From dbad80bb3cf7328cc94f4b2066833d1df1327f4a Mon Sep 17 00:00:00 2001 From: infominer Date: Mon, 3 Jun 2019 09:04:09 -0400 Subject: [PATCH] add W3C Auth\ID WKSHP --- _config.yml | 33 +- _data/navigation.yml | 2 + _includes/head.html | 10 + _includes/head/custom.html | 367 +++++++++- _layouts/default.html | 2 + ...18-W3C-Authentication-Identity-Workshop.md | 15 + .../01-Day-1-Welcome-and-Procedural_1.html | 363 +--------- ...-Understanding-Verifiable-Credentials.html | 26 + .../03-Day-1-Understanding-DIDs.html | 672 ++++++++++++++++++ .../04-Day-1-Understanding-DID-Auth.html | 26 + ...uthn-CTAP-EAT-FIDO-and-Authenticators.html | 32 + ...-JWT_CWT-OpenID-and-Related-Ecosystem.html | 43 ++ .../07-Day-1-Breakout-Sessions.html | 13 + ...rstanding-Current-and-Future-Problems.html | 55 ++ .../09-Day-2-Procedural-Agenda-Gardening.html | 14 + ...ng-Cultural-and-Economic-Perspectives.html | 32 + .../10.3-Day-2-PindarWong_1.html | 31 + ...ay-2-Avoiding-Mistakes-and-Minefields.html | 28 + .../12-Day-2-Breakouts.html | 10 + ...r-Roadmap-DIDs_-VCs_-and-Attestations.html | 15 + .../13.5-Day-2-Attestation-Arm.html | 13 + ...4-Day-2-5-Year-Roadmap-Authenticators.html | 20 + ...-Year-Roadmap-Authenticators_-Gemalto.html | 15 + ...work-with-Authentication-and-Identity.html | 36 + .../Health-Care-IDology.html | 16 + ...se-21-with-FIDO-Proof-of-Presence-Key.html | 14 + ...tication and Identity Workshop Report.docx | Bin 0 -> 43258 bytes ...g-JWT-CWT-OpenID-and-Related-Ecosystem.png | Bin 0 -> 30198 bytes ...g-authentication-identity-workshop-w3c.png | Bin 0 -> 52246 bytes images/understanding-did-auth.png | Bin 0 -> 33894 bytes images/understanding-dids.png | Bin 0 -> 31847 bytes .../understanding-verifiable-credentials.png | Bin 0 -> 37100 bytes images/webauthn-ctap.png | Bin 0 -> 13906 bytes 33 files changed, 1532 insertions(+), 371 deletions(-) create mode 100644 _pages/2018-W3C-Authentication-Identity-Workshop.md rename {_pages/2018-W3C-Strong-Authentication-and-Identity-Workshop01-Presentations => collections/_2018-W3C-Authentication-Identity-Workshop}/01-Day-1-Welcome-and-Procedural_1.html (81%) create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/02-Day-1-Understanding-Verifiable-Credentials.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/03-Day-1-Understanding-DIDs.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/04-Day-1-Understanding-DID-Auth.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/05-Day-1-Understanding-WebAuthn-CTAP-EAT-FIDO-and-Authenticators.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/06-Day-1-Understanding-JWT_CWT-OpenID-and-Related-Ecosystem.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/07-Day-1-Breakout-Sessions.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/08-Day-1-Market-Verticals-Understanding-Current-and-Future-Problems.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/09-Day-2-Procedural-Agenda-Gardening.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/10-Day-2-Exploring-Cultural-and-Economic-Perspectives.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/10.3-Day-2-PindarWong_1.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/11-Day-2-Avoiding-Mistakes-and-Minefields.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/12-Day-2-Breakouts.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/13-Day-2-5-Year-Roadmap-DIDs_-VCs_-and-Attestations.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/13.5-Day-2-Attestation-Arm.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/14-Day-2-5-Year-Roadmap-Authenticators.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/14.5-Day-2-5-Year-Roadmap-Authenticators_-Gemalto.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/15-Day-2-Browsers-work-with-Authentication-and-Identity.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/Health-Care-IDology.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/Use-Case-21-with-FIDO-Proof-of-Presence-Key.html create mode 100644 collections/_2018-W3C-Authentication-Identity-Workshop/W3C Strong Authentication and Identity Workshop Report.docx create mode 100644 images/Understanding-JWT-CWT-OpenID-and-Related-Ecosystem.png create mode 100644 images/strong-authentication-identity-workshop-w3c.png create mode 100644 images/understanding-did-auth.png create mode 100644 images/understanding-dids.png create mode 100644 images/understanding-verifiable-credentials.png create mode 100644 images/webauthn-ctap.png diff --git a/_config.yml b/_config.yml index ee1b9232..3e6cc308 100644 --- a/_config.yml +++ b/_config.yml @@ -311,6 +311,18 @@ compress_html: envs: development + + + +# Collections +collections_dir: collections +collections: + general: + output: true + permalink: /:collection/:path/ + share: true + + # Defaults defaults: # _posts @@ -333,7 +345,20 @@ defaults: toc_sticky : true twitter: card: summary_large_image - - - - + # _2018-W3C-Authentication-Identity-Workshop + - scope: + path: "" + type: 2018-W3C-Authentication-Identity-Workshop + values: + layout: single + author_profile: false + read_time: false + comments: # true + share: true + related: true + idwkshp: true + sidebar: + title: DIDecentralized + nav: "didnav" + twitter: + card: summary_large_image diff --git a/_data/navigation.yml b/_data/navigation.yml index 553d9a74..0a5e3bb1 100644 --- a/_data/navigation.yml +++ b/_data/navigation.yml @@ -32,6 +32,8 @@ didnav: children: - title: "Sitemap" url: "/sitemap/" + - title: "• FreeNode IRC #indieweb-dev on IIW RWoT and DID's" + url: "https://infominer.id/web-work/posts/indieweb-dev-on-did/" - title: "• Identity Commons on Github" url: "https://github.com/identitywoman/identity-commons" - title: "• Web Standards" diff --git a/_includes/head.html b/_includes/head.html index c1cda6f8..04b7993f 100644 --- a/_includes/head.html +++ b/_includes/head.html @@ -1,6 +1,16 @@ + + + + + + + + + + {% include seo.html %} diff --git a/_includes/head/custom.html b/_includes/head/custom.html index 763e6b27..d50c05cd 100644 --- a/_includes/head/custom.html +++ b/_includes/head/custom.html @@ -1,13 +1,358 @@ - + + + + + + - - - - - - - - - - diff --git a/_layouts/default.html b/_layouts/default.html index f16a00be..6509aed3 100644 --- a/_layouts/default.html +++ b/_layouts/default.html @@ -5,7 +5,9 @@ {% include head.html %} + {% if page.idwkshp %} {% include head/custom.html %} + {% endif %} diff --git a/_pages/2018-W3C-Authentication-Identity-Workshop.md b/_pages/2018-W3C-Authentication-Identity-Workshop.md new file mode 100644 index 00000000..24e9633e --- /dev/null +++ b/_pages/2018-W3C-Authentication-Identity-Workshop.md @@ -0,0 +1,15 @@ +--- +title: "2018 W3C Strong Authentication and Identity Workshop" +layout: collection +permalink: /2018-W3C-Authentication-Identity-Workshop/ +collection: 2018-W3C-Authentication-Identity-Workshop +entries_layout: grid +classes: wide +sidebar: + nav: didnav +author_profile: false +#: 7 +share: true +--- + +## 2018 W3C Strong Authentication and Identity Workshop \ No newline at end of file diff --git a/_pages/2018-W3C-Strong-Authentication-and-Identity-Workshop01-Presentations/01-Day-1-Welcome-and-Procedural_1.html b/collections/_2018-W3C-Authentication-Identity-Workshop/01-Day-1-Welcome-and-Procedural_1.html similarity index 81% rename from _pages/2018-W3C-Strong-Authentication-and-Identity-Workshop01-Presentations/01-Day-1-Welcome-and-Procedural_1.html rename to collections/_2018-W3C-Authentication-Identity-Workshop/01-Day-1-Welcome-and-Procedural_1.html index a469d389..fb541a13 100644 --- a/_pages/2018-W3C-Strong-Authentication-and-Identity-Workshop01-Presentations/01-Day-1-Welcome-and-Procedural_1.html +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/01-Day-1-Welcome-and-Procedural_1.html @@ -1,360 +1,11 @@ +--- +title: "01) Day 1. Welcome and Procedural" +header: + teaser: /images/strong-authentication-identity-workshop-w3c.png +--- + - - - - - - +
Strong Authentication and
Identity Workshop
https://www.w3.org/Security/strong-authentication-and-identity-workshop/
real-time chat & minutes (irc): http://irc.w3.org/ #auth-id
diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/02-Day-1-Understanding-Verifiable-Credentials.html b/collections/_2018-W3C-Authentication-Identity-Workshop/02-Day-1-Understanding-Verifiable-Credentials.html new file mode 100644 index 00000000..6001138c --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/02-Day-1-Understanding-Verifiable-Credentials.html @@ -0,0 +1,26 @@ +--- +title: "02) Day 1. Understanding Verifiable Credentials" +header: + teaser: /images/understanding-verifiable-credentials.png + +--- + + +
+
Understanding Verifiable
Credentials
Dr. Daniel C. Burnett, PegaSys Blockchain Standards Architect, W3C VCWG Co-
chair
W3C Workshop on Strong Authentication & Identity
Redmond, WA, Dec 10-11, 2018
+
Credentials
2
<passport photo>
<driver’s license photo>
+
(Cryptographically) Verifiable Credentials
● We aim to provide the same thing, but
electronically
●
A Verifiable Credential is
○ Issued by an Issuer (school, corp, govt, ind.)
○
Held by a Holder (student, employee, customer)
○ Presented to a Verifier (employers, security, websites)
●
A Verifiable Credential contains
○ An Identifier
○
Optional metadata
○ One or more claims
○
A proof section
● Identifiers can be cryptographically controlled
3
+
Claims & Proofs
● A Claim is
○ One statement about a Subject
●
A Claim contains
○
A Subject
○
A Property
○ A Value for the property
●
The Proof section contains
○ Signatures over the claims
○ ZKP info (work in progress)
4
+
VC Example in JSON-LD syntax
{
"@context": [
"https://w3.org/2018/credentials/v1",
"https://example.com/examples/v1"
],
"id": "http://dmv.example.gov/credentials/3732",
"type": ["VerifiableCredential", "ProofOfAgeCredential"],
"issuer": "https://dmv.example.gov/issuers/14",
"issuanceDate": "2010-01-01T19:73:24Z",
"credentialSubject": {
"id": "did:example:ebfeb1f712ebc6f1c276e12ec21",
"ageOver": 21
},
"proof": { ... }
}
5
+
VC - signature-based proof example
{ "@context": [...],
"id": "http://dmv.example.gov/credentials/3732",
"type": ["VerifiableCredential", "ProofOfAgeCredential"],
"issuer": "https://dmv.example.gov/issuers/14",
"issuanceDate": "2010-01-01T19:73:24Z",
"credentialSubject": {...},
"proof": {
"type": "RsaSignature2018",
"created": "2017-06-18T21:19:10Z",
"creator": "https://example.com/jdoe/keys/1",
"nonce": "c0ae1c8e-c7e7-469f-b252-86e6a0e7387e",
"signatureValue": "BavEll0/I1zpYw8XNi1bgVg/sCneO4Jugez8RwDg/+
MCRVpjOboDoe4SxxKjkCOvKiCHGDvc4krqi6Z1n0UfqzxGfmatCuFibcC1wps
PRdW+gGsutPTLzvueMWmFhwYmfIFpbBu95t501+rSLHIEuujM/+PXr9Cky6Ed
+W3JT24="
}}
6
+
Verifiable Presentations
● A Verifiable Presentation is
○ Presented by a Holder to a Verifier
○
Composed from multiple VCs
○
Often from different Issuers
○
Often about the same subject
● A Verifiable Presentation contains
○
An identifier
○
Optional metadata
○ One or more claims or whole VCs
○
A proof section
7
+
Verifiable Credentials are (not)?
Verifiable Credentials allow
● An issuing party to express a statement as a fact, ie “make a claim”
● A holding party to present the statement (in whole or in part) to a third party
● A verifying party to validate the statement hasn’t been tampered with
Verifiable Credentials DON’T
● Represent a “verified truth”
It is the issuance of a claim that is verifiable, not the semantics of the claim
8
+
Standardization: W3C Verifiable Claims Working Group
● In Scope
○
Recommend a data model and syntax(es) for the expression of verifiable claims, including one
or more core vocabularies
○
Create a note specifying one or more of these:
■
How these data models should be used with existing attribute exchange protocols
■
A suggestion that existing protocols be modified
■ A suggestion that a new protocol is required
●
Out of Scope
○
Define browser-based APIs for interacting with verifiable claims. This work may be performed
by a future Working Group if there is interest, but is not required for the Working Group to be
successful
○
Define a new protocol for attribute exchange. This work may be performed by a future Working
Group if there is interest, but is not required for the Working Group to be successful
○ Attempt to address the larger problem of "Identity on the Web/Internet"
○ Attempt to lead the creation of a specific style of supporting infrastructure, other than a data
model and syntax(es), for a verifiable claims ecosystem
9
+
VCWG Work Status
● “Verifiable Claims Data Model and Representations” specification
○ FPWD long past, wrapping up ZKP and JWT support
○ Informal reviews already from PING, WAI, others
○ CR expected early 2019
○ Editors’ Draft: https://w3c.github.io/vc-data-model/
○ GitHub: https://github.com/w3c/vc-data-model
● Test Suite
○ Almost all tests written
○ GitHub:
https://github.com/w3c/vc-test-suite
● Use cases
○ Editors’ Draft:
https://w3c.github.io/vc-use-cases/
○ GitHub: https://github.com/w3c/vc-use-cases
10
+
2018 VC Adoption in Commerce
(Financial Services)
11
Deployed Today by:
● Governments
● Banks
● Websites
● DID issuers
Details are W3C M ember Confidential
+
2018 VC Adoption in Commerce
(Trade)
12
Deployed Today for:
● Authorized Importer
● Authorized Exporter
● Certificate of Origin
Details are W3C M ember Confidential
+
Questions?
13
+
VCWG Mission and Goals
● It is currently difficult to express claims regarding education qualifications,
healthcare data, banking account information, and other sorts of machine-
readable personal information that has been verified by a 3rd party on the
Web
● VCWG mission is to make expressing and exchanging claims that have been
verified by a third party easier and more secure on the Web
●
Our charter specifies that education related uses is our first focus but allows
that other uses can be addressed such as digital offers, receipts, and loyalty
programs and other areas if there is significant industry participation
14
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/03-Day-1-Understanding-DIDs.html b/collections/_2018-W3C-Authentication-Identity-Workshop/03-Day-1-Understanding-DIDs.html new file mode 100644 index 00000000..ae740cef --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/03-Day-1-Understanding-DIDs.html @@ -0,0 +1,672 @@ +--- +title: "03) Day 1. Understanding DIDs" +header: + teaser: /images/understanding-dids.png + +--- + + + + + + + + + +
Understanding
Decentralized Identifiers
Kim Hamilton Duffy
CTO Learning Machine
Co-chair W3C Credentials Community Group
Decentralized Identity Foundation Steering Committee
1
+
What is a Decentralized Identifier?
A new type of URL that is:
●
globally unique,
●
highly available,
●
persistent
●
cryptographically verifiable, and
●
does not require a central admin
2
did:btcr:txtest1:8kyt-fzzq-qqqq-ase0-d8
+
We use DIDs in Verifiable Credentials
3
+
DID Implementations (Methods)
4
did:example:123456789abcdefghijk
Scheme
DID
Method
DID Method Specific String
did:v1:nym:BcNkgGmGEpCGSJSMPB4BvWvwVM6YeTR52BSWcZTbzU23
did:btcr:txtest1:8kyt-fzzq-qqqq-ase0-d8
Examples:
+
DIDs Resolve to DID Documents
5
{
"@context": "https://w3id.org/veres-one/v1",
"id": "did:v1:nym:DwkYwcoyUXHNkpj3whn4DgXB4fcg9gj95vKxYN2apkZD",
"authentication": [{
"type": "Ed25519SignatureAuthentication2018",
"publicKey": [{
"id": "did:v1:test:nym:DwkYwcoyUXHNkpj3whn4DgXB4fcg9gj95vKxYN2apkZD#authn -key-1",
"type": "Ed25519VerificationKey2018",
"controller": "did:v1:nym:DwkYwcoyUXHNkpj3whn4DgXB4fcg9gj95vKxYN2apkZD",
"publicKeyBase58": "DwkYwcoyUXHNkpj3whn4DgXB4fcg9gj95vKxYN2apkZD"
}]
}],
"service": [{
"type": "ExampleMessagingService2018",
"serviceEndpoint": ”https://example.com/services/messages”
}],
… more DID-specific information here …
}
1. Authentication Mechanisms
3. Service Discovery
2. Public Key Material
+
did:btcr:xkyt-fzgq-qq87-xnhn
Universal Resolver
DID RESOLUTION
DID Method Spec
DID Document
DID
+
{
"@context": "https://w3id.org/did/v1",
"id": "did:example:123456789abcdefghi",
"publicKey": [{
"id": "did:example:123456789abcdefghi#keys-1",
"type": "RsaSigningKey2018",
"owner": "did:example:123456789abcdefghi",
"publicKeyPem": "-----BEGIN PUBLIC KEY...END PUBLIC KEY-----\r\n"
}],
"authentication": [{
"type": "RsaSignatureAuthentication2018",
"publicKey": "did:example:123456789abcdefghi#keys-1"
}],
"service": [{
"type": "ExampleService",
"serviceEndpoint": "https://example.com/endpoint/8377464"
}],
"created": "2002-10-10T17:00:00Z",
"updated": "2016-10-17T02:41:00Z",
"signature": {
"type": "RsaSignature2016",
"created": "2016-02-08T16:02:20Z",
"creator": "did:sov:8uQhQMGzWxR8vw5P3UWH1j#key/1",
"signatureValue": "IOmA4R7TfhkYTYW87z640O3GYFldw0
yqie9Wl1kZ5OBYNAKOwG5uOsPRK8/2
C4STOWF+83cMcbZ3CBMq2/gi25s=“
}
}
}
DID DOCUMENT
1. DID (for self-description)
2. Public keys (for verification)
3. Auth methods (for authentication)
4. Service endpoints (for interaction)
5. Timestamp (for audit history)
6. Signature (for integrity)
+
Status
8
● Incubated at RWOT, IIW
● Currently:
○ Draft report in W3C Credentials Community
Group
○ Protocols and prototypes at DIF
○ DID Method Registry
○ DID Auth, DID Resolver
● To Discuss: DID Working Group
+
DID & VC Architecture
Roadmap 2018+
Christopher Allen
Principal Architect & Founder — Blockchain Commons
W3C Credentials CG Chair
9
+
Current W3C Standards Track Efforts
10
● Verifiable Claims WG, Verifiable Credentials
○ Anyone can verifiably say anything about anyone.
○ Identity emerges from evaluating multiple sources of
information, across multiple interactions
● Decentralized Identifiers (DIDs), draft WG
○ Anyone can publicly manage provable identifiers without
administrative interference
○ Move beyond centrally administered IDs
○ Provide for a plurality of authorities
+
Decentralized Identity Stack
11
● DIDs – Root Identifiers
○ DID Universal Resolvers — support interoperability between
multiple DID methods.
○ DID Methods – Specific approaches using different blockchains
○ DID Documents – Proof of Control & Service References
+
+
Decentralized Identity Stack
12
● DIDs – Root Identifiers …
● Raw Data – Observed facts & transactions
● Verifiable Credentials – Assertions by knowable authorities
● Profiles / Presentations / Persona – Representations of individuals
● Consent – Records of authorization
● Reasoning – Interpretation & Analysis
● Evaluation – Risk Analysis & Reputation
● Understanding – Internal knowledge representation
● Services – Interactions of value
+
Potential Standards for Future Work
13
● DID-Auth (Authn/Authz)
● OCAP (Authz through Object Capabilities)
● Credential Requests & Exchange
● Data Minimization & Selective Disclosure
● Consent & Consent Receipts
● Storage (Identity Hubs) & Internal Representations
● Analytics & Algorithms for Evaluation
● Cryptographic Proofs
○ Signature, Encryption, Signcryption Suites
○ Time-stamping
○ Zero-knowledge proofs
+
https://w3c-ccg.github.io/roadmap/diagram.html
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/04-Day-1-Understanding-DID-Auth.html b/collections/_2018-W3C-Authentication-Identity-Workshop/04-Day-1-Understanding-DID-Auth.html new file mode 100644 index 00000000..8f689286 --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/04-Day-1-Understanding-DID-Auth.html @@ -0,0 +1,26 @@ +--- +title: "04) Day 1. Understanding DID Auth" +header: + teaser: /images/understanding-did-auth.png +--- + + +
+
Markus Sabadello
Danube Tech, DIF, Sovrin,
W3C CCG, W3C VCWG, OASIS XDI TC
https://danubetech.com/
W3C Workshop on Strong Authentication & Identification
Redmond, WA, USA – 10
th
December 2018
+
DID Auth
■ Background
● Decentralized Identifiers (DIDs)
● Decentralized Public Key Infrastructure (DPKI)
■ DID Auth
● Prove that the DID subject controls its DID
● A concept, with different architectures and implementations
+
DID Document
■ DID Document tells us how control of the DID can be proven
■ DID Document contains service endpoints, public keys, authentication
methods
{
"@context": "https://w3id.org/did/v1",
"id": "did:sov:WRfXPg8dantKVubE3HX8pw",
"service": {
"type": "hub",
"serviceEndpoint": "https://azure.microsoft.com/dif/hub/did:sov:WRfXPg8dantKVubE3H"
},
"publicKey": [
{
"id": "did:sov:WRfXPg8dantKVubE3HX8pw#key-1",
"type": "Ed25519VerificationKey2018",
"publicKeyBase58": "H3C2AVvLMv6gmMNam3uVAjZpfkcJCwDmqPV"
}
],
"authentication": {
"type": "Ed25519SignatureAuthentication2018",
"publicKey": [
"did:sov:WRfXPg8dantKVubE3HX8pw#key-1"
]
}
}
+
DID Document
■ DID Document tells us how control of the DID can be proven
■ DID Document contains service endpoints, public keys, authentication
methods
{
"@context": "https://w3id.org/did/v1",
"id": "did:sov:WRfXPg8dantKVubE3HX8pw",
"service": {
"type": "hub",
"serviceEndpoint": "https://azure.microsoft.com/dif/hub/did:sov:WRfXPg8dantKVubE3H"
},
"publicKey": [
{
"id": "did:sov:WRfXPg8dantKVubE3HX8pw#key-1",
"type": "Ed25519VerificationKey2018",
"publicKeyBase58": "H3C2AVvLMv6gmMNam3uVAjZpfkcJCwDmqPV"
}
],
"authentication": {
"type": "Ed25519SignatureAuthentication2018",
"publicKey": [
"did:sov:WRfXPg8dantKVubE3HX8pw#key-1"
]
}
}
+
DID Auth Example Architecture
+
Challenges, Responses, Transports
■ Challenge-response flow to prove that the DID subject controls its DID.
■ Transports: HTTP POST, QR code, Mobile deep link, JavaScript browser
API, Bluetooth, NFC, etc.
■ Transports may require additional information such as endpoint URIs that
may be included in the challenge, or discoverable from a DID.
■ Challenge:
● Identity owner’s DID may or not be
known.
● May or may not contain proof of control
of a DID of the relying party.
■ Response:
● Linked to a challenge (e.g. using a
nonce).
● Contains proof of control of a DID of the
identity owner.
+
DID Auth Example Architectures
+
DID Auth Data Formats
■
Example JWT:
■ Example JSON-LD VC:
{
"header": {
"typ": "JWT",
"alg": "ES256"
},
"payload": {
"iss":
"did:example:123456789abcdefg",
"sub":
"did:example:123456789abcdefg",
"iat": 1479850830,
"exp": 1511305200,
},
"signature": "..."
}
{
"type": ["Credential"],
"issuer": "did:example:123456789abcdefg",
"issued": "2018-03-07",
"credentialSubject": {
"id": "did:example:123456789abcdefg",
"publicKey": "did:example:123456789abcdefg#ke
},
"proof": {
"type": "Ed25519Signature2018",
"created": "2018-01-01T21:19:10Z",
"creator": "did:example:123456789abcdefg#keys
"nonce": "c0ae1c8e-c7e7-469f-b252-86e6a0
"signatureValue": "..."
}
}
+
DID Auth Data Formats
■
Example JWT:
■ Example JSON-LD VC:
{
"header": {
"typ": "JWT",
"alg": "ES256"
},
"payload": {
"iss":
"did:example:123456789abcdefg",
"sub":
"did:example:123456789abcdefg",
"iat": 1479850830,
"exp": 1511305200,
},
"signature": "..."
}
{
"type": ["Credential"],
"issuer": "did:example:123456789abcdefg",
"issued": "2018-03-07",
"credentialSubject": {
"id": "did:example:123456789abcdefg",
"publicKey": "did:example:123456789abcdefg#ke
},
"proof": {
"type": "Ed25519Signature2018",
"created": "2018-01-01T21:19:10Z",
"creator": "did:example:123456789abcdefg#keys
"nonce": "c0ae1c8e-c7e7-469f-b252-86e6a0
"signatureValue": "..."
}
}
+
Relation to OIDC, WebAuthn
■
OIDC + DID
● Self-Issued OpenID Provider
● Discover OIDC endpoint from DID
■ WebAuthn + DID
● Registration
Register(Account, Origin)
● Registration Response (without DID)
RegisterResponse(PublicKeyCredential,
Attestation, Origin)
● Registration Response (with DID)
RegisterResponse(DIDCredential,
Attestation, Origin)
{
"@context": "https://w3id.org/did/v1",
"id": "did:example:123456789abcdefg",
"service": [{
"id": "did:example:123456789abcdefg;openid",
"type": "OpenIdConnectVersion1.0Service",
"serviceEndpoint": "https://openid.example.com/"
}]
}
■ And more! DID-TLS, DID-HTTP-Signatures, DID-PGP, DID-
SSH
+
For the Workshop
■ Come up with a list of core DID Auth principles
1) The identifier that is being authenticated is a DID.
2) All elements of the DID Document can change, the DID stays the same.
3) DID Resolution is performed to discover how to authenticate the DID.
4) … more?
■ Workshop Question #1: Relation to OIDC, FIDO, WebAuthn?
■ Workshop Question #2: Relation to VC exchange protocols?
+
Community Resources
■ W3C Credentials Community Group
https://www.w3.org/community/credentials/
■ Decentralized Identity Foundation
http://identity.foundation/
■ Rebooting-the-Web-of-Trust
http://www.weboftrust.info/
■ Internet Identity Workshop
http://internetidentityworkshop.com/
Thank You
■ Markus Sabadello
■ Danube Tech
https://danubetech.com/
■ markus@danubetech.com
z
+
Backup Slides
+
Rebooting-the-Web-of-Trust
Internet Identity Workshop
DIDs: W3C Credentials CG
v0.11 Draft Community Report
DIDs: W3C DID WG
Charter now being written
Yadis, XRI, XRD, XRDS,
JRD, Webfinger
DID registered
prov. URI scheme
DID method specs
W3C Web Payments CG
OASIS XDI TC
W3C JSON-LD 1.1
W3C Cryptographic Suites
RFC 7517: JWK
Verifiable Credentials
DKMS, DID Auth
Hubs, Agents, XDI
+
DID Universal Resolver
■ Looks up (“resolves”) DID to its
DID Document.
■ Provides a universal API that works
with all DID methods.
■ Uses a set of configurable “drivers”
that know how to connect to the
target system.
■ https://uniresolver.io/
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/05-Day-1-Understanding-WebAuthn-CTAP-EAT-FIDO-and-Authenticators.html b/collections/_2018-W3C-Authentication-Identity-Workshop/05-Day-1-Understanding-WebAuthn-CTAP-EAT-FIDO-and-Authenticators.html new file mode 100644 index 00000000..09ee3c4b --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/05-Day-1-Understanding-WebAuthn-CTAP-EAT-FIDO-and-Authenticators.html @@ -0,0 +1,32 @@ +--- +title: "05) Day 1. Understanding WebAuthn CTAP EAT FIDO and Authenticators" +header: + teaser: /images/webauthn-ctap.png +--- + + +
+
WebAuthn / CTAP
Modern Authentication
+
challenge, “google.com”
Server
How Security Keys work
Who’s calling?
sign:
{challenge, “
google.com”}
{challenge, “google.com”}
signed
Alice’s
Security
Key
Challenge was: 123456
Origin was: google.com
Alice’s Key
https://www.google.com
USB/NFC/BLE
5
challenge
1
6
2
3
4
+
3
© 2018 Yubico © 2016 Yubico
Registration Recap
1. Relying Party generates challenge
○ Prevents replay
2. Client validates origin
○ Prevents phishing
3. Authenticator checks user presence and consent
○ Prevents silent tracking
4. Authenticator creates key pair
○ No secret is shared with Relying Party
5. Relying Party verifies attestation signature
○ Prevents phishing
○ Proof that private key is safe
+
4
© 2018 Yubico © 2016 Yubico
What is CTAP?
Authenticator
Browser
Client/Platform
Platform
Application
CTAP1 and/or CTAP2
● Authenticator generates and securely stores credentials
● Communicates over USB, NFC, or Bluetooth
● Private keys, PINs, and biometric information never leave the
authenticator
● CTAP2 Data format: Concise Binary Object Representation (CBOR)
+
5
© 2018 Yubico © 2016 Yubico
What is WebAuthn?
FIDO2 Server
Browser
Client/Platform
Platform
Application
We bAuthn
● WebAuthn (JavaScript) API lets Browser, Client talk about external
or platform (embedded) authenticators. It is 2-party interaction.
● Enables the creation and use of strong, attested, scoped, public
key-based credentials for use by web applications.
● Strongly authenticates users.
● All major browsers are on track to implement full Web
Authentication APIs. Chrome, Edge, Mozilla all support now.
+
6
© 2018 Yubico
Evolution of FIDO Authentication to FIDO2
U2F
User Agent
U2F.js
CTAP1
FIDO2
Platform
WebAuthn
CTAP1
FIDO U2F
Authenticator
FIDO2
Authenticator
CTAP2
U2F
● Phishing resistant authentication with
user intent
● Multi-Factor Authentication (MFA)
Subset
○ Authenticator - something you
have
○ Password - something you know
FIDO2
● True MFA
○ Authenticator - something you
have
○ User verification - something you
know (PIN) or are (Biometrics)
+
7
© 2018 Yubico
WebAuthn and CTAP2
+
8
© 2018 Yubico © 2016 Yubico
State of state
● CTAP2 in final review at FIDO; standardization soon
● WebAuthn clearing up some issues for move to PR (resolution
soon, PR early 2019?).
● New FIDO2 (CTAP2/WebAuthn) features:
○ Resident Keys provide first-factor, high assurance MFA, and
enable passwordless authentication
○ HMAC support to enable offline authentication
● Migration path to WebAuthn exists for U2F devices, credentials
● FIDO UAF features, such as transactions, part of Level 2 W3C
work
+
EAT
Entity Attestation Token
IETF Internet Draft
+
EAT (more)
● Web Authn WG looking at this in IETF
●
Key use is with payment handlers that open a new window
●
We don’t anticipate any extra work in CredMan
●
Been seeking guidance via Mike West
+
All Rights Reserved | FIDO Alliance | Copyright 2018
FIDO and
Authenticators
Dr. Rae Hayward
Certification Director
FIDO Alliance
+
All Rights Reserved | FIDO Alliance | Copyright 2018 12
BENEFITS TO CERTIFICATION
Validation Interoperable
Rigorous
testing
Trust
Competitive
edge
Market
expansion
+
All Rights Reserved | FIDO Alliance | Copyright 2018 13
+
All Rights Reserved | FIDO Alliance |
Copyright 2018
14
FIDO AUTHENTICATOR CERTIFICATION
• Validates the security characteristics
of authenticator implementations
• Functional is a prerequisite
All Rights Reserved | FIDO Alliance | Copyright 2018
+
All Rights Reserved | FIDO Alliance | Copyright 2018
15
A COMPREHENSIVE SET OF LEVELS FOR ALL USES CASES
SAMPLE DEVICE HARDWARE &
SOFTWARE REQUIREMENTS
DEFENDS AGAINST
Protection against chip fault injection,
invasive attacks…
L3+
Captured devices
(chip-level attacks)
Circuit board potting, package on
package memory, encrypted RAM…
L3
Captured devices
(circuit board level attacks)
Restricted Operating Environment (ROE)
(e.g., TEE or Secure Element in a
phone, USB token or Smart Card which
are intrinsically ROEs, other…)
L2+
Device OS compromise
(defended by ROE)
L2
Any device HW or SW
L1+
Device OS compromise
(defended by white-box cryptography)
L1
Phishing, server credential
breaches & MiTM attacks
(better than passwords)
+
All Rights Reserved | FIDO Alliance | Copyright 2018 16
LEVEL 1
Examples
• Android or IoS applications
• Platform built-in authenticators
• Level 2- or Level 3-capable
authenticators not yet certified at
Level 2 or Level 3
Certification Process
Vendor documents their design in detail
L1+ only: Evaluation by FIDO
-accredited lab,
penetration testing (L1+ program still in
development)
Evaluation by FIDO Alliance Security Secretariat
• Better than passwords
• FIDO is unfishable and biometrics are
more convenient
• Keys and biometric templates are
protected similar to passwords
stored by a browser or password
manager app
• Requires best facilities offered by
hosting OS
• L1+ adds white-box cryptography
(obfuscation and other techniques)
to defend against compromise of
hosting OS
+
All Rights Reserved | FIDO Alliance | Copyright 2018 17
LEVEL 2
In addition to L1
• A restricted operating
environment like a TEE gives
security even if OS is
compromised.
• Separate USB, BLE and NFC
authenticators are considered
to use a restricted operating
environment
• Gives defense against larger
scale attacks
• Additional assurance at L2+
Certification Process
Vendor documents their design in detail
L2+ only: Vendor submits source code (L2+ program
still in development)
Evaluation by a FIDO
-accredited lab
L2+ only: Attack potential calculation, pen testing
Examples
• Android apps using FIDO Level 2 certified
phone (there aren’t any yet)
• USB, BLE and NFC Security Keys
• Level 3-capable authenticators that
haven’t yet been certified at Level 3
+
All Rights Reserved | FIDO Alliance | Copyright 2018 18
LEVEL 3
In addition to L2
• Defends against physically captured
authenticators
• Defenses against disassembling,
probing, glitch and other such
physical attacks
• L3+ adds defense against chip-level
physical attacks, such as decapping
and probing the chip
Certification Process
Vendor documents their design in detail
Vendor submits source code
Evaluation by a FIDO
-accredited lab (l3, L3+)
Attack potential calculation and penetration testing
L3+ only: Higher attack potential requirements
Examples
• USB, BLE and NFC Security Keys using
Secure Elements or other means of
defending HW attacks
• In some case phone or platform
authenticators may achieve L3, but is
difficult
+
All Rights Reserved | FIDO Alliance | Copyright 2018 19
COMPANION PROGRAMS
Re use as much as possible from other programs like Common Criteria
• Reduces time, effort and cost of certification for authenticator
vendors, sometimes by quite a lot
Companion programs never cover all FIDO requirements; they were not
developed specifically for authenticators
• Even with advanced companion programs, vendors will have to go
through additional certification with the FIDO Alliance
Companion Program
FIDO Security
Level
Program Status
Common Criteria AVA_VAN 3
L3
Operating
Common Criteria AVA_VAN 4
L3+
Operating
FIPS
L2+, L3
In development
Global Platform TEE Protection
Profile
L2+
In development
Authentication-
specific
Companion program
All FIDO Security Requirements
End-device
configuration
Cryptographic
algorithms
FIDO Specific
+
20
FIDO ACCREDITED LABS
L2
L3, L3+
All Rights Reserved | FIDO Alliance | Copyright 2018
+
All Rights Reserved | FIDO Alliance | Copyright 2018 21
EXPIRATION, DERIVATIVE & DELTA CERTIFICATION
xPhone Asteroid1 32GB
Authenticator v1
xPhone Asteroid1 64GB
Authenticator v1
xPhone Asteroid2 32GB
Authenticator v1
xPhone Asteroid3 32GB
Authenticator v2
Security Requirements 1.2
Security Requirements 1.3
xPhone Asteroid1 64GB
Authenticator v1
Delta Certification
• When the FIDO functionality changes
• Recertification against new
requirements
• After fix to close a vulnerability
• Reevaluation of security is required
Derivative certification
• No change to FIDO functionality allowed
• Surrounding functionality may change
• Packaging & product name may change
• No re evaluation of security
No Expiration
• Certification of a given product never
expires
• Recertification against new versions
of the requirements is optional
Derivative
Delta
Derivative
Delta
xPhone Asteroid1 64GB
Authenticator v1.1
(fixed)
Delta
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/06-Day-1-Understanding-JWT_CWT-OpenID-and-Related-Ecosystem.html b/collections/_2018-W3C-Authentication-Identity-Workshop/06-Day-1-Understanding-JWT_CWT-OpenID-and-Related-Ecosystem.html new file mode 100644 index 00000000..c31f91d5 --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/06-Day-1-Understanding-JWT_CWT-OpenID-and-Related-Ecosystem.html @@ -0,0 +1,43 @@ +--- +title: "06) Day 1. Understanding JWT CWT" +header: + teaser: /images/Understanding-JWT-CWT-OpenID-and-Related-Ecosystem.png +--- + + + +
+
Understanding JWT/CWT, OpenID
and Related Ecosystem
Michael Jones, John Bradley
Aaron Parecki
+
JWT, OpenID Connect,
CWT, and Verifiable Claims
Michael B. Jones – Microsoft and John Bradley – Yubico
W3C Workshop on Strong Authentication and Identity
December 10, 2018
+
JSON Web Token (JWT) – RFC 7519
• Representation of claims in JSON
• Can be signed with JSON Web Signature (JWS) – RFC 7515
• Can be encrypted with JSON Web Encryption (JWE) – RFC 7516
• Algorithms used extensible using IANA JOSE Algorithms Registry
• For instance, ed25519 added and secp256k1 being added
• By design, does not use any form of JSON canonicalization
• Base64url encodes values to maintain content integrity instead
• JWTs used by OpenID Connect, many other applications
+
ID Token Claims Example
{
"iss": "https://server.example.com",
"sub": "248289761001",
"aud": "0acf77d4-b486-4c99-bd76-074ed6a64ddf",
"iat": 1311280970,
"exp": 1311281970,
"nonce": "n-0S6_WzA2Mj"
}
+
Working Together
OpenID Connect
+
What is OpenID Connect?
• Simple identity layer on top of OAuth 2.0
• Enables RPs to verify identity of end-user
• Enables RPs to obtain basic profile info
• REST/JSON interfaces → low barrier to entry
• Described at
http://openid.net/connect/
+
You’re Probably Already Using OpenID Connect!
• If you have an Android phone or log in at AOL, Deutsche Telekom, Google,
Microsoft, NEC, NTT, Salesforce, Softbank, Symantec, Verizon, or Yahoo! Japan,
you’re already using OpenID Connect
• Many other sites and apps large and small also use OpenID Connect
+
OpenID Connect and Verifiable Claims
• Aggregated and Distributed Claims
• Self-Issued Identities
• Representation of Claim Verification Information
+
OpenID Connect: Aggregated and Distributed Claims
• OpenID Connect Core §5.6.2
• Defines how JWTs can contain claims signed by others
• Issuers of aggregated and distributed claims can be different than JWT issuer
• For example, credit score signed by credit agency and payment information
signed by bank
• Aggregated claims pass 3
rd
party claims by value
• Distributed claims pass 3
rd
party claims by reference
+
OpenID Connect: Self-Issued Identities
• OpenID Connect Core §7
• Digital identity controlled directly by you
• Backed by public/private key pair
• Sometimes called “user-centric identity” or “self-sovereign identity”
• Claims in self-issued identities
• Self-issued claims signed by you
• Aggregated and distributed claims signed by 3
rd
parties
• Implementations in Japan and at Microsoft
+
OpenID Connect: Representation of Claim Verification Information
• Syntax for providing metadata about claims along with claims
• For instance, saying that name, address, and payment info validated by a
particular bank
• At a particular time
• In a particular jurisdiction
• Under a particular legal framework
• Also ways of requesting claims with particular validation information
• New work proposed by Torsten Lodderstedt at most recent IIW
• Ideas contributed to OpenID Connect working group
+
CBOR Web Token (CWT) – RFC 8392
• Binary equivalent of JWT
• Uses CBOR – RFC 7049 – instead of JSON
• Secured with CBOR Object Signing and Encryption (COSE) – RFC 8152
• Can be more compact than JWTs because no base64url encoding
• Good fit for IoT applications and bandwidth-constrained channels
+
IndieAuth
OAuth for the Open Web
Aaron Parecki
aaronpk.com
+
W3C Social Web Working Group
• Chartered to create open APIs for social networking,
to enable social communication on the web
• Active from July 2014 to February 2018
• Identity and authentication was out of scope for REC-track documents
https://www.w3.org/wiki/Socialwg
+
W3C Social Web Working Group
W3C Recommendations Published:
• Webmention
• Linked Data Notifications
• Micropub
• Activity Streams
• WebSub
• ActivityPub
https://www.w3.org/wiki/Socialwg#Specifications
W3C Notes Published:
• Social Web Protocols
• JF2
• Post Type Discovery
• IndieAuth
+
aaron.pk/reader
+
monocle.p3k.io
aaronparecki.com
micro.blog
+
Follow me from Mastodon: aaronpk@aaronparecki.com
+
How can I comment on this
without having an account there?
[blog post, photo, issue, etc]
+
How can I sign in to an app
that lets me post to my account?
+
+
Traditional OAuth
+
IndieAuth: Bring your own identity
+
URLs for Identity
• aaronparecki.com
• mastodon.social/@aaronpk
• gitlab.com/aaronpk
• twitter.com/aaronpk
+
IndieAuth Summary
• User IDs are URLs – bring your own identity
• Applications are identified by URLs – no pre-registration
necessary
• Authorization server is discovered from the user’s URL
• User ID is returned at the end of the OAuth exchange
+
aperture.p3k.io
+
aaronparecki.com
+
aperture.p3k.io
+
IndieAuth Providers
WordPress Plugin Drupal Plugin
micro.blog withknown.com
• Selfauth – PHP
• Dobrado – PHP
• Acquiescence – Ruby
• Cellar Door – Node.js
• Microblog.pub – Python
indieweb.org/IndieAuth
+
IndieAuth Summary
An extension to the OAuth authorization code flow
• Prompt user for their identity (URL input, browser extension
auto-fill, etc)
• Discover user’s authorization endpoint
• Send the user there to ask their permission
• On the redirect back, exchange the authorization code for an
access token and the user’s canonical URL
+
indieweb.org aaronpk.com
Learn More
https://indieauth.net
https://aaronparecki.com/2018/07/07/7/oauth-for-the-open-web
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/07-Day-1-Breakout-Sessions.html b/collections/_2018-W3C-Authentication-Identity-Workshop/07-Day-1-Breakout-Sessions.html new file mode 100644 index 00000000..82e7a323 --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/07-Day-1-Breakout-Sessions.html @@ -0,0 +1,13 @@ +--- +title: "07) Day 1. Breakout Sessions" +--- + + +
+
Questions for breakout discussion
From where you’re coming from, what do you want to see happen in the next 2-5
years?
What is the biggest concern you have with regard to what you heard this morning?
+
Breakout groups: 6 people/session
● Introduce yourself
● Read your card, respond to clarifying questions
● Identify shared thoughts/concerns
● Each person has 2 unique votes to give to others’ ideas
○ Tally the votes each card receives, on the card
● Write down new ideas on new cards
+
Report-out from breakouts
● Identification != authentication. Getting the world to understand the difference.
○ Separation of concerns: authentication and attribute-provisioning ceremonies
● Privacy. Needs more discussion of privacy concerns and considerations
○ Privacy by design
● Identity assurance. How do you get to trusting the issuer or assurer? Moving
from technology to service
● Want browser/device to know who I am and be my agent in revealing that
● Bridging WebAuthn and OAuth
● RPs have a rich choice of federation, and user-access to those
○ Also data storage
● Coexistence, not choosing between paradigms. Discovery, registration,
resolution.
+
● Align WebAuthn and DIDs for unified experience
○ Reuse mature standards
● Industry adoption of DID-based identities
● What does interop mean for DIDs?
● DID WG formed at W3C
● Usability
● Selective permissionless delegation
● OpenID Connect community working with Ethereum community re
gamification and incentives.
● Value propositions; sub-data flows for business modeling around them
● [missed some, they’re captured on the boards up-front]
○ we have cameras and will photograph the boards
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/08-Day-1-Market-Verticals-Understanding-Current-and-Future-Problems.html b/collections/_2018-W3C-Authentication-Identity-Workshop/08-Day-1-Market-Verticals-Understanding-Current-and-Future-Problems.html new file mode 100644 index 00000000..7184ef84 --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/08-Day-1-Market-Verticals-Understanding-Current-and-Future-Problems.html @@ -0,0 +1,55 @@ +--- +title: "08) Day 1. Market Verticals Understanding Current and Future Problems" +--- + + +
+
Market Verticals: Current
and Future Challenges
+
Government
Peter Watkins
Province of British Columbia
+
Strong Authentication and
Identity Information
Understanding current and future
problems from a government
perspective
+
Province of British Columbia: 4.8 million residents
(small)
Federal
Government of Canada
Provincial
Government of British Columbia (BCGov)
Municipal
Vancouver, Victoria, ...
Indigenous
Nisga’a Lisims Government, Esquimalt First Nations, …
Broader Public
Sector
Regional Health Authorities, WorkSafeBC, Technical Safety BC
ICBC (DMV and Insurance), BC Ferries, ...
Context: Many Levels of Government
Me!
4
+
Context: Government of British Columbia (BCGov) *.gov.bc.ca
● Health, Education, Transportation*, Natural Resources, Justice, Social, Economic
Development, Employment…
● Vital events for people -- birth and death registrations, name changes
● Legal events for organizations -- registration and de-registration etc.
● Professional designations -- regulating bodies, Doctors, Lawyers, Engineers,
Forresters, Architects, Accountants, …
● Licenses and permits -- driving (personal, commercial), harvesting, building,
gasfitting, welding…
● Important Assets - Land Title, Liens, etc
We provide the foundational identity information for our
society and economy.
5
+
Context: BCGov on Digital Authentication and Digital Identity Information
Current (legacy?):
● 30,000 Employees: userid/password
● 1 million accounts for Individual or Business users: BCeID userid/password
● Active directory, enterprise web single sign on paradigm
New:
● BC Services Card as Provincial Identity Information Program
● Fully subscribed* 4.3 million registered people
● Gov mobile app and gov issued EMV chip card - DL or Services Card
● Registered name, date of birth, address as verified identity information
● Careful privacy design, pairwise identifier scheme, conservative roll-out
Newest:
● Verifiable Organizations Network: Hyperledger Indy and friends: vonx.io
● orgbook.gov.bc.ca : Corporate registrations ---> licences, permits, and more
6
+
Perspectives on Strong Authentication
Damned if we (gov) don’t do it
● Corporate controlled or other government
controlled
● No effective recourse or accountability
● Challenges with recovery when lost - if they never
really knew you - how can they fix it?
● Authn services can be a party to every transaction
● UX and public perception
Damned if you do it - self provisioned
● One does not simply “self-provision” (U2F,
SmartPhone Apps for TOTP) - UX
● Challenges with recovery when lost -- who knows
you that can help you?
● We still need to bind your authentication to our
records related to you
7
Damned if we (gov) do it
● Protection / defense obligations are off-the-scale
● Low usage rates -- gov specific secrets forgotten
● Authn services can be party to every transaction
● If we verified your identity at our counter then we
do know you and can help recover lost / stolen --
but is that a bug or a feature?
● There are always users outside our borders -- we
can’t bring everyone to a registration counter
And lastly - lending problem when tied to benefits.
+
Perspectives on Digital Identity Information
8
guid1, Bob, May 15, 1972
guid2, Lou, Dec 9, 1989
guid3, Sam, Jun 21, 1955
Digital-Service.com
api.somegov/idim/namedob
or a callback (same effect)
Lou
Request +
Authorization
Response +
Data
● This is a problem even when it’s Digital-Service.gov
● The api’s know who’s calling/called. Event data is not fun to
manage when personal information is involved
● Calling AnyCompany.com everytime is not much better
● Scaling this into digital economy will be a problem
● Need to issue to Lou and enable Lou to share government
issued identity information without calling back to the gov
every time
Approve Cancel
Hi there! It’s us here at the gov.
Thanks for authenticating now we
remember you. Hi Lou!
Do you want to authorize Digital-
Service.com to call us right now
and get your name and date of
birth?
+
Perspectives on Digital Services, Digital Government, Digital Economy
9
Things you can do that
are not very important
or valuable
Things you need
to do that are
very important
or valuable
Face-to-face
Papers
Fax
Awesome
Digital Services
That Work Great
meh
grrrr
Sweet!
Not possible without
strong authentication and
digital identity information
-- standards and interop --
+
Healthcare
(see PDF)
+
Supply Chain
Jim Masloski
+
W3C WORKSHOP ON STRONG AUTHENTICATION & IDENTITY
SUPPLY CHAIN
(IDENTITY/VERIFIABLE CLAIMS )
INVOLVEMENT OF
ACTORS
PARTIES IN TRANSACTIONS
PARTICIPATION AT
THE PARTY LEVEL
CODIFYING
THE IDENTITIES OF PARTIES AND
THE ABILITY TO MAINTAIN
CONFIDENTIALITY
+
CONSIDERATIONS ON VERIFIABLE
CREDENTIALS
•Availability to the information
•Cross platform application
•Number of parties needing access to different pieces of the
data
•Ability to authenticate the information by responsible parties
•Out of the box thinking on how to build this out in the supply
chain industry
•Take into consideration the legal requirements as they
currently stand in the supply chain arena
+
Legal
Scott David @ScottLDavid
Director of Policy
Center for Information Assurance and Cybersecurity
University of Washington - Applied Physics
Laboratory
+
Law and DIDs
S.O.D.D.I.* in Seattle
Presentation to W3C – Strong Authentication and Identity Workshop
By Scott L. David
University of Washington – Applied Physics Laboratory
Information Risk Research Initiative
December 10, 2018
*SODDI – Is a criminal defense of Mistaken identity: “Some other dude did it”
+
DID Law Fork - Mild vs. Wild Paths
• Two faces of DID legal setting
– Mild or
Wild
+
Mild DID Law Path
+
Mild DID Law Challenge/Opportunity
• Practice = Compliance
– Navigate existing (anachronistic) laws, rules and contracts in DID
• Authority = Past as Precedent (Kojeve)
• Existing law and legal paradigms/institutions
– Varies among national jurisdictions
– Many artifacts of appropriations of capitalism and centralizations of nation state
• Focus on traditional embodiments of value
– “Property” concepts (IP, data “ownership,” etc.)
– Hierarchical governance/liability in organizations based on “causation”
• Value = cost savings of de-risking
– Identity is emerging “cost center” for organization
– Jurisdictional arbitrage-venue shopping
– “Zero-sum game” gestalt
• Identity = locus of (duty and liability) and (rights and value)
• Today’s duties are derived from yesterday’s problems
– Analogies in property law
– GDPR from 1970s era FIPPs
+
Wild DID Law
+
Wild DID Law Challenge
• Secondary effects of Moore’s law (etc.) yielded
downstream
exponential increase in interaction volumes
and densities
• Interactions breed risk
• Risk is increasing exponentially
• Existing laws/institutions are not built to de-risk these new
interaction phase spaces
– Distributed flows blind hierarchical organizations
• Yesterday’s Institutional (and individual) existential
narratives dissipate
• Challenge/Opportunity is to “re-intermediate” interactions
with new DID-based structures and narratives
+
Wild DID Law Opportunity
• Practice = Innovation
– Create new containers and pathways for intangible value flows
• Authority = Future Opportunities (Kojeve)
• New “unmapped’ complex shared risk space
• Bridge from old solutions to new solutions
– Old laws to new contracts
– Old institutions to distributed organizations
– Bridge as capitalism and nation state cede power/meaning to distributed structures
• Focus on newly available measurements to establish value
– Focus on measuring relationship (metrics for edges, not nodes)
– Focus on value extraction when data is converted into information – Meaning integrity
• Value = profit center of leveraging relationships (and de-risking)
– Efficiencies of avoiding avoidable harms
– Identity as profit center for organization
– Contracts to release legal jurisdictional arbitrage
– “Non-Zero-sum game” gestalt in new complex interaction spaces
• Identity = embodiment of relationship
– Information creates us, not vice versa
• Duties are derived from projections of tomorrow’s opportunities
– Analogies in early IP, derivatives markets, arbitrage instruments
–
+
Wild DID Law – Identities are Key
• Identities (of people, entities and things) are the key in distributed
systems.
• Each has multiple simultaneous identities (all relationship based)
• Why did “identity” get distributed?
– Paul Baran diagram (shown later) shows dissipated institutional power
– Much “identity” is based on relationships with institutions.
• With DIDs, distributed power/institutional structures
– Not a lot of precedent
• Not like co-ops – not hierarchical
• Need new institutional information and risk sharing structures
• Biological systems yield helpful models
• Resilient distributed structures grow organically
– Self-assembly among multiple similarly situated stakeholders. (COIs)
– Recognize that not starting from entirely clean slate
– Appropriations of late capitalism will continue to operate (In our souls)
– If aware of this, can design to harness that “energy of mutual appropriation”
–
•
+
Risks Create Organisms and Organizations
• What are current and emerging DID practices?
• What are processes to create feedback loops
to refine and develop those practices?
• “Rule of law is as much about process as
substance
– Due process (5
th
and 14
th
amend).
• Substantive
• Procedural
+
4 Step Ladder of Institutional Construction
• Processes of institutional construction/law are
built from practices
– Practices
• Adopt as rule (legislative/contract process)
– To get
– Best Practices
• Apply enforcement (judicial/enforcement process)
– To get
– Standards
• Include operations (executive/operating process)
– To get
– Institutions
+
How harvest/create practices for
socio-technical DID systems?
• Tools and Rules
– Technology Tools
– Legal Rules
• For “Tools” measure performance of tech against
specifications
– Process is Technical Standard setting
• Output is specifications (and IP DMZ)
• For “Rules” measure performance of people and
institutions against rules, laws, norms, etc.
– Process is creating public and private enforceable duties
• Legislative processes (and APA for regulations)
• Contract negotiation processes
+
What Measurements Needed for DID Tools and
Rules Development?
• What risks and what performance metrics are relevant for reliable DID systems?
– Data?
– Information?
– Identity?
– Other?
• You can’t protect it if you don’t know (or agree) what “IT” is
• We measure risk into existence
– The threat is present in the system
– Our measurement/observation allows us to perceive and mitigate risk
• Carcinogens – capacity to mutate is already present in system
• All financial collapses in US and UK since 1800 – Seeds of all financial collapse
are sown in response to prior crisis
• All IP – Create property narrative to enable accumulation (retard dissipation)
+
So, what specifically should we measure
to reduce emerging DID interaction risks?
(recalling that “what gets measured gets done”)
+
DID Stakeholders need reliable and shared
qualitative metrics to reduce risk
+
Sic Hunt Dracones
+
Taming the DID Wild Law Path
• Risks compel de-risking
practices
– What do different sorts of
emerging threats and
vulnerabilities suggest
about future DID
practices?
• Invite DID solutions for
13 information risk trends
+
Global Identity/Information Risk Trends
• 13 global risk trends include:
– Secrecy is Dead (but privacy and security are not)
– Distributed Information Architecture (blinds hierarchical organizations)
– Complexity (is its own “sovereignty”)
– Socio-Technical Systems (force non-technical variables into system design)
– Information Democratization (collapses scale & alters security paradigms)
– Data Technology is Dual-Use (it can be used for bad or good)
– People are “Data Producers” (without institutional support)
– Big Data Insights Invert (and Re-Invent?) Critical Analysis
– “Synthetic Intelligence” (is a Counterforce to AI)
– The Internet Is Not a Public Park (it is privately operated commercial space)
– Data is Not Information
– Power Laws In Bureaucracies Make Security-By-Secrecy Un-Economic
– AAA Risks Threaten Information Systems
+
Death of Secrecy
(the insight/intrusion “slider”)
• Secrecy died from vast system technical
interoperability and collective quest for
insight
– Insight of observer is intrusion to observed
+
Distributed Information Architectures
Render hierarchies blind
+
The Sovereignty of Complexity
Statistical outliers can be artifacts of misapplied Gaussian
distribution models
+
Socio-Technical Systems -
force non-technical variables into security design
+
Information Democratization Collapses Scale
Invites consideration of scale-independent policies
for fractal structures
+
Data Technology is “dual use”
It can do harm or good
(Like Nitrogen-Based Fertilizer)
+
People are Data “Producers”
Without Institutional Support
+
Big Data Insights Invert
(and Re-Invent?) Critical Analysis
+
Synthetic Intelligence
Is a counterforce to the existential anxiety caused by AI
+
The Internet is Not a Public Park
It is a privately-operated commercial space
+
“Data” is Not “Information”
Many system architecture problems dissipate when the
distinction is applied
+
Power Laws In Bureaucracies Raise
Secrecy/Reliability Costs
+
“AAAA” Threats to Identity/Information
Systems
Attacks, Accidents and Acts of Nature
+
Good Luck
• Let’s continue the conversation
•
sldavid@uw.edu
• @ScottLDavid
+
John Fontana
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/09-Day-2-Procedural-Agenda-Gardening.html b/collections/_2018-W3C-Authentication-Identity-Workshop/09-Day-2-Procedural-Agenda-Gardening.html new file mode 100644 index 00000000..004db7c9 --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/09-Day-2-Procedural-Agenda-Gardening.html @@ -0,0 +1,14 @@ +--- +title: "09) Day 2. Procedural Agenda Gardening" +--- + + +
+
Agenda Gardening, Day 2
+
Agenda Gardening, Day 2
https://www.w3.org/Security/strong-authentication-and-identity-
workshop/schedule.html
● 9:00 AM Procedural / Agenda Gardening
● 9:30 AM Dot voting: Concerns and Potential Work Items
● 9:45 AM
Exploring Cultural and Economic Perspectives
● 10:15 AM Avoiding mistakes and minefields
● 10:35 AM T-ID? Use case
● 11:00 AM Breakout #3: Work that needs to be incubated
● 11:30 AM Breakout #4: Work that is ready for a Working Group
● 1:00 PM Dot voting: Work for Incubation / Work for Working Groups
● 1:30 PM Entire Group: Discussion on warnings/objections on incubation / WGs
● 2:15 PM 5 Year Roadmap: DIDs, VCs, Attestation
● 2:45 PM 5 Year Roadmap: Authenticators
● 3:15 PM Browsers, Identity and Authentication
● 3:45 PM W3C Next Steps / Wrap up / close
● 4:00 PM Finish
+
Breakout Gardening
Dot-voting gave us several clusters:
● Confusion
○ Review quickly to see whether the group wants to spend time improving understanding
● General consensus
● Contentious items
● Chartering
+
Manu re Credentials CG and DID chartering proposal
CCG proposed DID WG charter, focused on data model
https://w3c-ccg.github.io/did-wg-charter/
CG is also doing experiments around protocol, resolution
About 15 different DID methods, think we’re ready to standardize data model
Slide deck on DID progress,
https://docs.google.com/presentation/d/18cDpqkPhlGKcOlgnbt2_2PbFoNv0vryXo
pp5rIG8A0o/edit#slide=id.gc6f80d1ff_0_0
+
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/10-Day-2-Exploring-Cultural-and-Economic-Perspectives.html b/collections/_2018-W3C-Authentication-Identity-Workshop/10-Day-2-Exploring-Cultural-and-Economic-Perspectives.html new file mode 100644 index 00000000..b7f57b71 --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/10-Day-2-Exploring-Cultural-and-Economic-Perspectives.html @@ -0,0 +1,32 @@ +--- +title: "10-Day-2-Exploring-Cultural-and-Economic-Perspectives" +description: "Current Situation of Japanese Fragmented ID Platforms" +"--- + + +
+
Current Situation of
Japanese fragmented ID Platforms
Dec. 2018
JCB Co., Ltd.
*The opinions expressed in this article are the author's own
and do not reflect the view of JCB Co., Ltd.
+
2
Agenda
1. Japanese "fragmented" ID Platforms
• “Fragmented" ID Platforms established by Japanese big companies
• Lack of Interoperability between platforms
2. Lack of Central Social ID system in Japan
• Heavily dependent on Driving License for KYC process
• Failed "My number (Japanese social security and tax number system)" expansion
3. My Opinion
• Necessity of “loose” ID federation in Japan Market
• Basic use case
+
3
① Japanese "fragmented" ID Platforms
Fragmented ID Platforms established by Japanese big companies
• Japanese Big Companies have tendency to establish their own “Platform”.
(E-commerce, SNS, Mobile Carrier, Automotive, Railways, Airlines, Department Store… )
Toyota
”My Toyota”
NTT Docomo
”d Account”
Yahoo Japan
”Yahoo ID”
JR East
(Former National Railway)
”JRE Point”
Rakuten
”My Rakuten”
+
4
① Japanese "fragmented" ID Platforms
Fragmented ID Platforms established by Japanese big companies (Cont.)
• Japanese Big Companies often become to diversified “Conglomerate”.
(…and often issue their own credit card as “issuer” and provide “mileage” to their users.)
• This situation is mainly due to “loose” regulation to prohibit other business for Big Companies
in Japan.
Department Store
Supermarket
Real Estate
Developer
Construction
company
Bus Operator
International
AirPort
Ex.1: Railways Company
Ex.2: Mobile Carrier
Hotels
Education
(Univ. etc)
Electricity
Railways
Mobile Carrier
Retail Financial
service
Online Banking
Cable TV
Life Insurance
E-Commerce
Electricity
Non-life
Insurance
Education
E-Money
+
5
① Japanese "fragmented" ID Platforms
Fragmented ID Platforms established by Japanese big companies (Cont.)
• In some area, Japanese local services can compete against Facebook and Amazon today.
• Based on this situation, Japanese “old type” big companies think;
“GAFA is very strong, but Japanese market have not occupied by them.”
E-Commerce (Share of B2C Trading volume )
≒
SNS (Monthly Active Users)
<
30,000,000 76,000,000
20% 20%
[Sources]Gaiax (2018), Jetro (2017)
+
6
① Japanese "fragmented" ID Platforms
Fragmented ID Platforms established by Japanese big companies (Cont.)
• ..as the result, everything become “fragmented” in Japan.
(when they want to tie their customer to their ecosystem, the easiest way is tying their customer to their payment method with
their own mileage program.)
..and today, third party QR Payments are additionally joined.
Rakuten
Ex.: Payment Method Acceptance (at Seven-Eleven)
(Prepaid)
(Credit Card including Contactless)
Railways
Seven-Eleven
+
7
① Japanese "fragmented" ID Platforms
Lack of Interoperability between Platforms
• Japanese Big Companies like to establish their “Original Format” Platform.
• And they want to keep(enclose) their data on their Platform.
Ex: Large Railways said
“we connected our mobile
APP to share time table of
every companies!”
…but just jumped to each
companies’ website...
[Source]app-renkei.jp
+
8
② Lack of Central Social ID system in Japan
Heavily dependent on Driving License for KYC process
• Almost of KYC process in Japan, Driving license has taken up dominant position.
Ex: Issuing Credit Card
First Priority:
Driving license
If don’t have Driving license,
can choose from; passport,
“My Number” card,
residence certificate etc.
[Source]JCB
+
9
② Lack of Central Social ID system in Japan
Failed "My number (Japanese social security and tax number system)" expansion
• Japanese government want to expanding usage of “My Number” card for Japanese Social ID
system.
• …but today, almost of Japanese people don’t use “My Number” as Social ID card.
(Only 10% of Japanese people have “My number” card.)
Storing Digital
Signature that can
use Public KYC
…and it can be
readable from some
of Android devices by
using NFC reader.
It is able to request
issuing “My number”
card from vending photo
machine.
(It sounds convenient! )
…but it takes about 1.5
months to get “My
number” card from local
government.
[Sources] Ministry of Internal Affairs and Communications, DNP
+
10
③ My Opinion
Necessity of “loose” ID federation in Japan Market
<From Companies Strategy>
• Some companies (I assume NTT docomo, Yahoo Japan and Line) want to take up a dominant position of
“Social ID login”. (of course, including Facebook and Google)
• But, I assume Japanese “old type” big companies don’t want to establish “external strongly centralized ID
Hub” because they want to stand directly in front of their customer.
<From current situation of KYC process in Japan>
• Japanese KYC Process is heavily depend on drivers license and “verified” (and met AML law regulation)
KYC data is stored only at Banks or Credit card Companies in general.
• When the sharing economy is expanding, I assume AML regulation is critical problem, but most of
companies (expecting Financial Institutions) don’t have such data.
• In Japan, I assume “Loose” ID federation between companies, financial intuitions and
governmental bodies is needed.
• To realize this concept, the scheme for DIDs and Self sovereign (especially on consent
management) will become Key Module.
+
11
③ My Opinion
Basic use case
Car Share Platform
Car Owner
Register to Car Share Platform
User
Use the car through the Platform
Pay Fees
• Today, Boryokudan (Japanese Mafias) isn’t prohibited strictly buying cars from car dealers.
