will skip any address located before the string set in `<pattern>`.
+
+.. _ddclient: https://github.com/ddclient/ddclient
diff --git a/docs/automation/http-api.rst b/docs/configuration/service/https.rst
similarity index 100%
rename from docs/automation/http-api.rst
rename to docs/configuration/service/https.rst
diff --git a/docs/configuration/service/index.rst b/docs/configuration/service/index.rst
new file mode 100644
index 00000000..0ef2bbd3
--- /dev/null
+++ b/docs/configuration/service/index.rst
@@ -0,0 +1,29 @@
+#######
+Service
+#######
+
+
+.. toctree::
+   :maxdepth: 1
+   :includehidden:
+
+   broadcast-relay
+   conntrack-sync
+   console-server
+   dhcp-relay
+   dhcp-server
+   dhcpv6-relay
+   dhcpv6-server
+   dns
+   https
+   ipoe-server
+   lldp
+   mdns
+   pppoe-advert
+   pppoe-server
+   router-advert
+   salt-minion
+   snmp
+   ssh
+   tftp-server
+   webproxy
diff --git a/docs/services/ipoe-server.rst b/docs/configuration/service/ipoe-server.rst
similarity index 100%
rename from docs/services/ipoe-server.rst
rename to docs/configuration/service/ipoe-server.rst
diff --git a/docs/services/lldp.rst b/docs/configuration/service/lldp.rst
similarity index 100%
rename from docs/services/lldp.rst
rename to docs/configuration/service/lldp.rst
diff --git a/docs/services/mdns-repeater.rst b/docs/configuration/service/mdns.rst
similarity index 100%
rename from docs/services/mdns-repeater.rst
rename to docs/configuration/service/mdns.rst
diff --git a/docs/configuration/service/pppoe-advert.rst b/docs/configuration/service/pppoe-advert.rst
new file mode 100644
index 00000000..bbb82202
--- /dev/null
+++ b/docs/configuration/service/pppoe-advert.rst
@@ -0,0 +1,2 @@
+pppoe-advert
+############
\ No newline at end of file
diff --git a/docs/services/pppoe-server.rst b/docs/configuration/service/pppoe-server.rst
similarity index 100%
rename from docs/services/pppoe-server.rst
rename to docs/configuration/service/pppoe-server.rst
diff --git a/docs/services/router-advert.rst b/docs/configuration/service/router-advert.rst
similarity index 100%
rename from docs/services/router-advert.rst
rename to docs/configuration/service/router-advert.rst
diff --git a/docs/configuration/service/salt-minion.rst b/docs/configuration/service/salt-minion.rst
new file mode 100644
index 00000000..63df57a4
--- /dev/null
+++ b/docs/configuration/service/salt-minion.rst
@@ -0,0 +1,2 @@
+salt-minion
+###########
\ No newline at end of file
diff --git a/docs/services/snmp.rst b/docs/configuration/service/snmp.rst
similarity index 100%
rename from docs/services/snmp.rst
rename to docs/configuration/service/snmp.rst
diff --git a/docs/services/ssh.rst b/docs/configuration/service/ssh.rst
similarity index 100%
rename from docs/services/ssh.rst
rename to docs/configuration/service/ssh.rst
diff --git a/docs/services/tftp.rst b/docs/configuration/service/tftp-server.rst
similarity index 100%
rename from docs/services/tftp.rst
rename to docs/configuration/service/tftp-server.rst
diff --git a/docs/services/webproxy.rst b/docs/configuration/service/webproxy.rst
similarity index 100%
rename from docs/services/webproxy.rst
rename to docs/configuration/service/webproxy.rst
diff --git a/docs/operation/index.rst b/docs/operation/index.rst
new file mode 100644
index 00000000..b40f769d
--- /dev/null
+++ b/docs/operation/index.rst
@@ -0,0 +1,10 @@
+##############
+Operation Mode
+##############
+
+.. toctree::
+   :maxdepth: 1
+   :includehidden:
+
+   information
+   ip-command
\ No newline at end of file
diff --git a/docs/routing/ip-commands.rst b/docs/operation/ip-commands.rst
similarity index 100%
rename from docs/routing/ip-commands.rst
rename to docs/operation/ip-commands.rst
diff --git a/docs/routing/arp.rst b/docs/routing/arp.rst
deleted file mode 100644
index 5f3115ab..00000000
--- a/docs/routing/arp.rst
+++ /dev/null
@@ -1,59 +0,0 @@
-.. _routing-arp:
-
-###
-ARP
-###
-
-:abbr:`ARP (Address Resolution Protocol)` is a communication protocol used for
-discovering the link layer address, such as a MAC address, associated with a
-given internet layer address, typically an IPv4 address. This mapping is a
-critical function in the Internet protocol suite. ARP was defined in 1982 by
-:rfc:`826` which is Internet Standard STD 37.
-
-In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is
-provided by the Neighbor Discovery Protocol (NDP).
-
-To manipulate or display ARP_ table entries, the following commands are
-implemented.
-
-Configure
-=========
-
-.. cfgcmd:: set protocols static arp <address> hwaddr <mac>
-
-   This will configure a static ARP entry always resolving `<address>` to
-   `<mac>`.
-
-   Example:
-
-   .. code-block:: none
-
-     set protocols static arp 192.0.2.100 hwaddr 00:53:27:de:23:aa
-
-Operation
-=========
-
-.. opcmd:: show protocols static arp
-
-   Display all known ARP table entries spanning across all interfaces
-
-.. code-block:: none
-
-  vyos@vyos:~$ show protocols static arp
-  Address                  HWtype  HWaddress           Flags Mask     Iface
-  10.1.1.1                 ether   00:53:00:de:23:2e   C              eth1
-  10.1.1.100               ether   00:53:00:de:23:aa   CM             eth1
-
-
-.. opcmd:: show protocols static arp interface eth1
-
-   Display all known ARP table entries on a given interface only (`eth1`):
-
-.. code-block:: none
-
-  vyos@vyos:~$ show protocols static arp interface eth1
-  Address                  HWtype  HWaddress           Flags Mask     Iface
-  10.1.1.1                 ether   00:53:00:de:23:2e   C              eth1
-  10.1.1.100               ether   00:53:00:de:23:aa   CM             eth1
-
-.. _ARP: https://en.wikipedia.org/wiki/Address_Resolution_Protocol
diff --git a/docs/routing/index.rst b/docs/routing/index.rst
deleted file mode 100644
index 63d7c7d8..00000000
--- a/docs/routing/index.rst
+++ /dev/null
@@ -1,22 +0,0 @@
-.. _routing:
-
-#######
-Routing
-#######
-
-.. toctree::
-   :maxdepth: 1
-
-   arp
-   bfd
-   bgp
-   mpls
-   mss-clamp
-   multicast
-   ip-commands
-   ospf
-   pbr
-   rip
-   policy
-   rpki
-   static
diff --git a/docs/routing/mss-clamp.rst b/docs/routing/mss-clamp.rst
deleted file mode 100644
index 3fdd1153..00000000
--- a/docs/routing/mss-clamp.rst
+++ /dev/null
@@ -1,63 +0,0 @@
-.. _routing-mss-clamp:
-
-################
-TCP-MSS Clamping
-################
-
-As Internet wide PMTU discovery rarely works, we sometimes need to clamp
-our TCP MSS value to a specific value. This is a field in the TCP
-Options part of a SYN packet. By setting the MSS value, you are telling
-the remote side unequivocally 'do not try to send me packets bigger than
-this value'.
-
-Starting with VyOS 1.2 there is a firewall option to clamp your TCP MSS
-value for IPv4 and IPv6.
-
-
-.. note:: MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting
-   in 1452 bytes on a 1492 byte MTU.
-
-
-IPv4
-====
-
-.. cfgcmd:: set firewall options interface <interface> adjust-mss <number-of-bytes>
-
-   Use this command to set the maximum segment size for IPv4 transit
-   packets on a specific interface (500-1460 bytes).
-
-Example
--------
-
-Clamp outgoing MSS value in a TCP SYN packet to `1452` for `pppoe0` and
-`1372`
-for your WireGuard `wg02` tunnel.
-
-.. code-block:: none
-
-  set firewall options interface pppoe0 adjust-mss '1452'
-  set firewall options interface wg02 adjust-mss '1372'
-
-IPv6
-====
-
-.. cfgcmd:: set firewall options interface <interface> adjust-mss6 <number-of-bytes>
-
-   Use this command to set the maximum segment size for IPv6 transit
-   packets on a specific interface (1280-1492 bytes).
-
-Example
--------
-
-Clamp outgoing MSS value in a TCP SYN packet to `1280` for both `pppoe0` and
-`wg02` interface.
-
-.. code-block:: none
-
-  set firewall options interface pppoe0 adjust-mss6 '1280'
-  set firewall options interface wg02 adjust-mss6 '1280'
-
-
-
-.. hint:: When doing your byte calculations, you might find useful this
-   `Visual packet size calculator <https://baturin.org/tools/encapcalc/>`_.
diff --git a/docs/services/dynamic-dns.rst b/docs/services/dynamic-dns.rst
deleted file mode 100644
index 3d802d29..00000000
--- a/docs/services/dynamic-dns.rst
+++ /dev/null
@@ -1,164 +0,0 @@
-.. _dynamic-dns:
-
-###########
-Dynamic DNS
-###########
-
-VyOS is able to update a remote DNS record when an interface gets a new IP
-address. In order to do so, VyOS includes ddclient_, a Perl script written for
-this only one purpose.
-
-ddclient_ uses two methods to update a DNS record. The first one will send
-updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second
-one involves a third party service, like DynDNS.com or any other similar
-website. This method uses HTTP requests to transmit the new IP address. You
-can configure both in VyOS.
-
-Configuration
-=============
-
-:rfc:`2136` Based
------------------
-
-.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name>
-
-   Create new :rfc:`2136` DNS update configuration which will update the IP
-   address assigned to `<interface>` on the service you configured under
-   `<service-name>`.
-
-.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> key <keyfile>
-
-   File identified by `<keyfile>` containing the secret RNDC key shared with
-   remote DNS server.
-
-.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> server <server>
-
-   Configure the DNS `<server>` IP/FQDN used when updating this dynamic
-   assignment.
-
-.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> zone <zone>
-
-   Configure DNS `<zone>` to be updated.
-
-.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> record <record>
-
-   Configure DNS `<record>` which should be updated. This can be set multiple
-   times.
-
-.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> ttl <ttl>
-
-   Configure optional TTL value on the given resource record. This defualts to
-   600 seconds.
-
-Example
-^^^^^^^
-
-* Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``
-* Use auth key file at ``/config/auth/my.key``
-* Set TTL to 300 seconds
-
-.. code-block:: none
-
-  vyos@vyos# show service dns dynamic
-   interface eth0.7 {
-       rfc2136 VyOS-DNS {
-           key /config/auth/my.key
-           record example.vyos.io
-           server ns1.vyos.io
-           ttl 300
-           zone vyos.io
-       }
-   }
-
-This will render the following ddclient_ configuration entry:
-
-.. code-block:: none
-
-  #
-  # ddclient configuration for interface "eth0.7":
-  #
-  use=if, if=eth0.7
-
-  # RFC2136 dynamic DNS configuration for example.vyos.io.vyos.io
-  server=ns1.vyos.io
-  protocol=nsupdate
-  password=/config/auth/my.key
-  ttl=300
-  zone=vyos.io
-  example.vyos.io
-
-.. note:: You can also keep different DNS zone updated. Just create a new
-   config node: ``set service dns dynamic interface <interface> rfc2136
-   <other-service-name>``
-
-HTTP based services
--------------------
-
-VyOS is also able to use any service relying on protocols supported by ddclient.
-
-To use such a service, one must define a login, password, one or multiple
-hostnames, protocol and server.
-
-.. cfgcmd:: set service dns dynamic interface <interface> service <service> host-name <hostname>
-
-   Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS
-   provider identified by `<service>` when the IP address on interface
-   `<interface>` changes.
-
-.. cfgcmd:: set service dns dynamic interface <interface> service <service> login <username>
-
-   Configure `<username>` used when authenticating the update request for
-   DynDNS service identified by `<service>`.
-   For Namecheap, set the <domain> you wish to update.
-
-.. cfgcmd:: set service dns dynamic interface <interface> service <service> password <password>
-
-   Configure `<password>` used when authenticating the update request for
-   DynDNS service identified by `<service>`.
-
-.. cfgcmd:: set service dns dynamic interface <interface> service <service> protocol <protocol>
-
-   When a ``custom`` DynDNS provider is used the protocol used for communicating
-   to the provider must be specified under `<protocol>`. See the embedded
-   completion helper for available protocols.
-
-.. cfgcmd:: set service dns dynamic interface <interface> service <service> server <server>
-
-   When a ``custom`` DynDNS provider is used the `<server>` where update
-   requests are being sent to must be specified.
-
-Example:
-^^^^^^^^
-
-Use DynDNS as your preferred provider:
-
-.. code-block:: none
-
-  set service dns dynamic interface eth0 service dyndns
-  set service dns dynamic interface eth0 service dyndns login my-login
-  set service dns dynamic interface eth0 service dyndns password my-password
-  set service dns dynamic interface eth0 service dyndns host-name my-dyndns-hostname
-
-.. note:: Multiple services can be used per interface. Just specify as many
-   serives per interface as you like!
-
-Running Behind NAT
-------------------
-
-By default, ddclient_ will update a dynamic dns record using the IP address
-directly attached to the interface. If your VyOS instance is behind NAT, your
-record will be updated to point to your internal IP.
-
-ddclient_ has another way to determine the WAN IP address. This is controlled
-by:
-
-.. cfgcmd:: set service dns dynamic interface <interface> use-web url <url>
-
-   Use configured `<url>` to determine your IP address. ddclient_ will load
-   `<url>` and tries to extract your IP address from the response.
-
-.. cfgcmd:: set service dns dynamic interface <interface> use-web skip <pattern>
-
-   ddclient_ will skip any address located before the string set in `<pattern>`.
-
-.. _ddclient: https://github.com/ddclient/ddclient
diff --git a/docs/services/index.rst b/docs/services/index.rst
deleted file mode 100644
index 76520b52..00000000
--- a/docs/services/index.rst
+++ /dev/null
@@ -1,26 +0,0 @@
-.. _services:
-
-########
-Services
-########
-
-This chapter describes the available system/network services provided by VyOS.
-
-.. toctree::
-   :maxdepth: 1
-
-   conntrack
-   console-server
-   dhcp
-   dns-forwarding
-   dynamic-dns
-   lldp
-   mdns-repeater
-   ipoe-server
-   pppoe-server
-   udp-broadcast-relay
-   router-advert
-   snmp
-   ssh
-   tftp
-   webproxy

From b1cb71c71935ad6b0a7d9effe8f4dc4467de2175 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Mon, 30 Nov 2020 21:15:16 +0100
Subject: [PATCH 131/295] arrange: system configration

---
 docs/automation/index.rst                     |  3 +-
 docs/configuration/system/acceleration.rst    |  7 ++++
 .../system/config-management.rst              |  2 ++
 docs/configuration/system/conntrack.rst       |  2 ++
 .../system/console.rst}                       |  0
 .../system/default-route.rst                  |  0
 docs/configuration/system/domain-name.rst     |  2 ++
 docs/configuration/system/domain-search.rst   |  2 ++
 .../system/eventhandler.rst                   |  0
 .../system/flow-accounting.rst                |  0
 .../system/host-name.rst}                     |  0
 docs/configuration/system/index.rst           | 32 +++++++++++++++++++
 docs/configuration/system/ip.rst              |  2 ++
 docs/configuration/system/ipv6.rst            |  2 ++
 docs/{ => configuration}/system/lcd.rst       |  0
 .../system/login.rst}                         |  0
 .../system/name-server.rst}                   |  0
 .../system/name-servers-dhcp.rst              |  2 ++
 docs/{ => configuration}/system/ntp.rst       |  0
 docs/{ => configuration}/system/option.rst    |  0
 docs/{ => configuration}/system/proxy.rst     |  0
 .../system/static-host-mapping.rst            |  2 ++
 docs/configuration/system/sysctl.rst          |  2 ++
 docs/{ => configuration}/system/syslog.rst    |  0
 .../system/task-scheduler.rst                 |  0
 docs/{ => configuration}/system/time-zone.rst |  0
 .../system/wifi-requlatory-domain.rst         |  2 ++
 docs/index.rst                                |  8 +++--
 docs/{system => operation}/boot-options.rst   |  0
 docs/{ => operation}/information.rst          |  0
 docs/system/advanced-index.rst                | 19 -----------
 docs/system/basic-index.rst                   | 14 --------
 32 files changed, 65 insertions(+), 38 deletions(-)
 create mode 100644 docs/configuration/system/acceleration.rst
 create mode 100644 docs/configuration/system/config-management.rst
 create mode 100644 docs/configuration/system/conntrack.rst
 rename docs/{system/serial-console.rst => configuration/system/console.rst} (100%)
 rename docs/{ => configuration}/system/default-route.rst (100%)
 create mode 100644 docs/configuration/system/domain-name.rst
 create mode 100644 docs/configuration/system/domain-search.rst
 rename docs/{ => configuration}/system/eventhandler.rst (100%)
 rename docs/{ => configuration}/system/flow-accounting.rst (100%)
 rename docs/{system/host-information.rst => configuration/system/host-name.rst} (100%)
 create mode 100644 docs/configuration/system/index.rst
 create mode 100644 docs/configuration/system/ip.rst
 create mode 100644 docs/configuration/system/ipv6.rst
 rename docs/{ => configuration}/system/lcd.rst (100%)
 rename docs/{system/user-management.rst => configuration/system/login.rst} (100%)
 rename docs/{system/system-dns.rst => configuration/system/name-server.rst} (100%)
 create mode 100644 docs/configuration/system/name-servers-dhcp.rst
 rename docs/{ => configuration}/system/ntp.rst (100%)
 rename docs/{ => configuration}/system/option.rst (100%)
 rename docs/{ => configuration}/system/proxy.rst (100%)
 create mode 100644 docs/configuration/system/static-host-mapping.rst
 create mode 100644 docs/configuration/system/sysctl.rst
 rename docs/{ => configuration}/system/syslog.rst (100%)
 rename docs/{ => configuration}/system/task-scheduler.rst (100%)
 rename docs/{ => configuration}/system/time-zone.rst (100%)
 create mode 100644 docs/configuration/system/wifi-requlatory-domain.rst
 rename docs/{system => operation}/boot-options.rst (100%)
 rename docs/{ => operation}/information.rst (100%)
 delete mode 100644 docs/system/advanced-index.rst
 delete mode 100644 docs/system/basic-index.rst

diff --git a/docs/automation/index.rst b/docs/automation/index.rst
index 1f2b40b1..e07dfecc 100644
--- a/docs/automation/index.rst
+++ b/docs/automation/index.rst
@@ -12,5 +12,4 @@ VyOS Automation
 .. toctree::
    :maxdepth: 1
 
-   command-scripting
-   http-api
\ No newline at end of file
+   command-scripting
\ No newline at end of file
diff --git a/docs/configuration/system/acceleration.rst b/docs/configuration/system/acceleration.rst
new file mode 100644
index 00000000..b09da38b
--- /dev/null
+++ b/docs/configuration/system/acceleration.rst
@@ -0,0 +1,7 @@
+.. _acceleration:
+
+############
+Acceleration
+############
+
+
diff --git a/docs/configuration/system/config-management.rst b/docs/configuration/system/config-management.rst
new file mode 100644
index 00000000..40973713
--- /dev/null
+++ b/docs/configuration/system/config-management.rst
@@ -0,0 +1,2 @@
+config-management
+#################
\ No newline at end of file
diff --git a/docs/configuration/system/conntrack.rst b/docs/configuration/system/conntrack.rst
new file mode 100644
index 00000000..7d5d4308
--- /dev/null
+++ b/docs/configuration/system/conntrack.rst
@@ -0,0 +1,2 @@
+conntrack
+#########
\ No newline at end of file
diff --git a/docs/system/serial-console.rst b/docs/configuration/system/console.rst
similarity index 100%
rename from docs/system/serial-console.rst
rename to docs/configuration/system/console.rst
diff --git a/docs/system/default-route.rst b/docs/configuration/system/default-route.rst
similarity index 100%
rename from docs/system/default-route.rst
rename to docs/configuration/system/default-route.rst
diff --git a/docs/configuration/system/domain-name.rst b/docs/configuration/system/domain-name.rst
new file mode 100644
index 00000000..9028b65b
--- /dev/null
+++ b/docs/configuration/system/domain-name.rst
@@ -0,0 +1,2 @@
+domain-name
+###########
\ No newline at end of file
diff --git a/docs/configuration/system/domain-search.rst b/docs/configuration/system/domain-search.rst
new file mode 100644
index 00000000..f4aef62e
--- /dev/null
+++ b/docs/configuration/system/domain-search.rst
@@ -0,0 +1,2 @@
+domain-search
+#############
\ No newline at end of file
diff --git a/docs/system/eventhandler.rst b/docs/configuration/system/eventhandler.rst
similarity index 100%
rename from docs/system/eventhandler.rst
rename to docs/configuration/system/eventhandler.rst
diff --git a/docs/system/flow-accounting.rst b/docs/configuration/system/flow-accounting.rst
similarity index 100%
rename from docs/system/flow-accounting.rst
rename to docs/configuration/system/flow-accounting.rst
diff --git a/docs/system/host-information.rst b/docs/configuration/system/host-name.rst
similarity index 100%
rename from docs/system/host-information.rst
rename to docs/configuration/system/host-name.rst
diff --git a/docs/configuration/system/index.rst b/docs/configuration/system/index.rst
new file mode 100644
index 00000000..ecf09a64
--- /dev/null
+++ b/docs/configuration/system/index.rst
@@ -0,0 +1,32 @@
+######
+System
+######
+
+
+.. toctree::
+   :maxdepth: 1
+   :includehidden:
+
+   acceleration
+   config-management
+   conntrack
+   console
+   domain-name
+   domain-search
+   flow-accounting
+   host-name
+   ip
+   ipv6
+   lcd
+   login
+   name-server
+   name-servers-dhcp
+   ntp
+   options
+   proxy
+   static-host-mapping
+   sysctl
+   syslog
+   task-scheduler
+   time-zone
+   wifi-requlatory-domain
diff --git a/docs/configuration/system/ip.rst b/docs/configuration/system/ip.rst
new file mode 100644
index 00000000..74116eb0
--- /dev/null
+++ b/docs/configuration/system/ip.rst
@@ -0,0 +1,2 @@
+ip
+##
\ No newline at end of file
diff --git a/docs/configuration/system/ipv6.rst b/docs/configuration/system/ipv6.rst
new file mode 100644
index 00000000..19ed6d62
--- /dev/null
+++ b/docs/configuration/system/ipv6.rst
@@ -0,0 +1,2 @@
+ipv6
+####
\ No newline at end of file
diff --git a/docs/system/lcd.rst b/docs/configuration/system/lcd.rst
similarity index 100%
rename from docs/system/lcd.rst
rename to docs/configuration/system/lcd.rst
diff --git a/docs/system/user-management.rst b/docs/configuration/system/login.rst
similarity index 100%
rename from docs/system/user-management.rst
rename to docs/configuration/system/login.rst
diff --git a/docs/system/system-dns.rst b/docs/configuration/system/name-server.rst
similarity index 100%
rename from docs/system/system-dns.rst
rename to docs/configuration/system/name-server.rst
diff --git a/docs/configuration/system/name-servers-dhcp.rst b/docs/configuration/system/name-servers-dhcp.rst
new file mode 100644
index 00000000..6719fef9
--- /dev/null
+++ b/docs/configuration/system/name-servers-dhcp.rst
@@ -0,0 +1,2 @@
+name-servers-dhcp
+#################
\ No newline at end of file
diff --git a/docs/system/ntp.rst b/docs/configuration/system/ntp.rst
similarity index 100%
rename from docs/system/ntp.rst
rename to docs/configuration/system/ntp.rst
diff --git a/docs/system/option.rst b/docs/configuration/system/option.rst
similarity index 100%
rename from docs/system/option.rst
rename to docs/configuration/system/option.rst
diff --git a/docs/system/proxy.rst b/docs/configuration/system/proxy.rst
similarity index 100%
rename from docs/system/proxy.rst
rename to docs/configuration/system/proxy.rst
diff --git a/docs/configuration/system/static-host-mapping.rst b/docs/configuration/system/static-host-mapping.rst
new file mode 100644
index 00000000..97d9a443
--- /dev/null
+++ b/docs/configuration/system/static-host-mapping.rst
@@ -0,0 +1,2 @@
+static-host-mapping
+###################
\ No newline at end of file
diff --git a/docs/configuration/system/sysctl.rst b/docs/configuration/system/sysctl.rst
new file mode 100644
index 00000000..82ffd159
--- /dev/null
+++ b/docs/configuration/system/sysctl.rst
@@ -0,0 +1,2 @@
+sysctl
+######
\ No newline at end of file
diff --git a/docs/system/syslog.rst b/docs/configuration/system/syslog.rst
similarity index 100%
rename from docs/system/syslog.rst
rename to docs/configuration/system/syslog.rst
diff --git a/docs/system/task-scheduler.rst b/docs/configuration/system/task-scheduler.rst
similarity index 100%
rename from docs/system/task-scheduler.rst
rename to docs/configuration/system/task-scheduler.rst
diff --git a/docs/system/time-zone.rst b/docs/configuration/system/time-zone.rst
similarity index 100%
rename from docs/system/time-zone.rst
rename to docs/configuration/system/time-zone.rst
diff --git a/docs/configuration/system/wifi-requlatory-domain.rst b/docs/configuration/system/wifi-requlatory-domain.rst
new file mode 100644
index 00000000..2b6ce7d4
--- /dev/null
+++ b/docs/configuration/system/wifi-requlatory-domain.rst
@@ -0,0 +1,2 @@
+wifi-requlatory-domain
+######################
\ No newline at end of file
diff --git a/docs/index.rst b/docs/index.rst
index 4612d5f8..96272fff 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -4,16 +4,17 @@
 VyOS User Guide
 ###############
 
-
 .. toctree::
    :maxdepth: 2
    :hidden:
+   :caption: FIND CAPTION NAME
 
    introducing/about
    introducing/history
    introducing/releases
    changelog/index
 
+
 .. toctree::
    :maxdepth: 2
    :hidden:
@@ -21,9 +22,8 @@ VyOS User Guide
    :caption: first steps
 
    installation/index
-   quick-start
+   quickstart/index
    cli
-
    
 .. toctree::
    :maxdepth: 2
@@ -31,6 +31,7 @@ VyOS User Guide
    :includehidden:
    :caption: Adminguide
 
+
    configuration/index
    operation/index
    automation/index
@@ -44,5 +45,6 @@ VyOS User Guide
    :includehidden:
    :caption: Contributing
 
+
    contributing/index
    copyright
diff --git a/docs/system/boot-options.rst b/docs/operation/boot-options.rst
similarity index 100%
rename from docs/system/boot-options.rst
rename to docs/operation/boot-options.rst
diff --git a/docs/information.rst b/docs/operation/information.rst
similarity index 100%
rename from docs/information.rst
rename to docs/operation/information.rst
diff --git a/docs/system/advanced-index.rst b/docs/system/advanced-index.rst
deleted file mode 100644
index 8e855789..00000000
--- a/docs/system/advanced-index.rst
+++ /dev/null
@@ -1,19 +0,0 @@
-.. _advanced_system_tweaks:
-
-######
-System
-######
-
-.. toctree::
-   :maxdepth: 2
-
-   boot-options
-   eventhandler
-   flow-accounting
-   lcd
-   ntp
-   option
-   proxy
-   serial-console
-   syslog
-   task-scheduler
diff --git a/docs/system/basic-index.rst b/docs/system/basic-index.rst
deleted file mode 100644
index b7bbf1c5..00000000
--- a/docs/system/basic-index.rst
+++ /dev/null
@@ -1,14 +0,0 @@
-.. _basic_system_tweaks:
-
-###################
-Basic System Tweaks
-###################
-
-.. toctree::
-   :maxdepth: 2
-
-   user-management
-   host-information
-   default-route
-   time-zone
-   system-dns

From 0273002859f4228bf24d06081fbb4d8b55996ad2 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 1 Dec 2020 17:55:35 +0100
Subject: [PATCH 132/295] dhcp: quick example contained invalid domain name

---
 docs/quick-start.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/quick-start.rst b/docs/quick-start.rst
index 550bfd77..367bdb4c 100644
--- a/docs/quick-start.rst
+++ b/docs/quick-start.rst
@@ -89,7 +89,7 @@ where VyOS will act as the default gateway and DNS server.
 
   set service dhcp-server shared-network-name LAN subnet 192.168.0.0/24 default-router '192.168.0.1'
   set service dhcp-server shared-network-name LAN subnet 192.168.0.0/24 dns-server '192.168.0.1'
-  set service dhcp-server shared-network-name LAN subnet 192.168.0.0/24 domain-name 'internal-network'
+  set service dhcp-server shared-network-name LAN subnet 192.168.0.0/24 domain-name 'vyos.net'
   set service dhcp-server shared-network-name LAN subnet 192.168.0.0/24 lease '86400'
   set service dhcp-server shared-network-name LAN subnet 192.168.0.0/24 range 0 start 192.168.0.9
   set service dhcp-server shared-network-name LAN subnet 192.168.0.0/24 range 0 stop '192.168.0.254'

From d67ea9fd2862f7dd6b61ce8db4424fdd8943d56b Mon Sep 17 00:00:00 2001
From: Devin Bayer <dev@doubly.so>
Date: Wed, 2 Dec 2020 17:27:02 +0100
Subject: [PATCH 133/295] fix syntax for vht center-channel-freq

---
 docs/interfaces/wireless.rst | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/docs/interfaces/wireless.rst b/docs/interfaces/wireless.rst
index 2de3b126..16e3b7d2 100644
--- a/docs/interfaces/wireless.rst
+++ b/docs/interfaces/wireless.rst
@@ -225,12 +225,14 @@ VHT (Very High Throughput) capabilities (802.11ac)
   * ``multi-user-beamformer`` - Support for operation as single user beamformer
   * ``multi-user-beamformee`` - Support for operation as single user beamformer
 
-.. cfgcmd:: set interfaces wireless <interface> capabilities vht center-channel-freq <freq-1 | freq-2>
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht center-channel-freq <freq-1 | freq-2> <number>
 
   VHT operating channel center frequency - center freq 1 (for use with 80, 80+80 and 160 modes)
 
   VHT operating channel center frequency - center freq 2 (for use with the 80+80 mode)
 
+  <number> must be from 34 - 173. For 80 MHz channels it should be channel + 6.
+
 .. cfgcmd:: set interfaces wireless <interface> capabilities vht channel-set-width <0 | 1 | 2 | 3>
 
    * ``0`` - 20 or 40 MHz channel width (default)

From b820812b38a9cfc1ae59280576296cb657cc78a7 Mon Sep 17 00:00:00 2001
From: Devin Bayer <dev@doubly.so>
Date: Wed, 2 Dec 2020 17:38:28 +0100
Subject: [PATCH 134/295] Document how to build firmware

---
 docs/contributing/build-vyos.rst | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/docs/contributing/build-vyos.rst b/docs/contributing/build-vyos.rst
index 627d79d0..2fe2d3c0 100644
--- a/docs/contributing/build-vyos.rst
+++ b/docs/contributing/build-vyos.rst
@@ -429,6 +429,28 @@ In the end you will be presented with the Kernel binary packages which you can
 then use in your custom ISO build process, by placing all the `*.deb` files in
 the vyos-build/packages folder where they will be used automatically when building VyOS as documented above.
 
+Firmware
+^^^^^^^^
+
+If you upgrade your kernel or include new drivers you may need new firmware.
+Build a new ``vyos-linux-firmware`` package with the included helper scripts.
+
+.. code-block:: none
+
+  $ cd vyos-build/packages/linux-kernel
+  $ git clone https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git
+  $ ./build-linux-firmware.sh
+  $ cp vyos-linux-firmware_*.deb ../
+
+This tries to automatically detect which blobs are needed based on which drivers
+were built. If it fails to find the correct files you can add them manually to
+``vyos-build/packages/linux-kernel/build-linux-firmware.sh``:
+
+.. code-block:: bash
+
+  ADD_FW_FILES="iwlwifi* ath11k/QCA6390/*/*.bin"
+
+
 Building Out-Of-Tree Modules
 ----------------------------
 

From 398a1c4e91562517b5772072aea54ab4f9c23854 Mon Sep 17 00:00:00 2001
From: sever-sever <v.gletenko@vyos.io>
Date: Thu, 3 Dec 2020 14:50:40 +0200
Subject: [PATCH 135/295] isis-doc: Simple config and protocol description

---
 docs/routing/index.rst |  1 +
 docs/routing/isis.rst  | 74 ++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 75 insertions(+)
 create mode 100644 docs/routing/isis.rst

diff --git a/docs/routing/index.rst b/docs/routing/index.rst
index 63d7c7d8..9220cd29 100644
--- a/docs/routing/index.rst
+++ b/docs/routing/index.rst
@@ -14,6 +14,7 @@ Routing
    mss-clamp
    multicast
    ip-commands
+   isis
    ospf
    pbr
    rip
diff --git a/docs/routing/isis.rst b/docs/routing/isis.rst
new file mode 100644
index 00000000..807dca83
--- /dev/null
+++ b/docs/routing/isis.rst
@@ -0,0 +1,74 @@
+.. include:: ../_include/need_improvement.txt
+
+.. _isis:
+
+#####
+IS-IS
+#####
+
+:abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway routing protocol.
+Like OSPF, IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s
+topology and, from that database, to determine the best (that is, shortest) path to a destination.
+The routers exchange topology information with their nearest neighbors.
+IS-IS runs directly on the data link layer (Layer 2).
+IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long.
+
+For example :abbr:`NET (Network Entity Title)`
+
+.. code-block:: none
+
+  49.0001.1921.6800.1002.00
+
+The IS-IS address consists of three parts:
+
+  :abbr:`AFI (Address family authority identifier)`
+    ``49`` The AFI value 49 is what IS-IS uses for private addressing.
+
+  Area identifier:
+    ``0001`` IS-IS area number (Area1)
+
+  System identifier:
+    ``1921.6800.1002`` For system idetifier we recommend to use IP address or MAC address of the router.
+
+  NET selector:
+    ``00`` Must always be 00, to indicate "this system".
+
+Simple IS-IS configuration using 2 nodes and redistributing connected interfaces.
+
+**Node 1:**
+
+.. code-block:: none
+
+  set interfaces dummy dum0 address '203.0.113.1/24'
+  set interfaces ethernet eth1 address '192.0.2.1/24'
+
+  set policy prefix-list EXPORT-ISIS rule 10 action 'permit'
+  set policy prefix-list EXPORT-ISIS rule 10 prefix '203.0.113.0/24'
+  set policy route-map EXPORT-ISIS rule 10 action 'permit'
+  set policy route-map EXPORT-ISIS rule 10 match ip address prefix-list 'EXPORT-ISIS'
+
+  set protocols isis FOO interface eth1
+  set protocols isis FOO net '49.0001.1921.6800.1002.00'
+  set protocols isis FOO redistribute ipv4 connected level-2 route-map 'EXPORT-ISIS'
+
+**Node 2:**
+
+.. code-block:: none
+
+  set interfaces ethernet eth1 address '192.0.2.2/24'
+
+  set protocols isis FOO interface eth1
+  set protocols isis FOO net '49.0001.1921.6800.2002.00'
+
+Show ip routes on Node2:
+
+.. code-block:: none
+
+  vyos@r2:~$ show ip route isis 
+  Codes: K - kernel route, C - connected, S - static, R - RIP,
+         O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
+         T - Table, v - VNC, V - VNC-Direct, A - Babel, D - SHARP,
+         F - PBR, f - OpenFabric,
+         > - selected route, * - FIB route, q - queued route, r - rejected route
+
+  I   203.0.113.0/24 [115/10] via 192.0.2.1, eth1, 00:03:42

From f0fc9200876a0e44644db3e8e0f8f3d2aaa7238d Mon Sep 17 00:00:00 2001
From: Eshenko Dmitriy <dmitriy.eshenko@vyos.io>
Date: Fri, 4 Dec 2020 09:30:34 +0300
Subject: [PATCH 136/295] Replace local-ip option to gateway-address

---
 docs/services/pppoe-server.rst | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/docs/services/pppoe-server.rst b/docs/services/pppoe-server.rst
index e710ba6a..1b7082ec 100644
--- a/docs/services/pppoe-server.rst
+++ b/docs/services/pppoe-server.rst
@@ -39,7 +39,7 @@ First steps
    Use this command to define the interface the PPPoE server will use to
    listen for PPPoE clients.
 
-.. cfgcmd:: set service pppoe-server local-ip <address>
+.. cfgcmd:: set service pppoe-server gateway-address <address>
 
    Use this command to configure the local gateway IP address.
 
@@ -57,7 +57,7 @@ To automatically assign the client an IP address as tunnel endpoint, a
 client IP pool is needed. The source can be either RADIUS or a local
 subnet or IP range definition.
 
-Once the local tunnel endpoint ``set service pppoe-server local-ip
+Once the local tunnel endpoint ``set service pppoe-server gateway-address
 '10.1.1.2'`` has been defined, the client IP pool can be either defined
 as a range or as subnet using CIDR notation. If the CIDR notation is
 used, multiple subnets can be setup which are used sequentially.
@@ -116,7 +116,7 @@ and then configure it.
   set service pppoe-server authentication mode 'radius'
   set service pppoe-server authentication radius server 10.1.100.1 key 'secret'
   set service pppoe-server interface 'eth1'
-  set service pppoe-server local-ip '10.1.1.2'
+  set service pppoe-server gateway-address '10.1.1.2'
 
 RADIUS provides the IP addresses in the example above via
 Framed-IP-Address.
@@ -210,7 +210,7 @@ For Local Users
   set service pppoe-server name-server '10.100.100.1'
   set service pppoe-server name-server '10.100.200.1'
   set service pppoe-server interface 'eth1'
-  set service pppoe-server local-ip '10.1.1.2'
+  set service pppoe-server gateway-address '10.1.1.2'
 
 
 Once the user is connected, the user session is using the set limits and
@@ -359,7 +359,7 @@ address from the pool 10.1.1.100-111, terminates at the local endpoint
   set service pppoe-server client-ip-pool start '10.1.1.100'
   set service pppoe-server client-ip-pool stop '10.1.1.111'
   set service pppoe-server interface eth1
-  set service pppoe-server local-ip '10.1.1.2'
+  set service pppoe-server gateway-address '10.1.1.2'
   set service pppoe-server name-server '10.100.100.1'
   set service pppoe-server name-server '10.100.200.1'
 
@@ -381,7 +381,7 @@ The example below covers a dual-stack configuration via pppoe-server.
   set service pppoe-server name-server '8.8.8.8'
   set service pppoe-server name-server '2001:4860:4860::8888'
   set service pppoe-server interface 'eth2'
-  set service pppoe-server local-ip '10.100.100.1'
+  set service pppoe-server gateway-address '10.100.100.1'
 
 The client, once successfully authenticated, will receive an IPv4 and an
 IPv6 /64 address to terminate the pppoe endpoint on the client side and

From 4178dde02a3966944515e2a02a297167b36fd8fa Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 4 Dec 2020 14:22:13 +0100
Subject: [PATCH 137/295] pppoe: T3112: remove "ipv6 enable" cli option

Option is now determined implicitly.
---
 docs/interfaces/pppoe.rst | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/docs/interfaces/pppoe.rst b/docs/interfaces/pppoe.rst
index 313edd84..a7c0048f 100644
--- a/docs/interfaces/pppoe.rst
+++ b/docs/interfaces/pppoe.rst
@@ -168,10 +168,6 @@ PPPoE options
 IPv6
 ----
 
-.. cfgcmd:: set interfaces pppoe <interface> ipv6 enable
-
-   Use this command to enable IPv6 support on this PPPoE connection.
-
 .. cfgcmd:: set interfaces pppoe <interface> ipv6 address autoconf
 
    Use this command to enable acquisition of IPv6 address using stateless
@@ -303,5 +299,4 @@ If you do not know the prefix size delegated to you, start with sla-len 0.
   set interfaces pppoe pppoe0 dhcpv6-options prefix-delegation interface eth0 sla-id 0
   set interfaces pppoe pppoe0 dhcpv6-options prefix-delegation interface eth0 sla-len 8
   set interfaces pppoe pppoe0 ipv6 address autoconf
-  set interfaces pppoe pppoe0 ipv6 enable
   set interfaces pppoe pppoe0 source-interface eth1

From f79ed081da04f62eb78fa13652e21ab12025bd85 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 4 Dec 2020 15:25:06 +0100
Subject: [PATCH 138/295] dhcp: fix failover example range ip addresses

---
 docs/services/dhcp.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/services/dhcp.rst b/docs/services/dhcp.rst
index 56316793..39ec3ed3 100644
--- a/docs/services/dhcp.rst
+++ b/docs/services/dhcp.rst
@@ -355,8 +355,8 @@ Failover
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover name 'NET-VYOS'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover peer-address '192.168.189.253'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover status 'primary'
-  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 start '192.168.189.10'
-  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 stop '192.168.189.250'
+  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 start '192.0.2.10'
+  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 stop '192.0.2.250'
 
 **Secondary**
 
@@ -369,8 +369,8 @@ Failover
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover name 'NET-VYOS'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover peer-address '192.168.189.252'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover status 'primary'
-  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 start '192.168.189.10'
-  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 stop '192.168.189.250'
+  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 start '192.0.2.10'
+  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 stop '192.0.2.250'
 
 
 Raw Parameters

From 01af45bead12503ef7d05ac77a3675027e74f5ac Mon Sep 17 00:00:00 2001
From: Cheeze_It <none@none.com>
Date: Sun, 6 Dec 2020 00:10:33 -0700
Subject: [PATCH 139/295] mpls-conf: T915: Added documentation for MPLS on
 previous commits, and local label allocation

In this commit, we added the previous MPLS configurations that were added as
well as the new local label allocation documentation.
---
 docs/routing/mpls.rst | 66 +++++++++++++++++++++++++++++++++++++++----
 1 file changed, 61 insertions(+), 5 deletions(-)

diff --git a/docs/routing/mpls.rst b/docs/routing/mpls.rst
index 82e99a17..4451c5c3 100644
--- a/docs/routing/mpls.rst
+++ b/docs/routing/mpls.rst
@@ -58,6 +58,11 @@ It is highly recommended to use the same address for both the LDP router-id and
 the discovery transport address, but for VyOS MPLS LDP to work both parameters
 must be explicitly set in the configuration.
 
+Another thing to keep in mind with LDP is that much like BGP, it is a protocol that
+runs on top of TCP. It however does not have an ability to do something like a
+refresh capability like BGPs route refresh capability. Therefore one might have
+to reset the neighbor for a capability change or a configuration change to work.
+
 Configuration Options
 =====================
 
@@ -76,16 +81,29 @@ Configuration Options
 
   Use this command to set the IPv4 or IPv6 transport-address used by LDP.
 
-.. cfgcmd:: set protocols mpls ldp neighbor <IPv4 address> password <password>
+.. cfgcmd:: set protocols mpls ldp neighbor <address> password <password>
 
   Use this command to configure authentication for LDP peers. Set the
   IP address of the LDP peer and a password that should be shared in
-  order to become neighbors.
+  order to become neighbors. 
+  
+.. cfgcmd:: set protocols mpls ldp neighbor <address> session-holdtime <seconds>
+  
+  Use this command to configure a specific session hold time for LDP peers.
+  Set the IP address of the LDP peer and a session hold time that should be
+  configured for it. You may have to reset the neighbor for this to work.
+  
+.. cfgcmd:: set protocols mpls ldp neighbor <address> ttl-security <disable | hop count>
 
-.. cfgcmd:: set protocols mpls ldp discovery hello-interval <seconds>
-.. cfgcmd:: set protocols mpls ldp discovery hello-holdtime <seconds>
+  Use this command to enable, disable, or specify hop count for TTL security
+  for LDP peers. By default the value is set to 255 (or max TTL). 
 
-  Use this command if you would like to set the discovery hello and hold time
+.. cfgcmd:: set protocols mpls ldp discovery hello-ipv4-interval <seconds>
+.. cfgcmd:: set protocols mpls ldp discovery hello-ipv4-holdtime <seconds>
+.. cfgcmd:: set protocols mpls ldp discovery hello-ipv6-interval <seconds>
+.. cfgcmd:: set protocols mpls ldp discovery hello-ipv6-holdtime <seconds>
+
+  Use these commands if you would like to set the discovery hello and hold time
   parameters.
 
 .. cfgcmd:: set protocols mpls ldp discovery session-ipv4-holdtime <seconds>
@@ -98,6 +116,44 @@ Configuration Options
 
   Use this command if you would like for the router to advertise FECs with a label
   of 0 for explicit null operations.
+  
+.. cfgcmd:: set protocols mpls ldp allocation ipv4 access-list <access list number>
+.. cfgcmd:: set protocols mpls ldp allocation ipv6 access-list6 <access list number>
+
+  Use this command if you would like to control the local FEC allocations for LDP. A
+  good example would be for your local router to not allocate a label for everything.
+  Just a label for what it's useful. A good example would be just a loopback label.
+  
+.. cfgcmd:: set protocols mpls ldp parameters cisco-interop-tlv
+
+  Use this command to use a Cisco non-compliant format to send and interpret the
+  Dual-Stack capability TLV for IPv6 LDP communications. This is related to :rfc:`7552`.
+  
+.. cfgcmd:: set protocols mpls ldp parameters transport-prefer-ipv4
+
+  Use this command to prefer IPv4 for TCP peer transport connection for LDP when
+  both an IPv4 and IPv6 LDP address are configured on the same interface.
+  
+.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv4 enable
+.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv6 enable
+
+  Use this command to enable targeted LDP sessions to the local router. The router
+  will then respond to any sessions that are trying to connect to it that are not
+  a link local type of TCP connection.
+  
+.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv4 address <address>
+.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv6 address <address>
+
+  Use this command to enable the local router to try and connect with a targeted
+  LDP session to another router.
+  
+.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv4 hello-holdtime <seconds>
+.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv4 hello-interval <seconds>
+.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv6 hello-holdtime <seconds>
+.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv6 hello-interval <seconds>
+
+  Use these commands if you would like to set the discovery hello and hold time
+  parameters for the targeted LDP neighbors.
 
 
 Sample configuration to setup LDP on VyOS

From 2f58753cdfee3c54a64f75a7b3c152935beb5f6f Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 6 Dec 2020 14:36:37 +0100
Subject: [PATCH 140/295] dhcp: restructure chapters

---
 docs/quick-start.rst   |  10 +-
 docs/services/dhcp.rst | 203 ++++++++++++++++++-----------------------
 2 files changed, 93 insertions(+), 120 deletions(-)

diff --git a/docs/quick-start.rst b/docs/quick-start.rst
index 367bdb4c..c70d4cc5 100644
--- a/docs/quick-start.rst
+++ b/docs/quick-start.rst
@@ -70,8 +70,10 @@ on specific addresses only.
   set service ssh port '22'
 
 
-Configure DHCP/DNS Servers
-##########################
+.. _dhcp-dns-quick-start:
+
+DHCP/DNS quick-start
+####################
 
 The following settings will configure DHCP and DNS services on your internal/LAN network,
 where VyOS will act as the default gateway and DNS server.
@@ -81,7 +83,7 @@ where VyOS will act as the default gateway and DNS server.
 * DHCP clients will be assigned IP addresses within the range of `192.168.0.9 - 192.168.0.254`
   and have a domain name of `internal-network`
 * DHCP leases will hold for one day (86400 seconds)
-* VyOS will serve as a full DNS recursor, replacing the need to utilize Google, 
+* VyOS will serve as a full DNS recursor, replacing the need to utilize Google,
   Cloudflare, or other public DNS servers (which is good for privacy)
 * Only hosts from your internal/LAN network can use the DNS recursor
 
@@ -214,5 +216,5 @@ As above, commit your changes, save the configuration, and exit configuration mo
   Done
   vyos@vyos# exit
   vyos@vyos$
- 
+
 You now should have a simple yet secure and functioning router to experiment with further. Enjoy!
diff --git a/docs/services/dhcp.rst b/docs/services/dhcp.rst
index 39ec3ed3..6cb0bc83 100644
--- a/docs/services/dhcp.rst
+++ b/docs/services/dhcp.rst
@@ -1,15 +1,16 @@
 .. _dhcp:
 
-#############
-DHCP / DHCPv6
-#############
-
-VyOS uses ISC DHCPd for both IPv4 and IPv6 address assignment.
-
 .. _dhcp-server:
 
+###########
 DHCP Server
-===========
+###########
+
+VyOS uses ISC DHCP server for both IPv4 and IPv6 address assignment.
+
+***********
+IPv4 server
+***********
 
 The network topology is declared by shared-network-name and the subnet
 declarations. The DHCP service can serve multiple shared networks, with each
@@ -20,7 +21,7 @@ mappings can be set to assign "static" addresses to clients based on their MAC
 address.
 
 Configuration
--------------
+=============
 
 .. cfgcmd:: set service dhcp-server shared-network-name <name> authoritative
 
@@ -77,9 +78,8 @@ Configuration
    request where no full FQDN is passed. This option can be given multiple times
    if you need multiple search domains (DHCP Option 119).
 
-
 Failover
-^^^^^^^^
+--------
 
 VyOS provides support for DHCP failover. DHCP failover must be configured
 explicitly by the following statements.
@@ -115,9 +115,8 @@ explicitly by the following statements.
       that the failover partnership is immune to disruption (accidental or
       otherwise) via third parties.
 
-
 Static mappings
-^^^^^^^^^^^^^^^
+---------------
 
 You can specify a static DHCP assignment on a per host basis. You will need the
 MAC address of the station and your desired IP address. The address must be
@@ -140,9 +139,8 @@ inside the subnet definition but can be outside of the range statement.
 
    .. hint:: This is the equivalent of the host block in dhcpd.conf of isc-dhcpd.
 
-
 Options
-^^^^^^^
+=======
 
 .. list-table::
    :header-rows: 1
@@ -272,9 +270,8 @@ Options
 
 Multi: can be specified multiple times.
 
-
 Raw Parameters
-^^^^^^^^^^^^^^
+==============
 
 Raw parameters can be passed to shared-network-name, subnet and static-mapping:
 
@@ -299,44 +296,15 @@ Quotes can be used inside parameter values by replacing all quote characters
 with the string ``&quot;``. They will be replaced with literal quote characters
 when generating dhcpd.conf.
 
-
 Example
-^^^^^^^
-
-Quick-Start
-"""""""""""
-
-* We are offering address space in the `192.0.2.0/24` network.
-* We are using the network name `mypool`.
-
-.. code-block:: none
-
-  set service dhcp-server shared-network-name mypool authoritative
-  set service dhcp-server shared-network-name mypool subnet 192.0.2.0/24 default-router 192.0.2.1
-  set service dhcp-server shared-network-name mypool subnet 192.0.2.0/24 dns-server 192.0.2.1
-  set service dhcp-server shared-network-name mypool subnet 192.0.2.0/24 lease 86400
-  set service dhcp-server shared-network-name mypool subnet 192.0.2.0/24 range 0 start 192.0.2.100
-  set service dhcp-server shared-network-name mypool subnet 192.0.2.0/24 range 0 stop 192.0.2.199
-
-The generated config will look like:
-
-.. code-block:: none
-
-  vyos@vyos# show service dhcp-server shared-network-name mypool
-  authoritative
-  subnet 192.0.2.0/24 {
-      default-router 192.0.2.1
-      dns-server 192.0.2.1
-      lease 86400
-      range 0 {
-          start 192.0.2.100
-          stop 192.0.2.199
-      }
-  }
+=======
 
+Please see the :ref:`dhcp-dns-quick-start` configuration.
 
 Failover
-""""""""
+--------
+
+Configuration of a DHCP failover pair
 
 * Setup DHCP failover for network 192.0.2.0/24
 * Default gateway and DNS server is at `192.0.2.254`
@@ -344,37 +312,38 @@ Failover
 * The secondary DHCP server uses address `192.168.189.253`
 * DHCP range spans from `192.168.189.10` - `192.168.189.250`
 
-**Primary**
+Common configuration, valid for both primary and secondary node.
 
 .. code-block:: none
 
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 default-router '192.0.2.254'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 dns-server '192.0.2.254'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 domain-name 'vyos.net'
+  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 start '192.0.2.10'
+  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 stop '192.0.2.250'
+
+
+**Primary**
+
+.. code-block:: none
+
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover local-address '192.168.189.252'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover name 'NET-VYOS'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover peer-address '192.168.189.253'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover status 'primary'
-  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 start '192.0.2.10'
-  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 stop '192.0.2.250'
 
 **Secondary**
 
 .. code-block:: none
 
-  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 default-router '192.0.2.254'
-  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 dns-server '192.0.2.254'
-  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 domain-name 'vyos.net'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover local-address '192.168.189.253'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover name 'NET-VYOS'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover peer-address '192.168.189.252'
   set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 failover status 'primary'
-  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 start '192.0.2.10'
-  set service dhcp-server shared-network-name NET-VYOS subnet 192.0.2.0/24 range 0 stop '192.0.2.250'
 
 
 Raw Parameters
-""""""""""""""
+--------------
 
 * Override static-mapping's dns-server with a custom one that will be sent only
   to this host.
@@ -390,9 +359,8 @@ Raw Parameters
   set service dhcp-server shared-network-name dhcpexample subnet 192.0.2.0/24 static-mapping example static-mapping-parameters "option pxelinux.configfile &quot;pxelinux.cfg/01-00-15-17-44-2d-aa&quot;;"
 
 
-
 Operation Mode
---------------
+==============
 
 .. opcmd:: restart dhcp server
 
@@ -442,14 +410,15 @@ Operation Mode
    Show only leases with the specified state. Possible states: all, active,
    free, expired, released, abandoned, reset, backup (default = active)
 
-DHCPv6 Server
-=============
+***********
+IPv6 server
+***********
 
 VyOS also provides DHCPv6 server functionality which is described in this
 section.
 
-Configuration Options
----------------------
+Configuration
+=============
 
 .. cfgcmd:: set service dhcpv6-server preference <preference value>
 
@@ -490,7 +459,7 @@ Configuration Options
    A SNTP server address can be specified for DHCPv6 clients.
 
 Prefix Delegation
-^^^^^^^^^^^^^^^^^
+-----------------
 
 To hand out individual prefixes to your clients the following configuration is
 used:
@@ -541,7 +510,7 @@ The configuration will look as follows:
       }
 
 Static mappings
-^^^^^^^^^^^^^^^
+---------------
 
 In order to map specific IPv6 addresses to specific hosts static mappings can
 be created. The following example explains the process.
@@ -583,7 +552,7 @@ The configuration will look as follows:
       }
 
 Operation Mode
---------------
+==============
 
 .. opcmd:: restart dhcpv6 server
 
@@ -622,8 +591,9 @@ Operation Mode
    Show only leases with the specified state. Possible states: abandoned,
    active, all, backup, expired, free, released, reset (default = active)
 
+##########
 DHCP Relay
-==========
+##########
 
 If you want your router to forward DHCP requests to an external DHCP server
 you can configure the system to act as a DHCP relay agent. The DHCP relay
@@ -631,8 +601,12 @@ agent works with IPv4 and IPv6 addresses.
 
 All interfaces used for the DHCP relay must be configured.
 
+**********
+IPv4 relay
+**********
+
 Configuration
--------------
+=============
 
 .. cfgcmd:: set service dhcp-relay interface <interface>
 
@@ -648,30 +622,6 @@ Configuration
    The router should discard DHCP packages already containing relay agent
    information to ensure that only requests from DHCP clients are forwarded.
 
-Example
--------
-
-* Listen for DHCP requests on interface ``eth1``.
-* DHCP server is located at IPv4 address 10.0.1.4.
-* Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4.
-
-.. figure:: /_static/images/service_dhcp-relay01.png
-   :scale: 80 %
-   :alt: DHCP relay example
-
-   DHCP relay example
-
-The generated configuration will look like:
-
-.. code-block:: none
-
-  show service dhcp-relay
-      interface eth1
-      server 10.0.1.4
-      relay-options {
-         relay-agents-packets discard
-      }
-
 Options
 -------
 
@@ -703,18 +653,43 @@ Options
    * **replace:** Relay information already present in a packet is stripped and
      replaced with the router's own relay information set.
 
+Example
+=======
+
+* Listen for DHCP requests on interface ``eth1``.
+* DHCP server is located at IPv4 address 10.0.1.4.
+* Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4.
+
+.. figure:: /_static/images/service_dhcp-relay01.png
+   :scale: 80 %
+   :alt: DHCP relay example
+
+   DHCP relay example
+
+The generated configuration will look like:
+
+.. code-block:: none
+
+  show service dhcp-relay
+      interface eth1
+      server 10.0.1.4
+      relay-options {
+         relay-agents-packets discard
+      }
+
 Operation
----------
+=========
 
 .. opcmd:: restart dhcp relay-agent
 
    Restart DHCP relay service
 
-DHCPv6 relay
-============
+**********
+IPv6 relay
+**********
 
 Configuration
--------------
+=============
 
 .. cfgcmd:: set service dhcpv6-relay listen-interface <interface>
 
@@ -727,8 +702,20 @@ Configuration
    Specifies an upstream network `<interface>` from which replies from `<server>`
    and other relay agents will be accepted.
 
+Options
+-------
+
+.. cfgcmd:: set service dhcpv6-relay max-hop-count 'count'
+
+   Set maximum hop count before packets are discarded, default: 10
+
+.. cfgcmd:: set service dhcpv6-relay use-interface-id-option
+
+   If this is set the relay agent will insert the interface ID. This option is
+   set automatically if more than one listening interfaces are in use.
+
 Example
-^^^^^^^
+=======
 
 * DHCPv6 requests are received by the router on `listening interface` ``eth1``
 * Requests are forwarded through ``eth2`` as the `upstream interface`
@@ -752,24 +739,8 @@ The generated configuration will look like:
          address 2001:db8::4
       }
 
-Options
--------
-
-.. cfgcmd:: set service dhcpv6-relay max-hop-count 'count'
-
-   Set maximum hop count before packets are discarded, default: 10
-
-.. cfgcmd:: set service dhcpv6-relay use-interface-id-option
-
-   If this is set the relay agent will insert the interface ID. This option is
-   set automatically if more than one listening interfaces are in use.
-
 Operation
----------
-
-.. opcmd:: show dhcpv6 relay-agent status
-
-   Show the current status of the DHCPv6 relay agent:
+=========
 
 .. opcmd:: restart dhcpv6 relay-agent
 

From 54b4501f79a199993c440a9dcb1ebc7ad8d7036b Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 6 Dec 2020 17:35:00 +0100
Subject: [PATCH 141/295] debugging: add info about vyos-configd

---
 docs/contributing/debugging.rst | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/docs/contributing/debugging.rst b/docs/contributing/debugging.rst
index ac2e0510..40633535 100644
--- a/docs/contributing/debugging.rst
+++ b/docs/contributing/debugging.rst
@@ -51,7 +51,7 @@ interface debugging.
 It is also possible to set up the debugging using environment variables.
 In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG.
 
-For example running, ``export VYOS_IFCONFIG_DEBUG=""`` on your vash,
+For example running, ``export VYOS_IFCONFIG_DEBUG=""`` on your vbash,
 will have the same effect as ``touch /tmp/vyos.ifconfig.debug``.
 
 * ``ifconfig`` - Once set, all commands used, and their responses received
@@ -71,6 +71,11 @@ will have the same effect as ``touch /tmp/vyos.ifconfig.debug``.
   including during boot. This option sends all commands used by VyOS to a
   file. The default file is ``/tmp/full-log`` but it can be changed.
 
+.. note:: In order to retrieve the debug output on the command-line you need to
+  disable ``vyos-configd`` in addition. This can be run either one-time by calling
+  ``sudo systemctl stop vyos-configd`` or make this reboot-safe by calling
+  ``sudo systemctl disable vyos-configd``.
+
 Config Migration Scripts
 ------------------------
 

From ce090a4ced7fccce3fdc70142e22fa0009fae12b Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Sun, 6 Dec 2020 21:41:10 +0100
Subject: [PATCH 142/295] arrange examples

---
 .../common-references.txt}                    |   0
 docs/_include/interface-vlan-8021ad.txt       |   2 +-
 docs/_include/interface-vlan-8021q.txt        |   2 +-
 docs/cli.rst                                  | 733 ++++++++++++++++++
 docs/command-list-configuration.rst           |   7 -
 docs/command-list-operation.rst               |   7 -
 .../azure-vpn-bgp.rst                         |   0
 .../azure-vpn-dual-bgp.rst                    |   0
 .../bgp-ipv6-unnumbered.rst                   |   0
 .../dhcp-relay-through-gre-bridge.rst         |   0
 .../examples => configexamples}/ha.rst        |   0
 .../examples => configexamples}/index.rst     |   0
 .../ospf-unnumbered.rst                       |   0
 .../tunnelbroker-ipv6.rst                     |   0
 .../wan-load-balancing.rst                    |   0
 .../zone-policy.rst                           |   0
 docs/configuration-overview.rst               | 730 -----------------
 docs/configuration/interfaces/openvpn.rst     |   2 +-
 docs/configuration/nat/index.rst              |   2 +-
 docs/configuration/policy/index.rst           |   2 +-
 docs/configuration/service/ipoe-server.rst    |   2 +-
 docs/configuration/service/pppoe-server.rst   |   2 +-
 docs/configuration/system/lcd.rst             |   2 +-
 docs/{ => configuration}/vpn/dmvpn.rst        |   2 +-
 docs/configuration/vpn/index.rst              |  15 +
 docs/{ => configuration}/vpn/ipsec.rst        |   0
 docs/{ => configuration}/vpn/l2tp.rst         |   0
 docs/{ => configuration}/vpn/openconnect.rst  |   0
 docs/{ => configuration}/vpn/pptp.rst         |   0
 .../vpn/site2site_ipsec.rst                   |   2 +-
 docs/{ => configuration}/vpn/sstp.rst         |   2 +-
 docs/{vrf.rst => configuration/vrf/index.rst} |   2 +-
 docs/configuration/zonepolicy/index.rst       |   8 +
 docs/contributing/debugging.rst               |   2 +-
 docs/contributing/development.rst             |   2 +-
 docs/contributing/documentation.rst           |   2 +-
 docs/contributing/issues-features.rst         |   2 +-
 docs/coverage.rst                             |   2 -
 docs/index.rst                                |   3 +-
 docs/installation/{upate.rst => update.rst}   |   0
 docs/operation/index.rst                      |   3 +-
 docs/vpn/index.rst                            |  18 -
 42 files changed, 776 insertions(+), 782 deletions(-)
 rename docs/{common-references.rst => _include/common-references.txt} (100%)
 delete mode 100644 docs/command-list-configuration.rst
 delete mode 100644 docs/command-list-operation.rst
 rename docs/{appendix/examples => configexamples}/azure-vpn-bgp.rst (100%)
 rename docs/{appendix/examples => configexamples}/azure-vpn-dual-bgp.rst (100%)
 rename docs/{appendix/examples => configexamples}/bgp-ipv6-unnumbered.rst (100%)
 rename docs/{appendix/examples => configexamples}/dhcp-relay-through-gre-bridge.rst (100%)
 rename docs/{appendix/examples => configexamples}/ha.rst (100%)
 rename docs/{appendix/examples => configexamples}/index.rst (100%)
 rename docs/{appendix/examples => configexamples}/ospf-unnumbered.rst (100%)
 rename docs/{appendix/examples => configexamples}/tunnelbroker-ipv6.rst (100%)
 rename docs/{appendix/examples => configexamples}/wan-load-balancing.rst (100%)
 rename docs/{appendix/examples => configexamples}/zone-policy.rst (100%)
 delete mode 100644 docs/configuration-overview.rst
 rename docs/{ => configuration}/vpn/dmvpn.rst (99%)
 create mode 100644 docs/configuration/vpn/index.rst
 rename docs/{ => configuration}/vpn/ipsec.rst (100%)
 rename docs/{ => configuration}/vpn/l2tp.rst (100%)
 rename docs/{ => configuration}/vpn/openconnect.rst (100%)
 rename docs/{ => configuration}/vpn/pptp.rst (100%)
 rename docs/{ => configuration}/vpn/site2site_ipsec.rst (99%)
 rename docs/{ => configuration}/vpn/sstp.rst (99%)
 rename docs/{vrf.rst => configuration/vrf/index.rst} (99%)
 create mode 100644 docs/configuration/zonepolicy/index.rst
 rename docs/installation/{upate.rst => update.rst} (100%)
 delete mode 100644 docs/vpn/index.rst

diff --git a/docs/common-references.rst b/docs/_include/common-references.txt
similarity index 100%
rename from docs/common-references.rst
rename to docs/_include/common-references.txt
diff --git a/docs/_include/interface-vlan-8021ad.txt b/docs/_include/interface-vlan-8021ad.txt
index 12925ad4..74bc2080 100644
--- a/docs/_include/interface-vlan-8021ad.txt
+++ b/docs/_include/interface-vlan-8021ad.txt
@@ -140,4 +140,4 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. include:: /common-references.rst
+.. include:: /_include/common-references.txt
diff --git a/docs/_include/interface-vlan-8021q.txt b/docs/_include/interface-vlan-8021q.txt
index 37f652f3..db22a1ce 100644
--- a/docs/_include/interface-vlan-8021q.txt
+++ b/docs/_include/interface-vlan-8021q.txt
@@ -108,4 +108,4 @@ term used for this is ``vif``.
    :var3: <vlan-id>
    :var4: 10
 
-.. include:: /common-references.rst
\ No newline at end of file
+.. include:: /_include/common-references.txt
\ No newline at end of file
diff --git a/docs/cli.rst b/docs/cli.rst
index b138b18b..34ab3df6 100644
--- a/docs/cli.rst
+++ b/docs/cli.rst
@@ -97,3 +97,736 @@ To enter configuration mode use the ``configure`` command:
 
 See the configuration section of this document for more information on
 configuration mode.
+
+
+.. _configuration-overview:
+
+######################
+Configuration Overview
+######################
+
+VyOS makes use of a unified configuration file for the entire system's
+configuration: ``/config/config.boot``. This allows easy template
+creation, backup, and replication of system configuration. A system can
+thus also be easily cloned by simply copying the required configuration
+files.
+
+Terminology
+===========
+live
+A VyOS system has three major types of configurations:
+
+* **Active** or **running configuration** is the system configuration
+  that is loaded  and currently active (used by VyOS). Any change in
+  the configuration will have to be committed to belong to the
+  active/running configuration.
+
+* **Working configuration** is the one that is currently being modified
+  in configuration mode. Changes made to the working configuration do
+  not go into effect until the changes are committed with the
+  :cfgcmd:`commit` command. At which time the working configuration will
+  become the active or running configuration.
+
+* **Saved configuration** is the one saved to a file using the
+  :cfgcmd:`save` command. It allows you to keep safe a configuration for
+  future uses. There can be multiple configuration files. The default or
+  "boot" configuration is saved and loaded from the file
+  ``/config/config.boot``.
+
+Seeing and navigating the configuration
+=======================================
+
+.. opcmd:: show configuration
+
+   View the current active configuration, also known as the running
+   configuration, from the operational mode.
+
+   .. code-block:: none
+
+     vyos@vyos:~$ show configuration
+     interfaces {
+         ethernet eth0 {
+             address dhcp
+             hw-id 00:53:00:00:aa:01
+         }
+         loopback lo {
+         }
+     }
+     service {
+         ssh {
+             port 22
+         }
+     }
+     system {
+         config-management {
+             commit-revisions 20
+         }
+         console {
+             device ttyS0 {
+                 speed 9600
+             }
+         }
+         login {
+             user vyos {
+                 authentication {
+                     encrypted-password ****************
+                 }
+                 level admin
+             }
+         }
+         ntp {
+             server 0.pool.ntp.org {
+             }
+             server 1.pool.ntp.org {
+             }
+             server 2.pool.ntp.org {
+             }
+         }
+         syslog {
+             global {
+                 facility all {
+                     level notice
+                 }
+                 facility protocols {
+                     level debug
+                 }
+             }
+         }
+     }
+
+By default, the configuration is displayed in a hierarchy like the above
+example, this is only one of the possible ways to display the
+configuration. When the configuration is generated and the device is
+configured, changes are added through a collection of :cfgcmd:`set` and
+:cfgcmd:`delete` commands.
+
+.. opcmd:: show configuration commands
+
+   Get a collection of all the set commands required which led to the
+   running configuration.
+
+   .. code-block:: none
+
+     vyos@vyos:~$ show configuration commands
+     set interfaces ethernet eth0 address 'dhcp'
+     set interfaces ethernet eth0 hw-id '00:53:dd:44:3b:0f'
+     set interfaces loopback 'lo'
+     set service ssh port '22'
+     set system config-management commit-revisions '20'
+     set system console device ttyS0 speed '9600'
+     set system login user vyos authentication encrypted-password '$6$Vt68...QzF0'
+     set system login user vyos level 'admin'
+     set system ntp server '0.pool.ntp.org'
+     set system ntp server '1.pool.ntp.org'
+     set system ntp server '2.pool.ntp.org'
+     set system syslog global facility all level 'notice'
+     set system syslog global facility protocols level 'debug'
+
+Both these ``show`` commands should be executed when in operational
+mode, they do not work directly in configuration mode. There is a
+special way on how to :ref:`run_opmode_from_config_mode`.
+
+.. hint:: Use the ``show configuration commands | strip-private``
+   command when you want to hide private data. You may want to do so if
+   you want to share your configuration on the `forum`_.
+
+.. _`forum`: https://forum.vyos.io
+
+
+The config mode
+---------------
+
+When entering the configuration mode you are navigating inside a tree
+structure, to enter configuration mode enter the command
+:opcmd:`configure` when in operational mode.
+
+.. code-block:: none
+
+  vyos@vyos$ configure
+  [edit]
+  vyos@vyos#
+
+
+.. note:: When going into configuration mode, prompt changes from
+   ``$`` to ``#``.
+
+
+All commands executed here are relative to the configuration level you
+have entered. You can do everything from the top level, but commands
+will be quite lengthy when manually typing them.
+
+The current hierarchy level can be changed by the :cfgcmd:`edit`
+command.
+
+.. code-block:: none
+
+  [edit]
+  vyos@vyos# edit interfaces ethernet eth0
+
+  [edit interfaces ethernet eth0]
+  vyos@vyos#
+
+You are now in a sublevel relative to ``interfaces ethernet eth0``, all
+commands executed from this point on are relative to this sublevel. Use
+eithe the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top
+of the hierarchy. You can also use the :cfgcmd:`up` command to move only
+one level up at a time.
+
+.. cfgcmd:: show
+
+The :cfgcmd:`show` command within configuration mode will show the
+working configuration indicating line changes with ``+`` for additions,
+``>`` for replacements and ``-`` for deletions.
+
+**Example:**
+
+.. code-block:: none
+
+ vyos@vyos:~$ configure
+ [edit]
+ vyos@vyos# show interfaces
+  ethernet eth0 {
+      description MY_OLD_DESCRIPTION
+      disable
+      hw-id 00:53:dd:44:3b:03
+  }
+  loopback lo {
+  }
+ [edit]
+ vyos@vyos# set interfaces ethernet eth0 address dhcp
+ [edit]
+ vyos@vyos# set interfaces ethernet eth0 description MY_NEW_DESCRIPTION
+ [edit]
+ vyos@vyos# delete interfaces ethernet eth0 disable
+ [edit]
+ vyos@vyos# show interfaces
+  ethernet eth0 {
+ +    address dhcp
+ >    description MY_NEW_DESCRIPTION
+ -    disable
+      hw-id 00:53:dd:44:3b:03
+  }
+  loopback lo {
+  }
+
+It is also possible to display all `set` commands within configuration
+mode using :cfgcmd:`show | commands`
+
+.. code-block:: none
+
+  vyos@vyos# show interfaces ethernet eth0 | commands
+  set address dhcp
+  set hw-id 00:53:ad:44:3b:03
+
+These commands are also relative to the level you are inside and only 
+relevant configuration blocks will be displayed when entering a
+sub-level.
+
+.. code-block:: none
+
+  [edit interfaces ethernet eth0]
+  vyos@vyos# show
+   address dhcp
+   hw-id 00:53:ad:44:3b:03
+
+Exiting from the configuration mode is done via the :cfgcmd:`exit`
+command from the top level, executing :cfgcmd:`exit` from within a
+sub-level takes you back to the top level.
+
+.. code-block:: none
+
+  [edit interfaces ethernet eth0]
+  vyos@vyos# exit
+  [edit]
+  vyos@vyos# exit
+  Warning: configuration changes have not been saved.
+
+
+Editing the configuration
+=========================
+
+The configuration can be edited by the use of :cfgcmd:`set` and
+:cfgcmd:`delete` commands from within configuration mode.
+
+.. cfgcmd:: set
+
+   Use this command to set the value of a parameter or to create a new
+   element.
+
+Configuration commands are flattened from the tree into 'one-liner'
+commands shown in :opcmd:`show configuration commands` from operation
+mode. Commands are relative to the level where they are executed and all
+redundant information from the current level is removed from the command
+entered.
+
+.. code-block:: none
+
+  [edit]
+  vyos@vyos# set interface ethernet eth0 address 192.0.2.100/24
+
+
+.. code-block:: none
+
+  [edit interfaces ethernet eth0]
+  vyos@vyos# set address 203.0.113.6/24
+
+
+These two commands above are essentially the same, just executed from
+different levels in the hierarchy.
+
+.. cfgcmd:: delete
+
+   To delete a configuration entry use the :cfgcmd:`delete` command,
+   this also deletes all sub-levels under the current level you've
+   specified in the :cfgcmd:`delete` command. Deleting an entry will
+   also result in the element reverting back to its default value if one
+   exists.
+
+   .. code-block:: none
+
+     [edit interfaces ethernet eth0]
+     vyos@vyos# delete address 192.0.2.100/24
+
+.. cfgcmd:: commit
+
+  Any change you do on the configuration, will not take effect until
+  committed using the :cfgcmd:`commit` command in configuration mode.
+
+  .. code-block:: none
+
+    vyos@vyos# commit
+    [edit]
+    vyos@vyos# exit
+    Warning: configuration changes have not been saved.
+    vyos@vyos:~$
+
+.. _save:
+
+.. cfgcmd:: save
+
+   Use this command to preserve configuration changes upon reboot. By
+   default it is stored at */config/config.boot*. In the case you want
+   to store the configuration file somewhere else, you can add a local
+   path, an SCP address, an FTP address or a TFTP address. 
+
+   .. code-block:: none
+
+     vyos@vyos# save
+     Saving configuration to '/config/config.boot'...
+     Done
+
+   .. code-block:: none
+
+     vyos@vyos# save [tab]
+     Possible completions:
+       <Enter>       Save to system config file
+       <file>        Save to file on local machine
+       scp://<user>:<passwd>@<host>:/<file> Save to file on remote machine
+       ftp://<user>:<passwd>@<host>/<file> Save to file on remote machine
+       tftp://<host>/<file>      Save to file on remote machine
+     vyos@vyos# save tftp://192.168.0.100/vyos-test.config.boot
+     Saving configuration to 'tftp://192.168.0.100/vyos-test.config.boot'...
+     ######################################################################## 100.0%
+     Done
+
+.. cfgcmd:: exit [discard]
+
+   Configuration mode can not be exited while uncommitted changes exist.
+   To exit configuration mode without applying changes, the
+   :cfgcmd:`exit discard` command must be used.
+
+   All changes in the working config will thus be lost.
+
+   .. code-block:: none
+
+     vyos@vyos# exit
+     Cannot exit: configuration modified.
+     Use 'exit discard' to discard the changes and exit.
+     [edit]
+     vyos@vyos# exit discard
+
+
+.. cfgcmd:: commit-confirm <minutes>
+
+   Use this command to temporarily commit your changes and set the
+   number of minutes available for validation. ``confirm`` must
+   be entered within those minutes, otherwise the system will reboot
+   into the previous configuration. The default value is 10 minutes.
+
+
+   What if you are doing something dangerous? Suppose you want to setup
+   a firewall, and you are not sure there are no mistakes that will lock
+   you out of your system. You can use confirmed commit. If you issue
+   the ``commit-confirm`` command, your changes will be commited, and if
+   you don't issue issue the ``confirm`` command in 10 minutes, your
+   system will reboot into previous config revision.
+
+   .. code-block:: none
+   
+      vyos@router# set interfaces ethernet eth0 firewall local name FromWorld
+      vyos@router# commit-confirm 
+      commit confirm will be automatically reboot in 10 minutes unless confirmed
+      Proceed? [confirm]y
+      [edit]
+      vyos@router# confirm 
+      [edit]
+
+
+   .. note:: A reboot because you did not enter ``confirm`` will not
+      take you necessarily to the *saved configuration*, but to the
+      point before the unfortunate commit.
+
+
+.. cfgcmd:: copy
+
+   Copy a configuration element.
+
+   You can copy and remove configuration subtrees. Suppose you set up a
+   firewall ruleset ``FromWorld`` with one rule that allows traffic from
+   specific subnet. Now you want to setup a similar rule, but for
+   different subnet. Change your edit level to
+   ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then
+   modify rule 20.
+
+
+   .. code-block:: none
+   
+      vyos@router# show firewall name FromWorld 
+       default-action drop
+       rule 10 {
+           action accept
+           source {
+               address 203.0.113.0/24
+           }
+       }
+      [edit]
+      vyos@router# edit firewall name FromWorld 
+      [edit firewall name FromWorld]
+      vyos@router# copy rule 10 to rule 20
+      [edit firewall name FromWorld]
+      vyos@router# set rule 20 source address 198.51.100.0/24
+      [edit firewall name FromWorld]
+      vyos@router# commit
+      [edit firewall name FromWorld]
+
+
+.. cfgcmd:: rename
+
+   Rename a configuration element.
+
+   You can also rename config subtrees:
+
+   .. code-block:: none
+   
+      vyos@router# rename rule 10 to rule 5
+      [edit firewall name FromWorld]
+      vyos@router# commit
+      [edit firewall name FromWorld]
+
+   Note that ``show`` command respects your edit level and from this
+   level you can view the modified firewall ruleset with just ``show``
+   with no parameters.
+
+   .. code-block:: none
+   
+      vyos@router# show 
+       default-action drop
+       rule 5 {
+           action accept
+           source {
+               address 203.0.113.0/24
+           }
+       }
+       rule 20 {
+           action accept
+           source {
+               address 198.51.100.0/24
+           }
+       }
+
+
+.. cfgcmd:: comment <config node> "comment text"
+
+   Add comment as an annotation to a configuration node.
+
+   The ``comment`` command allows you to insert a comment above the
+   ``<config node>`` configuration section. When shown, comments are
+   enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments
+   need to be commited, just like other config changes.
+
+   To remove an existing comment from your current configuration,
+   specify an empty string enclosed in double quote marks (``""``) as
+   the comment text.
+
+   Example:
+
+   .. code-block:: none
+
+     vyos@vyos# comment firewall all-ping "Yes I know this VyOS is cool"
+     vyos@vyos# commit
+     vyos@vyos# show
+      firewall {
+          /* Yes I know this VyOS is cool */
+          all-ping enable
+          broadcast-ping disable
+          ...
+      }
+
+   .. note:: An important thing to note is that since the comment is
+      added on top of the section, it will not appear if the ``show
+      <section>`` command is used. With the above example, the `show
+      firewall` command would return starting after the ``firewall
+      {`` line, hiding the comment.
+
+
+
+
+   
+
+.. _run_opmode_from_config_mode:
+
+Access opmode from config mode
+==============================
+
+When inside configuration mode you are not directly able to execute
+operational commands.
+
+.. cfgcmd:: run
+
+  Access to these commands are possible through the use of the
+  ``run [command]`` command. From this command you will have access to
+  everything accessible from operational mode.
+
+  Command completion and syntax help with ``?`` and ``[tab]`` will also
+  work.
+
+  .. code-block:: none
+
+    [edit]
+    vyos@vyos# run show interfaces
+    Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
+    Interface        IP Address                        S/L  Description
+    ---------        ----------                        ---  -----------
+    eth0             0.0.0.0/0                         u/u
+
+Managing configurations
+=======================
+
+VyOS comes with an integrated versioning system for the system
+configuration. It automatically maintains a backup of every previous
+configuration which has been committed to the system. The configurations
+are versioned locally for rollback but they can also be stored on a
+remote host for archiving/backup reasons.
+
+Local Archive
+-------------
+
+Revisions are stored on disk. You can view, compare and rollback them to
+any previous revisions if something goes wrong.
+
+.. opcmd:: show system commit
+
+   View all existing revisions on the local system.
+
+   .. code-block:: none
+
+     vyos@vyos:~$ show system commit
+     0   2015-03-30 08:53:03 by vyos via cli
+     1   2015-03-30 08:52:20 by vyos via cli
+     2   2015-03-26 21:26:01 by root via boot-config-loader
+     3   2015-03-26 20:43:18 by root via boot-config-loader
+     4   2015-03-25 11:06:14 by root via boot-config-loader
+     5   2015-03-25 01:04:28 by root via boot-config-loader
+     6   2015-03-25 00:16:47 by vyos via cli
+     7   2015-03-24 23:43:45 by root via boot-config-loader
+
+
+.. cfgcmd:: set system config-management commit-revisions <N>
+
+   You can specify the number of revisions stored on disk. N can be in
+   the range of 0 - 65535. When the number of revisions exceeds the
+   configured value, the oldest revision is removed. The default setting
+   for this value is to store 100 revisions locally.
+
+
+Compare configurations
+----------------------
+
+VyOS lets you compare different configurations.
+
+.. cfgcmd:: compare <saved | N> <M>
+
+   Use this command to spot what the differences are between different
+   configurations.
+
+   .. code-block:: none
+
+     vyos@vyos# compare [tab]
+     Possible completions:
+       <Enter>	Compare working & active configurations
+       saved		Compare working & saved configurations
+       <N>		Compare working with revision N
+       <N> <M>	Compare revision N with M
+       Revisions:
+         0	   2013-12-17 20:01:37 root by boot-config-loader
+         1	   2013-12-13 15:59:31 root by boot-config-loader
+         2	   2013-12-12 21:56:22 vyos by cli
+         3	   2013-12-12 21:55:11 vyos by cli
+         4	   2013-12-12 21:27:54 vyos by cli
+         5	   2013-12-12 21:23:29 vyos by cli
+         6	   2013-12-12 21:13:59 root by boot-config-loader
+         7	   2013-12-12 16:25:19 vyos by cli
+         8	   2013-12-12 15:44:36 vyos by cli
+         9	   2013-12-12 15:42:07 root by boot-config-loader
+         10   2013-12-12 15:42:06 root by init
+
+   The command :cfgcmd:`compare` allows you to compare different type of
+   configurations. It also lets you compare different revisions through
+   the :cfgcmd:`compare N M` command, where N and M are revision
+   numbers. The output will describe how the configuration N is when
+   compared to M indicating with a plus sign (``+``) the additional
+   parts N has when compared to M, and indicating with a minus sign
+   (``-``) the lacking parts N misses when compared to M.
+
+   .. code-block:: none
+
+     vyos@vyos# compare 0 6
+     [edit interfaces]
+     +dummy dum1 {
+     +    address 10.189.0.1/31
+     +}
+     [edit interfaces ethernet eth0]
+     +vif 99 {
+     +    address 10.199.0.1/31
+     +}
+     -vif 900 {
+     -    address 192.0.2.4/24
+     -}
+
+
+.. opcmd:: show system commit diff <number>
+
+   Show commit revision difference.
+
+
+The command above also lets you see the difference between two commits.
+By default the difference with the running config is shown.
+
+.. code-block:: none
+
+   vyos@router# run show system commit diff 4
+   [edit system]
+   +ipv6 {
+   +    disable-forwarding
+   +}
+
+This means four commits ago we did ``set system ipv6 disable-forwarding``.
+
+
+Rollback Changes
+----------------
+
+You can rollback configuration changes using the rollback command. This
+will apply the selected revision and trigger a system reboot.
+
+.. cfgcmd:: rollback <N>
+
+   Rollback to revision N (currently requires reboot)
+
+   .. code-block:: none
+
+     vyos@vyos# compare 1
+     [edit system]
+     >host-name vyos-1
+     [edit]
+
+     vyos@vyos# rollback 1
+     Proceed with reboot? [confirm][y]
+     Broadcast message from root@vyos-1 (pts/0) (Tue Dec 17 21:07:45 2013):
+     The system is going down for reboot NOW!
+
+Remote Archive
+--------------
+
+VyOS can upload the configuration to a remote location after each call
+to :cfgcmd:`commit`. You will have to set the commit-archive location.
+TFTP, FTP, SCP and SFTP servers are supported. Every time a
+:cfgcmd:`commit` is successfull the ``config.boot`` file will be copied
+to the defined destination(s). The filename used on the remote host will
+be ``config.boot-hostname.YYYYMMDD_HHMMSS``. 
+
+.. cfgcmd:: set system config-management commit-archive location <URI>
+
+   Specify remote location of commit archive as any of the below
+   :abbr:`URI (Uniform Resource Identifier)`
+
+   * ``scp://<user>:<passwd>@<host>:/<dir>``
+   * ``sftp://<user>:<passwd>@<host>/<dir>``
+   * ``ftp://<user>:<passwd>@<host>/<dir>``
+   * ``tftp://<host>/<dir>``
+
+.. note:: The number of revisions don't affect the commit-archive.
+
+.. note:: You may find VyOS not allowing the secure connection because
+   it cannot verify the legitimacy of the remote server. You can use
+   the workaround below to quickly add the remote host's SSH
+   fingerprint to your ``~/.ssh/known_hosts`` file:
+
+   .. code-block:: none
+
+     vyos@vyos# ssh-keyscan <host> >> ~/.ssh/known_hosts
+
+Saving and loading manually
+---------------------------
+
+You can use the ``save`` and ``load`` commands if you want to manually
+manage specific configuration files.
+
+When using the save_ command, you can add a specific location where
+to store your configuration file. And, when needed it, you will be able
+to load it with the ``load`` command:
+
+.. cfgcmd:: load <URI>
+
+   Use this command to load a configuration which will replace the
+   running configuration. Define the location of the configuration file
+   to be loaded. You can use a path to a local file, an SCP address, an
+   SFTP address, an FTP address, an HTTP address, an HTTPS address or a
+   TFTP address.
+
+  .. code-block:: none
+
+     vyos@vyos# load 
+     Possible completions:
+       <Enter>				        Load from system config file
+       <file>			        	Load from file on local machine
+       scp://<user>:<passwd>@<host>:/<file>	Load from file on remote machine
+       sftp://<user>:<passwd>@<host>/<file>	Load from file on remote machine
+       ftp://<user>:<passwd>@<host>/<file>	Load from file on remote machine
+       http://<host>/<file>			Load from file on remote machine
+       https://<host>/<file>			Load from file on remote machine
+       tftp://<host>/<file>			Load from file on remote machine
+     
+
+
+Restore Default
+---------------
+
+In the case you want to completely delete your configuration and restore
+the default one, you can enter the following command in configuration
+mode:
+
+.. code-block:: none
+
+  load /opt/vyatta/etc/config.boot.default
+
+You will be asked if you want to continue. If you accept, you will have
+to use :cfgcmd:`commit` if you want to make the changes active.
+
+Then you may want to :cfgcmd:`save` in order to delete the saved
+configuration too.
+
+.. note:: If you are remotely connected, you will lose your connection.
+   You may want to copy first the config, edit it to ensure
+   connectivity, and load the edited config.
+
diff --git a/docs/command-list-configuration.rst b/docs/command-list-configuration.rst
deleted file mode 100644
index 7b981518..00000000
--- a/docs/command-list-configuration.rst
+++ /dev/null
@@ -1,7 +0,0 @@
-.. _configuration_level_commands:
-
-********************************
-Configuration Level Command List
-********************************
-
-.. cfgcmdlist::
diff --git a/docs/command-list-operation.rst b/docs/command-list-operation.rst
deleted file mode 100644
index bbb0298c..00000000
--- a/docs/command-list-operation.rst
+++ /dev/null
@@ -1,7 +0,0 @@
-.. _operational_level_commands:
-
-******************************
-Operational Level Command List
-******************************
-
-.. opcmdlist::
diff --git a/docs/appendix/examples/azure-vpn-bgp.rst b/docs/configexamples/azure-vpn-bgp.rst
similarity index 100%
rename from docs/appendix/examples/azure-vpn-bgp.rst
rename to docs/configexamples/azure-vpn-bgp.rst
diff --git a/docs/appendix/examples/azure-vpn-dual-bgp.rst b/docs/configexamples/azure-vpn-dual-bgp.rst
similarity index 100%
rename from docs/appendix/examples/azure-vpn-dual-bgp.rst
rename to docs/configexamples/azure-vpn-dual-bgp.rst
diff --git a/docs/appendix/examples/bgp-ipv6-unnumbered.rst b/docs/configexamples/bgp-ipv6-unnumbered.rst
similarity index 100%
rename from docs/appendix/examples/bgp-ipv6-unnumbered.rst
rename to docs/configexamples/bgp-ipv6-unnumbered.rst
diff --git a/docs/appendix/examples/dhcp-relay-through-gre-bridge.rst b/docs/configexamples/dhcp-relay-through-gre-bridge.rst
similarity index 100%
rename from docs/appendix/examples/dhcp-relay-through-gre-bridge.rst
rename to docs/configexamples/dhcp-relay-through-gre-bridge.rst
diff --git a/docs/appendix/examples/ha.rst b/docs/configexamples/ha.rst
similarity index 100%
rename from docs/appendix/examples/ha.rst
rename to docs/configexamples/ha.rst
diff --git a/docs/appendix/examples/index.rst b/docs/configexamples/index.rst
similarity index 100%
rename from docs/appendix/examples/index.rst
rename to docs/configexamples/index.rst
diff --git a/docs/appendix/examples/ospf-unnumbered.rst b/docs/configexamples/ospf-unnumbered.rst
similarity index 100%
rename from docs/appendix/examples/ospf-unnumbered.rst
rename to docs/configexamples/ospf-unnumbered.rst
diff --git a/docs/appendix/examples/tunnelbroker-ipv6.rst b/docs/configexamples/tunnelbroker-ipv6.rst
similarity index 100%
rename from docs/appendix/examples/tunnelbroker-ipv6.rst
rename to docs/configexamples/tunnelbroker-ipv6.rst
diff --git a/docs/appendix/examples/wan-load-balancing.rst b/docs/configexamples/wan-load-balancing.rst
similarity index 100%
rename from docs/appendix/examples/wan-load-balancing.rst
rename to docs/configexamples/wan-load-balancing.rst
diff --git a/docs/appendix/examples/zone-policy.rst b/docs/configexamples/zone-policy.rst
similarity index 100%
rename from docs/appendix/examples/zone-policy.rst
rename to docs/configexamples/zone-policy.rst
diff --git a/docs/configuration-overview.rst b/docs/configuration-overview.rst
deleted file mode 100644
index 5658cdbb..00000000
--- a/docs/configuration-overview.rst
+++ /dev/null
@@ -1,730 +0,0 @@
-.. _configuration-overview:
-
-######################
-Configuration Overview
-######################
-
-VyOS makes use of a unified configuration file for the entire system's
-configuration: ``/config/config.boot``. This allows easy template
-creation, backup, and replication of system configuration. A system can
-thus also be easily cloned by simply copying the required configuration
-files.
-
-Terminology
-===========
-live
-A VyOS system has three major types of configurations:
-
-* **Active** or **running configuration** is the system configuration
-  that is loaded  and currently active (used by VyOS). Any change in
-  the configuration will have to be committed to belong to the
-  active/running configuration.
-
-* **Working configuration** is the one that is currently being modified
-  in configuration mode. Changes made to the working configuration do
-  not go into effect until the changes are committed with the
-  :cfgcmd:`commit` command. At which time the working configuration will
-  become the active or running configuration.
-
-* **Saved configuration** is the one saved to a file using the
-  :cfgcmd:`save` command. It allows you to keep safe a configuration for
-  future uses. There can be multiple configuration files. The default or
-  "boot" configuration is saved and loaded from the file
-  ``/config/config.boot``.
-
-Seeing and navigating the configuration
-=======================================
-
-.. opcmd:: show configuration
-
-   View the current active configuration, also known as the running
-   configuration, from the operational mode.
-
-   .. code-block:: none
-
-     vyos@vyos:~$ show configuration
-     interfaces {
-         ethernet eth0 {
-             address dhcp
-             hw-id 00:53:00:00:aa:01
-         }
-         loopback lo {
-         }
-     }
-     service {
-         ssh {
-             port 22
-         }
-     }
-     system {
-         config-management {
-             commit-revisions 20
-         }
-         console {
-             device ttyS0 {
-                 speed 9600
-             }
-         }
-         login {
-             user vyos {
-                 authentication {
-                     encrypted-password ****************
-                 }
-                 level admin
-             }
-         }
-         ntp {
-             server 0.pool.ntp.org {
-             }
-             server 1.pool.ntp.org {
-             }
-             server 2.pool.ntp.org {
-             }
-         }
-         syslog {
-             global {
-                 facility all {
-                     level notice
-                 }
-                 facility protocols {
-                     level debug
-                 }
-             }
-         }
-     }
-
-By default, the configuration is displayed in a hierarchy like the above
-example, this is only one of the possible ways to display the
-configuration. When the configuration is generated and the device is
-configured, changes are added through a collection of :cfgcmd:`set` and
-:cfgcmd:`delete` commands.
-
-.. opcmd:: show configuration commands
-
-   Get a collection of all the set commands required which led to the
-   running configuration.
-
-   .. code-block:: none
-
-     vyos@vyos:~$ show configuration commands
-     set interfaces ethernet eth0 address 'dhcp'
-     set interfaces ethernet eth0 hw-id '00:53:dd:44:3b:0f'
-     set interfaces loopback 'lo'
-     set service ssh port '22'
-     set system config-management commit-revisions '20'
-     set system console device ttyS0 speed '9600'
-     set system login user vyos authentication encrypted-password '$6$Vt68...QzF0'
-     set system login user vyos level 'admin'
-     set system ntp server '0.pool.ntp.org'
-     set system ntp server '1.pool.ntp.org'
-     set system ntp server '2.pool.ntp.org'
-     set system syslog global facility all level 'notice'
-     set system syslog global facility protocols level 'debug'
-
-Both these ``show`` commands should be executed when in operational
-mode, they do not work directly in configuration mode. There is a
-special way on how to :ref:`run_opmode_from_config_mode`.
-
-.. hint:: Use the ``show configuration commands | strip-private``
-   command when you want to hide private data. You may want to do so if
-   you want to share your configuration on the `forum`_.
-
-.. _`forum`: https://forum.vyos.io
-
-
-The config mode
----------------
-
-When entering the configuration mode you are navigating inside a tree
-structure, to enter configuration mode enter the command
-:opcmd:`configure` when in operational mode.
-
-.. code-block:: none
-
-  vyos@vyos$ configure
-  [edit]
-  vyos@vyos#
-
-
-.. note:: When going into configuration mode, prompt changes from
-   ``$`` to ``#``.
-
-
-All commands executed here are relative to the configuration level you
-have entered. You can do everything from the top level, but commands
-will be quite lengthy when manually typing them.
-
-The current hierarchy level can be changed by the :cfgcmd:`edit`
-command.
-
-.. code-block:: none
-
-  [edit]
-  vyos@vyos# edit interfaces ethernet eth0
-
-  [edit interfaces ethernet eth0]
-  vyos@vyos#
-
-You are now in a sublevel relative to ``interfaces ethernet eth0``, all
-commands executed from this point on are relative to this sublevel. Use
-eithe the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top
-of the hierarchy. You can also use the :cfgcmd:`up` command to move only
-one level up at a time.
-
-.. cfgcmd:: show
-
-The :cfgcmd:`show` command within configuration mode will show the
-working configuration indicating line changes with ``+`` for additions,
-``>`` for replacements and ``-`` for deletions.
-
-**Example:**
-
-.. code-block:: none
-
- vyos@vyos:~$ configure
- [edit]
- vyos@vyos# show interfaces
-  ethernet eth0 {
-      description MY_OLD_DESCRIPTION
-      disable
-      hw-id 00:53:dd:44:3b:03
-  }
-  loopback lo {
-  }
- [edit]
- vyos@vyos# set interfaces ethernet eth0 address dhcp
- [edit]
- vyos@vyos# set interfaces ethernet eth0 description MY_NEW_DESCRIPTION
- [edit]
- vyos@vyos# delete interfaces ethernet eth0 disable
- [edit]
- vyos@vyos# show interfaces
-  ethernet eth0 {
- +    address dhcp
- >    description MY_NEW_DESCRIPTION
- -    disable
-      hw-id 00:53:dd:44:3b:03
-  }
-  loopback lo {
-  }
-
-It is also possible to display all `set` commands within configuration
-mode using :cfgcmd:`show | commands`
-
-.. code-block:: none
-
-  vyos@vyos# show interfaces ethernet eth0 | commands
-  set address dhcp
-  set hw-id 00:53:ad:44:3b:03
-
-These commands are also relative to the level you are inside and only 
-relevant configuration blocks will be displayed when entering a
-sub-level.
-
-.. code-block:: none
-
-  [edit interfaces ethernet eth0]
-  vyos@vyos# show
-   address dhcp
-   hw-id 00:53:ad:44:3b:03
-
-Exiting from the configuration mode is done via the :cfgcmd:`exit`
-command from the top level, executing :cfgcmd:`exit` from within a
-sub-level takes you back to the top level.
-
-.. code-block:: none
-
-  [edit interfaces ethernet eth0]
-  vyos@vyos# exit
-  [edit]
-  vyos@vyos# exit
-  Warning: configuration changes have not been saved.
-
-
-Editing the configuration
-=========================
-
-The configuration can be edited by the use of :cfgcmd:`set` and
-:cfgcmd:`delete` commands from within configuration mode.
-
-.. cfgcmd:: set
-
-   Use this command to set the value of a parameter or to create a new
-   element.
-
-Configuration commands are flattened from the tree into 'one-liner'
-commands shown in :opcmd:`show configuration commands` from operation
-mode. Commands are relative to the level where they are executed and all
-redundant information from the current level is removed from the command
-entered.
-
-.. code-block:: none
-
-  [edit]
-  vyos@vyos# set interface ethernet eth0 address 192.0.2.100/24
-
-
-.. code-block:: none
-
-  [edit interfaces ethernet eth0]
-  vyos@vyos# set address 203.0.113.6/24
-
-
-These two commands above are essentially the same, just executed from
-different levels in the hierarchy.
-
-.. cfgcmd:: delete
-
-   To delete a configuration entry use the :cfgcmd:`delete` command,
-   this also deletes all sub-levels under the current level you've
-   specified in the :cfgcmd:`delete` command. Deleting an entry will
-   also result in the element reverting back to its default value if one
-   exists.
-
-   .. code-block:: none
-
-     [edit interfaces ethernet eth0]
-     vyos@vyos# delete address 192.0.2.100/24
-
-.. cfgcmd:: commit
-
-  Any change you do on the configuration, will not take effect until
-  committed using the :cfgcmd:`commit` command in configuration mode.
-
-  .. code-block:: none
-
-    vyos@vyos# commit
-    [edit]
-    vyos@vyos# exit
-    Warning: configuration changes have not been saved.
-    vyos@vyos:~$
-
-.. _save:
-
-.. cfgcmd:: save
-
-   Use this command to preserve configuration changes upon reboot. By
-   default it is stored at */config/config.boot*. In the case you want
-   to store the configuration file somewhere else, you can add a local
-   path, an SCP address, an FTP address or a TFTP address. 
-
-   .. code-block:: none
-
-     vyos@vyos# save
-     Saving configuration to '/config/config.boot'...
-     Done
-
-   .. code-block:: none
-
-     vyos@vyos# save [tab]
-     Possible completions:
-       <Enter>       Save to system config file
-       <file>        Save to file on local machine
-       scp://<user>:<passwd>@<host>:/<file> Save to file on remote machine
-       ftp://<user>:<passwd>@<host>/<file> Save to file on remote machine
-       tftp://<host>/<file>      Save to file on remote machine
-     vyos@vyos# save tftp://192.168.0.100/vyos-test.config.boot
-     Saving configuration to 'tftp://192.168.0.100/vyos-test.config.boot'...
-     ######################################################################## 100.0%
-     Done
-
-.. cfgcmd:: exit [discard]
-
-   Configuration mode can not be exited while uncommitted changes exist.
-   To exit configuration mode without applying changes, the
-   :cfgcmd:`exit discard` command must be used.
-
-   All changes in the working config will thus be lost.
-
-   .. code-block:: none
-
-     vyos@vyos# exit
-     Cannot exit: configuration modified.
-     Use 'exit discard' to discard the changes and exit.
-     [edit]
-     vyos@vyos# exit discard
-
-
-.. cfgcmd:: commit-confirm <minutes>
-
-   Use this command to temporarily commit your changes and set the
-   number of minutes available for validation. ``confirm`` must
-   be entered within those minutes, otherwise the system will reboot
-   into the previous configuration. The default value is 10 minutes.
-
-
-   What if you are doing something dangerous? Suppose you want to setup
-   a firewall, and you are not sure there are no mistakes that will lock
-   you out of your system. You can use confirmed commit. If you issue
-   the ``commit-confirm`` command, your changes will be commited, and if
-   you don't issue issue the ``confirm`` command in 10 minutes, your
-   system will reboot into previous config revision.
-
-   .. code-block:: none
-   
-      vyos@router# set interfaces ethernet eth0 firewall local name FromWorld
-      vyos@router# commit-confirm 
-      commit confirm will be automatically reboot in 10 minutes unless confirmed
-      Proceed? [confirm]y
-      [edit]
-      vyos@router# confirm 
-      [edit]
-
-
-   .. note:: A reboot because you did not enter ``confirm`` will not
-      take you necessarily to the *saved configuration*, but to the
-      point before the unfortunate commit.
-
-
-.. cfgcmd:: copy
-
-   Copy a configuration element.
-
-   You can copy and remove configuration subtrees. Suppose you set up a
-   firewall ruleset ``FromWorld`` with one rule that allows traffic from
-   specific subnet. Now you want to setup a similar rule, but for
-   different subnet. Change your edit level to
-   ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then
-   modify rule 20.
-
-
-   .. code-block:: none
-   
-      vyos@router# show firewall name FromWorld 
-       default-action drop
-       rule 10 {
-           action accept
-           source {
-               address 203.0.113.0/24
-           }
-       }
-      [edit]
-      vyos@router# edit firewall name FromWorld 
-      [edit firewall name FromWorld]
-      vyos@router# copy rule 10 to rule 20
-      [edit firewall name FromWorld]
-      vyos@router# set rule 20 source address 198.51.100.0/24
-      [edit firewall name FromWorld]
-      vyos@router# commit
-      [edit firewall name FromWorld]
-
-
-.. cfgcmd:: rename
-
-   Rename a configuration element.
-
-   You can also rename config subtrees:
-
-   .. code-block:: none
-   
-      vyos@router# rename rule 10 to rule 5
-      [edit firewall name FromWorld]
-      vyos@router# commit
-      [edit firewall name FromWorld]
-
-   Note that ``show`` command respects your edit level and from this
-   level you can view the modified firewall ruleset with just ``show``
-   with no parameters.
-
-   .. code-block:: none
-   
-      vyos@router# show 
-       default-action drop
-       rule 5 {
-           action accept
-           source {
-               address 203.0.113.0/24
-           }
-       }
-       rule 20 {
-           action accept
-           source {
-               address 198.51.100.0/24
-           }
-       }
-
-
-.. cfgcmd:: comment <config node> "comment text"
-
-   Add comment as an annotation to a configuration node.
-
-   The ``comment`` command allows you to insert a comment above the
-   ``<config node>`` configuration section. When shown, comments are
-   enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments
-   need to be commited, just like other config changes.
-
-   To remove an existing comment from your current configuration,
-   specify an empty string enclosed in double quote marks (``""``) as
-   the comment text.
-
-   Example:
-
-   .. code-block:: none
-
-     vyos@vyos# comment firewall all-ping "Yes I know this VyOS is cool"
-     vyos@vyos# commit
-     vyos@vyos# show
-      firewall {
-          /* Yes I know this VyOS is cool */
-          all-ping enable
-          broadcast-ping disable
-          ...
-      }
-
-   .. note:: An important thing to note is that since the comment is
-      added on top of the section, it will not appear if the ``show
-      <section>`` command is used. With the above example, the `show
-      firewall` command would return starting after the ``firewall
-      {`` line, hiding the comment.
-
-
-
-
-   
-
-.. _run_opmode_from_config_mode:
-
-Access opmode from config mode
-==============================
-
-When inside configuration mode you are not directly able to execute
-operational commands.
-
-.. cfgcmd:: run
-
-  Access to these commands are possible through the use of the
-  ``run [command]`` command. From this command you will have access to
-  everything accessible from operational mode.
-
-  Command completion and syntax help with ``?`` and ``[tab]`` will also
-  work.
-
-  .. code-block:: none
-
-    [edit]
-    vyos@vyos# run show interfaces
-    Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
-    Interface        IP Address                        S/L  Description
-    ---------        ----------                        ---  -----------
-    eth0             0.0.0.0/0                         u/u
-
-Managing configurations
-=======================
-
-VyOS comes with an integrated versioning system for the system
-configuration. It automatically maintains a backup of every previous
-configuration which has been committed to the system. The configurations
-are versioned locally for rollback but they can also be stored on a
-remote host for archiving/backup reasons.
-
-Local Archive
--------------
-
-Revisions are stored on disk. You can view, compare and rollback them to
-any previous revisions if something goes wrong.
-
-.. opcmd:: show system commit
-
-   View all existing revisions on the local system.
-
-   .. code-block:: none
-
-     vyos@vyos:~$ show system commit
-     0   2015-03-30 08:53:03 by vyos via cli
-     1   2015-03-30 08:52:20 by vyos via cli
-     2   2015-03-26 21:26:01 by root via boot-config-loader
-     3   2015-03-26 20:43:18 by root via boot-config-loader
-     4   2015-03-25 11:06:14 by root via boot-config-loader
-     5   2015-03-25 01:04:28 by root via boot-config-loader
-     6   2015-03-25 00:16:47 by vyos via cli
-     7   2015-03-24 23:43:45 by root via boot-config-loader
-
-
-.. cfgcmd:: set system config-management commit-revisions <N>
-
-   You can specify the number of revisions stored on disk. N can be in
-   the range of 0 - 65535. When the number of revisions exceeds the
-   configured value, the oldest revision is removed. The default setting
-   for this value is to store 100 revisions locally.
-
-
-Compare configurations
-----------------------
-
-VyOS lets you compare different configurations.
-
-.. cfgcmd:: compare <saved | N> <M>
-
-   Use this command to spot what the differences are between different
-   configurations.
-
-   .. code-block:: none
-
-     vyos@vyos# compare [tab]
-     Possible completions:
-       <Enter>	Compare working & active configurations
-       saved		Compare working & saved configurations
-       <N>		Compare working with revision N
-       <N> <M>	Compare revision N with M
-       Revisions:
-         0	   2013-12-17 20:01:37 root by boot-config-loader
-         1	   2013-12-13 15:59:31 root by boot-config-loader
-         2	   2013-12-12 21:56:22 vyos by cli
-         3	   2013-12-12 21:55:11 vyos by cli
-         4	   2013-12-12 21:27:54 vyos by cli
-         5	   2013-12-12 21:23:29 vyos by cli
-         6	   2013-12-12 21:13:59 root by boot-config-loader
-         7	   2013-12-12 16:25:19 vyos by cli
-         8	   2013-12-12 15:44:36 vyos by cli
-         9	   2013-12-12 15:42:07 root by boot-config-loader
-         10   2013-12-12 15:42:06 root by init
-
-   The command :cfgcmd:`compare` allows you to compare different type of
-   configurations. It also lets you compare different revisions through
-   the :cfgcmd:`compare N M` command, where N and M are revision
-   numbers. The output will describe how the configuration N is when
-   compared to M indicating with a plus sign (``+``) the additional
-   parts N has when compared to M, and indicating with a minus sign
-   (``-``) the lacking parts N misses when compared to M.
-
-   .. code-block:: none
-
-     vyos@vyos# compare 0 6
-     [edit interfaces]
-     +dummy dum1 {
-     +    address 10.189.0.1/31
-     +}
-     [edit interfaces ethernet eth0]
-     +vif 99 {
-     +    address 10.199.0.1/31
-     +}
-     -vif 900 {
-     -    address 192.0.2.4/24
-     -}
-
-
-.. opcmd:: show system commit diff <number>
-
-   Show commit revision difference.
-
-
-The command above also lets you see the difference between two commits.
-By default the difference with the running config is shown.
-
-.. code-block:: none
-
-   vyos@router# run show system commit diff 4
-   [edit system]
-   +ipv6 {
-   +    disable-forwarding
-   +}
-
-This means four commits ago we did ``set system ipv6 disable-forwarding``.
-
-
-Rollback Changes
-----------------
-
-You can rollback configuration changes using the rollback command. This
-will apply the selected revision and trigger a system reboot.
-
-.. cfgcmd:: rollback <N>
-
-   Rollback to revision N (currently requires reboot)
-
-   .. code-block:: none
-
-     vyos@vyos# compare 1
-     [edit system]
-     >host-name vyos-1
-     [edit]
-
-     vyos@vyos# rollback 1
-     Proceed with reboot? [confirm][y]
-     Broadcast message from root@vyos-1 (pts/0) (Tue Dec 17 21:07:45 2013):
-     The system is going down for reboot NOW!
-
-Remote Archive
---------------
-
-VyOS can upload the configuration to a remote location after each call
-to :cfgcmd:`commit`. You will have to set the commit-archive location.
-TFTP, FTP, SCP and SFTP servers are supported. Every time a
-:cfgcmd:`commit` is successfull the ``config.boot`` file will be copied
-to the defined destination(s). The filename used on the remote host will
-be ``config.boot-hostname.YYYYMMDD_HHMMSS``. 
-
-.. cfgcmd:: set system config-management commit-archive location <URI>
-
-   Specify remote location of commit archive as any of the below
-   :abbr:`URI (Uniform Resource Identifier)`
-
-   * ``scp://<user>:<passwd>@<host>:/<dir>``
-   * ``sftp://<user>:<passwd>@<host>/<dir>``
-   * ``ftp://<user>:<passwd>@<host>/<dir>``
-   * ``tftp://<host>/<dir>``
-
-.. note:: The number of revisions don't affect the commit-archive.
-
-.. note:: You may find VyOS not allowing the secure connection because
-   it cannot verify the legitimacy of the remote server. You can use
-   the workaround below to quickly add the remote host's SSH
-   fingerprint to your ``~/.ssh/known_hosts`` file:
-
-   .. code-block:: none
-
-     vyos@vyos# ssh-keyscan <host> >> ~/.ssh/known_hosts
-
-Saving and loading manually
----------------------------
-
-You can use the ``save`` and ``load`` commands if you want to manually
-manage specific configuration files.
-
-When using the save_ command, you can add a specific location where
-to store your configuration file. And, when needed it, you will be able
-to load it with the ``load`` command:
-
-.. cfgcmd:: load <URI>
-
-   Use this command to load a configuration which will replace the
-   running configuration. Define the location of the configuration file
-   to be loaded. You can use a path to a local file, an SCP address, an
-   SFTP address, an FTP address, an HTTP address, an HTTPS address or a
-   TFTP address.
-
-  .. code-block:: none
-
-     vyos@vyos# load 
-     Possible completions:
-       <Enter>				        Load from system config file
-       <file>			        	Load from file on local machine
-       scp://<user>:<passwd>@<host>:/<file>	Load from file on remote machine
-       sftp://<user>:<passwd>@<host>/<file>	Load from file on remote machine
-       ftp://<user>:<passwd>@<host>/<file>	Load from file on remote machine
-       http://<host>/<file>			Load from file on remote machine
-       https://<host>/<file>			Load from file on remote machine
-       tftp://<host>/<file>			Load from file on remote machine
-     
-
-
-Restore Default
----------------
-
-In the case you want to completely delete your configuration and restore
-the default one, you can enter the following command in configuration
-mode:
-
-.. code-block:: none
-
-  load /opt/vyatta/etc/config.boot.default
-
-You will be asked if you want to continue. If you accept, you will have
-to use :cfgcmd:`commit` if you want to make the changes active.
-
-Then you may want to :cfgcmd:`save` in order to delete the saved
-configuration too.
-
-.. note:: If you are remotely connected, you will lose your connection.
-   You may want to copy first the config, edit it to ensure
-   connectivity, and load the edited config.
diff --git a/docs/configuration/interfaces/openvpn.rst b/docs/configuration/interfaces/openvpn.rst
index 7646959c..f503ae84 100644
--- a/docs/configuration/interfaces/openvpn.rst
+++ b/docs/configuration/interfaces/openvpn.rst
@@ -581,4 +581,4 @@ The following commands let you reset OpenVPN.
 
 
 
-.. include:: /common-references.rst
+.. include:: /_include/common-references.txt
diff --git a/docs/configuration/nat/index.rst b/docs/configuration/nat/index.rst
index 85bd41d5..5aeffb63 100644
--- a/docs/configuration/nat/index.rst
+++ b/docs/configuration/nat/index.rst
@@ -606,7 +606,7 @@ The ASP requests that all connections from this company should come from
 172.29.41.89 - an address that is assigned by the ASP and not in use at
 the customer site.
 
-.. figure:: _static/images/nat_before_vpn_topology.png
+.. figure:: /_static/images/nat_before_vpn_topology.png
    :scale: 100 %
    :alt: NAT before VPN Topology
 
diff --git a/docs/configuration/policy/index.rst b/docs/configuration/policy/index.rst
index 557911d9..4b7d48ee 100644
--- a/docs/configuration/policy/index.rst
+++ b/docs/configuration/policy/index.rst
@@ -125,7 +125,7 @@ Routing tables that will be used in this example are:
 * ``main`` Routing table used by VyOS and other interfaces not
   participating in PBR
 
-.. figure:: ../_static/images/pbr_example_1.png
+.. figure:: /_static/images/pbr_example_1.png
    :scale: 80 %
    :alt: PBR multiple uplinks
 
diff --git a/docs/configuration/service/ipoe-server.rst b/docs/configuration/service/ipoe-server.rst
index 279f0c6d..3f794af8 100644
--- a/docs/configuration/service/ipoe-server.rst
+++ b/docs/configuration/service/ipoe-server.rst
@@ -146,4 +146,4 @@ The rate-limit is set in kbit/sec.
   -------+------------+-------------------+-------------+-----+--------+------------+--------+----------+------------------
   ipoe0  | eth2       | 08:00:27:2f:d8:06 | 192.168.0.2 |     |        | 500/500    | active | 00:00:05 | dccc870fd31349fb
 
-.. include:: /common-references.rst
+.. include:: /_include/common-references.txt
diff --git a/docs/configuration/service/pppoe-server.rst b/docs/configuration/service/pppoe-server.rst
index 4deb6c7e..28d1f097 100644
--- a/docs/configuration/service/pppoe-server.rst
+++ b/docs/configuration/service/pppoe-server.rst
@@ -394,4 +394,4 @@ a /56 subnet for the clients internal use.
   --------+----------+-------------+--------------------------+---------------------+-------------------+------------+--------+----------+----------+----------
    ppp0   | test     | 192.168.0.1 | 2001:db8:8002:0:200::/64 | 2001:db8:8003::1/56 | 00:53:00:12:42:eb |            | active | 00:00:49 | 875 B    | 2.1 KiB
 
-.. include:: /common-references.rst
+.. include:: /_include/common-references.txt
diff --git a/docs/configuration/system/lcd.rst b/docs/configuration/system/lcd.rst
index 2509946e..808d45a2 100644
--- a/docs/configuration/system/lcd.rst
+++ b/docs/configuration/system/lcd.rst
@@ -41,5 +41,5 @@ Configuration
    .. note:: We can't support all displays from the beginning. If your display
       type is missing, please create a feature request via Phabricator_.
 
-.. include:: /common-references.rst
+.. include:: /_include/common-references.txt
 
diff --git a/docs/vpn/dmvpn.rst b/docs/configuration/vpn/dmvpn.rst
similarity index 99%
rename from docs/vpn/dmvpn.rst
rename to docs/configuration/vpn/dmvpn.rst
index 5100b92f..d6706421 100644
--- a/docs/vpn/dmvpn.rst
+++ b/docs/configuration/vpn/dmvpn.rst
@@ -26,7 +26,7 @@ peers.
    complete solution also incorporates the use of a routing protocol. BGP is
    particularly well suited for use with DMVPN.
 
