From 7bd7a9492b0f25c5c6d79c0d03d5c2f5a1313fa3 Mon Sep 17 00:00:00 2001
From: CI Pipeline <support@kinetica.com>
Date: Mon, 21 Oct 2024 15:18:27 +0000
Subject: [PATCH] Deployed 1de6054 to 7.2 with MkDocs 1.5.3 and mike 2.0.0

---
 7.2/Advanced/airgapped/index.html |  18 +++++++++---------
 7.2/index.yaml                    |   8 ++++----
 7.2/kinetica-operators-72.2.2.tgz | Bin 369205 -> 368958 bytes
 7.2/search/search_index.json      |   2 +-
 7.2/sitemap.xml.gz                | Bin 817 -> 817 bytes
 5 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/7.2/Advanced/airgapped/index.html b/7.2/Advanced/airgapped/index.html
index fc23eaf..0dd7bd1 100644
--- a/7.2/Advanced/airgapped/index.html
+++ b/7.2/Advanced/airgapped/index.html
@@ -14,14 +14,14 @@
 </span></code></pre></div> <p>If <code>--containerd-namespace</code> is not specified, images will be imported into <code>k8s.io</code> namespace. </p> <div class="admonition note"> <p class=admonition-title><code>sudo</code> required</p> <p>Depending on how <code>containerd</code> has been installed and configured it may require running the above command with <code>sudo</code></p> </div> <h4 id=mindthegap-import-to-an-internal-oci-registry>mindthegap - Import to an internal OCI Registry<a class=headerlink href=#mindthegap-import-to-an-internal-oci-registry title="Permanent link">&para;</a></h4> <div class=highlight><span class=filename>mindthegap import image-bundle</span><pre><span></span><code><span id=__span-3-1><a id=__codelineno-3-1 name=__codelineno-3-1 href=#__codelineno-3-1></a>mindthegap<span class=w> </span>push<span class=w> </span>bundle<span class=w> </span>--bundle<span class=w> </span>&lt;path/to/bundle.tar&gt;<span class=w> </span><span class=se>\</span>
 </span><span id=__span-3-2><a id=__codelineno-3-2 name=__codelineno-3-2 href=#__codelineno-3-2></a>--to-registry<span class=w> </span>&lt;registry.address&gt;<span class=w> </span><span class=se>\</span>
 </span><span id=__span-3-3><a id=__codelineno-3-3 name=__codelineno-3-3 href=#__codelineno-3-3></a><span class=o>[</span>--to-registry-insecure-skip-tls-verify<span class=o>]</span>
-</span></code></pre></div> </div> <div class=tabbed-block> <p>It is possible with <code>containerd</code> to pull images, save them and load them either into a Container Registry in the air gapped environment or directly into another <code>containerd</code> instance. </p> <p>If the target <code>containerd</code> is on a node running a Kubernetes Cluster then these images will be sourced by Kubernetes from the loaded images, via <abbr title="Container Runtime Interface">CRI</abbr>, with no requirement to pull them from an external source e.g. a Registry or Mirror.</p> <div class="admonition note"> <p class=admonition-title><code>sudo</code> required</p> <p>Depending on how <code>containerd</code> has been installed and configured many of the example calls below may require running with <code>sudo</code></p> </div> <h3 id=containerd-using-containerd-to-pull-and-export-an-image>containerd - Using <code>containerd</code> to pull and export an image<a class=headerlink href=#containerd-using-containerd-to-pull-and-export-an-image title="Permanent link">&para;</a></h3> <p>Similar to <code>docker pull</code> we can use <code>ctr image pull</code> so to pull the core Kinetica DB cpu based image</p> <div class=highlight><span class=filename>Pull a remote image (containerd)</span><pre><span></span><code><span id=__span-4-1><a id=__codelineno-4-1 name=__codelineno-4-1 href=#__codelineno-4-1></a>ctr<span class=w> </span>image<span class=w> </span>pull<span class=w> </span>docker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-3
-</span></code></pre></div> <p>We now need to export the pulled image as an archive to the local filesystem.</p> <div class=highlight><span class=filename>Export a local image (containerd)</span><pre><span></span><code><span id=__span-5-1><a id=__codelineno-5-1 name=__codelineno-5-1 href=#__codelineno-5-1></a>ctr<span class=w> </span>image<span class=w> </span><span class=nb>export</span><span class=w> </span>kinetica-k8s-cpu-v7.2.2-2.ga-3.tar<span class=w> </span><span class=se>\</span>
-</span><span id=__span-5-2><a id=__codelineno-5-2 name=__codelineno-5-2 href=#__codelineno-5-2></a>docker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-3
-</span></code></pre></div> <p>We can now transfer this archive (<code>kinetica-k8s-cpu-v7.2.2-2.ga-3.tar</code>) to the Kubernetes Node inside the air-gapped environment.</p> <h3 id=containerd-using-containerd-to-import-an-image>containerd - Using <code>containerd</code> to import an image<a class=headerlink href=#containerd-using-containerd-to-import-an-image title="Permanent link">&para;</a></h3> <p>Using <code>containerd</code> to import an image on to a Kubernetes Node on which a Kinetica Cluster is running.</p> <div class=highlight><span class=filename>Import the Images</span><pre><span></span><code><span id=__span-6-1><a id=__codelineno-6-1 name=__codelineno-6-1 href=#__codelineno-6-1></a>ctr<span class=w> </span>-n<span class=o>=</span>k8s.io<span class=w> </span>images<span class=w> </span>import<span class=w> </span>kinetica-k8s-cpu-v7.2.2-2.ga-3.tar
-</span></code></pre></div> <div class="admonition warning"> <p class=admonition-title><code>-n=k8s.io</code></p> <p>It is possible to use <code>ctr images import kinetica-k8s-cpu-v7.2.2-2.ga-3.rc-3.tar</code> to import the image to <code>containerd</code>.</p> <p>However, in order for the image to be visible to the Kubernetes Cluster running on <code>containerd</code> it is necessary to add the parameter <code>-n=k8s.io</code>.</p> </div> <h3 id=containerd-verifying-the-image-is-available>containerd - Verifying the image is available<a class=headerlink href=#containerd-verifying-the-image-is-available title="Permanent link">&para;</a></h3> <p>To verify the image is loaded into <code>containerd</code> on the node run the following on the node: -</p> <div class=highlight><span class=filename>Verify containerd Images</span><pre><span></span><code><span id=__span-7-1><a id=__codelineno-7-1 name=__codelineno-7-1 href=#__codelineno-7-1></a>ctr<span class=w> </span>image<span class=w> </span>ls
+</span></code></pre></div> </div> <div class=tabbed-block> <p>It is possible with <code>containerd</code> to pull images, save them and load them either into a Container Registry in the air gapped environment or directly into another <code>containerd</code> instance. </p> <p>If the target <code>containerd</code> is on a node running a Kubernetes Cluster then these images will be sourced by Kubernetes from the loaded images, via <abbr title="Container Runtime Interface">CRI</abbr>, with no requirement to pull them from an external source e.g. a Registry or Mirror.</p> <div class="admonition note"> <p class=admonition-title><code>sudo</code> required</p> <p>Depending on how <code>containerd</code> has been installed and configured many of the example calls below may require running with <code>sudo</code></p> </div> <h3 id=containerd-using-containerd-to-pull-and-export-an-image>containerd - Using <code>containerd</code> to pull and export an image<a class=headerlink href=#containerd-using-containerd-to-pull-and-export-an-image title="Permanent link">&para;</a></h3> <p>Similar to <code>docker pull</code> we can use <code>ctr image pull</code> so to pull the core Kinetica DB cpu based image</p> <div class=highlight><span class=filename>Pull a remote image (containerd)</span><pre><span></span><code><span id=__span-4-1><a id=__codelineno-4-1 name=__codelineno-4-1 href=#__codelineno-4-1></a>ctr<span class=w> </span>image<span class=w> </span>pull<span class=w> </span>docker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-4
+</span></code></pre></div> <p>We now need to export the pulled image as an archive to the local filesystem.</p> <div class=highlight><span class=filename>Export a local image (containerd)</span><pre><span></span><code><span id=__span-5-1><a id=__codelineno-5-1 name=__codelineno-5-1 href=#__codelineno-5-1></a>ctr<span class=w> </span>image<span class=w> </span><span class=nb>export</span><span class=w> </span>kinetica-k8s-cpu-v7.2.2-2.ga-4.tar<span class=w> </span><span class=se>\</span>
+</span><span id=__span-5-2><a id=__codelineno-5-2 name=__codelineno-5-2 href=#__codelineno-5-2></a>docker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-4
+</span></code></pre></div> <p>We can now transfer this archive (<code>kinetica-k8s-cpu-v7.2.2-2.ga-4.tar</code>) to the Kubernetes Node inside the air-gapped environment.</p> <h3 id=containerd-using-containerd-to-import-an-image>containerd - Using <code>containerd</code> to import an image<a class=headerlink href=#containerd-using-containerd-to-import-an-image title="Permanent link">&para;</a></h3> <p>Using <code>containerd</code> to import an image on to a Kubernetes Node on which a Kinetica Cluster is running.</p> <div class=highlight><span class=filename>Import the Images</span><pre><span></span><code><span id=__span-6-1><a id=__codelineno-6-1 name=__codelineno-6-1 href=#__codelineno-6-1></a>ctr<span class=w> </span>-n<span class=o>=</span>k8s.io<span class=w> </span>images<span class=w> </span>import<span class=w> </span>kinetica-k8s-cpu-v7.2.2-2.ga-4.tar
+</span></code></pre></div> <div class="admonition warning"> <p class=admonition-title><code>-n=k8s.io</code></p> <p>It is possible to use <code>ctr images import kinetica-k8s-cpu-v7.2.2-2.ga-4.rc-3.tar</code> to import the image to <code>containerd</code>.</p> <p>However, in order for the image to be visible to the Kubernetes Cluster running on <code>containerd</code> it is necessary to add the parameter <code>-n=k8s.io</code>.</p> </div> <h3 id=containerd-verifying-the-image-is-available>containerd - Verifying the image is available<a class=headerlink href=#containerd-verifying-the-image-is-available title="Permanent link">&para;</a></h3> <p>To verify the image is loaded into <code>containerd</code> on the node run the following on the node: -</p> <div class=highlight><span class=filename>Verify containerd Images</span><pre><span></span><code><span id=__span-7-1><a id=__codelineno-7-1 name=__codelineno-7-1 href=#__codelineno-7-1></a>ctr<span class=w> </span>image<span class=w> </span>ls
 </span></code></pre></div> <p>To verify the image is visible to Kubernetes on the node run the following: -</p> <div class=highlight><span class=filename>Verify CRI Images</span><pre><span></span><code><span id=__span-8-1><a id=__codelineno-8-1 name=__codelineno-8-1 href=#__codelineno-8-1></a>crictl<span class=w> </span>images
-</span></code></pre></div> </div> <div class=tabbed-block> <p>It is possible with <code>docker</code> to pull images, save them and load them into an OCI Container Registry in the air gapped environment.</p> <div class=highlight><span class=filename>Pull a remote image (docker)</span><pre><span></span><code><span id=__span-9-1><a id=__codelineno-9-1 name=__codelineno-9-1 href=#__codelineno-9-1></a>docker<span class=w> </span>pull<span class=w> </span>--platformlinux/amd64<span class=w> </span>docker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-3
-</span></code></pre></div> <div class=highlight><span class=filename>Export a local image (docker)</span><pre><span></span><code><span id=__span-10-1><a id=__codelineno-10-1 name=__codelineno-10-1 href=#__codelineno-10-1></a>docker<span class=w> </span><span class=nb>export</span><span class=w> </span>--platformlinux/amd64<span class=w> </span>-o<span class=w> </span>kinetica-k8s-cpu-v7.2.2-2.ga-3.tar<span class=w> </span><span class=se>\</span>
-</span><span id=__span-10-2><a id=__codelineno-10-2 name=__codelineno-10-2 href=#__codelineno-10-2></a>docker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-3
-</span></code></pre></div> <p>We can now transfer this archive (<code>kinetica-k8s-cpu-v7.2.2-2.ga-3.rc-3.tar</code>) to the Kubernetes Node inside the air-gapped environment.</p> <h3 id=docker-using-docker-to-import-an-image>docker - Using <code>docker</code> to import an image<a class=headerlink href=#docker-using-docker-to-import-an-image title="Permanent link">&para;</a></h3> <p>Using <code>docker</code> to import an image on to a Kubernetes Node on which a Kinetica Cluster is running.</p> <div class=highlight><span class=filename>Import the Images</span><pre><span></span><code><span id=__span-11-1><a id=__codelineno-11-1 name=__codelineno-11-1 href=#__codelineno-11-1></a>docker<span class=w> </span>import<span class=w> </span>--platformlinux/amd64<span class=w> </span>kinetica-k8s-cpu-v7.2.2-2.ga-3.tar<span class=w> </span>registry:repository/kinetica-k8s-cpu:v7.2.0-3.rc-3
+</span></code></pre></div> </div> <div class=tabbed-block> <p>It is possible with <code>docker</code> to pull images, save them and load them into an OCI Container Registry in the air gapped environment.</p> <div class=highlight><span class=filename>Pull a remote image (docker)</span><pre><span></span><code><span id=__span-9-1><a id=__codelineno-9-1 name=__codelineno-9-1 href=#__codelineno-9-1></a>docker<span class=w> </span>pull<span class=w> </span>--platformlinux/amd64<span class=w> </span>docker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-4
+</span></code></pre></div> <div class=highlight><span class=filename>Export a local image (docker)</span><pre><span></span><code><span id=__span-10-1><a id=__codelineno-10-1 name=__codelineno-10-1 href=#__codelineno-10-1></a>docker<span class=w> </span><span class=nb>export</span><span class=w> </span>--platformlinux/amd64<span class=w> </span>-o<span class=w> </span>kinetica-k8s-cpu-v7.2.2-2.ga-4.tar<span class=w> </span><span class=se>\</span>
+</span><span id=__span-10-2><a id=__codelineno-10-2 name=__codelineno-10-2 href=#__codelineno-10-2></a>docker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-4
+</span></code></pre></div> <p>We can now transfer this archive (<code>kinetica-k8s-cpu-v7.2.2-2.ga-4.rc-3.tar</code>) to the Kubernetes Node inside the air-gapped environment.</p> <h3 id=docker-using-docker-to-import-an-image>docker - Using <code>docker</code> to import an image<a class=headerlink href=#docker-using-docker-to-import-an-image title="Permanent link">&para;</a></h3> <p>Using <code>docker</code> to import an image on to a Kubernetes Node on which a Kinetica Cluster is running.</p> <div class=highlight><span class=filename>Import the Images</span><pre><span></span><code><span id=__span-11-1><a id=__codelineno-11-1 name=__codelineno-11-1 href=#__codelineno-11-1></a>docker<span class=w> </span>import<span class=w> </span>--platformlinux/amd64<span class=w> </span>kinetica-k8s-cpu-v7.2.2-2.ga-4.tar<span class=w> </span>registry:repository/kinetica-k8s-cpu:v7.2.0-3.rc-3
 </span></code></pre></div> </div> </div> </div> <hr> </article> </div> <script>var tabs=__md_get("__tabs");if(Array.isArray(tabs))e:for(var set of document.querySelectorAll(".tabbed-set")){var tab,labels=set.querySelector(".tabbed-labels");for(tab of tabs)for(var label of labels.getElementsByTagName("label"))if(label.innerText.trim()===tab){var input=document.getElementById(label.htmlFor);input.checked=!0;continue e}}</script> <script>var target=document.getElementById(location.hash.slice(1));target&&target.name&&(target.checked=target.name.startsWith("__tabbed_"))</script> </div> <button type=button class="md-top md-icon" data-md-component=top hidden> <svg xmlns=http://www.w3.org/2000/svg viewbox="0 0 24 24"><path d="M13 20h-2V8l-5.5 5.5-1.42-1.42L12 4.16l7.92 7.92-1.42 1.42L13 8v12Z"/></svg> Back to top </button> </main> <footer class=md-footer> <nav class="md-footer__inner md-grid" aria-label=Footer> <a href=../ingress_configuration/ class="md-footer__link md-footer__link--prev" aria-label="Previous: Ingress Configuration"> <div class="md-footer__button md-icon"> <svg xmlns=http://www.w3.org/2000/svg viewbox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11h12Z"/></svg> </div> <div class=md-footer__title> <span class=md-footer__direction> Previous </span> <div class=md-ellipsis> Ingress Configuration </div> </div> </a> <a href=../minio_s3_dev_test/ class="md-footer__link md-footer__link--next" aria-label="Next: S3 Storage for Dev/Test"> <div class=md-footer__title> <span class=md-footer__direction> Next </span> <div class=md-ellipsis> S3 Storage for Dev/Test </div> </div> <div class="md-footer__button md-icon"> <svg xmlns=http://www.w3.org/2000/svg viewbox="0 0 24 24"><path d="M4 11v2h12l-5.5 5.5 1.42 1.42L19.84 12l-7.92-7.92L10.5 5.5 16 11H4Z"/></svg> </div> </a> </nav> <div class="md-footer-meta md-typeset"> <div class="md-footer-meta__inner md-grid"> <div class=md-copyright> <div class=md-copyright__highlight> Copyright &copy; 2016 - 2024 Kinetica DB Inc. </div> Made with <a href=https://squidfunk.github.io/mkdocs-material/ target=_blank rel=noopener> Material for MkDocs </a> </div> </div> </div> </footer> </div> <div class=md-dialog data-md-component=dialog> <div class="md-dialog__inner md-typeset"></div> </div> <div class=md-progress data-md-component=progress role=progressbar></div> <script id=__config type=application/json>{"base": "../..", "features": ["announce.dismiss", "content.tooltips", "content.code.copy", "content.code.annotate", "content.tabs.link", "header.autohide", "navigation.expand", "navigation.footer", "navigation.indexes", "navigation.instant", "navigation.instant.progress", "navigation.prune", "navigation.sections", "navigation.top", "navigation.tracking", "search.highlight", "search.share", "search.suggest", "tags", "navigation.tabs", "navigation.tabs.sticky"], "search": "../../assets/javascripts/workers/search.b8dbb3d2.min.js", "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version": "Select version"}, "version": {"provider": "mike"}}</script> <script src=../../assets/javascripts/bundle.c8d2eff1.min.js></script> <script>document$.subscribe(() => {const lightbox = GLightbox({"touchNavigation": true, "loop": false, "zoomable": true, "draggable": true, "openEffect": "zoom", "closeEffect": "zoom", "slideEffect": "slide"});})</script></body> </html>
\ No newline at end of file
diff --git a/7.2/index.yaml b/7.2/index.yaml
index 2673f60..7d355d4 100644
--- a/7.2/index.yaml
+++ b/7.2/index.yaml
@@ -2,8 +2,8 @@ apiVersion: v1
 entries:
   kinetica-operators:
   - apiVersion: v2
-    appVersion: v7.2.2-2.ga-3
-    created: "2024-10-15T19:37:31.921954216Z"
+    appVersion: v7.2.2-2.ga-4
+    created: "2024-10-21T15:18:15.966274289Z"
     dependencies:
     - name: openldap
       repository: ""
@@ -17,7 +17,7 @@ entries:
       name: gpu-operator
       repository: ""
     description: A Helm chart for deploying Kinetica Operators
-    digest: 31c942c2ed8a5fe90e692184cbfa55a58ecac44354bf991cf4d526c009178a50
+    digest: 7efb4bfa8f53d4fefb4a7312857d52bc78269a9f680e3fc5daf097260c346763
     name: kinetica-operators
     type: application
     urls:
@@ -1783,4 +1783,4 @@ entries:
     urls:
     - https://kineticadb.github.io/charts/7.2/kinetica-operators-0.0.0.tgz
     version: 0.0.0
-generated: "2024-10-21T13:50:42.143823786Z"
+generated: "2024-10-21T15:18:15.910924747Z"
diff --git a/7.2/kinetica-operators-72.2.2.tgz b/7.2/kinetica-operators-72.2.2.tgz
index d79d79e646ce7aa7fac9a350b85e5567b1028758..3e9de83ad32df021969a5652f21b1b610b8856af 100644
GIT binary patch
delta 363928
zcmcHBWmq0<w<c)Z-QC@t0KwfQxLa@u?i4P;gF6I=;O;KL-Q8V-%hP$k?w-B7r}xZ0
zdZz!@ud2JM*0EMy=Ut5hI9+`>@wLGDRp%FktE8=@x2_*r{*a^Juc!QoGDXjL4+dLy
zvtLC?taf?o>=a@!Jn7Cw=8%A{F>L2hJ96HDl}=*h^pWZKd{gsO_qv_{eg<$GieRhh
zb?_cBnnw15#X=~K^lT=TvV0R7k+KofrRe}j^Me`_PMHyuYmw`^Uza#6V8K94V5nU?
zf6ve!7Ev{u?e#2l08FvV-pMOgR^SO#un9qQnB78OG2$Uy7UfUKWK_KA5}fIH*<&a|
z$ZrQRjN5y)9{SgFkPhLB3hEHkT=1IY;T?C|W7`ISW5$+#x5{`R)c8*$hWX%W!XI~6
zx1;S(Pps#}cEcds&)tybpN)Yi0)7s>8WmC<9%C%B@vsqy22_sumd5xTaC|~B0Z0!1
z2C0Y*jMAUulUI?|;0<Ws><R-nsfZBf$r7`-21Noz-0Y;>%)u=p!Tag1r6`QW_haa7
z0?3=di3yEAOW=5mEE<7v8l#qpb4`o)P&-JUhTs)<`#^6m{zTOlPcZ->(p3}Y`1-<9
z!11|ug||lzlf7{F%dO0>-cSljeusWDk3uMZlp|YzCN3SQ#jh(@kp?5k0JX=$q!Exy
zf5P>2jD|a^B^DiCd%gBbmsf#;%!k>PgrK_&hIji+m6c5}+rloYtN8~x=DZthuLG+<
zz-pLIg&7JTLM2TYnF|kS+y=`=vvNsFd&WZ|$IT{K$8*NQp&$ZpuJHRjoo{_51BFl}
zp-r}lHgH~-uZx+O>=q#lZ*?4)@gVFcp7f=xi<7JYR@NF84Ea7^JWU}vfYaH#bTjz0
zQj(OmgJN+9>_*s><~0hEmQTUM2Zw9E#9))f_C7Cz+iNV^s%IO>gW^DyW9d$1G<S!(
zh6zS8ptLYqz_~U!U<wqX;>ie}7K60owEaOyyh>EtW94F{vjLrY%^)UCo~q^iJdW};
zB1=UqezX)jKTv1#Glplsfe<&R1llm$?{cB6UvkJ6J2}y+zdN_4=+m>ag`DDhW7#u@
zRb$F2h2rK6n%f=$<)-j-qy{o=zRPFKZ4P2M)hC-;f#Su|a3nXpadq^Z-(7OQ!opxj
z+$Vx~QZu%|u`vaxsKN3r)R1ij?X2`yYLS`#4EEy8rjT@eGrtP>Bq2JbMg&)UI+Op7
zL356$E{?okhW+$nAFkSWW@@uceO(P)_4tz#rYTD7#O`+hiZ0BQ?T+|mZ-xG&(hSu}
zH@=K(A?4@bE0~$&*|<aS5XRBo;&Rd~mKdWN5izgE##EX+m;x>eR;F$d^E!F%<|Q2Y
z0D7~UYt0o}U%Sg)0289^`m7}51z3;zTtOeF@vsUpxwuQD2+TQpA@p}#)!<SJg|omg
z5_K_R=6P5ERkG=5_c{+Q+f&6^j^(N|!POXM3``_$Jm~9Q??dE`;QQRI)7iKW?7Gh1
z7rGD6`CDK4H$qN55-<_5;}#R+If?TTHo7}EmhIq}U$DPmvI3l`Nh6BQGJS@LwIm_r
zN?H*D;M4h;pv`GDBH4vmz#Il)%i~2PMyt>t=efoJ>0U5=45ZZeXMG`Kz!y(0Dt-W-
zhO%0MgT;@Z<SArzJO~MyhPsE=ch_CI{yLa7sPK|Q?)M1y)f~3_+X4~m1E?wtG8MBh
zGLq5+?&;pk>60I1&(?-oRI*5y=aZ1l&0FLy*`w037-T)B4O;~ArPamA=~3`h+ohal
zf66paDZ6NqQou2MdvMaH+>j?Yob%_{jNX)v(@-G!l>d)39q>W@o7oJN6ZqX-Z}X>F
zXtoBrj%NA7#6pDl>ILh{CSLSf7z8;_{%BV37O$1$8wp}9W$Jxteq4g2j*YD<Gh-7d
z{A~#vPM^Qz)u=ZTRs^<>l6o1ucDr{nb8!Uh6(m+T-#0*Uv>i@-?7l0$pO<>ie6lfI
zSC=Ql^gJsW-tJRzQJa{{JS#vnlzvz!yp7|v%oR>qJBXu>|BZ{{C2LLt-cz`m(0i@=
z$3Cc%?HOX(V&vLhG_UOAc)J*34T&%q6QY(xo4d4pq^Y`0Wt2ZiceoE}1CPOZ%>E4+
zkiWHDekFcnY9tvxF4u{eyf#=JQKx|kVY?NyMAHmIDL@|PDM9Ws+Vj{F1w;EoM-4}?
zj@z8CO%PFp``DrQDexhL9}=My8fo;C?e_jiSHUEHa_@~~^7)UJvD|J5u62*AFAhL0
zI~rDIh?3{R;lQ8pg5~hMA<H?8ISyVRq-yW7^Hre~A+iT{_#yK8H8gn7!Qc;^vled_
z-V!-SsQ5stu-OjebESUB%|VdLLCr>j^-G4MuDXl5`|kGz(z@a~O6^XuMB^!jD~!i|
zZ7aUp9DPWN#y?0^*LGa#SP(IYia-0rc-)w<8<~h~@~sW=cu0`?dj-TUQD#v9Fman#
zl7+_h9EOQU2%NUy%{nH^srPhx&c}9bs?%?MsjealW*?(Yf1kpnf!uF}MdZMRW>dTz
z^8`*F1#;Oi-Nz`#nVVx>5>fC5xVaS)Em+1U_3>y?<b8~#4!%zMKuW@CA-3bEYOV&!
z;}=9LSGhR=_L=C|Y|Nq;CU^}ParfTj5qI28pyZ(li(s`!-)FiF=MUhy=EVVE#U)(h
zxqVTj@(>~(9QwL4v@mWcM0m~|np;VdiQ!~J!`cb^Um18LN(U`Jdu86u*zQ+PNMf%Q
zUVa~BJTnV=LjY%X&X20+8{i>jgb^c{{q*XUN~sW@Zw&X?KJaN*bJP+DE~EqBGuLpc
zG<Ge}WJ=kO$qkUIo#7k`ff`hKW40MwL__x_c}tw8M3y)b;061W7o$``omWQcs|{G6
z!X~$c#j(zM*4p@Pe-z&=MSJ^FNxS!g_dJB&B&_|e=np&JS@Vsx8^P4>ljtjv`K?t)
zoCq2k+78NunM!$bP#6Gq;5z~(-TQ5`;R(jsaKM(;L(kK-CDuYe`5#4bElGT^c&g{*
z(2+-030rC=S-lBnLx)0|*C?m}GzpN15BcETnC@cIPXhTo%;heQ1L>?k-O$<4%%(C4
z#RoRi>ZT!YweaVPOeL~gP{Q<%JUk%PJt5bv+N7-ENYTh@!r=gPcV+RO!laf(#iF(o
zHjf6Be7`Zoee`oaHss4MFJGz!2XHVQdrGACi>@0)#KS|f)|>QU5eX<?adb3xmiOQN
z$S$jvKOBE+afyJUECxyph0<RMPk#nk4T0zaqra^<3mt8s)7$qcRYLVoMk2FcvPOOt
zn0=Fl)Qv!01J4D_J1SW&GfixuYW62Qt8IqPqOJlxN%1~i;A1Mm;FAd<eijMh7ODA;
z6o+(m)ze6jHknXP0SwC(e=;plmkus+wS5b{#12o6WW7vOC|-8s;IguIQE69z>o$qd
znMvFelT)BYBqe#g3q5AQ5iy;!^q6v0yPsV9RpleFeh&snW1{5nDGxlx9_?yT4`)p!
z@$7N>UBink?yt$@cWiO?`3V>bG?DMKl+Yi(v@;_8W^u%>lAM1=!}B&rhN?WNEV0nW
zuntHF<+`GjULM+zw%+|FJ$wK`I){{P>SI1k_qaH5L$isJ|Mne~iI~%x81v61_}yUA
zqlr9=%Oe%Ae(zog2DT<)^Jd`cMEvX4y<ro*`HXpunxkv}Ly+wgjX9DI%*fl(1Sn<m
z?Fx9eG!}Jv8r}k--}R9Kpz!KJB=h&1N8kgxURipj>W5$M`y;8Ni(~gCC|RrPJpn%T
zl5&QQ6SFsbUHIeCNP6Y6d&?W>KmT&w{KJp*?Hw=zy>)|L-{U|ZQ=qrKEk_rlyU=cZ
zE}Di5_C_v8%=|r|TISTW<)w@5<!_NT>W;K;)S>YiHKw%>r_$Rfd{4IY_ey`RB(EQW
zL|C(|RPN(XCf}fnC--^0Lqm5^bsqQqtr`z~)cug$*}422=ixK@@U~R(*{J*S!>r`Z
z3UHQIV%o}&ec}-Q6r8a3Jbc;gC}7lW@yry2jO73d<4@e1;2<N^+@C`pX_bZ_^a|Bq
z6V#*vc))<Wl`)lGQPsD|`>?sIJ?Z%076Gt`_yiyqX*BQMT#ak?Kg41*+fk74mu7`d
zM~1HC&2yqGcB;8fNF4$^$K=?~(qqN^0ECtjst%0lh`Ye%aD-J=IHQI1V@QZLPsfQO
z)EA`+WW!W}Zr@3t%(d2I>4&I+SlofI3wxGGj}J|$DFG-5dobu5l16LKbHEk;Ir<e`
zZ_miw_hEubx!>Cq_S*;A2A!V_>stI!069y%{>DMd+F}Xkt+VW|0wUorR1T0mU<q2A
z958N`nX}cs%|(Atgc=);@z9M!ToAs)A~C^`A9IDkK^8k1@}cHje_vaBfB~YoDb>+O
z-h}bvpR;uQja3aw!sLHtf7fm<m%l(m7qmp(AfCi{dcigpr;g=m&g4stZ`H7$vVA@#
zACuKRxY?%rR69DBXMHHun|J5{D11x0JzEN)0fJdkzS0dPTGMS>2G}|7Lfmry+VQVe
z+Aq6uX6|3`46l!zZy~vW*laDPNL?qbEwU-4TP5@op*ivM4Z7}Hge)!h9o(-p`Qon5
zCFrcDX_?+=)tJ?MLYir@Ic_Fy#qHu~8OXiwFYi7m9e?vNQV0=mE^v4Yh@BmT2(X0F
zc+`5mvs;L3d4HJ7rI{e6uOl3Zl^E18tA+OlmiB|P8UDnT+z{k9=gOAj8PoZFL!W|r
zKwpbqs#6R~e@a-Hpla^*V-wj%7L{sv)>DZW5D4AHp~PNcr)ovQ?Fu6?E2MLz^!&Qc
z6t))ninG7BT*CJNPPLl>h$Rp7p>F4xiq{;(C_d#yiv6ZlWx}Ex?b%+4-O8#a>6TOX
ze@$75WI9=&4ZtwGtlIGeUrKP?;t*gz=J<KBdr9kmSOwZ1`S^AJ_G60Qbfj;{c;#R_
z=-$YX9_!~>x0uP5ar=i)vSsf)l(aj~e88`2aMR+|-xl=(2~YWNz$6@@E_@3tT~&T-
z0VNFg$beMG8BFrq9eSjYqL{0Kv)c-}fV4!eD)S$g4~1{8AFjgZ5}ixJbM4i@WRHzl
z)K_cabEO(Yd<PH9jfwNZI|-rw7Q0Qh!~ot_1e%e_Y;qWm-OP6f&trd&u;{ukEfO-y
zhs+~^-GRL&9KnHofF4>4T~+&SC%5x!$6<ZaJF2O0N+$T>8mO<=&|laB6gB#>_|ZLD
zU-*v7MV19_%Gl(29!+X=QYB8A2<?i8ox4hqu%Mn8t8%Tgl&$g;J0(}6c-P*4Ku5Bu
zO&0ma3sx{=-ju?Sr_7?}NOk1m0HJq3aU_f{5PudU1=0Hua21y3-`TkcQ7M!(Ar~&_
zzy3jP_IErAMj=!~6prji^^ev$_VNPvNXomQ(^;XbCEA7Q6vxcfnP-Qlt>2y!_UPN|
z-V~rG_yKB2upvMEuvbBD1=7{;q6Vj(fT#GbPf4O64Kyqgl0vtr0aye?0!Y$gz&xil
z_e2AtHb)=WPuPnSe5B>zN;DOpehK)MvqTzXPxFB%UW`)W1*SMNhldLVdO@ju@3KWZ
znTG>lNP8&X|BR-JY++WH6d9}T<vi$bZ<3C=j+)GCk~=A*4I4-8NF&2U%5rxXGbSIX
zASLvE-tmU?BEa8E%nv1DBN#?&@yY)kum?jSDxw5jk(7<cq-Y~_$--;W&Y>xmTQ4^e
zp^L4!H1y8asV5A6GYVl|<AhIT+zBK{dG&XS?_}b*vKqC6X+2;FY`Ta+^SBln%H#i|
z;ej9d8fd$zx#0_bf)b2G2+7(v&dnH$TXgaR5`OV;Q77mVWG#E6)OvHSWP+CD2&oU#
z&7>}U!B=X<vLX{RA=m*|cG7P_;TV~El<f1iY1)FY;p7yd+Is3CdqwH41&Kx)IKXr*
zp-ZP*q~;NZYS3xv)XI@<KT-ZU7@J`9p~#~JZN6QkZ8SEE^`ax&j|Ru$jS=rh$hYVR
zGdKQ3^KV}mC+brQ7-zGv&l5m06puASo|nXjD8JMcGS=hLsjbWG!t(ky?!IkhO&flX
zxifZQ%nX=c`#eSb>{LDD_~ybZ^8@&LVE`P$c3AEt<}6(Nf{T%T`Lw;-mh0tWj{P%p
zc!~<Y>l-Sksa4a*;F+DmOD~M!)54%Vyn0!n`}(mg&`KeKiqA>e;kL(!nk+sjFyVlV
z=E7PUv2ZUcF`+pvB)ni)bxgXitNT%rW0_NtA^gh3X%-|~;`znKLfK9X_6J^2hp>u1
zG&}QXshli4m$E~N`cMVVx^rKmjVKX--Kt#4-q0`tr-Gs;a##L5jUlz0AK_{UH(Ytx
z@5PbdesvPOvL)=93KMI@$}e<e9qGe36zOQA*%B67Y#ojmHfJo)#i4n?82|R+#ol_U
z3h8trA5uMo@N*4t4t}&0tF6?Hf4ow*;5(kWXt*bs)8y*mEsx|kKfNxX3Z@2%wt<ev
zJlXG1B0(HQYNc3m$%WeD`^r6>6$7qu!c?=5U-uu7Vif5wtvvVMrWVyc6%(|N$=Ri~
zHGhE@%(Z6m%+}u@v9NaXgMppBQ8l`NmcN1Ih_~O;ZNP<>IIQCnudPv01`mV7;PL&A
zBk4!`*b8HU_v4Gic445pjg>n9e=d)Ww}|ehEw&=I0(JLmsw<$VS+;Qe+p`7tgfe%`
z3yKJov=}n$M2C6RfmS~^VOebG%6<p|lAshEnp0&nj(-mnvdW4kc{;)m4^r%mns9gv
zyp<UiD;(|u$GYv~J?RtVqu(*2G;VU~+C}hpI8hQXJ<idTdQi_n!SC<D?q;mA|Jy!@
z2pdkh@0DCijmg&2Q~+a#Aijr?(;L<egYVWIuPO2H7XRrDalDVAH`#)5kkX(RfAPoF
zfiFoDb|sCP7sHyyAfgsFKhG(gjjE5auDY+OfTRlLvWTcjSKjBbRGHH$2-GJHzwiD1
zkM(}vT~WlHagRJW_=jl$#f>kx5*EEIumx(nM&(S{UpvK{Ne7x19QtB^Hj`pEz*pHq
z%}T~u@><gVP`tl1c>nUyj-mg3IWOl*nM%X3mNS8k^f2n#l>HE%3J$vP8X~CC-PF1!
zAV<Ud)0FHrPV4WYk6G?oF8zccjTdy)E=i%bFp63BsEO0^lOz#QKov{yR#&<W4r5iI
zKLLJIP&EOJLKss*6oUQiR_!@Q&5?Esu(*8K6MYE$!8h4|KE+2)pI~xsKQz|ak93l7
zX|eH2fO#Stul{{U5EMMbp|H#^$>{do|71G+>m(=~7DmhK!-)Q}b8Pr;$?f!M76gF^
zrksyJ;>g-);5h35L01e|lw?3Fx#5`e<X((YoyylI@UQvcze8F#|4fZ69<j@;)4WuC
zGvC+&6UGAqx*zVYW|N24#^P8k0!3rmfCZ2Dy^c0ktc7}I#t(H2y$us~T;tO{lg+QB
zvI(uixz#Pvpd(Q2>=US?uDKb+atXS?z10I<apxSob&~;v6TVlDN+R3y4*4T3@q}M&
zCFtgz)2i3lGSADQD1*P&;%uxSaC#m{jKwZp_t|<-WEecj#_Mxpa>t1}zTs}NQ}CS~
zRpY0&>?d(k;+cM*f)Yj6(W%7_EZYf}eslip?~a$hZ-|5@j}Vdo(e#uXTlNfOh_;5o
z$srtP#Q6iMuk({g48_-l5V0i1!6lz}wNCbniSA|k<%iDSn7nD}66PF~WEqAk%+qDt
zl1uaRVdPFZ1TtJ@e^{Izd8ib@Mh{t4$W5sf;aglB&7wMiKQC?;;^r7H!w?XsR>jQy
zs(kiJu&A7XvCnGzlgIBoUP&#-Dwb+SX!ZSbACEH7+B9_hb+nPkw!w=a7_I?dlReW;
zQO%nVM!)|?o`a{C<@daOak)M6Jc7Ety{3)${V=U}&udeo=E(uR$vVtx1)U#Zg_B-E
zBSwr~=E|x$x9Pl?USeYs6W<umoHqO@k4kqF%xUOLqtaZ1wVYXncp;y;ZF0(U-p-93
z<b)a^vPx6FyvWw6KDhW8;~;)76|UFckcH*el5Zg!PFSk1m-vU{K(|74l_|z)JP^9E
zvY;UZO)$kiPxO|4P2_zwqY(FWY1M9)hJK<a2xe{dCsrS3)+!a|K1KtdTm$!~sV_el
z*3u_tkU)crC$g-acvC#T_XlLxB(T>q@>9!!<x}KYn$wtr?}P2+&bH}l5$vONiW~~;
z|2lDtlfNhKUC|IJC*GVpJ^MS>VbOzAbZW?IdU5%)eDI>NDUT#Gkq;qhrkrV(YNok1
zlptY&s9ygq6S8iniI-p_+G<?c%m9BK{`>@A+wSOf>U<m)d|~hyMllAD{7GS|BJj?1
zkc%?+MZUFk$#&Rq{w#)8P|6V^eYz9($ma_o0YvWBZDtK&LbG~QmyBko7x&Ll^{BUp
z7Hq$RQTIzpsxSIp(1yN7t4I1jAyV37zZTzXmu6k&ZYmC@5uD8|Q(-=2S>O5;Zy84M
zM$Ax(hb@PtWwUJ5;xD|X?iRED9p#SqV*8~MTK1)%CJL<jt4EH_ATi#!4%Q~?Tr0Zt
z$g}<4pQ|9X1-5V{6RIO`ghi+CGCtiULTOjU2?*OTEoFSF3;g8?U4Q>#_mR-=wm6bV
z%Asbg__o}`DPWD7U6ny8yz2E^;}K-}X{gaA=j{nrMsqTO^i<%X+y`XlX9vh{`1lY6
z!z3snuWbn}26bd^UQz@j-4pL>XbT7*s?j<6$c0F`i&J|q^;hEszwM`OB?uGJ)tT?e
zbm%tQEf!)5R!bq>2wqg?E-=)kfyg<%NO5$K9%~WO9}PzCYHI8Ss`$o&uCKT;<^Sne
zK44nXRxIW?Bzu_3@FHT$0Per7Hw}Yb1X6P~TM@JPIASCFk7N$?FNIR^mrm~ro;+V?
z4xZ0#Sk1CBXM`<jk-oAD+%x(a%gT?ee@q4lvL>jmJA1xLB<1B~;*G|3KQeiCNCjn%
zj2&Ggw&L$;^>nmaN-wSrU#&Efm|ja?<xZ4B!&()KdH-$1s!i)t0m`G$p(Ai~^BIZH
z)%O#Y?C@u21#7UlF}YALKJHHoO&4FLYlN!0H%XibC{oUj7_+DkE}=Cqeo@cLyr0uT
zVb&{LdVhXmvGh`m5>oOXoJ-G&8rfz(;<t*9jW@~vTOEE=enP)C9iEcchS$JedHDP^
zHL;PBWa%1-<&cwm3&>kI`xrXU%4p82fA%+7oNeJ+j8Eek%)eAoZE9oVRlRsCxGB>x
zvEUkVj$|=X*6G8ys9>1Vz_v~?te=1jWk%^R6z7bI-k7V^A<pRD4cXy5I@7wQ(dva-
zY2_62A)7k_uH;~6EX~)m+gim;tsEfSet2aH)EPt;%1yq?1Ln9|WxY&tbu@u649~*w
z2ux@CelZKkI24;@AJ5))nKB1R++~Ar8<v6ABWWjfvAD@SJDY~8Z|2hkWbTZHFUfZM
z4&^Co?v`@r(_9zRpL1bIO>&q&_>koCQJYPb?*(imsJ1?*y^OZos>#WL5&9uc=BfQN
zWti7sOnct~>KW=QAvj~R{v$%lvEUI6b_QiMC3E_qC}a5j5-!zn1!DiCc^cwSe;Y5<
zh{B*Za&*rxb#m0zMPHi`vW=u3jFl!`h7a4Om|)-W=l#N}3X@^Lx=P=1&<IBmsN$ig
z31n_Zg6tNh%FXhb(82k1O099~E>Pu^-n0<x(v3C%c6$r*QeYdVvY|bbwF6V*u1Neq
zWhG|b?<o(eyA}nOF5@|yv-xi}#O&ef{8Mc5zs7`6zOS0PD(StVV5Cqm<UQ_ZXwLF~
zM*-?@Gu3MDw&aBHj=%jrXMgji8}s8?+Cz|o6u9!B+di_NA0O-KYZZ|RzQd{i4bP3|
z4VY7x@l%DwIx@cnz!T)vwJ)(E`I2G~%5pP9H4+9ZoF;MXSVf2$K<HN-jx6M^wMYm{
z6k(NxBP~<Xb!o<^dj(mfOpB)E!Ab~`js2|CJ>}=(!hdwocT2b-OKs08-^@x8){3hd
zQ_~`C`NfE{@Kp(X`tK)`oJ_&{51cv^S>V`jGLK-_WelroEpu)m|29T{GA+E^$;Y)0
z#<#DJmZG!80GV>o&}p(T14?CRj&5lUm-b*vnwFNg(#FMYww_WxBZ5eLF9EuRbQ!AB
zV-J7Q`Yhr7A!bQQRfA&8HY8%=JrVjsay(z8L7=(#34p*5zXJ{UU0YbVAfv`l0GqdM
z+qo|2t=yKbw2b2?S&K+0riFr2SwpaZIqEzBx5!>!K#-rI1dsKAEqJRb&EH5v9WUIE
zo_Xv)Di;v1Wg$X$PO87B#XAAk!d|sRA)?O{%n$6Hf>=z;oBuxa8EPTjNnhJ!54j#%
zE<tCN)Fs9fMgvm^@>>s0ya?X`j7hQ-Gookc!LlF*?oYO+Na&KxggVsUYPz+UpwjmC
zfYun+4>t3YO}<i2#PVYtoirQdLN)O{hic_qTo0lb$@1<yRk?l;KD0|OlZD?)hHrc<
zJ0VO#`jjv7R4(jRm)F96Gr4F7dx3`vEg9?w3=B_8GXhG#dlzy<N5nP|?1w%l0AKOs
zs2LTm8q{%pR+IAQHhtN>uN!z>$vNS^tLm1i_aG<F?e8p|(yw(MryAQ;!II=#Uc&@2
ze8&K3d1=wTrEK|>{9l>4m_NwihBxn5$=J+rEq;Ul7sF`A%~sO=opNTe%fv@zGV)so
zs-=MOw~IlqOrQ@Pvt<J^rxW(`#J$}}`@qHKQAX+4p>Au{3G}m0L?<=AN@i`gk2_c&
z*xH+JExJp`e`4sd7*Gog)mqT9$x~T%u)`YEs|Z?s!aq@~Y^lGR3m6y|(x~~=04#5z
zt2zWtqt2p$^;_!GPUxoM!bB`O2@)UpvvBZ*Ug;^YDRg#~$0xCUyx+#uVPPJq`Mwu>
zCE+rxdoG^r?%|br9;`MZig`q3y<f_`yih~!+aC$r@Jn1FpcxvDh|oGunHe|EcR02*
z*7Iws_@<V0{LC~Y_XRNe+M3>zy0<*W;*Ogzb+;9W27Uo~Y|y&DYoSgAEgA5feSf(E
zQ5*`8l8GCK=+Aa;X<5ypT@-DEL3`7+F}wFbrQBKE@l@;w@`r?wnFRz`&%pkAZm&rC
z47FCK(`!ym`jTf@7<m2~CH{-r7^&vwiQnOf<6+C<TR=>&^N?`z`&QfvXtzskc@?ze
znNklzN7gR5dAzn`2A%2p$6c)98;5ax_#Og4?K^4sLpQAbjjH{MU;y+3Xrn#&>7~1-
zgvjpV?@H631Et_PMvy-gK~Zrzab?`6<l@BMmhZrz_z^g23;VdNG^}Y!f3UaVzV@|V
z8^45iCX3h9C%7xL9qO~B8rv2?5}tO$iC`0>Lz|&?nT-CFHhS^~B5aXf#3<2U5<q7W
zl+pS`$1CyXK&P`97yBB@{4jeHbynL{Kea}yRIzfQ`kEwtk=XfTKK%TEURiylPbOw5
zwo4`}sCl)fgJ*<fTsaRp;n}wWb?i)hp8N%#%XAW}dm--N-YjRh!QDQ+F}-2@V`_C0
zz$%#pi1xSa9|6NX9S6`+=#j7(aIldBF6#nAHS}zk1TgZ!){Q?sg0ycwt_*h!-rl55
zx?7rwLDe@*ydUqvKkR!(&5(g4Rpb<eX+-IpIMSbwkYVZQ{KoSZ1a-eq6M_#NkaRzM
zpz|yFI_zRZjjV&(EC%+Y=Z5#k%NX1~;|$b+^+e}om1T@UA1H9=;wNzm7aX2{Bpo*8
z;3n07|CX85%TWQ>;$@9Do>T$9h;@|^Vdb#HLu5u6TgyJh@zH%BT~FH0{0D>>+WC{C
z@k1-Ao`ljA9Q>|6kctEz*yZ{7JJw`}f(Ph0$xw}H^mM)m(|=xlM{_!r+)tZs8lL~2
zTh)DU7=<|^O~hceVj=@sjfK35;pUl~g*p?nd<*>68=Q0FtMy-QvLUBO#)tbEw%(O)
zX3wB<yo8M8jB2-)b{!S`!?}YQZf2K5CU!~=WAWFgN~6?wQ3qZ-0O^PRWV{(lY;L9O
zE~ENJDZ_9>!eHN?-p51d>*m1`m@rwtq&F53@?4EQ#wRBu%XOzSuL=hMzCrNlQ-=dN
z7sTau6bg53OPvF=UFmX2AwldQAg1wk*LmfD`)WL>);xHVop&e7%YD4lnCvXqcg<#_
zP8XJ2k?jRXhrg*6usglfGEe1W0s8xn(YvD=qoyvIXFmvfk!*vb5ql~Vbn<b`595;T
zB;?l#i#W=#&AlEL1~=$1_L$@#4Bm<KZCQklA3HSWIs!j_g>=A=Cb_Zpj;)r5DyC$B
z3$4qXWeG9`c6VMWc7v82Pzl=w=`O!P8}Iv$yxoK`wvEC8BLp}7mK;yfpW@k_MN-CF
z%nte+f`XZ_2ZH-R%@z6K2L0swl@-n{s2|iSAMDN?+gl*kzxE|JxX1#-fFt#%x-2h&
zvH?}jH`Gz0a`U!Q{1U_fSFRNXs*&LMi5FT?;U^=NSO3_~hAdoMQtzzMjP0pve4{vy
zqUv-Z9<p9Qd8Ce$dNbK^>jP?q$%9<zcm&}GO|j%*x$;1&HrF?UO|K2HxHRyuHf(=9
zNyWZ6$@<X423wN@BI|RT?p^Uehx1KTXlQQ{!BFUlzsiyAZ@AV@sej4pm`Donv=%65
zU~!VMVw3V@+c&qUdrj}zl&W7CedYebM`S?W9!7r#q{xx-S{!;Pm{IgbcQl#EX(fl2
zk$2WN-QJ{<SisERRB1IPO<`{yeNVq$uh1eBtLvlG5|Qgd_(+C7w>{hvt(AEh9dix7
zXoFg7ccNro$W8WeA$b&`Vk`+6sW2h$8bVRh(VBs*E38OqT9ezlk!=QX8t%O-KZ}Xd
zD{O#(hUN*-2gB6vMeeqHbM%#kRPo}zURr-^(_ZRSI{~{;EzLwl_dr9&p-@UdLBc?9
zg7QPcdarNsP2w2~*bky@LSJH;2snhD2rDvrG%1OD)Ut`s8DhfEeaCa@#y=N&wgP74
zGYJ65zeN`xB5E&ITw6_FB}CA<=EoTijT8ew4e?!?e$XsQts$2%kIH3Z<Dhni&&=X&
z%mr?}noJb4gii8opeLus-WhA^JVSIK_AT9d$aG0KE$^0pv!w8(I)xqjd)Y+am)g6K
zcXxc9p~cCreA9u+G91RhIOI@2yM5(T=8L+>IOVg8G0lR7&R_J&ng&Vq=jKV>b`7V%
zSFZA$MSg=>4TeFfv)h)6c=rPR{Fv7l!{#iYJcs0f(EDqUl#lX8ht~@EDn0}1S%zA*
zhwkC9;buq3(Z=gxsakdOkQTQZ-(r$O>t>avZNaElrH=KIUh>c4w3ZKvF4xsn!|HE0
z^Buxfi<f5}_j2zTF}IaNB_`Ohqlp$kg@3e^S9>byUuQAXvQn-!ouFf%T2%MbU6Zvr
zb7Jwp$$(zCN$<j}veaPXZ-*;0LhJfKV#MgPXAz~pD77zN*$B)s*GPK~jlW>h8>X_x
z=~X_g{4RA~S1<qjHS~J9QjeS9jW>L${KDugHAcznX}WEx%5m~^c%<|oGx-7doy|eC
zlq7i2ren=@*DuyQs2k&R@l%K+IY+g<tqh6v^!uV+42-f(Mdgy7TS<kj^67g~*@=O?
zV0+g5ZE{KMCbL#%#>}U&t%eK<YgdLN-6B1y65P<uFSuLS6FycA!rc5<P9+v34OgsD
z_mg{m)ux+Vcge5CKXH7#i#93&eG;xej~BXu?2Yw+SBWj|YN=jTGXrnT-Gf)Xicg2y
z(Cb7jzctsU-u>KJ=i<tUP3{sQ?f#Fxk_XWOoyn!!U_aN}5A-HmGyC}uZAOfu8J_&b
zs-&}mw-Sr`j;)tMw}$$$;KP*`u)8IniIkuExiP;k=kA5<jOZE@U=~sU=Y_Nm;fsd$
z+|{A$d{r9vPO&OoiT(}uM)!Ml{Js>gHHU>E?)R5kd#l{?+_q;Wc~zT>Q=Pj+_a$3F
z&GN54`hK&Q6_y#Z<3{IY(uXC7)^7T*<~jPg9o>s?D_7aI8Q$K$Gjm&+yx9Czr~P8@
zb~V*JXFi>#_i~JxS}}6KL7idMylv%J_!$ag6Y^clMjKZ~q0bCKBO`5rcg3PNS6k?C
zN&D*<p{Kjoq}vO>5&hzK-DblRo+`#++D7*x{WGh=#nD_Yz117Hc0rqXxz3eQ(nqX|
z2F<?-%WAT_pR0~t6H8S_WmN6-lv3yVgqF~PRH|a*7s0Yz&FcjK^Y_wJ`G&*mEmmVg
zhWA#+x}VLOhxaR)s*$k9luhNRy}cd6dxwurTtmIn%}X?Q<J(ugifOS%)5UhlUDv5i
zBU|ss221q}w}Tn$hPC~w>ra~ZCaPmgG3`8j7wfhSOEzaV&+lFp`s_+F?@fyw)@L8u
zqS-rN?$4c;&(;Njvd7h92UndcZdTN)@49zY(?Ta3%``R@-ZRszdNn#__ezZ@ZPj`<
zXEU=&?UC+6p7Wz#1%CW(HZfuS-W3i!dQdzgHEW-#Lv7mE0<%X46<u1i2pgF$thGD8
zG}ufX=aduQi`u5g#hBjjDIQ(lT%Np?84x+Oa;@dc6qJ1i{5weIU|r>~v`H=+Gg1rO
zr3Efx!k#zZ4~EZP<(i{b#4Bd)dB)rpi3Ek_2^CHb!XGPL+Lq3(a!(7|HW$zC7mt6q
zVoy}XJ&f^YpFRz+RhM5}CNHiEOD0z#3pcW!g{5>eY+?&c$TjPJ%35z&lhRmX$$T-M
zW%iiJd>AYQ7H1Le6Cd}gx<Ex<DO&vYv!$Bl-iqC8bNu02G4)kH6XXz^Sgn<(l*>yz
zo-OKqW~ue1<DBjjUp|_oLJdBaZMNo>Etb!F!%=gxaZ@b^&wVSoDYA9j4O{8z<!DWh
z)<SiovgUQ~_YRL|0|pU7p`HEjWQmtTHZDn)Ru|@g)d;u7Ad3cs{g#S`INR*U)Q*k^
z^=gA7#iA-LcqY_bF0*fL231>zxM{OCZc!U3?Hw#>9v7;NTlTS7jaeS^VvQTNhCj}B
zuRmCnjm_p4+p`~IGUX1MeEO7TN-k?|xaxF6hdavCN{;P1miRe{D>cZoEsA{o00p1W
zTeEh+&)3OPy{q)-KDb!ap~Bv@@9rg)27gz#eO2_L%FS<8XeQ@W`)q!=@^w_QKCz?{
z$9B`Ne7*nf;U;o()wcQeUiU6dow4A}%|FlTarpHf;n_L4dcG~phFf{9d8zW!OVG$8
zgZK`Gq1e9?iK+4HqV8WY5O=n*GJVOtHar2i`&8dW8oDVl9uTOKHmVA3@l|tW9O<H;
zSk!y1GJ9OHRufq278M+kHtY@>ij%tYn|p3Dt53MwZXGALs|eT|`TNfD+eB$ExEC$j
zxS_5>-c=PF)m4-<1-f1o&Nz_H|8duvSVB&oM_g^SUd)NTjd3yc5ORZ8KV6V2YAOM^
zf2T?rRv2MFoNXwr+2x>SKX@Iy6~BG#uC}~6bIdAK=0%$X#@G<YOic{mYc6a%SK)?-
zN*&BfF)K=YH?LD9OKEM5Rah=4?UniDYlc-ibou?g1P10=p_6Q*Xu`n)*-o8yn{|)y
zZ1;nzrTJfHb2Emi>fcvs>t`-&KHC9Wq&630QjZNn>SOmd?JEZ^hUnRvj#sXCc`;jh
z8{fVBO4QRcXe};IoY#pijJRXRn{+$sw`JBUQdw^{z7);cZC+GZ`YgK1|8Ca9u2`67
z;5|Srx_2#`=TAMl==)mW1U%RJyUPmW$W$6wA2{-7_`B!|R|{zfc<?i4t!n|99xr=e
z3e=v}&(;r2yjr%VSBAYyHd+Xgs~agA8~(0Ur27h^W_O;u+pH~VqI-!@8%y)ahTp-H
zE+Bjv&63>SXI50u4gAt%sj7;35X{w6xm!IwNv_DeeNAi+@>&!mRdASOM4qn#tT$~7
zV%am)*E0MoKO1UctF_xU<^UPWjlQ;p$XDM({vf<IX2!}kI2WzrWh&lBtDipeSEb$|
zj5lXrT6L>|=9%;AA15bDE*CbA-z7`ba=4zeR!DLhg^9PCkT1*>mrn2R+6?wSO|4Z*
zxjad7uNt+L+^<Hm+j;PhFOJ$T``DmXOjONUxfAjpT)G+j*7|#2D}dz1LW5;t$ENWN
zO&$|liHD4@npQlFl@BK~UksX=7pC!SYR9B<gy!`sD=uZ~2`w+Y??1F#g}PlGbi?B|
zCb!GHigDVqy-D02zE{@Ubm@{QXRv$!iaj^2?A5(jPPS>+;a2ao--;<OuxM}Ex==5_
zE?ey)$XuF0;p-MUn*}!K(6&zcOO%RkYZqr|CSJ!ndCEww5Cl#R84tVz^^M{fa=i-#
zDkNj82_<h;Y_+5olr`3wk){Y=tUxb`UM1O0!r9R*m6^)8$|}~VYnE~M4}7h5ipy?a
zW**K$qlQoEThIJ$a`g`w2W^U0HSSGHHt-4VEzZh#PjM<n4}jsnZ+gImNtfY>ku_zT
zQ9G%=o9jd=VX$d7(cC3``+Ux*a_5)Z<>SwWhK&0K?%r=uh_5ND_&5nllLUif@0yYY
zrTSW@a`$5!$IjI{BbnFHm)t_c2bm%2gwht+8sl?@JAMTQ*0_YDMXFcxIRqDGVXI58
z88c0n1mkTq7l4cQrmzFrUA`_}j7EXt!s6brz*|>EEDEi?v!K+$yMuiat9Yl9@@2Tk
z66M3PfN*j4;_J@6U-NoLb?RDnzmo>QRi4a$(Gc!dYP7FsnH=uk?r{G-+50XLMx+1D
zb*bwYuT;OwvI%bI%${WDH1i+baIH?U_k10;i$k3QHNX}*in%~jeeBt!UPHJn$M96e
z<nP$Rxm8A#+IVMEX<$6Kc`R6^$+gVVEqr#08>*{HXmsXw`GuHwZ5Vc<_QVzGB2Ujw
z$7bzUbMp6@?3&I)TIb@%a?2&fTa`Kd5DCHp)sMIGZ(1sdhmxHdq?<7jE(WE`x=}G_
zmHlGXrGUn&)P3<96)Nq%v$OO_|3(BiA++MjhR3jOps(oD`-)rd=PUP9&33o+Zd(IG
zSLtBcW>3{~w^JWtQ^SV)oejl<H16DT)XJF;NtgNTKm5<_-udner|MxFv=a{Tr-o5T
z55hPPYn69$wH~@#-3(UH+ID+qa*xH<Y0VnGp8$uHyT`_$#Y#68R9*XvhpKPcR}68J
z$v*{uDs5QttYuH4GaLS`@`qO1=kB_4)hdMjC8q}yeEC|TJL2+Mj}@WA?Zu|EnTxN|
zmGxTcdTyPzM7(;ISB@=;S^}@6Yq=wCinWN>Z_cP2Mn5nM)Xo_WCFMyE7K$I1&-alF
zjeuS6R-v|058<ZCDnyT$O+4<ns|-0UN38Lkjgp6z4XbXAg)<M2%C<SWrsO!~;SHO7
zJJF2}$KwOWN|%-L##LI6N{1rJhPg$|z<Y~}GR`{0#^T!#sP+%p&PJoIQX*c0i%X~W
zbpoy=_oaK=qzZiLpBO***i1{-Q(csiBmv$rPh0Cdt5cN|_eX#-r}Y(NWezNQ`~S8i
zW;Zu6t2u8DfIbqwlOt~e8PWaSQ1S>eI?$;B#Yz1);&drGO&yo@_AAo4xHe<jRA&{n
z9aDShpA86gg5!0Uyhqs~^0IzmPAeTIG~kZT*b4F40^&&KFK<%@&5bCE0J~hGc~W*?
za;8YO`DRd7!-SD1qx(G2JI=dy)cp0L+Xwu1mb1tA)o6K(wIgZ;^s^4+U<)$Z)0zE%
zB|w`5tIb?#rM6=mnQrt^R-Tlf%DIk#=8yiKNI7F}Z&;e|gDGRm(_CbUT@qf$L(4!|
z9RI#!ft`Fx!#&_3_2>8y=+9NX>$P+yZ%$=|N>rvGJft#-dOnY;+ohHrmQ+wQXZyRy
zg8z4UQj1Y0Fz8#xiqF9+W79!Q&5BQ5k3k7~K5}i^oo07Q#Eo)mdTkcvX3g#T3xc$f
zh#$jIPyWuFe~cpc+VvNAR87~$6spWDM9sGQT^%_@VO-*l%AiaE!PXHJ42JKuM<0J2
z=^_p^Q84nRMj%lCdL++Di^=XTal7s-0ttTZzTBOB>(*SuXN+SXL*0iKEGC=vxg5mx
zSF>~_zUWm3DhHcIJUjNc(q1z5vco0UqB^4Qq!eWjSiX-Vms}EwHUv$~!~32-u{_$k
zDGYUZmr)&54+?$2ft;stL<im_b=VmB9ZJc#MZBx$AR+nXc3`xq+i}Gu$6wt|hC9~T
z_N^<xHC!|-rWfx%EGbsMewVuQb|etW*5!;zG%Ij9O_%a=ZR+Pp1;u`xV2Y=;>~!6a
z;`!Mc_FPEQwlvgFz2cD*l}Y5zy8=Z2jT~XTa62dgyRL~24F?v=Eu1C20M&T#rM#@`
z+n}je<uI<?=;U95WVnw}$<pWn@n`<IL#w7xr@J>Tn^36N!8}zS9wfdJw{W8HqgSz#
zYf3k^O2$RAM*4#?a=o8m?>QE?WnZr-jjNTEQ+`%$1xYlt{b;9)FTWFu@Tm7tlLx%4
z*((PSxUDm!@tyZwanP3d+RV9dX6N*LgR{x(i`z`CQUue?Nz{JzgfJ~WG!Eye$VZC;
zhNKHQus+UJ+a?ro3<kG)RI)mTZ7&>art@6AYAUG3{kNmz?pH7R(m~H%Ps@`JDJ!~3
zN>>%6U@7rKW2hnp*^1m^kwXK1+K?T@0!;=~>q4O|9nlr`yT+qX%UnK=2sI8(&r(o|
z@X3HrR2+)S<3)ytU(NM6RXl&oQ8>QLdp3S}MBOY3+*^u@o$}J%B}wGFQJg?1LAA<o
zKlaXn$+S(V<;SjJwxlm;FUIX+yyMmtb$wNKxc*R}Ytlfx{doWVH}`7IZZb4mMMwk!
z5B_^%W?oZ>^)vszjsjlA>8o6k3VjlTY;D*`Zh)m`<OvCw>bstj!_@S0(r)agDjNv0
zG|7<s#2K8m?n;^d!C_T@TzQteKqwfJzG+L#hmEnn7Vk@Rx+R_eeM<$HI21ggkYv=)
zuEbYkNKT~R^c3G_MHslb+M$4lA_Szf2!5t~yL`L9?UJRDvrRu;2Ysre=G>e5T<I0q
z05hCQzdR>vy6yAAw~4=*oCyzKK8$!AIs_THtFP@2tim){vOPA&@g^nC#58ySg5q*N
z6le6g6)sm)#tg5{w?8)pf5PtehsYB7ixij^LcF35qQU>+MD1TGD*z~zhsP)%0ioyH
z(y~b{aH0Btl9*A_NFNjy;TQ=eSgPwGe>k^t{T%ow<L)U*Y6Fh*ZXIS4sduj6S?bx@
zF-udu85@e^k~#y8j&B<IW(Bc%IE}Eyl7qt;U!b`E+Gean#L;@+$ife%>j0yLl24y~
zh1W`Cj@YO?ocw7E02klc`HQU;$_e^*qG-8DA2Ym5SxKF%r$g9UkH*Xz-UH$bq*by#
zlb6e!`pkOF-^D`LqKu!b<E7zQB<)nD9%+9tR4=E?q@mso`qtvzL1BbIsCk0->I&3y
zX^TuT2xc8oc}A`8s{tn&+5}ZHy$tUWbX&!@c|mM})`hhrz@_%zWGJrV;SS|8duIfS
zRGAMyU}OqPHC|-AEl#e>X><+qAvgVX$TQwA&ph^y?X@3FrcIUUW|3_?p5(*<C!%Fn
z!W)As+0=7ti@+!hUa!QeNNEPuGr~XpZfhs7RwD<bi7>d^JOAuhR3iv_{|6Fv{|gdf
z>C0xg0>t%j&d-r?k6nl98>G>~JsuT))bSd-2S-tLJ$X_a70cy7meynFPw$6>pSg0T
z6#_Fm5DI=_{p}}A^uCwUSz+C4_2X|>|6rl5jykQ8;UiF=|A(;vsC%e>{h#B;4@P)s
zTyDy3pgw_cbh4MP;vp$nX%<=XIlG*qDuB4A=C1=b?zhCzZlbtc;u%UlbjX1plZEoN
zm~YC%^KZfvdF$;sezJckW?DIeztev%3uupA#)K5sJQ@A3=7%H~r1OU*XVF|&jopxX
zOkuWC0vVZGMJ;tD&_MnN*B9aLU<N^BE-5_??=Xf5He2CT{}vtprU#nF>!1)og3!WM
zzl}$!zUlBtGNX})u)*ncHu!Xey*Y)h6V4#kK9BwuZte5IDnUUi{nF~MnL}$NifIe&
zLAyF`*^>jjZ^*-Y3%vi^<OldqnxFqu<OldqnxB71eoP(ze<VM^e{6nQ_5U$H&Lwi`
z2B{N$3`If6oP%=KCjS%p`FZ&Nh5Tp$)&Ji7So9hEJM+`J{9nz_Ec4s@|0(hV{3p%N
z|3rQULjRx1&w0>)lKcSwN%QmH$q!ckzmcCs)_;*7R>%L5{9p+Fi~Mw6{d@9b@NeYj
z<M+QKKfpichrap$)%^U2<VW)HKOjH%w^f$R2~ww)!sKab@@k`kpqKvz_yPWB@gx85
z#gF2D6F>g~KM1ojmoxu>ABTT|AOC*?Kg9q0;0O30#Sc~Y|4saiCcet=qy3)(Kfu3<
zpNjuj{QRfEPm0I?68uah0lFxV+fh@F;I)Cj0xERCDgy`hm_{t@fkJ+qQ4DnR#Lx^2
z^0kk={Q;n;N9cKhc+LVR=mplHP_DiGxlcfq+lXHsC3!<;BOF!kn(*w~cH9LI6-pg+
z|EXZ<rt=XsEyF&Oxf&s-jbcx;V-a*RJ`vQlDBB36T{8-KbCR)}8U*e;!`Eh<x`gY1
z_2I<&IdPrK@K!^0Z54uLhi-9jVaI}EJs6x-4|3#5y>S}adE?`R<igW<H2$u}Ye*Wa
zfYHm3PPSD)89S<l2DEtxB#yE#qak->FgEaPW1=qmr&C(`KS_V8eV-TqyZ;%>2uLg;
z=4W%u@dglAYN-AQS*jr4JewjcT}+&usyv4=T8@h^v<UL+Knj^OVkQ`_SA`{*f_M|r
zN$?@Q$|W+9kirNJ2R%^4CaRKfnpB?%L!G6qsK%%$mOvrAekbv&pv=}y#2CrliBNPE
zR;CsiVdNykdO)qZsmQbdTW?vgMgPN`DVp8wbPwRNFX+KsDk;+U!H#llP`MEJ=s$w)
z7sJ2Q9I}od-4;3e=;0(DkWf)r-~f1au2*(*>ChUkQA`SrFluG_PFjm4Q&H3??-UDL
z6N!wZ_&`Ch<5q{w?OHt9X4;HEDP}w*00~J*z=8J(Y3-SZ?3N-3^+7W0lIqv)zxp)z
zTe0$f-GBPDHF(g6{cFc9XQ#^6y;j&mmC+NQ{-AQ6Qp#XH-FN4jX4(%8Eb0fx4>FL$
zRrA}Xz*pcZTg|iNtr+VTcJO^Gpe~0+niLqen0`_8Vz2T%@{gBB>JkpAw+fzx1%A22
z^)uf#iemA+llqq}&!bDy?pEie<HnJH@7O4)Q8{n;PQk7mKAi{elNOO@fLr=TVI}nU
zj{=br_LDw)TGu>t%8=FNcAt&^{-=RgtO%7XF>>LY=~v`ykI41}9O0_s7VQr6$ni8V
z-lC~Ua{)PBGb%!(O=T|PimBKEwbcc_ttY&NcKOlYJqZzcK*SwDOWfs*XcZg=qYx!z
zjI6`+H0&@!yu(JWcp9-y-OB@sZ?mo|GZhexoS(h3uSYrH5J|=kvm-U%i5w3lA|<(*
zR8IlPVKo4V+yMN$j&y_+wg|eAVgdkoiWNz<53ySE^uQoBfphT%)NMXe2fo;v)=}1Y
zHC0mwGW1e-S^#fxDDom~I;cq$Cj>MWppfjG0*M;I6sbVbHlCn`sS9V`lPOUa(A_II
z2s3hSvDtO+MW+0{1$8>r{3(Yl7=`M7Ybj0#!|zOacxpQURe&?bUUSQA83e>W7`Ve1
zOAit$!6_QXqM{r4er1vPHgyze`Q=cz9+d^M?&F)x6tCAY>u^`$&hx0g0)+_*XaA<`
zI$VNCoR`phl(rBwdA|K^5=Vu-jhd>==^cG?jqFR^o?;|8orAL<*sR``b{r;SEG2eH
zF&BI+Z>6kDYPH|7{HM7v<PKov!G7M#vV8va<-*_*>SdmtYq~_U??H~n!J-6?h*f^u
z6B;TO7cJry9MCYYwH0pr9pe}OhI;kE$P&+6g}AFtMcILFt@8A-37bc08}L?cxTgSi
zXs^QQ<$P=XlZGP#W<vj)aN2k0OHFt6BEGvro?E5(Tr{h-F7)UocR}D+R>@<Gm7lc}
z{`F?X38@n7u4@}3<YN>fWW9-hn#%BxxJK!73G)FdSS&bh3-aGN2zBI5fxkPgunBsc
zkwlO=!1u^GdP4a93&)JMH*4{y>3CpzwLYtwC?Lbwg@9Rf{TIIeF-UOu-}Z&un6_=Z
zr)}GwwvA~UnYL|D+nBb^Y1_7K-TCi*&UyAzb<fS4yhzorQmIPvSu5YQGAmIP6!j{B
zFNYE#LQTL;IU*MObS1FQN=(K%`b!Ql*SFu4Fy)7~(r8L0)G!*dlSA0gNKCKN(>Yv7
z0;QmPV0)HBofKLqN_W@J_iuHG^#<b*6B09~SdPHCZ#f?ek_`j7iaB~5x1`4V6Q+JI
zS)<E{SA^_e0T(AcxdY?y2XV}Ut{$Y&COg22+k=T|jAh15M|1dN{i+%{uz3@}rADJi
z4nzg4(qU7x*5l0US9;d3*{AS~Aof3;+|@dg-}vmXj|k+#2<~9*)5bl<BThj|sFiLk
z@`Hj#sMW3SDNK8jQ3(|Gx;vxQBE8`33*2ssvOF-!X{|10w~yz0qO_N>JFroWEx##T
z`<i2PgpS=1R!2QKh<AiWdLjWGuwI^qs^`$e4eeH9#3{aXv)%w?BPl4kzjqUQ!mmz4
zZ1R9iUQCrhO0{59ar&$Pj3a}`m*4t5omQIRUhs!4$iyr~{NA&>tRo&X@CjYMNUOU-
zQ?iDdOt!hqVtor`Y-e4tONHD^NZy%<xr=u~lI!yz%kjk~1!iPpfwTZ`>Rqq-;6jPk
zu!IJ_sE;yH{+W`^yl4oIF5$+qeH%<>hXO)6r9iS5)e4!;vTVZ`%Ks`fq3D;|5@=J4
zN{Fv+Wn)UiT)=m<rbU~ir8z1s{edachTQBwGLES63k9x~?OSFqC<m1Db|{hQ(Fgpn
zbX~z;9B%g#>UA;TeyOTrTUDqxl6zP5wO_;l-<G5*@0MMzWiTz8aW-%R^@m=E^Vp0c
z<QRju=s@4<Gu3mESA74bst_6&YnNYg?>AwQ{@-$+8I109eiCbwUMv$4yQm}o-eTzl
ze<W8iLuvoUQnKkr43r^RUFd?9S{$k29c?dTE?Ku8F?SdOc{b&FsK-L%wDaYLW9C%z
zwFCrOyeZyHoxuC?d~_H`9^{}4HMIqrD*j*UAx<&!gZIrXf##`ztFOL|7yOvXsjl`!
zlS9-JkVD|>$F0l`@#9DLNM!TYm%+}CsLJ|XcSAofXB`bU;e|!CoeY-4_G67AzG<y3
zQvJ2&Z*)*#cStknyS3JJNIH3xnkYSql3j69o$7K2NaM(#%08W1{?La=0om0r!;_A2
zc;>B7tbhK(V9N&+;kn&^X7gm%0IR!!T+l8FaL|_jHZJk*N$qV1DB+HoX%Q7A3-U8v
zf&#!d!;R)-r)U+B%myJ-SFS%(h<<9s2P{kj1>8)2|J$)V7t62MwM|0<u$`B&AX%vX
zS(f;%xy*RFO3!pdx!tBC9orIl7u24k)SkkNQru_1lc-q6v$6MO$D#fcnCu-f>(N~_
zN-De9;4S`-HF>?hp7`fIY-Cz4qJ;57G5(%yCt+v#;V+#1bdIO+J?TB`C4j5JVD0gQ
zK&8jmQLBnr(DW_b8(apy3EOYpFfL8)&PG8GD+_E8$+1Me&#n@pA~ERvm)gJKF>cD?
zwf~AbCe@hd_`+4F!6Lys$~w$`ghj?N__mraMydt;a~w+*seIRu|J`X}vW_J6|D9e;
zcQm;dkrsT~J;UCH0FWp+npHwZ!mk`Ejf@}g@k6AJm*}0v4gPN?VjGyv8EWSUh4v1D
z_T2Q`R_)_0#l$PZ&^g>P>bZnlYvz(4_1hnwY-yI3vgAXpu^9}j$#0J%0C_z4*W+)P
zsX?1j+QGunk2I}>l)vUM0PP2Yy>nA@9js;IPj{V-pvPOAohIi6XLE?J6w0g0p8t*^
zn(JX>?NqtjX93ZQ@0(m@)kvf~5CM-bWsgpS$I%9|BftX3S!?-Ay-p?0&}sS;>MC01
zw0|M-6%zUnVYx__aupS@iNrOU<ePG{e+>%hjdJQ>4L`=aWfNV6zXRTu0%;!~f$mn@
z&kwuqqLYiLPrBp(2^ezu7Pjd-o%+OEDHHr5aq5^_+(pcUG57)=KR?=|@jQ_Sk1W10
zG^d^_6Sd;K#_GB<oqxoe#wyrq(T%33dppNMokK}Swc!zfB#rMUeym*ygC1k~`(2aF
zA$m`yYudWxDN&<;1A@Jh@Oo+uX#Ai4-e^PMSKM?a_=xD+HB}ugH}M>XoU_3_NRwKm
zm0^fB8q#8!M2Bzu>XfJL2wnH2*O^?y$6s@58}lSNs}X`L%g}`-=l8@P+s)@rE-2^}
z%rp@rk`@VSIkXjuNKc+$?;xwof*fb=N!yl+0qDAE&lFzs0N7-7$s_W<IeOK3qdfn@
z??z}R9!p%D(cI)?r5<VmTP5wRxhbyDrYcD@lLOAGcJAD2Ix?q?#t?>{FeDaMFR6q)
zzF%F}vK0+>$$Vy^Z_rHiuQ7aP0+`RfiDfo<a(c2n^7ITSkB4f?1y}=Ytt4FZV}VJm
zE!EsqTv3)Hz^$o|H?Q*vYV{49WzST(Dn3#7%^CUyI@A;L8T3ll+e&iz4}VzALNvuW
z;T`p<7W+?-#R|JnyT2`N=388I?_F=tmzBh-BvN2(H8O59bu!9Y^AE2<6*mdVu)}^W
z?cMF&1~U-&i2>S{petJcu$EWoZIf_`2KF%S%+DqksGe+o2}fs8jisKeGI3ibFmPH5
zL_9I_eKCR~Ufs84*D!kXU>J6p_cm3IzTNJ|6{=EAR*~MFb?`p+m*aotGA|#zt>%nz
zC+U-*(JoiHPv)L+zx$db7)m+%>a1@DYFYRG?MJ^}=oNo_T^Y*(b`VM_2eXbRc5vZ7
z^_M{B)JgqY@(i?k#VER#vEvu1;(~_78iv}!+ug+SEguhC&mirg6}G_|<vV2V&$sT6
zVbndq-Tj}{ifFM5Jn7p%ejRzVU4B)jl{oqT`b~i$@xeiH*`Z!|#6a|6QFybC!XKmZ
zj*)vWat`r#?5;p%;!}xg;&}O^i4o>t$QUTj)#w@Bv&HWR8yx4wY^bUBLY<AdyxaP=
zr9MV8IjI(`amh`0osuZ(j7VP_DOg)UCZqrP4pw<DHHx-UJBwerk7Bch2^=Tc;d#z^
z-TpGPp>|=@w;9&LyQxREsFH)KB4~$qxMr5-Oep<8w~naFqh<-KB67A1nlT=4WC5%i
z{P0Cd>B$jFvwn)Hym^k7N>tpOo)M=;ELTxg*g?#rYTB8pSj)c*lk%&WtVvZo-f5Ap
z<NmE+@v|9o#LH_$kI_kA*0$hCh)RqeIb}<YFg>HG1gU4=uZjMp9oMZvld%|WCB{s-
zL%u3i#E69(Vs1m7!ZN=YKgbbarJPu334lr0CQ?|9faWJ&T9JaTCZbr!f|@1fSrdWU
zCH7jY)1t%phA>pYvA{W*l$GYzm#9QmYHyx~Gjp0B?6r2U7zfQk&b;;gNs@O=6tbZP
z4M?=I;ih4C>E8d9J7K#87P_GP@nSn*7kA7tX>m=#uD;}r|5wWQj4)tQJ0bXQ;+Rbi
zupM^E0PrTZ=L^k#q7ToEUA>ivOi5SBv;q;dyP&e<7RpS~4k8NYxhSKiHVnfWtLBm@
zdrJmWqofr6q?UhM8Xhf<t?13lrAzd)fA0kb`aY`~3y|L8`ZYvD%$P4Eru3($yJZ!V
zVoe{du#d0L8HoPIe0M<5SYR4KDQdd~EDv+sdCll~gxPSM&U;x59si;xjG&<-Mr4*%
zI7YOd|1nY!V2#BIYckcNrE1>O^``O&aI@h0KE#6E%~UJT3vXBC4qn(3Ak;-}q@uHM
zp$G$un*eg>_poW4Nok$QD_ldK8~3BwS53sqyiG^m^T^6zsP3dsz`0IoO<H6GaQgKD
zHWzdqRn8yuQYy4Zc=`YVOPO^~8a98j!@MsRM&$N--JK{muyUBFCZ*u;9+==vwYJvo
zU6XfmIeIgBGwD`#v4_OFvc)z;Mn~v3G!q0vygUH{y(9yEDjFz2MT4fsA|MXDJI+pP
z?kYnOnK_Z3U3j62FVW}s-b3gCh&5>)hhoS|1@|V0o-D-tMdMcL^xm1_0PpXpoF%gp
z1BeuR6lT1LCN+gAP0~>dPZi6Uf-rtP=T|8*7E-KNRFM5oWXS+@ZKr_#SZTISBe?)5
zFq;pEvO!hW8n-c3)>l!_6qyUD0BDplLStEZzkVww;{ts#Lg{<(oh%Gsg(b!j74vPg
zx{gtrF!GAMs9GS$VBH|wuZ0@^L3!dqXL6Uc2pLxeHCW;+=j8);><0GQSI~$=S!Ytt
zV2NldbtyU7_oJ}7V(o0M9^)Q5U~A>%;K2z7R$|}pZy#8Xv0yV6r=UTO-g<6Mw(q-(
zYjej6T2Z}%6`}LajHnBcHX7t`Jp(hTbu#m|hqTZpJ_n|KNQMeq)Wqh4)EhQE<7OxO
z3`kN*TYgE09`jxukr1GebpNoM`6|DVYQBdrf!=L6v<a8Qm_I}-Sr{~6iCLw}|DK#b
zjv~y%E$ki2>v*!1HV~z#IDN^hoe=&SGX`qpJ`8Sjb$tx(>ox;K#Uc8AfW+^Kf5)yc
zVEeL1!%3^(e;iK%<55x^vQoSIlh^i9!)-j-Q!co%G;2m3wP9j!LA53POwQfN^k|{4
z`$sIkSOnSQK^oaFAO;cX@u@DS;;cJUT#i5CdYMbAbB~L7DM%G_GvOCS-fReiA0;vO
zQY4rSDz}v=Fck@CGfx!SZ>ccMQqc~tSZnZZRVm-i5CLiCg9gq)^TP=raKk941z#et
z@*)XRE?Izunb1k73g7|L+cnn_{$bYoA%%&8mYUs6`_5%y&vXlXncX$`nj@X8J*rVR
zK@R0h5)SzO1Z|HEC(oiR=#nc)@jd^y;S=EZ0Pb#XK>63k#){zc*k$ioc7Na!uXm06
zXWf6^9^Thj4fVT!`dLv>@4C<F*MGP=7>pKRB8a`TBXFdEM{p>Ofij&TWd01iZ?;~w
zwV<Eg!;?Tu7}@;w*GHBK`&WZ6Ij73gv^z_*lPY^WqO9wN*n>F_8|7(&+Qu89-N13~
z<q6{#pp~znsps~~>!sV>!=qLw{tNo_LE=-epEdS<ii>y)ls43Z0@j`)Wj~NZ^C3F6
z$=YCr{#uNM>p7`L{Aw9|6wzYRdv3D*uc?q1^3LoSK}%PgUXh_CW$s+tS*E1ye&?q!
za3wy<qD>(>@gOSPuYtDV5_^(Cu;F+z^gC4?pnk_;`i-T<0@s56Q)860!qop?bfO_J
zSS;T2c7Wc<m?`l7EJ#{60!qy}dkYzM&jVj|)R85F^Tm`xm{htiX(qk&3sXyxKshA&
z`R@?2wtbML>Qjzk|F8N12>douBs^&LcsU5JSw<y{<=S^mQpcpa>87l3EZdpEA3O7>
z0L*ZNC9`WGw5gF4WNu;kRxdfeYtERlZLuJH#dKH<Dh!$nq!gR$B6nM{MP-zx41Uz!
zO69*9%ja6yR!o%iV%Tv(cJiB`D2~bdj`$jk9z=wqx@H#XeAWtwN<$O&Z!zS`)k`in
zGfY71CSJ8W-g~AA(YzpLvBJkRpFzb85UeXui<fLkl582y*ib*c)~?CqSE$w5bM0-&
zyDw3bdG_#wLNH~RmC=7K!|ISHhB4eZ#gObPqZnUnsvC7;=O{p}e7tzp#D`VS<0!rK
zk#X|@vpT21A{BVLeQX#c=;vHp;L8kftz%PwNnN5kj-VJgV$sj9y1{SO_fVe#ZbWq8
z@;koOUAbFyF>%npy}PA-nMGE4YTfBzX%l*~TbKr<MTA9vgTFnrlw_6qn{EmksW82<
z@&G@UX5I;(N_}y|Mh(KVyyd$A7H6daR`}csf6_uwxCch=OT=yZ4trPI0Ol5>EyOxO
z&o(T>C*U^+74y@4=RL*PPNLorKtzhwZ}vA?Q!fyG*Cj2X8Fk4RJEQnXR0Sqy&iAG|
zX-qn7YW%ah7qUuh$q5|$k&fb8pIbljmkE0pJ-T7NU6s$;DK^2Z73Lufnw4oOrrd#X
z<@Y~$wawDOPjS5PMF$-dy?+==+VK~a0XXgJ2A4s=qmTLTKT<~RpV=e=qEKce6Oc)&
zx$)xiO$swI-NjO}JrKa7U}N^5n{O-XE(?jMc>)TYQFp8kk3BUliLK<8#dtQ^C*@6G
zq;N1|{~o=$xF62dUH*y+{eB_G$GPB^D%x1&p#aS_2#zZ}7<`K?GC6z8#P9O@>ARDv
zp}&N|x!3;@h=u7Jn)xRdfaHj2isW8pJYoCOptL+umM_5+X5}R6pqT<qW8q-ptl)q>
z6SUuT|Nnu?_-!W<4XTD<m?tgDJk%YhI8PHqJ--?+YUOd3CeQIKk~Z68uO`2-V2E`5
zD_VhoPF9cjn_s;|r5l}E3CM9h_HTS_e0)SuZl|Hoi@=Rcu1+?ufUZ70wkSw5hw47*
zc)PfEO(+&xrhAE{|0D=(ck}t91x=9O?z5u@iEJlQ9c8pEpuhK>;DJy}t$^>@9$M*4
zii}oT7xyO;e_R<f(Xd>j=H|oW4WrmHwYaQ$L>DgA>*VKFYyWb>JJ9X^_=xmaaU)ps
zgvj~1HFYz-^Ofx^BnmODj=3h_ePWmR>mMxtA691V{a>uS`X5#<{2#2W@*h^7LVP#N
zo%|0g*X{lnD?hrM|6^r?|6=9C<*y4tT(_^Gf3R%!->_^26dq0dA6nM^N6Rj1j5tcv
zP;pcjoURZ&ZU#CihW|fMUK!^#|DT}ji)U8g`~Cu{c@m#MRcBPhtvO1z*v0VKV<eXt
z-C-r@DOAgj&VyUixK|ndtQA(TK^eFhqvsM`6HRU{7(Au^uhC3@U@^9pqtEjDp>{f(
zwqOhi3T6V7ngS<j*$1DwTEUbOuLH^XV&Vb^m^Ex=6AMja@w-VpVc8$MLiM*7dX%3C
z2kJQ8jR!5!)7syLtK@8}Sn;HXMkP#LGscd}1o=75ZAJ|6KpTmHDiyXWyt(DNJ-o8{
z9g)42)4{3ORUV*jS%R72uW?0tfsSfd_>Ba!Yvv$!O_^rI4KB-)1UbWyE**x{+2Hp?
zmjTBX<s=@te3BL1Z{(3HxVQf~JYqnXD1A1-MiztC8ZXX3iA3F~Kq^JnARyO(!gcq3
z=JsIx)gk1=sNlXKxAWV?qV&F+vW_I?T3DXAmhB6e6+rM3a%S~?<$)uiY>+KQx=A6R
zEa1P^rvJD0SgOp~2%D{Q@Z!(QWv`7)Pyw5MVLT&NEa)nsfl4?XxdBRnriCaPk*Y*P
zP@lz+K#l-2Mnvr{Lr;MwkjoPK)`IUSsKZtWHOJiVs<)Dn+SOWhLFuby!GEjuDrzxh
zdJlnQV>mOTA9TZ*xDTrZ`n^m3l#4XhU2ILQ#I^T~p9x3>_jGV$f-PD#)#5J{aIyfN
zbuuvPtdkjL8bUiI6v-6nEsu&Z&p;6Q!;6ij<g;Y-Rz|B1H^w!**0X7pNekAUVwIR8
zmqNM+ey2v44<%vnQF5e1yc^$7#!-_FofpvWt09uG$ssk7Lc^cgGI!C*E!1)Q8SHlZ
zuqF##>(s{iuYMxzdP`{fE`s_l`d|G-43B{g{Za&VT}Yt^)SriU)6a~4R}HDent$~Z
z;`f@Ox!Fw$C1b@SONUIY=QjY{Pu;QN(WNV)I+q9^^{3@A!jC1_l|`?6<EBvL#591S
zFC(_U(md}EqYVA118O=HU5O+^h<LpP=u858!>=prV|9`^2Kr~nlll<V!<;OzDh+;4
zy4`SpE9H}CLEBm{73d&Y@A#9ZepJSjI4I2wZ;}EdWfDs5tOupfD-5zRY$PicdyvrV
ziP$lCur4j>FdyT0e@Zg@A8h`ozo&rOB3EH^;h*&C_s)-M*73=Ib@)*Zhbn#eo;Y=)
z9NKWb47gJ2%Ff^9u;}ej$_Q$p-Sk@X%lDbxNHOF68NbNOyYXQ4?RJ#V7T$2ZQ1tA)
zVFxN62(&J+yZ5J|#CB_ZeMDGdBnQUg4t<e#EaF!-rnQuw`4Yk$4$qHTFMWUvWz7xj
z2W%J4reBw-_}BI67dqRuJmrG9(Jct58$&PfU4_N_Ua_J$W%e7Q(^|51N^YMozMiU+
z0*YTzo9Ph|<jMw%w3Z3{aY2caGCAvX%djn4H>_qfj>yO)r`uCH?Gx(q4Wh7|1tsq^
zbgdIV0vgo38!)1=D&@7aqcMP_T)Un5Y}UUaSk_}Ri|s?r=8*Pm63rs1Q^WKxi1kLv
zo?1n<vNf9K`-upMHAD`p<}r=#woF4OxsLs{11}%$_j+Fp(P78kk;@>R_~n2-7Qu`S
z?e=704Yg9E;GpCE?b~PB^xSN@=4EbvoJSApsMfqJSymj{n}rz5jW#gWkleIlHPG_7
z#9A*U{Tn8Og|P}2*9%uR-Fmj{2i5WOwjt4HQd(?SM+lJ}nQ(*IL*apgc`-pr*@)S_
zryCmU)BO^1DWsropwR=IlUP{;Uq<Wch5}Bc0<wGvzIQFWW>#Gg`7K0n;I7}Pb(S%s
zw{2SD)VK*$K7&^3-%;R#Ye^q2=l2GVLewAlp({AsIYd#Ns|^sE+TULJs2%C8*6aq^
zN47Y8TV|I>Szk@)5+e$^{};*F@c$<n1^$m@L{<5}N=Bf)3HTqHG4SO7RWnBN{ZGyK
zza?Yf|CWqVR_e6gnWI1dTQbh*L8Oeiry+>z(3V)x$M4tk(Xb6G59CyH`xc_$#KYMQ
zK<Duf#1jXnWNlvqCaCiE*onV|dqnt!6BMN;I#xeqCXSH~v}ha2U<t(vy<iyFUl2+<
z!=k-VJjrK}f}Ax>$GC>1HP5}<|F)5P(swN-wY_@yIRdV)JNeA>lI%<N+>wz<B9>Cp
z=(r!Ahfg;2!&E&_A3?!l7g(&mdH|n+{tpd@hs3t(e^m;=l*TlXl$}LM>e3hqIkx{B
z4ICUu<j1=H`n!*(n<L=m_INY5uyJdym^4XS<T)NJi8NzGiPqOENycSSBzYApsCI@a
z4`-PkD@C3(IdjbqfhHok*2u8)MUYLN_d!LFf7Ov2>LM2OuHPvBRnbJYG0U1o7&ezt
zLqVvnl&J`0X<z}PEmpZ<LuwH$k`O2R5ElfO14RZVsH_6~!tGa<(v+vXw9r8t1V}-h
z{RK$(E8?soJRT3=Vt!bIhLwIZ@7?mIhLZtntUBM0h4^twlqZHmP9M7ueYn6YK3()>
zQ}dYJB0ICQeV}&|_vgEob3GjgQN=U932!e@2|oj{JUo2MTVr0;)n7j`86KqiO!l_#
zWA=XOqA6&3$bzK=$s{*Er~lg3W%^bry;q3v!Ovvf%a+*XE88fQTZ(T{p>^TYEFmcg
zyc=a;023%GM6!=e_>!fupKugxu+pS6j-T1dphZM7A3G!vX9{<ekEsWbWLjc!x~`k$
z*Ly%#XXnV*N9x2K{nYu5PkT+wol6q4Ldx9m<iBmE7xdlT!lLALE4%-rzx$l9W0RZD
zqqF|W>xhZBJ=DA18xZClJL&pNhY5c%aKpT;;AyGZf1zs|QbEmuA;+1mkI5M#7Y>At
z7RiWGiU@?}BhCNXtvUWF2Z@@9j%Xwm1xTakDGxxcJ_;qyVD5_9jm1I~X~w{H?~(i5
z{78yJ34^)U`#T!vN12yG|8?;uprXTJ4C_;-Bto-8oez7`eVn_sxg|3+8rhxCiaAU#
zESS5IALn$FFPQIy_i0e@l`r@lZQuX3Ml@7l_W(R9-lW+c{c7+=02{lC?0y(j1zvaU
zKS2FFZkoHI7P@gt3b24TL8i|LzoD$UaG}&AtX*-zgL6UhIHp%Nat|HOqjN!~*H}_R
zk`=$3BC6)WJ<Tsptdb)l##hIdN`cd*uglBJ83nTsqVuaO`^7J3K5O~AGVMb_t-xhC
z*L)!-Is9fgYm9=VM0DqXkSLugU=54u^WzFYs>SYB%7j)a;R@=Xh6I)S{_lzLsLrJ%
z>&}PsOWq->6&;dzsOn_v>+>lRD^--u46U%u9JY_z7&JyHD*2bPNF<br7^F;^n8|zT
zP>}M7u^ig;cGLZm5sV2Qi))rrv{e3NWJ1}JZpDQOWg$rTFKo&EC0O4907crAXs8VR
z8Y}%oq97heh`k*6pz~VBI&Kg3ohdo@e&{!tDJsV3Sh=_&I241U<P+il?vtx*A!cd-
zM18{P>2GXicLBiH+~>u|pdizvpU28su-dk;m|q-zB8jh1>5{6KnPM~>m3LG!PmCA8
zLxga<_ZxI5Q+&YPTnQ1tG%29p+3Dl{bu+i|P|{BHImMxQH|~F=Z=_}QytDT*h$IOO
zO%deR)zaGe?(xuHfU5$yUjcmQk$U7qr54iPS#JyM?e`@wBtBo)@LtY7GcmyhKOdp|
z)&*6-w<?I9GwtoS?O$0dt0g{v+|P9hb=tny=NlM&v+kvL$dUjcg25>~lR?bUUUml&
zS{D3&LDd(b^m*wlyHV4%spnEGWeo_8(Zm#VX{ePc#i;`_&FmgD%LgCuWWo$AzoP`c
ze=-w?uPS`=r>NaBN~(n@$_hqf9?_Y9W75z1wrmKNMJx=HU$@@vhA77MheV#*j4l54
z0_`xb^qkz+l%oUq?nnNjq46wprD+bn9?&j~FEqsr&p!LhQ2|VA9s13yY23x^{dDEp
z|33MmGga-1iuLrBn2QSO!7GEdb3EkV6=l8AJL1#v&z1=3@^=4#&E8RCV7(VkynT~f
z^2j&VHB<sA5`dY9W(yb>(OGFwgeW`4grwY5(Y=!rMKuSs;nlU}Zly#cW~j3*OHux?
zt{S-4#m-9m-+vjSkq_CT23rat!;7&LZkYMgztr`ieh41s*NxwOUAa%@b^|xNiNyGY
zgqRMDl@VcS<ktKN$UC6k<klDbLM$v*b;cw)*hmXg8Z+v~x845bk2HC$)05#{{3yC)
zb^O0aANzr>V|m-LE^Ld8O+_}?8TS|d`i!MGNTi^^_8$h*@$xMeY`v@uaNDAL@)|QR
z3!xgO*ahVo92YYCxn#$R^5LsA+g>0_#3DZ{eD?;Ztt7u>qi!~LW=1m|pouOJ5Rv)=
zNmeMlCB5wtpP=`-_?EeOc>GvBoUdPxkDo2CV6Fh7E<$|7tsvfB2jmcN7Ho)`C;g+f
z91AJQDVD;5&&w`?*-H{i`^Uci?4`h^9Z<?%6mGxzX0%HpLZrZg4+r4-(Bo)(!jEg&
zw;r!+bIaS;qm~!nP_A!d=WLHNTGZ=<Ues%2YvYgTD$rSvhJST=Nr)fU3GRcAe?fS4
zi4PE55)dH9Zo+TEhwuglek}F&?wkc~WN$3B4}0&NZF|^Xn;$(-T;9|=N)7)zr9HnP
z_rN7nPHaMiN2r>oP54+hM7O7>z=DFMXG@`&?}YdWNPThmh)}%H-o2MMnR;@Mh%x<~
z?V-^91qJ=WdtsaO_F~_V|0#rk<STjuF<|(Qhh0*Z7sc=?*a1z&59dYCe-lu9Kib#)
zth|>FX#^3Q;5?|C-pFW)V5C!LB<DV2U)>Krj|{IKhCbi$W9>gh>2E;bW>o?I<@D~@
zwwEnIuJtXT^GEvE5_INU_mL-l*U2T@4&?xZQ{dXK<vV&#k5Oj=D%eDE$zK7g=Rg>_
zArP=8J~C1NktQyBe(xUp`o^j-S2RESkuGMq*z8ugp@$#dXSlRbdTg{TKS~`{@{Oe<
zrZi5_Gqa;)D3&go5?_)KzOnx*&Cwy{`^V#S;0-$_8;(5b_=Z8ZkQ4+x1=aE2@^5*F
zEEp*{{6YQ5r7;CI3TV>LIFXc&34rSZQ7`I6&^$Dj00({_d-=;%Wd4t_;aPj9@;1zb
zv)?te%zHsxL;3LgZP&8A$XPVvkV6_EsxPikNk5@*WRYiAgsUoGWu=|Gd|&Q9?M^I$
zL`cCDR4-@_Gt{RIhapaogh3f;!|R<Za_7#*)~V9zZfLAlGOKGVWpeB(qJYneA2;1<
zfzt*gBb|zDZXw`OmP66Y$kIh$&I#6`f>qu1d9z(OVp$J#zwKdv7*=j#*Y3wVgmb|z
zQ|EP?)%Icux#Aj02Z{BVz{WIuE3LU5i!<R9&ngv|A*bnKrL`@3fQA~XA>kcm*iq9q
zLaXJ<Ay-pq7XCTi3(-^*#|I=>>P#ym-5JVJ!0rbn+GWiW!b6~|%*6J0n^#8{{j^Av
z79>XIkwe0#Dpfk70VxVin*zhv9)j4=UEefQNbxGZFWi^6I5s|#R8FK6oo+7^5}h>u
zC7pnbDDgUtrko%}P8pac6W^*&I$CZxB}80d63``&P=UaR<`QCpnhh8U=Xh4nSBB+e
z1ZmW(M=Q{9EbcROP($f)6)#f2{ZvIwO3{;oIIuR7a;-KK{aQ34YNl73iYw!Hc7P+T
zeXR>v*Rgyn_!;T-Y9AE;0*Wapd?ct*GA7Gi=-C;@`|Pw>0BWSq@4`t*>}}V*7?nQ&
z0WmU>pVuUt5S277cn$;<tQ6p0v$SKL=GpL}n7)OCNyp?w(tlc&U8q078@1N^4H52}
zn}+!Q44+T=4J+)Txx+v~JT8E6&!Ml8jx3($eLY9c&~`h?=QsYK29F&HqoA84O-GnL
zSW+4`ACI*#)#}H>^7Sdn8g1Yw=Q>P1h(9cb%E-0>k4=`ETnH#2hpTcwY-8-9`-b{`
zf%|TKQM68k`DOd_zfcGtV{u1O8v8J<_(~1-Gu>9b&T*=RsF7VravEF9GOM2DYAwLN
zihq&<Hz2|8D)P>o=%3KeZ*}HQ77zt~^D%kP_HKP%rIj>IU?Za-lE^gL-7faF?T{L0
zAyk0${JaHQH-Kd_E{eKYF>#Z+(z-asbn65YU<{Z3DAg#b$QF_073UAPKoe0v#Ws{6
zrYh!_y-j^<6bU}rFoVKX|M()F(OD2%opvux&pm{S?x+JJwB|+DxI_#uj9CkfDfy=;
znSxkoS5Iu>Svm$S&!wgZ_XkCE_^i$V`Qr^NSUVM!2r$8-p5Yx-LN3;=0P`c`kCYZ^
z*fB5cJmQK$VPfLEOB*LVQNG6VykPq8lc-WZA=-}wwHKF!hTZun#rnq#)$aa}P=QOb
zn8dijnFfnZzpL#XT*kQWk&L`A((HBn=k>9=bnQZ|_LOjTtwZ7p5yqo07T0fdJ)x%H
z_H>Mld4R@oGmbR-)C3%H=%!tK(-DBQd}^-qmGlfCI;!jf;m|0poZKiun@yb^o<qCX
zPY}wPVcHWY7<GIrAPPE-N!9Ux-p>WfbLl9Pg<>s#3(Qj|e^KGkf?`<;5hr%#u9a-}
z1r$*6VFar$F%fb?!diIWA?i+hph{;UbD+%31G-nB2O}2ptzB?W?cX05{@N00WaW2$
zi57Xj?Z;a~p)Gw47QumM1j9C3YRTbROiE7N`p}*pIIl8$vy)EpmN67hfiLowxz<~}
zY!2r*L~rn^S1a%%f7F-zZ=>ic%>6T$<K?%^SfVJ&%Wz|EEyi<{_+W=dM50#;W|PVL
z0AeX+F3?0Jqg#cUw3wlww-+mOIkWxyA<SB?=&<=qGaL`35t7CBX_|;-w4G8GZD^c4
zq;Mi1WU`bf7|Fo!dF7VcDul406B+Uylo`Y)aMD~D>A#k4INqqFl*2*&L&D+51-Xu5
zkyI3gZgf_EQMp5>w4&T*+^w%g{Ax7jflI_!#6#hcD}I(B^g8?29NT`+#y8qMGIj>8
zxF-*4*zPH)D8KlnAS9gFfAcVM8%lo5)24|Cy@+F?{+g(2lsuUL1(DM`-soS~8$&c3
z1Rh#^xgGty*vScV>n7zQJMkWps-wt6bk%B&7PsE8;-`gVs-EK=bt%e1E0L}`pmXyU
zLN=eqI<0Ihk0ds)JG^`BXd}y|5jr;Mbi7o%B%_^A$vMYad9l~ww<t)-^JD?zCn(Ak
z<%@n1L{FR(i7e}CkL+al;%wWbCd(7(lxOWsZWFi`_wxKLFmY@To&|GZmn`=XV$694
z#^zjk?#L0pNUB$`$+{F2NUL-WBt)c1|E>UML_<X;VSdWKJVCbWKUjJs+i~GSfJROq
zEZUVZ0OF#clyiyw<NG|x@(ai*!`UWnK^2l>Q0m0m35^iHp-VVr%z{XkcQ5vpIb4bn
z=b^l08B1Ae)fr>W9;$`p^spl-h~U#ig=j|cSA27u`7RwLx&BKmiSHEy5O8H1hbS~z
zg^V1XOY2#Xg^p&*wDv~k9~1LmB#ScsxepCHW4Ky-)%$zCb(YhbHf~ZKJ>XwH_C&_U
zt;1H4SwxWpepPiSoIUE?Un}icZ1@Q$zNkT+edN}yoM{;hvFx13);$|yQKhNaK!#)M
zC1{fg4m;cip^Gd5*>#p1_)<P<v8{dQxf1_r{@b)!&l6e(D(fqaipw>Zd|O`}3#Lbg
zFZ(O3T8nyol@qZWsxX${U!gQKhf5udlSJ{bKm4<__C%OTBPFei2e%F(?m(A!!_u%c
z^e1?wf;Wk`482pcdvh%t6qkokBD%{suB?WHE${hv4UuT_VCnQ$K!PK8NuPQ_j|bbj
z;YgUXHs>s-e!=(8o^jL5kfy;1=2g^+5b~#H3tM%Rr9Yji!@mJg^X(`TM!P`RBl7sy
z_KR~=9iuW|gQzv3RJ_%3_u*hkhA|G=z;SRGz9vz<T=_EMZzj3}*j%WRS=$cf+^qc-
zu?j>u2*D_?m!PC<0P$<(Bvtt8iP6>oWxyEajtCi87e-GSW6YCtd*Z0M-+Y$J$bjkJ
zBXl4g-aNq-M?<{(>js1SI^Bu8;(GfHMX2Aq1}^vK+<t#*Duxs9%}GOvK2?{$xM{1t
zkHB#ITKinPVlxw;&ElRX^x|)UWOB?1O7i!llwbOrdOm4LK(Q&RWa>8u*zJws_PHlL
zkW)UxW>|&6G-=0j#V!o{-nomlin%k$o*bM48Ju%1i&}?en%L*v!^1uK^bqR^J1_yP
zB&u;VRdf2#yV$wRim?j!4PyV=wt_zi+K!&qQ$HCMt{5kIqc5FhWWOci><HE{*)#I|
zk?zUAj!D6^0Ya9BpN`y9u{Z@B;CTH~-0-@uOFg$H<>$j<quniURy;y~c8D%b^3IFx
z-JRZBBQ&unbXL|}P!&7q6e)`(LZg;nC|ZpAJp7&Fwx<af0c9+AkqWex28GE?h$1g2
zM@#v#R1%)4$>eo(fAP%-41nseJH0e>IV)%;vY$R!05%3E7EZkHPaga7On?rruNno$
zatz#8NoA6sktmuJThq_OsGWvvF`($fORj8ptrRvL=J@dpCFlh%Ku9`U|5@{XqL5Mr
zC=G$XJpN(mVc_b@g&AbT;Pf^eCVy?0bVv^KLN&8RbL#O?0;YKki<E*3qDV<NOz0f%
zqqHd&P>C!rt5p{aWm;-4H~$nj0Y^V&oj7aR8ilTawt0ydVZ{=U$P|I=r@l*R9(xJ7
zBsSnoe*^vC80=<<163N~aX7i5{avrVDtF8XloaFmKz4x3t8D2_*3MFWm}8|t`VZ0>
zPm$LNhlji<f8K6PCq{<nQGPJAhCiF43D}Q*fCf&!*pMK~R-}G{b}BHRs?RDYxDid9
zW5uBtLV)+#6jj^<IUcPUaLul&kjcU$B}YgR#zhzv#{Q|FMEyJao(RTi0~aTQrja?~
zTM&clV7TgE>EH9gXaymq2=XOc^_O7Nyb65*_Bn28O1ykj@hT?M4*48k0xA`2W8iEk
zK!PE(Gb6L$kS7(J%x4u(O(<t|<+0t-Nj_%2G8|bsf397zZ7o{MGTRbjiB&K6$nWe5
z-^SY>-G+|$wK0aY9jBTDfd=<r3R#<0SikZ5s@{%m7Tcv)-R2C%aqj9(4ebV2?=jS)
zIp}(p0<E8+7CCd)-CMVnj248!RX7EQz!c93#fwf$j=HHcZyyfOG)<e-wel)5p#5#?
zEsbxFp})g`qG%|JpH2Dbs$AX=R}vI^a^_dm4Vl?GJpY#Us0FIrdUKa%ejH*bd3QL<
zL8A21GnT~#;uP0yxY`^9*;5{(`-ei9wzASGyX_E(Z{ZGv<OpUc+NyN_?m-teaIbI+
zKe-9QW2zwOrevKULq(AyG_<Li4QrnHDk;z-^W&zC{#aJIRMxKTn{f2F*^q_+jUniq
z>s%d}oxsx4tLLI39?3CDq3CV0BJK-_wUCHVra}#Td5$sZuRswAmoBrc;&_wxk=)f$
z&TKYFlamsog&#Yui@;|?T>8r%KyKI7^*3o^x%cY5G}k_{R^xW6w}HKa$e+88UD5jm
zbNwV7B$Q&>r3pFtaj7_2X|}aP;llFcsF-)IIV*$1##kIJ(e(yn63!N<KG@$pcQ&ho
z$*(c^n3>G0B{+mFV5A=P;RyA?%{)aoild#d4pN>;pai*d8{zq3y6E)}pkZ3oWU!fo
zw{4yy@qK-)C%o(#u2iGs$B{s4>AO|0Co8y>rpqgLRa9wMuJX<W-n4%mcwATDnh5s4
zZ@U_L4haV_K|>5}q4`Ya$%4oiP3K)3nZBz|fqsM|4f6Hh5HJ)DKQ-p0KR|*&*1U8$
zren3f#k8|M&8eg;56}9=07gy5$;L#%XA%>jH9<7n{ixrIX~NWNxoVBhU>9Oz)@aB{
z4j}X>b&eyXA95q7)T9WO9VWwCj8XlxV8z*YD+)^-PZ#1ph!05kIvt?tqugC`Qq>!~
z<mMg46AR6L1gmAW6?l+tzj7E!D`wj1^5b~1>XSb8WoIDvdKz@k01D73h*Fj{HrpKd
zvMl++W1q%-l1k9D*v)%kDFF*n#dvQGYn>N+PYzWA{Ege%4H-1ida=dBiE9fDo?<Z>
zyIm!+yV10yRfqX!v-I25%{|!t>cdyoCE!0l!Hd$IW+Y3tXRzXDc}*H<|5e#iJi{Jf
z1PcA43={LBGVjOf1We)hqtmC?%-zCoZ~f&SqV-Ht2gN^cSv*^lgN2eXZJTyPbysCQ
zo}5tBiz(_GZ68}xkEX5$|NZd|Dw)0-1vh+7k{B@O2eb5(822emO3>k4)u7K{*}2(s
z|2^B&u_PyDS3`SJsSt=+FF}uXNKC%BI2LvqwSe&B+lw<NB@mGI24;diC$unnYSz`&
z*x*}sMfV$xz@)I1>ZxD<9Om#kf;xu3{>8{wW`+^vfl}(N;RiPc3D4;nRxTWrbmQZ~
zmOS4g2Gf4|%_i<3>qn6u0#uyF=Zhs+!tV?HjPKh#w)5ZRdp@2aE*O1HBsD_XviNnU
ze9HIJFUWJV&jIMpBvq(lF9n%IPMZZNerBUOL*(P%mqqkG6fS)BD3CjjXpR9V9@o;0
zT)AiKcglbkGiUTlqHFAIkQKL6%a;GSj~Z!$(1cCj15XGen`2|p!y!SLz=cM)mlR9*
z8p?0zERjTQS=m1?I&uZ-a+&v@@vS*8i$Sj6>39YPp8?irsz1`uP?_A((w?)<!>kXG
zwrB|lqihX#nzHy{DKNMRw$AKPAj#CBX%c9gDqwD;_NjA0@epIYlnrMc(1n&p@^)o(
zi?VwS9B}5G?2(C=+8Tdpz?(ZL=(LC8QK;skix)5#qKnm^Y}u+pEDEgb*s3@fI5QR{
z=4b_gZ-9ISYysi&G#?Y*A4^Ad-B4o$pS^WMpIWTj;0~8SC$3HJ^>RHCx-CAIBdHM-
z8xQ@^C$`cAIFHUXh18=5KP@;%Y5gmx3v&W*#$0#Vq@SBJIz!5&l*<_l59}>Ax&nw+
z$6x6LCKeq{DI-L5Px<x}WRo<$FU_fElAj02>wxU8)~Z$fX@brvgtp5Vt#@w~6&_Qt
z{hC*wg_uhZZM|u5#2GCddAKVs{@(;hQgJ2%2kpTK<L~kT-z{J>VN8;hY8700c+G{|
z(iRA|!-s5luLr6lC90oBYzTcuxu<kR(87t_-wrqvaDMQQFdc$GSUo$yw8Ft5KAU&0
zUIRC@f!rY9V^DFeChHASpAlDRF|!|HyfS5YExKCup8qm>5q375**&R<V0MMs=(~q@
zaA5v{I%?<Ez0`hvWc1<R8Y-(E3->fbbQyEcv=PrW$7*Gq*J|ZmXXWYTk3G|o4Q)Q~
ztY+#5+jcjwanZK<7yR5?I!<ZYr&Y4k`~p_iCvql6&pq|V4ktv{COpTp$za%j{+e<A
zzSd!C*ioo5>3aC0>7PfrS*|lx*gTXdHOuz*7QPi8M5$|lGWi)P&_OPd;9yUFsPQA>
zF&ff~R5_^DMsFgDZ`$e)*dm#AtWw1s`51F+LlaxO=m5<*TlM}6Wp3*m=`h{++6a(|
zQ>Ah?be+lA2GOd=vO$Iv#R7*$%dVwtG>|e?%wG_8B#V=sq2i|QvyDeVb{iOi>T?Re
zbKZaF*;iLXkjqX}Wk(jK;eCGWcWt?TvSwpqK+R&A6ZYFJ^)?zssDdYijX+HMO#gz^
zr%i9WiaFl`Bc6|eW`WYF1TQ;>L<Km~B6G>1V<~YJQ=n^3T;!~`TbIaSQamHG(-vE9
zXwk6iYY-=wZ-&XhWV3B&%lWQyh(l(Y!^=|aFO9439{DSMt#Zmk%Hv`|N{6xXpqs-Y
znuRo(7c?_np^^5ahPc{pbw1Z}x3f__OJn&%_KCffM@8dO4prZ`C=tsEUk+#-3w5sO
z=;>_%^Nq@DP>rJSO4m!Uv)MkqO7#ueJWMu<Y&C(1o`X4E{GB?8bhrnixP!T|#vW<8
zJzbRb66ms*9)uXTKuxV*QBt0#lML2akyY$Ck{`zJ$``qp)D@@#3a4qKP{RZoVun=8
zAIHsXR`5rh^qkAr=F3SlKofX`q^ESC$WuVIYqrwy44^r2@-4f$ez;vsf}5j2JxIH)
zO*LjLSxq;p2nyW5Jga2b+%Vy|X-w?k*kWJbm7lvEv`lup+un)2wu!pXAtiKGw?Qw$
z7v$|MNHHHorS!gpew3QbUaUm*{7E-Kz$k~A&mewuvyYFgckd$LxDPx^*Xd<;<lbRd
z{~RO6->cVBva?`(fmpdIIexX^Vl~U3pjUP_uPdhWHah)fBJk|^a;a0yGw!Y0S7Wt0
zRwWyL61`~ROMj8?ND<DCQ%2Y0)P0;j&>lzKp+jp#Q{Z{{ae3KEm|Xb%BsbGqU54@-
zn0WGpC3~U&>rooNZ~&m)tcUWUNdQl^9f$DKD?5Zunk+=LPiH~mP0d<&#e587<eboK
zhv_9p|AbFjEWeqJRHR@*1jJy<FL`uNns1tCU8!@N=la~yOEX{TPz^7hs_(WO*dEa$
zGkdI31xu~y*A%cvl@x66rY%hlPA-1<n;u|zdehr0Qu`|avmB7MuDE-5y0d&mgzI{L
zh+(mkH-nW?5c1^D^-Ot>bp>J73zEji;6nOA3xh#)&06lv%tBWka_P!<L@K1=X{iM<
z0`dw&OeriBgsqTonbCSs1IxZ?jLQ&<j+>E+GJkDN!j8Dy@{vH^U^5$1=|UFF{k}1~
zl|lQOeZcVGX9$$P9`x^Wc_JTo+Yn?uN)u)40Zvw2_?_*aru9>+dnIKz85jErf1n{k
z`l{2dim+7~H$*dV7RUNp7!#zUypF5gD?o_zLab{W7Sg6)VsjY!duG6gV=^QU?5K@M
zP>Ne>c<kQb=4C@DrKPy$L7?{2#1XAYP)rPpw8})3&;j;afi%cI@IJ)-*JBlPZXrP0
zQVLZ%Q~=IAPZ2y@zOPatGPray<}??|SA>4$vX~~WyBPVWQ>OaPCpVKpq*vR&YBu|Y
zul_GzrLQMKzxgkuuN(j5ulFOtt@g;-*MfSl<J{&Ptge55Qu70@&U)VR52KIN`(HGe
zu-PFau>n?E)^M+5HsNcgv3KiT*B)?F>uNPF(LzD6_&<=lpmZP0<#-W_=z=RU+=S>(
zi(s1Ke(x`VI;s_!du!N|@j4;B<3<9cpG(&d?XNYyHAfr}`*l-qD)LHL$ql;S?VILs
zbteezeX8?NxA}O_SLm@zVTSty&NwFBB<P(E`T+J5ZmtiCv@&!yRMJ~1)WS(lFYx9C
z5nhq+j`y!ohKlfuY3G&Rp;4XKGJkG=kOsmMo+ve1rohx6g4<p33zMW2mI#fzU%D$6
z{}%L?F`i^EYfcq#xTBt~7th92L$wHPkL%;(T~|1*12-Pp8zX9Gq~!T=0`;sy#0QR7
z76}xL1gQ>-!SL0w<K@6mQCIBSRR<CX-7T*<4T5!=IuKJWyBPMve5=xjMgNYaM!hCx
zM<Qdha4J<=$!G=shp{dsf<t1dh@%jKk&KKdKQOFkJerwk8|4I&J_05S()>pIK${a~
zk`p3wD6f;DiCqA}tErI=X;GM6313C!=MgYi6v}+ulISn1+N(9-f;nfb(|#JI$-!w>
z9CDKKr?Tzk`_Pw>58NP|@|UtUcMJJ)Eboq>`T5SG(RiBh=ap9fdtDkOt{sdlQEm7Q
z)oj(hw&QQ42hJ4RTJSXXx88Aw4(t6b**M&0u#I}?#j2_w*y3|lwEF?EDlhk{rHX*@
z{4c(<@Deibk}HUWq9vMd_nzk=A>#t7gYeN`In9qV$^}}?lpau;EZ^yu_F)GtanruE
z8%J3RvBv^;@8r6lHk?}?-U!=B>#@3cte{|fmnt>w+LrfOS~-%32$;V7%L+%28TOWD
zOvMsoKS6rihL+M~%hNRW_C%5>x$=ST)_v6*GuGeMA2+-0n3m7_S!hKSUKbq-%9eC3
zQw8qJ+*S$E=?ZaY=vq4-E`wQc>s;2eEOJHKC?wvdT&B9#-P!s`GkFuz`KHk8#K#Fk
zVQu(7S+H7s@B+>R5!-3dbHZ-awr2K-)2QXGbfoaP(UXHAJjzhNNN?ZjU@U>hSIE~H
z^5A)1ZSTl=Wa)q$u4I)HiOQj}zql~TG3eq_)GAZ1NP!Jp9rwI&O?bC@P=i$F6Qy}E
zry!PrNuS@`c;{r~otcM5M>3~O$5%|*nzGK7Bb2#F9PA)T2bHvc6f<zCFOY`|rQm?*
z;q(2LF3*;9L0A$nTPrqJwjTks)>%ISOzu){tag)V5X53Si!(Z?VH`v<5+IC>yne?2
z_<4CDAvJy=au~LT8U!T^;c`ScP~~_r8~!jU$Gro8jfu+U-*>(Y6=(D5;DtawGC$;o
zOLr;{cL2&?qrUTf&4%evz~xidUs*Z<#MP~y^6~dGfh*2%FQlN7=*uS%NhRoE>ssol
zT6h@+K8*EcRHXakiHB6?0W~NoRxvwfG*-3&k73Tz^cz>?fu=lRswJa#dX;6Xs9&Gb
zwNJJB8`51>zouyq<C?BoEvD8$?t=dQda}761UCU@Vem=W^Oz~Ks^6T4*zc_`kD0Rv
z{p}>}0+>FU|C))6?*zUa=;sMPTi(Fl>1J@yF&Y`0j!dP{rcw3L3)D!E{~Sl=-`h^+
zhh1-mk$;4a{(`4u`vwcW-E=mb{duVjd<8q^iy<9O4(kdez`#j^mp9A`D9rt9&qdOF
z7b)byqiZQBH&WZQ`3*(FpY}I<HaNHjOI$4Yy{v1)oA#cqa0Uq4E5$V7$1)i@P>+#B
z;)gI#v1G{*OM5e-t|abHawCL9vZE-0e*rPB*@vrHj>s)z&oce^kgVPRPZH<UhVqy$
zINzaWBexY}Ht|NI%--E$WrMCGYh_~9UAaXk<0AjMP8}<u5xbut(;b5Gn)Uf;yWJSc
zJQ}s~tdHqJ2++i6fiJ#2gQwm&S1uWV#PT0!Pc0(n?(BN^{A#+ts}ybYc3j?&1hTn7
zIT%nrvh)qif!3*f$aM9D%m?pq+*oDz2w2exT+%!eVGS#@MOJXC9GzAjrSxFe0eH<@
zsTPQ6AZdDwWmyZJJ1A2I`BRsmUdV3CDTu9Nj*zMrh?h$M<8x=;hlXmOkIVl3C#j5U
zWs^|Zio&yJ*CRoRdjl#@4jOH=Wf^glEW8Pl;DH%wNG(A~foo-m=Au^!HSX|(>%D?k
zy->0&+x2fvF5y{rtn5wn3;puhOlIU-yNCuqyQ+D~1VUrii}HNoXdJdYC7qFC0`tE?
zj3KgMAYj3PC9DjcBVbcq_)0Ex11aqL#(37||N1;>^t}M2(xbWu$S<MHTd-|qm4D8n
zowI(tb2H9U`_L9yWfgAKCKwXo9YbZ$Z18=5q$RVc&N9MbxA=~-9Y!gyKi%Ahahk_F
zF8Tk^bPm9o1l<~rZD(U|Y}<A=wryi)W81cqjcwbuZEZH$;O74Sy;Y}b=IfcNGxc@#
zbWfjio>#2j!ccYYGp%UjYg0NxK#jo8u1Udz75IxmaMP>Ln<q`#{&);=^U?7#aJDlS
zg<-wN%^9d8dBe@96f_NFO$7diG9GLB-GHu#xT~enk`m*}&Lqp=ewBS@{S}^B^Ljh8
zCT@Oeth_4|jpm-|%5f_j?m$}dT+RQ+$g6f@6>8merPMV-V2zEpb?6n!Q;ekvj?BlF
z3t$sk_hC0}dzP({A+!4&<(tp&Et(r&B!Vt_pXF03^0Rq(mmuY1&_DZKSt@P5tO;c@
zJ}w*dMI&NwztWCOQ-;Pme}N047Epg=v|+CIv%}(j-bVv3!#$gK<_8AdcZ>$jfS1o_
zE}`aa^*?0a7CmP$8qJEyyY7iQCf1fVAkLp}o60hbjG4Dx{e$`&hbM}bunhaUDU_Ym
zwm+GIqa`2N{e`3J>!_uri$SYoc)c&UZ^Dmz7z{)b!LPS2E2$yO-L~?IxPR(oDdK|1
z$asgNNKV{h=*5&k7P@N#vcsRf{>UkT&b827JEHAPd5xO7%kR5?yeL{0+;!vV0oV*L
z#xhy?%<Hm=v<oe#O%<0Z=WUyFv^2~uwSnRMn=^zO)6}fw9SgU3vmKWd%gyVG1!1dq
zTLxbEnd5pFm$jE<1NRhD(RV+K!Z{c9%Z(9W8y5N*lu9$fXM+8i*yVa^a{3$waSeXp
zlSv9%&HqFdVe0OAsnUGtZZUuXm{4uuY0H}Q(bvONxqqr3G`9Xd4TycfjuK5wlfa8v
z8SMQ0N*@{Sp^m}qk=QW1xBD~*_+D}yeP)S2H>dewi1&tUd8_g54^-OjK;N9g&C^_F
zo=5AacMm5Hl7~;|zk$F#`(Ma`{2tsFP{wtOiL`L^Jy_v;p*x?JIrw_xfNWk4Y1ccr
z?+gh7)+$e8WHjqSTyM(3VV~DfY<qoOYN@>|Hic+R^N^V4yri*{5SKa?UfE`z9kaxy
zjTy;=o+RX|=y(mk--b6jkH0(7JDH-4xib<|%&ihyx7mD)yu70UZs(daT7qy<IPoSC
zs)~P%Wq@UZ0y()#WcceCK&A4^$j3zTorL#75bHXRpGe5fd8Px#$6#sMFJzDI+4h($
zsIXkCK87<Syd6gcv%o$#&6!1Sp(>-Iv22@E^?4ntTRtdJ3cLX6hM~G3#MgfQiRDqp
zZkynSZeruPe<kJNayK|p0lJiesLp&wp8fH)f#|?ZbI}^<c0M8nXfN!rUfiEW@_dcG
zh%R*toRFD5W8I!?@hJ7kwKwqmyW+CE;@^xSX*Q}N@W<dkF%xsbF)c99=ez4iKkQ#T
zJXH_}{|SfSRvNp8!bc!7Qun=#oJ}nqEp^z($)t11>~81iclWe$b-jBo!5VUZ)Ir=`
z9`8S1?{~tt0r<E%<HUkLTYmy`xMkB^KXmoEd;c#W;t7uzEaPo3<y~VlyY2}=`_qJu
zMgY%bZdmiN2{&@GKDQ2j4UNQW+Sax~G;L_dp`8DGbr5UaPd;M3U|vxAv?j6s+5u%^
zzJ^qQ?CKKS?e7L{9ZY%<s8LDcWU8($luXVw8NisEaOkiH638tK>q3BJ_s92wcrOe6
z@y&lHMVtM}X&s%m#!fXRf)O+F#ai0zwjyidm~^!mFR3spaIMED&+_Dlh3?0@7u;u5
zfD8fz9V#0+2bpeq$*D68#9BQRtpzR~RFSr|5p?9fapj{kluYnLJ*2f(>{^bU9(?Yo
zGLYn-;H-l}sjqp)6Q$$P$spIZ`r1_mW~JGKi<({O5z+@|I$5cm47RrtS)yFWa?STh
zx3aecd3;<$StWf&{XNS{D>$KF$N`#dSXrd7+BkTfWiNURpLd>=A?dbU@5lPma?zFc
z_V4B@lMSwPMwQ5BABuGjH%q*V+20jVc7Pw`y1E(rhFb2GimIDgvPG(aM>D2hhRw8l
z{`C08)c8py$HkR(d6T)0dWM~{Me~wtOF8p~no;xbZd((#wGf*n%C~P9;|wpaZHO0w
zI{a%Em6ZQFn@msOS;Pn;Va$2nptDM*Gyhr8K>GX;E*fMN|G_KR<{4wgQ`_e>z6UJx
zWJxVcmX0m<y7f}y+o4ff#O%P)`?xsdg@7~@Ce=N{;M-LBa^M>bsV~hu&A1R)*w@!=
zxuMeAB@ybXE-CpTpS!8k+;>PuJV-&{h3$@Rw|wP_d?lbsiyb%hY+-dfH21D;Yp?Du
zmS}&!s~8ksTegVtf?}za<CmJ!mjiy$8|VbvnRELvEXG*o+bM{L+@W=XIEz})cG#A(
zI41iPXD~5_2F_+AaZ_g<Jlq?~R(tKUUsbz&n{%ttj8E6!#H3|`?N(xsNLIJIjg0mh
z=dc|oRLhZH3;eS5c(zpjv?r<A8BXm#h7?P1-Hy^=WST3rl>SSs-L}eLz{U4v<0AvC
zjg}hzU9C41kKF9vuIc`5gDa_JEQWXb&helVXtLETyBhRZaWzn<XpsUtiy~P)=Psc3
z@>>Qq+WL|tRH#@oa@XYj^|XS5oZ`ofAD84KzDv2hh~8RHxf%wD1At*Qb#z@f^wd+e
z2J^$8bcfTP7;TW>fu7|!Krc(oe&+Y6ikb(Re#YHs&g%l|-F_mge1pGW^eKc!@d<f?
zGE{rL#M>tjSZ>_jyHHeX{yo{HpIpl!i618Arjbw@3<vY$^n!s@B_aub^*?n3zHmgx
zU=>9Mq+#&qKJOI-n&ML!ii$%$tA_-%eQm=Fm#JDV0KK~j<>9*~FwW*m^7px;<3a%y
z33t<gDoF8W0fq{8k74#xhdmA66~ArQ?-T<u5%l0N-jJ#n&yy8fiMZlbnafMMi>aq5
zi$&q+5#nlkN0lY~M$)P{m5+5M%a1O9T69+TxZrjm%X8YDMdy<A(?~gBV<`(;is8vs
z`MnL#l{MvG*e;(mkQ9#0B3-hLZ9vcSZNs3Xho|FB)2qX>Mq<*Lr59BpK(~*2T-%lP
zVSUBn;vGy~cCw$v<1HIDT;Q;W!A!n{E$iy=^}cgJDJ2`KOz(F2OLXPYwxF3qS;s(U
zQQd57M$7?{4tIVo=wwdk_k-kzno7v4{Dvp#+Lc&Q(YV)_0B7JX&m`r!A>nKNEGg57
z?5ot#<7S@USB<~l>cp8hT4FGm<T;L=Jr(g-Xfv~L02$p~@1{8H*!-ehr>uzUhY3lJ
zP<Cl(7T33xjrS`df|_qGcLh)egvi<F9nL6DA#tg!LduHhGau;-3mTjfg28$DOr#vo
z5&IeX5pK=cK;qbF4vtM3lO!0r=+D@`0V}%^#eIYnSyjqiX7ZYN(P0ycA6!@oib6bx
z(xxQkR7INWD!=qTdJBoSMCi_nvj)RP4O76XWo}yu+Rbb2$Ahis<+48xnh$5(?iTC>
zL<wOuh;A4ZW}zpEq{3=PSN09T=3tl=MCfom3{==#f$?FuDhTA$g+}=wH^{}vk5Lu=
zLw`9_djHx=+4%qCBcs)oYkz6r?%yN95{y49UO8%u#C}tR`bt;J9mN>*k{SXhmF_Jq
zCz5^t-c6uTFq+V>J?9$2oXH<5w`czYg@D{tIP<AOwr2UsnOh82wlOJNh*$!~*AOI~
z7ZQmk4M02{jm`@!&&U^Or+_G-G4=1}0x@CX>1vyAk01)f>OQBo*dvd#psS+SGC49w
zQ4AnATzHh1i52{$@_l_0WQz$IkxiSuz(-$PNCl4*$^76UnZqy}N~#^gRi5gHq+BsK
z{3r0Mu|NIxiPyLiI?J+7nkWe+`d1r|Mo)2~Fd#Oh`3|cUhkkF$t8EL0vAIjd;zmfn
z*)SWkzJfVgX7Mus(ga{rS@$TfB%BHp=ix+H1>9mDlL@Mtjz;}$CZ$Pf+hC(ze5u7V
zv=)gR10>1$<W<FriQ^fU+L1ZH68UQ(Ut4&Pay#WLGP~Y95LYv!K*~ZH*bP+u(!WP~
z0tcui;c*f(X)t^&0=;Ul4to}addE6`f3FvgxL>aqN+%xHCMaf9xk#g^z(-SY7Jjkz
zg`gq92SH;<cJ)s$s+PKD&0h%*LTxaYjQxTBC*9MkE{GzHLD2H-?jGyIJJR*Ob+!5y
zqPh-jUVTb(Wu@}PMprJ{vnWM?b}l;-17u;bH1pYamo<u60l%8<SKzCTOL&wajV^4I
zwHny912|i$jPlL<pTf7=#+5|)AGaaWuzpVd9=O0fL(a9osrrZ6k0uTQ@8?Na|J_*8
zT3H~jd?xnZp%%}_AmCN|^N;>aY>RU5{^E^(de=?#e0U4uu;Q~Yk5+NOnHd44G~hbo
zq?G8~kOup;9_g}*_C7U{N#G5OPw<Vnyjk{G;-{LTDP)gtT*czo60(@>u2oMZY^Ru4
zSEAmXmLBIS^J+dL#q+gOa)9<rl}oPBsk1Xb@9?%8LSE#ckPf>i!AyG25Qs`fvF4y-
zIm7`zP$vw1)1~@}oE9ZY*Q_K90c5Dga=ygaTgptf4O-_A#WhK*CpO^#2s&7sfRGJK
zHYd<>b(1Y#O~*!}TZ?as#t;sB9OXY7BM7i?O%|q);eTXvo}yGi8YDx4m7bZAo?6mv
zcm~rvEpQmP;J)0&J1U48vlN082LmBLDH&}3-dvy-m9B%sBlxbNq*CiC0+@IOHp6D_
zQv%rB93ss|Rd^(oxm>(=&8Tt_ybr9-<}8yjjv>I6_Z>ou=7*0{htb#UDsH~gLE+3@
z68L~ydr}tqGfSIty}k$>qSuIh!`l1L4||88Ldk6ITegUCl$QEhi@IRTD9N}OO4z-h
zQ2b7A(~7REDbhR!5-^!I0EGBf9_2k~AEl9P3_qPu7EJk8l*RA@TNqFW3+EURz-$5*
z0QHzEE|Nyh_Emrt&vS-~A0=Dna5i0P+mGsFU4nl&lv^*I0zp&=(n$o%NZMUI^ERAd
zEgwd0kpO`PW7A253iatmoA4ga5f?qhT!{Y7f?d$>;Fp$!Ffj){fEFWxqBb?hM4Ef{
zOF~TnzL8}M&-NRnNf#({|5$>Y708(8%p(iqs?F}xA4wd7sc3bcg*Xn4i&_r(q&GR>
z!(^aNpFc1E{cla|P0K8M&L0Kw8w1;UpOMW9P3U{us%Si$gBB~hNw0tCr4xqNq%jQY
zb;d}gXZ365tWQH0fRiYz)O~Tzs3=Ps*O!1GE%i?PceJA-BSi>)qimxwH4Xud_q?>=
zZ5YHBA}Oi)FnN;%Pq>2Rzk7}>^Lto|`#(uxu<p0rhDv-mBX<c)8z2qGKgitQ({{_P
z;IJnI&B~MDzI(89;6!CEy`&mWbod`P%hiiWoUqaCf}MIP0-WDe$+bRHi}Ldv;=|4z
z3_y28I=bFEsEm6CdXjs4b6@SA3wjXIb*$<&HXt0!Y(yx($r~i@d{Z6^J-6yh_?MLU
zSHReRBxIIYxX2|u5BHjzk-mZy9M>MIr#LJ6q#Dd_k^E_<B`Z!RDxdU`dk(Tq<RK8b
z^({@;1<k`E3TPjy(m~)Rc?L6SvHKk=5^1bQ#%i!-Q88U9I{`8RzgA}mND(qVM(=8v
zITEmvFfJ@Gxl*|b$<m@g3tXnI#6rVdO#9+JQ{~4B3(i%#u=SqTxVS;67Yc<8mdN4D
zyE24hOw|2)D^AGoc>&41UjuvR>5Csj99|RK7Z#f>1u~x<<NS=@jD*k(0w%NtD)(Yg
zkxb4f1rE0qrx5A)R-$~O=8q^(Jx^BcG8X$lzCq{SN!9-nr#ij9T%QYwfWI)ihyt>W
zt~^RB7+qtAJbRgt=hmV&YSFxxe_nd5**a?4mM9|zcf{2~qGpb*@{|XoAw|hnqvL6t
zrz29q0zn`3MX?OUuM3BbrabWbX}d}*0g75F-<Zo>!hg)P=^g6BvEkw9OiK8CD?6c)
zMb0blLwU(!5x!JX#p*^oy>FK;vdmD4Hyaun{)gOqP7a}C3H`44i2JVS>gw4F973BN
zoLZ4SZ+%0swu*#a^Vv#J`uqh!uN@}Bf&MjB1MxGI2t%`$`3<$_yKUx*PfNScTBG~l
zQ`rF!%_|8FF&Zla9(k;P{*R3^jz@BO&`*IGnYOSn7%WmM87QMTk~V2BUie2f2vI!p
zdIV?au3p}5-oU?ywfCj7P<SSo%*Jd*wHT{rwtuH!(AOyb_&ThiY{EE)n68BnD42=<
zz@H}Bx-CxUy)P;r;yIrRH!hkz13t8>6r)gJ``hu=re9N54M`JfX?HY;+tYb4l0S&`
zt>0tc<Vfkm1^v<lmNEWT&X(TFU0M8n-dSfSZ^zFzkqc=n&Qp6aVfBtcp|RsBwX5`0
z38KzXvi{D0r53vn1~rI|x4Th#&ILNWz!sDm^)=kzG;&Z_dSq;{9Zix531_}X1L^{i
zu0xUoMVy4}<*RRYG7N_ji?5A0dh-t_O!B1DvAy3pP0LurS)~$mnYs_B603q3$qOt`
zhw*#qAJT}GDZnFPFb?zc1*OO--Y0kT1!joi>?zM{gCWtIC<W*Jn{M8g&Lb6D04pJ$
zH+6&JG$unoev=_5iBixx_AdI$Wn_85)B!YC@$C6+)x0Dm)+XNgA9lD@a9}KMO_@Hv
zHZ0FpNC_t61NsqdSpi~bIuyQDX*N)s^(COrAuH`U*1G07d=snDovsFyzn^%5(KR$k
zt}J?+%CUledJDaOMZ?&an(@jrfO(WZX9<6L{$d2lL8ohD$a_h=SPMTa4|49Fd-WW>
zVHBCZ|8it`=d#Th;8=HTvxA3nj#t^U@q<UC7XGITOD#Jog1%<bS$g*eNB?pmfIzi|
zke&5$onE+aj^UmKCy}Y69b&x9gJ%Uy9t`Uu8HwbtpKFQglZ2|6utUw+03bmHVKV6i
z5>6pP<A_mL$~Pn+?6t@jGb_9FB3lH}7DNBf^`W~2-qvO-u<q{o3U~cWY+_Mz#ZZ>b
zXA<U7f?EQoYyBr=X4jUVTyp>qyNw)L5qKizEH6bPXxeo2?fpJ0(xGf|b5G~7sgxjN
zLG*=}lfn90=>|S{H%WZZ2#}5jN6o0Ba9{OptqPoX)^u?OT1RjMoPfmA@GzfhN<8Ny
z<d-YeDR^z3#MQ!-PjpzD$Zs7>Kr~~Q8^X@QJlq@)@p~|bR1s=&grvS*&-n$iD@l^K
zGMGuADm}4T#Wq68i(p-zl3D2@$YJ=Dna+l2dB3iDG0HEq@0A7^2LN1xaVw4bdpabn
zwwoRDItZAgLLPL1s2Cw^Zo%U5@QUVhP8o5EzHOKa(EajOXZd}Vr?5fb_guboJ*jD(
zrV<BNwwWo5CCN-WIEK6ozv#Akp}R5b{>|>Tna}9zpWejHRxwi2`r!@mw+$=^)Zj_A
z@;N5EK+umV<zNcn0|;R_P%DJ9ne=YTwKUjEZ}QO7_1UdSUG7*Z*f%<%>lb;X)q`WI
zkW#Q^v8$T+1ci^c^;%KQ!2^kCcML|(Nj^Vxw_6Rm_)$fLiE*QysRt=ODZQ4eYY-*k
zJn4=S*^I(DrD2KBO!d|_NxG&dcjXsqU|`vT_(oPEQp9Qi0_;p~Uf}51+l?ctbsF3j
z{K(BI`ePrxufS=O)6sgl<Toh6)@Jd=^$NvEdj8ruwpLm(kcZfNO&A3vi%1TFtTnEE
zRD7ya0Oqt3&9HyNx}3NtTkvCAEbSV({LI%kB;?E;oUr}7$dY)(0ij#9gU_PhghSbI
zx2O`ow}<k-0TA!^6Uh%`@@n^5+lrn=tlzV39d53>u5TVaUOT8pct?CTX3I{xBj-Uj
ziF(%j4*vWNTeU1=idvO2v9*81sQNj$39n^H@$H&hI{o?!1Ah6;eAv;e2&Q{!i`J+w
z<Q+kXBxDl%Af^!Rv?&+Gj6UBg-O)mUI1PV3^$`=91I$jtDt5K4P&ZvuM8jr|qBjDE
zLHo9TpRFDNo7EJN;B+_1wcP;m0{TN>!xcL2E?bwz2-v;W@@Bt^(~R^a`5j|CG@l9#
z6l!p{;w*=3G39OZ&ldi?@R!mHpYhE>?>xGbYOPr{7Oe0q=<#MU4zvw#1pVQL+1~e0
zh-`y5;P089ov1KC_KX@$9dw0{Pt+~ojQZgpVZe`#eS5A?WpE@`HpL9xdXWCOFKImw
zn80!i-w14SYiGWtUT@n$S^QCI;Fm)a8ueO_xw9A|DIrA&JMb~O;NneJ8p*eqzwzIW
zO<%Y+LF)<$^vOWLopiKv22UYZqSmy%DA|Yw(j0bl-+Y~3KR(_@{yj|KVXF<BF1Ni7
z%t4{`d7DCyoZ(QdHmpATu|n-AOZ(oNKd;gYx+$!qj)(%K4(|B<Ek%x<0~m#bw(IYk
z&3X#7oZ$H+mWw^PoSwjB%a+I5?aA7Ghr{bu%R2`)yxU?qGYcEFw<V>v!qbDk+XFKY
zUUH*Gb#h59%ui7Fc>Su%r6h^B<fMmddK&;r7B4|i4yyu3hmbFv{(Led+JL^z_sSDf
zhVYr_UokAJG^)fz*%$bmF$od;+oF)zDXPmjC76Fp_YT)wf5PFxs@XKR+;jO=f0m^Z
za<*!`geTlHD=rj!VM(|IcJZoCcj*>@!MmdS5O;xPW+Na7E=oxuEfhzrGH<G8p&!6z
zcZfRFjlpF%a+&yTBI^uqYlPm_$<F(4fC(09d#W!f`C{Yfuy2jBy%m2~mmiSYR~y(K
z{7h@U4;h8Te&6{Ao)+MX=G!l5cJoU2%J6P=AuN=>OVV-RxWo6SeE<}U%~b%SXE}w-
zobrpMyz#u_^eSHal?&FVQm1DlU)Yg5ZsbE3!m(8M?+%!32BLH3)MsC{!r8Th4pv1$
z<nj_4iQfZmkrqWg4804T##=YPpkv-d=)qZS`qoUbElS|ywsU-|UVlr#NnJ>l2mF5U
zUmka@r^pE_XTXG`>-oT;tj+`2-cQ#iQnC*{x%~oW6>!$HJg50wV(m<zd+Gm{11d61
zK-m+^t%9elZ7MRKZHrnL$^X1Vw`P^=%f9G|cD*bujP6EjCYZHKWgivs%ofmKW|TA4
ztfuA9(7XDHs+6RU)>*^bG=wlj{$8iV%#+CS>i#b6zs~XTtibTpSUm~s^JR9;tghF3
zF|1+n*048E{bmb1H=b`B(&T|Te^I_yDf;m#|CIx+ZP$=NDZhErRKj^{z-i*6;o`#?
z=mVYTgZI-7u{vGQdRRZc#{%S4K~$nk<TPA5qqqx)>mOfJ%O|_Ys^MyHIAR_D^_Ugm
zBOlp^7xL4r&Tw+G@xvrgM<T=RRb;E;QPG@!+RJDKZB&*ek4`hDQl@0qhUFg2lT+3H
zCc5zjk>J70p5hTSRfY-XfuSlv?JqARxBf5;qr^m$>^}HzO$A0fQ4&nK+^6yv8RTb)
zQDB=R2setnLnV4PlD+-T{l^^kseuu)VkL|83F_EOwc-2Pj>80CbHbY6MaD3M=vwk9
zBtWv9FRj>EEl(?N_R5!mE;BLU!HhJ_MsnH_B>e=Ia4srFh2`yY-;Sb(WJ7ZNVj(wd
z5)T;|r1p!xgyDM4L9<f7VtJwMAlhaL{X?yZ*9U;@R-EAM@nrPG`*U-&{psEcdhH9X
zOL2N6xv2WN;~xUhk0(vW6%P5^qIx&U0@|e3tP*Z&H;YC_))_w4*}Q5<xcv82r@A8b
zljr0djo|ehjbqfzv2-<e29~<HF0GudE{>Kh48E3)d+>re$>N9<&JJvE&v1N27hUf=
zH>j@W1kbLwuF>X2q8`1<36wn0M>WCc9St-01?kyI4wOKGgY_nPJL@mj`!b>rhm^R9
zS$)}Zk|iZ65~*;Z9eD_0MmN9tRL9+4lOj@|V6TmWp*#IF8L8FUjV*)O7W~Vvk8D+=
zP^q~b3W9d(S!X5bE}fogQ+^;y<%G^Gv#izSzfugv?ktjN_Oum~aFa-gO)z0N@65_W
z+@6YA$It-l#HhC6rAqy0+k9ld-rO0M-CT&h7AUsG_Furac40ALo!|w=%kiI<Pk;Yq
zFJ=W-s=G^{IfvU+Kh2ylavo^rb@P4RvEbIXu&G=kQh|*<76-wSs)BW@#dN)9eZmBI
z+lydy{ym4?b-JrWiezr9*Q#`)vaOGqIkV&H>DdFo2t&)VF}t{m%)>X#CV!MlE}(BB
z(bsb)S#m><vk$uG%Tbg^7TCH_bFv1z7+z%`;8xibep_m$-?mbF<R^f5UPm~I(}fMt
zbw$4tfFX$$#XnU;CMS$z3fkyOlTrZ3SXaWCjctM~W4Jtp%UWQRPj~jyPz)yEJA@;J
zEnop=G(>s}8D$am5e`F8&0d5~XCWHS#0ts9KD(e$d1Yv9t#q;-W{co1uCA|$9-sK@
zJP~Z0KDz~VD7D8a<c;K)*_mzfB+kA&>3L8TGFTODm~PN|<8p6<(G&E<TBvGU^Hv<3
zOeUOpYSi_$Y0qk{P`aQwzS*mZjb!pXP0RtEMcZ84ylSu-mA<)dox!-dFI^1Qa#JC9
z{HH0YbxP#8X4hb^>+3t41`gs8%tvV3g&P@IC>zoCCivnOE4jM-UiUGi9S(oRYV<#v
z1hUy=Q6oNpp1_;#gcM%CM9&-K84Ko*H~%jJ=liqv8F_@<^^o3;dxpZ`Dy60G!!Y3C
zSnpBN;X^1?=kaVs+;_XebayC7aDbN)#m0&A+o>6CB}%-1BapOodS~N{3H{uz>oZ3k
z=Qh$YT$Ia97;lr769%Q)WTnUKbv5OKf=Vq%g2VYr4~8psFU2jp*d}8~=6Sd+SvA+k
zPl4)34vV^<(co_}hsYdFnY9_sjS84x1yfn>$jf9XNjteJkn(jcd5mp0Q|~1OKUFs_
z6Wfo5!Ht!2lA8s{43~PWHn_G~c?XDK@u6&cz&LG92aFG?ND&5x$@gCwv5|ydBKmS@
z@bL)8*8J;uALyPiPp!Wdb>D5ebd2VXAuVl7JvbEBMgKV@vj4kr5*EqoL>jnH+ICi$
z|IHX{6{)4dgN<10eI+2~#4W86>P0(9&;mYHQClb^Msg69M^<MyekK<5{D_EvX)H4M
zXD%m_^|V&gPY6Y+RCtku?oniig`4TghKx)PE8k-!cN&<4(}&F#r+n@o^lINVHmVXh
zBcm~ZRSNmyY;B>n1=}|%bOL6q1h(l2gG7!z8hZUCp5mT-IOEEMCDfKSFek~jbO=RB
zX^v>Z&RNoj6DqU5Kjk&06l_p4g|G2HaD=QQ;{GaIGkI+w<Ze@5)h`!waG!9ih4oCu
zwc=CI{d?JGg{7=-F8ephg_pR#6&+5%w)a|9Tn8$^&bWxv=cIuudkQ>~gUQl_xF!Fl
z^Jm#ln4xaL8stkQz&|My5|t@XIzh-s8}hV{2w;Ew^@ISX5St{fiI$Ik?ufyfLx2jO
zebN5$Vu46)ixROE&Xq}?IVbN1_94Q9O03K;OHNsLejhGWJwmUUintpZbpc<DUz~<Q
zO&lI7+%uZ?Dpt}=><@G|yc~XeW!l!)S@ZfmZar<a4u*T@r&mh?=7#{MEGm$pDgQk=
z$fT7e!DO0}Or9*!TjG>?jT+hq3~AsP!IzO;*<fA7rh@fA4J;`V-YO1km>ZQ^Rz&Yq
z0qP*qSNHRCxQb7^!k4OhrqokT(u8*)4UZ}T&0<lJEt%Y2P9Iofr#P|-kjfgj^5=)I
zB881*tq0-kLsdEzp3}U#R{LgN?bOyV<MF~!xU3gjyz@L)?tW%3L2RV;2^A+IQ;V+-
z4tC}8OFLaAp+v3fmHI|EBiogpXV?fu2L`?m4DQ%MybDVxJ`kO~e8cqQl10;0l?l_c
zb4!C&wB@XEoE-Q*o|WPlj|KrZPHW`s(uB)y-J!$>Zkar^B(N0D5H(-4GOh{YY<po+
zTBjaCALN!Ug<>eJ9#R1g2BL0Y4Wq-0)_X>{j#kCna9X;Ix%4z?nh_EXS!MK{I2mz@
z2UKF6NJ%-L60+gqEUvHV@9LPg;aj#QqOdq$BAv43v=>0}xLLWxQ$k(j64C&Q=WY)2
z{)Vswa=Gg2UOQn5ug6^e;c}M_SDcu|O8Pr3Nbuij_9ER|ce3VqE;sc~){5gFt*Gl#
z*#0b&vJ#7NgKzie|3XC|xoKw23e+U!>tYC~m13I-lh0=<$K*8U1MSw=3UjcQY@Cc!
zmfLy`JXF4@Rr>ar0@v-f55MJ_z=RW(lc;@kD9JjyhQ?Sd5>W2XD3%HGXe&ht(6@L^
zOF2?SNy?hw5Xb7s$-d>K-J%}KJz}!n^AkLiyic~#T!u0gEblZ;JnH(sx%F&S^Ey~p
zql;(=S_wMOx^7oA3}{nxJ7%nX=VqOe7#qupPG|s>zxe(VV_JC+Uq6(c>rXB;oO#@t
z9Gno}Ei=_DSl0v_muii%ClVbwGc})7IpV0zj+QTfdl-7M;%;#lp{!k9U0*it-Ma5#
zzbtgeN%+KEVphdP%RkYvZIw12MY>-ecOYoKcO{}Ot`&=(sSLPqL-6t!B~YO)K}cSd
zS^~i(%xm?jZrU;%`>Mwwv|@D3EpXutnr~>e$S_!Oq~;(BiSp0dXs}qcQC6hYgBqvk
zyabej02fI+3Qk55Ny?#*Dji&bT?RvQQg`p3U<7f3sJZw3XWes+UHqn0KhxX$J7#-&
zn?asDrt8eA4eP~Ipw*`NmMg2!h7W&pDxhpuQNd;^bC!hmJ@%wWFqO23Z;_<93Ow3E
zhUgMXrSwax;H1?;1Us%YXX`;KH7+oKOt%sQC-~uf0b5{~IU`kr@tQH|q7j!p$Xtlt
z`GMJR{a<CAwMO5~3Cm?Rd-dq%H!t&N_L0_r<0&Yaaig*}FnJxS8~spBdeOA4Q9zE;
znXR0N4C`e7cit~r^}caZtecW)KO1x_8y&Ykbv=~L=JNpUjSBeVrs{UXN`}=6_}cf6
zB}kpj(Uh?@7H(m?i9_4;Ec(O-Gw1d7lrgUux#`4pF_Ba(Z5uy{3EaG{9nBw4aWrcz
z`aDIHiB7U&h?dnl9GGK-MI?1+`@odpGML&iz(?F8)5pZshl1Yp9TkBC7Ltz@_on<E
zi|E0wYMMjc0<ZExtd7T|0!1}mRujKnl}s$e{zHM(17TjfF(7UPj@z-ct|_PCZ+)BK
z%|H+uyKUewbENd}Jt1i!xhTUvcgMq5*7xztZ`Hr@E;`wWrf!w`2mI+s!vL%?yNsM?
zg&{sl?3PbYl?arW?Wi2g*(5FQ+#D(<15GdbIA(ZRKNV>bnZ86{ZPi+|9JrA;vD!3w
zC%fIdZK5drWSe!hmXB3wAMd(s9X*Lr)pxiSAw$SyY~M{M>I)^G_~IW1rnpbo=^;H@
zEoSsG@|s`k@2YECD?1!5aR5wDomN6!V&ZjEB4wvGBPyt39E2Kgy}pz$+KkQ2l-|PV
zNh-~C-^$hE(Bxu98{3cyS)GTT`FY-&roO5oqADb3qP%KU#hP|r%S}8*)gb;zP197`
z62#&GOZQhh$iS%nvG>BE^Vo{Rn2SMh<Kmx)DhU}9)JZ`ENzj(-T!6fgPa|ZlMf>n|
zr|PwoLvG}ZRqFb$Y~PJlKa(gjrotdQZTc}Q^5}pjjj5v2?NP+#X5HAdaIH>*jaxvI
z3xj)HXa)%v#Q@||hsUl1uZ!+WiZN&E@|62|ea3L|YLFdGA*znF>-n!7mm)gTky(uE
zltLN>#4Lu?z4<H`YCsqCl!*68ilh}oL0BmhqpjbnOXoHUX{N{!E{IaSLd7PrH*IeN
zBy=%C5A&`u(wd#c6Qd{!PTW0<!9(MR!DY~lb_qAN#rD4u!Dqa3`HJwCf-CjLt%zoV
zb@j&Vjpl-@fM!g)fsOyPMSdOV|9kq0RB+||u?7&_)-woc&mbBGurKjdY<|rQUy&TL
z-R0o<rNNE%GQL9b)9+ghNoKNE9_ArUVQmCNofM;b8qUA%3{O1vREFv`eGam^7B#V?
zZE=$3(dj6CrayWd6eOj#-U??sHT;yd|Mm3^9+AO>Rwnw654e3;6cech<3Kley4!JU
z4gn$XuC8`TBv>p+rL|I}bu2MmJm2H`K6;<Jd2%wK5rhB92P0yq^uMmA?d)>($$ou_
z3)Rys;Q!2@-X&ea9>>fgl1F<%Q8?!%^})8U(lF5Pea_B_rEsx<(9ePf;9}f8DwzED
zJ+l1^6Tj425Jxx=B@5jY20#HZ9=(~7Js=Qmd3fuqOikn`4r}W$cObZ2q}W4M#EOz9
z3v2~J$g*FnG~cAQ<)N$}zuSQ!N7#qbZAxAyec2`RO2~p_UMkDycdJE%fxv1S3Vc3K
zpW|#rgg;V48EQ>^#Gav&dOQ3sZ?|DPtjbPbu{vOfd3QlK&g1e&E4kpy&G?p_6F|Rx
zcjCzYspS*%IWe>1S=vi`=G$O1qI1V85OtjwcY68KMqM*g%qJiy6OcSqQaj(d6mRmB
z(TAW6$0^`GC(UPs@X)~I^R6G5c9Pzf!u(P_H2B0DVfIrbaalF3;U{O^BvGI5Q&nLG
zr&;ql6ynPIji99`wacP)Ng2hoE1)%hi#nx9H23&eH>E%j|3~^@IrTnImx28#(NjU7
zdgXAPpE7q_$N4HJLFX%)x)BjXZ%2z}FWz4*g)`qwx~EOK6A@(kzbzt`UpLUAap-W)
z44B<sn|R_26u0cP^CJpoq#A`nmy?a1iv;j`V=@HB&kSVVa(klvG-U+(m-t{-_V`yp
z;|IFN`}v_(&S|jHT9qxkweN>t5!1$YSL@+jgA1M$M#yO!r)aR_hU(1ZGIyLZhw4PJ
zMuuPPRJo@eX2_Ed3L4grU0m%lXPh!;>eiZH@LRr2nlZ<}Jk&N(e{qB3Z0O6fn&rLg
z<h@Z>o240#pI0e?E=#@3|6W?}uzlceZn6^?`Lb$D-WEIYjq<OtQ!2R;(F|%wyY6kV
z9nq{a$C3A--dOGN)fo9T#J)z_hHuR3|M~lmSG@l|#Mg7&t(~~oa$$Z5B=WfL^m8;E
ze3{%=t*!2Cb2>pwI)TnQz!5#-x>0hs`u~<@x4}kelkS^29B8}X`DH@?y=vKPXFl>@
zllba{ufJOP>oD6)YE*3}-aqu!C+=shn6NFRMt1)H=?8|VmoIO&U*0yq9B$@>8tl2;
zQh%Mld5mA4zWjnCVIMbn0G?Nar|!U-&(@UW<-MbG(M;86$tp>YBFza{ovX{u2S}L<
z4linSvhetJ!xBWSQhExhGkeC;FYS-p+igsJM4>p+OCL18kc%nd@q|Q)iaIH+C=u=n
zHXj%L6i8O_bdT&y){`!XTVrk)oSe0B7fF<3XGft-j#-iMdxxXxK-iox(&=z!BG(aE
z*BjL2feG1=Z|@7HP*XL1CsQ=$O_q8uAG)}V_hE^L9TZ8#r*_VThc43;*}Aii0U&>=
zxtw0D;s>IVIw={Cq^aM&&=fU_sI0*^h4v?LHUWdwylp-No5?20KAPrRLz0$OYGhhw
zYJr`hr@eJY<oQJo&@e2(y+WQ+Z30&gpz)cDJnWfHBh-gYy=*<C9oa8BXp0MZnm7hV
zaj$-hVmn#<lzt=s9Z8qi<|W<jf$ulbhCa`l{d4})#qI<CvyJJ~3%+OYv;FgZW+OWo
zoLRZCi1{-9Q_Hn{l4#?@eeS-c#SXpsWA0%kMG%@Vk(~z>aNpBTZz>lJk@WBFF{L*t
z)54-$pt~vV@Y;3v@qXF+)!FtYWJx+yX1uHb3d=~324zGTr6GBE!-(~OEzoIMT=;iP
zCnHw#9~IL$-sg9_Tu<cY?2EIdQ`-yZW8zfrpkkc+IhELr@1<*=chpS6(6GFeJd9YZ
zm3+M6CJ$i*K%(G>i5T})Z1KFLUqsLQNq-ErU#DUDB-O~F<({NgJb5b1%E;kEs-#_R
zdENWvX(S^S5rtwp-6ONti}jwN)jsrS93{L8C+F`Q>MS|0o86^A15EC2=NoL+f{&BT
zdk&g;@9SCqgKKvp^e0)C@%2@kj5}m6XSrc*i}Sy?01EG88($GFryxOvF`IF<m8Q(+
zhWj1y9`%Yo3GaA>$^CspVIi4;BizJfWbQ&yY2)Ns7(wDEm-hgFmr7&?@Ui)?y!C{+
z^j)eXl&qm*OQWNj-?sT2SfUTnBD5OrI*$|@Yls=EK4{a~lYB0ZybR%Vxa8(;<Ev?9
zZIDm{eyz{(#~nso?mk9(QSSQ@!FJ+-Zk)#R%K9Y~5k&U;+rbFqWNGAME$rVMy@Xb_
z6iH43vQAdt=WLFzHsGD7?tKWo`aQus#^yl-eXq_%hUr{8^ybd1xF@u+kQf)2#xi>;
z7=Ml(*Q_Ect}lhPuKOp!78*ZMk?eAl^)X5U*!}HvR##%W9X-T*4x>H2<{jlVHMr|y
zzwynJ+4f&+92ArGWfEo2e)#HR$OM)S?PN^6XEwx#k(zPG(hS{ZP9RrcKnm&BOobT*
zE^l6^XCx%S=M>;SpA>Q$WPSpGo3rpK|513`FTX{Bx85*A%Vy!=zd@Isn<Tzca6>~t
zSXL(=4=D>3Z%u`PH>IGL7X+_WsA8*&a*`6EG4q*yAy;s`U8k8<nf0(&@;bl(BI5T<
zb&0<(2nxrY!KzZ0Az9QESl{{i36BHrCVy&{U}~aW31^HdL9*A}7Y{1hodc6`KWg+M
z4MvGfriy^OBtAVFW{uU|KJPxc&^QZ(nVe*ZspXY>{K_dmW=Qryb`*eXPL=;rSC)<D
z|5czX)_jkM&V&4*vfID;XybAnjmo*-M2&UcYq3%P8}`Q1Ivge~U8agt${=9amN(G}
zK<W-1Ol&tF?oO&}DnEmYNvi}o{o)^3TsX7-5To&=VZeyR&41FtY#o&^X<-855J^z<
zbWz(iz3>#^L%zVH{REj1hNipc7NxzAC2TtAl}%L}$e4-G1HEkI1ZakfJ`jcS5>4i9
zT$I9^FFihje)l>KpOsx*M6uomZ*ODUihh4bBHwHN04{>Q^*uc;&j%jZ4)zQ)Kaam;
z0lr5(A_1><H<IpuTy}~7{WAdGnGJtLyBv!=n{E$W`6T)Lb}Q9%02Q_!@pm&<I3r`?
zU`vL4Wo>KMKFZu0V(}v(VeMB^PcUy%B(oc4Q3;L5K%HQFE1d5lC{de5y+}rXuJE{G
zx+R3xdv#Rs^U?T_zZp*!k3ZWm9{Sb1p#p~wx{!rjnchmua-`jW<Jk_ZZ}<qcx`T0Y
zVXkH(n4RY35F5p6^^^Thls*bW@0S&|8-tEnGbtlBtd`H7YB@=BLn(h<(k8oYC%$B6
z=|^HXF$m&=@H@58@pdC98;M)u!Ijti&1iT*-@XXqHaV|OBEnL8;Oq4GV$7?c%Brcu
znxUbtCa+<GypZp<WjF!6j=fOSk;Qd&GWBEQvVIFpUed6fWq<*J@jll0q8eMTut2ML
za3w7JgKg(A)F_5}l=49}Y%DXTmR#mzmqHqeAUK<cHSndrK&nQ>q}>Z}%^vBLKQ@)L
zpT50w^3Bl+Qi@hsIZr^Yv`kLk;Ozwn=-Z?>{Dtt4UzclWp1}k#Jxaypi~^0|+4Z{f
zrCIXkvVS<bo~=VtE<IyW(i3>=?JkjtoNv%TYF?CP98qKE+-H^TdBi>2Dx9zx*LWdK
zHzb-kmo0FNAqfa}Scm|62%*b1(^<c*2+HoXN15;^ZGK-XK*>-B|0&au;kiASsosGs
zFY2fMktSwveUtzk#T$7__;=hXjiu)F%y^_%Jvnr=90zJ#5xG{4Wk1Aw9SR|jPm-}$
zEsB#LpT`*b24d_|+BI~JrNxuT&kp@KHtj`w5nA7bmygu6|I1!5!mVnOJ_sG;^xa;8
zULd|}+|7Y$PR^gxM?D9nm04QeFMfWhU-`<w9Ez?~9l8imD%+D$U5~^qQ`FQAaSwuU
z`N=nECm>_gGD}NCAId{U*?S4*np)IK`R|nwg@ITnQzY(K7c1hs0GjV884cSQe14k-
zBb12`64_#J_^l5@v0ldoTd>i&YO9WRMpt4eGy2k1<YeL(Ku=liaGYnTzG4Gh(RcKw
z3Oq&2?~W8G-M>B^g0Hn7OfYKoXH`YSsk84sHi?6-1}=D37p>ea(bITD2N2}6(!0PZ
zp*&=fH=`O2N25Wp!-v(P`hTH>IkU>?<IwRqa_H6F`GvGsn>q`H)KUh4Zf~i;Gv^AB
z>b~z?pNNWVokArq$SER)ap%BJn<K-3#t{DTJ{JR4LL(M@omX)iSr@WlE#$AX`90ic
z=-hXSFxg5)G*;C5`eB!rWG{WZJ;z@eWEnJ?)-LgdbV!Gdv4~L82ceGtrY3<QhPOpn
z61Irfw3e`C|7xg5gaHqN<>vle2$O^+MEs=5qPjMp@L@RQpYuQR81~pN_!Re=F6rKt
z)^`R1Q4b#nF3>0RNHxTYVsDi_2Uq@j&S?1hs&#LmokM4W6I=&t5vE;`rgHx()*_{%
z`+y$|z~4=@xxsoq60RkyOGD5UL%cTDlsQ@x@ha$KpugGP$s#~^CPOUsa^RAe2?<Y%
z`_<(eg>>6^;!x;Iz_02g3?=@1($X*wgku1p!~YA1@}tZ=8z&M8=bqQlnR9T{eQp_2
z&>~xN2g$n2aA^A*j`gqSMCL`Njd29GP%6saZzzBI*<8yqTZK-kqA@up=|cV(hDSW<
z22yv~uVV3y@BIF&p<wVD#;l87XR0wMhG`}95Z*@|#nt32zT>@$l$IKT5J{dMX8@N0
z81{!ooim3}R~U00qH?+*x(rucJ8BkRMUHjJ!9B)CmY3MXUml;222ymWi}R#olL{z$
z()!yLe)!Rq%Q1xyemg8g(a}VGz;ebDiiKv$`D=nc8UNaIKXPe=$NH^7_eD_7)b->O
zZU^cpo9k^l8>cpbkmd{{@)uP^(QKO>Fl#i}{%sF*^sUz%AG83WC-Aa(nxx$A4)x%9
zdM6!q$ob)~3usHcAz@0?aRx$Jz_=)bM|Hj{eXLB{5p;~8n$Z&V&mq}G1p+>zVT2%#
z2F3<Lmph#3VT!mmk+k}>ODExvf3NSnL==JJ`v2l~9kA!_u|ifMZTM}?pxvmjfCN)H
zOw@$hy*P26xTp7FG@+1~J2iBMB%}RFKW0hV2b>7ZrDJN$Caher&RL_Qlv0VqK>x8{
z=?42rd8epjgFk;&NfM|cntqC4Jjgf0H*94PTxxUcPOKZZrN;Mx?vnQ)^k&S4;#khI
z3NO7-fz(_(r)hT=SC>Kjwf%vw3RqrEX}9VS$iAcDSN(*auJDZD$uXgs5RTtOwJ$<T
zwT0k-2x2M4jZF+E`Qe26f`X2-7j#SpZ;~*IdaNja7L<ph!)jYU!c1>C-=it496P0P
z%xQ#!0Ix>{weftnw(EEW3(nS@&y3>46hw?cKNe#&;^8Y0npYMlO-ght0uXCwqSv50
z1Rkj8^tHu~0TZCyfS-_nZZ=UIa>P-0_@q}ZWpB9l3Nr$%J8}VqR*ZhzlsZz6zPM<U
zD^FZ-j$Z^C#a7C<U(VPO-t=B>aU;4Ull*??D}L3QXRUSe`|B;7oT>H&P{|NUWuRO_
zQu^2Y4n$atojSWb`S5g?0BhSFF&Xk<7g^p>c6b@c3)7rs**(vCp;PXr3tS+f$c!jP
z2Quw+A`>3}Hq}WSTZDKprwc#&GhZs$d~HFiP7gzIr}USi<HdKaDi;5Od#njM>dco^
z?jk51yPq$HdbLwezwaF>xA&9HYY}x9RL0j3Si0`LXJ)*F9L1{-f$o8=?Zu<!mJZ$P
zR|Seey-g-vdVoVtVj>q6pPooFW9dG)ZzM&Kx3;PvL<n-sTK`g{L3egAw(a891NpHQ
zVr#)0e{1WHK!nv<1q#DR-8`R)!URYF!S|};TYfVJic}S@;<>cQWm})xAC4a?@C_90
zSTcWexFmMHp=98}07yQ=UrYgZdA%iIkiCrJl{Q=j9t^Bb#1T>Tq=Z!gXg_}5>PKJP
zo~>L#l5!AGJcD$m#6Hbbn#jT60%D|3UyIr@EfDrto1eEV3!xyl15rm2E#{=gafMF_
z$2}Nwx#NozJA#xlvvfA>Y{DxxWoU*Rj>1H;xv%QY<DI!TK*VE61+SZ&yALBaZwLob
zC{N?^z0{yywVa+1Z<Du%_$JC9XZ@=Am<roa1c7(Vw9G1yc&TsD=>l(K$yg*JIHsMe
z^G}fP;B_`mc)wF1bneI4YO^;GMp~<%KUhrbvhz56pmYAQ*8RIbwamU=#ePJchW)BF
zcM@jk-VT*o{Za@<7Mt@?(hv!!qN7D4UDeCGDC)HEnm$N_tzDb-9c1GXH%@S@A%%7V
zrRru!-zj;#!%BHAUZHRchIWZq<o7AEEF3h&%}QgrrpdtyF9{eE@n<E9{xQW4Hw*rb
zPCzeKH2yxBo9u~<P!mSVgz4dTuV8&_9iFCq&Y(e^4dhun8S2^gQJ!Xxlmy@&)sNa%
z#DS}sVSvjoZP}5Fs~vKq&mCfYTnC+gWszJ^g9ddFIHV4Dpx}C;Ha)wileksZ3Z9BD
zlNLZS32>Nk!^Ci=fjw(4=wh#7VtR}mDps#_@X@|!gSrJ6QT*D;>99+6cX{~Jx|P0C
zk*SC-0X!s<-yuc8g*`vhDO#q~{k=>L_-r}+z%&|}$THe~-u)?>E_ta_&c>6qB($rF
zQ1p1`3iqpmevkRlbKnv4+e(~{?~xPUSSt!$v;MXUWs|-@EV?X)y{`G;vP=C-V$Dc!
z%uygrUrss0$`FWy$F5vhNt1pqq_y<+ZdV<38sKB;mQvp+1RlB`TZEG!u^+1L25T<S
z<K0Cnd({>@^MUxb;EhWL4`vvS5m^+5c`J^bWOFeL^E*WQ+a1r!4`C6FNKk_5KdT4K
zT(EfNqp5VD9fmZ5LnchjY25;uD{xiQ#v<*o@0o7Gn+Kvcs;e~t5Z7@?YqdhiMHOaL
ziNO3qXvuC)7nYv(Rl4V&vQO))w4H_e)LS3(QQ2|vd}iMtQgai|<#m72gG^{x3`N6p
zQqXN`7g>taw$?_Hhv<w9L73;+U{=)@Kz|Uznn3#I{#@epKdNaHxr3$q8J~WRVxp1l
zq$>;7^XC`zq&vvb)Aum!`tNw17xh`y7Jq?_?Hvm2Wv>oB!EHO$hRX%0=cKkV^JcO7
zAgEJrk>}>PA^45W_N&8_fq4uB;SK5i=Bdr`aWG|*a#!TH%Rj`7w_n>Set461Zid0e
z1O1ikiQKpkbFCVQ(_#DVwQj>@Vay<>_m5fepqO{yu}`bXDT;IW0!1G@G5HoOsb0X(
zKMsTKO%kf#0`BiZ;2u4@e>djS!@$k3a)}C655%2rai$Wzrt#?{WET<$L6O+$(t9B*
zWW`-!PHhDJQyIHf_Z^^TcxfKgZOjMvb~wLFPc8_E7PX1)$>A3~DS<t)AfR@eUgNL!
zZ3w3+V9pn)Jl+dC6Xncl%L#R58(#y$tleS8Q~L&a*je-r15A@c_5MMMH_&dz&xlO&
zeRPlqCmw-#5|I&w^x4ydH9Dz2iD9EqLSmU!T(~`lVW5f@XlUnj`A2aV-a)9E6)NWO
zF5zY%ymm$%L2aUVO+v0@QNC&9(#iCeS`3ou)*I5fV-io*(-($41V)i*7LfoJE`A<r
zkX+t3zsfpImNSV^D8|IF(t<N!e;lfNSgISe3!Bj?a$}VZ=Mj}uAEFqxmaFaSZqV;Z
z3$Mn}$J`)I9*0!<flIT4Y;}Q__L_c<J6nPOB*Se0_jQ<9aNkwY{x)2pIQmb-BKY@T
z%V5u|bOh8Ue1`Z!RKib%DMKt^EQ^5Bx#;#J2ZJA{D|d7bX^j={xY{2NLT_G6&N)SC
z>Lz{t#sm$9Z&-)&`k!^@!Ezv^S#=#EOB)yL04-)eD2RxVlL5j+eQ&=<P~>-NV{`VN
zW~Q?vvDjkAZEt;t>judTb6DO#epEx%{9!sBO^joEnkAC~%@D=k5~Gd*Hox#sAMw}s
zrorH;r9L-L7oL!imvVwnOjDUrrrk#URw?X+Z0Yp0j&<-SnUskzYO_k|+B6K@a8r&u
zs*hmF$>kvsfr9@b?VP^D2-hwi+qP}DVPo62-PjYSv2EM78Z@@m*tU9d&i5yLH*+zU
z@0#_lXZExAZ%;{Do<Q`M`Z-D8yktOzdFp5BZfEHcZgl+X6=>&f_xtzv^q%3}(q8c^
z6A~OFD+r@!C3YaK24M<lG&D{Ax%75C`(+H}${G2z9N4Zxw_`DF;6B&CkQ}Mr9r%-x
zMowtpEiSGtIc?U{>&^oCFt+r-ELJyBNuE5kzxPpTcWv4`0Assz4;CUySMx{^pV`&}
z4rVyq`Hn5nb^extBHsA7)BVQqhMAo}-HPp6fhb)jAH=XL<x(|(Oy9em6>69N^I(;H
z`Sqc!x()KszVw=6tltW$!PC5=&=`G{%XfG_rOpEQoy(s|-V&8R4P6pkZS7bCFlq{r
zrov*z5&n~tZ@d9*GpGQ+{Wn5GcHgH8EneVd_^C**=ILPhSmqruyTN1XaX+0YYkWZq
zO|WByqRQ$)>F@&NRrL3}1_jYWhb<!Iv<TsQ)C|EoCkkaW>r(oIV5Kh?^bwj3>C^~B
zv>a7Wy4)S!f`_m2$EK;owMpCecT#etp?6gg_tj^NL{UXglqUW5fk__YD2V~jA#YiV
zT&XfqXx1qP4?q7RNX4Z+q*%1d1QV~E2C5aL@|@FIIOhV!RVdKWb7W>#L9YJA1qeol
ztHCMDa7(U>K5F0UV4H*3L|aKI-ZbU2NGzZT;x(jj80dJNaG`jR<+1~FaB=$mUm#eT
zWYqAQkg#X1aVy*flGH=``g$M&SS$f1K9)M`Ph68Og-Fd%Nk*ZX50V*DI)A!srFD_-
z;GkE8UK+ql9~q#rUZ_?S<X6wc(sBHUiVhO=Cn5;EVfipeEV1R*t;;w6`|1xLMp<x_
zcO=w%jl;J-%;4HU5_}ZJPll=}tz|NELYXv30pucfugt?OrAivkr#8j3hA1l7a7#4I
z@a7gBg~|*MP-Zj9>}obxZ^>i^*;HekEIRj2txQ18zKnHJD{2A(Gp&9z_cEzUUs4W(
z)|YzEzo23o@+Xf;5ThERE=rcOE13C{<CgbW;r@`D00k_*b!r~!nH;ZkR9vymKgUtX
zWpv5!2qCU_V+4jJ@af|_aE@(pvU9uP<3G=hHFm%)?pwyXQJuq$-1Q#?_@85gQYCnW
zC?kN`V~uqs>7gQAIwhL8UOhtFifeotCPTlmB4xfRI!3&J;+4gzLbw=M<fDT~?8CKP
z<SYFy5@fbscK3P0G^ctD$06TW>3Pd35++YvL4?&og75xdcVUq>HlqOzQ|S|&n6Lh#
zCbZpAQ1vIyV|M)to&Gr=O6va5VLvQpBUAyBx)`D|xiwfp#gy6f<!imL<vN`|mV;;A
z@FkApir7WWd6<nf)_qNt)=xy=k57Xq*<HL|^2yNRhT$wlW_;8(P|SaT*}hEwc-PpT
zaJD&Y=ez?swUiJs)$ipLj?nktCCnt<&of}&E1Fp@MhV_S!)Oc|K~udo@tUqe%X0w|
z+0NiH>>r&p7MZjCvHx^Q!|8$ws<>JZJ*}S}LdbCkSKUeT5~I?QIV#2tSw`visb#gY
zKU1TV;kdGaA(!7uS0v-@EXUCOqUn#E@v%q1YZl<999V5F9muXLBp&cozfSeM_<%Qf
zIOlEo4Stwgj!!Pc`EgtXD*LJ+h*tt!SBG#^g)tba?|Mm7QOl<O?&Ej&m<}q@jmJuQ
z;<IePV}ucPIb(13fL&a3UH=R5oxu=aHiT;7uPz%pl%+0e1!wf|4!o<P8Vpi~dFc3N
zLN=98M;u`gMkz=5magA(HzuLMSD7?}=$)XMSQV-meSwIy7->MEMC>q=YpoQ3X>a$n
zB@x{iKj;g^P!F**44haThLgg*T9YDR?)a-35LBinkO6DMs|u}N{cjhU8D&-26f2Of
zH9M8}Qa|>^(pD1_C2EvdA0<OtvR9j&#$2WI*nNbAhSHMi3{3M-%eg>J&lilBlsTZQ
z_m&6V_$>&NP@k($tOr5yW1$o1&A8ms$AMjs7>kdA99};og+OqV2y<ujj1f`pP$7)2
z^lGs4@<^vJ`|h+JhMW{MzsCA9zdH@a9+O%Luj>0lD-HyPKCNO!^0vT>)^IW>;P1xk
zwHafo#M@lZ1!c4I8VCc4j~VlU)PM{Sn;@Loj%X_`o0<m}2!W3T7J&=wF5&TYxeH)W
zQA&sAE5UCi6oW!Pq6X`4Dw%^U(n(t;(|*#|B~QsQvAUrUOuB$b+!j0hFj7PqGdQ`l
z8UM!lZu>Hpy&}C3kE}5vE6(XVu0nJQPjqaaI3|27^Cv`rY6)?RfpY@mfsnX{HbAqz
zU47pJipd7>8yvjab3X#M^I9;?%<^hb7?<tY3$+_{3DBoEU$?t+1zxIK|1EB9#Y%KD
z`+b^Tl?uG?4Sj07^|liWtZr|wzuk03e*Icn{J8tr_QMeK3j6WV@<h)2#_bsQ@lpG^
z(vgGNmMrJRR89tk#G+s(>y>oBWvCsy&X9`wqHve`4~|3<^k*5cC<eDKIck@=8k0I;
zpnT0#!M3+rhNMXpkhMe^_K)!2;aUm42&r*#piEhFems-qT-p@uc2b$KBI7xv&)oof
zBI7=5Xz*Q&4LdRB_f_FyO_=ZCAJwQ=$fF`t`As>@C&`HLHo-;QIE&=#W5Er)m~a<{
zP?g|;0U9~!6^a}{#H^yCTvFHDp%<ePUWhUFmx>&z;0)EyQ_hUT!*?riP6ojja$=oc
zF%ZGYX+JrY9%FpFdwzJ|EcbZV+DlIx1FRYGL?D}vaavmVt-Y)(?3Sjq19RIsZ2;hH
zJW|2=?L3VON{^uby-Jstc}tr)&{gyhnk3NhRp^k>hzTI|9JifocK^O~hV;<W)7{?g
z<C{J{BDDkm0B$KN`)y*Yvg<=UoL~mx%JftHD+|K_bu9gUQkvTmQpf3)L39NfBwriI
zyJ&7bZpLTMF^t^n@gkO~Z_JR~VuFveB5+aO{k3SK{?Zz@j(mO(v99{g9`@M?{EMkS
zr}+Cs`T(pnO&Na|I?DO*#P_I}{z3Eo<IEq=PIZGY+d%%UpfG-2uxL_Doz<5Va+$5Q
zkB7%v$Kc}5TEU>nqM+vWz1a{FelBNaH}l}xE=-^1v3e=J^-wRUWM#Y!Yj$TnQBdKK
zNmrSh<|IB*yRBCyRX-#Ze)2YFlJwAf!z=?Ua2;q$+d+J|fTe<3X$HSa2{1rwg!5=8
z{^(0{l$r><Me=M9_M~toR~SDz7cH_N&Jw3GM#k8m$pOa`aOA*O%2LS>4Tyu4(^vJz
zS^CZEIylu>t`<iWFvB!Rx8(a##%4?5lTV4Of=V6L<?HKYl{PDqo_M7xVA!r2jOAs!