(Actually in Japan, Boryokudan member ride cars normally)
• When the scheme described above is worked, Boryokudan can get money by lending their car.
(From AML view, this is not permitted)
• I assume Car Share Platform Provider want to get KYC information of Car Owner and User
easily.
Get Money
+
Thank you for your attention!
+
Automatic Identification Standards
Shigeya Suzuki, Ph.D
Associate Director, Technology Officer, Blockchain Laboratory, Keio Research Institute at SFC
Associate Director, Auto-ID Lab Japan, Keio Research Institute at SFC
Project Associate Professor, Graduate School of Media and Governance, Keio University
shigeya@wide.ad.jp
11 November, 2018 @ W3C Workshop on Strong Authentication and Identity
+
UPC
+
2016
UPC to Product Information
• “323900039629”
15
https://www.target.com/p/vicks-vapocool-medicated-throat-drops-menthol-50ct/-/A-75557582
+
2016
GS1 Standards
• Identify, Capture, and Share
• Identify: Standards for the identification of items, locations,
shipments, assets, etc. and its associated data
• Capture: Standards for encoding and capturing data in physical
data carriers
•
Share: Standards for sharing data between parties
16
https://www.gs1.org/docs/architecture/GS1_System_Landscape.pdf
+
2016
GS1 Identification Key
• Identify either class or instance
• Unique and unambiguous within their domains
• Domains includes, not limited to:
– Trade items (i.e., Global Trade Item Number — GTIN)
– Logistic units (i.e., Serial Shipping Container Code — SSCC)
– Assets (i.e., Global Individual Asset Identifier — GIAI)
– Locations (i.e., Global Location Number — GLN)
17
+
2016
GS1 Identification Key
• Trade items (i.e., Global Trade Item Number — GTIN)
• Logistic units (i.e., Serial Shipping Container Code — SSCC)
• Assets (i.e., Global Individual Asset Identifier — GIAI)
• Locations (i.e., Global Location Number — GLN)
18
urn:epc:id:sgtin:CompanyPrefix.IndicatorPlusItemReference.SerialReference
urn:epc:id:sscc:CompanyPrefix.ExtensionPlusSerialReference
urn:epc:id:giai:CompanyPrefix.Individual AssetReference
urn:epc:id:sgln:CompanyPrefix.LocationReference.Extension
+
2016
Physical Representation
• Barcode
• RFID
19
+
2016
Application: Authenticity Verification
• New, soon-to-be-standard:
“GS1 Lightweight Messaging Standard for Verification”
• REST-like query interface,
results in JSON (new in GS1 Standards),
GS1 Keys embedded in URL
• Resolver resolve the results
• Use case: US Drug Supply Chain Security Act (DSCSA)
compliance
20
+
2016
Difficulty on Resolving Services
• Object Naming System (ONS)
– DNS Based (part of) GS1 Key to server mapping service
– Not used other than research purpose
• Discovery Services
– Centralized service to provide GS1 Key to servers mapping service
– Design work suspended until there is a well-defined demands from
industry
• But.. Lately, there is renewed interest in mapping between
identifiers and associated data, together with verification of
identifiers
21
+
2016
Difficulty and Possibility
• GS1 is the standard on product and business entity identification
• DID focuses on digital identity
• We need cyber-physical link other than human
• Allow to use broader range of IDs (including GS1 Keys) in “id”
fields makes DID related standards more interesting
• There is a good intersection between both of the works
– i.e., Product authenticity proof without accessing servers
22
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/10.3-Day-2-PindarWong_1.html b/collections/_2018-W3C-Authentication-Identity-Workshop/10.3-Day-2-PindarWong_1.html new file mode 100644 index 00000000..676cd362 --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/10.3-Day-2-PindarWong_1.html @@ -0,0 +1,31 @@ +--- +title: "10.3 Day 2 Pindar Wong" +--- + +
+
Law and Borders:
Self-Administered IDentifiers
and
NExTPats: NETizen eXpatriates
黃平達
Pindar.Wong@gmail.com
VeriFi (Hong Kong) Limited
2018年11月27日
CC BY-NC 4.0
+
Source: http://i.imgur.com/MWnlkbo.jpg
There are more people living inside
this circle than outside of it
+
The Right to Work Online
Data Model:
Legal Identifiers with Legal Standing
1) Natural Persons (Privacy Constrained)
2) Legal Persons
other types( AI, IoT (50 billion), Smart Contracts)
Data Model:
Non-Lawful Identifiers (does not require the law for
legitimacy)
Netizen Expatriates (NETizen Expatriates)
Displaced People
(Now 70 million: More than post WWII
Future: 700 million -> billion in a generation)
Internally Displaced Persons
Externally Displaced - Forced Migrants
Migrant Workers
+
Scaling The Next Billion+:
Sovereign Identifier Systems - India
● Aadhaar, 10 year old, 12 Digit Identifier
● Stats:
https://uidai.gov.in/aadhaar_dashboard/auth_trend.php
○ https://uidai.gov.in/
○ http://indiastack.org/
● Supreme Court Constitutional Ruling:
“It is better to be unique than the best. Because, being the best makes
you the number one, but being unique makes you the only one.” --
26 Sept Supreme Court of India Judgement - Constitutionality
+
Scaling The Next Billion++
Sovereign Identifier Systems - China
●
社會信用體系 - Social Credit System (Public Private Partnership)
●
Real Name Electronic ID ( http://eid.cn/ ) and CTID (CyberTrusted ID)
● Deployment Pathways: TechFin
○ Alibaba (AntFinancial - Technology Provider (Alipay)):
○ Tencent (WeChat Pay - WeiXin 800 million active users)
● Deployment Pathways: FinTech ( Traditional Banks - Union Pay)
● Common CLOUD and Carrier Services (Mobile)->
○ De-risking and Externalizing Costs associated with Identity Responsibility and Risk for Digital
Generation (DiDs)
●
Identities issued by the government to citizens for identifying identity
online and offline
○ Bank Smart Card (Distributors)
○ SIMeID (Mobile)
● Hong Kong new e-ID Card: Deployment Starting this month (8 million)
+
Source: http://beltandroad.hktdc.com/en/belt-and-road-basics
Belt and Road Blockchain
Soft Infrastructure for China’s Belt and Road Initiative (BRI)
EG. 90% By Sea
Tradelens by Modern Terminal +
Maersk + IBM
+
CHANGING ARCHITECTURE: Game Changer?
‘Hong Kong’ Barnyz CC-BY-NC-ND 2016
Change in
1) Market Structure,
2) Business Models and
3) Competitive Landscape
+
WHAT ARE FUNDAMENTAL TENSIONS?
‘Tension’ Domiriel CC-BY-NC 2012
+
Liberté, égalité, fraternité
WestPhalia
1648
Ice
Fire
EastPhalia
2047
?
Bordered and Sovereign:
Territoriality Principle
No One Above The Law
Borderless and Self-
Administered: ‘Functionality
Principle’
No Nation Below Mathematics
+
The Belt and Road Blockchain :
Public Governance Private Business
BLEI
BLEI BLEI BLEI
BLEI
BLEI
Public Governance - BRBC Immutable Change of State for Liability
Private Business - Detailed Transaction Data ( Halal Blockchain A)
Private Business - Detailed Transaction Data ( Blockchain B)
Private Business - Detailed Transaction Data ( Blockchain C) etc.
Private Business: Your Transaction Blockchain/Settlement Network
SA-IDs
+
Hong Kong: Emerging Separation of Concerns
1) Public and Border Security: Public Governance (‘Golden Source’)
Legal Identifier, Accountability and Confidence (tangible physical border)
2) Commercial and Day-to-Day: Private Business (‘Golden Copies’)
Functional Identifier(may or may not necessary have PII),
Self-Administered Identifier (Cloud+Mobile)
Cryptographic Consistency and ‘Confidistance’ - (Intangible data border)
+
Borderless
Communities:
‘Ice’
Cryptographically
Strong
Static ‘Violence’
Sovereign
States:
‘Fire’
Dynamic
‘Violence’
+
Legal Certainty
“Rule of Law’
Eastphalia 2047: The Internet’s New Legal Layer
Cryptographic
Consistency
“Rule of Code”
+
Law and Borders: Lawful Legal Standing
Legal Person
Natural Person
Algorithmic Liability ( Estonia ‘Kratt’ Law)
A different ordering principle?
Decentralized != Disorganised
Coordinate without Communicating
+
The Post-Internet, Post-Bitcoin Era
+
Distance != Cost
Centralized != Trusted
Time !=
Money
The Fundamental Assumptions ...
+
Changing Architecture: PULL → PUSH
‘PUSH’ Daremoshiranai CC-BY-NC 2014
Analog Supply Chains -> Digital Demand Chains
+
3D Printing Technology @ Siggraph , 8 August 2011 by Kyle Pierce https://creativecommons.org/licenses/by-
sa/2.0/
Digitizing Global Trade
ICE: 23/11
Black Friday ->
Cyber Monday
USD 7.8 Billion?
FIRE: 11/11
Singles Day
USD 30 Billion?
+
Kaizen: Japanese (Change for Better)
Predictable Incremental Improvements over
Time -> Incremental Efficiency
Low Risk
FIRE
+
Unpredictable Breakthrough Improvement
Proposals -> Massive Efficiency and Massive Risk
http://tw.tartoo.com/self-breakthrough.html
ICE
+
Fire and Ice
Poem by Robert Frost ( 1874-1963)
Some say the world will end in fire,
Some say in ice.
From what I’ve tasted of desire
I hold with those who favor fire.
But if it had to perish twice,
I think I know enough of hate
To know that for destruction ice
Is also great
And would suffice
+
ConfiDistance
Selective Transparency
Don’t Trust Verify
22
Emerging Principles?
+
End References
https://www.coindesk.com/blockchains-
killer-app-making-trade-wars-obsolete/
https://www.youtube.com/watch?time_c
ontinue=9&v=L7CuuLYi0Ik
https://youtu.be/e7Pq6WQuVTQ?t=276
37
a) Making Trade Wars Obsolete
a) CES 2018 - HK Belt and Road
Blockchain Consortium
a) Berlin T20/G20 Process 2017
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/11-Day-2-Avoiding-Mistakes-and-Minefields.html b/collections/_2018-W3C-Authentication-Identity-Workshop/11-Day-2-Avoiding-Mistakes-and-Minefields.html new file mode 100644 index 00000000..1c7d6af5 --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/11-Day-2-Avoiding-Mistakes-and-Minefields.html @@ -0,0 +1,28 @@ +--- +title: "11) Day 2 Avoiding Mistakes and Minefields" +--- + + +
+
Avoiding Mistakes and
Minefields
Jeff Hodges
W3C Strong Authentication and Identity Workshop
10,11-Dec-2018
+
"common mistakes and minefields while building Strong Auth
and Identity technologies" -- Which context?
i.e. at..
●
protocol/system design time,
●
component implementation time (eg, in libraries/packagers, clients, servers),
● deployment time (i.e., by Relying Parties and Service Providers)
..?
+
"common mistakes and minefields while building Strong Auth
and Identity technologies" -- Which context?
i.e. at..
●
protocol/system design time,
●
component implementation time (eg, in libraries/packages, clients, servers),
● deployment time (i.e., by Relying Parties, Service Providers, Identity Providers)
..?
NOTE: the above are "motherhood & apple pie" aspects of building anything
+
Protocol / System Design Time
● Carefully define terminology and use it consistently
○ e.g., do you use the terms names and identifiers ?
○ Are they explicitly the same?
○ If not, what are the precise differences?
+
Protocol / System Design Time
● Carefully define terminology and use it consistently
○ e.g., do you use the terms names and identifiers ?
○ Are they explicitly the same?
○ If not, what are the precise differences?
● E.g.: names are fungible and non-unique, while identifiers are unique and
persistent
+
Protocol / System Design Time
● Carefully define terminology and use it consistently
○ e.g., do you use the terms names and identifiers ?
○ Are they explicitly the same?
○ If not, what are the precise differences?
● E.g.: names are fungible and non-unique, while identifiers are unique and
persistent
e.g.:
https://www.w3.org/TR/webauthn/#terminology
https://w3c-ccg.github.io/did-spec/#terminology
http://docs.oasis-open.org/security/saml/v2.0/saml-glossary-2.0-os.pdf
+
Component Implementation Time
(eg, in libraries/packages, clients, servers)
c.f. The Most Dangerous Code in the World:
Validating SSL Certificates in Non-Browser Software
● We demonstrate that SSL certificate validation is completely broken
in many security-critical applications and libraries. [...]
[...] The root causes of these vulnerabilities are badly designed APIs
of SSL implementations (such as JSSE, OpenSSL, and GnuTLS)
and data-transport libraries (such as cURL) which present developers
with a confusing array of settings and options.
+
Deployment Time
(i.e., by Relying Parties, Service Providers, Identity Providers)
● are the employed underlying technologies secure? (see prior slide)
+
Deployment Time
(i.e., by Relying Parties, Service Providers, Identity Providers)
● are the employed underlying technologies secure and securely employed?
(see prior slide)
● Having a carefully designed deployment architecture...
○ even though given high-level authentication and identity technologies, integrating them into
delivered systems is typically non-trivial
○ e.g.:
Stanford Registry & Directory Infrastructure: A Case History
+
Deployment Time
(i.e., by Relying Parties, Service Providers, Identity Providers)
● are the employed underlying technologies secure and securely employed?
(see prior slide)
+
Deployment Time
(i.e., by Relying Parties, Service Providers, Identity Providers)
● are the employed underlying technologies secure? (see prior slide)
● Having a carefully designed deployment architecture...
○ even though given high-level authentication and identity technologies, integrating them into
delivered systems is typically non-trivial
○ c.f.: Stanford Registry & Directory Infrastructure: A Case History
● Specific actual examples on following slides from deployer of federated
identity
+
Deployment Time
(i.e., by Relying Parties, Service Providers, Identity Providers)
1) SP's requesting ForceAuthN but then not checking the concurrency of the values sent
back by the IdP (ie its not a fresh re-auth) but assuming it is (oops!) [see prior slide 7]
2) SPs assuming "principal name" is an email address - or using such fields as the prime
account ID where recycling of those values can occur at the IdP end over time...
3) the particular values of eduPersonAffiliation (student,staff,faculty,employee etc) are
arbitrarily decided by each site in a federated world and dont mean the same thing across
regions.
4) assuming all federations operate in the same way across the world (particularly when
interfederated with eduGAIN - other rules of play are involved
+
Deployment Time
(i.e., by Relying Parties, Service Providers, Identity Providers)
5) wanting to use the best and up to date security algorithms
loads of partners in federation space are not following BCP and there's a lowering of
average level (for those with REALLY out of date stuff, you just have to remove them
from your relationship)
6) users are easily confused with all the stuff
the interface MUST be simple for selection of Identity Provider and logging in page.
Decent education is needed to ensure users dont just think they can type institutional
id/password into any random user/pass field on the internet!
+
Overall: Trust Does Not Scale
i.e.:
"trust does not automagically scale across arbitrary policy domains"
+
Overall: Trust Does Not Scale
i.e.:
"trust does not automagically scale across arbitrary policy domains"
corollary:
"scaling trust across distinct policy domains requires specific agreements
between the policy domains regarding (at least) the definition of trust,
requirements for attaining degrees of trust, and what it is that is trusted."
+
Overall: Trust Does Not Scale
i.e.:
"trust does not automagically scale across arbitrary policy domains"
corollary:
"scaling trust across distinct policy domains requires specific agreements
between the policy domains regarding (at least) the definition of trust,
requirements for attaining degrees of trust, and what it is that is trusted."
e.g.:
NIST.SP.800-63-3 is an attempt at defining such policy agreements
across USGov agencies.
+
Further thoughts...
Consider implementing a simple design satisfying simple use case(s), and trying it
out in practice, before attempting to "finalize" the specification. Iterate WRT
satisfying more complex use cases and updating the specification.
+
● flexitility -- build something that is nominally useful yet malleable such that
can evolve to satisfy further use cases
+
TODO: Diagram: (hourglass shape)
1995: 10s of home-grown web SSO and identity approaches
2001: SAML v1
Now: fewer than some number, say ~ 10 or 15?
● SAMLv2
● OIDC
● WS-Federation et al
● OpenID v2 and v1
● ?
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/12-Day-2-Breakouts.html b/collections/_2018-W3C-Authentication-Identity-Workshop/12-Day-2-Breakouts.html new file mode 100644 index 00000000..7b80fd69 --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/12-Day-2-Breakouts.html @@ -0,0 +1,10 @@ +--- +title: "Breakouts" +--- + + +
+
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/13-Day-2-5-Year-Roadmap-DIDs_-VCs_-and-Attestations.html b/collections/_2018-W3C-Authentication-Identity-Workshop/13-Day-2-5-Year-Roadmap-DIDs_-VCs_-and-Attestations.html new file mode 100644 index 00000000..3f56e64f --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/13-Day-2-5-Year-Roadmap-DIDs_-VCs_-and-Attestations.html @@ -0,0 +1,15 @@ +--- +title: "13) Day 2. 5 Year Roadmap DIDs VCs, and Attestations" +--- + + +
+
DID & VC Architecture
Roadmap 2018+
Christopher Allen
Principal Architect & Founder — Blockchain Commons
W3C Credentials CG Chair
1
+
Current Efforts at W3C
2
● Verifiable Claims WG, Verifiable Credentials
○ Anyone can verifiably say anything about anyone.
○ Identity emerges from evaluating multiple sources of
information, across multiple interactions
● Decentralized Identifiers (DIDs), draft WG
○ Anyone can publicly manage provable identifiers without
administrative interference
○ Move beyond centrally administered IDs
○ Provide for a plurality of authorities
+
Decentralized Identity Stack
3
● DIDs – Root Identifiers
○ DID Universal Resolvers — support interoperability between
multiple DID methods.
○ DID Methods – Specific approaches using different blockchains
○ DID Documents – Proof of Control & Service References
+
+
Decentralized Identity Stack
4
● DIDs – Root Identifiers …
● Raw Data – Observed facts & transactions
● Verifiable Credentials – Assertions by knowable authorities
● Profiles / Presentations / Persona – Representations of individuals
● Consent – Records of authorization
● Reasoning – Interpretation & Analysis
● Evaluation – Risk Analysis & Reputation
● Understanding – Internal knowledge representation
● Services – Interactions of value
+
Potential Technologies for Future Work
5
● DID-Auth (Authn/Authz)
● OCAP (Authz through Object Capabilities)
● Credential Requests & Exchange
● Data Minimization & Selective Disclosure
● Consent & Consent Receipts
● Storage (Identity Hubs) & Internal Representations
● Analytics & Algorithms for Evaluation
● Cryptographic Proofs
○ Signature, Encryption, Signcryption Suites
○ Time-stamping
○ Zero-knowledge proofs
+
https://w3c-ccg.github.io/roadmap/diagram.html
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/13.5-Day-2-Attestation-Arm.html b/collections/_2018-W3C-Authentication-Identity-Workshop/13.5-Day-2-Attestation-Arm.html new file mode 100644 index 00000000..f1f06ec6 --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/13.5-Day-2-Attestation-Arm.html @@ -0,0 +1,13 @@ +--- +title: "13) Day 2 Attestation Arm" +--- + +
+
Attestation Roadmap
Mathias Brossard
mathias.brossard@arm.com
W3C Workshop on Strong
Authentication & Identity
December 10th and 11th, 2018
+
Platform Security Architecture (PSA)
– IoT security desperately
needed.
– PSA aims to offer guidance +
designs + software
– Open Source project: Arm
Trusted Firmware-M
– Arm v8-M with TrustZone
support
– APIs currently being defined
•
Crypto API published
• Attestation API planned for 1Q
2019
SECURE STATES NON-SECURE STATES
TrustZone for Arm v8-M
Secure
App/Libs
Secure OS
parts
Non-secure
OS parts
Non-secure
App
APIs
+
Attestation
– Many existing attestation efforts:
• Trusted Computing Group (TCG): Trusted Platform
Module (TPM)
• Android
• FIDO
• Global Platform
• …
– Expressed interest for some convergence towards IETF
EAT
• CWT / JWT based container
• CWT preferred in constrained environments
(token size, RAM/Code requirements)
+
Roadmap
– EAT is the starting point
– Interoperability Model
– Trust Model(s)
– Protocols
• Remote Attestation
• Integration with Enrollment / Credentialing /
On-boarding
• Integration with Authentication
• Integration with Authorization
+
Parting thoughts
– Increasingly disaggregated systems (Cloud, IoT,
Web) with many components.
– Attestation is a building block for trust in
connected systems.
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/14-Day-2-5-Year-Roadmap-Authenticators.html b/collections/_2018-W3C-Authentication-Identity-Workshop/14-Day-2-5-Year-Roadmap-Authenticators.html new file mode 100644 index 00000000..a9e760c9 --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/14-Day-2-5-Year-Roadmap-Authenticators.html @@ -0,0 +1,20 @@ +--- +title: "14) Day 2. 5 Year Roadmap Authenticators" +--- + + +
+
©Veridium All Rights Reserved
Authenticators
+
Convergence
2
+
+
Source:
StorageCraft
+
2410-2017 platform configuration options (ISO 24745)
5
Storage
Matching
Mobile
Server
Mobile
฀
(FIDO UAF, WebAuthN)
฀
Server
฀
฀
Shares
(both mobile and server)
฀
฀
©Veridium All Ri ghts Reserved
+
6
©Veridium All Ri ghts Reserved
Storage
Matching
Mobile
Server
Mobile
฀
(FIDO UAF, WebAuthN)
฀
Server
฀
฀
Shares
(both mobile and server)
฀
฀
2410-2017 platform configuration options (ISO 24745)
+
Storage
Matching
Mobile
Server
Mobile
฀
(FIDO UAF, WebAuthN)
฀
Server
฀
฀
Shares
(both mobile and server)
฀
฀
7
©Veridium All Ri ghts Reserved
2410-2017 platform configuration options (ISO 24745)
+
+
1. Biometrics Should Be Stored at the Edge
2. Biometrics Should Never Be Stored on a Blockchain
3. Biometrics Can Be Accessed Via a Blockchain
4. Biometrics Should Be Under A User’s Control
5. Biometrics Traits Should Be Reliable
6. Biometrics Are Part of an Ecosystem
+
Biometric DID Authentication with IEEE 2410-2017
© 2018 Veridium IP Ltd. All Rights Reserved. 10
RP
DID
(with VID address,
uid & JWT
encrypted with
privkey & RP’s
pubkey)
uses
did-auth-relyingparty
Universal
Resolver
DID
DID doc
(with pubkey)
VeridiumID
uid
(decrypted with
pubkey in DID doc
and server privkey)
session
push notification
blockchain
1
2
3
4
5
7
6
auth result
+
11
©Veridium Al l Ri ghts Reserved
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/14.5-Day-2-5-Year-Roadmap-Authenticators_-Gemalto.html b/collections/_2018-W3C-Authentication-Identity-Workshop/14.5-Day-2-5-Year-Roadmap-Authenticators_-Gemalto.html new file mode 100644 index 00000000..df4201ea --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/14.5-Day-2-5-Year-Roadmap-Authenticators_-Gemalto.html @@ -0,0 +1,15 @@ +--- +title: "14.5) Day-2. 5 Year Roadmap Authenticators - Gemalto" +--- + +
+
The impacts of European regulation PSD2 and
Strong Customer Authentication on e-commerce
Marie Lathière, Digital Strategy Banking & Payments
+
Mandates
Objectives
PSD2 will come into force in September 2019
Foster innovation
Protect customers
Issuers must open APIs for account
consultation and payment initiation
e-transactions must be protected by
Strong Customer Authentication
+
Strong Customer Authentication (SCA) and Dynamic
Linking requirements
Dynamic Link
Fingerprint
Face
Voice
What I Am
(inherence)
PIN / Password
What I Know
Device, token, card
What I Have
(possession)
and/or
and/o
r
Strong Customer Authentication (SCA)
and
Transaction
value
Transaction
Payee
Authentication code generation
+
3D Secure, the natural solution to comply with PSD2
E-SHOP
ISSUER
CUSTOMER
1. Checkout
DIRECTORY
SERVER
2. Authentication request
3. Authentication
4. Authorization Request
…
NETWORK
4. Authorization
Request
+
« Due to 3DSecure for PSD2, we expect our
conversion rate to decrease by up to 10-15% »
Bilal El Kouche, Head of Payments at vente-privee
(#3 online retailer in France)
+
The real solution: let Merchants keep control of the
UX:
Delegated authentication
+
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/15-Day-2-Browsers-work-with-Authentication-and-Identity.html b/collections/_2018-W3C-Authentication-Identity-Workshop/15-Day-2-Browsers-work-with-Authentication-and-Identity.html new file mode 100644 index 00000000..ebd3dd53 --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/15-Day-2-Browsers-work-with-Authentication-and-Identity.html @@ -0,0 +1,36 @@ +--- +title: "15) Day 2. Browsers work with Authentication and Identity" +--- + + +
+
+
Web Authentication
User Journeys
Simple Secure Authentication
Steven Soneff - sso@google.com
Dec 2018
Original Authors:
UX: tringuye@
PM: cbrand@
+
WebAuthn enables user journeys that are
WebAuthn / What is WebAuthn?
Simple – intuitive and easy for user
Secure – resistant to phishing, re-use, etc.
+
Authentication has two core user journeys
WebAuthn / FIDO2 enables multiple use cases
02
Re-Authentication
User does a repeat authentication to a service
...The next slides will walk through these user journeys as a user might
encounter them on the web
01
Bootstrap
User authenticates to a service for the first time
+
Elisa opens launches her
mobile browser, Chrome,
and goes to
Tri-Bank
1. Registering built-in authenticator for reAuth
(mobile web)
Request
UV=true
X-Plat=false
Result
credential
(internal,caBLE)
+
Request
UV=true
X-Plat=false
Result
credential
(internal,caBLE)
1. Registering built-in authenticator for reAuth
(mobile web)
She signs in with her
username and password
(+potentially other factors)
+
1. Registering built-in authenticator for reAuth
(mobile web)
Tri-Bank shows a promo
asking Elisa if she wants to
opt-in to use Fingerprint
to sign-in.
+
Elisa comes back to Tri-Bank in another session
+
2a. Using built-in authenticator for reAuth
(mobile web)
The next time Elisa
opens Tri-Bank on
mobile browser, she
gets a fingerprint dialog
Request
credentialId
(internal)
+
2a. Using built-in authenticator for reAuth
(mobile web)
Using only her fingerprint,
she’s able to sign-in
without using her
username + password on
mobile web
Request
credentialId
(internal)
+
11
Using built-in authenticator for reAuth (native mobile app)
Elisa downloads Tri bank from
the Play Store, she
launches
the app for the first time
to
sign in
to check her funds
+
Request
credentialId
(internal)
Request (Alternative)
{empty credentialId}
Will result in prompt to insert removable
SK
Request
UV=true
X-Plat=false
Result
credential
(internal,caBLE)
2b. Using built-in authenticator for reAuth
(native mobile app)
She installs Tri Bank from
Google Play Store and
opens the app
+
2b. Using built-in authenticator for reAuth
(native mobile app)
Elisa chooses sign in
and also
chooses an
account.
Request
credentialId
(internal)
+
2b. Using built-in authenticator for reAuth
(native mobile app)
Elisa now is asked to
authenticate
with the
fingerprint dialog
+
15
Cross-Platform Bootstrap
Elisa wants to sign in
to her bank on her
desktop computer
+
Request
credentialId
(internal)
Request (Alternative)
{empty credentialId}
Will result in prompt to insert removable
SK
3i. Cross-Platform bootstrap
Elisa chooses to sign-in
on her
desktop browser
+
Request
credentialId
(internal)
Request (Alternative)
{empty credentialId}
Will result in prompt to insert removable
SK
3i. Cross-Platform bootstrap
Elisa enters her account
username and chooses
to proceed ‘next’
+
Request
credentialId
(internal)
Request (Alternative)
{empty credentialId}
Will result in prompt to insert removable
SK
3i. Cross-Platform bootstrap
She’s asked to verify
the new device using
her phone fingerprint
that she’s been using
to sign-in to Tri-Bank
+
Request
credentialId
(internal)
Request (Alternative)
{empty credentialId}
Will result in prompt to insert removable
SK
3ii. Cross-Platform bootstrap
Because Elisa has a
Macbook with Touch ID,
Tri-bank can asks her if
she wants to use local
fingerprint on the
device.
+
Request
credentialId
(internal)
Request (Alternative)
{empty credentialId}
Will result in prompt to insert removable
SK
3ii. Cross-Platform bootstrap
Elisa gets prompted to
try using the local
fingerprint on the
device.
+
Request
credentialId
(internal)
Request (Alternative)
{empty credentialId}
Will result in prompt to insert removable
SK
3ii. Cross-Platform bootstrap
She opts-in and
continues to her
account
+
...when Elisa comes back to Tri-Bank on the Macbook Pro
+
Request
credentialId
(internal)
Request (Alternative)
{empty credentialId}
Will result in prompt to insert removable
SK
4. Using built-in authenticator for reAuth
Elisa comes back to
sign-in
on her desktop
browser
+
Request
credentialId
(internal)
Request (Alternative)
{empty credentialId}
Will result in prompt to insert removable
SK
4. Using built-in authenticator for reAuth
A fingerprint dialog
appears
above the sign-
in page and
Elisa
touches the sensor
+
Request
credentialId
(internal)
Request (Alternative)
{empty credentialId}
Will result in prompt to insert removable
SK
4. Using built-in authenticator for reAuth
Elisa’s identity is
accepted
and she’s
signed in!
+
Note that we’re inheriting the
strength of the credentials from
the initial bootstrap.
+
Summary
Web Authentication
Simple - avoid typing, avoid passwords, minimal decisions
Secure - passwordless, multi-factor, phishing-resistant
Steven Soneff -
sso@google.com
Web Platform Product Manager
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/Health-Care-IDology.html b/collections/_2018-W3C-Authentication-Identity-Workshop/Health-Care-IDology.html new file mode 100644 index 00000000..5a96ad7e --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/Health-Care-IDology.html @@ -0,0 +1,16 @@ +--- +title: "Health Care IDology" +--- + + +
+
Health Care IDology
Allen L. Brown, Jr., Ph.D.
Deixis, PBC
Seattle, WA
abrown@deixis.digital
W3C Workshop Redmond
December 10-11, 2018
1/3
+
What needs an identity?
§
payers
§
providers
§
data
§
patients
2/3
+
What needs an identity?
§
payers
§
providers
§
data
§
patients
2/3
+
What needs an identity?
§
payers
§
providers
§
data
§
patients
2/3
+
What needs an identity?
§
payers
§
providers
§
data
§
patients
2/3
+
What needs an identity?
§
payers
§
providers
§
data
§
patients
2/3
+
δεῖξις (1) mode of proof; (2) proof, specimen; (3) display,
exhibition
deixis (1) designating words relating to the time and place
of utterance; (2) proving directly
2/3
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/Use-Case-21-with-FIDO-Proof-of-Presence-Key.html b/collections/_2018-W3C-Authentication-Identity-Workshop/Use-Case-21-with-FIDO-Proof-of-Presence-Key.html new file mode 100644 index 00000000..3fb2101b --- /dev/null +++ b/collections/_2018-W3C-Authentication-Identity-Workshop/Use-Case-21-with-FIDO-Proof-of-Presence-Key.html @@ -0,0 +1,14 @@ +--- +title: "Use Case 20 with FIDO Proof of Presence Key" +--- + + +
+
Use Case: Over 21 with Proof of Presence Token
Purpose:
To provide reasonably high assurance that a claim of majority is valid for acquiring
restricted resources.
Goal:
To allow online purchases of legally restricted resources like alcoholic beverages in an
environment where user identity attributes are distributed among many providers.
Actor: Consumer of restricted resources.
Actor: Supplier of restricted resources.
Actor: Verifier of claim of majority (also can validate binding to subject)
Actor: Provider(s) of late binding tokens and client-side code