-.. figure:: ../_static/images/vpn_dmvpn_topology01.png
+.. figure:: /_static/images/vpn_dmvpn_topology01.png
    :scale: 40 %
    :alt: Baseline DMVPN topology
 
diff --git a/docs/configuration/vpn/index.rst b/docs/configuration/vpn/index.rst
new file mode 100644
index 00000000..397093c2
--- /dev/null
+++ b/docs/configuration/vpn/index.rst
@@ -0,0 +1,15 @@
+###
+VPN
+###
+
+
+.. toctree::
+   :maxdepth: 1
+   :includehidden:
+
+   ipsec
+   l2tp
+   openconnect
+   pptp
+   rsa-keys
+   sstp
\ No newline at end of file
diff --git a/docs/vpn/ipsec.rst b/docs/configuration/vpn/ipsec.rst
similarity index 100%
rename from docs/vpn/ipsec.rst
rename to docs/configuration/vpn/ipsec.rst
diff --git a/docs/vpn/l2tp.rst b/docs/configuration/vpn/l2tp.rst
similarity index 100%
rename from docs/vpn/l2tp.rst
rename to docs/configuration/vpn/l2tp.rst
diff --git a/docs/vpn/openconnect.rst b/docs/configuration/vpn/openconnect.rst
similarity index 100%
rename from docs/vpn/openconnect.rst
rename to docs/configuration/vpn/openconnect.rst
diff --git a/docs/vpn/pptp.rst b/docs/configuration/vpn/pptp.rst
similarity index 100%
rename from docs/vpn/pptp.rst
rename to docs/configuration/vpn/pptp.rst
diff --git a/docs/vpn/site2site_ipsec.rst b/docs/configuration/vpn/site2site_ipsec.rst
similarity index 99%
rename from docs/vpn/site2site_ipsec.rst
rename to docs/configuration/vpn/site2site_ipsec.rst
index 08ccc648..97f27b43 100644
--- a/docs/vpn/site2site_ipsec.rst
+++ b/docs/configuration/vpn/site2site_ipsec.rst
@@ -218,7 +218,7 @@ IKEv2
 
 Imagine the following topology
 
-.. figure:: ../_static/images/vpn_s2s_ikev2.png
+.. figure:: /_static/images/vpn_s2s_ikev2.png
    :scale: 50 %
    :alt: IPSec IKEv2 site2site VPN
 
diff --git a/docs/vpn/sstp.rst b/docs/configuration/vpn/sstp.rst
similarity index 99%
rename from docs/vpn/sstp.rst
rename to docs/configuration/vpn/sstp.rst
index f5e4ad05..dbaa41c0 100644
--- a/docs/vpn/sstp.rst
+++ b/docs/configuration/vpn/sstp.rst
@@ -344,4 +344,4 @@ A connection attempt will be shown as:
 
 .. _sstpc: https://github.com/reliablehosting/sstp-client
 
-.. include:: /common-references.rst
+.. include:: /_include/common-references.txt
diff --git a/docs/vrf.rst b/docs/configuration/vrf/index.rst
similarity index 99%
rename from docs/vrf.rst
rename to docs/configuration/vrf/index.rst
index 75075be6..a47175f2 100644
--- a/docs/vrf.rst
+++ b/docs/configuration/vrf/index.rst
@@ -304,4 +304,4 @@ For VR Fmaintenance the followin operational commands are in place.
    useful when the host specified is a hostname rather than an IP address.
 
 
-.. include:: common-references.rst
+.. include:: /_include/common-references.txt
diff --git a/docs/configuration/zonepolicy/index.rst b/docs/configuration/zonepolicy/index.rst
new file mode 100644
index 00000000..31784dc3
--- /dev/null
+++ b/docs/configuration/zonepolicy/index.rst
@@ -0,0 +1,8 @@
+###########
+Zone Policy
+###########
+
+
+.. toctree::
+   :maxdepth: 1
+   :includehidden:
\ No newline at end of file
diff --git a/docs/contributing/debugging.rst b/docs/contributing/debugging.rst
index fcd62c89..644545bf 100644
--- a/docs/contributing/debugging.rst
+++ b/docs/contributing/debugging.rst
@@ -143,4 +143,4 @@ order of the scripts.
 .. _vyatta-cfg: https://github.com/vyos/vyatta-cfg
 .. _bootchart.conf: https://github.com/vyos/vyos-build/blob/current/data/live-build-config/includes.chroot/etc/systemd/bootchart.conf
 
-.. include:: /common-references.rst
+.. include:: /_include/common-references.txt
diff --git a/docs/contributing/development.rst b/docs/contributing/development.rst
index 0a7fecb5..73b8b22e 100644
--- a/docs/contributing/development.rst
+++ b/docs/contributing/development.rst
@@ -711,4 +711,4 @@ http://dev.packages.vyos.net/repositories/.
 .. _`VLAN (VIF)`: https://github.com/vyos/vyos-1x/tree/current/interface-definitions/include/vif.xml.i
 .. _`MAC address`: https://github.com/vyos/vyos-1x/tree/current/interface-definitions/include/interface-mac.xml.i
 
-.. include:: /common-references.rst
+.. include:: /_include/common-references.txt
diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index 0276a7d2..197f5b03 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -325,4 +325,4 @@ predefined structure.
 .. _reStructuredTextDirectives: https://docutils.sourceforge.io/docs/ref/rst/directives.html
 .. _README.md: https://github.com/vyos/vyos-documentation/blob/master/README.md
 
-.. include:: /common-references.rst
+.. include:: /_include/common-references.txt
diff --git a/docs/contributing/issues-features.rst b/docs/contributing/issues-features.rst
index 473d49d9..9b6602f9 100644
--- a/docs/contributing/issues-features.rst
+++ b/docs/contributing/issues-features.rst
@@ -77,4 +77,4 @@ the left side under the specific project.
 .. _Slack: https://slack.vyos.io
 .. _Forum: https://forum.vyos.io
 
-.. include:: /common-references.rst
+.. include:: /_include/common-references.txt
diff --git a/docs/coverage.rst b/docs/coverage.rst
index f003f9ff..01d51e90 100644
--- a/docs/coverage.rst
+++ b/docs/coverage.rst
@@ -1,5 +1,3 @@
-:orphan:
-
 ########
 Coverage
 ########
diff --git a/docs/index.rst b/docs/index.rst
index 96272fff..ed16b420 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -22,7 +22,7 @@ VyOS User Guide
    :caption: first steps
 
    installation/index
-   quickstart/index
+   quick-start
    cli
    
 .. toctree::
@@ -47,4 +47,5 @@ VyOS User Guide
 
 
    contributing/index
+   coverage
    copyright
diff --git a/docs/installation/upate.rst b/docs/installation/update.rst
similarity index 100%
rename from docs/installation/upate.rst
rename to docs/installation/update.rst
diff --git a/docs/operation/index.rst b/docs/operation/index.rst
index b40f769d..647b5b25 100644
--- a/docs/operation/index.rst
+++ b/docs/operation/index.rst
@@ -7,4 +7,5 @@ Operation Mode
    :includehidden:
 
    information
-   ip-command
\ No newline at end of file
+   ip-commands
+   boot-options
\ No newline at end of file
diff --git a/docs/vpn/index.rst b/docs/vpn/index.rst
deleted file mode 100644
index c208b3c0..00000000
--- a/docs/vpn/index.rst
+++ /dev/null
@@ -1,18 +0,0 @@
-.. _vpn:
-
-###
-VPN
-###
-
-.. toctree::
-   :maxdepth: 2
-
-   dmvpn
-   ipsec
-   l2tp
-   openconnect
-   openvpn
-   pptp
-   site2site_ipsec
-   sstp
-   wireguard

From 6f6950d14e46ef92d961682b23fb28936c23f9b7 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Mon, 7 Dec 2020 20:29:11 +0100
Subject: [PATCH 143/295] fix build errors after arrange

---
 docs/changelog/index.rst                |  3 ++
 docs/cli.rst                            |  9 ++---
 docs/configuration/firewall/index.rst   | 54 +++++++++++++++----------
 docs/configuration/protocols/static.rst | 11 +++--
 docs/configuration/system/index.rst     | 10 ++++-
 docs/configuration/vpn/index.rst        | 13 +++++-
 docs/configuration/vpn/rsa-keys.rst     |  4 ++
 docs/contributing/documentation.rst     |  2 +-
 8 files changed, 73 insertions(+), 33 deletions(-)
 create mode 100644 docs/configuration/vpn/rsa-keys.rst

diff --git a/docs/changelog/index.rst b/docs/changelog/index.rst
index 26262932..8d2e8a86 100644
--- a/docs/changelog/index.rst
+++ b/docs/changelog/index.rst
@@ -1,3 +1,6 @@
+.. _release-notes:
+
+
 #########
 Changelog
 #########
diff --git a/docs/cli.rst b/docs/cli.rst
index 34ab3df6..7964c490 100644
--- a/docs/cli.rst
+++ b/docs/cli.rst
@@ -12,8 +12,7 @@ Operational Mode
 
 Operational mode allows for commands to perform operational system tasks and
 view system and service status, while configuration mode allows for the
-modification of system configuration. The list of all operational level commands
-is available at :ref:`operational_level_commands`.
+modification of system configuration.
 
 The CLI provides a built-in help system. In the CLI the ``?`` key may be used
 to display available commands. The ``TAB`` key can be used to auto-complete
@@ -75,9 +74,6 @@ When viewing in page mode the following commands are available:
 Configuration Mode
 ##################
 
-The list of all operational level commands is available at
-:ref:`configuration_level_commands`.
-
 To enter configuration mode use the ``configure`` command:
 
 .. code-block:: none
@@ -112,7 +108,8 @@ thus also be easily cloned by simply copying the required configuration
 files.
 
 Terminology
-===========
+###########
+
 live
 A VyOS system has three major types of configurations:
 
diff --git a/docs/configuration/firewall/index.rst b/docs/configuration/firewall/index.rst
index 2615774f..e95ecb53 100644
--- a/docs/configuration/firewall/index.rst
+++ b/docs/configuration/firewall/index.rst
@@ -1,11 +1,12 @@
 .. _firewall:
 
+########
 Firewall
-========
-
+########
 
+********
 Overview
---------
+********
 
 VyOS makes use of Linux `netfilter <https://netfilter.org/>`_ for packet
 filtering.
@@ -24,8 +25,9 @@ or zone based firewall policy.
    OS, is a reference to as `local` with respect to its input interface.
 
 
+***************
 Global settings
----------------
+***************
 
 Some firewall settings are global and have a affect on the whole system.
 
@@ -140,8 +142,9 @@ Some firewall settings are global and have a affect on the whole system.
    Set the global setting for related connections.
 
 
+******
 Groups
-------
+******
 
 Firewall groups represent collections of IP addresses, networks, or
 ports. Once created, a group can be referenced by firewall rules as
@@ -158,7 +161,7 @@ names.
 
 
 Address Groups
-**************
+==============
 
 In a **address group** a single IP adresses or IP address ranges are
 definded.
@@ -182,7 +185,7 @@ definded.
 
 
 Network Groups
-**************
+==============
 
 While **network groups** accept IP networks in CIDR notation, specific
 IP addresses can be added as a 32-bit prefix. If you foresee the need
@@ -207,7 +210,7 @@ recommended.
       
 
 Port Groups
-***********
+===========
 
 A **port group** represents only port numbers, not the protocol. Port
 groups can be referenced for either TCP or UDP. It is recommended that
@@ -232,8 +235,9 @@ filtering unnecessary ports. Ranges of ports can be specified by using
    Provide a port group description.
 
 
+*********
 Rule-Sets
-----------
+*********
 
 A rule-set is a named collection of firewall rules that can be applied
 to an interface or zone. Each rule is numbered, has an action to apply
@@ -281,7 +285,7 @@ the action of the rule will executed.
    If you want to disable a rule but let it in the configuration.
 
 Matching criteria
-*****************
+=================
 
 There are a lot of matching criteria gainst which the package can be tested.
 
@@ -413,8 +417,9 @@ There are a lot of matching criteria gainst which the package can be tested.
    Match against the state of a packet.
 
 
+***********************************
 Applying a Rule-Set to an Interface
------------------------------------
+***********************************
 
 A Rule-Set can be appliend to every inteface:
 
@@ -439,8 +444,9 @@ A Rule-Set can be appliend to every inteface:
       several interfaces. An interface can only have one rule-set per chain.
 
 
+**************************
 Zone-based Firewall Policy
---------------------------
+**************************
 
 As an alternative to applying policy to an interface directly, a
 zone-based firewall can be created to simplify configuration when
@@ -453,7 +459,7 @@ An basic introduction to zone-based firewalls can be found `here
 and an example at :ref:`examples-zone-policy`.
 
 Define a Zone
-*************
+=============
 
 To define a zone setup either one with interfaces or a local zone.
 
@@ -477,7 +483,7 @@ To define a zone setup either one with interfaces or a local zone.
 
 
 Applying a Rule-Set to a Zone
-*****************************
+=============================
 
 Before you are able to apply a rule-set to a zone you have to create the zones 
 first. 
@@ -496,11 +502,12 @@ first.
       set zone-policy zone LAN from DMZ firewall name DMZv4-to-LANv4
 
 
+***********************
 Operation-mode Firewall
------------------------
+***********************
 
 Rule-set overview
-*****************
+=================
 
 .. opcmd:: show firewall
 
@@ -663,7 +670,7 @@ Rule-set overview
 
 
 Zone-Policy Overview
-********************
+====================
 
 .. opcmd:: show zone-policy zone <name>
 
@@ -684,7 +691,7 @@ Zone-Policy Overview
 
 
 Show Firewall log
-*****************
+=================
 
 .. opcmd:: show log firewall [name | ipv6name] <name>
 
@@ -698,7 +705,7 @@ Show Firewall log
 
 
 Example Partial Config
-----------------------
+======================
 
 .. code-block:: none
 
@@ -770,9 +777,10 @@ Example Partial Config
 
 .. _routing-mss-clamp:
 
-################
+
+****************
 TCP-MSS Clamping
-################
+****************
 
 As Internet wide PMTU discovery rarely works, we sometimes need to clamp
 our TCP MSS value to a specific value. This is a field in the TCP
@@ -788,9 +796,11 @@ value for IPv4 and IPv6.
    in 1452 bytes on a 1492 byte MTU.
 
 
+
 IPv4
 ====
 
+
 .. cfgcmd:: set firewall options interface <interface> adjust-mss <number-of-bytes>
 
    Use this command to set the maximum segment size for IPv4 transit
@@ -808,6 +818,8 @@ for your WireGuard `wg02` tunnel.
   set firewall options interface pppoe0 adjust-mss '1452'
   set firewall options interface wg02 adjust-mss '1372'
 
+
+
 IPv6
 ====
 
diff --git a/docs/configuration/protocols/static.rst b/docs/configuration/protocols/static.rst
index fbde8228..43b77c41 100644
--- a/docs/configuration/protocols/static.rst
+++ b/docs/configuration/protocols/static.rst
@@ -15,8 +15,9 @@ collection of all routes the router has learned from its configuration or from
 its dynamic routing protocols is stored in the RIB. Unicast routes are directly
 used to determine the forwarding table used for unicast packet forwarding.
 
+*************
 Static Routes
-#############
+*************
 
 .. cfgcmd:: set protocols static route <subnet> next-hop <address>
 
@@ -152,8 +153,9 @@ provided by the Neighbor Discovery Protocol (NDP).
 To manipulate or display ARP_ table entries, the following commands are
 implemented.
 
+*********
 Configure
-=========
+*********
 
 .. cfgcmd:: set protocols static arp <address> hwaddr <mac>
 
@@ -166,8 +168,11 @@ Configure
 
      set protocols static arp 192.0.2.100 hwaddr 00:53:27:de:23:aa
 
+
+*********
 Operation
-=========
+*********
+
 
 .. opcmd:: show protocols static arp
 
diff --git a/docs/configuration/system/index.rst b/docs/configuration/system/index.rst
index ecf09a64..4bb16c42 100644
--- a/docs/configuration/system/index.rst
+++ b/docs/configuration/system/index.rst
@@ -22,7 +22,7 @@ System
    name-server
    name-servers-dhcp
    ntp
-   options
+   option
    proxy
    static-host-mapping
    sysctl
@@ -30,3 +30,11 @@ System
    task-scheduler
    time-zone
    wifi-requlatory-domain
+
+
+.. toctree::
+   :maxdepth: 1
+   :includehidden:
+
+   default-route
+   eventhandler
diff --git a/docs/configuration/vpn/index.rst b/docs/configuration/vpn/index.rst
index 397093c2..abaca198 100644
--- a/docs/configuration/vpn/index.rst
+++ b/docs/configuration/vpn/index.rst
@@ -12,4 +12,15 @@ VPN
    openconnect
    pptp
    rsa-keys
-   sstp
\ No newline at end of file
+   sstp
+
+
+
+pages to sort
+
+.. toctree::
+   :maxdepth: 1
+   :includehidden:
+
+   dmvpn
+   site2site_ipsec
\ No newline at end of file
diff --git a/docs/configuration/vpn/rsa-keys.rst b/docs/configuration/vpn/rsa-keys.rst
new file mode 100644
index 00000000..9f289d0d
--- /dev/null
+++ b/docs/configuration/vpn/rsa-keys.rst
@@ -0,0 +1,4 @@
+
+########
+RSA-Keys
+########
\ No newline at end of file
diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index 197f5b03..f15595bf 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -261,7 +261,7 @@ Page content
 The documentation have 3 different types of pages, the same kind of pages must 
 have the same structure to achieve a recognition factor.
 
-For all *.rst files must follow the same TOC Level syntax and have to start with
+For all rst files must follow the same TOC Level syntax and have to start with
 
 .. code-block::
 

From f0d6a0cbb8c4627f7b9f697508615c90c30f6e05 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Mon, 7 Dec 2020 20:47:32 +0100
Subject: [PATCH 144/295] contributing: improve documentation

---
 docs/contributing/documentation.rst | 23 ++++++++---------------
 1 file changed, 8 insertions(+), 15 deletions(-)

diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index f15595bf..1766d6ca 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -261,7 +261,7 @@ Page content
 The documentation have 3 different types of pages, the same kind of pages must 
 have the same structure to achieve a recognition factor.
 
-For all rst files must follow the same TOC Level syntax and have to start with
+All RST files must follow the same TOC Level syntax and have to start with
 
 .. code-block::
 
@@ -272,8 +272,9 @@ For all rst files must follow the same TOC Level syntax and have to start with
 Configuration mode pages
 ^^^^^^^^^^^^^^^^^^^^^^^^
 
-A configuration mode article covers a specific level of a command.
-The exact level depends on the command.
+A configuration mode folder and article covers a specific level of a command.
+The exact level depends on the command. This should provide stability for URLs
+used in the forum or blogpost.
 
 For example:
 
@@ -281,7 +282,7 @@ For example:
   * ``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``
 
 The article starts with a short intruducing about the command or the technologie.
-Include some helpfull links or background informations.
+Please include some helpfull links or background informations.
 
 After this a optional section follows. Some commands have requirements like the
 compatible hardware (e.g. Wifi) or some commands you have to set before. For
@@ -290,28 +291,20 @@ example it is recommended to set a route-map before configure bgp.
 In the configuration part of the page all possible confiuration options
 should be documented. Use ``.. cfgcmd::`` like described above.
 
-Related Operation command must be documented in the next part of the articel.
+Related Operation command must be documented in the next part of the article.
 Use ``::opcmd..`` for these commands.
 
 If there some troubleshooting guides releated to the commands. Explain it in the
 next optional part.
 
-Examples:
-
-   * ssh
-   
-
-
 Operation mode pages
 ^^^^^^^^^^^^^^^^^^^^
 
 Operation mode commands, which didn't fit in a related configuraton mode command
 must documented in this part of the documentation.
 
-.. todo::
-
-  create structure
-
+General concepts for troubleshooting belong here as well as detailed process
+descriptions.
 
 Anything else
 ^^^^^^^^^^^^^

From b0b5b6ff303d2c6bc01590a9aa80660211e8c99f Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Mon, 7 Dec 2020 20:47:46 +0100
Subject: [PATCH 145/295] delete release page

---
 docs/index.rst                |  1 -
 docs/introducing/releases.rst | 29 -----------------------------
 2 files changed, 30 deletions(-)
 delete mode 100644 docs/introducing/releases.rst

diff --git a/docs/index.rst b/docs/index.rst
index ed16b420..5d8bfd55 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -11,7 +11,6 @@ VyOS User Guide
 
    introducing/about
    introducing/history
-   introducing/releases
    changelog/index
 
 
diff --git a/docs/introducing/releases.rst b/docs/introducing/releases.rst
deleted file mode 100644
index 6d95c4bc..00000000
--- a/docs/introducing/releases.rst
+++ /dev/null
@@ -1,29 +0,0 @@
-.. _release:
-
-########
-Releases
-########
-
-Rolling Release
-###############
-
-rolling rolling
-
-LTS
-###
-
-lts lts lts
-
-
-old LTS
-=======
-
-old LTSLTSLTSLTS
-
-even older LTS
---------------
-
-even older LTS even older LTS
-even older LTS even older LTS even older LTS even older LTS even older LTS
-
-

From cf83303fd11ec4f4973d7560d5802a2f942b9fe5 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Mon, 7 Dec 2020 21:17:07 +0100
Subject: [PATCH 146/295] fix submodule error in .readthedocs.yml

---
 .readthedocs.yml | 3 +--
 requirements.txt | 2 +-
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/.readthedocs.yml b/.readthedocs.yml
index 7a4e84da..56ce79a7 100644
--- a/.readthedocs.yml
+++ b/.readthedocs.yml
@@ -24,5 +24,4 @@ python:
     - requirements: requirements.txt
 
 submodules:
-  include:
-    - vyos-1x
\ No newline at end of file
+  include: all
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
index 2b1f7796..03b34c63 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -3,4 +3,4 @@ sphinx-rtd-theme
 setuptools
 docutils
 lxml
-sphinx-notfound-page
\ No newline at end of file
+sphinx-notfound-page

From 0bb741b58bc0dd7f0beae7364ed519f7165bdbb7 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 8 Dec 2020 14:38:56 +0100
Subject: [PATCH 147/295] Dockerfile: add python requirement lxml

---
 docker/Dockerfile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docker/Dockerfile b/docker/Dockerfile
index 02b0fc26..903a8e83 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -33,6 +33,7 @@ RUN pip3 install Sphinx
 RUN pip3 install sphinx-rtd-theme
 RUN pip3 install sphinx-autobuild
 RUN pip3 install sphinx-notfound-page
+RUN pip3 install lxml
 
 
 # Cleanup

From b8a2fd5e578f200928a457b9f967ed92619bda88 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 8 Dec 2020 15:12:56 +0100
Subject: [PATCH 148/295] fix build error after merge

---
 docs/_include/interface-common-with-dhcp.txt | 2 +-
 docs/_include/interface-common.txt           | 4 ++--
 docs/_include/interface-vlan-8021ad.txt      | 8 ++++----
 docs/_include/interface-vlan-8021q.txt       | 8 ++++----
 docs/configuration/protocols/index.rst       | 2 +-
 docs/configuration/protocols/isis.rst        | 2 +-
 docs/contributing/documentation.rst          | 2 +-
 7 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/docs/_include/interface-common-with-dhcp.txt b/docs/_include/interface-common-with-dhcp.txt
index 46dddb9b..47b4796f 100644
--- a/docs/_include/interface-common-with-dhcp.txt
+++ b/docs/_include/interface-common-with-dhcp.txt
@@ -16,6 +16,6 @@
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
+.. cmdinclude:: /_include/interface-dhcpv6-prefix-delegation.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
diff --git a/docs/_include/interface-common.txt b/docs/_include/interface-common.txt
index 79269fe3..5a997482 100644
--- a/docs/_include/interface-common.txt
+++ b/docs/_include/interface-common.txt
@@ -22,11 +22,11 @@
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-ip.txt
+.. cmdinclude:: /_include/interface-ip.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
-.. cmdinclude:: ../_include/interface-ipv6.txt
+.. cmdinclude:: /_include/interface-ipv6.txt
   :var0: {{ var0 }}
   :var1: {{ var1 }}
 
diff --git a/docs/_include/interface-vlan-8021ad.txt b/docs/_include/interface-vlan-8021ad.txt
index 6a34786f..0a1722dc 100644
--- a/docs/_include/interface-vlan-8021ad.txt
+++ b/docs/_include/interface-vlan-8021ad.txt
@@ -88,7 +88,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-ip.txt
+.. cmdinclude:: /_include/interface-ip.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -98,7 +98,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-ipv6.txt
+.. cmdinclude:: /_include/interface-ipv6.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -140,7 +140,7 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
+.. cmdinclude:: /_include/interface-dhcpv6-prefix-delegation.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif-s
@@ -150,4 +150,4 @@ tag is the one closer/closest to the Ethernet header, its name is S-TAG
    :var6: <vlan-id>
    :var7: 20
 
-.. include:: ../common-references.rst
+.. include:: /_include/common-references.txt
diff --git a/docs/_include/interface-vlan-8021q.txt b/docs/_include/interface-vlan-8021q.txt
index e4ed9db0..63f4433f 100644
--- a/docs/_include/interface-vlan-8021q.txt
+++ b/docs/_include/interface-vlan-8021q.txt
@@ -71,14 +71,14 @@ term used for this is ``vif``.
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-ip.txt
+.. cmdinclude:: /_include/interface-ip.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-ipv6.txt
+.. cmdinclude:: /_include/interface-ipv6.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
@@ -108,11 +108,11 @@ term used for this is ``vif``.
    :var3: <vlan-id>
    :var4: 10
 
-.. cmdinclude:: ../_include/interface-dhcpv6-prefix-delegation.txt
+.. cmdinclude:: /_include/interface-dhcpv6-prefix-delegation.txt
    :var0: {{ var0 }}
    :var1: {{ var1 }}
    :var2: vif
    :var3: <vlan-id>
    :var4: 10
 
-.. include:: ../common-references.rst
+.. include:: /_include/common-references.txt
diff --git a/docs/configuration/protocols/index.rst b/docs/configuration/protocols/index.rst
index 819db4df..8ef35b5d 100644
--- a/docs/configuration/protocols/index.rst
+++ b/docs/configuration/protocols/index.rst
@@ -11,7 +11,7 @@ Protocols
    bgp
    igmp
    igmp-proxy
-   is-is
+   isis
    mpls
    ospf
    ospfv3
diff --git a/docs/configuration/protocols/isis.rst b/docs/configuration/protocols/isis.rst
index 807dca83..64cc2535 100644
--- a/docs/configuration/protocols/isis.rst
+++ b/docs/configuration/protocols/isis.rst
@@ -1,4 +1,4 @@
-.. include:: ../_include/need_improvement.txt
+.. include:: /_include/need_improvement.txt
 
 .. _isis:
 
diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index 1766d6ca..ddd21396 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -213,7 +213,7 @@ file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value
 
 .. code-block:: none
 
-   .. cmdinclude:: interface-address.txt
+   .. cmdinclude:: /_include/interface-address.txt
       :var0: ethernet
       :var1: eth1
 

From 6a0871d5ae1e0b160bf54ec9fec57b6887189103 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 8 Dec 2020 15:29:33 +0100
Subject: [PATCH 149/295] index: make TOC visible

---
 docs/index.rst | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/docs/index.rst b/docs/index.rst
index 5d8bfd55..1491c405 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -6,8 +6,6 @@ VyOS User Guide
 
 .. toctree::
    :maxdepth: 2
-   :hidden:
-   :caption: FIND CAPTION NAME
 
    introducing/about
    introducing/history
@@ -16,9 +14,8 @@ VyOS User Guide
 
 .. toctree::
    :maxdepth: 2
-   :hidden:
    :includehidden:
-   :caption: first steps
+   :caption: First Steps
 
    installation/index
    quick-start
@@ -26,7 +23,6 @@ VyOS User Guide
    
 .. toctree::
    :maxdepth: 2
-   :hidden:
    :includehidden:
    :caption: Adminguide
 
@@ -40,7 +36,6 @@ VyOS User Guide
 
 .. toctree::
    :maxdepth: 2
-   :hidden:
    :includehidden:
    :caption: Contributing
 

From 710052003d25b3cf405f68b415716451707c6f61 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 8 Dec 2020 15:46:04 +0100
Subject: [PATCH 150/295] index: decrease TOC level

---
 docs/coverage.rst | 2 +-
 docs/index.rst    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/coverage.rst b/docs/coverage.rst
index 01d51e90..896489fd 100644
--- a/docs/coverage.rst
+++ b/docs/coverage.rst
@@ -5,7 +5,7 @@ Coverage
 Overview over all commands, which are documented in the ``.. cfgcmd::`` or ``.. opcmd::`` Directives.
 
 | The build process take all xml definition files from `vyos-1x <https://github.com/vyos/vyos-1x>`_  and extract each leaf command or executable command.
-| After this the commands are compare and shown in the follwoing two tables.
+| After this the commands are compare and shown in the following two tables.
 | The script compare only the fixed part of a command. All varables or values will be erase and then compare:
 
 for example there are these two commands:
diff --git a/docs/index.rst b/docs/index.rst
index 1491c405..d66d7680 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -5,7 +5,7 @@ VyOS User Guide
 ###############
 
 .. toctree::
-   :maxdepth: 2
+   :maxdepth: 1
 
    introducing/about
    introducing/history

From 41423f984ef097c0df6fdda4095bcbbb9d08d056 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 8 Dec 2020 18:59:17 +0100
Subject: [PATCH 151/295] coverage: improve regex

---
 docs/_ext/vyos.py | 30 ++++++++++++++++++++++--------
 1 file changed, 22 insertions(+), 8 deletions(-)

diff --git a/docs/_ext/vyos.py b/docs/_ext/vyos.py
index 4a974b46..7861c8a2 100644
--- a/docs/_ext/vyos.py
+++ b/docs/_ext/vyos.py
@@ -430,15 +430,30 @@ class CfgCmdDirective(CmdDirective):
     custom_class = 'cfg'
 
 
-def strip_cmd(cmd):
+def strip_cmd(cmd, debug=False):
+    if debug:
+        print("")
+        print(cmd)
     cmd = re.sub('set','',cmd)
-    cmd = re.sub('\s\|\s','',cmd)
+    if debug:
+        print(cmd)
+    #while " | " in cmd:
+    cmd = re.sub('\s+\|\s+','',cmd)
+    if debug:
+        print(cmd)
     cmd = re.sub('<\S*>','',cmd)
+    if debug:
+        print(cmd)
     cmd = re.sub('\[\S\]','',cmd)
+    if debug:
+        print(cmd)
     cmd = re.sub('\s+','',cmd)
+    if debug:
+        print(cmd)
+        print("")
     return cmd
 
-def build_row(app, fromdocname, rowdata):
+def build_row(app, fromdocname, rowdata):   
     row = nodes.row()
     for cell in rowdata:
         entry = nodes.entry()
@@ -480,7 +495,11 @@ def process_coverage(app, fromdocname, doccmd, xmlcmd, cli_type):
         coverage_item['doccmd_item'] = cmd
         coverage_item['indocs'] = True
         int_docs += 1
+
         coverage_list[strip_cmd(cmd['cmd'])] = dict(coverage_item)
+
+    
+    #print(coverage_list.keys())
     
     for cmd in xmlcmd:
         
@@ -502,11 +521,6 @@ def process_coverage(app, fromdocname, doccmd, xmlcmd, cli_type):
             int_xml += 1
             coverage_list[strip] = dict(coverage_item)
         else:
-            #print("===BEGIN===")
-            #print(cmd)
-            #print(coverage_list[strip])
-            #print(strip)
-            #print("===END====")
             coverage_list[strip]['xmlcmd'] = cmd['cmd']
             coverage_list[strip]['xmlcmd_item'] = cmd
             coverage_list[strip]['inxml'] = True

From f6f4facc250df64a5b3b2d14d5088e9b9922c133 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 8 Dec 2020 19:26:58 +0100
Subject: [PATCH 152/295] update submodule version

---
 docs/_include/vyos-1x | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
index 64d6e689..2a25efce 160000
--- a/docs/_include/vyos-1x
+++ b/docs/_include/vyos-1x
@@ -1 +1 @@
-Subproject commit 64d6e689a8274845a49e6931eda6cda04615de42
+Subproject commit 2a25efce5f3e03385a4fa1a412d6f41a07e9d483

From fb9d298eb2fff6d77f3b50ec3a3639c32b5d4cbc Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 8 Dec 2020 19:34:39 +0100
Subject: [PATCH 153/295] fix version name

---
 docs/conf.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/conf.py b/docs/conf.py
index 4bb2da3c..4260621a 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -26,10 +26,10 @@ copyright = u'2020, VyOS maintainers and contributors'
 author = u'VyOS maintainers and contributors'
 
 # The short X.Y version
-version = u'1.4'
+version = u'1.3'
 
 # The full version, including alpha/beta/rc tags
-release = u'1.4.x (sagitta)'
+release = u'1.3.x (equuleus)'
 
 # -- General configuration ---------------------------------------------------
 

From dd2b63e441ce0d48ae1cbe8d1abac9e4d55c2465 Mon Sep 17 00:00:00 2001
From: jack9603301 <jack9603301@163.com>
Date: Wed, 9 Dec 2020 16:53:33 +0800
Subject: [PATCH 154/295] interface: mirror: Upload Port Mirror(SPAN) Document

---
 docs/_include/interface-mirror.txt         | 17 +++++++++++++++++
 docs/configuration/interfaces/bonding.rst  |  5 +++++
 docs/configuration/interfaces/bridge.rst   |  5 +++++
 docs/configuration/interfaces/ethernet.rst |  5 +++++
 4 files changed, 32 insertions(+)
 create mode 100644 docs/_include/interface-mirror.txt

diff --git a/docs/_include/interface-mirror.txt b/docs/_include/interface-mirror.txt
new file mode 100644
index 00000000..8cdbf77d
--- /dev/null
+++ b/docs/_include/interface-mirror.txt
@@ -0,0 +1,17 @@
+SPAN port mirroring can copy the inbound/outbound traffic of the interface to the 
+specified interface, usually the interface can be connected to some special equipment,
+such as behavior control system, intrusion detection system and traffic collector, 
+and can copy all related traffic from this port
+
+VyOS uses the `mirror` option to configure port mirroring. The configuration is divided
+into 2 different directions. Destination ports should be configured for different traffic directions.
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> mirror ingress <monitor-interface>
+
+   Configure port mirroring for `interface` inbound traffic and copy the traffic to `monitor-interface`
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> mirror egress <monitor-interface>
+
+   Configure port mirroring for `interface` outbound traffic and copy the traffic to `monitor-interface`
+
+   
diff --git a/docs/configuration/interfaces/bonding.rst b/docs/configuration/interfaces/bonding.rst
index 8ec8f34d..547594e5 100644
--- a/docs/configuration/interfaces/bonding.rst
+++ b/docs/configuration/interfaces/bonding.rst
@@ -263,6 +263,11 @@ VLAN
    :var0: bond
    :var1: bond0
 
+Port Mirror (SPAN)
+==================
+.. cmdinclude:: ../../_include/interface-mirror.txt
+   :var0: ethernet
+
 *******
 Example
 *******
diff --git a/docs/configuration/interfaces/bridge.rst b/docs/configuration/interfaces/bridge.rst
index 766d2aa5..a471b8f8 100644
--- a/docs/configuration/interfaces/bridge.rst
+++ b/docs/configuration/interfaces/bridge.rst
@@ -135,6 +135,11 @@ VLAN
    can either be an individual VLAN id or a range of VLAN ids delimited by a
    hyphen.
 
+Port Mirror (SPAN)
+==================
+.. cmdinclude:: ../../_include/interface-mirror.txt
+   :var0: ethernet
+
 *******
 Example
 *******
diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst
index 9311c947..562aeabc 100644
--- a/docs/configuration/interfaces/ethernet.rst
+++ b/docs/configuration/interfaces/ethernet.rst
@@ -83,6 +83,11 @@ QinQ (802.1ad)
    :var0: ethernet
    :var1: eth0
 
+Port Mirror (SPAN)
+==================
+.. cmdinclude:: ../../_include/interface-mirror.txt
+   :var0: ethernet
+
 *********
 Operation
 *********

From 4dfdd5057ea801c69f48f1aa83700a2915c1775c Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Wed, 9 Dec 2020 14:17:47 +0100
Subject: [PATCH 155/295] Lint: deativate vale action

---
 .github/workflows/main.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index b6797ce0..eb04d97f 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -13,10 +13,10 @@ jobs:
       id: file_changes
       uses: trilom/file-changes-action@v1.2.3
 
-    - name: Vale
-      uses: errata-ai/vale-action@v1.3.0
-      with:
-        files: '${{ steps.file_changes.outputs.files_modified }}' 
+    #- name: Vale
+    #  uses: errata-ai/vale-action@v1.3.0
+    #  with:
+    #    files: '${{ steps.file_changes.outputs.files_modified }}' 
 
     - name: Set up Python
       uses: actions/setup-python@v2

From d6af3a609f478f4affd7b0d40ca9bd612db1dc64 Mon Sep 17 00:00:00 2001
From: Cheeze_It <none@none.com>
Date: Wed, 9 Dec 2020 12:41:04 -0700
Subject: [PATCH 156/295] mpls-conf: T915: Added documentation for LDP import
 and export

Added examples for the new import and export functionality that
LDP is now getting on vyos/vyos-1x#639
---
 docs/configuration/protocols/mpls.rst | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/docs/configuration/protocols/mpls.rst b/docs/configuration/protocols/mpls.rst
index 4451c5c3..1814cbb1 100644
--- a/docs/configuration/protocols/mpls.rst
+++ b/docs/configuration/protocols/mpls.rst
@@ -111,6 +111,22 @@ Configuration Options
 
   Use this command if you would like to set the TCP session hold time intervals.
 
+.. cfgcmd:: set protocols mpls ldp import ipv4 import-filter filter-access-list <access list number>
+.. cfgcmd:: set protocols mpls ldp import ipv6 import-filter filter-access-list6 <access list number>
+
+  Use these commands to control the importing of forwarding equivalence classes
+  (FECs) for LDP from neighbors. This would be useful for example on only
+  accepting the labeled routes that are needed and not ones that are not
+  needed, such as accepting loopback interfaces and rejecting all others.
+  
+.. cfgcmd:: set protocols mpls ldp export ipv4 export-filter filter-access-list <access list number>
+.. cfgcmd:: set protocols mpls ldp export ipv6 export-filter filter-access-list6 <access list number>
+
+  Use these commands to control the exporting of forwarding equivalence classes
+  (FECs) for LDP to neighbors. This would be useful for example on only
+  announcing the labeled routes that are needed and not ones that are not
+  needed, such as announcing loopback interfaces and no others.
+
 .. cfgcmd:: set protocols mpls ldp export ipv4 explicit-null
 .. cfgcmd:: set protocols mpls ldp export ipv6 explicit-null
 

From 7e32e15d84eb93d0c524dd4369c2b70cab75d11d Mon Sep 17 00:00:00 2001
From: erkin <me@erkin.party>
Date: Wed, 9 Dec 2020 22:50:55 +0300
Subject: [PATCH 157/295] contributing: Typographical corrections

---
 docs/contributing/build-vyos.rst | 62 ++++++++++++++++----------------
 1 file changed, 31 insertions(+), 31 deletions(-)

diff --git a/docs/contributing/build-vyos.rst b/docs/contributing/build-vyos.rst
index 2fe2d3c0..9ca6c8e1 100644
--- a/docs/contributing/build-vyos.rst
+++ b/docs/contributing/build-vyos.rst
@@ -125,7 +125,7 @@ per release train (`current` or `crux`) - container. Add the following to your
       -e GOSU_UID=$(id -u) -e GOSU_GID=$(id -g) \
       vyos/vyos-build:crux bash'
 
-Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` to spwan
+Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` to spawn
 your development containers in your current working directory.
 
 .. _build_native:
@@ -260,10 +260,10 @@ The full and current list can be generated with ``./configure --help``:
 Linux Kernel
 ============
 
-The Linux Kernel used by VyOS is heavily tied to the ISO build process. The
-file ``data/defaults.json`` hosts a JSON definition if the Kernel version used
-``kernel_version`` and the ``kernel_flavor`` of the Kernel which represents the
-Kernels LOCAL_VERSION. Both together form the Kernel Version variable in the
+The Linux kernel used by VyOS is heavily tied to the ISO build process. The
+file ``data/defaults.json`` hosts a JSON definition of the kernel version used
+``kernel_version`` and the ``kernel_flavor`` of the kernel which represents the
+kernel's LOCAL_VERSION. Both together form the kernel version variable in the
 system:
 
 .. code-block:: none
@@ -272,16 +272,16 @@ system:
   4.19.146-amd64-vyos
 
 Other packages (e.g. vyos-1x) add dependencies to the ISO build procedure on
-e.g. the wireguard-modules package which itself adds a dependency on the Kernel
+e.g. the wireguard-modules package which itself adds a dependency on the kernel
 version used due to the module it ships. This may change (for WireGuard) in
-future Kernel releases but as long as we have out-of-tree modules.
+future kernel releases but as long as we have out-of-tree modules.
 
 * WireGuard
 * Accel-PPP
 * Intel NIC drivers
 * Inter QAT
 
-Each of those modules holds a dependency on the Kernel Version and if you are
+Each of those modules holds a dependency on the kernel version and if you are
 lucky enough to receive an ISO build error which sounds like:
 
 .. code-block:: none
@@ -301,28 +301,28 @@ lucky enough to receive an ISO build error which sounds like:
 
 The most obvious reasons could be:
 
-* ``vyos-build`` repo is outdate, please ``git pull`` to update to the latest
-  release Kernel version from us.
+* ``vyos-build`` repo is outdated, please ``git pull`` to update to the latest
+  release kernel version from us.
 
-* You have your own custom Kernel `*.deb` packages in the `packages` folder but
-  missed to create all required out-of tree modules like Accel-PPP, WireGuard,
+* You have your own custom kernel `*.deb` packages in the `packages` folder but
+  neglected to create all required out-of tree modules like Accel-PPP, WireGuard,
   Intel QAT, Intel NIC
 
 Building The Kernel
 -------------------
 
-The Kernel build is quiet easy, most of the required steps can be found in the
+The kernel build is quite easy, most of the required steps can be found in the
 ``vyos-build/packages/linux-kernel/Jenkinsfile`` but we will walk you through
 it.
 
-Clone the Kernel source to `vyos-build/packages/linux-kernel/`:
+Clone the kernel source to `vyos-build/packages/linux-kernel/`:
 
 .. code-block:: none
 
   $ cd vyos-build/packages/linux-kernel/
   $ git clone https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
 
-Checkout the required Kernel version - see ``vyos-build/data/defaults.json``
+Check out the required kernel version - see ``vyos-build/data/defaults.json``
 file (example uses kernel 4.19.146):
 
 .. code-block:: none
@@ -344,11 +344,11 @@ file (example uses kernel 4.19.146):
   HEAD is now at 015e94d0e37b Linux 4.19.146
 
 Now we can use the helper script ``build-kernel.sh`` which does all the necessary
-Voodoo by applying required patches from the `vyos-build/packages/linux-kernel/
-patches` folder, copying our Kernel configuration ``x86_64_vyos_defconfig`` to
+voodoo by applying required patches from the `vyos-build/packages/linux-kernel/
+patches` folder, copying our kernel configuration ``x86_64_vyos_defconfig`` to
 the right location, and finally building the Debian packages.
 
-.. note:: Building the kernel will take some time depending on the speed and quantity of your CPU/cores and disk speed.  Plan on 20 minutes (or even longer) on lower end hardware.
+.. note:: Building the kernel will take some time depending on the speed and quantity of your CPU/cores and disk speed. Expect 20 minutes (or even longer) on lower end hardware.
 
 .. code-block:: none
 
@@ -425,7 +425,7 @@ the right location, and finally building the Debian packages.
   dpkg-buildpackage: info: binary-only upload (no source included)
 
 
-In the end you will be presented with the Kernel binary packages which you can
+In the end you will be presented with the kernel binary packages which you can
 then use in your custom ISO build process, by placing all the `*.deb` files in
 the vyos-build/packages folder where they will be used automatically when building VyOS as documented above.
 
@@ -454,16 +454,16 @@ were built. If it fails to find the correct files you can add them manually to
 Building Out-Of-Tree Modules
 ----------------------------
 
-Building the Kernel is one part, but now you also need to build the required
+Building the kernel is one part, but now you also need to build the required
 out-of-tree modules so everything is lined up and the ABIs match. To do so,
 you can again take a look at ``vyos-build/packages/linux-kernel/Jenkinsfile``
-to see all of the required modules and their selected version. We will show you
-once how to build all the current required modules.
+to see all of the required modules and their selected versions. We will show
+you how to build all the current required modules.
 
 WireGuard
 ^^^^^^^^^
 
-First clone the source code and checkout the appropriate version by running:
+First, clone the source code and check out the appropriate version by running:
 
 .. code-block:: none
 
@@ -511,7 +511,7 @@ to the ``vyos-build/packages`` folder for inclusion during the ISO build.
 Accel-PPP
 ^^^^^^^^^
 
-First clone the source code and checkout the appropriate version by running:
+First, clone the source code and check out the appropriate version by running:
 
 .. code-block:: none
 
@@ -581,8 +581,8 @@ to the ``vyos-build/packages`` folder for inclusion during the ISO build.
 Intel QAT
 ^^^^^^^^^
 The Intel QAT (Quick Assist Technology) drivers do not come from a Git
-repository, instead we just fetch the tarballs from 01.org, Intels Open-Source
-website.
+repository, instead we just fetch the tarballs from 01.org, Intel's
+open-source website.
 
 Simply use our wrapper script to build all of the driver modules.
 
@@ -621,7 +621,7 @@ If you are brave enough to build yourself an ISO image containing any modified
 package from our GitHub organisation - this is the place to be.
 
 Any "modified" package may refer to an altered version of e.g. vyos-1x package
-that you would like to test before filing a PullRequest on GitHub.
+that you would like to test before filing a pull request on GitHub.
 
 Building an ISO with any customized package is in no way different then
 building a regular (customized or not) ISO image. Simply place your modified
@@ -632,7 +632,7 @@ Troubleshooting
 ===============
 
 Debian APT is not very verbose when it comes to errors. If your ISO build breaks
-for whatever reason and you supect its a problem with APT dependencies or
+for whatever reason and you suspect it's a problem with APT dependencies or
 installation you can add this small patch which increases the APT verbosity
 during ISO build.
 
@@ -681,9 +681,9 @@ Run following command after building the QEMU image.
 Packages
 ********
 
-VyOS itself comes with a bunch of packages which are specific to our system and
-thus can not be found in any Debian mirrror. Those packages can be found at the
-`VyOS GitHub project`_ in their source format can can easily be compiled into
+VyOS itself comes with a bunch of packages that are specific to our system and
+thus cannot be found in any Debian mirror. Those packages can be found at the
+`VyOS GitHub project`_ in their source format can easily be compiled into
 a custom Debian (`*.deb`) package.
 
 The easiest way to compile your package is with the above mentioned

From b71a670b91f3ff1273239b0a69b8511754d0e4e0 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 10 Dec 2020 08:19:03 +0100
Subject: [PATCH 158/295] linter: fix vyos-linter.py to run without args

---
 .github/vyos-linter.py | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/vyos-linter.py b/.github/vyos-linter.py
index 05bb6bbb..69a1c8e7 100644
--- a/.github/vyos-linter.py
+++ b/.github/vyos-linter.py
@@ -147,8 +147,7 @@ def main():
                     if handle_file_action(file) is False:
                         bool_error = False
     except Exception as e:
-        print(e)    
-        for root, dirs, files in os.walk("../docs"):
+        for root, dirs, files in os.walk("docs"):
             path = root.split(os.sep)
             for file in files:
                 if file[-4:] == ".rst":

From 72701bf825e17eae2938b880a230afb9f09e8b3e Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 10 Dec 2020 08:44:34 +0100
Subject: [PATCH 159/295] create gihub action for scheduled submodule update

---
 .github/workflows/submodules.yml | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 .github/workflows/submodules.yml

diff --git a/.github/workflows/submodules.yml b/.github/workflows/submodules.yml
new file mode 100644
index 00000000..0e501bdd
--- /dev/null
+++ b/.github/workflows/submodules.yml
@@ -0,0 +1,32 @@
+name: Update submodule vyos-1x
+on:
+  workflow_dispatch:
+  schedule:
+  # 06:00 UTC on Monday
+    - cron:  '0 6 * * 1'
+jobs:
+  updatVyOS-1x:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          repository: rebortg/vyos-documentation
+      - name: update submodule
+        run: |
+          git submodule status
+          git submodule update --init --force
+          cd docs/_include/vyos-1x
+          git checkout current
+          git pull
+          git submodule status
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@v3
+        with:
+          token: ${{secrets.GITHUB_TOKEN}}
+          commit-message: Update vyos-1x submodule
+          committer: GitHub <noreply@github.com>
+          author: ${{ github.actor }} <${{ github.actor }}@users.noreply.github.com>
+          title: Update vyos-1x submodule
+          body: |
+            Autoupdate vyos-1x submodule
+          branch: update-dependencies

From 335ef02956f87bf2bf5b5ce0b5b295f29fe20b8f Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 10 Dec 2020 08:46:39 +0100
Subject: [PATCH 160/295] correct repo path for submodule action

---
 .github/workflows/submodules.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/submodules.yml b/.github/workflows/submodules.yml
index 0e501bdd..66ecdf3e 100644
--- a/.github/workflows/submodules.yml
+++ b/.github/workflows/submodules.yml
@@ -10,7 +10,7 @@ jobs:
     steps:
       - uses: actions/checkout@v2
         with:
-          repository: rebortg/vyos-documentation
+          repository: vyos/vyos-documentation
       - name: update submodule
         run: |
           git submodule status

From 4ae8c8104ae7e496ced996fc4d927d934f48a068 Mon Sep 17 00:00:00 2001
From: rebortg <rebortg@users.noreply.github.com>
Date: Thu, 10 Dec 2020 07:47:10 +0000
Subject: [PATCH 161/295] Update vyos-1x submodule

---
 docs/_include/vyos-1x | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
index 2a25efce..2f5de3cf 160000
--- a/docs/_include/vyos-1x
+++ b/docs/_include/vyos-1x
@@ -1 +1 @@
-Subproject commit 2a25efce5f3e03385a4fa1a412d6f41a07e9d483
+Subproject commit 2f5de3cfadec3b708b4b332d154b3b619f4d873e

From 95a2a8af1835a3409430e24352056f44ba07e6c5 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 10 Dec 2020 09:22:51 +0100
Subject: [PATCH 162/295] prefixdelegation correct command

---
 docs/_include/interface-dhcpv6-prefix-delegation.txt | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/docs/_include/interface-dhcpv6-prefix-delegation.txt b/docs/_include/interface-dhcpv6-prefix-delegation.txt
index 99132d17..6a001949 100644
--- a/docs/_include/interface-dhcpv6-prefix-delegation.txt
+++ b/docs/_include/interface-dhcpv6-prefix-delegation.txt
@@ -4,7 +4,7 @@ VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation
 is supported by most ISPs who provide native IPv6 for consumers on fixed networks.
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  {{ var5 }} {{ var6 }} dhcpv6-option pd <id> length <length>
+  {{ var5 }} {{ var6 }} dhcpv6-options pd <id> length <length>
 
   Some ISPs by default only delegate a /64 prefix. To request for a specific
   prefix size use this option to request for a bigger delegation for this pd
@@ -20,7 +20,7 @@ is supported by most ISPs who provide native IPv6 for consumers on fixed network
     set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-options pd 0 length 56
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  {{ var5 }} {{ var6 }} dhcpv6-option pd <id> interface <delegatee> address <address>
+  {{ var5 }} {{ var6 }} dhcpv6-options pd <id> interface <delegatee> address <address>
 
   Specify the interface address used locally on the interfcae where the prefix
   has been delegated to. ID must be a decimal integer.
@@ -35,10 +35,10 @@ is supported by most ISPs who provide native IPv6 for consumers on fixed network
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-option pd 0 interface eth8 address 65534
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-options pd 0 interface eth8 address 65534
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  {{ var5 }} {{ var6 }} dhcpv6-option pd <id> interface <delegatee> sla-id <id>
+  {{ var5 }} {{ var6 }} dhcpv6-options pd <id> interface <delegatee> sla-id <id>
 
   Specify the identifier value of the site-level aggregator (SLA) on the
   interface. ID must be a decimal number greater then 0 which fits in the
@@ -51,5 +51,5 @@ is supported by most ISPs who provide native IPv6 for consumers on fixed network
 
   .. code-block:: none
 
-    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-option pd 0 interface eth8 sla-id 1
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-options pd 0 interface eth8 sla-id 1
 

From 763324b0c17c9f6724589c2f2c590b4e611a2347 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 10 Dec 2020 11:59:42 +0100
Subject: [PATCH 163/295] styleguide: specify line lenght and exception

---
 .github/vyos-linter.py              | 69 +++++++++++++----------------
 docs/contributing/documentation.rst | 10 +++++
 2 files changed, 40 insertions(+), 39 deletions(-)

diff --git a/.github/vyos-linter.py b/.github/vyos-linter.py
index 69a1c8e7..ebf00b2d 100644
--- a/.github/vyos-linter.py
+++ b/.github/vyos-linter.py
@@ -67,51 +67,40 @@ def lint_linelen(cnt, line):
     if len(line) > 80:
         return (f"Line too long: len={len(line)}", cnt, 'warning')
 
-
-def handle_file(path, file):
-    errors = []
-    path = '/'.join(path)
-    filepath = f"{path}/{file}"
-    try:
-        with open(filepath) as fp:
-            line = fp.readline()
-            cnt = 1
-            while line:
-                err_mac = lint_mac(cnt, line.strip())
-                err_ip4 = lint_ipv4(cnt, line.strip())
-                err_ip6 = lint_ipv6(cnt, line.strip())
-                err_len = lint_linelen(cnt, line.strip())
-                if err_mac:
-                    errors.append(err_mac)
-                if err_ip4:
-                    errors.append(err_ip4)
-                if err_ip6:
-                    errors.append(err_ip6)
-                if err_len:
-                    errors.append(err_len)
-                line = fp.readline()
-                cnt += 1
-    finally:
-        fp.close()
-
-    if len(errors) > 0:
-        print(f"File: {filepath}")
-        for error in errors:
-            print(error)
-        print('')
-        return False
-
 def handle_file_action(filepath):
     errors = []
     try:
         with open(filepath) as fp:
             line = fp.readline()
             cnt = 1
+            test_line_lenght = True
+            indentation = 0
             while line:
+                # ignore every '.. code-block::' for line lenght
+                # rst code-block have its own style in html the format in rst
+                # and the build page must be the same
+                if test_line_lenght is False:
+                    if len(line) > indentation:
+                        #print(f"'{line}'")
+                        #print(indentation)
+                        if line[indentation].isspace() is False:
+                            test_line_lenght = True
+
+                if ".. code-block::" in line:
+                    test_line_lenght = False
+                    indentation = 0
+                    for i in line:
+                        if i.isspace():
+                            indentation = indentation + 1
+                        else:
+                            break
                 err_mac = lint_mac(cnt, line.strip())
                 err_ip4 = lint_ipv4(cnt, line.strip())
                 err_ip6 = lint_ipv6(cnt, line.strip())
-                err_len = lint_linelen(cnt, line.strip())
+                if test_line_lenght:
+                    err_len = lint_linelen(cnt, line)
+                else:
+                    err_len = None
                 if err_mac:
                     errors.append(err_mac)
                 if err_ip4:
@@ -142,17 +131,19 @@ def main():
     try:
         files = ast.literal_eval(sys.argv[1])
         for file in files:
-                print(file)
-                if file[-4:] == ".rst":
+                if file[-4:] in [".rst", ".txt"] and "_build" not in file:
                     if handle_file_action(file) is False:
                         bool_error = False
     except Exception as e:
         for root, dirs, files in os.walk("docs"):
             path = root.split(os.sep)
             for file in files:
-                if file[-4:] == ".rst":
-                    if handle_file(path, file) is False:
+                if file[-4:] in [".rst", ".txt"] and "_build" not in path:
+                    fpath = '/'.join(path)
+                    filepath = f"{fpath}/{file}"
+                    if handle_file_action(filepath) is False:
                         bool_error = False
+
     return bool_error
 
 
diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index ddd21396..f1dc8095 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -153,6 +153,16 @@ system numbers for the documentation:
 
 Please don't use other public address space.
 
+
+Line length
+^^^^^^^^^^^
+
+Limit all lines to a maximum of 79 characters.
+
+Except in ``.. code-block::`` because it will use  the html tag ``<pre>``
+which have the save line format as in the rst file.
+
+
 Custom Sphinx-doc Markup
 ^^^^^^^^^^^^^^^^^^^^^^^^
 

From 03585246bd36b1d1b7f12f3459b0815da93dbe16 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 10 Dec 2020 12:04:49 +0100
Subject: [PATCH 164/295] quick-start: adjust line lenght

---
 docs/quick-start.rst | 58 +++++++++++++++++++++++++-------------------
 1 file changed, 33 insertions(+), 25 deletions(-)

diff --git a/docs/quick-start.rst b/docs/quick-start.rst
index c70d4cc5..655ce072 100644
--- a/docs/quick-start.rst
+++ b/docs/quick-start.rst
@@ -4,19 +4,19 @@
 Quick Start
 ###########
 
-This chapter will guide you on how to get up to speed quickly using your new VyOS
-system. It will show you a very basic configuration example that will provide
-a :ref:`nat` gateway for a device with two network interfaces (`eth0` and
-`eth1`).
+This chapter will guide you on how to get up to speed quickly using your new
+VyOS system. It will show you a very basic configuration example that will
+provide a :ref:`nat` gateway for a device with two network interfaces
+(`eth0` and `eth1`).
 
 .. _quick-start-configuration-mode:
 
 Configuration Mode
 ##################
 
-By default, VyOS is in operational mode, and the command prompt displays a `$`. To configure VyOS,
-you will need to enter configuration mode, resulting in the command prompt displaying a `#`, as
-demonstrated below:
+By default, VyOS is in operational mode, and the command prompt displays a `$`.
+To configure VyOS, you will need to enter configuration mode, resulting in the
+command prompt displaying a `#`, as demonstrated below:
 
 .. code-block:: none
 
@@ -26,13 +26,15 @@ demonstrated below:
 Commit and Save
 ################
 
-After every configuration change, you need to apply the changes by using the following command:
+After every configuration change, you need to apply the changes by using the
+following command:
 
 .. code-block:: none
 
   commit
 
-Once your configuration works as expected, you can save it permanently by using the following command:
+Once your configuration works as expected, you can save it permanently by using
+the following command:
 
 .. code-block:: none
 
@@ -41,10 +43,10 @@ Once your configuration works as expected, you can save it permanently by using
 Interface Configuration
 #######################
 
-* Your outside/WAN interface will be `eth0`. It will receive its interface address
-  via DHCP.
-* Your internal/LAN interface will be `eth1`. It will use a static IP address of
-  `192.168.0.1/24`.
+* Your outside/WAN interface will be `eth0`. It will receive its interface
+  address via DHCP.
+* Your internal/LAN interface will be `eth1`. It will use a static IP address
+  of `192.168.0.1/24`.
 
 After switching to :ref:`quick-start-configuration-mode` issue the following
 commands:
@@ -75,13 +77,15 @@ on specific addresses only.
 DHCP/DNS quick-start
 ####################
 
-The following settings will configure DHCP and DNS services on your internal/LAN network,
-where VyOS will act as the default gateway and DNS server.
+The following settings will configure DHCP and DNS services on 
+your internal/LAN network, where VyOS will act as the default gateway and
+DNS server.
 
 * The default gateway and DNS recursor address will be `192.168.0.1/24`
-* The address range `192.168.0.2/24 - 192.168.0.8/24` will be reserved for static assignments
-* DHCP clients will be assigned IP addresses within the range of `192.168.0.9 - 192.168.0.254`
-  and have a domain name of `internal-network`
+* The address range `192.168.0.2/24 - 192.168.0.8/24` will be reserved for
+  static assignments
+* DHCP clients will be assigned IP addresses within the range of
+  `192.168.0.9 - 192.168.0.254` and have a domain name of `internal-network`
 * DHCP leases will hold for one day (86400 seconds)
 * VyOS will serve as a full DNS recursor, replacing the need to utilize Google,
   Cloudflare, or other public DNS servers (which is good for privacy)
@@ -104,8 +108,9 @@ where VyOS will act as the default gateway and DNS server.
 NAT
 ###
 
-The following settings will configure :ref:`source-nat` rules for our internal/LAN network, allowing
-hosts to communicate through the outside/WAN network via IP masquerade.
+The following settings will configure :ref:`source-nat` rules for our
+internal/LAN network, allowing hosts to communicate through the outside/WAN
+network via IP masquerade.
 
 .. code-block:: none
 
@@ -139,7 +144,8 @@ which was not initiated from the internal/LAN side first.
   set firewall name OUTSIDE-LOCAL rule 20 state new 'enable'
 
 If you wanted to enable SSH access to your firewall from the outside/WAN
-interface, you could create some additional rules to allow that kind of traffic.
+interface, you could create some additional rules to allow that kind of
+traffic.
 
 These rules allow SSH traffic and rate limit it to 4 requests per minute. This
 blocks brute-forcing attempts:
@@ -180,8 +186,8 @@ Commit changes, save the configuration, and exit configuration mode:
 Hardening
 #########
 
-Especially if you are allowing SSH remote access from the outside/WAN interface,
-there are a few additional configuration steps that should be taken.
+Especially if you are allowing SSH remote access from the outside/WAN
+interface, there are a few additional configuration steps that should be taken.
 
 Replace the default `vyos` system user:
 
@@ -206,7 +212,8 @@ the original ``vyos`` user and completely disable password authentication for
   delete system login user vyos
   set service ssh disable-password-authentication
 
-As above, commit your changes, save the configuration, and exit configuration mode:
+As above, commit your changes, save the configuration, and exit
+configuration mode:
 
 .. code-block:: none
 
@@ -217,4 +224,5 @@ As above, commit your changes, save the configuration, and exit configuration mo
   vyos@vyos# exit
   vyos@vyos$
 
-You now should have a simple yet secure and functioning router to experiment with further. Enjoy!
+You now should have a simple yet secure and functioning router to experiment
+with further. Enjoy!
\ No newline at end of file

From 8bd516a5ff97716b34d254adf6cf9ac0126eb0f1 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 10 Dec 2020 13:35:30 +0100
Subject: [PATCH 165/295] rearrange development part

---
 docs/contributing/index.rst               | 2 --
 docs/{contributing => }/debugging.rst     | 0
 docs/{contributing => }/documentation.rst | 0
 docs/index.rst                            | 5 +++--
 4 files changed, 3 insertions(+), 4 deletions(-)
 rename docs/{contributing => }/debugging.rst (100%)
 rename docs/{contributing => }/documentation.rst (100%)

diff --git a/docs/contributing/index.rst b/docs/contributing/index.rst
index c3bb2688..2ecbcb5f 100644
--- a/docs/contributing/index.rst
+++ b/docs/contributing/index.rst
@@ -6,8 +6,6 @@ Contributing
    :maxdepth: 2
 
    build-vyos
-   debugging
    development
-   documentation
    issues-features
    upstream-packages
\ No newline at end of file
diff --git a/docs/contributing/debugging.rst b/docs/debugging.rst
similarity index 100%
rename from docs/contributing/debugging.rst
rename to docs/debugging.rst
diff --git a/docs/contributing/documentation.rst b/docs/documentation.rst
similarity index 100%
rename from docs/contributing/documentation.rst
rename to docs/documentation.rst
diff --git a/docs/index.rst b/docs/index.rst
index d66d7680..574a2c49 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -37,9 +37,10 @@ VyOS User Guide
 .. toctree::
    :maxdepth: 2
    :includehidden:
-   :caption: Contributing
-
+   :caption: Development
 
    contributing/index
+   debugging
+   documentation
    coverage
    copyright

From 52828ba38878810aef96450d4eab122dffeecf6d Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 10 Dec 2020 18:20:57 +0100
Subject: [PATCH 166/295] mpls: use short description for headline

---
 docs/configuration/protocols/mpls.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/configuration/protocols/mpls.rst b/docs/configuration/protocols/mpls.rst
index 1814cbb1..7d930016 100644
--- a/docs/configuration/protocols/mpls.rst
+++ b/docs/configuration/protocols/mpls.rst
@@ -1,8 +1,8 @@
 .. _mpls:
 
-####################################
-MPLS (Multiprotocol Label Switching)
-####################################
+####
+MPLS
+####
 
 :abbr:`MPLS (Multi-Protocol Label Switching)` is a packet forwarding paradigm
 which differs from regular IP forwarding. Instead of IP addresses being used to

From 42eb7c8ee7f2d8db588f3de85537a2a0e9c3e553 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 10 Dec 2020 18:21:09 +0100
Subject: [PATCH 167/295] mpls: use proper line break limit

---
 docs/configuration/protocols/mpls.rst | 100 +++++++++++++++-----------
 1 file changed, 57 insertions(+), 43 deletions(-)

diff --git a/docs/configuration/protocols/mpls.rst b/docs/configuration/protocols/mpls.rst
index 7d930016..863e7f62 100644
--- a/docs/configuration/protocols/mpls.rst
+++ b/docs/configuration/protocols/mpls.rst
@@ -58,26 +58,27 @@ It is highly recommended to use the same address for both the LDP router-id and
 the discovery transport address, but for VyOS MPLS LDP to work both parameters
 must be explicitly set in the configuration.
 
-Another thing to keep in mind with LDP is that much like BGP, it is a protocol that
-runs on top of TCP. It however does not have an ability to do something like a
-refresh capability like BGPs route refresh capability. Therefore one might have
-to reset the neighbor for a capability change or a configuration change to work.
+Another thing to keep in mind with LDP is that much like BGP, it is a protocol
+that runs on top of TCP. It however does not have an ability to do something
+like a refresh capability like BGPs route refresh capability. Therefore one
+might have to reset the neighbor for a capability change or a configuration
+change to work.
 
 Configuration Options
 =====================
 
 .. cfgcmd:: set protocols mpls ldp interface <interface>
 
-  Use this command to enable LDP, and enable MPLS processing on the interface you
-  define.
+  Use this command to enable LDP, and enable MPLS processing on the interface
+  you define.
 
 .. cfgcmd:: set protocols mpls ldp router-id <address>
 
   Use this command to configure the IP address used as the LDP router-id of the
   local device.
 
-.. cfgcmd:: set protocols mpls ldp discovery transport-ipv4-address <IPv4 address>
-.. cfgcmd:: set protocols mpls ldp discovery transport-ipv6-address <IPv6 address>
+.. cfgcmd:: set protocols mpls ldp discovery transport-ipv4-address <address>
+.. cfgcmd:: set protocols mpls ldp discovery transport-ipv6-address <address>
 
   Use this command to set the IPv4 or IPv6 transport-address used by LDP.
 
@@ -85,18 +86,19 @@ Configuration Options
 
   Use this command to configure authentication for LDP peers. Set the
   IP address of the LDP peer and a password that should be shared in
-  order to become neighbors. 
-  
+  order to become neighbors.
+
 .. cfgcmd:: set protocols mpls ldp neighbor <address> session-holdtime <seconds>
-  
+
   Use this command to configure a specific session hold time for LDP peers.
   Set the IP address of the LDP peer and a session hold time that should be
   configured for it. You may have to reset the neighbor for this to work.
-  
-.. cfgcmd:: set protocols mpls ldp neighbor <address> ttl-security <disable | hop count>
+
+.. cfgcmd:: set protocols mpls ldp neighbor <address> ttl-security
+  <disable | hop count>
 
   Use this command to enable, disable, or specify hop count for TTL security
-  for LDP peers. By default the value is set to 255 (or max TTL). 
+  for LDP peers. By default the value is set to 255 (or max TTL).
 
 .. cfgcmd:: set protocols mpls ldp discovery hello-ipv4-interval <seconds>
 .. cfgcmd:: set protocols mpls ldp discovery hello-ipv4-holdtime <seconds>
@@ -111,16 +113,20 @@ Configuration Options
 
   Use this command if you would like to set the TCP session hold time intervals.
 
-.. cfgcmd:: set protocols mpls ldp import ipv4 import-filter filter-access-list <access list number>
-.. cfgcmd:: set protocols mpls ldp import ipv6 import-filter filter-access-list6 <access list number>
+.. cfgcmd:: set protocols mpls ldp import ipv4 import-filter filter-access-list
+  <access list number>
+.. cfgcmd:: set protocols mpls ldp import ipv6 import-filter filter-access-list6
+  <access list number>
 
   Use these commands to control the importing of forwarding equivalence classes
   (FECs) for LDP from neighbors. This would be useful for example on only
   accepting the labeled routes that are needed and not ones that are not
   needed, such as accepting loopback interfaces and rejecting all others.
-  
-.. cfgcmd:: set protocols mpls ldp export ipv4 export-filter filter-access-list <access list number>
-.. cfgcmd:: set protocols mpls ldp export ipv6 export-filter filter-access-list6 <access list number>
+
+.. cfgcmd:: set protocols mpls ldp export ipv4 export-filter filter-access-list
+  <access list number>
+.. cfgcmd:: set protocols mpls ldp export ipv6 export-filter filter-access-list6
+  <access list number>
 
   Use these commands to control the exporting of forwarding equivalence classes
   (FECs) for LDP to neighbors. This would be useful for example on only
@@ -130,43 +136,51 @@ Configuration Options
 .. cfgcmd:: set protocols mpls ldp export ipv4 explicit-null
 .. cfgcmd:: set protocols mpls ldp export ipv6 explicit-null
 
-  Use this command if you would like for the router to advertise FECs with a label
-  of 0 for explicit null operations.
-  
-.. cfgcmd:: set protocols mpls ldp allocation ipv4 access-list <access list number>
-.. cfgcmd:: set protocols mpls ldp allocation ipv6 access-list6 <access list number>
+  Use this command if you would like for the router to advertise FECs with a
+  label of 0 for explicit null operations.
+
+.. cfgcmd:: set protocols mpls ldp allocation ipv4 access-list
+  <access list number>
+.. cfgcmd:: set protocols mpls ldp allocation ipv6 access-list6
+  <access list number>
+
+  Use this command if you would like to control the local FEC allocations for
+  LDP. A good example would be for your local router to not allocate a label for
+  everything. Just a label for what it's useful. A good example would be just a
+  loopback label.
 
-  Use this command if you would like to control the local FEC allocations for LDP. A
-  good example would be for your local router to not allocate a label for everything.
-  Just a label for what it's useful. A good example would be just a loopback label.
-  
 .. cfgcmd:: set protocols mpls ldp parameters cisco-interop-tlv
 
-  Use this command to use a Cisco non-compliant format to send and interpret the
-  Dual-Stack capability TLV for IPv6 LDP communications. This is related to :rfc:`7552`.
-  
+  Use this command to use a Cisco non-compliant format to send and interpret
+  the Dual-Stack capability TLV for IPv6 LDP communications. This is related to
+  :rfc:`7552`.
+
 .. cfgcmd:: set protocols mpls ldp parameters transport-prefer-ipv4
 
-  Use this command to prefer IPv4 for TCP peer transport connection for LDP when
-  both an IPv4 and IPv6 LDP address are configured on the same interface.
-  
+  Use this command to prefer IPv4 for TCP peer transport connection for LDP
+  when both an IPv4 and IPv6 LDP address are configured on the same interface.
+
 .. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv4 enable
 .. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv6 enable
 
-  Use this command to enable targeted LDP sessions to the local router. The router
-  will then respond to any sessions that are trying to connect to it that are not
-  a link local type of TCP connection.
-  
+  Use this command to enable targeted LDP sessions to the local router. The
+  router will then respond to any sessions that are trying to connect to it that
+  are not a link local type of TCP connection.
+
 .. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv4 address <address>
 .. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv6 address <address>
 
   Use this command to enable the local router to try and connect with a targeted
   LDP session to another router.
-  
-.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv4 hello-holdtime <seconds>
-.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv4 hello-interval <seconds>
-.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv6 hello-holdtime <seconds>
-.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv6 hello-interval <seconds>
+
+.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv4 hello-holdtime
+  <seconds>
+.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv4 hello-interval
+  <seconds>
+.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv6 hello-holdtime
+  <seconds>
+.. cfgcmd:: set protocols mpls ldp targeted-neighbor ipv6 hello-interval
+  <seconds>
 
   Use these commands if you would like to set the discovery hello and hold time
   parameters for the targeted LDP neighbors.

From 3beb083ae14e6054d004031777ab92a473818dda Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 10 Dec 2020 18:21:47 +0100
Subject: [PATCH 168/295] installation: remove blank ISO chapter

---
 docs/installation/index.rst | 2 --
 docs/installation/iso.rst   | 2 --
 2 files changed, 4 deletions(-)
 delete mode 100644 docs/installation/iso.rst

diff --git a/docs/installation/index.rst b/docs/installation/index.rst
index e5a2a6fd..435a16cd 100644
--- a/docs/installation/index.rst
+++ b/docs/installation/index.rst
@@ -9,11 +9,9 @@ Installation and Image Management
    :caption: Content
 
    install
-   iso
    virtual/index
    cloud/index
    vyos-on-baremetal
    update
    image
    migrate-from-vyatta
-   
\ No newline at end of file
diff --git a/docs/installation/iso.rst b/docs/installation/iso.rst
deleted file mode 100644
index f48ad91c..00000000
--- a/docs/installation/iso.rst
+++ /dev/null
@@ -1,2 +0,0 @@
-iso
-###
\ No newline at end of file

From b599646995d2f805709e5eb975ef14eb4ce28a2e Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 10 Dec 2020 18:23:01 +0100
Subject: [PATCH 169/295] ospf: combine v3/v3 in one chapter

---
 docs/configuration/protocols/ospf.rst   | 72 +++++++++++++++++++++++++
 docs/configuration/protocols/ospfv3.rst | 71 ------------------------
 2 files changed, 72 insertions(+), 71 deletions(-)
 delete mode 100644 docs/configuration/protocols/ospfv3.rst

diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
index ff7c5e64..ee6753c5 100644
--- a/docs/configuration/protocols/ospf.rst
+++ b/docs/configuration/protocols/ospf.rst
@@ -68,3 +68,75 @@ address and the node 1 sending the default route:
   set policy route-map CONNECT rule 10 action permit
   set policy route-map CONNECT rule 10 match interface lo
 
+
+OSPFv3 (IPv6)
+#############
+
+A typical configuration using 2 nodes.
+
+**Node 1:**
+
+.. code-block:: none
+
+  set protocols ospfv3 area 0.0.0.0 interface eth1
+  set protocols ospfv3 area 0.0.0.0 range 2001:db8:1::/64
+  set protocols ospfv3 parameters router-id 192.168.1.1
+  set protocols ospfv3 redistribute connected
+
+**Node 2:**
+
+.. code-block:: none
+
+  set protocols ospfv3 area 0.0.0.0 interface eth1
+  set protocols ospfv3 area 0.0.0.0 range 2001:db8:2::/64
+  set protocols ospfv3 parameters router-id 192.168.2.1
+  set protocols ospfv3 redistribute connected
+
+.. note:: You can not easily redistribute IPv6 routes via OSPFv3 on a WireGuard
+   interface link. This requires you to configure link-local addresses manually
+   on the WireGuard interfaces, see :vytask:`T1483`.
+
+Example configuration for WireGuard interfaces:
+
+**Node 1**
+
+.. code-block:: none
+
+  set interfaces wireguard wg01 address 'fe80::216:3eff:fe51:fd8c/64'
+  set interfaces wireguard wg01 address '192.168.0.1/24'
+  set interfaces wireguard wg01 peer ospf02 allowed-ips '::/0'
+  set interfaces wireguard wg01 peer ospf02 allowed-ips '0.0.0.0/0'
+  set interfaces wireguard wg01 peer ospf02 endpoint '10.1.1.101:12345'
+  set interfaces wireguard wg01 peer ospf02 pubkey 'ie3...='
+  set interfaces wireguard wg01 port '12345'
+  set protocols ospfv3 parameters router-id 192.168.1.1
+  set protocols ospfv3 area 0.0.0.0 interface 'wg01'
+  set protocols ospfv3 area 0.0.0.0 interface 'lo'
+
+**Node 2**
+
+.. code-block:: none
+
+  set interfaces wireguard wg01 address 'fe80::216:3eff:fe0a:7ada/64'
+  set interfaces wireguard wg01 address '192.168.0.2/24'
+  set interfaces wireguard wg01 peer ospf01 allowed-ips '::/0'
+  set interfaces wireguard wg01 peer ospf01 allowed-ips '0.0.0.0/0'
+  set interfaces wireguard wg01 peer ospf01 endpoint '10.1.1.100:12345'
+  set interfaces wireguard wg01 peer ospf01 pubkey 'NHI...='
+  set interfaces wireguard wg01 port '12345'
+  set protocols ospfv3 parameters router-id 192.168.1.2
+  set protocols ospfv3 area 0.0.0.0 interface 'wg01'
+  set protocols ospfv3 area 0.0.0.0 interface 'lo'
+
+**Status**
+
+.. code-block:: none
+
+  vyos@ospf01:~$ sh ipv6 ospfv3 neighbor
+  Neighbor ID     Pri    DeadTime    State/IfState         Duration I/F[State]
+  192.168.0.2       1    00:00:37     Full/PointToPoint    00:18:03 wg01[PointToPoint]
+
+  vyos@ospf02# run sh ipv6 ospfv3 neighbor
+  Neighbor ID     Pri    DeadTime    State/IfState         Duration I/F[State]
+  192.168.0.1       1    00:00:39     Full/PointToPoint    00:19:44 wg01[PointToPoint]
+
diff --git a/docs/configuration/protocols/ospfv3.rst b/docs/configuration/protocols/ospfv3.rst
deleted file mode 100644
index f0e28983..00000000
--- a/docs/configuration/protocols/ospfv3.rst
+++ /dev/null
@@ -1,71 +0,0 @@
-OSPFv3 (IPv6)
-#############
-
-A typical configuration using 2 nodes.
-
-**Node 1:**
-
-.. code-block:: none
-
-  set protocols ospfv3 area 0.0.0.0 interface eth1
-  set protocols ospfv3 area 0.0.0.0 range 2001:db8:1::/64
-  set protocols ospfv3 parameters router-id 192.168.1.1
-  set protocols ospfv3 redistribute connected
-
-**Node 2:**
-
-.. code-block:: none
-
-  set protocols ospfv3 area 0.0.0.0 interface eth1
-  set protocols ospfv3 area 0.0.0.0 range 2001:db8:2::/64
-  set protocols ospfv3 parameters router-id 192.168.2.1
-  set protocols ospfv3 redistribute connected
-
-.. note:: You can not easily redistribute IPv6 routes via OSPFv3 on a WireGuard
-   interface link. This requires you to configure link-local addresses manually
-   on the WireGuard interfaces, see :vytask:`T1483`.
-
-Example configuration for WireGuard interfaces:
-
-**Node 1**
-
-.. code-block:: none
-
-  set interfaces wireguard wg01 address 'fe80::216:3eff:fe51:fd8c/64'
-  set interfaces wireguard wg01 address '192.168.0.1/24'
-  set interfaces wireguard wg01 peer ospf02 allowed-ips '::/0'
-  set interfaces wireguard wg01 peer ospf02 allowed-ips '0.0.0.0/0'
-  set interfaces wireguard wg01 peer ospf02 endpoint '10.1.1.101:12345'
-  set interfaces wireguard wg01 peer ospf02 pubkey 'ie3...='
-  set interfaces wireguard wg01 port '12345'
-  set protocols ospfv3 parameters router-id 192.168.1.1
-  set protocols ospfv3 area 0.0.0.0 interface 'wg01'
-  set protocols ospfv3 area 0.0.0.0 interface 'lo'
-
-**Node 2**
-
-.. code-block:: none
-
-  set interfaces wireguard wg01 address 'fe80::216:3eff:fe0a:7ada/64'
-  set interfaces wireguard wg01 address '192.168.0.2/24'
-  set interfaces wireguard wg01 peer ospf01 allowed-ips '::/0'
-  set interfaces wireguard wg01 peer ospf01 allowed-ips '0.0.0.0/0'
-  set interfaces wireguard wg01 peer ospf01 endpoint '10.1.1.100:12345'
-  set interfaces wireguard wg01 peer ospf01 pubkey 'NHI...='
-  set interfaces wireguard wg01 port '12345'
-  set protocols ospfv3 parameters router-id 192.168.1.2
-  set protocols ospfv3 area 0.0.0.0 interface 'wg01'
-  set protocols ospfv3 area 0.0.0.0 interface 'lo'
-
-**Status**
-
-.. code-block:: none
-
-  vyos@ospf01:~$ sh ipv6 ospfv3 neighbor
-  Neighbor ID     Pri    DeadTime    State/IfState         Duration I/F[State]
-  192.168.0.2       1    00:00:37     Full/PointToPoint    00:18:03 wg01[PointToPoint]
-
-  vyos@ospf02# run sh ipv6 ospfv3 neighbor
-  Neighbor ID     Pri    DeadTime    State/IfState         Duration I/F[State]
-  192.168.0.1       1    00:00:39     Full/PointToPoint    00:19:44 wg01[PointToPoint]
-

From 6321bd3b07c22f40329b08e3817c94f847da99b1 Mon Sep 17 00:00:00 2001
From: Markus Hauschild <markus@moepman.eu>
Date: Thu, 10 Dec 2020 21:20:12 +0100
Subject: [PATCH 170/295] debugging: add section about using pdb

---
 docs/debugging.rst | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)

diff --git a/docs/debugging.rst b/docs/debugging.rst
index a4c73d15..e65e06ab 100644
--- a/docs/debugging.rst
+++ b/docs/debugging.rst
@@ -76,6 +76,42 @@ will have the same effect as ``touch /tmp/vyos.ifconfig.debug``.
   ``sudo systemctl stop vyos-configd`` or make this reboot-safe by calling
   ``sudo systemctl disable vyos-configd``.
 
+Debugging Python Code with PDB
+------------------------------
+
+Sometimes it might be useful to debug Python code interactively on the live
+system rather than a IDE. This can be achieved using pdb.
+
+Let us assume you want to debug a Python script that is called by an op-mode
+command. After you found the script by looking up the op-mode-defitions you
+can edit the script in the live system using e.g. vi:
+``vi /usr/libexec/vyos/op_mode/show_xyz.py``
+
+Insert the following statement right before the section where you want to
+investigate a problem (e.g. a statement you see in a backtrace):
+``import pdb; pdb.set_trace()``
+Optionally you can surrounded this statement by an ``if`` which only triggers
+under the condition you are interested in.
+
+Once you run ``show xyz`` and your condition is triggered you should be dropped
+into the python debugger:
+
+
+.. code-block:: none
+
+   > /usr/libexec/vyos/op_mode/show_nat_translations.py(109)process()
+   -> rule_type = rule.get('type', '')
+   (Pdb)
+
+You can type ``help`` to get an overview of the available commands, and
+``help command`` to get more information on each command.
+
+Useful commands are:
+
+* examine variables using ``pp(var)``
+* contine execution using ``cont``
+* get a backtrace using ``bt``
+
 Config Migration Scripts
 ------------------------
 

From dc2f70f10e05b2df120972f8b31debfa3ade65b2 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 10 Dec 2020 22:10:46 +0100
Subject: [PATCH 171/295] sort IP commands under configuration

---
 docs/configuration/protocols/index.rst |   1 -
 docs/configuration/system/ip.rst       |  72 ++++++-
 docs/configuration/system/ipv6.rst     | 184 +++++++++++++++++-
 docs/operation/index.rst               |   1 -
 docs/operation/ip-commands.rst         | 258 -------------------------
 5 files changed, 252 insertions(+), 264 deletions(-)
 delete mode 100644 docs/operation/ip-commands.rst

diff --git a/docs/configuration/protocols/index.rst b/docs/configuration/protocols/index.rst
index 8ef35b5d..eba56bf2 100644
--- a/docs/configuration/protocols/index.rst
+++ b/docs/configuration/protocols/index.rst
@@ -14,7 +14,6 @@ Protocols
    isis
    mpls
    ospf
-   ospfv3
    pim
    rip
    ripng
diff --git a/docs/configuration/system/ip.rst b/docs/configuration/system/ip.rst
index 74116eb0..78aeef4e 100644
--- a/docs/configuration/system/ip.rst
+++ b/docs/configuration/system/ip.rst
@@ -1,2 +1,70 @@
-ip
-##
\ No newline at end of file
+##
+IP
+##
+
+System configuration commands
+-----------------------------
+
+.. cfgcmd:: set system ip disable-forwarding
+
+   Use this command to disable IPv4 forwarding on all interfaces.
+
+.. cfgcmd:: set system ip arp table-size <number>
+
+   Use this command to define the maximum number of entries to keep in
+   the ARP cache (1024, 2048, 4096, 8192, 16384, 32768).
+
+.. cfgcmd:: set system ip multipath layer4-hashing
+
+   Use this command to use Layer 4 information for IPv4 ECMP hashing.
+
+
+Operational commands
+--------------------
+
+show commands
+^^^^^^^^^^^^^
+
+See below the different parameters available for the IPv4 **show** command:
+
+.. code-block:: none
+
+   vyos@vyos:~$ show ip
+   Possible completions:
+     access-list   Show all IP access-lists
+     as-path-access-list
+                   Show all as-path-access-lists
+     bgp           Show Border Gateway Protocol (BGP) information
+     community-list
+                   Show IP community-lists
+     extcommunity-list
+                   Show extended IP community-lists
+     forwarding    Show IP forwarding status
+     groups        Show IP multicast group membership
+     igmp          Show IGMP (Internet Group Management Protocol) information
+     large-community-list
+                   Show IP large-community-lists
+     multicast     Show IP multicast
+     ospf          Show IPv4 Open Shortest Path First (OSPF) routing information
+     pim           Show PIM (Protocol Independent Multicast) information
+     ports         Show IP ports in use by various system services
+     prefix-list   Show all IP prefix-lists
+     protocol      Show IP route-maps per protocol
+     rip           Show Routing Information Protocol (RIP) information
+     route         Show IP routes
+
+
+reset commands
+^^^^^^^^^^^^^^
+
+And the different IPv4 **reset** commands available:
+
+.. code-block:: none
+
+   vyos@vyos:~$ reset ip
+   Possible completions:
+     arp           Reset Address Resolution Protocol (ARP) cache
+     bgp           Clear Border Gateway Protocol (BGP) statistics or status
+     igmp          IGMP clear commands
+     multicast     IP multicast routing table
+     route         Reset IP route
\ No newline at end of file
diff --git a/docs/configuration/system/ipv6.rst b/docs/configuration/system/ipv6.rst
index 19ed6d62..cba5c0e0 100644
--- a/docs/configuration/system/ipv6.rst
+++ b/docs/configuration/system/ipv6.rst
@@ -1,2 +1,182 @@
-ipv6
-####
\ No newline at end of file
+####
+IPv6
+####
+
+System configuration commands
+-----------------------------
+
+.. cfgcmd:: set system ipv6 disable
+
+   Use this command to disable assignment of IPv6 addresses on all
+   interfaces.
+
+.. cfgcmd:: set system ipv6 disable-forwarding
+
+   Use this command to disable IPv6 forwarding on all interfaces.
+
+.. cfgcmd:: set system ipv6 neighbor table-size <number>
+
+   Use this command to define the maximum number of entries to keep in
+   the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768).
+
+.. cfgcmd:: set system ipv6 strict-dad
+
+   Use this command to disable IPv6 operation on interface when
+   Duplicate Address Detection fails on Link-Local address.
+
+.. cfgcmd:: set system ipv6 multipath layer4-hashing
+
+   Use this command to user Layer 4 information for ECMP hashing.
+
+
+Operational commands
+--------------------
+
+Show commands
+^^^^^^^^^^^^^
+
+.. opcmd:: show ipv6 neighbors
+
+   Use this command to show IPv6 Neighbor Discovery Protocol information.
+
+.. opcmd:: show ipv6 groups
+
+   Use this command to show IPv6 multicast group membership.
+
+.. opcmd:: show ipv6 forwarding
+
+   Use this command to show IPv6 forwarding status.
+
+.. opcmd:: show ipv6 route
+
+   Use this command to show IPv6 routes.
+
+   Check the many parameters available for the `show ipv6 route` command:
+
+   .. code-block:: none
+
+      vyos@vyos:~$ show ipv6 route
+      Possible completions:
+        <Enter>       Execute the current command
+        <X:X::X:X>    Show IPv6 routes of given address or prefix
+        <X:X::X:X/M>
+        bgp           Show IPv6 BGP routes
+        cache         Show kernel IPv6 route cache
+        connected     Show IPv6 connected routes
+        forward       Show kernel IPv6 route table
+        isis          Show IPv6 ISIS routes
+        kernel        Show IPv6 kernel routes
+        ospfv3        Show IPv6 OSPF6 routes
+        ripng         Show IPv6 RIPNG routes
+        static        Show IPv6 static routes
+        summary       Show IPv6 routes summary
+        table         Show IP routes in policy table
+        vrf           Show IPv6 routes in VRF
+
+
+.. opcmd:: show ipv6 prefix-list
+
+   Use this command to show all IPv6 prefix lists
+
+   There are different parameters for getting prefix-list information:
+
+   .. code-block:: none
+
+      vyos@vyos:~$ show ipv6 prefix-list
+      Possible completions:
+        <Enter>       Execute the current command
+        <WORD>        Show specified IPv6 prefix-list
+        detail        Show detail of IPv6 prefix-lists
+        summary       Show summary of IPv6 prefix-lists
+
+.. opcmd:: show ipv6 access-list
+
+   Use this command to show all IPv6 access lists
+
+   You can also specify which IPv6 access-list should be shown:
+
+   .. code-block:: none
+
+      vyos@vyos:~$ show ipv6 access-list
+      Possible completions:
+        <Enter>       Execute the current command
+        <text>        Show specified IPv6 access-list
+
+.. opcmd:: show ipv6 bgp
+
+   Use this command to show IPv6 Border Gateway Protocol information.
+
+
+   In addition, you can specify many other parameters to get BGP
+   information:
+
+   .. code-block:: none
+
+      vyos@vyos:~$ show ipv6 bgp
+      Possible completions:
+        <Enter>       Execute the current command
+        <X:X::X:X>    Show BGP information for given address or prefix
+        <X:X::X:X/M>
+        community     Show routes matching the communities
+        community-list
+                      Show routes matching the community-list
+        filter-list   Show routes conforming to the filter-list
+        large-community
+                      Show routes matching the large-community-list
+        large-community-list
+        neighbors     Show detailed information on TCP and BGP neighbor connections
+        prefix-list   Show routes matching the prefix-list
+        regexp        Show routes matching the AS path regular expression
+        route-map     Show BGP routes matching the specified route map
+        summary       Show summary of BGP neighbor status
+
+
+.. opcmd:: show ipv6 ospfv3
+
+   Use this command to get information about OSPFv3.
+
+   You can get more specific OSPFv3 information by using the parameters
+   shown below:
+
+   .. code-block:: none
+
+      vyos@vyos:~$ show ipv6 ospfv3
+      Possible completions:
+        <Enter>       Execute the current command
+        area          Show OSPFv3 spf-tree information
+        border-routers
+                      Show OSPFv3 border-router (ABR and ASBR) information
+        database      Show OSPFv3 Link state database information
+        interface     Show OSPFv3 interface information
+        linkstate     Show OSPFv3 linkstate routing information
+        neighbor      Show OSPFv3 neighbor information
+        redistribute  Show OSPFv3 redistribute External information
+        route         Show OSPFv3 routing table information
+
+.. opcmd:: show ipv6 ripng
+
+   Use this command to get information about the RIPNG protocol
+
+.. opcmd:: show ipv6 ripng status
+
+   Use this command to show the status of the RIPNG protocol
+
+
+Reset commands
+^^^^^^^^^^^^^^
+
+.. opcmd:: reset ipv6 bgp <address>
+
+   Use this command to clear Border Gateway Protocol statistics or
+   status.
+
+
+.. opcmd:: reset ipv6 neighbors <address | interface>
+
+   Use this command to reset IPv6 Neighbor Discovery Protocol cache for
+   an address or interface.
+
+.. opcmd:: reset ipv6 route cache
+
+   Use this command to flush the kernel IPv6 route cache.
+   An address can be added to flush it only for that route.
\ No newline at end of file
diff --git a/docs/operation/index.rst b/docs/operation/index.rst
index 647b5b25..c19afeab 100644
--- a/docs/operation/index.rst
+++ b/docs/operation/index.rst
@@ -7,5 +7,4 @@ Operation Mode
    :includehidden:
 
    information
-   ip-commands
    boot-options
\ No newline at end of file
diff --git a/docs/operation/ip-commands.rst b/docs/operation/ip-commands.rst
deleted file mode 100644
index eba4fd90..00000000
--- a/docs/operation/ip-commands.rst
+++ /dev/null
@@ -1,258 +0,0 @@
-.. _ip-commands:
-
-###########
-IP commands
-###########
-
-IPv4
-====
-
-System configuration commands
------------------------------
-
-.. cfgcmd:: set system ip disable-forwarding
-
-   Use this command to disable IPv4 forwarding on all interfaces.
-
-.. cfgcmd:: set system ip arp table-size <number>
-
-   Use this command to define the maximum number of entries to keep in
-   the ARP cache (1024, 2048, 4096, 8192, 16384, 32768).
-
-.. cfgcmd:: set system ip multipath layer4-hashing
-
-   Use this command to use Layer 4 information for IPv4 ECMP hashing.
-
-
-Operational commands
---------------------
-
-show commands
-^^^^^^^^^^^^^
-
-See below the different parameters available for the IPv4 **show** command:
-
-.. code-block:: none
-
-   vyos@vyos:~$ show ip
-   Possible completions:
-     access-list   Show all IP access-lists
-     as-path-access-list
-                   Show all as-path-access-lists
-     bgp           Show Border Gateway Protocol (BGP) information
-     community-list
-                   Show IP community-lists
-     extcommunity-list
-                   Show extended IP community-lists
-     forwarding    Show IP forwarding status
-     groups        Show IP multicast group membership
-     igmp          Show IGMP (Internet Group Management Protocol) information
-     large-community-list
-                   Show IP large-community-lists
-     multicast     Show IP multicast
-     ospf          Show IPv4 Open Shortest Path First (OSPF) routing information
-     pim           Show PIM (Protocol Independent Multicast) information
-     ports         Show IP ports in use by various system services
-     prefix-list   Show all IP prefix-lists
-     protocol      Show IP route-maps per protocol
-     rip           Show Routing Information Protocol (RIP) information
-     route         Show IP routes
-
-
-reset commands
-^^^^^^^^^^^^^^
-
-And the different IPv4 **reset** commands available:
-
-.. code-block:: none
-
-   vyos@vyos:~$ reset ip
-   Possible completions:
-     arp           Reset Address Resolution Protocol (ARP) cache
-     bgp           Clear Border Gateway Protocol (BGP) statistics or status
-     igmp          IGMP clear commands
-     multicast     IP multicast routing table
-     route         Reset IP route
-
-IPv6
-====
-
-System configuration commands
------------------------------
-
-.. cfgcmd:: set system ipv6 disable
-
-   Use this command to disable assignment of IPv6 addresses on all
-   interfaces.
-
-.. cfgcmd:: set system ipv6 disable-forwarding
-
-   Use this command to disable IPv6 forwarding on all interfaces.
-
-.. cfgcmd:: set system ipv6 neighbor table-size <number>
-
-   Use this command to define the maximum number of entries to keep in
-   the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768).
-
-.. cfgcmd:: set system ipv6 strict-dad
-
-   Use this command to disable IPv6 operation on interface when
-   Duplicate Address Detection fails on Link-Local address.
-
-.. cfgcmd:: set system ipv6 multipath layer4-hashing
-
-   Use this command to user Layer 4 information for ECMP hashing.
-
-
-Operational commands
---------------------
-
-Show commands
-^^^^^^^^^^^^^
-
-.. opcmd:: show ipv6 neighbors
-
-   Use this command to show IPv6 Neighbor Discovery Protocol information.
-
-.. opcmd:: show ipv6 groups
-
-   Use this command to show IPv6 multicast group membership.
-
-.. opcmd:: show ipv6 forwarding
-
-   Use this command to show IPv6 forwarding status.
-
-.. opcmd:: show ipv6 route
-
-   Use this command to show IPv6 routes.
-
-   Check the many parameters available for the `show ipv6 route` command:
-
-   .. code-block:: none
-
-      vyos@vyos:~$ show ipv6 route
-      Possible completions:
-        <Enter>       Execute the current command
-        <X:X::X:X>    Show IPv6 routes of given address or prefix
-        <X:X::X:X/M>
-        bgp           Show IPv6 BGP routes
-        cache         Show kernel IPv6 route cache
-        connected     Show IPv6 connected routes
-        forward       Show kernel IPv6 route table
-        isis          Show IPv6 ISIS routes
-        kernel        Show IPv6 kernel routes
-        ospfv3        Show IPv6 OSPF6 routes
-        ripng         Show IPv6 RIPNG routes
-        static        Show IPv6 static routes
-        summary       Show IPv6 routes summary
-        table         Show IP routes in policy table
-        vrf           Show IPv6 routes in VRF
-
-
-.. opcmd:: show ipv6 prefix-list
-
-   Use this command to show all IPv6 prefix lists
-
-   There are different parameters for getting prefix-list information:
-
-   .. code-block:: none
-
-      vyos@vyos:~$ show ipv6 prefix-list
-      Possible completions:
-        <Enter>       Execute the current command
-        <WORD>        Show specified IPv6 prefix-list
-        detail        Show detail of IPv6 prefix-lists
-        summary       Show summary of IPv6 prefix-lists
-
-.. opcmd:: show ipv6 access-list
-
-   Use this command to show all IPv6 access lists
-
-   You can also specify which IPv6 access-list should be shown:
-
-   .. code-block:: none
-
-      vyos@vyos:~$ show ipv6 access-list
-      Possible completions:
-        <Enter>       Execute the current command
-        <text>        Show specified IPv6 access-list
-
-.. opcmd:: show ipv6 bgp
-
-   Use this command to show IPv6 Border Gateway Protocol information.
-
-
-   In addition, you can specify many other parameters to get BGP
-   information:
-
-   .. code-block:: none
-
-      vyos@vyos:~$ show ipv6 bgp
-      Possible completions:
-        <Enter>       Execute the current command
-        <X:X::X:X>    Show BGP information for given address or prefix
-        <X:X::X:X/M>
-        community     Show routes matching the communities
-        community-list
-                      Show routes matching the community-list
-        filter-list   Show routes conforming to the filter-list
-        large-community
-                      Show routes matching the large-community-list
-        large-community-list
-        neighbors     Show detailed information on TCP and BGP neighbor connections
-        prefix-list   Show routes matching the prefix-list
-        regexp        Show routes matching the AS path regular expression
-        route-map     Show BGP routes matching the specified route map
-        summary       Show summary of BGP neighbor status
-
-
-.. opcmd:: show ipv6 ospfv3
-
-   Use this command to get information about OSPFv3.
-
-   You can get more specific OSPFv3 information by using the parameters
-   shown below:
-
-   .. code-block:: none
-
-      vyos@vyos:~$ show ipv6 ospfv3
-      Possible completions:
-        <Enter>       Execute the current command
-        area          Show OSPFv3 spf-tree information
-        border-routers
-                      Show OSPFv3 border-router (ABR and ASBR) information
-        database      Show OSPFv3 Link state database information
-        interface     Show OSPFv3 interface information
-        linkstate     Show OSPFv3 linkstate routing information
-        neighbor      Show OSPFv3 neighbor information
-        redistribute  Show OSPFv3 redistribute External information
-        route         Show OSPFv3 routing table information
-
-.. opcmd:: show ipv6 ripng
-
-   Use this command to get information about the RIPNG protocol
-
-.. opcmd:: show ipv6 ripng status
-
-   Use this command to show the status of the RIPNG protocol
-
-
-Reset commands
-^^^^^^^^^^^^^^
-
-.. opcmd:: reset ipv6 bgp <address>
-
-   Use this command to clear Border Gateway Protocol statistics or
-   status.
-
-
-.. opcmd:: reset ipv6 neighbors <address | interface>
-
-   Use this command to reset IPv6 Neighbor Discovery Protocol cache for
-   an address or interface.
-
-.. opcmd:: reset ipv6 route cache
-
-   Use this command to flush the kernel IPv6 route cache.
-   An address can be added to flush it only for that route.
-

From 23fa394cb212ecf4f26e0816ccf390f989b84970 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 11:49:47 +0100
Subject: [PATCH 172/295] linter add start/stop function with rst comments

---
 .github/vyos-linter.py | 76 ++++++++++++++++++++++++------------------
 docs/documentation.rst | 11 ++++++
 2 files changed, 55 insertions(+), 32 deletions(-)

diff --git a/.github/vyos-linter.py b/.github/vyos-linter.py
index ebf00b2d..4a8108b8 100644
--- a/.github/vyos-linter.py
+++ b/.github/vyos-linter.py
@@ -74,43 +74,55 @@ def handle_file_action(filepath):
             line = fp.readline()
             cnt = 1
             test_line_lenght = True
+            start_vyoslinter = True
             indentation = 0
             while line:
-                # ignore every '.. code-block::' for line lenght
-                # rst code-block have its own style in html the format in rst
-                # and the build page must be the same
-                if test_line_lenght is False:
-                    if len(line) > indentation:
-                        #print(f"'{line}'")
-                        #print(indentation)
-                        if line[indentation].isspace() is False:
-                            test_line_lenght = True
+                # search for ignore linter comments in lines
+                if ".. stop_vyoslinter" in line:
+                    start_vyoslinter = False
+                if ".. start_vyoslinter" in line:
+                    start_vyoslinter = True
+                if start_vyoslinter:
+                    # ignore every '.. code-block::' for line lenght
+                    # rst code-block have its own style in html the format in rst
+                    # and the build page must be the same
+                    if test_line_lenght is False:
+                        if len(line) > indentation:
+                            #print(f"'{line}'")
+                            #print(indentation)
+                            if line[indentation].isspace() is False:
+                                test_line_lenght = True
 
-                if ".. code-block::" in line:
-                    test_line_lenght = False
-                    indentation = 0
-                    for i in line:
-                        if i.isspace():
-                            indentation = indentation + 1
-                        else:
-                            break
-                err_mac = lint_mac(cnt, line.strip())
-                err_ip4 = lint_ipv4(cnt, line.strip())
-                err_ip6 = lint_ipv6(cnt, line.strip())
-                if test_line_lenght:
-                    err_len = lint_linelen(cnt, line)
-                else:
-                    err_len = None
-                if err_mac:
-                    errors.append(err_mac)
-                if err_ip4:
-                    errors.append(err_ip4)
-                if err_ip6:
-                    errors.append(err_ip6)
-                if err_len:
-                    errors.append(err_len)
+                    if ".. code-block::" in line:
+                        test_line_lenght = False
+                        indentation = 0
+                        for i in line:
+                            if i.isspace():
+                                indentation = indentation + 1
+                            else:
+                                break
+                    err_mac = lint_mac(cnt, line.strip())
+                    err_ip4 = lint_ipv4(cnt, line.strip())
+                    err_ip6 = lint_ipv6(cnt, line.strip())
+                    if test_line_lenght:
+                        err_len = lint_linelen(cnt, line)
+                    else:
+                        err_len = None
+                    if err_mac:
+                        errors.append(err_mac)
+                    if err_ip4:
+                        errors.append(err_ip4)
+                    if err_ip6:
+                        errors.append(err_ip6)
+                    if err_len:
+                        errors.append(err_len)
+                
                 line = fp.readline()
                 cnt += 1
+            
+            # ensure linter was not stop on top and forgot to tun on again
+            if start_vyoslinter == False:
+                errors.append((f"Don't forgett to turn linter back on", cnt, 'error'))
     finally:
         fp.close()
 
diff --git a/docs/documentation.rst b/docs/documentation.rst
index f1dc8095..3a2bfdcb 100644
--- a/docs/documentation.rst
+++ b/docs/documentation.rst
@@ -163,6 +163,17 @@ Except in ``.. code-block::`` because it will use  the html tag ``<pre>``
 which have the save line format as in the rst file.
 
 
+Autolinter
+^^^^^^^^^^
+
+Each GitHub Pull request will automatically lint against the Address space and
+line length.
+
+Sometimes it is necessary to provide real IP Addresses like in the
+:ref:`examples`. For this please use the sphinx comment syntax
+``.. stop_vyoslinter`` to stop the linter and ``.. start_vyoslinter`` to start.
+
+
 Custom Sphinx-doc Markup
 ^^^^^^^^^^^^^^^^^^^^^^^^
 

From e3e08b3af1f91464b33da51a6f7020283f984c48 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 11:58:51 +0100
Subject: [PATCH 173/295] linter: fix line lenght detection, strip linebreak

---
 .github/vyos-linter.py | 1 +
 docs/documentation.rst | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/vyos-linter.py b/.github/vyos-linter.py
index 4a8108b8..bb58786d 100644
--- a/.github/vyos-linter.py
+++ b/.github/vyos-linter.py
@@ -64,6 +64,7 @@ def lint_AS(cnt, line):
 
 
 def lint_linelen(cnt, line):
+    line = line.rstrip()
     if len(line) > 80:
         return (f"Line too long: len={len(line)}", cnt, 'warning')
 
diff --git a/docs/documentation.rst b/docs/documentation.rst
index 3a2bfdcb..64531c32 100644
--- a/docs/documentation.rst
+++ b/docs/documentation.rst
@@ -157,7 +157,7 @@ Please don't use other public address space.
 Line length
 ^^^^^^^^^^^
 
-Limit all lines to a maximum of 79 characters.
+Limit all lines to a maximum of 80 characters.
 
 Except in ``.. code-block::`` because it will use  the html tag ``<pre>``
 which have the save line format as in the rst file.

From fe5075fbc5dab3a81bd6efb56912b4ce6d0ff32a Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 12:03:36 +0100
Subject: [PATCH 174/295] documentation: adjust line lenght

---
 docs/documentation.rst | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)

diff --git a/docs/documentation.rst b/docs/documentation.rst
index 64531c32..fde07cd7 100644
--- a/docs/documentation.rst
+++ b/docs/documentation.rst
@@ -36,9 +36,11 @@ access to the official codebase.
 
 * Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork
 
-* Clone fork to local machine, then change to that directory``$ cd vyos-documentation``
+* Clone fork to local machine, then change to that directory 
+  ``$ cd vyos-documentation``
 
-* Install the requirements ``$ pip install -r requirements.txt`` (or something similar)
+* Install the requirements ``$ pip install -r requirements.txt``
+  (or something similar)
 
 * Create new branch for your work, use a descriptive name of your work:
   ``$ git checkout -b <branch-name>``
@@ -47,8 +49,8 @@ access to the official codebase.
   (:ref:`prepare_commit`). This mainly applies to proper commit messages
   describing your change (how and why). Please check out the documentation of
   Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used
-  for writing our docs. Additional directives how to write in RST can be obtained
-  from reStructuredTextDirectives_.
+  for writing our docs. Additional directives how to write in RST can be
+  obtained from reStructuredTextDirectives_.
 
 * Check your changes by locally building the documentation ``$ make html``.
   Sphinx will build the html files in the ``docs/_build`` folder. We provide
@@ -302,8 +304,8 @@ For example:
   * ``set zone-policy`` is written in ``zone-policy/index.rst``
   * ``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``
 
-The article starts with a short intruducing about the command or the technologie.
-Please include some helpfull links or background informations.
+The article starts with a short intruducing about the command or the
+technologie. Please include some helpfull links or background informations.
 
 After this a optional section follows. Some commands have requirements like the
 compatible hardware (e.g. Wifi) or some commands you have to set before. For
@@ -334,9 +336,10 @@ Anything else what is not a configuration or a operation command have no
 predefined structure.
 
 
+.. stop_vyoslinter
 .. _Sphinx-doc: https://www.sphinx-doc.org
 .. _reStructuredText: http://www.sphinx-doc.org/en/master/usage/restructuredtext/index.html
 .. _reStructuredTextDirectives: https://docutils.sourceforge.io/docs/ref/rst/directives.html
 .. _README.md: https://github.com/vyos/vyos-documentation/blob/master/README.md
-
 .. include:: /_include/common-references.txt
+.. start_vyoslinter

From 5cc446f08bfc10173232eb56b2e46134fbb6fc1c Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 14:11:08 +0100
Subject: [PATCH 175/295] coverage: fix lint errors

---
 docs/coverage.rst | 34 +++++++++++++++++++++-------------
 1 file changed, 21 insertions(+), 13 deletions(-)

diff --git a/docs/coverage.rst b/docs/coverage.rst
index 896489fd..180dfe4b 100644
--- a/docs/coverage.rst
+++ b/docs/coverage.rst
@@ -2,29 +2,37 @@
 Coverage
 ########
 
-Overview over all commands, which are documented in the ``.. cfgcmd::`` or ``.. opcmd::`` Directives.
+Overview over all commands, which are documented in the
+``.. cfgcmd::`` or ``.. opcmd::`` Directives.
 
-| The build process take all xml definition files from `vyos-1x <https://github.com/vyos/vyos-1x>`_  and extract each leaf command or executable command.
-| After this the commands are compare and shown in the following two tables.
-| The script compare only the fixed part of a command. All varables or values will be erase and then compare:
+The build process take all xml definition files
+from `vyos-1x <https://github.com/vyos/vyos-1x>`_  and extract each leaf
+command or executable command. After this the commands are compare and shown in
+the following two tables. The script compare only the fixed part of a command.
+All varables or values will be erase and then compare:
 
 for example there are these two commands:
 
-  * documentation: ``interfaces ethernet <interface> address <address | dhcp | dhcpv6>```
+  * documentation: ``interfaces ethernet <interface> address
+    <address | dhcp | dhcpv6>```
   * xml: ``interface ethernet <ethernet> address <address>``
 
-Now the script earse all in between ``<`` and ``>`` and simply compare the strings.
+Now the script earse all in between ``<`` and ``>`` and simply compare
+the strings.
 
 **There are 2 kind of problems:**   
 
-| ``Not documented yet``
-| A XML command are not found in ``.. cfgcmd::`` or ``.. opcmd::`` Commands
-| The command should be documented
+``Not documented yet``
 
-| ``Nothing found in XML Definitions``: 
-| ``.. cfgcmd::`` or ``.. opcmd::`` Command are not found in a XML command
-| Maybe the command where changed in the XML Definition, or the feature is not anymore in VyOS
-| Some commands are not yet translated to XML
+  * A XML command are not found in ``.. cfgcmd::`` or ``.. opcmd::`` Commands
+  * The command should be documented
+
+``Nothing found in XML Definitions``
+
+  * ``.. cfgcmd::`` or ``.. opcmd::`` Command are not found in a XML command
+  * Maybe the command where changed in the XML Definition, or the feature is
+    not anymore in VyOS
+  * Some commands are not yet translated to XML
 
 
 Configuration Commands

From a370e97c1bc1c5545a58eed3bc7d7a4c70145b77 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 14:11:21 +0100
Subject: [PATCH 176/295] debugging: fix lint errors

---
 docs/debugging.rst | 28 +++++++++++++++-------------
 1 file changed, 15 insertions(+), 13 deletions(-)

diff --git a/docs/debugging.rst b/docs/debugging.rst
index e65e06ab..90313a88 100644
--- a/docs/debugging.rst
+++ b/docs/debugging.rst
@@ -29,7 +29,8 @@ Kernel
   CLI. In this circumstance, the kernel boot parameter ``vyos-config-debug``
   will ensure access to the system as user ``vyos``, and will log a Python
   stack trace to the file ``/tmp/boot-config-trace``.
-  File ``boot-config-trace`` will generate only if config loaded with a failure status.
+  File ``boot-config-trace`` will generate only if config loaded with a failure
+  status.
 
 Live System
 ===========
@@ -72,9 +73,9 @@ will have the same effect as ``touch /tmp/vyos.ifconfig.debug``.
   file. The default file is ``/tmp/full-log`` but it can be changed.
 
 .. note:: In order to retrieve the debug output on the command-line you need to
-  disable ``vyos-configd`` in addition. This can be run either one-time by calling
-  ``sudo systemctl stop vyos-configd`` or make this reboot-safe by calling
-  ``sudo systemctl disable vyos-configd``.
+  disable ``vyos-configd`` in addition. This can be run either one-time by
+  calling ``sudo systemctl stop vyos-configd`` or make this reboot-safe by
+  calling ``sudo systemctl disable vyos-configd``.
 
 Debugging Python Code with PDB
 ------------------------------
@@ -171,17 +172,18 @@ This can also be done permanently by changing ``/boot/grub/grub.cfg``.
 Priorities
 ==========
 
-VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def``
-file and possibly an attached script that is executed when the node is present.
-Nodes can have a priority, and on system bootup - or any other ``commit`` to the
-config all scripts are executed from lowest to higest priority. This is good as
-this gives a deterministic behavior.
+VyOS CLI is all about priorities. Every CLI node has a corresponding
+``node.def`` file and possibly an attached script that is executed when the
+node is present. Nodes can have a priority, and on system bootup - or any
+other ``commit`` to the config all scripts are executed from lowest to higest
+priority. This is good as this gives a deterministic behavior.
 
-To debug issues in priorities or to see what's going on in the background you can
-use the ``/opt/vyatta/sbin/priority.pl`` script which lists to you the execution
-order of the scripts.
+To debug issues in priorities or to see what's going on in the background
+you can use the ``/opt/vyatta/sbin/priority.pl`` script which lists to you
+the execution order of the scripts.
 
+.. stop_vyoslinter
 .. _vyatta-cfg: https://github.com/vyos/vyatta-cfg
 .. _bootchart.conf: https://github.com/vyos/vyos-build/blob/current/data/live-build-config/includes.chroot/etc/systemd/bootchart.conf
-
 .. include:: /_include/common-references.txt
+.. start_vyoslinter
\ No newline at end of file

From 4fd8e9cdf9418023e386fb0e5db2026cd2aca951 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 14:32:09 +0100
Subject: [PATCH 177/295] operation: fix linter errors

---
 docs/operation/boot-options.rst |  3 ++-
 docs/operation/information.rst  | 23 +++++++++++------------
 2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/docs/operation/boot-options.rst b/docs/operation/boot-options.rst
index d054748f..70cdc418 100644
--- a/docs/operation/boot-options.rst
+++ b/docs/operation/boot-options.rst
@@ -53,5 +53,6 @@ These options disable some boot steps. Make sure you understand the
       Do not perform config migration.
 
     no-vyos-firewall
-      Do not initialize default firewall chains, renders any firewall configuration unusable.
+      Do not initialize default firewall chains, renders any firewall
+      configuration unusable.
 
diff --git a/docs/operation/information.rst b/docs/operation/information.rst
index 02d6f1ec..ec2506cb 100644
--- a/docs/operation/information.rst
+++ b/docs/operation/information.rst
@@ -19,15 +19,15 @@ USB
 In the past serial interface have been defined as ttySx and ttyUSBx where x was
 an instance number of the serial interface. It was discovered that from system
 boot to system boot the mapping of USB based serial interfaces will differ,
-depending which driver was loaded first by the operating system. This will become
-rather painful if you not only have serial interfaces for a console server
-connected but in addition also a serial backed :ref:`wwan-interface`.
+depending which driver was loaded first by the operating system. This will
+become rather painful if you not only have serial interfaces for a console
+server connected but in addition also a serial backed :ref:`wwan-interface`.
 
-To overcome this issue and the fact that in almost 50% of all cheap USB to serial
-converters there is no serial number programmed, the USB to serial interface is
-now directly identified by the USB root bridge and bus it connects to. This
-somehow mimics the new network interface definitions we see in recend Linux
-distributions.
+To overcome this issue and the fact that in almost 50% of all cheap USB to
+serial converters there is no serial number programmed, the USB to serial
+interface is now directly identified by the USB root bridge and bus it connects
+to. This somehow mimics the new network interface definitions we see in recend
+Linux distributions.
 
 For additional details you can refer to https://phabricator.vyos.net/T2490.
 
@@ -69,9 +69,9 @@ For additional details you can refer to https://phabricator.vyos.net/T2490.
 
 .. opcmd:: show hardware usb serial
 
-  Retrieve a list and description of all connected USB serial devices. The device name
-  displayed, e.g. `usb0b2.4p1.0` can be directly used when accessing the serial console
-  as console-server device.
+  Retrieve a list and description of all connected USB serial devices. The
+  device name displayed, e.g. `usb0b2.4p1.0` can be directly used when accessing
+  the serial console as console-server device.
 
   .. code-block:: none
 
@@ -94,4 +94,3 @@ For additional details you can refer to https://phabricator.vyos.net/T2490.
     usb0b2.4p1.1     Quad_RS232-HS       Future Technology Devices International, Ltd
     usb0b2.4p1.2     Quad_RS232-HS       Future Technology Devices International, Ltd
     usb0b2.4p1.3     Quad_RS232-HS       Future Technology Devices International, Ltd
-

From 3ba03aeed5cd1a70bb0f9aa71439af25656781fc Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 14:32:32 +0100
Subject: [PATCH 178/295] l2tp: fix linter errors

---
 docs/configuration/vpn/l2tp.rst | 31 ++++++++++++++-----------------
 1 file changed, 14 insertions(+), 17 deletions(-)

diff --git a/docs/configuration/vpn/l2tp.rst b/docs/configuration/vpn/l2tp.rst
index 0d8dde08..d331ce2c 100644
--- a/docs/configuration/vpn/l2tp.rst
+++ b/docs/configuration/vpn/l2tp.rst
@@ -72,12 +72,8 @@ parameter to the client.
 