zA_UkNJWMJSvf^P&S03L_kWq0s<?kdP1XgBb3&%QZMfsdch$O`#BTu@Fg!-*FK{03l
z0fj?3PwPDwT%?u!hX}Qxmv__(;;(a;zKsb=h-*Y`=9o<X5G0Q8%uQQVTVB=F8DiXO
z&ZfpL3vu!<-x3ukl&XOQSvML~f7GcT-UU#UNk+YMbavvWgy{Rrl3@JnUvN?~ujR0L
z$EYLKwPWK@k~|w8q&x(9f~L6GSa6Fg7stDHx^oaLZPaq=%P~tzJde*J;Mz6}&pqzp
z``eqlF)g8lJ5h^&<BC}w*AAUpFaWg%Gah+BkE)InJN&TQ|CFH2Ll3!GXCgZ^U>O)3
zkeBFS%!s}p)u<j^m=ky}j|SkD`=<|Tg1&9`gbro4pvMz&x2m~j@C6+mBZjk&iuWY%
zV1Sr(?4Al+3%GPiaFhtwx&4Te18=6MYEIR$0<{hom8+8#<(Mjlkx5KqD?a`eUxh=V
z8{Lk>jRUrjixU@$ph_lz17YwvQu)>YRQRd%?||n*Y<o$=SWveke>w^0R$N}=k{{%N
zCS4ON5PwdqQq7bzMI?v*0_I4_vQPNy{NTEcW*#Jm=TUjwu027(-AbIKuR-jVs~WLl
z+wrrAE%eI1OB^CYXmuJJ;+Zzy;T+@kf&QMrf9Zp|4r*<R6wCV=O~l8!QUWXx8Ijm5
zN4xZNeqCnGoN+`iIaH9(T<fa9Q&s|cTOhv<c|A0tSBpgTbGbzgzvJgbv2x8-GX1q9
zf5{<}7r82fFGzCv3v`J@fNKW`4!y^3rrfKOx5|g($xQ3g=+ObFlmm>frD-o}AJ+{L
z)c`wyxBv@5NdZ?=yuMHr0tECG+Ur0W8Kl~f@H;tMI{+t&u>-&2&8s)gz%HY+G8~I>
zf3Low$F5mtbHX;HINbjUKd;hvGWq`8!HRs6Y_-A?&q53(nHMP!%6=e{4Kbl(NyMFI
z!G8-knpMiMynStGGpc<j)~CM#CK=oJkBpY%V8D}5-=LQgb)50r6aeFKFyQctE5nbT
zg)Fn20#3u5h2R|#3lWKLa#=qTbtH?*v%o;j96K63t9!BT1C}FIryFJdQwwU9%KH9Q
zl&f{uJA|DoDbT06h<fD<vKOa2yQd)md=mHxc^!9bd%xcw!_S$!4K78Vh{pf$eLO)u
z*{ly|;Al5NZ^W2m2Yx{Gw+%+-^_V2aMp(IhVu_AB`8lBM@^bYL)`PtG7Or05IhP=a
z8@0{<saU{Ft-+(Oupvh9&B5#%R$-H=J6B`<X_m+Q9XmxVSZ32#?iyb(IK*`-g?o1H
z$*t2xQEv7)muR(Y@Wzfxo@10Mv|1*~vRJ4=eHf(rQn??c8R&wDVO5zIf``h_<7(7F
zr&q}^-iXnV^PdzaPc9(FOk@+zYs%*&PuN+XTa?stIvk?1<+5x?l4+ueQy4Q0iA#3p
z{vPP+j38yvPc4zc$3G{Tvzvr+&YBp}&ViO5<*o)DEx$-&=6UKfGRiOK5tW$N`U=WT
z_D_oF50Ee|0DRml<c1&-Oj&7E+mN7Ee4k=Y1^Yx6X9DFMe4%_+a6Ti!(hO>`eiRiZ
zoo9W9{q{oOI8jATP&*aYOhV`Kpz|Z8pJQ9Pm@&j2f_KS6t~_RVzsb*R@TiSNQ(6Cs
zZB3Vj#DMR)fqya^WdS=^vDr+i_`(sA`-i8yllRBR32@Pw7|E{qh7tHrdB=M|CU6nj
z#PvGM+yKjhME1+BIcbyB!98K&dmB?ybq`*Bk0LbTusGJHEJCcPdKh0DsJh6reb11p
zEk36rU1?2;?B(p${ujNsNd`O*&tDyBgjnBzC=FB4Zux9JbNo8<p(BOC@#yfLjpjVr
z1-kmjAy8!9eK<}uL;hVmR@3?u!zU+wL=B{>(aZACjmyp(zdBYK=e{?-nNN_mWT!>{
z7`jjFvdiaz*tgE&f*?)^^iLx^WW!Yuhh)MS-#OaaY;wHIWaz{J7x)4Mv4lHaOhXje
zAc%qURk!C*{i0|l+n#PRn#{u=P7_UL&*3)o9iSq{&Yef0RN}FJ33hu#+v0e;PAY%5
z+qFxEN=>^&`~0TqudFLfZmSDogIFGw6Edj4<nq-tge&iFDCnX*SR)$z^gn9km+e@!
zuw+cw^Yv3GyLHJ-SS{5q^~p?icEyp9cJz9(t<^55b1icrwIBG>*y&M&`c-D~a750T
z{lHl#n;}lk*b61Ml{T5Jog%$!RJ+kEj$-qSNE}6?R=nb5R+_OU4cwwd(6C_a&784Q
zf$J1>2+~;eDkS&}_2po4X%BbHtvWaJdB@TFkI&iOg5As93o43lGhQBU*2@Y4y4~4E
zrDwW)bKe=baXB(42i5Vg`ZUbP%+_*fQvotn!MakOtc2%0LCQm3>vPK<A4zcbY)Dnx
zuLCi1atL6tom4(X;Rk)nV`}Jg-J@f%a&Dyts;z#R3!e^5ROYmGo=9Uw(^f^wM)Z>Y
zyBadcPOWo4b4{J@-Wu124D(fVBEig30{0MyG&zkE|J#hVykEk>%*TrJNx0D|@}+;v
zGZ$SX(cL)@>cGaDl|DIHJR16Z=f7Gxh2A>>{C>WCo*wRRPO_5L8X3Es?!ak;JT$T@
z*`zdj)6ASDNCq7ZvZM-7$7V2hRs@s~(d4o4)Qd~8cKzm?IVQzU<R9{h&Auxc#0*r~
ztVRS@AD(^f(PS$9S6CP>QtHmU0Jj`kiua*+qJ$nkR+!V9ZX=y5*K7NyRHMogYW}DB
zg=B=bAkdg!)$VoGd#^_N!%|_OU4=&_*oW|hJZJi80I84WC(%Gc0MONKlDJN)p!o}I
z%`IHB#*TP|z^uLNs6LF-K<DyT)B)VPZ{bo0?PpdHq{1$Ig%%R$qSiY<V1azfuU_zj
zN_k_L!44W8;pfX{`>$1#(wNyc6!%g#TIHWg$yIOf2iUb;tKE4v)$^sy;BSV3{?i{P
zgCx{Qsk_3%=PM;Y>|O-oIX;Qz?p(lg_(ztRTBljdAzRjdymlHWhz45`{jl@K8|Fws
zrY=-UrtF7?I(O1WzzOvj2Db8)&u<V_kuF&jDpDW=q!%H5eR5fE5EasRsF)3Ww;tOO
zqY^`Ss>!ZDFr*qeDj8>a{;nQurnIMjdX~+%@H}PkTes1U+dl<Rm6~8}mXkf?41vq_
zNWpP_LK#zva&S}SHe0~UF&*!5;up(W@^vYIBV7ehwM>^Y1Pf4g0^O;0x?L}RWCb$m
zj*Uh6TE=fj-#kglDpt!U?#Sjf`MbI-sue9$a4O3VwG*6or2G&C1r$`UoGZG|)i+ra
zif@UWQ$8hr?2|r1!#1Jc*DZ4gJIcu{sm`}14C_YK6tc?D)-QUHDu^-n|3EeST>89b
zSMs2HdW4Z9Ixf<a22SFGKi6_Rd$HSQ1-pNDxjVvN4O82MJn24?BJ2q9iCgsK9+H!P
zt`Ib;jmea1CkDpDEJZ$|u7Iq*-5=09-8=}a@{$>(u=y(>Li#$Wyn5Ko-vhWE<#<<L
zp4Qhu#VsHL7oIl|CC2U)q6DO>xa1E<TH^1(mD0ho+`glIK<?YK15Bu&(Fd-n|HIwX
z{A!&!o0|oLd)_wp+Rv{-G@Sb#;{|;Zk7T|o#GD@pc>4W$^q8KL9OEiXI5eewKjF^b
z(+cjU&KUv%X?Aey-MwCnaz{57EmpjpUyOPcnCvLOIVmIt3Yil-EX=|;n7B8Kz;IK^
zMztAIn4`va0~U9I=V=e;I|?HQUd57Bb#rllCXw6@?~(oMasLhhhqpo>%aJFj6^0%H
zq7=sUg@a3RmS<(R-dO7UMYhSHe?!vWL%1VIy$xRsDtH*7ADVac*UDu^BW+{H?vk-@
zyHR$a=6>a)Rx?Pv%cdE1QsA;bWU0IKb8ucQIcv{*1EAtt-lsQqEBD6V$rMG3fEI;a
zYe)vuVTk?QVV7}7SIu`XLr#E;vpJ=`b>A|~S@W-NlZ5l#=e;L8-DaBGo$MHC7lfe&
zo#&tJNl(WV05N{fAsy%BMnbv2ko2oc7;oNFF#R^_FhXk-6L*ETZ&NlO(@&EE_LDQ9
z+51osAjZ)^mKD5MB~r;KRb@ZoG*PL;j+-6hZp_~ev%Gwo*#=R{EF|1YGw*W{(66F_
zF+x+qHhkfjCk$rN$lKm9Kan0;HKyf=(1bE84|HnjV}Si|Rdz~bfyWp&K~;%3M9=(C
zMKj|HLPa~!;Fc+G$2ZzaQ<FKa<-5VO@ey(Z#za<0M@I7p7V0P}#^k^fyp?zV*(WoX
zn;GRKo;nYwpt+6kly8?-?-YaMV8GQ>@Pb(5?bqU-@})sOgP-?llfBrK<hz!{eCDG`
zBl;~*&^}a?$pNG7?T@~W5?cY#7Dphh$K>~1ahp+j=_E~D3T!Vh7(Qz=kGAQ=rTRL+
z(YSt|dwxJEW2&n^?#T{!j)0q*ntrP1Z?D7S2_pn4opf5;P_wjO$NrM++QUu>PD+-&
zGN@i0fo&k3QSp{&unZEUZFJ*RbKY40AhV+}6dFy1)BHo|gtP5u*>RI@2Rf|@mnN4c
zc1<d@w%bV*ou+SLRefD_frEqDm_d5LF+`63%6ViSW$(HP&tpQG(2-IWkt!p(J`DzZ
zns#oM#)5qCyZDyv41KP|W-t*{y8WL_8`IU2WpPLwh}qnWFjQ%93)wfFeeIP{kYYp=
z^-U`>1Ty$dtO3&d2QYC9*~PS>N1vs^0ohJBzAtXd17CWeNu_`#vx(=`;l~i*Czzls
z8S3^^?$NRQjg&4zt<Js&d{R6KsdJh0k*%Whtc`e-KVng!N7x_T(e9UDXRarWoNWhW
zwFfMJkH{t`+hqct`NiZxn8(h_<Ly$$!}x~e0%!tsIo$pvV}QFM`3Hv-j@sJHc4R>R
zxzQAk5^gjORzxEd>a?jEf5#(WR;;Tzi4Ds-?B#GzKwKRwuQy5g?Tjp9mJhG+(t%O5
z<x;T)c8a2|3L^ZRjAVGu3gu?V*Po4&=g1GjcZ6t(_Hoi{CM2M2ak8dyU@BCPmMsPO
zkSV?R*i<<T9)@3DJ2cA~9B(r^FG3*hycvwCXzZ?u-Y9QlE!zyfrOO{MH$bv;B$E3z
zZ~%IugY2<%rTODR_r=yTkBQnT!K~d!wAy#*-$E=nSd3bVp%lq?M!W;%ash5u2x25v
zBvO1N4YTJu<Z(prtC_y&aZD`A;XnyD)K*kgM_;4h0G%h^`9|a}+)(6<QUqzZKTVso
z#S;i#!6!#5u%I_;Li;>G@t$_Q=`S9;;%YiGLngKw6qQ@Y6qDtdF?1Y%Xyhi9rNSvR
z0zMeVCfV}&gua@0>xdoida&Nrdn_bVc7CRzY}#v4QHo?%=Xdnq(W~w`kxD^mg)v7{
zHZrTI$}Bc}BqPNi69oaa&SG2cqpUARr<9|bQ)afv^Zf9-G>CtJ0g-|1VS)6O^I<`Z
zaY5tlbC8`m0q1b$7P?eJO0!=Z?DMm5n*~{3F~bNB`c+7S@VB39F<nGHi1p)Xdv`v{
zgb7C?KL#FW<V@rU3@SxFB>sX;hq3H}dW>0nqmx|V;DVtS7Uu_{GOdu=O*I6|PeAT#
z|0U0#rO-6Z3wbODK=4H!`X<mom{^q>=sNw!aqA>YWdBmK7R^@SLac#5!%3U!EVf!~
zWtGdqWm3vz_|l|rbWR-VmIn$gIX=h;*Gw@fOx2D~eg%A{e@%q%(khhw00y<W|Hl2|
zD8Hw%7*qMq);929X2Mr{=syC>%P14Rah>!BOqH#=%2b;8YkuLZ>8LQ7!$QoM8_E1R
zWmy#?Re9wwCiY^qj%vEavS?1ketVM3Uq!i(ZJi@=_GG4vuaJUQoFH%J$Q-0TQw;HJ
zh7%Jn_uAgZiBcsOAqD399z<_&%5$}urGMGF#OgXCLF6$tM(&inwxoLH`dRGRLMC2r
zenCcbiTAk-*fyzK!N_?u%y1@_#LjQhA8oV3udF&~kks_uOi@Zte=73iNJ<mi6cF#j
z{n`vEOAbDDqRZq*lbFbT6Y>C4_Mujyq6^$Cz>p{I;!LzTx?auw=83Xc`MQBzATmbC
z2hFtPg;dMsf#6p{=|4>_bImosfr!O?hl>V=n>95B46;M6jcIuEKdfeSA~4Nj<<PX6
zL~LBX%yGqIxnIEk>@5B`Pxzqc_^@mJ-TGP3<yH(z>%dE)2e07V>Bk2vXV-aC)RHM@
z(dk9DKKa*4b8YQX;$Ks_buNe0#oUP%@5b15Qd4%qtlN(fSL!@HvIkq1m4UfQHz^MM
zv?C>2z`<uT^d8Ik&REZ&H+wRoSapt(I_0EpHA)kt?IA?~@j*!Ck3>~aIMQU!Sn5Ip
z^n9^K*c|>DM=2WBs``Mg1my%uH22b~<=z~45e-vY^L7`#GCjUQ!@GFNNYNxAstRnE
zLZh<GW=bJPaqPCW-djs_tK`Yvq@iN<K|};E;GkZX6giAgE!8#m+OeKe5D`#vdZ`MR
zDeHZkQo4~_C@n#W;%hM0v}TftC2L_M!sU95B(aoGTLGz&)5%pFWWm_w;{4H;%{9bh
z=P?S&;%E5E?il2vz0h8)MZQ;ZPtTru*G@d0afffxWI>5Omqi6DBPp6#CV7ovUBNmC
zjHS&7qVUM5e`GbDgy^#}5ww@XxuT!rqB2+<&Ki@M-wdP8$fB-V0EdJeS$BJML@S2U
zvnSkarBItiIl$q8*X7ZUXI@ITU*w;oEkSFIEkV$?bmii7BbZqk@<M6PNL5QI`<_p{
z`+UUPHR^pt$0(GVR93H%q2oU4prU)=MjaWd)h)Uecih35?$S*PSvo$wd?P~7$2f_7
zFy)aHU<u%u5RpW^Oh<UX<iav!9fIL^KR>%>0Y|Ot$^7DGa<q*fA$=locqE5CT{(d;
zGwP>ngC<x`B;o|wSQ_V=Z-Zi8w(#ecy2oc-Z^QzVO#l~-+)w8zRTizXTTQ?+LDD5L
zh{ZxO>+n{e04G9!3F+Y#S!OcpWg_Y#lnX&$np%_A1w?;tNr=}%8q4$dC{3!Exo_Si
zxeJZ6jxgr!PunN~je@_uSWXjLpZLz?3?q!r7@7842G3i&U)}}0thNb$yel=NLMq=M
zPkYBZWb8)_TLv@@(1wi3bD}`B6%oC`c|fGb$_lROKY8rk2GP@*H^*1gCsM_ewu}K*
zq{xV`w(ITjBFR-N;dW?#7){U*bp{3&U(&rewmyERA<K7>DNgUJ@jho{`tEB9E!2dJ
zSf+BKZw=6x5eNMKwWYirb;lfM=>ViFtHYjmJj8e5!ZXRzs%P`h=3@XGT#0<<TiIYh
zl@Emsp>(Q=mVgKTnB!n~bNo+^Rx212Va_j)t>@Tlq)DUiG&tt~-|`-tf*s>^Miz2E
zc)of5_9DY%#m?cTau!n(GYInrYdP<Ors`?F0My?IMVN&Z#=9oZFiNffZ&@-NaLp~Y
zllT_PQ^FFR2d9jit4RQ(X9CXoiAb08asPH>%J`CkBAW|&i~lobC=Dx49TH6|g?%Wv
zgsGn#^RXSa8b0##b_}y6s;JF^d(4BpA7DI!u$pI}%Eyy#XeV=vn|mecW4OpbC3k|t
z<%3tsgmyLwt9cVXjB;d6Qd^uwUH<5tR?8h1A<x4KJo}SxGzH{|R!l4!O<Za@l|7e9
z+*wX=M!Li|ie%gn+3M!SI^+H8m*O;16XL~M?%pFStGjHlyeGtF)o0X23v3y{vS{n!
z>Fg=r|JFy7song}@ytg+ls<o83^PU^69PJ`A^$slAB_8ZRhxCN4+_>eLiAtGzY66n
zrZb9Pi-ck$!x6w)NZx8JL8YRrzp2I!XBpwKEJr9J+AvcFv0W;vb4m3#M=ay#d4<!G
z#TTJ53kd{?L4k0LI<YvwX4s(%npI`P5q~!AkYkP^%*6|i-23Lm*&WW6<5*n+p8v5k
zuZ`<SkdAgVONxQqEQZ`TT|F!mw1C`Alm9orZuqOn13mDL$hU4(wsjFtr8k7SoKk(W
zl~$wG)t8Ox2hxA~$U1UYe|3?z1)WIRu%yx-@?dC`<CXa^%qhbw=oX&wNzwM~)SW)=
zi-^3cLg3AbkLzUqOeM=}rD@+3W=Nzx{E&8_*Y^;Z1v5ZoM+Cl~Tnjn5plSWYb4B|W
z*~4!jK?P*yzTGQEmUh2?CY?_ntaL_s#&GlZU7$QKXMybLzf6L&rb>aOzlf&C6EwUg
zH&50Vpn$BGu9knRQ9^0JLX(E@c1(2;oaENhcx0RJniOJlKV)*h4`UsSSNIJf^wbf`
z6qWHULa<=GqUJ`3uy_nJIaDeAr)bq_B|X<U7!p9v%*hir8JNzANBAaA6t-_<{()%J
z1fRs<#sOvXoUJe&dDf)6-PIgAz4f6*N(0{W$1L9Uq!BKjlm>Mm3yMb(9oo;4>6-FN
zz%Xsfchrfhz#dxYn&p&T&I%`^6|4yUNM&M^a4a1cba~nJ(Lq;;OE#V7&~szlvWEH^
zsSF4jUK3V<=Ui8=Rm7H>Y##o}D}<1sF3T1w)_Og`Ghq1|oNN4Kgi7_W#K0l0a_Hs|
z`l@#!z(AJ2<>k*vDDaKtWE2&0oMHtpG&0GYe_X>V{q}KzQ_W^(r}Us2VOGPefj>yR
z=2nJDCG$d8CgD$&WSP0^Bi?<fc@g+Pv?@SRbX?CdpMOq4`>+WW#K^wgnjcfM^{1#l
zXN>}rmcn}=v%7rDKW?{7Q6h#(G0RQmHa>#>@0e57<k1qVxUS#}s)u!cQYc-)FQblU
zJj}C!f8U6Zzrd3tCJ{7NAPh+*QUk`VaNc=n&qE$$mfu^@d^QOOS0M$zVcHtL#Z3S-
zPOd*8_J8ETE~AgoOu>MLjuedfGf>=4atcuF^g^5DapsFscz9Dc`+xT@$uG{EI~$zm
z&YRr?p9F7~SRqR{SG@!MhR-9&R67+BzKI8IsQ*%oJN>%#Xibu7B>5yGu4-hNv~H71
z4<9jQjz=pHEM4niY3S6)dph6}cLoB~j0kt%HD^r!u7PO5D>}F02-t1W-W%en{eWW7
z!kAk<j6%)9yNQI8GZtu4s3rq1A=V7S&E@a3N4rEe$>FF$R>aGoxD^tDl7b(AdHFH=
z1#%K0<S4!P4YhKExXMMXSJ(u7xFk?V!TQgku(f~f8uD$QoYc7_?=V<P&guam@&3uw
zI6-$f|DpB>oALIZ6QGkuNIcKi*~bhi?2$80Ks<7CfU*^m6nC)y0~wEkt>90fiTn0S
zubVbK_Ak)OVK<(+?%MQ{xBZ}jAi8b%afS+(a$?_x>YZ(?*F*~Z<-=N;=`VMrr*e?0
ziCJm8>S^{_L%f(h<ym=4a@7&gT5bAqMW>Y*Va<Qw3uqk8W;8WIbuaEHJ>^2BWH2o_
zD3dfIyUbyybp%JotLz!HuWs*$;x@9WT!ixM8m5-pG+Kt&k~0;&f7FoO3K<HKRsGW>
zCJ7|dqS2F;BN{K0ltD&^IW@_+Et>C?vW{Jz479j|C8EA{s6wD4)Xo8fLsaC|ohkau
z(D3b4ed{`;?tLU{G%2pMVkDg()4p0D|2fboAdG!qD6eANaXN&XC*9LwUrTQ4BkC0T
z$0SR&!N=Z$yV}*Eic|8QGcK$J<*jJxb37h=Ya)Qx8B3lq`|AwW!|33r=QeMZkW~e|
z+Ru<<R}s(GpHY*W8|9<GTogqI7T-Z5*lvEHsZ+B>@n;dv31rr{9UR1jht1qNXY6K>
z@;z+LOlb5Z(J>kb2ddK(D2((VMM=cy8mmTWI7I9bX+pv<AR4ZVzVj%NF0V{}K2^uH
zd~DxJ+cFc909`nM#VT3qaJ8br!_}LGhnFvIb*`g%z9whG-iaOvsL(=ix>P_Q(;ItU
z+fg>TpQ^oeT1L=ur@~sd#zw+->}#H|ca?7gEs-7m;C8RcMC!CQ&ym5^p}sERA$+e!
zd@a65(&wtEYz^L0$-#lpv({$9z<?~@zNN(KCFqn-+4Zk;HMOl{G&>`cX-71&S^0xN
z3vIGWnCa4mDRU0Exmj<BO0OrTbKr~Xx#=)Oo5XNMj~9mvetCIp&(PFb+Mbjxvy`f}
zm|~=k*6;q`fwPbLJvfbD*jaX!O2@4@U_ew50z>RogN7mu0-GsMf|a_ZdLkqP^Hy?`
ztEme4uc`*lCS(=5<6jSBV)t|ce;r}h=F=^?x1TOHADS;V5v?mXH|en>SY5rVH@4io
zQ&os{UN)!3Fym>LGlp>X)oys9gKe<OVCp4P#{3PymMD$?mo8(Ki&krL)kUBI#)!YC
zm=*_KbI53x|2yRtn$q4Lca^}286fJ{*tJt6Y&&`6r81FmQDzA67@}NMs^JagrgZ5;
zyOrs`g^mBbWqvT{#E6p-153>YKh;u5lhf%D^y2n*QH#@1(vw9t6B-N>raO~EVic4i
zS;jQ-b(+_LRJ=mYh)i^^?L><J77wl|MJE%nBv)W~pRgxHFN6i98+pIBb4@)eMrSXp
zvAoPw7AW4Z5HC}Q=@(cWCu?-d{|N6y6Q>=b6Im)-)p3Ha2+yeM+SReVXkr7*wF1?M
zb2Wvj4o>_SvL(ayIE#6Ah#@rARTWKgjD9y6U&k<q39j^ny?@wicdZ@)yZ&8?YwuU*
zs7VD-at1ObTT+O<p102ZjDA%r^+*Ehy%|Rs@6cxf?G;ynq+{s&5n1qL&hTT!YHDsy
zSxcT+s($u&hs~u_cf<MBp0I9SGk<ptSTgwYQ6r^vK^#eZ(yh5p_dm3nlMcwue}`Ij
zAxtqo>=^36>ZNL!R2P&0XYv7Gg(!Ru4@B2u4wLM6sKMvOtVW!3D(mbGw6v25t1n@H
z#dpL%6HSwj6nk`jvPx_2IV|<&amgM*`pd)%jd*9^*ux&shR!8vjdS#R2@(w}liH}9
zF1TN=m>wCzR;pwdU1UXO2hDA_3dKo>B2I|$Ubhk&{#+ht5=iC%nsXG9ZTk4-XuOR1
zLMr?2v*zvP6eaT?<qp8XL#Jb{7h@&@d49_?3nA!E6+cTM6=qaVe7goAXnClsBr{eQ
z2)XJ<7DlQsf+`7z;H@#*Ho=c0;rvS`4R;0>@Z#5((dwC2>j+u_O2F0GmNECdK9miS
z{aN}kM|xg(FLDV3{F_od$v^|&P~ghI04LNfd5^Sh&}`fCjHqCJqof!~lR{rabkv9%
z=D$<6O|+b7L8O??`?BFQu!M=bg5wl1;LOVho^z!R2dbB#_ncmGw9(CPtkN}iiCJ6O
zEI6f<9odFxXF^&-lCcE2T;4Qc*WMP_7egtSdmm?syFbzbj`B$=f9jcge>BVU=mn30
zlEY3)Oo=p#XN`GQ4Yn4`O?c*OOZ|S2tfXU9!4`gqo{%AVSC*7Rt~$lQ3MMMX3FL!E
zC4Wd`{N|IVdQ!7sgn2XwX#v5?C`&w%8Ahed@(mwH-4Og?fK_jq1^#bFFN5In1awd9
zj^z*c$wSmDVAmk1aFxaqpM!S4OGSOhHDx?L-UjrY%Vljha*y{sgO>s9z$ybJeOWK^
zp)KcPJbIn`mU{t|V|2NLo_bAc#Z_lRK>DG@Hwmj{xKNcG3vm{-)`EJPP(q<9qX30<
zJQ4Qz;jf$RBbH=<<Oc<V7iXq-a(0>P=_lBO6xOH)5bC(x$Nq+^f#bP|_!;+2z0*Z!
zQMv>T_FTWebUEWNW2p1*$XvS6Qz;)4_UcJSigG++519)IJfbiQjZ(u~3@lrUvIVv3
z$+#}k3gXq}%O;4NNfBF2qWdET)jlZN1R@GD9mj?B^-r^oF9p^iJcOb8=v!RdpGk7-
zly0m(fGezV<^n+zJeW!r(cKQ3t4sHiapn6u0=wk{t06Lod*$||R<SHCkM@QCIS$g%
zh?uk(vjvAf9akQK+;6^uxXyYhQUn2)AFsDrokWv!d6T$m`R$99Efu~*7R_46`7>RN
z9u6X3Ws$vj<GRFgN#Z6<=k&EC+czXeQ*p>K01dgH1E%VC$D@ap@04BkopAECet3tt
z2XWathuZPk!<{Wbk&?L0YmKM<7hQ2f$W7jExd`kXWeLkHgf6;}i0cL)nNmw1Dd2uv
zL5-8$?3qmp^9IH_ltL|0<3iIp))wt$jWsT`^ETLeR$L|4TD++DdWHkX15^Dhk&ecN
zKuN;}YM#7?OL5<=lR#B_fuz}Xf3JE)8WYE9g@9A>0$EV_9Zy)Eo#L&UHu0}cxyImp
zY9A8_dLNfb9!p}3sw#^X6`2GEXJgUbU{|Mtx98JrIb1wmpN(=4C2*nMTCb%7G8*;o
zY$S;yXv!KpZ*=UG*qg%Kov^lQC&h?sfB~~!GMT>F>@b-}+*|N^+J?Dx80g@TQ1o^r
zSsEv2>a4t=TP!%_bB!4rh;{qKG0d+Ks(^3&sYYvBIe~*ingTo9vnMo-23q0pAyBvo
z+z2*~)bpbr&w|v!hYcwGT^q<#wBSu2*eaPG8uRyIF)IkW#4K{K*!yPx4raxtfbV?9
zz7_Ip8uR^!S5*L7^OG0(8RK}m9SSz{weW!M&N|3r#Kte->&mb!8}-P@wV*NULs~jf
zT=QmPubo;OR9zND>^8(ASsX;v$}dZ|HJBx>9zW;LY=+B<p(aPzm5cK@egX%LcwK2i
z4=_U1nSq;gR`@7uO{A1Qi{A`2fb}*%u41pbiFJ|NkV?)BUpmgQ{$5MKp2=>`k+T2t
zDgPw5<cAs>^6g0Xl|qgEcD8QT1$e)?J+oMPaedF$nxlf}<?o9>1eAOb_Oa%ZR{8Lw
z$>T(YMT&eJpeoe1aM&2$nDFS=c8X&mhVrb}B07tWu4N4q)ytZTZJZV?00&kmr8luY
zut!TnAdV0ISgfhKU+uQ&FPz^rbBiHeleJ36OpGy}+)Gk=0z-SG+e@F$asZig;x=@7
zKzO!<jC>6tZG2-8zXyM|cgX6SKEnrhZriEnoo}lxKQwCa{ny$-<2yx+bIAhhUo96O
zkLM8}il+3#+-wFgMqMHTVm5i<h~6WLl^d6B6{DEUYGS24mhp4gw2r^f56QJEqJ^xT
zI|Va`&jNS8F%L#pZH9+1+5+<JZAH@jqkMkjza?YWzt~QyBlC<9*Fu+$<9wldr=J~D
zHnbm|$3&q@RjwM-{8px>?v&{TFb7%r6XR#`vR+MK-7<?u-Z4`^m?^fyQ8oT?3YWYi
zHkgp10k8a@X^zn=lZw7ni|+_D<%*Qg45_hSLj~Q1&jeb@tXbI@S6ZX$mUm)=x){4&
ze$}CV-GGoSC6C2<iYHgez{pFm(;WQhjk6#z-U!9FN>W@kI1%tmZpdF3KJK5F=ZEk2
z`;Vs|>y2lGw-=MZB;{A?UF1?_nvaNrV%e<1Jd606Bn86xha;rb3!k$g(sNrcQr3gr
zh;h@^t*&lQZwI%hyR)o*FZEZ>H?Gm0+Mt)8JVY|BVT+X==K1?gX}J3r{qD&rZuGe3
zA^4OUE)@iR$g2jxPRbdf^C8F*NVbypjxghZ#*jgH9nA*@8Kj&v=?08YjlB*92NDl-
zg?G2(+ouf&&z!vZoOk{ZqNFEgWAiqL%v1D-zwWbHphmKmEWg7QcIJsAW11fQJNGz@
zdt#XO)Wy@d(u4ZLzeN1-XDTx2AA6G1$W&EDIVrhJ$)A{)Mh#W3@ne4Spx_AJGKP`l
zNgD2^5P}Z?dkG(*)28kkOTGXPa;YN+o9>=%Vh{L6I_Ys0faz}OOG$y(cr5==JvK`O
z!E={_+sL=qVW9-x2pZz)A2&pcO#n9j!e6BLaJ=0K>Js31%}T1nhU)ELkgH1+_kT`D
z=-`vG-XCIXZ@;g@_upLwBPJe?8W0|HMJ#Hj0H&|B^rl~%K<BBTDc!K;mh%ENwq{yo
zU89)tdpF7wsbVa6SKh`0kxlkcE6b_9C+vyf7Q3tr<xD*`>=PK(Bztm#Q~=i)rooZ5
zS5(4W!WXXv1sUe~*Yl1vCN2xrwVgR@)=b>ddH+V!*TlK}@jOlNF3tSoOI$S9`_`5S
z1QX@KllBL`hl;%<2ft7by-b1mLdW}Qn{c^0R`U<qmFG(=%RVAxFWJs!i^T|<b@^&8
zg-fyXA}!tK%3cNDlgtJ(`U`#KWi=k$4Y^wvhe?HcOWKF`5e{{9oYx!7zm=wjLi6|X
zA#w@i=;LXjsqc~{HM#U8P26T2woGUNNZRDeJfxnaFpEoNJSlX1ce$&hF9%k>sA&%<
zkp`2pcv<8h=kX=!Miq{Rp?hoHlEIkD@~#9~?s^idH-G<*Yy6x2aZ3DPKm^>JM*eU;
zd%Ji$%Ur*cId9)kHzbE40&kzn?8|g4o43Wg0+(=<zU}d5d~F=rUwS=QW7d}d?lz4p
zh&gn^>PpSPa#CPi>1fxePA~={enV-Jr+|~I4KYs@%lkUnwTqT{Ad8(-u5#bPwj2m6
z4Jcj4>~6#XY>vV1R}ND#ux$>-v?3-IdgA$g%qB<kg@p<t*cgF_ZA&_uXN<CsW;^Xw
zqzyJH)GytIE-*4;OV`iZ9`QNAftocCn1_7#jR^rt5>;1)3&LPy#{kN~713kPP#CzP
zLF*GqEN0zrf+{C!uX|Zjc@N1a{~|1i!YM{8$tlUh@4MGC4kQR<%~fZfjn72afd1%c
z3tm-$K~t>IAI}=<)PAHN+`ImzRf(I^m)1V+jYts3jV=os9Wi)yj#dw}xOw#Chd`TR
z|AdcNXYLHhBk#fXY|t_w|M+{#c!GLo!0qDL^`&u=Ql}pI3QxTjehQ_dL8ZwJE)fH6
z_b*D8Y!@ALtB#1mT*$VIcQm)bKJ9+T?l-gPsM5R->Bf@056#S)g1I~o$j?6AHKIm+
z=UVn`f*}Xl&P$7=vNyo{k)z(YTsNLz!YH(hdP8FZM2Q`?zur3)_NziISjz>Vcl2iK
zgHim3$pp!OSq3#?oQw$RnH#q}dPCmM6zL|6JdMy2Sjst(k?J9c>HHYIDa=u_CWa18
zN{oSz6%N{?P(0>p#Gc+prx9g3MDiCEHEPIu3T~;;U+-A-P6?2|9SmGdD-{tkq&bwU
zUffCHCZVs`6Px5v{GJI1vH2aIhQjZ$3hX=p+F6{gnw}f~RsyRq+T`fps?a>;($(??
zUBg_Q$A!}ce2UCt75Ado5!1rqTZ5Q}huM-2=EurYL?@P*{pO&Dj?h1uA7H_x1-bT5
z=C+WGxl9A6A$owYE+=61H(t1lgLefduSz^N92L7tO%7A4xVI!?=!$)Eey)7(=sT+O
zU={-0<nF%|-DkaTHiTQLTB%^!-<Z+qAjZ25kj;qdYuoc)elv}=Mr+5~lx$mo>M6f^
zNI7RvFtjgC+*^A8Qh9ymw?Mv1o70WjYVb}e`!Crjg$ckV{K?wEir?Gr=`E{0bUDFv
za2_uv7B_E_q6n(I$N4XrF!2X5VRKAuUT<D3Hbe5uZ<pr+*9WsO8@a+x6SV7}c>!a7
zA3+mWecbJs5id<c=l}imb$T_#3NQts`nKpMmwJ%mb?(TFoSC$sndf_Z^kRdoeo<CL
zLeiy8O#t?zTc?R*F>{iHvY3C@9O^zhJ(cw8nE&ez>Xyhe<;-OW4X7@hPk(ssOG7XA
z4rPrB|Lqwhitr<mOQhyof7WXB!XX*(EwS1gy7_4@yhZ5%R(D)KqjnAI=~{!P#*A8f
ze9j_gC0ZAjITQHfL>@=x7Y{m*9JP8nTl-7A5<plC4zzz~&gmz3*f|ce>~#LgocPud
z<;_S=vncx7<Sf%S&qhLwofpEQ=?5bmVvM@;P6~%YqWc*m#6Q^99D`@5cx)_rY$&KH
z-tYVsELV@CY3y9;p)cDxVr!ZvOsLM<B~V<;XxYzcgeG&WqzLGKv;$?F`FGKM?)!N3
z2nhCK3i4CJ@VS$CPXx(@>`&@g(Dv)`#NbH{9Fp)bGTL3=FkX?Tw3$9}(7wx;<S$gw
z4)eQjTuY|w8B}I!+gU3Wfv4cx8Ves0<e)PM-YvI+P&QHD*K1sWuCYemwyUqOB9l~X
zgoc<vYW$-4CJHj_)h^;?dUSx=lq~>S0>GPdjoNLl`NkGLq`9}3vf8D|NmIaAd)Qt?
zs_rdZ;BBZejWw+hdree#1bC{$TGWSHNgEJ$v1x(qNlRPc3NfwxLZVvJz^ykQd#?J3
zM(oCzmySL1BTVI^FyoRS>0MNY=A6P6lM!tN*CC7#+KA5S?|=5O#gn*O<~i^50zj*g
zR7%6VA6YI&-{k@@<K0y1veZ=szA6ox$~F;e1!^au0<@M)oIMpLn>{RRf{Ept@0~}G
zW06<LNI?{EahglxAxbcw@iD+1ZR}N2$aN!OShg$b`m57mtG(7P;LxJ0Md<O&fAE8g
zh-6|mTbcA-EgSQ^Xf(p?tbMuD02!+tE;skVr=2X)>^{st6hgjaac++4f)Cp~6P!A4
z!_Ey3w$Tte<o#C|3p(UNt1aSz<yT*imu>t1y)JNQ6%PbF$pfyu7RIX#kz@J9d5X1<
zcVtC)^p?{X-Q6lk2@?%VjSjKq{_L|gMsud?jk1+s&-IrHqmY4O0hnm^>m=hV-@r&%
zi<!3gOdCR<Orf7AC{&Jj2BcEpc65@M_ESp=e5=cad5U1Im`oNiNOSH<<Xqh(b3jsM
zOqxwe0FVc*ZMk!Gi5^`pkzWpdHC7_0>$*&8qq~^Z5x2D1OkZ2{HnENndpEYvIQw*t
z4ug5>hM~A*c8e-Tz(yR~t5O7A-9;L)UclRa`GYT5(?JUQ#lxI;d{w#gf}G{|(pdCG
zCZYv*A&CvaNg9N4cMIzrDscgd42~8&_~s^=I1lSwzT{1<sQ|fXBL^>IG(*5!TX*;8
z+4_2BW8|Z5&L$DM#cO%Gk074wA3Z{LsA3RCqVJ4XzhF~3frVP!heMn=ky7rTYZ;4^
zQlur4a-13&5{yk`6a~&4W3~H(v>0vVc{tZTh|MK`##3r-<I#yDZmVRqtiZbvBE9#&
zLIf=?m}=P&hNWw&5GY<xr^jW{#S`h~aW@Z~*<bgZ_046*;pQ#E5;~s7k4VAj`lG%Q
ztSTz$#(OR^AVc`MTZqin=CFJ60DOUx!~hBbPkKql2X<pp+YJnJwD%qXt0M>z>-?sZ
z3iqbgZMK>raOlOq4wY#p86!$jvAt9F?_R~@D%gTRPM8h3J>4!nfcJ`{+RBUIrYF@m
zP<fo^q94BPEgqKw)_~yAM`AkhDDyzi@(`N&?Y=M@$VA5I5FOda5V$>r3@SUwElZ|;
zvhJ?4=8i?wBXB~#!(zyR5~jTyE8ujNr#HJwKq&cyf{@<|F!ro{<Ba3jmBb4#D+woP
z7v1fF=gTEa>FkL9GWs+7${+=)OIAd_+8n-2@S!s1a>$!w=14V4_)c09HB)?t+eyEc
zYb%EW?mD>B!l%V1$V-^C{K)4`=2H60w5i8yS6D2peV91LudH_K4X`R0DE-gaIr3!E
zfac2PIu7<cxK0fjugZD}IgAMrvW!_!g|?i9Q(-Urxbg6&9B9YK37s%ssHN%0B5k?t
zj=2n2!K1cm<)E12cFX<B!8Dbh%ddanTKZc6nfr4E<7{<HXov)I3>JfVez_zgSX(PP
zGfy!Nks*eB^oEh{MH)rMHiK6k{(S<>2DIVIZAm8MM;P4`e<M8vXEWdCGFyw%e_}f9
zrW-6OR#dOSSt|zPq^sO(q`GBf?rJSy3;4gQmugrnf=g*5xfdDIQM?p9jj?SssdZ5S
z3KL$^@_VdHG`534s%Fj}KAyFoT{sGjx?7p;60%m#1PoNFsX48F2SEw6jnKnl=q-rP
z@Q?mtGn!F0tGc7}?;6L2ql&~ya-yl@ZGv(re25QV->{_nn4I%D3RzQ*<)1C9h|^wb
z6}+5iXU<tH2OBLA<bTPZK`c?Slg%Cjb(qTBDAB(UD54?h(Ha>nG=)ZVYca-GS26+=
zaf@fZXm$MKn5o8$X0yU=j8jfn1~%#QN|l3Msekb(odgr{FGUI@spk6ra%#ALPUtII
zQ_<aK!G3@r@U%(7qALmfxwok}3GXo;3v15b`UnS40ZR33hACO=P0-ofoKoz7QW#G6
z{!{p*k15^6(QAbz7)Pr*39I9)!BzC)XG#A?#&KBHNn`T;--fvd6x!MZ%5sp5*dk@i
zlrFn>zI{mv3{(-3FidYn1W*njYH|K^x&j(7731a;i<tp=?e1O)?Q;nfj0LPxmIB6}
zknOg7N{8@h&aOwbH{w!Bqhu`roEJ1%(wVhBsIV}YM1^GN){LrU>hS#Kcq=&{CeF6a
z6(4Ogsl6DiLi@02^3#UZGNJ`(V%u+qA&z_{rewxSiJ|N(Tyf?Q)Lsi?tQ}}5Fj#VB
z|0f~12ygbXy(_Ci1sDj1d|Rw6Cr<EiA{jNF-SR$`?mN=_fdZH02bVrTQk?=eGMu5Q
zSw<C_0Gm7II|O?mGc?umF9?KGos}m<LM*n(C9?#MAZ!c-cDB-&;4<h8R7L2Q`W*T+
zsUw1@8&%a2#;_&YA$iLj+(~6KwZw;R$ZL;qpFaFRFS<cxr!*>a5hhJpDD;&*@I?j%
zD?g12QRyC*cLDdhdUXikWq+9rS@KDrjrE`9vTlMEoF5Noa;y7)ID6}$$eOQB5T|i(
z+}+*X-QC^Yox+{Q8j8l<wQ*=%8+Uhiw?>Dz-`}_M?apk>#{N-}ac|x{l2LW*<awTx
z+03I9o~x%~sB_p#ySmJt<;Yq-)E-y!?Key;E*lxK1&B$(aOm!EEmoZ|`I#_IzKsG?
z<(kwG#I+XA#j86OdMeIqx;Qr+9rcVm7&SyX3opiJA?V?|+Z+L}=Digjfc>)S9vYO7
z3qX;#JXfbKK;|^(phijKqMigFfr%>u_F1MBynoq-=_IsRB`S*PpgzUA3#C=O6?nPh
z{!1mOKEPf&ER5>U>ShZ15bw8Oyx}?IXE{ZW_ok@b&+R{+pd}A@2_`W!DqU`Z&(a&$
zQyr%mxH)PR`a?Oi;9~FSc;_hh{JpT_S^-r`7Jd&{#GJ;6=>3l&E<F2BI=%}*0k2i^
z;-+6Qr7_MpKEYlpV3-i`>>4QptORVHH)^h)y?uL>Uug(O1$e5-naD(`diyVi5K@gF
zu7@!NS>Pt0uhUE-@P~ov5BK*YE_?TH_zC>K%8{66x;9TlWH(5c+~bPb`L`asRRR8+
zxgb}MRG2z>!4y<mFO@A-RSYRi<S~3E{YD;NwE~&{*5oF4i@#oODCWE_tbW)yUJey(
zU<v|$KB^MFUz>bXylt)_<(yq!p1(b<4`gJF*5~|rcNB~!>FCP|Sba&%dc)%yet*{l
z!0RmH*btH57;Edi{Ry|eN9X?m5Up_iimmMUQ(0%+!XS=kp2N&1Wx3djNkO1cI)6A2
zI}g?XqIp`~qP*wGou1|V)*6;(_)zi#6Z2>GF^7mppRK1mS+q7Z_NW2GOZ-K14@*!=
zp<@at(N!~Mv{e)NQh&7(vt8K^3l+~dwp`Kz-qgodK0MhX1TW4y0rB}bz%NsR_<3{a
zW)pvi4foBuz~QzOOBkR%k3zwZTwJs~xPi{F9qV-`va7n2uh7<uuAq(AJF}TVgy{GC
z$X;y&>;K^;4b|l8sKj~sX$rh4xDJL=Z1$x=K%L9*2>~z_gxij5<O;Aq2+lS0_*2aZ
z<#=29n(MX6$vO`f0KtPM3Gph?O(<Sw^_kRthFot}Wl)GIzhKf%h?mB&5lN{pw5zva
z2w~oBxocb~PD5>q-ORBYl87<%xy-(>o8|sw5VNmFrgg5@AI7ueylJTn;o4~fJhrm1
z@g-U7e5t042zLz{6J*hhU~aekowrj!FkZmCNH-%sfoMJG3jhIedQ*90dk-;P?A!00
zP(dK})PtB~cC+_JfB6=Jg*wKi4#)H5d)nU4N^Y+ibty=b_KV0L>k?KMuGHYZ?u2DH
zz4XDfNY>wB?!q9A6v_ic`#M3JgsLmKhCph?vRa7>l9;>%{fLRf;LMrt<Ru1^l@_Z^
z3^-#d{2_F>0|1G`i9hIA-c@Ch)&#n*E9(1alV2_zr166YlsxNgXiTS7LDt4*y$nr?
zy(Uah<E#}($6ZcG5jLov_S$(PEtq9kuvbw_XbDt`5Sb3qN2Pv{Mr#$%=b1Ai)hB5m
zZQINdmK$z6lJxP18b)2jf>7JPW3pT<*r(K|r!QcmrUMQwMs<s?AerF3EFSm?XI~V^
zVk_?pot*i#^lH}O{Mv$?n{f+)`5yP**e0zpi^7Ou7q6rQ$Ys>(lZY+DEp2%gasm7O
z#R*5Sy_kDq$PdHJ^_Vw@i@_E)bd9@U58vO!H@)4oR90Vq@xK8bPev~le;bg~_!&wQ
z>JRY~Y5<C9=3tPcCLky9kv_@gWLwgtku)r^RfP33y6l58H^XRu_$Z2Tn;j&yu(Fg$
zmO|P~5nR)?Be$zZqEBuuE`4$USgd$&Vsgl_HMUg!R9+`>W4$duFK$1{KI0?m+>|9!
z7I=wO&nM9c?ZIKuE!;v&a(g{?rPFnW19;0xJ^=E)Hjz;iS<`NpTJYQEvR3D+)YZ)9
z4F_7S3vUvtn!j|P^JW@h5~_~gwXH&qriHi}&EoImQ<_|sN;jM*0bCGBr2@LUwMfMd
z2vU62?@XSabe0wndb=#NPf)`{{XAsH%#*tY60ZC~o?`fH3x{C9HpPZJ+XeM}x2iHg
zZCx)3*SsRj6{+W83&dEl;yZO7O0|DY^YYllSDfDP=MRQF6pa%=+dW7Dj|a1pPB7dl
z8K<$W)>qZ^dpf}q^O1rgtTx)OR?iIW)lns^NHVM<gDm>F^uj<rdTEM!5@+rXI!e&a
ziNAcGJBq@ipk2A4fu-&4al+8p0Kk4aw~^GJ&(q!H)e_ZzQu1k2Ti_yF;CT~rv9SQ(
zbVYtk(=bHRj<R#+xDUlTqX4a`i6ccYl>5ual0R!BQe<)BlOPRb+}SK(3#?m|(u2FI
z^`rQWV1C)~p)}x9Bp0Jp($+fAaDh^}q>`iSum7$^Hj*!v9#;oQP%;0)R|i1(8ACOc
zUlU_X@eewqLrA84@d%uFxXQ<!{z`0n#9Yeqa>a&Z<@P9ai>Sk5mng?t&OPWvKm^pb
z1RrpSn`K(-ml<>PkN0K28fO}KA!n^j^U(2{PiaD}I4cTErJm=A4n&%6$46v_d?&o9
z8{G@ULv+%9fJklgxczaQA`H+9N$1a^2wY3G<=ay6ZNaY31SL6fp1|5JLqRH=B0CU$
z3DtzzTAldW&h`!-N;EeJQ4V3<f-#Mxuy%-Yll?*H>$tf#7{~Vf4iJQt@qJ9pBC)o-
zHB&sZd@NHjqpXNNFC`mjJ<QHLg|rkxE!s8$GZJ%syzmqZgJNRz%K(5f?J+I)5Y~|-
zg2Nl&#7TI5bSoM}G{>H(^HyLLBa&atA88ieN>!a<NTc3g5@Vmc$<`kFAM=@KcDoxU
z`r$c5P1UE>)3E}-jvnS+!g1ohMp+5c>qD>EV*L35frY?jspnXmA%EkHbSLn6yaWP%
zR-G@+(qvi}PxFsr9}U2g`Z?d&WG6YQprjxSzt@0)>37xX37xz?z1W`KRv1m`rqYHy
zpPj`x<N7#*ipGm{R$_sr8oa8!5cb?W_=Ug&7A^2{^I9l1+0iqlcA1vUC#89~Q<j#Q
zg6+2g(G~e$H7Ziq1}_Xyi5<PCQNK6jXIncqTI%VavT64xGj{<r6)Uh9vufI9;w&Af
zClcsgUFeZjauiN@;$+G5&|+r67f}NHc4`FmREA$S1Z5fq#Z1z<E(c0~VhfxtM=Lfg
z=k?U8(}vwnQ_Cxh7hzZuW|f5%BQq!m<Yt^6WMG>$29W3}RyOCbX2OolTr$beHT;~d
z_>~2gl+A&l1^El$a;-g#z)C*H;;imsoKk*RQBt9gUvd(7C8q5VoEPW|HWHd};MbXZ
z8}{aek~k^d@1-{kHRSOn%A7$aPR&=!xb5sxWpkYz5t91nN=HHbIn1}8VB~7UBM)lp
z>2tqF#A0XBDYp9Gr2)(Hg+b-6NDg<zs9Di0u?^~NPvc;Kq^w@hue92Rbu$=A1Yd#N
z2;OSf61dctV=sos-PB82G%q25Q@DD1eFoRzOg>>w9);23b`-G{EyHz9g7!S%F3d`%
zqvyP~lEY!ZcF5;4O*hz0wwbO|^R`kWWU>0Pi_HC6wa^{LFtaU?0#OBP?3g|7*MdEE
z3?=VENjp8Di!K2&ctECL&urI5m|j0ETlUooEd=95C2@1K-6kFE23E5u_)zwV5I>=L
zp(rMTq$uW*pZLb(ex}G{va|`Z#m<jRep%NOW3qYEAvhq9d;%{AQn-!)VW@5*B{+GN
z2y_S8P>)eydaylbi~n37+~stiug~?gD8y*p2L=dux-{xdhnDBOk=!9KOp1_`9Hj#m
zx+pMPLJ*=HmvUgji`}O)rXr8BGvKf=+$UjXyNt>nEn`I+S0UN@YjXEB23Yn5aA>sG
z3FGOUzf*Xa#xSv~1}!DYShHAZxK*L#|CE{yC#z42!U3bki1eF4#ZmrINjoSW57krD
z8x0Gv7m`EKw}7EO3o!M4V%tCxUnRwVFPsHSJ9x{87Mx^+O%nR<8+be}AQG`g?qw4-
z^o?;c`wOQBNAd+?0|0S$#)~fNL<2=Z+fmRm^NZ9Oj#cWiAD&yv5TAN<Z4y*la?H0H
z91#EFkG^~dF^Gz>`3O#d-Xh%g;6vp<Cqk2ev`D2F%&gbJa2yN=<fFvOMotKY#B~0p
zfTarIOd&kxFZYu9_}|t-0QNAAW_(TKiM9GR1qB=ZYi7a#-<-?&5F?^3uvJ8a&)OEB
zl>}rm{L9}mfzjBr%^js_ttq1jX{$hyNon%1uWTXb8oL9QplGVVc&<EW<;GMJ&f_lt
ze<PK*+Xq&xw0TsozR0I;ve)9~x|y2QM=5MdM$`HOypS4eb|-x~yIKY2a<$wHbY_P(
zj^PGNoZN~g1JWYGz3R4cDHa3VVN$j}Hqf)3XGR`Uv0zeE;IY3vj-BP?_D?#P9MO#-
zt8HGw4o(66;1bug-;8tpf290Q@GxgpPnt~$AoVY@RvvuV*dWGJou<`~!K*aros0Vy
z1XCU$X#W^e^?i?lX%h)9z73sww|JGLiNCgiXh|=#ehEb@+CHu)ou-tW&zA4-4b@2S
z)jP%q{!#)Z007$4+{(Rjp7)mYxsqB#yA*04I=PE*hb`7KE*wq{Uq(I;c%n+?>9AxB
zlVTrXJ`60mno{qyyq1P8t!x}VtP4g9xt^daXyL*B5uZwahc6!qD%P$4izlg{LMvQa
zY?kVGTsxdvVF!r<Ct?s>kzZui^<eLgohzs2I|q?DD?kCP_xoB-g}?Bc<Wz;CKk9N|
z-;A`%vejZK0wcTVVws7JVVa_dOoocu62{Kj4^N08(?&ytW5@K-#F@=4sROR%jJLr`
z`i?6Bg91noflefCC!JIh(TA*@b{ov{uEjT#rFE03j{J|Toz_iC4<8^F6<-rY@%jw?
zQ^D0R3qYu(;@nZ{TY+SKqZV*ur)NdR>*ac-#iy0vM@c`}uWrj0lBMW2xt8EW+x};X
zjN6pwsAv}9jEaPpZy0I}ceWE`1lYUmY%(w0r$is;*~*99_b2Q%Jjz^M+)aBHO_sli
z@?(altJ|D<RZMI{Pno=6(6`A(8krYM@K-zZuYpPIpd{ejQwKm_6;L8TgS)r`2KH6~
z3@_p7`6*(Ct|~T1vqn)<t2%_-IadL&{&snGgxIw7_iWk~L?Da~Q>Mj$R{4f>JiK|8
zM{~1e?`iPOkcIDLkPUdL+v3Ae>C|=Pg((<zb&>p_W|IYJ$Iw2$-<^R8gS6i<hnfL&
zxK707*r5{Jg10ng2?rV=JM!xLJ}Tm+k-|te-^_}aAu^fPu<k_hUeNOZ!(3bW0~_n=
zuj<mm=XY2YHHCXT>XN$2#taVsUlPozW|ag1CmHDTtVnwH3ttJBq%9W-kLTw(!u9XH
zs&Z0_9SJUAe8I%EsS5`;AetGrx*s#}`p8jsh$MUgWiMXGhfCQ2!#&x|Z`?g~o)B`^
z{cOc3;dXWG$2<2*>|Hdj-Il|_Z5e2EdQxcS$Gy8EpKoot+wbq`$%)2hC*2#=!dh=*
z`(Nmt8*<C0X&}s;awz)SECN?&G6k?hG6QNieP$B<e7p^!t58&Q*&!)FcU5v@Ryw`&
zaDS35X~B=muU9YwUNAu08*}^yThdo}%fEKw@yH|DVk4c7>9(2PL0o7kKJ=bAsiRG{
zfwfI7=9$?^tew&wnu|VkvUxTVTf)(aIGk_2_*Mt&&C7btb$Yud#mG58{<ytCRCrUG
zgR>AOQS$aI{?JL!)!Sd!zdtTAMv`BIya1$UywVj7z>#bM*C{}$0KKrP$1uo%eQ;#Q
z_;wBY3gSU`YN6eXFU~~`<%zS=0+O@}6@1P$_!S0Ck$Z^XGcHT`5{xF&c7A>vO4DF1
zI<aelAM-o)Da`HFi*rxroVbDFQNBi}4C!e{^w8^ZnE`Z&Z-KX)%1{Qc-7$^~;EbJR
z@V}mdFa@u6R{bou00T(Bp8CwU1~f;zV+e)z!At!B*nb<46r|jn1@nIz7q-9=Pav_1
zEl3LQ_f3(=1rVCgN2^9aXg0N>l>U5U$^DHp5=ddo0G?i{1I4DT9T34+0;(nuIFd06
zLgPvGDfF)x-Oq>r4mJO);?)Sd5&#;)zV+FH&d+!{!sp)n9kmMhtM=auXeIB)za1NG
z|J4uuDTYxXqh-p6Th#0Nuf%sntcB+dmvGz9oo`NA0!QTkb>bgiB0g;p)Php-p5^>!
zAdREuUo&b_K-Dg80Udue{_Xhd{;#|RP&I?|L{PQP7vH~z7i`KuXMA3EeX92`H)?$^
z)~f!GNB=SRyRqwwyuAZ>=`Xs!9fY4A|Ejw~Y$f>5O!9u}>ilP_wm(g4{%79q8$Y!x
zK`8<Loe=y0V~~_)MoT!FkN4;I$jloJQ4f7v1e}6P><mf>eM-9cD#n=>sfa(~;oJtO
z(odK?jzgy$KPWqeHV>vr6SqKaG+$Ony~zaRw~=z@>Q}}_7^mnh%aa{9a+%Bdsb>LC
zV!NaIn|^~V_ACzIZBJnO;wYoD`14=5dvmPB1dQK;#!p_$Tleo^WN*N=3$8D0Sl*%(
z<IVh!^~aIS=%XK(wZ}=dV@9(aXY;d>1O<Ni+XFkPK}kglRKIbPLlp%TsjU{Gs<YZi
zZL|^%H+=c=HLr9}Avn!e8IA2`h_DOr_%J(ve%_vOS`m>!DCpPL>HBhU9ubjI;Rz(A
z0c8f;R|IO%fYOrsHDt$({@h4cP_<&Ehqe+utW%_)&$K7srz&Xpj5it0Ugv>@G@!Bo
z`<=1r3LrpC_NSSjeK|kN54@!7hKzm03lISX5CYAQ_u7E_h5KYp@}klDV;$6MJ$cZ6
z=VvRCWcKrFr#2XDFFa=ox6a324EP(N=DV-%_ikK@AK{3<a8R3WQsy`Dv^5-ulktD1
z+lr1om;Ow*JI7HktLk@?vd3l7(iG?eNRv!`KdS5_;=GRupHn+7P<hIaapWMkithCO
zBe|a7P|h2@WS`SJrA%dksMDnV<pBC|KKI@cT@}$9Y(Yj@)sh$98=qy(hh)+HvcN5d
zJqoX6R(31VcC-E{@e0PA@vEE^yVsDFA;a({(f95u=PLeDH`n4=a){<umvKmM01~&)
z&gsn(fFaJ8hEbpITZJGxug*Tf(3YLMf#D)Mit6=IEz?@ZcP9zK^5Qlw(5KBuz4eW>
z6&tQA$~Rurkd?0fm5>CD-pbnh+`cmCsPk+m^)Po@kQp9eE$g_dQ^M>$EG`GMwFz0I
zo6vnaIFg6VN@u@qKaAPw<gAQ7;3A6uTWq@LWYxLz{%$z<b&g3YcCf8B@5m1`@P><x
z4Z-ivoMRjz8dQvK{s(C|?&%Ye+T90ca>&xVvD0elMq1@$A;TpJz2n6)ZeuB~Rkv00
zFeCL?yig`<g-1Ay(k^jfv;Lcjha^+BgEl|$+&LJc`k7Oo&{=N?GE-W_0Zazb`46lo
zo~wns`dc<9OVTE8tf=!3n4;+7(_pT6(!FH~Y%F!HgLUQb%s;A8B(P&pCia85Ta^*7
zo3aL1SDaTdop8H9u)yqfQ<EeXk<ypE>aoD_(iCXsFhutA&s!_#409{c6DMV03tbCx
zHcPnB;50x|vte#yqOg5w0XC<Ej;>w5x=vQ(7mt<|fQ*ZW>AL$P#^^?a<qQRV8h&wV
zmeG8pSU}ubp7~3uQ?Y88{?a**k4Q8+m|iOK3Ko`5m-}KIunQLo1uM(*?A-mYAVa7}
zs*q}_RX>B6QASI%?SxyF=y7b@(;Fmp&SR2s_$xiEFHszIpmXM(0cI{04(l2P_7^sn
zAZd6Y$>2sVAaWWqfR1b4!W(zsCOrtkMv6iS2Rd!nog1qRrk1P*91i{5MN%D|V&H{V
z`713A=2c;0u`y<uGCr<q_-vYJ_;1^`{_Z=l-<sB{Mfoa~`Icp_3CfUG?|5ttAylr4
z^ra)A<#xCl*t2B=fV)&gY-Di);gNvk@g6CWMOSHiRhBGhYQiX?;IavYuzqO~lT}pK
zZg{tOt>iU4+bXJG1_8HiIk~iQ6uMrC+Sw8-^~ocR>T1o1<Oykdr5CoIuBu;oL{&dY
zF5C-nvvN#JoAL|#?hW(&6?=7{45d}x(FH>o2Z$Oh`Xo(bz;gyrXk3;f^||i5pZV5Q
z_9Rk&sycV;WghLR2PQdpr-4X}pcuLWs5j6j?slpnHVDuSbQu=QmdocF#UbsrGqx6P
zC-`QDt@+?S9etvSFX9Yb#E}g1*T}hDZWhA9Rx*3hbBNHZrpEy|AKt>rD>q<e5Fq41
zdm{vo)`jkh-Df}mBPce&S4x8S&};R&(=A(MO;s*Td=%&7%#zts+k$~Uby9Q_(}CkD
zc~CVaGmK5bH3=2b4I-1ImwVSIWZf<)elg>byV2N&jIQ^0cA1f&>HEo=Mf!=hv1a2f
zli*9L)GOW_+1=K;g&wC4ZE*KOYOVdM68|-()22_&z3>)6B`5;rXO@8t*n^`)|CxHw
zfh}8%`0u%fkSS;=OLIE=_d%cl6X;j$%T|^5G4AU0sf?9OzboPYnO^|fGlAj)JP^ey
zez)w9_MTZh)mqXDOj|@i^=VW&b-i}<a6`j7n9}=(i1Vis9v!q{BgfN|T+%kHQepNR
zWmJM0v_8@8NnmJg+to1-f5<eA$0k#bxS;KVx1tFBK%U8*#B}SdC9K{<ip7eDTi#ki
zOg_(>l9~kB+qyuF2u9aF-<Tc(JeWn^!7vp@pO>|<mnEkV2h5<KcQ3!>7Du;2b3S)R
z=H|nuK6(|alE8OG)^V;#S-W1O&yCmesy{$~EMQvbw&@+9lB7<@AqobE)G#Ofz>@A`
zKZk?!*35$3_qf2s7*c7>lj+n*K1&^Vw8@^gIf9%yDv>&!!T65I=A6(AFjA<o-fMIi
z)#6*O6Ii$ZV-A`M3O)x*iK_{h;H-N{1PIMS9d$A6RZOGU`2B#aWdso?jS;klmdO-5
za8N0AJcFiazniUW59hS}w8R4~-00Q$=7DwxNAG;_L>GCFhkOSf9AL>U3egeN<_K~m
zZ+Als(!ovonsKwBj3UYmsJu6>x}>peS-7-YnjEy@<cJilSl{e-utO=fph4DEp+*=k
z%(sn0PT|->-PwsX10zI%|0;aLEo&ua{<9hjlOG2H2un*7DI7jyUYwUlWIXtAW&MjV
zx=E7fRa&w=<3Fo+ox#twdsTP8=y2A-+ednP#7jM8Z(J4viiK{!(90ncecaGYnF9tV
zcOx)}7!(WODcx~CSiR+~*2y!)N<lLBE`I1%mnRX13*kd%dyWt^n?znIa5hgQ^n#oB
zF4fSNC^#=Tmvp_v(Xr}L7Wd5u%{3YF?cBdp6Dc?-5YCR5jcXM3#9CBkfIhV8VO;5;
zJ&W0YH75FpZtGfLt3UN!rkaYCFe^e58bo3ANB<mPpL9>KS>2Y}CHdPFG{wB2qhLso
zHhmChY$TFgucHqx?OU6F{CDRY77kmZ<a%xTe;4K{_5sNxgYt_|KOStf+)mk5o`o;U
zS7XU`8-w^nSmn^V8LB_>Sw+aWNSLEttCNdiK97%f{m;@I%^f28Yv=8>@9r$Q7f@db
z6vMjAzD811bjl6}Q$Iyu%4QzbQpWC0)mpJO=_8Cqt~D)}mduJrQR>`r5Kwr7RU=^r
zg(aQil+VWJ??LvwSGrPP<{3X_(-W#O5X~DKBl)uv%X<S#V_;`M-iMjSZ^Ra?N{MY7
z_7dzJNJt8b514#RnfxxG<Yc_w4iqWG*-vxrR`oif*{pvm1Xo+o*}K*1iR$sPOjXv)
ziXD@bz5MfyLaZ`uZkxod>>F7fOsX;JG@Fde?gbczbxq`KoamMaHKB>+uew^U)wS`I
zE(EFN*yLI%Kg%I98b66EHZoLCC=DSR+;g193}y(CPyk~i@lUaXt&TM1i0I2N--c|u
zaAr2yfTTrT%xdTU%Z_6!GjNx?>^eq=yDtflCFaY;RY+nN#Vp9Jx+y~2b?nUNsSZIf
zVUi2cBargb^ADV4L(>JzI+e1H*GBf_zuvs;^*Z$8$5ew+#}3sqyHM=J^(pjvh8t1)
zG?X?g!vWARD|%sTp0Su&*Z=25H++giLj^--?e`^|Z60_7FmbM^n|`=xPuA7>RSZXm
zBWra^uW-@f;Rz2~$ewvpS;6T&946u+>Q(j=Fh3mbj0!Y9_%LZDql5T)d%1Re-25s4
zG?#F!CjQobemdNgz)SP*J=ciCj75Bo=3*8*hbkF+*NQJ`E6x&(mWTBvDWZc)s`;sL
zMqK03byAzj1lS`w=MIkXp^zq8?xUTqxho(v>y0@q=K>T7+d3;|e&)6uGroEYwaY*U
z(S3I#ClFy?#^aqi4e;K+ZTvCm<zz{K4(=sfFa(_U=<;_yrLLtg9nJY{3yX|Jj1;v^
zL*eL=vTV|Qwue@a+2Z&`s==h#`94Me<b0olJdi%mh2?umANR&MV@-a8(?i(djb!6O
z>IUk%RO%LYQ0UIhJuHSOWG?~%rvvV$L(D&@C8i2aXZWD1e9Upyp~Sj&@@-xKezozM
z5xgtxpSc$Y5OA0?V%lw2EmMuByrX<YT?b}nOTj#~o-)W9g09>mvUv1XHVv?#*lQ&)
zb=BBgO>8BKgG42SXU*AeWH|=ez|U03oQ8ambaxB-QGS!7!BIFJ49C|#7u83bu>kRI
zhjYpt=IY{yZ{=Z(5el<?I)i<HPg3~>7JpFtd~!!EkKTNLeRUwiojVnF2FfGPsP}S0
z2jjTD{qQnaOoA@&(|dLWk>))rL8IeF<{nA1uJFOHUm>c3==Z_e318GUvW~k_DX28P
zJvIG(td~S*8{>)szrz|`(a{?q|LGh<%{S$<QDlOq$iXYIs86pxw^dgGbhCb&V-_Ty
zU`RVOUg3Elui3@aNRv^#x}hb!ayhjIl<8=QvYx7dq;pP>%2=zDmSFgQ)5z4|9y8$8
z=&(!7#D^-}ujP$3=ucXDdU`z{_k0{L(8P^6eQw6>I`gP*PVTptc)K;cxGlROa4hw*
zy9e>a4a0>As7Q>kx<b4KpthvYM_wVuyO|G>3UVL7cuRinh~>t%#Ongu*-oY9VCA*P
z`Gp|TYcD8DQaD`!(Bd_R%R-Qaha2xBGE}g;wVMb%iq&eom-wQdb4i|acyBP3eu_&U
z&(l3hI=MQ2+p&0dBr%K68PAt+OXY?55RxrPIW$?2OmZ}R%zQTtz!#6_6K~N?XGQ8+
zA&`&vyS^KSRK8?lpfGIXEhg~xNTF3Ca0f|ww5!0?Bk*QkON1W64+}a_Tvf6>;&TC=
z<Q;R%8lJ`!h=0Yu<R`kLT0&hzizT>+DwNC;IiBVYK2H1y3*{9evU|RVESG%iK2fHs
zC4dw<o%RksP5iI}xI-@$Y+<h=3=?D#j}bubO}PZG6kMh4Z)`mrWs<xqVQ~&~&LFw(
zM9)EA5oF1>5W-3WQ7`6pQy%&-gX4LAFbsul7X$=7t<HNw4@g>q4oY_PT~Bj^-%PiP
z+)QH!-Y7fm2m-_iPUxnWVU)d(=$yQd+=ltkvjxVGvLey}SKirg3(V;BEuOD1M9|JY
zT`?Qiinxb8WTNjvQMq=``sQsS##jDxbqwB6$N_Vtk%aj8gYiC4Hw7EHuT=13@jl_V
z1p=UNM|%kYbI_%P_fV&jl28u?Xd*AlHCq95tiK5FA+9!WHz-4%3O0n^sUQyGpCO+M
z7;@i__`2T#N6p}mk|B_N9q?b_n_0A&5L0@BolDVG>J|Uo<duJtZ@drR!ak$BLvK3!
zgAV@(d-xqd*kbbcVT|2)wyag#90ZLnZe0yk=GlgkKfn|nvf1`l2eIoH*`OsF^`GHA
z7*-S&NRh)3>uCNfE2VrE$_5~PLUb8=*q!;44%J8i-=;@2hiogR8TPLiz!VJkp8*wW
zojP`%kbhDLk1l8ki2~?NDrlR%Kf}L3?=#_C7jM1cG@7LD(H*nyi<Hc0Y)ZxN`xLP7
zBwND9C^Ji_U;l=GW>GPp;UD+T^jEY+L#w`xsBPtv3A6x*I4Z5g1qKd(2iI`PY!Knn
zCBQ+sZYIw?_6Di^G-6sSqg81daEl%EI|xm=mGk5wPm$<VJf~j)LLJ9Tx%3WPyS{l1
zjBiY@m^^S)kLCv`HGnkpM6`|h`G=RjXzShTRIrzHW2={D7JgCr7NMaw>B;8LCxh`G
z9r_I&ajIS<Nb1`*w=f1#3ETN3ylQltGr)HpP7Av1Gp*48PaN~0u}AoByi7a2dZ7S|
zth#3u4+FYUendgzbg$1hMi^Lr1MK+y(4l)T2wa{QF<?L*n9HkyF2}UmQlhR4ueTtO
z)OctEcNBMCd<4|p8Qb+nRzLfLs?R*6^koar9gJI2KX5{s=?pK+z0$SA4Uu0m3vf;Z
zMcEl7z?paxF?D!wwnJ+(8SxO;8&(`QfNj=CgsV4-JsJ*n-9?Na%fFxC_N6_X$pb@`
z7bB9s>^oGu^7O4lqzo<*Jaf84dQcZ46fM=COmen-7Hv)V@=glZRw6%fNah6DwlTH?
z)WVr1g0#3t>FIZ=h}C01_~NLLB>?=NpGDuH)3M=}xI+OpHg7ephQY88Vl8#ly>hWw
znKE2*+Pm5wC%CKfH#X1|CF7Dl3a0DZYJqoC_>Rz|XJe2DGxo(5mkuY2!Qxpunqcq{
znz(Pe=a^`Zb|3k-M9V@gy+0uNlNukad#r!2s1rUopl@A{d)!Dh=xSsA=>))KOprR0
zUChba_s{7<D&g2oo0bqjg@7|a8^eiXW}3r1;qpSqYsx}L8%R3}VA|?1_t7p&)j~0Z
zWjD)Q&|4J;*#!r}!)5$x^9$A6Y4Y(Gb^A~B2=!ExDwFcG`SNtEDF~cqtqwS#0BPB@
z(~vzUqTtA^96{)kMgi;=SA@jnv7fcv!_e@Xd(Jyb0IyfJ2+F97v7J_PKV2yQPvD4#
z4f{{v$k=uJ7t_gKv_fIg4B=4K=lOB54K>36-yh%KeBsP|9*_ZLF(tHFW`7MoM&H9)
zjytV+j8--C52mvrm~sGxy7k{M9mIb?9lp>{P{%>aBJdl~Qvj45&>VBVD|#fHTjT1|
zEbKa%vcuD}a#)T;nKRCz_I6ik``dq?wFnch1t&9XQ@Rl6AhC*6Xz8eYv%Uo=Ol!-?
za!|R&R<L_aQx}mHw;(CI_n(+iSne}s<gbI-H~BYaT!TolHU!Sb%R|GJ`z7dO3|{QH
z7Z~Gl0qk1lEcU()vC1k5V04n=4rh2O(z?4aeRED-9mfO%?FX)8>h8E)8T6N$?*Bz@
zFcD$OCTNILi0v;&CDp6xz^r}0E{&oy?-kwf0qs<m*Ks%J>-t}yxLzMPpAI<B79N|O
zc31z{J3@<C+TQ5g_n_v(0y;2K;L`IyVH?0-+(un{==u}4QStf2ZMeXm@m@+G$kQgP
zJblEezTW>J!XZVIt<)7xtjD1!G`d4c*km?v8>!(=_A>hkCfe7a*`W|$w=R0}TGp0(
z0HB7&l#X9m8+(Y&%3F`~n2$h9Mb)L%Q|OJ!{X(gn?bY*Or`zP)i7E=xQGF5y@Phba
zv$E__<oEP+a9oluhfjelXx?rS1fr-laiDizWTPeLgT$Is`EIsyF^y#p+5=<q3nzdW
za~?kT;m?LPw~yIJ9#eg&|GjZC9>;I}{gw<faVqtAErS!DFR>~uIN)l?@7kZ|X;(|a
zQC;j$sV+F&Bl<4UcmFOoeav#22P~+1Jb`*N0Wlz~R(ZO}`ZK=LuSj*dYJ&$Gwjt#_
zCJuqRpOZ61yILXmB3ZyrnrVG8SIjP}46e3CrQ4&oRJ{>;GxfAt*Y`E~B8SL=Uus!N
zBz~bb+3I5bWRPiNI&F(?Dm_>p+<DQerpS-Z^`-!w`>u6KT>FP&j%x0C!vvrd6HYCU
z%hgGJy<4tHFoLYmgL2O)NSP}3h40dWB+W9cO^^PDTwy443ri7AMS%S?oHUPI71H-9
z_tyPE*eQz52a##CE%QPxs~N!ChVgvBqj+4yjg9?Ki8zsi8ah7-j1mUT2h<c9Pf2=g
zsM}J>*I2bRIZG#4K+4S)(W9~$(A9??rIoFqjRnnc#@8=@DY1R=!Kj4VJz~yD3iaYf
z$cdl6R$KfaFw`-oK?vIfclQ2svR~BK><1hwve~CB%g`P&JKYqXz|2=81eHlpiJUJz
z5rzMRSlBV+gR&1gNEc!{0NO#{=dYEItG|)HNIiXbq6i?ejVd{ZYU1F-1jcw#2rM7^
z`Gi92>#+PmI(Vcv)B@m+TdDL$I5A+7rJSVYPu6tljn(sIzq?$^j+VTuu<iEdA?bSh
z3|iw%!&4HhFZy_#Ixv*e95h{6uw*1k%}}avNbn-!5HU*~M;4Vm1HNZ%K+rplr78AC
zj-!&dCfFY~nm!(65_FlmDlndQE#kKuiR5SKhVEi9%)f(!w*5XZpU00hp<xqG==Zs>
z>H1Zhi>=>jikCR4WnWf<qGIp=wgYL#tRe6FHa;rYSkT$-(MIGko|$_KNevN65Vm+^
zKnsVNbhrmL2Q|#B38>sF*HVg(co=+N&A7a%YB<lmB?jeKG?-P6@@i@(-q-2-H5^+p
zv<YSAIrU|isZDaiB5jvk*|sLhZPsI^NXU?H=KBa^o7S#fs~SyW2jP}?`F?a5DF|Fv
zFu{m!J8{c)CB8><BzfI6u=Atb8xb>o<X;G@H9)_r<Qh=nkQ(p{RddVn0bF~tfv=W_
z!R;5SCmpe-C*imICtp-&l9)#>8FrhKb(7XB6{9(zpt%;q32)%QOS2x&38?!__WVNw
zrx*Su0A1WHT{2#*>9N_v@7Fxxox9kntB^O;Q~5r&k*VK^k8Qet-fS~oF2XoK6*u2R
zS6*<0DiOf8W9!v=swdS%_Db`ERbfA$JX5fx)3mDhXK}=Wgsfo4wtW=^8^gCNx>*G_
zj*IL;b1igXk%YP@Sbo|rhk|8yFqFuN7M&eHE&4iO{wq{@xr$<dUUaeKhhO~Xcj=BG
z0Mgm?F;s9mGS@O*_WISkoj<wId$f#&qvq^tdkB!qaQr-b?$Dlfm>AyYJC@s=N-HR_
zQ=#}EJY=;OJb@`_D*c3dD=8`cRGu|)(ag~)1T44D(P(l8eu@1+kuFMdaH^(IWSjB1
z4MwXolI9aW8e)T;Nq22gnOhDF{aRN0Bq8oDf~ynlKSh&F+!$>oyu(L5+oR}w$8|`j
z*a(1OG$|{zR#3{8Ne?}!YLQziUuo2CG#%%sr_^e+4xYj_rADYH)Bok;%`6f;p~|Cs
z3i6=I_z{_E_WNl?P4`<tpPA$3>0=87{$1Qq((Cpczn^=~cY}lc^REI`CejW2t?13U
z=4JYNaCHSsBt*&<?E+3t{ddkCcTP=rUnv1s3+}cy<S9G<!ZuY9|G+j$=T^a9+pzd7
zAI|+hrtr#pjR{*m@uB7UnmayzY2GV*`K1xh(dUC<-Gy+i^*VEB|LdOuC#m919Fr#p
zMIIFiD;!NE`hValql8rRt;uWsk1!F+%4Q_@2|^h<m)E3J?mmASC*f|Y>&gI+oCoUP
z`tpy69N_iHV@MYj!n$Zma@=ICI=ZWT;d18K4*ZFysiC`TR_IphiyOw%q}ymC26Sl&
z<-YOL0tyEWRj$DH?H5O6;**Dss;tNLv#cosf1TJGS@1h-_6yQ|mZ9G%orKC6(}^nw
z&GoMh1z}dP3<H`@r&om^4=?~sfSRtNuCy0x$U%YSfqi!T)SKqOu{wI{O=OYC4PR2=
zaNYJ8u=qxnY>$T+Cvv^XCVBmHVFJ>g(|OegW}YVNE1sv3_x#pxP&(#B5^XDN1*Ijh
zx}a-Klay)HS`Uf-3%Z9Eek}jM=wbGA4|@hkJ2MzB&_8%eu#M$ATA_f3kO-)e7TANd
zXi4bfvy1n5)@Nn*`GLOq&5E6qhru}wGwvW{|4$6555+I)KC>VN9%(7OWor)HIRL5I
zF|5X}e}=M`{Bz$x^n6XXj$Q*x(F1uHA4ts-SyR7mh0r>315yPLc3??L+uAMBg%l4{
z$;`|-Nt50Ib;>E`)(}9fq}5FCSLAOrX@f63gr)@arDTa?+}=T~JmH8^!f07^rbxrd
z5%Gz*k28R1Z6=CpayB~4B#d-V$4kNyQKB)9K1jL_`2Pty4a$ha8auc=D3N1}354mb
zad38;mQUMevH8j<We+Sd8@y16FM3HQ+0tcZj(y_;V1h34Xe95K);mj+eXHv)NlSd(
z3Ys)!?P3sDe!;$Pw@)%H;pKjhiWMt4a#B~c2Sh~$#%ljh(8)ST?z<4SyMR8eeaOHT
zR&S<B<OIb)ydhq$r%etM=UxZ3|5?lV=rI~dF<%UyfB|S#(0fNU!7F*{+jrG`Fu?jE
z!`vXOojx}`?02PBD_b3^QOqM6@xA&au;aC(!$<0g{$LEZEz90l6O+M>=#}T8RfF@3
z>gR`DcAq9zsGj>)&iWZuu~l7UqG^;rc5X}2$?Yd{iI!V|T9geH0g^hDF5?w)MFPbV
zCrpya64cr$znf_`=*o$a`-~M*c>%Vb`jdjXA9WRO{%Ov7Di)IS)*21ve72TqicL4F
zo@NIt^jvYLNLHH3o!`s-omE5)7lmG`JIpOc1yY;V%5|IPtuoqIP8Wg$&s?z~zX1sI
zSTvhCm73#1!ZQkbLp&M(tg&h;H8!mn#dByNWO~`HxY#UWQJ%oG#dUgTIsw`igb3YJ
zx39VS^s0>sQ3`ZkUX>+46IC53Wpq!Va9y=ROFfdU=Ra9IIgqTE;68mwO**G>`oDt#
z$sOC6X~#hck6R8t(8eAq#cdReFVn|!;U@dQYzK*BFx#j)7}oEf2$)^vw`npBHHJ@W
zwb=Y|6_ErNM{z6yX9RqR4?xQ#P%>n%qM=MhnObAIevaFP0HQwN#&v4SBO=!ai(9!2
zQhmEO#lDZmlxMeYV}`h_eVBBs`Ujb#1ZrEhtW8GJG2gJ6A_S_Oy9W)K0xIfiY8t3T
zZp9!D?uC}E__q6bC9D))TW>eN+nM-3Fj(Y&V6bjq)bbY{fMIi*h^5uYo`|4inw+0S
zaL>Dg5ZQ@Ug|EhMQ_*o%-CK0Yc-k@iO0zaGyC25VC2Ac@!(@M|OM{Nh#b=dP#1d|F
z{f8`5E>=~da~vsReqNrnRrV~!xc*Mnn)yQcTj!o#*8ad(%DH;6t_a`iA6!f}=UUsN
zJ>__dq4F*rfSu(7y{uV%6lidHrBoRD9Zum(zN|Z6f0-C_mbMCiI%+FPV_(mMR$I;>
zz+kGd>6Z`<D8D9A>(3#79P4$ov~wcE{!)X+`e@@5r5%H~0CAr9xe<dzGUX3~r0EIk
zLeF1}StZC`gsR4AJqydP+GE<OKV)O}Z>Ju^G7#Pi0n7d5oeXi)nT4U?PKYIuP7^H~
zMw}UYyFn-Z3ifF@$Q><~|BbBs-?_R`BspChY|&yMRh1Y?J<$tLaEBCn<jeUp;U`gs
zoZ;gfK2-~Cwi9e35S=a!;fM=?;h#j^^id;(($s$-w6M8TQ3XFh=}DM7w%+md)w^&?
zt$p%=e~v$9$gsioJsG*nz!Rzb;e*faMAMdU^>;znZxt>PrSh`~gx~+>SgQZ89E(dx
zkGjD>IhO7sxf~Y`nt1K+m}gGNRTSd6@n7mQw)?WHp2RZnao}|ud*7Uhj8A{UZr3n}
z(lvJhUWGUp$GcA)6EDhKc*9(T;kOrPwo+myMI0cAe*Hto)kM9r%;Zx}&G6!t8iV|A
zTwHQ_um4bS)7(tMBu?bnPcQx#9<I=B%D(^`2G?x&)q)oG^QZvChRH=woPZfcUf3f5
zdOP`JboYnC^5Sbg=cW~D(SS472;7-M%3Dv@eb{m;1F%)i1;mR9Md7|@5o=g(1@s@*
ztug11xy$nU+_i}}5;g5|4z=HlHc9LMq*>~95DeM_tVG-d#dUzyE+4`F3+2`k*2k>!
zxf$NXjC;8SpaVh`KZwEKs}N=0%D7D_hsGY%QBho$%PibNgTZH*KgsvGt>t$HesbIO
z7E85NFg=dX1j`WYjo-^T#Sx~C$s)QdvJ+pz0aWC~giCl~t0$B3cu4WVt1<ZAb<%!1
zGC`ers%&ui6blz=W}r28otwmAtHPI85y~QLOayEoz~?udV(UKnogMr@?LtIjXGP|=
zPFKCLAa2F_5)opR2LP?TPCPBWOvp~Uh%K`(x|&@?ZDmU*GKMt?#!rk%3*z@7T^>rx
z?=};?J1b;8n#$5|6a&=A!_vl&xT}37*8x;31jkpDSuQ<nmz!#@f0Ejz!LT8~<QyMR
zc=i~20IEs3hOUp9XlGGQrj{YgUzw-gx#eVc>)gt9#ktHo-ZF)WJh`szZ=I*q32xP>
zdu4Er6c~6qZ9wiuwGBB*g4GXB`fv%iXX5mGZcF{#b1mh>O5b7>=*&dpU^&0sNiD44
zg6U$F|Ebjs;R@n1K|YB$vuB0jf%;fMwfXI3XOdCj+&(8UL`FJiJfpgkGbq9T1qzIz
z_IzrKPPViJ0S5H7g0nOJe+$};XMX(`wA&{w9B%l3#q5B>B%tJ+;xel0jrTazZ$zH+
z_7X|gD?$W$*u^kLn2UgEY+_WrM63bsMHu+7J*}kH`a>t})X>Q&9x!nrkOY)~b*^c#
zAdlFpDKw^9hR~|fCW@83>AkFhQtS7J2zIfa+!O{XTNY*E1Lv-wig&CgDNA1hut*7%
zo%8<_1vX^nXjzt6CC+7xdyAUSE#*=hh@uRNj#4155Fm+`|C{%j!2n-cE_(~ep$y8(
zmAHVFFe1?|VeeI@9b1G-;#Y={NM4U}X|%=Td4S(@t#z&``kZm#Qh3M7mBg*^V9~{F
zE6eyR9+;;L%7{NoM8o&<^S{U{y1J>0nEM;S_=1VPPYkpz?e_T)@LU-b3lX~;(qqZS
zD<OAWeb|2psK^dVfk~7o*?!UsBO6tPQr)*jt`wR~rTD9K45*|6N(~0W`VYmF80<?h
zFk1zb7htH?e8vl1j*vT}ze-pjGDO-I4`bGn%7JaT{CUhC0nqd7@g#W^<9hhWX}8kp
zRn{N8=s});Kq-q}G?eV0dcFSvrv888QnCj@72_*Oa=gc9&!in~D}%Ka1U2{dGk4>C
z{K7i9RJ37pOBq`Wka$l4$)+u2B3s^1-9J7lqW^b>C=`n~PmL__mK>A>rdkvFK>?=s
z#1eSH0V)sp$?nl&fY%Tk;eJ5B?wlf3$rjtEF3)!gdn95QkyMB6TvMM3L|A^AS(^{f
zq_6$b+8A<q*$V5T&bY1oaxgB<z|x9gHZjV}buX&Sm<Aaow7>r2-PStTCB@To{&Tk;
zem4D8Em*0t+^G7nzuZl25w}>$bC`qfz2x0FJK!0`Cl}<C%2_t&p4w~?hikXKUjaN%
zvksVjS7|&;o|CUg_PoC&Dgjrfi3Bkhqpq^qYsjCRj#eF)Gs&g(KG(W8vA<4eV;6w+
znlZj3N$npTI?S6dHjLF9nK{5O;jqD6ydUX?w5#XUxeNE{fN5LE7u1fY8xzhoWKgRJ
zXvNAiWB{1Z5CB@A$lr?MES_Whpq9}M(_)pHv?u42zh29|x&&pvAq>TuQx%JlhU;Vz
zTZS=?-%c|gGu{B<u2X!L=21UFijLlC`(8uRuLNBb1mw{;-u8EZ9ODv`8?%wDJr=0?
zWsC)mXdI0Ox|70mZ!XO7xo?}S9FFdIFYnI;{(uTy_ExJ`KIz-94c*S|Fsx7qhB5JF
z!q(T!*Xl7yDeD_MeYd5p1`+cs41E%(&`qj*Lm8*<TP3>DXzWglTsjHREB%Gkp~Iiq
zfGcjyyqf;s88)ON@Vr_?(y7?HX*G#j+wecwa${}JU^B@~C5VQuVtYHCJnuX6BnGF4
z+5r`hD?c!dQc~(0gjn6v&GFu=3~I3((S&j13av|}r{-Lq$>#s0pT}&gCF20eicjuI
z?w`fWO@?Vb?+pz1Pkb`k5;-X5tsQe3N!J4mt<zAgTy;uOH03$!vB8XSbG9su45t3{
z0w3Q`hJQUGj65T5v=3AhraUTy6@{jL_XL0gK92@j3ksd1$%l-(Egb9R8kpYAtmm7@
zd4j^+Sk!PFp^z1<@Tg?=bjjDqIGIL8B2+mXsF453=W~A(ZzY`?TO;2n8Qw2Cljc#s
zw!N})_;Y19dc_yNM|V;2OUfMSWU;MuzbiW=^3ZVsOy0a&Q!h7}*;bv(uA9M4uQ>qb
z2BZ1T#;qe!aMJe)(P0zq|G{Jo>G|I=8UGR)&szQuL`Iv*Pa>lh10H7ZpB{g9J<wC+
zf$ySRFDqa-%zK1NG@hd<Q~>0w^W)3vb(MTqJ>LlN_)tYE-#R0a@(X^67pSj*7?#>6
z-ISmKLwfKSfYCJ)-FwggAQ+KQ>$NM{s6S|+s{sC=TV484Uq8Bc91TAkp-o#VaR15s
z-*2}EP|w*6U7}{o-8-Kn#?6hcdA|n@2-ZG9f9?8@KmgtQ&%Yu7wVyRuJvdJPG&aZW
zoPPy=jymu9Gy(b_>7N(iF<m<UYWi2<-&=q!*Btp$(~eBy9N&LT4EUggxAk}Ytf&#F
zeR9XvdM*Cf#;(t%@6!fCx=%638GjvW2GIU(7e~5x9{+6omlC*vmpRIzPgfBQVE=vY
zbIivT@N-5w;OPP)K1~8#YCC<J5=hH1+P(A1mX7KA{QNsb>yua<&6{rr9JNoQ{~90k
z+2G1v;ywPC_o|;}W&C3cfZ=mg#iwQZhPYa<h@ZFq&hh3lCZ2$uMNdb%*Z$6nGG&=<
zOkp-lD)L&PlT)TZlb6})Yy%u!3!Gl<3-uB>_8B6=1E$bhP{@l2bPf)|8j`>h6^OBC
zY7v^)()7-SrS;>_TIkB^PUqfjA>*8wFxL*Hqdk%ye7ZBhx37p9u5VjmiU?Q&<R(vh
z3C5OVwee0KzsdIKI97MV`Gfj~L=b(2Bm8-WG5GMl5j<EGu?9S8ftUaw>NeL?kixmf
zP^ZwMTNtsNfm}PR5U9TCkb21y5ppe^-TfW8QQ+JC?_N9g5a_-W3Z7EVOYrAVYJLHw
zCW^9MxYb;M%F`FouQ|$d;a#gSo_i8c11^MDJFGBkSBSnyEt+=->kk815sC@B`LVuX
z*n~)yeuzT5or!~%@azJrmCheVyG)bvfJ|jc>;{DhHXi8G>EE>yK@(B|Rs|L<iJCxn
zm`a!vjLoq#`GkT^mzpPEeQq=pzGPqMz4K$5T`6P$SgWl66+F}MTTnuLoX7=c_!=f6
z_m{{uM$}eGs++R9VgA6x7ZFlI%x``?d@ebGdjTlF--ME02FM;EWe|nPA7N!LK!AQ<
zyZ1KXS-fjm8yG^e^6atC;M+%xESJ>55=PdC6K0K5ple-Jxk(#tj09Ho`ItwyZSVI=
z_gTXL^f^clt)g2lAH(}h;!BwAYvW%R(0u-IUF|1t0pnqf1n7ggBe9+N;BTje#<oEU
zn6O+ur&0rg#yUuTw1={I3h~3_r9$NX06!+pt4w789S7~0!Y^DVoL$3LB?sADf$VMs
z5B)4CzV`!{J}q)hu;t_xCEPl2H334wiUa%rw?v;+j|rgsBZ1k06PA%~7x*Wy?I>{@
zhW8=7gfN$W@ZGLUQ7m{jYq8!Bt0CVYeJ;M<uVuaUzEA~tbRSkHPU<hofz?h9fe8}A
zz2SiYE<$^7U;{5^B<A5Dp69TR6eQ^3A=mfQ?xRBlaEb1?iSl@ZM4(Occz<l<9Sk}F
zSStt#c#x6TD-t=rpsg1PlRCY-5wA>uVfs^aAGwN1Ji5}Hv&7QE<Kqjozw}5xA|xOp
z({v&qU*+*IOFcJG9dDt)81U(X7U>cdW#wp@xV+`gY;>Fg-G;e|1C&<sI<IE31CNQd
zrxTMf@Cn)Z_vl;%q(enY+IghBHlo9UKs!)00P~zBNWK6i`u(5o(w70{9F&CTVX2e%
z-~6B!;DSu|wV;T&Mx!%OYUg<lAzEC4pG7uinGWmTJ5_z`(X8TnIq)v${z}{wM{OwX
z=htGMTpp#mVoXHspo!<+%9=zOyrE{EAzFx?k|$6p{&-ps%FfIB;PsPceBiaqlF*if
z0GO<G7(U*X-8aw`{Xb=yq+%~)Oe;fR*3gp#fHV)M`A(tpS)xWon0Z8rqZgiCulz>-
z?G^kM%og1-e&p4m5IfJ9WyCa&_tJBP82}ziv%f|6xhZk;<dB<Zw5-!mjaNcj2Bhq0
z!~`10z;AH-9gqJ(*gFLW7Pjr0opfw;*s+riI<}p3Y}>Z8V%xUUv2EM#*tV0&_f7qK
zcFnG-Ia$Z6R;`2gy`KBJpL$`FCFQlpfxa1<16Of?WIH&}<<-EhzyAFV9?c4KTliH&
zZPDDuZep;NDpQ<M84Wwz;rz7Ndrm*)IN;A;ZDs-FD0IUBZ}(d*Jx4vW=kc#V^~CL3
zU?E=3yd@~F0o8(9{63A?m~fZZbFuLctBSQhXfY3g6cfrmQNM0V3Azp>YU+{etdgJv
zfBh*0F7g6|qxlLKL`IS}<|l)sW<#nNpCKeYNiRcekBJ^j@15&dm_%#{v*Ux5(-!L)
z9aHPG#K^}@e~GV-XC>A4kDn7m#}8J#=H4}c#wrv*_JWGnj$;maM)t#)3>yj>X+C1&
zWa*0#yx&ChW^}Z<Z_48D9_?-{c%09{^eM43^1(1EK(Y;PZ=P_cm=XE0q?OMHrGZJ&
zh#@yWJUpQEIm4(<kcO7Jb0hr{M)=yW^L6$}2GIebgHk!a+VG}2!ANG)0g;3-M@5X%
z?nn;R`3eL6JB9l9Qv0@G5p&G)IP$;S4ElD=U{zPUQ2(_V>fO~`vG{8blBB~bG4>DL
z*#Gqey7nq}*1n_@kDb7~)e0&*c%5kBD=EiUXysEiB&HygS_wj&j+(HEgQcNleqihs
zdC$b8QF$rC=r~?a6oE<2u+n{&06%A?oJ5h^&Tm0EU<TmE0(S*|^EOun{o<3zOR*0L
z(kWNapyk6FRNuE|2L*5G;;!Fp(2y96vA8VhBhQw7(C-OQ-0+Ba;7$}-Y&<VFuBPiZ
z9k90OF5@sMKjrJbE_yd@_F&zL@K%&^YQes1I@A8Ir!ai-Ur(X31?XR03svrwtiE6E
zDTQ1Z(?6SFM=sgY^kd5?-ipgVMPqS<lD8A{>Xo$9Z?HT|DDwzi3PBxS$odaqRv^W}
z3ctwWUFj=04GOvXvJ{AXEmjb}ECqkL|5^$X_~R_`s$K29*Qo~P^JW~x#vtjtnEWJ>
zj3NqV0^dvH-~gg*0c;wJ7>98I`wB+w|65aNP2Bt+O(9<RbJzj7gv@|hEsEo3vd|8u
zq-PkG8{!4*dfwar&WyFDLjD&suHkz(^<|GD*;W+8PE8ToHI{1~ky(Puj~IYDwC~Bt
zsF)-hoSvGP;q3ekoK?EmSmxq3dG!Q>{0**yqP)AAyYC!-bcmz~H7d?P(QuSCxc9wv
z53J%Z(X8i|NZ5yUOeDHd6ZdtrzPo+>VWQsy(>}?l=S@#<U?XhxzB}b#*7@!lnRV`X
zZR=GzQmM$U1A?itVDyEGd42zbim`U>zZ*a-F?^w7sXjockcCAwLs$I2tXQtwd_83#
z4{N<E)NEO;?bQ8a<z=2#|3ku263s}par7U|rNE1ak4O_{*17qtH+ch{wE0;HcI0G3
z)41gdWPY56(`h5Nm4k}MhWgfJ;3XmfoQpm;p=UL4w-ws$4}urzJ>5gLr|a<;bdC}c
z0eb`w@b-$MnqM`o{PfPM#G__G1Pf}iu~1p50`-~II(9S{thtetVa<2+Z7^)enGrar
z4KkN0qx$?xo^qKLtc(czi4P4XOx_>F=-CU>(%Yu--6*XpmX`b|KT<ovahB!R<%NVl
zCwN;`fGxB4qFM`58g%p{?I;vXVv7}xVcO`|E_m%xIsFgS6^ju4KdElo)c*fa-8$IT
zUc>K!7^(Ya1^Hd2ni|4Rr?Q~O*?}jW&dJC|xpmmXI^+nyQQ;n3;#(APtyn|uP?wW=
zB|*@DbX8$^FeGo2g!dCp9!{`Epc4zkVsphw&B7R<T|tq=-X>8i?=&uzDu-;DzvE~;
zMr{cCuAU^Nd|G$r{A;d9OEqx$bf(lL#%n(e;piR#Q5XWYWh;Q7RdGm=uX8pPyble*
zI(TsQoyj|fhfd|8S%$d61C-i|Jo2B~z;7qun@?8ZZkQupX<`SFc-{v$Nq*+7+PSL^
zhYVpSVNtJukd*w?|66OYE2XVnDW*@0Pq00=%=~|}hVsP!f2|?xhaczDVB}&LK}k*F
zuQh!ZMVUA7-iCh`Uen2t7JPzVM&QJM8WjEuX9Z5~3CVdB?|WO}D(_5PKMC%9d(^Nb
z(<80_Pc&=b|7bI5w{SN&e}LwXI4VICcdVttn)mdc{Amb+4Rq^pSPGdKTp{Z@GkPx9
zp=F!a3Hs}mD>v%|%~m_96&^0^G|<>q{g=V|tXLpxXtZPsv=Bh}8=zf{4ww+KmWjV-
z(y%}rXpdl~*xh^;B7jN~fMO>=6HYvP@*l#!Zc8-Qg<Lnsz(<|`mfQG(u$f#PZIWIt
z$!tFghRuP;D4s_0J~SDheg#XJg$nV^zi<w*MW&Dm>yXO|<J`?N!4c1jiZfeyQ;slB
zkFW~v`H=}ME+yi^ux$!Pz?F@cUSr{y5p5!lPeH@~0N7dVzC_1OpY~&chG%8L*W|Sp
z9SY@0Z(wZ4gL%rF+4cM-7nAG1@bwDN&I$GZ0pZ{-MO@{iF}O1lb$^_!C4&)?VdRs!
z^;LHOQVV&SF&bU1Z~|p&fbQAL1T8iYhy*@vf+lzxJ_jS6xi3?56SN0OUm^gdxaRml
zIyo3^cwXbjwdvgk{SuhO=HQ7AhWWC0ejbv)9|?{a><3BQ)915wh;^b$m)Qq&_mOsj
zSlH-xOYxl%!ZouKKZOk6Zfik8asL#g|6c-xhu=pw?oF4;*5@VPo16Cx;vMi~9C(ZY
zKI3)Rwz{A%qgRL268FVyKWRsDHkQ%2qDM_2?=R7h@y$n|x}WhO4*;BmF5Y3@loVW;
z>&sE?dD!mH`lpXApaw?p(S=#QL;rOOY;}{jw(GktKv3EBT@}DA;~nom4n9WoyL&Xm
zgYUg{F*1cpquI_orLKN60omupC;2RuiP{Jx4$OV(Gj`y`{O~4x%j)gJ=*DN^BM-XF
zM(Mz3`j7Vh>&TnfesiZQ6F2_N=T+P5Bz|}hIRyDXh!7AtFADQP+Lp8mp`O8XrCXiO
z)u$W&i1{d*yJH;^J^ioHE}P^1|0T0e;$?4ga(#MEKOcflUZSQ0EYolKM7OU+)^2#G
z@4C-@2M6*WUaU>rww`qvnNwLFGf&zj9-C;pp)H7O_ftOrJAkOWW65_r#r74Vz5}v^
zXRnqQQyxH)yPSAD#+Ka#pX53sEBwjyPTzee+CS?8TX^XO_uckRG-w7NTzC^Cga?WL
z95(l|cXtN|<jy28n-{^8$8_+?|IokeK5#M{lpWyM^5nyK;Ye`JJLurM^-VsgWHChS
zf2;X+tF;5{bCZYis`Iej_aWEZn1CnpBFKMm{m~fe+`HH9YkH|p1%EW(NesUf%`B*N
z!)=ZkVwYY+TGhxd($ekG+Vb0w>A@S;buq2(`gVedvyQ>>G=H__ebplh0@YSWok`Fe
zh3>*D*_Is0t?P6jiHZOT^QuXmaT+K<jsbn4tLFmL+b(CELehDfcVAH=_mKy~aT)}9
z1=LBB5t`Jj;IW=T<M5!{FT--2&GA=mZQI^ei~h>I?i&I{dL<5dzo_*5-LIGAlO@~l
z)f3XzkDN^yvph$=mBz$j*n1C7b^$Jh14aHYgqls7v+Us9Dj3#hY|5Imb1R7Eq5iUA
zJD>+>ZQ|EHMdY!(ZD_X>v-Z*@z4~Bei*E(FEPHf!<k=iG(hahC`r%+0t^XQ-a%J0f
z_=f!$$;4w&a-FIl`3m_n*v<N7H-cj{$BCn0hMg}`I*1v@QRGJOCv#t9d+T3GT`AeB
zCu3t9Kb-d@kAcn8(Nv_})OAh*8yOWWQ9mSLSnI^!#E1U^F~HOEhke)Yy-wR<e!e~L
z*kNvgSeZ!S3y_F)4D9D-+r7E%*jF%;$8fO=$hdVnvKBg7`)^b&DysI7&3kp<$Uco@
zM!v46PG8qktFixFPa!z_Dp7nCFGPYe5X!lH64OVqauXqMS1xu!)ev;b$wg_hDJ_9#
zPunqE(BxN9+F;7w&gFgU#_Fu;u_0f&Y_Kj*#c#J}$m9IuA-j4h(GdCwkeGozDQ*6Z
zcd&*RXd~;S2`%4G#Gx8UzD?kW;X@lWI6|8u90gtwOnjsqT%=HeJT20GtHdSH6eO%X
z{3)hRm+7zBwu1HYjWrv!jY*c`Wj7sw#QIX@;Ev=V?!X**1PdH4We+zaP47O+@YkQk
zTn`PtW%WrXY{wiLkJoMDIZ{tMG?g4)oMHSEy{`Mt;}Yq4(QAz2<Hdvi^sIVxi1g$@
z4!0=#%`us!Oq*c3c#zM9!Ca5xh<50&3eMfix7;ZZ=nd!}9GI{hBX<bQtU>93+WXbC
zug{ToWIcb%5iLBn?`<*cj5B)k5hI95HY!7Fwt`u*o~GW>(bdWZB2TN0kE4(5b)Z-<
z;zB6@Y_YI7WVG1T&M^$d1}NqETR%$tDP-cqg;rOA;3V|5|183NVDbalAH<QcsD!^q
zPbJ5MCb75TL_at-7WjK_m6`4U5vD5^raiK|HyeJ=P7ru>YLn<(p6^Ka?71aVkRls&
zQ7;ib^P(d1k1`j~zkfdYmIlMyE`QTVV#zT_bo$xf3!>OiOt|ZKI*Dq7TPc@8x$|Q9
zb<p=8rRQIYEU}0tZ|$oQ+#vD;S%D9+oC<FRU0Ek2Y5Uo4f5k1&T5`4vbk|0Qja^`;
zc#-X5`AqO|u)T^Mok?%4^x$41PG5}5?Bfuwngq@8po?+3K0Ni+`<Fj}n`c9mdP$Tx
z{}$L>!Wu%YIEP-k=<ev=(7*6q=D{;;(-?Q|uD=$wa*6xc4QW1S{BDg8+v3Gj)TW^6
z$LT%bKfgh(s?L+JyZ_w^@N=%;H*TY82nOeOQMpvQPv1GYIPt<dt*YY$3GCJ6QvI+p
zh=WrA_v0wx!}s>2IRDTOjW-0V?74D`=a8ScAs;U-Q~wbvf=xw5=SHAHMfs_-00!aG
zE>ss#apo?+@Z%dAsS=DLn)x02g7_1d)-2d<S$rQ*`VX~$Bon&?C?u;(S)<0`&LfiB
z=8~~haN?5LHZ;?nKG?uywI26brFAl~($J?QVpIPCQ$I{NCS;%**4Zs9K%G5d3P!@p
z><69t)q_WhrM|@^O|5njdIjENM-%(&sTz4UMI?3NkB)JMun-i{{8*6$7#1yz;TAKU
zo$6M7)6w$&eDmT4&{Vk^z&o3_T6UNM3!CX_mpe!I+i^!YNV;=6W=P-SdbnIbm|+9L
zj7>L9)z%SO1U*Tk@GhU~0H-**Vpg_-fStbJ=b>q-F`DOsAB5#wMV50}8(XB(Aw7Rs
z&i-P#B)OS%L<5|0D>fc~LBX+RyY+1bujvWR(AdZ)1N_q`pcMak6a4wH8Q*326&j2U
z_;d*uJuWGs3%m5xllQ{9oKl`J+gmHg;G*6A__l$k#J{miSDs?Mxhk)m8pCnVO0{(`
zAlo=&(6ua(pT9J%wE|J*<+1uxu}zJzv#NH)ytr51Q&OO<r$*h(=pxS3;>V0%zni=<
zTISA?T%=MN@aPMl)@H-@T|fiuO+6cXj#kAlslP#OM`QB~#KZg-#486JQ)Sv-a1wsB
z84qd407G@Vt|Xt4a#i<ghZLXONS{?rL6@hI+ptyD*U;7&A?8fpjs7!}e)2dk+8vh9
zZup#I(ml>=$|cWVe!6g8ZoCBZyuYE~P>l8P3IGkwvhfA?d+0}putxhpMm=zG7b~L5
zRdV}UmCA=&-90jkgH<54wV*YgM^9{`sLPucBBazhR0fXZmGNb|_|`ZEV-sNOb$XtR
z75s{h(vtx=1)7+2cVDi4>({+TX@Qv@E`-BtgOvs6O!-I<Dk4x*PF=lTdD!J-)Vr^0
zZ%|B@op_F!rqr~>vfMJziSLFU>2j}vb~`FouIw|1Q(bxJ{2~<{_vRaqe9)|fy)mbM
z2OhP&Hn|d1T<#Y>^Qw8#8tF(M=FKg6!_MRs)m%zX3MM(+UtXUdJ>2g91BTJoY!?>E
z6Slb))}ngR*OfF~NLei>@AHqc)EBsc!dee|rzN%Rd*n%4AxP1hm24fca70Qizy3!K
znHArXM)c&3f!>djyA3+goCj}ifhL>F3!4l4=_Sa{bURSm*}aNckFBT&vcv%1?LFp~
zTW|guX-F$41^ii06)dCV$PvUQ2$MHz$t}oIo5h}3wvl8BE^09tjHF+GamRds3S3s}
zU@}BpE+pX$(<K%!R4qlRg&>L)ad)%c^wTwi{5r@a3gd#&dQCx(n)x0$OJ(KF!Ik3G
zW~^PwOmK2_U6{x5xCwDPImFd!WB7D9<@y=apb`;@7a@s2p4|kyGUHh=twM_{NSXV-
zWY-G!VBIMBBAW<8oFwK;6!eWRaZH<JnL(+d+(#yAj-4MvM>~hU^+{e_UP?)>E7!{J
z1ErBjAZf~*C0|oavPQv1eCKdFAY27QIN^IH-N~jzwdvh?DYw1fw9>N|i~r(UNN_Jd
zNrf)N?T=1azWkz*D|As<%m7I_WdXvsl>>x^XSXt|X#|)>y+X7MxD0eaQR*{r*pLS+
z7q;O;CvrMH{T2Tspp)xLnq{@J1!Zkh7&4(^P%>$fHBIy7;7i!^;t`k|+(OP2>sV~A
zV6Uy4WL4xkkyyxDCef!gpu+ofG%MCHQcn0Q!LN`Lz4k!`rQAKGVlS|;LW15cOo@h4
z9z63yP7S6e7JRQPae@HYR(MXD{*KKDPn5(m;H+q}xcG;vt=Kf;*ne=u5-SC<`fxSE
zQY@zAYp!W!j=fuAn1>CERlLEBZSf*KWX$Y!Mt9Pp^TGNOeqR2Gcf9#-Hgwrp_G!&v
zrrn->&7h#6MtfK4VPK9H4|$`VZ;_Oc37Xv+p^DPgZs{3K9+eCnl_Sf4dU6X~Dc*mQ
zy?}eIIL?~7cV~-2rR8PK*I!U<XP>oasKRdPyw`^%r5zBSmu5~n@C^t|u1-`~ArJ|B
z@L{RI3rv}YB{5BG*Yk=n*GP;;gX|`Wgp1IdF!=}=QE&*77cxniA{m||z|q{96(-ft
z&L0H_yHw5WKaBxn-|@9}rk1E>jCLXS89W4^E$)C%hbYP{vD$H-uaR2g?R}T_f8yg&
z3pPX3AMXz=<X##by*=7CdVBWtR_vJdVWFGTc9jaB+T^PBV;|ewxFJp(<x<5<kgX&J
zBZHyxf3mr`+C8*MZpM=p8sI0+M)?)Kz6<zb^r8pO^VfLezKzM61<s+?P=*Ar)L`&Q
zvSDsO(KPYw3M02u<^Y^mJe6rv0xTsh4C}*&CAutW#{TM_iHdN2aTA?v18n2eCpS59
zW?siE1J>-%e7SUtS5Ov8D|$vA7x*qsXcP9Fbu0Dtp$zix;3#&rhy)8(-JU$8mh2ZR
z<^#*(WZ)u#3a#`GTE&Smid|}P^_ZIlZ*2cJ^ZYIGQEN<^EPloWw{dxHnG4j51uO1?
zIe){dwr~{c3*t1TU!&T@n)l;wI_FwN<gFyIKNL~0*)_LG)V`n0BhbV>9k7o2Aw+zG
zJz-0P;6<-@{ge87Z7L2Y2{2&#xXGdMiWr2n0c3_sj$a|WvZ|kw;@5Uw-f-QBMo#_H
zta^7|J>5kQ5(@Ee_P3i}Z)6}p-wu=R*O7bT-mco^re0ffJNp2govF>^W)V9{-EN(H
z-VVk6tK<)nYR#RqtPlTo5uJ`Ve0Zn!*XzjR0~-XOI>Yso&S0!@b30Dt3Un!)%d6f7
zuzkWcZLO;moXzTyZ<Qb&fF4L}aVW|Aszf>2f7HDM*UqO)UsVyC(vT*iqLBQx`EfGM
zI^fQ3ByRLlGK$Un$;VT!mIHami`XOu_)jdg>6~`6W{1%N(Tw+qK;%Kh1Y!Yo>A4zy
z`OO_Rkq)TSC$4?NM$o$J@loSSXQ1=fYHz6$`t(SvokV>+AAO!affGjZs6PkPEz@Sd
zXQp_$aw14i-3%CFFeSNaUae`EWJ*ok`+lRLMrHZ3f6BYelQ%#djF7)B^+}Kv1UJia
zJ6*qBIafZ;QW`+_1gCX5$ebE=TN@uth!n}0`nt9EW<(^?#v>ur`2Fm7)(M#eroqn&
zF^EI9E%Z)|7@?;!^$Q8K3`W(iyJ_2;JeF*h>ZHo}U6)Rh2p5<PSA(*=JevW8+$6Uo
zdRn;z*|<@9+eM2o6+tJ<po4%=xL+;S=tCOmsC<xw#)D)(?EJuyopf-X#xg<<gy5`#
z^BZXQSL-fSIf@yg?@Kv*<UbLC^@9*xTo3_}Gj)x)((4%GJRd1g)$vgAy?jA9(op84
z!jN;ph#{oKHA_hC**gV&o&Bzf&-7%u&v4$Q&%Ym=A1xDJSq;IM^%29i=6(toU=^4$
z`pvV`$v-?uodtyzP-+U(BqLCT!c3PFrJ_@M24#?Z)v7IQv2iD0ept-`Y7&`x#q3i0
zy*g_~?@NGR9*_L$6I72(m3CfVDW*ERLt~R={VnZs#dH&@me#+x@>Bx|NrpP}eo&Ks
zwj+DYxtd79MZ3MpvC*>c2eq0q0g6bpIwWvIC64exvgb9LG1qXFu~a%q_3Rktu^iyy
zQ3edgby)w&Y?3IUj`b@HScsP-GiYMmpo|t&wIoc=9xd4OUFPO#T1w(7BK9_={m~Fx
z)E`KEmq(B+fAz9h^;7nfzTF>#y|Ww%;9~2Y3g>k6ueF|oy?RT=2o4^qKXOW5bp;^<
z5R)V_Oy8(+e%aNMI^Sd4X!B^iLb?8YgMNPo9k>&RJWf9sa^fy$DW)erQ=yalbC7{_
zN3D0f$Nr-Eik1|AXhK<vd;YV+WJZrsG+m}ys^C{ay`4~U(oD`KIJd@(Dy=Rk4OAu_
zNkM0Ewm4B1MsfgDvcZPz)aa^OWG`YRaEUqbHIagL&ocx+37s^NE1`f*GEF53$;h#(
z`3IXOqS2;_UR5hdW^?Ko$YL@TEybXkEel>dq8Ra0bOt|oNr`UGIXL!jrt^%cxI?DX
z64^||y4$8cLqe%<9J`D-+`nUa+_bFH>^$Kt9-hytAdax&KO<>958!H>H}#H_0CF_b
zSX%vPV}7-sl;u(#JelZ{x0lU}eeO@tQ0uLO&C2yM7vTI`elpy)Oyt|Sq!S!Hnx{OP
zX5J^_JG7T?CqI&8j>y&PT6UNs7mC+4xR8R^wXn*&W{TdL(+y#p1uJU+fj*2%<-5cd
zn3j@FQhJ2+Lk15=fy(MFM(RWa;6R$B9QY1tAhKrhXC_}!0Y*17?_cB_Qla-Mg*>N*
zT$|-uG5%dT(^%nbc9M|2IhW>%Ne)+enhXpv`Szgl-+^Q`dm09<-Y{w_n3|W%F9F^B
zrNnMQ!np>m&#X{hsnE^5KfrKen?<F8T=gQ#9YZryuGQGTsFYb@M|6P`0Cxm$5R>I0
zMP`BMSHCYs*w$s1GrIg|BDKy}%-(2sxl>EoY8kE~6EP@u)8Jf0`>*U}HBYTeZO_5)
zO8(q%ak22gNCmg{RiIQW8|Q)kX@i<01lp?Q>~}K%skB3mx6PRKCfeS0)bJqrq9IN|
zXT>}ZKQMPA1qcQQ5w?y4Y#!!tEUM-iKc!1F`*_UdZ_F8GgfXaYDAOFhQnfEn&fb<w
z;Q1Us`v1torFZoBUpAkcGeMg1)QohvT;J#i(0(YqAEv|hv$a0mOktn~cx%TfzSk@&
zg}|I1%$r7UFyOIa2O^~Z;b4I|Z{N12e8h3_+j&mJf?0rN+m65oygfhLD}K>>R^=gv
zp(V};$T&5dXw^3Nh^;mTBWN8oabG$%_g<QD$Rso~NAe>Za21(t2WT!UIpnfyHb#fx
zq^*+tjE^`v3Pc|S_sG}#rs(|0Tr|f7@r<I!FG6A5g1}OfU3CU$e7xfL0l%PcrdVxH
zo|40w9=&<(m*_nWgu+q1s;+5ZL<&@0uo2h2_Jp=#zk|qG?i&vnA8o&P#8GVeyMXx#
zmUcd!8B18Zh1P3V)0Qt_4|h{M^kVjx9hx`vaWSu)J86K25zP5<(_oKOe3pDJ8Z9Z}
z>aX5Q`7ez}O|s9^urb>#*H=4oPW1a(BQ+{~xnU$Vom0#Jhf%B30)h+y<n<--dqvgg
zhgOa_?Rdh6$;Hu`q++I(<5$@}-omV9YIXa<fX!Ov#x~VLrNYm*(wJ<45GU2Yae@*X
z`}=q`eXRN79WB#V?bFwp_LQ`vkQO5ro*ZJ9SVR-;uaSac$GPqOD0>i35@utiUeGLz
z+Qd8dyA(6Pzc#Y<uXWWm3UMOg2wVZ_9d?Rccv%ubN@7nHFBC6DX0ZYcem67--YmO+
zYC}k?X8P{W|H-sIUEJ>#fWc9xNb{~?h_a2Hh1&4jMxg(}3`Te|3svA+N<9rEGi9DI
z+jUfNq<OIje>6Qcn&(1RC;F~=7`_%^#%U6Bi}V4K{NM$GAt!T{(#7H;@akxIe_{1h
zE%TC!n5dOt5i)fc0j+;%Ke!|5Yi*4jWgsn7ekMo|Y1R8p63Tz*l-nafJFhEe>WJ=W
zN(Xpf$WF&MdyZsE)WJ>G_6GS0Vv_9c{ng%z)K6;yqj<$iwg*YH&<f_(R?Z^}w<X=6
zs%@3^p&jX7LjfL!MS>y@J(FDMHM#HX=DQyJF&$HQ^c4tRD1MDz%I4AR0LrIs_?p2I
z!_fr{L7(Z>=ZpHz^$>iT1PArCa1C{<-~K!;gL%o8m2x8;g{o;UHkL%hV{JoZ(`%8e
zDL9AAIjSZOAS~*eMs&{BFA!GQwKK!dPzo&sh+a;xecT-+a{?f^Z2G&+oxF|H5!kh|
z%qpBL>OH=QI6pojCrqEZ&z4-HJBlJMH*iyCtb0qoZ&J&|HLy(jQ=S&Lxg^H`UpY!$
zFaxHEB~u!VBT*kL1|EJJZ?M|A^XMktuW`F;_&*)5r{j~2w$GMVHTYXI-%C@D&uSG~
zbS-0V(~G7PH&t^)=QxSGreBUKLU2Oj2#;n8an+7rzo_BnzpjE~&bY~a{cL~xUCwZg
z!8q<TBL|^BZDu#Oy@n0?EPuXNnuGux{*r$3=%|jVrOukYcg;D+5xe2Yts%<{W27zL
zdaUDG@#@7p%y<TvGu;#HZ?y5dA5KN#A+sX=C(ElIPM%(T@=ut8JGrwhcvkCmYK<?6
zb6!(aXfzwCZ^N)%lTX~z&n2f8&^xNMUF(|)C&<&1$WtHI)RW1RC#9*+>)QYpb*;IP
z{#_yatM(av3u_)7M^<;K!_fRp;wT62D_&Md)_jC)#8t!%v&rw|?2v4ypESzib)B0M
zQ#QPKTF3VYFP;XhILZZUN9XYFzcp=`kJzG_NaIAF0^jxCp5RH$2}e$gKk1+CZw^N;
zxZ4*WV~mXj&wr)aT(C6+M<fGLFo?|)@q0<6OsnyWjjo01E0AP14Qr;aMJ89K+`Knn
z`WmeNbf*$*)*k+2W2QS!e%^O|ug^%2Y=v9V2tM2aBUKcO6wOAKo)zPCfO_4Axlkzf
z_dN^1iV|Ds7`dCwA}e8xO8s`=%#4wk{-J@sX+n}_2`xq>HiJ|iZv?1fs#8l55>cq6
zJ7$r146rH%7a3vs>h*8brg(aEKH~0%9Nh)w3!F1Xyr&39o4bG|m#|*(a@6@vZkhg!
zY*~#_7<|O)Lku#mPc*z#4T#6r>)Bl4ufJ6!h^zJNEFsNEfFl*kV;++d8tK7I(AV!5
z_FGb17NbtV97tFue*#vQ&(r_f(mJOjqQx4dZR!?!+Qi#;iojAbUcU^4Gl(t()MC(w
z_lJiRB99cf_GHaRi7L}2R0_^Lt6I$(#0%Vk-wlQHcJo4-Th)*^{_dQQGo!I%VYz0H
zqcL;jV>^f462D3~;{;FE&Tfh%UVU<I0P%us$g4qtD1siOs|Vt~jETdJ{<!fQp%^dR
zn*)u)Tbv)`9-K^s^6gT@os(|}Z3hRZR}+-t*%T(FDB@-QSM5rO+=_5wHgl>TJHCw%
z?@H|j#|NcOGW)MM@#)DWUQNdLXID-Z=M{fol3k3t{5?CBrBaW<@~t$>)-*Sj+d7_c
z5hBMHH5Ai68-c$@moDP&6mYKVs*kFX${C`Nw~kDeT}6d_#BpIAWjhE~$B_9nWoS>*
zz?vkd#1X1^C{j~~)KA3)ZX4b{rV)0t`1jBvMfr?&LTK&H_>jUHwyWa^+tHn(sfM*O
z>uohAd4KkW=Udo~S?3;a$?A8*nv+nwXuf$>)$P(Ua^Qg%y!hldHz~!GzGrtsubqox
zx_+-MwKfI+-w#IVqX?l>3PONF+a8W)y@Q`cGQWb*T6<Q<$=2AjYNLBW78+$A3DhKw
zXw;v{vEyIoJY*??fO0l*ja|OR7P)QCWPV7@Q+1utz0dPPfvMp3-iJ{MT7j+g*M5?@
zLD^ah8h{yb%-0f*$Cy6%7t4kwuOqGPwy<H{>1tvTq*VFY3pciAq;w~lY_Uj1D+%We
z#d~B0Qo4AY-)<!q<*;ZXa^=4YO&*#>|CfKsbms<>&RR_8b(TC$#Y5=n=l?#uRNSP!
zeg*LoyeDf~$R7;}io(3gdG&id?mm9HdA(i~djNCu0^=Re&VHTwB%xM+QdVZq{pK({
zUep!eEB|_LHm{FUxndRG8HgpOQ!v|#pvv!6(T95e^V9&W^DCE6T8%^wA8%}x`(*cF
zdf|xeL=P0jIy;H6P!$<Ey}Lcgd-x-R)5$wnibA0`l9AIeoDzdNQ@Dho$96I5NXScZ
zWPrzBe$uQi5#8@^?zJ8p^Twwh?^&jQgGN81L)a#vUJ#jMl~ac9>DQY!8KXY5SuQU-
zch^QOLo)sZYuMmg@(7*({eC_kQW8jMcZ!CfV|ZsHFVvBaCg)>@oH^VcvT6v}(f`F=
znGb2DXC;DE*=CspDrpTa4n*hUp}%&0f34pOWpiW|%~NI%41=#!8)QEB@gTmi#69Ab
zP%Ek{K!=&gMev(xOt*;9tvZ{TsA_8nZR={Rfd8_<{nTlPZ+3G_${!?;@v;Iw%DlTv
z3y@#LnyX7Od};y_;e($$3C75K$q(B2s~Wp$L=2))w-?)zH|WsWO2+ni5^EMK{Q-_O
z-$ilH?t#CI%&PGekN^BH<|)cob%m=KuxR>WyHn5Ps?{^Tqx?ZUPd_KWVdjEPAd=Gz
zfvvz#eZ(uZ%PWnVQ)(Uk&vt|7uk$cGRlV<$@-yYjZVrNc!7nLf=~{3RMz+aqrp72J
zf%NwYxr^yk&&(at$TL}Ovouy}6(I8`{6r1cUu1p@M_9$Wq%qC!Br{Th<ZMbO(VZj|
z8-A^`-WO#Z+DbZV5=i0;i+pneHGjQca?&*~N5uy2%TD6tJSrjv;&C0S*ei<uy;!SR
zrm)tsM47AiBGLAUeVc3Gn?g^$`&s^5f}nEpEJ&nb&SKSdJUVwsATggM6cw;IiATZ8
z5#)}$_f4IfZao)038KE{IjTy^c>U$r0wH3xtaU!3Rnek#PVsRlbn#fE-;fM-sjEAI
zQAD<oF!8&j&hyxV!j_rtkz5M;bRJK;?zw#$VRJXH*N$@SvAm83JyQuHsO7CKeaz)+
zK5A0e0>;LaUNLNAYeH+D0}9lTCbH<+7$IU4QdLC3i_q5fZXuw5he`jRMFq+w-_gED
zx(b71_Sv@T8DMJ&Bh#{z8T};oN|xji4d^ez>Z;jaz4A>M*vle`vD+cJ5Ql`nU>hTQ
z*y9dez7ZZ&y;+rRJa8Bf9$m|^dk0+DdCtuS(`^!W8rJ&frh)8;Id&;Kd(nBY0V@O@
zoBBtuuNoKD0dZtMV<w)$0{okoWjb_5^wV!R%qtq~_y6>x;tgf2OP%8kMGLE2*(Jf$
ztI?X{dakK<z-m#`%E=v;B837_{cbEb<AVO6XBa|95vU}&<4Ec;z+TY?BbF3@OZBUm
z6{m^MY!O@zrvaW{qjB0{FQB590DLSo&+>(Of@{75`kX<ouWCwfX!L8ZAmsZ{I?<5f
zl75Di3-Q0VBQOe~H;S_bD5Qk})KN<ZNnV>+>4kAc>;*z^ZgoFJSa$fkLVQ=$CE3Ti
zjfL;Z&rlu9i0wd8(YTnyCWU||hr>&<T;%q!3mUCb4geW9O-GDo{6-87HMj8xBmS40
zq)MA>W6FWge^@jBrqq#D`I`)Sg_tHrzIFUnvS6<|nGwy<zMWJPIwfeo{xz;`gM;dw
zE=NEt51}VQl_0`CZItda;wa$Hbn-4Q@P4nNW8+yVOt5irz$}i&3~#pd&(I^2(Ahoy
zoZKdB6v!O!KTOEn-cc!9!Zp0Bn<5<iRD_!}{%K^(@-t%s!lZ73fh|2Vv<}N=`W_Lc
z>Ot<_C~SmvGc6MD!CRw)2S;V+=-!!_AuW%~A{X||T30aYz*s5wo%sh&^+ckL9tmSH
zee+-0Jhn~9h@X|&IdDrdefM*=?@XG!RteiL$AF7@Eq-No<LK{XAm72Q+53gH%^QVe
zls)m(B1z)L&BoO={n<eW_@Q1+f-VgHlaS_j%p$f*3#xf;*m@o5Oqwi6Jqk%+JKtB8
zt;V@**dtBGTzOZcCEk6aSCTn``E^OZs{gy^?K29mxgS*Mh_;7wT`f#o4^6QQ6QRS6
zG9bj(6Kscbo_xQMWs;mM@GHItQR4y{2jL*4$VZo>Bq)6d27Xcg*TNn@Q#6C^_!oK$
zqa=@2Zxo)miy?z^XMRnHTOe18=Bopnl6<0wW#Lyf%c)I#afC!85JQ$$cBPT{29S2{
zZ}B|rJM`cF(DMx|#_yedJ7!OrtE{r-1vWmXUS(8l{%v})8Ri%unSNsl+WC!y24TAJ
z^JP^klQku!+cyBFKF@4iIg+0}_!drxtxq9sx=+LHmGb$UFX29;-u2LRcuL*4CS4j=
zpp|ri)Ay>s>rA~ksSD+44jB?2l~qx+Q*&f^A2SfS8+PbJkwS@7wDeKpnjVk-n}AiI
zVx^L;6@CZpbK%j$&};f<u~)_Lc(=85mX-LVc^3QKUS`X0>=*kf6ND_xFz%f#Tm=hK
zW|?vn_6n}f*m-9S*^ZOVauNf@wayo)Z?AFppL&<)*}ILg?bn-+ReWv=HMbdTwegZH
zasw`fVzv1;Zw#a(lU4)I9GEC++W>Lg7Rr`boy%hvZ{Q&82o}mWQDU`8(9$qwMiT9x
zkr#u-ZLu*H$!w_QJ(Oh>`<-%>Yh2KIL!KyuJAE4ixzFmu4{fUW3Rn_i{4KMD-9ypZ
zy;Wi-$TVHU2>8xmCRQmPqjxwmQt2p9vWyF75Dqp>;gaT4^TDXUqmokSFafbxc4HNi
zSRJ<AA#4r0<!i@B+J0)&T^cCHo2WVBmSJ4fkUl3^a+`2VClN{@);OR7lRU|k_oH85
zK-2~9i~vK=l*Lcj$I8V_{h?(Q#o;c8RZ9sY_{>PyVvL_jI>+739geFk=?(htG(*9n
zNPz?*{d4BBphcSq#kNyV2*BM=qfMAWUsf!e`pEjDdQS5FHfG0ockd^2<BtaA>Ohdl
zNOmO_wTlP=^`+v?_g9(=5j5P6+`#1w&d?(b5~TdUUb$vR5VYJ0asG1r;ZTjn6K5`v
z#mPBpBcv~dS+Nlm@A!F)zc9@AGlN?QIYTI>45tysXLP|JF$qcGVt|Y?k4x$38HGEc
zJDHs~TD!CnxLyuD70HNZuyWLf;#W4M`Dg+e=fPn-Dhhq4_UT<D^8&lBWY!x5)XQw+
zI@jBF7faU3dcXaSHOesyNlU+iHU;8RMsgg%BJ~lN`|qFF7H?|5g+#Oqg}rXkO-)S}
z!){Sa(4b(*D(GU0mjK}tvtZi?h&{zEA~ppOvfpL4vD2RUKLy;$9=499ia{warqSag
z$D0tJpM_uDp^bt}LSW00$oc+EPNNfxO?(b!wceUEo)an#R`eSG&hvw0KzAJnsB_|-
z20>d-`Y<J}xPP$@5=AXusBU3;Kp9+Dqtc@cG0_#Hp_Tos!~~kkl!SR_Ogs?FBpEs`
z`j+jU`IF5APzY;5vlaj09*sFKE7VLZwX~OQI-9hRC>08Vg>o$XLQEx|#Wab*7;Nw}
zWjZqNu!b@tUHH*l?{}#l!b@#%N~wVBYQ+?q1H!v+dL^)9nv0$}Ba|V@5urO<nyxVX
zc2aiNFd{)LA_EwXexlqC;FXDyy}Ql-Yl~B#H3(9dGQXL}o%7+Va$ZyIx|6qWNyrtg
zx|`>)f7pP3b*gMXD^{~I+iH^t7t&kcM6Go$K1)k}jQLs8u!3l*D^cJd$ZubG6a{tp
z2gYYL3T@>)r3iKx+fC)0QYeq8K=8)j0Skx@v0n1%ynA4=m)xOsPnR?48Axm}k7Y*J
z2reGTaQY3)fK(EE-YRpoR1aAx26Nj&`@<s7ndYyCDR7kMMrN3_h9`KNv7ImB7+1{3
zNhjVe>3nx{|E$;K%*Kx<k=%U=Mea6AP`SjMN<-0MulORg8+bseGtYR{VV&Ed%3<;v
z)=x~|UIoai8=B3u?h$~Sj2>*$fBTV++>KoVrg0+T=@7zDn4~(8iG!T}izy>XA$gJt
z{_eNY=}2m0Dy+swQS5gmP{}_jy9};4@E_}n;V8Z0iQj1olC8ceg(v^?KR388>IC;X
zi+;UmMfTAVBw0}DQS{+8I~EwY_)$+HZLI#y2$T*mjq~S7Q}AqJ9?w7UYxMGB;XjNc
zZhDS*Pzd@xaib^d0spsz2(FSHMyM=I83wE%vW@EDHh~P)kz$aV%oC=RRD*R`K;4lE
z%Ix&dnT)-gxPHw0D(o+{oA@7<wP3r7K6?DwROeb*|3Y}`|Jm2Cbso~9RBtw=TY7((
z`%RkxdNJ)DevPX#R3!<Lj;QfV(m7Cmj%yzz0UKoxtCr4V4CWfiqV}kV-rptb%2cL<
zl3<-p+(fuBi*VI*V!O~@l#_TJfyFMZR9sCcwWwd($=TC0|K_GX+SZ;{vYSL!W*f%A
zw-U%^@0+5)Nyjp_%G!>3gUzab7PjV~gl;?lKgd`~D%r&qtKp5}Vkvvt&ec|Zn$#~|
zJR%?G-N{n9?*Ly&EV@r=eY|}=9vpXKBdX}H@yDLxnvZOp_Gr#<88K<4E$yT+loO$P
zTC5utePo40U-NGbgNg#2{bSGE=|M~*MI7OiAf|ja{%$1Gz)HJBSjulhu+7#3fe05s
zFI&$Dl|GI`t~1-L%yI5ZAnUTDyJB!XXrt*!t)NM!zh}-45^K-6P)It`4jCV`9cr41
zz<PkyE*YH0J`ryBmQ*&ZWkLLr)tkPV^idB3iQ0V{x|vNiXE;vcI1eq<<kL<z{#Z}K
zZ6@_B<k9P8*JtM=yDgOH2(`Qt0`7N!!RC=q{X)1?DcZaG&NOzjOcW0qqJt6Y0VZ$r
z!KM6H;DfbtwyjdS*XxV+%R$m5uhi7~-}A#rZX*V9yD<Cv1$TroMomrn>6>rz_TZO4
z$c%krNg|g2O{oPOJ?}AhA}@5rpgIbj`T-4C-wJ8GY-)wu+V>l-abZ&EbguRQxQk3S
zvJyDzJawv>E@iyhsOt9MNse@=an`C<l>X^d1JH3egpFVRsun0NR4n`qDALF+l$4AZ
zCZwjK#R>uO1@@RSe6Pb33skD7h7AnHQ+V!S-a@QLqIVljo8Gq@R#V3KgrYdE#R^lQ
zFG?jVw#BX-;M?3va+D*HVWMTg!I3h7ceU{5+)0b3!D5}tx#@e(PGbkX(fj#uHI1lM
zUZdoCM3Yr<C>)jsQjY~jDSp{?(hs9(14ht)R;e$bnRuP-Z>}F7N4x2LOXS^#Cq(a}
zH2y%5v4!+>D6Rv=WxOu@wsd<zsHKQnrBcOCO(<Nkfubq_MGbL5?tn3HNt#?xw&%vG
zam*Lh<lsa<zEP0^X9qBua~GBIr{YT^<?)BMb7ozHDiai3JkJcwt0)1Ec1#UE>=|>q
zT{Y3I#XT&_N_5w5cP;<uv^++avL9Ri@!r{1j-gE6+g3g%+ExZTY$VuLZhmM!{uYSr
zq{Xe4i>z&WTJdv6PSgaZx>I!bUi1n2aW9i>0rZQh-uD%E=tmR8oewxO)YnvrYENSZ
z1RXfiDyIxDGTeH`HHTlxH^ya#@4}Av+~JDkkSE)&7sGjLgs~32OCXJ>BcByVYLDBx
zwV!MDq`53^+1j1Co>aS}&&aKKff5;Wqhnn>DQlq_#?*%l4IRLcuJ@}KMq0Oe8%&Bp
zEnq^q%b?gAIxtZ>(p8lJ@~vocj3ZT;jM<A*KRS(GlGV0mmWhbG?x&QN=-WS8O(^0b
zMzRD@;}h*)G;xlpWDT-er_^;2{^vo@OvRqort>!!u<C^N{=)Dc?$Y|>K4<$E>+vy%
z22ZwNJnFM5;x2$Tju;GlN4f3^LID*Uc?Y<+QxS&B9Ft%{&b=oHdA4pYQgD1;gl&Bu
zvwYM6t!*P=nh?DRuJAfiBw;cnZikj!5q8vq1i_eCsV{BdqC_RXr&zcf$&Yg}X{@zi
z_SMf{Z@Z>$5lflB)L+z*wsDfFtl1BkWDFqd>IQrnMU#Q_p_WM&NeN&D;-z-mNLNYr
z$3+T(s+E`JKL(s6cCU@T4YsTyM2#khth}ZZcH-yP4KN+{;IwInYe-sG?EJ?9&}i}s
zNiE$q`;tejk>rB35*HihdhiF;$f4*VX<m&j4Jmef6bR1u+ELx4f7g0Pe?>1dLY=;H
ztn1%g4}5_%2Z6X2-81OHtp7d$JA<hdE^{PZyyXa(9U|3`k*R{);xm(^02IPh?1Y#<
zG$abJBl7|b4Gk!9rSIaXvVn%?KS`%=OeDq#Q&+px85%Z%!(3elYmq34gu;&S%|m|F
zX!~8?=3=?|T{B|x`d>R7g@TL>-WaHBDswLZmBzxR$cbnp9(by46V#03diGy}eK`k2
zRMq4-OzeoK-xcp^*cqYchJ|g$(0-ORGBTdcBsJwp)?cOAzfG5~r&0{jLY&;22=EJe
z0)+$Z@-^_k(u}+?ZjH&p-PG5c53e!mI%Z1$;xaF=GDMA5ta$7qFjlmp^VfMC<@N3X
z3>~Y2!Ow7vL8$8Ixye|C9!D62x_6U}Mtf?09<|zP{kvGkdruP}5<7?3vNg&5QwFW<
z+fZ+R`}^#!amd}&&)hm1a{kC#io?vbWkJe2tAFb~NxqzdZ0Jwu;NZ!~!XJL)<3_}E
zo%an`y5|C=jXg@oEAEWEN002;uVoVjO4vkTP#)V7R`$`Ddz2dnY#x@}pHUSfh>mDU
z!cn9~qVS6&iU-=ISNuq3k;a2{`I(6Y&>^oen`R*dgqizpy)!rTdSnaq@gLYY)bV-i
za|U_2PMoRweX)F!7hsCV5~?2f6D~c82kR!dzFn`G^wctXPAz2{t>1++L(w+_V$P*1
zN9M&9?+-XAjDlQp%E?BJamh3XmETep@ms?IIK03i?R>jG%E8FX<W|#3d#rlrlzhk>
zM(`u$QuuRXM6B@$_K(SzsiD0@eG#xU(m^3J>%0vG@NCWq-Dn9)i~_H3aCYLK(0<DO
z>+K4f`#6Q*rqzD!{TLVg2#>u0^Jq}|+7NsHiPzBcpl)^gdH(N}B#o&|*|s(QuE&xa
z{GU%lqPXxV6gZvuWvz_uxxr_CRl=1t*C#RWnTvF#!X&4~X&1;+wGmFNIr{gaSQV&D
z3p?jOs-_7AfnsL&6&FzLMPX_i5cz)wo3*iK!bxC{PaWz7G|?sBPG>NHEcN_~5gxcy
zxxaE4^3Fswg5TRs1xYyk8>i`w!?6aG{GwKi^oUtga#Tg*q@vJLxDHGWzlG;g-lg<!
zKvbD(HY{jbpTOJdX)l1sA66qE5;W5ma8Z`BNAKi5FBFCvT;IKV!}Ijl#E|yaK-p2h
zNQ4+5@2IAr?5M8uL<KScfE2xs>lXJwYH5WPIn0&~Cod!fkK@1r&$}^OCsE+N_lQf2
zk`m12$f~qGJxR{#3q9Ws=kPEY-X2<Kd;L=^AtP#Xee0kSsK;*ObJiWrCoQ8l=C_>o
zGA5oxlv{$!B8|qygX=v0X_))*nFt0S)1BBmsKIDwNcA__30_-(r00G9ke|Z_#+Ee`
z7^5=@p`-dis98k!OZ{=#acNA|kwPGNPN77@#3ii{aw2MiYa&EQ%|hPE!?9Owu2O4!
zQr*3gOlyQr;An<C7TwBBSO~sWhKHszC($ti0%j+?ULp@g#S<JS^xWxX_xty_0n}pB
zQ6+POAFYl_&_R`eF+Nv@#`IOB+oq9@*Vdqg*ZJ6YXGE`ikmIoUWAkC2HLe}L8~3&s
z>(jIF)j!5yGFEkD9abziHP14gW!B_o%j%l5JOt#f_Hdr|U_P|~RnIr)f2k5NJeP)4
zO(H_>F$U}uqE>Jl?j#}Z{Ra^DAtX>!cIv;;CIsI^=s;ot)qbXAPTcNbR7XV>G)mV-
z0m|X?B$kA;kR9+!Tey<HBt{&MY2tHObNb>i`+*-~Odn9tBDBaFmy_CRY2D+^bK}ZK
zX9LJD2f>$J=>&w<*j6T4=sEKQ5qOupL4BQxLCe_ZLi|1EWCwhTFqD(I456H^j`scr
zA7UZr(M4!L%O4wS;>a<lmg=H++@`_lO=W$-5JGud`9!qX-wGX&x(mKIv-&({5EeSS
zSRhj<N<*Y*;lB=GjEAVs-tfT`Tzs^@LyuN=aC(q(3iR9bJqfD$W?U5oVHq=|GFekm
zZDaM1Qt$hTe7#QAFvix-ARZ%;Z;h`qY-Ze%rd%ZOj9Ql<HLdpuvPJ#}H)|2y5e#ei
zmyN(6pHb1+&QJd4hy+aP%{=Y~LjJPGMgn+(9Q$6+oI8|Q(o*FTMWU7yConNXW}Q2f
zM4nJyCsu+ifnRDB5bpYe6MyTW;TcZr+z)!D%w&|zX3VgvS2&vTv9D2^hu6Cb9D$(o
zV9840NR+pox9@XZur4h>07b3*uLAGyzR$N&>9k^8iY5-Xo$rpTZI4Cg9gtaH3Ap<X
zY8s<MioOV`#k7PJHErZfcFfu&Dik7Pk2RA{d9;v~!2U}5$=bx}^`fvpR4w8Ad45|~
z4J#E+$SVEA9!Tt^wA-qKY6oftYv{AQhc2c7jvV%fvN5s)hC#<yN~7Yj3YKVrcvS+c
z&8;fmvc><AwRQc0c8!5DVwYzVcWeN0Qmk;U@otK!^5DCuY(SoO4Y$B+{obqXNIMXC
zSg`dv-QZ;^?JlU8iAWJvFxJ1vFfn{Pb19?zJguboLo0qoC<D15Wd45mwixy4aw`}p
z-uxt3RSs`_nAeSrn1h)b5jv~tnJf!#&6GAStDxv<|C|mr%i1NZU=w()t6w&GUo>P7
zrkjnxiO})yVYf8rHoSSbVWzeE4PJFx)$l4(gTkW0WA3tG6p6>gBAAla2JKp6?6w6D
zW%blFQa6GaZ?Y-f>HTugD%17(l5PU%0Jj@;HsrV70=65>#9c^3URhj%o$MV^T>ga7
z?_6#%4?$++nYd|1&0H7`HgXZ9I5Ym(u4$<1w?!WBsA7kfu5}?g9y;+%(1^m5oliov
zCy~tD#)+Pcw+NL7g4(2_?XXRV&YFvmN2fN~4}v7ZBjO0J&nsh&wo7g81~$NE7zfi<
znMn+lhfLDHlgg2^BNh`sHqQHzb%1O9muG0WudWFv8lIx0?MG=BF*v8977ka~efds}
z*Ezr;9-f;Rh0a92*r&DdM2T=UsXHIsQ?ov|^4^D39^*Ot^(lrLRS{m3sv8J$?<DqM
z^?fM;ftqe<(?>Go<<=StJwUg|?Rl1i(SBFaQG`AHDqT;qVhV?-e+L{{@cns5A8O`$
z1U!L2k!fIpj=??gUmpl<n(ycFt-FA=geD0xWzuYZ?--PBSq;Ts7x!<kjyaF>xQ0s_
zRO5m_g=>js`YL2J<*9><WEMY8&gqKr!C{}+ygZ!grxDh5adL+8s(|-gYtDsCopx?c
zPdELlanc{*dKTZMKBs+-q{9l0`2F~FF`(KJasA@AkF;*uYo?DMf+xIS$RA0S;H2lt
zQ7L&AP9Ws+x=<gDvzwWJ(w4G$DgG_(-29b>+DUNVZR$*w!W7x?AtaYD^Grf48OJR%
z{1>lP@4l_|$jac=A{@ZaYOEw=lQi~rL6(|ZBu1%F(MG1-CPl5m&-$d9!A)S*m(q=r
zA&ibpUww_8_`eu?%cwZIbblK{2<{=cTX1)W;2PZBgS!L@cXxLW65I&{cXxM(;12&z
zo@dU?IcMg)@0Y#0s(0PB`a^fG>%M-ww%7L|6B+)7#Btx?>NMeDJ1<Vv!!feFR@CED
zFoeq%yne<=%4em?;Ubc^x^}y(&>Q$YDV1j;=~xybc=i~3ef;;@O|JOa<?drw6K*lE
zi+8{h*fiP5l!17@U@-I!1|cVym&T^__b4JsBf9{p&DZS!QdmJfPo!$d3UMY+{{EJ0
z2vg_kDzu0gnk-&VuJ0Ojp=Qbxid}(m(@km%DvhcB@mSh9^qMjJ^6uv69^XCk8>?6m
zqmK2l=7@Jfv))a?szWj+eRNj+6-!H3(#i{zJqwbP=#leHrU>)lkmOjA<XKS^+z*&%
z#x7zyOsatoyc*#;u(_`=M|iW{W!7uLDU;}bY|ov++^{J7v}Kcf&!aL*N!esfM!?zI
z_q0XAcv4!9*QIm{QCuB^Uc{O4dHT8dsmEX%W~;57yY>XrWe{vO?&Z`{V}JBmV}A-*
zsvoa7(KP#5#9XoKBn!LxmP-XyjatCpsxp<KH9fbq{;jyf?#cPZlY^<29dxwLwq+6{
zl!?8=D*pB{CgN^-w&pUOjkH1+=Vv36VbXYo7skqc<waw&L>Ls!7ZpC&XW}*wm8TkQ
z-0M1TV(4#`xy<#MRpG40(6PE^fMhrz?G%ZHiP#;~`_{+)IGNFwdpZHesyaFdmbv$H
zHBO0C>8uM*F<f1Sd6~l|2Io(Qwq6;yMY~^gwL@S!{oLEA7w|3qJicx@+|c_0Pi<!_
zK5cAVu1Dz3kat2ZSle(b>e=*;-}H3%WsAq~@(q_KSLMJM9CZad#@T#2qF+w|d#Ja<
z?Sh@-`*n-TwhSzE0+<&W_%3Q6vh?)(=?8lVeUZw?j;MF|<wA`$Cf=lXB{fP0>_Tjr
z`sX?2c&KuIk_+AO(8>udW<Z@xYcHa}w<C{U<`Cnfq(7tS+fP$*O=-6iPj#FQCSBrx
zaCQHBvAcQIb1<+FdEsJ#yOT@=xV`OluT(8bfV>H#I71rqX7(yjFiB_>=h?&^kSAiQ
zf>AH5HCY(!{&-L{iI9QJO^ic?rCWq9R8gc6>=}rIYIz~4>_1^?E+<1FMZp$%YN`>>
zsv2h8z1<v)(U=@(<Qr*DyZE>Xx3iixt#h99@u&E3hO3jD$WK2t#z`<iKrLK~x9(&{
z|C{et8brJ-uD;tRw=0pO8L{eHV-XPy<7g(%QktFopIGkGUW?j~A^Ri}i;iz;-y2C#
zF-oO|-pGsWHcB!<E4zeL)TO=nCPO;Zi&_(ou$23cZ=P!H$=f2DEJuF*JdtV1urkRS
z(f`pv1A3oiy-%8q&oT127#K+I75AMSBBwy!mKYuaZSlIYNsukK1f{cefl<vx0<wpm
zeiT?CJ^DTs{gR@bOd2h6+bxWq=sTfhPx!}8rXP6y6_p$piX6<ew7Arta;L5xC#a8e
zXl&Soi`<aR9AD_0-<PFm2@`*>O%@X>jLaYIx*;mudC}d-YDrbl00x6KG-bYpXH*~l
zD(ICJIhk-=B-?=(7ypKLNQld7)>2Ta{Uii6h#KPM#<Pb<ET3ov0Xg_4Wx7G1GV?Ke
zgNMnqC9?lh90Z<6P)@pSx?UuOFW+r50TJpE{zKPS$}N@Wo4Y<;*_RiBDBv~k8Rxq(
z)<My=x2hNsr>7uVFyPZj!B1tr#}H|*ZF>#T*J^@hUe8D%m0AYaV;7Ep2uDvk@K9i^
zdb4!QbX}nXDX^}8cNw6TLAgs;*Fs4tJf}R!Nhu&rf^KxVc0@|!Rr__9sJovjbxrG#
z&W06T5#1iyw;$X*RT!#(PgD208O`*@);%=QKJv_LehYJS2MAVfQ?1YQ0i!>ScuwZ1
zwit;xbs&s5l6hkjA^>(79|-MQcm1iIBV@>3PMIlY9_$jdA}bb-Q+KWCG=+To%WmA)
zs;Q8XhJswow7cZcoQEDc{2}*Y|0dxfwt^aysECqIQjyO-^ZrWh`RW;QtJ~4fB11R|
z>ePusk*30G?Z7ot>JsSzld&UMYNI-j?*yB%wA$iGgD8Bi>i*=0x%o&yDs9AYuukNr
z&!le_%aYj%q3cb5O*5*4Z0RPL8~f`k|NSqUS2WM-EV<058<vNSTfpN&{|)ezRrzxH
z?RA3S<>XssCeQsz(i}Z~A;pg(-RChIkqq4dx!22WcEJ9k#gt4JbhWPQjpb2x>&Yet
z!4Jw61eZd&u)yaO#nVXV!A1y4m!q5vx$tiEjh3l;W6zIP+WPL_O8A<f$0_6|>yRmf
zO!fyo)^t=@vIrgavMW!NJXO2R1t-Wpz5+r!uUfI-<^G~)yf%WDw?=lEGWX$=Dc2p}
zXxVj!feqqyA9(C7k?$D<o%NY-AvoHdF9LR}-;sm%Wo@;3!7KivVY(1+Vt&klJS=i`
zu!A#LgwGz{mPeIC>2{)Js;)6S2i1_a<iyN2AcflpdQ^$ck4K~dgkZHJKUi;TM-04(
zHYXnliW2w61a!=fsL#|cmT}G+Be{9h(aoZhu|T?!n;ZDXs$yUv3(8m5YM%|l@MOe;
zp$1fDav~ISB9^@TUM$D1lD7OW;7v0D($@P6=Pz(M$18fDhccV`y5Z|XmS;Q^a`*$0
zCIe}h*Y*XW3)}?Z4u?m#TGPZdp`oKu7q{~jFfu}4u!tec_ux1l0<aS&g`}lLIW#6T
zasj0ib3Z5Zo#)tei~>k0v`OT6q5|zzrTb8orC{ZyFr_SobZjEY2#(hV{>K$4S_^^%
zFP^DAo|Dfc+Y*IKLb_~UQ3NzBR9&TU<^B08T<l$IWq}`*<HSNjiFTq#M)Sg}T<Fcp
zDQgB8B>JQP|F+`N65gIOPZ0LRpAHs)ofZb^+2-Y=Eme4^N2(iZk-NG!V2c5<;gnWY
zijL#>G&6P$!mafTnlR+|&ks%SH@6$mxHlcL8*s;5#x;?8x5epw>K!z{#~J{oFffJu
zNnVHT=H$_;r7+ti6z=X%?q)QG>At)ME`(8cc*P+bg48b)DHEe4;ZTb|jopCosSA!h
zRlsHDbBS|KgE>up0ah?&glyhHrzkM85_}Fp6uuQI^)<%-HY62NV*ZOohlH^&UV|VB
z83_@x@p}r(ANdzRM9rG+h&Rdp!FStj3i((Z)F_TRS!?mu#1`Z}4e#B%L89FUxF*@k
z_SI9jfkv@G8@Zj1Y3r}*8pyx_x!`7MTs^7Hu2vzB@*8T&$<S^>(PFfPJi8TaBl?2)
zJc_7W0-(+Z-E+8OEdpd;@83qIHXg8{J*>dGKX81OsODMx@K$ps03S=#Qn1<*i80hQ
zAWlgl;8(e8u&NWybst64>)ts&G0zLE_S7b05M^>U+&DR}2Ad4bvn24K@69in*h@L4
z^08Mv&<x?7wJo-HpXYRBTv|N!r(iuOIelenVrSBy@X0@4eAmP2w?SW{u>Gw3+~|mJ
z@;@4JE)*0d)Y2-l64%SCEz=FT<3)9gL{jIPvgOHd#F|N)+j`^FE@WjPHQyr@!uW)l
zrkfaW(s7oIzoGA0^{D~;Nl!Je*xIktLJop_eEC{zY%<-HBR7)i#|p)0BSYXu7(nFB
zoD2t#)N~9X+eZQHYH)duumv(&J+;<4=^>IRrYI)-Na;gVA41mNFpwQ*u4-NLd^}-a
zYrf5Wjm<?F3QcAC&ZoFlw31zpSnLq+D#soN@nsH7_H)X{yH)_{%Q>@cO&(-O<tS--
zPhJ&8I5J7Xuwr|$X<YK|qwny}s|i-d$(~yOjgb83W0p`6Zga-0?EzI;KjK*HFM1Fs
zV<Z)Y??-~yk!w+->g+p0!A}{68f@4OCllCK<5)c?5%45YVqc_w&iT`Rj*^I>4E9zs
z;64sz6wrv}&fW*ID7RuGIjsVij()067w~dr$d0d>BNV}88dEz)z&Tx?2#-g7GK}i(
zMUJ~>?u6O4q{XCgZ3x-aypBq*%}cdQ^^0rT*P6?c*)zIHnF|XmxhX6Wr|iL3K0*vg
zMfe$?r?NKIT@|=_6Ww~;qaYjIju(I%DqLVbsD|0=>5T%=Db0f^P?k|Q_C&h!T2*)%
zXpIv`*d@NikrvaL=R_M4miHycK;v4#HkGRl=}VRI7QOG*bwD6`bTU;#qJQPpW(zmV
zknk%#EzH^)e=D07?ls=fm*)-DUg|^b)Jm83-BK3iokwK-S|?(B4u#7g`E$OE9L=8E
z`#tfe-Mcn`{%oj}bwRC9Yk%~6P?7yN1NDva9^;vw9BA-USZkOnrNW_>=(wES8@x7D
z+K#Mv_n;<$FBXOK&{<Vw3#M;ZbI7t`Xnq>)NLHQwH2siFWTl=FBc*|2n5|sIL-^K6
zm$&08tJ^>HwA*`}wdu^(*sE|ZSjS!=o5DOtb?;jukUEZO&Qngexne5kq>R-0P;Ccg
z*T+UTleyGifZtkHQ;{Qu{i9c{DU+2*C{ys8$<{h?Oj;=&!A}iWNDl3!+sMKTyd;@n
zMtuyisf^U_`th#>KW1#T8oZ83@SR!o8nh|J^-A|4N)FWqecu)idWI3CE4gWam7W?0
z7&5he1GZ#s_~VP$V~RPihgGPcCGwploWio3_GgSUjHyf1*xB2ic6cxY+F{X)4YhF0
zA0Nj1MT|veD08<E*<`5*p*R`ap*L=Zi4#YA#;ahZ`liyek02>$Q_-AsC#hsj7hq{^
z$-AqL;^~n^Rm~GiEVTR*lQ)$_P6e=NcNrM80J8=b)Ued8@bz3eW1H@Qx?HCMk1Z6W
ziW$*C`4|(Aay@^QW{YEja8k6ZM0#<j3?|~PJWh>7+DWpKQkKtwD)-vz6UM1#PZe5p
zwi+(eclfKbIPKXYO3|F}e1xiG+={3*V{T(aVtbR(h}fo33*2N;iLgwmYo)b|a`rX9
z0K5}%zQnNBrA{&SScit69pcB2HmNJsA}NJ2N1*43AZw#6HBiWX1bjomJsc)l81`fJ
zbX4DtFuI(U;;V~})_6`Rnh14GLy{osXOn?>-k!CfcsC;_dB|5AJ>@52rtbO^X>dC&
zM|zh~;n54fgj_L1O~ES=!mF&Ku(~mb0YBYqxw%Y{$fc`Sl&nRqkamwIB5gK<%E7*N
zH4*U%gJq$|?`5@Y=0MzCt<)2RSBbZ$(>Zk<ll$u^OxCW`bUeP3^uC33)%|-IKwb9)
zU&Z)6%vm#bJRXyEJickQ$$RU%ws`dCjg=sXR+~1S)}bA+vzi|O{@?S<K^OA=nN0ut
z3eeyVDtw&)b_VyW9qi2SPhHbW2GIGe>P(Q_=q>+l%5)H(!LeD*C!h;FvNZ6K)lA@K
zo6;)|IdFX*q0?CIcXIH~<gKeeof{f8;h2(OoGu^}*3DIAdW@QFGGghZtlI}ZXWm~h
zr#GMS^qx$U6r&J}v(ME@zl*b`(Dw<GCc=fTF9c%gTVhYZh(*)4GsGuoKhGxRU_hJh
z{2ZNJVJO^E_PJ!49db^_;;=~CdAyRm`Q%7H_JvLnA!{&x9huKvblpUH;YO+bMms2s
z?@Og9_d5<+Xky4p6@v{&qtj7fO15NIP{hi5XUGNuj;o8toarFv^P2Rh+*L{$e;N%G
ziDHw80!wGAW?M*u54$p=xUJphy9uu!d?FMD=S3+UN#1{6Yay=mAU;bYSkugk6#A%!
z^fs%Vm>Md<?aH~vVxa^#sexzPHkT++@l0mJI1bY^2Gcm|*O=e+_=WBYFlfRM*;U-t
zEC>Nj9=(NwOlv25<SRw!qBEObYySjpufJFS8cEXa6$!^f5o69`F^a<N3VgEu(9no(
z_9`d&C~Bge=T)G#P^?S9h#!bDB{_&ZqByEtFS;C9Skwwpq|k!8jLm>yQx7(Wa5p-^
zF_ZZId%=e<A;QG8^Mm0hfDFIk0luKMfe`9U!kBBC2T%TcQV(*iBB|t3V*=CsO?zqO
zJ-;kTr&Y(^O*ZF`hn^?Js$Ag*8!Ll$$Em|c#K{=uyIX>6EE0ZkXxee=qz4AogUmmg
z9_m)UEsZ4>@Hb?%s#0#{b4bUAG7$Xe`m5^*YC5j-Vq}Qo9|Df^1rA~HNAvxcu)3QD
zgbo2+vwq+7O~;`{gb(y`1({Sc7P1NgUbtg_(d3()HytUTC%-UAgz5W9*Jg84GU_&#
z;ud#qRG<@KLgEa1<FQ+Ia^htgT9on_*#kd%cfgyw7qa_eIhhJ)A16-@_k)V~;ko$+
z;fHRTAV|QA7=e*>_pj@eRRW3!4$U*LosbPCFc4!L_Ky(~%MCJ%?I*D}tdw$=)fuKt
z(Tpj4y}OgY#_}0^5$53hiSS~yjrNbm;H=M<T<eBbz@kKMM(-ZHqU?@ues#*ruApap
z9wmS3ExfxQDJe3%Rco*YicUY*ZcBjSV~|+;MUNr)j{(}gQE%GA>YH^u?H4{9y(nNS
zFGqBZ({D9K{AAPrxivdLY%@<9S)I$d0jJRL`rrC!^$Q5Zv}-U0`tphUR((`eVX2h^
zma#sL*dR3Jvmsq3$jlYjRgeKS*U-MP<Xx8)x;<Cd!DYOo`Y8b(MsqWA`Gc$(h+{%f
zahNzLsi73aQN7goI6rcdbo10MdoQ#pYMF0M*a+$Y;b#kMJA7s$rc4<zI&s{&B{Xfh
z<6wwOySyPZHHE^q6RlLZ%lff+RB*X!qnF|pv%*XL5^@~*pdo;w7geh9&cp1lmJf{w
zS30z4Ay*&#yu++pDIxxMKY&p~QjDo4ga_Y!5EJ4spwpa=K{e@#TqEqw;KZ8>_;1a6
z7m{j3oEUE@inBxB8XuhSQgvlJ$?}}P^*Um;){ut+%l9eUF3b<#-;k1CK6qb}Hx4&#
zj9hFMQo|CXEY(-Qd-eV~*m^t)%;Nd9J!e~pn>QmexkDGSC%B;-*A@shDG?Hi#gV0o
zYe}5SFoHoxSh<CLbfqh&fLYtX7T)1k>|I0llKDm*%sn-i*o}r;$L_l{IpzvC=7S20
z0&b+2EOJP=yP}wd<I2di(rT<e+p*^Tvn1?_fYp46l1zqt|7~9vs@#-AU9Y(h!!IE-
z3!fz4cS<AcAvBDHy%9jquN6!Tvt3^XFsi~>9}g31yr7>|3YjfKxYUtk@|H`^H`x<k
zSd}A&-oN;|M%<3HY#n5pSs_ipW)L)Gyjda~5(EA5i*YC8vm=uoW(pzRce#g%gciu`
zn~9N1V`+VfHAqpZMTUiY6LqC7ItzjAs^^$K>C6tRUiCGKS}6voCWcoc)4IBOTLM)!
z1ctNM4<)t@w|fC@@APhZv}BDPQ6er9JI3fyj6g0*ZdEJ2or9Ot0i}!`yJM&mprJcy
z(<%6{efp2y6=bxSz2YV@QAka7D&<wK+NH7Nm&9`T)9Nfqc1Izt#-+}lQgoj0MT;SN
zuZ={V^Pd3NGU&X8Nzc6s=7Vn%6VK9N)w>o|8t3?%kaWAGDcOb^VK?n}Z^$c%CGb3k
zaf+Zx7+p4Jcp({7iA3H?k<#=QWG>zuepl{12Ptw2d_g*V&k6VIm}5`%&l4h8`9hIY
zQk*5Wf%tV<&U0SG58|<Gc!F?{>ami;v4y$3pwG`)5eu*NlWwAJR2#7!6ZACF@)(?s
zhe=6j+S5@dM94k8-jjX|^bxU>K?j)nX(0guaDEj!j?<Vr13fDG@Lrc7`%f3K+`>l@
zoqfF;Jud-eqrpMnHUqUkl2mcfjH9cE?AVx}@co*o5;U#ow>V1vm>Xmp8cMgOzMS|7
z9X18<Elt0>#veD6N7ja&m9Dr|4j&copN@%lo97d_ynTgzU7m?oIC<YXQk&^F`~9yb
z)$=A5QFIYzbhHZhv>=DYxU-aUOE_GagNPQ9)%d&_=a=XoxJj^e;hZB=8{d$%!E)OX
zq|TS25cXp9T(|PlaS2uY^6-T@H#j<R0lBxHr%wFUsC`CA&-(4dzru}<8~XTP>@RL#
zU7sEaPS(6>{p#wUK@BVLd);yWRv*3&F|rffUdD2`3NP>AZ~xV<x_}mD%dFaD@|2?@
zSJ6w;E?i}0MBjoOV0^k4DjR+8khHiGAD?qXwUh3>M^Ay?DCr2X#H#`DT_PJ8VU5_(
zIVClu!U{l_x<%)kBjUwBSbENUVT@SZ^g%2tGNatPiwxwA+|Y_toAEH_e!ze3X{#dG
zvd)`b-sgjwY+TKb+ktGiLnRre4u%wx+YXCsEW1@ALvyRM=CgK1|DUa@xrAt%>I9Qw
zYdwH<(f2wT#-pZu|Ee)Wn%+j6h0*U%uL`Y5N>8!2l_;UkfO6Y)Hxi$C$jmw}e<*%p
z&}BW7NW=&WM=k$xHdycqR-5Z*DSS<F_;9<9jrh5Md8gd07Jr)G`U1(=;gcu5qnjBY
zX7e(WdpeCfU&E5E=|ipAd=}@<saa7tz@6>bfWLU(Ev|*q&TXYRI~VGCF@Gk_i24gc
zX;Mbd8Z$MA`pnZqed4R{aE4!dz2dbtO4Rn->bE<ua>Y+sQcT$i<NIxUv}P}vG}iu6
zMPK4&=MGUKP1stK&mq1qPjQYL&<)$OFE?0>`JzrCt4**jp=Zh_IZ#I@^UAL^17~q-
zn7S&BTKVY$m_NitFBS3S8xBglGJZmIv-WNoaA$>Cwb8vJOge%7I?{$M?H@Yju>?&g
zKUX_iO*t|-Z|96-&(Zc(_<nkesnJD=jD-y4jng}Qh1quvIE4OKX-1Eu9IO_$Kb}wd
zN!gu^%aN#T!#^`KJDsmJe}Tvm;{~)>825ZGKZ!bj=`&ZU+24ny3wI@>Xu<&#gECt1
zUP2a?4!Yts55bDtPpCzfv{cxFZ{AR1X~7?Rmym(u?%et+w7<iyHeGF6k<RF6MeK5&
zS=)x&1!aB;70T$>fi4KAAzxH;cQ?<DU%gC?y>(2Ru4%d}t1-d<SHcQVNF7gBrfLkg
z?Z1W;gFGLMFoCA}9Av}|f%Cf)HAb~Rsxo<26#rFByp7~j-AND2k8F<J;;XF`zCH7(
zUJ5y;l@FlcRG4>>V#`m%O>bh*){b#qc}@?HGCm(rP^-h4H7IU4VEhzwG$HqzGQ$01
zo_Ou%G5f6g9EwqRF#urQx2UQKVp2R9?pT9K8H(gSRtfF;MK-Vn)0V@g_b|!IQZHow
z&6$z9fA;>|SOGG{kBs@wCWy8j*LJ^EcZR}VoB48?JC9^FiF4KR1w|~Is9Il~OsO$1
z$QM5BoqoNO%qYpT1H3ln!X166!!d@bYF3ZxAAYyOW3^=m`j&vNamG2xw!$erQIdUs
z0j@n|kk%kkQZ>!L9G-j-rZe_{X^I!7+lfH6r>tzl|1)hR2z285;uq6>fY#v69Oxig
zigR1RIw4xBsmT9#ng6QDO9r|H^*>Gs|EXo{5kQm#*q<rRPQlxY{sy9TcZQN~cReAl
zh638=wcuH2#U`ve-qUI^?)C$w`ZvE2OsDVQ!N01=X96k_L5S;9E=z$7y~OwS&C^vQ
zX=XtZ5>rBZ@8N&7NBon5KqyrG_P_9`P80qYp9jouqFMR~zS?jDxc>pC+YPWYO?sp=
zdrlBCRYLte{~PE+xj&QtFc4_S1QquD2PI|ysk=Z8y5VY3Sy76Ft3CB`$}o}<MPy?c
z()ipO-$=RKK(`>&{=(4oMfxaZZP*9)NmRUSQ@Qf;$Ls1EtWihc1=Y!XU_5C*L3%ph
zi4IG~R+82|KC76(l*4JoEqtj&OrGRZv~|Uo6nOHL(Ig0r6d?{|OPN<vUFRK<H=n{e
z2DoE#HFL}8h3Sz;2Lmz+TJ)v+zP;HqFH1UMV78s68@fG6I1bs@$(++N3E)duSR(p*
z72YwDTzyh9{m_C4V0g~zL^#9SY9N1t)hX}(dC<R{QIw%D;upFI|3)IRiA$)qc^b<^
zB2EG+;(<H@^;*`P*k~eDT!{4xjd6|QL;y8%4TDWA#s--zbEQ%bv}HQ%Pd3RMoSfi?
zRdlx%G`F><yVVEB_d=cSgm+iy>YT;Hc@1gGL$W)Ktvf_P02%^gy1NZ5eOfn1SocQ{
ze_*gWD6#Zdh0V_nR}^m+0b78<2Y1ceEW|+rL+ee`W%X`;LL^Ew9CyRB3og-(gVs7{
zh;-g(hsgQPN0Q0?#-4J4M?hhbo#_bsn!0CD^!Xw9oFP0}MIq2E)4l@r%O)EO?+zYE
z!eYYutap<uPy^X$-Qg11TT-9zO<SiXg^Oz5sX{(y^MECF3vG{v7F%5LwRdUxK3ZGr
zJ8ny4D&G0>O4agnv0D)1^2+&=cGVKId%|K6_c%vI;L17idjzuWU>ZbsRmvwMk=RA@
z?ZR#m)EI;N<w5bQ%OrErOzv-4Wfzv&R6zvN{x_!PK-E}awZM>dt2ncPgYeZsV8vc^
z%JQ>{iN(#@wEO+EC;aoTt4IA;mK1fht7#L+b(TUbEfz!`k<guAj)QDEZO=PbTVog)
zQ&Ce5rWk(Z67x9jH152P`g0{0Pn#zT8$)QS0m9S;;SAr^7Kxcz#0jV449vAj#h4lx
zQx@w7fT?=z#QH#r#lYQ^XMJf4C?w>D3)pgKSxfA6NBBC0>LRiId4I&01Ki#_-v@VJ
z->xgRmvMWfPQw`E#jo0deRmK5+c#@<DS%+TMa>C`yLriL-SGPjBk$w>mlpG(<YAkU
z(K!QfXtz%<dEIx7M^9_?=}ojTZ1)3OrCr1Zz=D5Sb#7BM-_cFh$51A&EF&X{>OGj0
z88&0qi`aVirK(__>fJ9)X+|K34E`>i`JiR2&wICVfF$=hAH({mI#U|7EW<oR+p5fE
zq_CEA&Xj-%2c=$2&#A{t!zUMo!IP1b)U}nc$d5kX+-Pf?cLzmUaCD2l5_Q7XBN*Cd
z0e|C-VFp1A%#aC%(?gU;bd7c`e)7PG8|anc^qal6E0Q*9w;oI<e930y&#4i=eRdJv
zZ=Vg;s#K>`mu5<1D1-IJAvRLqC#GbS5#r{Pd1h&9pZ0Aa+pQn1m$+1Mjf4z7)e7df
zl>l%k5a6&Oq7i?}sWAh;1(cMv8QhRc$_U_m(UitN5&K--;3v$Ea#3U^&Hqg}PPr3t
ze-jSj>|cZ<VWbx&)FOkXUU!waAS^c#wg2uJT72;A6z4~4c6gSonDlz3uR*t_0V0P;
zjZ)`XKLSO9MDpN)tb$@_;HgJ|=d$rEv*MX;1dww9>Hyn7|0tY6f6IOFMM}qj;5Xs4
z4!gpA@<xTV-e<xdAa+8&JS`dXT;gZyYXT7tav#`p@&7mByioZ-^}7803vim*p+1U|
z<@F4!aNTuUPfn&8_EfzMwE~t#@mbu<3rp=%*maOA?e1M&cve79Jtfk}xg=?z(7;)^
z-QP5OFoT-f66OE2qS#Las8y=c+{`=8s1_Vh^e~m15xxKL)_S}qyv$?515Efg+*~RD
z1vmejZCW?O2rmSYKx`wsz51JNfPV)!x9GJ=s`qLP(;jV-wCQsga;pTH;HFQow$78T
zvZ$uUtcuZ`Rl7s+voxAm-*x#DtoQvJZ5#Z;l&KB0<?7HnU+jc^t6=0*QABGB9&<73
z&>q-*j3;x;nl#E(qJ3O_!Z;<!_mgLH+vwW??~rfe3VryOy_A2O`J7Z`T)0kDm@vDN
zqWU&2OJ&=y4&IX?VnzXCy0to<q#n8|N{*jJMWgcu6=bQ>bHq-HR_d~X`C{{B#KwgL
z6Z27P@=MH+l#L?4kwWn2OF5R)Yj%PQ&?VQf+CzXTYQW_5tTc`0tm6(h;@#&0x%b7|
zZgePKe_8p#vo79hm30xwXB%A6k7A_sP0X1~nDQoN%E!9>hvBYweOB`UOsHX9Z?t0)
z)Ls&2PyN(!aSpaa%jyxkiQJ)!iuW%vAmN&#)M!p>WUS=Rz#~L+#|!jEw%v6h1H=8L
z@g!1$P9X5VzE=Jk)0Ux}0Wyo1q>nhw5WXSmS{y4)(<dXnaSH{9F|QNG^Ur%{)u2>2
z)M!Sh+Kny-8G$fS9mqUnSCU<wJjH|84m$y9JF)cr{g~&tEq+J`TV&M$xB;tc5Mw-A
zB--%#r|~_VTM}wJ>6>wa-68lf@m?>Fr!9I4;5Dl6$Lquk!aS4O7hnm=)#?5EE~HF9
z&OXFfrO8o!+^OdELn!D=&KMJ%%c}f=2a2e9)h#S)x~bcI0|UtV1>-|)w0?S>Xxy$W
z`tCz%MwgNm840ZB3WZUa#x#2caK0ZnGA9!kDM832LuOtMB`vKpN&<I8tVppeBRPHw
zS>=`Pw1uBFdB!)c-UGBdxN8&N`xw)QP`<fWT8gdp{%B;sG5pFior<%vCxAVNBVOhY
zjyXp9vz3^F@amr`9^-0vE0B6A(_E<Cgl_<YJ7fN<CRM1NHp~FArg`9@=w&XgT2#t+
z_N7qSs5IOCi&+sgX7L@V)EQ2@haA>_NO&O9^fVg1I((N+qFEZN{43NcR-aH})dWqm
zO$6qr%JG6O_rZCu!T#eTi-7k?@gJUyM%KP_LTB<`l#LSnsvHuAcsa5kiZ-s^zhAcQ
z$~c(H)dzOtTk<lPPQ52r+|BmTNbE%JPHU~yb*a~T4Sz8Ah<6~#OR!I5>zf5uwB7<I
z#v+$6OfHBIi?TB=B0R*KL#Xku{5cl@-GH}>P~L53L-xH#bt6h-K*eXSXE!ld_Jv;t
z5$rxYxz;QUho9yS_fs;MaQWcziwhX75tlf*ERPNuycsR~IKR-v>JclkOfU5gcsCb1
zCCZp5_C|IM(mekq(HpXUOLTzJjZDWBIo!a?wx#Kw-7xO!C>Fvegj3KyWI@~SzLZ@H
z2JA7oD;HWfYbHtA4t@&?Bd=x$V<sUftIgXeRd;lR#1PGlj$1}x&h65%T$chZ2oZiT
z_}(2Z(I~0`T~1qK_in}3LPh(B0)+4=0x$O}K=ghBhsI)o*`+MGlPv~lahJo!iQMq3
zwSnkK7K9G)0?Bj70XzczZedq95ySL0NKsD{I(_tK=1;I1V;F>q(CDAZmItAO!X>@4
z$#k%a;RVSKmCW{<-uN=*U#SPMEl4gu#^<g=GurrDR<~(wVz_tX{==Eu{g*QbGy2P!