Preconditions:
1. The Consumer has acquired a late binding token from any provider at all.
2. The Consumer has registered an over-21 claim with verifier using token.
3. The Consumer has established an account with supplier using a DID or other
persistent ID.
Scenario: Consumer signs into supplier and has never purchased liquor from this site.
1. Consumer selects to purchase liquor item
2. Supplier asks user for over 21 proof with a nonce.
3. Consumer sends verifiable claim of over 21 they acquired from verifier.
4. Supplier asks verifier for proof. (This would be by redirect to verifier through user
browser)
5. Verifier supplies validated claim (or statement of non-revocation) bound to nonce
by redirect to Supplier, if this VC is bound to the user’s session with supplier, it
can have a lifetime of the duration of bound session.
6. Monetization is by direct micro payment (on the order of $.05) from supplier to
verifier.
Alternative Paths:
1. Consumer selects to purchase liquor item.
2. Supplier asks user for over 21 proof with a nonce.
3. Consumer asks verifier directly for proof with nonce from Supplier.
4. Verifier asks consumer to enter token for proof of presence.
+
5. Verifier send validated claim with nonce of supplier with short expiration time (10-
20 mins - alternate life time of duration of session).
6. Consumer sends verified claim to supplier.
7. Monetization is by advertising from verifier to consumer.
A different path using biometrics:
● Yoti, a London-based startup which wants to become the “world’s trusted identity
platform”, is one of many attempts to provide such a service. Its system stores
government id documents and biometrics. If a user wants to buy a bottle of wine
at a supermarket self-check-out and needs to prove their age, they scan a qr
code and take a selfie using Yoti’s app. The retailer can be sure of their age, but
no one has seen their name or nationality.
From the Financial TimesTRAFFIC
LIGHT PROTOCOL (TLP)
FIRST Standards Definitions and Usage Guidance — Version 1.0
1. Introduction
a. The Traffic Light Protocol (TLP) was created in order to facilitate greater sharing
of information. TLP is a set of designations used to ensure that sensitive information is
shared with the appropriate audience. It employs four colors to indicate expected
sharing boundaries to be applied by the recipient(s). TLP only has four colors; any
designations not listed in this standard are not considered valid by FIRST.
b. TLP provides a simple and intuitive schema for indicating when and how
sensitive information can be shared, facilitating more frequent and effective
collaboration. TLP is not a “control marking” or classification scheme. TLP was not
designed to handle licensing terms, handling and encryption rules, and restrictions on
action or instrumentation of information. TLP labels and their definitions are not
intended to have any effect on freedom of information or “sunshine” laws in any
jurisdiction.
c. TLP is optimized for ease of adoption, human readability and person-to-person
sharing; it may be used in automated sharing exchanges, but is not optimized for that
use.
d. TLP is distinct from the Chatham House Rule (when a meeting, or part thereof, is
held under the Chatham House Rule, participants are free to use the information
received, but neither the identity nor the affiliation of the speaker(s), nor that of any
other participant, may be revealed.), but may be used in conjunction if it is deemed
appropriate by participants in an information exchange.
e. The source is responsible for ensuring that recipients of TLP information
understand and can follow TLP sharing guidance.
+
f. If a recipient needs to share the information more widely than indicated by the
original TLP designation, they must obtain explicit permission from the original source.
2. Usage
a. How to use TLP in email
TLP-designated email correspondence should indicate the TLP color of the information
in the Subject line and in the body of the email, prior to the designated information itself.
The TLP color must be in capital letters: TLP:RED, TLP:AMBER, TLP:GREEN, or
TLP:WHITE.
a. How to use TLP in documents
TLP-designated documents should indicate the TLP color of the information in the
header and footer of each page. To avoid confusion with existing control marking
schemes, it is advisable to right-justify TLP designations. The TLP color should appear
in capital letters and in 12 point type or greater.
RGB:
TLP:RED : R=255, G=0, B=51, background: R=0, G=0, B=0
TLP:AMBER : R=255, G=192, B=0, background: R=0, G=0, B=0TLP:RED
TLP:GREEN : R=51, G=255, B=0, background: R=0, G=0, B=0
TLP:WHITE : R=255, G=255, B=255, background: R=0, G=0, B=0TLP:AMBER
CMYK: TLP:GREEN
TLP:RED : C=0, M=100, Y=79, K=0, background: C=0, M=0, Y=0, K=100
TLP:AMBER : C=0, M=25, Y=100, K=0, background: C=0, M=0, Y=0, K=100
TLP:GREEN : C=79, M=0, Y=100, K=0, background: C=0, M=0, Y=0,
K=100TLP:WHITE
3.
TLP:WHITE : C=0, M=0, Y=0, K=0, background: C=0, M=0, Y=0, K=100TLP definitions
a. TLP:RED = Not for disclosure, restricted to participants only.
Sources may use TLP:RED when information cannot be effectively acted upon by
additional parties, and could lead to impacts on a party's privacy, reputation, or
operations if misused. Recipients may not share TLP:RED information with any parties
outside of the specific exchange, meeting, or conversation in which it was originally
disclosed. In the context of a meeting, for example, TLP:RED information is limited to
those present at the meeting. In most circumstances, TLP:RED should be exchanged
verbally or in person.
a. TLP:AMBER = Limited disclosure, restricted to participants’ organizations.
Sources may use TLP:AMBER when information requires support to be effectively
acted upon, yet carries risks to privacy, reputation, or operations if shared outside of the
+
organizations involved. Recipients may only share TLP:AMBER information with
members of their own organization, and with clients or customers who need to know the
information to protect themselves or prevent further harm. Sources are at liberty to
specify additional intended limits of the sharing: these must be adhered to.
b. TLP:GREEN = Limited disclosure, restricted to the community.
Sources may use TLP:GREEN when information is useful for the awareness of all
participating organizations as well as with peers within the broader community or sector.
Recipients may share TLP:GREEN information with peers and partner organizations
within their sector or community, but not via publicly accessible channels. Information in
this category can be circulated widely within a particular community. TLP:GREEN
information may not be released outside of the community.
c. TLP:WHITE = Disclosure is not limited.
Sources may use TLP:WHITE when information carries minimal or no foreseeable risk
of misuse, in accordance with applicable rules and procedures for public release.
Subject to standard copyright rules, TLP:WHITE information may be distributed without
restriction.
Notes:
1. This document uses “should” and “must” as defined by RFC-2119.
2. Comments or suggestions on this document can be sent to tlp-sig@first.org.
●
● .
Failed Paths:
1. User does not get verified claim for some reason.
2. Verified claims fails validation at supplier.
Accepted Risks:
1. The consumer is not over-21 and has buddy’s token to enter into computer.
2. Session hijacking mitigated with HTTPS and session cookies.
3. MitM attacks mitigated by hardware token bound to origin URL of verifier.
4. Note that the late binding token could be bound to supplier as well as needed.
5. The identity of the verifier/validator is discoverable by the supplier.
6. User makes choices on which attributes are trusted for sharing with the supplier.
Post Condition:
1. If validation accepted, and consumer completes payment, the restricted goods
are shipped to the consumer by the supplier.
Formatiert: Schriftartfarbe:
Benutzerdefinierte
Farbe(RGB(17;85;204))
Formatiert: Mit Gliederung + Ebene:
1 + Nummerierungsformatvorlage:
Aufzählungszeichen + Ausgerichtet an:
0,63 cm + Einzug bei: 1,27 cm
+
2. Note that at the end of the process of validating the user’s age, the state issued
license to sell alcoholic beverages will determine which path to use. The penalty
for the supplier using the wrong path is loss of the license to sell alcohol.
Examples:
1. Late binding token - FIDO U2F token, TEE TPM VSC, etc.
2. Client side code - javascript in a browser, native app, etc.
Dependencies::
1. Web Sites must be trusted before any user information is released.
2. Trust federations can be used to help users make informed decisions.
3. User consent and trust must begin with no user information transferred.
4. Standards exist to collect needed attributes where-ever they may be.
● Workflow Diagram:
● TK
Formatiert: Mit Gliederung + Ebene:
1 + Nummerierungsformatvorlage:
Aufzählungszeichen + Ausgerichtet an:
0,63 cm + Einzug bei: 1,27 cm
+
+
+ diff --git a/collections/_2018-W3C-Authentication-Identity-Workshop/W3C Strong Authentication and Identity Workshop Report.docx b/collections/_2018-W3C-Authentication-Identity-Workshop/W3C Strong Authentication and Identity Workshop Report.docx new file mode 100644 index 0000000000000000000000000000000000000000..339ccc283f5a99a6920ad3f24185ab9fb018a0a3 GIT binary patch literal 43258 zcma%hW0Ymhwrm+)wyVpwZQHhOyUVt1+qP}nc9*OARe$%KGw%EG&UpLJ&b`K3Idab# zGa_TIl#>JoK?Z<;fB=|A8ju0_Umy7Iv8%0v5v_@>t&_0>J&l{SRaMf4%?2HGaE{)M z-YHKVj?sYLB6+Y0CDZ64{#hwvU6CMLdDs!fU^T*xkE$dh*S+ZXtvP z-$avyI9H4qK=@f?1p%>dGp~uRxE_u&28ss11gzfJ=lQ}G&lnCEkJ_40ePZHt8WA)# zCBFja3Rt4+F($F|7cFXD;fq!p#=^YZh^v;JD+HSSV~`ViR{Rg;d3=+2#zmErYDjUX zY)7!IdC^_uEf%9Hbz=Uu0)tRIFIbJWc&v?u!z!j5Do-)*s!)w^pPg+f`H9%;&xF`~ zly%EVXbZ4qkBfF^*g>}R*-Fp-V>hK-_&Nf;yE?od}tSm?e!KlSE-RlXh>`*`j`Or8?s zOFP6&H3C|hY-prqEl16XH?gu|ve6HW4anwm)J>z%CRoB?SSECj4=m1=@%$t0N@dvH^ zRmrl0+ryd$vr#Qa&6LE6w^GP&TuA-&C&@!A^OO_oH&9dwiiL+~=R57*`A<1Xa0tqT z#!6@)0041t006oFCz25VjU*dqYXf5ka~spYSh~uXh+d~d4$jHF@gs0%KNLVD!%P(x zRcyjkR_62uNI*A;qK!M~y@l3xTCsVz@{UjE>o>-Omq;{sRzcw5>G96Yc^He(+To&K zPd7+|?*k9sYK}xb{sjS<107id=c>wGkVG~pC~rC)Z^)CeN` zMumB)|SRG)9kD>5Zl9>uUHp0~X10*7jfKVVTJtNxqbyz|KI#TKW zOJYAfjxSs&a*3dbcGwVccZqN&wxqH{sttvIoKAHuym(OQhX0m`z&^gB&T+|!Zd|z7 zSXc^U>SStPQ3Z-P{mjwCsclwjlrEW|S3F3o)<%o+cpLF|+qOFj5{OpJitw;Rf7*xlxMBYyXydUr{NQJu}nj1g9uAH%!RNdcJTzqp1p~!z)ZKa>XK{N70j17_;W; zI=i6x4z97w0!W62Zjl>43Xxbom#4V0>Gy?qX@)sVkW3jY!Y4Yq3QPV*nUaT9_^ClW zyB5m=rwVkmf<&E$h|@l>4~0OFuMh1oFUTv|(81EgPv8sD z#W~K7#w2sZn8T}>BXc$9r-cYAL&K6wL>;aCWJ~$bYPF^$^E7Dr>s^HfbM)1Uf^-Q& z0ehDY^-^mTo3w3rvPGvz=CRB98ITX5%tNI|J6{VziTl>~cMU?x>vd7PUt7>(L8r4{ zORwfG^)0F!R43^6^7IDmzlK1zzgl`X*4;1u8T|W}s;rjnwN4m&KJS z=MOUwOD0w+H0B~w_8V#E^VaYt@67gd#DcWOHwu|r%q?6`7^P~U{Ul|Cl=3RQ5u7=`7%2b^kQpv4N92VUG}m$o)F0{P-D`U3suDpg{u7sj;b$r z@D|G}57+1T3WQ)Jy@9{4w4*F_N{I~1+g!;lv`%gQMRHx_Zis|e5`()>}_ zssElm2)cOZQm;32M-|ZZ@xi*&q@nmFc(*{yviMgg_%AFv8h{sWkm}pG_!~S~IvB<> z)2IiSFuGEh&~Hjt{9~289XZhrC{0-P#k($Bpn)^u?G1M|g_UZ}13n6@ccO}yhtjy& z)vte(sN*yQ`GM>^rI`45tUocd;Io?AN4tUNn~3+3;n)PPi=5Y0#%$$d?>&A1QXGx<5# z{}+Y~ZLO`1ZJhqW(3QrN!v+hykAF9C@QOyh*ck7g&~)ol;Z$UThm|wK0v1TM&>&tf zAm7~mf@vS`T4Oqe6&%Mbc$}7A52!2J`!By8UpEQRH9r=uu{N|wQe40>rO6|Y>(8ba zw)Wf5I;CMHGDt^TsNr|J*NJxm0}5$=4MBMRbTVT{+B%j9ubo;D1&d({;IJslB1MZk z`I^tf^ARqrJR1>eU5CD_WjN9V#+qPxN7@yJa(oeTQw@x!dKqGc3KUa0T}&A7&@G80 zk-E*Ow#HLScs4L%>3+tA+#>I}T6%Ln7G94qX^M0oVVBS*wFRJoxbShgJf}?ap{h@+j3d~#gMa3TP zF361`yt?P6AGuW5c)7__&Ka@ZcxnPo)&N33LGo4!2UnDA%rYkL-g2F;@rE+1nWbID zEqo~I`wA0i;2@{;LYlv9&3Y`8Ogo%%e)D_M0|zYR07GE;O=v?B2@5%9kW~t)BGx!a z5)JvE-Is^DaXp({lN6(#Kp1plN%zaU)j^QXJrbm6eQEm}uYyk4dGS7z{LWF0u;J@O z+3rHw+UX5H?!Pu~Tc`=_qZ%(Q&e_+%3@ll~yKd~@0y5Iw9qU>P=Ge&I3AJqlS%^d9 zQWn87zq@e%>r1VsqDXLc~3i-X{m4*ESsu>_Q z#OcZP#xx!sOI1sck|e;Qg8@)UbrcqkakXe-+`k$y#m}*hK7jqe!DyLh^90CZ5HUc~ zbcDTZnQW)BTi4$D(i&2};}4eQ@Sc)|t`hz7&m==z>`47g!*dInAVK}(Az(Sf8t4*Q zp|K<;>p$bhS-B6>4dP|+D@+&1QFZCO0-~dda_vdVkea`JYzp;P#j2%MlUwNfe@kp# z`K|6Ej_N>mCrfX{W7+|h9%yk)*^-8S%}s7H2I$W8;Q#Q>_nWS-nTXhFpKJHnmRgkx z0PF(1xrgGDsw7~F9#d7*(N9V~L}kGf6RVBoMYI`3T-K7vOeF7c-4vH~fzTFqfeCkK06Y>oDn9 z+S(yCBLI;vHLq@Aov^yzAtz4(o_+_Z{s((F)E6mZ8Qj^>O%`nU%M(9!WRSTtd%ND( zUO-@Q=q1x#zk(&QU2Q0Km?jYQ&Um-KHA_PJW98DF3>0+W(Bha z{{;UG~BMMZb;?x&i{Yp3&&!95S8+0n#maAv0ZFo1`L(iCG0Zl;l_Vn> zv>M3~C~Hb6u{GJY)yc$|_nym;^%2O5J7elzGl?r>lHfsSDq+b?a}Z16XD4?6Qa6oj z#|a$ypZjuptZrpY-24^TSSFvEZ4dx}C&K?mj{n)_n%LSnDd`(n8ULfOiR#}93m+^y z%L(DtLJTS{4-prT&+nh_eeU2#&mJFYHxOHIf!yV3ZYi0SFQ>$9ws-r-gzaN!qvNLr zF*p%z6}fu%l$w9ACcd`wURd9Fd@ww3nGEx+;swj51vvk8QT$%2j`5l%i=Ne(2E&lws@d3>hh|Vh zVXZPTJ8Xyyt{w6iFsyaUjLAUX*R&1EF+H(U2aa0PG))LH-JRos(oEBoOUQ zsH!)iEaJUUhew|1?dQI*R8uHSHvy?|V&ac9$4a39CZyxTNT}IFPb^0`Y0iS%D|l|e$Rd6kf^x~cc`pFR010WrU8B=z zMEH3mvkl^(6)r3@G?({HfFX>3<&|)4dCH|nN6_;L{Ft={SS!kJ%kGOVD1NVHfZTHS-0L6MQ&lvGh__$dm7BjF>TA;+Yll}AsL1@GJAx>&NX+ipFJ5T zv5e>b9ZK1g9h6r zUFAgI!Ybm9q~A~MLx1FG2ZxWo3?#0vTdeQ??A-XldHF*4DE`OpV_n7ds9X{i?!6j( z1o6I6?Eco?XM_8fB4L`@R6njwr5*OqU{{^7_2_9y`4xD1xCV81kwv-(k@chgc@p}S zsLG-ATDh0PLATR)(aIhe^cyMHbgspPMsU||l&_d9LoJ}5W4krA%NQi|2DOJ$5*9dK z@w=iV+n-kyB@+@&j1hhZey*S+wts_AR+3!Y{{0upz60_9ws&y<4uYeTyOr@jTY@E3 zYuRtme}TTkDR&FbKN>3w^Ft4^gw;W=!nG3F81AhmUo|G`@^XeH92Y5*iP62xZfD)J zJvf@ad$`FSqPir_r3@Lr7#m$%9+&oGTGWRbXCuj#k$O0~47}nBgJXB+{ zj-(!anth-?8lx-C26+t7!ch7}ELO`PuQn0vkwxL1@(SZYk5jvYA4f2r65C=+4 zrYmN~_H?!f=Jza9N`!HT7D5k@ zL-oTB;8S}E%%{w?B+Fpe_-%0lrVyx4j8~Sf)LmXLSTjchM{lQ;SG67dq+Oe+dd0&7 zW_#B9lKNweF}+b>SpBoe zagVd$G>6UT8s{wMw&cx=KJ1X+=j7w)r5wvR7Q?5{H& zj*>r=S*?H{_>VjWMJ3_Oow4S;sVnADD=R%G39$7fwgeaWFiNDlMSB6{Sg)e?%a~`N z)1u>6xh?(EY_`fSsWV0`%Zu8y8m@{l9LLr2Gi{bLa+z@DQ5=`i6Y6{@v0i`PCIaqy zOfzix3cx@7F{L(8R3k5S?Smj*LD>lo*1P9aW;mzDV^6TS1@8>OsF(Io02RZDLslR< z!{Pc{e-CatET9xUWpMog|69W1v3?c7-`A#imf4rfQt)cVZjr~6j8t*HIjn?#I zluPd1dgX?(Na~9PUDG!y^7;g}EGMnHjxJNzW*L4WB771^Oc3IUp0__*eM(a*S-P5z zIHuQyHAXvVc;w@8*cwbOge7QTELeavg7eZ{}OTY@=l%Nq7?GI#S z4Pw>Bk}xAQK=@!oU?_m<9@&u=-ZMnCa3c&W-SNP+re8B%{N6%avmTVCRlvY8X<3DB zBNZk9`$5Z&902&N_C(qvuzk{Y9A8j5_7=t&4>}8mKum~B`nuIWvJK;deZ-2f^BeJi zZgeJN@Yy|`_6#JL5PC9zMBuFs8CMdK&BMrt>Uy^bq%Q?M!=~CFlI}YU8JoNPp_(qbVM7PDCC!cp>W#mIg!RrFnE=j@|KQ^W< zh&5l~h!q0YF@(=8W%6duObSZ>DdZXPMAP-29Y+FlI*`eIc9iA3W$?&K$dILDqJIwQ)-j#BySL8&W)$Ew{g^^EB_eJpoD`5;Duk_Dr3EJ<=9<;SQLR2sB+s6yR zoS0R=;$IrK6J?p4t7bokmFAIp*w$yG!eooS9E*zq11v|7v%RL3dvz{%;dDDca=~+l z3fU=Si9fc;X>OqG!|=R|`SA9DWI=3OrE0ZlCs*JaUr^`ZO+IyNzzNK+W1fU&3*Ax; z7bdSBHgH70KH%=Fztm@A9=c+iwEoERf9bp}bFR_8taPS=5-wJ{1*TthY4c}PZFQC9 z#K;-0K`^t}2Wp_i$VpzWV5w&REHq4tk#qdM%xWLFjuJDgESCeKLuz8K6e(x92GR6= zGsh0Azzb>Hn6Fjy6x^6JZ5pqN$MX&P^aNjXO_w~U*;UA^U2_VI=@alRAkjyTIg`e+Apuiw)bOfS;aQLDb_D= zs^izIH9zrLUiH^6SJu5Tl?q~MGp`OvSr$LZ^jRv_y%521g*rU6DqMC&1tGzC=_Lq_ zaqcR9q#xe)`v-u`#ApIKB!mbFGgPPw#{M7+KQgL|={J??ES>Squ?x=M2z9FebUE&# z(c=T-&iU=o>GtSSA%gx)!fPoWhR_iQ<7y{TfJ@=Jd)DDP+W_!`RPU58Sh(xN#_oYh zNf=<_^?Or<9e}$=Sd2%MOCU)Qx1OI5KfriU2t&;jk{n{mN(i?;ZL-c5A9^B62*)Wa z%4bo~r(22REXwwp-|o;Q<@Vy(wCRG8ytQ$M?4I&qiHN#P>e!c=xA*L$f}H#U`n9Gj zCE&CA=ACoQWs+oy3-vA)FQOgQj0MBI4m9{Ai14a;m~UC&bi;Wz9fSL^T1{59M2}N% zN{pxS+p)!<%CRS@_+YNq`6{TREqz|SxY#LM{6Z_7{G<`?lMt+sG#85?X*HCfhFTzQ zP<8F6V-jtrB7C&$CvB0ftvNg$JN4nU3u%V@jLaAFzN$HXLEDo;_l?Y%`z?M)1Ss$V zC0u0wC((OGPvqf197`7f%Ad0#eoNMy)eo&i(cD%$ksO#nkh#s37;uTP*fSJeo)SQ8 zfOZP09eeH|AeK?n9e|S~aBp?*JEJcjehd&FTcJCiwGzju7H^hA`E4q^<&#`WYW>`k z9FId?(L-Iu`x@5tXjHUK`#*vDEfwriIc0PSf|%}vfYzUu_eEJuHH*qUyqCOHJP%vz zYd?GbXcmC|`S`RYMJUDfInV3A<2oM%#*}@RZMX61>CJT6!S&_w5j-A76+ZP09Ko$K z+nS&BRZD3Y-O-Y8dVHkYs^le>x!|?cQx_x-Bf&l4?K+K46C#M%hPO3>OB z!cQc}^wlZgqcOmWc7zN#h#7kzY{yYAlF(p=e=r&cL30AqRhGboy643%rvte`K!KG*{m?J3IJ_Co`zYrQ$&U z_wP*m=R^I2v!x=|yP8zA%}Q7}%>{Z-D!2(LgC3Dum2)rA%-A0KF>tL8P0#om%vx|WpOq&q`Gh;@?i973}sghr7qgvP&<5t)Ji9y`Ljj@kI?J}|8Sk5A8OLcL>z z){jn{jAxPp8uuH3JUp5klfNIQZ&FSK@=Vi!6vLL+R6KJOs^Z9BwiB}EHr?b7(_nzs z=m4(nH#=o7ZuTH6OVjYgSL9@GPhz}mU89KZ=-RA|#EH(VDtlpfP{Coh=n_;&i>X|M46i?gE-&D zud2XuNo;5AWe;K_J!D%4f5`##3=L9!1hMHc-TFRUCj23(dr9Af#>s28WcZ{8)Y1{! z+ttIibEXZT`i|UidN^9!g!B>x*yPA%jUwEuldTerFtYGZ(EG9v%x8KR)}u?RP9i%< zWuXdWK8u<6#V<%)xU7H6DLgcC4=i|;CANwpBG$8#Un2?v9QpeR3npW8STu(h*w8Xl z5{49*SW@^zrz?w2aj3{ObQKqvprp+fXL)BgYT9!dxA(1&|1c}09|A4$zVnM zRqd~?OZJYx>_V)jeCN#ZZKe!g3?tWQ` zDy27f<%mwN!WA)Dtn3O*^VSo5lgcRWxZ6gSU=f5C9bHy>L5=9`CN!Gi8->Nj*POv{ z-HEN+$}n>qFh_o$HdOze%AFnW%tXu?jhs+-2+2v5Ll6_EYlwg#G3|c(kxI#a`gC8< zV8>?CT)cmhs_r~lX$i{c=$@REHts*X{ksUA{!i{+>Ni4+Dw<`ZYYg2`G6T8!ekslK zm1y945+LF~kCG>dPjU^7OrlU}j{Ohd2M`*WQFujX%L&bDs_@LFom5cxv6fwx;hWo( zqUs3EDnjDZEo38*iQtO@KYetowSIZcI*E-xxt`(?Fv9h=3PMSG6iOX92-8 zRkKKz*g~+TfwI`ny<=ttm0Ff zM!`AeqNi2_4EB6S`c>@xu8j4KW9_K^CaA9VTy3=ug=%srU3sW~-^G`1I|Eu%=Ms^z z0=Gdlw{RMWjShuz+Bn_Jw}>UKtc=jGf^GUKzK%hKjp2LwEou<3*chH*3{S&xb^nln zA=Tq>pWCf*=ZX_aUHQmmol)g?=lIiht8Ui=d@_bh{xP0-UF-?LhI^OFZhL$Q+u5^B z9fKX4`R_kjtYolQuH>}%r=SB8X<|qW6r1BhzH3iTTzs*=ShpQ?HH;j7#mb{({B6?nm2d^@CRR zNn!^nMg-Qt8yU*>YKXoLMyl3d>A;w9V3Z{o3a(#`KJ))Q=LjjgZz04}i~qa$&?=qm zxYKzO?Pty=|#DD!mzB?X2~x#(Ory1ZNVj1k2< z+-+-*TMLh=>#D4bM2b%ORvv2-O3!LEhD*3F zX|E;VKI6FY9u2-99mWdiIc4T@Vh@}m_7!O&{9`WTjrp{L#$rcDY558W)Q`5YBgUDq z-9EWPEuq1))V|W)jS0s|?dQ)S-dvM;I2~&slQyoEWBO+yKWSiGtLhqd@w2pAN(XniMFwPnD-lZPKpjiA0b|t} zCJzf@7}6cXQzqv!2D&21-Hwe*?NxmAyzQKGGk1xc?!oGmz2K`fD1Ps_}XFU zYO@ZmT%t2M^UiYD#e(`6%{$?|mFwlUm3c?MjL@C~*dN(M)n;meeLDOOkPO2s&R8g< zX+JG3WM21=(DIq9S}%nL0JT=LJE)#aN;*;JP3P4Bgr(}^Xd6)&#&$-%y2p6Xn*za) zd0u8kb=J`&!fxZxECr7UYe0`s4$rn+wLdoss<&Uu58nNr6ywSb0>M7gUx(1W0i0+9 zZCZ44whH01TjJke>>+$T3Fr#8OK+Sl-aDq=uD|+hN)}cv(>15F7R|447B!+gDz>(5 zubrP<(J~jfN?R|sP!dizCK?hG zrWk$C7gbA;`0is6G1VW1`hcSl2g=khpA8P>)e4E_vJH|%(h_mmXOfmG_h5YkWUSy@ z*o}s;&70U>6w@~!JT?rfoM{_aoM}1F(ztzh&v2T~^PjDF`2*CCuvpoESRAleRztxv zR-;HsD9M}nrcz}9#eM@nLQt0UhN=gCXx8m3h36IK!M2`A(1ZEu-xHqd)ne0U{y4}r zCC)XS;g6}Bb+l7+rHC8|KCji^(GRFvwd(_t4U{U`1QfnY&5?Lh)`<%E0gf^Qi~augf$VaR}|;K zpQx^m1da{MRt^}Q4GgRK>mXF*(3yg;IB`J-d$y8o7Mne{4#f->mQ%*lepL>KrImqT z*SI#SArTf#v80SGRoyz(yu%-7xnHWlXVtDe9602> zw@nx7aRqaqWo9*R27Flw~`;Ub}=M-f%ka>9=wdDy;;M)Swq`z=1Nhl zSq&|>RN#;weSJ$8-_PnuiqPUPuo;ztVX(AlgiuZ#kvybJo2beRtQ&XF*@<7lVwZz} ztKRl&*rh&eO}fln{a>b_FkxE~3kmAXzYaT7350ZMY4r3&){U?3BPuw>5#d`)7E1tg zb`ZYOmdeJBmr*QhRYYQ1JBez{>2l|${DrF==IqCwm&2z`$45CivgFPNMir*vCZ?K+hq zBd{06yQgeo$YXb@TYD_nlXor)NEhst!?4?xB4TU(sA<}@^TGjVVt8K&1Dvb7BTzn! zB!ckrwlip??aElKh645=4S>n{Jc&lQSJs;d6ovPa87y z$CL=9ZS9Q)#ikqz)y)>YbEK9*n3PLCJJUT>?N;Hv*zkrd*kku9LDA8$ZfN+K8=Mi8 z9I#oH{=m|@?`m45Td+@;8L_8pn5R2XxTy+CE19*|qDlcywE!G0y3vH9lRg>w#w;;Q zYowQD-5z5^kkTQN8M{QRp`02Kp>2_v;iBUYXD~@GwxD7CaPHK731+njavI4Y{3%TQ zsK2P5Z_Ioi))x#~t-T1hSBrqLd0-ELMj;qDR@ryECrT385VmVu(>k+qVWzLtKGB@+ z*sINxu(DI8svH7~&66x1wUyd0cHkFi9`mAhq)mz!mUw3cE0Z85tV90PtFtU{kauK8 zs6=V62fM8;=oxXi!Q1T#W_86Eek(wQ~>}@tVta zN}7nBIBrx6<`KpvG^ZjE2;0Y}vGtIJx8jH@Rou@))P=EVMV7XdKOnka5E>K40&9~a z2w|uQWT07F&`31rWcB|`A$`VX-}yz0AI@!x#hJ&cA1yhg1`UgO(cYVarNP$v5Nox2 zO@8VJ)f-IAtmE6FJ8MJ*XQqT@rtx0TC_QThfe3+7HVBX$Xhg;G_$8Jq2o?gpgg0

u!uPhT);b$4E)Y6wj6$5W{2oOT{GEFL!BhnSz;*!VKgU`gns8F~rinu|s_a5@Tj z`joVZs}C$I_*H5^h9*ew6#u`5LVIHYuA5H_|LB0Wb-;~pg3tEpFx*n{jAHVOQ@e0< z>PY{$kj%*yun(;xz=p_Qgve)TV)XrIhF`tHmmOoBCJAdx;I+%fE`E0`+Gw^1wRr?q zc95UnOk0MG`=BTetZF@qAIu!OH~"E_Cse~N>D>UbHZ7S{r{R-{}}3!6nL5avBY zGq~5oiVZP5G6<-Qm#E8O`N2Hyx7RQA8B&^yHGDB=i2ZOfwFo@k1wYxcwcE>%->F^A z3x?S9N?}aZ-TqBtj&`fpY~075b@&*scJqGVcFTN!RJ9I4BPAZhLhxcl;8hv=G(gz9 zqxHe|VCT8fwXUl9wNF-&;vm{YW%Q#5Cl$RWGwTn?#DoF%&neWP@J=4%NeE?l?n8q& zho{`0wdcE<<{eq~1;N_y)jbk4+7ceVj!6_WX}Lbsm3VZc%0d;>)jnoyWG zYkGX!kiKpy%1dQ5ux2ViW?IwlRqi*ao~+@`G`GSi}pNk(ITCXy}LcM1^1W9NwyiVz$NZL5MsCiIQcF;)3w)!D*B?G+tlDmO>W- zJCg~-OCPO~f2K@YR=sp4S&8`^e-X6Vqau$usDvH0KI&TP7l#2RP5bZH=22L!ZboWf z)a^Bc7G;zpTyyTp6Bjb3vyGNQFlhPLHO1cPL=w!pmHn(Oi~3O`$3CMMJPu2xof!vbX8&IECvh@O3VTG|KKdYDt_m~*%x3LOiUby`ydNwjz=E0uTQpo! zWLqN6U=&ielS#ZaG*l2O1T`sF*wyhtzDhI#3iVadVHn7H;1KC*{!9rCoNWmxdLpd} z)lO@?av)fuuCHkFn~S!7889FcIDk4~iztO5(6~P>CpwS&WlUCZq-oz*HbMDJ1o?1S zl_GwtMrG4#t};Lz1=`WsY#xEr>gJ+a30Uht^>;+B*|FG?CENQCImFLa4F$7u?T1wq zoaN>bn5}LO-hp2Lyp;S@qcd@Y?3z8z8s{jzuTGUzikw+w(sM7^p+5&UU^+f@1xa8f zqqI>(1u>{sTYeMJ3Rcp|CZ}Mm^cXPCXK?bb`Du1XosX~At6Ot~#z)+g1ENa!?G3Bm z*_%`U=baC)*JyGzkMGBqZ58In!*fs8ew~?oQ?oQu**2?ixq0xFP2=XPjyR@l4NX^= z?@;G1NlIaWalDgW5D{|})hFg&f2CPqmavauJRIAVAnOy+1ASK(SVU!ZQp|^ZQENMw zm61IfVm3S`!rY&JE@3ivQlL|p{l2!4&e82V-V)cvDOl1Xp<#Yfs6yo`jqHoYmEN$bW62v}W;990(xeFqX@N+H*V2C_$;SdMAa88&r^^RF($Z-gooq z+0lQol-5w}l@>*@aG4<7X^;z^SRB}Az{^2_Djm{2j5$eH9U`a(%O$?Z)|ohuPlGIM zH86JxO!W_jI6kmnqCNdc%P6l_k-#UpexDvE!Y%N@z$iAQT6mj=v}OB8Q}-txj6b=! zeJFF&Edvg|A*LO!xPtUXvtHAKI&>n4`!ruTyxDwWqAq_uzHDNq4T`M5a-b3f8w%5k zAPsA8xcse7875>JYw#@{teTpc^V=h@&mXv43&K6pZ#4P-YAy;R_-o(&MkK&o*Zf5l zd?O0$YI^W(f!lj`zkuwfHX~;775ERc==4LR;{09(4`bTVcFE}o2+$ebekjmdP0J6T z0tyQFxo|D_s!17Sq}zvf7R84Fis)Mon5kmL&>%7Rlr23N?n5rZj)>5)MDGfr z?|Bq>yAl|OE1k+nHFaq1YkXMM;BfC!{QHm8T61DUT#EfVIJYkdl%21Ind?neQgU5e zY&s|qD__SkIBs1|a$5werG;zC?-g!O%Q>P=?K1J!)iuBIT1~(o^sg?ZGf3^I@%ppt zICdx^f;G3)Ov!Jk_jm>4yYla->rmcM0JmH0j^$CQYYmD=oMDkeUz##O{ne(C0=bNV zX*YN`Uz3)8$GJR)2pD26N&Vil@_xnmxN-DJT7@&XUQJ$O!ablJDo>4O5mK#~VaQvs zI)0p{g^u++81z9IkPbn0Kk*CV=C?uo^?f%0u^4fN_UqKlO+&w^_19hfMu<7s4agG# z6Oz4&x)sDMpl7 z39f`wFl!uK&aR#c!=mK^bPa&zK%9FB)08_TEYB&v&?-k@t2e9Evwu#TnB$qVL&1#_K3Tk-=HQ>rI?2d%-`y2x7 z+_?@Alb!56PeU=kN!hK?q+L;F?RO`yVQhdfW}GY{bIc$Dl>%oiu+hHnR2fUeL|Ih{ z>!m>nddGhnKFK*jb3RB&ChfNnxb`oXK6#~yAK<|o_|YYCB;g3d_43lt`pUnc2-SWG z5XF2|X7hf)MIbUTc@q}O_}5xypE92$KNaZpg#!Ev5v#i=tCuAe<^ELT%ek%!WkC8B z9D!NMU7Bk=0nIc`#eN)!AglpZ0nLL*v-1?lbYt81Xo`BaNEzpU>Skk6D_Kk z2U4|yCI-}b3wY8j03^qG*o?YLTYz{?d#_WQpQ%7}I}>JEXkYZPW@zJ#6C6-R_F9BG8rM^)84co@9$j#_D;T&*`~Ww z=%ooVkGB~sFhp5!R_ZK)OR?gQO{J}KMzAPQ8e7v?47Hi`tm(c_yj^f=HM~<6xzajM z*&HxAT(1cz9p~fvGUub)nwT7aa$LOokKmU*)HIvA%`Z#85IU$23>ZF1gZ+r%AQ zzoNQ3Iy{a6JhHk5*JuHhS4q@2UeH7Gi?nF%hNR{NW=W=}<{B}aE!4u5Yx70DqmrXV z3%M^vS{%F!Z`HwOE^ofP;)!o4qePsUdy8N=c{M4bXjN+q__ z@IOC-oQ26>#T`5rrS?J|$uqftc}#deH~`UVbMH_o22HO{!J1Aac{}pr)i=81gR}JLO67~Zx zIR%F}%8#iHu)zZ6&bGWUvMc1Y0;I*N|IZ zDg+G~a*-oa#Gu$N)c=R)qGFy#*nXk9Mf9+QWmzk~STLuR`3L&4>6Eg`(i+JMNc(R}s99SgL zruu42Dz8sk$tMOuo+5{Ga|{Sa8h$|Xr!!ePQ??DyWmTUD6Etc#BZx>0jqOcG1IX|D zP#ai`Fzz=VBu@xHTsyVXBKj{$kgrgx{f_o8y5c0Nakif<69Z%?VWe9lFq9dq$>Ck3 zd*zOd3d57G$5d}vxF<9I^i=UZAEsh-M=4f+Vc4{l1lP&nOuPNr`O`^cw29e35;zq$ z=c#RQyx99(+XlfU3L$S`W9Bx{_L`3yZpvJO)|1K8zZ&s}WJai8DcG^IRbambl#bdG zN(UTh;F83R?xlyq=lA$#lCmey$zGxbJ$0Juw~ zP+1Jr+qT^E_yTH|<&aW*z*l)Lj9=Mkh59*)c%+2kkg6P6g>sby!ylE2M)YA8hlEbZ zG5k`_%MmOfzT(8PUf0I<%08hP?__ChvbS$k1<9RR@5uI0qR+N z@ql~^Xa8hzdLL)SaSDT%PC74|;tl~YNpCW>^*8=xN-VJo5p|bgw4>!PA_25hb9!;X z-B)wE%n{>N#(*kZCmbAE%t)^lo;ojy2bm~ z(FI$TV*}SSfmY4m0;%?yB<>}1Gr)_r_6nMq7_&o7P^jEWj}KNYYw5v$>2^sbkj4;2 z*|~t3Aw8)_B7%+(>FnhT052SlNNB7u6O0uAF`alz<;mASeErbOk6bRX+gD2^8|nSH_KQR1J!7)){#cBT#I z$x3-^i^$)AUQHyq7IJ}*X+JibjwD>3Q$Qp43^?56UfoL^lUu=WvLCHpWs zDG9UJ4x{C}=n9MjjvMEzT|a@aNv*qU$9^k~6H73#AXMWlSrY+yX^#ogYLv9XY~8+$ zsh<15;jImb?%Tqc_wdrEPg$W1)^~;khZ1TFUdXj~e?Qb?BNQdxu|STRQk0>~a=H5H zP_wL4-%OQAgcZCvznZ`(OC}sm7JK6*-M3}pwp$PdIfvFQQ(r^(^EW|XU1oeJLxpN& zUJ|;imBZy!vo}Y^tVFH19mIgeaW{KyR}Eid&Qe63ClZV;pKtVM+MUT6Y#j_|bLduu zGt(xnX!w}geIQP}EPC9hWh9G(!?YllG{;EtwfNumgTH6}LTEfbDrKKR3SZn2GPzfS zU~!}b&S?m-!YEqYIE0%Uq74F0OI{U^x)rC0quzIuIrEHKJ0TF(Is0|8K0&#AGA~o? z5z7cGB@Rw>YhfR^y?sFl>zQ=8`)Ak~)rMAzC;50@ej9J3wD%2WHQbFI3?F2$GEoGC zJmSE)cN_`2PbwxFY;haXl~~EVtiuq|3YU|HO7X@iP6}U6uA*W?qyc_8Uaof>yV?Ej z$J$mc6{*H3pDfT6c*J6_F+!h!IkUl0xRdG2po#unb{6B4ZviExSOOLNbEu5?!Jkz! ziJhlWUj5pkl-xR3Z*sk-pG@~nm2FP6Gao4w-1qN?YG@~XbZ7i%B@B*7xB~zYv7U#G zQufx^d$uK)y!e_J|3188Pv0*|S|UBkR`gQXzlf1Jv#?@q-jYTa;^G@uPjhGA})CJzF1Dbc=P;PCzovd@(>fs z0vtMo5I{^QXBAgo;ckO+mlQ#5@ywVEdqnZ*wqM_#^M(jOnyEj2ovC6AIlR(?xbYbA zw3lUg%I1Vb+<--;3g4CdDRHRlXG5p$qf(lhG9rW?asw)KYL4|U3&Y6%yN32c@Q?JJ z&;a}Wx!T^aq9X3}q?9MVOfv(XOumFV)l1meqlD}uqxs=qO^dSL-+e`vqC=`KaoUMg zxx|HMQzU3^K)S5QYHPl;oor?a5TE0auiuTLZ%XHWcS5prg=CfBi8_O7IxEOUOMus< z*(6e;4!?r)Ng^?bg)XoFm|ij~BQuJI%fR0gRV(hrY%mO|66r)?E zXab+=quVGlOeRI3A;gPkA--}Yv!C4I0igdNC3AK%J(cU#W{IxUYgYW)2FXTfRl36h zu>L=My+fF00h4Z9mA0))^Gn;dZQC|0ZQHhO+qP|+r~2>P_c@c(lRe*)h#e8@UE2j$ zk)*BIFMa0@1R^KInIWzBc54ixEp_lqu5k$Jw~kQzB`LT;n0*P<*A9?t2IQ&GO-cTX zeQNrBuPOzA2qSM}rLXsNgq(pBBt0ts>XHGF5U-(*c{e5aHC%;C?P_P~@h6@UrPxM2 zRVLb`Kd|K6!OPo60yXnv;;t>O>_>exQBw;F(PMcY+`fYs<3>7|nwG|EYN}|BU7EAr z5l#vtVH-4WRZL3SdJtIBd-9}quoGQA_~;LP?PJz$U9K`xgk-X90NunwFA*ue5)}jo zy^^m0eDF9}zMXCE$?xlGN0|o>h_z{MA00*lVNqojo@}w>I}AZ7XHd{d$yxkmX32L*`Lv*IHVpXg$d`1+@gAnSYIS#mERiFTuIHB?=aGKC zLDAgbj||`#dVe|WwnVshqpEn!SupS^iQY}@`P$|hBPWKlfrKoKK1W(fMkm2FX+mm3 z47w}Rn|Fl>Rq<031uQC0;FDhq1zm~s7F!AJ>!Gx#;j-6Vfsz^<2f7a!1A{< zM$rLt?)JoYX1N7IhLEgFX+CzoYRq82JC4T>i_Ti*DeO*!-6pQCCdVV?YfC4Ld`!9q zARC25<4iOeWYU1V!8`^M!K9sq6}VOaBvz4}Q+WdMz0hO<6qtny=UZ zTG^2;NA5me*O{xrS69+qTK}yj$|9v+8*`kZG#WT_Xo6E7vU#7o8t^-1-x=&z#!~Hc zspUqZw92`5(54AiSKVwqql3?yW`>XZt4I+w3iUxTZD}9|AlmC)JjVuR50i$wlVN?d zy*#Hc+NeIs`YxUCWl0_DE&5p6Imrl9qm5>ae^?9e^wxYgVMHFoJhqH!NDkbz3qkHp4 zv&Fb$xlzy54zKA2B(e@O662=k_@Ocq=X3bEsnm=J+0oNWsQM3uwAMo)`zy5XD{LE& z#dNKTUVa@ihQg{{u1FSp{|ezBKN|v{&o^4`EaJy|)5)ul1kH)%+`u*)Z)%fz*pLVEZdg#z9z@Z5<-Rdit{WWG^0KuWFi-r-T?z=f zt(ebV2CYA^>y8bx4bf)GhC4a?A5u-nDr7?=ojdJE0T4-I6%Kow%=*_zd#VW?7gok2C5AZO+a(sX zjY(4t|IdBUIv%vvzpa;qNMxDk)%T)KmEPS0BI!#o3ah)2C0nuYJ~aK#`rl2n!A(Z~kd^b#0?`VwmLb*6o_CHcQy z1v!!&J5!r=EB8RBO-_p5EUBLt8DtkNNbsga*H-<^KA)6xd6TUL^J87+c}m+AR(x9) z-7Jbc(FyWz>0FGD3{%Gp1sHB*xlQH`pC`KI3*(v%Pi2(Sei*$jOA&d%rVzYQm5;l} z{RY*P%{{tb$QkQ#*x2t&Mkb@)_vj{q*)!VEwGSYf*{=Ad@T5jD$q`4cF}s;l-&TpB z_k@|+^g!M1wt>&w0_a;8?@b+}`y^{)9u$62@P#*;W$jSf_od{nhrR{U<-Ab)UWR5E zSb8qVgtacamKH9KehKV}2QZeVU{!x`b3+ANw2S`v$s?7cvRbQU9NbRJR!>+S?epm!zh%$;ml43$rlqYvBSb9w98EM;wd zbNV!zu=&~;Y$AA*2ud4r)Zto)dN28@D$O(!O4=v?WwENC2QjikBlbM^OEz(#SgacH z921%Ak->y?n3BvnOJ6AHsRDt&oj@=A@+RoDgbWG|Mf-TYn(<1k6bFV(CDz6wMYIed zl7kf@GK7^jyi-Wh`L_AR@bqSx!VfhkMB! zc>4`(hQ3JJr}5bOd3O=Ot`r3jQ>soRTchrZ*c4V3JH@(2oVLN%qJmZs%kB}RHKl1C zUrJp7tn|=47-YJotux|d5E7q%JwL?I>g~l_!z1uyHAEQX&=5i+{8}^up{L_#Vi%p) zxbBz)hx=oulf$Ns!wsc%*_m|RnS`Zzm47m96BI`i+VyAU%fSXuG@tHl2VYi7BNBGV z)9N&HsT?3e!w(A94%3h1Z8&73^7NGbX{J(6tr2Vnrtb8&4Kbu#9;41g((G|_=;8gtOd20$*3#`x6Z`dyR zEB=dav4*KWJ@ydh&^!IWH{JGFAw-CrCI4WSg*+p`1SZWpv<;Yao>AyIuM;Y4 z`1#`dq*Vq(YiCW%_TtxQK5^ESXPedQ(|#JZv=<}0L$m=BO8pURw0^SYp=E|-vjZxC zbS8P(xrV4xu8{BQ&plrbH=_Bj;YK~wI^%;t1?xo+wN{&RNd}bIu`}XLU7v?)>wH@S z>!NmAk^*ynj6**W1_)J32!;nClgL6^;X$nH}ED>u&yRu(QZKFLoXrt@E82xt@&a{=JQi6TDt+7$qLNsSJbNI z`3Z1NAFPnx(s~s-H0d`55Hn$}Knuq(RNu<}cUs?j#)jeSoPT~*MN3>t4(;F@)#2lx zG7##nx-Eh4C#>#TKB30ov1&#~sHN&gwiZqNx%_r=Qm-)j4}Qim>i)(Xkq-06=Fm1) z%TYpHS!1g|X*1}hx{1ajxg62m*pU-+IJ!5rY!8a47Tr-!6>}~?t!lsK#%PI(O=Kpy zgpf#Tpu+|EG@kM;=0#^m)5(MX*n8ptG~TgI6R77e@-0T}b*1YknUs?dNol>YImf6UjW#8V>lbmj#f6Y zGSM?Trwr@pw$7NvzXaoT@G?N_wBS#*wCYcnyo=W@mUzZXG{oHftdQLdqZpY>A=x+k zfH}P>NFg`$m6SWxs+OfT92u?8q&_yec_)h3P0^r+#9q8umSl=<|Dk>^E;Vn>8bx;3 z+&jd|W7Def)?<;39slUPIU#VUiyjFl^i4qnl?pXk8v0XV1*D3QiL}Aj{*AG1FKqaK zC_$Z)1q(+~;oX%qZO-f+V^{f3VL;v^XM*~B-@HN*HMT_3HRcGs1-GO&MFt7IkqTWHYVA!y9mB)2LDxA1u*dA0EUHI9RpYU%^&ij*kBg@QvzzVpd7Z}W zlSPn(bZMcm<{%qU0ekoX!r@G5xH0e22@BMui85$~uR<1c^YMA+O4ffv!^iIz7lSWT zPJ;yN#>jtx)2IN}${t{8YtD~p;1b=YxOo-lp}B(C(za$XB{+E24cIe6%s=$aDUsMs z9F+@;m+aA;lV^InGm}CouNsU!DMjv0;}J=KDH5uO)eRAAOU)7PnqU^=vBC-#iRJQY zw+Hf1^GfP(6!XKa1!Uyf$ntF>1d}EStt9R~Okj?mPDXw2NWN$*P;}fHX`1bQzP`Ct z0L(#gnQHf#hWmmrI@-T}!dzkPoV9*1N`cqPX=*p2lKpmj(+0h`(259B6p~sPuRN;u^(8B3Y zp_5H>feVzAniiNcjky2a-Q_=YQG%|H7j|~+=H?Rc1uto7+Eevm29%RA<-*PTTSH`) zvMLc`ucVn>GR*CHDAM>_+P0MYgTr9av>wA^LF9qiv!B-74Nf}X&(p9ZV{%f@8XV6~ z&N+PdtpZHx&%=MmoF&IlSWCHn{fcJ=`Cm*0IR9fR_-|dq{~dPzkF8-z!&>oN1mzp_ z3m)#vq8?<{;v`>?Uz6j>f_nT>(Ig?0n3J?4Z7WL5*Lwym&aI1%c%H9k)QE^|CgCBo zMY~(8yKrodQEUk0rUj>Civ#F7!tbth$0Jos)3l1Hhyvb>knK^^QLbtt;!pRcpa8Rv z=nz0r)GV;VhiaMQBMsqbBv!#V0)}lHGDxaySQ0ZX@?Dk*Xx_XP z%?{@QVa70{hkZZ@lLk+;cS2$Jm1P=>K|L0DN5&*!4C0}$lDEZIZ(2)4kPl*|TNnX~ z6i(dRBAEH$@;LK&k;HrwP;zZnj>qw7`I54olQqKIzOZojR1~eOJAsp2Y%AnfTBE}x zCX;}sK2WoO(4)T6;>BA}RD7`6kcO`?i(iBZi4jFCeWg|+E_^GaxNFLoVGj((1bzD< zHDfBkQ>JDV)Ihm^%^b*C1jw6@iE6|+t*tdf3nd$p`W^S0TE5#60)$su9sbowa0#hs zX0l8TfJGxlX`AQ@d?Tjf0l+a%ghEJjo~-P~xpZt*AcK-g7m=5jC8zT9SK}Z-dL-xx6Oa5I}6Ou$orpmy- zWTFr9zkqy-k7wOZX8FrzTTPraKG$H2`B#%df~727bs7sGRHJU}AZxNar!~?^xt{aw zOY2sW4iVHllB8^2%~~9ib*z?Mf+rR^gc{gVB#rN)(Uq7@CMN?w^i({;N}7>0`UAw9 zvT8-3LE&bE*_QD;lwU1QLos2UWpUl*C2Ada;7nO&u7g>O zdCAIFu-q~yk&9)PoWCpfjIWrvm6^rErf-UZ(GzXbim#P*b!dT1jwYBu#|{FM_-{FX zQyJPtp|yIR;w>?()E{r(gmE#n9e9iy@f^Q7A2<@J_lCJ zV%-PZATMd6L|Fmc#qe=}Y_fR?H_%RJG2y9?5tc%UcH9MzW<0#Y@Mlj}V$7Bv)3j0uxDAWJlu9E7tm5sY@13D58|Ef%hibrBohLWm77fVvSnoBHGFB8f z+A0py9q7rf>X!Tk(~_JIp1Gm16|{a%`aHZLGQy2D6+fpx}D;|F){VZ~=cUZciq3c+Q(!H2rjehG= z8`5{3ya6qVKzWDoY?uDDDQl~UnS#55YYe1<$qVo|IcN^3D^H$E*oUKkWo(Q2|omjc~Amp;iG@|vSP$3 zL2TDz?H?e*GkR06> zvTPArF7rkLgrN3eeTj~%is^@eDuv_VPR0!HX2LYai%byih*)RE)h$fj*uA_`^HgAU zs<5&8kgqXUBXeS0ZthK|_c6%2VT2K-^o*?^rKKKC75zX*)L(9Ky#Mj|P@ByV*8O`A z%KueigZe*>!O6_n+L-n~&;JN-uhb=NH&}3b;8$JoootQQRL()1!&mDzs-&@rZ9?$O z!;)9!^7-b)y|C90{C*F#>xZDOT8HRs{zY3Y`e0h)u)>|KsqMi_rpTBskZysif@cx` z`n~}df4ff_2+i{*BtEj=aG+TR2pPnDFu|=aU-AD4Ob96Kt&T*F6k1D%Hda^qzV;b+ z77HLDf;`q~4OmktQK~mspY<^$qq_?jxUuXL_CpmD)_VVi_p=?m^r&h!5KSFM3%3Wc zvW*g1Br=PwZ(J^!^n~d)AXxy73Dc%cC{;94^PLg*Jrr_D8vegl3>d z={DPJu{Kh_Lc2kNs3>X1-0t&CaS8?GTa!H(rl*F)@pXJ&G!^g5ebN(p@#L|Ut$082 zYxSX5!SwgWWlQFCVhPxINJM7`bIWq&KJ#}J=%+==g1su$>oClYR&R?1)l`%R=uYO| zmhcxR_SUro=*{#k74++O(NdBLYR+E)k%KN!C#)F;1`?yeHD;nt(A#CE-zMam6V;hK zDiaRW{V%Pj!1&NKDoi34@v(@{zgC7K;XtK9cbWa0$ll_~(32I^#XS5;%dNdL^-4oA z504uD=<;~_M_==DxBpDc1%Qjb__D}p57_4_cD;T_^!)J-|Ms}wiU`q7yHgnX`Cc&X z`FbzHEOpv_sQL4A_jvbU%k%RP5(4%b+$)I7lZzO4O3Kd1$pth312ig^8D)TAP_Ae- z_;-+A#vJA}8;a^Q19`Ic_X>eB{5Ik&kW_EQfhTH^t029~;;&9T5!79@lgfdhx#Ej5 zz!vlY8yz&dA#O{+UAMT4D@}KoJy4sJG@yf^th8+k|BwxzUY^{0_yvMKcB`mye}(!S zlIBe;uLH%Ij=9~4FJxTGDM|z(B}|+@)OCne(^W2n5&1*9URPK^Sy^-gVX zw3I$NHM;Y!vYCQ|D`98&K#{)~c%c2_Ls%kdx~74G{0m1Toa1WCDseesP`)SWA?##Z z^yZ=G7J_J)yeU=)$1_nII7Rpzi>e5TTa&;%`{3^p$pP;WBBzvd719sVi`qsc8klVbw(v8%CG1qr+swpJ zCPQ=HxlQR{C$M4S6c-Fo4014%nLjdzvG0mKNlB(h#+pFMHX@b=_s?N)8>^ICt~Evn z#5b_|%prs2fj*7a&FP@`n~%yidlM|}r}vc|RoIzb)A~>m!(uIvC+JGX@uYQ&1{uFD zY#5&g-Z1pcNJ|#-=N!HTsW0DVOM|J#^`_do6Czl3p)wEQl{4*I6X)DFg`&Q|&kG)_(?Ro>u!io)MNlbwfMjncLo z^=n3~Yw4H8Hnspw@`?U=PfZVGd4!^H|M2}hAgI#ZQnG#h-=H1&*|4%VCt)7X4R|NA z@TkJ#-#ck3mnJEIp`Dzgj1<)q#+|q3w3jT%eh30sjVQLp(zZHZKt<_EX{Jn*t98ARaV-q&thgi6pn{L{ZZNJ(3e;al8^-qcjmF(_j z%)AM3g20fOOoux{w(6i0Zy?RJN%xegQi-n#l-F-g0d!sZ3deD$X&X=UJjs^6x>*1l z{%Wh`uDfs0SEl+y3LwFPfj8j6S1|O$c)QX<#XKm>`q$1Z3HJoMc6Uv-C0(li$g2*Mt$RPF4b&rJ%0chGjNd*r=~qeqNyhJSDD~^=$8K`qZ=g$ErKn zw}X>2j|5z3a36#b?${>S z_B#a~nx`LoD)|<}O1a&!;hr+QqQz$$C_+ zmGsa-t>rAqxhY&R?G3gfShraswm48jx!doO+f^r{$9q0s62!5fq}Nc{SA=W(nC~1~ zEPTCyY>dT$R!@Zx*lr*!7WAWT`!|GF9^dF_0}FrGGwT5^N!(ePu!?0|Q=5go@{)m8 zTC3nSCwF?KMO$gx8{re|!N?9BK|Pl~xWt37Z0yV!G&ww*5}5IPNwE4wMkEkzDs`S- z?-3ku0f6gr!w&5jG$q5e4{Cny%VBS z2+WM%Y*+6WrQORezdE`r-b6bprzswG7W-XA(9c%R9l6#H+zRVRH9Vg+KN5&5?Dz3< zrC}DjDJ)iGmMw33-A@m6PkJi*JBC(H(8xj8p`;mEU=~fw?ocn2YZxa6i>3v=9i`Q8 zQgu7;gmH!uee?2jr_=tuauiXvk@^iIEG|6|Jl@hXDB*wxI$a{i;}q1bf^l052V%1;@#{l4+yycK&Knoc|%fx`r-0?ZgFXmTO`_?Sm) zeg4V6@7>QkAKRUDKkO>n8U+*h*$YHR?C{|5^%ScGcbQjlpMwPbFb@{T>4h!QG?jbk zBuPH_`>9CQ{e)sAnL?ACkg7x#DRvH)^;P1gR1!hK`b-L_4I^p#EbdW8QR*>1Gw#irIM1 z41e9zygGn-GOf|r5Ka0#k!vyW~h_VDlJc_yQ)F2w8t`YMNTEO>{T&ExijW53F0fAANPC@QEWRqtkS0q4AIYkh7YC&7H zG@momvag~Nw}R1T=V=!#CS^iWxAuLVnUac!~6GA92AZwa5NAcEeSb zqstom2AjcgHd948JDI1A?VbKRc2kA~i4)fX0kNFR#Br(=j)MUNchB-O> znFHojP)c^Hm6400by54%e5!KzY5SLry1moOTjt?pgkNFr{L8Aw&oIR`Y4`n_^IS{4HC*@0^?l2wA+N4^bo(AMSkXjyhLC3@0c zO(?V%5hZCcN@P#?;_eC2hrQ?8Si;vIpVVX%;hBBpS2(lZ=kWe(q!h8Jz6fJOe|F23 zmO3gbJb54`1BTc}@s{9X?&rauN@VZ(p^xK%Z*e?bquTh?oC0#5?W0Oiz zl<|r8aPfd-pA?