 .. code-block:: none
 
-  set vpn l2tp remote-access dns-servers server-1 '8.8.8.8'
-  set vpn l2tp remote-access dns-servers server-2 '8.8.4.4'
-
-.. note:: Those are the `Google public DNS`_ servers, but you can choose
-   any public available servers, like Quad9_ (9.9.9.9), Cloudflare_ (1.1.1.1)
-   or OpenNIC_.
+  set vpn l2tp remote-access dns-servers server-1 '198.51.100.8'
+  set vpn l2tp remote-access dns-servers server-2 '198.51.100.4'
 
 Established sessions can be viewed using the **show vpn remote-access**
 operational command, or **show l2tp-server sessions**
@@ -107,11 +103,11 @@ Below is an example to configure a LNS:
   set vpn l2tp remote-access authentication mode local
   set vpn l2tp remote-access authentication local-users username test password 'test'
 
-The example above uses 192.0.2.2 as external IP address. A LAC normally
-requires an authentication password, which is set in the example configuration
-to ``lns shared-secret 'secret'``. This setup requires the Compression Control
-Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ccp-disable``
-accomplishes that.
+The example above uses 192.0.2.2 as external IP address. A LAC normally requires
+an authentication password, which is set in the example configuration to
+``lns shared-secret 'secret'``. This setup requires the Compression Control
+Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access
+ccp-disable`` accomplishes that.
 
 
 Bandwidth Shaping
@@ -166,9 +162,9 @@ servers can be setup and will be used subsequentially.
 RADIUS source address
 ^^^^^^^^^^^^^^^^^^^^^
 
-If you are using OSPF as IGP always the closets interface connected to the RADIUS
-server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests to a
-single source IP e.g. the loopback interface.
+If you are using OSPF as IGP always the closets interface connected to the
+RADIUS server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests
+to a single source IP e.g. the loopback interface.
 
 .. code-block:: none
 
@@ -183,14 +179,15 @@ on this NAS.
 RADIUS bandwidth shaping attribute
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 
-To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled.
+To enable bandwidth shaping via RADIUS, the option rate-limit needs to be
+enabled.
 
 .. code-block:: none
 
   set vpn l2tp remote-access authentication radius rate-limit enable
 
-The default RADIUS attribute for rate limiting is ``Filter-Id``, but you may also
-redefine it.
+The default RADIUS attribute for rate limiting is ``Filter-Id``, but you may
+also redefine it.
 
 .. code-block:: none
 

From 2cc025a619ae94e8e59eb1a79c10fc74e9a3a59f Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 14:33:14 +0100
Subject: [PATCH 179/295] linter: improve IPv4 detection

---
 .github/vyos-linter.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/vyos-linter.py b/.github/vyos-linter.py
index bb58786d..ffa355c0 100644
--- a/.github/vyos-linter.py
+++ b/.github/vyos-linter.py
@@ -5,7 +5,7 @@ import sys
 import ast
 
 IPV4SEG  = r'(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])'
-IPV4ADDR = r'(?:(?:' + IPV4SEG + r'\.){3,3}' + IPV4SEG + r')'
+IPV4ADDR = r'\b(?:(?:' + IPV4SEG + r'\.){3,3}' + IPV4SEG + r')\b'
 IPV6SEG  = r'(?:(?:[0-9a-fA-F]){1,4})'
 IPV6GROUPS = (
     r'(?:' + IPV6SEG + r':){7,7}' + IPV6SEG,                  # 1:2:3:4:5:6:7:8
@@ -135,6 +135,7 @@ def handle_file_action(filepath):
         for error in errors:
             print(f"::{error[2]} file={filepath},line={error[1]}::{error[0]}")
         print('')
+        exit()
         return False
 
 

From 19596fd91ee067594957252768aed98579c1a4dc Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 14:54:50 +0100
Subject: [PATCH 180/295] vpn: fix lint errors

---
 docs/configuration/vpn/dmvpn.rst           |   3 +-
 docs/configuration/vpn/openconnect.rst     |   4 +-
 docs/configuration/vpn/pptp.rst            |  15 ++-
 docs/configuration/vpn/site2site_ipsec.rst | 112 +++++++++++++++------
 docs/configuration/vpn/sstp.rst            |  18 ++--
 5 files changed, 106 insertions(+), 46 deletions(-)

diff --git a/docs/configuration/vpn/dmvpn.rst b/docs/configuration/vpn/dmvpn.rst
index 62c0f002..f902c388 100644
--- a/docs/configuration/vpn/dmvpn.rst
+++ b/docs/configuration/vpn/dmvpn.rst
@@ -11,7 +11,8 @@ technologies are actually standards based. The three technologies are:
 
 * :abbr:`NHRP (Next Hop Resolution Protocol)` :rfc:`2332`
 * :abbr:`mGRE (Multipoint Generic Routing Encapsulation)` :rfc:`1702`
-* :abbr:`IPSec (IP Security)` - too many RFCs to list, but start with :rfc:`4301`
+* :abbr:`IPSec (IP Security)` - too many RFCs to list, but start with
+  :rfc:`4301`
 
 NHRP provides the dynamic tunnel endpoint discovery mechanism (endpoint
 registration, and endpoint discovery/lookup), mGRE provides the tunnel
diff --git a/docs/configuration/vpn/openconnect.rst b/docs/configuration/vpn/openconnect.rst
index a409ed9d..feb0bab1 100644
--- a/docs/configuration/vpn/openconnect.rst
+++ b/docs/configuration/vpn/openconnect.rst
@@ -72,8 +72,8 @@ The Gateway IP Address must be in one of the router´s interfaces.
   set vpn openconnect authentication local-users username user4 password 'SecretPassword'
   set vpn openconnect authentication mode 'local'
   set vpn openconnect network-settings client-ip-settings subnet '100.64.0.0/24'
-  set vpn openconnect network-settings name-server '1.1.1.1'
-  set vpn openconnect network-settings name-server '8.8.8.8'
+  set vpn openconnect network-settings name-server '10.1.1.1'
+  set vpn openconnect network-settings name-server '10.1.1.2'
   set vpn openconnect ssl ca-cert-file '/config/auth/fullchain.pem'
   set vpn openconnect ssl cert-file '/config/auth/cert.pem'
   set vpn openconnect ssl key-file '/config/auth/privkey.pem'
diff --git a/docs/configuration/vpn/pptp.rst b/docs/configuration/vpn/pptp.rst
index 72b3feb0..12364acb 100644
--- a/docs/configuration/vpn/pptp.rst
+++ b/docs/configuration/vpn/pptp.rst
@@ -3,11 +3,15 @@
 PPTP-Server
 -----------
 
-The Point-to-Point Tunneling Protocol (PPTP_) has been implemented in VyOS only for backwards compatibility.
-PPTP has many well known security issues and you should use one of the many other new VPN implementations.
+The Point-to-Point Tunneling Protocol (PPTP_) has been implemented in VyOS only
+for backwards compatibility. PPTP has many well known security issues and you 
+should use one of the many other new VPN implementations.
 
-As per default and if not otherwise defined, mschap-v2 is being used for authentication and mppe 128-bit (stateless) for encryption.
-If no gateway-address is set within the configuration, the lowest IP out of the /24 client-ip-pool is being used. For instance, in the example below it would be 192.168.0.1.
+As per default and if not otherwise defined, mschap-v2 is being used for
+authentication and mppe 128-bit (stateless) for encryption. If no
+gateway-address is set within the configuration, the lowest IP out of the /24
+client-ip-pool is being used. For instance, in the example below it would be
+192.168.0.1.
 
 server example
 ^^^^^^^^^^^^^^
@@ -25,7 +29,8 @@ server example
 client example (debian 9)
 ^^^^^^^^^^^^^^^^^^^^^^^^^
 
-Install the client software via apt and execute pptpsetup to generate the configuration.
+Install the client software via apt and execute pptpsetup to generate the
+configuration.
 
 
 .. code-block:: none
diff --git a/docs/configuration/vpn/site2site_ipsec.rst b/docs/configuration/vpn/site2site_ipsec.rst
index 97f27b43..e81c5c3b 100644
--- a/docs/configuration/vpn/site2site_ipsec.rst
+++ b/docs/configuration/vpn/site2site_ipsec.rst
@@ -3,103 +3,151 @@
 Site-to-Site
 ============
 
-Site-to-site mode provides a way to add remote peers, which could be configured to exchange encrypted information between them and VyOS itself or connected/routed networks.
+Site-to-site mode provides a way to add remote peers, which could be configured
+to exchange encrypted information between them and VyOS itself or
+connected/routed networks.
 
-To configure site-to-site connection you need to add peers with the ``set vpn ipsec site-to-site`` command.
+To configure site-to-site connection you need to add peers with the
+``set vpn ipsec site-to-site`` command.
 
 You can identify a remote peer with:
 
-* IPv4 or IPv6 address. This mode is easiest for configuration and mostly used when a peer has a public static IP address;
-* Hostname. This mode is similar to IP address, only you define DNS name instead of an IP. Could be used when a peer has a public IP address and DNS name, but an IP address could be changed from time to time;
-* Remote ID of the peer. In this mode, there is no predefined remote address nor DNS name of the peer. This mode is useful when a peer doesn't have a publicly available IP address (NAT between it and VyOS), or IP address could be changed.
+* IPv4 or IPv6 address. This mode is easiest for configuration and mostly used
+  when a peer has a public static IP address;
+* Hostname. This mode is similar to IP address, only you define DNS name instead
+  of an IP. Could be used when a peer has a public IP address and DNS name, but
+  an IP address could be changed from time to time;
+* Remote ID of the peer. In this mode, there is no predefined remote address
+  nor DNS name of the peer. This mode is useful when a peer doesn't have a
+  publicly available IP address (NAT between it and VyOS), or IP address could
+  be changed.
 
 Each site-to-site peer has the next options:
 
-* ``authentication`` - configure authentication between VyOS and a remote peer. Suboptions:
+* ``authentication`` - configure authentication between VyOS and a remote peer.
+  Suboptions:
 
- * ``id`` - ID for the local VyOS router. If defined, during the authentication it will be send to remote peer;
+ * ``id`` - ID for the local VyOS router. If defined, during the authentication
+   it will be send to remote peer;
 
  * ``mode`` - mode for authentication between VyOS and remote peer:
 
-  * ``pre-shared-secret`` - use predefined shared secret phrase, must be the same for local and remote side;
+  * ``pre-shared-secret`` - use predefined shared secret phrase, must be the
+    same for local and remote side;
 
-  * ``rsa`` - use simple shared RSA key. The key must be defined in the ``set vpn rsa-keys`` section;
+  * ``rsa`` - use simple shared RSA key. The key must be defined in the
+    ``set vpn rsa-keys`` section;
 
   * ``x509`` - use certificates infrastructure for authentication.
 
- * ``pre-shared-secret`` - predefined shared secret. Used if configured ``mode pre-shared-secret``;
+ * ``pre-shared-secret`` - predefined shared secret. Used if configured
+   ``mode pre-shared-secret``;
 
- * ``remote-id`` - define an ID for remote peer, instead of using peer name or address. Useful in case if the remote peer is behind NAT or if ``mode x509`` is used;
+ * ``remote-id`` - define an ID for remote peer, instead of using peer name or
+   address. Useful in case if the remote peer is behind NAT or if ``mode x509``
+   is used;
 
- * ``rsa-key-name`` - shared RSA key for authentication. The key must be defined in the ``set vpn rsa-keys`` section;
+ * ``rsa-key-name`` - shared RSA key for authentication. The key must be defined
+   in the ``set vpn rsa-keys`` section;
 
- * ``use-x509-id`` - use local ID from x509 certificate. Cannot be used when ``id`` is defined;
+ * ``use-x509-id`` - use local ID from x509 certificate. Cannot be used when
+   ``id`` is defined;
 
  * ``x509`` - options for x509 authentication mode:
 
-  * ``ca-cert-file`` - CA certificate file. Using for authenticating remote peer;
+  * ``ca-cert-file`` - CA certificate file. Using for authenticating
+    remote peer;
 
-  * ``cert-file`` - certificate file, which will be used for authenticating local router on remote peer;
+  * ``cert-file`` - certificate file, which will be used for authenticating
+    local router on remote peer;
 
-  * ``crl-file`` - file with the Certificate Revocation List. Using to check if a certificate for the remote peer is valid or revoked;
+  * ``crl-file`` - file with the Certificate Revocation List. Using to check if
+    a certificate for the remote peer is valid or revoked;
 
-  * ``key`` - a private key, which will be used for authenticating local router on remote peer:
+  * ``key`` - a private key, which will be used for authenticating local router
+    on remote peer:
 
    * ``file`` - path to the key file;
 
    * ``password`` - passphrase private key, if needed.
 
-* ``connection-type`` - how to handle this connection process. Possible variants:
+* ``connection-type`` - how to handle this connection process. Possible
+  variants:
 
- * ``initiate`` - do initial connection to remote peer immediately after configuring and after boot. In this mode the connection will not be restarted in case of disconnection, therefore should be used only together with DPD or another session tracking methods;
+ * ``initiate`` - do initial connection to remote peer immediately after
+   configuring and after boot. In this mode the connection will not be restarted
+   in case of disconnection, therefore should be used only together with DPD or
+   another session tracking methods;
 
- * ``respond`` - do not try to initiate a connection to a remote peer. In this mode, the IPSec session will be established only after initiation from a remote peer. Could be useful when there is no direct connectivity to the peer due to firewall or NAT in the middle of the local and remote side.
+ * ``respond`` - do not try to initiate a connection to a remote peer. In this
+   mode, the IPSec session will be established only after initiation from a
+   remote peer. Could be useful when there is no direct connectivity to the
+   peer due to firewall or NAT in the middle of the local and remote side.
 
-* ``default-esp-group`` - ESP group to use by default for traffic encryption. Might be overwritten by individual settings for tunnel or VTI interface binding;
+* ``default-esp-group`` - ESP group to use by default for traffic encryption.
+  Might be overwritten by individual settings for tunnel or VTI interface
+  binding;
 
 * ``description`` - description for this peer;
 
-* ``dhcp-interface`` - use an IP address, received from DHCP for IPSec connection with this peer, instead of ``local-address``;
+* ``dhcp-interface`` - use an IP address, received from DHCP for IPSec
+  connection with this peer, instead of ``local-address``;
 
-* ``force-encapsulation`` - force encapsulation of ESP into UDP datagrams. Useful in case if between local and remote side is firewall or NAT, which not allows passing plain ESP packets between them;
+* ``force-encapsulation`` - force encapsulation of ESP into UDP datagrams.
+  Useful in case if between local and remote side is firewall or NAT, which not
+  allows passing plain ESP packets between them;
 
 * ``ike-group`` - IKE group to use for key exchanges;
 
-* ``ikev2-reauth`` - reauthenticate remote peer during the rekeying process. Can be used only with IKEv2:
+* ``ikev2-reauth`` - reauthenticate remote peer during the rekeying process.
+  Can be used only with IKEv2:
 
- * ``yes`` - create a new IKE_SA from the scratch and try to recreate all IPsec SAs;
+ * ``yes`` - create a new IKE_SA from the scratch and try to recreate all
+   IPsec SAs;
 
  * ``no`` - rekey without uninstalling the IPsec SAs;
 
  * ``inherit`` - use default behavior for the used IKE group.
 
-* ``local-address`` - local IP address for IPSec connection with this peer. If defined ``any``, then an IP address which configured on interface with default route will be used;
+* ``local-address`` - local IP address for IPSec connection with this peer.
+  If defined ``any``, then an IP address which configured on interface with
+  default route will be used;
 
-* ``tunnel`` - define criteria for traffic to be matched for encrypting and send it to a peer:
+* ``tunnel`` - define criteria for traffic to be matched for encrypting and send
+  it to a peer:
 
  * ``disable`` - disable this tunnel;
 
  * ``esp-group`` - define ESP group for encrypt traffic, defined by this tunnel;
 
- * ``local`` - define a local source for match traffic, which should be encrypted and send to this peer:
+ * ``local`` - define a local source for match traffic, which should be
+   encrypted and send to this peer:
 
   * ``port`` - define port. Have effect only when used together with ``prefix``;
 
   * ``prefix`` - IP network at local side.
 
- * ``protocol`` - define the protocol for match traffic, which should be encrypted and send to this peer;
+ * ``protocol`` - define the protocol for match traffic, which should be
+   encrypted and send to this peer;
 
- * ``remote`` - define the remote destination for match traffic, which should be encrypted and send to this peer:
+ * ``remote`` - define the remote destination for match traffic, which should be
+   encrypted and send to this peer:
 
   * ``port`` - define port. Have effect only when used together with ``prefix``;
 
   * ``prefix`` - IP network at remote side.
 
-* ``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:
+* ``vti`` - use a VTI interface for traffic encryption. Any traffic, which will
+  be send to VTI interface will be encrypted and send to this peer. Using VTI
+  makes IPSec configuration much flexible and easier in complex situation, and
+  allows to dynamically add/delete remote networks, reachable via a peer, as in
+  this mode router don't need to create additional SA/policy for each remote
+  network:
 
  * ``bind`` - select a VTI interface to bind to this peer;
 
- * ``esp-group`` - define ESP group for encrypt traffic, passed this VTI interface.
+ * ``esp-group`` - define ESP group for encrypt traffic, passed this VTI
+   interface.
 
 Examples:
 ------------------
diff --git a/docs/configuration/vpn/sstp.rst b/docs/configuration/vpn/sstp.rst
index dbaa41c0..3600681f 100644
--- a/docs/configuration/vpn/sstp.rst
+++ b/docs/configuration/vpn/sstp.rst
@@ -64,7 +64,8 @@ commands can be used.
 Configuration
 =============
 
-.. cfgcmd:: set vpn sstp authentication local-users username <user> password <pass>
+.. cfgcmd:: set vpn sstp authentication local-users username <user> password
+   <pass>
 
   Create `<user>` for local authentication on this system. The users password
   will be set to `<pass>`.
@@ -73,19 +74,23 @@ Configuration
 
   Disable `<user>` account.
 
-.. cfgcmd:: set vpn sstp authentication local-users username <user> static-ip <address>
+.. cfgcmd:: set vpn sstp authentication local-users username <user> static-ip
+   <address>
 
   Assign static IP address to `<user>` account.
 
-.. cfgcmd:: set vpn sstp authentication local-users username <user> rate-limit download <bandwidth>
+.. cfgcmd:: set vpn sstp authentication local-users username <user> rate-limit
+   download <bandwidth>
 
   Download bandwidth limit in kbit/s for `<user>`.
 
-.. cfgcmd:: set vpn sstp authentication local-users username <user> rate-limit upload <bandwidth>
+.. cfgcmd:: set vpn sstp authentication local-users username <user> rate-limit
+   upload <bandwidth>
 
   Upload bandwidth limit in kbit/s for `<user>`.
 
-.. cfgcmd:: set vpn sstp authentication protocols <pap | chap | mschap | mschap-v2>
+.. cfgcmd:: set vpn sstp authentication protocols
+   <pap | chap | mschap | mschap-v2>
 
   Require the peer to authenticate itself using one of the following protocols:
   pap, chap, mschap, mschap-v2.
@@ -119,7 +124,8 @@ Configuration
   bit long, the default value is 64.
 
 
-.. cfgcmd:: set vpn sstp client-ipv6-pool delegate <address> delegation-prefix <number-of-bits>
+.. cfgcmd:: set vpn sstp client-ipv6-pool delegate <address> delegation-prefix
+   <number-of-bits>
 
   Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on
   SSTP. You will have to set your IPv6 pool and the length of the

From 4f5320bd55e6659be51a2d15b6df348b5d112937 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 15:08:50 +0100
Subject: [PATCH 181/295] system: fix lint errors

---
 docs/configuration/system/eventhandler.rst    |  9 +-
 docs/configuration/system/flow-accounting.rst |  3 +-
 docs/configuration/system/login.rst           | 12 ++-
 docs/configuration/system/name-server.rst     |  2 +
 docs/configuration/system/option.rst          | 24 +++--
 docs/configuration/system/syslog.rst          | 97 ++++++++++---------
 6 files changed, 84 insertions(+), 63 deletions(-)

diff --git a/docs/configuration/system/eventhandler.rst b/docs/configuration/system/eventhandler.rst
index a68b3924..3eab4e2c 100644
--- a/docs/configuration/system/eventhandler.rst
+++ b/docs/configuration/system/eventhandler.rst
@@ -3,9 +3,11 @@
 Event Handler
 -------------
 
-Event handler allows you to execute scripts when a string that matches a regex appears in a text stream (e.g. log file).
+Event handler allows you to execute scripts when a string that matches a regex
+appears in a text stream (e.g. log file).
 
-It uses "feeds" (output of commands, or a named pipes) and "policies" that define what to execute if a regex is matched.
+It uses "feeds" (output of commands, or a named pipes) and "policies" that
+define what to execute if a regex is matched.
 
 .. code-block:: none
 
@@ -27,7 +29,8 @@ It uses "feeds" (output of commands, or a named pipes) and "policies" that defin
           pattern <regex>
           run <command to run>
 
-In this small example a script runs every time a login failed and an interface goes down
+In this small example a script runs every time a login failed and an interface
+goes down
 
 .. code-block:: none
 
diff --git a/docs/configuration/system/flow-accounting.rst b/docs/configuration/system/flow-accounting.rst
index f09c1c9a..5bc737d6 100644
--- a/docs/configuration/system/flow-accounting.rst
+++ b/docs/configuration/system/flow-accounting.rst
@@ -121,7 +121,8 @@ NetFlow
 
    Per default every packet is sampled (that is, the sampling rate is 1).
 
-.. cfgcmd:: set system flow-accounting netflow timeout expiry-interval <interval>
+.. cfgcmd:: set system flow-accounting netflow timeout expiry-interval
+   <interval>
 
    Specifies the interval at which Netflow data will be sent to a collector. As
    per default, Netflow data will be sent every 60 seconds.
diff --git a/docs/configuration/system/login.rst b/docs/configuration/system/login.rst
index 6d89735f..0492f4d1 100644
--- a/docs/configuration/system/login.rst
+++ b/docs/configuration/system/login.rst
@@ -19,13 +19,15 @@ Local
    Create new system user with username `<name>` and real-name specified by
    `<string>`.
 
-.. cfgcmd:: set system login user <name> authentication plaintext-password <password>
+.. cfgcmd:: set system login user <name> authentication plaintext-password
+   <password>
 
    Specify the plaintext password user by user `<name>` on this system. The
    plaintext password will be automatically transferred into a secure hashed
    password and not saved anywhere in plaintext.
 
-.. cfgcmd:: set system login user <name> authentication encrypted-password <password>
+.. cfgcmd:: set system login user <name> authentication encrypted-password
+   <password>
 
    Setup encrypted password for given username. This is useful for
    transferring a hashed password from system to system.
@@ -50,12 +52,14 @@ and paste it. Some terminal emulators may accidentally split this over several
 lines. Be attentive when you paste it that it only pastes as a single line.
 The third part is simply an identifier, and is for your own reference.
 
-.. cfgcmd:: set system login user <username> authentication public-keys <identifier> key <key>
+.. cfgcmd:: set system login user <username> authentication public-keys
+   <identifier> key <key>
 
    Assign the SSH public key portion `<key>` identified by per-key
    `<identifier>` to the local user `<username>`.
 
-.. cfgcmd:: set system login user <username> authentication public-keys <identifier> type <type>
+.. cfgcmd:: set system login user <username> authentication public-keys
+   <identifier> type <type>
 
    Every SSH public key portion referenced by `<identifier>` requires the
    configuration of the `<type>` of public-key used. This type can be any of:
diff --git a/docs/configuration/system/name-server.rst b/docs/configuration/system/name-server.rst
index 59cfdb5d..1896eeda 100644
--- a/docs/configuration/system/name-server.rst
+++ b/docs/configuration/system/name-server.rst
@@ -28,6 +28,7 @@ Example
 In this example, some *OpenNIC* servers are used, two IPv4 addresses
 and two IPv6 addresses:
 
+.. stop_vyoslinter
 
 .. code-block:: none
 
@@ -36,6 +37,7 @@ and two IPv6 addresses:
    set system name-server 2a01:4f8:161:3441::1
    set system name-server 2a00:f826:8:2::195
 
+.. start_vyoslinter
 
 Domain search order
 ===================
diff --git a/docs/configuration/system/option.rst b/docs/configuration/system/option.rst
index e7661492..e029ec96 100644
--- a/docs/configuration/system/option.rst
+++ b/docs/configuration/system/option.rst
@@ -1,8 +1,8 @@
 .. _system_option:
 
-#######
-Options
-#######
+######
+Option
+######
 
 This chapter describe the possibilities of advanced system behavior.
 
@@ -36,7 +36,8 @@ HTTP client
    Several commands utilize curl to initiate transfers. Configure the local
    source interface used for all CURL operations.
 
-.. note:: `source-address` and `source-interface` can not be used at the same time.
+.. note:: `source-address` and `source-interface` can not be used at the same
+   time.
 
 ***************
 Keyboard Layout
@@ -69,15 +70,20 @@ earlier to pin certain interrupt handlers to specific CPUs.
 
 We now utilize `tuned` for dynamic resource balancing based on profiles.
 
-  .. seealso:: https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf
+.. stop_vyoslinter
+
+.. seealso:: https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf
+
+.. start_vyoslinter
 
 .. cfgcmd:: set system option performance < throughput | latency >
 
   Configure one of the predefined system performance profiles.
 
   * ``throughput``: A server profile focused on improving network throughput.
-    This profile favors performance over power savings by setting ``intel_pstate``
-    and ``max_perf_pct=100`` and increasing kernel network buffer sizes.
+    This profile favors performance over power savings by setting
+    ``intel_pstate`` and ``max_perf_pct=100`` and increasing kernel network
+    buffer sizes.
 
     It enables transparent huge pages, and uses cpupower to set the performance
     cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us,
@@ -85,8 +91,8 @@ We now utilize `tuned` for dynamic resource balancing based on profiles.
     40%.
 
   * ``latency``: A server profile focused on lowering network latency.
-    This profile favors performance over power savings by setting ``intel_pstate``
-    and ``min_perf_pct=100``.
+    This profile favors performance over power savings by setting
+    ``intel_pstate`` and ``min_perf_pct=100``.
 
     It disables transparent huge pages, and automatic NUMA balancing. It also
     uses cpupower to set the performance cpufreq governor, and requests a
diff --git a/docs/configuration/system/syslog.rst b/docs/configuration/system/syslog.rst
index 3449c15b..a4d641b5 100644
--- a/docs/configuration/system/syslog.rst
+++ b/docs/configuration/system/syslog.rst
@@ -22,9 +22,9 @@ Console
 
 .. cfgcmd:: set system syslog console facility <keyword> level <keyword>
 
-Log syslog messages to ``/dev/console``, for an explanation on
-:ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords
-see tables below.
+   Log syslog messages to ``/dev/console``, for an explanation on
+   :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords
+   see tables below.
 
 
 Custom File
@@ -32,20 +32,21 @@ Custom File
 
 .. cfgcmd:: set system syslog file <filename> facility <keyword> level <keyword>
 
-Log syslog messages to file specified via `<filename>`, for en explanation on
-:ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see
-tables below.
+   Log syslog messages to file specified via `<filename>`, for en explanation on
+   :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords
+   see tables below.
 
 .. cfgcmd:: set system syslog file <filename> archive size <size>
 
-Syslog will write `<size>` kilobytes into the file specified by `<filename>`.
-After this limit has been reached, the custom file is "rotated" by logrotate
-and a new custom file is created.
+   Syslog will write `<size>` kilobytes into the file specified by `<filename>`.
+   After this limit has been reached, the custom file is "rotated" by logrotate
+   and a new custom file is created.
 
 .. cfgcmd:: set system syslog file <filename> archive file <number>
 
-Syslog uses logrotate to rotate logiles after a number of gives bytes. We keep
-as many as `<number>` rotated file before they are deleted on the system.
+   Syslog uses logrotate to rotate logiles after a number of gives bytes.
+   We keep as many as `<number>` rotated file before they are deleted on the
+   system.
 
 
 Remote Host
@@ -59,16 +60,17 @@ sending the messages via port 514/UDP.
 
 .. cfgcmd:: set system syslog host <address> facility <keyword> level <keyword>
 
-Log syslog messages to remote host specified by `<address>`. The address can be
-specified by either FQDN or IP address. For en explanation on
-:ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see
-tables below.
+   Log syslog messages to remote host specified by `<address>`. The address
+   can be specified by either FQDN or IP address. For en explanation on
+   :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level`
+   keywords see tables below.
 
 
-.. cfgcmd:: set system syslog host <address> facility <keyword> protocol <udp|tcp>
+.. cfgcmd:: set system syslog host <address> facility <keyword> protocol
+   <udp|tcp>
 
-Configure protocol used for communication to remote syslog host. This can be
-either UDP or TCP.
+   Configure protocol used for communication to remote syslog host. This can be
+   either UDP or TCP.
 
 
 Local User Account
@@ -76,11 +78,11 @@ Local User Account
 
 .. cfgcmd:: set system syslog user <username> facility <keyword> level <keyword>
 
-If logging to a local user account is configured, all defined log messages are
-display on the console if the local user is logged in, if the user is not
-logged in, no messages are being displayed. For en explanation on
-:ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see
-tables below.
+   If logging to a local user account is configured, all defined log messages
+   are display on the console if the local user is logged in, if the user is not
+   logged in, no messages are being displayed. For en explanation on
+   :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords
+   see tables below.
 
 .. _syslog_facilities:
 
@@ -191,36 +193,39 @@ Display Logs
 
 .. opcmd:: show log [all | authorization | cluster | conntrack-sync | ...]
 
-Display log files of given category on the console. Use tab completion to get
-a list of available categories. Thos categories could be: all, authorization,
-cluster, conntrack-sync, dhcp, directory, dns, file, firewall, https, image
-lldp, nat, openvpn, snmp, tail, vpn, vrrp
+   Display log files of given category on the console. Use tab completion to get
+   a list of available categories. Thos categories could be: all, authorization,
+   cluster, conntrack-sync, dhcp, directory, dns, file, firewall, https, image
+   lldp, nat, openvpn, snmp, tail, vpn, vrrp
 
 If no option is specified, this defaults to `all`.
 
-.. opcmd:: show log image <name> [all | authorization | directory | file <file name> | tail <lines>]
+.. opcmd:: show log image <name>
+   [all | authorization | directory | file <file name> | tail <lines>]
 
-Log messages from a specified image can be displayed on the console. Details of
-allowed parameters:
+   Log messages from a specified image can be displayed on the console. Details
+   of allowed parameters:
 
-.. list-table::
-   :widths: 25 75
-   :header-rows: 0
+   .. list-table::
+      :widths: 25 75
+      :header-rows: 0
 
-   * - all
-     - Display contents of all master log files of the specified image
-   * - authorization
-     - Display all authorization attempts of the specified image
-   * - directory
-     - Display list of all user-defined log files of the specified image
-   * - file <file name>
-     - Display contents of a specified user-defined log file of the specified image
-   * - tail
-     - Display last lines of the system log of the specified image
-   * - <lines>
-     - Number of lines to be displayed, default 10
+      * - all
+        - Display contents of all master log files of the specified image
+      * - authorization
+        - Display all authorization attempts of the specified image
+      * - directory
+        - Display list of all user-defined log files of the specified image
+      * - file <file name>
+        - Display contents of a specified user-defined log file of the specified
+          image
+      * - tail
+        - Display last lines of the system log of the specified image
+      * - <lines>
+        - Number of lines to be displayed, default 10
 
 When no options/parameters are used, the contents of the main syslog file are
 displayed.
 
-.. hint:: Use ``show log | strip-private`` if you want to hide private data when sharing your logs.
+.. hint:: Use ``show log | strip-private`` if you want to hide private data
+   when sharing your logs.

From 9b52323fcebe74779dd125ba099aa1e2264a91ee Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 15:21:50 +0100
Subject: [PATCH 182/295] firewall: fix lint errors

---
 docs/configuration/firewall/index.rst | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/docs/configuration/firewall/index.rst b/docs/configuration/firewall/index.rst
index e95ecb53..04800b91 100644
--- a/docs/configuration/firewall/index.rst
+++ b/docs/configuration/firewall/index.rst
@@ -801,7 +801,8 @@ IPv4
 ====
 
 
-.. cfgcmd:: set firewall options interface <interface> adjust-mss <number-of-bytes>
+.. cfgcmd:: set firewall options interface <interface> adjust-mss
+   <number-of-bytes>
 
    Use this command to set the maximum segment size for IPv4 transit
    packets on a specific interface (500-1460 bytes).
@@ -823,7 +824,8 @@ for your WireGuard `wg02` tunnel.
 IPv6
 ====
 
-.. cfgcmd:: set firewall options interface <interface> adjust-mss6 <number-of-bytes>
+.. cfgcmd:: set firewall options interface <interface> adjust-mss6
+   <number-of-bytes>
 
    Use this command to set the maximum segment size for IPv6 transit
    packets on a specific interface (1280-1492 bytes).

From 982092409f7031757946dfde0d1e9af548a10229 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 15:22:08 +0100
Subject: [PATCH 183/295] vrrp: fix lint errors

---
 docs/configuration/highavailability/index.rst | 81 +++++++++++++------
 1 file changed, 57 insertions(+), 24 deletions(-)

diff --git a/docs/configuration/highavailability/index.rst b/docs/configuration/highavailability/index.rst
index ad714597..c4dc443f 100644
--- a/docs/configuration/highavailability/index.rst
+++ b/docs/configuration/highavailability/index.rst
@@ -3,21 +3,29 @@
 High availability
 =================
 
-VRRP (Virtual Redundancy Protocol) provides active/backup redundancy for routers.
-Every VRRP router has a physical IP/IPv6 address, and a virtual address.
-On startup, routers elect the master, and the router with the highest priority becomes the master and assigns the virtual address to its interface.
-All routers with lower priorities become backup routers. The master then starts sending keepalive packets to notify other routers that it's available.
-If the master fails and stops sending keepalive packets, the router with the next highest priority becomes the new master and takes over the virtual address.
+VRRP (Virtual Redundancy Protocol) provides active/backup redundancy for
+routers. Every VRRP router has a physical IP/IPv6 address, and a virtual
+address. On startup, routers elect the master, and the router with the highest
+priority becomes the master and assigns the virtual address to its interface.
+All routers with lower priorities become backup routers. The master then starts
+sending keepalive packets to notify other routers that it's available. If the
+master fails and stops sending keepalive packets, the router with the next
+highest priority becomes the new master and takes over the virtual address.
 
-VRRP keepalive packets use multicast, and VRRP setups are limited to a single datalink layer segment.
-You can setup multiple VRRP groups (also called virtual routers). Virtual routers are identified by a VRID (Virtual Router IDentifier).
-If you setup multiple groups on the same interface, their VRIDs must be unique, but it's possible (even if not recommended for readability reasons) to use duplicate VRIDs on different interfaces.
+VRRP keepalive packets use multicast, and VRRP setups are limited to a single
+datalink layer segment. You can setup multiple VRRP groups
+(also called virtual routers). Virtual routers are identified by a 
+VRID (Virtual Router IDentifier). If you setup multiple groups on the same 
+interface, their VRIDs must be unique, but it's possible (even if not
+recommended for readability reasons) to use duplicate VRIDs on different
+interfaces.
 
 Basic setup
 -----------
 
-VRRP groups are created with the ``set high-availability vrrp group $GROUP_NAME`` commands.
-The required parameters are interface, vrid, and virtual-address.
+VRRP groups are created with the
+``set high-availability vrrp group $GROUP_NAME`` commands. The required
+parameters are interface, vrid, and virtual-address.
 
 minimal config
 
@@ -27,7 +35,8 @@ minimal config
   set high-availability vrrp group Foo interface eth0
   set high-availability vrrp group Foo virtual-address 192.0.2.1/24
 
-You can verify your VRRP group status with the operational mode ``run show vrrp`` command:
+You can verify your VRRP group status with the operational mode
+``run show vrrp`` command:
 
 .. code-block:: none
 
@@ -39,7 +48,9 @@ You can verify your VRRP group status with the operational mode ``run show vrrp`
 IPv6 support
 ------------
 
-The ``virtual-address`` parameter can be either an IPv4 or IPv6 address, but you cannot mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6.
+The ``virtual-address`` parameter can be either an IPv4 or IPv6 address, but you
+cannot mix IPv4 and IPv6 in the same group, and will need to create groups with
+different VRIDs specially for IPv4 and IPv6.
 
 Disabling a VRRP group
 ----------------------
@@ -50,7 +61,9 @@ You can disable a VRRP group with ``disable`` option:
 
   set high-availability vrrp group Foo disable
 
-A disabled group will be removed from the VRRP process and your router will not participate in VRRP for that VRID. It will disappear from operational mode commands output, rather than enter the backup state.
+A disabled group will be removed from the VRRP process and your router will not
+participate in VRRP for that VRID. It will disappear from operational mode
+commands output, rather than enter the backup state.
 
 Setting VRRP group priority
 ---------------------------
@@ -61,7 +74,8 @@ VRRP priority can be set with ``priority`` option:
 
   set high-availability vrrp group Foo priority 200
 
-The priority must be an integer number from 1 to 255. Higher priority value increases router's precedence in the master elections.
+The priority must be an integer number from 1 to 255. Higher priority value
+increases router's precedence in the master elections.
 
 Sync groups
 -----------
@@ -98,21 +112,29 @@ In the following example, when VLAN9 transitions, VLAN20 will also transition:
     }
 
 
-.. warning:: All items in a sync group should be similarly configured.  If one VRRP group is set to a different premption delay or priority, it would result in an endless transition loop.
+.. warning:: All items in a sync group should be similarly configured. 
+   If one VRRP group is set to a different premption delay or priority,
+   it would result in an endless transition loop.
 
 
 Preemption
 ----------
 
-VRRP can use two modes: preemptive and non-preemptive. In the preemptive mode, if a router with a higher priority fails and then comes back, routers with lower priority will give up their master status. In non-preemptive mode, the newly elected master will keep the master status and the virtual address indefinitely.
+VRRP can use two modes: preemptive and non-preemptive. In the preemptive mode,
+if a router with a higher priority fails and then comes back, routers with lower
+priority will give up their master status. In non-preemptive mode, the newly
+elected master will keep the master status and the virtual address indefinitely.
 
-By default VRRP uses preemption. You can disable it with the "no-preempt" option:
+By default VRRP uses preemption. You can disable it with the "no-preempt"
+option:
 
 .. code-block:: none
 
   set high-availability vrrp group Foo no-preempt
 
-You can also configure the time interval for preemption with the "preempt-delay" option. For example, to set the higher priority router to take over in 180 seconds, use:
+You can also configure the time interval for preemption with the "preempt-delay"
+option. For example, to set the higher priority router to take over in 180
+seconds, use:
 
 .. code-block:: none
 
@@ -121,7 +143,9 @@ You can also configure the time interval for preemption with the "preempt-delay"
 Unicast VRRP
 ------------
 
-By default VRRP uses multicast packets. If your network does not support multicast for whatever reason, you can make VRRP use unicast communication instead.
+By default VRRP uses multicast packets. If your network does not support
+multicast for whatever reason, you can make VRRP use unicast communication
+instead.
 
 .. code-block:: none
 
@@ -131,13 +155,19 @@ By default VRRP uses multicast packets. If your network does not support multica
 Scripting
 ---------
 
-VRRP functionality can be extended with scripts. VyOS supports two kinds of scripts: health check scripts and transition scripts. Health check scripts execute custom checks in addition to the master router reachability.
-Transition scripts are executed when VRRP state changes from master to backup or fault and vice versa and can be used to enable or disable certain services, for example.
+VRRP functionality can be extended with scripts. VyOS supports two kinds of
+scripts: health check scripts and transition scripts. Health check scripts
+execute custom checks in addition to the master router reachability. Transition
+scripts are executed when VRRP state changes from master to backup or fault and
+vice versa and can be used to enable or disable certain services, for example.
 
 Health check scripts
 ^^^^^^^^^^^^^^^^^^^^
 
-This setup will make the VRRP process execute the ``/config/scripts/vrrp-check.sh script`` every 60 seconds, and transition the group to the fault state if it fails (i.e. exits with non-zero status) three times:
+This setup will make the VRRP process execute the
+``/config/scripts/vrrp-check.sh script`` every 60 seconds, and transition the
+group to the fault state if it fails (i.e. exits with non-zero status) three
+times:
 
 .. code-block:: none
 
@@ -148,8 +178,11 @@ This setup will make the VRRP process execute the ``/config/scripts/vrrp-check.s
 Transition scripts
 ^^^^^^^^^^^^^^^^^^
 
-Transition scripts can help you implement various fixups, such as starting and stopping services, or even modifying the VyOS config on VRRP transition.
-This setup will make the VRRP process execute the ``/config/scripts/vrrp-fail.sh`` with argument ``Foo`` when VRRP fails, and the ``/config/scripts/vrrp-master.sh`` when the router becomes the master:
+Transition scripts can help you implement various fixups, such as starting and
+stopping services, or even modifying the VyOS config on VRRP transition.
+This setup will make the VRRP process execute the
+``/config/scripts/vrrp-fail.sh`` with argument ``Foo`` when VRRP fails,
+and the ``/config/scripts/vrrp-master.sh`` when the router becomes the master:
 
 .. code-block:: none
 

From 5159bb1dffac9d55e80b417284136d9ca897fb30 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 15:22:43 +0100
Subject: [PATCH 184/295] wanlb: fix lint errors

---
 docs/configuration/loadbalancing/index.rst | 126 ++++++++++++++-------
 1 file changed, 85 insertions(+), 41 deletions(-)

diff --git a/docs/configuration/loadbalancing/index.rst b/docs/configuration/loadbalancing/index.rst
index 6b0bede9..7d675c1b 100644
--- a/docs/configuration/loadbalancing/index.rst
+++ b/docs/configuration/loadbalancing/index.rst
@@ -4,8 +4,11 @@ WAN load balancing
 ==================
 
 Outbound traffic can be balanced between two or more outbound interfaces.
-If a path fails, traffic is balanced across the remaining healthy paths, a recovered path is automatically added back to the routing table and used by the load balancer.
-The load balancer automatically adds routes for each path to the routing table and balances traffic across the configured interfaces, determined by interface health and weight.
+If a path fails, traffic is balanced across the remaining healthy paths,
+a recovered path is automatically added back to the routing table and used by 
+the load balancer. The load balancer automatically adds routes for each path to
+the routing table and balances traffic across the configured interfaces,
+determined by interface health and weight.
 
 
 In a minimal, configuration the following must be provided:
@@ -26,9 +29,11 @@ Let's assume we have two DHCP WAN interfaces and one LAN (eth2):
 Balancing Rules
 ---------------
 
-Interfaces, their weight and the type of traffic to be balanced are defined in numbered balancing rule sets.
-The rule sets are executed in numerical order against outgoing packets. In case of a match the packet is sent through an interface specified in the matching rule.
-If a packet doesn't match any rule it is sent by using the system routing table. Rule numbers can't be changed.
+Interfaces, their weight and the type of traffic to be balanced are defined in
+numbered balancing rule sets. The rule sets are executed in numerical order
+against outgoing packets. In case of a match the packet is sent through an
+interface specified in the matching rule. If a packet doesn't match any rule
+it is sent by using the system routing table. Rule numbers can't be changed.
 
 Create a load balancing rule, rule can be a number between 1 and 9999:
 
@@ -50,8 +55,10 @@ Create a load balancing rule, rule can be a number between 1 and 9999:
 Interface weight
 ****************
 
-Let's expand the example from above and add a weight to the interfaces. The bandwidth from eth0 is larger than eth1.
-Per default outbound traffic is distributed randomly across available interfaces. Weights can be assigned to interfaces to influence the balancing.
+Let's expand the example from above and add a weight to the interfaces.
+The bandwidth from eth0 is larger than eth1. Per default outbound traffic is
+distributed randomly across available interfaces. Weights can be assigned to
+interfaces to influence the balancing.
 
 .. code-block:: none
 
@@ -63,15 +70,18 @@ Per default outbound traffic is distributed randomly across available interfaces
 Rate limit
 **********
 
-A packet rate limit can be set for a rule to apply the rule to traffic above or below a specified threshold.
-To configure the rate limiting use:
+A packet rate limit can be set for a rule to apply the rule to traffic above or
+below a specified threshold. To configure the rate limiting use:
 
 .. code-block:: none
 
     set load-balancing wan rule <rule> limit <parameter>
 
-* ``burst``: Number of packets allowed to overshoot the limit within ``period``. Default 5.
-* ``period``: Time window for rate calculation. Possible values: ``second`` (one second), ``minute`` (one minute), ``hour`` (one hour). Default is ``second``.
+* ``burst``: Number of packets allowed to overshoot the limit within ``period``.
+  Default 5.
+* ``period``: Time window for rate calculation. Possible values:
+  ``second`` (one second), ``minute`` (one minute), ``hour`` (one hour).
+  Default is ``second``.
 * ``rate``: Number of packets. Default 5.
 * ``threshold``: ``below`` or ``above`` the specified rate limit.
 
@@ -79,11 +89,15 @@ Flow and packet-based balancing
 *******************************
 
 Outgoing traffic is balanced in a flow-based manner.
-A connection tracking table is used to track flows by their source address, destination address and port.
-Each flow is assigned to an interface according to the defined balancing rules and subsequent packets are sent through the same interface.
-This has the advantage that packets always arrive in order if links with different speeds are in use.
+A connection tracking table is used to track flows by their source address,
+destination address and port. Each flow is assigned to an interface according
+to the defined balancing rules and subsequent packets are sent through the
+same interface. This has the advantage that packets always arrive in order if
+links with different speeds are in use.
 
-Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:
+Packet-based balancing can lead to a better balance across interfaces when out
+of order packets are no issue. Per-packet-based balancing can be set for a
+balancing rule with:
 
 .. code-block:: none
 
@@ -92,7 +106,8 @@ Packet-based balancing can lead to a better balance across interfaces when out o
 Exclude traffic
 ***************
 
-To exclude traffic from load balancing, traffic matching an exclude rule is not balanced but routed through the system routing table instead:
+To exclude traffic from load balancing, traffic matching an exclude rule is not
+balanced but routed through the system routing table instead:
 
 .. code-block:: none
 
@@ -102,8 +117,11 @@ To exclude traffic from load balancing, traffic matching an exclude rule is not
 Health checks
 -------------
 
-The health of interfaces and paths assigned to the load balancer is periodically checked by sending ICMP packets (ping) to remote destinations, a TTL test or the execution of a user defined script.
-If an interface fails the health check it is removed from the load balancer's pool of interfaces. To enable health checking for an interface:
+The health of interfaces and paths assigned to the load balancer is
+periodically checked by sending ICMP packets (ping) to remote destinations,
+a TTL test or the execution of a user defined script. If an interface fails the
+health check it is removed from the load balancer's pool of interfaces.
+To enable health checking for an interface:
 
 .. code-block:: none
 
@@ -114,22 +132,26 @@ If an interface fails the health check it is removed from the load balancer's po
     success-count    Success count
     +> test          Rule number
 
-Specify nexthop on the path to destination, ``ipv4-address`` can be set to ``dhcp``
+Specify nexthop on the path to destination, ``ipv4-address`` can be set to
+``dhcp``
 
 .. code-block:: none
 
     set load-balancing wan interface-health <interface> nexthop <ipv4-address>
 
-Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1.
-Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1.
+Set the number of health check failures before an interface is marked as
+unavailable, range for number is 1 to 10, default 1. Or set the number of
+successful health checks before an interface is added back to the interface
+pool, range for number is 1 to 10, default 1.
 
 .. code-block:: none
 
     set load-balancing wan interface-health <interface> failure-count <number>
     set load-balancing wan interface-health <interface> success-count <number>
 
-Each health check is configured in its own test, tests are numbered and processed in numeric order.
-For multi target health checking multiple tests can be defined:
+Each health check is configured in its own test, tests are numbered and
+processed in numeric order. For multi target health checking multiple tests
+can be defined:
 
 .. code-block:: none
 
@@ -141,17 +163,28 @@ For multi target health checking multiple tests can be defined:
     ttl-limit    Ttl limit (hop count)
     type         WLB test type
 
-* ``resp-time``: the maximum response time for ping in seconds. Range 1...30, default 5
-* ``target``: the target to be sent ICMP packets to, address can be an IPv4 address or hostname
-* ``test-script``: A user defined script must return 0 to be considered successful and non-zero to fail. Scripts are located in /config/scripts, for different locations the full path needs to be provided
-* ``ttl-limit``: For the UDP TTL limit test the hop count limit must be specified. The limit must be shorter than the path length, an ICMP time expired message is needed to be returned for a successful test. default 1
-* ``type``: Specify the type of test. type can be ping, ttl or a user defined script
+* ``resp-time``: the maximum response time for ping in seconds.
+  Range 1...30, default 5
+* ``target``: the target to be sent ICMP packets to, address can be an IPv4
+  address or hostname
+* ``test-script``: A user defined script must return 0 to be considered
+  successful and non-zero to fail. Scripts are located in /config/scripts,
+  for different locations the full path needs to be provided
+* ``ttl-limit``: For the UDP TTL limit test the hop count limit must be
+  specified. The limit must be shorter than the path length, an ICMP time
+  expired message is needed to be returned for a successful test. default 1
+* ``type``: Specify the type of test. type can be ping, ttl or a user defined
+  script
 
 Source NAT rules
 ----------------
 
-Per default, interfaces used in a load balancing pool replace the source IP of each outgoing packet with its own address to ensure that replies arrive on the same interface.
-This works through automatically generated source NAT (SNAT) rules, these rules are only applied to balanced traffic. In cases where this behaviour is not desired, the automatic generation of SNAT rules can be disabled:
+Per default, interfaces used in a load balancing pool replace the source IP
+of each outgoing packet with its own address to ensure that replies arrive on
+the same interface. This works through automatically generated source NAT (SNAT)
+rules, these rules are only applied to balanced traffic. In cases where this
+behaviour is not desired, the automatic generation of SNAT rules can be
+disabled:
 
 .. code-block:: none
 
@@ -159,14 +192,16 @@ This works through automatically generated source NAT (SNAT) rules, these rules
 
 Sticky Connections
 ------------------
-Inbound connections to a WAN interface can be improperly handled when the reply is sent back to the client.
+Inbound connections to a WAN interface can be improperly handled when the reply
+is sent back to the client.
 
 .. image:: /_static/images/sticky-connections.jpg
    :width: 80%
    :align: center
 
 
-Upon reception of an incoming packet, when a response is sent, it might be desired to ensure that it leaves from the same interface as the inbound one.
+Upon reception of an incoming packet, when a response is sent, it might be
+desired to ensure that it leaves from the same interface as the inbound one.
 This can be achieved by enabling sticky connections in the load balancing:
 
 .. code-block:: none
@@ -176,17 +211,23 @@ This can be achieved by enabling sticky connections in the load balancing:
 Failover
 --------
 
-In failover mode, one interface is set to be the primary interface and other interfaces are secondary or spare.
-Instead of balancing traffic across all healthy interfaces, only the primary interface is used and in case of failure, a secondary interface selected from the pool of available interfaces takes over.
-The primary interface is selected based on its weight and health, others become secondary interfaces.
-Secondary interfaces to take over a failed primary interface are chosen from the load balancer's interface pool, depending on their weight and health.
-Interface roles can also be selected based on rule order by including interfaces in balancing rules and ordering those rules accordingly. To put the load balancer in failover mode, create a failover rule:
+In failover mode, one interface is set to be the primary interface and other
+interfaces are secondary or spare. Instead of balancing traffic across all
+healthy interfaces, only the primary interface is used and in case of failure,
+a secondary interface selected from the pool of available interfaces takes over.
+The primary interface is selected based on its weight and health, others become
+secondary interfaces. Secondary interfaces to take over a failed primary
+interface are chosen from the load balancer's interface pool, depending
+on their weight and health. Interface roles can also be selected based on rule
+order by including interfaces in balancing rules and ordering those rules
+accordingly. To put the load balancer in failover mode, create a failover rule:
 
 .. code-block:: none
 
     set load-balancing wan rule <number> failover
 
-Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:
+Because existing sessions do not automatically fail over to a new path,
+the session table can be flushed on each connection state change:
 
 .. code-block:: none
 
@@ -194,12 +235,14 @@ Because existing sessions do not automatically fail over to a new path, the sess
 
 .. warning::
 
-    Flushing the session table will cause other connections to fall back from flow-based to packet-based balancing until each flow is reestablished.
+    Flushing the session table will cause other connections to fall back from
+    flow-based to packet-based balancing until each flow is reestablished.
 
 Script execution
 ----------------
 
-A script can be run when an interface state change occurs. Scripts are run from /config/scripts, for a different location specify the full path:
+A script can be run when an interface state change occurs. Scripts are run
+from /config/scripts, for a different location specify the full path:
 
 .. code-block:: none
 
@@ -212,7 +255,8 @@ Two environment variables are available:
 
 .. warning::
 
-    Blocking call with no timeout. System will become unresponsive if script does not return!
+    Blocking call with no timeout. System will become unresponsive if script
+    does not return!
 
 Handling and monitoring
 -----------------------

From 4cc8f6785a521a4d39599977f77295880c259747 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 15:23:01 +0100
Subject: [PATCH 185/295] nat: fix lint errors

---
 docs/configuration/nat/index.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/configuration/nat/index.rst b/docs/configuration/nat/index.rst
index 5aeffb63..f0f5bd6a 100644
--- a/docs/configuration/nat/index.rst
+++ b/docs/configuration/nat/index.rst
@@ -173,8 +173,8 @@ rule.
     set nat destination rule 20 inbound-interface eth1
 
 * **protocol** - specify which types of protocols this translation rule
-  applies to. Only packets matching the specified protocol are NATed. By default this
-  applies to `all` protocols.
+  applies to. Only packets matching the specified protocol are NATed.
+  By default this applies to `all` protocols.
 
   Example:
 
@@ -194,13 +194,13 @@ rule.
 
   * Set SNAT rule 20 to only NAT packets arriving from the 192.0.2.0/24
     network
-  * Set SNAT rule 30 to only NAT packets arriving from the 192.0.3.0/24
+  * Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24
     network with a source port of 80 and 443
 
   .. code-block:: none
 
     set nat source rule 20 source address 192.0.2.0/24
-    set nat source rule 30 source address 192.0.3.0/24
+    set nat source rule 30 source address 203.0.113.0/24
     set nat source rule 30 source port 80,443
 
 

From 3afc419634ab8aea2fc2458c8d74e7af839fe9e0 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 15:23:15 +0100
Subject: [PATCH 186/295] vrf: fix lint errors

---
 docs/configuration/vrf/index.rst | 59 ++++++++++++++++++++------------
 1 file changed, 37 insertions(+), 22 deletions(-)

diff --git a/docs/configuration/vrf/index.rst b/docs/configuration/vrf/index.rst
index a47175f2..a311fcc0 100644
--- a/docs/configuration/vrf/index.rst
+++ b/docs/configuration/vrf/index.rst
@@ -23,8 +23,8 @@ then enslaved to a VRF device.
 
 .. cfgcmd:: set vrf name <name>
 
-   Create new VRF instance with `<name>`. The name is used when placing individual
-   interfaces into the VRF.
+   Create new VRF instance with `<name>`. The name is used when placing
+   individual interfaces into the VRF.
 
 .. cfgcmd:: set vrf name <name> table <id>
 
@@ -50,7 +50,8 @@ Interfaces
 When VRFs are used it is not only mandatory to create a VRF but also the VRF
 itself needs to be assigned to an interface.
 
-.. cfgcmd:: set interfaces <dummy | ethernet | bonding | bridge | pppoe> <interface> vrf <name>
+.. cfgcmd:: set interfaces <dummy | ethernet | bonding | bridge | pppoe>
+   <interface> vrf <name>
 
    Assign interface identified by `<interface>` to VRF named `<name>`.
 
@@ -79,11 +80,13 @@ Static Routes
    Configure next-hop `<address>` for an IPv4 static route in the VRF identified
    by `<name>`. Multiple static routes can be created.
 
-.. cfgcmd:: set protocols vrf <name> static route <subnet> next-hop <address> disable
+.. cfgcmd:: set protocols vrf <name> static route <subnet> next-hop <address>
+   disable
 
    Disable IPv4 static route entry in the VRF identified by `<name>`
 
-.. cfgcmd:: set protocols vrf <name> static route <subnet> next-hop <address> distance <distance>
+.. cfgcmd:: set protocols vrf <name> static route <subnet> next-hop <address>
+   distance <distance>
 
    Defines next-hop distance for this route, routes with smaller administrative
    distance are elected prior those with a higher distance.
@@ -95,11 +98,13 @@ Static Routes
    Configure next-hop `<address>` for an IPv6 static route in the VRF identified
    by `<name>`. Multiple IPv6 static routes can be created.
 
-.. cfgcmd:: set protocols vrf <name> static route6 <subnet> next-hop <address> disable
+.. cfgcmd:: set protocols vrf <name> static route6 <subnet> next-hop <address>
+   disable
 
    Disable IPv6 static route entry in the VRF identified by `<name>`.
 
-.. cfgcmd:: set protocols vrf <name> static route6 <subnet> next-hop <address> distance <distance>
+.. cfgcmd:: set protocols vrf <name> static route6 <subnet> next-hop <address>
+   distance <distance>
 
    Defines next-hop distance for this route, routes with smaller administrative
    distance are elected prior those with a higher distance.
@@ -113,14 +118,16 @@ Static Routes
 Leaking
 """""""
 
-.. cfgcmd:: set protocols vrf <name> static route <subnet> next-hop <address> next-hop-vrf <default | vrf-name>
+.. cfgcmd:: set protocols vrf <name> static route <subnet> next-hop <address>
+   next-hop-vrf <default | vrf-name>
 
    Use this command if you have shared services or routes that should be shared
    between multiple VRF instances. This will add an IPv4 route to VRF `<name>`
    routing table to reach a `<subnet>` via a next-hop gatewys `<address>` in
    a different VRF or leak it into the default VRF.
 
-.. cfgcmd:: set protocols vrf <name> static route6 <subnet> next-hop <address> next-hop-vrf <default | vrf-name>
+.. cfgcmd:: set protocols vrf <name> static route6 <subnet> next-hop <address>
+   next-hop-vrf <default | vrf-name>
 
    Use this command if you have shared services or routes that should be shared
    between multiple VRF instances. This will add an IPv6 route to VRF `<name>`
@@ -131,34 +138,40 @@ Leaking
 Interface Routes
 """"""""""""""""
 
-.. cfgcmd:: set protocols vrf <name> static interface-route <subnet> next-hop-interface <interface>
+.. cfgcmd:: set protocols vrf <name> static interface-route <subnet>
+   next-hop-interface <interface>
 
    Allows you to configure the next-hop interface for an interface-based IPv4
    static route. `<interface>` will be the next-hop interface where trafic is
    routed for the given `<subnet>`.
 
-.. cfgcmd:: set protocols vrf <name> static interface-route <subnet> next-hop-interface <interface> disable
+.. cfgcmd:: set protocols vrf <name> static interface-route <subnet>
+   next-hop-interface <interface> disable
 
    Disables interface-based IPv4 static route.
 
-.. cfgcmd:: set protocols vrf <name> static interface-route <subnet> next-hop-interface <interface> distance <distance>
+.. cfgcmd:: set protocols vrf <name> static interface-route <subnet>
+   next-hop-interface <interface> distance <distance>
 
    Defines next-hop distance for this route, routes with smaller administrative
    distance are elected prior those with a higher distance.
 
    Range is 1 to 255, default is 1.
 
-.. cfgcmd:: set protocols vrf <name> static interface-route6 <subnet> next-hop-interface <interface>
+.. cfgcmd:: set protocols vrf <name> static interface-route6 <subnet>
+   next-hop-interface <interface>
 
    Allows you to configure the next-hop interface for an interface-based IPv6
    static route. `<interface>` will be the next-hop interface where trafic is
    routed for the given `<subnet>`.
 
-.. cfgcmd:: set protocols vrf <name> static interface-route6 <subnet> next-hop-interface <interface> disable
+.. cfgcmd:: set protocols vrf <name> static interface-route6 <subnet>
+   next-hop-interface <interface> disable
 
    Disables interface-based IPv6 static route.
 
-.. cfgcmd:: set protocols vrf <name> static interface-route6 <subnet> next-hop-interface <interface> distance <distance>
+.. cfgcmd:: set protocols vrf <name> static interface-route6 <subnet>
+   next-hop-interface <interface> distance <distance>
 
    Defines next-hop distance for this route, routes with smaller administrative
    distance are elected prior those with a higher distance.
@@ -176,7 +189,8 @@ Blackhole
    it does not prevent them from being used as a more specific route inside your
    network.
 
-.. cfgcmd:: set protocols vrf <name> static route <subnet> blackhole distance <distance>
+.. cfgcmd:: set protocols vrf <name> static route <subnet> blackhole distance
+   <distance>
 
    Defines blackhole distance for this route, routes with smaller administrative
    distance are elected prior those with a higher distance.
@@ -189,7 +203,8 @@ Blackhole
    it does not prevent them from being used as a more specific route inside your
    network.
 
-.. cfgcmd:: set protocols vrf <name> static route6 <subnet> blackhole distance <distance>
+.. cfgcmd:: set protocols vrf <name> static route6 <subnet> blackhole distance
+   <distance>
 
    Defines blackhole distance for this route, routes with smaller administrative
    distance are elected prior those with a higher distance.
@@ -210,11 +225,11 @@ For VR Fmaintenance the followin operational commands are in place.
      vyos@vyos:~$ show vrf
      VRF name          state     mac address        flags                     interfaces
      --------          -----     -----------        -----                     ----------
-     blue              up        de:c4:83:d8:74:24  noarp,master,up,lower_up  dum200,eth0.302
-     red               up        be:36:ce:02:df:aa  noarp,master,up,lower_up  dum100,eth0.300,bond0.100,peth0
+     blue              up        00:53:12:d8:74:24  noarp,master,up,lower_up  dum200,eth0.302
+     red               up        00:53:de:02:df:aa  noarp,master,up,lower_up  dum100,eth0.300,bond0.100,peth0
 
-   .. note:: Command should probably be extended to list also the real interfaces
-      assigned to this one VRF to get a better overview.
+   .. note:: Command should probably be extended to list also the real
+      interfaces assigned to this one VRF to get a better overview.
 
 .. opcmd:: show vrf <name>
 
@@ -223,7 +238,7 @@ For VR Fmaintenance the followin operational commands are in place.
      vyos@vyos:~$ show vrf name blue
      VRF name          state     mac address        flags                     interfaces
      --------          -----     -----------        -----                     ----------
-     blue              up        de:c4:83:d8:74:24  noarp,master,up,lower_up  dum200,eth0.302
+     blue              up        00:53:12:d8:74:24  noarp,master,up,lower_up  dum200,eth0.302
 
 .. opcmd:: show ip route vrf <name>
 

From e0b72be4b9d08cd5f23141a87c192adc97e07a74 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 15:23:29 +0100
Subject: [PATCH 187/295] qos: fix lint errors

---
 docs/configuration/trafficpolicy/index.rst | 86 ++++++++++++++--------
 1 file changed, 55 insertions(+), 31 deletions(-)

diff --git a/docs/configuration/trafficpolicy/index.rst b/docs/configuration/trafficpolicy/index.rst
index babccd6f..856ae01c 100644
--- a/docs/configuration/trafficpolicy/index.rst
+++ b/docs/configuration/trafficpolicy/index.rst
@@ -119,8 +119,8 @@ Matching traffic
 ----------------
 
 In order to define which traffic goes into which class, you define
-filters (that is, the matching criteria). Packets go through these matching rules
-(as in the rules of a firewall) and, if a packet matches the filter, it
+filters (that is, the matching criteria). Packets go through these matching
+rules (as in the rules of a firewall) and, if a packet matches the filter, it
 is assigned to that class.
 
 In VyOS, a class is identified by a number you can choose when
@@ -194,7 +194,8 @@ different parameters you can configure.
  
 
 As shown in the example above, one of the possibilities to match packets
-is based on marks done by the firewall, `that can give you a great deal of flexibility`_.
+is based on marks done by the firewall,
+`that can give you a great deal of flexibility`_.
 
 You can also write a description for a filter:
 
@@ -204,12 +205,12 @@ You can also write a description for a filter:
 
 
 
-.. note:: An IPv4 TCP filter will only match packets with an IPv4 header length of
-   20 bytes (which is the majority of IPv4 packets anyway).
+.. note:: An IPv4 TCP filter will only match packets with an IPv4 header
+   length of 20 bytes (which is the majority of IPv4 packets anyway).
 
 
-.. note:: IPv6 TCP filters will only match IPv6 packets with no header extension, see
-   https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers
+.. note:: IPv6 TCP filters will only match IPv6 packets with no header
+   extension, see https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers
 
 
 Default
@@ -250,9 +251,9 @@ possibilities depending on the Traffic Policy you are configuring.
       target       fq-codel - Acceptable minimum queue delay (milliseconds)
    
 
-For instance, with :code:`set traffic-policy shaper MY-SHAPER class 30 set-dscp EF`
-you would be modifying the DSCP field value of packets in that class to
-Expedite Forwarding.
+For instance, with :code:`set traffic-policy shaper MY-SHAPER
+class 30 set-dscp EF` you would be modifying the DSCP field value of packets in
+that class to Expedite Forwarding.
 
 
   DSCP values as per :rfc:`2474` and :rfc:`4595`:
@@ -371,7 +372,8 @@ This is the policy that requieres the lowest resources for the same
 amount of traffic. But **very likely you do not need it as you cannot
 get much from it. Sometimes it is used just to enable logging.**
 
-.. cfgcmd:: set traffic-policy drop-tail <policy-name> queue-limit <number-of-packets>
+.. cfgcmd:: set traffic-policy drop-tail <policy-name> queue-limit
+   <number-of-packets>
 
    Use this command to configure a drop-tail policy (PFIFO). Choose a
    unique name for this policy and the size of the queue by setting the
@@ -509,7 +511,8 @@ and increase `interval` to something around 150 ms.
    persistent queue is developing, ensuring that the measured minimum
    delay does not become too stale (default: 100ms).
 
-.. cfgcmd:: set traffic-policy fq-codel <policy-name> queue-limit <number-of-packets>`
+.. cfgcmd:: set traffic-policy fq-codel <policy-name> queue-limit
+   <number-of-packets>`
 
    Use this command to configure an fq-codel policy, set its name, and
    define a hard limit on the real queue size. When this limit is
@@ -562,7 +565,8 @@ the configured classes.
   **inbound** traffic, check the ingress-shaping_ section.
 
 
-.. cfgcmd:: set traffic-policy limiter <policy-name> class <class ID> match <match-name> description <description>
+.. cfgcmd:: set traffic-policy limiter <policy-name> class <class ID> match
+   <match-name> description <description>
 
    Use this command to configure an Ingress Policer, defining its name,
    a class identifier (1-4090), a class matching rule name and its
@@ -573,14 +577,16 @@ Once the matching rules are set for a class, you can start configuring
 how you want matching traffic to behave.
 
 
-.. cfgcmd:: set traffic-policy limiter <policy-name> class <class-ID> bandwidth <rate>
+.. cfgcmd:: set traffic-policy limiter <policy-name> class <class-ID> bandwidth
+   <rate>
 
    Use this command to configure an Ingress Policer, defining its name,
    a class identifier (1-4090) and the maximum allowed bandwidth for
    this class.
 
 
-.. cfgcmd:: set traffic-policy limiter <policy-name> class <class-ID> burst <burst-size>
+.. cfgcmd:: set traffic-policy limiter <policy-name> class <class-ID> burst
+   <burst-size>
 
    Use this command to configure an Ingress Policer, defining its name,
    a class identifier (1-4090) and the burst size in bytes for this
@@ -599,7 +605,8 @@ how you want matching traffic to behave.
    and the burst size in bytes (default: 15) for its default policy.
 
 
-.. cfgcmd:: set traffic-policy limiter <policy-name> class <class ID> priority <value>
+.. cfgcmd:: set traffic-policy limiter <policy-name> class <class ID> priority
+   <value>
 
    Use this command to configure an Ingress Policer, defining its name,
    a class identifier (1-4090), and the priority (0-20, default 20) in
@@ -636,7 +643,8 @@ under certain network conditions.
    Token Bucket Filter qdisc). Default:15kb. It will only take effect if
    you have configured its bandwidth too.
 
-.. cfgcmd:: set traffic-policy network-emulator <policy-name> network-delay <delay>
+.. cfgcmd:: set traffic-policy network-emulator <policy-name> network-delay
+   <delay>
    
    Use this command to configure a Network Emulator policy defining its
    name and the fixed amount of time you want to add to all packet going
@@ -645,26 +653,30 @@ under certain network conditions.
    configured its bandwidth too. You can use secs, ms and us. Default:
    50ms.
 
-.. cfgcmd:: set traffic-policy network-emulator <policy-name> packet-corruption <percent>
+.. cfgcmd:: set traffic-policy network-emulator <policy-name> packet-corruption
+   <percent>
    
    Use this command to emulate noise in a Network Emulator policy. Set
    the policy name and the percentage of corrupted packets you want. A
    random error will be introduced in a random position for the chosen
    percent of packets.
 
-.. cfgcmd:: set traffic-policy network-emulator <policy-name> packet-loss <percent>`
+.. cfgcmd:: set traffic-policy network-emulator <policy-name> packet-loss
+   <percent>
    
    Use this command to emulate packet-loss conditions in a Network
    Emulator policy. Set the policy name and the percentage of loss
    packets your traffic will suffer.
 
-.. cfgcmd:: set traffic-policy network-emulator <policy-name> packet-reordering <percent>`
+.. cfgcmd:: set traffic-policy network-emulator <policy-name> packet-reordering
+   <percent>
    
    Use this command to emulate packet-reordering conditions in a Network
    Emulator policy. Set the policy name and the percentage of reordered
    packets your traffic will suffer.
 
-.. cfgcmd:: set traffic-policy network-emulator <policy-name> queue-limit <limit>
+.. cfgcmd:: set traffic-policy network-emulator <policy-name> queue-limit
+   <limit>
    
    Use this command to define the length of the queue of your Network
    Emulator policy. Set the policy name and the maximum number of
@@ -735,7 +747,8 @@ setting:
                    Random Early Detection (RED)
 
 
-.. cfgcmd:: set traffic-policy priority-queue <policy-name> class <class-ID>  queue-limit <limit>`
+.. cfgcmd:: set traffic-policy priority-queue <policy-name> class <class-ID> 
+   queue-limit <limit>`
 
    Use this command to configure a Priority Queue policy, set its name,
    set a class with a priority from 1 to 7 and define a hard limit on
@@ -804,7 +817,8 @@ algorithm might be to prevent a backbone overload. But only for TCP
    set to the bandwidth of your interface. Random Detect is not a
    shaping policy, this command will not shape.
 
-.. cfgcmd:: set traffic-policy random-detect <policy-name> precedence <IP-precedence-value> average-packet <bytes>
+.. cfgcmd:: set traffic-policy random-detect <policy-name> precedence
+   <IP-precedence-value> average-packet <bytes>
    
    Use this command to configure a Random-Detect policy and set its
    name, then state the IP Precedence for the virtual queue you are
@@ -814,7 +828,8 @@ algorithm might be to prevent a backbone overload. But only for TCP
 .. note:: When configuring a Random-Detect policy: **the higher the
    precedence number, the higher the priority**.
 
-.. cfgcmd:: set traffic-policy random-detect <policy-name> precedence <IP-precedence-value> mark-probability <value>
+.. cfgcmd:: set traffic-policy random-detect <policy-name> precedence
+   <IP-precedence-value> mark-probability <value>
    
    Use this command to configure a Random-Detect policy and set its
    name, then state the IP Precedence for the virtual queue you are
@@ -822,7 +837,8 @@ algorithm might be to prevent a backbone overload. But only for TCP
    probability by giving the N value of the fraction 1/N (default: 10).
 
 
-.. cfgcmd:: set traffic-policy random-detect <policy-name> precedence <IP-precedence-value> maximum-threshold <packets>
+.. cfgcmd:: set traffic-policy random-detect <policy-name> precedence
+   <IP-precedence-value> maximum-threshold <packets>
    
    Use this command to configure a Random-Detect policy and set its
    name, then state the IP Precedence for the virtual queue you are
@@ -830,7 +846,8 @@ algorithm might be to prevent a backbone overload. But only for TCP
    be (from 0 to 4096 packets, default: 18). At this size, the marking
    (drop) probability is maximal.
 
-.. cfgcmd:: set traffic-policy random-detect <policy-name> precedence <IP-precedence-value> minimum-threshold <packets>
+.. cfgcmd:: set traffic-policy random-detect <policy-name> precedence
+   <IP-precedence-value> minimum-threshold <packets>
    
    Use this command to configure a Random-Detect policy and set its
    name, then state the IP Precedence for the virtual queue you are
@@ -862,7 +879,8 @@ The default values for the minimum-threshold depend on IP precedence:
  +------------+-----------------------+
 
 
-.. cfgcmd:: set traffic-policy random-detect <policy-name> precedence <IP-precedence-value> queue-limit <packets>
+.. cfgcmd:: set traffic-policy random-detect <policy-name> precedence
+   <IP-precedence-value> queue-limit <packets>
    
    Use this command to configure a Random-Detect policy and set its
    name, then name the IP Precedence for the virtual queue you are
@@ -1023,25 +1041,29 @@ the higher the priority.
    and the maximum bandwidth for all combined traffic.
 
 
-.. cfgcmd:: set traffic-policy shaper <policy-name> class <class-ID> bandwidth <rate>
+.. cfgcmd:: set traffic-policy shaper <policy-name> class <class-ID> bandwidth
+   <rate>
 
    Use this command to configure a Shaper policy, set its name, define
    a class and set the guaranteed traffic you want to allocate to that
    class.
 
-.. cfgcmd:: set traffic-policy shaper <policy-name> class <class-ID> burst <bytes>
+.. cfgcmd:: set traffic-policy shaper <policy-name> class <class-ID> burst
+   <bytes>
 
    Use this command to configure a Shaper policy, set its name, define
    a class and set the size of the `tocken bucket`_ in bytes, which will
    be available to be sent at ceiling speed (default: 15Kb).
 
-.. cfgcmd:: set traffic-policy shaper <policy-name> class <class-ID> ceiling <bandwidth>
+.. cfgcmd:: set traffic-policy shaper <policy-name> class <class-ID> ceiling
+   <bandwidth>
 
    Use this command to configure a Shaper policy, set its name, define
    a class and set the maximum speed possible for this class. The
    default ceiling value is the bandwidth value.
 
-.. cfgcmd:: set traffic-policy shaper <policy-name> class <class-ID> priority <0-7>
+.. cfgcmd:: set traffic-policy shaper <policy-name> class <class-ID> priority
+   <0-7>
 
    Use this command to configure a Shaper policy, set its name, define
    a class and set the priority for usage of available bandwidth once
@@ -1195,8 +1217,10 @@ That is how it is possible to do the so-called "ingress shaping".
   which can be solved with ``sudo ip link delete ifb0``.
 
 
+.. stop_vyoslinter
 .. _that can give you a great deal of flexibility: https://blog.vyos.io/using-the-policy-route-and-packet-marking-for-custom-qos-matches
 .. _tc: https://en.wikipedia.org/wiki/Tc_(Linux)
 .. _tocken bucket: https://en.wikipedia.org/wiki/Token_bucket
 .. _HFSC: https://en.wikipedia.org/wiki/Hierarchical_fair-service_curve
 .. _Intermediate Functional Block: https://www.linuxfoundation.org/collaborate/workgroups/networking/ifb
+.. start_vyoslinter
\ No newline at end of file

From da08cd126cd9eee8284ed9a3d68d74be68087e76 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 16:02:04 +0100
Subject: [PATCH 188/295] service: fix lint errors

---
 docs/configuration/service/conntrack-sync.rst |   3 +-
 docs/configuration/service/console-server.rst |   3 +-
 docs/configuration/service/dhcp-server.rst    | 116 +++++++++++-------
 docs/configuration/service/dhcpv6-relay.rst   |   2 -
 docs/configuration/service/dhcpv6-server.rst  |   2 -
 docs/configuration/service/dns.rst            |  73 ++++++-----
 docs/configuration/service/https.rst          |  33 +++--
 docs/configuration/service/index.rst          |   2 -
 docs/configuration/service/ipoe-server.rst    |   8 +-
 docs/configuration/service/lldp.rst           |   3 +-
 docs/configuration/service/pppoe-server.rst   |  34 +++--
 docs/configuration/service/router-advert.rst  |  14 ++-
 docs/configuration/service/snmp.rst           |   7 ++
 docs/configuration/service/ssh.rst            |  22 ++--
 docs/configuration/service/webproxy.rst       |  10 +-
 15 files changed, 212 insertions(+), 120 deletions(-)
 delete mode 100644 docs/configuration/service/dhcpv6-relay.rst
 delete mode 100644 docs/configuration/service/dhcpv6-server.rst

diff --git a/docs/configuration/service/conntrack-sync.rst b/docs/configuration/service/conntrack-sync.rst
index 55cd088e..3c9f08e4 100644
--- a/docs/configuration/service/conntrack-sync.rst
+++ b/docs/configuration/service/conntrack-sync.rst
@@ -119,7 +119,8 @@ Now configure conntrack-sync service on ``router1`` **and** ``router2``
   set service conntrack-sync mcast-group '225.0.0.50'
   set service conntrack-sync sync-queue-size '8'
 
-If you are using VRRP, you need to define a VRRP sync-group, and use ``vrrp sync-group`` instead of ``cluster group``.
+If you are using VRRP, you need to define a VRRP sync-group, and use
+``vrrp sync-group`` instead of ``cluster group``.
 
 .. code-block:: none
 
diff --git a/docs/configuration/service/console-server.rst b/docs/configuration/service/console-server.rst
index cf222544..a509723e 100644
--- a/docs/configuration/service/console-server.rst
+++ b/docs/configuration/service/console-server.rst
@@ -44,7 +44,8 @@ second. This is also the default setting if none of those options are defined.
   Configure either one or two stop bits. This defaults to one stop bits if
   left unconfigured.
 
-.. cfgcmd:: set service console-server <device> speed [ 300 | 1200 | 2400 | 4800 | 9600 | 19200 | 38400 | 57600 | 115200 ]
+.. cfgcmd:: set service console-server <device> speed 
+   [ 300 | 1200 | 2400 | 4800 | 9600 | 19200 | 38400 | 57600 | 115200 ]
 
   .. note:: USB to serial converters will handle most of their work in software
      so you should be carefull with the selected baudrate as some times they
diff --git a/docs/configuration/service/dhcp-server.rst b/docs/configuration/service/dhcp-server.rst
index 6cb0bc83..3946256e 100644
--- a/docs/configuration/service/dhcp-server.rst
+++ b/docs/configuration/service/dhcp-server.rst
@@ -30,49 +30,57 @@ Configuration
    any device trying to request an IP address that is not valid for this
    network.
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> default-router <address>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet>
+   default-router <address>
 
    This is a configuration parameter for the `<subnet>`, saying that as part of
    the response, tell the client that the default gateway can be reached at
    `<address>`.
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> dns-server <address>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet>
+   dns-server <address>
 
    This is a configuration parameter for the subnet, saying that as part of the
    response, tell the client that the DNS server can be found at `<address>`.
 
    Multiple DNS servers can be defined.
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> lease <time>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet>
+   lease <time>
 
    Assign the IP address to this machine for `<time>` seconds.
 
    The default value is 86400 seconds which corresponds to one day.
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> range <n> start <address>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet>
+   range <n> start <address>
 
    Create DHCP address range with a range id of `<n>`. DHCP leases are taken
    from this pool. The pool starts at address `<address>`.
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> range <n> stop <address>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet>
+   range <n> stop <address>
 
    Create DHCP address range with a range id of `<n>`. DHCP leases are taken
    from this pool. The pool stops with address `<address>`.
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> exclude <address>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet>
+   exclude <address>
 
    Always exclude this address from any defined range. This address will never
    be assigned by the DHCP server.
 
    This option can be specified multiple times.
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> domain-name <domain-name>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet>
+   domain-name <domain-name>
 
    The domain-name parameter should be the domain name that will be appended to
    the client's hostname to form a fully-qualified domain-name (FQDN) (DHCP
    Option 015).
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> domain-search <domain-name>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet>
+   domain-search <domain-name>
 
    The domain-name parameter should be the domain name used when completing DNS
    request where no full FQDN is passed. This option can be given multiple times
@@ -84,21 +92,26 @@ Failover
 VyOS provides support for DHCP failover. DHCP failover must be configured
 explicitly by the following statements.
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> failover local-address <address>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet
+   <subnet> failover local-address <address>
 
    Local IP `<address>` used when communicating to the failover peer.
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> failover peer-address <address>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet
+   <subnet> failover peer-address <address>
 
-   Remote peer IP `<address>` of the second DHCP server in this failover cluster.
+   Remote peer IP `<address>` of the second DHCP server in this failover
+   cluster.
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> failover name <name>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet
+   <subnet> failover name <name>
 
    A generic `<name>` referencing this sync service.
 
    .. note:: `<name>` must be identical on both sides!
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> failover status <primary | secondary>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet
+   <subnet> failover status <primary | secondary>
 
    The primary and secondary statements determines whether the server is primary
    or secondary.
@@ -109,11 +122,11 @@ explicitly by the following statements.
 
    .. hint:: The dialogue between failover partners is neither encrypted nor
       authenticated. Since most DHCP servers exist within an organisation's own
-      secure Intranet, this would be an unnecessary overhead. However, if you have
-      DHCP failover peers whose communications traverse insecure networks, then we
-      recommend that you consider the use of VPN tunneling between them to ensure
-      that the failover partnership is immune to disruption (accidental or
-      otherwise) via third parties.
+      secure Intranet, this would be an unnecessary overhead. However, if you
+      have DHCP failover peers whose communications traverse insecure networks,
+      then we recommend that you consider the use of VPN tunneling between them
+      to ensure that the failover partnership is immune to disruption
+      (accidental or otherwise) via third parties.
 
 Static mappings
 ---------------
@@ -122,12 +135,14 @@ You can specify a static DHCP assignment on a per host basis. You will need the
 MAC address of the station and your desired IP address. The address must be
 inside the subnet definition but can be outside of the range statement.
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> static-mapping <description> mac-address <address>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet
+   <subnet> static-mapping <description> mac-address <address>
 
    Create a new DHCP static mapping named `<description>` which is valid for
    the host identified by its MAC `<address>`.
 
-.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> static-mapping <description> ip-address <address>
+.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet
+   <subnet> static-mapping <description> ip-address <address>
 
    Static DHCP IP address assign to host identified by `<description>`. IP
    address must be inside the `<subnet>` which is defined but can be outside
@@ -137,7 +152,8 @@ inside the subnet definition but can be outside of the range statement.
 
    This is useful, for example, in combination with hostfile update.
 
-   .. hint:: This is the equivalent of the host block in dhcpd.conf of isc-dhcpd.
+   .. hint:: This is the equivalent of the host block in dhcpd.conf of
+      isc-dhcpd.
 
 Options
 =======
@@ -155,12 +171,14 @@ Options
    * - client-prefix-length
      - 1
      - subnet-mask
-     - Specifies the clients subnet mask as per RFC 950. If unset, subnet declaration is used.
+     - Specifies the clients subnet mask as per RFC 950. If unset,
+       subnet declaration is used.
      - N
    * - time-offset
      - 2
      - time-offset
-     - Offset of the client's subnet in seconds from Coordinated Universal Time (UTC)
+     - Offset of the client's subnet in seconds from Coordinated
+       Universal Time (UTC)
      - N
    * - default-router
      - 3
@@ -390,8 +408,8 @@ Operation Mode
   vyos@vyos:~$ show dhcp server leases
   IP address      Hardware address    State    Lease start          Lease expiration     Remaining   Pool         Hostname
   --------------  ------------------  -------  -------------------  -------------------  ----------  -----------  ---------
-  192.0.2.104     aa:bb:cc:dd:ee:ff   active   2019/12/05 14:24:23  2019/12/06 02:24:23  6:05:35     dhcpexample  test1
-  192.0.2.115     ab:ac:ad:ae:af:bf   active   2019/12/05 18:02:37  2019/12/06 06:02:37  9:43:49     dhcpexample  test2
+  192.0.2.104     00:53:01:dd:ee:ff   active   2019/12/05 14:24:23  2019/12/06 02:24:23  6:05:35     dhcpexample  test1
+  192.0.2.115     00:53:01:ae:af:bf   active   2019/12/05 18:02:37  2019/12/06 06:02:37  9:43:49     dhcpexample  test2
 
 .. hint:: Static mappings aren't shown. To show all states, use
    ``show dhcp server leases state all``.
@@ -425,36 +443,43 @@ Configuration
    Clients receiving advertise messages from multiple servers choose the server
    with the highest preference value. The range for this value is ``0...255``.
 
-.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet <prefix> lease-time {default | maximum | minimum}
+.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet
+   <prefix> lease-time {default | maximum | minimum}
 
    The default lease time for DHCPv6 leases is 24 hours. This can be changed by
    supplying a ``default-time``, ``maximum-time`` and ``minimum-time``. All
    values need to be supplied in seconds.
 
-.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet <prefix> nis-domain <domain-name>
+.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet
+   <prefix> nis-domain <domain-name>
 
    A :abbr:`NIS (Network Information Service)` domain can be set to be used for
    DHCPv6 clients.
 
-.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet <prefix> nisplus-domain <domain-name>
+.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet
+   <prefix> nisplus-domain <domain-name>
 
    The procedure to specify a :abbr:`NIS+ (Network Information Service Plus)`
    domain is similar to the NIS domain one:
 
-.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet <prefix> nis-server <address>
+.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet
+   <prefix> nis-server <address>
 
    Specify a NIS server address for DHCPv6 clients.
 
-.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet <prefix> nisplus-server <address>
+.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet
+   <prefix> nisplus-server <address>
 
    Specify a NIS+ server address for DHCPv6 clients.
 
-.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet <prefix> sip-server <address | fqdn>
+.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet
+   <prefix> sip-server <address | fqdn>
 
    Specify a :abbr:`SIP (Session Initiation Protocol)` server by IPv6
    address of Fully Qualified Domain Name for all DHCPv6 clients.
 
-.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet <prefix> sntp-server-address <address>
+.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet
+   <prefix> sntp-server-address <address>
 
    A SNTP server address can be specified for DHCPv6 clients.
 
@@ -465,12 +490,14 @@ To hand out individual prefixes to your clients the following configuration is
 used:
 
 
-.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet <prefix> prefix-delegation start <address> prefix-length <length>
+.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet
+   <prefix> prefix-delegation start <address> prefix-length <length>
 
    Hand out prefixes of size `<length>` to clients in subnet `<prefix>` when
    they request for prefix delegation.
 
-.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet <prefix> prefix-delegation start <address> stop <address>
+.. cfgcmd:: set service dhcpv6-server shared-network-name <name> subnet
+   <prefix> prefix-delegation start <address> stop <address>
 
    Delegate prefixes from the range indicated by the start and stop qualifier.
 
@@ -533,6 +560,8 @@ be created. The following example explains the process.
 
 The configuration will look as follows:
 
+.. stop_vyoslinter (00:01:00:01:12:34:56:78:aa:bb:cc:dd:ee:ff false positive)
+
 .. code-block:: none
 
   show service dhcp-server shared-network-name NET1
@@ -551,6 +580,8 @@ The configuration will look as follows:
          }
       }
 
+.. start_vyoslinter
+
 Operation Mode
 ==============
 
@@ -636,13 +667,14 @@ Options
    DHCP packet size surpasses this value it will be forwarded without appending
    relay agent information. Range 64...1400, default 576.
 
-.. cfgcmd:: set service dhcp-relay relay-options relay-agents-packet <append | discard | forward | replace>
+.. cfgcmd:: set service dhcp-relay relay-options relay-agents-packet
+   <append | discard | forward | replace>
 
    Four policies for reforwarding DHCP packets exist:
 
    * **append:** The relay agent is allowed to append its own relay information
-     to a received DHCP packet, disregarding relay information already present in
-     the packet.
+     to a received DHCP packet, disregarding relay information already present
+     in the packet.
 
    * **discard:** Received packets which already contain relay information will
      be discarded.
@@ -658,7 +690,8 @@ Example
 
 * Listen for DHCP requests on interface ``eth1``.
 * DHCP server is located at IPv4 address 10.0.1.4.
-* Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4.
+* Router receives DHCP client requests on ``eth1`` and relays them to the server
+  at 10.0.1.4.
 
 .. figure:: /_static/images/service_dhcp-relay01.png
    :scale: 80 %
@@ -697,10 +730,11 @@ Configuration
 
    Multiple interfaces may be specified.
 
-.. cfgcmd:: set service dhcpv6-relay upstream-interface <interface> address <server>
+.. cfgcmd:: set service dhcpv6-relay upstream-interface <interface>
+   address <server>
 
-   Specifies an upstream network `<interface>` from which replies from `<server>`
-   and other relay agents will be accepted.
+   Specifies an upstream network `<interface>` from which replies from
+   `<server>` and other relay agents will be accepted.
 
 Options
 -------
diff --git a/docs/configuration/service/dhcpv6-relay.rst b/docs/configuration/service/dhcpv6-relay.rst
deleted file mode 100644
index 2d105fdf..00000000
--- a/docs/configuration/service/dhcpv6-relay.rst
+++ /dev/null
@@ -1,2 +0,0 @@
-dhcpv6-relay
-############
\ No newline at end of file
diff --git a/docs/configuration/service/dhcpv6-server.rst b/docs/configuration/service/dhcpv6-server.rst
deleted file mode 100644
index 64e523a0..00000000
--- a/docs/configuration/service/dhcpv6-server.rst
+++ /dev/null
@@ -1,2 +0,0 @@
-dhcpv6-server
-#############
\ No newline at end of file
diff --git a/docs/configuration/service/dns.rst b/docs/configuration/service/dns.rst
index f332c55c..204b6466 100644
--- a/docs/configuration/service/dns.rst
+++ b/docs/configuration/service/dns.rst
@@ -11,8 +11,8 @@ VyOS provides DNS infrastructure for small networks. It is designed to be
 lightweight and have a small footprint, suitable for resource constrained
 routers and firewalls, for this we utilize PowerDNS recursor.
 
-The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a
-full recursive DNS server - but it can also forward queries to configurable
+The VyOS DNS forwarder does not require an upstream DNS server. It can serve as
+a full recursive DNS server - but it can also forward queries to configurable
 upstream DNS servers. By not configuring any upstream DNS servers you also
 avoid to be tracked by the provider of your upstream DNS server.
 
@@ -28,9 +28,10 @@ avoid to be tracked by the provider of your upstream DNS server.
 
 .. cfgcmd:: set service dns forwarding domain <domain-name> server <address>
 
-   Forward received queries for a particular domain (specified via `domain-name`)
-   to a given name-server. Multiple nameservers can be specified. You can use
-   this feature for a DNS split-horizon configuration.
+   Forward received queries for a particular domain
+   (specified via `domain-name`) to a given name-server. Multiple nameservers
+   can be specified. You can use this feature for a DNS split-horizon
+   configuration.
 
    .. note:: This also works for reverse-lookup zones (``18.172.in-addr.arpa``).
 
@@ -41,7 +42,8 @@ avoid to be tracked by the provider of your upstream DNS server.
    recursor. A network of ``0.0.0.0/0`` or ``::/0`` would allow all IPv4 and
    IPv6 networks to query this server. This is on general a bad idea.
 
-.. cfgcmd:: set service dns forwarding dnssec <off | process-no-validate | process | log-fail | validate>
+.. cfgcmd:: set service dns forwarding dnssec
+   <off | process-no-validate | process | log-fail | validate>
 
    The PowerDNS Recursor has 5 different levels of DNSSEC processing, which can
    be set with the dnssec setting. In order from least to most processing, these
@@ -103,23 +105,25 @@ avoid to be tracked by the provider of your upstream DNS server.
 
 .. cfgcmd:: set service dns forwarding listen-address
 
-   The local IPv4 or IPv6 addresses to bind the DNS forwarder to. The forwarder will listen on this address for
-   incoming connections.
+   The local IPv4 or IPv6 addresses to bind the DNS forwarder to. The forwarder
+   will listen on this address for incoming connections.
 
 Example
 =======
 
-A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com.
+A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to
+implement a split-horizon DNS configuration for example.com.
 
 In this scenario:
 
-* All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254
-  and 2001:db8:cafe::1
-* All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1,
-  192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff
-* The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254
-  for IPv4 and 2001:db8::ffff for IPv6
-* The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64
+* All DNS requests for example.com must be forwarded to a DNS server
+  at 192.0.2.254 and 2001:db8:cafe::1
+* All other DNS requests will be forwarded to a different set of DNS servers at
+  192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff
+* The VyOS DNS forwarder will only listen for requests on the eth1 (LAN)
+  interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6
+* The VyOS DNS forwarder will only accept lookup requests from the
+  LAN subnets - 192.168.1.0/24 and 2001:db8::/64
 
 .. code-block:: none
 
@@ -139,12 +143,13 @@ Operation
 
 .. opcmd:: reset dns forwarding <all | domain>
 
-   Resets the local DNS forwarding cache database. You can reset the cache for all
-   entries or only for entries to a specific domain.
+   Resets the local DNS forwarding cache database. You can reset the cache
+   for all entries or only for entries to a specific domain.
 
 .. opcmd:: restart dns forwarding
 
-   Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache.
+   Restarts the DNS recursor process. This also invalidates the local DNS
+   forwarding cache.
 
 
 .. _dynamic-dns:
@@ -175,26 +180,31 @@ Configuration
    address assigned to `<interface>` on the service you configured under
    `<service-name>`.
 
-.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> key <keyfile>
+.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name>
+   key <keyfile>
 
    File identified by `<keyfile>` containing the secret RNDC key shared with
    remote DNS server.
 
-.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> server <server>
+.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name>
+   server <server>
 
    Configure the DNS `<server>` IP/FQDN used when updating this dynamic
    assignment.
 
-.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> zone <zone>
+.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name>
+   zone <zone>
 
    Configure DNS `<zone>` to be updated.
 
-.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> record <record>
+.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name>
+   record <record>
 
    Configure DNS `<record>` which should be updated. This can be set multiple
    times.
 
-.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name> ttl <ttl>
+.. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name>
+   ttl <ttl>
 
    Configure optional TTL value on the given resource record. This defualts to
    600 seconds.
@@ -248,30 +258,35 @@ VyOS is also able to use any service relying on protocols supported by ddclient.
 To use such a service, one must define a login, password, one or multiple
 hostnames, protocol and server.
 
-.. cfgcmd:: set service dns dynamic interface <interface> service <service> host-name <hostname>
+.. cfgcmd:: set service dns dynamic interface <interface> service <service>
+   host-name <hostname>
 
    Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS
    provider identified by `<service>` when the IP address on interface
    `<interface>` changes.
 
-.. cfgcmd:: set service dns dynamic interface <interface> service <service> login <username>
+.. cfgcmd:: set service dns dynamic interface <interface> service <service>
+   login <username>
 
    Configure `<username>` used when authenticating the update request for
    DynDNS service identified by `<service>`.
    For Namecheap, set the <domain> you wish to update.
 
-.. cfgcmd:: set service dns dynamic interface <interface> service <service> password <password>
+.. cfgcmd:: set service dns dynamic interface <interface> service <service>
+   password <password>
 
    Configure `<password>` used when authenticating the update request for
    DynDNS service identified by `<service>`.
 
-.. cfgcmd:: set service dns dynamic interface <interface> service <service> protocol <protocol>
+.. cfgcmd:: set service dns dynamic interface <interface> service <service>
+   protocol <protocol>
 
    When a ``custom`` DynDNS provider is used the protocol used for communicating
    to the provider must be specified under `<protocol>`. See the embedded
    completion helper for available protocols.
 
-.. cfgcmd:: set service dns dynamic interface <interface> service <service> server <server>
+.. cfgcmd:: set service dns dynamic interface <interface> service <service>
+   server <server>
 
    When a ``custom`` DynDNS provider is used the `<server>` where update
    requests are being sent to must be specified.
diff --git a/docs/configuration/service/https.rst b/docs/configuration/service/https.rst
index 49f2dbd9..b9c691da 100644
--- a/docs/configuration/service/https.rst
+++ b/docs/configuration/service/https.rst
@@ -39,23 +39,34 @@ leave appropriate defaults in the nginx directive. Multiple instances of
 Configuration mode requests
 ---------------------------
 
-In our example, we are creating a dummy interface and assigning an address to it:
+In our example, we are creating a dummy interface and assigning an address to
+it:
 
 .. code-block:: none
 
   curl -k -X POST -F data='{"op": "set", "path": ["interfaces", "dummy", "dum1", "address"], "value": "203.0.113.76/32"}' -F key=MY-HTTP-API-PLAINTEXT-KEY https://192.168.122.127/configure
 
-The ``/configure`` endpoint takes a request serialized in JSON. The only HTTP method it uses is POST. Request data is passed in the ``data=`` field and the API key is passed in the ``key=`` field. Key identifiers from the config are purely informational and the application doesn't need to know them, they only appear in the server logs to avoid exposing keys in log files, you only need the key itself.
+The ``/configure`` endpoint takes a request serialized in JSON. The only HTTP
+method it uses is POST. Request data is passed in the ``data=`` field and the
+API key is passed in the ``key=`` field. Key identifiers from the config are
+purely informational and the application doesn't need to know them, they only
+appear in the server logs to avoid exposing keys in log files, you only need
+the key itself.
 
-Since internally there is no distinction between a path and a value, you can omit the value field and include the value in the path like it's done in the shell commands:
+Since internally there is no distinction between a path and a value, you can
+omit the value field and include the value in the path like it's done in the
+shell commands:
 
 .. code-block:: none
 
   curl -k -X POST -F data='{"op": "set", "path": ["interfaces", "dummy", "dum10", "address", "203.0.113.99/32"]}' -F key=MY-HTTP-API-PLAINTEXT-KEY https://192.168.122.127/configure
 
-Separate value field make the semantics more clear though, and also makes it easier to create a command template once and update it with different values as needed.
+Separate value field make the semantics more clear though, and also makes it
+easier to create a command template once and update it with different values
+as needed.
 
-You can pass the ``set``, ``delete`` or ``comment`` command to it. The API will push the command to the session and commit.
+You can pass the ``set``, ``delete`` or ``comment`` command to it.
+The API will push the command to the session and commit.
 
 To retrieve a value:
 
@@ -91,9 +102,11 @@ Passing an empty path will return the full config:
 Configuration management requests
 ---------------------------------
 
-When saving or loading a configuration, the endpoint is ``/config-file`` and you can pass the ``save`` or ``load`` command.
+When saving or loading a configuration, the endpoint is ``/config-file`` and
+you can pass the ``save`` or ``load`` command.
 
-If you don't specify the file when saving, it saves to ``/config/config.boot``. Here's an example:
+If you don't specify the file when saving, it saves to ``/config/config.boot``.
+Here's an example:
 
 .. code-block:: none
 
@@ -102,7 +115,8 @@ If you don't specify the file when saving, it saves to ``/config/config.boot``.
 Image management requests
 -------------------------
 
-One may ``add`` or ``delete`` a system image using the endpoint ``/image``. Here are the respective examples:
+One may ``add`` or ``delete`` a system image using the endpoint ``/image``.
+Here are the respective examples:
 
 ``add`` from ``url``. Here we use the URL of the latest rolling release:
 
@@ -116,7 +130,8 @@ One may ``add`` or ``delete`` a system image using the endpoint ``/image``. Here
 
   # curl -k -X POST -F data='{"op": "delete", "name": "1.3-rolling-202006070117"}' -F key=MY-HTTP-API-PLAINTEXT-KEY https://192.168.122.127/image
 
-To list the available system images by name, one may use the operational mode request ``show`` discussed in the next section; in this setting it would be:
+To list the available system images by name, one may use the operational mode
+request ``show`` discussed in the next section; in this setting it would be:
 
 .. code-block:: none
 
diff --git a/docs/configuration/service/index.rst b/docs/configuration/service/index.rst
index 0ef2bbd3..e73f6dc2 100644
--- a/docs/configuration/service/index.rst
+++ b/docs/configuration/service/index.rst
@@ -12,8 +12,6 @@ Service
    console-server
    dhcp-relay
    dhcp-server
-   dhcpv6-relay
-   dhcpv6-server
    dns
    https
    ipoe-server
diff --git a/docs/configuration/service/ipoe-server.rst b/docs/configuration/service/ipoe-server.rst
index 3f794af8..7858ff19 100644
--- a/docs/configuration/service/ipoe-server.rst
+++ b/docs/configuration/service/ipoe-server.rst
@@ -41,8 +41,8 @@ the configuration.
 
   set service ipoe-server authentication interface eth2 mac-address 08:00:27:2f:d8:06
   set service ipoe-server authentication mode 'local'
-  set service ipoe-server dns-server server-1 '8.8.8.8'
-  set service ipoe-server dns-server server-2 '8.8.4.4'
+  set service ipoe-server dns-server server-1 '10.10.1.1'
+  set service ipoe-server dns-server server-2 '10.10.1.2'
   set service ipoe-server interface eth2 client-subnet '192.168.0.0/24'
 
 
@@ -134,8 +134,8 @@ The rate-limit is set in kbit/sec.
   set service ipoe-server authentication interface eth2 mac-address 08:00:27:2f:d8:06 rate-limit download '500'
   set service ipoe-server authentication interface eth2 mac-address 08:00:27:2f:d8:06 rate-limit upload '500'
   set service ipoe-server authentication mode 'local'
-  set service ipoe-server dns-server server-1 '8.8.8.8'
-  set service ipoe-server dns-server server-2 '8.8.4.4'
+  set service ipoe-server dns-server server-1 '10.10.1.1'
+  set service ipoe-server dns-server server-2 '10.10.1.2'
   set service ipoe-server interface eth2 client-subnet '192.168.0.0/24'
 
 .. code-block:: none
diff --git a/docs/configuration/service/lldp.rst b/docs/configuration/service/lldp.rst
index 4b1743e6..aa357211 100644
--- a/docs/configuration/service/lldp.rst
+++ b/docs/configuration/service/lldp.rst
@@ -12,7 +12,8 @@ as Station and Media Access Control Connectivity Discovery specified in IEEE
 802.1AB and IEEE 802.3-2012 section 6 clause 79.
 
 LLDP performs functions similar to several proprietary protocols, such as
-:abbr:`CDP (Cisco Discovery Protocol)`, :abbr:`FDP (Foundry Discovery Protocol)`,
+:abbr:`CDP (Cisco Discovery Protocol)`,
+:abbr:`FDP (Foundry Discovery Protocol)`,
 :abbr:`NDP (Nortel Discovery Protocol)` and :abbr:`LLTD (Link Layer Topology
 Discovery)`.
 
diff --git a/docs/configuration/service/pppoe-server.rst b/docs/configuration/service/pppoe-server.rst
index 224ff0d8..8d895f9d 100644
--- a/docs/configuration/service/pppoe-server.rst
+++ b/docs/configuration/service/pppoe-server.rst
@@ -29,7 +29,8 @@ First steps
    Use this command to define whether your PPPoE clients will locally
    authenticate in your VyOS system or in RADIUS server.
 
-.. cfgcmd:: set service pppoe-server authentication local-users username <name> password <password>
+.. cfgcmd:: set service pppoe-server authentication local-users username
+   <name> password <password>
 
    Use this command to configure the username and the password of a
    locally configured user.
@@ -103,7 +104,8 @@ used, multiple subnets can be setup which are used sequentially.
 To use a radius server, you need to switch to authentication mode RADIUS
 and then configure it.
 
-.. cfgcmd:: set service pppoe-server authentication radius server <address> key <secret>
+.. cfgcmd:: set service pppoe-server authentication radius server <address>
+   key <secret>
   
    Use this command to configure the IP address and the shared secret
    key of your RADIUS server.  You can have multiple RADIUS servers
@@ -123,7 +125,8 @@ Framed-IP-Address.
 
 **RADIUS sessions management DM/CoA**
 
-.. cfgcmd:: set service pppoe-server authentication radius dynamic-author <key | port | server>
+.. cfgcmd:: set service pppoe-server authentication radius dynamic-author
+   <key | port | server>
 
    Use this command to configure Dynamic Authorization Extensions to
    RADIUS so that you can remotely disconnect sessions and change some
@@ -141,7 +144,8 @@ username test
 
 .. code-block:: none
 
-  root@radius-server:~# echo "User-Name=test" | radclient -x 10.1.1.2:3799 disconnect secret123
+  root@radius-server:~# echo "User-Name=test" | radclient -x 10.1.1.2:3799
+  disconnect secret123
 
 You can also use another attributes for identify client for disconnect,
 like Framed-IP-Address, Acct-Session-Id, etc. Result commands appears in
@@ -155,7 +159,8 @@ Example for changing rate-limit via RADIUS CoA.
 
 .. code-block:: none
 
-  echo "User-Name=test,Filter-Id=5000/4000" | radclient 10.1.1.2:3799 coa secret123
+  echo "User-Name=test,Filter-Id=5000/4000" | radclient 10.1.1.2:3799 coa
+  secret123
 
 Filter-Id=5000/4000 (means 5000Kbit down-stream rate and 4000Kbit
 up-stream rate) If attribute Filter-Id redefined, replace it in RADIUS
@@ -164,7 +169,8 @@ CoA request.
 Automatic VLAN Creation
 -----------------------
 
-.. cfgcmd:: set service pppoe-server interface <interface> <vlan-id | vlan range> <text>
+.. cfgcmd:: set service pppoe-server interface <interface>
+   <vlan-id | vlan range> <text>
 
    VLAN's can be created by accel-ppp on the fly via the use of a Kernel
    module named `vlan_mon`, which is monitoring incoming vlans and
@@ -193,7 +199,8 @@ attributes.
 For Local Users
 ^^^^^^^^^^^^^^^
 
-.. cfgcmd:: set service pppoe-server authentication local-users username <name> rate-limit <download | upload>
+.. cfgcmd:: set service pppoe-server authentication local-users username <name>
+   rate-limit <download | upload>
   
    Use this command to configure a data-rate limit to PPPOoE clients for
    traffic download or upload. The rate-limit is set in kbit/sec.
@@ -248,7 +255,8 @@ Load Balancing
 --------------
 
 
-.. cfgcmd:: set service pppoe-server pado-delay <number-of-ms> sessions <number-of-sessions>
+.. cfgcmd:: set service pppoe-server pado-delay <number-of-ms>
+   sessions <number-of-sessions>
 
    Use this command to enable the delay of PADO (PPPoE Active Discovery
    Offer) packets, which can be used as a session balancing mechanism
@@ -273,7 +281,8 @@ IPv6
 IPv6 client's prefix assignment
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 
-.. cfgcmd:: set service pppoe-server client-ipv6-pool prefix <address> mask <number-of-bits>
+.. cfgcmd:: set service pppoe-server client-ipv6-pool prefix <address>
+   mask <number-of-bits>
 
    Use this comand to set the IPv6 address pool from which a PPPoE
    client will get an IPv6 prefix of your defined length (mask) to
@@ -284,7 +293,8 @@ IPv6 client's prefix assignment
 IPv6 Prefix Delegation
 ^^^^^^^^^^^^^^^^^^^^^^
 
-.. cfgcmd:: set service pppoe-server client-ipv6-pool delegate <address> delegation-prefix <number-of-bits>
+.. cfgcmd:: set service pppoe-server client-ipv6-pool delegate <address>
+   delegation-prefix <number-of-bits>
 
    Use this command to configure DHCPv6 Prefix Delegation (RFC3633). You
    will have to set your IPv6 pool and the length of the delegation
@@ -378,8 +388,8 @@ The example below covers a dual-stack configuration via pppoe-server.
   set service pppoe-server client-ip-pool stop '192.168.0.10'
   set service pppoe-server client-ipv6-pool delegate '2001:db8:8003::/48' delegation-prefix '56'
   set service pppoe-server client-ipv6-pool prefix '2001:db8:8002::/48' mask '64'
-  set service pppoe-server name-server '8.8.8.8'
-  set service pppoe-server name-server '2001:4860:4860::8888'
+  set service pppoe-server name-server '10.1.1.1'
+  set service pppoe-server name-server '2001:db8:4860::8888'
   set service pppoe-server interface 'eth2'
   set service pppoe-server gateway-address '10.100.100.1'
 
diff --git a/docs/configuration/service/router-advert.rst b/docs/configuration/service/router-advert.rst
index bc92f315..36fa600d 100644
--- a/docs/configuration/service/router-advert.rst
+++ b/docs/configuration/service/router-advert.rst
@@ -29,6 +29,8 @@ Enabling Advertisments
 
 .. cfgcmd:: set service router-advert interface <interface> ....
 