z1OG;vcb`V^ae$=xFV>|2am;}=w4l#c%l}m7*lALrd^GSsjrqJo4=!iMyToAHU$TiJ
z(4k(>TCjE(OCfj>T;rONd))iwP=@wz83dNh5mgkH^%)?x(Z|8u01K*2x&h6d8oV2g
z7x>Es4TtFm4+j3Lul1?;y@gdXZs<b2i!Z25vw`7tM21%VYB)@@ga2~4WX)()R+kiA
z#b#8t@{!2!Wbx?Fv?WgtqcUxJBzj$qe$cm^*Qg8u>x*#jq6!Sw7Z1rlW&TtIKqZ$H
zLHB6?M^W1NKgH@)F_~s>_>6f+2!H(4gTzP4fI?%ie4CS11BLc;!J3LauO15f#;lLM
zrCSB8edF!>EF$kQ*uhIV(erWeuMgHs$h~T$y0S@J$u4NC^pxfr`@>cs;Q0JUt^7U6
zC4vEe=@k%KIER6+n$rJKG&mr_nAJi0O({owxa*!rI~&?`P_9|e*MHlXFCZ;*MESSp
z`AhaFzG<zj{2O!#;(yQM^9TS*pvU-Y7G^9y>j2(37`x+cl%#9$hli!2rfbR+$~`b%
zz#~N?b4tR|d16x(KNI5WxTMbMhmJE_SBmU>4jnDl18Q4rN=WS}SssjRiAdDN@J`mo
zw9_7=brHT`1hQarQ-v{8vLm-3yp|E{hQN2$=eVy63DD5UjGLrqpF*ues@vh)1URTM
zoD)w28SyG%(~GKf>br(JKDW@U6{%KJ0J$D+Iu0rC?v)CugMLjgzhO5VtS_=3IOEc~
zQukn8Wb7~(M5c7DLxn3Mad63WmSjbuvH-0B18~&F|3M`t690ips;}37Q^|7cf2I=P
z-($)DqLRpppv1JJ|C34p<o`e=7rp<PN`OCD!X)uOu;kxTiAmi5q!Lgpn~+nvN6>{q
zxyuXGg)g_cH<#bL*hmagTNu2DTh%XZ*W~b8AR`Vl+DLAVo%GSNFzKCM#d0lXMfu_D
zW|YDV)PtIO*={07s3`byERq5~xvS&;{o4T$Fmn>0_xwl-L;zjlFLEQ56Rl-<az^Su
z4Ddq`6t2@CNR(!4ED6to4c&%9cm3(bd2OjUk8vBZo&Ce*S>j>Iu$SRv01Y7b<KX_+
z*ch^bObR0vq%6J9qzhetGU=borB&QaN`TwcVR9iFauLu<O5$){fXn9<(aZIrOY!|d
zIrj!licGgCuBGnTU7_7xyY9Dk;`H~vHxxW01Haux7!$g%p(Rf7_=X93&a=A4aZOIy
zqJ6AxJ{FeA7ek7slFR6U*3Xr8=DZCE-?B8$I9sBKsx<t@2Fpfd04oy;S;N#$VC1Gl
zF*4rG@M6O%4#B2H%T<OPWog=DcOG*KI08>_d0eF$)4Y9f<64azN!!R`H4Gmruk5lC
z-K%^X$0NW-2eW###8EUf0v;tYN_lg=`Qi{8Y`now8{)cb)o8`VmjwO5wf<$u$vX<M
zEv<ff!_Cg?X-Y|<zany1WyJIWkZ%`<oO!bP$Ve}DS^Hfinoy|x&GT;UdOj$I%#fik
zX$*=XGwm+GNznN|JrJC1_G;#;J^D?OZ&|~KdTDoAAveIp;j>$RaJ!@<8*Pc>B=DYY
za%gfOq@ews=M9}5$+~g>0kSy;CYC%uJEAy6lz9bw`uAeZJ_)g<HLU_zy&Zn(C&YIh
z($=F(e(895e3mwB1N+LbuQk@W6^|L_x1Dci4(8mKYc{jG&x$J{--Dl)mKtY=?P3k7
zDF$|wmI#;V8I?K=d-LjM6=CmzH_cC9S?XJAY?jGrUCCedVn)%!i#qu<z2Qg}XN4sd
zhijxOKlB|qvJEiMMotF^8Eg|+7^{Ruja6$$Lnsn|+Wb!V9(rf71Sc)W$D{Cm4T0jx
zAa;814!#Kg@PXDYk-XaCptde3GnZfj;Q<A#ZEb};+)EIP|6jGvZ>!_;$LcgBfvk@B
z-&V(}oI?D+TOA;{>9^KV_^ovw6aCIVBtnwC&n4>5<_Mb>9BwJ%W8XJ2D)k(yE(2c!
z_ff();J27eRFq7W9*2nxBFik?vxt~_qrV<7KK+Is5}`P?6HaqeHykc%qlJ-fd>C>K
z?2|m1--i(uu6IF(1w1ZEoGQ3d+4J=$$AWot7NyuhKnS=E_Lke#scSQZ#*%QY(4Lre
zP(NG8)kM$4)dXT;AHvU&=Avlfm+w03F$U&nT#FN!itkjL^VJH`Y5jltcHjVsG1q#C
z_;;j5wJQ-FDl}_bu*&&m&=ATn7;U_Qhu}v{9le|vo$~i@7QPBtW`MVubDms92v6qc
ziIOh7026&vTXF0dMf9?Aqgro|BK&{BS~GlzyVa>wfU~~qiMtIl?ZEo+rjeqF(k>>N
z=<>6oMPYQB!AKHixq3ZQ@{||V$~cVOhBXw%H<k77ObZI%=dHlEhG=9}#Nj4V?5kiU
z$R8~f9QmjI!k@CR|As%_!2iS_pCe@s^nZgt-ckRGKkxScf8mcyBM5&k>-`8qwHQpl
zY`?P|twj|IYjMaB?&M6i<Gv6P0idk+(?Gdo@$8ZhZyuoUs_gmgqsq`<72UE~yrkku
zVw0A!RBYkdIA*DC=#892d6rq&kA?n`N2UR!zTEnZMj|vih^T1x`Jwy?Bj1l2%r1+G
zXWuLovK8NYi$dh?D||PxZ>!vl6a71Z+)1nd7Xbm3Gl&!aN<a_{8SSz5?@04!5S@@C
zv1?ZpX6UwjVYN|IIS5$T6vnZa8T$%^EDdEZ!CB;6z<2<h#LXro>`@Xt@NmG{-dhbp
zHWYrxf9tIS56V^3+;hJqZXEAb&^=QZb8OWb{_EY)z}oB9`590PK-9y}0*f~gI(U$k
zLB8bM2v^{I|BNDkO3M(hiMUsrG<uE`gRVdS?@8nk3M_i@$c-@!1E<2|mg&>Ne0XhD
z%DuO(nVcmZGWj^uXa56$q%|=mBvN<B1xv<eRogyH71QGHgObR=KcmQhC6U3Qe<zVK
zRY~f0MQ=Hyd#~T6(8eJ33Pv(ig5g8+#?Z@dR<9~1NRyIxeqH`myv!`qKQ~NqZ%~Am
zW+NrSSV2vsZbUsIzmjcV3wgwdc4MMBabSm*pu5^^X7H}$t3(YKg{(_|p_!X7)t4TH
ze&Bo<k5eRZVwqebi83$Ytb@0!q@RhcSn{?U#cv<I+0juQ%Rm7u#gq3X`cDG6tf`F+
zs<TEcbLRdrWB+3ONzSp!c$-K4>Z^6b#^{y##CLv&!IcSFEEj<TYu?(+keEi|uP%%A
zWtHf+J5_5b2Bhmy#rbL3+YBtis;iH{O?B@5+Z1jnPphKC7GnGmEF+k~*DU#a{v;y-
z>YNFWG0pKOUiD?@SCzSs8P+=_>Bp9?j6oy;P)ugwl|9a@AC?|8;n(jLiB3|7u#=&8
zCY_g}KmJqC5GIH1PYtoh%kf%cdWb0tDPAl#jS`;rFRnW~v{?6&18yPAzrwKpB{dw{
zZQz(By+YnVXS+_SjD#VB>;lFwDoSVu#rKz=8BU=E`I*n6VjK${wtxK0jwZ;@L<iR*
zr+)t9XQp+U>AK$?rv2q-K6?D|GpCGy`x&MEC=l)t{lT3A;CEQ~svVy|x>s1h^$+iu
zxSG&${eyRGui#jvcT|R;gSOSZ707f3dO^GsdRecS3NDDH@KBaJZ%L-$DQRcn|B-d`
zY3=3sHjK$IQj$OOz#;Rd80CU=$|{E*ryZJ*wvL*I9Py(N!5lXyk4DjtwfANyL_|XX
zN1l@b5)Z>4-qHUD?`&B7H{SWT3E|(obI|f{c;}q+zj()jColu`0lEQ_n)0P|MuZAt
zK1QXs!=c|O7o|rmZ~T1r6u93H$@H4gETDUty|^+>YMxJxoL>{U$tj|ny<%W9tdh+^
ziAB3jicaSsr9d1A5w_oqPFG9(mqX_;BF?Hd|Ltxf&T~<ifsi>Jq(9S6yFe%0-CRq~
zh3pL;kBB(!#AR_~(HbPhWtSC&ewX=O5%@DV6BTrigntyx`BSW_?Pqj)<1OWpxrsdw
zyvn42L%Gk82Of(?=L$1dmhe}qiN$gQT;ZQEE-nrI;#K(BQKJifA;*>tr)i&;wvaq(
zx6;fEsfRag=_1FF9n5-AD)bS{@4AB`IH%{%LE6R_$)S0g5ok{<2L5;(bok)z2vp<{
z@EFX$hw8VV3<OBu{T}Ky;e$VUzyx=Di!Xl!k7>Md|MSM}hPSvDNZau75Tc$`Lj67c
z8|XT@KXXAPy~RO8CaA6_86heJF(V;r&Y!Z2)S&aLMZj-w^JMqi+r%0EH*fQn>mS~x
zyymyJxdcVq{^@P-k^Z4=)P8FlFuUK{#x(R5zNmsb%8vUQ+QL73Zp4W;?!0oz&2XJq
z5gN+3{2*(4sNzY$I~aw+jiS*>D*oCS*oXY7-t@i3kv;stRe7B!;<_5o<Xz;V@jYK#
zEHBE+&}Hh-aeon080V+fOq50}#d_WZ1Ft!him}CS6Ns9!aK7T5-xAa~@T6NWYZXh~
z<b4V?DPNX4d`B6iQl;I^rrF(4^~(RPvbp;WM?htK+kd7b5FF{;{4Zzozu@Q)1V`2X
zHykDY2RH&qCI|jA9sT8Or2lU?8glxhY*PL=9D%l5NGEtTl3PD=gi~ZaN$NG0`J(If
zFddzgypJu((8p{k1ypZ$5@{InlBB=SO$eJFqCU3i8W?hi0x$d|JK<{r<EW!4>%xwm
zxof_$)o+?ZLd*s>d}H1zQP;fy{;*pzlH0inn`E>+g)zBG8gDDt*9phT_P!2}&?!%7
zLPdFXF~ZE@36cEUekY&hD?HZ9!qZ!;qq_4ii}l{CGA&N=#ek_k4U&uL#C<mQ#f{b!
zA6QuRW^oFwtw`*_<BR(WC->7QZ<Pu}Gi3elNrOxj7Eh$2OKSIo(>nImq<!N6dOIH!
z$gg0nLXukg);h!-_1pb+6j!!nm*Wl&ChXQ+u9;G6UsB+LP6Dha7Ob3(8%Rf)uyxIe
zD0<b&wXZBhw}F$nrc{5Qz^tw-3$^;gw-3U%w@6oH55l7z1Z}L1ZiPdL2lW1{RnO;a
z^?i7YcrJPlt#BTBQ?su0&Z4?Fc~PErWme~W$Dy}+inum%SEEfgw$&rnrtFSa)~#*h
zPR`+V2^=S+FKnnbkHJ}1+e8Z@_4Ofl4*o5*5UW4zI)EeJd9seT8ZXl3_mL;=S;K`c
zayP9|joRf%YF<XHU?r0Vh#{38^_3#3sWX<WdF;>Ji|j5Q++SKszXSfRUf!89?Jqg(
zmE>rsm#195HB7YqeA5<3BWvWZd~P3<(|8Y4ABRbgKCP;|ix_3yPA8*m@OE&w{G!%*
z4q4?$SOM^d@?wZtlh($Xv*WXjRv_MU77U=VdDp=`5XEN`ynANY4-(|pq88+TiW{63
z<X`^ilgO{Af%vfTBi?I&d>gmHxcwpFN9mrz%{#}`dOxGBZ%EiluzBChf4*^&KB7sR
zq=`_)7mxn)A53lF<avZA0wdF5^6?11)~~Kp4KN$?J4mTYk831myRmwAxpc<8PFeKj
zglZ+&f?te?SE6Uc?47Mh2|it_Ex$KasK6Ap-7-u}j>)iBuNn5|W>>L>sfVET&nuYL
z;mM<BF0G(-J9(akBC&K+zZdRwy0bW?L{2n12<Iib=#In2fLf39%=*fV5Y<U7Hgcu*
zK;N$oXbw2}fP+?fQ;gbd6?|UVItMe!O0)2qh7R}9t4)j44_pkOg*$pl%8^dBE8(`#
zMX;%Kb`MsVxf1WAzCblX<}z+yWIIWSq*!p^S80plvpPzY8cTwrOz~^`TsvX^d=gC!
z4&*qR$uf$$ze3?Or|cz5djK$M8cEI`<&dGx8`HKukh>(H%hn3Ne2E^wO%AQ1Nf6dx
za9ln$!@K;gmXIgH?yp5XYPFcS_0|Xmjw^_E5*N4mivhg9a4m$!dI%cV&BIsYLVXIP
z7g*`PTX9Z5hHpzL$V|61U@yM$C<`PTKkT@wfo#X4c|XScQ1`S1Y%gptfnyC%a!2kp
z>}SBevRNMfK$Dnp!&q-e5D+v%ApU}^?$^Ia_2;D=4Dr#ptzW-|2Y+xGlD1JBT5@kw
zu^Wf8c!z-ij9R#N5A^RrjT$`coTBXqqFQ(as@Xkr!H##&UD8hj_?LOWOUx{C?oF}i
z<f3c*On4=5G6YTR^CR%Ha-}&@{KgO0S~^8}XU$XjU-Xjfsu7t(@d@?_WNnjJq`E%H
zXSn{=buL^9NN};)4|2xai}=qiX~Ct>G*_E<6e(`y!~3D6#bTf9zf+k#gb$0X;3EuC
zxJ;C#PhDm4GF@ua>`IuMlz$6-e=;11PFI2XppdExOu?jN=N+`*6BnSnb9$Oule??*
zw@WgR){9fGuAM|w@LOCz=NCJ?&k5VtQu0p5j64h}#BzL^>UdGS?(fuBicwfKbM)<D
zK~os__b$O7YOUGsiazmI%<z&dj>vUTa*-wXN%_b+<<Ip_xZ?OpK4WBi5b@R#(J|B?
zwV(P9$Pq_V_;qD3UTs}hVo~IjOTw$#+>4>~Qqn9JoLL{H3^T=#l^%!`aA86e0{<3a
z_a5TC=SRNx1b0A2*lX9TPS|UkFa6HzMpll+JpkHdrp<l&k(%=G>&M_;AOq=%;p+Lw
z=S&xYmEq2BC&?!Z*C2YC!2pJbZ8&@QdwuLjKqv^(_Xo>)SOA7L_!7L%URSX6ZpVik
zZ^-rV4-QzWLap%W2<Dkw;{k!S*%fTO?Z674wlsUk)2BW=R;0IM%SzG3-?c=4VuSQ-
zsr_9)fXm{%y_2Bl&3)F3IP)blaW{>n-L!BT=P!24%p;1Qagxf93GtwPzYegO<2P0v
zfp5y%VCI%jMp33#inw%Bq2~^f)Lx$;`FGobGO-WHM%|elZNfhs#y1(04q$9A!rS;@
z1&`*I;7crgurrCtx`h_S(cWJv<!ARzF53?O9{V9YI8H7HT)b01Dv@O>ap1-y_`}8G
zZjenTA8iL)XxyjOQ(w5X6x3z+RH&K+E}%*&bc91HM^JV`D<w<B@X@rfaS>48u&;W3
zNEj7eZGOZ(sw*acF?<(-^2pxir+7&9iFrJz+#)56@%jg+sOF9GjvnmHVf{Adb(^$I
zFexoOHOrZ!&;-#1mitT}%M!(|OW0gS=E^800vg#Ocr4zB>pUycNJeOcgFJckI6!kQ
zcFJh|<E>ju@nzKI1=~r|K?hYM4f`*)?k}y^xXTyM8)<K%lAu!C!bT7{tBD;8XAlCv
zKgpgCNomxvw@F98K@y-tjZQYpVba5W^&eeV`#__;GkyPwrn4=>=)C%un{_#81-?y9
z6)S>uva<-CU(wz!)=~rBOoC}k=>b5%TB1TQ1djn(;;j7p;XG%>VW)A$GAn*aR`TV~
z5`qyo6oZZ*r7deEcupy3$C7*SzvkMYKoOkMjN)aisbk0a#zbuwO4|@E9avb~J?&H7
zWec4acT~;b+C19Oi-}}!tgK0Vl&!dqLvH_);s2$uRnD>gWP8~b7i(pB+Z@Q<er?z@
zqeAP;nd+7fNhV*?4qUr;kZYY9+_R)Pm0bwxyWha%)nt^th%%3jiTcWL+@MRQNey=R
z96D?p7{)>SF58AKRQ`I|fQzFE>sL`D+^(IVwQE!;ye<?%)5^~qO(RO8Tuphuk<Ep=
zLp6K`wzN!B0eqYXFY(h~G2?(`wfeMjLy*^*p*i10s<uK{cp~>N#Wm_Qrr4dF&cLM$
znX$31>b#<9Oo@TKGmme$SXSTHH^kn3aE$Xr<Y$?O>%4bw*FhvKqivz1-9^_w)=p@W
z?$Ij`+-`d<wtI&O>qxaGieB!PMUs$VqyM!HeND~;mf-u$Qj$4ax2QHCs-C`m;LHR_
zU|}e-mhX>v3wJ&T4>kmZ4Lw&GzKb|_8f*A2?}>|%sBe1~ndc>2`o^@VVG+_C<p3w`
zI}wjA0?wwsHS|p`@iy+(<&w5lCe=si$(bC!kLdPV29ih&bBXUKYo#SBTjk<3q#Kb(
zS*_Q3dTpidbLk9RZMS=YGTRpv<b|bTuKEBr^eA;w4F`dT{GO*G7Kr1Qv07)MQFrCE
zhLzH8T#@~8S0s8fZSY2@a%iy{mLbv?dtWb^nqgPJj}D>!TBxM{^zlqAJ=Bi<pcQlx
zI*8nFD$q03bO$$;R?p`GF!QhURDO&pxh!Q?NLV4Kh0k;g2!CAyPKjfa&9`jb7rTa_
zo;A3pR&|JyH8qfvRTa7OQOC?GJxZm{(@GXkmaRA_5fsAQmu``uAaKkYMSM9!+{t#G
zr9SYbPqU?c6NAjh#N8d`f)R-1w(cp+6AL7M2atO1R`yHVoJHmD12BP0mtj!hjbl(n
zT6(*0Vqw9hHyo*fd*4npD)EDJxsSA%px-q9?9PLelj~heF)-rSp><7E>E$;IX-1MG
z?AMkgeY|0I9t5VYqSX$uG09V~s5rSH(@+%Bo?kN2pC{I-pUosTC2%ZxCm2e1X^q_v
z+bPo2Jk%Bv$AQ-~-Q154aCC}0!yewYDWJ|Q?0JYxMLQI*{&2CNTQNz@DImtW#WJVk
z-nY#}E5P(9CCeep0Og|NJ+d|XnPAFSm1RgAeMEw>snpa+rAYk^{?6l~xPPJ?#aMgV
z*Gr6@TGQ6=2@Io~kP?UC-(l#6LSF1pr=I8yoIfdEhRzmXb}gP&i_YM1#yVj(mEvY1
z_wCTv7wHrLuz4ybP60I=6_SVIVQv{47Qd=~KwISa9<T0mz=M|bhWJ>ES;!`i86}+i
zZuh#RCgyXbXSToYwqDjja8zPrP;fWi{%qOx?cgF-2PKtv6<<4NiOYV#+j}Djio%QB
z7c}TUTX2cziqhYI8g%!bYm~=veTL_Q>Y@|26g;8<Q2d)n(Z$e14qC-u%@0km=M(j1
zG1)^4u22@x6h<^gICXMD1#Bal&1RtJEyZzoD~K=Sk4`>J@l=L^9<8RomtT`Q6?#Ge
zN=<ntj*@8ggvG}t&!I2$8Dn<}5PE)0+aAzGU_RUk!U;#c=?dOK;T9H>FjBS;9-%V3
zTVEIe?nSl|VW|spqmsqgcSS0rl1FMA->Qbj=YX`1JOyQJY+-<CMB(OFy=!<}|5`)r
zO~<xHl7j(el480Z^EU8y9@=q~Q3>biIEd@WIoS1y7`3;RGZxH?*Fo$V=I?cJ)fT}c
zZFOQBYc5fLcE^}MnX|zdL?;|F(cI}M93rCtI`XAFhsw4DJ1}hr^Lc5R*>U+|P&mg_
zn1u^QvOV>c;<8Cbx(b7|1rfAQDObdePpPvB{hb50xAvyQV|!F8+jpb>p|~v~p}3FG
z@0(E9=6zM3WTqVbD-4hXA-Fa_FfZ1#aa>25sq6)qAH6bZI2uchSMCgy?F)=vI&M7z
z5p50_Ofr$rWU07NZsh&Uf|>W1gUp=HlK+pXZvYM?YPR0k)@Ea4W81cECmY+7jcwbu
zjZHSTlZ|bgFW-Ch{{L0=)O6jcskv2Meedm_?sJ$itE<Lp@8ZY#1~K|Fy%TZH3$&VK
z;|6VCa3FKs#GvEM^P}9egQ>SGQN46sVefTFN?{<?w>Jpz4$1{d_`X=AqS|twE<atS
z#tCN+t6;c8erBTeJ(H2@sn#@ipfcRX*C<3w19#x>kDvL!8;zk^qsx?)D-g;9@b{k%
zjCB?XjI|{C)jB;*A~Xp%k+};tl^3ky8*~-#Km}-;!uCDpq_fsJ<WCrVo|;FLb2=4L
z9$pe0B41)nnB!-RHijN)M3~VV1l&HWP401DMF{PG$!y@3klEVMjT{}Xpl{GH-_ci5
z0Q38ue@50d2sTIB&(r-qhl{9>d=XDzn{?GnW%XSvXc9@;=JLf%tS*iaPB(3*@65W&
zr?47v5|kF*ephgAm%b(xC>5>HFq}S|cSdckhH;^xN99_8i|*d4v7npdS6Mc$bkp@i
z0Z6xNki?EJ2XA|4pm_KMIeMAhK2A@tK$g6G^mN2rg8I-Q<?7j;f&_k`oD&iFu0KI;
zLpw6+DTW8BY^jq{tdt7!Tp*$Mh-8psdSS{>$$jL>`bV`6gkd`bm+6BF@;aEbjq9hG
zP$FytU8y2MzZ1&)lcVKMq?S?&;i1$aRkx{OlT=@3p6+KAf~?_LY-hCFuMP4XNQ1`v
zmR+`WT>#nbJLw7kw7&YY+Qk_`3C}Ex2EtL)I6bBD8#}|{4)FjxicCS!AwHLemyrO2
zWsBP{S`nul?FypZ<v65PV_0`Y3{#Ol&aEz=eqDEAk{7}s!f{2;Hm7qzgIhRWock(E
zQN+$xLN-(iI_u}m1Fn6VqW1Md0JBhdu{oM^YoX<z)tY;&E`MgV!tw~Y3)t%+ZG`L$
zG>#gO5@xzU8HJ;9*DQ4n35AaNUA=H>sCo7$8--s9S=dU82Vm{1I!!HJ7&a4n#O4>3
zEAIHK-{nxh-(pXM!WMIuSv0Ge-u_KiJs{1&t`kvvX@5^j2~Qzwebb<F1G?mNYod`#
zjIE^1inAq$X2jLZBda=kz)u-!WW&#%Hynh?Et%Frnxqw!1JYmG%FAjG-<#%K77Y_X
zS&jL|>sx|MD9nY~4YIns5_!Zt#l+H5<?2o!Abx@#`o*hwjBb&FQTXNk1JxpOXpOv|
zh%X7bOv*r25yf&2&}Bu{0LUd(nyljx$v`E7oYfaQ+oI#w#cO^+qQf(kB=)iWYFPp>
z?mhGtqk0l>j*?G{C%4bYkOF+AN5x8}Ci+h>WtD^Ys-0zM<sh#0W~m9%$06eGVh|f-
z-RPWg<QvRHz}f{bb&hm-SiLT8mj`}#p6?-?&eD`a#qnEZ2Onh$07X)2C-wzMqCa_V
z1s+YO50KtkEw_d9ytn&?uE79BbL>Bifh8#5@um`)zPz9sZVE?A9UrnXN%=tgMt`x?
zwJ2;e{dKQGDV)T#2y>PkMcx*9ORu#5DzB}g^W2q7lH-jbrQslUAJZoqPcxgwGI<rF
z3OEHpt2<e~D4Pft(B*Qs3%-^oc7`3#HGh3^*ZN6Wn0`;Y>g8Lj)aYw#>-9#|!$7IV
z_q$m_a|fel<S+B|-~moQ2Tj*Mfx1SLvX*Z@319>H>}mf1;2lGR*ad2slMlo;MllS=
zEOJ2#Ww>n0+TAi5Yrd<Zd_)!s5nDVX?&t{(&OW?6?>|Zc0G|~@XCt>uFr3<XYK<T>
zEsTTX`Uz$cEK^u^T|kRL$>Fp<>krAIR^i6o@16i)p`aOIT3u3ziI|!*7=T)BP=#$`
zp{Z>NHdMk!Jd0jc)OhJSWyk*|hxXX;KxP9G)+bz&4kcYT<XCS)6QM)1Qa5C<kwLqg
zpmJ0FH<Z8}Soi?kM^Tf(0O91L#Zy#DNGnK2W1QbYO|}@`jkVh(s?Ophk4d5uAYuJV
z%Ab=B#Q|q}P_D-kzmPQ8^5>zDj{7K4=~j9v##c?#9h7`X*-b@p%|rF2RvnH>C&K7o
zf2aHQGK?{4kN6}owMCF0RcRE3>;3#=rKC_!-DnX6(9=t<c}dUHb<O_W9lBVKMcf`r
za=VS*8_kkR&K7o&O4;3)o=Sc<8Lujm`33blJ=+n_d?_~TJesaITb$F`_U>VU*J~zK
zxIUceM&z;)w&o!oe^_NIpK=GI_>tap?JhT2I}`vGU7mq7DtY5RO<m$yPp&yvs+?<M
znR3t%d_^&cer1~=v48SeDSFSvcA|5wM$pd^J2N<2=6A4zn)u=BLl#<G$}Y?=ZRj{n
zxVU}PItuIUNzh~#tFOGADW4VyVR~mvUT%s+Gfv~T1Y%y3J;wH%;OU4O+9~QEzQ?ZC
zl?tg9ZW;2nh&My)_a*&0vh|ihU140>rB#>)*fh>}b0!Tv7g3wLGP|YCxFp(g-5}^#
zj$qc!5_SmkL3gMveT_QHK^k+}qQzDooQ;`LGGI<ajP-Ua%T&Xpk()fuKx$#Uj_7Xe
zJ5|Q7#Rq*R5r>7Kl#^q@-+@EB&Bkf!)fBZWZqZ9msg?^&0-58P<E5|4N4#ws;X@`M
z&!tl~fYT6u$|s#0WP-L!q%zrvuFCII6{E_T_1|4DW@C2+GOzFJnDNZXZbCyti+PNV
zT(!1Nz~kyWu`s1DKf+%Mg4Ec)qvvF&TrdvY?OyDwj)SwAJdw)*5@q44bGo!&@(B4}
zOC8ke255)UA(>1|)U6fBbdOs{N5PfAgKXD53{<3x&ka~^lP+j3>o+Zab%E0#1j}p&
z>kR#MVdZ@=)v6cEe{Fp7T9Cq9*0o+a+MYdE^l<e$xl??bx6FPHP8XPMG;~xs&nQEc
zJ<OcCA0o6>@`}{(cogx?QrHcjGd%6B=g8>CMH+}T5_TxZeaI}XAIN8*`aI?Vg1>#M
za)fWZn{Z<fJ1#fvwhk|l@%}h%3YfwuIah#FaY@YNRG_c#Lw$T0^1i8HMHGA|JQMrg
z8Jir)wz<NVnBVWN2|sjg-_6Ulqc_iTXvc>e-?zV4?XyB5v7v^qPm*>nEN3k$jFDCn
zsb0aXq?GKaRYhk%m6fhfoYT+^j4A|1GY&D25C8g8!D6;k+bVPD5)^WA^+n6`Dxo4C
zw82)@U@g_af-jM=h?*u(zp22N#N&Lm(meDd4!0rjWIL4pS6ZP&Swdla)^{1l(@s-1
zV-5-j(N+kUa>(m{mwdV{z2x#sS}G~CDw_tUCh8bp=UpnJKPLH9_qFJ|0QMw|zc;la
z8e5363iE7sNuS)7(ZWo(YI*&NRJM+CI<zmBU`a}E6j9w)wtFVZ97a`c%J+F}IYq56
z)F@f2OhG7`w3fNfaf#|6f`k(ub>q}G)2j)r##x8EM=mLZE)kfh8i^(fwBLCBAtZ!A
zF4&xd4oYJ#L{%{TLRIM&z=*t}&N7%5x#3)l)yNne>%Vv_dT17}oQM*w)~JROjf>q6
zpGHc~7T?LjYGMR!@}24=fW_6=Xh<+b5etGSWM(X6wMe`YrCm!ESx%r{(qcSN0WBfE
z!Ka;cfr)JCb*ZskD#F7#>qeB6BK*96{Ol9sqptZB3i}pBe?vqTa4Wz~i38<#NJr91
zU%gf=b*bj?NLeFDaHf1+58js7I&gkJ8Vi<AYTQYWPCDY@I2grM)NVK~hCL)~f=rDi
zBc1+7z^$>4O3kQmy>2Xa^C)c3@EPTZ*pz#?gQRoCA~pzKfxZF9BNKOGBX&bpM(*=x
zG!=vvavFip7XmB+n80*Dg*ou4pVI=8fefAuZ|-MLof?j8yOoM6)Cq*0pcm3k13w&w
z-WgqUHD;7-&q$m3cwq!jCJPOm`U=G<7ONaWd`v%>h$t>Gh+cm#mas1Lh`N=s-};}X
zI|fZ<W2WoqG2p^x6<-&FiEneT%t>6M?XAx2U!z9w&1t|_#uKZX3g7x!k;TC+28a)I
z=HL~58N$k~d<f;YgOZVSy>}dLY+sRfM;1L|m7N`9QG0`=V@f*VA=z?H|H4(02v*L0
z^~JVZMxqvqyo%9f@AVy-w<)>*PKyin#jK*(cubcoMy*!0Pt3)zfyV&}-h&k4h&16&
zL(RcU{T=8$OV?WL6rJ^=BqIAw^90sal)=aEh-FjP%r*za7~-#7fE!4Fh0ELjWHkNR
z5>IrPPZuE*A7||?U3@+=u)(MVL;gTv#95G!`+SqBn0?r_eLbIPv+Zc>^wX`aqw3UJ
znAETZsY=(nYT+1ne!7jFVSc@S*x`BjVu2lgZxmpxHY5=l+rkchBZq~Us@=k7t8UuD
zexSD+2p-nvW;N=W13fB6(SBpG7_b$JdiY)!lG&Bm*x^OuDvl7R?7I9hI`oa#1WNp)
z*i2#}#kC=jy}oK{jEn>$$0YSSs=M<~WXyR)rENByWS!!s^!2$b207JF=FZj98x3Fn
z{8<3XIP<cil33cmK~4b22aU-0d-;iNCe)@2>)(f^=#FpL)$}@$jZ&@f&?z7}r>1_(
z*B>b$mx~B8yC~zfrm`#RMRPfQ)nUc^^c13575d7@Go-^8o`O$8_Vm><M3-C6DEZej
zpjb}+#i@0_w8)}hdZxUe{nem_07-mskXc~04CJ>ce%1)I{Sgzbee#F$P+a9#%vT80
z1U~RnE^8wB1>qAVKE!AWi7}FxdV%tdOs`OHVb`s4MDfrtYAA9)(k}eSRaNCt&0pT<
zF3s`~0X>gBv4zznRb7`heL;A+rFjCqKp!3!u`FEMfC-+`OoUYAPWaj|cN9q?-4(DG
zmP#G-kuQ{#6XHX`mGMVK6^S6KprMfwB_&F)m9puz0c-kOOV5vPK_a|wpWBTDF<&-F
zC7eA=Q?O(-?8u0uaF_Sg%Wt1f<|*+R)77(Sw<d-fwEg@~{kLjPLp}3LeFrze<lUL#
zzk2O|^+ghnOe>@{n5aZy#_<Nwv$g<P!eezdj(hdla~|wB!SMNze_0cmD32`(&Cr;z
zK|*=u3aY&XqY}uq;_Fv1$p-{$%t(;(ZvS4si4$ce+!sI~=;W!yghpcDOD;*Kd@AEz
z<|5l_7stEMDDFaPiaNFsea_*EkzO==w4Lf%-I*-;?bNNkT<&FbT$uJL{woF$1rhB|
z(H>J{65<HKm$@$*q}h!cZc3FKzDFV%kvJAPWMiG;#ka2sfcfc=B+|4^g&J?PgLqu(
zMUncTXp65vSY<~{k&rTwVNF<qoeTtu73HlL1(1*l`B`r}<m-g;F1blJ6aJ`txve*L
z52T&&6AdG*xpX*iT5Wf2nOX<-wH^DtB|Qo0b#92)^uJ&45yJK$S<)aRIVlNser{gJ
z03YJ-d;HNcfW<=3%kk6@Kid{TPS)Gd2>%@cz{knS_p$vxaqm9;Ji_}tge17LxvT%l
z@$uWmcNJxLWCVDt5#nJ2IkrV!@=y`4PpWU)Cs-Ez-Kuj-ZjwXGYzlPZa67wH{gX25
zaU?+rn9j@Is(oe%(V-zxAD}}JFi8%2rc)9CDUBdCi_?!cZ8ZJ%c%h^7Vc7a^jb#RG
zcA-M?QLM_hfF0heD32S1#00%*osXfQz?=aH#Gn&Orn3(tkq=(kDK$Y`&`O<cHk<+*
z|8S|+g&*0Jvu$G&4S*|WV-xv?g2qo)?L8`MQj{MewhT_fC+EW-ZUNdO`)<$jl3BHb
z`GS}u)F1o}wT!!bM7)!iW3yE}kN7`VUgqyf=fq@qOj)fBI!vG@SWDXDN$ml-?;o~r
z`dIGE!jSj~u&(j^Vm=!76z6DQwISli$Y27lB<P$2-*An-JpiZY`adBBIy9~rE@H5F
zu1flEOZeX<xsy-YnaV6CiNytM?-L;!Om#n2G!!?z90{t_D(;^v)UP(xDw5tWkFj!k
zeD7c6OKQ3;x_s|Nzd+I#bN1}$<v&HVrnqL~DNq=rKIUJJx^DtrDLg(5h*)yiwZzMY
ze9vBF2Ii5bWC4w+ZE5l!2b)SztlP}b)9LYQ5Fl)u$H`aPKXi?K_2H`OY6Zg@Fg0#D
z{$i2W9?YEVJr`IV@N=)UhE&+m*~LhK+a5Ua{*GeZG2d#!T46wOnwk<1QTR@sG9aeW
z=vzG;dNL#`wAb7yqcfmPLgdH*w?o`4D)eSshqU0Y>ji9Xg`CU<;N8sY!}+*N)e0k8
zC>{w5)(W$AZo9!-EL*~6Gw1iw%${$<Yg(4)Ak@J-Ez7`0o7TIASOv=j9D_RUALs0s
zJEBrjVvy-6VwBNJGOQV%E2%6__hnoZ%k+lqTUaov?U2BDNUr3ct9lFB%ZrV-$?Ofp
z$PBGRBm%;Ja<~bWX{e?~ba1eqnvoNuJ9?vY?UOu-W-#|hexzrfs3`~<tB<Q&1pVSF
zN{I+>q{c`~E?Po{=JK2E8+WqWx^*(v*lr*@^hXIt1L5Us#Vw@X1|jL}bi^R))~R3h
zms1oX(1)GI7&s)Bv+M>bT>WdZM6Dha2a$OimI{Opq^$EYxz$CAMzta=e#10mX)#zF
zDZ9`xRd^V^Wm#n#%F8<rh}hDQo<J~2@~*%}W1W%?LR0(qE$(l_pd^A7K*9LrgqkCx
zJ`hDj16}9|9#rqQmo4O4#gX$~h*nb_>`a;oi&~fesJIeG-334IKW4$c=nr~5MbhX1
zLJoM(Ns7NTfw<AgjXT?ZYjehu=AB|OqQ;v)$h^td&^}4r-_Ps5ofl~4Br=QZ0fT^M
zLQS6jbKT~9)W*!N#v`S*_dRt!ssa>KGb@D5qv^#mfsoPB80@ReuGsF#ghYkvk+;w7
zk73IX3$5V#+{#I_7Zb}ET=G;X@h65-t#qK^;Or08lgSE_WOtSIYIOh!GH-_I(Ybyl
zg6a~(IN}N>D|auc5~KvQsvr-Ssh(w$`0GkLu~ZzLDCV*SMd(1fe&?hBgmiwlE=l5A
z14j8lkRgg_%tJHbaOgH0L>!+rL~i(QdPI&72S|>WnwGQ8yQVU{!NE6WjIhL6cXJ?D
z1jB_AQHk2i^(##BVJXYu*f2b?4hgG<&7^A!AEm#d8PFZ2=`%pF)IQffX^R#_5psR-
zTSl<jOCGx6&qAt>4Idyg-$@?2G7r!h63x5I$lg$^Ge)rZ9O-r7cc5McQPWBQZ>$oX
zAzYXB?EkT$L^}sJjWO%F8%J(ZSpjgIkxyO;HhQ~E;#}n-dNIvwHF^C5EBra1DYbT{
z*`&CpAW;7_Ly1{H!QB<j{%iEPMBNYBwV@Cx_o=NfpH#5pNpaLb7Vq{rzHti{hJ^f4
zmD&}nNu*5?lg4Vx^2bi-1#Zk_sxYpCo7)C5G%l$Kiy54om^UWvcbI*|j#prH#aO!k
z5GKOLD{1Df;oR)_OgZJoekj?i$}g+D`XJ+yO-doKnt|aJDHqI;=2Q@h>qr0!?<f}x
zga5y8c+P~5)4!Y9H%$|{!Nln2^$_bWr`1y*{eI6D$=@(lS67iFjE+g1R~XyZlu@oi
z&&tZ5mQ*dWMfVd5gth>HrW%_L|38x3>y;qslVp7dW9Gs;a-@4Yr{*k((au)_7p20z
z5>CQlT)t&-F42<ahXS70xHTT5orctDj$I~KA2sEaAr4B^Yg|__86Ty6Wc<=wkP*cw
zyt<8Vn)(&_Or_Wu?SUnOnXjnI?4eB-Nfykq>j=3qMBS^B-v|+adB$6qXx&PYac_?6
z9h5h5RHA6LjH&HqFu0vS&yDa}C^t+Tu0NKoIJ?jL;+y30+Ev<xUUDNM2iA$JnmDtR
zv*ITQ)5siU{A<p$Layt9H<+qB9`P^kSM||*aujsnM@2|{SA~rILGINdhvMh|q$Sg?
z5yfGQ@f~C6)gE|&EnUt7e|+c`iDD_F&3*43Huk!Z2AFr;vzv*jKDy1TFC{=XyZ_Z7
zh2TG$-qqWtZ3@98IU-lA2O`&W@L?|4IY({)VqtawqVx3cuc6{(03Of6ytl(|O|J5#
zz27my%?HftUwOX$p`;}lksF&yQf`I&;Hi6!Gt2|9RhsO_gdx$|Z?%VoU;9JkbW9YE
z?-wE&pYR24L_+-0iLja!V-%7mRY+yxdc9JzbHWEGZsfm;$v6#pr8?4ZbX|QrhrPoF
zb>AUejFIZ_GD3BFQzYE10>tPv=HY0|U3|X>s$97|4yoaMu6kk$C-nudk!T5JL$q_Z
z3G5LdzkLZM-e)lh<?0zezN(`lZ9+av5R|QGgF0s?`&$P3=o#`yZ~puu6U^TXHQSe7
z`~z5~0#MO+I;r(;%qQi^LJ8k#55m;?@^==2*euq+LLqW}dE0!D)cDjF%ii)qt@aNQ
zkaamDqHazPXU0GLwJkdO&5>eXTZ4xa)`U#}eJqp_`7qq1S%~_L{4Rm`NV{W6e3BcL
zf5%kWB=HmhX%7|?QH>Nt)+NeqKP}~Rv4`f`xh>_p6Xgd#@4RGYyYb25bBOm_zkmQ8
zKZ<yvay$#zUQ)Ab!56!JV)M^sBg0+&yk_OaDj(fs*}%<Hy-Vc&rGzz}O_;M+OC;|A
ztj3ny-hWKu)VF|zob3+~y>dGae@x=u1jYpr&j-Y&>q2$Q+x%k!e@vfqnLt1htLiUN
zFx^ux)9D4J?pA3&f+@p+DLX1CSP0I0XH;|J4oLdm<}cyvnTro+gh5jpsTO9V_qnF4
z#Y5L7Fd?oBLL#xBT}9p0sk4f0RD`1fSQSH?i$P-JMMG_bt8D3-J_hL*f?k%a@{MG*
z89ON-K61)ZsI*@-s`qc&P>*{M22yFgq=#jI`wpExxCMlMM3E|}2OPtWhbGP<xP^bp
z=FDg0d#i$0lAGbCszFV=wxk8uPN--iWO@^t!!9^2NjYHf^A-Fi#5gys3P+a$isCR2
zmrtMWpO!Y|A~!=kvxAoV7I~N3p|sszooZdSIsc<R8l2)=>%QY!uLo3l)w(oH^)32T
zAC#rlx5WL@j-=iI{RKL=oONy+wF1fb@vGr)M@CRaQ+SI;C-?8hsuh_#zdASC4iEN!
zY?tO1JOK{BWcFB(zWCAc{4Rkn9to<g2bATy(IoGl44*n*M(JTZ-EFVYSq_>I+*6Ww
z**wVOeiDh@iEq$GEw;IZQ13+at#9>5BPQ$S(U-EgsW3KDZN}_<&#fkkW}VgD5zzkp
z1*Cr5&F;CxIj-Q;WQ>^K)K6j0S-*3Cw>kDcmjk5*&*kfoTH5~&TN4NL94U}B?Ya8H
zqi|JYTMFwc7!y%$j&c@d4-vSbO?%nDRFA6qAf@|^jv~iQ>0uLN0k`sM-;EAAN`zgY
zy%86P<`b$AL2~jE*L28@zy=!q2C7YohriDJFhk#)p*S^tcmCQQ74;>CW`|&Y=!ouI
zwBL{gJ2#Kh6CA<ZAb|rC_84tayhzf5)_$c~px+_S`1Hqji`sGeo(2tuIFfOyDAI&&
zU9?_o(0NZg*xNVp$Jbr#8*JKx2qF?Dq{Kaao)AyQ+O6tQT;o=i{weA%Lob)2a+ksY
zbq}3Awt?*d{@+BHsD(N?zq`vaE>F9vt3T<*rQ{HwI9`U1Z8iZfLrz&d=ME>09V72|
z<I6Y7g~C>6XfX#;Q@>rQe<$z}xIo^$nh)D@JU)Y!jDk||o`WAgPI~ziD`y<?*R5<f
zirqg1CJfVJ*Lop!z9kN3cASAY^}|dM5jm$M1CfE#T~o^0zRC56-ahfniSqWoHzSjB
zu6*o$x3O7xliWad+Syq*(0<blrGB~QeCggRj|SJOj+<N0+yc7J3dz8GxePM3zVlgM
z=cC<c8}+Wuzq$N=S3!AkX>9a@xR~gRxHzADXdr6?d?|hDTpG$yzsk2bHI&=F2KTcA
zSnr1#iytbsx_MV=jOEUYU-+GD7m_>6^P%gr#<TMQ=mvxtV{Jps4EcY=L(Tp^S|%&e
z|3>luSgLQgi<7RDgc1K^_P1_nFjsQ_=%n(5kMaDP7q8<u-^IFIppByOGuS3x@;D-j
z@vj*J?LJ@Y#^q?-PHl!+TNI-yRMSS`xK2XX96idZgQs{a53<%ds0%Jq86#Cl>zHs4
zGUQK=pwlDM;=J0_4ai(<`fa|ycWk|huakMH8_7nVrVXy8rRsdjA>p21BLAJ5Q)T|&
zOoUS@Q*L(33>YW@h)~Kk7$`cBerRxd@%F#&x$xz;NX-|0iwj?V`roens6VsF`}OV(
zF7*i>^@(Y=uxQu+ll<mSb(Q%sk<+B)g?}s(zY5k0DmNfQHSF!YG`p1M*?aXWFj~cJ
zx)2PQRUaS9t6D%Tv|Q|JRy}d3Dk?6{wYBX4uxV?*e|k;#YyzyRkBCk8|0B&jA*-Gt
zR>;RrrH~H)N9vwARRWf0-xLsx&cC#$l(MhKRc`+ywZ;G6jwfGc_5P2251@WooqyT%
zlWB22uX*GDh~B~TVL4FMvQ35nieF&U#Fwnwlo%y4#sxonA;Ei_5@H22cw>DZ6J_+H
z!DB~q_u|H8WaT;7kbB(0Fe#D}uL^0z&?(*hnlnvVzVa~#VZ>1bx#JeY;c#yjQd;9`
zON>Y09imVIJ6d^?xA|bzUgPLG>8%rI+yf;!t@e9I9mWP2iw}?+H-<)qY;@u|noGAv
zv+$7mpzH6rZEehef%ATLud_)DZOIbIYty7vH9_(t;Ky^{Jz5TU7{4h>p!$_KnF%Gf
z&zv&8w)zo-9#3KDU&+P`u2u9Pj?WdU&{6Gv`)v1(@V86_B+=%6pA)0$*km(idKAWp
zAAxIOLg1XE@3uf~Y&&h(a-?{)pXYBS%6cRstZ^cLQ6$?ueW(7!agxF8l#v?rftUlk
zr4qPikQy&`gF5bl332>&c})iG>;NpgEV71HsoG}<!sB1P22-yJGk?q4wghn<ri>xv
z=mK18?E{c96mk0yWA2$uYvPqvunfcv2v9FY82;izc;5n9_|tsC*HV%5hgc7zvy}<I
z5sPS&FPmBDkFKb0){X0qz#A+uY>|Z^eCqt<cn>lYIH>2tX_8Y|awDolzH7sEpmBUp
zgS|OzKYz0IgU~1$SDIcFZ(n(@jH6S5Z?3#y_2&K-d8Y*GkJ}!*K4s`c0*5K!Ges;j
zlFXVzv10~gj!||7HwD>J1nE8D!Ntd)#NS7~FYMEBj8xtQUqrzfgVjjUw!Tf@Jg4ke
zEfAEMf70k=r`YYo>ao+ZM@kOx<iojcD=PZgl+mc<#HGE_{rpfegt`EyqJu3}AQfa&
zAV)dV#SICfyy)f>GHGsPL?yzi{TpG>BuI9&_Mr@zl)$k`6O+>}6yb1~u$=H(s>^~$
zv_}sOR!_OtOG3SRLqX7}c6zf*7@0ZKuSBg?fI|NC7m+#P72VCxe)VIG_drGCidctY
z*K08vb*VElu0Z^ubwR<KCw>~c^rTX+7@zTS)_L;$Lr~gOwxWJYxhzVuNQSAPQ2yFX
zXZaCWje#Cpb(t5c1tg2f>os;O#RPoc&nfZXvnDjYGan|uwC{J}a2ytD1@Q~fhn1Fm
zWL|&!8^J-r|K=Qs$9$-b33F@QrN^J2SK-S|!Q#9Uk_w?A`1&C|WAAaheFyE;CLuEZ
zo+pIif1ejXlJj>yj}Zd*R?WQpZXS!qVvPb&W|P&KGDP{dq|4v<BZr-IX_6Q+N17aq
z@m?54>}2imn0l^zom59;-Z0;AgT-vk&f@$=BG8(gUtfd=rs}exDv^1Xyfp2)`{WqW
z%bz^^=guQe#=Y}KX?C2_cpOMFPk5DNRf2f-77n`xDSp%_(QsIn!-#XsY60naEEF#=
zA&#2aH777R1o4Q<&#?Zkdu1T7yU%G!*uwgUjI|ymEavC_u$hzem6?HsuSMmADWuUq
z$`k0xJjM^d8UndE@CLHmGCeFF6G5-(_lJGTTc?$q$%zO)@1YpM*Aa=!KP!DDyhrIh
z;Vx{yh?3y4%SG_DO#`FT>8V_h*%=ssIzLGKv^mgo@Ot{hM$6bZbk?|O+Zk*md=2z~
zi8kmpeRykQR*ZC=UILK&X`j$MY(Cw%&=EZeRE?{<-`5BsCi$HF6w=Gi852P`zd)FF
zyK}&8JFWa_>`NraNoJgv!EV$4=+0ZRXty(F{FNL?XK_CD^ZX`MxXn!;>0F5kKyNjz
z6R2GUW5-IXt48_Dt7=6OHOkfFx{4Vm+$gHVBOKd8uofy4!W=-_UxVVZimVL@J(r~s
zsuH>BCSZ)ryBX)5zU&$fLrAEW^%(w1pCerN(^1Irz*4D|=L3nK&8LIu_=moXBh-EU
zVpbLCJmQ^HWm=|VmK@t3s6sXlG-r{ViN#gtIR26e3uL6%+5M#<4RK2M7{*oHh!HN^
zx@A0xPfL~8_0@?o{ae*{7>vVkUajO$>#|LA2eoc-{yxl2r>CZGeM_0;ssA;}Ar4zF
zZGz7EMl@GHqoux{>(Kg#O^3MH?!%L<NOgPG23gt9K=$48E7fX|*?VDp;4e$))CdEN
z#NU#~O8;m%(=2ADT|^RRx{TK~hr<e^F*Q6V&q(+^i@OVU>HJU#hw{xoc~nXz?cBz=
zcblJ#?~ik*UD|i+Rh}1Y@2*<qoA`IDcwcg_$qNT{exKWg-?;Rtc<!QJ)uaJ_dib~~
z-;_C{Wsw(uEz;#oPn!r73dvqTaYtTocf8MqJm{S#?+G27`{=OS!@>)%mD^o%Q7-R2
z;C(gHGWU<Q&bc*G&kEUVIOW?fOX;-wCnhzz>%rw`7fsx1VRdL>5Y*u#J@m6RKOMFZ
zeB2HBG{)<*A2Y~u#tB{IIk|1mDX`$cv3Hx(cw7B%G7|XjY~&~X+w0u|R@Ks1E;7q!
z=0*ARE`omYtIwk`+pYAkJh9P__p<vLpM9uD`I|GQ&pW;OtTJ1LN6qm);;N~xKnMq)
zlR+2j^{+Ii_NDRITTWJ1*ZAb;3YNLKKJLNiqx(TMRzqnwG@7}Utc9@L5$Ch`duS{{
zb$gcsVE&X4pPEaKg2K%+v-1=@*g*DtR=W49X#QmLm|p;*;}ND&yz{Q|?k$-%1$OHM
zRO2=9cBkGIqQ(GH@1LQuST~zsKVUG!Mv~UNpkc1%kKT?#V?XD*x{lU$T|;pKC3Sct
zI#$Syme1W$rQLbVHnbWLbS*ud?V#LtX*lPA3EN^Ha9;HRnj-NEkk1l5M0a#;{Vu+D
zp`JDk^1gSIy$^o{S&YG!5${Rj+nrl=Pqtj6g5P&;hIbV>2l5-_w=e?^s5dVM=QF{-
zPy6mK2los5Lqcdmi7F_f)vz%~d2`BAE?YyF@+3&j)|4eN#9|Fyx`W+QS)J#L=0&;y
zqtWf#ll|iqvw4TT$pO-^wL72N?Z)HXh(szU8x`gldglxW5p$YNspc?}ida7rJ9uSu
zYt-4Kp)%n?%d?ebv|mqJ6~<>_gJ2PB&*fM5a6))c#H=S=XuS=}^`*Nq427GX7T@EY
zJy{F?6kqiRLLgc4xacZSpBN5gMd@1syejW4zArBk^!nL#^wA$BqB}kFw~6mLP`2ZO
zU<wCB5hr(8Jr@yNy0wIpKfy8{Kj+kI^t(ncKI!Fq-0xp%KR@x2?lsWo%7#v)x~Wv@
z`i>^s4IIuO;T+^XKr(E#TPVtTM;a;Gd7n}dyb2KqNnLp#vCjA3`<(d|x5%*pdo+Y<
zLjhTq(l7`sRC*Hf<TWSo3m$p~dWBC<9=)JQ9goaG3d=@XdC(Bfz^TL8GhPzJj5fae
zTIWgzd-TY)P%}d%Wflfxh`_$DFqnr<lQ3g>m+Y)Rk`XF?y2N_W2Xdr(elGfi^O5HR
z8f&J(V$fehytE`BCrFZOQF0ZC>?G3fQd<?|oaDRpX#4?Nhu~x_K}?hlW*Nv97Wibb
z*0Vd)g+n7ov*7?8^8}LU=iZ%1SsKsFjtG<1mW{trcXT(r8__OoT%MGYZ@Rb(NBl3g
zF-lXb6)^zAP;r1HVVFex_ZLxJlV&LM4~d&`vX;}kKaV4c>sPt7MJ|T`NN06x>4Mja
z4|nbcb@ET0Xv}wCas+j|jp|tEke5C`+i@JF>yN(O2+8nv%|R_%8m~=(h8>E6PG=MX
zE({vvaa^pliLzp0&4ugWJ!}j(B)w9VsM((GI>4LA<Bv2h+eo4cs0nl^TK(3VV6)>P
zo5hGiyq&ed*A%GU6WjrBL;38Vp}Vkep6yH;9g9z94BaPYvns5f3P{F((QYIdmGK=K
z97^LtpWl9?u**%EDUmPvDH)lANL9OmRR&erZ?gRH8WhURnwPH(Zds&Qymr8qc?vu_
zx+B4XTDPmFZ!#dls=sy^ujl);8%DzTm5DJC#m&0@yH69n2;LWXrXT302}eA81%G(o
zwWo)}Cr4s=S>L;b6d`tN&Md@fVCmq;tOAWimE?XeFu^YW^G4UWWE0&GC2tkTTWeu@
z%o0zlfh_*hk!Sx}iF0AN2Tg~jtUSE+_$Qyzw=KPAx6_d7qy-Hrp8J1aNkNgxPjFlE
zCyAS+Zxd+K)8T2r-$W@A3k_ih2-8(m&Ic$LYFzq}9tfWJA6#$2mI>)1<$%*hDr!&d
ztBtZKFa2B>&hS3TOp_uq#CizIqh_Z`*mC*4VeWVARQgE8Cc(#7qH_b{3=Db36Z7N5
zlU+?D+%hA~8HT7i4onIK3DH8eteNt>qV@vN%GYv2VN6fpB63udd+>#y5lK!)|8Kix
zI2&kE<D13${9Rj5bh#$4*$mjd%HJrAi_Dn7DPu@~tvD;h1yw(`^7)iC)TV`>>Y=C1
z%UJWNv#|I#%5i~2F*|n_x1!~_@<kF?CANOt5tD$@FSwIYiDk*H!N3DBPiI!{xdA%!
zM}P2qF;qby`U_oh^HV%?K9t@{BpqNiq7H9M2e*^hZ`@ahchHONFc|caxS(5uS}6Da
z29K^*TbB2%&#?Q0Wq>G9Ws5v8Fl)e@7~ra!m-r}YaCZ7*mlYb)X16b|#ys0BwMK?Q
zj$g4duS3_yweFV}7uXiLd)2ver!Kjd1-Ps-O>P2ASMlZret&a)4TC=xH!ddF(Qajn
zZ`)tmF2M7*Yfj7#lPR+>^1$n5+YZSwy(#nj^Q$2559W7*M5|*PgTGC<MCO{Jm&|D@
zFzrE@4V7aeq_CsZN>Z>z;1d~JW+M>Lr%jF9h^GgV*TZA7l1mRd&gZ&}Y=e(SfA?1=
zUeg0iVi+kt5#o$LWk0f>bOr{TF4J0+XupT?c1^HKDZ&vAGl!(UDK4eWC@aqyV%t{2
zfw!@pvpM$_d~c8aoHp366lSwVjP$Sf*r*caHE}GPG%}p>IGIlpssHtDEQn^?Pe*qa
z%4~`c8L@Gja{VU*6kC=0)s85YqX*ds#HbpOI+D7<{O7=lEh0&}1YDwy^A<F5<F>x$
zCcJjmLg1+s$kF`t)s%dk^&u+uyr<K4>%~ica2dmU;K^Xiu8G#L9))iev=a9>gZ-O2
z&sO0&)nBaFURJ{0wzBpq%6{L~qI1(@`<jv^=_U|el%Ewy6tM+MYI+lDLT$t@$6yV}
z+*atosS37(S$c`fgwAGZ2c&TCkNIcapp_GR_qJ{Gmj9fFN+)ppNZ}0#DJby&o=bbp
zUsBV<F_!h&B&YA=%klZjo9&P7jAfA{W<97gGIV%iaUf<pOdNLQDk8qn5!p4(V)OME
zqbuw-7J?Keugq4|-7kEiBBeyX7Yh{#RU_>W9r7MLe-VkG93PlGrM=2jQPCK016O5~
z6@a&X-;#b4s0<v!YWLu2=nj<1?Gp*ZIX$i6v&&L*gw9E@;PZMvIa@$^V>1@AC)G>;
z8JwFE>3QwQq+P$l8<;&x0Kgpk!`xH662h2R<iM`q7QBVBNa_1N@2j7fT2TS9Qgn2X
zaSu;M+mL4C`1*d~4$<75=q{rVy_lFEdr&yf>3@FQCru-y9YR{#(+;*3?#Xb5zY&(a
zQQQvZV?oZ8EB;{eW0&5s2Cs`hnF8l6vX9#Hx_Qbk#4*V#LD&U6_jhl>pY1;KdRX~O
zcja<|({v5A-^@={e-eCN-`oLbgr7i+_|&!t)nY>Eggb*1FJ>QZb^?&O@H<ZS=CmIx
zYHm<HYU%1URSXUjiTGoSi-wB=<3$>kF_8(2tK<;W4Wj{Hj4<4`MUo0MY4gksSuL&m
zOt%@TIrTDp5=!P&n|^g(6$W@#fg468#%PoGKt%WnQ6ufyqubgCg#%=+V^V)J(#|3-
z(5Y3pv9T!4ESez8Acw<wUK_GIKI4PQdAWBH33w_axO~gXgra0`gTW+~<iW<c;C<G1
zfqP8oQD5Pe|Ij%T9C0ZZ+?#V581pb-hkbG$y8JBJpWA+JoRWL(Ib3<|@h$*eGv>dO
zis!2|-~ISJiCC&ydIsKNmP$h2KOa5JSn`p^l?_u8>=$C4!XXWcl=?u&ZF5P+2uF~@
zfA6>{iQ0PU(Lu9xarPOnx(pI%ptnW$gEHw#iaz(bT(xJ=z>3>bJcLuAV0-iXF7@Cw
z4qZZHoNRavTYO%ALQa`I2=539kvyOEe7=Sv@6(z5Hjb_#V*?Oy7f}Q^k4%{4cSwyA
z!amaFARgmWWv?!8f}>xz%1!3uF%9=1uT8SS+x09YJ4o%#*9_67qBKQ_m^SgV`)J_F
znilk_<%Qq>ioVztLKgqQwbVe2(nRfm)Od^VWqvGe&6#GH|0}ko@i$5xAqUdAkN92k
z)%MNS@mbCPtBDEUg*;`Q$V0f*B9KLo?MP+#6aTaak3C-P=-PyMgfFeP={e=xf%|cN
zvkfOTW;rAlQjS=|S?B#zUEZp2RY9b5bZVV5GoY|a7bU_N;cg&t7#SgFgLx>bG6nUV
zL#wDnRo!-Ls|+D0feIs%!`1|K4h%(ks-n*!0>(96*dIW_4H~&Tn7@~i+|heH2j{p)
zC}UBTm7$U$dFU-&y3;A(K;+(ZUF|}Ma_PS~w^+NlNAF{qz#+a{d(wDxyAeL6xG~3}
zbVo9yiIjx;Fy4PMCsNDciOe7zUWzNl7Yr17FGCt+r$kh<y~Spfe%mEPTE)8jx8#8d
zt~P5@9tTkCaVl5EQDgZ31$CDIJQvPgZZ@?Heii<hUE$TO4c4)|qH6tHlx1%X#u-;H
z*#x1tH1N^PjO+5+k}%`G+|@;HXE4IXBbQ~|@jQa0y8pA<zu$2A({}cB!+B^AfzvAr
z<A#2<|Dh#oW3S`m%Ez38*lsvQ{9!7qrC{>v-y~o^+uivU?A8mawgr_3okPCo1%8^I
zj?u$y#&ob}ePmhRc))qK<3zo(Cnz57*e>G%{B4$-%{AQdPc1wK1e`gpl;iOc8lzD^
zzUp66r=d_nO6>^k*aqswl35%Hd9%a^jPC^3`&~tbpLE?=JeCNe?EbMkMpuNV^rU!6
zaRcyS1`VNqPlD?d4~>?w<u}~AQ)B_2*J~A9%<3z3q2_k;3Ih4Bfw=e97l-@Zde}qy
zH}i19{RfVh;-!Z|sjm88+dF-dU>WOd8`+2A0>ol?Gk2C-!7v*#Wu@L_q%a7$)+Xdf
zH?+05y#p=wiAaV}JYCkkyKrvgZi*w1z{h+7s<hEchx=07voEnJF-<~;;o~n<PZ`*r
zm3T-vj_3q4kO+Y_h)Bb%a4gZ*{n~oll{hEml!V<>X@g&c?fduz{+t9Bd$VOwmiC-m
znltF53q*JNT3m5W7n`x=t293*S(XU*59b;%FG$<?K4ouU=+;q{Mi2+4925BL0JaR(
zn?s&Z{siieOyRSs!WRNYH6ve=%?J)Iy&+kt?+0zSxUYN=^xEUnh4>cWJ?2FGQ0?uG
zUl=eC&ZK-=H{K;<PEM$dZJP}SAc8nbP|#*F$XpSv62CC;Ob7q9bzN+@lJ`%pOWb@p
zpjNK+6`@P=)OI*(3JjAu<A8${fbpY-79~<lf#D^iWAf^Cq;w8nualX(w`}d(x3#4C
zxs%PPn!>?gK^Cln?WDcinJcT=Hk+Pv7dqze%OuiQneTD3bxM$HEc+7DIZsmIkUHfZ
zDOoLUjxFt=xBN)rG|vUpb8_a7TbmR-gf-f<F3tkON4lRKBNl7j?)>=806mwcLKe~u
z4m@^T<A?TpxOfbUV=Bq#LgOdC2+x7ZNNGRuHGz2G)^~~k!%w?S`RaDyCk~Acn6O1}
zK++T%$Ue_jtp<q2=7SwY*N4mFB4J8*2hQWtMiGI`#zxeT&vUgWZQAd<r#}egD{O8B
zlM3g&238t1kmoZ;U;cm!=o3jY@W2YizEe5j!cQPq_lI)F)D};`wLzWuX)XtII~F=V
z35+Se7BinjZx5BPB~)C^lrn?j?d5L*o98lLp9uJ{x%854^(TjY2!?DgVQ(i{BS-`Z
z?T{A`Dm~j9#NVNar+RY`fkri2!z&oa|M5GTUd+vIqQg!%P9X-+nN5wK44K}w&{tbB
z(;-8e?!8w%6EoP3o1}A{=|10R9MVl46oORR8i*g2?M#z{%R$?2OYNu<i1u8Mm@IU<
zWz+Qz?9GWsBFE~VG(B`(vw0L-Nn-c|ha$*I#>}P7G~1;j_@0N8W+);vfDS)1)5?3H
zCqwtO2yrD`kXZpWC&W>M{(pxSbl}Qfn#(CxwmDgf4KAj^NfuR(n2AlB?b8R=px{l7
z#f?C5YO8~C#eiqE>QuKyt-8oc!^5v)K;*@F?ji$Km8g=ivn+_Zc|9F`i-f~`z^lmZ
zb^=nqiE|g_SH1h9%=N5j&|c3-MkLvq0OVhPlpzYW{$OCfE?Rc#B}qu-cif$-8!fIn
z)_l>z>gv^9%Eg*@CGq1Pmm)0An=QeQN))9gDu&&{qQ1$hX@*wG-%wKWB=ZTvj4PbT
zK2D}>`@+<LW{_^pf#u(dqlrZxCeWt95EWP2#T@@+uj99fzjthln$LE(9z}{J81^j1
zS^MY&2_pa_b}2Hg5q_fS=haYdlj!p=KQf<<i$oi97}JmXVSgab%kxD|Nn-fZ>^tir
zT@?C45EGc(u5Z=zHiIXw3!Jbi*=A<@fGkc~;``TomFqWm^JsgOsLHF%YpZ&F^DE&z
zUYevqkL3y)V_iz3l<jMrdSp3^dBu9qKC{6d%DVty=)pkE;Rc5Nk^eLpi{ui4G|}7b
ziN!~Y7_attd;Q+0CDgj;;(jTnn2Ec6?EX^B`Cd-$D(0-r9`hyx=3Q`^;&-BQPsP`B
z5>TAkm)LhJ2|JwszC#Sxa6aM=TcsVh&W~Ljb)kx@zi*IfL@q2NRg?y#l((C1R#nu6
zI|G^YJZ43e(Ii{}otqa$`R5{5B$pj6OO#v{X+F~7dS&YdggJD|q1Pu$OwKhFtC=A+
z>x6v4cMiMlTD8k5uocflM)P1X8hZOl#L`s?``R3wiV>nt@l@sJfi8Yly{{KG=4)LR
z(hhl5+UxEVF$kyyOTf>^f{KsWMkufwOn?{Y@U{Jm<XDzKYG|ePljmQ+@4*@)NM@Cd
zDkegbC;cDa2;CszNkLrb4N9t6X7c7l?BvkG#lwqTLA|{Da13j|;4TUVToS`+5BIUo
zOF{w5fgaN9v!}q!1n#Q?vg^uR1oWsnt-j3_*VGrR&-(Qt1cDO$i?MCpN5@$_Szr}w
z_o4;w*XscL?kBMwjZDr(M8D2;$2E6ZfKKjg0Q|cHVUa_^`X3^kF=zH;H~JCIW212k
zev{u?p`#I*-OMz;G%X|}{IYHGyf?#~e3JafUuVx_@tc~v^;)Mn0ylwkxeNp3_IKDd
z#4-@lHfdkp4_`uxUPn7D$HSzx9{`oaQK*-hs1^FltZQt%CY|IOg0vt)eA(fo5(6vh
z6%Q-zlJsid)`d-t7m=3$vKERfnU%p^Z<36^hZ2NlD{*uqshR;P(bpR9;>LoHS=!4f
zpae4xMhyw(#cWjwhuN^T-CC|Qi?gaOKb*l{Nc~zP1$GBR5b!!<U-&SO1t^0+>+yj~
zZu^K4{!^DH-AIzAPF9v9DKT<B7uW<Re{Rki7)ww0wx8xy$Q5+R`@4;H*CS;~@h_7-
z<A#5^9;J53aXU;}W(2ovu?}e-DM`0X&rB2EC0OvV*^7!b-mW9%Nb5roOZ_!Th0IND
zO7h;TeNU&{O>%Ff$K~EM2VhmZQ8gZXr+%(dyRz)q9P@GCu)c|fsGiGROVDTg%uo5y
zm-f@~xH#j}3c39v<4NuBSl?Q!j75hKj>~;Z5`qu8olDrK^Jd?}M<ejq`~CWLSWgX1
zp8tjfe@_&m_M?a>!dqP+u$Tqa`C`%K^`IC*pCwvGqx$FGODaY7JkVQccq0MUh!KfV
zg-2mQIFQNHdWJ&Ckv=C1M&syqFlYkubWO;62!iHs_)rsCq%zawLq<$Fs8D#{e#wnC
zz+9lpm!xKwH=fE@mFyg9LC7<%_Ch&anr(ryJ7W-+YqxFlYE#1AcBa#G>A5Re1I&nB
zLco<Dw}Gvdl$vw|1BQ8!m@_{rRUWfO4O!3YROWoX+wo5NC6MS}gCj=495>n3T&^w|
zRJ@l*3WjZPJ~wea9tl+khzyJ7VM$SFxL0ea8DiwMX=aJ1AsxiM_o)u}Yc{{rkIB4h
z8npCiw1c3*^FN&zkVDeHCYg~9;w<Mu6F_{wa7`vmKn}mj1ALVGO<2$``P@=Vn9K-m
z4?<%*1Zy_CWhkaHlcmpdg7X%QQOYgU<`CfF@-G+hPI|-xo$abArWVXmJ-l4p*};Fh
z;(50lA$QvYb#k*1oW3ho3&Uw|1Z|%M#S|bh?Vn`oQ>$Ja({Ye_dbr1FlVfTToxK8(
zcZF%qr6*F=K+O)4(n`V^g-#o%8lWs@0B{h$D~v&#Uj3;lGo$;=yn}MQ3~{;pH!~zz
zp8Zq6mA|z|X6pdN9^?3LrLlp=0rfwuJy_hp+NPX@7W}MrFI2fBzAFt6c)~Usqw$j1
zkt_dLyN*u?lAO--Ci;!X_ARonYIy?LEs{2t1@?s;Ae*PMpuU>Vkz%3HUxr_`7pFAH
zZ9&W$pRrD)oYUZ`XeB}(A4bavSs=etZ;F}p=`5H#Y#wn>r|5&t5R$Y>4U-CNOVa1a
z)N!t-^Ykm0DHxIU`u0;WCw^zOIy-@&+<;d92M_5N%<RL_ca2>Ns_ePh+f!r*G6Ri;
zV;IGDAg$j#AEkPS4Cy3dz(pfKJc1l9-JL-C_Nx+=U4uncNaQv&wgJtlCgh&g+ime~
z%~GTw$#zr0a&>I^QRQ+qkEAeseix3)uht4On@*<sr9Xqsz4zmh5rf%sEGP8#(+7Tp
z-qGB@XPn=g99*{+El-Yuylb)rFV=0dDWqi`_;*?YHL~2@Qg_PCw5LF-Z}c7w8U2XT
z3HNjG52oCmRiT&HLJdlgN0f7L|3|GDUGTcYWBxj~)P6R4Wr86PX{$#2QK?UXt@X`a
zGOxn6rXZ6qt@a0AfT}do5pTC&Z2H$;ds@)<#XUx0k2R*@f3gwH-Ea2~^@GYn6zlR5
zfJ}(^Sf?F*CF$z<>dpRj-&FRCj%u^j2<tTP5_G&p@6$7p(O0}(LcnX9?9tlPa)6yB
z^9E@TB)UL_RlH4ctr5!Z7076W()H=gOT7yAwSOOIsg{d=Dj-CONT4(z|LJ)r8^bUZ
zb-i|%v9VYD-ZE1Ase7>1!mVx!p7{e8=z&!o_4Dz2(Pkl35NY_3AQ_HNN~L}R@kv!O
zAuT)lmB4@kA8)h$kxfOCG}G#{-qjWSkHFg#2?EXxzaVb11F~To+E|~VmZ=Mx7buIc
zH)dc*FOjtsTN+@SZ%S|)<WWU{@n?^^^}ds>iK3dB3*D54kcghWP{;}ZZN!iV%CpU3
zZ6&{{tT*R%r_|1No|E<OreI++2DJvFg#0Y7ceMK5wXpp?no~BAI^A}w7D?+($JsM$
z`?0J$?@#_-X1O|by&wT|Vl{H_KpGo^EvQ-;gy}N&`u$+Rd#)@oIVwFSl?>sx6Keq|
zpV8_E0++C1=OC_7m|bChk#d|2VBTRu)39)iOjp!CLvFxlpUkDT8yD9&g__y2<r8oH
z4kOck04==}C+5EZbwG;02a|W5wsK1RTK!ucK-QI-CY88R`=-+$cCWj)Rk=mwKl#ma
z3{8oPbFcaklBon-d5^U!Tmef2(6Fl8$rak8Q)@rHe2Yf_mgfoMRMNr$()dyz60v^@
zX3K~N(wtU7AULDF_S=jKn+s6g6yR)P(997b-sRGXA|9RR4*OKlY@zO~+m<QTwi1me
z%!MthCr27nMY;*ZI;N52XmnO+67xH_+UqXzL`CJ8pvh=bz$)j)My=4$wf-cel0;tR
zoK&>ezX``;`t;ZspOr^nZ2nF*So?o!0q)(x50$V0H~x}~`25S(m#wDyU=0vW;$;?$
z964MD$P&S#3SLT6OW(5(%nxJru2KTlVN;$2GnNJIFpsV(=j2tZwf05C0tY}Aw12tY
z9PdBax%o8W)R|Ec@BD>T??h@@a;%eya<h(a1~_EZyyC;In`4LfOoFatTTXwa2-%?>
z#%|axP5Prx!|W(R9wynJ<d4z<c7KtGpBi$b{~|k316L~dIr8wwKw8Op*b#q(a5044
zDgvJwjNG{Fp|B5O#Lx#=$im37@~b9<c!sfPTHnA<w$5`>%@{$5+Ri}diRVq^cN2_l
z%R<hKL2j`27(@aA2idM%NveN}6xM;8_!Vo_%sdK>D=J!rIduuK?mD^dz{j-db`LG9
zKI*=c43JN9=?T##t^R-)pGeH|4UuYVO;K)|l1G!j3u~`<pb>f3wgMVqllYo6n@Ss(
zO6I#ZnKK$Ek*ZLI5Ye1Q{a>UFz_0Q^UC#vCy=$wE+Jiw)or|s=SXX~!pE@vFmk(P|
zm&!fWuJQ^&k@zAIF{6-jgmEJhp$B)yq>fAr`n<a9^>oK;xR5`SV~Z01K`Qlk?Fx}%
z?c{3(?4sZ652c#j>s)tkFIBZKz}#Umi+s4TPFqPc?qQ8Dk1bf>Kv^NFGh;w1RJIYs
zVWFz5!~^T5KlK(0eZhYXX9|PwI&a$pX`J1TJAac}gWgBKmYmpZlDlC~Qpv;tU@VPP
zCOsBolM9Q;IpSgnlAd6!Xhk9*C{v)oNJ#_(-OZiP8QeN|H|!zs4kT$en*^h8&}I4P
z1`dC0=vb8okKBbDkUx`3bIPZpj{P-B<!k&l+aul(fTwR#C$@jpfhK<NR$6@0`pDo<
zWAga;*w7(sex@@;&>hjNkU!^XFMkFEo0YFKz&d{$cZRp^-jks+l~<pF$5A4CTt{?H
z11gO;U90KX;jr!?tW0=REJ@Q!$~#f$T@Tw=?c4T~@sc)-Ky1>{zUz<1DnsSTfTfbB
z65xtSYIpK{<Sl>f7Dzotsi*iTmv1Sc-dCWCvPDUNhRnORsh1{JQ1cpgln0kRHVEm)
zm{U3D5rcRGk$wzaQX*K07ePL<seOdiARRherb}AK%45wRm~%H4gg*uvVa*p%D=@Gw
z<c6M9qjzoNOi&Ru5*u9e0h*CMoh{*}%Lwc><#T{kKnZ`|V5HjN(S;gKDjV$6I7m};
z8%$wZU(ypv90Z(iC`pYw0#-lLYhK4OHk)#Q`q%8L$<(LR`wA80k$G?hMbjXl+FPLH
zk2z@b^dz7GJu7$OyEcjGluTDB^-de4jls(j-z8Mo(AV`zD@_+8UveK(AR!BIWm0&x
z+)C*HP|trF<bsDQh<MU~ZJ?MZ4Ay@-OG`?yyhkb~6nHn#Sghlx({`Ip)PK6^O}fg>
zl|x<iwvIVYt7{5s0{7P}(BR_HsH$2%aubBYgB&mEQZ=9*b<VP6nbc@g4jODd<LFbk
z7#wjtFJWrdtE{S<V)e`f?6Hh47+bGum*O?$=hlCCBqz_7uIDtCw4uh+NFq-TMvcbw
zVvSg~&>;l)Ic)eA;OR+&Oe0v4A_rS+2c8Bf7#PrjsG;{!l^C=7laEhbsB)eLKk&#w
z_g(=g>*JYC1)Pa8BCPYw4#aSB#7Mg+q(yNbzcWo(h9<C!meK^??n#q*o+hS?Vwx28
z@w<P~<W)m!prDvd<oMhGRQiUs9%04B9JN0J=jBuC$$c*ZFt77MF{0C{8~Z=60ohqH
zHqsyjSENZ9)bm!>u=Rb-;Ids(Jitder@Yn;f~Y~qYIpjs^S0i-y=sCL&4d=h<w74j
zYnFVT3OBuZ0@@B&78vZ&TAHfuxt0~Vs_1_l*jZ{wHc!DupjEvk#nA2l6g&Vc_zlV0
zO6wvMOs9a`zi2)7k_XjT@5$P|iHhE5HFI5n;N%etS}3hv-%MiCwO}Nv0xt(I0YCES
zUg4bu{!Ci_8c?H>K9jaz)Xj70?nSUau?oMjvuC1RnJN!v4`hS12VFZexz%cs&&Yqv
z&s!~NzC-w&QD@tOE>ZcgH?HTog3YA-ECV<B_KdtC0Eb-hXl6pwLE?lFdvG~kXb%S+
z5Z=?064DLkZs5jDcczxdfC?!+Bc3dlaL$qsSB6zERVHuD?W`GXHMK{h@w;LF?)u#%
z7m%)9JlL5s3kUDI<IeWESHfr!(Qtq1#!M61@;h9sS6ROUsn>}PqUA~EvL5|`8oR;e
zrZXOPFGlJ#R*=UfjnVYN((w@k>gqzrO45yBXA9{<E3qRiRc=ZDRQbdFC#Az#qOW2~
z%T@BPKqZFDNtl3JOY|{pGOb$$$)%#GF-rnRZBXW1GzTzq1(G44J<ww~X$^lcxnGxw
z*4uT&d0YnZBtL*(Gv!Ltfr8g|ZKxx;p;NJmBEMqZ={c#4<$o)+y*ju6&0Sj0Aq86z
zbbVF6->v|jCbzm-^5+2VKN%VF=b)L%(BIKGgXnY43!->VDtISy3Be5WWyhdyXUy=7
z`b~u$&|sxn<skBi=&DILz?6Rj1wj`uCwR0~vwE~xH3tyef)K?ORxsE+&ph|wr-|}W
zZd!N9Q^x_1S#IR$JK(Xp0Ah_1zt%5u5UJ-<aeR^zRN<sBOdSz`D0FYpv4BpX@1K*u
zz<>X`7ggXBn<zEqKh(g~A$;KyQlgPKOw1y8s%>k$2gInT8>e&^)IWb_`L9zyKlb89
zTS|rkh<lUa2MxBC{-e=oke_zmNU~#ySdigs^>47T%0{mT$mncYJj%jxt#N@h%G7_H
z-JIW$ic#v#OQr4=Zs1xD!@0(iKbq0ameMkrDmzPOY?3bQ`P91T0EMi;%w`y(61z~V
zPAxP`rXj$m3AS}n)>wZdMQ*fj$PYg$inKk?Ita6sOVJ=>tm*Fah}Fp769HaQhCVL8
zVSLcw1=VgY>NtR(zCc$C8Hh<fhD#D0NmBXui6-nfkd&EfM3}iHryaB0%`GN+Ht>T1
zji}FJ76}M(gOwLo1)1^C)pwn!FpczhMgCCNwbDgX(+X>?T-|@&Ug&V{AFQMJUr9wr
zC%okedi>t<4|p4l!Bf7LsM}3a3P2pUfRn74t2|V>4a35k{+-QYb)(K){vzdzqK-78
zX|PB<8c7+UhpZC2oJJ)*oX_EU1&6rg?Fvy6CHUf5FPW~$6q;FEgHT(8+!9>j!|p)6
z8I-3Yk5Dr}<F0=W;si5y0udU=kvmQF*5wL&SPS=o1**rL#?W&`Trz@cIt0mB)n^)k
zMqdgBF0?-t1Or4M;t*tyI}Kn2LSXw4P*{BYAbbc)Fc-<Bp&ds3)0erJf$lVpZzUPF
z4+E(698;n8-q@YN8c1)L%=~Nyv0)7FToLm{MEw%%m->Hwigm~$DOM#8>06DqY=BGv
zxYjaEU(-ih=H?v@bOVMr^aHtZgA)9F`k@Yo-WofMA6A4_A;w@!xB>iIaV(#g&<goj
zuuTj+f}qF}jPPZO(9CE{0ed8PrJT}~uJ5{+D%cXPNp~GG<AG4;bbL;j2L&boUDZI&
zGIB;LGAw^SRu{%LP#6EncvB$Y_1kXeyUFccuQ&O&-MfQSx9VSl#Pj}I{d%ok_x9U%
z53@TucKdFC*B*^spNW|I;qhOFok6dC(V2YL9lwM2e?3VdwtKxk_Np?5dUrRslZ#<T
zJ2oH~<0$8K8ntf*y$;q>>5Q$MJfaM;b5gzi{(^su=?AxJPm?tx=cGE0T)26KM~)yf
z8pcV)Na)V)>rh6)A#(q%^Eu?rFwu<VplYT(hp3TQLU3GF=d4EDnECE6ax<miWrw3*
z$W5w|kgj}v>8jFooXCA(Q9WXCyM+TGrz}`NoJkVIqLD#9UMBuDpssgLs;<9i#`J^R
z2!nq`rjf^~+)LYm>s!qxG;saK!kuT@&Rvi7)L_m@HQSlgaImz0HCWB!JSFj#rgKtt
zn9s8`))}t1n<hdxx}-5pyJ$GmOtT>Ihx}2Tlh+W?XTMVUuwrcD>(YwtzZs4heLos^
zZYHB~dwe&V4Entu6fjA%BR+4nTBdccd(nTng(`G5Lyf;5bh4p_`nkJ>GIO2Fb5czL
z2tH&^W&rwm-}(NWRPWiU@a;wa=H~9UJ63J#Gw%CI;Ks$R$HQ*Br&`95OTEHYmz{4r
zz5bvxggJU(9uHYmXBah5_(exjWiafHItn<Gf;fy^!HTi&_3z}!XC6<AM~%t&=cIp%
zK|Y0T?rz`T_P@IY3f>3&F{oONGBOq?v3Mr>@6Sn<-xv0vWR+YFD4mK&|F=PR2r~)g
z!%F7yraKySZ?Dfu71G6nMJcwu_S;Uc7+H%~&PnxdBjW(ioRjK%wjx870$$qCVjL82
zCA?v=&gOROjB`$^m-@$Y*cRtNF7$s!K2i*HPO2BBoTNGEoK#2Uyd*i`oK(Lpo#ZON
z$4WBZYD+`SD(9ry-M}@5S>!M`@Qq=Yb5gxg|14~$7eRi?Z8j^Ha5>2}yt}<cZdHe(
z)$Dre4+g;TBIaR;ouq&-`xhfCh!i(s>(!Q%g(?I!R}DB_U^^|l^`+4Q)H{C(mb^)!
zL+Z7zNTmybr&&WO?Dy^K&h6NSeVV>BxprWsRv~S#TEi4X`QPsCRUZnkK^k6-RH5po
z{Kr*$+=kj4{j00$Pr0)vwWW;4{b5HJKX%2nG@RSB*nMDC?M3Ni)9M^ogr0JIsB&38
z3lgyB^?B6jZXgG<Mt%f1WD9@x0c-!TSS8@7n?=D8z`|u0y)KD4)J_8$K>;)Q|3HDs
zuyft{8+k*TKmGt`O+Ws`KCoF5v(eAqIe|===HhE}d=*h2qY0n@D`d7?_fZlIKQI+p
zWQSM7{>^029=2~JY3eUq!p!&G?YP@Z-v#{9yt--sO{#T+epgPYZgGEFEx_cxdo|Kg
zqGpg+BdJ98Iu}ZRtU^%%2n{fOKr77jpA3c_EQDH}Ozz#em`t+GhW-9{0<v7TdB=U0
zeSg#bn@;6diT9^1{b-!K!JHFFhk#UN^||D`$)G>D8%)Oi0XmxO#j7unE8IeqXBLE^
zJ1dr}GY%n*=cEedbpC%L;)n-}zYdvL(#ZKsQ~iw*d2DvioEnLk3dlew64Vf%(L^xv
zV-XfhtnumSytiX2h@VI+T9A+n;Z8kvLfFrVl(?WMqaEewlEBpSRG>$2FB*lNTqa<2
zYs}nWQB!qQe7cg>4U1eRF%}+wWRa;Ih#@ipPhv%*bfcz@Gl75ZH&eRpIAkcBZK1Vn
zM+3rwSUIdT-5H%NQ=-cr716*4SUmRKC(bTkuBHT?0*b&Uz_X|u7`|~E`uqVSEOqQ0
z;5udC`Y6ZM%oB9~)M@(5G$PHv;{O))qKR=mxFcP;6&P}qe=}mS6xzgLcu712e$v?z
zqDmwxG`Rn<D#(ABiu()Ys^F2R5y2Swu^P|BBxKPf=Khb>Mo|adISDvfgo*Nkr*3=b
zrUbsasdq`Ev>s6rbcwq0jKf^OhfqGT9`UJi5T<@<Kt!FMqv$Kf+F^28T1e_rrkDgQ
zl@!lDzL1ER>d;V1Vg^x2i$d^nAxNONjhKr28TDq9MVNm`$$+KV^qI!3Y_(vDUr$ZM
zqq|r#5f?!Q6@a(_`LT)}EV+n(tnSP^Z>eD9Hu33>yi>$0VZ`PvikO2}p9G0d@uUmt
zipv?BLm<dXomKlhS{1>U#MHsH<0Uggl29iS>O?~Qv8vsHfvGi)2WB)T0T1eOHi}6F
z7mq$j4#R(|5RiA0fT-9w!4xbz-v9-ZiT{&$6hXI;0FTw+&f=EoN{9Vgald+aHcQ~(
zcu>@Xq~;VV!J=PLZcQ~3FCmU5Ub2;SX#(7;?mjSYMFL2@2S#$EBDfk4xJ2F}^Ugd3
zCAFW8hhQ;1I}hatw}FQM0mCfCd;J>!VDPk|zrcUEoDA1sUp9vn!Tt!QDddncAst)9
zSqEkvO>ZKi+9nGp!VWLB>7l5AOT-m~#xaF!3}Rlx^!`Uzl#pG@NWC=&9QXp~B4rP#
z1Fd<<a1b(##T|tL0<+uGvBPaJ^BCh_c3ut;(l+2xyvuTczHp+|ih$46wF=TA+PU8`
z`w)Ml9w7IdhzYR+0(Sx;O@FK=f=zU|p-#939MIk>+3hv{JYa>Y1i9U?wW)2bbPp@r
zNmVXQ#KXv?F|!M!AUjL!0jR!gyBIgK{TB8F)$s6hCUgoBg{tN&BDHwrk@3YqH#;}g
zwj<{ASe3qr1mT5pmj<LexF9x)sw^;8W08MEQ4qHB0BT(+x*63A<15yH;!2YG4WJRA
z;KC5^qCT?G)>bkn5YtN6qaqvpAi?XR9#iJ=$3l94&l4>`nG5MzLNOPGV!3)~Agluw
z*Nvi7*QhTyY~+MIuw87MA++4dyxGGdv8)g*6v7<a(kP-w-ul3lHT+0Nm0&(zL)CwX
z4NQM#R`A;Vz=IgMLUV^<CxDs-Q-_}e6cctY$4+6hTdDeKFfdDQORg^J2YfQXB&uvt
z<D-qF!YyLWaLP;)gfACQk<G}i?=we=7H?J9i&!Qx#-iXo48<gDV2M;z65#Ao&YLGq
zeLhb~2ns>rb_80HU_oq3FhQnRtipfmQX^N91~nd=*YG8x2ZJl>M{lS_t_j6^5%Z}F
zYa5*t#V*)pQ*I{_R-x8)xAAn(l&8j9jI?i0Uv4w$b#AZ6=}kqSzxvvW^!~0tyv(;a
zZJn7m!#>suD}th$lwR3l`x4Pt2&yw2K<apzjMs4384dckqYk*ZEOcId`TBp0&oM}T
zx{6u$Bh~%Q9aKDn8aTt7T)cWgd%NMJKNw?dzwLd-<_hln&i9g3=-Z`U%%G^M!#oy4
z6+S28A=YM0f*Hl%A{Kgd#;Q81OW&QR#Xx%XPSc}P<|!}UT!k#!QF$P0bY_6g22gOC
zu+&wVbJ+{`xD}4!)0k9WynKK8`R8AKRn^4^dUvC7XE+(OuRG}tKgQ#@{(1uC3sfWQ
zrUzGM8Hu4{R%YBw{6O{Yv0xD|iBwY|Q;Nmr7#zzcnJP0T;vTC!angbtZ+=eP2kNQ%
z+2%A$!PRc^&UiBHTu45?8uo8eudKSzG0(ZLPtVLa-?fMBi*aW-nv8#kcefYqapzL|
z*k?-`(HVqv={a?(xrvM@%wz0&%%nu=!rmAm2n;~_qZ{2L-bDAdJ?h-F2f8Y2j;7#a
z%T&#nM@$+!R2ZLkr!yI~+atrWm=9+cH-S1IZ=Ur5kR}>2o7%3ke_vp6N0nBq>@4%m
z<y+EM*Hbq>1%gL}{IGwZE>%T8pBcIY`7P$XrzOi~Ndy7Hnd*A3$dX6xS0MM+5(G&C
zrM4V>eVCz^W%t6Rj0}npGKcsyfc-?$5U%ajoxdSpG)@~|HBMhQ&RS<LTVI}?o__WE
z<?EM?1^r|s={hWk-MP*{gx{bTkKRI2Fo1ev^4s0TQo9mePa1!hN}9n%z48kvJVoA+
zUw<VHbs>I3nnVpa7t_BCAUgY9dnf___S<^rTG(3sYhN|`B~&|oy@l*veX|<|(3$S}
z6HxaZ$Eyr+VQHff46Y<_e@+-&+O(#&Lfr>=6D5JrH=CFO5Ljz+4$yBf`K_ixx-b_`
zq!)fD(I!;joI`(R+z)vGF=0}}!cu_|gHSe2&uqyF&r4;4>{6G8L~BZw&BTiM5RZGV
zTfcxY{N=@88-FoM!(R=kcCfN6RM}GKq!qpVz(kOSmz;SBdaKHIttu){ej*V6Da!_O
z&*ZK)OJesy=OrJr#-dS6KZk#u>VKS7PtqaY_Q#!bC;@+6#oGY1v0Nqpj?E`3<8Y$h
zCy`gJNy9+dXJ)Xvo~P2mc?Qv%Nl{RZ<#4h?(Xq@x9Cght%)n=<684!+jmT!XnMoj@
zk*XO$?l}h`s5sHKw?PQXUK?bD9)9_UHI|Y`%K?~3X+fJy!juq&`bKE(q*oOHj(J+A
zIJN`AL#%&eqVH$WxB>-do(t@Z(snzN5-&*JR^C83s7}1ttuLXh6zp+Otxe;$r0aOC
z<7SZ3#~%=+TDPlYZzdiF=BQ*(VE1=z#5A2jRaGP62}Iv*hdO2PBV$2EMB|`JIJuDE
zkmd=*Mt={KvoeLFwqs$5Dq=DP8f3&+4v}RXhm(JhM{(648c}}&+GCD?vxp{P$Rc$Y
ztYqO~`-U950U8}A=%jIXz!Y!Mo6#`T+a2|J62zEw3f@v6gj|<ePHu;)3UeqAl(|fT
zgQ!Y;b#=(b=T0zEsh?J0bOFbq8X_&iWPN?F5lONbtqUf_2PosJ=KJ;FPLN}|19?mw
z>U4iaZoj?hogg)o;Fe~&u4=nGam*g2q%_#lH3I3z$|+YPH@zBR@vL#O1F3rHRpqAI
zvYam%X0}LOB6gwuSf5wSsp~=Ii5Y!h)QZHG?1s!oJ;Ap_gt8ATU5#=fg|V3E4)k1}
zn>$7E^59f7YwZ%h1kBhD(l6yiJQ!4!lBR!*`0fI^0-~AOBBIVN0C967xf>dx9H5O^
z+VMZjRtvg9Lre8H>0Xw;%wkR6q;JwKBlBzVke~^+Fv5<!A@x)9GaT2at@7NWy(Pu{
zZ&8A=#7E<n#g9C?Z@g=(Qxd5d>kc!+`Bd66_?C|{sxnrd!jdK`X#uOJS%D6Ca-n}q
zALVputQ0SI_s~-zL?Emr3~rULL1m{qC)9X5Q|5qGuJgUIuDQes;&*DQ1`M0e*-RZR
zt1v!?9J>uB1zL$G^hBz$s^U9QSMckTUZaMk{^}`%(0%3*_P_$U3bY@Tqw5(40q{VQ
z5;!(G1Fj=)2&%lAfbdFw2tS|bH7S38ZrNY7^slFdzn*1({banMxKruCQcttb1H0y|
zsgYhYfG%2GW!_4uDy|g#X>*eq>qdB$tZY*wpM3^&`0O(YPHKe{H?-E%|N0fG7G(s)
zZzZU~*_SGsFXyzH1E=&H_!Zi|Azz(-b*lSSKkc`I8Fk=_T5Z`Xa#Z3dVHJOkj6`zu
zwd5lGJ7}74H^}6kttNBVV^zbU>cxyjv3jG0sLq;%W{F^+!wE|y*}v^IkUPNuOEZuw
zSKanzyCX)U9tk7&fyRuyXDd@OPW~>@Mehbszo9RC(B?-CQnkD}feV$LO#5Su+ZKe*
z<(_fcA}dBCaiVl!0F@SndT@WK3QO>P8aS2_%tICk0k^Y}dcYp<*@{Gho}aZ|eF;C1
zI(jqeA6~b<f}@BRawDrdbS22k&tJDl{hqCO5|ewjYJ|)ub@_+HRsN-V%1#_^7TGD&
zq8pM8(Z?AlQ2?m7VRh6mco0Y2tGA_wTJK|^Hn1~ZUVy>{VoxG2gl>N^Wa=*K5#Hv0
zl39jE5d+Hw`vk!bAWc1Cu$eCU!%;(_K7pSmDqMWuMKB%@U=#{P%|h=P3vom<9t7yY
z7KD2412eXgIyVB10uZ@pOkyM3q-?$ZW^V)~GHv+SELAAgMT3kC!E{Y5!^_DMuCBpL
zFKOU3c|_i`Xv!ikaut7ra28T;l8MX7!w(!?Y)ej;*;-v&TUM2c>}x%Ak^VDvo%g8@
zY5=KKk#8yzi1rapS13lD2@J-v^DK1`5YrJCsj&!#6KIvN(Wd_Csu3^MRKv4$K|19R
z47PTtc<hR$b?FR<mm0hQamE}sRs|vS_mw6OV;mr4x;xDo59WXPPpGtA(FGzCWULWH
zHmiCw?NHs7roq8?#No5VXF-g%K8?+lObC|3S8zuPlzl&IoHYRkqCK&Qs7?`%Nb$S9
zSQ4`k<QOgo@V(~B@x?%GWI9R<hauU`D*41BWHD)0GSIJFELmP%#|>N=xbrj&PuYw?
z-Vn(^YN6%c?7e@|a6lV&MRl%UHZJQ>01YOyg|1^?v<H^Gf8s#acE)k!E*2~z|8?^X
zsyqTBMJyfU7@P-b39gfxDV3u(_?%*b{;N5ifrT7n2Tz&+h1?qTeIB?me<IS`5Pks(
z&#DWfTD4k|qYB>aHJ}lTZ}9US#{`&xKh0*UO+y5Ly9|F5RhpYYe>iU6j?W3X1UTl#
z9q7ciPR#v5%5p;GL)s<)N+B)37uI+Jo*okk^h#PzQ#V*Z#F|i2$RWpqvCP`X-q69P
zBCV9$Ju@5jD*vk0dYPZCCrbfq&I(0=9_Y^rOYkbqJZ|u20+(#6yTh`$W!^s#w{Ikj
zkp!V}Qx$)w@nV0ud&jPCiF-_WE9wxxXmmwKO^Jrs)y$anI7^};+bujkrC#c&;88r`
zfgIKA*RSRJDQ~dXu&)7(@(are=?Ce!;h;nHU~YI)_rd|LvQ-|DWU6`N_3PI!3ouO^
zd<3S+G{ZeTIGtPC_?F-Y=Xg0RU#(-g*6iuH0&ahKgh9nJL79(i3V%>jjmjR1b}6lU
z=;Z=^35%fg{hr%fdPpEK%%H4R!FnvP_!<>f?f-!jQ(YHd$ytbWHo^+vp}+$1Q!by@
zbgSYvPtdWx13<8aD==oHedVn8Ry7mpxgiW%q*ui`84s*fP>!p{iBKhfCg9Z|FFre2
zi~E1o)C2V$076rBKI^KOp9*eN*|=hGxq+wYFE9QIK9Q=5W<5$>N9%;MoE>MWGihVH
zmq+CkqV`Euesng?>?1?e64HDoJdX*W`bvgn@`r+!xze5Iy~x2zpI~H=D)l)Va*GDJ
zpn-}OffF`7%l^Br1OtA^AoLP(niAJ|p|yV_S&_Wx*R$-e>%La4=!<+NnIVtfF|2xh
zs@Avmt$^1}3l~WZ%^c?RG8=&nZB4N=p*%4$9->rnh-tq{W3$;AXi?IRydj^ze*HQn
zOG%5*QxcW5_`()M0^%ri%^W^gXT1=J8sJJ-QLGUS#9Wa_e=|`{;Nmi4Bz!X8>4<;L
zlE{r$*nuh+P~a+1PO(X@?C_2PPWRGK9kjDh;4tAuX&14%B34Oy*@8!UzlU&SprMk)
z+1LA`h<&s(Fc85K@F{vXstlBl<5dBT5;flqCi>@zil5vUvl}-UC=fk_klO)`XXLnd
z*&fu4>qniA=BE`Rk4g7ZV8PE9=6io{RkxZlN5`0Jr!Eyr0BOf&W!Smtk2{mQQD;~I
zk!l>*a*NeR8@ZVUeZ4_$@O(Hc)KZydY|tV<feJT5M~)IIu-?>hrJ+c+YZUI>ON=Kh
zZz)~&r3_aw&?E^wxdW!qj6*EFRLf|{ODf2ev4BiHKD$@$-?<yHN9uW`eS3ddN(+5Z
zne`?Bm;w@;J7d%N!021tz^nyfa+E%D^&*>f6tu!cytPMrG0&n^C}#;SdtTBQPH(M~
z*>#3X0%pEa%m=V4@4L61ardG<dDp(Z9KCD5htTc}p*HiO>>A?{N+}IKPfzd^p9X0Y
zRhflwX~{$4;VcF}tXR@}#7=*XFPG8~vA?5#IiHUJcghwLZ(@K>BtYe`zq50#)4J7j
zZaEep`&;vFq8EK8$3Qel7li;`30u%UJ=0-x_k%wAto$G4pioykL3UZZWPa*3FnE-7
zO^($qy6SwkbOLGsE={76eY=8i-;HDDpu->ufO#fDG3_L!iP6|Mw%LDkP23?Y{kN%Z
zZe(*i6B3LC`=kJY3T^5VsZC<n=uXwmYYUyGFng7nuGNduQA(tMD@PB)yEPTA4JyWo
zo<SH>Aso3pa2KGF$&W#P(W|ON)~1p3a@Msj$D?pb1B~&L9Zrxi>EN)leI=A6HpZxH
zDRl>MP&jSuNGV$DQ$~LsWL8nM@fo=@?DsmOthi8W>XzwMI=0k!u@_9J=GL7pRM}nb
zBH$5o8qdKEh+4`KJ8ghZ+PF55Xw%*WleLIw5T|2A0zHK(t|cJN6GH%F@kB{C>0WhF
z5*(*yjFX5x@OyQyP}zj*LvW}j>~csYfu12rY#$D@w5yujcq)INRV*YZRQK?tOdmvS
z#vlovTKQx;W~K6P6@a8Okc8Ta9#q1&3Kgk*R{OU(=M@ECq#fw%&nxn^I@rYkyQ!xN
z)F{t2@T>~V+RC~d&*-Y9bF+`E10aa``V2pTlZF7Ql$FYQN_puMSaBMgoH=(l>`5ja
zQm6?!?2N{wJ?MWn2<bp9r9M|oFIE4%^<}HMHj65#RDl`kB3&=^_Sw*bZ9uwu)X;u~
zUw@U`#y$$B0+iZ|2(a@ZmSg$tx6NJdtIlrg?blxk^90+eUlurpc`7=8OkYT-0?RVQ
z#6Z-5>Kl01uJznVZPkO$YPnBiYj^$R+2%>*%skIDq`-gFB<PXlsC}afG5c-+#lvGx
zmfS;1a}_Wr#WI53NXi+VE!ji^dP6>MZK7hn_45q-LPEV!K+O^EGW8wZ4ZG=uGVqOY
zNgyjhS_~#O%eE>kUkTsw#X#;D-N8k}9N+8cHCLG6eK&B>lc&?6<D$-VViCqn(pV+j
zt3X+exLtp-!4;~MIHoPFflPIgj;el;Rxz-uL~tC4^0Qk3RV1E;=gp>x$36e*?5mfV
zSMU0x@uWL2FN!*|3QI`j3%YT`*?F_sjQvo>x8O+Xtxf!8k28%JL{KVjFlK%@F*o`B
zwhnwh*w4d~Z3Eg0|2<M+xl)X^E&juM%cKgE-jRQ{6GilwZ^-G{t|LvqdG3*p6=X9~
zWITsWlZ8ITOK)y3T#Jn~@magFV@@h9RJzPH`H>CT4Ho%R1TtiJQJTY?OvtFzfnK*-
zuPeJ!7<-yPPkS97?m;)C)1~af9MXL%wWpmpuB5La*x0(E20}q2?g`tyLa6+No193j
zQYn9bL#5UV?jurlb|2DUG9B#`Ks_7u_h4$|l!|m`HyM!Xpi4_Zp2T4io9gdcKY-4q
z?Wej{(L@q+PdT{^L^m*zAA0C!w0uq~m@Mw`1?)~dm{%Iwd{Lx$R0$&)a;U3vRCESt
z>cWnHs+nHXi}Kt6OAx4Q0rV)qo$<h;mF|Dxoct%BlI~?qZbdclI3qY3IOGDXJzaT8
zmEy>dPm{tRp1HUDMFtHzmFpGHrquAX!%m@>8Je~p^eLN73LT{1$hiF-$h^=|Te+Wi
zT1PNz%8hCy%i82*3}na&v#D#1Z_PCX4Q=CSn;!^1nCQOJ!R3G7XL#?_SEb{VoHT#s
z4wNunn=UofV>clGIqKh{iwW<HYkbsDEs1)?qjbIDT{(eZkt$=SN?GLW%1k{U$&uRi
zZ1~1Fa<LKy7Cc43%&B2TA#5PxoYxn~@ij4FQAmD?jXEz^$Iq%`S6Gt=l+4eZ`f;CW
zdn-RFowMRmWw^6w%9PHwh15mP0X2WWsVhJaYcD^iHR-VGOyrxHRxGGAO}u**_o0L-
z;D=6o8oCa|#&IW68TKIJJQ^+3@QKG4>RL&<QWcLKSKJfy1+x!JngD3LCJ-DjGnyVh
zr4zn3mFmYmW)f;kZkS0`*=3Um{{%wD^qU``^<s}f4)s?X#SESc;uM*kMc03&^I{fB
z9>(N#6+LGhZ%ugL!~(cY>jH5dcHSUeyv=8pDE}-A9^8lra7_!IQrMe{&MP4*Ls(r0
zgT%9|VB&Ub=j4DRHKSa_++2SvH#B_*p{dp)zgXL{GC%G?>z?fXQz~*jcg6xCH94a$
zdGHg%vq5f-{F$zpCr7E;;BkK#45+8R`jp5H(tPc}A!Dp-YQ>7WffWVy$fjv@5mrEz
z7J5h@g9bTPQCa7t@@3^jMF~KBlWx1?G#Qi{H*WAQjzfi2Hi(secmiUtPtOoF`r%_y
zqaVspgQ_hCwU9>C^O#5e&ZmHtIy6h;uJAHX$@tdQV9MiQa^aPgr0##}vf%3x9AnOr
zF|NRYE&K`hKVp<4zwhreM*D6vYa(<?AV_}|fv0W5j~(JYivs3-+%Vq*j15E8*Q2fD
z1nDo_N4ps`VK;DNmwGy+h6e;J8FXYN;Sqrr6KE_ZLE>w?bzSxS@$Uw1JO+5TiLb^m
zV9}WSdyM3G%3~c!sCR#VD5P<svdr-~N6Yi^+qaPSk{NA-kZVX3gp$7@qxWvGKohAd
z*IYcEW=0#);J!-g5N{~~>fZIis`4{8)`~&^NK+W14D=q};LOS%Pp2srhZ4|^Zs1*@
zDF1K$H0SwUUsmJ(jUdNZTOKn(S){5vo&e*?F&+`gfB7-*gX({n`xb_!$WU>wzTpw_
z{kVTqgA&a4y5@MuABP{o&*QL+eY5!3_Xik+u1gS_eGEdgJVG~X>qxj#oYR2uM3_aT
z>P@Q}GU^gSrHe`{DvdtPM>6QL)}~-JDC6J&m_iXvl^Gc6jMPQMlTcOH)ajC_??Ey>
zYzN6Srs94w;{ksbgqy8Q4TgPp1_X7HLc+3upR&dnjhsgsvGrhHbr*x)W~4r9Z>8Fq
zWk*NDP1yh_lLBwsSW<B_FQE@r`~_~QFvSwmvb+rwox2DV@`kjsyqn&-QCy80N6=8E
zoUw#U<^l~=%Xhu_0sw^S07GAWfu2UkN#oe<((l!@BDQ~V1X~yio%Q<Ji_cUs?=)ye
zh0I&GRhY14LVd3M#<}qMOo`R(;f1ig%`g;ef-xHZ6gH_d`yhj0=yT?d4LJ|i+q3-J
zQ!9Eu`|8L<O6Pvh&g;@tLP)vAl>0vxC&uPXOUc*POWAKMW3TElNr0&j7Gkg=c0=){
zayp~|bP#`}tprqr1wR(-Yl6jxDyQ|=wJ&O?t%?;gGtVLB(_odAY!LEcr6UMzgSmCq
zO-IVjN@McKgK7+686FLRVo0ac&pwlrihtaG_L)i3)3nRprh&XBS41YtHIMO}Jr*Dg
ztn%H>NaD>LEb$DfK>r_m|K8ljjr5D-|NB*-<i~$UQVvN`a-2=PQR+v_vaKhQrPU=l
zd)E77fiob9)o{QaU?efwy!UURyK$M}kRo+S_BplM%37MiG#a-?qtX58+_YFSR!R$R
z7miak2<Mj%s{@iOL{9iV6N2+!Y)WqN!2BrK+FCLTzkI40QC3Na^1?YUK1~J`Ah&+X
zlLdcb2Rhc7+8&+b<b{u?ur*b4Rzy+wmrs~Y0(*CP`iQvV`NjKyRU711bvne7Ywpd8
z6Ls|@EXyZqt@rQAx^n*{T|3PRkbLCK^s^F(#ko~#a%c&aYADdc{;^F3f&=l`3@T2b
z{l7BFt6ddO^0_z9ri0SymMnXC<qb0uGC+T8ALOB(H#qb>MY=if<1K*BVcr1~HH2xQ
z4B&nAwJ@6Pvy<M%<>7g&@BW1h-=|mS2ZxQtS5n}Kf2+vj*BAC<@0cSeqHR<gfLdhk
zosiTJwh><?S~@fvh@nF7^%-5BL=zVM0;tK}uR2CBCc9kUn3dh#9RGyDcX@g2nSX!p
zkafV`on(R+J7|${_fkeNc#H;XXacZ-_oIDy*SGK1Wd;cx*zbE;77nfQ7wASn=5&{2
zQ<>*Mqnj#~S%K09RoMlng6-1kDdm(UYC0pY01C8IZs~WJhxX{kzzVieSWO?R>Dy}7
zir4q^1jw8Kl{2NXrhxq|kF2$g7EOPvzN1-AI}kR1;xyT;0!R1p><Z!q-RnNt^DzJF
z8gV_2V}BwwXw^IPgccv&J+l$;tIuU)0<)NMBX<XRx3zTQVW@zXvQxMx<=4XD=6Rr)
zB~6YHW5~EQS9t9Of5PwTJrmabQ571^E`g!Uj3`(b2DgRSgIgP}e*yE)?k9iSgn1kw
zbBAT-wK;nlY)2Lcrll$AU=BePw#u`EBf$ndPj6*v#;~Vh7uq2h@`RxHhpI?KAENM)
z!H3Ti$OQ9AY4ZUHtujsAwQ)!iR|r!`al?bN4bzzM6-exigxPUl*|zTR(Wnq3Zp03l
zYX&})3b4Ya!I{OGHAlkqiNb$_7Vrtb`zXvgQmCw6=M%OS1U=qxW6!qDY${?OBKozz
zrk9#y<QzY*d!pHu!z18c98Zud1TaU3NSb~KXPFSNb?_~AUQRs4M6(!s;rXANp<s|B
zO%7tWtA=c}FRPJE0(z{=>uXt{ozEe1Q!ssp9aTBy0d)xdnKs}!+G2lNMNnM1E(;gG
zl+VJ|>QodEj|VHIKxG$YCoV3Ti3o$+5POulI_>x@f371FA9L@@FmPzFbB|8fu+RS@
z3Pt&v5|zU7EADI8KuVO}VeAyW!Tcs4t~y>aofL9vB3#eW2s=N98%tCnb}}{6<RYr_
zHv0W$YP7+&Ec22a*&u%jg+Kb~?GAz#le?J6Z#sIs;cCU4WDH$UAqSRISb!FF3=9YC
z&D@Mb^H8S8p!2!}FyoY+&CFQk?v{Pd%{RtG%=^?Eed1}K?F?kTb8W|Tv}^xwk99gg
zqoME`fd_7-o#q!v<N|5@_FEGZYc1Y+lHnp_0daS=5o-$5LZE*mcH2(z_CJ)&-9|Ib
zc+RZI3C?J~bl;ZlL+Lg7#(K{jp~HWc^1oGtkw|=zZE7mgImUG0CzN_DL#Lk797nNK
zCYNKlf4k)b_YSA_koBS*kd5ED%9m4uq;zj|WeWeL6vd34WjxQV9Qs)B>A1x%3^%&P
z{#ONWre(#~t#E%Hg;B(~5qGAo1uw`HjTbD)d6*2IwKe;Qy1>miPv$AQNZd)oMg>m<
zq;aH^HV6eoHwF!(eJwL`nDnh0mnK!W`Qw{KgdWf??(YepkDa?0_vvE*?u>1TySE;{
zeH$+g-~~G4YMFwk5TccL9w1=o@u4MJ9W1&-bg5~e+J1k1VytsZxmuN-qul(&vx-<+
ziHFzSZtWI!jX|i*rOG^V+HaUk>;%(hl8rz^+Hk3_Sz6eA4C77+u_RLvhyXrSh#Ko`
zV`N9kAeqjPas1jR%Ro0Wc_SV&thEVBV>!0~9x{9lq?^WUQC-zxdM?|}Pg0i^1&|cf
z8`}grzH5I$s;WjH0G=4sL{nj`w&t;#X>GgPS*M<oW@jhTO<Y}vv7e)hHn{29_^|c)
zfA4N@1p5KpK?bAi)=%fX6M$A{8y})#6K+*{G%##I5xBOCw2}{OAAO(%HxoX^lf_p}
zkG}EA3}3!vpV>ZuJdd(I&p}(}TIQpECT<`xAohRQ2S5P;MW{ttUFwAKg!{Vtr@al#
zaI{$=8&TavqocNG>lS<SP3IeS^3FEWww=QFDZviIEU1e~0hzBU0$}gk*OpR+f^*m_
zgodEI$ioStdAFvbXkVV%PB#>E0dH6#@>GB{*0<6mV~pGza&6dzF72RT9}9w~3f8f@
zi%NfGes<0*xpSZv7+%p$WmQVFEO)#1r!FXcQFl|kthWGI96L<UCIgkJ(JXWtN=u$)
znhkhzjnUtuGUG+1jQ{fKdhx=Me3G7APA%@u1yP^0MgWu(wxFrJ6PezwSf)G_I~{5%
z7mW^XR@J5U|7UybEB0-Z7_rmXUs^lA$XI^>JhWd=_}wR@LpFy8^kx$c>O(6z=H{bd
za>7S~feC46EaYfxDxIi?Oy7)X8fli`oe4QkoK8jl@t9uXyN;i8eJjVa$j<cOsdgR+
zJz|R0sf4N3&@0ROgXgZ{R;MouL5mdHuU&6IzhWFImG;Xr>La4?xQT=9yF^kCpF4jG
z$WT9hJ--6I3AE)9)5qj))aFSdGD?0>X}%~htAq>RAn#Q)d#Is-uQ8nNfXhPp&muG{
z+N|80RTZmhYw1)8yq!Brm1yhWr3U+Q#hWJH$~)|n9F5TlW8gh8<z!l@8-i_tH3sSL
z&5R97<F(d_)qW${0_PMmxA=NhPFH`<s1P9-B+4<wyVoJMsMguR%z}9xNEZghz;5eo
z<J%3u583@@!zlwB-Hl57=HlThc%qmP7?lnCcA>8G;OUJ`>O};Pf!>2A`BGvu)$8*d
zvmCakg-E2vz*1GDGUtX;w)rUF(pD8IHa@LY3r0N^Q-L?<Dg<%{vTDdiLQQ{!DJaXi
z)$;6&OSl#-ma38rLR3C@g@+VtsFk7h!7z^LSbtG!!e9_O?0ua|1GiD5oOv>kz@=Js
z3~(86twQf2YvJS^dkcU!XP^TPsV5h9_I*@pl-bESb!ZugI7y84J+n`sy_`F$XO8G2
z6_|So`u(>yt;moDozYgqb}D}imzj<R1a1~M<bcI<lgC8F$g`h+ykt|A%|<kx?4;>1
zyg;jFvTG0xYzxmB%|bPtA@G(m62F;B`+>(t2;bw=_rCL%Y$`ti6au@HnE<#HnFzM^
z)8z%&7<4&>ICi{MXlt2@>M0S3;>yxfZkIiEQ#BkAPpC}hNg=ph0wjNsOKn9ryrI~@
zs3&fKGb1z6cPKB9=nibBZKi8wz+|76#>oar>vLLIk%TKYW#u&H(a#)FFk}*QnUfmq
zv%g$cR<1vg6Ao0gRzVI>j<vC<(2V$ivz*}`ce+<8=v)dM{Ku^*;wsFT=QUA6x4<Ff
zn-RSIOEwS~V_D}WzI1;I`IqSSe29s)Co+$R&hqfM9qL5pVetO1Qj<q)P|IjJm9?&i
z{o&KYpX~3Q9BR74+!&)i^~X#Oe)q(agWo;f<XA$BCdao8r<t7KsO$!7TU7*&r9rrM
z=<XFZWz1i+VJ3Pbd`?%ZD0)T8yqiknv<aSv6K>%6=)u7QLu!BME`~R26C)_H(XiOV
zHh%aZfg3vUgikMlj!%Ce(^TYv{kN=lqh!iVF(W0$&77D|P}0Zc$Rz~Uu`(B?RbgZz
zFs3FMmum%EHB1Dgb|#7gp!M(>)kKJ<(_Xj9kTu^)2LTkJAzp4MxII*Ax;V#sdK};_
z`x|t|_Mg$F<;s5!#7u!J189<E9xlZ7wS-%A>R0y##wtNByN7q{2O@SRV17KfR~zY6
zI<?lP$0{F5Q>Fq|T*eLlfiWWu8VsiA0I6G7A<1w~2|%6SP$3Asp<)aZ(MrX1_%g=1
z`rdAqnPcq-`kR=ufAYKPYx}o*U2$x!92hmzQ=Y>mvWtJ1$x=Kd**_QS#7@4eiPh2U
zNm&esGLaN<pGQY31f<2}-1WYr+a`aEp^*6$z!v)S-9BsYe%od3@4C$X`&}0z=xb#j
zHqnkx-@oUEA0iQ$8!*t1Cd7XIwPVSNJcU2pl&d$TX_p8Fk8)6m5#87@2)kFgAslIx
zVmzDcQ|y0{1r`FB!5h1K?3)di${R^n>oD&2c%$M<361`B7cxx?!L~A$cedGG<q<cX
zZ8vQG<9=RF06>g=L!(uD^_ZT%C<o_2>T@}%_cZ|rW3&nyd?Ewr7W(Mf{v)GeWK;Co
z6AzsL)NVu6MvfQI5*#TZhY!1v;ue+>T%d)eG**8Z`V4DfI_w=mQ<1#^ZQqWqhIKYC
zG=io?CrR|^$8)D<E?ARn!oCHa`LU^3gx~D$+5hH7DK7LRgH<v7HjLS2<CX<o<1<Dt
z7Dye|)6rE9MPtw@vbF4V@1&SdzXquu>#DEDt2ZkdCB_6e>eVBv9UE;FP`+<iVQ5ft
zr`~@!_bu(F@v{f-qQ|H2AE)M42`tfVNe%-X3S5<q`BaekZ0;BYsE*B>r5hD;5W!sn
zkcxIP#Z!#;aCB7OHe=BqW;2BHcOQGtHq?Q^CD#-@6_7UHWspTb^$-n&+c1qhoLQ{I
zY~iT{PHE^`xp*o`9rjMx6lrQWJkMxy;NpMvEeYLK4MTAY0%wBMY-6{(!L}w47rUg3
zw|$1?3FblxtVc#-kPA~gE8Wr1Pq{ZF5SrgUc(*+(#F;1eh^e`R6iw1Mzl+;NDij%~
z(P_eMwwIU3<SCH~<sew&5S6XV%j0byQs%{-3tJ(F9F7D~<Hl6iFtC)_n&AHddc1$V
zTMMIj37__>kt*$7dw^?rvHFOnLRDi}Rvf<ScTGMtbGQ=CTLSiJa36Lt85kz+0vfte
zci<;g2@@hvu;-8#&smv+_r6Hys*HLSBO6N6PJN%okJsx_2y!T$61whJ_x9!s3^O7)
zTZ)Cpxiy4ybFdB=F`24@7c!gSC0KuIMY^{Ec<>uEZzm+c2AEKdb)!zIV(5mP{LR?9
z_GueC+V|%ih4ni1ax#4{i}kuR{)T#TRknWziSx0SPGs=#!as3?yA=bvvAsfEYHr_2
z+d}8r<^AB_zr)Z!LRN_HK`zxKv6`?Lw4=<75VnPtT^$9>yTQT^RsXqK{j+~6t_LDd
z#=hbH$%3{6in~)F;4Gj9|9~r6h}$VJI;XIj%Ee!fNy{&;2TEbCMAuWDIODtRgitY`
zPMzoh7zNDUZqL4zETdARExrn3dh5x|0hz|HR+_h-r8=N#Jq;!FOw@Bj4>kLOF<<Rk
zfW)EhGgTP-6tRAu9dh_m+!=p%0e;+->1*tB^6yUgln*3a_TNe~rZYqw#_6W9xHEnF
zXvK!x`muWI_3*&={}tK35wH@mkS$AbhB)Gv5RJ8gM3zGcAsda&EgVwmFhgIsB<`eU
zgV+YYgF$oy4qr1Pv}pjc27jZxi2==0dqlyLq(jjh_&h_1xeUHGH==*g?hI4vD9;A<
zCD2>HFR!%E=z&jxj?d>1kiRU~fQ^q1A?Q^eATtSF%JM>`)<sZ?n6kefA(c67CtCnQ
z--d<IW9-%&o@v(hRxMqz#-<|UGqyz#(%w(o9ZH;NqEOj*I?Fs2cclJdu005%B05mS
ziE8u)`A2CbQX!2Id53?o9z9k=@GX%LyG0>^wv@|fjx|$lg<x_r5vk-xRIan}`UdL-
z57r(Wd4NQ&CeqHWP~UF1yWu7)x#YNf<a7)(6z@ey1!~B&nh5GHnOECf>6cvGVs<Ez
zl98+9#-7+K`ZPX$H$D%X1#Z00k=&7^=6wm8mUT#+;PB#yY;%9nnu!8v!?JaNQ7WIu
zU-F4t=Mj!7=thKWM6$$=?OaOW4!|n`6w`ECsA&N?<h&M)PMRJig4UL}3rX)Av7tOJ
z6P~X_ZzMb?Gcw~0;}F0%3;bCw56;+ERQ9dik-m!4PPn|zm}fG|Yw?1D7bt0j6BFXj
zeNutF$W_En6|jFQtiH<UA<-^W8jfPL$2*N+f)Nu@jy&iK4C=$+Y|y!Hb7$JJ^vLy`
zdL>i09rjmMx^+VsNglo^%OdU}bUPP#F@|f24tRP#mB&g6JP1~5ZkU->_iD*KzQ#oR
z?z6qsKij3xI-L$Hr{F$qC)nqv3C8wawBcN9mgWdq){=j@{2>q^2F2RDD>P}@_j?a-
z+s`m>HWu);;SC3If+Lk&3*$p;5q~lUAz9XddyY8OF1f!yRwcLhjOf5tLD5F!Ney+6
z<J~|wReER7Y50V$_9WqK(3|>EbOqGGK+^plPT_9Xc(;I`G1p^}GHvVu4wtc>=%y3(
z9Dlz7g06pl9K#nU7ppVdsI36c(L`C5^#z}--2&3w#NB*5!V@b${K?oM`TAy&HDneh
z!%KET8Cd7HttmI-79x*v!!p6OVY}V#$pEh33n37QzD22EA(S0W!9HLfm6v(D$GR;C
zJ4UV1KNBQ7>=r(Mjh^MnxKOz&b!82JC?SOuL-K#Uzc_RT9-GM-fb>kpBWlhQ<vbi8
z{?yrX?S)~tr5~}FE@pY+8uuY9HTts@>XwF2=B_3R<iVsU<unE1xPUpBdFh}(v=sYZ
z|9uFbIQ!lKZ%3X`mF0;rJjj~|^6ZE_1=A-)YZ2ElXbU^~b}VuMh9hVWpet1-1p^il
zN+Exhn($*UgkYQTw1CK0R4QXcO{c;y?1>?Ktn#&${Qy=#slT`jKG>Ocn$KzY_q2U}
zz#!ZfVKOL88$^aXmMw3Dn~0AZO=t?u!)1fH&NN)5RoDbSFCX6qH!UlTSlWNSa)=YF
zun_WqVh=cJE7xc`bd(FwPvDwwO1TafFH|?ODi!*FNe0#unjhDB3?MZXc^G7vy4quL
zcd9}J-d3=;cK5z@H(hxGk)dw;0GlWE7X(4ns-RWwHFEY9+fc*d2E(7X?6NF!xS5SN
zBD6@b!OWdw+^4xJCOq4~Pp<&<(>_@3V>?YZT)p;VNFjFrr?rm3$pwIYRJ~76JOxdd
z?ydcQ1#o0S*}{ZnkbH?J*CT*I-o{=`=zB~B10*@&wisoPx{!w&Bq1MUVpFq3W#uH_
z(%X<Pg>t39ONegs?dr#*AEFBeQU?*Grkgr|8VeW%n3_f9sa2wo-KxGFbZr+Vs!HSR
z4X`%BQPo}2)2$uH+&>UlLvuX3@B{pU6uu^Z1L)k&@<^@YQcl8RBR~geNjp;<0&M_T
zQB<Zq&u;ll)7%Ar2CmtpOve5YhZk;msUHxD(KU-E6W$F2$@&jZ5;4WAjW~neS8OBW
zzs&r^hnnI1C=#JHcY#jMkc#SQ1AmQ`7GlEfMpdlSh>ZUt3B<&TgS?-L3D46F_7;tQ
z*-*Ko;1SBedS<{ifv4mjuKNzg=OH6{tayrU$eNIXa8ntSGE4i@YdVEIriyo#)Y*@)
z12@z$;YJhy-zC!ijTE<!YY^0S64Ct0l8owIusd+_eR4RM=+_2Yo<fZC3BT(@YHj<b
z@7}O|_Bz581rKtS8^9KWt;6bX&~}l3z8}yv9IkelC->>#MkVWp<u>Twm!}8oMC9H_
zp(y~qw$Y*z^~lECF1OVBNbONwaKi6Sry~C#F;V(M`(d6;+!=%?3Nb1^AEuu2Lep{5
z1&X<tN^q_!5w%gUOynao#&e}lX>1SL=%d^g+DN-zeA3RulsqHXJK9v;u3{vA#oaEQ
zT~ZYN!3_GhkF`JIly@mb@or|j<`_v~x7_lqV@Fbp(M06tG1K|y-th^)yFfw@ozcxi
zM5e`WzrE>pU8n*2W+MBJ^>v+FYSmJmYk9idM*{h7@75T$+x%2zGFiuMq+Zu7PtK6W
z1DUN7Kvp;4_`6Z%7f<a&*y-|r$M6hi_79#8dY?a@ievtp+Qdl4BDvP(<lzh-I0_Hz
z;>zd9qdnSHxim$Y0~}wXilUtQ6js%Z_95I~66FIVjJVoiw|z*9?j?z>1XEmSCdBUa
zQNM<LgA}cYwG1MV4uIGRze5n^hcss)9g;S?dv$4p?Rc67Jf8I?roY{P{jSFK{dz#a
z6LMGd7bh2N3r+jmUK!96-MHtkZMU!O(slO<2kh&EzS!1AcO#@ihi8^EKOpM>_|ElW
z1-$ot2w(LXLY1?Hdpv7JZd6+bXII-y6)yeI)<*zsK67UZifZ9S^`J#(_YFAih<qe-
ztCJ)$75+qI$@>$Ls~*mO9%JW(0EBF{8x5uK4VC-q`$FC7AHJ%WL-#O(yn~(;sXGKy
zVl=$T3#i=npD>@kvUPlAJ7XwrMe*m5FQFAziHw1JlS77fwu-ff&tprUSOSZ$5eOpy
z=TZWf-vE0x=Bc{vC*?r&$=B>b6B@`Ilml@{M3#F9BV3e=gn^HLnTM}NfS|w}AB`S7
zyOFWpXjFx#UYRLEkgah<_~4IY3bDZ}d_BW0>xJP)Y9kX$yn0?jDqjE8r#4k~)@Ohs
zKbI=rU%vU61;U#|Ro$?n%r&b(KG+)cnr>!+*Se$R#T>s!XU?~RZ6R(qI(g<Q72Dp+
zA5Jn-vyHuO_w|N<9l(gKzMMvv`|EOebVk|u(Ns_&ypDrrMAG|YHa9uv69GxG+mSOk
z_ns^=6}gc^2~jW=b|6~_e7QbPpZ&LWr%CUihybt{reg}3IDY4RZ}B<KnIYKsql_~C
zu=yh&S$YH%qU*T}>9x$Y0Z>1<-fYNbGnSg%+W;&vBY#qVKx}p6?^>{8w*W${?i{(#
zyi*x;04*Q542#{$pl9rin5%!y$>*xCPP_`mbtWE>t4umtcFqNATBwQPG6Ot&FcE-L
zx&YfF=GL|&*3_s@jI~WvoF_F@)yqU-oDcSr9^+BDb$blzIKgl0{Z^s7PQO)%R(kJ4
zR*KvVq=`I#w&vPIsU6urG~$a)xWT@~BovNB)Kv1ruuG`hp~t^f$`bo;cK_6U)@0tg
zhPbX0&9<)If6&{N(N5M%lRPKv>rpV4Vsuqa#%pdoME+uT5A<X}<b5;tI#}e(fnJ6t
zb}ZbiI(KY(4~kNwC%$E9&iTVOWtkHTwgs*D1<y5qWyFG8Bf<~Eu9G^r1p9{J#bkpo
z3n4z2KDa;lu#gua!2;h{ofhnJK8W$*ZRdtJcK|oM+6m7!9RXaPq5FAA@Ohep!z6@u
zj-Z5d3#E%IO8U%rQYgD9y|=VoU7CVP+E4m}>|!YTS;$Emt)v}il;v4QY^x~&3`IEt
z;LVzUDiw6ooHj*{cER^G?yEQnVwtzRmn!%uI~D5%V=+4qP^FNwicm&5V`Z5SlkgWy
zb4k7;#kJmoI&;%fuNO3fyq%SLT#@f})&LM)M7&kHkr=D-JI`B|J&3m~tMGO#wQ=~n
zc)oN1P9;VE)p`g|K`vGW{r*$I5p14P;V{mBQaK!o!U`5he+SYgrIZ(`t!)d0KelN!
zE&Gs?Z@+4Bad_b}XD9EffWwZvdiS+lj+AQpF}mvqa)r=V-6Zfj<e+YrTD3o8Gt%=3
ztsmuwi^>*?(V1?l*w=IkgFY*WCWnzx@or1t%s!tZN;SsWMsRr9puB;wz3@D!>l@d9
za;Py^P#j2yz6@502g5yF`$Vj87c_5QA})D^ZHcb%@4QO}VlmWdNKFlvE=VLK*Rjn*
zrv7Z-O!zf8E`{<hDD(wWVpFEz#ym%x_GKT!h5Jw%LN=UrgW`HNc7#cGhNTvrMCC(-
z@8T3)5!KPiCgj%&zTh7ehKBJxiGlEDb(w<yO)*g^Yjf8A$N~}ey?q17KP2Amu&g?1
zf0V;mZSq?L(TLRSGY*S4Y}Rx!7Z0Sfc-H6ND*6Y-jNmn2Ow=h3fYlPJ{|d@{^}<I`
z;7QFF=v30wL(-Hi6$Oqmxa}5#r!AKaZ~`NLf4H!tZhN^8?dW4$*BP}F`yIgIKd0H}
z&?ISfV~AFsFiGkp|JC_1p4Ci}_RAvEPIe#WNimyRA)l#{%&m+80|U>XXKe*mD1ceC
zN`;qZ+=t%Yf4+SEJ-_;DI@G5gicPEAbXYITXf=m)@P2B_9J?Y)=IfN0Alt|uScpu2
z+;Ff<B+fE+BdU?vpL)@$cg(8`@fkXSvc9lm!3#LAZ=D=(SA%WGf}I@GSVzoFR<?PZ
z9M`o+XInctX1%i`XQ#olt;hD6WPLuBPO<rJ_uD@`TQ9(QT+cNd&iCNuMKScg@$hCn
z8-f$I_(v2?=o1Q3E>dt3<T=*P5|tx==q6K1QWh>#V3dc@Z{aRLm=v#&?H^L~D1k|M
za)C$20ielf0By@@f`gl>x0v+B9i=gj{#>iY@Xz60WHm43Xaq8pn&<t<DKDQXHHJom
zwNFuaVKRnT$G{n+*rehQVCj?6<^sQVoSjmJ$86Se7JFcUMjF9VAt7Ho6%IUqBqPCy
zoH#?{k>#Ig*rA$C&8$W4#c0IDs<BllN=&U|8k<U&29Iko-Wfb#M4Cs!K7GVUob&wp
z{*k~K)2AH?pt;saL`@ANG3174eVI$shm@2pyU6+hioM0~Ce)sF!cuA^^`Oo>C{uoD
zD_%IDkcaEw>V1!LW}+OyqnYy)3Xix-%9LYM9?jDHB*P)};E_X@Kym^mf7dY)*rl>E
z5APb-FjEQ>1PqC>7WP#$S2QokASiP-C<|@Bu|kz%2Q<wg4_mun61f`sp@s+c^#`KV
z^MvYs4!p>O27e+n_|f?W=aBILmiP@Xq$)Mja+J%VOsuLx_EFT3Erob{uz&Z7;)7N{
z%#ssFVCf9@RyLXlpiR$6e|H4C0w!p($Gd`#1$g90L}56nV3aDL<)W<l0MH5r+p68*
zf-}NY6p6?UVA2nnQHE!c>7WBgHlI)26W5q$WwC?`=mpq|E(Ln1ZJ+IRTWq)6VsBb(
zw_eaQ9qr6bG=BXR;T-=<w*HH=xBF`j4dql16v4?%4%x`C|B|fBe}4O|#eV(uzj*MO
z@qguMfPJj<7}$Rr4ttK?1NmEJ%0V7Pw1@w3(=IUaWK++QTw&rtv8HJ^|NSF}^u5&A
zVanM-dc=gQvHcXhxykl0&Xzfj_}#_rk)x6qJU2mE4|i660-`+&uCIQ^Emi8++aD>x
zX(0i0jut~p2)!Z4f9q80gcm8)1SGZL6*MK7N0G$hcNij-KI|Msx1V<xK%;gZs^4}&
z$a!IxUhomn<z(WcwWABY4tw6)F5qMRkZo%ArTu#TdT-Hu@J)6`cybN^1q3<4OY=cF
z9Ioj}6mtZ3`0s$mb2}1!prpTS>+@Mw>fP;TPqUDol&+Die=>)l%a{~6%AOQCi0nj(
zyWk)jOug`D>^cb8JB+<$N03(E2%nG`Z&Sl(s1j0zs8%{67$?u(viAxYm-o`zDg?SB
zJ2*=|5$JC8g0XzM+i`{;!PCB{642wKBG}mZLcknl2+*Wt%M1<MaYoG0g#<(DDM`(^
zG4`zFa**|WfBVr;4$_241Nhd^9{NC|sEB2UD^ZQ;{v6?-qfzljxO~FCGG}8W5-{;?
z4}c0y5Bt96eb}+=`=pTI#<Q$UuJZn}a<4<WWzTvX@2F*-2$peeLLWp)MBTG$E`>s9
zVO%4q&M1EU8}hv9<%~}yqipq3SM&0E@CE}?4>C$3e@q-k-DsB1az2p>n$qD2s>@`|
zxMoSF%9KD9>Ej4OIj#^BHM^8nQtQ%%=9hUYiVPBTSS}M#e^4f7Gd3Uy^d+~h{%DT2
zc`35g);Y)kJjpOQnP!k#C(H0k9s3XQHvDCmivR+1K$cNnV!JzLn4Jdn9NW{>P%tJ^
z6Zb2of4)TJlvTxdS#)_`xswW77dM6{V{}@!zXcu5?Hir~A~%a-B8|cAyeRXi)+_|P
zZo(qow7=p?q8-@-O4*4w%7m)~x!6G#LX~*9NBfmM>N>3KNPdLs=^8>!btPi{Oli}e
z$PrQ0|A~J6eWPFPSk)t7!*J{~>}V=DAIW-8f6?ZE)P|4nszmU@3<Nh(x<aEU01)O`
zn{t=oUZX>1iV*D-Nl&<%8#|(*@sKyAP&`ezrlkTB-~|h%V~M%f4LTHD){;RyPt|Q)
zpA`~ub<XQzYeMQ`22y3r^M-o1E45P&c)OK!oAP-CHWFJ$QbNS-L;`^FIP@d!x*>Ex
zf5Qhd^(LlNj0&C-MyJ*J{SHlP;XsVwCOR;O)$~zx_)Y8?G`Wkv9J51+xTr|dzm%ew
zv9pZlIl2)4GjsB0iVrIy26|2ytIDve^CN%V`cEL^zHmzxuZe9r^829U^yR^s6~jko
z2Q=#rf?u}-<u?j}L;>1kEF3UiwW1J>e`@73H>5n0TbE-v0wM%V6w0ud@T^Mifrxyz
z%N&IzsCwV+efN5mFFu`KT=tL7eEB(smV)XnAU%hN2Mupy2u{2EqWQy>aN}x}fZcQK
zvs4U9Fw#sbK2&oP1~yZVBm{-g2gq&F82(hmR2u+v*||v6WFm6A1RWKS&YEq!f9ZDL
zY}DF`1p7eH-CB0%&v>*uES&35Mb1vdh=Wn6Q>$iu_oR!z9Cv6<R(+J}tZBoO>k!c2
zz}~nJJk_hRiS!=C<pq4|nEXqX3lhOWz}M;yGJ4&bFX_uD-mhLcc0sL1JdLd$0}^Wd
znZB&K&ttzALWA366m0d+tV2&bfAn;nO3(4r1NzcWg3Dv4*<i&GtmLcrP&2j4MaV0$
zcJ%`DN|3H8ilHhd>>o<z+QTG+mb8bp>!8T~x#B_~@t{D3WPYQvo8WR0G-4~x^Tf3R
zpkw+2ne$@S$6D8D#s~ZLJNWp&;oEvU%G~PxJD@?3vxnZX$L1*>2!8Jte`?|M`-img
zLYUL3zQ<rCa^qmNAoBGu$FO8@CP4~y5w~dL>u#4MGJP4c>LkELSzsIq*lZyw&IW4(
z$h7_0=rGVT+|qDo>{!O95F+G}vh4|17^X@CnTuh*TW!!*5KFH<PVIH<X>L8k#I9J;
z<^zTsIttg+{aqE-UzJBdf98#)M^R=jv%eE09{d}Kl$q$m`@WhQIiZX@Yc1t66Oixh
zG$v4!Vh-(_c%izyYG_|Ql8pnU&An`-Qky~!N_(V$#ZL7{&({|M@59GcA<$51#TCC^
zb7UxZSoNoYK#hkfFL;&-r<n@75L~8inC|qx?}Lcfn(_3tj~}jVf1AE;ZN${I+iC^A
zQh2dWg(v*Z)p-HmHtb(hObODob>S<7g;;mzI)iTkrXk+AY(wG1CsM>x$}t-Q<&*2M
zpLixylrdWyyBqC|Z@%8xjyeNimgu8C<-uF8M}Csx_A?SV#_yleg5NtL6Xg*&?oA7I
zV^6Hi%%-9<C%E)Kf3wllfav0~!>6+2KiFsZ@&#k_uU5OmIO_Dyj?U<-&V{L@wkHP5
zBAaJxY|K=@-Pu77I#TWMskDFXXnVlW6^_dygDcPY&y~R{kjJZY%%HVK`8YFC4Sk7P
zb}bNhm-xCCvzSfzb4@mX6tlJ1{87x7u=xy=&nI30#0v*Be=+n)(!<4EltSMpVZqBn
zG96@!r(kCB=^5bl`gePdCt#^Ff4euo|7$rZGsAPCO6?C+!Ji3G57E7#!aDe@qb(S%
zWi6)ikO-yf^KQ$=-cS=hV?5Jvjp&>L1~a0jRaqngJ=pQB#>@ztx*Qm;uY;{PnW1fI
z(}DFuRyw?_e*<c^Upw_~?OS$4(a+0C-_lz>TDj7>=RoCiIk^NHu?WV11FH=A_#l_;
zP4gQ{wc>5(wlraU;{~|75k-M%wg)q2crg+Ndm_r=DMp3Rx{oxlU2w)F<W$Iwu)NGe
z8hr>9FM!|&$f15$(J#+<@z0Vn0_X~~s1?Z(-%~93e-Mb!CXT4yCYaFqDesVI@E#je
z!ng#xG$sRX@DAmg53hL#{*3z8c5cI)6=Npg!*}+>M&10DOM`%>TRv5fWfktkJ@bV~
zgtP}Q5H7%sGvZ>4D3dU<X=yqH($|6e`0*ON|IDSSV3D50Fsxe>nPt+m?h~|3RhGG2
zA+8mHfBC?xEf?9f1GlvoYcPDKvaD`Pq3oF+IXK~lXKLg`3EbnLDDjZa9mJq0gb_JF
z+@ySFrN`bb0N<`ucGXQV0<1W9G~QbhE5b@G{T{u7_9Fbc1x@9nQPD5dt;67h<L<)7
z)=NL2t-aBxI9Io8q4h2M99z0u#rs;;SXvE>e@8Sf^}q(w+IdLh{HN5g3LMxoC^?rB
zyudE-(%Rdkot{IEF>cq^tkiTbER2I?h2(siZ5b&Fy=}!TszS8td_pF?#Pn{7aAzD+
zVQit1+4&?+crJ3owo<9Dx7mPesXM?dIb;{0W6PW@Q=*t?I+Dr4n~M@Y<%u*iOwh=U
zf3UBL>&S&M+_Rt$b>{FbhH%q9lsV>pwhff=T?HV4eh*NecIW${^F5l8@KE(b=X)Q#
z^@HzJ%BAH$`pO;;RPK>Shw?^1Qxn)tu|YDvBVk{$&6|QxHu2W^<JlG2_uWhPj=g0k
z++&5ix3)9s)Av$edyFV}NgfWH>@7R<fBmn+ys%{wm8C?$?$U5qk*R#twgV6sMg`jL
z3bp|r%783w=(6Fn-Q$S2AwmL1y5(=rT%a{F5O?ucl}@4amSrA^wg}|h<@7~|jTUn^
zuu*K`U>1BoLO)^xG`QMNVsc<Zr3l*)a%ao8oMHznB%cu{4LAG|3jB*GZiGBje=7JE
zE{ZvD1g&q?>h~Q0^w0oF93x%`Ejp>|`N(JtbS2j``M?-{O|JNm$G$}i`^K(UJ1#Q5
zcDx*mIARe}bl5Y1E!Cz<6I_YppOi_bm*KK4ge_*|4W&OLOSa`xm7_65Jy?1zhSqI%
zpfWGKT9M-pEGK0(a+!}RGldQmfBxq!`y1P6?{2if;@j!4jn5nG?`#V_q}^9zIU4st
zf>;5viC<B9$V2#dfMZNVZu~cyx{W`%_nQ~h$PouS?@5qVQ`{hc0KpB|xlyahg&5Cq
zO~8gmAp;%u^8(s<37{2|qg?qI6qHi1pz+F|Ox&37dMhU<qU~qLB(eLze;hE$<=izL
zrg<p`8eBpmzYn8O2?rsRspQ(OVA|p=EtuH2FglUrlGmomA!E;KN~@J6O~TIp6%s_k
zo=mfP-SQpmBj}<PRggvB+xOHScOtN@spPTV-RssYG0!mUKb`kZV9+bV#y>@8mdR9s
z(VxHq@Y*>9RmdE-+9;CYf8*H|z?A|;O0W#!$w8>~yd}?hS;54IOj~ZP1Z~3Yb9PbK
zxp#2&zSkxc2fAZJm=lNP6ZR!chpr+pAoMUKpZRF#Bo{r}YpkeKx+yW^0;L9e&7Fbj
z3XRn*I)5Wt|DrAD?;W0H{n5146|DwG2JFpW`Nv-Y<ez3TPqH!<fA>h<_-YUMBB|>$
z$W(AwywR#*N2MQ?6TVBOhbty0-C<U{_10M{`WF+#*t8j$bP54ZE9|>BuRL13pI|{5
zW85sEh>ne&#XAf1L=@&yRwT2ZZ5_r=^F+idUgHk}*`pJ+jz9)mo~C!2l^Ugce7V`&
zh-56%G7HzjA?pmRe+_#qka;OsnH!lc^mBxt`tDU}ImgS`LU76m9ENT&#f|T}8?AWg
zIQy>q$_)+@4c)kSyKWqaLL>_HkjD;$m>c|fNPL)m<4>)FD^0@)u?VTevAmdE)RuT{
zd|U6woPAsC$W>^P5C{^61Wb@C&Vvwgfi5Xm?Ju^^zU$sYe>fggw$HxpzIe7>s&SL@
zdsHC^{s4#GJ`b`3PMa>hl^w%M3axo!Qd>naIHl<c&$1TFRo(_Nm=pvu_}=hBqALf;
zQcix(;RXQE8btV;qBTYZpRl2wLkUKASYpn(5pykh)0)C96#W;qoXCt9F(&VyZIiVK
zvz8pX=ukqDfB(rfBQLN*jLM87QHlumqSXZ+6EFqHs{sF|<u7=+1dF7@nT2=++kBvC
z;23Uo*ASFtdo~k8!(1HAnCB^Y6xbvBjVQ(d;lnk%6<KEgMQ3l3q8w5~huPxeT$~Sm
z9DDPG`o)|IK_-UP)rbeH5X&@(W(DFI^@gWV8`e@5e<FdnMEI#jfM3yInt~7{RZwD^
zWh6~Fr@N^1B6xKBsL2It#ecMle-EwVKT5@uD;4q9?^FqU@;&dJ*zMBY!u_77aH{&D
z-*u?RI-lfd?5#A|h`A=uX+;k>^{-HGIP|Z?0oerpCwBU=y1lQ@>x$(QboqR(OM1Ma
z{@4h!e`tq{LUHZd!*DQzn`XDePDvv`Nn+PGCxPMA6iX~v06X4VW_bhruLfOy{v9k%
z`=qu)pG`N1>yC<Y?w>?4W>&597gG9`Pop?}4Ck|YMXH3(Hw_y~FgBj|PEZ9z+Y0%A
z0eVJAd7#;lBfyyb7j#~ZdmLriK)pV`Zo!b>f3SVJ*dnVi5H>0#fc5V4&db{$FY?q;
z_g8(o!%m#}E9wDKmE4V*$|De6+Z0VGy6z#+BNYZ>XY<tVX`mxouERY*hkaJ{zIO4&
z-UWL`^l~OA(?Z>d3Na7g6d!*;ze5$ONt<@(s0XXlKo5hh&^yYvVX>`_!q9mrOL{jp
zfA2|jZy>!$`L;v#{mUQjQNUddO%uUEbkIa_f!ug=*usCi?w8%o7VC66Oqc}q9eXmQ
zT#RA<Sk54L*A(1{k#r|fz>djh@dapLq{CPbN#e4APiHV-V}2uAcKjy_z0#uZI*c74
zuyBB@p+#S*ACI3CjELlUl?c+DM)h_Wf4dMkikonI>t1YznGT}^+Dm8sBhHkYadg6A
zZ&?pQ+an)C;u($$HPPf{L}#@l69^|%>*h{Q6?(ttiOJm_A*L-{JB6z+KjW92Z(#gZ
zKj7F-_|Nes{46-$L~~`8!%gELEI!=?>Wdj$=WOHqaLLF*=SIz1c(SQCxbbJ{H^~ML
zHcNYua^ic8jXqiKHrd<7bso7)MCfvAoW6l-fH%)2YAVr*1auc+cQLulz%Ujwy0$L_
zm-mDMC4bt=x?bA_Af<h_qoxJ}cX#Z23`*)Q{HmgfHWz6&C@&y4Z%bZObkVTJusMsH
zX|-d!5!uDmr3rS%G4*fbcd=S+KdQuqISqZKhOgZ02Q~V+wEI|xt|(9y<yz|C|2x&9
zOjR4EG8zkA;zU?0GLI*`Rlmq`%nj3JaU*X;h<~aiXdT^Qy^K6n>^27O6B_bSXy;#n
zzAKXaj0R%NZzRHf27L*(m7oc|Wyn$ui^ugXIBF2w#!HW|EE~=iTdJtI%aE=khmmHw
zjVig-0&``ENmfqVMzvD_7>(fIJj~0JE8kCO%ZBhqAV=wUR0fb1n7)%pVRNL>Ox@<5
zeSfEO{F#l_t+>IFBL^+7o7z(hA@mpMolQXe;D!V}ursg5kZ)Fcue$F>aFNDOGh$BT
z|CbSW#{LUAMiw3ce(s%rKKlIeEn`QytG-1+8SdhudO*b^t%LrygC~bHMnDn9X>OX~
zxi5@Zhq0ffT`LBXEx?h%ZU*s({>%!wK!5E73X{HpGoxBD1`?hz;oJdwGUd>i`wX-O
z0DSYuOz+#|6sV`r=ikj~^KO%dysdT$Q6_)F->Ikwd?YpltxG}#vb{^dOo=K22DEce
zjI-7+@o}*84719mHL^OS(*W)3MrGiF2<PIZc4W6QtMob!x=vF%Cm!huT*IZ^VpXz;
z%AKc;sh^zJpDgSeUZSwoTFAD_9Q_bmbgPGVgSqnJ3>5$E|D3J<z_S&mdR=mZ=SFp_
zx}AAf)B4$KF{OJCW%XmvVp6Lf%I3~qOXkLZ4rR}mZHEFW2n^22go@v-9+#en0vAy=
z9+#>`mLHdD<QiOWShZm7+(SrB^fm%(TJ&9f?x9^hoO&9+Xu7ESoi3+{!G}BMMg$gK
z)5Z60&0RKsZ}dO8{k1!@=oaj`&YE+&tzXy;mj;LeL4Trd@Qx`51n&T+I?tF@d*<2<
zsVinv@_OM2b(!&E1W`cL*6DbrZ3z^^baLQLaIwzcC1B;bBxgF@5gF%?Rln`3fX+Vq
z4N=44`rezO<^#{eytQ!GI<l+Toh5SIq%r$anOXhEp1B}!FPb@NS>R3txGi{8kYolR
zM0l6#9Dniq+{q#wXy9I=>GCuJ{I&F=bT_`ggYz8OH&P~zm}sZ=MSKe9{%#e6C{IF2
zTjj2<C_!h#+1p{w&CTd#2l2|_E;@}{W*>0>)*v_*-NQiuUJL*2x?grTamd_V+@tT|
z4xFxCVXDJ=t6j&<wFl=w)6Lwyw{i`OO69mz=6`SKp6PbZ%%)<qLCvh5#B1O*2M%mG
z0A+933A?daZFN6eu*h~CR4G-k-C`T#bf`Dj)+e4SHLXBCg)FMuOOE>PXM_Jz7Gi^K
z_3XcFkf}jjjec!kP53V=XBV&8piHiX*#;rGF-r6*P57wP$WCo5(*5`mA%9e{qP}0Z
zm4C$7pP(3ejBl`M#J#-W_A`#Xs#;+d#E2CF@ugw2Qw3z|^mdeGmuBv#J_pD-8RIa?
zLJ_4Z4)DJoF7Ez1@K|wwwAp3=BZ-j4tz?&Cm8JxzXz;tX#1in=a0f9mNzkT|TN#--
z>2g2)$VP{mG1Npbo$=%vt4h>Fr2#h=B7gS$$R;Y!F)Fk=z6(dzeGmq7eykkvQj0#>
z!TKR}sNQ@VF5Ikq0xc!XL&zE$_7<luiTp+uDxZklEIFvUpQ9mOk)SO(S5fLxN;p!Y
z!I)C+<SL&{ROylvuTTTbM>R#{##$&dNrM(HZsY-EfNP|#^bz1$&8^s|0)P+_S$|qr
ze<KYhAY>t?yB)0i8xbqcB2Ou6FPQAYQGB)T4&#X?3~UoIvqj8pw@@*;l^R-s<u-$|
z@ag@BixAs9x0_UU5i7g<Wg+W33GO1`!hIBwr2iLU06Se}+$`~<OriHQ`GYE$K+D5h
z#w;&ycXnW(u{FQ_whO_mfzfFp^M6E6dA3<&6hpz~ja@)g1RCqMZ!n|Rmz`_C{d^{L
z0<89$7X52c3`C*a#Cz*f7*K8%d%8jp!XK$1<E0tfHAJ9PkQ@a@tm0<3^oO$0Lc`-F
z>A?Sd4{(6xiPDF=Ap864AVn2h>RQ>q7Bj;Kkp>eZZn-9IYWCH&%q1nKUVq-PYBGs~
z?|tgmO2&VXkC6PNIs$Wix#{408((1S-GYxsKvWW2yRYtN+jntvhI5L^sw+>w?xW_>
zx9>Ki$AuV4l{e^iTTYT~N2Q&}nJeE|n&0X^if7wteVK0FS6Yjt5GML)b6M#^WuniE
zD)$TchP>FYYkF1ot=kl0v43qR$PH-51Qh^#j}~qHnr$6=GIp>T9O&@YXfO+dvVH%U
zGR&%_Mf-Z9@1y(k1^ZFV*a<wc+bO%C^vzq>6TKajN&UKiJ*oHgvW7Y+kbt5A>ml?O
z>X>#(Agi6`K21t()CBVPk5nPec(VCal_vL936tbGDzhT@Mi!>zS%07QB$<yku{&x1
zjQ7cl*M3J1nUoThYg3eo-LBBv2d@#4?k3Y_mQgyPRc4L-q4OEqdvI0b_QSQ6mBxu?
zyQ|sfKGhBASFt4n&HJm?8?nkv0Vy>aIFLhf5uhCWv?W}fA2pb176=KRr#n{FUn~@G
zZKBbv5LLXG7Mk-We1FDdu8rU+X5I!x&Ra$7syaA6g7{F${e@TnU}2lRpD+5ogM-71
zi~f&?f9)T=r`rts{NnK7{O~e*y&3DfK+1=mhK8TWq)=K74TDqXs?r;j)4m6qs>*PD
z=~FHxfK1j@WTEV?N=<e_9jT+-PdrDC*;yfP>{fOx^J|wyzJIfv6_Vm}_4FLg%^ubR
z1v8mnJ5Ww{XeLVadbsWzbuF4UuSz}aV$2JXGOFf6j&g1wKb!qJj84;mebpfvCAx8k
zwa=%8`iDqNRVFvF8h=E6>wB^G@oFDUakLh1q)i`Pi&=cOseV*lzaT^waNAmeC0yu0
za|tWaMm)dJ<9|`hQg)C@xBiahpx^-f4#JpH&4D14bhT{-A=T+7Sw+dUXW19dY3AeU
z>Br;4e(&t;_~@W_d35@@e{g>I{_ykVQSbO7UjBaRqovIoMuVduY&!eiOQ4~IHw>|T
zwlm3{)2A)ekCgX@FKf6vkym52+`J_LKmnia+6e6W7Z_xi^jN}l6G7%wyX>b^f)~S>
zeK28U<s_HVjshcpsy-$!yq{yLgswR2*t$7ch14)qQZb#!bq!T9!96D#b3)QnBjIEI
z(X|7R?#P8s7WI9|UlL3UX_YGgH0wn!h;&`Tr&GZTmaB^W7~!1UHVj<2svN<Y*OFvT
z*&lrBhm96l7wi+M{XUtgTcJ&$ur-v0HgwMd9E+69rQf-K57}6b#?`MfPIpz+4?7Gp
zU{WbH1Wr66p2KnQcRW(FGKX)y^#lD39Qxj-4%8$#&lMu`XW~j%_?wujrybA(00T?U
z<;mYT@13ykTI~JN#gBVzcL|G5A9SQ#S9q=i2YjOPQQgtc2Yx}9`Hli-)i7aYrJ}h(
zYNQ+@wd}@!MX+gBFzs!+QH_QroWSwsG_)|`lwAe<&|ElCSou~LgJ3p^ex`1jv?ymq
z?7inXhSqpTlbQ2jj7M*7v_gY?mDHXvGcE-7P!;>r;q9S6AmR*r1P{gsRz&(0i%LKs
z`2h+>_hA5yx%&hA-nHh37Czf+c=o#btkao`CkViQqqPz9qXk*(8t$X%sw`sdrr;Cy
zy2b22Z(6Vo?b*NGrRHvTwQ}FI;C8Z0AGnRiUq89MhV3Jg&~6JR@*7++UHi+~;rYeU
z#U*<~=-P##q;Vm2Mo0&{C37~Bc?nL1ZB|)sQPx;)q7#)DvtBMwT^*=XP(_&Kxx&3K
z*bmHqG^LMyhRxFLjOT7^`slVMczs^=imc>_6ggxfs>0qQwg3(x$$x;X4^D36^6av^
zmRc0iEj{ivP+Nyx!8^M#a`4P>`>4~E-3}JR+&j56&3Ix@;VxgX)ZPwG)a{%l7YO3X
zBlggy4GVt?seSGwX8%CU6CahWJ0S?193Lxxa>d`8L7kgAx|3-|d5>zlpPx^2g4OPG
z0BBj=>0U734Sj5#j}#$q%)Y0w&)ziTuB&hU#5#&C5_%EG8&2OT!Pzl&XXJbqX%8L-
z37k3xGk6V`IR214e^cIB+?ENy>%+o{+Tv1m&O_5jH*$!a<a_?lc5Opx$icMnXYlWT
zg$6tK-Q`Rq(=yJSfR21~T}m(;&Nn$s1K7gga;YBT;r7a(T%<cH0c)^lC22o$FMLX_
z9?aC^cuLAiX}94Uk<DCk!qwP$xqu&V<g7FF42a)ucl-$*;JsA+*`6<g2M)*-42IG!
z5)iV!8E{|@*+Oa#^)0XEdHh{+Wb&zh$YOb2MM<J8*I>JZ^C;Yp17RRpPL<sQUDjYV
zB=6Zc^Zi(9(_uZJg!nRP$g?fI+ZZW(WDui7-N8^gm@P==eXplbtv@2g!+E2*;0g?<
zX!H%D!NFrcNDuId;}|Bx4f{nD3Y*3afSbihfzioqnw2B~Q}m7EnU8ufiav~gV<{qi
zZXNfSq3)OEym<%jhpw)U-ZKd{g`p%roG_@)s{`)T?={8F-PkX%DPhfcPajoHmSGA-
zaWpU+`J8PKX^^)YH)H5AKP8cNOljHAC4y0>_NZ#lny_!f;0***x8$t`CXPA9clq?`
zcBu2&KAX(?H!6d_mXwF0JGvZy;B1CWk&{`U|I&}20hJvms6hL2#fs66cMI6@Cf&|~
znoLV0c9v8f^>l;tx|MgstQ5H!NYf8Ve90-?uIjGK?fYA$Eakp^v-_v+3+P0<4G#OU
zvB)w$$kd=?Ce!RK`<L^MZnR5*f%Qdmk=QWx02gL^JfYtSVA=l-*5J;6JFZ17)OQ8D
z)pKxi;46v}t2DCYeL|jzlPfJg0r_PNG&t@&A3Jy%nI1%SE#j?ak9-b>Vr*{2e`?^P
z=@#YrW)4>JnNP%`ep!5R^Gsa1Kd`3tS@S9Go|!X9bGMW+ck}aH?DQ@!EqR<ut7gDi
zcaFeK#nF2QZPqwhp-dltcC2Tar-6rgxVmSm?E-FdS7<d}`#x*SJukmQ>n}yl?;CFe
zWu9-mBOXGF7by&>)Ynd1XfIV4=o;&HRTkb`?wqdhhipB-LA3Myf%*!tGN-OA8QXC>
z)GKL%w&3qQw4dI8xcFm-7C89#7+PSZX=oc6avrwN!^YM5(b9^4gEQzKQhn?r`%D~Y
z;ruq2a#HgZeI8~UCqF_ROBTC+?Uwr90@aunyMFz<pZP9c|63gRE?)mzoc1nW|N9*E
zke7d#bKb@4)ed=04u#LbOz-ClbSL{!%#PB9eX_`d@tIgcebzI!jIGF7?O7Hzkhf>d
zWlZ=8meuo&uEWHCp(FpGVEc7wR}ly1+KEo~&(Y84NO?)!&2G%kBrbl!ih7}*XF5aU
zd_Py2=$(IVK2p_!1fFTh1s1Aj$epj)9}s!)lwk$ztDWaL55wwloLySgW6}84I`27#
zu*ym2!W1}b=SK5)h^~0f9{=&=!fsUy%ny~eJx4c3)mLzT`k!}l9Z--+&xNI|GSlXR
zS)O;^H8J_D_Nd0%QC(QQbDl|wS;W|LcgP}D_uo?ipA$~c6OIHw&k$||KaUM3dQM@v
zK$BT88U9f1swPc$zIw{&s;7*tda}r>5Lbm$AToP+NbEVg_3wf*y$Z<m1LlRV>2ewF
z*#eFqpQNXMx%veOf>y@Eekw-nOL69FIHd}z^J1#B85IITvF>K^<aieUvNNiVo!RO@
zttPb73u7fF&wY`t%Y(CR2jq&0@Zg(}f6?*IZe;;W&8S3WY$CMgBlOF}u>V>ssgDm4
z62NCgIyggE1@Hld$OlKCY9?M_#{gK^oGFi*zu8!S)h0M>0t$g;r`Fr#oB{}isxaYl
z-2UYmvzx|5=8+2*F@lcD;IE~p{5J3SP3|q**xT5iuW%yszWWO6J(2k(J*d>j@7ApE
zo39%y<ahN7`Q7~${<9RNNL{_b%Bd?=?k=hkKkrB1h06Z|?+&6@F&om(tMDCTW)3>0
z%EDfMx7);prPE(%ojpo3(P&ild{nS2td?+bar|eyo4cp>xU{Kt27A{~W+KY$ZyzV3
zF!bCVwxW=*8n;@zdx?vSW6#G2nF;N%@0~(q3s9gUoRM9?lzndNltYYB7%K9_I~qnQ
zojB7X8#3~YkIQd~yQ#EmjSr0|*lw521TXY|Ho?RIDfFkb3L5R54!0umgHuzH+vXJF
zpRApWTdRy0n!nxae*G;xVC`I4ovnTMru!ZHf?qM#PWeo;*WbM9vi7x@+3~m*v(8jZ
zSlj+#d9{C0P4gY-2ZHT4zxN};_DKL|YBUlB$YCdV|MyczO<?%$*;P7#Ecm4n4n>83
zVf9snXYad8FA1cl3O49+{$c=tQMPc4jnypzI?@AjuTSAcrV#DrT8Jsd35*byY_3|S
zN;54@Kv&FRIm9@LF1`A6D)Lkm8sKtsL<GiJca;}nLKsF-$t}IjW~xLHUTV<_Ewkk&
zwqT*Ah2%zLvzA{{F3J(gI4{-BLMd~94E^L)M;{Z7{pUD~BIPDBwKB%VQ$bUthQ6qF
zg^T^DRznSO(G;7P>OkdM*>%39O{z+>?Z%D{5M!5NtPnc`nPar9^J$*SDLVXeERd;@
z#uDvMrx%x>dnbqO_r1%*jvKECv5~5gAR}%>E-4*`ZF51PphcN$^u!*DTLx>FV3`6L
z9)^Vw5ws(56Cgz)5baI3%fK<8IWAMgSx3OI7W;>nmze@9e?xX-^)Cq28Y;l6F}Q|&
z;3SNhtqIzg3Og_Zk=mx*h&ZP-&u2_(T?)cRgK1MuniB@-uc~y=a>Sju;}e++g2}2>
zY7dhL=t;t!$%$1>cy8D&FRbi$8AOnO=NIqbS4AG&&sD)hQK&-GU}O+$K7%u=Zo&K@
zsHxDaPc83`f7OT`iyM)J00vw@EQ6<*aAM3Q#%EE~v4>|HC}Y&5y6~vUkU4y_gCGW4
zOnJeLD%{zdRs^2)dsf8c!NTbzf;;o);?6+0l#|3ba)+Id9k!XN(bvf|gCzCvuGe|j
zIoSVvdU<hpxyc}CB#ubnhVd-xK+Cn^2CUW;7wKcOe}IN#(slu@4Q}i!t6gYeTCC@P
zYZ7#JO+YV(;XD2C0j<51z`+(FhES2{UG|OvxG`sCPGIezd&5j&W3J&pl|Xz_>XizQ
zJOz>Nlc~zBh=DaH?p!|W!}IggbA*M|qL2W5m#3`E#hpD>i!{Q2t<(a`*v@(_ZbTun
zTDD?2f0=SwRQLd_uR=t*J99<#Tfyn!&D>rIp}UF6X0<SY!@CZ<!qW%AF@g?Mi9{Th
zkhGs*K5<D=>?>quVZK9${6=AShK53@iKW@x;-<FEv)J?1tJ3h1XaUeZsI7<tSO`7K
zlNQqsaMyEqb$EUb9A4=lc=4JgqsV_%xNJD6f14ugbORelIo|zXFgS#owAg^Bbfw_y
zJo^0M6zV(*p~*ZP2i<HZFa!`-<rJ@l#-&N;GlM|F1DB~E<vnCTv$OM7VSO;}(dOa=
z#aQr^SxvJBxC&FG5Q&gCG|_3&Sc&M7)!rYzyZUIG@{=eAN{i446sprgjS4=Av-Ltd
zf9#Oco_O9nIJ6WFZ$yq-)6GL^q13^_45AAHIg20<DnJUcyqnrd9!a!Fn$$Yn-4)sM
z!VS+z^DD$;;*K9qEyb9zOp;P4wVsMBi%QjH)KhLTK=4PI3nLTG-oNvkyw~JxBW??6
zjL6+d$Ug47g8S@Gon83fUU#p%yW9PGe|PWo>o?zaMx4%oLE-d@VCZQKXNSX&+k_w_
zScA$D)MA3e)(%(RQovNj3Zj6U#$?}4>lX8RrTz6{rjOO=$s@XfUe9s+wy940n>~lx
zf6o<+aP80cw(aiOJDyydf+xa0c%E^82Wdy(0$NS1;1ZF*kGdZ6##JFs3xSa6e|{|R
zq!XW5D6333l2nc^T*n6#kJA$uV}n_IVu7$mpYpAF5xNr~s+^sgo(mE0mbXczeF@@q
zQ&J^7vC(<%S*8iijL=RHypSo&>ax|N(^H;xs_Vp6-|=&G-@knOmL9n&eb1MjjL%eQ
zVghH}7*XWM@M5*kI|ugg1!9H1f8Kxf{?}K3ZNHkdU#0BTr?;<8-oCo%y!z*F>{a{C
zlx@9|tyh<=SMA+z%{F^AX0JZHeRa&*?A7E|{`43}D9&aYl)}(4UMpv+v~x#lf6@mm
zPz_&vQrc`V{N0bn%f?<oc@cLeK8Xfn*@r6(#tNT5@nGCjXXvAS57v9%e>Wd^A~R`b
z`=!3WPcB`qi+!tcE?fyKbp7Lc{&(&8|MTmAtHDwF8;!uSx^0K=D<iUYqOuH<U39KV
zFK83`vc5?=4!0Oa=^mP8I^D;NsLRXQ1N#1V-*k8HDOVrx)yCT@0rwP!;OTvkpU)#S
zKFCPkzo;Nrx#NQN+kj8rf4ZuXildpT4Q48UZs%IGs-`Hn5#Ww0e_3pU^3n|UKs=%X
z+S5k6_`Kl^HkjeX-*Xgfqdo3!1RQUr4f&x_)*EcRGZ^93{{S<If;HmKh+I2ZCK2@v
zWe0Md;%#VvP61mtSaICWf2GB-O0I2>?<4rR79z5zE*87+NwjqBf8Y0tTwACEUv@h2
zHXPQ;X!*BcqQW_6d0}J++O@pkk=1dmX7wQ}^>~F39=c~lA3yc>4NHVf3uBzvV1A`_
zkg4PvCW28;h2wLRWa@x28cm+)apKY|CAN6ZGlJhq#v-{6$FStun{I&?I@Y)&OSlAp
zDrxF6O6WJ4z})XFfA7V3=KAc}PcMt;un`%f9Uu1#rlS6>7A`RXs5+MS4P4uRV1xEL
zRaNWB-tX{%Dn@ZgIS2?6*qQclQiy<AXB1Y_+1+T-Z+jbnq(+DHjT3%nk51+EC{M-R
z#v?`AWL=SVkMx@Bz$cet(a|zq&C%m~Wm;6WNwiTLmWsBRf5fU1F8=0(-`RgJ<S$}>
zuiIrO?^gXR8vOmQSNdobp&FN8N4Cb_JygWb)A%=%v~v^se~845JN0)KyeXQvRujJq
zgf9YtYQl!}0t_=5x#S##W#`0;ldp-p(5r$e<>EH#Q}+=9fL3y4T!!mHmmj?@b&1He
zh;gL;-x9zPe|8ZPf&^QZ|8A>lHh;@DD}u9KblZE~-9NQ=_u9MP^}DY-dwZQXU$^(H
zMBNPfK2W`N*E5#nUY<5=!7jOFxMRBI)$}I!?iSwi*sx{zcdPCj{)0zu9)Zr9J4pC&
z{cWW3?OJ<D_;QU6C4BUNT_t?{$gQPL=s)|*Q|&LIL1%xbO~zjv%x^FiyYgo3h9UCD
zS!U`V#N=^%39f7|!_#3=sKQg<^xj#Dg%rGiD~nj>kw?)2tA2dBa3M@wtXh|Kp#mTv
z0C$q;irgjITd<2C4Sn#1)c$?TMLMK6(m_K4RDGIOm$jh+Ei&oewT&i~ubXy>z{awD
zqDrRL>=nOSMOIh8SVvG-zkH~aZldxWBHGVbo->{S?5Sy3mlUD`A|ZslhQ^8K20`O)
z{uW4vsOvmCb@4!g_r(*31iT1tS-Ps1SE2$Se-+U^=3E?4gU6Gt5a>i-!gVY`)mF82
zbUb@YUK1_!#Au;QM~mU@`qkn2c?;ZlT8yMGI7zkG>4y)Irrcq3j$p^9A3q+Rf9{<e
zf{~v6trdmVx=Hr8mj8Y4?|*;6d}bQ*(6U{|+2%`zo3hzt6!IW!m&U!-vFC&R;7swP
ze>32@?ivl<q<j4%%2kks8Ta(g0e1We8rs&`^7{*ney4JyLj8MkcyfCF*L^$go<v?w
zIC_lYF%H5d0x>)8jkG>ro%HbP#*;D<d}n|dc|HY4pH=v~JUTi0{ISO0jk#l1IIK#;
z%8??_xTI9@GMh0|7FKr{hR`7U5xOnTe-UzJLh!^V2n9mg4IjKKA;Wokp^|H1&IM0n
zKAv*?!OtFYFJoM4!FJfW7)fo4*>g_1xh7Ybn7_ztD%F{mgVjrRG<4>Q9~2_FS)*u$
z_~K7o&)!4X73=7G8yFX@GVv@^rI%%B_;^lvG}lyeC0pFPy_-T^8JX!wj8Hrhe=6~Y
zyx19!v<)~XlCF;~y;dfm=cC9p-gp=Vj>1N<RBAXpgyVucrHJ|=By4G@x7(U1tqnPU
zHnpOrz|eZ1FLo!+P!=xk5YV%izP*^`$<h)=6lWRFbGI7rEq2*mGX1&a2W85ugEUv{
zztx~30UCE6*r-ly52wqUd4e9Je@hCS9W8$O8J&n17dV|v?`8IMGR3gL#YN6|p+#{|
z$JhbCx3UY7l!Y|2`wJRwq&70q_ZOW_1}eL^*rl8->F57D`De5+pHf_atsM-pXoLMd
zcdUakFP6xp_hL|v&e6Sk$;igVKmgodR!>!~#gcLk%F1aO_ZGZ&d|knxe^qh4tlY<f
zPsfDCdtWJ9o=e*C$(Sj1O}!~E*||u|1nh|Dc5W0zt$Ba(PnVZx^P#xlAg))d>;q4X
za+`JYf-@&7mqsmJl=t`Ug#aA9({hEPGG8K+F2=k_4=~Pg>A)i@(*4W2koMnI%Y9au
zmSS<ipSd&;%Dkk=$;ESOe=r~|cK<iKg_-=j3XC2`%q*KN?`B5aFO&~_#-)poCw#hm
z+r3z-mSTYeHJJheiOTOSd#sY{gRw}K%K<EVZ%d$@5qToBC56te03~8+iF>Pps~wTP
zf48{EkD|!M5=Ly(msN3GCL&*^Z`{Y@86SxhQj;tl)_Ycv%O!U*f0`^AdK3Z6y5o}T
z>vN3xS+@4MzP<oucS#vBnXWMVFK5#w&9ZM14dmW_yl<Pb?~ja_EG}`SMbRtG_!;$<
zPrcto>U`o$Hdt=8m^>HRnNmw8zAbmpo^FfyU3O`)d$p2J{Qi~liFfXwnxFUzBTa=W
z9q{yneQ1*OcNuP5f6={z1%-a*CK*>$s;A@)tOaE%jSJ;{O5(wB!rk%_xPx~0y*$7a
z2xo1lzg);8x7?`$&-;iv5QV0Tl*ybDSlMUpO2W0t)!bo6CugVUm%Y!Ifak%k@=R!r
z)G0k1-a4juZ{1?anCBz9{6H%MAX!ANGCAE=4u>K!6q?k_e=;N*MM4(BS-`=lt_pW&
z36~99_y;jAZXi%)%rU*NRuf^yXjp|;8e(@n-z}!gWQ-B~jF)CCawDl*hg@c50rwUh
zhz)p}&Ds<pOZ~guVMjTeC~d$;9h2xqS0S~K<V*~aF|rhg>!KkT8St)Z#tM;%8=jlk
zIv(W)r9s6zQP5Hg4XKIMZC<%-^%wuO4)y8b(O3gO3J#VD=Ue^e9N`n?FCxW@=9Yuh
z01C0|QlZ^9JWWMvd)6V$U|(!OWMn%;MpiC2@Fv&xpv=W~r&*W3rve>+0|9<)bY%x6
zaL5(;abXu?T=l5TI9k!>245OC*c3Yrt3af+mPGe?*qX?H;@!*zmA2xV-H4!<n!i{>
z_csi`gA~6Lc}M<pzAqz=X?z=obyiuhwH|afKs6B#Aj03L(w%!iy1*41!1d6>tT|w%
zGJb1E>s7vfSg2AHiO1i6M7P<iNz-g}0H;7$zkOFl2B{4xCtpVbDvYk5X`nlcycibt
z<_bOx)s6s@BYG~t{9EF+u<jtNO5+b71?Q+0j|Pg(VZ7|tAC1*L*Bb_<>Q=Je;8dLl
z7yAy*eYJ|)VD%&NLUF-z{}U(9*qCV=1AuKjse1PXcNh;<(3{%RKZ9E9f6zgIND3gT
z;3??#RGE*y<S#*QQHA^kwS+G(82dtS4e>`Fawupy-gyyR)^5k#h#OH@k`uvma1Bg_
zwtM#r=A5l_^zLBihbO0(hyAOI!*ei7i^8RZb($x+aanS{k+8_Fb9D=~y<k+icD75A
zcE02<?I#DpgV_>|5gkq;fAzL1T+yc=l%c%yPTF{9w)Nec?NgWX8=X?h=~NX)q;Fa8
zQ@7jQd;OLj*dER|O%#F8w9eW9?)rkUNom9#`;wo)zf+~<ofeZX`AZme`W~nkB9nZO
zSzQ1&bq5XwmflU&VrMTH`)A2Bbd5>Xgv%UU##`j|wA=0Mef@Q3f4B1;p&O3{+eBE;
z&wL^_8Tvum9ef1$tU%Igj^z|AW$3_1%Hfwhe9FFTfB^ckVF$pYbJ{+`3G7fQ6@hWS
zV9d_Vyz1a8HGT)ky#PdiBMOJjK_d?Zf(H=l`CsyvFIaSL+0<+k*DGN9L1x)a=93^>
zC6h2^I$!c*ga`e$fBWs;m;8G|C;o)-*<Zc2kAL`*Gxo&Cxi2}bOy^n!s~2!|><l|r
zBlczEUyxiE+O-4i0i=XN8Eyo)a<p@{2dd`|%*#HC{@rf(#14fg4t`EJb@3^}lCNCJ
z3+AdJfMt6~z*@j9N#$R1B>bZg(_Ut$(CKjKIPec0eCC@<f9p^9oiE|;j#$@Ge8~tS
z7q(%5!QpI|O;m1maU$4enXu!9=!t|m>jFj)6BM(YXEUTqR}XCOP1pXo%Dz7uo~X3M
z2+KZ--Tnlg{1EYMe~#7Y111aqvhixnUS;f6$zB=u<;$0iSB3q5_UZ@CUJdZcujgVY
z3Q_zf;T1l+f6}68_eLT&@Ys^yz%CugT%^d;T9wrXB;vTzG^s+X;tbcT)$@X_)vOKn
z>WIBMjT$CZsP_9E$C&G3|0<rPwb>W7bDqdEuhuIq*zx<`8SI@Hpq^#y>ik%<FB?0f
zufo#nF;dL3lutWjGs(a;`i9Gl4<J?@wiThhTPTo>fAIJ_M9NV-r~u9Y7bIIfpt#+f
zHOqxaVf&;GI(FuvooL8E;ZAM0a7?$<rhBw@&uYi*(?X79ZYQOcg|=Pc+n4Mh6C5|i
zc=xx8!H-9u4=;}ndj0d$<HHM52z1N4a+|T3)t1xC7-5WSa2+2PsvM1-<i~`nojLBy
z-0~l>e^8@bDOTkyZcnc?W7^At5>_z*VK-F2fW$BFxRy!vIXpU}{OZgOfAzf`xvL^$
zzyA7yvCh@`G5hVe`4aDBp1%JKXutI9qEcsE>swW%P}aWa^wNpU-QyQ*?n~ehhPjuk
zd^S;~W<ieQoRJf04(}2%HSF~4^62#Qg`YgJe`GmFlTI(oez045?dKgtqLBA0+JK}1
z$0A#~X1U67Ccj`_OoJk*ndpo<>{<>fMgf<<TPnS?Bi&G)=O&+#Kxs_sPo-dJ+M`01
zQ<miW>7Wlaw^X^0+45T~P4*p7NGnbD6E#_zEUHs|ZinPyw7=h}G;4XI=eTl%bx*Nc
ze;YhJ3N)rrnP^Y=bZYy*(x4Y?SsR<0`0$!vFy_W+!Fa7&U#&+gBBO~X05)vf+8VmQ
zadZO7@E(>(_$*psKU9S4OV&%%Sg5sv=sG$%J3PNQ{oK1eq=Q&Z-hvm16S@_mws1;*
z<s1}x6tO&?vEJ3?r_=MJ|J$<*{RMN!f4B%#9JZVJ&53AVO;dNs8OlN%0A2)hAsYSc
z@*aX=-IziSN+ZbPY{uN~F{MnuY}ow~0<(sys8IJu)1&vDnhbIdEMYT?_oG+8+J+r|
zw*7N?*e_-Jn_wcp*{?qas$tAtHqdPv0`}_H=&y)=?P+a_Eg_DB`0Cf{1EM;&e}OF~
ziaTCqSQj_kPDWA@ydLJ1j-!0&RByW=nLWS4)r3_OcToS>fu$<*p>pa^P&t|ly<jX_
z3m3w9AffEkhMQ71u?CMIC&gJIfUZ5PvC}+OAJND+&3Gclh_|tIaC&lf`uXtl<-zIa
z4@V!jDM$_i9-$!Od%EwVQ&AP8f6j_KHI+i+*%mL#jKaVA(d8LHKc=a66wyiuFtfzJ
zU4pPeUNAC@*VH{cJ(oqMohJF2wSR!eZ+GxXAG@|+@cg>}`K>+bMw<W2xI025BZ2X2
zX9dcXx{hwgGI=fFJYL}kNxt;GZ@H%*Vy^2r+ui$9r`zdvcHe%t``zx2e`6y0@?6}A
z0*ry{e_N|{xADupor=;vU-kW;yDvK((4$|ztWBYpFR_a6cOt6+Owo-OGM|>FjWrCj
zQskyRkdOs<7-w$z+tKH<tINMrIw{aU!;eX(^nz>@?xzcUcIhQ#APGNjcK_tw9E{8S
zx(}&+?9b~xdXAwM{>3+6f75e1`?;TgXqD5O6EW$(D~Em9uo!!D^6tg;B<ssuMhV!T
zB@K;N#!rqT&&C>(`g2rnM+a9-_V<c+{pJTB+vnWl>FB1~Rn{B^1wk{rOK-eOoG~j>
zt|wV!jshD;lBkJ-y%g+RJaYte$J;`rW}BBqDFBw&*4+1Z_;D_k6Mb6-TEeID@6R<v
zKda(;Ao65vmtU{~7=MRt(c=6b0QvfI`or7rcEA18Hu+i@HQ|Ob3PfHE4V?=eHI-5C
z>{H|(9XZx#X<804nLGhcL?~trX-%hY&ZlBfjv!*vhlzvHzz(oWZJ@2bW!I-22BRFr
z00yPOc7#qDctdZeYaxISrgFNPw!~>efg1NegsbS!fLj7NB7bZJ(?Ya|w!_G))a4EW
zlLq)9SYmk}U+ewdE=)uR;_+;=@x4O{i5;L<nTz%mP9u(X#DFF5ha9(D9P#gVA2#Bc
z&ujT4T+GWut6Vh4R$iFM2O_&q&;y(SQ9Tw#hi#dp-b3B)-ottbD(O=t4_UFxd3^$&
z7WHPBe9<upgFP_?zY%PZ@%-AJgWkVGTc6Z!6G>Zm9=eqpAw)K>?HO&8l?G5j9h}2d
zP0Nf<TH2nqM3z#X5lV4t6})Pfv9SUee~iV1<C^aEes*a@pf7ZboKf&ERCkMHEN{?3
z1i$U;nclyiWZ?mPWFO&gm6ClTkm7s%qxNa7O#BE03?WlKn|%4P9Ec(pMrfa&X`!Tv
z%OVawxDRYymjl8g-}a7sKK>o%NUMe?ADsK5gGtBI*&)hwaz-+zZYH&SLL`_Wf8g#m
z<z{S)*{?}&*q`GUk~d6U$RJ$KS*b5`ZFug|`5chTkcR;YUy*fhNclkQala5+m5E?_
z%)zy7FvC*LThetWWcq0vk@Gy6b!?a9%D5D+n7xy2Tu-w0hTVjQ^3G?51urvb+PAvz
zd9f3v&EaOV&2yg3j7(^N&}kaxDek+!o*pnc;UmGO&`T<l$;^)mY=o^~hZsUgwKI>{
zeQ^sY0I7^8*8`XEvH~3f_^p=@vjP_xY6*|9GEh0-S>HYY^I0ESt>eA^Or<znMVCLb
z0vLb7Q(;>(5d(=yp0-ZpHY;;!bcg*6j-l}JZg=nN6Up}3E*nWK%P0>mi172?iE}5g
zz2dNE<J?<7$N3t#G<x6fyA1*KBFpJSO!}_aK6|sfN6%bR)V=Q4->%*TAJ49+{hxn2
zdVkbo2UqWVEa6jN`{UVFwL@fX#0c(cvQmHO4*O8>1o0p+CjIQnWtg#R-7Y6(aEXYt
zV^3%7<C!fKbJMDLSr8;%H7iG@14h#_>VUn~+j`*JdQfkdA847$b}}v5)`W(camuS!