_j@@8ujZ1_Yzc_deBhDk|z@b?!lLa1@9zPdFo3BOo%o7@E0*xr`! zSa<5q96Zw{7yzkP8thYPCJRQ#&8|91jOX`PD?c|1SB_un3etv-Oy%|dc^A!8y;p{Bx}Z*jWo3OmP^cd z>Ul`Y_=pTeZuY^JXO?A)+D&O<=`5_5w%4z<9hSQvOpxDDz<+~riHQnF0;4qySxKn) z2CR)dH?2j&icEBeq(ojgW$1c1sLq7fKv3(-&q9i5!scQm5Y4p2B+u)Qtd{FBAL6q?vj6bwXR=-9VZu zua;J5DNV=D69d;hqEWm`)Lc$DNJMjs?rtOK*c5=p?C!HfT3fTNV_D3nnFO-&r%3C zcJn4245<*}>w3i)AWIpy$Pou2mzX)h=N?k>FryWUtXRTn%*Lnmft5iaSuaHZvC^I; zr=x?mWRKz>G9=vex!am?xztv0Fqbck+-qYOi1< zHQ4xW^r|cY43kCs1vd4=0s94I_n{bLpw#qv+ta%w=oK%EafSL;b~Ptc)iF+!+|F^E zil%W;SPo5qUS@YCXzSAwd{8hlze`{hIzOraMyLC3v1^ z!pNY$B?v_w=`M6m&`&e^B|7EOaiHCr7v8}d?oY@Vf8Tl;w2%qnaa&u`)PvWiPBL|P z$Fwu8mwADi>uv1Eh@KbQCd(OzZR$u5>{%n$}h`mqk+;M@0~tP>J?*u0<#8%p_-dPlrnB88VEc9R9l({X{WB*Y6zX6 zK)LTud-G$4G9{Bu#Fb}hCs8iOhBU_qy;I)&(es{yJ+e_Lqc#8tyHW7<)i4{dx%Y! zHGiv*@1fb|OWX~wKJCsv41wdrEAW;p zPW8@u!S>Wgu~YR9yu{Z@2+o%=j{SRe2e`qXAt2ii%ysT=d-tAEaH%ZtctIanoIx`D z_c9MBJQ%kyQ{ zl^u4UJ2%Y=D&-`Zb%DLk_x!XdWH6dZOqCiel?6F1ZMqH%gA1)W={ck%d`QW@n3DjU zN4wQAD|TeyUIWbFmx${1;Vk{dw#YMT^E1kOh(8b0XJb;H9&>cc2MFQ4Fxl_ebH^_3 zV$qNt8Q-8ti^`S>YWN65_T0lid6eoFBMRA?p4vT->{CMh{4eY#i-&6YvqhNoD=~n1 zAR4*l)`bl8x2t$;sk6QeAI$~pgL5LXa0}cZlOp;a!}D9w^GT(EvXd~sK^&04wJiw# z#n#rSB5kyW?S1&5r$ts?aaiv-$>u7rb6z7Ch}oKoqjZHr98r@V zQZn=*phuJ>CS%(}UEp`yz9O_LEkM!-ki?WAIqrvGaP7|S3OMpAKfPQ)y5GUw(fsiD z@%z{OkPWRPTQ--t>D#L(aZ6-Rgfp7WF92mWfDQKx!ID#kH)3ZhM26o4C^vH9=j<<( zhS)Dmcbr%y0u&Y(NugAyBp3ta>-%tvO8sG`zDL2Haq8O-5qhaNnWxX`lO=UfDYN0t z`Y>!i$IFB8_& zK}V=4s0YVn9}%;SFSu3KU(W)oXZ>V$U4fjFBq}7hA-AT4DrO@m9uRCXISHod;iF?y z84&8^{RNjB9eF|<)W^at|2{EU&S3&$yh0s`#c*B-8Tk$>0Sr+eHmuExOXb7IRz0AG zM+e&q1qyKA?~f}gpH_z{Yq<&oc6}V)g*>HL_ zqKLEAu_!hr-%zfn4?`^~?6xil!djxoHw7$4!4tO9sv({8Yj^7E8)ZJv%eT}XApkxD zcAdO2`**yRAlDNYSP2s6&()9R4=(3>f^}TPsn~C=fc%fUxziUhxH>#*)MYv0tQlIw z@MG>ep;?KdbfhpP=&KLg{(^u*YmRL_zv4&D<|`u5GF4=s7MdsH+UM(2@lO~ZTnS)k zbOY^=+@U=aqF;G**zJhcI=R7q*o~nBY_?HO%|V(KC2m zQ91mGTI9!edA#D_^3?&cRGwUIYgui#G6!(=hdeU|pX)?-s&#_0t4Zfb9i)qv<2)@C<8}it^6Z zV%?2lpCee+&QA6P(wT{AIOb}iu<`R0pVnpfQad-(er+)*ILpn;Q&vCQ; z^t0<@-P}2NE*OIlc>W+C5zhYL{S@i?Eh!7$z=8hnju!bhQdW!U&Z3F(5%$-RVHk~- za;(S;t|4Fn2I<4037t0c!%#24=txwR>Mtw1Qe|@tYN1djI0?_GJ#WXQj*sD+Ed_gSS%UC-vE%sFj zRj_4AkMSL>Yy&6SZH>N&@i>C=hU)vbN7Uv}u*pg&DXebw9^VPUEH%+)N zD>BLoXF)mCJs_YBjW@~%=v5y|@P?6dB&I3V;R2ke$$81oozZf{MdsDM@9k-=6Z zpIeu$^grlR^>X4)pyklhk3<#CCUZFHlzIXiJrQlixfEOT$`Y%14ThwIwN;X%lSLJi zC(dRZo3nH_p&ik!7&yWlI6G))uC$izngGf_tRBFaS1~@VvXJML-My;^_^dt*N1B#{ z_~szRgdTYXV(^EK(z=YCR6JQeE<=&4TN|>Hf++-;e zqBtVFN#COzjl$GOCgP0aGdy}-Eh%PYfItbQ?TqN=s-u9^BWJcJSxL4lMgk{e%`HJ`m&+xOG6c5mQ`{|I5wCDQhcAl=?jhmpp*Eh{7sHefA zR%%U!sl#d1So6ZQHs*;5k_3H@N*LdS^4%2nUd& zqX_*b1U}p~B;ku0+CT&-82(gRD`Tx@qf~~#*v-lp#6(m7Fy`XK*i`t zta&M2c_er8$#z#js!QCCN@3UP2MvKNZGd%J1sOd9X=g9qCB1Zsk=e@L*Qvs%6QSM9 zi}LFk%3@7Iy$=_Np)Djvh64|oIU)$J2DqJtLAvc$F>}#(gH}k9HQmJ>K*QY!Y=5Vv zd%ytTjEBLnfN2_Dw?U{LDi+URr>dc(N#_J-43-r-xp^zN=&ZUKi4fchoW?RTXn8ys zxul`cu2tRA{fA52?rid>t#Y3royY1ZuCLAHAmoKSf4H7tLGvicQslK#A*8tnE6Chi(F z<@o>+PSK54m|3bj4Yecflk+w=!TbvnZ(dsD6Eka#X+ZJy3QG?Skm|D6k!bm~Xn7nA zR@Q)B0Hp}eV=1WdX30W!nm1H?n=7i&G+JY=W(~bszst~@%;jlXiBmS{O<0yqO`BH? zFyJ)Xld%3Zr3h~!AHxaQ0kh1lwq47i;4DC7{*v&z>{<}#LUe=SHnP(HD{*5(u(Cz{ zxEGr)D|y$90%F1hv&A5kM4F=Mkj}O34r`5lr=Pb?@N&{NAI>=8knstum=S)&Zcd}D zBf_td)G)L|I({v_853D#YfKHtVKmTLl(8JbF0RNWby(HNDK?+kiaxTA9>*A zPEv02_BhAd6kvLI`zrC~=cATH)~8wnfvQ>GHQA9#Z1RcaChW#D>KUmjLK>)D*?>VI zs(wF!%or%4ux7R!%&`tYQl~b?9VseNH!ID{1mrkBEv+T$##mjO%77IYE(?}{SUh2VQ+cN3x-$5reN~POLelJJwN?brjzx~)_z&o9o7(v(yNgcD5?V_@ zuJF2|nKrax+57gVfvzk0TWb>&@-lPMW;k=Ob>Ywk#Iu#|bQp-YR-nkp3FHhcDVHL0 zIDv7eX-%Nk8YIK0(V6Zdx&I1RA9QD)&r{8)u^GXpW~j>@bzpB6?T$OR7_4`rrj6k8 zXBA4;Prn!XFwI@^6((u)Jr3~`@zZNS>(G{ArJmI{FeloFdmyT_>}|QduyBj9gi1*+ zZ}({Hn`%0V-W?x~esL_S*4L6bH&#vWw6kJB&*T~~G@^}PeBn;y@4+als78>gJXh!Z zGnTI_)t~O%ID-n>af`b9mu2}uB!DMwi;FEJ^#Z1&L)~|l#gsquEQk?|6;oPd7DrG+ zGQ!dBFX{5HSDr2g2MATO18O^GlrFjQOdolaL3b15lM*RkCYgal;N)U^<2xn2){QYw$ViK4UV*W}C z-J!GD$S_Innt+(5l4dO#oc_Y@>o(BB9hXqnU>re7TcE;Tv{qd7FJ~)qpZydcH#pLk z22J9RFG(y`Vj?$%jKl4uZUB?bHrMjFiMpRF;LXwu4Z?LuSkgj2Ic)sE{zL~q?;luI-Kn2XuNTF_DrRBoRBWGA)m)BCU}S>OUeS}r z>;U3??`tdjS~c4=_kyy(%>O23NdZSF&}l#f9l zqieG^ev??gmw>%`3mI~=U&C5;XbPtQ+7^#UlIiMp?yyf_X*L|O{ph5hd;9mAAhFZA z_D3o?9<&T>jklsshj695?B-?}lz$N{+FZ!{ON5K~9)U-g_sm&<3D*}qJucXvX$InU z;jd6==cyzg3zPCd&=ea2n(nQ?X#SSKG1THN_O0uhdDYh@WfxI}PH~m2YTE@ZoHf944yAzh7iPkN`Qg}|t8JGrOM8&VP?pJWEnPEhKD2}c=~P8R!TB$_V0WFaZQi+d z?y%Haj*@3(8LUNGSYkA%&&-6DbfEo8nT#DMp!Wb!;?%mM9U=F)xnx!= zN+li*mg)U{C-d&Jwtv2bwE&h1@n`lh5nTy27Kkv8j|?kAA|&ZGQ@tK4ivc+1RL=BP z&GL)BE@*t<{*gjqfhy3#PO_pxT^EC@E@YFxt0lX> zT2usog55skdk%^G)_v^Iqe;3?*avZ5^Yd+L=q;VnLG*3V{@Q@dlm_j-+-mq+IiLZH zdKrmj{~dTb_+-8@eh`Npt#%~)B8C}lT8FOx7{9nN-Gp}V)EJfI4fOmzIG?Yqq!US3 zl_zK>X_*QAj=kQ&(%hoFCAWB<&mRDve5*zlEo87;F%#+hVWnDv7W?5MsVh^YdP-QL zeuBCGG&D3R2RF-Z71d`7KzJ&d_q&M zP$-@3N!eVY#$E1p0&(f%4>tH>MKdJ<6N8>uYQ+v)<_>TX8}TI@IDO3kO;nPKb5cYG zNsa}J@mNQZS;?Xh@bEBBXtX(~oZZw7QV|uu?$tMkFNH=4m!ze2SSP!p$;jbEdN)$l z&0$?6j&|w^T0Wq($P?tgSKA3csnfw`kDB0=n*}29^)p@s?I%-QU*Bjk0#aPD z6xWdDsL-hVwVjz0)qw)HEWi{rm4vbOvztZ|td0mf`r;brqr+-h#50@FwH4bD7MPV4 z=8{3)P0HTh(NJ)@{BoIUq@^-TtVy3kt*FbsBGItWy?3`~>W-GJDMkJLUaA3voT>oP zAc>UyGuyu+Y9R z@sN6y>M%#ZVXtOr@w;&)FhkKFmHqC41Q3T%u_@C1~MwbcXPn+?_I* z(++Ku-Mj4b3C3O#X)r+(D5z*Gl7GjH_IyCXt`y<*LpGQZoO#eLdqN|$^EzTFhG7>N zEppW9*;o#0dg>v{do^=qdfYYLxU8=YFx>1qvI02i9OaVhm6{=a?|CSm^Wp5 zZ*Kq`+`UYB7pprMd=tK4Oz2MX*1(8Fca^fc;u-orQ=V+DMZPjW*Pp=a)6*$>+W>S- zCT607Cef?BaUxPz)SZ01Ao(945yo<`r=_+DGt4e9OgQ0%SncCaiW*GBJLsy6Qa?{Z z#^#d3X0#9kR4$R;gNtjWnvRP~*2*UrDyt_OEB`IIZ?Xc*3tMRl^Cn%4fV?}%8n`Ymzhp#tDLpz6<;KMeKPScXlq|#lnR1A0n8&~OAX9kvN zOlgPg&plgqN+nhb&FiVlf*d_f691L^V9Ehls_eLUrA;q}2C4%;siP!84JDrvo*=Tp zd7_C&+9&P?g$bP@*f?6>m4-{1&_XjCJ97h@+74Hcy*|?!v}NO1wa`56mZF+LeZnSE zus=E#d$g^&u9WnM4X%CniE})Cf2MX&VGsUH>>D@V_dB}ZZRKBm{wM*@Wq#*jN$H_I z_gnI%3q@ep^zoPSfBoda?u)#_E9Z0Br2O!4A3JZD*O6N0kvc2+{+MZdWDM~t75#=x zzK0)O(F{vY2z~3vH&$nw+10`v(2;uDvvMC`px-#STpK_ia^R;awUUpYQF+F%^K^Z# zuOpzzGB|VM5!`N*yov8`_>F;p-t4GPev=Fc&&MIAf^Lg@*<=&wB0jaU8%GAOn2tVu z7RnP#4bd;?W*Xyy;ZS6MQ-a~Je4AXu0K((u7z=~}_4#_zab)P90eeZto=#1a|FSx* zHVKbBf)^Y_5s>y}3utwPao)omS|J`(x{hqD;MbJgA)36hX`0XZXX&$;XH;;H)QA+Aj_qfz?7gCv= zR$fhL_@UDG)|&&5bfYZka-NNr&>*gFLXbvKBQ*fN=b0O4owVKrx!miGC*XPfe7XzA7?vx}&K)JvQY9 zQ&3j#nmRH)?BY_%0Uys`T!up=x?df$g#yEP;Y+`^R#Li-{ki7LM|qC27QtzcKp#Kb zAcs%PsoJ7cqdWx%hx0E-kE@WsPr__%P8PmRU!u!GGo0>!(A;?F801Z_*syuQPWSwc zLtm?s5+%*syM~;98?!s*8Ev~X7CUU1MH8_`z8oLR%N4}>Xk*SXNIB5kca-BzrnEnS zI4P<0bIp6n+}ocpguyX=0&VAu3&@?Kd`USwr^O~=NR>{Qs|pz87v8WP3`)ZO z9L49wnNvy_R_`_Ds#2ni_UTwiRr{hgz@_Br`DEROpo#plwQ@7EL;he2mIEcbN(wC_ z?pq;K0*H8TRWi48K-J=~%Dq5JFEa%#NQ@7vzN4jNhGwJLtO5T+&O=;}6Dj6*JOozviTd=w(N zb}X`g!~wt4&|%K3F;ap!O$s*-8|L2Y>)Qk^#FNB&pvjlASUStFrjfyL3o-B5o3VY=*lGn=o|Fd3P9MGj*HO zjr|hk=r(f@V%g1B(w8~4U)iVNQd|86cb!Lp<%Ct+{IGd<7N6}x3szCn{k3D{piv@4 zcTP}mj{p3{h@Rq+@Xu+6sNa37RUOWn7coYG7IiO{WC*ee7i3kuk{V8mhpmXC#_#-p z$RnpMo?O`GOq`-{t`j2#j9GW>R9y&sP_Z$cLuRLos?sX^IjyulCcITB%nzoDih(M5CSlQE5X6qGD)mvxz7IfX98XO?WpM>{F? zr+9r!aR|sT3iVqU0*yY>tBt0l3f5U;7U6q5Z|9hqRfw_IV$}J9UsZJ-`i^BM@`Apu zwx-1wp!gIm#AXGrHnE6!4N5l72_Q;fCCaLmv(T-I`sfxb$*n4U^~3V@EpG2huwsU- zduaqKWt~3I)gUf!+m00Qr4CrA+yd0#`rNt+uXo-^ZUsLYSYWhbwz!=S>+rz(Z5 zeU`iOL(MOXeGa>LiRej30MZ>UgV$+O1GmVa`?0CeO=}o&-lh}EXlQfx zblV%bLr+3nbZ<1Mx1&p{{Uv5i-|7fAIV|L;zF?mLI;hT_fw(#C2~0FIYFKvC9E-9E zCM?+}>;WD(tTPjdK3;72w*#LclPs2QPq==R^@wA%)3|GMO4>9=)qwX0Bk^APLnQNP zKF(t+d$yfkK6(c;b?J{pRSVinYSk(YKNAa=6vH1NcDAY=-K#VGheIn_kj(=aIH@iG z7M0Uhb($qvnL}L2@nB&-31}Ms6}L)(IJv{Wto07Aitw7UF~{L1v(l0vFx}xEX@P$x z`R03=pLmP+S4~5=6WY9?+w%VN1J^3D!`~W&%Q1w57sBDmjPK~AAKea{;|%Tld{{@R zE8A*0taXl5cl>4Z$)n$G5pp3vh<#bYFknEMpH`U3-Ek{TVk5}+7*1kX8&mG^MD?LA z1kC;Bx9Qdt7=R4!H?zSDEO52_@-7URC~IXjW=Wt(@I7YO;B?8e^QVvHyNDuOp5Y+G zK_|^I6J;cz5LVBvsGmpH9yJ})@lv7m;nE8ggfV}hqN713t!*KrH=Mb;^lmUGFu ze&M+1Wzy{=hjZc5ym`M^*b*}G9ZG3)PnSGmxZyWWVPWN6cJ`|}L4hbr;chE9kLq`| zAeSC2hYzkjW&l!AO~jBq$&l6-nR_|UHE#+T!6NbBNC#O6+PeGxnX|yqH;yBedVB>g z&gp|~qV3Kw8zX&R4H@KI+>nhDY^-qOxQJ@Eh2l!rZ&!kwJvAz*(KS>;0^Ks~FoF56 zP>frj5CB_{N+x>YUN#oI3wbx?w+0_FNAlQBqRtS3GHugQtSR~#{;c%dS8S&9vCB$s zded{SvpzpmEY75j){(t$605?X3SeZ+!O%iJ*==grOAw72_vcKWGb zA&2HAtKh?dvNQjrodRlE=^5p*nS0c4Ssma^?7cNJai-H--NdWhuyF4k^0z(Y&mD+6 zbE2&KF2{b?XAn@Mpu)%`lvk*55Iq`k2j`>X+9utee@82H^*HN>2k~<@*Luu4Z;o!* zefSOY7s{J{(_l?Lx!vqBOsS|tBoKW>>!ogIUEmTW_|mx!e}0@GV__1*JJ-rn!-)H64(4e=MV8+KDcxK!3T;0*j1(_ZJDG;Jt5~DyNIjqlvHN zYIF2xs8@gDH+}_}+wYK0(?)tLk!<8~VlErZ%O8{CTtB`BYZH8%-sa}QOz*Q-_s`wB z7O|@QXd&DqLNkrFH)T!d-=i`A%C+VD;1|{?y~XX5Sd1-)!gj&5j_cuQEjR0%wYr^((BFnhtS0Z8BRUPnLxQ zm|Ny=pXW%=Q?1F#;a3qRRD)eB^}LPrr)`AWv6gBRXPU3bu_}0m8FYdWYZ&=eg?dOL zGG4)0mbz2?NrM4DEXUzN1Ibq<+dNb7m~{1y_==fRV5WSQLmXg&FObof#~?>5k!Q5_ z1M0~U5@jv6T#{5Xq!nw6tU5HYM69<~*PL6`!;%!?D`0fqe^a~#+*$d`zFwa(h?#Dc z89I#|RVPvxVaF@fTF7Jn5I0jsTJg}fRA)KHJt-PAp2rAvw z7x!^)?16nlx`7LYoWNV{`wK1caWCG>2=cPV>y}B10Sjnmx)np#)NWSEom1|nqegPT6x91lXJWk|?zbAjm0Q$6M4-B!Jd2PJ=mO;<@JuQ>w zyKIdDl%+73ql4h+nYnCE{t;y?dOchF9-h3_qUFW?K1#bycI;M(;+vLU{r4Q+12q7O6w7=~IO z^8+)y6&vq2$pr@*Vnc3OK7}1!OP$r*ed6U&>9o>!yW$n%rpYnRrI@(pYqS)y>XfTb zNg$8ylucc{Fp!!H0ok{Au9@iSYIW{@3dLWReXMH=JgJ+`ou-`1r}W*#j~T=f#=UER zZ@wM{An8}!4PsEIT}z*!05PHIG(%`JLFAnxmv=~?_NgAJFG&IHJ>+XgFLNHn+CsM? zmyiuDysmR|nk))e36E-wmKHBY)7kpp9nTI4&l23Qobsm>>_ADI-ekpnDzJu(!jzAn z98r#tLQM6+d7-kqm)PH#i7>_7G|*cRxnpYk2~Q2E^dqomKD|Mc!A39Ei&rKn)?bZy z#Ll^xW?Y%aZpwjcUn~Z1cZ2!|D+@pLbx)gqT($BBD}%i;^Q;<^ba{WRVF@S)e#i$l zmgl-AvM5@={rbGiNGsd8dTgZ>H>+o?v_kXq^8%Rl>z}XLN|kfdQ%YH$ky@3{4CL25 z@e)}KgX$=aOlh+U`|8b{T7^1-_&dB7XA1EO#Xm4?M_!7vua{auD6^Cjt8vGyM^;wR z+ea9AnZF%yR!Wp{4Ntv9&yts*#f5NXDaoqS<%}_EQ~;S`)r)IS6XK`JoN^vjo*$B; zIA$wUOL23985GJ4UuRfL5D#cJYvg}coZ24M;LbvCRVW=&AMr+^CnyJGupY+%!{zNV ztlw*BxL(-4pRG8U=L%<*{yd~TbaRd=u4+otL=a2$!FuTYeesX31&{@?Ywidm;!ChB zbpviYnZIgb$?&yi`I{xtg9zIxM>#wDdyJTN zH2>^2lwbA9^Dz{A<^6RHUC}>0o>Ho$XFcd-r_x=^h&qx`ryrx%J*KWhIgugYB2!KWqd>kvbo#|i@!bdFV5xG8UeRn|}d zrz!8n8&~&4WH~nLM4kGHgZD{tYDzT~DctczI-}?F_yBg0;cr~K@)<)4>^iiDRX#!j z1VZFm#tX9eDPD#!iX1RSCRZ@va;aLU{#I#Pej=i51bOm1iLwvQ_aS(%MPfzDHNUM= z3PFvJ6DyJ#$jAn?IYpvV4Qkvug&6gHiuO7H| z*+R&V-t$WdsR4*EpK0g5&Wd{>$)1~Gr($?}7Q+DWXjvUg6Fm{+{#CNZ=xS!!Jo3{{ z4RX@?I-1r@P4!cns9U(b^!j|wRrK>$omOM(#ri0Po!+ScTEC9)MI0R!Hv19G-~aXIbLVW2Ax zh0`O88I(VEKd$|*b>K3wDx!*8Z*rdQ^3~-<~&>+xE=_v$sY&ywgXo1h3pHx}(S? zN=0=AL%Ie!H^s(uA(K-{TaTTjAEl*VQUi5wO(;*NZ}To`g0ectgT6c+J-)p!LwM{8 z>(UAq4lYA@LiH!Sf6c|=&RB)!#0E+qXT7WNm$;ddOT~(-xoIjv~ zGR+n+H@8=cyF$lcorR8$=F*(7*IU?v&##&D66(CdcqGV*LfNT>&vH>X&sUWd{zZ*A z6UI`4B!_avpY-x@d@!Sss||N^)r#*h#7{&ftSyx9UKsb-8p;@mJMmUri;t8wq#A4F zZK;2x19sFY59!d@#1qoh{fl_|;zA)(b@AqR#FMZ`mIBR^g1aWnjv4WGPBlE%59I~p zHmyRzHR0=N-c&0YMLQdUn#9EtBW?pnw0+P%6&u8XCnWRxw^Z{oE{|9A^ELL03slKA zq+$l}dW@YPa8eIGIdom;%SFHvt6l(ykd}k2{S(hRdDTRqtedh3P@V#Z{&|Ev>CLEy z%~o(Lum)wW@L-0H8DcC&EF5=7L#axk%A;L`Ih&67i5!CInv{!AOP*(f`;cZA^BA)P z5LAlZ9Xdstf8i>#gKSf#ZLz+D7|=o#56Dh1LCKT6bL)k=*C1J(aYH_5K?vrCWE|m& zF5n#^8fVt(VN)E7g&T0LYujoR-^u5%saIr!3d9RYGZ3qTk3?oC;44r_5?Fp3J4aG? z_H4^S@u9L!?0wL}upk_%C*LXHhWVd@$?(Q*quUfc!7_1D?K2bPe|7MkDs>c-u7d5@) zUBMIru=g^bSeDYvtS_5$@QhrvWdEu&OL~B1A^6P*b8Us3ByuTvtCk;~oHb!M zVdA$=Q1l~xw2WR>DCYIrJN=wkRoKH06s6T?-2>mY+AW#{op z9c91?)S9yW3F=4L{s8?**?tUdr(C>-UQljeh{^{EgdRPW1tqS-wC?C;Xsp()RcjPB zjvwBvgB}u+NiO@2kUE~YFLNc~leA7+kv24O?$`hZX@qwZy(bZ~Ufk#_!{wCvQ3Qpf z5OXflaj7~8Ze!6pS1OhPC6jpRu^!U$UGWYKmkUty5z}k-)sGG&R&eLszOU~xuD1%{ zv}alUayyu&Zgp1Tx)IK!Cogg_e=_g;%L&%tyL}s?oK_+mj+U1qWxdJtP1f*|Kajn~ zB8xpY#4h%qPZix>9x^j5e0A{gVhICWOlJ~NlR z|GOWYZC=Na>U>#txiQw?HP;`Z0Nog4vCIb*}a3b7W(qnQvx z)vO!5<6WMWL(HVij6%z0fMe%mpg4@V%PJ}mxxIf9@*8GVPZssyN;O)0A8bi{6#4K4 z%sUTTHgiIGpJ1G*UmOWl<(q=%La?Fz%}dg_zH*OLkiRPQz`CQOdpN{#>62O`it)B+ z5)xX28Ez*77azBTctsK6ht=DDry6xaZ}J8(pQ? zNDy;!tPkrbi??%TJ1!!sPj)TFb&ubjLxs>$gu@5$ry9d+0_yQ#mQ-{(bHO8UM*Q~7 z;0mx~_`?FY5%B1_zp5fO=9GTS05^C7hAX zO)6prVuX?E4>QIc)KqsQ1px#)^5B#NxJDze1EJ{xVAd1D3A(hFXB^BaA6W;V@)ZbSGA1Jai#wDM+HZ&OaRy2I3);Rho^A}i*e?VwI2$5}bAey*A>u6v z@*w6HOo8l+1XC+O6hjH7KoLNY>QaQ}M}yWE^tghH?usLeWs69Q1iRE}Z%|Gd9Ir0< zd^PWpY-OCc18tT|o>pS8R^23fl6#@m(CYRY1y^1n54UF&p{w0_U~P`$ma?m<;yMvY zKN9Y}ToGY2&i#;86sWvx5kaJBp-d=aMGMuN?)Clf%4hUz_g=~fYrhp>{0<*uacYCe zg(bXH&?ql3NS(0`xX;C^15Vk|@8j*Ej8K0tIS?!%a2WiEmeM3(x* z>0d@<0R)gA4V&@N0wa+wU02Wvi}nf#x+n*+oq_O!*w_(bBiP44c&rnBntBJk`{AyP z`mSxb>kr~pJV24i-uyV}_e9hUC&$es*R*1N-zf6raom6$gV>71<`mRm;o~vCR~5

>l#!yuQl4+S@$!O2fjGZ0oC#-H_*C`=>RRM=7iqU+WVgoi_)BGlsLc$BA##mr zlKW!Ty9D4ept$hP$Om^TU1q7G&e{X2bJF8?RDG|Is5MCtFJwD=tx2V%kS6lOCSPIe z;Wnitj5a=s{(*l3j?N+I%fP`g#{B;%HF(dI8Ux8^LXD-PyNRZcv!$C6o412~L#m=< z&l~KBw-7<8CGF_K*oq2NmRsFMBM2gqHBkE@MOd{dU{GF+i5fR8TY2L|6!f$$zcy#? zr2I8Bv)+sQqc)y4_(KQO(Wq{6)9$7#Caj0M#~X!PP|Q5`X58KfH3^-`^RpFc-|>)7 z3TZ91mI#xlk?A6vVmv#$AJ_g0;?s<~aQ_wJ?JUUoEgTslH@ ztOiKCZC`%>joa9l&&+9)BISW;+t=Brxpos1&yO7C)R{aC4(@W_xBW{#?H{Xz#Uo#ehYgHYm!|A44AM)nzoPSH_@#-4Z9Cl>7!~Ezqi&D~x>2jXC5{gTqaaGcRr6G| zpHjRsZak{r8G8IFR|N#VIzKJPcC^#MwhbU&qfJD2QLlm=at^)Tq~uRJ%nDxpu6{*! zMU%8-Wwyf3S0RhEw3Km1`A0IkvTI%|J=5u&0DmL{9^ob2OE^?iRJaMeUKQpK^;JLw zI5>F}I5_O*bo|}CoLnu~t(=_PEnWYF)%{bAL5iIsg9rzAF8~LJ`!}h=bId>0jvfx? zmaevr)_-L7pZbKl-V(s`KX;#jMmT@dL!RsUr{2xd-ThhZ_HXheuD~x#&yc}Ont#e) zqW(wz&dI^y`R@8xx!;tFaNTpi{C>XH-)qnD;y>~~@JX6x=JuBVcKOd`>7QDjYt8r^ z}?u z7E>B|XATOgGcluVFXiO*z7?2wI50RA5f|kZ_1c*ln(5~=8k+GOwX1xfz)TfD5zrj7 zw>gEJ+~emz6~Fl6JbPNiLqkI3WpkyyS6o$B2BQlK_}6PA*`yVgHkN0CCuIG% zYX;`%>FGz}DKs@dudlCL_er=-)0>R9oUBt?QVBnl{fJ-x%9Zp&GpBDaAFJP*Xl0IL zk-7cHviF(({rmS@!wd5A9v%{zo*gI`5fN!+SXx@rQFm}~c&yqp+xgOEoT}EBi7DRN z@Q9kr_U4*RY=L2kuF#t|Zx~#NI?2AOs;h^_$HxZ+1@*i+eDGl5rB`Q!g)20dIuaR} zm@+f3*w}nJf69HT0jCkKr^l zG~?srSbz?{OP4NnxGE_rmH%Rw@p<51SX8uk-##bzqUX;~35N&s&W+61?c^N)_U&8N zaSCec!)Gi%-J?9vmLk0|`i|T>;N!=SpFVxkFEB7RF&V0M3wu$a63J#@V9?|0=C+JG zNcv1Sckq5tQ16#7qOTbx+SJw6SB++a>+@@#EHHTlnF# zj(?{*b#!#*p1#{5D>V|Jr5LL7XJ=>k$7S~x7#?P3K4Df}k(HHo!kxUKVTYlip&>3V zP9=h6e~1#{hKgm*h;dN-Xb2?#TpScYY-Kf0dEj^jS0MW_oD6aCL=K9>ho20+@$QZb zRmxbN>5DvkR!~&bAf;%0a*gqMRH93kxmU z_kra5XjmoQml-H4lks_DYdqrx%{np|_zj**k)(><%&4e{NiwhVdy|rqQW#@mVxl{l zS#R~{XH&&Fg>>hM)7S^&j)|mh6!Gi}_mzHL3dD@c}wLUxB(jwvP@9;LIg~tk}tlr+E zyj0vuz5K@epLva^yr$L@(a%^E19ekV)3`TPZP^;}aVIS<0xZ>#Oh`7csZ?8?V^Zld?`{4cW_vcTaUOJBkgocK`y|v8#+-J?jI_qmk2L~;M zjL+($sHmt%kM3j?;Hz=DwOO^R?daQ}&{ieWnu0qLRMtWa22U;62O%jM>@Qr8h_-*%nMM8yGOQm`t`MEAo2G51sH&IdS5| zcx!^d#oPP^W-yDR7vHxmnNE<)$L4FRLDt< z*4EaHjg19fDKt9I_Lok5x^8Wqla=+nFeoDZ#fy~(`#Ftt-N`zmd3{Id!VP&fnk0Chx@yQ4tj$dO_0{g{7rB zIo47AzU)0LD*ReRFy8xD*D-pzn3xzA8J~kEVwVmg=VVZM2nq^DAJCF{ROo8G_Y5)8Ti~e0k|NqJ2S``H85*Gt`yL^V^f*heVo( zhb`28?F=^#*ZO*|%o?9_U;%F1-cUw~ z$)(j^zkHddp)V;nM{mPGc zySmPtJ-aho-tIV5!+Tx7zoVmrkh6`Ak<)DL?2tZ+O)8&dpKzF-o)$E(K{P5*Q&Y>N zmgMAE-?$;=`0eG^#y=c}vciKbEDvjS&YdHbr`^Xc!y;t;@WqQ4wY9aGnVIqNeP64b z7WI)_t8lzR4sc^v6*V#QsxbDp=VRUaG{4=2D_2I5-;@~E?99w^`#!}`Rb%;!b|wSHUG!NDpxH9b8&uCA_RG%QoU zeuezAdKfP<>zzRU&43(d?1Q19VQx-$SJzM3 zO-ed+ zn~w|VCnLk~I0Hj0Dn;LyFY0DY`qbPM88tO5^U7qe+~*F(8u8HMBKY|ETLzirX;IE1 zA|vA~sgG-DXqd#|nAOzObZBWZ-nzB)=n-wc1ywTrGj0~tdE@0)eSLl4o+n93gHtS} z9sw2C+u1fb?ga-wNla`S?ECwxd%!y)G$JC7!FE4MspsMk92PAtt?A70@VzZLCgIr% zN7bV0w%7Sh4$;zbxKW2Op2(ov!+hpm(nVd}0QKE3ZVViCE5i9tKY<&q;%R5Ucx3VW zYmc5#M9b>ty?Z1Tnt%<>&CQGsaa>Kavo}hOTA$AU{(ZqA?%n98Y5yDqXT>|WjTMKO zR2&rzvjV5#TD{#uLgkEBm5NwLhF^h!fu^OTcjfM!wWXw{&O9c^REt%>s$zl+UYn^Y7Fq}n;t z9ykz4m1Ei2*N0n;uZ~|`UA1m$z`43t9T$CwMOaic!zk)|ntUJ?6;*<1{roqr6saq< zHa#63Y1KClgncNJ@J#RQ>3J9yruf=(Wi~OK@Y=iWdqO}UFA>tNxBx>wk76*5gN@Cjq+UP>;f)&-u2b52w`&yx0s+G- zT$d(3xAtP&_Uze{Maz7<<#XnJzE(UJL>#*;wILv1rY18Xl_V&9$^l3 zq2FB+;5by)DfnTu&xQ z;fMpZr}Je82TjeXsVOlrF;|pZjtAnmCbW4M`&@9&{I`}3FIMMcGbb6^+-#G{17I=Z{NJ3G@|&Y%(DH!OY+&~ffuvb1-cf%*DZ zr@GU1PFJrU^~=wYxYyL)UIGNGuD-t5$gbmdH4FQR1@9?oLsm^JK;y$w#I}F`-HG{c zuMT{^ZXU4MCRDpN@#KH@vZw6Mmj^co%B*ajl&MRakk|cl`uZX~k%*z)#?J1?jt4h4 zx1AsMD$#yaWCd~ZJwu?<-`N@UyP{DiQ@PSh(tmT2d@!QCT*!f!iblI%`bPhAV5oR6 zK_;r8vyR_RojxsZif%CGP!0(R$%w!7_3M*&?%etD<7%l9nwQ!6`N-j@*RH?b3dm}I zA`QPWHZt<7JJ;qro3vMjjhV4b?+9RGV?kbs1Lq-MW*<4%O)|7g4Q0|^8oC1qbas`MmfrO9lM&jh7Nw@9=6QPrnb(HWX5Ncz z@1gescBo@7s;X3M6Cy8CiL1Dfk;fp)&q(??-MI07URaksIe72k`*c14$gS=}DAB9= zM8H!I)Sz`kTIM^Tz5LmE{bdTjdyTe?rh#jePbi}vCHn|fxq+1ueX1kJd1ql z{OH94t|k%tFWOJkr*l4T z)eleZC%K7C z3mjv&{=}&^U41?gkj3`wzDt&tTwZ~aC>(KKkNNocrbJ@pI2M+dV`Fu(e@=s z=5tS1o>0@!D0k0F>!9;j`SO8gn8LhB`B_sm_mZcSUDEVt&1ZLs$$x0&i2HL zeS2%e{!3v4^<&z-d&AK>?PWfb<;L_LZOOM+w0!6OdXLxAn)n6`hrOhoZiV6xV^TUyb16K1|3T@pz zjFWliO#aym$M!pE z5o;Rt{-E(DV?PHvmXS^gUhzM?lACrPhSE~ETE=F6eB~;27t>Rbn_YX{>%!`9YVGLQ zW_v+bmoD~YP0iC47m6$Mn>#Zlb;`u8v?NF9LeTNM|NbU^_5A~+=C-HeORb4QR01t_ zH*TP5dE-3#wk=tb>7==o*WW4dlQX}5X@V2lSef&*<=a@ZI_ajAOF8@?qfIBQ;`d}s zN=igd=K*o*O*2mw`38BkU+czn{haYV-Zdd1l+99XENO?Iq^GAVWC)8lO&@$5V91*L zhD?{jbq}I4)UUd!sVVP?YJMZ_Nrp#Wd%nK9)nxFF`uL*Zo)bYO1-ZH0Gp{qLn9H=k z)9Q4uCNQn)dyO~8em2iuWV}*F_T1qEX_4fet+NSv+xHj&NyN--Z-|{&ncBp?-pT_@roVZV) z)|nQyUG?!Rf1<#&tAm+zoc%9ip{n*VIm(HW86 z#)m$~3U+#|B}c(u4wPO~@$=grD8HV2A-P#fhD%LZNvZXz_${1;qLxvdJ3#LXDN;?F zPR_3`0mPyqF?-`xd2w&n$8EmS@1K@ja<@{s6Ht(~_w(~HsQfd*X+3@IqpI2d@72>Y zGx@)*`T6*?m-|0rbm z5p@GfaiRLq2M^?|bW)Xqh!x6Y%6bI9j^AV27@H%q{rQSLvxU`Sm-}}W_Xv{TBih}On*NrW;G7mRpdkIK1zqX|b#=Q={X>;^R`o`DO(fl%?^MY+>AX5%zL#Y9!R~bLTVUDB1BFH# zsA$-GVhs*teFp)HotPhbBPk$ISW)r!WBB2`7boOt(VEzHhTQ?8M*+!H`3eSgVtkyG zgv8U^yFE#y<>N;(|Ca7AiiLbXSt^M)x%spf-3r29B5uAE8VlY0p@hy8X{<&4zG2{1 zUTq`@(6Q4{#LOj)O^s|%m& zsH8+Pt(=*jzH45i&iKfYBYB6?fTIBUT3&BHe7HyWJL9==KOSyaVP_hCo^%d4va}6 zFJM+puX&L*ps8-_&K;t^)RQi+bT>BTjvXtps4FfgP>iJtfB0~rfPHUdqatz0F)l6& zlHGr~xAgc}v=?a3Lj}5<#MGq5L;piM#s^4Bpj2R}pi0m4z^R&B=QsJbRu{*tZ^b4i zCPqhhJBHWMQ?Q@61T`4S7ho4XQa?1r7AsYEdr7&i&kyB|z4rW<*X@z_KI(H){McMu z65vfGaF3&hPgcEGsd>aFE&UyI>8DSsK#KFk8h&WM5ka%vx$Ve@y1KfS$1WNeq)2;< zuB%e3^v{HiE*pRQ{(ay;X7!JIKJ$a7>PHY~JpBBbPn7KJ_`KJq$6Mk}Sye|pylM_H z?cIL(;YP%Ry!`z1Gj|da4$?n_=D@sX0aj{`Kj!zxwpwY@2> z-~VoG(Zs`QiU*`(9>3#bRbi*08phb;jv&;w9#&RVEXdm>T)ld=KP+`ogJdYHrKyRs z*N`BdnSV`I6JV5-l*E5R`l9BBhJ9Uk+j+OvmlcEJbc5ZLjU4xRGF@vu&gB^*?9HkRPHU6* z)wv>_pIMJ?^~fw-5r0!tWBGksLtTAk?rY!l8zU2w46lP=Q)3Q20wM?LtKE%DwRU=c zH$HUitmw*(JuG6h%ey?bH*Y_yk-vB`+DgnU=$g~}2R8QhPT#8;e80WC$ysEfkbmg# zVL*z9+e&&2m-Bf6dv(k{fsD@x?z4_OqQ0;)XX^SBtSNohN})8Xm^0CbLeRgEWKbIa z6t2G8C(9!1$FlS3%ui`j*;rv<#IsIASvdfKi`#n$b%^AmiOD+nm(tlE{iWA>ZZm}_ zp;;>7&zkVw5Te-QoG&eOpCa{5yUtjFi0tMt}eWu2` zu!n@g++cC*-*9&vo45QpUp%0(K&7!{}WiezKd6qB;w#NjZ-YsWa2j1)Q|AvwQ0lZr@jI zMN^_}ViIade#AuN#cp$RuaWv)gIxeQHCYZHLK$XF73Z%4xZR~%v)n3no=V8{I)bxt zVoUI4Ttv~GtGn|9RYtHGixD3nGk^~_Cd&fL(zwwS=k@d^bi=HubiZn-7nWN$o%8C6 zSrsQ#dH&ch_ft8Yws~H~_{w)f)ckxG(hRp&%JZ!D_V!d+e;L1f_&))AF**}Y()?@9 z?;9J(V$Bl9{Ei(z{$t-cs00~gZdtFq{|Tl%6g`!LhCC~y(E#e~D!S&yFU&qNb=hM{ zW%dOlcVbv};yEb54CDSc*4Ezmto?ZxybrxQjstjes85HBmV8uHRPuMOoFgSa`k3O) z8s~pBCH$0^m$#?>eP4-%iqqcC^mqx&C4ia^WiggEgwgNeI*Ut}1n8;2K7l-zu<78~ z^hSe_^nz48keKc;Ror0TWU4!`0J# zPvnDjQWl94i;S$oUAc1^Ny&HLy(7_+l$5l*y!_cwil0AhWxEns1sL6XYh9$8TSQb; zSw)4=yH`A}yxy8{WLY`jltqOQ`QPYJ_bXf!M~@tlPhrTmGjo=+pJ-%xuYUnZFyoE# zO*c2-|J^b&#%5+_&dv)+N47;z@9#bQ@lW)%7nh-_?CDi6C@zM;X9!^Q!CnnA?4@b< z1zoBD4i;9{ljb!E(b1grR7-#U{D;q(IKRm+VD$XXiy#_G8fdTE(t%Y~{{W<=ueY&S zSJ6tbMc%euS9LhZf_A&S&nfDe|IRivP2ID3d4#nqD?2lo{G_R~bH9kq<3lXSiX)s- zrO^_{6E+*}8VSVtTM$CR@rZ~>?3$>au`#omCHMl{xnWN!bD){TH$tzft22&L4R%yy z{n*xE_m3Fl24VFF8jbGPp3&o4DGx)h;MBMJStcNm7gojv;!c3Y)ExbIrN)yM5*~*l29f z40w9J%+1X$WD|XwoV>HW;k3eZ7YAf}dmBV|hV;G8gNF|fLt<@Y_uov|!_UhLJ=I~j zHhJr~<>kxH>wj%)*tN4P>ijA^&XUMK_;6M4-Qz<&`*(z>g9xfijUty!sy|fQx}ELA zmB%Re?b}IcQ#RrO=-YSpY}LrfW#h^H6|9b`nzj!%4k^4a~Er0=@x ziU}`85rtXX;2#Jyp1kLV%a~+qTLioXK0`yW)*uB&lB=NR2Zs_>&<9)?uh_UGM zC$Ev)g74pNwyVi0LXTL#3!pHLdJI}8wyJS^xU-|9AI&=urljJe_n*w^FOb>pul&$G zP0!|dDmy2q82aVO${YxkNoSqddUeF9N#j^JkYdcu%_AZr1_uX0&*BrYZU2^*GS%sI z!dUZhx^~Xd)L}} z9_h^3_!Ukvq+;|JFJUt%KlToJ%;V7 z@R)yP-cO>~U6$6?FI-iSwP5rRa2sC#`wKiy3edu*y3a7or1v5;&K-UHl>bK{rOsy~ zlcIMTG>?F4kvv+wbio&cxO(lgcE-!NiAI|4Wp%YKvyA`t=KGKX*qGvsjIK)iK6EAQ zpw&{;+2~7+SPmY1={{#7Df!y*dv$(Z9%y`=aW79#fP<%2lF7M0@3f5nS@St?-~gC- zFkd8OWX(%1MZIE{lJ39otLuO@I9*T*AFF0z4K824jOO3o{_Bl=0ix83!9f$(ix#il zPqZW~ex{=eLa&Uz9KQi?khIs|gTgkCDl01kT-Gg=qb#vkfO~#^er|4+s$5;Yz366G zAUoyi%A4I)jncb#(cZ>JRZXpdJZtqJ`URXEN=iyZMQ?Af6dRdcxm0#Q{Y4C`ibOD%kjlv8IT(_(DtB%?09Tw(~!K-m9}APg8{A z^9SrDH$}ie1szcU$6#gKE~1^&=#2^RQok%YIk|50PfNODu=~uHaIU6|jEsbY1SpHd zy;AxYFA@w3hrQk~cL!e?36*-#;)=Reb=KNXC<)8y=7gsWQ^e zBlYer3`D7d6f_c-u0LenwOa9zT~_Aw>C-^RV75@BKDD+M78f5^BN$hp`=H`NZWkS@ zU?n1w5a$tx*^lVXy$go>ND1GuQvZMKj_o*vmVyP!#OU9-uT^fQ38$}-smS1n;OdZ( zA<7^o!Js)v$Jn5C9z^F7_SMw_rY?tSU-9oXw-5NDBRW~-$ca#NNx5iT3n#({zms=j z;^K~Tb9=Z7)^igF5O)mVfa)0-K%0|=^Q8VR@ff5hVH<4)1qGGKnQK;-mgkct+&VMP zu_o_dUJWk&HCzJqtnsfi5AzS>!R*aRmGjlx7cC<$C{1 z?(Qqkue`(O7r@R%_@fwSNeN;iTEsJ(glk@5_U^lBFJG>H2xCHF0<`aGMNopP#wl`x zCFD(6zA6OlqLPyNsY?|{fRqhtI1fsBI-6Qf>=5i>NFEVwq^o~%DH190bv$`uTHXY) zry8{be2y+Va0k3;f5#$aU)=mHXOG&sweW5qYce&F9Djp7=|YpXp`q-}AMfGa=y-~o z5QPWgavTxSh%99Q@j?iEQ5G>V+dK0wo6zLF0B!h?J+8|3`tE*1x%?d4hy3$ z%J%$!a)%@*Ch}@oD<~=&7MUR3U}duN^MQC@+4VlV&_xgb+F{MU-rgp4<*1)HtCs@1&W~Yxno&u#rIHhG} zUEST8G;g7BpLH0dXJZr8B15jI#qW;33kK;`fRZ*no%G}hK>!C*)KpWuk|XQ!n?-_9 zAsyT|a7`+|&~-$de3qBDu(+5gVjqX}2<0cTai%jf_|2QGBoTX5h~AEl`pvQ)ci8am zTMOdgI_$tJqzhNaqvv=lV0t*-q8rCh2SMf(8I`^r9!?!!hcW>-%L|{S2~E2TV1(gh zgBKQ7nN^={L``3zadb?KlIdwaK09#H5X|9G!d;^tSop13p(d0EQ&*gzbKQ;dhsedv z%yPGU`zFQ3r8Lb5be1oS-#exjB_kt4Fh`!vzzxsMeFwwHFNFJmnjRe+3^ygfZrXJZ zxKO_Mj)No0bRf8w&ds>b53v?)w9D?OY93%_ZZco~{{6c&C#T|cHGwN0$T%04K#86g zXna5`uB_}2E+4D9$N=Apu|awpYj{bC6THKgMOgJRoDvkh6;Aif)thLh^G#uL>VsDl zqG-ocjd;OQCr!r90LSas`>Mk~{g|J3va@S;`8&~;Y>HOOo}f_RY?T+vxX<>(oMK!s zIXQ`wcGt>{CRhli9F49|(e$+4-?KlL)*u^hNfPcj#Noz`g*BvqYp2-mOqG4Iva&w0 zp!eeblE~9DGIp(`Jb6Meg3<(Y+B3isi!{~J41?&I*jD%fU=xO|N3>Fc9!N`g{jc%g6@5VYwEel`3N=C?0(5^@?$nL`Q!AFR!wIPDso+Iz93nV0QyV%u7UC`ZZm<2Z`j3y@7nsM$s2{<) zs6d(@Z${6Omdg+H0=NPR?L%WDF!k@RRr~yj#+}7(-n>~69upgj>_?q_`pg*#xV%9v zBU<3g%D@k-YMjCY4&l8L-QbItcdnqY-;jHE7hm$aRP~7!8 zv{n`|xDh^oK5^>Qa~S9Z7@6qlVPrx9NzX=|%#96o`1W$Yg)eN(yLRn@P5>YX+k#%- zU7LKI%%xFJd>Btd4DUsPeRz6O&&(`2Cg$hdTzK8&V6CrYt)O4azlDX%Ye`cQX&D&- z3PXq&*Y4i#Zb{FD5ts%LqaUu`1mku2@(7g2&J`q_1S@WI_2(!pzuSWzUh|Prw?+jS z8;g#OJw_J-0~>A@O?8Cbt^;Q>SYotXlS?ZqHs`8_2}c0@6Aa)3ZEZ9T>FCvA0Lse2 zGJB(K1TaHU=TwRKJ3DaT*bJx^P_r%a#17;Efi!Um2@kg2;2J`Qs2knswL#F5Pwb+i z;lasnZfncQ=KZft_J3C&Kq6|Dyod^rk0lO z-rnpu7qO?vE$ZKUv}CvL`ClB=jT^cA``as<{d4l{`@=r02Ckw9OR$Ao1wC5ui~7kW z++cz&$?m(s!Q|>MV3aip`1b7*TcpYfeO=usFQl_!|s0QR*9Wr>nvmE6)Xwzg@A2JJdY{G4k=9XQ%OdIwAz(F}t7Tnwk`SJ#^o(I_4 z1WhV%LL(9dcz9GngQ^3ZysOde4DB{3zBB;pkQ>aeeDH2@_t}FElJmoLjT(}9rFwE3 zfg@>w=)+mJ_V#PABIY0Jn!k1re?h;G=I`?IaGn22H%|0^Jj`=%tkDZrQ^A64{GkUK zW!1v)NJ9glx>l1jsCgLL39fEWBgFwQuD8mE{WeahKL>dgw~6nE3cxuXgH!OOZ*14hSD+8F4!l5Ey7RmxpDNeuU|Q4mOs>;0cGXFPa8F zb!Mt85*IugNn_|Juwn5_s@?c4Y5e*ldk3h$hZAEbXCv5U1?`t1)_8b$#JHdlx9Nnp zvct!i;gV|9`{7Fv`^Un7&h9Zbg&M#wb28@msZ+F{RY>PKl^;H;oCyfn{r8T%clf#H z{VZr@$&VeB^^-bL)&NHcYxcJ?D{2Q`HkLhyMbA&yz3b~^k{yHH;c;~)7y{O8ao4Fw zg`0N>6@VO_!h_)8MwnPzKYs>)rlG!>dV9KucTiVK?DDJoQAQ3jV7Gj>k)S#l{Z>cG zgJ^u&@~Z@F8g3VPuW@)MX;?iCZo%9dnw{ zQMalWM((U#ipa{%9sVCr2YSg0w3O$j;zhw{<`-x^6??3H+0yc!taIi_8p2+n_X3#e zB}~dp{QP;UY(T-mp$MLz*s|n6V!`;C-@n-o z9N=_&;%W8)E?{*+v>jj>IdQ?T(5RvIAHV%h(2PVkF|+uQ51562-;E z^LAq*0lLyb?+#vu?Mbxj87Dq}{(LTS8vtxIgJ7s-Xne@LgpwEcJ4sqBucSmpmJOYY zb=3>RNQH>WE=npIJ$-$v$`(SP7L;F-KnJ6J=Jxidv=jCHRLN$jj&RQF>BZF5$tE=o zU0=ZYGK$M+z6c6B6+(&@!A?2iyA1_KfNq{XA{mdT@|slV8|$7hB0E<%UQy^P5_XSa7{wP6>%5FNQ=fw`meNy1GZK9GvYSXROQtyg~w6dZ6VsfE|*ThhOr#-&$DYi&L! ziC`FoQ!R?)0nDT@9GRG!z6Le<@+DFtnf`8@N{BiXK?-&zZFPH+B0@u>ymVnzx2ZIu zrGG$6a@R1|N=@0#WO9RTCLtYh>U$hp(c- zlW5f-9g6#`!ks$}AM5vT-*V0;c1^!z+{uRck2Xr6K5s#b9Mk@W|-bJ!0uC(Cy z7ml1f2}#Wj088=y9%ER=QSk`2L-5PSZxTvJ7Crw|y;Z@P(v}a9@*fmsiW8_$Oc+7f8qGyfDnew|`cA?kT6mm_<5+xDv6?tyhMI|y@5qoh8v;l@mpzq`XM20yz(j-8 zP^zRdNoTF4(0rZT!MOHmgFKXT{2R@7#$FN8^n(WvUaEHG<>b7E1Bv*%{BamM4Y+O4 zz!m1qkI<{7-5AmL(joOj;|$tV!^{I{5GM;WZpN4j!+===C7c4Hj^AvqUpLg&?r4pV z>0zuBuF)p(sUE3RAO{r5;0x1XM~Og(h^a6T#$ad%s+=tTu7~q|yupc9;gVo{wHVq= z(I>Uil0Pl*#_&no?OTCr1vi_2OWcXpnAKeJ>~|T^#%py2`_+ zF3aHt0DSlE-P@TF$*hsoK6&wRMs2Mh!fHk|Af8d!`-0>o1@$VW!#SGezkl;W00Yt5 zT2t@C!Re^z8EV`B$qPJy|FD+m1qiQu_p}-IHw8a#!^;%e?iNw01oUQP+f1hF8C+a|GbQh4*FR~M@OTf#R%HZI_WW$ zRh+~VMaOqx>n_4PB5%_7+h z;B~x&3*EMMY)VS;!i}f0{%q&S(B5G{GbAJg?WF~n8#EgWpYE)_TnefMYfI_ZXt%$n zOo8Ay_~9;-?($a4rd;tnTpP7$PWv6KN6aCOQ@_IOa8$JEr&&^G+;*+iRZ=KseFP#uCH zIpdekM@*6)J(8O_5@Tk%V^yC^9S|5n4;}c~E(tL)gmPJp5k?c`x*c=^ne=T+ii$K< zRWGZlsf#K(l4GlY{gvmq&m9Gs7Y3%)wrQbwaIvqt42-?5=DYFMk2s{Ae}VgL-{}6p z$?BMU!N5(ua}<<|t*EcAZWrcsY=jmWsdOy@M!;y8L^ZevsNDO!{S%Hs*bCu|aI~{i zccYhI_K|CN9r1`%EAZcVA9_g$`8C9+FX6UP+1N1|LUs&;%=8o_tue@+?#%LRMZ2(edXUe3a!BZ}Im1Eu^EF?|arWPROh&1090 z4lRpo7C74sTY$`!vzeZ<W6=KITRZ_7LY1Zq)S4$Iozm2{q z_uKNSsa(fQoK0jP+*!~tGjlKsmDoxA8&(QEHK-dume&64c^%xwq!y*izLyt{h+&_l zz3V*7mg#~^S%PjJ9xA?i~(Xk+)|8+K?xE+Ie^{6|a0lMbU}D5TN?!lRP~2 z-iNFePRhKzB)F|i94sO73^VgpPV5Ypn0w7E2`R6vJf}|uh-PHIGCF_Brq0sGQ#W5$ zv}SCwq;5MY`-A3<8v+bU@a>zJ@M-n!A35-)Em?3E%W|P2B(|)*8KHzGfIapx#{AGT+rK_tj-%O6{v%B$NPIW#X1}>S%JIbZT$iy_Z zcWW`V8)u}`2bKv0&nd&)z2QaK*|E{lfpI^UwLrWJ7A$E4pT?jW3Lih5-Y1=x%TZ&Y zacHxu!nXT(zU&0(i<;jKdV2J=^z+&+-QCfzyx>_s)C}DZH{YS0oCB$BH1L_v(&w`k zBs@=D+}vW9-4+fVK^q(wyJucr-Y!L6^3F&aCuNXAjp8DPfoJaGCQ~SQfgh{|i?rT8d$Ot+w8=2sD1J!Q!=H_gbK_;}Ggemx+ctYw0N-9*UCJG7v&> zb%3UnBmv-mG@pp-RPoe|r{MA-N6ecB-To)-yDq#f0vN{xs|Z|t$a|Hrr^NvhIF#%9ruD-w!Rg=j_HO+6(Li56L@5K9fMA?4E+g5> z0DT4a-Z+A;oG8$J=q9B7cTY5-ZLFhmqxnDzKq7#23#Z20nF~<5l3$S4aPrawmxJm) zzTW@Km$1qi|5irxEu%1i4(qnXW+=R!`TBk1Ox<7A#5ZAMn+`G z!1pj7Jg92#@qTR4>)&rp?}W^4m#H0bt7iH^cX~ROM_k6Z!yClDkf`;_t1*Z3SoNM^ zB@BBx%ZnGHe!{l*^Ty!siHVOa?aBtu9sT`cz`KKt0Dth3FS<|!a6m879w3sZZEfIK zXgmA}gH@vlX*(?Rk@hMMqu?|U9S$!n3ULc*zakEq-aWe9cxRtz!&S%+t>pynBvQLR zpk+J-x%idG;G+%!pn71wX1^HR$HL(vaGHgWDR@@XA_zR-N0t>VlG-$XIo4pb39g@$ z*W-h%t*u+noTCc}++hLrnF3X&xLB~I?s5AhyR?^{0Ar?PbVLMUl%;k*Tt!@JR3y8h z&>B|}bYvjm%$1Hgb}Ysk(Cnu5jceE5)zlE4{SY3;6MO&uM`Sl!&K4abGIIha=j|0| z2W}Z#o#%d7o)%+0LJmym^IHdh!3`Eyn4kX(a~^qu5A=Yp01dCoUPaf3t}M2?8vO+h z%+M1B?maZBQGfsayZ$RYwPoDv_U+PdR=&QziGe3alp|P}4a}1RNCG*i zpi<;iC0FVNQmeVxFcmT>z7hQ+T zCF>_oz`ci6zpj>wojT==AtMw|^eq?RV(96Cb8dNILCkOSW#J*VESAhOgvXG;w+0zS zLP7$At$>^0bOA7iegCoYal!fwpw^>|t}>yQ1|2Mf4=GR`GO6w3F0el#)3o{g;Z!Sw zS`5;Nnn|$Y`SX#bHM|pgsnW7ClN!%OJk$X$iE;6(2qKWceP~|MzhysrrmlbS-^xnP z{m*lo4ZD^ZiZ8t?^IW_NRu}{k(k!e*+}yd~PGn$m8JO+u>mz_}Bqlu8qvuLbZ!fEq z=fc@xALuZ=?MyzP!GU#wEg*K|4CZHKT>a0ZPUhjWSQu5D;Ef|K(e9e%X^H{+4=wDZ zNyVoxU*gsqV3x#?WZ&n{b6|cwk5T5Q$okh_ZrBZxfh{t(xOfO{fbq46#`o`UKxo5o z3g#BzFBn_&1SkPw8LqTv+PGXq*h**BgG+cA)!<`1BS!zZFu3Kmfp;WC9Wndyk6Mn7 zg1sSU?pEF)Nh|-)v!DjsVX(+&qsEw)PO2)At0*lC5s{oEU`v}*-IlUuiAiOsRn{>g z3C14C;&)!a*(3~CH&zIbwgH3PbL{bp7w!PTL+2QXlBxC#Kp1tvOdfJ^thm<~ya(Ci zT~ne+e&2!lmM3cf+`V*Z(hnT$L$ABoPEX2Nn*UZuGZ8 z@RF+eU_bzqvv%t^%h<-u97u{7aTW(pgXdtpu$kXMY~nkLfd6^+h`NSQiJV5903IWQ zidcVUII- z+zWwQ7PkOjsG(5+tIo>G3dlgnC3Dg2-_RpCXxN-MVotis@>x_UJXBIt?3LPI4aRET)kVpxc(L5Y!4 zGk!8T#Kgo+Pn9i*$8Lb8K!`iUi4aND!<`8nD+1}W2M!}0oySmSlatMKbzLCXz>;l@ z+0Kf3e<~945r3q-$%zTS)rBLHl3(AySF%gO4eTfBL@Nl;U z_-i=DKL9lEHIs3+F=AaDk_fXL8L6igWI&zwHZeAe-4bo7DXcUK%`IXOAu zi~%bJ)FZ`Kf@KBAfr+o(MM>OhQSkTf+qVx70D!zSr`n?Y70Yq zqY>K=z7(P@Y(iy_x7NiqQ=|r(o2j%E^>2!tJv&@}9Y>@YOO%|H1QHP=srIbxd2FspS`N@^2B@+9)J-(E$#AEXSx zd?CT~x55OZ9?EGc}4{{R%TYmGhE|MJSyLM^kbz4!=E)mTSY z1ddku7K%L_!UUWOoGf5c@gQy+zEbqPShjTxfMaxf3@W#mw>KUSG0F>>6TDwYJ3bJ- zJ6;r&lxr|$EEM=-8VgN|$)!sVCs2pM*#rd#W8rtM9Xej23Zq`SVlbAs<0+~dSWP_9 zz}p*7{_4Xjb{piQK472=AUG-dDdDvVmK((TD6d*n4SKuFmpPI+=|W&n#tVZcZ)$25 zh+U?8@*g~)_`9FA8ZZfvw92&pFW5C4MhI%@;yt(VY=|d#C;)0|Vga5aL!dJ%3*ouL z>G#DghcfVks7m~`gC`o`X;K*$da#_~uW^__dJW*VBU}Ap%@jEz(uGkJV7%;{^78Wh z5b#BS%J46a^1|tXsdT*XN9gGzegq<-z>y8=#L)m#Uwu8SMPeYm83{IFu4Bh|`T6(33xw9;vtuY%)3D#h z9Pkf`JdB2rs#4k~5mdmKWB5lz$5{jgCeUk};W{U|Yn0~j(O&6=sH<-;k2T`w&y1tbEod#T)dZ|qAjySb@;@TXwX<*Bsy3&?@+ zEuam7obBVYiO&EmK7Kx7VKF!YQT-h}6(~S4mWbD{H$X(eX#!xw26TaAi8cfaiwCy^ z8L(kEGYIJu9WxB%x+*H%c<=*~F33VS1z7P|0ZfvrgBh3mPKLRVT+Jt6(BNQIac00e zPfSh{N{j5)-vhl<1o}tM^3DZ3=xq)=SZq;eZe}(&Hdc=NdLeU&L>_4fB!@N+JR}yCw9tk&V|rI$*zH8c4*bE$%WZstZjWj{4z4hu}XD15`7)3r>C% z2?KCVT1pBYOnzDlq-A(tA$qqbOZHX&U+tY~T#fnP$B#lGImxYzgr?QBY3~$=QN>lx((BnmO8bZZiSi zan~VlO3lqRrXAGOm>3#Lkq<(KxH1W8+oAik^|rGx?bt!t&L_o-JPg>#y8NrZm<&>l zFmQWx9OQ}qBvlCx`$3=L32pozXuLD+NMZ z_p*r9_qRu`K=ll&&sLBk1R&b-Dq}Xxi@JKq=O-{{xmN{~|^W*PNXsD-*Jigtwzf72+ zyvS7PP48ag>qY-Ec3_cT(fnPTAZI~fAo$KWhDm+Om4@hm}|^&)MnCo-HdQ zlVXx!qa{^IwgYC*kP< z7(S$b)meVm?6iAZv)cCU+xOt-v2ndqFWcM>?D3Tte}(NLI{&mLWM}Ti>YAxWLuRTE|K#4Q8C5`iOo=M% z87U(xE0-~0PvLs@&dIWt(?=s={TuAMy842jeI0bsOE=RSN27VXItSdJ$v}X(k|!Z^ z_T*CE(qqSlb;qr`691ROb=Q996|{)x=$Uica#D-V?s#Sad8s=nvu`tqvDLPzj=S7v z8yLJzJ>#@yO{rvii}T64x;pmj_4f}Zugy4_K48g`ha}zI7@!{Z+w-mBrJFY=TEvw) z&z?6AsG*Sg_Vx3J5&PEa=xS?ggaK=WtsHpTVfwF;(H3#bKw1N5!kro1FJ}L0_)90? zpnCvfnU`*Nyh3w7wR{*slgM||Yq3)EWIl?^4-tyTg^e8i7nVXW4;59_BB$Ln<`jcN z3x8~!KlQ{?|AoDDix-Bfhu?-;;Ym=eXt>w2_)$^O>MM58t)%7LZZo*orrLpc$pstjH)a2x&a|hkd$iR(^LKoO| zqNe7bm6hiu3-JsB_Z$B*Ay>`O^=Wax%l&?1yjpj(o&nJbmlBvHqvPM9@)bVgzP$Y7 z5c}1lGphqG$cmQ&V1U|yF~W$#%Gqfn6~0A(3H)g*2)@(zBgAah%rIG*nerl!AL4?I zISSdnLE^&^5fL_8Zq_?EB_BklH1;40yRmK`0yrF&2^wJ-q!hmf>@FM_CiL|hTNQj@@PSyWDo96euCq>5 zft%ifotEPQ=48-!`sJo)WbAG~FkZ&DCp*dQ3^`CDv*gt^S$+|Pi^GHrFjbL_dvo5Y z8+O!GO-C4wwM_6Al64hBUk?Wd2VfqY-FP}056=e{<_ZvNm-BsToT=hrQ}u?n&g-eE z$u#BOoQ4acy1Xgj)sI(o32xq+ptv?;YnfqjKT$lc0>*I!3d}{lKx(PB6GUzy#y^48 zz(nA)lRQfZo?bzJk{5BJGS$ZX^cS4u9w$o&MITF{cvIoIADNH1lrBM^4^)3&T3&7; zJJ@qm$mXH<`ZWv}3Wa0FkZ{J7Wj;<(HN`sAb3)*y=(lp8T?eE(LKDY8`#25YF`XIo z#h(}*f>=-8}4$^4N*RDkGP1t5wuE3YM@RI^@#zt!x{`|(wd1_y+91GR zzI+)bWU$Ou4YuP2S$R6Rsp?O?6Bk+Tw0xW&7(2*g;WP$=NwG6ILNU);TAD zh+cBt`|oQJ|J=3dBnMGt3mYj z8BZW;GGA-Ui+pU(V^J~8dKMUc{`|C&N4{D-7P;`cG3u@Bf~iVMO70)?U=gZj8Du7U zAp@$;Qc^xxs(S3|3!zo`rAwEXldjrb{qkimmuo@G#8zAXP5*ceD2XV#x7x{R+Npf^ zdCGe)%835Fb0=ij^G#EZlwux9X5i(T?L2;J>Xr@T2I8dptw-^X+qci=Ub0UDzKm@y z@ft40F4%zbXt+O>%46vR*ZDM|W{ zV+ks5o)FqsXi!6z*LsL-;5r_55WC&b8@Q$qo5hm)2S3nJQ{5`}S9R@ULvJ9ZJ%6mQu3}zoD!=VvUUX2Q+pP)dVO4G<#p0`K&;yk( zQ}62N&z>E3YkvKkH&2g6Fen)J=E?Y*Nl!pU?K1fc++MqPe`cQQKHq-Zq|>*BCn_aH zzolN~=o_iyCJYz$u=Qsar2XjVm*R-F2@^=*%0m;EYAP+5y@NuuXi-1!Ug#06$j4Nv zev_Lg2x3xZ>FP#UxtfkbPu zFH*RVG(sFOexN9xgEoKun#(rIDk{g6XWc6)p>C!oBupZt_=SE|S=q#>g8bU1`Rh=O z{2JGH^3rh~C&n3k)7s`dO~ZYVF9B5mNj)WpN;kF@W4&SJz8s8Wd2DmCpio6O%la zdn5N*@**DP3`|s(3FvtPNRDMoUokmu*-~|(QP-qm*?NL$Z1BY|Ml5$QVu%rqpE zGufMhnUZ)W;qs0hK72hreT;m6z3AzaCu3|pD!g}QZSrbquAT7Ty1LFplitSMzW^4( zj~yvhFMvs7bF=TJEfBTuW2d#0$tC zhcAex2&NiJ*t)#?2BLi5gIsJ;3tg*|n4WWVf}td*tJ-jTtts6FhHQfIgAT;lQyhbA z=x(HNA{AN%t_GNx(&fc*$Ud|P!z`E8lT(4nlEaXF>}Nh^&ie=B7OVD}%9A3IV3`oR zMT*E*c=PE|FPw-uK4soKLYIt)35k!d!-iDuY^yaA+vE|?51W+_rtMSc*s_8}DhKTo zlNq`3k{xsBVm;e3!uxdW{{8oHA0v@{_VVTD=L8acd~W~FNhZ`4!-IA4h9H0I_qE_M zWz0U-yf=r;FxyqGz85rpEeBMBG+=6_r166Y<#*y<9kP;_||UrNl{+ z%j3W6bR%Wya?W0MDg9)rKGEHCX?st|c0un=(0m^sT2lP%5sK@FFr+bI;n>@7aWTZ+ zBjj$J^1d?e*ps_$%ZaAYOpzR)-8*sgss4QgxHin z%z!~9u}pYM>MkQWOAKoIyc?FjJ9d!r2wu|A+6tT+qrc@T60%OKG;c321UIb=G0b*P z<7Oc~<&mL6SKR&LM6IR=kV8XyIx4rb!``4$Z13oBL_g#0R)aVi$_%f+BQR@qwT@Ca z!744St;R&p=NNP6Uhb=T19&u0@?L`!jKfMsU!>-p^Uq zl_Ld4uTgnf%X1bAPU*-S4TC!D?y2eHYk>uIoV{2x)OwV{(*7YqY&i(tFYW&Pa*^DV z?oXf8#~QsZNfrpYx9Fb(W(200h=^!e)BshvjI~zY-GT8DDxrP4>f;5bdEgP%dzxpk z=S^8B^bZT7^bjVQ>WKX0Rb^!}ic83>_#p$Vl^;OA7?m*s{GDYE-3xqh|8B(1u$pNp z-+lxC5y|JQZy;>WfgiuulvQ{C=B!kG#YYhc#>-1-n>(T3$ejP>7iaqqsx_A4btg}X z<)c9)adTbp*`XTASp$=8(4iW#>~WzH-8_6a1&`zO(I#L29l8b?6X$i1NV+`UuIu~q z)`ab3%8IkXQKLTIwv=l>EiUMH#}st7G0t6H#9m07w@x#PP`f`s&cvjT<|K_F zEU356v=OwsU#=Ips`K1(fbZRlCFB$!9xTNP6!?_Rv$#~ksew>hCT&g4Oii7$aA6Mj zoCs+2K@1qsH`Z6fA`VAKzXU;+%8}!T$h6mq#tRhcD4}6O0|SE-OQqZ(j(dD@Lir0m z8LA?d7zX32da4GC4Il?~o$OKY14Q?g6F*jLyOtxV*k+wMQeZv6XPTfhiKD6=sU$X9 zxDZrEUc_;rRas}QwLa)Dozg!vP>QFTl-?BFi92vcHY5l;)KMY3B*-c_5OLzqD=PR5 z@BaCxv}TE$-kO~|Z`x^ldU??-nJ*v{fLv%~QA;)7Z3Q3`AQVyc}Pn;JAE$O zfUDi!RH%}+ERU2gm_jN8SBj?$Di{=3ambL@N3Zs%M4O<&W|lynVSD&Sdx+s*1~ zXXYxTiy-QNH`L(MJsQVr>H*@1W) zlbAR{tTAz-%ij0q`}&0o9EHOKog0)V&zM2~ zef=7>^$Phxg9jgph$zm_-?B|=+bQcslko(>U22rp$RkJ*X&8pcBjGmKOR^*OQsg-% zovD1x`8zeGdzQ4})0QhL@r?7ss6wF6Ef^24EhathX8XR=6!EqUex%wEDe2<9alU`b za&xUOE^!;!L%7zv<3^tU_CuSHCgAA06jdH}O#b@mb;L%!v7&g~fN5!GChy1pDfIzK zBsaG`cGHVqapv^t&LYFMcD*%w_H=Vf?X*W_#WRosXj4waySBL(^miPul0~ByXvxyQ2h7RsP$)qzr0r4 znenQm1nKfqa7T?3De39U6P~h;QU3wU!N!4AIxH(oOEJB^efN$Syye>huh{Lu@qBQ- zho@)M45v3uP1-_v269~G_D)Vc`BN^MnVZj_H?L&ID_%HK?Z1W82fioUexxOetPeP| z(o#~!1M4#xw0b|P$sCC*DeeajnP?qso4WY!1J@g?AbJ+%G7Q4V3K6}woOAvF@44ilkSFzj%BkI00S%& zI%DT*YP!Lc`K$~#Q)1wI_b!