+.. stop_vyoslinter
+
 .. csv-table:: 
    :header: "Field", "VyOS Option", "Description"
    :widths: 10, 10, 20
@@ -45,11 +47,16 @@ Enabling Advertisments
    "DNSSL", "dnssl", "DNS search list to advertise"
    "Name Server", "name-server", "Advertise DNS server per https://tools.ietf.org/html/rfc6106"
 
+.. start_vyoslinter
+
+
 Advertising a Prefix
 ''''''''''''''''''''
 
 .. cfgcmd:: set service router-advert interface <interface> prefix 2001:DB8::/32
 
+.. stop_vyoslinter
+
 .. csv-table::
     :header: "VyOS Field", "Description"
     :widths: 10,30
@@ -59,6 +66,7 @@ Advertising a Prefix
     "preferred-lifetime","Time in seconds that the prefix will remain preferred (default 4 hours)"
     "valid-lifetime","Time in seconds that the prefix will remain valid (default: 30 days)"
 
+.. start_vyoslinter
 
 Disabling Advertisements
 ~~~~~~~~~~~~~~~~~~~~~~~~
@@ -78,10 +86,10 @@ Example Configuration
         interval {
             max 600
         }
-        name-server 2001:4860:4860::8888
-        name-server 2001:4860:4860::8844
+        name-server 2001:db8::1
+        name-server 2001:db8::2
         other-config-flag
-        prefix 2001:DB8:beef:2::/64 {
+        prefix 2001:db8:beef:2::/64 {
             valid-lifetime 2592000
         }
         reachable-time 0
diff --git a/docs/configuration/service/snmp.rst b/docs/configuration/service/snmp.rst
index 3f445ea8..e962c1c5 100644
--- a/docs/configuration/service/snmp.rst
+++ b/docs/configuration/service/snmp.rst
@@ -223,10 +223,13 @@ Once the script is uploaded, it needs to be configured via the command below.
   set service snmp script-extensions extension-name my-extension script your_script.sh
   commit
 
+.. stop_vyoslinter
 
 The OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116``, once called, will
 contain the output of the extension.
 
+.. start_vyoslinter
+
 .. code-block:: none
 
   root@vyos:/home/vyos# snmpwalk -v2c  -c public 127.0.0.1 nsExtendOutput1
@@ -241,9 +244,12 @@ SolarWinds
 If you happen to use SolarWinds Orion as NMS you can also use the Device
 Templates Management. A template for VyOS can be easily imported.
 
+.. stop_vyoslinter
+
 Create a file named ``VyOS-1.3.6.1.4.1.44641.ConfigMgmt-Commands`` using the
 following content:
 
+
 .. code-block:: none
 
   <Configuration-Management Device="VyOS" SystemOID="1.3.6.1.4.1.44641">
@@ -264,3 +270,4 @@ following content:
 .. _SNMPv2: https://en.wikipedia.org/wiki/Simple_Network_Management_Protocol#Version_2
 .. _SNMPv3: https://en.wikipedia.org/wiki/Simple_Network_Management_Protocol#Version_3
 
+.. start_vyoslinter
\ No newline at end of file
diff --git a/docs/configuration/service/ssh.rst b/docs/configuration/service/ssh.rst
index 0153d918..f7541a70 100644
--- a/docs/configuration/service/ssh.rst
+++ b/docs/configuration/service/ssh.rst
@@ -47,12 +47,12 @@ Configuration
 
 .. cfgcmd:: set service ssh ciphers <cipher>
 
-  Define allowed ciphers used for the SSH connection. A number of allowed ciphers
-  can be specified, use multiple occurrences to allow multiple ciphers.
+  Define allowed ciphers used for the SSH connection. A number of allowed
+  ciphers can be specified, use multiple occurrences to allow multiple ciphers.
 
   List of supported ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``,
-  ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, ``arcfour128``,
-  ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``
+  ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``,
+  ``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``
 
 .. cfgcmd:: set service ssh disable-password-authentication
 
@@ -72,11 +72,12 @@ Configuration
 
   List of supported MACs: ``hmac-md5``, ``hmac-md5-96``, ``hmac-ripemd160``,
   ``hmac-sha1``, ``hmac-sha1-96``, ``hmac-sha2-256``, ``hmac-sha2-512``,
-  ``umac-64@openssh.com``, ``umac-128@openssh.com``, ``hmac-md5-etm@openssh.com``,
-  ``hmac-md5-96-etm@openssh.com``, ``hmac-ripemd160-etm@openssh.com``,
-  ``hmac-sha1-etm@openssh.com``, ``hmac-sha1-96-etm@openssh.com``,
-  ``hmac-sha2-256-etm@openssh.com``, ``hmac-sha2-512-etm@openssh.com``,
-  ``umac-64-etm@openssh.com``, ``umac-128-etm@openssh.com``
+  ``umac-64@openssh.com``, ``umac-128@openssh.com``,
+  ``hmac-md5-etm@openssh.com``, ``hmac-md5-96-etm@openssh.com``,
+  ``hmac-ripemd160-etm@openssh.com``, ``hmac-sha1-etm@openssh.com``,
+  ``hmac-sha1-96-etm@openssh.com``, ``hmac-sha2-256-etm@openssh.com``,
+  ``hmac-sha2-512-etm@openssh.com``, ``umac-64-etm@openssh.com``,
+  ``umac-128-etm@openssh.com``
 
 .. cfgcmd:: set service ssh access-control <allow | deny> <group | user> <name>
 
@@ -95,7 +96,8 @@ Configuration
   List of supported algorithms: ``diffie-hellman-group1-sha1``,
   ``diffie-hellman-group14-sha1``, ``diffie-hellman-group14-sha256``,
   ``diffie-hellman-group16-sha512``, ``diffie-hellman-group18-sha512``,
-  ``diffie-hellman-group-exchange-sha1``, ``diffie-hellman-group-exchange-sha256``,
+  ``diffie-hellman-group-exchange-sha1``,
+  ``diffie-hellman-group-exchange-sha256``,
   ``ecdh-sha2-nistp256``, ``ecdh-sha2-nistp384``, ``ecdh-sha2-nistp521``,
   ``curve25519-sha256`` and ``curve25519-sha256@libssh.org``.
 
diff --git a/docs/configuration/service/webproxy.rst b/docs/configuration/service/webproxy.rst
index 654e73f2..e65c672c 100644
--- a/docs/configuration/service/webproxy.rst
+++ b/docs/configuration/service/webproxy.rst
@@ -68,7 +68,8 @@ first. Otherwise you will not be able to commit the config changes.
 
 * To auto update the blacklist files
 
-  :code:`set service webproxy url-filtering squidguard auto-update update-hour 23`
+  :code:`set service webproxy url-filtering squidguard auto-update
+  update-hour 23`
 
 * To configure blocking add the following to the configuration
 
@@ -108,9 +109,12 @@ Directory as authentication backend. Queries are done via LDAP.
 
 * ``base-dn`` set the base directory for the search
 * ``bind-dn`` and ``password``: set the user, which is used for the ldap search
-* ``filter-expression``: set the exact filter which a authorized user match in a ldap-search. In this example every User is able to authorized.
+* ``filter-expression``: set the exact filter which a authorized user match in
+  a ldap-search. In this example every User is able to authorized.
 
-You can find more about the ldap authentication `here <http://www.squid-cache.org/Versions/v3/3.2/manuals/basic_ldap_auth.html>`_
+You can find more about the ldap authentication
+`here 
+<http://www.squid-cache.org/Versions/v3/3.2/manuals/basic_ldap_auth.html>`_
 
 Adjusting cache size
 ^^^^^^^^^^^^^^^^^^^^

From 64161ff044275e944c86fd273bb4effd16a5b187 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 17:43:55 +0100
Subject: [PATCH 189/295] linter: disable mac lint for now, too many false
 positives

---
 .github/vyos-linter.py | 23 +++++++++++++++++------
 1 file changed, 17 insertions(+), 6 deletions(-)

diff --git a/.github/vyos-linter.py b/.github/vyos-linter.py
index ffa355c0..3dc7c2fc 100644
--- a/.github/vyos-linter.py
+++ b/.github/vyos-linter.py
@@ -43,17 +43,26 @@ def lint_ipv4(cnt, line):
     if ip is not None:
         ip = ipaddress.ip_address(ip.group().strip(' '))
         # https://docs.python.org/3/library/ipaddress.html#ipaddress.IPv4Address.is_private
-        if ip.is_private is False and ip.is_multicast is False:
-            return (f"Use IPv4 reserved for Documentation (RFC 5737) or private Space: {ip}", cnt, 'error')
+        if ip.is_private:
+            return None
+        if ip.is_multicast:
+            return None
+        if ip.is_global is False:
+            return None
+        return (f"Use IPv4 reserved for Documentation (RFC 5737) or private Space: {ip}", cnt, 'error')
 
 
 def lint_ipv6(cnt, line):
     ip = re.search(IPV6ADDR, line, re.I)
     if ip is not None:
         ip = ipaddress.ip_address(ip.group().strip(' '))
-        # https://docs.python.org/3/library/ipaddress.html#ipaddress.IPv4Address.is_private
-        if ip.is_private is False and ip.is_multicast is False:
-            return (f"Use IPv6 reserved for Documentation (RFC 3849) or private Space: {ip}", cnt, 'error')
+        if ip.is_private:
+            return None
+        if ip.is_multicast:
+            return None
+        if ip.is_global is False:
+            return None
+        return (f"Use IPv6 reserved for Documentation (RFC 3849) or private Space: {ip}", cnt, 'error')
 
 
 def lint_AS(cnt, line):
@@ -102,7 +111,10 @@ def handle_file_action(filepath):
                                 indentation = indentation + 1
                             else:
                                 break
+                    
                     err_mac = lint_mac(cnt, line.strip())
+                    # disable mac detection for the moment, too many false positives
+                    err_mac = None
                     err_ip4 = lint_ipv4(cnt, line.strip())
                     err_ip6 = lint_ipv6(cnt, line.strip())
                     if test_line_lenght:
@@ -135,7 +147,6 @@ def handle_file_action(filepath):
         for error in errors:
             print(f"::{error[2]} file={filepath},line={error[1]}::{error[0]}")
         print('')
-        exit()
         return False
 
 

From ac6b335b1aeed78c087c27763c527d7d38093aca Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 22:39:04 +0100
Subject: [PATCH 190/295] changelog: fix lint errors

---
 docs/changelog/1.2.4.rst | 34 +++++++++++++++++++++++-----------
 docs/changelog/1.2.5.rst | 30 ++++++++++++++++++++----------
 2 files changed, 43 insertions(+), 21 deletions(-)

diff --git a/docs/changelog/1.2.4.rst b/docs/changelog/1.2.4.rst
index 397c9bb9..3e228880 100644
--- a/docs/changelog/1.2.4.rst
+++ b/docs/changelog/1.2.4.rst
@@ -8,21 +8,26 @@ Resolved issues
 
 * :vytask:`T258` Can not configure wan load-balancing on vyos-1.2
 * :vytask:`T818` SNMP v3 - remove required engineid from user node
-* :vytask:`T1030` Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4)
+* :vytask:`T1030` Upgrade ddclient from 3.8.2 to 3.9.
+  (support Cloudflare API v4)
 * :vytask:`T1183` BFD Support via FRR
 * :vytask:`T1299` Allow SNMPd to be extended with custom scripts
 * :vytask:`T1351` accel-pppoe adding CIDR based IP pool option
 * :vytask:`T1391` In route-map set community additive
 * :vytask:`T1394` syslog systemd and host_name.py race condition
-* :vytask:`T1401` Copying files with the FTP protocol fails if the password contains special characters
-* :vytask:`T1421` OpenVPN client push-route stopped working, needs added quotes to fix
+* :vytask:`T1401` Copying files with the FTP protocol fails if the passwor
+  contains special characters
+* :vytask:`T1421` OpenVPN client push-route stopped working, needs added quotes
+  to fix
 * :vytask:`T1430` Add options for custom DHCP client-id and hostname
 * :vytask:`T1447` Python subprocess called without import in host_name.py
 * :vytask:`T1470` improve output of "show dhcpv6 server leases"
 * :vytask:`T1485` Enable 'AdvIntervalOpt' option in for radvd.conf
 * :vytask:`T1496` Separate rolling release and LTS kernel builds
-* :vytask:`T1560` "set load-balancing wan rule 0" causes segfault and prevents load balancing from starting
-* :vytask:`T1568` strip-private command improvement for additional masking of IPv6 and MAC address
+* :vytask:`T1560` "set load-balancing wan rule 0" causes segfault and prevent
+  load balancing from starting
+* :vytask:`T1568` strip-private command improvement for additional masking o
+  IPv6 and MAC address
 * :vytask:`T1578` completion offers "show table", but show table does not exist
 * :vytask:`T1593` Support ip6gre
 * :vytask:`T1597` /usr/sbin/rsyslogd after deleting "system syslog"
@@ -35,29 +40,36 @@ Resolved issues
 * :vytask:`T1708` Update Rolling Release Kernel to 4.19.76
 * :vytask:`T1709` Update WireGuard to 0.0.20190913
 * :vytask:`T1716` Update Intel NIC drivers to recent versions
-* :vytask:`T1726` Update Linux Firmware binaries to a more recent version 2019-03-14 -> 2019-10-07
+* :vytask:`T1726` Update Linux Firmware binaries to a more recen
+  version 2019-03-14 -> 2019-10-07
 * :vytask:`T1728` Update Linux Kernel to 4.19.79
 * :vytask:`T1737` SNMP tab completion missing
 * :vytask:`T1738` Copy SNMP configuration from node to node raises exception
 * :vytask:`T1740` Broken OSPFv2 virtual-link authentication
 * :vytask:`T1742` NHRP unable to commit.
-* :vytask:`T1745` dhcp-server commit fails with "DHCP range stop address x must be greater or equal to the range start address y!" when static mapping has same IP as range stop
+* :vytask:`T1745` dhcp-server commit fails with "DHCP range stop address 
+  must be greater or equal to the range start address y!" when static mapping
+  has same IP as range stop
 * :vytask:`T1749` numeric validator doesn't support multiple ranges
 * :vytask:`T1769` Remove complex SNMPv3 Transport Security Model (TSM)
 * :vytask:`T1772` <regex> constraints in XML are partially broken
 * :vytask:`T1778` Kilobits/Megabits difference in configuration Vyos/FRR
 * :vytask:`T1780` Adding ipsec ike closeaction
-* :vytask:`T1786` disable-dhcp-nameservers is missed in current host_name.py implementation
+* :vytask:`T1786` disable-dhcp-nameservers is missed in current host_name.p
+  implementation
 * :vytask:`T1788` Intel QAT (QuickAssist Technology ) implementation
 * :vytask:`T1792` Update WireGuard to Debian release 0.0.20191012-1
 * :vytask:`T1800` Update Linux Kernel to v4.19.84
 * :vytask:`T1809` Wireless: SSID scan does not work in AP mode
-* :vytask:`T1811` Upgrade from 1.1.8: Config file migration failed: module=l2tp
-* :vytask:`T1812` DHCP: hostnames of clients not resolving after update v1.2.3 -> 1.2-rolling
+* :vytask:`T1811` Upgrade from 1.1.8: Config file migratio
+  failed: module=l2tp
+* :vytask:`T1812` DHCP: hostnames of clients not resolving afte
+  update v1.2.3 -> 1.2-rolling
 * :vytask:`T1819` Reboot kills SNMPv3 configuration
 * :vytask:`T1822` Priority inversion wireless interface dhcpv6
 * :vytask:`T1825` Improve DHCP configuration error message
-* :vytask:`T1836` import-conf-mode-commands in vyos-1x/scripts fails to create an xml
+* :vytask:`T1836` import-conf-mode-commands in vyos-1x/scripts fails
+  to create an xml
 * :vytask:`T1839` LLDP shows "VyOS unknown" instead of "VyOS"
 * :vytask:`T1841` PPP ipv6-up.d direcotry missing
 * :vytask:`T1893` igmp-proxy: Do not allow adding unknown interface
diff --git a/docs/changelog/1.2.5.rst b/docs/changelog/1.2.5.rst
index 231e92f2..6eabc6cf 100644
--- a/docs/changelog/1.2.5.rst
+++ b/docs/changelog/1.2.5.rst
@@ -11,23 +11,32 @@ Resolved issues
 * :vytask:`1301` bgp peer-groups don't work when "no-ipv4-unicast" is enabled.
 * :vytask:`1341` Adding rate-limiter for pppoe server users
 * :vytask:`1376` Incorrect DHCP lease counting
-* :vytask:`1392` Large firewall rulesets cause the system to lose configuration and crash at startup
-* :vytask:`1416` 2 dhcp server run in failover mode can't sync hostname with each other
+* :vytask:`1392` Large firewall rulesets cause the system to lose configuration
+  and crash at startup
+* :vytask:`1416` 2 dhcp server run in failover mode can't sync hostname with
+  each other
 * :vytask:`1452` accel-pppoe - add vendor option to shaper
-* :vytask:`1490` BGP configuration (is lost|not applied) when updating 1.1.8 -> 1.2.1
+* :vytask:`1490` BGP configuration (is lost|not applied) when updating
+  1.1.8 -> 1.2.1
 * :vytask:`1780` Adding ipsec ike closeaction
 * :vytask:`1803` Unbind NTP while it's not requested...
 * :vytask:`1821` "authentication mode radius" has no effect for PPPoE server
 * :vytask:`1827` Increase default gc_thresh
-* :vytask:`1828` Missing completion helper for "set system syslog host 192.0.2.1 facility all protocol"
-* :vytask:`1832` radvd adding feature DNSSL branch.example.com example.com to existing package
+* :vytask:`1828` Missing completion helper for "set system syslog host
+  192.0.2.1 facility all protocol"
+* :vytask:`1832` radvd adding feature DNSSL branch.example.com example.com to
+  existing package
 * :vytask:`1837` PPPoE unrecognized option 'replacedefaultroute'
-* :vytask:`1851` wireguard - changing the pubkey on an existing peer seems to destroy the running config.
+* :vytask:`1851` wireguard - changing the pubkey on an existing peer seems to
+  destroy the running config.
 * :vytask:`1858` l2tp: Delete depricated outside-nexthop and add gateway-address
 * :vytask:`1864` Lower IPSec DPD timeout lower limit from 10s -> 2s
-* :vytask:`1879` Extend Dynamic DNS XML definition value help strings and validators
-* :vytask:`1881` Execute permissions are removed from custom SNMP scripts at commit time
-* :vytask:`1884` Keeping VRRP transition-script native behaviour and adding stop-script
+* :vytask:`1879` Extend Dynamic DNS XML definition value help strings and
+  validators
+* :vytask:`1881` Execute permissions are removed from custom SNMP scripts at
+  commit time
+* :vytask:`1884` Keeping VRRP transition-script native behaviour and adding
+  stop-script
 * :vytask:`1891` Router announcements broken on boot
 * :vytask:`1900` Enable SNMP for VRRP.
 * :vytask:`1902` Add redistribute non main table in bgp
@@ -38,7 +47,8 @@ Resolved issues
 * :vytask:`1934` Change default hostname when deploy from OVA without params.
 * :vytask:`1935` NIC identification and usage problem in Hyper-V environments
 * :vytask:`1936` pppoe-server CLI control features
-* :vytask:`1964` SNMP Script-extensions allows names with spaces, but commit fails
+* :vytask:`1964` SNMP Script-extensions allows names with spaces, but commit
+  fails
 * :vytask:`1967` BGP parameter "enforce-first-as" does not work anymore
 * :vytask:`1970` Correct adding interfaces on boot
 * :vytask:`1971` Missing modules in initrd.img for PXE boot

From 7a85ac512aadf03eb73242355757ca7184e17674 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 22:39:26 +0100
Subject: [PATCH 191/295] installation: fix lint errors

---
 docs/installation/cloud/aws.rst         |  9 ++++---
 docs/installation/cloud/azure.rst       | 11 +++++----
 docs/installation/cloud/gcp.rst         |  9 ++++---
 docs/installation/install.rst           | 29 ++++++++++++++--------
 docs/installation/update.rst            |  9 ++++---
 docs/installation/virtual/libvirt.rst   | 32 +++++++++++++++----------
 docs/installation/virtual/vmware.rst    | 32 ++++++++++++++++++-------
 docs/installation/vyos-on-baremetal.rst | 11 ++++++---
 8 files changed, 95 insertions(+), 47 deletions(-)

diff --git a/docs/installation/cloud/aws.rst b/docs/installation/cloud/aws.rst
index 33684bb0..d64aca82 100644
--- a/docs/installation/cloud/aws.rst
+++ b/docs/installation/cloud/aws.rst
@@ -19,15 +19,18 @@ Deploy VyOS on Amazon :abbr:`AWS (Amazon Web Services)`
 
 .. figure:: /_static/images/cloud-aws-03.png
 
-4. Configure instance for your requirements. Select number of instances / network / subnet
+4. Configure instance for your requirements. Select number of
+   instances / network / subnet
 
 .. figure:: /_static/images/cloud-aws-04.png
 
-5. Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step.
+5. Additional storage. You can remove additional storage ``/dev/sdb``. First
+   root device will be ``/dev/xvda``. You can skeep this step.
 
 .. figure:: /_static/images/cloud-aws-05.png
 
-6. Configure Security Group. It's recommended that you configure ssh access only from certain address sources. Or permit any (by default).
+6. Configure Security Group. It's recommended that you configure ssh access
+   only from certain address sources. Or permit any (by default).
 
 .. figure:: /_static/images/cloud-aws-06.png
 
diff --git a/docs/installation/cloud/azure.rst b/docs/installation/cloud/azure.rst
index 39206f3b..fe6a25bd 100644
--- a/docs/installation/cloud/azure.rst
+++ b/docs/installation/cloud/azure.rst
@@ -9,7 +9,8 @@ Deploy VyOS on Azure.
 
 1. Go to the Azure services and Click to **Add new Virtual machine**
 
-2. Choose vm name, resource group, region and click **Browse all public and private images**
+2. Choose vm name, resource group, region and click **Browse all public and
+   private images**
 
 .. figure:: /_static/images/cloud-azure-01.png
 
@@ -43,10 +44,12 @@ Deploy VyOS on Azure.
 Add interface
 -------------
 
-If instance was deployed with one **eth0** ``WAN`` interface and want to add new one.
-To add new interface an example **eth1** ``LAN`` you need shutdown the instance. Attach the interface in the Azure portal and then start the instance.
+If instance was deployed with one **eth0** ``WAN`` interface and want to add
+new one. To add new interface an example **eth1** ``LAN`` you need shutdown the
+instance. Attach the interface in the Azure portal and then start the instance.
 
-.. NOTE:: Azure does not allow you attach interface when the instance in the **Running** state.
+.. note:: Azure does not allow you attach interface when the instance in the
+   **Running** state.
 
 References
 ----------
diff --git a/docs/installation/cloud/gcp.rst b/docs/installation/cloud/gcp.rst
index 66e75704..07aecdbe 100644
--- a/docs/installation/cloud/gcp.rst
+++ b/docs/installation/cloud/gcp.rst
@@ -7,7 +7,8 @@ Deploy VM
 
 To deploy VyOS on GCP (Google Cloud Platform)
 
-1. Generate SSH key pair type **ssh-rsa** from the host that will connect to VyOS.
+1. Generate SSH key pair type **ssh-rsa** from the host that will connect to
+   VyOS.
 
   Example:
 
@@ -16,10 +17,12 @@ To deploy VyOS on GCP (Google Cloud Platform)
     ssh-keygen -t rsa -f ~/.ssh/vyos_gcp -C "vyos@mypc"
 
 
-.. NOTE:: In name "vyos@mypc" The first value must be "**vyos**". Because default user is vyos and google api uses this option.
+.. note:: In name "vyos@mypc" The first value must be "**vyos**". Because
+   default user is vyos and google api uses this option.
 
 
-2. Open GCP console and navigate to the menu **Metadata**. Choose **SSH Keys** and click ``edit``.
+2. Open GCP console and navigate to the menu **Metadata**. Choose
+   **SSH Keys** and click ``edit``.
 
 .. figure:: /_static/images/cloud-gcp-01.png
 
diff --git a/docs/installation/install.rst b/docs/installation/install.rst
index 11d0fc88..b5472f64 100644
--- a/docs/installation/install.rst
+++ b/docs/installation/install.rst
@@ -247,7 +247,8 @@ file.
 Permanent installation
 ======================
 
-.. note:: Before a permanent installation, VyOS requires a :ref:`live_installation`.
+.. note:: Before a permanent installation, VyOS requires a
+   :ref:`live_installation`.
 
 Unlike general purpose Linux distributions, VyOS uses "image installation" that
 mimics the user experience of traditional hardware routers and allows keeping
@@ -351,7 +352,8 @@ installation method which allows deploying VyOS through the network.
 * :ref:`tftp-server`
 * Webserver (HTTP) - optional, but we will use it to speed up installation
 * VyOS ISO image to be installed (do not use images prior to VyOS 1.2.3)
-* Files *pxelinux.0* and *ldlinux.c32* `from the Syslinux distribution <https://kernel.org/pub/linux/utils/boot/syslinux/>`_
+* Files *pxelinux.0* and *ldlinux.c32* `from the Syslinux distribution
+  <https://kernel.org/pub/linux/utils/boot/syslinux/>`_
 
 Configuration
 -------------
@@ -402,9 +404,6 @@ Configure a TFTP server so that it serves the following:
   file. We will use the configuration_ file shown below, which we named
   default_.
 
-.. _configuration: https://wiki.syslinux.org/wiki/index.php?title=Config
-.. _default: https://wiki.syslinux.org/wiki/index.php?title=PXELINUX#Configuration
-
 In the example we configured our existent VyOS as the TFTP server too:
 
 .. code-block:: none
@@ -473,7 +472,7 @@ TFTP Server, you can restart the service with
    and HTTP server have the right permissions to be accessed from the
    booting clients.
 
-.. _`Python's SimpleHTTPServer`: https://docs.python.org/2/library/simplehttpserver.html
+
 
 Client Boot
 -----------
@@ -496,11 +495,13 @@ This is a list of known issues that can arise during installation.
 Black screen on install
 -----------------------
 
-GRUB attempts to redirect all output to a serial port for ease of installation on headless hosts.
-This appears to cause an hard lockup on some hardware that lacks a serial port, with the result being a
-black screen after selecting the `Live system` option from the installation image.
+GRUB attempts to redirect all output to a serial port for ease of installation
+on headless hosts. This appears to cause an hard lockup on some hardware that
+lacks a serial port, with the result being a black screen after selecting the
+`Live system` option from the installation image.
 
-The workaround is to type `e` when the boot menu appears and edit the GRUB boot options.  Specifically, remove the:
+The workaround is to type `e` when the boot menu appears and edit the GRUB boot
+options.  Specifically, remove the:
 
 `console=ttyS0,115200`
 
@@ -508,7 +509,15 @@ option, and type CTRL-X to boot.
 
 Installation can then continue as outlined above.
 
+
+.. stop_vyoslinter
+
 .. _SYSLINUX: http://www.syslinux.org/
 .. _balenaEtcher: https://www.balena.io/etcher/
 .. _Rufus: https://rufus.ie/
 .. _many others: https://en.wikipedia.org/wiki/List_of_tools_to_create_Live_USB_systems
+.. _configuration: https://wiki.syslinux.org/wiki/index.php?title=Config
+.. _default: https://wiki.syslinux.org/wiki/index.php?title=PXELINUX#Configuration
+.. _`Python's SimpleHTTPServer`: https://docs.python.org/2/library/simplehttpserver.html
+
+.. start_vyoslinter
\ No newline at end of file
diff --git a/docs/installation/update.rst b/docs/installation/update.rst
index a3a887f0..5bcd5b8a 100644
--- a/docs/installation/update.rst
+++ b/docs/installation/update.rst
@@ -10,7 +10,8 @@ for the new image to boot using the current configuration.
 
 .. note:: Only LTS releases are PGP-signed.
 
-.. opcmd:: add system image <url | path> [vrf name] [username user [password pass]]
+.. opcmd:: add system image <url | path> [vrf name]
+   [username user [password pass]]
 
    Use this command to install a new system image. You can reach the
    image from the web (http://, https://) or from your local system,
@@ -72,8 +73,10 @@ Example
      OK.  This image will be named: vyos-1.3-rolling-201912201452
 
 
-.. hint:: | The most up-do-date Rolling Release for AMD64 can be accessed using the following URL:
-   | https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso
+.. hint:: The most up-do-date Rolling Release for AMD64 can be accessed using
+   the following URL:
+   
+   https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso
 
 After reboot you might want to verify the version you are running with
 the :opcmd:`show version` command.
\ No newline at end of file
diff --git a/docs/installation/virtual/libvirt.rst b/docs/installation/virtual/libvirt.rst
index 0d624b94..ff896d07 100644
--- a/docs/installation/virtual/libvirt.rst
+++ b/docs/installation/virtual/libvirt.rst
@@ -4,9 +4,10 @@
 Running on Libvirt Qemu/KVM
 ***************************
 
-Libvirt is an open-source API, daemon and management tool for managing platform virtualization.
-There are several ways to deploy VyOS on libvirt kvm. Use Virt-manager and native CLI.
-In an example we will be use use 4 gigabytes of memory, 2 cores CPU and default network virbr0.
+Libvirt is an open-source API, daemon and management tool for managing platform
+virtualization. There are several ways to deploy VyOS on libvirt kvm.
+Use Virt-manager and native CLI. In an example we will be use use 4 gigabytes
+of memory, 2 cores CPU and default network virbr0.
 
 CLI
 ===
@@ -14,8 +15,9 @@ CLI
 Deploy from ISO
 ---------------
 
-Create VM name ``vyos_r1``. You must specify the path to the ``ISO`` image, the disk ``qcow2`` will be created automatically.
-The ``default`` network is the virtual network (type Virtio) created by the hypervisor with NAT.
+Create VM name ``vyos_r1``. You must specify the path to the ``ISO`` image,
+the disk ``qcow2`` will be created automatically. The ``default`` network is
+the virtual network (type Virtio) created by the hypervisor with NAT.
 
 .. code-block:: none
 
@@ -46,11 +48,13 @@ Connect to VM  with command ``virsh console vyos_r1``
 
   vyos@vyos:~$ install image
 
-After installation - exit from the console using the key combination ``Ctrl + ]`` and reboot the system.
+After installation - exit from the console using the key combination
+``Ctrl + ]`` and reboot the system.
 
 Deploy from qcow2
 -----------------
-The convenience of using :abbr:`KVM (Kernel-based Virtual Machine)` images is that they don't need to be installed.
+The convenience of using :abbr:`KVM (Kernel-based Virtual Machine)`
+images is that they don't need to be installed.
 Download predefined VyOS.qcow2 image for ``KVM``
 
 .. code-block:: none
@@ -92,13 +96,15 @@ The system is fully operational.
 
 Virt-manager
 ============
-The virt-manager application is a desktop user interface for managing virtual machines through libvirt.
-On the linux open :abbr:`VMM (Virtual Machine Manager)`.
+The virt-manager application is a desktop user interface for managing virtual
+machines through libvirt. On the linux open
+:abbr:`VMM (Virtual Machine Manager)`.
 
 Deploy from ISO
 ---------------
 
-1. Open :abbr:`VMM (Virtual Machine Manager)` and Create a new :abbr:`VM (Virtual Machine)`
+1. Open :abbr:`VMM (Virtual Machine Manager)` and Create a new
+   :abbr:`VM (Virtual Machine)`
 
 2. Choose ``Local install media`` (ISO)
 
@@ -134,13 +140,15 @@ Download predefined VyOS.qcow2 image for ``KVM``
   curl --url link_to_vyos_kvm.qcow2 --output /var/lib/libvirt/images/vyos_kvm.qcow2
 
 
-1. Open :abbr:`VMM (Virtual Machine Manager)` and Create a new :abbr:`VM (Virtual Machine)`
+1. Open :abbr:`VMM (Virtual Machine Manager)` and Create a new
+   :abbr:`VM (Virtual Machine)`
 
 2. Choose ``Import existing disk`` image
 
 .. figure:: /_static/images/virt-libvirt-qc-01.png
 
-3. Choose the path to the image ``vyos_kvm.qcow2`` that was previously downloaded . Operation System can be any Debian based.
+3. Choose the path to the image ``vyos_kvm.qcow2`` that was previously
+   downloaded . Operation System can be any Debian based.
 
 .. figure:: /_static/images/virt-libvirt-qc-02.png
 
diff --git a/docs/installation/virtual/vmware.rst b/docs/installation/virtual/vmware.rst
index c4299cbf..28614573 100644
--- a/docs/installation/virtual/vmware.rst
+++ b/docs/installation/virtual/vmware.rst
@@ -6,20 +6,31 @@ Running on VMware ESXi
 ESXi 5.5 or later
 *****************
 
-.ova files are available for supporting users, and a VyOS can also be stood up using a generic Linux instance, and attaching the bootable ISO file and installing from the ISO 
-using the normal process around `install image`.
+.ova files are available for supporting users, and a VyOS can also be stood up
+using a generic Linux instance, and attaching the bootable ISO file and
+installing from the ISO using the normal process around `install image`.
 
-.. NOTE:: There have been previous documented issues with GRE/IPSEC tunneling using the E1000 adapter on the VyOS guest, and use of the VMXNET3 has been advised.
+.. NOTE:: There have been previous documented issues with GRE/IPSEC tunneling
+   using the E1000 adapter on the VyOS guest, and use of the VMXNET3 has been
+   advised.
 
 Memory Contention Considerations
 --------------------------------
-When the underlying ESXi host is approaching ~92% memory utilisation it will start the balloon process in s a 'soft' state to start reclaiming memory from guest operating systems. 
-This causes an artificial pressure using the vmmemctl driver on memory usage on the virtual guest. As VyOS by default does not have a swap file, this vmmemctl pressure is unable to
-force processes to move in memory data to the paging file, and blindly consumes memory forcing the virtual guest into a low memory state with no way to escape. The balloon can expand to 65% of 
-guest allocated memory, so a VyOS guest running >35% of memory usage, can encounter an out of memory situation, and trigger the kernel oom_kill process. At this point a weighted 
-lottery favouring memory hungry processes will be run with the unlucky winner being terminated by the kernel.
+When the underlying ESXi host is approaching ~92% memory utilisation it will
+start the balloon process in s a 'soft' state to start reclaiming memory from
+guest operating systems. This causes an artificial pressure using the vmmemctl
+driver on memory usage on the virtual guest. As VyOS by default does not have
+a swap file, this vmmemctl pressure is unable to force processes to move in
+memory data to the paging file, and blindly consumes memory forcing the
+virtual guest into a low memory state with no way to escape. The balloon
+can expand to 65% of guest allocated memory, so a VyOS guest running >35% of
+memory usage, can encounter an out of memory situation, and trigger the kernel
+oom_kill process. At this point a weighted lottery favouring memory hungry
+processes will be run with the unlucky winner being terminated by the kernel.
 
-It is advised that VyOS routers are configured in a resource group with adequate memory reservations so that ballooning is not inflicted on virtual VyOS guests.
+It is advised that VyOS routers are configured in a resource group with
+adequate memory reservations so that ballooning is not inflicted on
+virtual VyOS guests.
 
 
 
@@ -28,5 +39,8 @@ It is advised that VyOS routers are configured in a resource group with adequate
 References
 ----------
 
+.. stop_vyoslinter
+
 https://muralidba.blogspot.com/2018/03/how-does-linux-out-of-memory-oom-killer.html
 
+.. start_vyoslinter
\ No newline at end of file
diff --git a/docs/installation/vyos-on-baremetal.rst b/docs/installation/vyos-on-baremetal.rst
index db618431..81d04f0d 100644
--- a/docs/installation/vyos-on-baremetal.rst
+++ b/docs/installation/vyos-on-baremetal.rst
@@ -109,8 +109,8 @@ Extension Modules
 WiFi
 """"
 
-Refer to :ref:`wireless-interface` for additional information, below listed modules
-have been tested successfully on this Hardware platform:
+Refer to :ref:`wireless-interface` for additional information, below listed
+modules have been tested successfully on this Hardware platform:
 
 * Compex WLE900VX mini-PCIe WiFi module, only supported in mPCIe slot 1.
 
@@ -118,7 +118,8 @@ WWAN
 """"
 
 Refer to :ref:`wwan-interface` for additional information, below listed modules
-have been tested successfully on this Hardware platform using VyOS 1.3 (equuleus):
+have been tested successfully on this Hardware platform using VyOS 1.3
+(equuleus):
 
 * Sierra Wireless AirPrime MC7304 miniPCIe card (LTE)
 * Sierra Wireless AirPrime MC7430 miniPCIe card (LTE)
@@ -137,6 +138,7 @@ Create a bootable USB pendrive using e.g. Rufus_ on a Windows machine.
 Connect serial port to a PC through null modem cable (RXD / TXD crossed over).
 Set terminal emulator to 115200 8N1.
 
+.. stop_vyoslinter
 .. code-block:: none
 
   PC Engines apu4
@@ -154,6 +156,9 @@ Set terminal emulator to 115200 8N1.
   3. Payload [memtest]
   4. Payload [setup]
 
+.. start_vyoslinter
+
+
 Now boot from the ``USB MSC Drive Generic Flash Disk 8.07`` media by pressing
 ``2``, the VyOS boot menu will appear, just wait 10 seconds or press ``Enter``
 to continue.

From f293c1d880af2889e5e5cdd54a18779d9f755c73 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 22:40:02 +0100
Subject: [PATCH 192/295] interfaces: fix lint errors

---
 docs/configuration/interfaces/bonding.rst   |  4 +-
 docs/configuration/interfaces/ethernet.rst  |  4 ++
 docs/configuration/interfaces/openvpn.rst   | 48 +++++++++++---------
 docs/configuration/interfaces/pppoe.rst     |  4 ++
 docs/configuration/interfaces/tunnel.rst    |  8 +++-
 docs/configuration/interfaces/vxlan.rst     |  4 +-
 docs/configuration/interfaces/wireguard.rst |  4 ++
 docs/configuration/interfaces/wireless.rst  | 49 ++++++++++++++-------
 8 files changed, 81 insertions(+), 44 deletions(-)

diff --git a/docs/configuration/interfaces/bonding.rst b/docs/configuration/interfaces/bonding.rst
index 547594e5..84f00132 100644
--- a/docs/configuration/interfaces/bonding.rst
+++ b/docs/configuration/interfaces/bonding.rst
@@ -352,8 +352,8 @@ interfaces from VyOS to a Juniper EX Switch system.
 Aruba/HP
 ========
 
-For a headstart you can use the below example on how to build a bond,port-channel
-with two interfaces from VyOS to a Aruba/HP 2510G switch.
+For a headstart you can use the below example on how to build a
+bond,port-channel with two interfaces from VyOS to a Aruba/HP 2510G switch.
 
 .. code-block:: none
 
diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst
index 562aeabc..b4151dd2 100644
--- a/docs/configuration/interfaces/ethernet.rst
+++ b/docs/configuration/interfaces/ethernet.rst
@@ -123,6 +123,8 @@ Operation
          TX:  bytes    packets     errors    dropped    carrier collisions
             5601460      62595          0          0          0          0
 
+.. stop_vyoslinter
+
 .. opcmd:: show interfaces ethernet <interface> physical
 
    Show information about physical `<interface>`
@@ -162,6 +164,8 @@ Operation
      supports-register-dump: yes
      supports-priv-flags: no
 
+.. start_vyoslinter
+
 .. opcmd:: show interfaces ethernet <interface> physical offload
 
    Show available offloading functions on given `<interface>`
diff --git a/docs/configuration/interfaces/openvpn.rst b/docs/configuration/interfaces/openvpn.rst
index f503ae84..0e4e9d74 100644
--- a/docs/configuration/interfaces/openvpn.rst
+++ b/docs/configuration/interfaces/openvpn.rst
@@ -186,7 +186,8 @@ Multi-client server is the most popular OpenVPN mode on routers. It always uses
 x.509 authentication and therefore requires a PKI setup. Refer this section
 **Generate X.509 Certificate and Keys** to generate a CA certificate,
 a server certificate and key, a certificate revocation list, a Diffie-Hellman
-key exchange parameters file. You do not need client certificates and keys for the server setup.
+key exchange parameters file. You do not need client certificates and keys for
+the server setup.
 
 In this example we will use the most complicated case: a setup where each
 client is a router that has its own subnet (think HQ and branch offices), since
@@ -269,16 +270,16 @@ Copy the Easy-RSA scripts to a new directory to modify the values.
   cd /config/my-easy-rsa-config
 
 To ensure the consistent use of values when generating the PKI, set default
-values to be used by the PKI generating scripts. Rename the vars.example filename
-to vars
+values to be used by the PKI generating scripts. Rename the vars.example
+filename to vars
 
 .. code-block:: none
 
   mv vars.example vars
 
-Following is the instance of the file after editing. You may also change other values in
-the file at your discretion/need, though for most cases the defaults should be just fine.
-(do not leave any of these parameters blank)
+Following is the instance of the file after editing. You may also change other
+values in the file at your discretion/need, though for most cases the defaults
+should be just fine. (do not leave any of these parameters blank)
 
 .. code-block:: none
 
@@ -292,9 +293,9 @@ the file at your discretion/need, though for most cases the defaults should be j
   set_var EASYRSA_KEY_SIZE        2048
 
 
-init-pki option will create a new pki directory or will delete any previously generated
-certificates stored in that folder. The term 'central' is used to refer server and
-'branch' for client
+init-pki option will create a new pki directory or will delete any previously
+generated certificates stored in that folder. The term 'central' is used to
+refer server and 'branch' for client
 
 .. note:: Remember the “CA Key Passphrase” prompted in build-ca command,
    as it will be asked in signing the server/client certificate.
@@ -308,7 +309,8 @@ certificates stored in that folder. The term 'central' is used to refer server a
   vyos@vyos:/config/my-easy-rsa-config$./easyrsa gen-dh
   vyos@vyos:/config/my-easy-rsa-config$./easyrsa build-client-full branch1 nopass
 
-To generate a certificate revocation list for any client, execute these commands:
+To generate a certificate revocation list for any client, execute these
+commands:
 
 .. code-block:: none
 
@@ -326,8 +328,8 @@ Copy the files to /config/auth/ovpn/ to use in OpenVPN tunnel creation
   vyos@vyos:/config/my-easy-rsa-config$ sudo cp pki/issued/central.crt  /config/auth/ovpn
   vyos@vyos:/config/my-easy-rsa-config$ sudo cp pki/crl.pem /config/auth/ovpn
 
-Additionally, each client needs a copy of ca.crt and its own client key and cert files.
-The files are plaintext so they may be copied either manually,
+Additionally, each client needs a copy of ca.crt and its own client key and
+cert files. The files are plaintext so they may be copied either manually,
 or through a remote file transfer tool like scp. Whichever method you use,
 the files need to end up in the proper location on each router.
 For example, Branch 1's router might have the following files:
@@ -344,12 +346,13 @@ LDAP
 ----
 
 Enterprise installations usually ship a kind of directory service which is used
-to have a single password store for all employees. VyOS and OpenVPN support using
-LDAP/AD as single user backend.
+to have a single password store for all employees. VyOS and OpenVPN support
+using LDAP/AD as single user backend.
 
 Authentication is done by using the ``openvpn-auth-ldap.so`` plugin which is
-shipped with every VyOS installation. A dedicated configuration file is required.
-It is best practise to store it in ``/config`` to survive image updates
+shipped with every VyOS installation. A dedicated configuration file is
+required. It is best practise to store it in ``/config`` to survive image
+updates
 
 .. code-block:: none
 
@@ -435,7 +438,8 @@ If you only want to check if the user account is enabled and can authenticate
     RequireGroup    false
   </Authorization>
 
-A complete LDAP auth OpenVPN configuration could look like the following example:
+A complete LDAP auth OpenVPN configuration could look like the following
+example:
 
 .. code-block:: none
 
@@ -453,8 +457,8 @@ A complete LDAP auth OpenVPN configuration could look like the following example
        server {
            domain-name example.com
            max-connections 5
-           name-server 1.1.1.1
-           name-server 9.9.9.9
+           name-server 203.0.113.0.10
+           name-server 198.51.100.3
            subnet 172.18.100.128/29
        }
        tls {
@@ -534,7 +538,8 @@ Will add ``persistent-key`` at the end of the generated OpenVPN configuration.
 Please use this only as last resort - things might break and OpenVPN won't start
 if you pass invalid options/syntax.
 
-.. cfgcmd:: set interfaces openvpn vtun10 openvpn-option 'push &quot;keepalive 1 10&quot;'
+.. cfgcmd:: set interfaces openvpn vtun10 openvpn-option
+   'push &quot;keepalive 1 10&quot;'
 
 Will add ``push "keepalive 1 10"`` to the generated OpenVPN config file.
 
@@ -563,7 +568,8 @@ The following commands let you check tunnel status.
 
 .. opcmd:: show openvpn site-to-site
 
-   Use this command to check the tunnel status for OpenVPN site-to-site interfaces.
+   Use this command to check the tunnel status for OpenVPN site-to-site 
+   interfaces.
 
 
 Reset OpenVPN
diff --git a/docs/configuration/interfaces/pppoe.rst b/docs/configuration/interfaces/pppoe.rst
index 393c71ed..9d10b91f 100644
--- a/docs/configuration/interfaces/pppoe.rst
+++ b/docs/configuration/interfaces/pppoe.rst
@@ -287,10 +287,14 @@ which is the default VLAN for Deutsche Telekom:
 IPv6 DHCPv6-PD Example
 ----------------------
 
+.. stop_vyoslinter
+
 The following configuration will assign a /64 prefix out of a /56 delegation
 to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64.
 If you do not know the prefix size delegated to you, start with sla-len 0.
 
+.. start_vyoslinter
+
 .. code-block:: none
 
   set interfaces pppoe pppoe0 authentication user vyos
diff --git a/docs/configuration/interfaces/tunnel.rst b/docs/configuration/interfaces/tunnel.rst
index 7b1502f8..b1e86edf 100644
--- a/docs/configuration/interfaces/tunnel.rst
+++ b/docs/configuration/interfaces/tunnel.rst
@@ -93,7 +93,8 @@ An example:
   set interfaces tunnel tun0 remote-ip 192.0.2.20
   set interfaces tunnel tun0 address 2001:db8:bb::1/64
 
-A full example of a Tunnelbroker.net config can be found at :ref:`here <examples-tunnelbroker-ipv6>`.
+A full example of a Tunnelbroker.net config can be found at
+:ref:`here <examples-tunnelbroker-ipv6>`.
 
 Generic Routing Encapsulation (GRE)
 -----------------------------------
@@ -135,7 +136,10 @@ ip otherwise it would have to be configured as well.
 Tunnel keys
 ^^^^^^^^^^^
 
-GRE is also the only classic protocol that allows creating multiple tunnels with the same source and destination due to its support for tunnel keys. Despite its name, this feature has nothing to do with security: it's simply an identifier that allows routers to tell one tunnel from another.
+GRE is also the only classic protocol that allows creating multiple tunnels
+with the same source and destination due to its support for tunnel keys.
+Despite its name, this feature has nothing to do with security: it's simply
+an identifier that allows routers to tell one tunnel from another.
 
 An example:
 
diff --git a/docs/configuration/interfaces/vxlan.rst b/docs/configuration/interfaces/vxlan.rst
index 95f8de35..ca25d21e 100644
--- a/docs/configuration/interfaces/vxlan.rst
+++ b/docs/configuration/interfaces/vxlan.rst
@@ -240,8 +240,8 @@ advertised.
   set interfaces bridge br241 member interface 'eth1.241'
   set interfaces bridge br241 member interface 'vxlan241'
 
-Binds eth1.241 and vxlan241 to each other by making them both member interfaces of
-the same bridge.
+Binds eth1.241 and vxlan241 to each other by making them both member 
+interfaces of the same bridge.
 
 .. code-block:: none
 
diff --git a/docs/configuration/interfaces/wireguard.rst b/docs/configuration/interfaces/wireguard.rst
index 3580fac3..c4dfbee7 100644
--- a/docs/configuration/interfaces/wireguard.rst
+++ b/docs/configuration/interfaces/wireguard.rst
@@ -262,4 +262,8 @@ Operational commands
   vyos@wg01# wireguard keypair default
 
 
+.. stop_vyoslinter
+
 .. _`WireGuard mailing list`: https://lists.zx2c4.com/pipermail/wireguard/2018-December/003704.html
+
+.. start_vyoslinter
\ No newline at end of file
diff --git a/docs/configuration/interfaces/wireless.rst b/docs/configuration/interfaces/wireless.rst
index fca285eb..097d7c49 100644
--- a/docs/configuration/interfaces/wireless.rst
+++ b/docs/configuration/interfaces/wireless.rst
@@ -111,7 +111,8 @@ Wireless options
 
   SSID to be used in IEEE 802.11 management frames
 
-.. cfgcmd:: set interfaces wireless <interface> type <access-point | station | monitor>
+.. cfgcmd:: set interfaces wireless <interface> type
+   <access-point | station | monitor>
 
   Wireless device type for this interface
 
@@ -137,7 +138,8 @@ HT (High Throughput) capabilities (802.11n)
 
   WMM-PS Unscheduled Automatic Power Save Delivery [U-APSD]
 
-.. cfgcmd:: set interfaces wireless <interface> capabilities ht channel-set-width <ht20 | ht40+ | ht40->
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht
+   channel-set-width <ht20 | ht40+ | ht40->
 
   Supported channel width set.
 
@@ -150,7 +152,8 @@ HT (High Throughput) capabilities (802.11n)
     Following table shows the channels that may be available for HT40- and HT40+
     use per IEEE 802.11n Annex J:
 
-    Depending on the location, not all of these channels may be available for use!
+    Depending on the location, not all of these channels may be available for
+    use!
 
     .. code-block:: none
 
@@ -163,7 +166,8 @@ HT (High Throughput) capabilities (802.11n)
     BSSes. These changes are done automatically when hostapd is setting up the
     40 MHz channel.
 
-.. cfgcmd:: set interfaces wireless <interface> capabilities ht delayed-block-ack
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht
+   delayed-block-ack
 
   Enable HT-delayed Block Ack ``[DELAYED-BA]``
 
@@ -183,15 +187,18 @@ HT (High Throughput) capabilities (802.11n)
 
   Enable L-SIG TXOP protection capability
 
-.. cfgcmd:: set interfaces wireless <interface> capabilities ht max-amsdu <3839 | 7935>
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht max-amsdu
+   <3839 | 7935>
 
   Maximum A-MSDU length 3839 (default) or 7935 octets
 
-.. cfgcmd:: set interfaces wireless <interface> capabilities ht short-gi <20 | 40>
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht
+   short-gi <20 | 40>
 
   Short GI capabilities for 20 and 40 MHz
 
-.. cfgcmd:: set interfaces wireless <interface> capabilities ht smps <static | dynamic>
+.. cfgcmd:: set interfaces wireless <interface> capabilities ht
+   smps <static | dynamic>
 
   Spatial Multiplexing Power Save (SMPS) settings
 
@@ -210,7 +217,8 @@ VHT (Very High Throughput) capabilities (802.11ac)
 
   Number of antennas on this card
 
-.. cfgcmd:: set interfaces wireless <interface> capabilities vht antenna-pattern-fixed
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht
+   antenna-pattern-fixed
 
   Set if antenna pattern does not change during the lifetime of an association
 
@@ -225,15 +233,19 @@ VHT (Very High Throughput) capabilities (802.11ac)
   * ``multi-user-beamformer`` - Support for operation as single user beamformer
   * ``multi-user-beamformee`` - Support for operation as single user beamformer
 
-.. cfgcmd:: set interfaces wireless <interface> capabilities vht center-channel-freq <freq-1 | freq-2> <number>
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht
+   center-channel-freq <freq-1 | freq-2> <number>
 
-  VHT operating channel center frequency - center freq 1 (for use with 80, 80+80 and 160 modes)
+  VHT operating channel center frequency - center freq 1
+  (for use with 80, 80+80 and 160 modes)
 
-  VHT operating channel center frequency - center freq 2 (for use with the 80+80 mode)
+  VHT operating channel center frequency - center freq 2
+  (for use with the 80+80 mode)
 
   <number> must be from 34 - 173. For 80 MHz channels it should be channel + 6.
 
-.. cfgcmd:: set interfaces wireless <interface> capabilities vht channel-set-width <0 | 1 | 2 | 3>
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht
+   channel-set-width <0 | 1 | 2 | 3>
 
    * ``0`` - 20 or 40 MHz channel width (default)
    * ``1`` - 80 MHz channel width
@@ -248,15 +260,18 @@ VHT (Very High Throughput) capabilities (802.11ac)
 
   VHT link adaptation capabilities
 
-.. cfgcmd:: set interfaces wireless <interface> capabilities vht max-mpdu <value>
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht
+   max-mpdu <value>
 
   Increase Maximum MPDU length to 7991 or 11454 octets (default 3895 octets)
 
-.. cfgcmd:: set interfaces wireless <interface> capabilities vht max-mpdu-exp <value>
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht
+   max-mpdu-exp <value>
 
   Set the maximum length of A-MPDU pre-EOF padding that the station can receive
 
-.. cfgcmd:: set interfaces wireless <interface> capabilities vht short-gi <80 | 160>
+.. cfgcmd:: set interfaces wireless <interface> capabilities vht
+   short-gi <80 | 160>
 
   Short GI capabilities
 
@@ -440,8 +455,8 @@ information about all wireless interfaces.
 
 .. opcmd:: show interfaces wireless <wlanX>
 
-This command shows both status and statistics on the specified wireless interface.
-The wireless interface identifier can range from wlan0 to wlan999.
+This command shows both status and statistics on the specified wireless
+interface. The wireless interface identifier can range from wlan0 to wlan999.
 
 .. code-block:: none
 

From 2d11378b6a03462319276033b11d4ba51d6f0ded Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 22:40:31 +0100
Subject: [PATCH 193/295] _include files: fix lint errors

---
 docs/_include/common-references.txt           |  5 +++-
 .../interface-dhcpv6-prefix-delegation.txt    | 11 ++++++--
 .../interface-disable-flow-control.txt        |  9 ++++---
 docs/_include/interface-mirror.txt            | 25 +++++++++++--------
 docs/_include/interface-vlan-8021q.txt        | 24 ++++++++++--------
 5 files changed, 46 insertions(+), 28 deletions(-)

diff --git a/docs/_include/common-references.txt b/docs/_include/common-references.txt
index 79881972..de4f76e7 100644
--- a/docs/_include/common-references.txt
+++ b/docs/_include/common-references.txt
@@ -1,6 +1,9 @@
+.. stop_vyoslinter
+
 .. _`accel-ppp`: https://accel-ppp.org/
 .. _`Secure Socket Tunneling Protocol`: https://en.wikipedia.org/wiki/Secure_Socket_Tunneling_Protocol
 .. _Phabricator: https://phabricator.vyos.net/
-
 .. _802.1ad: https://en.wikipedia.org/wiki/IEEE_802.1ad
 .. _802.1q: https://en.wikipedia.org/wiki/IEEE_802.1Q
+
+.. start_vyoslinter
\ No newline at end of file
diff --git a/docs/_include/interface-dhcpv6-prefix-delegation.txt b/docs/_include/interface-dhcpv6-prefix-delegation.txt
index 6a001949..1ef94c14 100644
--- a/docs/_include/interface-dhcpv6-prefix-delegation.txt
+++ b/docs/_include/interface-dhcpv6-prefix-delegation.txt
@@ -1,7 +1,8 @@
 **DHCPv6 Prefix Delegation (PD)**
 
 VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation
-is supported by most ISPs who provide native IPv6 for consumers on fixed networks.
+is supported by most ISPs who provide native IPv6 for consumers on fixed
+networks.
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
   {{ var5 }} {{ var6 }} dhcpv6-options pd <id> length <length>
@@ -20,7 +21,8 @@ is supported by most ISPs who provide native IPv6 for consumers on fixed network
     set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-options pd 0 length 56
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
-  {{ var5 }} {{ var6 }} dhcpv6-options pd <id> interface <delegatee> address <address>
+  {{ var5 }} {{ var6 }} dhcpv6-options pd <id> interface <delegatee>
+  address <address>
 
   Specify the interface address used locally on the interfcae where the prefix
   has been delegated to. ID must be a decimal integer.
@@ -29,10 +31,15 @@ is supported by most ISPs who provide native IPv6 for consumers on fixed network
   complete interface address. The default is to use the EUI-64 address of the
   interface.
 
+  .. stop_vyoslinter
+
   Example: Delegate a /64 prefix to interface eth8 which will use a local
   address on this router of ``<prefix>::ffff``, as the address 65534 will
   correspond to ``ffff`` in hexadecimal notation.
 
+  .. start_vyoslinter
+
+
   .. code-block:: none
 
     set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} dhcpv6-options pd 0 interface eth8 address 65534
diff --git a/docs/_include/interface-disable-flow-control.txt b/docs/_include/interface-disable-flow-control.txt
index 2b319b22..347f1145 100644
--- a/docs/_include/interface-disable-flow-control.txt
+++ b/docs/_include/interface-disable-flow-control.txt
@@ -1,4 +1,5 @@
-.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} disable-flow-control
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+   disable-flow-control
 
   Ethernet flow control is a mechanism for temporarily stopping the transmission
   of data on Ethernet family computer networks. The goal of this mechanism is to
@@ -8,9 +9,9 @@
   802.3x standard.
 
   A sending station (computer or network switch) may be transmitting data faster
-  than the other end of the link can accept it. Using flow control, the receiving
-  station can signal the sender requesting suspension of transmissions until the
-  receiver catches up.
+  than the other end of the link can accept it. Using flow control, the
+  receiving station can signal the sender requesting suspension of
+  transmissions until the receiver catches up.
 
   Use this command to disable the generation of Ethernet flow control (pause
   frames).
diff --git a/docs/_include/interface-mirror.txt b/docs/_include/interface-mirror.txt
index 8cdbf77d..a3d12220 100644
--- a/docs/_include/interface-mirror.txt
+++ b/docs/_include/interface-mirror.txt
@@ -1,17 +1,22 @@
-SPAN port mirroring can copy the inbound/outbound traffic of the interface to the 
-specified interface, usually the interface can be connected to some special equipment,
-such as behavior control system, intrusion detection system and traffic collector, 
-and can copy all related traffic from this port
+SPAN port mirroring can copy the inbound/outbound traffic of the interface to
+the specified interface, usually the interface can be connected to some special
+equipment, such as behavior control system, intrusion detection system and
+traffic collector, and can copy all related traffic from this port
 
-VyOS uses the `mirror` option to configure port mirroring. The configuration is divided
-into 2 different directions. Destination ports should be configured for different traffic directions.
+VyOS uses the `mirror` option to configure port mirroring. The configuration
+is divided into 2 different directions. Destination ports should be configured
+for different traffic directions.
 
-.. cfgcmd:: set interfaces {{ var0 }} <interface> mirror ingress <monitor-interface>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> mirror
+   ingress <monitor-interface>
 
-   Configure port mirroring for `interface` inbound traffic and copy the traffic to `monitor-interface`
+   Configure port mirroring for `interface` inbound traffic and copy the
+   traffic to `monitor-interface`
 
-.. cfgcmd:: set interfaces {{ var0 }} <interface> mirror egress <monitor-interface>
+.. cfgcmd:: set interfaces {{ var0 }} <interface> mirror egress
+   <monitor-interface>
 
-   Configure port mirroring for `interface` outbound traffic and copy the traffic to `monitor-interface`
+   Configure port mirroring for `interface` outbound traffic and copy the
+   traffic to `monitor-interface`
 
    
diff --git a/docs/_include/interface-vlan-8021q.txt b/docs/_include/interface-vlan-8021q.txt
index 63f4433f..1a527590 100644
--- a/docs/_include/interface-vlan-8021q.txt
+++ b/docs/_include/interface-vlan-8021q.txt
@@ -1,20 +1,22 @@
-IEEE 802.1q_, often referred to as Dot1q, is the networking standard that supports
-virtual LANs (VLANs) on an IEEE 802.3 Ethernet network. The standard defines a
-system of VLAN tagging for Ethernet frames and the accompanying procedures to be
-used by bridges and switches in handling such frames. The standard also contains
-provisions for a quality-of-service prioritization scheme commonly known as IEEE
-802.1p and defines the Generic Attribute Registration Protocol.
+IEEE 802.1q_, often referred to as Dot1q, is the networking standard that
+supports virtual LANs (VLANs) on an IEEE 802.3 Ethernet network. The standard
+defines a system of VLAN tagging for Ethernet frames and the accompanying
+procedures to be used by bridges and switches in handling such frames.
+The standard also contains provisions for a quality-of-service prioritization
+scheme commonly known as IEEE 802.1p and defines the
+Generic Attribute Registration Protocol.
 
 Portions of the network which are VLAN-aware (i.e., IEEE 802.1q_ conformant) can
 include VLAN tags. When a frame enters the VLAN-aware portion of the network, a
-tag is added to represent the VLAN membership. Each frame must be distinguishable
-as being within exactly one VLAN. A frame in the VLAN-aware portion of the network
-that does not contain a VLAN tag is assumed to be flowing on the native VLAN.
+tag is added to represent the VLAN membership. Each frame must be
+distinguishable as being within exactly one VLAN. A frame in the VLAN-aware
+portion of the network that does not contain a VLAN tag is assumed to be
+flowing on the native VLAN.
 
 The standard was developed by IEEE 802.1, a working group of the IEEE 802
 standards committee, and continues to be actively revised. One of the notable
-revisions is 802.1Q-2014 which incorporated IEEE 802.1aq (Shortest Path Bridging)
-and much of the IEEE 802.1d standard.
+revisions is 802.1Q-2014 which incorporated IEEE 802.1aq
+(Shortest Path Bridging) and much of the IEEE 802.1d standard.
 
 802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The
 term used for this is ``vif``.

From 71c8077efb486f3d13c610bfe038f206f932e48c Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 22:40:51 +0100
Subject: [PATCH 194/295] configexamples: fix lint errors

---
 docs/configexamples/azure-vpn-bgp.rst         |  4 +++-
 .../dhcp-relay-through-gre-bridge.rst         | 20 +++++++++----------
 docs/configexamples/tunnelbroker-ipv6.rst     | 13 ++++++++++--
 docs/configexamples/wan-load-balancing.rst    |  4 ++++
 4 files changed, 28 insertions(+), 13 deletions(-)

diff --git a/docs/configexamples/azure-vpn-bgp.rst b/docs/configexamples/azure-vpn-bgp.rst
index 176e0ae0..6f2622b2 100644
--- a/docs/configexamples/azure-vpn-bgp.rst
+++ b/docs/configexamples/azure-vpn-bgp.rst
@@ -6,7 +6,9 @@ Route-Based Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)
 This guide shows an example of a route-based IKEv2 site-to-site VPN to
 Azure using VTI and BGP for dynamic routing updates.
 
-For redundant / active-active configurations see `Route-Based Redundant Site-to-Site VPN to Azure (BGP over IKEv2/IPsec) <https://docs.vyos.io/en/crux/appendix/examples/azure-vpn-dual-bgp.html>`_
+For redundant / active-active configurations see
+`Route-Based Redundant Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)
+<https://docs.vyos.io/en/crux/appendix/examples/azure-vpn-dual-bgp.html>`_
 
 Prerequisites
 ^^^^^^^^^^^^^
diff --git a/docs/configexamples/dhcp-relay-through-gre-bridge.rst b/docs/configexamples/dhcp-relay-through-gre-bridge.rst
index f94eb67f..0db5fa0a 100644
--- a/docs/configexamples/dhcp-relay-through-gre-bridge.rst
+++ b/docs/configexamples/dhcp-relay-through-gre-bridge.rst
@@ -21,18 +21,18 @@ DHCP Server
 .. code-block:: none
 
    set interfaces ethernet eth0 address '10.0.2.1/24'
-   set interfaces loopback lo address '3.3.3.3/24'
+   set interfaces loopback lo address '192.168.3.3/24'
    set interfaces tunnel tun100 address '172.16.0.2/30'
    set interfaces tunnel tun100 encapsulation 'gre-bridge'
    set interfaces tunnel tun100 local-ip '10.0.2.1'
    set interfaces tunnel tun100 remote-ip '192.168.0.1'
-   set protocols ospf area 0 network '3.3.3.0/24'
+   set protocols ospf area 0 network '192.168.3.0/24'
    set protocols ospf area 0 network '10.0.2.0/24'
-   set protocols ospf parameters router-id '3.3.3.3'
+   set protocols ospf parameters router-id '192.168.3.3'
    set protocols static interface-route 10.0.1.2/32 next-hop-interface tun100
    set service dhcp-server shared-network-name asdf authoritative
-   set service dhcp-server shared-network-name asdf subnet 3.3.3.0/24 range 0 start '3.3.3.30'
-   set service dhcp-server shared-network-name asdf subnet 3.3.3.0/24 range 0 stop '3.3.3.40'
+   set service dhcp-server shared-network-name asdf subnet 192.168.3.0/24 range 0 start '192.168.3.30'
+   set service dhcp-server shared-network-name asdf subnet 192.168.3.0/24 range 0 stop '192.168.3.40'
    set service dhcp-server shared-network-name asdf subnet 10.0.1.0/24 default-router '10.0.1.2'
    set service dhcp-server shared-network-name asdf subnet 10.0.1.0/24 range 0 start '10.0.1.200'
    set service dhcp-server shared-network-name asdf subnet 10.0.1.0/24 range 0 stop '10.0.1.210'
@@ -61,17 +61,17 @@ DHCP Relay
 
    set interfaces ethernet eth0 address '10.0.1.2/24'
    set interfaces ethernet eth1 address '192.168.0.1/24'
-   set interfaces loopback lo address '1.1.1.1'
+   set interfaces loopback lo address '10.100.100.1'
    set interfaces tunnel tun100 address '172.16.0.1/30'
    set interfaces tunnel tun100 encapsulation 'gre-bridge'
    set interfaces tunnel tun100 local-ip '192.168.0.1'
    set interfaces tunnel tun100 remote-ip '10.0.2.1'
    set protocols ospf area 0 network '10.0.1.0/24'
    set protocols ospf area 0 network '192.168.0.0/24'
-   set protocols ospf area 0 network '1.1.1.0/24'
-   set protocols ospf parameters router-id '1.1.1.1'
-   set protocols static interface-route 3.3.3.3/32 next-hop-interface tun100
+   set protocols ospf area 0 network '10.100.100.0/24'
+   set protocols ospf parameters router-id '10.100.100.1'
+   set protocols static interface-route 192.168.3.3/32 next-hop-interface tun100
    set service dhcp-relay interface 'eth0'
    set service dhcp-relay interface 'tun100'
-   set service dhcp-relay server '3.3.3.3'
+   set service dhcp-relay server '192.168.3.3'
    
diff --git a/docs/configexamples/tunnelbroker-ipv6.rst b/docs/configexamples/tunnelbroker-ipv6.rst
index 868b225f..b6f1cc07 100644
--- a/docs/configexamples/tunnelbroker-ipv6.rst
+++ b/docs/configexamples/tunnelbroker-ipv6.rst
@@ -1,5 +1,7 @@
 .. _examples-tunnelbroker-ipv6:
 
+.. stop_vyoslinter
+
 #######################
 Tunnelbroker.net (IPv6)
 #######################
@@ -110,7 +112,9 @@ should be replaced with the information from your `Routed /64` tunnel):
   set service router-advert interface eth1 name-server '2001:4860:4860::8844'
   set service router-advert interface eth1 prefix 2001:470:xxxx:xxxx::/64 
 
-Please note, 'autonomous-flag' and 'on-link-flag' are enabled by default, 'valid-lifetime' and 'preferred-lifetime' are set to default values of 30 days and 4 hours respectively.
+Please note, 'autonomous-flag' and 'on-link-flag' are enabled by default,
+'valid-lifetime' and 'preferred-lifetime' are set to default values of
+30 days and 4 hours respectively.
 
 This accomplishes a few things:
 
@@ -155,7 +159,9 @@ So, when your LAN is eth1, your DMZ is eth2, your cameras live on eth3, etc:
   set service router-advert interface eth3 name-server '2001:4860:4860::8844'
   set service router-advert interface eth3 prefix 2001:470:xxxx:3::/64
 
-Please note, 'autonomous-flag' and 'on-link-flag' are enabled by default, 'valid-lifetime' and 'preferred-lifetime' are set to default values of 30 days and 4 hours respectively.
+Please note, 'autonomous-flag' and 'on-link-flag' are enabled by default,
+'valid-lifetime' and 'preferred-lifetime' are set to default values of
+30 days and 4 hours respectively.
 
 Firewall
 ========
@@ -167,3 +173,6 @@ NAME`.
 Similarly, to attach the firewall, you would use `set interfaces ethernet eth0
 firewall in ipv6-name` or `set zone-policy zone LOCAL from WAN firewall
 ipv6-name`.
+
+
+.. start_vyoslinter
diff --git a/docs/configexamples/wan-load-balancing.rst b/docs/configexamples/wan-load-balancing.rst
index 7093defe..07974166 100644
--- a/docs/configexamples/wan-load-balancing.rst
+++ b/docs/configexamples/wan-load-balancing.rst
@@ -1,5 +1,7 @@
 .. _wan-load-balancing:
 
+.. stop_vyoslinter # pictures and text have to change
+
 WAN Load Balancer examples
 ==========================
 
@@ -168,3 +170,5 @@ eth+ is used as an alias that refers to all ethernet interfaces:
    set load-balancing wan rule 5 exclude
    set load-balancing wan rule 5 inbound-interface eth+
    set load-balancing wan rule 5 destination address 10.0.0.0/8
+
+.. start_vyoslinter
\ No newline at end of file

From 7b04596343a1894a638ff1de030fb0a179980194 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 22:41:24 +0100
Subject: [PATCH 195/295] protocols: fix lint errors

---
 docs/configuration/protocols/bfd.rst    |  9 ++++++---
 docs/configuration/protocols/igmp.rst   | 12 ++++++++----
 docs/configuration/protocols/isis.rst   | 20 ++++++++++++--------
 docs/configuration/protocols/mpls.rst   |  4 ++++
 docs/configuration/protocols/rpki.rst   |  6 +++++-
 docs/configuration/protocols/static.rst | 24 ++++++++++++++++--------
 6 files changed, 51 insertions(+), 24 deletions(-)

diff --git a/docs/configuration/protocols/bfd.rst b/docs/configuration/protocols/bfd.rst
index b8fdf489..20ff3b8a 100644
--- a/docs/configuration/protocols/bfd.rst
+++ b/docs/configuration/protocols/bfd.rst
@@ -25,19 +25,22 @@ Configure BFD
 
    Allow this BFD peer to not be directly connected
 
-.. cfgcmd:: set protocols bfd peer <address> source [address <address> | interface <interface>]
+.. cfgcmd:: set protocols bfd peer <address> source 
+   [address <address> | interface <interface>]
 
    Bind listener to specifid interface/address, mandatory for IPv6
 
 .. cfgcmd:: set protocols bfd peer <address> interval echo-interval <10-60000>
 
-   The minimal echo receive transmission interval that this system is capable of handling
+   The minimal echo receive transmission interval that this system is
+   capable of handling
 
 .. cfgcmd:: set protocols bfd peer <address> interval multiplier <2-255>
 
    Remote transmission interval will be multiplied by this value
 
-.. cfgcmd:: set protocols bfd peer <address> interval [receive | transmit] <10-60000>
+.. cfgcmd:: set protocols bfd peer <address> interval 
+   [receive | transmit] <10-60000>
 
    Interval in milliseconds
 
diff --git a/docs/configuration/protocols/igmp.rst b/docs/configuration/protocols/igmp.rst
index 9104b0c9..7109deb6 100644
--- a/docs/configuration/protocols/igmp.rst
+++ b/docs/configuration/protocols/igmp.rst
@@ -96,7 +96,8 @@ These are the commands for a basic setup.
    can communicate with PIM neighbors.
 
 
-.. cfgcmd:: set protocols pim rp address <address> group <multicast-address/mask-bits>
+.. cfgcmd:: set protocols pim rp address <address> group
+   <multicast-address/mask-bits>
 
    Use this comand to manually configure a Rendevouz Point for PIM so
    that join messages can be sent there. Set the Rendevouz Point address
@@ -140,7 +141,8 @@ You can also tune multicast with the following commands.
    platforms cannot see data flowing in better than 30 second chunks.
 
 
-.. cfgcmd:: set protocols igmp interface <interface> join <multicast-address> source <IP-address>
+.. cfgcmd:: set protocols igmp interface <interface> join <multicast-address>
+   source <IP-address>
 
    Use this command to allow the selected interface join a multicast
    group defining the multicast address you want to join and the source
@@ -153,7 +155,8 @@ You can also tune multicast with the following commands.
    host query interval (1-1800) in seconds that PIM will use.
 
 
-.. cfgcmd:: set protocols igmp interface <interface query-max-response-time <deciseconds>
+.. cfgcmd:: set protocols igmp interface <interface query-max-response-time
+   <deciseconds>
 
    Use this command to configure in the selected interface the IGMP
    query response timeout value (10-250) in deciseconds. If a report is
@@ -180,7 +183,8 @@ upstream interface, and one or more downstream interfaces.
 Configuration
 =============
 
-.. cfgcmd:: set protocols igmp-proxy interface <interface> role <upstream | downstream>
+.. cfgcmd:: set protocols igmp-proxy interface <interface> role
+   <upstream | downstream>
 
    * **upstream:** The upstream network interface is the outgoing interface
      which is responsible for communicating to available multicast data sources.
diff --git a/docs/configuration/protocols/isis.rst b/docs/configuration/protocols/isis.rst
index 64cc2535..753637f9 100644
--- a/docs/configuration/protocols/isis.rst
+++ b/docs/configuration/protocols/isis.rst
@@ -6,12 +6,14 @@
 IS-IS
 #####
 
-:abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway routing protocol.
-Like OSPF, IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s
-topology and, from that database, to determine the best (that is, shortest) path to a destination.
-The routers exchange topology information with their nearest neighbors.
-IS-IS runs directly on the data link layer (Layer 2).
-IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long.
+:abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state
+interior gateway routing protocol. Like OSPF, IS-IS runs the Dijkstra
+shortest-path first (SPF) algorithm to create a database of the network’s
+topology and, from that database, to determine the best (that is, shortest)
+path to a destination. The routers exchange topology information with their
+nearest neighbors. IS-IS runs directly on the data link layer (Layer 2).
+IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be
+8 to 20 bytes long, but are generally 10 bytes long.
 
 For example :abbr:`NET (Network Entity Title)`
 
@@ -28,12 +30,14 @@ The IS-IS address consists of three parts:
     ``0001`` IS-IS area number (Area1)
 
   System identifier:
-    ``1921.6800.1002`` For system idetifier we recommend to use IP address or MAC address of the router.
+    ``1921.6800.1002`` For system idetifier we recommend to use IP address or
+    MAC address of the router.
 
   NET selector:
     ``00`` Must always be 00, to indicate "this system".
 
-Simple IS-IS configuration using 2 nodes and redistributing connected interfaces.
+Simple IS-IS configuration using 2 nodes and redistributing connected
+interfaces.
 
 **Node 1:**
 
diff --git a/docs/configuration/protocols/mpls.rst b/docs/configuration/protocols/mpls.rst
index 863e7f62..3b59d8ea 100644
--- a/docs/configuration/protocols/mpls.rst
+++ b/docs/configuration/protocols/mpls.rst
@@ -240,4 +240,8 @@ Reset
   Use this command to reset an LDP neighbor/TCP session that is established
 
 
+.. stop_vyoslinter
+
 .. _`Wikipedia (MPLS)`: https://en.wikipedia.org/wiki/Multiprotocol_Label_Switching
+
+.. start_vyoslinter
\ No newline at end of file
diff --git a/docs/configuration/protocols/rpki.rst b/docs/configuration/protocols/rpki.rst
index 9813b1b6..c3ff442b 100644
--- a/docs/configuration/protocols/rpki.rst
+++ b/docs/configuration/protocols/rpki.rst
@@ -100,6 +100,8 @@ Once your routers are configured to reject RPKI-invalid prefixes, you can
 test whether the configuration is working correctly using the `RIPE Labs RPKI
 Test`_ experimental tool.
 
+.. stop_vyoslinter
+
 .. _tweet by EvilMog: https://twitter.com/Evil_Mog/status/1230924170508169216
 .. _Routinator: https://www.nlnetlabs.nl/projects/rpki/routinator/
 .. _GoRTR: https://github.com/cloudflare/gortr
@@ -110,4 +112,6 @@ Test`_ experimental tool.
 .. _RPKI analytics: https://www.nlnetlabs.nl/projects/rpki/rpki-analytics/
 .. _RIPE Labs RPKI Test: https://sg-pub.ripe.net/jasper/rpki-web-test/
 .. _excellent guide to RPKI: https://rpki.readthedocs.io/
-.. _help and operational guidance: https://rpki.readthedocs.io/en/latest/about/help.html
+.. _help and operational guidance: https://rpki.readthedocs.io/en/latest/about/help.htm
+
+.. start_vyoslinter
diff --git a/docs/configuration/protocols/static.rst b/docs/configuration/protocols/static.rst
index 43b77c41..42c0c4b7 100644
--- a/docs/configuration/protocols/static.rst
+++ b/docs/configuration/protocols/static.rst
@@ -28,7 +28,8 @@ Static Routes
 
    Disable this IPv4 static route entry.
 
-.. cfgcmd:: set protocols static route <subnet> next-hop <address> distance <distance>
+.. cfgcmd:: set protocols static route <subnet> next-hop <address>
+   distance <distance>
 
    Defines next-hop distance for this route, routes with smaller administrative
    distance are elected prior those with a higher distance.
@@ -47,7 +48,8 @@ Static Routes
 
    Disable this IPv6 static route entry.
 
-.. cfgcmd:: set protocols static route6 <subnet> next-hop <address> distance <distance>
+.. cfgcmd:: set protocols static route6 <subnet> next-hop <address>
+   distance <distance>
 
    Defines next-hop distance for this route, routes with smaller administrative
    distance are elected prior those with a higher distance.
@@ -61,34 +63,40 @@ Static Routes
 Interface Routes
 ================
 
-.. cfgcmd:: set protocols static interface-route <subnet> next-hop-interface <interface>
+.. cfgcmd:: set protocols static interface-route <subnet> next-hop-interface
+   <interface>
 
    Allows you to configure the next-hop interface for an interface-based IPv4
    static route. `<interface>` will be the next-hop interface where trafic is
    routed for the given `<subnet>`.
 
-.. cfgcmd:: set protocols static interface-route <subnet> next-hop-interface <interface> disable
+.. cfgcmd:: set protocols static interface-route <subnet> next-hop-interface
+   <interface> disable
 
    Disables interface-based IPv4 static route.
 
-.. cfgcmd:: set protocols static interface-route <subnet> next-hop-interface <interface> distance <distance>
+.. cfgcmd:: set protocols static interface-route <subnet> next-hop-interface
+   <interface> distance <distance>
 
    Defines next-hop distance for this route, routes with smaller administrative
    distance are elected prior those with a higher distance.
 
    Range is 1 to 255, default is 1.
 
-.. cfgcmd:: set protocols static interface-route6 <subnet> next-hop-interface <interface>
+.. cfgcmd:: set protocols static interface-route6 <subnet> next-hop-interface
+   <interface>
 
    Allows you to configure the next-hop interface for an interface-based IPv6
    static route. `<interface>` will be the next-hop interface where trafic is
    routed for the given `<subnet>`.
 
-.. cfgcmd:: set protocols static interface-route6 <subnet> next-hop-interface <interface> disable
+.. cfgcmd:: set protocols static interface-route6 <subnet> next-hop-interface
+   <interface> disable
 
    Disables interface-based IPv6 static route.
 
-.. cfgcmd:: set protocols static interface-route6 <subnet> next-hop-interface <interface> distance <distance>
+.. cfgcmd:: set protocols static interface-route6 <subnet> next-hop-interface
+   <interface> distance <distance>
 
    Defines next-hop distance for this route, routes with smaller administrative
    distance are elected prior those with a higher distance.

From 740561faab2f2c6a17d16dbe0759d160fa7cbcfb Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 22:42:00 +0100
Subject: [PATCH 196/295] debugging: fix lint errors

---
 docs/debugging.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/debugging.rst b/docs/debugging.rst
index 90313a88..6150ff60 100644
--- a/docs/debugging.rst
+++ b/docs/debugging.rst
@@ -183,7 +183,9 @@ you can use the ``/opt/vyatta/sbin/priority.pl`` script which lists to you
 the execution order of the scripts.
 
 .. stop_vyoslinter
+
 .. _vyatta-cfg: https://github.com/vyos/vyatta-cfg
 .. _bootchart.conf: https://github.com/vyos/vyos-build/blob/current/data/live-build-config/includes.chroot/etc/systemd/bootchart.conf
 .. include:: /_include/common-references.txt
+
 .. start_vyoslinter
\ No newline at end of file

From 8a43e769a0cc791ea21db7ec8f854da35e252c6d Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 22:42:20 +0100
Subject: [PATCH 197/295] documentation: fix lint errors

---
 docs/documentation.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/documentation.rst b/docs/documentation.rst
index fde07cd7..849008a8 100644
--- a/docs/documentation.rst
+++ b/docs/documentation.rst
@@ -337,9 +337,11 @@ predefined structure.
 
 
 .. stop_vyoslinter
+
 .. _Sphinx-doc: https://www.sphinx-doc.org
 .. _reStructuredText: http://www.sphinx-doc.org/en/master/usage/restructuredtext/index.html
 .. _reStructuredTextDirectives: https://docutils.sourceforge.io/docs/ref/rst/directives.html
 .. _README.md: https://github.com/vyos/vyos-documentation/blob/master/README.md
 .. include:: /_include/common-references.txt
+
 .. start_vyoslinter

From 95f1bc6724027e8b8cac7f507a2a5b3f10e26ede Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 22:43:35 +0100
Subject: [PATCH 198/295] policy: fix lint errors

---
 docs/configuration/policy/index.rst        | 30 ++++++++++++----------
 docs/configuration/trafficpolicy/index.rst |  2 ++
 2 files changed, 18 insertions(+), 14 deletions(-)

diff --git a/docs/configuration/policy/index.rst b/docs/configuration/policy/index.rst
index 4b7d48ee..c772306f 100644
--- a/docs/configuration/policy/index.rst
+++ b/docs/configuration/policy/index.rst
@@ -10,8 +10,10 @@ routes and their attributes needs to be put into the routing table.
 There could be a wide range of routing policies. Some examples are below:
 
 * Set some metric to routes learned from a particular neighbor
-* Set some attributes (like AS PATH or Community value) to advertised routes to neighbors
-* Prefer a specific routing protocol routes over another routing protocol running on the same router
+* Set some attributes (like AS PATH or Community value) to advertised routes
+  to neighbors
+* Prefer a specific routing protocol routes over another routing protocol
+  running on the same router
 
 Example
 =======
@@ -65,8 +67,6 @@ neighbor.
 You now see the longer AS path.
 
 
-.. include:: /_include/need_improvement.txt
-
 .. _routing-pbr:
 
 ###
@@ -136,7 +136,7 @@ Add default routes for routing ``table 10`` and ``table 11``
 
 .. code-block:: none
 
-  set protocols static table 10 route 0.0.0.0/0 next-hop 192.0.1.1
+  set protocols static table 10 route 0.0.0.0/0 next-hop 192.0.2.1
   set protocols static table 11 route 0.0.0.0/0 next-hop 192.0.2.2
 
 Add policy route matching VLAN source addresses
@@ -175,11 +175,13 @@ each other using the main routing table.
 Local route
 ===========
 
-The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)` for traffic, which originated from the router itself.
-That solution for multiple ISP's and VyOS router will respond from the same interface that the packet was received.
-Also, it used, if we want that one VPN tunnel to be through one provider, and the second through another.
+The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)`
+for traffic, which originated from the router itself. That solution for multiple
+ISP's and VyOS router will respond from the same interface that the packet was
+received. Also, it used, if we want that one VPN tunnel to be through one
+provider, and the second through another.
 
-* ``192.168.1.254`` IP addreess on VyOS eth1 from ISP1
+* ``203.0.113.0.254`` IP addreess on VyOS eth1 from ISP1
 * ``192.168.2.254`` IP addreess on VyOS eth2 from ISP2
 * ``table 10`` Routing table used for ISP1
 * ``table 11`` Routing table used for ISP2
@@ -188,10 +190,10 @@ Also, it used, if we want that one VPN tunnel to be through one provider, and th
 .. code-block:: none
 
   set policy local-route rule 101 set table '10'
-  set policy local-route rule 101 source '192.0.1.254'
+  set policy local-route rule 101 source '203.0.113.0.254'
   set policy local-route rule 102 set table '11'
   set policy local-route rule 102 source '192.0.2.254'
-  set protocols static table 10 route '0.0.0.0/0' next-hop '192.0.1.1'
+  set protocols static table 10 route '0.0.0.0/0' next-hop '203.0.113.0.1'
   set protocols static table 11 route '0.0.0.0/0' next-hop '192.0.2.2'
 
 Add multiple source IP in one rule with same priority
@@ -199,7 +201,7 @@ Add multiple source IP in one rule with same priority
 .. code-block:: none
 
   set policy local-route rule 101 set table '10'
-  set policy local-route rule 101 source '192.0.1.254'
-  set policy local-route rule 101 source '192.0.1.253'
-  set policy local-route rule 101 source '203.0.113.0/24'
+  set policy local-route rule 101 source '203.0.113.0.254'
+  set policy local-route rule 101 source '203.0.113.0.253'
+  set policy local-route rule 101 source '198.51.100.0/24'
 
diff --git a/docs/configuration/trafficpolicy/index.rst b/docs/configuration/trafficpolicy/index.rst
index 856ae01c..f3e498d4 100644
--- a/docs/configuration/trafficpolicy/index.rst
+++ b/docs/configuration/trafficpolicy/index.rst
@@ -1218,9 +1218,11 @@ That is how it is possible to do the so-called "ingress shaping".
 
 
 .. stop_vyoslinter
+
 .. _that can give you a great deal of flexibility: https://blog.vyos.io/using-the-policy-route-and-packet-marking-for-custom-qos-matches
 .. _tc: https://en.wikipedia.org/wiki/Tc_(Linux)
 .. _tocken bucket: https://en.wikipedia.org/wiki/Token_bucket
 .. _HFSC: https://en.wikipedia.org/wiki/Hierarchical_fair-service_curve
 .. _Intermediate Functional Block: https://www.linuxfoundation.org/collaborate/workgroups/networking/ifb
+
 .. start_vyoslinter
\ No newline at end of file

From ac19aa7518ac91ee891599d72007ade66bc99724 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 22:43:56 +0100
Subject: [PATCH 199/295] contributing: fix lint errors

---
 docs/contributing/build-vyos.rst  | 57 ++++++++++++++++++++-----------
 docs/contributing/development.rst |  9 +++--
 2 files changed, 44 insertions(+), 22 deletions(-)

diff --git a/docs/contributing/build-vyos.rst b/docs/contributing/build-vyos.rst
index 9ca6c8e1..cb97e418 100644
--- a/docs/contributing/build-vyos.rst
+++ b/docs/contributing/build-vyos.rst
@@ -10,9 +10,9 @@ Prerequisites
 
 There are different ways you can build VyOS.
 
-Building using a :ref:`build_docker` container, although not the only way, is the
-easiest way as all dependencies are managed for you. However, you can also
-set up your own build machine and run a :ref:`build_native`.
+Building using a :ref:`build_docker` container, although not the only way,
+is the easiest way as all dependencies are managed for you. However, you can
+also set up your own build machine and run a :ref:`build_native`.
 
 .. note:: Starting with VyOS 1.2 the release model of VyOS has changed. VyOS
    is now **free as in speech, but not as in beer**. This means that while
@@ -95,8 +95,9 @@ The container can also be built directly from source:
   $ docker build -t vyos/vyos-build:crux docker # For VyOS 1.2
   $ docker build -t vyos/vyos-build:current docker      # For rolling release
 
-.. note:: Since VyOS has switched to Debian (10) Buster in its ``current`` branch,
-   you will require individual container for `current` and `crux` builds.
+.. note:: Since VyOS has switched to Debian (10) Buster in its ``current``
+   branch, you will require individual container for `current` and `crux`
+   builds.
 
 Tips and Tricks
 ---------------
@@ -175,7 +176,8 @@ Please note as this will differ for both `current` and `crux`.
   # For VyOS 1.3 (equuleus, current)
   $ git clone -b current --single-branch https://github.com/vyos/vyos-build
 
-Now a fresh build of the VyOS ISO can begin. Change directory to the ``vyos-build`` directory and run:
+Now a fresh build of the VyOS ISO can begin. Change directory to the
+``vyos-build`` directory and run:
 
 .. code-block:: none
 
@@ -193,8 +195,8 @@ Start the build:
   vyos_bld@d4220bb519a0:/vyos# ./configure --architecture amd64 --build-by "j.randomhacker@vyos.io"
   vyos_bld@d4220bb519a0:/vyos# sudo make iso
 
-When the build is successful, the resulting iso can be found inside the ``build``
-directory as ``live-image-[architecture].hybrid.iso``.
+When the build is successful, the resulting iso can be found inside the
+``build`` directory as ``live-image-[architecture].hybrid.iso``.
 
 Good luck!
 
@@ -202,8 +204,8 @@ Good luck!
    Docker does not expose all the filesystem feature required to the container.
    Building within a VirtualBox server on Mac however possible.
 
-.. hint:: Building VyOS on Windows WSL2 with Docker integrated into WSL2 will work
-   like a charm. No problems are known so far!
+.. hint:: Building VyOS on Windows WSL2 with Docker integrated into WSL2 will
+   work like a charm. No problems are known so far!
 
 .. _build source:
 
@@ -305,8 +307,8 @@ The most obvious reasons could be:
   release kernel version from us.
 
 * You have your own custom kernel `*.deb` packages in the `packages` folder but
-  neglected to create all required out-of tree modules like Accel-PPP, WireGuard,
-  Intel QAT, Intel NIC
+  neglected to create all required out-of tree modules like Accel-PPP,
+  WireGuard, Intel QAT, Intel NIC
 
 Building The Kernel
 -------------------
@@ -343,12 +345,15 @@ file (example uses kernel 4.19.146):
 
   HEAD is now at 015e94d0e37b Linux 4.19.146
 
-Now we can use the helper script ``build-kernel.sh`` which does all the necessary
-voodoo by applying required patches from the `vyos-build/packages/linux-kernel/
-patches` folder, copying our kernel configuration ``x86_64_vyos_defconfig`` to
-the right location, and finally building the Debian packages.
+Now we can use the helper script ``build-kernel.sh`` which does all the
+necessary voodoo by applying required patches from the
+`vyos-build/packages/linux-kernel/patches` folder, copying our kernel
+configuration ``x86_64_vyos_defconfig`` to the right location, and finally
+building the Debian packages.
 
-.. note:: Building the kernel will take some time depending on the speed and quantity of your CPU/cores and disk speed. Expect 20 minutes (or even longer) on lower end hardware.
+.. note:: Building the kernel will take some time depending on the speed and
+   quantity of your CPU/cores and disk speed. Expect 20 minutes
+   (or even longer) on lower end hardware.
 
 .. code-block:: none
 
@@ -427,7 +432,8 @@ the right location, and finally building the Debian packages.
 
 In the end you will be presented with the kernel binary packages which you can
 then use in your custom ISO build process, by placing all the `*.deb` files in
-the vyos-build/packages folder where they will be used automatically when building VyOS as documented above.
+the vyos-build/packages folder where they will be used automatically when
+building VyOS as documented above.
 
 Firmware
 ^^^^^^^^
@@ -636,6 +642,8 @@ for whatever reason and you suspect it's a problem with APT dependencies or
 installation you can add this small patch which increases the APT verbosity
 during ISO build.
 
+.. stop_vyoslinter
+
 .. code-block:: diff
 
   diff --git i/scripts/live-build-config w/scripts/live-build-config
@@ -653,6 +661,9 @@ during ISO build.
            "${@}"
    """
 
+.. start_vyoslinter
+
+
 
 Virtualization Platforms
 ========================
@@ -713,8 +724,8 @@ Launch Docker container and build package
   # Build DEB
   $ dpkg-buildpackage -uc -us -tc -b
 
-After a minute or two you will find the generated DEB packages next to the vyos-1x
-source directory:
+After a minute or two you will find the generated DEB packages next to the
+vyos-1x source directory:
 
 .. code-block:: none
 
@@ -749,8 +760,14 @@ information.
    the source directories and built deb packages) if you want to build an iso
    from purely upstream packages.
 
+
+.. stop_vyoslinter
+
 .. _Docker: https://www.docker.com
 .. _`Docker as non-root`: https://docs.docker.com/install/linux/linux-postinstall/#manage-docker-as-a-non-root-user
 .. _VyOS DockerHub organisation: https://hub.docker.com/u/vyos
 .. _repository: https://github.com/vyos/vyos-build
 .. _VyOS GitHub project: https://github.com/vyos
+
+.. start_vyoslinter
+
diff --git a/docs/contributing/development.rst b/docs/contributing/development.rst
index 73b8b22e..cf274a33 100644
--- a/docs/contributing/development.rst
+++ b/docs/contributing/development.rst
@@ -658,8 +658,8 @@ Migrating old CLI
        validation is better left to commit-time scripts
    * - priority: 999
      - <properties> <priority>999</priority>
-     - Please leave a comment explaining why the priority was chosen (e.g. "after
-       interfaces are configured")
+     - Please leave a comment explaining why the priority was chosen
+       (e.g. "after interfaces are configured")
    * - multi:
      - <properties> <multi/>
      - Only applicable to leaf nodes
@@ -700,6 +700,9 @@ found. After a successful run the resulting Debian Package(s) will be deployed
 to our Debian repository which is used during build time. It is located here:
 http://dev.packages.vyos.net/repositories/.
 
+
+.. stop_vyoslinter
+
 .. _Jenkins: https://jenkins.io/
 .. _Dockerhub: https://hub.docker.com/u/vyos/
 .. _process: https://blog.vyos.io/vyos-development-digest-10
@@ -712,3 +715,5 @@ http://dev.packages.vyos.net/repositories/.
 .. _`MAC address`: https://github.com/vyos/vyos-1x/tree/current/interface-definitions/include/interface-mac.xml.i
 
 .. include:: /_include/common-references.txt
+
+.. start_vyoslinter

From 74b8c6d63abc2260ac477162d64f854e85c3b3e1 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Fri, 11 Dec 2020 22:44:17 +0100
Subject: [PATCH 200/295] troubeshooting: fix lint errors

---
 docs/troubleshooting/index.rst | 25 +++++++++++++++++++------
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/docs/troubleshooting/index.rst b/docs/troubleshooting/index.rst
index 0b3420f4..a965dbe6 100644
--- a/docs/troubleshooting/index.rst
+++ b/docs/troubleshooting/index.rst
@@ -160,9 +160,12 @@ Neighbor Discovery
 Interface names
 ***************
 
-If you find the names of your interfaces have changed, this could be because your MAC addresses have changed.
+If you find the names of your interfaces have changed, this could be because
+your MAC addresses have changed.
 
-* For example, you have a VyOS VM with 4 Ethernet interfaces named eth0, eth1, eth2 and eth3. Then, you migrate your VyOS VM to a different host and find your interfaces now are eth4, eth5, eth6 and eth7.
+* For example, you have a VyOS VM with 4 Ethernet interfaces named
+  eth0, eth1, eth2 and eth3. Then, you migrate your VyOS VM to a different
+  host and find your interfaces now are eth4, eth5, eth6 and eth7.
 
   One way to fix this issue **taking control of the MAC addresses** is:
 
@@ -174,18 +177,24 @@ If you find the names of your interfaces have changed, this could be because you
 
   Take note of MAC addresses.
 
-  Now, in order to update a MAC address in the configuration, run this command specifying the interface name and MAC address you want.
+  Now, in order to update a MAC address in the configuration, run this command
+  specifying the interface name and MAC address you want.
 
   .. code-block:: none
 
      set interfaces eth0 hw-id 00:0c:29:da:a4:fe
 
-  If it is a VM, go into the settings of the host and set the MAC address to the settings found in the config.boot file. You can also set the MAC to static if the host allows so.
+  If it is a VM, go into the settings of the host and set the MAC address to
+  the settings found in the config.boot file. You can also set the MAC to
+  static if the host allows so.
 
 
-* Another example could be when cloning VyOS VMs in GNS3 and you get into the same issue: interface names have changed.
+* Another example could be when cloning VyOS VMs in GNS3 and you get into the
+  same issue: interface names have changed.
   
-  And **a more generic way to fix it** is just deleting every MAC address at the configuration file of the cloned machine. They will be correctly regenerated automatically.
+  And **a more generic way to fix it** is just deleting every MAC address at
+  the configuration file of the cloned machine. They will be correctly
+  regenerated automatically.
 
 
 **********
@@ -436,6 +445,8 @@ These are the boot steps for VyOS 1.2
   11. Finally it runs the post-config script
       ``/config/scripts/vyos-postconfig-bootup.script``
 
+.. stop_vyoslinter
+
 .. _Quagga: https://www.quagga.net/
 .. _`GNU Zebra`: https://www.gnu.org/software/zebra/
 .. _FRR: https://frrouting.org/
@@ -444,3 +455,5 @@ These are the boot steps for VyOS 1.2
 .. _`Debian Jessie`: https://www.debian.org/releases/jessie/
 .. _tshark: https://www.wireshark.org/docs/man-pages/tshark.html
 .. _`PCAP filter expressions`: http://www.tcpdump.org/manpages/pcap-filter.7.html
+
+.. start_vyoslinter

From 5c467f0c3c260f1d52df3d76fc33946757c68fe7 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sat, 12 Dec 2020 20:44:47 +0100
Subject: [PATCH 201/295] console: fix note about USB to serial converters

---
 docs/configuration/system/console.rst | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/docs/configuration/system/console.rst b/docs/configuration/system/console.rst
index 4a750ada..4890da92 100644
--- a/docs/configuration/system/console.rst
+++ b/docs/configuration/system/console.rst
@@ -38,6 +38,9 @@ Major upgrades to the installed distribution may also require console access.
    * ``57600`` - 57,600 bps
    * ``115200`` - 115,200 bps (default for serial console)
 
-   .. note:: If you use a USB to serial converter please note that most of them
-      use software emulation without flow control, thus you should start with a
-      common baud rate of 9600 as otherwise you could get
+   .. note:: If you use USB to serial converters for connecting to your VyOS
+     appliance please note that most of them use software emulation without flow
+     control. This means you should start with a common baud rate (most likely
+     9600 baud) as otherwise you probably can not connect to the device using
+     high speed baud rates as your serial converter simply can not process this
+     datarate.

From 92113f4ad21f0ae5abc67ecc0fd485a6e7f0ee54 Mon Sep 17 00:00:00 2001
From: rebortg <rebortg@users.noreply.github.com>
Date: Mon, 14 Dec 2020 06:19:41 +0000
Subject: [PATCH 202/295] Update vyos-1x submodule

---
 docs/_include/vyos-1x | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
index 2f5de3cf..86f377f6 160000
--- a/docs/_include/vyos-1x
+++ b/docs/_include/vyos-1x
@@ -1 +1 @@
-Subproject commit 2f5de3cfadec3b708b4b332d154b3b619f4d873e
+Subproject commit 86f377f65248263e85fd0156e22daf0daf3c5fc4

From 076e013702429bb960c2897eecb4b2145310476b Mon Sep 17 00:00:00 2001
From: Jan-Philipp Benecke <jpb@cleverreach.com>
Date: Thu, 17 Dec 2020 12:35:32 +0100
Subject: [PATCH 203/295] flow-accounting: T3132: enable egress traffic
 accounting

---
 docs/configuration/system/flow-accounting.rst | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/docs/configuration/system/flow-accounting.rst b/docs/configuration/system/flow-accounting.rst
index 5bc737d6..7c1d1d2d 100644
--- a/docs/configuration/system/flow-accounting.rst
+++ b/docs/configuration/system/flow-accounting.rst
@@ -54,7 +54,7 @@ interface, the interface must be configured for flow accounting.
    accounting.
 
 .. note:: Will be recorded only packets/flows on **incoming** direction in
-   configured interfaces.
+   configured interfaces by default.
 
 
 By default, recorded flows will be saved internally and can be listed with the
@@ -68,6 +68,10 @@ CLI command. You may disable using the local in-memory table with the command:
    or stopping exporting, you may try to increase a default buffer size (10
    MiB) with the next command:
 
+.. cfgcmd:: set system flow-accounting enable-egress
+
+   If you need to sample also egress traffic, you may want to configure egress flow-accounting:
+
 .. cfgcmd:: set system flow-accounting buffer-size <buffer size>
 
    In case, if you need to catch some logs from flow-accounting daemon, you may

From 0ecc9bb6c07c3472df2b53fe8751235dee0bf283 Mon Sep 17 00:00:00 2001
From: Jan-Philipp Benecke <jpb@cleverreach.com>
Date: Thu, 17 Dec 2020 12:39:24 +0100
Subject: [PATCH 204/295] Make CI happy

---
 docs/configuration/system/flow-accounting.rst | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/docs/configuration/system/flow-accounting.rst b/docs/configuration/system/flow-accounting.rst
index 7c1d1d2d..a5f16f09 100644
--- a/docs/configuration/system/flow-accounting.rst
+++ b/docs/configuration/system/flow-accounting.rst
@@ -70,7 +70,8 @@ CLI command. You may disable using the local in-memory table with the command:
 
 .. cfgcmd:: set system flow-accounting enable-egress
 
-   If you need to sample also egress traffic, you may want to configure egress flow-accounting:
+   If you need to sample also egress traffic, you may want to
+   configure egress flow-accounting:
 
 .. cfgcmd:: set system flow-accounting buffer-size <buffer size>
 

From a20ed1801fad0a0a40b86b503c20bc90d502bd95 Mon Sep 17 00:00:00 2001
From: Jan-Philipp Benecke <jpb@cleverreach.com>
Date: Thu, 17 Dec 2020 20:31:26 +0100
Subject: [PATCH 205/295] flow-accounting: T3132: Fixing ordering

---
 docs/configuration/system/flow-accounting.rst | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/docs/configuration/system/flow-accounting.rst b/docs/configuration/system/flow-accounting.rst
index a5f16f09..8d46b178 100644
--- a/docs/configuration/system/flow-accounting.rst
+++ b/docs/configuration/system/flow-accounting.rst
@@ -62,17 +62,17 @@ CLI command. You may disable using the local in-memory table with the command:
 
 .. cfgcmd:: set system flow-accounting disable-imt
 
+   If you need to sample also egress traffic, you may want to
+   configure egress flow-accounting:
+
+.. cfgcmd:: set system flow-accounting enable-egress
+
    Internally, in flow-accounting processes exist a buffer for data exchanging
    between core process and plugins (each export target is a separated plugin).
    If you have high traffic levels or noted some problems with missed records
    or stopping exporting, you may try to increase a default buffer size (10
    MiB) with the next command:
 
-.. cfgcmd:: set system flow-accounting enable-egress
-
-   If you need to sample also egress traffic, you may want to
-   configure egress flow-accounting:
-
 .. cfgcmd:: set system flow-accounting buffer-size <buffer size>
 
    In case, if you need to catch some logs from flow-accounting daemon, you may

From 92e54bfb89bf27b98414845bbc993795a94595bf Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Thu, 17 Dec 2020 20:38:52 +0100
Subject: [PATCH 206/295] CI: use variable for repo name

---
 .github/workflows/submodules.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/submodules.yml b/.github/workflows/submodules.yml
index 66ecdf3e..129cc895 100644
--- a/.github/workflows/submodules.yml
+++ b/.github/workflows/submodules.yml
@@ -10,7 +10,7 @@ jobs:
     steps:
       - uses: actions/checkout@v2
         with:
-          repository: vyos/vyos-documentation
+          repository: ${{ github.repository }}
       - name: update submodule
         run: |
           git submodule status

From 8653820090714e5702431556872876783011f9ab Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 20 Dec 2020 13:19:43 +0100
Subject: [PATCH 207/295] dhcpv6-options: add DUID description

---
 docs/_include/interface-dhcpv6-options.txt | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/docs/_include/interface-dhcpv6-options.txt b/docs/_include/interface-dhcpv6-options.txt
index e7eaffb1..e047e92a 100644
--- a/docs/_include/interface-dhcpv6-options.txt
+++ b/docs/_include/interface-dhcpv6-options.txt
@@ -1,3 +1,16 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} dhcpv6-options duid <duid>
+
+  The DHCP unique identifier (DUID) is used by a client to get an IP address
+  from a DHCPv6 server. It has a 2-byte DUID type field, and a variable-length
+  identifier field up to 128 bytes. Its actual length depends on its type. The
+  server compares the DUID with its database and delivers configuration data
+  (address, lease times, DNS servers, etc.) to the client.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} duid '0e:00:00:01:00:01:27:71:db:f0:00:50:56:bf:c5:6d'
+
 .. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
   {{ var5 }} {{ var6 }} dhcpv6-options parameters-only
 

From 84ea67db630846210df983f4ab4cb966a550790a Mon Sep 17 00:00:00 2001
From: jack9603301 <jack9603301@163.com>
Date: Sun, 20 Dec 2020 22:24:48 +0800
Subject: [PATCH 208/295] Examples of adding VLAN awareness and port mirroring

---
 docs/_include/interface-mirror.txt         | 12 ++++++++++++
 docs/configuration/interfaces/bonding.rst  |  4 +++-
 docs/configuration/interfaces/bridge.rst   | 22 +++++++++++++++++++++-
 docs/configuration/interfaces/ethernet.rst |  2 ++
 4 files changed, 38 insertions(+), 2 deletions(-)

diff --git a/docs/_include/interface-mirror.txt b/docs/_include/interface-mirror.txt
index a3d12220..7903299a 100644
--- a/docs/_include/interface-mirror.txt
+++ b/docs/_include/interface-mirror.txt
@@ -12,11 +12,23 @@ for different traffic directions.
 
    Configure port mirroring for `interface` inbound traffic and copy the
    traffic to `monitor-interface`
+   
+   Example: Mirror the inbound traffic of `{{ var1 }}` port to `eth2`
+   
+   .. code-block:: none
+   
+     set interfaces {{ var0 }} {{ var1 }} mirror ingress {{ var2 }} 
 
 .. cfgcmd:: set interfaces {{ var0 }} <interface> mirror egress
    <monitor-interface>
 
    Configure port mirroring for `interface` outbound traffic and copy the
    traffic to `monitor-interface`
+   
+   Example: Mirror the outbound traffic of `{{ var1 }}` port to `eth2`
+   
+   .. code-block:: none
+   
+     set interfaces {{ var0 }} {{ var1 }} mirror egress {{ var2 }} 
 
    
diff --git a/docs/configuration/interfaces/bonding.rst b/docs/configuration/interfaces/bonding.rst
index 84f00132..92601b37 100644
--- a/docs/configuration/interfaces/bonding.rst
+++ b/docs/configuration/interfaces/bonding.rst
@@ -266,7 +266,9 @@ VLAN
 Port Mirror (SPAN)
 ==================
 .. cmdinclude:: ../../_include/interface-mirror.txt
-   :var0: ethernet
+   :var0: bonding
+   :var1: bond1
+   :var2: eth3
 
 *******
 Example
diff --git a/docs/configuration/interfaces/bridge.rst b/docs/configuration/interfaces/bridge.rst
index a471b8f8..17e3d50b 100644
--- a/docs/configuration/interfaces/bridge.rst
+++ b/docs/configuration/interfaces/bridge.rst
@@ -127,6 +127,12 @@ VLAN
    VLAN tag enters the port, the data packet will be forced to add a tag of a
    specific vlan id. When the vlan id flag flows out, the tag of the vlan id
    will be stripped
+   
+   Example: Set `eth0` member port to be native VLAN 2
+   
+   .. code-block:: none
+
+     set interfaces bridge br1 member interface eth0 native-vlan 2
 
 .. cfgcmd:: set interfaces bridge <interface> member interface <member>
    allowed-vlan <vlan-id>
@@ -134,11 +140,25 @@ VLAN
    Allows specific VLAN IDs to pass through the bridge member interface. This
    can either be an individual VLAN id or a range of VLAN ids delimited by a
    hyphen.
+   
+   Example: Set `eth0` member port to be allowed VLAN 4
+   
+   .. code-block:: none
+   
+     set interfaces bridge br1 member interface eth0 allowed-vlan 4
+  
+   Example: Set `eth0` member port to be allowed VLAN 6-8
+   
+   .. code-block:: none
+   
+     set interfaces bridge br1 member interface eth0 allowed-vlan 6-8
 
 Port Mirror (SPAN)
 ==================
 .. cmdinclude:: ../../_include/interface-mirror.txt
-   :var0: ethernet
+   :var0: bridge
+   :var1: br1
+   :var2: eth3
 
 *******
 Example
diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst
index b4151dd2..c1ee724b 100644
--- a/docs/configuration/interfaces/ethernet.rst
+++ b/docs/configuration/interfaces/ethernet.rst
@@ -87,6 +87,8 @@ Port Mirror (SPAN)
 ==================
 .. cmdinclude:: ../../_include/interface-mirror.txt
    :var0: ethernet
+   :var1: eth1
+   :var2: eth3
 
 *********
 Operation

From c06ec85619a4c98342ab8791d73fd6ab5a9239db Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 20 Dec 2020 16:07:13 +0100
Subject: [PATCH 209/295] ethernet: document offloading

---
 docs/configuration/interfaces/ethernet.rst | 34 ++++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst
index b4151dd2..2debed16 100644
--- a/docs/configuration/interfaces/ethernet.rst
+++ b/docs/configuration/interfaces/ethernet.rst
@@ -66,6 +66,40 @@ Ethernet options
 
     set interfaces ethernet eth0 mirror eth1
 
+Offloading
+----------
+
+.. cfgcmd:: set interfaces ethernet <interface> offload <gro | gso | sg |
+  tso | ufo>
+
+  Enable different types of hardware offloading on the given NIC.
+
+  Generic segmentation offload is a pure software offload that is meant to deal
+  with cases where device drivers cannot perform the offloads described above.
+  What occurs in GSO is that a given skbuff will have its data broken out over
+  multiple skbuffs that have been resized to match the MSS provided via
+  skb_shinfo()->gso_size.
+
+  Before enabling any hardware segmentation offload a corresponding software
+  offload is required in GSO. Otherwise it becomes possible for a frame to be
+  re-routed between devices and end up being unable to be transmitted.
+
+  Generic receive offload is the complement to GSO. Ideally any frame assembled
+  by GRO should be segmented to create an identical sequence of frames using
+  GSO, and any sequence of frames segmented by GSO should be able to be
+  reassembled back to the original by GRO. The only exception to this is IPv4
+  ID in the case that the DF bit is set for a given IP header. If the value of
+  the IPv4 ID is not sequentially incrementing it will be altered so that it is
+  when a frame assembled via GRO is segmented via GSO.
+
+  .. warning:: Recent 1.3 rolling images also support XDP offloading which
+    stands for eXpress Data Path in the Linux Kernel. You must enable it for
+    every interface which should participate in the XDP forwarding.
+
+    Enabling this feature will break any form of NAT or Firewalling on this
+    interface, as XDP is handled way earlier in the driver then NfTables.
+
+
 VLAN
 ====
 

From 4c97cb5a1f6863657788a1e4ee76e28ed6ae719e Mon Sep 17 00:00:00 2001
From: maehdros <bruno@maehdros.com>
Date: Sun, 20 Dec 2020 16:38:18 +0100
Subject: [PATCH 210/295] Update ospf-unnumbered.rst

Small Typo
---
 docs/configexamples/ospf-unnumbered.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/configexamples/ospf-unnumbered.rst b/docs/configexamples/ospf-unnumbered.rst
index 39f8f69a..dfb4eec1 100644
--- a/docs/configexamples/ospf-unnumbered.rst
+++ b/docs/configexamples/ospf-unnumbered.rst
@@ -4,7 +4,7 @@
 OSPF unnumbered with ECMP
 #########################
 
-General infomration can be found in the :ref:`routing-ospf` chapter.
+General information can be found in the :ref:`routing-ospf` chapter.
 
 Configuration
 =============

From 6a9c069b73c200ef3e9433f134f1b2cbd16ebd95 Mon Sep 17 00:00:00 2001
From: jack9603301 <jack9603301@163.com>
Date: Mon, 21 Dec 2020 01:08:13 +0800
Subject: [PATCH 211/295] Fix spelling errors

---
 docs/_include/interface-mirror.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/_include/interface-mirror.txt b/docs/_include/interface-mirror.txt
index 7903299a..f2b340fe 100644
--- a/docs/_include/interface-mirror.txt
+++ b/docs/_include/interface-mirror.txt
@@ -13,7 +13,7 @@ for different traffic directions.
    Configure port mirroring for `interface` inbound traffic and copy the
    traffic to `monitor-interface`
    
-   Example: Mirror the inbound traffic of `{{ var1 }}` port to `eth2`
+   Example: Mirror the inbound traffic of `{{ var1 }}` port to `{{ var2 }}`
    
    .. code-block:: none
    
@@ -25,7 +25,7 @@ for different traffic directions.
    Configure port mirroring for `interface` outbound traffic and copy the
    traffic to `monitor-interface`
    
-   Example: Mirror the outbound traffic of `{{ var1 }}` port to `eth2`
+   Example: Mirror the outbound traffic of `{{ var1 }}` port to `{{ var2 }}`
    
    .. code-block:: none
    

From 5d5fae3e0a89c50f807c0ab65c9c6401c15c4547 Mon Sep 17 00:00:00 2001
From: rebortg <rebortg@users.noreply.github.com>
Date: Mon, 21 Dec 2020 06:21:09 +0000
Subject: [PATCH 212/295] Update vyos-1x submodule

---
 docs/_include/vyos-1x | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
index 86f377f6..089b5f10 160000
--- a/docs/_include/vyos-1x
+++ b/docs/_include/vyos-1x
@@ -1 +1 @@
-Subproject commit 86f377f65248263e85fd0156e22daf0daf3c5fc4
+Subproject commit 089b5f10aaa3f7976eb3f9165e805babdbf2a564

From eb682f89e422251bd9084aebccf0f8611744c984 Mon Sep 17 00:00:00 2001
From: srividya0208 <a.srividya@vyos.io>
Date: Tue, 22 Dec 2020 06:58:09 -0500
Subject: [PATCH 213/295] VRRP acronym is corrected
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Docs » Configuration Guide » High availability >> VRRP acronym has been
corrected to Virtual Router Redundancy Protocol
---
 docs/configuration/highavailability/index.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/configuration/highavailability/index.rst b/docs/configuration/highavailability/index.rst
index c4dc443f..a223c283 100644
--- a/docs/configuration/highavailability/index.rst
+++ b/docs/configuration/highavailability/index.rst
@@ -3,7 +3,7 @@
 High availability
 =================
 
-VRRP (Virtual Redundancy Protocol) provides active/backup redundancy for
+VRRP (Virtual Router Redundancy Protocol) provides active/backup redundancy for
 routers. Every VRRP router has a physical IP/IPv6 address, and a virtual
 address. On startup, routers elect the master, and the router with the highest
 priority becomes the master and assigns the virtual address to its interface.

From 0fc606aa74dba402e72ddb6c8abda3b2d0dffe0f Mon Sep 17 00:00:00 2001
From: Cheeze_It <none@none.com>
Date: Tue, 22 Dec 2020 11:16:50 -0700
Subject: [PATCH 214/295] mpls: T915: Added documentation for LDP ordered
 control

Added the ordered control command in the documentation.
Also added the RFC in which it is referred to as well.
---
 docs/configuration/protocols/mpls.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docs/configuration/protocols/mpls.rst b/docs/configuration/protocols/mpls.rst
index 3b59d8ea..312a0df2 100644
--- a/docs/configuration/protocols/mpls.rst
+++ b/docs/configuration/protocols/mpls.rst
@@ -155,6 +155,12 @@ Configuration Options
   the Dual-Stack capability TLV for IPv6 LDP communications. This is related to
   :rfc:`7552`.
 
+.. cfgcmd:: set protocols mpls ldp parameters ordered-control
+
+  Use this command to use ordered label distribution control mode. FRR
+  by default uses independent label distribution control mode for label
+  distribution.  This is related to :rfc:`5036`.
+
 .. cfgcmd:: set protocols mpls ldp parameters transport-prefer-ipv4
 
   Use this command to prefer IPv4 for TCP peer transport connection for LDP

From 6cdae273512a3e78cef93c1227274fcf4733add0 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Wed, 23 Dec 2020 14:16:37 +0100
Subject: [PATCH 215/295] ethernet: xdp: adjust CLI node

---
 docs/configuration/interfaces/ethernet.rst | 21 ++++++++++++++++-----
 1 file changed, 16 insertions(+), 5 deletions(-)

diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst
index 25eebf25..8c6bcc07 100644
--- a/docs/configuration/interfaces/ethernet.rst
+++ b/docs/configuration/interfaces/ethernet.rst
@@ -92,13 +92,24 @@ Offloading
   the IPv4 ID is not sequentially incrementing it will be altered so that it is
   when a frame assembled via GRO is segmented via GSO.
 
-  .. warning:: Recent 1.3 rolling images also support XDP offloading which
-    stands for eXpress Data Path in the Linux Kernel. You must enable it for
-    every interface which should participate in the XDP forwarding.
+.. cfgcmd:: set interfaces ethernet <interface> xdp
 
-    Enabling this feature will break any form of NAT or Firewalling on this
-    interface, as XDP is handled way earlier in the driver then NfTables.
+  Enable support for Linux :abbr:`XDP (eXpress Data Path)` on recent 1.3 rolling
+  releases. You must enable it for every interface which should participate in
+  the XDP forwarding.
 
+  XDP is an eBPF based high performance data path merged in the Linux kernel
+  since version 4.8. The idea behind XDP is to add an early hook in the RX path
+  of the kernel, and let a user supplied eBPF program decide the fate of the
+  packet. The hook is placed in the NIC driver just after the interrupt
+  processing, and before any memory allocation needed by the network stack
+  itself, because memory allocation can be an expensive operation.
+
+  .. warning:: This is highly experimental!
+
+  .. note:: Enabling this feature will break any form of NAT or Firewalling on
+    this interface, as XDP is handled way earlier in the driver then iptables/
+    nftables.
 
 VLAN
 ====

From 2b55a3a72fca5975724836df2d857de77fb12e7f Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Wed, 23 Dec 2020 14:30:45 +0100
Subject: [PATCH 216/295] xdp: use common include for both ethernet and bond

---
 docs/_include/interface-xdp.txt            | 24 ++++++++++++++++++++++
 docs/configuration/interfaces/bonding.rst  |  8 ++++++++
 docs/configuration/interfaces/ethernet.rst | 21 +++----------------
 3 files changed, 35 insertions(+), 18 deletions(-)
 create mode 100644 docs/_include/interface-xdp.txt

diff --git a/docs/_include/interface-xdp.txt b/docs/_include/interface-xdp.txt
new file mode 100644
index 00000000..6f5f88c1
--- /dev/null
+++ b/docs/_include/interface-xdp.txt
@@ -0,0 +1,24 @@
+.. cfgcmd:: set interfaces {{ var0 }} <interface> xdp
+
+  Enable support for Linux :abbr:`XDP (eXpress Data Path)` on recent 1.3 rolling
+  releases. You must enable it for every interface which should participate in
+  the XDP forwarding.
+
+  XDP is an eBPF based high performance data path merged in the Linux kernel
+  since version 4.8. The idea behind XDP is to add an early hook in the RX path
+  of the kernel, and let a user supplied eBPF program decide the fate of the
+  packet. The hook is placed in the NIC driver just after the interrupt
+  processing, and before any memory allocation needed by the network stack
+  itself, because memory allocation can be an expensive operation.
+
+  .. warning:: This is highly experimental!
+
+  .. note:: Enabling this feature will break any form of NAT or Firewalling on
+    this interface, as XDP is handled way earlier in the driver then iptables/
+    nftables.
+
+  Example:
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} xdp
\ No newline at end of file
diff --git a/docs/configuration/interfaces/bonding.rst b/docs/configuration/interfaces/bonding.rst
index 92601b37..bf7cfc2c 100644
--- a/docs/configuration/interfaces/bonding.rst
+++ b/docs/configuration/interfaces/bonding.rst
@@ -256,6 +256,13 @@ Bond options
    The maximum number of targets that can be specified is 16. The default value
    is no IP addresses.
 
+Offloading
+----------
+
+.. cmdinclude:: /_include/interface-xdp.txt
+   :var0: bonding
+   :var1: bond0
+
 VLAN
 ====
 
@@ -265,6 +272,7 @@ VLAN
 
 Port Mirror (SPAN)
 ==================
+
 .. cmdinclude:: ../../_include/interface-mirror.txt
    :var0: bonding
    :var1: bond1
diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst
index 8c6bcc07..2eca130f 100644
--- a/docs/configuration/interfaces/ethernet.rst
+++ b/docs/configuration/interfaces/ethernet.rst
@@ -92,24 +92,9 @@ Offloading
   the IPv4 ID is not sequentially incrementing it will be altered so that it is
   when a frame assembled via GRO is segmented via GSO.
 
-.. cfgcmd:: set interfaces ethernet <interface> xdp
-
-  Enable support for Linux :abbr:`XDP (eXpress Data Path)` on recent 1.3 rolling
-  releases. You must enable it for every interface which should participate in
-  the XDP forwarding.
-
-  XDP is an eBPF based high performance data path merged in the Linux kernel
-  since version 4.8. The idea behind XDP is to add an early hook in the RX path
-  of the kernel, and let a user supplied eBPF program decide the fate of the
-  packet. The hook is placed in the NIC driver just after the interrupt
-  processing, and before any memory allocation needed by the network stack
-  itself, because memory allocation can be an expensive operation.
-
-  .. warning:: This is highly experimental!
-
-  .. note:: Enabling this feature will break any form of NAT or Firewalling on
-    this interface, as XDP is handled way earlier in the driver then iptables/
-    nftables.
+.. cmdinclude:: /_include/interface-xdp.txt
+   :var0: ethernet
+   :var1: eth0
 
 VLAN
 ====

From f24d3637e5ecb07f202f04996007255c640f45e2 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Wed, 23 Dec 2020 14:49:46 +0100
Subject: [PATCH 217/295] xdp: referece XDP router from APNIC

---
 docs/_include/interface-xdp.txt | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docs/_include/interface-xdp.txt b/docs/_include/interface-xdp.txt
index 6f5f88c1..d87151fc 100644
--- a/docs/_include/interface-xdp.txt
+++ b/docs/_include/interface-xdp.txt
@@ -17,6 +17,9 @@
     this interface, as XDP is handled way earlier in the driver then iptables/
     nftables.
 
+  Enabling this feature will only load the XDP router code as described here:
+  https://blog.apnic.net/2020/04/30/how-to-build-an-xdp-based-bgp-peering-router/
+
   Example:
 
   .. code-block:: none

From 9133eaa620cd81c450084c5952c4b9ac99c24313 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Wed, 23 Dec 2020 15:45:26 +0100
Subject: [PATCH 218/295] xdp: ethernet: show statistics

---
 docs/configuration/interfaces/ethernet.rst | 26 ++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst
index 2eca130f..3eae0d95 100644
--- a/docs/configuration/interfaces/ethernet.rst
+++ b/docs/configuration/interfaces/ethernet.rst
@@ -265,3 +265,29 @@ Operation
         Vendor SN               : FNS092xxxxx
         Date code               : 0506xx
 
+.. stop_vyoslinter
+
+.. opcmd:: show interfaces ethernet <interface> xdp
+
+   Display XDP forwarding statistics
+
+   .. code-block:: none
+
+     vyos@vyos:~$ show interfaces ethernet eth1 xdp
+
+     Collecting stats from BPF map
+      - BPF map (bpf_map_type:6) id:176 name:xdp_stats_map key_size:4 value_size:16 max_entries:5
+     XDP-action
+     XDP_ABORTED            0 pkts (         0 pps)           0 Kbytes (     0 Mbits/s) period:0.250340
+     XDP_DROP               0 pkts (         0 pps)           0 Kbytes (     0 Mbits/s) period:0.250317
+     XDP_PASS               0 pkts (         0 pps)           0 Kbytes (     0 Mbits/s) period:0.250314
+     XDP_TX                 0 pkts (         0 pps)           0 Kbytes (     0 Mbits/s) period:0.250313
+     XDP_REDIRECT           0 pkts (         0 pps)           0 Kbytes (     0 Mbits/s) period:0.250313
+
+     XDP-action
+     XDP_ABORTED            0 pkts (         0 pps)           0 Kbytes (     0 Mbits/s) period:2.000410
+     XDP_DROP               0 pkts (         0 pps)           0 Kbytes (     0 Mbits/s) period:2.000414
+     XDP_PASS               0 pkts (         0 pps)           0 Kbytes (     0 Mbits/s) period:2.000414
+     XDP_TX                 0 pkts (         0 pps)           0 Kbytes (     0 Mbits/s) period:2.000414
+     XDP_REDIRECT           0 pkts (         0 pps)           0 Kbytes (     0 Mbits/s) period:2.000414
+

From a3e3cab6d5af5bf7786137b4b22ba5e2788eb723 Mon Sep 17 00:00:00 2001
From: Johann Richard <189003+johannrichard@users.noreply.github.com>
Date: Thu, 24 Dec 2020 18:11:30 +0100
Subject: [PATCH 219/295] doc: consistent openvpn folder naming

- use `/config/auth/openvpn` consistently when using and creating server certificates
---
 docs/configuration/interfaces/openvpn.rst | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/docs/configuration/interfaces/openvpn.rst b/docs/configuration/interfaces/openvpn.rst
index 0e4e9d74..2c273b34 100644
--- a/docs/configuration/interfaces/openvpn.rst
+++ b/docs/configuration/interfaces/openvpn.rst
@@ -317,16 +317,16 @@ commands:
   vyos@vyos:/config/my-easy-rsa-config$./easyrsa revoke client1
   vyos@vyos:/config/my-easy-rsa-config$ ./easyrsa gen-crl
 
-Copy the files to /config/auth/ovpn/ to use in OpenVPN tunnel creation
+Copy the files to /config/auth/openvpn/ to use in OpenVPN tunnel creation
 
 .. code-block:: none
 
-  vyos@vyos:/config/my-easy-rsa-config$ sudo mkdir /config/auth/ovpn
-  vyos@vyos:/config/my-easy-rsa-config$ sudo cp pki/ca.crt /config/auth/ovpn
-  vyos@vyos:/config/my-easy-rsa-config$ sudo cp pki/dh.pem  /config/auth/ovpn
-  vyos@vyos:/config/my-easy-rsa-config$ sudo cp pki/private/central.key /config/auth/ovpn
-  vyos@vyos:/config/my-easy-rsa-config$ sudo cp pki/issued/central.crt  /config/auth/ovpn
-  vyos@vyos:/config/my-easy-rsa-config$ sudo cp pki/crl.pem /config/auth/ovpn
+  vyos@vyos:/config/my-easy-rsa-config$ sudo mkdir /config/auth/openvpn
+  vyos@vyos:/config/my-easy-rsa-config$ sudo cp pki/ca.crt /config/auth/openvpn
+  vyos@vyos:/config/my-easy-rsa-config$ sudo cp pki/dh.pem  /config/auth/openvpn
+  vyos@vyos:/config/my-easy-rsa-config$ sudo cp pki/private/central.key /config/auth/openvpn
+  vyos@vyos:/config/my-easy-rsa-config$ sudo cp pki/issued/central.crt  /config/auth/openvpn
+  vyos@vyos:/config/my-easy-rsa-config$ sudo cp pki/crl.pem /config/auth/openvpn
 
 Additionally, each client needs a copy of ca.crt and its own client key and
 cert files. The files are plaintext so they may be copied either manually,
@@ -336,7 +336,7 @@ For example, Branch 1's router might have the following files:
 
 .. code-block:: none
 
-  vyos@branch1-rtr:$ ls /config/auth/ovpn
+  vyos@branch1-rtr:$ ls /config/auth/openvpn
   ca.crt branch1.crt branch1.key
 
 Client Authentication

From 8adf48d9b102cf9bd49b6d4516debaab1320d38a Mon Sep 17 00:00:00 2001
From: srividya0208 <a.srividya@vyos.io>
Date: Fri, 25 Dec 2020 07:00:53 -0500
Subject: [PATCH 220/295] RSA Keys: Added information related to RSA keys

RSA-Keys page was blank, so added the steps to generate and add the keys to
the VPN IPSec config.
Also corrected the IPSec/GRE page where authentication parameter was
missing before remote-id.
---
 docs/configuration/vpn/ipsec.rst    |  2 +-
 docs/configuration/vpn/rsa-keys.rst | 86 ++++++++++++++++++++++++++++-
 2 files changed, 86 insertions(+), 2 deletions(-)

diff --git a/docs/configuration/vpn/ipsec.rst b/docs/configuration/vpn/ipsec.rst
index 647f3753..2888336c 100644
--- a/docs/configuration/vpn/ipsec.rst
+++ b/docs/configuration/vpn/ipsec.rst
@@ -183,7 +183,7 @@ On the RIGHT (dynamic address):
   set vpn ipsec site-to-site peer 192.0.2.10 authentication id @RIGHT
   set vpn ipsec site-to-site peer 192.0.2.10 authentication mode rsa
   set vpn ipsec site-to-site peer 192.0.2.10 authentication rsa-key-name LEFT
-  set vpn ipsec site-to-site peer 192.0.2.10 remote-id @LEFT
+  set vpn ipsec site-to-site peer 192.0.2.10 authentication remote-id LEFT
   set vpn ipsec site-to-site peer 192.0.2.10 connection-type initiate
   set vpn ipsec site-to-site peer 192.0.2.10 default-esp-group MyESPGroup
   set vpn ipsec site-to-site peer 192.0.2.10 ike-group MyIKEGroup
diff --git a/docs/configuration/vpn/rsa-keys.rst b/docs/configuration/vpn/rsa-keys.rst
index 9f289d0d..7912cffe 100644
--- a/docs/configuration/vpn/rsa-keys.rst
+++ b/docs/configuration/vpn/rsa-keys.rst
@@ -1,4 +1,88 @@
 
 ########
 RSA-Keys
-########
\ No newline at end of file
+########
+RSA can be used for services such as key exchanges and for encryption purposes.
+To make IPSec work with dynamic address on one/both sides, we will have to use
+RSA keys for authentication. They are very fast and easy to setup.
+
+First, on both routers run the operational command “generate vpn rsa-key 
+bits 2048”. You may choose different length than 2048 of course.
+
+.. code-block:: none
+
+  vyos@left# run generate vpn rsa-key bits 2048
+  Generating rsa-key to /config/ipsec.d/rsa-keys/localhost.key
+
+  Your new local RSA key has been generated
+  The public portion of the key is:
+
+  0sAQO2335[long string here]
+
+Please note down this public key, as you have to add this RSA key in the opposite router.
+
+.. code-block:: none
+
+  set vpn rsa-keys rsa-key-name LEFT rsa-key KEYGOESHERE
+
+Now you are ready to setup IPsec. The key points:
+
+1. Since both routers do not know their effective public addresses, we set the local-address of the peer to "any".
+2. On the initiator, we set the peer address to its public address, but on the responder we only set the id.
+3. On the initiator, we need to set the remote-id option so that it can identify IKE traffic from the responder correctly.
+4. On the responder, we need to set the local id so that initiator can know who's talking to it for the point #3 to work.
+5. Don't forget to enable NAT traversal on both sides, "set vpn ipsec nat-traversal enable".
+
+LEFT SIDE:
+
+.. code-block:: none
+
+  set vpn rsa-keys rsa-key-name RIGHT rsa-key <PUBLIC KEY FROM THE RIGHT>
+
+  set vpn ipsec ipsec-interfaces interface eth0
+  set vpn ipsec nat-traversal 'enable'
+
+  set vpn ipsec esp-group MyESPGroup proposal 1 encryption aes128
+  set vpn ipsec esp-group MyESPGroup proposal 1 hash sha1
+
+  set vpn ipsec ike-group MyIKEGroup proposal 1 dh-group 2
+  set vpn ipsec ike-group MyIKEGroup proposal 1 encryption aes128
+  set vpn ipsec ike-group MyIKEGroup proposal 1 hash sha1
+
+  set vpn ipsec site-to-site peer 192.0.2.60 authentication mode rsa
+  set vpn ipsec site-to-site peer 192.0.2.60 authentication id @LEFT
+  set vpn ipsec site-to-site peer 192.0.2.60 authentication rsa-key-name RIGHT
+  set vpn ipsec site-to-site peer 192.0.2.60 authentication remote-id RIGHT
+  set vpn ipsec site-to-site peer 192.0.2.60 default-esp-group MyESPGroup
+  set vpn ipsec site-to-site peer 192.0.2.60 ike-group MyIKEGroup
+  set vpn ipsec site-to-site peer 192.0.2.60 local-address any
+  set vpn ipsec site-to-site peer 192.0.2.60 connection-type initiate
+  set vpn ipsec site-to-site peer 192.0.2.60 tunnel 1 local prefix 192.168.99.1/32
+  set vpn ipsec site-to-site peer 192.0.2.60 tunnel 1 remote prefix 192.168.99.2/32
+
+RIGHT SIDE:
+
+.. code-block:: none
+
+  set vpn rsa-keys rsa-key-name LEFT rsa-key <PUBLIC KEY FROM THE LEFT>
+
+  set vpn ipsec ipsec-interfaces interface eth0
+  set vpn ipsec nat-traversal 'enable'
+
+  set vpn ipsec esp-group MyESPGroup proposal 1 encryption aes128
+  set vpn ipsec esp-group MyESPGroup proposal 1 hash sha1
+
+  set vpn ipsec ike-group MyIKEGroup proposal 1 dh-group 2
+  set vpn ipsec ike-group MyIKEGroup proposal 1 encryption aes128
+  set vpn ipsec ike-group MyIKEGroup proposal 1 hash sha1
+
+  set vpn ipsec site-to-site peer @LEFT authentication id @RIGHT
+  set vpn ipsec site-to-site peer @LEFT authentication mode rsa
+  set vpn ipsec site-to-site peer @LEFT authentication rsa-key-name LEFT
+  set vpn ipsec site-to-site peer @LEFT connection-type respond
+  set vpn ipsec site-to-site peer @LEFT default-esp-group MyESPGroup
+  set vpn ipsec site-to-site peer @LEFT ike-group MyIKEGroup
+  set vpn ipsec site-to-site peer @LEFT local-address any
+  set vpn ipsec site-to-site peer @LEFT tunnel 1 local prefix 192.168.99.2/32
+  set vpn ipsec site-to-site peer @LEFT tunnel 1 remote prefix 192.168.99.1/32
+

From 3caeaac25e54a2af9c2c4c3df742e15a76336ecf Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sat, 26 Dec 2020 16:16:16 +0100
Subject: [PATCH 221/295] webproxy: update docs

---
 docs/configuration/service/webproxy.rst | 463 +++++++++++++++++++-----
 1 file changed, 370 insertions(+), 93 deletions(-)

diff --git a/docs/configuration/service/webproxy.rst b/docs/configuration/service/webproxy.rst
index e65c672c..e8f6423e 100644
--- a/docs/configuration/service/webproxy.rst