z8}Dv+0>hnTs!Z99rKk$F3wM)N4M|iX*w%P96$R>*+lZ(&9nZ8c;NkkboLpf7B$a>m
zzv*`AS(pG_R8$L!IefN_#EMf_Np0Ua_8!AqNg+W=`4?Q@|BI4*{Y&OU^)FD-x6zfc
z59RlvR3M^7CX&!ElnDr{obp+wC`o84^>vhkwNOKu$vjg3{{~5BC}sHbZLSAZ*U_O*
zjzkr+t?NmqZ-tm{yP1n_d2n-dLkoY2vdpo<9%(QTeQM-{XYA_#u%Qs?fG5{)*`96r
zH(i%4^aW$LT$=tsm|G$8KESEz{Wlbpcc7-TLXO6UZ6(`mue-NfaYH)F6P%C0GkOCt
zG2t?M>;C-zxr>QTq9!j?I!I~;l)s(6e|G@d7rTJ9sBK3(lkdK(&X#&#NKAjn8w|pS
zz4xb|kN?_K%+huREy?!+6Kz<<)i)x9ve**v;eN#m3a?e6cP#5WnH<>v;@UdeZb(<>
z$NO|%^0^MckH%U0Y?-6?cEHbmhJVN}WZ%AlV~E%ndHd?(1!EUFJLnyV0#aI6*bxQ9
zv|i{8ZZSV8ZBC?~aFdLI&>4Rp$$WHaC-kMs?D3PamvBk+ZuUVHi8vR|zZ=TG{85PM
zrI<|N6OGS4s{^IYshvIY7g4x}@1>?YjQ@|lKW}dvM;b-(_iud){N#R*lR2g=$y=f`
zncpb3lJ>;0{aSJ_r>CzCk&uKoMQ{kxjyjY3+3$lYfCMRO^Op3q*w25{u}JJF6lyQ;
zAA$#I;g2+C5vM-?oq0cSc86MZ^YxrY)c2X6{`P5rPJa5u|0FD$<lbB)K6^_g^Wf73
zyNh^i#&#j@<T;DpF*Rd_w%~2Ack-rL2blfEfW#G~rM^1qo)$O%f>G~GQ6v9}P|&Cl
zVkY>eQ9)~72eZ)370Q2}UG`>6WwE}Ii>i*YZ-1%$*ZTR-ds2P0(6**>8zN_F)@w{d
zxlMiFx$Bz(AP9C+!J(s|t2Uuye`X)*{O<4W!oT%;z4&jlUf=nz#_mCVZ}*_yJgEOy
zy}5UAu=8J}{u~RC$e2d|Rex|_#mW6a9&HF1M#4)lN%(Kly0(Asc;Jb<+K*=!AKrFO
z55K?aoc=)Gkk5c4E;{YQ-c|ej{Oa=Jq=j~=pFb;}Pei2F4VhazVX^F>=tgI{_w<)b
z$-a-{P?9fS<mb=e74_vyYkM2=f2#uT{s)YLwo^#k+$!{Xcy`+B{M2ia&Dmwz=f_Vu
zx~cx&U$oD^|DS)8CtZ<YM8na)eBJl+%<!_?xwtyK=(KyCtKQG&ofg?-T388;wl4PJ
zRrjjfYxgd@SLbIZCs)U(z0SoC?UNQTM)j=F+xFpy%kxF0IzRO~7pLtLuy;6Zf9zbH
zUv%Cb|I{Lzy2H*-ox{ss=c@ZZCs!xOACG%2^7%7Pp!0u;xk=2r|MEe#_vMQ<ljEb4
z&Q<UDW9RJBs&Oe<bnN-YnAg;R;T@iRgbhAEYLU&v9XEda6jD8iZs+~S&S?*T?L+71
z7TFxo|ND>k!H3^|A02)8jW!xPuYbPneZ1S-dHavX{*SkJy5iwww|DkYjpy{;+0{R~
zXQwT)X-0o@#6n+8#w>`BgMmnQ;@w53bJcCPyV<zkMT~VR?V14}b&kLU;;2yWh<QjA
zW`)1}pY^@|XMUEs|JjXnyzKr5M*|)VEjm*xhi8xhi|+qsvv~g>G<Vkb|Fb;kja_cd
zVR(jj$0xncMV@CUVHN&TnNh#nx%lDuuwxp4;LCp*W6{vBk0=|9%n;;kFfbM(Vt9pa
z9`NvBAdDR;23wO?5TuWg5Pw4Fic9?a@#*2o<xz*sF<G&T&07q+oMyKm=U%bcoUZ=(
zhB0#{z7&Irj|f>1GoOuF98Jo(O?>{MKY|t9R4c1zJS<r`e0FyluhLn^5qITP67lT&
z_HBP-dyF44pe&Tp#dOST^+3ScVkuPy!%bS?Z3LHBT5t(^57UY-r^aiYj-D@Tw=Cj=
zN$KYe2v4slG{<8DOo>hV%s0JL&%1&bcIz|@Nw&SFrP8AC;)(^g#52T&BPo@R;wa|U
zOf`)7uhZB&c(v1H2WxudIiLI7|7a+nD1d+b83Zbzga%k}|2Ot_3-|v{y|Gtc-~Z3?
zl<XiMBJUsRfK0MgA=;bqh7k!KS|;lSBO><0v}jG21fOh-GZ3->^80}%4@(gdptI}l
zPUE10xZDq08e4>sh=nVBX<iUAj6yg2MHI6N;VWCDs;|YCYO0zR0qN|*3a_vNCNO_C
z#bej1i7vfYT48I|e!X9BR0{)ck!axV?KaiTs-v3=T)Z?xs-Dw`Q9mA`7N$i$e}R|3
zhjhrK{>eUp%e7hiFaiT+mZXc4&BzSt)vH&p^~cmaphc>Mdl3h%gPXUsNgQ_>wrdTP
z{9=!COAin4^^k`QjJwlCg9|NNw+w%D$S-Pde@(ww3qyX%UT5<qzv#h%WvY7g#rsID
zXG^(7ian{jySy8Ok^4>KYaj8s&pq&e`iH5TlMM5rGp1qg7Fa0%-K!Vye`BX{u*Uz-
z@t8fl(q!0G#9R@$+-DK&VT=5`=>UBHfRRR8<n{mpE$qSD9*u@9HtwJ;Ql)=)5^>C-
z7>6QYL5zy;>|9}LjMGIpN<Bw!?P9=GWgkzD+UGWsKbFRPvPDcdmh_u81+~i)&7ZVL
zRozm)N5g8#=NY}94tem&Zf@a(j3V(6R~o!nFVfY{uM&iYwx?03jB#r2Tl;-PgZRFc
zm#(LFq)TacZd)=I5xe(LgnxhUx?Oj~yyX7%FT-I(z57>}E3D-7s(}dwX#8h2vfK)c
z>5}!oHlA8PPxCBu|AYAC0TSSQ$bS_}xW50N;aSUn*Ye-B{C6$?UCV#}oX`F4|J5YG
z_mKbY?yu#)&+@G0ziavLTK>D1|E`4pSCjxRmjCV+<-hxD`=94|9$kO_D*`8s44zrb
zfY&nMwG4PI171Jh>a)!K5B&TCjDS~`|L)WqYyR(fp0)gUE&pB1f7kNgwfy(b`P}>d
zUqJ-CNd9|JKPdA5^@Fwj*Rwop`R^Y={;Sr<o|82n$;YA3WW35%*xKDStM#XnESqJV
zmi+!{Wz6@*|Eq|ASC@bPHk)hzkLP*T^53=mcP;;2%YWDM-#_P5a{u4(z?&b?X~k#3
z{lC*V*w5epjotl&z4iV79FN-U7SY(CLPMTj^8f~)oSRp&#>Mt+gZkl!?p6Z0E!D?L
zMMo*u^gaza=1pxIb}3CeVt+jsQQRW?ySqCTVgiKg+z*GR#~FXFsszGA%D+O0Ln7g`
z7Q_IKgztnt4G^J0fL|OClkv8y)Vgidny+h(zsnJA?(Mf|-F2I<=wRo-9qhdB*Bh@{
zv%kCh%H7-b8gyrH@anb4cA9%T`)+@a?s@(F2HkzV-`rt)&4b1+N=k2%KBL|k5#%|I
z-BHGtIKVICgA0Fp9Pl_7@H73c26(}ST*mmpCLdHEK8rh_;)u2*n@=z`9TeWRNR<ae
zwa8Ays5f~NM+vJMMk}IfjXz>qG2Muhg-^x}cx42}BO&9$D`b1qZLFsIIL-3*4$sTm
z$NkNBkiC119vV9-TbgxYy?m5e7zssg8rjRo=;L+0-kg8x!+QBBeKcM-ru)cVK1v@u
z^=X*0UOq-2d%HW+Yh}H>M;{h;!D!~sidMdI?_at5uYLQipAz~{hj90-U~#f@BkxZV
zE};MR_8N_X|5tst*<90q&+%*!7Toek1Y;J&Bw_;=LDY1{A%UeBkg5pIBQ~y*s-#p_
zNp(!48y0_``_yIC%0}sH2%QhfF8fyeWfAz33Pus9#D)ACEFy6<fgBqG6L9!GW)mFg
z<V_<kiMR{M-H1i(mPK2H$0oO5pAj5f#hOG*kEpVtKN2IIQWwI_jvA}NY*kWaH|hty
zfx@biU6kF($_BA!Wq+hM5(<Q=;7k3gq=`O2?@fOL&-_*tp9r#LfixL+BNpVApUYf-
zs=nz!eZvv)SmzPd$uu%e9Eq5(b08YoZN(Z-i&TxSwO(&jE4iVyNVQt2C<64NPhChT
zs0c^A2>@9~EEH1pG-;9QzY;o8Y(YPwf&2Tms^>&~>N=sSiI;6mhb>aQt=Ag6wWe;o
z8`FQ7eawXIddpiRMuqpR{vxE9CpFEEK!*@M-_fG`l2^H5G;0kY11chB{-M#8tTF~w
zaXV+bkXM|=5%1ew)@!f#YV~SGo5j54@w^qqd?;#eSbRHEz}t;BVJX#(+-2DmXc*S)
z2>jcjP$Uiy1`(~q!e=_`04NgZV88<&Pe6awRB@SN6(9q_^kP)iS4Sr(s9N6-FOJk{
zGHi#X7AlB6E6BIlgC(R|I^HU9HG_z%7VlVpB*YDtpKf8PHeAYs->gdaY(^(Aq#;Lz
z-Tm9DXr?Wd8y8mF@N|Lt4$G~xf4rsc4GTQ2O2at5DZJ)jDi2i|P?=$Q>=qJ}q%VIQ
z-G$S~K8)T?LEEii-qqvrA(JuSiImUm1h*CwjG}>~&fClPDdP&nM2l2`tA|ZN4&G;a
z*&qi@H{fB&;&u>-*g$GJyPO`85NZ`lyQ%6zwLXg}<c`8zPipG)PCCAzp3|p34O|9?
zRVM;)xaTt`#(2Ng7TMWP*_Blr)$4!f7!IS_vW&S_Z7iOItlA=h->(eA<V@3MIgl}O
zlIk!_QtGXWOES)6xFBa>!%0i$OoZ1SBtOVBzD0l{<kpCRs(U+owY}Y1eW!{l%vcEj
z265SRWuruC<&i?BI2k0quRfgJvMAzSQSpMQ*0F8%F2~e!6sqVXP)4qSP-lM{aomWh
zE5PFsoXv?N<0x_CBr-G8%uPR$lfL+*U+S#E89@DFiC(I5RNb<FJ8u5>_{QTAaYC})
z=W#&CeA^6X+oLfh|LcDdcch3I=Yllq^+rqmFD-1fWwgAv!cWHRqez0-0&+7~)uz?`
zSQR^`@u-zH3HfervF6E9`y7A5ZFf$OTBJHQ3M_bkcJaP_dfbH!+AUHoW___r9-Vz`
zAD>!!ErsB$?<Z&PuTDBYbWVWleg(jiyJ-jsh1U*Z-p;?h*Yyx8@KmgRYF{t~!|W56
zF%O1^KIP*SZBa;D@=*ZfT`=nX81a~$1+EsKN&dU~(s<AH?^r~1$PRyf3i1StfO7OF
zSADAfQCZp9{GUaM*62gnzXkkXV|Rb2UgZDQ`u}Ho@{CiCwaa)LdLvgOIq&+VR~DR2
zZ_YPD=<i9yeiYG-x(|;b(Pun4^f?RSW3NT3-+gZX-^+{6)sJTvA5PBNM_0#3ozvcN
z@8_$-lVkPQ(HDz+yo`T*sPkjz?e}MAAFeJhPQFyvH18jn<~3ALk&HyOOO`TWN!l_m
zUN(~DI1W>7h?~=h<2am%QQzUA1r6#+B&3bLqmjovXT+$MIoM@<F;r#7G<K3u#u20A
z7TNqRVq+0AFf=3%`A#RbyW$>k$S>akQ>{K;eY#3JP=Ec3g`s~gr0)FXJ4MT0ftBB{
zq-q+flJ68}oJjIrUwD%%NLhIWDLJd(sp(#U<cCF7^Ba<9(jf~}T{9e?1;coh{Z@UY
z!!y%?<fOln@6z8esqANJ>uy?`{sQf0?{Vmxl`?L?Bq8ZVir8?^A+u=<lWfgn80Jyq
z3I!GDac*pfG7NtN*ynBgq<wk_2|O@U$(QQ#U3h^+eV&7KUG=-qY0A69lgn<eb8&Ur
z{@BrN7HkyDsP@9*%$U1v^{GZ9-H3*)0I1W&LZHQ~je2u$*HWkG5*LYY^;<SLLZZZH
zxp6>>OUXbk_FE!j!ah+jXT_phB=i|o-#r?}Bp$Ibi3NX|h$JEbW1h5{atQUA8sO>s
z<I|r|_xg@<pLtdxu%3)s#8o8o3qUzn8UbBp7)2)zzVfMzuOg-(;YubzI1Un@ym>?F
zFUj9XJ=gF+L@m;gxp!Jwn|r4=>6S%6|C$7txdJn`Og&zf-mXRZ)FXQACIhoWU`pm^
z%w$Xk(`$b~h)l*~8ckXx32dROPoYZMD&)-vaWG&~(=ILvypNbn#%%UBuqfsOP$P6c
zg*^54vG?Kyy&cZp3Mu_7rm7-VxY7wNUy}ZWych`?za$P(UtYX?N&ZUq>$|V&UwLDs
z^og5I{Ds8y$ONZBctCu$y77nwgpxbPZf5OH!~%bIhxH&KbJi$s%B|oY@x)!A7GUNk
z^o00GgUMdKE=!ibQLmG~kQb`c7i8u(n4Gwu5f{Jtf2(`7|6Tn;UXpF7xv=6(qK?d7
z$<B;d+8LcB_Ffy)6M~FsFd=(C{Um3t`9~2k5|3y=_Wm0Z^ZI_45jbLT5(UgtEo@<0
zaP@zUM@%ACqH(N9R?FUF#%}CB?r!Y<fp=r~!Mm}$a5o+-n7S81&jTL!PP$#@Mod$e
z1yL<(HEi*JwM2|trGCf*22v#{{i-dat?twswcW2N6G2wV1G8_QjH?x|-vS3+53Xu*
zM=@7-ntYp35MlKxQt}|MO9#0GDP-**Y#)E{3^_Yjn#7`;$Z!__pjL}c+VW?Sycf{h
zdHd)0XJ1firHC`z5LQpH9cDgCJ`FTGdVbPAz0zDK?i(8BUPin{s@pQ@r!X(Kzx&+1
zeA_*|I6m(kpFy?l$Ts9vB|f%K+wVI^kZkUv(>=SqIP6@#zc{-*#}(K%e7W5I$lZTP
zNHK_OUEwF#1r0IvukO!o&7vh~7#;_b4@a4N@rF&1x;;O?IzH_lzyH41z53Ak85ac>
zTAK+Pe=s<4&>xe84`8!L^p+vo@R<jvhNxqK`L10t4wD!`aYW_0`d~9-+9p|nn*nh-
z;!)g10Q~NAulxP+MenM6{C_*?f@6P?-XzQw>HU1(`JyG(5e;tSIg3sK!oT}`(LVjq
zy*gJQb#~N2@2dziCd>3Yz8?I`3+6y$?Yqw>XNMp?{Za$Hib4tiK$&>d&vG!%quuk8
zm@FZuo`la`7RbWUI5|G-oOaDx48x@Dy3A<%py>Pa%d7U`VdtcCfy1npaJ7G-kg>We
zQnjx=%JbYud&D<<Ad9676hF$Q(Va}^HCDAU?!lekLd-tJT}C5!R4mrZzT_%!7BR1j
z7|QY>1ieC!XG#xT1;r@G?1;-71BmHojZTYov~(hWwLyk`L<gOV?s2zw)jRH7U_#0-
zd54k|3xc<d$K_4UmAnWu=0Sf&0HW*S9T_sW_%4r|QR!bm&uI<SH6-L-afV07-4EaJ
z^wKJ>@C_W4?0fnN@CFR;s_%<_d8xMgo*#|6y-?{=HR;2B?@EtvJ3q}tG88v@hY<sr
zCRK>9=%8eYqfX5&czAYl1c`3j$ESI5K)NJU_QVYfvf|x#_o{dHp>uy)EU72s0{i<x
z<NI#!?4td?qp-x;<!Mi&{Mq%=p%p9Yu~oc2xHVl$T=ZG@`_bF0_R+`VQ^@TKJ%&`u
zI}v&L&*$xK_s6pfb;El7A5Eg)l9nHitG!&t)fU<OTvfxZ<}doK6g%q=7iUM8hi3lj
zYtr|*9I>cssms&{tyF)t+WSGF3x$=pQab9&Py|;)MG{<buX;a1qKtS@{TR!uD>kOw
zuWGnC?X?ekSDlaT;}a-l(Gm9_!V0v^IHhIe^0bVajXE-J{EkNwKr=s|cgGjq-c;ce
zT2}U?Z5PcbkLon(k$&%?p1w$TeA%p&-1{Z;_{=;1x%5BF>HmM&6YBq(I|qAH_Mgpl
z{HN!6{v+)_3nN^cfmSxi;rH#+_nm@0Xm#p?Wexh2#-Pt`gt?OXdanL@852&^^7fsf
zS27DNdpQnj&05oG)`ryCEtIg#?dEIDH;8~6nffh4sTT^5dwm{w3KBAjn71;R(Hq64
z6<X9XqZL*ly<mTCUde|n!m2v^1+e-Xi)BpRn{B(MlZi@mBW%<fJGGta*D?i|Y2LYD
zHoB3#xX_x+qZt|8cYs+tk3Yt>1;g5c;XlQKA;uspBC@SP)g-0mwEL~vMO&uK_iG^V
z`wp&vX^Y?2teW~^;DoTk)fV}_*E?^X1KdQGihQ*ur8|FOz)7Ns2#cKob#0y4idzr~
zDV^U%kh4JH!O+nNq*{=$t~grhJE4Ljh2M5}cd8F)N1^g6`VEn_dCJ;6Wo@3aHcwfb
zr>xCW*5)ZIo2Sh8@p`E3$}C>E=&Y3YGu^KpJg-Mqne;$=X|-}f0&}~sowoj1PFv4u
z4)qo7p@x59^KopT9?jM%74qiHo?x@@q;2VB6(po6Dh99xfnn%Vms#dexoSXldx;w#
z;sU0$c+&T|`+-f;2xE;3M)A>Ny^kotUL;alBxBTq@Pb6Ch(9)9TgG%k63H}Os!f=1
zuSSd*S)|%H+#z_4g(K#Q2uS>md_|#65)j8L1Y&=Y!TP4#9@3cI(Fvg;-!f8HQVm4F
zaB#h|qq7!iOLeIP;%;l1vE|0Kr65lg90)}l<1M&B8Z|QD5fITxS7Rla^tHyNKheVh
zoeTu+Mjj^xL_#Ijf(A#-9}_1qE0}8)T9n%*Dn|V!CpjaIgPKS58JFoMximn<l$tB(
zhD3j)t`cHZ|D-D!Z3q;Rp+GUX{x;w~GX>JI*dMV^2wu)5uyA0*cBiJCTXdRjj4#9u
zTDS37rpsUfO1f}1sNfkT`30bXm(zizV+5TS5b5SKg}<RxLE@b2Pq%-Vi5k<bGXw=%
zvK*bZi08gBZEbn(8&@E))#rhyKD)si>WzPSur;HcI?36skB3+u2O!7#@TzNvE0F5)
z$;E^%L34zJHmM<#Q2pk?@OTV?(s6K_KFCoL8AHDSZ|K^YOkoDHAVdn6#`o+6>MrbK
zgD7fQwsdM6E<1(WY6IzXO9wKmoHfFY<?ttpNz?K(hd7MrfClvIbnc5A{&jlJ2g!eb
z-u@K{4(Cqai&Gs(?3Nh<efsNHvfC|C1UWO_>bx@Aj<-5Zj^wR)8zlvd39tTSu2mX<
zX;|@=R`<R!Lx2KMO&gIdw%pBdS8foQnQqAxrVMnmMshgCO+1?6mjb$3ksMNO*+SEq
zC=OI+fkz{6PS<!NXXY1hi|NH&IFf%b$@6i9`cm9`USZ<U+fRFq=2ElM(rF!eb#jq*
z)uY3E;`L&Hrn&vE4X(*!8eA7}2R_C|d7ee`v|@wx<)a%V55s0Quhk5#|41`i#l%|f
zlz;8+EMZsel-pI8u2nyAZ&;jit#i$h=NlAT&0E)k^|oj)T>T7o%(D$Y4ZeR*B>NuK
zw}#`l<tZp)xsR36OuL$y2Bov@KhbKgcC#aE!!UVBK=?)RKX>;E@n0GT2M4=r`_Jci
zD*urNpnAkB*?y9$P&0l68_=5_St-P5R7ZM#9L8BH0F5A?Cd%8!edD~PFK?$M-Kn<<
zIIg@qes7^?9S(5&mPXq??{9xcG;l{O+P>M5+rSNNv)J8EZJIothN>2ev0sbFp+B#;
z?%CmoPOqf5C<&m4e7pM3niTHMyk;*hPkYB7J6DG%?QVCv_28C!oX#Crr+3xvULAGb
zwJ%S4Ici!hCY}f1C!x^Ryj+qf0j=p40ie9&lA*D%Ds#u<5uA~#E@gk+&p4Xu^f0ps
zjI$@&>Gs+ey{nIBN1f>gP`u<lD0tGQDzr)Fn@p~5Z#UbT4sr^2*|NrTBO&8cOlnbh
zYg^Y%pQNHm*EEx;eS*3R3odU)larUvXf4lnEH>|Zu&(i|Yp|A7U_G&NsPU2Gue@pq
ztQwt=#v`L4D%JdCjP8GqbR?J@m5Oo}I86W4EfKAB$JF=VpI?>>By6)%3veFH<e6{x
zajKoi^yvFTQN#Ay+7%vw>8X~reJ}sn#(Vy4&Sn)>4%~XH<t5anx4x|@7CFGFLr2Jb
zMo>{ZUz<*Us%I(w?}5p{7Uuujo#Ou*YyR(fo;CmXjqraf6TN?Hig!)%{;??D#~^t(
z$j>4H(+on5vW?uZNsXMNor-qxH}(R5w^tEbC~D}|l<p$h@F6nvuYJF*pZU*X`tQ|K
z(|^sqy@MkC*KDlmzh`;Y^xxytf6&g?qX3umAVwO9U=GSP-SmyoP0LbCuh!I38MXBI
zgwcN}Ikfoxe|Ud3_yza>?%sZ*c>nM2G}ib3b3E(o|MA5?m>d6zFaOxp=KGDESFclJ
zsq|7-ZxLnf?lcapTTyFSw?)kSEOb&!mBR9SyF1Oay{r~oGEPK;o4R9!KdLBJdR?zC
zTS*nwl^U-b%T{W<)+xMS@6_wdR@$l8t0i>OV(Hd><z{~|i^e>F!tW#MvU3)3;dRj|
zyro_83!<|abt<RAV`@-UO;N-VZAZgYDyF4r4!YDjG|g}h47(albv3D5StuL>Wf7y^
zBuDMpz^e;8I%2eH$cco{3PB^rRM8>XwP`Mx7O8grl~6zX!UhB8#;^umcf`EJPwf<(
z^keodtp|Vo&+1-px)b^|U?qcqG2mu<V=fit@FT`cnk$J6X*_KjTMQ&I*J4{S)I%2p
zIk{7fanp3nCJ3%EWVW9+X5?(t8fivOl8=z}q`4QrI<>wmx$g5@7BDH#BhjBhuq*K9
z3(Dy5QFBV5KP#vH5%cLJJ>xrg$iw`}Z{S-UP$z$TjR*mQcl1UPlOy4K=KX+jKZ%(2
zey3h}4A0Vxec*v-_=j=}gFgnj|4hPB;~=rXs(3CB@U;oP!ZX`B)3)T=K2-1S%LXi<
z{~LSFgJS&G{oQr^*JpVO;V@_v^8t0^QPPLQWVru!NZk>0nzj0Lp)g|FN!YeBEEJM_
z7(jo-@qZ&~<H3+cVFZ3Eje4_w_-^O0zO!?*`)+6NZM)MrY`pF?n$7+Ce&cX|fA8pB
zV+U;#lgMxB*k{{07=@vLkGXThCVBW(Zz3KHoo2n+aO$s}X5Cq~*V-@~R%pmmxAogb
zg@&Q^6M_|1a?wND<a_3iH5UUebk=ApBcXrLiJ8QZ!y>t2oIi89D%@4gnko^!t6{Z7
zvPh9SEQsf~u<h;bxb^<)=0Sb%%Jp8?z1Q_uyZd!-|MgzIx&L~XHD2w!8te_WeK8d9
zKSz$K@7Ka$Sh-=7I}v%ZRdMoDaR`ttJ{yXP1D+2IJs&C#iG2w{WYeYE{M#GSs5O6^
zwYpQ^tc)qoB8NBxqLH_9tvgnczYm2N`V3;COD&$l+iX^i%6wp{OxLbp_;MJ|O1pDg
z1ctADte1Y4#Q$0*biWH=KK|c3*r_)Q_`lJpukru0JR9T)iLNvbLIGLTDp^DXN`7vC
zJkilVW9C871XbXOxju~;xup?TR5E{vkopWVIzWhO6BaLK;}F8Q)hZdgu|X~%c4y#%
zFR2I^5fK@Sh!F{~VoY-&QGz(eVdDD`;22^7KpPPoWM@6k3wpwp+cA|lQu`Am5pzP}
zIjI-GwrbFU)|@cnw=`ys2}iSSoUzUm-^buJD8W&^8Z-K;uB)2CL02*I$_anOsDgNC
zVdzhEw7N7+6pmd>;{yR9Mre#a0G?n{y(84~bgU~A0wb-iiA#@olYox7OMQPr`V$=l
z!^k~k4Z3+JBK1L9^|vzbZ#6Q{(~<U|GaX^VY+4#z!vYWEKy4bt{ba+MV$XWI;<k}2
z^sJWJhaWqKBkKDs7_zSLZ&`ozeXn<3ZyaM;;})OW*W!f_I~y73*`^_P;ME3o$E;Q?
zecPxl)vFplZlXP4D_USTWbVVpS2DEe_FXX^ivS@=v$q>0HW6xD#ACMzWM?`8I0+*z
zA|6i&WTm%{%>eg4zj>j62sWlxQQr~usXN1Bc7wEs!-x&l+GvjPLg;^k{~<kmhNDwM
zh;(375~*@Eb>`=uS8LUPJ$7gkj{^Ar@7ro*+Z$G^AOb=+XKDs!k1O+A3V|(8)O>ZU
z-8_4riO3Sk+F{s^#v;n9Z;&p-5Inam>I<nBTMY6jlU&eX$kgjPamYS8?Cg_1GeLF6
zLdLp2Q%BPm!xMJP{1$%!?^+-9tsNg@@fua05!+yFnKT?vZg;UJVY(^-yn^yROCkg$
z8_I#Tvlm1<C0>FuKEy$R2prv>O9PL45ZDpI(A-fT6FP`lL_{CtnZb}y-4fQ3BOYRe
zNa~X$h`A5(?#5xPrTx@}Sa^1EF(8!q%p?6I){P|rw81<xHR*qgxR%~XC>`Xt%tw?r
zrl0sY85d@f9~lG`>NCaQhoS0>4b)Y`V+@xM!L2}XK?6_;WV5ej?MQZ%7^jK-y0ljj
z0s-GrpY&OL$5>$IEe&3#F026xNHI)l!0uq`W+`-YYO>b&)QBaN;=xca!Z?wthzZ(B
z19f+@e<jq{cZGjF=5$@mOrYl@Mm?VgtVMS7GqF~Y5f_s1OQU-M5Gc$Lpg?V_<WP+U
zp4|`i%?_JsX2Xc12@1<wq_HO}m7Lp{4rHbSd>o1dxW-B)^LjM65oGBX0*HglQ0*Dg
z2KJkl#@u82shdPYhH`oR<}#qSl=~PLp;4)X!aL$JN&tVszD>L#My@N1u{P#G+th_v
zPWk2l?6g`<K_3IL9Ss0p6f%CnYQq|7yu_Ri5uqexk;{UZ4jEEsx=3^Hzh9bQQh{zU
z*SVse@_louI@}_6EJew&AlG)S7HM2h%>zY|8)YlAK@P=uOo?P6jerF4xs25g4;YP;
zh>;;if>nPfFjLs+l_LmMl?{tZQK-3A(Y4>J%4i6Iz-W$kkc|7NnRLxPt~)X3TI&fs
zLM7P@BcW~&9t<}Ljfn_cRvFVzhazy3C}KgJQUg+*<VqzK-rGX^Wz$AfjLn4_i;e?F
z)4+ys5olu7ggVqM>$h2t3wx?e-3c&q5>r607@L1Up&ZF##JLJx7z!N;!s7u6goZ5x
zBB}Ou6M_V3<{k0ACMK{lC?s4O&}fogjEDlXRs!n?GejCpR2>vvYqf<O(dOQMtIp~N
zP0#bZ#^7M^YT&+lU4KoRF5MsO@3Dh@cW+Slnge&xf7NHZ2d{VbDBIcHJ7BN+eV6r{
z>imBy%G<=wKOUTl_&j2g1+fC3c{gV)K+?;|(P=l!f8u6&`Us2N8eFiNo;a2=VNqox
zBcf~M?ZlibTtG?3g^+nUx=RuFus;mFd3iv%tZd-oB3{ob!zu=F5kRoVF^x5yZ)ksg
zuVf;pT9(cShj?n;{`y4a`T&I|gr!B;8SsCAp~@YngX%<?LV-rlnzySUDiSebHN~LC
zBR0X(i7c+W7}${oE&g)E{BV%?$l~cPOk`<d){ZJZ6a{M@3t8Z?z@3m6X$ZrYl^{P^
zJ$RkI5V5}^u=#+i8I2eqP--SgC>FGEmR{$w2q8T^Gc&1TBN!XWI&HW{kP`~SHgbOn
zt!)vC4RJ|^EMSOI6KP0Bqr6MGF=*0?6l!q+)bqIcGn4P844x=(hntdgb8Cdr=4`#U
zzF*r4{9s<~^W)qhL8A`c4AJe>W)3UkW>*-IZ!<#F3?*Msr@};P-5Ri3#_}<TG>W;K
z_!RD+%Epo{|A<h|B^me>GA-$wZ7Y8jTA0I<KeQ1Wi(4bdFdUiY`%;vG7{X@?>abml
zJ3PA!)X5&C)W-(7)Tk^KZ|I~@GUNLS*Q`Eu`rw;8!qigt>81j|1O*Drphl0}atc$H
zs*QG_R@K}Q3aUSFMfqr=RO({}aScEKWC;>e>CrpYTH&&=2Ljea>eMKFRI7g&o#Y1O
zvCic3*$itsYQ!{?P5p308&DOkWwX$jhkEG%<e`KwhC?3co-%e%F=_Ay<zOv{nS~W{
zeA}Tl&Ro2MjQhfYq`YtY{P=&)yDjp%UawDodYeS*%1l2ZA#^s#NSPl+bOT07O<g2M
zOW{DQQ)q)!5{F6r4kl!HWh{TrK7}meV?~DA6}o&F@L+g>!OpW)oL%`nhP-W`A9vB%
zG*?pLO%`>zr&w-(lKbZKm__;Clm2gD6=Ic2q<u#8z}`~H-9r&5PJsvM)G8UV0yiUc
zj%VfQv|DeGF7pTEaKzjjD9RQ{cw8HHwy8U2+g>2+jqMG6u$&<4#u<Nz$brv}Wd6W`
z{8VN1w2UFI0!R-=LgKBVRxZ0i-6WFyR$s1q7CA~oUt<4CSTw0Xrx&J@HFHB1yb~x>
zv|9j)tUpQb@$yd9(%rHMS05P64Fa(!Q_2%hG;v`(E;Y^JdaH#Xun=$=&>Kd45vcCH
z1SFF#bw{eHkVWd)Wki2Z>2PMx^ej-omEz5Ib|vX(@<egMh~U7iLW|MzGS3W`_PL^e
z0i6mW8BkIr<GZk(C<%0QMEG-AW}@|1tylURaU4Y(RWh?MBY(bxWi+=?EKFo!5fP6|
zWJRMsk0TmQY=Q6=?3m7Hvz3-rD{4*=&yEpr0+B+_TIlUq!<2t-{<7s*mzYU_;G}hM
z+@0VShMft`yJsIeS3k5b-~{V1Gn-P3HM_g1Sbn3DGbD&<-Ei@4n6yZvJ~k{o8w2~a
z)BMQQ2A>O$7;zsUd&JcbQx-_wAiQFq;_Zrgqk91MF$vo8R0J17#F<$Ub6qhG&m*BO
zKa}igp#_HW(b|6)L<hRRsR?MguDTM9a3+ID)xHQ=5NE03o?yc1x9;@Jfu=Z*_$~L@
zkaeU>{X)D`mxi>@eI9cY$k~g8wr6!n`{YD#HTBeaRV(<8`wZ_)i})^C;z|V#eei@-
zayc2`&Hc$_+p}iFiv8Cv5Xukf;#_!&4+PV;LaU+hEKPqvu9Ib2*2HXO!>}kz4toKm
zKHct&K`QoIUxso^T_%drvx5&)ogqLcA_W~B)cRcn5F@Lyk+IgE7*if7=)Vw2%*ftO
zjr^!cMGSY3+RDJ-H+5gKKql%st!xx<ISsU@4$9&%R6h~|r1w+L1k@*r4)uL7;RDk5
z^sLuuArXI_rggD2AB|e0u9~?%1O?f-@QzNq*E!i(Dhtadr`dM3&UYfZsUa*J1=5H%
zs;7`6z`V9;OzZwLw4Ot%U@%&1RI@j)YVcpRGL;lJj~9e&smn0=lv<~EM|_+jVlD4L
zX~?O~hvvR~05ZGm3uK8$$|E0Od&(9Q0c&h~|CfIS97r2E4rELN7c^vuPDw6{VvD@q
ztv9g}reM)A2((!z%I{II55y^CpzERWW{d3T*ExQalrYSMj6@(Jb0V^#vcL-k58{mc
zIFCfAu27bq9K6|?ENIm;4i7{=z25oN`Ni2!Kj-{7(i)WwK>Al9#uBbVV$khv{Q0W>
zs$PH9C1kFMoGKFtQ=rj2sMTxrT4O6UJqJq427a)~jVF+{!XzO6KR_NWrSMDTA67Ak
zhJ5?BQEMJ-Zx};h=eFUvB4XO9M4xue85*--4fqPy+l6=O*p2`-XajQ|43CF_NMCn8
zF*iX)+=ej@wNFluMPq4wbI6#+?x^!ARA+w%E$cQiyHag8KM<nUrx6$yMZ#xx5!+7v
zILLoN2D+7h>1btA!Kp;;iV@0NyVJ{z`JZZsGJk=2dzAAk*jTtWMdSUAY(ZLP0W{w^
z?KDtyznQ%_q433U(hU{)VX=-+w^Z1ngbv-b!}$w0V~}PU$MjS8hTWy2inIpUV48m)
z1(ykR(dy!NBNki+lEz#PII4WiO16W^9i14~T%oq?3Nb(l2SB4e3sNCPRIW>&V(Oed
z-MlI(eQQg6DzjHaZ}y4p7m!jSW#X}vv^8vYo<6HpHYywB2pJ||LsQ9rpJjZlRcQnw
z>!NCY%-j(TxExnD$lZv$Bg3m>8ytVAeD;aQ3hq!jodhP{K5C44EQ`$osjmo@+SHtl
zHdg|L6&tSt3F5Url}0HiWWlH)I~_T7U1sjkWdN5YCX?CL*?;zZ(cgYm-|z3#8wYiF
zzd?6i4VdTc?Yi!3=CNJZ+ixE1(FXN)`rGapj}G<5+cXTflbHM4Qr)y}C_I1oDQiQq
zanjsvI48~By~>mi$P~3u>be0=8fA_fQ*Il3m04aJ(>@!oDiC8q4M5Y%Cp@^3ga@9^
zm1$HEJV1#eh*J9^i8H-Rs*9*>5X_lw%<4knZOZb?e+$o{(ICi45YtZzsE<GvQQ1)B
z-HohOrbm~GNUTKkMfH2hy3~IwMkujB8m*f}QFNMg=|RG1&`&&E91V7Is|lp@ZZaD=
zp|qapLWwliM47bqL(2=KEwc;|0ctbBY$-K}_z<f=on*DvMp|MFEsg{7{zE5auQa<M
zw=6VfaRF*3M!=`04EqCHtDB3df0Ocrnsrg6kwlT92*~d44(vmt-rRqy*NDu3!X)NY
zjH8=GOuL(@a$DNUNJKY89RrPr`{EM_L)EK*G0zwhc^(<?h}}`&H})inqL%giF+1&P
zr+4-C`1I(i+qwAR_^^|cL4ZJo8|f+v)+PCCqh7Dq(uL>NF(gUgim^Iw%!B!XQct0I
zvx>$BQ~NQyYNN<7qF#SOV`Gy8#y}~ssA-mMJqf9diGh^btVOF->@eV(|CnVGQ)(1b
zW)?HkFb2$4ON49FvMB?gnPBQ%c#mMRJ1vwVq(lxkLlRdmi<>2l1GB+0L!dHKphq?a
zTGAZosSJY3O@d|^1wnd@737xFu#pKZp9Vta2`-lrU6u(iZSj9)Ccs=mggHxyxw<yr
zEMzYF&s-_x{rfl<I`3tfnDYM38c8Bzw{jWf{agQ-sPDnB^l}Ago>Slv$MFO8xi^0#
zw{we>j^%!OEHfsf#DaV7k<?g*aGcU%*})Br7VDhGBUmrY(W%cU+LD!Ci30S$sRdVF
zD5kr%RaFB%eDi<Tkj5h?7W%iNy84?zSr4~lRP7YV+G$fpLW&x#qE2f{t5v4gB4i`u
z?%;Y!ecBam+-Ft})s2Og_O2pN!dOBcAzx5WZifQ@=lFcU+==V6?Tr+3I?x3+UhZ*U
z;<-NCV}5_0$NVhc_%cuWGQa+nMzU8nki8YhQJNilreuG;5Y?cP7m9)GVxG817g#}c
z^J5-~7qm+EYAQqAB`TnqiL91F9~%A_TGY<6sa?*h)^t|pXtAnM?E}qfOAKpQGOc|I
z<61lwGwo~BZMQ5eA7W!!>TR^Vo#m5QS{7_AAKTip+}?7f!>D0+R_g^_)xAtPmovJ|
zHNLdjC9HqIlC3{L2J)y9kjIdJJht@XQDq;7p)QIU?6b`WWjg@wRWw2=r5!AbjD?3%
zHtqO}`V`nG5PJs%41f?dd-hhCts*aE;*JQFr2S);bUt)nqKO=Oq9Q$adYqMVsn1>U
zG850|LPMoJ^(WAt3+E81=p+CEEmC%>2SpWalH-4Ka(H}n0o$6!jxq~?V4_-3v(<Zy
zOUA*!d6Y5Su;4|Br~(h4yI?*Xk6`|O#xH}m6_61w=N7p(62@$&u5GkBqQMY}WExl$
zJ@m~7#*7AN?HN0j3w37sJ7q915_dVIoOM5<f#)-?MlN#(A0}uK`xFY)m*mLjSSY}k
zAa;Kp*oUj8jxWH6OC^(AHfklfow$F-e#jl6I$xnpBTTPlHx}lzF@7EAI?Xus-cp|i
zu6otV``JkJGSsYMI$#9~8P}E_27!JMIFKT1Vpc1=d9IVlza|6Dd=K0o81>L&P8Y42
zkQONxhot*BM9lo1x!h_9A)&gox%TWgP^y1g(ghYc!D`bFW1BUI#5fal@bIlK++4yR
zmwQo*)WJlczKujY%Qc}u&x#_4rogZ2S#YRG#KIMRi}Vi93&nPKca|!*_kd!TN2b^Y
zISa^H$b#;O50I2N`*5^XP>R6?hnIxDc@+9jn}CzHzq`9rD|EiUXfm-_X{9SB$d!NL
ztEY|M)Oa3G6$KK<$5KYY(L;3<DH&smd0dKJB4;%n+O6Os`i;uOvstXg;%l+^a^SI+
zjI+vpB(K(DKBaWr>Sm#U{GM(HSr1Pkv9&PkQbJoKIMmHG;Na!~p@Y&!Qt>Nd0w*o^
z#&B|vBnthOrEQ08a$JClDT&*?<YRxib$$jBnbqG~O174gePdFxdkM2v@pnj}e@Xe;
zw;(9{6EFkR9Wx0*yju4~q*)WsgGjCZ)`+wmks4zw48cu9j*g)afDmF_ghIxS$rgbU
zqY;fEB+-<KAsAnxw}p;}=87@PD5aVXFO&Ac$Dz-(Wf!75YBT%)5Pipp0GU8$zp-e4
z#5Bx9JSQecl?@`f$6R$-Bk>6Yq(PC63x%iS?uC)))4o5+1Y&_iEj9|aCzXv<o|r#e
z00{pO{Y?qVW^$%Z>K)g{$9iq>$d2g*)RaUd;JAhkwW`=ZM4trg7MLxFvmw;nA)<(7
z$!t$(k_9DXpLkqD@933+r9!C1?cLpf#x4?!$Yj(ih3%f^?pI*1i=gwz=CL2u74%Qc
zI|7A-`g#DpO*M5l_VwAPA>TCYSZ3VZB8@RtRi~v--5W6&obWMMH^2R}MRxDQHWoqk
zAEI9&<Tuf8=Oc3yGGhL?CP&*~R+GblQ=gqX#)qT0MXEY$O70^D7I8vNr(%46IS12D
zC>oH9U<-bM(F60C_ZSm<Jf^tV@{=&bvA>uL{&soT6=>TT`}9a`YV1D~e;WI1dg`8x
zX%^-+$6uwCl!g%CPar0WLQmx4ZTk@T#`ErZE}U`R6IP?|1;}d_`f~QFW#8|M!Jd-c
zdQ$fO8|3fr#o!~wTEanpqagEt#FjD-LDWk~BK{OYfUg}v|BwAFng1b;+rNE!*6Va@
z@uztCJ{INwX*3J@Kby^+opt_)XL)jhiO-)&4KqEpGZN>^7jR(iGZth)OSL()x+Et5
zze?peAR_WGZb_dFA)Kj9Oz2J>7fQ=KFq|pVp;uW<l913sY*i5v{3{E8i1;EGud1(u
zpCVDUY2}@9WK4$;?UzFfFKd;`M~I(oAu!D<dwc+1`Z2KHQsEw~gf{hH)>LpV7*}+Z
z;ekj3Fm4k`q}YlCqTFGah{_7V;wqJQA}S7Us^?-vwtPs*G#OgOihzgLlTK@3CwzeD
zYLxh3xP<nT*CrF89P#mgb!DaLB$5u9NoBabM#q1wXJ!0<r8r?0$yyvPn+j+?{%<t*
z8pZrSJI&_78vj4X^ZE1kU&t*Vw*VCnxX%<Sd^1+d;*MC0{AK&gmx?M?>3j+?a73O5
z(E+D*ImZN#uI7-1s!%0PRs>9I^ks9ZTC4qluK0F>Qu1#_DF-fp+24Ub`M8@52K*DL
zI$2{Z@ZfJ8<RLOSnIAS>QRH6<_0jX6h9L~UR{4=(>rg&ceW<C(RQ3&ark3O%CJn}!
zXygltDVZkExg;;N%lFY~SCv&)lMI>ra?#otPAi)dAEe7s%-NcjnOR_|HS=ZG(swYi
z)|=(G#Tus;{7T(_O6>xJdSm5uthu)<4-nD>4oLOCrSspiT4)XXT?J5P{hb4#B9xbN
z+6#6zFA_MNwa58lHO;51f{LU2{5jp27d&wN#G4I3wU@IRg}D?Lx6pi5|5074k(n!K
z+``g316OGoB=V647~@0joqE4X!*CObu}xKc)8dRbjmL|B`eD-kRa`L+Y0N>BfTBgr
z)l;v%w#>bV)Uwu+vuW(<^GDLap#J)YLO;g?6KfwENzW_>r$8xCoRei@EDJSwJ=&Se
zG>yH!Q|E8Yyi<)<vg2D_3WCj9-rJjfmMxT!?ntiR6>pB|dAan04YIOn4z%fe4Z?a?
z$(JwNpFdlF<)#;?M!tM;T>AJ(CvyQ=3g46$UkdM(OzP#LcJGIJmT7Dz3bHIEpBf8U
zra_O4h_aSv;G(R+8XZ}S^@JFyxfDjS_vIl-=@F=rY*m)T4Kr&jN0yZBf`uVww|+k)
zv1EHQ@kCMg`P9gwD8heaj8SNQ2HGf;TH}u5vVC=b1TwWlUl)rM*JoL_W^T2m@X73*
zu{oXj{oIrDS)tKIyrc!2;3#Us6H0{7T%<Ta7G?LF`g&S=o()@UbM5%I5#j&aq_rf~
z|6L{3tLi;q$mB83$H1YUhY@hV!_^3xr-zR?5Zj&(>6)fbFI7PNoBS&gak|`mK-j;?
zi*)OMM$8{uH-cJn5xq3;OZ(F<-%fvmT^fOc(d2&lQZc$?Sa&Fu9rJ7}YGp8B9RbX7
zU9<D}LLm~1pXu12SI%y^bVJgVZm5Q~b4qKYz(SHXZ4Q820;&s>@|$Dk5A9;k{BaJ+
zVkaD-wUTAJLtM>eYGi=!&a)b@adM>s7QRD&7OM*YG$}LyYgnI+O-4Lu$K%pXAc^>h
zMXXX{XsU|g|3G&mxA%7TUM(Sx)NGrD4QyE#j``o2Ow1NK;m5+Rd~HeY{hpQO{~5{U
zWJC!BP@UPw0{MS^XSb;T-LLQOujT*G@ysUwO?WfFpjkj$8isQFwo$=QwU$HWn8nn8
zqcLq&h&B?+A<a_GfWYCia--#{%s8>SmbP<2Ynw2f*<G%yvVh`q2fMI#7Qx)UNlrC=
zP+rFhVQw?=8V@<yK+LsSBmX7=4?IQx?_#^E9PkJwTUYAWiq)p<tU$P>Z=>>F^bMpa
za4QV7Y}qK&>fCn0$3|q%ur(JO9u2jB9=0d<+m+S!W!`F=00VlmCfvYkt4mVeQ?HVB
znh425`-%|%7%P0=HC`3^mpTEj?DpsFOlreitWdHgQ;nt@vqUdb$83g4<1)P$`ZmXo
zkfMp{so6nGHa%b7Q_J_l2V_L$2R1306{*g%V60lRoNMS<jw0sOnYj?<Hh|@S9h6u!
z&fZE*e1{Pi;JM;cDf3V~^$Gj6Ig@+9O~GL(t5oVqbT8ns9CIufbh7)|W*R{`k@G5F
zJO?zdw@!}n6ChPXS)_LU&X+H$$MiQSOj7z8KN&NBqFzA#7d5npf2j(QzpG-}h8~L;
zmcC`N^WRM~k+ql($(Jw0>akjXm}73;(wUrFhV$jX2E}TbfqlLa8VzNu(9<-B=!@YA
zyJdd9u0tH>_Knr++|s3Um<8?mRJGIH;&;cS6>(Df3x*TeOwjb);3haSv3eJ_4aFUk
zo&-9W)56SYBCrMQ?ubzjJckzc48<K!mw$sWIJ1QXJ;%}H974w~({CJqO&km~t9zYM
zduE@DciP5>#%*c3N(nw`)R*Xv1-Gr-ED@)ipB-JDwm){d=k3Fe^<C#_dS`_XGY<%Y
zFW8{?UVk}<3~h!U%0O?)sn7CE%+F>f%AL1N%?IvECa=j=$y~~wWfZngK)zPaTi{W~
zGH)EV3tU!X+A(fU|MM<?!g*aAhdPU@Ni)SgQJ0p_UREKO5A88JF7J6pcpG~hGt-Mb
z(Q;@vm8`JwTe)9{)}LQn!19eh50U?c!t>JDZ+(dURw@Ww;Q!Iw*(=EZc2tG6{O>uQ
z+48@V$bPeAg6LG2Nd?cRtFFa^&nX@>LW4iN<gJnt*nx=23lWij7c)f`We`iMc8tdA
z%hjvrf;m=SzQkD+B0rK1qT_XFw{c_nuqfW83GO0UT$BeclF%$M-LkQk^RQ)yJva7g
zdF4IFmtRjk!a~H%6~>rf&f+N7biktLLHEB59UYiE5<Z)$1YGF<c~JEKIjHaLtndHl
zc$U)tmCLL`NRk78Y%>bJ>?%kIXs^x-;j<jU5cR2Bqe(mx5&s<+p4!bTGzDptQwpUr
z?t*D`D8oPd#Sh6JS`~-TkVAfb*&@GeB7L^`Yd&6$dhZ#*hlvsog>G5Ymo2!ef7whV
z%hdz}2(`S<lKWC-#<E7p-^lZb_`lBsj|ao)YhV%n-#Ms%7x};4HUIZK&r{+5rLq0g
zMe!EFXnhSl<Qfn@(-L)a5zN_!3L(?i^*t6{CXkg;Uk=!0Nr;;H?atL(-$xX%zJ2CB
z55)iT4gd7BNdC9KTfqO#-Mz+|{(qL|Iq-if9_+K2S~9|X?Rz8qKRdE7u{6^0Wm6NA
z8sv^I^sIA#+36s(NY;~0jF7plO(`~)Z%)^+nro5r=9UGgM6z}mwxe;T5Ts#9)$eR5
z3Z|BtScGwP^Fvvxz4DorwpU^=8Jf7aR$8sa0de&l4(+J8<d<JDYY9pkA?EKOpUV#-
zQjbH$%f<f0v{K3G(;TvifrUQOa1(#CaTrgIc%*-ShLOM+Zu+-mZp32!!xMMG9gV#9
z`SE6Xb~t=_e14dJaejQ1y@2?<my$&$PO{HhWb<Pp;|ui#S2Lo)kfnLU#yn^dot6;A
z*`LzilAZ7%`IKu68fpg<)s{>`9o3uqnlFBoeg_hXt4C<;>(D6=x&MKnT!H{taQ`1P
z4-Sfd_y7LR`u=~G=K=RWY`^y6dl1LBzWE;}?NfNgmiJW)aoVcCA|kRxe^om!pZ>0;
ze!o<QEUs>ms?R0-dq-n;1Z4`{l(maj#iKUKZdow1MT9@~R{}Zv)L-GO*3)dQ+6L8z
z%(9-dl%6^oMJ{xoRDGFLpydUYS%oEs9`YrB2dy&}b9c#&UAlkvDQ1CMJvpa$Ou}nk
zf%6@I;95A2^A*KOe|jAA+@hp{80nd%MXFw@<O;xWgP<iZF_yfTZF^Ple9)!W!XcOu
zOc}_`HS{i8ZvVMK+gzU;<WlM!<i-6p&iQFl6(~L<HD1xq+c-^|R;=i(Z>a<y>@>@N
zXRdt$Ni5v4XOY|65R#xa6dNav#?C6ka9oIgn;%OTF6xI3W9OiR_7EcSc(CY}f*qEH
zFPc@)6EJfo1_ZzgYcS&uTH^Y<&#cmJG>!5r;*iP)8AddS3pt@!WHQM^Oc+R#q4p_%
z+I2|aF%1a^cl{ESlv&8%11-(HE*G1B>#dQ~SH5@eap4yCY^}!m6Fm=+|L8r|;e%#N
zf)?rj_xJaT@gEL$cGvQs=XmZT|5+F#t{@FcFPH)rxsU5`p~FR<#LE-ea}d`3_=x$g
zzxi1_UX+GE`K`Ig&#18Qejz%56`5&P%hnxK=2x5g3?qFFZ5Q9QDl<2<Is2-AdzxEs
zb^M>Q2oBPsi!}fX?Z5W+3;2Jp*<8#2pXDi{cGyxK6wC6w$bYY8*xibs<&Xj8KB-QZ
z87DH<SxT!`+i5(rd0nZSV|FL-bwTs?-=){mq0xpe;(BJpcYHcGrRfw3tKsXF>OUA`
zr<h?CjBS>?91x*n3(vI3zjfPx#ghLv=ycxg__a^lxA&}$|07Q>W%ZRk^YDLTx3OPu
z7U}=y-kSb@o~Ll^bjZlViz8X2;>$EZmc|A2J{MXTc9iOUN>Hk$dNi4GYXyyE8DiYb
zQ|{%cZF4Sed{7e^dfY6*k63GiyiZeUYT9x&hs`0%d8U^mps6>!Uhr&x6)$iV;iJ!G
z{9#6c6Rrz|eiBi?bSKc>Ya}qjsm!u(yOH&$F2;jl;?t<CAt<1J4@Jat?O0Q*5F%X>
zvKC3BYI^8?A~V*<sDN%8x(%81OG0GGn8rz#g_&6CG|wX*#4I`#eliYnagctKBEa|}
zHLS006RakG`TxK8dkvC*A-$=#!!Q!J%&WfqRToSfF;H!aSRXK-yNn|q4DZqD5exX-
zF0sJlb$G$3H<{BPd|$1*khwKXsdvE!aLA@w)hYj0ZZ?rDDs50hyI8T!rB-Ilq@=^?
zKD)&gGa<uTq_NU4(l|FJDQ%CBnT+W;w3_jlbR!<3#o%GFAmNgKP)J{oKO+`muIDt<
zDvNGe1SQBFhW+J|2$1@cJ1R{Y;u<-QO?=;BLL(Z)I&C8o+k^*XM8l8;(!qSXItwIq
zBOxV`ETjq-5~MBQ-XMoQXF)8<m`>8b!8!}KpD@#9I%W)1eDUsZXJ_X%8Hi{MZq!_=
z*O$G++VnxpZ4a)0xM%VgD}*y*W11lW5wf6te*D8uxA38`%++=YMopD!u`pTR2_=#b
z1LoOCkqja+CL+j^2bj!`p2;{_BmWFY+xJaed>sV2pf=R~Zc1{k4#BlH_#7uOx|0uL
z77+tFHBvfe2*k`dWcAg_j){nXui7G15|0HUMnxfyCAkKF;J?-gmZS#+_dylVM@Kb~
zL`=cqHO>O(G-KVUS`SB#M4al-w#b;#K!GWbGZ2ulq`}Z<BosUVumjjND~@TH?d67a
z*C0ewpc*j;^0QZ`-~wSjcWf1`#=IDO$s&Yu?+ZY(sUS%+y%=~}Vh#s<$2<*w2nIHs
z>(rkELIXX2sv3w(S(N5ic13W@BDFBC7zX_Jv^8lmL<5Dc)+bh|(Z?gTrQ;4vNW|cT
zCxO)hh5)aTG(~EQSTVK@ndge}I0<+>LGcgoC%`Fq?3Vf4k`Emkxg#DkH%=n9O+)U$
zU;{k!V{aq9ur~|KSBepdp>pP~wIXv6kg&QAy)cD;?k+mrUY1AJ#&sEpWs9vAiU$LQ
zA5}>>xT+NvcnE!Pd;y6mN@T1~fFYhpENbL1g*((MD>NFALpo;up&}TcdZ{6mt)rH2
z`Nb|qn_X~9@=-}kcSq;FcT>2Ae7j6?h4K`_NKs)4b}*Y&dy)lGV|QraIa6fL+$j^-
zW;OnQ=|FW3Nr{}2Z#GGsJ+n{^ETy&}oc>Z+X1!v}Bb%nqCV9bYtVVo3U<ysXELrFp
zITer)MCbp-(F5$eBOxSH7=;f5fk}_e449XWY>WJs$e8&2Mq%3t5pbPk<!Fps!)hf{
zm<fmKfmnqLC*Dz|vh*)dDeF|4IV&O&r>SXwni(KhBj+Mad>UK%IBfF_ZQe;lklwC%
z|Cy_I_B2aDi4+)=*`Sa$M5BmKO26}%jb~I{u-HS(7h=w8qajST+)#~-*|^UlIpX0r
zwA`~+Y0etWT_Hj~Ihi29QT(-|dy2)FyHgdoJZvvq&}w#Y`&4pQEo~ZyPqkpk;rpI{
z)2xl<PpYEUPS1Ls7CF`!qkEyvj1(0J6*OfBDd8!3tHy4J5KJXRTZ)7O!TgBc;@~7C
zXG+JVNKJ{igwE~(15jN@YSeK30<D@)c1}Hns%r%?Kx<zU$U&Y`L0p1kR5rzH_%5$=
z6kvY$`$G7P1|_?x@%l1b3d!W%bRax`O<^C3KypQ(D^k^@#y3!(;$*$*x*C_6O2Gj!
ziI*)ZWOvC{H8Y%|avIl9wX1_R*sbcU_Q1>l&7(jiZ5DQ>rxsnkGBBVIeU#1{hDQB6
zI+4I4n%$kV?lZCD?8}y<LZOmR^KMmQ5Z)|QIgRtOIcoB;&(zkzlq2B#$}kasS&UT5
z3Ea|w0G<1E;{dLCnQ@$2sly(59Qvp(K4S_7&pRI-7P!J=9{H)ZSAU&j{S-pLAt5cP
zr4>M_r#a@*!=TQiu90FNjrf+qa2i*qC=^cs#Mwg}r9NM4d}nyRvg>fF-w$kZ2}rHb
z-wm4}wv)xatS<&<YqVz{*Jb;E?|h194FP_t#h*QvvLY)FYBtiC3C#l$jcME>{YgBH
z91>o7-f{qTd3=;nIY7~H?;9d+W=tHHbQPk*+85Pz$$qU&4J1+vJ5sn2(JU~EM@(8T
zWErKPlaozR2_P90NenksMnk8P3_Qh2AX&U+e5FA`a_#XUkEss_o+|Et@ERt6ttQO^
zmxm)3jad-SqZ95yUgq~8T@EuVkbH7a(=aXuAeVrdZrB7Q6D*Sy#6tM8##ub5iD<Yz
zipTzTG;sHtuj(68o4W7Tnzcr4=N@$$O|^VKz<APunvIBnx)=!G7k9En{#n(C^Pkl%
z^3Uqj;^J$VPY@HuwewhituDSVu6g#B4kO00S00UNNy(J>(?28M`elj}5%?3`44ZmI
z1O11Vhtnh;>DExZW4#bwdb8**#+3Vt+K6!hbxYf0KGrkmp=2%?9>|G|+1P#?Cqck`
z`;9^__&XKcr+o=mhWXyd+>L}3gP6#ni?0F}OP7WW-;@FH60`t+3zDhu{N{1Y5N3X#
z0)d$&r=enI(ITMCEtta2>@gO>Y4#Wmgv~CYfo^7j930Lb5?iJe4Q79{0C@IbGnk&U
zEg6{4o>T$yXO9XF!_3dc^Rb{H9+?G&)G3--#6DOv3)yFFW})2in_0>}ktJ6)YA+X4
zB)VXpEV0x0ew%cEiPp!@mEfb+bhaS4MtVBMsARELV?gHCyhxx1nrTNJpC^~D7lg;<
z682K2b{=QyE*5xd&WFtAd`wnnJ`7m2MW`<Yxe3HwkO~Fb<b}1!q>YY5@#JNGq1C>V
zK9jM-1_KerAfl2AW;{LsUO&#XmO85}P+PhauBbMdj8k2IaT35dwpGD2So6wM?gH}O
zT8c+l%!tXv2NhDP0h+^QmMp`xRznfVTJ4GoA{M9%F!WiB8dz0eK)KI63yjr_L4^_!
ztzb2>ngQg^?N10~s5TO%>&$||Xkj0Fq0<f)uJef&#T9kOK#%jl!^H%sO;G_YMFbxJ
zkTc~oXt{uYCe`}sEpmMv03~gBlPz*>jB+%gj|MZ>k19OQ+hR<O{4gDHma0B|W$!O4
zu}h{thmxBqJX<6_gX_6W`;~oGJ(PZ2Bw-`Or!wwEG?3ibrOYZ>1ed9b3YRGG$gEjh
z5urfU1Bf?@ZyBdRHlo2WleVO*JxegP1X)b1BjM41m^txm!bV#NEji<lSQ^#Xqhw42
z5;5w5F^5$!Q=rC_`{|7d(~i>x+tTP{td-vpqw<0C#wM1W%moz2x%4B>24qa#5f4~4
zC-y1yX^=s@wuQkR+LXl^J!tIZ6v&LR=Sh)tNL$8e=f!m|N|?ea@2D@~k4wDOu3tV7
zvgR>=T?EczRrOuY(xpXUSo6#10nZcAF1J{{Nyti;3W*I%T<~Hk+`N?{=KHVYw2p2}
zL+6G~X6*k={5DJ3H>TlKY0Kbg;Z681D@$Z7B9`Gbquwi(f~Ew4A<&Gu84m`20$P_L
zjru4$@=XW;b=&o+d*g_~-~rcv5!V5q>9s(AL1$jYB7%IM@U9rD=P7K)*T&)xG8Tuo
zrB>qe%){r{g|jHm{g`7L4qyIbjKZJDTpA;&ot9ZPqyOmYO|EKzeP83{wGH*!hI)A$
z>P(5O4P5&ylVAzL0;!l?8jvJZzdd8vtIeyYd3G-GYW0ko>O+c?_0h??RP%&#*M&oW
zcb(cg=(g-0z#IiEiUW4X)QDlnc&rFpt}gW#RNBVf{fX`XYP^Nw*Du$W$ZJdFwI%Ym
zY>E7zW`bNwRFDPIoQzmHOX4tz-vL{&gq^{WMmT7dE1<GwDpD3ZjQFiuXi(c_Sl!09
z?uhb0UzK+ek7E`fe#vu6o07yd8nRe_BYBO$kzJwzY5U=bl6MSLlIG?Ufj=Q8#0>=U
z0O6_Q46vLtR2b|{J6!^+!`y1TQH;+u5h$n8;`6@H4Q4*^(6Ldmq;B)_2~7>G5w}Zs
zGQAjRU>j28_G?NaYn_Z9SaE2%rX6BEnxLMwu;nwiSS?LR;Xqno@nn+E2Z%O*R~3@*
zX?2}mSJe`7{u%X?19CPO#-Cc`bkw<+`~6Ui`#fOYdFNw^f?zxr!Ra#EP0J(+YvEG;
zG-cI?G3jh$<&w)w0bLwX_eL?o#@xjd?ktm+My*-f*G5jgldir@wbgNIR&D5Nr1NPo
z$wuP?c@y(ny~SFA_ChkY$ogh~ztP-Fhq7PWt?j-9#MMP;09z<Zd=?Djkpi9lU3FL@
z>c)yT5D^)$J4G4@LT?54$Pi@-;5>)2Hged#kTw+n>;?kiwa;S~QNN2bF?L)y{?#q-
zyg=r}0yFnJ+wP;&?#y+R&u8Ahw5Lt=58!H(w|xW1wGH52*NI0bip1uB0Usx0LS2`I
zc2^1j8e}Ars74?ngl%oEC?1*B=}*Xe0Ss{MoJNuznKn{_N%%Av0?>yy!)-{GvXLvg
zI-r5^N!#-xCgn=thE^-z0KlQj87%AMad5G$;q#9p2HT!9uvGVEsfDGqE)^|gK+XZx
z-G|+aj7ZXyiw!8~fB{s088!pdQlAlzOQe`I8qs%>hG|bQ6m%$3KtwShpp>|h8m*hr
zZqFF{eVjDH`+&spxuSYhwQm6~9@lNCH_Ex%Sb77L6{V)>+6o)t!$@D|xMa%bcS%}%
z1g$-S$l4?5&*c$x!zQREU3khe-ZrgN6gg;Vdrmf-XRc;*RSSTBauIa>b~BTg%+2B-
zAG(>`*j&o!1)#>QmXt!FbdJUqqbR>Fin`}7{~ShoF)NKm(2SNCiDd;sD&?JsJRDY;
zcnY7z%s0`U&Es6B)jCXzd1QY1QWIBWhBAd9kq9CK?i+Q%wW(eE?M7aw+5mHH>K(~3
z>Q-zM7P!#_NasX<8f<SC#{$mlsRg^n`#c>wjL3AZMZ1KL$IRn2X8xpz-@{1Uaz*!1
za@e*nnBw%}D3Nh-f?!Ab9J4f%BvZ@Wilrv2b3kDJ^__xSvHzu^>bzJJMgNg~*;9~f
z@_^7O%~N5P>Dm|qO)nsPv>|r3$Y-guOqM#&WZq4hF5MD;CzT)$pI@NFDpxI=zEM~Z
zM-u~Xg;m^?<l3V#HH3$@GnUM&k**jk?1%;!GF5P4K}Dx3Mh3YZAaw$yKP8Y-_}MJf
zyfr7w3fstnE46ejHkZ6x%fw)X?4`nmsLhIPm)qi&MYo*YZQqILh6h7Ov1blKjs(jW
zxxE4Z6je5VE6+W=ab=^q)a`fv;jr6iF1`SDx%C}*?>n%#f)Bd}!$$Kz`x?w9xV{Fz
z-ZfYN+VxGiz6t*@H(_4UvWkSSB(?=MvXwLK%J9p{QTv?yv)V-)l#6MD9&*HG%!6UV
z<%oH}zW=jIerfz#Bgf-VL@^EGR@Rg@X3+{uK!BNl)4D2!mTG!ytl(Ql5M_oNYh^q)
zouDesU^cKCg$oF}rAa(uL98t{YNYdtjzgcd$o1jrn}HBpM~81*5ryhshTrhj_&S3D
zHLDdAgS&f;-5KUEqoiMR#W)`iJ@*6d7rDLDtnWOujosbmF8OCLLun_CwoXLkI@7Wi
zw0DnxW&3b~kZavL8i=3H<YC4c(nbLv%CTtvR<g`WG!1DC6^voE36?_rp}IpyV{L!(
zJKHk;v>vKTfanZRxE$$(JR}r8cT0^E9w;hG$Fmg4Ty3Yr*G2|8i<<Of>ZW14P1!|}
z@Z&Nsc}BUrA(^%a^?h-dTIqpzhxTQ>zUa1pueZo`=kTc8M$qhd&Aq+G>uaFEuG6tx
z1B9l*JisMSE&H`Gkj=VN15=;W@SFABR~emW5_LkiCHt7Gxwl_ZQ4cg%wU*UWX9v_5
z9%88szozpl)ScyZv&5Y^-w?wg7v1)puP~E&-*LR9B@BQs2W-6pd;x7Hh7k=%6QbyU
z3y(&gBrg=D_A)y>Ww5m=b1fmgVl<OHSPJy6fg;pio$Bvb*EkB(sd~53fba0<t1VEv
zFgND6z#1IcfnjuOIswgmB?Wn$jfE~3e1BDL-=q=IIpCq?w(lZW$Dn9QM&i!i3|nm+
zv0>_+f`%_7Vvf3|6fvnz36fx8BwQwcf!xH60|lcX*Qe~3Mc0bAvbP(KqfsYkJ@5fI
z+NBy~>PL)v6T&`m85el15{vC)t2$JXq@To!j7?iig9`yB1YK{6A|s9cDY>H&uq3IW
zH|3fip?8$W7;6EnnzcD+&7N`_6kStuhPYU%<3Ni4G-*A~OpbC(q86P&SdZL)!VA|;
zBAEiP+6cYW0Qi0C-rUg$%&9^e^FH@^Jb6k;hR)}F$3-bEpjLf30PbqcZ0_zpk5epv
z|Ld)IHR)}{3k_|kY^0+uB6ZX4)?e@AMfa-lx_OP360m`qnSxfJ^fXSH(=T33r9JQM
ztB!YG?P9-s&Bn}b_x4xpRbOg<Tcn%6{%Yh@Xw|$O0t&J50*F#aWLN?gmK(%kR_J?i
zM|=?sjhh8*bP`1@i2Vslb-cpO0&W<Sd|VTa)1d2V75h685yM5Ob)!X>65I_1M*DR#
z=7HjHaP6<H*}Q4g$JbkhfGT*VhiJr1<Cu-Z7*hq542A5a&FeV+96gDD^hD9rO#2!!
zwG$B|jjT?@##)||1Tpugng<#S))P0BdoQgRZ|Z`lZk$j*wPrJCYkHw=dlHYuEE@B`
zSbGHQj{0a8rhtwHnbAX>M1d?UFt8ug3M`WL9*-!ZeGynzBxOsSNS!Ks;lLMJ$ThZi
zW>?;nX%8hPbg7}up4pLqZ`6b?Vz*p!5q!^OETYK?AM+&xZ;t6Fm~)Vf`^fi~8VX_a
z5>12@kSe&0DGz2T-$yu-8tG7Xlr~VB0OESO$Lmxi3qg(Yz5!c?OF@A{&NXk#xN&VM
zoZ1bUi(esrgjXXM=}a=Wud%qrj)d=lcQ%h?%AaTJk}U%J<TB=eNgNm!un48C(%ncQ
zhGvmNuN#2*hcNW0mI5((aUF2~`sJ3@Ck$7M4+_rVYF>tNNFf$lm;*?&ka^}P&VzWT
zIrTjw(H6p&E#oUniUE$y7UV6z%+A}Pp-P~@@>w{}nhMisSQ-fxT~cx?0`0t@1812W
zDTv!pF;N`1&u=Y%S=b_@thu_Xxd$4Txu;##7cTWt>hzH%9agi|F6hXQxgz9Qu-sBx
z8FGRZR9(9*krPv=${{>edg2p8!;sM^U)W4R^BbOrVUhHys})P-CZO&^4>?H1-u#vX
z7zsgb?UtPnM%=RKF5<Bk_VlSl85=k}W)0>k2o|UFdM3Mnp{Wee3wE__jUDtb3W)K9
zk7-!CtD2pfa*}<3vUK^B24orL!w&1PVE!5y|0AX@SJxG22wv<rQ|@4UKgStu0ctz$
zWRb9QqCVrr?x$L;Y4P<Vd#c>~<UwZeXwL5C)$69TrFbhr74rdWc4m(SxjmLSL&Bv#
zp9hWk`9RTsZ*?*v8q$FOPVt~!Dr$PES)JwT5vce_nB(fR`(~#V3K>)XP<TrM;yILu
zkhI_KoFZ|{19!<8bz>T{?Q>J-Tb-0-5vTqsuqw;V3o01y=K-^tH>fybES~G-Gd(V-
zV|;wR%>_>)zKYAz<;C&0;H&gB`36u+Yf43I+GVMKkUC-&r={Zoxh{3R16e4t(jrQQ
zqA>>hLv=6=2#vr}A`cZ9nc4~m80FI<+>N+9$_H*f>|T(*FZ$~|1?xNo>pTVPJOwky
zxXx3s&QtJ}^AtQNg#Vu>cK_3cL(fG%T^t4-DTQOStbCqG=c|P{4;B;M>)__=;O5T}
z++6g3F`%&y!#g7iOv%KI@-81Z5jQi7J~~XB&7vh_2jh++X6#eN<s_j9&=$d%>w_^u
zX=7^NQ!9u@a|=wJpzC7%)n7jSTAQAvYT)%&VK`h8kpOb?QnkFcm@{ywJDnLbZ_!@N
zRwLqLDHHd1XOvpUqhH6Phv&iZ==BZx2MjrX&%9%84A@4KqQ!(qFK3;gu4x`5A~ES^
zNNQcEjg%zB+(k2jJ59-<NMpz#$|%}Fyx@QcUt-1}nYb>Ka*+5|dx5T^1uG4O)lk}k
zdgH99o&6>=94dU;(l>=qCpbQ^yI`N<tZ=GvroOB7`)I<g@Jr%jROj0FB8kXfNR#}3
zKjcOEq7sKRN}*#uHd7em-3o~TPV(im98CVisK8W{5KY%iF|}#5?FaN$f~wn=IN26a
zI%C1Nw7|wm(?krmhXfGCJjiI4LSSmpub}7=lN)4@n(le(a?)MiiltWw^|;9Aamoxn
zby7%IJ!f?n>l-|Egf#{Vmd{N|e55pgJh)b!YQ?HSfq5#xNI>Cw$?RqFE#e8bH$|Hz
zl4Il3Ww&W!l#7VKwXpK81tM+_;&Oe&)DD0RsHVFt*w3lObD?0+fJS@&8uOua(@JB6
zKMB~0cuC9Ho;lWNCyHX`$DU(q`}!o4)rO)=p~#D@tj#hJ8qb)zK@o6*w2@zbK1Ev~
zND{hYjGP48tSaDlN6bt7a(CB9m@``FEoW_M$n8y2ZL<uLQ~O|0DEx?y8go=3z&#lI
zN3IWd>Kk!g$R)CEb>*0GTpJvrNKtK&m|5$ZVdrz6YYUHm2IMjn*~PO}hS+uMsxhk(
z+uo~0eK$4FG*6CNooTc0e+J}#oJA7-VeP&aw+t5Wve=}wk#LNe7Zq9r>r<Mhqvw)@
zG>T1pecz(J6!SMwdt#MA`{$uRIMr|<vpRP6KW<#4wf(HN?+l8I$7ONX(hXYH2J|Z?
z0vb`@XTgxk8g<8PoeL<R3uwlgOeX{~%LwnRbU^0)bTXiH;o-HF-zV39)Dqc!re8X0
z*h}X9xnBk!kXcy3on@SvPIR&`osN!nJk{Kh7*igs)*cQI#Tru$UKC%ilo4m0;ifdh
z&8mrlmdc1z%tm$31Uc#P)4KyP;zc%3b+@NQ%$0)H>j7yWe(dO7n;PnrFuh!a?xguQ
z3a=I1=iqRioMxSzW}TdWX8su~Pfl~s>@E~TKB1N8<;6)!k?DKMe3_RT=7vq{0UaWR
zU*^{9kXYQXX_4&=;if~9sHh8{n{lQv$)z~q%Zn3pvH=CQ?M4c2M5r~(V_8jWugvo4
z<z6^OUCywsToG@4z)jNr=^+h7v_)8LSTl~PHCK#NL0M#{P%sUDQ?hx-eb1$lx0z$A
zK3;Zv1*R$xfny324`>$M9fZgDOU>%_Iu~I2+WxZgdMzI~JB^zS+XL|8Pwcd6YM(($
zu5%Y^IY1V@z;J&^qiA8NS>tpmj|*|@A#}i&32Bgv1Hj_Q_)%LmHQ7T0vZ;o&so$%+
zgs><Qk=;NN1zJ9T3mj&;<EF@%MmOjorN!Vg7kC{ad*ML-93iq7o}|s5!HOA%$wx&<
zU%wL(`M%dXuQx1SFN@ukiAVrz8I+*S71BUbLaXVu9ZRu6BaSe_vg^OvLhyh5_<_Wu
zWZVxGYxlR>Uty>ad)^(V9Elox+Th==QEh&7+MP4-K9y{Le>XMP?S9{G?(Gwqq~Vbs
zVH_l8pW^)DfSL<O(EF(e6lvrcqrzHQSh@LrVQ?oe-19?Q`-Au$s%o)3;84pfVH#;d
zKSl6Z?4EjWk1H>b^~RFkR%w9PoP%aQyg~|rIdVdh{)B`qQlMvO-U8H+fiLbJ-~+f!
zI7kISN2lF?rNeAq>fi=&!KeXmk{2bB<$e=lB>1*!-SGnXlC;l{|3CKLeLHU3S{VO7
zPl2VLwIq4XjO?V&YSo_hr%Fzu6I<4@l(r{z&nJk)%%I``ECEWM<m6qxXZfD&x3KpH
z2y$+miyS#2{)wX@L11HJ-!Bdp2%(vcA}Y>J8CYX~zif?4nmmETx>Xf${o`Y8mVLEt
z;mzh(*Qz{u(ky05q3{XYzZ27apm_6Yn}Q}|YPC0e5WRonOQa&m$mqIaNiENTwLS~h
zrm`tp1IVmhg;VzFS2<<tR61oXtDVlk<>^;ET?-EGDzAb;tI7BspK!T0<vfAcpyAvP
zS_vY5i4&phQzVkYm}{qEw<VNlW5K7_duOfBIGIN#;#4bBPDC+d>TZrT2=vU3J0gvv
zBhnp_{#ZnME*a@AB987Nb{FyEUc`<e&Kuo5?C#;mx`%TG-rcA%Ka|BrCZIPVo%6&^
z0UFIy(_s9;gCk(BH?sb`DR0A0&(C(CP$2z(JU?5DX3C-OUm&qS#c3oCLFz~*hL*yf
z-&~#7s><&IC)iFzum#&VKikO`I%3`t^G}qR3w19GttLXPv_#dw5GQjW&5dSa2fpq$
z{B&8~W->X=beSIRiX^N~#>3H{Swh=aPRCO5wchwz6ceu2dgZ&Tuie1|)K<SZ*2ao|
z^n0zuqVS4%EIhAZ@0;W0+SU0`NrQ6;>9Fhd`10itB)wes&Gn%FwvUi9&=kEYB#Y?}
zCNR6+eCEM)!K_f+J+eCzzYa}q%Z+ECL!o2mXZ|>w;A#gTPr6p_pRG$)tC`o{TcD@g
z?#@GZmwTHL;MPLwur&x7soz6spco~82J7zX2G-@rwboieA4z*W)vlK3Z{J!AgJ^5i
z+NaR@F-UPu$<&6p>`)aI+O#Rin%u=E5=X8#QC7azdXxzU<o-!&DtVz-%+!|9ZNad<
zsl7@~+pupL&%B@sQGz1N8bJ?IQP^7rW8!yW2C$G$YvTr{5XuHBftciWI;X9FLZj6B
zSZgB~hi~kx8zddVPV{P4Y3(PS+kfupbgoY4`WQMFaE)Qc=jSrd-M!}<r{UF)#xYv^
zs&g6Y0jx_@_T6SE(I5KN=(x`*72K)zK42HxieoCQz!kybPN<nTAqM$@kS5WS3078}
z2s_pgO)RZXS@mh3l&R`)Ef>XqL>f%XY}e<uBS{@e`UFW5!wbBPV=Y`kA1J%@26vaK
zyG+02%LMgR*SbKjpdzcU=71u44=Wu7**I#s>p3P?$ZK>3--&MPfO2IEZpCORn%85{
zFHYXP@^4j1N!U!a3M!}mwW0msn5)$3!|rV_yWnnzx>S(A>@~O+GR?|=^I2^-?z0Q6
zR=MZCf-2ezAEHXiIuU%SZ*;DtcZM&&buT|j3xRDLAla6p+AgYN&ghs{$Fx2M(<+9^
z=P$naaxFUb?yFPx4m;R8n<_q$3HuJR)k9xDj0?duzbmK@zIRw9=q&83MQb@ad{P7t
z;N2`B(Hw1WVl~-Xgw9=m#PdtvwT0;d%&Xq9$CXd&ve@~=@eRtyGi9FZ0_qv~V~es4
zF%7{z5R!P^U&!QoetG|8_-2&xEL4(dgXKlcze`>Sb_?fe4LcBn5&OsI&!4|IPH%sA
zeEi~{hyU;Y{(-qqKsjBq;?~M%O4Is&xA!p^IXdyJo!2u;IAC9YU!8x=!uxTSwMTIW
z;u+Wu-2F&VdIK@$=Eg0g;eouNg5>bqw_*yF<!&Gx1q**Tnu&AQJNzFc+=#wZMnLJ^
zdvSQoZf?GLb8`CT?B&f(@Vy`Q=+9T*oV>WXiT>~NmtWpsw`~8HmoGlQxoK(TXbE@P
z(%KjfK>t=u(PKS-7v|WrW&u#KZ?S`4ui^iB6!h9AD5+T#lPVE5YGDFEd~u)Q48rVc
zzn$pPi7ua_=%Pz2UVgED>f7J0*gJgp$!S-G7%g|Sua`pht(dOqX2;qH)ytu)J@l!l
zn;ROvNrB<v-D*r=1j-kR`i|T14J7xvfd5iRCe$K*5NybQv#fv1lRI<|I1Cl)p561p
z^q3iQhp9;+AUK3)?owt@FVdawIbGRMov6o5+=<H}?|?s;0iW<6w1RALliu}*y6BJe
z(ftc7n&e>JAC)o{N1h!y+&1amU~DJZZ>o5NezcOEG1KS}H*~O6Ex5yxEIm=*#33)K
z%C!R~E(6Ga>G>Ize1QK8`t@wj;CZ;wVZ~~!=y-9*i$6hL%xV!o>&Bdg&M~605JR*L
z@nz7b;IJ`fP6ht$^r#1H$zWNkoz|LZeOKm08UV5+C%l%%R-r}aFCa!Uo=cYSEZdoC
zfGm7HJ7)I4rzW)Y#2IQ<|A=zBEjLK|&X%sT^|ZEscRHg=Yw)j=cNbCdaeqejBjv`F
z6X7X$Mft^tJd=sEHR2uZ`>4srs38E<Tbv>Kjz`5&>G!;l{5BIC@QB?-Vb#|E@fdo?
zU!#NS_-n^sKSBQbAa2K6-?jJ0dgB=sUHm{beQ6eQ9yhgJtfcm&)ZtOvgh^QXiU(UK
zO9JeF)??tI{`&G_ayd5?CF4-i9|zARS?hu2SM~aUFjL`8cSFHup7799lJVkJ+JYBT
z_Fq?TFQ7l}z+ZW?8`H<VE=GN;$)@VGFw4~soHW1qMfYtCnFpi(picE2s|kJvnTW$4
zo9fbkt%RUxTnO;GOe9tpShm}HZ0ERTztTm2)$x#ewA71U12yV70GKkfH82J_L;9A8
zoEp}pIw`~ducA%0&SOyHxwseo65F!%;rpi6<YE38ZImhk)|bn3$`k<$@w|G3fG3x4
zudX2z!sE*&pJtk;RfqS5h(@SX%^I?3s4`<nbZKJDN^tK?j;`+Xc9!)()k-6JZhvHd
zGjF>e1Qp1xcA8V*KY=X%kbj@b2JctlzWZCl#BrscsT$-=u~H}p8MQaawK4KGg9r?L
z3uLL*0cMB=f8)x^=msUS(x|O`7-?=Z-=2tM%#}2gN3KUX;#NHHsrx=?F|GNo!@jTa
zWw^&!VqT8=N?0c?uu!5MP0vsmRi`3<GoFw#dJ>w~sMxYrRk*|t^m#4^Mvg-3n8QKs
z`-J&`xm5BwY{*b$+HrirsmF?Mj^%J$`K}|LFeFvIXe1%{5ow$PCkhGoCd0k~NGsV9
zyA@-8FLhafoJj3@y&Jl;<?_JL9S5w(t#DeNDz@VB@PR|~g#vh<XA)U@1YAmgCxT8y
zwG^VU)0TYQS@%M}R-ku>{<^p&OnddCeU1_@gmUWZdXU_QW?UWsT+PCuSBDrv()dRK
zzJvNBPDn9PcPW{Sqvg$Io!HtWqB1n^ccygYolH@Fj!I^6x0$Y&ld~e#cF~>WxrCbR
z=Eyw>rl_OeaBHFG?x=5dpWbYLslP62Q67&a?aCJ(%-*HnElFpgBERvO7S#CSphO^5
zpg6=U;RMrL@Y@^52Sti)1cb6t%Mwz;qDcTINV=T5QV3=rG}JT)9h7FMWEvn`@Apo1
zA>Qx#7>r}~Ua@C^^d0zrIB8rL6EI5Tg&xXG9I|K7u*1>XgEzvA=RMSaYml?ktTa{>
z=a>Ff14hY1_gSEW4nU*?Lr<@?5-^a$K@DkKY;-pl?{k1tix~7i00%k{`sou~+8-*p
z4Tvw)danwSkEDA@G~cRfp4TEN{Ws?JKAVS@tw_>3hLx74mGz7(D~k5lNBw#rV5xHY
zs9w+?0A~l-Xs}d)q4wB+`#rkdgNmyYWq7}botV%JF<{p^*nbmU#9F|CDU&gDKmeud
z{T`v<`#r#(uz<rJ9e;?^B9p4`cB<L?z4v?U0CQWB$R7fpUHMz&Zq@2DXX~185T0N<
zI%W$&(rTIs|L|I<ksTki&tHDg>XqCHzJ)qw|MMUJ`#=BS{U4rx_kaJ-gMaktU(fuX
z4*z`cez5fS!)O1|;)~1rG1NyL$9z+wyIPwDk6lO(K1~uy_yrgYM#E^a(y;TI#?`-~
zDDD>2hi!$41cG((?#p&)H<8M}@nTIpbr^Tj|DKTWr2l=uL;CmOpW7f}TdQdk5#!E0
zs%Artknv;Cj14Xa`<hS>3eKjN0U!etf1QP-)AtGzV10)qPYXiQLs4d=Z(mm8FUrH%
zRj``)R+lQ}g>-Vpsr#*8{T55R1vy_y;(+B$;m;9sfkax=c8s0~J0{(=4w3LCn%+VB
z)@br0{XbktEX?3!ADo%ADzg1K=_bgjUl&|iZ+mg#`A8^H$b`9RtY$*-+e|R7f2Kru
zJaJ7H?Hb$QRsf`U7gz&knRwE;Kv6CPd%u?#IxQ1Xyx&6s*YxNloWeNuBnW;3cLW@r
z)l4cl8b@%INYE&QD^SxIn3}vhu#&Zw%vmajh?O&|PN=YBv}$V2WJF`F0W~5GSeJHo
z^}3KFsZiYt9r5NH7hu6Xv={|9f3j30PN%|Hm<XF4qNG%P$1SMZsO7~-SnM3dE7;85
zsE<s>J`V3#D8RJg8UT(BsNp5W_`|g)a~E)ZAasO`a4ZJwhomn;$H}~a!wQ(0`3y($
z0zg}{Sy89z?_DYEwXWVlM<sGg-*+Sn8vHt9Vd!5DLA}!<*u-c9++qzOf3Ly8WS*43
z)(+f7G2rNkHhk!Ix{rp^xDbIwY5&H-?1q&p6Q%|@w-&OR6{c>3_xBp4e55Az+&5G)
z4byq9eNJ}R?14FC4`XcvJm&t7v{tmrrNpS9VkR6Yg`2oD#(0?`0#C0J5!`d|<q*;C
zKq1obWnA!t+hmN>SG)3!e?(UvCf)AlVK(+2T;E6vpgnPOTL-c5dbs^A;g79$SQmB;
zdvo&NzK&32B0y#}YZPd{9p#|lD`0Gzs}(@k!z2^Da14lCVr;A*j^vQ}%NyNBSnXF7
zW|NnN!zMQ|wr7TRerU*od8COgKc<90lVO=TOw6<zc^cn5SDt`Vf1ODSJtrm4vT02!
z=mn{uy0DIP6v9#9#1gCUme;T<;*k?4mf($X_qA7XonD+r1rE>`ZhN24`5rDZ-frMz
zUT%OaAmm?x!GuPWb0On+Crn6nr<7jj%bvol_*^RR3)O;y{W4~Lue{Cby<&eP1^qa_
zB7a(kHP-v$FCV_?f1OnJi_hC~Q#mOo$L!0OFTZ%%mYw1&ZJ4R4=)fjyFeW1n9g6$8
zedIK-HlSkl++@tpbHXpis?ZhgvBu;v@1*+`UaRZ-$LzJI!xw<=k4z8Op!&hqaEwcN
zYU`_Xu3)$K)W+({*uf2nnPAeO{<$?92?J9~Fao2o2O7DDe`G%}@daIli0&F}W8MlI
z1{cco<Uv+TxIrp1UCbhuAYR3`Bki_fWF&?SPP53+jKONM5RDL!?HG<6GHzKWxUozt
z5$>FvFIZFzsAD@Ho9%qkrlZzM*S1z=iVV1RAXvxQ`qr1s^q~cyML7}^MHP?(-*`*H
z+{EJxoeChsf4ZpbynsDWI=|=b89;CR!#jxtl4?{4v(&dU6M#YQkOnyuL=wkEU{}{D
z;_h}@Ifr$@COV~hv*$EvWVlvL7b%9;fVHIR<?mp;e>8XyS=NWRG3-GazH{{V|Neg8
zy|>?7);`O1N-+i${dX^o)M`#Nf%}SZB&TYdP1Q^(f4XOB9PW<8Dw2#ZKc+cH6{3ry
zf<aIQNhytdj@{G)ap`CW@U@$UGk^AoLf_tcw`YPclpL%#^u<FMu(v9k0`t&Ac7q@5
zu^UIRF?*iYaq517Y;3Pa2M)NiIJoAgb_8Sm<D89<3B-r6%mTIE5qVw6UPm3MV~dF6
zKYGZbe}I3o{^95044&e-T#HGb@#P_6GshArv)`VjS*jlWA%NS?HY@i*SM+j7{+Q`h
zzQcH;b^Po;{bTKj{kO1^H^OqJ??q97O@A0NeWL9K{F~h~B8hurA0xK*LDt@{sEXP5
zv1uMVC>50=yg&#K55rP2o}*h;s{U;$Gan|6e{vA9N^r>lU-7G_h1XtbpB&LLs$$(B
z2o~?I-3!fl_Xs+T_+*}@RfM}IB7nbiQg!5Q0}Qr4K-k6+aP<$aA#k>fEA*oV&eu_3
z;jb8yZQRvMW4&dASJfao<}=(X1R|odi%Dfffvp&<X42L~yoKZ@aI_E|UQ%(SM5}+5
zf2y+hRNM?}4QJ?lxC<-qkDPvpn&pH`Nb)d@vlquN*o5afx&`cm5K&go`6c$XYVQ7N
zvCCYi+p)@Ar<<`!5U778JkkNF<BwY%4EyN(aUM~3Nc-tibU%JJ-uTM_qoc@c(~3)-
zUgaX8lqWNXU@WqZ<T@R&)3HeI0Ib2ne{cmq<6EQ}`j1%6hTst|ElbLR-1w1g8%WB4
zow)lCHfbU<K9@p{lwK=&`0?)la41!a-erEwl(VS2B66MX8^~l#%gpicL@Q$p$KcK5
zA?LcAc0=h@oUFNd)&#&A{Lig0FkJv<41g+Bjo{PvlCsTU!8U{kzDK#@XJD4Ne+s)e
zM|{OUzxp7O(zdAl(Ht`pErH3KDDm^a(CG&<5o!RhCym@nGeou?04_e{?t)^VKyc06
zPHU;Ox25$N{Gpu@oEyx0FLee9I3Pt9Y@&-GZb#E&=2`WcG;E@ctzhR(K5m+jdWNkx
zjAf>rxJe&`9F48%F*y)}%Dh=ke>)LAc*pzmB9y}1f(dxw4uT3mHrZatJ!qcdTyXW6
zu*u-C2d320I+(aM-cFgcqVTyxg)T?96Oqw}>s1q+T;+I#8nHdx+@5DzZaR#o#QlK_
zl5BH{E(&3Ct>8`g<yEz|KZKVcn8yQiEJtGxOHKlD{S4N*V{EOAqvmLte}U8-4H=4>
za8)=IowgOlB)|+10?RLu5IUh^G6;0`oE-p4NxN?Vz56;p9Iz9n%5cM$eL(3jKTSkE
z<-%NR?{z~WhGU&Pn&#-!euYX_XV=Vo9bvlmtDBNv|F&QACU4KwjfX2|LRkV)OnQtP
zqZ0{|WVlrIn}|DK|E$@zf9K7%h93i$Xq}L3I?oI=Gie~$p$^p=LB5^Bult5{fz5!(
zwxUYa*pNO|V<|dC8>a;DfM}2>smZS6HDoBJh>_ON=+H43|8OCY{aUK=;~r|SCNCOW
zBO{J&$WS%<Zev@{;DNTqG~3@V94#w2EgLf;A>0}4ls5J~Z#_<7fBe0Z2e-ipwuxN*
zV~`}z_x=x$ZQI(hZQJ&aZL4R;w#^;ewsvfLcI?@)?tXv1@&7%zA5?Xotf<I{6WP_-
zd0us0x_wqJi)%j!c3^2ni%9mK73H514UwcKMp?^9tUyD?!yP^`7c@UynA7(4AJ;-#
zuZ8Lar4NUv*%+omTW|ZopISz`UVOx4jbd{_F`k>$obqT&3UQ1fzci6K&LL1>64@{H
zdG_=Bv2^}9!R0$uHlGJiae4xfLRzz_!=97Qu#_G-#EZHOUs%`Pc-T~98%c6}hkTg1
zmV&7}?wza57RFvlr08b7$W+scjI#Iwo#`Z5f1<0zKui)^ZX>qZjjcJ^P465)+K2X%
zxcG%~BnMzw2gfMpHqXo8bMsmk^YB`OOHtd;otDHZZfKkGV_Fw$wmSm`9|Y~^&m-kI
zGf-;;_?Wpq5n~e+-qFS-1!o!@tXv3ou&2AB4lyX1FqC<(B)&%;PBt?NS7hdF;vUgk
zKeWw$0U(6nwhxRq>SV&<^+~nw)b%(~)139#pe7?>YP&1<KJ5Qi%VcVrt$T)Zt=U0F
z?u|k_ziXUEzE`TRphE!KAodHzB`_Az&_6Nh3Nd#{YgdFH1a7aa=zCAn?BVHSotRQa
zX!Q>asW>l@T{uf5p0_O&gJVN_rXjn(reduxv>r|Iz3q-Sv*%*M{)xCZV^{L6_(S(N
z+$st0wB4+D-q+W74`2aBXx376j!`f_1)K2m4&y~omKd=+q2>Xw9xl#dp~;Y4D;+cc
ztnl(NEQUjZ>Iwu>+bC8#E}Z7MH)fu8*T4AebKEyxKIW|tb2$}@7f1Q*yFXw40;4Np
zNosqy1xZ)n@xR9ZPW~cF!%uzL9l$3Pb0XR5SrR|o`E2QXreb^P0{nHVZm4c<6cM}f
z$R5xPCem2{x2_tm0CTu4B&(-4jsejq6C<+e6k=Z0?4V&v8mhsqt%`gAr4H`u91G$c
zI4zzgO<;oT#O9BMNnSs{M&cCfu*+$E41e(-vIIGyvEe7wsRk;$&(tX<Dn>6z{JahL
zRigufks;Cc?lXc-M=rYCMZRBahAI&5Gkk!056e(c%DdfCn%@bk`W0d-6{@?&?E8|{
zso?^A9wy>zu`4}%LU^`=Ej%2$ZrvmBKLuBhIL4rLUj^HAcWW_1bIV~}6K~O3LmRd;
zht_7~P3)*GSX${8aW)IRW3EQUN3+U3!x^5hq?*zi4Dh_xkZLTdVY8fKqsCYZ2Mhq!
zI`esWPM)SBrV4XOXEH&rr|1o3pY)>)t!m)do4JY6S4fM(>RvsXD!H$wnjnQfeEp)-
z1f2w5r`(h|4@&eWjm(O9)X|n7_&V7K)>{Y*%wv_;-p5{Sl0TC2t}Ps+1O(2N4$5h5
zZWii$_*k|trb&)>IyT@LqRz{4a0CJDKQ@AQpNRBSH$Y8yYfI)DN9-fryO8QEfJ@FX
zEtLeW;)gY$W11cQAUt^*AsO91l{!Q1R#Rz|uChdO=rLGqy@{w&4MYo`tYv5Md=ogr
zuWB=xRL)?sDlTER447Jk%?GUA&+>`Qor20jR15x>yRsqO?HHRuMWJlm+yFr9=;^<v
z4d8)Qyf}Ltt0+_zuPAi!uZa>E@_yPa1FtAZmJ(b_vqZO0!i9k7%(>7d({^&PLxlmZ
zH07c>>R)+vtH-9T%7ZcCbd=XEcJynj{5Mqo@b&MF>vWQvbv^x5*4REpAx~`tzljxe
z3$JLd`7W=%)KY@@W)A^`EwQ%QGOnOFV;1?*emI4wVYF~ai<M@QGS<_iI*Q5{3Q1f4
z;`EW1OvG9Ncd>_Tq0tN-;s{FHcfhOhdvNB+UF_h5^bj>7uGb1&y&GQoo$%J}7+r~P
zIx&NGPrRZy?l>&z_WDvKl^%cNM)OQ=xSmUW9B#M{`6QH^l9>wd#tfD3!Dd}T48thZ
z9<zPs$cxE-L3|KdY6K+{Netwlq}kk}L&LdVD^ikn{peP)vs6bGI&Bw*KqjaOTfvDt
zXC%EZr`?5TvWYqBQN}D4Vh#^Cv{?TE?Sp}IKNhj@U4e-F3lWl0^;g{iX})Uv4kwH5
zrp}-TO7<h$sQD+r#TJjBh3`8#;YP@PGax;Tn=j7>??9?;SLn)aSZU7UJEaMgkI#Sd
zZc+|yE7730Y2rq{ay^OkW&`WHWI=iT`k=UTtvsKavvM(!m#|_nkrOXBZiyf_P8~lt
zPQ3Vkoec$wQs-_ILIDE23ye0(o_8{Qu}T|hf({axfVSbKn#06S?UFLQ=w?)lBVGX&
z&Fju`Ex*=iTHiZg2DP;Gv~xoD<(@oI_qvS<cgkMf)E8ZdrrMd+snc`6794}zx<{eS
z<=4vi+8Hfi#3a<of3F~!E~QvJNp2(n40wQzoBMITUAfKqzlm)GxkA4u$sKt*d5sL{
z0h>YdXO_7ED?k??V1q%jEPon5H$ap4e_e9G(EV+_5_ly$1~}qkT(PMV<ydLe!}7>V
z3-<wVMAwf$=YGov-2uHOMi)%QRWHjLALq0I?wEa8F|`L;>C-#rO#nE}FUD+t54ZJ8
z_D;Je#_XP^H7=?2>0V<uz{)G|%D^e`4i(k;Q@4`;GF1{QSw_wwRYtxH{QSR88~XD9
zQaKTC6d$*w@!{i=C~GiM$4GkyD@j=si|aBdb<jA~NSBB)*eW?;!7k4og)-3SXhG%3
z^Ze#%JH4r{_hFlRd&y8=<Y__!SBR!^Ct6s5m8=fHNjrkcUZzJ+Q*fU^8De(%)0d5A
zWU7jr8CC9<IX3?!)rFeBCEw&)r5BI4RL~CCZ<W?os;>usk`!y7Rwiz0XzAb)<gN5N
z5<V|hr#_~cr$z1Hka{!3cvj^n5I8+htW??E?iak?B>)A94+zdVd%IfSH1$aOt^QiW
zZlVpaP*1h)_hS5}g`*~VT+3Crj!$L%eE8DE--?)WV1nQ_X{^;~cE*}VKuku^03}Bp
z!YU0cvJymsm(^O2;zU|o&f)q6v4H;m4pmWVt+)iEFBTM;TpNiMsVT-o3*Qcq+QQ*c
z{nRg0cDN|NDs*tlY(-~T9nJ4f=uGhN$#MpmGOn~I)Rf;%UD}_`ZM-vIV^JSa$hcKp
z0)6%t+2S6ARv4>ifKodS9VYBIKGe4j+y^avLyC=ENL7%sCJf<~UW!X&Mmczezo#1H
z<R~$V@q$|e`=^DVO53Qz#1hwp8Wz0P8DV@xR6dKpSM&2I>V_HY1{jP6Aml66sRjT$
zu_(hGgnpp(hRWiIVK9zq%S4<Q%=ka?VG~n<Y73#iBdq34)B6jn`U0=r3RyUP5MM*=
zYh$YIxoSagH~+}SB$Vq!R^e-^>7<L?E6USN60aACOkZkfpLI~--G2!Wg!#D8VFn<S
zJxM_~y@M<N_+auoHVyP-Gj&58bzB873qYGL_!YaFSqD7cBw2!cP=$3*(F;d^i6c+r
z^bwh*QFTj;^a|q*#*8kGCTxdP3CC8ljRfV<pM<8$WZngJba5_>{43584h_*Fo2NBU
z+pJSNI@Z6-1hGU7Em<??L7kR!Qci#SH>Z~A^w*b0LP(n2<S>R^-sFDxr}#Bss0P2j
zPd?Y?O0jXQ<dL=-we{q$L?@aX_i`xVx#(7O5Mc@4&M&{fA<%b23_JxMlaRtww@?yN
zFf&b1T>-939=?8dFrLf^br-tEGt#$xf3iU;sUDdp*_4+1zmBV3=$vhk79W_^SRASm
zVKGo}5P8+<FH~ek;%3u#X3Qjj@je0~XUz!IE!u9}c(*d?l`fCjx);%4ufi>&5Q%4r
z0+L-QiD2AZ9*hzxsLRSJSA#XGUHOqxM*2lazG+!g3FiP<VR}pwAG}1??^{}{>a9MV
zLXZ_sd^dJKx<6msUG1G9?mERImrJmGVko?#NBpTDNGFKEg0tVT*H#9=GE<rSttN1L
zNTP1C4PusuYx%QNDR84MkK8psS))Lnm6j$YnS8!A>|CIS^?1+R`JCLJPh<(|{!mCC
zkC_dh?nRVO7v8xc)+vKlxik&!xw9jZ{%YT>(k%<>#TZ-jFdv%39qcbG8XG~&N~w#g
zk+x#Vt=wL?XVBkJX>mBfF@tQObn2^MW0x)eT7rG(#a*K+Hv_XpC^D*8EuoMAOiNv`
zlaeG@h0Qf%pN=Dq#1a}B(snLq4u?wJhGn;m)-72w*;>c|CNtYb(xP>lUdvpW?mRp4
zy}~WzY$Zdl{yRDh_TS3`I9}?xUz%$WP!A&!L0t7;t$YaJq|o93v7e0<d{%56;CH{2
z?&T5C1TuLLveYAAN?#xyrDPvN<VJ{yh@fJ5RtMD}^uo(*_pRlOUhl`5ciRR`EkFw*
zf?1QJh_A-Vw~x4Cew0lqXoY+<vx8SVuIs^ZR^1G5#T?)c{h2t+)|!9XlNfyQ+QoPh
z2{ITUmZql*VSo<@C?>GjeugN9ppNjj(;Gd3HP~1zlL(ycPo0mUB%-~Uc;%Y)@6dV$
z++<%|OnyCJ`zrcu@O8Djd>i^^#=vSY((LV8{)>d{JK(YmppULz9_{me-tgrxzA5{8
z^K%m(dA6by)nKN%m(Dc}ZqnQWr*D}OvPH*XvT{U<W4hA`aG!PmCl@lc6Ky#MYhE8D
z3QJKHhG|@##?w?{e#n7VI%WN<DMRpv$?&aaC3COxi4Uxx<D8PqJJU>(n_Eb}2`co~
zOgwzxKv_ggyq_f3_^Dk)LHbV-${!20R^sDrYH_bL8_=vfHY#f2!8s0ovk7eqPoyax
zE~t+|M-40;K;vmPuzIsrgA#R>eeXe5lg)oClgH<Uq4*t(#eq7JL1#^M2{LT`e6&8Y
z{D6J=cC%WI63M8#r_b!D?HWH{eXT117_jM0KllE&Oq{WAZGNdfdqD$zH}IC+o&PHn
zx}aGf-T)G}X@(}^U09Ku0=f_724*!AXc~6<dsHVGFk#$RIa-fQ=+g|wblj2qex6|Y
z+lQ-q^fLIpeNN}t0hU--R=j-WqF)=Pxx|$-rJ!8bGXUwu<si*ScVWrYR{rC!q3ObT
zvBn)t!buJm<N>S_f%2+Qov0IApRwdswPMerpT1(di(@IUe93Xb10h2)tZ2$Ari!{v
z1~Iw;_=mh>(>L`J{C<1gTlR?h<GHf7Kv{vejLO{!$gQir{e<=7GI4z7Pd*FUC5SkY
z3-(WgrwM5|U3G%Q<|kQhM2<%8pdTJIiWb%C3$jZh8d7)wG<NQht9<Ku<GZ}lX`|R0
z3w{05>D&FTcDW!17HRJW;6k?tuLGdt4&Si>`P(w7L_qr~Z2@m7Hc=e}lo!Elm`OE<
zj&~>sfqIA<-h~WR42wOpg|84gL9`L!^V#w|P==_JSC-B1J1L71idh2M%Vk3+wd)4Z
z_p>tp?~j7(&Cz%Vj!^Ycm(&Q;*5|``yIV!GAbgfUoS6K8jo`L`p<XPw>e`A`>wpiy
ze6DR$YK5`y3)ge*x4A6s*y_3?P(9iIxS6$WRi$w9BV#&9Oalrzh$C|ZB=FX=Y}=3T
zJzLFU|Cyf-K955LS%@cxp3RUwAY^wukofL1z}`Qf#RBcB7SI2QZS)$|=rmRkDD4&9
zY84KMc!Z=OcCBo3LGulJzciApl5+rzjoAg>AfwgXay-Nf5q|){r69i^gr0Xg^twD>
zlzeDA#oJpwWAy~mz3gr~BALVDho_!vvnFrD+D)HKYRq4%IHch~kG^yjLmK>&q!yQ~
zogYLHv>NsS!HWC2BjslW*@vK$5Hg2iwM6YdVRZ?A*(M8_sNV<C(TPXMp{@X&b693w
z3+2Bx5elJyCPoF_mCTJgZ{!3|f=wT-CEl_p@44KW#|9F1-6Y?@3*oNB4AkEA@_rsf
zGX)?sf-!HAcD-M}xiPz9P`4b4M3iko;bq2*glKV>xfUui&VIj*XdH&)PIr4CUJ&(2
zLt9?gifD>hj|GAqjgo3m!MOkqq4;g%P<Qqa{i(yaNWb7ne;$cjbQhp_e0asjK7zLg
z%>5K^>qf@r8V1MqqG;Of$<+iZ{VQS-m;5^P8(sdVgK4oEOb%u_Vuz5&B^$2Xf?GdJ
zL-erN_hvj&X^{8YDKp%OXV*m3{dWdEpL`LOF=aeM8WuLF6K5s~qM8(7wmfhEeF^6f
zeFx@JwA@2OFa1qU34m$By&0aa_oYhUrcO;-pURCAdlT&!pwnOvR?5yqU*bqwVLKLA
zqAE@D@PTlt>}IH8oKm5^mhdn;DxZxuqpy*+(}^I@n-rwi+@H=a>4PoXiFwwg(F1kW
zg|i(iq7i141<j)5y)gtB7>s=-MI8)tA|u;D(^P~RD!``U6{^zLK_!tVpoN|1+zCj`
zi+KLQ)Cd?_u!+m~;qix>jL+Tgt3l+7#O4jj@9Gy}v_=z9aQC1mqv6(VCd7HQhS7=Z
z42MWY?PzDttv~rS(Z*dDj*7YN3y<HlB=8yy_4Zd*P-rF})NL0aoyn*X{Q3Ono^jTh
zUReY)xzx2G!0YwnnS~_}pQdrJyMte1Ir8&9Pw%cK!$kUtk468MqSj?5zN*^<_FJxE
z!LG2Y6>6%_iM;p2-l$x>EUtYh`?{LRsOM)H_3xR0Zc0RUbYex6raH6BJsoGGg=tgt
zAHHgDa3RD57m3dRH$^Q^*1iD$M=h1{{eQ^4Dy%*tN=i;j*N5Jq8VKtGOeKtn%DBus
zxQQwKtT&TWusdz6$w=}AqG7lMlt3NcYN;dHI5?WoO|p7%(7zb@j8SXdhTxNr7j(}l
zXz=a<D>K-8<oFI{np6H1siPII7+0?~8A&@0C8HJsIEo##tE4PRzgg|X)r5nJ(U84D
zFm5NVA<VV0c1jlupshf>p|H4$s@dc74_eb91i)$a*W~Mu_BqezRhYl;AN0)HoW<nZ
zb8OG^1fZWwp1J#N6)%2-ut3Cmf7&0`EZNz|NvI-7TESdXi0WB!{P|51Bu^z;+MsNh
zxly!<)D9Hf4^`LRRzglZ!qcBnPmdA+r&lOBl!@N<q;t#+q;rzgT&aWb%<-<76w{8w
zJ{HyU0E>olDbPS9X%gwI;JWdt(tLFL8xH1A4Kco@NIJ(@R2^o1uUNl2c#Z!gOF6=x
z4lW2z3V6!%6OK$DUo)c6p54eD*wRv|MaY7uI?c}uLDqQT%`sPnX(gg_t$`Uhjj&;d
z>M2@@l8N&k{0fsC(X;GL#{kRW=4V?Ls7+`ODCLUJ(=lKGr~R3e&+zTvk+Z-keWEC@
z)R?$vIVQImxSATwM!g{hweM^XMTQ18q(OK_1duazCq>WuwHl}g+YOKnb4Bo@#GHbE
z8kKomjr$$qy`Lmd&%&gN5ngSvtMC7HFDLaR$$Mzy_HQ4CF-_2=@!VMFTy7GjYvi}3
z&|7;%>a5>g*WX|9*O}=|Sn2<u%&h$RZ<|jvPb@`*xGTbg-n%9gX&3yf<WgJV$hARx
zZ~y|UI$mC|)(~Gz!_88m8Ho-gBA!v0As*cFd(JTAJ<%rj+Ljfhq%N$etqHKct}bvW
zq%Twb!R43-2h+J3J6;8{sZq#=EKh|5JkYuHbBJ6VwMejRHI`WWxuXyS{xel85q2<f
zQqR*bnG%zwhbL_t;k<?7P|2N>+8Uchm;eD^&L6S<PY8_p=O_FM5*wy%1%ZLtyL6<+
z16zWFB?c`d%~DL>CH7&m(SA{xdtoq4A&n!=psY*^H~1chfubt{XsZc924}D|RC{sd
zCO9@O7$g3o4ep`yW}_@#Z|mST7a2N28zqg5a)y+I2b$dC!O_|vECIuAD;hj8bcoM+
z@9ufLnC+=+jR2i=24Qd<8@~93)M<gJ^99-Z#QLyOvgBtHyJ5V}ws^!fEe$i+uuSfX
zMl`x@q1oD6T<!B%f**5;M1fl=k_1fx&lh|(HHXlEZ?NL{nYtbSSir}7bWefHk2{jA
zhbAy1%6;tEpbq(K6j3o996qD;I$>~PfFZqTJeHQppinoKjT!JqPsC)9AX}O4qXXf_
zdr8GD_Sm`Hr}<TWs*-%Y+$2>~soi~0of9$2)qwU<PEsro`EmBQz-VMBs&$2^{x(-&
z8>=DYFxkB8Z9Fa8?`h0nb|P+5^2=P`bEr6!>`YL8oSU0O^Ha)?;!?XUUANa}fR`j)
zKtq(4pQvAvgkmK5-jx^l8|%l2$3bFWCBIBRg}NntoZ{6@StH1uduLxC5eHXVe7~?5
z)1w7VXL#|V@7q7G@2}Sr@VrS8s%lg-m${KsnrhQ{uyf<m=lt+jM97hz_w$s`>%Wuf
z;l`ne$FZSN%QiS;zqdUK1pC^30Pb(wU0M$eg=R~!)od(mP;`!VHL#lV<Av-GnlQ-0
z?SsY)c`PNq!7iO^HrH1hT^t!hnT0Ab6yXGHbC}>vX)}dbS<26ib5Vcl1VQQE34)hg
z<aI3)i<-mIo>N^&Y?f`ZRsLCkKDY~Uigs1m5RtNgEwaQE@1i6bMI+SU0jU3m_NM<h
zH^Na-@$R&-kiLy}(ctpq(Pg<?N)CeZoq|zOS&$S~Ehu%4OfYL~XB<BlkHVC}aQ7r}
zAc0^re62=)o~mI6R{1r-Ge5$U-0UK%0<(S<2I1cKfaoX9s__iJKxPp0qpKq(QPmLv
z|Mm^uLU$VCk^lQKrG<?_0NCOm9U*8<CE8N-S4j2#GU@oUg0TPZdNoU6siEu-UY6CE
zOZDwMy%5Up9Yq~RxNyUrzIeU5+DYa`<jLjvm1U|8tqdn=Uk~RNUfgzElGwYkKwV30
zt@lfkC|I2IwqS9kxUbSjZMmbo3fAz;qk956Oz!b%5RjoEy%bvQD!}<DFJ#KQ;hK>-
zNNpecip3-EO4ZxEzEqdpmE?!U5HgB-!Y6Qh_?Z?azu1T7auR#^uVHD_Er@a@`L4}R
z+f^Bzw#!G^WKE70roKka^#mnt?}~UtS><Z2*(-Ea*VdpIa^$Om#?j%AIHmTj1c&_o
zNoS85@^O-#05l3+9Dr-hO^9y1yy-uD;1*&wzF$%$e~yj$pGcY+;jC?es*GP!V~lC>
zaRzRe2NjLc9cGnXbCXh@g<bHU%}j1%1zqo3+b2eY{&{puH--c6h4ih=(>;kYg|S4s
z9tTul1~+FH9z-g=jBc4m&BY-87JoKDeo+?Y22@KiC-^WSqXDWVujr2wwrz+l2Q*|W
zas>5jQ0URcqKU|!j?cS~Db_gz8wjJ);5j`4T89+er%Fv3qe&j&Ef^Dhy@R7G$l6J^
z<Bv_D1?^x0I_VwRGIK0C<&lYl*P3A;Y9#>{Di=LoylGL6w>zsv8BQ$&(YprzS96dg
zn@^7ooSG%OwgAeFXKHP)-T|LYn$kDzDe#f7e+2j3c5-B^r~1%r$^uM$HNFqN3C_5s
zw9G`5^I}(!4q$xO)0P&>lhQQTKye<6CP67}r66O4a+L*-REIeTQ@(z0)^#*SJGLT2
zfAgVjD4X7^0D&c9+cvhMb0};wJFGuDOO7q<^#9QGt^llS#^CN1-oeXS)FIVWdABTB
zmp6}4a{lGI8p3~9Wex3R|8k~y!u}}bXUqCQy0E>tJj@aYbS$rHAu<mFeSZ~a@9v(f
zu`r0Aa+ucct56W`@$qMDz-}Zh6E@Q!2a$dw@>}LXF~VZ&4_Ed}S*gkr5mV2sA3Dm>
zpVW2pVFj#gz>MzWUua+G?y~U~<?6Ao$*2FGA=t34&K-S&wXN>&3&S<i=QalA=ZEG)
zME{`gww;!a)^C;3)@{7<Z<C>YRKcUrFGc6EOG(ohFzaV*#vH@goxvP9{SP_+5syD#
zRq4Wl>QSvGe=`VW5EdJFhtca%HS|Xx13faf2ata3=?G)7lGq)0^eHM$Bqj>1hH&Zs
zO*m?fL32xQ6zr7iKrIOvNO!TGub?CuKvRc6i|V@hx&BxHANUE<QGc@6MnJE$oNJ(Z
zXLsmNiDaggVX%1Mvh<+A_#b+HGdco3MnPQ=A;H5H+C~!3V^%V-X?Q;PDK<nM{%AM^
zuxE&E;U8-K3KHy^tIV~1p}R86!;Js!LcuWWM&<=C^rg@9giz*n@%u%bp2efb>G<)q
z<Eki^w{@doSt+LmYv||!+sLm2RKf3gxxzP@@G@5cGk-k9A379KY!NXg%LJs2ZajL2
zuQ~~akaj(Y+Or5p`e%5Caa}UG?)>~d0G+zli7L8sePzstt24_Byy%?q->Z3feFZ#o
zPB<JbZHn<28f#p<%9EhR52u&Q_%tLm+9{xLi7yGek2`>r?d|pNXZn8jwW3;UowCgD
z23sn&Z$@v@HHMrHj!R(#$xGsVA;8xGchBec-CZ<*=&SGh9Xc!(uZlK*`aJ&vFdymu
zsU#VvoBB@=<kKJe>!RwRPDf*<&c+&pF%0|-p&5ED1*Sw5Wz@l8%LQ-eCL7<$YTt1;
zs-nx_+A;K&5ET1gwt#dys((d{vSeqI5WfW%*KRitkH72F{V|nz9KruTg1*Ha0|)Sa
zJ$T5@ZmE_5*ycjmI}YiAjNJm4@!}&}YW-;Z@cs0$;Z}9~41R7HTY`Q!ytLV7RjeNB
z-h(G);1PcDk^2a$S6E=VPRp=bz^8#6X04m`$Rrb|!v5zbrf)c#A6Taasib|7D5s3y
zr-ugQs?C(kVX{q>vIBIM(#kZiiYo$ms8VPV-$n+YU)kSdw`4WUk)&xJ@*^Frw2*l&
z*jOyj{8KM)t56TdR&~3{*D!;K&Gh<~kFkJ11(*HGmD@>COX%OA6-KQyjnE#lML+ci
zbWH(cxXjI)n881(x6`i?R7@^334r<^^^i)=Ysrj%4$Q5|ms}c`@<O^3#mvvA+HEc^
z2GF7aJS6Kg-1qxc?@aUkD3$#NK7RIUB8YG7OJp_;=o1sUaBBOzl4J;88DrqrpfCxf
zN}}E#E1IV|D-<ePP&__Sy`W*Fjvd3GGU(qP`>1jbQ|NE&B@R3pg#IkE)YXMGTJ@O^
z$P~~~*9o*d^Z26sg46m)NFLukwR1zcX{Z7Ks@>m-NGsN*>ngTrsr4ActzxSQ&7Cs@
zQ?xrH>KjIy1C+Ord7hQ{TzoafkP|e_bX4Mdd8)>pMAD#Pm1Ofb6X&Q}t=IwX036GV
ztp`z2*onv2`9pF1m8biLk;u5NSptKxZNBSX7}Y-I>#zUe=rtET&r~vYppt|?tN@H~
zf>t(f+D?y=*<g|vr5;0Rx&plxx?KI9=nZ7-=Cx&Y9E-Ou4m7osg-t@-d2&X`>#$@h
z8k%Ep<s!TuXNgevIpegGUe0v(1JOU;>#EwY*O-UVQ5ug{v-8#6PbtltxexBZsTH^a
z=Kb-}_51Hw%O7yZwt|?XsSZ%!%>j$6veJ_Mp&;?42MwB1L?1j3Z*^`1sy{oXVjSz2
ztytlkYfeCn|4gm)<CqchOt8`DLtEB6YF8$+egODnp9_st;syUX(_c&E<6S&AbU4-6
zel)UdkP#x#tEQi%AVOii@pR-y@cfTRPo6NH`yY|+TzmjoE;X((jR$Z!DHn2<wzfT(
z`vdNUfml!k+I8y=fv1Bv@5)ETB)LgQb}KyEx|oyX0uyl;{_!pV#bwh6m%6+ABZUC^
zL+1iVjpam=^spS=r#3dRO*`G+LBRo$S1#+8tTbr%^q9)T?ZHks^&@x7#}((S^#5_`
z@rE+q!!=%e0JS!<x$%{wXC$S*(I0_O#=%xR=X5`Fw+2On&Do#D_#|?pro0-bPGzjX
z%T2n>G_rAp=1w{YaClgIy&v`qp8Pw>otcK~Ys&qNBnVgoF0e$otO6DvoFwx;_M}RF
zIh2Qn;HUjubu8()jM$E1=}Ye%);+qmk}5o$u5UKa2K1jw$-@lzI|`>N%9%b657lUr
z<f}bvRhbs3H5POQJVFdKEQ0wHdOV8?^&&Hf_q2!{K_QFI{oSZs>RgZLM)~vOD!bqN
z+cDuqZg1ZPOSFfVA9ZF_2yTveiP$*^jaiGDIDzoD?vcI)V$&#l^zr9R%9<z)PFQ|%
zQZ@l%0YL7|tVg=g$Sv8M@qJF_6Nsf-bp3~=^E9iS>TQ>CtuAb&KQffZV;Uf&5iA3#
zbfJlujBBA3FTA)@mG}2xv;j@f6O=j>_e&43;=^t-^PB=avp)rzlF1+`2@t&QRVY(}
zr<JBK)5;SX!XUdhx#yzYyAKV#W0yT9vtY0Qf!l8<-XKOQ<D3b2fs{;cv)KaszT$Og
z#}M3E-||(G=w9g0QowSc%=4T-)@cPe%8xfi19fZ41(MQ`FqEas*3Q1@XQ0oy1cDE7
zC*-H}$3IxcE9BHm81WCiiiKOzrSq0AEcfET;>ZL4PcA55Ta{D}>9seg-!1a;**KX1
zX<w^vuLn5N+X?`h4eCHn5Frl~0*y&Uk%!66a|9IvEo{)~#JhkUU+ic)XxGX>UfwC$
ziYAhLW(;ASl=~f!M?VAd==J~c=!Mb|U=+b_oR13GyEi?%rqCIP@pcC&PIrHH**zaN
z4j?zDVnXX7T{l?tVDdPqqID1azX12q9EMZ5%7*2pPeR{!ecunrJKy`>-_PItFH-qm
zk5k`gx3kbU&~gAFzbE3FzKa<<SN@PHriP0JdMGlTS9TeOeG+3H9PQ!}*`XQRPLpq-
zf4r_5ODnh?rITG)woz?x7J9{pFB9jWRd_b_=MAiZ(%UX{Oeui)t3%*VEx^*-p{Sba
zeO~?0*6O|C$K0s6X>l?v?WTvacnuR6<yRpjdF61RarYm$!KQT`>41Pb5)nbS9jYue
z)zBzb^7lb=%7WryBzyhh$U-45rULY>|3lIz4<S1iWWa*{8W*=kB#IOX*w{)cg%Bny
z8iq@Iq37Zk5TELv3_1Za8|-3|N1QAc;3h=ROKM2C00vH0ns6)BWx~RIYMIPjvCF+f
zgj#B3#(C1z(H@9SaUjwv%JooF)Atk}zd#F6E<X(oPn+e%?*fn^9Ttm|o#1ZR-Pqmx
zehop#&Dc<3wkp=~?u0Tr{Kum6+x(A3FAg)G)}U5D;?iva1h*2xljGSUmZMtVb~ZOv
zt%efFgu;>1+cnHXV8wjW(S`S^Q|$alqL-g9;sE|1hYs38;su$#j{nGp))7DJj|C@p
z^@;>y3p5Lo!DSG}8()G(gF+D#)#l~}=hRqmCPc#U28G6}=X%hYI8t(kW|gWAQv1SR
z0q~$t6VKmDn}tiW`tK%kSUsG=L=^&fD4wpfjgd<bouXS7yH{Y7y<Ncd_yY4j*T_3I
zZVNZh1o7ezO{lP1;_;!I@HH!^o<m~k^UYZ3<+nZeZv?FfrJc`pO3ShEe?REI`yl*m
zf<8_Vh-pE+&3G4DXr3p_L}Lri8h0wd04N^K;E<QV4cNrQg&;f=`0<#Ta4Sc!`{80E
zTroSp*=U`1**a&4gJy-Vuld5r2)pbD<gBlV(9;k*^vS)LRuQg1+79jHe6-btU}bV7
z6i(x@W;sf|YP`T@OdZ>hIQDjRTF6j&?Pp-{V6STn5loOiq;qw~)^F6&SkW@U1Hu*N
zJXc)wz@Ck*;(~!RdX2{K5R$_Gk46`q1JdZiR^Z84c%HI(Kri80QzjmD?3KhgQSP@K
zZ4>I9P6AB{Keq#M>~5Cp-Y43brRXN8fz*#d`<n-z-64t5O~kF4NvwqZFn&g6QV8$u
zI4zOUJFSca+LIqWGwA|=P@TID^*!uLNN75{DH0=ZzD?heFKNl3!<VQJYyYP+W$Ps}
z+h)AAMy#EWgNMhL+MJYR(<k6=f>F1A{M|wH)p~73`S5WyD-{RZ^!FLOv#EcH+v6XQ
zjE3_Ns~FlM+a1%`3DYlGPv&mTHX(wh)jUn3{!}lstPUtknAUiJss0}|J)_btNaWBm
zX-%zBYzJw54wd4Atm&{{*3>v{^Djpw;dA<g(@7#Hq=Vg1wwY~%VW1H%`Q8a9XbuSr
z^4Lv@lo47DPttM@IFgYS!4J%=1*Qds^y1`u7JR=c!ejK(U>)e)T%J4?XRrlnsg@gl
z$4_SkBtliL{MmE>(C=etIbR7k^<KQzFcDo2u?ge5n$bi}6_CIj)?m3NKQOt`2C82a
zH7bCIi6p1ywdH~++#}!cqsdjOkjldwt;lP`_sDdf$&V`%*asnA6qk>0TL0w_XZ-x3
zaVuCRL;m2q^hRt4^uR(NErN9Vwz?&0tVUMxUrXlqJ2|}pe1CrS`a1S?RQso0q>!=G
zh&~wNRV?RdBRpg7!)QcIJf!CRNUM}MdL)OcqQG@@^>dA59?q1K7%tGxQpM|_>Z*V?
zUQ9&Z%jSwDiC8ao^}|vmdYh0MLv{)mtw2HA<jw*0t!n&HPbOf-_0mAp<@}G>R%MP?
zahplGt)K21@GD<XcG%>hi7%A*%XwyH9N|zb)MDTgUcmv%RvT4@vq59@j!VEyWe`T^
z$K8Vyt<q;nEwH%dm0i%284TyP<G8k<54yGgF&AV6?h6xKoG!+zk}NN%NwNB-0w*|P
zHAElZR^R&n;ppimIE_<e%n<Uqp^!z%KpY)ldio@CzFS9=wEnCT0#qvcn`Lq>ObGLT
zJo=E%|MBQV@o2a#W=^c2b@%_n(RH{+ENa?Qr$yzoyLa6UZI6Y-m2Jh#9@uMGiTH8B
z{L0X)$$foE8WccBT4OY-0e<#(Ub!#ILN@&Ygpd&)PI<Uj248ZnU}nJpwUs@AW43Nq
zh?F9^g#Uo_SfBp^>GPo!^tX!%63VJ9&Hn-Em5r7f-57MOmZt$7|Kri0qJ18KJUR~R
z|KrhlCI92m8P|b4x`W;I*BR@Dep#3CQimd!=|TbA#~+?%aKo|O^f;w(zFAW|qzOO=
z!4M!mKa=hI{?{e<K-j+%)iSLPX&RQ<DN@mBJLwKZ=u0>HBt8(I`XT*+*%z#ekuP%1
zCQ@;Vlr&0nk)IfeyCCCBfw|mSU{3*L`hrGMaVa|_6<>#QDf`NmD?PlQ89(UNJim{4
zx49CkvePn?>CtLp7;@Hr3L?omLLqRaD2@OoB!zz}^ydtGZ^3~lLn)61RtzG;I$Rid
zw<5-@X*vzIRU8lE;<(oi_RgRl-p$qtMwB$y(EVc{i_urydw}|>4*`S!4;<HwBXAqt
z*r61+XdD$u)Ng!SVk|IzPp~U@C27)8?t;!NWYotgkNKu&3AZHp7rlOcBxBG5ib6bK
zJ$c!7p+1tcHK>3qyTe-ajiU7@Yg(qu0hK?B3w!JDu_IvwT2mK}EAbZ+`Wx3+WkgpU
zsy#{pm?#9DeqYknQtvd^fo0P{s^B3aoLadH<AW71KJ$gBLCZ$WPJ(?!aY^D@ElOwB
z{6j&T;U_0o-#m`aGiDF0XJ`kLMn@_@Cr!viOAyz7y4Lc>7m8s}0X_0m13|0+JrC^N
zBb)a3bpzu4ZkB0{U;D9@w8s)j<6!0KM-2@XXjCAX_D+cSF)XJ4psDffIw(nI^E(tu
zZ{5QXDBsUY1W$)`=oF-fMe!v{j;WUYxHd9R?v>edn>axc;qnsu+SP6ulofn{Vm;y6
zlk1Cto#2?f7E*gH6~-&dNXb|`3vVLHMHswJ-v~^!LPO9M6x&+d-k<(E18TX=X-@FJ
z@^~;V6=GeIM~-E;7rmqg7WjLOgvy;Zb`lSj4H$Q1%E}cXfk_Fl)e}(1_7KX=n5NH#
z4RxlbU;CmY$!+QtlLF1Pg~s!MHPnrRwY+AH;+xjaWN&`vwmds6PxLWe%+0h|TvW_!
ze2+VV_n8Nxcjo7ziL%W@q|L4F2CJ7QABgd8bY)%{5v$kSjBEUE?Ks{zbH)89u<<Np
zkPkWvl~;+M&66GH4e<8c07L(TQP^Qi-3)m9eE{^OZS?cYqvl5m9v>8d<@yR0#IGoU
z*L08QWnF-v;zX7NI3ZmBVqk%pnURkC@VjqWs6<x%yTya@<&gIRktW~fRar;sbM`ox
zJ}^0$nP`&&89La-9#m0ElrotbpGIW~Hv`QR;ysF<*obk6+76D>W<r6^i8>-(zjb$G
za4^e=LmfxhphUnY=70k5>K)Xz5-P41J8oB8IWx<BDo%Fah*MnAVdvGcoH;eiRa{xO
z;g`@U(?s(4k4fM7k4ewNW-#Vs8~#K@>`<7*m$nuJYjX&4WesJT@kO-YlimDLP<{~o
z6@4<>#x+-y-@8VT{hRHrVSMq<%8;%IWFS#BSs$A_ul}I16<|k3f7oham5z=|P@`cQ
zxA})7jkRVx{s76nejN^NAXZ8FwrURjS)-zwn#uuoa470e!*9y8Ipyk*wA%1?U2p~c
zf#lx}`ek~p4E3kuJ<3=YSCPJ%YxP3oCP`Si<(utRttfnLm>lnHp0)x)?ZlgtA#4|G
zIXmn}gy#hH$^e6=Yui)kPykp^pMP7$X6#kOs@=3vR+LVrIa1F&Iv0Ep4-qSb?3HZM
zI~HLoHMXVpwL!gY?uC5(?>ktN6>S<3#0?{FxuVi8aqL*~8$Wt@sT0#o+}!O#9^S4Y
zyy7OlDPZu^!_6an=DL3Rg=3A7mv}O0eu8%ynA|4-Fx?hX)E91zivOKvejiS}X?yUP
z)-L8!!~W$pNFo<Ez;+i}gl$s~8tGB3Dz8zS4}RLtDA;$xl7CWPR4ju&b_$+*XB;b^
zWO>6p!int|aD8+~!zv|^SpC+;NH($`o#${Hf(ZGASB0rca;bVR8vU;ki6x&59`clw
z9Kee$L7W(~U~gIYm-Hjj5^0(APNocbxvi0nN%vB|+Id8YG1H3c%{5=g<-@-#6{?5M
z9eYXTMs=%&5Kes?kY1D_stYI`lqk*c?>Y~`ZxAUBS#J<4o?x_x>w0o*r0UKl7M@IN
zgFMig;((gD)6wcZC#-g9qn$y*%;`9N15Dt;uGb=l+Kr8hwu%LlZr02vTx~gxdsy?E
zDNwk#izR)JHIp}P<9DvjTt!yHRy#pPkFhci3e>J+=d-qZTI-o97$>VJ2K~H3Z(#q5
zu@HKK`7P9H`#`+OK@=2m?-OjI|1ehlBIe#1XrRRXZ|HO0*}Oj}Uwg*<XAYHU8sOlC
ztFdQfu^qSMXB_6v!_)*Q4y@b?ESIm^>AA`Yja2%)1u5cY7y4q)4#LKDZdK2macx|=
zNP8fbtMBdR&RF822bK6`5ypCB=rsg2G4)42&}Bv_%_S5Kg!k*SO@Wd?xZj2XC*;(i
zok0U#?AflOh$?vAtnf;XygOG}8$c%#d$5rCmHzJ%B-n;dMxu0@dGj1`&VVY2Zs@5y
z)=$Xhu!F1o{3rw$IpE{0UK778tA3GQFJ7@}%f>D1@8G<3nqG`zlN}fDw9DNo`y{a6
z*e%PvOvizjclut1eR6v=cFczevMtcgrXy7bQ;jHVWvI`i%4oFn(C-Sk|1E6EemMZA
z!Ag_O=E%6p3b1at;~TmkPwi1t?|uSx)~NYJVMuQTCl+%$jnlQ(`&Q9eugil`fkZ)2
zugXw%^$%a`LRr=L8Bg9*R9+*3N2`t8P$E&`XX^*|B&v(Jw0y`DwOmh>P(!ySF)u^F
zh^v+2P>nglB*M0t8F2msz)bP>7T5z;9Z&sxw4HzQ-_TQuAGKH0;Q|h_ZThH{c&A$`
zOXnXPJ&jQy#p80*Ee^#Q(kkpvP)=oTVQx6mt|pX&(2_zbQNMDx?H@~hNVPNMhl1`H
zn4_FRGs{|ewx@xI5Nf~uw}K~6G2{@}9S0VV2W1Xi>ZI^jV)2?B00)Bh>3I;Ih1{D-
zeS{KeYQHc&%;QfFQRw>z%K;j|W(Z&`_6uBNuj*yCjPOr~zxobiwLf3<==(bPU4X)}
zL|zHtXu_JX4<TPVJ!vz*5AH{YQ1b5K;>6UanLlB^tcAnLuD0z59-4*c`Ru75E?-)O
z$KVI?Soob8dh2>Efc&7-sy&|#uXgd8_o`Nq_sYS-ZDSh`sMd@Xuh^AMnCr1>?Fq!c
zx7{}kHs`H9`R1=Zw0`wPOZ$dIG;b@f5zZ~=8b8F5&2^qOl@a>4Le~BdRTor@?0ad(
zUVc4%*8NS-#Gt`*Ve={QR~OKNeg*f{Li^GNV_~q|2h?pi8y<Go_+B9dMz6(HZ*697
z8sD9j00a9l21%{#pEIX6Y<7a38wfSPsIUr%R_A)!cFiwathu-m)zxwirJ;KOZ{QwV
zDPE-Kn{M0&&cRS%vkfQLV%-5aLl1y6G}oeI;Q!{P8*pxFJ>IP1noi`IglTF49_ymJ
zwoco-Dgjkvb-m|C3{bZxbf0ZstetNFgU`O&FC(q*x~lKh<!@V|yxy{-i8JCpgd1rs
z(xT5(T5);;;48YdqT(lKYi4ekWGe)@TE$f;4acYF-|o)NazIrrVA}kF37tA^?&1Ju
zk%1`JgNqNC>BVc^7{#s&Kyz0sFxSAr`aag0Yrl4L=0^$zuDF{Koh1}sr1jHuJSdYy
z*EmpHaZfOisE4VpvNM&cA43&x4kX*^T60%<_t*7|-EW4KF+?eg4%$UU6gVrG38oVz
zt8}R7v(J-Au}uEu0Jtc7CrVgZF;%R^;>RwCzOlBv@TZq*JkbHNs=?P^p_{zhI6;Yo
z^;~$OwP9}=u{G1vck?PEk<hBdrMxUsk(!a?H9QN?MeXSa`==t<o~p5L*H2HVWXCWd
zzW?x#yjLA(cZiyj*-N7mOHqedi}CEiM_pgFRJix6$F56ceXCQ>@}IfZj<LjjwM@dv
z6|!{_@GUW>7n#%Jjlr=1)86Rgv;qx%jtOAd$KtUCk`#m7XIZC7RvanCje+kz!?B6v
z%d_rq60dP9e3!9IyNnRKh|cst2B;)A&tfYhx~0yU&PM1V_OW~;jE^l2iQ@lQb#nVy
z!9nhTzowUy=kg?-f>4%m7Q06&0Z6reS7$-V!gWJ$zj$>f0fj_mYTCEhWe62NT<JGe
zy;sY3Di}zVU*bi2ZX)-UDV~(7*$tr(!K{@hzE8g&%alTl4u7{EuhkjjQEAX7?->Y>
zA7B$~f$AI1Nqojc`27!7ZztTRgdIqY6sw0<xO*)cV-%4s{{qX}4;_{MY%!;9t?_9o
z<miQ3aHIol@(upB@U3&ORFE)&+T>%Yu`4xOhi>WA+OIoVw|e^khipEds8N4m$=M*L
zn!1h`FTL%%&5TF9wU__kDDN{EDj=43cu;sv{QO$(lgmR~%fz{7Z2}Q`Ll<B-CG$(r
z0d7Y_dPAQfv*FDW2T!2af>Bl};!dJ8<zQ=4nU4bCkFO7<u@~b5s4$}pBgL!S$bF@9
zd$}xQlwi5jX(&e4CnK#4Q-VA7E5q|RAw}oKUcW`~Q1PovexjiVB9R}XIvfXnn*UMd
z-y}+2p}Uq`%S*R9+n96KNcSm+cV>d~NU-sOZqz}7zVubGVt0&0{jD&^5$r~kPzkxl
z+Wr#&T)k5bj8BM{B<Uq8AhT2smd)D*ykwu4Npxr%eR*6x|LoE;oiZ8-QzI|7TCpyW
z-23o}q^7z55N~Br5(Pi_nB2#<48<Av9NK(9bs&~0SiP>%G_pkzT;dBNx#&e&I@v5>
zXDMb2ul_e4Xprh%3%_|ZS<$`}YTjvFreh7LrkP;^tu76sOO!O56WT%&WFR%st!Qhx
zf=0yHjcv@CVXS5BmoAte^*R@?A&uZ6eGkSXg~$QnE)`LA<9C~Ck}pU7)CA!VlwLA-
z47$zHyAIf<p1abTP5iYaBc)7Bgh~HLGTACtycp^~Sbg2)4+{`h{|CMB_di&D69A;u
z;U-OO2U>bEvS^i&^q6BhRpR*Z_J=Fo8lkj*dj5}A$AtNdgXTy8Jy+^-Z>g<rcAU`f
zegiQHpBRA=6PQAjLi^x<v^(duNBWJjdT8G46lHu5PfXToBnIz;@&*R+7%We&x~v}`
z(6n<DLqknL5<CRf4_f5cGV296Y~PchlBll@29nq-sg})gf@`|a`oWxU#lWTWEybqE
zVvA6|Qx7l=1$>Bvo}spT8QL+DUXB-zUB#>@@}kW+RN1`j%xY{X#4i-H!zA;`nZ-pi
zsS!p|Mz^gk>PqeEm;3ua=Q3Ow=q2mjwYzN=G_|`mr-tsWM0ZKY4gvO{fl*=s$x&lh
zV-dSYCNNTEfr@&NfEx3owI!@hjB?m~E(t`#GU}<#p#2rTv)zm&Jkp88r~%W63D=jA
z&x?P<712EDivJcNefoIBzBLnYXk=-4LpN1<fsUjq+$@*(o326p6t%7+Ql}K2#5afE
z*bgMVV55`8wC_{>yZ}P*tcQMDtUQeMOt*x-Q2B4UEA|BmOHR{HKL6*e()kN*v3_X4
zr~mE!>&^NnHp{=v7voS?Rxe$1+LRGt=#(h5l$(k4qh1h9uv=?4rtMWC7i}W{e(UwN
zAWGB3E$@RvjV?SquPCtcphtE$>yzuTh|q&;8``Fz*6I=(UI5E$Dh<K5gFmyQQXQkn
zDK=!%>}aHV83;^vm?)^==uwwv-2gKvx{5udigJkOVLZ{%H>1S9SBa(Uya?{3ePkNa
zUr-`K$<LI6G#R%dSEQ&Pgg2;45&os{vxL6aVk{WFzRy{dh8w&1dfCLpggkRdC5@lR
zMhL7wW0hrCrU6&N*u|lw)bW75<xmIr9j$%mI?k$b+~{NtwD{t%vO5lv^0$;YSCX7b
zu0G={NwXn39@PgK4K?p#sdVLQe=gE$F8~oJ^n(iN4Pn$)r1hE!7@oG;gKxOOHt=mF
z;V?c~-R*ge)y4Vw#imJ6UDvtsK<TErxsUeM^PRIjIzYpH-E~E*c%)-H?xdQ*5&PKR
zwv)>=YERK=O!c;-m+t06NTI)e`%2O<T>W;>9hwn-svFJ-y$u27utLnqVyd%&GF8GE
z`)_H7W2z#}u^mAtuY9=-9Bs>OA+xi3Jhh!g64c%^gH3j1Ni13m@;=Lg@CpHpWPci(
zan~=if&eE;Ev*={o0P}&19|7DZQ&1YBVz4+o+j-_9j&93ZNF2G%XD)lDcelpNOO3w
zdBvpePXkO&=2caeE{x`>NuY{NTgM)@t~?zz=w)ncPzu{tJhm2QXDe+nUFfu~E<gzy
z!MbkKc+%kYK)^PhY5nUT1;N3p+m=x>peMNY?f^0D4L-;Eh!BWBsC#SX%_Ytrj}_$|
z$CWT-1D0bVE0pnSd7NYm?N~x}U~XgIan(gxU+?+Hvg4v{pcggqJl;P#1;+#Fi1eu8
z3QGZglC{p3r`g|N1SdmIyY<;Ade^g%hr<Nw(3i4&6Pmb_8e~~DF4TVKc@%Vf818CT
zp#ZjCsXKe=d@Ibvt~BH_``e>NW0}Dsy<Y;670%Vm@i>C(RGhV#1eJfAkIPYu^~Tj5
z%ji$2oK~uIxpA7_W>i}H`Fs8(&uq!NytXAWtzCCikc06V2lnSMuKo>L{kgmE&u*9;
z2LpgSJ}*$m`}IL)fnuXxoXc^w@ql^V(*(%cCfM%dcDW%&Z0S8KG*rej8@w&tK$prS
zl5uZJ(JzK>yml<EQrz8!SJNzS*J^sWi7CURI~vU-=Z4KVpmQX<xwncP1OJ!=9msGY
zgSv$HcA?X-$#VI5g$Gg)w1`eU=}v{-!OQZIi0hrwh{gC90VeJ0s_)AqmfyWR+8n_B
znhPr0IZNH9N^{``m<#f@coI_%_w@G6X+Iq9(^j0a82r83(@d@560H<a2Ps|rvF%of
zWu|p_3DiNNJof8nD_+lCK>ias;_F@b9ZIC|;(z1RulPuD0%N3F^bFRpele1W6Jmsu
z@OOoInNqH0BYXizP4dY+Q`mjq3Kw9}U(3-zBBX@81Jxl^t{y}8bj?IvR!x(LWodQ*
z7Zz=k&V0udoMh)_et^G7ve85{52szt5H)0{Wsjpu4#g5+-!T_i7&)G+$rvzpa1ga<
z@7u`mGDJOtue&(J3G)?s7o6&=^kO8N%9y5Z`~C^fbuhX66e{aRtLg#o*a`SF>h&2?
zRO*H-k$JfBrc%2xt?)(|)u#nS&sB&AZRn*YhD#zvwgO!J{k<WP@M|zA3HB6@Xdm~x
zNI*KNKh+Yp2X|6>(>}r}=wiF6d-nf9coNt8GQ13b|4CuAAckau3@w=AC57d5W3ibU
zm}m~2VSS@cm&I_-5k}Nstpn5*)z}?b4($iKJC=C}uHR<VCz&ud4WL4nM_zHT!;T-$
zQLa$jNQnIZ2)oDNSi&}L@ZpJV<HWXY+dQ#tPMj0lc5-6dwr$(?=6T-Qt!MYkeweAQ
z>FJu9ySu8p@4kN5A6VL^7Hm5r*65Lw|8ZY52MhfdQ8kC4N;*eu!;@f(t=?o~`X#w{
zEUGI2W_iRCzajCvVV9TsWr}>lN$WO4wc`k7kD2-zM`=S_F>%eb7YXNZB#=iE04`*V
z+Rux+5r7bPaV0^hM@b#t(PNAt7mN=3NwLsL)6j>_spi$WO_Z2$yZxh+eW+2@N1X-W
z@lEtDh+<zW>1=eWf;zSlWh0ZB0U!tn2%swv7OcCtA{twYth2-t)j@Ym!^^m#%N4pY
z0(|>%TW)S+BXMm8LPdz?J9v74gwyZQ>w|B9$>@#W;t3YrGifL7aF=jwTd>&r>oyR9
zSsx)(mSgVe=zS_!hqb!P*F6NtxC*$CULWn#IsDu95YIxlc{+IfKruF`0s_@~`g%;d
zFW=lh-Cy%%?Vy1NV-TfxiZ@Bt25Bo79rnonIf~iagHgPcB@bQ0jfaQ;#47!q5q0e8
zh&TOx_?Yw$S}V$9wSx&*jw}iO+Iws%7>DVAG&@hQh`@xNBN@$(9(t6_@`;`XxL{wN
zb*6|ey%l>uUo{@%HE%$^d>aIoE-`z7&hND15>^rb*>JT1Y8xI_#v0do>@YywJ+R_N
z&huH4b<x+5_uD60T;8?-2_;E!-zJ(5^4oYP=*G@Tae<$(A@DO_bUq!oh7rRArZPAO
z$KKAHsOX)I`SX2uK;kO>K}!%WT3&D-I<;dYz>ly|6ogl4<){G=_|A&K`NI%Sx}u_9
z?0y-4S0NM@WMeMhN1qIueE2to;4*nNw^kV=(Y5sk7zGT_$|SD=0r{wj|D^PuiG>ih
zh@yVaiCAY3dyXJYwP>JNG>VfqHSf`Eb5{{s89tLzq29n~Uf4Gas$<n8(A@jt_LK2c
z8d}&#Z#a?2Gr{btWrz$Q3Of=aAgf}I<wB!jt4WH(`1`GrOkOUdzzX$24Rk3haobFh
zJ7W1andX!aN|%!Zw&GTF7USPLFPQF(zrZVCo=fcXR7XqrG|9++VvSj)G(tgon^Ql?
z9U@xTe+}vj6;fo;sXu_LR8$TbRaxZ6#3IEx7|}Bd?rSrChGe)NMJ_W}6X9UC17`h)
zJP0PUM>Ia>q4x(q;+!GqmB4^J>J&BTm4bq4-5rlp3$Vig(8~qto!?$tp@<h5TB5i?
zTfqpO>GrL$mXm&^x7pqMAYaF3!K29nlo74T$ykIxJA1>fP33Oe1g#X2$pBh^l5{s*
zP(p~-u@_xwL%q7F&oK>aA|ANTp>7l(xsn0S^{O#7qgIZ+%M;~_BI&4)rHabmR!(i+
z&j%(C-2eojL3Fga(SgE~wMEml9pPx3e6YSSKHF=N6Cxi9d1=Y&psV`#L`nL7LM>dW
zJgAhf*J^kA3g$kliu#bs&8!-x3fB5ki!Pzsl+NaJP~k}IzvyY2t!^m7%31)aC0?~H
z8RFJ(v>~bGK-9B@`eD-%ore=?=tglJue-M-49YtNrAmXyeatQe(eCGVRKZV-sAbi0
z`wgAL@U2lnMXmI3XeyLXS#?UK0b3^Mkh0mE0eW6db>|=VZI2?51G3rJm<}~;ZRLO@
zXC{9d_j4UZP~B=`=S#=1t#qchp9B*m!Rv4+0N#}Sl<dW)x)#?WmChfthzNQ)kC^jl
z*WiO9*H8f|`8cAfQgX2vaEFTTK91rEf$;li6I}^*HHh4(OeENUPdM8_6{!fDC)e8s
z?z^e4;T8EjpmEt`xu!6i{RVeK2cxLvv^JyK-E@awoAPgCJLg6`Jfx~z@~Ny(({Wd4
z^9Pc~(w&)k@A!)q_a9w(Cq@VrOi#?k7A``*7S15c!%Suing!=B0Lnc0aa-*8gj|q*
z_DyE?5RMmYaO!7H1s(3;VE5zu=k!19<>AO<rb5t+-py+P;BLU}YL?0=BR6f-VuD-Y
zL=F_i5`E*_gfd1ma1Cngm)WnzbTlP^Sk{_FInQ*=>Q@Xu6E&F}3aWMW69@;)s^90s
zd>6o1fgOHlxhcI5fHL;KJP+u7P@bRY?K1>v6{W0N?S4PThfMYVW%J0{>$dB1eBUOJ
z`2NS{9abTZ#Lb*fJ*=O^$V~(i+*Q!Hqvyf`n3V)qIlt9kekb`w4#fJ}!2Q?d#ge^D
z&rf5vi+kq+Qr?`4pXqtvlbZA1eS+&nGFD>vXLI(L=oB^&RLl-Z(9Qm%^r%N9(@eOI
z2mpL9-@o9CzJGMy&fF#5mlMP9*xj|A=V`T#UN}DSfU*Ar^L|LnYD8l)5+-vZ4xvAM
zP>Xqbu|@qCp<{{E3rs*zvxTS6W>`2P4)`75*CU?&9cVI_1jGeTVhwIm$IciuQg|iI
zxk~&0jq+TGB<A;j%Dhp89pP2!Y6FP1@Z^}Gm?nedh1dAKbD&H2$otb7(aty3OZ2^O
z2e18ej4%ljL*M?#<Z-X||F&X6PbhtgnF{7=<@r9xP>&)=Z$brBYcIg`4gGR)o9(&O
zTVuraEhODq^5n4x4c5d9Z0$XNm4met$^Z@m-WW(UJgOa5S<D{>28QmA78T4T-<N$z
zTeo0nOy`()b`TB&r<(H~EJbK4!k(L6b|g-&n`mjeo&wH+DKeT-g9e~b;^`?U_elmB
zqUgLz;a-fT*b4&I)&48)s73O{rM?hNnUnayLLwF1!_JcONT&snuf)spvAnliImOQ7
z8nO+@Jeeqy8s>lBl#i^>o%P`s?dchdi$%Y6NDR$|4<rY3?6qF>8=`HcO1@>-|CL?8
z5}E~ZA6C-f78C0FDh=JDsdaxoJL96W(^L#U!&m8X1^C5VQjA>S$l&)*!QG+80u8f~
z&83gwTR-|`IUbhwRsJ!_Mn+P)NR$_GJzKdk3dDxR^?~Sm>WLoATK#F_jMITy^B-{M
zkK4>iHQV<F7h@}-hYJu<sJ^3VEm-OHdc7m%wy(w)BQx}Y(PIo$_2ldD{(85$94r@#
zyZiG1(8af`7o|)X{u@nRRa-XAQ8z&!?bg+n@cMXO-Yq2aNU%X7Z0;F&cusM#YWW=4
zPI8frp_KA#1jamGjD*y_?VZU9<hF965ESJlyB{_>Xo(N}9|{_9Qy$x+_qDTm;6q}-
zj<Q8&ojj$~cKE5KwtS~-fMd0=v|{=ggI%~kpof<f-}2{)5qT-Q#cqT-+X-;nL^h>O
zj%b;ZEk6ICjiiU`9_X6>5OMYvj4P?jLwgD?wu*1;FLY5C@(tn;Ih5<kA-EaNK5=ty
z!(P(>n*p!sy%DTb!0YR#Wfl~l{yat{FaEtZE-GC3OzQF9zs+;be3t*Rqn4OyfbFdF
z0E-kE0T+yEkV!*IEPuTwA(46>!IY7U455aDj0sy4b=ek8kbwS0V542eQH8tcI%)b<
zM0ImXLb+<W0V|0hIOq<ACZ~TxT!*5x79|OYQ>9D}HOus%aTMehR5LJm{eRFL4sb2A
zjjj^G<v|pW!>YjbD4_DtgL`bOo~HPJ&|LVxpPL7aPhAs*T1%3&BCUmD2o)lpTq&ok
zE3{xb@6Ow1x#qP?-dDeTy13eIi5r9l?!eaSDYyzwUMPZpH!d9Gg&mLW6OF`R1;5i}
zjdp(|oo!hU@RmZV1Icx8`llW$8|va@`gNW60YIaPn~|4a`|F)fDBybFfdq$>)wyHg
zL2DU$DpLlblQG7M88HrVrEnnbs+L6!gJ~CwL!l+9=e@*Oe%O_~(90tXe^0*}PZsLF
zkJRgrkzOGMyyj$A>)Xd+O7umP^U&hSNk5Vfjn9Gc;^m&UeFc+vyOE!0h4)d!Hm#lc
zE+G3q<>4kJ&b~`;?mHIKl~dC~m}8Qiq_N!@7lp)|d_F$s9G#f|!E?WRGV?FH(B}W`
z2bADQ%w&myPwj~YUnt1npVP3Ch{%!kp)(oS$;s_YTw=K+Hin<OA}JI}4MJ2Sz2B{H
zLYVv?GgpQF!5eWSX9N<>cdTk90${sfyqPE>_BEY#Jbihsd>TC5r})%bCDxj)H%pjX
zF`M4GEAyS2S1IJRhx2{ah7`Y-f=tC#&mU5b5V|0K>3?DUWqjnDRU!v&n>MfJMNSgf
z`>mjnkr^kON@t^|g@TO_yK=!Jr7m_?s??<x5EaBqgO=6-VeortrqiH85dbmnph2#x
zW?1xoyt>E=I?qMo&AGV)JR)l`z_{+z-8H|)<$Lo?|AcF?%H8ex%=&eEP5%_|(_b~v
zd}<onJ1I!N;nxvUt1u*-iNQtujRR^fQ?AZT5ww7mBfD#Q8OAfXAqL;T=HU$)Y4gAN
zh$trztc)9k>R{~ETSo1jCqRx7ie)grDv&`v#Z#S9`MvZ8(5M(1H9X>f-CL9q3Phfy
zGTSAi98E=90`NA_)|fjQIG3`kqiq;>>=3A#bp!bxQG^b{YSiQe5WclCUgbFDwc{AS
zrQGWgRG%CVbg+H`n2eB1)6U7lmoF6zqJGKy`?;c%(JLe@3y~(EO>$QFOM?l?$Fl?Q
z{c#UGZBk#`qo^^A|1+O0b<K}(kK+o|*|X*2GUoeycQ`Iwk%K?BVv`+&m*KkZ|MszW
zws`7xtvA^m6tBo$H#IPUS<w+ihG32s#UsgV2khb)WIb{H+v+xwXcH%Keo<A()rujM
zS-1dG5}p&hmB}8Uf9kzw8aa-{1NA?kO-zaQn%X5R-XS#3)Qq^^@3oC!wEA$nlnN+F
zO=SgWoZ}77CfYJAo@~Km3dV<Cd7)dVhWo#y&HnGwJz1=p49{bs`w>2~kV;|$5(TQc
z#YQP#8qJklw+l{?DNWFNPZ`8U(slh|HlVc#`jgsU=1W+Ti!DePc11GDUe22yDCOW@
z1-@7AkAd%vj0QP<6p5@Juf3~7umk*~%934GHGNLEJ<0LK-q~wJnvo9Lc(V|KZAn-0
z7!ROU$E1AtRptLtZQ;EWYA=L|1dz%<6Db(M!t~cG!<FjGCaI^PF<U!;S)$9It`cXC
z{*S0||GwH0N?m?<+cbRsA3p~V7%Ycxey{7ct)VEI@F_c9@Mxa*gd|#}c-nPlE$aFv
zV$Lu%?_D!WW-GE$eE&_tFva>=&|FgH+U-N0agVzDJbQ~=dgFUyO;>Dw<cKJ%JOy^t
ze_w+uL5h>S`zjadf549bx@zD+nIe(Hv`T99NgWkFgkq4;dBLBezjkV7gTe;yHR#yA
zJ@9STXd>S&RAaNOnAU5lBxHpe?oq=8bhfBfkaVDZJ7n5cNFC4U>#a&{5M_0f<>$Ip
zkYA@YJfOy*DTmj^@GJcn`qiA40wRh3<KskzU$EsJ_5<7U7v=z$DCQT(%&K5m1MAZP
zA}B;!!B<c?md)&&rb)@vuognJIdv)r%6-#6LXM}rw5Pxb<6e50j?48{VO5ki?F|0m
zV-D}+N`U_Ybd&MqipTBvRhnbEQRwpstwZ0bE5zc8HHrhpnq)TY4AQwXw0d1r<TbjU
z$4bIS--h%qFA&g!yDX=j{2MdfbJ`7=MydwGIVfb}O>>8Z&5pjZ9h;nj=y#dj-<k7>
z`<-~>`IjIz3N1F8ix2C-h_h7bVV!isM{s70Yfq2hz%)<$S?BF@1l}fF;Twxs1QcvR
zj@8X}LN=R?j)=K(8Ozp?5|s2kv^5{`7t|7JmXF&#?qC2N&}!4<Psd{9@4%u1S*ruP
z4SloD;CGk(7w^!Cei3D!P&eE<(l{7XyM0Ebc~SR_ZU}n1&JyU6mic}w56EP{V54EL
z#|c=*XhMu2Ya+;8)zry5Tmw!hkfc0QJu8f9xUoOh5FFBE+I`@aVha(9YC4q#N9R?`
zLZ4M?+DHIZbq++^TEu8Fo<)`1pk8Uhg}t#q!Qeqk_t5q9t`haw-Tm#UHN4BzGOEWD
z5MEG)Ra6Iybt-haJm}Abs30=MK?4~j<%m(fE~MAoLqkxEM7#V5aMK4%t2OaWY(}4a
zCqS;eE_Pv+v2b?K67h++e&&|hLTK-QUYN>&2y_6qjSYHWuUHmIVKU5vDCKsvpw|!P
zeW`?y>}1hp$)wY1tNBsdEDEGaHfHdbEK71mpOLI;JNgA+>=5wgexZkdN~!|o``VKq
z8b-`BAf%m=I}6Y)gnR_PEPo;i*{&|($$TC{Bpt2m!-_<kN~EOkqqPgvkq!-|4uS^X
zJW>F%<?O$P_TwWdDkdOvl=2E>nuHUh4_rv>_zJre;zN^VpO=8L_bA%M<?bm2-6;C!
z@WzsU_Bp{=t6<5IpGasf6QP49GhuqkJa`A}QgYz=%hgs|7LK&{po=K9F~*yVY(zg&
zm%4}3-CL2(IRru`CZ}M8#?d5PGx`Bk2nN7nW=%@h^OMVjPBtrKT?^Z)HPq%B#`8qh
z$93Lv&@L_B16?KRG*v3I=I;*r^Gl=SMcUO~<=Gx{?ZC+4Mp{b2aozpTm8s>h8oyK1
znD}f$f626ZZrF7fuPW{A{$;&pcnOOTztA6HgIjSgS;15<XW;AnX156OAm}7Qbu_@P
zkJNz#e~sB}SK92?6)1UC4Y};Bb${JP7#)|Mf9XF^A3l2|HY|w#)`;Brwvkh=pvXO=
zqsOi=rQDlU+sai5NGJsPOciiE*grx$7)E0J1RFeVMoOo8@9`{BsWUN6gWXOOP}qIh
z(*F1fUznc{2Rl1A9Qa?SFE2MKo8N%z?@xrn->m40d?~WLn8_yBIbe9r(5K5lpLpP3
z;}Q4Q3P?-S(r0D}At0XMYd$XjWC8>bhpMU;oTZw#)z$6uin>1qOwXLlwmBGYH_%vJ
zcUeAZsF2VL#gzpKsi)vpdBxP#x4Zc`eSDrS&c-~VFRs#Z=)3qiJKFBPJnsM(uZu~2
z6wl-J{p9NE(wYg$Yf$waX!5|;{Rqazyi}HMf}uMWK+I?(<L6%06fIrvTSXXblIR8(
zQfY3$B5afcr2#4#!2;wuE`6#fg<UGU;fL`&UTtS6Tiv?3Zf&8{0?P-+8$*=FNukyJ
zG~qj1iB#--lx_CAu7q(W=1YLvIzvcEZz&}wF=;$VlpJ1Cl`N)CWiD4V2ArYY?;%BO
z5YSCzmOjZjoV^n*eVEf!750-~PPL%}VALN^pcFCYLa61c9QL-+UD5%H&^iSQT`_i|
z1oF4lG{G&n#9dcWnAcIOUz59CP_`oOcA4|3Ev0N{B7a}n_~Yge6nAO3=kHA&$tO0~
zml~_q=<tYKGFaSVY+lZ3<dNM5WOiz;IxV<75kC$u5Ryt$X#GGj0Id2lDXqz<=sq|2
z%u2xK(SC?)?JO>HfpeI;_FbuzQM?8hKV5vofHiP557E%-?2}No{h0jh#T0`Q4&+qu
zX}Ky41?6mSWl}#}2Ody14%}I=44;E1_T<p})16Q!HOIJ<Q?1AUlg(lmIZQ+X$^4FK
z%Z*N)gFH?OO((nsFoTLRPmSvh9PmvuS^MKq#;FG!sQ57hFmMdy3`UF}zb|ONWrJOE
z+};xz-lW!Ec6g3%XBRw!IlO8%<}kSMTwV9FieI4Ykr9KQPjTR*uzKU#IRj+}k4*7e
zgOj#Y^%*tW1lm>|fKCzR^zKsg4M{OD_-I4rT94|-YP^jFBoXe3ny6L~?#nnpWfg@&
zyB`}@)Ir`8CE?y<y<JB%+d20kN()4i^2_)t4dj&^iAE6PcN-R*zQHZ7y!pfEbUX<2
z6{Kdg!{j5aF8bF^nsf4q&7c6|TLlbD9c}I`>&yejIl{vRSdiFy)hOF(W}0}xf#S%S
zfPTvNPFSP?g!XtBz0m@U5suGp+)@|^HlaMxA0ZEpS)*MgP9PAR>&HpA*wei|#H<|b
z)xAAJ`u9!BMpHYNgQOkCb(kzY^+CHU(i|H>p1)ed^)}ZzD}*cB$!$z<wOWAP@_|uV
z{-C(wMT;E;T$G_@Xh$|tFZ6(7X-_fTQw#&m5{xtfwuSBUU7^)qv!a9~9eU)khgZOy
z=)jqtlv2!OAh{MCR;`R2nP)WjAn#YeK9-g@LNIlG7TM!Ik~TaW&rgezYD-AccM`)-
zJH?gojU;~#gh@!2I?~t9zWHls3;|GQQ**AXA`z-q@Yad3wGD(*R81LVgHa|XRwB4R
zXX~VZh?NOXKl~|k{h8Vt%?!8q-j}1umsZ5hx{e1Qa0iJS1=&Kj_Eu6V+ZdYH*+2#0
zRRzvql;jiV?ewF39~Kf6Z(+?Uqqy=)y!J@;0-Ylp+=A;H!M}RX&?=`a81b^S8v#JC
zE5?AN35Yfin$l?f7XkbH1_7K<UDlJ=<Gf%%X*0`Tm0meWY??|b+IMUur+BI&A2g2Z
z4><fU?3<ki=)6wEZ0xB%HSm+?ekv&ikfVPGphlsTWSZj@dFnZ)X}$o|RyiUt*#0NQ
z5!vuxslsK(yz+T=T%#NXyb^g`)s_LPw%<s}$iiH~*~Yx{j+B)?dRqZCG$V!#X5~!)
z2-i<B(}n3zah2;3Vo$Q`&wZW1N}#DKJ|QxrW@JpXV^YSxU;pHaoh^%&p#&ro1d41O
z0uE@YnL<+Wp<AILcc#}%A`^0&E32m%-#A6}Ig#I1zJyO9BjtNJ5**m_p;krp1-pDj
z>j}Ea43*R^szuP{6Lci{rXiZjfD*0%RoFi^4kT9bA*n5OC|II^l9VKfVbnI_e!XL=
z>ni;vx4B9?HfF$;;I!;hoQN9)>D&K@O79eT!fB^jqt>uycUR*Tba$evY6b+++WpZQ
z8)yiR8#PC`EKiAv{na&^Q`iV;CO3=4`36a0nC*Ew;Jd}flBX|$7?S<bQ8^Fz$#Rn>
z&}A}{kHLIyOd2MRAq!u&a=AUW2`uKf0}W|~y12qZb<p!0BFvhwo;%8E25gDNJX*O=
zlDPt7&|gR@lULK~<t|QWU^o4d;}(nB(adM2C*4XglTR^ErOeAL89w>`y6yk|gnIVn
zJ^6f18RmbS=<cfHzx-O>&v^$pbzl2F4lnKh<JHDP*ga9saw!Y<PyY$JEnM39FOTaS
zRq~$#)va|i*rI7DHZ%uavFxeEw&m0R#ahDBcnPoGXC9nE-U+~T<~{xFH>h}hz5+Cg
zuO8A&n<O?G@Q+z~`!zkw`m2#)Q(s0ZuPz1VFTL?7oDpa-<O{*t1BS|jL^;Zy3=fWT
zl-&uhne1@V_p+gHc^IF91&MO4!tmx=Jn@8mZ6}C+eB9d-b=T`12fO;I7)ZeBiHIHk
z@4(O}Eo~HQse^%&10oR}X`fc$H((ehjJE!Y{virYnP=+;AtNHyx#Wb5?tRSoq<}|B
zO2pWyL@^1M-)WQffYA9gqCd$J;<DwxIJ|&Z^b{B%KH0|OSAKy4k)Ir2M%Hu0Kz@5@
z!)zE%Uj!++o6!}Nz5T-At8s}ZN<UjT6&>PE8MHY9O-RFGO&wKI9@6WpyQ}z(@`H#Q
z1DY}s1*M!^N_Q=8Xi^qendOFA7NLn`Dpt)wP?lb)BVYjO0PI^nG9e*x(QGjQE^D4)
z9`Ze79GIct4hY*K$|F?R#-~$`m_ZruHt?TH8AgaBQJC0YMrWW<pnvlOHCDKQ*;EVm
zsc?6&Lg8FiGFH?_kN8AwB%(CH+dtUxjw2KKE&B_IxI;)XZqYOYSz^L-A@Avf2cF)B
zRzW90Y8Gne0ToM7S(=WZ(q6Ef?=H~?hP~~UMcixd7ZA*GTJJ4N4DCW5=_{Ev*@yEQ
zu&t2SbQh}-mBPxIH>zc75#WZJL)JXMnpcJmF*fB=2^C~NO;~Jf;v(Ug15-z8@`kb`
zE^D7+_rSm-ry#NZ;YVKR8B!?3u0&Ok!=5s@JP-bR0Bq_;OtPTncBB<Ga;JdF(k%>+
z)#1Mf++Dqu2N7sjGN4v~d-~kD;Xq9?TbYNbu^K08dtH}1qcEf`S`t<RI$A^&g&5Rj
z#&qcNq1rb~ej6iHyI~tNZDW^|(Hui(5MEadFhN}TH*mtg<@GhIh2drfiFxERFdCe$
z-1*;i!S6xp;2<W&wj}J4q$N3~@c;dJic%uwJWDQ?wcHuNeEC}aYnSR(f%aN*(%m!u
z%Mq`+z7D*@ex7HFkqGW?CR$xU>{k6`Mr2BQmFc%Obp4-})Dxs|C~oSCX+nK1?)7QP
zH+drxj;ELr{baKo=%gW9y(o0il8WGD`5c;Iw^NoJ{DR}@Y+j!x-2Fwk^?F@J1wh!M
zW|6!l)#&#mq_3fm>}lT!(A(fY<orhUIL;%l(uLM({Yfn6Nul?CMo$xqM;s1hHyP%X
z9oVTShl-NBnIrWR+pCa1C6ZC-eHe5x9W=fCy&luRo`(I%^|hD6LWmR{-3-#KDI>^x
z<ccEO5K_=skN3zd9t?v#%E^kfD8PhZM?j;Omg6XcWh$2rzUMFJOLGZMO3san;lvY2
zgD~WP;2@c)r-@n5-GV<#cvfw8OAn&hrCQW>8MQ$;-Qm*U>4(+X+iN?$OT3^BjG`et
z)3EzsL=}tqPYz!==qQAXkr+)DJq!|cb!Il?0twcKQC^0#&J$tg4k@Y*RscrYC|fOu
z)!R;4=RVJAYDW%gx@jWmAMoIwlOe}@-=6Xx7H8ip9<+eollA#UD;baP{&<>sV4L~*
z{rb-Ds?wfy*Wju!WVoMaz{6r!noCo8JE%~AC|a5+pB?pJ?OmqjuD6|6FO|5%wys_u
zJT<)mL;S0EZZ6THDy&Kf0AXE!=!1Fx?*L43lWWk-;Fu_<qxloa4Kfk>s-|f2w4m97
z2~=%B>_iHoDYOdpbGepcf=6x<<FED~G`C^->j9%$o(r+Os-ITy>5Tmv>UmVDHo2pV
zf8dyz;-l=66hES(VxRvEXiz@h)KDY%l+cZ`NZaF-bdHH}a@k?f0A%&yH*CKf!1;mN
zodTJoHl6aB(mJT+s}4I+FHj25^gTL)TRX{+f4d5EgldP!d6^vf_ZnEDp<`#MMBrTt
zH-jpD%L&E}L_ZQYxEp8d;N);CK<JpHN(C_c?8?k<F_eV4#4IDH8I0JEf_02dZOQPM
z*Il4w6n&_vInfG!0X$PI)O^2p1S=1+qW4?eZ~u%U?zFG=BCf83LRCUjG!$1Ga=gs#
z-7<aUHG%c`9&-M`xT?e_^)IJwuo>hM*d5+pG`&+?smCP3{4zov^0PQtMXbO1Q6v+$
z%Fp41?7cI@$zRm+FkWiC(k=r}BKqAr?P<?LQtykN_o&M5Kb7r>VxhyK=Hc}+`jI2r
zLLJS<$Dmp5wH<Gv;}y*4b^(fJG<s2zfmAo#$1~9Gcy8I+d<0iI!z`%r|B-RY@)K#@
z-h|Y0HN>A-H7~@!<2+KyE&nPcz)>1G5M;?oIKv6Jxu(LrRA^&0uD}yxVf%{<(J3Z6
z?ThVh;sB)q&I(XOm3y}AAX9v*g@-A%cNITBXA)=s7FRmCtSLd!py+)Y(`+H#sIgC>
zkZOw1pv6<y3U44tRsVujRYFflNb(C9^WzNU4-pY4fnVVJ1N|%v+I$$zqXi*mPRnt+
zMD|}8N4L>7#X5AJqu)iYNT)4+LYWe-W7}f}*9Y)KCbUjP7$O`8x=02xk{pzXz_tB7
z@-Bnte0j55H62pF<M7Im!X^|VT><e9^|_^x+~dR$8_b!`bd~t4+UwJ^&Rh&Uorwqr
zQma1gY=}2!!6G$CggED)oE;RNeBp|4gZx`CW9x~lR0T?Mr_-Z?Y_~~TAML48$p|LQ
zOE$pkTxn}u%l?vxxZvyR$HqC8{mDP#$RwhIYNlW17$5c|C1C^&Rg_GeC~1-B5?l9l
zSWjmCchzuRp+}&Dg7a=Vz(G!IMA;BTPao0x8EOS4r-`15!j-L|VfcF>)T`!WRhYU1
zK%G*w)t@9SS;q`T3{!FUq>s$!q5y{a)7eHga)gIfFz10S7xV!$HgXIP7;@Wa)s`SD
zm&MJ@b_<Bo=`$l*CRt^9Ih<NAV&k;#qrA%T6bmwz#qxcryb1;G9F1Ee#(ACZf=cbW
zAU+8+y4+rn4>IS9hz2ZzVx;X#Af!a2-%zzeAfp$yfvAPJ<pq9p&a+cBH&X#vjt)T7
z07}fC*}IHq;GE{-7r`cQ8eWG!Nj;`Ba4%pWM9PsEl+rV?(o+!y6wqY3?IUqfzLHuw
z5oUTfCvv8gl+23Ck_4AmNq3&ml>e}x#6A}TezcZlb7p;3r!vswQAC{I=P|FzL(X>J
zG06A%Bs^Mjz7Map*)gkfp|=Tayahml%t{QfdSy+!g!HLFb;+EWXjw-gv|0kbslNF;
zCMV_9o>}5`0+(<Gpx;)`1KVR38^9sko#uO!J9GN5r1e!wgbUQDzJv$zj<-Ckz<b`w
z-t3z_&~Y%1f_BcP3LXTStB*aSyVyTZEaHu&vU;DnQU845W+-Vts_Fv0E&`}WMeQbo
z{}!Bg*h7W(D%zEy%~Ph6t88v)m6`qQ#p$EzMG8}__(ZA!!Av%m`OQM=Eu&EU@=SJX
zh7zfq0#_@q%NDXhc;j7el;<O)Ih?xBrCIW0<5J|7EVO?X%YMj~><^gxp>pLsBAVoo
z5Zr^B(==Ljlu>F|>e@X3Hq*cF8Egm1w049=ng|;+U?s-TIGNAL6Rt<A@S(Zkp`HDK
zfsb&`<NW$GDXKZlYje)?4ra}2As{Ugi2{x`E$(wjDQP0g#7N2hd0BE{?dG(|POuT>
zwV1UF8wI7Zm(^^6fBzT|P^@Uylwl_o&mp6*f*Tr`^wkcv!so>S@^O{guFh7WCHA1%
zEo4H^Rpyg*An;m=$`)>)M&P0fwFx>5^Of}TtDHpZLsnX=N>|G>D-W-FZ8Y`CDkh9v
zJeA|!WRCpATx9>vKJZd}pdfx+wyRce&V;y6u6-0$q#jD<&uDKCs0u1L2^ae#<4XGY
zl+#nmZ)Kj^UxVoa>LN+4dG6g5y0M*zN(JA?L&X|YLQiBZ#@o4*hvqhGRiw<^C{lh<
zoXF_~JZn)sw~Dlx+sOs|dE$29W?s9I1w~eca^lZu>;H_l)_({8zi(=^2v5-_3B0B>
zTQ9%!A_tweAk!)$DpG17rBMPzS)qt6>r*cT-vG9s0>ZmAsTZ;`-01x1?bIz>Ka&@2
z>|))4>|!W14_#{<P_pvT9s2;umj}1^y%Xd*1CTy}$VCuJmJ35C7}-5RNXB;&bdZ_;
zh?B^hY%!+$jV5SXnBD1*Lj}mN>9<#fmc*#d{MVE)VD*m+d=wioz!i}N-IuS1bl_HE
z8vy34v{PxL;lE7oIB0rD6Oh;Ek(X-Ib_NMkCsY_@xtcp`oWK?=yKR@x)G-cfKAzkN
ze%4va`fF)J6T@v0C-u-&H4~1Cqw(Zz6$@&%7%tene@Li7Fpy}iViwV6!~QRu1&@dc
ziE4`x$@hE1@BB%ewwa;Juu@nWH?UWLE*8cvF2vJdDD0K&8oDCZ$`FNkZ_QJh1~z}*
zD#E7!DT2+~M<`oVC}Dnw77?bpPgyuWnH)yVIc11<OE+Z|ti}zJNvdNW3z8A#Q#aOn
z#&*=1KXjqSE}UE<ZZ5Aul#9@#9(vo8%n^lXO5<bzbc2tq>ADwM!zQ16vu*&O6;UzE
z9+>i|X?OkUbHoA%g_sQ~+<HrdJs`nt|10L>BmKEZ#{x<~|6{#YlnB?a{~tLf$F(j8
ztthgvD!Y6qNuZt?-KF$s=VmU0beJS6hWed;dYjLsinaumg^p`It(M;v6DbFp`TE+3
zTL(+_`X{km^!e?r9f4cm3Wq2l^amid{QxAbqInt|=@QK<MXt#@-BXtFqq+ZzB%z;0
zxq6+(pRZ(@Cucn3JU{a6Z-CU54aAED%eP8vA$+e@_@16eKdu#3`>U~Be1WLWQD!71
z-#1RsPqO<O{YX#~J5)6KN?{!&t8I_*!IRoYq7_x`EG8^p8B)L{8f&IHFb60&5=ub1
z-Lcp4M;r8oVqwb7A9$5izsDWvvHOMMA@(V~bTv?yM)#^g%T$DsCGZQLYZBN{*pj1G
zM(L<;WRm*I1LYWhqO{rf6VgAO+qIIB5eY$?Rq|u(0qi*NQ4a0S=8^Fw(im6;5s|fO
z#;`A?2+u>p#wUQF8RXI!kVO`Gl1XR+w*&<8S*@`V_nMHGDzX0A!pP?tf|mgpLh>PL
zRPwN}(?6=%m(c56<I1f(xCq0{2?hfe2Lb{F)LaNqk*I^&{e%sM0O1Nm=3;gd+LoV7
z!*;8pyeP+N?p?m`Q-`qbhF$&|!eM{t8?=w(d)GsqZEAoW%2HR9$G(rFe8;x3a~y;R
z|J_bQH2uC@p;!ERmp8n;BmZpY@bNv<bA9Lei;mur>obmY(sqB~YSfmQvl|vpav59S
z$Mq5XelOpOSjN-e^NwA<B6gksnl6nW!lm?s<-+DH+$M|Wum1hKem)XCZD^Nkx6=Mu
z1NgnRc|?5UhHv4v6W4?V-45K=hGe}J3!!!F^HkG0z0{KwIY?es=!UX4y?t5C0eA_S
z#WZPUQJiYi03dKK>DLtK_H?TOf2aRh68*HIKo};kig;_bKF$AHOrbm5&YTndJkS4f
zsl{5N(6tUppBpsQ=ya~d(n_LZ6UN9O0?=$;E_oJ3OxBp5+IF<9z*@Pk{A}@otDPcO
zf59^D`u}@anqWL$Kc5=?6cfNy(w*rayS2`_x+#96r)>KyboW5q%m;sI`(o>Ubklw5
zV|-Ufd@m1vpYMG)(j$BqAM^rF3G|09B`}EceNKr*Sd!_4M1GdrPc@31k%*INHY>$2
zhzv*Pem42oJ4*hca1HG>&TG0wKUfa=XE4*HOEy)1UO#>=;%AJ17-G}UT8!`O@n_ke
zA6ZPCLbx<|&#U}P?HoRA97{e59>x(TO>Dh7J!%tuFS~{WNFqwcHdw50nLC9^z7H4W
z@PMhf!oxz6oBNB3n^K6F5LLW}CmSa=svty?{!@`hv#{mVWMln8mS2|3cq@dX#iQr?