`r2!6rX2}5iZU_1DLhPrw!dr`c-gh7=jsjn-zZ%R}F zM_A2r9#8Z<{1t%N~lg0Xc!H-bykTw%HTLC(JFOrQc7)Y z%cS^Tc{%%b*?J8lFbd|dFez})F{lZ05Cla@pFb!HgkoXG`6w+zO1P%>c6JOSb@lb1 zQOXtoNVT_12ZIkE%3`)Wq;6pFYa2fZiI&GWLGskbu;rAs%!zMd#u&sA*`e}Vo$NRV z$7G8iD9*-~N-a7ZUnmIr1^)Bk`hmfR%%MS+FCWsg!Nuj`sw?CP6rtZ}YSIY1ot1Sf zbPL-hKM)3)b7tjqZdSHvJBG~sml-Eb)gKiXCr%gvT2nXlq%yDZ;Lg**H6kq$i1Lyf z{5sNI+b{aX1|^|zd;Q~4OnXNy;(8KL9mXabN*^Py&2ob4((nEWG>%6_#LFWb0(Rpa zgqWJ6vJ!Wk?>wNp-tXsffswt09fvBZ@`G#Iy_~U8UPKLNWX^2v>FFUiCduw9l?f}u zje^F7-Pw`Y0nA;f3Qbk#oGJ0Dwd;5a(yRCU)LU9uxH3!mcg_cJ&Sjh5O5J^$w}hMB z8#ltV%TZH_8-W`1L%HA1ow2$+8hoFZ<1GIE`5rGnQ48!mQGF7No>WN~Cgc!Fou?sz z{RLsNf`#rE@4S5fYWZ4Wn(VVDSO*cUbMI(Jn5!Q3aH+miRVB@5eFJ zhHro?N~G$KFYA4b`Y&&D4NBV*>g%9@_KoLTk6OEP=Q-%9ix<_dnH*rq)S~$R=LZHg zDQQEVU03CgQ&eILwynMG7YF#4Gb^>T zl9AgMC4Bno)fae&rgewbp9L&Up&TN-RF7Of{>M*(2 zEw4$-7+>ex(CV;eja2WHJFRT=32wifcGIrngvLur!(+By z!CBol*vCsCeq{SpTXn*OqM3btGsW8I{Ww`!wuN8r}cb5!(+bH9(y7N zQ5#dpU#N~0OZT%$B25Y=NMdfTl-}pWXB&$9h1~1R7mQ~SNqN2}q~I~DM7PG&so}Y< z|ACqUTud=q2F^O08@#~mJ^aq|fQ`7~%)c6LZ_7QuN1@>u=w$P-lgjs;x9O{#yWzic z*Dmxs(wEh+Z4Vc-pf+q`zxT1vg{)1l2`c!y)&I{Q-qSq?iI_0oY4sP>QsQebEgp_J zF<@Gr4iCte2(BRP9(`W#dHP16Q}9`R=>ahzP|PpN^Wouj!Jbr+sXpKe>@$yEs55N^4Wu zgZ&i!_ZoH-?eD)ICDO$4oY%%We5q}dn;S*5D&0d+tR5yC(znIaGr@M$N>V|1H;C-- z^U3V$-dB|Ru;^VtN8Pe3c2`T?l@FfCccVtuqa%B1JvH)i&zZYbRWYmA(UVc2qV1yB zoGz%Rc3<4vG3fqG*0`kA$twS<8hiLO`~dJpz24FmzUs=8N00o`Tx{{s=#98ovI$)X zM{9%_jxWu-<^pfrKrCBcE@5;H?kruBa;iQd$~pFyiad=!$$o^`P46Z77SeYUykbfw zqKse7+taBflJ1$ZVY1>!ScMwey6C0*KPL!`w#|Gas13%>U{QHzGd{QWb6ilD;NBmZ zx5;yub}jpd&6~$Sqm3H}>del-V~iZ2We3ak1(HT%BCU0z$_Aa3lRPx}dIQlWeUbs* zz`(v|2B3sr_3pQgjZuQ{Uu}zWzF{8SPx25m)*nvkt$ZaC=_~Sr^CaiEXYlyt0eO=Oo;~XXB3OtTkG~0x zc;O_$9q~NDC$;YQNz~(jGnaJGRe&*55T=eiLi7}K87=64UE3RPDYA{a2Y;60>5{0t zFB^%-;8qey!r4U^1Q1B_v8$-A{=;wbzzZ;@w0$5kUW<2$xP;`@)Yz5h^tYf-PElJ@31)*HdM_vwjhMQA z*~Wdth7roj^AOJ59UsfPf#~aeK%!vo+_|&t)a0S>g@P}tgMtd)X|YYV_w1kb-))uu ocjp`ctJK|#6p7415_ zk`PbG4c~6qibyD+p`ne>$o@e=Aw!W6eXij6b$!x7U0&%FW!u)$;yRTu8l~BrkE{wr zAMQOmni?CnFh}N< zF#g|Hg1x^EzQ~XCbaC29-SJZMRO2xtc7ov6tSnkBEv>k8X=)mryYSQAu@#!%|NAoM zX=X-mvrdzHjDsVJb+goboYSk}+mK0TN5{nEWUzQ@CSHnMW_3+X_fiu%QRDx8mF{3Q zF_)+ktX4`5hl;an>IXi(9Kgm?JO<)T8 zZLdC~?=*pAXr99LpG5R^r)0?fyXLPu>YenHwwy`>)r2!4dZ8iy5-Y^*nZDVDq%!*Q zUFTZHRCaR$9JIAsX3V}iIYyDy|LtY)#eV)m=D`=Ibn~eG;FutUE`jsuGZr3K?|a z6SV~e23ky%TQBt_JZ3W(y(^@csW4e-PkH_Nbpk@d@!dD@=s%!psVf{`MrZnBU2(GV@UlR(Q&8r=rSG@XugBRgN#Z z5%ql<5$_O);ng8zC@~*GUS6;Eyg%*r>Cx77h3!%&QystksscPdqPadJcA@iqdHt&+ zO_^RC?Jds1xMkhY$OycVlag|7FjM~Kb5U{eo*0(7lY_OFp(F`{Zk0}h%~BZyK7M|b z{~ob?M1)>tT45n8HMQZ{-yJFmi_v_~wmAu^@L)o&i=(JT;N4D8qwSC6D%>w?n#O#5h1xOuh}S}M_+ zxgw5xjA+uf=Z25OUYSnhw#^Kj3j~rSX$rG|$#u9tWE)5qu z-|b{VBd^iaLLkyd)+EBSfBYar``Eig>HS4=q0)X0mr>nu`%gm~iHj5!c1v^fm+0v6 z)ivSGtGtomANn)LQUT?3FTOr^9?`kRuAZ)N-Bqj*#q!h8oj*EdfnRLWD#e16jZfaY zmsAE6s}sKmtFf^p}-gkD>(MeX#X=VP@HrK~)?!4+PGV?3>MT>4hXsE1-3GH(%@zgLF zeLgmeUPr>+|56|Cz2qvg0+(-XJM;|FmzLN!+lsOX3SZ+CGHdzmQCPU@3Y*nW#kWW< z{zMI#&Ncg4&4js>&pIrX$CX&ElAiIbd7bf1aS|bm01N-G&dHt%95IdFh@=WFQ*G&m zUq4=c8?k*jTjOnk=EShwGZB8D{sFc0$&`9s;95GfuyBAMump2a|IYIZPpn$e}8St)A{~{mGEI za%FlFcB9WyPag(|LYaYur=p?)iv}$@Jw08^{rCwT9kR4^SYfKI&9Kq?4tBuJrhG`P zn^QG>yu4!r14Ry7QzRrLur{4`+o|{V_Tbd+3muU>wu||j7&ce6Y5BXznP?xmpaTv; zAP>=O>v%MxbX`JjdDC&l=yQ^i&3CGd^f29hy-)0wO4&a$M{fT0FK72kUn%~YWnwO0 zq5D@L-C<=)q&WKa_UO_BVq#)-7bnO}OP!~< zLDW()%pMnK<>lPTZ+_10yb4#K!J(E-oT#)n6&DwmmzP&mR5Ulwft;6s4GG!h&}@J| zNSWS!Hh>y~h@08%WWQ|MosWhFzyOnad46%RU2mcQyc!S~s9SRLe|P1*`EiD&U&tnF z_0uOEG<2l7S*6;W1R~Pa{M%uE+E!A3dXQo`drc%wS%h}C((ZZ`eD1XJFKxFva1WN7 zcBSza_tdngc_(+ego_w7=ZVWqHEK5HjGUt*OC)|sx@>uVBY~>DGny&>I$u{~W22_i zLL{D+YglCe3wm6kqY2w4-}`Dc&Ih>~Rd&1y758R0H*1ahC^8jJE<*_knYB@*2lyN| zrKF_x_xGEbrSe9W78W2)%f_)wkmbi#-b|5)3S-B36O%L?i?;OVmoZ^^ysa+;!RzL_ z*#r}8Uk%?`zLHNF)?z{sROEcgH2tL?Npl}((v08hyRX=>-*J(xE6d7$Ym&^ng~1>3 z_Roz7$erzaKYt-1FYWgp92vQU#oVRF&(AM-w%ybcgr{ck=mpx2V|7eS42S7(^==1U zm-~?a14=o0`Pe7Y#9@!<5Z=DNChT#QmAp($d62&L3))DE25x!&2Urr`hSC^+{+aU% zX~-yJ%>0?U5ScW@e(b0wTh!3p#L~QKrX7PYtd6Hv!W=qvbQ%>(NMC7OZ7mkLWyb<|5w(SG#ZZq#!dXPT62w5+2)`0Dyb^$kYuG$|zmK%NUExv#&dz`Onu^INT z`xz-e!ote8Tal~LtTP^XTBAvdgHx>CaD7kM|8dCN#l^+5XV0i4`q`ziZidXgZ}lc~ z07UjdMpAhD>A}4csT5V^T-r$66IFKx%5&zWlW`#+PvK>PSgQc_Yvf<+&-pm}cR=5^2bc*4-OtNHs^SxV;r zY6pB6q5pk5WMRm3>&q}t7eR_Ct9pAb#hswq>miew7G2L2IPnV)b*wyLf zk)dy7~#+x8k{Fjo}_O+Nb2=i&CJl%)7#(*ztgsp{KAh>t<-G(XV^rq4cfnG7q6Wn z@zV2pfUNqET+Ck~l2#-{6rQN2k@-vcDZdyRIT4>rS<2frvd3o|XR99x?wcm$3??K^ z424=g;4~EpAKYZ)F;27paqN0uCbi&BL#A8f`nrZ6mK+VvBK|K%jmoYVmL?NHc|M5x zMAu!3%_eG$*cADlQp_Ak?I@UdVO3=0Pw{o|P30C%o^PB>x;TjiQ`w)q_o;3_X{GV6 zw~Wr*j2`)2cO;+`Xpe6q_}x>)mEZa0t*8Qa zpmKxRH83#_i?v$Tdx$}=izYBDCx_!eq?iMYj3?dw~&5#kPkA^SUyIyN7xN{W=b5t$0S2^i#qP-kLd@Fy(t(rTVx zwL%|yder60NzZouiY2xqwc>eYk){z%7#Cp7VcJFRhfBTpVwD&=Nn zmxPNR$Y@4Bw|uwAa8SRaBJk1q*yV!h0L_>DdR?57qI`xzL*m z%QE54w9?9_O`(RH`a|p#L7#ryCUEmOzL+?mo}RYP`BprvlgREVER5wH9j!EytC3LB zlQ#6Ps}<%avD9`&3$0gP>6BEAn~=L@Dk)~ktlpVR7F*U=?C&Q_N;JgQpQrMLE<|53 zb2E}wIpIdIj0aB<(MH*Xq_x=rp4Cb##0vZP-B=b#7&TkZZbN6FH=fLlR0IDd{7UY@CD_ z-z(<#uWwI?YaVd33;k>$p}->bvd{P^i(sf*u41}YNd-B`9#2G`N&Y~P{6e!PHBGQ< zp%7pE;opn37Uvg51)nDhD?jx+BX;EjJ}*=5m8qM*?kg5aeR;FD$C>Dzq}smvLCWU9&QdBeCjA5?;ZQtOSMfsOT_`*=@WTmh|>*Mom8)T+(Xfuzee|-$2lAUJA zV`087V@xm-L3tvI1tnjS;Lk>%nW|sCZHK~>p@UDe`vv>h0(6aD=~X9z;i>25rM=a+ z{n8)k7m)b%X)}bpPm6Xtd>tpEuW!;iFfh>6L`hHIHD%l9`M<}16LX7nft2zAr))~# zs$DDJk!kmu{Te}>#g}2z*tg{D#7_=B1@AXmcWDSqNup82wR|GuNa>lTW%2W+Q5Y+_ z#nB3F{dJu?I)cg95WX~4==XLWJrVo+)JGz`@yWS}>+HGr0})R?pU+_;Q57mIQo+d# zhI6+40_En}m%%e-w8`0!7A}wu&rjI#HjqEs;1Yc$x;Z#z3 zZ$26s94>hIY~ld{**&aEwSb{N536}7bu-WdS&75Nvot3alHX|cW?sx$9LJuP+zu4a z#`%Gtp0aYkt;ny%Z~u!#Y#opf4<0;Vm~6;R_!q3(cv_aBBn`TPCW##hej2oLQHoq- z-mk(tXc3F;LznmNCL4bh7f8KcE#?u-DC&3e)c2IEmCQRVWefKi634{*GbGNgNV=i! zqp>t&St8Q@@e}$xA$q#9M_3+~19jVENr{E^eG(d49`we0vtda>iG!2l#MI9^@5Ehq zYLfMs&)-ehcC5CZYZX9?6^Z#bUxqKYx2@eo&f}SEp5s5w8wSwnAoVZO2f)hs!)afVMeJ?h?a3i^r=k)DcH&jab=*bM9+btIR@qftns4#?_cQwl1~y07 zSArjL1Uqy*VrP>_lcv0TKLGP^-^e=qwy(~n#aUSU+fKv%J9gBgEEL>{ij$6qGO@MC ziLRcWp3uiythkjt{71!IVE>^c!rutxxa8*QU$%%XEG#9@C_l`tR=F%q zp_(tV9BaakK(h3CW@C6~y!nj1K)uM;%4xM;E8-$hwyKVJ(!FZ_=0~U$Z6w-w|Gfrg z`lrhLS!yUQ+&7zwxhoUpduZ1;H#Zj+hE}U=dH>BOmdGnw+z=TwajI^j_BZnT!$LM4 zII9N6gTeD}V)GOlLuj8kRtrvk7rfa=U+Z1(!JFifR-G7GJ~{1$PxO$?&M-sD{28h2 zQSIAn9~a|KD7;^hAk^PlawMPLxc*m%?Ls9J~P^-_mu~crK#Q1=YJ-z3%Jogtfy4S99+JC8);ZU z^pB^#r2MmoU3KE;T#>rig!;u;=bm1$#h1Dt(NY~_*GHOPFLP#U(IlBgp(pB^rvzc8 zgw=`Sw%`$50DU z`_cd1n8(b_-}(7`6ut+k?BRivE)Msww#_Ym&N5(sZ!U=V!TF-^&VyOT=Yr;@*?O+% zZ*j!lma5Il{qF`IQr|<1a2&l5m~81~6BNZX@;ibLcn`28&!ft4G04y+-LjLc+a<2x#}{%x|2gj!E`>O|xjwgdir$Nw6p`lA;pKkz z94`D|s*xCsny@aU#hb^Y3(_@Mma@qW+U4%&ylrFUzgFy^DdBNBq;IbXqyIN%=GB!WptL%Rv~H z%YRoOd^N1AO_XeviT4}}a?QozxMgQ&r}@w?IXp)7ztDjrkw^{#X+q@3|M2R!*f${x|PTQwquNknd$V5{;1wQgvcoGuMQ19XCWGA8re<%6q{YuE- ziAm1Ih)~hxPD{HXXTo@r%G;Eo&V%{9=uNyYBRpMofGg>EB6;rKH!af??Yk!8UdF8D z{aKg{pY`2OAhmmvge=(!D%huJ`u)9ml?1~AvO_!4DN29sBavlo+0ef<&)DW-Wh~D&O!|_EDiZ4-G`zs~ zb^KeRyMReuM8LuOPARi`Mu@ubv%Up_lEYruJNk1dR--jPBXG`~?~ivExGbmU`yG+5 z!q0$p<+7MCx{C_5!81BK(@8;&|2==dIc2FBDw)+GGdbVyrw%*!5BBC`Y!k>FZ_K_> zzVnOU%1j}TY#8G`6h)Tv#wR4*l$w(Pmx;a8*6X=4mbUvM8C>qRf8QJU+%51mG#b-- z^=Tb%W%E!;?y4MQBszC!Gt+BS?vIt2`r=wJz8J7`b30#3@~8z;V}KsrS7)-y0TUC` z@~wcuzX6R>MfyWW;JAEwipAcYy4+Aej%~@8DLOh!aqi{qYQQ8qEB;;eyHty{>+Xl# z^G4S=>1l1{$VBzi)5*zf?Zk(fdKAar#p@Vs#iLpo2x6d(Cxr(m0FV${mb~HXxB-H z=tg__1)o!9W{@Q#lRo_UEs*!vGFe-4`q$-?w`t4EC~uF@ggV2o2{u+VRXO3uFP+sF zVCT3W_pDjExy(4fuMi)9Cy65-{?5E+5qZAS>5vx5&RIYyVl<{y?_y`A;9rMV6jZ;o zx73>?WHy=)I$Z0c=8W;k{3Seq*7P|{ z@>5|VYh>G8u*4?s%I%2;Z6GiJ z-5(8W;n@&cla;sFEf>F6YPgm4)Z5qk`bpeV;yFybjoy9pJw%_|%Lyg@dx{p#-@mn~ zWLOwUAj*8g%RMYQa4Wd7QEdU$B2o`0#roa%2aPO;G-x9JDOJwfN;1-)B}JngJav>! zOjbK0>6CI*(-dfr)_>bB|4IhvC>_I0&dAs^GJ@A;P1H7IVy~k!19t_Fw-o-VrTh*$;`WGx+Rz&eb)azXvlKnT1T6e5>o?DbU>UlJZ0Dk`dGnCrH=8SbgkQRTO9 zbrL;vb`K8R)^f_8%6z54QvNPtd}mPs<9~fk{%3r=S#m0ZXJbk<_!E@hA947LZ9aH_ zt!cm`mg@P|y+M$IZ|3WDK^9ZdPa>(OR?|5Il*an!Im9@`Wc7HVfe9@1!_wM$WmI9W zqUcpp`iwviH|WqyA2NX|wxJZN6O)&>g-YtW4W!{cpTp8Vj^EZ3*667Ku#NH`ZV`9 zTcwE8e2m?8QHna`V~lNv$bV|NwvQiSoge+L;QCX0OtZdK{B)E68Wxe15qW{i6I=e4 z$zUNyo~)PN(*?yTT8#6PjFv|1pQYKQ`_axl==hntg8h!raJ%t;>G#*usQBmQlq;!; zQuM9=E{ceVkp0SS4PgsXn`wz^IMuVjM(eL+{vSSk@VtR4lfY{aiW(fHoYyRF{hN29 zdTV-e_1%-d<@t*hT&muGX7p~`rTJ_oHsXFthbEeJ)NsmiYvoy=!`*qVO+^j5A30fl zeN+Jt`D;VR(PAx=jEsA8FRo#S5hfXF?EQ7Em3kWF@9#Jt_VO+q_wFIHvIb2`fJ%Ay z?wzA!xzy9W?d^K&>fqn)$}xSJql?|~K|w+HZ#RK7oZv`$MNnE%$UnvW=(tSHA|6ce z2nPp;grsL_?;j3wMAODUuUf}&nel(1T?{qX92D1LB4j{}i^H6Dc+j0S;} zKd+c0ln)rF6<0z7%Af21Y6}Y9Kk5vn9OYjf{{O?cfbt(4NBKkWf2a7zh5Y|caqE9q zX8gxgpjh4iH^m=<{%^GZcZ&Zv3T^QW?DR{L&&z|LbA9^s35*)x>?l!{#`1neb@%@L z;E<4z&``tHqO1G+qtkrGPW|f!Rzem6>98?Y0)PT41Q!Q~3d7vSMnYWN$$W&YOp@Sa zcXy7L8rqneq+|!wjcz|39UUJZA56WvBE#N9NL(D}{Gj@$z6`A_6~HVMbUT5E6XPx; zEq%V%E2J^@_5H|i5=-j+--byw$BXfcFDleGx3;z#5BdM9lO{+G?EBs)1U>Pj@gCDx zUi%IN-c9oFa+x4Da~t-2U0z;>PONl4Brq@#B4BJ-`In}Rtt}|%-fxVJS72#q43V7n zB=8xs6KG5Z`n@o8$^FB71H~aXR0iA!FeuGx#{zZ6C3gh;JJ?~UWxoEj#%?GEFWMOhup#x*TmLuo+^|5zPZoy@yMmZ;PjtrwKx5 zcUPBLG%Cv1c~GGjr+lTJvdN}~Q&oVmXru%gdsQJX&W`W;G!ET&LbEGfx|_>}Qv78t zRo-&4@}Qe*n%UB6#s_aWM-Ak)7TN$EWznmn`O{;z-QC?p$a@AT4KU?k^Wb~Gu8cgo zKK+{HZr4f-$P+;ClDhwGuq!toFNNYKh{lq&tvMTVYFlE^O^_yMe4;`dS*jK^rex?+ zjlvx!l1wJmmkGipu~XZXFe~3ku7(H&h3wc^v+RG54SbnF%AXU_{k#g%f^+|7xq2DA-D2JH}Sr(I( z6=b}T>Bftwp>=haFjG8_u%6Ew2NoXcp&|bkH}`mOEEElo#uyKYLEsOid#KHTE2z^z>*6J z+S}hJ5^}FTZl!z~@+B&&@|!*^wlTk;RC$#mp({cwXQuBZsXo|^oQiVHujkfFK4b;I z$^d59$dPB@Td+6%de0alqt8%l{CKJPS~eY$~dAb7kmpU#Im0S^`;K8-KX9^~aFOz`i_~N-{DG-@JJPlCKLm zd;+tK;(B^|WMpOYva&LHLBhd^E+Chws{uzdrQT0cJDVq^Z-}Ovup`gwyoOJ zO)sp}G4X#+7Dxb*k&)aXs5fr{7(;>=q%({SYSy>=>g0(495<--in0WFq zJ)Fu3j4q(w{#>vj3B`j%{OA#f)t`FQ8AT%_qgMdxdwOz_$QNi}a{+*SxHYXsk6V_) znIPi;@4Ip(jH&vFJRc~A`>?XIGBYz%S0{Ro)nnlv6h;-BnCK49q_{YOVDY)FEv87x zQ?SwmZdpcsbyPII=OYpp6$L&ac{MdPC8d{G-pceC_wR2EA+H$uapj5?RV7VL3ugT9 za>mNa%94_Sa1FYw6q;3-M`&+;Xw|u!*Ht^H-u1cew%_-14OU34E6?Ox z7+p*-1X7S@o~7}V^r32m$3dvaSGF%dJ1!E2p$rkx3Ab{o41fBxX+ENHr`}Vfgp2jOG?8Wgva0bKD z4G^`6kQ@&BSR!FzVd^r+fT3cK6amv+Jld1UUpQV$G8}Goz10>>Xjs|z#YC1OOgRxO zfccQgHuK1&2SAksc*wfsGL3;SgR>dtn9DqP{Iu84azY#)qhIjjwL7s_yPl}SWA zjZM1Cs6ab(x>aX+5Sk0q2v`@hn@r#z2#JtUC8(*Hub0bbs z4n;UECYHB@q7`VbDk?GOkT!Gm`QdoivW8l-?hY6zbm}-eHGc*?q$cu3-n;p+SLkx0 zu=M?g&qS>o9}mxOopZG0I}e{;d7d%@soEj#gG4D9OUS*gh&+xLq8aM;icOimr>7e% zcEzg4EiEmTS0ID1yGl);A3)zkA{LXSQN zmicIb9>Sx=q(YsMl-F(kqiV4c)L)D|Yy+9k^*vjOL zkBr+@vbPxAqI zdNPu2h`J=BQTVPsT{<2hOjp@Dpc*(e3=(ic4}=qVZd5gn!CE1urlg>tz$_$vwbXNm zWjemWpNRS1E1yTk$BzU0@AjjOG->vKuy|iV8iEX_98xMF7S^{nG*EqP|I}Ywi?9U4fAblen8X2-1@JPvm16neghj7ay~a7xNl!|ut2yA| z+}s>E@@e0GW);)y!MR&( zJaC1hxeiwb48c#r8rwBKu9i14GB^n6ok-Ai6z4?maLhCh7D#(rTbs!B!OX=x zwdf*y&`Ygj^Qy^z}>T+n1~3#A3{+s*fifrZ@gPejJw$E7pv<9~RYS3!WB4 znjsLb$gSD^m4PnaP$C{(Bvlcg*~R`7G+jVYkdRKnnmFZty7BYpPk`NQy}F05utc~+ znAA$MlaoCaD`YZGVdbdcHLnb0sF?>0mFNHc`?tvtvq%!=J@he~ui`Ewp(y*|;bB%G z1}qT?35ha`N!>@lG8b|DT;G5Ecv!}s4w0QtZ+pC}Zx9PL70mJZ21`9ZV+weM--}!4 z)P7`PVTsE7CXyV(=fH^ko`V(xbI%rZ3l(*1ysVe~QMYLLJOC1v=oK(ekC`NNJ$}qa zN}2>qdBu*`Kq5`90vuV0_OdDGPLq;}BsxDfoPz_ftTY1vx$>MvJ-K@FCqK1HOdcV- zpajJxrMn7x45Uj_NvIBsza51CQ*kL2IvA8kkls34`_$An4rw7SC+ZcITA4+OYcd@j zoyuGxTJpi#h+56`VR=^Z7}Sl1Y<_O;(P8!P;;AZd>NP!G2(73mv23gc+#y#v4`|D- z@Y`NGFwfZ&SYEg97mj@Zlr~Q#6n0xo>kj8gH*|&bv@%q zphTus_p->yjRV@ir;Rb%rgoXN0WXfrY*gz3#7BVxlKv7Lx{5G3zYj1Dp zfuP}etlBxhUZwK^Et}vZK#>3bKZ;4KCz}@dvf(7(_BK+FuB+PuLV_WvqzzV`GRq3+ zeURr%Jvt1N+*-}Lx?Zshr_wmS=QH1laHzOTwT(gWDF7<*{r$0}{)aP$x8 zi1tOytljLgRKV*ADV;%!ABpx6pTlGjKMKcqcXr^nn$X>5@ z07Jd>?N7uHp0D|MdwT;Z%y*=zpwN6)8XXg3q+-zV<=NtOSp46<)z5h8ZXnJZP)U`e zbPhzA(OjbIYZ7+^uQhfNMmiU!$S=zBq);;B0BO9dzVYPxPD zYHrUGhVHTCL~`KOTc1HD!BG3VUewFF<+d~15~csuUD23hvH7ux(Mo?BhHT%8U6(pK zf(Z{E7(lV#c~OxkR~r(tudC)n@fdG{Pfuv|w-Ni{+DPaS`m)dHRli;YcL4c$19Af} zSr{24&>>{P5FKZHwzs!|^Ja$xE{}vw4!)SA78$}87MnoFcKa0+6j;_Cr#D@JX+GU% zv^^bo{A(xrD^SD=lRDC%v4Ir0_@eXAfR@L3Bv0xkm@I=hddya)FE6;FS+Wp%EorJ4 z^y4Q(kmXfuD=}-irdqREe_(ny)eJYqFWIZdo$bjLMFg{!Fd7~@;1LPKHKYt4?K>uJMJ_HMuUxg0U> zHzrizFs4a2=fywHM6lWVYb1fU z#M1~Cq1z;_{8{Rn4c^{2_j*f8O0uU(1f0JZ+-y?`QTW~X70LMQS%t@C?fEW)TM@bG z78kW{jy&)~u$?D~q8`G$R;6ZBZ0F}DK%5E zu_;WDJp$t&24I^}8#8Jz;QBIo^ zJbS%2ZlnK+F?+TkUI)IIhoi3YX;qjs4(}96rE~_o?qT*HG*|kD=s$3I@0VO4@4lvNgd2B?+A&b^6 zMkY`BsrIg(uToEo;#T^wZFh03lHbsv0sXhO);TubQUW~l-<>(>8`xmdhn|JsdbSxT zB>K88C_7La83Y6-FQ`>sAFTf#aQE!$lG^J94g^pRktr_PO+Xx+ObvBzr=*JcWQ74S({wtKvRP5nxSSQ1TL#r zLw%P~yLtk0WXWWG)lZ1|~# zG7P|+IRaHdNeNE24=U&T*#uQ-t?uSC&gp*ga)5WSF66Y4Ac>B~dCqbR>o3JMu9jJE zA$jzJ?!L}uCwCPT;^2skI$aJHjXmY5r|ePWJ^uzG=)vY8C33yiV7foZvA%vVb*2z0i&t<`!`%oMXA#|Xf5M0 z7^n|o#@rRHE1{L>>godh9JXY|Yx+z~Oq5Ewmz*c4%gHqo+0AfceWZWt{DBzkyv5ob z2QD1eBTy6phlAVr${(*M?!7)$bDA0|Xw&gj6OCL}R@Tq+S(k)p$crk2Y}uziA`kHK zjY_DFs0K>&DJsgjKxcGvcIK^dIf3>Vl!`s@CVXyx$B;7*+iGCzR}b;I2{ot^H0=AM&B^Qu6~<=g>YVZ{t975^^Q>8VpdUwT z-A)0N6T4#?XO;?yBV@mv`ew=;&-Oj$SMJMXctlF-vDoz(QG7K|35sHE0kdjrJa$i$^{4fIE;Ds;x?@D{*Iivrx7Pe@Hz^_3E zL^fJ%f5}9Z1#x1gozMmg`Z8f77EEd`aC{G24FFw(7JluITt6_GP=6V5gJ5O#Nb2-YDSJ3fOuJ|2-2U)_(O+f~ z+7$pg-G0zQKy0|st;Pc1D@?}h;ko>W9UD8Kxw^JG?b%J`X$#`b(lOj@6udOK_8rj@ z)owRi`jD@zSh{lR>RnI7BlV6_&ar!o6UxfCo?|V(CZu!zV<|-u#*CTJPwjsA+fYRV zOGu~=dO>u2W-`I6W6I_<3xiNtS754CU9nu2)UF!3RA?rO1TEgN{$B1&efaRIS)7}l zrEl8hb;l1qI1fJk{QdREKoZT|0Ga!D?&y#J>so4GgT=+g<>BG6r(jf-i(fpywPm^K zQ*37vTVZb{EG%5Lh`KgbLdWKq=;9oS@DmF=_?_hi0mE(hp}cESUW6Ev!L{6b#YIC2Z7i<1NC6SH>P)WoD*i^86l zcrSHO-elVZkLsCwcvx7&PBS#%FJHcdp7uT99Mh3p4v!XH z{m^qjAJGhIi_91a2PCF-?R>D6*BH z4OGvVhkh6XsU;dFCRxWz)z$nV9#rb3XqFE;*~uA#R~;8)4P!i;N_7=tA6BM!vl0!T zebC~L2^f7K;&Qk?<2XB_<*@$E+aM7WCq^WJ~zX2n-~;DsO;J*1X# z-RtH8k=xTLJ1n-idwSZVFGWn?z=?9 z`WC)6Y!{EoP5CoaW^4UTg#gjU4n{5z5fJM=^Pj`@#W#p8p0 zjH_)trU$_f^ODiz zI2Q!F8u0@llPxB=GqxW5j0@4(5bGgctNeg<0y#%nUwID?7}orUDu+FMTlu9}MQIvW z;q%^X3Jf6dkp?CiXVAk5|7dc?+7Kwv!I+}8P(nnGgtN{qW*q;>**XN-qB z?8$&#UO81q81<6bwLmbRraIrhe;+#YclHAJZ@*}xk8NOHPr5wIIR0hCE_kw>+S1Ze z+F?1G-wSNy-q4BkBd+w!sRl*sHDRifiKh>vRxZyKo&Wo zB?GSRJe@4iLoMopcx2Eria=C<1Wy)8(XOxWZN#;}6ncmDI6empMa4+{cDTzzLA;lr z@O9jiV`HjHp}({?rbQxQzo~I2D^Oep+)9u`^{+)rwgi@}kK}1NJ6GzrL%*4DPO8Mq$1 z&joX3Pg(M5D1ydBGfdF_Og^2RlT($!72uiL?_cm)7|3l9uo~&DR{Ed#1?!|SIKnN^ zcYdad4G(Xm$0Z?gKl^KqU@1|(%1>(MS>PPlAG8z9%*>SK-)a6QXB>@SsQ}S_unX1x z>@RHhR3=RLF|-PL+zj-V%*3qGt16LSzPvLmw1W9W zIg5b6IpCS}7vWSw5JS-HNGI@?fW8O~j%3;{G|#}c>sj2=H5r8m#m74M2R0%C6U~ab z-Oql04wS*=`H@I6END(n&MW3JX%#wQX1ujRUpX~z4lGvV{_myqM({W`g)Wa}_a^e6 ziANrbk+$tDbVjo=-327y-rf%3gU_t}p{&dSECcX|SUPF2Tor=&b4pp0oo5X-i^uh^ zm9laS0=Y3=Cv@cBH{8H%))qn>5D?H+7Y+3o3XltQpy2+5odM|!N`UwcgU@f?zI`Rq z5m%It1oTEmM?)l40YPVWK?jPntfV9Xr`afwt}kA^FpguSq2Y#o{HDdOC;Ka~aP+4B zTcwof@N9u(5r7;7t43TDJ{bkNM+@lFA$ftK5nE@Dii*m{goDWN{_2?U;I0o0S3*XH z6BB!Icv$dsy$FfOiQ_a^1yEm8U7dwQGJzH3@3zkH$q>N1{M!Mf?D)P6YNelelCC}) z0OqeNNoabX<5Yeee3HFDn-|P0LOsMpo*9uS65C`bEohv%5u=3s+>I7(N;$C)%2Zlk*T7jZ#{(I!gw7d;6;%zrPXkNx|YX&`j&kd2}cw z`im(h%wQgJkR6{&ikSeWab$s2r5W9)z_RtzV<1Z_PFh!${Sio@NM6G2$37X?qi_BW zN19rvudlCxfx%ei^m~GPGZ*SSM1;)8kULe2^Ex04fmKpppzGRuMv!0;Z{Idd6f8sb zFCG&K8F?HM%EiDC%wh277m)EB1i?9XNk120#iifBeS;2dBv~v7m!*i1%o`Zm#;nqW zRuL&yR#xs-hF58F!}KJdd`4Mq=3fmc|AZ>P2G;E&kb3~xdvZE+ab_KXpVmdM=u}vTL z3a+bLaXpG7p_!OY+8?Nh@v^v7mBDzNeCi1m2T-qC!jP)OAAuc-5>%2lF}g{E!|zx-O?%D zT@rE!d!N0}dG7h$zu@|;XRRgk%beeM-!aA~#+WTSdr<9wOA5yDG}p{7v<0h~)?4SZ z0%=_BbhHjkS0&!@-rhLi7uYG2>{m&}*f$FyuLNN+@bH{LB@8u@t%(Uet67vTeN-{H zEmJcxupV)AyA=XI2{)(!?H>V9E)K8pej3Y2_yTN9w# zby;Q_fHl$k9$`)%riD1uO$0eMIs_TG;#zn%Z}mTNfF$L#6rl{lPyOlqJ;H4xG3@3z z^SZaHs#PH80;U0_=ltvpf^`f5k?BMU4bYP?{oyBb0KWI=`ksuE?@v&5D{?|g%z^L9 zSsAy&i4P9$1Ldy{h#x3#)ZFwJxUNN6Fq2)L&t5GHjI+T8h7{Lf#p6fbfjJqgNRI0Y zwJoSR*N&yq?1C3hqM@t+@f(YTYc4C^C;qQ`OIw>(oy#AnmLGFlr4EzU%Tl|Xt!1#X zuw1(+c=OjlD7JuS4{n^dTTVI;M*uYj3!G643c7>QyY?o zhN~dw!q@|5;}Lo_V@lPI(ie0&FqkMSXAFNZiUr0KoW9^w-+@Cm1ey$Er6nY)Ef+qkGqy1U zB!#IOC*Zu~NArNe6mby|iW(ZZ3bZij>C>lAK*r54ENDbqB;&)fFS>5ve`jQrnJv&a zA)Tq9Sz(cslam88hMJm$D8ufP@>LASn}d@EU=#ctyg42(u;CBP zlpQFo@EqzVPkyp(4n%%Wv#aWT7}%PvoKHYN(7CkV+WHEZ0T5Y$M-ga`nc&XK$*Hkg z5(n>#t7~m_wKKq92ZvLjx5+{{3lzc86~&|l?FJ);Y@o0*GMcrAAh4`F$s~c@#DY@+ zRSBSKHeo2N`sZSps~F(A_yfr|)(wck52aNMH?qKV^>G{wd2q8Np-s}(WLu%X!49e) zvuU0fNrK0Z8Nxae9G8h0-(hD+$Fp2b0o}6t34Y6h2W&>s$?|X27(DCmd%OV8g6+Yw z3cvHQq_i|BH^9Efh&_7i`1AS`%H;nw;mF$3hStzL=Oc}pKVdg0?<$p2F`b>MY@Jwio6aSII%_hyn@ChTGv@Zg>wn=bpoLW<)sUEe(hyV@zQ z?q@2b&HC&t2>vrJ2U5#_4Zto0*|9KDf)~`OaEI#4M=&_*J1aE#=XJv;bwe8k7@gYr z?;iv82s40MCAqH0c5w}$e&xlti3X|gIVYz*6#Y<{mUTk=Hh4R}fuaWzlku7~0UV0* zdU;i$9d*F(^!yySaVzjCfiwtjO3la!?d?vrGebkH%*@Oj90YQn*B1)iixcCZkiwtp zs_Q9VJkRuPXoLRax5fNl{@DMTTR;BGWep?1{!c^vi`)Nk-ahC}hD1iT^4Wv(&ES6X@#0IjN}xfaO<{~lX|~!;6o-NrHtRxS zxk_5KPQ!0Y;humAnJb&afC#Mh2fHwvW~%Sn)dRiwDx9Reb^*@!ArtA627xktUJ18_ z>(lBlpFSuGfM5bbXYx1;1FZ=>Qn3GbrmIJfC%$Df)P`Iqo|&;o&Gu`qDDfUV+_Wb= zM+jLJ6)wHbaOg}44-YS?EdwXQwcrnFj5siTtCU*yHx3b>Xg9MDA9$>nF`|gAtgN66>+u1<*ZhPbTpPptAZZHqY23MwO4&tON|lXPZZ zVyA3<50L>7Ii>{u=rQEBbZ@u;Y3A zXk`u@&IGApGD`wnE1#r#b}o!J(zud4>I3BG)J<4-=QfZ5$Qgb{F>DX4kUwdUR* zd5*-|Ca?dfO{YCXqn7q9DJg*(FT3V0q4&+3H*IWe=9JLm&p%PaOgn8G6kFQeQxZ4Yqzv_GXlSUQT7YT*R1R9!O6Z~cQ|{yAQ(DSCjf)DOhIQ+Qyhj_R z_(e2$o*{BBMZt(4f0*Fs4hswI=FRSJ-10&~o|4}!&M~A-O-=RmC>+s)up!udMf;Wc zQ}@e7a=`xKX{^MH7au`D&db||at)tS7Tp&K@BS)`N+o_`WF+$I*Eg!F6Eib;X=zKF zn;^49Y5^304Tm`?89^M^cp-#Ny zJRJEnot&I>b#;x6>7u&W!H8E}480u-7FiGJibHsh%E>y_@&=eIBfzz@3@c~#`6k@huIV3_> zxuC^G^L*~Ozj%3m0`}9T7!YYc)zCh9@{x;%!2i0?Sze}0WR2>AR2Cc@tQ- z0-kWY#0*&7F0>rX{`HO#;2)5r+}Pf3#Ye&;foXwyw{X>~Z0__yD2-f(_PFwLs^VCf zS{E7)PTSLGU*qGYz5&W=>#|;Gy-yJ{m-G@IlMz7?q*=Has3;Y<=GInML57AfEutp? z2r}FXypy+X-khs^9@7nFC+J-BxD-87FRAeuHESNqQqbTmIXt>ak&EQK4=I zzFqK;nVaW_^6oqEU1UKF#a#i#3##QG{Vdk@_Os>YWS2ftlwq*aYr(KsR#tY`|AUdy zH9rId=#TE}@pg-fP`pt}U$=RJJL2x74bCg!4<;P zMQxfrhavz>K#FiN5%>oN1hl(v0d_4QIdu^*dqpkgXASBe1Pz`ZHt1IXmW1N%o174! zM0k05z29E@gqtbYa=jYeX*v>H6oVBO({xAdaL5~S6q|1wo

(az-YmM9AI{gN*bw zH8r6fBM}Dsu`FE=t^?2RK(`&9!(I#FUK8|B3|5Li!G@~;GoN~~eqbl!HTP+~Ps2Leg(8w+wgj*UtS^FH7=4M@lm9?`3|J?jg1XI zAxs}uV7uTptgWvDMMFtNH99=}dkrS#*@F>j%5-~vet%Gc3CI0v$NlPApR<#bbPS6( z->-pzqyt@4RMZxo=g1$hT;Tl{{{Wo$ifKA{M-WgMl!0Ll9K8wrblB($W{c3&)0&d~ zJ0ZYFNb~#p&Q3nFo{J0LA5NOPh-l~z;Z6oaUkL<1V&cw~kN(KRqa%FGK`uZR84nFe zFb$vxg^Z-6q~z-Ay0o+e#YdCwuYHFa=x~Obp(BinuI~cYyJz6Ge7fYDimD9kOa*Ay znShET%m82mKoLHE{-pI^{G&ETCO3~nJ@GMd|gtzRXO37&tfgH}s#1tG_@#6>z)chY5I)mFSdURw6Wev2x!nIr=Xyr zr$s>#N5{l;djWSl>$(+VFOb}X;~ZRHo=Y)_iA?!f@`m17iUArf6Sxq<5>{4K5RmOpcR*t$+DyL*xY3~uTC-C257~fm zc@P8AV_G9yh1A^d--yJY+fou8lYLhP;74wfc*h&p0+{pF~CF!0sBU~{8e|29|>k!q&?&3*C5BG>GOII zwZmyS=5k-+6)X}uF>?b0dmz=}=InO^@k6s=x&M%uxV5=iHWCXYRrnLG<%8?{B)*|WJp)~L zuL(LQB>()~3JD2;Qfk2f0uP0Ae@@hEH8t4SsvRstu${QgXZZGaq4_ghn-$upRxE?# zztG8ngVs|11p@e3hucXZx@|$fja$K!k1v2v8UR+j2V|&F--Tyzvara}ki9K>f5%N! z{skw`9I;}IWV$dhXb%=&uNi-zu4GtW4dr?5YDQ1LqMvNb3L|b-D8A9q&`?ki7W;^W zfRu|jdMikh@*E6y?Lr)JuFwv#BzOa{xV`;%#(C$f4`eeIw$6j~?0kVkx=Ot+f*J*= zUqJO}dyL$lOTOQYsY`72n`O zPzEA5#0PpUz?u=)d7h_POHB9>)*o<()b)$kB9W#BdJ@PSxPliD%M>C3jyRH@jAgR3 zvsdIhzyJrEGu}=DEJq8+bPxg>lO#ytTKKZcJA+$%yuCB&8T5W`Y;LB?hYq}J_;d?W z!(visJPQa0kdGICr)~;lyGM|OB zv^1sw@-?{j%Mv3Sud6N7G}_yZ;6vpZ?>vAsKQEyG<4!;uu(q&}b&E(zdFFNssW46_ zN*3b83`BPzS@WSCu%fy;dkSM|ZtlBWSawQ^XYl2IT<~rm{WC93*CWN)xB^Y!P%mU1 zmx@(#qO{!J>Lox?b84Tk#|YhYu_1->WJbJ8zM-+PU&!P*q%dAV=kWgaoxYK_HlM$r zN4!Wu5kYT;bZ|Py<`nNb(ur75y4`(*)RA#gQl(ctWK$z=S18(uS$rsfy zN@$Y8tn1SQ$sHa(8T}8!ATXi`;QIv!Co;c7LOCrjKO}@FM9Q=C4-(z}sy*%{mc}0- zN`FedSUT{5e9&cVg9j-W`B&->I>2(;2HlJqGS9u??Y5gPDbJ9izcGaz0S&3EtD~Kp z!xUeE_*y7IZcdPJS)lZZCrNrVLyFaVL(@<|Rz8Mm^N$bg)VZQ5Fv9XVjhT>4-R z%c$^I_<~%#vV~d8E?R~F$G|4E$LZN1YqlmwDjMracf(8tNT6%iV&q^;i+508a3cgF znKwVi#>WQ&PJ5TEw4ArtFC<|aJ*H5}IAQ`QZEDFkEgR(Z6mMyKG)62a_bT2yw1(r5)z&~-T z1hL?b9YSWQh#r5IiZMoOYn>7RjEsQi6;#A~dvS9Bc~hHl*^>U_1~RMnYXi#_JBJAy8=zm&Gh&+V8yuil#|7S9)u8^~n{C+-7@bgGj5@R8yNw zAuvW+QbNBR6zHAX4oOd^bbNEGj^qIzUaH&(rvf}K3#NbSs2`A#$v6eWKHNQGxf|X> zJhlIw>F!IcvwNi_C7%z|csf}#o9{NH^a?%&m0z*0(oY!R0^F6;bcVYy2=Lm}R$>$e zQvsnT7JMzDWTE1udtq)jD;`Pe?LNPINS9dGAT0Lh;aTX7xxE!j<&1fG0>&r_t)EHF zSRQH|!M-)Rb88F0*tE2ncP2|h0MXHT>If5o&c0GNX%Awn@lQHiUssuRSeVw+{&0E}1-RmJ`;Snf~5p#wJMeahFqek$;jxuhpSiCtJ|pPJ81Kxm{1Z zAnZZ3CMG6^BD3aw2QEd5m4?PNEJV;~X9eYw)*AGS_c-krX|?_=KOy;Yu&}o4`p?fF zd+&e9TP9{mQl@AjDKN3VRL7;)pCw|{Q4dW{`n&%mun){pDg1<+VO6nvazaHm0#yR& zp@?f6j8EHNxyor`nf}2+gnl;&zN%oYEAmh#m9)7`iN{FH__zCNI_;do3 z(xJ@7$47D{Ui{*T1E^G_jA|TlTRS^fK@3&DtQU;gu*n%>BniOhYy#VwPxKJDZLRt&x^Mcaom3vY~ zb+wus>TkgtQ;njcqED2b12pakgR~6S^h_DW<;~{;qy;BhPlfeqGDcw~nsUq!^`Vzm zajbi_9JCFInn3VuvS@aG`Ds7v>Qny<%IH?zDnSz9ufU!Hjkw%y7hH9<8=zJm60(pI z*X*mQs;=&c0Tt2YNk+>_2yCdKzW;SGeOJ&A&e#g5vkw*)%roPluJl*Z($PuysYSHt zNF@ry^O+bMHyuTE0DBwzru-RV}V`%^e z<1?ou`YrYE;t#PMn9X_6ZiW^kW8>mFe3?K22HZny{j>g20QNOA8-M=P3kDbLeOCi^ zh$Ly44%gcH0Q|57f(PK4r}?&e&%5#3csX0|4jdnp<%+oEQHwDK2~c%D!4i3jqxaxk zbhkgk{deOnb?VRcfA=BIAD*0KcgxcgEF_K`?ClXnPPe1%2G0XQ0U{Hym?1udOq!{z zyH~IRJ0Hlp>~z+@dIc)E8+h9@6;##K;zC2Mpy4VOkwhB*j%03ahqbY=tgN-Z*BVr; z&Q9^ct{!b>XhC4*TYBULn=+*9J{YxuX?jmj#1Y3pwu(etvlGSub+EDcafyk)Fv($l z&d#PIrQZP6kL~d(AcbcF*n@0wq+cQZ&1pXMcmbAcv_J1zV(7uRS~{vZ36?OBRKa(& z_C9ZM(&1S%OpVwjyq?z2RvV2M5wL%~S*QX`mVh-U#iFkUiid~d2Fl094%v*SUb}8^ z{n=BIaY;&z zmI>g|IKVNtW!U7&j@7TP4bZ3JQYI!j7n2Q3R+c9}VVD?j@QTX;`IZ)3Bc@Kt-bxiR~{dJ%`D`uNDOdLUoYa)sl8AVZ!Z)wuJTfWS>$6q4J;Rh zzvM84o#}1SO|s!gMh$Vn7c0-^S65FV3;i}IGn=L*yTHSG{uI{_nzcoinBKs5DUjyq zLB`?=yYBZKqU(>skN`>pqE!1nS>o45s?etn}X@TPrn)-tq-4$K7z^g z_!rf|C@2_yZL0BKuyu;ZfqHzr?Kce)Ce*TvC-XBEmd}`(u@jSNei!!%G}Rvr4iB@# zfPUaL#On?ymiZy^w#b-4kv?|9MSWxTrUR&turc0s+(nca^pVEW3WAi$S3tQIG%`A> z1v;)!l#f6K{-+%e;=y&agy^;f9Ct1*uKwA%@A>)l;2F5+2Ha8%4RGEPtT4+9wmVN< zSo_bPC|7e+)VpBglZ@wy;M-hX4Vh(nKt$vhe4R@G|FGYGBRVatte*OKLG*(8wZI^lnr=Zf1bRu1!;HGEwe@q;?~qm{;FtXU@9lXc zY;T)U@P5NVGS!_v71{O0b^?3utEVVYe9+1cly2(U3vEL~uGGFh`1%*mt|hreA0b7f z9Mw`<3W_DzIEyjR2Biff#Qsl;3?LBP`V1GYz#e@vK{pq+EoCq4uns<#(*p2LR@TCh z>0>YoHBNh|GoHY>g;V7Z`I@yrg7JU=3nQd}6$bVYvJ6y_5DGfcO2FGf5A9JlZugL@ z!0&*|>uJ}MucFr(4)r!By=n=xgiQYW6@JR{3mh6WSj7<$!|*?A`N^#P*RBR? z>UKDyZ9${njh~Vd&D~+ldkg_85g`~U|?_%=c%ZygdqU;BN25S9NESN<4S_>gYEMna=y^# zI=?cxfMTI#WW4_R9(*?&h>+K}6c5Kw97eIgDg#;`f+f#bkUO|!L8b)(3k;kFHcDjF zhDJtdsi|`~#G<5)clUO8febs^-F5Jtx^_lfSlHNPlJ74!3Yj>jsb4z^lg^q%NAk6_ zG&Sq2SFW9W-gin$OOy~HMS8X$-);Df#0xgP91Be4IG`|xig@l@b0)_$$s=R2) zbO^iRftydSF-h`1lO#%HSNIC~g4)YHIolxrZ0n^|G?a9(|Y-0nuKuc7z;-kG(sVy$ihg z0H213BXIEXp$a;>`4;i9$~PbYSTsSudWc!>d-Ebkk+)GuA5$oS`{Q4=495NYfZPD; zlKQ_D*gXZ}{IidN!zxzl^?0)@i-hR0%%2NQ@H|D`O1h!wO8VE=uc0XH3unpSV7EHi z*5LcF1;m?T>vtfTP*9fmwhQHNl!A5;0#+grJ@D>=js>;_m>luKsSCg>wMXIgdu#vT zBPx{l7{~z4Z69I#&3?x5cDE9|F!$z(ZpJ4b{O`%{Px8SzYUtL11wVE;13CRW2B@@f zzJCsYk^r$S=|M3ryoQ2?`YZF}U0<20-!KxC?b$P-zkJs}<|Az_d);tIIRC1 z)bpQ@`yUSapDy}8=k(uq`tL#i{kZ@Cop{NwOuBiwhqr@=?M|r0hQ@|Y4r;BI3|^sU zO6u<)XlcDC3^9mortIT(x5YE#AM{NfG(Y&lm%_A0BJj?7akEQ|h+U&o^__6iuVP_J zUYBzE#VP!u#H;yNB9o;2=aT9lbTq=MzPz?7_#SS#JH{k}zZkQSHjE!XE!63?{EY1b zR%O-CY{tad1}=xqrPP3dnzdTH8w+!Vw#sIh%F7O6_nnth{PYzLQy&zH%y;d!{`!%dI4o2f~g$n+M9X z)sAWmEsp|%&8Hn15xFT^qF1=F!Tp8;iywX?vbLYsugTB8{~)Y4P5FyMiXUHjY~*=t zniH*Gu2Hm+X~R2#y;y0v_)gN#HO--zNuqz?B+Jqp6v7sCKM0egbClV9X-<8!zi3sK zeEiqQWqKb*uw;Tkok(W8PCB8R} z0vRN9!t9r(;*E{*b#w*JD9BYdwo95jMn0yzB;hzZzR!O9f1j$^nECpL@1q6!egtvs zDrbn7Mn%7SE-V*hcfsn(+|_0A{k{c^VHt(`z@9#!?{DwHW73F7oJbN^5ab;%!~^WQ3Xh#_GrHJI-5 ziA9+gjpRQ3W#q-q^E1Bb;cUjdVa^kA@^>BsXX${~sTr3Lb$X?Z%Os91@{kvPLitL|YG9NhP~A5|+`+$X zmhByeBV}3DyM%ZOq+w@f#Z)B6U;nNnw(WE0Wz7m=t;s{<)e?3y>E;-+ok-IPyN#$2 zBPJ@n(`ce;b&e=5rcm)fH=bdJNQFA=-`_KYzPTWNwP+2=}x+u_t(wYajA0%AEV!JU7u{ zM`y6@>NI+elBX-%+n%e%Qoizf>LvF`O`xO3Iy)v9TUFcqGVqGLI%Or2Yy8`{M?VS@ z^jN&GKM=}IFW-A?TDN}?t8F5h@D*{W`|hp6JEM1TFFZS<_22C$?RY)OzD;mr;RErN z^SLHvFw@tL)<;BekL)tT7?7)RlP5EEU!8T#e%@WF&wfr%xn?D$JL%tbpPRUn!E}a- zY3I%^jTzyEoI+AYL(ts>)!FH48t#LY5TlK$c$46S+>LD!bjQS+Zao&k-N#o0xxCJ( zu3Cw6;`(D0xM~+p6O+HF^*T)EF+glM`U5YQ$Ew9SpXZja6LP7zuky}_t4aJVyb?4I z=64h^PhV2^L%-zX6)a6^QBpo%PnPA?*g8HaCb$@dS9;Hv#7_F4=+}raddKXcX0`TIp}+C;H@7?SuNG$! zcw60!e2SX#lhe9sx$Ltu>nR-%=u5U`vhJQf)>@j8$}%_GTw7p{SqM1f3?wUd%VCxK zCC^}4l=gmRg6e{g?n+WmL&HA!c@%5g$Ugk8`u#)StG^*y`}yHHzbK0Pl!qVF<>u{d zmktc5E^Hrq0JAQ4QlUc2D=WMIT5NdQ?q#rwNnRTFWb6J==7TNUQX>Hr$P8q9i!H+( zcK*#t90b*uuHjQbbCsth3wp!&Ou}54huS_nk(VJ_a#J%#X}OgxL-7v&mft%!F!v)%sLrmJ{g_yg{jIR*yW*vg*r%$b(c?zQevD558E4q44ec5!2~Im%lt zTN$Vo`5@4F!a`b%jn%7#uU<~32~o3L{$YyMuxXm0AW)6%jFbDFEuI-T6gPVf#{5Z&jRy0_)D-&-!5)oFbQKG1Q3qhhF{)oI5I4`QVoDAPOTh7uf@5yI_xLL; zLe!wvs7m{cEBwATrSWs}P>QI~BepTb2!ZbXBOD}Q_J&X|1!OGxf^yAm6GE-YhYmb1 zkF^O!GFMupIna|<7KYqtvVKk%d?pDjrwWV<9$(wYOEs@?^PgpMG5U5u%h@)WyM539V~v>QI2^?B$? zeHl(@sjhZcAf$xiRH64}GJ}U&E0QrNegj%HpXO>eHx{8)fV3U1wlA zv3!Mg`>wcWALX$`swe*pWwt;jM8X^!k^61B54 zPAUTdvc%7$<{bH^y??SXt9YC}U1kqSoOA2A7dIo8XWZuN72~IeuD)EARy1}s8`f4^ zTbo~X7yF$|C~`5K5Qckc)worcy2gY}NBWrwq`xX;zn`>{k5@LZ?OkU6%hWyPG*lT0JBhfRj;?xqW$9vO$DyI=w^}QL{4j-axhoR{5XVg%3lMl5^GMvb)V6xtcHL~OkwvRV7si^;Mvpn8xmxPW8 z?^uwzq}zV)DD^#U98L&UlwmZCsMO*e7KGpSY&=lM>WwymY%Qk$_c(yJlkUK~xr8Be+!eQjn6oXAR5zgV zo0dNvvX?USAE70z7ct+vcJeD`#k10*V{)wR89(e`@I7FP%eqs9ZS}~sQEl}Dq+w<8 z*3669wB9ntvnoQ`jlG$aqGI0CLOs8*z`Aee%~1B#`9y)vfS zTk^b(UA|2sI~Y&7x2%wh(;cl)czXfTc zl~D|mFyt+=#PkIe)?Y~!zFu8PzN@KqwX_>!eLJ9WG^`kwmimt@wQZA(UBqj2vG+w6 z287t#c@Xr2&898c`=xx*DJbjyNizJMw$av=)wG#Aa{r<=c01wnWf*5*{muuLd8@LS z_CKXRF1ExLu#uByiz6q8q~D%9rnEiu3X!FCrDQxZ(Tl$m#i|m2D3Jq09qz}71l*LXOKu0MzUOnH&H)AkI54hG2xdAUqvW1?2(x^XIgvX45n{u$^dk* zcqviMV55sX|K0Eob)jFm(tcK|{?bvY!99JtJR!Tv$x8XN6f?&Q^jte@lO4i@{H*%n z?nE6kzA-5=fzEci_0@}Z`wJ?0N?ZfGCA>O&R&#f^j&lLhN!ER*=Fo78VpMu5zblC0 zHxtB8Q&QKLEE)It@moTj`MHa;vVEf49vDa~|6;8EwvTKKOkQc)OQ5pXi_SxPggBgf zc)M-3?=da?rOSGA!xUmoDtADS-P)8vm#~+-C^75 z>x$w%@t)kF7%;b5hrNPL=@(?d;Y%tL;ZGo*gC(~ zI%<~OTk)`YV06^Lz`$n}=1W@a-)!(Qv6WO=52k|Gm=2Ee_U~pS536yo*gQJ$2-0D zpG%35KT1;WA$}q7;&XG3*f^d@VuMSkpxEQqO{YGR-GM|6$Wp?25jfAhJ+a<=%7MrQgdanHQOZ^hG^ zGemU2T`T%E*qr;rUCPGUV33RHfsj{!`d;3f26@p3HxYQ+Mp+#?977@F`{&*(v>TKU zAB8LsAPqCaw&bWLSzam+z7YI~?bOio#{Ro&=~xbpKILQN8;RNPr5}=V9SvK<^D|_g zJ__)V{SkNz=}R9Sdi%u_ycUJw^H}1qc9oR=N3P%VJGHzH48$TZl4Q~)$pDni`PqlwoF-U@U3bh@^^7o%`oE}s{tGwtCnQy^ryamg6#CO@A~D<&kf z1Ej^|nKxmR=VhURpS1b+#jWqNf^*c)Z@lV6&17p~T@S(;;Lz4odnvEm08AzXy``+0py*pN7&FzWEFIz4x8$CG;?Yb!! zLtj_6S9-_nJz`~2?MhBzU~I@BGuJUK&*)1`hl!g1&JLcIxuKg|0P5baS6nI&>U-bF zP$iY&AbvfIOyw*!i(@O3p&yS|hO}awn_`<;)gb*kZgq3jK;oUK$WtPNRKZ?RGDHdF zemR@XnTybsR<61H+b_+Gd6Cp(XC6H?vGgN&)(gcEw%(?X>rlJ8w?DgcQY77qG244# z=7F`&L471SZ}1NO`GieNXamWTNBJ$Gyy8`7soEBDfFr*UJxP)@(NEUqEqltv4x(7D zKM=dq)QGA}vhw_Hnr;o>_GclLryAQPClg0Gv;K5~hmV7?&uUZUzF?1A%917xn@K~` zbd6NB0NR0%H{0=Fw<%mtTV&}^wUf2lM2LEdL+nFhD>h%^Ck2BegUuzX%}-ueY`{yx za^r`$<0fCqv?;xo=(zVIyMdC@w{)7{+vR1<_w0|eUlnG(utPBh!eknnR&NY27A{ML zd-Y3|A0O?scef207O5y|@GmYCQq|t}lBzP{K#EeosdZ1zt1eHIsc3INEB|RTW@1(U zQ|I*~FWG8Yn~c(0$$r~>DU0IDQmvBR^#=3vLsX5f8*Su| zp%{4P)o#T9G9+Sr2X(okv+UXBcWG2<;i4Z{gcXf1WvIp`_%ib<^QuQ*y{1d4Ed7yU z9XC4G&~1FCVI$|t+LPX_r5K7ICBNb9q;Y6VqiMiX>k(S+>2{U#K0F}TXt$g>qWoKe zFzKs!+WIx^AMr#{9c(TZUq7`Mr)YU$JDCO4B9wJyGzW&OmZwccst>+EO^W5xTEDcE z$HnWVV@zx_Zeq1AUJtTtrL6Y%NbBNZ?yVM=N zT{$SncIc=xceZ<0?9tN(V@8&t+TE^6-nd`GT^0!pgx2HTC`^dY!B)AH{-uteHXdb; z@0AAbE1~1)ywv<^mXhL)-AHIJR!M~Pjc&r3c+pAWIn0U_eH!MMDpxdXGcsyBGV1F1 zP2z)YSB|x^Ku@>3X-zgk+%N*K1N)3E8>ORRXXiEg-uW30a$iDO2x&mQlZqKv+t{)V zCr?j0JKB9}Xqi??5XDwN9o+vAbvj_l`YKGrp|0rq0Ie^yT$0NlINNqmT}yAzdU{6r zsI*3!;~78Bb&eJgN-CAYh)2CI%qaNkLHOf2nJAdcP=gA}%Mw<64 z1q}L^^R~9fV};Fn3UzsXW@?Rx^L~r zmFzaebYDu6=J4ol&t{25n7&p;5KCr7JaJa3wu`TpmvcQR9L&nq)D0$3PWD)eZXh*^ z)nL0!R~WM`IX>zuFRoG;Dp*kZ%V;7*A3yV=WAbIOyAq4|m$ahhiPjSrzW$+GiG2nS z*5S)+aDtu2nIewG$SXSfHnxP&V=zU1feUEd%&BUb2c|SS>+D$zzMAABNhbq)Wa%Fg{TF&XoWeWWwT=?KztI~KQ zNyQ(8hWt@i9c7iUS}nzf?{ohNJxb>*caL2UF^;r^u=O~D`0D*HK3xq&^3;{LRAPHe zi}|z^wZ_N!dquT;dX|f##g8qqtpyr9?RTO?-(sLSYkRVAYmu*#R^1M2RJG55>_`54t!Pffo4;BkSyg0d zlHDu?Jyd8n+`T>q2phYR%^l?XncaP`ctA#@GyHQ1>55X-qVt$TjW(<&xH7VD$H6G) z;2;n4LBM@qkFW=}-=vqDFXRR`hTsbW3CqG|N2mSEMG}R-V1HrEcB7$bl74-j5hL%~ z6VOJqX3QJ|b$TjW8Aig;EOr@E2&+`PX2wk?u|||OjSpr267^jX+u`BwAQH`4pl)a< z&B#?CA*fm{?+vcQjgSdfbdDp&nOwjZ81%Ixy!4g&Gr75TZ!?!asO941xOPS3G5Qr} zL&_l<+qnTn%6nCL|G7+bZ|`T==;|68YgzIUPj--xOnP{ra;97keY)5q-y`KEx5im{ zGA7vyy!Kkb_`z20@}$}=m6%tQQ=(>bG$lw_aKBm!)J5GZ(=CJIDYpBERt#^d#sW-y zyJl#_OyqU-q`7q-cv)Zc+0y_-bE|q>kN6K$$bwSroCEsB*g81Jz|3gfF@d;lq zscNeHRaI2;vcOx6PEQDA@py3kwh$fn`P4^gzIMnFJ4~1mv;;~bH_;@`KfDd_do%c4 ztjvYq`5_TAQGomsd-Vk+QD@BYum(SdS9d8J4pKAyb7mj|&x!VJ@v?vs?;;8iSL33}ntdR-~edGWqJ$096 zd(~ufE6zxYt{|>F6UVsa34=NkdgcKF^Xv%tM4%-Uz4st0KUS1MiB<1q@}dK8MEftgit= zXLWSRlzfFYfFqtpQ2*^1c;b;+-o#lP6Foa9P4`2;^qPG=H0PBN3v-Nl_#9i@*rb8= zH9Ag_=iaN5Pi-U#-1zmpH=cJ1vUFjY@68`evoT93_1@G)l_FrR&BSL?u~o*(->Jjb z$xdN#KH^@Ak>p^lQy+>R8T)jC8q?$cnpAGw&V-u~{Z>T2=fxH9#B|@b0DOPT%`slz zqS7O|OJ*co?eEr{{>?-`r$>M5{=S9{%^y(a4)v^kF<&~Gf5$z$JkU;AlsV~SD5*GP zw+I##Qp%w9h^AOLF#5xKlWeMcgCx33GtbC3Gb_=^bUQh}>m7?bQ|6Q+2`BXzydiBc5e5XeS0nR)A`p#P8 z#-+Kgtyp@cAAut3QbPKyi7x2KoF0E3o<7Bqp2E__qG+L>NV#Q%hD43ePU^}RwDb%> zo#zJ<7~I5*pM#{oR;1-8j?r?=&U7OE&yC;QsL&ylx{bsAr8-T-|> z%!&6Vav*)9yso=ef<$0Lr%#``uD4c=lUZc$7;p|5a80Jv_YV>3+=X`un3tuFaNE^Bbp4Yh-wS-sYyS8l{L<5`X5f1TyJ&s$O%=EUGHYo3 z8yw66gj{8Ilu`SzkgL@-$!3M`gK{bM!kn9Ni!>qV#AS}7pLdAIb_<6Uw-2OOq#Sg8 zt7i?)%nD}Awj3Nv60RV^6|VOv7qLPO{$Yo6zb`Bg%{k5A)$;YqiTxKpRybER)!vZK zf{7l#9&MLUN1tDm2K%S=?>hTmoAbi*Y`kea9seG^HYT=5pZTfA)lCBpzs65(IBntiA_^a(+~Lw?dB!eaM$VVo0R(2@@Xd* z;U8Av&SblW)Kv-4uufes+r+bbN-9#7-J=pmLnS)or8P8vn;7J!y&W5|Ov;)Weqn$4 zamk@v>f>t$|6DT*_I?Tqygl|nT>9^~#40?G${tlhVV!FE_`P1QJ~NM3@~~MD9)&_h z?U8qulUINDjq=yNfi0uuJGST|I9S_iNin9ttXJp~KDH^PQ)VDuF9m>~NShxBCF_@< zcwK|Hqtn)TML~WK>w99&_@3CfQ_w6pyk*Bpk_cgfWKvmsY zBVN-l^@qlj(9S80LpPFW%sQ?S?)0p`l6upp3xrLNb1Laaw3gUQr)$+Ht8o5Nxy>J+ zpDyD>$6zq%C*l9t6hLd39(!P|Yun1Haq-(?6MFUgHV@WgU8FS=O!U8vP9%&@km{J` zS*$rRZywpeS2x|^Y<;w$^>8;o$JYLgKKpxC_R7YZ`;KFnyVpz%8)H?D({#ikWCoC$ z9yy;$hbzL{PP(=|6A7-pn0A#6w3AHOwbZXuK1>q{;!rgiX<7f=*}H9^u{rvVHzK@v za+WvEqx?+#jEq827sDo>b61>~r&NW0WKOq9=XKl`kt1L)_LF1BheQf6{edZ$vNd$% z2J3c9VejnX%=zg^d^lPH5GN5;lmwo?KZ^(@E5vtN6~zQROL9BV4OMDRV=O2qHh*uC zuVDe}LNctH$&jUoEc+t;DrOl#>{@M{W0Wy5RU8rFE-!Fbr_sc<{6_RX9S}ub{M!<( z|E|+N^2bbC&Hoac)k`WAgjTObE#!+BeII^f&F9H1@La$b!!JrcXJuSlt&vsC?;AMP zEfYMzc^Z;uY0aakSN>Gs@o3%kdC$T0;iTq36zI5i{w-8pA4qI$#cv;T3ph2! zQ$ca#o1)5c!Hl%PbfG;z6y*#SP~5X{AEH10_Pj+?nKvbqJ#I987vrV6a67qt%GERj zNOJ);w(Tk$QB!l+zqKEb;mn&G5vvXDnrgoJf7(0qXsX-y-|r@r29>!eLo&~^49QGH zMdmRXicHC@Bt;0xSTco>ROTd=3}v1&kC~IPkm0=d^ZP!(wa!`Rtn=Ub>+EGct7rGI z<1^g%bzk>&yO*Zzv#0X&V%yUS$cw->37?d?W^4) zuh&cQ2#Uzx`(zc_-FTc!NHn05cBS*v<-gYzEd*%C$4GxBj&YoMy<^u2B$#LGG4iHKyKp#>xeGa6eyF<%$WGf%zicZz8(g<~+`COWyH+uKu>-s(8&+f0^4b z1SJ*}^4(WOBeSn;za~0em(rA)>`Ts&)1_f;V()cUuaWg|D#{*^Y>i;_Wead}HW}=f zGj-vqXHkq+4(7b-_BQ;^+R(I=qi1PS!m&|vtLyLHuFdrcUh(N$T)c8>#6rvHDaFCH zUfRD?4YRW9*{&krJ7d1ZuRUupJ(2goMSsGquY>Q~)iFKy{w?PGH}7BO#R*_=u57=h z!LdaqF)^9O^W;rky+B^UMo*6-Hs0{~I`Sr{3wM|ukO&NC(^|1N8N6v3aQLzaejJ{+ z!dqf4Q~45`OF<$S`;UAb%W*AKceGobcZd^+aq+3WD!tz@K{`{jRZ~w&fZ3`rS5f2Q z#<>2j&glfb5{Z5f>&i=K%Cncx`W)IVU!!O$#>8xOH(K9$$FHlGjh{v9Pqj#_Xxy6>pam6sFny~^O_YCo*f%z8kalF+sP@T5^{CRvYLW)8SS1uY?{PhIpQ~MF) z!_4x+`rJ5;zMBu0XEhan-qw1vp!K*Ds~?m^jF$-PN2<)gl3b_Vs!+1K=yBuU&Yhhv z8fME^t0Z`?@rAiHmMxDLAF5m0+EKI>HZD{%TFFtlBu{JMKlCw41XNQZqn zJih~p;Fwyo_cG>tgFFU;;<{@Nt6u&#pc;NXB?Eu7rS+uO9>~W9V)b)+FZKkcm zez)@`Yg5j%Zt~_$+|+kVf0j@yhq%l1==8fv%Wvnq1aj`Fmt1P+um3oT;!A=s-Ppf>JQLVB9`Ik)oBqxJ zR%d2zJD2fK+2%76xqmFb1bXsS_GQX=-Bd@>SW&WDBpFdEsd zbr)7aI3nSk0#HUbr~>5S&?ieq*AD`c*`jQZ!giW@Rt{zY;nWBT$(uf%cPC)N=24-$ttF zJNF_hi|%EoC==7I8a38KSsLqb{VFIafm1ki&`~W2CpA7XaUGyhU`#X1j%$f(|MSAl zc&3z-hvz3$5Op;*6Eic9R9I2N4UR_ldmk@lYir809fHKNaKOA_&AS@Lz`yM``mm9gu%5Ajw;mqAm2LpT^{=v~EyKxzLFPjV@`aPiV}=O9r$PElN1 zDkD90!EA|%nuT^R$?Wyl1qF&^wQ@}2rJ!b_&V6Ndl@9#^AAjcL<^nF--P3dUQ0DN1 zj3X8w4Ce;x$n%fB`7pHGFiZlE9))v9E7Mtu?JhhHvE@|q?B$cSbAjwvDWfSu_=B1yvoSG&BUkVhoI>S{kN9JRNnQv)S67CPOj0 zhnE+6X3-hoADM88TT@fBp|0*lW+r-{E%<5Cs|r8~gkbZK7EfWve7phZ>H8Ic(!f!8 zP#&;Kq774ig4o=zrRDDAv+QwprhV?