+++ b/docs/configuration/service/webproxy.rst
@@ -1,68 +1,369 @@
+.. _webproxy:
+
+########
 Webproxy
---------
+########
 
-The proxy service in VyOS is based on Squid3 and some related modules.
+The proxy service in VyOS is based on Squid_ and some related modules.
 
-Squid3_ is a caching and forwarding HTTP web proxy. It has a wide variety of
-uses, including speeding up a web server by caching repeated requests,
-caching web, DNS and other computer network lookups for a group of people
-sharing network resources, and aiding security by filtering traffic. Although
-primarily used for HTTP and FTP, Squid includes limited support for several
-other protocols including Internet Gopher, SSL,[6] TLS and HTTPS. Squid does
-not support the SOCKS protocol.
+Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety of
+uses, including speeding up a web server by caching repeated requests, caching
+web, DNS and other computer network lookups for a group of people sharing
+network resources, and aiding security by filtering traffic. Although primarily
+used for HTTP and FTP, Squid includes limited support for several other
+protocols including Internet Gopher, SSL,[6] TLS and HTTPS. Squid does not
+support the SOCKS protocol.
 
-All examples here assumes that your inside ip address is ``192.168.0.1``.
-Replace with your own where applicable.
-
-URL Filtering is provided by Squidguard_.
+URL Filtering is provided by SquidGuard_.
 
+*************
 Configuration
-^^^^^^^^^^^^^^
+*************
 
-.. code-block:: none
+.. cfgcmd:: set service webproxy append-domain <domain>
 
-  # Enable proxy service
-  set service webproxy listen-address 192.168.0.1
+  Use this command to specify a domain name to be appended to domain-names
+  within URLs that do not include a dot ``.`` the domain is appended.
 
-  # By default it will listen to port 3128. If you want something else you have to define that.
-  set service webproxy listen-address 192.168.0.1 port 2050
+  Example: to be appended is set to ``vyos.net`` and the URL received is
+  ``www/foo.html``, the system will use the generated, final URL of
+  ``www.vyos.net/foo.html``.
 
-  # By default the transparent proxy on that interface is enabled. To disable that you simply
-  set service webproxy listen-address 192.168.0.1 disable-transparent
+  .. code-block:: none
 
-  # Block specific urls
-  set service webproxy url-filtering squidguard local-block myspace.com
+    set service webproxy append-domain vyos.net
 
-  # If you want to you can log these blocks
-  set service webproxy url-filtering squidguard log local-block
+.. cfgcmd:: set service webproxy cache-size <size>
+
+  The size of the on-disk Proxy cache is user configurable. The Proxies default
+  cache-size is configured to 100 MB.
+
+  Unit of this command is MB.
+
+  .. code-block:: none
+
+    set service webproxy cache-size 1024
+
+.. cfgcmd:: set service webproxy default-port <port>
+
+  Specify the port used on which the proxy service is listening for requests.
+  This port is the default port used for the specified listen-address.
+
+  Default port is 3128.
+
+  .. code-block:: none
+
+    set service webproxy default-port 8080
+
+.. cfgcmd:: set service webproxy domain-block <domain>
+
+  Used to block specific domains by the Proxy. Specifying "vyos.net" will block
+  all access to vyos.net, and specifying ".xxx" will block all access to URLs
+  having an URL ending on .xxx.
+
+  .. code-block:: none
+
+    set service webproxy domain-block vyos.net
+
+.. cfgcmd:: set service webproxy domain-noncache <domain>
+
+  Allow access to sites in a domain without retrieving them from the Proxy
+  cache. Specifying "vyos.net" will allow access to vyos.net but the pages
+  accessed will not be cached. It useful for working around problems with
+  "If-Modified-Since" checking at certain sites.
+
+  .. code-block:: none
+
+    set service webproxy domain-noncache vyos.net
+
+.. cfgcmd:: set service webproxy listen-address <address>
+
+  Specifies proxy service listening address. The listen address is the IP
+  address on which the web proxy service listens for client requests.
+
+  For security, the listen address should only be used on internal/trusted
+  networks!
+
+  .. code-block:: none
+
+    set service webproxy listen-address 192.0.2.1
+
+.. cfgcmd:: set service webproxy listen-address <address> disable-transparent
+
+  Disables web proxy transparent mode at a listening address.
+
+  In transparent proxy mode, all traffic arriving on port 80 and destined for
+  the Internet is automatically forwarded through the proxy. This allows
+  immediate proxy forwarding without configuring client browsers.
+
+  Non-transparent proxying requires that the client browsers be configured with
+  the proxy settings before requests are redirected. The advantage of this is
+  that the client web browser can detect that a proxy is in use and can behave
+  accordingly. In addition, web-transmitted malware can sometimes be blocked by
+  a non-transparent web proxy, since they are not aware of the proxy settings.
+
+  .. code-block:: none
+
+    set service webproxy listen-address 192.0.2.1 disable-transparent
+
+.. cfgcmd:: set service webproxy listen-address <address> port <port>
+
+  Sets the listening port for a listening address. This overrides the default
+  port of 3128 on the specific listen address.
+
+  .. code-block:: none
+
+    set service webproxy listen-address 192.0.2.1 port 8080
 
 
-Options
-*******
+.. cfgcmd:: set service webproxy reply-block-mime <mime>
 
-Filtering by category
-^^^^^^^^^^^^^^^^^^^^^
+  Used to block a specific mime-type.
+
+  .. code-block:: none
+
+    # block all PDFs
+    set service webproxy reply-block-mime application/pdf
+
+
+.. cfgcmd:: set service webproxy reply-body-max-size <size>
+
+  Specifies the maximum size of a reply body in KB, used to limit the reply
+  size.
+
+  All reply sizes are accepted by default.
+
+  .. code-block:: none
+
+    set service webproxy reply-body-max-size 2048
+
+Authentication
+==============
+
+The embedded Squid proxy can use LDAP to authenticate users against a company
+wide directory. The following configuration is an example of how to use Active
+Directory as authentication backend. Queries are done via LDAP.
+
+.. cfgcmd:: set service webproxy authentication children <number>
+
+  Maximum number of authenticator processes to spawn. If you start too few
+  Squid will have to wait for them to process a backlog of credential
+  verifications, slowing it down. When password verifications are done via a
+  (slow) network you are likely to need lots of authenticator processes.
+
+  This defaults to 5.
+
+  .. code-block:: none
+
+    set service webproxy authentication children 10
+
+.. cfgcmd:: set service webproxy authentication credentials-ttl <time>
+
+  Specifies how long squid assumes an externally validated username:password
+  pair is valid for - in other words how often the helper program is called for
+  that user. Set this low to force revalidation with short lived passwords.
+
+  Time is in minutes and defaults to 60.
+
+  .. code-block:: none
+
+    set service webproxy authentication credentials-ttl 120
+
+
+.. cfgcmd:: set service webproxy authentication method <ldap>
+
+  Proxy authentication method, currently only LDAP is supported.
+
+  .. code-block:: none
+
+    set service webproxy authentication method ldap
+
+.. cfgcmd:: set service webproxy authentication realm
+
+  Specifies the protection scope (aka realm name) which is to be reported to
+  the client for the authentication scheme. It is commonly part of the text
+  the user will see when prompted for their username and password.
+
+  .. code-block:: none
+
+    set service webproxy authentication realm "VyOS proxy auth"
+
+LDAP
+----
+
+.. cfgcmd:: set service webproxy authentication ldap base-dn <base-dn>
+
+  Specifies the base DN under which the users are located.
+
+  .. code-block:: none
+
+    set service webproxy authentication ldap base-dn DC=vyos,DC=net
+
+
+.. cfgcmd:: set service webproxy authentication ldap bind-dn <bind-dn>
+
+  The DN and password to bind as while performing searches.
+
+  .. code-block:: none
+
+    set service webproxy authentication ldap bind-dn CN=proxyuser,CN=Users,DC=vyos,DC=net
+
+.. cfgcmd:: set service webproxy authentication ldap filter-expression <expr>
+
+  LDAP search filter to locate the user DN. Required if the users are in a
+  hierarchy below the base DN, or if the login name is not what builds the user
+  specific part of the users DN.
+
+  The search filter can contain up to 15 occurrences of %s which will be
+  replaced by the username, as in "uid=%s" for :rfc:`2037` directories. For a
+  detailed description of LDAP search filter syntax see :rfc:`2254`.
+
+  .. code-block:: none
+
+    set service webproxy authentication ldap filter-expression (cn=%s)
+
+.. cfgcmd:: set service webproxy authentication ldap password <password>
+
+  The DN and password to bind as while performing searches. As the password
+  needs to be printed in plain text in your Squid configuration it is strongly
+  recommended to use a account with minimal associated privileges. This to limit
+  the damage in case someone could get hold of a copy of your Squid
+  configuration file.
+
+  .. code-block:: none
+
+    set service webproxy authentication ldap password vyos
+
+.. cfgcmd:: set service webproxy authentication ldap persistent-connection
+
+  Use a persistent LDAP connection. Normally the LDAP connection is only open
+  while validating a username to preserve resources at the LDAP server. This
+  option causes the LDAP connection to be kept open, allowing it to be reused
+  for further user validations.
+
+  Recommended for larger installations.
+
+  .. code-block:: none
+
+    set service webproxy authentication ldap persistent-connection
+
+.. cfgcmd:: set service webproxy authentication ldap port <port>
+
+  Specify an alternate TCP port where the ldap server is listening if other than
+  the default LDAP port 389.
+
+  .. code-block:: none
+
+    set service webproxy authentication ldap port 389
+
+.. cfgcmd:: set service webproxy authentication ldap server <server>
+
+  Specify the LDAP server to connect to.
+
+  .. code-block:: none
+
+    set service webproxy authentication ldap server ldap.vyos.net
+
+
+.. cfgcmd:: set service webproxy authentication ldap use-ssl
+
+  Use TLS encryption.
+
+  .. code-block:: none
+
+    set service webproxy authentication ldap use-ssl
+
+
+.. cfgcmd:: set service webproxy authentication ldap username-attribute <attr>
+
+  Specifies the name of the DN attribute that contains the username/login.
+  Combined with the base DN to construct the users DN when no search filter is
+  specified (`filter-expression`).
+
+  Defaults to 'uid'
+
+  .. note:: This can only be done if all your users are located directly under
+    the same position in the LDAP tree and the login name is used for naming
+    each user object. If your LDAP tree does not match these criterias or if you
+    want to filter who are valid users then you need to use a search filter to
+    search for your users DN (`filter-expression`).
+
+  .. code-block:: none
+
+    set service webproxy authentication ldap username-attribute uid
+
+.. cfgcmd:: set service webproxy authentication ldap version <2 | 3>
+
+  LDAP protocol version. Defaults to 3 if not specified.
+
+  .. code-block:: none
+
+    set service webproxy authentication ldap version 2
+
+URL filtering
+=============
+
+.. include:: /_include/need_improvement.txt
+
+
+.. cfgcmd:: set service webproxy url-filtering disable
+
+  Disables web filtering without discarding configuration.
+
+  .. code-block:: none
+
+    set service webproxy url-filtering disable
+
+*********
+Operation
+*********
+
+.. include:: /_include/need_improvement.txt
+
+Filtering
+=========
+
+Update
+------
 
 If you want to use existing blacklists you have to create/download a database
 first. Otherwise you will not be able to commit the config changes.
 
-.. code-block:: none
 
-  vyos@vyos# commit
-  [ service webproxy ]
-  Warning: no blacklists installed
-  Unknown block-category [ads] for policy [default]
+.. opcmd:: update webproxy blacklists
 
-  [[service webproxy]] failed
-  Commit failed
+  Download/Update complete blacklist
 
-* Download/Update complete blacklist
+  .. code-block:: none
 
-  :code:`update webproxy blacklists`
+    vyos@vyos:~$ update webproxy blacklists
+    Warning: No url-filtering blacklist installed
+    Would you like to download a default blacklist? [confirm][y]
+    Connecting to ftp.univ-tlse1.fr (193.49.48.249:21)
+    blacklists.gz        100% |*************************************************************************************************************| 17.0M  0:00:00 ETA
+    Uncompressing blacklist...
+    Checking permissions...
+    Skip link for   [ads] -> [publicite]
+    Building DB for [adult/domains] - 2467177 entries
+    Building DB for [adult/urls] - 67798 entries
+    Skip link for   [aggressive] -> [agressif]
+    Building DB for [agressif/domains] - 348 entries
+    Building DB for [agressif/urls] - 36 entries
+    Building DB for [arjel/domains] - 69 entries
+    ...
 
-* Download/Update partial blacklist
+    Building DB for [webmail/domains] - 374 entries
+    Building DB for [webmail/urls] - 9 entries
 
-  :code:`update webproxy blacklists category ads`
+    The webproxy daemon must be restarted
+    Would you like to restart it now? [confirm][y]
+
+    [ ok ] Restarting squid (via systemctl): squid.service.
+    vyos@vyos:~$
+
+.. opcmd:: update webproxy blacklists category <category>
+
+  Download/Update partial blacklist.
 
   Use tab completion to get a list of categories.
 
@@ -77,12 +378,34 @@ first. Otherwise you will not be able to commit the config changes.
 
   :code:`set service webproxy url-filtering squidguard block-category malware`
 
-Authentication
-^^^^^^^^^^^^^^
+Bypassing the webproxy
+----------------------
 
-The embedded Squid proxy can use LDAP to authenticate users against a company
-wide directory. The following configuration is an example of how to use Active
-Directory as authentication backend. Queries are done via LDAP.
+.. include:: /_include/need_improvement.txt
+
+Some services don't work correctly when being handled via a web proxy.
+So sometimes it is useful to bypass a transparent proxy:
+
+* To bypass the proxy for every request that is directed to a specific
+  destination:
+
+  :code:`set service webproxy whitelist destination-address 198.51.100.33`
+
+  :code:`set service webproxy whitelist destination-address 192.0.2.0/24`
+
+
+* To bypass the proxy for every request that is coming from a specific source:
+
+  :code:`set service webproxy whitelist source-address 192.168.1.2`
+
+  :code:`set service webproxy whitelist source-address 192.168.2.0/24`
+
+  (This can be useful when a called service has many and/or often changing
+  destination addresses - e.g. Netflix.)
+
+********
+Examples
+********
 
 .. code-block:: none
 
@@ -107,51 +430,5 @@ Directory as authentication backend. Queries are done via LDAP.
        disable-transparent
    }
 
-* ``base-dn`` set the base directory for the search
-* ``bind-dn`` and ``password``: set the user, which is used for the ldap search
-* ``filter-expression``: set the exact filter which a authorized user match in
-  a ldap-search. In this example every User is able to authorized.
-
-You can find more about the ldap authentication
-`here 
-<http://www.squid-cache.org/Versions/v3/3.2/manuals/basic_ldap_auth.html>`_
-
-Adjusting cache size
-^^^^^^^^^^^^^^^^^^^^
-
-The size of the proxy cache can be adjusted by the user.
-
-.. code-block:: none
-
-  set service webproxy cache-size
-   Possible completions:
-     <0-4294967295>
-                  Disk cache size in MB (default 100)
-     0            Disable disk caching
-     100
-
-Bypassing the webproxy
-^^^^^^^^^^^^^^^^^^^^^^
-
-Some services don't work correctly when being handled via a web proxy.
-So sometimes it is useful to bypass a transparent proxy:
-
-* To bypass the proxy for every request that is directed to a specific
-  destination:
-
-  :code:`set service webproxy whitelist destination-address 198.51.100.33`
-
-  :code:`set service webproxy whitelist destination-address 192.0.2.0/24`
-
-
-* To bypass the proxy for every request that is coming from a specific source:
-
-  :code:`set service webproxy whitelist source-address 192.168.1.2`
-
-  :code:`set service webproxy whitelist source-address 192.168.2.0/24`
-
-  (This can be useful when a called service has many and/or often changing
-  destination addresses - e.g. Netflix.)
-
-.. _Squid3: http://www.squid-cache.org/
-.. _Squidguard: http://www.squidguard.org/
+.. _Squid: http://www.squid-cache.org/
+.. _SquidGuard: http://www.squidguard.org/

From 8d62b06b04283e1688584592b7ecc8144f8e341c Mon Sep 17 00:00:00 2001
From: srividya0208 <a.srividya@vyos.io>
Date: Sun, 27 Dec 2020 07:01:29 -0500
Subject: [PATCH 222/295] zone-policy: page information is added

zone-policy page was blank, added the definition and the configuration
example.
---
 docs/configuration/zonepolicy/index.rst | 65 ++++++++++++++++++++++++-
 1 file changed, 64 insertions(+), 1 deletion(-)

diff --git a/docs/configuration/zonepolicy/index.rst b/docs/configuration/zonepolicy/index.rst
index 31784dc3..8fe18778 100644
--- a/docs/configuration/zonepolicy/index.rst
+++ b/docs/configuration/zonepolicy/index.rst
@@ -1,3 +1,4 @@
+
 ###########
 Zone Policy
 ###########
@@ -5,4 +6,66 @@ Zone Policy
 
 .. toctree::
    :maxdepth: 1
-   :includehidden:
\ No newline at end of file
+   :includehidden:
+
+In zone-based policy, interfaces are assigned to zones, and inspection policy is applied to traffic moving between the zones and acted on according to firewall rules. 
+A Zone is a group of interfaces that have similar functions or features. It establishes the security borders of a network. 
+A zone defines a boundary where traffic is subjected to policy restrictions as it crosses to another region of a network.
+
+Key Points:
+
+* A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone.
+* All traffic to and from an interface within a zone is permitted.
+* All traffic between zones is affected by existing policies
+* Traffic cannot flow between zone member interface and any interface that is not a zone member. 
+* You need 2 separate firewalls to define traffic: one for each direction.
+
+Example: LAN Network is given SSH access to VyOS box.
+
+Firewall rules:
+
+.. code-block:: none
+
+  set firewall name lan-local default-action 'drop'
+  set firewall name lan-local rule 1 action 'accept'
+  set firewall name lan-local rule 1 state established 'enable'
+  set firewall name lan-local rule 1 state related 'enable'
+  set firewall name lan-local rule 2 action 'drop'
+  set firewall name lan-local rule 2 state invalid 'enable'
+  set firewall name lan-local rule 2 log enable
+  set firewall name lan-local rule 100 action 'accept'
+  set firewall name lan-local rule 100 destination port '22'
+  set firewall name lan-local rule 100 log 'enable'
+  set firewall name lan-local rule 100 protocol 'tcp'
+  set firewall name local-lan default-action 'drop'
+  set firewall name local-lan rule 1 action 'accept'
+  set firewall name local-lan rule 1 state established 'enable'
+  set firewall name local-lan rule 1 state related 'enable'
+  set firewall name local-lan rule 2 action 'drop'
+  set firewall name local-lan rule 2 state invalid 'enable'
+  set firewall name local-lan rule 2 log enable
+  set firewall name local-lan rule 100 action 'accept'
+  set firewall name local-lan rule 100 destination address '192.168.0.0/24'
+  set firewall name local-lan rule 100 log 'enable'
+  set firewall name local-lan rule 100 protocol 'tcp'
+  
+Zone-policy Config: 
+
+.. code-block:: none
+ 
+  set zone-policy zone lan default-action 'drop'
+  set zone-policy zone lan description 'Local Area Network'
+  set zone-policy zone lan interface 'eth2'
+  set zone-policy zone lan from local firewall name 'lan-local'
+  set zone-policy zone local default-action 'drop'
+  set zone-policy zone local description 'system-defined zone'
+  set zone-policy zone local from lan firewall name 'local-lan'
+  set zone-policy zone local local-zone
+
+A detailed zone-based policy example is written in the Configuration-Blueprints_ section.
+
+.. stop_vyoslinter
+
+.. _Configuration-Blueprints: https://docs.vyos.io/en/latest/configexamples/zone-policy.html
+
+.. start_vyoslinter

From 8ff455f2e31646986d80d52b77298f6fafc2f08a Mon Sep 17 00:00:00 2001
From: rebortg <rebortg@users.noreply.github.com>
Date: Mon, 28 Dec 2020 06:22:29 +0000
Subject: [PATCH 223/295] Update vyos-1x submodule

---
 docs/_include/vyos-1x | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
index 089b5f10..ffd64cf4 160000
--- a/docs/_include/vyos-1x
+++ b/docs/_include/vyos-1x
@@ -1 +1 @@
-Subproject commit 089b5f10aaa3f7976eb3f9165e805babdbf2a564
+Subproject commit ffd64cf473450688d654eeb25f158eb8196d9e23

From 1162e00071c9d28b2c86f6ba3a9e4e8b086e8783 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 29 Dec 2020 11:32:37 +0100
Subject: [PATCH 224/295] ethernet: add eapol documentation

---
 docs/configuration/interfaces/ethernet.rst | 38 ++++++++++++++++++++++
 1 file changed, 38 insertions(+)

diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst
index 3eae0d95..4392c1c8 100644
--- a/docs/configuration/interfaces/ethernet.rst
+++ b/docs/configuration/interfaces/ethernet.rst
@@ -96,6 +96,44 @@ Offloading
    :var0: ethernet
    :var1: eth0
 
+Authentication (EAPoL)
+----------------------
+
+:abbr:`EAP (Extensible Authentication Protocol)` over LAN (EAPoL) is a network
+port authentication protocol used in IEEE 802.1X (Port Based Network Access
+Control) developed to give a generic network sign-on to access network
+resources.
+
+EAPoL comes with an identify option. We automatically use the interface MAC
+address as identity parameter.
+
+.. cfgcmd:: set interfaces ethernet <interface> eapol ca-cert-file <file>
+
+  SSL :abbr:`CA (Certificate Authority)` x509 PEM file used afor authentication
+  of the remote side.
+
+  .. code-block: none
+
+    set interfaces ethernet eth0 eapol ca-cert-file /config/auth/ca.pem
+
+.. cfgcmd:: set interfaces ethernet <interface> eapol cert-file <file>
+
+  SSL/x509 public certificate file provided by the client to authenticate
+  against the 802.1x system.
+
+  .. code-block: none
+
+    set interfaces ethernet eth0 eapol cert-file /config/auth/public.pem
+
+.. cfgcmd:: set interfaces ethernet <interface> eapol key-file <file>
+
+  SSL/x509 private certificate file provided by the client to authenticate
+  against the 802.1x system.
+
+  .. code-block: none
+
+    set interfaces ethernet eth0 eapol key-file /config/auth/private.key
+
 VLAN
 ====
 

From 91a07725badb093da149f35045ad40d9673ecbbd Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 29 Dec 2020 12:04:47 +0100
Subject: [PATCH 225/295] ethernet: eapol: use re-includable interface
 definition

---
 docs/_include/interface-eapol.txt          | 37 ++++++++++++++++++++++
 docs/configuration/interfaces/ethernet.rst | 36 ++-------------------
 2 files changed, 40 insertions(+), 33 deletions(-)
 create mode 100644 docs/_include/interface-eapol.txt

diff --git a/docs/_include/interface-eapol.txt b/docs/_include/interface-eapol.txt
new file mode 100644
index 00000000..68e5073d
--- /dev/null
+++ b/docs/_include/interface-eapol.txt
@@ -0,0 +1,37 @@
+:abbr:`EAP (Extensible Authentication Protocol)` over LAN (EAPoL) is a network
+port authentication protocol used in IEEE 802.1X (Port Based Network Access
+Control) developed to give a generic network sign-on to access network
+resources.
+
+EAPoL comes with an identify option. We automatically use the interface MAC
+address as identity parameter.
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} eapol ca-cert-file <file>
+
+  SSL :abbr:`CA (Certificate Authority)` x509 PEM file used afor authentication
+  of the remote side.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} eapol ca-cert-file /config/auth/ca.pem
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} eapol cert-file <file>
+
+  SSL/x509 public certificate file provided by the client to authenticate
+  against the 802.1x system.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} eapol cert-file /config/auth/public.pem
+
+.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }}
+  {{ var5 }} {{ var6 }} eapol key-file <file>
+
+  SSL/x509 private certificate file provided by the client to authenticate
+  against the 802.1x system.
+
+  .. code-block:: none
+
+    set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} eapol key-file /config/auth/private.key
diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst
index 4392c1c8..d7bc8518 100644
--- a/docs/configuration/interfaces/ethernet.rst
+++ b/docs/configuration/interfaces/ethernet.rst
@@ -99,40 +99,10 @@ Offloading
 Authentication (EAPoL)
 ----------------------
 
-:abbr:`EAP (Extensible Authentication Protocol)` over LAN (EAPoL) is a network
-port authentication protocol used in IEEE 802.1X (Port Based Network Access
-Control) developed to give a generic network sign-on to access network
-resources.
+.. cmdinclude:: /_include/interface-eapol.txt
+   :var0: ethernet
+   :var1: eth0
 
-EAPoL comes with an identify option. We automatically use the interface MAC
-address as identity parameter.
-
-.. cfgcmd:: set interfaces ethernet <interface> eapol ca-cert-file <file>
-
-  SSL :abbr:`CA (Certificate Authority)` x509 PEM file used afor authentication
-  of the remote side.
-
-  .. code-block: none
-
-    set interfaces ethernet eth0 eapol ca-cert-file /config/auth/ca.pem
-
-.. cfgcmd:: set interfaces ethernet <interface> eapol cert-file <file>
-
-  SSL/x509 public certificate file provided by the client to authenticate
-  against the 802.1x system.
-
-  .. code-block: none
-
-    set interfaces ethernet eth0 eapol cert-file /config/auth/public.pem
-
-.. cfgcmd:: set interfaces ethernet <interface> eapol key-file <file>
-
-  SSL/x509 private certificate file provided by the client to authenticate
-  against the 802.1x system.
-
-  .. code-block: none
-
-    set interfaces ethernet eth0 eapol key-file /config/auth/private.key
 
 VLAN
 ====

From 037e05eaa54588fa58b2f5f81401bba6e28c8232 Mon Sep 17 00:00:00 2001
From: maehdros <bruno@maehdros.com>
Date: Tue, 29 Dec 2020 15:19:45 +0100
Subject: [PATCH 226/295] Update ospf.rst

Add a small command to see the OSPFv3 redistribute routes; I plan to write a bit more
---
 docs/configuration/protocols/ospf.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
index ee6753c5..a8293f4d 100644
--- a/docs/configuration/protocols/ospf.rst
+++ b/docs/configuration/protocols/ospf.rst
@@ -92,6 +92,12 @@ A typical configuration using 2 nodes.
   set protocols ospfv3 parameters router-id 192.168.2.1
   set protocols ospfv3 redistribute connected
 
+**To see the redistributed routes:**
+
+.. code-block:: none
+
+  show ipv6 ospfv3 redistribute
+
 .. note:: You can not easily redistribute IPv6 routes via OSPFv3 on a WireGuard
    interface link. This requires you to configure link-local addresses manually
    on the WireGuard interfaces, see :vytask:`T1483`.

From e9cc3b86b22e2ccb898608c6b5feb688492b06c0 Mon Sep 17 00:00:00 2001
From: maehdros <bruno@maehdros.com>
Date: Tue, 29 Dec 2020 15:50:44 +0100
Subject: [PATCH 227/295] Update ospf.rst

Update can not to cannot
---
 docs/configuration/protocols/ospf.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
index a8293f4d..a4188c68 100644
--- a/docs/configuration/protocols/ospf.rst
+++ b/docs/configuration/protocols/ospf.rst
@@ -98,7 +98,7 @@ A typical configuration using 2 nodes.
 
   show ipv6 ospfv3 redistribute
 
-.. note:: You can not easily redistribute IPv6 routes via OSPFv3 on a WireGuard
+.. note:: You cannot easily redistribute IPv6 routes via OSPFv3 on a WireGuard
    interface link. This requires you to configure link-local addresses manually
    on the WireGuard interfaces, see :vytask:`T1483`.
 

From 4b4db5d2303817bb4fe6f0b85e9a97b018d81bb3 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 1 Jan 2021 20:08:55 +0100
Subject: [PATCH 228/295] ethernet: add rps (receive packet steering) support

---
 docs/configuration/interfaces/ethernet.rst | 42 ++++++++++++++--------
 1 file changed, 28 insertions(+), 14 deletions(-)

diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst
index d7bc8518..1d99019c 100644
--- a/docs/configuration/interfaces/ethernet.rst
+++ b/docs/configuration/interfaces/ethernet.rst
@@ -69,28 +69,42 @@ Ethernet options
 Offloading
 ----------
 
-.. cfgcmd:: set interfaces ethernet <interface> offload <gro | gso | sg |
-  tso | ufo>
+.. cfgcmd:: set interfaces ethernet <interface> offload <gro | gso | sg | tso |
+  ufo | rps>
 
   Enable different types of hardware offloading on the given NIC.
 
-  Generic segmentation offload is a pure software offload that is meant to deal
-  with cases where device drivers cannot perform the offloads described above.
-  What occurs in GSO is that a given skbuff will have its data broken out over
-  multiple skbuffs that have been resized to match the MSS provided via
-  skb_shinfo()->gso_size.
+  :abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is
+  meant to deal with cases where device drivers cannot perform the offloads
+  described above. What occurs in GSO is that a given skbuff will have its data
+  broken out over multiple skbuffs that have been resized to match the MSS
+  provided via skb_shinfo()->gso_size.
 
   Before enabling any hardware segmentation offload a corresponding software
   offload is required in GSO. Otherwise it becomes possible for a frame to be
   re-routed between devices and end up being unable to be transmitted.
 
-  Generic receive offload is the complement to GSO. Ideally any frame assembled
-  by GRO should be segmented to create an identical sequence of frames using
-  GSO, and any sequence of frames segmented by GSO should be able to be
-  reassembled back to the original by GRO. The only exception to this is IPv4
-  ID in the case that the DF bit is set for a given IP header. If the value of
-  the IPv4 ID is not sequentially incrementing it will be altered so that it is
-  when a frame assembled via GRO is segmented via GSO.
+  :abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any
+  frame assembled by GRO should be segmented to create an identical sequence of
+  frames using GSO, and any sequence of frames segmented by GSO should be able
+  to be reassembled back to the original by GRO. The only exception to this is
+  IPv4 ID in the case that the DF bit is set for a given IP header. If the
+  value of the IPv4 ID is not sequentially incrementing it will be altered so
+  that it is when a frame assembled via GRO is segmented via GSO.
+
+  :abbr:`RPS (Receive Packet Steering)` is logically a software implementation
+  of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily
+  called later in the datapath. Whereas RSS selects the queue and hence CPU that
+  will run the hardware interrupt handler, RPS selects the CPU to perform
+  protocol processing above the interrupt handler. This is accomplished by
+  placing the packet on the desired CPU's backlog queue and waking up the CPU
+  for processing. RPS has some advantages over RSS:
+
+  - it can be used with any NIC,
+  - software filters can easily be added to hash over new protocols,
+  - it does not increase hardware device interrupt rate (although it does
+    introduce inter-processor interrupts (IPIs)).
+
 
 .. cmdinclude:: /_include/interface-xdp.txt
    :var0: ethernet

From d5628237621e2c5ee6b87aaf54d897514d4d30ae Mon Sep 17 00:00:00 2001
From: LBegnaud <lbegnaud@radersolutions.com>
Date: Sat, 2 Jan 2021 13:49:48 -0600
Subject: [PATCH 229/295] azure: update vnet routing/serial console

---
 docs/installation/cloud/azure.rst | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

diff --git a/docs/installation/cloud/azure.rst b/docs/installation/cloud/azure.rst
index fe6a25bd..e19df986 100644
--- a/docs/installation/cloud/azure.rst
+++ b/docs/installation/cloud/azure.rst
@@ -14,7 +14,7 @@ Deploy VyOS on Azure.
 
 .. figure:: /_static/images/cloud-azure-01.png
 
-3. On the marketplace search ``VyOS``
+3. On the marketplace search ``VyOS`` and choose the appropriate subscription
 
 .. figure:: /_static/images/cloud-azure-02.png
 
@@ -26,7 +26,7 @@ Deploy VyOS on Azure.
 
 .. figure:: /_static/images/cloud-azure-04.png
 
-6. Click ``Review + create``. After fiew second your deployment will be complete
+6. Click ``Review + create``. After a few seconds your deployment will be complete
 
 .. figure:: /_static/images/cloud-azure-05.png
 
@@ -51,6 +51,22 @@ instance. Attach the interface in the Azure portal and then start the instance.
 .. note:: Azure does not allow you attach interface when the instance in the
    **Running** state.
 
+Absorbing Routes
+----------------
+
+If using as a router, you will want your LAN interface to absorb some or all of the traffic from your VNET by using a route table applied to the subnet.
+
+1. Create a route table and browse to **Configuration**
+
+2. Add one or more routes for networks you want to pass through the VyOS VM. Next hop type **Virtual Appliance** with the **Next Hop Address** of the VyOS ``LAN`` interface.
+
+.. note:: If you want to create a new default route for VMs on the subnet, use **Address Prefix** ``0.0.0.0/0`` Also note that if you want to use this as a typical edge device, you'll want masquerade NAT for the ``WAN`` interface.
+
+Serial Console
+--------------
+
+Azure has a way to access the serial console of a VM, but this needs to be configured on the VyOS. It's there by default, but keep it in mind if you are replacing config.boot and rebooting: ``set system console device ttyS0 speed '9600'``
+
 References
 ----------
 https://azure.microsoft.com

From 3004f1aa6928d6fe0173fa8fb5ebd912e0a88f4a Mon Sep 17 00:00:00 2001
From: Vladimir Belousov <v.belousov@kaymera.com>
Date: Sun, 3 Jan 2021 13:44:50 +0200
Subject: [PATCH 230/295] Docs: Fix typo error in the header of the article

---
 docs/cli.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/cli.rst b/docs/cli.rst
index 7964c490..bd0d37a8 100644
--- a/docs/cli.rst
+++ b/docs/cli.rst
@@ -1,7 +1,7 @@
 .. _cli:
 
 #####################
-Comand Line Interface
+Command Line Interface
 #####################
 
 The VyOS :abbr:`CLI (Command-Line Interface)` comprises an operational and a

From 874f59eb0a78248dbeea6e74cab4ac142bb88637 Mon Sep 17 00:00:00 2001
From: rebortg <rebortg@users.noreply.github.com>
Date: Mon, 4 Jan 2021 06:26:55 +0000
Subject: [PATCH 231/295] Update vyos-1x submodule

---
 docs/_include/vyos-1x | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
index ffd64cf4..f4625c9e 160000
--- a/docs/_include/vyos-1x
+++ b/docs/_include/vyos-1x
@@ -1 +1 @@
-Subproject commit ffd64cf473450688d654eeb25f158eb8196d9e23
+Subproject commit f4625c9ee2f54992ed96f113ff52c5a9993ea769

From 4e558719994c88038925d792458ba30dc3febbb2 Mon Sep 17 00:00:00 2001
From: craterman <bullet85@yandex.ru>
Date: Mon, 4 Jan 2021 21:19:34 +0400
Subject: [PATCH 232/295] Update bgp.rst

Add some commands to Route Selection section;
Add Administrative Distance configuration section;
Add Network Advertisement configuration;
Add Peers configuration section;
Add Timers configuration
---
 docs/configuration/protocols/bgp.rst | 255 +++++++++++++++++++++++++++
 1 file changed, 255 insertions(+)

diff --git a/docs/configuration/protocols/bgp.rst b/docs/configuration/protocols/bgp.rst
index c576d836..b2858222 100644
--- a/docs/configuration/protocols/bgp.rst
+++ b/docs/configuration/protocols/bgp.rst
@@ -174,6 +174,13 @@ ASN and Router ID
 Route Selection
 ---------------
 
+.. cfgcmd:: set protocols bgp <asn> parameters always-compare-med
+
+   This command provides to compare the MED on routes, even when they were 
+   received from different neighbouring ASes. Setting this option makes the 
+   order of preference of routes more defined, and should eliminate MED 
+   induced oscillations.
+
 .. cfgcmd:: set protocols bgp <asn> parameters bestpath as-path confed
 
    This command specifies that the length of confederation path sets and
@@ -190,6 +197,254 @@ Route Selection
 
    Ignore AS_PATH length when selecting a route
 
+.. cfgcmd:: set protocols bgp <asn> parameters bestpath compare-routerid
+
+   Ensure that when comparing routes where both are equal on most metrics, 
+   including local-pref, AS_PATH length, IGP cost, MED, that the tie is 
+   broken based on router-ID.
+
+   If this option is enabled, then the already-selected check, where 
+   already selected eBGP routes are preferred, is skipped.
+
+   If a route has an ORIGINATOR_ID attribute because it has been reflected, 
+   that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer 
+   the route was received from will be used.
+
+   The advantage of this is that the route-selection (at this point) will 
+   be more deterministic. The disadvantage is that a few or even one lowest-ID 
+   router may attract all traffic to otherwise-equal paths because of this 
+   check. It may increase the possibility of MED or IGP oscillation, unless 
+   other measures were taken to avoid these. The exact behaviour will be 
+   sensitive to the iBGP and reflection topology.
+
+.. cfgcmd:: set protocols bgp <asn> parameters bestpath med confed
+   
+   This command specifies that BGP considers the MED when comparing routes 
+   originated from different sub-ASs within the confederation to which this 
+   BGP speaker belongs. The default state, where the MED attribute is not 
+   considered.
+
+.. cfgcmd:: set protocols bgp <asn> parameters bestpath med missing-as-worst
+
+   This command specifies that a route with a MED is always considered to be 
+   better than a route without a MED by causing the missing MED attribute to 
+   have a value of infinity. The default state, where the missing MED 
+   attribute is considered to have a value of zero.
+
+.. cfgcmd:: set protocols bgp <asn> parameters default local-pref <local-pref value>
+
+   This command specifies the default local preference value. The local 
+   preference range is 0 to 4294967295.
+   
+.. cfgcmd:: set protocols bgp <asn> parameters default no-ipv4-unicast
+
+   This command allows the user to specify that IPv4 peering is turned off by 
+   default.
+
+.. cfgcmd:: set protocols bgp <asn> parameters deterministic-med
+
+   This command provides to compare different MED values that advertised by 
+   neighbours in the same AS for routes selection. When this command is enabled, 
+   routes from the same autonomous system are grouped together, and the best 
+   entries of each group are compared.
+
+Administrative Distance
+-----------------------
+
+.. cfgcmd:: set protocols bgp <asn> parameters distance global <external|internal|local> <distance>
+
+   This command change distance value of BGP. The arguments are the distance 
+   values for external routes, internal routes and local routes respectively.
+   The distance range is 1 to 255.
+
+.. cfgcmd:: set protocols bgp <asn> parameters distance prefix <subnet> distance <distance>
+
+   This command sets the administrative distance for a particular route. The 
+   distance range is 1 to 255.
+   
+   .. note:: Routes with a distance of 255 are effectively disabled and not
+      installed into the kernel.
+
+Network Advertisement
+---------------------
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> network <prefix>
+
+   This command is used for advertising IPv4 or IPv6 networks.
+   
+   .. note:: By default, the BGP prefix is advertised even if it's not 
+   present in the routing table. This behaviour differs from the 
+   implementation of some vendors.
+   
+.. cfgcmd::  set protocols bgp <asn> parameters network-import-check
+
+   This configuration modifies the behavior of the network statement.
+   If you have this configured the underlying network must exist in the rib
+
+Peers
+-----
+
+Defining Peers
+^^^^^^^^^^^^^^
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> remote-as <nasn>
+
+   This command creates a new neighbor whose remote-as is NASN. The neighbor 
+   address can be an IPv4 address or an IPv6 address or an interface to use 
+   for the connection.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> remote-as internal
+
+   Create a peer as you would when you specify an ASN, except that if the 
+   peers ASN is different than mine as specified under the :cfgcmd:`protocols 
+   bgp <asn>` command the connection will be denied.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> remote-as external
+
+   Create a peer as you would when you specify an ASN, except that if the 
+   peers ASN is the same as mine as specified under the :cfgcmd:`protocols 
+   bgp <asn>` command the connection will be denied.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> shutdown
+   
+   This command disable the peer. To reenable the peer use the delete 
+   form of this command.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> description <text>
+
+   Set description of the peer.
+
+Capability Negotiation
+^^^^^^^^^^^^^^^^^^^^^^
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> capability dynamic
+
+   This command would allow the dynamic update of capabilities over an 
+   established BGP session.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> capability extended-nexthop
+
+   Allow bgp to negotiate the extended-nexthop capability with it’s peer. 
+   If you are peering over a IPv6 Link-Local address then this capability 
+   is turned on automatically. If you are peering over a IPv6 Global Address 
+   then turning on this command will allow BGP to install IPv4 routes with 
+   IPv6 nexthops if you do not have IPv4 configured on interfaces.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> disable-capability-negotiation
+
+   Suppress sending Capability Negotiation as OPEN message optional 
+   parameter to the peer. This command only affects the peer is 
+   configured other than IPv4 unicast configuration.
+
+   When remote peer does not have capability negotiation feature, 
+   remote peer will not send any capabilities at all. In that case,
+   bgp configures the peer with configured capabilities.
+
+   You may prefer locally configured capabilities more than the negotiated 
+   capabilities even though remote peer sends capabilities. If the peer is 
+   configured by :cfgcmd:`override-capability`, VyOS ignores received capabilities 
+   then override negotiated capabilities with configured values.
+
+   Additionally you should keep in mind that this feature fundamentally 
+   disables the ability to use widely deployed BGP features. BGP unnumbered,
+   hostname support, AS4, Addpath, Route Refresh, ORF, Dynamic Capabilities,
+   and graceful restart.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> override-capability
+
+   This command allow override the result of Capability Negotiation with 
+   local configuration. Ignore remote peer’s capability value.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> strict-capability-match
+
+   This command forces strictly compare remote capabilities and local 
+   capabilities. If capabilities are different, send Unsupported Capability
+   error then reset connection.
+
+   You may want to disable sending Capability Negotiation OPEN message 
+   optional parameter to the peer when remote peer does not implement 
+   Capability Negotiation. Please use :cfgcmd:`disable-capability-negotiation` 
+   command to disable the feature.
+
+Peer Parameters
+^^^^^^^^^^^^^^^
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> allowas-in number <number>
+
+   This command accept incoming routes with AS path containing AS 
+   number with the same value as the current system AS. This is 
+   used when you want to use the same AS number in your sites,
+   but you can’t connect them directly.
+
+   The number parameter (1-10) configures the amount of accepted 
+   occurences of the system AS number in AS path.
+
+   This command is only allowed for eBGP peers.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> as-override
+
+   This command override AS number of the originating router with 
+   the local AS number.
+
+   Usually this configuration is used in PEs (Provider Edge) to 
+   replace the incoming customer AS number so the connected CE (
+   Customer Edge) can use the same AS number as the other customer 
+   sites. This allows customers of the provider network to use the 
+   same AS number across their sites.
+
+   This command is only allowed for eBGP peers.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> attribute-unchanged <as-path|med|next-hop>
+
+   This command specifies attributes to be left unchanged for 
+   advertisements sent to a peer.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> maximum-prefix <number>
+
+   This command specifies a maximum number of prefixes we can receive 
+   from a given peer. If this number is exceeded, the BGP session 
+   will be destroyed. The number range is 1 to 4294967295.
+   
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> nexthop-self
+
+   This command forces the BGP speaker to report itself as the 
+   next hop for an advertised route it advertised to a neighbor.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> remove-private-as
+
+   This command removes the private ASN of routes that are advertised 
+   to the configured peer. It removes only private ASNs on routes 
+   advertised to EBGP peers.
+   
+   If the AS-Path for the route has only private ASNs, the private 
+   ASNs are removed. 
+   
+   If the AS-Path for the route has a private ASN between public 
+   ASNs, it is assumed that this is a design choice, and the 
+   private ASN is not removed.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> weight <number>
+
+   This command specifies a default weight value for the neighbor’s 
+   routes. The number range is 1 to 65535.
+
+Timers
+------
+
+.. cfgcmd:: set protocols bgp <asn> timers holdtime <seconds>
+
+   This command specifies hold-time in seconds. The timer can 
+   range from 4 to 65535.The default value is 180 second. If
+   you set value to 0 VyOS will not hold routes.
+   
+.. cfgcmd:: set protocols bgp <asn> timers keepalive <seconds>
+
+   This command specifies keep-alive time in seconds. The timer 
+   can range from 4 to 65535.The default value is 60 second.
+
+Configuration Examples
+----------------------
+
 IPv4
 ^^^^
 

From f7a079f8081f9703bd762adb5a8d5626079d80ef Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Tue, 5 Jan 2021 20:12:04 +0400
Subject: [PATCH 233/295] bgp: extend current brief documentation

- add route aggregation configuration section;
- add commands for peer configuration;
- add peer groups configuration section
- add redistribution configuration
- add general configuration
---
 docs/configuration/protocols/bgp.rst | 186 ++++++++++++++++++++++++---
 1 file changed, 170 insertions(+), 16 deletions(-)

diff --git a/docs/configuration/protocols/bgp.rst b/docs/configuration/protocols/bgp.rst
index b2858222..54d996e8 100644
--- a/docs/configuration/protocols/bgp.rst
+++ b/docs/configuration/protocols/bgp.rst
@@ -236,11 +236,6 @@ Route Selection
    This command specifies the default local preference value. The local 
    preference range is 0 to 4294967295.
    
-.. cfgcmd:: set protocols bgp <asn> parameters default no-ipv4-unicast
-
-   This command allows the user to specify that IPv4 peering is turned off by 
-   default.
-
 .. cfgcmd:: set protocols bgp <asn> parameters deterministic-med
 
    This command provides to compare different MED values that advertised by 
@@ -272,14 +267,66 @@ Network Advertisement
 
    This command is used for advertising IPv4 or IPv6 networks.
    
-   .. note:: By default, the BGP prefix is advertised even if it's not 
-   present in the routing table. This behaviour differs from the 
-   implementation of some vendors.
+   .. note:: By default, the BGP prefix is advertised even if it's not present in
+      the routing table. This behaviour differs from the implementation of some vendors.
    
 .. cfgcmd::  set protocols bgp <asn> parameters network-import-check
 
    This configuration modifies the behavior of the network statement.
-   If you have this configured the underlying network must exist in the rib
+   If you have this configured the underlying network must exist in the 
+   routing table.
+
+Route Aggregation
+-----------------
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> aggregate-address <prefix>
+
+   This command specifies an aggregate address. The router will also 
+   announce longer-prefixes inside of the aggregate address.
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> aggregate-address <prefix> as-set
+
+   This command specifies an aggregate address with a mathematical set of 
+   autonomous systems. This command summarizes the AS_PATH attributes of 
+   all the individual routes. 
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> aggregate-address <prefix> summary-only
+
+   This command specifies an aggregate address and provides that 
+   longer-prefixes inside of the aggregate address are suppressed 
+   before sending BGP updates out to peers.
+
+Redistribution
+--------------
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute connected
+
+   Redistribute connected routes to BGP process.
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute kernel
+
+   Redistribute kernel routes to BGP process.
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute ospf
+
+   Redistribute OSPF routes to BGP process.
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute rip
+
+   Redistribute RIP routes to BGP process.
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute static
+
+   Redistribute static routes to BGP process.
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute <route source> metric <number>
+
+   This command specifies metric (MED) for redistributed routes. The 
+   metric range is 0 to 4294967295.
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute <route source> route-map <name>
+
+   This command allows to use route map to filter redistributed routes.
 
 Peers
 -----
@@ -291,7 +338,7 @@ Defining Peers
 
    This command creates a new neighbor whose remote-as is NASN. The neighbor 
    address can be an IPv4 address or an IPv6 address or an interface to use 
-   for the connection.
+   for the connection. The command it applicable for peer and peer group.
 
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> remote-as internal
 
@@ -307,12 +354,17 @@ Defining Peers
 
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> shutdown
    
-   This command disable the peer. To reenable the peer use the delete 
-   form of this command.
+   This command disable the peer or peer group. To reenable the peer use 
+   the delete form of this command.
 
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> description <text>
 
-   Set description of the peer.
+   Set description of the peer or peer group.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> update-source <address|interface>
+
+   Specify the IPv4 source address to use for the BGP session to this neighbour,
+   may be specified as either an IPv4 address directly or as an interface name.
 
 Capability Negotiation
 ^^^^^^^^^^^^^^^^^^^^^^
@@ -379,7 +431,8 @@ Peer Parameters
    The number parameter (1-10) configures the amount of accepted 
    occurences of the system AS number in AS path.
 
-   This command is only allowed for eBGP peers.
+   This command is only allowed for eBGP peers. It is not applicable 
+   for peer groups.
 
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> as-override
 
@@ -397,7 +450,7 @@ Peer Parameters
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> attribute-unchanged <as-path|med|next-hop>
 
    This command specifies attributes to be left unchanged for 
-   advertisements sent to a peer.
+   advertisements sent to a peer or peer group.
 
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> maximum-prefix <number>
 
@@ -428,8 +481,109 @@ Peer Parameters
    This command specifies a default weight value for the neighbor’s 
    routes. The number range is 1 to 65535.
 
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> advertisement-interval <seconds>
+
+   This command specifies the minimum route advertisement interval for 
+   the peer. This number is between 0 and 600 seconds, with the default 
+   advertisement interval being 0.
+   
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> disable-connected-check
+
+   This command allows peerings between directly connected eBGP peers 
+   using loopback addresses without adjusting the default TTL of 1.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> ebgp-multihop <number>
+
+   This command allows sessions to be established with eBGP neighbors 
+   when they are multiple hops away. When the neighbor is not directly 
+   connected and this knob is not enabled, the session will not establish.
+   The number of hops range is 1 to 255.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> local-as <asn> [no-prepend] [replace-as]
+
+   Specify an alternate AS for this BGP process when interacting with 
+   the specified peer or peer group. With no modifiers, the specified 
+   local-as is prepended to the received AS_PATH when receiving routing 
+   updates from the peer, and prepended to the outgoing AS_PATH (after 
+   the process local AS) when transmitting local routes to the peer.
+
+   If the :cfgcmd:`no-prepend` attribute is specified, then the supplied 
+   local-as is not prepended to the received AS_PATH.
+
+   If the :cfgcmd:`replace-as` attribute is specified, then only the supplied 
+   local-as is prepended to the AS_PATH when transmitting local-route 
+   updates to this peer.
+
+   Note that replace-as can only be specified if no-prepend is.
+   This command is only allowed for eBGP peers.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> passive
+
+   Configures the BGP speaker so that it only accepts inbound connections 
+   from, but does not initiate outbound connections to the peer or peer group.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> ttl-security hops <number>
+
+   This command enforces Generalized TTL Security Mechanism (GTSM), 
+   as specified in :rfc:`5082`. With this command, only neighbors 
+   that are the specified number of hops away will be allowed to 
+   become neighbors. The number of hops range is 1 to 254.This 
+   command is mutually exclusive with :cfgcmd:`ebgp-multihop`.   
+
+Peer Groups
+^^^^^^^^^^^
+
+Peer groups are used to help improve scaling by generating the same update 
+information to all members of a peer group. Note that this means that the 
+routes generated by a member of a peer group will be sent back to that 
+originating peer with the originator identifier attribute set to indicated 
+the originating peer. All peers not associated with a specific peer group 
+are treated as belonging to a default peer group, and will share updates.
+
+.. cfgcmd:: set protocols bgp <asn> peer-group <name>
+
+   This command defines a new peer group. You can specify to the group 
+   the same parameters that you can specify for specific neighbors.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> peer-group <name>
+
+   This command bind specific peer to peer group with a given name.
+
+General configuration
+---------------------
+
+.. cfgcmd:: set protocols bgp <asn> maximum-paths <ebgp|ibgp> <number>
+
+   This command defines the maximum number of parallel routes that 
+   the BGP can support. In order for BGP to use the second path, the 
+   following attributes have to match: Weight, Local Preference, AS
+   Path (both AS number and AS path length), Origin code, MED, IGP 
+   metric. Also, the next hop address for each path must be different. 
+
+.. cfgcmd:: set protocols bgp <asn> parameters default no-ipv4-unicast
+
+   This command allows the user to specify that IPv4 peering is turned off by 
+   default.
+
+.. cfgcmd:: set protocols bgp <asn> parameters log-neighbor-changes
+
+   Tis command enable logging neighbor up/down changes and reset reason.
+
+.. cfgcmd:: set protocols bgp <asn> parameters no-client-to-client-reflection
+
+   Tis command disables route reflection between route reflector clients.
+   By default, the clients of a route reflector are not required to be 
+   fully meshed and the routes from a client are reflected to other clients. 
+   However, if the clients are fully meshed, route reflection is not required. 
+   In this case, use the :cfgcmd:`no-client-to-client-reflection` command 
+   to disable client-to-client reflection.
+
+.. cfgcmd:: set protocols bgp <asn> parameters no-fast-external-failover
+   
+   Disable immediate sesison reset if peer's connected link goes down.
+
 Timers
-------
+^^^^^^
 
 .. cfgcmd:: set protocols bgp <asn> timers holdtime <seconds>
 

From c60c9d514d9beca69c6741163dcf175c2f1b507f Mon Sep 17 00:00:00 2001
From: Kyle Jones <kyle@kf5jwc.us>
Date: Tue, 5 Jan 2021 23:22:51 -0600
Subject: [PATCH 234/295] Split dhcp-relay docs out of dhcp-server page

---
 docs/configuration/service/dhcp-relay.rst  | 161 ++++++++++++++++++++-
 docs/configuration/service/dhcp-server.rst | 160 --------------------
 2 files changed, 159 insertions(+), 162 deletions(-)

diff --git a/docs/configuration/service/dhcp-relay.rst b/docs/configuration/service/dhcp-relay.rst
index 445519b3..5355a0fd 100644
--- a/docs/configuration/service/dhcp-relay.rst
+++ b/docs/configuration/service/dhcp-relay.rst
@@ -1,2 +1,159 @@
-dhcp-relay
-##########
\ No newline at end of file
+.. _dhcp-relay:
+
+##########
+DHCP Relay
+##########
+
+If you want your router to forward DHCP requests to an external DHCP server
+you can configure the system to act as a DHCP relay agent. The DHCP relay
+agent works with IPv4 and IPv6 addresses.
+
+All interfaces used for the DHCP relay must be configured.
+
+**********
+IPv4 relay
+**********
+
+Configuration
+=============
+
+.. cfgcmd:: set service dhcp-relay interface <interface>
+
+   Enable the DHCP relay service on the given interface.
+
+.. cfgcmd:: set service dhcp-relay server <server>
+
+   Configure IP address of the DHCP `<server>` which will handle the relayed
+   packets.
+
+.. cfgcmd:: set service dhcp-relay relay-options relay-agents-packets discard
+
+   The router should discard DHCP packages already containing relay agent
+   information to ensure that only requests from DHCP clients are forwarded.
+
+Options
+-------
+
+.. cfgcmd:: set service dhcp-relay relay-options hop-count <count>
+
+   Set the maximum hop `<count>` before packets are discarded. Range 0...255,
+   default 10.
+
+.. cfgcmd:: set service dhcp-relay relay-options max-size <size>
+
+   Set maximum `<size>` of DHCP packets including relay agent information. If a
+   DHCP packet size surpasses this value it will be forwarded without appending
+   relay agent information. Range 64...1400, default 576.
+
+.. cfgcmd:: set service dhcp-relay relay-options relay-agents-packet
+   <append | discard | forward | replace>
+
+   Four policies for reforwarding DHCP packets exist:
+
+   * **append:** The relay agent is allowed to append its own relay information
+     to a received DHCP packet, disregarding relay information already present
+     in the packet.
+
+   * **discard:** Received packets which already contain relay information will
+     be discarded.
+
+   * **forward:** All packets are forwarded, relay information already present
+     will be ignored.
+
+   * **replace:** Relay information already present in a packet is stripped and
+     replaced with the router's own relay information set.
+
+Example
+=======
+
+* Listen for DHCP requests on interface ``eth1``.
+* DHCP server is located at IPv4 address 10.0.1.4.
+* Router receives DHCP client requests on ``eth1`` and relays them to the server
+  at 10.0.1.4.
+
+.. figure:: /_static/images/service_dhcp-relay01.png
+   :scale: 80 %
+   :alt: DHCP relay example
+
+   DHCP relay example
+
+The generated configuration will look like:
+
+.. code-block:: none
+
+  show service dhcp-relay
+      interface eth1
+      server 10.0.1.4
+      relay-options {
+         relay-agents-packets discard
+      }
+
+Operation
+=========
+
+.. opcmd:: restart dhcp relay-agent
+
+   Restart DHCP relay service
+
+**********
+IPv6 relay
+**********
+
+Configuration
+=============
+
+.. cfgcmd:: set service dhcpv6-relay listen-interface <interface>
+
+   Set eth1 to be the listening interface for the DHCPv6 relay.
+
+   Multiple interfaces may be specified.
+
+.. cfgcmd:: set service dhcpv6-relay upstream-interface <interface>
+   address <server>
+
+   Specifies an upstream network `<interface>` from which replies from
+   `<server>` and other relay agents will be accepted.
+
+Options
+-------
+
+.. cfgcmd:: set service dhcpv6-relay max-hop-count 'count'
+
+   Set maximum hop count before packets are discarded, default: 10
+
+.. cfgcmd:: set service dhcpv6-relay use-interface-id-option
+
+   If this is set the relay agent will insert the interface ID. This option is
+   set automatically if more than one listening interfaces are in use.
+
+Example
+=======
+
+* DHCPv6 requests are received by the router on `listening interface` ``eth1``
+* Requests are forwarded through ``eth2`` as the `upstream interface`
+* External DHCPv6 server is at 2001:db8::4
+
+.. figure:: /_static/images/service_dhcpv6-relay01.png
+   :scale: 80 %
+   :alt: DHCPv6 relay example
+
+   DHCPv6 relay example
+
+The generated configuration will look like:
+
+.. code-block:: none
+
+  commit
+  show service dhcpv6-relay
+      listen-interface eth1 {
+      }
+      upstream-interface eth2 {
+         address 2001:db8::4
+      }
+
+Operation
+=========
+
+.. opcmd:: restart dhcpv6 relay-agent
+
+   Restart DHCPv6 relay agent immediately.
diff --git a/docs/configuration/service/dhcp-server.rst b/docs/configuration/service/dhcp-server.rst
index 3946256e..28dddb2f 100644
--- a/docs/configuration/service/dhcp-server.rst
+++ b/docs/configuration/service/dhcp-server.rst
@@ -1,5 +1,3 @@
-.. _dhcp:
-
 .. _dhcp-server:
 
 ###########
@@ -621,161 +619,3 @@ Operation Mode
 
    Show only leases with the specified state. Possible states: abandoned,
    active, all, backup, expired, free, released, reset (default = active)
-
-##########
-DHCP Relay
-##########
-
-If you want your router to forward DHCP requests to an external DHCP server
-you can configure the system to act as a DHCP relay agent. The DHCP relay
-agent works with IPv4 and IPv6 addresses.
-
-All interfaces used for the DHCP relay must be configured.
-
-**********
-IPv4 relay
-**********
-
-Configuration
-=============
-
-.. cfgcmd:: set service dhcp-relay interface <interface>
-
-   Enable the DHCP relay service on the given interface.
-
-.. cfgcmd:: set service dhcp-relay server <server>
-
-   Configure IP address of the DHCP `<server>` which will handle the relayed
-   packets.
-
-.. cfgcmd:: set service dhcp-relay relay-options relay-agents-packets discard
-
-   The router should discard DHCP packages already containing relay agent
-   information to ensure that only requests from DHCP clients are forwarded.
-
-Options
--------
-
-.. cfgcmd:: set service dhcp-relay relay-options hop-count <count>
-
-   Set the maximum hop `<count>` before packets are discarded. Range 0...255,
-   default 10.
-
-.. cfgcmd:: set service dhcp-relay relay-options max-size <size>
-
-   Set maximum `<size>` of DHCP packets including relay agent information. If a
-   DHCP packet size surpasses this value it will be forwarded without appending
-   relay agent information. Range 64...1400, default 576.
-
-.. cfgcmd:: set service dhcp-relay relay-options relay-agents-packet
-   <append | discard | forward | replace>
-
-   Four policies for reforwarding DHCP packets exist:
-
-   * **append:** The relay agent is allowed to append its own relay information
-     to a received DHCP packet, disregarding relay information already present
-     in the packet.
-
-   * **discard:** Received packets which already contain relay information will
-     be discarded.
-
-   * **forward:** All packets are forwarded, relay information already present
-     will be ignored.
-
-   * **replace:** Relay information already present in a packet is stripped and
-     replaced with the router's own relay information set.
-
-Example
-=======
-
-* Listen for DHCP requests on interface ``eth1``.
-* DHCP server is located at IPv4 address 10.0.1.4.
-* Router receives DHCP client requests on ``eth1`` and relays them to the server
-  at 10.0.1.4.
-
-.. figure:: /_static/images/service_dhcp-relay01.png
-   :scale: 80 %
-   :alt: DHCP relay example
-
-   DHCP relay example
-
-The generated configuration will look like:
-
-.. code-block:: none
-
-  show service dhcp-relay
-      interface eth1
-      server 10.0.1.4
-      relay-options {
-         relay-agents-packets discard
-      }
-
-Operation
-=========
-
-.. opcmd:: restart dhcp relay-agent
-
-   Restart DHCP relay service
-
-**********
-IPv6 relay
-**********
-
-Configuration
-=============
-
-.. cfgcmd:: set service dhcpv6-relay listen-interface <interface>
-
-   Set eth1 to be the listening interface for the DHCPv6 relay.
-
-   Multiple interfaces may be specified.
-
-.. cfgcmd:: set service dhcpv6-relay upstream-interface <interface>
-   address <server>
-
-   Specifies an upstream network `<interface>` from which replies from
-   `<server>` and other relay agents will be accepted.
-
-Options
--------
-
-.. cfgcmd:: set service dhcpv6-relay max-hop-count 'count'
-
-   Set maximum hop count before packets are discarded, default: 10
-
-.. cfgcmd:: set service dhcpv6-relay use-interface-id-option
-
-   If this is set the relay agent will insert the interface ID. This option is
-   set automatically if more than one listening interfaces are in use.
-
-Example
-=======
-
-* DHCPv6 requests are received by the router on `listening interface` ``eth1``
-* Requests are forwarded through ``eth2`` as the `upstream interface`
-* External DHCPv6 server is at 2001:db8::4
-
-.. figure:: /_static/images/service_dhcpv6-relay01.png
-   :scale: 80 %
-   :alt: DHCPv6 relay example
-
-   DHCPv6 relay example
-
-The generated configuration will look like:
-
-.. code-block:: none
-
-  commit
-  show service dhcpv6-relay
-      listen-interface eth1 {
-      }
-      upstream-interface eth2 {
-         address 2001:db8::4
-      }
-
-Operation
-=========
-
-.. opcmd:: restart dhcpv6 relay-agent
-
-   Restart DHCPv6 relay agent immediately.

From 73463e52dc69bef8f07fbe9de466380ee62f1e5b Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Wed, 6 Jan 2021 14:37:35 +0100
Subject: [PATCH 235/295] tunnel: add GRE over IPv6 note

---
 docs/configuration/interfaces/tunnel.rst | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/docs/configuration/interfaces/tunnel.rst b/docs/configuration/interfaces/tunnel.rst
index b1e86edf..20202c82 100644
--- a/docs/configuration/interfaces/tunnel.rst
+++ b/docs/configuration/interfaces/tunnel.rst
@@ -214,7 +214,8 @@ that are discarding IP protocol 47 or blocking your source/desintation traffic.
   4 packets transmitted, 4 received, 0% packet loss, time 3008ms
   rtt min/avg/max/mdev = 1.055/1.729/1.989/0.395 ms
 
-
+.. note:: There is also a GRE over IPv6 encapsulation available, it is
+  called: ``ip6gre``.
 
 .. _`other proposals`: https://www.isc.org/othersoftware/
 .. _`Hurricane Electric`: https://tunnelbroker.net/

From 760c6a753032cda4b55903de9a0cc70192f60829 Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Wed, 6 Jan 2021 21:49:02 +0400
Subject: [PATCH 236/295] bgp: add operational level command reference

Add operational command section
---
 docs/configuration/protocols/bgp.rst | 138 ++++++++++++++++++++++++++-
 1 file changed, 136 insertions(+), 2 deletions(-)

diff --git a/docs/configuration/protocols/bgp.rst b/docs/configuration/protocols/bgp.rst
index 54d996e8..b577e5b9 100644
--- a/docs/configuration/protocols/bgp.rst
+++ b/docs/configuration/protocols/bgp.rst
@@ -497,7 +497,8 @@ Peer Parameters
    This command allows sessions to be established with eBGP neighbors 
    when they are multiple hops away. When the neighbor is not directly 
    connected and this knob is not enabled, the session will not establish.
-   The number of hops range is 1 to 255.
+   The number of hops range is 1 to 255. This command is mutually 
+   exclusive with :cfgcmd:`ttl-security hops`.
 
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> local-as <asn> [no-prepend] [replace-as]
 
@@ -527,7 +528,7 @@ Peer Parameters
    This command enforces Generalized TTL Security Mechanism (GTSM), 
    as specified in :rfc:`5082`. With this command, only neighbors 
    that are the specified number of hops away will be allowed to 
-   become neighbors. The number of hops range is 1 to 254.This 
+   become neighbors. The number of hops range is 1 to 254. This 
    command is mutually exclusive with :cfgcmd:`ebgp-multihop`.   
 
 Peer Groups
@@ -596,6 +597,139 @@ Timers
    This command specifies keep-alive time in seconds. The timer 
    can range from 4 to 65535.The default value is 60 second.
 
+Operational Mode Commands
+=========================
+
+Show
+----
+
+.. opcmd:: show <ip|ipv6> bgp 
+
+   This command displays all entries in BGP routing table.
+
+.. code-block:: none
+
+   BGP table version is 10, local router ID is 10.0.35.3, vrf id 0
+   Default local pref 100, local AS 65000
+   Status codes:  s suppressed, d damped, h history, * valid, > best, = multipath,
+                  i internal, r RIB-failure, S Stale, R Removed
+   Nexthop codes: @NNN nexthop's vrf id, < announce-nh-self
+   Origin codes:  i - IGP, e - EGP, ? - incomplete
+
+      Network          Next Hop            Metric LocPrf Weight Path
+   *> 198.51.100.0/24  10.0.34.4                0             0 65004 i
+   *> 203.0.113.0/24   10.0.35.5                0             0 65005 i
+
+   Displayed  2 routes and 2 total paths
+
+.. opcmd:: show <ip|ipv6> bgp <address|prefix>
+
+   This command displays information about the particular entry in the BGP routing table.
+
+.. code-block:: none
+
+   BGP routing table entry for 198.51.100.0/24
+   Paths: (1 available, best #1, table default)
+     Advertised to non peer-group peers:
+     10.0.13.1 10.0.23.2 10.0.34.4 10.0.35.5
+     65004
+       10.0.34.4 from 10.0.34.4 (10.0.34.4)
+         Origin IGP, metric 0, valid, external, best (First path received)
+         Last update: Wed Jan  6 12:18:53 2021
+
+.. opcmd:: show ip bgp cidr-only
+
+   This command displays routes with classless interdomain routing (CIDR).
+
+.. opcmd:: show <ip|ipv6> bgp community <value>
+
+   This command displays routes that belong to specified BGP communities.
+   Valid value is a community number in the range from 1 to 4294967200, 
+   or AA:NN (autonomous system-community number/2-byte number), no-export,
+   local-as, or no-advertise.
+
+.. opcmd:: show <ip|ipv6> bgp community-list <name>
+
+   This command displays routes that are permitted by the BGP 
+   community list.
+
+.. opcmd:: show ip bgp dampened-paths
+
+   This command displays BGP dampened routes.
+
+.. opcmd:: show <ip|ipv6> bgp neighbors <address> advertised-routes
+
+   This command displays BGP routes advertised to a neighbor.
+
+.. opcmd:: show <ip|ipv6> bgp neighbors <address> received-routes
+
+   This command displays BGP routes originating from the specified BGP 
+   neighbor before inbound policy is applied. To use this command inbound 
+   soft reconfiguration must be enabled.
+
+.. opcmd:: show <ip|ipv6> bgp neighbors <address> routes
+
+   This command displays BGP received-routes that are accepted after filtering.
+   
+.. opcmd:: show <ip|ipv6> bgp neighbors <address> dampened-routes
+
+   This command displays dampened routes received from BGP neighbor.
+   
+.. opcmd:: show <ip|ipv6> bgp regexp <text>
+
+   This command displays information about BGP routes whose AS path 
+   matches the specified regular expression. 
+
+.. opcmd:: show <ip|ipv6> bgp summary
+
+   This command displays the status of all BGP connections.
+
+.. code-block:: none
+
+   IPv4 Unicast Summary:
+   BGP router identifier 10.0.35.3, local AS number 65000 vrf-id 0
+   BGP table version 11
+   RIB entries 5, using 920 bytes of memory
+   Peers 4, using 82 KiB of memory
+   
+   Neighbor        V         AS MsgRcvd MsgSent   TblVer  InQ OutQ  Up/Down State/PfxRcd
+   10.0.13.1       4      65000     148     159        0    0    0 02:16:01            0
+   10.0.23.2       4      65000     136     143        0    0    0 02:13:21            0
+   10.0.34.4       4      65004     161     163        0    0    0 02:16:01            1
+   10.0.35.5       4      65005     162     166        0    0    0 02:16:01            1
+   
+   Total number of neighbors 4
+
+Reset
+-----
+
+.. opcmd:: reset <ip|ipv6> bgp <address> [soft [in|out]]
+
+   This command resets BGP connections to the specified neighbor IP address.
+   With argument :cfgcmd:`soft` this command initiates a soft reset. If
+   you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both 
+   inbound and outbound soft reconfiguration are triggered.
+
+.. opcmd:: reset ip bgp all
+
+   This command resets all BGP connections of given router.
+
+.. opcmd:: reset ip bgp dampening
+
+   This command uses to clear BGP route dampening information and to 
+   unsuppress suppressed routes.
+
+.. opcmd:: reset ip bgp external
+
+   This command resets all external BGP peers of given router.
+   
+.. opcmd:: reset ip bgp peer-group <name> [soft [in|out]]
+
+   This command resets BGP connections to the specified peer group.
+   With argument :cfgcmd:`soft` this command initiates a soft reset. If
+   you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both 
+   inbound and outbound soft reconfiguration are triggered.
+
 Configuration Examples
 ----------------------
 

From 64781cbbfd6456a6b92abf6507aefb8d82e80d5f Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Wed, 6 Jan 2021 21:50:16 +0400
Subject: [PATCH 237/295] Update ospf.rst

add command and their explanation
---
 docs/configuration/protocols/ospf.rst | 86 ++++++++++++++++++++++++---
 1 file changed, 78 insertions(+), 8 deletions(-)

diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
index a4188c68..77bb34b0 100644
--- a/docs/configuration/protocols/ospf.rst
+++ b/docs/configuration/protocols/ospf.rst
@@ -19,20 +19,90 @@ OSPF is a widely used IGP in large enterprise networks.
 OSPFv2 (IPv4)
 #############
 
-In order to have a VyOS system exchanging routes with OSPF neighbors, you will
-at least need to configure an OSPF area and some network.
+.. cfgcmd:: set protocols ospf area <number>
 
-.. code-block:: none
+   This command is udes to enable the OSPF process. The area number can be 
+   specified in decimal notation in the range from 0 to 4294967295. Or it
+   can be specified in dotted decimal notation similar to ip address.
 
-  set protocols ospf area 0 network 192.168.0.0/24
+.. cfgcmd:: set protocols ospf area <number> network A.B.C.D/M
 
-That is the minimum configuration you will need.
-It is a good practice to define the router ID too.
+   This command specifies the OSPF enabled interface(s). If the interface has 
+   an address from defined range then the command enables ospf on this 
+   interface so router can provide network information to the other ospf 
+   routers via this interface.
 
-.. code-block:: none
+.. cfgcmd:: set protocols ospf auto-cost reference-bandwidth <number>
 
-  set protocols ospf parameters router-id 10.1.1.1
+   This command sets the reference bandwidth for cost calculations, where 
+   bandwidth can be in range from 1 to 4294967, specified in Mbits/s. The 
+   default is 100Mbit/s (i.e. a link of bandwidth 100Mbit/s or higher will 
+   have a cost of 1. Cost of lower bandwidth links will be scaled with 
+   reference to this cost).
 
+.. cfgcmd:: set protocols ospf default-information originate [always] [metric <number>] [metric-type <1|2>] [route-map <name>]
+
+   Originate an AS-External (type-5) LSA describing a default route into all 
+   external-routing capable areas, of the specified metric and metric type. 
+   If the :cfgcmd:`always` keyword is given then the default is always advertised, 
+   even when there is no default present in the routing table. The argument
+   :cfgcmd:`route-map` specifies to advertise the default route if the route map 
+   is satisfied.
+
+.. cfgcmd:: set protocols ospf default-metric <number>
+   
+   This command specifies the default metric value of redistributed routes.
+   The metric range is 0 to 16777214.
+   
+.. cfgcmd:: set protocols ospf distance global <distance>
+
+   This command change distance value of OSPF. The distance range is 1 to 255.
+
+.. cfgcmd:: set protocols ospf distance ospf <external|inter-area|intra-area> <distance>
+
+   This command change distance value of OSPF. The arguments are the distance 
+   values for external routes, inter-area routes and intra-area routes 
+   respectively. The distance range is 1 to 255.
+   
+   .. note:: Routes with a distance of 255 are effectively disabled and not
+      installed into the kernel.
+
+.. cfgcmd:: set protocols ospf parameters router-id <rid>
+   
+   This command sets the router-ID of the OSPF process. The router-ID may be an
+   IP address of the router, but need not be - it can be any arbitrary 32bit number.
+   However it MUST be unique within the entire OSPF domain to the OSPF speaker – bad
+   things will happen if multiple OSPF speakers are configured with the same router-ID!
+   
+.. cfgcmd:: set protocols ospf parameters rfc1583-compatibility
+
+   :rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2 (changes)
+   in section 16.4.1 a change to the path preference algorithm that prevents possible 
+   routing loops that were possible in the old version of OSPFv2. More specifically it 
+   demands that inter-area paths and intra-area backbone path are now of equal preference 
+   but still both preferred to external paths.
+
+   This command should NOT be set normally.
+
+.. cfgcmd:: set protocols ospf passive-interface <interface>
+
+   This command specifies interface as passive. Passive interface advertises its address, 
+   but does not run the OSPF protocol (adjacencies are not formed and hello packets are 
+   not generated).
+
+.. cfgcmd:: set protocols ospf passive-interface default
+
+   This command specifies all interfaces as passive by default. Because this command changes 
+   the configuration logic to a default passive; therefore, interfaces where router adjacencies
+   are expected need to be configured with the :cfgcmd:`passive-interface-exclude` command.
+
+.. cfgcmd:: set protocols ospf passive-interface-exclude <interface>
+
+   This command allows exclude interface from passive state. This command is used if the
+   command :cfgcmd:`passive-interface default` was configured.
+
+Configuration example
+---------------------
 
 Below you can see a typical configuration using 2 nodes, redistribute loopback
 address and the node 1 sending the default route:

From 1b96ba9acf9999c98b52aa973f5552139b93e3cd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20G=C3=B6hler?= <github@ghlr.de>
Date: Wed, 6 Jan 2021 20:47:31 +0100
Subject: [PATCH 238/295] correct __pycache__ in gitignore

---
 .gitignore | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index 27188bd2..7a498090 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,7 +15,7 @@ ENV/
 
 # python cache files
 *.pyc
-__pychache__
+__pycache__
 
 # dotenv
 .env

From bf5a8171be5d5a3985d7f7a134af7f086bc90b29 Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Thu, 7 Jan 2021 15:08:11 +0400
Subject: [PATCH 239/295] Update ospf.rst

---
 docs/configuration/protocols/ospf.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
index 77bb34b0..acb1bce8 100644
--- a/docs/configuration/protocols/ospf.rst
+++ b/docs/configuration/protocols/ospf.rst
@@ -25,10 +25,10 @@ OSPFv2 (IPv4)
    specified in decimal notation in the range from 0 to 4294967295. Or it
    can be specified in dotted decimal notation similar to ip address.
 
-.. cfgcmd:: set protocols ospf area <number> network A.B.C.D/M
+.. cfgcmd:: set protocols ospf area <number> network <A.B.C.D/M>
 
    This command specifies the OSPF enabled interface(s). If the interface has 
-   an address from defined range then the command enables ospf on this 
+   an address from defined range then the command enables OSPF on this 
    interface so router can provide network information to the other ospf 
    routers via this interface.
 

From 895dc5a3b229d94f2819767342f67d375b2acb42 Mon Sep 17 00:00:00 2001
From: Owen DeLong <owen@delong.com>
Date: Fri, 8 Jan 2021 09:21:14 -0800
Subject: [PATCH 240/295] Integrated documentation of ip6gre into gre and added
 a corresponding configuration example

---
 docs/configuration/interfaces/tunnel.rst | 51 ++++++++++++++++++++++--
 1 file changed, 47 insertions(+), 4 deletions(-)

diff --git a/docs/configuration/interfaces/tunnel.rst b/docs/configuration/interfaces/tunnel.rst
index 20202c82..088d1820 100644
--- a/docs/configuration/interfaces/tunnel.rst
+++ b/docs/configuration/interfaces/tunnel.rst
@@ -100,17 +100,21 @@ Generic Routing Encapsulation (GRE)
 -----------------------------------
 
 A GRE tunnel operates at layer 3 of the OSI model and is repsented by IP
-protocol 47.The main benefit of a GRE tunnel is that you are able to route
-traffic across disparate networks. GRE also supports multicast traffic and
+protocol 47.The main benefit of a GRE tunnel is that you are able to carry
+multiple protocols inside the same tunnel. GRE also supports multicast traffic and
 supports routing protocols that leverage multicast to form neighbor adjacencies.
 
+A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created
+over either IPv4 (gre) or IPv6 (ip6gre).
+
+
 Configuration
 ^^^^^^^^^^^^^
 
 A basic configuration requires a tunnel source (local-ip), a tunnel destination
 (remote-ip), an encapsulation type (gre), and an address (ipv4/ipv6).Below is a
-configuration example taken from a VyOS router and a Cisco IOS router. The main
-difference between these two configurations is that VyOS requires you
+basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router.
+The main difference between these two configurations is that VyOS requires you
 explicitly configure the encapsulation type. The Cisco router defaults to gre
 ip otherwise it would have to be configured as well.
 
@@ -132,6 +136,45 @@ ip otherwise it would have to be configured as well.
   tunnel source 203.0.113.10
   tunnel destination 198.51.100.2
 
+Here is a second example of a dual-stack tunnel over IPv6 between a VyOS router
+and a Linux host using systemd-networkd.
+
+**VyOS Router:**
+
+.. code-block:: none
+
+  set interfaces tunnel tun101 address '2001:db8:feed:beef::1/126'
+  set interfaces tunnel tun101 address '192.168.5.1/30'
+  set interfaces tunnel tun101 encapsulation 'ip6gre'
+  set interfaces tunnel tun101 local-ip '2001:db8:babe:face::3afe:3'
+  set interfaces tunnel tun101 remote-ip '2001:db8:9bb:3ce::5'
+
+**Linux systemd-networkd:**
+
+This requires two files, one to create the device (XXX.netdev) and one
+to configure the network on the device (XXX.network)
+
+.. code-block:: none
+
+  # cat /etc/systemd/network/gre-example.netdev
+  [NetDev]
+  Name=gre-example
+  Kind=ip6gre
+  MTUBytes=14180
+
+  [Tunnel]
+  Remote=2001:db8:babe:face::3afe:3
+
+
+  # cat /etc/systemd/network/gre-example.network
+  [Match]
+  Name=gre-example
+
+  [Network]
+  Address=2001:db8:feed:beef::2/126
+
+  [Address]
+  Address=192.168.5.2/30
 
 Tunnel keys
 ^^^^^^^^^^^

From 455aedc8440c9270e2c0a449ac9ea01afeddf388 Mon Sep 17 00:00:00 2001
From: Owen DeLong <owen@delong.com>
Date: Fri, 8 Jan 2021 09:38:37 -0800
Subject: [PATCH 241/295] tunnel: add ip6gre configuration example

---
 docs/configuration/interfaces/tunnel.rst | 51 ++++++++++++++++++++++--
 1 file changed, 47 insertions(+), 4 deletions(-)

diff --git a/docs/configuration/interfaces/tunnel.rst b/docs/configuration/interfaces/tunnel.rst
index 20202c82..088d1820 100644
--- a/docs/configuration/interfaces/tunnel.rst
+++ b/docs/configuration/interfaces/tunnel.rst
@@ -100,17 +100,21 @@ Generic Routing Encapsulation (GRE)
 -----------------------------------
 
 A GRE tunnel operates at layer 3 of the OSI model and is repsented by IP
-protocol 47.The main benefit of a GRE tunnel is that you are able to route
-traffic across disparate networks. GRE also supports multicast traffic and
+protocol 47.The main benefit of a GRE tunnel is that you are able to carry
+multiple protocols inside the same tunnel. GRE also supports multicast traffic and
 supports routing protocols that leverage multicast to form neighbor adjacencies.
 
+A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created
+over either IPv4 (gre) or IPv6 (ip6gre).
+
+
 Configuration
 ^^^^^^^^^^^^^
 
 A basic configuration requires a tunnel source (local-ip), a tunnel destination
 (remote-ip), an encapsulation type (gre), and an address (ipv4/ipv6).Below is a
-configuration example taken from a VyOS router and a Cisco IOS router. The main
-difference between these two configurations is that VyOS requires you
+basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router.
+The main difference between these two configurations is that VyOS requires you
 explicitly configure the encapsulation type. The Cisco router defaults to gre
 ip otherwise it would have to be configured as well.
 
@@ -132,6 +136,45 @@ ip otherwise it would have to be configured as well.
   tunnel source 203.0.113.10
   tunnel destination 198.51.100.2
 
+Here is a second example of a dual-stack tunnel over IPv6 between a VyOS router
+and a Linux host using systemd-networkd.
+
+**VyOS Router:**
+
+.. code-block:: none
+
+  set interfaces tunnel tun101 address '2001:db8:feed:beef::1/126'
+  set interfaces tunnel tun101 address '192.168.5.1/30'
+  set interfaces tunnel tun101 encapsulation 'ip6gre'
+  set interfaces tunnel tun101 local-ip '2001:db8:babe:face::3afe:3'
+  set interfaces tunnel tun101 remote-ip '2001:db8:9bb:3ce::5'
+
+**Linux systemd-networkd:**
+
+This requires two files, one to create the device (XXX.netdev) and one
+to configure the network on the device (XXX.network)
+
+.. code-block:: none
+
+  # cat /etc/systemd/network/gre-example.netdev
+  [NetDev]
+  Name=gre-example
+  Kind=ip6gre
+  MTUBytes=14180
+
+  [Tunnel]
+  Remote=2001:db8:babe:face::3afe:3
+
+
+  # cat /etc/systemd/network/gre-example.network
+  [Match]
+  Name=gre-example
+
+  [Network]
+  Address=2001:db8:feed:beef::2/126
+
+  [Address]
+  Address=192.168.5.2/30
 
 Tunnel keys
 ^^^^^^^^^^^

From 90ad8ca92e4c9cffab78a8d748243ea8ea11e270 Mon Sep 17 00:00:00 2001
From: Owen DeLong <owen@delong.com>
Date: Fri, 8 Jan 2021 09:38:56 -0800
Subject: [PATCH 242/295] Fixed line lenghts

---
 docs/configuration/interfaces/tunnel.rst | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/docs/configuration/interfaces/tunnel.rst b/docs/configuration/interfaces/tunnel.rst
index 088d1820..d2d63ce2 100644
--- a/docs/configuration/interfaces/tunnel.rst
+++ b/docs/configuration/interfaces/tunnel.rst
@@ -101,8 +101,9 @@ Generic Routing Encapsulation (GRE)
 
 A GRE tunnel operates at layer 3 of the OSI model and is repsented by IP
 protocol 47.The main benefit of a GRE tunnel is that you are able to carry
-multiple protocols inside the same tunnel. GRE also supports multicast traffic and
-supports routing protocols that leverage multicast to form neighbor adjacencies.
+multiple protocols inside the same tunnel. GRE also supports multicast traffic
+and supports routing protocols that leverage multicast to form neighbor
+adjacencies.
 
 A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created
 over either IPv4 (gre) or IPv6 (ip6gre).
@@ -113,10 +114,10 @@ Configuration
 
 A basic configuration requires a tunnel source (local-ip), a tunnel destination
 (remote-ip), an encapsulation type (gre), and an address (ipv4/ipv6).Below is a
-basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router.
-The main difference between these two configurations is that VyOS requires you
-explicitly configure the encapsulation type. The Cisco router defaults to gre
-ip otherwise it would have to be configured as well.
+basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS
+router. The main difference between these two configurations is that VyOS
+requires you explicitly configure the encapsulation type. The Cisco router
+defaults to gre ip otherwise it would have to be configured as well.
 
 **VyOS Router:**
 

From 188cf6695622c5cd43d695a01c38327efedfd239 Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Fri, 8 Jan 2021 21:39:29 +0400
Subject: [PATCH 243/295] ospf: update routing protocol command definitions

---
 docs/configuration/protocols/ospf.rst | 259 +++++++++++++++++++++++++-
 1 file changed, 253 insertions(+), 6 deletions(-)

diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
index acb1bce8..77ed4a37 100644
--- a/docs/configuration/protocols/ospf.rst
+++ b/docs/configuration/protocols/ospf.rst
@@ -19,6 +19,9 @@ OSPF is a widely used IGP in large enterprise networks.
 OSPFv2 (IPv4)
 #############
 
+General configuration
+---------------------
+
 .. cfgcmd:: set protocols ospf area <number>
 
    This command is udes to enable the OSPF process. The area number can be 
@@ -49,11 +52,6 @@ OSPFv2 (IPv4)
    :cfgcmd:`route-map` specifies to advertise the default route if the route map 
    is satisfied.
 
-.. cfgcmd:: set protocols ospf default-metric <number>
-   
-   This command specifies the default metric value of redistributed routes.
-   The metric range is 0 to 16777214.
-   
 .. cfgcmd:: set protocols ospf distance global <distance>
 
    This command change distance value of OSPF. The distance range is 1 to 255.
@@ -70,10 +68,27 @@ OSPFv2 (IPv4)
 .. cfgcmd:: set protocols ospf parameters router-id <rid>
    
    This command sets the router-ID of the OSPF process. The router-ID may be an
-   IP address of the router, but need not be - it can be any arbitrary 32bit number.
+   IP address of the router, but need not be – it can be any arbitrary 32bit number.
    However it MUST be unique within the entire OSPF domain to the OSPF speaker – bad
    things will happen if multiple OSPF speakers are configured with the same router-ID!
    
+.. cfgcmd:: set protocols ospf parameters abr-type <cisco|ibm|shortcut|standard>
+
+   This command selects ABR model. OSPF router supports four ABR models:
+
+   "cisco" – a router will be considered as ABR if it has several configured links to 
+   the networks in different areas one of which is a backbone area. Moreover, the link 
+   to the backbone area should be active (working).
+   "ibm" – identical to "cisco" model but in this case a backbone area link may not be active.
+   "standard" – router has several active links to different areas.
+   "shortcut" – identical to "standard" but in this model a router is allowed to use a 
+   connected areas topology without involving a backbone area for inter-area connections.
+
+   Detailed information about "cisco" and "ibm" models differences can be found in :rfc:`3509`. 
+   A "shortcut" model allows ABR to create routes between areas based on the topology of the 
+   areas connected to this router but not using a backbone area in case if non-backbone route 
+   will be cheaper. For more information about "shortcut" model, see :t:`ospf-shortcut-abr-02.txt`
+
 .. cfgcmd:: set protocols ospf parameters rfc1583-compatibility
 
    :rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2 (changes)
@@ -101,6 +116,238 @@ OSPFv2 (IPv4)
    This command allows exclude interface from passive state. This command is used if the
    command :cfgcmd:`passive-interface default` was configured.
 
+.. cfgcmd:: set protocols ospf refresh timers <seconds>
+
+   The router automatically updates link-state information with its neighbors. Only an obsolete
+   information is updated which age has exceeded a specific threshold. This parameter changes
+   a threshold value, which by default is 1800 seconds (half an hour). The value is applied
+   to the whole OSPF router. The timer range is 10 to 1800.
+
+
+Areas configuration
+-------------------
+
+.. cfgcmd:: set protocols ospf area <number> area-type stub
+
+   This command specifies the area to be a Stub Area. That is, an area where no router 
+   originates routes external to OSPF and hence an area where all external routes are 
+   via the ABR(s). Hence, ABRs for such an area do not need to pass AS-External LSAs 
+   (type-5) or ASBR-Summary LSAs (type-4) into the area. They need only pass 
+   Network-Summary (type-3) LSAs into such an area, along with a default-route summary.
+
+.. cfgcmd:: set protocols ospf area <number> area-type stub no-summary
+
+   This command specifies the area to be a Totally Stub Area. In addition to stub area
+   limitations this area type prevents an ABR from injecting Network-Summary (type-3)
+   LSAs into the specified stub area. Only default summary route is allowed.
+
+.. cfgcmd:: set protocols ospf area <number> area-type stub default-cost <number>
+
+   This command sets the cost of default-summary LSAs announced to stubby areas.
+   The cost range is 0 to 16777215.
+
+.. cfgcmd:: set protocols ospf area <number> area-type nssa
+
+   This command specifies the area to be a Not So Stubby Area. External routing information
+   is imported into an NSSA in Type-7 LSAs. Type-7 LSAs are similar to Type-5 AS-external
+   LSAs, except that they can only be flooded into the NSSA. In order to further propagate 
+   the NSSA external information, the Type-7 LSA must be translated to a Type-5 
+   AS-external-LSA by the NSSA ABR.
+
+.. cfgcmd:: set protocols ospf area <number> area-type nssa no-summary
+
+   This command specifies the area to be a NSSA Totally Stub Area. ABRs for such an area do
+   not need to pass Network-Summary (type-3) LSAs (except the default summary route),
+   ASBR-Summary LSAs (type-4) and AS-External LSAs (type-5) into the area. But Type-7 LSAs 
+   that convert to Type-5 at the NSSA ABR are allowed.
+
+.. cfgcmd:: set protocols ospf area <number> area-type nssa default-cost <number>
+
+   This command sets the default cost of LSAs announced to NSSA areas.
+   The cost range is 0 to 16777215.
+   
+.. cfgcmd:: set protocols ospf area <number> area-type nssa translate <always|candidate|never>
+
+   Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into 
+   Type-5 LSAs. When role is Always, Type-7 LSAs are translated into Type-5 LSAs regardless 
+   of the translator state of other NSSA border routers. When role is Candidate, this router 
+   participates in the translator election to determine if it will perform the translations 
+   duties. When role is Never, this router will never translate Type-7 LSAs into Type-5 LSAs.
+
+.. cfgcmd:: set protocols ospf area <number> authentication plaintext-password
+
+   This command specifies that simple password authentication should be used for the given 
+   area. The password must also be configured on a per-interface basis.
+
+.. cfgcmd:: set protocols ospf area <number> authentication md5
+
+   This command specify that OSPF packets must be authenticated with MD5 HMACs within the 
+   given area. Keying material must also be configured on a per-interface basis.
+
+.. cfgcmd:: set protocols ospf area <number> shortcut <default|disable|enable>
+
+   This parameter allows to "shortcut" routes (non-backbone) for inter-area routes. There 
+   are three modes available for routes shortcutting:
+
+   "default" –  this area will be used for shortcutting only if ABR does not have a link 
+   to the backbone area or this link was lost.
+   "enable" – the area will be used for shortcutting every time the route that goes through 
+   it is cheaper.
+   "disable" – this area is never used by ABR for routes shortcutting.
+   
+.. cfgcmd:: set protocols ospf area <number> virtual-link <A.B.C.D>
+
+   Provides a backbone area coherence by virtual link establishment.
+
+   In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully 
+   connected. I.e. any backbone area router must have a route to any other backbone area 
+   router. Moreover, every ABR must have a link to backbone area. However, it is not always 
+   possible to have a physical link to a backbone area. In this case between two ABR (one 
+   of them has a link to the backbone area) in the area (not stub area) a virtual link is organized.
+
+   <number> – area identifier through which a virtual link goes.
+   <A.B.C.D> – ABR router-id with which a virtual link is established. Virtual link must be 
+   configured on both routers.
+
+   Formally, a virtual link looks like a point-to-point network connecting two ABR from one 
+   area one of which physically connected to a backbone area. This pseudo-network is considered
+   to belong to a backbone area.
+
+
+Interfaces configuration
+------------------------
+
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf authentication plaintext-password <text>
+
+   This command sets OSPF authentication key to a simple password. After setting, all OSPF 
+   packets are authenticated. Key has length up to 8 chars.
+
+   Simple text password authentication is insecure and deprecated in favour of MD5 HMAC 
+   authentication.
+
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf authentication md5 key-id <id> md5-key <text>
+
+   This command specifys that MD5 HMAC authentication must be used on this interface. It sets 
+   OSPF authentication key to a cryptographic password. Key-id identifies secret key used to 
+   create the message digest. This ID is part of the protocol and must be consistent across 
+   routers on a link. The key can be long up to 16 chars (larger strings will be truncated), 
+   and is associated with the given key-id.
+
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf bandwidth <number>
+
+   This command sets the interface bandwidth for cost calculations, where 
+   bandwidth can be in range from 1 to 100000, specified in Mbits/s.
+   
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf cost <number>
+
+   This command sets link cost for the specified interface. The cost value is set to
+   router-LSA’s metric field and used for SPF calculation. The cost range is 1 to 65535.
+
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf dead-interval <number>
+
+   Set number of seconds for router Dead Interval timer value used for Wait Timer and 
+   Inactivity Timer. This value must be the same for all routers attached to a common 
+   network. The default value is 40 seconds. The interval range is 1 to 65535.
+
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf hello-interval <number>
+
+   Set number of seconds for Hello Interval timer value. Setting this value, Hello 
+   packet will be sent every timer value seconds on the specified interface. This 
+   value must be the same for all routers attached to a common network. The default 
+   value is 10 seconds. The interval range is 1 to 65535.
+
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf mtu-ignore
+
+   This command disables check of the MTU value in the OSPF DBD packets. Thus, use 
+   of this command allows the OSPF adjacency to reach the FULL state even though 
+   there is an interface MTU mismatch between two OSPF routers.
+   
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf network <type>
+
+   This command allows to specify the distribution type for the network connected 
+   to this interface:
+
+   "broadcast" – broadcast IP addresses distribution.
+   "non-broadcast" – address distribution in NBMA networks topology.
+   "point-to-multipoint" – address distribution in point-to-multipoint networks.
+   "point-to-point" – address distribution in point-to-point networks.
+
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf priority <number>
+
+   This command sets Router Priority integer value. The router with the highest 
+   priority will be more eligible to become Designated Router. Setting the value 
+   to 0, makes the router ineligible to become Designated Router. The default value 
+   is 1. The interval range is 0 to 255.
+   
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf retransmit-interval <number>
+
+   This command sets number of seconds for RxmtInterval timer value. This value is used
+   when retransmitting Database Description and Link State Request packets if acknowledge
+   was not received. The default value is 5 seconds. The interval range is 3 to 65535.
+   
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf transmit-delay <number>
+
+   This command sets number of seconds for InfTransDelay value. It allows to set and adjust
+   for each interface the delay interval before starting the synchronizing process of the
+   router's database with all neighbors. The default value is 1 seconds. The interval range
+   is 3 to 65535.
+
+
+Redistribution configuration
+----------------------------
+
+.. cfgcmd:: set protocols ospf redistribute bgp
+
+   Redistribute BGP routes to OSPF process.
+
+.. cfgcmd:: set protocols ospf redistribute connected
+
+   Redistribute connected routes to OSPF process.
+
+.. cfgcmd:: set protocols ospf redistribute kernel
+
+   Redistribute kernel routes to OSPF process.
+
+.. cfgcmd:: set protocols ospf redistribute rip
+
+   Redistribute RIP routes to OSPF process.
+
+.. cfgcmd:: set protocols ospf redistribute static
+
+   Redistribute static routes to OSPF process.
+   
+.. cfgcmd:: set protocols ospf default-metric <number>
+   
+   This command specifies the default metric value of redistributed routes.
+   The metric range is 0 to 16777214.
+
+.. cfgcmd:: set protocols ospf redistribute <route source> metric <number>
+
+   This command specifies metric for redistributed routes from given route source. There 
+   are five modes available for route source: bgp, connected, kernel, rip, static. The 
+   metric range is 1 to 16.
+
+.. cfgcmd:: set protocols ospf redistribute <route source> metric-type <1|2>
+
+   This command specifies metric type for redistributed routes. Difference between two metric
+   types that metric type 1 is a metric which is "commensurable" with inner OSPF links. When 
+   calculating a metric to the external destination, the full path metric is calculated as a 
+   metric sum path of a router which had advertised this link plus the link metric. Thus, a 
+   route with the least summary metric will be selected. If external link is advertised with 
+   metric type 2 the path is selected which lies through the router which advertised this link
+   with the least metric despite of the fact that internal path to this router is longer (with
+   more cost). However, if two routers advertised an external link and with metric type 2 the
+   preference is given to the path which lies through the router with a shorter internal path.
+   If two different routers advertised two links to the same external destimation but with
+   different metric type, metric type 1 is preferred. If type of a metric left undefined the
+   router will consider these external links to have a default metric type 2.
+
+.. cfgcmd:: set protocols ospf redistribute <route source> route-map <name>
+
+   This command allows to use route map to filter redistributed routes from given route source.
+   There are five modes available for route source: bgp, connected, kernel, rip, static.
+
+
 Configuration example
 ---------------------
 

From e8a38efb96274db05225a85139b41e715258c526 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 8 Jan 2021 22:10:32 +0100
Subject: [PATCH 244/295] cli: fix WARNING: Title overline too short

---
 docs/cli.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/cli.rst b/docs/cli.rst
index bd0d37a8..7578ef8d 100644
--- a/docs/cli.rst
+++ b/docs/cli.rst
@@ -1,8 +1,8 @@
 .. _cli:
 
-#####################
+######################
 Command Line Interface
-#####################
+######################
 
 The VyOS :abbr:`CLI (Command-Line Interface)` comprises an operational and a
 configuration mode.

From e9a0b934175a89ce4998e2157e5ba98ffa016665 Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Sat, 9 Jan 2021 23:49:26 +0400
Subject: [PATCH 245/295] ospf: updates

---
 docs/configuration/protocols/ospf.rst | 323 ++++++++++++++++++++++++--
 1 file changed, 300 insertions(+), 23 deletions(-)

diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
index 77ed4a37..7d9950e6 100644
--- a/docs/configuration/protocols/ospf.rst
+++ b/docs/configuration/protocols/ospf.rst
@@ -1,5 +1,3 @@
-.. include:: /_include/need_improvement.txt
-
 .. _routing-ospf:
 
 ####
@@ -19,7 +17,7 @@ OSPF is a widely used IGP in large enterprise networks.
 OSPFv2 (IPv4)
 #############
 
-General configuration
+General Configuration
 ---------------------
 
 .. cfgcmd:: set protocols ospf area <number>
@@ -43,6 +41,17 @@ General configuration
    have a cost of 1. Cost of lower bandwidth links will be scaled with 
    reference to this cost).
 
+.. cfgcmd:: set protocols ospf parameters router-id <rid>
+
+   This command sets the router-ID of the OSPF process. The router-ID may be an
+   IP address of the router, but need not be – it can be any arbitrary 32bit number.
+   However it MUST be unique within the entire OSPF domain to the OSPF speaker – bad
+   things will happen if multiple OSPF speakers are configured with the same router-ID!
+
+
+Optional Configuration
+----------------------
+
 .. cfgcmd:: set protocols ospf default-information originate [always] [metric <number>] [metric-type <1|2>] [route-map <name>]
 
    Originate an AS-External (type-5) LSA describing a default route into all 
@@ -65,23 +74,36 @@ General configuration
    .. note:: Routes with a distance of 255 are effectively disabled and not
       installed into the kernel.
 
-.. cfgcmd:: set protocols ospf parameters router-id <rid>
+.. cfgcmd:: set protocols ospf log-adjacency-changes [detail]
+
+   This command allows to log changes in adjacency. With the optional
+   :cfgcmd:`detail` argument, all changes in adjacency status are shown.
+   Without :cfgcmd:`detail`, only changes to full or regressions are shown.
+
+.. cfgcmd:: set protocols ospf max-metric router-lsa <administrative|on-shutdown <seconds>|on-startup <seconds>>
+
+   This enables :rfc:`3137` support, where the OSPF process describes its
+   transit links in its router-LSA as having infinite distance so that other
+   routers will avoid calculating transit paths through the router while
+   still being able to reach networks through the router.
    
-   This command sets the router-ID of the OSPF process. The router-ID may be an
-   IP address of the router, but need not be – it can be any arbitrary 32bit number.
-   However it MUST be unique within the entire OSPF domain to the OSPF speaker – bad
-   things will happen if multiple OSPF speakers are configured with the same router-ID!
+   This support may be enabled administratively (and indefinitely) with the
+   :cfgcmd:`administrative` command. It may also be enabled conditionally.
+   Conditional enabling of max-metric router-lsas can be for a period of
+   seconds after startup with the :cfgcmd:`on-startup <seconds>` command
+   and/or for a period of seconds prior to shutdown with the
+   :cfgcmd:`on-shutdown <seconds>` command. The time range is 5 to 86400.
    
 .. cfgcmd:: set protocols ospf parameters abr-type <cisco|ibm|shortcut|standard>
 
    This command selects ABR model. OSPF router supports four ABR models:
 
-   "cisco" – a router will be considered as ABR if it has several configured links to 
+   **cisco** – a router will be considered as ABR if it has several configured links to 
    the networks in different areas one of which is a backbone area. Moreover, the link 
    to the backbone area should be active (working).
-   "ibm" – identical to "cisco" model but in this case a backbone area link may not be active.
-   "standard" – router has several active links to different areas.
-   "shortcut" – identical to "standard" but in this model a router is allowed to use a 
+   **ibm** – identical to "cisco" model but in this case a backbone area link may not be active.
+   **standard** – router has several active links to different areas.
+   **shortcut** – identical to "standard" but in this model a router is allowed to use a 
    connected areas topology without involving a backbone area for inter-area connections.
 
    Detailed information about "cisco" and "ibm" models differences can be found in :rfc:`3509`. 
@@ -123,8 +145,18 @@ General configuration
    a threshold value, which by default is 1800 seconds (half an hour). The value is applied
    to the whole OSPF router. The timer range is 10 to 1800.
 
+.. cfgcmd:: set protocols ospf timers throttle spf <delay|initial-holdtime|max-holdtime> <seconds>
 
-Areas configuration
+   This command sets the initial delay, the initial-holdtime and the maximum-holdtime between
+   when SPF is calculated and the event which triggered the calculation. The times are specified
+   in milliseconds and must be in the range of 0 to 600000 milliseconds. :cfgcmd:`delay` sets
+   the initial SPF schedule delay in milliseconds. The default value is 200 ms.
+   :cfgcmd:`initial-holdtime` sets the minimum hold time between two consecutive SPF calculations.
+   The default value is 1000 ms. :cfgcmd:`max-holdtime` sets the maximum wait time between two
+   consecutive SPF calculations. The default value is 10000 ms.
+
+
+Areas Configuration
 -------------------
 
 .. cfgcmd:: set protocols ospf area <number> area-type stub
@@ -189,11 +221,11 @@ Areas configuration
    This parameter allows to "shortcut" routes (non-backbone) for inter-area routes. There 
    are three modes available for routes shortcutting:
 
-   "default" –  this area will be used for shortcutting only if ABR does not have a link 
+   **default** –  this area will be used for shortcutting only if ABR does not have a link 
    to the backbone area or this link was lost.
-   "enable" – the area will be used for shortcutting every time the route that goes through 
+   **enable** – the area will be used for shortcutting every time the route that goes through 
    it is cheaper.
-   "disable" – this area is never used by ABR for routes shortcutting.
+   **disable** – this area is never used by ABR for routes shortcutting.
    
 .. cfgcmd:: set protocols ospf area <number> virtual-link <A.B.C.D>
 
@@ -214,7 +246,7 @@ Areas configuration
    to belong to a backbone area.
 
 
-Interfaces configuration
+Interfaces Configuration
 ------------------------
 
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf authentication plaintext-password <text>
@@ -267,10 +299,10 @@ Interfaces configuration
    This command allows to specify the distribution type for the network connected 
    to this interface:
 
-   "broadcast" – broadcast IP addresses distribution.
-   "non-broadcast" – address distribution in NBMA networks topology.
-   "point-to-multipoint" – address distribution in point-to-multipoint networks.
-   "point-to-point" – address distribution in point-to-point networks.
+   **broadcast** – broadcast IP addresses distribution.
+   **non-broadcast** – address distribution in NBMA networks topology.
+   **point-to-multipoint** – address distribution in point-to-multipoint networks.
+   **point-to-point** – address distribution in point-to-point networks.
 
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf priority <number>
 
@@ -293,7 +325,32 @@ Interfaces configuration
    is 3 to 65535.
 
 
-Redistribution configuration
+Manual Neighbor Configuration
+-----------------------------
+
+OSPF routing devices normally discover their neighbors dynamically by listening to the broadcast
+or multicast hello packets on the network. Because an NBMA network does not support broadcast (or
+multicast), the device cannot discover its neighbors dynamically, so you must configure all the
+neighbors statically.
+
+.. cfgcmd:: set protocols ospf neighbor <A.B.C.D>
+
+   This command specifies the IP address of the neighboring device.
+
+.. cfgcmd:: set protocols ospf neighbor <A.B.C.D> poll-interval <seconds>
+
+   This command specifies the length of time, in seconds, before the routing device sends hello
+   packets out of the interface before it establishes adjacency with a neighbor. The range is 1
+   to 65535 seconds. The default value is 60 seconds.
+   
+.. cfgcmd:: set protocols ospf neighbor <A.B.C.D> priority <number>
+
+   This command specifies the router priority value of the nonbroadcast neighbor associated with
+   the IP address specified. The default is 0. This keyword does not apply to point-to-multipoint
+   interfaces.
+
+
+Redistribution Configuration
 ----------------------------
 
 .. cfgcmd:: set protocols ospf redistribute bgp
@@ -348,7 +405,227 @@ Redistribution configuration
    There are five modes available for route source: bgp, connected, kernel, rip, static.
 
 
-Configuration example
+Operational Mode Commands
+-------------------------
+
+.. opcmd:: show ip ospf neighbor
+
+   This command displays the neighbors status.
+   
+.. code-block:: none
+
+   Neighbor ID     Pri State           Dead Time Address         Interface                        RXmtL RqstL DBsmL
+   10.0.13.1         1 Full/DR           38.365s 10.0.13.1       eth0:10.0.13.3                       0     0     0
+   10.0.23.2         1 Full/Backup       39.175s 10.0.23.2       eth1:10.0.23.3                       0     0     0
+
+.. opcmd:: show ip ospf neighbor detail
+
+   This command displays the neighbors information in a detailed form, not just
+   a summary table.
+
+.. code-block:: none
+
+   Neighbor 10.0.13.1, interface address 10.0.13.1
+      In the area 0.0.0.0 via interface eth0
+      Neighbor priority is 1, State is Full, 5 state changes
+      Most recent state change statistics:
+        Progressive change 11m55s ago
+      DR is 10.0.13.1, BDR is 10.0.13.3
+      Options 2 *|-|-|-|-|-|E|-
+      Dead timer due in 34.854s
+      Database Summary List 0
+      Link State Request List 0
+      Link State Retransmission List 0
+      Thread Inactivity Timer on
+      Thread Database Description Retransmision off
+      Thread Link State Request Retransmission on
+      Thread Link State Update Retransmission on
+
+  Neighbor 10.0.23.2, interface address 10.0.23.2
+     In the area 0.0.0.1 via interface eth1
+     Neighbor priority is 1, State is Full, 4 state changes
+     Most recent state change statistics:
+       Progressive change 41.193s ago
+     DR is 10.0.23.3, BDR is 10.0.23.2
+     Options 2 *|-|-|-|-|-|E|-
+     Dead timer due in 35.661s
+     Database Summary List 0
+     Link State Request List 0
+     Link State Retransmission List 0
+     Thread Inactivity Timer on
+     Thread Database Description Retransmision off
+     Thread Link State Request Retransmission on
+     Thread Link State Update Retransmission on
+
+.. opcmd:: show ip ospf neighbor <A.B.C.D>
+
+   This command displays the neighbors information in a detailed form for a neighbor
+   whose IP address is specified.
+
+.. opcmd:: show ip ospf neighbor <intname>
+
+   This command displays the neighbors status for a neighbor on the specified
+   interface.
+
+.. opcmd:: show ip ospf interface [intname]
+
+   This command displays state and configuration of OSPF the specified interface,
+   or all interfaces if no interface is given.
+
+.. code-block:: none
+
+   eth0 is up
+     ifindex 2, MTU 1500 bytes, BW 4294967295 Mbit <UP,BROADCAST,RUNNING,MULTICAST>
+     Internet Address 10.0.13.3/24, Broadcast 10.0.13.255, Area 0.0.0.0
+     MTU mismatch detection: enabled
+     Router ID 10.0.23.3, Network Type BROADCAST, Cost: 1
+     Transmit Delay is 1 sec, State Backup, Priority 1
+     Backup Designated Router (ID) 10.0.23.3, Interface Address 10.0.13.3
+     Multicast group memberships: OSPFAllRouters OSPFDesignatedRouters
+     Timer intervals configured, Hello 10s, Dead 40s, Wait 40s, Retransmit 5
+       Hello due in 4.470s
+     Neighbor Count is 1, Adjacent neighbor count is 1
+   eth1 is up
+     ifindex 3, MTU 1500 bytes, BW 4294967295 Mbit <UP,BROADCAST,RUNNING,MULTICAST>
+     Internet Address 10.0.23.3/24, Broadcast 10.0.23.255, Area 0.0.0.1
+     MTU mismatch detection: enabled
+     Router ID 10.0.23.3, Network Type BROADCAST, Cost: 1
+     Transmit Delay is 1 sec, State DR, Priority 1
+     Backup Designated Router (ID) 10.0.23.2, Interface Address 10.0.23.2
+     Saved Network-LSA sequence number 0x80000002
+     Multicast group memberships: OSPFAllRouters OSPFDesignatedRouters
+     Timer intervals configured, Hello 10s, Dead 40s, Wait 40s, Retransmit 5
+       Hello due in 4.563s
+     Neighbor Count is 1, Adjacent neighbor count is 1
+
+.. opcmd:: show ip ospf route
+
+   This command displays the OSPF routing table, as determined by the most recent
+   SPF calculation.
+
+.. code-block:: none
+
+   ============ OSPF network routing table ============
+   N IA 10.0.12.0/24          [3] area: 0.0.0.0
+                              via 10.0.13.3, eth0
+   N    10.0.13.0/24          [1] area: 0.0.0.0
+                              directly attached to eth0
+   N IA 10.0.23.0/24          [2] area: 0.0.0.0
+                              via 10.0.13.3, eth0
+   N    10.0.34.0/24          [2] area: 0.0.0.0
+                              via 10.0.13.3, eth0
+   
+   ============ OSPF router routing table =============
+   R    10.0.23.3             [1] area: 0.0.0.0, ABR
+                              via 10.0.13.3, eth0
+   R    10.0.34.4             [2] area: 0.0.0.0, ASBR
+                              via 10.0.13.3, eth0
+   
+   ============ OSPF external routing table ===========
+   N E2 172.16.0.0/24         [2/20] tag: 0
+                              via 10.0.13.3, eth0
+
+The table consists of following data:
+
+**OSPF network routing table** – includes a list of acquired routes for all 
+accessible networks (or aggregated area ranges) of OSPF system. "IA" flag means
+that route destination is in the area to which the router is not connected, i.e.
+it’s an inter-area path. In square brackets a summary metric for all links through
+which a path lies to this network is specified. "via" prefix defines a
+router-gateway, i.e. the first router on the way to the destination (next hop).
+**OSPF router routing table** – includes a list of acquired routes to all 
+accessible ABRs and ASBRs.
+**OSPF external routing table** – includes a list of acquired routes that are
+external to the OSPF process. "E" flag points to the external link metric type
+(E1 – metric type 1, E2 – metric type 2). External link metric is printed in the
+"<metric of the router which advertised the link>/<link metric>" format.
+
+.. opcmd:: show ip ospf border-routers
+
+   This command displays a table of paths to area boundary and autonomous system
+   boundary routers.
+   
+.. opcmd:: show ip ospf database
+
+   This command displays a summary table with a database contents (LSA).
+
+.. code-block:: none
+
+          OSPF Router with ID (10.0.13.1)
+   
+                   Router Link States (Area 0.0.0.0)
+   
+   Link ID         ADV Router      Age  Seq#       CkSum  Link count
+   10.0.13.1       10.0.13.1        984 0x80000005 0xd915 1
+   10.0.23.3       10.0.23.3       1186 0x80000008 0xfe62 2
+   10.0.34.4       10.0.34.4       1063 0x80000004 0x4e3f 1
+   
+                   Net Link States (Area 0.0.0.0)
+   
+   Link ID         ADV Router      Age  Seq#       CkSum
+   10.0.13.1       10.0.13.1        994 0x80000003 0x30bb
+   10.0.34.4       10.0.34.4       1188 0x80000001 0x9411
+   
+                   Summary Link States (Area 0.0.0.0)
+   
+   Link ID         ADV Router      Age  Seq#       CkSum  Route
+   10.0.12.0       10.0.23.3       1608 0x80000001 0x6ab6 10.0.12.0/24
+   10.0.23.0       10.0.23.3        981 0x80000003 0xe232 10.0.23.0/24
+   
+                   AS External Link States
+   
+   Link ID         ADV Router      Age  Seq#       CkSum  Route
+   172.16.0.0      10.0.34.4       1063 0x80000001 0xc40d E2 172.16.0.0/24 [0x0]
+   
+.. opcmd:: show ip ospf database <type> [A.B.C.D] [adv-router <A.B.C.D>|self-originate]
+
+   This command displays a database contents for a specific link advertisement type.
+   
+   The type can be the following:
+   asbr-summary, external, network, nssa-external, opaque-area, opaque-as,
+   opaque-link, router, summary.
+   
+   [A.B.C.D] – link-state-id. With this specified the command displays portion of
+   the network environment that is being described by the advertisement. The value
+   entered depends on the advertisement’s LS type. It must be entered in the form
+   of an IP address.
+   
+   :cfgcmd:`adv-router <A.B.C.D>` – router id, which link advertisements need to be
+   reviewed.
+   
+   :cfgcmd:`self-originate` displays only self-originated LSAs from the local router. 
+
+.. code-block:: none
+
+             OSPF Router with ID (10.0.13.1)
+
+                   Router Link States (Area 0.0.0.0)
+
+     LS age: 1213
+     Options: 0x2  : *|-|-|-|-|-|E|-
+     LS Flags: 0x3
+     Flags: 0x0
+     LS Type: router-LSA
+     Link State ID: 10.0.13.1
+     Advertising Router: 10.0.13.1
+     LS Seq Number: 80000009
+     Checksum: 0xd119
+     Length: 36
+   
+      Number of Links: 1
+
+       Link connected to: a Transit Network
+        (Link ID) Designated Router address: 10.0.13.1
+        (Link Data) Router Interface address: 10.0.13.1
+        Number of TOS metrics: 0
+          TOS 0 Metric: 1
+
+.. opcmd:: show ip ospf database max-age
+
+   This command displays LSAs in MaxAge list.
+
+
+Configuration Example
 ---------------------
 
 Below you can see a typical configuration using 2 nodes, redistribute loopback

From 6f54a84f5ce197dad57a13ffc76c6ce8d74d298e Mon Sep 17 00:00:00 2001
From: rebortg <rebortg@users.noreply.github.com>
Date: Mon, 11 Jan 2021 06:34:32 +0000
Subject: [PATCH 246/295] Update vyos-1x submodule

---
 docs/_include/vyos-1x | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
index f4625c9e..4fb6160f 160000
--- a/docs/_include/vyos-1x
+++ b/docs/_include/vyos-1x
@@ -1 +1 @@
-Subproject commit f4625c9ee2f54992ed96f113ff52c5a9993ea769
+Subproject commit 4fb6160fb72717ce65cc1dbd814b80a1d1a4e756

From 9c6293817944b61ac33ae9df4b44978217f38e17 Mon Sep 17 00:00:00 2001
From: jack9603301 <jack9603301@163.com>
Date: Sun, 10 Jan 2021 17:30:58 +0800
Subject: [PATCH 247/295] bridge: Add active VLAN aware option

---
 docs/configuration/interfaces/bridge.rst | 30 +++++++++++++++++-------
 1 file changed, 21 insertions(+), 9 deletions(-)

diff --git a/docs/configuration/interfaces/bridge.rst b/docs/configuration/interfaces/bridge.rst
index 17e3d50b..c53d6f51 100644
--- a/docs/configuration/interfaces/bridge.rst
+++ b/docs/configuration/interfaces/bridge.rst
@@ -116,6 +116,16 @@ links providing fault tolerance if an active link fails.
 VLAN
 ====
 
+.. note:: It is not valid to use the `vif 1` option for VLAN aware bridges
+   because VLAN aware bridges assume that all unlabeled packets belong to 
+   the default VLAN 1 member and that the VLAN ID of the bridge's parent 
+   interface is always 1
+
+.. cfgcmd:: set interfaces bridge <interface> enable-vlan
+
+   To activate the VLAN aware bridge, you must activate this setting to use VLAN 
+   settings for the bridge
+
 .. cmdinclude:: /_include/interface-vlan-8021q.txt
    :var0: bridge
    :var1: br0
@@ -160,9 +170,9 @@ Port Mirror (SPAN)
    :var1: br1
    :var2: eth3
 
-*******
-Example
-*******
+******************************
+Example: Create a basic bridge
+******************************
 
 Creating a bridge interface is very simple. In this example we will
 have:
@@ -195,9 +205,9 @@ This results in the active configuration:
     }
     stp
 
-*******
-Example
-*******
+*********************************
+Example: Using VLAN aware Bridge
+*********************************
 
 An example of creating a VLAN-aware bridge is as follows:
 
@@ -209,6 +219,7 @@ An example of creating a VLAN-aware bridge is as follows:
 
 .. code-block:: none
 
+  set interfaces bridge br100 enable-vlan
   set interfaces bridge br100 member interface eth1 allowed-vlan 10
   set interfaces bridge br100 member interface eth2 native-vlan 10
   set interfaces bridge br100 vif 10 address 192.0.2.1/24
@@ -220,6 +231,7 @@ This results in the active configuration:
 .. code-block:: none
 
    vyos@vyos# show interfaces bridge br100
+    enable-vlan
     member {
         interface eth1 {
             allowed-vlan 10
@@ -234,9 +246,9 @@ This results in the active configuration:
         address 2001:db8::ffff/64
     }
 
-*******
-Example
-*******
+********************************************************************
+Example: Using the operation mode command to view Bridge Information
+********************************************************************
 
 .. opcmd:: show bridge
 

From ed39728bdfee89c60926bd64914d9bc3166ce0dc Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Mon, 11 Jan 2021 22:42:37 +0400
Subject: [PATCH 248/295] rip: add all commands and their explanations

---
 docs/configuration/protocols/rip.rst | 226 ++++++++++++++++++++++++++-
 1 file changed, 222 insertions(+), 4 deletions(-)

diff --git a/docs/configuration/protocols/rip.rst b/docs/configuration/protocols/rip.rst
index 0d73ad34..7e7f0afc 100644
--- a/docs/configuration/protocols/rip.rst
+++ b/docs/configuration/protocols/rip.rst
@@ -1,5 +1,3 @@
-.. include:: /_include/need_improvement.txt
-
 .. _rip:
 
 ###
@@ -15,8 +13,228 @@ topology. In each update, the distance to any given network will be broadcast
 to its neighboring router.
 
 Supported versions of RIP are:
-* RIPv1 as described in :rfc:`1058`
-* RIPv2 as described in :rfc:`2453`
+
+ - RIPv1 as described in :rfc:`1058`
+ - RIPv2 as described in :rfc:`2453`
+
+General Configuration
+---------------------
+
+.. cfgcmd:: set protocols rip network <A.B.C.D/M>
+
+  This command enables RIP and sets the RIP enable interface by NETWORK.
+  The interfaces which have addresses matching with NETWORK are enabled.
+  
+.. cfgcmd:: set protocols rip interface <interface>
+
+  This command specifies a RIP enabled interface by interface name. Both
+  the sending and receiving of RIP packets will be enabled on the port
+  specified in this command.
+  
+.. cfgcmd:: set protocols rip neighbor <A.B.C.D>
+
+  This command specifies a RIP neighbor. When a neighbor doesn’t understand
+  multicast, this command is used to specify neighbors. In some cases, not
+  all routers will be able to understand multicasting, where packets are
+  sent to a network or a group of addresses. In a situation where a neighbor
+  cannot process multicast packets, it is necessary to establish a direct
+  link between routers.
+
+.. cfgcmd:: set protocols rip passive-interface interface <interface>
+
+  This command sets the specified interface to passive mode. On passive mode
+  interface, all receiving packets are processed as normal and VyOS does not
+  send either multicast or unicast RIP packets except to RIP neighbors
+  specified with neighbor command.
+  
+.. cfgcmd:: set protocols rip passive-interface interface default
+
+  This command specifies all interfaces to passive mode.
+
+
+Optional Configuration
+----------------------
+
+.. cfgcmd:: set protocols rip default-distance <distance>
+
+  This command change distance value of RIP. The distance range is 1 to 255.
+   
+   .. note:: Routes with a distance of 255 are effectively disabled and not
+      installed into the kernel.
+
+.. cfgcmd:: set protocols rip network-distance <A.B.C.D/M> distance <distance>
+
+  This command sets default RIP distance to specified value when the route’s
+  source IP address matches the specified prefix.
+  
+.. cfgcmd:: set protocols rip network-distance <A.B.C.D/M> access-list <name>
+
+  This command can be used with previous command to sets default RIP distance
+  to specified value when the route’s source IP address matches the specified
+  prefix and the specified access-list.
+
+.. cfgcmd:: set protocols rip default-information originate
+
+  This command generate a default route into the RIP.
+
+.. cfgcmd:: set protocols rip distribute-list access-list <in|out> <number>
+
+  This command can be used to filter the RIP path using access lists.
+  :cfgcmd:`in` and :cfgcmd:`out` this is the direction in which the access
+  lists are applied.
+  
+.. cfgcmd:: set protocols rip distribute-list interface <interface> access-list <in|out> <number>
+
+  This command allows you apply access lists to a chosen interface to
+  filter the RIP path.
+  
+.. cfgcmd:: set protocols rip distribute-list prefix-list <in|out> <name>
+
+  This command can be used to filter the RIP path using prefix lists.
+  :cfgcmd:`in` and :cfgcmd:`out` this is the direction in which the prefix
+  lists are applied.
+
+.. cfgcmd:: set protocols rip distribute-list interface <interface> prefix-list <in|out> <name>
+
+  This command allows you apply prefix lists to a chosen interface to
+  filter the RIP path.
+
+.. cfgcmd:: set protocols rip route <A.B.C.D/M>
+
+  This command is specific to FRR and VyOS. The route command makes a static
+  route only inside RIP. This command should be used only by advanced users
+  who are particularly knowledgeable about the RIP protocol. In most cases,
+  we recommend creating a static route in VyOS and redistributing it in RIP
+  using :cfgcmd:`redistribute static.