zzPvMZZeDEJRjv>Z)W&VMFgF>-$Pn-IknTUe_!qAr?5APW);2wdLr&dis;D8qp@j$&
z<<lzME_>nz;A)%6S9ab(K5HvG<nIbZ&lUe1&-LAZQeK>qhsg|$=|(8zWg?sS`mjE!
zccnPig_l{Po)zTwzt=Pk(yS0KWyA2oSt?Bh=`Q1z<wq$@@*%J*CGIi>7(~wtAb_uo
z1?}EX@{37hRh5m*#Lb~;#_*Cdv00IpvgpF-kfg-{&Y4ae)$baRTykDm5kwT*Uyd1_
zcf0FBJMF~LCYelfhZiipLLHiKn9cc5NsP$_mef@;6kLdL2^5ANRM+Mfriek06wkGE
zqsaNQk8~XM%kNa}50ou;MMW@DAf3+l5N9N$A?}${2DAE!Oo>ymhO2WyZjXCeQt;7z
z-=_;damq~CaS~tPhkawYa)d5auYfhc=OOd%vZtbz(?!Y*T)u_OZ@2bbqH=KsdkA|?
zLG^R9kP&i81x?Ih8wC0&M4eO)NYDOA0N<)GXe@HLz5ug#e?!UFTpfy*dZ*SbHi6$m
zXx~$n0m{l&#5`8%$^9QMS<~Rk1&t@c$}MWZ&GMbK&D#gU{>)ghaQa!V^Rg>*o?APq
z1uUSC;Ti76Mdkx|VVlli#*M7mQ@P8m8}NFKOYY+=CdMI8(lh;GOr<Il)XWn0d%`Hz
zjpb7?;Pi8O>HtX&kCfU~Gn7aS>nL8#BY;!s*kR)3V(Yn3U={|smPK!L3u*4zG3E<E
z2YgJNiOuiDMS2)`$B`(#Ix<HlPVv<60gwj2g;P@@{6_$E={eD#HNp308e-Vl?Dbcw
zyak5%xkAJ$I%>6QPay`AoIR*um@$y;Cf%et=1Y)c{)m=oX_{<;G4Pm&P!*-d<c~l6
zjL|1#h+GLtu|~XcQ+X%V1#|i$JKzz(uDPXMaV##~9C}z4#Rve$krNPW)GP_Yj=rzw
zWEb3;j4@lUBUvDt>PGc77#PKz%HiXEwttHR^DNV9#I6*1Y1rBY(`4mR$RWs_3j&iy
ztxKo!agH;?+OL~PF=G0oLp(HV5f3Bz@(R?GUSdyT7z4XDcDXZ;Oq`$Oi9-X}w#aR(
zd>%W!m>k4mKxVKp;!(|Cf*inoe(NU@vgZJ{56>zrbw2?khmssV!hvuHii0$<1Kmwm
zuIjqNoVi4OjPzHL6i1}eqt-ZL#a>*JuvuV`CBw9BN_4ayie`BOJ*@*h2AOygLhk6f
zThX$&p)VeyqzI+O6f;j`X2+JX9S%P>Cavi^Bbn!a21Sz?XB6vD#PvHYi|5}g<Y9&Y
zukw;r7?Kn*WB^G&7IdKc+TFBc=-j>f%*&2Rn%$ra7@dYQUh(xqFD5=n`AP?+0$^Ot
zGQIt=!n223GjBF@v7X~zMbDtS{A$^Ec{&2An@_!@vxlQ2OP`g<S+8kaqXM2H2|*V&
zV-EghNcMKXn{5hpDsHW{N;PjG^&#d9YNZ{qiaL+FxwZ8q?L!wlh;5CBPJh;bhE9KY
z&#;{_V>(jnJ`SwVHEySJ(}G8E3mDgt=~tx8tyi1Um&W2$YYd(Ow+uROgWPfP45*;R
zl<SQD3LcRqCgGCvxq<9IVDwh}{)r7cGYlz1{={5v-o`wArzK~^q$je&2;o%yCq@OO
zZn&}&>ICZH-V&|Mvy^gRd6WH>u`K8f9C_@e`V{NuLG?>T*#HS9#@$g24R8>8GY9BN
z6kBUBLz~|`ZC9swN<YU0S$aJOyiLP@McQV+&4?d#l9c6M6(<dmB(2Q~N{hxNUr*}B
zV*?X|ovgiio|2Uo)@<MiSgZ;M<U@s3(caen)Ajq6oDcNx#2uR^rSTl8P;o<7#sqyP
zIT$rql(?NxXZCUl=l<!z5C9~^znkuz>{_@2F0ir!4qd}X#^2=y9s+eTGN4Ad;qIQ|
z+d%m3CfBkTmrUt_LrRj|+T>h_zO!W-)DBiF(}7pHN|DF}i1G}bX^zysYAN}3mv^)O
z^Ec||zMe$JF5Ch7{!Q}At6tv?If#@J*teQw?~yS$x^h>({Sly>0LyNA9hY*pk}Z>p
ztBP26R92qH7=QnNK64K6K~7(LI7f66Ol`UQ4cRJ5N$kol@P}K9czuy>XOJAJF&v$W
z6ppf{wqZ!-e@rH?v!>2WM=qd^TM7yXv2>kz(C~P9aUL33#c{A$=2)=Pub(tFDe%0B
z)V@>~wImZ?@FSpj0VX`mKCr$V;=;JP2@Prrx(WOHI&#>2CM~xKWI@z_ny{<Th;t4c
z_X6$uY(aM+Je4FYv1(?iSSB7mj`oLj{v+c+%vQORCs><<rRN^cO{>gwXYvzhgsbS%
z<IMw<sfxV@xj31hbwViK=Zekhe}YV$j@FcT?4B9S;Ga+dstedt``}3rZ(DJ*nVvRL
z(w1^Clk)yK<3QtK4n!3f5v#(YcN4D*Y2x<_?wwz%+fcDzFPJv_G|K0jdI!>TTGR_O
z+LoM_XUArPwT^bw7?tPfbjD#*eHmt4IvSvm6Kxo$ftAarh<{p(xQ2P$y+PTtv&qoA
zGGPQ1;vGK#^JjQ!w4Hjo39Cu1<c>t$AV!8VO23A2IY=c*a|G#s-4xxQst6g~4Qdw4
zw`Hqvr#8*itan$R`@^>6t}*FB(q0c!J4USuXMAAnXdv|C`Bxdz)NW#2k{9Q$iDSq}
zHkHM4L`iU}UZGB_$Qqf1=GvAu^+9D6xSwRpH{6X->Yl-uRNf!(m`MhT3g<f^XAIQF
zZ|1!l<7~I6*;5qHrx$oeR>hUUo25wRfa1a)wU!Zs;QWWd{Tfek$N|LyaO7tByV|@$
zH#OJ8>RxW+UX?$+{~oG(YS4>?nG7<>%^mXX8)E59m#%t*Gj`uLjc&toTX)gS-E;kO
zyp1Wp4|6ayhMvhGQya(5dR=E;*$nZL0uq4un)omq_GKb5uaS7zw}T0kyHQkfMPmdN
zb+Q+_>ozgcNp5wepeDcou(SF8Y?hu>7LT0nA0+@soWtY6Q;L@=dJja8M5*1+<hn?5
z8xG@^`xtaIRB_1Adz#5cjnTf?f9?^~8s9#oR<XUX#Dvq#9tz>)9}4?(!e!E2h8)q%
zJoQy%$FlqW^fS3sXA#2c9fjO^`FHXu`#Q|vMw;8WjB`RG+A#SFAYdMe#q?x?E$D1u
zhn*iomu4W?l*4Nd=h&@WhA21N{!=N6G|fsY7a2B=MHj9rG_3!NRP%J?g}hj#q5MDS
zt&}!g*bd_dy^TW5+Og@MEL4T1bJJ#igbWUXx39aJY2SoSXR<dGhuR>1Fz-XaEaUIm
z-Lcpvs{}s!27&`Td>4LO3>YF85H+Zr6Lfe-$;nrM7s}k**$WwY4I^)0$}q@YQqHAF
zi79wxkR64DM8n#Af89CS17on!$W8`=`XD=CYd`BE0;$Ss!{{~VF1JRJe)CB=3fe_(
z*?Z=zUq^fGcpG--C*E4BwiGeYQ7lSJfZ{kYfE?u-YfS;-2R=~d6YaO<34xXm%VF#&
zsW<CS4YOQAnKk9vXvk;^Q}3<qLqNa`z5K}FJy6?T(huNvhYZSSlTTdn9ci|XL%TZP
zreq*~F*fi0%2#=bF6{NQ->68Z###%r=ihTQiz<&B<T0oFw&?dlzsZ_TJ#N@zk8qzf
z8!$t!TIK~f*oi6z4EBjuJd5EUNTLu1dGc-i4j|ni!ftOTL!?)hbRT*&La+v*g}jd|
zWKXPD86Jt7IQxXoON{*Hk|(*8jNfBPf1CuDr-E;0jlGRMoI_AIwC(QA(9oW`fZzBz
zks08Ll{>r(Y&<+gM5hyWB97hDby?DN{Bz|6y&D5WJw$UU2Sm?Pi_Br-!d(O}J3mcd
zq<^7st*Wa&mDJ;#L7kR?+dQl5MY44@X-B)d*1=GfQuaAagi+`vzPswSgS1Q52zLFx
zxXsDN#jR)wz=_{O(!JmZT2yl+WRRtY03B%gJZCZRsIc*5wx{R<)dyL;q}rmhw5)7W
zrq2gJnt|b%0fFZPn0+kO&_s@mC=ufQqHCiUZo_-;FzWitjQuaxs+Az|&GPy$0|z~2
zUC57nQ<+%sfN9^~{c&$Q9rNY{`Of}aQLeXZPT387lt1Sm6OUm;7!W{=lnAT$>Urv~
zpDKj;H@=zT&y4=oykYbyT~keNjGo?}-*JEx9t>nSj)ag~IAofnuIC+#BDZg*>GzTn
zHfK1dwviEkKL0$>hHn2ycH1WR5AneUgDcK!9rj?!>dKRb8lE0>@YEU40=Yob^x<1k
zGN`|16p#?zW|>1fJoe-6yWv-M6DGT8Hr2o?;u2c{`E*Y+(U;Z`p6j)ntd=_`y?21A
zXoCg~N0ecp;G_ZKF4ypQ<$ur~o8gdNGehRM*<{4^6U)L+E<f!VCCXW;YCF-)UPJew
zSrFSHwDSDuhYU;9&z+O_xFnIiVt&t{4hPdmUHz`d9gUZfTd@8egK3$9>kd(-ig_O}
zCTgxhg2xIX*iA-B&+q+b2S2m4EL9u;cLkn8xHe)<V6m%HSJo*=BX2g<o9zbepaQrP
zD*JkP9N$|k^C3;ZqHczuyH~;^21R%*=Rd246I{SJCbn!sD=`JDRFp1$W>*lr-k}r;
z2*y20!Qziyeb#8GH|qGuGXDU`|1xo%1KcReg;W&yN)ab|^A`&tgF^%Pwe|s)l(=G8
zX-I}=8~4IbQ&A<ZSQ|06T|g~rsx9Fa5j~H8d2$Xm#ObICs92gIu>14#QOYcVNljVF
z{sb9*yj*S2amk-{-}edk^7`+xMM?)LgLOgrj|UtiZlF#Y5;MvM`Qn4xnaHVW3J)lK
zel<R6EbytalXsaznJo+)%v}ST!&97Cr_<g}AZ}{y@p@n%12f9qz=rF~kM1`gR!paa
zGZ^6UE}qJ8)>=(5>Tf~+1yHMVJ^QZ;VOhpKEHK|#epHB+HaF3smM)}q9&n)5G)QyF
z*Zjj>tI3P76D|>v;F<h~Rq@!1HkSv9JGz&Z4DL`bu_h%~SJ$D0>}d($f@3Waf#k7m
z-&<~LBHDgME%}RryKf-$5uRMSet%5N4pRmh2fTtGo{F4ZJj5J`LbIg9jsqed+5NjL
zjC{e-;Q05uNRpb6=3|M-9;WmLLA!0ljon~c%b*sJV!mnQU1ZT(b5rc^)6y>H#%s=F
zlB7{syr0{*ejT^1Wr;a}Tj0mTSBkGo+`mBn>!e~~a6?YSf|b^7Dis#?I|WSy=u!zO
zro{jo4b;egvLlq8yR>d6cq&V&><5XFGpOPy>G2?-qwh4m7J`W&?gATYK;KJ!4W5dP
z23L7AXT=R>wA?Y(bRKe5Pcw_n97s1Y1j_bx?Q6OT@Ubj8Q_86TPjl_4PTp>487p5r
z=3S4EM!Xt2GpsV;q$kdY0Bv42Z+jO=aEDA3DiScKF0%R%ADaWF#ps6-<;=9Tw*h=%
zFw^%0V;x1kPwndEb*cbug5Q~n&+r-#)!$(0&y%}Ltg`z?&gn3t#n+MO05L)-ev{MW
zB05XpKg2W0xhK?s$|3@=id^gQLJRisK~2|4SKoIyNhVcGLcw)G&=yJ&pNHH1=*n#b
zT2Rk{#<rRPCAWEiIC22^Y2a;NlV=d@>F-)N)%$fjUXgi<QKNvSM?1?*1d5`vc)VGp
zw-*O#B>u)FMl%oBNbEoH=)l!14ck<RecP6H0198_Is6YmHYw+D7&zMpi8-|5@kGo`
z1{BcgC~;@ch5EaZysQ%p5fWpt@|7O%me7e<LBwg5S<}bSOuh!6v*s;KB3mKM=hN)R
zL8zO5DR~LaXh~PYy6`tLO>i?+G&%764SXQ}d;WvfB@%4=xWvNpQJ9<Y0{!Z+b2Zv$
zznD6=Sm-zauK2i$Q{E)i?J!3jZ-~+3ujZd1VMNGI+p(wFn*5`m{L<4PWGl?Zwr*tZ
z-rk>5*@O;(QDQDVp$+k4I`|`wVce2<M2y-ji6SyN`{X#4hY;fd4o0ot(HtmJg`*5X
zV+#hDjo|w%d4vSAw-bZ#ez&ryYP^LR^}f@OSL^eD68W4jEMw417)Zuq-wvKj^`<>z
zox%JT0a_&4kp&pS0jBtD*s1Tghx~^;Tx}$^V!`qkSo0{;ctlOGu5%0y|EMCSv~VWn
z>b{5A!Qi=R=u1$Ua&={%Y=&u?rULZp^VVGYwK1sfxD|nkQ!Lv>IvFrI8(27JgTQL@
zeU$;g98MqU9*N<8;@6ocO0W=UG9(7ms0j9aaSPTSSS*u#C%*Mi3%1jJs?_)`F<aIV
zWm3IQ3sPRc4invzk)v?DkKi!xL;+M1NjxX{`%h(9s`bBFXKa4QhidC2n?yLjqv_zr
zJ)ooHt#My<-n?r)J)Jjy%7}eUb4>6Wv|Mul7xB=ab8GY|Avh4EOm5MY5|!}2cxp|8
ztUVRHK_Wp9^o)d@d}SWe(XzcfH#o~0g$LA^HPH1G^?z`du)mUnoB#1lSIr1VA1`<_
z`|0-4RP+qb74Ps7Rl2Fd=u<pKL|+H;LMY*!K3p7fAAC5_Z#`0%fzTW-vg<D~m_p$I
zWM`A2Ogw@y#noB3XZh4cbikj?>32i3Q|-EDRI!g1%%d%1yN`p>;d%}O{{A`*pWf1W
zv6u`0TP+3~WcH4AbY&`@;OgW69p}yw@fXpp^C!R7;eI!nU7Jm)<uKR<sDkmyt{g{L
zsyvQFM;kKyM$hm4P(p96-N<06&iW7s0MrCEZcxpaJOqhAi9vVey>k}g?!Z@b71YhY
zV2^6U_+mY|hpY#zh|*$wq|aIQ3Ffo3C1C;T4ZJAjO-IEdq6=g<&tNJNktbqi$EvVo
z2e`B;I9M1cgr@HW(o}9JD6Tj14gF&u<TUgN@0cA=+?bbi@^DOfwCwpUo=WxzP*1et
z(qq%Pp|2CR%4(Qo9d-L>8j<m#T5WX(mb(__hwJQipL)DE^WyB#f6vfh&nW%8;c5M%
z_^#u~5oqsiA&5aZP8gfq!wA*Tf+Xu81ZZR;nTIHo35`56g^aFhplQw8zfrc^)OqaV
zNkJJpt)6_1qv{<BKN~zuKt_oG>|YKTedFT_9U1)O8wkqivtybpY)1a7QVCX3jO*Q+
zg1Bo-v9-kOolDW>l<RlN5Rsa+a)TMRT`eX!(L|Yg?HyyYuU<Z2XnEP13Kp=n3gLJ8
zzo<F~=f1wE-N$Tf+i7gGvDMgYjK(=pn>220+qP}nP8!?E_s#FVbMMSOf54eNbN1}B
zo@cM;vyf!%PbFE*eaA+>Q8Z(4BQq0czaHD!SVtCfmG?g{G9N}58AsJaa`iWblmnva
z=INysj%ti>Dd%&^E|{Yh!9hp^3YEzr33}Me{YO$$2DqGU#O0#)dnU3I)Ad?I-*kAi
z;SdR0oY}LNn;l4=c9=`&Tva{+{0}*javpHKW{I~|A*d)12m~K+R?^1fF81cgs|&QN
zVY~ak%P;ieR-%@)Wkff!Dc;}03xQTihLOd}6+J;Lp8Nv1pq?wtlIWk*sumqVeHnuF
z7)8Bra@4srs-+-uHhM4!6ZlRyP4e@6Ri)ub?-~NJ*OF8f*Jh2R;{wcpb;?dUOBy!C
z5dz372-tB1A3+lNd!?fzWzxx(`lHs9;XQlm^nzi5V@L<$CWVG<Jz(J18n%iqH^fqR
z<qDd&okNpAQ+}W-+RcSV5>Nq23Xr3t^Dk07@FpjVqe)fp??4T)*F$EntlY+PO~Dga
z<Eh5~pu$*kg8k7AM}3UA${6NcX=&S@a4P?vs`wWZ1%rG#>f~IjUxsNI*^BYUD)-?6
z>n}e<$Gp=3Sr&b`%X@JjzO8%E@Tg-9V(=<!VZ7kcm%<Jk((lO~86%;MOu(@O&p?<Q
zc~3?gT=(L51-Lg)({JsuH@-<ymL_}!9Hr3qDa@fv!w{E6Jxit>UFltE__@<x*KS;s
zhg7z_BV8*Tza_=W(ya{l*zRXW5_x(hFT~{rBa8=Gxa{XfFg^5Lg~^V~KJUuchO{2o
zMj?ui*+WI7rL2w^wrc!}!~i)?t)KO-Q$V-n(3VQwnv+HL_HlyEi|JQBIq^aCz%r;+
z_5>z#MzA&WezwO_r>mO=cH)=lU+Kg5jV5T-h$G(<X;NGKHI`CfNcpE?Vle**sM6TR
z(~OL#;`=BWMt`~BUB>dooK&L*sshWY*HeGn&BB3`uqrq!rlzw&Rs(*z^9!O9h=%ga
zPEiICH6I$mnyFE-gqf6)tR%ZNd}T5wStUiR0u7fnGggtmxZ2ECk)E$N$_C25p1@d~
zoun?KW{N^j%@J`~JF+yG&?5>sVcPt2<Kn+xXt`yLJ7r0s+Xci;O=hK^kq32l`;LFI
z-Cn8iqo}XrCS_Jzp#$;sOg@xfRQ2}+t)q*Q^x*Ij>P;0h{~jZG&yv3*pLuW8<v`;u
zjJF(JpLwo(31t}!=N#Q0KI^rlkZ?QhBA`_A!ieBU(v}%6i^M9QvWN#7ZRv!$*|R4_
z1{PD*gKyOc^5I}?WCSEraFLA^&RH|{cxuGiX4Ez&JAPVm_(1#jW8<gK(t;{AH=3mB
zV>)3=uBDLfFGsIn5}LPgsu9ybrvv|T(?_a_Ftv8Cg<9<B#}}nIE>ptKM?jb_5JW;q
z82<r0?GD`H06YR-PFH8g13hs#umF$8&D}sa4Il#R-t{K@MuvlaD@<4}sOjmHB?Ipp
z#;)>&n$-eCR$k-V|J>2YHQgC(JAjQ;tw_hPAGpLhY1YIV+T&8}Yy4TUc8yPjsW`+b
zG=yXqAKb4RJ8D|5e+7F^u{BAcy#zVaR&`5vAKvF4TPUCU%1|60P7<|28v9P96jxY@
z)X>DFmTm?gSv_6GL6J(Lw9`RY|3!^!iLy=48&VTk3q0V;fzTo2O*9i=59a{B!prV!
zT4k#_8_LOQizfA*A%VMVTrq_oRIt1&`GFD?M!ws|jwRYGoP8^xX`)fk*P28vukndm
zMbhRcrM!;{C*w^+=Ot@7{&8v?L0lxi_=(ACE@CW*b<*{1n)RJ-e-ERt`}Ko@pU3<a
zH3%87yHxtK&w;*%v>@?mD{(Zi7L+g#9<Z)H-_G>JWxQPb7EQ1uKBqws>sJtEw+75Y
zg_8`ALm=4o)d35nU(Apmb=Qcu57iMv_uIo<lqD`pt#88$m&pEA_+<u7?gb+`%{HN+
zD`GH8c=#}6-5DK2zPL|PYWt6pRZyxR>(>D4v5&RI+Ar0AJ~cGK!*8nRc(})=pJFaZ
z<42CleDoSpB*NrceVw7KSpo{Opc{P4A=>FG!iEYQGqHcLoO2ZSYH;dptqRJm+psvK
zv>w%a*t5bKH=PCd9f4uqr<F!v8M{v1_^5$dQ8SIdTBC@%EsGzo^Y91X->>&NGxC7f
zc-9=aj2Ej_;fo<x`QUYpglUk<!W~K>f((>ORuu3$F);p~r#&W<xH5$7`^R{!1FcC8
zk>NaCdxTU8orvYLq3Eh2t0mf4ZhWYx!W$lPf=prg39E%nX1OuMt0S$dBj<3jGQ$I-
zH|g6<7tjF&c@`i1LpcPpHyiM-qXCQby{e6G@fOt`f<UGW6XniBORjg1CcBG%on-}^
zU=h!g|Bt0C@m%w7&wG14Yjr>;ujl)XiKFw2a}$!!$+4@Lqx_TH58g_7QQ#6yEvJ66
z-cu5xoV1<y^5U1T_<iR6$8Ye%I~JU49+{DIydEd9IsEQKsoy6Z%kv<eI3RG47(0UT
z*;a(d+$qh8D(jxD*zTL1)dtVuZpPqD{PFs$+q|lR+`_R!{x~wScdG@8jo<sW%<*hD
z=_S<=jSpk#y$$aAP7gg;(Z6I2GA3$QooEV+$W`w4^0niytQuacYQ#}Qq{D%QE-LI+
zh(a^rzdH)8^@ti*>))$aX#k&@=5130qUOSD=cC@dd+N?dcgKG!DbdfX1Z7h~G7k2O
z7SnWoz^JMV$)2aD=3v(DV;FyGYDaI-e3o3<=Bm6L;?t(x<=UFMaBH!=yw<s=yQ^R!
z{UZ;a?|I7I8ZuGQ?)Fti>>_l>456wpJJe$>eP;2Ap#ABOpZNrL-+|O|9VN1Q3r+=-
z68P@LdazDaambx=E$Kl>WtD{AIuvI?RT(P5K~s2^v676u-;#=gpoxU-PCUdM$!WS8
zPnsb_xhEy#zWqM5Hn&2C_nRfo62zK-^T|=X)uHPvP`K|>r%^{U@zqC|&{$WF;l<#D
zZ%H6y2rmP7x8}9N5&@XR`DMH?$jc2}NdsZ@gB*^U(lzXTcQk7rc5r-Vs-0Ef(|uZE
z3cBPSE@JY^AaAB3>K?IT^TDs*4-U4og4`WIN0%D3xTk|*d0~=$2DX0d@e>4h6KfOE
z$HZMB_ckVh<7=xHvaAkg!J9GhaID+5%h^NUDXg!q(Y&zg>w%i;9yPI$MF@93YU#f+
z>WZOBt{le|)$TkL$gQLSeM1x=-Zx4TF^;8P<O`5Xa`nzf7IG#^7BOKbPiQ8|ZV`b0
zm&flXrX)bk${V(Oq+}q_7sBJmw;o-{$}xEDN@BU<$7EewrG{_8_*+;K7$@%Va&}$z
zzTZDi;VuF519rZZtoTXMN6*$1HU9mV+)rU;c(3;Xbxru?1U4&zp%+i)>MT%#F)|XZ
z?od1h)drf;3hPb1lKEeJwH^#o@7Czo2(^iWU<_7cnew%G;A>N@qPcO|O;s6OKc}S-
zH4YaLRCWkzZA9W!mz6?A7|mmSNScVE&^8I`!E9(J0l3*yx%CFoxia<5(zl=D3&fn|
zA#?I-MlEnMYn~Xf%-4);0s6U<Mxx9_dC!`6>w%TFS5U#buqwF&Uf1H^3~wm)3+PPJ
z+jn7P<Sb$Vx@SPZ`})oL2;@XkKxwxXyAxb<+PPvLSuaHK@GdD&l^VqWe!Tf~j`JM7
zEZR2)7e`F_%!b>Tn}pj0NeE!K$pkYv-F`nqQt9}mlY9MAiD^-NPMvB_qvqnf1vYqu
zM5z*&GNxVlYlhgXWF{vn-p%}1E%iG$zhD+5V?HPZmg)uc_Rm-fbXmYC2fEAx$F2KF
zCG5Vd#YAMW<0HQ6_ULZu35`N5H%u%9;f0&hdmvxZ|MnE1MkMONnFc^KN>NdxH=tV_
zSfcl?Xw_Vh?3!!aYvkqz%s<0Ve)}#;slw?$KZ2=}$d^d&Cc7i9PLo%qJx+VPO+Ne8
z3T&T8gH_#tv{Tc;nZ4<_I%NHshxkGo?qq6&A5HGMjXjruywl96$LfndQJ(nSaA7n@
z58rRf-WF0(L5zjPO8~`o?l1>fF>YU!Y#8W0p+44ET_V~yO0>U9us{zS8>f15y0#TV
zO*opne(<Iny9NGg!}3m|&mN*JlfPeH$*g?1-|dcsM}fAaN*<M=HzfIy)HOunOnP~=
zYlERoz)5zCNxprjbM0FoiM?n0>vs0OhdqT+03-U-`DzS(2skbx`Wk-zR(oK$*?U>z
z_Tf(-4_E9e{-jI@$^T(ZgF|WcFPG_YRrvO__})@yu>d5FumiSO2hunO-O@}&^SuBh
z=Fl%&sjFJJ1Kjx9d|cH+1V-?z7kY_k<0}zg(@KUdR~Z5f_W7LZEKpkKu4V`rO;n~_
zvd$}VpWNRpfq`0tcL$=Uo_NWJF3YK`q+?KA-X|#e$Y3<}ZVL}QM8aeW9k<bd*}wlX
zb9qT%2b)s$y)~)XH{A?F4<GMhN?KssRsw@!F)t%oaw+&S4TqTjyp8>9`$d$Bue;q}
zdYpaAF~z5PN54Mp-wRs<>X;S{I=EA6GDVc>vSlA9fR^Ukmcv3b9$pbQ2bn24NgkSF
zut^0=U%>m7sszuBjCL<RrO*H#@ocbIyT#ocGn}BaLk(#l2u{)ftD17wy3mz3W!#oo
zx99YTc-3ht$^C8%b>Sq!`POo9rHd4-<yki-6vO%>bj8jq+|!4RN2^OdIp&b7DY@h2
z+Q$(e_+a4?X7Jng^dk4e<l?BD)s3E+Jk=X^KMDU$JtXPzK%6>zhf73ENQf(UjoIZ6
zAl`%(KEGzOA0Ja@lypjDrl|MuuzFp88zlO38P-p5>h?ft9$)Y*43{zn4|e+unh7sr
z9{nIu$|U-Eopn(#A7`^{h9T?e8Hq9<zM%a9)c95YFg(?)gg6o^VCste*g!-XG%A*k
zb6{JK!rfz4cqdx_kep+m3T#G-!z^I_z4w6$)*Vi0TuQ*Or?h5D-t;)#sK{UZkzkCc
zki7_FaqxQvuI+sc+e~iLD|nEwhz%|<nyt4;y}Qj~B<4e-sQ63FqyS^u?l=_MhL@QQ
zK&n;XLDkUvocsg9+C_XbBNo<3NqZzlb+cu<Q1we!1<sXY1mnZ^l>8qC^J<;*UzHcI
z8-9yUdv_HW)`TNx9Vx%Fq<IqAaVo2ut-iT@@-^t=*0}cD-yQE6DRLk_fHe*={Un_<
z>!kzYT3ZSuWmXxu>R3(4Sb|v1A%>R*;EMHV$ml~{@Y~_fB7TK59tAQM@Qpyji#yu{
z7?2<#tNY-a)dR|9sAt_N^0F7~I3!he>SL3j-p&*kombzKyEl27C4qdI7-ynjU-a}=
z=!BeQEE+^i!lJ2aaE=}-Q`kB&*Gq)VBfn$n?3io62h<?vG2W2ouN&mV7E+!~;AU$q
zX}p{f{go-}O6a%NvY^|8>eFS_Yo+C7b?Cbk>Pexrgx;|uW%A1B^@2m)kE?IvS2pve
zQb?-XR<bW&3n63}4pDi;nI5MhbJlK=d#T}g@?|{y^K~!Pr0UcDJjCL5g^YJ;(zK67
zf0uaB(V*9ndC*lu|Is#ixS(+?0}L@}c4sHx_O$LlRYDz*`)>s0H9!-)-!0}fMNdaV
zp#QcpyPchBwUtbbw+{}4ns<iBN2&{kGWGA`tXm&{Tb1iax<&Jro-_Ao!9YFtRMVe~
zZ_K6tfa@S*+MsEVyPn%RaV=ZzM6`!PAgCM}FVxb+B!&(-Mz&G~*K#o~2I!_ON)qr7
zU&qFJdU7lj&b_9-f9d8<yu#|=w4jhYIQRYvahx>zBSJ59bAdPeoHcPDd+KFjB>Tj6
zy3wQ|{Xq6nA}vK(+f`&$4Vp#S(mRVRB3DnE3z`INc&dc`?8MTE#a~hF0j^+wv2&ie
za5F>+r(a^6alqIVPi7!E3fLFgbCp*k3Opa#Ilh_-VKxx({<wQSp5p1fzB;xFj?Vl7
zk4GG7AV47G`Ea%}NAtRJ??EC`8_ixy5r!Q*(3vtOyupkbd9EbYp%o$pl<q>g&bzbQ
zh#+)8zT(pgLdOq=k1KNN{-LRln<CDs<HkwM&K`0?PKhEFJc-$e0X`WONt!2Yp$ixo
ze7+u^iLN%qn^uO~eD)_!=Ps_nn+ZIkr6kRZOv#^=PSC@Z`ITJZ*qq`iqyGGvF*W3y
z<s7afKDy&3rlT*;srNL#R13V40`XF6ocw4nuj_3%N_k2%eZ6awh&ur}4%Xs)j2BEV
z!oq|PO?iFW7oE54K(Brs8qwlUZmBH1L$9<MV+Tv%_3Vm!ISMws$Hm}g=Q=r#HL*Vk
zu76J-<8(>PJ<ja@ckCMSkXzTpv^)QD-1wMMxM^?nOyfT9%4T+w*I3(^OVL{ziG1V$
z1Sp+fFpL2n2=mAriB?i3^jg*-rXC7iK7GG20(-%b-F+%<lPJ0%F@be7A2`_JNd`#}
zgKBq(d&5A&xBy9Nfg$|3n}6FLd;3dm#a0ig$469ML><AdaH5x`fAm=frNU4#hwm-e
zcmFQEt7H`)uPx}h!aY(Ba9U_X^pxvwZ8TCaqC?h5viOckI?Z5chi{1}-5**S%t5Jq
zDCbNKeH9^P`P}CdLBPV&DecYmBE`J8uuYS_r2az5?eHx$Q4t4Gl|sP+Eo84$gwo6}
zm}&Ut@^%W@L0Bz(nP7<~404)a0sw#9m&R<bE^u?1YUsGf5j@NMN3wQFE`NDAZoscK
z!lE>bt4251Oy-yh&R_S$SB<!QX1@rIJbTI)zBibdPXv@^lmS8;t7MU<a~sF@Z`I9q
z?!QSm`ZDSSQ4)@XhT$Tz8X1W|GiQrzWTZF)Ai(MSB<SI8WRB_Mwj<v8gL|@2c6Urt
zt>04WabiV>x$%~Ms4doJ7CnYs+F4=VjI)INC|^k`i1NE3x}o+Mwl?ez%U?@z{Hg3D
z)nYT=vCut{BLGtRV&rSqFi#w#$p~w!0FemF$sX&=ryj-_LX7$wQEL!TD9GMGCs$%d
zcp@`CB!Qe=lNDUveO|57WtDwId^qX7%-=?>q?_=Ord3q2+)e%hIx8jwJsv;z)J1)4
zNzu)Kl(B!nf$Ld-cY0vOAi4YzE%K0u@r>0wZgMW|0&X0JbZ_Svyse^KMhb1Z9iQZW
zD$H(oCt<T!Wt_O<edCg{&{r_AGqd@5<C3yw;=In<(kMSECSaY^&>FSj`^{^x^lqzm
z5@{M#G?kfj0Q!t5w!Te0s(yJNvKCN+{mv-HX@z*mt}yf->eLI>zQW8Nv-HhFS3JRL
z(Nq>g0q7fEvbLK(OPttAr^#(BE4bBkGyAmUkng^_=RY~yQ*TJ`r18sWF4*eq>GQ*E
zI=3cFYMLu)vcBRF1Ufgx-*hU5UH@jCeVt_O<l1O1hUlSEmK>&3(GS3l;h4l#sBms?
zR18=CeUN{i((7!JHlvR27ZjJMVCS}`CqZbr55y|MkF8A#TAA{vR>wO98J@RZ>y(S2
zpTVT}vue;F(Lh!PQ%d*MFXp_?3v4lujREK`DV98WGr<x|9YD<vIhkX?+vD5uKwa$H
z<Jrp0t>Q;pwCW<LZ^I7#^mo`emdQF$w-YEqec;D!0%t(Vn(*19WTn#@?siZ(>pun$
zC}~7Ca=d@O$%o=u^(Pbq{}(6MiEnvYuCn3~hQymy#ol#h11w4?ztm+Qj7^@2Hm8}Y
zn0}YnuT}hfQ~Dr9d=xajE{o;NbIM{6<o}a@u8f5VDH1<ZzJV!=QB50CpB99#TNEqs
z&0)^rKOb=XsPtDQrF){K&?Elpv!xPH{S+{sni$=9gooE8=vd!qoM_Q99J*5NkQ$Z7
zRb}P%^)O1cLI@Vx)=NndugLjlsu5YQi}G_mtQ5&~mkaesx+il#ciQ4@d_in`lH}NI
z2xkoP=j2LxwO+yX`#1cTB3YAK%Py_d+#fS0oJLrWD5PRnbF8b45vg&kSg})p^5vcs
zXXESZ-jFZ9(<7a!*huY3o;9eMWR4ZhSxZ9<B&9JYoJ?;tdF=b<@wVo`gz}GM0z#>F
zTpFyH`5M>vEwueVj|7SISd(oyuAg{?7Y@$tHKmO3A^3TD4ZZ=#Tso*p{mQ+{J-p=2
zYciQ_o?FKr&y$%~Xvb8=P74S!4}o2<!4mmOIJdJWiSaNc2!4C`Xohj?LTqK+*2{YS
zQJ6co+o{P>%RvAdv!JebWTOku=*YJE)Opw`Iy^$ekyf$=?x|<Y?);Tze^i;o|8&1z
z+e>k${0+x8DBZ{U=9?Y%7G`euE{u`lYd@l`dWzF{`~f<?vMvS*3j#bovj?D#q*()y
zL)!et4^=lFyK~+4ZF;LtK~XYuOQP?KeA$ntE)U?hgQTu{TO(j{KmAq^h!))0uyq5V
zOO?s9W3N@U4vI4LVzLYB>K_wDqbrybQ<)996hI*_@FLwX*fXG`kSV!4(ABZ$e^PCo
z?!D_aiIRxm>C19AKqRPUUGuoZA8(Fs&1_DnH+Q`kSDURc4dT26Wwv`5Jb*s=G0)-u
z9VIQ?FI5MfpDiC`f0tF?L|g8?pt>j?sMz#!Rs$tUT`ajS_bAi0XRml<mcRaiO^>uP
z*=o4xXKbbR*~0zhzUpqN<FP@M_j0kC`<-c6CNbm6+V~srf3-p8|ECQ;rGepyZ38)u
z!M_=W!GA~!!^!<aR>2rKPjn(CM#AlwXo^PZsz~TryYfY@x!Hy9fzuT3%%q_bw!!38
z2*GgKbMkbKY$+=SjSzXdDCcJBbd&PCMDI<Lxp^PSEM!~9{U`%w^U+5^z}!_x&$IS5
z<kTF-bsp(pV5#erY5gr9&P~QkE_cA5tL?d;AXGpkG72(sM5II5R$CXer{vt5?=+sP
zYwV=DA^B7-RIJN(|8XM$o;zi|e|^B@stoRrTR>#~8KRpUblGRAH2Ma54xa?Q8jQBS
zku-LBP~QzxgWnm1RK?E&r3#EO&%NC>negpumxK{QY8y`C;D@OY26vw+LsXYax7>m$
z-H=Q}Ft19B)$a?1XxZ|XYsaH7qpLTD;g8$lXCUUN%=k|+i;T?wd?_?Kdb8z2U%Nkc
zov=a1{o3yhKiXWPwTZas;!xEIxcBznq^bC#c8;%QdBa6iBWwZssUQFA8yNJ@q7gYz
zehkgTjlN#y;cUELcEqD=aJQ{3wS{{{g-xT$rq~uQF<Z4;=MqG+C`|u!*|27!#7CzL
zU4Iy4Lmtqr_^tV7cAc&KqsQ^1>qp8W-Q7LDB_gIU|AVi9bFFEGNR=+Pev)EZKw{1m
zcJu8F#<xc}V21U@Xwb^$x@UIAv;0Oa>$CNNVGfjR2A`%N6OOBV`wz5pYdM87_OO-L
z$MiARftfYE!-(-K=XBi8QR?C%b$tOY?`P`(Z(C4N+JDZs;}h<9l&w%E{f^dSwPJUO
z<f|ih4sm;jRd96-p&T1m75SN=T$$F7PIEh`u~cQCqpYb6Jh7?w?%6@}9OB}tqLjN|
zutP=v32tF$n?71eVQ)g1uc59rZK$yEG30f)emTM0LvNLI*UJx8a-*A9>?Ykdca8_^
zL9)=P^)1nv4D{__-&?=SI{sjDAXTP0)ddXH<_k*zmVN)a^iuX59BKHMAU4?UbMAKA
zbyg2BS+VhS>>Qwa7+nZ}yg)Fw$|chz4}#E@6T<+<9wBhfRcK7Twsx?%m}vAe4Vx|!
zlW$<Y`C`g!D&WCIhzh$4`(20Fj3Ur{a>QM>t`uU@=R9)ZsFjX`+u?Vne7`lcKQ{5e
zkk>M66!Gho%f0)IY5L${-fIKNl&V0%j6HDB7fLNL9!xo>U#|=4J*T|IRIq0d?7b>k
zeuVkE3iRZ0^>CKuplHz5j+>s|xvpOtUiD+ek#`N;VA?VrK`@7F!>+dKBR1Ty>bA4_
z4}G)px50FpZo@=9>o$A*YtQR&M;d$EkDN|K1A}r+_O8z~$(5fJXV1iY=D*@7N@&2;
zbA3@VKzDtxrZyEx*CPMH4nQ<9;d*#}J3h8<(8udW&V-_IRz<$4hEjKf?P7vm<c(ad
zyxCTQ4cAJUCWu8RgGon{!3`53n|05}Z0q@bv!;aveD$^IawIV9+6YTqvVARKY&33x
z%Y{%3U0uFpX72ONqf5Y~v83#&Lj*qK43%2M5XtvHbP|Tf;fl7UH*3eT{aV;D=<|IY
zjDwur$wThslQ0zfgQ=Xtk;fE9^`l%_^37Wrx#8RPp@v+k7&)cyU;F1!ZPP^ORkKb_
zY)aaYvTaI+BDZZyrk;maX`y^}hj}SGN-%IBtQm06zA1ooCkqeiICClgL;{z_6G`BN
zf<J;8%g^kLT)Sqx>osSxdlCQx&Qv8iyM|@7_Xa3kmS5JxTy%BeDZYEbsY}=po(6Rm
zPfb`k1U0*zrZ~I=`+@_EwR;;%<+-WG?1|OaXXI+Z7ys)os#}%U!r$)IS~{xm6ll^^
zUe`-5&XEg@%B>4>?Y;r)b4woorj@-@%0ff_=~dsngE*4D)7x$K=C2?c?Yvgu9K3>#
zrjYqTRo-+x?|?0v3W2WIJ7n^b#U7~eQJ>(>S>IDbDPZd;132icNk>X91d;zelWgYR
zwY3>fVi|~-Q;(W{0HMEv<nGAZBZ-+Gs+RBR7i<UYpG(XCN&$*T*&-7YCvS3h{(Pxu
zf#Wq%pP{;d!ixZ0u^oyUk<rR_9K^0&E7{Qw9E~sx)r<SX>f(YC%ZAy1ZAmmq%t2Xx
zgz3-13!@8y_3sNGTCLvhjBd_9x$*AeQUm-}AK>&Ai>tH67!@qwq|iq4MYu!2O|T#z
z6y}mZlmCzu=YdRrrH~e9@{(a*G-<_Z2|77%?vTo_wJm--Jx$6ARO}lv0Cn`WG<wv2
zFy>w^d?%Tev~(%%JJL>UzcibxOLJM#{>1Kb8j;VBoax0M)!$6(H~hk_O{m{AMaMED
zh(t|qoH@w<V)E;xh;c{?H|IqozlJD%aC6+366bL<E&wMQ@yfBXzO+$Ihq6Q(rtXs%
zrb0rSTUidoTOp>ndf>2{D0^zk*%}k!A<#E-HpF_ZxTi{Pu_&s@FCB>q2VD^ZtXKk5
zm@@>2*U21wflOhb+q>+y575Be=W#jJ5f9TFU-LA6e!=bKjsyKbXYvxC_7geZ{j0oA
zQQg$CIKb|6ex2-e*Sxt^fz12=3{<Hm_axi!El~1q?tNuu`_=&~pG5R@%5@T09V31$
z+)*IZJ!zcDGD)bkjRJ%~3B+Ev-cTntVnv!&<h-(bdXRS8NI7R6YJ`P-PxQGZPGGe_
zmtxGavUbMj-|E$FEcX$BWzI}I7ghq=o`fIOPV`}gRn#wGxXZDP^}3WBKj6i!xZ%u+
zcHV183y%T)bqC$gDu(9MqrC6JQQ~{QG#Ev=15M_6x!Y!s!(7k?KM;yk5gU{)#1(S(
z$@-qC-5$id9Rp?CBwsH8l+5^lpc&E6(x<3g2E>iA(AI`?k^58lu6P557f5Y%Nn)F+
zAK{3rV;^<LhF-fUA?i?YV2xISIZC)%<7{jlMVxJ9Rv<HJ@@1Zzb1KypWDI~?`f3BS
zIL2i3qyye3%&B!U>YMQSEwG)o?6gTig8V+J4<LR%pVep3hFpo|W<l|VJ8D~p!9G8e
zAlCVX{}Ly*gG16p|61xh5PlBBaHZImG{diJAac+8cg@?1|3C9A+?+!NG+g%`RtE^4
zJc#nwosNJP4S^Sp&0!rX;Sh4BrC8@_B}*iafKnKOhc8?<w0FA)-{K~|?&v!Sv3%88
zJl0sr>jhi9h1uNvNugeDT(;7y*%O>Fz1##-`FjwC64&6?$?+S2)umNlUeMr1pe&wa
z)7>oU+(75;-L#Q43TBA%93mgXw{Y$9mEjbC30f`o55EAix@ccP#DbT*z?M=<Qiid4
z-FqozJ{epVwT4Sx*6*4p-`RKFQ%pER+Doxp3c{1)aMAt=s?8tTWzFg4_njFQ{$tvQ
zyiSXXRK`3XFf;%H-<yxo1H;n<lxw+;cU^C#UQ}1UxZkpo_=1P%e~2SKohdGkwaR7{
zVfio1<IjdkA5&wmrepu<+?Bdo&{168#mA$8Y~TIFyV<QZuH6KqkUQlbQ(^97R>P6|
zc&*S-xj@!S^-_GoKM<0l)jAVIKRGC?Nb2A<3kMb!P~!j3Mt^=n0o(|-B>kUMDMT1^
zd$?Vkw*ACKn(q_#lzUExk}la5B~UwZLMlhjn$a;$gbN{1Fm`DP<i>W0aD~6EIV1}_
zc6O_ElYTt^XU6<Q#?$u*V-gs^-=Pz7ihy^)CH9K{(`qgBJ>`@vA@OGG^XRgyGJGhy
zrUy*NlR%k7M1&o*BLHj&Gv7PNU^LJF$=(h+KN%tTeVCgkO1o5=%<A~WilMjUhZ5G`
z0qclj)E4x7R02Ew&Q=jWa=-k1T-P98^A`V94k8Mv%ce=H)&dz5EAM4>6=$A97TL@a
z&teJ(h{IVpnh{$RA(IlT==InyPO-6Ts(_SDrfljS;~u7_Xi?bqXBzLb2ZlE5zNwK|
zPz+KLlOiWjmb|gi%NR481{OqMlff{;Dl;#O$wMkNytvrp8B1C!41V-W*n=1xXOrDb
zk@Nom{6Y(?dhHi#$te^{R-~hvzIh@{IEo#7nc*-?MpK-L$wnJfgVV^TzE)$AaULhX
z9y67@W^hIc@9#7Ox?(=@ey_T^TUNu<ju|4<57Q9`d^Lxm&SZ8}`h8gkpCxBnC%gPZ
zgvb{qPTuIPpcs)~t21bOYDt?jkT~GVNe?rhjYbt^Wo2a8aTUVk&<WDi2rjXBCy|7R
zL~6VvA@89Ia%9Hu!p)1c{eI*2bHO_vpu=k5sUF0!9vwO)RwUNa+Pb>hYDOl3HQpdy
zDT#fIflJ$(I_Y&7Qf8X$-mlt&p6hr=8I?2eN%p6Vs+@VGR5`8x<J9;OO8tQ2Ha^p3
z3rL1=c4NIfxKsIh4;yYc93$hebe@ZadFC4YoushcINeD8!Ve>BF9zPs5i_aQ?@`{*
z^ZU1%yqc8un@g1n*07vxy#!6DdN9;l_=^jfb8i!_)QjOSfoG3?9`eg;4!L1s{7KaB
z5(}uf=ado%vEO_WM>1nP<maxD<pUhud;o*fzC0Ek5~;!|D|so3UQw<La|u!|wn(UK
z$6wgP@G15QD6dKg0jAgo+d7r4hK|z|hH623?_c*0{%H&%a}^nZr5@*g8h)ief1GlV
zJ|M*W`~J^x;P0w9x*<leO76Y`<3eqt->j14Y)yqyziRj>G;y47=~{2@M_}j6Nvw^9
zp|4wnfeIPcNcE6pwq9{gB^Uz+{XSOqP4r6gUbDm?GaI@}I;}FT%=$N&%-xh#m~G_r
z{^Orws`0QyK9|V;7P8J_P%El><CXGr+zkP;EZ>B&&WCs-N7yjeIDZWQ_X{Ff%)`k6
z)JgAika)zt+3Bg5uTZd9*7V}5rjwo4n)NLE3Mxok88)$k=1Cm$pL-%dS_p;{)k|#w
zq7aRgN1Co1e;m<0`scO;i=0TKfR$PLI&BGz7`%>OZSuc_9P^Zjf6so+<9SlF9J@V(
z5y>WX{$Egoq%ts(bfm=Rr^2|E{-~RUN0$0zFB9^T#kU<PuG-ITt-kofG{WA2XP}{d
zws87yGwVP1EyB*%L3;wA2T-7n7SgvjhCA>M3K0hiM?niZ(TF@cNXP)LJ4ld7OEoOt
z*uAm;B-D$4rQgc|J?=L$X1V+O7W`hld<Fz~)j(`bfwf*(*ZZ}hYLuxJ12-ojF|F96
zeH)aNAKWqS(4v=}yuA0VwS@u!5<+LzAMIr@{);`R3G1O+B-23m+i&vwyhJk00py=b
zNOpEqc;Ut$Yik9QX~f}^h6)D>R=0uM6N|Z`9Y?<k0v4=j4$ZTD--<mJL#e}9^Lhrd
ziEZI~Sa+B)AZFc-gOuO9I>^%JzLR{2g@Ny@<o+^CHOJB3`vd^UNyul}=(+8C^Wm+o
z@9damrBIX>W+MaEwjWI6Mi#+vMXbpZ!G*d_$+Gzs`nFc-=~y_wS53s&E9iHi4odR>
zEaYrIu?JHax%#<r1s<~EAEF=7)l=8#XG<raQ7}wnuo%q{NV+tPK4mK2T3bK-<kHMT
zi#1Qd?>;6`bsLaL+?Ial6X!8^-mSv&6}csaa}l86QM3YN8KJD{;k$a^@zFiyq;0gA
z=HYB=c_3)zYhrYsX86p(_#5;bGHnhaI_F$%yTN2<l>?OhXH?-ULf`m@{+y^G<$E>;
zjpQ~+3laFA=msJ7e}{uc$4I29+5DJA0EZ;6*ebP1Mf^d@(sqh%MPur*_OFfISTTi<
z%lr6lBSi{G1>5`GzZd+S_8ZyPaN6L!&XYdW2tf*|=Rj%Sp;W;^+FqT+zF)Qad4qVp
zeh)VbV`E8{=3%)mcG#_`<%sApUVp@ev&(=ZkHY*a9ff?H8g=JH%3#<HSplY(IFE8Z
zHb&lJt^60p(z2~_MDK+&pS#~9;532xv-S6Cu7+g5=dK$m5_jvBGEZxrysaqJBT60o
z*64X846YN_n$giRohzKKt!NS}8-@`O8u21>4$(os9f%XQfk|YFrpRMjlbN5jtEzC;
z+a9YaW;%rrW8$h{VR)JyfmgV$htN+dM{6hJ9!UDPP@^jh=`;_K>+6y#y3nwfBSALW
zFpMamEE`KLpvbbo)=8x&aRS@L&LC^}+#*mlP1_@)S@kh@f0aZonxk`+u#&$$)RfW)
zA?mGiu-NGjfn-?7Ey^FesXVD#y|7`VxZsR^r*;ZI-@WoTH@py>Ez_84Qs+d`*ne}e
zT7~QnxG&2LJNTdidv5Op><{bT2prUOGq}0Hzu;9wZ$uS6<?p+TXG3|1$A&*-?WkCT
z+gkTuJ`SHad%zy}`S8+VVP(%_@P`Bc<zqKe(~4B@ajA{03qH8OEz~dmiN?O$L2f$P
zcD>sBh?mFODc2i0r*V}vr-e^Kx3`X%7VhDtx-1A1b+QkTH6lCyZh8mXpAcO2^MIxd
z;BB^-U)oI?ijF{-t;>5DN0nWM>RpbZEdQy4uSVt}o>GaqpEHcuQX}({k~H7HS)Gi_
zi~yzq%>`X=2SK$oe(+sqdRi`MfA!@#_9TrT(^}pL3L@e;6v_uWC|n_+K6{HLGN;I=
zJs6<p9a}&D!8)d{)&4{J<f?S}tIo<C03QB&9Edu<$-_=5_P|!TKOA~imZ1c9NY^W#
zDEIZoA1fn@W>%Z-j_uBlb9`B`*)Y)%yRf(Z#@KqNurRiOh1O7(TlHS_h)<ySTu7R0
zdAg=@u5sv!uRTXj?cdx)ZF*mIj+z>hOj6P`M)P6On(gt7I->VmTmn(Uz^#cGP~<Dl
zQeS>Qc%>mVQn4bbn~W7mSK$FwxE1?rG47tg>l2rH-M(36jbFtJ^)xb0U|LRJPe8f%
z3G58s&;8BwWnGHHyafFrAsv-XvkJ0rR$<}!z2md?PPFS<jFjDbl4|kH?tTFKEn(=>
z35`)@Hu&Xq4B@BpP>68$(82F8;Kkn<UuVv>z0HbmAjxHqyXf$sV&kK{aROgZIGdsF
z4`Pz8z!>d419=oX#1x-800{AU)K=Gh8Iuv`{;sIb{i;UJ8`<AmSzeRf$!{t9<X@Rd
z!g%r3>1SWuvUSBDcCy5uSADq`cZ^J&CFNN;1$iXX3v<{Q>DBSqy{*>D0HH<bc3Q8o
z+tZh~aTcTWYZ!nLPE=UK(v%J2_tM;^EhG0=zg1WoGws#^1dvz0H>l{t4d>AEV%h!m
zI4uQzF~1Y+CaGwiHBZ=s9Xd$7P?D>|KBg~TolP?s{{q4{B{^VenKtJyrmt%$mRK40
zDL*n#=GuOTm<c*)&c$vPpzv^y^i?NAV-&J3OH$XcQA%d8x79qYvLbQir*R1tbq#RT
zkBt#S{Xtv+723j!B!W_dll-!2BCE#2kL?NFU04C5nW{+7nw3Ld7P%>0;NAN%gVu^L
zhweX17kc)p=jX%~)S7}9WR+RT+GKP+Fdk-I@QKgl?bH#C&FZcMAhE*Lv=MSF?PGg_
zT((e=X5`$uxl^Ma_tfv$u-7b2UZdx2yk4{xZtbm2@QJ@tW2d`0;b7Fe_N5t}Lo1EB
zU<=gPF8wO9|2`+C5M4&J){2bv1(f3SK+FQ!E?SZEaPr?pwlM7F=Eu}lmCb~dqGV}r
z_x;yHH@_OiOS&Jx$;-r=+e@UHljD<O$!6fD)g0{(ckqu>m^4Mis(f5{cpub@ydDSa
zqMAhIakJ)g>2TZDqS;0(_V+HA+{g(n#KUVY1*4fQHdME<54>&T3d+61oq$@@$_`Fi
zxw7(aaduM$d*^ntPyB4EkRXMUitLO)*0`|VP=_kDiW(un6?;ZtdcAs8kOdM`l^$zy
z&@feFpLU>xpStIq^W}BqR4eKLTZr-3Oug;L`{Z|cEKB;z(+DiEw@}6@ZUO{r@CLl?
zQ9ZM%D~=Wf?Ixg~!!bhQ@w5H)<%KdbvTFQ1*k5wRy?^EbT&|rl%>S@*&yzkNj;?+K
z?Y?kB@VpGL|C(izDEnscb@$6|bFPF!zKJp|de3VUVq_BHgWs|~o5y(d=FtZ3Z1=nV
z#HpEM6o(GXlEz8gIbkr(-<o-SSlQD6=r;H$zy=i2xsKxM$vmh0qg1=|;iv9Dx5h6j
zk1u8C_RvDcZRL6Y8rQJ;1=j3>f|tmp)-9+y8nw#-p@jY=q38vgzi)}-tNbL~wlv5x
z5T51ON;<;WX~NDk6X>SQ4D=1WD$tOnx=Q>Prmw9ii>5<5C-gO7H66WIUoTwxpcq|v
zzXwY3q+163z^(rGQr)uVi4%^f*${v@H~<cr*k+Xu+xbjU>5F9@Qf?rV_$!p^5_$}h
z<7P_|;5HKKvumDq*0=7cKIybzG+2DFJt0do7$cD)%|)8Nf*ZumqZ-OXi%jLw;i<GX
zTPF-Y?Qiz~f`P4n8V4G5!10o;lE9Ze1*y*^1FS9mevK`~wilIRhl{PvdM4?g+2KCZ
zdXy7YVwu9FRn`by)n(5LZ`EZcS2ct*=AT+X>F<lCB!ld)L34`TzZ%$Ll*vXwQ=41%
zLv|G5y;pA+W!-C=b&Tfo6^UlNe-6zK7o=<Rh{hIU%`7i7_En}STL~y)w^7aHGUPMe
z?Dy6;TVgG9z+y<@{oKZW62=LiVZ&o0h~#uC({{H6<Jp=?`{i)Fz4ztDZgC}NJDU&#
zmO-1!I9#FBv@Q=rC{)$!E6OoDD&#fKLW12$KwzEtb(Ac_>@ZlNCBMP1l)P{7F<IdL
z$hd8cU?VgTbB-R;g!Id0PZ5PD{Cr*WuYtPTW>35!fv9^`UmS%Uk~GYHA#}K*h%{Jw
z&<7@a(=&<SgfPppCgRD#yhXPM<3CwtR=i)=TyOeS`=Xm9_4K+fX=JxOovsBxgxZO2
zOwWea$Q-bvm7Q~plDL$tbjrsfu#J}Ft<ikm(}@?GOf%+85V7J`!CGxp!>4s8Y``0R
zb;4uTCQpm@Cta#-Nl7Xl`wm^Ey4AgATxG;JlRZwrPAl%Vbt?*}_QkFx!U7ZkIZ$pu
z!o+|T*jYVys_0j3T+f({pZ3nmW&V|Q_o?8Oj$;RZKUgwbescjRlP%Pk!kxgRUY5Qd
z$KrxbDi+MPl*_z2r;Xtb(Z=T>4maYoLt>%8xx&`Jk?&ksc`M5ogPR0-J1@yMglz_M
zadWW?T+c2D?G3%qMquUcG_Ekf(qM@);(Q|uxARw5`-wv%7Jt`AR<ndMe6`HqstlTz
z;w3*fx0E4f&zy(9=Kk~xXjSpehlIgXJ@tkyZ{NGlfTTLVo>TU!*~6G@r>ep5eegue
zoub#`EDY_O4@)?fYq*s#gqW4T6BtxU59Y~_0n3#+XU3EQjTCBDbUDTXWz*7Y2O75L
zf)zF7UZ>3U<h_?J4Olf%bw&nQONgdV>P3HIaCc&a6mG5HHkPWA^XPtFEZaWF4qJk&
zjn_Xbs{3iGJZ9PIRBNh2W3@3Y2$#8$A|@Q<t|FW#M7B(<wlS6x7igGhbWSwp^4dB&
zG7udhD`1OMRq(A~%juH<sjkI?16oL}25GBcjszX0cs>WqM~oh8^<G?Mo$U9^`SNJP
z_%9k~3ynokksV}Z^)-DX;e`Cn7tTjB<&!qp>y&YPD_IK@^O;iiOQ%CTS$bQugNIfd
zEKPkzrhWCHVjXTaTCPG!NDD(KG>ne1wB({bwW#!(EHovSI<FZ(;5c1s;$Qv(z7_vE
zQu|zITLC1BL)1w!Xd>*B@GmB@uN*-%N}1WR_YxMqvpL9QE>gtW=qXC93$FA02Ghw;
z$f@Yj8<(VKCv{daA#CIVQN_4}jX5vqSCtVHS~}>_PTRY~2W?7h{%e7BmK)8B=Cj8U
z*G7&yCkmnpg7|O1+wD{gJR(ytFcHWwxJxl?!=~I4$YfrceU_P5Mu{4h0>R{B^)IpX
zZoHgq*uWEShU$JeJ>3a*%%%6m-U~LwLsk%9EyZ;$@;hx@4oR0+0me^3(IL_gsF{(w
z33{y!+h0cRYzkxMj)_@P6g>^IW_ZG9`NF^puZF`mWqb-ybA9x=oU@*vh2uLEJh;Iv
zqA*mX-x{#W(hJ$nDD>w&MiW~kjKf?tZcuSHn9b-5odaiBy^PHa>I)L<3KG)ED6XI)
zji)0b{6Q1wBBHRvKT<(G#R-3Zl=c5mi&k(q56jm7$J}(N!iB%Q=()5Tsu-6Ha~mM<
zPtRVc66FKPQ+;hQp#x3BL`QueLL-~_?hyUTxC+b{@qr!%<Y$xGVi0N%+&~3I|30cZ
z`YZ?DwhS-sAG>^FXxy`wKEOh9u8(@2POmq+smS2<(0SAiJkP2{Ru!dalUr6>;y(x5
z%1{4Qbl+FKsHXa(=?Guj=v})8%cfz}|1UinYbh77T|)kbR@Ba@ox_WFDM)aMvd-wT
zkLLA$@pkuy+tKcmmeHFO=8*`VbfrJC-Ap@#7Nu=vMnuH;-78^xhN+lt&qzi;ETE*7
zXAl`4>c~|fv6+I7@OJFmc6<K5Uwf#pg9uSTDoiLZO$`ihbTL1&bUVR#hJN$}-j=WD
zvt}QF7t-V7D5d$x=xmH|XiQE`?!-DCLPE`o7cr|V3q!Gwjy}pkAyyp`kq#O3$pwGB
z5{dBTTTuc%AgvNy3X&*&iz|ZUjkC~#vF@Dx`<0@E@KWyxc8r|N*H-5;>t^l`$a}m+
zH!l+AL)f#?U3nig)#bB!3qrZZOnDvJ*+~U{&GGJBqwONL15a<qWtRQCZ>uRh-mgp_
zHlXPq!`8`<o%w;uTS#}dwXHM(kPSd`c@7A^I)8hxFl?Kmd0H_8fsqLDI}VfHR}$vz
ze3*fZ>bddG73?1#q8_qH6sY&A9#A?3-fo!V-t$KGYnasE`!f?yx2knpn^d|!P=JSl
zrni@^HSf-)s?SxKeUSE9a2NRrc*GW7CuoACUnWg<1K*hu($R<F9_x<NV`q)=5vZhi
zr%AKCyrTC#SWtzbiu1tNm9Vd%GX_@S+2AZHpR()a4q`;RQ!u6eCYAlWQHqi44droe
z!9kZNIprUnUOc$JZWMZ(a9e&L1@?_AIiWfBmmgN0N)9+@{etTWhXVM`QMT%iCry_R
z+!9=KC^+QxrTcoi2l_3+wX~v2b<t<42F4%{(o|C~DJXAcqx~`X(SC_PL7H7uNiU)6
z{jn@=66+f`^l^U>@nmFPNc`Mt(?5Pzq(?&rXJST~iqZb!Gh?nIa6BMl0s<+fv~>Hp
zd+5@yNXW5sb`lsLuw{{&(9+CTy|<mMNR4Woxm(cmW8pGRX24JGF0K(wPR;0HkVw+E
z<i6=kGZG>?9i?7-LFPNQX%-V<)mYE8i7}5YOHubzxZ&upj4)6mXrdJP?GEse-Y9~n
zC<>WX+5}KwA0yt>Q+#jP2J|FoJz7|mz@=y@|FURZrRPsX%r$fsF*mXYkws5CI`H5Y
zyENSxNUD9n%E6)&%a)F4i$YR9M%-}q(?UZ-dI`-T_$Lc4tIh~6i(UspeH-QWeG+?t
zidJLL0F!M9-BE7xPO-NnB6G<aeXDf1kraM|8gnl3+p(%Nv}oce2JR22T=0iSFtBFB
zi3%3)-k&F$nzp)HUM?2W_U7K8|4LcGo%-_N<};N3<T<B!dL?LjV3Z;&@Hvti{xyNd
z3U`AfGA$roE~99lg0VST;77oIxG}@Cm!=f6hek+AmJeqcaFa&eBkdUsE1ksC!pC`9
z60U@BzduIgTZAZ;2mI|sQ<tV8RNb>s4jq9u;uSp_m9y<;t^kV)=;)pz#OKJq{$p_$
z8#^Byq|IElS)PL|?!CE2LK5-#O>KOHHf6So&4}~XItffXxgpdu-*KVB6&(eU&Di6i
z3d;MYqVU#OQQ`|b9;@w4gh@%>bRYOibHnU?Ye_2E>TZ-vFi?A*uOd-B2BDP9%U3VD
zh(1hwv`LzP&P0AeC*NX|0CRim**&{tiPA6AO<}%{;;nS-gGQ1gxF@Co9|d(NnOb~^
zy!J)s)tWuaR(UFDR?4m5>x*%5rNjG`hwibF{+%FK)|^qL<OOJ3dGk>UBBaM$PS+7@
z{EHwJnG3d(J20)5<wbn3tK|<#{ZW+ed+$?A<M)mIXnTA6v`DP@L^yl-rx*BH3WRSk
zSpLin!*UR#!6{YZjXL9fLbo_sIyK7taf?~%ICzQ?jPzexlbJc9061h#$6ZH7@)h8Y
zn?v*w@q{s^k34}7wm(3Y9ex`1?9XV~5Cjc5ZX<%4Edb_3>kOrPSV~c}i-c%gbrsn1
z?*nfukd<nN+a~-%{-b5DhS&8iO>O2FxxZyyVwvpb{E-Kt5$kL$wB;tMA7L7_&q&)N
zh+<I=^&tNxI`}jU2f|<wKzzg>Yi3X=R7@t!=^N=^(vlHxUPR;LN!L>zNHg!&tQ_=f
z8QheZ2XLQmQVlX~l1;J&*>I)*Sv0u%&t>(xlkvtcs#Ful@MYw2w8WLw3#rQ9AlYjF
z@ZJ1^s-~mRJCYUywe{zK24;k#OhnJQdBbL(ML3_>NhLIc-!To5>bvJ^f|&hb2eG)_
zu*6`TGId)peM}J@^`r?@lEvTGyAx>aY_n7-C!n@VI8#8}-5*^KD#Otk4=pl~H*x|$
zzJKD58wmvkdC2?KFq#II;8=+M1!@w99^ODG$TK)oX<PSVJ)iW8<Td&l+9Mt9jU#{N
z5QOx8V>dWoG8{XW(;>#bkz#Xc(S<Y>xZGj*-FB{ko>@nj&W?&e5d9tOHI=iko{Skh
z4Y0*VY*?N0Z19iMW**bvrWL>c()x^X-{<trq2#dOP<J7lon_U88obY(>BbL<`YVUD
zqI`i-f_oGVYuwU3TF_=zcgL^J?O(GIs=xo*VA-!BIt2?xdzAJ<Jww5Yg(ngk!Qv-1
zxV^NFo(TChs{;&X&52P9h5BAU^!)~;Hvqx#6V~W7nF_X!PJscda#i9|dL9vv(Uhcq
ziKbRb;;88zE{HMF`9WxY77NzJca0Go|I!`8wp2!N35~6^H&5?~D8ve7*4fNB57c3p
zq$9ivc`aHKnQaSwX))=(vhT0Ry;k2yLd&3V(sJJWgb}k*?H}iDQZ7h7w87^nApkrg
zmS1nmjHrn>i^40ex?2xLUwom=4XTeReJgl9oLc1T3u&+`ERton#<}@XFsjE7Dr)6z
zC~sL>%r59gxY<nqijV)&uzxhl)lGy)oqA(2$e0~2PjC<h6U8&e&#uUtLxdXG5_TwB
zxnT<n4;`xhvH2Ti$)*Idqr2)KV*@~DXwW&~7Db^&OL=0?*vA5W6Bf!L9k&v}rw)xF
zX=Y|%l2&U<`FGxwVnxx<k#WyF4TU9quPB!Q`PTQ}t_n{3ZajCPA1S^+TNP|1O!xPl
zhk870L<kNBS1IY?8Hf-vcuZ|c%BW(Ko>TdZu;P&wZ+FA%zl3pjI=bpV-mw7v{{f*u
zUcW8*&G6^r!&U~M)rE2P`uHEO&Td~`zP-JCb9#IB?)>ED{LSl<Gehv)p}p?$+nYDH
zr&q`4<yy)GlCK6uZ{J>@-M)Bpb#m6Fl0fnL?A6)H&6}&+SI7T2dsV7!uXuBQarWlz
z&F%Hs$(z@w*QHt$Zm%bA5W79QxV-uAf7A1;+tcHl<7$L6pHk70B=lUm#4$lW1yVC&
z!gGE`rQygk$#SwBoh43sTZYOzDYbgeJz-hxnmJXA0L3>GU|_;oiuLYMhXh<@pUc%v
zzcgWlP~h>if=a8v>obo?I=4%WENK)c*wd#U%|=o@rD}+LP**L!*_>KBK&rgde{QXv
zA7}@YMHR1Eig#b}Owr7uWEHSnoXXyK@7efZq!irAc=GHq+?7SrQk)jJ&Tu#3(XPiF
z>?wSQgMmwy)FGFtE3<uP2YHqSa7NN6S`NrL(5|R8duX^}Q$D2^<K^-7_3f!(PG`5*
zmuDw>0hhUxuJPjd{MGH7*SF`df6s4j&#tcCTs2lv@L!!@-`rl`Tpiz>z5MTdB@!%`
zII>kbKdq>eB-G7SkaT+c?)>^(Fi%;(&>!i`EY&%^I)8U|b$fDrdHj#_SLZk9_IeiH
z15;L7c2Ce-PS8-aF@zh4<Ss(Us1)NkK;(gP(6F*pl?)EO<xX)3{Q%Tle+;R+<b8c+
z*7hwrRwZP;Z^Y<tk24%x9Am&?no!RbErWAIo|G^yR28Zwmgn?}Z6GZ7jIvuNDK{>q
zAEV<yhZT#@`c4Sdw7iQ+nss{XNB-6<BS-!!XS^yPJ7sV^galMw-`FSo_b7dr;}phQ
zNd9nSyg&lEY^y3@0ZG65e{?>Qo`pw&t(+7lbYE!dj{+PZ4UjRoqUebxq->VA^4qG?
zqoc>z)QPhyaC~M<5iogBRzVG=8gwY5)wheHQ98cT82=fa%T`2nl}tWue~_ExtU8Vb
zu{x=c%3lwhAqVRN6mcAe9+d}Ig4|+}O$e$It9tMR$s-b;=#lHpe|<<<MuIsF$Uyup
zCqiv#!2K**!B;y(#GevZsLjE0l+_gl)kP(dZS%VGexSg`6cz{LgYjgvH!|ElEo6p3
z@RCLG5js3PJS<BKn`ne#I8%MuM9K>|BV$kseK{EKk0%}bQ<89}CoeB<&;IN3&DG7>
z7095o*9D1n^!2mJe`Huw>$|uAIJ<g%c2g7!Hd&Xec=G0z)TxUVcS-E*=DNS@I^jrN
z{xee7ce`VUFNYS%!*ll;Rr;FrElNjd?@(G=#yve|!R!p@D>E)aGz@_fG)Rd;5dR2C
zbZ%7?g?cT=;r7-iF}}@qA#OwF-U`ba?&nF%Mr2MNj?mWle~az(oxH3{f<2N7Sm2md
z;Kpj71o092kG=Fgc4Vxw`aT%U?IAC1H;HZWdZtqL)p&nHovcKrFJGMAUcWj!ySzPr
zeRFp8?)X)nVxCWUseEfytgw82!6j4cxx?bMGa{kFf<Q}6ZgZ>-$A^!nsON?Nf&{M4
z{_*C`&7i_=e=M#Wr);n2JOZKzLc<}hQbC3V*@Hb#Z)3aS+dNE8<jvrAD+u-nVjL&j
z$|~39`=3f2NP+0)6+v5_`>(wGvs~EgaDTk_<@oS%!&U~%d6?K%iVgQ{sE&}RXIl=B
z6IN3sYH68Yd<cKov-j^0vpT6-JH%khPQjpfOcn<df2!;h+q^C(<NfioN10s<iz;#=
z^-J`2M%h~Z928?@>Ox>XWs2SZ-Bauxj&U86F$n@kF`Z#2=E^C>!dQ*NC>La&mfKY!
zVUCA6C(0LVhKUhg?6$yX^e^HkqYQG2yk*l{K52_)d`c2|wez(LZ3)b?>V~>MIy^WW
zA3hsTe+~?oVM=EfpR^745f4H;{sz>c5wPnxV>meOkzv6<{~o*f)${S*B!{Y{t81xd
z(70VU+k@rt$je*DYM(xacQl!jC5_^d!GA4o(mla_AI(8(?Uduxtx?61Wn9dV&1P%Q
zmg7{;)!rlO&L=0*+nG8_Z_iJQHtOVI|KQ;3e;xR5PyRQ7|Ms8B|Mule*J5JW&nsnP
z_nNunh5URR(v&9Vj%mvp0SRV;V;vcg&zPbYWW%v5Wbt_2v*=FCp|ydgE+GkC=-}xt
zsha@yahfkir;AC8PFF|<7=p$wGk{cJTM9Vs8oOu@11)d#RfK}B8FKhoty)f2RGh7-
ze>h!{m#7Hkg4clUI@ILulI?)7{C+`W;!z%(-$!UT*&h~PXor&d>dWG*gL0{ZJS^Eb
zIAvZ?;<-HE@{$BD*nV<`HzeVLx4k$}kkt)Pc?~h4*-WIttxr(EE|aN8`63@`@FZmr
z+QDSj-_;oH4R>s>_l*W5Yq){bt;IILe{Ten^h!)pPO8tt<ozB@Y<d1KJ-4-cyC7aj
zB0i48wnqUQ&i_7pw)bV>{NKSrpa0>*Jiq?B`vqE3{|I)`X4E6`DkR_dVpyC7IYM9T
z{`T8Ilp35pgg9_v(*kxr)CDfm6*ExfM)Jacf`++6gmP1HlobJg&R8BRe=VSme`OXU
zDEVedqKLW#{adW+z(LOs;3xI3li7?upy4P3MgkXpOC;0%Bi+U<@w^ohyjz})!lB$A
z8V|lF5;~NRMH`|k98HOX6Ha8rWtI;@b{ekVlL3hkFi2EVHOkSJiitXXeJ#q;U=Ct&
zdptOwA)T5CfT%bDo$5y>gNw6(e?u;ld0{|aVOu}GI%ixqEOeF*ss5M_t1eSnpw+m0
zJcINf(1)XM+E1;4XF41b%J@o-m8_iNntR(B!7!phJVV1j^U<IAumDZA+lAPwe&>kL
zm|d}Ow38Fd$VMGPCrg14XqsgxI;`xIIpp%U@{U4!TG(Vj!@msC@OHS)f68LM&jNJ>
zRU%rAsVpTy;V>+yT2iY2`YTd9MpkAqM!)?wSP;)2^M#a2HC5EeK%H`XdP@cX<fq<P
zEhhz^vK>}x-3U;nD*s0RN?4qN6(eYcBCRENG+pI!(&-M%i?}efvIL6Re?x||x<V-$
zg*mO5IwsGoj?5{1oM|X@f4Xt<3nP#ng{~cgieeo{0S+*|dL%0T15sq2C%h2yNoI#l
zgCS6i=Pjfa)EbsVQCh}`h#dX)+pe{YY<cwCZ%5Y8%XA0|Qpp&eQGQ%LwmSB~pU(Qf
zI#PS<L~h%3APxHe{=t4x|9`f3u;1(dAL6N!GTF&#$u6=iaZ|w=e|MLAgF70yN9aG<
zbl{U1>j<}U>adZ5HF6@IC60&K#{1y4XwPzVcc^91g0Z{d5u8YqQTFA}BY9MHC^Hz8
zKg)U}nag^3gy1DyDo0%6?#Lq(BY3NQU0L!CfCs~7W&2uej?uqSKm(TqF?uHZgix97
zrYV+>@^FR&VLL#|e_6HkWW(lAXAY8@;TDgHd3Wr;(%5(H0l0NkFUl^S*X0~@26h&b
zEP9DEv`YSC15$*8Iq3o{b2kg}%-$PPqT)pw{>_g{u*#Eyvi-wK9l{WlV-rJ*OI;va
z*-3Rna}I*KFCy=n+nv&2moIYfMo#X}zZrjtCp~Z^ldY)he@<1Nc=eZBYJY908o9aZ
zl$aS8|2j~$BLYX%bjRNWFXV~F&svVJ`>Y}Vjrnb-0o2R?=lfqi-!IDl!{>*+{QnS-
zDcKFbb1L4|h0JoXSp<E4fq!@@SuHN|8VtmTU!^HyC`St%xL%gCCDSKB9e@hQt}8dS
z40Qx?CJ*Yue^~;T5gt5^5st+Qfne$^D-DY8Da3(RD>Hh3A=5?f2nh!{;i5&TnK-Dr
z+xav*dPs}OcWlzaUb7(Os+u*UGj!Q}Vjo+RwpuM4RM@_}d<%IZ^8HkAYx`NK*|OPO
z+8$lllFO$h1k=n-rL(yOZx!o}5UjdNGcwYi&Z|{ze^4mYTeJ0L=H!soa*mC5bq#OF
z<|AR#oZ9JK?O<(+TeBXFYFva3K&|?}Ws$U4Gxkhgx>i-5FWbP@L&~9(Pn=k^fvP1_
z(fw&ksOJ?uHC&G7ePmjk<?=Mv`76!J6|Ghew*kkzJxdifqc7@_Fe`6@L@6_zu3||U
zXUugQe+aE{$mexTDXx(1(cZefZtJFV`5se=SWW_2&TU~wCs(y_ZFQ0D<&ezfZ!BS)
zeznMv3OQ6)rG9v_nmLJ4mNOLv3(#%yA*<QO`)e7uYIMsiyiOQ2R_-)Z7Ixo;+1Eg^
z@b|VDrBQPkp=4onH8^DTI`fqb2nm+D41_(_e>Et|ZqO8t<{1-*Xv@0Bp!5c<$q3Pu
zNgAm}8!MTE(qdSQN}Egh46I5oqc!m~u~~~s9XnuDddv<K)CnUYM4M_I`(W03%uXz4
zlwF>jr#w>r+1LqHu45<6T94X^><ClZk^HHqw$;0Ks8I8<J0-)*x!Ec8s#T{{*)=+4
zf7a~SsR10^w`vbQosW4zL*h2Q%2qJfqDsJSM5!CKLmujDhIHv-s=8choG-1?wcATO
zF3p!V&MXy*X+7e%>@-j{+>}S<Kqs8MF64EzR4Sx?v;eUrY%GJZl`~-E@+n$t8zrg~
zURk!a?pRsAL9dq88ni}Rsa9|co(G#=e_1G5r*PL|-%W|Eui35DHPpu{5Z%o}3CK*C
znXwBaiDoqpxvJ~7@6ja*2<JHjaxZHz$X8w$g@|C6mT<_wtwEwty%~!vt7k2n62*#a
zrkM4!qLx`mSM_TJwW_TOb#Z~VsM+LHD}ZQpdDfTj*jg(WXGNXPu1y=}U0s@Oe_?dQ
zrH%e#snS+)u?r}f@W2#MDg{E_a!aeNyWq2Id%B#Ff3Lb_quTo1E|;q><9GQKesvr#
z4`5wH3i<p}F<VIUSB*#!z`BT(lK|@Smh^zt=vct4FAlo6Qc9K9ZMNBoVl}b5HPXg?
zVisMuom>{`RKG2!rY@w7wrIR&f1R;W*zh6B4Am*~v8I4-f^4Z|v@pp*H@&>AAm`n}
z8t8EU@Xx~xaAgwYa!%W(CQG2kc?emft>(`H&q(-d0?XwA?v7;z)RG_z%SoKmw8TxV
z=5s)gp;k35bszfz{OW-(rX%hMIA6WG2f1|4*?H)u)}WfwKI?|3<)}+=e~p9Ph8QKN
z#~{F3NF}1{P6`tK<57TwS3mJKCS7vV*^G|7mn~;>6y0A&$@UvmwUrv&bw=H$O{%J*
z?OSN!c(4`k<b5ci*>NAMx%wLIud|m`2dDeKOO8f5?PpnQZiGOKJ*`T=^cu~z+Se+U
zZ*I|&AE_3NT=_0ufNnsVe@xSAXpO#s)>YTXp_Rv=xq4^kK||NN`VrOuw?2lgc1LP!
zH#-^%`LFD9&L~urb55m^X;yM-txIDt%u220WPPQ2eqz>bkdu`~+qcj{PTGohl9MGg
zyUEEG)z@f$4LMm0r?cG1(?}ONX|K5v0?l%=SbC%8+Q`XL`KA^Nf5{Ik6y&T>lY(rN
zY_A~KR%%crjJiz<a#hjxEwoXPEycSj$VD_eD#*>%*Jyto1-TARcZD%WBb^jvYt4-i
zXrUk%N^jI$D+Re&{*e@91MK<=awi~-idH4GW(B!z)%9^`ryw_0@2()%cdfI6+#THd
z7`9T7Yil<v$kvp`f7R}wT+tRzp?vvHuA!!?&4zRyLJK!hO@*$lwR9QTD|L1pSrG5;
zK57MIZCuuLB{e`>%fV8ltgddQs``(BOgk4-xy~ar-PYY?sr3l0JNdo$O0&DNW(^MV
z?_84IiXcO$g0tmP@LDSvB^r(^WOZ7z!@4T<1D(}uV1E?_f7?QD!S2e1JF&R}g5B6#
zW980muffi0pmbh9CPj2%U$%N1H2wh;{;aV!460DNskPkM0UJli!vE_u9bKyRg08Mm
zKNz}R!(z4;YX`Z-LM|5Vw2X78bz8&@RXeu3#saQ{(V3{T`R}rL%eB^SxOw5)559D4
zCcEV{9cSa-e^cAsmMY{LDqf0O5iDzzYFN3sqV2=u>uWWHLz$JELgg#Vc4(tb*u1TL
zx8V5_rX54*Thw0%gLT5`YXNl+f6Eg~r$9n`)y+_75mZ<#zFC8<0t`zPHfvKF1(4jc
zU{fe3NKiV^-ca3s-pE!fcmAlzz|<X|6^zT7`%Mf>e-vrYsO+U122xaNVoaqnEnv1`
zL}s~e3@F8@Bjc&5*QLdE7>yM`cfyyG+=;Q|tE|^#3r3=gt=B*+#*r3WuMK@gtuB*Y
zSzDx$V#(6FHg96AUf;S@i*=qB?X=!&YBi5XTDisgx0mhEMoWHBD&Lte<T35eADZf~
zgTb2of1(=DTJ&!aOIQA3sk#{o?f6Nq_+|~Z<uCaPo3+{2&uOc)S<Crropp`EWzS8R
z6o52gq^?S~bHn+}ZD4|;L~Gt>FI+!BqD}*+D-~&m*n+Q_#X7OG6rFBdtfpFr_SWE8
z*7}_ZS<Y=24wbL5R)fv_NS9g*d>ihQmTPJue}C(?eZ6I68kU_=u=VPzty4c3M%9M3
zSXHt${1z+IQo7RuE#la1oi^9*-ufD=whl~ZV$YFAmo;pyxJmQPE4om4lg8St?_%*y
z+H0#>l&fsgYVo3aU88h?eLW^6FikkwFTl4mzH-?H2570!ni00DTR*%O5Dkp6sYana
ze;ePkfY>}WUlm^6m|}Y<>y7K0OtKBQ&P&TmK3$k*Er7>Br<sXXRC<iY+c4FtYEA7I
zbu^df*~DC5kZLt%ilwda+8Z<0!VOBL%NvcEVv!b%LDZ?yglq_Ov`wn3we0Y^wu!BN
z=Y*Sb<{M1~x0uwet*PMhcBX<Z*M`i~e?Qc9>ff{I&SSWaz>6gtsJ&ENi4grlS1Y`(
zZ?Xc0tw+TR;;Rrmt=TKC8HT!Q_48>1(3&l@tK1!d2DZ^yrF)AlEU~(3olLSy^t<t?
z4q!IGXAM5q3SMW%W2dz)sz^PAM?t8W@mAG(l;+zo=E{2Y807DN>3si>P=eGAf9Fx+
z5#HhopoaVZo*(QT6z=~y+~0rR-~aO=o}y+vbH~LQMuiIiMVY&=_=wZFynl2Ld*K4>
z8-rdmm%NbGuM&?~?hKOYO-I4Z9TnS3FS~)iq<qy^s10vU{|nyBo8`*a+Qsg}I2EnK
zI7-rzaGR?_Dt9@XYWoN|VKU~#e@P-5uhQ?T;@LwO5ze#gd$K3j<gY9|Lg)M@O2}_z
z%wrZ~58aU!&vk-4#3XQudzCW0Tz{a}t*CW`hW~#P%W?kmd+ut>j$WU=8(qJ?teqxK
zmSY}-U8brD`#Ri<&E>k4b)?*nv+Krg5dI;1VYJq!6W3?&5MS|__{hN_e|Bh032&x4
zPL{WrQ<op1r+I=CIKY>uxx&O=k_1k)3S;8l@)*bD)~NS>MyG0M&K@X_d47IhzdJuY
zKStl~O(s?IJ2b9Cn}^95$`+=%Txy1W>a9e%1q(wGwO^K@LsisQ>qWUFfeU-9KmoxH
zS_&?Hgnk(AO<Xek>9<^Ie+k@HdjH_yYhBtlMCkJ5ymB4b#%UZnl>BiAYp-^&zM8!J
z2m1CO7YCh23@ZF#M{H6#VqbMwfnWWBSK$7$x*-xP@T|)?{jpcz{(jY9ot&UEDG1t(
zmg9_tXq<Ybp@N<q2dg9W1l^qe*RBwze?i~EAfcC+ZwKj!R18&af3SoeF@}P~&2_R#
zzqC%5ZA{ek6~@q_Y?XAkPoNXk%BNx1_ILiS^K`fWVKP<D$X3_?HroHf*e~4wd+_X_
zxBoxHqwIeixLI6Y{Usy~#at44Y;`If>L*tv=Ye_0aNchK3|s=TI1QAGK64Osx?sc-
zXk5B1q{X!#P;T?<e^=JKd_{h`S%ub)l;$BVZKi>qhsn^oDOmvpwmfqgYt1*-sLmFE
zN)F1p?b6zNOj<=ZH{N3MtTh(uHUbqJrvl@u+tkI^X{vl#%4S!kv~SsRP0FU1q_l6`
zc0tPK*Q40l&#p%4crnVF*P>MQS6?xqqNXlznB8@1+)@Eef0s{}wSm%N*t7d4jKgWh
zO%=7RTPwFBwA=*~Hq?u^Rn+3q0v<wv$Iq(gy9gpHZLm>cD75Zm;qr=HI9=gen?BZo
zYk^Jq?h0edEVp3P;!+E&)mqQ(`fYgkMT-X0UA;AKy=VbG+qGNkzKcF+s1F+YjDv<M
z_o(~l{XL!SfB*EN{C2kgpPKFe!!MtGS+M^P4)?z7?f(z)n6^0%L%zGz_V_6n@;(V-
zi#2W%#~|-x1&$FoUg8q4H`8)sS!#&JWyKtc#>aQbRA>}2fw%%;{jz`r@lhU*bkXLW
ziX$mlN9q!jk-WZy-_bDj>l%&&k2;tip*>+!X;XHPe|j=s<s8Oc@q!wbFM0*3hKvzK
z7AJMLK{Rr3u7hwD$~Nz9i-A@kgMh_2&ijK!w+fOX?U+%))-^qSC_7tv>^Lk5;@38c
zw8*Zsr79_Hk<$jG2nTc01z5H@A=HcP{javXt#yf9)3(BhvWUj36AyF#I+sJF^eLy*
zw1H5<f5KrwjA=k3V~gIp`i-%JR_%m4OFR$C49&r)SH{YtTug#1(DZ#Q7}gJY0{$tZ
zZlR<YlQJ541iK^}!P;*abC1pEG?<TFvIJ9y<R^GE`UQt0_-Kw}{asTf;4$^dS>Q02
z26G#H@qI*8fo}w~&Y()u+l-YbdSye$WAhPwf2>EPRKJ<>rN&xXK;IwVoP2xx`uO7P
z`ttbX%-9}Mdq=}zsm`0rv#aBqH&@lwUPR2#?^Vqx@!TsiEAC*y`%4@zj#ADImM#ym
zvHzLwMV?-rzdO6Sy*Pe-{POJT_Wa`b<=N1Jbg*<H!Js9J-E};cxT65abV+vazT%qK
ze`-JDax#8C-p>FnnV0zFLh!)Co}I*F!FW7kd=wFnU{3OTcA}Q-(Qp?ElGxeJ3J-Io
zBZA#GfwwvW*GKv(?-ev^EaEtPN#gu4hS1vXf?zLR{F46!iBZ0qe6?r1rU8v9_D+e1
zSLr=ydxu7ekVKTZ>9_sKz(kmKMorXOf31sI4Ptu}gWm6HyeO}kQUEl{1wk9IO&Mwk
z%DqYLvJ(BU5{XaZh&nvi>6G(d>fY-PNRs2_6<SSeklsd&uVuuCyEdw;9;Nbjgm`jW
z5>{QK_07TdX7Ow$rrZ!a`c3=hS~nImPy7NsC~ePpxmJ^v`hREpFN8qzTa}Wmf0Yr~
zVE;`H4@>*Mhm%Qf|9yzZ*#F&1os^c`b52BXOt#Thz+$vT{4idjy7EFqZf_TNe^cY~
zM0@5fwq@(wd8q`Jb*>~28Nb%A)egdDwkhD&lvvQ{v{8S*;MGFtW6yT^>AwD%t3z``
zc~xj54`^8b`+Ji~@%+cLgZ+N}e}9O_w*Et&#*1yEEiXn}G>Fmo1c!J^JqRNof0s;&
zTGrzW8n9>^?H`ubyQGla<=&LUX`sg?XhuLm(wb}VFO4F?g^m(K*x3hnHCY@P`N}Tg
zPDDevAsP)cWRXh(N;txfLpVn<L)h~`9nvv%9L7B&|4L|-hUSX}CJIjpe~OYoDhU|9
zJwM$6t#-r$Z-pYpVl<;3Q33t}&h^<V8YB;(y^)6)#S0uG91)~-7SCf27Kp_R#S4=0
z&vE7*6NT=H`>j&i_!0U+7}5gk^UISXdGW7$@tVZ<EV|3TygWb6UI4Vqh%Tu|=H!e!
z*u!$1bO~))Trn2ENc)r8e;EoLlk^luYA^QKwS81W>Yhd{%zYjRjrF_pSFhm5#dojY
zoWif`vzxc)>Ccz&bH-mrED7bLgZC#rkmTcsBlP_6@IWj5J`JQlQJ!2nLKg{-uae-H
z!&#=_n7`#ZlZY$;ACH3-_#k28s=g*+=n<a;G4=o<zBxvQ8b3nme=a%vrPX!#gM&{C
ze!A>FxW|!ue0kpQ)ckRt&hlR@Siyp3{FXb8Fk1q?ptHC}4QP`8&-M=s^8fksXZ`ul
z5AqazfMSwoEb_B?EsFH?j8``Ea0XNfcP-gZq!2n`0goe0gP7-}{KuE#H8T8@6yXTn
zEGS3UCntz<<g<vRfBm3KA|M4&L&wpk9;UR2s49@4v4D_p;-cv)yYZhz2q*D^1cF@%
z6cSD%+5MDvWPb%NAE(+}HlQQTJ_aD!g_?0nqjw;VR89@08l>M1wIh93&^*%jhVqfU
z1J9TF)~b+z!jb>%o@hT<uDV4XsZmA@Eh2`{-AoS8l{6oze`A_Qx$zz7y_zF58Puvt
z)!L5Ib+o3F>N%;FlT%F!_+1GFW1y51wVrL=uq!CCRI0}Su^geSuWAnu%RRiKUw=ja
zVYT3oa+^)5;$o^TdF5n;z&mkDqrnJ;f^G4b1hJ&C6Ax2gypPyF30M@VlJj{gHQnVu
z^GJu-k3Y4DfB%>qJS)im{pWkV{r^E8Q?y4@?2H8uViElX*y8x^E1nbYCtkv15?wKC
zVuz0#6{1o`j1UfK#)mYc$muJC!rlrnga>&%eo3OKdO0U?8C>Nkm4S-2!qZ<<8n`r=
z%NLFu$gG6%!YF7U^Yn|SWn^IAv)C2pa%H^%i<N(nf4~hH=wVPM<%^P|I)X2%f=i-H
z$&vGM$PH^S2V1dk`7U5?aRgf<ohmYxDG>jAl*=E|5e+}@aqLJtH3?n)GK80<HgO1@
zD75OPF;21vE+#$;xbCD56-qlD<Cx46PrYdBr@c*~+eOUtNEDGJg#(iXSaT9TmA^!<
z)lcZGf29#$W=yBSeC)7@Fg|veUv5>+mnzLQ&HE%?kc7+JE1M0xOFR;jGJ;wBP#G&R
zY|Z1yodt0dPjs<rrD<Ks@i6C&UCHoQohmnJvvO>sDvK$7-7&14=59&nsD1sK9`+Jj
zN|fhJ)&gZob+p23`glznM4(62Ac1s%t7xGWe=Am;P(^vSn@c;75e>4)r9nNLF0eV!
zK|7O>l?~Od3+9q)$&myx1-9IRob4FgH(~%mRSlB?Wq2GB>~As?RU%6K*d<G0fwEwo
zAy<8CCj_j5r!2JAoNNpKr;uj{$heyN5*{;OzjO%%7PKb(O0rX!R>gQZ9>GBpo?M+u
ze^o0T$<Naa`fQ)I>_4TTwlxEr;y=E8R<!?~?H%^<A0Ol?nRWk=b315l82;YOK%Pwh
zNt_rgLG6<^!^Nx6%tw>hol#97g)kW@&+y2l++j-+t=a+?OG^cxmaXjythLCgnWS1i
z-g*7!4Zl__plSW@KQFES=g<57pAYg_f1|Ss)ct!~;U9a<{zy;f^{)>8+&Yo_Nb>)1
z@_er({||ck|3RKA`#?>zvJXb1kv)#H6Q@WIjX9A!S}=Au;@Gw|yC9xF=8IiX<Oqck
z(G^QyN785+h3e>#1e!PwAue%ureww<BAWtxNE(?1825zE7lO-7hNX@^s!P1wfB#5I
z_TSS8q=}ac=Bx}esxWCSM-}P~Tf?+fg|%TV|CH9Q{H-ir`G>Z8<zHd$FJ%XdIeg!0
zZFwq{P4qjP%}f~<15}~Ac37+Jg04F&vehf2g?d|Dvr|D7+4}rXHtjH(t;5Povph5>
zVOXB$p=FYWM`*Y=w0zFd!LThMe|%_5OT~=VA8l?NZ}f4`KX*A;T)8Sf;lsw|W4;-z
z@<gExPWo<s);Bxtn>)$2JEg%cU*z76oZO#(%bh+G^x?#wpcQY0Ml-a_!Z@$-X4_V`
zYC}Trh@`6TUpIhhrqSdDXqGz}3dwxBv^jG}IHY0<ZSCYpAtI1FPEXF8f8YhCUJ~_A
z;Xm%v(*7F@=|txNi%9o2n*2Y9rTnjZd;5L-&j)#)pi3ObBnlv4Rn9QFUyuMz6Y4<{
zfe<@)cux3u@I=O#@+5@g#E375=b^dBrZRI14dy#2A|9Mzha<kmdmOlfCnz9u&{oh^
z7?Bx$Ag&CL{r_!`(VM_qe<2n?O@R^$NrXHaknv!AdVPBxvxp3ypcCf%EI{v0u8~V4
zJ{ZqwybJ$I^atbVFVQait6wbUyW$`HCtn7;8K5b4?vhZ3;tswT^ZRh{#dwPE249S0
zKOB7V{|=s@cQ~Rf;pqJIj1R^tdT=nNF2TF9T*Ur47%#cQT(bKKe=*6H>t9HZHX_m5
zM(z4PICwUBUR?jrzx=ZI|9p_AXgt{re8blPCcVBi<}@|wa|Tw)GRh*JMspH?at_Re
zK=O+;%inS`-a8miQWLE}V`C$bNbBr#X&dH3i~^h{D99O~mpbMJfk)xH^0!yo(GYq`
zguN05(p;dyJn?XpfBy;xwHy|b6l9iAT6<Gm7sd*Emk|wO5}hzF@q_dP*FQN6WI~QH
zhf8MRKa#Ve<n6OMCjdlP^Ei@jhXRZ=Pl>h<Z>TTSJ3q`pJf4#(aI(Nso+0DTg7~RT
z$3hYuU!K1^xX!&sD0hw`H@Jv$IDa5(z;OccXJLrZ@#T4zf3qSI{70YL(~m)|IbAr{
z^izSIN)rj5Cn8%{Q$k$TA;e}V7BVd&VMI6y;>@X%J#2<>fEc(^#^668k&u2Y@mxXO
zOA^H>A`Y7e^p_Mi*M~H~aUK_70tp1zlgVH}JR%>jP((y4C<zRBOKAw83n83oFk?rM
z#)Kd3?#^kfe^;q6jgo-It6f-dbeaG=hulQFoX$r$auzfuPMkz!7i<E7dH^eR?7L4=
zAKud(t|h`ywg(N|x)~4)OiVgfRb?--ffldC=v<v$-=ywCn2h4+!?<S^c{T-Nz-TZd
zk(|U?#C(9MgIyJgQ4$n~pC?nF#vD%W5FU%U8lw|ne_d!wlq=C4qw@frV4rv=n3MND
z0b->2NDOSdDJZ&H%))Zij1Q)t!!lpF#d;kQC%0}~!f7NZTd*Xt9?DErKlW8C9>-C)
z@)ti8Q8`iNQ0ln>>`S$(n?j|uUzM#reG^Kye1wDmfW;oo69@`^YOPLV;#WYfoT_30
z97T9#fBCLX5?wHtw7^|mvw%)ckk4F#IEi6h3GOP!4##xr5%lu%Ek_K_e^p=|FxUQx
z1c`4)WQ2w+7*>9o&8oh+WEnH&6_>eu8ivn$$(w$1L!+~H)4+xER2<Qn5$_E&e1bHg
zm6%SU!5UnrjClkXMFuLSGOI+?LVqM!(uf6sf9DcMRG_d9Efxl3`3^@08x=Cm))G<$
zDu4>ng)mCb#*Hh=)h|x@fQnK1wa@`bR|xW&Sn;kx1hrX}C{4@O79H@;y+?fXslF<N
zq>r|i3zcL*u|O3Uk{;e>+BH`YB=W9ANtyIV=;;r5^vm(+e<q`^e;obv7durq3{TOG
zf831dIbatio|nbGuitFJVc)LZ?DUKU@_UphMo#xNCN!(P&WKqP*i|%b@If#vNme`4
z(u9`mQPA9GM()x4L$I?zA#?4t)y$V<1J#VcwB(w3oG^%2Z%Qd8&1a;>QP>1?Qq?W9
zWCJHN*4zKH_2XauJ=*^J*47V`(bqrye`V{(G5q*q`|sQT)_?qEdwXl^hwm<4-dvvj
zM7RI_Ly-7)@~?ky{XousY6)a}`|tlzgVe()+n5{CARe)3BzsawELnW=gz`!ffP6Vs
z8mf;UsGs-<LuO0CmxTh9#MM9z^3-`|tQvkHQvh?g(C-}*#_(fC=ZQ?sw<{BMe~wbH
zqik<&*G`P64X;Ki{r5Ead!@-M&7lfZNrMfjQmX)CbUs6A3zQ?~(>NxsOv;e$;O^8w
zrLndxz%QZJ5S_^!6O<$J5PH<1v9|(ai_R!<cMyvgB)X@(4&j&yRg(HT3xF7sk+dF_
z?_!)`??@Y)JUFC6t(K2O@b|eOe;W!cZSE=k)Qj5~*NOOw6;^|e<I*N$`}7>?K_eV3
z*gX(#s@|hhNOXwKgP24!>=3)H1nEL(VEXhrn(K->t42+JO!J1>idYQe%=)`u5JAd<
zSQAd5+n8H2q7)yWI13z5?!#gWBetZlEB5m8t&tWcqbs}C-)t(@+O^#}e_u9zb?0HS
zaR44JF0;t^_^xVggWEv%5!?tH_p^pjvy;~i^m?ibrv52MZsX-vzT}LamlZD)ZG-p7
zc7H*xKnIE2C?Kme;bY@c1PT^=67V=mz=i0dJF=1twu*Rhh<MB*y~~PCM=OrOe>w%X
z5t^<Lc~CCtYWEB<dw{6&e;&mVB};;EG^KHbqg9q49o;O*3X&HIe*dq8L@Pm-6<`H4
z<xrn04@9&SXfH^BeCE>GN~}6bJA7PcHdgZGVvt#`{SPsl7dR9ufbxgmk(D%Pq<de^
zh+}0B;xX1Ni{?0>zsNZdD}2r(@#hw7LCLX%eAwIRfK>p!z$>{$f1h52!UcvZ@d2!)
zZ1;{U$TF+MdUH^|r(!L;l6f8t=5N7E-_5o>DX|F!O!@r5|Lb`b<0aY2HHqQm^1245
zk00I!c!{YeRz$TH-qP}~9BgaW@HT@aI%rhh)b)6?AY#1aCe2L>7dToRV`rffn#nJu
ziuHiif`t5uHT#O4e}&St<A{bHLI3NHtajv<8kx<A6aNh*yv{6<wxbMENfVi&|D}KZ
zZ4>vV#GtiD@eGO^VjKDe-Ib7}ypEkkoof-HGsw>E6C7~0xP>G%0r4^VUNBZe(N`95
zEnvl{1W$j>u4PsZvV$%oG9yv;2H3=FcJ@G=B;MRDdq*lfe^-_v{Enm>&9c8jLISP8
ztBmw;7<#mZ(f~U)t{qFkz`-;Vu<vBckbA7o4nrA{`3Z;3#<K^?WBymUJRIgvRl*9@
zte*5*paLsBJ%I~<0(zSczDBn747}03GdCIpE>F1%4Pyac&=AF}e()DW+m7$BM{`LA
zBRyu&*Ry{mf7lyqmA`39b#VniOxeE@y2Ks{V13<F&vkGlZEML$Y9Vr_vNQsR6Uwz_
zV;QA@OvNa~QB0l0!*$*iqy_qF<GIVoUEf5~b`o!jHO<)+Gb1lJL2On(+SDh-g|~IT
zpw1$teKym)EoB%Dt4BK|)RsRb9)ual*gkhVlOh=xf2e1d|45Tu?x@_CLSf}3-a!gi
zwG7p?reJHK&R9g2Btly*19*_+WP6PMheQm>Rz^ZDiC(t%v{LJk&r}FG0;xAKM-#LK
zAQAO_;!+$FZ?!G7c!8eGu~^sb8H;=zgM07!vqnN|assZibCzS%GB%_@DoVUJ@@U0@
zQ@%>Me_Gu;85c2(i#9AeC9;1CIu&LU1bwL$x8cg%aC1)Tsn@X}#(CwYj&d1XnVPb-
zXx$EfbL|m&6P)TCJXJmE?zeKCxdo}bBjDua#b+2G@~9CIuiu@Yo*&Dh{Fd>U1alfx
zn&=SAMM4Z*P)Iu=JY^&6dcFDpi9SGLU3@-fe}Ke7C6;bOzB&oDNm-CWJQOcMc?<|i
zGloxD5>%OCLMMgADi<o+I@Nss@bK_(+r9z}QGc*s)7NSt-!>e?WG8(*NJG1yL_A1&
zM*Dz}^3!j=_W>b&KuD?NXHAoRKu8}DqM!BwA!T{{*byPZvOaqds%PUl41t9%`q|jm
zf0AB0?kU2tNPU&EB@#hSYX!nE*?OGURZ;2<#eBq%zBmOc$-saa^$3v0NOfZD@MVog
zh2-fY=&m$d9Oij&qY9d?a%8M~*08$P-{pL79+3vj<3+@h`6B0c?2n6B+U&g{e{gTe
zI{txFu=I|ChIT(WM?qm~dyhf+>8-Qge`C;l3`!+GYntpm2EE5XKPt%fLSEO^HF(pk
z`%$dXjFr5qiMd8=Fr8L>A~!O}1zdpETnIQVj1&!cj02~RPP5_bWZc$r=34u;)E%o0
zTkHr|R&DL_ShFwH1}uV&(SSuwlb-9)w^<G3EEwaO?}2;a|Nig)!&Truf?#yde@pMo
zt9rnr5#wl1VpX-;wrbNSNY%5%Uds+WJy+$^@G<Ep$s&-r6X8(s-Uu>QRXw)J0X`1#
zX_~>J%k&z*|NFoH4`k!Rb%A8E@w8L=uIDkjmTCQni;_SnuV}S{?st&8gBCl;uM-S>
z2l*8a2b34ulYeVjyS>Wf?)JU$f7>;FFO1*5@td3P`S#zptHpCG(;29Q2377#RGi|g
ztcKM4fU890KB6%($W=~#-N+GXhICtqwN_sV*{2Fy>G#w4x~l;D)KN%7@Owir=R);N
zhDJ__s3XIufthkFq&G)0H#MTcoN$3aeemUZc8=@k|0Rd(R?Ww)lwAC8e?N~nfeYe<
z@{>_}E!>>cv#J2u?U$(vkiFWKIlBtFK>n{Mc66)PK|3dxcrbLgzKjv%7m?7zwQ>uU
zq@o<qn4yqFGZy)1iaBuw(MDuW9?~-r_0uPw^sFUEPZcIl$0!Ly5;>U5(*VLWQh!0i
z^^=D(f0i-d=x^Vk{qe!`e<qBo0~)hu)N;&5=&EJ8J3_+7Lf^G1<VLKy&}o}O3(OZj
zt3T5r%6*IZ;-W=4pmQHLHw@zZqD4V~*s8+-vQ@7EW~=D{n62g{rQc?ltxKjWq_O1N
z)+I%^$-k0X1puX_c-E?<n4Wep#q_j++0xiY$Y*ZiB@N87z}YTje;qhbhVN3ByI2eQ
zw>0G%S&)==D*0kV>9+CosC7&|0wy>o51o2{r2^H-Ll_Yb`7iMt3(H1nqp<z(5Jwnp
z2Cj#!_BaG*m$CTnILGa`#$Qy#92Ps<Vy+cK7UqA)9;fvby7>-cIf^X=4!{u|QzB7V
zS(0F)@~EoA3C-g1e+tB@gTpw9h|E|kk1(YNK=Xt8AA65Bq$*gu{`3|q4(PS6g<wF0
z#S-5W0w;lm#Tmd6ly%mS)>xpQe|_3CcJ2EKxHMUvmag8U%s?yc@))!}lLHAw$phta
z6AEcxIUIba;CG1yO~RQzW8mO8s?3w2({41c!*nK9o>*9ne<`8ofoW=O1Zq&TPRFYj
z!43!#nUq$rf33AO%~+#hBA?tGz_h_;EhLLw!eKu{>w{5k1c_8IgS5Eu3bDXjX}2ai
zzCJlWM;;M&DBnRr;!nko7Em!q_r&wW|4HDIh&wE5v+6UOS8ZF~{*>)s-v0DOoj+MV
zt*O6hAI~TUe?Acy@J`DFYQW*hRD?u?CtjST^`#sMJ2EC!PL%9{cmU09C1H()9SBk;
za0QjG<iY%0na5$ZkHd0Wc=eiR<-G)r74}{qJ$ek10bP2@oLVp|q~OVleun3?)`}x5
zx$4DI)6*;SFv$U}z<Eir&fX+Lyw-K#*Ct~sbwR5yf3nY6SeeQPl?9yD2b5KHRuAST
zKECzi<4o^d4yy*Fkh&d9@JPPELNKfG(fU*<;Rqr7^2O=;z55vPaWE1UD68@5<Kz1H
zxIR7(tq~uWV>5kxTtmB`RD7IeYWw)O^3%s6_3?3id|avIXHAoRd|V$Nr=RZ55sTn`
zbms`%f9Bid7J)*aqeFy5@yYs!>qK=rQ)X!?rm+HLJ^6af6=lAkLw3JQI~{snHKDzM
z-W%w>fxd=;F8N7snK!iiu`KgDp}Tkx2tw8oIp0Bj8GS+u!Y0HK_DM{lst~rK+a74;
z_bG8a>X3lbV7|^Ez0#E{PZ*%(%geWw4gghqf8CLBw3og*iFm6aLMZU~S*H;E*RQUv
z5?J**8<=ZI!&zrB$k=Nbvvfo@307~M@FfWd=a&(icIS7g{*=NI^E6GbowTor=Bb=v
z>Ln4mSww^{nAdh1E|lTtuz(XMfn2Hz6i-*7M6fp3FeEPsICV)RrUFwjv3M4f2rcju
zf3|NDN0?GZ_!F-Oc`#0~OSi}Os^_&iLz{S%p?ie(8VID`p8!{OWABuBc-5E}IKTK`
zL)-*hVW83i%VARSCyF>0m?IwJs6M_-g^A}WN$%E54C6I?MfWVa^B8vdZph?6BahCA
zvvNH0B*kzf+p4xs+s#Lt!IpWFyAAWVf9xKySxf@7MFTz3+h(YCO4xNOm)?|(8QPm@
zFu!BEghj^rV{iclY7;h~K+F;^&k7`aXv+uo#^^#Ny53VvUXeT8q#+hb5|-zr7UJ(?
zwqoiNmc)<5K(e?ZHBr>B&HK!fI5!1oPXV;jx4}hfVE*p-%cIOxgF@g}UC50}f9p)$
zQ)bxHm3m*T*CD;|ETC~}RIjNyRC*jr=x^qAK%Ea=J)ZXgwe~=u4kwJ7JQ1Z1ZQ_kU
zUBVd~y%HtVHu6k#z^%zcfttJ&=&?cvYdsdoZjl?Lm{;p_HxSlfUfZ#5&JNUW&|5h@
zD!SX`_~?p4tplVEhdL(+YQtCBf8F)bNHI;}3Z*_=r4>xt$rDXO?1Fqk99Lgn)1r5^
zn>{78-^tRO(|e5PTdL{p_vV6$TpzcPzArD|p3;ao@zv?Y@pVX?^wg|UniSIqDI6@R
zOYtZqB=RfW57~CX+Ol`!v;}Fekmy#^_Je%%rp3$4x9P^k1`ZRrx%6Acf8z@_Yu%Z*
zs>+)eXQ$?MUGi#C`C4uUa^yk>y}I=Qc_%zip1y^%YK(*3CP$+%Oz+P-6cOyw$8Zm&
zfO`Ls{ptNfy?+Rv-apiOsCxfU?;q;@L&ozV{6j*&-ymp5RA19gv~jS`V{H(&7@^Kl
z;AZ?lAO2l_`cT_G{JRhTe=e2$tZA|j|L()T^`kW7P5l%KOz)+zKfRZt_fo*qdnsBE
zRqv(fy%fEd!gxM}mm&%05q3%I(0HW?;3Q@vRd-YAFJQfupz6p-C2XBxuSVa?Cu+?A
z%LG|6!879bG<FtJKTTrh<G41_u<quJU`UQc1@Qt~1zd!ACN)vSf1qI{!{!02OHbBj
zf6a}sEmx4Wv!|l0+TPSke%XB#FqcTMH63=72oe<QvC$(?S*2a%j0<<&pZQ_DI;9PH
z^;%AMc@%PO<hM*!5^=FgX;5Q3$%iaSpmG>S1ZGsMc$I>V=mxet=3o!GIL2VBGyuJ)
zo+o61910iRFNoZ>e}s9VTuu#ft2fP2OVUB<HuL)#Xt^n!AK;9*#2C@kanUd+irkur
ztV_>lEOOpc$6pB0`F=xdojcyPFQHH$J>oRxqRdO$%dA>zG7BE4^N_1gwc3k#X4De`
z8i=16#F}2dt}ZcDlq<%k0irL2u}fl1Wv2H$MtlcxLfUEje{4yjB_;PDmT52_-P3q6
zlCqBP%AAtBPvHMi3co%@Xxl7yEwvwHQrf{}(tZMO%odCpgk16@n8z|DFRhK3LoxtT
z>sm2G_n5}o^qSM9TzGQwcF->*V#p`BF~>L!X2M3RZ#q?9>U-VJlh?uz>Enk>9AVER
zo|5{tYN?u(e`?*T5W`ynZZLrbyGK3_R<Jbc2G7BPSS*Uyxngoc1r|-@(4&A!C;tv;
z7EKVfNU?!z)-0>1rp>hY_~C7kCWx%@|JM6++j?_b`f}5$-9P+uOS9x6*Ac<NO|N~B
z8ZFI}5lbt^RohfLJZVSrOFjKYTT=Sfv6@9XxnmWtf2+XY0O2WTUJ?_H;}&^1LWkR^
zmI-4NlE@)JjOQ};m&I5S8p1LqE?B1Gn^u0e>XT{jP5!(+M#lwgC`S(VoWz6dy^s;u
zXnDFq5laHMzWc&F{>MsB>JGwaMjy26R$#b)_~-N@mTKO<rYAjQE~u34V<<1P8jaex
zs|wZ`f4VbM?*uV`J;Mv%>*^m|R}YyhuZe>9kE5!86opk$-(xGRe=yyM1u)|=iF_Ks
z+HFdHovBg3Pen=e^974em>+gxZQmE`6&ReEOC2}xHNpM_9&me7fd0v*u=yzAR*Tqn
z-0S_CO!b*~krLU!fizLgSY&ihEXkr3)By3bf3cBzF7RQvK$BaTlh<$*Li&48u1;I{
zhToPd<;4yt#%8Le3iJ!1UR)iubcM#4r3X=;MJu8+HNC7BSqUd^LK1vuBt2;p4ffVj
zt=v@>k^s(H$eb!wHk7KKU2!Nh*>!t!84<x}XuD)sZ*vuzb7EC=LCu6zx59{wQi!^9
ze;a1U>YlRBj1pWcR~<r28pR3rZdk}XHgB^xVgw1kla-OKjZQJ~S<p&67P7$T<1m{A
zb9O)LdtzjyPY;B_tre<ovFcl$8DZ%)no*DFgH{@bI~HX&IPqA^&uTu-ZIa1;e(XAC
zk)S8@_?VD7FkvrGud~F2eCzBXBoT#xe<QDKA^ZVT6mFP-FFU8DN4fDtTkF$oeeS(J
z_g<fS@BG-Z$og!2?b`j6^5i$n@@8iyI%{GL*gSR~;rYz65R2mcg$(34rQ8wL@#?e5
zBmAgoa)sPgBZ<<XtiW66j!tE|o$2<Hx|h_Sx1@gg;<T5>P3?XX(m0#R{*+?*f9X$z
z^`{j3Q;MaMpEXVPrxg2Biu!49XJ&Htv2Dpa9OH|sB%e7PzROB}j<?gaO>!ZI31#C{
zc?E2XBO_5vXV{5(ZE#Y$sl3a=cvtN>%)?})-Nm~poZTo1V(Jse!<^TI_~p-+7+C0-
zL7B6RMJsd<!AOFLGIVPe>lPW$f5&R85bdJ5Sn86n`A&WVWe1Vi8E?xtCl5QdJV1qP
z%h0D8^$3T=`b~-Q>kTP6Rwr_-+NMOzRg&j%JVm@PND3-yngU>!>6QJ}9qE>I)<iG2
z!_)S@B>7<37ZX~YG;f)4Hl?3Vxm{E81WFNo$rB^OoHGZ`**1VR0$X#lf7Fy5wr&5Q
zY-$ZQmo0`|rd9PSloq1AAR=Y}y9H1gxbx=ZJRPIvd-FSF=M_&9d7ZoW_Ue`HSBS+l
zuo9lFI=2<#mB+BVt+gEp9QC~QC<1A!z?S9v$m7-~doThuI*FPlx>XWkw04?jHBo`#
zTI)VMt%oLHE@>C(*4@16e~3zPFbvEJu~{b4jqU66+d2L$XK##d7T{6lknjNl?xG|J
z+N{HrpXK2O-U`i0jJUHPZX(l)#;h^yU%`Yk%sdH07R87*GLM#&*e-Q;8x`ZjB-m~M
z@~C?dIgPUN*nEF6pQX)y%c0+LC|hOy-a|vXpTypSWlH-^i1O1re|-B*h<+2IRPwW?
z$$k@}--OUl`%MUoz<uo92;b&n&!;Fjf4R<{1CJvdldcCGF3w+GtBOE3Vd$-7ApDC{
zknZ&-M#z#nM1_UfCy)e*Z%1i_0v6cmc!W3&=3doDpFY%@fosi5yDg%N^Ou@F<Y7S5
zs~j_B*TNjCavi7fe~-O&RL+m?)A=Zb9Fvt<(kpN_#(48o>3WZ;M!cv^DC~J7m-6~c
zdI|^RWdcWmu<WDCwIfy=&F;Jjm`mzJhCaC-fqOF0yC<1=$lPI&+D9HXmHTC5hxxlc
zosVnw>rm}-MbbajruQQ>95!(C`s=7`T@mR_s2`(@ghma$f6GnFiO!B+?@rq^JN~0O
z%2YIV9ea__h9~uUcUkW)TOXf~=`Ndx$%#h=k!)~j$2?3%j)d}2rBV|k{P5hY<54AZ
zG<u(8L%W}ZPqK1id(UL~>AgU`XR`N9mP&rsG}(J5d(WhPIv>L=i`~cePeN2rjN^o#
zJ%lWZ8$DvLe@hiUn~3ShHSL*8kQ_*)N3zkl@6X@n+U%|SKe%<@+WfRErrrQ;YWLGH
zKrK_-TcGx@y|(|cwf)`#Ek8X?_7-SwfqrrpXr<hJY!g%;>ufMQ->7069@Q073^P!{
zgSv35M&?qbMI2{Xz>&%TB>|74#EFxLxaf|oBym=>f9vBA@t8$A1OTTCQ!W`FuaLan
z6-`%&JP6hXnLn9Vb=V?i5+bNE5s4#8mIUEwO5+GeE98?HyEw*Ubh98UIGQNd%D)m4
zt%Q+L0T!-HOjG27K^HA`R(_wkbhd(2;xeyw#YGSeG_81tIucYx+B%4UId>Hz!*;MV
zJyV)pf0L?@gjHrQt_y*xX?}#9h}y4p8fDF|5eFr&j!o_4Ha3D;zVSMY9P}y|25=5I
z*eNO2^NhT!YbwJv)?v9z+GNm9hX(5qb+!;uJ9D~~rC5P}leO3tg<7kz4u?9+5w$tQ
z-AXNMI<nSmNtXI>l~yRzLIw;D>~1o`wPLn}f7Cl!x{Ohb=UWO?^?fCqZt=^z1U{lL
zyucycEDJS-?31<t+(0A0GzdVRUcgk*s!F^r<QI$PIH12s5$52S%vmJ<+~N)k<y(1E
z!geZeDu7<#74mWHEV8Q`1cnh2YN%v<f+0uD^GKxb1SZjvI%G`|W~OFn5MVOCZyhO+
zaB|C>@PAe&CchQhz#Xj!fwbk#zh2N;EYpDA$hvv|cJ5QH9LOilM=U@od<d0HsOQ3{
zs*AW(F7+yHNM@^F!!=&*+8h<MiZ1$W$Z>-zdwG4FDi&!fa=6CCNg^7rj$NN}P8$=?
z*Neyvw=34bM?L`|@=A^=(KtwJ(DMY)btbBIw130K(Y`E?_5ug4C-{xgO_0dcLP;NL
zoHYXJ5LPq2_dl>42kw+T$e4c_^4~Df*X0_YVP2*85df@4wgTbYv5YjqzBa4-*kJq9
z?;iHMhq+)2wa5y~sozCxX!q0DMQonpemk-J^jkOmc4EJsSStBh(`3J$*l#E5r*lAS
zoqqs+?0rRLz<$r7JCEVU3*)W}#qAfyrG5imX_DQi5Vq);jMGa6FR-%^0J~l+r-)f2
z*5Ds>YIkC62bDEo!w!{Ke#&FaFE8JwU8>RKa_L>60*Tb+^i-aAcD#hgr1~P>x_z_y
zUX9SwABC86W&2haTF%2{9rbQQqh54hjDKUghpjxIa@AIhY9{EUEg!fUp9ES|Bv>Z6
z7w2y(J=+jWz9X-wO#c$frqP@$S7!*T(?YLk6TecW-#Iso+QZ!YkE-!*?>}nVp4Fq>
z`;L0wQSUoK-F-(XEu>4S_Zu~|`?35+YEQB93WDtVfrLl9kb!@<X4BOwwbFgd^nY3b
zmGfo6cpWv?xR<&+yQ*licXXAX-l@<#x_U=fspMx(lf9#>cXa8ev!km@_&&CiYl%JT
zwuqj8r_0&hTH4?nEwgf%_$=V0JRE;OquWVbOVCyc>65po$JvnET@t93LQ-iNm)hLS
zI!2wZRC+us8MU^QQHNWH*1O<kO@AvDb-7EW(RwbSwvh$h0k?LSk^By>8IggWEmorD
zs{LZ@7o+v*7vm$``O|xEd++VK_<Rc9+e|C&-L(zvek^xwSP^+%!d1l*^a??*5LlmH
zA=p?U=(Gz_<gNX-L;2}ly#2OAzwJ;e`B~FszwOX(J7nY0_KbG#59`(6UVr_4zv^%M
zO~9h=yVkBBLdzLtmnY|K8k8mb<=-!V`_nJ~&6oc?Oys$hHb&^XmzQr<>3&uAtJ41T
ztMXA+W#wI-$hIo=g$n(u>{q4r=~v~3tFkU$ZAMwUt9ReMIDgaT?p;xCBy``;=mK6D
zCexnnotouMmeBFGLkXw$E`QRVWu|TSEVBl+&yQtpn6Op_7U!3s1X+W5pWwDnaLWrs
z)36gOpO2mbcRhOlASrVn^@z66U$X91kz9WY+tOwq$JfX4rM5zU@pRjEKZ%TemMQHc
zh{{hNt<gsi^$|p+lAkqA_7OyV1d)C^#4MBr?xP=8PIpjSx`5L?RDX@v=aK|Wl1}^M
z=8(?KRol%~PF*Nf<=K@f-}E@w=i6&mTXYhg8jhte<dQ$yu{M>lQ1uXWe7H|aWf(kx
z*B3b4#Bot?3+9i5>-Os1Y`-gagGn%Q(kt-JToS$W!PaK)eCVAIB^F#@qrEGlq1{iy
z7121sy<?*M^hRLsn1ARU6Qz=$HBI)8iQX}xpUxT8s>Sd7a8tB*P-G_a=a#Ab_YsBG
z;{NGACM|8dk4dXRt&d47J$+1CACp#i`k1sod`z0Da@7TUqyEN_-d)_gi{V+vU934s
z?<j6+_mguJ_a5TjL;U;p#`PZJ^3&5~?;-9z#GkT<_<g#D?SJa!D7z|y7e6?2-}370
zA!Jcp;07ZVza{h77C(W-S$H|0xrH|YbIEm#<Ahf<q0O|yYn5kg&|(xgfX|OWJ}63F
z^D31~iA?U!5jN!{S`rr^fiaM)kpo<<WH>C4oVw{+-;=bUSe+Po%3jO>Wab?W<}!}V
zMChqa>2#7P0)JP(=tJ3Psnkews0~xxH18236=Ujgc_~Xk5Ee`%)+Uo`)=JXpaK;PD
z(edRux>D<Pj7Fmox)HB=93>9$DIt&oS1~_%Pn{KP!UYn7Gl7bXa15BtDDhly$e^(#
ziE%cfV}xF?2$2UYn3<iO{uls-p%;uPB9XZLigtI=Rexr1XC#B=Y_S=#-^4d#>?tqI
zi~#ms!0rPZme4+q$PxN+c)Y~a6Bg)?!wP(dml2ysgmW6qe;mp?bAKG3l6iz(;{G@k
zP5mXrv9q`!(VTooR^LDa>Fet_!ZDezzVXF(Ya^npAkdptNWSrLn7+8cVG7Wo=pTOa
zNsO0!<A3y>73|Od<SaP)ahUaeM~FV+hw<viA<AKQ^y3il)9-a>j(!}9)_)vUSpzYf
zCbOd-htpL|_|D!=M8X|m(0-G(`s46tG4H#(QXWbo;^;RU%qIK7!#uu;aKHid4Xt*H
z<knodnpg~i$ix>Eix;rcY6nz2aSBB&qKNshUVkN(Nm&k^9IJ&VFMOU7biW`qKo<lh
zflDH9C76+uF^B~Y=0b%LI*isega&XYsC!3LtcIF!&Do%T0t5I<FbTPk6?kBgj!*&W
zoG~*N`8Ym8E{@4aKwQ`K_6g@TyAQdEQ)ML+UnD*bP(-i`&bRcN^k~+p&zisDDN7_L
z%YWukO_h&VVxDk-V1cL(R1JoYA6}7Q9xsm2!Ty)ezgl-Jv{-ye0wUF}R>M-RW_l|{
z|HgtvxH!h+d0M81{uF=DDDNI~#7T^%m=hNzp%^E@-QkYYz#%(A`|Z>SO}VtULVNo=
zXsV{7%%gvJ_-S13VjbkKcMA9mJwE{nDu3t|!o`Jc0Ae*}jbat$MJq}B-LyJr5I=ub
zMKsc$IYN_Ka;Y;KBZ7HL8j(da9RmyII*+jL<Cr>#x<d7tQP@gvTtH$76hNUl<i`3b
zS6tLsQkM~P6Ng0A`&MkGEhWd8HZcNnElTB47*@oIwJ8KXtV)nR!2u2CT%kz0WPfu~
zXx}dgNFRZ^h800CICV)>V@_c-PjG~Tm=ISmPr)!041>XAbb@{2onTHHcn6XUN3vki
zRl(4wMDm>$3}<h$UqfMOsjAI})Q|AP@#uf>=$D_i)Q`#N>)V~9pT02u{HfafZ)9yY
zlOcO@q^iWHR(CZu?0{@#GjtOrWPb;}z#b<%=xqSPuWF!3koeUb0Yd@GuFSw^XrubO
zYI`H6bDIGHjn6b!5Dg6a0zND>-?37*#}4y%)9=-UCoF;s9IQ~rY^6S2ToF7L+B9||
z#(Cybsf6p%JAzVWTC(;jaWI$>(Uis!j#j4e<={Y&e8R~r@hZV?aYE2on18or8L=%n
zKAuvK#w(c_%wfUIqhRS&3kzSE$T*1QGLFccJRlk)U#PtV%*8D?;Cp-f2iM8eWj?0C
z3qRi7{`=Oy66}Fz=QZ}p3qP*f)-{!bz2}YVaO(%T+J4&lVWfV2p<iwPee1_@?f303
zcEOF8F4~`d7-b81{L>fPe}6Z=ZLhhU>$ccN7WLX%Oet*EZ&J8eKgp@LeiB$)KD0<v
zXWRJ^b_)-&V_Bo6?NumeY^LL^wpg3@3+gPS6>Iao$Or6kxH8@%eQG8I6q5!VuR(dq
z@XJ_iwciC*vd<Bs^MKieB+Q&!hBFdU?aKP8vS(F}Ht27&m#XwqDu0lMCz{7B5|)SY
zCYhGD*_7Zyzy3D(Q~&%yo;w<lm^yf**CXF`7C4Ie?mSG=m%C2n^4(xbU5bTFy_G+u
zAC`|-*!ODMm`o;<=g*$O|C7li|Nq|J{@#}df7*NY<>c_$my`W3Cx4pkA0B?W_a`*@
z5Cf3#7)O7aY}{6{bAO-6Ga8KsIHW4N>j>eHl82ZC9DIUzU%_t3a&K@)1NR7>Bs^xm
z_N2m&x^xR^gIDkh*o(o2H(Hol5%W9}jpig6-z8HrO{nLR2!QLRmy_|{!C2UU5Y&V6
zG?o$HK-fnD@;qWmsLR0@C97n!5@op?a+>WJc$CNAl|H?qTz@jh&`Toh6<U`(alxYa
zbq0Tgf~A}N%38?&R26A3PdpsufesMj4il_dNuEKv$pa0Ha@()M_>E4Om-s>2{69Gh
zF0oLjv>Iqi1UZP;rjk&SFgX~h)53`e)(Q)cu^;9j9;cd037jmj+{0eDz|zp-&Vu;q
zW#TL(!SUt!yMKf0+-vIwmI^CW{zzFNHL`QFBaF`!lHF5kka+c8%~OGz3Uf5~Xw<9_
zSM?^{R!DtIHa`rTAsi^NJ4V++=0>UK(_z7qL@|np!{!0~C56qk7seCnNl{A!DhRMA
z?GkCg3rjg7q7{?`20UrHSob>TG}cSoVZNUPG+yn(Du1QZ1Z03qmc-lTbUwn7v!F3?
z;v^!wIHV&$J&=0_zWXFq6P{W$k&-e4YqDkr#KM$LO<7gB6H0qhS7+BZsr?0$Q5=03
zcf<RaO@SCN8qA3Hg+$C(5qNIMXrMfP9xeO8crt|z?lf{JW@B_B_nw8-7P>fwjdjB)
zeeV+hu79DC7}$1GV6y6B;qv~bVzm|XWv<lgkT|(z;}R~k*34g6V#WHY-rXq4lHA9Z
z;VHE?TvfQ(an>>rWPp-D?#U&hQ+H&gXw$bQ*bpi;aixD1o0N)U?NSFf@(KxY3u`)N
z%!B0*buBQ(YL7@9QL;4M2PxkchWiS96@noDm4A?E1sejQp5!|gpi>pC3!Bie7veLQ
z&S1kuk^>)?qZ(=~N&Dfg4GwNqZXdS@Td<k44vFHEii|Q<XiCKgs?wP<9Xp)UQnD-!
z6e)MIeuJ+%%6Z*WeNuGZSRHR^Hkx^u)Q`|<3MF0nD*8miw>u)LY-w9_BRGFp@p`mi
zJbxbf6(RYxLz9cpQg>h2xlHPxIWh)Ku>|V-32Y8Zuk{#RdIWQVK!YL(qk!C_*PyFd
z*q(k;?mz<`6ReiuiY4eC2e2(8HzcLJ;v|kMyy#Kli5?SghQ9d*G0(jw-fU1De9Mu7
zM><Z>F3_X%F#<&Gp5=xk1WkM9bw>vt<$u^fqu;ysxWMBa71+psSrLK1rW<kYHpzvT
zmv2uY_U2kTq;l$nP(^^tzC69QMS!6{=CR@pPco%Liu9N^97)O!F}=KeTj!<iPcQYS
zm-^F7pzM?vnRZ_E2bt>I{ge(eHO%s6hnhNvcQ;`3*jYd-Rzzwl1WO0JxzaJWTYn*+
zZ5=7vMs<s(2Kz?x?@0P>nyMuEuH^pMChncEY`hERCLZZ(>V5}xkq?y%MsA2B?30*8
zRVU?yEXd94$G3DnJSE<T_8wi}5F)vx6Z4L&<S9cHP6A#a8R}taFyX`%MjwmjIH12s
z|BX=S<}4C_Zo#&J^y(0gIPrGssDD8hR&EC|9I7yjV7EIWp$EZjDiluc&u|4bg4DU)
z{5~FaNWf_@?@Dm5bjA8qy;%bvh^7z<Jbu<%{eJ!G+Ny!8E@ZvDUh$at)v-7*|DyA0
zhwYkFz4~1{Q%e#M&MzZ2ZH(!tVA2|f7<%c;jA<}0cd346W|(?OL~a%l;eQL}wHf9M
zb@<I;0Vhrp(<RYhc)C3#k&2mpfg!mksp1=<HgOT2#Uw%tycBc96UQOMCGJ>fSq9JS
z!C1Fn0am(%DMx$uIWxjx5B9Ak(qLG7pkh-fENsYP@056Wbxj-=*o^Mdpgw(__)`)A
z%aWDUaHzOLHR%fs0W(otX@5IT$&5v$KpirEPGT0XaUS-bMRy*<F5eBA{Ac9R8F5yQ
zN1mkEjbvMP-MM+(n+7%{5oK=sA^n!!BQ}dkfVOC$M|E2eQAi?zPDZFHjaBKo4DC%c
zh?D|9KCQtb;e6B8tH7+gd{y;X;^mjHT-N#ZyEjG`NoiMAKU0GC6o2DY<O|YJ5PTB;
zj>bKvK4D4x2+KPQ$5TU2eF6srs%-b%U@BnNk@;P&@r}m4Mxgqw(j#_A_1Ap0Y<-%)
zda2v{<$Ax|`uKbbez`8G`Fi)<C+?o>mQb%cZQi4K=(?rKYfgx_uID3QE;*h-jAoNR
zOczVDba1GRuznvUo_|u%)Xu&T(;ekb7?GKn3imV-UAcA^#7#UJ%+F;Iy?lN40E%I&
zk-k|Fh?{d0PiQk#EEQ-3!f4b7KvldDJ*qOg!6n0SO!;gj576kIlZOz_xwC+0IZV)W
zWuBy~QYe#H9-&zwXTcbUhyXFH(AttR2=bGsxgz8XjY;$Etbfreb}jmz0izuGjK|p+
z>%d6?9HNlKA9ILHs8oP?;tK@s37s!uzJutPjA70p`Bm1KPe=^ujWoJEoyvNl0eh%u
zD-C#1fpj~mP$^PIIt>+Yjd9vRBzDHzJ31K-!qA`TN^q(OtI$EYwFyHk6U$T)gpTo)
z#}S1gfL&L>7=Oy)8R|ey(Fm2p03)OhOjXjEFsP%5@Q?)n56Yiq{rGDNYKw1YQ@5b=
zMg7bPBOB5K<><gpKJC@BV}0;DqpWPUQA{E~JtBs^>LY8)Ln-@1eVG+VQ5u?{Eg&@-
zKZO%RY{bItF*-&;QUkIXp@60Bss;p-oK=EM+ulHTlz(WEz;;}!YK$f2Xa_BHVh3T)
znFAh^j0$q3Qv)8Up?!>;)<puXFJ0=IPBD}3VvZq9>(boHN7RM`)l=eCvPAtf=Ki%J
zT8W?vNLF7O!75>r9x#_q{~d(U9a+hkZ5(7NVnyK=Fe4&`g`k2vvNE<4nnt7jOv~qv
z)TA;tpMR1lhS>q^(##3zc;YbhXw6aC{1db0UZF1O&*h^BeU1JZNqAr)pK>`RVnr-y
zh~jFll7BD+{<2vbp#Khg)J;*7&eHQ>2fb$Tc~F;q&3w)tC>J98lo9@##qj4Cy^JNj
zy{csd+0$`2We?UE%wwHDDcd8{qX7wB>Jr15kAInG`8*IxlpM5tHUrU+U+wlQK2srm
zgON--pzz7HB*$8`W{!5-nX;mm<vA!e*b*w`=w&QWdKFjn9xd<^lp-3;y|x3al%yTy
zDFh9BO5{0|Fd{-W$#huCYu1j;RHg@sn><JJ|FQSy?Qz@4qA-5`?oWZ+I`?NOBlf1n
zc7LC7=BG$<q8nS*Ystx+<M`TW65WjvNpJ{KQYZ2I+203+h2Yw3sU_Pp;`78&b14*n
zLZPZqi;rF6ArHhq8U2A1GNUf4PY+eTAVpI<6k2W(@>+3Ov`HJEU2V!A$jcFYr^Q>X
zNvBoO1pC$HJpy6jC1kStl5&E~rS&K$Jb%gw>b*xfL0*q?!lRt<C?`D1313!DXbCVE
zq!r-EQP2|>&~i;VeM!qlYvaqW(gszuwtyg`!;RaUT_ESM+RHA$jH9Zt#}L6abcTaL
z6Xh*G#Fkf^JnG9&>M~nZ?JIIL@8>wL&gy&X^8m#Yvr`LOdaN<t*K|#X(FP<zIDg5R
z7->Kx?~IryS)B?1*C!5jFj=T<#*n&eMQm$es*I%&b_gCb24fZo3~88Xb}7&$dNk1{
z>D8v<^HQP`u*;Zsl~jyN&&5D&$gxS$m&A}}j9ig0NwM$O+Ul>Uo0xHfuzQ-wbEaxM
zmW!js)z-F-*jtkWzfSK+1T=`KZhu;Y;w7MzH*f1K?P%p1htljVMpzo&%ZM#GW6)!h
zxdqFNZWeXPa~pYPaBzAgMnb%E!6N3f*}@*v#zr7Xo=MUV>Q6dRax3_P7bfV@9^D?%
zM?F(sk9wxM9`(#6*Q1{KsAoRvnYADM`{|jF_UK1Bp?p2c36FBZqnz+4Cx1N33DqC`
z`^gFSYL8xqLi0d6Wg}OErM008t0BL{tz6^t5MlMU4axFP&m<dgQC1n_Wh50VW<3*E
zE;HRK9gbqkVwx-tea!i3WoS@c<kUGy%AePT)mIKi>;<@O+N`%nuMetoW~siP5fY=<
zB&beOa;v0TYs*gs$Y;r^w12O5&9b_4a;lV*pBPVGvuP{j->KK%ygWX#dXO+E2`F#t
zbi}fLV67e8)HXm&9u3VIhb(`x=Y=7;MdunwIVRYnca8lwKpuntbJrIS41Ns$zvZ|;
z2LG=-B#*)WUuN7Nga5z8xHoR85xZqNY4Pc@8~_!_enn}dn*wzkWPgc<TzO5RaIqp$
zO<UGLAIWNo`RezOx?ikrU)HPF5sp=ipLweevIJT^%x#q;csE?Unby1Rv~d7(+E@Ur
zf@{D1<xdBSrVX6uAO5oWTMz#DZtHJbf9fB9+1lFNeE;+7A1}_1KhUi|--l^%DS!RB
z`JNnqXbEJizJg*-QGcaj;;`6}J+KN?6|X!2$U6V(=0qt&0loo7g#(s`s_MCn6kS%x
z5Bom5zJ=_PTiSh@CB!j}Ic6R6ep5<;TAg0g@*}N%Nm_fWIZA=r)V5fnwi-<GEJ`{j
zolKE|PB~%$O%jzG4rjYSodK67Iz1=s*lJDCtY9{|kzu%g7Jv5dZOdZh*Ob?$@L)3Y
zz4G}1+IFPTL7nXMGOS%$9EIEng-W4NCtiF_i>u+G5()33Kr0ZB>T~Y;;-dAV`uwOq
zx9;<!`kcES)#pd``Bv(4!h90f)!u13R<S<3Z6%ru<%<r%02c-x_{}5<cIPq?vuX*d
z?AIjW!m@50&VTA<3&KcZ8u<kM^^z>MWyL-+of0?s9;IA|mgqQ>O1S3q{;&G4?{8D-
zMz-268y~!CpKyqNK=&jRF(80*4;=?lZDJmT0)j)XQcq*w&jH~*^y{32w%Dn3EOq{0
z3svlfr%Z*4kZp7Z5iHpqU^}Nw294alGEajqQEs??CVvZ^Xi4@j=R}l|=u$VLgsJhY
z8MjNaFis}Wh>+jK`}OV{hIq82hV=jVFG=n$3nny_$jK)4#5U&f(e4?c2gm_hw;kkV
zUQM}?exrL6FLh{Ybi`2_N|p1H@{bXHJN{>i{rvtXZ`Hz8AB$=EXG*WIPh{z?YwCM0
zj-}S7%71opCTRo<?o$iV#i3z686`mM21XH%6Y8cuj&*AI#jWQdBh$uhvB*4&U)eJQ
z+agGP5D8LU`Chf2UnrY$U)40rrkd}VMZH`_MRw{g%5{<UEsK+z7288UEVQ1yjc7x5
zQ4Y~goEWbny=>GJWlTWG@j~O<^qBaj79>POZI|mu1RQ_IGYE($lm&mWC1b~Q;8q=h
zSeyU;ZX*#jnSfR;W|m`{Qu-;7!m=nQ!82>!+$?W0U36Fbsx`1oO<3q3g8ndy2~=)Y
ztLK(0?3VS?Qcm7PB>dT`<*`gedROsD-rqtERtOFhvP?(?#)0}Y8@QBL=&em|2q`CL
zF>zTC(Ml@!kRsmJ%Xy4F68UTa{>-L^Z2j4Y6s)3{I0l;TOhe(bW`BxX)rw3DU6-&(
z1R{S1rAj=PE;Qvls0~Z(ipEKbeI2{F>RH?`@^cgWh>kD`WL1>>xm*Rhc6kzo`ufh~
zY7Y+qG59cF7+VblN>oqkcyVR_sIRN4JNkRCC*HY5w&PlcSMBQPScO#!4<JKsrv+?T
z06!16zEm~5ob!}p6IBBFF4d}q7)0BsvWI`>MH!=^V@)yu<&x(%K2NGPMK_IO!6l&w
z<>lT^CGHy3vOo}zB$)cr#Kb~^uu$7fh_7n4l1j{A0w+2+J3((1@9H7Pailx7tf~!i
zT9}Z~QzsnKi>?xE%87E{maf=J-IDTNgp)byNqXpI1KLCAC5sWc!9nDcY7yYKPzHZA
zzhq32h{Wv=)bHDY6dA#&0^vd=ud%DJC%iB-0@%+XyAG?cg!XYv#^|^1!4;;y*e!nR
z*5KPci`fj~pu^d3T^Td+Tla{}V(by`x2|aFFW_DNn#42mGg-WV2F&eq>94+cQSYuU
z-WBvIR_BWVN9M+B92tNXLBIbHkOY5U4SVKZCD>2@;4B>f*3J69%>qHAQL^~0i*neF
zf9nE%`o8YW__wZT{kLvq3sKAxHc6-B-@21ULiqM@J0{V#;F~Y9R)6b$67$~gOW{vN
zYN5|nFqhd`e9V)J7>67{U(lBIh0C95;aEHY?MWXdGz_S?5(9;(3=3ktN-BSo2Y1lP
zo?3WDx)TCKqk@)(9*O;hD$=DH1V|ZP4@oIp9x4hQ=~7TP2;lWlGYc5>4@4O8OE3wQ
z(?Ws=4(YliN}7rnXdTAG32_?q&85n)7U0@UoO)OC@Oc{G5PV}nz%$RJEZY=;q4_JG
zuv8h2%si^83h+YA6V}O?oArN@0N=bK;VhYt(az}U{<B*fXw;_oBMFsG)@oSFpA}65
zJ;5S8oZ#NfywgB`ioa)+ca1@=MH9@4htf!l(@Px$5V~YrC=M$%LJgPp7ic)zhTQFd
zYKcd`zxmKBcd-fb^X&ru6b=f+wjt<MCLD^1+*VbJn5JzN<+oO1`h9;F4c{2}2e&o>
z#02w}G$LQkWDG2r>nz4WfD`H>>IunbN=e*i0YQEx2~Zz{nX!f>9fFHmOX@6UUh0y#
z-n77`+BWT4(<Vkhu0<(2B61_9%vi0({@Z8|r{PSW)S21=uxVe<3G6<(2smOL)zurs
z(JaL=4iiE=!8~Omm!f~&1EWJ65dTmpo6WpK#kffptW*4$D8J<lXE+!&P?&kE=9SDr
z=>387KiK*G!>0OU;5`4hJ^t{W_47l$U(Zt3R;4dwSB_NG_Nm2PO%2<!Zo?E^#3|WE
zFR{<bHhLGr=2tgRBus;PKdY_)RV~cGV`!uPxoZ2?W?=C`n*o0TiO<$n5DhK*0zNDx
z-<}e-doBz5=6OBg360=24i_k6wo)E0t_Yq8X&SpR<9w;}9zs67B*+NUlC@8Wi$RTu
zCp3w1ys&jIS(;U-8Pl}>C}fipf_jj?s<cO_gjsk(eVRaeERP6f+NYrDG#GCq7AH7N
zbk3$3xsfGA<f(rm<!I9j`EWSeIZr1Z3os2|21$SGZ=3&2u@7fyr#K)lgQU8aOkOw`
z?k`=3oA2dn`>^@mQGb1>Z*Bc;^S55(^R4gt;Gbs}?T7bHwt#ydzT5hn^=#{w%eg6n
z(y0)yD_>IrTjevkxl}%qQ(yTgDcUpa&a7+>7J3Vha8-X<iBdT-c+WDU;_Pd&HZ#|S
zh7dZjEvZ^R(gjIHt*v6310iLZDemO-{P^t!IygEyxj1=qdhiOJUmRS#J4Y{1j$a)i
zM{l-y6HNuif+hJWPe_bT^g0@&w`qvF0lp+qu|=$?P@dPgvcQpeJzyT4E^4gzay#@1
zItP&}8`XboW3X*AMi?s_&Z@b;qtB-*o(OfKY{zrNru??@QSD^Zncm8SSxKLzn{qBJ
zFIg_j(A#&?Ny%kj?YroY&z=8xyuSQ(NkfuQ7dz%CyzkC&obdiEO3h7uPi%J1l;9+d
ziQ`f3vMUlV`iJ6aZ-E29vW>xDFxcPSh5ru*gW`Yx2mAZG|1sQsI@sHNIv712{KsIl
zzqkMNKhWSI1|a1Lj{jqD=eCNS`$jGtQB|&PjIKr<97WmBL2tO*8+G#B`iLY@P-%{1
z?^<jOiX1q?TEapsv?_){RnDKy0h(sf+a08;YF&{yp&ab+j9c)eg$Q7%G>hm-XU+nW
zdBuOtXfjVHAYWQXbezuWNVRiG7S}BH__*Vs@>A;`bW`Z{G691lQRu*N4XOcdc%5?x
z43z{Bnfm-4eFTTpgsgM^*RuXq4xBm$(7gV4_6Ng3Vf{ZH3?JA3gIuPfsujs6ge1z7
zc+tCj2JWWe)T^Ubgf@!CWDd@m=*h|SlqF1O((LyHtR69e<8DtM5O)xi8C4Zgk^KPx
zPVj77x&X-N5^#qRS{u|dq*o-&N@#8);&X!JR&-$4m~o*|4h#UaQ>u!J-hb%8+J1AF
z5l{pce<}0GOF2jf5mmBKC%}T^iBXn^u4A;Zv4Q@2`trzmeQ<tp{MI>qbNbRbzc_e%
z;T*kjPTyQOZ;xNU`Q`X~5Suno$j;J<Px*X|rr1}GPaBBbBr$#^IMb=<Ll=7<@p_?{
zwC=Y0rP&VL{GdMcNVu@R^GHao57p0{&$0Pbe~WbRIedLZLXXAH5V)KskzsdRKNtxb
z()ULOkQ}iKaB9nU3wZ6XbDEG>lqX}<oif(VnqP$O8TgisQFk=g4=#PCPW?BK41YVK
z@lOPMB+f&JfIiNAHcJ>!JQA0m`)u|Db}y3{yW}7l=N@Dq89^5w@k<)X=6DI7{30>V
zfBtBcJ-gBtSNThNtEeW$t<yIb$76ZE$$Xz(i%pS5(omt3lzWR12h_#Bzd&&s!U0Hj
zz&}xGvjCjD#LlZU0-+pEJx9{07~TZO(h7|)iFUq|YSM(j0gybG$qmX8jq{`QlA2Cf
zcV6S0bNV|Oqv5l`AU|}k*sOB&e7Je+f6LuC0|}huNVzYJ(QuEOM;lUSlQz&f<|;3`
z&#uA3io^WJFc`8js(KugBwk1o`)=6F<|-y3xjrJ;^JyqLF<9DW4(z}JWEvQwk%kgZ
zy@QCJ;aKR|KIMUELh!6AW^sIaRAv<$GK=@&84~KRJUOu@*9XfPSNW1$7KrK8e^I2y
z+jWed4W5a11q|~eAW2MJex~mYJIH9dVpgUZ*Mr@}TBRLS;5UK;6j;}X4k~jNc(0O6
zxUqN0!X#$CFP68e6RL1{oBD)TJgyjD^(6B#I|xITDEBU*q{7B1B(X!5hRGNWJ1{Wb
zIdM}+>cql?+$8E<F#}WnW6aWMU5rM9!9cvt3$J#N4k<p1=@s?Kj2v?p`-+k?;&*W*
z4T#o(vlp{yjNYT}!K+tYBw1-pu=ghP7jGF$#43~Co)&+K)9`?wvQWH`V_Wdx9T#IX
zG}y*h)FlV53mupKQUn-(Yt<TKIF$B0Q%g4wQjSz<Ml_v=R^k03GBPn!PrZFI)xNv1
z*p<5-<$%?;GLMPh+BoD{=hIpWKnV#VUt3G0-<F_{33kWju4Y3iA4;+QP%1wsXK>G2
zU>!TXLDtP*h2WA(zD`^g1SIri(FLXssEqTn6+tZem@vWRu9OphAm%b+n7fpvn%}r{
zCWcHOnWfx#28jJpaEMs&Ne&#}mH&?uE~o}nyzq*~ER?Bm;Rw^GN#c`&oWQpcPu;md
z;WZ7Z5GufJcfnHRG2^nRdt-f;hO);=e)rQG0}UZNtp^^4vYG)$A#n-kI93U3V-m0{
zq7PL41)7L0U59XgJ;{drNzZ`I(l-cJ?M5jqj=<arAb;8z4M)#jQ`1>H6u-@PokAi#
zG3T99I25E#9HTBs-!bz^UMTBJ#x6x56HbA;5UU{XO1EqwqM|Gk2z9fFnQn__T**wG
z$j2eMV{4uAk`}jeb?U1s*WbE&yslxBKXt4t)4Z&@#40m?Vqe*Kos<s}R6<(xzN@6;
zhsV2Oif@O0=bFWrHQLUvZ{GgAT-$M3oXL&_T|nQiQHT)t35ia^gv3|aAEW(DL{q}S
zx#qF&vG0G#wNm})QLng@ULmRBtJ5oT#}XToU1uM<QA)kB-8ng0*MbhgSyzboI<Y5W
zSE3U>b}z+$vkVMEI7wnUNfYveemb@v!>RrcuTO^Es=K4|-NRR}-@U51{rb%>6?gwW
z+%Mlfe*5~oeD~#W|FC@br;Cg7%~$_(cv^A$_3OV^-aP($#mlD^@1DIms|5V^=<UJj
zQPutP<KxQv7w3m(<@@J9Ry2Bkeq4F8V(ib)k9R76@9tLLtprgC<KpP=AAfvze4g*T
zp`Bkf)fw86fjbr{UCKoXs{?iW5l-g)g!R>J3#`2HCbC5pH6?F8{`5cH!p*-w+b`Za
zdVOMUMJ~0#ctnW1kmk0Gvif>38VrgM2Rp?(LwoEbSWpV>LJry6u4u6cLfW2+cO|Ui
zU7k*Vq|WrQ`m5}D;ro<NR_%YOaWXC5nU>y}P9J7GeCA@Ctmceea+SBYu=%)<!p?eE
z>SWnoqV`+lk${CVFS>O8wAEUzzR5Bj>f|Sb=}0vTb%TX!5Mq{cy^sep1-2S2oN%Vi
z)nn96jANC0Wh38YzJ{64W@6Jr2d77pw`1RbS1vfJGMuXFn1=`(!zS&K9(<s>2Jdep
z7Ndy78YK;lZ_7wm__<|+%b{1=G)&LjDDA;+m4Bm79<*LS=-`*X?+r&U$LJ3hjaAs>
z=jN6&Z-LdC(pjQqQz!f)PDyi9(QTUw*~cV}C(N`3UUQ$zFLD<P_2J`8OmPS*7<>?a
zZfiB>eOKk15$bRELo>p$m)ru|w?`MRb`B3#m;=sl)6QhtTYV04fn=+-r;mp}2C1J=
zA)#UqvZ_@~N-Yj@o9oFv>lR4-{n>ugz>4eD`D-)pZ^?|@MAq!%D8g~T;-;xrIQk5G
z#FIkyZPv$dFc^@QRG^yV#HV3;vxe1wShYgR?PZ5{tF{;5e^f88z0$}c=_hPn|1q&%
z9}dj>wa6+rq~645?&U3Tjg@6WXpd!t2bBnW_@?>gT5Lm-2nDGp_u*ThEA(>dWmkbf
z8dajpBVs1MFupBNmS(J8m<IS(+}R@^rD?eWfl<>+(+ywUqFIkzNds(okV5Z&qla&*
z36Xh~pGZtv(4tJcz_>d2z6IhZM^y++iN|8x-9}xPgbCwK!={iBg48YNOUht%O!EIq
z4d40u^6>!ivIhd&El`mHpz%St4B4bT5#L=pJqQ=of~kIb8`0Dm0SpJQuM$uN+)CN>
z<YgwB68(6SrxQnumRpF1d592yQfLXO2^@qb5XevvOdG}0gK$xjNSowUwDOkOk|dBx
z8Q@4b&fk}9_!b_KOKTYK3e8Kss%nuw8$8>uWGg_-LPx9IG)9B+CiB${?|-i_yeXf2
zjl<iXIdH=r;J8p$2~>xGV6e1UMKx>CCx&&b;X*whqd)Wg_~Q>0Lkf?7UU3gWpFal+
zN8Z(3r1!@ksCSA3@$iNCTV~k#{J8{_gkIrxOFeVFTUmJ%VG#*?-&M}%FUN1sPu`q<
zJUQys3X;Peu^A5cDkisfKG5iPGm^0lITw*j9r+vP0Z0#h{_Kb!=Dio!G?_aUn)+QP
zrJjMc*-mpyq&y>o>eZ!x7o=W*_hp%=Vl?$DRz;d|dp}24IM#uTIP}m2yO)kWJ<HCK
z;h!ibSCpl?pu4J48rLjqFAai);<GJx{cf=6DaNcus9R;0YB}+1)yQfj@TRWA@_{4&
zkg5LWx*>+HVgTUd-W85T--oy9czdEUJ`~mcfF4L64?!0(neujjlc?Ta$1DmQdQ#rH
z%_1pLRFh>#ePCvwYVIw$x$?xe!sV>SF-)cy;-tcz>d|+qmG6{xNBPwx2LnHzN#^bY
z={he7q6s3HQzFYCdhA*XECKlQNC&GZ@)zhV8+dTIrn&<2zp;nb209S5lns?E)}V{>
zo#AAT`YDh5Ja)H#RXi{Z^V^>e-<%^BBEIu{a08Hz7?Igeggy+9fRv<b6iX8W2#ysn
zP@cm=e*q6NC#ehUGqLXgD(`rF9=n>bADzS=oy3YxVi38|>{6wEm&=$!;DR>tzl%Iv
z7o~9V=IqU@H$VQj^X}~EphdjG2Bau{A%nNXI#jz1dSOz3on?e5J*CNw>!+S!d>atw
z@g0=Kluu+nBkcPCm7Di)sHHz3(mA_^nbcoFdy2jKj9qd_2OvLI?-U%1JTe@k_imJa
zu<wn==)IhrZQWj9%H9X&z3;~8{XCtK2+s(2Mz86I&XOUl-cqG~-u8ADZ0qpt5w|!&
z)n-#-<yEYIS!W!qXNy%^x>%AvNo4Xt!5GKc%`@idyl(uQxtIEJ3M5tZ#<~`wjfqkp
zqwaUz3>3szAJKS>`d2va`*hM*PZ}MszY;k?iUW_{ypN0;=Df(KtJY(KsGMWqiujY4
zG@Ow*ifO3D(asE(v1S^IA}hic?vZ0qv&M(>hK2fnxGo;oMcZ}J5R#LZY&MY2jq5K!
zY9OH-FCtS;Q+c5N)p5Q@DiBJHIPYwri#JDa#^{Q~Vorp_ueA(8d<&8wo<<RanoS#>
z4QoE3sF^I+?UFco4b{hDv?*p|F6faaS;mwtnVXsVerE%PL>3hZa0nC+o<Sz>_%@1S
zc10n7a#c*{#jA5@0BD=bVAW0{4HG3PAw$H72~o@fp>w8{UnnETV=|6^-)k-L|61+l
z{f~3vM<nLGB+60&EXn`zbg=U@AOF8I9PaNt#{WOW^~WFm@6Z(u#$bAxQlBJ{=T{7i
zJ11lGUH|jvj(Dqcd=tTzTd?Z@Y4kekJ(I0}sas7e;D^vfPWCeF>OC2^4`*2N^osZF
z$b0ms5H&&<?eD;!G&oPEQ+k8CP6kX!4dQQ!?xD`9uiKcWVuLVg(h!a!=t!^gE0NIQ
z{Y11OI>k+rIL-oMr!ax;t3<&VO7;abQMICkV6mynZXBJSi+7<YVnp1nUgu=0lORZc
zASVAMjG{7fCAp*pQmPTiD{R}2w6=<614O50aEqx8%saI&w3-2*XOR9AdNY2}ev&Ob
z&A><~y|;4I<i`fr+})KC1R;8gy8oLy|C@IU&}6%-kX_y1k{qR>QD!R52tcM}lNJyr
zhruIKYyrnfCwnOqh`{?;)^8%75?5D$T7Ljgb^xIQVU*HasMq9+%ihY3vH8dzSlJot
z?b;Dj3)os2a4M(rdSEVBhgxd#Ef8qhuMqgCTT2f%xyrwFQjtGFy%HVi{-uk$AG^2V
zPb>&nsARC#D67LZfHNn4(BpHtIgimFe+Xp;j9yDR+(XdV($~2X+h3_h)pwGAUP_r(
zK7a1uC@O>%n%qTy{891ApXi?{O9-+Cs1k~-?&~>|g#@Gt>Rg>ER1UCKI#wOxVy~S_
zl$2B4@<Eg=xL4gVlR+WZE#=Blzb1-%aPe#<OYj&@J+1WU>^ZFmLVnlFn+;Cuc9hDu
zd+H!3V+Uq8*jzSn+5XkrTGC2?Xb)JP{h0Q;>W}U!u$D2W)h0q|qAO2?{I2apRKDFb
z5f<N*-*#7<oUJ8I-)?qVz*^Jn<PShrpPmAMw)52dS<4C2Kpbgnzx~uL!RB^zxC+qq
zOlCOsoSD1&9M0Uf(^h)3<xI`oThC3o$=glG5;zqz@TJw$$LpRim&A#GBgL!O0ZU_j
z9@pDmOYA>8`}?DU{by&mGyKNwKkGHDt*5UQS8-4BdCxXzfBxKY9H(PviM1&PB>Z9L
zl7`+G9g;YqQ^<|o(WO_$9d&wSr6B_{>(~j++ltXjZv|PJM+DBIq*45|rVXA##%g(B
z!QvSX>F;*&MyD>7D}pnB0u~klcM$SI@SXq&8&;e|ZdX#_Hcp$aSxg^&{+u<mfu=N8
z;Tce|S?1kP_0dvJwDK!OrT;<`;<Ib8NQoC*7DPTtpc?<3Q0c8YJ?Qi29=~$GNTWTK
zU$_UsMlg!-*PQVL4qw#p&Em-YI49Uo<{zOlK45EJ?I1)sPf7fLmQ2UlAt+FSiyiq4
z?n~l7$!^S~3u9rObk@0$RLIr6E~I=LYg|YYaA6_chESA-ur5Mb_k1rA_to*?dO2)S
z9k^c-scUVG#8PZx4P;XU`Lz;|Wf8OgUhn>&lm8@=YZm~Q$bZBAr-P#Ww=)_%%70&n
z{I`M52{HNXi@eEyV=nLKN(uKl@u!^5LgMu|CX6LKiE$LsaF(qD-q}D7GADFUfm(i|
z77;vu$CY1C!m<k4hX=4wN-u=$I`@)-)0(%c^;peTUF?{itdX1g({t#w^kZ4$HsIp*
zGJeVr4~&mkaTmxMTO;4kfHrYeds6O05?e+ThO4h<m|ZM?`&c)^_pl4B+5bariI88?
zY$MC`|EGKV1^z!8Jl*}q`TsX^RUhKS6YOfUCY)PkYXu(RG?}wlEpA;UBI8ez2;MTk
zia)I^uyyj$c!2Q|0KPe}{1b&V^hlVXT>&aieOaFcM-)QMloSaGYjee_B(LJxUwu>Q
z?TW+`_0EicB=CPIOAUWXp;9W7lqcn;!l@@l3~Im#ZdBRsG)sk+y8-xDqo7hxI?}(s
z+^)-5?9tGkvU1yS{#a;0(!pH;>id@H-p$M^Js6c-y@~2xs^Kll#&inK0ZVkPy2k}_
zFK!PHPx4i2&lg<-b@WyMQVk|sLQ%|a7B)ByuoW^05%Vf=DSfKPmwsXdFMnDvWwN|?
z%JPU$*1AhHz;2WpErD%9Lyv~Dhd=+>-7ot8?(FP->-E3BP5pn}^4|}VroK8ckoiPu
zlzQDY^sJ**OPhV(z8^|U22Lm8p63qbR{`DNqNT>{4w`AfE$?d+wAM&l_bYFGL1HU+
zY@O8C#_{Pv$nYDGx7JCmYkwBIz9fCl+_h3<jT_h6iSXX`<A=W1Z2wdHQC@^>mj8yk
zdpkw@-*7M*edF@qH*(nw4M!2rc-N7MH>u!RcX4aEo2`6}j1ST_FrSQ(!A-z}An$@e
zTp5ilVc4O|2B(DmHxB%&CM_nS&HgG>pUWVCf+TK*@k;<YJV7=Fo_|NLtPyE9CgsSE
z4AFf(Hl@+g>s&Q$Q3WcbOj`#Y&oVqpm}vM_bA^jDR7`7-!?0qetcI=GLNar<n@w`A
z@nT8g3`VKgaO?I9trs&moUTtxKqf1^+IwHo@G@61sV2utu^aiRD5rs_9%dEoM`CMm
zbhf_SoHydpj0>+tWPdoaDNRk-7<H}H2)BA!jcoM!^SJal!87z{G1@T~Ak{6la%Ppk
zF2T!cW9RYn=@mHjoyBZYr~*fBG=XN9%Yp!hUh%erx{#4<Lc@N^8Ln6W&Ou!VdtUrv
zTxL;FYBuY4_u1gtpj+syo|=NILFNNhZZ6R|B}=#UdFYEiNq=0ctbUz%0&dNH7x&ya
zsRij%5+=?iS*!+C^x~2%mVjLyTX4iEqg&z#ik3o}Q0yNOA1}^{%R-N<+QHcsK{4Ly
zr?NW7BS}4yl({NNYOgg#AvDF*Ph)bC6(`KSAf`B1q|(WD0hxHLJz3=1mAi%@ztw<S
zNzV#x3~Sm@Uw>FnNO+a+l6>*>&C&74(}UN?IUtY`?`5ouXjvmiiSHSQm(ml+t_GqA
zoI{-I!VdDPT$;JF)^2X$=g#T$Rlkd7>6hyFPaMxG;FYb+I`|d+iAWG73jvZP#jzH2
zuit!8o;Cxd$Q^3vT7VODQ~|0T*HL{Dm^NCJD%zFrIe*sCje{fl0)(sz<b6&=OEZX-
zO`0@=Ei`OsPnOVkh^nFAYM82L%r4r#eAeJ?2h;*5<Szuse=r)N?sh2#HwU=oOje_4
zRhnOpp?J9+f;QMY;g>IRzZ^yVzC^Pb$pY*<;c3_1Z=kINUbsU$xk~=%Pp|-<aMY#Y
z751sut$!aGH})LYd|I)d^Pnq7!{;SYVPgaRVA9QPBad>K<}3D4)*6J6K-Mml%(2YX
zrTK>DNPKmSOC0e|Q>b{%+tergmSb$Y9W|p~)7V|t$|7{nK+LFF8;j6&q#RO#Q{nqN
zU=mKfgNUBt82di)DG!z}T(RNeh&oaBQ3Z-+z<;;HvtINC!o$v#`sD7?tpIjO7Po*_
zDb)gQBu;J#uY_L1p09+piYc%KzbeVkZsLmhX+U0!J-1oJX_}9^fJpm-?B7z->#i~`
zMd@DWt+g_IE*-2gek`2c8NXJT$?+{35tj|?@*$NT)%h7~jvTEWqvhix!y#VdXk4K*
z+<(?^UY-P+kf5&2zvWq3F?k3@FmqLJ)mc^TG@jXT<dS>d-mY3}%2kOzEjzAG{drp>
zYF$%SPSUJ3J5lLv8vN3yJIk*%pa0498!Mgv4R&`&dxi7A!T$cY9{>N1T#e2YclMfa
z3eICIoG{+fE8;6WTm-yIY-i?vfkVZan}0u0%%q*+mpWX8(fQ&Bi!;~iUvZuu<UsM(
zhkMN~FXHk-uFsg1)6Pp8^W;~W%zt7$IVDN;&iFt_n(a>&XYL(N6t&zo%k07ranM&f
z<}0_BJLk*3%o&rLOvyEd<T^9*QX_JO30WDCXKsdG(aKv+lckFSH0jDhHJiDPet-2v
zo>>_Pc`d9$DlZwbtI21%`MTkBxlKJ0HG&mYMdVdgTSWI@Nre&hTDcxs_3E9u4=l3_
zPWb@x`pmr_S^b+5+t+s8gZyvlt5OkIBL5HehQ<6}qur<9di=*Xa@o>(=C-U27;BNs
z^Y)AN3Fvnc&rPTDCXg}u(=m*pcz>J#qk{g_45a|^OV8x(E<4AL$>L*H?s~4J>wmWx
z|FygGbpIP)|KCXb*8{Boa+avCmJ^gxL)G$xqQ&D|We)eS|LeqYciI2<hI`-m`u|3*
z2U!0WJ$#+3UgZ(2UF+8KZ*hq?UTa?eS-mk!fLOBrhkJwFV*Jn3;iLWkL4U4-)yA5?
z?3i@}otfL{H4ACNVjZK0Hebu*^R1krKag+HaMp8KOc?LEEXXYXXUtP@zEEU%lX-Zz
z*7RVFj;~#;)SC^)`AYMA#5^@{$DtQ7YWxWtG-shkENA_(YHSX)Z;?F5?dLsFBk*v|
z-{bC_h{2sFNiKukdD-A^GJo{6Os`qy(G{l%$2U<-IJa}b{Q)P{^)*qpk!C+*bP}ox
z(tM2GcPnb8bU%Dv0ycy))D0lp7jhAe{fn53*3AF&iQm+<O#a*7E9U<k?CyW-`9Hsr
z>yOIXF?Y-Vv9|O=CR6lRbE;dHqUa9kdfFwKy07`ahxK2|BeYEZ8-MN<<-gHj_*nn*
zL9Y8+|LaV5@fEUx+ojC7W3CJ}4(rU9(NI}z{fS$?G_5~g<!jCSUlCGX1YE}d2j%=9
z!@Y0a{{M|!mG(cyPu6()_cbwZR7@wKb@F5pk*dg0P1NGK1YiZPI!fKH|7=OrYJ%e#
zNn}*26}1}0EMYG5$A9SJ@JxGd*rBa?C3|f~kKD+7Y3h8u?)$nQ{;z5>s%>Bi|KHi$
z9hT02b{_fvgIv|&ZuJE&oAwJWf8J`_xYtaU>)t@>f=CMER&pG^y<7Ks^Ke$rZ$*y7
zwNCNFq>H@wxn44u4>#$RSud-n_CE4ou9Y_KEpg+$lS6sT?|+v9T9x^}@9DZ%yTQFr
zS@qD}&$NB%4Sva0^8JgwwO0Ucmj6ckPoEa`|DFB4Z{7a;jrjlFU6zm>=kV<juL$>}
z<R&2@9Q&4&Bd0uJ!CQ4sazr3dfU+>hkxFY2N7TVl6tgQ*s2DRgMe1fWnWqzQIk3Xg
zNjS%$O9B!myksAxzTY1{dn!{>WtlCU83_UGB&EKm%7GacI_M3Dy-^3rLmSG%3mOof
z;2;{KF!lYcK3HW9h+bs@32lB*)yis$OoZ8~yc|BUf$PD$P~X5~pYr7A+E-r5Dj5hx
zei~!H4po=`YXla5N<ac3?y`uO$TNBNW&8kiSku)I`_UW^JH}VRME|jfga>CQzwDgn
zZX@Io?#48d5ja&{Rc}lP2i&qFIUx6BPH3EswgDT(VsREDcPz5b$Me`oJP~-R7%)%J
zGvSaKM)jC@s%wZ%W!=J<L^0tcloVcw(_&&-A_m6(9_-qGB<5mHQXf*$T#-0IF>%=}
zq`w>3Pz+Ht3VfrORswuTLhMV=hiw>$054EXL@Ou_EqKy7qK96ym>?QX^9xKbXO{&*
z8q#FZhebpuDeyXvToJ#|>CC~gJEsY81#9bz)eESHu%vr|w_#@GNe)+OjN?g6!<qE}
zXun|w1mPop$`Mwd%3fpxEpCa?d3$_*VF&^yqd597?%9Vtn*uRlG@L^2AIi}*W&yw?
z%996v$TWQgpgf%fG!gUu&y?^)%vBE^0*^xzqRxH29y$rpAr6Rth&j3U2@oUA9Wk)&
zrl1&}YriZ<&3d5M7sNM~qTwo2SkyGDAK*B~3+w)W?<_0@+1VuVKP)7I>FJPAvHB$t
zvBJbtg*ERj$E^g}A`pZvg3>HVV7HA(Z`MPcxtAo_E<lv=c-zRM1VPdEnDh#-RC6SG
z;Y3b()w2S+2m00e(J-%^gi}^MEDeLx)FuElZHj?2m;<AO!K`Yjx%+Aa#U4`gtbv}g
z3z)=z9UzGHOk+|?h$=6+$<;i9rYoP-tf>6s;%bnW0E0k$zsq<rKasq0lXJ*;Qcnxw
z>AJ|kz{+-H;E{|cV4Co#botvt6OvpLQrrqnpRXAZN+mL11Eow^9N=Uu_Sya2CGCj4
zc$Uj-on2oWLDh|0<A_B#CSkJjXEixV<&`5VE$|7_f2t>B`>o1xSp$LFZDd%8JzLO&
zkO%REr3sQdhJ3e<#uw4886oz4=Hf)?YxOjW!^NA5+_L&|T9BvxUgL5pZU-5D=$|PL
z6PhffFq{p`w%7w>!XqX<i0S|f*~0EHqM;P?Wu4Y-M0=!%5|&^eVMte|#qI`>W&_7p
znEC)Ve_<e+apIxL0%}lJ&kmCA*h0P@qyM}4+h6{4w*I!c`F`L$|L~X1-+J)JcUynk
z`cwb-%huNB=KG&t|9EkB{DE%$`94g8OZn^1&G+Q^LrWlATYvk{T9j^_Oa*pmm^dtU
z<djvUgv&0||F4sd%<NFPljJ8jn?^T{1rPGee;lo%tB}+)B-dzD&bd&iywoS&7EHUM
zD2s+0fCe;7d5*3DE1^LE9T~(>oQ9#$O8#9a%f%6Pa~UB@6Y}K<>rf%LgeeK8p!?B4
z1g$xet%>5Qy;)xZCjdFe{}#m3EU)D)KsX@9X{#TiJB##q2^(-SzEbnNk$@URygP_-
zfADNId8}?6DiM@Ru2P?`z_$w1a&u0}hG0Dc<-b$glH|7*h4F;Nkn>4r>?s%^M~?=`
z?0PgnR;-CSgUdabT9#X&?q*(T(kE`E@YO2E>*Fs~+U-gV=Fx=wuVq5c&)w1S+1um8
zgNx%MEyTwpU_$1mA-Wn)NP>r3W1-Cnf3V0GJ+zi|ky%YqNQg(gC(GC6qt$u^?(%50
zezaOYTCLUf<tgRSYHeMQR_jNr^`q7L+cXzFTCE?g){j=}N2~Rt)w)K^dbC<UnAQ5$
zrfIk%7aw>)yDo_m;++;9fV(m!zV_pVpRQQx(pwt6|Im?8iT8_kxfM5a!3k@QfB!6m
z6ST?yIo#RVFZ%zFo<4od|MVbNvA$Zh@BflIK9~e7JSXcZ<5SGR`*p<<=>Yi(ESClf
zdN59$+()^ehcDbyF#=z_j86qls49_Tab~{m3O_5v&7yy$azDj>-@W!v4ShUT0;;J5
zlxyqY=;-b7`T2U91M#LeXFNGMe>1Pu7al53TzwfLS>N3=`l}-kFkbXUTh0}Z`#zmO
zSeQ?e+?)DlPkd1<H`K64N|a7o7CYiTAyH+$qa|=FN+6Z0S64K!!<SS}TH3#BlN45L
zs>}KZZ#!lWZt7qGaN7<RTlj9}4%XD>U1O!>wbn^qZ<XZRkN|Mr<RuMfe<Y4#8dl7E
z#60dyvp4SAq*{zJ6}?~@%Lq>|X_=<oNn`p#jMuo|&z64voi(9&p5TNW(by{5Zo$|<
zN2-FndL4KlK}n3=OB&A5WPxV%O8kXG1t7x7yry^XvE$MB#Zv4YR8{o4*a^G(b+P!h
z1<uNNrJ>8MA)jViUS<P6e=DZOx@GItWw+NyLAo<}`mp+BmAkH^rcT3T6ycXPsAWyH
z+OtZ{!RLIzo1oi|Z%OY<hf@-*SdERS6gq0XT2sZmVx(8D7hbMTldl}UjzaA1(Qn2q
zU&;G!CD;o%S*EPzg%pc~aqFszEnxFniQjIaP&dAI0f-wgWY$PTe`*N%!c5w_ILi{g
zQjbjo%Pcour+Ti!cdAfnHwtIW)91+ioVl0F_Ug7Btb|+Ip35SlDv3~FCjE$c&Jwm+
zF@Wpgh;8`cU1-6yznl`5GZt4D|FJPyckM5IRd^~m2nsmVmg6cYm2!-hz1?D4Xum0N
zu!7iF%R8s7zPD34e^nb|inIK%Wn4?Pu?MK>T5R*N!0SU@Yd-%`nYHo>q?Vlj4EOho
z^&f|W-O=Ou&qG|dJJtD@NaByov4O#@E>qmU*2#_O?iW9=F_={D3Tp5l=y2vMKQ_75
z$<gvOjcCO)83pm~M=`mnZ!EiCk3~D(@C%*pG#~Dm@4ndCe@=zNa{Wjz*YHbcH|pd@
z0;oH$fddPOiF$F{(gNcpnfL8UQfh!u&Kk4f<}5N@N511&HJltA(H9Uy+O0C@w6sF4
z>9}EyhYjmEYN#}8b*pUAinyAMz}<D*pj)-N#PpmqFijY%wHTTgTG#_~KpA&pS>mt}
zw3wmn)m0m*f3*#Fjd6HYkSUKHpH3RVrW|ZDtAbtzwjIdoG|B+&9gojrx5^%Cy2fL7
zY1eq{-p%?ed9CB!%?z!aNxl9G<E%^6-L-8EXSLP~)x+=0*1hr>fyU|HPX<afQLt+_
zGoC6FVrJgXGoj_YrWslt-)Uek%>Z+(W(h}WhE(D%e+^8e8Bz|)I{C)(4&->qYOG@U
z#NCQ_G_r_wv{}hBma~RRd-b}i)n`{_Or2$`wu;0TUb1b}_FHRWLuG4p*&c0wxy%-;
zP<&XUvsU#Vz}Bpqx)&33Q-e`V87Qkh=3G^+R&A6XNqH6hiT;_ggj6)NHv8XN?7zJ^
z@dG*we_2eb+E`NmX|T7mm$(0p_Mbj|tpEQY*9JP1VONm0N6sO-o|6zk0(=PZ!|o-X
z5#H-;po=->h^G;#Vu;U)@1vQ|Cem(6!`U{9iH{R{MS$yB_i^ZTHc&`rGO~CxipiAT
z5Kk_a|FzXaLJ)#jV-*R8A`&B?hNRc&9i4wXe@|FUIvePa1py1uFNf#IqcQLFW;E%;
zzY_gUZ}NNGhkx~r`K&Mg(LecB*v|k>uzQ(CNFK+2*W=ew=eynnUv|FhC4u;x#dOyB
z?*Hv<pkHuIS<2DL(J}AzqL@KAPmg*8_vPy``$wmD#a-r+{<m<<w3hY%_W0oF^>Huo
zf2!M9w*H?E_KWL(IDD-C_8`{=BrZeB_Jxl0oOU|Z_tEC*%cCus9_eQz(jn}54hta^
z*&_*YAxY94$KExLNk>a|knM{vctQdtwxx2n?V%(1ig+k{Hzo*sS0qj-CmzBwhgwIT
zO7zg_%Oe!U?23AXqp44BsF0j;P@y?fe}Du*VkHhZVsuSC(ur|6gXqgE5_;lx=ph_M
zK6T~yJR&ZgQdb7ALd&9GAt4^`bvoySblwX*Jm#i>PNMc<Q)gJRVn?AayedmVS=~Ci
z8uW&{eUC&wTL^f4v9I>#N#JjF<k0FTh=x3gQ&(nSx&xzG%lda?kN1U~38|q<e-(t9
z*Z=NluT=ki@N{SQas5BURjd+rA0>NMsID{W4RbYgj7}I%J%No}NadnA#m6=Eauhp*
zyZJIX>PcmF9F2rLGR)PxnHqqq%#8_W@b0tHjb_Ux0DsPWPbO|K{8KMa!BbfbauqO8
zOQj7}nmIV_d`v+3Z6u(4OkenIf2A+9eGDq*%UaIo5pk_tV>q|e)hfu_*J@KMX)aJs
zn~-b#rDhf?A<Z=PebkNdb=Tq}IKhzM1I;l<lj<~Q8M7%TuV_vH)tm|t3CR++80?=d
zO(a#F#7~bdNz}3+kio=saE`B<GOgIFs4g?d@*GzP5nq;`tAAs)&dRG*f3ldR**DPA
z)FEO6(><tpVQCxH)5ER&XTC4<BI#!il-$qlzvWA1Pl0lIm9H#8Z0h6Lx{2?lk7qS>
z$7vAx);`U`hCEMdXh7=_k_8w`Seodq>8qp1Ja41E?7Ei*!9w}QOT7hTk|<^go1|rf
zd2tYe2q$zx{pQ3)t;oFPe`^oC8U(#mECfNC`8A-Zy{6GyuK}S>;;<%r;T_h&iGsU~
z2NUeh5vwPJ>p6Aj@M&mpRg4=2sh?1>q_VB#zSl)Vg2gt&V5i>|a=GbI!wAR=!(#Bs
zjTt(XrWYfRfX`DSfHwVC4K3N0bMLOqCFIp|@3LQBy0n+CTzNV5e_5Yz)oxS%s&;s-
znWJcutKce{+#X<eZFpF8FV<IEYHFmO+)zkoWG&+=){~j^xRh=&tV_^Jh=-D@q^lDm
z3;$M0xl8he6&_S23=@h%r}nEQ`NF;pJ5HSX>$c^*P5lOYj(FN+(*cC!aF%NwPvd%v
zPb`~#xZ=iEhcc~Qe;KGjS<IWhg?Ob6wG+&V?X2O#?9<=nn|dv%e8Ss^r|w*v+l|rt
z(K_^K9m<dXqjl(EtwUnvH(7|p^S0(8V0%k!LjoR`q#{_W;S+i8Avt;pQmueoYQiuA
z46tN2<8nKSDOE}!WggXL4CDoyq(`z)^E&ZtH6gc!Xqy{}f8!z=kgFGD4MbITSTQ=_
zPEoJlEEN&!gsz9^qY}gJvtt*zfVNin=udKcsSb=2$da2#>;h9(pR?IpggBrs_WcE#
zkq}(SY{gWcSs&p9qfI<b1Zz}H)a#+5U9l~0p&;eJ|1QZwT7Y2Vi{w-(4!-%<OS1U>
z{focC&+k8Mf7Kf_NrYp;N6}<~LUQfX+R_v)CK)E~AgoP{og4Dk>gC*EYwjXRAeJgI
zn@XL(wihra@JSu&OO*6V#EyLuSjY)Xcsg+uY62_$W<wt9R!T5{d|7LzZ^qQv?d@??