*b+lwIEI22hLqmxKG?-{F zVY#Egtc~_`VA@<<06IgHpJ~2DU_ijI?OF6xfKPzNG-YMdn6Cx-`QZO}+Sss94jefI z?m2oV@Za3rT(nf9=^5>~MEttoRzTyT*i&FpA0&J7t zey8`_uW;oIrri{CD()3You=O&LYN(e_SSJI-k473wA*1wj{z^w(D3Wfbr4n9G-4@e zXs&Fk*^8oyqZ$-W#m$EL`V$HB=(PZubjJHh?c-#2bnu4oI>p4q?2xPQ-6&mN2I_bD z@#Dt_WY_u8Uy4q2+#zTI1i%Ty9a=nCsCW=gVEE+thnd;m-;ZvY1OypQe=X3+4a*8B zqyPaC1~IfYeEY^41-_<=rY7~CK&x=L5uM?0bv+e)30-t1d0SsiHx~f&ipw#9K*8L6 z2#S@Cm&W$>)T!)KXfYx(x#7yv$#Qje25BS#K3;UcYCHz_gct2-XzjSKAg}!>Bt#vp z?qE;iLvjW@=|jiRTtqN)-V6Q%_+HyT07Y4|9rxS|oh&qJ5(wZUzs$;Va&b8VB?90+ zwT5Xrlf>?B$CBLK`s!+;h7H#fj0)k^CRl0Vnb`#I1TwWRUPI^}e9jJo9;<*r^ID#q zln&?0kcqxSfYCq)_3-eLh0P#o{=u*r(km~%%Gb8N;TUyH@Bgr}$xiSVx?yuIn^Rz% zF>cE%I`&(mDZk~jvh3wh+Qce&QmJnrHys@US>b&9Cy)8$L(7H|k1z z=?T|!pU-BODM~Dd>O@O^XdVh|`rvkkWZj5UrTA&zKzoTzGxx}@8*k5ZGgml`NWc&) z=1~tVB=9^AI^pb;d!nMER=s^em{dz2p1%nJ4j6f8gcNhwUbuO*Wwk1VEvgp4YoGB3 z2B^G7M=2Q@WiX0h^5?DKa6%IwKs`G?K;$(+9#v_k0wtiT>cRU8p5-#^?Cdf!zHOP> zy1a||{F)guE7uI8G|#H5!x&0fH9Wq;Qv4_`t^~cYxw`6&Ai4u|1ON{RfDX7@q)j=a z(M_9MSlDqhACC=Q@MaMa_qTVEmoA_EepNKQx^;Rv&Dg(sWSd+}pg%mUM9k7sn%wd4 z6@Gr`yM%M*VQlOreSOujY1dNx?&Cjx5OMsV;@;d%sR*;o43M^|14M@(m1#hZvzhs;%;v0kev#p>bx;| zhDBix$MCsm^h0wRIs|z+IlIf;`TEk&vL0fP_I&&LwKL|yCwx&UneY^jp}A=(5p8C8 z;b3%WHm?ucg*Ft$s->@iTLZl2WG5G8FggP9f<5!y>R1ArsH}Vy6{|29MAyl#u{lPGhmR%3ubTQ zA_oQrF(#skbLjf0vj^syxuH+FM(vst-QCn|=?r{ZELnQT&r{Y=Dt~?9@SeZDJ!}Wz zDBGv@uv7usw!5N)<3c6eY~l6J1taWkp3;i>bbFQeA7M06yRW0TIFNT)^#VO%P%!St zSsr}JM(fTdi7&MK`s5gWBEKkd&01tj{<8ghjpoL7iMFb&#iC;zRPWq2L|3JXPB#!p z2yNLSfOQOWg{QIXdijiMG8bs;TPz?o`o_lf0 z&S+0)UBIdmVM1{OfLfSO_F;5bOO6G%RK z-0&e)YT%q-AG)oXAq9U1=8p$7&Qon1Iy>)U{VDBr1Ke6b9&2l%g1w`{3Q~e0D6*=} z$%k>mSQQ^mOiTb`0E7fPWpD@$Uu4Q3aGNo;x{Y+AiJyUhe*eQXG~>g=Iu|dx0Wb>O z1>!O7RHbJ3o({)3d@o`gceLf>!Gdhj0HEe*`-Y+Gpel(v_VD9p|InZW#<6j03f1{GbY=ss4L!?|Qx1zy)1hP&W}LbfQhUu#o6A#{+}; z9lx|-SaAZzKyA)woO;Z27*cUsKt1K<;eoGi8+|^H0@p`Z*OlSqr|eZ zG7UEMvuDe%56Q#s8T82mW}BLjKQmpa7dXqy%V~HFDCz0#u3Q0**B2UhBF*g4Bb?+$0M+XYI`>UBMnxW+Xzq)gRTV-?1XD6*4aR$)mpvA z80ZaQ=$G;R`-8BGi;IbIUmQC-qN4)lE*39EzBLM(K9-t3BkXzozp51!ic2ntaLG3Q zFwM&v`I;bV{ljnh8wKIs;$kFUT+z>l@&k@PBwp(;oLHPF$~$(5YU^)%NP9u+4xh$` zqmHlVmg79uM5j`dwSVoK`t_yYYh+!2@ng4)_w#vrg7U_RPv_^KnNC){33qncMp(=o z35ehNO~pFCQ^f4T!It~(tJC-;a~@C_no?qR;rYr?yG{KqTi})Tjy*RW8!+ME4ED57zp>AUAhD< znrM$5@Hyg^Uuu2E+T?7uXMfcZj>fa})ApWEL!59z#My)BPUU6|5cGS|JUoS_2wapPSm}d_;7# zV(@W50TP9-gn>2?RhyHQB>}q>MsiEb5h51k(4m}FSIZ8gcbK8;hprmAN6z&A++dEkL;)!CZs;8QvlEi4)-~cw`sRtYBsv{?cm_6I2IA`A8ud zMeV&L0V$bK0_aczH1`&Un6*+^aqppt{-tS!33J3zN!NQ1zDLBwDBGPwKmBjW!5->i zfk?V@=gQg|43*I-nc%cCCcZ0$u?w>wtObFOq|eC9gUf@|hJyA5506!}-JkBXMe8j{ zb&v$Y$Q9nZ5V;B{AY{~B1loaId?XwdNToP@f0g|F`4~FcU8&s1YZMO>lpfH|Lml-n z`yO!8SPyXoLpHBwXE%kp_3W1-ADDZIc#;M8>({SaS&c#)e}$hG%jyZ8n$|Ax2#0Y0 z0|rS&hCblql9HZ?WPmL)u4p|Jt+q@wp#!d=0c3zFJ0+|J{S|%#7*7$kr*$xa(!tI? z5pY0;;14WmgF2I1Ix%wtgpO!eA=WQxy>fd5q`3lJnITYVyN&qv0fW@zZ-~4-p(Mex ze1P#(?BmCxn0p~kyjNwRle`R^M^k7kBnVhfd4ME!k(WfO){%7 zfF*N`_PMyMtt7>YKCZVS$h|F_UXmO5ZrVU2D*7acB2q^se6l<9XR4*_J&#vUg1kyH zPKj~+jvic7Q$48T6W<&SvQZv=t3vOtPS@}iDl(N!yEnhsB+};-} zb-6f3N}oQea-~G$`bF+t{!beBu2z2<{&>l>aq-Qt(xxYe)^n9_95ZQ@3s+xlc}=>% zy>_khvzzN>x!0N0gx(qPP=h{^{72iLsXtHqQDafBkg7E8JIE?ccWlDTriGo)q_e~_ zP`7AmjDbKqGj!uxgVo7~fR9a)_nJ7i$*}mAvuoR8Ou6{#I@_n2P&UI<)$E>!aioN( z^>W^C@p9b(o;^Jqr!GG@(i!$vAa24Y!}W7z<*jul>X2>EFrO?XYc@Q_C1m?EI(k>= z_;E8x5L}HF5fn1Bu!vpjzJQTBCgw`L@*hG}ZSO1d9UEo)$;lVz=DwGE6=`Nbu>7)$ zZKYv;)w{*f49XJM2hyUVh4^5iL=zFIrICldtJD)o@0IIou38P^fFq<8Zbj>v2$U@2 zPL0L#n=rTPz0ijNnwajuaZ!iq2oLEgZ^qv6Zn3V9$B>`^>#pj)l8lV;mHD3z$(RWU zav8032R=n7CiZr8Sfj>ThV#tz>vKpf5(ev{xpZG@C@I~oG&AF;#S|)965#_&GNv61 zOUtug`X~Cz{^aQYG*H5vp^{QpEWAo7T6~Uu9eNait|uit%Qv-KA{-nXSf8Cq9XW`s zjOc90(DbyrOilbt2dEQ-`wOp%CMd*DO-~>53I_LOH(~A1FD;tWHefuT*hb@gv*~9m z+uxY4Ki&hu14?Y|SH6m?^(TRvq~A+Im=LT!Gu@s|)3^Q&Kj7XkSWwjdaz&1TE%yS5 z)ce6q4-OWL4Xsp^$uB5~PHa8aCtJOjO_Abuy%jeZ`F8)Q$GUx~p?qD9?W-HHH~RRD ze~PCuv7G1Ra-8x^EZ?hoCO}E5p)=}z({}&DTpoRPC#yHZ>+ed9J}xqC8%-f6q#gdH zbz(c=-pr4M@QE7|oLBR@fy8~gBn zuRlp>q1^AmiAZ}l)@zbIIvfg3Iivh^CZ~84DhdAT?IP-V{gE$989jc)EWA+4-A}k7 zE%f>3SAyKbs58U&XbHug-yd;4j(^weZJ$VW?})Gg;rsHpb5SaFzncTR^rr&toiZ+s z0BT2|pr`MyJxX}S&WUjf>nVgZB97B1S09{o@1hs7eo&iRh1g5g$EvZk;CV*I4u6b@ zKzKhGml78TYi90X$J>*o5t`|7?#XQKX57?V!onAFbraTO`kx^40#*!|anwSvTs%)p zyHjh0YqHqd8)e3L>xPq47Fbl|eoj&&Ks z)cE+~>NaL84S-)o#h>zDHnCYAQewmNAywBh4)}tXmXM zu6W-BM7oQS|+O9&S ze)26}W~h+YM&K0bJ|%5yTPjjfd(UUT@)tOxR;k_9V%US3S7k>&9ODR#O}v6gQ`uJW zz5;W!+K_5kg@bSX<@`(7Z4iumus_6=+&1Jso-zl66T}6bm0(i$r3Gn?jCj2_Q9gJo zG0At-9#O5PGf-4i)Yp$wfSG_5(>7j98#c;f&p{j!)0{hqq0{x`69<6`_Q($E($@`E z?|18v@o;h)ytYz3nWSTC>Ufqzfh}sAf1aaQ%0+6vsnHaRdD^K;l3$S+aRAJPkqn9{ zEQOFoRSKnF#x4O;Pk`7wd-e=`DDa;mpJ#*bZs>7q#-`I>`+n29X`eA0p=q_L+K@(m zEt>EFhfQb-j{$MV5e$$QR#AYY#b{=zL+7TZ26|`6y?ggULm31t?kqRPvIbEQ#3kIE z7}Ddm9)p@rcm~(Wm-aixDY6kJLCWU&n@P*B>_!hJ?HBq`|IvJK#O&7x>w>9$@?3YN z-iWhTN!%)^7a&lK_Rj8Yeb({t!8KWRj(uDRIeQ}X68X-nT%_k?EV|Ust@FaO%ZbFR zICOcLHT_``>F>axdI6!^-l6shHop(>scRnnT^6wBH9upj`Ch-H?KM}$&5eibi=C}6 z3=Os&Z)q9ZMWB%it6{^oxw4bOpJV}>S-t?Kxo4Bq2Osb{h@Z= zGSi`vKhGHr9UOK^4&6^HEYxMEj5m#BlnU`U>)fBJwG7IwYxo}e@M@tfzLPb-+AO$E z1${zh*xQaJXqo?s9b?heYXx>`@@vmurKMRR{9sFMM?3}|{uL`LSDigrGrm*RCLsVG z6!$b*Ua~IKAa3T(YYMx0-S0=UV8r|>o^b8jKHYG!n=x=|y=%3CUe4Qi0hmGocw@93y}QF18v??QKHqey5!Bf+_}PkH#pVLHZrD$DYdhv zQv?=<&=+*;E zH0R6j@@S$eV<&!<=S|4;QOeuVbBk8TdSyAzJ)gOKNO3Vv&1pRSAsdEwNm~l0{4VMz zwq=oT^mmYU9cQ?aNs-TT7lBz;(gyZe_&MV8$;mFE4&n z6M)RPKr#pH zu@{}wT~}{_1P|937Hx8Jgp#|Lt*n;Jc3u70(4d*o>XyxN`DBeKs}I|;ypu(h9Kp=t z`oZ__3%snF|NYw+u_lbx`$#^)`gGd&t@OQf8@uV;6@KkBu37*NvibgC1GG(fm-6K^ zTEXE*RKLFNeM?SGyA5IsXpBIJ8u)QYWwNU-KDnXuU0F4g@xzVQumfk$>(f*1AjB7V z66Rk0N?CDxuci^#=b|Ud6*5{MQEqhmiC4=&&#jGTZSCDo3#sZy*<1{s{ks3RJti;` zC!Up3uz7%-z_#YGP40=odG_-Y950?P+O{&i`za+UB_W^pavY7N5wxk7 zlqQH9MD!d#l9sB-Q9owb%Msp(a2T6w+dg!5im|b=ftofjAj{9+)Zf1e?^Q>Pe9oz$ zQxXVWzW%Tijt`rq%kdcQ8&Pb@x(dS^qwKcmwrOZ1Y=z@_f2D*mO5;QWMvQG*iiG->-cf45U|pHn2*xvosnzG*TyI_%PlPip z!f6y)b%00pFt_0{U%aR&S?Yd!W>>B*_ydi!t2{{CgjD=M;sa?J?EWyF>2|x2?Bb!7 za%g&<^ZccI6uQD(BG;}FnliF2K1-;t1`O;<3%5Ctce{W8?;9G=3v+Xg%!l^oG)*0H zq`6xxE`4N%W}>a@?9`h|-;=X?C&}$O{Ov__2zU(k5q!hmZN6-%3LeACJ1d`ddRq00 z{nE9zZ!UUYDR~_Cl9>v9m-m10h~%d6#dEu)r1~>+$HfeMJ=2Y{vu!VKle?Z_dW+26 z?Y;59CFY`aLoSh?0L)e6Dj5wRYC%ksYg7`+Xgb~tV~S>C>?sdHhTSJ+(_30}bauvp z(}ktpSzpt!k~U@8AXh!?lPquC!2*egI)vwUU^4p)2$1q$8qi?axL+jOvT?Y!0ULI& zlQeoka&+|j+kw}P$_?K)PgR`E_M|v9?!ro@|m$^5-^OyBqzghZi6n+oWe68Ki%h6xY zCbc0f%FW@%wg+qAU63L5*N34yz6s@#>hHEb7FP*Xt+r2q*;e)jxXF@bpz1m{UNdo)Z(zo4`1lqB7MVb3|G){2V zhtiXGzB>Hl;^-jb&sKm6hO_@9M6WBgMkN>K{pNt)|9^o6l| z6Bn?xmXOGc3{*HCymq_Gf^>8rf+-Kxk1$}T5IgCIR}BYJ<5eSFn(Yd-P7X*p4J#l( zwj)kcT-+375L!p8oxpCRAg9V2$q_`fK~4V<-DeB0SWe$?4~V*OE1Hyfasx^#)y+pB za_?u5RA?C^!21Ag;HoS3dnH?RiMqWJdiCIxiTcYQhpAbDf)tnqx&#T=;k$$Tr^HAz zKL6&ar*g+L^YX+PJENafvlUtk)0941WzQ(d%w*Sz6!%>(t`)0;Z}G*8?S#c@i)Jyc z4rM<^@|Mu^*KCCD=QzjiCD`P5Cy)1uux+77Z5KA>P-ZlAwb~4g4P#1d) zibcr;|86stgX)RjuZH-X$yqYkI!7q(IWBv_$o!OPXUFf!pYjAUcPIL(E=7qCA=M1C z?MDcr)>H(!#3UM@0#>~VEAyZA-JXQlzKlKx&l1ODgyQo9E0(J1^WJ;RszQ6xPW)J| znQM^U;KQ_cxIXyp(Woz!$*-4Fzj+fTMrOpD^QKumv9^@_@d z@{7;sVEv5s0~mPo9Hl8K+q>Q4m?rLO9vTo;@@*J(TvO=obE!H1{$}Vg*{79enHM;t zzJ_XMc-3j07SqfStekRvAt9Qufvn3meHz1UPsFBYh4|ngm>hJ5E<0Y z-9s+Q>a&F4rZiz40|k!BdHE7ca9BjshPM&GuFjo2)edQVq=is;ond&b72FAay9mkW zRuC~`?96~*2MIGI1c@M9!ks&JVq@fMG8>U$`Z8StuLfiXvdy{|4m?F3g`IQA;5Xlo z_N9lkto;$ZSzF98esCz8^t}{cE_(E!zH1j%eVt_V*d_h;*r=H4b^}t;>FM7i$s5=6 zya)4Lc7#7E`#m?dnfT%3M510*i*C8OntxFr3#&8rpI<^P*8Y=)F@{`?uT!)vg)SEZnn{_OUeL28M>|Ivff0Y+A#@ zO0u`CkdpD188G8NM|pyB4~%bfd43xqzH|)gzh)&yIZWT(4glimAu7MX6os`EWli2P zThN&C@bML?mQHK8W)b+kSLU!62hpl2ZwyiPI9kz&Vj)=ZY6keqmvpqXBaC=a146`k zN*vwaca!??;Z&V0tZ6i!-n2-ErVjTuKdsI`FGzWSQ0{$`XPK^N;-Q$)Y7EEmyLaml zi}Pu?A)j}B)vZWa`euw65Rt8r?6@M&M)U~_Xb-X#eb8c*^g@rOKT zV7=L17?M4==?)+47+^mZRhPx%9o|iRGIvD^@p|B(1w=e#T+#fYiYf_B&82W9qw_K3{=<0eVesKBv0>0c+{zgQ8Zj(#eQAJfMYIpXFF=3@~ zDc|J`qmiC9$*Q#qy-Y3d3Tv6aiKgSrzN{4|wno2*7j1!|XXjr1Aw3l)Q_3*JAD40E zL4wb$f$o#5_6_B^N{w3P0<=BK)h*Kp2yS+*RH=xg{y236Jb!y%iHGv(saZMqPVczw z+{{=2pNdcaX|qsV{9UHl^NX5p%iY83d(p_<_;=~&o;STM$nQC}JMRG5d7A=z zp;_u0%0|<7=IeZ7QVo@=so#P~CTpacH`IRA4^TgTelMM)Vng7!r4=8Itg^{#6?s3` z#S~QrDk5|AJi}U zZEX_k1{nWQ$2&|D`Qn7t95W{ANU6`@-TPlK%kOf@X^+23U1#lNVTC zARAuSFBh(T>`L|4=kN`2p)C{3!!cE9K^KiF8IfLi&&QqZVCy#CEkY+!uTb`9&CltR zm^IZpF9p}z(sMM`B~074?#+(ZPc!Rr>AYCD9Lyg>n);|kg?+SH%I4? z2%XA45|1d|@v1jTgX7D-8e6EOajYwRae3YALh-U9Dd7^;5ecsEetN!6ug@{-yeQ_j&J1Zq*7Ym% zCyl3BJ?VWTcfXLX&T_EVzp%GynF>feN`03!m*JFISG&ed@t3N~QdRV6<=y5F* z(m~jM8kH!h(?G2iLcgY)?lNxMY5ti%H=+OCBw!_9tF#vg!P+K`LB*AsLs3ud$d#XU&oOJd;wWcE3hAlRxmNBh^GyO6< z`_1OTXlY$-Z6*pb&p)%*76>)7-Lb~6YS}aA70wa%uB`9hTHMdLFMRW=Xm6d^w9Cd| z*9WPE;2WbPH(v(&Dz`7ckGNL71PocSRa!xiNwdRp=dBt=7Sbl zQey>D)eo7@01N%+UP%1l_^wYRGLH+UYG~Y7I0J_0Ov5?0XZk+tLC@3 zHDWjN_!*^^Palf|PFdRP_xBqG6!K(DOR~ga5&QOjOA(c>oOtKXQ$Yb*-@(KSQK=Pjhdj9<<_Ws{~h8_PoK;ZxXkpJ6@ z_5borJ~Nh#t|ab(8Ri`#-cXxb*t|Y|`2gCp%mm}G%ZwQfyW>~^li(eG+92iYhfX^E z`*qCc5CK|Ko3kjuyy3QFscDc=d>g zsHmXK-x(p)nxp5TyBj5*aHG6=BeZcB#PyL`A@TcB|NSNX)QX=Lsk7>ltP3yv{Rv-? zUSSVznO^oRM|}V)l+FK8mXtCPc+ScJ3Zsq&_{BL5@ Og{q>a!b^Fx+y4Vm>p8Ii literal 0 HcmV?d00001 diff --git a/images/understanding-did-auth.png b/images/understanding-did-auth.png new file mode 100644 index 0000000000000000000000000000000000000000..8240638517593986ed77657411be7ab566b9a022 GIT binary patch literal 33894 zcmcG$byQrv5g|SyA<1(pauQNXQbIy<1`0}Q8ag^U zVlqY+Mp_msS~}W4Mi5X@QPI)R@h~v(Xh{f3X#d-v$L|1qbObBJ&qxTg07QHQBz%O& zE&vdK06;`UdV>4!4=Nf8Iszgx62{YQJv;yc5;6c80Tl!72{ZyK8Uo_eH3}*|8UYPA zArUF9q}n(!9S^UTv4bBJonFc@wtb9*fgfy=om2Jvm8Mhtw+Ti*0cjWi0B0r{b<>km zGuOD>>Y9!x+b^C5{Z9h}08hqIke_bx;6I^4KtOql7t%kGAt2%-AwP{NNvLM*kc~nN z_NzLf<#{C)yGqnPcKSFEc=puusSiHjHK0k*D|C*B!eQ4f6x~#fZ`zZhRSn&)A)=61DME_&=-#5+f@gid@GTfF6QrVU8 zpYWlE^omT}Yrcdbi+&s=B%8`^O>h0@sGpXwuU1AyR!;v6`v~CINkMZBzP-BM_Iw0{ z|DTL|UDLGA-#o#>d0}FzS0gY{_b=P8hZC75ZnA+me{lWr=*jkl$e*tN+1=%~wI^UI z|3+C9#7y(srt0OJGVEVuR20W5r>cKY{)xs5 zQ@1*%s`TiyD&DrOK$jig{|~YJ_4yJa# zzUXf*{$FDGFO+{g`j2cYu}I>c|CQer!$$zcvC*mO$snP~QZ~?&>TfRnE9HOr`>(9z z6J>?mRCnEedPSH0l$qlvcbR7XKz#qt6ni|e&aFvG_$f($k>je(AHT)=KgjVHbDXIt zw*MK(|IP5lBfy!i^*^|SeevY)(;tcdfEMNH8hHeK#hmgX}wn3u`mBCTK+#m zS#kbE%h6tuB?;Jn@d|srT;vkEoD830C3P$%y_J#6N^T|69f< zpAzd`>&k*pEybO`l%hl>Xh* z_k-^Is_E)AW2tb3p!CDD7)d6lw``0JuoO@2}D4Zw=#@ zM+40jSKKIBic~QHvEOFx8VYT99s!r>k)IkrJpxYoE>hwb#VOORYvwe$cl;QXJ)~6A z@!JfHs%pASo5bt2YePr8PIu$stvn3e_>~(4spcq>G|J5M1YS6;jo%^F*W*=I+8#FL zFN0w;mtk8hU?1s)mhiAmfiJZq-PrxE>Nr@{a}c|7DUFJFzM3oY603vD+Pe246l^}8 z-A)u*k*s{){ZqE}Rkn4~8Vg^BuQRAZ$w7pN;OIFcHakNL-J{Vy|9nP0zth|#1T<+= z5akkCp5?N2OVFL(`xl@hHN`gy&J7F=_Onxz)9bQhbOQv{0P-7Zo1^CG($;M+mx405 z87Jc6CMT;2;yh5D>fbVvjpya1O9<1LFSR>Ij0Rp_!J4i@xkTK;B=#@WiWkELy=O19u?S3rZ~ngPulb{&o1tZTpP-^Gkhs1n8QcCB2uXEoqwl9XfmlQ=WJUrbix zMFP=rZUn;mk_SGeNT+n*=E)hhcxl7Mb;U^gURLmHw%h##nKrG%MjDqxfkh%>=YqQ# zM}gMb!Jg|=Trk-qAfhENz+@`Cqr^3;yMuX z?``sKduZ??VeRl^6^2}`Z??1V6)?!@5f1sjJ75ZfpemJQ(eLGS7-pj%0a%ZKTjIbk zetH}0r)Dx5p>b(ZL9ojVRT^39W5{7+?W^5a%Qfp!LbNkA5Z9{s>loD059{fo&5NB$ z3#|$0-J7wp2exA-aI5QHR}4S}3^B~2Q0Q;(6WVV4%g9By3B^8^?)UKGPp}aQ z1_2oqnD+SQvlPCUeW~K3T`t1gCLyR1pBNz1W)^#Mr)7`X*w<|0U^Xl|j-YOBbP=xc z=J$i9eSuE-#d|@$#yI|^8e`gWg1kacdaBB4T#hDkel8xx_v@3H*s+ItjkxPq8tRx^ zz14Cy_VS9uLs4NI?95aVNE1NuN5Cx0+ZXV(mE$gWsn)4xET~hu)x%KDvF4hhRVsLD z?ff`18EL^lWSYQLjnjh5$9D-|-WO{>dMN2LHO>)sw03pQD|_B(E{%~g6W;Be6u~tz zD`mkv7&;0F9Q7Hgfp02gKE8u8Vhw0zYNbb9DK{xARhA@D)`3&CgvuhHTrggJ zvmpkOQ>&UOGhz48?C1@K0Db$`%HC$tfCF~tkTbHyE-t4t*Y!*sMwlp8RnFK5Uu*_t zgH|!Iq%`7c3T?=?nuiC#@tFUUmV5mOI6FB!e(+fiXt*wJW{qBd1dJFjx!l~f$lVoV z*rP|C%!wxnY#+N^_(tlu7@mB&C1*0TA6(uM!HpX)Wkr$UB4H~L5^Oas@8Kc&Zhn2{ zN>C|c8QnBD5BpUzey%XY<|(^Q5CSQ6OG!~AO$(bXOD-#V_U219g6bH3CcK(tK{Pof za%*kZzJH4$YdK-pldim5-byRoTG_km_f#Zn?-XW8Xlt|KolV-hr2vMq===|l21$&u z*X|Y1_BnN(;cx1cNven5LyRIqh={gXD9fzt=CpvUV>O0MtRq1dFa6Dvovt7Y0`j)f z@p(1muJpr!C6F;>&)b>hnTWo~NP}E&D!TwiYjboN+0ue4q~wx)@#3%G%nc(~wnbN> zk5+75qDpxOYXy)=2dj2W}Tr z37~N6`8Zynx-Ho}EmIDIca1@?I>ChrzP>~Ko^g*^VIH3HC3*#pbd;gpw|7cl>H+L; zeZSDsb*wX|v&$a=KFYhG{rUP{sd+xQ)0ELdRjsrK%h_}MxU-mxOXiF?bSrDH06b9r`m zT)DW)gaR)zx}%4L^XfUy!zC`K@(xKEmtm)}5mmmb*3^dt zA=vx3x@B$-*c>pDv`v3&D!Y~7w)b`EM?4Fl#oZwo(&WQdRmFOo{%UAdUhQTpB7UpA zobkJi#!Jkk@z^rUwCn9H<%IVk!FW!#Ll%%RggO2`?)#VH>89y+j{61z6Q8PK{9hm> z5E*xTgp*`tKW!H(-Pg8WyJ|kVHKy^z6X7FjX~EwwB|YE*%={&ycJB>s3eN>wEU~>_ zhn4#DqDJD+@^ZTm$)=J>=~EX5)<^4z?b(8AU5<4^!&cGZksK+>>&#{gVz(p)ocktc zq-sJnG}D_b(lL1mRpk#QwW%-Cy8Ul(Hr6S{`e#T;`Wfg_#BMK+)ydTB;M|+LeFxTQ z52w<${EL32E_brsg$Ti`tRgryYYp+`VANY{&8d3}r?i)LJMt#43ST2}4)pXaS z>OD^DtS!6oYPrJ=&q_S`lK+C*5?jS9>%#kM;6pu}l;|L}(I5AKe z0K3v&Wa9JK{xGnc9d~LpGDniPL))ENOg%@;yXeHpaSwfD&w%$IUc14Yy`K$kO8j)$ zx=34Qe0$Bf&O*Sb;NnPvHwW0cpttwTYGu(Z=jvIMX6x6hmW<`+8;}C!)`}Cx-hUL% zkjkEcxgR%scRJh$Z@&N9lygKfqv%K;Y3H!~7T^JoJ@dTEsx8up40!3%Hb5SVy6+w{ zB7!=Ksctjq4NGo+n+?)t5mpe{-`@v60z`DKSDS~%ddh8Q>6jf`Hy9XH=nLsNYBGuy zn6fW^sO+kFhlqSz$18=}g~yP!C|b}PVMD9+-SpFz+h| zmnpOIhzVv_rqtQnBI@D9K8{nan*DQSuaXR8M7*Mde`Hr`(=PI^Gr znybKm2^;r1KTW_gcKNB$l^wH<;DM!D5{*sP1*VQlKiU4wl%∾mE6PL&%MA31fQ& zn9NS`fP}H#-&Ftd$iR2ROkQuVo0PDZxw1}t(;C+nC`WEqM+_$Kw|Aqo;pR*wKOuCrrp zG%~9X*zSHP7{?WL2U*urqnx;;j6+TO&xjIG$JUEzy1md08;{i*(%$ruiuI&551(kc z&O>iQRJ4jYczZP%*LNk}00F-%rgYrG7r?5=JgG(+g}7%~NkR!5WvvDQF^ip9$DL;h zF}`co0v|@pwVBXK=T0qLJ$a#|ecRKSI(&$VxGg}=9&I7XBix&4wFLYie0tirFy^!5Gq+?gwu@@ZG0HbmogT4pp}yuizYw_tER0v@C_+sG(5Wjci>b7b3psyO;GYqoP!#_%bh zX6A6?w;(upReW0uLh0|}*{&kB685CeV;c7$al=Qq~D> zj|OfdN=Idr?ZA+C9%}VZPD^`9?=#M3xcA9R`X)S*59FP6z?kC&a`|{=PM#vvuEJ#z zFx2c$L*sY{>kt99-ZS{xBvvesreiN5O0v29FMlGxp}YfcnDdU9MOg;v{I>Ku6Dj?0 z088iuQ@6(Z3}boe?=-{l%#qC4k^3$V;{lpZBhQVTdiT2E#-y4AXSrt%9&MLdq~u1?FPCrhmch)@U2zPBosWRieO1i3Fa5m^cWA& zIy=bN&w#jpLL|XY=rkz4LYRwIgqLC04%7tXmc=ffTT9^7W~>dlS6#>3#j-d2!kVYa z&Oe^*`UGsi*z@MgEu?up|6_lD%7(wF81oSj$Xk6EjZ4?oCAepCV5no?ZNUjZtJ{m<>Ep*|Djv3sk^+CJV#w?@!X7EI*N@gpJchWbiZI|6t$r( z4e7pl&|4V)jLp-K;<`iWY~6a78W+UC0s36J^v!o)(zp`rx~fC*%LGV?xfdeKdQ@k4K>#OfJ!H2X z5e*fZ$}Pe7&z&#|KXHArX&X38WHL<*E=QQm7_KMXWlHjHJRFA~#gmo9zB}j0j6Eyk z*Kyme=&R2Mn+(>SDN1l&U|O}>;-sw@mr!xSRX&}iuMS;O4>&%v_9e7G0Aa#c5vQxS=28XBZeGA0RGQ6(#nYqNcJ3C7lSoXq-Dt z;ak42zJ8$#oO7D3B@oJig8`UGS!&aLC2ks7;Q0Su)7HEXxYYizY5?{fc;@Z5L$=2J zi*1+L3bnEOhUmFXWJe*ElnPhL`^r0O1N-avIxa9FLjqCh`Jn_NuC3oeSxyQ{m`zaw zI+ktwKuzp&b_z!d1{^j8EzqTC-aC>w_+*Y+v&8KR(UbUyMy~81)lOx9T9}ut1t%)J zGKVifInV_}xXK@;FoZLsMMmY!>M} zGorTAAVBnqYBKfnCvxvt%`kw zO5b^0@S>F+F^>?~GZ0Zl1>O>|vTVn*UX%|VXe35Hm~`0?99aSpMOz{nRkvc+i#`Hq z)rQb7VkNDNalbMCB&0kGRdxap_79O>0B=j&>s=Tud!Gm26*+xZ$*JV4y1+H}b(J(u zQR@n-R$Zre5}c8Sc-)BfIf4|FX6RofN@A#rM?FoXpIlITuMUlv#3d^VD^hcRyn24w z+e>!HRqZ>!nSEMZ{w$;zue94?1$8trD__I?2A%sO08P7#B zJ@HkHi^eF~o7hlh%TI!0leewRnqzdJcVzk3^XUS?kv8|#SD&t={M|ZeN_iw^xVDd- z@A-^1JvwL}0jBiM|K3|g(YRL(-CPg57pdl4cMd`P+2j|K>bz~rG9teVc71w^4lOY$ z&R`JZoaq{&Tp|0mbfjuqlDYXBr9(fVZtZ0}ot6CVx8H99`W^ioS6$ym4#AB$>z+9t zI@ryLueih)F(imoE)3VV6k16jrpLH}hjK$JPgzv*H!a$laM+Cd1<>IaLcsXg>YSDf zfZGq@!o|9y#kc*ZTMLy2?AJ?)j-24UrP(t#v&LC*!nZXF+FaaQ;CQrmD8}Ei;}^?y zgIXO1AQ6SdvWa}*wAz$lqERE_@iH*cn@2 zdQlUbylZln>|?^h*$dGJxCvrNC&m~I0K)s@)h`d!Hyo(KHo85MujKJ`BWZdDATE+2 z&~i;{x%fhRgE~nXuTYZ2kExWP8pUhzU-h98NYY)XAZX%ETx+_9z~ugZq3sM;T=ePL zS;v}@UF_?)F$x)SQ??kq3gA!JnGHPwfc(fA%|JszdD-G54zv3c)Pr1Gk$oScuCalF zs!G@Vxi;unQ2}F?Wkvb6D01Ap)H<5fYw(h7W5Fi%nf!2@U0t~ZC+uocZRhrv+$6t1 z*$*Y1H5?H-6fJPrPdz+zy~%n1AC=|cu{RCP%Jybyhll-epgy)*k={qEFNSXiY{b=TJEl{vuyTwTYToC*EecT$V>T0vTlII1xnkZP zo88)7hUox{i926jyNqsj9O1t!7AA$hIRVEDR>Ek+{XG(DkS0v`v(n9GoAvX_xwi%z zx}`atf*=J=#4`JOtTz5~lOKv!Gl;s!WzWp^w^Yv)(}HCzcMUEt_`I;ZYrpUrTgWCUO+FCl-ljJwsATq8JaSve>y7#6@LV z%xQ;I8JF&lIkeA4M(zOZ%S*VS+ayC)A9Y+B;*LmhOi57SLNVw4@+gWJK*Tpalk&h1 z&@bUbb#%1dXNl(%1l~7_lGQv(*@`C8;o1Y}44C76s%k(utB=z58p zdQU{!&}xigUnn?pU~xnhgFcV3Ap4`BWeN{18UF?@rJCGeihddRagWRBzym}GaSq~1 zPq3B16OQW1cTaS)8#LE9?uq>9=LjeA&>)XD>FfiwGaIomSqTeM-xdqSu^P&Gt=5iU z7jG>*Th`j&i6xeYpq~I$c*7n53c!b)1{zo8R~t7d{UNz?y1mcYzSiK4an!HHBSuSQ zr33A!nc3$H&+gRv-S;iODK;$AF8oIDRQRyu;L5D-w~@zu{egT(#j~1wVVsBEV!_?w zRp`*-bEV)pXiO480(L<%_RdaJg8t^j#`>Z|&GL+CtG?|c06~mcS+DF!VdGdiIPdWg3KbzPd(GYrEQCxaPa6(#{YTbCIhRc$Rnor}wdl%^z$ zBzfNFedfIug8k{C@jTEBiNwy&2$Pq@J`1_E1TzGpZu%aHy3&>|Gm7DQQWD6e7ix6n zqrMk9@9G(<^_vHj)gq)ll_H>~5h4zC*@_Nv{e5`}1?Fhwp}Wfk1ZSZni#@{;{1ac& zKN`=(1cQZi%(D>mZht8cfcf@c5uiYyq!p8Bl80q39hyj?1cu7Ssb>5Kt33KjU+73> zzn>YfpTQ^SB)bCrc0D00db0_Iuv!)tR%#o1&)>yaPJ>_F!y*U2RRlFK_b*x2V(Ryy zTh-h9e#z0%@(25HhLks{LUb98Y`e((DD^CcGG8UGNd~t2%J|3D;>GSE6{%6<+L}IJ ziwu85<LH1#fs|+?0sPMj&owTF@iU z_O~snd4Hy;bE+%?XMiA})>i?oj_7k@0xhv%C3W7q&77Z$Zx}mMZQXf!o?VKPrl_g# zxTa@>10|9DS>fF_+ByS2qvIirwI}8&m-*+F*&Bo0sxe8zp2#t8qD!^R2`7Tz>#GlN z4arAae0YTxNAor&>7Jj22v0>87?TmwfapI3^C&xu*f-M!8PD#;jO(*E10detDK)M0 zdwy9@{B2k4zupHd$2HZTL95C-15pOKM4!pJ#h$%&i4wz?+$jup+}KG(+mZ-P2{lJi z=B*}@s}(-J)acYa*OQ8o`b_=f0}oH1n6HL-cPF|1LQYXUqVWi z8EFw$RPxZ^Ssd$N-P$IGX$>R;1+m%|&GGf3AIgo>oO_c3ww6lUsULWfc8S^I+4iz3 z4#BDL`MetwL_!A9uwTBd7vGGa&2Vr3E$FwA-33cEa*$h#R>@|ay8z39T&;EgSJ4qc zw47RN1Mw`@U-xM#X%`PT($?uQnCYVPEJ*p?sC(f%+kJe4a+av|P8(#ngwpG8oioN4 zZIIoTe8_GljI`yEK4hJ-V6yv_Hx_mcQq(Sy#|#G2W8?1~gX0)#uJ}$2+T*Wi1NH}$ z-a&=K3k27MjlV}e0tCe-7EYzga-Ga@<5{8Wz)Rv0Uv2`Cc9q_=y)-EmRV)eI6yR3@~#k+aSQJM)zJ3ZtD@xT$vR8h2p?s9g~#Ljobv7dLh+$yu#R8!X&qJ{7*VH* z{~}oLcP;LV=(coBDj$@THM;JTo47T{bI0TImc~of`p-KyMdCE%7%O10#xh@5)1CEP zkL~cb0F><;M)j(}pNSy_ZSSCb>PqJEX5MzgTv4CvFGCMzP1&9IE66176>WSbN%YLB z>%J(sRIhnuF%yXI-A>nT!@X6Ahe}Bf+<*yD2Cc*q6`OkV5C?ydf8v}s)BxNwHc+0b ztv+5l!aS65TNPnA$G3yVP@g<*URkaUi3*-v_rttkk)#nh;+M~=jAaM`a%68!u6gCL zKiR+2pdIV*X6*eKBt8|@5iLyCFdzT9f;3fcKB=YfLS$=sPt!Fc^)1x-3QsH4hGUc7 zjfRDF=1SEQ2pvQb=Pj!nUPza)znuAjCqbvj_x9(aVD*-cPaDf<_P0;1MzcyYz|=Z? zAP$b%t8t8Rg82BTbcH#_Z~D?c2ht&~O_bDa0l)^8FBYMPFIc_ z%B}j=nh@9~DTi0z%|zNPe0Ap7X=h>C;Do`EA%u8OJR1D0;mTnsdy zLi)2Cv+C!DO>J#E=nu{vK=rS zn88qzviQ7=0)q>q7ZF`4z>nMT&Y^w2 z6K|rryYqQJ)yJIcO4|yO)iuKI_n`=^5-Pr`xNosP1emg||1Gk^cdTt|vcFd?R?}4c znDX?G#%Up@i)t`rmJ1l=%L^c)hIos%mmA87J9b29&mE3LvnCTFcqF+w=ou%2OU0?@e#1CSPY$nm1x^#`^hh zPD&uhjl) z4>r0wy3s8{qi#uhQ`+F{UTEW?0rSV8>`KC)xDzgYsPK0Wx3&Gmd>CoOr6{k_1ZxL5 zT%{kuP>!w0m;IdqQz(fPlFo3VjF0^4t&Nv^8MLBCxGCaHTmqbbD!tUv6+hxM6TOuu zW>GPfbNx(nZ%53A+qg;ZtM#@D2JQsbvc+R$c5@6Vl#|Dx7`fOkS@@XK5seb^>O@uLncOyfx+0 zfho_pWZyP_u1N<*228Zb3c9_7TQfTK!O^k6pZE?IBY+Cq+aiBfrPwwl?>CWWg*zqikxA3A;=IE6g$R|WcAiD`Uw{-^ zCw1wm4|%8$Nz7eh9%~4Y9;%-=7Y)8mu!G&dnJ!t7%~IeE_lt-&7A_*5an!^IqyVi=~BKhz7)mCeYBvGhlMg?ma58^vHS|JjST zUphgh<0NfRsApz%xC=U%pccleJ1!|acUw%{wWz7f$V$JkVh8*^u$?qtz?EgZfxRnt z8%_=iseI6Uwrbn0uhVkV(O5H~1W~oUEb-LG@!3-`#a^*4}DN3K2G8c zLts5lxMCRErCkfPKR;_!=gVi>to`m^xM+J1>o64hjjXu(-mw@{63R&$^nyRxzOQ#( zxE}eGuqvNK`}XT{=y{pHbWnGX?a{k@k7#gA9yI+DO@kzyLOP70mO+AmKd!a*%+t($ z08#qzl?FfJG-2C<<_rqpIbWv)?)G4`@ssR}t>}$nps5gOAr`7rHp8^epZBW41`U(I zGX~>;pPAQoH1s?ho>y6$(XSXr|FBR|QcY$oIw}}Et_-gQylyRuLNpefpkVKEB(c%j zI<}xu%ShhEIY`LMuzQdL9R{swwKB=1B)?aKG;=!lj@gGWCsbkb+OgCyU|(*FHV>%n zDO{==VCZSZ}$sD=^<7^ytd{>Ude{80|HRsV`efPA4T8n=(b5!PiZI-riR zg~8PNz04zU4FKAMyxa9J@d0vchCh-(6CCEfNm76ki2g1KGf`;y33HK z-Y3q?s~58(2y2%Iuxh|l$7A=74=V`skQ12gXW8-;zi!nKt+UxOO|E&!R}h7*N!E1A?!{N%MrLMyGEUq$h^@PFjL8W;{F`!aKW|y%!nkhUq z>p>HRuE16sYlfx_^ZO?j{SqpUD))HKlW_@-LCTC)SX9%U8{~C}!#3^^xosRbfB*jO z#)Jle!teeAOLll~580ab@Yl^83=}3SZB@Bau+f{}^Uu_?@aL0vpSFg>j3-Hnu)`kF3L});@j|MqL2iJ~GdTf>0Q9$L5 z7;DGVyAFew{YVnNzE_fae_lGXl6Kwu`pS0hM$Cfae1g}V%7Q=`_p1p(SvJ4OXE;YM zBHyw|YI?M!ZExH*+jiBSoXzoKHiU2`xwnd6wJviu9@oAXv^H)sZ5FW=fTs#kY*S`_ zlncdFO48EGJI9X14m_~WDjH^HISA);>rxaxO)Y0Z?6gf>_cd^E+zIovWy4f8$B-A@ z)qGXQ%Yxo>bt`{ zJ80U?*cp{J3}e>4TWk40N13*%3g3NjzQgX1SjWxcC;+S0uvPn!Q9n%mf}u#7gk*kP z!|N?`WuANM&l3tCAf=b}33dhPIkV%H8|<)%X9;^2tH+rVI*kAsu_pyATFwPnLg+-+ zLmeSTA|EivJ!&LYBo`lQ`C%yb)_sEUA$09ctFAMKAZSQ=>@kZX7WrNcTvZ<^e71jF zK4-`MDd=nWP^B?}Y(KYm_^Nf{suf`}=9V1mchM;NxSTgNDl4X7|FTH?LC3{Mz>DUU z1GUqg=VvQk9h&VtOVIVw#LpA~2`m&{2T+x2n7gm?Z}8Nz+ULR;lSN<{es|n319nV; z(164yiuZT7S@Mg?jIUFuNW8sc3GZe~=mMhyX$1!~aKbg@a^$9ob5)zk(HccMth<{; ztm0Q3HN`iFnRWEQu-s00WCC<_5bFdC#k{>4d>6IuhM}7S`K_jJ77dhlV7pFKP1N0k z%Js_${Jy<5ixUiqfgC0OvJqauPU&-GZt81-O{FXDr(q1c(Y(sSL;wuVh8BYH)Z>=|7d>%Vpn35fL-tmT1=> zku)yMpv+&Bz@T?r7I|5s6_4jjufv(bgq_D{XPjs-K zeW8VZa_RU8VA?dbW2gv;A5A27!ZG4J_4YaTX*M#v(<}j@%RO^g2nq=~o$veM=Up#) zu%C>HMJY1Krsv9!PL6Sh@`i(CXeGG)jw86AoUsRM&~@1tPf7P>Of4}<(uj~&jKU`M zv0-^f*`BI~nqkYy74d+h^>9Oqz~IAJUGCg!V*x=>DgU4?sfXv~d^}eGqsh4}a8mnCJCxGR{raS_j1kScash+BaRtBML>taRH z{hDZvA!ibrzM@*WT@86ureq)$hB5saJ>g1mq}R!!7hU^Fb8zqb0N^jkwr~le`M`u- zuPzq48adbll$eoQ?ssuix~Hm6s;F$$<&_Z3FB|r~mqxFgebm*XAqO&WGScw^U4C;* z41+1_LZj8kf9(-K&h9pytWeus1B%#Rrj=Cu;!sQPc>La&sbWe!TvfYn|I!EbiihJH zx}QgFsUI20p84I`exVDNT-_%oAGVo}dnql_APLbltHfP1$9QS#oz)1ux@bv*OPWy%b(|q+|ht=wx8?~Rot|a=ZnE!gj z$2j1()uZm$hpoVytA*ke$h=v_7muGc&dXtLyTX)}S*jZX)m!`6kE*^!0 z{s=X(e?r}m0x)#BcmamWMwR56ZYh0(Qk7~p#R3VRtYAi0egKv-P-j{qNzYre{bz|4 zTflrnIqnCXHW#+9t1`$?FH9T^q!w-6l^5KiD6F#6R=y^l9_(r(mA-AN#U)V`Zv30_ zy_LH(TvQ z)g&2oX8dsSh!hhgt=QGLzs?nIvZ1ae$5I9zJPa;ICaR6+AQ41Di^5 zNc5+V#Cla@^SFANtMWh< zK_M1p-b_C67$*VMJNVpgO^NBjSk{B6!(^coy+4#6T@2eJ9B!>G$lZfv$L-MUuPs)2 zi?<=HppKjoruI7b^0MsfX>ds8CEYZ$`0phzHXSEzjaC8vfHIn@vZr_tXMYEmd9ms7 zx~uT@xSDa0TTPx7?9-K@_ML=UKa2elJ-U3n^2=)~L~|S6|>=97WGI{lysZ7WD zf23RfuQksUAF5`Wx$J0v9sGJ{hVD$T z9bvY4W8tuk+4Og$O%O9*kx^_SYJpIK=K#j-U$~8oZ-DQLrYl}>sc6S@KLXys#pB5i zqWiJXC7=GY?exjj63_MknM%`B4y(+MUl%pbXl}kprLkNfN=XRcv1)^!NjY2>p(%P@ zMz3nvlU3Ebroy>-gfrBuEd=K~`lbWCcC*+_KKxThF8`$ET>AaNAM!_eBRQx2q$9t) zf6{KY{E&FUSw}D|wmnfj)5TI|U>;f+iTQjXu)ncWF zH%)E=R2e{;&5Q5e!uj)|w*;-S@ce0*V<`a?mp@dz7>ghQ{Bc{X={+gE_{Ba|bYB5- zvj_Jgp~?O`1`xPcZQ^~L;Xv9q{zFS^ntF2rj;$$TYu^{4^HBIYjH0)Dj=CiKFk3P< zz^iWYNPt<@oc~vv&W+mpXeJ0ty%@^_IGovt;yvD)8gBoTV{0n@|r9sA2$A(j>ZU%OAelHQW zC{=$F#UWwXIdJDfenzsQJg0tHA#pWLsKc(#MK^!#xC)hSsK>l#qen5D1O5{n4{l*m z*dkN$3CCJa&@f+=P3*DfC9gJgNM(c14!5vcNE`)xaWcn-M>!MbMHWGJEBVyeqgh(s z>kFk~Aj(7py zA!t+Ufq>uHlH>M7_xL5(WtU0~$WBAH$WpQFSOzA`3iJtoq6%dXej2B#qhmh_eV0cL zOv(?qf*+KQmq`qwdFO(B7I|Bo)_q1Xf&a6yn$7LI{VWIcX$ejWaT_qQ9+)PPPHSgY zo%^v#2Se>2Z{%MyFvp=jWJ8cX;DhK?Q}l8}H<$Z16H)oY%H_<9)D}Hu5*I#Z+c_~v zGS7h;-Xu&wvc9os#@$dF$C=e#Cks_~1{lZC3SNvQ0X2#!!t|gqK}@j#7P{0T`iyk8 z7fj)#Dc6iF4%JctB&V*eUtZNuc%)f{fDNR-vQWp6EVo}o!~K62d??6XsgLD-)oik6 z$hlbJY>`jvncXT~=$6btNgB2jlLstGz9J*ujqM71QZ6%jyiki;APq@&WV3mdJ7D1+ zEG&hwpR@e|i+0$nZiA$2^c%=dpO3>9wpBNv5k$m{TctpER2uZ|;{uXWQ@yQiVa%u5Fd;{QE=PixwPE&f zCh2fwF_+P-la?&cylRH;i~(^T!^15R+oN>V+%M9v8{wyz2y|8&ATpSdY@uWBS9HZ zrc;v@Z2mm%YQKke0%Tmmknu5x ziH>N{vc4;rf`wJ8L!SDafu7m*ZqFKo*+Yd>4*j{^*T-2k{@XB+zQNW?{>+wl)p?64 zb3Tkwk%QirNn)=;E}N$w0%azza~OVki8q#a!Yn1u{xr_IvQ_fcaN+w=hd_95M z$Rb#(s5wtOeN@OeeFD;qMZwe2@3qAHk;QX|Gq0BXO_bo~SE5~fwKU_e2w;b@BGXsd zlXq+YL916ESvP~cX~+i|!Vq|x`P{8eDb)k4mT!@YzwJu;;~m?Y@qeRqmYJOm&)NRwy!2a@+4-_X3935`C^*fd9KaET_B^E89|{7iOjZAMG;|wkdt3b z#XW^ti#SgAtZ8Zxr3I2B+a{c}CEFkkSuN<0!YU&w5|anH#!bBQaT%z8N4uWvQ@$XQ z`jc&*vpP@V%?!t<=LNXAPe(vLX1+Vrddo~3L0zCuQ;gCW|l4$=z` zJIozuqC~m*f$);0!%iq)dWdi z$xTWsX5o$HtI-NYz3CR0eM4;&p@FKH$%Ika`bB*QZ2x)k?F~TsadP?&!Ymn#J}8ta zTtTW?%W(yd%P^^Z;fx^m0V*b(d9p-%n)F^*Z9JBLgJX;Yr`?3rTP(V;-rymgO2ff( z@=Mwq&P1ie2~5-7i0+Y1TlOAExUdwcZYaa_hZ8+!s-eBsz2_k7u4m$;qPGlj^Id_0 z{KNJnVDGJlw|P*k?6Z}8#UO_c4##!H6jMdnq?x{&T|@rS*Q~!<-!ge3m6>1Hz|&$o zj|2Hm=o;uy?ZeK*Z97I^ml$$|Te2M3O(d{^GGOVM>yP+5UocdBtbg^II zvWPY>MOluVpqo=*?m)qpp(W?MtXl#SL>(D}0oVav9blWcQ?}SO&xm-DTFVT2cb&gU z9+-6zpDbcvdJ@-?vJczpxMDLgH6$6pE9WT?d8DR)sv*z-VlYG~8xK8)Ikeaj7OTPO zj^m+)@mMUFkT4@IYI%A@6&{KG{bKv)G0hnZokO&H1n1L2;0aeN>38|4b2e0kMLp3o z#pim77XzcAC*$D6^~=)O+5c7CR{*uWz1z}KinM5v;!sE-XmNLn1d0Ur;!xZjT8g^_ zDDLhS99rC=xKmt$L!fA1dd|J){_nl#%zba(n|U)C<`=TFv%hcq-fOLI(j%d!C??dS zCi`A3U;g!HV-mM+!v_37ZuOX)U{3t>s6PGX8*8gJb)I<*-NGUn!PjZ*6hBMt1LS}0tn{U{SlN0kHF`eQeI;Ci`0yG8vtJ7L-VR=7;jS`}NSPQV< zy0?|zZq<9HDCPLm(#9+(L112om#V2qt-5D0n=U5RRVjmzZbo|bSkx|MvPw+5J_d@+ zVxeH0m}*y^CEKdT6~$-3PYh~p*w7`dN^wmeYTELA1e4&!q;cW3np)RVkoZ}+v;5I@ z+~PSZxau(H$Ab1}fTzHjBjl_Yc$BI5p>WvBytfVwCocnYmH2E`Yy_bSo)=`?i=QE%8u5mzHaC&aEByxJ}+?zRU*Nz2j6x zlVxx+*^NO}fbV>A?l8Xco+WJ5H_=mmJjjv=iyx4QnNTNJ3|fNX*J(kW z0jj>>aI_+N&L((ut>M(z1}u8kxM&s>j-7oLP(%fw$~Mk?|9Mu=t+~U36nO?%C6H2J zQ*Lr6`q`)B+tBvBUbL{hmC4I~>pqJ&H6IN?aiGC4*X-&nXU2iMvbJsIpYoeJc`bBj z3CRo@)K6@5Bb+P+_xLa3WQ4wQ5`|D*a)tM^KeJ_ipWxOmD{q1Ok%d=Gd7dBX(Nvra z5>{SH(0j)Ud#Bb8q9(ok!K|{l#W(X556kCR5j~py;EE zTimyfIm4FJZ-q?JHA+X0^$6jY&wF1IE)$;2_j$Sw7havljhi9UbXPOwpGE<9$Iy1e!c`;|*A@c=rr$Ow7v@VbX*k&^|E zv}EDDn6tIlTc_$aYujQb;@jag;kA?%cB`c>n^;F66a|_{xX98B$wS=3e5a{^^{`9n zn6K&T)1^B7l>gjLGwZf0{uppe8C-@ zCNmD89?i`Hyz)Pp6AG#Lkk7`-+kk)4;#ku%GC@8$^t`~FFibU%6OAST=~L~Qms&rqWR0;_g;3-YjJvi+x5Yo7Y>p+cdW-1b7yg@Y@q1La&#^2NyJ^ zhdKS!{io*2j96!O4zQPh41O?qs^idkpceeNiD&o`s-!>K@k;i&xne>ud@kMr($jQj z*w@Ofib_);O&1nl5sq{rvaGa1phbl3Pekf}bR{dcTf2Cs#Tv-IlIAo4@({z|-*hw#!ToVF##lu-{bLIr3}QOI%#j1*#1Hav2O|XVA3tw0wg8b zg}<6QBf*7qEfsCapkZJre8ZR*;-3m;8QjusO!DlDT&1ZKt?7#bxB4zLu?U_IFl;+m z+ISbsAU)Z2B8TsZxgMyzzkF46?ZKi&^O-lIxc2pe-Pv*MkN!C0r%O7faGp^e&G8)> zjPDf9W7^8DRSq7SQxQQs&h^Vo6>?%}dBC|b>ZvRU5J--ueFS8zHiNLu3T6Ui*Jd7h;MQ!{5to*1$6pjYIHTOv8huq!6fc6Ijj`jG!) zD|C*V^uB9tsB5b8(!ImBVd4VHE(76`7wf}v<$;9CFzNAi&Ecs5M zUK3tJmvv#X7%5ry2LO!;Ig+Q6ek#dIZ)t86bdu3!I-fZk0Md@~7u}cTLT~Ib#$AJd zBPts_m_&IWUX}oD!gRv_7+^`FOqWHLccUkyrmtCXZmY4>_0o!J0HB>yM6HGz+?9b~`Yp`dXo2awU+;_oS{f6U)M` zQ?hG~6o0uFj7ejP96Hfslzy8^H+(ES@F77ofyp-yn zp9uFV7|S*z&-o!%xn8^R9WvItn6@0fe!Fd-e<5wlng2pMcv3fISUoSD z8i=?TDi(StYQsl+K==8oM=b8Pc5@qSQ%=oO!j2FswAB#ri@k_;Y2%Cmw@q7Ptu$UJT_{Xh(RMfp<{tv~oQn zmw8Afi=(6?B&7IL%|IV*y3cIh=UJH?H`MswJMN*RmJ;rmNlRX17SH4YzmhqikAwZa zVz{||bO^T1&NocXY(!9Xm48S}Jm^BXh)0d2Uum?LlFXCrqLt**)gY86`pVu;=~oh- za`ym6#A9&R&WdyM4(W84R+1VZuEmnFwObCERMkxmiOh#{ugdcP?+KT5qVg4JVOuz; z21QDqKO9&v7j_(@&1+T*-!>F)&)P@hygcF`7d*^wyzm`HQiYjbk=iu)}ZNl5VX-k4ah5Ixt52>RpINcn zDNT|NYT1r|q8^~9G44eASR-xQX2mp_J%h6biXDxqP>aN^o{P3oB6QtZ?}#IvZ81ID zH*1RIqW;}`-%OFtJ&!Vwbb%jN6}wE>tOD0*t-*jZ)0F1|j2b{N)fqaT`ubEr9#AwO z&k@g=TNXJVrL?;IIGEnd^zsfSeOD#=vO;m!9zcQlZmLxWNh?kLh0BZB8D z;d8+t`m=4FOuBQTHD%8wG^X`JHn#Am=_9c~{v=X#nN6x(?ZaF#n~Bf$|A~J6$2M>0 z%|;cM(0`X=@Sa9UVEq9m`I9*N$L&r~)c`pfh5nT<;%;OGp@C({zVv~@I7Ih=h>Jg@ z;i;UQL)_y{qWT3*VLYdxykH^C_}~H6ZA-R~2x0Pc^T56fPLxkQha z0KnuUDjRJ&tj&;u5YAUp>DOL4(T*s)CH+SL+5QQwN(@7jE#-oUsf`vvDUF7wHQmu zpM`f0)mC8f69KN!Wf{Q`G`jD|+T+Ng80ogT(hRdNbb4B&a}Gg`*BYUV3PIO=T<~MB z+alp>VOAoBI_b|`I}0BKp@4jOh`;JY=LFWbT^X3Zg}aHItD1YOj;UPe$&jdg$Y30a zPFGgUQ)m*OCmvQ*&^H^bwUS64o@?H^<7Y0!oSt!)wZj^Fw!G*3e4Ktp)`D_b&Bt()lI&-Rn=U zH(VT7z1tVcuaZ>Zy^D5n5H{)$B-+h+#V8V6jzEE1E8(LT)@qA{Nu=FjE9^=DQP0LXNVU7k&FqVhbczU7L)GU|l9cj}^_<1Xy>P@Tg&iP;&pRuK zY6(=xqagVq76uG?{Pj<$tDIfx=`nZj6IP!O%nw(!=v{I!7;+@lM$vp|oO2^6; zjq0j@`iycdLPtu10`Atn%FdX^3B;vnl>v3X&(6oEMhA(9?5c|KS9&uMmzvoL-`lk4 z=JGhY%Ou-~r?Ra$Q_-Xy0z_k8w9zAHgZGuBt0O>!tdULT5gQXZEw3bCXBl8wj~?E< zbR@3&7=G8wDRoLzW@Tj(jANpKmrK%d7hcaMz(!DTg$do}c`>?rh?p`tDyXUgFX8F@ zYcP!nP@X$K=QwY1L*s2VemrmDRD7VN_mqRETram<$2WYvUlWceEetK7tfl zA}>nn%c_h#g1|$UO(iwb379Bzk#)oYf?s1tvlQvo8=C7a-ZVmaUcBhBxs-EU zapZh`jT}u+&?w6QhKM4YO2$vlDks>NOxS;l;^AJOvbZA9eJ?y2Dpy5*`YaTaLhngl zF@irXG3yfAa7xPBHqgpS`EC8(C+jBJhMy(vfI@N=#w}XvcNTVYYFATT&xhB{63tB| z%_L=&4OA_w0EG#=m2_Lw#+NwK;#j+a>P#pt!n%&c8ZB)z+eK1%NqjbtGpE1{kWx&1 z_5Pk7lea+hd!s`vg6;j%w_k-{*t)zcF6!ALV1jz^wZv!1BAXSo;LlM$OyTU22{y=l zE&I~BHH>or3xn#TP`nz#z)8-{xT`N5-zN8jrHW=uuNz<- zG9ZR^?t-N+Zj^#EuvDykJT3JQIzz$2_c3A$A#l|z=eew)p|8Zv>ln2Lc04-a{vbfD zy@!Ql5V;tJjSRhv%ofdi$JnW3uZkIO^i)@6hFjrd$L1x|uQ(JOa^8Ve?S^^T=;%U< zwzsgE0$LaX^8q2)WFhDY_Fra`@NMldNyhIs4W5~ZkQxvo)p$MHP$`$1MR43_dJ-1#A>BgZ?b90X983M+7}OA46SqiK>mW_Oe5+q z4Xys}9_i#2I?gumC2h$0S#ZK@u1*sO3cn^&Q9i`q1DoABC%f%3tD0~@*YaIsOdh=j zf;dr5Wp6f##gE`oS58zz(-=Q=-c@fFlP!IF@+7dh%8MFAvp+54B>!z#kGlwZYn-Gr zvMw8mfk%#sQbb!0((b1Qg2ZTdGnN_0Ld z=j>8lJJZT!Uo)6Su@N~ED{QTGuAA1x%8$J3BlqkSukKSm3g+jPLP%Dmv1a!WaukEv zJCD{tZc=eu28#eBw+=D%`I}J~MHJa$Y*%=}E5Ps>X>5$Hm&K{d2CsUBfwUe*6cn-e zNSW}b^!qy3CRg(=(xplJNZo8|@&z@JY~M!qk&LFcY8*DbP&4jC+ex*|crBk6S^{9c zCW`~5yHRCeZ~>B4@!7k(?6{&m8%(0~wroz4^fjq{-^KuBQ)?9DVB4rN8c+Q}yFLq5 zytX1EyKUCr50g2*+S+$2ISH-CVUwC0mZl+2TLX>~cdJkt&Im){7amLl`xEd4k1VtG z&)n8u9Q)fRCVd%^PAm?S z2FiKgY=Q7%GQw#j3Kebl4L}%2A{a)sU9f^zTQ_I-an=%;K^ZENT~23+u|EL3bUoCJi5H`%K&t*wmfhQ{w`i!A}6l&aM3JO9jqZpISO$60O2*#taEU zvh4&cK0STno9*lM^~I7_o-#;QqL`1ghT4I6=U#ob?36LV*6bS80Z^5}b;v{twbv6E zh_0Y{${+G*0h0gtUtb7Ww#cSnOuO?dPrp;OHB~>#2YvFk%(3NNAwL2!<~72O*cvXx zol$e9!9Xci=_oGwT8+Z>Z$@Lo=5(-V$>%WimeO!t_LqxQBuzh)DAC=X&TLS5yxCq* z$}759sq@+|zv&r8utrGX1;^}sj%yYyUu=JdQBa0Ny}dw{w%nT{_bg(hAiJY;T7RnS zIzr3d+Bq@%EoT|mf0C((;Z$kE3m}ITgUu#{0rFAPUobLBPGlyctJkut+!}j#y4d#m zWa6b=!aXn=wP)O#3LhV0H@jMH?et}jnFX!)gx35ME;;Q`JmLPEWxRkB>C5J7?GLr{m9A?Rw zRrD+7dOX4jN}W1|b2V%#Zet zQ$69wF7B%*EfjLxOhaXFlfUDEhZ`rzqR#NV3cGD&HGr3PYTM?)UnXCcE%}r>5GGGN zPk!zp5m4TlS5*3?G__f5*Md<1ieetz>uo#QdE`Io0hRal=5UTt2F%Fmh8q;t__FE1 zawmOCN2iarf=~RyFtzggMFtjgPY*|h>jjI-ia0$9tYe~aCGC7l_G6&tAkcp-kND)#we5Fn8{hYf&sIi86;rtllkWFH=sk-L#5&JAGD zndS4hO(UigixpIy^^Q(aS&d3~GF0j5Ze?xZ#P#c|5FH0=hoxxZVM8l=l_Orh)?%7M z{;2l-j5H#0ef(agt?C9QhebIXDTfalRI&>)T7ut1;TS7@&{pL}H;cL^Zkyo2S1YUj zjW$argPz)pvitnJwZo6=T&fp!@LxPBqPL;Ng{#^15^7+R)NOu`Z+h7?9l9A6P@}fi zihk*Cr7ThkK9D0b#_MKw<*jHuw|^<8&r$fnMQ^Hh3Qik;H6y-b6YgF&)S#Ozce2e{ zpl>Ppv5wv%D&30&17ou*DT-ptTjHajmc!YTJVXA+ z6BDWLCV!YIyS=-X6+WmYroxWehwG+^2 zb92nFAv~VVVz`v>Hu1uN>Q-0IN=ECZpYtUJUIX4vkSQz%0f=$vuPDJ#{@IYMGWg_p zCXQz&x1q)7)}Obj)tDH!dHsz#;^4eld?sYJT;|ZoX(Fww~_y(_2+tYt3Ap z4KDNNFIOakzS?zB`KNoK(OphSO@E8P8*w#Sd)h6S!+s})e3sz>g$MvK%T0kaQ=)rf zAJ%QoGhJ1 zx~je3>bbD3Oz}{JkS+ecUh#@jE{qaC9|a%sIfpL}TX}L?YHL}zVBLPlGObwcbd;YpkHcBBpjCkoa@^ef$7mv&0!7TVpWR(D&Xz}?2!uPu)G;-e zcGsUnyffYx$|zBERg0~!wUl>_G{%2`h}-&MUAs|VgQ8%}K@g!_OQl;+b!4I%frQQE z{FOeTqDbjM@EtLRai3)$aa5xIf_VIJ94M$WSa~&HGg$=Np{!E}ukv!0LMUs8Cub%nE-GLggQk}L!|p+P3D@Pz=65su5k$b zne;?X47o6W);m+Z0alz36w|bK-k(ge+tZtT@R3xDk%2D!oc*%C#rU2-KqBTNeqiem zy3MT0J~b`Orw!XwVbk6iBSF}@uzV6@N5)Y;Xwn&ynC9?dTZ=iE&ofiKUWM0H$ELkE zT%I2HOMQ0Epb_^t<`dkU4E+Tm3!tDPd7I?$sZLv1k9Q!scjqbpnx`#@t_B+V3@lNy z&~&YeA$nY~%*bKfcX%f;REzGRGYJr~XeoIjWAOz>A2fmEpYSAGVnTl~ENaYfzqmlC z%iEkVBUGJUu~)@Vte~|XUNa}usRJIw6aF@l6h*p0G;~&RUJiRVUo@SWxU2-; zT+9YGHC?krWHH0mP3W{ILGZkWRoz!dhFQYzfF=jLCM>*QC0S5d7_=PESDET&mmwrg zsJb+gD8gYZAj$A2dFXCKYFacpcKI|k|07WwB+v7PVmdVG^}De%X@{1Gq|L^W?oMpp zH5MTB2#{x^ckK^;dV8^KKwq_(I*`$x!$%~Ylk;ljlwdlqs2I4l(o&QTa|u^Rj$*}h zBi3t4=|3OxaR@*1lvBx{rm(fOEv1Ed!d>^oP!o(IKb;z2Nzq^QrgR9r66#&qY@m=R zk^mS!s1?QJ6(Ol|wfolVR|tz`EYvWz3IJ{t6qbACxM2{l7VCOD6$O0gxJ5H367m<| zlhQ94Z45Wn?|CozTwFJ-{5x1(I?x8<0rOY@($!b0>kx4IO;Di6>yti$%ov$gK3j+4 zGYAp2gK2B0fzm-CPGCUU#gP~%&H;2hB0l2fyGklN!Sq|&S<|;hDv{K-0C{JPSHW*k zq{_o>pj;W#Bu}0I8>>?>>k^pdsA(G1@Dx|9h95+1?FP=aZyu0pc=7Xtyt zNuC0miePT82?PZ4-Su^=LcgthdNI7K`)~;NIDX-JAPNT~hu!ZjKTWrRZ)@(X?$`&e z=(E7?R>@bK=r8Y5ttr9C#V+|llLvsh3(EOQj~^NMCbAwl74KM7hJ22np0iaI5_&+& z0pr}V#mr;Rs`VY*FG=eju`H5Nu?MGXC(g@EsFJPnDm_52;Nz0!yrCVC^2kO>;G(HN zXuDX*0}oanG+t>4U{FH6$(vndKnzK?q!+)Cj;<6nej!1oLDgy8J;6ObX`YXbJwRR2 z&4q-pN_uA$Tc!j?3FsIoO4pquXxa8iw@{+7;=@e+&*D}&Suumbtw-Z{*i{xvhK$3M=eggHL9ZU$DT?u#eWCr`V-dmuYdo5cp+r!|BYTy ziSb*<{=2)Ip0Dq*fq9RTocr5*%=jAgv#S=@dy?OZ%S0F4qWmNozsavc3|;?k;JE(; z)BW53|0!nO;#b*%5W{2mUE<%kItlZkNi294x5fjNf40#6){}1CTh;GbLf70=|P& zYpFf*5YI!ITkW?_a0mR4N5bV4?ZtAq}xzZrvVi$I%H9 z;vxV2(*KR#`Tx#$e`}%>1-s1d9KruxT-@0SO8{AAdEdu?K#b*g!&ZR*rg=}Fd8!2> zcvgs;xPPH}GphbV0?B#grP~iO8TBpDB;25+==ZAb?%(&tc?$b!NS?45$t!)nXo(y z*d15$56sZp$V#?Ip6{Q4d0pBBFgMWZ3Xfj8UWxPi^?l<5-I1;ja|+k%FZc5ghEj`% zXGaZ$hC0SguXOgeY!Z8?a^b3(Ber%IW*a|IPm7bDGG#v5A-b*qPR(qLo4&&U=bOSl zdYbPoG|0}m!S~cHUe|mO`X-?OAI~+35OHWZ=S5hUy+L~Vnak{Gf& zMs}COKlnM`u(`WERWRH;VEGaHnP_BF4foUFX+7F`Tl<|BEE9AlkOc~JAt?|n#{cAa zx`uxW!OkA0)%sydT>C&45oQwbHf-bb7w*DG;3?E8q{r1)EWj03&9YmUt;Vy$L39gU zIYXBG3|mv4$wu18LJ4&rK8#coL`aJWcf95(%qJLLaGE@BL-xt9+9(%{OCkj@$ihih zhgEI}jDI2R68}O0iTazwYL7J#Jv-57pzQL0{R3tE6za)u=k zDZEd3*UomL)^(jv)+5#)?IU~h3(3W6&7iwqy|Aa<$!HxbuHeDE;9j^5wWh%NP~YKd zL>mTPdgZ(B05`LIH|Zi32yC|f1hP9U*!?Z-UGyNExZuEhAmSZYK;mPH2DFizNA}HD zt`wX@Fy4;U?oZPm2Pc3r$Fxsx1zSwwEZK)Yf@z%QkN2sf1oN`IJmy{sNxR}q_u(zH<-5Sv*2Jy<7>m5IO;gwr}n>FeijOYOM z7sZ-w<+v|q1@ZPZ((!aW8T3uN%j*l%8N}vj+I!xwZL5dQZMIBVGUzo^Yr3prislt| zytAHq%Pg2}^#R=a+8Yeg@Sk=vI<<-vei7JTqeNzDO6x>>b73{a`l_LOfO=lvN49a; zx^YN1AduD#HU|b;CPz50i_&yj5wS_ zFj=yAwvMh2&;N-0aN2;Fdmem`743dc=f7viUFn@;x8ob3{olgfBI5%jt2ejHij}_) z=gL*?