+  
+.. cfgcmd:: set protocols rip timers update <seconds>
+
+  This command specifies the update timer. Every update timer seconds, the
+  RIP process is awakened to send an unsolicited response message containing
+  the complete routing table to all neighboring RIP routers. The time range
+  is 5 to 2147483647. The default value is 30 seconds.
+
+.. cfgcmd:: set protocols rip timers timeout <seconds>
+
+  This command specifies the timeout timer. Upon expiration of the timeout,
+  the route is no longer valid; however, it is retained in the routing table
+  for a short time so that neighbors can be notified that the route has been
+  dropped. The time range is 5 to 2147483647. The default value is 180
+  seconds.
+
+.. cfgcmd:: set protocols rip timers garbage-collection <seconds>
+
+  This command specifies the garbage-collection timer. Upon expiration of
+  the garbage-collection timer, the route is finally removed from the
+  routing table. The time range is 5 to 2147483647. The default value is 120
+  seconds.
+
+
+Redistribution Configuration
+----------------------------
+
+.. cfgcmd:: set protocols rip redistribute <route source>
+
+  This command redistributes routing information from the given route source
+  into the RIP tables. There are five modes available for route source: bgp,
+  connected, kernel, ospf, static.
+
+.. cfgcmd:: set protocols rip redistribute <route source> metric <metric>
+
+  This command specifies metric for redistributed routes from the given route
+  source. There are five modes available for route source: bgp, connected,
+  kernel, ospf, static. The metric range is 1 to 16. 
+  
+.. cfgcmd:: set protocols rip redistribute <route source> route-map <name>
+
+  This command allows to use route map to filter redistributed routes from
+  the given route source. There are five modes available for route source:
+  bgp, connected, kernel, ospf, static.
+
+.. cfgcmd:: set protocols rip default-metric <metric>
+
+  This command modifies the default metric (hop count) value for redistributed
+  routes. The metric range is 1 to 16. The default value is 1. This command
+  does not affect connected route even if it is redistributed by
+  :cfgcmd:`redistribute connected`. To modify connected route’s metric
+  value, please use :cfgcmd:`redistribute connected metric`.
+
+
+Interfaces Configuration
+------------------------
+
+.. cfgcmd:: set interfaces <inttype> <intname> ip rip authentication plaintext-password <text>
+
+  This command sets the interface with RIP simple password authentication.
+  This command also sets authentication string. The string must be shorter
+  than 16 characters.
+
+.. cfgcmd:: set interfaces <inttype> <intname> ip rip authentication md5 <id> password <text>
+
+  This command sets the interface with RIP MD5 authentication. This command
+  also sets MD5 Key. The key must be shorter than 16 characters.
+
+.. cfgcmd:: set interfaces <inttype> <intname> ip rip split-horizon disable
+
+  This command disables split-horizon on the interface. By default, VyOS does
+  not advertise RIP routes out the interface over which they were learned
+  (split horizon).
+  
+.. cfgcmd:: set interfaces <inttype> <intname> ip rip split-horizon poison-reverse
+
+  This command enables poison-reverse on the interface. If both poison reverse
+  and split horizon are enabled, then VyOS advertises the learned routes
+  as unreachable over the interface on which the route was learned.
+
+
+Operational Mode Commands
+-------------------------
+
+.. opcmd:: show ip rip
+
+  This command displays RIP routes.
+
+.. code-block:: none
+
+  Codes: R - RIP, C - connected, S - Static, O - OSPF, B - BGP
+  Sub-codes:
+        (n) - normal, (s) - static, (d) - default, (r) - redistribute,
+        (i) - interface
+  
+       Network            Next Hop         Metric From            Tag Time
+  C(i) 10.0.12.0/24       0.0.0.0               1 self              0
+  C(i) 10.0.13.0/24       0.0.0.0               1 self              0
+  R(n) 10.0.23.0/24       10.0.12.2             2 10.0.12.2         0 02:53
+
+.. opcmd:: show ip rip status
+
+  The command displays current RIP status. It includes RIP timer, filtering,
+  version, RIP enabled interface and RIP peer information.
+
+.. code-block:: none
+
+  Routing Protocol is "rip"
+    Sending updates every 30 seconds with +/-50%, next due in 11 seconds
+    Timeout after 180 seconds, garbage collect after 120 seconds
+    Outgoing update filter list for all interface is not set
+    Incoming update filter list for all interface is not set
+    Default redistribution metric is 1
+    Redistributing:
+    Default version control: send version 2, receive any version
+      Interface        Send  Recv   Key-chain
+      eth0             2     1 2
+      eth2             2     1 2
+    Routing for Networks:
+      10.0.12.0/24
+      eth0
+    Routing Information Sources:
+      Gateway          BadPackets BadRoutes  Distance Last Update
+      10.0.12.2                0         0       120   00:00:11
+    Distance: (default is 120)
+  
+
+Configuration Example
+---------------------
 
 Simple RIP configuration using 2 nodes and redistributing connected interfaces.
 

From 0f51282eb49743889eb372e78f6f397c59ede0b4 Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Wed, 13 Jan 2021 00:13:59 +0400
Subject: [PATCH 249/295] bfd: add command for isis

---
 docs/configuration/protocols/bfd.rst | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/docs/configuration/protocols/bfd.rst b/docs/configuration/protocols/bfd.rst
index 20ff3b8a..4812f930 100644
--- a/docs/configuration/protocols/bfd.rst
+++ b/docs/configuration/protocols/bfd.rst
@@ -61,17 +61,24 @@ Enable BFD in BGP
    Enable BFD on a BGP peer group
 
 
-
 Enable BFD in OSPF
 ------------------
 
-.. cfgcmd:: set interfaces ethernet <ethN> ip ospf bfd
+.. cfgcmd:: set interfaces ethernet <interface> ip ospf bfd
 
-   Enable BFD for ospf on a interface
+   Enable BFD for OSPF on a interface
 
-.. cfgcmd:: set interfaces ethernet <ethN> ipv6 ospfv3 bfd
+.. cfgcmd:: set interfaces ethernet <interface> ipv6 ospfv3 bfd
 
-   Enable BFD for ospfv3 on a interface
+   Enable BFD for OSPFv3 on a interface
+
+
+Enable BFD in ISIS
+------------------
+
+.. cfgcmd:: set protocols isis <name> interface <interface> bfd
+
+   Enable BFD for ISIS on a interface
 
 
 

From 3ab0c2e760941d910f82758f524b025bda6b5478 Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Wed, 13 Jan 2021 00:30:41 +0400
Subject: [PATCH 250/295] isis: add configuration commands and their
 explanations

---
 docs/configuration/protocols/isis.rst | 239 +++++++++++++++++++++++++-
 1 file changed, 233 insertions(+), 6 deletions(-)

diff --git a/docs/configuration/protocols/isis.rst b/docs/configuration/protocols/isis.rst
index 753637f9..71ddc856 100644
--- a/docs/configuration/protocols/isis.rst
+++ b/docs/configuration/protocols/isis.rst
@@ -7,12 +7,13 @@ IS-IS
 #####
 
 :abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state
-interior gateway routing protocol. Like OSPF, IS-IS runs the Dijkstra
-shortest-path first (SPF) algorithm to create a database of the network’s
-topology and, from that database, to determine the best (that is, shortest)
-path to a destination. The routers exchange topology information with their
-nearest neighbors. IS-IS runs directly on the data link layer (Layer 2).
-IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be
+interior gateway routing protocol which is described in ISO10589,
+:rfc:`1195`, :rfc:`5308`. Like OSPF, IS-IS runs the Dijkstra shortest-path
+first (SPF) algorithm to create a database of the network’s topology and,
+from that database, to determine the best (that is, shortest) path to a
+destination. The routers exchange topology information with their nearest
+neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS
+addresses are called :abbr:`NETs (Network Entity Titles)` and can be
 8 to 20 bytes long, but are generally 10 bytes long.
 
 For example :abbr:`NET (Network Entity Title)`
@@ -36,6 +37,232 @@ The IS-IS address consists of three parts:
   NET selector:
     ``00`` Must always be 00, to indicate "this system".
 
+
+General Configuration
+---------------------
+
+.. cfgcmd:: set protocols isis <name> net <network-entity-title>
+
+  This command enables the ISIS process by specifying the ISIS domain with
+  ‘name’. ISIS implementation does not yet support multiple ISIS processes
+  but you must specify the name of ISIS process. This commad also sets
+  network entity title (NET) provided in ISO format.
+
+.. cfgcmd:: set protocols isis <name> interface <interface>
+
+  This command activates ISIS adjacency on this interface. Note that the name
+  of ISIS instance must be the same as the one used to configure the ISIS
+  process.
+  
+.. cfgcmd:: set protocols isis <name> dynamic-hostname
+
+  This command enables support for dynamic hostname. Dynamic hostname mapping
+  determined as described in :rfc:`2763`, Dynamic Hostname Exchange Mechanism
+  for IS-IS.
+
+.. cfgcmd:: set protocols isis <name> level <level-1|level-1-2|level-2>
+
+  This command defines the ISIS router behavior:
+
+      **level-1** Act as a station router only.
+      **level-1-2** Act as both a station router and an area router.
+      **level-2-only** Act as an area router only.
+
+.. cfgcmd:: set protocols isis <name> lsp-mtu <size>
+
+  This command configures the maximum size of generated LSPs, in bytes. The
+  size range is 128 to 4352.
+
+.. cfgcmd:: set protocols isis <name> metric-style <narrow|transition|wide>
+
+  This command sets old-style (ISO 10589) or new-style packet formats:
+
+      **narrow** Use old style of TLVs with narrow metric.
+      **transition** Send and accept both styles of TLVs during transition.
+      **wide** Use new style of TLVs to carry wider metric.
+
+.. cfgcmd:: set protocols isis <name> purge-originator
+
+  This command enables :rfc:`6232` purge originator identification. Enable
+  purge originator identification (POI) by adding the type, length and value
+  (TLV) with the Intermediate System (IS) identification to the LSPs that do
+  not contain POI information. If an IS generates a purge, VyOS adds this TLV
+  with the system ID of the IS to the purge. 
+
+.. cfgcmd:: set protocols isis <name> set-attached-bit
+
+  This command sets ATT bit to 1 in Level1 LSPs. It is described in :rfc:`3787`.
+
+.. cfgcmd:: set protocols isis <name> set-overload-bit
+
+  This command sets overload bit to avoid any transit traffic through this
+  router. It is described in :rfc:`3787`.
+
+.. cfgcmd:: set protocols isis name default-information originate <ipv4|ipv6>
+  level-1
+
+  This command will generate a default-route in L1 database.
+  
+.. cfgcmd:: set protocols isis name default-information originate <ipv4|ipv6>
+  level-2
+
+  This command will generate a default-route in L2 database.
+
+
+Interfaces Configuration
+------------------------
+
+.. cfgcmd:: set protocols isis <name> interface <interface> circuit-type
+  <level-1|level-1-2|level-2-only>
+
+  This command specifies circuit type for interface:
+
+      **level-1** Level-1 only adjacencies are formed.
+      **level-1-2** Level-1-2 adjacencies are formed
+      **level-2-only** Level-2 only adjacencies are formed
+
+.. cfgcmd:: set protocols isis <name> interface <interface> hello-interval
+  <seconds>
+
+  This command sets hello interval in seconds on a given interface.
+  The range is 1 to 600.
+
+.. cfgcmd:: set protocols isis <name> interface <interface> hello-multiplier
+  <seconds>
+
+  This command sets multiplier for hello holding time on a given 
+  interface. The range is 2 to 100.
+
+.. cfgcmd:: set protocols isis <name> interface <interface> hello-padding
+
+  This command configures padding on hello packets to accommodate asymmetrical
+  maximum transfer units (MTUs) from different hosts as described in
+  :rfc:`3719`. This helps to prevent a premature adjacency Up state when one
+  routing device’s MTU does not meet the requirements to establish the
+  adjacency. 
+
+.. cfgcmd:: set protocols isis <name> interface <interface> metric <metric>
+
+  This command set default metric for circuit. The metric range is 1 to 
+  16777215 (Max value depend if metric support narrow or wide value).
+
+.. cfgcmd:: set protocols isis <name> interface <interface> network
+  point-to-point
+
+  This command specifies network type to ‘Point-to-Point’. The default network
+  type is broadcast.
+
+.. cfgcmd:: set protocols isis <name> interface <interface> passive
+
+  This command configures the passive mode for this interface.
+
+.. cfgcmd:: set protocols isis <name> interface <interface> password
+  plaintext-password <text>
+
+  This command configures the authentication password for the interface.
+
+.. cfgcmd:: set protocols isis <name> interface <interface> priority <number>
+
+  This command sets priority for the interface for
+  :abbr:`DIS (Designated Intermediate System)` election. The priority
+  range is 0 to 127.
+
+.. cfgcmd:: set protocols isis <name> interface <interface> psnp-interval
+  <number>
+
+  This command sets PSNP interval in seconds. The interval range is 0
+  to 127.
+
+.. cfgcmd:: set protocols isis <name> interface <interface>
+  three-way-handshake
+
+  This command enables :rfc:`5303` Three-Way Handshake for P2P adjacencies.
+  Three-Way Handshake is enabled by default.
+
+
+Redistribution Configuration
+----------------------------
+
+.. cfgcmd:: set protocols isis <name> redistribute ipv4 <route source> level-1
+
+  This command redistributes routing information from the given route source
+  into the ISIS database as Level-1. There are six modes available for route
+  source: bgp, connected, kernel, ospf, rip, static.
+
+.. cfgcmd:: set protocols isis <name> redistribute ipv4 <route source> level-2
+
+  This command redistributes routing information from the given route source
+  into the ISIS database as Level-2. There are six modes available for route
+  source: bgp, connected, kernel, ospf, rip, static.
+   
+.. cfgcmd:: set protocols isis <name> redistribute ipv4 <route source>
+  <level-1|level-2> metric <number>
+
+  This command specifies metric for redistributed routes from the given route
+  source. There are six modes available for route source: bgp, connected,
+  kernel, ospf, rip, static. The metric range is 1 to 16777215.
+
+.. cfgcmd:: set protocols isis <name> redistribute ipv4 <route source>
+  <level-1|level-2> route-map <name>
+
+  This command allows to use route map to filter redistributed routes from
+  the given route source. There are six modes available for route source:
+  bgp, connected, kernel, ospf, rip, static.
+
+
+Timers Configuration
+--------------------
+
+.. cfgcmd:: set protocols isis <name> lsp-gen-interval <seconds>
+
+  This command sets minimum interval in seconds between regenerating same
+  LSP. The interval range is 1 to 120.
+  
+.. cfgcmd:: set protocols isis <name> lsp-refresh-interval <seconds>
+
+  This command sets LSP refresh interval in seconds. IS-IS generates LSPs
+  when the state of a link changes. However, to ensure that routing
+  databases on all routers remain converged, LSPs in stable networks are
+  generated on a regular basis even though there has been no change to
+  the state of the links. The interval range is 1 to 65235. The default
+  value is 900 seconds.
+
+.. cfgcmd:: set protocols isis <name> max-lsp-lifetime <seconds>
+
+  This command sets LSP maximum LSP lifetime in seconds. The interval range
+  is 350 to 65535. LSPs remain in a database for 1200 seconds by default.
+  If they are not refreshed by that time, they are deleted. You can change
+  the LSP refresh interval or the LSP lifetime. The LSP refresh interval
+  should be less than the LSP lifetime or else LSPs will time out before
+  they are refreshed. 
+  
+.. cfgcmd:: set protocols isis <name> spf-interval <seconds>
+
+  This command sets minimum interval between consecutive SPF calculations in
+  seconds.The interval range is 1 to 120.
+
+.. cfgcmd:: set protocols isis <name> spf-delay-ietf holddown <milliseconds>
+
+.. cfgcmd:: set protocols isis <name> spf-delay-ietf init-delay 
+  <milliseconds>
+
+.. cfgcmd:: set protocols isis <name> spf-delay-ietf long-delay 
+  <milliseconds>
+
+.. cfgcmd:: set protocols isis <name> spf-delay-ietf short-delay 
+  <milliseconds>
+
+.. cfgcmd:: set protocols isis <name> spf-delay-ietf time-to-learn 
+  <milliseconds>
+
+  This commands specifies the Finite State Machine (FSM) intended to
+  control the timing of the execution of SPF calculations in response
+  to IGP events. The process described in :rfc:`8405`.
+
+
+Configuration Example
+---------------------
+
 Simple IS-IS configuration using 2 nodes and redistributing connected
 interfaces.
 

From f379d9196375cdb5543877af0a4b82e313c117bc Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 12 Jan 2021 21:46:22 +0100
Subject: [PATCH 251/295] disable empty pages, for the moment

---
 .../protocols/{igmp-proxy.rst => igmp-proxy.disable}     | 0
 docs/configuration/protocols/index.rst                   | 4 ----
 docs/configuration/protocols/{pim.rst => pim.disable}    | 0
 .../configuration/protocols/{ripng.rst => ripng.disable} | 0
 docs/configuration/protocols/{vrf.rst => vrf.disable}    | 0
 docs/configuration/service/index.rst                     | 2 --
 .../service/{pppoe-advert.rst => pppoe-advert.disable}   | 0
 .../service/{salt-minion.rst => salt-minion.disable}     | 0
 .../system/{acceleration.rst => acceleration.disable}    | 0
 .../{config-management.rst => config-management.disable} | 0
 .../system/{conntrack.rst => conntrack.disable}          | 0
 .../system/{domain-name.rst => domain-name.disable}      | 0
 .../system/{domain-search.rst => domain-search.disable}  | 0
 docs/configuration/system/index.rst                      | 9 ---------
 .../{name-servers-dhcp.rst => name-servers-dhcp.disable} | 0
 ...atic-host-mapping.rst => static-host-mapping.disable} | 0
 docs/configuration/system/{sysctl.rst => sysctl.disable} | 0
 ...ulatory-domain.rst => wifi-requlatory-domain.disable} | 0
 18 files changed, 15 deletions(-)
 rename docs/configuration/protocols/{igmp-proxy.rst => igmp-proxy.disable} (100%)
 rename docs/configuration/protocols/{pim.rst => pim.disable} (100%)
 rename docs/configuration/protocols/{ripng.rst => ripng.disable} (100%)
 rename docs/configuration/protocols/{vrf.rst => vrf.disable} (100%)
 rename docs/configuration/service/{pppoe-advert.rst => pppoe-advert.disable} (100%)
 rename docs/configuration/service/{salt-minion.rst => salt-minion.disable} (100%)
 rename docs/configuration/system/{acceleration.rst => acceleration.disable} (100%)
 rename docs/configuration/system/{config-management.rst => config-management.disable} (100%)
 rename docs/configuration/system/{conntrack.rst => conntrack.disable} (100%)
 rename docs/configuration/system/{domain-name.rst => domain-name.disable} (100%)
 rename docs/configuration/system/{domain-search.rst => domain-search.disable} (100%)
 rename docs/configuration/system/{name-servers-dhcp.rst => name-servers-dhcp.disable} (100%)
 rename docs/configuration/system/{static-host-mapping.rst => static-host-mapping.disable} (100%)
 rename docs/configuration/system/{sysctl.rst => sysctl.disable} (100%)
 rename docs/configuration/system/{wifi-requlatory-domain.rst => wifi-requlatory-domain.disable} (100%)

diff --git a/docs/configuration/protocols/igmp-proxy.rst b/docs/configuration/protocols/igmp-proxy.disable
similarity index 100%
rename from docs/configuration/protocols/igmp-proxy.rst
rename to docs/configuration/protocols/igmp-proxy.disable
diff --git a/docs/configuration/protocols/index.rst b/docs/configuration/protocols/index.rst
index eba56bf2..c302d6a9 100644
--- a/docs/configuration/protocols/index.rst
+++ b/docs/configuration/protocols/index.rst
@@ -10,13 +10,9 @@ Protocols
    bfd
    bgp
    igmp
-   igmp-proxy
    isis
    mpls
    ospf
-   pim
    rip
-   ripng
    rpki
    static
-   vrf
diff --git a/docs/configuration/protocols/pim.rst b/docs/configuration/protocols/pim.disable
similarity index 100%
rename from docs/configuration/protocols/pim.rst
rename to docs/configuration/protocols/pim.disable
diff --git a/docs/configuration/protocols/ripng.rst b/docs/configuration/protocols/ripng.disable
similarity index 100%
rename from docs/configuration/protocols/ripng.rst
rename to docs/configuration/protocols/ripng.disable
diff --git a/docs/configuration/protocols/vrf.rst b/docs/configuration/protocols/vrf.disable
similarity index 100%
rename from docs/configuration/protocols/vrf.rst
rename to docs/configuration/protocols/vrf.disable
diff --git a/docs/configuration/service/index.rst b/docs/configuration/service/index.rst
index e73f6dc2..fb194239 100644
--- a/docs/configuration/service/index.rst
+++ b/docs/configuration/service/index.rst
@@ -17,10 +17,8 @@ Service
    ipoe-server
    lldp
    mdns
-   pppoe-advert
    pppoe-server
    router-advert
-   salt-minion
    snmp
    ssh
    tftp-server
diff --git a/docs/configuration/service/pppoe-advert.rst b/docs/configuration/service/pppoe-advert.disable
similarity index 100%
rename from docs/configuration/service/pppoe-advert.rst
rename to docs/configuration/service/pppoe-advert.disable
diff --git a/docs/configuration/service/salt-minion.rst b/docs/configuration/service/salt-minion.disable
similarity index 100%
rename from docs/configuration/service/salt-minion.rst
rename to docs/configuration/service/salt-minion.disable
diff --git a/docs/configuration/system/acceleration.rst b/docs/configuration/system/acceleration.disable
similarity index 100%
rename from docs/configuration/system/acceleration.rst
rename to docs/configuration/system/acceleration.disable
diff --git a/docs/configuration/system/config-management.rst b/docs/configuration/system/config-management.disable
similarity index 100%
rename from docs/configuration/system/config-management.rst
rename to docs/configuration/system/config-management.disable
diff --git a/docs/configuration/system/conntrack.rst b/docs/configuration/system/conntrack.disable
similarity index 100%
rename from docs/configuration/system/conntrack.rst
rename to docs/configuration/system/conntrack.disable
diff --git a/docs/configuration/system/domain-name.rst b/docs/configuration/system/domain-name.disable
similarity index 100%
rename from docs/configuration/system/domain-name.rst
rename to docs/configuration/system/domain-name.disable
diff --git a/docs/configuration/system/domain-search.rst b/docs/configuration/system/domain-search.disable
similarity index 100%
rename from docs/configuration/system/domain-search.rst
rename to docs/configuration/system/domain-search.disable
diff --git a/docs/configuration/system/index.rst b/docs/configuration/system/index.rst
index 4bb16c42..2e428333 100644
--- a/docs/configuration/system/index.rst
+++ b/docs/configuration/system/index.rst
@@ -7,12 +7,7 @@ System
    :maxdepth: 1
    :includehidden:
 
-   acceleration
-   config-management
-   conntrack
    console
-   domain-name
-   domain-search
    flow-accounting
    host-name
    ip
@@ -20,16 +15,12 @@ System
    lcd
    login
    name-server
-   name-servers-dhcp
    ntp
    option
    proxy
-   static-host-mapping
-   sysctl
    syslog
    task-scheduler
    time-zone
-   wifi-requlatory-domain
 
 
 .. toctree::
diff --git a/docs/configuration/system/name-servers-dhcp.rst b/docs/configuration/system/name-servers-dhcp.disable
similarity index 100%
rename from docs/configuration/system/name-servers-dhcp.rst
rename to docs/configuration/system/name-servers-dhcp.disable
diff --git a/docs/configuration/system/static-host-mapping.rst b/docs/configuration/system/static-host-mapping.disable
similarity index 100%
rename from docs/configuration/system/static-host-mapping.rst
rename to docs/configuration/system/static-host-mapping.disable
diff --git a/docs/configuration/system/sysctl.rst b/docs/configuration/system/sysctl.disable
similarity index 100%
rename from docs/configuration/system/sysctl.rst
rename to docs/configuration/system/sysctl.disable
diff --git a/docs/configuration/system/wifi-requlatory-domain.rst b/docs/configuration/system/wifi-requlatory-domain.disable
similarity index 100%
rename from docs/configuration/system/wifi-requlatory-domain.rst
rename to docs/configuration/system/wifi-requlatory-domain.disable

From 16852e808e38f3f1cb4bcd8784748960702c6e66 Mon Sep 17 00:00:00 2001
From: maehdros <bruno@maehdros.com>
Date: Tue, 12 Jan 2021 21:58:28 +0100
Subject: [PATCH 252/295] BFD: Added explanation on the purpose

---
 docs/configuration/protocols/bfd.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docs/configuration/protocols/bfd.rst b/docs/configuration/protocols/bfd.rst
index 4812f930..8d19334c 100644
--- a/docs/configuration/protocols/bfd.rst
+++ b/docs/configuration/protocols/bfd.rst
@@ -9,6 +9,12 @@ BFD
 :abbr:`BFD (Bidirectional Forwarding Detection)` is described and extended by
 the following RFCs: :rfc:`5880`, :rfc:`5881` and :rfc:`5883`.
 
+In the age of very fast networks, a second of unreachability may equal millions of lost packets.
+The idea behind BFD is to detect very quickly when a peer is down and take action extremely fast. 
+
+BFD sends lots of small UDP packets very quickly to ensures that the peer is still alive.
+
+This allows avoiding the timers defined in BGP and OSPF protocol to expires.
 
 Configure BFD
 =============

From f428410ad04909ad98a3be475c234b0e48c5126b Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Wed, 13 Jan 2021 23:36:36 +0400
Subject: [PATCH 253/295] bgp: fix linter errors

---
 docs/configuration/protocols/bgp.rst | 213 ++++++++++++++++++++-------
 1 file changed, 160 insertions(+), 53 deletions(-)

diff --git a/docs/configuration/protocols/bgp.rst b/docs/configuration/protocols/bgp.rst
index b577e5b9..ae7eb795 100644
--- a/docs/configuration/protocols/bgp.rst
+++ b/docs/configuration/protocols/bgp.rst
@@ -231,7 +231,8 @@ Route Selection
    have a value of infinity. The default state, where the missing MED 
    attribute is considered to have a value of zero.
 
-.. cfgcmd:: set protocols bgp <asn> parameters default local-pref <local-pref value>
+.. cfgcmd:: set protocols bgp <asn> parameters default local-pref
+   <local-pref value>
 
    This command specifies the default local preference value. The local 
    preference range is 0 to 4294967295.
@@ -246,13 +247,15 @@ Route Selection
 Administrative Distance
 -----------------------
 
-.. cfgcmd:: set protocols bgp <asn> parameters distance global <external|internal|local> <distance>
+.. cfgcmd:: set protocols bgp <asn> parameters distance global
+   <external|internal|local> <distance>
 
    This command change distance value of BGP. The arguments are the distance 
    values for external routes, internal routes and local routes respectively.
    The distance range is 1 to 255.
 
-.. cfgcmd:: set protocols bgp <asn> parameters distance prefix <subnet> distance <distance>
+.. cfgcmd:: set protocols bgp <asn> parameters distance prefix <subnet> distance
+   <distance>
 
    This command sets the administrative distance for a particular route. The 
    distance range is 1 to 255.
@@ -263,34 +266,47 @@ Administrative Distance
 Network Advertisement
 ---------------------
 
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> network <prefix>
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   network <prefix>
 
    This command is used for advertising IPv4 or IPv6 networks.
    
-   .. note:: By default, the BGP prefix is advertised even if it's not present in
-      the routing table. This behaviour differs from the implementation of some vendors.
+   .. note:: By default, the BGP prefix is advertised even if it's not present 
+      in the routing table. This behaviour differs from the implementation of
+      some vendors.
    
-.. cfgcmd::  set protocols bgp <asn> parameters network-import-check
+.. cfgcmd:: set protocols bgp <asn> parameters network-import-check
 
-   This configuration modifies the behavior of the network statement.
-   If you have this configured the underlying network must exist in the 
-   routing table.
+   This configuration modifies the behavior of the network statement. If you 
+   have this configured the underlying network must exist in the routing table.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> default-originate [route-map <name>]
+
+   By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is
+   in routing table. When you want to announce default routes to the peer, use
+   this command. Using optional argument :cfgcmd:`route-map` you can inject the
+   default route to given neighbor only if the conditions in the route map are
+   met.
 
 Route Aggregation
 -----------------
 
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> aggregate-address <prefix>
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   aggregate-address <prefix>
 
    This command specifies an aggregate address. The router will also 
    announce longer-prefixes inside of the aggregate address.
 
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> aggregate-address <prefix> as-set
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   aggregate-address <prefix> as-set
 
    This command specifies an aggregate address with a mathematical set of 
    autonomous systems. This command summarizes the AS_PATH attributes of 
    all the individual routes. 
 
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> aggregate-address <prefix> summary-only
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   aggregate-address <prefix> summary-only
 
    This command specifies an aggregate address and provides that 
    longer-prefixes inside of the aggregate address are suppressed 
@@ -299,54 +315,64 @@ Route Aggregation
 Redistribution
 --------------
 
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute connected
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   redistribute connected
 
    Redistribute connected routes to BGP process.
 
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute kernel
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   redistribute kernel
 
    Redistribute kernel routes to BGP process.
 
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute ospf
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   redistribute ospf
 
    Redistribute OSPF routes to BGP process.
 
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute rip
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   redistribute rip
 
    Redistribute RIP routes to BGP process.
 
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute static
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   redistribute static
 
    Redistribute static routes to BGP process.
 
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute <route source> metric <number>
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   redistribute <route source> metric <number>
 
    This command specifies metric (MED) for redistributed routes. The 
    metric range is 0 to 4294967295.
 
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast> redistribute <route source> route-map <name>
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   redistribute <route source> route-map <name>
 
    This command allows to use route map to filter redistributed routes.
 
-Peers
------
+Peers Configuration
+-------------------
 
 Defining Peers
 ^^^^^^^^^^^^^^
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> remote-as <nasn>
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> remote-as 
+   <nasn>
 
    This command creates a new neighbor whose remote-as is NASN. The neighbor 
    address can be an IPv4 address or an IPv6 address or an interface to use 
    for the connection. The command it applicable for peer and peer group.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> remote-as internal
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> remote-as
+   internal
 
    Create a peer as you would when you specify an ASN, except that if the 
    peers ASN is different than mine as specified under the :cfgcmd:`protocols 
    bgp <asn>` command the connection will be denied.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> remote-as external
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> remote-as
+   external
 
    Create a peer as you would when you specify an ASN, except that if the 
    peers ASN is the same as mine as specified under the :cfgcmd:`protocols 
@@ -357,11 +383,13 @@ Defining Peers
    This command disable the peer or peer group. To reenable the peer use 
    the delete form of this command.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> description <text>
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> description
+   <text>
 
    Set description of the peer or peer group.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> update-source <address|interface>
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> update-source
+   <address|interface>
 
    Specify the IPv4 source address to use for the BGP session to this neighbour,
    may be specified as either an IPv4 address directly or as an interface name.
@@ -369,12 +397,14 @@ Defining Peers
 Capability Negotiation
 ^^^^^^^^^^^^^^^^^^^^^^
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> capability dynamic
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> capability
+   dynamic
 
    This command would allow the dynamic update of capabilities over an 
    established BGP session.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> capability extended-nexthop
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> capability
+   extended-nexthop
 
    Allow bgp to negotiate the extended-nexthop capability with it’s peer. 
    If you are peering over a IPv6 Link-Local address then this capability 
@@ -382,7 +412,8 @@ Capability Negotiation
    then turning on this command will allow BGP to install IPv4 routes with 
    IPv6 nexthops if you do not have IPv4 configured on interfaces.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> disable-capability-negotiation
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface>
+   disable-capability-negotiation
 
    Suppress sending Capability Negotiation as OPEN message optional 
    parameter to the peer. This command only affects the peer is 
@@ -394,20 +425,22 @@ Capability Negotiation
 
    You may prefer locally configured capabilities more than the negotiated 
    capabilities even though remote peer sends capabilities. If the peer is 
-   configured by :cfgcmd:`override-capability`, VyOS ignores received capabilities 
-   then override negotiated capabilities with configured values.
+   configured by :cfgcmd:`override-capability`, VyOS ignores received
+   capabilities then override negotiated capabilities with configured values.
 
    Additionally you should keep in mind that this feature fundamentally 
    disables the ability to use widely deployed BGP features. BGP unnumbered,
    hostname support, AS4, Addpath, Route Refresh, ORF, Dynamic Capabilities,
    and graceful restart.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> override-capability
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface>
+   override-capability
 
    This command allow override the result of Capability Negotiation with 
    local configuration. Ignore remote peer’s capability value.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> strict-capability-match
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface>
+   strict-capability-match
 
    This command forces strictly compare remote capabilities and local 
    capabilities. If capabilities are different, send Unsupported Capability
@@ -421,7 +454,8 @@ Capability Negotiation
 Peer Parameters
 ^^^^^^^^^^^^^^^
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> allowas-in number <number>
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> allowas-in number <number>
 
    This command accept incoming routes with AS path containing AS 
    number with the same value as the current system AS. This is 
@@ -434,7 +468,8 @@ Peer Parameters
    This command is only allowed for eBGP peers. It is not applicable 
    for peer groups.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> as-override
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> as-override
 
    This command override AS number of the originating router with 
    the local AS number.
@@ -447,23 +482,43 @@ Peer Parameters
 
    This command is only allowed for eBGP peers.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> attribute-unchanged <as-path|med|next-hop>
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> attribute-unchanged <as-path|med|next-hop>
 
    This command specifies attributes to be left unchanged for 
    advertisements sent to a peer or peer group.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> maximum-prefix <number>
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> distribute-list <export|import> <number>
+
+   This command applys the access list filters named in <number> to the
+   specified BGP neighbor to restrict the routing information that BGP learns
+   and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import`
+   specify the direction in which the prefix lists are applied.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> filter-list <export|import> <name>
+   
+   This command applys the AS path access list filters named in <name> to the
+   specified BGP neighbor to restrict the routing information that BGP learns
+   and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import`
+   specify the direction in which the prefix lists are applied.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> maximum-prefix <number>
 
    This command specifies a maximum number of prefixes we can receive 
    from a given peer. If this number is exceeded, the BGP session 
    will be destroyed. The number range is 1 to 4294967295.
    
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> nexthop-self
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> nexthop-self
 
    This command forces the BGP speaker to report itself as the 
    next hop for an advertised route it advertised to a neighbor.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> remove-private-as
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> remove-private-as
 
    This command removes the private ASN of routes that are advertised 
    to the configured peer. It removes only private ASNs on routes 
@@ -475,24 +530,45 @@ Peer Parameters
    If the AS-Path for the route has a private ASN between public 
    ASNs, it is assumed that this is a design choice, and the 
    private ASN is not removed.
+   
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> soft-reconfiguration inbound
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> weight <number>
+   Changes in BGP policies require the BGP session to be cleared. Clearing has a
+   large negative impact on network operations. Soft reconfiguration enables you
+   to generate inbound updates from a neighbor, change and activate BGP policies
+   without clearing the BGP session.
+   
+   This command specifies that route updates received from this neighbor will be
+   stored unmodified, regardless of the inbound policy. When inbound soft
+   reconfiguration is enabled, the stored updates are processed by the new
+   policy configuration to create new inbound updates.
+   
+   .. note:: Storage of route updates uses memory. If you enable soft
+      reconfiguration inbound for multiple neighbors, the amount of memory used
+      can become significant. 
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> weight <number>
 
    This command specifies a default weight value for the neighbor’s 
    routes. The number range is 1 to 65535.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> advertisement-interval <seconds>
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface>
+   advertisement-interval <seconds>
 
    This command specifies the minimum route advertisement interval for 
-   the peer. This number is between 0 and 600 seconds, with the default 
+   the peer. The interval value is 0 to 600 seconds, with the default 
    advertisement interval being 0.
    
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> disable-connected-check
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface>
+   disable-connected-check
 
    This command allows peerings between directly connected eBGP peers 
    using loopback addresses without adjusting the default TTL of 1.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> ebgp-multihop <number>
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> ebgp-multihop
+   <number>
 
    This command allows sessions to be established with eBGP neighbors 
    when they are multiple hops away. When the neighbor is not directly 
@@ -500,7 +576,8 @@ Peer Parameters
    The number of hops range is 1 to 255. This command is mutually 
    exclusive with :cfgcmd:`ttl-security hops`.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> local-as <asn> [no-prepend] [replace-as]
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> local-as <asn>
+   [no-prepend] [replace-as]
 
    Specify an alternate AS for this BGP process when interacting with 
    the specified peer or peer group. With no modifiers, the specified 
@@ -515,15 +592,15 @@ Peer Parameters
    local-as is prepended to the AS_PATH when transmitting local-route 
    updates to this peer.
 
-   Note that replace-as can only be specified if no-prepend is.
-   This command is only allowed for eBGP peers.
+   .. note:: This command is only allowed for eBGP peers.
 
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> passive
 
    Configures the BGP speaker so that it only accepts inbound connections 
    from, but does not initiate outbound connections to the peer or peer group.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> ttl-security hops <number>
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> ttl-security
+   hops <number>
 
    This command enforces Generalized TTL Security Mechanism (GTSM), 
    as specified in :rfc:`5082`. With this command, only neighbors 
@@ -543,10 +620,15 @@ are treated as belonging to a default peer group, and will share updates.
 
 .. cfgcmd:: set protocols bgp <asn> peer-group <name>
 
-   This command defines a new peer group. You can specify to the group 
-   the same parameters that you can specify for specific neighbors.
+   This command defines a new peer group. You can specify to the group the same
+   parameters that you can specify for specific neighbors. 
+   
+   .. note:: If you apply a parameter to an individual neighbor IP address, you
+      override the action defined for a peer group that includes that IP
+      address.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> peer-group <name>
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> peer-group
+   <name>
 
    This command bind specific peer to peer group with a given name.
 
@@ -597,6 +679,30 @@ Timers
    This command specifies keep-alive time in seconds. The timer 
    can range from 4 to 65535.The default value is 60 second.
 
+Route Reflector Configuration
+-----------------------------
+
+BGP routers connected inside the same AS through BGP belong to an internal BGP
+session, or IBGP. In order to prevent routing table loops, IBGP speaker does not
+advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism).
+As such, IBGP requires a full mesh of all peers. For large networks, this
+quickly becomes unscalable. Introducing route reflectors removes the need for
+the full-mesh. Route reflectors mechanism is described in :rfc:`4456` and
+updated by :rfc:`7606`.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address> address-family
+   <ipv4-unicast|ipv6-unicast> route-reflector-client
+
+   This command specifies the given neighbor as route reflector client.
+
+.. cfgcmd:: set protocols bgp <asn> parameters cluster-id <id>
+
+   This command specifies cluster ID which identifies a collection of route
+   reflectors and their clients, and is used by route reflectors to avoid
+   looping. By default cluster ID is set to the BGP router id value, but can be
+   set to an arbitrary 32-bit value. 
+
+
 Operational Mode Commands
 =========================
 
@@ -624,7 +730,8 @@ Show
 
 .. opcmd:: show <ip|ipv6> bgp <address|prefix>
 
-   This command displays information about the particular entry in the BGP routing table.
+   This command displays information about the particular entry in the BGP
+   routing table.
 
 .. code-block:: none
 

From 636dadd81729cad6bb50f2f89a97a4a70c51b4df Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Fri, 15 Jan 2021 23:13:27 +0400
Subject: [PATCH 254/295] isis: T3210: rename command to no-three-way-handshake

---
 docs/configuration/protocols/isis.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/configuration/protocols/isis.rst b/docs/configuration/protocols/isis.rst
index 71ddc856..05a851f1 100644
--- a/docs/configuration/protocols/isis.rst
+++ b/docs/configuration/protocols/isis.rst
@@ -174,10 +174,10 @@ Interfaces Configuration
   to 127.
 
 .. cfgcmd:: set protocols isis <name> interface <interface>
-  three-way-handshake
+  no-three-way-handshake
 
-  This command enables :rfc:`5303` Three-Way Handshake for P2P adjacencies.
-  Three-Way Handshake is enabled by default.
+  This command disables Three-Way Handshake for P2P adjacencies which
+  described in :rfc:`5303`. Three-Way Handshake is enabled by default.
 
 
 Redistribution Configuration

From 694628045ffc125deacd2d272c7d7f92aa95c9ce Mon Sep 17 00:00:00 2001
From: jack9603301 <jack9603301@163.com>
Date: Sat, 16 Jan 2021 18:03:15 +0800
Subject: [PATCH 255/295] bridge: Independent VLAN aware bridge document

---
 docs/configuration/interfaces/bridge.rst | 35 +++++++++++++++---------
 1 file changed, 22 insertions(+), 13 deletions(-)

diff --git a/docs/configuration/interfaces/bridge.rst b/docs/configuration/interfaces/bridge.rst
index c53d6f51..7f49f9a8 100644
--- a/docs/configuration/interfaces/bridge.rst
+++ b/docs/configuration/interfaces/bridge.rst
@@ -116,16 +116,22 @@ links providing fault tolerance if an active link fails.
 VLAN
 ====
 
-.. note:: It is not valid to use the `vif 1` option for VLAN aware bridges
-   because VLAN aware bridges assume that all unlabeled packets belong to 
-   the default VLAN 1 member and that the VLAN ID of the bridge's parent 
-   interface is always 1
+Enable VLAN-Aware Bridge
+------------------------
 
 .. cfgcmd:: set interfaces bridge <interface> enable-vlan
 
    To activate the VLAN aware bridge, you must activate this setting to use VLAN 
    settings for the bridge
 
+VLAN Options
+------------
+
+.. note:: It is not valid to use the `vif 1` option for VLAN aware bridges
+   because VLAN aware bridges assume that all unlabeled packets belong to 
+   the default VLAN 1 member and that the VLAN ID of the bridge's parent 
+   interface is always 1
+
 .. cmdinclude:: /_include/interface-vlan-8021q.txt
    :var0: bridge
    :var1: br0
@@ -170,9 +176,12 @@ Port Mirror (SPAN)
    :var1: br1
    :var2: eth3
 
-******************************
-Example: Create a basic bridge
-******************************
+********
+Examples
+********
+
+Create a basic bridge
+=====================
 
 Creating a bridge interface is very simple. In this example we will
 have:
@@ -205,9 +214,9 @@ This results in the active configuration:
     }
     stp
 
-*********************************
-Example: Using VLAN aware Bridge
-*********************************
+
+Using VLAN aware Bridge
+=======================
 
 An example of creating a VLAN-aware bridge is as follows:
 
@@ -246,9 +255,9 @@ This results in the active configuration:
         address 2001:db8::ffff/64
     }
 
-********************************************************************
-Example: Using the operation mode command to view Bridge Information
-********************************************************************
+
+Using the operation mode command to view Bridge Information
+===========================================================
 
 .. opcmd:: show bridge
 

From b6c5493342c7b2124cd754279eb8685b753bb629 Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Sun, 17 Jan 2021 01:45:07 +0400
Subject: [PATCH 256/295] bgp: change comand order, add route filterig

* bgp: change comand order, add route filterig

Placed upper more often used commands;
Add route filtering;
Add confederation commands;
Add route dampening.
---
 docs/configuration/protocols/bgp.rst | 633 +++++++++++++++++----------
 1 file changed, 405 insertions(+), 228 deletions(-)

diff --git a/docs/configuration/protocols/bgp.rst b/docs/configuration/protocols/bgp.rst
index ae7eb795..27858224 100644
--- a/docs/configuration/protocols/bgp.rst
+++ b/docs/configuration/protocols/bgp.rst
@@ -28,7 +28,9 @@ From :rfc:`1930`:
 Each AS has an identifying number associated with it called an :abbr:`ASN
 (Autonomous System Number)`. This is a two octet value ranging in value from 1
 to 65535. The AS numbers 64512 through 65535 are defined as private AS numbers.
-Private AS numbers must not be advertised on the global Internet.
+Private AS numbers must not be advertised on the global Internet. The 2-byte AS
+number range has been exhausted. 4-byte AS numbers are specified in
+ :rfc:`6793`, and provide a pool of 4294967296 AS numbers.
 
 The :abbr:`ASN (Autonomous System Number)` is one of the essential elements of
 BGP. BGP is a distance vector routing protocol, and the AS-Path framework
@@ -156,200 +158,11 @@ connection.
 BGP Router Configuration
 ========================
 
-ASN and Router ID
------------------
-
-.. cfgcmd:: set protocols bgp <asn>
-
-   First of all you must configure BGP router with the :abbr:`ASN (Autonomous
-   System Number)`. The AS number is an identifier for the autonomous system.
-   The BGP protocol uses the AS number for detecting whether the BGP connection
-   is internal or external.
-
-.. cfgcmd:: set protocols bgp <asn> parameters router-id
-
-   This command specifies the router-ID. If router ID is not specified it will
-   use the highest interface IP address.
-
-Route Selection
----------------
-
-.. cfgcmd:: set protocols bgp <asn> parameters always-compare-med
-
-   This command provides to compare the MED on routes, even when they were 
-   received from different neighbouring ASes. Setting this option makes the 
-   order of preference of routes more defined, and should eliminate MED 
-   induced oscillations.
-
-.. cfgcmd:: set protocols bgp <asn> parameters bestpath as-path confed
-
-   This command specifies that the length of confederation path sets and
-   sequences should be taken into account during the BGP best path
-   decision process.
-
-.. cfgcmd:: set protocols bgp <asn> parameters bestpath as-path multipath-relax
-
-   This command specifies that BGP decision process should consider paths
-   of equal AS_PATH length candidates for multipath computation. Without
-   the knob, the entire AS_PATH must match for multipath computation.
-
-.. cfgcmd:: set protocols bgp <asn> parameters bestpath as-path ignore
-
-   Ignore AS_PATH length when selecting a route
-
-.. cfgcmd:: set protocols bgp <asn> parameters bestpath compare-routerid
-
-   Ensure that when comparing routes where both are equal on most metrics, 
-   including local-pref, AS_PATH length, IGP cost, MED, that the tie is 
-   broken based on router-ID.
-
-   If this option is enabled, then the already-selected check, where 
-   already selected eBGP routes are preferred, is skipped.
-
-   If a route has an ORIGINATOR_ID attribute because it has been reflected, 
-   that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer 
-   the route was received from will be used.
-
-   The advantage of this is that the route-selection (at this point) will 
-   be more deterministic. The disadvantage is that a few or even one lowest-ID 
-   router may attract all traffic to otherwise-equal paths because of this 
-   check. It may increase the possibility of MED or IGP oscillation, unless 
-   other measures were taken to avoid these. The exact behaviour will be 
-   sensitive to the iBGP and reflection topology.
-
-.. cfgcmd:: set protocols bgp <asn> parameters bestpath med confed
-   
-   This command specifies that BGP considers the MED when comparing routes 
-   originated from different sub-ASs within the confederation to which this 
-   BGP speaker belongs. The default state, where the MED attribute is not 
-   considered.
-
-.. cfgcmd:: set protocols bgp <asn> parameters bestpath med missing-as-worst
-
-   This command specifies that a route with a MED is always considered to be 
-   better than a route without a MED by causing the missing MED attribute to 
-   have a value of infinity. The default state, where the missing MED 
-   attribute is considered to have a value of zero.
-
-.. cfgcmd:: set protocols bgp <asn> parameters default local-pref
-   <local-pref value>
-
-   This command specifies the default local preference value. The local 
-   preference range is 0 to 4294967295.
-   
-.. cfgcmd:: set protocols bgp <asn> parameters deterministic-med
-
-   This command provides to compare different MED values that advertised by 
-   neighbours in the same AS for routes selection. When this command is enabled, 
-   routes from the same autonomous system are grouped together, and the best 
-   entries of each group are compared.
-
-Administrative Distance
------------------------
-
-.. cfgcmd:: set protocols bgp <asn> parameters distance global
-   <external|internal|local> <distance>
-
-   This command change distance value of BGP. The arguments are the distance 
-   values for external routes, internal routes and local routes respectively.
-   The distance range is 1 to 255.
-
-.. cfgcmd:: set protocols bgp <asn> parameters distance prefix <subnet> distance
-   <distance>
-
-   This command sets the administrative distance for a particular route. The 
-   distance range is 1 to 255.
-   
-   .. note:: Routes with a distance of 255 are effectively disabled and not
-      installed into the kernel.
-
-Network Advertisement
----------------------
-
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
-   network <prefix>
-
-   This command is used for advertising IPv4 or IPv6 networks.
-   
-   .. note:: By default, the BGP prefix is advertised even if it's not present 
-      in the routing table. This behaviour differs from the implementation of
-      some vendors.
-   
-.. cfgcmd:: set protocols bgp <asn> parameters network-import-check
-
-   This configuration modifies the behavior of the network statement. If you 
-   have this configured the underlying network must exist in the routing table.
-
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
-   <ipv4-unicast|ipv6-unicast> default-originate [route-map <name>]
-
-   By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is
-   in routing table. When you want to announce default routes to the peer, use
-   this command. Using optional argument :cfgcmd:`route-map` you can inject the
-   default route to given neighbor only if the conditions in the route map are
-   met.
-
-Route Aggregation
------------------
-
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
-   aggregate-address <prefix>
-
-   This command specifies an aggregate address. The router will also 
-   announce longer-prefixes inside of the aggregate address.
-
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
-   aggregate-address <prefix> as-set
-
-   This command specifies an aggregate address with a mathematical set of 
-   autonomous systems. This command summarizes the AS_PATH attributes of 
-   all the individual routes. 
-
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
-   aggregate-address <prefix> summary-only
-
-   This command specifies an aggregate address and provides that 
-   longer-prefixes inside of the aggregate address are suppressed 
-   before sending BGP updates out to peers.
-
-Redistribution
---------------
-
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
-   redistribute connected
-
-   Redistribute connected routes to BGP process.
-
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
-   redistribute kernel
-
-   Redistribute kernel routes to BGP process.
-
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
-   redistribute ospf
-
-   Redistribute OSPF routes to BGP process.
-
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
-   redistribute rip
-
-   Redistribute RIP routes to BGP process.
-
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
-   redistribute static
-
-   Redistribute static routes to BGP process.
-
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
-   redistribute <route source> metric <number>
-
-   This command specifies metric (MED) for redistributed routes. The 
-   metric range is 0 to 4294967295.
-
-.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
-   redistribute <route source> route-map <name>
-
-   This command allows to use route map to filter redistributed routes.
+First of all you must configure BGP router with the :abbr:`ASN (Autonomous
+System Number)`. The AS number is an identifier for the autonomous system.
+The BGP protocol uses the AS number for detecting whether the BGP connection
+is internal or external. VyOS does not have a special command to start the BGP
+process. The BGP process starts when the first neighbor is configured.
 
 Peers Configuration
 -------------------
@@ -360,7 +173,7 @@ Defining Peers
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> remote-as 
    <nasn>
 
-   This command creates a new neighbor whose remote-as is NASN. The neighbor 
+   This command creates a new neighbor whose remote-as is <nasn>. The neighbor
    address can be an IPv4 address or an IPv6 address or an interface to use 
    for the connection. The command it applicable for peer and peer group.
 
@@ -368,7 +181,7 @@ Defining Peers
    internal
 
    Create a peer as you would when you specify an ASN, except that if the 
-   peers ASN is different than mine as specified under the :cfgcmd:`protocols 
+   peers ASN is different than mine as specified under the :cfgcmd:`protocols
    bgp <asn>` command the connection will be denied.
 
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> remote-as
@@ -391,9 +204,10 @@ Defining Peers
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> update-source
    <address|interface>
 
-   Specify the IPv4 source address to use for the BGP session to this neighbour,
+   Specify the IPv4 source address to use for the BGP session to this neighbor,
    may be specified as either an IPv4 address directly or as an interface name.
 
+
 Capability Negotiation
 ^^^^^^^^^^^^^^^^^^^^^^
 
@@ -451,6 +265,7 @@ Capability Negotiation
    Capability Negotiation. Please use :cfgcmd:`disable-capability-negotiation` 
    command to disable the feature.
 
+
 Peer Parameters
 ^^^^^^^^^^^^^^^
 
@@ -488,22 +303,6 @@ Peer Parameters
    This command specifies attributes to be left unchanged for 
    advertisements sent to a peer or peer group.
 
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
-   <ipv4-unicast|ipv6-unicast> distribute-list <export|import> <number>
-
-   This command applys the access list filters named in <number> to the
-   specified BGP neighbor to restrict the routing information that BGP learns
-   and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import`
-   specify the direction in which the prefix lists are applied.
-
-.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
-   <ipv4-unicast|ipv6-unicast> filter-list <export|import> <name>
-   
-   This command applys the AS path access list filters named in <name> to the
-   specified BGP neighbor to restrict the routing information that BGP learns
-   and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import`
-   specify the direction in which the prefix lists are applied.
-
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
    <ipv4-unicast|ipv6-unicast> maximum-prefix <number>
 
@@ -566,6 +365,12 @@ Peer Parameters
 
    This command allows peerings between directly connected eBGP peers 
    using loopback addresses without adjusting the default TTL of 1.
+   
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface>
+   disable-send-community <extended|standard>
+   
+   This command specifies that the community attribute should not be sent
+   in route updates to a peer. By default community attribute is sent.
 
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> ebgp-multihop
    <number>
@@ -598,6 +403,12 @@ Peer Parameters
 
    Configures the BGP speaker so that it only accepts inbound connections 
    from, but does not initiate outbound connections to the peer or peer group.
+   
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> password
+   <text>
+
+   This command specifies a MD5 password to be used with the tcp socket that
+   is being used to connect to the remote peer.
 
 .. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> ttl-security
    hops <number>
@@ -608,6 +419,7 @@ Peer Parameters
    become neighbors. The number of hops range is 1 to 254. This 
    command is mutually exclusive with :cfgcmd:`ebgp-multihop`.   
 
+
 Peer Groups
 ^^^^^^^^^^^
 
@@ -632,9 +444,100 @@ are treated as belonging to a default peer group, and will share updates.
 
    This command bind specific peer to peer group with a given name.
 
-General configuration
+
+Network Advertisement Configuration
+-----------------------------------
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   network <prefix>
+
+   This command is used for advertising IPv4 or IPv6 networks.
+   
+   .. note:: By default, the BGP prefix is advertised even if it's not present 
+      in the routing table. This behaviour differs from the implementation of
+      some vendors.
+   
+.. cfgcmd:: set protocols bgp <asn> parameters network-import-check
+
+   This configuration modifies the behavior of the network statement. If you 
+   have this configured the underlying network must exist in the routing table.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> default-originate [route-map <name>]
+
+   By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is
+   in routing table. When you want to announce default routes to the peer, use
+   this command. Using optional argument :cfgcmd:`route-map` you can inject the
+   default route to given neighbor only if the conditions in the route map are
+   met.
+
+
+Route Aggregation Configuration
+-------------------------------
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   aggregate-address <prefix>
+
+   This command specifies an aggregate address. The router will also 
+   announce longer-prefixes inside of the aggregate address.
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   aggregate-address <prefix> as-set
+
+   This command specifies an aggregate address with a mathematical set of 
+   autonomous systems. This command summarizes the AS_PATH attributes of 
+   all the individual routes. 
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   aggregate-address <prefix> summary-only
+
+   This command specifies an aggregate address and provides that 
+   longer-prefixes inside of the aggregate address are suppressed 
+   before sending BGP updates out to peers.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> unsuppress-map <name>
+   
+   This command applies route-map to selectively unsuppress prefixes
+   suppressed by summarisation.
+
+
+Redistribution Configuration
+----------------------------
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   redistribute <route source>
+
+   This command redistributes routing information from the given route source
+   to the BGP process. There are six modes available for route source: bgp,
+   connected, kernel, ospf, rip, static.
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   redistribute <route source> metric <number>
+
+   This command specifies metric (MED) for redistributed routes. The 
+   metric range is 0 to 4294967295. There are six modes available for 
+   route source: bgp, connected, kernel, ospf, rip, static.
+
+.. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
+   redistribute <route source> route-map <name>
+
+   This command allows to use route map to filter redistributed routes.
+   There are six modes available for route source: bgp, connected, kernel,
+   ospf, rip, static.
+
+
+General Configuration
 ---------------------
 
+Common parametrs
+^^^^^^^^^^^^^^^^
+
+.. cfgcmd:: set protocols bgp <asn> parameters router-id <id>
+
+   This command specifies the router-ID. If router ID is not specified it will
+   use the highest interface IP address.
+
 .. cfgcmd:: set protocols bgp <asn> maximum-paths <ebgp|ibgp> <number>
 
    This command defines the maximum number of parallel routes that 
@@ -657,38 +560,278 @@ General configuration
    Tis command disables route reflection between route reflector clients.
    By default, the clients of a route reflector are not required to be 
    fully meshed and the routes from a client are reflected to other clients. 
-   However, if the clients are fully meshed, route reflection is not required. 
-   In this case, use the :cfgcmd:`no-client-to-client-reflection` command 
+   However, if the clients are fully meshed, route reflection is not required.
+   In this case, use the :cfgcmd:`no-client-to-client-reflection` command
    to disable client-to-client reflection.
 
 .. cfgcmd:: set protocols bgp <asn> parameters no-fast-external-failover
    
    Disable immediate sesison reset if peer's connected link goes down.
 
+
+Administrative Distance
+^^^^^^^^^^^^^^^^^^^^^^^
+
+.. cfgcmd:: set protocols bgp <asn> parameters distance global
+   <external|internal|local> <distance>
+
+   This command change distance value of BGP. The arguments are the distance
+   values for external routes, internal routes and local routes respectively.
+   The distance range is 1 to 255.
+
+.. cfgcmd:: set protocols bgp <asn> parameters distance prefix <subnet>
+   distance <distance>
+
+   This command sets the administrative distance for a particular route. The
+   distance range is 1 to 255.
+   
+   .. note:: Routes with a distance of 255 are effectively disabled and not
+      installed into the kernel.
+
+
 Timers
 ^^^^^^
 
 .. cfgcmd:: set protocols bgp <asn> timers holdtime <seconds>
 
-   This command specifies hold-time in seconds. The timer can 
-   range from 4 to 65535.The default value is 180 second. If
-   you set value to 0 VyOS will not hold routes.
+   This command specifies hold-time in seconds. The timer range is
+   4 to 65535. The default value is 180 second. If you set value to 0
+   VyOS will not hold routes.
    
 .. cfgcmd:: set protocols bgp <asn> timers keepalive <seconds>
 
    This command specifies keep-alive time in seconds. The timer 
-   can range from 4 to 65535.The default value is 60 second.
+   can range from 4 to 65535. The default value is 60 second.
 
-Route Reflector Configuration
+
+Route Dampening
+^^^^^^^^^^^^^^^
+
+When a route fails, a routing update is sent to withdraw the route from the
+network's routing tables. When the route is re-enabled, the change in
+availability is also advertised. A route that continually fails and returns
+requires a great deal of network traffic to update the network about the
+route's status.
+
+Route dampening wich described in :rfc:`2439` enables you to identify routes
+that repeatedly fail and return. If route dampening is enabled, an unstable
+route accumulates penalties each time the route fails and returns. If the
+accumulated penalties exceed a threshold, the route is no longer advertised.
+This is route suppression. Routes that have been suppressed are re-entered
+into the routing table only when the amount of their penalty falls below a
+threshold.
+
+A penalty of 1000 is assessed each time the route fails. When the penalties
+reach a predefined threshold (suppress-value), the router stops advertising
+the route.
+
+Once a route is assessed a penalty, the penalty is decreased by half each time
+a predefined amount of time elapses (half-life-time). When the accumulated
+penalties fall below a predefined threshold (reuse-value), the route is
+unsuppressed and added back into the BGP routing table.
+
+No route is suppressed indefinitely. Maximum-suppress-time defines the maximum
+time a route can be suppressed before it is re-advertised. 
+
+.. cfgcmd:: set protocols bgp <asn> parameters dampening
+   half-life <minutes>
+
+   This command defines the amount of time in minutes after
+   which a penalty is reduced by half. The timer range is
+   10 to 45 minutes. 
+
+.. cfgcmd:: set protocols bgp <asn> parameters dampening
+   re-use <seconds>
+	
+   This command defines the accumulated penalty amount at which the
+   route is re-advertised. The penalty range is 1 to 20000.
+	
+.. cfgcmd:: set protocols bgp <asn> parameters dampening 
+   start-suppress-time <seconds>
+
+   This command defines the accumulated penalty amount at which the
+   route is suppressed. The penalty range is 1 to 20000.
+
+.. cfgcmd:: set protocols bgp <asn> parameters dampening 
+   max-suppress-time <seconds>
+
+   This command defines the maximum time in minutes that a route is
+   suppressed. The timer range is 1 to 255 minutes.
+
+
+Route Selection Configuration
 -----------------------------
 
+.. cfgcmd:: set protocols bgp <asn> parameters always-compare-med
+
+   This command provides to compare the MED on routes, even when they were 
+   received from different neighbouring ASes. Setting this option makes the 
+   order of preference of routes more defined, and should eliminate MED 
+   induced oscillations.
+
+.. cfgcmd:: set protocols bgp <asn> parameters bestpath as-path confed
+
+   This command specifies that the length of confederation path sets and
+   sequences should be taken into account during the BGP best path
+   decision process.
+
+.. cfgcmd:: set protocols bgp <asn> parameters bestpath as-path multipath-relax
+
+   This command specifies that BGP decision process should consider paths
+   of equal AS_PATH length candidates for multipath computation. Without
+   the knob, the entire AS_PATH must match for multipath computation.
+
+.. cfgcmd:: set protocols bgp <asn> parameters bestpath as-path ignore
+
+   Ignore AS_PATH length when selecting a route
+
+.. cfgcmd:: set protocols bgp <asn> parameters bestpath compare-routerid
+
+   Ensure that when comparing routes where both are equal on most metrics, 
+   including local-pref, AS_PATH length, IGP cost, MED, that the tie is 
+   broken based on router-ID.
+
+   If this option is enabled, then the already-selected check, where 
+   already selected eBGP routes are preferred, is skipped.
+
+   If a route has an ORIGINATOR_ID attribute because it has been reflected, 
+   that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer 
+   the route was received from will be used.
+
+   The advantage of this is that the route-selection (at this point) will 
+   be more deterministic. The disadvantage is that a few or even one lowest-ID
+   router may attract all traffic to otherwise-equal paths because of this 
+   check. It may increase the possibility of MED or IGP oscillation, unless 
+   other measures were taken to avoid these. The exact behaviour will be 
+   sensitive to the iBGP and reflection topology.
+
+.. cfgcmd:: set protocols bgp <asn> parameters bestpath med confed
+   
+   This command specifies that BGP considers the MED when comparing routes 
+   originated from different sub-ASs within the confederation to which this 
+   BGP speaker belongs. The default state, where the MED attribute is not 
+   considered.
+
+.. cfgcmd:: set protocols bgp <asn> parameters bestpath med missing-as-worst
+
+   This command specifies that a route with a MED is always considered to be 
+   better than a route without a MED by causing the missing MED attribute to 
+   have a value of infinity. The default state, where the missing MED 
+   attribute is considered to have a value of zero.
+
+.. cfgcmd:: set protocols bgp <asn> parameters default local-pref
+   <local-pref value>
+
+   This command specifies the default local preference value. The local 
+   preference range is 0 to 4294967295.
+   
+.. cfgcmd:: set protocols bgp <asn> parameters deterministic-med
+
+   This command provides to compare different MED values that advertised by 
+   neighbours in the same AS for routes selection. When this command is
+   enabled, routes from the same autonomous system are grouped together, and
+   the best entries of each group are compared.
+
+.. cfgcmd:: set protocols bgp <asn> address-family ipv4-unicast network
+   <prefix> backdoor
+
+   This command allows the router to prefer route to specified prefix learned
+   via IGP through backdoor link instead of a route to the same prefix learned
+   via EBGP.
+
+
+Route Filtering Configuration
+-----------------------------
+
+In order to control and modify routing information that is exchanged between
+peers you can use route-map, filter-list, prefix-list, distribute-list. 
+
+For inbound updates the order of preference is:
+
+  - route-map
+  - filter-list
+  - prefix-list, distribute-list
+
+For outbound updates the order of preference is:
+
+  - prefix-list, distribute-list
+  - filter-list
+  - route-map
+
+  .. note:: The attributes :cfgcmd:`prefix-list` and :cfgcmd:`distribute-list`
+     are mutually exclusive, and only one command (distribute-list or 
+     prefix-list) can be applied to each inbound or outbound direction for a 
+     particular neighbor.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> distribute-list <export|import> <number>
+
+   This command applys the access list filters named in <number> to the
+   specified BGP neighbor to restrict the routing information that BGP learns
+   and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import`
+   specify the direction in which the access list are applied.
+   
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> prefix-list <export|import> <name>
+
+   This command applys the prfefix list filters named in <name> to the
+   specified BGP neighbor to restrict the routing information that BGP learns
+   and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import`
+   specify the direction in which the prefix list are applied.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> route-map <export|import> <name>
+
+   This command applys the route map named in <name> to the specified BGP
+   neighbor to control and modify routing information that is exchanged
+   between peers. The arguments :cfgcmd:`export` and :cfgcmd:`import`
+   specify the direction in which the route map are applied.
+
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> filter-list <export|import> <name>
+   
+   This command applys the AS path access list filters named in <name> to the
+   specified BGP neighbor to restrict the routing information that BGP learns
+   and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import`
+   specify the direction in which the AS path access list are applied.
+   
+.. cfgcmd:: set protocols bgp <asn> neighbor <address|interface> address-family
+   <ipv4-unicast|ipv6-unicast> capability orf <receive|send>
+   
+   This command enables the ORF capability (described in :rfc:`5291`) on the
+   local router, and enables ORF capability advertisement to the specified BGP
+   peer. The :cfgcmd:`receive` keyword configures a router to advertise ORF
+   receive capabilities. The :cfgcmd:`send` keyword configures a router to
+   advertise ORF send capabilities. To advertise a filter from a sender, you
+   must create an IP prefix list for the specified BGP peer applied in inbound
+   derection.
+
+
+BGP Scaling Configuration
+-------------------------
+
 BGP routers connected inside the same AS through BGP belong to an internal BGP
-session, or IBGP. In order to prevent routing table loops, IBGP speaker does not
-advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism).
-As such, IBGP requires a full mesh of all peers. For large networks, this
-quickly becomes unscalable. Introducing route reflectors removes the need for
-the full-mesh. Route reflectors mechanism is described in :rfc:`4456` and
-updated by :rfc:`7606`.
+session, or IBGP. In order to prevent routing table loops, IBGP speaker does
+not advertise IBGP-learned routes to other IBGP speaker (Split Horizon
+mechanism). As such, IBGP requires a full mesh of all peers. For large
+networks, this quickly becomes unscalable.
+
+There are two ways that help us to mitigate the BGPs full-mesh requirement in
+a network:
+   
+   - Using BGP route-reflectors
+   - Using BGP confederation
+
+
+Route Reflector Configuration
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+Introducing route reflectors removes the need for the full-mesh. When you
+configure a route reflector you have to tell the router whether the other IBGP
+router is a client or non-client. A client is an IBGP router that the route
+reflector will “reflect” routes to, the non-client is just a regular IBGP
+neighbor. Route reflectors mechanism is described in :rfc:`4456` and updated
+by :rfc:`7606`.
 
 .. cfgcmd:: set protocols bgp <asn> neighbor <address> address-family
    <ipv4-unicast|ipv6-unicast> route-reflector-client
@@ -703,6 +846,30 @@ updated by :rfc:`7606`.
    set to an arbitrary 32-bit value. 
 
 
+Confederation Configuration
+^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+A BGP confederation divides our AS into sub-ASes to reduce the number of
+required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but
+between these sub-ASes we use something that looks like EBGP but behaves like
+IBGP (called confederation BGP). Confederation mechanism is described in
+:rfc:`5065`
+
+.. cfgcmd:: set protocols bgp <subasn> parameters confederation identifier
+   <asn>
+
+   This command specifies a BGP confederation identifier. <asn> is the number
+   of the autonomous system that internally includes multiple sub-autonomous
+   systems (a confederation). <subasn> is the number sub-autonomous system
+   inside <asn>.
+
+.. cfgcmd:: set protocols bgp <subasn> parameters confederation confederation
+   peers <nsubasn>
+
+   This command sets other confederations <nsubasn> as members of autonomous
+   system specified by :cfgcmd:`confederation identifier <asn>`.
+
+
 Operational Mode Commands
 =========================
 
@@ -764,6 +931,15 @@ Show
 
    This command displays BGP dampened routes.
 
+.. opcmd:: show ip bgp flap-statistics
+
+   This command displays information about flapping BGP routes.
+   
+.. opcmd:: show ip bgp filter-list <name>
+
+   This command displays BGP routes allowed by by the specified AS Path
+   access list.
+
 .. opcmd:: show <ip|ipv6> bgp neighbors <address> advertised-routes
 
    This command displays BGP routes advertised to a neighbor.
@@ -837,6 +1013,7 @@ Reset
    you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both 
    inbound and outbound soft reconfiguration are triggered.
 
+
 Configuration Examples
 ----------------------
 

From a8c4ab39697a57fcee661c7e0f6351bba5151f45 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 18 Jan 2021 20:13:01 +0100
Subject: [PATCH 257/295] Update vyos-1x submodule (#432)

Co-authored-by: rebortg <rebortg@users.noreply.github.com>
---
 docs/_include/vyos-1x | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
index 4fb6160f..c9e630b4 160000
--- a/docs/_include/vyos-1x
+++ b/docs/_include/vyos-1x
@@ -1 +1 @@
-Subproject commit 4fb6160fb72717ce65cc1dbd814b80a1d1a4e756
+Subproject commit c9e630b446f069b3a803c1e7c22e559797bce975

From 40996bae01a4b2c2070a3f76b2630f8e4dd25528 Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Tue, 19 Jan 2021 19:39:13 +0400
Subject: [PATCH 258/295] OSPF: added OSPFv3 commands and formated OSPFv2

Added OSPFv3 configuration and operation commands.
OSPFv2 formatted according to Style Guide.
added summarization commands for OSPFv2.
---
 docs/configuration/protocols/ospf.rst | 687 ++++++++++++++++++--------
 1 file changed, 471 insertions(+), 216 deletions(-)

diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
index 7d9950e6..7270febc 100644
--- a/docs/configuration/protocols/ospf.rst
+++ b/docs/configuration/protocols/ospf.rst
@@ -20,11 +20,8 @@ OSPFv2 (IPv4)
 General Configuration
 ---------------------
 
-.. cfgcmd:: set protocols ospf area <number>
-
-   This command is udes to enable the OSPF process. The area number can be 
-   specified in decimal notation in the range from 0 to 4294967295. Or it
-   can be specified in dotted decimal notation similar to ip address.
+VyOS does not have a special command to start the OSPF process. The OSPF process
+starts when the first ospf enabled interface is configured.
 
 .. cfgcmd:: set protocols ospf area <number> network <A.B.C.D/M>
 
@@ -32,40 +29,48 @@ General Configuration
    an address from defined range then the command enables OSPF on this 
    interface so router can provide network information to the other ospf 
    routers via this interface.
+   
+   This command is also used to enable the OSPF process. The area number can be 
+   specified in decimal notation in the range from 0 to 4294967295. Or it
+   can be specified in dotted decimal notation similar to ip address.
 
 .. cfgcmd:: set protocols ospf auto-cost reference-bandwidth <number>
 
-   This command sets the reference bandwidth for cost calculations, where 
-   bandwidth can be in range from 1 to 4294967, specified in Mbits/s. The 
-   default is 100Mbit/s (i.e. a link of bandwidth 100Mbit/s or higher will 
-   have a cost of 1. Cost of lower bandwidth links will be scaled with 
+   This command sets the reference bandwidth for cost calculations, where
+   bandwidth can be in range from 1 to 4294967, specified in Mbits/s. The
+   default is 100Mbit/s (i.e. a link of bandwidth 100Mbit/s or higher will
+   have a cost of 1. Cost of lower bandwidth links will be scaled with
    reference to this cost).
 
 .. cfgcmd:: set protocols ospf parameters router-id <rid>
 
    This command sets the router-ID of the OSPF process. The router-ID may be an
-   IP address of the router, but need not be – it can be any arbitrary 32bit number.
-   However it MUST be unique within the entire OSPF domain to the OSPF speaker – bad
-   things will happen if multiple OSPF speakers are configured with the same router-ID!
+   IP address of the router, but need not be – it can be any arbitrary 32bit
+   number. However it MUST be unique within the entire OSPF domain to the OSPF
+   speaker – bad things will happen if multiple OSPF speakers are configured
+   with the same router-ID!
 
 
 Optional Configuration
 ----------------------
 
-.. cfgcmd:: set protocols ospf default-information originate [always] [metric <number>] [metric-type <1|2>] [route-map <name>]
+.. cfgcmd:: set protocols ospf default-information originate [always]
+   [metric <number>] [metric-type <1|2>] [route-map <name>]
 
    Originate an AS-External (type-5) LSA describing a default route into all 
    external-routing capable areas, of the specified metric and metric type. 
-   If the :cfgcmd:`always` keyword is given then the default is always advertised, 
-   even when there is no default present in the routing table. The argument
-   :cfgcmd:`route-map` specifies to advertise the default route if the route map 
-   is satisfied.
+   If the :cfgcmd:`always` keyword is given then the default is always
+   advertised, even when there is no default present in the routing table.
+   The argument :cfgcmd:`route-map` specifies to advertise the default route
+   if the route map is satisfied.
 
 .. cfgcmd:: set protocols ospf distance global <distance>
 
-   This command change distance value of OSPF. The distance range is 1 to 255.
+   This command change distance value of OSPF globally.
+   The distance range is 1 to 255.
 
-.. cfgcmd:: set protocols ospf distance ospf <external|inter-area|intra-area> <distance>
+.. cfgcmd:: set protocols ospf distance ospf <external|inter-area|intra-area>
+   <distance>
 
    This command change distance value of OSPF. The arguments are the distance 
    values for external routes, inter-area routes and intra-area routes 
@@ -80,7 +85,8 @@ Optional Configuration
    :cfgcmd:`detail` argument, all changes in adjacency status are shown.
    Without :cfgcmd:`detail`, only changes to full or regressions are shown.
 
-.. cfgcmd:: set protocols ospf max-metric router-lsa <administrative|on-shutdown <seconds>|on-startup <seconds>>
+.. cfgcmd:: set protocols ospf max-metric router-lsa
+   <administrative|on-shutdown <seconds>|on-startup <seconds>>
 
    This enables :rfc:`3137` support, where the OSPF process describes its
    transit links in its router-LSA as having infinite distance so that other
@@ -94,65 +100,76 @@ Optional Configuration
    and/or for a period of seconds prior to shutdown with the
    :cfgcmd:`on-shutdown <seconds>` command. The time range is 5 to 86400.
    
-.. cfgcmd:: set protocols ospf parameters abr-type <cisco|ibm|shortcut|standard>
+.. cfgcmd:: set protocols ospf parameters abr-type
+   <cisco|ibm|shortcut|standard>
 
    This command selects ABR model. OSPF router supports four ABR models:
 
-   **cisco** – a router will be considered as ABR if it has several configured links to 
-   the networks in different areas one of which is a backbone area. Moreover, the link 
-   to the backbone area should be active (working).
-   **ibm** – identical to "cisco" model but in this case a backbone area link may not be active.
+   **cisco** – a router will be considered as ABR if it has several configured
+   links to the networks in different areas one of which is a backbone area.
+   Moreover, the link to the backbone area should be active (working).
+   **ibm** – identical to "cisco" model but in this case a backbone area link
+   may not be active.
    **standard** – router has several active links to different areas.
-   **shortcut** – identical to "standard" but in this model a router is allowed to use a 
-   connected areas topology without involving a backbone area for inter-area connections.
+   **shortcut** – identical to "standard" but in this model a router is
+   allowed to use a connected areas topology without involving a backbone
+   area for inter-area connections.
 
-   Detailed information about "cisco" and "ibm" models differences can be found in :rfc:`3509`. 
-   A "shortcut" model allows ABR to create routes between areas based on the topology of the 
-   areas connected to this router but not using a backbone area in case if non-backbone route 
-   will be cheaper. For more information about "shortcut" model, see :t:`ospf-shortcut-abr-02.txt`
+   Detailed information about "cisco" and "ibm" models differences can be
+   found in :rfc:`3509`. A "shortcut" model allows ABR to create routes
+   between areas based on the topology of the areas connected to this router
+   but not using a backbone area in case if non-backbone route will be
+   cheaper. For more information about "shortcut" model,
+   see :t:`ospf-shortcut-abr-02.txt`
 
 .. cfgcmd:: set protocols ospf parameters rfc1583-compatibility
 
-   :rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2 (changes)
-   in section 16.4.1 a change to the path preference algorithm that prevents possible 
-   routing loops that were possible in the old version of OSPFv2. More specifically it 
-   demands that inter-area paths and intra-area backbone path are now of equal preference 
-   but still both preferred to external paths.
+   :rfc:`2328`, the successor to :rfc:`1583`, suggests according to section
+   G.2 (changes) in section 16.4.1 a change to the path preference algorithm
+   that prevents possible routing loops that were possible in the old version
+   of OSPFv2. More specifically it demands that inter-area paths and
+   intra-area backbone path are now of equal preference but still both
+   preferred to external paths.
 
    This command should NOT be set normally.
 
 .. cfgcmd:: set protocols ospf passive-interface <interface>
 
-   This command specifies interface as passive. Passive interface advertises its address, 
-   but does not run the OSPF protocol (adjacencies are not formed and hello packets are 
-   not generated).
+   This command specifies interface as passive. Passive interface advertises
+   its address, but does not run the OSPF protocol (adjacencies are not formed
+   and hello packets are not generated).
 
 .. cfgcmd:: set protocols ospf passive-interface default
 
-   This command specifies all interfaces as passive by default. Because this command changes 
-   the configuration logic to a default passive; therefore, interfaces where router adjacencies
-   are expected need to be configured with the :cfgcmd:`passive-interface-exclude` command.
+   This command specifies all interfaces as passive by default. Because this
+   command changes the configuration logic to a default passive; therefore,
+   interfaces where router adjacencies are expected need to be configured
+   with the :cfgcmd:`passive-interface-exclude` command.
 
 .. cfgcmd:: set protocols ospf passive-interface-exclude <interface>
 
-   This command allows exclude interface from passive state. This command is used if the
-   command :cfgcmd:`passive-interface default` was configured.
+   This command allows exclude interface from passive state. This command is
+   used if the command :cfgcmd:`passive-interface default` was configured.
 
 .. cfgcmd:: set protocols ospf refresh timers <seconds>
 
-   The router automatically updates link-state information with its neighbors. Only an obsolete
-   information is updated which age has exceeded a specific threshold. This parameter changes
-   a threshold value, which by default is 1800 seconds (half an hour). The value is applied
-   to the whole OSPF router. The timer range is 10 to 1800.
+   The router automatically updates link-state information with its neighbors.
+   Only an obsolete information is updated which age has exceeded a specific
+   threshold. This parameter changes a threshold value, which by default is
+   1800 seconds (half an hour). The value is applied to the whole OSPF router.
+   The timer range is 10 to 1800.
 
-.. cfgcmd:: set protocols ospf timers throttle spf <delay|initial-holdtime|max-holdtime> <seconds>
+.. cfgcmd:: set protocols ospf timers throttle spf
+   <delay|initial-holdtime|max-holdtime> <seconds>
 
-   This command sets the initial delay, the initial-holdtime and the maximum-holdtime between
-   when SPF is calculated and the event which triggered the calculation. The times are specified
-   in milliseconds and must be in the range of 0 to 600000 milliseconds. :cfgcmd:`delay` sets
-   the initial SPF schedule delay in milliseconds. The default value is 200 ms.
-   :cfgcmd:`initial-holdtime` sets the minimum hold time between two consecutive SPF calculations.
-   The default value is 1000 ms. :cfgcmd:`max-holdtime` sets the maximum wait time between two
+   This command sets the initial delay, the initial-holdtime and the
+   maximum-holdtime between when SPF is calculated and the event which
+   triggered the calculation. The times are specified in milliseconds and must
+   be in the range of 0 to 600000 milliseconds. :cfgcmd:`delay` sets the
+   initial SPF schedule delay in milliseconds. The default value is 200 ms.
+   :cfgcmd:`initial-holdtime` sets the minimum hold time between two
+   consecutive SPF calculations. The default value is 1000 ms.
+   :cfgcmd:`max-holdtime` sets the maximum wait time between two
    consecutive SPF calculations. The default value is 10000 ms.
 
 
@@ -161,108 +178,147 @@ Areas Configuration
 
 .. cfgcmd:: set protocols ospf area <number> area-type stub
 
-   This command specifies the area to be a Stub Area. That is, an area where no router 
-   originates routes external to OSPF and hence an area where all external routes are 
-   via the ABR(s). Hence, ABRs for such an area do not need to pass AS-External LSAs 
-   (type-5) or ASBR-Summary LSAs (type-4) into the area. They need only pass 
-   Network-Summary (type-3) LSAs into such an area, along with a default-route summary.
+   This command specifies the area to be a Stub Area. That is, an area where
+   no router originates routes external to OSPF and hence an area where all
+   external routes are via the ABR(s). Hence, ABRs for such an area do not
+   need to pass AS-External LSAs (type-5) or ASBR-Summary LSAs (type-4) into
+   the area. They need only pass Network-Summary (type-3) LSAs into such an
+   area, along with a default-route summary.
 
 .. cfgcmd:: set protocols ospf area <number> area-type stub no-summary
 
-   This command specifies the area to be a Totally Stub Area. In addition to stub area
-   limitations this area type prevents an ABR from injecting Network-Summary (type-3)
-   LSAs into the specified stub area. Only default summary route is allowed.
+   This command specifies the area to be a Totally Stub Area. In addition to
+   stub area limitations this area type prevents an ABR from injecting
+   Network-Summary (type-3) LSAs into the specified stub area. Only default
+   summary route is allowed.
 
-.. cfgcmd:: set protocols ospf area <number> area-type stub default-cost <number>
+.. cfgcmd:: set protocols ospf area <number> area-type stub default-cost
+   <number>
 
-   This command sets the cost of default-summary LSAs announced to stubby areas.
-   The cost range is 0 to 16777215.
+   This command sets the cost of default-summary LSAs announced to stubby
+   areas. The cost range is 0 to 16777215.
 
 .. cfgcmd:: set protocols ospf area <number> area-type nssa
 
-   This command specifies the area to be a Not So Stubby Area. External routing information
-   is imported into an NSSA in Type-7 LSAs. Type-7 LSAs are similar to Type-5 AS-external
-   LSAs, except that they can only be flooded into the NSSA. In order to further propagate 
-   the NSSA external information, the Type-7 LSA must be translated to a Type-5 
-   AS-external-LSA by the NSSA ABR.
+   This command specifies the area to be a Not So Stubby Area. External
+   routing information is imported into an NSSA in Type-7 LSAs. Type-7 LSAs
+   are similar to Type-5 AS-external LSAs, except that they can only be
+   flooded into the NSSA. In order to further propagate the NSSA external
+   information, the Type-7 LSA must be translated to a Type-5 AS-external-LSA
+   by the NSSA ABR.
 
 .. cfgcmd:: set protocols ospf area <number> area-type nssa no-summary
 
-   This command specifies the area to be a NSSA Totally Stub Area. ABRs for such an area do
-   not need to pass Network-Summary (type-3) LSAs (except the default summary route),
-   ASBR-Summary LSAs (type-4) and AS-External LSAs (type-5) into the area. But Type-7 LSAs 
-   that convert to Type-5 at the NSSA ABR are allowed.
+   This command specifies the area to be a NSSA Totally Stub Area. ABRs for
+   such an area do not need to pass Network-Summary (type-3) LSAs (except the
+   default summary route), ASBR-Summary LSAs (type-4) and AS-External LSAs
+   (type-5) into the area. But Type-7 LSAs that convert to Type-5 at the NSSA
+   ABR are allowed.
 
-.. cfgcmd:: set protocols ospf area <number> area-type nssa default-cost <number>
+.. cfgcmd:: set protocols ospf area <number> area-type nssa default-cost
+   <number>
 
    This command sets the default cost of LSAs announced to NSSA areas.
    The cost range is 0 to 16777215.
    
-.. cfgcmd:: set protocols ospf area <number> area-type nssa translate <always|candidate|never>
+.. cfgcmd:: set protocols ospf area <number> area-type nssa translate
+   <always|candidate|never>
 
-   Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into 
-   Type-5 LSAs. When role is Always, Type-7 LSAs are translated into Type-5 LSAs regardless 
-   of the translator state of other NSSA border routers. When role is Candidate, this router 
-   participates in the translator election to determine if it will perform the translations 
-   duties. When role is Never, this router will never translate Type-7 LSAs into Type-5 LSAs.
+   Specifies whether this NSSA border router will unconditionally translate
+   Type-7 LSAs into Type-5 LSAs. When role is Always, Type-7 LSAs are
+   translated into Type-5 LSAs regardless of the translator state of other
+   NSSA border routers. When role is Candidate, this router participates in
+   the translator election to determine if it will perform the translations
+   duties. When role is Never, this router will never translate Type-7 LSAs
+   into Type-5 LSAs.
 
 .. cfgcmd:: set protocols ospf area <number> authentication plaintext-password
 
-   This command specifies that simple password authentication should be used for the given 
-   area. The password must also be configured on a per-interface basis.
+   This command specifies that simple password authentication should be used
+   for the given area. The password must also be configured on a per-interface
+   basis.
 
 .. cfgcmd:: set protocols ospf area <number> authentication md5
 
-   This command specify that OSPF packets must be authenticated with MD5 HMACs within the 
-   given area. Keying material must also be configured on a per-interface basis.
+   This command specify that OSPF packets must be authenticated with MD5 HMACs
+   within the given area. Keying material must also be configured on a 
+   per-interface basis.
+
+.. cfgcmd:: set protocols ospf area <number> range <A.B.C.D/M> [cost <number>]
+
+   This command summarizes intra area paths from specified area into one
+   summary-LSA (Type-3) announced to other areas. This command can be used
+   only in ABR and ONLY router-LSAs (Type-1) and network-LSAs (Type-2)
+   (i.e. LSAs with scope area) can be summarized. AS-external-LSAs (Type-5)
+   can’t be summarized - their scope is AS. The optional argument
+   :cfgcmd:`cost` specifies the aggregated link metric. The metric range is 0
+   to 16777215.
+
+.. cfgcmd:: set protocols ospf area <number> range <A.B.C.D/M> not-advertise
+
+   This command instead of summarizing intra area paths filter them - i.e.
+   intra area paths from this range are not advertised into other areas.
+   This command makes sense in ABR only.
+
+.. cfgcmd:: set protocols ospf area <number> range <A.B.C.D/M> substitute
+   <E.F.G.H/M>
+
+   One Type-3 summary-LSA with routing info <E.F.G.H/M> is announced into
+   backbone area if defined area contains at least one intra-area network
+   (i.e. described with router-LSA or network-LSA) from range <A.B.C.D/M>.
+   This command makes sense in ABR only.
 
 .. cfgcmd:: set protocols ospf area <number> shortcut <default|disable|enable>
 
-   This parameter allows to "shortcut" routes (non-backbone) for inter-area routes. There 
-   are three modes available for routes shortcutting:
+   This parameter allows to "shortcut" routes (non-backbone) for inter-area
+   routes. There are three modes available for routes shortcutting:
 
-   **default** –  this area will be used for shortcutting only if ABR does not have a link 
-   to the backbone area or this link was lost.
-   **enable** – the area will be used for shortcutting every time the route that goes through 
-   it is cheaper.
+   **default** –  this area will be used for shortcutting only if ABR does not
+   have a link to the backbone area or this link was lost.
+   **enable** – the area will be used for shortcutting every time the route
+   that goes through it is cheaper.
    **disable** – this area is never used by ABR for routes shortcutting.
    
 .. cfgcmd:: set protocols ospf area <number> virtual-link <A.B.C.D>
 
    Provides a backbone area coherence by virtual link establishment.
 
-   In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully 
-   connected. I.e. any backbone area router must have a route to any other backbone area 
-   router. Moreover, every ABR must have a link to backbone area. However, it is not always 
-   possible to have a physical link to a backbone area. In this case between two ABR (one 
-   of them has a link to the backbone area) in the area (not stub area) a virtual link is organized.
+   In general, OSPF protocol requires a backbone area (area 0) to be coherent
+   and fully connected. I.e. any backbone area router must have a route to any
+   other backbone area router. Moreover, every ABR must have a link to
+   backbone area. However, it is not always possible to have a physical link
+   to a backbone area. In this case between two ABR (one of them has a link to
+   the backbone area) in the area (not stub area) a virtual link is organized.
 
    <number> – area identifier through which a virtual link goes.
-   <A.B.C.D> – ABR router-id with which a virtual link is established. Virtual link must be 
-   configured on both routers.
+   <A.B.C.D> – ABR router-id with which a virtual link is established. Virtual
+   link must be configured on both routers.
 
-   Formally, a virtual link looks like a point-to-point network connecting two ABR from one 
-   area one of which physically connected to a backbone area. This pseudo-network is considered
-   to belong to a backbone area.
+   Formally, a virtual link looks like a point-to-point network connecting two
+   ABR from one area one of which physically connected to a backbone area.
+   This pseudo-network is considered to belong to a backbone area.
 
 
 Interfaces Configuration
 ------------------------
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf authentication plaintext-password <text>
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf authentication 
+   plaintext-password <text>
 
-   This command sets OSPF authentication key to a simple password. After setting, all OSPF 
-   packets are authenticated. Key has length up to 8 chars.
+   This command sets OSPF authentication key to a simple password. After
+   setting, all OSPF packets are authenticated. Key has length up to 8 chars.
 
-   Simple text password authentication is insecure and deprecated in favour of MD5 HMAC 
-   authentication.
+   Simple text password authentication is insecure and deprecated in favour of
+   MD5 HMAC authentication.
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf authentication md5 key-id <id> md5-key <text>
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf authentication md5
+   key-id <id> md5-key <text>
 
-   This command specifys that MD5 HMAC authentication must be used on this interface. It sets 
-   OSPF authentication key to a cryptographic password. Key-id identifies secret key used to 
-   create the message digest. This ID is part of the protocol and must be consistent across 
-   routers on a link. The key can be long up to 16 chars (larger strings will be truncated), 
+   This command specifys that MD5 HMAC authentication must be used on this
+   interface. It sets OSPF authentication key to a cryptographic password.
+   Key-id identifies secret key used to create the message digest. This ID
+   is part of the protocol and must be consistent across routers on a link.
+   The key can be long up to 16 chars (larger strings will be truncated), 
    and is associated with the given key-id.
 
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf bandwidth <number>
@@ -272,66 +328,73 @@ Interfaces Configuration
    
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf cost <number>
 
-   This command sets link cost for the specified interface. The cost value is set to
-   router-LSA’s metric field and used for SPF calculation. The cost range is 1 to 65535.
+   This command sets link cost for the specified interface. The cost value is
+   set to router-LSA’s metric field and used for SPF calculation. The cost
+   range is 1 to 65535.
 
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf dead-interval <number>
 
-   Set number of seconds for router Dead Interval timer value used for Wait Timer and 
-   Inactivity Timer. This value must be the same for all routers attached to a common 
-   network. The default value is 40 seconds. The interval range is 1 to 65535.
+   Set number of seconds for router Dead Interval timer value used for Wait
+   Timer and Inactivity Timer. This value must be the same for all routers
+   attached to a common network. The default value is 40 seconds. The
+   interval range is 1 to 65535.
 
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf hello-interval <number>
 
-   Set number of seconds for Hello Interval timer value. Setting this value, Hello 
-   packet will be sent every timer value seconds on the specified interface. This 
-   value must be the same for all routers attached to a common network. The default 
-   value is 10 seconds. The interval range is 1 to 65535.
+   Set number of seconds for Hello Interval timer value. Setting this value,
+   Hello packet will be sent every timer value seconds on the specified
+   interface. This value must be the same for all routers attached to a
+   common network. The default value is 10 seconds. The interval range is 1
+   to 65535.
 
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf mtu-ignore
 
-   This command disables check of the MTU value in the OSPF DBD packets. Thus, use 
-   of this command allows the OSPF adjacency to reach the FULL state even though 
-   there is an interface MTU mismatch between two OSPF routers.
+   This command disables check of the MTU value in the OSPF DBD packets. Thus,
+   use of this command allows the OSPF adjacency to reach the FULL state even
+   though there is an interface MTU mismatch between two OSPF routers.
    
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf network <type>
 
-   This command allows to specify the distribution type for the network connected 
-   to this interface:
+   This command allows to specify the distribution type for the network 
+   connected to this interface:
 
    **broadcast** – broadcast IP addresses distribution.
    **non-broadcast** – address distribution in NBMA networks topology.
-   **point-to-multipoint** – address distribution in point-to-multipoint networks.
+   **point-to-multipoint** – address distribution in point-to-multipoint
+   networks.
    **point-to-point** – address distribution in point-to-point networks.
 
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf priority <number>
 
-   This command sets Router Priority integer value. The router with the highest 
-   priority will be more eligible to become Designated Router. Setting the value 
-   to 0, makes the router ineligible to become Designated Router. The default value 
-   is 1. The interval range is 0 to 255.
+   This command sets Router Priority integer value. The router with the
+   highest priority will be more eligible to become Designated Router.
+   Setting the value to 0, makes the router ineligible to become
+   Designated Router. The default value is 1. The interval range is 0 to 255.
    
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf retransmit-interval <number>
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf retransmit-interval
+   <number>
 
-   This command sets number of seconds for RxmtInterval timer value. This value is used
-   when retransmitting Database Description and Link State Request packets if acknowledge
-   was not received. The default value is 5 seconds. The interval range is 3 to 65535.
+   This command sets number of seconds for RxmtInterval timer value. This
+   value is used when retransmitting Database Description and Link State
+   Request packets if acknowledge was not received. The default value is 5
+   seconds. The interval range is 3 to 65535.
    
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf transmit-delay <number>
 
-   This command sets number of seconds for InfTransDelay value. It allows to set and adjust
-   for each interface the delay interval before starting the synchronizing process of the
-   router's database with all neighbors. The default value is 1 seconds. The interval range
-   is 3 to 65535.
+   This command sets number of seconds for InfTransDelay value. It allows to
+   set and adjust for each interface the delay interval before starting the
+   synchronizing process of the router's database with all neighbors. The
+   default value is 1 seconds. The interval range is 3 to 65535.
 
 
 Manual Neighbor Configuration
 -----------------------------
 
-OSPF routing devices normally discover their neighbors dynamically by listening to the broadcast
-or multicast hello packets on the network. Because an NBMA network does not support broadcast (or
-multicast), the device cannot discover its neighbors dynamically, so you must configure all the
-neighbors statically.
+OSPF routing devices normally discover their neighbors dynamically by
+listening to the broadcast or multicast hello packets on the network.
+Because an NBMA network does not support broadcast (or multicast), the
+device cannot discover its neighbors dynamically, so you must configure all
+the neighbors statically.
 
 .. cfgcmd:: set protocols ospf neighbor <A.B.C.D>
 
@@ -339,39 +402,26 @@ neighbors statically.
 
 .. cfgcmd:: set protocols ospf neighbor <A.B.C.D> poll-interval <seconds>
 
-   This command specifies the length of time, in seconds, before the routing device sends hello
-   packets out of the interface before it establishes adjacency with a neighbor. The range is 1
-   to 65535 seconds. The default value is 60 seconds.
+   This command specifies the length of time, in seconds, before the routing
+   device sends hello packets out of the interface before it establishes
+   adjacency with a neighbor. The range is 1 to 65535 seconds. The default
+   value is 60 seconds.
    
 .. cfgcmd:: set protocols ospf neighbor <A.B.C.D> priority <number>
 
-   This command specifies the router priority value of the nonbroadcast neighbor associated with
-   the IP address specified. The default is 0. This keyword does not apply to point-to-multipoint
-   interfaces.
+   This command specifies the router priority value of the nonbroadcast
+   neighbor associated with the IP address specified. The default is 0.
+   This keyword does not apply to point-to-multipoint interfaces.
 
 
 Redistribution Configuration
 ----------------------------
 
-.. cfgcmd:: set protocols ospf redistribute bgp
+.. cfgcmd:: set protocols ospf redistribute <route source>
 
-   Redistribute BGP routes to OSPF process.
-
-.. cfgcmd:: set protocols ospf redistribute connected
-
-   Redistribute connected routes to OSPF process.
-
-.. cfgcmd:: set protocols ospf redistribute kernel
-
-   Redistribute kernel routes to OSPF process.
-
-.. cfgcmd:: set protocols ospf redistribute rip
-
-   Redistribute RIP routes to OSPF process.
-
-.. cfgcmd:: set protocols ospf redistribute static
-
-   Redistribute static routes to OSPF process.
+   This command redistributes routing information from the given route source
+   to the OSPF process. There are five modes available for route source: bgp,
+   connected, kernel, rip, static.
    
 .. cfgcmd:: set protocols ospf default-metric <number>
    
@@ -380,29 +430,33 @@ Redistribution Configuration
 
 .. cfgcmd:: set protocols ospf redistribute <route source> metric <number>
 
-   This command specifies metric for redistributed routes from given route source. There 
-   are five modes available for route source: bgp, connected, kernel, rip, static. The 
-   metric range is 1 to 16.
+   This command specifies metric for redistributed routes from given route
+   source. There are five modes available for route source: bgp, connected,
+   kernel, rip, static. The metric range is 1 to 16.
 
 .. cfgcmd:: set protocols ospf redistribute <route source> metric-type <1|2>
 
-   This command specifies metric type for redistributed routes. Difference between two metric
-   types that metric type 1 is a metric which is "commensurable" with inner OSPF links. When 
-   calculating a metric to the external destination, the full path metric is calculated as a 
-   metric sum path of a router which had advertised this link plus the link metric. Thus, a 
-   route with the least summary metric will be selected. If external link is advertised with 
-   metric type 2 the path is selected which lies through the router which advertised this link
-   with the least metric despite of the fact that internal path to this router is longer (with
-   more cost). However, if two routers advertised an external link and with metric type 2 the
-   preference is given to the path which lies through the router with a shorter internal path.
-   If two different routers advertised two links to the same external destimation but with
-   different metric type, metric type 1 is preferred. If type of a metric left undefined the
-   router will consider these external links to have a default metric type 2.
+   This command specifies metric type for redistributed routes. Difference
+   between two metric types that metric type 1 is a metric which is
+   "commensurable" with inner OSPF links. When calculating a metric to the
+   external destination, the full path metric is calculated as a metric sum
+   path of a router which had advertised this link plus the link metric.
+   Thus, a route with the least summary metric will be selected. If external
+   link is advertised with metric type 2 the path is selected which lies
+   through the router which advertised this link with the least metric
+   despite of the fact that internal path to this router is longer (with more
+   cost). However, if two routers advertised an external link and with metric
+   type 2 the preference is given to the path which lies through the router
+   with a shorter internal path. If two different routers advertised two
+   links to the same external destimation but with different metric type,
+   metric type 1 is preferred. If type of a metric left undefined the router
+   will consider these external links to have a default metric type 2.
 
 .. cfgcmd:: set protocols ospf redistribute <route source> route-map <name>
 
-   This command allows to use route map to filter redistributed routes from given route source.
-   There are five modes available for route source: bgp, connected, kernel, rip, static.
+   This command allows to use route map to filter redistributed routes from
+   given route source. There are five modes available for route source: bgp,
+   connected, kernel, rip, static.
 
 
 Operational Mode Commands
@@ -420,8 +474,8 @@ Operational Mode Commands
 
 .. opcmd:: show ip ospf neighbor detail
 
-   This command displays the neighbors information in a detailed form, not just
-   a summary table.
+   This command displays the neighbors information in a detailed form, not
+   just a summary table.
 
 .. code-block:: none
 
@@ -459,18 +513,18 @@ Operational Mode Commands
 
 .. opcmd:: show ip ospf neighbor <A.B.C.D>
 
-   This command displays the neighbors information in a detailed form for a neighbor
-   whose IP address is specified.
+   This command displays the neighbors information in a detailed form for a
+   neighbor whose IP address is specified.
 
 .. opcmd:: show ip ospf neighbor <intname>
 
    This command displays the neighbors status for a neighbor on the specified
    interface.
 
-.. opcmd:: show ip ospf interface [intname]
+.. opcmd:: show ip ospf interface [<intname>]
 
-   This command displays state and configuration of OSPF the specified interface,
-   or all interfaces if no interface is given.
+   This command displays state and configuration of OSPF the specified
+   interface, or all interfaces if no interface is given.
 
 .. code-block:: none
 
@@ -500,8 +554,8 @@ Operational Mode Commands
 
 .. opcmd:: show ip ospf route
 
-   This command displays the OSPF routing table, as determined by the most recent
-   SPF calculation.
+   This command displays the OSPF routing table, as determined by the most
+   recent SPF calculation.
 
 .. code-block:: none
 
@@ -527,23 +581,24 @@ Operational Mode Commands
 
 The table consists of following data:
 
-**OSPF network routing table** – includes a list of acquired routes for all 
-accessible networks (or aggregated area ranges) of OSPF system. "IA" flag means
-that route destination is in the area to which the router is not connected, i.e.
-it’s an inter-area path. In square brackets a summary metric for all links through
-which a path lies to this network is specified. "via" prefix defines a
-router-gateway, i.e. the first router on the way to the destination (next hop).
+**OSPF network routing table** – includes a list of acquired routes for all
+accessible networks (or aggregated area ranges) of OSPF system. "IA" flag
+means that route destination is in the area to which the router is not
+connected, i.e. it’s an inter-area path. In square brackets a summary metric
+for all links through which a path lies to this network is specified. "via"
+prefix defines a router-gateway, i.e. the first router on the way to the
+destination (next hop).
 **OSPF router routing table** – includes a list of acquired routes to all 
 accessible ABRs and ASBRs.
 **OSPF external routing table** – includes a list of acquired routes that are
 external to the OSPF process. "E" flag points to the external link metric type
-(E1 – metric type 1, E2 – metric type 2). External link metric is printed in the
-"<metric of the router which advertised the link>/<link metric>" format.
+(E1 – metric type 1, E2 – metric type 2). External link metric is printed in
+the "<metric of the router which advertised the link>/<link metric>" format.
 
 .. opcmd:: show ip ospf border-routers
 
-   This command displays a table of paths to area boundary and autonomous system
-   boundary routers.
+   This command displays a table of paths to area boundary and autonomous
+   system boundary routers.
    
 .. opcmd:: show ip ospf database
 
@@ -577,23 +632,26 @@ external to the OSPF process. "E" flag points to the external link metric type
    Link ID         ADV Router      Age  Seq#       CkSum  Route
    172.16.0.0      10.0.34.4       1063 0x80000001 0xc40d E2 172.16.0.0/24 [0x0]
    
-.. opcmd:: show ip ospf database <type> [A.B.C.D] [adv-router <A.B.C.D>|self-originate]
+.. opcmd:: show ip ospf database <type> [A.B.C.D]
+  [adv-router <A.B.C.D>|self-originate]
 
-   This command displays a database contents for a specific link advertisement type.
+   This command displays a database contents for a specific link advertisement
+   type.
    
    The type can be the following:
    asbr-summary, external, network, nssa-external, opaque-area, opaque-as,
    opaque-link, router, summary.
    
-   [A.B.C.D] – link-state-id. With this specified the command displays portion of
-   the network environment that is being described by the advertisement. The value
-   entered depends on the advertisement’s LS type. It must be entered in the form
-   of an IP address.
+   [A.B.C.D] – link-state-id. With this specified the command displays portion
+   of the network environment that is being described by the advertisement.
+   The value entered depends on the advertisement’s LS type. It must be
+   entered in the form of an IP address.
    
-   :cfgcmd:`adv-router <A.B.C.D>` – router id, which link advertisements need to be
-   reviewed.
+   :cfgcmd:`adv-router <A.B.C.D>` – router id, which link advertisements need
+   to be reviewed.
    
-   :cfgcmd:`self-originate` displays only self-originated LSAs from the local router. 
+   :cfgcmd:`self-originate` displays only self-originated LSAs from the local
+   router. 
 
 .. code-block:: none
 
@@ -666,6 +724,203 @@ address and the node 1 sending the default route:
 OSPFv3 (IPv6)
 #############
 
+General Configuration
+---------------------
+
+VyOS does not have a special command to start the OSPFv3 process. The OSPFv3
+process starts when the first ospf enabled interface is configured.
+
+.. cfgcmd:: set protocols ospfv3 area <number> interface <interface>
+
+   This command specifies the OSPFv3 enabled interface. This command is also
+   used to enable the OSPF process. The area number can be specified in
+   decimal notation in the range from 0 to 4294967295. Or it can be specified
+   in dotted decimal notation similar to ip address.
+
+.. cfgcmd:: set protocols ospfv3 parameters router-id <rid>
+
+   This command sets the router-ID of the OSPFv3 process. The router-ID may be
+   an IP address of the router, but need not be – it can be any arbitrary
+   32bit number. However it MUST be unique within the entire OSPFv3 domain to
+   the OSPFv3 speaker – bad things will happen if multiple OSPFv3 speakers are
+   configured with the same router-ID!
+
+
+Optional Configuration
+----------------------
+
+.. cfgcmd:: set protocols ospfv3 distance global <distance>
+
+   This command change distance value of OSPFv3 globally.
+   The distance range is 1 to 255.
+
+.. cfgcmd:: set protocols ospfv3 distance ospfv3 
+   <external|inter-area|intra-area> <distance>
+
+   This command change distance value of OSPFv3. The arguments are the
+   distance values for external routes, inter-area routes and intra-area
+   routes respectively. The distance range is 1 to 255.
+
+
+Areas Configuration
+-------------------
+
+.. cfgcmd:: set protocols ospfv3 area <number> range <prefix>
+
+   This command summarizes intra area paths from specified area into one
+   Type-3 Inter-Area Prefix LSA announced to other areas. This command can be
+   used only in ABR.
+
+.. cfgcmd:: set protocols ospfv3 area <number> range <prefix> not-advertise
+
+   This command instead of summarizing intra area paths filter them - i.e.
+   intra area paths from this range are not advertised into other areas. This
+   command makes sense in ABR only.
+
+
+Interfaces Configuration
+------------------------
+
+.. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 cost <number>
+
+   This command sets link cost for the specified interface. The cost value is
+   set to router-LSA’s metric field and used for SPF calculation. The cost
+   range is 1 to 65535.
+
+.. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 dead-interval
+   <number>
+
+   Set number of seconds for router Dead Interval timer value used for Wait
+   Timer and Inactivity Timer. This value must be the same for all routers
+   attached to a common network. The default value is 40 seconds. The
+   interval range is 1 to 65535.
+
+.. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 hello-interval
+   <number>
+
+   Set number of seconds for Hello Interval timer value. Setting this value,
+   Hello packet will be sent every timer value seconds on the specified
+   interface. This value must be the same for all routers attached to a
+   common network. The default value is 10 seconds. The interval range is 1
+   to 65535.
+
+.. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 mtu-ignore
+
+   This command disables check of the MTU value in the OSPF DBD packets.
+   Thus, use of this command allows the OSPF adjacency to reach the FULL
+   state even though there is an interface MTU mismatch between two OSPF
+   routers.
+   
+.. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 network <type>
+
+   This command allows to specify the distribution type for the network
+   connected to this interface:
+
+   **broadcast** – broadcast IP addresses distribution.
+   **point-to-point** – address distribution in point-to-point networks.
+
+.. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 priority <number>
+
+   This command sets Router Priority integer value. The router with the
+   highest priority will be more eligible to become Designated Router.
+   Setting the value to 0, makes the router ineligible to become Designated
+   Router. The default value is 1. The interval range is 0 to 255.
+   
+.. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 passive
+
+   This command specifies interface as passive. Passive interface advertises
+   its address, but does not run the OSPF protocol (adjacencies are not formed
+   and hello packets are not generated).
+
+.. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 retransmit-interval
+   <number>
+
+   This command sets number of seconds for RxmtInterval timer value. This
+   value is used when retransmitting Database Description and Link State
+   Request packets if acknowledge was not received. The default value is 5
+   seconds. The interval range is 3 to 65535.
+   
+.. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 transmit-delay
+   <number>
+
+   This command sets number of seconds for InfTransDelay value. It allows to
+   set and adjust for each interface the delay interval before starting the
+   synchronizing process of the router's database with all neighbors. The
+   default value is 1 seconds. The interval range is 3 to 65535.
+
+
+Redistribution Configuration
+----------------------------
+
+.. cfgcmd:: set protocols ospfv3 redistribute <route source>
+
+   This command redistributes routing information from the given route source
+   to the OSPFv3 process. There are five modes available for route source:
+   bgp, connected, kernel, ripng, static.
+
+.. cfgcmd:: set protocols ospf redistribute <route source> route-map <name>
+
+   This command allows to use route map to filter redistributed routes from
+   given route source. There are five modes available for route source: bgp,
+   connected, kernel, ripng, static.
+
+
+Operational Mode Commands
+-------------------------
+
+.. opcmd:: show ipv6 ospfv3 neighbor
+
+   This command displays the neighbors status.
+
+.. opcmd:: show ipv6 ospfv3 neighbor detail
+
+   This command displays the neighbors information in a detailed form, not
+   just a summary table.
+
+.. opcmd:: show ipv6 ospfv3 neighbor <A.B.C.D>
+
+   This command displays the neighbors information in a detailed form for
+   a neighbor whose IP address is specified.
+
+.. opcmd:: show ipv6 ospfv3 neighbor <intname>
+
+   This command displays the neighbors status for a neighbor on the specified
+   interface.
+
+.. opcmd:: show ipv6 ospfv3 interface [prefix]|[<intname> [prefix]]
+
+   This command displays state and configuration of OSPF the specified
+   interface, or all interfaces if no interface is given. Whith the argument
+   :cfgcmd:`prefix` this command shows connected prefixes to advertise.
+   
+.. opcmd:: show ipv6 ospfv3 route
+
+   This command displays the OSPF routing table, as determined by the most
+   recent SPF calculation.
+
+.. opcmd:: show ipv6 ospfv3 border-routers
+
+   This command displays a table of paths to area boundary and autonomous
+   system boundary routers.
+   
+.. opcmd:: show ipv6 ospfv3 database
+
+   This command displays a summary table with a database contents (LSA).
+
+.. opcmd:: show ipv6 ospfv3 database <type> [A.B.C.D]
+   [adv-router <A.B.C.D>|self-originate]
+
+   This command displays a database contents for a specific link
+   advertisement type.
+
+.. opcmd:: show ipv6 ospfv3 redistribute
+
+   This command displays external information redistributed into OSPFv3
+
+
+Configuration Example
+---------------------
+
 A typical configuration using 2 nodes.
 
 **Node 1:**
@@ -692,9 +947,9 @@ A typical configuration using 2 nodes.
 
   show ipv6 ospfv3 redistribute
 
-.. note:: You cannot easily redistribute IPv6 routes via OSPFv3 on a WireGuard
-   interface link. This requires you to configure link-local addresses manually
-   on the WireGuard interfaces, see :vytask:`T1483`.
+.. note:: You cannot easily redistribute IPv6 routes via OSPFv3 on a 
+   WireGuard interface link. This requires you to configure link-local
+   addresses manually on the WireGuard interfaces, see :vytask:`T1483`.
 
 Example configuration for WireGuard interfaces:
 
@@ -739,4 +994,4 @@ Example configuration for WireGuard interfaces:
   vyos@ospf02# run sh ipv6 ospfv3 neighbor
   Neighbor ID     Pri    DeadTime    State/IfState         Duration I/F[State]
   192.168.0.1       1    00:00:39     Full/PointToPoint    00:19:44 wg01[PointToPoint]
-
+  

From 01b935d0461fc461f4070c805d0cde7ca8a5cba4 Mon Sep 17 00:00:00 2001
From: erkin <e.altunbas@vyos.io>
Date: Sat, 23 Jan 2021 14:49:32 +0300
Subject: [PATCH 259/295] Fix typos in README

---
 README.md | 32 ++++++++++++++++----------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/README.md b/README.md
index bd96d7cd..15059831 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-Starting with VyOS 1.2 (`crux`) documentation will be migrated from the old wiki
+Starting with VyOS 1.2 (`crux`) documentation is being migrated from the old wiki
 to ReadTheDocs. Documentation can be accessed via the following URL:
 
 * https://docs.vyos.io
@@ -9,9 +9,9 @@ to ReadTheDocs. Documentation can be accessed via the following URL:
 
 ## Native
 
-To build the manual run the following commands inside the `docs` folder:
+To build the manual, run the following commands inside the `docs` folder:
 
-* `make html` for a HTML manual
+* `make html` for an HTML manual
 * `make latexpdf` for a LaTeX rendered PDF
 
 Required Debian Packages:
@@ -22,28 +22,28 @@ Required Debian Packages:
 * `sphinx`
 
 ### sphinx
-Debian, requires some extra steps for 
+Debian requires some extra steps for
 installing `sphinx`, `sphinx-autobuild` and `sphinx-rtd-theme` packages:
 
-First ensure that phython2 & phython3 are installed and phython3 is the default:
+First ensure that Python 2 & Python 3 are installed and Python 3 is the default:
 ```bash
 python --version
 ```
 
-Alternatively, to make python3 the default, revise the following line to
-point to the relevant 3.x version of the binary on your system:
+Alternatively, to make Python the default, revise the following line to
+point at the relevant 3.x version of the binary on your system:
 