zijBf`i9(%_IFK5l9_bb%Dz6sCkLqKF*AlY}5(kFse=9|(N$<@rJQI4XtVf}QThVLC
zZl8mMHub=G%Ykw^rpGrzk^$j;3zR`3RuZfe-7Z+El$O2}t~y<{@m%svd+Urj;90ww
zB`6F<n+9%c|0z&Ow=fMhafgB(s{5@VL!AvhgJuHFBB5cF8PU<n^4XM^U8zO;#z^ad
zkdvawf2YKg-jmwzu`RM-mJv9C50X^}M&c+N5pU^cTLRWY!0jgFX!Ou;Av*nGj1FNt
zE{uLl_$)@RQ=U|U*xb_Em?}lm5~dIVK}3+wR@a$z+MxUk_NmYXHtV;!{H3>0u}Kq8
zh#qeufjszV%V1gQauzVJ9p5nhr&EM;XbNIbe|93N{BSoGBhwP3KH^EaR>tPUk4TKB
zX{a2&x~)L1!cSChqPA}q*6y1~o7b{s0o6#<qFBcIvWtXi&>jf~owTJ?@$xB4R(k&=
zd`o8JCR*W>;~UCbY-QO8M~v`OmcVx_eD>oiFTYw1@=C9t@QeCN7}X!VRK<7OT`TQh
zfAU&V@2q&`NLg|OMa^0^wYYF=s3=<xq1VWWR{$xo%h;+sQ&pOjS$mDuqKcQK*zFu4
zZmVe({7uc*t+7;_CL%Z3O_Ya!TOlgD%3VZ1CIY=ziSqLW=&Q`mH8V#p)!<(xy;b-N
zLM#zlf{Quf)nkAY<P*HYLPz#+wV#4ke=@p#-C~ioIrPe3?T+U3<sjCM@wPr1lvi1u
z%0!lPVwdAn(qbzliaNx$KGV+5u1g9<E5Ow<Yiqf`)v&ak7za%)589^pih9H{b+j$6
zZAfl;Z=AgPy~M=Th}JTMTIu<>((t7YUyJ*Sy8SBFl9u{>3o>6tldsg&8(=Tjf8kfs
z(c4MWt@QGi%yu<h{5D$n{pjB-Y2Jq2E;rP))wweXs|Cz<+IA+sE${tmdNyjI%D30B
zbGq|VxXX0wvevv5<PxpAQeR$fN~_kV*P$t|q9eD{j@Paix7CPS>cZ`{;Fa{>6*S+K
zb>5cRZc9D4wT8QbZo7(ByOOBge_E4WNr!E4A<bWHwAY-b(+X;X-de4Vwt`yLSR3`w
zcKy$kueEBRZFNtnQMLlvLhD>rms~-MTv2~)uQ|3?O_pklt(A<GHN>*^w*-~ty5Vi~
zzE&M<qa7{N@>bCA)}TT)mD8;+rdx7{DK^+ZtYUWSJ-~BqUcjrj^J-W{f9JZ;HI%`p
z3R(pLI7zTO2ZvRN&k{{{$#hEGq)GIF;CQGDFZTnF5e{iFRR$aafS{GTYD5y56;8O{
zDgy06pXKLzR$*cg1oL}KZ3?nu<!%9xo|JPHd?}@#vU62DecAdwi^-J4+54~ooU-E^
z;-<+GQ)x?9c}W_IjV~EAe>qH-WRaIPtG$}-3pY4=uZVv_19ISb%Q$zQ$n`gNgak|(
z4T#vrB)?oPy~qK$#*mo;JO*L4u+U$i>zF19kuI`k%G8o??)j9(0Zzt9Xh)7fX&vL#
zLc%LC0@*$3_){wJZb*E|7+sPECzjS7XtSNjHP-OLC8-w!*06zGf8qEG`MmvtV-t9A
zg=2~*zVz*by4<Vm6$p|K$?p|Y^Jq-qM1_V^pSlUKba#%!8R6QrRS5adU)p#2Cw5J)
zNW3k+SRfaNf@c7SBcZF6Zh5u={+<Z()HP8>AbO`mm7sfbN@DP|C4Ac`?&Kz7pu2<L
zbwE6d<9bS9X_84oe+YB!SJy}t4TK}eVkM8kU#t)A(_hd~%D<w^U=zcrEYFYH1sRo>
ze|1X^%7Q)`!LL0==S$~$sk-X(|IlzIgnK8P(eS1(bKmFdy0pEP<o_Cuo)+_e4F~&A
zAM^h_#8n9L!f`^U*wuNe)Mhe9e>xqx0J<^;16`8|nlpBZe_RqLf{6*%CqrtGN(zjw
zMuXALa5UO?hWP1lI3k1nt_CA3J)sjtWT%42bR3W!Xm&O1J@3J11=OOLsCLGvt1|K1
z0dQBN4mOn<#t6W43K5dfw$&PlgjQBFX;(h|@#OUHV!Od87TY8zLi4#<Kt@A^e1<(V
z!9EUM5_jedf71SDVJHG!mj!nI+uX|PP*)(MzepniuXjx^DQt&57SH<PS0sKxFbfNL
zKbfb&r0@3Ky*>=xN1x4Dk6+FDdxJrA<K%DlqHxx^B#Ubndwkq+kiwwjAc=!O&J5L)
z?_Ugiqd{-r44!lXAxP>99y*{crk6PR-TdT9%);3}f3h11X2a3W?%w|X{?5)$N8Zf$
z+C*D8D-D(jGTiMw?+w37j{0p~ZTY`4Kiz5rXypIH(f(+#Q{?|Uqn$_o{}9*4hGYTx
z@X^l326{`TD>1VE#AlPf;1_+5xxAlp5<9b$dZZ7}om>lj8hYfW7kHhGjgDyU%@v7b
znaq*Je_ARALx74wgdpI~20AAMWd-Lx$`e1{OCrCs0WWDt<IV=s$-T3CoektTrZv!!
zth9=z+}MBViXfn^_1?;@rf1T-b<CRvH0pLmN3t*{97R4@U@$l}D3&KWEZMj!^M(HS
z+}S|f4d$57#|Tf{;b^C`fr16RFh&?(UIt#Lf0J!gV-sAR-RmH!mXWMRnL5dZ%^gkE
z@suov1pDyD2Kt$hNInufoUVc*gYd5Z7rf=pW5$vUfRK!5lqd0GZ2nTgmhe<nTgnqh
z4o_%Vv@yZ%<u#5yp3m_jdc~<nV#G;eLQ)|)6#z$R?4v7+rShEBaFS}xg!t@Qw~}&#
zf4(DB=&s)(H;rR4%etEy`@V$AVjGw=_P~L4$P?^C>QCT}LJ5+oM>T2|cSP6J_t6wn
zU!#!0l%t;D*%);*!3H6Z&InJ&h|lq8Z+|@89qhU8{%~jFJ>Q#*+<oGC&n6>0+#Br;
z2beq`x=+de2ot=!|NPnBVBn2*CZpl*f8O)`0iHZ}EtrRD?iA#wWU{+Ioj%>!*&RJ6
z1G2mS?D^>VV8?yB^L!Uir^DUn*xmO=&vw1%qsh+m-Tmp#1W%t%r=xv5c)kyiBdf^O
z$@G*ZXVOw9Nh1vp_$dqDLbFB@+CbOW*AAo-bG}C@_0VuI%szO>Njx^Uu<x_$f3uig
zQJ>7nF?X?#rO1|%ASbRMnX{Ndk^hdZk-bgBga+hD&a$FdS!Y9_^^*ETCZWv$0#kS=
z7D0%}4dp;|XXj@y_XK;0O|y^$7K%^wYiB%yrLTY-DlVsvN-g2iR3y?$uDNkqUdmOl
zWYTTpn_{@CZosEJAt6WLqLZ(G5d?!EnE4nz8<-z_jCOZ-bZeLRgajymg_m7(QJJ&B
zM667m`4OJdSpjhay=S0X5bcJF128ApBQZx4GG*W$rcA6co=&L?xM25^gdRuOby=(p
zu&ZpENlb{fX_6ZpL_XpDT=cX0<tT(YNGc%bB>73+xkWFe&6pFrJ6T+Qu0!K{nd=Sg
zc~+0G=T&s(jj~wz3lk52PSjfPkQZ{fLd49PAFV&1GoBpy6mx0HvVM-y`wtQXqR|))
zM^Af$-T+dXY^Y)<CMC&+JTPUf=Q9`k=FSAi)*S_C&>Qwfy`5$_F$q{ga)7K`ZF(hu
z>Mp4|D3wD3+PyqbOjupjOGHEPEkFyFqB*`I=*e6@xn}XD<nd2`dI0{1h2C1X(e<4A
zL}}3CeH6+Mwt@SBIOM0WKvS;xn|SRBM@OgUJ#;dK_O2<Pmlz$il`wQEWETK*l_kid
zAUOcM%V#`mRR{t#JyhgVRsB<s+7CD;PCydu8`(s0BrS&6eOzU|Na3?T!7%~&{f#S%
zon%fNs2!vr0v_6bV8Iidq#RDSCO!@?(S*2I^iN1R;Pw+TNX9{3l9|{Al6iB>Va7RW
zSjr${Io0K+PfE;EfO4EDo%oc`9aVA>GS*2?L>dZ2Ll4Iua($M1LYPY<o}D#=eB41G
zAjQck^T>%xzj6{4w&t^#xuWZO2vo8fbC96M6bh(ViHrJw_I>aU0G~vFnkgJoY!vdS
z<6Ps!ojZDp6nMu4xX?Fs5N+)`6B^1>iw$&S=?ofwfT-~PRl);wntLdF5-DK;ZDz+*
z{z6FV;tACC%n;cUbZmF{hlLa@a_v9`kNiwawSl7xRfQcLT;rIaw=4y5M>&IR%V|y6
zjKE0{94hF4Y0rjS-|AVkPg&no#1EK9UUYGqux{;;NrW^yfQ>?Cd1tgEI-MF~vFKbm
zMuCJW`V-5;I3gE%GAA@f>^el>IXt9ML=rm-*0wwYyQW+*O$y5DgnAwcQ6G6Riy|Va
z3mlSV17a^u=8W5;#3jT0(PtCvBh?lh+8ye0R^X9;z!NHU#|Ww;bd+#>E<ec0F}Z=!
z?f^j5f;GTw9iE;bNCt(n$<f-4VrQE=`x6s`$Vr0INa#D_1MCG`+t321p-TW94&{~u
zrB*!_K1onOZ_t7ykhn)kYaWSW;({{IAZ=r#cw|dToTr5MM?23)18A0V6p(lZ<B;2f
zOy4(uK!^v1C8gzO13*!Uxf|$+azR^gkmVT#0m_#dIT=RqSeD{?q8~j$pc6}VLK3KF
zD<rw%qyWMCRCF2MP|tIcc=hYN_`W5qtA49u!r=043&BCeLgnEX+HY3$F892-i}E|4
zfMYc}IT8y;P?l(3?MU)$VA~p7M3ZcPw~z#XrslF>LPK2v2qT_Or}Rc}*e5=Sf=@b-
zjuTouInr8|u0o_Rfpcn;)k`XAGOd}l<4Ja^Z7>o_<s<0`q$(T{Pf@y%B))%vhP~l4
zASZn^SbF@tz=Cx?A8Y7sCpG(3ctd5(16#NG;)E-9V<W8Qr*g_HwcGmK-net1rVvnn
zVG03A^MQQPrf{v2nxh%mHp}~=j?IYVjwYpu0{YUhWWE8f)iLU-lwCOqshc%^hGQI%
zgv2H<Rd@;ZHLdFyW1*EdIomlEpmL(Td<S}xz9`Sm%W1Kb3X~CL6hR<zlf)QB22XiL
zp8d8Z@s|w-Fjx_47<z6&s*%F1J)ClXH#zWUET+jkfYA~2D)tJ#jiy4BMI~8C?wuga
z5^q}<##Vk;+xC?Dj9p4Psl%y2_ZbaCS1p^UXB2m#tz<S4oi$A;x6HFlqo4;tnMEMD
zj)tl0&jSo{lN9-&@(?Uns<-EWFSwidyyn}Y6+AD}fWn?&e#!gT3us8i;&IdqBI--X
z=4S`#woLPvp^5|+C^mdP>bC83R&L+605$ag04SuK5fT!m%B7?k>6w^2DSXH1<^OYZ
zDwp4i1Tj4}e1!%tA*yp_Z>SWPGPN8R(pgMoF6q)4upmpyQJjXM$|<LG9HmiJ?4tP>
zs<+WRPgdj3qz(c`MLEn0mraWVCVz?sRN4+9Z)p|p7R)p&du2{Lbf(jC-{Jl;;mB-!
z01aFP3@W+S^T#g#xq0^H=;P_Z>*MpYgTv!3vqb_J)h%uI5&}0M)6-kyix(1wZQF`_
zt%C%y?`N?1Ho7L+v+O>)2FYD|nyJ>ni!?A1XxZDkGHOro_5dfyr<X!NVt+3tIPT?C
z9f*I~MghSgufwUA@2{!5YFV3`)~_+Op+2%rapF$RIakGioASD+g>g^ZXj~%bN<<Pj
z()IzK;m~5LYuj#T8BW|NZxRl$3=zR4`)}&C?M&)@na-qM>&^hU*Z3w7jKilc2|3Zu
z;2ygU!DHn|!d}sYjKITiqJNE`8yjY`oA_+j3nUa!(nf>f^ZszuA3p1IItvAdz+vJj
zA0a1U4tABm=itzDz<}h;2=hfdaQFl5bP!TtUrF447Mr_8(?(zuLQ#OB6Cpu3o~1Hi
zDq$!R;zz=2Em{EVxHs#8eh&<7k&}SW&tHM>5_BVx)=d|K&JKq=Nq>wF;+YxJ4eOTt
zZDeGJbKkK*jZwG2oZXltk~eqtw+Ri1GfCY`lJGI=4tj&Z-u9q37>a*J@Td4k{Dfb7
z+r#ZqZ*O~VdpIyad=k!*xdmo8*d7hGcLv+LgYCV+_Woe|>0tZWVEg%CdpO9x<Melu
z|7tjZ|KvaF-@*2f{C{Pz5C1;xb}FWagjY0XA)K7&y_><H0wZ=DUS;<5?2a*SOO5B{
zn>Xr?a)^H!vtVp)>5A4rlZ6n-touqdw7<{vDEX0N)V|z7ANq8JNdN&|pTzd{>BzVN
zeCp^#<JrB{PouJL1$fgKOhTu6-J(lE{2rh8Bj)=$wq%UD|9^i1wKw+%K{gMWOuae|
zpu{SN?kwZ16)yvJeyRT03&?DP&;!3Dq#NYHkRGX|XV#-6rn4D|$4GRrlbP{!ZfC@k
z7$;=5$oWr*PAwTt`T4o}I>Skf0}W@=-OvzDfN$P~_zF{Bkn9+#lO1(@Y=2^K{1nje
zEy3R6oVYCX_<twB@QP6nT~g^BAhZU3%yvywK>_S7G>!!bV>Hmfq1LKhksORFkWL%Y
zmV2qM&K8yYD#Q*MvC>XWaarh+DB=D5X&mN)lRFXfoDeD&D@^S==z8tyV)xxkvgqo8
z)Lvs_)II)Ziv2%j_^x?=r4)PkzqzYI!caF0p!%~IQGfNP3C-CY_Vz*M+On9CE)*{l
zI3(0DrQ>CULh}Hwb<j3+)3EF1kTGjrSFzW0xq%KK5E)8Av8hnHrzDPv2kJ)-hLB9@
zYz`(BrDMsuwL@n(kQ5X#?;uR*fmJJi1LE@((4#b_;q2Uu!wJ;ER=4FStHk}1C(8!M
zNW+)*O@B|rzaVjrHv=Cq(rJzlSEVq?o+^sMQB*iBP!1B=n>M9E?gIOf^u8Gv?m7jJ
z(^d^zDJdSlabvl?d+UY6QhDh!7?8K}P3x25P9=33b7zS-o5)XpwJP=1l2a2gwI`+8
z(X1NF`gvT9gzmf1YSLM;)e54?kxaLmW-_j94u24NBsM;<E+(-Ikd6tY{>#_hVTgJp
zOtfsSTSFcTFby~PmJ~`LS|0XD;DNmr+4nVzFNMy-`(lR{|2XD2Qex^@m|B~leCHfq
zIn3U$+(T+;6)5$U$+fQsxtco1=*b^{AR4-U>Jik<&3z9B81>NS&rccwX{wXJa{j7I
zzkfBvQ}RJ85P<$s`2Kh45Vs)(tMf~8Z6qo<2YnZEoKQZcQrOZv{6V<5#*2T;fvjP^
zw;n?yq$VT|Xb5u3k1=-18Hp(vz;7e6qH9dy{5N4}O0S3zV4+~AJ~Q#edH~l*7KZXT
z&L{_sn2gcRATRtXj!?G4BPnia6>NoNpMS}H4!NRkqrfYE*wlv#Q^fcf`7}&#Bo43W
z6$uF(fOs%q6n;f9n`md?yYncYPKmp4ebV1BrhEsQFoV3Yfp~)BB#q9*ePfvrE&fOn
z^BayEr0avUTN;49Il+E1Kb#Zy@(d^Q?28B|^D*l7<qN-ettTu7;c&FKo85%!N`GXG
ze!93g(|4h&81|2dk29rbPd|<F6tQQUMp&Ad2P0#)NWs2zF^>tKGv8AyL_C^e>ZdWW
z9tm*1nkF+ixsh3MSZc<kJRlXLQ8N@n=>Sj|2z9qO461xs<rvfrfFaF)%Mmc1%>sXI
zzm<q1SM<wNq{{M6Le;65xP)GTzkiBxyjG4y9-7E4D}(jB1JBJNFL2Q*i?4C)fghao
zY15_*%3%<}KQlkX#nq;)ZE!$k&Vg#X0AI*77ZZ{s@-T;!L^he(a^$I-Dsu+Xm^v<#
zr+CvPj)LZ7Oe>?GO5UKKP@s~CSRMR{@g!&Et+%699mL9$+_K|#Od_AU_<xY4V%HrS
z>o*N)kOs)uc;rsUr90~x^NuKwQy7yUQg24o@IfU+f@Hi1dJ@p^Km&jyt|xiJ(UWZy
zk}DFU36m3Qe_&&SZvdM#Y>y8*nTp5TMJ$8_EEOn;a@mw6d7|oyMblPgDJcZV?MixC
zAuok<xx=$}C{3uZPd#XeCVwek*k+S>)xa?2$F=)(XKw@kc3B|yb7yaFI2!CeA1L3f
z6OV{xvaS4Bv&@#EIxj39Q4j&25TQr*Xy_5*!J&mfM*Lw;EZit{l6lOM1f+qO%#;f0
zOzBM@s3=$cOKd5!!R$9eZj^#aB(UxUBw+DkjGhl(Qx#|;$6K@4{C`KK4>r*2G)aLu
zkQ>)exe&9!x_3!DjBuJT?qZc{!}>L@J83Ojm6hEQmWg4a0lu+r4OLuHJR`~B*}Hey
z{GXB7C1C;qU3&xTwb#&(<~Ju~j<2XtKNTVyNT5%S*mbB++mH}oCI-r{H1ybYK}uBC
zEap?!BxjMP0%@>4(|@_3tn&liQ6;ey_LpY^8=rU4{bMt#$7X+!pIeiXM5~#yTC3nc
znJ<(50SZVGQ&%$ZxRt|7oQ4i0g>t1$bIxM=yV&}Dkc~BP(%(?7aL$y)jtWDun=ABM
z4vl9iYw~4Vd9!@nJ}O4>F=P23<pbqB_EE2=j|odmbcH5D8w9FE<KUNMlmtG17pMqL
zKOJUIO)X#RjS5E4a?wZfumc?LudpwOT%A@k-(%OIRNHLYpJLyiVD~bk{A$Td8vzRq
z#spFyU9dMXozW2cZ*x1i72zl7&wB%o{+gRsaW`v)SdT%IJhwpD&YudoQh{S}*YY$2
zvXTc@+U8@Ed=#^QBy*Bx%ROIz`co-Ja0;R1IJq>({r+FGuOZOm`|<O^^MUo5TsP8z
zUwl(u31%&1<Njng7(B5a{WB$Ev*Bs58RLX(Rsi}Vi++C54Hi!Jv-|n|DEP3o)p=y*
zD>8H2K`NjD_I>8c1R`F{B8P^sEU+u{$_h%A@AR4ltbn>P<7}GrHBc>o8q4+nTHQ6y
zW>#3e%3@-rkdn+ipZ_Z7qhj1s%-zgUgV*`OS+cwKl2N{4%B|M8%+he`rzCVq$!}YU
z-{Lm*0xHv_Uy}*sn^C4GwFephz#3;eaw8R;oMXO16-pAT=M{JxwBK<uO?~D4DqnZN
z1uR=CCKpznyI-@@Km!(kJ;-<P$?{It4>T@4i;aB(EOB#dM)|8~tyYF?a5)glPu09j
zU^yoNeNM2*oDZA&uD)n*@zZ`;Dy)HqGkveWp*$;v0$|=#e>hO$xs!<zuNd}z&?$Wk
z+GjCwv=u=4^=5-vayxCF)eC${kc(p?&8NOk;Ydr02qpqOKa?te@Zm})_ohLRCW77s
zkt7gY1KzbR4w0&uEhP`n#L0QYCjeO*E*%roZu{D<b=ciGgZM*d!P3}a*P%lrC$l&p
zJ(4G9d3U&1cFpN*a0$<)0c~8slxO<?dOM|Cb!fzMeCFgVCn-4S$OJ!)bM&(!xxC{t
zWJv~6Do1G<^`dNl?<yAtPkorrTvjUEn;4@gCQe3SVxha}<ZQhIB$}Vt3&^)tRB@``
z5-ylI1f45e*U|y`MJ9pNX$}uhj^6T~cHG3_LVK_4LC!*wdL?|$;nlY))tNneuX3X(
zV;=4}T^vps5H8FR4I-JBUG0Ku2gIR@%(3C*d$P_cb2L5$GUBx~QkS5Y1QdS(q$rk?
zFSdtIHV^&;{y+EGUx7d9xf%MZHFbm7_?$A2oI${!+~}?0&|TGO6{Is<E2<GpJYlH&
zin-YDf|qMdKz-2Ed~$}eIEk3+I5n`wwk8J^vI1+(HUgMf6`9D~F-$HuQvD5ul;G*f
zoH#OJgd;I@Xq4lJ7jhJIXuW?;IOnSVjd9#+GekQ2L5YanQx=l0prP&|pmB26MRY1l
zN!jl9^2N3zWK!SuEyB5?ags`w-{0WMerWl@2%#8m8b6qPcTKw3k_kUsJDXt|kQk^Y
zPEeQz6B2K=Sw^~NCo+c1)XdtpH+K6wP1QmvfyN-muh^sYhWvzEh=G5{+1Es18}`|P
zUXEil=-AszE`_)!CXXlBy+kgKKru|9#(N90J7b*FiBC-K;h3Ov8qR!jE&y(;eDFsp
z_Th%0NEL!@?&;BcDXSuVqR~qnP{H#)fi(8X2tuEPW<f%8{A2}MQXNsX4px|rh#+YB
zTpra))E0W#T3sy*XeWPXXsSAbHc4;RLnmifyW8U5{VjER-%{1NF#Qv<Tgp?F?LdLR
zX~F^_uE1>>$j(9|is$1xu{tdKl<&-^2OK{ulehzeQra~If<IkcoT=1JBo_Ut)2H-S
zX{owDK^%Er*DQcOzYA<`0WSx*izSzz)O=qk*WqkR1JPP?Rrr5<HL&xR&`fZ=HVvOu
zW1Ek=&POdb^&`Mh1Vo(gg826?ZJaM}M41e^tx~wYU_f9Wi6S8mB+O-giIYJu#5%|~
zl^JBt(}={Jc!V37!ZE>rMPsT5&1zjyWxg_vuU9s+Hx1o_GQCG<>bFIjp%KUI$v7>F
zq$(Xo{Y=B5t51KXi4M<Ox_LtVO0jch0e5Lkyy~4(Q%$#fD>Tm^7EfM}s326x48!6K
z#f!siAo=PTCUX+3g5m}`mJZ6<oSTS5X`6jEcs2k#uVFOe1^d`wd8ghTed$h_$VAzx
zy&dS%-j2E_9_ub?TU4E~v%&CZSi)Np5FvFc%Ywvr1^a&^<h{}5AwXa$nMS8poxC>I
z(I$H(dW}O5>wKL{dnuu-T9Q4es9~aMjGCPjsn^HTjO{ol?JhakDi}+bnr=}cqf$<M
zteQokYkyjISKFCdwXrqNWmYt@HWJ5ejI0lAW_>_IYn7>WHDhbj(kdHU@6p^^ZE#)L
z<l0C)4`qLHy+@;Kt=YBN@Y*;mcQw4WFug7}zTS4?)^2>gfAedT0d@rwY@5BmwF&m2
zjj$`3VcQvE8!2clhS;ygQnt((yTlyZEPbuP9D9!j*?N=g`i!!zM6w4k%YHrN)@+)+
zm2tL_2-jzvU9)-i{tS%EO|*A1(l!g#4{W4;fKh+Um3*{Jwc6-e(8!Fb(u`9}yXT6!
z88qG#-L^EeM%!r)p*FVDTVuovC@BN1R_rVrY}Md3n@H=2wPYb(Rol(*svg%{7<3!P
zeBJ0)47#)p=hdHP^KgE2AJjbj00!bZ6LE!+xP|?-niB8b{8};;uZrpenu^QD;zrA=
zLGyos&BYbA)q=^m&S+dT8@KD;0~?NOx@Q@WtIfx@0eJ)QIgW`+M4x4A)al_>NJf@B
z5Z)I(7dr~op^_>tO{Qj-8NeZNytJ#!oFYOMr!z55KAWLfr;e8;2R>a=-$%~7^S8rK
zattuy)FUpA1?Wm73u&rzDdcoY)Fr914Ca65q%udjPXZSD9*&%FW)-8TyN@u}-R<dI
zXom(DJFAk6hY1#r>ZFcaQFXK+9%d{{Yvw<xX}R#dc`KaN;W{4lMm>}22kRVnl0Y0(
z_nG~U<6xgNpUo1+6OY7&hbCp=i(+oX5^$>uodQ9^s~kSE_Zp0y#H2EH970l@EM<R=
z(+_0qt&ZL3<uk?<n**%xrA?h_RVL12ej1S1EDe)vG8|L%Em}a(u@G!8X~?rC0`Y|e
z-skaE{|d)_pH6b4+?SvB<);;E#%{b~r39FUR-m}1?q6(_OY~ibvyJc_kgdW~t!N9m
z74VX*`iRPa7u{~Qg141j98zYap-z9Ip`|X1?Z`R~I8I20&Phm<3T~j0q9IM3V4=1M
zg^^m%lawzeOlJjB88XM{{S!WavW=cNuJ|_%6Y8Uo`;1+t5i+3u3waC?cg`TUhu*cU
z$J{3*LL>2BNdD`|2h;P{%u9We>o!cCjBwXuAFHxt5?L9%U>C=O@C3xoE`WbM53z`Z
z3Gqoll6ZjvXh)BeYPB>#!9uV@^KLdgW+gP$D3oth)+ww2{4muDO-o<4Vxd7JU$sz2
zU8>53gWkX-^E1^8yY?+E79q)3xoJpAo=sa-{XpxHtQ7cHs4_;q@6E&IH3M}tUa@Xq
zK7h1TJ5WBhjZ*eUUd*C=8nS<bSFbD@tgbp}bt{WJS3;N)o`|9yIA>AAhA{fnPkG#j
zx?=qa4f}#oe3aDM<MU65Ksq&<B^?$jfP)F15cQOJLN=i}4zw*6W5BKmqKU4kgTx4N
zOSqHy2GpXLY_}))Lv8`rMyAV!n|rr|P_7>7vdW@0YqkvYp$d$C1q*++a=BWIbu<|5
z44#gL&JGz3_D6*5X+5o2b#!M!$j)?cG}?LgY{%Pi@&0H^$kUy{bL<U9-e^SJ!C*Qa
zcuxmAJ7kAE$1Z+~pHKG(Q*Za_$Ux1OzR|v$)_v`&N5%s}uZAaCg<8P?wh;~IB&MJS
z3q3*5?gVqac0ReYxaWV7tG+wOG@PY4_WJVh)!0!ip0dBUx1&4JrUGeQ4bp}xq-8#m
z=OU=UMOyHXG6yjslfTM{N!5;Ae&(U{rmGC}lj%hqI0k_PXO0hQEu>jv4&=*Yp}%lq
z#*(Sf{AFOLRYjQ)kE3fbGuF|vcwO=o=t8%re6=@hX|52vSQ&o<s>9)cPv*;N8CI9m
z@^l^KaHhuOuxN$W0L9z?hfO$~3~7s59RhX1o~;vPms4b;Vv=m6!jbJX*~pGY)|yAQ
z2NhFg+v<mvEZe?aoi5wzksbgwemdk|AF9eyQ1F3zqR%B>nnK9sbWSSw6Pyk`)9$<Z
zMC#UdXFcHXL-KzynUlEgJ(a7tvWkKtcv(uYbh{zowM-B2MOCEhY9)oMiV7EEt?OOI
zs+@c3yku(KLR$D{D0JkZo}M+$^bR!=axURG@f^tN|FDVffl|ESVg3lZqPmSF$}B!S
zSK>yId)1cGu&LCt{kDw1p7l2}|2p<x-T?AjK#NVFybXV-iMFyBDG^*IBnqrsIw#Rc
zCow{hM<$=hsO`6q^j)!u(wysz@Xb@ML;a(CM!LrdUozn^UK(n7b1I11%Z2S4aT`Pe
zHAhhQVn)Ku$oxQZ_g5l$*T~*V`Uc^9I2!FcL;Q3&9Ff6(CiCT`@6n#OkN2j-;b=H?
z-92|_`h0&nnoRfhMw7i~dpl2e@pSa;>15X<lj;8R9T&S3GV<{5QxD_4!LwZhx3M}u
zGPP!}s7Jstkutgdz`YL2GAf}dw+h8r{DV!5zM=lmpPQO;)>cxPu1}&+u3wpJOtXw~
z?MhT|d26U&iRxU=%c)*bW4c$E%~CxC)GQ)M*7bi6Hp!N$-eL1n!YW(e|F6IqBb}V4
z%o8&qL`WcFkp?)#GwIhqBcbR`HpSvOH`3Q@`DTfc<o)(J@u!aR`2fk@lDjmAVk|i%
zabnM%UY&Bh_7>TCP|~<XK}ODM1~O~}0vZkHDT$3ZjMUyG_oS|T+RZ)s|JZxi?zU}h
zQFMQQ)~~>pyHDb5Q!l>~-<5TaYp0F(N>bn0ZPyyP9Wg{g5|$}~B}mz7n)BQ5zyv^o
zZ&H$-v=zr_W0Anbdt$z)%>L5V<V;*bg`GJuDAy$DDP*yh;>kEd8qzT}sZ8h!Nf)KH
z_?}L{ZiW#R$kxn06zAc0mz|Q;Xh<I>0jGb&4(E1&!T4TW58aYNvO`@MVYhzM7sTbs
zM%^md{b{;2)k<Q#RAP`WxOr}odq~z=Y>OVFtcSBjkI~_SliOy1-6Dcpv5z&@o?dK|
zm*z0uGLITavGCw05eVO8m$GEzNogi5yiOSmi6g^+l7&>52s{Z_&m>^;UQ+SjYz%*`
zoS<%T#P_a2U8Ym2RdIYeKB`P`D^Ef?(z{e|vmgNy$I)V*YseU{nXZprSLS5}iUu;T
z#&J5KXudzmH!*q36sabmnqm3k-G*k&V}YK2qmDEe(jVd-6cCtv>P^kJ@}Ryi_?F;+
z_fbOXw%rXog^Lmx+8kLb7UBd1{W~z?p;nr6S#}Tkuq+5W*bk*$M98E?EQpyBgn_Ut
z?g<&`OiFmZ!_*~?!LE>dKR7{`Nu&fE4AEd0{T&SquoJPnhL>@q1hy!Vo^<gd=;o6s
z^`9@hAG@D#5Es+N<xN<YXpnLP76@5m;~1Yx@@2P|Po)GPAXl(IPsQ(DWP!x)>FzH2
z8#)>sJRf|K9nZOIPTy0$E0>R@1TKFZ40vwlhl2rnhMq#K&GO*3TB`C%rZ0Z^f4hgh
z|L%T9yQmK}Yb)*|fqM>fD=}}p5_dT8WJKF`3vtaDnqzN?4*&U2UOdNdr3D1`(BXdx
z!VRZ`>W5JvFv8(K|G6g#VwE9^OLUIIka#JdpTgNc*yQXV{NZN*V9nV-XfS{KKz(1#
z{eUfqk=sS)djW$#aoWmrXG`4ZD0@DP;!Gw;u$xj}{<CztrW}cLDc(a0X6gxcSKwt6
zhgK$&k-ESA0aEBpre|Pie=yjSx0sgX#QjgFtSLxwqp~R|{f`~e)I@MZJSVaE!Qq~^
zeU!LKcbA~4=<Or|4~bAFvl4&!MVUx4l?jn9h`U6gxH_@3zz{_}aVQ};i~^PQ{4CDk
ztX@m~J_~M1VDVWL3Jhi`O$*Fy?8ZDg7;sbfFdV3G`j99^Es$bt19BB60!ngE?1XdH
z7DtBk(n9?^OvAVXoifRgbp2s6fV31&cXoC<0a<`&_G`*R7Azr6Ip}|f5;`3n3=Xta
zxu~Lc#<%j#Njea&L8VF_UzOJNQ<BhXDX5ZwrU6)Z?i{ITK93^r{0d~91#(VlVKD3|
zi-JnYV~K2DFr#DUEJ2@-tiPj(Iv}AxNNOcwd-<}7$i7%yUn;7vHPmUX%F8SAvMHq%
z(|u|KH=^P%gHFthY-4}QRKc}M6uwGTy=J$>OZT;*3R*dCm?udK6|;(IrKOc-@gPjm
zNv~vnZj}#9rl&IDqU6vukikd~#n|2*k`crTAmhDm(26r0smxgY1f}J2Kb6I)FU(A|
zUzM4tEC*3m#a)(zDc_T$@}3lS<gj%=wwac<nU>pSTFzxHE>nM0WRAMVAwKNa0=-0Y
zNGauSsTG+4HIYnXCl*Qz!Yr;F8{NwuzR4vqkMlpI_KcCBuwb}fVV1(0$Vw$^)+W<d
zKHF8!n$<8s$QTe57!Rb44(iHRxgG4(c{7ymv)%)FEfhH+6!fyRgRyr~d&dRsdL(l=
z6t^Dx=d|d+d}$>C=)}3l(iuw)CV0mry=2Lxn9h~5qZy4bz#j$0_Ho#og>&}=m)xiX
z7=J@#S%0tX>Zn;)NA+DDt=`oUbhRk8SCKMhg)BcKMW}ByvsaM<KYyT9DqOK?3N-l*
zwfMOqr<9$=_NxU7#fIv{>>x_@i4UhuRJz3Cd;%qU#9A$4N{6T%Tl4C}GGmS!jc<0+
zOoInQ-Mh1+m;3#<r)LOrLD9BKBRF>1xPL##)RPk|?T!1v7~8$M18m3&NeM?sM;!q|
zY^V(P#ck%tj-@+N8WcoiPnARe3wZKN<|L$yIuOYe7|9B&_J}m2g{;5YlEYH(ItCS$
z9H7j($n%n!u^4=03obI_;-7J^)29PV0G<4K1SmiF+O#_eFoYEXA;o3ny3#U~>wnu9
zDEoje#N=v;h8PH>h{rC>=6VdIAGxjt&0DG=D;Aw}vfYB?lenBoYaDSdI&xswXP5CD
z+>)gwg*HB>LB6Le>~C;!nnu(ieRA*1(0-xqTan|(Q5Ac05Qb?7^&RcM-c^UPuav1!
zkuU6%7lXl|tNQ=r`Pb5a?SsA}9e>ojU|}d_Fw)x4@%YK%zV5hSVCX$;NwEgv<cqOD
za1yC?Mzl~ot^Fx?cF+}@XCu4uJ>=3`g8qd)huotx_&CQ)G{Xymu$GrYz9;3#C?i7Q
zIqX+*4`LM=2~5Gx#F_I#GF86K+E_>qCXtRl<zYa*=`K12SC*p#i+DB@_<#1CP9~IC
zuZio<v6ti<?sd}M_KAvBFs~=*hWW(f+(pg|>Y#(ciz77pJL)@R(f1<PMZc@IZdO|O
zFd)QOc&)(i%M4?Ris*ChTF%UZE_9sPrT7<y{U6)s%RRT$BO$f1rR58}52E4R8ml~U
zy#MZp>sMF3@IGwZ#$YfQ9Df}gz`ujRAp7sp==k72h6l%k!-M0&=y>oSgVE^l_~1X#
z;6X>Oo`{Dy_>aNbZDj}d2YIfOz(!VVN22lN40ALlpy~s~0dabr&Zkcnq7!{*bJW!#
z-nytKgM;=;;tZqDpF7`^Q2WU106yr)_ixa68Rr!b!5&DdnfOWE;(t?*h3F}8w^c30
zaeg3V((bNk71YE6E5E+JzWn&^hx1n-FMoJ{{qobN=8yy&(G%iwQU&vyrvg#hp^K&@
zj4xQrO2Vdm`h=)wyOBdsH#PT37>F+Fq0gTyN*djrM6L_QaI%hNu_*MT5dE7o&&T2H
zW%pB$`^1*fyFLtliGK(7xw|We<T-kDtIjhonCPn&XPQ?|_0=C}u7{;_9S;cxb8-2y
zn;wglJ{Q8LA(_K6N-Kt5%*=}B)Q`_yDZ+(N58a<Ar=iX~`^_iS<mZ!bKBf2WXONpp
zhfQe|V4Ttg#W4T9ZUJ0g1o)~Y<f~pcS@sl)F@wG~LNga3P=9VxrH&@#PAm3fMkY;}
zU0iC`Hi=>VFBSnwbqB`w+T1weCa!w&mF&Me>WFrst4~TMG3NEV=z%bGys34tob0X!
zz0GRVV_95DzEQC)@XKmg63kw{F5GRN4fRt-z{SO5!PZOTqO3lrsVF~iGNs^N%!<yf
zeuo2R#hK}T^B+mi_vfx;071r6aQ26z<KCb*=nYRqv5GUPPohLtotKKO1RF4Eh)!N2
zPUZ^|oUyr&1A@ALe>v=;-kBgZd#ApyGNl7zG}EgmGP5M_c}KfvsIGLE)vW{~f3syg
z?&8}`6#{vhhMc+r#7%Kx_C|K)vrgxcRF~qo`exoM$rEgn!Zx)Hc1N4;%oq<((B0i#
zPlqeB**rGxfsJFB`iRZVv!09M<+aS04cu(%Gt!d5lg#U!=Zg8H*6=EhgOq*1ETP~%
zQgND%NU7!sPEcQoRDp5k%D#<qf6#tvPTvtra{cB?yqC9w61&BhNU{SF3f;`4reeyL
z&2J)AibrdOF7I?M;-*U)-9s2%DG#wkeg=oour|h?gKo)E#*qQr<T23_59g$lIc~<`
zlAx>47W5Pqov)-q=<=Q&geT~4QpA9?I79UE?{N`OyJm~rlBFmiMb+s8RVZ5i(!A53
z;c3tRf1DB5Cjsw;zT2#gYW{yT8Xg{I`2YQbqv4kSe~jnTr~Wgvpz{-H4@O-gPTNa?
zF0ef#C+Jxpn6dt|&Z~Q0$LogMMPK=Fhj*7ruLK}yv=4vM`BgNT(0kOi5@6zL6MxHI
zo=N45v~PrdicT*ihC^6-hX^7z?z_}d)s6tlCawAb^}-42{uj6Yi+9r_k$)?!ihc*v
z2|?3!|GSI2AG@oM3db`iZHj-5unP$VAm*SLZLjk)m(i~TGDurHVF|BdCBg;0%KBrx
z(z;A(fku-iXgK}j8yMNi%jUby=x59}NhoQ?Ant4GZR-wZw@?b2Y`4u$Df_$d^ePX>
ziLyMF4R@DIumm1|M%X~HFgcWv_ro;TD(#H9!a+)yw!|WgXH3!RaX~_Tml>rM?)nDx
z;%XuL7oNK-RgHI9+UmN5RJ~((UQxF-9NaM*8*R+Swrx9U(8hLl(8jiHG`1Qxw%OP=
z?=R1D&bhAd{kgF=eyq9H9AnHeef_1gEMy9;Wk*j|etbx-)$CH=jxbF{coOTv_c%^<
za(Q(H`|7@}VCc^cEd@tRBu%=K$8N?+350l%6Ofyw_`a_V4|-1nj)pESxToCL2klym
zq}`n!?(bK}^Dj9}Wcd#3((x>dDdRD^>|S@(6)`0T_RJfutnzuUF89xGXhQlW-AOuw
zT6W>Ryrno2zDnCzJWcEvrF<dEG`=%)4A}p)pNb;BRq-ZfGN-@~pR`p4wzD6<@nBUE
z1$j`CXJezCgN5Azq=?i`Mc5zym7s;|=&~YJ<hW%m$x5sdZ8@gn63RdxG46If7hc`X
z!>go$KC-|L*ElI43LZ*^#(ZPIv-(R-_1xPFZ)Hr0y~F1-EPnBG-;@=0_8%iP6yL(m
zYj6XR--~l6Wu7u{)KceUVeg{EsH)=^lnm2nk1<YTbGPPzL3A0!%ng^cU^=)Y!)>ho
zwgHGfC!z_{*2s|>vw`Jq-c2Zp+E~9Nr=UPJ>=NfqgTd*~?>Ly8zy+A`h$>bO2>H`d
z3)^el(J-xLdNF;{u!igyJ>o$asYB6H6hEFT=}}Y<x#dtSQ_I=@1!W&2r2dvkg>-}V
zT40&V*YO!>TSkW3YcJMzG_@hib|G&M8dGe@Kup|FwIGaAdi9y$Hy6<1s;x@|aeO)N
z_-m>9(^<7hHGa$nt?VSXC2^spLq*|MK9HWi9S-qp36qZ1bUqoLlZKyEw<H4v{%1P0
zfxjYFwPA(xi4^7f!)g%1lHE>~SE~2oZ1_Lk5D{d6T3DxDr+6oEQ&ouhY4{cEf~|B5
z>J2)g#F8Ya#vj#zBf4iv*=R)%blt1YGdZf>%EVYrZl%T8$L*}1B5m4AY5#O<gTDy2
zS1}zRt4|Vj7ALb_Hhwp6{uDbeQ=}ieTpeXPGLYuS-AlVUS6-<8qB9A*HCtQWb(}N=
z+A#11%*%0Fk95uXZal10#7$n0wHPotA4Y#`H?g5Ln(8dZRof)ZWM2_V+T;H_QE<H1
zoZ$UhRQ>In3<sB$C|P2}BoQOD#;0}Kloit=A3Gim6z01TT@CjRma8A7;}+d6&x>TB
zc#=wp_C!H$W@lwv=E@0|lB7RvChM$uuB*p)K;Q{-KWFdBb$JwMDalxta;Z_Rtu3()
zAy<QP9;Lr)V74{?@Il~b$;^E)<P9|9;bzGu9K*GUlVh6ePx_@N9?RBj*tnGqPqT)N
z%RdAzDi>p^$=NO6uqswwvV+sD6-Fc5Fw8WM9+gwpLi#b2JR3I@O<aeBjpCiPE9%7X
zfm8Gls|k<LULE1kcN(Tqe2rs4+#BVJM??o0C3Vw955zK6RcDxmf2|0Fw~~K5A?0<_
z2*~<p#phUi<|Nid&oZ#mBDOB^BlO{-5aR!RLYj(Hw4|_NwZ<)OH8>^K$cy|L-&y!g
zEAI($Pd2X10E(=Os-Y<D-9eQ`$O`%19VkS-3OF`u%@t|O9E~)V5aX&p9=`ekmUL{u
ztPoLwGtHr4gzr%AsY!hQ1J82zR9~9qn>Y5bN4+=k^yF;xx*)uhml@h@iuQ+3OyKJ2
z2K*^!+i3WoTHX+bK$xOX(Ks>VHw&5B6~?}$Sy7+j_Zl06BD!&1P4DCvNZ!o4c0f_r
zZ~t>D#Y;hhMc^139YJ(f%$_wHh186sYAJygCra5TRgrV@#`SRzyyH<RkCc^sqm`xa
zFT2^;r(g({#;@Rt2k<JX`5E{gE~x5l(~N)5CP?4HSL$}Fs3-zYCU?|cZkUfs1>{1&
zDUt)BJQ^=i*}t)&+yBc@lp#=w2LLx<K&fZQ&=29C%UkbVKb4H`9TdF+)xsM})W%lY
z)pRp&l@2{D!K#AojwaZ26nv2QuDhd%^D<F(zf(+qRd^R*{u8pXXIPhyTad74EE;Jn
zRofy^&u=*YP7}<F<0BwTgpWkqvdgDlTB|w29T7UXGrLf;7pNnRQJs+=0dycXE{(|t
z)5<bjQQR#oC@}IJPu;sdkTLy2jjfk75?i%j-*lmt(4vb~*zNb_gx0S7a9+@9pNvzR
zx4iLK8KYiiL)ZumQ?Y#cBwd<4eTPvA&otn={?U!sGClOJbU-ZB7o=wPea0Qr!EB5P
zFPqHgFHu@)U*GvJBXzq$kCcrj5I*pQ2e1%g*k&)|?OYvA*!IIJMb<`7?qj)OPeiT~
zw*S_`k|fqeIXZ}LKU{ZZGk*1!=`}(412ZN87)sAaI}X|#Va6t=0Zo@WrhP)}7p}&S
zq1L1h$9O3#91l!?!YK*@S99F;m=>*SMY*}pcE&yhFgmzZogw=F;PtqXd;#3b7%`k4
z@;D58d#b-+q73;nCZ--*5=>}g6`$*cDY($P*Zpks&1n9tG|zF9Hd;J7%SROZz!11J
z^}U=+U4nsOL_2^%eMuD}thcL`a#Y|p3VF`ux~|5N*j#t<R7k9(N#PZJJ-#T?ax`BV
z=2?;<R+Z%FExa|HpClrxFa$VNn=j;Cd?Ie`UrqXK&XTQ^lWV<PgL0%~nnJ@pu)vD%
zxsb9S`A(qZ{VpU~K>#yqGnOp-6~1<7)^_d^91_&?bsT(w7A&>;C=_$8j>)}8A+|%P
zZ=MiIZ^4dKwbkEB1UZ8m9)-;9NKJQ;IJVdlQW~QDZ>TV(i3x81$`UA{Wj;bc;^mW`
z3qGZ)JyNO}+DAN2J)bG_Wj4bs9Rf`SL?7`QSXQRwokn5lCKEYP?^&#K^NUNt;iIEh
zLy+~a)H77n2X!r$3D>4#eCbYPM}^0im*v%qZ*te1owJcdo;s0_(B>zjTFi;+zwj$s
zNKh}ZJ=E!paQ!it4GRSMDLp0yy&VMg*nB0u{QaFgqRvyEtG1{RyCVGl$4<8HoFSqr
z?usCvf@pzcEW43g5RBSs84Vx_{}T(;xPEJLH-`|XBK}#iMg1*$xi``%m8Xb2fi3rX
zUT{X{r^M#irv?rApB!8{wA%sSv#3h6i&%%qxQet(bZzo%ok@Y)LrvZMVU#y`sTL9D
z1-_9ohJjxPPfu4W2|H`S&dgn(qCA-QM)r&UIED9g?7LJYBu=yQl7L#n8Y4d@Zk2~s
zhX1s6*B8>pMiQf?id<tew<eo~dzDGa$8Mm$7KXFW7u#FNm`Mh&hv4150Z0u4w+Rst
z+3a-lkKE+Gk^-k;EwX7Cxt}&$DtvM=ykMZfJ2aWK!X|=W#542tckO&8*P_&zTHzfH
z&b+DVT$Ex-(dB-PuVVsI@9ck2mv8XV6416op5sGIhxya#Fohq)%{%G}#SM50PkWf9
zL6Ss6-ZoTZzxEhO3JLk{u-9&}9nqAOQK9=4WFl(!^?<&p&VxD^IohYZUW`LLH%*%_
zKi0e*okvc`)`;mgb2!7pPbkV^I7-#unZ6%1ko7E;vQnD7HjjlTCm|k;tDq#wwcTJ$
zg(MnwjHGLv_8GATseH};HvUArrR2vV8JkMu=Yipv-_@um{H4c)NL$%ee8$n~s|;6t
zznRJr_9U>wynLqedXO^MXtZOdzhrjIGnat_@383e;~czoHBIIWzPLa`1OIyfTOd@7
zM>hU@s#pVWj*NFwLci;OgK!Ru&pFJfH8tz6RZwVifL;}@-3}+2-cnO2sg|6Hhh4Rm
z2-6uLZZUaRdNqH3=`~jk0>{LlM%TS=PG2p&KL9G(LQL<ZeZdiqZ{V7%^r6nR?|#JJ
z?~dL32kiozq?Zpb5xJkL9dD#5e_A}K8U~f5;QmOs-mo51(YjDSeP-i7m9^qKRDTu6
z4D6#J3ssw>I=ttR>f3Ob6QMyiNa}ia!HECIcdR1#Wdeb~MYX<)r9Sh*rQsZo2lk8|
z+X={?#s8&pN|iE!r@i-O5#6co$0X7NmFUr1YcGj!G%|BH_WhB?{f_}Z-)u&+NWm1R
z+;MeF%%4<eSi7jUHaxm0e6wKrYUeVF9g@9zp8aO6-);%(nC%Be+b^TeRFlzLP;Dc;
zgs3UcPb);sa-3Qg`x<RC$$TQbXfKX$><$2tyz>#YQ$6bM%-W>WW7*cuJ9RG|La(A$
zxd&F3?n#_U>?B0{@3(DKgyf{#jCIbm502$u(q8e6d!G#c>_2r7qW`2^u*CIAAjvQD
z;r@C*mi)t}+m96XF{%0AkxApCKeayw@>e2`rIRX``?QE8Tprkyk`WOP%qW3vZZ=e4
z_?gyC-mp3VrvNe3_*FEj!0++{ERTZf#J>4tvtY5lYScpFtQt*QXT86Q9afC>?^&+e
zcT#LWo=ol(pIPg)8R4G1&A^LdQ6PHYUq#3zO?m`eEI4(#k6;*xet5XK&Y9MHzrmZ-
ze4ix)ZHkQoB>K2DNf5S_!i4<rdI-RjCR9Tb1h%ZdF@qlD)DEJ5T>{ep<%*b(^L6|J
z2H{~UM~vuK25$tzCN$;+mep+O-<qG0qXhOe8uMY65Ti)ctP(pTNY$;>7ni<7JMV}V
zT*Eer7F10gGSjoK)VxaVS*J8dHBnUEfbo!>?}a{g3a<w$*;0w%1`!S?LUX`opNm0Q
zHA>k&osG!XvI(rg-D#(w(2eMbCi*WS?_7n}{*%LIAqWxMIaaAGiQW5~w8Y9puzu}H
zQI5w{xv<pnBK=#?AJW>4vjwqj<~N(i_lMS;2hy^3a7=V`{S|Nz_jmOL%tGP{wuF8K
z+b$6jmp{H2(SDliZZG9lHU(O5R)eh5ht|+is@|5aDFXY;-v%7yMJvOC^hv_IW7QD8
za%|IuFUOM{va_aO7mATbkBH{;zqU=b0UWv_)IS{+W0T*;@z9u=CuW(Mm?meKu^`hs
z5(6H0tofn|EByFQC))c0oV`5rHvW9#E(v(1{S|o}LRtf0^8LilasZAvp>qO<D5(!^
z`}-c^-05WC;03HaIw#891A}W5zeQgtO-*lYy^~WA(kK!Z^ukhldWP$&A^5noqPRs!
zbzQ{sT#25hclDn1GEU+arZAFqOR|$qc>Z~<mmkccpy#KyFU4KY$O=Tw@)`|sGhe@a
z%Rzn3&E^G9_Ptet4}gEhz$jQ~<mPW9*y<nn2|a+cY3+sdO7eF!?(~_PvZFe@r|p6y
zpp0_}2rE8AUIHJQs;XCaAwsaLhfl)*IOh8G=n4$Y^KM@qAhgR-qub$co9lmeL+#7y
z1ExoUPqNpIgK&M_eD9&D01K>*0Hg;`I~(9D#+;tq)d)Ypd)l74u6R=N5)fomlZDj|
z0;8cu*I##U_58Dn0F&-~H|Mb~yj)Tlf?Z}~a2vw<#a2E8cSg>qX#5-IA59MquZ*W9
z+<5QQ0ri_7K@#`a{+qwNv@n0hZLMvDFAa?g+B;a!s7NhjF7L`s{(0hs&rdk_yJEcz
zUwL2<Rpkz#bd{{xC&bnlP|TEuTyDe>=}pH<6X@{DOVE8xbO(AcUS3KE$y4ow++JhO
zy)kcqnKvYq2-lR_i;C#%`_^4fy%I-pFFEec)l^JRQMkJrVN|m8U(g&sRr|o$`#;a%
zM((Cia=R|ZX8+71D?T8r9i2&DsrHLHglZReT&e}QwZrY5Kbt)9T9V-b3YRj)BcG?S
zMvyp+c2D0bW>2)rw1f<^Gpe1OtiDO!Xz?tnkr0d<*vv!|OU8#^e06QFjlpvrsu%`+
z!#*Uwp}4{q^H#!1Tr;;MBk4R--TsAPl3l2<lkjQYHo91cL^Ij-aHMNYH;2IuU^y*0
zXhQ*D5sorzXw;)K+VXB!_eV95ZBY{LdViLb@#rthk)gHyX>g4C&4!+B{*vXl+BS=y
zJ1_8#>4bfD1n$K`OHx94>jpkn^<gkj(;WqV;#S&+2xQPN8hLqbRr|I8Cqd@zG}|zd
z{Mi@7BG-GXM<7~N<X&ki0rZI3Z^__9%nne6z7m+={z4X@wcbVWB7psL6tq5Whi0Yl
zfohkaHuf3Jow>TR!L`sJ<gqlMSY#}L(zGP%1;~CS=l#{3&;Khk<M|ry5j|OoOJ&c$
zAG@0}Nt8X?i_4(194u|;LEpO4vH@{yCRuQynq7K(k*MUjrEEJ072>6EE!zUJW(D%Q
zT7P`E@$xT%QGHs{t4?Ckp-CwsFEf(=v&%Qd$d)C2*4N}4*({r<AZbmAmWEY5F;wt$
zPh&xZn68+RM)<wmC-a*~hpAe!I>bPKmY<l}$qjmlib)@x^+<4fp!j-5rd)_q2BUOM
z<#!=T3%g}OI-B~-ul%fWtvGLsU(EpNtap2l)FLoyOo-moMFGD#C_5iA2PZ)aEiP(D
zNt{YRQZt-GK`x#`O$Xd>10PhSFr4$G0}1{sH4=X0g~T@zX&eIT@O=mOT={W=cRrd*
z?tw}7$}s-$RPV(nXBcJ<*hyy$?k0If6{Z-WEi|8ohS)GE1{Ov4mM?ty8Uwfnj(Ir7
zn?z~~Hxu%L{r;S%nB(Q%zmo310@0|=_eL?-i8+Aw3_XTjoUk_qg!2Qu6<NFFnPX4z
z1Ym{x_;ykf4JITqKL<}wUs-v-lkN>?f~W4m@o=3)DB)RI^@!g|8aVX?W}{pk6s%rO
z3UD?hl-N4aYymC~lZq*9VD%v8$_5@RH4%ITe&+;(3;6N-ae4G!b6{!R?g<`+^n8OJ
zg`7xWKkmQ*gUz$Y|ABv?D5JcSM%BF=6%=gsEP!8BvKjLi$@VNJ_DZdyk8dCrMDC03
ztF5<uh#Q8sN$z|xbj!Aqv|WXx=yk{igx15K*u@i_K4bP+Mc4rki*enYx(}7eFue3I
z+?hXPruP~eN;_sJPBGv-n7oHtt$El+aqT&0Td#>zjxc@>iEggN?~y#i^7~B<k6vTO
zc?gEm;kQAx{r1OWBGUV@6PMk14!|Yw+;Af-wt}TXLg4z=-T;@D&W~WGLKFO|>*5E)
z;oo*pGonRt3I%IzW%yPqm$KOpA_eA;(u$*PcvmRFy(YD46@;-c*nAfpd*n#T_J^6l
zw9Og$P_7BI<Ji@`5Fy{nXSNGB=VhR0Aj;RF59Yj;YU(Q;2}ZCITq{(2HDX0koEq@0
zms3$`f{+v;g|QMbpk%D^tMix>CK-c7R!rg$<yDhvsw@UJ)SFZ^ifW#e&Vc#>9ugro
z8iA|+>K~}$s;*gM3~YmaYAL36#Yn7%$>D9`Ca3xK3+K@(ve6}*b7PYFwK6!oe|P35
zavTHVNrb%iJLpJk-Z}z3@$lJI*9dVEiQ+5dH?lsvhfp?)-JF`Uy|eRlFT1S}?b@tU
zQMZ-zwL+2?8WuTL^uAu}p#ay+{%Ic0NSVw?yK!AU5H5Rr%B;QDFZrggY(%l6{>$Qa
z<b6@F`}v2?%YKzVlTI8p6o*Y89iwhN%i7~fSX;jhCm~%@R_P|Y*5z;W?B<M7@{Em>
z{mAyLqwD+jwC`~Ab4hM>e9Z8*4YrkfeiUN@8x`T&K=Ug!8N|pG+cLoKCJ{DtoR;7b
zWL_ihs@Hf#u13n0jbB%HR87ZLbi3m%cd+D|mL=icc49vvWY`7V?T5_X<oo61`t=8O
zjoO^v8}Q<Q$FciKEM5N=<vUkU4*U2grp7w3Tr)#+P7v|m$c-<{K`v`A>bH@RY<1+?
zmnk)d_JHbZH()?~4M3sykv+%TD8!FtksKHkx>y-Kgt~r_6bAUw3F%&OiwWuSCK<6^
z*=I<kwDC1e7hkuur{dzr42(d7KNH@>CsHZO+>7K7^Zv$d4Y~Somb53XN6}Wb3i}ku
zrQ@TL$_hb;Bl(M-tc4y3KmM>AWh6s0##m~y?%E9A<3Q7eS^_O;c^agdQ}^@>lWTom
zJxtK7c@OdM^kA!jZ+cF1iBBK7CKl=FUmlwQ+h#u2`B`F~81D6%70b?}_p4XyEW7!b
zl7Y3BxdcP{Gz(@$KM+kxB=QpiD^;g?9PV|a*(y|j^H`X^DtzQqKT?<+h)RztPD!=T
z5RZ7oFm%ssQ(b&?xGPgmm?!=>p1G{xa5hXNHd%EmUKmBdOP#z?0GK<5SW(TI3I8wR
zSB|^Ij$^uJ6}#RszqqOMlDphAk)h>ZpOcwPhhZiY=V<G;3$^J{E#^}chd{W1KzCgE
zMmR5{l=!c2m%8{zCpY8Gv9moblcsSh&S@r1rkDXH(626A(^LM>5LS`Jx}~_4IIb1z
z4CZvz^tuWP!o}3_V^%6MX|stkR{qkoZ&sJs8bn&Z^mz-6*}RvN$eWe5${Izorspw)
zX?;$U<&sB2=AzJ)aVbN-Hz%P2Ra>gq=K~CvtWQ76uieHuTP>=v9O!~9bm4GI<{2zj
z5sx|SX3Z3tim62RSJRO`!x(?SCqw$go}5RaS9KF+<E34ST$kTI$2K{_-e&N&V;VSi
z%3S^jj-fY-rL!E{G4cN%{)dKfM%+MOw>9mW8#UA#q^l#qgd|Fiuulh&tUo|D4O1e}
zl)_aoNYT-Aw7+#@OvsD+p!a@B@^~;w<$#7szWL6ZbAj;O(3`Z7cvnl{#LD8|U{|PW
zv>f=7Po8#DNpO^$NOwD83@%V6fr^ag*W6ljU!Ao0vQZIy5zoRnYnFJiVf*<_YZX%c
z+vig4L=PR&l!sFyqp|~_&3}*mcs<@+M&M?Y7i54aRY+BeZ@-+W^xOv%ZaDd#@yMh%
z5vFAeVQ2~V%^U}_@~#MNJOctFH)R2D?j0k9><}>~c8q_TasHv1LcY@?;24NjZP9#N
z8)UjG*1+0lbaV**iX3{ON|>U$aQu=+=IC617dm+4W1VbhqF)1W$T25|*p1ILTO8@t
z-&W~7FEIF8C)?To-<i334!O<rqK{*(v-SU8+c3_s8J`&q?)bk8|G%McCX%%raz-+z
z-5hfE>|+0UV%QC$TqB1Zn0K)<3Chkox$FNK2Dl`8HT~z+E(SYSV>63&;OwUsriT|`
z?f|?*O7iVSh?t1f?ndb2e`$xo?+tmM9_`fhR@AQ_RfAS4^SG4>144o*j|r4tB2>6u
zOyx!SkMm19*-m#@T)#^rTx1y<(inF<5Zn-9wMZ1<KU?EWZGtlX8L}RzV}B7Dq3Q&}
zD_Eu0mnPZ<yWFgyyVFs8Y<@B&UlPEnVGK%QNJPVL`%d6P=G}RrYEI5KZS7~XgjYO2
zc4@p7wv;n#B-`HG!mHgSkLlFBvJ^7Cq1>NRBG_#Is?|vT)mx;bIORRS+^7D1U&p9B
zTo$CA4g+yH{Kk-nhcaMv83^)_jZ^}h5D_P&+iSB7-doZFmi=zABV}h3WQqdCcy!Gc
z2EPU4s*fVwRwux6=cX?#2^wwI<GhuGFEQ;uRbC9MrGTA<F2L^mcs57fe?90LDxDmA
z><o4WQyVbFS5cqS$U;1oMEk#xGRSQ6EsI#VHc*&Y!WppqoK7RWiUnPy$@v4v@|{n~
zUZ{7)p&yP8MqdcfsU--#R1xW7=gypStxaQkkqSD68kJ0Di)Mb4FluQd-8xe+xX`+8
z&$5ZO79HzeK7m~O$UYm~P))Jx&V*@-$##JgwX?BhsPobrM5xFSJOpEwQv}_OM(c6j
z;Us?>LMZ<QlSbaNJ%Sy$m-Yd$SK{A)U~BF>oa+Fn<St|nRfesRY7pGP>(_U#+UD~u
zv@;Uaia$~KMt@B@2(-W8UL!xem$3?pSire%Nyy_HFXn8SXjO|~ROKrs8gxO_c506b
zUg>lRRoDm3*<Gj6w=^L!Q}jT!CzUX&X+qWDI}^Jd$O!0}zqw3T4nYHJ>+~mDLwp44
zib#CrsMLu$#*4&edPie-%wYmlsckC4zbzrR*!Ig+EH?@6QC_^}XMTg9wW27+b-+6k
z$k4o5fiNm(H7+U$ef_*gE@uc1rwlcgm<Qq!oT50f*7st<C3AgtJ20h{Ito8T-x~BG
z^K@!&H9W285oAC6J>H6zd6}ACYA%oQD^1FCR-YNgvFk^?tDUBzZG`XrG&XpD=riF2
zzg#)A{CD$OLlhrDZ=j;EXDt@|nxzBC4caQF5Knwiw&UFYbc*cw{nF|UkfMBlY3T+9
z6Sk+?ZtR;Sb<KN5VBgmzQEMj*$Ua?EPJJ6B9HG18`!PcyW4oyYK-HO4y=+=Wi+Q3y
z1$GlkO*C+0`mDcocjvT%AK(gh{)<Z}Iku#gP_pKVjz)hE&2E~qMMC6XljvJFSe8#S
zmlgr^+KZx!0xR(u)t3^6GRnL0+@iYwQef#nseOnNdVI%xiO@et(NPn7_EVHf5!@ma
z`S(vzVNjcDU;<9clrf$dw1H*^nx?r)&cQ9QL2d?~R_Eg^rmwC8Jn>TJN60rothtEE
zT-MGDsX*nZySuyDl_GNC=LMq~WmZR7Ma>kRNe~J!I#~T)=?;doQS8MJ^FVJcoCD=5
zf&rh*Mlio1H~-28IOZz#K1YE&d;QpSINF1>mBOH6McR3SpP){7?UfS=9`oOUgWAEJ
zjJf$8O6IZn@wI`{zTr5Q#o&2SP=%*!z;e3(Q=*fW(GkI0U{i5b2|6DtHW!=QW+Db%
z1vF66eWvHmEzNIQ0vX|xs{7?pGL2AUP!8%(W+kWm@~^R_5&NOLOQ8oYV=&<15IYM-
zgZ-=b3dW0ZBO3iG1bjFEh1h!JK*`R*gVH~J7J{j+HNC(Y5j$33Zq1Q;`5w(^(mYeu
z(EGr%Kw){+AI5m8qXb8P8i2zUbX9Xw#|Lcd!`g@%K$&nTDL?2uO!l4+#2@%GmC6<O
z^N3)cI?bqTxiS487_-vK4U{7WS|{5Qkx6$)DeMroSyeM9ZHSmtdf}TCP^MOie!3&t
zJlHspZ>N8(+UEJr(IijPlHXGlVdLepAEP<*q)w_3;9aa2HE`3`9Yx1}3V2r$32}s*
zPW!xh9E(3=f2k->Cp0r-{DX>U+ihA>D1LP%7`EADvor;Bnme>C-&ZDBxK>xy|IvcR
zZ7It=1p46iTC{WeefGG-rSYskJ^TX-qELj(LjW71CsMQcdIWAr^81i_mZ*-xeu?>|
z{DY!TyBkuBo0or0=#;`F9@t>R@sl#>P2s1w0hz!-9miyXevNmUWtWzY+SVBHU;Czv
zh2fe$yrlXWk}~N}raYf}4cMMiWpfXtL`Je`YS!wgv)cChk$l~x$iF@3_PvpGkLH$u
z+30M0e>@v#zlqVR-T=EmvINpswmP3JCTSE#<?F_aIsC5@A*E*;#K=&EySB~>-KLef
z*_}(~$oS4|%%rpV{$lKr*a+q!B005x`iRx6aBO&H?UpG7Gav#=7)~e3=}fE_|9<$F
zxekbd3Ola7v>!fUTSFO+B7wD6u86ndaw$49pwE~q?uszPE5>>}Y)y5=^H9H+?om^s
zXFy+oNogC&DK-4ob_Us@?_c*yGoTjMB@A+}6S1FzEee?Pa23LB1m);$3Jo0CR(CmT
z@R5kHy~>M`n0ng2ziEW~Zev6xBIlwPkF|4i^><^Ng;_cWy-l)H*8(qUGB}01uYb|8
zKbPr3{cp;C1VlQlvC1pAoDN4?Fm*WrCgyhCvNWWs+pj*Z28O>+nA03-@RUHR8h65N
zG6=wR1PcL{5NWn}W~seKb0)b+)I35N3SE1)%dr|2$Vuf$a&d!s+53iBS`oaJ-FO79
zby@yx3VnPFE(q%Tu-NWdc)xJW9-jq|gaD(km1D49Q%Z*<o-xW&U!$W<K^=hBiQqN-
zD?9dT-mATuh=2*f500gz0O3Ur^~afzU8UE`UtmgHZF<P^9&k`Wfr;k3vqQuD2fUZi
z1O9J9o89-u5}fi~0~|i&y8}D!^`40jqC0x}maW=#)aaqC-?IM%S7@(-#&EihA+PNF
z9#YUJvhaTJ_|Kt1;3KL4>UyyiFuxI9sv`Qma}{)EAG@ITgsZS7hEtCk>b{kpN<`wT
zBK#vi_R2iu`lj`vF)WKLvnzaiqqC*Ia~M@Iv&}m8FQWf4foETNf=*w+oV?37@w<t}
z=BIUODHJ8W0^s~nBRP7yt*WT-TJLzF3c(7M80<^-a2*pN*SInWM6~@Z)Tk-9l_hkW
zFkgDYX<w>O(2?!7=GX94K5;)n6gRr)X(HR?xv^eNW3V;fnWYmu-{S?Sg6gWiwzB;3
z*_3??b3#|aodIvhcCZL{o1sG1ci5RiDC-tG9?<7i0yV#(`O}nF<!1~Y%NzkY$m#_p
zMd1vW^bwbM&kvERJ<K1?lle$vuFS0QP~VD0(KL&FA@*|vgef1iMaOe>NOOXi#OKW|
z9@mt8SecLS>f$e*r!wlvBdDP4UfpJaR{cT^{bjz+;{}D<#0g8uP;?|de#oiJyQRX~
z)jcDL3k^6O*A_C5_wgkT_A?crpv~05JJv7JFu`<UqpJFBB5`K%Eks4INthu#fy_*~
znU_f>iIaF_p4CeFj8D_0D?Mdm9z+YYTi^CuN3_h;Ai`jvFoxU^rr@6GcWo@}**-7<
zm*cB7a!)^u&hGbOT7f4juCMk@L4>Qnge3hg<NcXY+)kifkJLODPQs74EEFJVCJ&6D
zsRTZiG1h)ch2is_?=(%l7Ls(jS?P@L$M9O}%x`a4F=Vl@&FcL8$HuGrn+YedL4V{=
zgdN{hen?nFX$Rn(?Mm)~S5Ce+KBB?(nJB(@3oVU&z*OJQ6&6JWjnLG;1ad$<s0Yv;
z$aj;p`ZR%UcW)?NNo5tQ)4ioxeBH$F>K<&On(`k;o}&sGbl|PwH!6gyK9fz@#wHD%
z-^DJRPYwP&k0M;|PqdRISi=MCYLyu!zzZG}CC)3HVRGesMehnydInL|%qPlvN5<rX
zR%Db6zqM!>^@E-!n(`6WHRav$V@2~l<lyXc?k6P=fh0LEiDv*{=be}Ve{2rkHVgPG
z#0!_;sbk@~A+vMwr>aBv9-kvW7*Isg_!VZO60f%I4m&;6T=GK6IlzRclA|TiLRgF3
zVwAjkg0>-`wMWq|(px*Pl}=t&I4`JJd^4Gr?)9H>x4%E9oaPb>d!30@k?YD#Jdk9G
zd25sfEgkjt;NX%P0d{n$83*6cOb(uQ-$gYbCbi&upI6~Oq_FJxA)lP>7cW)l8duwS
zbV7QcD5U9B+Z%Ki11fhxE2=`F2zSK{C0yoT-{9S5GB{#38Z>S#BJ;RRpgVsb-B2-R
zchiX-+?{1CvRfOjrh8iVuZ>~2+%ydtO{6}`t)Scgae1t0!t;Y@-(<FGevue=<uWO1
z=a_iI7;HUR-nE;;a<>k6an=6!+tQ<5#Cx?W?d+b`kCPlc0I(jamEpB8y{}$A(v*Nn
zQJSwe|9S}Su~wBzXvB4l1ooI0weo5&<?wu+Lad$SOgLh%r?5q#pexr3`{{^P*IF89
zxNYqwH-jKqcS(PoXKUPCeX<OC*E+(}8UVw=1@XTNtqp>K#1dU_${l1`vx;xUy=WRv
z4VCMG2I5EoP;@@#;x|8+rC}`iHmv4uG1z5zJi%)`pFVb<wVsNr`l+8vXJE%+f5o^o
z%+YV7ko1)fcgeO@rIpw?N56CgU$T)W75|2PHN|Dv!!xj#>@&7#{k{SWh?DcKSW<0p
zbY64(XL{wz4WePIM#<jEgM`7PudXe`6Ha-^v==-WurSk>Ly!aiXk9lY3!Wd~%?iKT
zO~MfP=1}R^xsth`hg%kTo%%*c`8924Dw|^hT_xa2Z!$VDIPLF@PeN0Z4qQ2b3UkN~
zUBC2Kdi%%>8}s2A6<NjZBt{P3m02*|ZaBx_J>wP8D0$atva>1^M0o_b4M>av1N;Oe
zHb-FKW9dB<XFP9qvXv|IIDO$KUzyw?zHHgf8B=6PhBTMF^%ulWOXjqucqqEEaQi*q
zb)~J%Im?ZR-&{*3Hq+_?wcS29_?@jt-dtlpQo?XyLIOftxfabxjik=_DR|<0x+W8y
z@({r{-K6ED-~UA;ZG-2SJ7elW;vAtrBmr~9&Ib_RD7`7$WLajcyozfaePJc%FUR|1
z$z!$yc6%nh(MNT$GU~KhX%m?KOa6ccC?~5JGP>CQ8=JH_ZtD`EQEKeE!J>J@_PC>;
zlEkeO!uN}#L$2mufdb5BW(jXHt#*!*L}CqL9pOGoZ3PScx%!;)XldF^w@w*WPaunh
znc^Y1k537(aucnaO3%d5D+%LL4A-a*{krxz(geIg`rmOp6s_RsrZ73M?F1rd%MN&)
z|1u5UEuq~b_c@H%B=D%z7W!l_#-DTn@(58xz)g4u`b!?Q^uMqru8n#CIH{j;P#O>Z
zn%9@q27V2{p)Xz;?3vT9rP9P22mZ-QzgZs6HHDGp>(%Yngfbw0`m-Af<D^60`K4FC
zOKS2NCiV~%XM~~!KO78>*55wMS81|E($So_?A3<+;;HYLlma6Irq`_bXKvD(zq1s{
z88NA~?@-K~u~oVk?6JqliX_z`0nHGn{`&_%mtP7~s1$cM@=|JM;l3+QF!26BA>S=N
z^dT|_-4(H1*)PZF#F?R{r1c1GOVn73=N5gqpQe;4%@vRjobxz3VnR`Kq#BCs*~|(e
z&=@be#j4HMeHG)SW<b<~R#+Sr-HWruoT&b9ipV>@WnpbWuJqNlz`qiLM~@AKhioYi
zNUusF8JB#}guM;s)Pe<$_uaH$FR7ZfU|sIsS$zub)Qod~=iuob$Qu#b7JSZ_mOOl=
z-j{T~*1XJ3(=oy`QY1h>_jF)H_jOg;$*fz(Bq~X->h!}vNAcEJ{}RK4FT<~j6QL3K
zNJpk1z2EUkk+LlF`|l5$%C3dnStfR`AnL;}&^k~%C8L)%hWZLHo?S0%`{KAq#YPfu
z{5xI&AT`d=FOJ)v&K0qb3NjhX<~LNZVAAL|T)a!ceK^Rz+XL5tlE*s`vL<Sc&|#Vu
z-krInNB@%-7TCUTN_nOagXgbg=n*2KxAAR)nzf%ZwUae$*a>j;q)aZyEwEuXZ4Awf
z5%oCpJRl$^e*hyt?PKE{S&x!D65xxGyx7ZC5A0NqN#Auy!IM7vm=MLVAM|uET<arq
zknL-Vlqce;kleYy+Ydp^GiZDg4{q)J-zpv5c&_!#gB1M*OkU}3|M)vQl>c~KaP0HY
z{3EBePhMom?MCpM?))}UMkhIwT<D77;4B@b0Bx=As|T1rQYCGfDpdDC$xx1js6X-C
zfUX2B^ZlouJK=0?I&oIlq$ROopf{U?<J48Y7CLIKDlkShPcQ-h1Ms-r{13o${#Vt}
zbAx_M_-`Ve)pS&*)M^a79K1hfPc+D+A^y+~m*S6_sShu06N#SrH~ZmCn9*@$JJcEy
zz|O}gHCPw?{vhq~H&Bn1-Rf7OFfrKu>&PI$C%CbB4a8hm`hqL=QV{1@5rwfasBiCi
z*7RBEA15li8%e!O=`oQ%bunSGPSe&NF3RQf`=R01>D-+pz2|wEc}W$@e+f5#9miGz
zbQIluUoY7H=JAL6I1WdBv6QU~{^R-xfG@35<G?5(1qF=nKx9eloBcNJy9)u;mUB5W
z7a%o<<UZ}tTqld4lsWhNA2lW75p%G?j(v{=YWu)+K>DC4o5zUUe&%1kSG}dJ)rjM2
z(?jI3jUy;EEuvopnCmTTq>{>Qkgt<(9D6{)PRFY~a00%fiRnGoQGaSSv3CKMVAXIg
zKLwvz2lJJ-+Oo3DIC)Y1Plnr_;Vds>1c~sj=w6s)<VhtY8HmfuQqe=ALKdIhBzJ1^
zf%G7k_xv6`4|T?`L2wPbg%@A9To+mwz;GskG*C{F4|D!(tHuZa|7s4bQ#<C|Aj6Sr
z%oy`u&tz-(E>Phnj`n_eK@%Qj!X8t@McgTlvA$+3k$;-~y7eC&E#*Hl43GE!RUPQW
z2@leqTltwOc4D$e;z#jx35k4AS1%#NDNO%BpV5NWx8p9_zbSU0w?ib`!=@Ph1F-?`
zZ=_$Fsi4KHUN2}ez$cfF9;0A^5j6*UI5V4*8YAn?y=5c<|NqLlh6kK6dLG6of$#6-
ziQC#?wHT#XRFk4hC5Sh2{O{!EWNAib28N=~ltq+bCj3`v1+*k&-85TD-<Dwz2HP?j
z2tOoL^W)Vb`$sZ!3iSC1Z8<Isz)85OdfWU@@U>PA*&6aYsoG@TM#C<Fwg|XhXk`WX
z5SS%xgYEZ%R}7&u+F?`W5^H}-o?ur@PX}W<;8(9{kwn476#dTW_0NOn2(4Kj)CJb3
zei%KA3!c{tzE>+jX$5@*fRGpbSHQ)gq3C0~s>Ap$cN5t?K;7)x-w6vCcUfs}R-Ybw
zD5EGa8R-pgC+^zN)2`Fl>m{`1$eI-;&DmviS3#x@A`HtKH;(Nr;Em`K>oDi&t-@+b
zSFL`xxQQ!#2n3kb6boDtBvtVPNvKHe-&=%C&wu4}D*-aShs@VDk?$4KP%3}HXdzNM
z;O?FtPH<lV|M;1Z^%QVKN^aDjl0UOxX|45niGbRn)NtBXFhuBT77P4f(VsP2_7`fV
zEsEe(h?{@t8Z34-i31kutq)@Q$XRitMT2*t3fl3nrnvKei*?do*ZM|$_}=pJ9ePRf
zXk&bM!V7-+9Z}3gC?_UxtnfgF=q-&4`V57CQG4Lx7AsZ!ry3|I5&Wj}CAz;0+`1|z
z<Z+I{g7zbvi9821R77&*>UE$+TK$0zPN4Fd-SFH@DOqX_<w0KD7PFuBfz2QII<M?S
zK02owjTQS|3B4sSclbd`uffK}P|Z<x+*JO(c%7)<z}s}ozUyt>^t=c7_ztOwlyMwg
z9N)v;y+&LLXMqCL9$y_MWAOPc&YA`4k-MPZF3J5<<S$Yozjf)_qbKmzfqV6aQPqOv
z`qL(<`Hs+kaHyAVDbJ4rI&zxKPZU~sJY)NGokud=LPc8)1Y*(2Kg%&F=J~I!T25mO
zIL{|p&}7Ikp{E@|8CC=;A-Bs}QcxQid|9aXA0@qHKz`9LRqs&@tq6|4>VG><U7+f6
zcYk*{ymrn`ix>QI5Oy%~d2dr%TfAcz0ACnoWq13|XYkQCsCd4Iyh!!EnS8M9Hh0}I
zH>ZU$S|vB+cP}X=^QmMS9$Mb^_&PXKKVc3@9bvE>MN~Up-nZ9<KJCL7_`??p$CB2(
zP+sOS0ez?h^l8Q=H#wxHRM)u=`CRgC;s>)NIV#({e-5K+*(iNAmICW=?x+}2&C>V}
zfg6XT_!Las4>LxNUdUw$@YB}Z!wzh4CvIm!I&Azk4py~o!ECDq&Gt7mlfNQdKSm;B
z2fuo9p;zN8h+Buk_{ZDNWLB0h*GtT|=;lLzLcv;#mk{YduB}q6o`p<F-31W=dxe`y
zcR#cuj^}5>{QwVzHBZ(kDC&nt8!feXt7rj!N|EZ><z<nJBG*!@cz0eIXX-;qSv7BH
zYX@kFZfbHbC7)oX4ulgIJ3Bj@eaHRyXe%g~?S#~w+gKN_NV|&h%(1eSHv~NVzXt4(
zj7A>({l6n7`ay2Ili3DiFbI)A=jHA)TR&)v?)bdmCqI>9SBQGR)8+eohE|DIwO|*Y
z@5^zD3&3U&NTNRpkCF15o5bmthefREon=4&cQ2jN*L)8jb9Ulk2j@=3gMt>YP~pb=
zwF~u~H*Qqe=(!iE>vv~{R`YWtL@2*MV8L>yHv?gqE1Fc|07h1qoiFmhbqtAulC#_M
z=V}kAI|`NBy#pH&Zj4`bnE5awL?#ny3XY|%Xez4NC_H^k>ge{++Zbaq%pA8Zq>Vu_
za-8^GLMUGy^v(N1peWkC1v5JZeStTmI)?e=Ow{`BI#XYJ^Va9C^W0_^I?fO-i3I=g
zPiR+5l)f_gWmyQToMeFjlh_uqSYWT1y9Yw%KG88|3xshnWoE`_VXpjMg#q%`xCr-|
zBV_MGKAc>42deAlxE3H3y5J_&av2i4A*Lco>RLeCIgp2vU)&jEBK1qO%g_{@*|ht1
zH=~sYZaK?h7~GfrGcnb!+y<$0P<4fO=1Dkrv)`Z0q2yBEU@==jI>zq{WId7F!7mrZ
zd(ecG`<&}E@x3S(E3F9e{ZvRq9f@&2xuRJQ(b337m>9Ha$h9mF;Qp%@LWycFnZ8KM
zM*ogHLMj>VAy{D+Vvr%TD0wgp$}?anVk85jhq>SEsdo64u+t=4VH?LXwLoUKO>P$y
zIPCC^)N1Ld!;Bn=n<X4vO{(V+LCunvCbJW*O+U8b{tg<MPW|crQ<{k0t+g=wAy%w~
zc#6ew$|G!JmS_Kvv3@vkg?+p34*bMqtQM8iK756y1KS#Lq7HQ)?iz&BLv<*&k4`n9
zeEhl#K^01tdlL#?xRGAUu{PEms$@4<6f40X<mCQY1DXRO;MwV`r(ba-?jx6)hoYfU
zjRodSH)B$0Liv><WlgKo+hy`-nSKkmmKeiOI67J+pSeI#W=rsYbAHY!)`VEiw;%oq
zBW`p%myv8NN5`p6YLyk^&*Ody%Eq1uU5j79`}aLjzVpZq&48^RA)uX>q<@Jr^vQ|2
z$6z-WT@4rDTp<e07ih@M3?8Pu`&od-dMISI>gTy~LMY_^0D8g`uc_jeQ8MD!qkcO1
zHMx|fNTn<n7s{7A#LVlP86MuRUbcoV%oi0P7~m{JeZ0Z(Iz%g_rc94ehvyAtfA0Ec
zAtU%OTH<%m{v(dxbn7H{iK(Vo@DS8$T!+Pn_=*I8=M$8-40R&;)ZoldM2uU<T~n9-
z3CG;iC@~3lN8biZ<nCdPA0)4jO|gAgg*-$-%lS)>(UUNXvUGTm<nsf%cW-G$AkSGC
z<{ugOgXdy?{OS(u58jRIV>TKwK-C1kau}z>sv-)|e|^qZ`R1)62BWFT^&yr-a$_Pl
zKz9dPsTbsk&O_yB<EQV@Wb?_Cgd*|1vSqF#gw1H~Eo_xohkx079nLxT>vNPPDtum5
zbH5w?P5RL4Ju7DLw&B4z5xi!e$5<wT&NpBwcd8dQm>^4&MNBC0s~(LZi?~fX^QU}R
z;crS=o$Y3Gh=x?|&7teac&>IQv|?uDM=%(8hzsG4<i5U2ydBuAQwl8WLLPzwtsr4*
zDXmeP^nRYG33B+Mndf)0tN@!6X<)H=p4X1wI8Y`^(k^Dh5GyMki}|VZglf!nIZNBf
zvk}@?%}rR5ml(;w<FGH6i=UO}9aa>cF}~0cjI8Ul+`#4T2HRJ#^}Fx_hg?btmmMDX
zavE6hU7l(PVO0Wkzn-NpAn3eipEk2aso-tHn9Y~q3{5>JvPhI0L`cQ%Bj_PGl@JcI
z=orIYZ!Z&iKBUc5)Sts0&F3$+%Sza8s@;hyO28a?<7p-p5Wye^QHPc5$Nhla$k=Wy
z(;{$1OdBi|Oe0tB>-t4o_;|?K9^DXdZ1JnT$74l?A43)f4H}C?GPX$h=KPHJd5Wdd
zwGmLu$oMgx=dX>35{3#tbd`sGaF|rLjd}aKS54>h_M9X7{S;h*l>#oKVo66e3W)LV
zPCI^W)Zr*$AC_VPtfxYR*=B9jPC)zxJhn$ZHD_dgt*DSoZRU({&mnc|U*}DLGXJG>
zH(TiK39*w$vU<aZo;I<fg6ohM;eF$%l)|Ak%by1wJ6ke34cjdyjv4(J5h?QT%j4q{
z5}}!si*%^3f7X{eAwg~eG$SHX)Iqq(kez~Bg=baWnZNEG7bFk!l{)9O6iMj{_NHK5
zC1xVz*+b=MGEcP{if3Npgs-?pSpTB+nEIlN2C{Juew!zd@r!U@Dqa!`_1wSi=71aC
zpOmh;6M*9b@x*-0A3L$PcXAc~fNPy1X2-&qCHY$V!DRzi{TUxMs4aSt+Oz{1!J+(U
zIff+iJ&?e%5CL)u^eM>sqr+2*$0<k`IMSClmUqf@uBF~j{F{HaJu#~DpiRSrAK(-^
zD^^Xx`%5Nmr)UjHf%g?-$V(ePrYO`yvG=1i45liWCjd&70wN0!6Kh-VvzzRWNC6Bg
z%~mkOoOv9kGrSy*00LIQ)QQV&DTv<X`9_0{sC+f*f|_TFn@$p8Lfi^2OD3Y1+GBsS
z^NI6)1@)oSN7VqOTyJ`$f@@PyfZ9(OWa{b`6<@Uy`8TR9#pCRwc}ZS#`ke-1b-yY^
zlf3=NlKKo9)stBNxI$t>+PV(;iFN6|i;DdZc5oKnzK|g$(MSy!e=?#d5nU_U;|pc2
zL`k!FrKlH7VY}=@zVWyOCJ2s+Qe-XiiifL^;18kh>g;BIF8S7?=@|hr{`B>Z%|B8o
zn|4qZWPa-<7397Ny43Pk3IT8ZQ6I{ymt<W^b->KBxNPE#^dj0)Aa9_cvOhJ$btdNR
zR{kZdtkvOd%fGSZvHCDlCk3z*JrDb{0Z?)%9dF!BonmngQUVrx!XEq)N~ojoE-qD7
zx&8=4H$oOh<`>87sQ=Wco_*>`DJ*P{9L}#iEnB)fmXsUL#YY|!Y@8k_N>})7MIi#|
zrRHK*7r-UkTiVE8f;#niOiU=@Dza8@<LH%v=?u%v9G@Xo)cT`a3h{e01)khMyr8o%
z!!QCKEc&EMJrB?q{u>LE?#_*+%%T1dldG_!1NBQH2Kss`!4g8xwtvLl6?7e$Vdx;Y
z<|2I~dO+4Lcl>L@9K2PXcb4U(@ew=T$enBOAd5;Q_nl23Z0DPa{gn58rCnfYX2u2^
z1?tZ=l&{=oaLC?$LEsI{z38c*8wF?%5W-Ar(e8I&7S8}uqUd1NAI(9A^?YJ*c`zul
z53d9`k64s!$csk05G5{wb&_@8<imD%_n$dF6ZIcv4#jM98+ErH=OKC6j*JZ?NBdAT
z5)A!g3h;Nw%k&%I@c1aigbxk42vD8Q(#}*A*iPlxldZMl#SDp|X+W1FYBUtYM>^c3
zQ2n+&(jo<Xhz~$cSI|ZDOKh}EuzQg|2{3Y?Z^(U>jlq!!`KW0x40GWfvBR<EG?7qB
z33py{ENCM&!xW0ul}Rddm}^9i2huLr$q&M-K6Gw%3)f_|Z<PDV6iAAbfhC;mf1Tr7
zTuK9sDaz>ZSW!)QjK2(C`sW1J^*i@tz?SVD<skvXA!)XzTx3f+pW#aiZda$|oRq{i
zP9k^LG`2z71=>?pZfH0!QaZK+7($Hju-_mbF#n+zh;>f*p}i$;OxYJGzbnI2RG4z4
zsLRBgCOSaK{qaaOgl4hwq?k~|^lgj;<Mt6Sn@r}C-$IG291}I3<hH52`Ug~E!ZJ7G
zE&K%zPuX=O=j)cX<3p#gO)Q<3>g(7P>&!>=sD`px6#28NGzR`)RlrUW1ggRhPn};*
zNR(oe=F7oGqZ9rM($<hmbGjQR{l#6|aLe?VlU5=?5z59Dn1D(p!0MBmx2KAse<>eW
zF(=M%YLqTT=IV!|o-MQ9R%R1)GS)Iy+hq&fnXh7UY|`yCYNJqNW<(65e4aURVJbp^
zzv5nVeTL{~>~)-}!)dgJ(J{_-!(&)OgWBvsgu=<qftiSi0xAB{ud!?yHu7*#8an?l
zufi3_*CoNET!0BnhC_vo{tmJoA-hmKoT}kEj_U9Cs6{uE70pG>Rb%R;gkY&s3MK(^
za!HxH0l@1W(bwJUYJcAI^d+PXtj9mdxQ3k|x(7iJc`BYJ6E1t>38E5<pAm%HYi-fB
z*nadxZOdRZfhyJVw#|?=YAO53!{DUa9p(e}A$GN$pwvMB-rnAP<)3SLP$pdtP$;WD
z2jyL&;9)~b#<O9dn}gBKxKoWpyaDK-+>}F$k6MyDSg!A`S?c(+t;{q!ICL8#rq$*c
zvLcHANZNGli|rd4kXpwu3DcL|uxQ#&2K^V#HVQ#zkXJ<c51jE`Az2d_hos-a{G>i0
zuH4P(*3UcrMr)`vQ)`D06Bo%IyWl&avhIIc2ktcv#@TaM`J0W}x9%=CN5BorGcmc&
zAouQsbzs2s2<|(+a_f#2yPz6nkz+`1v2ikVukZd<{~8UIKCLow(?5km^GO*b=ee$y
zZN?)R@}otpk@LSiS}%M{jtuLqYY_F?48$Boeu3pR#;<pgAd|^y^`nc>5aaPXzP3-R
zxs2Khi{R+N$W|ysP=YNQ4PeZ$Cck*=8ehH{<3Tq6|FQIyVR1A~*SH0DcXyZI4#9#$
zLV^Sc7F>f2?(XjHPH-n^aCdii+x_-_-tWiGkG*E5yKCxnb#+(ODez9f4WLjlhUIgF
zFB}2a){S4MS;-{pVP&SRc?K2zlbH1*hYwP?=;s}`)o0wgK(5^QzQ~_%;;bg-lI8on
zo`A7FD`3~w?X_`=AEJ7ZjRe=Wh!zPoQsyS^i0!NvjgIjs@A(Zc=qvmZepR4Sjx(Uv
zc1cs4qJ>oaN>nT%-xOepNrO$=s>txEfayG4OZ>-k7E2wFu+0DC`$5ZbjFE1*GnKQ4
z3-TUpufMT+=Y28dkj0c1;g;@(l+A|}N4*}5?oe~oB%*74UL$gMSXO(9!Qnp#Sk@Vz
z?@A*HQpqRXQro^Q>&fND6`A1G>8}DyZ2J7dX)UJ9SG28Wx}j}fY2ApFm`$M4du(g<
zZ+?oh&(<bz5m?fW*#YBbQB4w18FdR6DVRs3YKoJ2nlKqNsl;Oa1^opH(|JyT7!3ba
z^J_ep_5^NBxQW%!G30mq4?|x6BD!<`_7M@YA9i=VGua$^NR1@*vOhEO5(M0RrtD27
zHhRFbS&D{pM%6{hWOEOiGtSTxu5i=(&IauCmwN6*n5rGcE#b)gl$xXcl(1Ue+E^62
zz9c)A#Cs-?YLyuB1vJ*7F(Lg}M5IkHt2YCZba!_Aazk{Bl|?(1F7R_hEF+d;irVh}
zJ$|{+=vq}=3}QK*wsO}!?ZC03a~Z*UOFDm!P>FTCGs<TPqP2?^fvPS1w#47afpP3n
zJrrnr`iwLtS4ofJtTU>!wp!Rk6L#m|qzi<bv{`o`aGXw3B<J`;Jr(MGMQULH_AmTp
z-)3^zl%R*j+@l%cJTy_n<kZ-3<?-R$fPi=NTLaSk`uE>>Ap|z<GyqB9>Q}r%A~}xi
zl7(5^PZyhl)ODyuPpQiEb2t^5IkTGY$e!qZ-xaF<a1Qk84#QObY!#(Z-D9pH@hcHp
zk-Qu!j8&UF)|`D4Jb)ORv7ga&l=p7V?f4I*Eb9p(+_((qpH}*d>pU)0<EuNE*kbRp
zw?b7-zU5I3=t>zdB>>TXmL9`HF@6RjgsyuWr4>avM3J>K(9O9eveXd-Et6>er6NC}
zaai%*vG7LKYY;+5`HAYDM5v14eOb@t+SJRT2jm>ziO%dZ7gm3W$5j|j$jBc3;hgU3
z#2FSCsd&=5y-Awuq<k>mPHo)#JCWAU&OSIQ{Remdhn2`eb_JktQ|3)Qo<c+{yx;g&
zlg*55sg7<1eV9Ayk^K~^hW5<GK~J?yY179*`bjm|G{cu%OWmqiCWhG%%tO4#rt~3e
zAGo>U1|Q?{>+cS`c6DHO9le9HK25(bf-}|jdhLwm#dH>P@&|tgGg7_ZfkqJdZ}7zI
z7{$Nd&gYYxyE9<kRx)P~KAS-Ut;qjKPp;_uQ8DF6Lp=Umr#ZH)(VN$eS8WMvsv0`_
zgE#>%eSqm;m;LpU3&sEf9l0QTa+6OJF_QuBIB69Pff7ZkX%;vRuL$>hk6Dw_Qm~E7
z-`$^P3{$lY(<Gmk-#HNn@tjEJuide3E001iEqdr~ZTta50xXZFAk;Kj07911q%6h2
z&Qk0BrCwp>N=&h+1jqR_ft(wyp{Odp{<D$DoKCo>V}l<vlZL9DRZFOen&3yk4L;oK
zm}~6k^Di83XQj~Q3VgO6ChkrL+nn3N!O(>IxcvjnRISmDh+BU?uOhMh2q(4_SdC9@
z?3TKQ{kT9#@W@ppbPw*5jTl0RTCGD*sC)u)CxPH@*oW{)hSsj$qSP&+szQ#u`0$GE
zA}2|NWq54n!IMcBWF$2jM$(AiTQT9kLN%zpCGwOp&U1Tc@zH+mWUfH(+F(EY2o<81
zemG8l9ygoaKPE#T_QVfzT*#R6#)gt7hJztgfK>;~**v+=B!`RPP|=M>n@*-Vjpqj3
z)A!KuY^?v0-qf?OuU6~K_SX5K9|S*quD6Lb$U&IxQ{s&Kc6x-zevj1Giz}sP&%__!
zj9<jhQS*D29CKK#?$|U9CCAa_p5Dx$miO&6{Nr!)+)YQxcE7@kOWPcwnXp!){#O5F
z7qT<p>&9FUf!XCCXaV#+=-XzYD-_gscizg>n7ssk8tkt^p(0hbcus!ao0)7QLR*xy
zs@Ieo+=%X7Ha|`}m$3)_@S&O6OqV*BCc&tsdi2keb3)4*r1OPvKVja65n!i`D-yC!
zlddqGt*FIL+*MgLIc5`>x4tF&)-qow;!gSlHsz8mvS>ZoV-i_dXTc2(M0Iw9+8Q!g
zpB|}~Cg+^?@DQ7{&Jcf9l>Wl}ON+XHPEVvcidUD_aDX@7<Z3w6C0`Vh=GgDAmj1NI
zeo0cN{H$q&dIPBs6X~Pq^R9v-JNQ%fA{q4t_s>_(fjve_{=5&ILeWfvf-rsVmOamC
zK*xS;46F!)iO+y)R_zu#BD&(+)LKy{-6++Wl@DWNND2F3hY^le{8za_saz}ah-wzR
zC8gk1tS7AMtOhp%i^xG2Q^F-?7Dkse@%=c#cz;fMgVloQl+Vz@x9g&2*3=TnxEwE3
zKQTov5AMj>;D0$4v)wci#6%)%{;IWJ0WL;+FbduYXzcs56O7VRlqJ}I;0LNSBDLA1
z!B7RmS4v}aB;YL5Ty-I!KC$j6G#R<8@~1!#C{ZyTyRa~STO2zl3R4&x7*#nEMDERo
zR~|Q<y}?5ngydXKHOB<M{x}@mb~mNK`s*P^zP-JDWG~pWH#j9mFHfU<)jJ(=2!sUq
z@vKn91S5uUL?gJr^|9~Sjq6N08{Yn+NVx8uHg)Xi1~`99BJ6D)Jx5GO^mci7fOjB!
zeEk6gOJa_4lNgx<1=pa6fPxVap;|OU!Za3n2cu36pVk+1!F>}(mI~UYlRAaBO|NAg
z-EZYD!Tx!E8Y`uDGz@-JXe79!03@5I(I;ObF>6{gQF_!`i)z5s0gWcwv<;h;W9~T`
z9&_W%8omfWYY97AQi3#dVPP+dLiMzb)S8hd{**m}SY0a1PlK)ydjATU<v+=zHU?LP
zTZ+mIqx@J8<JpSFe~j3us>A9*T4<ovqIjXbhq)r|$}Y~5(M8guSz78ypdA+$+ptj9
zbZyF(+>fYsgGD7%9lDZub}aAaYcYCGvP#*P<VGr0ICHKV@%|Y}>1f*KO%)EG0P>G@
z`ewGt?0>L*32jtSx?DA8u;?-xb#0OIGnDx9A_xp4g4p(w%16fgf<r~;zp830TjM#T
zri{otpul;0d`RrZC-^&E1>h=Hcch`JP8x0Qrm3{iw!Wo44OSQ1M}6Do>@&`GmXM&l
z!J+0-D__S(e2n*EO+#ZAyU_=@0wt*WrJP}dzLfIhc1)z6LQV<e;Sz<AKdw{Yj$Y@f
zepp9Lw9C7T-6ydY&iyk<`J2T38+)yFbY7#Xg!?dz<Ae{=QR43<Z@^BD$ND3uBp%iw
z;<5LVDm?sszprYEY@};-<JP2xF!gji-3+laj`f)BfKaC*%DO34Gw+^dX#wmcE2a@0
zJ*F=u8A1uPOat;{>7YP4kI;6862rjv72DuH=P%H$C~2Fb&vSH-1NdNOV~xi>=@uZw
z(gISTG(2kkeZQgcBm19JX?M>=8Tz<5`d(`bxeotfij|g6!5J<l0=0#PJVUl>Q<F3E
z@s6RDOdIEUDUu*KV&D}P?+s_c_`gD`>Bi?UIFA`Bk=ypYfkCJ$NB+4&_tdkysH?Hp
z{j4e?3~{SQcoi~{gd#A`0?6s%-$$o1^;*+Wz99S4#g7CoaZi!LHAyV#8<k<rfiUU<
zalATBI^!P>aXOfgclKxeOpNIFvy_C0$x#0=d6S~M*I2Z(0{=fi!(w;gRA1sLvK7Hr
znDwK{@u>giOLm}W_m}c1Ooh=a6G1{Ua^4zNX_La&tCyFyr2}d-|KGfYOQH<y-%sAn
zoD0Z(b5_!;%5RYR!tus^sHoL+bv!9I?bYXnx^grpJ*0o_IA~N7d$NpC>f%eam@<7c
zyA-+ddjqm-1$b#`oTH^hlJgU@^ia8ik<75+kZ2$zdJ+F4(Yti|crP(?7L**G@iS;V
zUUI%v0KOl)hh!m<Q<v97s4Z^o^UO6(#+r27r+!g${K-@3`Nh5}yv0aZlCBto_=x4D
ztrHf%#?jnaOn)gMNB#Zz@$UMjipZ{wP(z5#W@m3=O|<uu!s)g{TDBOGC{R=o%Kf_Q
z?#C9H#T+0%aD7l}Xg_cMw+Y5O7VRtX?6QkWmDP1Jyq3kGjwh~8lbto;K;wIMI8{{x
z7muIbYGyeq-1Cd5ADLvQ<*CcGZwJb0Vl(9zL8(Mvlm!aR7T7bKfJ;ufCh=0a0;10|
zKo9c<7vFl`hGiuAOv>)plW7lLfhoi#EhkHAb<ES&kbjb8en{|b?_tQKfm><^Pat^?
zgeOxB4^v4Pr03*a6F--J)$BE>_-*=IA}_mZe|5xl4Wk`XH$3g%4APxrS4cvU+FL=o
zZ0z2IF)*`El>NnfYe=ezr%-3JZsSzx!0m`095S^*dO1wQ`~gB}l^I)ou4~@3wGXo<
z%CyF8ag#F)S_Ws-yr*i<8%BWPOoZ3Vfy(v?zfG>r+BbT4Ta@lB!FIH{#tstJ%c2S7
zxY0`nkpnIoRew>LP9kKB)IyD|+{J{V=_paO-{|^x=S0ODynTMNDaJ9jj(^*X0RaIj
zb2WkaotIC#m5WU0G04j~q|tJ(lR1~dul!=fDo8>b6dgVPjP@es2FOwA6a1V+mNpq)
z_u!kaxqP^Uh?O$~cGUy^or>9Cr`d1(7U$K%DPrckSUd^OptcyyHV@dHo?2lj=$#IY
z?MLXjQRqD1T6x--YctbMJu9Ae0ib2ic}fytltV2zhkn)_(TROgC|PHRYVR7cj4RN_
zS*-UWbM5Y+-d?#TimXLtPUcdBH!I~r9yaa6K#GGN+IG~U*Xqcr_txniHQ|;Z6%m`g
z{yam_-uG#RViXeR6atS7a}s-@sQdj=`(YuRL!%q};d3nE=6m<yr70_p5pbL&8=0)a
ztfY$c9M}A_C=W|xBotiMk2|EplD;WPfV20RT`nHQo})i(_`st&pnl9~6ZQ^rRD_b@
zUqM?s+QZ;hS6I?2#ZY8f?;OOP&kDO>kn1?>POrq+YDJ0~#}J%aSA;8VM}v-~3Bqrn
zg%qh%NqS}6co$t|sQcI$2DsNxaj<B5%08PCC7P2uDW2<KkD^B6$s`gXRhcHHwXp>y
zrma*JCQ5$k*3wLb&ojbsrkwuJ9SZe=k2rw67)WA$J+IxAE6A_6sB`dZ%}7fD#D$L3
zb9u?i7(A{Blb_5!=wpN8ux1=R#QtDAow}q)7aJ={DT*(j?0=Q?1&C9(#W|wNoF1Sb
zVVOO6DYhM~pNng{i_7}s&it#QjN#*nkf8mJM78nWt&DDj_vW_)UFrWq*!)CSV`kdD
z1qsKMTs^CANHa@k?hR2lX8K;%%zcVXwF+bz^@7pp5}B`+b_8*`_hwrEnVF>u)w+Vj
z)A-TQg;x1xRFp98fPE#)x~`umUKfoeA6?f6Si%B|*+9u1@@`u@rGz#}#LP~xe%dP4
zKVo<7qNRyAe)TPlaiRZaqWR7J*uPJnj&pWhzp=;u$6Vupc(GP+rMiytn$Jhpih7}B
zXE;FA*~PjJ&raRitp65%5wVp4h5gcr$U%r7W6_fNPLw1@4KN_dmB9xLm>yXqvqqxU
zrFG-fU{vAe^ZGfyYD6fX&;1z?G|T-N#fSTiNMK_%)?j`39rJLLF{7Av>Z|$^f{7*U
zE-g=Gda4MrPAfz8HJfB}s^b)9dv&-gil?~i@l?MCK3iQgUo;H^zb+Des|2K0+N|GB
zVfk2?bgh4|0f4xR8j9B*QposkLivyA5BmT;C46}N_FLAIufJVC(SJ8dUYz;T64)H*
z+Xcx8_?5E9GOprKPh(BOYVyj%_Wf7w2+B??3jLYy6Mf;vKonBpVP+idcf<?}F0RZy
z8$r4(T;T#F=F2PZk0o;VGTJsz?zrNkYn(Hx>SgUv_Y8ny!<hOVcyc4hR=~CZt-u1j
zplvkr?#(oBJzZ#i>~(zGX2Y;A!1uJ2r21H%pbZ}vJCI7f1ZVm+>))4GtB0U-mgNr^
zQ1RGhVZ;VHp%jW~eW)U^*$!md<RV`9r?<%yTxD~sc#PvmcRH-630@{Y(@>N)B}Lud
z@pZ2|7kU8!7!~{Q(aX}P&iZh2bZFAMua7SXgLc!LpL)?$DZK7o?Z+>c)8@)`69{#U
zM|p@4YKVUgD+j(c;P7QJLNf+>SB|!7uNzHom`zVjj67=izkIJPG^h<+nX^}PnQupl
zvB~Y`7(;2OP)g2nF}hENY`)55K=RZi8x4i`(2{}gfBXgXoM9?9^(%TbH%Gp5)9-fO
zB}Gun+4U3!h*B%duO@I5ez`ttVK5v^elXZ$Y3gD-UeZ_+{QdC&L42$3w6$S@Z~rtS
zM9yQw+%ng?i+X5EBL836lU+rA;;glXU>cSTVp(==*v-M`Z!%On+YQblg+74?=0OsA
z&t*P<_J_1l>nm-gftI$Ee{i1KLv`MOD>m1#^~DkIsn|v<Xo|)y|8M<Wi&hukXc7%E
z2HpLJ_4*tM*{NX>EWwiq*IF4R5iIt1)mlUfI4g~d>}dhmcS_eN+4f`X2fSv%Xe^L+
z?LU7xX7Qy!lE|@ayTt_lA4HJ<RxizOgcJdw$ffz=Cw&rKd|J39*;}?~@6&dxf%=8u
z73EdnZ~8I@><1j>v<rEqY1bg>!x>xi=PB0pPGuh&)r!T8ZBc$xzT~q)ZkZgVD&F=g
z<YEG8?37gD>Ekrl)(C5-W{8?@VAs|0FA60u_9k;5i4n8B&kWx0v$;R`g`>P`ssN#P
zLIb@9It@tvZ=1C5$(oKvy%fIuNPT&}@~$WP+%z=MeEISS1`+ZJLO9r`v+sUm?wOZ#
zaZN)pL+FFHwr%OGsI?D{7hP5N_QJ#NW<wQ3yOh3LT*yL*FV0vwD63vXv7cP3TuN#E
zL<i1uLoiQL$r?gVikG<r^mYeE>VTmf4vfyBFj#Aw1>>NJmr=Y=P0v=V30l%}5~;4_
zArqP1|J>>k!lksT0|J`zzaU?XQk1HV`japkLfyK1Ysy_fahahITMC;F&Oh;uMmQ$-
zR4}`AZ=J%chgklN<I_Etq0Vs2j#AFZ>b;PBh<9;iZT-N*s<!Z|g8Ja1s|6@9alpG#
z%xi*u4T>X}UVWBc_CE#}n4UfkO>nG_i8Bav=f#XrcMeO9w(ZjxABT~h(-?=?1$2-+
z!E7R|iXkW4&XZ@ueeHxZpTD2{D`fWwm8w7JBnEYJ{XTuyZPq1D(N4j3zH0VJAP<JQ
z>>vCLlV?JkQKCir;c~Ek$_Q94SlcI}2e<!Vn)xks89m@c14|;scx*BDlV)L@aF|Wh
z(V^2XLf;+rw!!Gwvew}C&#E(Z*`X%)rpF0W(;c?RVuMAXbiR}l-H-g5J1P@R^IPR)
zEpYt4LfwkETA6od-DyMv5{*mD8UKrukJuV|Gmj`Ht{Hv$8(~SJj0q51B|YpU9E!m}
zY{io?y&tE3AdTbw?Ta_h;*9*+P2>?1Rt*%i?m<CSp@>g%5iQK8l*(G_!7$$Ao@)1R
z7p&`w3yEfXN9__egYfr682h=mA3}F@c}h{}58G@NI?CKNUXW9CRO3!Db55_uf79+w
zak;+hR#HokVA{m&T}S`}Tt5=#QIx3!?Of^q>AaN?2lXY-R?-)z)xCu^(0L&@o8x(f
zNj3-9gf)nIjXYhti40_-Hr(8JVZ%z&4LGww%NY^W=ybUL#;=XlK>&3tXkxx28R8*)
zR*96Qr{%%g*?|>SlI2ajVLU%AIM;!z)UM#nD}QkQ{H@|I=O1LCFyQt68%4-0eBRvr
zLU){;%-9W?na(Dw=S2KMg_mgx??mLd&ew|l8^T{oUk-*pHPpAL@XU_8SlFeFOSk7(
zcyfF47yMnbAjw{|?Y}GeXh>QP7{4>J&G~=E)Bn|sqMfs}E3jg!=2>fw*34`B8m@E7
zH%vq;)R2M-w$)Yx)=QYlg{x$A=ElGCe}K(g9yG7R!gsEV)AVqqunzpJx5i0Emsi)J
zeUS^F)>-tn#a7T-s~AnGbX#i9UvuIGwniAJ;K<y1x!ybZP<L9)wV%vy_}9$I5;3BK
zKO-WYBdob0_vJgy);L-UdMamxF#bj-nOuL`rH3w-!@=bXAlbJw&Ssv0iA8k#^Mm}d
zer2fhqVSFte%xB?TZQ>gD#jWz6O-!omFn9nK2N>y5qwoZbn-SRls4q{`G%Zd&a5JH
zN^@Q}P$R9PX3!@?{3pLd?-!dcF~GP%dGV1*)uA_^Kf>-$F3vqTLrCxIyiHYZ@ba(8
zUtia7+<!^#07dO-mpMnG*Ndi;2fq{fFP>M5kJtNLI&dA<)*3M=iyY)IX~mV`;FCXA
z$t6AU<C&h#kf9oAcq@t6MZOFAcGiRI%wTe;t_M|_wKXxki=eNGZew};@k@<ezm`4-
zI3L7@@Bll0N`#SjE<WOJ1lu88H7AkfjtC~}J^7o;fXF2}_B4lTW1u~u$&^!3`jW$p
zFQqfZ0Fz7%xiBr|&A`UXCqD%?<VWiK<DWaCx<S(wR+;7G^5w|+xv)yqt1{w>cZBO<
z@QUA}zV2X+hsMQfB!dF5SqH3K)th3sgY2ZZ?Q`nMRt7L&PQ<<`fV*-y?6kymvRHYP
zI*TCHj*;66c0C%1T$%d?-f&*gJ){V(b_vzY);uZ`xQ0anxOqr9Ihc13V@3Q1B-`#v
zyAC7Wy;OsZGp}gRet5!*1u$c7nryoU?LlW=ZL~$s+P|Q~*pG`w*_It5_Z9a!DM)0?
z&s#f{A2;GVG%GIan}dZEdgcBAu%<b`Sg6<&fbYYiY2}q{(60TsGSvY;U&zlHu9T@o
z8_|Dg?z?_gK{<@7D?n#h-IFx9wfhkaFpVlPK31#!vEF4ygNrJn5^j(e+`ARnemHr%
zc~9bUjilP&?O8QNo#ma-DS!qGs5o7Ko07Hd-UqE3C(H|eEvy_Ej;GI8^MU-w-`RxO
z0h}R+CjzI_x&wkosnN@Bnrh91l<hq<qK4W?)VseFMUy;>TZ_6RMlqiX?UkmWC5e5)
zal}V!zf$;gfUYpo?1X4BXiecH&*XF0cxdajMpLf>l&$U%gr%uVveXqjw38QmB(EN|
z)QV;phMm1pZsKZgnR~OxF<$ZFCm7#z0csz^pK0}J<L2rOGQm8m(}}8m7PC7?-;3h+
zf(KdQ&365{F!ZSD^VhCuG32}hrw`pr_D3cf!jpzg#G-+RXSVC1Ysr{U0sf^@e;Aw1
zT`I{RXS-C$QR4*)Hxh0$iISJQBgijt_RdN$;nnZZY)M@{?^c>Q>M@A}jF@=XK(mLd
z_Gw76k~2*XrwJ0_^A~zTSpt*fqM6gh#UH&v#yOAQyOXcmWmenVCs@#<1doZzMT(AY
z&*$4KZrfQthk!o{Z?-b^qKZND(Bf!}Nt-xDXwlyyPleKOjfYa0lY7gR-R(zX-gz9H
z*3_t)gQ|1Iu8#_?WfxVe>0BUbZF3RgTjGXVoekmjsu~r!5479@1fn^axjEi$t{I0d
zb~``qayMvo*Iu~1DN$i^ChU;N5a$pth<W6G3H-+XWRBA#eNii)7(|aUpYg-|cv?h<
zU97zI-%WsVC{@p4{=PIkH{dB|*df~ee#cU-Gq2|;9DkdHraP&#@KtmX2e{h^3JDfZ
zq_0HHx6SPRHYbN_|4X`zW-CUEKHX<P(|tTDuhZ+H2Yt+^%iIOdDzrw)cdtUE<9nH@
zWT6Nx4S(?nVnQ!IVlMerh3k?3htGSJR1>bq=Iq9#QOFb{P<5I4lVQ^0VW4k8ek@aw
zQbu1|3G3`~c3+5^yl+BF)quN5O-(F&lEAsNVN)ZcsKVL%_l&^ClPUSBw=5}ikKyq9
zQ158L^CV2EVeYBJQ(2xK<{;f6^5dbF0SD=8L8x-a=WTWreJmoj2)s!dNWre;iwiQc
zf3BQ|oc*yp$OUhS+@C&phpqx3kF0mKaRf)cQ!M#Zsx(^E$o-w%TcBtLaWrg{1pk{Z
z{rAggVJMpKVYs+9f(=NxGtuJM)DD$@_TyhgWzmgYj~<FhMyiB|P&-TbJ?wwE<ztt<
zPhwC-)rY72xH@!3Z~YL?EX*F^G@GoObLh)i9c;eEFmD`*B;_Vz4CeRhn;dFuU@n>0
zmm8NjRQBkpf|C-2Sp;$vUXc{#W_7iS1X>uVY-%^G94=pH8MoU8zOz^)NNKX7t0FQO
zL8*2sEU+a((S2v+$~4!5L_`W`l$22p-G_XrEn;C`BB~WOgmTJWasar`!j5W~T?&cm
z+CjB2Ovi*&5*hijccNKNpGO?X`sz-5Wl3NuoWsctihpE>cLCi$jvAZ?d5Yc7-d{!q
zmEQD)@JLMs{j3LvGdT)2s=lXp)M9zhvHP$HVN1etV>gfcY3d{i-eMadZDmo8wK>me
zEPwi$D9J7@9XrmL!h4c1i+xQf$u1w`ydz{0dAZHuMrvUvtBU2(^B@yXM8SR64^J44
zS!gcL@T+3spBIqOGjbAAsl3a6@~KY{pJ4DFaqjagCf$qFrJ23tNF7@wg-w78Zs;}k
zFKwefO=##yd*9PS%}WCipCX>5gjwPza3Ri-PHlIX*r9)!IbC0TrsskL5phF}-0>Rh
ze7tf6l4TmaeTDDnNS!!ym~WtuUW3*G%X8)^J1(NVfe?_;+Nf@b=8PWB+of9YJf|C+
zKfjr>EAwl=27&qXGHeote~)eVQwCx%lwu88(9o{j?|{EnX*Ey}+uA>!Fpw2eE3jIs
z!oO%=yYWpMC!svaX^X4hTFY+q>ia{3-@$--UJa}WZLCNT6P-qxGfq5WiYlRoogsef
z@+VrcK6Ie3fqg%}^ZMnKRP5Muu1j3oN;S0TJ=DUG5>GXjhw5cv#B_7VOPgG(&Nu?9
zP?uSIx+z91BY2*>GO7>(Ic*m{67Co)3uo3!A8%w+)IRt-(@#>O>aPvRj{VHTy*6_t
zg3gpSf4npWr!%cw`qw5P*9Pu{4GB`bJ_8g`6%f75bzf|9ec~<^x$+oTAU~t~BGHpm
z2Senvr%vK&qA!O`6-5B&<<rEF7gDZ0t*-6jJoMLZr+FW@yxvgyEqX3P{6u|0>+z(*
z9meWj#s4~-O<Zt3y0AJuxrdN9vKIb!os!a^o+IaH8vfVIxr^p6=GCR~f(GR7T9&z(
z_CVoo1G0}UVo=Tx>VIU2#uVPFTHm+^nVmw;SZ79r#VW=XZ3hhEqm_yI6u8-Xx=a~*
zU<bQDJP7*b?jr`q2N1<3ucjt3gzer*!X%}ZXlREYlW=8;gZI%ptqUsL>}W$A-5$}s
z!`HulqAO}wT!$O?ExY1#%oH}RiGuO_>;#Z<UMxDa&o*(<SJ6|s!V0r#Tnc>gu2{8A
zf0z4v((=MTJpyw@BYeBEB9?#BL|4(c@j#!sdG`Qg)C1s9=<O&C#aTG6FnEDDuV^x&
zigeA!D^_UtL<6O}Ln!nyR(ChVLF(^+#Rq`j;He@8E6HeG)qi(?t%d;85gvkHM?ghD
z&_nE<@OV4>R6)6_UiEhq`I7QecbO8ii@eJdw%Ip!2bUitwprCu2-@yA$bphJa3lDp
zg_xn!s8sCmt2;Q?{sov`T1^Bsy^Jzrk<Mv(pg@|Cm(A;=JlN6o>w#U{Ewfe`?jsIu
z$=6gkn8+Q4NV&2^<%)#6daZI1BcL4iWOVwc7v;~S!BOR7+=DapSQY8(wZ~%QYI^f^
z-)?*hPcb>P`>=y$pvxQae(=Le!QJ=IuZmD_U5^qo&_m`2w`4fybPTUqha*wC_z$(<
z27^Ga5~QbZH0CFZ`%Uq0zsj6NefdUQqI+59&ElMeJ#QQrwFC9T97A!0Y=Qn_nQ)K`
z{afdpa74oOF)Gd^l6cY)?%7vDKNLtTX2KDUf(yIt=nK|2iey<U{8=!&76yEQ)=UMq
zTHdYU#X^7H@3l~|5r`1=%3hNFc(6W75@;|{oWF&*+2tDw^oz!#l!lD9Rouj@S8sHB
z;349a(OTK^nm5{N;j^ej1MU}U+L=jk9J$KLrnDA2xmd_y)Pp15;Om`}tyj=Rl;6f_
zNzLdcUIuJW5?62{IvqIH6bQ{-lTpk#{*g4>P+7ZPEv}3T4$wPL)4l#M$X(eycVt|>
z=bt}t5Hoa@9jcis3N3~<kY@NZvz5?)YsyKH5G~<JsHqT-?DEJ4m;{R=FPgsb3$`~&
z$VGaket6>=XqHdJnrjkA;@aIFIGAj5wrYR<`c#6I#?XbFsEVkO&l};qn<`zt3!U`@
ziJj>BS17@S(YdSef+v0TDDmRArm)J|%e_4CH%|#Zh;$nfDKA=YtF_~0D_(wzP@(yg
z`PS}7v#cl(8`9Yz5OVvd%Sg+QM%L{6BkVz`7C(kYw{xY@a<|+kUpV$memPidr)<x5
z3mR<=p_V&5Biv1$OGmD(@SLO5asYo~EW3VJ%X?mfn-JlzWG=N*i(u^B;vUacMLee!
z+k{8r+#W&NTwv0tZi%7Nz5eoacYmhFVC8~^H;xfbc3dR{U@i`M3TX)eb5p%ts4u)`
z4k4J<9Is2vXc7{>nTuUDjuhHO&sPiU5ARzsypJ((SQ<m)(y8$Q>yM%$gxP3>|5J_O
zSglVvNs6UoG7@u8>gg(6n%p|K^6veqHp$*-C)anHVPeD<X#A8v(8<Pppi`|m>pZ{L
zKrvV-Ujz3Bpv9W=x}!m^!CbLy9r?Es1<pq#HjB?~hb{I!hm0G>lt2TFU=dCt+YU_u
z@+551I+_hm=$pFlZHb#3LR;{pVp{8;nFNWSGAbSHetvF@65YS~o-CA!5C?ixCCiS`
z%9#gD@{2^6J`zQv)?%bsP{j*cb$WH+PjxF6D!`Ap15&(=@^Gl5ezSO!{};4*mXsiY
zz@SB>koY&@G}b|)RcFruMKYBfD<`na{PaFaW19Tf2-D-y+AQ%jVv+QENJ04~n<y8O
z;dW)a!U}zZ3Vo2w`XPHA-te16@L$?yN1YG73Xa;frsLa!Thwyzy`Cs1*qeT=D?EQ;
zsY(H;@7O;~)Y=aHJ~YqR^|Ov7jHRiUk92+w$JvUcmTYMg)mx)5GsjbWYosKMg`Z;R
zAqzt$D*6~0sr3Em5r-W-m6m>>RXIZA@~)pa<x7(rIhie)Y4flnvY^XT8z1v>qPG2y
z@`E{aJ|nz*hRSF4M2Vm<-@!4KU_QccnScKRrE>VX2HaR}RBOrzZaS(%VKw7Bame)$
z1W+*j<;ha-GpldmYu7+x%3C)svaZIXF!_W`O2yvu)1h43Y{Dh^jRuE-z49B@02V`D
z7S2Ga0JH*P0(lRLs?=B!?H_gAMWO+k3&@F{`PN}?5@(sb8uO}eCS9mUqLebuSLsH;
ztLAKxnlH044nKoLHB_B>T>%GkhbPyC7%CqNI<v7-cKu5)KJ8~=R{W!Y9sylr1?jXf
zZf@)&zd@tS<dTqT?_3<mkD^-a0gTdPKj`aRBrEr!dwQ^9a#e_E&jXS5<t9qQqONJE
zhGOlv(2X><rYL`B&NK8!dLA8SP}ofZ95quIhl`ih?4EHFoo`?~I?13h?hbTTqo}0&
zo#8I^A&L=8L;o9t*yK1U@lDB?0wx>Z(;C`U#UhT+Ruvmojm#1!5>8N#tgU`Ls9UqM
zvzh}h({*DUJF(4i@j7+ApPyL>@#v`G<gRz9Q4wER-0j>ck7!=3h?<g(eX_KHMa85#
zVRSeKrPklV3TJ$>4kz?WJ(_ne?OCAmqHn_mU4N$Lni=wT+Pmm~v!rzYLmHCW5ti9F
zXJs*nJ(?i)7He^FQrAgxIS14HB9}<3k1HcewoDyb(ia<Yd<AB0nyj22z-Segcn{zZ
zMg~TW24?M1iH@13iBjHyd!`hCNi69kN3$`>5bCq6JGUZ&!q;yv2@a6l2o-u%Z*$W~
z?_P4oJ0g9T`+xrkiNs^4a<^;qEvh=Aie{|uo(q>P=bS{&Wg1Xk^xL{Ya)JyGNa<R5
zv+y4~sjiC-&CBjy?lEvIFIgY2?oTI3E4QjJ<CkmZ)2I1Z`#BG~`(9iDPta;#ca!Mb
zSM!22f3RGIFIYNp*B@XB2D=InytTAry~UU~twEzr2UyOL1T(eUH3>9Y#jm%l=)iaW
zeS|x%mGoacWzi2y1V;WqYuFqXFfxWz{t=IaO%#FM*Atc(l6?*yeR$ej$p%}eTY@H8
zufSBJb=!c_Hn_SqFAOM=nff+cNr_iNodKoiDbu?^jcap`25*M}ZaUxYj=Kg`;9UWs
zjy6|@vsatrgSjplkcQJDVc{Psy%zf~@osoFJxxSkMZu7}yC|M&2>$=wDOa1^r&**|
z9O)B1-N~z)nLwL+yY5qsSwHYj5&~Xf-xDu;;y?o`rrEc^nEQXWx{LS4*&4FtK{V;w
zQ?0w>FOUCzL)e<ezru(GX7h8$ey5)iP@l+~9_9;?EAaQR&zTaR-0YUlK6P58xWIdy
zYp_?V!hCx}h71-UxXJmQ4rbW_$O=hGKrOr=I{~Nd4c7+$i{h><T#!twn=|c_DE01_
zW&o+QnFDL8`O0t;9{jWE1L!hs)S(v;Jpi|P+=27;S;5|%QNJ}U-@ceL#7OA#R^+zJ
zr>xRg@<6q_Z5j_vp`)cxi)_)#0Dpar*r`0pUV5DZI(Jf)jWs)so<Lq^U*9&D{N8oj
z<MO~PdtgMSzd>LUEKtk1ft}r$jn<SWkg{yCC02%8RaQ&?iDHStAos#k%2e4;=7|DL
zc_j40Q|9R2rns&SL245pl+o@B{tXSD)Q<iD%HRSoj-aEq#DB96c*DT9KeC~PI$tTd
zPeA1>il>qy4hv!$?G*!J>^FylUk?x>*P5?3SHj-izJNBF?*K?g;K5a?AOYZZ8f;!b
zP1DIS`VF02GVJQlYrus$zjKT0i}ETqsNLEZV1E+GfPbUNC&hbnqq)6w6^MD#<*ksI
zu_m&9F~m7*g-sDeo{my3u?n$G`lLJ1sTd&c-SL*{2i3NT|5l>|uIvR1%v>2>K}Ii+
z0A6`((HuJjX;&!SgS+Vyfr`%;HlsEdTyqTk*~5zQpT`yDRu&vCUf|%lF+Ms_+S3=}
z{W!u?F0NP8tz+fSYcKAzV0o$`IsF4v8-ssN^mi{azjdQ)L?eN=`K=zhlTM%QnpWao
zQ*iI-aEQ<27VXTS>I^2cCjq6W%_wk7l0Q(Pz66jKLPlc^zN7%w7;tBhKVQZ6OkqaI
ziL7LWq0AT)qm6Nzg%*>H%jXnBOX{jE9lZMA{-&?0zU;5^Jg*mhyX*mteOd+Z9w<VX
z{vv>N;J~Ln-lRBQeeyD>O}g6OL|4bYsJ!X_1HL|OO1>dBEDzU$S$Dc2trEOdJYl#o
z|9w##=soi4V}g*ew8+!^mPO>*ddY~%u7$kY7t}KQkW(cEa*Kt)uI9Wu!<_x~vUs^N
z_p6k2NZ`@=gh%GtKc_U*F{OUb5s|l}n;5?()V7~%@p$;TT?MsJt9@YfH}JR)PZii2
z{|zkppF*F37aJXq!5KQzJ>XQa;VTNhEHs1tSa@J0SNgnj1m<+P4(jCf=I<&#$ZZR3
z+?-By*S!VC(12*#4{(gR*yd{SL+AW5lGX+97QB}TeXJGo4&EgOwCS_&{Nr9u9oySw
zA4og_%<(@ZhX>ca0|iNA;O^-YohhLKkZv5fiHW1o6G~~z)L(gXn$RTXiE^x?y9>zn
z0FT!H@9FM&)l)DE2+RqY48)tkcCKGqkAM=oW3bzgH(poo!z^o@oVc9fJK<qp)`Txl
zjB&L<Ol*$Xmf_}j4<Nft4r)mO^O0D-cEf-$G^5c#H19bbdF6+ni}coMO3n38D~LoN
zi8xpw(%E<eAnj28*ADOiw&Zi128Ico(MLXPP89lT>E|PimJmcD%*`6rC=7C=(!e`x
zhQEuCn<L(d(|`=Az{1Kx{7>Sz?`oR8yqP|$iH6C)w!1rVUUMQJfo(A4s~KEvCf^zA
zUrk1alPecc-3NF|L0f99gBGfQ<`D2d)f;iV>+YNih%&eVCZO&F7LZ%T?DP#7@kC{)
zaI^$k(v<Y-xah<3(0SV4Xyj7D)V^j~qi)ptM1rRTWCl8Qz??z!har_Jw)hwu$5>!Q
zE8Hlepn2l~xA6RcrKjG^yt)H+fsxqT0i!%$LO%aC_yPq~(<Kh7N$?YMBPloLFjIP}
zIUfKwd;<mm&uT}lE5it~p4EGU?cb{|4gTy*rXnrU)V0H_8BUn5%n`K$qm<)h5_CHe
zSq_ojc}cd!RdcS#>}~%60o<<)0m5Z>f8vh-AQt=&=1NUB<?zZLM|ujnZNOCdUAQkT
z&vfwfZXUhF+WopHO1QN-y`XqOt~&%9vLN6xSbqR;uZGCXZt(6uQ2^})FcM6sYG)Bm
zA0nYDx*F=_Gh^O2Lnr11s|@P1UB|+A#zEFnLdG!C*XoJZCu_~e1BWvQYxn!fiUmBP
z_SHxN=Q_fU_K*y-$b_rp-*BSQp)si{u>Ka5QERE@ws+A7H>K8Y>FNq(>P;_z!VAr(
z%L;zv=h!Fi#_Xjv#4(Et?oQiu^|Zeon;mW!pt0sBfZ-YZh3Ekoe7%Gy&DDQk;<EOr
z)&5(l_(qZOdZg?dd#E-Wq~ykFuXxXP-NE&MGvl!&#s|+r(08V%Qstkj5Uedv3P%tK
zwHmKCfL#6%#9f7I-ZYHj4j4d8ME3{qr1CT1_dmRW7j=ihB%TT2MJuA=8+g;X6$m7E
zz{@uH4>^-s|HI>Cb=nxHz}giTjJQBit3~%zW2I{!0!N+|zP?PrUiNb<KFi&+c&z!V
z8wWh86AX4U27COcl@t(Ov5eM%AM3^A;6VG$djqi`0O|_5ZoL<G8@c4i$Lr_y$j}R%
zP6p3e0$y&;Ui41!mJo2(6TtW3HRq5SVlwK$x-D5OAnBI%s!}qCMn+I@um}|fF%EfK
zJ1SHXed#S`_t%t~wEqA-0WKH@+yB>W_b9lawfhkW{-AgM^e%2Cd<EwGdhZVs*A-$1
zo-S!Oz^!NCwqpITKKTTO6iM{3jP{Jq=~vX2h!yB{_U0h)w<Yk;LBQhwtPlh=Kc4LN
z)VrD|(wR2Fqe%4EZ{VnhxRBR@0A1gB=#G-Ev19axp5n4o5yz+C8}WrGmpOptT>Rub
z@jYajeGg*%<l(^%PmAekV-Q+9^97cpWYpRT%hbEx4u)BxQ{jrFv5o;NrrY=>cWGnd
zC9NCW&vK1{R4AfhL@yF#vC^f}!mX(!6+cF|T*Id8cwDKJ{;_%3kL+&l%QeWnkalhv
z+~8KsCrSIHBjC1*QLDL=y2HU!k>Q9@;{^AGwRF?Aam$*0<Xrsld4e1$w1HTqNwD=i
zF%xLghTvfn(z{@=%S+4`9)h-VzIGV!*fK5ZnO07#)@YM?3AQ|~)DO}P;k#-1?9<KD
z=v%A`bJ6Ux083uwel4<vTNgdup-U`v1q5MAK7T=D&++I~vco?h>K(?;xq3FxW)RqJ
zmHF&{lMg874Oj)t1uz2G(=8tf5iSIw&BnExp`3l`A+ZOLfDkM*1N%l@=8!!^B+M8h
z>MoqmZY9t8v)nC0WfGz_YF7~big=5u`W+0mqXLU72(dpcf`DHY8z2`Ng@i4;`PCk%
z<3hD9FqNp7f9!+Xv$9IUv`4I1sM`wU$%HpM{g-Zk07UVhQCy^cYPsp{rrQ=jeqgch
zS<Sfhmh=fu(0=z-)qzadsyE$cy#N+?_rE#2o4gmOi2DHgiuOx{HY&LAYg;%=J;BrD
z6-hb8XTi?@YzesJm-zsg`3-<93_gIGz-sLaHv4|yFAeZ_;x~<Quqp1*(GyreumTaF
znn{+P;IL)f)r}|>tn}HNfL-!yANb=|cknyVIRzHi6k>jgSqEEHd9|hMFreu4Gr?qi
z`o+Hl^U-qtW0p6wWPQE(<;bg@^^@V>cRQE2lrQ0+j4J>C<iY%8N53VW5~N&ZcCy5B
zO*-gUggNytpm-#wO<8fNr(s|p{s$1Icka6kRq+nV8dB~jyAGYObPs2Q!<+@A@%1wT
zNt?4}E$JUEa1yd~9ZRBvWIeFVtlzpj-(!}`OLoLl&!xalv5uxs;`QL;g9h-it0sQD
zmE)`Q&~lnIMxvmz(to}3<a-mCxi%c{`%iwQTjH+Z>Wo&C%lV1oMqfaa%P{uvC4pg2
zlVJx!Esj|K-N*Cp9W?fE)gAr%X!UHz^9yW-|FRj7Sl|zKMFs0r-*vlGXiHMi|G+lE
z@V7yj6H+_!|7Iv}9n8f)z{UOpr*D99ViYu`z><)qw-?^U_jc(IwktXB9{-<ExStl^
zfX-wLkTu%~*z*E_y+-~)nSqS#YVh<Svgfn!vqCNmBDNxDpBq`Q0IWNY<ZncdK(=il
z>k5NqzkA|KFsLLH>=+9%Srj2asoU)}cwJDx*Dlb>B<3GJ1KVfmCMVhSiWaj%p&iN?
zlS8zJTDycR^t+K3#~egnnQD%SvA9Luu9ACmv9$%8krp6IRUdL3m%tEBxV?5Cf~s!V
z?Wt9&B=o(1JZUH2_{-=e(*sqw$d@14pJL+1ev}zQW{VZK)`-r+@uBF;JCMEOg7x_z
zo$@+1xCRIG1MMC72yW0{0{^$b1jY0NyjIUwiYguw-<h9dqMu(M4oG(ZZW7PxZu!QU
z5!3qzAVtBM<;jllv=IDN8k~RyE{Of_S**AIUx^36#BZLMXTye#NV0M^NSfX<q5muQ
zg_7)Zl9JHCGsHy`t_9nfK7sKe1YZBGLq|a^8Iz!Hl2tIncQz~MeN>}!rr^?49|2gj
zvq#A~(Kovsa7z{ynC%RV{@)4-4|WQ$T)gc8O1{ZoUU%NSgChgB=nFGf<|1?n-HiX-
zjpy+TH<Z~W_%`s+Z5nCkT*(t}w1ckBlrY=G#D#k$w_0cFYlus~vy4La*P!}0d}cyf
zxU=NgbSx3C3|A%Jz^G3UYNr47jZYT5nq_d;y&jbhHaCTGeP4P@$phyB@9%$J8SB%7
z7gsLy{r>YI1D?8>-qj#jm)Kw0>PElX<eCtHc#(cj9JH9n1dY_T+$dkP)t~AjU#*p|
zmsTmzOU<@?Uu+$E9<DZ*)Ic@Vpk2w)x?VuK7Z@9b2eW;6N2Ti8O8#*0os~bgcc4GB
z6thR+BKWjmwc>W{5zrl4T86yi=a%n~Ks@*Z{p=bxh;4SX7Ho?T>i%EPRgl3t6XURu
ziwu$_))pqUP6*B>LmoF=gfnci@rYlgZ8hX)La92am%rFNt+9TvW5`-T)0PB{8Yk@^
zyOfH9=wT~9kf*f7ls?SGL=pGd>!($Z2y}uB4_7Y0duu-&`xF{Th2~P?F~^yoc7$s`
zzHA@(>-yz{N=`7;%!W94;DC`b&vkGQH|h#ja;X_Pfzh*14oUu>umn!qvwI)=*>UU>
zjAZzj$KwNpH;?@v)_o__lPye6Y2%<F;cX<9EI5c(!;R=3i!3(-d<cH&-dFzkY(8^*
zG|>e(8q^W7OGA@mhtjd?h#JF1)uk$idVA6$S}!`HEmVi~R+}okP#|}9mF0anaav>$
z3z?Nm%|j$@gAuS%a>2qD41tuJEt%1b<Nv{pn)l?)c@Vuk-V&g))GLtS;EP?Q$60&w
zlm9$~5KZc%T(UY3Yh4~bTzCr2!8Bv2`E@9eh%Rb^S{Cx2*JJRrpR@Kp6ykgB$40r2
zd%Z3Pz7J#z->C!KGE~rELj_~<780B}fiQ=V<sYFu717QVmZ$gSi)!GL<PH_X^f1mR
zS>A+Fg(3}<wO9p#pKe<yg#%L+3DL_II&+NA%`MQYB%cBw3(Q>OM5!M{cd8HbsLX(Y
zU`n<PSYw5i&5G?CXxV~dyOWgvom#|kR8I;%{Oaraoa0s3iM&hu*7xl-`-<b-yr5cc
z+$}i@iT^jmb*B<TJ90y(RvXAxC_me+gXuQ-VmGaf>LB@dXG<OED-IQVk)d*ENRH@B
z<IA--vLBZA|Eqn_E-CS+hgi=j9`F<Pih-r9tcwZ44yuT|MY@*d;i_L^B^ppNGG0tr
z#}E;jI~{eS<P(flO6fhYmapS-Y5cZNpkQ$g|HSAP`$o3{lTy|w#qO|YdQ*p0Y)WH0
z5>UYfMumcP`3$=!of@C_2N{`W8&;CnS%J|)e@i8}I>rDjDa-P?V6WXT9@vuJqq{k3
z?Q%B|8bGufv;26_*8y$$xA7(qqaqJ+fmVxw5t?64W0C7&9Xf708=jIGS+fg=r#(Hm
z!Ph-o&-i2xPQjj7OY}xUgb2^%YgzJ_eRF>{A#*WGUTCDvb}_U#VRWe%iM@cGdEek4
zsPunJOkl>%GM^qA{kO!p*n#h){b8r25!MH=nzI@Txgo)gD1i_0E046et4uC%>mm${
z>0#NuFq!wh`)!xC%)9PKFa696k-Fai%$<h3b%KsDQRE8g)dC!Ov<wzr{gzdYz}%EI
zwPiDgl;(!jveWj^I2DGSm04))+Tv>Z*|^F0FR^LuR*Wu6T~#)2bU?w*w7k*f;coSi
zFUBaokXH3@^}4Gtwfy)ic09!C=#H$tti|dIVMvwR_dS;4(_<H|w<WnE!nX)QtrLw>
zR+!s8?d44`HhqM${QGd?I43e5W<f8PBrUUCF-;qLr&~FB|E*`<GeL)syHI-~#S9C4
z$h<lR{<t~{UY&@10&;@>^LUr`05T?Uh0E;|YnVCSdn#!gse_2j01&I@Ou1bu?jSnS
zu=vsAtyYHTnBbm^62!0*$F;qU%e6?wk4|S8M@pCCnPx#RN;JUe<|dvi;O~bfW#hC+
zk9uEM@ExJam0TBjy3)UTFyf_9(^|pUqAJO*nvHJ}`jrbPOpqwoHzx$negFRRDR{T?
zZ5555p)5xDmvAo2JA2_1Z6u4RaRgV{eI}4nk!7J1S6L$cW=T4w^2x{m4DDGRa1|I+
zo-n0kFKRXAg*Y>}+#auizxM)L&i!e0<McUM%TD|5w4y}Pv@cYi5Y{-C%Cly_9lFVN
z&y6Uo9R3n0+w_d<HY?E?+g)Z#?~S8ejM*UVK#9pKM}y%+74m^wOdD1y({Okwq}`4<
zc~*L}eaYXmI3ZuS$;(RDmQ2yw(uZ@CCMVURJy}qG^UM)@dEu!S9XDr-&!3n<4&6(v
z6p6!>ZTR#_mDp}P?Ywp1(6EqIGlH{9A<%L@(WekFKR_O!OV?h&PG6wOvy?_wu{NjK
z3`Ij0JA`qqotR!#r0|&LKXCkfE+M7wcUB{rohM@upfF1L{pHIIWp4AwAu;lJ%xmP5
zya-V~_bzL*FL<$!T^fsjW&#9|2RJZkBKixX$F0z`z8RWd6W<9T*J<tUp%l}nYj1go
zq&_tRjdm*Z?Py^<b$k;cZVcnWRKm0xlm6b$W-&)}$RZ!-W7ebRCxUt^Z7bq23+SgM
zW)=W+g0Ig{NJ>{&GqGFp#K?Sbw$m}z%bsHBeb}Tjs1aa3)N80$y)tEUcp<Ay1Hsu7
zUX~*fq|i&sEloIa1#e#by+_<+*;<-t^dmojkhGDP*L2<kI&1!)Tgb{fFL6FJR>|MG
z(}dWpARO^N#A0<_Bn4ww77Di?O>|sIi=6nM?8~)cEmK@cjO5T)Mg=S?$mMg$vF;XQ
z-%cY=b9?&viPR^ls2q_Rqy>`W4wYoq{bc5tmw6m8aZVd(BuhTl8whF1HdvezlHu?I
zv~y_GvU#Xw`DSbms^`)3<8F!>6DS`o7gz9e+sOMc=3L7CW@|plP^bRIx~{MqF4vgR
zA!F)wD_?Rer-I(~(jmJk*EkcnmGqe{&%K3sv2_JYx5ZzaDzQi9U`#9GF5`JmKFZYP
z66MOJ1;Pmp^lQ#Bz!LvkQ@hzaxgGxtJnQ@4;+RUmyF*8Y$n531$3QB;Ny4%>Z5aGN
zlFmA+itlUVARyf(-Q7qx(jeWf(g@NB2n^jww{&+&cXxwygCK}>U+%p3`+NVpYn{7h
z)||8F#PfXi9vf91F|MEd^vj9wu-Xc4BdiJCi<!%N#lY){(w9h>LRL^c9Zl@$$N?Ij
zLF-|sY<Vb513RTY96gX6e<@rVE9AqQvVQ5|=-c?ajbt*cshFQ8-ukU*{MSX#+6x^O
zg!r-t3()$G0WE%3=y3e4h1WcF#|~M>LIz2?DMdYRN7;=BK>KT0o|yR{D4`+D```pS
zQXKGrL{rwgJ^n(lBhR%^$e!=#2Pa1=uyITA2w>flq$nXLfwbs6AivdrNc+B;9tz5n
zLU+9rCOD1xqB|!xcaX(AyZ&I_ntVg!<+%mM7~ac=!kwvg>f+TOUVX%wnq9(|t)-i{
zJUc5@7d+<Zqoh&_{=<{<`s<meU>c8Mhw*a5#AHOdh}X0~-XCQ(`cP?OE;EV7^9FvX
z(>XP0E=~t^`=6450k-Hq#F^wE6s)pCovio4?->&zEf&qQLlNx)b9>j80Y`7IfFe3^
z?Y}p=Vzz^&@N>!~UHQ{`q#n)ai;p(U#{1wu&OJ$+P7wWZTY5ZU7lc^_dM#NaL1uhO
zMDEHSW96<3nf7EP&dL{^%$Lv5S5i$2%xxXW$(;-kW6=oEthRW+hX}GAIIh{(Q@q#n
zl{DLAm@M|Yvf=I=&HOLA9VS5ljpa}=b88g$YV|Gu+Gf<6yn=V>-4Kjiz=@d>4h8O*
zYDytZ^~9|b<z#v?p<%W^uZx<Ar&!ls6fq;i$4Qa<HSd@Z_=+r8r>4o;@Q$Oc32zYY
z#JCZ62_6TS_Tj@{H!4`NSM$BwYo)1w%!bfc8<Uh{**-+bl#0-<(9i%faddlyfDRC!
z8>t;?@MF{}A_hSsWnt1LZ_~D!_1K48u}~l-j!ZZNar72xd^y!E)>mFB*7}FSFb(`A
z#ol@iue&{;8%dc!W^9@I^4HNM9zBJnQ7gAi+n;PZs^4G#OFG5YHGjNo%=aZ-u@s_@
z!DsrouZ=`kdqRhqZNCi^-gO=EBFV=3iq6^UXejowbCMi{ECl$t3(4JEvgYZLt@dL!
zGJQm`Im74o<h-twFRXbRQelx@5HHqxfQt)A$%tN!|K&S*)YEqg=pux-vHio)E3SuB
zIZ<&olT{{gMWW7cUw!y`%Uz6!Ycc+Ng59F77{)@`^8Fid?PL;g6aS^6Qg+=x{tL2w
zcW16wof-w&G)F)Dr-KZGO3$@wjY-k;0;1!%XM2#}6PuFf-6ow~FAtYV2Iq&Ht5ch?
z2TH#0$O&5t=O#xO`9)px0>U5&lu23f7_evGAhCN-wu2LgnwE2%ZOxIE{k2g~`@o*D
zH-v9tS)e}*58xsllXYJfOn9;zS>@2i9wiu;4B0i-%yWnYKd<+I9F3_dV0j&kniXb+
zm?xbB)fU7C|4MD~^8EjiGWra@7p_w#-x@ojS*@Q$Ye$Xjwc}otA!o0#_)UvW(MU%r
zfK7jZ5`KpwzQc`mzQp6!B`0dF&GU3mp=jvBmG_VjFd9B*&havQHh;TT;=1<tz|He-
zIx5JJN#I0JPja09#ejqVJ!j@Gp3j7qakh#+if~-|qEx1Z)I|axuj)7d{T7Mz)W<zW
zo+#rlieq7lDdhQ`|6J5QeS2a5waHD$ll%q>*_#;Y7!^h1OuQMc2r>;LWm)$A*>P*I
zGFUDW0NDG&o%w!h@ElQ=q#(gYZBf|GSYiCiy+rBlSjZxNC4wff_IRLw=E)@Dap*q{
z$3_B)oap17>B&a7T|2Xu3)f5;DBHTCknNCY{AeTKG1}8v5#vw+KgU}YhA2BxmucT=
zf;0bRdC@DmzK^8QPSJr}<SjxF&v(z%s`A~dO(49P!SD1Le};}cmV(~Gw_MFFf7x?A
z8OK(8+l8)1x2>riI*U_Tfbry0H~To%L|&7k!oB{*qZlz-9f7sDz(6k4f>&q};Sw<}
z8AbKiH1WTJP5aMvh&QzL6TvaUCr_jBfQ@v}+)T^)BLA1ej^XOx<I%{T|EiDo_z%3M
zd;#KG!--yuKgSiAXHDCSiZr<`Rvm4)j1^<j>tR7P*4<gFd`$sZ&l1@Ws2S!R3AGbp
zB&MhW{Sk|@x;ZG~s(*1~5t2OCZhaMhZbcr>v$npx*~UL`mF0F*LXrBdy%xUxS|`kU
zpI+*P1!9hwd;WWQJ%w2!;{%3e9hpFX#WLWF*tAt4bt5!W{+(&E@^yNgPWa=jN0*uA
z^q|F8l$s98WBLdM`W-JFd%=J$W|S$WFvn$U-$&iv1T%uBv*>Udkv(F0MA}7*!wxHc
zm~?MKph#c%)Nr+{QfVyRGfH5CPD|4D>X*7}pz|yt{|C-`uXTH!Svkc)yNJs-WO+bD
z-PreQo=wL-_gXF#{jv$Z6Wo8}BOEQNQv`|*lhdD4-sx5lSYPtx+46sqa43I!_4abG
zH>b#B)`HDEB2KS`jYX0Qm(Y=<)si|FuhE$tE7CW*%_KJE^oP;r^oGCctGG|4Q69ZS
zLkdd_#@cb8q<*%y)#+BQ=a9wYN}yH%G8GD1MIBh!>cU!_yqhNiN42l~ZW@V@2g>tZ
z12rqxHDp$4p!YvThSfDA{3xmjg5t#O8dei68#(VhoZj^&-y2uYK9d(YaDeL)V270e
zF9d*z)xpVhNuczT{#@}+!5`{%LOIuLkSu}-Gh&AB7m~j)VH|hLA0>xj7DWI9-<2R&
z%>I<bu1w~IWHl<a;4lf>qrEy^X__=v8(IB6B=WPJ$NMv>jN|Alaw`>x`F7w->C)sp
zNbm^4<V7@aIqeic%w5$%qvq&w!BJWKmGBn#+JubqF4{whe}Ow6;nImsrFL<uRR1J1
zMe$#+9bc)fa&Cup&8S0xA%MhOKpT-siDpzDqVCnJ6cM)A(4I=pnkJoRt0yhE7S#75
zIG3Q)w?{K?=TU9aCnERuF)@3uK720(kM%QhS(dwhPKK?;b3tbLvG^_VmH#RpDCijk
zW;M}5m*1uo_Jf#_pvT1+;z?>B<&gf2AGO5C_YCfX-_ZdinzJNkpxdS&qf$~1JOky!
zl0#Q+O^n5`1QZOKd`fSOaI&{5-QQo2#|+@^Djr3*=SeWByJ9U!Ty7;jKl|<*XY2jp
z7qM%}<kyLPm&24=o`@VZgw2@4gv00X;~{ToYdLL{LMr}***gW^?fGLr6ODJA@QiSW
zPuC6UCf*zVgrwsHAm-^)aD~Kf9A76kwZW?c#zX`#;_O?d+oX}7`eI&=zYKr3p?w_#
z)ahS8bh*N25McTHpWTZF3KqZAYHb9Y$kVux5b4KVpA@Y-WTni1w(O|qM@6}($>cZ|
zHP3b@vzE~b!a3OsSH||ku%vf$LVIv!wC=!)pinqSi)01NvfV$Q)f}_@c;Gdw$w8G}
z@bt@2(9@vj<_^PIh=0+u?w@_eYLay_P4Cn?Fsqz;fy)%gwqp&Hr(!R(;=2nuBmFa~
zJJla>Ka|XI34BI|0M);KqCL*MO`#hAaX@@LB{pAi=Ug2TnnMC+1OK6QJo7G8L?WOz
z{-HAIOC^v$d&)hCHRoCBF<>8@{R3L#nrk3G#oi^KMuRE!c=j~#HkE_FA;!or?b?{^
zrA1njL)FMSmVbCL!wWHJ7DMI_`PE6$=Vp5;iu$+#yW51;0o+>GaTi`gT-R_3%t*SV
zgKx5>k~Rh5o|q_GaCid>ea8qyz9X{;w~UE%RIPwa89Q+@pK1Wx)y(z%xy~<ZmIWGh
zvBC3?<5%#=R5gBS=CY5}c{2F&;cUN>6t4Mq&kMw2dU6WlBfcWF`?7614o<MqZv>cr
zc}L}Pm(Zy4et5Bmt}}dVSK?AbilU_9i*I(@UKj@PC83D@^2fK^TR-k`a-1Xj89B#f
zs?~*nW<1KO(lTs$xWG!Sw*enNsCIv_dI}PBjkD@W-Qr(fR=UI=L8xU}j>DJw&P~?m
zp{0aSu>ZyIOxf<5tcfbDAVc7_tzY9zDY1ET3HUq@5?}r&`bR-qilAU)YeA2E1=+WL
zAqthD0rnG>F!N}<$4-$yo}|^v><WwZ{+0l9vuwdmi{OzP#XBQ5`7UH$nP!Ou?m-07
z?@41?j2PI5w$^?YuH9TJReDCAORP7bf=TlrcxHMG*f+)8n<s$xFiriU$5I)7>@I){
z_L1qREs^-|T#WEo7q>CaI~5&Ghyr?b7e?%lIq`5vG@%C4y(XfZ=wf1WD{kQu@IXl?
zTZZe0JHQ%oRVaR(qJI`lCEVxxd?9B0D{lzXgVU5qO{)9BdJiK~r;$1i%hXum3m%<f
zKE3A;OM*GeM3Lp0znCcNB}FBTf)YI`dYLWg65#BA9sxSE$7}~CHo)8@j$)7rtA9uO
zPn*P?k>Bk2gUncnN`BUN-vV<0{+dQZ3Ux74|5dgqma<+l3oa68n(JFT6GqlXTtA(X
zK@rl`O8g1F>VLytUgqq8=+spUdMY@h)jSM}j)E%=#W$cFv=rgLaBspKTA{G5r}~-M
zx8?uM=aOT$$0B`6V%Mwu&4=4(fD)ReR~P{P&q;U?NbPNADz^k;M`FUXx0Yg!R99os
ze^u!@>C=(~dG(R8(nVat$DyLvsp42CU>J0Eozvq#nuRgK&jnN=zwievY4iROG8a@U
zy`a<_o)IUGZi+6^8+p%%i5N#>m8Jf>h$_^bmt3hi6`7LuQx;+2s-45At!L7=R;t1D
z`E!Qpv$oyc8NFs;<UbMJp%iAx|94KP-vwV?It4ypM_r=pfE>xym*Cyi_8v?aKODX2
zY1)16=@6{9XX4O1^9}yARJ{uzU-js*9fEclp)dEaBTAp-D41L$_Fd8!ZD%9*p)_J~
z(EO9{p&#n-lC7fehpbGk)kfUct7%jpnK-2X{xt~#TKOT%_p)I0gZlsQnA_MtU^iq>
z#4s-BseTUp_vJ6B^$4&x)`3F*8A@ri7&>xRghD2wkg}b(B6G2LD{tK7-CTr18va`C
zNOUFUh^6GX-xu%q()~DguhU%dKl$9Jq3bPO&b{>sU)QPmMn3V1O5U=U^fE10*gK6I
zW^GGRxXQ?IhDuj|=_>Gfs1m5KC)qT&Vb^kI9m4*%fU2+g6$dN4y|Lt<10DM+`#Gj+
z$wqibsKc@Ie^G|;s9u@f0J3cX$p4G9P;d$VBH?E4FI}AW!N&;AYGl8%jHY(o%BBjU
zFUESY>D6Ly8k)E;R#njx+dJ^-0Y?OIcm)PF$00a9zNy^laV&Z0@$9+)MHPi<AHbKd
zmcG<+1#ZX2&l=#R!k_!?V!9j}|Ktx-2luRKG#B|aP+v^HV=6>^ru7Qo48C*7OOVDJ
z_C;~4_r63IY3$thkF}WKKf_o1Lp+nMBNb!RLcFVQgWs6?#OPi)@n<#y7hJP0G_dV`
zBzBYjJC}n3a~)feOI(J1^-*la;Sy>!>`Ui&%8I9@hcmvU@s#cVg9@HXc7FG4CSpU2
zRXlWc>%}JxJa%?>**8ub(4e2Eyq|MDD=$FF_Zgv}!sJ=P-dDioF+xq~p;`7rjT*Vc
z7Hf|e>a_%AQqEOV8t}CwIg}|rHHp4^(Cwjvno?XxFM~CyD+QgsA+7-)qVS~w4O0A~
zMbwwe2J4-VQv*Qd7VA|HRncU><UvOK1$klsZ`y+M+Jc68EE`iqV9|ruO7Qz2>m?d&
zyy;DvkDcL=$fFdT_OE`W;RQI#L8}*HPhLkb{rSP0J@PCcfWLcVI2kL;EVpbt{w+D4
z_h*u%`kV6CG=7;;psT%hZTR>r{1>Im38IU0?QlfC12&#sm<Um_C;4-2>OZx^iU_(O
z)vgdzN9koV(4v>1_)F$g<z_!*JrK(D&UAtATiKUPQ*FO2p+-sLE1OCkEljJVhCLnX
zINMqa&q-IHyl8D)&yYXoSxS(-ZHKDhpRScqY%z?fnfe1P*f*m;NXiP6L%53PZ5e+S
zR%z=xMP*QPqJ6<%NYo~4kBN@_1CU&y;x5HwYQV&Hzb68}Fhk|gUX|dD&192{+C7_^
zz9$(&RIvQve99;R+~+>bDg_I2uJz1>40oxPsDO83jJhOI*|+gBzJbI6)jf2+-MpAo
zF2^{fK6FC<3=LeesSO7~00l?!$?b9<Jln41A-K#6k;Kw5gM-w5AlD%1cT4#4E;*!J
ze^TK1SaRnZdF2^KTF$P5UMS+EpH(uU>C=89@j(#SWDaep3IdJ3nSt95ztEn5_$%IB
zK+*>)d4JdSkcbXNIHAAzb9dE~3@TKbvi%3?alt`TE<L%lb6bOiQOevT)E|T6zoSwm
zpyE8iU29@zmrFOW&c@$stnz-Ik{90pY8^M4K58TPdxnOn@ku@-%;aL`EKkHGs6wZz
zb3~eeh6bOwDg<2n0orUj2*SEn(Hnrj=y^3r_Yrs!xcgZz%|dfyu6H(53b%p=MY1R8
z@WM|FeEu1aZNLG3o*V$C*l%EN9v21lD|~(N>bDIUtIOSDY1i%sLddx?)JZ_=3iQc`
zy}B$r;0*jxwDOk+bNoB7;WcD=y&Pg5tG5gK#k)c-%%z|W4X6<OsvUEnqy0Prx;&K(
zTdf8G;rHHuF2IfF`*{`42mSu}>^`6?BM9`_1!0}_YDcmM0=5a>Bf&<Ns&4ZNjD5TZ
z3g<Zg!d86PU~nCQ2qzo3-|*UfePqO!bE1424ffjZAB;KMcFaSkt3GWTA`@4IfypoC
zu-8-c{bSfJKmnkc2Y{(oY!BPGVD3jyzn1u_CpeiH3!Lfl<LY)m1V!?!2-StG1nx`#
zgR>-De`h=E11dwkK7h^<v}pRDFl7SCeK2VZ#HI1uSc@{#VM@E1Q%_%VQ}l*9akoDY
z-BLVxDL9;nVvsu)`UFz1a4Nky&?gMo)(DrQN&qI8)@Ahew58q=EB5^Tb&?(`%cK4u
z%N7S}w*3ABgB2e@@)B}(=!o*77Tmd8vhPKYAzWU{#kSfiC}<q|0^_^-c7Q2rv2Zl>
zn~i5^b+Y3QU@F*~0s+RMrH)Pi1Kpfq!L;RHhH}?<3Y)bA-@+NOfS;$2fX@QJ|8s^x
zTM6(Ae%R0V5!#6Pmmc4Zy*rD8cO!y6QFYP>_%K%JBkt|tz%=2y@d!*HfvG!nO_CKh
z9obDyfG2t{#m``EoWa+|?>`RL0~|>Z-qd9L`fWOz#dtc9wZrI6WfF%mM%Y-7TpN_`
z$lM=($cDa~i!|toT+@XBAlBhQwP9gX{WAXopgnA(Ky#`557Q34Y$;4`sz%ye#zsIV
zA~^TMXCMc<oOw$NJ^H8&4{~MsI~iZ~f!6R+`u#n^T;OMcXh>~1%k~dQZN#1T?0=7m
z4%dzbHU9GeHhJ#CFo~<FKCp%KO#2R(o*x?}UIm+<^fm+FstOk|dg*l$qK8<&SR+e-
zunx{Z*kOIBE!_tN(Vw>mlAW-i=uSPsssHQx9o-A_&m}N&Mh-gjzouy09%PQk9YCJ3
zuqyE9F+(iA-T+7rn%8E?L2_aLkb?@k6*feGZcd8{|9^=K-HYw2(lhV`=|vJyeEfY3
z;GR9_F)%@#2;eOFUvig0exvGlFp%)daTe^41>2M*9=6%xdzGIgsleJVhEufA5$SP3
z1u)tcMCMrU1AS28U;zmm?*Dn#tX$|&SW5>dtmXR+Pz{UsLd{v&wo8%<B6<HEFlLa1
zod0_<S3d-8e*&4I5Euzb<_!{SLUPLwg2Aa*0W~52y(H@ng#W>#f-<oC<ihrQ!NA2@
z>lIaMB^<2B`PISoSmJXKmbA?dsm1B8MjaT>QrJLuyspUh_J4TbY4Fz7e0iNbt^4He
zac|eHcThn5;Y(bDBar)z%ly+S7F4GHnEvM&;CZo~*#ed~Wx+;vS$f=mXB!Lk_rdoS
znq5%lnbf546fdj)+rJgn%wal9SYk!Pq|4qydQ2d8dB*u>$ij9HV~FDx5l)0rub^;C
zFm21(4xoPtXx;Tp(SqQ|@#sA;_gmxlx+-)q2>cYOtzQB1U{$QRBuicpYkuB`Yy*1A
zP<=tNrZh_MD3n0Jr7fWT_`}@xAeENQcW4+aBanr79gk@r?#CgLyWU*X1l)a|&R!;#
zUc$t;h}h#nw|MooPk1<LF-KUl%dN(AcSz7Elh?6t5@z7!3*yN$Fljr3ajawLH_j_;
zLsl7@n1T|gv|t+yZ|scX$JH-l3qX?%Nh~z(q)q)XB4i1@uB3LHRQ%?v^e4CKfhgAY
zzf8+t6LpXCh`AUm6rlW(FRX-;yeIiQyDNR<WP9GJ54z%0Uuw5Zv$sukC4cnvR7`)s
zJS3s!48<a;vuA%}(`Q{2o|<*N!F`iBfpsD2wZ~Nm$9CDX1nctutzmjFV3o|Jl}t0>
zz+(j-Gd=pcj*%uk4$H;BKA!(*>UUNix`HCM<=^uu=6BMlcUsLOAbL7f*6<eU^i%5*
zJem40OdANm+TioFf(O0|Uswsp)URUq31>eK!T{vNL7sjXL718m1!_AH{Wr6+Kg3;w
z9AV(`!*VcKHsKBE{n@&u*ohn0Ou537V9CyNzF)CyzNZ^ueB70se_bUDSGfgL>!CrT
zA(F_f85dL(XS|3wx<>d2gW3O(Y;8KW1s7}T-`^Zx;Z_vJBj$Xz5QuwRyhpE>=nc4K
z@ZvITE443acJ2!@lycaVme(74dWxPC(JCfUtyL`7z<dOrNzb<)8DHBfWmy+7n!@V!
zs%Pn`{!tfP!}Dvwd|*R^OiE<+SWmNcc|>~ub7pR<ikbV6AsPm5JOBhcOFweiD`ERp
zjudc}^{*thcEbe-W7ilWU~RYD(EomJn1vXPqdZSn@iM3p+A+Uy^F>Xnq+W$xhkWoJ
zK`jJQOp}UQ_}oDbsm+f3={8c4L{mRH6RR%|JxtT>C?8-(#x=ye@yq`REcOTR&xtF^
zD;%aC%Ga&<#9NOmVC>2SrN4>>d`y!zdHi3OxZYforxv8kMg~F1bBN^p1*NN(dKz7j
z?zv<oY!q}_qVBh)m5CrgyaJmzdnz>$l)+ZlUEx&n?EQ0x3HTA{dq&-ka`V>s4sXh{
z>~W$kgmCn8AKG15q4mronY@<Vs_|GXn38Wz!0d;LY5>b-xPI)hKhuNR+T0B2;PzOd
z93ZoN;+%#P`1q|(fa0Q15jq#(7NLXuH?Dmvgq+>JlPaq2@DpN``ek=HQ6vzbWsZwA
zhPJx4N1<q`Y~a@E^%ib&-`x6&?(dJt)VCstc2WP%b7SNkV?kZ!DJ!l3*uq8^3T9a+
zfQQsp!cd@guc$^IJRz+D(KIlL@>Mps8JU5asT?nm9N)a}zVvsOWceUGZpHWd=MBM5
z=816_&r5-Oq5J}{LcdM`?EkS)sXO430pRD*6U4%(ZtVPU9eW>gf6e|8Y0tbf$RZD}
zvLz9#cL+blBP{J|xTE7@iC!f2DYWeROpUe?Y7&$=iEnKGh8vT&`91*ENnikEeb8%)
zJNvdL%8Ko7iQc(GSoaECCcS<F+YMo95UgmR`FOCL(?MTB50KC1^0VH`;{>zrg!RDV
zMf0U1^3ANH7<zy$FV=%QW%|*&Rqy##&9~$0+Kyt9MJ6)NFCip9gJgyLm0KHMNDEg_
z4Mg|t`aLF;+0{OP2cK};nY1gJG?SZ%*M73Sg--Hw+;ic5R{2`=t9{4okxsRDWbKG8
zv;5j>`vIQoZz<4Rk(+r^ntEEWDA3JpF?lw}L6TT{>!cFUMt$d|^3Cd{RPXUx%&4Uh
zJQaVXe*zf&hCJ6UaY6uWEuwi4DXteuka}B%n{1QAAHwl2?i+B<kzxA_--&?~aH$n(
zqV+hb6vUhyLLhZr<Z1NOFelSQYSv_!+=?P%6pht#2ApolgKxHSr_6V${$Psu`uyuk
z8+yonJ$O$}{=+n)XF2k^tE{RQRyt{B7naRMd}of#BIFFJy?dRxfm|69O#Reo{WHdA
zjAjyRQ|iQr>)1=|(o{kY%bS`KGa`7)G-sPy9vOlgUc^@*B1(Choh>dQLHa~V!bhHJ
zV(eZB09coWJnoOS^SRu3Yl}yNM`5ZXHa$p7G}*1t)d;VBdw0T-bQioFZ+Asl@$}Sx
zV>bz5Sf?o!iaN}?2{p!~7Wy5A5xHY;I?S+Ntkq?R*Tbd;z+Yd@V+`I!&AjBImuVyd
za$RzL@Rf6a4<|pi-zQ0+`t?VK<;)NK<&?PR0l3&d_kvG>P~zmn3#TRfv&RR(y31?@
zpen);UrRf{`2=oO&`-k>{L*klgr)U|XXC*jG(r5CBp30(qMRS2N6R{bkjVFkGgS1^
zF0QoDB>O0dw27YayS?wGTJY7!1gk3wenF$!J8jJqb8Me55-fljmeSI@dx08iQd$K-
z@7zM3+%QyZ*JTG6J|+cE`DRt-kUo8&VAfR1;p+}wSY6y`(nRYiHg0emjoJ_fW5Fpr
zCe4?8Y%S|Yd4ir0=H3|i-#oLWxRYrsKZN%Fpr;DIV(}O5@daLXC#D`ZH@T>sxbm?d
z{4XyDu$LvLUof)BRptL_`=Vt^_RQ@AQFdx?gymuu;)PJ&hAg3B+yuI|!F}akF1#9j
zt0N^3+Q|1)vJUi2JQY$FF^N1mp|q;)WRZw4WNWGZ?9ALB+cQt}8?R*(A!PDI@HOsQ
z;Gh{yzvp~ftY|3^I?oj=A%Pl}DpnTp=+Q2%bEgZv;Qh@##U~K0rX7}<9CMBWDvqCC
zrbgD)kEkSW2W#@<eR58*0W5O%9C_&A_3VDc!^J*_W@pV8r)0HReg$boO2q5$uW2X>
zc~Haml;O$9P3w5D29Z7<yBw_1wZh1PJJS)GZq0cLw7RDk>{d*z4(F^N*uJ^hG`{a_
zV{-p7?#7QU2R&Ui#!=OsM#ka;aTFnN<hYoHKn2fY18;j;ep10`9@8;$eZP>Htt>VY
zk9(P)`n$ZyUBm4|3Ca#029~KX!fddsXfHxJF;av3QjG97Rra?yukpo^H_;FyR#fLL
zLcTQKomzKVYI$GFStJt~o_<)iFvCB1(#g?JMKDyV7bhrN$~}NP${Pt7D7M+K&_X7f
z(KmU^6MsyVAMN(2H|F)1lf+Wd7q8t@zLpmezg<W{0JTlj+0iA-9QEeSmGYkh#CH;(
zMqH34!o?3@QZL;0hneUB`ZTGl2Q2@;k?2`pGU})ZrVvi*=1rok=eTjN2xne?zWyY|
zbX<6@O6NP$H5$)&DJCflNS~Vw5B)aTju4J&scz*lfv2OwrTC`D7o8{H+{F-_{yAG*
zDtztl`;CGV=RJ{w_a6PzYCk#aPhP**e)n?rB)@4EA{Lb`xH8bK+J8zGdX+?V{$aqW
zUXtEODM2{~R~yB<mWk#s?T^;iT+(zA;7-^gGR8xIj6S>OJh%L;1~7{Z3M!3}3(^bR
zmyF(ibfYb`3cT>QMwGw<Y5vI<bYuKW=e-{rvcVISorEamVwi3(lj+k!gIixo(MWDV
zy`Z~K{~!yuBiQ0PP$f-g_s7?!&z^?*9gqho<VogrWVpFxSI4vK?QVEn3$ebq&g;6l
zp2*xUwNQXqza`fPDEpg)jF*~})k>MsMVS`~t3D8mi$d)ow)+zeCqmd|(ElY#EubkM
zn;ydySs)JA<=G_H1zvxHLZw{k4`QUC`i+dc&k`%0*waFK{^B-Bl^%HAvT%HFSV5-C
zoISbV_0Z^^NV{<5RL{nHV<eW;#`Zg^5&2@D&n!Q2O14!Sh=F_Qbld2|E>Nv?4|=Z>
zom%lKEPYq_UtTy=n<G0fD_$tkVL;th_MH}<?Qi+c>Nm(!2s;b}qg>9F<$@$hS~qgE
zsRVao!hyeoLX%%M22CLp?NVQVgn22>hK6S#esI}yRsP<I>!rA}jD2AMksMP8qK&vC
z116SS^$J}d0iAs65i7j!Kgy}21<>9-?L_GponjYmF?MId`!G;zoKe;d*;7l`swb#x
z2M5NWx4pkUbM`pHEq)*0DC=}NO3#Pm!;fJf@pKGH6Rm&sS5(Ly=hj0~66)^3>MskD
z`C&u=BlUjfkzQbi-OZo?imcOmNd5hyW<s|Us;56HV5%nZq#Q$X-A_#EIfBN;d%qpj
z7wC-b_TsZRY{uW~tHYUMUGO*~zaNf*Z#BU;GEXh5kifj0S$)q*y)C-|7<OdTV9vc6
zXZWAB_Ls5fWi_jWIqtM$V`z)vvd)V{bNi#X4t|vZ?1X<sGUk-}z&Hz+eeqCeaD*su
zx&ScKJIIPF_)~mX&I+M_Tw)JJ6#duomg4f~@1zfnV}C6;JsRnU+f}#FhAf!4MwCu`
ze$dBlRCpX92`iZ-+^!}2p2Ump;btvpGzk3gp<nF${sHOY12v;?XfB;=<+Z7)28?ab
ziJa_@1f~xfCwNs=fJdnpW97EBFLU>>SpkS@BqTej=Q8xd#Syp2@x7RE0x4j?#BQ&I
z_xrn#z31{}X3)l|cxb2m^DzU@dT=cR%7l@d*pJV{mm2#y8Sbx*>hg1#Id!-9?@{hv
zEi>6vh(3^P(RmE;lH#!pxdqPc6OV7u4`MS%P_U{0oc$Q(%&yp$QJ$BMy(8QW<0-Pw
z5f#WdRJcpF13A9~U!x*MBIF;pO|d03{PFSReWBU^xJ`0Dhw`kfD&Ztnq<5TRS6*eE
zU_jG+;~5k}RC<=!!l%YW2Q~HEMk*?#5wW)Gh0qdSn|jSCMX*;lIcGfypcaX{O^*GD
zt&a<*PgrEeT6AkZpq)m(2+WR<H~|clK2-+|Mm1l${yGsbD*gKgO0D)Og269ME5lJu
zZ8jx2RSsZ6-BJpfEjX5EQi`#DVV2=27r={Uw5{?%i&7y~M-mRPShmQco|gTH&KoB*
zO`k_IvSmoc=0*aiv|#&Yq%`JRSVI^@vH?!$`Qmb6DZ4NC!P=s#0fc?f1q6(yJpW6c
z!Nm}@y?}w$5;WcZUU(xBIn{~AahCM-$?ATWCc5*1&sZ|e1PXbPUTQbWK|@aze<p&*
z=O)}?)4w$H_^1>B`3QlE@_va_;HHzOZzGhfLtfYLBkkR|mtE>naZLVo`}q>*X+KV@
zJelXC!Nz2gAPqEHV#tjMIOzXPi6TRAS+4hDYZh(Y@u8Z1K6G@cfK{%C=Oo%@{Qhto
zvu=1)g9xH255m95R|Zz-hOaErfK;-7as7r_Si6Qu-AsJ(PBzrE1r@h*^!buMxpgTA
zf|UrQ5__}dqq*D-f4tbsq2kiD@9?}n#Y$g=6epI=YxBy=JKM$q8n>vr+x_8NtE(T+
znJVsJ+ml)y-O}$b;+WxOK9S?ip!mk@!s3jTj-M<r)k<Bg^(TqC9*t4~@tZGwEsu{%
zC(nGcXA!8l87&-t`G!!V&m=sA6xFs3&i$1;yjSc8f(Q?#k0PatylN3~CXB{U^KCM8
zY1*=doO9j*XSmWp8nror2}qGE#3{b?;SYXRWvHbod|}>G2Rqpu$VIn@L~r>TTYv}2
zARiQ5fNnR*!_FPthxgkvW`)RKH-bwKdT%4VO8q2>)<4B5Vs}YA@5d#U>9+fzAx2yc
zielpkriZ8KbXDNRGhUPr7B4;6;P8;nS7G2J$Y&P(R^R}npxAr6gDsksSfKmJ*QCB)
zzjufB8zh$$4=q1-LYv<$TA;j_kOMP6%uuurN(-TUIFbKDO#3bT$s~p*l}3n~EIN&)
z&?3k`%Iv#qA1tv+c@VpniskZk)qRCz=u|7jndv0x6)&~t5VI+^26IBqU)iq6^mnBf
zQ-{ZMx1EZBHmcEU9&i5jp>JdhtX&NMsMpk9EPfWZPxqsJK5HA<%YmX@pZoPd>luHO
zIEMbUN)?iG%YJOXL=2w2eS}K^i7TO8dO4@6-#f<SjBm~}(9?ws;km~N-v40zQPa-a
zKxC_*md&lh#$}@J+Hu&E@<RE9J@26T*fU-RDgHqP6#SMpV^gljyc<*g(P)WV(brZ5
zew+)<uC``YLD$q2g8-m-yHzdTI(OdB7_+wSGgb1S@u0Uw5*xy)mWQk<asv-h#F=fP
zZV0JMlH;E}8ZLq$WywJ&7lhYXLDN=Q#BYxq*1f0-tZZCrFQblP0(g%+ReZxkUR?+D
zQSH$IlNLC!v<7MZ*3{*XFJF@>e;`xF7|7Sg@2`=kP#xs@(C%q|bhf|1O~@S#4E)d$
z12w|MH}1rCIl6@JyTv6q&CKWB&p*YU7>!5QNO6~=^m-zeiH*d2=^eA-^DbV4AiF%N
zi`}uVR{Pn^)m$ktn+r)Zd$E6rl8()ccjYnz_;i%vCN}ufc#TX?Q#Rb}#uV)Kn#b$M
z=hwKP>|hOhYxSQt^Ps=vrZP@z2iWDtNO6U_DoStQ<y*Y_3W6+`4(11Qb0!`(PFSOt
z1$#P|Y~Io-nO>JAqNScvWE(fk#H#Z&y;ooDy<w^uF{R@9COd3UelaAYw$m_=l)jq>
zXfy{4Y=f#GOW=EnUR*l(*L2|w>jlH@!TC~`weWA=pa>%|dPTTig(Dhjc=~^Ej7NMa
zJG(ENEa|2Qx!Ki`h%h}`{4NnnFLb5=+z#cg+*z0Kgx}jdtLf@Jvw^R)2$s!Jm7g$@
zX?{U)QQoz$Bg7*(wu56-W?fIQ?Gmg&Zt5JHA9K0c9MIcZuO+SY3jsr9yv(HL?}v%H
zBZ?0_D<|3Gc^!t!8;YDywXP%G?B|U8b=E#E$hM<%Y;h0Q6ngP($FFD3T7*U(SO1=P
zvdOZZ*-O1j+p>$S#n4nBwHxues`XQFc>j~jmwa;Zt(Jo`$=c*qV`(GAflplmz?x0J
zzzq%0nqc4>R-nnoC`SF@Ae57H2Qk6Ja8L|8_#^)N4kaaad7G?OJ$9MLpAj0IP^T|L
z^4UOB_bpSM96Xk=2^EnSr-GG*ott+I&0RR+%hD~yl{;$(j(A!3o+uh2`vWR85*l2$
zPmNA=y0Q&IJM1ANRHc`GN}JihK~Ju6zh<(P72TuxUk0xF@ZPiaBcR^?Or8}~DU1NW
z#k*>WNFPNqGkl;Gvf!T-BNw{j7aEp!Af7B2cp*3+o<|jlez0;x^n2|%!)-y&+bndd
zJx+q{;>=hxlhLVEoaAlT`=h?BSJSOKig#It9R1xl!TV&cTvvD{W-BcKi}qOZ5}nFK
zZaiST=zLpbEgz8@W&@_A>0t<=5P9GVrZI-S+9F!g-ODX&NMyL<Z4xf%j|kx;=DNus
zUE>nva8pXZoG@P!6>RJW;`7iX6fpTz%n!Snn5V=uateARKB&(oGT5ML5owaWTq3W$
zL`ljudX=pv;DNqhR)m4DM0^lk-oi0_mhhp+Oyv+P7mR*54`(sn1r6`9i${C%cdqg_
z9eKsoaIz5LG23qD;I-knCDZm8tk69Zx6=*~{qjsAxo!O3{=5{kR(={+W<sWAM{$%l
ziU2ic3C<?no-g;A-bnb6T6fa+`64w7yTY}%w!hpQhM#`b7YE$s5pwR7env`pZdin2
z(nuDhN}9g7O@-ZCio88|Bt0wYF*W*Cte0|CpQ4c9N!9)24E?>iWQCnl8j|w165{*S
z<9QeIqKln^uP?y=-xBL;XGYZRAeEc?u@+yUgmlBV6LznGne%OvO>3-7?x@HPMW=TM
z7g@(fkfSe$030flbQ8NR`w=G=%T{g7?X=Fdowt9iQ;npb5CFU!UY$(MNHXG4OIg&f
ze;toE{1Vo%lJWSke>Rfqlt?wr#nrQ6+S%m;_zQkb)dwHkzvVnkl}z4_mFKPVk-w(5
zT$H>uwar`Kcyaf;hFvWDI(OUe>FUqj39C`W#$X&E+1>H<yd?T3S7Z8>2Dl4aotv(&
z4=04oU1#(Zn2Eft=Vi27{r-0UYp2b;n)NUBQvBL%wcO2rTLQB0@YV_X;EKpq6JO4b
z`eG5ia2Zs(Ek_{n2J{-t1ZYzE8fmVd{#|}?;{SC0*f@{VRM509P~K)B*LQn+>gN;!