@;Xj25WDh%=CB}HEn z?Pi{r)`oJ-tpz+&mE*rS?EG1pyOgW{Q3)Vou6)a=1r=LRfbf4l;9?o8CE}24YgbA8 z#`d0zEZ<-jc~ZoqVg@?4V5PpykC?AZqjT$AJ-I9OGY{QQRYiMvZG4if?A_-BdS_(z zb|L=dKH5(ZE4PxNz@@hx3ujh!6`w@>?G z{Kg|@zq8revyYwQx+&fyosjRLxb<|HrC{SM5@h`}4?VZ7Hs8jN0;M?jC-uuk)?Ev`=}Xg#9|(H2OtM?H+*l7}dX! zE}kRM`2^Pwm2tj<_eeb=+3F$>pE9qFnjYrv>aN=!`tN40IXLqf{g3{S0sXV?iO4B|-v?b|;TfwwDsF@}=*C!-1C~W{B~+YxN0ICqas+^wqB8rAd4K%pw+@Zm+CAr0 zF%^Ml+?D=SooPmffUTc$JK)c#sU=fB?=$5pYuflPB3Ja58BgwiA;AV}S5MdJ1aDS1 zZf|@wqR&FwmJT!l&2LkjLli6A#nTME^P=857qJL@cA$IRNo`O*KlEeRyvLR!s*GZ% z;MTK5?^?bFb|+MyAC$Nr*iB9ikltjRR~nX%vg+aWv#sHYP>f}HK|!J?fCh%j@Xx?! zny}87JB8^sISLFM(o$670Bo37H2nsn+|X~^vceq}w~Pbdm=JnV?&cgkI;{gzT;;YL z8@y_3r4#!?L9O28U6pZ_T2J-df(|tI18KR|xxso4-RWnaXGQJGJsQyoCFITZ8L??n z#;f=iX?zG4^PjjqZ#TJCnMh6UemfuFoG+_7{{)q1pTO0=X4=i1#Zj_?y0<@B z1G9&Di`8=F-cRqzAS53}x#vicsjF4r0DH~(9K}j|ukEN15sxRDojK*E%OzsuVD4}m z-|VcWnmi$i6sR4aTaE|vEr}9aV|nHfy&(|}?7b?#miv4MThx0;YN?)B*WK$Oni{Ugv=A z)dKFoqdcTR&&%7Jqq_7;InSBpTONl%&SQ0`b-Cj@eLm`ww~uaaiU{ zHnC~{jLrsDF1#*9Ug!c0e;}EQ zTS^3_L?kXLhCBiVi=&mHOz03%4w6#J6DgerKbp7-%F2p7ZbFbny98gs>{-}wFLm9| z@p~P5$9=yollD*Ik?B3yZzjS& zNzn)iDeEH}BXc*dOlfM$x!57A{7lYWg&4g#HBMpxf*l&Ox?9Q|rt1x~OGM!>Gak1p zlT+~x!M5lM?h`mVe(=_xU8Y7ZV-wf%>3~w>>YR3+$5H3?dEBLg-dZZkhSS!4s&|iD zQo8MheK_=F!%yD9rG(NYMd|Atkjjs&^J$y;arTK|&fjETmkzgF3vUe82EXm-He|rg zXeL`_)vx%_-}Ru4CVx$4O*3$fN(bDPYF2}MQI}2pWOAlH{iJ@afMEeBD+9;8Wq5sz zS_SO~ugO>g#i(9`zs?^ZElXw0=C^RQx+HI9`0*NO%-`IedMe69xo@3iJkKDw%R0N3 zrvA_w;BMT>-RAV7y>(U1{8(&Hfz2*r*P?$RO^bBmMS0Xl``23-LBty2bI?94Q9b>G z+`*n$AEYgdvJzGaRl{OD>UQ1QdWx!^A%UT^z5QKAuuWzT`M8p>zSu{8HYrhvLqtQ) zte_wx>M-}zV`mok;{7x=ux?3}Wu}|CQ|EaAEe<3@^&{U6wtjo_pnQXz=k}lmJDdDW z|LF_L&0++$%7-=xYO@Ie6mi)Q4&9tmKc+Oa}QYu ztPpy8dk>E*!(v7guZHqvYDCoYKMzb`3M7v*^6{KDFGcT@F5!p*AZTpY?yi@9B5qmm zJGDQlcsp;7@(^bp2y{P}5~LwO+TA+7-EQp9xKaoz-fs=C7{#Qv#j4*_JVqT6`Z6OJ z`!6J`R`H;VFS6mAM?eSxgq}Vl%QFgQvRATdHk*zq(<-HDLxNjb$eG-AzWBo`^OoK3 z4sqxdDEze9uND!}w6pT3#;!tf$=>a{FSfzn$d#nGZ|35EN!s)a>5sHccZ?Tws?$QJ zBB+%YUOB=diig*SCtPFq$s!K~ew~@fy1$U-<9{KoY5YyXd+e8OO9fnbKK3tHq*$Vb1y8j^f>XdBcuO|tjRrFANq_57E#&3vFf zUETlAKKozNh<)EIcUY2>J6QtDfZ**a6+yXp)=4{6z0$-NE5Rjry(Lf>8VDRB4mL?#FBG&!X3g z3ZKo3W}&rHr8;1n6QSpzz&Ur1fj zYXlehX4Abv_4^gYmT0RCcs#438lFlnau!n8c#z{cF1_O4s(jc4qv(wb`I1=fzDo1b z!VTq7@IA|#MOiU{Eg90=(mfDb{VcvNtgAM6NKVcJ9W-7?A1$3l10u-$M4)tdP*opT zT=!A+5z@ni;?-;k1b5qdmR?bqdG@tV1Z>c&%aw;uR(YNjgPc*IAB09%Ob$cjSn94T zRsLODBK$0fOnj&ZG|{Bi5#Od7Chzc?qpT<<2@IAwo@v9+>S@6HK}60nWd6-kG$v>e z^p)g0Ousl*u!13(VU|sHrD0z5VIL0ujK^f1y~#TP!61JoqrA!>HOAoc*{qERP0FR| z=bCrm6zogX^kM!}67uZ+^Y7Gsq!)PEc_=Qc3%UA>0r+Ev%*=0rSO9bVHuC*8NLHV8 zJs06RZH=lhJrt~}SVj&PQS)3y!~$h5jKg2(V~CS>F!-SKc55Tv^`v1*)bg^+%2v+Q z2i15O>r%i4u93qne3r+1zhD^GfRAp8wrN*5Kz=EDNvS6T6q~}-_yGQdz!BW={dquh z>HSBqyxnb}k=ev)Y zem?fehc@&l*_Gu^=HnaL7bkp2Gu5Rn9i?|xvFD-pAk5UiO+iyDVt$l$O@HrnyUXo1 zCX8|sNB6^NxiG`~*&eOp*PRya?mz7D-Dj;`MWpEI%PF4AVc zW6S@L4fUDw&CcBj_J9E_`ft*>Jaql8g%+Vp-~9t$2ZLgJNh|imsXNgYSy|zR*24 zz+Xrnw<82+8aEqP|J_09epQGT){6*rP} zpCc|sjzxUzJK~O)AH+YKd;it2{>ApNYg>dtIlkH=DnI|>r$U92Z+{^THcc24jz4+ zeNA`2^G`h;uN@I^{941*y8%(^@xOOatO#%P^aH^(B_Olof2s`Z0VjCy-}K}^+fsd` z-}P$gZKTsLq*TQ8kMQ>2*9iIi|5zg-ckvJBSKkc)$1VRPg+Y zKilgK z?<6dx3J(vzw4tyL1w{%aB`T!qo_@UI=8bvt26sNTV!~lDSzl04{tkA~Qi!7;jhh;m{p+*PYJ49PWEY-$h?}s0qy!%Te zCykOlp;^-s5+b6bqvPe()rl)_pTi{%E^x9XRchhaPf-KL;nC62p`qiJ4IjJR^;_{{ zx3{;a2`)YOJt7c*(;8MTljAc34|!MC>*u~pW;{lNVTjmmsCbQ%PqPn-VATp}*zH_{)%n zQmVnq$1GVa%2jjTAm;i3Wny?DLM#7qA)7|%- z2{jELDhZWME-MHrJzgH>?7dhrxMBkhs1ZXIABq-ZkBP7f3BK(2CvJGarCUw?jf<{>R}pM_fgq|HGTNqSwAY zUaprxs2yUKUCV@R>Rm~#QGltrhDkDxY`3{|-nK0kPve^&-=4;)xB z;I{iB*60%9>6O;)*QevM+jDgZ*l=kHg6W^UC7zAS^~DMj!74mo?c6Sc)bCPc=RkYM zkYgie;PSr@V~7||t?k2lkOep8Si&lzDG3)dnL_=9r|q5g&bLGw5u%@--z9Fq zCn+B$oFiim&6$eE6I~Z-c7DIifqQzx*K&#c-0mY;3KHmcCxzD%o|WqKp5&$MDwNGX zxT?A;s5aUOOW^Or6OGk+cLae`_maUs zdFjE)BXOvsp62^)KtH_^(PZBFLHo-3uM3O5Yl1D*(goUA%B%B0J?TJw(hXMS*WN|W z>`bem0w-5mg=?~lO%%p*1}W1g5T(-bvd{3dWuGVZ?$9I39TXx@@K0r#t9A?|$jco} zmvY6Ix>>DEcQ%^vM!eR=&1dWkrK9C4;jem$veougV8K!>2j_HW5@ly`1QtJ!LOFMv zy8u6Lyv}3Dbm@)bF5BKMcf@!n^8&3FBKw+ocI0AMs=re!NeYf9bva$Cjb1jo=KQvi z!iUm4zVgf_c8(jwtW7Ejs5MOfBk@0BCm80nH!^EoibWg49 zi5#z~kfy2dWY7E*t`}s-L?zEj7FcP;>ie2sD}y8)>grszsW6M4i8@mBjs{uVCi`|u zu7%lhiZ?(e0T&bW`FSl*#*?{V?zg(^9a!`s_ef0KTTqTIH)Oj^nKzFDN1!Op6+%jg zev&vDeS%qIj;ItK5H@L{R#?FN7(`*nj$LD3`kDv_yAcXvA?Ooj@RC|+5PP^Kh7V^Q z_GNhf=@4Kq+MeQR|9Pr3nKr&dcR?f1NDo0ae!l<4?qH4hgdqAJ(a(u;imNccsm!w} zO!q1kc-na6DK^WSmT+jUUVL$somUsSFuWeKvWv!&bOKTKCR*&bio)-aNS}}NiPawq z^sc@o$5nbi&WV4KGm=??6)E#)F4(}nPU1ArRLT+Dc2_WCyGDPDGROK_p?&) zoCJ*HKu*{6U*=3EyKjnx)n<=Y#E1Cnf5VfIyViWT#>>kVYAU~|RjJ3m-4*7#bWd_9 ze_3?!p#m9f8byK>$SqA4cw37yUT@F~cbJu8eL??5`Z58R)Eo#I4fxoVYHMB+3ri(f zrM8TO1kvzu2OpFcS-?Nl@CqGd=X-oNoo@{}-1xJiIldscAc#G5}7ji4!K5=j|Zq&;F{^Q&3XIz4A+4xu4k|W z7URolm!6k`*6#CR+NM0@@F@W>uq**tT{@np$J@XkMIR zEnUm$DY6xWLQ9*Rt+8HTDO7(iat5``e_nPMO5&IQ$ym>cDn@M0dr$LObQD40 z$$D7Lq7FhV22aB}mYS!SbRetNAiq#9-JAz@C}^QFsntNfA!U{Y7kzj^2vs!i2xRrja9+tUIO4lLMzn8q!TRbywf$ZKhI@jHI*M% z4{6dnxcu&A`*tDs-bf%t>nDdcqa&pa*N<{y`!E)ZaBUC#Zq0}wtz%>f+roC*XL-cG zV|8z}xEt{OC@z$WX&1Yj0TR22A5ehNxO%`5GJ7Y@cxYLw6voTFm}HBK5@EvaX8C~@ ziO9_GlNb^P5kZjKVf0!|2;_*fT|Jf%WV+il=y<5zsRDwRKzUN-9>2+Z)_0U-fG9sd zc;5Wc5%MpUkO5-ckK`Om=k%~>wg;+<_Ln_yzzCsEj0MTf5t&dQ-T_ZAtHgy<=#7n$ut^w_W8PH^(d`JnVQYM+NXe5M~Y_mJk z)d}7_3q^9ZRnK>CIg zD!K03vouthjg!8NK-RO%;Imk%Op^-#L}I@H8>i!#>sv1SlV*Ss77_H4a~vLM2;uJ7 z$9qpiK(;#UvClvjIMS@dclI_MzXw-)#~S9=gS*(17A7b_7RV8-<_=NwD;N2J`rY(X zp%Rf$b+7(F>~b79>F7yyqSn`B@BCjTmtqhCk!4q6;^BLrQ5c`rv-Sl4C$wY|_(cygrD?3`Dsl*`J-_ z$gjy0ytiyX2y{B5P4vT+A1ThXPHJ&)Tr1X_Tg52!t%6yKBf3Qnd5Jr=4Ljiq<3K9i z9#{?_Z|>7(3J`+i2cAcxk?;3NM|{wG-~SFB!Jj?ss;%MKsnsjYtQ^rj(^k5wX)YY0%deq#V3nBV&>I4{ z^52R2(*^ocLQT?CoYSe5ED!RMw4ZtX)DZb&lEz3cn4Zq-TH*b#v4%?(UQbDqMjh#WwOQLf zE9gFCOQe2Hd-TAy!1TUyD^K1+<9e5MqsM_R=z9gpo)AL?+{`<2jACJB6-#yUrthZe zH}k{ZN67@njL;g_i!sLwvM*_QFe6k6Qg+&}%Bv!E3sZ9e9Xet|AAr>yA^E|jX10nG z+pjUxOiPp!dsox1pK~$$NX(K%0lj=0kE5e1n! z*Gs02b|OXSS-U12*?ZYs6=T(Ai(Y5y4taaGKFV3PigYG;iTSz|kGr?I%MIrC8Kp@A zGPGGL-exP04%&@3U&*`4_s%agxyJjCO0Bea2OxrtHfXQM)F;t}t21a-Xkf*4q1=U; zf?@yrV=|QbipC_Eh34~K<8-^hnNxBQTlCb#hb>$MIH!D65duLU>FU!AtG9!8xYa6k zmBzX6u4WUw^v}xX(s$1<6JCOm+)bpOXCbZ0AqXhNCYe3v_E1`+msqs`EqB>&C)JBx)_e-B&XWoX;&-XauA)kd)dQ@tLo)c{ zuW#wy1TAjgUy1;HcNv4XHQ&Bg5i&;9Z|mbRFs0G%6=>2`z~bG!+Xiog!5AhCpG6Ng zm8d>1uU1Vc-E4sE(qfe<#9vIj%;H#W;pE49;fA^AlX>lSBJaq^JzN;%)Vo{uX(VaF zR5x_IyHsLrEqX+nWH_r#5F|vntx3|mFgrT%jNKF%dKc{yf>^{{no1501Ngft(P^;O zZ&4*#u;c*jz7NZdSj1YbZvUKcUDz(V2CRA>1+9OB4!`r*8Z(}^4qzvZXrhz}@{F2@ zzvt6;iy)DU_Z%x<7SqK0@DejpTW+%|w@+19Fkn|C?)f6N?zR$#Ik*D6%6AG|>k@A} zPYbNq1sqE5%aEfR;L6G+p?(0hp;`!-2HoQea_&&HS>8J{jE4fOd zOc%GA;U%B+DlVqn{-ul!Lkku+nX!B#Cl5I=myRPiWrztaA71?Xsx2)lwHcS#*>H{Ln)*9FQv}uC?`4XZY*X3Nr!`SKL`I-eJRO z)r5$V&2N`!k4wxa3A*(2wRKQw_a2UeMj)pd5W^B)nRphnt=B|0ICWG~IF)7#Rdj!wk4jK{{Mu;@e;}!XVR# zjEBs8{9Sl5ufr+oL%RH_3WkbRnHNG4J~De#eAk0Qi6lQzcKni@i@=)Au=lQ}e!xi< zdQwyfJ24NBJ}(o9Ezd_+Fi=)57!qv5oeljGW%T z;_U)%W7`7SWGTK$l9B(Q+qplf=9)O4fZ6z%`KIWq@X@O_i!^qKqYWj9kKBOS^s1$6 zw9Y_b^{4{lE;p|L=`3Ps7kpOe~I+-#>5th`2>ThQiEV96xtdP4T&Pc|P_Tx~0Tii-{_8-Hw@uDMfM=YpII(%8p+IHqcD{r5`9TWVf=$+}pduPk>Q zv|vZ|KC6Ls)})nbW!D7lG9ROk&Rfz<%-4F(Unv4OdE8{m2lfOg2wz2lN|3KItJ@)| z;NNmUeGqKl?lxb2)Xyy(*jcdqqcWV@C8KR>zu5l9A0<`#c(VBY@cai3&`ZGA4HJzHup1! z7X2GHDLFJgmb{K;&5k(ZS(R&f)udF_$QZLRTdmAmFy`GanjbqaGou+8jHGdd1Tk14 z-yOaW9fMAwXWO_|b_bB=RjA}g)$eyPHl5)*td5#=GTNk{?t$fmo8zrF6I*>?+$G@4 zbF=J!2C8y%_xpc~FzNeM!!eSp*pm>OA7gT(J6NfonX5;u z4qHtGnrQs4B`U#1`5@P3#ya1cVMJ$q^i5MF;-?-SKO=lx$B?1NUb|f>Bw@%(d8KdR98mAx0}?b3dkzAIdTI8gpoXTD!D98;X2i z;vK6)Ys9Lq<%@&Pd~?U45Rpttl3P~0A*gPw(KtjGDI2I(fUK+HbWWbXx$ZK$(3yxL z2OcO*YZzy4yE!9F6x(fnjg-ZBt{*uPgPEDfHmyp-Z1Eb&trPudX($;&m$m zPy$3-qp06D7bLe?cK~dwa$`|uJ>wsZ_&Ly?JIK0mq2VmSX9`5s*njVIBADScM_>@M zT+mupk*h_BT}fpd-NfCzOnz&bDO$a0j}0VJY~^XL&dg#<;tArtJJ>BK84Zj}2NePa zY_@1^Q*It&11U1XWc_`ugF*ZrRj*O8oS%aonh}ZLRCV#C#P+emZf5RQ(K#w(&XUUy zXM&5dc1o|`!7~k-)|r@@6%`h``Zl)qy(&hqMCD?K-5kurOBdy+O0Vv&hg%;P5S+$q z3_2j8*b_`eo|^o2vEslTid37m<4CRrlhX<~jvR@4STUs8DH!{Yd$bzaDl03`RqDmZ z#TgnJPFsEzQ-T5NW4Y>N$9b9GN1w6-_BD;}dGo*u3o_h5wJ+@#!TYtljO$^SZC%ocOZ&MOp2I=bAVGgzpfvLTq_EIYa;BnPAO4H7 z&_ZvmNH?d4&m>XLScY`UQOEt=u`S%0$?qaB0;qoo70)k(&J9>A2Uu@z$ATLJ3J=6 zH|>M!t%1Br5a_XX0JE#6>8o|hlc3tz?BJ~&0D#hA94ZHY;n5XQmELr8660Vh^9TPr zkp}NCI{?L~)+zb>oa}MTOR#Ou%mdZu-lbvI^FVuuAe@}U+)7>fY z{J-)RY78Q+m9&q4tc7xKmMW6o%8NCF1JSz6FH$GK-YUx$$yXnqi@NaNeLFylg?TTh zWMGL=s4f~rug#%&2l**WG>nV2q<+Hm>i9m(EVj)X3M!|_c-rlAS?g!kC?i^MFj|)m z(Q%^g-GVHDC+{#3PD6!C3I~Oc2l3B5@sTjr#9cmhq+$CFn++5_^cy78AH%MEE#9#J#mR zdZKaPtz}5Ltk|r&f3W^N<^=txOBKuNNLRqMhq!Akoe%{3lF08jKv<=L45dqkYL$4*w@XMvt z!jB};V+U6}4mD~Z)qkXC9&%}i%?=an^oLMMx^Mu1T=5=uY@a&ez-?2|Yj|r_0FdgQ zCKZ~Wvu;kULJ6ksr~tggiiHhDYK(P~27lHG@9>hMe?O~yE6h=##u8P)n+ye?Jwtu3 z`=o&TdgSHM>MD9y%KQ=PnsInV)@7EV@)N*Q+El<}#0BLam6(UZZM?G|bmXn+K*PNA@crwXF!E-7pYL2iWWo9b~O8 zRLvT)gs5#J-0O2$%cV5YYA}-w14ZiGlV^Qz*v3HhBNYX>W3`53Z$aVawpF7_4a z3YNwEwci0B0MU6d%C6RF~qEu|7Ny5P6ar{9lQ4V55Og}*H2Vnz>C)Xu701uB?HTmM2Sq1&NY z-)M9GnovLVP zX!#}$e26u0vB=`1>egs{DAuB&KT7ZnI#?;jO8r5UxPqB@k~XgNfk(Knjv>p=plX-< zu8^05(4k0*eO~RGe_ekBWR;a`d0`}r_CU-eCMgw~2*{#ky@_~qWz18X=I4)K|IOQ4 z3^xY})##tun0(riaa*7Xi31lvD%ZrlyjK^;er)*PT7YA#TOg0xsEBq<;7BO8uegmB zIBbi@9@(T3!AsWI7I0W-v}^)EY3yO83e~kG{fxMB^O;{^Y)U-H23nQLo!!+z(Yd}BG%BR4f2NOxn;bspGD?=WUKF*ujaEk0&bPdH{EsnxprEF(dsq+XUm#QvA;Glv|7IhTwt-D*+d9 z@4t*+`RP@F4*vir*u%S#%?Q2Ml1EFsCmkX5)k zvh*@}aRJ7E6M**Hv!h!_fp1>UEv)6F6@&HHVi0>#3^9CDL7dl4E+H=RRayS#c#D~# zg5?}_kwIcc3O^q?!f5z$ z9E$-YDk2I1yo|L1F>453SDV4%LA(oxO|?wsaAF1DB5V~qUX4rJ;&a{FtBBl^?YJBx zv<;r0X%CVuThX!teh0P|g7mMDBt-Xlf{W$skh;*JXEG{e%ihHL5r6AxE@7R*+|lY3)wrQ}(Xc-DiV$gy@+pZM!46jbLu7dhYpm}V9-(Yxb6 zp<*f}{gb}%KnQV>c3k(E#UkT_MHj~J2C893ib%yTf2%%E-H;CrM_FK4-8U14U{mJI zi2KTJ{jLss={Y#=wLbL}AhP+6afnE5G0Q)*)@o0mWryA#G+A=PjEZg6Ym&AQv5=tt zFB%uWpzr`}@JbcfDBgZF7wC5+;vC@KdBY>2(m98-T{Rn_oMe8_pA+K90%_t2j@EEy zv$5o#lEB{GPYKKk`-2qOL`ypS#YQP<6E}I+Qz2nfE$PBcOT#_lib@*+$?T}k4NS}0 zur3GIrX5FBS5)9qtdVn@Hy6lvf){#JW$_Hs*rxdfrxd;+dJIF@DrIV)`KcGGrN#f^ zK8Nn0OVj^V;XRK+L(zo*&8o>4^*BP3AzxvR^EuQvK~KB*RNnCweSBIp74CiNk=9IE zl+h5&*;MwMG7PZj*5TIi$0SNc!9rtZnK=~bGuUOmBjX2#v+Iqwaroe*fx-)LKzJ1* z+qpG-06xPwdir|-#G#p=yxg-yh{k8622G{8O5isN3ieNS8hicFGCv27v-}MW8lzq0yzrXyN7)Re3@xBT z03BERHqCUHl6X;Rpp#$%UULxxnkdb&6WtW>yn3e~wX)tSZ=B#3<+8FZ^urqG)*NI2 zs81|>H+1Z9C2xL>{`J6wWgK5r;tv-liJjLtrn3N30xnaS1;VBTIJ$EmX?&MdxK{Wp z-8#sA1IfK199dv-;>MeYCYqVK#EON7U&CJ3pdh%Y*%17^1&0@lCJaBeGWYGna@5w4o&=YSLr6%p>*&SGh;)T7a6yvo%sN)^n>*q4>08CbT4t4<230 zBpa~wL+CEA>rD?UFoZ`q^l2V;Na78%qs)yUto#wdii;@it(Ng|#cOB1c4YS;0%nPZ zSE^nMrbaa`y=~I*%rnpZw(2-V*3hYSstRDlMceU-us78S6h3x3Ml<$>n^n<1-mxBO z5M(U9?GiDqRrFN!i;=u;@{)Jg+-BP>$aiuaz7h#5@A_Nx-C*Z8-)0z&>D|dGt;Nf# z`npkjcNCoO^m29sIAgck^{g_}(s3KI$s~Q;X0I1k6H)bE9Z+FTXQT>Q%b#jz`t(*V zCp48KHL32uhlR$j#D42u@_U@RJe9sxMycUmU`y%EsvJ6aC_VG@qGf*{B(d-yQR=dh zq$Ai`9?+GHi`1xeW3FXb#p-AMH|p7d1WN!i?y}EdSK~By8NRAZSNS2EBB;UntDd=n z(AzTKIZm6;jO~!0U+u7_#fxhhFm_!pm}YGClY-Hd97PW;u&c!7-kAmK3snHO(Bx<{ zMf2+$oOA#WM#_W(b)ix{=|s&%=$DUZZb^GD-oQA8J%5x%7266yRf<-6K->enzxq zW(k@`_ZWW=5GhE=C63l@)M_`(y?-JL{4#Q+*6|BF55PdP$IyU)4r0Kr2<%(*5jGUS zz7061EJO2Q7u&*fV7A!HWDQ2tU~%|~ZpW1L-2WrHYg)G5K7)Gz!D1N$^j(*L?3cW`QJ&jHCsuwom-f!t< z4tC(43oVj{Q@JZfj8H`NG+FsHjMFknF)QHSP+|jVZPhY6cKI*eNA(1$C@MsI?vNo? zOkrJ#QCx6M{(arr;4*IlOa%ukz&cxfy(d2qEA7#+;^7E*_9;mymmZYkv!LDqapU(W zt2v$4)0^0eM8N4wXY|A9Dex8B+XM}&X_X4t^dzn}7Vrixl_YLrIO2r4N4SLw<11xT z+Y0SnQl8T8P*qO;(mf~p=1df(G(IVaGXa5{O`s7gRuIySZW-1=KNTmlt9h!l9%hf4 z`FO@;Tf>-IGwE|o9`QF-T11qb?P4a{ElE*I(W2XBmqbwGx82a8{HAtA%PaVmD z*ZlTv-2KuQNCIgobrI>@>lEGF=wfin7I)nY00`RU8lC+3esaMP5-MuDS>pjcNAmRH zEI+@}M%nG^IOwR-r|9{X);t(qzr+$6&;Y4!a!+>ooeA@#LuCWq2VO5=U{^d0j9 zV=0jKh?Y(2l<94~E5OE{RKIX>rD>R^Wv^zgzI{;+DDg}WupV+lB*(~A7xm^ZIR~u) zp^Z(`3mPC)Sn~$CPioe@VDHwb7<$P~UrZxz(k6pJAL>+_;9B*K=bPKMnR?{{W)$Gb zygS7BYa(zEN&Q_D3id9>=rJ za*WQ~p*{6q&Fj%{(o-a~*lFV#C!2~xt0likK4xsHp=Ok{qmA$3reIHSu#-9WLoSv3vmI=%W&HpBnj0IU4iHG`wHoHN3e|xf{!+I zc01u|SIHXIm=*=`dPRGlMGxv!&-?LgU7#Edcb9`9?_)SXBm8Ldd`;U)=U@3!bVckA zc^rlh2MimXRd&QN>qA2;JM0&6=jcw)T*$(98s9iDp&kaPg9H~Hm1>!BKN=D z{RW$!NY0&Uam=~VunDY@sro1LM z5zBo7tDkD(-arD9VbC-cq&{Z2HUa!8LJab}IFXmTKl9aq^6IdmG6d%?TOK}ukWU!n` zHm(=|fMiIGSjr$55kp{Xb6!zAYxYkXI`+WD2HW5JLi+_%AyHxLTt9-6Mj4NbTh^o$ z1~c0qzCTjQ^kABx0k#}1Hlg@aWKW;${#w8QQ)C z2AyoWRQkR^8m;8UrC6CaEFU=LyO`s};zE9YU4=Pn0Hzh1j2aRRFD1M(kQA4xRj`^& zTLe4fP%io|s+eMjx>LCczvG|Xj9@WqM08?RYwO*1S0aO5`8inN2>NdGQ~;y&l^Yg- zR{^##m^(&-ch* z;6E*O;er+O<`e_+ez%j)CT-MlY233UlhHS2FS$pm&w_^>Av|%4N;fw2k_OB>p=K{m z5j@1KEa-9g%DGgH+;6ZJD|?i-%LlC(EfeUu<inVbRDTy*lAu zCMvO>kV@r1G~s>E*e)HIXtyHJ&Dsy0P3tA?O>6q*gS`l%fYRgdNp$R7B}=4qqBbzO zpU?{(BG2zx>xCRW*{Qenc-6q#Y;u9|3p&ZLJPKv^n)LBoy=kz)#Nay0HR zM(yaC9mq-~!MRb@D)#>FWj{yIUiRZCJH7$LmVs2M@v?j3t8zdQPkI21Np_^cA+%d4 zCnht6+S6fJ*+=rYbtCO*Ht#R;zXvZGsW5O6nAkwN4&?f6YAc|78T+gj>dZtL?`Rd& zLrTdU0&%vH=Srr^ygk^P!%jvu8p+1BGEvN8I9U4A7+Iy(1Jq?toDxn(FDd@wynC>a zE*_XtdqSAQ+g2&XM;n|D2;P;a-}5SOyk4c!;Hj+{cbWpIE1)EeSZLqx5Ii36>SdI6 zcIJu=yE^A~$OYtUU6kRu`8-7tEhy>e`Q{{tw314cvu2;fo~Rt!kM4WFT~_6n0t>Ga zU_RW9gxLA}pigwKX6koV%#xj~%Gkl7l01Tf7 zh$B5l5nY+>8vMeB)moS9BgVLI?o-3B2WFawjSb&n)m1!bP5A zL@|9=k4d?x{)T^Ft=~7h6%bWoU*Ygt*L3{N1WGI{lG<(sQfV5cqLGRzBy1h{b z(!_0H3m_97KQI8y@Ta#WE{C%p>yy!~D$9)(9@!CGvKNj-0y=s__*mH~0P@5gw6&X}` zj0VipiARw3yX||5#I|%1&g-&w2wtraS7!xaBZ_o^Vtw)F*NFw+W&IyMYNFVHXUW{E zpaBZ-*JsX`G~cP}Qh+B~kZ1CX;Yd<}Pm=_`ZM zVzE6ivw+k|l&kjj7q6aSaOb}OVqL&sQKl|=D^x}r(&oOp$l6rf4q0S8RQ@J`wDkL@ zOe?OX-c*I3`~-;}vvf5WKv~=`no%2sW3j4^mt_f~&pmL4`X)i4fX-rX6chXTi&}51 zxz(2^P}@T8TRGNe74Zxp(Ez;UB4)H@&)6ebuspI9SYOltx6^_w9WH*>mik=?tmd?B zjc9L=%Lf|O%+bvhk6$ywJ9;W=;lkE9{_S-}p}!h601^!lc2E?HHm zM7Xnsv0+gD2oN6fxFz1I&HFCz&OhVQr`i>YN50>#+)4S&3~w+084!BAKgwL}t1|;> zuZ(5(^@`C$IG(C^&dBq0vWd5T^j_s2-0vKtD^Rb~P_!05AW{#S!uinbps2dTOx3(C z2-~s{VAer*1#{YIf{n#@Ytf+TT=(~1lCT^lJOo$f1P7+qdQZ0fKLig$^*p+>%)V?2 z+KP|fcw%-8HN%>;nZcsJ7k2YJP)8H?AJI~kg908}s(?KN8oinB9pAgmN+#xJemV86c~F=pwh)Irxr@JwIO#qGWf=Hew1_?A2|Au&uV{I4Ed%Nq zAkWp_$o&v>G`{dGv0Iz$ND11h9f4Kw-d%omTgS&4)6=={YBEs=bNTY73tHkNQ?W!y zNvf>?-7D>+4IQi7=I5Ha-MXD*YpPnz@EU{cAU9Y6yg33!Q5v92cs2wSHM}q3MtcZz zKiGDjJesut-Acup?aar6^260Q3;mdA#G-n-Rl_|*hU0~!(G`nZmymbm@%6rSy|+_Y zsZYFRo{j4D<>9_LARE{ZW@ht zUDIFDVY`>~+I#<+?8@9qR&a%s0iy))#`Sq#w2K_M>~u_3{Vx0E0H$SkgOKL%b3UV^ z;W~~jSykcG2>0^Cv&2kUL+cySV7_~y0eit5hH!I$;c4&!aEXylsmip28iw0f&bOQe zKL21S~cq!50?_nv7t#)(3ASudibdX01k3pi|6b z;cJIM#Y9NLdMQc~X-F9$vz~<|_}bkHaKDC|M&|LEO>NET!nc-{PETt9RT>8OLj+cl zBaM-lm-p+}hO0W(wT6ELe#M=0-*P@s_Ug4!Q&IKy^c2rnhUdcnhvd)Z`L`eM|G9JT zf4}+vzN7Jfd0bT7NqTj)X^gm`vL9()t@VK2CPKrCcbAI5b{wH$G$_kzgKo-rC5d-X z!mYGFzZ!YM(Q}UcUWJ!{%9aIm7vF^M;kHz12NK6565|M8JDUgh-a|DI1Im_P-;@$A zj--I%hAut~km7C4#nXf%s+T}zs=ViEtkj^fa2`G*Loid20(pt5KG8SBo!0f;C{B*OH@1pY*V_@YwA zp|V;3b>Kl!I_TnQFU8a$vq-j%YwK>zh?*U$nDSrWZR^PxHbeFfTG5?XLPJS1`((|b z6g`?Np#8(Ye-b5tq-}bTx@kdWbNqVum5DyYjp=L)|w0rr?4TAAs`@t{9arVu?N~f!u`R>1gdn2XJv1Xa}X3F9#Qy% ziM+l@e74eZ)i`R|-@jsGh2T973X(q{f1AN%>$YS#O9!7T9C?nv5LmLRCHYhWY8ZFQl+ z3YW}yyFYe}?<#V+mlm#Q%H!qn=4h_!Y!&P^l*CvCdG&O6ckiuTY;oEHn$8637_PN; zcD|0IlHofb>|@kxb)G7ejyBS_nljF zL_!=1_k0eT)_kw{LStgimYS*tj1jxwpqgI*dqjIYs)9^TO(BpW1{wDMB3r!%0;*Iz zHM+2Ex6G(N^!vEDIC!#=G|uEUh8=OG>1Kzm*$SQHtSklig(f=?EP0$vGLr{!Bp%D= zgapY=VVf?KozFnM#Z+8;{7)rg|0Q&w?KuT9$)3c^K6fh}of5+TUIDT}aav8bE89%M z1z$eK|Nh-yj08Tp$)J}ly9+WT8%(urQ<}o9? zEcIg8!|9SO4@KbhqY3z8gR%FW=0r&*;24%)aM`TDc9(Utg<6wLxPgIzk<_nOK2nb5 zBOxTd%^p{#!u2 z&2FI_fu9zDflQ-H z|Au4m`ONQa>gc9B7@3}d;kv^FaJ|fp1teUibS{V7GbTQYfu%;9w4|in19MitS8qGs zIlz~JlSJSxri&+X#UkjQg`h0yf$-C0Y;1hIP}g_W+>T9YVPSE#J3`OIbjv5Fpy2m% zGq*RI@pM>L`kCm3D6upS!#mZt$M8r?^LhLW8HtazgJ%Puvz&P{0Lujz z73PB=zKlAJl!2mRVsa_0y@oaJ^nApA&kkUH5+Wj>=X-~-Wc$-)ZaV>7X8mhEb0AV; z`@#5sf<{O9BL_^yYU)pe?%>2Gg+C&w{MXYe3LeC3PGkIK>J{XH&Zo-{K!nbr8I0eP zAn_4}Z*km_{xT%j5A=A$<9suM`Sx%o;$LT)tQUmgAAl)^MGx!zu37#4N0EvcV6Xh> zVJo(8yJ>c*95&MM78AL>V}ft#@$p6t+E-Usd3ky78N{9cz3Q7XXjoY%n|8O>JAazi zE!0invzaPlef|E&Unx)AgS_bZ*}D_Iuuv|o1F#|%78b%jWD0+mN$ zo*vk&?dz>BvSXTT`83EtUXJ}pl%`VEobV0FAT87t3OLs1(a&)s$;sOfoOJQ2xJBZ z1_2sWGtDdvv9Yn4jimtr@5Usq)PL0j>&*2T;d)~b(0QH3dW-nX%+cCoU_}MuH2(^$ z@ih>_5L+FrSKAkKC^ijPQ+7u)=-u;%b}sqgU6@Dzc$DdQA7!=23`M3}rZ?Iwd78@e z0-^^7{H(yf!X~(N_+2ks{j9QypRq_cCvD^QbZbL#mU>A$x0}r$gJ!c zj#XA!4I?6iN<^|NEy^xiqKwFhtZ?1W`}4cqe%JSV`(D>S*ZHG&z2%(O>-l^qEEtrMvW&6`k*Yo|}`SlPGjwvd;hx} z=iajPt?7>h)5Ew$uiaE=+LBiW?A7Pqtgy&Ll64>Z%3CzS>ub1Hgx0=1nxUtsXR?rx)flc_47784D&KakaPQtd-5W!@$sd<7bHX6;La9i;`^M*eSC(dm z^c0uL!!l{Qi#T`k7$SKB%)fQ1r>FjKpJe;Thsz#69>=Bc`OvQYWMS^BCn;l^OUCV9 z?(zKGpaKAz-j`w96m~q&O*`$(y+w1kgyEJ~dWFUXqsjm^d5hnN9G+jQIFnAdM7M|K z>PdV&lhkePfr^62`Bh;;kn~#$;lD z8+!?fh-kSm&8G5MLK~WiR-in%O{oYEjw+FIbi2NAG^LmD%`r< zb<6R~BW6;~%0z+9+t{>YSKfHhegELt{@^1z?37P5HnlA?mPVmQx^RcnBJNJ~1 zV~PxXX9;~-zQ3T{oNkjkiI?tbXcx54WZs-o%r!QHcnSZr+T_(b>slz*F`roGLBonCXmztJ1~7Eye@5e z7=~>S5)$&5>Nx`FBP^_1WbAiQkHScqY{SCBFo&e>eni{&lRZD)t~Rh|^Qj=p0|6n0 zd3pBBbKeJYG5mNG{hvqU`2}V)fK4>Jb=rNaYcMsi;CxcHkr%8%8YvH|U*#{bs$EYO zHy=5$MQM9zYb_K9{^LMJ|F{1T%dsgU>E6~~>w-~meydaEB_$^?Tlc&d^2baB9H09nH+|}3?yZA1s+yV~f~mLeOL+gx@e3Y4 zL9vXjMu~A;A00L?`aF03x&QJUI-gO2FG^$Mm{8RY!Wvbb?yo;s?kyD@qcrd1sNNx^0}gyw<4}^zM;{omPM`mxXpt{eHtUK0ZDWIWqD-A${vjBW3pXd&;31fh!uB zb)t;--Y6ApS0Z#z{fUldxRwQSq96*cN{+w2QzCgjxwP~!Nxjl@N?uEE7en~cl6UMd zP@NIG(1F_+p3%{TBYpR4n4_dyS7joZ>2%sL328%#rg#z~k1}M4CEeNtx^3I;kKe65 zQe><}5Iu0WBm&`P%mEUSV57Q9^4zM}sH5hPOxFu_N zdU|m!-;#6_dU|?%XTH`0&3?Rn=mNU1Bu|9wBnSY2_t?~wg^|%e>wY{@(b}`ie*ta1 zeS9h^E4OahQti8-`H7@T5am%7BrNQC-taIlPv0Cpto+ijs)&e)gX@jYy8J<_l<8+| z{2BU!n3x!@0G=74|c4)a)Ex#YWdw-rf|<5yNzAX#*F zcboAuwU|UF#HXg7v9NGDy~)BZ`54Z@nEh5I6>4Tjn`+y4aNAVDO_y zE-ETC#1V)f3kwT-ZbV)j&b%vS_W`;Inlp~^#fujSM0`mvLvdkl?(|dJsDgrm$B!Qu z6#VR~xRPI9H;aZD2+)9GfIbM$jIW!UnW2l5s`iNIx5%?{aXozWDE;OHg%i^&bv)d8!?7l-0ERTi6ykqDE9CMIfx z-~+dC8dym8c7#zKRNGiz19LyEuP=GABM+Dr%gY%;e<3Bg>sVpbdnywtQh8GXaD`v z>-y-?Bhh@RT@{Qp+G!ZR2v6cxQsOt?gm^7XFJ`1_lQ9_Ibs{vpCP; zjJ!S7lT|wt-uG4c{6<^-{K#VUanPD0u$Sa-?l7(iM^{%XL&JpR3SdXQ?fd zMDpeN9zTC>N_03c$*KD9OMmXvC?jc1FWi}O+Ie|-X+vlKOqpMF+v~pl-K`4@s=6&1 z3t@xjR{dJlJPsc|ytJ~yxLfh>?v16ln1VD^!5JAD;o+)rPv;e9XJ-$Atsk@rkBwzK zaygl_(8I7xO2x!vaiX)}$B!R(?%bKT;!>AAImItpLgoiRjxf7nAY z$;rvNbm@{p>Xj|T4uvk&5Pb>jVp9$d4pJsiA$3_D>mDh-^5XJx5i*33NR>S#bqfpL zxVL~d88I<2@)tV3d=Vkn{T7z|#8y_fWE`x-&qP2?_$G_z2ItQEN2zA!g;k$4mm`Pk*T)r}XVjfLpWo2*PsNPUNWo3m! zdVPpM`Vc}{ut$JT;grEcj^;V`w5Fy8pr-4|IhOnT$AooLm!Q#o|M3GF*UQ(h1&<%E zEh?IV5+o;Y)5ctQle)I@`SUJxrrzGs@8ADXQAtcmVI`fdyOxvl{k~cp5M=hFM~uzc zrDbLN#tDYJfbV+H{TN(A`^qmFCOn!c=BO|uHDpZd(wH_uUu*SXJwryKz zy%3nvq)$j%T3W{OAU+lrDG>4SaM~R^;?j4sVr@BZ@OMoOEwd?JWjPHyhcpFjP4d_Z#?R#Q?^09u#>r6nbwJbTt(Z1Xn7D$r+o zKtWtw{6LDFbI)PYJ5)XWwr#)X=7jaq<*i>w;z%sM`T806iiXy#xa#zGX%N?;*){+S!T~yA2 zkXd8B{&$&?kx^Gy7r%zmZbyyH2yO3GXCl#4$LxkqR`KlFGbMg?EiIdp?$4h;f6(1Y z8l%3-Oh-~b2mIC6(h{GX?D_MvxRH^OqvKD&vu{*Y1fmbRE7M6%503@tM*HO037I=s z6xZ+*Aqd3p=x9V_Y(7NbO$bDC;*PgB?kNf$J^BZbD=8_->8Kx0F3K3oIyQ6=OGiab zotB!)$S1$IdEL&=ZohFMmU|6KjP0Z_69IVjkllyG_;@B#q`KhT%nY>CHjLn}deYM6 zXp-KGzxv7XK%)>DXT0S(t{(yF!?^r8KF&;9@?VE;0P6R1Vgl051HFuz%illfjxv12 z`1bmB=F+8N{k^46pRSA~=<)FKRvK`jUzVUOG57ivsf5JDCUKI6hK2x-;>+SPGOYgj zrvZzA_Zm5N-t`PEy~wD?o?eOtU|D_I$SCK*gQKVd^ou*UZ;MLaAOx5`iJ@6whvF~e zIcaKS)CqJ=yMxak{ST@@z4k;v{KJP2Z`@!$^416UZf?%~>`yOfX&8yvXOXTL@B%yr zV-&TA^;!Be)eFh!YDH%pp8^*anN*4>**1H;u<`26q@;!+H@vCHhB@f7UaHJ2D)OMsn_GA9 z9)}SEK!sOzvMPB+)=5A)ph55WnhIeVVw!3kpAMnB;>v}K7bkFZ{MtBMwx0-RSO(_* zZr1m@sYz`A{%wH~rrA|hsm-GW`T5n}vms2@7cXiOqGDp$uQx!DG<)urX)4CZz|ho8 zc}X8Vs;jQv($OK0k&>KjjB0Dk(Hb5eKE676D5~Vuhbw0ecwzLD<3T75b9MW{1Hh{2 zn*&V()|W@oQ4_APEBVadX#83|QmdOC6&ou|=8^YyL$#6PaW3D!eVdz|-E`~ViF5fX zW1;A3d3yHF&N$3=lAOSWWO2!9nYg#B35L+Otk0h1Zx;XD)KvKF8GCYAXrziDi*g8l z&dSl743ExU1OI$-#kc|C{1&CqqNSU?qJsGto;~;N)qtRK(XG zK3v;--&QuKsL1*3*?W1N<13%+W-RBdMA9xgI_?)2H!?8Dyi89tF*CdU@@8a91g!u| zhX`g}I8#<;X1(qDh9iq{R)p##6!tA!w^mkGf(31W$Vm0fNLW?@;ZFVdQRcgF@!@7_ zsK!wI`uh77goL(~%`E?QtyzBa_U#3z6O_VPxZL>RgA9+ZlG3KhVa%ytzby6jpWsA* zuO$a65oGw6_KJ$4nP9jx-BCJq&e|Hn4L!XqeztOH3KQwh8E+%DU>?R6| ziABE}lJ}igKkcJw@8U908&q3axr%*2sR&sn1?(cwgkY$UK6_3NY?nK6@_trUnN#<- zp`l_3nSf@Ikpu{A2T~vc@sBE^EB|nl!H7RjARaq*jE52DO@SN_!ibXs(gEb)>*v>e zS6V_^+T@#T1%y(tasp99Lj$*qqXRhZb>&LvWt3pXF`iFg9plHG?d|!=_7^Xn+|RR% zlhf4Hw9fY$Z$T2%%^Nq0u}{*{(g#wsVm9LkVGp~>=(8y+E91Sui^=gotUAwl>(tf%t9oK_z{DH}NPLk8QSOz-JfdilL>g+rs zAQ1YY1D1iNrlym#a}dmoPyb619Ix)oi?YX7TJE3T2QE|TZRrP%C@#6m{d+qPMFiF zH*Zq4Qa|@we3X$f_;>j?)-NP96rHpdECRO&+H_z_KnD_qj!sNknuVcZJ6gV=rH8va zd8z5srvrk5uj}jUp&0QqDV5Uulol6f*8aoKdCq6Zav|-Sf*TECE_BH^Qco7SUzT3Rdsd#^sgO!^892tHyI7qKHlEh zIXND8ZvOf62eOm)ox^m-4|3|Nmm99{1TE?8>;(PWzI{8>4ahQC!zWm==ujI0`f+D7 zMy4T9j^u^zgQfwn4O%-n`LF-=0g#~$-7Kz@nVAWQiE3-n@962d1CPYso|Bom{;cFz zGj5W)jg5_q%OhY-fUXaXjcaRbhYlUe4_#ed#W~Wmu&BeMM5-2Q=q8c@)tChfhd4tb4NnQo@0Y7@F^0xDx;bun|$&hy`-!={&! zl?7{u(!B#?Xw*%H%mhq=Mrjan^TKY22imuvqJTm|LckWioK_DWK1^2J84$1r_{Tz; zoSMQW`N*f|=ZlgV0et7n>srotk9DrV*unAuIXr?P1~qLkaMf8;^V(#V0GVdXmfN>) zWBm{dvbD3*$xvLY7Wqd#N^*~K0Iv%B%wLheiJsen&9}%~(>vztEARtZGtg3ViRay| zhb)Nh$goCr`t)hQF7Pwn9gXKpM0D<`tgmv56SIRh)_r|_+1c5d!q7FqL9!n_xTcbY z^NMZP;Mv+UN}&<1S^9*XJ9nBoCSF{DzR0~w`8NVmm`++)e6%j^=;+`#1d^o+-o)h% zKQvE~YLi`WZBWqMqt|Cm8Lk@dl6flc)uP+T`XM#z@nZ=#`su!kS3_^38cyfeWlKvQ(g8S(LL=SKVo*Z$1ySz1m7bBZpQ2$PykNE~T0psgf16 zu{tq)ib+)I?jNkAv?XkQf98&- z&z=D!fKpaeRFsu*aOq|k>VbI>~Lu3h6_zt){EsXWL|uBhF7yxg0YcN znw-}sv}E9%c3xAl&rk*PkE2p^j!-K_9g~%%-MZBI9CSLs$d2?B57@6{zbR;LL1-0@^Od4Q+;+6v7Q zm)b@P+QKn^Z7sh>_-rf#!RLhLX_s;Q*f}^ptXnR@#Y9nT{F$GZzdWLzOD#9h*wK;L zJbFCvFXtOs22M#OJ-ull3NptH`GA$fLPB8^J3{R5<0#rBqi3+Pu-sD!)wOQM%Hays z^k`L zx#x(hLT~*7^3d3bCv>6uNIuz={%}i6o>CAWr~0I*vvi$xah{y7o7t z8c59tGrJB{%`PmUHBVg@trF1l;n=zJf~_su0XZV#dc!wdK)Y4arCm&B^Y-zcy|iwnm?99+d~NxU zUwlGfzfmVKe}J2_YI$kah7_s4mwZVazyRz~Te#%O6Q-LzeSJ;CvuIz@F)>1)tN~>P z6f{%@k{A|fuF+6ahyGWMq2S>|dLcuIK?k3NT9)a%Jo$(AIrGaWv~<(rdc~$yc8$q! zWspNScP*Xyk{gKB`}fD7_BQp8fBV)p&ip2B_ik3!-)oD5qX_wkh}^w( zi&D&QRwN+7@87%Ew9?aAOY3@ix+Q3{iP{DdKan5LmzR~D1{O??WsU-3rDVkb%Q5yR zCMKRfrOYYi!5Dl2WYVPQw4JlF#mSRxeSMR|!|lZ${f&+LL7{=K(SfvueMG6AG?#E1YI$jqc@Z4RO8>+6fP z6s`O4;g0(HOh|l?zdMXNTJsFLbI+;ZHjh!l%>N&8wnkJ4%jCwC=E=1L|&l1e9Zx_fMovzuoUBPU|^sv z`~(*3v1xG@%1BnWr>V&azQ@z%=M*9yx>Xv&Fd|y7Bbi6~C-dfPBsl?wP*NQ`^&{2C zcJx5Mg8qdwBahF)9+jN`81i0;ju;#qeCB|OkoG8z$&h(FdG}bDf);tB3pr2+2lBq_Atj`s9cdTV$ ze*Vzq3aoQNnw^!E6*u=?XwDOj3Tyh);>`d+&nqhIY;6TaM4E3OQrq)@C?!D+Z3^Nf zoCORDplg?|C(52DD_^&^GCwF{r4QqlcA1>$1^%F>qCyV=ZOYsp`rh^>+fv&e7RHDY zm>*Dl`})o(X6)wTT7j~sAr}Zvu{b^G3Y^Ew3m+S_iBTb3QBhGc=L3>u_nL%sXTjOf z%CUpI>9eYN5;mo!rKe0xMn^`fyjtX-1TAAj#8AUvu5B;6eD#!+l$4e00kUKje}~1l zeT20K>zUw;n0T#RGe%I@MXv_vx7BqkX$eJ`$z#!{4$Hw2;}H!K@s_E`v$a2oI4 zzi)$g)8ori9SfrW&sU%ZAsCj)!piU5tq$CQk@erzsR^nBDUCyJGCZG<2t_o~pF%=U zl{L!-{*{S%6&!XRxvEb?Zl6+*wNKqgHvsPh`qOZVkQ#r!k*?qeB8^vhv-g>LdQyp{GAHHX)67hwjEszcz$>h9U!VMuBObUY zH#>wmqh1Zwtw;sDZN0AsrVJf&X?7S*3%^HJVtG{LM3&q7){Ry?STA61kU|Nt0<2pX zQ$~C9$BzN9u>5j6C$^pclsY~+SqNq@Np_DQvD5;+Bh|ETp9Xzqo+j8bg0jzQYd4^m z5{Td$l!Pjz=p3EtUT1_i(99Li=;hYbC=!XvhK9cp`~yP4EJFx1CN6GcvZVR!+MR*l z${RcH)yhMQ>VJJ!@=f%v69iE)u~VL>M_!&U+0MX#(VLVO|7+txYCT3T9u-d(Zqu?bpD^C}2}nu?W`mXbYux}3^DWR&>x3JXuEaM>*vSgMab-i(zG znDOc9>LLVzGK*VQb$$Hk-1*Q53;(3Js>&bd@yd@TXd9GT>1=4fbU`r#JAgPtA|j^{ zRIm$bYHF+`RP8gnMh=qt$&)M*uPPvFgO*3Uf^;^D0q_EG3Ir{gNKZ>ja2lc8RGfMA z`r1>atgZdc&2fsQS+HoJH|^c~uD?G3QZ96f9ODQ*ZS8qj5VNyUadAPex2y23XpZRo zaGFDe=JzVRmr|Iu3S9mkwrwYY2s`iy$~oEdqI)9_=(%CP1TJ3Q?c?yf71)hQ#Y!JS zLqcSD7z>kGn3(E@kie@b!6iebSYfHp)yn{SJ5zFAM_GCE+7hp$if0Xh2(go%kuiMV z)z1XdJM^-%-XDN(73Ag7bYu?WvV^r4dqVWZ1h1;9!g_{=h7uN0sT6X$5H;n}z*0e5 zi!i5Q0^tCvs}qv=b|Ei=8Y+7D&=)?2>1~NahkgUqLiE@jFwb1*${<_B+`YVq46F&z zS=Y$|F3QcV^zM0i1(poSfoq86mjwV6@@zG!HGm;y`kysfSNl~niB*kc&^>IeB0{naUn zzW$zPj$mgKKY!x%b8~UQr*U?2f0;;lw9%j^n}j{h=$BE%8Njpf1I5LjDnI5)f>S%Kua0< z@uR1^8(}Cqj?;}zO@d_n58&O)GN~4oo~W3ravo4L0&y!^(e~{go}S4TiWVQGo|Kh^ z+rszO!KXG@cXxHc-owR!R$seDf9Oz&?pFFUINeaIX2cl$hfz$+5cct`gFYzhsZ;X< zeRywVXiQs+9y|zVqB3~*(5L{}MmifArQ9QXG1x04{|X%_FFiZvth;q|kJ8 z^WpmZ@zQ6{PMkQ=?c}Mg-Bc5>3gB~g6_ylMgFr;qj91#_42X8_|G%S&i7JF{us$4# zTY8XA^OTgGVqe7WGnKgxx;Q&4fccRkA3vT3!aKX=E6AaTLx%1)Y+{}D zHOvcaHZ?87)dvC&c9Htc=Tt)2?!S0(hl%Rvb*SU4B>XZ&&84_-R-jbN>%}3Stq=O( z=)y&1+B0=sl=vE~qpRx{QyVl%C>9XE{oArNM*5%5fgH>Ut|HCx?=d-X-Tkd#{iPAB zM}=sqP*LI~Wy5UExS%eO2yt%<3Jci?G;JJrs}Z3>*TlbA@Ry{$>A2iLv1~|oTf1nH z{|f_wrwKIT^iD_bs*7f!!SEdqJOjrUI1fYBEyu$b_0Ioqz5lgC4sA#VLWGlxi;KN| ze45v>ZNZjo^Cc&mbxjt19#2eMpN2VbG(if?LFgvX7up9981)af6bjcr?s@Ujel6U zpXX~p0qOsr#uAWnZ#`cwnMhKA19*~Q$q5N@X^-ai&Q5Vr(adS;VcqPhzE?DfNl5{- z4Ljio;#ghQRotvFj}JU`6E<9?S5#Hy^>>F}gy`;NJK3H6Ge*oX?Ae9AZP$K0Oi~PEQPMUS;ZQM#byhidZU~SoL*9o(ps13}oVa9`N{s@$hR>gXeqicgj#Qricn1v} zw%aM|t+(9C1B;1h>+$jYL8G5C@SriS5-;U0VS2*YN%Q zBL?E2d=s4+EV88EPoQgbJkgX5yI>Xqs{l$dtZ2|G`9ZUx2LvPP; zC}^|+w7T{^SJvs;5y$1hvuS@(GP}7P#-u#oG*|*?5XC5zV~h$5+O={BBK}7*6KuGD zI2x!D_Ssv|?l9Xh+-Y~O>_j;kIhhevBG!WP8Xs9!KSXj#UqAltT}O0GIK`xQh$7lpTdyxS z2c18EUeR~{9hBXsCI;a*OOPEPYgrl?C=c`>!|kiqVGq%94oOMH?miA%yDwIbf%|AQ z6L4tK{Jgu*n;6I$V2Kd&vU77W*qKOw*VeESFy9frpqYIQkBE+le}EN008jz=+$|%) z8Bco1^GS$_AvzYVcsv3N*j)Dd_3J8FSfH#SpkR-(HH0IQ>sfqY>*KvQSPy5-w4xdrLfvOH7&4T{uwOPk z-(lCDjw?vvyr3{tWFsFI7Q)4Z2`(wmEQ!cGCF)8Of;1fnI3lL?owdvfFtnckLN9~_DK^dbX{iV0sa8s&)8(}YZ zBew_V5<)WD^@jgO`QuN)9s*{7cC=SPf%m0oH}(vZb`C2IRsQ*Y>W1^(4GokhtT5_; zP?g@ZLYvVpm$M{3Qx{%UK8H;5z7g}p)Lr5 z!KvVT_?gA&n0KGPApHegdIdgJTiZz(kzQV2K66xXWvb8CQw1xZ@(~TBIyxo9VTNyY(|H6XSe`i2Sy&!daV=-t$q*xE0dP*Y-ACGYD zyxyRdEVc}-#MhEwA!H!K^6b_3%aAS1kXlMlSM-?Z=qxaKRVgceg6tdHiVLx@NJ~g) zFZiNB$}30Y4JMcs7DtV1p8=G%+}u$-JBDP~Hgm;|zgK8Oky)hsF3gZwWAi@*VDiJN zj}iiAz6}pUp*dw>aM1Cy7=v1(mKaAtULFNzp$#I4fZVqC%DgBp+4BX{$|g#naH|CB zRZh+i9O+c0>`9L8+hefCYp|cdS5Rs&XR(_Pnjgn8-Gq%#R`gz4vdj23IVtAM%tMZ6 zka^1fU$ZgzJCG$rcT+?QGSf*##PcAPWcwqugfFNs!%Dyx;^%;i{=0nfpK#6p{01FI zfQP^%3?~mB{P!L7cOs$>%L(_fTudM$MZ~r*sDeF~yaORG1 zC4NY87zVgsXH(NIpic${2DZz#|G8p82~0S!xA`|W{?%;$_x#WQe2M?h_xOK)0~;0+ zCj)IlROY_{B;Pb36=W7}X$xbXyH3MG01fPN`eR}hV1y%MZr(WhJ1I$%vJq=x5CgXJ z$mpx7MSMJuYG?_)8K^C62q_(Q{Oi|bra4T>KYu*G3;ny1L1v(3?X9hN%B!`#9Z>wf zSL-~?GRV?!znCadGz2|wsApGY@4@?zNo>oagqPto9lfhFU3m_97lM?4sXl(vL%ZEOp@^1w1|`lh)9=!bk`6=C@I}FFkm1cDcvC5AUV>~&CnepH4NP_ z)O&K@&;MELS!=%^_TFFiUhDOPfL=3m#d#jbuMWPcC`sevQs81?Vd2Zlyj8=(x;c%7 zbt47mCis_bJKcKl<(8AUtOgDa&h&!vA1tgVSh8=$G~AOmW?l4%w{KzZnEytZ(UZJw zd&~I~T8ekay0qc0YtW~!kDs`*<_0k1k}{I=kmdz^(#~~u+c@r6^AI(<|CkE3dhs{R zvwd^2eAd>}_1Gh2@mEdFLvb8BPEJlQk<@ciO3I+8fz0Uv*MDh~OA`1?kQf^oz2@e= zM@OZlrS<6zAu(~w;w}!|%}*Z>A^#o+4)(DMNBhXg$h-{lB@7J;l6Q8lsHuS&7#Mha zdy9#Qd3n{<)Cj;=eSL2~QhiG#dHq*gAQ|`T*U!Ko28OK6%!dyjR#a4=zAz*yCi3Lv z<(Zn9nVFcFn3*v?d&bPdGU%oxE2|2DNd5a_@D7FU;Vla?va(%WUEtWUe9fSqWi{c5 zxVXnGG-0vH$;sj24ikOJ;6`F;FqX3?gAclY|Nh?I9{4g$sRodpSiNSN^Dm4_6gymM~}eke$I-6|35ifURg0SHC)pzSV;9DNL$?FyLLZXZWe9`tZVFh1)KInpgFS%0x9uxC_j`=_L z=l`E;1EN-@8TgzYtZ@}n%eA#CZtl^geW(4s2JefNt8;!4--UTq=E?k`B1JZ>V-u^h zDx0S*ExDq{8SKlspOA}#+(OlES{rPSf-d1_10fq@SzOb7Hyob3ERGdx_6*Om9W3t) z3s$i_XV!q@v5wACj-zsXKFp^CYP1axxL-Z@Ew&j8Ui)il()O)^$fct4!RGY-pCh(a zw!~OAgNkm~$)@_+RN-F;vt?X<{_1=$F7R=&Fa~{s4Kn$!cQKfQv3LQG2yL`)BV|Mp z)@aavjG~RAA_>W(yGQE?_a?8ZM0&FvBy6xpxYlKH-($JB+cB;>YNVv4#>2zIysn;g zif@<5fgYUf`g#0tz30&j=i1=l-qzj4mHvcNw?=ZTIIzWeHm9qr#HKMC}OJTMh}x=cLj)~!dIQ&pCepLGfD<5s2Y8S26W zGz-l?35Nx}HQERnd(Ta%?(&tu6#>>t^z7X1(w zwfe{+ET8(gIPJvh{Rvx1hCLt5hVc>;2B(9WwTDT$$8}0cM>fwVRm6EWYL$GqQc39T zWI$hVq8gs6>U_(5J*%5AmQM(1S8zDICIHk`jT&|H%L6*h;aX98x>|Pa18SiFk@m#M zM9=oKBtA+l&5==W_>gx{pb>%rYxD+q;JMSggI5xEs5+MbCDXRJL31 z!Ai%eniNv-+|jX7Kyz|(a--_@M;Do@82^}TvvmmDp|eZ1o-ODDtsP-vO>{asI;Qz= z#l_Q2@gfB<7$F+vCxmY$;XXu!gw(|9O;r|_d(hXs3;Q13a&n*P+VLh-u!P*nt+`i5%?OXhv+@A*JgR8+F% zDqeF#E3KPWccY@B)YR1Gq~G4YeS7GZN$XSaq^I!b)4pJ{W`f-(dM=DPFzMx zN@^IAJrXio>zd3Dw@e%>!YfKjNm*D}TdQ-5WfpbT(9l@vORx|z`I(UaeBbrco1LXK z_0{Csn>W97Pw5i)8*}!~zt+wa}}{O3Ditg&rui9WG`>|o9dIyz3XrA~77 z9Ml^6q4?IxEbA0~Y1w0uE|}M%AAS(zgi8QZv)u>xCm_KD8@#sLvQ8xb3W2Dp1>S#< z5k%(YMfySqVl9Y$xGmZ|l&(L`Go)vm=Ci!II^W>wc9ljiMn`7~%g#)&nF)^}P2`ByL#GUeO%s=~h`;fkWqZzNHxdUIHgPDvCy~kG+XZW^E!oK6` z8f|VN>CP_Br2WZU?tic>EG$+wK>-ZANVT1=X61Wbp+JJGwcB@_TSGCqJetHy#BRQy zTKWMsGbTh5M^)u}Dk!qYEDyj-77ht> zSPUhg4BQMQ6tAePU<{>oyUO04iRVcdEhc1BRABc=o~@s)md^>56#a=q7ZDKw@9nKq zN>1Xn%0`VsRzq0RSK8Y}=FG<@i=IzW)A@o$B2Wmeb+`~%h-PMGNw#;HY_u{T+`^%I zE34|z-FgpEtYiTM~QTN1FBJ8hLwPg5_uEUoWeusHv(t zI5c8CUxgpmLGRny-OU~+*zwCEk{^#uYpJ8}C!GY3-~^XweuMYf(ZyL~N}nHXhT@%*=dpaOwnl-RIBZ!V(fIWL+pC z2w2SeHC|a0a<4~5m1zX0etsg_ZwF_VODpQ=-mCx|L1%KKRvy~iT>Tg?VQY988&lsbI;_)Cnl!))X5qC1UxVEmFM@iF8u#| z|L)uRR`Sl*sY)vZw~Zn->)7ZZzxUEkU7I}U(vPy1hp!TiYTd(`tsqr$Q`|57A2>Nr zygB6A+us-UIRzvrv#>BTr$GL=pP#CK>E0Lx8jTk_8FSeCME#$q4T^Md@TC`STWhP# z?&*0&#cR@OjUxN%87`(-4+@Gr3k&I4rKCfV4uv*1>v`|!&7t-X3RTIT_bbz`ThDnA zgFinFj`by?>qEQhcPQh!9g4v5! zX5ikwiHM}BJ>CpcmU&m4k(I}9cT_k?Ux-6jBOuU0Kuh&OM2LY~Q>GGZB=)mo_1W<8 z_jW=;!l@#jDKRPi=MJLpXS8bs_ntm^x1cs%GT*?-nwHYvTwy;y$FUo3(`IHz zC1qnnL@bB?P_;3(xC{)|9#Fc7s%2te;<8%YcTe0HS52)31XDVcrq=zmdzHg5ZoT3) zr%su@h;Vt^XAh?my++ks&955&?q0=O*DbJ44wu)*zeww`8`ewN>5*Hk(S5<5WH)&0 z!iYo1Gn^eWLO;3k>+2+S_0^w+tqW{}yLZ90qDgPTFNjE6I)bV4^79?v9oyc!w|o0Z z9lM@(&4*9H!T0IjiivrvTwP}M-$n{WIUcr$EM55&ykueSOtlwQ8z1=oe9q_OLu7_} znpjm?Ss8IhNV1J_#*Zgpi`Dmd6fC1k=}HXl*-033aiO&VIgS}W-PbCf4+uWb{PE=K zqC+jiWpRPd2cJPMGqS|1M z4*7HrT=<8*yhVER)9E7hns3^Tg1K|aHbv2EdMo*?uYJh0sIX$8*9)zC#=#Lrs3xy$mjP#y-ZnKc2~OmZRgg<)G+FzxKuVKh{`4t*hOto` za@O(WrRBm|7%lN-BIIB=1SUY=9%@)WC&DHSZyFL6O*2~j+uYoe*Elk7n0n{V=|RZ* zg@t*a^LJyUlw{_O9(Z(1-G}S?y_k(DMB{)tJKeLFeC`{qU2|mYYLXW0v1tE$sy4jE zD0iWh%*>@y;w|`H{M{X)mJKVj)g`cncrDLw!(`+$?&1g52lU2;)7Q9ey(Qzdo_qBk zT|su^hO?V5%s^?{?SO_4RkN+AsY&9HJgO)wTkUvpSD#9A>RTer&o8@3cTh5HxLIkE z&t^u(2T9H6Wzy`U9@Kvt9v$uSCm?7vu9TCr)R&Mww$`)ODbF00yVVIm_3YU}In;dn z>OjX?p|_(`IoK6~uCH(H~SZY9NF zE-!dKm%qB&ZF`p1$ik(0@ezEnPKQfgz!RF^J*}YfG4V9q5ka1gE2UvQmYzJ>;bv$0K*x5`r`+A@nm{)E@xNVE# z#B0_YU$>6S1o6$8HhE|g;$GfS-!x*_tS|d6@!EK?uE&!C| zs;vnNM1Mo(arB!f+VyiOA`>hO45nN*mXp&4Yl-(P10z3q2u+Jc@Yw}n4F2+xE=#;^Wy~oOhp0f*68J91`9qnMQ(?)19ChO2ovH}p z5`!z;edR0Vi9Z2A%wpj(!?Aeg-;!3w;!6k<3z*>B)w|kQNfyj1j*O2#{kvRZ$D(gT zy}+u441qE#r-%q|d8?fWTtl=T$yD)JCF-@}O|VV`k2cs2#cVbqT3#~zo2GC6OuKEb zrGIaE1{z08pZ}1gnO1hLN4bwAUt~nYxQ#t?C3#a?+E$~_fpW^bzTn#=E?a-I_Vj~t zA_Cy!?&O5Oj(<0)t?N~~QVZw)@|hR$GKl9`)XM|+Azi!+(mRRq0i8=e+3(Y-;5PyK zeo$~ni~CCK-PP2}nCr3Cp2?`nAh%}M>}k1iRUdWC`t%(S6nMJP(TkLom(z>h6UM-!-5s$`a0v|vr-uYzJ+AP28rBR;WiCT<`YYmCVUD| zh@gBD{mb}$M8X4dwG9{pN`Jnpeh4Ji-@Ou6Zpw zUSA%@Zn!;UZP@sjMu@QI9frLTiCJA)5qWre)A%5(6F|H~-hu(sJ`TOTG*S&sO|Lp+ zvBCT4Ob6oyHzGU$23Uxhe$l#k9R0bR9{BU-iV0DoKUqIJ=@`eKOq%)4RK;l2POp@B z&dOpk{Z75tdjD*;wyewNmUjEUh4P?Wz*F!g+d@jAlbxnceY}V(A5m$pG zJV)a3rsWjjaQ-|uGq3GjdaPm(->Y-l8HFcrOP#8oPChroV0@ZeOp{Y`pM_9f;D%oW zhmyh>`%rO@F+G)C+bD@sDrW~cF^v*iPj|OcSyhAM+}Yslv=SwC;S0aIW$)!W{@dNOJHnj{;FTq34(t)N@Y4z} z@WeY5l9o_E(|8vh(EyOdwD_yG*n3M!&sVRz9nE++z?GHDXc}Q{jx}+SiIfx=G*lxB zD74BF8M2E~0AU?jZ6r|gMt?7?F>o=po_Q`M`c->ZQlh)5W&ghL#{y79Di02D@!@4< zkCnEo-`maM_!z26Sh9p|;o`w#Gd~N;Xd1bVcXoEl$Sda%v^=7$c=$JUO5ur~tW%X- zI6B$d)HPb8dsK!bTJ$*ob12#VcZo$%S3L&FB|qE6#VZfJc;OgZ(Up85Xz=P?}k^{_84d$zK^QDHw<9dyaz-%^U1HKcpm zJN(>_`fX9Vpv-74L9LXoE=46h^K()W;b$|A$HIUU5Ha-2KW}Q0Ud{!w#Bo;1v(G?;5Q1NdLm*X}L8La* zaaDHHRi=2vX0J-ER+VCrp2{ga5}j}Q)UMIkl}Ocm#pK~HXc`IFaa+RfJ3G6JfETp~ zQ>kuYKQHK>_@x=_&B4MNyNO*q;o+WAX=p6X1|^`af*;es2oj5v1&8<1**WHVJG(>% znsVK#0bQH5-Uq=i($94CMX~Vm2x|TQZb!jkut|aCtA4YaM5A^5P~wNg`+Ix2VulF` zUN&q+WeqIQxbtu3T20}uW|sQu3V90v%v=9^#=l$0^8WWnwU?$E<*Fw z#vN&2?jCK8Mp6uBWahftZ*S4S&tkU&qEd=&dq^2a9N($f4kyLpQvnxra^9WK6xg5ux9K3fInzXy$u;AgKJngL4f<8(FgNrh&)qZgZJA}7g z-{5Z4sd%mF;c`zZF)5(Et!k^&^G+1``T0?67!S=S^z<#qV?{dqWCt7LSCc_xBOz!@ z%jJ~*&P)$37-%|wnQStEa-wE_n<(R-XF$`byGx`^5*3rO<#dQ7$zSs-@T-A=3Xhup zsw^Sy(Gz!2?$FZ6bFNM8iobFKpnkefY1JqQsfV(lj*JEM0lKltN`cK}hvHd?p z#@K6yif-Qn3kYiOI^`bqyh@3`kmex{NWY7mgf(^er{k#dxb=bK;_*a!_~SxM=*9*2Qj_P`9& zA)u7PA%D-AWFU6()%wGHdOC_cun%^?d{}mmTVr{X!qM?*z2xZV$cx^-Jkx))F0O@j zvb`{CM&`%_Ui0%0IaX&?