 ```bash
 sudo update-alternatives --install /usr/bin/python python /usr/bin/python3 0
 ```
 
-Then follow these steps to install sphinx group of packages: 
+Then install the sphinx group of packages:
 ```bash
 sudo apt-get install python3-sphinx
 ```
 
-Although mostly everything uses phython3, But to install this specific 
-package, make sure that pip points to the python2 version of the package manager:
+Although almost everything uses Python 3, in order to install this specific
+package, make sure that pip points at the Python 2 version of the package manager:
 
 ```bash
 python --version
@@ -56,29 +56,29 @@ sudo pip install sphinx-rtd-theme
 ```
 
 
-Do the following to  build the html and start a webeserver:
+Do the following to build the HTML and start a webserver:
 * Run `make livehtml` inside the `docs` folder
 
 Then, to view the live output:
 * Browse to http://localhost:8000
-Note: The changes you save to the sources are represented in the live HTML outout 
+Note: The changes you save to the sources are represented in the live HTML output
 automatically (and almost instantly) without the need to rebuild or refresh manually.
 
 ## Docker
 
-Using our [Dockerfile](docker/Dockerfile) you create your own Docker container
+Using our [Dockerfile](docker/Dockerfile) you can create your own Docker container
 that is used to build a VyOS documentation.
 
 ## Setup
 
-You can either build the container on your own or directly fetch it prebuild
+You can either build the container on your own or directly fetch it prebuilt
 from Dockerhub. If you want to build it for yourself, use the following command.
 