z7R)FESLO^y*A0&Bso<UGeeUu>PuJ$igXGt%^a5;U?O$96RCJMhCF;La#w5Y{25jPi
z;?sin>yEhVG2i9_q;Xf@-Q;1gX(|*muSOxmEvS8-f5EltJBa0Buf%xI)Wnanl-lP}
zkYD01+lPp(&z`$xqphN~q4)I-^qb?r1;wWa0K*F3ne6+|FW9~huN;Eza;O@7*Q9o%
zC<p3DZKX;VaW)YvqY9cZg=K_4?bsn3+aAbwD2|~3HCKTbkM*zpoAS*+RoImrsVB>>
zqOu@(rO1=WgMZ)Yp2nVJe@h*HD;}7Lv#__-^{G%R(4M5sH&7P8%%MiUl-IuI!eSrs
z5<sE&mQoje_2ctcEq~f*t$Cb%?pr=Rt!kt{lNZyKOFUwPn0$d$GoaeoBG%3+%Y6iu
zhR=6}J3(lbZv;n4INy40^Dtuyv6+VVWpNO~0F4)JYnA$Uz$Il0!d3Hdd*H?qHn?oQ
z(fv7h#8OA}S6tyomJ~Ik%s-$Yl)k_)6;}UNa)Z2gFT(k4o;2DP*_z2E2>~EtEv16H
zw}adrTz3MSXLXxcRZ$UOSR;3%ImgFK-#;COHV^U(^^B(^+rO7WP0R$7dAy<MzLQE}
zj$UN@@=fgd^bUO^&P`uf`p_miMUE@%GJSsz@C;G)J>U4=bL}uZJfY15^18d%0nceN
z7kGG|UQ<ql_Y5pR$JY0MH@2en+})mPU({UuI3T%cv^z0m#kwHfLgqu@l68Ci96nR&
zAe@niW7g>fZ(VJpO7W9eUDwp5Nt3YXsz~d?=7QV6p74RN+ZPuOX9bP2tiqgC#^CP-
z$G>|yTN-pzy~{b`*-^f6k=?*bIG{Z=Fu#5T<L<8~sohc?Q>ugR6N<5ia@q&GBiji?
zM`}IUs&BD&q^cI7E{7l5rcRT3r%w?z>*8MHFBV1NG3Qc-$$9wQwjFI64KjTxDaPSt
z{TN;SZ#=>fJ;g<Dso32WbHD%7`EcusPY0<8Kan<1;fcYIu5Y*N>uHjmHPiq#eOG(u
z0M+is9P^p8@Nzp<88J@E4AJmP4X(})1aqcF?1*0xZQmd4`y6r2Dz96zJHIlMM|J5>
zo}}#R`5B}YKaXL12$(f|&3coQL}mZ`Jlmq7PLeoQYtYqlQ#M@ZneA)Ex5^!DdsxLa
z0{aH6B8x@?XLC0h+%_fJuQx0}_G|^eW4`7wzn^f%uLwi;_XJma+@#+9%r@|9oj9k<
z*!Nd1YYgaYi@J@}I?-Xe5{B_+@jDeU=e1NM)ji%5wiq~84rBt#n8lTwm58bKNLDG8
zugc{M>_a~hR|S<L*V-fLa2O%!#(6EFRT#N@pe|tX{+dL&m9lJ^L?tW&etil>tIE21
zhcrn#sS)^-NKofP^$eDEd`s%SCIiL>M`KXvtWnGd>2?+}1F2shUZGDLv44;@3WEO>
zcDi<sjxZXuYo?OyXlthw*qq=JD`nsz*Xli44S%>Jdyvpyyoz$9FYpQJ@$EYI%?YMi
za4g5MZ2-d!t;9}dd~9zp1K|9Ybl3i(>E@U7kLHl(lTBHYye97@W{dW5uPR=QvY|tG
z;I>()O;B3EB7*d5qUra>l**9y*J=lOzJznMaG6RZwLbXuvsG=%O>+GvE<*LFF51C|
zHA<XA)2ei<OY(kKoFyfHLVkU(;1h1+k5axsf2!MAnH_!a7@k^C7YdvcglkHO2T{qU
zcMJG5eJ;+raQIbMPa9x+YwF18S>BpeqNi}mc5fycu-TG7gy5&w04mw^sm{ZBJc6Ao
zwZk9@`9D~-s-C3M-IEGCn=LiPUtN7se%eOZ+5Bf)x-zHF7c1U;Yz_UjY`k8MuXGIO
zyJe~oQ<`L|i0fC44*_1HmxWiYQbK$Kon&$?mkPM8C6&tRS<*`g=c0Ge1&t!iZ)6ND
zzjJkPOBT<<K5axRhqoJ<8LT52Oo-YS-<mUY8+f1}M}a=A`q5ysq}L<}FwGpz{Lq|Q
z>JrwQP2%k?+nsG0yfSIOQ&D<up;bJZ<8jbV4&mB&58C>z4XkXR5`KQCse+jCla<h>
z)#z~VuS4j!>VYcv1Ufu?*Obzo>DQdCS6!by+YL@ObLvraX-N7gS+m7o|4}zDrzxlm
zS|>2mmDLv)Lvi`wA=OtKZ-si{37I82PANW!)LC#wQ{|zss4lH9JZf+HcjqqsnO;qU
z{J@uCm;Wyofdx?dYMIZ+a!i6Fo;2ptCmAg@4b4)Z{42{-x`jfRinrC1+2&wuS>WLT
z&J<~h?bsWQYZ3b@)5xu=5;<@+2ogn0vVuq~5%JD4(v~DneRDzSG=`$JUnn+_2SZ5!
z7b`)Az{He}^qo`*%Xq;@0)<tR!4Y-}C(<mlkoMk9+$^A#^m~UXsJ{VDSe~=}oNEKm
z^{&Bl3UY}jaBFO#VRqd8DoZ3+*C~d8EaMS=h@hDrLbgFjdctvG;$`xpFM|K;A1YrP
zLbkQWo*^XJc5S5J(;N|VYBYekGMxpN7^B^=wuy_wagBv&DL{XoQ()*zOQr7j$_YU`
zM&~NQFF^5E6R7~b2=tPGk6bI(OzB#Q2?2u&7tn+EJ;rM~+%oPljg4XJYYbD!#2J`1
zK}Lm#d6A}Ffk<D}CTihKDOKP7wBO-K!2AP0$Zco`&Tzk#@Pd>oT+{ct=PS;3f%-3!
z*!MY-IpFz0`Fm}NqR{!}&(Uq}^8J|()Nx3gEr3;!ododu^a4uWE%m-8dSRgF-<OS@
z-^XgsVz;YBk~9b7;&@|XVpeckf45Yju0D>0gz^Ncm;Cwq_Kxg+E>-pC+;)QFiXEOv
z)xVYZ14U&W_A<FTdm)cQ?b?&Q1GzDR#yIirSTgk2yH+8C82u5Mf-NjwN3$~|XVEuo
zFMtr~p1RPnj5z@@%fM4=?7OA@#YT2IIgUbjIq}=(6TuHp7&;FM+>h0>ZPp2!_Uqpe
z-0Z|7E*d{;#e@6*0#2<U=1r)xVwbCfFCK(fS5Y2UdRtmC{a=;DxDrEZB(ze+qn2mY
z2C_l4`xgfK+IjB9^D7pj-x_NR`y4qRVGvlqMNJ3Th&c#|iIwGmx!8C2l=onV*O#AQ
zOZc#n3);)+zw1m}R|>)eY++siKcju)-hlbiLxepcEV@k5fw#8}J(r?OJ16YT(50_J
zNx?__#1R^ddaO}vdENEEk2#ku1TuqzUD&S@DkRW!lAk}bUj-gw5M!b=1*}BL0n_{v
zFsCyrBZKXNZvn0rRhM-k#Kf(0;fE?516uccJyIU?EdG)V!C{gEyHSO!IDmcYIOgNl
zhOPFJj}Xh|MoE#Q;QN!|Z=Nl4NofY4A15HcAEM#gC?N6++&l_CO1TBTo)1|-az(wH
zcQC9-N+NL@519vU5t(QeWJmRZ90DYLTI0}0r1K#(x?sVp;@2ZQF&4bZfgcMjI|qnO
zlI7lFu#7Vfe@hOTCZhLZ#}{@eC5S6f7fP<20RKGp4oOf)mW^o!5okvgB0hfyPxe}(
zV>JFc^hI*hhGR1kL!^4i0dgz9%Uap(%W$v=_QRit<o;3ei7AWW1rM0TLDKhT4JHwt
z@%79WnSs!>yXHKu@_FRE#5E#O;lwIV@7yeX{{6th(6dkN24Nm7<C@UCdiI-e74%L`
z2ajsayPtNOBr%=VhR5%yf{Bs8#XZ5EmE7htdUEToklb$#5_VmZu?gRbRm7RYu}C%a
zz7YD*4|}51hldQ3H-IRuY1vkn--TF0$rcVr+|X*xd)24q>t!dio=z_g-)3-17`!}N
zUuXe^f^cbE1{t@K4={-5%*31URZQ{PGu1K%T4tAP^~znmz5fW6vR>!>ON)3@NuL+*
zoIixaH~5Z$p4DT3P-8N*17+y_>?H+pRqFxYxP@P4>MIp#QXn>=8&1N%p}O&h4{8M2
zTe?~<wt<U^s?G}}e-K687#~@Zu$;RWeYgC1add|4ZoC9_YAqA9L@t_A&ANTbs8Akm
zx>P<`T;cX<r8;mV*BQ<%Sz2X*1(n2$M-rJltLwL`F}7H(?g4(#T1egB<1w4YIFa2N
zv%S_E!gxDXA)wMXZGQFWM9R;DLQIB7OjF$b2gifBO~(5Orlk1@Q7zS=m-Ui94R;xV
zE`0hCt;${daan~If2vMFr>%f{s+||6PAIt5BLO^LVTQnpl0J97m3PhN&Mj#t`_{6F
ziNHg4O~dDoJsR)S)epIRFf69})=A|nI-)e{Da8Z>xGR^FL%b)g-ss-!_;(Z!kIREn
zRZ3qwpj`D}<@Ws7TCRb@DognJVsKTwY76{JK`C|u{5vS$5I|%euy}W*;G7x5{E1{L
zn7wr67s8n^vuboM0#J8)E<%&~U3G6$#S0&krNAvC22!L*AyGoF?jgaMDD{3=6Hexb
zsfGV<KtsSF@z59fAW+77LgxgDBt$RW8S@Co3S)$BJ0qS&!XE8S?En`u=QQ*13(Fo8
z<SI#ODDu_!w%7R*Xm4oR)IJ5h`xQ5q&iyi#MeB1|I=0f*?}qycI(n%yLXK_O;4s2Q
zfcG7_Pz+ZqY5z~Rh&DkAF*@ZAOVl3Se)F!=Yk)B{^-NUPuq|SY5k1<sHVda>QnLr}
z^E=DR*8Lq&PcCVrNAmmGdS%3>aAy3phu31m1ah>w*|!U;WqkeN{&D{aAfEX}q?6iL
z%~3qTk7=o{_RLhf$iYrrs-^sDGF=1Bv2S}tH#tbl70t1{vFR|q=a%#k)!N5ImU6Q3
z3V?7qApqL&sI-$1cGEgi_epSIpsNCM4;k7jd^yh+>$mqOQjH729A=K<*@niI{$TGz
zq(Xi66rEyvB`=?W;(4isT#jSsL7R_lKYr}s9EGBE;)Wu(7{?~|weRJ*<7-V6oEE*8
zXU{k9e^&rFaW=+Y)>QQ)+IUA-D@q|9&?4_1w@Z%U3PQ!Y7E&HAeMeDc)&mU*HbJSy
z3P5haQwyT~6gz9#15MVNOs5Fm2xhA)5E_@Y4zmi%(KE>tFq`<YMnq<H$7kNQxme)0
zg!$#{M1C;vGkGl2DlW#_brWqmHEA>Ef!6*g{Kh|_aUw6mE-DVm7;CZA`*byQASvF-
zmYq0eixfdWh9vilv(>eEV;n^<(Pux7I@Vk_OI{;`K_9axvt>Pq_0fv3tRZYW{*^cU
z*$`fOqQ*iG*Q-A^b0_-=iFFN>uPrkZ5t$5mi293m!g=rCF+3Gq4q?UrJP;ybezTQ{
zhPrS#@6pF4`39OyNdKNob*q$e5y0(woHx<RR<{?w4B;3HwHn4ui6Q*t+)`;l6RQC!
zmot--V;f%lVnO~h#IlZ~svD!=wn8r2VTM`trP4RTF6iwfB;qDoS%G@qFb&a+lgOBV
z-<s3J{WMr>sBE;|(5sZ6OQ9(YU7z~%=D}%3fl;uF9Hy(h7GBaN<XiW~8i1IAlS(+}
zmbN`2AV^kidggC!(RQ}E>0sg)e4A;r`TO@qZsl%JYNqq4dP~@t=RkS$jcg^KVXh^c
zTD=wHN)Ss^{i?fQL70ObLSk4w@fWpO?h^O3A1)(DJs#5_ymG=t(7#zY_aC5n=St;o
zKypLWD+Y9Dn!%g~R}tA}0Fj4o13jrt{GZdh(S{GMMgQW)Rcn58*s9iKvgN}Mu(#$V
z+q|yh>z`(E7<&CDH{HwM{MQ{n!KM_OrJGizp1?xCmIA(n2(v1Sl3fU|!vQDGy^}A4
z7K@_RZqg2y;HL^_)G1QIu+q2h)kpc{2!fxN1A7E7JU5@Zx2KW(YXP`2-l%cL=f*x9
z8{3^VSx2_hFELuE(>17FMv=-D)2mT~KJ^0C7o`|X?^5c?y9f$2dGBhW?3O{QiJW=#
zkJ%V$^qHJ~X`TEB{cEm8^Kya;lytEtt^~ZS?5ah5ec5kQ#;Mwc-_>JSc_oivaH+5~
z4x1(_d%Q?Q5HMIokpRYtQtj^OF5{!s1uH@7uR{tJ@#KDz`$=M~Z(NxF`qFAAygAAW
zQEcki>X?STLt64JCa!vOG-!GTPQSL#t%AJ;X!xE=xwnlXL!v93z9%ys)uu9hkQyL7
zZjm_6=VM*<XP9qVG|91lFC=iC<8pO~5k4=kMv+JTsqXw7{J#JzE!5J<e|KKOHJU?4
zWK!Xl($`2@#YIU*Ntg#XggnWjxG1pi@B6zdu#a`};9wMmcHnvv1ru#_#sDRN!cb^<
zPz>&85ofe82J{_emB-PFnAtXBfPmsL{v_04!U+JQ5XcB*q{&ts;Okcy;sE6gOUO|&
zR=$E5uCO#D)McXt{<`n)fAe{o#~H@}5V%p2VLCzq78DtgJPBREloIMY&z`*}FvLLd
zl+17_U7R@R0A(m9<EIR!Q4&q_q-ivsJzG-zP@Yi+t`;vFlyN_A&wk$Z{_<<@+0Xy|
z_19-#zdmtc+aixh33(yn@j<VQuO!%K5x1>!{$EG`BS_m}`|<yDf9rqt2M0C#kHO$k
z|8pnLa{3>!e7&Dgl8+~HM#%}3r(=qQlVHyHzfvo&gL*P`H7>nsI7l%uhgg>L9p^`e
z#`vfRH5!FtFM7=z*xiMr<C;#jEX35sy3ZSqu`fW{iDbSPD&`br6F(!q#%g!h1(&G^
zudW#i!xd>9MHN}pf7{)4%dMk^;o!C~9ISxhpun((ikhEtkZ=K>)iE)<Rp{XxMx;)H
zUM<<5bFS?Mi|Di|qDUHFcu;K(JWxxV2fC&YZ#V*EWRwOOm{ho_igldtr8|64jfAzL
zWW6YZYmz+8Ae&Hftrvfl)=?zf_28uVt8DKKQJiGDP`l95e??LwLT|03N5}9xi4t*b
zSEqt`bAghup?>Y^=al^@@v!udPXvyNrbox%{*n~=#o_h&`MdKY_)n6{`Iu5Ni$V-@
zl2ZtBDyUG--^wKC`=yGf;JfXO9xGYNdg=a>K=pY`GAtJdJi`f~QHCi{tUL!r-*<q-
zq3LJ`Q#9uce~@4tN`XT-CaSkrIOVdCkvvF6gORy{*hbL)drpO;UzCgpol5QuP{P|M
zLt(Wa0?G;-{E!69valEN7Es)ukZUg^{fv@)7-KdeB=aUXo=PKGFJdgmtiM%u-jnR-
zT~DGId&Rh@@@iz*4Z8S;N+orBY89(9<QI`<>|xz!e?2~{J?qGSBA&<k^54P1^A}b5
zZ}&0&-`zYb$bZJ6pC9>kNEuL;1U2zPv4{B2g>8`1hWL3-NM@w&Q1VYU!Ll^C^7c-P
z6m7e)-9jO!Q9O=VM&}~R&(SgXMVr3<WER#T*cyu$@!5(B85&ng@i)d%&D5DTUu3Gg
zNeMw?f22)8>RmW)snL4tX#5?GD!@!_#t7U$u>K#|kuZd@idE?%y4|i95s);P1r?Xk
zC@JQ8CBqh-3Wg~9tP(8<s~6Y~aY}K3G8`U(P#jo%A(Km<<#BwWyy=xXqPKuu)3SJl
zX$!%)m2U?-?cer#C0E;b)XT8Ag_R*>8t*w%e+u+CO{=_Sa-gzHHd)G~kyqFx)mk_P
zl%{;#that6Big?lt7+LOtD5?f-Vq|vNT#&Xc4P*ao*0iRS&k~0S`CX<%y^K{lq$2T
z(_f$eF+W5i5gtsPw7EE}H|PaSUYi*kXZ6aVu!FrD@abmqGSiAU&ha%_|7{JlF41mW
zf1-x8vD^kGNKI4Sng7<LpSFtZJ(Ov7=iPZgll8vEwT(Y($^Yt_x9b4VrT;zHt>*uF
zzIX5#|LsnmRqX%%A@mj*)*)5^Cwxm13Y>@)d2wPaubWUDn+Ad}&rbEN3Nux|^*u_l
zm1?C}O;ijgr3qDE)i3q!jL@w7rhZlRf0Jj1HqwAuC?b8ay8;;jN<in+(j|4@&DtUu
zq^{jRO)?+EE55|QHldK@(;=ok4pKx5Qh_8vN1qyE$S6vfOo5aU2&0kkKFnZ_rZI$=
zufiOQLfwg!J`@NQp*52Xk8w@a`HB<H)N{U{;Nr8sTr1*bYH@-j?F!J^;1uT~f8+A^
z=(yu{w#f>mH2*iwE`*9ik0$UYdxc)TRJ(D3Y`_?Kxeb`CP<}rv@=ch7T|Eb>Z&noC
zDnOOH!aNA_sdmc1l|$*)+5l*PXMQwIG&rd=z$nRVXua~=C?+U7Jg9!x%?VbmH~59K
zSi?@a_*8c$@60pG#Q=5V&DQ}ge=@$Grx?V229z-+ak#|7pl?~v6ciQhw~J-#)eJ`4
zZZI?W^U7uhH9Lb5iWy#PP#}qOGwT7>H4zO<tTt=W^RxnOMY`6jFSg=XoxHa~-TU5w
z@Ap|p{!>m|>*{|8gF#LH+kK4xemBnw`d>qqV;M?9L_-z8y>*FD9HNWMe~DOk$t(7_
z>S7?A;LPyvIu%M80=~J583n%Hp15F4f|j80_3~4cpfL`;;e26`czeB8u7DX4nn{u<
zvu~fJIPi74DboW|T>G+FV3+8kt>r?wE_qia)#Ez)tv~Cm|B`(=m;cW5|MSD@{olch
z!DIZNJ9$=E|6hMfRUBw}f3j7lS-~Fd2S#&^@oKJcqOMp?wAPiEd^f|CMj;lljPoRb
z!+r5*G`+}2qv(@J{NF4kpHR$?vNB?%K$GLFtvL~sCbTN$uPh}N(yk7u4W)kR<^6%V
zc1Psj`XKrRC{AOMLi|rIxWBnK?-VKsH_GF94j*$AN23UbfYMZSf7W+?!V<bDpYb+0
z=BzNSWn_v?txS1pkRiY0Xc{Rcgvchctw{Ci?FBC@G$APtdcJcy(zZYnNMSr|&^{^^
z9D?q`JeVV|uw6{^GHXYJ8;br|@JiJQrB+}mx|>G`kxtx<p3up!2A%~uBouq=EO52n
zu8d%n3oU4}-Bp-vfARUVlL@7k3Maw*o8-mzbF$>dvU>(&>KGxs8KsIW%PG4oSyGny
zpduY;?x_}D`r>Q>PUd7W8eK4B7M9w;v?<7AH?{24X$pB^Am8+L?WxoVb#qhdzPJ72
zSx5d;ISSUi{~7G<)#E?z9X!f^ck-+t{}tCia@^IjxnSMYfBa!BmHI;ELfN-BSrOP}
z_>w9X5<UmzTyw#l&Wk@6UGP*udGOkL(JySz-=)&qN#2o&+(lyF!R8f^wjvVmjY!Ba
zj%GN~Vr9-SRUvqa-NtZ)GBb#f1pDwZj>$EX&b*nbMC9#&wvFE|Q%#h_?};iy6kJ^+
z8kQGuQ5<D+f0<tGPf;==>%~Ri(*2h$3#!%z#I)isDJkO!i~f@&p7XW+8p8z5csFL4
zqPR*^#ur%AKmNAwvuqx%ZDBR_bX797Z>@@bw}C(w=;P{!qqe$wy%kRjI){Ii@5|j)
zSW?t(o=V-ite=>Btj5`I-qY%ve``?_(UJnX`^|!9e|6ot!t<q;9T8z_ja5fRsJg<!
zj?sNwTJC0Pxx({im!P+X&Vd)wD~71rJ;B9j7F@~!939ITuhztEm^XIdx!TOJYuIK@
zb%?yhA5fZVLt(@6isN!D@`Zj{RO?BBbi46X=XBE`x@TMA#6>7joY4r+ut?GujR3_I
zqi_y^e>fV3OU=sCWlCz*4f77m;Y}Z#>{$q|@>mK#*fHa(K6HZyzq&oQ2X2g$aW-*b
zuq(!p@G%tki1sPY`g@@PiJJU1js?$R*{5<OpBAwN;96v16&9bG#t{RS5zg+5=0XK>
z!(@;VtW83JCw%JuDuMl*4XwH?X-^+*SK6>Ff9(MF$46WYV;|#!!mbZL@iTTB1y?YN
zD9fbpAI>mUMnP(Rh7y=WRgMXG!p5LnFFDTgi|XlE@n#4VB_Wv>gp*+8aDoTl5fWpR
z*r0xzVBxiu5kO%GY(5<lc|WrR=<)>HAm~)aLmuSC(k%Sv7>dF&g^d($wEltRL#03M
zfAUcTZ)qpR_Ni7Z22To>J30o})eFWGjZfuu+5Kwx(c*(HssXE!Gs+Kk!B-<)6jnT{
zldOF&m*wi(Ark-kW1M}D=YOYU$~oDLI?fO56?Qi!Z7HI)HTywF@@#Ebl;BN&ZwM7)
zX=?1l!q(N2!KKTXkgGfecgB}1Et@=9e-PtSjcw1!OReFVJC)o-)EAMq&j@F3kN<IZ
z;hM0=TWzLcV*@Q^4VRfOFg!fKNnpk>{cOa~GyEAUM%p@8x#{s(F!8a;xoy_PPjuMZ
zGh<3reYBfLS#MctR0{WOK|WWb;Tjk<FotRAUPVPXTHeUZyxuFXJ~kg3T$H8je|Iw?
zhBUM(SMzpU8t0J2z+eZp=2wRQBBMoLwqtUQDQxp~{big^5Da=f`SWc)6^YLWJ=o6E
zv|j3q^4R{(3iN97wkXenD5|Y|Z58kse>#^}LNDX^O_Ygqu=~p|KN-{j_irwI;oAet
zC_G;lcq!uvDNj+NEMZMKHpxe$e;7ATzUCmAwT^Q_z0IdJ^cH|@HXF2r)6`_yc0;&p
zwV@+ODV~Y+%;hewW~7!-g*eTYkxymGE~)h1M8XY=2)ei4U2RSq4PNv3to^K||IY|T
zW4x~a$6#<+jsN_p|G%qeb^mYENAW^(00^7k##L3ZNWcq}PKHHzjsQ37f8vY+%Q}Ns
znktVv>Vv>hD18jzzV)%ebGxd|QBHxiYGxFFyT#+hl@_W<#R^)lrES*nN1+C`iu5XK
zCB3tnWu()?FYYg{>1S!~_FZ+Qc+remYi}Nx_=oqbv;LQUpNn^Zj`e@{aJLr!<8bie
zas9uGXQlN&2{C1Wlu}UmfBhA<8k#Q_8PYU33WMz_+^`i$Wx=v`G4&=YD|k(RKPwd%
z<;s_(vHoH@l{aM%Fsp3)vqH7;pJ*EQnrlBGzv6Y~ztoPcZU1|)Tbus}FZLh(fA8d3
zVg5^Jz9^A#U?Y+U<@uPOvh|r)>Ga!I0Ld~+)i}nPn)izj+dAl>e|jtGc>3j%>q1Mz
zUK!hw>O22toJD)@$?IhH0a2aC2Y*Tl%~W0|3E=D3<0so!`49(LEQq7k0bY^OY3V#p
z$_rDSpur>XJ0l5S9FN`4LR0JW64L4K>({R?e1Rci`0xNcFT?=}aj!vv@?9RqA>d>N
zGeo6vq`YKC()zM<fBY)6kb|cOWIFeX>!9utsem$+l;Vppgh=B^Xe1c_Lqvw;Qm^W^
zQA4QkP7uR?uT>SAz*>ZiY8&QO(F&~$iqTeL8>BMPhhAGyi&C%H3Z><CHY+#a5hYW-
zWy%rk9Jz&88O4RE{I$}|ssS!FO1wAfV#gRk-z{(7)eKaZe=x35S?n~~yW#I5&ss(K
zUldcLS+rEUwKw2+^)QESDouweo<;at8fGL}MAfAz8Nt&(u%}9g2vGt$Uzxm$Zw-T3
z1_I479K*K0X(^GhImGyItgAJt$_i!ajE`S=8z-v>h_FC!D(_`A4S5fmZf1c{RZ?jy
z#S{{k{xKvZfALi5WmvBL+OBeYe}(4*n-9gE{i>X3wO6(IP~GS4m)|I!Vao9L{N>Rx
zsGq8o&1GiM>LB0j3ej)87V23ydImdG3`YExi@G-Lx|($GFyzn2=YF4c<o|0#lPDQ?
z9sxS_zq>X4@4?>SQU1S+X9fBHCpp}Jh9u8az;{aGe^^9@M&m_df59oL{ChNB5dQO=
zkZjR9-w4grnW7|w?Lsr*YNJCJjDVg!6;rGlz4ME_q5XT5gy4GgmtVp^J^8{WXz%&q
zkt@TE{q*wu?djWp9Km_ndkArcgA9kT%|&t}aOl^sNBj*h^Yv?Q2b8dp6tS;mKp%OL
z9nXPcf8I@;gwpc~%}5m1sjYHeq$2T#h(L{#Swu-9&8CHMW_tu`MH@_+4nmy^-A;y*
z&{M5=ycN$V=@`0;$Iat^$+O1#Z`h#pe+v*}C<!TQ*bKV#KQEp?x7YuDUjA|Yzl&#u
z^<P=&U^vlZ4YZo-K{{^og|(LAV;LK!l8Xv}e{ISk9r&#<veHJp_E}*$!wlQHT$Pi?
z7-eU5h*gS}MTWM4EwC;WAIwwO%67H&SCeI`Ul^vAEorA2#LBvaa<cmHN}l(QWPe-t
z$YqIZoIWe2?+s^}62eU9yRW!aSn!l--co>M*$RYk_#?ygjN(!BX(=#Qc<#$e6-e5W
zf6uh>D^EqG{c@#E&$2xfVuesARBir6^f}#M8FR{Z1gII*v8q;T6=TF&Z(1!88+g<0
zLabD9)xR~H6}F~8Z{Wgd9%oTnONXQ3Hdrp2rhpZ9tA!WN{b$b0{8JQ1h|Xb@CsIsO
zDr=F-BpOdLtxF@c;?T2j?dqHf+A(~=e`<6Ot3oH*mgdYaQ8W{5S1fQ#m~!e=U1+pA
zyJBdt2;|a$HZ|~S=9XPqZS3{p)ja6S4~B-b#3-0L!1fW*9a}(qOPR<Qw-yWQCRO&j
zbl2W1a=cffxw+D70ih5DRMfu*Kl{v1bc}g*mNgBh{bf1Z%1z1tQ$!;a4jWZLe;xAw
zi{~}_zZcK<o<GX}ck$dr{{MlG^{ekTF8ymBdN8uT?r5vzFTCH@llpZVw<Gg6kaQ)9
zU)NXQP@YY0Ec91kHH-X+29qemBG2qH2pPqzkn(KOesrk7;VUt(&~j`zCnRe*I#A=2
zYqi<{hp*4t%)o$=tJj_NyN@r6f9s#)G>!tnB5mENm#9O%pCeIq5L%B#R>Ah8kzxUl
zkKl$+M-~QlZv>JiAKb*}u*OeKCnVeM%}k(S;n1twFK_w~swrJ3@<xxLRdZ^y`!YVf
zxwyCntGf$`&@yM*xv!!85=>aux&<;d;k1}y|0)OhWj45to#i*U*Dr(je+>@v8f*i+
zn;hhq1he5|yzayb<9@><d>fQC5AYi713$i-%jqg}%#zt|@$i0&)6MF_I`hojkye>l
zE%i36nBntxg^?|#=x=gVOY}QN)LbQ-M$CNwz+GH7rvD+ynA}MJGuYifd|uQ496a9t
z-pO+#{SP1OSKs}S;_?68f4mY%G19|P0-3#S*91wl*VF}>P2G}0s7~J16hf;0MifFe
ztQLjPVl|EpqD76<sZ^?Ts$Hq{&=f+iP=<zxRqKc9^<62HF0i)nud9;ew@yee^KA0E
z<P`%>!51xRDDnDrJDaVdP%*LSIIOO&{gOHevxNt#7E>$Pzkpgye^xN(&^oOaaJrRo
zoN+2$uHbU}I=RY*^`LZe3};KI<jPg2OBtt1F2VG&yvK0n6%j)>sDV?6JnG(-l_fT(
zdlRzNa3jaYCGft9PC$YEwsmi+6Dy4SO?7WAP}bGGDX<S*_qMc#rcFS;O%2V4k1?%%
z=u*=d6Y2(Pnp;(ge=a(4d?U)UMO|2D`MZ6U=zS|)9?-KX{a;F0Hl~<;jO!}E4*lQY
z`HRD<|HuB`WBi{xd2XWrJCkF5@gHwCuKhFE=)oueOPt!(e`T5VG=N51x1;}SCh$rs
zKm){@ZXgYi8g+ohv9>60o`Sofa*08|Wu<PeqYcAoVu5z4f4Q|rGb;Zcji;JP*RDXQ
z7jHj2H!%N(oJ{Ii*u7IEGDd18HZzB*WCvS6(a=P7Ko$^tRpX(B+_%&S+^!+f;+{Pu
zwZ_fl`Va?Eh>OtDDuWaT6%AD3xoA_XGh5EEuS1wx;dZX@+#@4Te_OP1wPwW;L4#Cc
zAB}A&0=h(rf5KYtQI%D?b=O$j16#7M$lxtOQyWVe?HKGSIYp$v>8z!q@0cnLd(`hu
zv(>#tuBPkghG*<#l2ENVEmmOAY9rk@BF#rV9iwQwI;I9L&6=v7-JJ!;!PYib1-xN}
zn9;=*Ip$_+u?2wE)Qp*f^=&A}YBJx7L(n2O-lBeHf3x!c(mlGB)uSx>V{x6`y@CjN
zxIQ%(@GY2gEUk%*cF@+QO7)USD{I$wq2?BEVI?tz)tfCPwz&HZb8%yTHn+N&gkEu_
zt3vGnwc+*7Y%RU{lGk{6{f614wND)^)4~#IWtyA(u&CUFR77t||4VTgwFQFf@c%vB
zJ2<S`e}C@n?>_2(@8WT8q5wYUgZ;;hq7ZN10910)gVFv9blMfa;`4esU)jR#sC#R~
zTuw17t1YLKZMDs`fL!4@^HWi_0!Rd%Lp1s)4nJVZT6B08Fr$h;lXYAf2en;`opBMA
z&SATfBdyX8x5=8L*IBDx0e@`ln${h*Dcsjee??i%VBKtoR=42{BW7wRS0YuRW9%l9
zS#)XgSXlnZ@XK6g6<uvS6$^Lcm@|B~5}MuWd@*2~)amCX71ps=v?$uHMlJfs@z+f&
z;m_9F8OClEj#^-!XO?VNaNEmlYr`uW<(aL2``YU+U6foz7wyN*3;${wsAd>z9?vAu
ze+Q{|lDnFW6|YZYviD0<TBv2z=6H(-t&K?<?OS{MFv~jTm@Ov#$pi;iWtLAtZ-Kvn
z_>^giGAXm^MOw~D*j91@{M#`M4th(EM5Ac22LCt0Go2TV0(w!mx2WwE<f@+B@7xyo
ziZ`Ib{@-x#sA9WV#E|LhnwmFfY>^W5e<7cf|F=GyI{%ydVO0yz7612ef46G?b+Etp
zc>ceO=O)L0br|Ml#4&$}>nD9Fxr_2*%Ab&Aw7V<v3Ri`}BHf30<+h#l3tI;zJbAmj
zN`P)@ZLrza21RSj2!m}hpiFquNSmfE)RUi7h5=GT4A8x7R&l(asDw5d(K3p_e>xc}
zP*GyYF8&-%V=K;CdDLssrj!Clt2U*%T_bUKfB67wD*sbg`?8qon?fc;8ES5#-7I1W
ziND;$WUd&$(2ZF~sa13N*Lc`32D<gcq_SfzNTR=3`YO0gC!1P0+q?VJ+84JPqONmF
zS_#HXIobI0anjuFq^TT2YS1g0fA5Q;A_0ccKSPbodzgx|$*4V#edpY%YAkP>qN$v5
zZO)xi*w!60G*qr@YMp$yJQnqIL^k71{W5%3y9PJ274qqzwlb^87-uIrr8p^7if%0#
zDoVm)<*@SU)mmC9EuvAsibi?5f%oM>I*>&qYajiR{E}#6#XqoLl7=%-e@i+?zt>_1
zX6ptdc#+htwyYHiT2L6mQ_tgK5kH6>KjFpID!{QoN$B(QS;-pZ=o{}e0c(_a7$=^U
z<$r&I<7qTb2*t~`(INluKHsa}|LyNSe~kZfC(jm~p^UFoBAKfkSHA5eFwCPk<g0j!
zf-5w}%y+in{Ul<*@-!the`CNVIF5x$3`|iLOrm7G0~E(7i)L!uEZ?IfbhaSDV`)Ua
zEtM9^SQY+H&xdzOJO`49nj9raF@-ovu<!V<E`Gb<o1C)+CxQ{-!^s7N5oL})j<UY^
zSEBFu!++Ag_*cJ}jQji_{gcg-ehFxZf~!0gXCLM~^VxOkJoAU>f6960XVcVq_CL-R
zd_XiJIfK(zubJbgl>Cl^%<-cTqrNOh$?uLoV*v?q{~OX*tUUkEU%!0y!)t#UF5kxD
z`TzXj`N5zv|M&KGAN{}X<k^DnWL_{m8{R}i%B7YQKI)G15`O-798c}nzi#WyVth03
z*+gU*>t`g50@jaZf6?C*-)!+RJ)s#NQ<A5ANs+t+F&Rez3~_di`GTVmk@bAX+1i5l
zZ~pJAbH};7yyTL#6XFynAx?q_E9sr@tw#!;*yoj!^$2$TPyQ!ul%tZd9Th3jR3m0m
zH1#)cOtd&eY~nltjy@C(&mm8_oLZC;c%d}<pxd1doU14ae~*Bl;G^*mD0QYdLtJ|1
zC`*JJj!Yswv_Hz@Sei<T`)plnI+vmmxc`phn7~hj#-S^b*xG{ABr6iZIgVJQr67`0
zGK)gY0BM?Q{T=UDiYbHZNfb;VKnWLt#KnN{gP7r%q>$iiH6AJjo#2Mr`1kZC0aKKq
zF{Zxbd}j@(f7O6k@qhk4A7YfItb}%@-iYClEED21Ci5v54!N)@!Hb_{1cEb9B>X6W
zAkJBaDf8tvCB8~BOb~-1=dlbke#Q{jI4KA5vqqC+Llc}~24`hbz4JWDqA9jfOeqQd
zi1d4~{oVIx=RF@@2`qvCDsrOd8JUU$&HFbO5MY``f1@Zs8D=}2@5dsOVj==2aMt8M
zd4K05r-0JJicHOeGm3>Sfkhc+j^ml=4*bF1pBzv2ci$iQyRr&D<6=$^&Jh?!B#z0o
zOdmLmWj<edccM7~%}^AJZ|dNuX0l=tVf+%16pMpl7>!0)2<;39C8k^Oax{vPD2q6r
zUpP{He;1EJoNxkQ3g+_#USSr{NSqR3>E{c){*=mWi>FDNXWbQ?FW%y(>-(mveR00P
zrJC`mpp>7G5c`abvP<{^GEp-i;4grGQZ${*<8RbNtuJtC8ejkY-8)yQS;{oa-@QC{
z`M>|=_AX%&CKE(M3lsk0t}#hTs7O+yNlHSEe@LJIon%oHVg)7vnWiMcNmk%fDu^y^
zK54^5lB7nH+rvamrW2H+VH7Vpof;;}jpo<#Pt#27o^0z+qfInm4t8MB+2?D#+RiVl
z-BqK{SH}!dzR(*hvA%QOmV0FoM|^$Mo=MTDNO^0t01*@V2Zpnr&-ui^lv^6;MBuG>
ze+HB!zmuU~N*|X^c%n3=B&Cti<`zZ8ZlfXGVBA;0v)se0s4k1A0pS+$WEslvD32Mg
zBDyS|CWPC=GfIT}&Kl#cA*@EsRq>=l6f_{Y0-opJy*vSm8OdpYS3!5hc@#FIxip?9
z=dW%+%vJGBNgM_9CRCTjGbJIzK~AG=f3ASt2A&Ddt_i(5tE0Oto(jThIIfJR)?;zO
z*`}z*lS$*0NZwkAvx|_jXXV<x@9+O<#X)byQ*8OKDJ68J&HmPR`At15%k9fST|wTs
zbwOiO&+Q;;P6aIZ%+J#?MIkPI1mw*bpR1=CTt{&XIAOW)glKg17)LXlNR{z5e->{f
zNO8cG=WicQM{rr*)kzk=)S{2P1B+B^*@Tj7KnVy0#Ti+=XZ*x2rlG_bkT`bwrEFbo
zplWTQKNz+a#j8ONY*Adz#?vVpcZ=S4b&kF9(=|u#>iB!($K>2djEVfOQS#yY3YM%h
z%HtSBNuhbGkAUJGQRJME%q@g;e{Cp~O|WbWT<z!l<Z=fX#_;p0uJ-HpmMB9B$$Etu
zFw1Bz0@C@=(1A3MW9cHmE*m@WiUe1fN*;uBJdRjK=b*eh-l8dHupQ!*;s9khJmMP^
z*iBHJgqWU{4MCK!45P4D>3T6)T6;g(Y5%s@D`{iL>$q&{cnzzYcVEXme<@wGSfS!%
zo9|@P3L$0b)lTOd+OqF%0omBIns#7A3(PmO?U#==ZPamXh=MDegqICeg?}hxAV7Nh
zD8>X;3vj}xkG#p?n=_G<?d92NA<q`mg<(320<0~s2yu&dXGB<74H0$KD#)SytXtFT
z5eJu$ED9>hbEzuvBhnwne`MU>+a3I+zx$#;_;Vknk!RFqUX*wPZ*bT**3)^Cp-+YG
zIlv5>=%fYvGn7r<&r^J9(CLguNyfBOg_7)3RZ!bK6?fb?Y-ZvH@%@26i|C}r?j%Nx
z@m=z=jZRUeU>Ci<NjiyD{S6x8_%7wXJCx8&R)|GEwVO(4Yvl~pf2J+~vO;sO7N5OU
zQ^F!dlJ~~j{(|GPD6nYU*4la-MsCr-t+nrT4V}C&mh-j1jmx~8mWg3)S-5y{`S4Q9
zH@w8V8KyJ}#e`oxc=qiyFMmR@+-|gfn}3|c#~j6++##Se6=>A;H_J69&{hm7%Zg5=
zab9ZLmm0EGUQyELf8trbrl|G}ifAi7i&w5SMXzsAa$E5+8DAQ-+LO8v?5fjRS-&nG
z8!gb)Li9GAa;o72)Wqg1>P0>h9)|98Ui@jEg~Va_wN?Mu?JW(Esj#*U$Kp+JUyXcM
zcwQ)S3-T#5=PSH|LU}Fn6+u3Q6n&pGTGT^>e5DFdn%P`7e~_=R&L<Qo&S->ZSlDbv
zBS105D4atec81V5j}w+dho^$U*%Sg-Su2GfY-0gUWZm|_t-srId*H@68D|q02D{+0
zjFMzrhK1qlziP(%yJX@Wko9*!))o3AS@xwCb*0La6h0G8+$TnqU0T-&+KZVV&hSi_
zk`~?@nzWjHf3m(0o#bn_9Qc+Vy$@%EqA}i_z0mz^x|_2yx}ROoVrDrce!!1<hMaB+
z>T1|P90yBoO}T8wGJZU7UMP(M4Jy^M^6RhLTSnOywW{Et_o<8)xhYxh0ZVNg61N_(
zU}f@Qmc~UWt0cr!vLgSB6|RZGiHt9XC`wB0uXQh!f48urbj7iEfx^G8@aqFMA$c5v
zL_vnm(9P@=hl&x!A9I{!@myC9tV74;lS{s9^3#ao+8?v1TgPy_7rYx|^d<DVx5#oE
z18wqNgNK{k)xXQ5I0T%`B1)2}bX=p6u$&bFy1WuaQe;@sd_l5oldtP4n|!?+6<@hR
z#V0O=f2cHfW`*&xmPw@V?#jH-A-L$?skfpLPrtOUSgPHqcxg%zH7nPG5hc??$8iZ{
z_&W|VH6T&OWLRjFO;+m0l@&NZ{#r%&YV5}Mc+NZVCSs<AD}zx)S!Q&BV=N5jk#c?w
zRaXgBWz~652+KkYk0Bw6r%RjNs0-Cscs{T@e<wugrtYa#>qF^tdjpfy`!`p4z<c{$
zKQ}Pdy?@E!zT1C5kGZgPxWb!vU`qsdxJ{<B<g%rLviQk5As{Z*ZnmSYtN6LTaMiZY
z^QQ>}hzVWWytHoGG2CRNG19oaZJm&7y=@v>sSg+YF!R9->GJFLmJV|;lQAJX#?Ou~
ze{$J0e!56|P#!qVfU3O(0h=H$z)IUHk+D*kTonN<RvEv|M76nGj#Llw=^DREXcMMx
zGlYAZ$xdw+c4CBd&Q3e3^38{}E}bbny>iwq2tIgO&Yj}+S5F|RG81Q|A(pnY93P>A
zi!x<<z<?wwvdNs}k^niwps-M<CVi15f5~)9>ruz}H6_ctTzUMAbcq`o!ut3b>A&uG
z2#rYocQT3{<5!7(UEB$*HhxyL^R-5>K5{ay?fnj#5mobUX5A7a7a+z^5>jN1-l`*a
zqM>YP?W~Vqf#*GsVS&e8jbqo&r;<6Zx$~Kc#BXu?lgQrp_9wBp+wD&r=zl^qe~FTD
z_i28KllxkS>(1lo5=X!FOl}OWzE)K6DT(7K8NWwkzV|C)0UDA#Q$Z0_3CPe`Eb@g_
z_~q(W;?C9<T%<UNPz;fvAPXjVikRV#z(JM4C#W)!I&uKAd5VuXz$h6z0AV>?N7}AR
z7dL{-N$d8AK}>`txdVVdp=lc9e<KJ*Ek7cTW5m(uXzIKuDHyr5zc(SPcpLp>93`I|
zCqv^duo6y&#wM77KREOUUWkVgO1#0YM-TTMC(YwnI-qp{6~rFR0ZH&@Ma3c-wor>c
zeHmY)IeQAxsKkTQ?5Qv{&z|ncxYi73qWJ0PEy>O(W;n^7N_>>LQHc<ue-zCffGEQ<
z8sTD0buhhn4ooARNFYE)CHmUbf4fWwYFWkmjuYZxZjgH@gND~gBm1I#;KXtzR<}61
z!u$*8Zu}{u2%=;}=v12h%E&Iv93&Y|ob&d}L>!Y*5?}>vh>x7Df-Oys+p<Ep*!;4^
z>EAN?TVM=7m?PnAf$X}%e@F#T*#hI%v7A{dRD36$bbNJL9*jFn-y{O3qvNQXRdH$B
z#hd?_5GDgJmI!9>fyDU~+t;r<a5~bw=X&lAn9aNuF=t#?1@Z_Z#_?nj&N)E?86}2A
zgfDCs#;)f&4hjOy*bgMcUFg0PC1Fa!GA~&x-d02B7==I4D8ui>e*m!PpPh|eME}Gq
zwD9MDM2?f9Y|;hyOhx+~mIE1DkcvP-i`ZGSjvVwYYd9obx4<B5g#cS1C?JsD689BG
zvjxxEwnQb{iV#B`y)>h7Y7-=FQD$~_I#<xI@cajqrcol64GWffUj%ZJFqIT=h3E28
ztjRK!e~gkgBqaXwe+p+Iv1Lr90@W=rk=+6)q)J{$C*SxU&kIs=T8a*H#B#n;{iOUE
zMPyZAIAM_pYA5ERkTA{AL{U;)ne6~0Qw&)&#f$^EMv0h|V_rKW96FV^!zp1b63)nT
z*{l#DCOD$3N)6_hqq|kE<b6de@!s>i<~US}DmM>81<L4Kf9_ByO_#4KhwxpBKIXUx
zW>t>H=g-Eiyb}Ds!0_+@Cqa?f`RiB5>U5aKWsiN|SK&r+GCL}Aoa?|~XD=@<etLKQ
z$|;4+nZ7<ea!lD%l2W9k8QEVJkju2!ECR;1*$TF1XL_O{$ePa;o-b_i%7{?AY=in5
zvq*3B^{b$tf3szVFBW92%qV;Ecg-fSRJm$`y?yuo^@X2(lIv7J5=LUYPN4YR-MbAH
zzdN`=u=pjT#doF-T03mK7@N}(Uy(+H27KovthhB$`QwEjHea)Zzct2kDMK-)8MB5>
zMa2_~F+XWzmcewcqCbm}xs{<hcHNx{HIH3a@ch$Cf6*ml@>UyoqNn<A97H8fZ+om^
zr<iy6Q%YzC2AJa~+gJGz2U#pC>)74Gih-plz=i8W$qnEU_??l2qj&6n_W7FU8+`cH
z<qI5Q`0xNcFT?=}anETY#NbAR7?^|@Y=#hnTOh=snGial;g33mfHLnRFz|Q%UB~(P
zT>@{(e+*BDn8ILx2ljUNc6U@%jy>&$2G@vzIFRte(kMzIHo;-(h&Yb2Nj?-|200_E
zXpmbhLs`x|GV-zs_EePD-VS7wh`|*7PN*6ALuMpmyxU5gDYRI@1SMn4WFS8oQIUTy
z;}xnICyoml;Y$ReDJjhS%iww=jIx|^P+=$ofA7hz?n`+}K;g4e3BbZoq-aX@0HTcH
zc*Kubh=xkaC`k7D-5cL=o;~|XSkWoOuQA0Csi=}zMS`yq;s1U1%yB$8(-zI@HIwAf
z5g28Eh3k<mo?ODVT0jIDhI1H_Y$7Y|iSF%d+8coQ$jT6$qWd<?y*f-86%j}h&wD=n
zfBf&5;>F=hb=XqQ0w|4Cr=)pOPn>}RlyII3VM+v*%9F2D3UTUQnqhCG9hl?6kDLlp
zCQ`8#FKal>_I(Sj5&GEQQl&kCoTs?F0~_Apdz+c0341Ef!dmivCI~C`{%0Zzav3g@
zP-X8JrxP?3fr9yj65{TJOvxB0n2-E5f0|orR~=N-2++w{?1VFFh^flaC1Qq@!9v6&
zi3&E7%yp{N4oZsFu|FzhrP-HZTrWHlBqQi}qiWvl2zb(<GkKc9h%a9#nM1@_j@j}}
zN_kz)BE_dHzzL!eDT2BcUa^STwL^j#Z(c80dN!hD&d0GtqwIyWyte0>*)=(5e>mD~
z5#Ba2)P6$o2vfaG{Y*xqNGKphv5*8gKjnx~TReAWd%w;0f15^QImG>~;!iJU*b5ND
ztfyv)`jm|2;ORbO1ZMl3S$<@Al*bT9$rY2lpj+lGT9JFRJR>whG3!&zNIb(HM{ZC2
zyYHohWnPJh9Ou3PZ<(Gn6c_&MDY69icppT2-fYjyi28H?TM7mK_&h$3&%fC7{|5j7
N|NrA;`n~{WEdV5&s<Qw9

delta 364091
zcmc%RbyOa~wjg?3f&~cf!Gb#kcM0z9?gWBc;~G4;ySqCCcM0z9AMW-|&bepi-kEtb
z^VWJZZ~m`dtGc?ndiUPHs;=MIjs4iMwZNx`hYwF~UfncLK9t#DlrMC@1s@!3;VL(O
z;p|4Zox^+Ngs%?Qv2aLl<<>yUvAsSqY7Ar51+PJvNAlvc#^sWU4h%DbO#LBURH5d?
z;AV1Kq5XnotxY5<zag5k@@nNMi}uO-DaQ>|<wC*_j~exv$Ho$E`EQwNtuyFCzySo%
zNXxD+eo;d-U-gX^whECTP-G7W|2)uqh5myG*T;^FvRoD{hck};RZ<L|mV`M+fgy)1
zVH%MWZflf4qi4wEqGhWXehoD}r35C&3Zp^<)#I=?xwjoExp(q;FPr(Dgw!#%Qv{kB
zcs<<QPjtJwGFb9zCIVMqy`sim`2h^pN5h6aB0i?eeoB7K1fP+n1%?%O7eqYaOl=WB
z$iqj|_++j!IT5V9-PB!h(;_{!ad4gq-@hmZ%DVdEK*K`K*W%5`!KP5cA?NoHg!`ey
zaTS$7hAhE3+xlI7)H;IH0wBlz_zO^HgwP<9TZl?AjZ@ywvHWx*1q@NNTmeK=332&D
z1Ojb1)9Em<A9=dQfnIERUR>u5Z>%Q;&hIz|+LR4C|L=!xIT%Cc!(}2wkd~J37d-fe
z)<J~Zx?7zrpEHJBVTc?q`VP$)h0&3N@WXHrb6U`-=B{GDyIM=_4#HSz&2X{TfuVlh
zDE~aqA<7qO{Ah|GWc1EHZ3xT-Ks$@%Oeh&2m@o(FI$M7?8CKE^`wp{Kb$=xkTGUC7
z{-p)O$lqP`WBpi&wVbT_0vQ!$PA<Il3iuX9NxtxT(r=oWqL2uJeJ&K$h*b@0a`-sc
z6RoTn+b82PLNgS)9~_o?#)O)&$Gi^GnpVtq^=Pk{542v`V_?gJ3<Lr(hWWm<zUo)S
zE~EDlAhSA0r39<#^tdI~!#u|>S)z&{q0~%Ne6x49{Lv4UKap$Zf}{Jp9DyiUSAS%m
zjrSLslL(?PZN7RCoH_T6)E0`{)7<z+VZuI&^5^e$v>YkHUaS(7559uMrmn8f{laj(
zgSNzy9A(jueDZGVCmVp^GO;=9bb#T0%b|kbm@}!^cKN`0igrFR>zom@inu$~3vDev
zJ~8Pk2hxhJwJ*G?>{;wDh@iA@92IvpxsGN-oHf%p@H$dDo|nJlI-z$y!t%>FlBSeN
zhThAh)R-uuaKsj?Z=E(1Ng!57mKr7Zbia2(zxdc1a-s+G#@_&(6OBL5y37i$6P{^E
zN;{MXZz^pu%j)1w6>LMC^>L{Y{8&y<Xoy-fzJ1Xk<2(=akJAiRI2&il4WB1dw(wtx
z%Nz}Q7hjW}>Fp9lxR{)PuA{GTl)<TNfQC?!i}^6+M<nVJggikBg;ygPi~U7k3?(mu
zxe^}VQxVanL6HRD`?Q=D*%$cPc}IAJrnTciV%8sz9vXt56)7nSewBLg;Z|X6sFLl1
z=(|N6#xR1(a4%x{Z@Y0@4+sdv+}#j=Im}w}zMS#JRzEb(I^r7q?@*(O-lS>KcIQNH
zx>$%`G7o4Ws7z04KE-CLQVzbhK(t_yl!!o~)3i&hsr;b_NMNB&rI>Z^4}U!Qy<Hi7
zVGzNfPWjn^G178-?7oF*&4$Fvp7IMK`!al$XyP|o7eaj7*cVFj#SR6Hr7Mje9ZTSL
zd{kZeSSqUMAhNB+!-4Hv6bQgghCv<bX=nSTWZ;H6B5;k@2nl6ezND9wvn9WgygVCC
z;IxfS3q?l+Xr|Ii*NPq`97`@n5}XORC-j=lk0}hx9d`$*mYq(M<i0*7Q#AkNAAh9;
zPnOMWK1=ms52qP6ho(ZhbeyVmlncZ4f?v@TL)T&^7KHVct|{NUbLwDDH#ZE>etqR>
zD~j$ti>1mYA}k8hKb*HGBS?aZ<<)INvmc8omTb-jVq)a0M(6)v3?HR&y+l56-PPxx
zi0_toII1xC%WhR>69*!RPJH7~aHxu5bSGNYNEj8|$nbgBv`-dH5~4Erx<?t83ImZ~
zEeY2rIn#{T^m`A<FrBQg8P>n(IX^I+)|Sl{SstO^({Mhg?DJ|@kqFHxf;ABmo3lyD
zFhlbdfXOtHZFJ$bRzK%Sm|t#A#?$9!MXr*H`|<biLx!*>9?wrs!qp7UN8hMTA9zTi
z>HJ@$mfsE5LX53Qll0eaIJaR|Fi()b<X|&@*{$$TAb*MGu~3B@!cnV}*<l3UKTLn$
z>{Mud8yFN)w8h}rR!hhHLlSLF5`dpACnGzy27GLbZhtsu%cZ4&A|YI*{(XUi8r|+P
zLq4px{@qwNbodi0y21O;V6?qvC-lK&B$32ESIMGdn=UJ*38m$5I(1+;O+Lo(?t@$a
ze|d+@T7pUL{;-!5O4!^iTg&hI8B=8hc1HH_4@k>%wW@P<-%EmvJdBpynUUcy5L$Vq
zcmW9HQjnMG;<;xT`zDg+5vu1{-A}#;i=y$h3*)$wK173ANS3H4x*-<!6h#c+cU)4)
zYopGx2yG*~j$Z_O0df8#olM1I=ZLZsvMYRSE=vZ4<&Gi?8yrWhjPA|BZ4pegt<XzP
z&TjYYG<NPOQ_c*H9GGbDM@|ewIxGRQJwU#C?6Hd687>*U6o&h`t3f=rewgG0Vx?zO
z^OXo0eMWfUk{j2bmUN{Z@x@yITYn_Paz*?4fv2h~DFqh(xjphl`O?Q+?Ch&OyGhCF
zxNc4yHQR(XI_&C-7{qHjn1<nC#>s<^tKJp32v$<NXNP*x%tRppWNQ}~yJ0#s*#Js>
z9?Z`KwSmTfnJDdA&3G<fDEtA5DO^m9Poh`NC0IJ5VwWD53L-J=A2To3Af^L3c`B3q
zihM7P-U>@eR8Q~)x}<go%C7uh(gzLLPOjnzmto-{R&fR;?WwC#3F<-}Zn*2n6bunD
z5wky28jQHgz7r4xBH82f>Fl(#paY@QmvGq2DAg`hmdt&c5QZvPbr#0xb~rnanM|{~
zm{09nN*<nhK@@H88CpttR}aqEpHO3aS%u$H#Zc*&Lg8NJmk^1zFM?JYN+vteExN)M
z#CwE(@;lfgqkEZ*il7Y}n8_wbpu6nw;M!+yuA?Y!qkPXl#xErE7V_&M{tSpM@uNT{
zDDP-<C7u-Zt<CTR-7_%7O4c0qu(v22D|Fs})RFCg%*KyP{{06Eg$TpRY1N5{-ty;}
zj;UI(Ny5W}e@naZOE;y#48$8#8hW<plj*rbN#ut-Ja9e?>u<BMrwljAf(At1Mhs+L
zYR>+aZi*z3)D1O?C7FONyf+Yk)zsGF5K@ZX6VJ8VS%z25)CIreW4P5|A^R22)bEl0
z5(04nqL-GHkF}#4dePdDN3ty9m545NCoD>t2qkH@@(QO-gHWBSt3`n|)p&7aI;U_#
z7{p5U8bW3+t`Lnx!;(qw?Y=gJlUJ?@5iXa#&j07zJg-B2+d1g_A~ZlK_tpJ?4}Ft2
zE7Bm5@P~lP%Fn6WUTO%f1PAiqYu_n^2ar2xDI~T%qbTL{qKcWKy+f@9Tj@~L@F<Ss
zV?$AMR+`bb0!Rt$*^U@OBLX*)!tg#KqGTj*SvKbgP#jVInhw`cx;t;sHJw0>^LT-a
z>~uT)IF8CjC`0S`dIIo$aWxJK!WOgi%57%ArDk+>##3^ws@XPq_)+=gp=T>4mc<m0
z^d_4NtmApp4Zh3vhn?6a0l<>uNWkkGNf$O-?A_2N_z7oRfXJ*}`rhY$6X=-ed}{-1
z=s(>{Qt7tEh~<yV!jL$DA2)%&O~AgVZz%N&y_<jAUOoW8+YR{r;z98JMG$-w19VUL
zOyImb&7@2>4b9DV$OT1%J3p63ZlApTKKi>zd%saN&6}s5(FA5T5XIZNB;0FcJ?)zv
zG>44iqkXZ>ZWKT~RSj`Y5DGb4pAr>o5g%c>p_CNH&H%4y+}|4?3T}XCR&NZduf5;e
zUScw@^MMf}?pp6qo}IDREo2G%Lz4E*E|B+I+I~F(r((++!HH}%*O;HJW}E^S=^-)Y
zr$a0!y9dp<*JX&;2@57sSa|U(>IDM%?idnbs&q(VdQ;2SDI(#ca6r9xXxa@S)sG34
zq9rD7Fw<)$cugL@wMN`$kmd4xDJN8Qn1~_$1VGT`<~PL)BU=TzlaS}N5?7@Vtz%*s
zFJBgMq04eta=PoCzg}}+*x4WEkt{P|@alggXliby*m%;x<G=Wb&;a?V-)pXDyB0h{
zxyN=6ZyN=~T`hCf^P!xE6ZJfaI_KY#b=r#JLx;2oIk_b3*z06Z4v$fWvoYA#2n@eA
z1DS6QyqJOepXI8pMgWOh1q^x;t_>@GMpf{*ihIyEdWJuUn(PRL1Q&_p-ya+tRta7i
z7Je#<liq+$g${n0KlzKhWa2Z{y3!i2moYYqirr@LJG*_A**ewmLrMI)vSxpvD{`RT
z$X~smA4*Scl{gfbztvC66j+o>02`Rr4zTnpjaD0AroEzcef^b-t5B5do();o8ICl(
zSQGNn$rD%HHP(o%u}d^brM&CefaHFd7NP3|^e2_&=2<%IL8cZwTp|8`(MHQDyT(dr
z4v||{nz<de)5<hk$eVZCC<1KLJlJATa_7f8Ghr8EUl^9LNQ4Jp$P+#Y#e-7D0Hn%f
z%<~r9w6%eQyP*^mz2m1y8lw;fQzyC%q)gY|CMhB~_&ijwTiLW=)}T$$hA&mAv0v_O
zuQ(s(lB6x0{un2s`HrMHSHc?HLob9s7YyFafrGH{`Prukou8_vL$Q0Tx{vstKjZQ`
zqP7wp>v8RI&UIpAOtKG_;A6vVfDdXINP>P|5h%S$T%6m1R39j_#cCCEzCZ_R@cRDf
z@_eOLdIIT~Q`Z&zkb#zVZ*33Rh1Hep@)<kp&lwAAifqq*Ol^M;B!8)2xRDV!4I@J$
z2sBF$L|Onm3Kheuz#oD;13}LhYFV%<n1svAiqLgkaAB#|)aeuFVmqPN057?%CFK@z
zPD{u^bTsZ9DJH>H6@lvYlqAJ7JK_w>$h=wT86molMC0_-6I<`h)1S8*%sYLs>_yi*
zH*`57LsH>e4R0@_Y0G-13s-%@B<2(HZk<P;EY!vxZ3-!`TL|uOn8SVhcJ9kM9_y(5
zHU=4gYBMSPI~-j0C^Fm!z(IH`ujPF7VPP0_lQyM%FBtZwX%Cm;07ioMdU{KFW1@Z0
zc>&W-#or4~`+bKCt6bWtW%KneY)6ff#hx}&^|rPVQ&*AW5$Uzia}x<y*Ys6Sjc9&C
zx4=p~q2lO2B)YX!jtqBSE=cRmk|b+Rrh`dP_)KsBV=g75$#|3s{COih4hn6?6p6zQ
z4u1WK+9wn8^Y8BwDvzxc!z%@<;3JE9?%_V{no>YhzNuM$zf%~&EvlTixzf<5jPU?L
z@ET$a*z=;mQtJJWL|JgkOS3S?-n*Id1QWLC(A&1?^Nu3in})EWyL;>c0|v<#dP`*Q
zl=nD~1K%PI#C}gFAWkw`@O~|Ocv?0BMfeoD&Ql*iXi9xFK~Ck#IDljqS1{52_<G9Q
zfB#Y?T%bb!isuaxbNh$R0Ln+9BP%IDJj!e3hrbs<|A!`2Nhi3UUzjkEA%uhjmx5~k
zHLXfDNt8tl?k4CIWzWj=r$Pv}XOAVJ=+=2K6?8N~7z`vg(CJmc%B5{g^GHRhnJFvE
zURq?d>Li9>HZ=n$Go~z#-RFbeWIIKnTNMN!^7ZUxK={6HxFesY9&azH9A>47OJuDV
z8ZYo<T4UXe;vBxpL&xO?wtyFz)fTw}fo-wktNyPd8B_|*bR7%C9pwJOIef=WUu<!G
zEHdD%wx8Dqh)POiFH8!FdLsPzXTZA$kyzT+KB`}_+Q|5hkT4|dld+u=dUUe+Y*f?Q
z8KT<(`(sRy$FvVkcyzZWef8a=$dLW`-2$a{ri>V3S-yZpb~Vb6pgQQDTjn(A_4Lf3
zI?5^*^_Bvy?p~?cu2fg@({;2<ww0LqW7+s#xk~maKs&lh>W6xb<U4uzS|9#yt6K_h
zjWmmulc0H0L17(Uzz4UfKA#^VUNoGOffJRsP|6NBd~SO~of6$wQ|qMPk{aFKQb{he
zf)zZ~o9jQbQyuU6*_`?wOvI^$*%J#Um_GjI9}ml2e#WV;XE}x^aNpLzX{J;xgj;dU
zr+(Xy(1hSO9shZ`5LL~mii&l?-p(O3-kI}ReGwj=Lr3`KRn@CC4~Vs~daCx!@~E<Y
zKdT@AiAa^XBUhTrUyDd2_2K$m$Puf*;Y&U(CFL|<Yo;<@wf6ThMDhe%VFEy7PoQyd
zdiFE95VsWMMEQZJ3~qSn=UERj!saxz!;zr#u3|KE0KBD#|JAqi=rN<1^1Kq4x~o)c
z8y`EZh=>taK9FH%STnI&==$YwV6ROQrN58~y-R{F%pN>~vXPBA&}1#V(Jh#|pCj1(
zXTe5RX9i-kgz6-=v@a$eISKd`0KVD?q@uxqKpg!govZvsE#4R<P7rdc0^<+=d#u!E
za@;B#J7-}_{&v)jppMLTiuD;IU9Hi{hCJo1cTww>i&GqVdf~tw9--8bq)#Ib{Q%mq
zP?L|%j6TK3)UgBPf!`whu(+S4mM&?uKiy@n!4sqyNy(%8C%`F}<}L%2HB4%Tnv!!y
zh-OG;nB(;VFHlJvRB^0*`|0!Sg7fSryb$Pwh#Vd4H}S1W1}KZR1w7d137FQ*x42|N
z{f!&ikC2$`LS{O_rnFKUKB|_#iK$YIOeNcMwB~+xjRfS!kQ8!dP;<eh&e50|CsK{;
z&|~01jIl)9qVFN0-ai15Uc3TNR|()Bs-%2~7ooV{YAd$GK~h0BLQoFlM?`bq_J&uD
zmgLjMEVgc#n32k1G}0<R#W=%SXv%aY-*_ykH>64Jm)dGzG3lxuEtQa$h=csCl&-=-
zpM;|fp<#oc0<P%|K9>q2@oj0`(V(JjPTkYYawCuEWo(Wd5oQDIE(&@dQ(@Z)e@ce~
zrFE*m?oii#Kd!2`Bl1RU_^M7*wN#-?;qYgzXJkro&bPbWDJ)+|f2T1H^z0IhQ}q~_
z6#MO+!gLThkU||x`YHA|62ihtcwsM;r~2_WA9b(J9#!(Q%wqrSckvJE$C6@C*iT3J
z5mH0+oaN<3Dp0V1xYF&g4bkyuDa#9FNh<dTF>$D{SJ{uSi2W5~GW%ZAotfU?)YjD)
z_+@zMgRf}yf`>r`Vj;E7cuWtdYz2~S=`I&GvIW$_$}}MluW0yV%toi5D(7gP3q?ti
zxWOdExVrmKKw--RqoB*Xfl|{U*kD)d{1qsHMEcwlpwkC5qZ`&DFmv_WXia)_%zVQx
zLl(@TXD3Z%UQB<-TYlz)3ttrju%at?3Af;P(JmK#-}TzA-MyY>2I!eflpd;|tAGrR
zhu}QVd#izLY2$KU`U5CgAHMPSGjbZ%hr=7J<SX#2pgKM{`)_o4zd5iAen1MY1V7+U
zIlUXiMgits4_wrw->sV!O?8K(N;y7%vgRINv`dk5RSSsgt<#J=w++VYaLO|qvT@&T
z<VBxge5H`8N)1mN%HeuPy1<RgxVu^WDWmH&nud<dGGGyq6H-yJ6wxzx*+=fnO)SX!
zQ_+bDE{qcPw-lt#tHRLStKdYAt|$y8tn-9q_ZZ+~Z2^a+;;sxSiT0;gh4`x6*-0hZ
zvtXOj#MKwO6Z6-w6<09@)~;IJIK{g3+_WMzrAsQ2TpPtVw!0hNl38d8lLoayi;`L7
z`uiWpp)G#iHV(5$3e2|9QPDDsgH{U*uN_kL3+92G@_L?%MBE1p7=<{wW3?#k;>1Sj
z#kzow$t~-?b~?ujUz9M+3UYahToV;dCn0pz_9G=;x?!^E38%_@6Pz_{SraE+WA5`V
zCjXYts&@J9^-pGdXpq{kuBiEz${FqO!O96+yE=Rp>)gr_ZRw;8vvjKp7&C$r10Co)
zkvHvPs}=Ub+Ig~B!n#K3G4JV1_a=XH8dAUxQ_a>UMZe7W^hKgM*E7Gb(nwoAf@e*!
zzMv09wW{))XR1@>JgHsM;MaqmfRzO$ZILkIG0thyr(bqCzIJl6NOv}NoK^|H%ngMD
z?d+63Y$M9s#UnZ)t`JhL;Ab4t%$$J64=h8##;3Oh$@)Jn(oLOq3heSC>?WpV)NFw}
zI4jJ%L8pP8^^dKMvNZj;X3JD~MY#X$c>V3)j(4i9h!y6pDp($yN^+gHr{-9guv^;L
zW)%wCFteoRVMljH#mG^zOqR&8(g$Qk&E!-Xc_hJAZq#&SX(ND!<}8hgmXS{m2=yGz
z9%W7>BVcBG%@9=((+izv$BKM`q-%xH<I+Oixzk1yrjxtD1mb)yf7zpr$eYem6cqm{
zhbOtEs9~KlaRZ9-jSl=7kuq^#ueFFSCo|rM&+#->9Z*bNOrRf(N|0lEL#%&1=~d+)
z6fTO4WuxvaZQ~KWCfT3(|2R|+5cD6#k%`)hj>{*XFa11umvQ`q^X_{KI1U-*OX*&d
zzaA(xY-^a_)<Posrd``vXtk+rR>n?ty?ZZ0R%Bj8<_$0QKW392dB|lveS@N39Lgl&
zNV1V5TozLA2w3*?;RFwF^VsZ-pyAQfQ2E+!rDisS%4<x-k$^h(%3i>1guB`t3cjz<
z6m*BfXm><j^PS*Yfu=&>ypumlI8drM1mr+sBfKH!;1(ww@{D>#TaiifgXUK=KcxtH
zdoD)j>9)pCVPB{5i{WgPPg-@~DfBCKIBjObvoy#<9<%NjrmV5F#=)_v9cYpCAupQ2
z<1dVR9-2!{M2i__!jBJW;e~UvH7o$M?znBeRqAKMB-MY0I)IT0GbR?NSjehI%4`zZ
zLGTLhh;(WgjWW5^LyIpJUwYlqwYO_yGRx$|QFc9MNL_N~bD}^^0i~%uV9}G6Jp9F;
zyTj+RwBnQ;vf0q47dD?hd9U2w{*TAtwVzjXh8t`3<fowBhcj(7mdE^uDf7R@1a=j&
zPN&2kjoRh0IN(NP_r?#Q&hm5C;`2d$O3>Zi3@9*iPyy<VpZC>z^`6F3lVs7rA?7Oz
z`q<qK)?~cX15~-|0)|zA?>%NfxE7TgKe2ameMgZv33d0*vFxO{>1EOnB6bPM;hJe^
ziQPT)3<USu-9yTXpt1;CFXGq31ACcKwl=X3TvG~9lmJ^RKNGhV1)UWwaW}J#l`g)G
zlx+HrqFc!q9lezF64&>c$GI|QHhhy-vE=Gv`fcQTwZy}+2zHt3W%Hol*zo$*xv3I^
z=f_JGs1pW`zb{j7?&#bT$_)d~*6?!qV~=mT-3kMb*jUfy*LBHQ*tz_9Mmi>lmaD{+
zDG%Q$>ww7eIYVqptpp+H#Mf*X*d&*#uE7&HB=ieaus45`T!B+a+MMzGd3_JN>A17j
zP^9$McZcdPzO0rgAKS5*-lRF5xYT55+Sw>wEz?{rvlIejn5VG8gm8t^p*pq2&qN%b
z;~j`)efHNmXecTDqPk!$6ib!Y3*cBa5iR*WXaTu0TaidJD?!t2>LCa*?WQW#gg;hQ
zVDTE5Yn8MT(IQkqY3qb&5y8d|crj(+_gI7u8m+?k#aULJ;7KNOFJ|h)R+As=7D<8c
z$R`4#8ne>S5C(I;NMR_Zuo%NomM9b+rox;y<ny(PNnw5&^mFV;%lGh<)bDh#P2<()
zDFA2v$2r08f$A&k6F3{;WlyuYP9<j&Cj#Dz0h@nIL!TyICsTDUgzu7gdAOCxEXWd8
zQj~0<x_syuO2)TH{m`HSKN_~XAhZ_3lqX=c9BI(BH^xQ<HSY;z$$#blwJ(r<>Ihrt
zpZUQ1>GFot`oPR^TbHz;*CTRyF9;u*zm6|nl?X#*s2SV02L?rPdHoazt_v+Zsvr$J
zU?obJ%0)W$J9~c)BV?7@kG+#AJKa2zJmrWvQMfboPX^@)9Wp#J6Iq@B(sB*Ot$>9h
z%2lh`hegoD@rmM-1f#{c=zI%5j~29m(KcqB{#sQ?oN@J63uQT|FS}O1PC=0g*N6ED
z3F+#Mtvtueag=fi!m=cA?;`>CpAQnuW!a$MPZH8)iA2mOg@)<aNI%`9Rb7>*n?tPO
zF4~}zGNub>c01kyI4tuze`l8*&2NKI)^&;>_+GjX;Jbx*m6`*lox|%w2d`CvglAcb
z&x1GsZk_W5;an=LnsX$*Y~w!yP{-!Q;;Bep)VI&`n@<Tsa(KX0pu=W|_4R5j=|;*7
zZwY2BGyn}vu%-hWYQ(z<C#ElU+1nL%oEfC{%2htl_eEI$(M40n^GVj0cYCw@&35WG
z&12D^V7Wauc4}LH&Z0__+dSUP@k>M=;Tb3#z!DD!mv_*8@*TVAREc=;3Vv<x-25ft
z3tr!F5Ykde&Ie*l*eu_QI&d{Qeh3ctsp$l*QD0;WiR`UQRY9gctw!E(29r~LZ-?je
zLUT_$U5<4NU+tXYP#XIQ{K-orU+}`&DR9!(sWE&#M7u{d-UX@^`Ie%=i|$DTU`G_G
zCfM4(OBDn7^(Mr7e^PUD(MBq&1jV<40|*F9++QPE;Q*Sw)Nu)ntaW{b+w3FLRUcAk
zdRaOVIUlYQ)HMLN+N?O=>9epY{3EPqX2eCyePS4@@_C48GyEXBaVeA*bbigb3||-<
zNHzIwc38=#rrb#8F$5FMQY$nC!U5^ySI$|XY;8v3r)VN2qN`EH(2nY8()@qcN`F24
zVDo1JhH8`b&KN&uA9h2NL9M_~w>ymtOq6{65CL(+d%9i^D~lv36w-sxTHw`PJzYSy
zBGZn7bgSsBbLNLge>ibqr#=Ghf`BMI2m$#g4^8vNO@qb*p-H7aU_@HrR=86Ndien-
zR8yu0*KqgBWo^>ztb1Y$f*^4JCqVnsO;QgA27C%z8voY5=`FzI_%#x{7u(C)?~9GE
z#H-D0J;-LSPvc<Y7eQ1IfVQ%ezf$J~fpi9LcZ0vW1B?_rn*VWSK@B(;&eR7*it~+0
zz*C@Tp(GU9<tXzGjD?m7&$l(mOie@-mWhgX;t^-k>u`MX@z}0ykAIi6Lo_J40#Nx~
zwf&Aonc+NS<t}q+T-t9OSWuG9%rk_9t6dD?BlnCY-f~N-x1F>0@v1%7R7;TO9H(hX
zW{9b3Xk}8sA^U5kd9x%)g}71SURs%?F1eUbi42LHL!bBgv*U*i>%Qw1QZHsfe@?N3
zn@R!tYBZ(LBkJieZk1Pc!KB3)4}kd3N~76=`7G;;pbalrDT4>>sHoWVBKUVin!z`}
zZ%A^l?Wg<-xS=t2y*Wp_6EmQ-%wJ!C3U{zu^(CY4dwz|<+UCC|+&jq#r{R8Wh~Q`m
zoDA$yaQ@>E+RO`N-#7vhvo#xv)<Wp8@DDCH25@J<^a7!N(_l`u5xcM+o3Yd2v5C`x
zY9bFYlCc(qp@ib3>coD4Q&HL!@@T5k4_83?ht3qzsFrw(+^Auy8q8V;JF@xcJd91m
zgOnJ1^LK*iT9l!s6bn4?rsv>t%qI3TIQX}|QmQtX?x~)H+!zuPsXl;$7!l~Sd)>6*
z<3)mosNac|N-FpBx&xHm8(zqE<|2n#a_wSDu>|#i(@t#a*qE=X({+8ZaQZa(4U{LB
zwA>_l1hxC%_~wY>QzzrM8oPNBWqj6;VkoUXY(p!mIn&hyxO>D)T`b!;@Ra-RIv?`}
z%wh?%6DcaR9JRX{Ujo<cmjGOf)(o;CLP9~Egno^ZHYK%aEAq(Tq2^bR*F)#n6r`_E
zNaXF8ulRpcJ`~?~x+Yt87jD$o-!Uw`CLP_^MJ!>~dU1%XjUCO_wU-oY5x;Q|MuLON
zM*H{c#%wlHVNFKhI!)|<<J_F3c=ZY`2tGB<x0yAfTBjM_GSoTS{s5Ne)~kmZf9Sr4
z1kaHB;%Q)Kuj>@NaRlHkz~SNe>5$ipFbt2A&@6`~wQxzBDbo#KpOr_pD^Uz;{eo$G
z=5ATg^`5@)C@=DWe$ztq!2CsXsvnTtsD_kI&jIb-61TwZr3nRiZKnHztJjG+UA+|7
zwm<X?KgB-nqG&iLq64uUJE2pimw1k(CVPJLsg6UVp;oZ)TC`#C!C(gsQMC3D(P15p
z{qH2NGC8j%d!{|zV1u5JVL^DA35qsTM)A^kd-kk0DZXvuU)-uA&Pr_ZI1tB{b!t+v
z@MP(C3IV>C-8uJfgkDzMOpF4zUlTccvklm~h|Q!8*nDh-0)XsTGYjbsy3MXP#5%2W
z5%1|ZEDAZ<$Z@soFs53|t+tMvwqRlw=+QaDqbq@+qMi7AWmLF7BJX}J#hoB;GVvJE
zz8qQkJsb!^WuDPrLc{IH#@VGsUp>-kAg^X!Rn>HNVy6v%UK$RMjGI2N`FBQ{mnS~h
z6ghou6LCdRSpXOk1?<PiFH#1@0`NTS`hHc>BB_XaTG;LHGVzZim+b0QThnCIbxdKg
zZMSMv3k8`5OIG>)^2U0l!(3V%?+!GMyG=|!hFf((Y;xO`&@L0CyEx!G_m@(aM~u_x
z6Y-8B%BZW#gE#%A!C=>%*tMHr54PwSe968J4p2^M0|QnL>EJiDtbtX*UXVTB=EP6g
z%8_Q~&>wa~OxbQ6#@@zqX&OMd6~}}RJ)|Ugcp!Q98F_2qlk6__q8<bVcMsPiPwYqZ
zPruP;gp^5thMkZor+csm`(6jn6tne;mHT%?<|lJ<yu;n&gtEe54-tjd6tv_Zc<mWd
zF51cdR0X7AKE)_U41FoI6yy^6cF@*7W|IG7aQrd(@MDXCZ~&FOQp7^IKflrH-j}Rp
zj=(UYC$>L72dV&O;eD45g>Qch7)(BVQb`XkHa<jr0kPKotjzQg9SF-*`HLG!2tK?l
z4QJ2kte9bvWG}2HS4xz7X{pdwwtZ1q8u<b&Th0Sxma6=fE^P(nsu58O`;Ho9Ac<BH
zf`_|Kdv35QKmRD#?I=vteO8;tO`T{1n=0`FN1^^j!+1<*hX>+R`@@7%p}s>@wRM40
z1<krsr(WfPMB<Hh{cKe;t+*VE<6F4*aYJLL{`O9(2cTQIzIbtx_)LkvuM?%vM@yJU
zJprh{;YMA%G6~W*kL5eot5xTa*RL?jn2Ccb^zFIQE5~-*lznZRSBA8e+S>?9Ut(hw
zj?VbI)b9r;uv;slhLg2zzy&&nF_%A6@2HhK7!8P<wL$d>O8YIPsxdkf+qF8)*6fcC
zsMTt#-3v?vnb()OF4cOQ8S^o5N@HAfARvL)>}wT`*QiVVtmQ#yuzh4B{=<s6k0~vG
zzN?E0p8gzG<uX1>)||Rdb@Pe5#$wjoi;T*j_9RbN?$Uia1)@%!Do&1k$E0p6j_}zd
z)yYQb=AZIRA3BQ}yXev$rY!+$=Z#(Y2|mkB1MJhxp%?vu4yyyY2RU(u`&;RD9iWxZ
z^5|l<5z55c0(>pM$k?FNtm~j=kADcdG0(ksFZ}tCPUJFc+0lGbyy#U~A2%;h%_Tof
z8LR*bl&H_B-iLoV+Iu6nT^w8~d8<{Ykj}RgsnnxclzdW{F!$)b`*vz+kqkdk?+AHN
z{gB2W-YP(#wO)Mcv(%+%O^#B=0PL5scmOL_Zi0<b+oJihXP&{jjbS0}AZyS`DQghJ
zP1AZ=l+E*<$?CL#nxM-~W>VhV%6$C+HK=OQvqE+3zU8@KU1N&9FtvM0C1zY<;?GIT
z{Rm&HfCo^CUbo3>!f|)|m{;7*<v{DKJ0BYSyliM-xA5ROaFVFbS&g3vjGA@omM&^1
zqb(At+Y%f&w!2ude|yN|u-1^5xKppZvvfv^QE+=m=DIw)&N#hw=~Ax1YP9d1wbRvz
zR<H(1w=T>`RVE5rH8t#>x_Zr#CVJK<3ZB!fSXFBBS2xmuo{#F5Z1r?GbZ|^^vok$g
z)2qG9q8QVyi#?SEE4Ru4>iFtxwf6P<eHv>kj=L_7)|a`ai`#qQye{9eta<Ik)s>}B
z&mIqR#8wu&J9l_C)=y(i>bb$z0~KzO{l{6I-3zzpR#PSHr=$6QESpF4wjC=@`tp*h
z3Eb?QR$3P=tLGQyuU~G|Ta7bfpY1BmW*6RS19<w1PnLIU7F)dl<%`Cd^`kmn8+~G3
zti}VqT%Xx?2e~=*yS!Y3Cc}E=(@bk3XM^Ush5SMqH%yTCWl7?V#EY}@JU&Y3o%*_M
z6M}85QL~5ihk4g#Xx_xg^n>r!oYq<^e`-97E$6dl_|<q%0vA|G2nJ4u(kHif*Z<t9
zw13@kvT72HlTh&hUfubN(2jn6so`6(;b4*kMZ2yLpxku6jKwTIB--QDhpHE@+9sV=
zaC>@}aHY(Sp<U=4I#(~x2+T{mbXG2&R?bi!)28W>fRY_}=C8ty^wn0^=_(t62wFV?
zUu%N}6b3-8gU&TA(Z2Ef*H)|MsIn?O&b!_Mo%1v<P~<nDvJmTp`eI1W2P|_#U+uh7
zpj4@Pm*(4C?1Ea2Z=okno``L0Fq@T?t*UTwJz@S(Akz{}yn8}@_huLMq5ZXXzN<8Q
zyk<ENjf9VviE%1o`AOSGjHl7H(@DuZQNDk&8L1JQyR`9SXkw-iG7{?p(%$Pq0#6lU
z`#OJBV|g*qh<<7fJ7I}6?5JTyvdDA6<lzA-)o-6nm)5Js&?FYH8r(W*)9vnLWG<XP
z!EPsV_0VI!SjkuKS|y~h=DsKiwr*eSpjaH(e$&h987!%E<Gmo@N*uL&2+GV;SU1|W
zGHv`2<Dtf)FthAl?PAKKT`s~iA^r6Ho^t<Tf5;VhdEA*S@m88Tg_jFlQ(x^5I=o|&
zW9@HrZ46w|JAH2O$>X1|T_}ywc}R>jr&iEmSm=0BZ4EsH?P7K|F52&(HXg8)s!Keb
zz6#Bp$2^>3UGLKxl)9kITW2*nRO_tYcy^t$^BxeX%D!piX<Cm}G-id|5ihpa=dRl{
z#iRqEd;LSq&XWxFQI0$T>wNF7ANp48Q;nZzC(Lgebj~*n^f@LQq$Q^WEe9eyLj=y8
zhc7#HO42|JT{CoUxvnc+ua5;TbJ(?IAnD5a6XFK=13kHJQw;?>=;M`d`Rf8D$DpdT
zY699)oQ5BND)@=^2@d<uy-zSo=E|d_?Gyl;c&4Zh^={g;#rDjmWj+!f(9P(R+|%1Y
zqvO-QX+f&CFkT-N!8{Lsc6!WdWm)gOE)yzJ)M#Opc3SkUeXBTaR8?29##CA6pvr?t
zC9=-C_sic~P}45(ndR-q<%*C@@T_;8Z@EC_1&!)emuf8*=XWxeeri-O&tEt4SOTg9
z=2nuU&aHe(l1}Gc>&Ff|KJ!#=Y#bj56LdGXVck5-m$GswjIaFJZ{c3)wkAxqYjn5h
zjcd|iGT3P^mM&cGSk;)iuQ*MLcW9<nFE3TIAH|VAJytGtVVqhG9+TL8zczV0i}$6E
z)o!01-E?MuJ81CL_bGEdch>&eS`Bbs+zu5>6keAuw2t*%fA7w%kGYd?cjUs?w-L9t
z`a4z_pgN5TUt!Qm!J+^aNZ!X;&;C#Q%ji|(yYCvF9<5vOkhCNK)~wXk)gu6T2{h*%
zG|vB_)8N{Fpmu}3sqhj=S<BGCFVO?fb}UK|nXs2OalC1JbX3t6xGq}r1031bPYY56
z8(4_PSobzuL<yGr(v2*f=_h!lb2l!!Oov!04!r9#zJ>3lIzko~ndu7a<?S;sk@AIn
zR@dD1{CqY5PnR9R%1~O>{OO@f`=Dc1vrg2(Wu$dOx3j`&Bc{pHxpPWo;%d#`HB>!a
zuW;s!(|&aQv@O2+Hxz*eKv(&#y$0B@P35Sx{k;%&#xYhgZL6*g`jcPWX0KD0%Q9!2
z9L48T(yXnq9%s%qxpH^%R_o;Bd%V_wO46R$t8ydD;LLl+cXEcMV=?dDD3rx+a;r(S
zJfI!ec#=)~_mNtcc&>I4s7X$^+I6p%s&1<^`fzYorxQ8(`YaRzoyBBbe?k>9rT0xL
z^X1YWlD+Jd1*bo`&Q55I-a)l?5vvK@Nw}#;5*lzt?By<0{VdBaYtg~Y;<}xAzoWj9
z=d}ZP@bt8~vKg~-W{I1oh)+R3oR-sSPK)wDi%2*z^D0h@Z*u~zqZ$$O(v9UOee&&W
z>?acoDh_iD>WO1O%-=U1a<$L9Gq!tH!nxa3u;t_^O^FL`fQP$i9n-axKQY_0c&~QG
zqoYH8SQ2#mh=_g9(8xyrIWvPJBKf5<LPDvvYA*34xqW6|zdn|08*kmln`e{@v6M4<
zoVF~bxbydmMEfiw=P#N3jZ%J&l_BKD>IaT|yLFBf7r7PSu%-i8BRvppWX3O-NH41#
zigA1N(I6s{U)l5gIr_4`^2H#;Gc#)q?V?KZtk%s}mbdbu@ASpK)x&_PnKyK|?A=n8
z&Sk|4?NqUQxOtKm4dl9hf<<?CK#fus@^oC~qvh~3<gliX(KCN2(lb}*s1dc=Gx%Aw
z-f(52ezXu+z{l2+s4Pjk=`%0)Rp#%U%l(~pr(oWt!p&%NIIrE_6VW;2rCVuPqvs1O
z%rkvx%;W4@I9)5|v2Th&OEdX%jJqP-yi_;Wq~$<|mCtMBHKDL4Yoj(*mA;o-#D);g
zDUtvBq_$m^gFPPUSuW5)fPUDfSlftAu&5Intgi%=H$<JtHGd<PAKu@Kjty-`x8eMd
zHrsv?-3av*aQRYy8sM=3nyYj@Wd#=7I*y{@66~+?mQLp$c=|gmPy5=_M_FtH)JU}R
z-y#o6c#mDK-R?v{W%H%T?Fwn@r1PEFcxM3pS+mYzqVYvT7oax%p=N1tG4WjP53@u0
z<9A?<{_w&Ewo>O*m$+eN1*Eslv#Ca$Nhj_lmf1FA+r*nmuHEr>m7kcYSpqfu($D1#
zQJ5b~{~=QSp)WM4>RbaU#!YUZfUEK$M%$vgr0K+S@vD8)<i_Ur^eWeT!M`8*(==n8
zt*3qBwr&b)iNYnd@yH~B(Q-LZ?eYkLR5#Fn=j7v@c;RcCsfTlZ+sR^0yvdPRwecmT
zuU!FD-#+78Ubc8~uI*B+WJ^bq9o;@JvK-Lnu{k}ap?z4VX49x}uDvcDX<1xJ4Rt!P
zqGDl+V=cG;hUog1;AzwCt;B85zOugS+R9=11ypsq_(g*)T8xt7hhe{bE7M^XZUkVT
zbhR*hFf*4s3pxi&@cnoI&kVm;+`Yz6@fZ*P9yDBbfJB-E4iZId!QF~Wyi4cc?$LTf
zFiF&zZ3(270rXm6jtnvPlNRQ_tO-Z%KwSfgD|Jnk&kkvznOBP0y2B(dVsiZRf9HK}
zpR(KSZHUqU<6l%GUwDJ*{+XAD<+e)izEnRe0SBZyG)*~-tpE>DdxaK$Pxsw5-3IPB
z^<eRRq2-l-WD^^}{%}ETLTBc#_K5%3lK|TIlW;RzPwj2ukD9-;C&jLnj$?ha0TZ7x
zVRx)GaGYB)5k4A1V+yori5IqgL%GUC=WlxgE-mJ~FH?1gLHi$i_Y#IfxW6qK3%ul2
zxPO~<L|4JYLq_kfm9L|vJYPI8U@<t62^mL<$9Iq%k&zgw=pP2&xic%jI*+gI4H##F
z-t818#)=*O8`!h+$e8Tn{%h%;HQ_WxYZ~{Fc|Bb=ws&pUgVtXYP++VJ42m#5YZZJW
z_+Z?c7zlI3R@Wn{a?74opL$b$@p1K{9WG8j>e9m9Qv1AEqYLIaD>;du5jGP4q2Unf
z;a#&x1vS6vLwI@`2b>PFpf$6UY}pfsUMYR(PN-BFKkO!d9WTmEL0X927z_7CRz6Bn
zQenj33e{((aQ=kvKr03@?q{YDukdZB;f}t)W`}}E|4Jf^*PYZvk?6Us{bxT1)9`>(
zHDd-7>AF$u-)faaCs`r+;@<(P=5r$LU0LIi`Dj7PS+o%La$o=Dx(wmTB!*I78>6A3
zfToe%cKpyUh4BDd{!-ES2c211#v|$wK9%}ZuTfZ#Z&Z2$@O8a_z^-)}^L*Uuk_7Q4
z=S3NV2&mQ6KfMZ$ulwPkmxt3TRxSg|gy44(xWJ;fT5w=CKMYZ*Az0p5{tZ^VH*w)f
zF#WDVH&LIIPdA%^bruJf`utEc=-#yp%lM>DLnU`UG#=le$|<V2eeTiXAaBVuFz8X!
znkXl9VwZIYM0ZpqBa(0!G!bAcErVq5cyx4qJA&PiHV5nwRZDw8$V2D6T~N2NENs7Z
zR3^irAp#d5Sh(2aDyq;v^FRdLKb77)iLb`&YO24NH)&3(O=Pd@PcW+;e{ztXI186M
z5>k$RfR89A{eu^0ns`-a2CW^I+9<0A)u1unEdx26@J*cw;I$M;d3y_Vv)X#R%iH~t
zmDDn1D(|gQ|N9vFudr#$D(*edHm#6{wH?zMJ*qkmz8Lk6QvbOAo<Ptch#6rwAJ72+
ztYgA}eR1VtO4Dys!zUWKIWm<{5=uOJnqW)I&I&0gRozr&8r2Vl(#jQN*VJ37YQ}Bw
zLaN}TgjF`+pSs5F(>NG{wopT=O}8iV>_sJ_Go2IXCc$~4WNJ$&0`xFXJU;rJe(;mY
z0bYaw|2b{XN8#Tg3Nv{n7kdIrJ;<U?5eOOVvC=3LjQ&2QP<=dks4`!4zN8yw-7P0)
ztT2CY82xup<A?+`cR4#QbD-_Zp<55cooJ@W{oVO7Z4v|_g+R3VUq}s1+e4T*n=?d?
z2<AO=FETmr3hYFl`K=r_q0j4=&TYO{mf-?<8cZ1uqYYzj6NnnZ-C_IXVOsydx3`^*
zXoW65>#`d)zo`n7@eu!O$(^jgF$MCtKahwWwIm{$w8<7w0!tS^lz?x^$S)4+k)cX|
zWrTBh!|iqI|47x;9{j&kHS8`gZue3@Mj7Grm3KC9L%fug7I?d!gwOOqRA+J?lDvVO
z!|o|v?T2RvXJSBIDVq26hbg)}r2rXpg1MWw@Pbh~S1OEyK5rHS`awQ_m|VY4`a(4e
z^7JU!)AiD5hunx8pSfD+4BDuYLg<uhqy;~ZHkb01kjfh3ThZ6?Vt*2!A+LVx2=ub}
z%Gx`mA`eG;%_jVb;$!`Je!N4*^?lHr#X%Pfu_?)y)LlMc{GAyh-u{zJ2M6*$MGfrd
zs;_ZbFy9JsH*T5-lZ}2a&}f&c+(HxQ863R2xf|Lh9(E^+)Vedfyz9`|PXXP7^=nTT
ziqP0%5U?8YRC+`70lL0ByPee@<`4fcGwap{h^C3|PfvOOBr~*4CnSgSKDi}XJ_Sd`
z@k_voymJeLO7`}pJ&(+X>=*Rn?TdSQHt^q^KKnaY^%>Un)l+v(Hqe~;54&Uk{s7iw
zeqlmJNNb~B2evc&5I(-uk%`F2%d$;UDqN+KmXOiWEjXp%zkk~|h#s1XK8ni-gEanT
zF<ZEV_+D&c{hn>Ec&-=OMd2BDw3aG70DQ_)?O7K)3->1}cQ*Ss{1P(-ruW2Auwi8=
z#jTDvqdHd43kkvhQaX0lQ$_hLtu%X6IFXncKfjWeUo_D?r7>GZaE)G2$16eGU05U!
zg^h<%kDypf=jP_~gmya0%2$_TVVAuW9hqPHL5xG3)1N$o?6REfqGrZ^+1LRKmN)Eh
z=$331#+=J(1-DMfEg`#CC;#W|%fILg@PEs`{ENN-13P-P&HumH7u~9V*q2t7!ttsx
zbE8D%-jGz|LZG4MzqT*>O8=kiOPR)hv@dMiRsU{ZCUwvL&AuFC|FtjwqA$SzE&K8>
z`U3pRzU+wn&+UtA@Be1|@-O-VL`?q|`||BH`5*RWIJx=1vM+MsS^u;z8xQ}{zEu6Y
zeF2;PH}>V%>i^ol{ENN-|E+zQ%6s`A*cVTa#rh;E^1J%%kFw*GH2Yb=+y7d=6c+wR
z`9k%d<;y?d3#=8zgC+0}`NH*2`6Br5@+JCzmwbue{O{z;{>U4pQ`mooFTnpf`J(ne
zkuU!Rz5xFV`7+l2|0G{tEJg(xLLn~)4x9a!gw%WH>HQXjb{w%y>p7K)kj%mn>PAH5
z>SOHyMW>x^Wy9>(lV~e8B;hw`F6F}Yb?@!Wk~AhF+R#z^0^qz4p7Jru<?H2;D**=l
za)8ktv8qGsO*|%+6E<sU6ka3M)@t)?z$h{*)FUbG9%PeFXsnKO4G)cfq;F!K4$`ue
zyU_XW$ntS6{X?HF6YUoi+vd$&zwBnEKMc@Fp!Qg}Lxz7N!^6_bF8?9IaRck)f&>5x
z&UkBW1nYk@!oNK}LN~&s?B{Sh-5t^~&Y&sLh@X%_-y=j+3zDm4<)l(N$5I|a#-R<@
zl~g3Pp`yqQb`oglneq+qGZvR|74J{Y=bzTi&BHUEMu@wlszBVbd`>&$QRwUrw$;S&
z%w{VIdGuxpKD|G1b}8}hOJq9$a;?{hGb<poYgWRgnCvzBq-w$GY^79?zpmIv@9qb_
zJ>ATVjL4O*=w{xY4YN{y9-4MHg*=Dn6h2*d5Bag;Y1-|x+o+<NIDCyyX8a@DMA!>m
z^2<liWF^gewqO7BtDqxEN9wX}AGB$Ga|h$&p{|(y1m60{haWt}9D#wjfYlUR@l`L$
z^5QK?fXnz<iA2d?864~*9@8-&C;#`1g1xEl{Zwt)#TcY}iFhAByudF$&daeu*sq;5
zB0MKe<V<e1Ja<Q?oG?JU6&HQlhBiyJkLQl!uX+J{p7zmb-ryYkc$#hQWQYvN3t|h~
z$CdOIb}Y-0Mwv{*6%|t&10>WD3C}LDkRT5p9}Vo;A_bAP+T5Cs#{+2F#IcLCp-bnc
zTj);z91dWF`o^7HnE#r+1SEQOnIpBbyQoMC{zjL*mIrJGeK#|`%?|n;Pj*rt|4FwI
zhyA<#{ZUZxkO@OT-UJ^#(0k!uKFhmds9$YXV58;3c#zE-F&qQ?Y_*^u0NmuG|CFj<
za`8+j>b1!9N?5f+tw=q#qxeajdubIDOdEmm!Ue<v%?~=h7n#ayn{=0dqp<fJ_e%oB
zg+Kd8yGzL0-84*tSQl$(*I~U6q2ICX6rZ<ZT+SU^#Jf1deiwoJn6T1$@{Yt_vDj~R
zSj6I*y*^<_WCH3+6bHv2@!5^gFwq-Mp%M*XCg6kaN#jZ;JRDv>Y?wb=ZK)+j!P_c{
z9!iwlLYlJHrey|mIFjHZbl@3@wjaMxbim>frQt1>jTHDm;H%>e!$bxlhuP<aCvUBC
zL3p1Y68v5V9v8JpYculUE(`iJ>>=%@r~RyE;48?+-~jLvN-H@bRlzqR^bU$8b5hYL
z9i(Ht*jlm%whV8Zpd|)$ib2w~u(oE%c!=SW;dCc;Qz5vhN3<{R3X-oVW}>EY!Zt#d
z)IAszyDrtDWf*BKEn=dR4Vgj$zx=sGEniMD5}p$KlbUn4o<Cw<4mQ;EK9k;Tat;Sv
z0(h~d%D|-47GxY{+&8gg?rUoiB!6W0gfCc^TrI^*5UK0qtIYyvd*9F>AfMxrH!)48
z{R`e-o>^q_9Nvx}@dz)CEQ)F;PP~v`HfOrV7<+F^Qu+{cN5-zm@*=CpgAvZ3_%3Zn
zb#3l@&4d<6P>-Le(BAf!lG*tTQX{`nj2oFR@dDulWEe**Q^f%KSTQL@gIt!fd83>h
z?T2qZ0)-fy-wa$kXjmWy<f_nwJWmNu9gPPZ3wGvyQT1LGaaf&SH=_9<TCCLgbFFqo
z;e%uoJq@}$PqT!wc|zcx=cJePNBSquKKbvOAre;m^;|(gISOu7N6@>1B)M8^(c;0|
z>i{qSdp+nPOc-ez#Pu2F!{+7-gtIA1tiilZ24YVKiZzvjynx(44-QF1I)_(Lnp_`^
zE@QXYSd-X5yvBsGTjdIvS*Qw4yt(Z{uVi9igx>Jtc<VbB%8++6+wyfZGUOab!#vTv
zuDuV-4Ewos<Oh{INKdh>BFx#($=r$qREj`rMnjeeQyKD!!KEk;#W+79t?_a~;|~my
zK1NW}{w(eFi~86zuCY>*7^}1y7DywagiuI61e1Dn^}ZhJ4QIMXg%>+Aemb!lR&hu=
zF?v7SM?2mURqC(%gSEcVW~?KPHOI6t3oiTHZ@iK=_8WN_c4nM&M}?jcgfOWJ07i!;
zkT}^V^*bW^*80_279NTjId*Nt`+uVAouUJYx~|<Moph3pZQHhOr_-@*JE?SR+eXK>
zZKGq`9rNUS|L@m0=hQ{*tJ-7N-F)U+bM51#agzd6VtW@*<`FJjQ2HeUEISi)Kj%sn
zMmor=0}~DMHfxx(mYmlOG{fs9t#2m&5Qd7o40J3z@d-F{*6cW`I9-PxB$0j{dY94R
z&5k)GaC;pA(6vVVJ8%hDF&avE+o%xKAAoFPEFxBsbW~R$Ev9gOzr|Z~bDX7;-Hy!y
zeODsNw7)3Xqz^Q17Iv!AS8xwQL>N}C7rJY@!vE2pYqLM;2EQuw(Vpq*H-``df_3;i
zNT4f66x2YSotWoUb*>tzAF2IxvM_QD25f++z0<I;<xJq8*ox2~m73kRaejgY7@&m%
zjz%e_7Z(Few79`cLDTy?7DKwwT=SKX7VfbJH0)W>1xm1F3wM&~2FFf1>(PsW-TcnH
zC;oA01~v%KoU?U<wXuhy$&n-fN=3^H>)FakxKSv>sfaV4Wt8WLV#s&_&Z``TLBetw
z(fmM(@)fC<F^pH3E0=$&4!f$AAy8+Gd9o&v60XEN$Ch#k@n3C(@^U798e|8!X!m2n
zk{G+}h-rU&e=r&nrHC7_aP|!8!@pezoOk5xa7wwVa*-Teq6TGzezduudH<kvXOi%i
z1k{fs0_Y0aRJ($qn=$KW#XM`YcK<}U*>b&<>9?BLg{rILe1dnYGB~by0YA)z^@o<L
znbnCT|EmX4Z~nk`aN2xLL!nqhNgE8yl#8;S<Uw+6S5fSFHZWKwj`N<VGD`;J{yfui
z4;OcBSCj4$HyDG~S&mH=3@=n8NE6Na?|C40Qvr$9u;W$HV+=u78`3O!LvAWO#DTS8
zxCqwZQ*dZu=GN=l(Syb{@UGXwlhZ%@{MXIRaYB0+wdd{XQ(Bh_ccAMN1C6Zv{o@lG
zfgpZ2`?Cmdvo%g`^u}Dk%37t(?^`qQ-$rZDFjx^3BF7MMq|&%Q#{{WCA+{m(Z%dY<
z#H_wUh*Gg=6SPhL3$6;iJB_&yNSPxO)Bm<qX@@QV;6@*?`Y*Iz{gBC^_<+4;!-ndi
zGYAk0uG+}O@Gv4_*ANU*a&YIyM%ySPLB+k6ht1ISRCDm8q@iz_2!3pSv#$?Ftq8`S
z^tj1D;7@>Q?bJ4)K-NJs>(6}ZPwnrbjOCKzrr#ZT5B$6B->1j)@kS<c2*L5g=07$n
z3{WRNrU6;R8)tAiK&WTP?sqqs2P;nh?XV8MK-T7JlL?On20P&BFgx-<LNwS^nb+k6
z2rn#wPJtb+`lah0@Gt?BkCB(-uv}xQ)ZcE$d9u3`l;w!o_)~HnN71lm@Vel8z(8TT
zp3`aDHY%lWC{HD_t<hJKk<=LSKej0FzkE?|wtweZ>P6D-`k`9>36~Pufz~JEZ1uW@
z$i}dLM0~hU_Qa3)v_-YUVbVIOg+Eq|Mk8?wFr;5vG4zH(DBLM)Ta%bY<-J3U;84ns
zwi!i*yG_$*Uh?TUy!x`Z;66wU@SXLf^Y<9g$F2Cf6z9;?wNj47=z-ZEb~EY0*&o4;
zDGdKHIQ4px^*QRsH##0f{{HVA;{Opt#C>Xp6mzH7mHEF6&J#QLjQY+mXEVdOeeIOI
zAw>_SIjcOIh2*K3)x!*e-d5&I^st`wwLsZ*dhNYgdG9_BNxAp{h_gh94buvZDKz4C
zZ<@kiMyAGpj7-BxMz!gVl$q?6KzLFJ4<NVYhoNSoQc^s!dG@+|S>!J|oEhPX3X?y`
zxt)d|IzI$;8=(lRrj;Z^P6+X&W7n_Zd@Q5#ip0eI9Am-Ke@%uYGa@4(Y?b`pQ~S5W
zn>Mo{@~`*&iU8=4`8HgQ(T(HSl-zP;_&=OalEwRYm7@sRh|^HGxILdHbhj1JC+teX
zw)fBa$Ez)y^^pKdeu3BO9?vebtcmait>pWS%=U0nFK5GXO{uAg^$agoeGW;(g^gp7
zTx0T_^DSS5AA;RbcL4}#t}9Mc1BL}KLBe^8lnZ-660&<WZnaoXE%p}8D8>Gw>6&M>
zO}UZnh<v?b4yj{snkJJfOtB-=QtAra%35Kc*GSfI-9g7>Z!KL(dnQKR$B%~CKch*4
za|y$>wDjpJT->X#^<3h2aipT5R#V>#Q#GU}CwYj+HF{vbMM6jKKQ-T$*IgD8q$^4}
zILi|Qypzmgc<9)Y*eL9A(QZ*r^Qj_rk>L^t|9skb{#j_a36hIpUC8osEV`zMG!_-=
z(ujj3hafs8Cj%#W^N&|B-3`)fYNINyEx>hO{?&-eq0#Rxj<h!Pv4zIM`GGlP13P&%
zHcuhh1RVeVI$lYxfU|Tb|Nc;NQiY-BW|kCyeg|72;QLzz_u$P9PPhE5yn#JJt#9mP
zYmQEtCt9kX821e;9;)tr<m(}Ve&?#|N^zu>*+Ue|<W+mj)zlAWG=EaTe}9ZI=*m%(
z#B{0^TCf>3((KPe+F#pWU(w`xn5asF&||Y2v+U}>HC$adWX0>lw_Y|s9G`k;<Vel}
z%=e+p8{DQL8#iQbe8;i)ODP0RAo+4rYDQ>HG0Tp!5}gw0i<Af-<)91PKdF*P>EW6~
z@JAK`VvLG4X|Fu@+%br)6Z4Cx#q`opd^kR@)(xyZKDKzgULko{zSfMloatNV`%n6z
zyJc|@6AgO2l+C8t5stIX*G&F)JuJXSu`yjXjtu>g;a1hgrAbHVXQ#kcB;9m@$T#f@
z!|dRjMw>pp>yxI>HGr1s!_DnTAGoq7|8N7$>OTdB=UqO{26>ZUz`^Ot7*Ct29F8i9
z`RtyL1xTWfqK_RCcdMTYF$^gbb+ZYQEFVI+EyRZ}n_Yw`InY_&8^Gl8&44{jbV}3B
z+FT!(#e`T_=bTTqrz%Z(2iIci2FGcQ-_4o0=}!8;b>4pK;3?hS9%1MgNl0gp1ScKp
zlf|gNHa&@ySg(y_EG0mKYl-9)+-UMlt%l|Vaax%$n_sM$_yvSWwZ(~ElqjlL!->TS
zS-+=Rkwl^!RV7Ik-0xu`8vsNWf(Ond@vGBD;%u5xzw{tmRR?VOG;Bz6lY1;_5|pjR
z1kg|7u-C*j8*`?Sca{`&lWw%MqSv4*i|p6O29~(%<BT({Mb%1LRY|oJ3?Nb~i2xh$
z1^>53>DdNbSrUIHXo^{JYM0g-MpiA6+Qhu3Xxb(u*@(K8)63(fM8M9l14(wnlxfI{
zI@z!zc%l(WDuQWQ8e-1VVS*IT0oN9_2tL7FvMCsB)UfGmwhxjN%<b}+@f<hPWayr#
zt+7(X=r`%g1gJTvN(2-e@F{QE25+u<{!9a4g_7^WtXjC<1)1yT!cyEIyP>%fx>lE<
zrbO3{r>3lbXOyue6A)z*Uzwo)NB=*2%Y5y9TQtYb47aA8*O<Z6r2A;<H@#{<Bfc^*
zC`5zEbk>KCQX3Xy!)6q&ct)xYlGC`88>OEX5s=KFo*hHy_ev#mX)YT$;Go%0;|c$n
z_%@rLY?VxFQ0!`%S7)_MT@j>Q<59FCtg*5<RvRSV`2dvux^~G8a|usph_a!FqV0_6
z-tVV;AM3kCuw5#*Qt}<`o7)Q3Jjl6QUm_<?%Nt{v*&W~2O%R1}ks01i!jGCL`?Nsr
zR8Fo4Hqs%s&bGOgQR~wQW0xE?lR{<`d7{Bk2sEyJN1C&pWeCYp#$Ea`7@cx`7BZV&
zGJ-h=E&<#%V{I%^oFr#y<z;!lKg@wvWM0ZC?b8syaUkAx5RZA2fF_q0Of6%NHxh?e
z5K(0dS@Q{`bsySiq0Q}=N201D@h#1ml~m53)KT3wKFiR1y>0p9EZ14w-t)xLW)bTx
z@;%f^e7fi~HR5-sUJwnCnugUJ?lID6nO8(0%K*%oqQ$*qCrS|pv*#Lu4aRVE+wIt%
zKcS4RV0?vMDs~cEDM|#(e@;(^yBq3js&aoI;8bKUfbPuc8n<241j=w1f+ip8j+m>f
zhK8Y=@g;tG4URAmiKH*!^ca}^+hY#!vr|JR&cOt7M@QDs<Z=a%S*$H|Vl`rMWW?Sx
z`G6!%<HcJwg}_!O8iMKfNpzA-`p`{`=pyUzSN?ej87)!E;j`a5zp6^9xgxVd#f)>u
z1;S3R#QlG1aW077cLnQ;Vyx?e-B|iasPPOja5aF&Jy{Xt#76ER-7pt=5Qsi$7`t+O
z4MpOQAtlb_diAK{$uUJ$;}GZjz7bWK_X?0fzFC{TqH|V6pH7>R*anC;JMafEl$Et@
z?kS3&YCR%4FU8ZUW&^%@n~C+)^8y8K#reci3n`61(v1;FclP7rDIR~gg4wFQ$!bXB
zf{TW7KmA*>b^3{Nq1ZQhOa+Wd+x|-;q+7(d5!-{XN>DR1f;ceK;&eHRtlJ4%bp#sj
zt8OYadU2v=D`yV=G0AlGTdSMss!^TK(IjI%8wd2CL1s3k8C~G5ML4{etuxX(_<rK~
zECVtm#4lIG?1Bs-r(0_f63%wdYia9f5b+NsoYA_zTLNgF@|r)#-c?kQ5Y&meB0Mbu
zQ5+3FBPGeTthk!y*m=S+yFWbT(E%!GR3Vk2qDBD`1tY4jIUV<>;CKYM=lwaz|B&LA
zuM2EQL)pu-8*ry48unPxTK)K^s|*gaKd`|Xw?nLI{`d+-Q!XY+usn9GQ5nrb=a0r3
zAtZxFs3gaVX6M=~uFL8~sZ5x}z&YKfc}xg4kew-Wwc;JE^7NuK@brf<B?G-rKEG{N
z4a{jeaR?#M!Eec+6ITD&0>Y9rvEZqX<&WrVtV(O^(4J(^fgQ{j1<2AY^Bb09JPNPO
z$#NJEX$e8A^2ox;-_9{o$pg()FNh{2Ag~`5t0^QIcM36t3gr<(h$w{LYUV>evy6$S
z*mDYn9sTzR5;J-JZf<UP!2xn^3ej%SZcQ>a1i;GZM==w=#?3WLG`T29ukClv7By@|
z0_;03skGeq8>*MRn1tXV<QV2B$^;Y*yX6GRHd7?HVv1u&_rZNO3V%QBA_A7_1ke*I
z6Zvw(ziYB@YoI1~9rQAv#5LX#et#7kiX1(Mkfr#?6NH^`#m-OC=K%@qIHcB@6cED4
z5KiR6nRpajU)lT<I3r|MMD;TYNxJNGk4CNR^jU(jdR0paWZqE8dqgeETO4^WB%FKV
zTgiL^sH2LJWQWLvnw3Y_Bp0b$b?<5_m;0Ny-H+3|eldg67|W_HM|2FTpqbcsO4gUh
ziK}JxXa&EkS7?~9Rlw2orR~GLtD~yo{EWgyXG1q9yE0b*@oh?;p*lrGl9BjP1sxp(
z{k65T<@x#ceD~w-{CuyZy!~J@n=;Eq`d=zc41RvUEO}r+jJW-jbj&6JP`X5yjy}Uo
z5GP65ShV8>B_0^vWTn;j$-^xr{Hnk$y5%8&a1sjj+-Vu{0sOL&Xe%<~<U=fB)05%-
zlgs{<VWR(tcUa&@iYh}jiH4dRg<j=Z50mL0A~p5)^mpBwjh9_;(}ss?=fQ{a3Xvc<
zu8%McbiO`=48>&#?^S=#e+Du}dNRqH&6-eWetR;@7o^9)EnWbVNKW6?-cP!c=|v3A
z@x6F>p5gl_fYCCaT7iGN;bh^gX#PFr3jWt9&d%;N-6{9lI-eV~hNp3X!$U%+c*CHr
z<e7EX$>6lmN$l1)ETE&Ux~S?2BT_goUb+kZ7UVv!$(C{aN?cQF^{daeQRy)sPyMVk
zAL%58{K@BfoY9H|?-<hN$nm22dv826-=qZ+U;0I$fQPI@xpRi`3yHeW)Ryy(pF6``
zUS4sZuM8O_7c5?qTTLaxwRDW=e7A&`PB1GzvZOn#SobE_jps&YW@bmn+aMq9_4O+6
zSC>;Cy?U+)x>x4}_~#d0{7>Ukn;*TGJ9;xy;luFLqLLGzb@ldoi@iQ%F`BH12UqMX
z>hP4SfFK=YM+Jv<8{FL1AB*~|TEQ4QOgTwnuW!`<=sNX5<{skKB{xL2Mp?(?7Dc&f
z7hO;mGfrkwOJ$T@uDlwM3V^nf_BXRIZUdLUpr;3)n>#zbwqhRy=jZ3P`=3s{|3*F|
zzun^HI)?s=zg9Dp;x`ZYx%FgT{*W{Yra&4H04O|b-bM4pp4%UGa9nhh%YH9}M56Cp
z|9w`z_VY)u=`B}fdzVLp=;j&0-J@<IZNX3G1#JOTR%^CdxyRJ1zq5ELwy>TWfqgkQ
zV4iVg^?outrb)DQ(&&;n8nQg<lBj7E3KPiW56qI?@~Hzw=7Ma?&v0>!(ZfthxD*8*
z34nqcGHE=iELK+7i(TCP0+NY(ShY25-o1DzyUP_cJ1nP+Y)>A|ZH<E>%BZLx$pzTY
z-*DqGWXKX!FgD|9?!D+b-e~fb(e@Rg-&G_$1<`|5uciLH;K}wW9ktR9nZESb{D?ZH
z{LLuz%TH9rEUUoEb7(BIXrPxfd-A1a=__%W5o?7MXOZ6XrXqr@Fk-$ZJB{<K33@)G
zNbN<FK+0YJWB3QVTEVs?@`0xu2EqGn%30@*XLD~i*Mrczk-_N#!sNe3Y@LyVZ|zE9
z=*nTq$HF`?ot+W)yAtV(FtFW_O(M2;ZLPY%&s!r8-aX`&$~4oez2kUJGidhPY71a2
z?*5Ht7T1?vvS`ejns10>KFBRQ%<^hi$8P78%hUDQjloVqYn{ovUT3nNN}WPxFVNn@
z$G=Kl*qeUuYskX1!&%U;dt8QwM#8aj!dG9n!&k%px@o(RXT7GC^c1#km%M|xUryrW
zp=F^fr9Fgp(XOlkg_%<5HOJr^SvtUUO{B%rxP90hzCr+4ZovD-G95^oDVbn+&UkF}
znh-a=;M`-J$WRU=f((uRQ7HuL{DiPm#lYSkht2k}Df*Nh)siVI%;EL*u?r4olMWmA
zz%-d-dc15&YlrUc!z^`=@ld_M0WG<sEcxLfw)Tv)GaZMYLANs4RnlG~6epmzH!cjy
zzP2>hTp2w}lx1oV%@`*hY}u<yKZK3a4(gSm>W<Lbuc$e-_T@G?wv8L$-8bh#D9HSJ
z3!#85_##dcCftknUQ8q(QfQ>z^m<S#Zt*{@9umfX!<HF)Qnw|e0h(^=Gx?X_`6Qg&
z6iC^o(b*wE-{Xe@<qG$7_JDQPV82AAn^NyC1vfK(x-<9@cg*>z0Vfq3H!fAJ@FQnG
z72aGVRc%THqJ3Jr&pDBjt1S#)ivt%O2NwQy0e6F0w-&5db^Sf__SAxlczF~Vn4pbJ
zYRfzSRB{gR5EGAB$L}2MN8lkya*~%a-CxN0e-S6}e;{XGMwKKF1i5}(G)_@KUwO8}
z)*C3S`WpONqQk{RmxK68=j+pD1)&Pj01Rujw7sH6Q7P@Ir%&Ia`{-Dpk-+-K*2Y$~
zIasum5M6`cdBufy241d@UCdb`xYLMBcca9wqqR5D@Z>Uy#FHha7OP>543`;zsBIi$
z^C!qG`TiJY@Wmb*{=CvvoEY0!z^5xnV>D}i{6Nvp!_2od&ufPX)rbQfJAy0Wz$oPg
z)uQ8ahy1Ja&n%uuy3tQBGrLdyZtTy0o>%63pYOQSxF1_wkgTF0IwrLj^(mX|(Epn`
zeH7VH{u?<9f&Vb4=Kp3+T9Ys4yg%>JdpPO%FXp8A4|Cc9X5=4_`u|~0mf;V(&)J$+
zj_=@fR4o62PB{`jyN~|~o%{a<odu4ge!@(CycXSMBr~<ItKlI34V+)RIbyoWRPf)t
z3H%puUanE%T<lFV^hn1f^2Wi@O!i9S*FM<XK*AfPTkp%gj(+p6%$u2Yuf#L68JHH%
zY-Gl2a6Qkr^0pyWdZqHNda?UQ+~oU(ZsK3)HdZ+M;s6^~6U&<G*oGu^al}-B?GwEE
z8^)kHyP^q6QAWQpNve$PfFR;dGRj7jq;hrIEX>}DvU=>Pl5W^0a7mfd*2K^%>#roU
zJUemuyf(kW`$;R4mdM8{R4K%>RZ_miM(R*9-j-w$JO=i(8iTKIg1Kf0*l1P4jphhw
zazdLHG3a5!hE@zHTY`-?0jNPjl=e?*RY;#;x=I*k7)PVB{G9p{<%kN^&C@VO4%36Z
z*6zQCf%A(quYI+NawZ9|I+UQ632ZuCpb!amI#>u~%U-x+l0Ikn{!^OqL3If!I@!Q+
zsICgA8@Z3z??3NU(FG}6j|xHA$!dd+pQu3t-;yP#@^!Iy0y9?xNaDkmHH#}7Cgn+n
z8oRU8#H7K*W)dAN<Ys2()yGs5<U6^Ah9MzeuS*8JMfcg>%yFRe>B=eSLReTXIOW9X
z3#RKcQd>*9g9YiHcCcZ~^<qh+iw=O<iJw=lW9rWS=FIym0VX}WiDaa46qLBAk1D_R
zP@Vo7^=EpU;<F&yjJB!D+YYxrXkLR~OxYVonlSq6>1ViNu6ka5m;4Q}h?2BDIq|dn
z`IOgeeEXT+N#N+MxrkBN_2vIh(aQaoq6Pk^q`e*eUy?SK`+rE<|F@$3+xY%}Dq7k9
zPerS>|Np6I3;(C0l`U8PQnarBL(u{em&7&NU#vp8s?5b_6h@kJAeF}zP5j_Ic|sC3
z5~^)Z!Vh&p6b(+*un!(WkYMiFp9&5KhJFei?=5V3xOn-?QXHV1RxZPnx+WxE6frLw
zwd1@Hv;N9mlZ5#aX4VsH4Kd008E&opTp}Aay6G%lSRDQr@mfBQfDx3({|9LG9oNt<
zL=_g1&YwA+X6e>5;^GJGx}u;Zwd_tkIeXcAzHO`XFV9(Uaq;r;Z1VpQwB+IG?9hcL
z>V;ZY&`<|aKR<fdJv<t(k9eK0uaC*8x=iNq%6C?ynlz&4^$dk)NkfF^$L{5#;qwIE
z@-&;xH3i4LMTzsAql2%AQUOHn)hZk4&#Pln=nH`pM4zK~-a-=M{l`CaFM5r5C&}46
zcY>Kq-gGym{;S@*4Q)>{LvpX8ti{TST*Q(T6y{g<6!h=d38^<H(5pTYGR#U_N?e5J
zm+pk;c=$fK)AZ>`bG_vRgtzUK-;M4g4nJ*(zd50=Xa7|egghPPi~=nA*;SiA*^c_L
z)bC6FX|}-z)oPtzobU5M<&c&<41P>R&?HmNsX~EO^F#M3%*^iee&{YaxxBm8o0mx-
z<KsY<xZy(Xr`wP9X(88;s{W}MoCZfd@>J57!=|t~zVc9lDNeh)_?kTQB6`57HEDU&
z&c@CCvWGBV@njVp`vR!f0Xv++K6iSQc~X+dVbTAtDqtz!6;BZmh}7NEIcmFUn+ZmV
z4R`<iQwt(EI=>M6xazjfHuErzIa>2^$t)=dbg0YZcl~;z;o-Ntd3bmhKQD1F2|i37
zx9_Juc6v82&jPy7&+#w6TH_%uXiHvS%!o-3fxj9p)u-ECK>ShlF}949J8`VB<TSS@
zb^<sYIqMG#W??FL{Oi!rkBIL4b|y4QS!K>ZA|`UBKyf4-^R;hs;##37jdTLYiH2PC
zZ_x?YgL+EB;)KLAZd4Q^FKL0Ab#KjAuaY)@L&>g-grSQ93qr{YKl1@!FMtM%g5e{4
zN*%Wz{N39Xh!7qdjQ9v0vv~rdJ|aH0IlACJ?EuV}rp3>{0)s|%S>NU^*`R2<89tUU
z6iy<#?;)Rd2De_A)jmx#qjlddK0BUhUa*|T$iZ~7^+GY;6YD=?1-p*tW4CQKGV4D(
zjs?Q~f{b4WQ?l35V~pOnv@^4TmgC`_x|dSD&-QkpU4kd+9;oRCYBWBlZ%WxFODxkq
zjo}O#7Q(<rnH<*XOMgZx%PUVnV>8?G+39sWJ$8Tc^%%Yh+u%!P?IOa9V1P3YW?I{=
z{n`<v+qf|XVee%+R7Ul~Y%T^qU$+=^wc%$I<zi3M$)E~CAvlGZ)WF1{>98Y_&?pU%
zqi%o#Y!q>#2qrnffVDZj5TZz%kp%}~HsUaD2I*p5r^=?7v{*1wFhkrpJ&HRd3DP(p
z%o61uJ>z1WC~;Ge#nO-a>SF`F+$;PCv7EZAMFc=BC0*^>w7J_Y6@@PK8tQ)F+DAMK
zDbDAe>4m}B!^O+(<>UQb;kEe@<FkYFbq6r1#!&tZiS#VwC>wkSny0I9lElY0mwC>l
zcFK8r-$V8N;_`w3w@dWLltPa0*B9>h54Rid!wPQ8IhVdq0&Dt{ERfk=K_*2zAu&f7
z0=Rg%iHI-HyN3_Ady5D$mXhxqou4-~46bpQ1=(bS6C*KQopA(>IL~KxcKg+@c7P`A
z+tV7(lf$PZoOiYFwp~}}@9vZ7nl|iby;+4<u=~23>2O~ks#1vh9tUhBRQSaGpJ1tS
z`w<u%+iH+t*b~X(P-iv<Yk3vNYCg%@PRQTrzI>Y(O{F4XA+>j^jjxM7^iv*LBEcI+
z{Fq+`p8EYrEqSQGlY4wal=_ep9RYOtFDb2b)$Q&;tsekw?+;ECI_CJf%7wTy5X_pF
zI4gSEtdJU#Uzczf_xF0}DQ;g&V~3{GC=JdY=JLA(2wy+rg5<X$E@)#1g7dS#%=1Y%
z<!1embHAD%b(K4FCQ8o&wljGb&Mf}iG2?Kb-cJm;W&N{;aK*-Yx!ky?a0Y@^8YgBT
z<;Jd9boRo+9exXeCcY3V63jp`!`PV2^CK1JYoVsP%Q#Guz)7WAFsWKFjgr7oi5EEM
z=ZOzYnFAZ6{L&N<bDt4%v6%HzsQI8mjEJMLt|<_8`{O@k?mkl^#+au+ySKQ2kB`9!
z1%LZkPxYSG8fs$0_|khxVIUClJg&6y5oC0vVJtkz-H=yRKuhdb*y!i?KdU8yhr&D*
zFAt*jQ6mq2<ZB48`5d)$uZEcxo&vL^qFV=#6PCIn=)8#Vm%2Ve66`zKv*6PWw0;Ot
z92#OIssx&G29bX(R~u;JfaqKSHZsc+zcWz5-%zcU4^b!ug?R4_Ou*2W^FU$Ohv(hE
z!O07Y5Nw=sj(5??wN4PbcddVPeEc-IJ=uF!P_S3fNzws4dD?S&qg;ab3t_^K=p%M)
zdS%&pWfS4?eKF2U`>U&Ddq`@>Ul;^8T?E|_$W(BN{in%I`4+&P7dHB#|GhV3FDroK
zbw~ek()P&{xVql~dN1w$n4sN4s$;fT;ZN@CVNYBDw_$jT&-*EP`;PW@FMGiU_-iHm
z2Ct5GC+8M7XHH&E7IzlROIY{^JxIuqY6Mp|SG_CztDx$Dz0Tf@tUZqQ;r<~aJb|wx
zy<%;_=_YLGyR)v~e4Ukrca>{pV+$cVT6eDilxxV{o)zGQ5^?0jJjXqUXdkw7W%|p*
z3BPrYj}IFY4G$Sb;#uE;L?t+4$@xRAtKJ(4Z+N#+$?-G^w;U$1q(XO6;|Q*KBu4MT
z_O<9jC!^$zbA^68Z{;$k)SHl0N1Q<JQQ&kd=`|<dJuB+{kqdw8Eku166uq$I1FV(>
zAaMED4FLA;_BEev%%5NX5ySrP6E~)xV<U@vJup?!)*c7ZEBoL(gGbdKsX^T_l%jn&
zUL5$jf_*zwt49+-y?JQX$E6Yg3|X`#YPJa^Kux?XMK`oZkSJlEw_&64!M0Oj1>L9$
z1ur9^-BQ>kJT5#r6wL<ijRfSmKH;&zPcav70r;MbT|@rl1yX^nuV)xgVSYvX;5r&V
zi57&4`{wFH>@mR>9h@gEh@l0HW=ZAisy;~6^Rr@Kw)=*IMOwt!K7Ew#ET7e1<m7)Y
z3p?W7{e&>hL>yL6{H^`Pc98xoMWsC}KlG`)r~Kw735}qIxp_)m*bJzo<f|Eg&2GAP
zAW~6Mw8!EP-=KE=5A5?)!gnId9x*ZpSKE6hPoK0`QYSKgGCHq$wB(<o|0)A#fqUwY
z6idVx8t~S~u%Rh?5a`JkBpl+hJ3wCf;=1JCja_w>BOtWi7vhd?=SSos&bMS<WO^hD
zP#m(mW?1$ouu^#v+OSwCciP@KHPHK?fG?I~WJxH>B1JkWgu8f9Wy42L&l8(5MJrjR
zG>tVF`fx(v*a`ax9CvC@6KcE!vJDLPsR4du8R_p#`?@HV)qvlA!qhJgPs<aHwF?)p
zEGLlQ!XYQW_rTFkc_DJ|5dUfTiHxV_W<;#DPmC&0CuS#hoWSawzfoGw8AEw;0BGhT
z8nBE~$bG$%1fImw$YBG<h$>Xf%QB=IXy;f^#$RLfo68IudrkbO>}B&=Xh&G4lhV;<
zRT5?_oBqsF4GyJu1Yr#3!VE988TZ;q`_I+Egym|}!In)mS|4w5pYJ6@oMJIIn!(!&
zfvf4M#d^Wm01Gxs3ZGGo%mO{T0LAg!@Ts#0RS0V}h6AMDlqW0UM0v>N5V&#m#d5k*
zVyYiVs|M?Wt5kd(@=J)0J*$`MH(k?ZVLs<53V-V@M5fVMr?^1@y2j4aY$95>rRkM`
z^~i~uX}Y*oWLBb3c$$tP@W8(%zc+`*sZsKwoDh7|3&nnIrVYomW`~0s0Z6@J5zH2Y
z1@%v;XmQ-P`7d0{3gU-bpXS9k<1uBIm_@03sgiv`#TlSR`*raP(8LbZCHNhNnfX^U
zS3vI7Yd2{#)@(IP4MjI8)H`v=tZ3vFSvx|R`;%DLPv9kZEY`B{{a9Sq2HMo}ou!;x
zsCz_jp8-GjTK<p4R7T$?pl_?UBzqaDzYw#^g!(xtua1z!HmC-|g|!VuEOwT18D-Pl
zW4Up?&k&aW5_$M&80jI|=hevd!OXM#@+_tcFQjNqG>>2Qa2zHcr;NaCpT{lc@Q^m7
z9&a8#QjLNu#&7M=lg7>sX12uNEm`k&H;b0QA4WE;?oVtB18S}X*cCot2NI2dJ@o8S
zHZ|0NgG+Wqlwt{tIuIvbqN(rwDP&Uej7S~e=NHm{+!rm?D3*4LxlRl`UWVS0W<jTt
z0Y~zo_`OQ>8sY31pDzCxyd$#kBjbevg*6Ll5kay@FP=I_K3**|{l;QR*Xh))<#T4(
zXTSlujx+sXV(khK;MMMjxW&+5xzj65c!kUH(qLDKV6|Fit|cGGHU2qr@TONRZvgQW
zYrSnVI7qhe<DH$P?6B1XbbqFuZtmgj3RG*u`YZ?ebDBtA`i<d+kob|D!hdG1DTQNN
z9d|FA&=N(doGV{AnF6QBqC9zyjX61IL*m|Pun_qe32q?-z%IJ|Bo!gs27`k#o_ln9
zMb%cfzY8qMuQ`1g+$$#Bv9{a%4TG&f9EQ?IPMn^8#+QrxTtT($w&TlD+$ENF(I2kT
z@CcN$+U4*nPwMZ!bhkJg2-Y*^q0>c3?M*zFYGf;jb$ZL=m{yAqcu+JB-g)$RQZ(8=
z&~Cl1pj6cY86{(jWsv!R8XF?7|G34ABr<W`NxN+DY#`~+ex;AdzbN4py_g!MOkS#O
z@uHaER6i*6k*Q@jsj%l~Q|$!=CL_xtGdEYj&`XfwRy%3GU4e29cw%siA$bww{uDnW
zB)KEH2|zF$h)3EnXN=?ifzi|m8po&;M#@XPy5lPd?4uA#VNKE-DF_ejr`oS@QX=`>
zu|%8S6b3HXlF4ZhA6;`r%+kNe!|9G(Erzdd2yON9epMVKf@6gr=#~>~IICUtOuP$=
zAs}z@5y*BP|N6}`+@@a>?J+Uag_q%sA>gE2*AcB4cu*qB_>YO2{j1&=i3UhCTIunv
z4J(BJiJ$<gb(*``*1xio?0*_6p*Rcgy&d8W#}<Dq(__xwb+z4sWAb(U7!72V8~N3=
ztd*@V#VQ8J;=;wc&veIe<M!N<kx=!p9jBay_47>CDFxDU%87oA8x!6cY8!RSV_{H$
zaQ83iR(T=_rZT;;g*cA;DA%l}<}#MdA^$cPfWZDT?@CAmnW6bnjrDHhhmzM>8DF-k
zcy6lWXBwTvH$^_DS!lK3b(n6i2=PN#8Hokj*`>!s7>pSFuxp+VFW;u+ZPk}F6TV~z
zgt)#%Rr}-&A%2$d6or&gnbS_xIdOnAZYYheCv1*MIN5xeWJ2h7pQOAB_O|5xvL+`Q
zFqH*G%1WH00t-ziqjoO5nmIOu(sI}<6-p8`ix^RB_Oq9sn>_3$6el(`UZT6NBsw_F
z&snxzpUDForN#3k_r^rU1|i=pjdI2_P-!CSjgSai7UzKvGm-n(i?|%bTx+=S^}#%c
zj>Tkj$_2FeF;$?D*BEDQa2y{a3`*89@WfA2m)P{@yT+#cJ%m;dQIbx`MO8wN=GfAm
z%;+Ic&djR`D2YR5ubU`xzC8Dlz$tDDT(aI#=g1^%;&~IzmEfq~KZ1YYC6@`{>*dE_
zpz2{I{|IK;V1hJWhjy0z?rJG!pzmi;N~E{R_eZ@sX9>{Q`Hlz2kmr9%h%|xL0hv}M
zIB>A{Gd6yU77WG;VPcmLm*~kuAdm>=@&3^oMx$e)HX(dN(xq{Qj8rVkBZvQ1VT#&h
zAVs1cc#pp?Ic+#KwK2GAPq1%cp27Ux&0@lV>LY+j8A?K;vk!u;;(!~6&2*S3vSHlG
zBvt-O-{~0A&^BI0IN%&Riex-r0xj32CVx#WVm&~954)D0)l;E~8bn55ev{Y@MZuM4
zGc$F+pFJTd$YT`V;u8$~E}FCWOsd4gcb>5#YX6s1+g!A#84PoN@W$8Hjrs3HOuEXC
zv{c#W%w2|rUfDYO{y)c$0$s$A{3`TjX!za&VCL>uE<5u!>E2Jbb;7n3{6N;j!r1^v
zO(^Yh#PpH7o0psC<H<vi*`z1$RS)(;N&JBDY+zu{9P-R~dj!J2-bC5mV`Wf!(2iGk
zx0fy$!7Rvg_TDl~7ApDs(dJz`_ck9d7tc<R6&52^ssO$-Saf)v10=omb?*+Uc}2Ne
zxt=5c+dvP)vB(4a4+l>t7r^7b3WpR?&5cz}nTB5B;_u|($;O~Z$*hmOg_Hp^$=lKW
z!K4@kJG46L=Ior|<n_zb$J^!Y?hvG{!SM8)?H&d`+tpfY81_x=4Llt`&ecqm+wrPL
zNV>VVZkBFkui8*q%6;Se0IF>{Yq<HXpm5{+32j=n?ladB9hnkk4<MEVZxKsJ1!ABQ
zA7`xU(sxS$M@{+S;zV&t->u-JIOEqWx6v7C>vQ+82iMlo*51;}?GwYlq08xf9`oz!
zb8%FxQCQ@Yl6t^~39Nh{2m4b!A0u*z$#3_mE!vd7**I!BlBDh+(J=9HnlZuD{XN+m
z8OoB4u!y84tp9Ds8&KqF@2n84#l-gR&4*m#7@a{WUPU`Re?WfMp6i=X`aT*qC3MV+
zv}5l%%pZ2{kCtyiCDSzH2YVkC_JUvM@%uo-Mj4wfC9cn+Z*4<}NsfGOM@*@|T6%rp
ze718tJ=8s#>?4=IY6hORALJ*}^m?lnO|ezey%QI$U?EtiHxPy?!Eo;hl)+V=u8@1N
zQau>xl&CUne6O}BrBGe3Z5C#^(r&o!p^iPYklnWAG|3x9tq6#dGjGy3@KC%H<&3JS
zam^ng$DvQ{F@wyJ&4)rDcHDiauBvzW8RjGsSlG)fSwO@E)jt`54AGGA@lB{oi$sK_
z2whz1ca6y(PQXE$3p%mQ-f#i2G4JHgYe@&hb686KdU75f#WLiGRM`?1TYlkiOTyB{
z%fpXc82Ma(3gU2>^D0n$wEO4L{q;~1TIU6?&Vn$jrGaSUQT=2hoGTbc#^LG?D;*~!
zR)bSxwHkhEL~;t?)e6C)ec8Ak@=#S{Y(dA-8{^T$2BczW2VZFBoT>c_;~HLEla6pT
zwbR)3e$iJmWgWk`o^aB<c+|>XJeVk`VKZ8I)1c@i1z?uz!>w&4IQOQ}HG}3jwDdyN
zWp+FW63jYGzB(NW7gB3O$WPyN8b=lOC_(zUuw$8g3nMe~j<o2WW&OimmoQ{d=XPTE
zIhgXj0p=6z&)tfR9V`j{xUYeZ`}_+#Ra?+XG(V&}gC{u)V^}k{q5kgL3-eg0cdTOs
zY)WPK{>2dtnK&7NmzGmLDI7o^S-~l1>9tn*9D!6nq1H`-@S*zQQYQC{s5Gv1Vr7g1
zf>yuHR#Po^^5{iVVEV;^1e`C>S+eU^iiAKA4v>U0pFc?wT2zq*w^tkqoobGpXLYp3
zcvj(gE>0-cr+sIwc%kN9ewofeXJ!F13n!O<rPX2aJY^Bw|Fc0}lK$XIZ8E(lVU%b(
zv|!ls=ix)zt^rS<LeHQ3SZzR-=1y5I!>jyUcQ$)TR+%@It1vgLqwnhT_)TZj#5i-V
z0;DHA4puiI;+cvfG|$9}BYLRie`x1#PE9a}&YCWZH07QQ9--!Abbxl_x2Xy&g;y*-
zjITL;Tc4Px4EDm}WI_W#7f<g_*N>2s1n4;JObOv4<ONESkkD>es5^YVaVxrl%(>ZX
zK@~tUFaCj%uUn6sX%Tx=yc?{zh0Nbb1~!_#>J_wXXQscUHCd?T<@JrOZ&`Ae5%?kM
zYuSx||H`QJI;0%>YK|els;^EnO{i5UpBLC~lyYq+F+zB&6A!UM)c!z+WVhzadzp3M
z2_h}b%pEs|(P1k4aJotRQT7dI3Jd9%Y##$nUa7cu(jDtpouZDQkT<Xd<I*qa28f>e
zSNCTrC5*euJig)lPi(k~8>#}h_7*wqiA8->IfaPbkj%bri^@C^=hYd<>Iq>VDD;I3
z+<LH)lsK#TUp?6;s8d0RJy+aW<(l+aXQLd~_GX_q{Hn#05_IhdHI|~<v)Ma$$M$sg
zm=PtF^+#u^4kfX|MQvxDbcpqPbO6(+<@8DC!ntP>$VFA5e>q0weIZu%G>cS&V5DmU
z7s%@{M1-0FkCVI_u;wgCvCb=DLh)RipjXo6k1gw}wK}hB8PU@vXK1cN44w0zWcLo0
z@q)h6rOzL0Fm6ho<bS+<d+x+6;p@+hA7m3Iad?5+pRSMqnVb$yi%C>=1kS|Q!o^g`
zd41pDRk2ea)1k{Qev)M^TFe+Og_`u?1{$w>Vku?Sw(Uq00hdFfh)#O?utwOW+!~z|
z%gxD64EH_|&iO`>tdIM?D-n3TxVlJ#wPx%B6$(_VWci!m7C8^pCB&i<KJU9uy@X{;
zT`%on!)?1k+H9Lz1@6V&Ktp*i$lRC!ft(<6!-fpYckPfU?qcW`f}GrqBD?dEF~yYn
zkh3&}B;NY0{rZIW+!V*L9@S|ni(Avm)m%t&S#(%1yoJuhpz6TrBf5M-URz>$Mmz-m
zQHUd_EHD032AIQQCa=0nrF2F*3HV2z*sK_7QRGq&xfb2wnIQ5iAh~9<gJiK}<MbDT
z6uAQr*qxt>xw4f76*~}N(GYHtz|X+E%(9hULvJb;(t-&T-;lDO^ysscFi|OZUb+`|
z`Pm59@umg4;#-A@^dJj~#M@K_Bjq9=AkLfjX-W6U?_W5kGsf$C3<tVqJ^G>2Rg}@W
z40>8*E}8b87n?c&b2{VFTqfJe&BkKmoXoq%ZL<xl`CqTo?5N_!YiriZuci1ve16qj
zbMQzZ&w|Zh;Tul+(O0&It}6UYvEsK~CQc;6gK$@Dimf92uvd&$qm21MhQuK*G?yXV
z^x1Xx_n(fS)oyDiw;h`dRz&opXB)X26-Lts|7^qNCIKGLaZc$0aIN~buJ3M9<HJO7
z?*jEk=aI`x$j?Rxx_6Zx16)N6pAU}jBi*?EUQ)a=Jao!Bjxt$-5w;p83@!J@dqvka
zS_)5*q44S^$rXwYIwrqKYvlt(H0lHkkBh#^m#Zt$7E3W6(i)%`R3QIYDw8)Grj^8~
zZ~MkOn+nL`X0N!+j@;vWOa?G;9i_>b6W{FFcE5=;@BM*%9>nz{gd>0_ax>@!-KzM7
z!>?<?2uV1kBup~t@o<K`MWi*DU%#njr($t5!O;w(_g8GXAjP%wLRWgE55r;d>@s$F
zh<It+n<HdgM`mj?sQPG)bJ2y1se0nK?X#^@<uNdSPP`n%P2(2gB~H<D<ltj<a^1u`
zeQ%-;@^)zzC2tjl?(g}Ay)l=p4e<x=OdzBEZ#`EUU$xcW4iEEou9#LQ@Vp^7Mo)Uv
zj1<_&6xFfTDP95^#)Sbbm$S6HC3j@0ba9Prq7+b&v6PiU<WB>{Xp6c6?~c)yCcW9N
zT0ua8G#t^jvOFyglABJg$5ZqI$<ig=7>hh*DcRI5lrt!6D2aD#pT$jY-#y3!$AhKd
zr{xBw@4Q$FVY5uJ*ZyxMQv=~5avJK$mD|4!W~evbR0S$3V^!e@-UY^@zB7vc3Ry&%
zKJNSq>JN>3_2fm3HsG_CF?bsY_)$DQUN*ovjM(={6r_bq<t`>L^Pj`9#Q~C58|6BI
z3e7MbXySJj#PKC$MXREh&IR)<qNlu8fm2RmhYisq76-0#FQ!dVYm)yCEPM*(BA_zR
zm;cD6HiZ_RpbO3W2iv3!v51fH8U;=`Ner<vO7)-FA~8B;++!g?S9fAtj0ZKoEgu3E
zO5%l%6#6XlWol&aXakLM880Yu9nDSQ^FP{wlP>aK5@TaoQhnvs&bPwR0cEbw_O?kF
zoS46IW0(?M!)rwu>SgL|;I!Z0>tbfsI+(4Q+#+)wu!T0T@9Lg<y>Yjx*7LpEznTki
z+Y(uTSX<tN8PGaxh(W7+RW|2x<y^ouX`U5c1GTm!+RPzy&P|b8AJl5{<esdj<{Y#U
zk{PntnzczX5U<4ULJwXBalFfK5WI?XK`Q@(-G)YikxZwGfepV)cQf75piML%R|Wq;
zdE!8ohs8R{zGlrZt8uX1Yl6JXHGcW9Jy@&5LbD6Aa?Tc?_YKK6s@6wlpa7_{jLJ{k
zGb?dhn5$6lGoF6$!5?j%Pyb0gZBx|RA2cf5P;|_jo%t<4B72G=dYxaY$tvN|3BP~Q
z1}o6Wn;quQ#RORnA<qY@&L^x{v1~&cndOx1lCueeES~)YqyYVv&$w!chn@5jo19mx
z3l&r6tY<|`kq&DWX)QU43k0BkiNTlPj)5HHCPPMR!aCitwb8j;5YI~f?xa#FJt``c
zTUv)z8O*BqiCa%0sd&~zlTT0{umg@;*DF^&A4_gAU@z%jzG|K$9YwQd-3perQ9%1f
zwlz<aMG-D}mn<%7-k=G!efGDS*@HI>QZoeSPl^U)HlI9#4C+{>B?)jVs;+yFfXii7
zIML-Iz3u3NIesL!du;aj3!<^EX0Ab(O9fGukDpT=3SDtV*hR|5C0oxHUvA5wH>G=1
ziM+CmR%jHOvigW+I{vd3UcWekF{}XWXh#|%Z}*$8xC^|v>EPl_XY`Ra_y{!uT?7c0
zAOYwADO4z8zZ9w*OEd7smN%p&TW}C3Eb@=pA6u8Ma0nEqSuZ}&Rc<vl$+nO&q+9Dn
zOGT`^zN2UpLH1|2w>mBb0@%A-WxzcDNkRRY0zF(v!B;iR`a#3%jg?KeK1-YV!LLVg
zg^i^W)o859OOmDEQv-8Zj5$mRVdLHw4TN+-5iYq28-@FGwjMCS<n-KLQTkWf0Y^ql
z+K2l1v&07Y?KwI_3Jo2C-Q$N_KO#g&YIt7GO7jycJYRehvR=?#aOJl)fzB8$<S_#@
zoD}iNj9D-3okecFRO+HdE#l%|rT6(<g;27!4OWQTWz;@7+j{DCfujQ}C54pUkE6;L
z;Hewo^mDU6<^}lN5#X=6&G~#g@^Vws1f10n-v2HA>wA2KoW8p9!E@JJ=(y>y<lH)i
zC@9uPG7>i-S3<}lhx#x{)069fclVQ>O!{FKdM821+$6}WUqqngB61V9OQA(I93VWU
z2~s{1BLLW2S-LoR<Lps7jx(lmO-KxUVt4ue`fR+qUk8Hyv>!b5{y?AR$0ySqPP%Fa
zl>gm}n*ItQW}1cYWk7sG+i_R7-x&Hk6)IMx-9pX>S<(&8lH@NgEQ&AXzwj(>x80;^
zE<s5it(${%9@dMUkmYg}TZ<t=rS>6h%-BnU_Xm9v*<i^#_o9=6av=T=HS~Gv{c;rb
z&P+jSq7@*&f0%=`#fR{0DxLS2-aWU+P);=qS(DOn6`XMQel}Vj6g{He0MR=QFw-Y-
zaX?M8KTU=DEzxA!kFo=9lGHKjQuECm-%G1XJvRjwejhvo-WpRVZ;|FV@uB|@lZ;Y2
zQHx4VJm{oFG8@7ru_eXXq2soN;KUviV^IlbL?j@!73uIBFL9@z7}D?h9$MXU?KASe
z=V1L=&W7f}rlAs{=_c2MUhdNG;Udyw7ac8kh~M$tnC&g7IU`c13^lE-eq|wz9~Mt6
zFm5m>|Kt!DdJ>4V%S$Cc6_BQZOaXs&pm-aO<Xh*C#9|rw<g-fEL!TEdfHOGx#?JI1
z+Li?9(!k&4eGJ9Jxq{T23Z!C1|B8C^f>z#B%k_HbX=}XyQDENoGf4Ydi8{yk$Gub}
zcB~oSjkEF9U6x?o9k<wT{+NxK*uQ3fQuA)M{w?uyTe89oflq_TkOv>6^X6g7efy_Z
z&aM%RYUH8loqh7y<ptmDyCw3=_@VC?#UvpS@RW{LE{Bn!O}<<_*RppYz?j5})oJp^
zogQg^J4-;QzWjvkB!xC_>8&05mGZdbNb#obvi`1GDWL1U3<kFq;gs+EvpQ>;>W2-)
zqsJXQ4~1ME(>%0e7BLNOOjWAWZyX6Z&EPUs8e-!Z*pNt>i{|+=BJKt*sl;<X9B`dE
z08=TYU+xer#ZJWjeb|5_s1JoH`;^BM7aXOC$_6Hk<g4@>3&QYoS5MSe4;^$;w_8vk
zy)f2O!pbfVn^@}0*ixq62wmj-sqrmuE-oJmTI{s-(jXQ+B*oXP*HxrzJojm!0*h@y
z2@k|3c22L?)=aa^0)B`S%i~{KBv(cxFqE9YC(ZPO0=%kHun<%FY^(vI<WD*&(g^dn
z+=u{3R;k8+p;bGpU*RZK+EX~L2(My2d+SYRez{EMqTeI6%c=<&5TNpsD)EH0veR_8
zW0Rd5P+_gwBe)J){xkYvewXV3Eo@af+_jr&R1}$@o5KF&im7;OAdZs+^3}h=fwa{X
zc_Xn-i#*=kqeg08Q?HA`^^mC?8b)d<<lHISr2%}@?gIKf&X#RROUf<aW*;)95}wUA
zd?CwW`)OC8BJu20S3<N**FX05rfi<+*&)oezyv!=7Sya3w|sODc~Xp~9*xdzL;>?h
z_H?7=r$LtsW(4etNk+tvCE|!Dpnf$XvwdzNhOngHzk!ht4M_XCg2E0v2I}sWfWfnK
z6DCvH3RQ@+XuqBmnzQbaAUbHZpTJGe4<O?X$j@IIe8_~g0MqP?FifNdCr0;CO3a?r
zKt<Zbi7WhM#ER_=6erpNS$BPJncw0&z3OI^Pdx5je@-2jKsNXaj3uc7tHTznU#%*j
z5qhDjUy%|wRkp}6FSrH5LddTPOKmmR_xYivu>y<DUSDl-!K~@_xQm7rM}`wE9b-4g
zc_BR$$a3NdP)-7{L1@OQb5jM|d6oN#L<EB8N!~kXS~o0>!3h=JpHRu#Uu{)FK9k@+
zMT)4Gjjt@t!k)~V)b|$vJbk-YPzp=C#w+~~H<@}JRNbai;W~7q7NdXBJrKU%KXJW(
zo%dEK`Mc;m72!dZgQfJU`euO^W$>LQwrmr}wjS0cl9nu|2wZI?`)0e8x-!7GzaCe!
zQ1ld&<>$<wjh{0-YBUhmOFP#4GAQjaoys#Alxm2OvXYKaS59~WrrQHfG;T1|^)=C{
zpfdQ-DY-W>$S+#oc_N5H>{X!qa>|X+OE0vdV@+LF_rTfXrIh`S;Dg_K^i#0wP*{_h
z(J0o|NT@4G5!7)Nkf}@72oq2AiLo%&h&)JVn{o^A4|`Lkkw>5@);Np!FeSm}ItW4l
zmy+;1%Eo&6=lglUsPmr#RTonZgcqNulY`f<kv}D-W9JR6c}pAu;pwbc$OWUuWam=I
z#gXK5?uCjq*z(_*lKRAF+NqDTPHJ93nTj*g=GXpbb<z~o4{aLlN#SmRv>~0&tr$8-
z#YA(`cT=7=@sFO2q!&5mukwC%b2E*6(}bp&EnO2}e<F#6w&0MK91M51a1`c6t@*38
z81ft{`2=fC{X&r7%wwz|H5>A$pt5r5#P)km{vO_n6(sAZXv${h_6EQKaK7`T#|hK%
z9+}#o9rGPQgwH(3IC;!03er9=xwz(+gYur8F3rVNeK#E)tm<UZp&Rhz;E55?fg5Pb
zc4Y(bT}qjbT9@nL7u}chu>T*PzA-qEXlZ+cjj^%qjg5^rwryu)ZJdd*v2EM7ZQHh;
ze7X15`&D(-^i2OaJ$2@sI@8_H(}=&6c8!BhxX<Ov8}UjWn|_}g<fd|8$`#ImT5S0Q
z9o+W(rhUp;z(Hhn-^(_s<eocA4qB12^knkZpy!#}D-Jr4nVchv%h~U!#Do9$ix0=_
zHeln0x~Y1*M-$jzTHd>ow+?p;w&Ti?`1%Ajo5%tEUEPjr`pu`rUmKQhqwF91qYv~p
zm!Gp>upLgHK9>!WGW_2q<2g5+Iq^*n*f5x)24BJ9?MO{T7f1Mndm#{ssl|##Qpd93
zhkx1jK_i5l3VGp0$Pi$`TV23DQpzXTc+1vE;QQnd?NQWmnu~zL5pDcBX`#G|d9Krc
zxljXKF=U2NVqR?9mxCO9tsl0>d9_@smxI_}uWHYGQ(KQuSQGHRuklvy{auNGtsxU&
zzWnY~Y(9(Ugyq0P9ijQBLVdzrS{t-BC-u(~#~n}lcKlgP?agZ$UCo*M1akPQwi6d+
zdFHsW>GrbLUu(Kwoj0QsF_uN0mzFGU6aPHFsM9BZZEx{zflJ!kG#}s_O|&O3tK(%8
zx$8d>KpcDjyz=;$&H2&cHebe(p)qCbdZI#+80$J&S}G{fp_8B{H9r3wIm8F@Y`Dy6
z<U@IWx?1_#y86W4U%j(v)+*I;{wevRf3BSoFPwx6dz8S^?-K<6L!x)%8;S=9$I5X#
z!0U!`hw!L-`3TXwZGCAAxG=22U+GsJ(wVOF(<Hdr3uo^y5;MMCy%LPa=1RIk&nf0L
z0^XOL{@tLOruNl#CfLYJ_G#Q4l~3}jY!5ec;TJhZL(>gOP?9fVGzd_GCq`iLICZoG
z!S3ZWM$M;1-`vHX>kDl(Z3HQ%E^+~2PkdNv0%QOQU!tc`>ZPF=`hwbzT~kJoDVPPx
z|CL1W=M<9k59yf@f1y8&@_f%i5}yH(<ltmRrtgD2cy)(hMKTwz82Xo`D=m`@Y5N)D
z9{#p0tda}Y0}S#Qze@z?&QTO)3M^8T730z8HH}VmR=XNQY?00R=eF1LmFJ>>N$D1y
zK(EsA*4=bt*H@jV75falHrtuwt-3vug|p`3Kpo)0uni$pV;n?BV_L!4Q8ioxcLhZD
z)2{ux&e~RenA3A0_4(oA?qc>F7V*<<;)QDpeWwUcePr<Ce<_nO5>Cl)m%JP49habT
zqCxR`TK`Rl7%GQd*a`sE+hk-MpB(MYEp2X#@CsBYqR?xrv!jpf7=?`lm0Tb+gM0~u
z8S7eU8`^2kM2RH5idcJth>Mr>TwwE9h5tsWA^$HSVxylcCw^I~e(40SffK3MZxbfm
zZ)!-hf*IPuW*Dvh!2Fj;lbCceIo#?mRPEC%ZM`U7>JlK>S}88Csq{ht{qCf&@D6XF
z{-WGxnwRdGg#fsdp%cY25RN&<JjaBN^AFE@?(HkaywT$7F;GzISM+9&XV~D8raAa#
z@LjDclos&HxEt)(TaCzH=NmBU(iX$%#5*i&fwwyP*~i&2ygDPIp0}NZjdt?MZfDBN
zh4^@r`2vA`CjQj3sM-iVgqjO_`!t5V-b#|RXL|Blmhn0h{Kd994g9pHjH|Wf7TYMC
z|Cr<ytYLflV5zl(>`o&V1E?@GI}?=&;ZNB~avbg_7}R{iT$M`|2;bbMS$?Vvqz7f}
zbG5Z}t-a0rvr_SV4`8M(l~cexI`<ynkT9!LE(7E=$=eu{4MjEj0+4y@OC?%YQtGrv
zSLYL)EO97qh5t<dtrS`<K(P9awxT?rRbI)zT2f|`dQz+Xr=+6n=IrKlq9I4tVSJfx
zPTjR#{n=yQq+Oe~e!+57qL%h#tRdxsjnyRe=h(u0qE#8)s%`m-zpkP7GMO%4qyD>T
zDFyIqId7ENm~iGH5Ljf0)GZbC={-B=>hLL*uUGjqIL@V@=+7Yq#$>e=BpZhe=bA<k
z%J9n(OEPv70!KiubkE+{wPv=l%?142kFEtjrUZN+!|?dYz}?cNl9%R>uga-0>4*AO
zx}5y*89$2>?2=1?_6Z4LuSYRE{181bBwS$m6}{L6GfbQ#WT@?-akb}h9GzoT6BZ|J
zMG2NnC!T|H^<|84k{=?W7_xXd6uN5PqO@w9#&j}Z1&Ow9ym*K~#}|X&`pD8a@mvX_
z!oE@o<zV0Thej+DMSz2c4!&hEt880AyORt_%LN)W(`;y~fiQVDMu|xEObNVKH6tLq
z94Ni)H&RRGUPa~3z#MZ>16hj?{qig_ieHwe(TzbTt_OaKy+B&!Hjqdwp@-M6QT8@!
z@cK{>$sJ0tb5T1RPshxV`1FFT3_-IYNynt8ZcwZY@mA6gdNcn`+hF=IRU`OT)swEP
zy!iE0dGwTWkF-ZHWH?<&?eG5KVF57o)}NWamsI)UP$)oO`f+<ws{e#o#+uK#@R-%y
zasSg~gZCExeNi5^%jpL_8kpLEya!5v{JoQo_|x~c>j7<+?^;hJw0E$&S^YC4Gz!Rf
zqQ|7Tn0>ElT{(23h-+J<zpff@?+6B0Y-a$Pc+2Un5o0Zl=6%zvJ|!{a%~K##QqE?3
zT#G;cP7>Tsz_U`f9;~z|dFQzJ2_v=5kc?x|CFPyT;-a$Odd$C#Kr%Uy4*b*0*?FC+
zhsf{s)c@+(6MLJKXzlw8PzvGT6G4K}hM1nC&!m^ejeG{~0%mgn3L~V<2SY($jB$_{
zr#MiYmXWpo>@Gom{Z3ha7Xz3cB-cig&ACFQjB25JC810%%b0{}@A1({*tVwJf)3|r
z(3S8x`&kdz6CkBggfLwTkPpwj?vx6P8orL+shTDdP}^Xf&j+i^KydVkM^SSKtA|>f
z=)AsIwd;2M2~k%&i0EV{nhttf%r6^`3;c>s=w>)$j?~P4tB2iK5dy5@Go<Gh$p4&L
zgszm7y(S-(dz1a<O1a{88+G~^%9I$9>omuaC2dU)j#J`9MDzHe6|^jbH}+c>T?72U
zMV#R4eQ@ezr!LA6-8r>o4Qk}J#PD**&%sHbr`X8FZ2igblUgZ>)Kgl*oyCJE0Gd9O
zqT9PD6wzI`)=s>lT|n88PG@dwbT?bkQx$=D;>V3W1m%hO&N82a+snzoQQ;33RFS>|
z9eJ%;$?Ay*1179x6hnBl12H{=p-V;=j`H&-@w9Gx^AT|Fz&%#`A(yf|m_flCXt5yf
z5E{~Ze^g0Ln5t0%7t}n>V6yhOSWG0WF@-E;X#B?Ci*O6l&48SAO7SePmhje0=hZT9
zIs~?Tvb)|7{o?%$291RNtbr><h)pyg9!$1-Az1>Ux~%3CzXjr%(olTzo_*(&A<tTc
z`8j}$nF()BYny3m6c8%T4zP)GaQE#{Fty*ca64c7ehzmD^4y^$`*M8Mh4GU@Ke5~!
z78CS0enp_v0R=VclnDlt+QTTSwQ`soKYtptS{<k3`4%0zAWHp^gc=m6J}4hVI6{ZQ
zE`jg0Ab8D4jtt7obE1v@T}lBoQy7qXQX+-ysv4@-hEqMNJo_|h;5T6b^<)-hYj8W_
zQQ(#-9pcB=hoAnkogYC1(^oFgC~oP7zHTq}-xSPd0bL5xl$^38<OU9s67{C8y%jji
zO~@z}4wMcrQOkR86k4`pKja)F2GzrpMn|ULBFs`gB3OID3`@~aX>VVgH=%-w+yHm<
z75Uc|P^|kg*($xWND+xwI;Z(utZK2tK#<qUiRg|RzxoDTPTO!!aU(MJY`X~hd@<(G
zmoGwfAlSdq{9h3&=}o@IW4DN24P*oVr^?`VY~rzHZQ^GIh<hy3xBIF51B()R6k{YC
z?j9DTnIkL|AJGBGB#BSjx3Sz&k5a@<&lYacP0trcS6=t#Jy#e}|F25?XJkWcTk<8j
z9(|uH@0}vmrDV60xCq4-p5P_DUjr=5A9{Sp0LJ18BymX2?!(5!g`Le|Q)6c<Uh1Z;
z#A{^h`zKV;ZOmb{UHpnPgao7aA~u2%__e%n3v<T%eTd?ZsfBYlpZPT<iV{LgPuiar
z4I+|P5RarZb5c#b)xT7+B#MGIQoqgiL@qnIv=hH?&z`3{bqcEG1nXrZPX0z0J`<-M
z0U(*~pXEQ`{~BIO%IThNZk#?}v%#pPy{uE$KDNtqT{m<;9rKD&lqxZ_m-Ui{TyP-#
zQLsj5_Sw*GV=tFS^pp~}hh$WUk&S*|f2n9W%u_e6BacB}&7pujf?L5@IGOp~D6|6e
z^ZOd7I2I)9B%8L8UnTs>dDdl2v4RtI128V-saje7<g-#h3N6o@=X;|w8&r)fI36e*
zh`T$<XMhz(k0Sm=60vf`^6T8}uG^a}-t-1(!zk9oU3lV(>XouQgIp}in@nGN$`&V_
zoQ`n*PnkO;Y{UcDht#fk*cR;?`Fx~GbuY1@<;t>0cF8RSo^SnDX$}7tOS=>}-WP2N
zPNiJF*UEtf9SI*V@`SmVl!@cFysOEn$v$KFPfs4-J0*8LA0K+09j5%#VuRm~<4t1~
z%ZJ2+B13FpP9#S6D5ew}Y`)@lrd}cwQi01z6IYem^cmaeqX4}%J6y3#)6kh)qY&Mo
zqb)Dk1MdA)q~fTMW`d*lH;ytBO+b3GW8^&C_O9p)#vme(wWEUmK-2Ie{2FRz`fFRC
z%%Z56cn(2WWfDIeh0=Ej&nm*16XGRYA`Kg_4l<5JA*xTk9&<^7xTa?l0FjYnFp=V)
z^8Tn1gNpShCypdlpy2WKvxB~;U4M>~<}i>QkMnDLQe+#B*)l}+ek9oz2KpNBk~h^9
z%ApzerDFI&^}`=YdbT>Pg=_exA!@2QO&kSx%MJ={a2ZA^q51-U_e?|imT+Q=>@nj_
z1&^5fs1&&SN$2X7u@j1LsK-#j6Jnhv>l}P{hi}{XfXdBno|Z7ho;mn~w@?rglX*M|
zSaK|sLbB8meBNKbqqhvq0vp9g@1fFemr0svr~Db=^>&6<Z*1k^oHoFYBi5L9-*o>^
zm9cFWZMId*f{rH|YcmM(jyV)pF$k1H^)^qk{a?t!IcY3sAz2h<%rwa(1BWF9sI^l#
z+1n3b(BjzD=2FPA0(01WxH2MKYdhj=vf$l<8?6;fj+Z7#YrBpOz&EL7ps#`eg_~7+
z+u*s7CSCz#zhVHw&#sp16WP+0eQGU1TxIAeP2{`QH=fI55yO9^r=Kw_sCTr;^6%%=
zTbgE#iNK@Kne$U4GUk(F=ef>ZqrL&P^uwRjZwOA(LqfU77B`wCKcD4zXw~d9?U6S{
zX|9%jV3P(r(jl?*0z8NL!pcU3z2jSrakbZN%30wlc^}USDE6U@O8&eQErhCOURNNA
z1hEz}I~QT{jY&?SL=<~EdS?ye_i|?PWfn#UrLR)+u1@AyTP{Su(9aNucLO?*-b&yq
z49WM5-LL~M{1ME|zwdMfz2CfCf74%2w%Pq4y<<G0aC3@)0My={Dk8f6pbkYX#f9XC
zOprwzaH2<bDly%$6X+@OYG&zDa4<D@bEJxK2SdF$-r^(F$cFL3iS0<*s*jqot}*uL
zOQkOdwY?TMXOq39*hR{>tbyZQ;<if1a$)lCZZYHkA42?>hMb*#yJh-yC3D&Ph0=Y%
zL^UQNfO$Z~m1>8hA~?Ac`A(M#j}SV}Qj%?pf!si7z>K9yQ7_lyV^{2C@OzY|cAL~^
zN;lzdI$sG$NlTD26~INoJ<+(L8dV^HaH6X|;cN_Dlk_nGGYnlelLfoiGCl@jVa5C^
zZX^%J`!mv`3aYKc9)c>Z__L<0Y02diL@nJP(1ShC`V8UC{S1jfKzxjR%d*7fk>2aj
z^b?@9x+Zk5)I>fZh{_U%l^-$@lun_#S@zGy#HMvbSHa_6JS*<Ne&dBz$K9_vK>Sv^
ze)La_>|C;N*nlr8Lj}4bt@t#{OU@yd7Q{yoLR<m`6l>QE-hnPM_buK>zOcBI#M74!
zkgb%tv;lZqJGtI%K_K*F8*W2J7{?P#2(-7l@Q9-fEe@i{q5Rr>tsU`m449@m{!%r(
ziqPSLrDX}Ei~gke-7_Ars|R!Z-ApcVvn{=~GU1jrk8NkJ5h<%er+td(2S0pAByZC5
zlcQIAzT2{3Sng_V>nRsLs{%etdZM!_ut=|J#zS@fMWRDF^vC%J<#Jnc3D51!kspSu
zP?GcK9h}F<X*~!6ep<DpjH5;2s`t-+Z4iQ3Qo`*0ZNV)ZYN2Vdh@cN@VWpx(ZlgEo
z-!-!>+PTuh0c*h;nGfxfZXdV>;(gCZnEQcnPULnF;xVuTiEXYi@mB#tsPOAa09cbT
zJ_>1xksgwdFE`5_WJq3K=JV?4;WOCGxDZ}Lm0r%mo+ww<Lwcu%=k+lgyjalYNhvA{
zL|LV28OOvC3t>w^qw)Mp_VJ;;nr}ss;)**=+{_nE6h%!5?XHjje?i4xhe#Xg1K#m3
zgqiD-Bx9mtl$b%Oe<Yg2xVPp4z`{RqrLm|OJ~|d_iq#sOcrn^nuTyBdbMiCq9j=LO
z-ginCv1oIOw76j9FNv}ub`P)i%m+rMZ`3iNVrUN4B&9B`*+$9}gci?bV_K$fTp7U+
znF4|!X@?~d9J)rUZhkt2pC08l*+gV!nbbtaA?jwt?qQEC8~DAUo*Gq#z{z~BNuW+E
z870SxunvSFvWaRUKi0j>p+=T?mqGgs5qM|hgk#Bu*+0sob5_r#BY(XxP6WbgA+hgY
zAl<maB?`*OltCo7VlE&gj&QNsIMaG#(b31M+?|1KqmAeHt4&1Y%MrF^h)E=t&j#fn
zRIci3rCx1gYvizsT%k!gAnxm^R|D!+=+E|Twi!uB$78_9qj>HiaWM_<_)xgcj)(q2
z^4F_ls$my9Y0MReq9D<}@Q8SZGD)hF9%M?`%d_6;p-UDCID8oQU0(Ch?B<WC3vkbG
z=yOG$Ev}VFjH*LUu;(^nDBM9==VLU}mboDLQxG96ISSW9rRS=iz`GBfzXH94o~3Qc
z_dKcj)NYnf3Ut(xvp8&T?&@Ys3wKK8q|p*o&?-3N`%nWd0R=eK{t~`gLV?nXa{(Ow
zts&?;e#hV;l5NGfm9;1A(+w1~zL`*X`IAZZOg?n@@0zBL3xlj&EaEEuH0ZD+5QVj2
zQV_IzoDSYO;>D&zz^dh(jHSpM-dd|ABGxLtOAJn;n2^wdi@P_l>PwgtmHd+xyTFQ}
ztCO>&YHxCL$~f(hl76^)<pat&HFxbpMW_Yh+x?8&qlOaqS(>m~uvfk$hzQznh;%`?
z(=(qQQ4H;++lT`gzdT08Rd=mI`dS5is%`tf`#j$rZHwAcAS;-Y>NVyxR9-A%8Npy0
zeW&0VCY<EJpD$6Jv^BK2{qpJ*_PoId*i#O6Jb>LwO?JmK94(h__WAb+t5bI}8#}jA
zF28ncGVXwp*xnMk6iog|6H@RP<$J^X6*z`Jc_|Gc)Y3(Mz6@qDN|QSu@s#~jIe$YB
zF^dXox0!Sbkngs+6LCt4Jf75247~IBlbSq|3t+x&n}G>kRpBH&d5Mu6MUm&e8X*fm
zRt05d>3TKWd*y{l@Q%JhM>;~}$DW^mCG6kRKV*Q%J(oil8yxKWHD`Hj@7FINn#~$M
z0TNC)Y9JDhdDwV(hVOi2k~<M>nNTke1=Z}kl}#w{&Ku}~@g(jYnlA0T04pXt-3wxN
zW|uKU#Tbzq!e}Ch&2IkKkk{=h(7wEBH;uBwxn0cu$d$j)p2w(<;_CYlnI@N3eo62s
z6V+O8Waqu#j=b=QXyj(#W!vCM43<{#c%sJ7JDQ@Y_Va=>B$@Ps?8aLZrkgNl>JfUy
zq<9Vh-&nY8fMj9(bo7)>PE|vU+izoqO_3NNu72lV{@W*Fpc&ac>Vl5l^qHA;8%n^}
zUTQ^oWV6Sc!x&JN?zh{!C`#AECwE<XxC5%Qe!5qh235~_@XeV!R_9Gj`o)HZh~j8H
z=$EKP?B~pS>-g3f{-1^*aZo5u*;U4mGLAk#$sfedgWeL)lmg|1<4)>@XX=&FVZ~D_
zXVKPHHkQZ_i%#0QD+c`M_fV^K$5*7=^VHBxdYR45%ug4<%XQaxBx#IG72sImCsvC*
z+v3361$Re(?XVfx`t>tJcH<1cb-!>z{MU}l(dFHE#P6pB)ClJ!gE>Fx*38w0QS*Jk
zgpdV1{N?c$;xh8N;gt^OgIm+<QM&WBVe`NsJA#W<B#>Mfaa?G$*lVNInwNa~F8yRL
zjfbqLkR)M48-Rg4G0Wwup!S2)VbCL;DI#GNknjm0VxheKXmc_9+mkA)JBSp&4KT^g
zyFkNW!3>bPOx*|6==1ww2Sf1~$SeawgjWlXI20OcF&?<BW1K<9y!F~iDDWrQ4nJq0
zWVgM@d$UaDSf-D1P~Ar#>rxF4Q!Mc9*K;h#4^8!k@<^efkcA{t!cN8{qYA>gbCwc8
z3(u206%3P^J#$~10_ZBF5p`|H1ce@BWc~e9(3g`gSx0Eg3mY3RFPSj^$~6L4Uj0&S
z-qYD48H--}`;mpwqFQqebo9)!iipk=hAdPW_NU|I86>vGACux^Qa{f!hC|kwo!YUL
zu;#d9od(a{JPSTpE_lP}w>fwZeLN;eo@WsD%Y6?lC|796+DR*GP!gVK!{egzhL8Rr
z3;)>gaXUhgvSE?IN?hG@(6|H)bE23RCE*XQ(f{x#)22ZFLfmxZH<BU!(^Od!wBDw=
z8bd`XfkI@LV<8Iys`(;Vx#0<CZvOG8xKt>mEMO%J$%7gshCxoq?XamKr|dwJWx~W-
zUZrj&?R1+Fj+&VAMSuJ)k$K*Ns?(x~z0(aFs|`uA1`eaRHcbgqLn$8+WJWtc!(qN_
z4ydpZ8(~4=RI$>xT9`7PR$k2moeO53#2}-RTOIh^_=*HI#H**7);?ls;;>DUtr{HG
z4>T;to5*QPaW!H}LJIKkN$C8mJLwF0EEOuXQkl&Qd2L&`gZMZ#vAq0aeQ9EQsb_D~
zTUn9KdMi4<M1AuJ$G-`f4;86G@i2<l)?t8|W)?m?bc#UXz~OLI6EzI-aE|+BnD+5q
zX5+h!HqEG5W^l3zQBg$3NuS8fv!UQUk)0F5#n+k(lBvU>mC!8qRLBj+DklPF?&14t
zrn$B1he0$j*>aHEeJp|;PH{rx1aQ-Nf;&UbxWeZ`ddACjQ+)uJ8q6n1*CdN20|o*i
zWX`dbQ_gJn__^i=-wWtF_1U($GWjt#F=r=Q8Q<%xmFu|&d7X1#ev{8c9R3hR9~aAU
zNJG7Oez8=hsDq%n>l58TcM>_cXCgzf4!?qD@KK+jjjRqv&Zs_ZANOb2unSF%UQ`rJ
zRsUQ+&nvveyd*I1#^u~*SMJu6S@PHPlD_-V{P_Um^1Ds%NBi3ACIWj``lWX%c>7zh
z+sWszsVd>*7%clbjwo8e%D>05l0sGkMG+_ITr^VB4wdx|K_f)Dq95Stl41$!>3xBJ
z`4<A&ILQv8_gOz+!%rO$9s{ir5Y86@5X0F#wg+o#in0Nri}1it9iJe__Quaw9^Z+w
z-3)|`is>-NBLohK8KJ|hw|Y5G=LdBimfF~xaiJUO@KhmZ2wM^S``*uSWP7X?3o6z;
zY#1tVDx{;<5W=JU3fUKA1l%ZfsAFCJ%!k7(O*P@$8s*T3gr?iFL5<9eK(ytpo7sWm
z!tsC1>nwmn1V&^@Gvc?O^S@;v+zMFHrjWxZKgtxyv`#~q{FuOv%0RctJ80&sDmom=
z)dj6$7#Ew|=1((d@3Ik}Zq*^)VhP_CyaP2bu4I3+2UD7r+P(y6FC&)Y1D&xcwYKvk
zbX3}OcIEXS&u{xCxUh4HhkQEZzaJ7r{<Uul5hep2aSQ@R65fd;)vB4d1OjrC(!stM
zx;!A<bYAoNjO40p7OWTk(hJv|?eK?>>{?yBKk939FoNc2>{`Q`Pwvdzd{?uD*@BR1
z5BZw|m+0b(NuA{5tmyVl3TzR|+8wz4oUD{`R~q_%h5zd)^xM)&-Nucf7KjS9&RK^f
z+Oq?K!O~BB`oNF_ZCf!=hRwYNabUn+svEw|2jFS@IK1RjDOOyb6j%8LX$g=DC>=aY
zK)Ku*7k7vHtTE)!5J2Ij=&_}nec>TH7YPkS#RF)qN^jv)l=R!z+u!{<Iw;U1eaas;
zA5BMvB%AZ7%7$CWP2lG!@yIGpD~#sI!X1HBOLt*<l0nU^{N2ZEO9@FUQKz>wbtb&a
zpKKheuw17rMlzrgo8kYCToenvI8zema0cCjes2GXzpRaDWY}fyToev3US{ZkT)$yL
z|3{iTrp>Rb`I`EAS}w*|pw;8<s5uL2&^m1umV0#e5?e|kyCHA%2%mX0Kiaua7;6Gh
z2~K}rI$y1;&e#{)AYZ<3Khq3k@<k<G7k}zdrwc_7w>O=x%glygu7Zc#Y&;>zJWMz`
zPl8cCT=2q^Vt!zgXS@{}di;)!K7i<Dolx0HsTOl_m)o0rc3(Ywz0*mwpy&EtbK$a>
zbjLhEVh=xyGObs_R!&V`+3t!+OdJ4Ef$xfR3KN2f<5PW+->DW`fk&>r2D5TC6_Vye
zk`f7OIj~*Pv=9|c`^UC2QW%Woe9`~3ii@NCq>7jj_b+UGp<7;MBTK8P>WE*!?t{mY
zCwjgM%#)HEe!4?&PoQI$mX#awh3t7nAgWkZmupso88-Y;E#AZvMot>t?lTD-{1c@(
zx^@B@fhFhVGX-?7A%wOByb8ua`8}4$uf%GwMNg%g*jju7XE)I~w|K^k=7jjl{XU}=
zqol-P4v0$SdJrWY#qkM)O+eG`-z;^szo@~KMrlZnqz%%X>A_bS9X{EDQo&2SD-L!L
zc<7~wP@pF)!Cd|UI!Bu1kOhF3l~LX(@!iGC>~o}gH+6RH(4I~bhb)E`P1rnzr_eq%
z$Or?LOpYdT<5c-VNTX$eA8oA96PV0li6jSjB~&EjZ_bfkmhV>Z+ifx70X}iaC^E!i
z5zHYT>M$vjmC&%m=ClUPL+QN)U}Dlp$b1s;<Tk0>v#WX93oUcxhulCA%ylCca$>H(
zF`upndAHC4x>F{Wsi8t^D`T}ExmIR93tLy=K>#)h$Hh+r==2OBJ@NjkikWyaIT5WJ
z&iw`7q{AA&U0gIXF>%zBG$N%OOj&99szCgz41uoW=o%<VVn;!|2!nxI5`%09?M1%N
zGNJ%@!D=of(^w<smSRArOIM5nl(fV&q>ofZn-{6*zUljE4ai%Roo9AjE-DJ~chYNy
zBMdCX%%M4S(kW-QOs(Gp1FII)zb2K{$2p}n2}wFCVcCSTA_a*442hzYLg&ZW!l{bb
zk1ZSJnHwogLh+FQ+Silq(qBsRxy&a&k<>Jkb}~tm@V2)jf>!{#I4FpX#fxCqhxI(7
zBTqj!lj21s<1hOjpHU-^%`8nZ9d?BjcEVml3S#=ghpAf&^0=jcgeY>-R+;)JlWyCI
zpl^|LfWq)lVwbL`OZ1kp(m6jo(`_2hwVYPpz4CI+)2)v~k<y%Qep3*GPU!u^pXG@l
zN3AG66ZcP<Z$BN7tc|S@9^`;CfYm2b<L`beD_R7lw71P6cS=1=(}oDOged@xY<&G=
za>SOdk_;}KJc~@H;L9)IN+xAp!Impxh4IhyTX{{>N+H*DfPBiG1{N%Tgq7zR%YsC8
zKouPdG$_sRh@2Dux2_XOczp{|P>%KAn!Zk^=<jnaIV~ALveYa?wKpr=_q>{Hb&4*r
zSFoQy=koOa^58Kwp%eU4hYjmQDJ3cjHjN>J8Rx9@&v38T7-R`>oUmon>z#nh%FN8h
z_Qp${K=_+%nN3YT576-{W;@0>i1eYwUYQcK$EE~qHX=(tGgIuR-eOPihEBh;2qZbc
z&EH8qOa9gYJU``%2t~iQNX4BLQ7u%Hd_S39$W_2wAx(ysbgPp7<vur?<3=kpHpBJk
z{3cT(vpHJcGpL<twGm&eLTJYHkIC3()X1o@kwg7J3R#f1y{`q#(b%cTFvmUUZ0^9G
z61-j|n}{>PNC*rSh1WMNq{Bd@qi~luFOyR>;QfaPF!$2>H#s9Tvh$*`)#*^W+)420
zgyLKjA!S0->8~0!8Kev|4w>n}G9~A7t-L*(M8xBl3hUVMA6@3b<6S~#5aEEfBAdV}
z_QaC>HK+kw<;=hp`N9OH)N2HSDZgwjW&Iuj&W1eqR}d<3Yx{b7Ivef=-5W8mf-z$@
z2}HO1qSaIvX9N_y#x;0MN344!f|PbTGx>70I#O!?aiI&+D-2S)5z0x~GJ8iYpJE}`
ze5jF;G}rVPS+flYCOc3evO^Em1$_YN236>T>oTu7){!LcHV9yp&WnG7@iZvx-8)32
z5W)cc9m~=e<6-kpSfEaNwm)G8gX2vU2@tyZjBE$2Lia?F1Gg_PE2qZC-a)NOvfKxB
zQq?O7q;}a(zqk)pHcqSC!+t6%=MyPP6vpwpa(})zqY~|BBTyORnQ<$==&?s}eRU$>
zfHW#FeUv%^y_u_Z$3I54m$UV^K>L<!tK<371IaCNdvntN9$=r&mK!()S0rrB3qVM@
z18558KcC*U0^4f~(2_MtCeJz!Fjc48mifgw;aF9(%un~$Ppfi_p=xoGhlL`@?+yEQ
zwARp2ZTo+!srT)y&o$dv5nEZ6(k+$1`mU;I%UNhTb+<JrV_43A*K`7D*z9c4vp`v9
z;?yLkD6&dUqm8XKwr`M<(OhNX1SX@0T@_Nrj%EZc$|ub@!Rj7yN=xt+$TSBegXWBw
ztV4=G%AH0Fh?o6XNZGX8u*NjJN8TbK_f)AcAt*2na?r_qyUDY?P04q8>Nj@`JHqFe
z2Tm*voiZp@Or_8ae%eEa{&xQ3KQuMIDZUpWpb@I_<3^1L@`9yd!2w;D4R}2COp?n9
zw3^~DVH{T5_-zztG$hPz>bxQFbz<Fgg6TB3F0J(`v!1tTqnPdH5GWG~ftE!J1KX)~
zzf4pf@(zYih9*jPB_rYD%IOjQ?jqPsjHLV|<Zs_MN{N}k+8S+6D23=hlI-7DP@ZXJ
zZ|1|PTFz=gf6n3}>Q2=_29SoK32&oAm1W)dM*gBR#`{BGQ+E<dllwtDd&Pd*P$paq
zeacOoJfBWm4o^}lmNojPe`v%^J#%&F21g|}T22{@(D=9JS0t=DtRSpxpQa2SI#z}|
z{36W5@?HHD^lYzNqLA!BM?+dTL0LI^e#(I}9!*`sN|>v(V#xl48mLKw38jIC-?H5B
zg_Xn5!(1NKvPsdRdw!vHy(o=JSkZ}|7o#HeeGb~D+*){#HHteNVR%&u)%r|T{+tUu
z=J13V#sjFHc%(5+j<S0~noP)MJq|!zF(m`epkX?+qSJq|EptNswfI{uQ}uVEAK^xh
z8NAS_Da-8<;mykQi&Jz{;p||hWm!gBWwr@9wMyEU#eh0Q25-tCA}-(zGo@$UUa7y>
zXLg@SE5(5>fco3JVIeLRcw!F~)Sp;lRgQ9J*o^7zWK=1isXhtiKUT<?%pN#fQ5w~y
z#2J6(%S9j}edFY_hazV8FG@~A)34M=St$0$+&`ZVy-4cCS%GVny7hkzn$r!xSN}CQ
ztg6&$Pc`INxqRJdPXD$0x)}dgeb^MJ)1KgK1=CshE_T`sB2`t8A{w9C_zLrRZwJ2C
zBG;1QqKOf2S_g%fzZy_uNp(IkR)x;kxa-#l-h3)CQ4fFiMyFMxhHhb#R-1@DN*n_3
zr{Lz>4;W1@e?E>MLlvh2s40&n^b!_)97#<c;M=xNF|w{r6Q5;wekDJ4yAl>FXdz3N
zY<(gs!kPL62ewhsk6Ba(s#PJsGc6G`ZKw_^-ezUnb{1D{_b8|l;N0TiQn*0xmxGF_
z7^n2o&tYlhy$Ck@-sXxE6ZD9CiW*(^gx{Zx0<cdVv$xeo*5O^Dw_CE^(-$&m<Z^En
z%(jj<l`93?O9k6zbra?sTajXgr_UT7ay=_esiT7eLx_eDiyWr5-saI}8Oqn#FtX$V
z^}SOqi0mOj>agJ+#g&EDxML901TY)Oj<w(8c@9==U!d+34hYD?Uo2dzl=J=lAZ;ew
zfZLF6{9?7(5;jcm%d4W(R?`Rq{A+jepL7PY=a;`AJW^n9BHCdR_b5KKn^UPO`hR`k
zRvhqIOkM-e&)Ao!E@bI8f6ra0y#|7&@lcV|dHC4(@0;TW4@JeRYL-w{QX0AJ%XFBN
zh$OZL2I;s$D8lr;&`l~gEq>f`GcPic1D*9rO<tnaW3py5ZZHlDm*ff0BuSMSPD-~0
zV=Ajz+ZwO$knr@z5gOyD^?k{7lGwaC&&MPw8N3b4#UwMl=4&qs_;I881s=$g!-e-L
zTCIb7v+j}=>x%Z&U&&O>=&F1x;hu7_CN${ZD=MT~qkEdsQI`LC0%b*wY%L7*n4BKC
zHo<*GH6nWp@7S~&3%5mYna-{Vok-QS#cV|@dyE-wTwPFjA!U0a&xD&&Ah)^NAb%0s
zH>s*O4Q^>@_k*Ia!;Gs+Zm4yFFk|6r{`IMlyVJQzG79*DsDsvUG=!Po{<5y+_&c<-
z#L;Q>bMW~*InQ3pQDxO5qQVNe<+Q%#WLss+-2IOn_cJrxM_J8;x~-D8FOjz=%{GYB
ze+lU7m+1|EH4mdabp5{;HTOg--ob{3@x!JsL9;q+C^!2x-;i^DXQnyLmSrWZc{%pA
zf~Z#@95?<o+*^O?^8Z^@sgp?mH(cf}z?Ny4YxQ3zzWm^Q^@xBk?AbI`7`)J2GWok^
z@;A+Vbu0pQg{^j%t=3R-wct9*dX)wL|4Xe^>VP3_tj(-TlofWQ6*i*T|4icz<7Z9(
zl_fLHXj^Jzx<8uHKfY$5to~~<n!e_Q4zH1TTLmC3qy4g43-{#nZhnns^)=d;gs$FR
zQF|cp27KwCGRb&61ad@qBCeJn_^nl(I$dl$I3>m6mDh^CV=!(;%6T5sWriXZtn-#?