{`so#Dmenczq^s=3#BiTVVKMRixbxt#` z@laTQc3GYjPlrx~?vsdXQC^puHbSa321p!%zq0M+0s~`OdL?xtm9#RS;R&J{O$a8D z!L&Z6$)EFZ1K^90(us**1&t*xOn}UICYI;t{|vAKidopkyw*@fK1qiV3)c`3#3&+_gN_%GIZM3zO!veiW)8i^p1u39K-M2 zv2DQLk9&a!*0dJr0<(YXl9do$-Q6^zj_!N6t>{uCK#9jb-bgRGBZ1>VPUsHUSHu`u zNut|Uo#)m1yI?@L&Q!JN=Ap>~&U{XLw@WHm-);!oGjAOq8uem7n5%0tIEnTB{Q0~| zxE4r0k9u$}`zSX+BddVgva%kmdIPC3k>`{<)~Ym?Ajc;e^u?hsEV%dX<7N}v)4zD} zb=3?IFJU)k(NSf_T_Ez_*h;Tw8jLW7#h2j@(Ii zqHC-Q%b}I_b2Aa_RP=Oo3qNgbXv+IHzjGV185?6#iXDa-A*3yC{C4&0p2>3_ICMa7=2}JObdW-L zKE3(*ZtWFj8d3Z{nNox-M=7N>=}7?LP`+spwNfaPUKk3EiW2zp-b?&*-^{6VGCdm` zd(xrFT`UVAT}KubU3l3YaB>Zg4NYzR%KEI_0hrtKx>p{b50lrmq;+&i&w8>w$BX@s zw$fri!R;q?>mysaGfmo;Dji}R6&_<|&`|v2$Df};td)g7p7?C+q(yks9j*_bwW`KG z7g^9Ir$hw8g93Hy`%~D*O0>2k#wT0OjzVePkLF4E$FM12jyKC;UpF&q5wYxgPx_W= zTm*N4VkBp&ASHE|E3>Q4GJ-iCl0CUkHqN(x1WP;#HH)dvd2z$^lqTr_JdaX zve=zUAPbYQd?~Qq0FMMZQk*f@;vWAtP{BEoc=Arw^)Tn-U6CFt`3=}i(M-$P6{hcY zdTyRm)sXE>UFC<#y^!_sA!P|^s3%Ya)ftrty*rSG4GM|ef|Z2=4FAajFfu|;EdP=m zt@Jt8jzXz;R8FaZlTIQZJHc*na5#-PIl0Xq3(X0=0pG2Ix@{TMczKNTm@l|A;NZjw z`z*NTu#K!rE=q;y5p0A71?~G>p06TNGc$Vl_=h!qexS^w22_-6x3~@GaYbT1k7;lF z`z5@#lEN7r9Gf#~^q#e>%|WL4obE9QFiO1%sLD30t+I)mX8`gJ2T$4l`EpMeabe!_ zf`q^G+QhE8vvYloA80o>#KaEx&0-gAg*}~fyh*sN-#K3lF(`AC2znnkNJ`4e$?d#$ z?@J_qurZGK`c2l_T2IB^J}961NbUOZB{w?D8W`AKSPJH=Gt<$%A1n9QLDEQ$3&F>F zyoXmrf~#R|{Vl`gs9y3LpTtb5sT01(@xAZXi2ZVw7er~5TTlWvg7sjtIfsGQ{zT|_R%~d=opSl(J793l^9|D*6)rjZV?dsC<>OyjUWQ}N`C0gN zbY!bzQf$-yOx0sQph`wWpRt^SIwPkE>Wry?&)N_mOFVWz$v7Wss;Jm6PaSHmkChM2 z?={$SvI);xWPBOgrpE>C0oYr2gHP9P-~6=hz$?9KQy+Ntin;sv$fkgEu}YAi=Ou`3+9-^b$Q2a8&a%8NvJ(|16k_eK;NNLqF3b{70nQR1*Dond=d&U~H+m88LM;Tl=F+~$$PTV}CyIz3yoWp+U>!<{+-HAMW;O2100|1z!x~lz zPhuJoo3W(Ra&t|GFkg*+fWeuRJ-spKrhVPZ3}2y0X)&H3C zm2*>s=_j$KwiN&Ft}c&_ZBg^4^h=3e);a1lK)g!~?B)xuen;jg`CO@<-vCjN-u+m1 z{Fk%_YHq%S5wWqn7E{6Li~K;Ya$LJw)sm5uqY-o{Ya#9U^_RWzTBrqD)O`wD9h4EX zX5K$Y;$TVkDy=0OnXm}1%0D0gNJ4dWb$}RlTwbp8+M;KMgSSFu9DJx1`j7=ttP-65 zH;Ba}A|p%mILy(k{QMqMy^}G6F6Z=T?I?wjpHR*TKxmVb}+Kt%y^%(dZq zmZvUhh&Vs@y2?RHg_awX8D(jkjh?OZ0xc`lfh;&(-Ctm${iGu7i2G zxfQmPpOK3|*Whhp3%{zwfBM$!V9$V z5z`pOiRWD*tdEWbO-@xeKe~?&4JW>|Eo8RJ&&^f16i#9j6}{RezUsCn!#aol$5U~L zHvj0;&Ukj1EKm^}9?pN@=^bR$)zh;*U->1)a{0VXp0Dx&)?c7{8=08AC9~>HD#Cig z4&alZ+s5w&`xp)#ujbJ#P^0`?SZZ_;?E35}hnXdDaY;#a@Z*$x8y2kd%E09E$`k%C zH~!ci0|e)f-~yw@i;L2MQ;``3OqisIJYC zKy|DM!H?%wK)Z^YeQ^CKv9L6YCitP@*D0!x`CtAY=cY&$tK|OMJ`n>Y9f;}Z5zc|J zA+V*1A3e&<%z|HF4uMz*P?9x*0DLemz=8StwLJQn5k+b*cygZtt?TS?OW0)KBalU& zGk22JDxK82fg6{yClnbMrP0<`ps~II(FvoLVB@u%dn(A}KYOG>LrzZa?_zZpcNiED zpj~D(3TjQa=Zjl#xaj=)$exsRPD`;g>vky?)}^VBX4$A?-020h!PC`x-PjCrUEPLq z#lA4$t%x4ga!s4vjqNGwCjG44o4`5S?3EjlZiGi1DGbhfmI@1t@Jr(}kg~~g!T2T) zXNLgT{B%wd0&yLztDegddfSMn!Lwd!d>y@MWDKE*u1NS+%2_}2^HX?mg>!TTxaNHE zG?Riy(bgfMp=PCuPc3b&H(;ob?N_VzjoxRj9out@OqZe=8H;}x@7%nR+F=E(S+|lD zeF2w{o7n?g4sG_^q)2~t!9%LGmX;s(LO=kPvkxKgce+~0Pz+VN z`RT_H1s+&G&5z`&EUm26d(<+gn4le@6qD&5PBp)*wnYYO=^ugay0o;EVVu4#?9RM3 z26n?64-jBPt*;Nap;N4*!(&netr+#|fKAn3f7Y#vB)8jk6mq5<9+Ns;$G+o#`z|(~ zjymWCUuB&xbSpiCLOy@~{Oja|!?5A*SKp}ZcfmBL?|u6=Zg;XZgWv$rx;18`M9XgX+yewhK;L*jml7Gd=(LOm9IYq3 z3pkymExkn@!JM{JnJOQpo)F&l_x(lXRO_{wup?I`Xv0Y>6h{b(;b28Hi;MAbvA(%d z>J;E(;;cD2=I-t=f$f>-R643W#=^=%G4WNN zTZsWs4FfNafrAC0PA!d~!S0~I=2TpN5>Js+PUyi)c3oW<<^ub{F|Eis+C}>g?H#N? z+YtK5A_;8#OkkQcs^*ous_7=gofzzbMB2kqY9gb{q)DJ2mr{uoegL%~y*Qi4Y^1Yx zyhQOaFC?lX*@kOzs%;yvo|UUS*% zzDD*e*z3l{ZOmqf9)+W<*2<~&>r+`y|HL9x#ooVZY>2Jv-m)h*{9f&5Tq0R)XkSvyWW&uj+YlcIltjpG#*D5s#H27%-ozx%!H z7#$T=#cvBydw5t-EK%zU)B^A(>46|>0$2>~Q<3b|zInwXt^Cji5w4Jt3fV zeOF0k)?l;BE|CB5F_qAO7hk2&hc`Zn7V3G+{CK4Bb7325VI}BWC-bR+*>K>Q(YOj@ zPQHomj|4}g|IHe??KLG+^4v(@bH68Q(@NCI;U~)@Bs4z*TQYqoLPIkMJ5-RnVm)L zDlFi*;VwWSG~<=~-HI-{wRt8}oe5v`i(KJbxNKl?SBjx#)OR-*U zKj71JtcEpSrWqN;l|nxa8$tZ=tCsg627jI9>f+?IeBufy{u`psaqK)G_ck&Hc?&Wl z!Te7C+M$FZS_azgCr$LyAjQd!P_$B~VET^mv3{5QX*t~=}F042B znrdZ-;~iFq3RSP}$z&;4U^w^G^Z4(=Hk3OHw17xWm^B5IP!)4tkfEEOGwb!?wlY(2 zdw8)W>VCEGg_(qrfeG)_?%II2%AEd?%t@}V3KL%K4Xw~wW47XC1*~_v=Xv+57UrKIM**0QxI$v7y^KdigsUa?bCz@KLSP)yZmr)H z9sig8x)h|+o z_kE6pp1foR%PoJ~{|45G9=CP>m`wZ9ydniRz!yX`d%4y^A)*}?NeFA#xw7g)Zh&9y z`KSc^n}T&-)*6yDsb7t{6zCT~Ox!&fA82Z+6U)oze@w{FKVDP!bGhvGJmL}%I2bL6 z8hH&!JP`GP+SLm?`Y@ZnoL`xBpZ@u1H@6ia>DJkbSr019nMh_9>J3T(f*zQ~p!p7nlpy29_S|xG>hPH6e17sZNXM0CNGT-? zS*${Ga77?uVxRW=^+EbH^_4^Oj~f?whtrQp9_8L*qNS%FpRjXh-aCB-#%B~mlFGRS z1>B~8%N)1!5s&+7aAKMtf=wL!7l z_Pkadx#kaGGbRhV{)ho0&?~Pcl<(79WuTugRKPo;t;T1=s`I~POhEiz{FO@|CI!B_8KH;suBKpnkO=X*gR9%ozB^)tVI-P7(t_r!7>ILZ@825QMX z4grY-mf^#FORC6~zTB_C(Ohw+Z^K}U$^^>5vj_UL9_T;nNCPGzB~@OK+0o(3)*7O} ziFJO*aw4h7_xnatlD_BhU>jK3*$PQ2p)e2(a9ba${v7h{{D2>Q=4M$Pro+LK7np4i z;&X#NAW7?6$WntHMmyYd3v);!pFA2lwf#&wt!rZvB$rBI^}=wYQus7a^EfuviTSk= z%K`v0_SbWAa;sYR!9SmF`4$>#G>X*oPM3(fo_s%3jRj%&Sa1Ib{n`b2w%ojY(i&Ym zeqUd|>`NNdNRhlb`fq7ggz@dqfi>%HVKm{d;oXm5ftbbz@HN^64jB^9gC(tOO5)@0eN zEcd9#iionlic{!J`YI5y&a84YDz%PqzkVcdsrkzxLpsP&Lt+0|tOJC9ECq{cus%w1 zJN84S5V^Ts!{!5v#vuO*2qL_$9+gJgmaktB0|+b#Dxj)+!JfWuo#F9?M#hUM)-Dh` zq!ska)$Ac{-X1FVL|Bm_rxg-)H+=NNQURn(j{%m)#&orQ&5|7oG+zMmGe!)0=5G1_ z{p+o-3)1#~fdBP%MD{wAE&9tmc04aqlZRNA-56a3bCIu(a**9RIaS32Dp%H#%4&a- zPJ?usb{MsBWBb;`!WV(5=HhP|`T638WC9zCe2k1Yun5x!l8Q!!C*|<&6VPzIf0*pZ z;QN@@#<6*H`KXeWHI{92G{ci?F&mIkkkSE-1$cHsWj^zOT)>>y4XiGUx(0rj6s2 z9NAf1y#8_Z>z{_AD@1G{^(kUz1|*NMLOnWGRw(*I29VjnfXSNO1<2-;^}~)p;sTZM zf8k|Sm~+rLIP4zmjj%*&YWnm&GJh|kagad`rhFFv`iyb`i_0gHk+e3!uLiSa(+>=` zp4q8unL@8Bif{p9aY&r#f*mI13!z?-pkHQ^`1@j#vd=PA_I9Po)Grx{IcH;-JGp)rt<~p z52WFg;Q!jY-f?w@oY^i#XeE}#y{T&lo=F+wq1uZ95SR1?l1ef+&|iw zh)GVq047uBk_m$(gG7tKfmmoCG}*<)8N}C!<~l*Jv3!+dW~<_Bclc}Dk{oRvt9fL2?teQbaW*Vlnz2qoF;7|+nHGdcrp4=yfcGI zSt(g8>^9a9cW%4>v2^eAbAHF9Lma%IQzx@~qTWh9ot+cqSHBlBI`;OSJDU<`9~=aC z4cm|+Q+Z8?-sYD)0Wu^IPkKn(g8%e&bvX#GE&Q_awC&Q0*Re$ih=_Q%k6fWHLHJi8 z?S~cM?E?NG2CMzRm12;ihuh6pQE=JTMjGGBz>Kg7(b%b6{Vjn~UT)2T7JTcmvCnf& zJ+Hd)Q#@dt=BB5Az6qDD1M%s%8{vfFw)2Nj>sq6Izr&%SA>Z#tykbhW#TolNsRdd+ zv-Ci0hE@%2xlAP9aatMhcTz~;=CT+ooHzvXK&gE^8@vceOYicVy2jG`-96pbMm<4Q z|5H{PBh(`Za@|Egm*}1vfATI8_K0E$C zDC7GUj_G=6@)tjy8KAqNmUjV81M$uwpMdJ|>U~p76K!|*MmhGC2D&&C3tq zWJoMo>3j)6q+A~sZv%!!k~rD$)y2e`0KWn(gwyKsrYpzq+gK{e(NWgRR07T@(9l2z zBZZ7T+J4?r5y)I=;i~!)5{e>*N(R6>e!|VYxsE6S`ClN{YK{eib}`QVddcDgSUMnD z)yDJ;L<24dTQ}b}VjSXkPV3AR6D>b{$Suf|wdZ58ut*j4A%Ig$8J2>fWjQr1Woan17C04p z>{^C~hH7dNEenL=d;|mpj*gClgM-`^($`bN+&H83s;a7-uU@HXXk@~kasR84pY)83 z{3DwGDcRLx_(whW%bx_!1{T(D!|d$-f3$L+ko4;e;6JiC?mxrD@5q6a4-OG|_RmWw z#Qw(s^8Np>90U0;3t?yoht3bOIbrn}ob)**jSt9yTx;;~Tfjd^?{Sg-@y|VqUT^u* zX%t!12z$oD!h$GrEggOhUT^~97sF|>#>U2#m6ds>|6KCNJ2Kbz2&?DX1pzbH_y4(N z|NY~Ge|~(!{rO*K;eXzcSO2~P{GWIDe{oD!7wO0UWC8x~yeAM$(LY@kP23+Jk`W!D zPcyLDv5$_oCd)Az+MQ9~h|jmrz_>zGjhV1SOXto{K$qop(|}YurOCRj*GNi3^%!-v zw8S|M28;rR{6J?KKytnk+PEnA4!*zSwMa)H#e)-GTLL6>S6>69mPI{ds$w8{Zd5`) zME7;x`qtO@^tb`~^YEdjgN!oppF{iZ&-cX6-M({M819HZ;l$fdqau)g5zRI48@}+K zcD~Mg!>z+Rgu4D#3}%k7Z98MzG)kdiqym6AJFKbEmyu^OZ)k| ztPg$lSVWUl(Q%}3Hpb)7T^?Tuh0-$kj&Q!TpF-^{&CMdxnjUP=Of4*FHyYH7j|QIb z^LKZ@dL>jC7Oykt(*JH7 zNMK=M0cI7v0|LOPCdzos3XIPI+!0$;!Fsp_LJ}QHNk3u$8^auK)jLkA0motDFn32V zP(QLgWM!fkbUQ3f4G1KG*K-WS9ee_h%%%ZnRZsxaD-fk(z>b1ekzlUIikDBrDCpjT zV|C8#4Di7CJkSSc4``#JqXk`1e=01DSCyzi&1a19|1t0DODHRwN6OgO5k_8AkRfR5 z7ov?eZyUE$eKj;>TCbH?;+lpSFw6rX3-BsY_@yB77IjI7Xz+vWJKfX zm{ujA3?gA}*CL4}kc(b0Goyy`7QuO&OKte1Wq|OTJkEX4vYrLO`B#&YhwVA$bEl-IRfQ# zcjq885ahF}H|CM6`|KD!5to(VH&0&L%)+`ppGw>%pc1rj)Jc^r-HeKiT%Rdz0W(s5 z_bK?`M>8868%BnuAf2O-EVKsHEaH2620=RU<6`EtM)oS4(fDz z5cr)OYF;9uY-}NIJomzrlQ*3XDfERL4<-P$sS>o6l~XE%nj2C-H>p86ou(s~aUny+ zA!{Jl17>hi>fgPG!S1>&0zwIb%!(AE#b65~a+w#ny{>k@oKn^ICm+{)S-iXQ)|{u$ zd(!B6O#hTVZ@GMKwd_@Sdk9UX)pi4jEp&Sh0NsL;*XEUR{|qIs58R#FMQ{*UXP@3Y zDfVYRV66MI*s|;>9rhE%C6Jw+gyR_+oM(!OJq{($-75rOU`D+=pM(sCN(?uz|$t;reJ$AZ9Mhi3w9%=hQ*qOW1gJ z4CZ*oCj?(M!jQ1kTDN__<(K=4N>EvHQ6?@fE)Ih|a$!ebP+`(iB{E*H0a{}_*C2tT zs--UIy=3p|>I%>Xy(l~z!UrE)&rO_m?ErmN0i=UfvdvZ11eM*BEQf0jBfjqAA6PYd zUZtUWxUJd`fMu~cQ)}0;C43O#ucrqFIMI{!)73#_te0oi0)P+wW8xNucR>JFc|hYp z&gE!QU*poXeJdJ>4G2Ty>O>*5bd2?3=A{XBKU_prtzqsZ%;JT=hRLo{`mNPRrz>(%Hl@}hny#*MEjCUV9IRE z3$rP|E8yn+=Vg#uExjZN)&k4m^ZCvEUm!*ah)gd@zh{cBIU?}Uv5^|0!fx6udh^xQ znfLoo97xzNUh8+Qb!R7>8E_6m7$wDq&%E6sE)-ZA=%WI%etw%NW;Qlza+($I5z|B5 zX>5cYk$AsH3T8*3q7eC+(D76Q=dIZ~PPc4)_<*LSUxl07$E!tNu^X#Osp#<>M1V3IBO@@{z^`O^bfI+tJ0#ecBRTIC z72?}z)NK?dg6vLcvisOq~fE6cLtBM)~4q-uBfsLXJG{rDI(Q*h6?AA7 z%Fja!SIU{tijJzIR|hGMKWkg0q$jVIPKPBt-Nv~KGYT_7Z!_cUtpkI=pigF{+}*3a z`l0&eE*SL7pQvfX^i^eKXzI2qawB*gbVbnS_Oq z;CJ@~|9sqEH~7Y|5e%V&@vjlG^Fs1rFwu8C=Tu7{1x7J3_bJ4w$ykQV35WVYQ4M`8 z*f6n$qby+@+84|^Ucv?3zVDz7MO%&a$8p7Og&u6o_4O<+T`y!ZB#0T>4dtp1PUROh zGEKsIXZ6L!Kc6~mqkhtfh`iscAYVQ^>@8GLQtIFA3Q|VorqlyJ4NT;3j1`G)z&1n^ z<9)v~^k~I}J=O_b)dVA)gb&Hcl;u10UiJfM0 zWoqh85Jv>_ZpRA}tqsY7V5VKVrTKw37^(%o!OX%LW> zmhSGB1`&{MknZmOP2cA|=R4zf&iTgp{{O~sJi}+Z*WPQdweC5ud0p3>H?fl3N$7;p zc&klV>Ou$}gPQGfiFMBu7sqp;o4;QUmRi#eyWa*!*b=j9mG%K4_z&>AV}z#*2MmU5 zqIRI`9=g)FEJi%BiatzD!0D3myRw2|5qeUkAM!*zVlF6pSf|@?9_M^?K>EUAv$4g< z$f#Ifn)wiKc`}3d{DNb(XP9W@``5gf;&}KSj+fz9 zbwzWemVHl2(FGSQh!^jtq(ntMdzMPg2Cc60;_mp~frKAyg_QB~^uF!sp>p9Cq#G8V z`tmVggQtqbzw@^Mw7|#*<~#$rx}H7Axxh3K^UhMZlw#xK13(u;Uhz9OG~(GAzYPno zm31zG2DJU#+R74u59KvNbE$m;0;I&H+1Q?aHyRq@N7dLD4Lcs@QCnF<;iwicPR+(7oizMXHWz$~dweoxfsTu!%&QT>8b)Z+l z=OvKW?217tDL2Wfz<-lHOwn>DJUl$poK97Bv^$PlCWiH7rFcoR9?5X95O+EKK=n}+ z*f{|op#9Y|K`t@4B#z}WzgFve!~OF~^m$#a^VXExM=YF!i|T{0Ok?HTiP`t{9j+Rn za@CcaIcrwDya=p!JnIG@8+d6ddv}xx48X|-Sn>7c_W(hBegVnE zLz}+5H*5Ie=COeO)GXLMfx{6Ueg``D5!p1OSWs%C1ei2sd)igXKFokFh=YR*o?{lf z{R~v8h+cyou;zTdy1K0v_5e?|qGEn&>Gi3mvpwm3#iQFO=iemI^tvv~B9$`3*f)5> zkr;_jdk>YSBn`64x6o)9q|dETR(@f6YEoaJoXRx8CajOw6rGS z&~>Qi=9Z0`G;nN|+Lo5SHEqHe8CKv&Oug1m<20M(Uf)km$J=@Qv$Nk_`gE6u$Nq3V zr!7dhu@PIye5$U?Wgm?!PCF?*_aX;)!46!HH^=Tzyf4o7OG>|`{qSM#a20Slz7^MF z)WbZl)#OD|HoZmgP`7-VR3Pbhd+^4_2C8iQ(C~2a{YRe(2Hhvl&#O+IM7b*e{CnnJ1`!=S&WY?eBdEM1u-Y?(#d?G&6f+pyI-s0!aCy8{WfpSWP5+ z7aM!%yy0?jWBWEWD>paWkFDRIE{xerP920?vER}kFgM!Q2v+JdxHr7?FeU?o#bi_K zwEFj=5N#2Q-=S?m+Ks}T%WHC(w&&+p@d<~AcC*Js;c9JzhOsX3U+!V{pshP&GCiZx z?Px?rX5NeIZCOT6ryA%Ie*32Fwx~1&vtjNZo<+?zIsZP<9pYsBQ=V!27Jj~oi2X?) z^#UH=NcF?TxwfD}Ox)9vUkKDwCxi5K{q*!Sn&t!x-e~1F1$t-q2fX_kc+AbD-|-HS zG(g!CQnB;o&K+jipmVV(I?TEI>!rpQ`@Y9m0zbPE$!T@E3#&S`vh3{aTN6exSO+L; z^SvwkJX8G9Mn)*z#r%CEoNzJ{AhVE`AW(I#OwK`px?t#IQQBauadpz0% zGmV-yRtvO)R7N@et)scKB z-7xpGzS>^D`y0rvuVS$bkL_|IB~!JTduE!vWutgc^75H2jn)^2pQP56w-}$;e7b zCFG}k#F7sSP44}WX=vD7`?PE%+N9`(#j(%#?>|UnF=rh{j_PE+yu{czIE;*q-gmU1 z69Dn*;OORS*fMoh9m{pmp!7#juE`6dY3lbjfVT2Oi|?daEarLl2xw_{1Xq@qw<~O& zTT2W-U)OBa>$u6sX@p{nC_ab`G}#FG{t-ohYBQy6kc@3%d z92xX>kn$I3IOHxM4Yx+;4-06r9wS^m+ccV8AV0oeL|EJ@SPAKyW@B}S~=MG$s1-e`m2w&qB!~ohm6e4 zWhG@=>$%0+S|2U1<{>I6p1nxv3^}{lKKQ;wQ1t!da_k|uhb!XgfmnlVv1#%s2A&W{&*`H9o z6_W~$^iI#KLx?FPXH{`CkzcDW&&}OHDh|FC8W;#FzrMCB6UWNMNO>ds<0oG_L||vj zo<_vg>L3F?endw|sMEunvrBVgain2>ev%$o@bq{`N3Zm!c^#k4*muw|ug~EHUdh%A z>oN#^aIYhEZ#Y&p_moD>Q>!~4T;l}vVQ6M%Xkt{gU|ZfPxDr1&F!b1Cky(}FmDSyT zP0UGbkKb#Y=64hLp8p zNeTSf{~}$(^ZC@mX>E1Q)3aLRKsWCfF}MRR?t5otWgD`oQFu1)>qT~q@9skLg_YI) zrt7M!t82oP6d3z9FnEo9D8G8amSDQ5u5P9|sSKKeZ?-udr2DI<{)i+B&d zcFfa-OxF;}XTIf*V`8F_{Ph42TT4r;;jPX3{D4tGC-kKh)sye;p@l`xX zOA8Y>lta}tic8jRP9NQprI2B%ht>24&<%yIBn%A3=kDU?QqRHu7jIYoN$JA%*y;Bk z`iXGYZI7=N-$sJSo&*bNJ$vYPcXtmD57L;5zPy#6PeH-J{>pQMU*g~2RE?KcR;JF2 z(v>|HtDlD4cY0q>Pf@*GNkv>-RiYOrJ-v8>v-8-f!6nsFgKy__*spwH0a7jD>Pk^z zA-FYdxDUO&E^O^(34$A^ZbZf3(bi5vON<^<^Z30N(l@v^ur2U(FLF0V zq%12>)wHtX9P#pf&yLs)6$mGk4B3T+z3nd(zKu?bu!c6tv^BRhGsW|D?Jvlh<{CM? z`Jw4SsyE#g%aWX$ib_;&Zf1y$eR711a(5Sg`8|8Nli$bJp8yZLf$}y>vp(y?d$Wz& zBhRRO&y(Z+AY{$eoLc)t{Za31tP(ShOnzVX)02w34^1h87S>C@^q)OEj{E}NCh^w^ zW>-NZQPPLB(!6t)Ia}FT-5NFfs|RbD3a2GW*!V%M`_yTfm0Xkz#_n~OU&*f!INEi+ z^Zn_vBUn;4?_xiGM6pEDn=vuDSk3P(^*~wzRN);LII5<~^fo?d;izW#N;TggW`)kf ziKuI{yDf+;0S|BGgCUO8S+;p(z3t%(o|sq3D{C(O=2!#-ZRUG>J6hQ%rRC*dz}Cpu zNa$PXJlds}x_Nve8^;qQJEP@RzU9;tPdzy~C?T*gqr;sI>E?M6DU8wmX3j=F<*#|r z^!}MRGXBAjylaR;o6M51w|&DsyFcx>5E0=QwMZfc1_q7^A1rw#`I4))zzT|_?;n4Z z&?(T@1!5jRpg4Avu#?Fv^QwxdB6M$fAAM50?o=8fX-Ujd#PD87ihzBEM)uJH#+aE1XuY!&Cc8Nl8bc z|CJ8qY%Pt~t;&-Vl_e0)atkuhuFg>N@kzsib4^T4=(Ck5JXFM~1h0L9WY^vmLqJ00 z{KweG!JybcV!C3rYU}$A%MR~4f`|CnmAxODl#H|2;^UwC=v}A{R$4DMH@i(cNLyQX zHc$qp$Hu+j;<|AEyt=lUsxLjQZFmw?i_F(#fXih%UAi>S(&n*z8-^>6{1osfV2aJp z__Id#5d*J6qmqh=rpzf$Epn?niGo6fsPK^fXD732308vTug;#~p*PdT)?(ULMc;gU zf>z445%Q-(A}Z~T6HmF=12VDr zNODh4y^J?WrO9cS5p@H@y+i#&{0{RUmV}SaK+OKv3Q|{7yHCvJbl7Yu)2)@Lg>9NJ zZUeLazL3@191wEHA(S=iT~=^Ro<0i>ap~)TK{G!F8na+dUZ*fEm7GcLQz9ZF>%HBb zUn%nsbcEfH6cvw$g>ZaR@{@BP(-IKlD`{vj(o-ZQr%F(SYE0DSpie{|budjH9Pll; zn1p7oG&NJDIkFjP#05uHR{KjyJAANEaWF$b0{sS^@k)xR6~`xYu@hUSs6xwfc85dt z_HlOn5m*P0AHS%8BnZRny4O{+BbeRP5w3GX8%zw2qX+aoKG@Y|=IW&`j>qn|6&1nK zD75zWZEN78+O0q2gaNOTd++mb$5~j-|9Ow;?=$~?>DlP}7yA1jNQ9G_(9gqJM9VJw zjLSf|*L-13NG_7zzeYs3i+(q!%xvwVD0q|Le6#dN&FAY<YNCR} z2ZN%4-f+n{DQIb&9Xc?k!pW>iXM`54ZYtdVePaJt+PzC##W)Y@4VzC1s*hGV{s=HJR6Tba>8g1Zs%N?FUb~ zo;4cuK&@ClYGP!F<}(z^JCdW$u;78wtaXMMe&YeHpmt5JYs`*0?exU zsl~=;9Bsn)ArSWX`A5ayIwQW%$IQt7dys{l<#OaV7B(L8^c_KHKXkyxy7aUi^r5nw zP7VzX@o%=w8`QG-IPr~3%OUiL_{d4qaq`fRV5^(-$^ zPh)%DH_EreFI7r}^I;kC@}1i0>~ZFE`0{`g!C! zT=*8{T&zq@y|k?Kz-a*~P*6~Sb^Gg3Rt}f-gkxEa5E3bj>3k5^rl@RZ$H7M#I>m|l zC#a#T1rM9J#GxhY>I0+8_V_~vn#QK4=UR<7$;ru?n3!0jzIcY*TR|$LT;AwUlToF$ z?W6k-FF>VBrB~jREVJXR$4+E-yk)H&-&KbKYZTRU=kDoolUn4~McAef6nGsWA?V>t zL^0;8NMn>sD%x0Ljfp%#`OUR!5;g(xYEiD~UQLzIP6E1_3bEg zP09 zy5vu5b^UGUM7d`aH*7*ZGkopF-~T%&D=90(p*6U*7X8Tl0UduR4_|1!D!WuQE`yc?RBtZ~8%B8XqrmX@FD4{>MgytV23CFj@eBI5PaPN- z=&-lKBSNY+W)R=@UQp6m_H>gt@RKobeX6~pYHPz^TB2zc0aQ3E$acy-CR<#8PC8z} zqVv=5E^sA5#3gRA5udN>IR2i=C67CEk?q7cmIl|lo)T+R-hm%)%LAPj%VfQ&;0rqZl}jAmMpzGv@$Cu&#D~9JFP-12Wj>;1Faf& zKA1Av&e5P7X-r-vEB^hGmuR+rCM2Il%ajxqG2X{j&A+d&KW*|p7~@tM5p#OA*u{g` zsvjyYER<89-qz8f6netWhfLgcF{I0E&-mc+b#Q0{?qDNFXGa$%(rLPWR;YaF|i*!FflSB{K0MO>mRCsu$%fsDdsDev2|xM zjnllda1$*pDJjHyJ$E6&T z9qqs1gY9_dpIN0mW?;xJ3Q4L9JiJP8{Cn_nazly!8cbvwHZ%nG`S9xne~+gyJgYZt~BXJCAt$@1wDN{y7ANh%Gp`TP!Gyw_|B`o=X4K z1ZK_5qU5hfJo+}Oa*4U&)IvTn{%c#N>T?uL{<~I1@=xr|DqxM^aMA>eLz>u{u;`JH zW$5mC?c-|kK0gjcz%3F_+{YEmrpNo+bM0my0#8|vm?)g*2PLJjM3%av`hz(1scECk z*-rAH^POvBbG0u>2P0>+IE62-N?$&tpx<@>&o#?JH#cF+(b*ONI=2d(;$RDo1^tw8 zJUl4It~7XLg2N`X4L{Ky*p?*d3!ILY3Zo^?OiYZIsm#^yQ}HR#Ge6g`o0=e_3tjp2 zjGaSLR`Soxqa9(qjh|o1h3&RR;v$OGM z%t08hu=p$5b8>N>ID(kWUm&cx8U;n5<-MQDYjH_JR$a6ml8A&LS*yMjM^;whJN32c zk7>QJB*l}q_jX{rfb3j#qDOeOkZ{*Z*LW!%c=Ia_GjiL?h`YOx<8!A`xZP}o8;#)% zXZN{9TAK3|6a(&}!x&8~WxVgdzHtON)IC_37pLlT5k;NVziVX`@cMO-wUw*co*Qkp za?bW%RZ~lgV{eOILQ`V<^0yX$e15b$@f38vrUfP)vjt(SE#F?u-92s)Y{tmuj>TlA5v8bz@%$NlE$c!X=;A* zMfv0u9=&mg?(WPD7}808s+HV(D{54;ie#hYut+&SJ6ph}4jpBCuF4-mP^w#L`_O#Y z05IRET$Llo&~g>>S?Kla4YYV{YyBRX*RpM_@aSjQ+M>!PP0PmnK@Ihypks zM26inX>t0Vo*NetjE#@&IREDww$==EhhW+SILXPYRUy=mmLeVz6XFvS9$I%cKSh*0 zqvGYIX2c+WknnXI{Sse){4YE3+Ijju%5P@r;M_*d`ga#e!MTv>;2woPnBR##k-U3H zLL#WRct`FojxQCDy%{i9@1H%q*Ggh;UX%P0E2;Mb5EN?B>R3Wj1dQ_XUj^y?GcSMOVYi3nb#xj>bl9 zeQjbQY^8T!Bg13oZH}?Xn3?N%IA)T-PC)p_ZT>rQi4qbd9>F{v10A`?t02M!yAy3Y zr`6(#^_OH@c%2bActt-EO5Q1^4gSr!h(J}E%o|{(YPKLFE1qswmW}ig52D$mJKyAu{H~{ z&7vfsgM+n22D%75JZ<-Rjra`2I5iWE-NJe0dCr%KFD3p4GPnsnbFE)2?QI>SFP<S!5^o!0tFg+EG~<2j2f7S6la zgqYwkht+Sm0%T-D8J)L38~!xxy{>mvjp(r|-Xqhis;>GY{0`}e_RZz^4JF0X&sehy zGrfa-eqRDt%sRWJ0|Ib#lKl3pDL=dW$lka|yHtR5wo9jJCLow^dFAow(K7B>0kWpxt7%GlNA(-KI;Q5Sm&p%M8=RM+=Yo(*ZKYSKD+PM4y$52?KJvT0eC@ z%bWCla2FlD(==!ejr;~~|KQr-_0R4bSA|X0_Z8Bm?YOO;Jb5wltB;$WW2kZBo||So zuVLSXa~%am;~6GNS;-{W2WNktShsrJI+hz583B8Y?cr>Ts@2`r7!E0!=y~U}!vd|Q zD&8Bl90tH9lVAiu+fsLk!V9;RqJY$v5K(lVNL&&kPECoOl+d|fkDjZjsQB2kvvXz} zeQ4#AZtw0;9Q?h1aJ0260*^>~Y>?wb4R!L1>0f)btQiOVWe7%icN0R5bsYyXKn8aorH;jPA^NOzngm}A_^2bshT>AWts>K;Y zeM3*Iv4fr|TeV*|?tvq5s@x1RN#&wtQ~R%py+c!D|1QYT*h2a=t*dLpmD4qu#=0*1 z$CgoC#muo>gH1O+^~)>U+uLSl6?tamge?Rl!Djh*Xl!&@$Jinim%(-XL+)*B7Ds96MIp1Fn#A4?4CFgb z6qJ^Y?H$Qz--+pxK5=k>xYkb3><|`*1a9V<>*fA0X+?~#)m2Q+Er(2_5BT_aGvm)E z!{Z_euxvDC#bS=7IR^T3GjhHJ1a0X6kondfoGT0%FD5$rR)NfdvKl^W^s7B_$2Lnw)B8PKFA+>W#_n+tE>_7Cmz7?(Qy>@7Y<|*g{3tdILjQ zX21)OEz3yC_};-RovK+G=}=ISF=bR7w-9!A=IQ?gZz1J>UvE&4Y<7R*@ihY`0DSw_ zbr|Q_6R(A_gNbHxcK&F*;(r6PHj>vE7^MdTRaGK)so8jEwX|`Bd}PuIcpcR=HG8;q#T!D?kC~)tvzRwnOACIC z9X#RTVdYj+le{}_UmQipLo_ZqXgksr799^&zbNsK_l@1%bqK{4f#pjBLJacxxvhL) zbsQQ#f8%$V3afLFL&$x4cuyPBTSVEoq@)zK(8{AI1sW-B+qpk~UaVUDKBzj2+9N3F zVkP6Na_ll)D$C_L8qwmKEM0>^vAV2x$oFUUMnls*r3V4MLC8NZV$aH-u4%YWNJ8Yz zJ`DsWFe8NoLUuBnZ9xI?!+B6Guye56p1gct@q%mPXzb+l_Q=K+t1jLn5)#5c_RBvm zO9|EZluM;R!j+~mFD&`p$N7ul$?`$7_OXK_XH?Wwh3#5F=<^8N|1deQo>yDC&uGr# zNGav!rOIOq^+-udA!;h@m&)=JuCj;o3r#_{)UY|hA#vNB)nl|h09g$*1CUqxK9po- z(WfoCnV9HStwlse27kH~S~wZ`$Z-3%_gGb_^1FN-v1`{*YK=@y!(l79(0Uut+0f1k zl;3_8L!+akhx?)e{U68cs*K@TPyUX^4-4&NegXsUXg6&ycNd_Tfa_K3baCo6u6S-t z9M^q3b(e~Y8sx);1uP*+zg?AK?~o8~*NGQ^ZW42Hto0>mT}cvEYb>-tg}0olO)6rg zpm*A7L~V}ko(xuGh)A%o;$3wi_O};At98DrODWl3@0f#BH!|{K3V=ziqxxkq)(;gq zxehLqhkuI#bjhF`PYfSrGhgv*h^R*%3KN)_7|~g1{YhwAPuO zE$q?x1yxlw50j9%-T^%fjdJ<=n1{A}zXcsRd3l@r_XoBdp3ii^_RkZ0VMWtY0;keA zycN^y^W*DRYLDj=!qrZH0r7Ih3wU2cOiu^bdc|CC&I3unKjC{z1;(RJBouL+%3l7V zd(mweyy?lwO+dOn>QB1^5yV_Eh=i-g{wQzq?6ADNd=8tcIK?2IfAbfcN2_jkj;gS# zs`>N*jeece0bzZu%V^)ou>*WhM|THO9U)WmKC3SA(;EqTp$z8qu#ELVV@b)Z#Hq-P zxPvTuI26epKz|Lz>DiNElh-M49_aqPZFhIW!kBf)=`s!B4gzxs-^coT^s$FuLgX8H z`5W%S(u_}wt*uEgNkq`#=BruFdhiF<&H*3hx_6kHRCE4DX$Z;@6;xPq)5?l;bWeUo z@x{c&k*t+I_BcK{`N_Z#C7F?tv%a~i{UzjcV`V5UmQb^K)xVVXXRP#U>cV{IuJ3;~ zy@)dxepJ;Aoz#tu@(6_BuN;@7z=ro|Xg2EJghq@#K1@to>zdY1zsJT1iLQQM{>DB* z^$(2WrDkR@)*4E0Z@4U7o1S!Zpr3}hqI^*L#p4kuE4%$!m}$6dBol!X^YQmRto>T| z5dMZG85qRKK;L`?nmUWivBmxSfn;>5P?ObsJ}GR9<#7~Jll<9k68hzHpJ%7?=}7-y z;TkPm*<}w4c6*}mIIg#Dw1+1dYyvbfoM)&v&8ADmkQdzReN+mRl&rqZ@AvmhKSf5~ zCV#6sx{=H!|K^RbDc_C@;JZLl_AKvg|Fflt$YB>zQK+#!zJAJ+5m#{l9xvbd8j6Lx zRo9RQl^?h`02}D)_p~}w0Y56ay9?>S>psa?rI=7yOeCkOe26rSn8>Suhb%&SYvDhp z6|XsRsYY>Gi&M$#55dM%l2$)ms8K~7*Q=)AJuOa4Q+gM6A}j?YX-tD!fcatYpOnh-&9SrY)iA+!uH^xu@QOkGMa*p3vzl#D2-lv`m7r`y~L?P z0@L)#&{vY9#|S-spHp|Xipyx7p6##n2Zfy{rloaW;u6q8I`4x{IP?U*wdLg}PL~rW z^DA}A;VUPPX=wbgPN$ZdCb+BtY`Vm4h=HZq}siW3s@H@3$_>GL~%k&S~T1j{V!!2@~u{_PG=s86q7zfPa6Jagvf z>j%b$r)diBPfh(0xt^BkS`4@|f~RYERY_wGx;k<65`VjRpy7+f0$T)J}d4j`g| zuAb@d;Wl*G0Rz~K{S{ohC~Bb(P@o#V`NB3U!C}386$;km{T$;b2kMYL-J)+l-gR37N`UeK6mpQQP z6p`@q5?9mbp0QTDK4vW{B8-XVaIJlRn_Pq@^z}UqtG&JYaxr?popREF>5%*#=TDN{lT5b{J_TE*A=E)?v`!iVp77B z1MQ$_ao}&Eq8uaK>5A~k2Sx_M;$pH>9+N>K?~M(RjLzxuog8A*^~00P!=H_f6pYk( z1dm9uZ0h%0{AVVbhI7>D_!RD9;!G5oRw3NqNHnY>{Y)>*Xo4l=M=c26I&Zg-$eu)L0-*A`VA|nzodpDFU2CJlO zNC}X+MpaeGL+>s}PIgZ9v9Vhxr|aXzXJ3;;p}xGvZ$CM~r#(9>Q0l5yXtSb;gOh2v zQX8Kq94O;zUwd9-<~&g|I5JQJTLu7@x_zIlK}>M@UMnP$>zmWe^sfAleJQ3KL(H8& z&+A(Au@3UN;tH)T(9pK0_p0K=6RD`vUCxg!*T1oFt3@+1GLn{?X^jsI4l`?3-6Xmx znL>4xtifmTKZwP>D7s} zTUdaS^@WuEZbEPMrla-3uHMn+1i$r+&}C>k-1B^8MIbA`)a|s^4dmwKxq`XU@#N$H z14DYJF>Y)30CU8wSPu^37`L}mAVv933rfKK6)kT~K_MKy%~-DEFbo>skf&Uh+S+~f z=FwoY%pS^{Hqo!r9+juOanahEW*{m$c8iFW4C!cnH8S$yy>^vd7a>Ne?YL=~g@r{; ze%9Ul7}ZvT0T1uCrGPn$a;^6-ZHLDPwV&)=bOY&_*8QDI=jqF&r5@W-HmJ@C2?-%w z%Es{>6`FT`z!zXXS^Cicu7UZ*rQ6o z0c^};hHPu5fJpsl4lO_cZ4Spb91&`SN6!+Ms!;z&F}co03`+>; zv;QjXo@Fjf`^FCqDUmc`jGLOmfP0`PelpNAS0if42>r0e3fsCtA&n6L~k-d?(losG@@c|rUO>$1AUhL_4>3c?pHosp66-r?!$?Fi2rMyR>Q3qo7FJ z2j@No6#M%1>;FfLo9-X(ovL;o9#FkFxf3rK;OXi4La|UuuPbWqFHU|;h`kS%1a-Ap z;U4vJ=68==>Ytjs}?m-+mz=Py9jGd*~B23wxbN)`zu4ZeFo8xmzNipMj8tT0`e?HXot#^ zj{NF>s}uqNwf?0Hp6lOQ_(ugi*1$;nM+MwgU#-z+@Ezg%tLLB`=YwVhYGDDpI{80> z#+3jlZG*itk9U+?{LyzCuiuDZ*4TB|JDsRHDKfaj?uJdU6Fl zr;~uX_Geeju<>gU;AHzXK+>tzH-h_B0kd%ctnu` z8ToE6C5`BXeB#`Nt!70`F)-kdl=}F-xm){2TL2NyQ0Lw)1#e+Zv9pY(hUJkFu!w&? zKX3K&+SAo#JHV(~W5`Do&X(-4;H*pw)-m~S^!Z>@Ldrx(zjJaMb+W=X282Qdjg3n_ zO`W~2+V*2=G$K$Cgvu(9xVoJR3E;trvv5qW5;{7;?mq)Mm7o@+0)Y#F|Ud8(xTH1XDZ-2 zKBvp#&0k&Mv1ySf?##8qfNFX=`agU)qK;f1Z-n|dC-1}WFZuGNz^9$^Hl`06I`oUy z1>I(J*!6HIV}55@xoI`J@ly|vJpc^J=O04r2tg~>=po{Abev5}a!7;D1@I*wAD>+5 zTrDWC2{lqCH3@+?fP`zPh50$Ndd=}fCa&^C-l&S&{u>kf=;&ym2LPih4i2gW9`V(G z+x`uB!69fKiqi50yjAWh(*yxZkIj?YH%}d4c#n#x#trhFOB`mH+G`^rBKUT{C$An- z2ykmZ#6HaH>e0TAEx7uv#cWRYw5_v^lbfx%xgE=i3KUP(C3f}O3c70sgp7QY*1wkJ z9Pa;jX8HMswvkELLtMq!1R}5}?2acS);lbgz+RW!c;N*@q`Jm>&=>hEhfK*{qLjGF|~J! zOWKUo2gUgN8{W`L3BdMUiVgJmonP| zA8lA|R6&&FBN&eh3=E`fi~W~g0ZE*bSySj8v6N&_STqpM2Sl6&AY}NwO0INtkdEON zH9EDy@nu`huYYP-GF9__^zN;=O{<;1 zC@W4jEhkj-UC4B=J&nc>+;{Tphrsd<9c=ba!hiSwUKwMf`X6+INp|+FwnXfRMBhOo@;@ zJbr)cP2QZ|BY|NoG{!`)k?sRu?%5AB_~SpB8z68NO` z(hT&YRMn7ay*^Qp9H(oLXJs|9-vBJkK)m9P;;OkpKJPSn@#_S=7XM6xiuSdOs*=|* z6f6=FdRdr4;&xN-xZ}*g{l&%>9vpt~g2%u=wFOB20%A}df&NgQnD{#({PQM-dcDiF z3sg#Vn91O&_kxqt&brwL+lhM&E-R^kEn(+qMZ-3;r7v~1l1{z-K}|}@e2c%cz1i96 zNxjoWbWo&yXw*u8dii}GNy(Z^Pb#IfUz)l7wJE%AfiCU1|{j7HF4i6nsQDK{RcyR`k^jBDPLraImdNA;9 z0DN~atAdcv&W_KFv$7cx1&?X?>og6>$UXf0{Jjm0?*u$}nxA1aQl4Ltq6>xOdLFGT zx&ZRjW@PFT2w-p|Qu8TjDtkZV2o_JY`MrYV`U#jOYZX&EYUH681hxYoMvcVpJP`Y&(`G6=lKN;EEGT1fOnM&Om$run2M0jF4E%wP zgEyjjdLnQ4XFbuYp57%FNtLgxs5pg(o#o*@Nh`mk&%8n(pnV3mM1iu-hMSL?5m^^< zT}WI`Ch%2qs%wDrOSH@!1em=x*0zEY0{RG;_ian7pVkLGytgiZPP_C>6xFf*Bg$;; zrz7{4W)W&y84)x_&7u_84B_GP-jRU;nA8-R41TabVy85F3^=|bmsxHYD-FC+T;A(P zV4j1f5IcUG>8`No#LTjI$<&DOS|`;*qt$u3)wQ7_43bj?1{eumj|q?moK!%8!4aTHYU~(ofbnaMLK+eq#{#jaL$j{OJnUj(8 zPG~vUW=Sk7_^XJVMzIt4k0kx>I-a0{ivW#WQqnKC6i-N85V2`#C!=8fyskFBY^Zp4 z7L=Id1DYAkB$KC%%`GCG4BytK#UOHnF-u8N*&hu(R6GSj4HVTnW3Ndh9D3mmQDL8cw{CwNZAH+9g1&_)951f5DOLmrXd z1`w2?9fuX&Vi;OENFT3sdRIe&6jf0WWdWp1}=_ohb{3V*Nk57%$Sjf|ZqkKodXCxRR=ih6S5cUJ}LhR_o_u7#1{Cb+mgu`F|JS2lr97%g*Ud3NvJ#paPs8o0L$+%%=%ox{GmzAR6Iimm@e{$2_m zUF8OaPzXH%)~GWH)IUL*Q0B^tSuW;I1nMnsNO$A*zd!XF-h^3Em%0#iz<}pq1*V^} z($WhZw>M5{VNt#;@sDr`%5`V1%VA^BMgY@XNCZvI;Zcc0bSxx4&W2V9#Ow^k< z-zw!dS~rV`Dl=;0<6adEBi&L6N7#QbL@P4aY%656>o^;AcvVe5dRA{=)HAac36 zxuKzj_xpBkkn2mi1xtf;%;YtI4y>Hljw_uKoOAUccf?Ab>obKCw30g5h!D|ZW4C^}a z9s7p;Z2wTP|>7s%{_ri$O*DvkwF47-yrjE1Hy3!A*Wp0sJymP&2EsXrwGoT@7#JA6mOJU)@n^u1L?WH@ZV?a+!_&w?f`Ej0)fz@ zre=}rsf=(odAS!66#?ZI`VSDtVwm5F+@(GXg@Kmh>LBVrqH1Lb| zf|4`UpJ2tvke!_!4ntsOFS8$@ z#nr(lSe6u@-SP8P4k*{`?oqg@f$s7C4S1A+Vc-P^-yK{U3rox34qfOR6fDzUGw&Gr z{T&>pSFps$Z5lgzTQ%6knd~88}TV;hYJA zeYiQ>)6MxmzJi)pURqijEX3mCKK}mx(8?Q}tC?4NazLr>rVQcjDgjXUvh10|W&aqY zM)&Iqx(xivds6xTc0S_uN9R(RbPZk0`3v|^F4@QgT&e5?{%vx+GXG2U1^$~ra9%d+ zQu?>+@d{JqAD<+__27T(#_zHI`N(Ux{;wB4-Tvo=W6ziWIFN5W{O8#BAOCGh{?8Zw z{QCu0^8f9_{`1ov{{0S3wEykH{`1pG|Nm3{$Hn^p;i`%g1n0s8U4YOxRA~P`8Rz8f zKog1>nV7(UhPLO~+1cJ-h`EYVQ}x=vl1qg>pl4u!_EIsi+jjQwAIlG@AzwYHsL1a~ zhzsqCh3K+6judFwaK{A&1&L5--Jnp>UBg;8gR}tVK6?7Gu`#eAV++9p+x!DpTnOji z2X~N3hlo=_mnkSV4Go_T<|zWxz! zGT;8!ZET$hqM{c(JUYR7Bf76`ZP{72!yQ!b|CjH?q$y+) mfBm|vJ(zN5QyeG_p$D` z-_!r||8?Eh{W}k&bDeX1#(TWR`-G?{$q?XC;9+555y(E1RKvo$YJ!Dzg$3s-Jku;O z9svJbb4JN(;Naj)&MN=G!g_!uD=Dtw@p*m9T}(qO4SP$X_^O=ho$u0>SZQjK-%ygK zo9rXV9+4<=SN0H=#I+TxM=aLJSZz&H{8$S~Ddg)1M3nCyGC!2NE0rhlY3KY&y?fvE zC!XK;i6on6jCkBPK0oEr|Ci`J!K;$1aUK3VlFMf0a(xXAL{adMey}Y3oUrZUs~@wK(bUte82TpL$^{yeiWCntxQ zy6L`aWK0ah8Ffr-tgg0piE_#l$233M-o+Guj>eDD($ZvPWVdhMrlFyccymjq%&hYh zkA)fcCqK?JU2%nx)U2%bi3!~&LkfzDt^y^Py=6K9ZCe|g4F7$$n66lMJ-j~K@v=-* z>aSJbr7T$!ZaO-NGk-yD?y@_Ex`d^rrMl-Iik~Y82nr6m3po7wiv5U>l{L?(*>Aw~ zYk$AvVsFv}ezakNlFPf!6hDmYo(r5@OAAU^?C9rKVrb`Fjvr-gTDQym>06O*(yVl{R36k%`1-_%HSMCvTt3Dab) zb2dhLe>0l#@NZ{St@GlWH*dNYcCw1(2kSj|Um6oS)?%lgazWXut_1-o%Hc=X1bUe(Pohg6) z`4%uchCLPCD$#}+Yi!$ZTKEG0L0DeW6nFRt4Eu9=;mci#FVzW?^tty`ayk{TNu zz4up!Yn?6B)z$ZXdy|DJiHSc(MX6sTG~l>zP7fd5D05vMVH8Tk!^fw4_|OHTx}*Dz zD7lV+0vX)MCd}CP`6=D+s*;k3PP3MS;wFro9Bx`X6}MS%Tb!MniHS*I>~wFEU|dX$ zu;)%7QJMy8we94={-_bZ<@&ifM5ufmhwX}PgMMJZZwTJe(dy((21Z6{Ny+Hg*fPq( z!a^pc&ri&|qMLkACdS8cC-d|3i}h>EEc%kC>fJ^C&-KUrP7c;nCEhYJG3n{(lrDI9 zcogVX%6Z?&%gbvz-I1RyYHU24`yRSlz&FX0M(xddpNJ?TI$F}+;^oWswzi>NTA!cs zTvx7KX^^>#7o^Wo3_X;%#fH2J|;>^ zO2jEkb8`=ctY=$-T5KgGTA7rSpRuGG)VsBm3%IUmg!88+wr?hW=Ce)Maw>n>lfY&A z#^G?`eh1wO-oSwTS;C&8i2wQT-@iXM^(+r&kCs=+gws^oP3i94;I-)e{3D#!+J7$K zCZVLFNMJ-~6w|8eP1OL~I1Yn7FSZ00(su{zllVcKW2FI&`9H*H`mY?%hl|SjZ)D2H z)wyqSV1AKt8Wvbn8{R~_6egyo8f$CEI~;D$|2W*3%HP$gwx1!>^@BW&d!%FX;)U2I zYfKl!=!gzVQ&ZE#J25_fZK5(C&U&rgygSyCit3lf7@3xgjEuYc zq2qizt{#Q|gYdAh9tgVkVHbn@nudmckjm`^66OEJM@xpsn>CB0Ly1m=ADWXAPI6hI z(ad?R`GIE`^h}d)wcS)fLBSgWN=6$Y=YI-rZf+z)wm`miICZk!#C8~qax zi61O0+tAPu*l8?@Qqa`WDwmpxcRK=)u-*QeaXTuZDb28E0}SMlx5Wq&CR0Te$w(q%HJs> zaykQP7NML&TO#Ls`SNA5pnFjy8>1Dwva+)MU%ZCX#{EesiX5L zER4W@v8Lw9tWla&DA}u5uL2|d&M-QGuJm8GpM z`(8A3zWLogQ47l8gxraViNL@>=$faeKG&{YV`9pNl^w1O=O^=+3=R$!8#X2+ChF`JaNa=q)i9v6xY{t_>sFs6PhH^=~4;fNiCy)tVw^YkZeNWsDoCSR`6|qU< z;(ybn!-%T}W69)BusT}b5|(qiAFSzw?EmcSJWjbdrgghco$tKZ3&EQ2{JF3_vPdrT zavd8R8!O-4R!3~1Ecc~|#%asGLa!OYtE{c80%gXxivlC)WIjB51kGI21A2FPhENbS zlAdCQc|qoDgXiv8HkxWVAu4LOS8x;kS?JH7KU<5U7spUubgev=ej$u6;7a<#oN7;h z(E1M@$#C)Tc<=V`r>Cbg_@V0(ke0;02zmK#0rGc)s0z%-kPul%$I|IcmYA-)Y?@Re zJ~h4Dr4)@{B8$=vp8)2lYM~Zzc`?(pch_@;XW%&zHFXae@x6OFGKgY6WSv~*;KOS+ z;W(2t-`$kk+uQNduMd~97eTD5X|8|lUSQKIa&dM(IX~HyddgJee{l}?CFs78z}5O2X}9~Y$I#GF zui9?-$odRQCBT~Py}hB_9(F-N!3PgsoSz<3Trdw04>zA3=y`Y??JWeNyJ>CAnW6@hsR8-__fqDkb9r{;Nw~nyK){CJWRn%YwX`21@ zgOk@p-0+Osiw;;q;<8vWXVZ}hY-wR(VZxn_m6d|eCcbT-ZDXdHmWryNi6X7e_vAqF z6StI_6hpnwv6G`CSEE7S2iblKisES%-hMoF2p^ll8>)h9l%5a5msW14@o7I;N*wC^ zA|3#rqHNE^z`znC7j`DQmYb2E&o=pB1d2K!i+_uY_}*5h?^rlFm1Sk`Y>bR^>FDX5 zv{Tya*SUmDEzQny`5Zae+uQ5uP0r2DRa8`5UewE%c!F!=DD?O9vy*bcd-w0d zuFU7#!}d6+JLnv*q+=r;=Oi&q^D{nvi@`#{Lowg!Pqx$czSxmju!v^ZTtScl*bMi z0c}{+Z7qIjvQ~t`AxyxSifFjreG?OXKupa0={>dJ$iTqIsZaRR)7xX7j2LV5b`N6+ z&XO`}^m^|7UF7`8)a?RJo93yLWUj_LxAbPK@w-7dh#9|=La$d1e3P)?#l^)?Hzl|O zMYWAzsS=)^wFd(ELmV+BHsjp;zLNMo5cu*sk=e#4j5jcaEp!gf&Vr6}flHfe`uai^ zy;S|l6yC;CMi$Yjsk2b7B^z~Iu#?fbRU*EaXUA0Z#9mkQ_4QZOKcG^HDx=LTEci7T z_O~8l7{@uUqdIccvxg3k|0UXw`7$ad&}aU|94Z2MOl1EyF+rh)ulhEA=t{jL&gK^l z))>G^Eh0AwX-L;gybtZFB0hhn+DB;?Xd~93IDMhxXt9J&Tq8-T{5PT+t3rjZYI*m$;$^Jeo*AICjD}fzkmOJ=fVzl zZiXL)5TleS)m2>{|o`!+J`R>^T(KqUDXe0M}lst58$Fk+av+);>L$v|qtDE&Dw+HNMf> z)z!7xd|}vq9^Kr00jWON0fY#>JLH{NB*V~&otvVH`6*(J=2B?DxT zl$N&ol)Qb|d|`lYW(a(?>_{J2VA!bJJ;4ts%JeN>z6R@Z{(&_)2?-steAJmW7;RZW z#;#kE(#j@=G;r#QW}%pQFUduHbD;GkV* zCfnMylz)XQm-0Ym zFAiRP9i7hUVeh)X^70r*4zFk7uY`6N`}qGrhb{-Cba0T&ZQcc$BN=DR_4x5vxdq`Q zG4|EA47;)N)}KEW_A}pQ7C3dK_xT2 z_yT}j(Et22v~Z^RJ_Uu}#o6Inf!zxPqbms+S$ox|U?pZYHnws3#2sm@GOpvlog~JA zl;5jr>Hr_r)mh~d3dTsNvR@NeleGQhdgnj@TeqgZzPxhSDMqV*thuD* z@xe#q6-m(wz<-7o?;3>G*4G8y*0dMx(i-}?vtvJUKOFk@?NuX?Vf97z6&F}lLBS)h z`twm^vM?U2t>Yv``4bBmoBtAQV9dj#_0sMo98kRaN=<`L%3y zLsC~6tRBwzlQ)F`9)A7$HIj^&g2D=@)Y^R#lKI6&CZVo&vm|z1;C(IY5c~aii7SYF zP4P$!kRL^)XGTZ0(2pStW4ae860I_;B~_ys6?JPIQdJfK|6Y=iKYMS;G;s?Mi@X)fjITWI|NTiBL`+=OJ}C!GRtaev>U4>kOl)F zH6W4E2FJSTfSSu_H;a0MNtl0M)UP47IT%!uPoH%1 zH47)IY*#ln3{%+Z8tg8&gGB$Dxj1+CI_ZjG>$HJg4Uc8w}O!@)p^)q*$^ z@L6D0amXyK8nT;jLX75*xWdX$=-#&DM6to9iPsJE^(CX`q$HiC0{b}xTovBcInWpV zPK{i8P5*GS(X<)In? z8UVrLFS}k9vU3li8YSzC{1MVpe6KA-WNbVNM7BL?1%>w|rM)6j{ax2kh_#Mk0sPX6 z3bW#$U-gWO&LwBFgV5ZuUJ87Fh6$aVos~a7QC+kn-c_Ds-70=MTm9lv1VFQnqQCxk zWvwFO=;#Q-7(@DuO-Dn+1>zX;?qbx)ztH}!>*#+!jw9)0R*qkZ2_qQyQ@I$&Nxlh? zC{+*|xH9nYsNef&YH8U?$=qF5T}^J6ot@qMMg8IO=)#NQB{Ne~x`eT8kpoUvR=MnQ z!+sURX+qm7PMNv;*$2})4+2T=-o<5W<{!$XN3`|!exT;cS7CNrpU8B#glt(`q59jL zjl+K%s@MYPrflXX$g#Kitv zQiT!+bzkmS_?y>alKWV_%Y$%?osEK=Pa@}r{%MSO@s@)9s6Q)?JdzF#qMWM|<-#3< zXTviyMqL@hZy4k%0aIDinmrh(b6th=D$}Dl9?*U8I)3Oaa3CNC4wq!o#x%FMxHuYN z3jqKc0$U>}bD-Leu^G$iUsG^7V_Y|QU(l1t4^q@q0fB?%L5r3^+=;ii&!{9LA|k$4 z-Of!R$XAXVa=p?AHK;_mtl^c=ng|7Fz@v{TDV%jr*mFp9^~1u#D#O2x4A(f$kBw&n z9!>E*_(Zcn&%_kkD=CUuO2=p_$*d?cf}%7~Nz~sbe(SHLZm_Iy>3R|1PYY8uFK<$B z4p)G@85#6pgq8@oL0FRfvP^XMg6QeiH3SHkOmUn>=b*!lx9hp8s;Z{tr=#h0k$-#m zXUsP9!p{chSJOcn0rGEAji%~oJ@*)Gx=qXAsFK#+9oi(4mY%*G_T|e1mU6yK9xg7O zCZDJE=2La9YbM{-q5&@f5){5y=dzq;ey5FGa>#5TOOaBzw_(O(o}k~136_g0-f#Bx zExG1UWYpZt@sqI;5jnLxQEAO@Kb=tx$;0j_oCNAiS$-iIIl27taf9U`V--m$^iiAn z!aArBm%0rn4JA@` zQmPt#Q3@BhM?rC^Wlp_*C8UVMmCGb5Dr$VsLSO%PlA!yNEj~Vem9S>LcmOu;1?nv! zE!hau;Bp?m|M_mpc>QFxy-~eeVeAx%1L6_a}-k|cTPYk@%O2>Eyqza(^ruE9u zTQdx=dTWKN%d#So8pt#KMw7IvC1sK0Kz;!u#wf)Er0m@1EB(RrZfd7&#m1vK>J}y@ zWq_;Q{<^uk?q|qGP5Yg!3rx0xcCa}=-^$lcgnHTg`KjYv8+LKF8^M4Xst5L9+xQi# zSH|EIi5DS7YLW!h0vg#UBnQVn$SJED!5Hl($k)&!bg^1)v|J`eYFz?_8se<_N!eHC zbG(z6$J*Zuw1}MDhZg_@oN^}{qOGkhBPZus_F;!^`AY)5gw)j3rH_X#p0y7^jRv-; z(F;)*WQ{IK_wyj1zq{`pM#*24mWG;7UJEH}lR&wI80?ourm5#cZyDCfLPuu7t|jFZ zk;DngAh>3#Fz<25)SsOk=2zS3>FV|-@^cCZ=e*gtWb}AUQBjq>99uV=qJ18T8hiCdr6BSt`eLAwo?;;&Y)BxJ@yr5XhV zh1=R#KY&xn2i;iu{oP&foxdS|#fE+Hw{G8lnbPDqFMXCLE+sAfZh8VNiZN=UsIY5X zxuRjK?`LWpC9+XN&7Q)-!uvUw$pNb0W~f9ubmd(uws)POQ#wo15|WUJ+p z;z>a%8K3$<^)&5=w^<1GPKEWT5=UIQAnQ~^dsKNT&*0ykI^uHy3Jd-lV zFZOEw)6>&w0X2$=d;^^3Qa7-%-^JpOy0Rh`*4C&fDFH0|gygFdQVSrTKGiX?ovgHW z|M&C$diUlXRQvn;&f9ZR`wJaXrWb&4r2<~;t1OBoL*^RQIDCUmc|Qee2?8VLXg)l% zAqPAzxNKe#my2`X#%xUE>DY%(axOm^vp-*7f#?L~Hhiq8O8}5IXw83sX~PC=#L}8t z0r`yXQfPy$1+DF6HPut6j9%+yu>c8$5qv@Rz@-?6J#Mu%vZVIS61Y}=+llDp#|~! z!1E!qytiQdsOINlf{!6KvokV$PS&eML_}5?e$f;|Z1ez6#jN&%v;jKw%B}^Z?w-`W z1ZrazEl^~pQ-@2asHpgC#v)>3DnVicA<**ai-N+!w*-`KM_aQ$fBuw>V&p|lA=Oei zat9s1?*e-*Z~S+!W03yb84UFAP!r(+B9^c(X6Wb70;s~ER{|Ct;5NorqV@j!_sW}49+s^K8cUPB9!daZF6 zyRTjnaN(LwH+T-7uY>zH;eNhRzZsa6pO6-=o+IHend}|19F$$cUGtphN9L%~) zN(v_L^768g&-RV_1%Nzzm1=5g6bF@i>4vSqtEBUd2b%;MZof~gySn8htDpdcm~OKl zSikjX5wD4B!rQSi?HD;J`yXv>3MnFusd67eLr=DU(DwZNNs;#zd$fYr=U9~1|B<* zseQQuMh8CJivhp@VAFsQ{L;dr9=PuBMX*f*iQvsZc-sr7y4l#-3&DLP;)cr0*?d}- zmi7>&B6|9a+|}Xe&!0c@+5JB9f{*jM{J6P)|3>njv!R}WwcAc@#yt)S4#BNk7_b^@ zo_pt>fesxQ0fGx?u<#&4fuc3p=6dzNHv#3cN8}&?fBpJ3ib;n@q2)R2bGQH-n>FZcQ0u|*tan)^CL)Z z0|Ns{fiC2R8up7|9}o_Gxiv~8fp=4lo_{0@Z1Fl z7gttUxv!%GTAA_N+tfpcpg8VBC-yp6s|De(Ujk~*QcYSl} z>bxc@ECVBSpt(~EMEhzwI&PPm{s2m+34hVnb_(QIs3~v=xy>$$ii$2SE>2EPpvk+s zRwgASfi?qbkJP@;;nbyI4eMT6SlFMmZw9wl#P2lT?>`Xm;0X91KmOuvm1}HhI1Q#P zE&{;7{`U4AJXmsYNJu9v96Brja#%a&aFZ4S1I>KinEdf0F)gh>bZiI9!6ggrO&fe4BE}i2kE!_^@VX~;d(kA!=XOLO`;1PfZicLsUa6H&g&&3t#HiCWgCJE~5 zwQKI{6AW?PrY0u;etx2Bq;iF31df?g?dJm*7|tLjIcpYmWnn13lGNPL+xCmS1#MZoFv&(F_m z6=)lqnPm*-cQ5R~GlSRS^9l+wifO2+8=-N4*s*WHJ0yO!huVbrJRNTS!-o%2Qc|+A zvT5-J04)_2dAYe)035lvRA8I|;5J+I(V&7uL%Z8TNB}n7#rqDCe49o{TTQJDVi7vd z0H5p%oM6U%i0NMli8oMX0JLmOR$nsOMh7TlJOf|9K6v=>Are{fJYVzs_wV4dJ^}CE z$*BzD?Ix|yR}ltKeBpY)GJ*Moh6a6rK3w3}N(Z61{7#Qx0s{aUC?{0HUK(I-Bg5;&Qek0xi%tE`6eE~UfdVU?S>NcUjb zBTksQfU$vR3JRaWcB~f$ESIWsgu&?Q>E(;A9`7zfqR<7_)YbW&A1}6i5(gUxPC=_k z9~|X65TtpnM}9HZgT(}Om;}YB5dRoJb6q*?3=jbT``z7Lsf8auehlt*z=z?dn*!9C z@meheq`L{yw1|iwKs*4NE$Us}-2k7?;+ju`{LXMm_;Nrdhi;-4kAZeWe)HyAh}O}e zA^m1QUl3f>MDiONguFJoH$-22{SP?yCj~NETF$OyYzs8{2#x`S+5Y-HgVU{6!ph1@ z=tsbXTu#8jl9!YF+0!F>aq3J?PF~j!Mn`Mw{K;msvVy{IsP`%=M8b%4RyH;$Rf1+6 zL|!mGF+4cv-1!ld<%f{??HMkB8K1hX-9u!6Fiq=sgb>Eotw3|xPYcD!xdO_@C+C23 zNQF@5{`CG}?KagDl_%8IrKOHePLR(SSP_&Y$dbTn#v6*7y8i?>8zlIv(ETQW%@q~x^9rR|3~ACl!Du?|*8mB*Im=S{7xOz!LUq zV(2uiqQj`$z`qet%=&Se z@mTDoR#nw~qnk522xuInNusoK*W5_8-1niObb*i?W$X4ZaE9!r74i_vKby;G7Ki>u zF@Soz0H))D)6*%Pv%&JRGA9Rz2Z0&c+2sph0fg?nCmH}<5*18CayjRPivaa1Ln2oP zoVis{jLOV#dtN}0gCg}vx8m85PL2jEdL->iWj}Nly)nGt*Rh8yh`11>h z2?DgsjZ#2Em;9K40e8I!Bu$tf>gx-)jWY#u5KWZkNOc|2*3$CYjbUI42LXjOkSO8D zLq#5Bu>UOVeJMh#$qk0LZ*XDgB((o&9MQvYP+=zXtg^(m2yNPk5BrTX zXP7tB#Hhb}_YRUHDka4TiinCzL{wDzOd5e)=0^_kUquFjVS+f5QYl!L!IxVLmLwyjFf-JAnyw}?JaD#GI~F+w5gSg;}SGaZrc?_5R1W? zOGGP5!l)vg1SuKW%EScABf+17Pl9xFIaPj_&|XCvJ-IDb0H_h_Dj+QAh+vj6b8z%_ zbUfzgKiu7&7Y_2fX{m#omN zXb8M*DM`s^EW0-fuQIoN6+Pc3oUocWLQ`inh<{QzfQmoxXm4w43v_qr7>E0Rnb_N>z>^|rF+^!%`yVRESvfd997OnHmb2Hkbj78l zzQ4YKzjR%WkI^zTr~N>}Kql*1o1YhjY1thSVQ=pf=q%*~%LNb;P^`VYyZ}iZ!~6ge zhy0QD7ZH8=@Nht3Ilxfigu8oshHC;I^G6@_U(IPHqWSgT2kVaR?(WXcRIc32?=h#| zk7O+^bJ6rTQlq(uK%7?YF9Tx49c<>uzbK>&JKxep_#vUG~0`SJq+JPZs{^UIG6 zRzVwhwxo(pbb0a>nW03)ckjAxP7A|eD})YuTokHwRXs$y`cRz|Q|28M@clrN;w#s% z@7=rCVa6>msivZ*$2Nf?pn4KP1k%*eYH{;B8ptSppzX4Qo{?{veZ}p1HW}!C^;$5^=ef*vqL?nEA}J=!4PPkJLQ*9(xdgyda+$h-#NfrdJ39a~UV=gvHnP6kop-7Z<-&s_jN=FW^uB835>keU|&3c^x1CUV@EegzVfbgf{_s z1?~y*^;qpXz!?b6wC@C<;KB5083;+Bg2M17Jj%lbKpHiu(?E(G+<+8Htz3sOIr|S+ z%wN2C3~&hoI0&^3m}k&c9S(*92F0nV4FIs4cas@gkdw!;sAu`WKw26K4D_(~?@95# z!*&4d)84t0Dk9Sak*EZCnY0P@l7@g|+yeM@rU8Ty4aesaGzQ~|&@ABXx9@Xbt_L=v#rb<=z z9&>R)#WfHU69crAUKtMzWbi<2J^Q1Ew)VZA445{Xr3|xXC4YoJn z`d`gX&{_dP>g!V(uze_UL2M6$3;@>vwh2U!CuRi*6ij^M