 ```bash
 $ docker build -t vyos/vyos-documentation docker
 ```
 
-### Build documentation
+### Building documentation
 
 If the `vyos/vyos-documentation` container could not be found locally it will be
 automatically fetched from Dockerhub.
@@ -103,7 +103,7 @@ $ docker run --rm -it -v "$(pwd)":/vyos -w /vyos/docs \
   -e GOSU_UID=$(id -u) -e GOSU_GID=$(id -g) vyos/vyos-documentation vale .
 ```
 
-to test a specific file e.g. `clustering.rst`
+to test a specific file (e.g. `clustering.rst`)
 
 ```bash
 $ docker run --rm -it -v "$(pwd)":/vyos -w /vyos/docs -e GOSU_UID=$(id -u) \

From 981cf62960fdc0471b0226bf6fe113d9cc9986ed Mon Sep 17 00:00:00 2001
From: erkin <e.altunbas@vyos.io>
Date: Sat, 23 Jan 2021 14:58:47 +0300
Subject: [PATCH 260/295] docs: Add contribution guidelines

---
 docs/contributing/documentation.rst | 39 +++++++++++++++++++++++++++++
 docs/contributing/index.rst         |  3 ++-
 2 files changed, 41 insertions(+), 1 deletion(-)
 create mode 100644 docs/contributing/documentation.rst

diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
new file mode 100644
index 00000000..71495f4e
--- /dev/null
+++ b/docs/contributing/documentation.rst
@@ -0,0 +1,39 @@
+.. _documentation:
+
+Documentation
+-------------
+
+VyOS documentation is written in reStructuredText and generated to Read the Docs
+pages with Sphinx, as per the Python tradition, as well as PDF files for offline
+use through LaTeX.
+
+Guidelines
+^^^^^^^^^^
+
+There are a few small things to keep in mind when contributing to the
+documentation, for the sake of consistency and readability. When in doubt,
+follow the style of existing documentation.
+
+Remember that the reStructuredText files aren't exclusively for generating
+HTML and PDF. They should be human-readable and easily perused from a console.
+
+- Use American English at all times. A spell checker can be helpful for this.
+- Don't forget to update `index.rst` when adding a new node.
+- Try not to exceed 80 characters per line, but don't break URLs over this.
+- Properly quote commands, filenames and brief code snippets with backticks.
+- Use literal blocks for longer snippets.
+- Leave a newline before and after a header.
+- Indent with two spaces.
+
+Building
+^^^^^^^^
+
+The source is kept in the Git repository
+https://github.com/vyos/vyos-documentation
+
+You can follow the instructions in the README to build and test your changes.
+
+You can either install Sphinx (and TeX Live for PDF output) and build the
+documentation locally, or use the `Dockerfile`_ to build it in a container.
+
+.. _Dockerfile: https://github.com/vyos/vyos-documentation/blob/master/docker/Dockerfile
diff --git a/docs/contributing/index.rst b/docs/contributing/index.rst
index 2ecbcb5f..481c6da8 100644
--- a/docs/contributing/index.rst
+++ b/docs/contributing/index.rst
@@ -7,5 +7,6 @@ Contributing
 
    build-vyos
    development
+   documentation
    issues-features
-   upstream-packages
\ No newline at end of file
+   upstream-packages

From 79435c3b3c030f57fa0741c6deb67ffaa3819a44 Mon Sep 17 00:00:00 2001
From: erkin <e.altunbas@vyos.io>
Date: Sat, 23 Jan 2021 15:11:15 +0300
Subject: [PATCH 261/295] docs: Refer to the larger set of documentation
 guidelines

---
 docs/contributing/documentation.rst | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index 71495f4e..dd6680a9 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -10,12 +10,13 @@ use through LaTeX.
 Guidelines
 ^^^^^^^^^^
 
-There are a few small things to keep in mind when contributing to the
-documentation, for the sake of consistency and readability. When in doubt,
-follow the style of existing documentation.
+There are a few things to keep in mind when contributing to the
+documentation, for the sake of consistency and readability.
 
-Remember that the reStructuredText files aren't exclusively for generating
-HTML and PDF. They should be human-readable and easily perused from a console.
+Take a look at the `Documentation`_ page for an intricate explanation
+of the documentation process.
+
+The following is a quick summary of the rules:
 
 - Use American English at all times. A spell checker can be helpful for this.
 - Don't forget to update `index.rst` when adding a new node.
@@ -24,6 +25,11 @@ HTML and PDF. They should be human-readable and easily perused from a console.
 - Use literal blocks for longer snippets.
 - Leave a newline before and after a header.
 - Indent with two spaces.
+- When in doubt, follow the style of existing documentation.
+
+And finally, remember that the reStructuredText files aren't
+exclusively for generating HTML and PDF. They should be human-readable
+and easily perused from a console.
 
 Building
 ^^^^^^^^

From eef1d599f8b2d3a90870fa1ceff99717fd1b6ee4 Mon Sep 17 00:00:00 2001
From: erkin <e.altunbas@vyos.io>
Date: Sat, 23 Jan 2021 15:18:08 +0300
Subject: [PATCH 262/295] docs: Fix cross-reference

---
 docs/contributing/documentation.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index dd6680a9..53125543 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -13,15 +13,15 @@ Guidelines
 There are a few things to keep in mind when contributing to the
 documentation, for the sake of consistency and readability.
 
-Take a look at the `Documentation`_ page for an intricate explanation
+Take a look at the :doc:`/documentation` page for an intricate explanation
 of the documentation process.
 
 The following is a quick summary of the rules:
 
 - Use American English at all times. A spell checker can be helpful for this.
-- Don't forget to update `index.rst` when adding a new node.
+- Don't forget to update ``index.rst`` when adding a new node.
 - Try not to exceed 80 characters per line, but don't break URLs over this.
-- Properly quote commands, filenames and brief code snippets with backticks.
+- Properly quote commands, filenames and brief code snippets with double backticks.
 - Use literal blocks for longer snippets.
 - Leave a newline before and after a header.
 - Indent with two spaces.

From a8aafe6517bd9293794daa71640781f8f79bd880 Mon Sep 17 00:00:00 2001
From: erkin <e.altunbas@vyos.io>
Date: Sat, 23 Jan 2021 15:28:00 +0300
Subject: [PATCH 263/295] docs: Mention proofreading in documentation
 contribution page

---
 docs/contributing/documentation.rst | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index 53125543..67a14cc6 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -7,6 +7,9 @@ VyOS documentation is written in reStructuredText and generated to Read the Docs
 pages with Sphinx, as per the Python tradition, as well as PDF files for offline
 use through LaTeX.
 
+We welcome all sorts of contributions to the documentation. Not just
+new additions but also corrections to existing documentation.
+
 Guidelines
 ^^^^^^^^^^
 
@@ -18,7 +21,8 @@ of the documentation process.
 
 The following is a quick summary of the rules:
 
-- Use American English at all times. A spell checker can be helpful for this.
+- Use American English at all times. It's always a good idea to run
+  your text through a grammar and spell checker, such as `Grammarly`_.
 - Don't forget to update ``index.rst`` when adding a new node.
 - Try not to exceed 80 characters per line, but don't break URLs over this.
 - Properly quote commands, filenames and brief code snippets with double backticks.
@@ -43,3 +47,4 @@ You can either install Sphinx (and TeX Live for PDF output) and build the
 documentation locally, or use the `Dockerfile`_ to build it in a container.
 
 .. _Dockerfile: https://github.com/vyos/vyos-documentation/blob/master/docker/Dockerfile
+.. _Grammarly: https://www.grammarly.com/

From 9fa6e52669456321194650db27ec058f0d01d757 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 24 Jan 2021 19:51:28 +0100
Subject: [PATCH 264/295] Update year to 2021

---
 docs/conf.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/conf.py b/docs/conf.py
index 4260621a..3d011ad5 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -22,7 +22,7 @@ from docutils.parsers.rst.roles import set_classes
 # -- Project information -----------------------------------------------------
 
 project = u'VyOS'
-copyright = u'2020, VyOS maintainers and contributors'
+copyright = u'2021, VyOS maintainers and contributors'
 author = u'VyOS maintainers and contributors'
 
 # The short X.Y version

From f5f655369bd0ef8cce4a0a39739d6adfb18a697f Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 26 Jan 2021 16:46:47 +0100
Subject: [PATCH 265/295] changelog: fix phabricator links

---
 docs/changelog/1.2.5.rst | 104 ++++++++++++++---------------
 docs/changelog/1.2.6.rst | 138 +++++++++++++++++++--------------------
 2 files changed, 121 insertions(+), 121 deletions(-)

diff --git a/docs/changelog/1.2.5.rst b/docs/changelog/1.2.5.rst
index 6eabc6cf..438e84f2 100644
--- a/docs/changelog/1.2.5.rst
+++ b/docs/changelog/1.2.5.rst
@@ -6,65 +6,65 @@
 Resolved issues
 ---------------
 
-* :vytask:`1020` OSPF Stops distributing default route after a while
-* :vytask:`1228` pppoe default-route force option not working (Rel 1.2.0-rc11)
-* :vytask:`1301` bgp peer-groups don't work when "no-ipv4-unicast" is enabled.
-* :vytask:`1341` Adding rate-limiter for pppoe server users
-* :vytask:`1376` Incorrect DHCP lease counting
-* :vytask:`1392` Large firewall rulesets cause the system to lose configuration
+* :vytask:`T1020` OSPF Stops distributing default route after a while
+* :vytask:`T1228` pppoe default-route force option not working (Rel 1.2.0-rc11)
+* :vytask:`T1301` bgp peer-groups don't work when "no-ipv4-unicast" is enabled.
+* :vytask:`T1341` Adding rate-limiter for pppoe server users
+* :vytask:`T1376` Incorrect DHCP lease counting
+* :vytask:`T1392` Large firewall rulesets cause the system to lose configuration
   and crash at startup
-* :vytask:`1416` 2 dhcp server run in failover mode can't sync hostname with
+* :vytask:`T1416` 2 dhcp server run in failover mode can't sync hostname with
   each other
-* :vytask:`1452` accel-pppoe - add vendor option to shaper
-* :vytask:`1490` BGP configuration (is lost|not applied) when updating
+* :vytask:`T1452` accel-pppoe - add vendor option to shaper
+* :vytask:`T1490` BGP configuration (is lost|not applied) when updating
   1.1.8 -> 1.2.1
-* :vytask:`1780` Adding ipsec ike closeaction
-* :vytask:`1803` Unbind NTP while it's not requested...
-* :vytask:`1821` "authentication mode radius" has no effect for PPPoE server
-* :vytask:`1827` Increase default gc_thresh
-* :vytask:`1828` Missing completion helper for "set system syslog host
+* :vytask:`T1780` Adding ipsec ike closeaction
+* :vytask:`T1803` Unbind NTP while it's not requested...
+* :vytask:`T1821` "authentication mode radius" has no effect for PPPoE server
+* :vytask:`T1827` Increase default gc_thresh
+* :vytask:`T1828` Missing completion helper for "set system syslog host
   192.0.2.1 facility all protocol"
-* :vytask:`1832` radvd adding feature DNSSL branch.example.com example.com to
+* :vytask:`T1832` radvd adding feature DNSSL branch.example.com example.com to
   existing package
-* :vytask:`1837` PPPoE unrecognized option 'replacedefaultroute'
-* :vytask:`1851` wireguard - changing the pubkey on an existing peer seems to
+* :vytask:`T1837` PPPoE unrecognized option 'replacedefaultroute'
+* :vytask:`T1851` wireguard - changing the pubkey on an existing peer seems to
   destroy the running config.
-* :vytask:`1858` l2tp: Delete depricated outside-nexthop and add gateway-address
-* :vytask:`1864` Lower IPSec DPD timeout lower limit from 10s -> 2s
-* :vytask:`1879` Extend Dynamic DNS XML definition value help strings and
+* :vytask:`T1858` l2tp: Delete depricated outside-nexthop and add gateway-address
+* :vytask:`T1864` Lower IPSec DPD timeout lower limit from 10s -> 2s
+* :vytask:`T1879` Extend Dynamic DNS XML definition value help strings and
   validators
-* :vytask:`1881` Execute permissions are removed from custom SNMP scripts at
+* :vytask:`T1881` Execute permissions are removed from custom SNMP scripts at
   commit time
-* :vytask:`1884` Keeping VRRP transition-script native behaviour and adding
+* :vytask:`T1884` Keeping VRRP transition-script native behaviour and adding
   stop-script
-* :vytask:`1891` Router announcements broken on boot
-* :vytask:`1900` Enable SNMP for VRRP.
-* :vytask:`1902` Add redistribute non main table in bgp
-* :vytask:`1909` Incorrect behaviour of static routes with overlapping networks
-* :vytask:`1913` "system ipv6 blacklist" command has no effect
-* :vytask:`1914` IPv6 multipath hash policy does not apply
-* :vytask:`1917` Update WireGuard to Debian release 0.0.20191219-1
-* :vytask:`1934` Change default hostname when deploy from OVA without params.
-* :vytask:`1935` NIC identification and usage problem in Hyper-V environments
-* :vytask:`1936` pppoe-server CLI control features
-* :vytask:`1964` SNMP Script-extensions allows names with spaces, but commit
+* :vytask:`T1891` Router announcements broken on boot
+* :vytask:`T1900` Enable SNMP for VRRP.
+* :vytask:`T1902` Add redistribute non main table in bgp
+* :vytask:`T1909` Incorrect behaviour of static routes with overlapping networks
+* :vytask:`T1913` "system ipv6 blacklist" command has no effect
+* :vytask:`T1914` IPv6 multipath hash policy does not apply
+* :vytask:`T1917` Update WireGuard to Debian release 0.0.20191219-1
+* :vytask:`T1934` Change default hostname when deploy from OVA without params.
+* :vytask:`T1935` NIC identification and usage problem in Hyper-V environments
+* :vytask:`T1936` pppoe-server CLI control features
+* :vytask:`T1964` SNMP Script-extensions allows names with spaces, but commit
   fails
-* :vytask:`1967` BGP parameter "enforce-first-as" does not work anymore
-* :vytask:`1970` Correct adding interfaces on boot
-* :vytask:`1971` Missing modules in initrd.img for PXE boot
-* :vytask:`1998` Update FRR to 7.3
-* :vytask:`2001` Error when router reboot
-* :vytask:`2032` Monitor bandwidth bits
-* :vytask:`2059` Set source-validation on bond vif don't work
-* :vytask:`2066` PPPoE interface can be created multiple times - last wins
-* :vytask:`2069` PPPoE-client does not works with service-name option
-* :vytask:`2077` ISO build from crux branch is failing
-* :vytask:`2079` Update Linux Kernel to v4.19.106
-* :vytask:`2087` Add maxfail 0 option to pppoe configuration.
-* :vytask:`2100` BGP route adverisement wih checks rib
-* :vytask:`2120` "reset vpn ipsec-peer" doesn't work with named peers
-* :vytask:`2197` Cant add vif-s interface into a bridge
-* :vytask:`2228` WireGuard does not allow ports < 1024 to be used
-* :vytask:`2252` HTTP API add system image can return '504 Gateway Time-out'
-* :vytask:`2272` Set system flow-accounting disable-imt has syntax error
-* :vytask:`2276` PPPoE server vulnerability
\ No newline at end of file
+* :vytask:`T1967` BGP parameter "enforce-first-as" does not work anymore
+* :vytask:`T1970` Correct adding interfaces on boot
+* :vytask:`T1971` Missing modules in initrd.img for PXE boot
+* :vytask:`T1998` Update FRR to 7.3
+* :vytask:`T2001` Error when router reboot
+* :vytask:`T2032` Monitor bandwidth bits
+* :vytask:`T2059` Set source-validation on bond vif don't work
+* :vytask:`T2066` PPPoE interface can be created multiple times - last wins
+* :vytask:`T2069` PPPoE-client does not works with service-name option
+* :vytask:`T2077` ISO build from crux branch is failing
+* :vytask:`T2079` Update Linux Kernel to v4.19.106
+* :vytask:`T2087` Add maxfail 0 option to pppoe configuration.
+* :vytask:`T2100` BGP route adverisement wih checks rib
+* :vytask:`T2120` "reset vpn ipsec-peer" doesn't work with named peers
+* :vytask:`T2197` Cant add vif-s interface into a bridge
+* :vytask:`T2228` WireGuard does not allow ports < 1024 to be used
+* :vytask:`T2252` HTTP API add system image can return '504 Gateway Time-out'
+* :vytask:`T2272` Set system flow-accounting disable-imt has syntax error
+* :vytask:`T2276` PPPoE server vulnerability
\ No newline at end of file
diff --git a/docs/changelog/1.2.6.rst b/docs/changelog/1.2.6.rst
index 9c048f58..8ea92657 100644
--- a/docs/changelog/1.2.6.rst
+++ b/docs/changelog/1.2.6.rst
@@ -10,7 +10,7 @@ VyOS 1.2.6 release was found to be suspectible to CVE-2020-10995. It's a low-
 impact vulnerability in the PowerDNS recursor that allows an attacker to cause
 performance degradation via a specially crafted authoritative DNS server reply.
 
-* :vytask:`2899` remote syslog server migration error on update
+* :vytask:`T2899` remote syslog server migration error on update
 
 1.2.6
 =====
@@ -20,87 +20,87 @@ performance degradation via a specially crafted authoritative DNS server reply.
 Resolved issues
 ---------------
 
-* :vytask:`103` DHCP server prepends shared network name to hostnames
-* :vytask:`125` Missing PPPoE interfaces in l2tp configuration
-* :vytask:`1194` cronjob is being setup even if not saved
-* :vytask:`1205` module pcspkr missing
-* :vytask:`1219` Redundant active-active configuration, asymmetric routing and
+* :vytask:`T103` DHCP server prepends shared network name to hostnames
+* :vytask:`T125` Missing PPPoE interfaces in l2tp configuration
+* :vytask:`T1194` cronjob is being setup even if not saved
+* :vytask:`T1205` module pcspkr missing
+* :vytask:`T1219` Redundant active-active configuration, asymmetric routing and
   conntrack-sync cache
-* :vytask:`1220` Show transceiver information from plugin modules, e.g SFP+,
+* :vytask:`T1220` Show transceiver information from plugin modules, e.g SFP+,
   QSFP
-* :vytask:`1221` BGP - Default route injection is not processed by the specific
+* :vytask:`T1221` BGP - Default route injection is not processed by the specific
   route-map
-* :vytask:`1241` Remove of policy route throws CLI error
-* :vytask:`1291` Under certain conditions the VTI will stay forever down
-* :vytask:`1463` Missing command `show ip bgp scan` appears in command
+* :vytask:`T1241` Remove of policy route throws CLI error
+* :vytask:`T1291` Under certain conditions the VTI will stay forever down
+* :vytask:`T1463` Missing command `show ip bgp scan` appears in command
   completion
-* :vytask:`1575` `show snmp mib ifmib` crashes with IndexError
-* :vytask:`1699` Default net.ipv6.route.max_size 32768 is too low
-* :vytask:`1729` PIM (Protocol Independent Multicast) implementation
-* :vytask:`1901` Semicolon in values is interpreted as a part of the shell
+* :vytask:`T1575` `show snmp mib ifmib` crashes with IndexError
+* :vytask:`T1699` Default net.ipv6.route.max_size 32768 is too low
+* :vytask:`T1729` PIM (Protocol Independent Multicast) implementation
+* :vytask:`T1901` Semicolon in values is interpreted as a part of the shell
   command by validators
-* :vytask:`1934` Change default hostname when deploy from OVA without params.
-* :vytask:`1938` syslog doesn't start automatically
-* :vytask:`1949` Multihop IPv6 BFD is unconfigurable
-* :vytask:`1953` DDNS service name validation rejects valid service names
-* :vytask:`1956` PPPoE server: support PADO-delay
-* :vytask:`1973` Allow route-map to match on BGP local preference value
-* :vytask:`1974` Allow route-map to set administrative distance
-* :vytask:`1982` Increase rotation for atop.acct
-* :vytask:`1983` Expose route-map when BGP routes are programmed in to FIB
-* :vytask:`1985` pppoe: Enable ipv6 modules without configured ipv6 pools
-* :vytask:`2000` strongSwan does not install routes to table 220 in certain
+* :vytask:`T1934` Change default hostname when deploy from OVA without params.
+* :vytask:`T1938` syslog doesn't start automatically
+* :vytask:`T1949` Multihop IPv6 BFD is unconfigurable
+* :vytask:`T1953` DDNS service name validation rejects valid service names
+* :vytask:`T1956` PPPoE server: support PADO-delay
+* :vytask:`T1973` Allow route-map to match on BGP local preference value
+* :vytask:`T1974` Allow route-map to set administrative distance
+* :vytask:`T1982` Increase rotation for atop.acct
+* :vytask:`T1983` Expose route-map when BGP routes are programmed in to FIB
+* :vytask:`T1985` pppoe: Enable ipv6 modules without configured ipv6 pools
+* :vytask:`T2000` strongSwan does not install routes to table 220 in certain
   cases
-* :vytask:`2021` OSPFv3 doesn't support decimal area syntax
-* :vytask:`2062` Wrong dhcp-server static route subnet bytes
-* :vytask:`2091` swanctl.conf file is not generated properly is more than one
+* :vytask:`T2021` OSPFv3 doesn't support decimal area syntax
+* :vytask:`T2062` Wrong dhcp-server static route subnet bytes
+* :vytask:`T2091` swanctl.conf file is not generated properly is more than one
   IPsec profile is used
-* :vytask:`2131` Improve syslog remote host CLI definition
-* :vytask:`2224` Update Linux Kernel to v4.19.114
-* :vytask:`2286` IPoE server vulnerability
-* :vytask:`2303` Unable to delete the image version that came from OVA
-* :vytask:`2305` Add release name to "show version" command
-* :vytask:`2311` Statically configured name servers may not take precedence
+* :vytask:`T2131` Improve syslog remote host CLI definition
+* :vytask:`T2224` Update Linux Kernel to v4.19.114
+* :vytask:`T2286` IPoE server vulnerability
+* :vytask:`T2303` Unable to delete the image version that came from OVA
+* :vytask:`T2305` Add release name to "show version" command
+* :vytask:`T2311` Statically configured name servers may not take precedence
   over ones from DHCP
-* :vytask:`2327` Unable to create syslog server entry with different port
-* :vytask:`2332` Backport node option for a syslog server
-* :vytask:`2342` Bridge l2tpv3 + ethX errors
-* :vytask:`2344` PPPoE server client static IP assignment silently fails
-* :vytask:`2385` salt-minion: improve completion helpers
-* :vytask:`2389` BGP community-list unknown command
-* :vytask:`2398` op-mode "dhcp client leases interface" completion helper
+* :vytask:`T2327` Unable to create syslog server entry with different port
+* :vytask:`T2332` Backport node option for a syslog server
+* :vytask:`T2342` Bridge l2tpv3 + ethX errors
+* :vytask:`T2344` PPPoE server client static IP assignment silently fails
+* :vytask:`T2385` salt-minion: improve completion helpers
+* :vytask:`T2389` BGP community-list unknown command
+* :vytask:`T2398` op-mode "dhcp client leases interface" completion helper
   misses interfaces
-* :vytask:`2402` Live ISO should warn when configuring that changes won't
+* :vytask:`T2402` Live ISO should warn when configuring that changes won't
   persist
-* :vytask:`2443` NHRP: Add debugging information to syslog
-* :vytask:`2448` `monitor protocol bgp` subcommands fail with 'command
+* :vytask:`T2443` NHRP: Add debugging information to syslog
+* :vytask:`T2448` `monitor protocol bgp` subcommands fail with 'command
   incomplete'
-* :vytask:`2458` Update FRR to 7.3.1
-* :vytask:`2476` Bond member description change leads to network outage
-* :vytask:`2478` login radius: use NAS-IP-Address if defined source address
-* :vytask:`2482` Update PowerDNS recursor to 4.3.1 for CVE-2020-10995
-* :vytask:`2517` vyos-container: link_filter: No such file or directory
-* :vytask:`2526` Wake-On-Lan CLI implementation
-* :vytask:`2528` "update dns dynamic" throws FileNotFoundError excepton
-* :vytask:`2536` "show log dns forwarding" still refers to dnsmasq
-* :vytask:`2538` Update Intel NIC drivers to recent release (preparation for
+* :vytask:`T2458` Update FRR to 7.3.1
+* :vytask:`T2476` Bond member description change leads to network outage
+* :vytask:`T2478` login radius: use NAS-IP-Address if defined source address
+* :vytask:`T2482` Update PowerDNS recursor to 4.3.1 for CVE-2020-10995
+* :vytask:`T2517` vyos-container: link_filter: No such file or directory
+* :vytask:`T2526` Wake-On-Lan CLI implementation
+* :vytask:`T2528` "update dns dynamic" throws FileNotFoundError excepton
+* :vytask:`T2536` "show log dns forwarding" still refers to dnsmasq
+* :vytask:`T2538` Update Intel NIC drivers to recent release (preparation for
   Kernel >=5.4)
-* :vytask:`2545` Show physical device offloading capabilities for specified
+* :vytask:`T2545` Show physical device offloading capabilities for specified
   ethernet interface
-* :vytask:`2563` Wrong interface binding for Dell VEP 1445
-* :vytask:`2605` SNMP service is not disabled by default
-* :vytask:`2625` Provide generic Library for package builds
-* :vytask:`2686` FRR: BGP: large-community configuration is not applied
+* :vytask:`T2563` Wrong interface binding for Dell VEP 1445
+* :vytask:`T2605` SNMP service is not disabled by default
+* :vytask:`T2625` Provide generic Library for package builds
+* :vytask:`T2686` FRR: BGP: large-community configuration is not applied
   properly after upgrading FRR to 7.3.x series
-* :vytask:`2701` `vpn ipsec pfs enable` doesn't work with IKE groups
-* :vytask:`2728` Protocol option ignored for IPSec peers in transport mode
-* :vytask:`2734` WireGuard: fwmark CLI definition is inconsistent
-* :vytask:`2757` "show system image version" contains additional new-line
+* :vytask:`T2701` `vpn ipsec pfs enable` doesn't work with IKE groups
+* :vytask:`T2728` Protocol option ignored for IPSec peers in transport mode
+* :vytask:`T2734` WireGuard: fwmark CLI definition is inconsistent
+* :vytask:`T2757` "show system image version" contains additional new-line
   character breaking output
-* :vytask:`2797` Update Linux Kernel to v4.19.139
-* :vytask:`2822` Update Linux Kernel to v4.19.141
-* :vytask:`2829` PPPoE server: mppe setting is implemented as node instead of
+* :vytask:`T2797` Update Linux Kernel to v4.19.139
+* :vytask:`T2822` Update Linux Kernel to v4.19.141
+* :vytask:`T2829` PPPoE server: mppe setting is implemented as node instead of
   leafNode
-* :vytask:`2831` Update Linux Kernel to v4.19.142
-* :vytask:`2852` rename dynamic dns interface breaks ddclient.cache permissions
-* :vytask:`2853` Intel QAT acceleration does not work
\ No newline at end of file
+* :vytask:`T2831` Update Linux Kernel to v4.19.142
+* :vytask:`T2852` rename dynamic dns interface breaks ddclient.cache permissions
+* :vytask:`T2853` Intel QAT acceleration does not work
\ No newline at end of file

From a2806637c0e8e0ce949727c7ca10aaa23e5ceaf3 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 26 Jan 2021 16:51:35 +0100
Subject: [PATCH 266/295] Update vyos-1x submodule (#436)

Co-authored-by: rebortg <rebortg@users.noreply.github.com>
---
 docs/_include/vyos-1x | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
index c9e630b4..73cc357b 160000
--- a/docs/_include/vyos-1x
+++ b/docs/_include/vyos-1x
@@ -1 +1 @@
-Subproject commit c9e630b446f069b3a803c1e7c22e559797bce975
+Subproject commit 73cc357b757eb6129db286709812996ebcc4fd19

From 0349350990c62fab752d1f8cf01dbdc8b9e10db6 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 26 Jan 2021 20:28:43 +0100
Subject: [PATCH 267/295] gns3: fix internal link to iso download

---
 docs/installation/virtual/gns3.rst | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/docs/installation/virtual/gns3.rst b/docs/installation/virtual/gns3.rst
index 93ea9ae2..e9977f0f 100644
--- a/docs/installation/virtual/gns3.rst
+++ b/docs/installation/virtual/gns3.rst
@@ -16,9 +16,8 @@ Requirements
 
 The following items are required:
 
-* A VyOS installation image (.iso file).
-  `Here <https://docs.vyos.io/en/latest/install.html#download>`__ you
-  can find how to get it.
+* A VyOS installation image (.iso file). You
+  can find how to get it on the :ref:`installation` page
 
 * A working GNS3 installation. For further information see the
   `GNS3 documentation <https://docs.gns3.com/>`__.

From 0a4ce825d07126dda7f540eee567ba83bc799514 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 26 Jan 2021 20:47:21 +0100
Subject: [PATCH 268/295] configexamples: fix internal link in azure vpn bgp
 example

---
 docs/configexamples/azure-vpn-bgp.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/configexamples/azure-vpn-bgp.rst b/docs/configexamples/azure-vpn-bgp.rst
index 6f2622b2..265e28c7 100644
--- a/docs/configexamples/azure-vpn-bgp.rst
+++ b/docs/configexamples/azure-vpn-bgp.rst
@@ -7,8 +7,8 @@ This guide shows an example of a route-based IKEv2 site-to-site VPN to
 Azure using VTI and BGP for dynamic routing updates.
 
 For redundant / active-active configurations see
-`Route-Based Redundant Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)
-<https://docs.vyos.io/en/crux/appendix/examples/azure-vpn-dual-bgp.html>`_
+:ref:`examples-azure-vpn-dual-bgp`
+
 
 Prerequisites
 ^^^^^^^^^^^^^

From 37729f367a020f17d67f25f121693283585dc20a Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 26 Jan 2021 20:49:02 +0100
Subject: [PATCH 269/295] bgp: fix build indentation warning

---
 docs/configuration/protocols/bgp.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/configuration/protocols/bgp.rst b/docs/configuration/protocols/bgp.rst
index 27858224..2d9c9af5 100644
--- a/docs/configuration/protocols/bgp.rst
+++ b/docs/configuration/protocols/bgp.rst
@@ -30,7 +30,7 @@ Each AS has an identifying number associated with it called an :abbr:`ASN
 to 65535. The AS numbers 64512 through 65535 are defined as private AS numbers.
 Private AS numbers must not be advertised on the global Internet. The 2-byte AS
 number range has been exhausted. 4-byte AS numbers are specified in
- :rfc:`6793`, and provide a pool of 4294967296 AS numbers.
+:rfc:`6793`, and provide a pool of 4294967296 AS numbers.
 
 The :abbr:`ASN (Autonomous System Number)` is one of the essential elements of
 BGP. BGP is a distance vector routing protocol, and the AS-Path framework

From 6dbe2feb4f580bd7d2f449817484bbe2fd3c3119 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 26 Jan 2021 20:50:50 +0100
Subject: [PATCH 270/295] rip: close cfgcmd string

---
 docs/configuration/protocols/rip.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/configuration/protocols/rip.rst b/docs/configuration/protocols/rip.rst
index 7e7f0afc..4d46e2f0 100644
--- a/docs/configuration/protocols/rip.rst
+++ b/docs/configuration/protocols/rip.rst
@@ -105,7 +105,7 @@ Optional Configuration
   route only inside RIP. This command should be used only by advanced users
   who are particularly knowledgeable about the RIP protocol. In most cases,
   we recommend creating a static route in VyOS and redistributing it in RIP
-  using :cfgcmd:`redistribute static.
+  using :cfgcmd:`redistribute static`.
   
 .. cfgcmd:: set protocols rip timers update <seconds>
 

From 9ce7bae14ba8663bde841bb5c118c3f85ed0b478 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 26 Jan 2021 20:53:26 +0100
Subject: [PATCH 271/295] contribution: fix duplicate label error

---
 docs/contributing/documentation.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/contributing/documentation.rst b/docs/contributing/documentation.rst
index 67a14cc6..eb8db3e1 100644
--- a/docs/contributing/documentation.rst
+++ b/docs/contributing/documentation.rst
@@ -1,4 +1,4 @@
-.. _documentation:
+.. _contrib-documentation:
 
 Documentation
 -------------

From 9e6912a6e822a1b9414b75aa00be78b404402ec7 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Tue, 26 Jan 2021 21:06:26 +0100
Subject: [PATCH 272/295] coverage: disable at the moment b/c of build errors
 and branch changes

---
 docs/_ext/vyos.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/docs/_ext/vyos.py b/docs/_ext/vyos.py
index 7861c8a2..a4e130e5 100644
--- a/docs/_ext/vyos.py
+++ b/docs/_ext/vyos.py
@@ -20,7 +20,8 @@ def setup(app):
 
     app.add_config_value(
         'vyos_working_commands',
-        get_working_commands(),
+        #get_working_commands(),
+        {"cfgcmd": [], "opcmd": []},
         'html'
     )
     app.add_config_value(

From 44647b95cb474a0fe19314540f04858c92a80074 Mon Sep 17 00:00:00 2001
From: Leonid Voronkin <bullet85@yandex.ru>
Date: Wed, 27 Jan 2021 11:50:52 +0400
Subject: [PATCH 273/295] ospf: change redistribution metric value

due to T3194
---
 docs/configuration/protocols/ospf.rst | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
index 7270febc..585454da 100644
--- a/docs/configuration/protocols/ospf.rst
+++ b/docs/configuration/protocols/ospf.rst
@@ -430,9 +430,9 @@ Redistribution Configuration
 
 .. cfgcmd:: set protocols ospf redistribute <route source> metric <number>
 
-   This command specifies metric for redistributed routes from given route
-   source. There are five modes available for route source: bgp, connected,
-   kernel, rip, static. The metric range is 1 to 16.
+   This command specifies metric for redistributed routes from the given 
+   route source. There are five modes available for route source: bgp, 
+   connected, kernel, rip, static. The metric range is 1 to 16777214.
 
 .. cfgcmd:: set protocols ospf redistribute <route source> metric-type <1|2>
 
@@ -455,8 +455,8 @@ Redistribution Configuration
 .. cfgcmd:: set protocols ospf redistribute <route source> route-map <name>
 
    This command allows to use route map to filter redistributed routes from
-   given route source. There are five modes available for route source: bgp,
-   connected, kernel, rip, static.
+   the given route source. There are five modes available for route source:
+   bgp, connected, kernel, rip, static.
 
 
 Operational Mode Commands

From d0ad9cf4a02cee44671fe6eaea2c5c5e025177b5 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 29 Jan 2021 10:59:46 +0100
Subject: [PATCH 274/295] ssh: add op-mode commands

---
 docs/configuration/service/ssh.rst | 47 ++++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)

diff --git a/docs/configuration/service/ssh.rst b/docs/configuration/service/ssh.rst
index f7541a70..f6efe6d4 100644
--- a/docs/configuration/service/ssh.rst
+++ b/docs/configuration/service/ssh.rst
@@ -108,3 +108,50 @@ Configuration
 .. cfgcmd:: set service ssh vrf <name>
 
   Specify name of the :abbr:`VRF (Virtual Routing and Forwarding)` instance.
+
+Operation
+=========
+
+.. opcmd:: restart ssh
+
+  Restart the SSH daemon process, the current session is not affected, only the
+  background daemon is restarted.
+
+.. opcmd:: generate ssh server-key
+
+  Re-generated the public/private keyportion which SSH uses to secure
+  connections.
+
+  .. note:: Already learned known_hosts files of clients need an update as the
+  public key will change.
+
+.. opcmd:: generate ssh client-key /path/to/private_key
+
+  Re-generated a known pub/private keyfile which can e.g. used to connect to
+  other services (RPKI cache).
+
+  Example:
+
+  .. code-block:: none
+
+    vyos@vyos:~$ generate ssh client-key /config/auth/id_rsa_rpki
+    Generating public/private rsa key pair.
+    Your identification has been saved in /config/auth/id_rsa_rpki.
+    Your public key has been saved in /config/auth/id_rsa_rpki.pub.
+    The key fingerprint is:
+    SHA256:XGv2PpdOzVCzpmEzJZga8hTRq7B/ZYL3fXaioLFLS5Q cpo@LR1.wue3
+    The key's randomart image is:
+    +---[RSA 2048]----+
+    |         oo      |
+    |          ..o    |
+    |       . o.o.. o.|
+    |       o+ooo  o.o|
+    |        Eo*  =.o |
+    |       o = +.o*+ |
+    |        = o *.o.o|
+    |       o * +.o+.+|
+    |        =.. o=.oo|
+    +----[SHA256]-----+
+
+  Two new files ``/config/auth/id_rsa_rpki`` and ``/config/auth/id_rsa_rpki.pub``
+  will be created.

From 83c82dee8b5b156a99236ce0eb10f8403784c13a Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 29 Jan 2021 11:18:40 +0100
Subject: [PATCH 275/295] rpki: update to reflect changes in the current branch

---
 docs/configuration/protocols/rpki.rst | 89 ++++++++++++++++++++++++++-
 1 file changed, 87 insertions(+), 2 deletions(-)

diff --git a/docs/configuration/protocols/rpki.rst b/docs/configuration/protocols/rpki.rst
index c3ff442b..d9884296 100644
--- a/docs/configuration/protocols/rpki.rst
+++ b/docs/configuration/protocols/rpki.rst
@@ -34,6 +34,10 @@ in :rfc:`8210`.
   tools). It also has some `help and operational guidance`_ including
   "What can I do about my route having an Invalid state?"
 
+***************
+Getting started
+***************
+
 First you will need to deploy an RPKI validator for your routers to use. The
 RIPE NCC helpfully provide `some instructions`_ to get you started with
 several different options.  Once your server is running you can start
@@ -71,14 +75,95 @@ Imported prefixes during the validation may have values:
   reading about Krill_ if this is a rabbit hole you need or especially want
   to dive down.
 
+Features of the Current Implementation
+======================================
+
+In a nutshell, the current implementation provides the following features:
+
+* The BGP router can connect to one or more RPKI cache servers to receive
+  validated prefix to origin AS mappings. Advanced failover can be implemented
+  by server sockets with different preference values.
+
+* If no connection to an RPKI cache server can be established after a
+  pre-defined timeout, the router will process routes without prefix origin
+  validation. It still will try to establish a connection to an RPKI cache
+  server in the background.
+
+* By default, enabling RPKI does not change best path selection. In particular,
+  invalid prefixes will still be considered during best path selection. However,
+  the router can be configured to ignore all invalid prefixes.
+
+* Route maps can be configured to match a specific RPKI validation state. This
+  allows the creation of local policies, which handle BGP routes based on the
+  outcome of the Prefix Origin Validation.
+
+* Updates from the RPKI cache servers are directly applied and path selection is
+  updated accordingly. (Soft reconfiguration must be enabled for this to work).
+
+*************
+Configuration
+*************
+
+.. cfgcmd:: protocols rpki polling-period <1-86400>
+
+  Define the time interval to update the local cache
+
+  The default value is 300 seconds.
+
+.. cfgcmd:: protocols rpki cache <address> port <port>
+
+  Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching
+  instance which is used.
+
+  This is a mandatory setting.
+
+.. cfgcmd:: protocols rpki cache <address> preference <preference>
+
+  Multiple RPKI caching instances can be supplied and they need a preference in
+  which their result sets are used.
+
+  This is a mandatory setting.
+
+SSH
+===
+
+Connections to the RPKI caching server can not only be established by HTTP/TLS
+but you can also rely on a secure SSH session to the server. To enable SSH you
+first need to create yoursels an SSH client keypair using ``generate ssh
+client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup
+the connection.
+
+.. cfgcmd:: protocols rpki cache <address> ssh username <user>
+
+  SSH username to establish an SSH connection to the cache server.
+
+.. cfgcmd:: protocols rpki cache <address> ssh known-hosts-file <filepath>
+
+  Local path that includes the known hosts file.
+
+.. cfgcmd:: protocols rpki cache <address> ssh private-key-file <filepath>
+
+  Local path that includes the private key file of the router.
+
+.. cfgcmd:: protocols rpki cache <address> ssh public-key-file <filepath
+
+  Local path that includes the public key file of the router.
+
+.. note:: When using SSH, known-hosts-file, private-key-file and public-key-file
+  are mandatory options.
+
+*******
+Example
+*******
+
 We can build route-maps for import based on these states. Here is a simple
 RPKI configuration, where `routinator` is the RPKI-validating "cache"
 server with ip `192.0.2.1`:
 
 .. code-block:: none
 
-  set protocols rpki cache routinator address '192.0.2.1'
-  set protocols rpki cache routinator port '3323'
+  set protocols rpki cache 192.0.2.1 port '3323'
+  set protocols rpki cache 192.0.2.1 preference '1'
 
 Here is an example route-map to apply to routes learned at import. In this
 filter we reject prefixes with the state `invalid`, and set a higher

From a531335929286c47f64690db438abc8748418b2c Mon Sep 17 00:00:00 2001
From: Sam Burney <sburney@sifnt.net.au>
Date: Sat, 30 Jan 2021 09:39:42 +0000
Subject: [PATCH 276/295] pppoe: T3273: Add usage of each default-route mode

---
 docs/configuration/interfaces/pppoe.rst | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/docs/configuration/interfaces/pppoe.rst b/docs/configuration/interfaces/pppoe.rst
index 9d10b91f..e6b1f3ef 100644
--- a/docs/configuration/interfaces/pppoe.rst
+++ b/docs/configuration/interfaces/pppoe.rst
@@ -113,7 +113,7 @@ PPPoE options
    timeout period, after which an idle PPPoE link will be disconnected. A
    non-zero idle timeout will never disconnect the link after it first came up.
 
-.. cfgcmd:: set interfaces pppoe <interface> default-route
+.. cfgcmd:: set interfaces pppoe <interface> default-route [auto | force | none]
 
    Use this command to specify whether to automatically add a default route
    pointing to the endpoint of the PPPoE when the link comes up. The default
@@ -122,6 +122,16 @@ PPPoE options
    **default:** A default route to the remote endpoint is automatically added
    when the link comes up (i.e. auto).
 
+   * auto: A default route is added if no other default route (From any
+     source) already exists.
+   * force: A default route is added after removing *all* existing default
+     routes.
+   * none: No default route is installed.
+
+.. note:: In all modes except 'none', all default routes using this interface will be
+   removed when the interface is torn down - even manually installed static
+   interface-routes.
+
 .. cfgcmd:: set interfaces pppoe <interface> idle-timeout <time>
 
    Use this command to set the idle timeout interval to be used with on-demand
@@ -240,7 +250,8 @@ Requirements:
 * With the ``default-route`` option set to ``auto``, VyOS will only add the
   default gateway you receive from your DSL ISP to the routing table if you
   have no other WAN connections. If you wish to use a dual WAN connection,
-  change the ``default-route`` option to ``force``.
+  change the ``default-route`` option to ``force``.  You could also install
+  a static interface-route and set the ``default-route`` option to ``none``.
 * With the ``name-server`` option set to ``none``, VyOS will ignore the
   nameservers your ISP sens you and thus you can fully rely on the ones you
   have configured statically.

From 4842a37b7a647eed76904c3fdd4ed706c47f014e Mon Sep 17 00:00:00 2001
From: Sam Burney <sburney@sifnt.net.au>
Date: Sat, 30 Jan 2021 09:53:53 +0000
Subject: [PATCH 277/295] pppoe: T3273: Fixed issue with line length

---
 docs/configuration/interfaces/pppoe.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/configuration/interfaces/pppoe.rst b/docs/configuration/interfaces/pppoe.rst
index e6b1f3ef..0fdbba42 100644
--- a/docs/configuration/interfaces/pppoe.rst
+++ b/docs/configuration/interfaces/pppoe.rst
@@ -128,9 +128,9 @@ PPPoE options
      routes.
    * none: No default route is installed.
 
-.. note:: In all modes except 'none', all default routes using this interface will be
-   removed when the interface is torn down - even manually installed static
-   interface-routes.
+.. note:: In all modes except 'none', all default routes using this interface
+   will be removed when the interface is torn down - even manually installed
+   static interface-routes.
 
 .. cfgcmd:: set interfaces pppoe <interface> idle-timeout <time>
 

From 3a92f63ec0057709b3f57aa18202758c43cee33e Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sat, 30 Jan 2021 13:30:21 +0100
Subject: [PATCH 278/295] ospf: adjust sections to section guidelines

---
 docs/configuration/protocols/ospf.rst | 156 ++++++++++++++------------
 1 file changed, 82 insertions(+), 74 deletions(-)

diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
index 585454da..2c098714 100644
--- a/docs/configuration/protocols/ospf.rst
+++ b/docs/configuration/protocols/ospf.rst
@@ -14,23 +14,27 @@ addressing model.
 
 OSPF is a widely used IGP in large enterprise networks.
 
+*************
 OSPFv2 (IPv4)
-#############
+*************
 
-General Configuration
----------------------
+Configuration
+=============
+
+General
+-------
 
 VyOS does not have a special command to start the OSPF process. The OSPF process
 starts when the first ospf enabled interface is configured.
 
 .. cfgcmd:: set protocols ospf area <number> network <A.B.C.D/M>
 
-   This command specifies the OSPF enabled interface(s). If the interface has 
-   an address from defined range then the command enables OSPF on this 
-   interface so router can provide network information to the other ospf 
+   This command specifies the OSPF enabled interface(s). If the interface has
+   an address from defined range then the command enables OSPF on this
+   interface so router can provide network information to the other ospf
    routers via this interface.
-   
-   This command is also used to enable the OSPF process. The area number can be 
+
+   This command is also used to enable the OSPF process. The area number can be
    specified in decimal notation in the range from 0 to 4294967295. Or it
    can be specified in dotted decimal notation similar to ip address.
 
@@ -51,14 +55,14 @@ starts when the first ospf enabled interface is configured.
    with the same router-ID!
 
 
-Optional Configuration
-----------------------
+Optional
+--------
 
 .. cfgcmd:: set protocols ospf default-information originate [always]
    [metric <number>] [metric-type <1|2>] [route-map <name>]
 
-   Originate an AS-External (type-5) LSA describing a default route into all 
-   external-routing capable areas, of the specified metric and metric type. 
+   Originate an AS-External (type-5) LSA describing a default route into all
+   external-routing capable areas, of the specified metric and metric type.
    If the :cfgcmd:`always` keyword is given then the default is always
    advertised, even when there is no default present in the routing table.
    The argument :cfgcmd:`route-map` specifies to advertise the default route
@@ -72,10 +76,10 @@ Optional Configuration
 .. cfgcmd:: set protocols ospf distance ospf <external|inter-area|intra-area>
    <distance>
 
-   This command change distance value of OSPF. The arguments are the distance 
-   values for external routes, inter-area routes and intra-area routes 
+   This command change distance value of OSPF. The arguments are the distance
+   values for external routes, inter-area routes and intra-area routes
    respectively. The distance range is 1 to 255.
-   
+
    .. note:: Routes with a distance of 255 are effectively disabled and not
       installed into the kernel.
 
@@ -92,14 +96,14 @@ Optional Configuration
    transit links in its router-LSA as having infinite distance so that other
    routers will avoid calculating transit paths through the router while
    still being able to reach networks through the router.
-   
+
    This support may be enabled administratively (and indefinitely) with the
    :cfgcmd:`administrative` command. It may also be enabled conditionally.
    Conditional enabling of max-metric router-lsas can be for a period of
    seconds after startup with the :cfgcmd:`on-startup <seconds>` command
    and/or for a period of seconds prior to shutdown with the
    :cfgcmd:`on-shutdown <seconds>` command. The time range is 5 to 86400.
-   
+
 .. cfgcmd:: set protocols ospf parameters abr-type
    <cisco|ibm|shortcut|standard>
 
@@ -173,8 +177,8 @@ Optional Configuration
    consecutive SPF calculations. The default value is 10000 ms.
 
 
-Areas Configuration
--------------------
+Area Configuration
+------------------
 
 .. cfgcmd:: set protocols ospf area <number> area-type stub
 
@@ -220,7 +224,7 @@ Areas Configuration
 
    This command sets the default cost of LSAs announced to NSSA areas.
    The cost range is 0 to 16777215.
-   
+
 .. cfgcmd:: set protocols ospf area <number> area-type nssa translate
    <always|candidate|never>
 
@@ -241,7 +245,7 @@ Areas Configuration
 .. cfgcmd:: set protocols ospf area <number> authentication md5
 
    This command specify that OSPF packets must be authenticated with MD5 HMACs
-   within the given area. Keying material must also be configured on a 
+   within the given area. Keying material must also be configured on a
    per-interface basis.
 
 .. cfgcmd:: set protocols ospf area <number> range <A.B.C.D/M> [cost <number>]
@@ -278,7 +282,7 @@ Areas Configuration
    **enable** – the area will be used for shortcutting every time the route
    that goes through it is cheaper.
    **disable** – this area is never used by ABR for routes shortcutting.
-   
+
 .. cfgcmd:: set protocols ospf area <number> virtual-link <A.B.C.D>
 
    Provides a backbone area coherence by virtual link establishment.
@@ -299,10 +303,10 @@ Areas Configuration
    This pseudo-network is considered to belong to a backbone area.
 
 
-Interfaces Configuration
-------------------------
+Interface Configuration
+-----------------------
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf authentication 
+.. cfgcmd:: set interfaces <inttype> <intname> ip ospf authentication
    plaintext-password <text>
 
    This command sets OSPF authentication key to a simple password. After
@@ -318,14 +322,14 @@ Interfaces Configuration
    interface. It sets OSPF authentication key to a cryptographic password.
    Key-id identifies secret key used to create the message digest. This ID
    is part of the protocol and must be consistent across routers on a link.
-   The key can be long up to 16 chars (larger strings will be truncated), 
+   The key can be long up to 16 chars (larger strings will be truncated),
    and is associated with the given key-id.
 
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf bandwidth <number>
 
-   This command sets the interface bandwidth for cost calculations, where 
+   This command sets the interface bandwidth for cost calculations, where
    bandwidth can be in range from 1 to 100000, specified in Mbits/s.
-   
+
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf cost <number>
 
    This command sets link cost for the specified interface. The cost value is
@@ -352,10 +356,10 @@ Interfaces Configuration
    This command disables check of the MTU value in the OSPF DBD packets. Thus,
    use of this command allows the OSPF adjacency to reach the FULL state even
    though there is an interface MTU mismatch between two OSPF routers.
-   
+
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf network <type>
 
-   This command allows to specify the distribution type for the network 
+   This command allows to specify the distribution type for the network
    connected to this interface:
 
    **broadcast** – broadcast IP addresses distribution.
@@ -370,7 +374,7 @@ Interfaces Configuration
    highest priority will be more eligible to become Designated Router.
    Setting the value to 0, makes the router ineligible to become
    Designated Router. The default value is 1. The interval range is 0 to 255.
-   
+
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf retransmit-interval
    <number>
 
@@ -378,7 +382,7 @@ Interfaces Configuration
    value is used when retransmitting Database Description and Link State
    Request packets if acknowledge was not received. The default value is 5
    seconds. The interval range is 3 to 65535.
-   
+
 .. cfgcmd:: set interfaces <inttype> <intname> ip ospf transmit-delay <number>
 
    This command sets number of seconds for InfTransDelay value. It allows to
@@ -406,7 +410,7 @@ the neighbors statically.
    device sends hello packets out of the interface before it establishes
    adjacency with a neighbor. The range is 1 to 65535 seconds. The default
    value is 60 seconds.
-   
+
 .. cfgcmd:: set protocols ospf neighbor <A.B.C.D> priority <number>
 
    This command specifies the router priority value of the nonbroadcast
@@ -422,16 +426,16 @@ Redistribution Configuration
    This command redistributes routing information from the given route source
    to the OSPF process. There are five modes available for route source: bgp,
    connected, kernel, rip, static.
-   
+
 .. cfgcmd:: set protocols ospf default-metric <number>
-   
+
    This command specifies the default metric value of redistributed routes.
    The metric range is 0 to 16777214.
 
 .. cfgcmd:: set protocols ospf redistribute <route source> metric <number>
 
-   This command specifies metric for redistributed routes from the given 
-   route source. There are five modes available for route source: bgp, 
+   This command specifies metric for redistributed routes from the given
+   route source. There are five modes available for route source: bgp,
    connected, kernel, rip, static. The metric range is 1 to 16777214.
 
 .. cfgcmd:: set protocols ospf redistribute <route source> metric-type <1|2>
@@ -465,7 +469,7 @@ Operational Mode Commands
 .. opcmd:: show ip ospf neighbor
 
    This command displays the neighbors status.
-   
+
 .. code-block:: none
 
    Neighbor ID     Pri State           Dead Time Address         Interface                        RXmtL RqstL DBsmL
@@ -568,13 +572,13 @@ Operational Mode Commands
                               via 10.0.13.3, eth0
    N    10.0.34.0/24          [2] area: 0.0.0.0
                               via 10.0.13.3, eth0
-   
+
    ============ OSPF router routing table =============
    R    10.0.23.3             [1] area: 0.0.0.0, ABR
                               via 10.0.13.3, eth0
    R    10.0.34.4             [2] area: 0.0.0.0, ASBR
                               via 10.0.13.3, eth0
-   
+
    ============ OSPF external routing table ===========
    N E2 172.16.0.0/24         [2/20] tag: 0
                               via 10.0.13.3, eth0
@@ -588,7 +592,7 @@ connected, i.e. it’s an inter-area path. In square brackets a summary metric
 for all links through which a path lies to this network is specified. "via"
 prefix defines a router-gateway, i.e. the first router on the way to the
 destination (next hop).
-**OSPF router routing table** – includes a list of acquired routes to all 
+**OSPF router routing table** – includes a list of acquired routes to all
 accessible ABRs and ASBRs.
 **OSPF external routing table** – includes a list of acquired routes that are
 external to the OSPF process. "E" flag points to the external link metric type
@@ -599,7 +603,7 @@ the "<metric of the router which advertised the link>/<link metric>" format.
 
    This command displays a table of paths to area boundary and autonomous
    system boundary routers.
-   
+
 .. opcmd:: show ip ospf database
 
    This command displays a summary table with a database contents (LSA).
@@ -607,51 +611,51 @@ the "<metric of the router which advertised the link>/<link metric>" format.
 .. code-block:: none
 
           OSPF Router with ID (10.0.13.1)
-   
+
                    Router Link States (Area 0.0.0.0)
-   
+
    Link ID         ADV Router      Age  Seq#       CkSum  Link count
    10.0.13.1       10.0.13.1        984 0x80000005 0xd915 1
    10.0.23.3       10.0.23.3       1186 0x80000008 0xfe62 2
    10.0.34.4       10.0.34.4       1063 0x80000004 0x4e3f 1
-   
+
                    Net Link States (Area 0.0.0.0)
-   
+
    Link ID         ADV Router      Age  Seq#       CkSum
    10.0.13.1       10.0.13.1        994 0x80000003 0x30bb
    10.0.34.4       10.0.34.4       1188 0x80000001 0x9411
-   
+
                    Summary Link States (Area 0.0.0.0)
-   
+
    Link ID         ADV Router      Age  Seq#       CkSum  Route
    10.0.12.0       10.0.23.3       1608 0x80000001 0x6ab6 10.0.12.0/24
    10.0.23.0       10.0.23.3        981 0x80000003 0xe232 10.0.23.0/24
-   
+
                    AS External Link States
-   
+
    Link ID         ADV Router      Age  Seq#       CkSum  Route
    172.16.0.0      10.0.34.4       1063 0x80000001 0xc40d E2 172.16.0.0/24 [0x0]
-   
+
 .. opcmd:: show ip ospf database <type> [A.B.C.D]
   [adv-router <A.B.C.D>|self-originate]
 
    This command displays a database contents for a specific link advertisement
    type.
-   
+
    The type can be the following:
    asbr-summary, external, network, nssa-external, opaque-area, opaque-as,
    opaque-link, router, summary.
-   
+
    [A.B.C.D] – link-state-id. With this specified the command displays portion
    of the network environment that is being described by the advertisement.
    The value entered depends on the advertisement’s LS type. It must be
    entered in the form of an IP address.
-   
+
    :cfgcmd:`adv-router <A.B.C.D>` – router id, which link advertisements need
    to be reviewed.
-   
+
    :cfgcmd:`self-originate` displays only self-originated LSAs from the local
-   router. 
+   router.
 
 .. code-block:: none
 
@@ -669,7 +673,7 @@ the "<metric of the router which advertised the link>/<link metric>" format.
      LS Seq Number: 80000009
      Checksum: 0xd119
      Length: 36
-   
+
       Number of Links: 1
 
        Link connected to: a Transit Network
@@ -721,11 +725,15 @@ address and the node 1 sending the default route:
   set policy route-map CONNECT rule 10 match interface lo
 
 
+*************
 OSPFv3 (IPv6)
-#############
+*************
 
-General Configuration
----------------------
+Configuration
+=============
+
+General
+-------
 
 VyOS does not have a special command to start the OSPFv3 process. The OSPFv3
 process starts when the first ospf enabled interface is configured.
@@ -746,15 +754,15 @@ process starts when the first ospf enabled interface is configured.
    configured with the same router-ID!
 
 
-Optional Configuration
-----------------------
+Optional
+--------
 
 .. cfgcmd:: set protocols ospfv3 distance global <distance>
 
    This command change distance value of OSPFv3 globally.
    The distance range is 1 to 255.
 
-.. cfgcmd:: set protocols ospfv3 distance ospfv3 
+.. cfgcmd:: set protocols ospfv3 distance ospfv3
    <external|inter-area|intra-area> <distance>
 
    This command change distance value of OSPFv3. The arguments are the
@@ -762,8 +770,8 @@ Optional Configuration
    routes respectively. The distance range is 1 to 255.
 
 
-Areas Configuration
--------------------
+Area Configuration
+------------------
 
 .. cfgcmd:: set protocols ospfv3 area <number> range <prefix>
 
@@ -778,8 +786,8 @@ Areas Configuration
    command makes sense in ABR only.
 
 
-Interfaces Configuration
-------------------------
+Interface Configuration
+-----------------------
 
 .. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 cost <number>
 
@@ -810,7 +818,7 @@ Interfaces Configuration
    Thus, use of this command allows the OSPF adjacency to reach the FULL
    state even though there is an interface MTU mismatch between two OSPF
    routers.
-   
+
 .. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 network <type>
 
    This command allows to specify the distribution type for the network
@@ -825,7 +833,7 @@ Interfaces Configuration
    highest priority will be more eligible to become Designated Router.
    Setting the value to 0, makes the router ineligible to become Designated
    Router. The default value is 1. The interval range is 0 to 255.
-   
+
 .. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 passive
 
    This command specifies interface as passive. Passive interface advertises
@@ -839,7 +847,7 @@ Interfaces Configuration
    value is used when retransmitting Database Description and Link State
    Request packets if acknowledge was not received. The default value is 5
    seconds. The interval range is 3 to 65535.
-   
+
 .. cfgcmd:: set interfaces <inttype> <intname> ipv6 ospfv3 transmit-delay
    <number>
 
@@ -892,7 +900,7 @@ Operational Mode Commands
    This command displays state and configuration of OSPF the specified
    interface, or all interfaces if no interface is given. Whith the argument
    :cfgcmd:`prefix` this command shows connected prefixes to advertise.
-   
+
 .. opcmd:: show ipv6 ospfv3 route
 
    This command displays the OSPF routing table, as determined by the most
@@ -902,7 +910,7 @@ Operational Mode Commands
 
    This command displays a table of paths to area boundary and autonomous
    system boundary routers.
-   
+
 .. opcmd:: show ipv6 ospfv3 database
 
    This command displays a summary table with a database contents (LSA).
@@ -947,7 +955,7 @@ A typical configuration using 2 nodes.
 
   show ipv6 ospfv3 redistribute
 
-.. note:: You cannot easily redistribute IPv6 routes via OSPFv3 on a 
+.. note:: You cannot easily redistribute IPv6 routes via OSPFv3 on a
    WireGuard interface link. This requires you to configure link-local
    addresses manually on the WireGuard interfaces, see :vytask:`T1483`.
 
@@ -994,4 +1002,4 @@ Example configuration for WireGuard interfaces:
   vyos@ospf02# run sh ipv6 ospfv3 neighbor
   Neighbor ID     Pri    DeadTime    State/IfState         Duration I/F[State]
   192.168.0.1       1    00:00:39     Full/PointToPoint    00:19:44 wg01[PointToPoint]
-  
+

From c5272b18784c4476b693baf3bec2cc5a02d6cc85 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sat, 30 Jan 2021 15:16:33 +0100
Subject: [PATCH 279/295] ssh: fix warning about "Explicit markup ends without
 a blank line"

---
 docs/configuration/service/ssh.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/configuration/service/ssh.rst b/docs/configuration/service/ssh.rst
index f6efe6d4..94249766 100644
--- a/docs/configuration/service/ssh.rst
+++ b/docs/configuration/service/ssh.rst
@@ -123,7 +123,7 @@ Operation
   connections.
 
   .. note:: Already learned known_hosts files of clients need an update as the
-  public key will change.
+     public key will change.
 
 .. opcmd:: generate ssh client-key /path/to/private_key
 

From 1c31ad7918c35c5500af3508253c007dfdffac38 Mon Sep 17 00:00:00 2001
From: rebortg <rebortg@users.noreply.github.com>
Date: Mon, 1 Feb 2021 06:21:04 +0000
Subject: [PATCH 280/295] Update vyos-1x submodule

---
 docs/_include/vyos-1x | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
index 73cc357b..8076176e 160000
--- a/docs/_include/vyos-1x
+++ b/docs/_include/vyos-1x
@@ -1 +1 @@
-Subproject commit 73cc357b757eb6129db286709812996ebcc4fd19
+Subproject commit 8076176ec68915b1148829f63ad3da25441f27e7

From a89503b4e0d014847f6e5c663a1befb39ffc3aa1 Mon Sep 17 00:00:00 2001
From: John Estabrook <jestabro@vyos.io>
Date: Mon, 1 Feb 2021 13:30:57 -0600
Subject: [PATCH 281/295] process overriding of defaultValue elements in XML
 interface definitions

---
 docs/_ext/testcoverage.py | 35 +++++++++++++++++++++++++++++++++--
 1 file changed, 33 insertions(+), 2 deletions(-)

diff --git a/docs/_ext/testcoverage.py b/docs/_ext/testcoverage.py
index 70714d6b..39028912 100644
--- a/docs/_ext/testcoverage.py
+++ b/docs/_ext/testcoverage.py
@@ -281,13 +281,15 @@ def get_working_commands():
                 while line:                
                     string = string + include_file(line.strip(), entry['input_dir'])
                     line = fp.readline()
-            
+
             try:
                 xml = ET.parse(BytesIO(bytes(string, 'utf-8')))
             except Exception as e:
                 print("Failed to load interface definition file {0}".format(f))
                 print(e)
                 sys.exit(1)
+
+            override_defaults(xml)
             
             try:
                 relaxng_xml = ET.parse(entry['schema_file'])
@@ -343,9 +345,38 @@ def get_working_commands():
         cmd['cmd'] = " ".join(cmd['name'])
     return result
 
+def override_defaults(xml):
+    root = xml.getroot()
+    defv = {}
 
+    xpath_str = f'//defaultValue'
+    xp = xml.xpath(xpath_str)
+
+    for element in xp:
+        ap = element.xpath('ancestor::*[@name]')
+        defv.setdefault((ap[-1].get("name"), str(ap[:-1])), []).append(element)
+
+    for k, v in defv.items():
+        if len(v) > 1:
+            override_element(v)
+
+def override_element(l: list):
+    if len(l) < 2:
+        return
+
+    # assemble list of leafNodes of overriding defaultValues, for later removal
+    parents = []
+    for el in l[1:]:
+        parents.append(el.getparent())
+
+    # replace element with final override
+    l[0].getparent().replace(l[0], l[-1])
+
+    # remove all but overridden element
+    for el in parents:
+        el.getparent().remove(el)
 
 if __name__ == "__main__":
     res = get_working_commands()
     print(json.dumps(res))
-    #print(res['cfgcmd'][0])
\ No newline at end of file
+    #print(res['cfgcmd'][0])

From 85c87bbafaf7a4281522c8fde2929f7deb5f4b81 Mon Sep 17 00:00:00 2001
From: erkin <e.altunbas@vyos.io>
Date: Tue, 2 Feb 2021 13:04:37 +0300
Subject: [PATCH 282/295] dns: Typographical/cosmetic corrections

---
 docs/configuration/service/dns.rst | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/docs/configuration/service/dns.rst b/docs/configuration/service/dns.rst
index 204b6466..0a65161b 100644
--- a/docs/configuration/service/dns.rst
+++ b/docs/configuration/service/dns.rst
@@ -9,12 +9,12 @@ Configuration
 
 VyOS provides DNS infrastructure for small networks. It is designed to be
 lightweight and have a small footprint, suitable for resource constrained
-routers and firewalls, for this we utilize PowerDNS recursor.
+routers and firewalls. For this we utilize PowerDNS recursor.
 
 The VyOS DNS forwarder does not require an upstream DNS server. It can serve as
 a full recursive DNS server - but it can also forward queries to configurable
 upstream DNS servers. By not configuring any upstream DNS servers you also
-avoid to be tracked by the provider of your upstream DNS server.
+avoid being tracked by the provider of your upstream DNS server.
 
 .. cfgcmd:: set service dns forwarding system
 
@@ -29,7 +29,7 @@ avoid to be tracked by the provider of your upstream DNS server.
 .. cfgcmd:: set service dns forwarding domain <domain-name> server <address>
 
    Forward received queries for a particular domain
-   (specified via `domain-name`) to a given name-server. Multiple nameservers
+   (specified via `domain-name`) to a given nameserver. Multiple nameservers
    can be specified. You can use this feature for a DNS split-horizon
    configuration.
 
@@ -37,15 +37,15 @@ avoid to be tracked by the provider of your upstream DNS server.
 
 .. cfgcmd:: set service dns forwarding allow-from <network>
 
-   Given the fact that open DNS recursors could be used on DDOS amplification
-   attacts, you must configure the networks which are allowed to use this
+   Given the fact that open DNS recursors could be used on DDoS amplification
+   attacks, you must configure the networks which are allowed to use this
    recursor. A network of ``0.0.0.0/0`` or ``::/0`` would allow all IPv4 and
-   IPv6 networks to query this server. This is on general a bad idea.
+   IPv6 networks to query this server. This is generally a bad idea.
 
 .. cfgcmd:: set service dns forwarding dnssec
    <off | process-no-validate | process | log-fail | validate>
 
-   The PowerDNS Recursor has 5 different levels of DNSSEC processing, which can
+   The PowerDNS recursor has 5 different levels of DNSSEC processing, which can
    be set with the dnssec setting. In order from least to most processing, these
    are:
 
@@ -53,14 +53,14 @@ avoid to be tracked by the provider of your upstream DNS server.
      not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the
      DO and AD bits in queries.
 
-   * **process-no-validate** In this mode the Recursor acts as a "security
+   * **process-no-validate** In this mode the recursor acts as a "security
      aware, non-validating" nameserver, meaning it will set the DO-bit on
      outgoing queries and will provide DNSSEC related RRsets (NSEC, RRSIG) to
      clients that ask for them (by means of a DO-bit in the query), except for
      zones provided through the auth-zones setting. It will not do any
      validation in this mode, not even when requested by the client.
 
-   * **process** When dnssec is set to process the behaviour is similar to
+   * **process** When dnssec is set to process the behavior is similar to
      process-no-validate. However, the recursor will try to validate the data
      if at least one of the DO or AD bits is set in the query; in that case,
      it will set the AD-bit in the response when the data is validated
@@ -77,17 +77,17 @@ avoid to be tracked by the provider of your upstream DNS server.
      queries will be validated and will be answered with a SERVFAIL in case of
      bogus data, regardless of the client's request.
 
-   .. note:: The famous UNIX/Linux ``dig`` tool sets the AD-bit in the query.
+   .. note:: The popular Unix/Linux ``dig`` tool sets the AD-bit in the query.
       This might lead to unexpected query results when testing. Set ``+noad``
-      on the ``dig`` commandline when this is the case.
+      on the ``dig`` command line when this is the case.
 
    .. note:: The ``CD``-bit is honored correctly for process and validate. For
       log-fail, failures will be logged too.
 
 .. cfgcmd:: set service dns forwarding ignore-hosts-file
 
-   Do not use local ``/etc/hosts`` file in name resolution. VyOS DHCP server
-   will use this file to add resolvers to assigned addresses.
+   Do not use the local ``/etc/hosts`` file in name resolution. VyOS DHCP
+   server will use this file to add resolvers to assigned addresses.
 
 .. cfgcmd:: set service dns forwarding max-cache-entries
 
@@ -206,7 +206,7 @@ Configuration
 .. cfgcmd:: set service dns dynamic interface <interface> rfc2136 <service-name>
    ttl <ttl>
 
-   Configure optional TTL value on the given resource record. This defualts to
+   Configure optional TTL value on the given resource record. This defaults to
    600 seconds.
 
 Example
@@ -304,7 +304,7 @@ Use DynDNS as your preferred provider:
   set service dns dynamic interface eth0 service dyndns host-name my-dyndns-hostname
 
 .. note:: Multiple services can be used per interface. Just specify as many
-   serives per interface as you like!
+   services per interface as you like!
 
 Running Behind NAT
 ------------------

From f7749b67c67c7addcd8a6bf676f1c9ab418fea53 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20G=C3=B6hler?= <github@ghlr.de>
Date: Wed, 3 Feb 2021 16:02:18 +0100
Subject: [PATCH 283/295] Coverage: reenable coverage page progress (#441)

* Github: correct branch for vyos-1x submodule

* Coverage: reenable coverage page progress

* Update vyos-1x submodule (#24)

Co-authored-by: rebortg <rebortg@users.noreply.github.com>

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: rebortg <rebortg@users.noreply.github.com>
---
 .github/workflows/submodules.yml | 2 +-
 .gitmodules                      | 2 +-
 docs/_ext/vyos.py                | 4 ++--
 docs/_include/vyos-1x            | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/submodules.yml b/.github/workflows/submodules.yml
index 129cc895..ccbb64a6 100644
--- a/.github/workflows/submodules.yml
+++ b/.github/workflows/submodules.yml
@@ -16,7 +16,7 @@ jobs:
           git submodule status
           git submodule update --init --force
           cd docs/_include/vyos-1x
-          git checkout current
+          git checkout equuleus
           git pull
           git submodule status
       - name: Create Pull Request
diff --git a/.gitmodules b/.gitmodules
index d3d92138..ff51611b 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -1,4 +1,4 @@
 [submodule "docs/_include/vyos-1x"]
 	path = docs/_include/vyos-1x
 	url = https://github.com/vyos/vyos-1x
-	branch = current
+	branch = equuleus
diff --git a/docs/_ext/vyos.py b/docs/_ext/vyos.py
index a4e130e5..46ebae36 100644
--- a/docs/_ext/vyos.py
+++ b/docs/_ext/vyos.py
@@ -20,8 +20,8 @@ def setup(app):
 
     app.add_config_value(
         'vyos_working_commands',
-        #get_working_commands(),
-        {"cfgcmd": [], "opcmd": []},
+        get_working_commands(),
+        #{"cfgcmd": [], "opcmd": []},
         'html'
     )
     app.add_config_value(
diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
index 8076176e..86209c67 160000
--- a/docs/_include/vyos-1x
+++ b/docs/_include/vyos-1x
@@ -1 +1 @@
-Subproject commit 8076176ec68915b1148829f63ad3da25441f27e7
+Subproject commit 86209c679c6b7ca9d5bac1f67ffd391b9b16c008

From f870e6ae93420a6f7eac202646ddc1050bcb382a Mon Sep 17 00:00:00 2001
From: sever-sever <v.gletenko@vyos.io>
Date: Fri, 5 Feb 2021 18:01:22 +0000
Subject: [PATCH 284/295] bgp: Fix redistribute parameters

---
 docs/configuration/protocols/bgp.rst | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/docs/configuration/protocols/bgp.rst b/docs/configuration/protocols/bgp.rst
index 2d9c9af5..ddc7808d 100644
--- a/docs/configuration/protocols/bgp.rst
+++ b/docs/configuration/protocols/bgp.rst
@@ -509,22 +509,22 @@ Redistribution Configuration
    redistribute <route source>
 
    This command redistributes routing information from the given route source
-   to the BGP process. There are six modes available for route source: bgp,
-   connected, kernel, ospf, rip, static.
+   to the BGP process. There are six modes available for route source:
+   connected, kernel, ospf, rip, static, table.
 
 .. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
    redistribute <route source> metric <number>
 
    This command specifies metric (MED) for redistributed routes. The 
-   metric range is 0 to 4294967295. There are six modes available for 
-   route source: bgp, connected, kernel, ospf, rip, static.
+   metric range is 0 to 4294967295. There are six modes available for
+   route source: connected, kernel, ospf, rip, static, table.
 
 .. cfgcmd:: set protocols bgp <asn> address-family <ipv4-unicast|ipv6-unicast>
    redistribute <route source> route-map <name>
 
    This command allows to use route map to filter redistributed routes.
-   There are six modes available for route source: bgp, connected, kernel,
-   ospf, rip, static.
+   There are six modes available for route source: connected, kernel,
+   ospf, rip, static, table.
 
 
 General Configuration

From a1297a53f7e3684effd0e554a50ebf07b4955e69 Mon Sep 17 00:00:00 2001
From: JACK <jack9603301@163.com>
Date: Mon, 25 Jan 2021 02:39:47 +0800
Subject: [PATCH 285/295] nptv6: T2518: Add document support for nat66

---
 docs/_static/images/vyos_1_4_nat66_simple.png | Bin 0 -> 21021 bytes
 docs/configuration/nat/index.rst              | 731 +----------------
 docs/configuration/nat/nat44.rst              | 733 ++++++++++++++++++
 docs/configuration/nat/nat66.rst              | 127 +++
 docs/configuration/nat/nptv6.rst              |  69 --
 5 files changed, 862 insertions(+), 798 deletions(-)
 create mode 100644 docs/_static/images/vyos_1_4_nat66_simple.png
 create mode 100644 docs/configuration/nat/nat44.rst
 create mode 100644 docs/configuration/nat/nat66.rst
 delete mode 100644 docs/configuration/nat/nptv6.rst

diff --git a/docs/_static/images/vyos_1_4_nat66_simple.png b/docs/_static/images/vyos_1_4_nat66_simple.png
new file mode 100644
index 0000000000000000000000000000000000000000..d7c54115e802e9add71090b082e3e03e6ba369ef
GIT binary patch
literal 21021
zcmZ_01z40_*EW11Dte=&gpv*dQqo-p0+JE}4k-voOAQ?c(jYD3fQo>0H$x~PEg&7E
zGz>8G(ENMG`+dIW{l4S(IF#X<z1LoQt+mfp`!e*QhSKGKuKfc+(B%ip3fd5KmKuW2
zC|)=Np1cu<yMZ4UpDRChg&?wK{9mF39x?_9Vuc<k+|l*?urlfK&SCU1dfy`-r5Q!z
zG+86*Mz);zUPGIw@{G3X-D^Y~^a5rxP2{bu-!GAqr;-E{ZH)+9tXz*E>1q@hF;lz?
zyZPzo@<+Yg!D{U4bJrYCmoe*L(SQ#*%Qfy6$bV{=SFpi{R~{{_j4kBn*4GX>rFrCM
zaNs6x0>+@{kMs%zs1TQ-A*HOzufy{R+6dnIRvl4>1i0l;iT$_<CL4kp&5FL?f^N%4
zT!eSOAFw(1B2C$<Ke^6w^aZxka7RH1MYcfxvS2{0HAI=>tYhVX;~>0y?8nHOyQDk>
zjUbfC8h5GB`rEAe4%>u>4CxKqcp!(?7Yi<XR~HO$cO%gs<A|Za)t9r7y?i9R8dFxf
z|Ht0ZfM?EaJh37{n}=*mrt)#2ga!|@=F^gU#h!N+K4{qa@7jxr$MZ*p{@52T4E@nu
za1U<S`pzo7-*Iroz<j@YI`r2_bG;R+-&Rk2)%q+18D4HD8nJrW==4i9(bC%WJKT=)
z!Hru3a<e{b6WdFy>ocLcxsUBc?b4-pTW8vHKUA9_vB=T5g7H;e*@E(n@(ez^$pBgi
zDvDezB87^i>K8(lc~e(f-tgFn<=pvA9=XEEgcg>nS5jCW+|NxNa`>fM!Nig>B3@zP
zBqm-~Z;9Vy6xgG%VnoQz$D=7_FK0yV-$+%)let2fHE`+WZ<RKmR32EUuA-f)f;S5h
z1SP&@40LF%u%}!?jJFyIo(~CG^1F0~a)~d-%^hV?a8((CZa<9yV-yV$QabB?g<AX!
z)btiL8npwCAwM>s1PH~@QVy?%ge*wGVwE$?hg9q+H)MP1XKH%-HxeDfLuN!GFE-Qn
z;>5OsfxQ~C2!DC8%BfGkgpl4@_C-k*meZWAXHspZ&Ymi8i1cQUQMN8=(JO_grrC<x
zp_Y28zkLlEL8#eHIu6&;jn!jq@_qQ!iVa{1J>`ZwquB#0Je7x5U!VQzEWm6t+x$|^
z*W)v#FXt^_h9Ct}A7$e4=pm_uo*i20{xKEne}X;<c9xV|rm(L2@h7W|7b^%MsR8#K
zu}jnIQB&VkRF({6mJSOX+O}E*JHvKpJs+uX#@c9gY)zW1FP1T6yY)o180LG|KE8a$
zRKd4*$A~k9Pl)mi6!=vu&d2dm?RmV#8!~M%;(r=3v;zS{jpZ@_``6+E7{&du676bx
zSVGB+v$WOt#yh5Po_vL01>b{nTwN2AAEUSG3dY?Tvj*2H;02ft_m!I@5OkiVorwN9
zJa=OKp}(7mxXcG8?x&mky4TaxvI;l((tQxd2WG#0R=rCf6^eHxj2-#9JJyRy53foj
zF<%6;sd7us5Z|PYzKk6ct?+U2bXiz$uBv}JEH+;9PqNzel+ba6P>gb`MPh|{1<l!}
z^xg&uK^eE_E?EnQk%+b>1ZGtue{{vIHmUw$sdjRMfM|fD?b=GRcXdY!6$D)ph$R+~
zh+W#Ay&TNpBq37cQ#oY2w6XE&6O!$F9NTy4H^EB(?Ef*km88LyQQ(rJ>Q!%QBQl>;
zKI$@eH`@(iwR_~-{+O2Y{owNcaI~?6zst#l*S*&eWcC|xp_+E6t@TgGmFOA^H1p#w
zViLq!ofkTlSelb;<%4qT48umv3&DYm{$f|UC}hKW{|2?HlS&yTQiq>Ka${O`)!Ty2
zgbspU;~~JJ*mLElAy&$B7>V*CRhjMiPJ)&4U92EJ)Cq02(xakxo&NS~%ZbtFPvp#2
z`TLNwFC=}o2lX3{-B7xtT`EAM=dVjb<8j(PPW4N>9w=1ORYcS!dA9{7+=TB82gw`N
zt1)qOw|tLB7a9)77+~fRk~{q|Nz6W<#~p(W=^@B~EtZ(#d<Ip!u2fniXI$}9SfaA6
zswJ?_P^K(X$z`cY$J$9p5ySHLSg$0152>`;g;(S_z1w55Vh0<+Q~m=}vbibcMH?#R
z2T7?XJv03Eys$~cVXf)O^1gUfu<;cLT4VuObV((9Vtsvat$ljW^NFvBxX9Bsi{Y(E
zq*bmKxBmP*w~mghHGkRiPK<FJx$lb4Ot$VV<iVaaa~*ETumWynu=dS&DY|}dPFT1U
zCgibuG*RtZ?D;LKEjGC;>ez>2uA?h^0GvzLnn{hU$!8UIJBk_C_LACFf$K54L1IR1
z(>YZf&|APjrp`FRqM4B>pYVVK7=f-#s(RKmf|oKHStsD`VtbI9;<V}4uqv@t4$tU&
zE*r4#;eIVrfg?Y@-U~g&a`=;^Bzt!L<aX{Z=Cn8MLrRM2U?sf;e9#uyx7!oj-Ie|2
zZ8wS{ZQvCDSa3?1-J4ZXBAaw?TT5|@;;XNG+xygUtkehHyqCJMfn;OLZZ02|7J`*q
zZGD?KN=_b)(-|m4O7e`_W3!jEm--e`0~U;(MyLNgF@M@j{?h!Gczm~&cDtHTa!8v+
zVn(@~_wx4IMsbycv}5I{^R;|L`RKdcp#{5gwc>YNw4CHDRFs979;CF#TDf=+YPV)#
z(**d2Pk&@d%#d?RN{&8l#M0!<i+<JCzDEw?O!Zqon~KeyBdx_+KcuF5?e19g)}JV5
z>ruyylQZv;upIt?^Gun)WPO*ftJ&N2K_cK!q$}O6F8(^pKkk#Ih4ua``*b<NrGNA;
zK(|EzPP<cUvO5K|jpNY%;WslBn7uohur-(-a1PxAuCuwUtW;-3F`|weUsN*6Rjn<c
zwXd!2mKL)3%rEA)^_VWo3b{|ucA|ajr1bx(6o8=5Z)TyqXkZ{X+08#srSi-D7ki}T
zJh9_0OKv0gFUOCn?4<D5?KOw<OBXPlogd6f_20>M5<UkYQT?6^G}JU@=;S?4GF4b6
zCsMr?%<PX<tm_R-Rjl0_*7U~|)0qgtO0#-p_NyB<YBWaf6G0Rg|Aq^VyA{|9L+t*~
z?<(0IlkN-A0ei0=PuY$rZ@lvxe{me_f%V>R&NkqXt#`tXrYpT-y-<4#fE+M;gE&09
z@|#aGez7?P{En%V|M*L9%IL}Sh}kWV$>)1P7H#ZSZ947QGo0TGE<k}zSs?TnX)POa
z^4s%M!Fbfq^^p7aj(@ww30EZDPxGGz91wd<q%xRbY92w*@At}Nw@-Jc5UP$<5+8c~
zjy{omFJKSbjfh73eZQ_{JFMO{d<HW64s>y{+OSGX>2)gW6h3aBLm%}jE)J$mf0eA3
z;xDI*I=svbW0Kcl9_Z&1EAY>`m>Sr(seTBuKNCy*Gs~^`Yy7ni%hK$pBjpP5g7c%p
zXo{Hrprs-^BFJnV(Dy%AA5uj9IHZ2FtJK=cs+MVC!mcpLm=uCuMbARp_p_&%&y?$7
zc7(0J7jU?ov5?#9Zj;B2P{TIA4KuGIMlO*-ftTBu`x|$(;n8bT<re7FKkdl<m>5r?
z;_Y9BM<dY@<i!Gu^ZWU|zH2|S2U^ee2JH0B^fu5VB!PQ9L;4LG)}v>d@;G$xajfTx
z(cqJPr=Ia<tJ+Pd+TyE3Y;TZ($uIgCi-n%>5bc8@k~Q_Yk}Oj>IDgXj0#YcDsLhA0
zad1{i(J^4*6*b8&u6{yN$fd36SbSv^<zp|BqGG%%T^uu?Tkgand9Z?MyVcc;W9HIS
zXYpH>ri)@C#~bK*`gWo!nf#q@9NK3Fg?pAyRXlQBIq8DVuUxsxLRx#Pu07;K3i5C_
zCLJw#V2c{0jfvxD^7><EY8|5oL1JgX^axMx{l+$VDWPhe(7NNEarw<gzq;>53Fq#t
zchi|1P0XN|YaAUAYsJ031q09C;PLfUYX^<uw*sOO_;h=-bii+&d(y4pqh09J5he6~
zqV!C$!N~nTw(;7BoE&Swx9pTI7-h8LR;68MpZz9zGJFndybXK^T_1e%bR(J!`{5lu
z^Fj6LT3l_bA~4Efo)i_-Y9@n;l>av!?o<^GCi$y~`@qRw*>#0(x%}qyh`>(9X>bJ0
zQ%7H#D|wRiYVZMPocw+txm`Z_gukKVJ9if%$UyT3$#3<s62}^>kHYK#*8ka!H1b-;
zZ3}bHy?pU0R+Uv5x0@?)2%^7<A1J+xRnHtq5BfIlXg(L{u=0CWgR(vPXV^uk(HkZS
zIbBQsa0P(Un!XA!u>)&0C&#jj)nq^er0qnWIzn+&ln3z@wRF*GS7JI=j7EYWNZ=s|
z%u{^%DPjsRZ;US-cx?Y#O3%_bEby8C(MPc2kHEK!4=ya+pY7_h9|`)X+16{ihiW)@
z8N#?fG@y~ogg3NHSEN_Y1oAySn6;twT54|h&PA%0+H51VZA9b`7cF}0c56b^kP`a`
z9`y_aDP2RnB%b=U>Za&{)tD=B$nt4xA_g+T>?oNYb(|i~6@EzL_bTw%ZqG_RJ+R;a
zjtYW?t^z|)_Vf2YU9C(-A{ja?aS_o$#$*MZ3oHSj`_|%nO!r#TPWFF=>V(_z5J7=E
z3NFyCej72_tlF8z`lP6|ADIJ(h=^cg%7X5YI+sn|bR)@=iSQ=?3>q7O{CE;FGb33d
zRwuVML*wSWkKatznu`g)tSEDXZ7go_-_TytPxI#>sKWrLLukGS=`@T1#{!v>5^$8E
zZ{Im4DrRdl1RMX{-`=d>aQH#X<zP<VD2st0BaT?&=UxfP)vks0F)U0`*8NHv$dmak
ze!Xjv_EN@OR^M)2=HbdnmD;o|9gqZ3$*MQoiVIM^8dxi=2HCU3R+yM&-M{b4i<A<T
z-D+0lx26g`mgdCIlimFm9*J1^rOF=%BH0mEHz#6!%dTG=)H-dN;P^7{?I{Vhyu3++
zP_K&c&gFw?q)ej0xSQJ!#KRe4^74M0@geb;og%v?l^wm>(WSF5YzE)|M=-;7%RsUF
zyD|E;1q=wjsvj{rS@*vPiPG$ujFbZ-Dgs8d^Ipy?M@m1Z5}p<?ZTMvPWw^}Y0RznC
z&t7{GDL})w01YvgFMn4z9KRQw$MnjbMlP6KsAc4R$DLp*=l_k~b^b>#VMSI82X-@>
zu^sQq$yAA|(}cJzUv$G0+^v?^OAoKc$nRnJdxmYTqZnm(I{Jz_|0O-hrP=ESUkxQb
zj7n=*UtTIb^w5~?&n^lND^N=F`2#%QqC1lFbh=PxJ`Ln=F@WQoN14_tbeZ7HJ4oOo
zG+n!LjyJ&r?Fu9A_j~#VtWOq6O~qj7<No3KUQ@s+I7f`_M2kwLaM}HS9t5u*Ba5`K
z@L}XaYJ-3{OLU9kKVB$}V^z+q%z)MClje#%;&6sucVmwn-8FAVsbr(1q>-U0r1UAv
zX+wiRYu(1mR-x>%+Q=Lb;2v;TX=l)Ba$d_TxrJ?1p+`T~-Ksacatmb-j>75Y=Z$-N
zt%Wv5-Xq{2xb&F=Hs*8&gt1jKyYC!ALo6TftGyp#h4C{=pNyv+*9p!~*g44@CKQGW
zKG8o5HU8H5oA{WGs{;GS);ZwR#b=eKBBm``rcXkdd|KN$l$2V7--L~JiDv0A#6-=+
z+wLs6%&kmJSoETPt|73sJM%0jjfW)mFvR#$t3^eIKB~@ecuNj95{LF&^P-gWn_Uz(
zJu;*|%kYpD1ka%$BFS2L=)Ae!R4nVG$l)=zF|wIeroFEwm7)QR_9?6&VGYIAho~u7
zC}+%Cb?e-z!5CZdm*OUl6E*9$m@tDRG&KuoiQQn+z0Ia}r2JufwCSnG)fjMy_X-0J
zcWg_qo}Eu<OY>Zn?%i}GhM*J>1=(N7aCf#ZlaNbgVd9F2dK&ysyZx?recx(LJ{<L!
zOW%5dTevh-cXKTmofTi>g-vZZ{1oiEw5_OL|LG;`-Zvf1({3Hj@E<;F{+*oYou50t
zNt9kY+sO^S(}r1@nfJelnR?HYnsRIQI@;%hFvA=~&~Z2Osh8Yf$gs8<JsHO~drEc~
z$NFReMoOb{#?6qga@=?$a^`S%>JY^ekrk_wt=X_(Og`mr$D%H0*o3j}JzmmpkbA_<
z6B8}xdHNkU<=TyV$Q?O9pk(T|oWM4aQ4->5ypX_I@3&G-xA+i5EnDCmIj|;lPHlY(
zZrfd<jk(LQ^}+{@0N(V5d9j`UjGkG9q|0&_UFyMZD5(xi=tJ-6`gbhKxp$3+3BBT`
zp|0NGygQ-FsbTVte}~zAn1M4jU}J=ozlO;=ZW(09bZj7VdaW%@zSeO3$z%3SIE*T~
zWvzBDlf<#X0k=1jh&+B+Fq|fLFc!y;lF`rKVb+3UZ_>7gwYUi-YjBuX@WEQ&Rm}W)
zpYNS3t8+_S8kr&NSs?Cy)SR4NsGcT4c~%X8IV(UlGifcjCbQJ@#e9#*wf8HsfK{~n
z_fO+Eth7Y+KuO;7PHIXv7e~a};6PTI*UpZxFsTmZ2Sn|_v$0SGj<nkOs}qiuQnJz>
zyAu=pq^{PzBqx@c5un7<t>gk#WK698jC$omhCUv0b9}<<_;?6JPQeK5n0&DXx;e_t
zd~3H1A$vM8F#*KH*<&i<eV{h}_}R@(Bd6uPjR7T-6aZ-A!q;h|ErY|_?Qf;3HBUQB
zQx1=9P85tUA&^l6_M&#>i1hZb2Ou201GZzB^T>)}$AvehZi5e}!7Nv0aXK}<_?6eN
z!u@8_xTKJXq*RT?vuADVKcCAbX=W8xe`*%J8iU9ZHqGtT%W(y1b@je$sjF~;N|Aks
zORgS(1KWeyrR0GuR6%VkILeUWS&%dO*J$`S&PRkqtd1~*^V@SVsd6ZCa4LDIN2zIC
zX>D6oMHK0&%nd9VaR8?>5b7zGpwc?CVZcinKALE0m^h@uLqjjf@m#h6<ArproRR2`
z8dxc_>jqg;UL`zf4Jas6PF(-}`&-8E-pdEnYh`a_f+ESQV0_uC^=zq5mP~K=T(E0U
zUng^Vyb9fBP+!c^qH={n7cJ?M@2wb(+#Q3S@^NQ)xoxSoU3}+`c7~X^DNjOjBuL8}
z@y4ZAE;C@SYhK*E7=_ARmeYoF#<oA@i0jG(=`C+e5#UuO(_y^C-oYk=j?;iaex112
z9aVs-o^)(;hVx}jI>YldO6O`tSV1mwpXcx@WN#TYU@OKA%aM>N9(zE_aX~6yFKduW
z%oLb&ZY7_`=X0Oi-+k16Pa9+OM1mGwmk|ewKCi)k*vdQdu+^YemBK()3+j3ll5RXi
zhWZb;YjJLM3``g`wbZxs$vN6N5+%!W><|=K4){0JJ)GHDZg_w3pObIH1wR_zt~f<E
zn{RW0h=anQ`kV5IC}fbm)ugyz$^UM)#F&yd2B!i`R+EV#D+Kuug>jcFRKXZ0kYJit
zzoN5~#^)7WlVU^;h=WLr?+2>oqT*4fymjc7nVl=}ZV&~CLJi*rtlMI_JxNAGE(6X3
z0qc^x#h&P1P_MJ6h$SwX8&RV2-u(xY>czeB)b_vTE$2+17R{7s&iT8(!vPm|`zG*w
ziQD>$a$G`(^Tav1o2RzCI2HrNtAOq+<nKT}&I?B>HgGw%ed|_pC(Z5Mw^8yb{jPc=
z8DM{lAWAaSD3<}1Tv$xc`|Dn6RMEvdppbomWm2Va2-IE2^J}zgBz*U?LD&g>Vg<vM
ze;*ERMug0UTO=}(;=O2~IDjy|FWRYOXXInltV@FMaVAuC0hl)TSiX1G<U<v@;6)vL
zDUu94qw+;#cDQKX{Cz@+f09G$r;_aU2CtDK8bEBl{C&AbZMG-|uY>&XS?F~a4h7Gs
zOzp3-EN%f+`H|1S!T#XRSYo{po2@1lM~+u^AP?Bh6I;<-jjZhQM`p5kYM>Ap_;WAS
zkgqpP`AG<2fkFHu-42jiwd;x{^bnG_Mp2-v=OPS`vIhFc%+catCLef00cPg%Zgbgm
z{zKTP9k7<`U*j_)FKRC_`hl{PSuK!AO8)3q2@O?4y(iCP@WCWhKnFIZJ7u1x?ffiw
zh+s$#uYihkRBSrv<5U)6v+eO=7L*4vp%Ix#Z%`dCw;ad<cu>IvbpJr6(6F%QB7wdS
z*iy<DA$iM)2iBYIx`bdA(u)Md-YBAets;0kd+3(%q8+CKw4SGq=j$)r{~}R$&+eoT
z$j%}3&ZVM0wd!9O9qt>k1Ws1Nz~nsd{1t?Bq9t9J1wKTBe#(P&Ul<MB{POlwp$;R+
z2`Ly)Bo-!^S(&QMVW@m#;7Jm2%S9Xj7t=+S*@xYEr4zF>L6y@!06e-^Wt?Tg7pm;+
z8LWMD4-6b<Ccb8NeAR+GgNrh*otFCIK|Fv9Rv<1+p;n5Aaa)DO{`9lIVju^L_e?lu
znE<;`|B08w`SahenaN(Y=m4|Z=if|+>W<9e1;zkIrY@Iz^{$Q~Wb{Acm%nrcJaYu~
zu=L?95us1<e>H_q6^4|Y(Bk;%GaFC;P8SA4<(3B}dog3hp7<6CA0UbWiF@9wf&s^0
zoiHI0wKPy!#fRu-`4JbnQ9JRQ-vtS*2LeslJ<9F!N@WOVckv=T!zUSb(-Qes>9EgX
z1nIs|bb&yk_K-_GT=|wfV>k%rK^fVM7}(s&Ah&D%LaTYGy+5ctfQ7|qLG&3nU?a*v
zlX2y+9;oXk5YMqdQ@^(gTQNOB|Ad-@E>CGawq?5A$e)lqLSn?A<RY2{{8g?>_NPA=
zK^6#r;07?*!HX|5cH$LR3}o<`1|)V73`D{$TX85)nRahru&mkuF1X#sy7fwj3^lp_
z@&St6RVH_S>vs&mVtFFQ#PBP#!tpskPNFq2I-FB`l#y^0e*owj&KPhkGZf9xb@o&u
zs1J``M&sIP+Vv8Oc;SWM^CE}AO|{>L8w%WUd~fj8k=qi0oM@Th4kEW8p81*;{%}$l
z-yr#Idj?&YXsvL=l(BrpfS{$<ZvZ{@3>hYXNy(Xb6)S)+z3MX}cgjXQzQ5)A5Z>Ok
zKuB<_7l$%Q(|+<S0&lPoJ{=njlFLw&(z!su1HAA$pNZNb5ju9=^-f@jEYK@E8fTj@
z<*hQ4Xc=q_P^~fXwhN?}6QB8tRXI~=NllI*l!|`<xfs3DWw-Zm!*hfs4FF?x?KqUJ
zm!3C<s}FCdMVIi2c!r3j+FLbC9UHtJpj&rcAlm<il0a3^ji97NyV@m~r1e)-<l&PX
zXv9UCEHFelL&QPtt;&M-k`Y0e_V;g)+<qS!Hd9ts@z1>(!r?5sAHzuDPJk27zi<K>
zF}D+G>2s-HwEz=^5-t<A3xG0E+3r`TaaKNG3SJ_CxoncGH3T#PC-d2d|MQG{OQ-dn
z8;2%dUyY)GycR&A@l}IFB!ARjKoq;}a{G$cnt2)(Uh|L<ODr+$N4zRZF5@mN`C=_7
zsRypUm<{}4^Q+?)-d><w1((}pRRubQ-QfTQ?%JIk0>iH|iTFTqz4hHxy;HLN^%%9k
z0!Q3+x&0boNF~MqK~P=bAWV{#djd>ORKSB5*GVUsY{1m28S>gBEjFb6X?W<_zpE&^
z+`b`VyHzlb(Yf|_+YX_#flUjbw*`No@a7FC!L2Nkr{BCJVWCzn!VVjqcqkL|7Zm{Z
z1rq5OcKbLESIktOAy7PKlQetlUW-)BzX5BBxtQ@6Y3wa-kX+)mP_y(e*5pdPL_q)5
z$l1Ubj|zLdOopTWYM)G*j9$$c^jMQDpUAQkv_FJj;;GuhrTnaTmVbvagJHMJmp?32
zBY0yvqhI3>L}MVUq}fk5B%;)WQVS0qP#$PeoDUPc<Akm>@|U31d`&RU-(c9sU;h_!
zod2ht=+*b7GGHj$VSXU-hlZHiiHN_QRmE^c{taEAJOFm*70QJ$hbFwKUGs0g6`TV=
z1jR54T=<|-I+(}Zg2w}hA!s(xf&aow5F#kJ>{Ck9f^rqmZIgmaV}*Wh*IqqcG-oLR
z?I1C*>bPOnBnXpLvZvQyUm(bjK!Eqck*yaX5Tr#Ag4h)>(x6-htSu8`jz8;xk%}&j
zh(R0iv3zg_q6iTJz3&YYd)0q&hd*MJfIARF6ksSDo_f(&K2_P$rG+pw<ZLW)MH)Z=
z$H9dDd*7)E=YoO;%ol!v)$bIB#qvkN5xfM@`}`6R$ox+<LXfRJGngOuzY%0a7fffU
z$L<`&|8vjc?=T@SEOPm7nl=ZLi=d|4vu_!TWXlNQNVye0FbI4Io?PCm*U#M^(z#a2
zEB$xT5U?nSNXcHZCU?|YR#yN7CENx0BE0{12R8xfn*W6-7s%U*4BumY20QWqsn2+%
zW0e6s*(CJGUwrwLJ4J;M6Hov=tthZcUv`7T4Ob392uvXbp4<d@0>Y-5u@ZudVO>@x
z8~MzgVPo-9S1L(mfuL>(P<zm=*y0Rk27THfFcJvjGQ+o(BU!qPQ=dc$Dl`Ofh@l2R
zv4{s5t{^BP0ANwzY+!!IV}1{0MFrtZjlf6Xq{Cw3t~D4p1qC~%a893Eo@e>@n_X)O
zN1)6yItu%EhSbZXQV&TTGfm;A(x~U0z;nCy5!UT}0p><rvRcItL?k3IQq?izz2hBR
zGZ{6Iyd;JE6myX>IZb-Ory!(x*rNGia+*-<7hzy@f%)_OJh#(L3LaUldfp8cv1P9u
zzsfwB0i3)x)Tnq}^0zll7(NVrY36v~R{N-vPKmFR`Re4Hm!r+v#8@x-Yf|lGl;!CD
z^vGE6c{4v_?{msoTZt9g$#o&|^F1D8mwQ)Rr$dW)&O!DdjL_>m%VBWvEvjXBjy8P(
zff<yf<SI&~D#}24o%=a-*PeoMJSsedk{WId>{-bLxW`8e3h@Ir=U+5TUGB~_S_WZl
zY<t%MlD4s?x`T%G!b^?XPvw^5#S}beA$yTn;sSjj3%}TQvbpedjOV;!{z`w=S$hZl
z>N6q?G`$$wH?3aZDWLP9i9KxB)<ay6?e6~IJgE_2Ju>HW`dOxQ`i{k!tO2T+eb3D_
zyTps<E57m=6ODmlh*XlA<v{XXgK{EBjHI0?mqPOk2r{!KpG$SiCCYc4I|&|(<dHqB
z88$X_hs1_5^aByOCaGy*ZE-=Lob?`^34GDUXOgEOCVm69Ggc?qx;5cqlLJqtq3m5v
zRMp8>6kRz(WdCsvOe@t(ZD57nq0sFV-YQ+lNvg}f0MXy5TL>I{T(dM{Bfer#H<`D?
zOn#<eGOw8Yioi&sDG_7Vq|eW-8WXJSJv|91@I@xLs6vmp91@mdyx^3jVZ1atY_Z{?
zxq@!S2Q5YafSe8dtP+a_aU>Lo54s7z&X+32Ypd9mx98r3x6+Q&Qf}0B`x-+$uU*a=
zOndp?EF{IZdGF0$2@g6wvG(6=B3Wa&#vP{Yv{*DfW65GPNTe^7mmMFnsFSrKe=;-D
za9r7MNls#>6XbJl(ND%_?Z{g0a38%tiS{t|hzszA8sSA1+GRJWLQl6mPH?YCc012U
z(CGOz>YT0$2W*ozROuStTWX72Qs1|OV798pL~>iBy{FTs+r8pjZ6r`0<rd@TIa$yI
zIITxn#f0$s)#a756de`OtR4U2jGA!kq|+IlVlgK!>Z|xg^P8IGba4vhbN6T*_yXGY
z>u@rr34Z+(^@gMD9jV{T!IQoNm#-i3L0T;|KuEM*t|7GJ6+R6`_Z7G-BOaePw=^+0
zH->#TFCOte4S@<mcmUk<DU-#NZg)ywc&V4`zEqlYoXF$nHA?w?kbI=t)%w%Jsuc<1
zM#Y(bK=+yfte6Ntr|?DGac{XVEJPa~zn#ga;&eV8Ug4OYQLe4R(+9W9FVlwG*==y;
zCk%CH!wpq<ENvWY_*7)%pH)bgXO?=x1zVq{Wc4q($)%C67D6Ec1we!4tda_S{l<;9
zZ88VmlO^%mDAQB#Cm|o{8g!*-OU*07My0F_^Ecfr);^FiGF6##mIi^|tz!rI<x!RK
zM4HlghsPCqi5U*6<M8M!k6KB4x;)^Mx8p-%zEr8=u2nBxc>NM=_M`lb;AfBh+q4uw
zUvbLZsH%75P~q3NZl#S^AH7dj+Orzge>>F5@BAU3@WYX3#&T)FU~N+pyOBx_`_=*L
z34O$ss2Sq44w~>68^oO@>;f>w<`9*UgVxY4-9bsywe9nystNW7n&b*h`oMp~-!j6i
zy~c}&;NJJ3YEPcgmO`nW&C-DVw6$8B=}Q0oET?xqG8?U@bLv=oa+c>DYtMtpW=Z#z
znD>7u)#L7^9ZxKre&;`4G$!}keuX~Op`v3OqrVt20zdb{03NwuZakcpgSeGX)Mz#R
zuYO!^)z5hD|GC>6G@R;n&>OJD>Ay`9ut;*MadK3tRKLj|zmb&cFj}4biY2xF)S8&*
zB&xE(@3h|UbT;jH8noGuiUW2r=`+&A<0GwS;g81*;E&<zSEhHOczW)O3b;XHSHaG1
zqeptL!}WMe3VyYm67e3g%k7MLq#ebft7hgIrcUc|k9z8z7a1CAe1ERf4eUqzSD5(B
zZyh$QYg$`dSzB9Ehc=@RHyV6)M`F<Xg8?Ga(yKLhhPP@>uohU&A~qJ&#Za?m==F<#
z?X$1MTsSkqgON^jzDIt?`t;U%ok#uFCvZyu#eZ_A#L&dQQ8s9|4VUYthJEKX-{^5l
zzOWr$T3ULzyUN7CfJ~D+JZ#w29M`DCoR7kI7^9v2+IDJF(J4~ZbrI@&F+{w7fcOkZ
zYZ74A`-y5QHk53r`<f9{mI}bhTFal-z8I&8(d8DEmUTB<%ckKRO>hf1pxv=8KW>rC
zxaI54yW3q8mq?6@j)>^$>e4{^&*Y}<f5-WvqsJ3B6H55z>@pGz;G-4nZj!`*@Jr!O
zl1n0%wbrw(k3Ky@sP(2r*U=K&TxnsbHq6S_`#{4-iduwUR<k2^b}>~_QeaRoN5^%1
zt2`E@pu`qsg3+hl0oB-7XckQl`+Q$hn|$8<GQEoGuUaoY5f`;rf#l~v(Iq6&^0>Q$
zKE2$s>zjUwgqy_SbUNx)!dHD0$<3c9IXC#FLV1ShklzDVCv;=WsQBQ`V;OG}1n0Z<
z7a{~X1dvw8b66P!28G?_8%$xzPUweQ#`C&M^0@D7T!a{2{||V$E-|%D{cO6)rWheK
z=jybbN*hCG>YXjBXC&yj*OrBLY390V6C!e-r@V^xDB0DTsZC3TLC}158^h03bI1fb
zDUL;DLn>E0FNj}zvHl!{pxcqN6ns2Z?A#fVg0LK15tXId&+H@x8_P3n{k9b*l1o2+
zq*zN}nj4&3DU-EGrIl^8;0nu;t-pT#y8FG1N-#%Ae9rB-<<6@TH!~YS?@tlxCrv~b
z@F#K%e<JrM6f)uk`wu(lX+ruk#jm_=$(ZcU%~;!X8h#-!EnT^t(LaWJg{WQip1O;D
zA!M%5>{*X?Ha4`gD{dLp?zr*P2Eh@Y3#CNk5yk07@J;y8Twa9W3raq!vx;_titJl#
z`Tg;fTILb`0X}#9=SD{w>c&_7u%6$<Bllz3U?n48K6*!zD@JJBKFOesQ9yhh*h#!b
z!<%oPAOHBK*`IMDdnr67o)o3sE6X$JHs)d~Ez@?AV?LW%w6*@t$$!w$^Zs!PorV04
z=LD&Of<0fF9IJ{=Mp+2BM7dHzcXd1<cVS;+7<0VjhC&PrFMoa|w$yf>6=no{rrkZ4
zkPjIxk3e{4IWFaB<1@OeMqN3@PfCjF?7!S1FJl$3Z0FoYN4YN@{4$8>6`bC5n?onZ
z(jvq_NY;N{15JL!x>)0%g>kPb7;uk#{FpefyBT<!pW?Ci%H9R7rqR;s_Km5GNI4oh
z8*+krE;}r!ogu8&=?Xh3?h0KnS%7QLNj4{y;w%$&Q$ZQLYH7qymx7WVrF9!S6G`r`
z+eYP2vHgZD73*$Xxax`8%CFkEXy%GHi@bB~*Tc$&;5b?xUFY$zw!A8b7IUd5hR&*n
zaP)RPOYur`$){I(Dxv+SJFky<(2-m*nk(eAnwd{+W{W((J3rg}eVN?9s{vFeUo0G!
zc(%pdA*P@uNLt{Y6g+WFV%Je>SI;$ie2hGThTimQev43!fROV7oBY<%f<Mo?F?$C+
zn+lJh;;gty7+RXv*Tr;wT*;zSW1=>wTEI=>sIe`g-=D(hXso2jXr@G^AZwoF!!EG~
zMy1!EC&n8VW71+uRMee6XWERY181~?41^*#Gs=cY8!8eU5j7SqYGx5Eyhj($q$iAe
zEovNx25k4!`J-+02EXz9r7K)zmp@k6WMHx7pE5HtP_}fY_^2?u=TR@>yoFMIb;h;t
z)bv?g)yYei=kSJy$cFyXQ#pAxm)l?RHcXo<Y6%Mhh|3ap{0Ya&rR9p&7SL6?V>Mw`
zEf!MD0~PrQ=9=SAEQf>bhHLs`+OW@Vg)`OtgYsMX&7LX>*;B8aD!6V^YHejjb)|WA
zlfRrwOEsyz>(n~ef24e#qLJf2F#;`}?qf#rXRC+v%|R*@?|_;dcpR6iEO+FhNA);N
zJuz(Z#|3Fe!-rD`CvMKcaK@W5l6JlBWmFmQ%%eV-RhENxX_oz9QdjnbkRJ@1M?npD
zDfaw7&URB0zdCOg=S;ALNtHhHh^5QdA_VVHJj;l<XoRlwwMFzA_~*SPE9<}Wk+@HV
zmpzp#Bk$-(^D6o2LyC8bUIkjIYa({_<Haiq-14zkCuuY-eRy&w`d8`Ebc2WTb6y4g
zLnXtsY*tHCPYWM^9>^Ikobc!ya39n68gd>RmLV2U9@^yp<~(M&{7;cw02^pK-E|3J
zERPtHx)7ml9ueS@BcyK=Nh7?ZptclbNu3Zvl^)**`+P%(QGG6$n9bkpjD<Ij?o}gp
z=cd}!$<IxPPiNSs`O{$4&x4(__3tRa^Sx1sNaqIELF-zLTK~ZpR|L%PE3P6y_!n5o
z1ey6<msE%v8Y{`0y4-Lq9W1{kAJAd+%gw%-cbAIy(057yNISZz#3G`4u}HkZ$Q!Y=
zXVf3tG9KCbPM15SGujCC`}IH~PvH$}%`YxpZx!S7=1diMQzx|b1Km$@i6DCcaE!P8
zpWwV{WO}8&x4-gEozbQ9p!}-({-4B3T3+6zs=W~HoXYvbl2<#MY)Ju5*g>B(&Vg#9
zKiAr?o1`>!NN~j{8*g1|WPRM(5MsbvoPj@Jt3k6AlB&i%)kZx=Q6XpVu+sIKi?p7-
zQ*?wo-Xv=3Z_BtIQf)-NB}xtz_5F|gqP6JKF1+i+`1~=-UH>KP;_*w<1N8=9`r_$=
zKcYV5w|t;V<`)F;DWbg*{Nv(FGaHt#Q^=M%;tP-KCh5<<uzcJZOjfd2i{`~>iRmxu
zn>br<sE`<GHfeJ7pB6lCv2I9EHa_hoyA&vT5<Y^!JBXn>E+MqT?$XGfpFbZu<rQuF
z_}S$Bl+N=Q=%XK~6|bJyeA4VPEUZ$s9q3r;)BQe8?MvznW+)se$z0k5;Hx1C2$G}H
zBp&7Kg#&a#t{oqk3I<lW(f8FZjU3*j6Bo#<+Nlz`R@E~esggZxB43d$FHhk>fM&3E
zqLb_nl00DDul3#CPj6K+c<r79DO6Ye@oZt!_fomV%>HBUT2i4%#NJk~ucNoO6|uhx
zl+;Fu_HA8yBcBWhswb#%$nE$=Pq+^=S)`|jD%9bAgFDmwwYFhKbuT*x$*Z=Dra0jk
zM6DmVqsi|#XP0((gywZuf<_qeT==m`Dh&U*N8-Pq<o^VL*jn4?%III}>OGm@cO2t6
zQ$>Z>=ip~UuKozYWHl>c(>~mBx346m--PFa8wA*WaJ1+5rayn4P+nzVpnP0?bs#}1
zf#1QczJtgmh|Gqv*x?Z5UB(CfTXn7rw>~roxR1J?F)+n=o)ZYil$m%30<aGxx?idN
zdbVUV;K(%~z`SiQtWA8)W7j=(KZwqBzxNcE_FR~1<RL+9%|2w5o9XhKOU7~1;%i5K
z(ehK?IOM>9aN21uf4-9}l!!+reBP%!;W_iE7F*+r>Zw>0=aOGv_h~p;q~7ti@Y5vy
z7>ti-RzW)SG5(+ld-}xzw=a+55E1?|kR9#2_vdsoD{b^6-I>o3_;JP{lK69SxK{mV
zy$K^Dk(arEYrq<t9&HYH%ypbcNl`q;^M-jjE3juje$vEJb+p=g*|_&<IcKHAVO-kY
z5A5-R{M1M9z-Rc--GKi_a1*YHyw1aA;k8kn`pN<PaPK?4MT8gH2fdRNa6GrP)II+G
zA9_y$)u35{-$Kb<<h}=oyqzTuKB(5q3~p)txMS7}{=Wy%xRlck5Ao@v+h++-$rk%P
z@NhdzPLG$iY-qz1G@uHaaDHvhQ^y6B0lWMs%iGDNpmTHS3|_PD3NG|dEiBU0!1W>f
zag7XZIL3~-fu_QF$M00hfA8=#$@J9p`>nGhyZB=|MA!c0?QwJT>2oP$g@bgmn#sY6
z9zA>B$8yJVIM#QuN&e6&&F?sJ2GF;6BJdtQD^NtnBDePf*PvvF?6xXgKv<xMoR28O
zTYS+tzf&wAchb*)y6lal4Phm)q~t<xaQZtd07e@=T7gu)F|<*};Fl(p(k+(KO|o{H
zDvhmL1!ghzbNI}8di*J_`S<#ZeTY)S?r@?dJ5{JIHw}VsxWZRLJ6ktGuvZTEt@rro
zl-~S7V?`_8aMwJ0pP2b!vaxj-q?357L1MWxrV96G8OJNzTgt1dK*mxt#pgt16oyy+
z<YPk5*X&;1$w4vpc%4K$`zgg)IHu?g**ulL<OuFqBWoacclf0H6tOZAs-8<tFF@FQ
zlw-yn#NN-QfXyv=pHn~F_SzqZm*u$IhxMl&JW2r=4}YworY!0fJ5dZFg|Alzmq8z;
zq{(93;A|GPRPAc`7Jyj$`CEe|5WOyHH;b=|>nvn8^A=QO{XlC7UyKBW_6mu)_p=a0
z3Hl6B-nB^;h~m!50;reV!bz=qxWiGs(gibNH{g*~3p>pF8nAs)D^=pg+xRL<L8oCY
zGOe)Nbo*fz7t#tla2n45T3C%{>4u>A`2W5(@qfKV@&EIybQ2MvTuGgcz8SGAhcn8W
z%o#8C<VIp;H|=Gvn%DqG3OX#1Q4+Q_4s9Gkf<&bM%HdocdG0SUk%PbK<H!y*=5S>w
zG}BWfu7lCw7BiFwIvmjFV6aaEQFavt(A<Z#2pb-|TNw+)z<L)iy+J(Ve@B&1`H+Fa
z(d{n;84aZ@H2RQ16kIn*pvGmv-v7|5Nq|^i5(E$KtwSNKpvLr(91IF!1fR?XX~Fk@
z7utUHh8+sIhX0-)|2;ka6AOxu$-o3G`3mr}7;LWkKVR_Umu|){eQYKS=o03!gz+&!
ztmgRD`~~nVfCdt@NQ&2(ARu{Le&izAzYj^k`zx%r_>uM7H3{#4I%DntDQv$2viX-7
zo(Te3dHg3@0y|+|V2^)kE$W>K{0jPW&;bxrU<lz;-+1o}*)K$_QUn%w-FWbVfDw5A
zFD__@^nelEe)^YthyPjdzm{1!O9E-(weny5{FhKjrJMTl&;CCg|JR8BL*QO<8Zo2*
z+Gfzt=pZk$uD9m{e*n`4Tvt;4`<#5}KU-;%`JYYmharCxnvy`4Kfz*u*$G_-g2J1{
zb|hX~;N}GMQL_#&J;K9KAn(7Q!n?t26}%YaiZcKMpp^mr%nEX3w^Am)EkfA&XS^xl
z?QD@+7|0AXO2J@)z=H4(lg#n<@^^***qI+*a0H9<1D72C=WG0F{Fec|`aoqF`e=$*
z8Wn**g3{Q*@3+$kiYBlcjvx8=dlZflugnmFSbqI$$dvf;4fyd|f4BA@%9?oL5|+yY
z?Oq55-nW4k<3NoKhF=miPJl@M!|*Zu9jiL94`l-JvY+{&PagP;@JqAC^S|fib{cJk
ztJxb7NCEVjp`ZNVYH#38f;|CdZsXMiZY@DSIoV-&vVYCyzl4W3Z~U>lopuEv!|iyy
zaQ$?`(<qn;SLneB(FwzAgBvg46M!jy%~RCO3rOG+p4|WyPyA^iYy=JL0<VrU_|c*t
zfsX##FL<f#U%Nix>vFwNdkJdfz;9#7?2l|P>xvZUY=QUkpv5%vRG{wjc)@hwP>r}D
z&)60(GK>}lWM)?i-a>%z*B-JHt*1Ah)=N|zZLnUj$^x%TwR)`S+q!$iO!e8I^2e9_
zrgn`qZw%&)77X~zZYV5EhyJR$LJp1Kjid<K)%{^jiV3`V*k9}^glr!zZhjOc-s*;|
zux!(lDTr6eEK$iGY&}ou<&m{dj+vW_uA9h_zrKT}80Fh+`nIU;vOeLMZi1N95K8Wz
zeN#3SAzmX}Iqp6d>HWZPcX2OO-Sa*aasf!jUOx0G$Avm@^W$sM8%0EBfAwJM9j-@=
zQ^h7bGBB6B3JM5*pPx9?{%9$<<d=oNDB&8c$T5VWDKz(A`+%*6QC03SkwBQxTy8+D
z<&$$~lsj^FqAS_fQY=;ZaUvfKT)Yy^NnPO38C9#Oa*IZvy@S$QF2fWX2qm#pth^I!
z3MzF9`Oz~eelr7H7pYtZ&1QuRp?x<Fe%Pd=wd29|&-K@oHsW?FxkgV!5Y?3ua{MkT
zvut$oBaVZ9Xa*)U$W8KW^R##@x9)W|OujQaI0|K5_gIt5i>I})%G5abqS9j1EJI|~
z?fpHrxO}TY9LkL&t>=n2dhXDqRLfaPy)!IBIOr*N>F0Mbea5K^iSs@A1Eyk-84<7u
zv)V9lS>fpUZy(1>HW(7&>OY@1zWS^)M}NUKVKjqHdQ~x3ixRZ;rQ|*QTVOe@?^JAR
zv~q7|Fl9aBQkO)|_m|G~>t=||)qvNl@)E6Y)h>-Yz{E{A&A?l(%7w|?;LXmEN(s8p
zN?eoSHw(r=gTz&~Fs0*)_hsEX6kWZkJARcIiG+U8i=w7P<L0e;K+lT3!?l)2W5l9u
zy4c{z`;>|Z8jb{4x6BwySF1uiQ|%(MA6bF6)nu{0U9J{CxFu43^c-8H0239dQRR7b
zOTE%iw9SSyQQcfm<??0h&&2%l!6gyZ(gi7`9>^{E<!Lp^qBU&ut+O;dkO+#s;m3yj
zz0Wcf6nOYxC+w<{?6Jv;s1+%sr_53fFj9^I)!yA}#okVSBFl5SQfPZ!-(J2eZNk;&
z6lY28zMX-@&Vj>HA<NFaF58O<`|+#VLN)p@Jl)r!%^Rs2s*p38v!BXIhhwzqTr0b_
zst0cG!TM7;e}e6y^lo-m$QIhY{QUuYdI&Nw&8JwJ&Kfs^LZe}4sr)IrY+W&0%`oMx
zfgiJB8d-cWloGAUSX8Jo_VU?E3_bPs)TJf&n>+rWX*lcLZb?99D1aSi4486oPascR
zt#Z`>vEg@~vY6MW#lfFVF|oqQ(EI1vxqVW{;dUCu{$$^35%<x=8!<uH_u?lFCccZG
zcsPR%c>nk~nnmbw3%m$1NSyOo(`I-CiwPSoR;w7X*OlpY5XCI1-LbQ4@k$*0?48Ds
zt$;h<RmGocE&M;m?jT$-so<5S)if9@vAEdl4v@mh_724!+z>Tu_VOd$d8yURkP$jf
z;^(zd12%J;Y{~Y;wN+Z*A5GY_MT!)98Nia)$`}g90X(22$%_rXMX`ham*>WlWc-WG
zdiP(_3?N^zQczZo)5c6)D+zr%=8DwFN{D0!#gE^dI-@k4pm~V*JNEK}9rnL{P+I;^
zp4APj>)wp&={-4Jo%AaD@F=-$V?lCZ^|+wA`hlas;Y--l5YmgP(78KjuY9>}^pNtM
zvtp+MZx(Oodvmd*_Zc0|y!ls$bGVSsyc83bPn#*9G-q5o|61V&W->M<rFLgGRXCt-
zQXSo+J~g}csUfXqaIkZ!vUfb-2DUJ*lyMR3Cl=@6`egL{ownEx?yviyeN87QlP^ZR
zPfPOKpVpjMA1+#-Y!v@-sn(SjKe)0=yU!3qNl7`%?qYBLbYjF_)kkVTNJ_|U`?-@)
za`HR+_W7~Q32#`kO8Ac-#cV=eUt>cUnMcx8tkav6`SOvlSUVdQhO1HtH&%JU<!=Hp
zYVL@gUkw>Xw;~y(S3tAbC0oMni+DoUQ^PS$+!qLH1JQ0{GN-)Ydo@d!eB`K+p#yS2
zSE|x&G^e=lkG5c%a^`@0ij14vE&e3c{ci?#<FQ7V*f;6tLZ4de_b&c;8-iU~zFJ@y
zZ=)jrVBw#^<C(CQqp72jq+I@;@NGI$zNOd@0|qxfS)Q?r1?Bm<8Tqaq=~pdEt1C8&
zEtb^6k#)rP0L{BkV6&BTw?V94iT{5AknMADsr13*m#o$HEn~%f=|M-Hu;d)RLHG<R
zg<hI=(&N?#dTFcCK_bX1RD1Ruq&B`cvfjt$H)?dqyT-!_yBAEZ9ue)vZ#wxf2!eQ7
z!K+D-T3T4xkBe5i#89d}-bY^j$~%B}>I?FU0cW60e)w<qAv-dpvFv4?G$M!;?-aW=
z9!2&ot+stozVVW^Xz2W%8M#YYUybAj)w96}aNQE>&P`80?w#^#yHDqcSy_2&OZ4dv
zqJvX2x2Zj4RsQ*Ust@*bWug8dcfwhyC}ebKw;*T@gwI4@w6lAC53u~6`>F#=tq!!y
zg)3QZ@XML@dOq3t`R<1mNrgt$)4}926377v>Y~F(Uvb_obJ9Zvk5_ZQNEtV!HFh!l
z61RK)9aCV4@*X_n&j1C2mvf+J+6+U53Dl;T;RX@I%NkQFLDo+2Kqn&Tc?UiyQs=&K
z#?+Yl!6OuIr}A>-!sk2pN)=#&<5?G=ck1}*Cgq(T3ln>LdmDus`-#-DAB2QI)ZNk4
z)b#N=jDJ836^#I_`S@V)JZY$MJfr{itQO@Xozbf`VyMR$J;(CauQ^(Rt@P=NgY*`;
z{8!Ukzdo|ayY|Q~LR3+=;}b*54;BU<U2>kO!^C3i(ouUu!||7XpwKY@g80Bpy<Fl;
z3&-~~qYZL%v><_mw`MuygEy$eD4)RuLK~yVcOuD{1q#fJ9=vo@J&b*X=>amo^y};p
zN8b6N^NRVRFGODm8Z*7;sr3uqnz_%(J<ZOS0WW`1LJaZx6GXEkN<t~vDx?4OtM0YW
z(w`GHU%l?R%rbEroECunOxN%`)2?8wW@kuEij5mqVvS2>k>8Fh3|M-RfidxIe<WUx
zaFbw>vLkjjX%6@7(=`(-{INquM@BZ6UiA>uUY8~d{VoG>+DETJO&Nh!<tt~NZtju}
zD(%O7GWEllRw7Z;!YtKx1HUzOYESbghJ}lt8b4|A%II--SaldS4OlHN^x8q;CQo}=
z>Q|4LhK>C?k+E0!TYa2O&ZPH*iq_<bYVii4zVFW*f^4q~81c_Kj$y`3vP&`dG>@kj
z(0jjDD<=;!4bdZr_0t;WJ)WH>tAiUK%L9%@{l?LA_M5Tc{3f+l-G}mfpEv`KODp}>
zXH=7Rsv1eAq|=8y?S5S|?n`BCPx>N|P5zn$GMF6!;pKbX?_#7mai>aOYa_6J%SrNw
z%bdMFe=>OrtELxECK>#FJ^bwVtW3w<aZ!wiEys2ZxEC)@UVuNk+&iGJ>VBHaDd&T$
zB{_ef!miI7+~VTKa9lm-(BAR&rVugo;W~aFU#?YH*yTy;0tNeSV@`i}%&GEE_MzpA
zycd%CTRt6}=eJAqoP>9CbZwrP<{i#8T-jY?q^CD1wQ~2s^?&yRUDaZ8wJTvQu{`nL
z%(-~uzuo2HP5l0B)6GwO{!cs+B;53j9T@jcN=f!LO8&kQC6oK85bp(l_tOQV?3>`0
zy4A-*kICQZmq{dfjB7CW4{HB}V##xu541d{IoX2p^2VnI2M5veKWja3(QEr1JdVCT
zW}>>6^WG>%hKXJ~tA{^a)?~o@h!h^ke#sRj!J@o(rgCv7>r<R>cIDY~VD*)SPO3kX
zTrJvII4#&wZi655Fvy49EIjIra)>Vif>P6U;!~&FwWi~U9lmxqZh>oWY$M?5t<QdQ
zUVa3Vff`}pDrX?aBk}KdP`FkDEKl^8Ys|Y?-<!61pKB4a#TKhYUpSe*+}J$~ibQjL
z@KY$^2LIWHtZLF%oIkqB)CY^&+Aoel%k4HS7(MrTCi?!mgKlKs2Nj3ZSIfUFG9V}%
z+=zkR4{wMD-<0v(nQqBtkt&k*eyo6yJK6K}P`c;hiJg-7{`|8*h+Bw5vAl+%xt{ot
zH0Wi{#&k>PR2B=mXeZXi-~rhXefn}foyukC`8>!pZpYcaOUkpY!@;h}=6{~5J^DeZ
zl|JPavr)WZ9B@;4*i~u7RQbfy^v)Mk9-kjqwb)>6>FFpGDuIiddwOTl%;^)op2aKp
zOdh2Z_vE_;Y7$5d+y{f+>mRQ?eY9ipS!pVl+R69I`7brquTCdp%#X(-NlDJ1w<8~X
zC*Vd+O`YLVEp(ua@}%6D6X;4(c_COK)!vkI5dUl5y0nh!Uu3X#-(vjbgRP^dT&NSA
zMrDrIv_@}xQ_^4uk8s!b7YnHZP~}%p9*?=V(}Sb0C@AE7j~BUiFx!%AYnjgxqpNCN
zZ%}agQHdgP`Z5pG*E%Mss0yFIi)6n!X4F;xc5QGW)uX2pXP;+uXjir!>u+v7-IK=A
zsiAN~z-3EHOEgDOfdPjsIDETSz7XH}<dZ?v$!5!@Lh*{bcDk381JvmD7gwCv93sxY
zcmSvV<?yp&`opUB=<*#~_MpO*i;ms`k1yO;n5t@e1bd}Nr6_`gW3&}uNaG5BRr;Er
z)#hAXbe;R=*$;WW&?BJMV-7B017n(m3QE4j3X0LZdukT<;=#GrYcw&t2`N%0MUQp4
z9|hTZ?ybG}-4m>1G8;>?mY1j3LDu(>ol+~*<+fYx{%4FDj7EwsDA>i|R$>Qrkc(U0
zn|>0=tPh{<>j<~fQ}bozv^R24i(MU2`1a*YN?GeQ*IgQ?;yXFFWauB!h@Nh!t@oL7
z=+3?=FYp#ffFr&pGD_(epxyfHzCSRcuW_MQDWAV>4+RQ?n|A<-^5@MWC}W<<2R}8V
zN)S|ie?jExyWIjB!-9aU;)~gi6MC1)58B(}aI2+-rZb=4-z!VLC*qb(dsfV34_?UO
z=Gbq#_)P%30Y^r<0orF8f9>cBL)o{8x$ySJOe(SDqW0J7XT_eVe|w*L*|1`2eNDH(
zIL8q6K-csk3iD@sGa_lRec>Onggff6&BHc-ilLx4Uw>272)Ny{z1>X&^;{wNP%W1b
zTe2J}Py0LrZcbwA;|xGqp#Am5GpnP|*P<#XQJeS22MuT_MYZH4;38Px8|A!gpRdX8
zPuymwp_DyZp$^8$KI$a<|Ju3IuO_Z2J}xcx0D_{JQ)DR?fr1bVhAk3=5K)#^79$Z^
z$|^Ag2@*g82$i*nm|_YBDWw65l2WN!0ue2WWgP(#2}@G8C<+l`5=kKG3#VWEAM|~i
zGv~~mdH3D-=6CP?-CJgX!S1L<c~pYvO)=nh0}Wg_#)?lu?$=tk%fI3*q+jy=7<JZn
zi1#Yfw7K=3lo66O8ckhWtYm~#ES_SIG`wrM6pkbZ296{*xe6!n{NLu}n5Mq#CwG)h
z>SWoS6965@867&L0XYUV>+OZ?Ek(3l2JNx|r`iRs)n(;<c>C>zgf|JWb8VN?%;Sbr
z<#&o2NpA?}mu^kXGK~#C-D|keTWYB3oo4X!m!vbTtXMO<1A|_5dv=RmwQ4`}{fS`1
zc>a<D>)Sp!Syd1dV*M8bf*dbw=!ozXF~h{~7Ik9Y8yTXVrzXpK>vqO}p;_NpP=uG@
zuz^X2-gYE!CgWL}kQNw`X!9M;vI$K+y55yIQ2Z@>iEec$j~8baanl~MPT!E&g&>mN
z(^b5iX0o+8-^`)kx7a>#u54J!Tr}-K^)#?cWc13zvSw*~6OG6_epjG2tS6wT0e~V-
zR4LA?ym!vLI>W!w6RJXA@hUYq8HoAAf<tbEvED7X@}l_20R9~%cd#B_F5C>oY#f$&
z(oGK{@m6(Ffuk^L1w9`Zie2BGMf?02=W;Mn^6gCh!N({7KvC-N^B>fD9rwHc_gm|B
zHMP$&i*1&PqjGJJ@`cj9F7mjZk9QeE;bj1iyNQzk%Sa=rBwkap!@cn%4I%UHJy*0B
zD80(O{%2u~wf%E_zvtmb1A8E(-iBb7zhyN{O-aF>tx1Uv^VU4k((qQmEp613EaYOj
z0o|WGb+FJcret&h)C=NMZgly&9lTvfhnk!m)iP!Q*<%Z4a<PFa1qsnBx^;Qe9tU)o
z-#j`JRGpp<x8KA-0?@q!V7|jEuOdf7XqROVxZK0^?o+3O_XX|$$|){&{&U;zS*A&V
z?-|DvS3h(emPsTM_)#!WQVBccZd#2Rt{`3~FVq?QiczhJISd<L*0n*pwiVm2HQ}01
zsK@JB?JH#c$%9=!K0a^xS?@G-(5d`&ep5;5X2{wP%rX1iMDx-<W2N}grB%g9SWwH@
zL>njsO;cc@hgt^-pFk$2(_DBiNxWJZffx`z1&%?1dSQDIEosAYGw<sKUQ{Z>YbNEK
zdF8FdwZMG3{Z+lbGTkzhZ8n^DIlRuK)(pYJn%w;K;F{f#zBvvA?Cj!6XVXL%m8nlw
zqP1aoGDu-*wCdnOr7ib{vG#6)igm%hiNoFJ&ds-+l=e+7*H^iP-nrl%7N%O~D<8d;
zYCuSedVQR4IFMhaE3c0^^KLUN+36!zDq&6jQ5-H-)(loeeOOXXjGQK?(R6*pd{r7^
z0JL>sbLWG?6fkIhk_$n@Af}u>e}^{Siz0<&6_xCX=XI9jL!|4*u8#J}$yZzrA*8nY
zRe*3hA<z3ob329e)8K0(^tPN)e&V9A<AaFu+!%VO4&eS+7(yGd!b@*o?Kbd)*%jux
zBCbqXgb$TAiPoBbB`Z<&0F`Z=Hl8+&i=F)r1Y$1e@iL1%T3&?Is-lqpSnc|XCZ|x&
z1Lo(3#NdgHVWNvOujF8NR8oy%=RU1Y_nO4j=skQzKUp++KdYu~%SJh$8~xQ%XgY9N
zv~x`8-H6C<#%=RTn4QRs-W%lAwo=uMJ9R6_Sg8L@=N038W`7K*HK`wd+QC62xo?T=
z18xb+#YQgAnpC`B;@c)uA;8>*;x-#Nusard@SyV!f#AmyAW1Dhxa};&BJv^-4`!s}
zu4`p&v2TE`&#K*BF~54^!bQ`vZ8;|8$NQ%vgdG3Dp`kBPsFc5@46>8xNypggxYN2d
z<Yo=v99l(c6R=+J0P}6Jsa6<p;Of>RUt8>Imr<vdU&z`;w)*$*;Qu7(&;^#L-XV-L
z>A%UQ2rg6?C!fylTl#ZJV+1Qx0|(|p-6)jZ8hLuWO`oF!t|ae=FNRY3gDQM@PO;ww
zH@p*+Qm%DHAm+uZ4fl-|k1>m5;=Xo?9)vVI(;6>!mu-TOLR7*jl~Tqf0uRx%V;at_
zfOEEWCXTYrF@REwS$PG=vb>?}3U!1RR2Vtr6U86_3#Cr|djlXyFm%<29w5=HQ%8Wu
zhz8RHNzYWEN-&lI9tUF@Y<VyqtJ7gX(*F<suN+_p|6w^Q9cI<qUz>u4!_~%e%+n9c
Ib`Q__2b&h+`Tzg`

literal 0
HcmV?d00001

diff --git a/docs/configuration/nat/index.rst b/docs/configuration/nat/index.rst
index f0f5bd6a..90275226 100644
--- a/docs/configuration/nat/index.rst
+++ b/docs/configuration/nat/index.rst
@@ -8,732 +8,5 @@ NAT
    :maxdepth: 1
    :includehidden:
 
-   nptv6
-
-:abbr:`NAT (Network Address Translation)` is a common method of
-remapping one IP address space into another by modifying network address
-information in the IP header of packets while they are in transit across
-a traffic routing device. The technique was originally used as a
-shortcut to avoid the need to readdress every host when a network was
-moved. It has become a popular and essential tool in conserving global
-address space in the face of IPv4 address exhaustion. One
-Internet-routable IP address of a NAT gateway can be used for an entire
-private network.
-
-IP masquerading is a technique that hides an entire IP address space,
-usually consisting of private IP addresses, behind a single IP address
-in another, usually public address space. The hidden addresses are
-changed into a single (public) IP address as the source address of the
-outgoing IP packets so they appear as originating not from the hidden
-host but from the routing device itself. Because of the popularity of
-this technique to conserve IPv4 address space, the term NAT has become
-virtually synonymous with IP masquerading.
-
-As network address translation modifies the IP address information in
-packets, NAT implementations may vary in their specific behavior in
-various addressing cases and their effect on network traffic. The
-specifics of NAT behavior are not commonly documented by vendors of
-equipment containing NAT implementations.
-
-The computers on an internal network can use any of the addresses set
-aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for
-private addressing (see :rfc:`1918`). These reserved IP addresses are
-not in use on the Internet, so an external machine will not directly
-route to them. The following addresses are reserved for private use:
-
-* 10.0.0.0 to 10.255.255.255 (CIDR: 10.0.0.0/8)
-* 172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)
-* 192.168.0.0 to 192.168.255.255 (CIDR: 192.168.0.0/16)
-
-
-If an ISP deploys a :abbr:`CGN (Carrier-grade NAT)`, and uses
-:rfc:`1918` address space to number customer gateways, the risk of
-address collision, and therefore routing failures, arises when the
-customer network already uses an :rfc:`1918` address space.
-
-This prompted some ISPs to develop a policy within the :abbr:`ARIN
-(American Registry for Internet Numbers)` to allocate new private
-address space for CGNs, but ARIN deferred to the IETF before
-implementing the policy indicating that the matter was not a typical
-allocation issue but a reservation of addresses for technical purposes
-(per :rfc:`2860`).
-
-IETF published :rfc:`6598`, detailing a shared address space for use in
-ISP CGN deployments that can handle the same network prefixes occurring
-both on inbound and outbound interfaces. ARIN returned address space to
-the :abbr:`IANA (Internet Assigned Numbers Authority)` for this
-allocation.
-
-The allocated address block is 100.64.0.0/10.
-
-Devices evaluating whether an IPv4 address is public must be updated to
-recognize the new address space. Allocating more private IPv4 address
-space for NAT devices might prolong the transition to IPv6.
-
-Overview
-========
-
-Different NAT Types
--------------------
-
-.. _source-nat:
-
-SNAT
-^^^^
-
-:abbr:`SNAT (Source Network Address Translation)` is the most common
-form of :abbr:`NAT (Network Address Translation)` and is typically
-referred to simply as NAT. To be more correct, what most people refer
-to as :abbr:`NAT (Network Address Translation)` is actually the process
-of :abbr:`PAT (Port Address Translation)`, or NAT overload. SNAT is
-typically used by internal users/private hosts to access the Internet
-- the source address is translated and thus kept private.
-
-.. _destination-nat:
-
-DNAT
-^^^^
-
-:abbr:`DNAT (Destination Network Address Translation)` changes the
-destination address of packets passing through the router, while
-:ref:`source-nat` changes the source address of packets. DNAT is
-typically used when an external (public) host needs to initiate a
-session with an internal (private) host. A customer needs to access a
-private service behind the routers public IP. A connection is
-established with the routers public IP address on a well known port and
-thus all traffic for this port is rewritten to address the internal
-(private) host.
-
-.. _bidirectional-nat:
-
-Bidirectional NAT
-^^^^^^^^^^^^^^^^^
-
-This is a common scenario where both :ref:`source-nat` and
-:ref:`destination-nat` are configured at the same time. It's commonly
-used then internal (private) hosts need to establish a connection with
-external resources and external systems need to access internal
-(private) resources.
-
-NAT, Routing, Firewall Interaction
-----------------------------------
-
-There is a very nice picture/explanation in the Vyatta documentation
-which should be rewritten here.
-
-NAT Ruleset
------------
-
-:abbr:`NAT (Network Address Translation)` is configured entirely on a
-series of so called `rules`. Rules are numbered and evaluated by the
-underlying OS in numerical order! The rule numbers can be changes by
-utilizing the :cfgcmd:`rename` and :cfgcmd:`copy` commands.
-
-.. note:: Changes to the NAT system only affect newly established
-   connections. Already established connections are not affected.
-
-.. hint:: When designing your NAT ruleset leave some space between
-   consecutive rules for later extension. Your ruleset could start with
-   numbers 10, 20, 30. You thus can later extend the ruleset and place
-   new rules between existing ones.
-
-Rules will be created for both :ref:`source-nat` and
-:ref:`destination-nat`.
-
-For :ref:`bidirectional-nat` a rule for both :ref:`source-nat` and
-:ref:`destination-nat` needs to be created.
-
-.. _traffic-filters:
-
-Traffic Filters
----------------
-
-Traffic Filters are used to control which packets will have the defined
-NAT rules applied. Five different filters can be applied within a NAT
-rule.
-
-* **outbound-interface** - applicable only to :ref:`source-nat`. It
-  configures the interface which is used for the outside traffic that
-  this translation rule applies to.
-
-  Example:
-
-  .. code-block:: none
-
-    set nat source rule 20 outbound-interface eth0
-
-* **inbound-interface** - applicable only to :ref:`destination-nat`. It
-  configures the interface which is used for the inside traffic the
-  translation rule applies to.
-
-  Example:
-
-  .. code-block:: none
-
-    set nat destination rule 20 inbound-interface eth1
-
-* **protocol** - specify which types of protocols this translation rule
-  applies to. Only packets matching the specified protocol are NATed.
-  By default this applies to `all` protocols.
-
-  Example:
-
-  * Set SNAT rule 20 to only NAT TCP and UDP packets
-  * Set DNAT rule 20 to only NAT UDP packets
-
-  .. code-block:: none
-
-    set nat source rule 20 protocol tcp_udp
-    set nat destination rule 20 protocol udp
-
-* **source** - specifies which packets the NAT translation rule applies
-  to based on the packets source IP address and/or source port. Only
-  matching packets are considered for NAT.
-
-  Example:
-
-  * Set SNAT rule 20 to only NAT packets arriving from the 192.0.2.0/24
-    network
-  * Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24
-    network with a source port of 80 and 443
-
-  .. code-block:: none
-
-    set nat source rule 20 source address 192.0.2.0/24
-    set nat source rule 30 source address 203.0.113.0/24
-    set nat source rule 30 source port 80,443
-
-
-* **destination** - specify which packets the translation will be
-  applied to, only based on the destination address and/or port number
-  configured.
-
-  .. note:: If no destination is specified the rule will match on any
-     destination address and port.
-
-  Example:
-
-  * Configure SNAT rule (40) to only NAT packets with a destination
-    address of 192.0.2.1.
-
-  .. code-block:: none
-
-    set nat source rule 40 destination address 192.0.2.1
-
-
-Address Conversion
-------------------
-
-Every NAT rule has a translation command defined. The address defined
-for the translation is the address used when the address information in
-a packet is replaced.
-
-Source Address
-^^^^^^^^^^^^^^
-
-For :ref:`source-nat` rules the packets source address will be replaced
-with the address specified in the translation command. A port
-translation can also be specified and is part of the translation
-address.
-
-.. note:: The translation address must be set to one of the available
-   addresses on the configured `outbound-interface` or it must be set to
-   `masquerade` which will use the primary IP address of the
-   `outbound-interface` as its translation address.
-
-.. note:: When using NAT for a large number of host systems it
-   recommended that a minimum of 1 IP address is used to NAT every 256
-   private host systems. This is due to the limit of 65,000 port numbers
-   available for unique translations and a reserving an average of
-   200-300 sessions per host system.
-
-Example:
-
-* Define a discrete source IP address of 100.64.0.1 for SNAT rule 20
-* Use address `masquerade` (the interfaces primary address) on rule 30
-* For a large amount of private machines behind the NAT your address
-  pool might to be bigger. Use any address in the range 100.64.0.10 -
-  100.64.0.20 on SNAT rule 40 when doing the translation
-
-
-.. code-block:: none
-
-  set nat source rule 20 translation address 100.64.0.1
-  set nat source rule 30 translation address 'masquerade'
-  set nat source rule 40 translation address 100.64.0.10-100.64.0.20
-
-
-Destination Address
-^^^^^^^^^^^^^^^^^^^
-
-For :ref:`destination-nat` rules the packets destination address will be
-replaced by the specified address in the `translation address` command.
-
-Example:
-
-* DNAT rule 10 replaces the destination address of an inbound packet
-  with 192.0.2.10
-
-.. code-block:: none
-
-  set nat destination rule 10 translation address 192.0.2.10
-
-
-Configuration Examples
-======================
-
-To setup SNAT, we need to know:
-
-* The internal IP addresses we want to translate
-* The outgoing interface to perform the translation on
-* The external IP address to translate to
-
-In the example used for the Quick Start configuration above, we
-demonstrate the following configuration:
-
-.. code-block:: none
-
-  set nat source rule 100 outbound-interface 'eth0'
-  set nat source rule 100 source address '192.168.0.0/24'
-  set nat source rule 100 translation address 'masquerade'
-
-Which generates the following configuration:
-
-.. code-block:: none
-
-  rule 100 {
-      outbound-interface eth0
-      source {
-          address 192.168.0.0/24
-      }
-      translation {
-          address masquerade
-      }
-  }
-
-In this example, we use **masquerade** as the translation address
-instead of an IP address. The **masquerade** target is effectively an
-alias to say "use whatever IP address is on the outgoing interface",
-rather than a statically configured IP address. This is useful if you
-use DHCP for your outgoing interface and do not know what the external
-address will be.
-
-When using NAT for a large number of host systems it recommended that a
-minimum of 1 IP address is used to NAT every 256 host systems. This is
-due to the limit of 65,000 port numbers available for unique
-translations and a reserving an average of 200-300 sessions per host
-system.
-
-Example: For an ~8,000 host network a source NAT pool of 32 IP addresses
-is recommended.
-
-A pool of addresses can be defined by using a hyphen between two IP
-addresses:
-
-.. code-block:: none
-
-  set nat source rule 100 translation address '203.0.113.32-203.0.113.63'
-
-.. _avoidng_leaky_nat:
-
-Avoiding "leaky" NAT
---------------------
-
-Linux netfilter will not NAT traffic marked as INVALID. This often
-confuses people into thinking that Linux (or specifically VyOS) has a
-broken NAT implementation because non-NATed traffic is seen leaving an
-external interface. This is actually working as intended, and a packet
-capture of the "leaky" traffic should reveal that the traffic is either
-an additional TCP "RST", "FIN,ACK", or "RST,ACK" sent by client systems
-after Linux netfilter considers the connection closed. The most common
-is the additional TCP RST some host implementations send after
-terminating a connection (which is implementation-specific).
-
-In other words, connection tracking has already observed the connection
-be closed and has transition the flow to INVALID to prevent attacks from
-attempting to reuse the connection.
-
-You can avoid the "leaky" behavior by using a firewall policy that drops
-"invalid" state packets.
-
-Having control over the matching of INVALID state traffic, e.g. the
-ability to selectively log, is an important troubleshooting tool for
-observing broken protocol behavior. For this reason, VyOS does not
-globally drop invalid state traffic, instead allowing the operator to
-make the determination on how the traffic is handled.
-
-.. _hairpin_nat_reflection:
-
-Hairpin NAT/NAT Reflection
---------------------------
-
-A typical problem with using NAT and hosting public servers is the
-ability for internal systems to reach an internal server using it's
-external IP address. The solution to this is usually the use of
-split-DNS to correctly point host systems to the internal address when
-requests are made internally. Because many smaller networks lack DNS
-infrastructure, a work-around is commonly deployed to facilitate the
-traffic by NATing the request from internal hosts to the source address
-of the internal interface on the firewall.
-
-This technique is commonly referred to as NAT Reflection or Hairpin NAT.
-
-Example:
-
-* Redirect Microsoft RDP traffic from the outside (WAN, external) world
-  via :ref:`destination-nat` in rule 100 to the internal, private host
-  192.0.2.40.
-
-* Redirect Microsoft RDP traffic from the internal (LAN, private)
-  network via :ref:`destination-nat` in rule 110 to the internal,
-  private host 192.0.2.40. We also need a :ref:`source-nat` rule 110 for
-  the reverse path of the traffic. The internal network 192.0.2.0/24 is
-  reachable via interface `eth0.10`.
-
-.. code-block:: none
-
-  set nat destination rule 100 description 'Regular destination NAT from external'
-  set nat destination rule 100 destination port '3389'
-  set nat destination rule 100 inbound-interface 'pppoe0'
-  set nat destination rule 100 protocol 'tcp'
-  set nat destination rule 100 translation address '192.0.2.40'
-
-  set nat destination rule 110 description 'NAT Reflection: INSIDE'
-  set nat destination rule 110 destination port '3389'
-  set nat destination rule 110 inbound-interface 'eth0.10'
-  set nat destination rule 110 protocol 'tcp'
-  set nat destination rule 110 translation address '192.0.2.40'
-
-  set nat source rule 110 description 'NAT Reflection: INSIDE'
-  set nat source rule 110 destination address '192.0.2.0/24'
-  set nat source rule 110 outbound-interface 'eth0.10'
-  set nat source rule 110 protocol 'tcp'
-  set nat source rule 110 source address '192.0.2.0/24'
-  set nat source rule 110 translation address 'masquerade'
-
-Which results in a configuration of:
-
-.. code-block:: none
-
-  vyos@vyos# show nat
-   destination {
-       rule 100 {
-           description "Regular destination NAT from external"
-           destination {
-               port 3389
-           }
-           inbound-interface pppoe0
-           protocol tcp
-           translation {
-               address 192.0.2.40
-           }
-       }
-       rule 110 {
-           description "NAT Reflection: INSIDE"
-           destination {
-               port 3389
-           }
-           inbound-interface eth0.10
-           protocol tcp
-           translation {
-               address 192.0.2.40
-           }
-       }
-   }
-   source {
-       rule 110 {
-           description "NAT Reflection: INSIDE"
-           destination {
-               address 192.0.2.0/24
-           }
-           outbound-interface eth0.10
-           protocol tcp
-           source {
-               address 192.0.2.0/24
-           }
-           translation {
-               address masquerade
-           }
-       }
-   }
-
-
-Destination NAT
----------------
-
-DNAT is typically referred to as a **Port Forward**. When using VyOS as
-a NAT router and firewall, a common configuration task is to redirect
-incoming traffic to a system behind the firewall.
-
-In this example, we will be using the example Quick Start configuration
-above as a starting point.
-
-To setup a destination NAT rule we need to gather:
-
-* The interface traffic will be coming in on;
-* The protocol and port we wish to forward;
-* The IP address of the internal system we wish to forward traffic to.
-
-In our example, we will be forwarding web server traffic to an internal
-web server on 192.168.0.100. HTTP traffic makes use of the TCP protocol
-on port 80. For other common port numbers, see:
-https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
-
-Our configuration commands would be:
-
-.. code-block:: none
-
-  set nat destination rule 10 description 'Port Forward: HTTP to 192.168.0.100'
-  set nat destination rule 10 destination port '80'
-  set nat destination rule 10 inbound-interface 'eth0'
-  set nat destination rule 10 protocol 'tcp'
-  set nat destination rule 10 translation address '192.168.0.100'
-
-Which would generate the following NAT destination configuration:
-
-.. code-block:: none
-
-  nat {
-      destination {
-          rule 10 {
-              description "Port Forward: HTTP to 192.168.0.100"
-              destination {
-                  port 80
-              }
-              inbound-interface eth0
-              protocol tcp
-              translation {
-                  address 192.168.0.100
-              }
-          }
-      }
-  }
-
-.. note:: If forwarding traffic to a different port than it is arriving
-   on, you may also configure the translation port using
-   `set nat destination rule [n] translation port`.
-
-This establishes our Port Forward rule, but if we created a firewall
-policy it will likely block the traffic.
-
-It is important to note that when creating firewall rules that the DNAT
-translation occurs **before** traffic traverses the firewall. In other
-words, the destination address has already been translated to
-192.168.0.100.
-
-So in our firewall policy, we want to allow traffic coming in on the
-outside interface, destined for TCP port 80 and the IP address of
-192.168.0.100.
-
-.. code-block:: none
-
-  set firewall name OUTSIDE-IN rule 20 action 'accept'
-  set firewall name OUTSIDE-IN rule 20 destination address '192.168.0.100'
-  set firewall name OUTSIDE-IN rule 20 destination port '80'
-  set firewall name OUTSIDE-IN rule 20 protocol 'tcp'
-  set firewall name OUTSIDE-IN rule 20 state new 'enable'
-
-This would generate the following configuration:
-
-.. code-block:: none
-
-  rule 20 {
-      action accept
-      destination {
-          address 192.168.0.100
-          port 80
-      }
-      protocol tcp
-      state {
-          new enable
-      }
-  }
-
-.. note::
-
-  If you have configured the `INSIDE-OUT` policy, you will need to add
-  additional rules to permit inbound NAT traffic.
-
-1-to-1 NAT
-----------
-
-Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT
-configuration, both DNAT and SNAT are used to NAT all traffic from an
-external IP address to an internal IP address and vice-versa.
-
-Typically, a 1-to-1 NAT rule omits the destination port (all ports) and
-replaces the protocol with either **all** or **ip**.
-
-Then a corresponding SNAT rule is created to NAT outgoing traffic for
-the internal IP to a reserved external IP. This dedicates an external IP
-address to an internal IP address and is useful for protocols which
-don't have the notion of ports, such as GRE.
-
-Here's an extract of a simple 1-to-1 NAT configuration with one internal
-and one external interface:
-
-.. code-block:: none
-
-  set interfaces ethernet eth0 address '192.168.1.1/24'
-  set interfaces ethernet eth0 description 'Inside interface'
-  set interfaces ethernet eth1 address '192.0.2.30/24'
-  set interfaces ethernet eth1 description 'Outside interface'
-  set nat destination rule 2000 description '1-to-1 NAT example'
-  set nat destination rule 2000 destination address '192.0.2.30'
-  set nat destination rule 2000 inbound-interface 'eth1'
-  set nat destination rule 2000 translation address '192.168.1.10'
-  set nat source rule 2000 description '1-to-1 NAT example'
-  set nat source rule 2000 outbound-interface 'eth1'
-  set nat source rule 2000 source address '192.168.1.10'
-  set nat source rule 2000 translation address '192.0.2.30'
-
-Firewall rules are written as normal, using the internal IP address as
-the source of outbound rules and the destination of inbound rules.
-
-NAT before VPN
---------------
-
-Some application service providers (ASPs) operate a VPN gateway to
-provide access to their internal resources, and require that a
-connecting organisation translate all traffic to the service provider
-network to a source address provided by the ASP.
-
-Example Network
-^^^^^^^^^^^^^^^
-
-Here's one example of a network environment for an ASP.
-The ASP requests that all connections from this company should come from
-172.29.41.89 - an address that is assigned by the ASP and not in use at
-the customer site.
-
-.. figure:: /_static/images/nat_before_vpn_topology.png
-   :scale: 100 %
-   :alt: NAT before VPN Topology
-
-   NAT before VPN Topology
-
-
-Configuration
-^^^^^^^^^^^^^
-
-The required configuration can be broken down into 4 major pieces:
-
-* A dummy interface for the provider-assigned IP;
-* NAT (specifically, Source NAT);
-* IPSec IKE and ESP Groups;
-* IPSec VPN tunnels.
-
-
-Dummy interface
-"""""""""""""""
-
-The dummy interface allows us to have an equivalent of the Cisco IOS
-Loopback interface - a router-internal interface we can use for IP
-addresses the router must know about, but which are not actually
-assigned to a real network.
-
-We only need a single step for this interface:
-
-.. code-block:: none
-
-  set interfaces dummy dum0 address '172.29.41.89/32'
-
-NAT Configuration
-"""""""""""""""""
-
-.. code-block:: none
-
-  set nat source rule 110 description 'Internal to ASP'
-  set nat source rule 110 destination address '172.27.1.0/24'
-  set nat source rule 110 outbound-interface 'any'
-  set nat source rule 110 source address '192.168.43.0/24'
-  set nat source rule 110 translation address '172.29.41.89'
-  set nat source rule 120 description 'Internal to ASP'
-  set nat source rule 120 destination address '10.125.0.0/16'
-  set nat source rule 120 outbound-interface 'any'
-  set nat source rule 120 source address '192.168.43.0/24'
-  set nat source rule 120 translation address '172.29.41.89'
-
-IPSec IKE and ESP
-"""""""""""""""""
-
-The ASP has documented their IPSec requirements:
-
-* IKE Phase:
-
-  * aes256 Encryption
-  * sha256 Hashes
-
-* ESP Phase:
-
-  * aes256 Encryption
-  * sha256 Hashes
-  * DH Group 14
-
-
-Additionally, we want to use VPNs only on our eth1 interface (the
-external interface in the image above)
-
-.. code-block:: none
-
-  set vpn ipsec ike-group my-ike ikev2-reauth 'no'
-  set vpn ipsec ike-group my-ike key-exchange 'ikev1'
-  set vpn ipsec ike-group my-ike lifetime '7800'
-  set vpn ipsec ike-group my-ike proposal 1 dh-group '14'
-  set vpn ipsec ike-group my-ike proposal 1 encryption 'aes256'
-  set vpn ipsec ike-group my-ike proposal 1 hash 'sha256'
-
-  set vpn ipsec esp-group my-esp compression 'disable'
-  set vpn ipsec esp-group my-esp lifetime '3600'
-  set vpn ipsec esp-group my-esp mode 'tunnel'
-  set vpn ipsec esp-group my-esp pfs 'disable'
-  set vpn ipsec esp-group my-esp proposal 1 encryption 'aes256'
-  set vpn ipsec esp-group my-esp proposal 1 hash 'sha256'
-
-  set vpn ipsec ipsec-interfaces interface 'eth1'
-
-IPSec VPN Tunnels
-"""""""""""""""""
-
-We'll use the IKE and ESP groups created above for this VPN. Because we
-need access to 2 different subnets on the far side, we will need two
-different tunnels. If you changed the names of the ESP group and IKE
-group in the previous step, make sure you use the correct names here
-too.
-
-.. code-block:: none
-
-  set vpn ipsec site-to-site peer 198.51.100.243 authentication mode 'pre-shared-secret'
-  set vpn ipsec site-to-site peer 198.51.100.243 authentication pre-shared-secret 'PASSWORD IS HERE'
-  set vpn ipsec site-to-site peer 198.51.100.243 connection-type 'initiate'
-  set vpn ipsec site-to-site peer 198.51.100.243 default-esp-group 'my-esp'
-  set vpn ipsec site-to-site peer 198.51.100.243 ike-group 'my-ike'
-  set vpn ipsec site-to-site peer 198.51.100.243 ikev2-reauth 'inherit'
-  set vpn ipsec site-to-site peer 198.51.100.243 local-address '203.0.113.46'
-  set vpn ipsec site-to-site peer 198.51.100.243 tunnel 0 local prefix '172.29.41.89/32'
-  set vpn ipsec site-to-site peer 198.51.100.243 tunnel 0 remote prefix '172.27.1.0/24'
-  set vpn ipsec site-to-site peer 198.51.100.243 tunnel 1 local prefix '172.29.41.89/32'
-  set vpn ipsec site-to-site peer 198.51.100.243 tunnel 1 remote prefix '10.125.0.0/16'
-
-Testing and Validation
-""""""""""""""""""""""
-
-If you've completed all the above steps you no doubt want to see if it's
-all working.
-
-Start by checking for IPSec SAs (Security Associations) with:
-
-.. code-block:: none
-
-  $ show vpn ipsec sa
-
-  Peer ID / IP                            Local ID / IP
-  ------------                            -------------
-  198.51.100.243                          203.0.113.46
-
-      Tunnel  State  Bytes Out/In   Encrypt  Hash    NAT-T  A-Time  L-Time  Proto
-      ------  -----  -------------  -------  ----    -----  ------  ------  -----
-      0       up     0.0/0.0        aes256   sha256  no     1647    3600    all
-      1       up     0.0/0.0        aes256   sha256  no     865     3600    all
-
-That looks good - we defined 2 tunnels and they're both up and running.
+   nat44
+   nat66
diff --git a/docs/configuration/nat/nat44.rst b/docs/configuration/nat/nat44.rst
new file mode 100644
index 00000000..59cee741
--- /dev/null
+++ b/docs/configuration/nat/nat44.rst
@@ -0,0 +1,733 @@
+.. _nat44:
+
+#####
+NAT44
+#####
+
+:abbr:`NAT (Network Address Translation)` is a common method of
+remapping one IP address space into another by modifying network address
+information in the IP header of packets while they are in transit across
+a traffic routing device. The technique was originally used as a
+shortcut to avoid the need to readdress every host when a network was
+moved. It has become a popular and essential tool in conserving global
+address space in the face of IPv4 address exhaustion. One
+Internet-routable IP address of a NAT gateway can be used for an entire
+private network.
+
+IP masquerading is a technique that hides an entire IP address space,
+usually consisting of private IP addresses, behind a single IP address
+in another, usually public address space. The hidden addresses are
+changed into a single (public) IP address as the source address of the
+outgoing IP packets so they appear as originating not from the hidden
+host but from the routing device itself. Because of the popularity of
+this technique to conserve IPv4 address space, the term NAT has become
+virtually synonymous with IP masquerading.
+
+As network address translation modifies the IP address information in
+packets, NAT implementations may vary in their specific behavior in
+various addressing cases and their effect on network traffic. The
+specifics of NAT behavior are not commonly documented by vendors of
+equipment containing NAT implementations.
+
+The computers on an internal network can use any of the addresses set
+aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for
+private addressing (see :rfc:`1918`). These reserved IP addresses are
+not in use on the Internet, so an external machine will not directly
+route to them. The following addresses are reserved for private use:
+
+* 10.0.0.0 to 10.255.255.255 (CIDR: 10.0.0.0/8)
+* 172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)
+* 192.168.0.0 to 192.168.255.255 (CIDR: 192.168.0.0/16)
+
+
+If an ISP deploys a :abbr:`CGN (Carrier-grade NAT)`, and uses
+:rfc:`1918` address space to number customer gateways, the risk of
+address collision, and therefore routing failures, arises when the
+customer network already uses an :rfc:`1918` address space.
+
+This prompted some ISPs to develop a policy within the :abbr:`ARIN
+(American Registry for Internet Numbers)` to allocate new private
+address space for CGNs, but ARIN deferred to the IETF before
+implementing the policy indicating that the matter was not a typical
+allocation issue but a reservation of addresses for technical purposes
+(per :rfc:`2860`).
+
+IETF published :rfc:`6598`, detailing a shared address space for use in
+ISP CGN deployments that can handle the same network prefixes occurring
+both on inbound and outbound interfaces. ARIN returned address space to
+the :abbr:`IANA (Internet Assigned Numbers Authority)` for this
+allocation.
+
+The allocated address block is 100.64.0.0/10.
+
+Devices evaluating whether an IPv4 address is public must be updated to
+recognize the new address space. Allocating more private IPv4 address
+space for NAT devices might prolong the transition to IPv6.
+
+Overview
+========
+
+Different NAT Types
+-------------------
+
+.. _source-nat:
+
+SNAT
+^^^^
+
+:abbr:`SNAT (Source Network Address Translation)` is the most common
+form of :abbr:`NAT (Network Address Translation)` and is typically
+referred to simply as NAT. To be more correct, what most people refer
+to as :abbr:`NAT (Network Address Translation)` is actually the process
+of :abbr:`PAT (Port Address Translation)`, or NAT overload. SNAT is
+typically used by internal users/private hosts to access the Internet
+- the source address is translated and thus kept private.
+
+.. _destination-nat:
+
+DNAT
+^^^^
+
+:abbr:`DNAT (Destination Network Address Translation)` changes the
+destination address of packets passing through the router, while
+:ref:`source-nat` changes the source address of packets. DNAT is
+typically used when an external (public) host needs to initiate a
+session with an internal (private) host. A customer needs to access a
+private service behind the routers public IP. A connection is
+established with the routers public IP address on a well known port and
+thus all traffic for this port is rewritten to address the internal
+(private) host.
+
+.. _bidirectional-nat:
+
+Bidirectional NAT
+^^^^^^^^^^^^^^^^^
+
+This is a common scenario where both :ref:`source-nat` and
+:ref:`destination-nat` are configured at the same time. It's commonly
+used then internal (private) hosts need to establish a connection with
+external resources and external systems need to access internal
+(private) resources.
+
+NAT, Routing, Firewall Interaction
+----------------------------------
+
+There is a very nice picture/explanation in the Vyatta documentation
+which should be rewritten here.
+
+NAT Ruleset
+-----------
+
+:abbr:`NAT (Network Address Translation)` is configured entirely on a
+series of so called `rules`. Rules are numbered and evaluated by the
+underlying OS in numerical order! The rule numbers can be changes by
+utilizing the :cfgcmd:`rename` and :cfgcmd:`copy` commands.
+
+.. note:: Changes to the NAT system only affect newly established
+   connections. Already established connections are not affected.
+
+.. hint:: When designing your NAT ruleset leave some space between
+   consecutive rules for later extension. Your ruleset could start with
+   numbers 10, 20, 30. You thus can later extend the ruleset and place
+   new rules between existing ones.
+
+Rules will be created for both :ref:`source-nat` and
+:ref:`destination-nat`.
+
+For :ref:`bidirectional-nat` a rule for both :ref:`source-nat` and
+:ref:`destination-nat` needs to be created.
+
+.. _traffic-filters:
+
+Traffic Filters
+---------------
+
+Traffic Filters are used to control which packets will have the defined
+NAT rules applied. Five different filters can be applied within a NAT
+rule.
+
+* **outbound-interface** - applicable only to :ref:`source-nat`. It
+  configures the interface which is used for the outside traffic that
+  this translation rule applies to.
+
+  Example:
+
+  .. code-block:: none
+
+    set nat source rule 20 outbound-interface eth0
+
+* **inbound-interface** - applicable only to :ref:`destination-nat`. It
+  configures the interface which is used for the inside traffic the
+  translation rule applies to.
+
+  Example:
+
+  .. code-block:: none
+
+    set nat destination rule 20 inbound-interface eth1
+
+* **protocol** - specify which types of protocols this translation rule
+  applies to. Only packets matching the specified protocol are NATed.
+  By default this applies to `all` protocols.
+
+  Example:
+
+  * Set SNAT rule 20 to only NAT TCP and UDP packets
+  * Set DNAT rule 20 to only NAT UDP packets
+
+  .. code-block:: none
+
+    set nat source rule 20 protocol tcp_udp
+    set nat destination rule 20 protocol udp
+
+* **source** - specifies which packets the NAT translation rule applies
+  to based on the packets source IP address and/or source port. Only
+  matching packets are considered for NAT.
+
+  Example:
+
+  * Set SNAT rule 20 to only NAT packets arriving from the 192.0.2.0/24
+    network
+  * Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24
+    network with a source port of 80 and 443
+
+  .. code-block:: none
+
+    set nat source rule 20 source address 192.0.2.0/24
+    set nat source rule 30 source address 203.0.113.0/24
+    set nat source rule 30 source port 80,443
+
+
+* **destination** - specify which packets the translation will be
+  applied to, only based on the destination address and/or port number
+  configured.
+
+  .. note:: If no destination is specified the rule will match on any
+     destination address and port.
+
+  Example:
+
+  * Configure SNAT rule (40) to only NAT packets with a destination
+    address of 192.0.2.1.
+
+  .. code-block:: none
+
+    set nat source rule 40 destination address 192.0.2.1
+
+
+Address Conversion
+------------------
+
+Every NAT rule has a translation command defined. The address defined
+for the translation is the address used when the address information in
+a packet is replaced.
+
+Source Address
+^^^^^^^^^^^^^^
+
+For :ref:`source-nat` rules the packets source address will be replaced
+with the address specified in the translation command. A port
+translation can also be specified and is part of the translation
+address.
+
+.. note:: The translation address must be set to one of the available
+   addresses on the configured `outbound-interface` or it must be set to
+   `masquerade` which will use the primary IP address of the
+   `outbound-interface` as its translation address.
+
+.. note:: When using NAT for a large number of host systems it
+   recommended that a minimum of 1 IP address is used to NAT every 256
+   private host systems. This is due to the limit of 65,000 port numbers
+   available for unique translations and a reserving an average of
+   200-300 sessions per host system.
+
+Example:
+
+* Define a discrete source IP address of 100.64.0.1 for SNAT rule 20
+* Use address `masquerade` (the interfaces primary address) on rule 30
+* For a large amount of private machines behind the NAT your address
+  pool might to be bigger. Use any address in the range 100.64.0.10 -
+  100.64.0.20 on SNAT rule 40 when doing the translation
+
+
+.. code-block:: none
+
+  set nat source rule 20 translation address 100.64.0.1
+  set nat source rule 30 translation address 'masquerade'
+  set nat source rule 40 translation address 100.64.0.10-100.64.0.20
+
+
+Destination Address
+^^^^^^^^^^^^^^^^^^^
+
+For :ref:`destination-nat` rules the packets destination address will be
+replaced by the specified address in the `translation address` command.
+
+Example:
+
+* DNAT rule 10 replaces the destination address of an inbound packet
+  with 192.0.2.10
+
+.. code-block:: none
+
+  set nat destination rule 10 translation address 192.0.2.10
+
+
+Configuration Examples
+======================
+
+To setup SNAT, we need to know:
+
+* The internal IP addresses we want to translate
+* The outgoing interface to perform the translation on
+* The external IP address to translate to
+
+In the example used for the Quick Start configuration above, we
+demonstrate the following configuration:
+
+.. code-block:: none
+
+  set nat source rule 100 outbound-interface 'eth0'
+  set nat source rule 100 source address '192.168.0.0/24'
+  set nat source rule 100 translation address 'masquerade'
+
+Which generates the following configuration:
+
+.. code-block:: none
+
+  rule 100 {
+      outbound-interface eth0
+      source {
+          address 192.168.0.0/24
+      }
+      translation {
+          address masquerade
+      }
+  }
+
+In this example, we use **masquerade** as the translation address
+instead of an IP address. The **masquerade** target is effectively an
+alias to say "use whatever IP address is on the outgoing interface",
+rather than a statically configured IP address. This is useful if you
+use DHCP for your outgoing interface and do not know what the external
+address will be.
+
+When using NAT for a large number of host systems it recommended that a
+minimum of 1 IP address is used to NAT every 256 host systems. This is
+due to the limit of 65,000 port numbers available for unique
+translations and a reserving an average of 200-300 sessions per host
+system.
+
+Example: For an ~8,000 host network a source NAT pool of 32 IP addresses
+is recommended.
+
+A pool of addresses can be defined by using a hyphen between two IP
+addresses:
+
+.. code-block:: none
+
+  set nat source rule 100 translation address '203.0.113.32-203.0.113.63'
+
+.. _avoidng_leaky_nat:
+
+Avoiding "leaky" NAT
+--------------------
+
+Linux netfilter will not NAT traffic marked as INVALID. This often
+confuses people into thinking that Linux (or specifically VyOS) has a
+broken NAT implementation because non-NATed traffic is seen leaving an
+external interface. This is actually working as intended, and a packet
+capture of the "leaky" traffic should reveal that the traffic is either
+an additional TCP "RST", "FIN,ACK", or "RST,ACK" sent by client systems
+after Linux netfilter considers the connection closed. The most common
+is the additional TCP RST some host implementations send after
+terminating a connection (which is implementation-specific).
+
+In other words, connection tracking has already observed the connection
+be closed and has transition the flow to INVALID to prevent attacks from
+attempting to reuse the connection.
+
+You can avoid the "leaky" behavior by using a firewall policy that drops
+"invalid" state packets.
+
+Having control over the matching of INVALID state traffic, e.g. the
+ability to selectively log, is an important troubleshooting tool for
+observing broken protocol behavior. For this reason, VyOS does not
+globally drop invalid state traffic, instead allowing the operator to
+make the determination on how the traffic is handled.
+
+.. _hairpin_nat_reflection:
+
+Hairpin NAT/NAT Reflection
+--------------------------
+
+A typical problem with using NAT and hosting public servers is the
+ability for internal systems to reach an internal server using it's
+external IP address. The solution to this is usually the use of
+split-DNS to correctly point host systems to the internal address when
+requests are made internally. Because many smaller networks lack DNS
+infrastructure, a work-around is commonly deployed to facilitate the
+traffic by NATing the request from internal hosts to the source address
+of the internal interface on the firewall.
+
+This technique is commonly referred to as NAT Reflection or Hairpin NAT.
+
+Example:
+
+* Redirect Microsoft RDP traffic from the outside (WAN, external) world
+  via :ref:`destination-nat` in rule 100 to the internal, private host
+  192.0.2.40.
+
+* Redirect Microsoft RDP traffic from the internal (LAN, private)
+  network via :ref:`destination-nat` in rule 110 to the internal,
+  private host 192.0.2.40. We also need a :ref:`source-nat` rule 110 for
+  the reverse path of the traffic. The internal network 192.0.2.0/24 is
+  reachable via interface `eth0.10`.
+
+.. code-block:: none
+
+  set nat destination rule 100 description 'Regular destination NAT from external'
+  set nat destination rule 100 destination port '3389'
+  set nat destination rule 100 inbound-interface 'pppoe0'
+  set nat destination rule 100 protocol 'tcp'
+  set nat destination rule 100 translation address '192.0.2.40'
+
+  set nat destination rule 110 description 'NAT Reflection: INSIDE'
+  set nat destination rule 110 destination port '3389'
+  set nat destination rule 110 inbound-interface 'eth0.10'
+  set nat destination rule 110 protocol 'tcp'
+  set nat destination rule 110 translation address '192.0.2.40'
+
+  set nat source rule 110 description 'NAT Reflection: INSIDE'
+  set nat source rule 110 destination address '192.0.2.0/24'
+  set nat source rule 110 outbound-interface 'eth0.10'
+  set nat source rule 110 protocol 'tcp'
+  set nat source rule 110 source address '192.0.2.0/24'
+  set nat source rule 110 translation address 'masquerade'
+
+Which results in a configuration of:
+
+.. code-block:: none
+
+  vyos@vyos# show nat
+   destination {
+       rule 100 {
+           description "Regular destination NAT from external"
+           destination {
+               port 3389
+           }
+           inbound-interface pppoe0
+           protocol tcp
+           translation {
+               address 192.0.2.40
+           }
+       }
+       rule 110 {
+           description "NAT Reflection: INSIDE"
+           destination {
+               port 3389
+           }
+           inbound-interface eth0.10
+           protocol tcp
+           translation {
+               address 192.0.2.40
+           }
+       }
+   }
+   source {
+       rule 110 {
+           description "NAT Reflection: INSIDE"
+           destination {
+               address 192.0.2.0/24
+           }
+           outbound-interface eth0.10
+           protocol tcp
+           source {
+               address 192.0.2.0/24
+           }
+           translation {
+               address masquerade
+           }
+       }
+   }
+
+
+Destination NAT
+---------------
+
+DNAT is typically referred to as a **Port Forward**. When using VyOS as
+a NAT router and firewall, a common configuration task is to redirect
+incoming traffic to a system behind the firewall.
+
+In this example, we will be using the example Quick Start configuration
+above as a starting point.
+
+To setup a destination NAT rule we need to gather:
+
+* The interface traffic will be coming in on;
+* The protocol and port we wish to forward;
+* The IP address of the internal system we wish to forward traffic to.
+
+In our example, we will be forwarding web server traffic to an internal
+web server on 192.168.0.100. HTTP traffic makes use of the TCP protocol
+on port 80. For other common port numbers, see:
+https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
+
+Our configuration commands would be:
+
+.. code-block:: none
+
+  set nat destination rule 10 description 'Port Forward: HTTP to 192.168.0.100'
+  set nat destination rule 10 destination port '80'
+  set nat destination rule 10 inbound-interface 'eth0'
+  set nat destination rule 10 protocol 'tcp'
+  set nat destination rule 10 translation address '192.168.0.100'
+
+Which would generate the following NAT destination configuration:
+
+.. code-block:: none
+
+  nat {
+      destination {
+          rule 10 {
+              description "Port Forward: HTTP to 192.168.0.100"
+              destination {
+                  port 80
+              }
+              inbound-interface eth0
+              protocol tcp
+              translation {
+                  address 192.168.0.100
+              }
+          }
+      }
+  }
+
+.. note:: If forwarding traffic to a different port than it is arriving
+   on, you may also configure the translation port using
+   `set nat destination rule [n] translation port`.
+
+This establishes our Port Forward rule, but if we created a firewall
+policy it will likely block the traffic.
+
+It is important to note that when creating firewall rules that the DNAT
+translation occurs **before** traffic traverses the firewall. In other
+words, the destination address has already been translated to
+192.168.0.100.
+
+So in our firewall policy, we want to allow traffic coming in on the
+outside interface, destined for TCP port 80 and the IP address of
+192.168.0.100.
+
+.. code-block:: none
+
+  set firewall name OUTSIDE-IN rule 20 action 'accept'
+  set firewall name OUTSIDE-IN rule 20 destination address '192.168.0.100'
+  set firewall name OUTSIDE-IN rule 20 destination port '80'
+  set firewall name OUTSIDE-IN rule 20 protocol 'tcp'
+  set firewall name OUTSIDE-IN rule 20 state new 'enable'
+
+This would generate the following configuration:
+
+.. code-block:: none
+
+  rule 20 {
+      action accept
+      destination {
+          address 192.168.0.100
+          port 80
+      }
+      protocol tcp
+      state {
+          new enable
+      }
+  }
+
+.. note::
+
+  If you have configured the `INSIDE-OUT` policy, you will need to add
+  additional rules to permit inbound NAT traffic.
+
+1-to-1 NAT
+----------
+
+Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT
+configuration, both DNAT and SNAT are used to NAT all traffic from an
+external IP address to an internal IP address and vice-versa.
+
+Typically, a 1-to-1 NAT rule omits the destination port (all ports) and
+replaces the protocol with either **all** or **ip**.
+
+Then a corresponding SNAT rule is created to NAT outgoing traffic for
+the internal IP to a reserved external IP. This dedicates an external IP
+address to an internal IP address and is useful for protocols which
+don't have the notion of ports, such as GRE.
+
+Here's an extract of a simple 1-to-1 NAT configuration with one internal
+and one external interface:
+
+.. code-block:: none
+
+  set interfaces ethernet eth0 address '192.168.1.1/24'
+  set interfaces ethernet eth0 description 'Inside interface'
+  set interfaces ethernet eth1 address '192.0.2.30/24'
+  set interfaces ethernet eth1 description 'Outside interface'
+  set nat destination rule 2000 description '1-to-1 NAT example'
+  set nat destination rule 2000 destination address '192.0.2.30'
+  set nat destination rule 2000 inbound-interface 'eth1'
+  set nat destination rule 2000 translation address '192.168.1.10'
+  set nat source rule 2000 description '1-to-1 NAT example'
+  set nat source rule 2000 outbound-interface 'eth1'
+  set nat source rule 2000 source address '192.168.1.10'
+  set nat source rule 2000 translation address '192.0.2.30'
+
+Firewall rules are written as normal, using the internal IP address as
+the source of outbound rules and the destination of inbound rules.
+
+NAT before VPN
+--------------
+
+Some application service providers (ASPs) operate a VPN gateway to
+provide access to their internal resources, and require that a
+connecting organisation translate all traffic to the service provider
+network to a source address provided by the ASP.
+
+Example Network
+^^^^^^^^^^^^^^^
+
+Here's one example of a network environment for an ASP.
+The ASP requests that all connections from this company should come from
+172.29.41.89 - an address that is assigned by the ASP and not in use at
+the customer site.
+
+.. figure:: /_static/images/nat_before_vpn_topology.png
+   :scale: 100 %
+   :alt: NAT before VPN Topology
+
+   NAT before VPN Topology
+
+
+Configuration
+^^^^^^^^^^^^^
+
+The required configuration can be broken down into 4 major pieces:
+
+* A dummy interface for the provider-assigned IP;
+* NAT (specifically, Source NAT);
+* IPSec IKE and ESP Groups;
+* IPSec VPN tunnels.
+
+
+Dummy interface
+"""""""""""""""
+
+The dummy interface allows us to have an equivalent of the Cisco IOS
+Loopback interface - a router-internal interface we can use for IP
+addresses the router must know about, but which are not actually
+assigned to a real network.
+
+We only need a single step for this interface:
+
+.. code-block:: none
+
+  set interfaces dummy dum0 address '172.29.41.89/32'
+
+NAT Configuration
+"""""""""""""""""
+
+.. code-block:: none
+
+  set nat source rule 110 description 'Internal to ASP'
+  set nat source rule 110 destination address '172.27.1.0/24'
+  set nat source rule 110 outbound-interface 'any'
+  set nat source rule 110 source address '192.168.43.0/24'
+  set nat source rule 110 translation address '172.29.41.89'
+  set nat source rule 120 description 'Internal to ASP'
+  set nat source rule 120 destination address '10.125.0.0/16'
+  set nat source rule 120 outbound-interface 'any'
+  set nat source rule 120 source address '192.168.43.0/24'
+  set nat source rule 120 translation address '172.29.41.89'
+
+IPSec IKE and ESP
+"""""""""""""""""
+
+The ASP has documented their IPSec requirements:
+
+* IKE Phase:
+
+  * aes256 Encryption
+  * sha256 Hashes
+
+* ESP Phase:
+
+  * aes256 Encryption
+  * sha256 Hashes
+  * DH Group 14
+
+
+Additionally, we want to use VPNs only on our eth1 interface (the
+external interface in the image above)
+
+.. code-block:: none
+
+  set vpn ipsec ike-group my-ike ikev2-reauth 'no'
+  set vpn ipsec ike-group my-ike key-exchange 'ikev1'
+  set vpn ipsec ike-group my-ike lifetime '7800'
+  set vpn ipsec ike-group my-ike proposal 1 dh-group '14'
+  set vpn ipsec ike-group my-ike proposal 1 encryption 'aes256'
+  set vpn ipsec ike-group my-ike proposal 1 hash 'sha256'
+
+  set vpn ipsec esp-group my-esp compression 'disable'
+  set vpn ipsec esp-group my-esp lifetime '3600'
+  set vpn ipsec esp-group my-esp mode 'tunnel'
+  set vpn ipsec esp-group my-esp pfs 'disable'
+  set vpn ipsec esp-group my-esp proposal 1 encryption 'aes256'
+  set vpn ipsec esp-group my-esp proposal 1 hash 'sha256'
+
+  set vpn ipsec ipsec-interfaces interface 'eth1'
+
+IPSec VPN Tunnels
+"""""""""""""""""
+
+We'll use the IKE and ESP groups created above for this VPN. Because we
+need access to 2 different subnets on the far side, we will need two
+different tunnels. If you changed the names of the ESP group and IKE
+group in the previous step, make sure you use the correct names here
+too.
+
+.. code-block:: none
+
+  set vpn ipsec site-to-site peer 198.51.100.243 authentication mode 'pre-shared-secret'
+  set vpn ipsec site-to-site peer 198.51.100.243 authentication pre-shared-secret 'PASSWORD IS HERE'
+  set vpn ipsec site-to-site peer 198.51.100.243 connection-type 'initiate'
+  set vpn ipsec site-to-site peer 198.51.100.243 default-esp-group 'my-esp'
+  set vpn ipsec site-to-site peer 198.51.100.243 ike-group 'my-ike'
+  set vpn ipsec site-to-site peer 198.51.100.243 ikev2-reauth 'inherit'
+  set vpn ipsec site-to-site peer 198.51.100.243 local-address '203.0.113.46'
+  set vpn ipsec site-to-site peer 198.51.100.243 tunnel 0 local prefix '172.29.41.89/32'
+  set vpn ipsec site-to-site peer 198.51.100.243 tunnel 0 remote prefix '172.27.1.0/24'
+  set vpn ipsec site-to-site peer 198.51.100.243 tunnel 1 local prefix '172.29.41.89/32'
+  set vpn ipsec site-to-site peer 198.51.100.243 tunnel 1 remote prefix '10.125.0.0/16'
+
+Testing and Validation
+""""""""""""""""""""""
+
+If you've completed all the above steps you no doubt want to see if it's
+all working.
+
+Start by checking for IPSec SAs (Security Associations) with:
+
+.. code-block:: none
+
+  $ show vpn ipsec sa
+
+  Peer ID / IP                            Local ID / IP
+  ------------                            -------------
+  198.51.100.243                          203.0.113.46
+
+      Tunnel  State  Bytes Out/In   Encrypt  Hash    NAT-T  A-Time  L-Time  Proto
+      ------  -----  -------------  -------  ----    -----  ------  ------  -----
+      0       up     0.0/0.0        aes256   sha256  no     1647    3600    all
+      1       up     0.0/0.0        aes256   sha256  no     865     3600    all
+
+That looks good - we defined 2 tunnels and they're both up and running.
diff --git a/docs/configuration/nat/nat66.rst b/docs/configuration/nat/nat66.rst
new file mode 100644
index 00000000..bcf5570f
--- /dev/null
+++ b/docs/configuration/nat/nat66.rst
@@ -0,0 +1,127 @@
+.. _nat66:
+
+############
+NAT66(NPTv6)
+############
+
+:abbr:`NPTv6 (IPv6-to-IPv6 Network Prefix Translation)` is an address translation technology based
+on IPv6 networks, used to convert an IPv6 address prefix in an IPv6 message into another IPv6
+address prefix. We call this address translation method NAT66. Devices that support the NAT66
+function are called NAT66 devices, which can provide NAT66 source and destination address
+translation functions.
+
+Overview
+========
+
+Different NAT Types
+-------------------
+
+.. _source-nat66:
+
+SNAT66
+^^^^^^
+
+:abbr:`SNPTv6 (Source IPv6-to-IPv6 Network Prefix Translation)` The conversion function is mainly used in
+the following scenarios:
+
+* A single internal network and external network. Use the NAT66 device to connect a single internal
+  network and public network, and the hosts in the internal network use IPv6 address prefixes that
+  only support routing within the local range. When a host in the internal network accesses the
+  external network, the source IPv6 address prefix in the message will be converted into a
+  global unicast IPv6 address prefix by the NAT66 device.
+* Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network
+  to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an
+  equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you
+  can configure the same source address translation rules on these NAT66 devices, so that any
+  NAT66 device can handle IPv6 traffic between different sites.
+* Multi-homed. In a multi-homed network environment, the NAT66 device connects to an
+  internal network and simultaneously connects to different external networks. Address
+  translation can be configured on each external network side interface of the NAT66
+  device to convert the same internal network address into different external network
+  addresses, and realize the mapping of the same internal address to multiple external addresses.
+
+.. _destination-nat66:
+
+DNAT66
+^^^^^^
+
+The :abbr:`DNPTv6 (Destination IPv6-to-IPv6 Network Prefix Translation)` destination address translation
+function is used in scenarios where the server in the internal network provides services to the external
+network, such as providing Web services or FTP services to the external network. By configuring the mapping
+relationship between the internal server address and the external network address on the external network
+side interface of the NAT66 device, external network users can access the internal network server through
+the designated external network address.
+
+Prefix Conversion
+------------------
+
+Source Prefix
+^^^^^^^^^^^^^
+
+Every SNAT66 rule has a translation command defined. The prefix defined
+for the translation is the prefix used when the address information in
+a packet is replaced.、
+
+The :ref:`source-nat66` rule replaces the source address of the packet and calculates the
+converted address using the prefix specified in the rule.
+
+Example:
+
+* Convert the address prefix of a single `fc01::/64` network to `fc00::/64`
+* Output from `eth0` network interface
+
+.. code-block:: none
+
+  set nat66 source rule 1 outbound-interface 'eth0'
+  set nat66 source rule 1 source prefix 'fc01::/64'
+  set nat66 source rule 1 translation prefix 'fc00::/64'
+
+Destination Prefix
+^^^^^^^^^^^^^^^^^^
+
+For the :ref:`destination-nat66` rule, the destination address of the packet is
+replaced by the address calculated from the specified address or prefix in the
+`translation address` command
+
+Example:
+
+* Convert the address prefix of a single `fc00::/64` network to `fc01::/64`
+* Input from `eth0` network interface
+
+.. code-block:: none
+
+  set nat66 destination rule 1 inbound-interface 'eth0'
+  set nat66 destination rule 1 destination address 'fc00::/64'
+  set nat66 destination rule 1 translation address 'fc01::/64'
+
+Configuration Examples
+======================
+
+Use the following topology to build a nat66 based isolated network between internal
+and external networks (dynamic prefix is not supported):
+
+.. figure:: /_static/images/vyos_1_4_nat66_simple.png
+   :alt: VyOS NAT66 Simple Configure
+
+R1:
+
+.. code-block:: none
+
+  set interfaces ethernet eth0 ipv6 address autoconf
+  set interfaces ethernet eth1 address 'fc01::1/64'
+  set nat66 destination rule 1 destination address 'fc00:470:f1cd:101::/64'
+  set nat66 destination rule 1 inbound-interface 'eth0'
+  set nat66 destination rule 1 translation address 'fc01::/64'
+  set nat66 source rule 1 outbound-interface 'eth0'
+  set nat66 source rule 1 source prefix 'fc01::/64'
+  set nat66 source rule 1 translation prefix 'fc00:470:f1cd:101::/64'
+
+R2:
+
+.. code-block:: none
+
+  set interfaces bridge br1 address 'fc01::2/64'
+  set interfaces bridge br1 member interface eth0
+  set interfaces bridge br1 member interface eth1
+  set protocols static route6 ::/0 next-hop fc01::1
+  set service router-advert interface br1 prefix ::/0
diff --git a/docs/configuration/nat/nptv6.rst b/docs/configuration/nat/nptv6.rst
deleted file mode 100644
index c09c8336..00000000
--- a/docs/configuration/nat/nptv6.rst
+++ /dev/null
@@ -1,69 +0,0 @@
-.. include:: /_include/need_improvement.txt
-
-.. _nptv6:
-
-#####
-NPTv6
-#####
-
-:abbr:`NPTv6 (Network Prefix Translation)` is a form of NAT for IPv6. It's
-described in :rfc:`6296`.
-
-**Usage**
-
-NPTv6 is very useful for IPv6 multihoming. It is also commonly used when the
-external IPv6 prefix is dynamic, as it prevents the need for renumbering of
-internal hosts when the extern prefix changes.
-
-Let's assume the following network configuration:
-
-* eth0 : LAN
-* eth1 : WAN1, with 2001:db8:e1::/48 routed towards it
-* eth2 : WAN2, with 2001:db8:e2::/48 routed towards it
-
-Regarding LAN hosts addressing, why would you choose 2001:db8:e1::/48 over
-2001:db8:e2::/48? What happens when you get a new provider with a different
-routed IPv6 subnet?
-
-The solution here is to assign to your hosts ULAs_ and to prefix-translate
-their address to the right subnet when going through your router.
-
-* LAN Subnet : fc00:dead:beef::/48
-* WAN 1 Subnet : 2001:db8:e1::/48
-* WAN 2 Subnet : 2001:db8:e2::/48
-
-* eth0 addr : fc00:dead:beef::1/48
-* eth1 addr : 2001:db8:e1::1/48
-* eth2 addr : 2001:db8:e2::1/48
-
-VyOS Support
-^^^^^^^^^^^^
-
-NPTv6 support has been added in VyOS 1.2 (Crux) and is available through
-`nat nptv6` configuration nodes.
-
-.. code-block:: none
-
-  set rule 10 source prefix 'fc00:dead:beef::/48'
-  set rule 10 outbound-interface 'eth1'
-  set rule 10 translation prefix '2001:db8:e1::/48'
-  set rule 20 source prefix 'fc00:dead:beef::/48'
-  set rule 20 outbound-interface 'eth2'
-  set rule 20 translation prefix '2001:db8:e2::/48'
-
-Resulting in the following ip6tables rules:
-
-.. code-block:: none
-
-  Chain VYOS_DNPT_HOOK (1 references)
-   pkts bytes target   prot opt in   out   source              destination
-      0     0 NETMAP   all    eth1   any   anywhere            2001:db8:e1::/48  to:fc00:dead:beef::/48
-      0     0 NETMAP   all    eth2   any   anywhere            2001:db8:e2::/48  to:fc00:dead:beef::/48
-      0     0 RETURN   all    any    any   anywhere            anywhere
-  Chain VYOS_SNPT_HOOK (1 references)
-   pkts bytes target   prot opt in   out   source              destination
-      0     0 NETMAP   all    any    eth1  fc00:dead:beef::/48 anywhere          to:2001:db8:e1::/48
-      0     0 NETMAP   all    any    eth2  fc00:dead:beef::/48 anywhere          to:2001:db8:e2::/48
-      0     0 RETURN   all    any    any   anywhere            anywhere
-
-.. _ULAs: https://en.wikipedia.org/wiki/Unique_local_address

From b5ca65f38f01c8ffd1575c0bb171bca45571d5e4 Mon Sep 17 00:00:00 2001
From: Cheeze-It <16260577+Cheeze-It@users.noreply.github.com>
Date: Sun, 24 Jan 2021 11:40:08 -0700
Subject: [PATCH 286/295] bgp: T1875: Add BGP allow range command documentation
 (#431)

This is a documentation addition for the allow range command
within BGP, as well as the associated limit command as well.
There was a few spelling mistakes that were fixed too, but
not anything big.

Co-authored-by: Cheeze_It <none@none.com>
---
 docs/configuration/protocols/bgp.rst | 23 ++++++++++++++++++++---
 1 file changed, 20 insertions(+), 3 deletions(-)

diff --git a/docs/configuration/protocols/bgp.rst b/docs/configuration/protocols/bgp.rst
index 2d9c9af5..caac6714 100644
--- a/docs/configuration/protocols/bgp.rst
+++ b/docs/configuration/protocols/bgp.rst
@@ -553,11 +553,11 @@ Common parametrs
 
 .. cfgcmd:: set protocols bgp <asn> parameters log-neighbor-changes
 
-   Tis command enable logging neighbor up/down changes and reset reason.
+   This command enable logging neighbor up/down changes and reset reason.
 
 .. cfgcmd:: set protocols bgp <asn> parameters no-client-to-client-reflection
 
-   Tis command disables route reflection between route reflector clients.
+   This command disables route reflection between route reflector clients.
    By default, the clients of a route reflector are not required to be 
    fully meshed and the routes from a client are reflected to other clients. 
    However, if the clients are fully meshed, route reflection is not required.
@@ -566,8 +566,25 @@ Common parametrs
 
 .. cfgcmd:: set protocols bgp <asn> parameters no-fast-external-failover
    
-   Disable immediate sesison reset if peer's connected link goes down.
+   Disable immediate session reset if peer's connected link goes down.
 
+.. cfgcmd:: set protocols bgp <asn> listen range <prefix> peer-group <name>
+
+   This command is useful if one desires to loosen the requirement for BGP
+   to have strictly defined neighbors. Specifically what is allowed is for
+   the local router to listen to a range of IPv4 or IPv6 addresses defined
+   by a prefix and to accept BGP open messages. When a TCP connection
+   (and subsequently a BGP open message) from within this range tries to
+   connect the local router then the local router will respond and connect
+   with the parameters that are defined within the peer group. One must define
+   a peer-group for each range that is listed. If no peer-group is defined
+   then an error will keep you from committing the configuration.
+
+.. cfgcmd:: set protocols bgp <asn> listen limit <number>
+
+   This command goes hand in hand with the listen range command to limit the
+   amount of BGP neighbors that are allowed to connect to the local router.
+   The limit range is 1 to 5000.
 
 Administrative Distance
 ^^^^^^^^^^^^^^^^^^^^^^^

From 261867066022aa775a8480839a0ae0ecd26778a3 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 24 Jan 2021 19:50:58 +0100
Subject: [PATCH 287/295] Bump version to 1.4

---
 docs/conf.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/conf.py b/docs/conf.py
index 3d011ad5..594d6063 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -26,10 +26,10 @@ copyright = u'2021, VyOS maintainers and contributors'
 author = u'VyOS maintainers and contributors'
 
 # The short X.Y version
-version = u'1.3'
+version = u'1.4'
 
 # The full version, including alpha/beta/rc tags
-release = u'1.3.x (equuleus)'
+release = u'1.4.x (sagitta)'
 
 # -- General configuration ---------------------------------------------------
 

From c2ebc4a3c9cf5fd240357054288a1da7b827dc5a Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sat, 30 Jan 2021 13:35:32 +0100
Subject: [PATCH 288/295] ospf: T3267: move "interface ip ospf" CLI nodes to
 "protocols ospf" tree

---
 docs/configuration/protocols/ospf.rst | 27 ++++++++++++++++-----------
 1 file changed, 16 insertions(+), 11 deletions(-)

diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
index 2c098714..41ab7cac 100644
--- a/docs/configuration/protocols/ospf.rst
+++ b/docs/configuration/protocols/ospf.rst
@@ -306,7 +306,7 @@ Area Configuration
 Interface Configuration
 -----------------------
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf authentication
+.. cfgcmd:: set protocols ospf interface <interface> authentication
    plaintext-password <text>
 
    This command sets OSPF authentication key to a simple password. After
@@ -315,7 +315,7 @@ Interface Configuration
    Simple text password authentication is insecure and deprecated in favour of
    MD5 HMAC authentication.
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf authentication md5
+.. cfgcmd:: set protocols ospf interface <interface> authentication md5
    key-id <id> md5-key <text>
 
    This command specifys that MD5 HMAC authentication must be used on this
@@ -325,25 +325,25 @@ Interface Configuration
    The key can be long up to 16 chars (larger strings will be truncated),
    and is associated with the given key-id.
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf bandwidth <number>
+.. cfgcmd:: set protocols ospf interface <interface> bandwidth <number>
 
    This command sets the interface bandwidth for cost calculations, where
    bandwidth can be in range from 1 to 100000, specified in Mbits/s.
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf cost <number>
+.. cfgcmd:: set protocols ospf interface <interface> cost <number>
 
    This command sets link cost for the specified interface. The cost value is
    set to router-LSA’s metric field and used for SPF calculation. The cost
    range is 1 to 65535.
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf dead-interval <number>
+.. cfgcmd:: set protocols ospf interface <interface> dead-interval <number>
 
    Set number of seconds for router Dead Interval timer value used for Wait
    Timer and Inactivity Timer. This value must be the same for all routers
    attached to a common network. The default value is 40 seconds. The
    interval range is 1 to 65535.
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf hello-interval <number>
+.. cfgcmd:: set protocols ospf interface <interface> hello-interval <number>
 
    Set number of seconds for Hello Interval timer value. Setting this value,
    Hello packet will be sent every timer value seconds on the specified
@@ -351,13 +351,18 @@ Interface Configuration
    common network. The default value is 10 seconds. The interval range is 1
    to 65535.
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf mtu-ignore
+.. cfgcmd:: set protocols ospf interface <interface> bfd
+
+   This command enables :abbr:`BFD (Bidirectional Forwarding Detection)` on
+   this OSPF link interface.
+
+.. cfgcmd:: set protocols ospf interface <interface> mtu-ignore
 
    This command disables check of the MTU value in the OSPF DBD packets. Thus,
    use of this command allows the OSPF adjacency to reach the FULL state even
    though there is an interface MTU mismatch between two OSPF routers.
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf network <type>
+.. cfgcmd:: set protocols ospf interface <interface> network <type>
 
    This command allows to specify the distribution type for the network
    connected to this interface:
@@ -368,14 +373,14 @@ Interface Configuration
    networks.
    **point-to-point** – address distribution in point-to-point networks.
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf priority <number>
+.. cfgcmd:: set protocols ospf interface <interface> priority <number>
 
    This command sets Router Priority integer value. The router with the
    highest priority will be more eligible to become Designated Router.
    Setting the value to 0, makes the router ineligible to become
    Designated Router. The default value is 1. The interval range is 0 to 255.
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf retransmit-interval
+.. cfgcmd:: set protocols ospf interface <interface> retransmit-interval
    <number>
 
    This command sets number of seconds for RxmtInterval timer value. This
@@ -383,7 +388,7 @@ Interface Configuration
    Request packets if acknowledge was not received. The default value is 5
    seconds. The interval range is 3 to 65535.
 
-.. cfgcmd:: set interfaces <inttype> <intname> ip ospf transmit-delay <number>
+.. cfgcmd:: set protocols ospf interface <interface> transmit-delay <number>
 
    This command sets number of seconds for InfTransDelay value. It allows to
    set and adjust for each interface the delay interval before starting the

From 7fb7ae40f4b8546e34e43269e93d51edd3b25cd4 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 2 Feb 2021 23:08:33 +0100
Subject: [PATCH 289/295] ospf: add hello-multiplier

---
 docs/configuration/protocols/ospf.rst | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/docs/configuration/protocols/ospf.rst b/docs/configuration/protocols/ospf.rst
index 41ab7cac..e1957cec 100644
--- a/docs/configuration/protocols/ospf.rst
+++ b/docs/configuration/protocols/ospf.rst
@@ -343,6 +343,15 @@ Interface Configuration
    attached to a common network. The default value is 40 seconds. The
    interval range is 1 to 65535.
 
+.. cfgcmd:: set protocols ospf interface <interface> hello-multiplier <number>
+
+   The hello-multiplier specifies how many Hellos to send per second, from 1
+   (every second) to 10 (every 100ms). Thus one can have 1s convergence time
+   for OSPF. If this form is specified, then the hello-interval advertised in
+   Hello packets is set to 0 and the hello-interval on received Hello packets
+   is not checked, thus the hello-multiplier need NOT be the same across
+   multiple routers on a common link.
+
 .. cfgcmd:: set protocols ospf interface <interface> hello-interval <number>
 
    Set number of seconds for Hello Interval timer value. Setting this value,

From 9338efa5982ed4ac082dab8a5d125040c94c2b1a Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 5 Feb 2021 22:05:59 +0100
Subject: [PATCH 290/295] README: explain documentation branching scheme

---
 README.md | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/README.md b/README.md
index 15059831..f02f4761 100644
--- a/README.md
+++ b/README.md
@@ -3,6 +3,26 @@ to ReadTheDocs. Documentation can be accessed via the following URL:
 
 * https://docs.vyos.io
 
+# Versions
+
+Our version follows the very same branching scheme as the VyOS source modules
+itself. We maintain one documentation branch per VyOS release. The default
+branch that contains the most recent VyOS documentation is called `master`
+and matches the latest VyOS release which is 1.4 at the time.
+
+All new documentation enhancements go to the `master` branch. If those changes
+are beneficial for previous VyOS documentation versions they will be
+cherry-picked to the appropriate branch(es).
+
+Post-1.2.0 branches are named after constellations sorted by area from smallest to
+largest. There are 88 of them, here's the
+[complete list](https://en.wikipedia.org/wiki/IAU_designated_constellations_by_area).
+
+* 1.2.x: `crux` (Southern Cross)
+* 1.3.x: `equuleus` (Little Horse)
+* 1.4.x: `sagitta` (Arrow)
+* ...
+
 # Build
 
 [![Documentation Status](https://readthedocs.org/projects/vyos/badge/?version=latest)](https://docs.vyos.io/en/latest/?badge=latest)

From 0ae01b4a1c6e6376b2db498618c65801a809e826 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 5 Feb 2021 22:53:53 +0100
Subject: [PATCH 291/295] vrf: static: T2450: adjust to new CLI syntax

---
 docs/configexamples/azure-vpn-bgp.rst         |  2 +-
 docs/configexamples/azure-vpn-dual-bgp.rst    |  4 +--
 .../dhcp-relay-through-gre-bridge.rst         |  4 +--
 docs/configexamples/tunnelbroker-ipv6.rst     |  2 +-
 docs/configuration/interfaces/openvpn.rst     |  6 ++--
 docs/configuration/interfaces/pppoe.rst       |  4 +--
 docs/configuration/interfaces/wireguard.rst   |  4 +--
 docs/configuration/protocols/static.rst       | 12 ++++----
 docs/configuration/vrf/index.rst              | 28 +++++++++----------
 9 files changed, 33 insertions(+), 33 deletions(-)

diff --git a/docs/configexamples/azure-vpn-bgp.rst b/docs/configexamples/azure-vpn-bgp.rst
index 265e28c7..1d61b3b8 100644
--- a/docs/configexamples/azure-vpn-bgp.rst
+++ b/docs/configexamples/azure-vpn-bgp.rst
@@ -114,7 +114,7 @@ Vyos configuration
 
 .. code-block:: none
 
-  set protocols static interface-route 10.0.0.4/32 next-hop-interface vti1
+  set protocols static route 10.0.0.4/32 interface vti1
 
 - Configure your BGP settings
 
diff --git a/docs/configexamples/azure-vpn-dual-bgp.rst b/docs/configexamples/azure-vpn-dual-bgp.rst
index 13d4b5a2..0a48156c 100644
--- a/docs/configexamples/azure-vpn-dual-bgp.rst
+++ b/docs/configexamples/azure-vpn-dual-bgp.rst
@@ -129,8 +129,8 @@ Vyos configuration
 
 .. code-block:: none
 
-  set protocols static interface-route 10.0.0.4/32 next-hop-interface vti1
-  set protocols static interface-route 10.0.0.5/32 next-hop-interface vti2
+  set protocols static route 10.0.0.4/32 interface vti1
+  set protocols static route 10.0.0.5/32 interface vti2
 
 - Configure your BGP settings
 
diff --git a/docs/configexamples/dhcp-relay-through-gre-bridge.rst b/docs/configexamples/dhcp-relay-through-gre-bridge.rst
index 0db5fa0a..afa4d854 100644
--- a/docs/configexamples/dhcp-relay-through-gre-bridge.rst
+++ b/docs/configexamples/dhcp-relay-through-gre-bridge.rst
@@ -29,7 +29,7 @@ DHCP Server
    set protocols ospf area 0 network '192.168.3.0/24'
    set protocols ospf area 0 network '10.0.2.0/24'
    set protocols ospf parameters router-id '192.168.3.3'
-   set protocols static interface-route 10.0.1.2/32 next-hop-interface tun100
+   set protocols static route 10.0.1.2/32 interface tun100
    set service dhcp-server shared-network-name asdf authoritative
    set service dhcp-server shared-network-name asdf subnet 192.168.3.0/24 range 0 start '192.168.3.30'
    set service dhcp-server shared-network-name asdf subnet 192.168.3.0/24 range 0 stop '192.168.3.40'
@@ -70,7 +70,7 @@ DHCP Relay
    set protocols ospf area 0 network '192.168.0.0/24'
    set protocols ospf area 0 network '10.100.100.0/24'
    set protocols ospf parameters router-id '10.100.100.1'
-   set protocols static interface-route 192.168.3.3/32 next-hop-interface tun100
+   set protocols static route 192.168.3.3/32 interface tun100
    set service dhcp-relay interface 'eth0'
    set service dhcp-relay interface 'tun100'
    set service dhcp-relay server '192.168.3.3'
diff --git a/docs/configexamples/tunnelbroker-ipv6.rst b/docs/configexamples/tunnelbroker-ipv6.rst
index b6f1cc07..1df814dc 100644
--- a/docs/configexamples/tunnelbroker-ipv6.rst
+++ b/docs/configexamples/tunnelbroker-ipv6.rst
@@ -35,7 +35,7 @@ tunnel information page.
   set interfaces tunnel tun0 mtu '1472'
   set interfaces tunnel tun0 multicast 'disable'
   set interfaces tunnel tun0 remote-ip Server_IPv4_from_Tunnelbroker  # This is the IP of the Tunnelbroker server
-  set protocols static interface-route6 ::/0 next-hop-interface tun0  # Tell all traffic to go over this tunnel
+  set protocols static route6 ::/0 interface tun0  # Tell all traffic to go over this tunnel
   commit
 
 If your WAN connection is over PPPoE, you may need to set the MTU on the above
diff --git a/docs/configuration/interfaces/openvpn.rst b/docs/configuration/interfaces/openvpn.rst
index 2c273b34..8b32743f 100644
--- a/docs/configuration/interfaces/openvpn.rst
+++ b/docs/configuration/interfaces/openvpn.rst
@@ -159,13 +159,13 @@ Local Configuration:
 
 .. code-block:: none
 
-  set protocols static interface-route 10.1.0.0/16 next-hop-interface vtun1
+  set protocols static route 10.1.0.0/16 interface vtun1
 
 Remote Configuration:
 
 .. code-block:: none
 
-  set protocols static interface-route 10.0.0.0/16 next-hop-interface vtun1
+  set protocols static route 10.0.0.0/16 interface vtun1
 
 Firewall policy can also be applied to the tunnel interface for `local`, `in`,
 and `out` directions and function identically to ethernet interfaces.
@@ -253,7 +253,7 @@ internally, so we need to create a route to the 10.23.0.0/20 network ourselves:
 
 .. code-block:: none
 
-  set protocols static interface-route 10.23.0.0/20 next-hop-interface vtun10
+  set protocols static route 10.23.0.0/20 interface vtun10
 
 Generate X.509 Certificate and Keys
 -----------------------------------
diff --git a/docs/configuration/interfaces/pppoe.rst b/docs/configuration/interfaces/pppoe.rst
index 0fdbba42..1bbccc0c 100644
--- a/docs/configuration/interfaces/pppoe.rst
+++ b/docs/configuration/interfaces/pppoe.rst
@@ -130,7 +130,7 @@ PPPoE options
 
 .. note:: In all modes except 'none', all default routes using this interface
    will be removed when the interface is torn down - even manually installed
-   static interface-routes.
+   static routes.
 
 .. cfgcmd:: set interfaces pppoe <interface> idle-timeout <time>
 
@@ -251,7 +251,7 @@ Requirements:
   default gateway you receive from your DSL ISP to the routing table if you
   have no other WAN connections. If you wish to use a dual WAN connection,
   change the ``default-route`` option to ``force``.  You could also install
-  a static interface-route and set the ``default-route`` option to ``none``.
+  a static route and set the ``default-route`` option to ``none``.
 * With the ``name-server`` option set to ``none``, VyOS will ignore the
   nameservers your ISP sens you and thus you can fully rely on the ones you
   have configured statically.
diff --git a/docs/configuration/interfaces/wireguard.rst b/docs/configuration/interfaces/wireguard.rst
index c4dfbee7..852ff520 100644
--- a/docs/configuration/interfaces/wireguard.rst
+++ b/docs/configuration/interfaces/wireguard.rst
@@ -78,7 +78,7 @@ one.
   set interfaces wireguard wg01 peer to-wg02 port '12345'
   set interfaces wireguard wg01 peer to-wg02 pubkey 'XMrlPykaxhdAAiSjhtPlvi30NVkvLQliQuKP7AI7CyI='
   set interfaces wireguard wg01 port '12345'
-  set protocols static interface-route 10.2.0.0/24 next-hop-interface wg01
+  set protocols static route 10.2.0.0/24 interface wg01
 
 The last step is to define an interface route for 10.2.0.0/24 to get
 through the WireGuard interface `wg01`. Multiple IPs or networks can be
@@ -113,7 +113,7 @@ the public key, which needs to be shared with the peer.
   set interfaces wireguard wg01 peer to-wg02 port '12345'
   set interfaces wireguard wg01 peer to-wg02 pubkey 'u41jO3OF73Gq1WARMMFG7tOfk7+r8o8AzPxJ1FZRhzk='
   set interfaces wireguard wg01 port '12345'
-  set protocols static interface-route 10.1.0.0/24 next-hop-interface wg01
+  set protocols static route 10.1.0.0/24 interface wg01
 
 Assure that your firewall rules allow the traffic, in which case you
 have a working VPN using WireGuard
diff --git a/docs/configuration/protocols/static.rst b/docs/configuration/protocols/static.rst
index 42c0c4b7..723db727 100644
--- a/docs/configuration/protocols/static.rst
+++ b/docs/configuration/protocols/static.rst
@@ -63,19 +63,19 @@ Static Routes
 Interface Routes
 ================
 
-.. cfgcmd:: set protocols static interface-route <subnet> next-hop-interface
+.. cfgcmd:: set protocols static route <subnet> interface
    <interface>
 
    Allows you to configure the next-hop interface for an interface-based IPv4
    static route. `<interface>` will be the next-hop interface where trafic is
    routed for the given `<subnet>`.
 
-.. cfgcmd:: set protocols static interface-route <subnet> next-hop-interface
+.. cfgcmd:: set protocols static route <subnet> interface
    <interface> disable
 
    Disables interface-based IPv4 static route.
 
-.. cfgcmd:: set protocols static interface-route <subnet> next-hop-interface
+.. cfgcmd:: set protocols static route <subnet> interface
    <interface> distance <distance>
 
    Defines next-hop distance for this route, routes with smaller administrative
@@ -83,19 +83,19 @@ Interface Routes
 
    Range is 1 to 255, default is 1.
 
-.. cfgcmd:: set protocols static interface-route6 <subnet> next-hop-interface
+.. cfgcmd:: set protocols static route6 <subnet> interface
    <interface>
 
    Allows you to configure the next-hop interface for an interface-based IPv6
    static route. `<interface>` will be the next-hop interface where trafic is
    routed for the given `<subnet>`.
 
-.. cfgcmd:: set protocols static interface-route6 <subnet> next-hop-interface
+.. cfgcmd:: set protocols static route6 <subnet> interface
    <interface> disable
 
    Disables interface-based IPv6 static route.
 
-.. cfgcmd:: set protocols static interface-route6 <subnet> next-hop-interface
+.. cfgcmd:: set protocols static route6 <subnet> interface
    <interface> distance <distance>
 
    Defines next-hop distance for this route, routes with smaller administrative
diff --git a/docs/configuration/vrf/index.rst b/docs/configuration/vrf/index.rst
index a311fcc0..244784de 100644
--- a/docs/configuration/vrf/index.rst
+++ b/docs/configuration/vrf/index.rst
@@ -119,7 +119,7 @@ Leaking
 """""""
 
 .. cfgcmd:: set protocols vrf <name> static route <subnet> next-hop <address>
-   next-hop-vrf <default | vrf-name>
+   vrf <default | vrf-name>
 
    Use this command if you have shared services or routes that should be shared
    between multiple VRF instances. This will add an IPv4 route to VRF `<name>`
@@ -127,7 +127,7 @@ Leaking
    a different VRF or leak it into the default VRF.
 
 .. cfgcmd:: set protocols vrf <name> static route6 <subnet> next-hop <address>
-   next-hop-vrf <default | vrf-name>
+   vrf <default | vrf-name>
 
    Use this command if you have shared services or routes that should be shared
    between multiple VRF instances. This will add an IPv6 route to VRF `<name>`
@@ -138,40 +138,40 @@ Leaking
 Interface Routes
 """"""""""""""""
 
-.. cfgcmd:: set protocols vrf <name> static interface-route <subnet>
-   next-hop-interface <interface>
+.. cfgcmd:: set protocols vrf <name> static route <subnet>
+   interface <interface>
 
    Allows you to configure the next-hop interface for an interface-based IPv4
    static route. `<interface>` will be the next-hop interface where trafic is
    routed for the given `<subnet>`.
 
-.. cfgcmd:: set protocols vrf <name> static interface-route <subnet>
-   next-hop-interface <interface> disable
+.. cfgcmd:: set protocols vrf <name> static route <subnet>
+   interface <interface> disable
 
    Disables interface-based IPv4 static route.
 
-.. cfgcmd:: set protocols vrf <name> static interface-route <subnet>
-   next-hop-interface <interface> distance <distance>
+.. cfgcmd:: set protocols vrf <name> static route <subnet>
+   interface <interface> distance <distance>
 
    Defines next-hop distance for this route, routes with smaller administrative
    distance are elected prior those with a higher distance.
 
    Range is 1 to 255, default is 1.
 
-.. cfgcmd:: set protocols vrf <name> static interface-route6 <subnet>
-   next-hop-interface <interface>
+.. cfgcmd:: set protocols vrf <name> static route6 <subnet>
+   interface <interface>
 
    Allows you to configure the next-hop interface for an interface-based IPv6
    static route. `<interface>` will be the next-hop interface where trafic is
    routed for the given `<subnet>`.
 
-.. cfgcmd:: set protocols vrf <name> static interface-route6 <subnet>
-   next-hop-interface <interface> disable
+.. cfgcmd:: set protocols vrf <name> static route6 <subnet>
+   interface <interface> disable
 
    Disables interface-based IPv6 static route.
 
-.. cfgcmd:: set protocols vrf <name> static interface-route6 <subnet>
-   next-hop-interface <interface> distance <distance>
+.. cfgcmd:: set protocols vrf <name> static route6 <subnet>
+   interface <interface> distance <distance>
 
    Defines next-hop distance for this route, routes with smaller administrative
    distance are elected prior those with a higher distance.

From 8839d72d174f13b53bbc1521d9935df6ae891514 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sat, 6 Feb 2021 01:44:22 +0100
Subject: [PATCH 292/295] README: add link to old Wiki

---
 README.md | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/README.md b/README.md
index f02f4761..5c269651 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,12 @@
-Starting with VyOS 1.2 (`crux`) documentation is being migrated from the old wiki
-to ReadTheDocs. Documentation can be accessed via the following URL:
+Starting with VyOS 1.2 (`crux`) our documentation is being migrated from the old wiki
+to ReadTheDocs. Documentation can be accessed via the following URL: https://docs.vyos.io
 
-* https://docs.vyos.io
+Our old WiKi can still be accessed from the
+[Wayback Machine](https://web.archive.org/web/20200225171529/https://wiki.vyos.net/wiki/Main_Page)
+
+# Build
+
+[![Documentation Status](https://readthedocs.org/projects/vyos/badge/?version=latest)](https://docs.vyos.io/en/latest/?badge=latest)
 
 # Versions
 
@@ -23,10 +28,6 @@ largest. There are 88 of them, here's the
 * 1.4.x: `sagitta` (Arrow)
 * ...
 
-# Build
-
-[![Documentation Status](https://readthedocs.org/projects/vyos/badge/?version=latest)](https://docs.vyos.io/en/latest/?badge=latest)
-
 ## Native
 
 To build the manual, run the following commands inside the `docs` folder:

From 14de62ec052855f03f37fc06817f9270a19ee9d0 Mon Sep 17 00:00:00 2001
From: rebortg <github@ghlr.de>
Date: Sat, 6 Feb 2021 18:27:49 +0100
Subject: [PATCH 293/295] Github: adjust githubactions for sagitta and equuleus

---
 .github/workflows/submodules.yml | 38 ++++++++++++++++++++++++++++----
 .gitmodules                      |  2 +-
 2 files changed, 35 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/submodules.yml b/.github/workflows/submodules.yml
index ccbb64a6..82b8d4e4 100644
--- a/.github/workflows/submodules.yml
+++ b/.github/workflows/submodules.yml
@@ -5,12 +5,41 @@ on:
   # 06:00 UTC on Monday
     - cron:  '0 6 * * 1'
 jobs:
-  updatVyOS-1x:
+  updateVyOS-1x_master:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
         with:
           repository: ${{ github.repository }}
+      - name: update submodule
+        run: |
+          git submodule status
+          git submodule update --init --force
+          cd docs/_include/vyos-1x
+          git checkout current
+          git pull
+          git submodule status
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@v3
+        with:
+          token: ${{secrets.GITHUB_TOKEN}}
+          commit-message: "vyos-1x: update current branch"
+          committer: GitHub <noreply@github.com>
+          author: ${{ github.actor }} <${{ github.actor }}@users.noreply.github.com>
+          title: "vyos-1x: update current branch"
+          body: |
+            Autoupdate vyos-1x submodule
+          branch: update-dependencies-master
+          delete-branch: true
+
+
+  updateVyOS-1x_equuleus:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          repository: ${{ github.repository }}
+          ref: equuleus
       - name: update submodule
         run: |
           git submodule status
@@ -23,10 +52,11 @@ jobs:
         uses: peter-evans/create-pull-request@v3
         with:
           token: ${{secrets.GITHUB_TOKEN}}
-          commit-message: Update vyos-1x submodule
+          commit-message: "vyos-1x: update equuleus branch"
           committer: GitHub <noreply@github.com>
           author: ${{ github.actor }} <${{ github.actor }}@users.noreply.github.com>
-          title: Update vyos-1x submodule
+          title: "vyos-1x: update equuleus branch"
           body: |
             Autoupdate vyos-1x submodule
-          branch: update-dependencies
+          branch: update-dependencies-equuleus
+          delete-branch: true
diff --git a/.gitmodules b/.gitmodules
index ff51611b..d3d92138 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -1,4 +1,4 @@
 [submodule "docs/_include/vyos-1x"]
 	path = docs/_include/vyos-1x
 	url = https://github.com/vyos/vyos-1x
-	branch = equuleus
+	branch = current

From 9083a708210b217b23f319f585fcf0dff039e5de Mon Sep 17 00:00:00 2001
From: rebortg <rebortg@users.noreply.github.com>
Date: Mon, 8 Feb 2021 06:17:50 +0000
Subject: [PATCH 294/295] vyos-1x: update current branch

---
 docs/_include/vyos-1x | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
index 86209c67..0dd41096 160000
--- a/docs/_include/vyos-1x
+++ b/docs/_include/vyos-1x
@@ -1 +1 @@
-Subproject commit 86209c679c6b7ca9d5bac1f67ffd391b9b16c008
+Subproject commit 0dd41096f14771ffa476f52793308bffac51b59a

From 5bd81dc482242935165fe1ec067f975b7904c6c9 Mon Sep 17 00:00:00 2001
From: Oliver Dickins <oliver@dickins.dev>
Date: Wed, 10 Feb 2021 19:34:23 +0000
Subject: [PATCH 295/295] Update l2tp.rst

Update l2tp "name-server" with correct syntax
---
 docs/configuration/vpn/l2tp.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/configuration/vpn/l2tp.rst b/docs/configuration/vpn/l2tp.rst
index d331ce2c..0df5080c 100644
--- a/docs/configuration/vpn/l2tp.rst
+++ b/docs/configuration/vpn/l2tp.rst
@@ -72,8 +72,8 @@ parameter to the client.
 
 .. code-block:: none
 
-  set vpn l2tp remote-access dns-servers server-1 '198.51.100.8'
-  set vpn l2tp remote-access dns-servers server-2 '198.51.100.4'
+  set vpn l2tp remote-access name-server '198.51.100.8'
+  set vpn l2tp remote-access name-server '198.51.100.4'
 
 Established sessions can be viewed using the **show vpn remote-access**
 operational command, or **show l2tp-server sessions**