zq#|)1?@pl(evr8G3Y6nF&Md~a?3}Ud<65fD;g&W-UF5fpA214Z8%&HdyM{OBz$h|?
z;IxeWIH29sM?@PF&{3cf?pl%ktJ(Vf00P}UeTI~?{p|-tgaac}8ZIXaBi9hfx{CvH
zp;lJnrnjqyWnK~@M<-}eLwx{7LG@1hEKHJVj+l7l+Fivsq0qJNsKa{%Y=NtgruFG*
zWeDCVSFLghBL7LuGvy4(sHAfXkbu-obn>rIy~hh#BSx@~Ms?*1)FgbSTwd5Pfr<Lm
z9?9WWp$;ByQrgN{-gDhyVTs}}rLV?Gis)X}cTmcVH*G9g0KJ;C(;dHdE&N5g6bi})
z&N_+_QqwQ`Ank=OB(u*c+L(!*e)usW*M`$s(5+xr_64XI2e$bz4)|<<?ZhYDFG@$(
z)>>Oa@_z{|fjl>Sp>*-jhO3)&8Xpf0Ry_-RZXYW*hu)?&A{0GzTGX{{PD59eKb{iH
zjNw>EdyG={+a1{v*Q{mf`EaAy6A7TC^DvdiR;UQK^M!i|$Na8Og5Tcz4L*8;Fv=ZK
z`CKJ$kt{yJMO=3Y^3PF#%kBmTo_6eXtM@M4J%z|B)Ze@sCw4gdEI9PM-^q^%^#_Fx
z`wdLuO)2aw@v9AQ27xfj!uM*Wmm=Bg#!sy!#{5VOn)v6vBwX4zO6r(Bg@czQkB^(8
zb7t0tOgzu){+--Cs@MQta(Z1_TpH=OZ&))%0w)Ip_dEfyRA2l{ZEjbk#Dl6A?*<}s
zpB{=EBElMzcrB)D>lcPOUg9F^IPTKSA4IYd!)m8ecm((cLA;4UEV~DVzm>y8%2?qg
zkAYP>d{XZH6>1|<bvr2?ufL9td$2P4$*$K9DR*%RoOoYO6NuV06{`M`zn#o<=R<qs
zKByxYzOyw_sec9jG}Z@=tGrjX^fQc-j5n!zB2l_7Fg81JJ5#?M@j6AXUmb+=P*5Zu
zqB)x^1jESvYJrT=ipERxVw@CeyCm^(Ceg#;u{SN2jj1z~=cs}wg7UllIcK2p*3SKD
zd!KL@{A@!-2T$fU-sb5pP@(QMNg|6WyG5tYr59DHtvv)J1z0yyYoxQ9s*m<;2efdx
zqBQOG(=WfFwQh^IVk4>kiel1ND*GS>=QbsM+CLIhOC&2#54L#3Abo>>##pjszrSbw
zojMfXTNWdt^?83DqM&7NPu2c!GE~s~s_seCp&4*sLzd5@Ih4=G^m2F>h|l>Jd|Hpi
zXgQU#%A*J<#@Kf&#_fK1+#OileqL6}&_T5qax-F7MXm%9U?Rbdvlacwj7m@Z<&P+y
z-Gmt(n<y$ObYOI-d@nh<M?oK{M{#}y?M(L%dE_?@`MMQqAwx}gBMrRrI7g+z>*RO-
zqRS8e^xtn3{6wM-A~4Fg!F7M-5*|MR5W}nr=yoX}#!|{cS%9X8l5~xYgGp~_5k)`|
zpOc19ylYS2=pRvT%Mccp{CJP5>Pm!b3OcsknO1Bt49h*j6!ZLAzWpW0glP9eP4Q3k
zdPQQn2)~dal@5KuLwy|>t)x^htBH2T9g#M+enGq^OU(t=Z9HjOBoJoBkb8(@$*CkO
zQ>F`GvimX0MPYGlDUqpxjdi^X$pP&fkAmBwrM7j!Ke6w!{Q*0SBz0b;pcu`=cjyo`
zMBq80)Pfk)HofNEQJhy=O@^`G!r-*t&rqAX;!G?I>Jyw^vkh*%Fp~oFeuIX&Me5ZJ
z7cJ0W43a`oe>z_l%6gri1NDuMyYiQznS9H@Ycb-dOZDgchs{Nh?8D>ZgV)=|&iMHL
z@}$RSBY|-A#<pzd`TNj>7Xq#k@L9?SQC4C%p>>oo=HBEPX+K$ifqF_y7<|rAH8Doz
z2|f^5P{R+9tE!fI)V8V>(32X8V2()4ls%Z|jjM^AFvJiWBnJXYEsec#FkA-h_B(*i
zeFYxG#%`7*!9=mm<w)nTc5@9Slc#1G=G0$J2_F)@lv{mP6jh-DEemuoSygv;M5slX
zEr>!;_t<PWyg3xoGe$|5J}0JPTsuJ*^CH^kE=G4aH1M+e;@am2+*$-;<xUL?a2*VP
z9ubkH?)|sWsGuywcT3623b1?38V!IV7kc#myJfp@B6e1U`pQosF^Iou^bx$emV@Sh
zAS^6IZb$x=9RE4j=c=o~u~g^d>?HjQUXzF+@<ePXVpvu40t3JD9psz9<lD*7k?gs~
z0sjet=nR)!7tY-N{qfaB+@Rjy)tCL5IG($mIzp*nfeARfghQrIJ&9=~#SKURvc-cs
zzGFcNBfax8kRoM&&`69`+PZn`B_a9QlSFH3(1O+hJ#(u<Jk@;Rp*d&gqAr-qlEE^&
zV3eIj9D=2#7AAsDyR|FtWuqrA|92&9o12iBr)K^)i+813?)@Ic3>4Nkgqw`<<1~>o
z*2!+yzxGlHPAlZg-G~4APpt$(x2N33lV@4W!B}-*u>$>E$LH6F`G@nS@b4wWA-&$3
z?^_Aul{oTYVvk1KwQ9JT;3g?;+3|lq&)hyf)5X?*SUoOyT$Q~0MX)wI@G?c>9tkA7
z<^{&L1ovsJBZb*Sfv)9QC9q>LGvz_IG>xResSy*1rMhREBaOm$irfJlrhjN+pS&3m
z`p1j=DQZ-kFW|{jsIE*VM^Hf7$%~8W6<RbnO5R7uy!Yo$yis9Twag{l8Nu$MLr13~
zqVy&rgPO)gsm{>dg!A|1O#8r-w7oB4P#2AKH^F+o8(Anq&7_SABK3><BDx9%kh>DG
zJf8IHSx)NvV{;&RMP>ta7S8Df3{sw7;4{fu=Nkr-oEFb$*O;kQwtxS$)C<*AoZPoU
z5TDbXx|mAob@r6j@Y-EK7Q)q-;Mi?VN<c^!#uq){ZnExev>{Wu#u2PQ6-~{Oe5j~v
zoxA$BtdD(CqtW4-8Mlb1lm5wL{s5J?4jhK{6Na29pl0is{L25uOCb#XSny})YSsKh
zbTBLGU&^=k?jcr$vz}$2ay$&eILO?+d<H_)HQlQtn||~nXO|+2@XPP7NelCKS+REM
z;lxF9Kf+tC?}5_MNy<+(j_ek<5Kmb|S@lih;r$Y})O0X2$v(BQ9Wdh9r7qmh7=<h%
zMpdNo-G(Ey#kc|h#a5*OMBkf%h~f~yzCP;8-PR4b?OV5WoeXHB;Hr9?c#_e&>!h4q
zp2OfCmb7N@P4jZ`G-#IG`xktN#0wMogiUby{4X+c#934DUC$w_x1C`W%t3pP39^bs
za?igX@KK8b^RPc(-|66n`b&x)3ldt?tqmtx%&kc&8@CAL@2|h6)*1?0=WVlG!WW7U
zGejdJS0zSHgJe9sS;bZ6n*O94${LEtf`>!xGD!*m(*?<anJ+^zoCf*r1u1nAn6yf_
z(z10}hH|<pP>xZyqzU#L{>qCf5ZgpEIs4+O4_pnbM<*!|!3hNe>OHTzCos8x3ZF*4
zI>Uk?e-Zwx$U^ja74386SdxG-@RT^=>|at5v9viaBc?x6p-RP(CgLi{?M#$@G%3oB
zqyUQ4Q<OZ<0E4hHToCt;NrnDI(mWnQX`LrybE3G<haKa*BW=vO7M^RB(PD`h#jRl9
zA+!xyl+|2kBw0K(d9<3J2dV)qwZVp<HQ3QL{{RXASo(4*e5!sV@mPNCCkfP_K_Oum
zZ@Sy7S#2mmo6RU-Dl@;y(hZQVgrZTo5}~=m)Kp2hza<kag^}>bZ97M`&vBC0)A1U-
zZ9M;C&QY_*2k5rgkjHvsrnO>0l;vE9_A6N9D)!}}Yu~!AgMNOshpco7St<5A>`n5S
zGI;=u7Yym}bEliYnN*<^(PMe&h5+48;4s%nZrOqW`R$xoW25Ist6q6f`B~OQpI}T_
zF|i;r8*YslWKGAW8tBjzW5%DJ04AxlX8Hp&WBlLMIV;@xISV_A-WXhEYd3Sj9t;dv
z47ZYL$f!KT$xDb)_eF*!K4-eY1|7qH^&0@qT0d>-APaR(nnxxkj&Esui6CkyFF(NG
z-N=i$KEb!<wGk9Y8|%>Gzh##HGlVH`SBG^jH7wTk^_#cpR!5VSA9Rp1=A?}I)f29?
z6BFJQ=q-1^vTMi0nD>*8n7{y(ByGyWNM8z>v*)dtD*Xqlp+%td14qGksTT}t%9Co~
zdE|{8&QCx4v`_Dqmlp@Of=AzbfQ<!$7$NY7e-7C)<JnWh<lzrgG$!#qFdZl%3x^%n
z9jmX7iOd|2jL$Zlgol-gLqVmtU^fEQYwXdSm$Tp;@~2#ZMBNtxb)=)y)Q!s{+l!@U
zMF}#HHB+^+@;P~{3Se><g7TGQl?XRL619JGq3nB0B^oszdxN;v>%+mpjPzVqj5jjt
zH%O@A(e}gh-kktvSS<=ip8!vCc6_5fpEhUkx;ADcG(rM$Y<OiIQFoS$Sa%uysozJg
z!3K}|{jSI+xr48JxG^HtMOP*jraKvj3jEkAsLrR0`El%2HA^OVWTDFBa!MP3K{A;!
z^Cwf#oL=cTJwX|4L-U3*{zRW<+YDTTkA;Q=XR1Jfs?OyzCn8iuQT&>7(`stV+QZ+(
zQSHrQ|E5r!z|#H6z+tmzX5ZX>Fv(ht4u+?t8&k*x<+&e4gzDp=+GYu`DNl^fcpn!&
z_z79=8j-oJs~e(>wAyGr`y47jis*<r7Jn63z&vh8;aL8j0!$$bw!?Ia6=DO-gzg{x
z2BAek=uMPCD6L6;bAc>xNVp#&Rq&`wN?G5Y^39y!Meinz$q|I2<yHFpl;v_p5I0Kg
z@Oa-_+WGqma`*7P7jLRRT%E$8iFPB!@;bJ~aaduq4(!GebxdA<eDg{Is<o~cq=ew?
z>vU$`5`B*qlUw#)2Zf+hjLQSbkKEvuLB}BIjtq|#H%C;GA8)mzH{_fOBZjRn_YDT8
z4tC{&7Buifno8q~Va*CvE=z)OdUPg2l~?5B&!f5vJ3$>{(Fl>ncL`^M_?l;kg`oVx
zFf>~_vH-%rwAQ`zF?x~!Z!$!KL+UnW<NbziAWZ|xoXKUE13>;)7ay;D7Vp)Uw}(^z
z-`v-->|cES0i8;E<3s6&cp^c0?QbkB2;K_om>%~?GwF)U48n$!5}71YC?<t`p}a>(
zx7F8Zva=e;yV0Z2dDoIxaiu2{-C`PvY8976<A<U+pxr-9Jgo#Us8iY=<W`q7i-5Rg
z0Xew=!Ai}U&$Y;xKHF&W-~~GsvK!*#TC_;a66^av^HG#&5z0bom%!U^my{TCwa}BL
z(d@lT!VI#CTUx{Og8y-w5~r;7Y^MM4<TtYBA@jCv+&!Q9YVArwpYyOm$DC)4_5j&F
zq#;!IZD6o~2C^HthEUwnu}C>3Zv8sjB)t{iyCs_DcQR+mFqDB`tvWQG&sbY;;5Yud
z)o{8s?=ka=A>Hti2f6;p*oPixLeG3xxcW?3>m)vNNoF2<#b2|bybboGju#24#fI|u
z=M%@9Ap;^;PsSaHZ<Ev^xQlHcTFGrqf`#GRzc8vflD7bi9@-g%^n{Owt+~mt0XO$e
zQ`H_nh?bb=_ggTx&Jog}r|T9@Yx!x1aoX6~zB?e6Pbegyn{COxMx*|o5qp~|q3a$y
zQms@qD&~2-Uheb(H0TYD1isNk8$_d4gLWMG*jue*cF)U6lIR?^{1iL-!<f~(jPK43
zL80FZ_Z$O|>0wCi7rMZaL(DFk-fH;Ft4oQoX9Kl#!R{VrRxq#1QC)a5L^$Y2K1%gx
zMhb2(Q>bgTi#d{|JSda+_qyeHx9%Db$X=6huHwy<EP<6URBq~YtmuHRt&}i?CFS(2
zy#aiJMgeN=uh*uUBr-TSLXi{*kkmh1StBI+W!}K$Y~>4i)f=lSC9h9EJ(D7y!C47&
zgoXIlBL0>4GD21x{`YG^bYnkf?S$HUIAHa)b+3oZrtx&J)#^`z=gL+F6Z`U5f>^@T
zHy+WW4fGlp{Z!4y^fwQ+6kj5<U*c;G$(riwgnww_FMKlB@%O&-w!c-`_%)X!l*w7D
zxzqzDOcaK^*pGi^u;jHc8YVE&7$LrCXJjxlWf6OARpYnL+)$<T2F>XXGTuoYFilQ=
zgsU|!m`VJW<K2++!Jk}=XRG@zu<Z(A3RUEUiQN8raP#|%2vM@ep$=?_FfY86?6Nxq
zrKUZ{HPu%4=koeLo2GuU&4i>-Hb?$TX&zpnRza!C&aC`;vG(wAjb;0-j3j@8v$ZhZ
zhD~0Wg?!F*o*S3Z^Jsv1@ir<#gcC=896{ijDM_tRq##r)s_dr9qBG0vZ@{k`_2A?|
zATiIj2KU>g;a)GplJxgzHtUj%Bha3_t{f?+_6z)IVgs=|iP2j2C`MD3480P|J7`Cs
zkn4A>KxSg~nl}z{Wb;<atpDdptT6P`U6_l%BzjnX1!$gngE6X|SCk!iD9fH@#brdv
zH_=PHAMws(Znt1Lq{%~|wQ|ha|JF_r#!n>Ki^BG)20`aB?|SRvaY5nO<0aB8TFJPn
zpm1vXuh)H+*P`le2#X=ITG_Wylg@Mjbvmmq8&bo+-j`OcD+pQ=lD%s8(5|{iWm9Mb
z<v%KUVu^ARddcirdUiL9vBrp#YkP$vP(RjUb0BjcQ8-tK+)aAhSZ)2XB)LMxCy+~?
zc@$qgr9gcKT}Jynb;F(4+^Vw5SQ`Y$F(~w1@&!4*@k3EwgzBrKt35^7B9RFLV`T@6
z=;ZBbN7bkknv<vFo)2QPH2Q-bmw8R~kaiZ04`iIUqjBm}30X>pG1F-U^w&V8SZ8NK
zQ&lrp6M~J*;1mO2{cfkP6f_n@+5#-bv0x1|6^etZdzQ|yJr-lWB`Y*~EHO#+82LwE
z=T-1>3uc$-92PWfI^olttPB;vt6RIpFc}(qnp#`xr}_A~NWo6Ac*&=go)JJW4iEE%
z37Lw9hRUWcFVZUh=Y1xT(7?IuiD-={KbBQta{Zyf;4Ja|?d<tfhAXMXe!4`Jq2hZ!
zm6!_wGIHbpBkY`_GijrB8(SUQwr$&1$4)wS^2K(?PRBOB*tTuEV|B9g?{jy~#kr|5
zs;+C)cx$a^&Igr^SLxU1W#7l&rq0VmTh?*wLFShgL0SEGFQ$Zj9}oV(fJ6ZN1-{im
zD54T*AGec(p=6zdZf+>KYK(SV?nZh?)f6;lmV#cgwE6Gw-nN>-_DAER=d6V~2KE|$
zpF`aq!e)%t-pwoYTyY-mDG|;Yc{g=C(v6ZC&vn$N%lMZ@OP9e^mWS8g<T?$+>Bm~g
z393WZ0<eaIo-u1qL6B!TH(|i%7q&zQVfuNmv^w%6kxen}4dN7`n-WW=UN}Phr`K<p
zDuJT_aDK!fTBzDX1|oG1?luQU$D`f4^}Yp8EAW|SZes^l>BiJb2$WvZdtLOl!Ya>+
zC8@cm&gKk<ZGC@YmX4DjE^w$?V+@|HgHSF(X^-ICn)m5*MTxJ;N$CLO0@aM+MW<eu
z!Da6sS#Fo*?v<{@i3Y4sAgGPocbD#wx8QmPb+Qkt;RZ)`*J?2s`}r!mMfCP{NOkJT
zBnb3bvv<0E?KPRT=TMvl?#f}OoFQgJ6Om|#lL2IRw6MVv=2DCU!Y2jgYO`$MWZ2Ak
zAYtz1vcb!Hq`C}ZkJEtg`3e;5)ih!hsH>S!XeiAoA=8-W@1IkYa*EMrA_!h_NabQS
z8y^@;;@vK>8(Jdm!y6l)rYP50re#P;EP*xgVq)SNP$N+KrS#*!;8S|J*H8)F&3Uz<
z)*wMUBtf6!zC>+7w;CvB;9%o<p(!jEx`S1wu#LSZfv%Fj7B&HVHW<angjjHDso%WS
z4~0LZ^~>%T)*5I`yTu6QjT)53$mL0)XQ~LnYDW%SwvFS693?!_i5Uf8Y%T8#IY~?K
z<&mVtH)i<C>W@HTMN7N7;)+1{AeS1&-b=!1A0@Bk&eiE~a$~V8RCbdtYs<JF4X#&2
zNWfihFxc>dItPGZ2Kb~ai3^TCC=ynZj4r<uPn^LeobPVTwkD9vgpuWPdSbg2`pfC|
z&Wfr`oCWuv4WDdzI=dJJ9OPYVWv~K<Kll*jq*8`@RJca51X&$=$GVq#AIsier|;i>
zeZ7ypt!S)6kz<czhjwr^##FGHHl?4|xKlWT6ina|BtC$2aA;+tPe&(vL>}d3p5MR{
zQKAGZ`r@=XVopCrAj69_)@-BDINa^-?FqeZA{@l>9C)(~A1KT?EAKsS_r)!)I~|U_
zXO~AGx&zL6&;w+X38n;My1T~JHaN6FPMuenB9oB1IM}>4s69+(Z4_SrrBndJ*K7FK
zd6t*M6hENVf>4;?$|_>=qE%9Q4qmy_lr04R;lex{{jD86$WcGY#Qjz~NY-EeCPM=(
z*+JF9KxARc@Very810rcLrW%*4#cYBdh)<uZ!0^WCOpB-(E5Z-R00ACt^qrC4!$kw
z-W}@8OcbI}QF50=!%(JK75rme1@Z@l=a0;pSP?+sGF7QK_xqE28=Cur821d^Cu?mN
zV6QUQZzR>T_k+#Nl)S8jD2F{j<_lJO0KL08A?z^$a#B`bY3wlMED5{q1nI_WHkocd
z=q?vpL9-AtFv7vF1e2*ix5I%i8zdakF1UO)gg0Bxq8}udPPDmX4%@c?sRFJ~WMR?~
zs0V0R2vNdnFiqG`rku-~K<;V%b1<PQ93E;#SXLFm@yANSRl1y--0|UbZngNDqrAVG
z;d@CE;RD29P3W&cL6lDbu4|Lf92oFL9!PLy(>kIwk4v!`+lQa`Ry_Xv*n=e1i<lHu
zK5Dsl9@)BJA&Nz;1Pl7{Ish-K279Ju3jr9iv%&gzjSW!@F=b`|GQn@F*i=!eWJGmH
zk?^c#XenX`sQWW80o68|23nEl{j9aHwE<6Ntf#^=U*GHLBM=hMcYS(WLowqdE$dNH
z=%k_4qJYfwy9hzb;r%wy*-@8|5}^B`V>JBN*)6c*h6)}P#28Wy15d_Koe8pPjSaw@
ztw+>db#!O-)4Q&#$XyXH05YWZvY21S^Xx`N)rze(a4O;qRb4p2Xh1}mMQl?yIQ)4!
zyuV0%jG5i0Pp^S}w^uM|wvulgAzxPlwwiSa0NFAR9HSUU3M$M%+Li8pxS~Rc5_zTD
z^0R*}3Cm;n2}IM2<h|RA$`~sv`33MA7xU`_-?CHHf$^gO&W;SW_hl7_W&G(r7~r5l
zq2pSK!k_6iznb~w`QrC+{eidG@}~-65#!I%y1j+EZECdXK2Yzg<9UIq=kcj$edGOa
z+4Im$-sQjVYKP9%FPkr}=K-qscOM@ie~-V%$9I>O-CrB=f2412OLw09%`5>z&`1qE
zUrR)KD~({S4Kgzn8iT!{$K^3H@k!fw@)u57N35h@)}MDjK_O^}k(%43jqzZC_G}w}
zRbS-bwk0$y`0<uNC&&^O+7EAg4tDf6TurIPtJED~n>pF%Ar){Jc=obTH4rL7y8?b0
zdRjDu@((9CZoAtb7lKjgm7xRRK`rxpIQIX6dX4fVFW*yiH5ePmCa^;ndYkEGD7%-6
z77$Dtxd}7hj<cy@L`kyX!c{~jdF<%dQpgr6Uj}_ok^fpx6KhdDLW+e;ZHF6#1e7ux
zFsNy0*Ov@eukkFX$Qx#FWp}rX`F}onPz?Q5;**#98z>Kix|&qt1H1!dJ{DP@mEJbc
zo^O6BU1~QUhY>6c=SP#J=cU-54C!4+)WwZ{fQX~W3ypSCOj3~l%1~&3LK^YjD%f6W
z<>E@KWpa7thV?D*2Z@b13tRI^Y2Bet1kc>fncNwVpiCPAF^ClU_ps1{(juv}aL{Em
zd#2%7x-M@Ij2Vd;e%S+HG4)t2$i)=TyW4?-Z<Go&uV`OflFJ+pyl2O^aZ`3Mt>b%6
zo$Ror=8%5~77=DG>mX2_ZZ-=20#|x`g@!Bz5GWVMMs*b4PgwtSWp~DlXabJXmM|6V
z>K<ciOG(*ZRQefSokc&%FKXoVU{)E4tfT4qHsbeO&B70LFYyBImpg4|(S2}MNO66A
zP*2A;L*;0pDFmEV;h#Ou<|}WV3v{*{c?NysJLDHc9kVdeIt#i5`UXKd+;_KFZ{<uh
zL7AQliLlWaBXyLwNtn`@<INlnt$A{CA|5V-7e>V|1B39_U4#dq<1EOcTxb`WQCJJc
zqHT}|GCfNjR=oh6&2aN%DC_3hL+!Oh8ey>^OikpbwEH26t+n4~Nj7h4mpg(9X!^9M
zS<!ezKC7$B?pJGe$pcYqjGSDZ!4OGC^v(u-M~z0cQzypgM5TXL5qE$03No%&XMbgV
zm!Glm2!jR@+@}$g@j{;U^aZrTKYU<<INA!{caY|jkzE3c5Ne!@{b#LA8L2`aI8svF
zTa_=D<x6bBB8mSAp)-ID%!*?k23E54!s{@41|r#%vzib(DAtsQfN<kWsv`W&OK5P0
zo?4a1!kLC3bZAMRmys;&jWiNRohXyem~EL33;Rju;=oK2`uB~Mh+vpiHN5t%7HP$k
z#1f}A-jfMniK#ZvZpm61{{C->w$Oebf||L%ne<MiZ33d@m~^faOF0J|qxPb}JsP;c
zeCw^fdM4c}(U?g1TH%(iyB;po{8wp@_XW7=c3ZNsQs=qgPC8F^(o&)L+wvB_i^K_P
zZL}3N8_Y;vOW#0xDm?BvVptt!`8vGbI^TV$=*byC#~{p*SO%LK88Hk*H?~evEkP$>
zNx}#Ysbs+-gBA;TLj#{r2$Vg93ErLf@>~MAEef6Y=$Ce#ZoJ7NM96VHWT1*|kDiTp
zLFeOBpiPK6it*YuM^z0wkGd2S?D4}OYQr1`$`x=Sv=feb@`{ci2_hTyPOB@z66RlJ
zx-A3tSv-R8531lXPDVchiEXtI<b&<p3Bd)xxdYO@$cR=!{BKj;>tWby=7LM1Hj>xL
z5X`RH6Q@0%kB=K#pytVT7K%W2zJ)k9xoXZ}T6LDT<WKoxGf!n0LXVTp(9?N9_3_6p
zXGp@Dk;P4kUm;P&$oZ@sU%e01b&6OZrjUU6)uVd>KR`2KmzUaA(+{21-iGX;@2x2p
z*ed1rfVk&zZ6I%8eu#Kqvujpn6ElkEqWuK%<%Kh1k(7ht)fE%Lxe7MRd{v5%L2p;0
z8d?o|Ft-n2Uq!FFky2#&E>@5yF=t860Rj3a*D*;KD<U2x>hS;wtm_<&QHgKa?*M=o
z{1h4VeU+3UXvTf=(HkD29ionHH_U3Z9?02`m!IUJCHma80~Z&q<R-wQVI0s}{TBrx
z({jt8d*icpXAtx7-^NOR6OEiqCk39;|7O#OhG!lf9{tE*&aCvyQtD-cO^u$TXPhA3
z5RWy?8$H(at#up@QB9~#eSq+3GerX=(RqJwu4eKEn52;no_*r;2>nFXCmmM3S#qfF
zN@oNGNW1tr6GJII>`YQcy^q6*u{}J0EPB}8sjy5<?*v)tOy3}i`i@X~a$^$r{9=DM
zFr7~Bqek%H)k$gJpVu&zaJvdFm}v}J@szcIP3@wktU-8yJn3(Ua4herh4lx3N7U6#
zud!0;zHK|CAyv@e{#zi!bK~xw8jOTm8?1ASM6G6*ULMEJUoxP@{*#*4%VJ@}Yt=`L
zzG&fYYho^|7PIlU0=90=sz~*r&_q=dCYiIzLLAjsuN{|0Zn|?dWD1I5#W)fZ@=gY)
z3Z>zW5n8IwA&%sX{^f8qsZ<JpJEoS68YEz$%918Y`ulIqdH!5EZV|mw&J8xO6gJ)o
z^+8jJSn5z{jO<nEZml%$^Q>_;aDeBk!VQsJ6l3J|NVWH?Z<He6g1ZOe%i4ip5X^Q~
zb1GMw+Kd-UXpb@vJTAj6<Y4Kw4pTg|#{Xi3HT_txys3CL)@bCdie?Egm!7>`YxjbW
z1tm9rVJMje4|Ny~{j;SMh!*s=k5<t_U(rNRLwrJYqv%lEBh=;R;p_xulP7xn6V6x3
zQ>O0Cs0t}};c{XhA!N*qwZ<z}l`H(UN@;s8ImJIeg^)DjwOSWP%jOh3YMlR0BcVd~
zBrEqwbwb)()>@<bP~;atk%`N9Kh515L>+u~eD7u8VgkGotn3>r^LD}UZ!}y<g1p|$
zHiQc8O1jQ}9LZL%Uh!Q6_lA(V_#roy7c|3m-v$@prinbYIbCA^tME|;F8GtHAr+c>
z2z_%I{vSx&Xii$~XCd-aRSq~SHL;g_f$)=G0+ftuM!10}Upp%xsb(z!xM>lPxqEP`
zIHZ!QVurnId)>uV%iWS`rDl;`scKR#2(&=BpqRn-0MlQpzfwFodl(g5<=uPNzCieg
z$4R5!*&63DRwO&29xaf|nO%;wcb{4#(gL$6eofL_`ug@SBi|u>bvFQ=odm(0j16cr
zD6q26Au@Pm!n+K>5yfwrAL?&OVQiU)Y^ipw&$lm*KKs5EUDs^CZ3c*)k^XjCjc%Tl
z=`(d;^Yqh#LKx8aUIJ4o$c0oR+7!pJaM9y}S73U>B$=_&p;ly|sUg5i6ujBZVxO`Y
z>dGrNO~2;PiU3(Uj6mK7{o3vpxkfa%X-`58p0mG3gaB_^>YM)>w?Yn~bdhHiuinPO
zD_hwvU2~$PaKkC6f-M@oR%HjkUdH8t@*8YNsv&SNPwL@ns6^;xgT7L+1XF3q)<z|b
z0Z|OAyd?713@BmMI&cJksCEe#B{16@^dTwjub&QUIS}XMr47=(me4%74933MQMW{y
zzg&l3U4WO$d(<a~uIoGCijPj^ZXL2LQc)0_4aiKHkvzdXb>}zHvYC7wN(D906YS$5
zow$7#+LWVe?(g79w^x7pV0b-A7=v7TLZJ80i2vUV6XVX$t?bSY9?C-w`4~k4{k@7h
ze@;r9DQ9<NNN)pF>sw#!<N1?Am3wn7j@d<UNC3Jd)iO0rSXw$XuE3#5LuvX=z00<1
zo2X+&NAn(22Vu{Qf{8T-3SL<87OK0!%rskQNKg8X*nAoll!!n#m)%7d()QIStKHH=
z(TRU%dlIMzbMKG(N2C@veWA$-?la~9kB7~Ne%}Hy%PshOrV!+b9Wiaz+xS)wJ7>N_
zSOC0=@CM_LiRP<=^g{ZyXa1+UW7`RW#CrX}o?nZ)Ttj&-b-OaYA{-M1CA`r+Czm2!
zBeD-8;!zvv#aBjwB#b?LSS&u5i!8WU``7A}610pJNp5*PANwg>9ayf_Zf_6fMnv)`
zw?H93?8Cu5RsGR#`Rqd}!wyx_@Q#>wF2JF;@#JOw=!u82xmWXD3h;ap8NobtP-?F<
zkUo63XU1O9K>pGjV4xTcI)E~>il-hW&>cA5M{q2&)Ih9U-ku+S!$#S?2dg%6cvLyF
zA=nz|)Sz6d0nwdDYMpA)OrcA~-_g0j%C#Vb?6$6XV%R8!$Ys8EB{+NNI{AlB15mWx
z=$SvpB~viGBU}{{K{;~R_+(cw2I<#nQJ4%H8~$wFyC*O^_{5VEIy++4`rHs3&9$Q>
z?n;B^kjl<3XZQ6%$s{h$!I$D?Xog!Ep7vaY0XKzeim{|G=ZwTZRtq|MVm)r6*qpXi
z!6(_EzHK@^|8*M9Kln);=pID)1mF!vsj(i*w0YB<Pmi8+W4EB8Xu)MVEI*}qq53nq
zvrgns38!?lO;|7np3@{pBak%vbA#>X8H@|JEG_*R$zgBn#jN@^cS0}(ls{tRbn<z@
z*KCj|%d|z->rCBNl^M0qdrlAxkJu-#+gF0Idz;Ef>Tp68>bATf|HfXH2=L23^OH%8
zOXJ|5kgd{Bl<{{Z7E@y>l>T~!oL=;R=0)}lD3>H{ly_I`N3@sh&NHYl#J*XkDxqM6
zI{$4iUc6=b;p><qqz67JKBVJrv|vL0n00uF+NAL2zWZ>I0Xl5gV$#|S3$JlV@FR3?
z#lRdQHP`Ko913L=NPe;>MF5k~C0a(u8-mX-Mxo2+vEu4O$!lv>=F!W8SYB@t_sbf0
z7?P2Y$RAiSgY^6L&vu3h1dX`_A7^d)wdi9Inz*dMwZ7@>Pf%t~vd)(oeZjIXZx#Vj
z41}5R2yuFM*Hv6pdjbvrnf|Ek<Z4#pPUhb|%u+07$n;-w8l^}1-2lu@IX*X7uf!`A
zukJh1ZY;1(VO$pWKPg8Md9ZADY2>CQxeHN@=_SWo-io%~OueH%N&?-8S%wHw5H=AH
zGfy)5)d8WC=>Z=L=?*wGNYOu$tBz+%N|srlQ}M4Hzw0OCpR63V^8|lM7UL~A<jU}b
zq=8(@Q!u@D@E}j$)dEOV-x$!y1U{u{J=qU&!bD7Yk*U>k=k!_Nfu!I*&}~^XP5sEx
z<b6Gqb?!6xr{D+Yfv{x)8>X`N$u`HG7Itt?V63`4mYnJzC{zCk-|&cST$%>(77$*h
zMxrqwN#se-!RYfW+Jk40;2yFz=nc-e_2@$-e@x`lYbZ}+rUNJndK6_HP%Q%cJ?Twk
z=X^~X^JM=_S}=?L`JlC=;qV}v#A~#H{g*=3Z4%2gs^~?{cZkiSo{pO;t^t%0c2<)8
z*r~pwXr`ZZQT3Z%Rqemlrh0sD!sv7b2^Q_saDx_B2>##@%YkkL0R#|e%aH@7*qf#o
z=Y-Tn%lmFJc>u-T8bxQwJX|Z?$k(HMx4W14yO@3<+fWTzKiJVimXBp9i2{R^@YZt~
z?hh7iFMQYF9~jwhn~oZgn8^tEM;1nED#kBZ<F#k-b9iD%tm)W7r|J;Ueh{EoOHODj
zsxrb|dC-W)OQK*A$Fra+kOm%6Lui?2Xn4=;_vAMw?gOk-<zdk3lqJd*7`!QiRSiA0
zst4NFGIf0AIWG9HAY`v~1OqGL<1T7D`PZF1A#3WakNmDZaZT`ZHNoR`%E4<w%KO9{
zSuxR!cX=duagXfGut!F-5WSD?%d%z%h!+^VTw>`r9@fi@Vu{}x|1pbN@5WdIqV?f7
zQ1Y9MCjk|F3Lzq91skH=A>D?(r!nQYjjOpc-rDKbD{+?bzp8Vo)Ew=Wps&p7Z?-yn
zR*|KX;KybeYsLr}-Gsy?>fx5BJo48f=8d1*hYcm&JP4k_fl~GBBU&(yU^R$yzn<BU
ziz5|U^D&qTMm)+oB!>-D2dcV&A1KK98;0AujR5})yhvW*J7SH%P9ViCl3h_AC2XNA
z-kT2#bGpDJ4jFCXj{#AqW#avestT!<?y6+?%2!g7VeOmP+=If$x$;Wjp@o4sOQw|R
z;=k(9(Pe^h&b|zY)RgZTHpHMdFCuAo8?thV_{nB`{>|zD?@+f6ayv6hbNiZ`=IUA<
z9YA9Eu5Xi~5j{u#+!3^3L}ntv#X-2R<A?ejbW)dQZ>YLgt~&)nvR+4{U0*8J?BzrO
z;&dUbN*h11-v#K*8^J|s4qYAt^5T)WVgr3zd|7ktOWvE4aBuxMDm^SjsYIbZ?GhDL
z*zQ2!IEmT7UIhZtlQGcvh5)zC3E2N<5TJcK%DB%N1Xsfp!|ZtBZ|VIM$Te^)a-S?B
zLz2<LSDc(763_h4mzIRMn>Iqf)K#A@6+xx6x=EuLVNzlk!$g*F+W8V!*9#2%b~n&{
z+<Q?cC>XjRG?m6p7j-q|r@{|kCe2;0tnL0lyONROHa5uIh=?Lqi#R|~8_WB&3xLH&
z*<|tWrk6bppD3J#J^o=^Q=Sg{ty|6LI}#72kbD;e&IB;#%DCM!5Wbj1-&4A6VU-Fk
zYYRKV1V{QZivUD_-IDR|kmeC;RS`m>j|H!8fnKuO%v}23RP>Uur^xotjl`AUS`v30
z7vEf^3b8xiQ>j(LcI&Fh16#MUF95av?kkEUKZuf!{V%X00x~fplO}do=6*=MqA8u!
z*+^i3KAkT)dnQCQLes1uhEeb-V!94kF9oHnra6`)4>;ynGEFD>w;7!ySl9>Tr%0q-
z<=fL_7F&vpabuB8BQnKrpR~1XIt}Jg+!}wG(WSMcu~!Tr&+FS2P9l#AKi~-V@#L2_
z9Th%mB4rBUk^Hy24@#@8+b-s03ICScxYV2`5igfjCqT9&B}M*>ETnc=L(5Hm{f~&+
zn<v{ePV5qk_2WMUAhnPkU(h68$@-+Jq~O2C@aB*Y(W!f@f8Fvn2V<&*>ht9Y*XFZu
z?a3fL2m>q)GD29bP(jTyEC8AOc!1-PoWV&~*22WUW!{qOmr?K;9WU`3)s4*auIV23
z8O=fJr7DBL0fT|B%-CgG!~$3)%yx_U2d8$QqYpj{P`>voxIql=ZJ_ws8j<V>n#`H0
z!b7k=XnhAtbCR-wqIu(YndGaB5R8&=)D8K#xI~>^a{pOytA+CwK0xsOo)Y<ww?^K(
zh^sU(_@sA8cV=%1D!y-~3F6kv40hWhv!id{Tu@AuICx>r%d<pS@71QZR8Y?)t&d{8
zAMMCpK5;|f=Q`#5evJT$Lu*r>K?5MPq~|L2W%+0FN)0>lk$rfP?Vh#6N<39Txjk3z
zqI=_+otBbW2ai6I96)d5-)SDF#?^1iasyrg`*1y++@uyY*7fU?wrhwcxuRS|C_U}=
zHO5E_@OysRquAPwgl!WC!>aE;@<yHdWZCwkK~@6JtRL_ot=sdZ1%g(zuMuv{a|LT^
zuSvR3M(q#h%HF0q$Ljs$8?xyaWg$3!SVnm9?Df3^(1##fp8#1N5;o=sa;ZC`59v)n
zG85XsXKPKH@(t(Yl83)~)wVk=e=%wNI&lyxn)OwjPNv{eoafRDI3l%le|l`Fs<X_h
ze`B}Czpa(F?~>nL)X&Nw{@loAX!_VK1f9{_jg}y7?TzZ*X*BPSyR4MB-d2UCIn)rf
zE|h4OA|eAph5^X(04Rq9#c1AEc3ZQ}WPkHxXTj$K9T$Jon5QZ;(aZ&MW7tS5R1DZ$
zQ3VbQZ5$U}6j95uiaZz2u35U_P%<u!0*4?0vY?|$eqH%N`fY8nOd8Vn%bCvLFc*LQ
zA#gl-8eRdZ<Hh`}#rv5~{h5FG{K$(9E5BG?H}Rye#sPTLMnY;8>}&`m-qvR7G`|wz
z7{;bneg+FRi5R|zbb`kH=znCDylKNGcri=(PP3f%?Jn2+<urY@R~*`6JQJZ|WlPbk
zk5-Ctwpg7PJVd5U2=juW=@<ANxU)43Mqh$ma1!T7Kxjb>w(N2L?ahSpc-`#V352S>
zyZtmk+65F3(W%i1qsDrnnmQsXTrOPl_4aSIoZLS!CZXlN|E<k<nt>{&ahT44qlDKW
zgjYa~bZ|yFMu=R{-;M?so10iKF#Iwu&tS{TsNb3m>ytZ!pbJInm0RbvI*}hEjmO40
zY8b6TZt@C2GIx+G6BUe$ojZ|b|5y=?TiXDbIsihB+RWoj7N*|ecl18K!wbP^X+Wui
zu5shVqMH+cd;)#5<Lse#c!?*Fs$$j5GL|XRqi6xgzi@bb!IwK{qWY=Q1l~l7d6$9^
zv;<me+{4ByiJZLqJ{jmVd<xXh`Ou(r`8!dekR?oJ_^MECQZ?AIfKi~ujUSHZwQ(`l
zCxDtxRP}z2V(CEgDPOd{6Z-biRSF9;$3oz~HlOj>-j^u}M9RvQ;4B$qXR-(Lp9!%I
z#2b_wcS1_MS-IGmGyMegFEJd4wpLEoxMNO4WBIcGGPX)O04KYa8?SuH^b>FW<ML`q
z!{7HLp2Umv4;`7sIvAUsdQl6ZcaXcG06t2$Qo?9ifyEJG{U30FxE<!XoHuoYl#cN-
z5T+m#dXxh5m<nA3u9b$0Y@b~j{b@SJ*W1CB!@2so8#<FYAw>(veH|k^_1Ftw^A*CR
z6V4^+vx^j-Mg4+Y1#ZT3KMjHXsfp;%^inv#$X{xYvWe|8hsf2%WH_}3kyLew01)ZL
z25ctc)5O7+BsTX(4wtiTKS#5FForc$@bd1r1D=8BE?!m;i=vJKJnWM=$<ir6-k3E3
zIV23CM=QcuphY61v%56gc5p2GgOlQc5O+Cc6|L3Ce!GW01je!fW^DHX>2PJJoan6P
z>OR7XmgNdp$_Es-xmsmv9#md9V1Ue}T^~WjYp|Y~_-#Cr`?o$ZbU21qYyxt>Nk#!n
zC*=nXMi>GvZQ4*iJHn+W<0y@Sj<akESNd`@;z4E~;S!s4{SP~rauTjcr<Kg8^yB)W
zJOhpCH+iGW)CJJqz@u`pSF;9o$ElatXJU&eJO?t|g>1>pqXb1IV>2c}0N`4&AP#El
z+^S&29}9iu7+;zKGJ`GBylB!%oPObamRZ<!5UDb}Eu2mTQ05=n6KKhYu+$+iUsTDx
zzuv&HjkmxNjn&51k4&t+C3x&9_|!$P@NUE^zU)ogR!2xbsrIXJyUoHHdX!ORArAuU
zXAPGNuy&8cC(5+ef=p~0fUpx{O@%lS`-CznHql1d*a_cen1Cj-S~z7I(0SLKpMfiP
zWq2ZB4w!2_xfnIOcgZ8P`P-DXlb6&5#P>;KnPDk~ZX*Eu%0x5Tr0ek_K4z66X3L{y
zOA^!UX=vfmL<ci^XXkqy=71Aj78Q*&LcYF3EaRcN7&o-YY~_&#98Yf^#eFhcaNk9y
z6Q3Hc%!aDmOa72{)mh>YEGtw8{+VZ{Ws8f@@N*jqGw3xwES5Z}(_wCuEHvF2JxJi6
ztm+|&aSu!yiW@dU?72Vla>_})$ZB1_UF#5{gD~&q0@61y`e~A|LQsgNF9<{1?Dry1
zLv|l-K_e^xk#(j4;)_?rFocqRB{Ya)_nHB&d%jV?4ly1!vfa1#>CafY(J&gd5&n1|
zoT*2MZBVyaZ9OZS0t>x!jC0a*;4-%ZRfNcVl+1A5DQ2#Y6t+U%t=gp^eSgt*X6Ufh
z_~!MLa!=(}xCHs49&%mrzzGy30nZ<!3<$je$He(6%U4<egW7g(dx;Gq?nhH+3dviA
ze2eAmsD}TTxlLn^tqf}h2JBMRv|;e)VvMVBTVhlQx<IN0Z*mTKarcH%o%!)Q=i=NF
zUk3ZKT2>KhsF{*yBi9lhiYh+F`RE*E)PjSopsEvvzD`{8>n87T1U$76m=Z(sys`v3
zi#*oPLK6eP%h&LMF(}lYr~D5J#DLIwb{XwUO=DzrupVqB2*eT1pxO>o?hcUCk|0Do
zq9h!N8pgPQ4`}v1?|tkc9FpE!ZFQW4Q1Ncya5%)rvk^iQWpV_>ubU!F6zEy@CUkXg
zKTlq0_I96quly$%J@SPZ8^K)*G3e2wB^{P}y#o-yBwY{tfzHl`A)*-@!kPbA1T8|W
zv(J^Yxyam_JlRmV@)-s)qCAqPltDU@GePg8c9}=F=6%L$O0Q;cvOp}Q@}{P3r}jzn
zP5?!;DDOr#OTQYKze<73WcX9LhFR|exGnQRqveW1|3Bl&-@}ifvSPo*1*u1gtwpd&
zzMz4Cwm^rn;Nzy8RS>>zl8xgc+vKO-&2{Kh^5ZZ22TpCgZlgS3a<ggl#cbwEnrcEb
zrfKt3ogv@$o^e4Dm%JS|NBG7A(@aaOmttX<8JCQM1MV*T{*DCHhU||MkzjF2b{)sd
zYrOXrMcX4Vmfo#ZMXB~@js@2|Uu93_BOhZxh6D!XW1&(D#s{AQAj#}t{lo3-J03})
zWRqZ1b;+J4+vQ@w*)UpdCa~0!^!U+|QuSp(VXLZAUD|nbbIz~(+kH8|6_@|~bD>vt
zA@ofF&g>~r@eNEZ&5^~~=7WywJ!_NMRMVnjOIZs4lGV)~li{!1phR-dj)u4(481fU
z<dNtCTwIwPzBsyk%oGR1`pg(i#7|x=*VUU#=IU>|&aItb-+}mNY>G&+*o0b{<M^0O
z967dzNnvaSvL;t#F7g;g^r67S59?_{Hrkk%FT|rr5u9+|lx9f%X?<f}GhbWDjwH-g
zQ?ApU(6Nv#%VAEkEUh%Sf#e+*9qI{y5i(pXvR{U>|D=@Zvy(U*u9E;LQx!ksjZZiS
zwSrp#Z4FA71GSP+Ts<(04?`z2QG6w+)K^oOUp+y-=Ba8i51p(l;2sLUP^6*z9nJmv
z4<@nO2bk@>QBaaJPU!BGxWHBbsS65RdBGfqy{1gT-oAEu;lXXKN}z}Nv#%-u5`D?~
z&AF0MBZFT7-o7!wRFoQpvYK^_Urz(G)&W`4G8~#!Pq)>5ed+gxf&+yzN3_WFzetfH
zIh>z(`Zh7!uNsEenZ_5>gC=@c{l?%(ZK-S3)398<$zyFoC(~{V##&R8E;ObW5Zmgd
z!9C3)J;~dB6OwL^sk1)gXu<gaIfaSPpg+WqdfkKjX{IY<s`w}^aWRN3#dZc}G_53d
zh<q6&M@IA=roZD_O(M6Z6=Soct$kR3TMU#<I7AmaP0p1#0oi}RM37|J8~ho^d^UuO
zWvk$r7-Bi|_4)jNfwTXMHv{~CfirjgJ-EL?jrJUH|1iY@oDu?${u(^N!3Bzh$xE?L
z!A;pT1RM=@B(=oZ*+3*}w1hnw%R&;=8v-K?hp6xwMSOVC7*5{1yE?jCx;jMcn>&1t
zL|IB4YEw2g9B!P?0j6|48#+Kz)+60U?BGsX|C0d6D=-Wa%rRA*Te;qL@&CokI7-Uv
zqgvvkK_y<nN0O@4QF1L{=^lRyP>t$b_yDhA22@tbUSvBFE5Nz7{71~}A{C=3P-@$X
zc*osFm`g*Dv_<`Cv;|4#e|{EkSA~H&mrL(9xCjeez%~M`C$OZMEaPk7?r1Bb&kE?R
zJe8%*yT%G2tzZw^Nvo6`cq>89|B1Lb-CetBiPpE{cZZaD&4a<>8J~OxWt17fNL#y8
zdDsOld(hem2)#R<3>_kvFa;9ttnoK)1yLI4Nu2kX=33poRy(0uJTAip-*%a9L2#~&
ziy|Mf%+dqo>dp_)<VK75x8jS@XzD9VT%kXLcWtuZY$n-a(lrsb{~n>hY&<9Q>?lNY
zz3byAc&KK5<p>0+F6N)vjxF+)?{O*lGqw%IyU{N9jht)UX9s;52{3Ct8Ze7{1?eZc
zh?qHu0Glet72_6oXM)CO?6*6g7R|P~n>d*I6p;bE`XBI;ja2L=ERpaaNFhvWQ<6EI
zLY1ivzJoEVD6wgMz+ystJGz34JDVzvMb|AF$6E2Mlj?2o?$c^73&Eg-E_TW)NpBk;
zNluF53=+OC=1rK*Q9x469saln9it?y?Z?y`*0(966U32*_0&@dZGfSGe@Ho#)i&c;
z3mGsvpiOILFPrl=O^|hoPjBp2@w+L<rQSvP?VS@wb*wHBXa)V*0#1Leo4#C{RI-eA
zZj9Jg3M-)$Q|gG3p6jw+4GTxJ*j?^x)O-7?QoWw2qa40^MiCJ>0Yn!XGgfa*d4(bj
z7-%7M*ASl^FTE9b5g8>(UF>B~G#cT!^a0p`qZU!>i^~`r5Hs%}Yu|Gs-(xTea|8@n
zU}>r00y^4$=P!IU{p1btOZFcn*xSLOHBd7NcpsDeZIT~6kqk&wz=U7nQ&Qou=m|N*
zX0!g&4tgCm*Jf!LWse%W))GjL`(F$P^LVz*0VFsX(sW%WVe5Eadv@HlUu!D|3ZP}4
z$){JG+A7UpAFDf!`j}m<Y}+VYEev6iFfEY#w6D?4-m<tmW`~@!a5^mrIUVUt%ky;f
zT)He%8jZqZL|*VZ>SeVYp~e&M_R`W6$-|^h7nu%l(kM1R7cJ{f^nwlf30Hm=sFBkj
zG+T%+mS9O@QbgEz6o#BkyOqLQ1=#m(+l?VE2|Ww;x}Oz?JGKBHfV0at<Sx0uwII>I
zPlG(oeC>V4#J@VJS>xX~_^@?k$Ah#FrVP#Y7>DbecIIJqW(e2`Q`GZy@(nj|375#{
zS3o1ZZ?~-{Txs+JI`K&fhVuqMz3O@#iSxmBI7Dwqm2bDi&-X8TCff}D0g&+SK3*OI
z4^AUB)X+&SyjVfI1UKWRw!vsn%JV`bYAsy86`IY8TR-y!$G~34QLb@4Erbr>$ZFgB
zi0+1M(i|#v$J9v!x9DCTbQkm+J-I%#dD%`slSht7`3x3RX&d^qLXgY~L|~vOWZidI
zM21z*FGFbkGA2Mf_O=9i0C@S<G3vukchkB3A^gHYK+t`W&=Lbg!5Vpw?+GkJeM0f$
z2NWt7&`W%(VFhgU*b%cm2h=uTHl%#7=BhU=ZK4Yj&oavxs#*~05_H$$v4f{FnMOjY
zk|2R#VDF<%y8QGgW>{_rD!DK+T?*Zqi<2g#FZ^2SXRgaip$={nfTxg_z14e3vw7yA
ziW6P{J+l?^#-5tg>_*Ep;{rTs-fA+`?+D|NkC1#4=dSOE`QS};5FGS%Cm~*G$cnvI
z-`SGV0DmEVgUf_IUBiOsio4?vnnFz<O@X!?tcI6B_nGV8#*$bXceo|Nah3VT@09?y
zvGyJ3-Weaq7NCa(;P;dDo7`k0`Dm&W&*_@l6+M>Qatfol_thV|sbO^nTdJULczJAt
zRUT}MABuL1>ZyESi)T?a=-P(U;T&4%<(GUfE3z01p^^qmQZ>oCX3S28Cn!ybvfZ*5
z;7+a9smu={zhaC+<7;%FuY!Y89w*&xWRlDkW2Cd|6ct^G06)7LX~ay!<M}X{Y=}>v
zHD+|xA%?zZaAwZZqUUhFKg~-H|L9R$as^h?b~TB-UldoW4p!2yYeOJA=Q-m2-jKgy
zHfrN8`|G0u(O7cKx(+*f?UWC)(<~1q%#emd0Qz^8{I=wTRi1A`&9M!80{VlGm%#jq
zj?SrImN=Ls9AJ!iZH9}3OmrGDtB*;Vp7!3yV;<1*WnzPNW0Uzg`y)%_1H6Q0FR1gf
zhktz(CtRvZX-VeThIjQN=TYg;li@G3E_0qn#Ql9pL+NyQU%Xz!L_8H3|HlNEDH|sh
zA7z~>eu+@(fvP7l<PSH7Ab6;Au-3q2*g_JM6j~@H1po*`ab+oG&F>+D=5$O((2g8}
zhVX+c+9bJhaHV`QFkS9k0gFHt#ECxCmzeY+jjIkS@beWr`Pju8&vCR&Dm3sd+f7bK
zU-`{@eYjiQu2LT8@*dfJk<Yg0e`8Bm9lxU+{fJj5uZpP~*_T)J@UCfQa@qtk3PZws
zujZ<F7yz!IK<72nWb~+TN~7}-g}oq?S`%ZiZbVri$|Mbxzg4Ao3z9}E@DaBXxAhny
zY`DM9>}KHN7e8d^fR$-)H+pnb=TZ%>GIcVhZm#H93Y*^1QLqW{4(pJefaECq!h-^>
zq_dZ8t7f&U({$@?4>VU;hW?Yz+1J=_lfQ%s?VCRf%&~8^WlC0<D93(<hgRwEP0bs0
znoj1W<d2R+M*ez<|8dl`Q-$!RMBl$YQ12tv7yPqc-R3D1F>0=O@{tAh#(O}G65dbV
zu=~y}%8K0rOCNn5f5)<Wre5%p0BaIoWMYH{D^0x|I%DKl2KJfL`x`^Xxo3MQh~OxJ
z10Z9hPHyYxiWfsM0BdW2IjZ^k97q)#b6G>KhF*}(mh9yvkR%hYneS2l<~uX@nsB*)
z)#(PlH9rh{ElLb?X*)vmngR9dCy()RhY$`*fl&dGcXT(0C9PDP6R*?H-j1NL2IZ1E
z?(<7^uEMH>E_rDaUXwebTKptti*;sL9q_`Pr>y7=%Hxl8Dt3^5Xu&~VC~IuhD^Lnj
zpK~+4le3kbm%C}$1@Lk266@{)0?EHA)lt9mjFI4w!*=<ln0s)-!6c(==o(^%JWHfW
zP@?CRz{c(??U*Nn+~|pCEiS4Xhq$qe=fkacJm;tD!;4nSA{1D)Wj+fiP$H^N0Q+A?
zDabcNBvhQO=3M1};(Mq@1==%@H$n6F+M)5m3#F_I)=Kp;#{njhB1Al{=@c?ZauVG1
zqVhBN(w+_3a?&4stj{=ho(2x_mPq_Sa8j3sdy~=@$4qi=l|21pdJ~r6hs>YGu2_qw
z1woe|c?2`~cezJA@p1>}T@%DWz{p#n;F_1yEg($wdNo6XgTu^hjD3v-@DwHc3#ZG{
zEJ4``I_0RX0f!>IC86-E-#ggY0}*q(Uq-#KS9j%JG}JK6>*I#92<JwiZXc<-HbmSM
zbE~{tgJ(Th*m9fIG}Ti7ncl{TGoKk5rGfh>NX&?*Cmg+k@ShJ?03!+#K#<Z*j?(1j
z>f-kV`2R^do(C`!JU*97`{ZE@CT8~_Nhhv->ZkU7x|~iftqpy{(i_MtmRbZ6@<Z5D
zK5=h{VDK&&?k&<$Jy`v`5a&(-SjipRrqzuvn37uzOe6%OK4I475WG*MdxpJ5UL~rm
zG_#Vx{R@4CcokLMB*3?@Wgirj=m(L0IVt!sME4YZ7#i+fwm^E8``z_pJJDB0@Xxa&
zDhS%GstYKOq*-uR5_0W?ojU5CB<7wX?j4={8{&B-+sP87nr6#329Af*%(2{pg-nL_
z#?c>TF|EiGye!rhBYnD`zt0R32+4KpAesN;Wh*|B=ucYK0o>%LE9@)j*?qpYwhnsB
zm&XtDxA`Y&rG3LA3vy&~{j&NYNvYFmNjioLo2fh#BDUhPROCz$1?#vPBdVd6pKN$M
zJ^a;7V2y+(e=9R&f?bO81m@Y<<S~#Y9rZh~BI`uQ%j1IYYc8ny1o?em&xPKk{uO>s
z955OB{VjFy1N8U-{9JteBL&hn;Orp!Oo>;#&^*zQ+%gpo{B~g!Wwt$PB>+$9o4P&v
z??V?>-Fotm!4?-NPfhZ@3#bK(6cQWcIilK$t01<6&PGKQFGIk^a-|xEG#HGVf`~5i
z@8d^bi$1k1_xP4dHr|~QRNU?Lzo|7A(C2D)b1V5~zyvk=i}|Imx9fxTX^`kF{)#ue
zZCB`6Hv)eehq(LH9eIyOGLmumC@$eoc&7QrPT4CZln3L_;m|%1njqWpu-$09kBQyt
z8c-!%`O_N$2{2Eq2KKP*W#T0=EY6=kQ9aDAX7s<)r9mrLDrm;713wsBB(&$l)!N-$
z{BYXm035qgSZT~Ya3Wx`OSTz}o>~+B=AQV3EVdj2XxMBXUbTVXtd>DE`6^B?IR>Q5
z%Sba^O}7D;qz)oZ@8(=6u7l5{N}LzAMMC;r6aprnbm2&G|IIiL5AQmaMs)y-Ley&g
zAdS|mZwE7Rf<kZ#B?ej)cr_xU$AQ(}gc7-c1f~__e~f~>Y@*hsf@%oXrQJ`E@TY2}
zpP+fQD=E|n=>ii9P-S(UF4OJ2AvC#P_%*h`axHLa)YpJ%S$EB(-li+Cy6Bxl(XTU&
z-j;v07ruG1@qb)<`ildK!IpNls~QT3Z_w^=dHl&&%;ywO_cHo4Z=1q&?opA;Os2a5
z^?Kil*bb|G;=^E*0aBLU=W=x*qa7uh)=^Yq6*f6PX;8iPlun;FdL4X@mEgFHzjht&
zy(={g!cb><GwvoUw3&okXITamoTXY|KAt6L=-^DQMu5Pr(X@228-=CV=cq}O)8&T{
zpH=(d+rLab2~AwoT7w$DKIgGqj#6E~&1UGj@6VP~xY|kY%0EQ!hE6MgMyq|Wf6<)+
z&ZGjE#UB=~wqvUEj}|1fyXxd3Dvy~M_*Em)ETHkglb23eSoVXOE6PdBA6C@sU;IkE
zba^%2@Tp83(tnE-=zQ!X!S`HPR1dtfUa02ZADfGY8Udd#3MR>(II!6BRwZ5mEh-mI
zQxEU-`Es&EOxB9OLnu}<GYIXGon(o=(@uK?YMIe<dhRo*Zr^I7<#~!iGDb-*ivupM
zU-2@Pt2t}M*#Zq^FwWkSsI<a1oyR>5rgtZWh0A|`JYYTi4Ju~MOGo<IRMUOwSZ(d<
zArB^q#IC$n3rKh+;HGL7Wyxy+r2GB%>R&upNH>9vf~@KludT0;INKVM+f7qk?3%x=
zv|czdBi4(%)eA!|WUL{s>G`Ryso<6emy_zhBQ68Dm@43(ivJ4-J;Nkd9seF;u5)wc
zZ6qYZ{%%H}VGd(S<o=Zqv1d7NG5ScE&eoB*u77xA(cpHI|K!g<#|fz5542sAyVuy*
zCH#aNYQ7Y=)p?sl>qw;AGrwojaez=AWMVaX3uMs~c*B^pN-4-xo{jw)VoNV1#P>t7
z_h7s>cmA2`RBH}VoGG2>?f~nl3w3w^)`S8zfh<y{Ob?bVBn}D|GO@!_W{KUptOAYz
zXMg}pfB-W=?fK1>j{)FN&D~elJs>eY^uwNjVht&3+2FEz3#pqfPr?umDdcr4-3<AV
zZ#`XUT{EAXgr}`wWu*{-CrD=TUUlUOon9C86m4=NDr7RN_~NC-#fXC4M}C8-X_vW_
zp*v&j$(bBOZ6|Sfgfxv8wr*;b3Jg)Mz0Sc3@~7DYE<uo1pMW>a{E(**!KVrVVLl5L
z!4){ZV^HywjXKAwUAP}dVKBYgOditlm!14UEelk=u6>hGz-qmY8>c41d&Xz>62wNC
zNV5Wr_-emIo9uRj;Er*L49s`2c%TLs^9=1C{W7z{S!J*mCA^Wo%o#n|C?wuopZGg1
z*|I!NUUN@<0U*sp_w4Ux?Lks_(d04AVXN+W{xDCWRphC=Q6-skLdP5%H+EjU!hzMN
zZn&QoQ~r|i`GeyOVF^J-4^18EyaQb7g3b5|l6*X7bI0D&N%I;p^Mtn@<4rjb6L~7-
zwy-?a|N3R`FQ^_l#4ZhZ;S+mOZ!#Dl*aXC3%6{BA1Yr9E^jHsrvkil-Ktrj+K;%!o
zo0Y`CWvQi+l~v;(PJ4uxf4cHiUpAPa`WyeH(-1d@uN__pv)PK!+DJ3V%akDIk*49w
zKJ~(Z7PdQ{ichiCiAJ{MFF8Tpw&c_s%hJq`Ti=(jjsJbD{cyD`earNV{MI1eI|Ji#
z50E$_U8)XGkZt|#cjRq+n^xo~GDW>)pWGDX&Cs`Ksi$m&*BO2g<;B*35hd^aBie6|
zXNL1G2|`}7IFuDGzkHi}36hs#21lUJJ*Eok8$BQTF|XcK%b_71&Q3CAUX@8Y_?xh(
zd>UyCZP(elDiz@nIbZOiBXa9}G;P8H2JjbgmBU`zFKeP0PN(yahKk@(KLv>cR;zUD
z?3Cg#(LBR%$!FU)@fPd`=i``W^QlwOUv5_YQHtdx%a$`&?RnuS7Yt{_L^F1lJbE^*
zeh^`+y1;tB#yxsVbhB78g5SbbE1Z(N`(o%Ouw=Hz`5k(L(o~YX=ro@xla?V?sQ`=8
z;zSBZqSn?GfS-?#i~C&eMB|3(zPu2}Z)E90Mqs7sa6Wqe5P0bk0ZX5A+8amVHa@uX
zDLa*-USm5C%^-St`LXPMS*T`+xNDr`Yl<&-D3}KXI(Tkv!7{to+Fc5R^S+o$ZVC;Z
zeL$MAQ#}60!%S+;pNiigm+DzjAOO)DLjr>4`edF31lI2E614B{9K*K3LZ@DCpSS42
zx#f>CmM8qx#h@i|>(uQMc{P|GF6knNsm@lQZ$LZ5;Y5Il*qC=DQ(%YAgknC}Yg%rf
zs7GC2kbwURIoanDV|$839XAmQXFp_nQqT`LT8}guU;QOPy@2(Rdq?|01%QO_k&+lu
z@VR?<Ukx3swkHNb@-*FFpBb2WRpC@nWbBZbHUDyd$dYZx`!N3|m-|4`wA1wLeyQzF
zBb4S3wC1}*!)h!|hLie&Xt8VK?VzCrVQO<johFNE>*7m;q`t+SfZj1aW%?Vp9;hTq
zd>OJIOYDhcY0{e>fhTH%&H$~}|APL-zs8Jb;bh!Y08{*V8B~9ceh-gT^|M(&mDS=*
z6{bQ+f%2nu!*VSd8FE3h{RKvN4K7kl{4(>FUuVVExG;Ogz&n<Yoe8yg6;R-Rnh;GX
zhH&%?gK~wvuXS(6OtpYgH-5H}`Ni>678&FvEzZWf3%l}L*Fbs(5#Y>|xO@*Xo$GZ`
zH`DvJmaATQrl+OL26~GBtYb4<&yE%A>xS(@d#x*^)5p2$9+~@3rfLE1DnQsd1nk(h
zy)=@QK9E77n7%f`qAZ=lRrIN?6&JDs@>vd08J=Azs@d=Ph&LuNNf<~+z+4q=TvJtx
znR0dc&|_sA7K3L&3z!nmOF(<K<@r9T@rA%^9M+6$26zXzEv;i5$K0};vy^61po!kl
zC|#N$UWCvEnb}d1r)>8dh?eNj7PSn2%jo#xunw$KCw$nRBWUd7f`>xR=kJ$meU(|w
zpL*M@`ddH&eS~!|xY14wS@2$&UvPftIOo9)k*Cf$SY@z5fYJiP-C<GKRddE<3-)2u
zEm)%1M{u^UM;RqX$V>t#d(WqsKG-?yoZfabNpf6*7ExO0KZ$MGMfFA!CaFgVbf@VT
zDJDF4dTc1Ph3Mb1I-n(RU$v^3UKgfyNN0Ng+aAVi<Cgx+s$VFMWaT{ICyhQPj?3M7
zd_JAG1}{4W5SPehD*)u{Lu1hxla5nm_$zP-%xTHL)^RR&2s!oM-89)wwUJZ0+nGRV
zO*dSj7aTKc`vo@aWZ0tOe2(FQG9o@vBmVQ__W6TO1nbyh&J$RnV;7Q*ec6~TE*C9U
zQJ#Nf0`u4&qUhU=oUWQQB<}R1&pa=AU>7kT4plkx+rI%P;<gq8^kze0e^yjt)zVEW
z`W7$1PD#<%5~sydjr)q2)LegXY*R;~>I`a%+z5v_8%)s&OH1!cV~ow>Wx{>?Mb`aZ
z-9t*j4t%b1sERoUtEu;BR?^Gva`~>>_vp<~)6$F6DcQ%18_XZe+U^AgPK%lMpXDdP
zK6-@##Kz)qw}R3lPQResJ_PI^V82_zlc$2zYAlH7Ov`1Z_%X0cJOs(rwUcWaa*?pd
zqR5R|5<^?uBhLd4NJmh^jU;c6dJl0E1NNNZ-@6M2L@nmp<&!LKgMy4DkJ<B39);P!
z&WVMVT_D-cvV&Q2qt4roW_gQOVW-#%bt<X=HVxgaAcRbb$ev=#O6J<KNDG5@qma>K
zMqoa^`I$#FQ#Z0H(qmX*J10n-%TdI6AG(L2XWMd=$3$0|a;yq{N~I-tPuH5z<0#2;
z=W-YP9_D-<CHMA{kDjf6msofLor1&22N8tr&@&wIaWKg^t3m{%#nh)@!&30h(uoNH
zasxR%NWuN8!9N?REdwbe+7*dIh1D!d`zbUIH}m4wO;0KaV-Nm^vbPS3>)X~vY1|18
zA-KD{1W0iA-~@MfYuw%4-Q6X)ySux)!{e8|_q+F;d#dhxe{{`WGKb9S>NV#0zBNYW
zetZ2pffv*O2}>$h!*C#Y#B%uYPoWC&n5|3QAEE@GZz)y1YCeD>9=13bA9k0+x*D#6
zjG%qH)NG4Tp|YN@q%E%cLJE9ojoEe{kc$FK{wkPxG&H`!2DIV%EdTMbIp{vH^Q0TA
zB&`*tS=+F3jj&8Qus;`^Gzn?u9i3qi`0Uq)M4!vph&~)Pfk(VcHtOy3=qW2*_)Xhv
zf@?Cev%c7PbepKyXYI2j9?o9P7Yh9pw_c$x(N8W4Xk2Nz1$#7-!=$0ZANerNLF{_d
z#03NEUMjnDcc4w39e-F_cOa_%pAL@a&T)L)!t(KIu$n-XJAm-BleXsJ9!|$nD3neK
za#z8~D_&E>1x^~k8w5g(+J6$96_l^m%B(b$@h{hhQRTC@*kY1gxhh?R*e22c9sPQ^
z2mas6EtZ=h2*sj2RngddxcBsWgn*0@o^ytVnR6^r*cdTSNT!eCv~&!cEBwSE$DbyV
z)Bh8O1}PJ?a!AEIr*qqaF?|2TGK9W+llu`0r#fMelRdN5*TE$}Rpu*eNbmFZ`M$x5
zPIJFFt4=*s7NK$FXM;S6%XrN$-N#>j2C^KuCj278PBa&GE*uHsIG2{X9w8+-E(1Jt
z6(fk2cOb}3J01g|f>+8Jq#9Vq9N~sOmXiB)XfGHg<qkd3e+Ej_H}f<nAkbz)W$Yj$
z6lN3cH;*u!=wpct3Ssu}MEp!Y>wj-wX+GU@E8(D~xFhMIVAWAyf%t24KpYiZGKCwy
zy0JL>-~USRU^v^oUL7~APk2mGkHrZU$P%ags<0V7W?KLc+(IkKU*}L%B-dF9JY+F4
z3Cn9TY7QWG|A+3=HoVk?T9P~+PdOD5qiDYsMaUNI9r4LaY!)0H9&;qL12WtX?$lUs
z2c5jH9Sl!iiWZm<Hf4PKIu0QZF{FXpf0{uW7!v8q64|d&D~id<{h8+hfc#OByqkGM
ziqJ&DMB@$>@LRP(mVKP8-;+D#rqdl1-LYprl#|tsf%Ef?iObIdT{J{M*(*#RAKdx{
ziwF6`klxxvLXT*i1asa90KComiS8R`1`**SY2xdtS-_Lut=1eu6EN(A%asXdE3S}`
z=BnA8V$suN%ph?GUt^Ajlm2m_ptD<FKvdvjer2W-U;CZ7sg=|L+?79jyreixNCsfd
zEVJVgoV?8$D#lX48O}0Ne#72Wxfy$LPOv;hF{E#9mQ&#@8qf774X8jvY!E@Ao2(p|
z(9Sa|ZkQcd`Y)nSF#N+8Ptq1<&^&vTrYM_6%hI&D*}C!TNgj4}BxZkluit-|YcHOX
z)}4rc>z9-Jhn{q8yPjF@%pjC?tr4`N)t5Tuxk$HC(89|#1&CZz%H^cQ!*eq8sL!B6
z;WCl49sE@J(m?<u_o)(zDE<@my%U2)L9ZAWv#Riv{&^gtH)eVN;Owc}T|wIuD1J{R
zxAh|ae8_eFR8?b<E$t<GD{TGlcF8bE0$9KiP>lY~@SYTZUe1`1A(An8pv$<{boZG%
zI`%{9!dn%xSlk#Dgm+R((8*+XTX=cxN!mIj*Y(kH*Zct_6z;0G(#PnJziW&{IyP3W
z7<Lg7V%iBZpHopWUqq)->>UGi8xkQI{s@nFqY@pO-=rp7Kv%<1{|c7ii<{IbH5P7G
zzq;Rc=cwLgJAo?TawkO>T4vU%1cM@QguV}1*-%|?88^<FPvbq_$LagEOYWhE(3$^k
z>1&_|gM%56f7=Ekw7FI9AI8tuMAa^Kem=5!U$ICRya%R~6PPyQ<E&~v%%fS4oP6!t
z3Y2^^DgSVEj4n7}jQ376_W-F5o5!^bOt|%#Tl-jnPs8LFHugUkC|}?Iw7Qf-Va-*C
zde5L}{336LQSYfq`iJtvNvnWI+c&9M&9CmV<N%c7Nq3P=A!JQB0=0m7zBK)Z@)Ilp
zYRCy=9l=J7`^7Skolppg$AXKl9}&t1K%jq1tvwF-F|4AlV38A27Q?$GrpLJA#jrE@
z@+UjG`E&zCTw2~nKtr{n`KgTCFf6obR1ZcDvm}T}IlrVXuBudH+BuHqQobaYQ31=d
z2k1YI_RalF{1hOusk9TEwZ@Rl60W1^?V!*F!yjEslYNLI6W|YG#w2Ch@y09|ymeN@
zv<b(Yr4)`d#DB~fkxP(L^0Nx;c03SsEvNxn^+%*Y{8C_{%O`~%D#d9s=69%mirg6E
z;SEUhC>IWeqgh(O7MZfH=ZV{Dskc=CC2*ZS`FCI4Om}HTUHmTtdfGb4;)dT)?m_35
z)<Kk)AJ&nY$56Z0UL!T+RkQV}6Oxti-Ct)<k5~Y^4H`Ru#O0o`q&@gAa*=lZ&@$o9
zqW)xz_{-#N!&n=R32XUR_ymU8Y-F;egDd4h?;ndVFJ$bNJ5!h+9}iTrsoLY>bikOH
z?VWED8@uZDT0`T?Brax7v<vM62UMHzqB)KnSYV%_%WB($x-rPjpF(VqABbo0??LgT
zoPRd6r;P0%j0_@QSf*RZIp$BCljPb>jnI2$vwPdWzJ=K1700&|iRHYzi3)SCp`5yC
zbID+nTd%3;QwORO-O}vSjEv^@T?1VXU%JO2fkewP5(|I_H6cNAfH2rN_5#kSVXXTr
zO#4JJg2InLyVDHVd+vRO1GX8(3E0+>^uVVjr=QyghveB%m5XL!wp7ci)b<)-jK4V8
zx2T3N;@K2sURxN=8>Y<a=QZufdPQDhb6M@HAX(zNzD{aDn(^1e&wH7gBm<>QRbUcP
z@k?EQYeK5Hva|v1;oD%oD8o{&n{D(F)TlV~G9Go9a5XOAI5j|gx6Xe}w$m_BQqR^+
zp`xxAEpXCY3);R&1g(x2!;Q!d(yw{;3X+`UohnQVAJ)Uz8|i)#37$_9l|(&g$5LYJ
z3FKA33TESG!D=wgx8~!@rv#Q1)oq{VDzr|bb(0R$+uN<VGyAeE%J`iG-<?YYC<v%N
z^A-fBC_B2wH!66o&lCVky;SJ<;F^CI_^FXqh|`tH-?`t}*O%@n;(p1X7?HX~^OEOJ
z{xY35fob1SrA;UJ$Qg_k3AePlh)7sHDpVY8ibN@y_@;T>+S;2<AOuuyb-JzQ?UGZ@
z@`F`f$|zBf<x)-lVwchlp0*fy8>uPvwTSCsQy5=xp_pPvT755ZgN9&<@|#X|%pE$l
zCgIU<o8*}&5p=8i=<D&ek9fp1pS9we?~jcg3@g)nOo56csP?%#b>^Pm1o99N=RNkS
zaa=hwvc{eqRnj5$9M6H6R)g}O?qq`#_9NSFtP`fJ&S%f>67rbeh13!+`##GWZWH)-
zrD@F!nyn>NJJ;xWw5(i@fSM5hDq|6sW~;!Mo%TO!?u}%N{Z&nm4%5|ET0qHAW35Ex
z+~M~z1#mIbY;mTLZ*ks0C9+bX*ED?yGgbE*=@*%f`=qm6xxWC<$PO{pwnwj2zo4B=
zS${j(rQ&EtKp{W`4Bc&`X0*M)tk0~o5;SU!GxIcRaY4_QCt3%8;E|QNOxhD~k!T5?
zyNHI@joOM)9iZ6>Um{0GnA!oP6f2)}VX8HDatL?i>0P!c8{7Oc!n3jFpR4Ab;+Zv0
zoY+o{^y+bNdb5FZ=T^Gx4bTeA=s~o_ab$ajLJMCBsY2T<MVY9Riv$wny$2I%vXSG5
zT68sTjlXD6l@(1w_M%N0Bt&(evo{3F?7Yd=@lJ2aaM601tOJW4Z(g$rV1713C9R(l
z+Yf5`6k<f5K3<;&Tk9DyKV9*^95B#^4@?(ZqHo20{=$I$!CsP8-iFCz0|F{8qYC-Z
z)FxTn&4-UAfJvk0?=;84KdXi{Jls!+HCn2vo$=x;5pTnSq3bgbciGuyi>!V5BlXMM
z39UnBPrL3%v=Fwzw}S+VzN4I3@8Z3hNfeRpR9i&&oyp_i-jVH-!9B0MxL4wVg8?uX
z9gVFMNN0s-0{jRhTx66%6-Sdg&V>3#%QY<jtahNeN>fqRWnr5)rik#tB_*}Ecf*8-
zmeiv)i-{Z(#~y#b=<xDZrS)zM3yPHN)=n&y0g!?h09s5Fb(jI@Sl_3x2~oa9H;qD>
zUmJ3}AtoA#J$^$G5>AAY1>gba8WwW135^^4LMz1ajq6Q=nMoVo^Xtfe4Sfh>7idUM
zqNA{+ljq$hU*Q+?^p_%UnidqCp-RUE6i!6^%>1V0#&&m(tR_%no9~3?goPQY@4<N8
zhENvL7n*vjtN0kV0Irs8+>O2t;qJ(Iq<F=5H&oqfO=1TFOxHQ{uoF+DV*x+|J1?j=
zC_S<yEABGd(TL_K2GYPXx__uVdH0dyX4T9SWe&hf!}oL7hHW3~>+`8TPCl>@22cQ;
zu8u`fQgyJ&kfm}-*w5)?qwhmF);PfF;;soD`*GkxYsc0!o>si##yDW06>NbO_YgMt
z0+oDsV)|f+669hAxth6bZL{#eh{EA|kKY|IlosN0zg2?ljMkCAMb3G$=5?CTiHHMz
ziIaEqt?qGZ8*aN_?87k@pC0-2yG&F=;Fp{{&r39m-nAY=e>;T=JcPVEg&cThE*@#>
zW?e3(Bsoen=0$ZAk9^6hXaEv&M&OOj>uS1&LYYx-ofVqx9Phd6XP`&`UqLgsLUgE)
znYLhsE09lcEXGxiwH4!FmNooWAIknXXKUM$T@7MYX3H&4s6stiJ%n*h6suIa%msHp
zja8Gf*YfT_AZz}NaGdi;O+Zm6)(Gs9$bu%9s|auAJ6k+I3t?x!tt&z0=^@nDH)@Ud
z**uQU&os70NQ&BtJNxPY1n`BYjR9mT1G-5l7;XlR*$UPo5T@qA(g^xX5if1!#vqI{
z&*Igy%BgKj2SM<q7N34uX*(^hrVLj#*HhJxl@sZh4q&&ZrB7riBVzxM%INna2a%lg
z*<zvY*L{?B)u%A4Z*AvA(Zc-2&$i-*sEEU#-`dbA>>nXwkB>SCw5GLS>ZoDGIpU?e
z*ercOu@l>tXw1ImVwmM}H{uJ-sUDYT;iyl({OMOnlW6S>WhZ~X8$I9u;zQ6SxNgfv
ziZn~_m_4slUzohK?;u1vccBuMV_R|{${Frau~v7qgAh_pqIY+xu#s1k;j(F3+tAh}
z&DHuYT3OM+cv>>RWA;|Y;&EdwvxrJDEKbOJPuAoBfa=)T#i9%T0@b|oBC$3g@qOU_
zl}LNreiSC6omeM?ynr#BK|i!yEKykjKm=4&fV!84=|0}jh?qnXflK*XF31o0U?Ny%
z2H8YAb`;Avcm(xQPL4ZNn0S!C_?56;NkIpNfexaj=qwepg;2sLysv6?w*70ZHgc8v
z%aBo6X>oh5>DEB@%xzV|Rn>S~KDV&UC#6WAz6?=?^{R|I3(f;qyx*|5ecV=yO<(9j
z!cGOpw&4%a?mVJr=K<BAQoEnXSt>hu^Wd&>6es<~<}8v>yAB2kXuOlr^UO5(9@WKp
zi3~l0n{i7+HCmKB06rr>kxLOk1MGrTI1>8?Jp1v@YGOc{wv=(mfpTy+b<`%mt|WRU
zginN8x)j8=61P;V;mbZE*tG2;t}wl>n7O<Ay8IMqlUmqn=lj}rYdm9X#lq~P9y^Yg
zL8P0`30(@oF)h>@LcJ%A_1mA14LQg^uOLZQbYMCi#qeHF*D_!_o*<(aZ@_nuqz!Gz
zKW$IXAW8TjH-Iyo!F{kLcOdrPfglx0|7PCcpTUkLYRoB-u+EGil{;=jP;!Bv4S#UI
ze3+kYLlv^-DT1kL^y}~+CNny)kuo*N1XWefK#(GDbH1pt)DeC*CyGy@f5oVO-u!o}
z!9Oa1ORqZEWdL8+&3}fuX(uaq{hPnDRzCFqYX5rxRpV0s_riM1f38D)is9x<ZJKoD
z{IPuXSK_<O=YwwDHo(k-AoYYPYE0^1PW<Cb;HM4We?iu`%+UWck<CiwuNjrVcyIIb
zo7R6T`Ili}OKsWn-sW0o(cb1AFHV0A&)txEPW?RW{8aB~;MMtFuvz(UkN$0L+;6)V
zDGSTb$uxg2;D37DR(&hohxhN5<o;CE@y}9ieVW$z&$`{!dIQbRW&g7vxbHdysg3kT
z5^Nt^&+kDxH_AU8HO&ydeioTZB?s3er->}5pKcNjd{PSF)It$^RN=B3NM%bV?-1PB
zn<9?h1i4muSr~C4;gi|&oj6vtFx*o)OkkcHVz-*Yn#+hgLgJfwv|XUjtd>j-Tk)dn
z5LA)t<-4{QVfDEr{~A5<3;4U1tJBny)1y1)HN9-g*@-pzz5hU@rsK9^|3aTO<Y7s5
zj94{vB;9HzCnNGZUz?j=VjU%bSg=qbf|C?7-#cG%B@ac3*>rNFnP9LEIvFFoXjj@N
z$xIHF<$3@g==^bhGk13Ol6q1an2P`1v!lc9;eKr(Ftzj{5t|CY2)Z+oC`kpN26!Yo
zQvnD8cZn%f00{`I?a`@|#A7M|4zRDq?GB9hyxZ5Z1b>c-Qzt`eAtva+bete!Mg(=F
z?8@0cQF>6a3)x7JJc!<XfWXFH;z3?zA?U_F=<p8$(Qj()t@pEN|Ca!eWy00whSjo2
zs@0)+HU;z>@ruCN2EsarJ?1nLP^n;P1$ZCjPGeE2cs{Cp)|N*{h24U~6<{K87U8I%
zC3o=Xo)ZZ--*`VOA=O{!eXHYZU3Y};Fk$5%H512Uh9E-Zp8@JJyDc@IahBC=aXa>|
zVxqQZZWz2MeA%acJ}||Q7g%Q_5KlP0culMo_0%br<8jq~n`};X%>?)a#WL=i%P`~l
zHZpsk0n^j{MPGz+^CRP{Ixro2(Lt(Lk%x;0-l>r+ZAzx3m`)4q9rLG3BYQ!^*YB@l
zAK|^$(!X@iY(=SUR2N%Tw`RfC9A%nHx}OO_Qqm<BllLi|XOCR{!)txpm{5LlRe6lT
zz;GM5Xn)pr2cLd9Fv+KTkR%W>oM|QBxo;x2-3fe@VT8l(s%OF9lLXcvYdT$=<BPxH
z7^ePajAQ@9XD1oXC1uo0qhl9G7L;exZ%ie1OQRGcu&XfmWN1gtMYhm953^hVzNZ?7
zOU!O5Zy%mW(%j#D<a0S_hiuKR$Eq5^g_HPm8%x4H1lt8^U22sHhh9kT1^cemV*1L`
zoweYUM4%lz*z_e-APSiC*~Bn{WJ^)>YqE~kPOwscp5y{_Zdf1mfo)gXD_tPSnlzaG
zS<_kQBmzhPd~`FdL~!Lvpn>_Sb{GIrk{n$UF57nMepM-<a#AT|5R(*Qx_N5iLLn^}
zf;vcY!tbf4H>@4K{;smIIci<|?lWe%H7|@zI<XsLwclfay#?wiB~JaO9v3TN7RoRP
z8$oDEKX%G<AX*61Q#=m!2|}fT>82npWs2*tRVn-m`tCqhWo&eop}&vOI}ih+NUD}l
zUK7oNJW`ZlF5tdI>u%PXQU|Ag78v{0vdnSh0y#^KJb&)Vz_!$KO*z-%-1LG!?^{qD
zShOvHys|j3{R+t4`{<DPh0cp~Jzlzy4UM|<)}C1$^OuA&+*jJ!^O$NH84xJdl2>Xf
z%*(v!ek06gMO++({*9y`0b+hFy&wRvAr%va{2ckR9HU}8MR|X(_irq9zNdCFv_-Jd
zCFVHF*fY(8w+V=ps6u!G5y05@E>Xb+J249drgSJyqF`lypW<<8|6Vac-4zt(Kk)W*
zzj8OenUzztX+_+(WM)xI9;-V?t7Zr<qsI-`D=9W2l12?_6rGzn*(qRf{ZJsoeCC|D
zn2}^y+>lDqa;Tf*E#0jqWJw&S17P6DpDWG&xvj}Dp|BtleJbzRsTF^)pzNDq2U|@1
zpaY<*TcMyJ9y^%Z1)Cy3)zPFTE*UMIDHr&*R!y53+8^WUYd7bBxwiNGh^7&y;~)&8
zo4fi#(PeKq<ZCRx8#0RswW4?A`Srs^Aa?m0v>3dX)O&Xr@4+O`L1yzh(TW~`4Sa|S
zbCiZ{-0?W#@#im2f*r|WMO>TE9j_VHP@~BV?4VyYza$^4rRst=3EL+j{bmizA>?P*
ze+SvRM1s%Gd0}VTGb{SbFP2xK%X7f}c-1iFSoOC`{SCwSmk80<Z*L^Gn`Z&K>}u3L
zqKg<q7Avy6SC}lDu9bJ*r+8%m1agDVBtc@=S6NzL)+{yH;)TGp$6s@BCrnM#xm$0(
zlOm8t1~eAk1BrAD01RyWCi(YK&WaR3+A@jfrI2c|5L5ffu`n7iQIp~GpRy3~XQ|lK
zHgWf<;bWB%HQ$tBAY_knxpk*sXO|c(?4%y;ny<l+1ntB97VM<Yp7wXtjS3W)z1A6J
zpjyq3G`qs_)?4P)T__paViU<W*FRM)eS8R#K`BrLQ*NGo#xd_l;{AM)cWel8zODS8
z{(<)O2s;XYRdZW5il}sr`x&^H0pHCBI8?0WRca)2s9_3{P07K1b;D;<V*F=MpM|2R
zD0YiCVLzO<g{gb5j6-P=qZNCC?N~VczPa(-Z7z{Gq9GW>+%mN#VtvU9$%LwC!e8WJ
zLvm44o3%Rr)_wS^giUd1!8B&A=22^`Rt=$D7WWO!M6)Gl(VGlW9*8x1#2Vf<Z-E_3
z&OKk)O4~^T@?GbT;g<f6DL~%-ByTUWN<mlkT;dUCrk9%=9~3Sui?Ns~)-4A+plc-!
zol?^kw8~<Yxx@lMhl8(9PFsXA(YRsh<C#r5{w))tIs>fMQ)m8y#%QpN9qkc8w>?;j
z?`Ijik>7_bKR1;w1u&qVuk2294}Re}9pPo^*I7TLjdA@;>S8!;_pBs@t^`#+VWy&e
zIdaZ4q=ukITD0UQu}>F~Xoo&bc#-5h`c96B@2323Aqd7Wxt38D12mG+MLfRnhaXe-
zqJiI!jGboMK4h;Bo_@gjBQdn2Yq&r+gX!=-vpOL?7|HnIa078h8-l#=Cw{Aajm%eA
zqq6j|02^aUjr6U!PAU{fR-Wc}vYon80?V4Xy+Daw3D@kpDROtnGLrmR^!D?>zB*gj
z9|zo(#Ow^=Gl|Mq)^R#VAWaZ~<@ZcHg(z~~)!E>u#)P-B@4G@*KP6|SYgv=k**@`b
zEWq%^+S?)!(g>(3$ZH{5(&Rrm?}-f?+{j#D<tE2yN1cen&`9r}5i1T$Yg{m7=i{Y#
zmHD~D_VGJvFr^i;oJM{g%zK__rPt9>me`~v-X@N{OkD35@3h<?Hb`p=8~duWZ>|id
zfr*M!rr@8wkr!k$Q!h}^{#9hnH9XEUs`Z$Sc*xm;AQCtUKLcJBdLm;l90V>xB5X76
zkihy+GwAbEPK^Z8ExViu{;6&!K36OE7I2vZhFI;Q;G5{jSx&lwIjaF4*p^kd`m;M@
zW9Ssxt(?+nD7A96ZOPzrAmtg1@^z<N03{}>y+63r0Zg%n;j0K$<dx}9L+IFB7;^ER
z86%M#8DK;SZ>sA9bUB8ku~J!6Pm?prNoe$eg^m)9)@mMRZg*iD*(9tGYQ-hpW^Jfg
zVaP+VOvIW$ak9kY3AousszQsm`F#7)dBMAf_LKAx7zE~gyBp=t61fOYC?5a7ifgb?
z87_W<av{D*^fat6CqwMMxuHS#nx@PP6Tx0JQ6MgzVB-Jx?fS^1lcQu#w-LCEFP%-G
z;b%wisS3H)?4JZbALVg~B>EB8M@Sut9wRoL%kE1F-=yp~<)3kUx7HKi`panBFZncc
zAsqQSkW{VJ5-fOLye=(esld8hm0-~D)KO<Fj}oe6o%KJ<$WNkaT6_rFe&bCk?`yfm
zK$=(XUXfYopBuRw<RPW#a@X4X!0A$+HRwhU)1Yp)fFK(;b&kp!QyTP`NbHvbkYVba
z3b!72!$<^|BUkinlFItUQpmJXxF&+h11P|oxw?81>E!|6fWXu*-w*WKJ=T8PnNjuZ
z&zH=yHHLT<;~L%CI`X-xaq7dflBO;}2h5aVjezhSMQ4}Io!{S!{$dDLYCPqJDnZDa
z)_kd+J=X)puE>|_S7|ULZXYlRuk|=$Q`CZjgtD!>iJ_CWVD;how%(N%$Lo?;f7L-C
zS{2opCN%_h2MpCLa!@)mF>G+rloPvqLC-5nJLZ&^*2^?ww|I8;)ukEw#rrzTPFZ4v
z2OHyVl&%TPQ&CyLa-7?#_pFGz;KdgHs-B8smh7XBX}$R(6|ofq?R~HXW|X1l<{3?I
z!?h1Su#U{ohdPraj8)S&pBK9DWA3$N6p%>>cWfzL_05`4DlQ)`5>B(Vqjpr`*-Tm(
zQn(1rtq}b8omHZ@0ze9Qxie|v`fJ4bm(lt(ZZ5fXqiYSOa$sqS^E~>be+MF|9`m-A
z5hp!P%|m{3DFUau4zjHoROf~r`fiC<ckcaIYOIF7E%jhpqLcM;V2&089E$gFEAyL)
ziH~i(lha&bVgN6T=E^Tv(P9wDiRo>K=!+2=LazSYdvH6Q>meJUDO>5$a)&Z01ka8r
z?hWepsgDa@LAjpxHP^e2fAK8|Yv(;7Yh%WJVu=B3LM<J{luPVfS)4Mft=iOqai0nL
z>S?{++z7_=(r<n>#MYieA)4Uu$cc@0Pv8cRYrRcV#YfB4faQVfXB!T~+0OSfzD%l%
ztAvmNWhCoHxu$I3PUBY>X#5KXdT;e5P{NB#QI$oW>sY-EMdw|i01=Vg9%4+vwosqF
z{umKY-_5Q#5j+hSw7jF+fkcsZ#{H=w&YL3gc^)oAD?FE~uxK17yk_mYC#`E2tqV@O
zL%Bo2vs95tE}d!O3F@hvcKEZyue0fLkvtrC6wZkEJ*6T*a-;d&Slg4SqoupSbnQr<
zy$*Ft79^9^45LW*<oiK?vkL|~vY{646+9Qmcxrz<2mYJ~^HQ8>JQwecXsB0Q|EVLH
z6<H&BUfb+B?os>nx2eQmk+1D{yn}ZXi|(taU3hoG)gtLJr&FBMr_mp@0o)D*=FfLR
zjUsPf&gCe8dw390=Tk1z=g}YL4u$Kvo7gJ|Z+Pj10DK6Nbz7pX+)Mt0^`OVYv~Ey2
zEb~Ejo-YpDowHD+_~{a11h7NZDCaP{@zlMEX^~vXbOWS^xt^5ID|1dF(;`L!Ga~J%
zcT=1ScT>$VcT?DtcXHMZ{J;vlV;b&dm?zgm8Z0;9p?w-JT87<dWMg1Tl3T{xJfj$G
zlhbQ8Ar!WIXXyIX1nU8S>Bl=-NEVu%X8wTS?_ST@YC0FlUC&wKc6{9Q%}CdR$J}+%
zcZ#t6NLRAYHyMiG4|nx}vrudJcfyY%A_cFxs4?$ym36>b<}3WWpKlvC>*T~Ax$B1?
zgIHO>_K6vU8Pea#()W@`FSs|wDk~->Mj@I{p0`^UL1j^oPQ*bt<uu-_TPQx}D{}Sn
zXs>gwNcRw8cr;iM230yu@m)SPMerD5Kk}neJcbh^l{D+<Mz}BN{rH$TCiF~Z?#^nh
z^uByhw`Ju0tiS^19j$7;n1j5JE!CuSCNHA_&Ho*-rJj67Y@KL9<?^IvSQ_4j|1XGB
z{uji7Fo5r^5v$swem>oQt}=4_zO^3=Nvx^2<yovDM}E>6a$O2>tNyJ0<bPgq?ftqy
zM9^xR8fYs3KQ@2|PL(*|A69G&-$o-H0I4n3oAft~6C5Bg#{;5a5QfwK7C3-=*%LQy
z4!UZJBF3{|90Gy0SmaLSIi7Xto+w9#pq^gtE10kt=O0D=gNVMO;Sj1&$OjgjN4YG(
z|B#Q0euL6R213g(6fbiAq*3?{_FW*vs-AGZz??N1_`9+6l=ZijTvE}IZL$O@Gl7h?
zpMr-dyYP3^T{GZhk|&PZ7yV*3%+G)>R}uZym&pw4T^(bil=D|<pL!|u-g`EIfmULL
zv(cb&xmrw5ydXl8{7HXUUo5WK(uH&`O%z=wV9Yl*+zdnXxNJt_d-r&#LG!>Cxg_d^
zyJdsyW{R>{>-%WC^q=2^hxEIZO-Cs910g=uMmP_3rlCOZk!6vZdkqUfd-WRHo2^8e
z3lCCG2(NYywJbJlc22JJ;9(IQ7Z)s9UT$rKLq+1a*ilg}ZZE?iyYms5{QDRBwKPq4
zp|dA~Zn>t(x@rzzb1Z#dGfurFYoi~dY<a%bh2LTje=mILuh2Cu1g$2GpRVGfa$Sd(
zGXe7>6rKT!GG8uq=|GTb*Z2u5lAVMI%q{5CVfs}T5d?&ZB_<o{`6zx}0js^@qg=*6
zvgS^Y>|(L`l1li!!T5%sSx-PT@KPqc<%9J>LbfXdnw?E3DHz#T0Va^rjAumJL$5X1
z?Cj5O-IM5qNf~z<Y!qJ0&Y6y1dh;KR76hNWHK{k?RdtcViMW^drfDv)^i6j=<BXgO
zDF(rhI!$$wSk){OBQ3#8>(1ap7{I(?P9FKQHQs;gy0z+v2Sr3urhQgevRw&exeJ5W
z@%T3b$ENL<23h+q)da83YP(D4di$)y_`w6a>H>7;HrsG;vrYL!m(tyJAH$SwGU&mo
zs-aTg2)QV~W$6O@Pxd2d4}JN!gEdTsh0^@%1mvq|u}6uEokHz54dIEV=j2onFaKIq
z+IrulMe7<W^H(yVu+$1fwt)Fxd-LQ)w{dGqo!FZFX1;ED1xbc~EPUU89w>=f|I|f0
z&@lRr7NaM&ujP4Qpo+p5cv>|@q+bDPQP5&9&a~Epkf(_igdc3RwxhfJ#)dGO<=vsO
zvW=aj?qj6Lo>MtZu9mO<8S}LRDaQ~<{`|L?kH_yb=Cc$vq=-sn-~+G%m-_Cn2yY1{
z7dV?&vN(6dZ9ef9ySc#F2}7I`PuKbS-Hz+@X*fg;gz@eR5_yE1!Fgl?bNe~`U#lZo
z@%5P4cFNW%Q&;x!i#_AQC$W8x?lP!E^Mc0&WG#vV8H;|ljKRiVNt<mfeTM5QM~(&x
zd?A$h1}k9ooUU7@7!bb!*)&X<Z3lLeNi{QJH=+^zW<UEladAowaEzP<pm>99OIVE4
zVskswC(c%1bNlR6FT(};DH_E`4R1C-?B!CaV0hQ@!krp~U|q|*WJol~ou7wa9RJ$(
z0Q=_og5!RJ<9PC--gI^L+RzA=UCZiH{;X3i@87u|G7KR#HFr-BBpH~>T`DQtalX>A
zplpA$xA+F|h<H=*K^Z-m=WZuL3w@US5*{5)3Rl5Dp^AVi&+rUAc!5pNwYQKa#>1rQ
zo&9^cRI6}c@tn}%T~Sl^rW4ISG*86L($KAcoZ$L1=<E3>=tHL?-xB&)&<E|&K>Jzz
zESS(sOXW@w$O8(_dS>1#&*$!bbE_a#fQTBDS)*CY??p~yWLI%7&q_nq9+)hn3}mu+
zFb-?*+5~6RLg<VNHHDOYala`0#tRB2m!#U=@mwW_n7UhGyDC*f6jvfbL+^kKE=;Kr
z4xkFcF7KN#S;)=*`e1uVY1Zf($a{)WXE0a&BHd&PJfY-%1+iWkfdvh+OxH%)mI}qN
z$lGWxlk25l3!Hcv-1#$bkAl_5S=T=d#q4jyMB`UOKB1^Au<+TV={lj7(k1J?n!EnI
zf|t>cA1WDfmRUK9$f@K&qnX8>Ub?>e@GqpIB%uAEQBsHp3kfU)lLeMNd|7lyHAOS^
zxBz}H66%R7K)Bq9d+b`IMlygd+zfh7%|w+T0?%+_Mjovd)U3dGLMhafwhk+Vq0CI_
zXX$3@waB95oog!}McT-Q#{-qFvd({t%ct(dU4!+oOE0`#NDG6nQieK^`QMQiTnP}E
zAK`H}mjLo+P7kJixi_5)$3$%bfIo0%n&FU``=W$3u0Z88`fDN)tpzPOn#O>^rcY26
zv>#PGgW2alN*!1-_nWErXopqywYg1_5ff}n3z!%<bS^moM&g$<#6zxKcsI4Vzg<sn
zsdS9&$k$)j&W@Go)!c0m9KgwyM1qitQudlE-Vp}mq8Fxw4)Dv|tRtWFtpm&WhmRkN
z>{SM$JxJWeIZ%P*X2FGLkPU1+n2DjzWPB?J?w)>7nrci>8)F;l9aZnFDN}iVNLw0o
zqEvH?LYdmY<|HE*p0~a2!~~hQeB*xqANURDw_!6ZIoQ%XEtPkt^J^N4N~0EQWBP2w
z(Rng?=3$QCSon3LrjaES?trx1?J#PaNsO6($f=~_wuCF=W&`JAoV=a``)OM99~In=
zU4B2=8=(gnHA>!)zz@k%6P26@LW(ER1W-<zOW&@$eGKiNGHiZ!=+x(T2#D6-jfG-H
z_5ET!8*8Nhn2mToUq13#WVQQDzvO)(a7A0sax16N5Y32%lf@wz&;VA)l<Epl;w|I6
zSXp&;HcmJAjt7D-YPd;>kZv!n2gI2n+z>HW-~n->)&z*ddJge8Q-4P!{w!}7pO#t?
zO9b_}6IGz<Jk|}b-IFi=dGG0UP@F)G5dlJD59>-{br!H0Q0ut3MwHOoul@Xfvd^hu
zO!e{X6nde&|Ljno(GSdQQGLD=|12N9v@!Htu;)Ezlf4t)qzBX7^5R@Jun`-Cs@gUn
zS0blyfidEr2%78p%GqNpw*jD8@7$Y~Ln?~BFKZ}l?>ce*$fY2f;c+FYY45Dx*(ra|
zsw7s+1RG}lvp_omg0rJAuRe1Mm)@}lVqyHAy8H!w#q?QDI2f3RtlcxBc_3Irx}`Fd
zW<!NZyY<?2hiitOz{*?4ruKY<aAC@tZDZqSl<b&OZS%lF*OLQ{;uF@laH#rZhci}z
z8pLnkKZo)Wn}7Iz(!e0A6z_VyBhSM7eBgHLR3nVPDf5NhQRWdf9NP8132h>?afMkd
zr7?|4?`9bBldETb6jRZ;cHXe!f@i|fHURHx)O@W+((!JNZyzR1cj$h_oZv^#2(*v$
zt6Vuc^)%a|wl7}3cQL?m3jXtmAFW7r1bJY3{gb$yot^_3E}<9I&r>p&pqw+1S|}Ys
z)HoV8)asM#S(lx^2vyF6EngahK{6i8g!_sn5@|Pntq4rLBuWrZ*$3Y%&J#0U4;k?*
zFVRd@;+|ifvGq|(C4+8fO_*konC?4C#3Uv;<jJqCN7MnnT}K*=C4^N<)$eg|N#5Ug
zct%Q03T(L240QsV0yEEJr$;pE*18LoXo4Gf61OqxXzD}F2p!SX!AXYA7oZR$lK3hT
z@x~MUAAv5P*i6N%w`EDHHgz**=D)C+qkpiO*mM!%0l1B$C<tHTaX&~Ebi8+v5))2p
z4P3d2nY%hLqZz+)_lG8{$hHBC!7W_3Zwu_KC%NY~`eu#g=Z>asaK#pS7t`?*)-lj5
zq+hK-U&1}7qEe_l6fM;bw^zo}$%QsLUV*umqU>|H2Cb%<J*#u`7drY3a9yuG9<0VU
zU?G%&WxveKMhBvnX?n`ZZP#wC)2O3-`i_^mX<SL%1(!l0P~{yi7?%fz(i-j{?Hc1g
z5Cp~7)?4cvJ5#;UmUAN$uN+LO`EvU`ay0finx`?TOqsdlS6&?xG9Bx_giqx^eg#%g
zX51QO+FWHXyDp1&r((0<^D<lAxci-V(nYl9FqDhXpvN3UgBL`E13OsawTTE9V5Y#&
z8kAD)zmU0sV!_@a5MogDXe@Ih)Wgngkl#ZZ2B6BV5(_f_QCx0V7gvbh1s_SL&Dykt
zw$#@VVI^<QJhzOn3Dx-__s3%J;3rU_NC{nrB#&2+#k*gLVc-)c5;b~o2K);qqN{$l
z#QF;p5z)f--kx+uV~w9mlpTC4&-44kMh01kCwc4ER6(6)Mx4NhOeesbQuyUO=LG%!
z9Y@|le3H6}E8?pegri^#?bTNsQ1cd^^4Yx%4jYjKAI^A;K+NhrCZJ5QMkmMsIoBBJ
z&bE+bhUm56<P+A7u>fhX{`e4F+7zQbKWxgOKDL`|Hcwj2Du433!e|VO4K0{1XKdMI
zo14>zEFS3Z2J9%Eql81|f!U%Nd*M+~HbYu@XuH_mK&l~vYf6%fhM`+ryI8FgniU0~
zYnuKDz&bl+OTR>n22gKnH{Nl#8QOiJI)z3gJzRpwCXAG?FRTqJ(E~5_$$>Itd7@~;
zBK8~i+K_^*J_(mlV5zI=i-aV2-eL$w(vB#Kw0~ao5V3wY>@dUKk(vn(4WtapKAOEf
z8>jaxC{(*0!2gN%Vho@^V4;nY1roETO7eac;)P%j?db4C59B;AOhZ8z@4RnjQ`R|o
zF<Hv?8x~TZ5mfy|S}BRN<IqG8gui#n*pOkA{ek(8x{rj)e6Kt^-?@HI=j=4sm{~DZ
zn=SxXG0~nJUqQOO?&FmmF^HMlqujQwWE8>!7TL!&t$D{i%@u7%WJq<#$SNPm>BAsC
zR5CiRWCN5#0D5O3+10G7ww}1YFL9-5=AZP)?xIL=mq^#<DDA0o=epL!Z?q6IFIaY&
zXaM<JQ*LRM|G}Q9TZQ+X&S;s{@4FiJl-F9yg;!SRv>GwM^GZi3ygpun%9~r-y<03c
zSysQH({;MZ9c2vpm(<Tey46*iZuaWkq$#xabI8d6CoOKJUOyl0WFW=0@R0-9`?d%#
zL0EIk2NQg-(Dk<5a?A4Ui%C61eqE`vWscu?pJ}jS@F#IR?dR33PKW7UQ%?~(MWvDU
z+n|bOxJ_$I+vZuD*CYQ6&=n??lpSW^qU-AxMpm6;`}yiOVTrUAgl=~=qXCeinNuH&
ztrrE%;wy=EzEpgOcy&ld{&@C1LDF4prf)z4x8YpRV6ZrCkvMV1U$BcZ<}LwIbyElr
zP&B6R&m1#(ry;)*CwU-n>_!x&Q&OuyXcH5)*w72l0H(=0pJp?lMh#nOW~4N@Gl?Dm
znd8fP%`#mfs#sB;)8aq@1n|ent}Q&b^r8J5>*~%sXGVp;cltpmC!)SqD~^XVnz5Wx
z$l<E-`&@@~hE#V1UV<zCxKEgj+F1xelAbyxV4BP)ZsVAnuhf1cLH^a9xi!wiXu$xX
zUn@<bp*KdDLu|gJQq@#p?}xN~dju_>fEh=YfvQIMM9oS$P!h`NcmBfY;Vk!HhpiCQ
zt!rQ)QDB~iwcr=ck{v>6(vYLkoU^I8LG)r=#D;<CH<tGsAF}#A2zeOmR?wk%-t!sJ
zlME0Ss3#)fyOMMzc!fZe2h&^XX_q|Z`w)`g=L<sYvot5yftP6)*yv|QbVw%i_L<DS
zG=t>kx?g-qKo9MvrA?Wyh8oxB(^z9-;v8R&twW#>!cGtzYsL8JO4ko&1BwA#5pD%O
zZxK(k&0{QcwcQn_2fsb<aibqOpT*EXK-x{vlEKtesY!g%%MmcfrJBTRgz^#QP&+N*
zQ!Q@Q${iNcO!lE)ca0HnKOwXKf|vpS56FzlW}S@wmG6ZPGP=F{MC=m=yb?(nKfCKs
zx9CFBpakxJQ-MI2OI^U}p!hG0TBVX*NZ-;nNoD*m-V(`td*+IGwG{L^I|OP{(gOI%
zhV1`4o7Vs3>PPpyLHsgM+ZR!F68PkAS&<4j-yr&~xaSDF=YvI3q4b9uGt+++TF0}8
zN@=1}|8#=GC5MI`;2Jdq7Y9Q)_T>JrOpMmmKbaVWh%<(#A=vO)9N+o1{Ek+MZ?N+E
z^==~gE2!TLAfk?_R}>t~<jJY63%s|=yI5}{J)+wCR()}R9-;<<a2H73<R9N7jkxm7
zZr~o=OT*(5HhxzzRB<caLw(F+8mhNw?8^@UKn8zu%t2}E5iq;J+H1R<2CU_2b(W6%
z*m6I>nHUr=%aUrBiaGu-Vr(|{>|c0I90NXuL-aR8;R4IGTB89?#_6xj4$hP4>f;R{
z6LiVmKlmC2Uy9W&G&gC&UWZ>MgVZeeeML%vPe1rpiQ=VuFdu3U7qxuL=g!?>CqvEx
z&U)!lbRLg-@aC*BHA~w#SkrD=;Lnv;0ZtJ&_Xu{*(Rz;`D^g0zO&~(lfJA~>o^x-4
zDjiIT{P<>=H7K-U?=*J$0hjM3TspANP=iHZ<Cv75XD=afvX&98M-6}ex#E)#^fn&w
zW?tr~=gU#I{3dnUkMY~I;BQvO3z@oQ{xd7%Yeq;nE=qQZ+@*s|@}H!P%~Y;{b#YY=
zR|;C87Y(`pnw2?HX8%jJv0GkGru{I)zc9GaXEGT5FVGC_z$KBxs8(<pF(1#dH9P4l
z^6v0-1Vi=S|4w{`{7fqbHT@5)SNb83wIFEa<kCnh4?hWZM~I2s>pAZXM&#^!)bwA2
z0bkKAzZ^!F)w6>)+$!D}R6^Q-+Vm34;twqs;Mv2!1M5j=W3Cq2ns*$F!y|^YihA-2
zd%uT=yMBQO*U(wX{!Gxw%HW`Ys{OL!C*an5ZooumZnSL%*uBUfau(-J`WSwdr-c?p
z{|GJ~As;L@DV>+!CBw~*lq~sZdjW+stOs9bBI09$0UlYD-Jaa@%J&bAES7N&Y?`Sd
z{Da7`l_`W#p&$ND&>%3Kp>xVA&CQ$T-TJO7HDZhPn}NCb877f=X=(s-m<35Vh!{ic
zDwy$L6MdNhw1CpYYGwc$o`i`^Rm?{?lVo#J7Bz`6myGBc^Uim9moOD#Cb0CxU$OvJ
zjZ95RE~PdZ58G3^Z$ld0+T_37HqxdM^lQ(hoY?O!UWT2-@hN)N50@ke<-=`9IX5YJ
z?Bnr&xlaSA%xJG&$~Jp-+L%WuDx`(?V+|BNWl(eEc%SLCaK$8bw-S$J0n8l87g$ll
z!mYv<&c&+d`6xv0#R$=)yT}(_`&>@@xLsGj&QyLpr|#S4-LiAUa7y1Bb~2ht(6`AX
zD#`)qap7pGcxsdt>5N1E2Nr5#mK*>JF}n+*aPhxkTMTg`|0lM^F#Zp=MG5+aEs;(h
zKnN-tktin*;0BVHsNbi9%|Xf@Rh(7IW$z%b4S+LgNTh~UnvV&)Mvibl9=DTqYqcQ6
zFL-CqZ*kvnqJ=wXP4^X#`H>Ux7&QC!a3{sqkVn?Btz&}!Ck5eI4Od@L!aFv~R!L1&
z?Ahsq7O%i7GHh~ccUB;UZzUT>id`C*`AjBs2OI@cNv#*kbevwg6LEE@5C5&gt94?O
zf0P>N=2OQnrwm(M&E8cG$8q^aHefC0_vhx)n|Y#|w{tL&1J}++?*ck$JJ<xC;>KPp
zkxmOq>86wk$~}OlsFky;+n+@)fsTjH{_J_2N#>}M6C1mu67e)0#c!^&`CB$=1O^MM
z8qnVh{(Q#o*8;q?dddvBUepZIy}Arnj12vRL^Z3RX=%Y95*-a#d$|>Mdix&<;5ebb
zn~U8(3k4GCG~UNfV5um$iOdbpr)|61OfuokCpX#;DEU=SGyG3v&;N<*3H<*>_7osC
zg$u>}*+F0HcZe0aj5_K)L_ScwR90a2q85*K8Aj|dDic%-x9^hF5aBU&^5~0RAYXh!
zV}(G@zSuIdK)=E`^IGthZ@OeuoT^NIaoi~Yl!nSt`~nybl2@A>G!e@DClQj|%dc|1
zTz%ZPyiMp}=8krm_a9j7N2ydNR&!kb7`L>=EM3J(yf@sUp;O%<!ksIseYp^@22VA~
zm%me^Ncqi{QLt0vlVJ94dnNHKfirfC`2=4>*};IFZC;yEN>00-{J00o`vSy?z#fs6
z^cRM&=lU@YtDSO?t39o~OOLs2c2`wO`c5t}^|lc31jV`q+)s1QATxg+>7%zu3D5Az
zLN@XlBWaQUF1$f%Zra|E;rr`(PZv+%1*l`be#~*-bI1EE-Dqk%_2?0^PiySG<A`bq
z|5<)rTfujF+id#;Lz}9#y$_gpAZOQ(SX!?c5I&D&Ug#XbzVOy%)rdxJx>;dUM}Slp
zET#Y*4SZ|ea-$Q}4vuY{6OO}ntm2QMVeV(tCa&(rW-{T&URXru5bF=)kJ!TY_t-i=
z{_!I`ELX-!1;37&`VSSgk%_nAG0O<YYolwI;jA>c1xrjpHkp9J$PqAB@xZKsK0rar
zR3j#-WFd6+1hY7VuyS<{$|Jt?#Nt?ZIZ3gw-D5t&{>3Bzw|Lf=Nw%;C>(Zzpw4a5$
zPpY@e=L27R{pE!CW}ThlgxmQ7qt#P!of|y?MNNJk;dM${)eZ{fKRbN5oqzA}%{Fl~
zoVC^4DS@dpZ)MBX{i{R4Y8E9T5<Kpr>6n%5L)V9QBj0mKRhc^2=J2plki_(s$7}=5
z%rZwzBdL#d*V>=G@tn2<*ykeA;x$Mo3e3cM?O2Vz3>@VKH_u@;cBhi)7wF_a9R1w)
zk3=QmusnkNqzVEvFduL=7Rb%_s8>6AYpgfE@B_L1xEC-2?&SQrmzE7nbhU==qL$hG
z8Y<iaVt-~)P950`Odew*6c<m6<ktyfZdit_qItYrN45~IDLSEXuJN&F=Aw;NX>ibi
z-yl8ASwmR=L{mV#x-gTN9f+#pKRTop$<pa>9O!Fxlo(pJIm7*5%*mDqtTP<o<{RxW
z$c2>>q%*J{{_-8L{{7Djl=BA+m%G=)hjb3+=l2Mvzo#6rH{Zb8Iz9dwDk`(#oA?&U
zACQW0tUX#@5wVTH+JIgU?1_N&3t33#50DG|&9{dC2psvBgf6CEV31~i{uxU0FV?X>
z1p)t=)%Y>=_x`^kkS^a%|E0;{@9=s3^AzCFgDpGa&NhJm;;)HsnG9uj?f<ZXKrR*x
zydF~jrQ!W^K>D-+SoNv8KpXKNhc+tynxRb%*0yor^jAmefHNx*^CR!G9}qQv>!_A^
zid<waL#o})>%r-%=W|MDV)tK*Xh%RUzQ5)I*0t$BXJ>y3+Hk{2`?TOP{2!liKbMaF
z^YiKJr`!kTfUz^D&Sr$m_nN;dfmxqJ|1|fb$G?17zfk;K8pBVw0zc($P<_q;E=)i=
zcmDW~r%v}^f%K`W)|F(R+%eBtvEyZ?vcfP@aCXXX-wGpX@s^%h&IB>fedtd;VefU|
zTNMJ{AY_4gTOGf83JVY(dT{t)Z5GoFj(*}g)-}DTF1OR1j^A!&K`gO*bEFBJ+F{yM
zIDJW9<!!1BS~KbWZC3%rC%P(5?k&ti$xM?tl_a~5KA;;4Oe3{$6RalBef$-tOD|n5
z1Jzs;(qqzxS8h*+fgh@RDnonUdVWoa8HkPKnuGb!M}Hop;~oI7CnMowmT?pXvw%6$
zgqdPPFtM0v?4BU0H?edy&Wf0ty;c=I5ovkq!nrBTfq3%#PB8#9LOa~LpxnVdMfSv8
zgSvQ>)a7j>-UF*3^2lxX7#i3@-EF$v(RvyfASTEJ18cT|y~ehSnuzmT{SL=Dx-^sN
zH7hq=J|h=3?(J*Ogd(5y5rdCVoE*42XQ0Vs>EqhRp6rH-dDOT{{T`t<E{i?kz6mJy
zY!R17`6+cSkIw@Hv$X}D?&{6NzU+}d2+1PqQanh=ok!=oo5t88(d=~?4-f27W=0gP
zk}EW8m)L&S*z+73_Na~rI~;Dmj^`$z$%N2*V*jCvcM4xVqGM#N4$0k9!L*3&7!Lw#
z$Ii5CPqOdbx2iZE)X$SN;fN{2WcR4X%bETp`80a)!}uH+HMROZpHmX~o|M(8*8lFO
z86RTh6G`uWE>o(Egau-^<hRIGcNRxGjvI=wjaA%(eC+_cO0)wy&T(8Xc|m@10LuZt
zju^#yzC?i?KfV2c!#z2-Q{ZnHf)2+n_cO2Oufra^8~oF*M`>@%W8;%hCr@eCh2DZw
znU6e!UZ&VUef~(MEON+OZ22s=1O5-opSce*Z_bk<M1uIfFu0C6@CSnIvDt6;S$fsk
zt@%Hkj5;s*LNalQTg=4mG1+24<Zr8gO%3D-1zzTGcQphs<+j$z-F1iav2wP=%E9G|
zIB^=bqvTBl5PBe@9Z7Rccaa=P7dRC)Gp>#vi^L%U^~E1d^ALz6oJ=O6)4pp4HPjMF
zX2R$_r%}wjrHQw~@4)6t1x}oM2F-Xd7lQeP&^vLt7fFw1@X>m3Isf#*lu>~{#y~SY
zAWzWO{Ek@fbn#4zYdfBeALm#^PgGAH>nf^jpQkT0P^f^!8JZ@8lAU&3frygPn3K((
z<K37IBxKJ%0KzR_AsAQbaJt#vVONz-1Z#Qly&ikQ%p3Jq@iFza02gJvmi|N<@S1z|
zKrYtQ{Z@A?S|PwdoGj->z%EpG%J_L|9lkADyhy&I>xQowG1PCFr{~5qm0pN@jDb8l
zYnf&0rZtNmcYxTuye6CMdlB7|ZH6CM>7m#SbX*8KW5%8UnZBP=T@lH#aOz$`Ja-1}
zJF0k69SpAVF<;+TFRpae4rF%XYSh#FzObO3E7&&q7Qb|ib7Zhs%HTOcokN^s*db9p
zTs5t(#WaHzgnv(OjlIPeA+gWI&VBh6cYedTmcEU$dPR<BePP%&eVu*dCuMWZpW1{A
zv@ltzpS%C@|L}E|ZFP2Anhoym?(Xgu+}+*X2@V?z?(VJ|cMI<B0fL3#4god}&3o!p
zcU4zk{oz@^;Q27uSogT+jf+Rjzf=g*-K}>WLN-ScfV?C@jrYR4R(k6%eS_x4Iyvjb
zSk3RFM+Ps?RedeER{Ufb)!K0?VI@#_MFrb|#<+$$dcwD$rEj;do&)vLj9fYWbD47A
zep>h-@VZBdysL9WxBYZ1hnIQznrg)$I)?S6k!TEXFVp!Ixy~&gR`fZmd8rN-OBXKM
zl~_zU*;x-!+YYa0`NvT8CVNSAcqF|n`?l*6;FowM&dG{1DBAzR>r&8DF2%5FNuzYM
zQkK^>I|L<#$?pApQ+d`49;aJ`Fb$^EwTd<Gl`{LzVbN5?Ugw91tjtD{80aHqI=gKc
zU{gt#;Cgp*c^V3`{k{t%B!$YZf*{<x-Z>S@v?UMW&aPe#&xTZFlKJdr$Otw9!v+(}
z$TR|DfnB}0-U_5Y)y|kR0+WaK#XyNS>dPQC1|tHLHU0e$ucC|b;|`h|EQj%6-GeF0
zyY3M24{reHKzDYwHg90qG$x@db&IfG2bGxTQMyrF9naa3PtNuLlJB5a@8H`81;PUo
zSc`av`)4OCiDpMitz$X;VVVI-m7}=L*`zhEEMzu%9t$pH?Z5H8oV~}*Mftem=ZX`S
zk4l0?#c$F{OBWb${BjG3Q{VT#vVOQ2BWd>+O0XTE3ioM^{V)gu#kR(8yFtP)1N<iY
z?AudS$XB;jD>VP@Rs1s@_|exkIc{hx`WQzpL>H|l>U>MqUJVYqRe4!(@rvljdn?U8
zb;~$*hVSj_VQXE%T~&StI8#C&cto}OVb%_pn4BGks-qxg9&G1?Qke{QLb~!Q4@5|>
zGC0(r?O!H7%Vho;1|F=@wLhTOqtPU83Mn&u>parpWtZL(+HHzJT8pFG6&Ydl1YcdG
zO68c4s^9GC2GFJnXF5`20DO-2{twwc;t7$#w~j4e1Pr6AQQ=7lfB&KXGvp|<ZC|fq
zJR3dLn$7c0yiaz4%P4stAEAOFh+<B%zc6;ig74J906of_@rKT7U+7W5W$L{fQ}V)k
z`KnDeKJU__fPx)8uXspPsP%0G{jmh<kT*F@oy^uE1UJrD>O@<_kRp~Hn<94#%Kh&w
ze@>x<2%t~qDrmT2YPV+~(sL6eNdetYHcJk@Fx9yF0@|6&D3-|0bCYw}m55t`nLWcI
zh51LLpjG{UXcXRp|3#w^K><F4mbiRB`}2nHJE@7(5B#Ah4gcj(AjAHrLve|>xd*Vx
z8|QMyNc+W4<QhUHhFfN#8IDx#YMx$_E_YqYCWb0t?`1eAqEGWG#cVR+Th)XzrL}Iq
zA8Dzf+(ycNf_>L)sQ62@3^XK*#H~5B+6hX}VtP5&{NEx)y*|S07U(VN`>s(vO(_;=
zj$RP0inSkVF+pu@nAYJ6fYN9fg69s_vl}5{YliX8?Kd>X^%G+IaA5k{GyH<yQ0q%@
z7ek(sBdu28$%$1eb3=L!Hm6?Y)`-cqtmc8SYG)8l9H&F)xXj5~<|4rkA-e+m1Qm1x
zhD@(q4n0<y8J3WI-X13X^!ZU?5mBk7pPiT{s*2@C!(`^{cxk(bl?(&TU)ZLa98yma
zJ^O%vbc?LJ$p2|uK=k~}wy4X~4E7h(&b%wSCT|vu^XTABv#+jnB9bFDZuun8m+Zxi
z9$FM1X9^HjAp`GDYI(qt3+TZ>@QfQdFf2eRNp)qg=<F5ZlyShAb%f009FMrwg+Mp6
zJ<`)0mA;uQMJ}cN$|_^4&m-wmw$T{(PVr9{(W$0&$AI)LCrkbggz9BKA^v;hrh0<~
zu%7MRA{ietoLp3ij8kveSRMXm%FaQG%Xyuyf>D$|rw9L*EDEbHhF1luamxY7q(7TI
z43cIkTAQ>fWtRac6E;VXIs)4nv+A&skyQ=Lswq%+y3@MpS@JOlxAPC*bCBLG{2OBK
z9{#0W82DLNM7qp&Y@6`p?C<3q1SmOX;={$bG+EQHU1cigZ78S<F`NTEi4U!J(4q=T
z3M7);U0_f<7xd61#M*eR02|?_QGF)8KmBS^3~o)3Y-m4qi_U*K8U7Iv)ns~v_lL)T
zMmiY-X~alZB>yD(7(Nqys~62zW~l4`HPPq1xsLtXpZ3>!)^){ye3_a&lx0$mDfz@u
zo2U5krA*WzjlOf>H$6+r3XFtB$Ys=jfMftIi;OA%tVD(LHJYg>hyPkLR)I~kc&KT$
zR)?|NQo}dhk&6}ZA52B{uU~mqXZjE9(PH&G^S*YHhUb`LT~Cf!lkosCzgWk_74>PW
zAzI}Ms;1}2V8UiWTYi;s7dD=M8Vu}ACT21dWVQ%37f`_UE=uyX*1x(`+u5Q*hN1&B
z{pu-6xR?kU#}IwM{5MO6u>B|0$M!(>is_ExbVoKKjHQ|0F~*T+w)gfYd)tnpOp)8p
zZFTTcW1Zwx-#F9pU!gu2(kaK!P~Sg(M#{lx5bYKZsWYLfWAB!xwOD7~%ZSs8%TqgJ
zul8+?R_JOS$>hwfdg(X7Ni+=f|6s_0CyyS%D*Dj5@c&dRkZv_74Zgw(lp$wvTMf`C
zqy%jm!m9ob(dumNeXad%p#Q$c;0z2zZJ~$MZH>D%{^Ria-xxB-n6+3?k#g})e82uS
z;f+hQH><c{ENNi==Vc7A$R{Ld@P`2X0h(tMa+vr}cn(KMLZl#xsAtfBgT_53Th9M4
zX3R=R|1V}-!t(!N#v!=q6oyvWBe3XJ{}mcXw%P*zU6lak^jVYuZ^aX~X^Z$$-{}|2
z=SRM|wr<iUiP!=_URv~K%sbU`#rVLpNniIT^hg^M)QoOOhJMj~Fk0%9Pqq2K_^{0I
zf8oPQ@}kwxP1>PBbx!}GY`mM?tH?`z`S{?y1AOc?e7sG33`Ab2oC35##YT}I6$fuH
z37WWPebq^)X}19C)Q@+(4<gieh^Kd=`M069cT;L5kvahCN*~Rw4eDGUgShy-100T_
z^}vk?LiEQI>+65uSi0CP67HOrUC@L4#RDdB@9=vA7(ZL>M{3P`p)0Hbt)c3341nP?
zfYO9VW9qXz8!xNz7+a`a@J!j{N@)XG+H?{#btQQ~vbf`s{eJk!_)dnPG=(nr`|9ic
zLzgjPw?1N*_FbR4;KR$X(iJ+y_p$X`kYB|`0gC;Hfy_&Q8)z=P37|0=xRc2|XWm0%
z2w2-Rm;_uNwndaXr#IiOyR*pe0Ak{<y3GVTA5FX8v)FHxC59jPSqW3Zclrk(NH-!3
zKrreTDC`$K!J>v37u~-LV75v<hMGj6C*C6oU!3SbJqe~?`rgOyo=Y0e1V~q5*sBAo
z?hU;Saw!_$YrOBridJA|Z~<xoDy_Y#&+4qF%F>l6$6t*j(3QD+aI%E20gIa};pYRT
zBG^g2^29wylsDE3FcpEk<Pq;Rw0C2s^92#MXKNWhh*_VsjJcbC8!7&9yLqcjS>~#T
zz|r6vvn43?J6mc&Fzi6+ZFr$u3uQZ3!UN%mz9ogfm?0Hpb8n(JKhh4HdZm|Pd|O-i
zb7^h+(9|HX6cLJTu><+X1pwVRXE@xsE#~3&@OzfrvjQz*rZX^dxWWp(AX(1ejk%E{
zYfU=8o07yWz2yRKBtQ0#xoUI|?}#wb{v<te1(sjSVwR3SqgA6w>)KV<RD=PcmEdud
z(I!q`hkVEl9($}16I`87xj40fG2@<*&1kToIiUDPmpx9%x<X);7vK=?Im9h2($#o$
z5Ja%cTXXhOLRg?$7|~Y|>(wCrXy`%mV~->1{yIJtr6c+-4g{hiiBL}5TTJjfAR$Qz
z@<&G8@1+~Jo)!~UM|b;R+-J2`27s$c%eE^?i}AxCFHXqF1i#A%a+X>VCu?VXo9KW$
z#oDpBR5U2vajSn60NC+~TMFI=!<0Us(96oAa&^iFTqBN8yfvmIC@NoO6l~&%@kJJG
zvPgDH$N#O8ofK+FeJQ3R$*Az>FLo<XI0&qod~->Ap<;L#(Lyd{c$n0_3~KPljy>2x
zwDf7<XkiY`D{{m;N9>+7v0l>zr=8v!Ph3jMgu!-K=cB;C1(*nL7z$2I@7mw*dmM5c
za1@{vb&5;5f21C=O0H!rZ_Z%<#HfAxEUHXF%}JPa5N2xSgXM4)bh}+xo7tT%VGVTm
z%FPJGo9$7{?cV40`XUDhmIpbX3lU6J<ekBsH4D}=PqeyTaK1?tP8Ia{3+lEN;?$n@
z;ocuY_N>eu1hD535GScQav#ithL;5Vxg~`FS|)-CO$O!T&Rfd_U*<u)b)&^?i`?&t
zkwn1;AX0m*MX~21Y$=3;HbUb^!Y|X2xANWwUuXk8V~^|T77W)Ez-1Q3%p^%-u!#m^
zE+IGYCu1)crB)Dlo|pHJm86(riMI|i@8uGO3BvFA04k*dyD~5-r2<*oMTes<9MvSM
z{E2j1)k)luj9X=56fW-`WWQ!ZSOchIPuz<Y9^C0K*kc)Dxrv0kU&xdmW^$2H>3cU%
zu8a8D{GMCxPJW}o83`J)RqCr$<`w89e|zIy-tIZe@EGTd2vqr1)El{+uW(AHyO5NO
zMO2_91iR1ZCM+A~2Fy@40K*4NtXTKg3DfxAKV4V9Q0Ww)4Ly%zp1qrjfLTF^q~AAy
zArqKPErvT@6gh?J@QSvBI4yFWwtUbVhq$6S%FGI4V=e+z_^1iGlj1LKB)sxHEA=H<
z)w_d%7e1=mD)|EYc3$F^$i331;dKFoy&zS%4MUE$ISWAunGI=cM-o6(+ZLR&K*!!&
z)`sCzRW60s%k=ohn3*%o95LYC(`BXi^PxkfLwRBsx%~2lf6sfdL&#^7r~{`%e_E(=
zb8OGeOa2f!ll$G{QfU!Dm^2??6?<u}+BG-k;T0|KGFIT--;)C+KNaEj!@p2*KEAEe
zvAqn`KzjUndjtlm8vwQp18B|PzIoCVs$|B%O!YY`B%1<7Rba4=_YzRbwu~8FlVkh2
zaPytiq=CBcVSJjJG2{y};*tkcDEo3$2Orv8!2?7r3yh`=-T4|^P@<BuY2cdQ@p~k{
zp$m&;a1Q)9-M=;lK0wmRRzTZTO)wsEBS<Gy%4qP;VQgv;%>mSTb@2mRe0WCV2sq|D
z<+pS<(siO?<FUVkGr5hkFW{yZv#_S3PFZu{gH0&LnS8ZUlQxkJ$L5X0kWcp`_ZM?9
zkl%+Fb_nAvSGD3;%D}TmLkoeuZ>mBU3y%TE^PZ6>#OA$V;`ij^s{8g(Tg|<j&{ElU
z%6B;UmB!fM_zr-8nCG2Tl)}Qf-?*kH_!p>>q|h#gkDN)3O=uXB^!-4K?yWMKZ|uap
znp1;8MhWp`lur++3nkK8_-WZzSLB^CE19qOC?t~Gbl#sX%4TDjGlgc=g-fH-+4AE!
z{}Mbx$@ZPPar@h+2=Q*bvfuZ*+xIcI&w_X8Elauku?6^}%1?h<{fEamOT&2drCHM*
z{|R&ol`z#IBHAvksq*lsiM4d0uRlqTp;qxO1-1DDcaq!pTwCA9;|{uuVMDalS=let
zj)!6RL6ckeLPICoS=NS!SBs%`+A!HUj$AL1S9!9gSe;M^*eG`|+#u%ufMhLd6BA^7
zrf&Z0Kn^gU+`%pHf7b2YBO5GTZ~VRx&1zVNF&jWL3|Kv1L->2;?Maxh-^X^^DttzG
z&<FG9W9H{|Kr@^FE*7`&zy-K!+~}Mq>n~lEXz`u145q#-bL(}wHKz@DuAM-s9vMy#
zwW@I6M2BPCMI=4}vVrmqr*r{csV81>A6`+cvrE7V%3TM-RRg=Hfg~c4)~KG)&lRC_
zLBm0Q7YO;aN$n1RpT%x(ZH5E<Ll3`f#^9SbJlroWx%kq!!Z-Yh_8fAaf1-cpnam-Z
zcWC=$6&uz=-;#@wK_0yQBvYvEXFB$bT4-oNM_?(K>3aRWxrHQgEB*bL1+Zha<>g$V
zl>nfqCfNG6)$+SaCaea5k<wl8eSM{*hMN6Duik@@%AleG8>O`Uji0tPABy9u;m&>E
zCrCcJkUtY@-QGwz^uyd*H3agX^u-r}1%iPYnSPn|b(s%2*T+F#4G$QknpLN`q~#nm
zWbj;#89Fo&>AI<E-BUjuqghSN`({Dn1GxMe=aSm;_LSf9n5-ru<6rMyL=>58?^<NU
zc&;ob8OQ~$_>_az72xFsaQ_JE<-6X9#c&y-zDfl`KJ@ccQNF^_IL{Y6AVhoG*)uo?
zB_4K9(sny2Aa`-`zFO;oe<VJGh;!3Y{HunCLP}lex(0vwAU$rm?s?j{Z4E%E0*0eJ
z3zpiqBv&*XBSW%=v#G<ndWE?8Q%$1Gq=1{#TrD{AM63f=miLZ?(ZIMIw%+B>@GMlh
zO9s<=F6Qi)LQ(tt#))J}f*!|6yVB1{v>=2<F1yl-LUv)b2a@nnRp29fz2+6_wCdzt
zEoazf)1l$uA2H3T7)qmZ;5RICz@#fb&GDZVDEyKbZMkGSx0q)HM+}|J1}wBDe^4{t
z!B;)Cd|!EVkqByoAHB5XbjSXxADSVOB_ApmNf=>ulRM3LE!$F>m`b#^P?nh$*ZM)!
zT#Dgdyn6kl2GLFE@MJ%^MXF}NG#o=cLmHIWYQNb0#x1gYW|5%2oq#p01l)i4hHY<e
ze!M9kuLOHFp#{vOt-Ukz7dmhmHF@+d>@R-6jFuhWqGfYKR~}njw2nH?B;|eUE&HRY
z4FnBSqq*a$-#k{x3vAIh7w?<GXM^u<g0#gZz@_?<F@UqwjbEHpsuFdCV#^~Z)gt2<
z!?bH1pk>P@+rx<G6YWtO0WEZarToopR%+`)lI98|oJv+x>;6GPt5yNxArerg?zT%i
zxYo27e7fVj7wC&ROAq|-)hG4<)wzKConw}^`ggz54^RaW;HB%meWKLoCU9U%!O^mF
z9_Bu-N>hP&yf&^*SIraN|BT&C_VsVmjZi+XQE|Pr%-c~8T1W*D@Zn7EFkfAsBDDnZ
zF8FmG^S-qFn>5^q!_mPoKGMf&g=Wk0r<kaG;gJtPkL~u;$;r_jmF^eBWQQH9uatUA
zsV#EF8yhf6Q!NmQw~JGcGn%gi43l1b0gwNt%=T+2slAtpO_4G~YwWioDG|XRfKcYK
zdS(>=Z&7^)&4Ouh0OQoDbEX65`Hv4{cZC~?WJ?fVIUzf+{^QLo|KP@>=AAzrbj7p4
zcd~Jcg$(jV=+2DcnjV1GQg{uIch7r%;EyUX1fif@iPfALIr8@i&r{*ab1S8qJ)iIH
zzTJ}R+VtiE9c`?%k+YMte$h7swruZ>XT$>g%3Pb7vQnr3e&jbYL>!~_%St%vMVd`R
zB4N+MIXJJ3mW%#LXeM^_R*!%+L7<-0)WGUeC1ikpfl;OhhDUv9vXPdQ`bViNb19o@
zJ--+T&sXkP&n5aVW^6m<ww*%vNz<^guyj8c|Dgq&THRI<RLs}?z|;1X%;r3!E)JkZ
z>Ee~a$_y{ykW<%w?0L;wGGl02WiFxc?CZ05fD5;FL2Wp2o9wuL%R{3YYQ@eEi%;oT
zM63e#mlfC2%Ugo;l|wuCEX!L82}kn#wb4iPb-Kti<Q7O2!|k7d`ZxjSP!#XoP}qob
z<M36ljGNAT+`{9EnEo?v9Ewp#yz0^w%DbTH4HJN-eI)M1@2^BM4-D5v*vP}vUHmki
zyvX6ykn_W-GK|Q(`;_lxq={^x_jct`z>><&?p(&>)C0e#+9o>gHP5j!izeS|Ngo<x
z25)!82c`4;D$9qqIMEfr-@fZ<W5}41X8U7it?9zKqZI8&|2?@f$prynAWZgU%~@iL
zbps%^PEFSJtE=TDA&}ObGtKu&Xw5H}=U7wy1^&cmN>&2O()M80nB=)khoyqCN`XXE
zckh8@9ES_xF6e!3$Z@I9<o5n@mH&FGqIgQ=x58UQpP2jTA<Sa&GN?vb)5jNSfh)M{
z<MRo_N!;m&hsTD)j+lT-G4*oh%qVxKJR1N-l&!#&>^=)anpz;k;8-K)_^3~$FqZ1f
z$9ymeS6;C3#fj-vxyssih!qPXK0lc6L(Oa1x)u6x!usXJlnPx<#h^03%RA6pVAb#B
zpAsMOnVrsxdv+5Zj$12=CEAvLK_gS8QMn9R*a+|8xb0UK3F~8U&|(bQFkBn!J)kKo
z>`19mEwPU6pvK!IW2>v@to>}AdWH0d{kN$^JA8IW@i}3kO_2zfS-~mX3|cu_*#lgi
zORkaXB7Sah_d$v9Gy|TPy}TKLLI@%bbBt)-fsn|q7i52Snqt0n@r_-ZTKP`UxnKHh
z)wFrQsZzu82aJ>ZaD4oiqA#AcOcE2z-ZC6Xqtu_1*)S!-qG@dMF#em`FbesoIV_P=
z8w88(Ghbu<-<`vcoD9_u96%MI=DqK&V<sTKH3HW^ZrsHV+$3Yx^K+7p+(=U#$Q&3|
zMh(_&uy?@^Sc2blT+)@xGp*oLG#lJmvwT|x1Q!dd{d$BQ=rih*h*%P8`TODEyl!)3
z*q~qJOw-l%gG!rY3^CopY9$hCHuC1=fVJG5;H<`cB`+gQ6K2}7Gat5!)Sy=eH(vEb
z5pnmoc_--}o&kksAfv6Vd+!Rl5JEEHn8mae2Pc)AqzsTcJ*sClS%t;2gL$9oQP$X<
zF0X8%`XFdqT(Wa5o!^Bd%$duyJ+Wpan&G94FkS26<!1|2Eo9!|$`rz#!$g=M@8DdF
zfJf+*(-Ok<YX(k4#8}I*V#d4|7&VM?x?HZ!FjK~x7Z@&p2Ap*x>eN@uQOW%0dcARR
z<}@GKvF_mFg!^3?h=!47Zca^2;1`eHT=9@qJok=Ej*Pa9?Or4^6U^5>1mCveMuUDx
zJyd>U8JT+JzC;N@7G^j!=CQ7#{Iu3){O=?`4%o739HKGqBqrdOG4eP{R8+AU7uaP{
z`NVcidvG`bac!QRj7F9b3fn(V;2mf4NpdV2gp1%UFxqf=;)_L)>#L2*FOVs81ulvg
zk`MXM>J-@tI&XVNEX33ysND0Daepk8@pB5Pe?(*ZJU_nn;h)mxvs2kaZ{S#@Pc1F-
zNeeDA+Aq>?#1DpZH5$%wXA&B|+=re_eRqPTTnf$s0J`0(x8GVJVvX3tM7Y>{SytGF
zHLi6vU83Ge?r83?p0ULkgYgGQoB;HTZ!&i)+NeSIE82$l?xx|6s}m9Dbz7ULA(3<j
zogju_3=hp7T_<+_b@%7vL?hcdV+(GM*)$zJEKor#o?|^5Qlgq7UB6$nFOQo_>a%T$
z%!LC$@}kMHAaLG!kugIKpoczDb>mW15d62sPM9t>H;h2P5!={mqIJ9+j-jcAZuk_C
z(LbuOBpp|+)f7{UtHh87q@Pizpr*7(ZtnyN4KxKTcmF<(UF0HoRjkcI7Xfb5^)pvW
zqTkU)HL#KX1S)@ng{h9B_j?ewH^bncX^aE-;bbT-SnB`qHRF^@u5ab|cB8ejiaql@
zLtcOpmSIQJ+{Vns(tVn^g(G+Iyx)*8aAmb1hHE=z8PSQT=atQM@2BtiQb(HLCBZG+
zNL@{K=U4`Ud(KIBe#YVFL|m{OT~{}67*M0wbNPCJ4^mA5Y3KORcc~;bFO)(~-}wTx
zt&hf}9KV1+(^w^&t(_x<_>Vbim+;AOBq|2>#eDic9ycN@AO3#9xY9WF@BVCJ$45}I
zD-o@AUo~`iDy00*({K70Xg$^}78_M<j*z_MJC8arFz4#0RVt18;jCY;_acrQ4PAG=
zumV(SDr2#IfkQ%P$s<Toi)}(4$LxT<3!jQ1tU%=@pW@+KTf}JGJvK!In*G7LY=oKT
zrT~rolV$4lObZEVmKIj#H3B4v&Zh2qw!Ct-@eEi5_OEPH-x{Lc0xhjs<>$yD@PQ+X
zl_m#DtYXeQBz=2O3~z<*BpRT`wsvOxcB3s<DXWK2jBi}e5XEbgGto2iLlFQ!D%HR*
zSFn%~Y5_OvGpU<@(QSK747IAc5`$IGzq3VZ&aK!*_}DdVoVCGYin&4i>2W6O11d$%
zn(TqdY!}bv1NK(ZM}()?x!F7pdOBTsR%T*6up4yqPpHW{J4g6=>|0%S5j2URj}J-j
zKea7CnCB^RtmHm8ygWcuz*zt{KPHiMf}L%fLiG0OpLWO9OP4ge)heWSjd5kNVSYxf
z39_=wzitU@yEzM`+XlznM#qmzotQWWp{@H|!bFs9xye@L@1ta;cPd6^aBdL(Wi1EG
zy^uM0^=Pi0uBkRxh8UMrHOp&svL%u*#Dg>2yg*|VWvU@@%2%xbtN`_m78x=;u_tVp
zz8qI--Qi@O<K1V^D;`7t2VXZe@L6nyih_$6id;+3a62il6asauILxbkl)B*R`px%p
z53U*8Jr8XUrf2(@2b(j?WkEDOGq{W$e=th?x$De6Zm+K|h*tNPj*m^s&shm+hN<={
z^BEaL0bqFiWT9hcLVjUJ#eIb=$1KNlJN~!#1vw<PcuAjz6G`v0SUjHQ@~<DA-_F+x
zaCA;J1Kbg`NbCfK#&I%S0>Frg3rCo(;We&#sQ0DGSGpj5x~qj%5PvJR>KHlZzl&wm
z1b`8J-CH?&QC=+&F$(amnENZb0GSqp{nY~eiA`_0eCWayIjCKH)Xb2`!lWTq>G2n2
zfCjKi2=zEh*XU<kWo!!GF7!eMLLe9cg0A#Rm^8^W@B1AngDnt@h=6{-qgSMDJ{G@8
zg-ct2TW=tkg%I;SZpP+uFvB+Rvq<LQdEDCKO_5(4_@&fluaOl8!oHbeIBx3rS0TJP
z=gg`N6V9>p7ixB4F=qgz@A5@LyGT!;uXlv7LBQ+D>D$YP{X;YU;S%`Hg2%gSy#Zs_
z^lM4y4)DmdN@z`%eqpC>-Vluqm5Oh(LQ!^b@kw|!F~IL5x%^6&KO-gpc@hwJ#pr}5
z53)(0L1VippO`~PS&3d}Me4{WJ4IxMlhak0w=DnV3b(WuQqB?2B6Un|HpQ5+4-VNq
z0pT}Kec$$kx$1GMIynIo@MWW(gp1Id8=1epZ@YT$3?d%5MEDHyuYa;x3Y^I9NeH?$
zH)?fRZ!%!A`(g?_a%^J}(gx_?_4@8EY^QS<*y!b3{BpK8%s1c{Xlz-!{AKe^kp?3H
zV`AV|DyFvc$$w$%m@AJa-ZP$e_G#c_bABt9-(T29#G`@_C3m0jcg;t;4%N(aAcIif
zo3}^Vs=)DW+?I<@l2b`L&+&ju&r0E*;9{x_{w@xPWN*xwOcg<PTM+P8KT$nVK-2wj
zt+ykdorTm|Z`0ekw@l1##7{5yn_D?qKYiXtS#RS{nv)et){hmZl8c=Dfs*^zag0dE
zE$>hv^<Kw~E7{>Fhef`RhYz@UHz)2>_B$7%{1}W>6*8`nfKQ`_;$oWYJcB_-H4hoO
z3B!t)T=Ri?Nx(0=a2CL81)jOFVxZyl?5yiwkYv+DMH)paDPE(LZfY9Y!udV2(7<ug
zC;1#}M}sIk-4Ze!&1=f+@5R&BLo7w{5<xtC>zvE0IkpgR3(cT-d+=i+3(Esqdc$UV
zB|MkCcMdm@m9wOl(r=DD_Z1f5eHOVmuL3+N_25>LX}8pZmJEPitLsEAhy1w*41<Ch
z{YUwrl-a;AZTYb9!0M>ej>UKP#tr|PNW!I8XodrroYY$+J(;X19u}iiJ|J~!PoyrT
zkpyF$4D|>CsMJ%i$+yUZD0_CyE`>M;vzVn&#OM|5-M#Q9wx1coo;*|5PjqW@i~@@F
zWGR@irQR?3kjj9GUUip~d!G&7;y7n*g82s(27CrnlWddMuMB+ED=ypej1!E?kn5{t
z&VB0qb7BKO+Ql)*N4h!xoK0Uf*gN$i@8l-mMY*NZCzbNU&gtLJi;o1|F~_yi5Zl;`
z7>vkgJLT&=X!Oppb^1j8^0L>OLpE;zxjk9x;$sXF7(W8oucT%vvHlt@>zcWDY~9G&
z*`4oj=#eaYx|-Ajy{DH(3<izGeM?xe8S(L8RhHg+w%3E_B(GYlroWs|e|Kt;Yz5yr
zGxoEUh6^C4L;I87Y#R#fI=ZmVq~@b>Y!X>Wm5WYkryMx*LvQ57hUv{iQ_|hM>+#fI
zVG@jyvSS5Q@B;#i^nWq0Im5N>Flq_0U7|(eBQOYR-VeW5{MH~UulT3f5~V|n_cGp2
zT>&?K1c54Y<s%k@pJIVuZk!}KgHRm7%Q<mo(Z)V9C*y9FC>Kw}hR20VBSeBPtUs$f
z@-HcpVSPKxy(BO+apghAVe=UK5st9(mX@4S_#D8fDr6EUME6UDx3dqvH3W0^;>FzV
z7p|OVZP}qIUt-+A7$ddENO{g##4Hr^k4Ohk!|uhqLfbUMKIzcvg^5+j)8$Id3=10k
zvc5(vGY(lbmrX7TsHaNy!Ikc`sfrO_l|H}wMd3q-RmmmcsY7=^Ux&u^%Zr_dw4>#A
zvq!*}6J@tr*&-4YBD!<!d$g;!1d-RdvyBIlt(<afv&#!Fj5{GJSqJmM>2xQY+}^dN
z)#6iU%lntn11qh8DcUj;ap0yzRWL_(A~_&VcK;UC{p?QgZA5F8iG#l{Bcd5UoL(E%
z3O7oCz2fWNd!mWV!sMHKh;0ElWIMr4!4p6n+vmQ<-q`scmDQYgBl~o6I>ddMRD7}r
z-d!0q^f#|a-~_*UQnt>@x%EYkA0*7VG(aDbk$bU)A4SxQ@V6bp;V&S+(FKvo!?z(X
zfBh_^q?8kvv)a&^h|0Wgg?V^rt*lf|J%hV3vG0n}m0r!{@T^S57+E-~Ip-|Q;jI9Q
z9DG%tL#h4W^qZqkb1Rn9Td$G6>|({BUP~slh|5EnW%>%0#sRLWj&dRw=i$6sh_?i_
z^b^La?_b?3Lrq#P4)H1182mhL&zv0pT-H0<i{quo6s99Iy?W4|0^iiSB4~>GfPmi`
zi?9LY25ZX*{cD2};X|)Ri3b?F7`K3pLT&xu*d>i)Q7&g&Q<pdhgv$qR1(Q1Vt73T<
zqGy!Czs-JT;n&Ef`dx{6*`;baHWX`T#bW<~`mF$>)nS?igDZ~!&44hT@be+%l4zNS
zzyC~__DfjiUC<aip*OTN6Im1yPF0o-g?Iejsu>vl&RZFZc_ODCmf{e+fEW*O=Z&kS
z2${D6xTgwuP#afx%TfrWYG)rJO=%uUiMunR*h|dgZ-KAW9I&r`k@ZmDg;Pp<E@6R_
zYcH&8Dd@JV*Iv<1N0(4*<(h9%VYJ^7KBivnW><6V0d`p|8!?#QSd4AjD^*vu_v&L4
z9LCkem1L*0hRL&{_j@qSH%kJj-$v<U(Icxlx{FjV?y|XwZ_SSzRSqf@{|sk8mr6h%
zt9&-#n;desIK3o&)_VUyd9J29dWScx3sxoY)b?}Jws+DNi2mS9dg-asxu6>K!_~PB
zt&-)k<Ul-SG=3(AH<+1vlT{z&Z;e=W5N2r^dg!QhF_;9sojSxwTBiYmO_@I~5C7)j
z{hC>KU<N~;v10g3u$dKuUn%M!Tc)_CzaA<TDOYVCnlx3z+7UVuG)VoQ@)*{s=!htV
zkt*0IYp&B;=BSoxn0&nK`l!s#K{5*(S)=W!vqLAhKba+4Ck>oME^n0IqFAWFY*Unw
zk1~0ie-c~zk48XB?Gxc`<6mwYgO9#$!U7QI-i4Rk%`eA4w#Uk&C%NUkofLK<f4C#+
z+kd?X<3Rt(`BMrj#(`g;wus^raE=p$7xV2)eD-;5uCFuOm~0bGyM};lQ;C|+RxTAd
z(;B?N#BXmbSMYVXnU$2zGb!>xI5D3#XIXJ-1f?cO=|l#Ayij}@YZjDu#t_c3dXU0^
z)=6pl#Ox;7`AGWfo;30{lo#aK86Y+mzIVk=FVUOy7FWeQ-;$BI4>IOacqsDubAtgn
zJAET!xgYwOf775wv0xf!m4qxES<GH*r{#{<s8!V`K%_$hY@dfG#d*)On3=TwRGVdQ
z&_#Qre}M$#oyz3)OF${d6>}_zoNqow$l5^G7yHR;1C=Bq4sp~Fng!KHBr2IkrX#S@
z5Ypw339@IU=Y1Ht3V^FiSfi9=ex*=qav45=s8m9bTX~2=e0vxJ*iu8Tr?FeRzI53K
zlm@KqGFc`XLYS(O`qSxLq|!KK5B|qfj&tw3)gHi)3H-#9r(PCVX)DtWqTV<|Y+TB5
z5b?RyxU`@at~f`;>0|G?BrPcjKxTWdFmvJFpbc$a|Lwrdo8y>1uzs$PJL4T%2T<{D
zO#rf}EA+n2I@~opY@FWjcA!hww-Y2SU>@iq7@BxN5V&#jRKs7?7yS-$tn){p$l{9|
zumpTZA9)fs*>rh>wCo7PuPX>YtJwX#@glA&_o=76xxBS#hIhUa<V_9TF9Fu>Q%F^3
zs|<{rHIiBUhK4q#3tpZ}=0m6&Y3bKsZG(ebes)aeseCSa%x8-F83tdNMoPC2mCfF{
zW*4FM!+AH?=&jlEwzA;7S;Ji=Mw)6A{~U0X^9lP@F(hOZK);%E(lpnQKHI^I;j&V^
zKK~Wr*gc!RntG66_YX|HEX2SyH|5_htYe%|kV|4*n}S+44e5GS)F{P1slnz-c=9R=
zd{N6yOm^iFoTl^D>mOs=J3M2K6fb`sKVIlnwl&T-tMS&?a~%Fe&oN0h5xxD1paaN)
z@@pwYV8p+2bdbXlgA>|<@?W<5zK=po;Gut!rjVQkuZrg4pd==UyBw|P7QxzoPH~7R
znL=dA-Y=2J{9+mxJjvNL<)MNci@AG_U+<F=)OWD+M{q1Z;5)EOG?PNVn}KO&)i{{%
z;?V|l@>+0I5U;eI-|LQdjLVB36bBffhlt`5omy8}byC|g@rQ?pJ2=k9rt1drA9U;?
zQg#fxXRAJ_5-TO+{Kj2ehRYFAL|KYXd-hcwqeEPf>4r91=(2^x?>y&jt#l!aHQF)S
z0y6tQU0*q%4KC~E`f>nUmZ-|<WChH<dI?h1I+ywzt9-ZiStOeujw(Lzwm)GBW(Ua(
z2WLuiX)_v!PdQ8M9|L5;y=B~Uyxkw>@Yrf+#WP7UTKC%ujvP5F)h|X2xFv$11B%23
z7JUl3)jAhyZE;o&HtMe>YHdE~5(!V@xbm=G84-v2bQ@RZ0S=b5R8Sat5no6|JmLDt
z%cNUg$p!q^FmhW>FH>{)@&W7ISl2~|UF%GT+cwx4(|J`W6()pCjXG|L<nGh;GQi&J
z(S+7EqlUe#OT%$p)=_;_t7Rf<QMV)kYSe@?Y^5EX_2*c&n`o=B`cBe#8<E{%GjVAz
z#B)*{QyWk4m@gZbi*1B%tyD+HV$NMa=J?06=#}_Tn_SWR=Q~Jm4M6Q9hE9>DOl_@9
z8kpH%n9c}p&p3_2vk(j~Z~Y%qynE9MMch};bS4!Uheu>1Gb0o2b`ErQwI&D<_yi9?
z2jC{&_m(>4zBl9c4uTbryLc=&_e-i`=cKQ(O`z}PWdt2}^K!^iPz=-!T=ti}0=zwt
zGjdD|bN9Ix5@#Q%c>vvR75gheM#gn937@(UPm^G13f_KLyxpMv<*gSN-;n%bnkE4J
zkyn&$IXi4lm?0C}AM_ff>AcH54Rw(a!F4<um`an#)rrMeabVKVH>0g_KZPHF>>2dw
zTjA?B-X*#82h)1SdZtF%<V&Tv;@MnS#4I~322PY$znUBC0RSqWk9f@Uq0s#Nb`91M
zOOX~SZDvcaXucRuRRz%?A8w+0aLjK7n9TmlLCML#wN5f8SskGjJbBTj9n$&=-0VBT
z`$riUIaC^W`DDyBQn_E)e8lx*Nn5W8{0`>|*4rXjvD)D`2FBru$8~-;UN;6Q{lr5!
z2BMfVw%*ok;sas?^}5Z2&CkhVsrr?MWs@6z<Z3DaeP7HryR?YjhI223Dw#*_x=_sL
z4q)^bQcKk=poFV>1m-g?8Y<j!oZWm3`_5+FB!QD*u*u&}wTaoKE#PKJSz?``7HsBM
zthP`W<*MjhY@v2qQ2{z5KbOk+uYcK~i$MfVF8%&KxB&RdL|qakn4y3>(4yXMlK8Zu
zeWIU}CKaDwnfgJ6Jq4kWr0{fm+~ZZ&QaVQ1n$5Xy%Ww51SnQ&$G4M{!m2YyPgvZKG
zi0|bx{LNR}=zgiLjs4nifqX^hem2ZulkVm4fMOro&JlFP%u2;RFi6_DxE~LDr2rQ+
z8qejr!3J=|8Rhz0^aYq4kS{~z*_~d9he#fkC>TAfACowJ5*>P>d-xFnT#2lS+T;(x
zM%W%;tQ0K-YdaGj*qJBpAh(@9Dpzrc{MFtNSoBsDbC{K?>*R;X<QAX6ur4d+>S>g0
zQE+~Izj0gQbm0<Wm&zQxgQny@NmjSYmBoVB{THC|JpB7Rwg%%F-=k6cyiqRmV-fXD
z6ydgZBsLzCUIt+)s=<aJICK!Y0JsiBo{9WUq%(?Y*>ZAqM+SwN-}mq(x9mmTvS4Dh
z-mF~Pj82yWXM8>trUuF|KjzS}h2P4Gt+Z4j8hrEMJq{3+dOtSt9Z05lW|)rmTsFN{
z<Gui1@u}qk(iET`Q<9iH&Xr{4|5{i<sZd{sQ1ew*@XdJX4+%Ok+ia{_t9#V(y5-E_
zide!f)ewVPR{Nvr2Y0heL`#7>Wn!YE9o6O{b2|Kz(r(jkgVu?9P2WNp%OsUU6WeA-
z-zhUPD8bh2dm5stM2cL}sPHPF5#^tkZLa`sz7#L>zEew1FZtav1A#kEO;1nNbYCmJ
zOa3L6`DG_kRiq}opr~Xd5KIoc==hR?=~>Nh)7;54Rq1F*JfZmG1&MK{%Se_$ig~Tz
z0Po%;6J!%CwX1ckulqj#ruzZ1^t>jsfU1))d=HKX1qXt5wnyjQe{fBv*IBZBv1SBl
z*7bcOr_()vT-_@Bz%TD{N<9ssqx9TR&)iHb#im>t;BJwXDucXgJF<b;w(C42;oMfw
z$+AG6{{SPl=y?^0@@a{9aydqt{6?&LfKQv*2v(G81S}lyqM)jCVV<*s{YIvrodTtq
zIr_8H)G#xzQL9pv&ybPp7j8-HM2QSwC(#PA0u~p%dY-G!jSlL!1>9<F2kU@g2Pv<i
za!3DHAW{CEx>cp=E>c?_@jY2>Fq2f%`MmBCDM=;osA2;L+8*_A2b_x8X4qjCE|2MI
z2i%ZWXB3>tb=@44r&;o`<J%t_rPBd=O5OW(tQMZNJn?wBqk?ouYqO_%<pUGI<dYKi
z$<cB5RqspP1D^}5^of6QH6cH=#`a}!%jT4S1#!UD@dA6FW&$`mBD6K?IhI7<$(5Ei
z{KZxc*)Fi{1$5tYH^Z{?!6tOu+*Z&AN}Zvk!kxU=&f#O6b8#IJn}U#;!1|%SmI<bn
z++gM>Vx3fcl+ykvrS%}EIL`*CMz~q={F2&s*E55?^;c_t^nuo-$e%2c<I(F+W+8h+
zq;HkQhn~+k|KMLR{xb)1)}0?Ga;W0g@kp#3ymy6&X0@`L)oYLwGLYi?<rbSpxoL$&
zd9$cWOOxh;U>6ka+SMkt>MOuZA(&&jXRxh8lKJ*efZ6Ws?8hAe%l8-1FOUbNv@BAZ
zjpP+w!GXG66)z|2<RPdgB;5{v6Uy|QuQhjs-<;KBr+fy3)qW9|`p{l7*hbhM^^3{X
zeW5L{oZiAgjI!QvkyT@liEff;%nI_y2HQOpzmTuj-O20TO@)`VvoUx|6~eP|EBw3c
z#n0U045#U$F69ueFo7FDav2cMvGZr^<XAa<ZoH;xaN&NuN;q~#PliD<Q0-{T-w~W|
zdv;}n-K)=xefVvm@;>tfS~HMWHWHia@2-U>seW)`*U=bGvx?^1!pO}u*x|KO=*wu}
zq7ag2BM>@ju4L{$@PuEb_x;D*{d>`vyJ4Dl-I#k%{jj@G{#hGf*!>N3<Qs%$clYfi
zD9$dmhiV$TC82WP3VIZhf(HkJ?b5q__@&t!fPFQ`E&oHr5B0%%JacW%BjkW1$Mw;S
z)~EL9y!oWCXFXrPGqqivDu;zyd*>$Va$i&koJCOALx9pvX_&g-ljErmL+DI|&;bO{
zuA^M0zFL~{QkVv4{3vDp%2P5Q<*w)R!~^3lkhBzkU{KbEf;-L9cOj0kW}^+^?f|-q
zbu0Q>wxP2bvi|y_hxf(gw76#JX}G-HS^9i|<M0@o`DeJ)vV~_!RZirNel)`Fu;*yF
zTED@L{Q`LzL-tQKpStF0Jj6DF!=?Pcon@+H-Ss-($C1(jT!fi?vaB#o+TFLJV)@Fy
zhu9u%=!~hBe0)f4Iq!Nys{9gxzjN=1A6K$;4aAoSlR{QvsB-<2zkelE3TG#u&t8!c
z$bRWxPq$H<!Bxa`mFG-1AojTPRLt__RbmLHrznGNOV(rPguV&Jj)~G}p|P8MB%5B?
zHQpsro-+Rdxb$CG<OzX2>R5K2YBb?f6r7&Lf|(^Y3?x1h*dU~P(<C^a3eO1E6jSf8
z4l!w+Y4n+L(E;7vqj;Tp6N@-3;d@7K1CMg|Nggo#4+!nPvh0&|pmK_l$U+e-OJ#KR
z*B#7XxhL1laIIWz+u6tyHsB|aB;*D54!38!u~8xdJf9Cz2MBvGhUV9UwtX<pHpQ|#
z!LFwvxQ>P?-51s{;)MQnd>oGEv-vEO_6s)P5e-W=q2?4!>?`w46T(rMv2)R~W$7uD
zW2aP&SlAIzQLDeCP!~o|EVs#(9?Yeto3pn9+AZu}P_S;UV=dX#Bw{faM3!;s%$g<k
z07v2+e<k*;IRmBkj^;5SlH>NI^$fIxR_i<^b=c?_k{<*cTyu1-bo%$d#u;dQ11B^t
z$igCD8o}HJtYGnpK6b7C?vR;;SRyAUU(eT7TNcu-rUq{JUe&ix_>*s(JbBtwB4b5k
z$H<Lw*XX3*8%}RzF=DrL+|2FGdHR*812hHffX)_#dHT%{qeNDEUXI{1#Dy{NDe}JG
zg5v-39THa5@Qc=Sj3Up^sr4V{IgX7tV?J2)xJ8b+PftvAAJHlr;fjukW&e;_1BFps
zHz%Xej3DG5w(!FG+D~+pt|enOc?qGY1nPYmJUzOag=v+T+{q=JnJuV(6%|6!0eCOF
zL)D-8KpK!Q?D*zBxBb-ThR&G!OKAERmriE!O6@RR`wmiICB0#N=lCE&g)Ljui%d7w
zLGIgYn44IPq~cR@=_D#+xQQ4SjT$!04Q~4)^jAr)v6#TTE%Sl-(m%u?UjAQ%A}xhu
zB7&!$^uxh;K^gb(OITQE;;07#JAm<<b9NNb*GpZO^Vs>@dm1dBH#3N@h|I}`r)gck
zZ0-Acf`+G2l~Y$Ovual?V|p0Al;3xs{J9F1-j$uV5lmSzg}js{XrcP9sN)Ae51IEj
zeE+^&c};?hX9?Nu;pnO(Zm@VTR-Q@ednDUt0skU&t~bnYgh@NxBEP`!4hz5|q!@#n
zldw&lTf7Yzehnqd(|17PP|tN-)9&G=D{|xWylZbW?zz>AjY8YrPj{B(ORxDWA>iN`
z^!rUpJTx38@(zmT7T)%}xYNKY*=o9X!0^Y!>FP9D^1Zs^LnO8CXg7gM^YdQp3SBnd
zjc54kabyXg3BTu30F32~Tous%MdNO*-M~UG32Q(oupZf#ft0@A>h62Rtc^VoMcfM0
zdKqfcn0{*h3(GI`sM$g$kB}#~S(mipy*AsmNhEICpN(cI=1}E9eE4|%W;XB;)UJI4
z4EWlPLKz#r5C)mr-v(Cr90nm|>JaFZ<*epPENlW5ZU5*9zSS9rCb$9^HKJS@%?M+9
z(f4$Qd9m9*zxD+4q8Vcj#&j@mWgjbi`we-dYp=Xd$(*Fi?6x4#J=Y*<(5DZxYqN_!
z?qT1NrV|o<{@WWa=?#&EMG8tZys;7g>v&>bl)RSV9{u+o*A0K=!*oCao(SU?6+=zE
z0=e%#Dqc%W`u4Zp3jk7^GT%d6DFRW%8(Lq;J?U-;rohT065izfz~@`iJRYcyoQXcH
zbPh^PtY}o`lh50m5ck#$J2p}D{K7frDffCF_Vqx6xqz~JvC7YIjn9U8m!B>68O_Z}
z`L(jzf15FVr)4c9^tI4*Lr>LZV(N9u2up%PhLb-z({P#&1VH)^Ox}A~e~<>;u<eAK
zq+#q}>MZ-f{QY@oggXL$FW1$}xjpQrcS(JKPyc06JsGK?54$1Kx^<4Upv<<3_Ksm*
zfNIV}?C&bapB8O1TEcDD6RRs1R7m<U@?9|dP|ESa%JE-RK+06O{j&n<aEnKI3J0^1
z<6qnuVGb&5ivR)%kh%$*n}x(ln7dHrP^$}q`_AX+s8N!GZmmmT{=AZ7-!zlHTG&g7
zIeE1dSxToex_-wHwJb}`*|g_Yv>uGcqHDo<rdWTZpv3F^>JY%|w`T+Hex}4>T+*yP
zcI><Zc(}lnbzQO(K+p?P3uX27f5b(8(ZV;gZoxo;ss?oCLg><!@<vQzUjAN~BFK%D
zR&xMwR*zHlbjESk{X7`V0(ouXiv#qdkjTPi$YeCNBnA{_h=Vj?+zLm`ej)zs8FdHG
zr|OEAr^eBq#hQ*+Uwa~fEx+XRMWC$g0_~p1ox&#dA?=}PLfH-G;2&mITP$`|Rfbuk
zvT)E-#sLI{{RK5y`bXjftR&#gA!@Pt%jP?q@Ly;SQ<WD~AHaUo7?9+DzAi)JjWall
zkBVBhP5mX1?Z{2VW!z~J>LC*YdbSlJk`}rR`jh%bjYn(PYuF_jJotjkSO^)Pqo<KY
zi74`r=6_|-tp)QnV?M8GfkR?HyY(gRpVL*=Yylj%Ag(#2Y^WwY!Wmc)8?k%xj$IB>
zt=^dv3+L_uhzfm}R3;;Vnk%-%nR|eM1L~P2<W&6v!3lSdU)>K@7d<ff8VA?+J@ibL
zN4!J1$~@T`nYyZIDSWt1>2~Pko_^idy^C1m>)(g#;AWdzmp?Z)DbTmZtQ3d*zGzu@
z^Z=k~4^R4`@>MbK>Wu1Q>zHp~FNz#_*$^(^zbjdx`QhySxazp5eGo~PsFJQpWA}V9
zlHPEGxpG$MyfADtSL^5x=oN^MA<0deEOk67kThU|jxU7EzKglQ@EDhKh0U0b(DoLC
zcZD?+2s=#Wkyv>OqQ*F2XX`1&^I>~_I|1;MbVX+?)J^!)&%vrG+})4IRH#2*Jv}J*
zy%@FC;yCVA4d8d0U>PM=Z5oH>t)P4p$eaD9pMn|lF8=9P#YeRKf#c6z`jhyepRz*O
zTa4!;9Eb#c)KGOFS-mmU-r+HT8B*8BeMxX2*WvI~xusda<vYKIXli#!{ktgtAQ-?y
z+OoS-F;~8$ToAzV_I$Dm@O$3+JV5t5y#b&Zj|FAe-fk;Q>^~iIDc0jW6{|_stoyE+
zG$`!btQV!t;!CNiM{buy(TyP#&?=#Ye5S27U8^F&4g(Q9F|Vx;T#_l*^TQh%iQ|$z
zjpbuCYBpBe1D`5o^?sDs?!$l*VDg#o`8lWJ4OLdxEqN#~5R{F4>097+exbh*0c~)P
zsAhRJv8cbrl|{01sE}w~!I$-t5Fz=U#gz^9+@bz+O(5K?$lHU&5b`%1m;|$1p#S;&
zV}X(_Tgze!)l}52%PQA98jQC!>+{fWoy(K+_rOR^TH%xI+C+1G<_JG|K!=`+iZ9b&
z$;SS4ks_Vn)GdA~um)Re?W_%$#r_w$c&)DV+}0t=BQp(U+!n}ae<qU0i{3q4*}{$=
zhoDkvH8@A+SlB%!uXev=%=CXu`v_6-P%$sU(P>SVkdMQfRJ+pFc=>*b@F;v(CbC!+
zpq~~ekZdGhAIeiUP^$?q2Pm(+AHL016i^~Oa{2*0+2)ZqO$4PAERA2pw>*IYeck}i
zyXUfQ_5u~g2uDQDH*tt!KiwKa1av6yc2QLSW7J$^=_|FPxKJf85r<24-cFV(Gne9b
z)}%iPdRw$|cV2(C&oSDqhNx0165_d59{fh!$kR)Sac7L6Qpy{D0t#%{C)UieldvX?
zN-c~~wi?0>4e#0-Us^{Vl=W9pLn>|?x+BYNkI<sH8R{cdu9K@aQCQydvyp)Wjnu4T
zBxDJ3Ilo?#W_te@V{ZXe$F?n8qY3UB2<{TxA-KDHa0~8E;|{^y-3jglcemi~9^Cm!
z&bjBiPwuO~s9KxuUTf}xg4#Xim}|E4u(33+bHYSUaCN5Oh`pDq>ftzPZfo@MDaVIh
zXZI)rZp8;taV7wl&_9&vRs`ynV$8#n4%i%#qkf2LVduSPI36NB2eF)WH;x>Gr83((
z1DC^0nbsG};|~_w!6e`S@zU6ks{TeOu`M1TiSn`?Km;SM>xp<lS|P^y$Ue|A3T|Rm
zZHpQaPm{^x$@yL5bEv8Eq+)kM>`ar^f=XjbTpYG$E}dpHFH)Ps9Zw^V!qfbRZ-D5{
z_wb`AyB%3Svw$?;Bw4f;YL`KTM5Ru=xebC?Wcpa7gAwA)i0BEY=t-y8sjlr>K5@%%
z4zn_EG%v<T4jjMJWD!0b0okSWfRbqXIJwEM;WjKPInZpA9(dGy@o`Vp3c<Lj`Y+JY
zNjI}|8G2N=ph^ovq0?z&rc=*F&p<EA4D?o8DOc?g*6k3;SnSKGg~tBavBv(l2Fq;E
zrG^PP851qq!!)!UXooV=?<(F<Kfl!Jxj+gkpFl<JjxM2Y-|vk#ZXy%-4J^<aAdGC^
zwDJrrRN;<r@i#PTucqV$+UJC%Go;E%JodNhsn!lp;Gz;WJe7N#KM1?MmI3}IE$pY}
zpwa|o?U7^iZhZ_YL&zjQ=wITn77n?Y=y8J)BcQ={78nfHor<VYn+>x;(2c`$4cQbD
z70S<8<uJc;O|$Qj(AWvByG5j8)b6con`VNx%GnH%qG35fLqc2%I3rEK2Dq<1g1cKf
zp3hMq!=4A6G7exi*YN4=s{ozt6X|l9ykh;0`E8jXy8G>KJ#n?ce6r71b`YTg1^j%o
zC(Y|B*L6*`yy?+6d0xKL5O#LSsl|oyL*Or_{bXANGSH|ss=(5^RU2~@E`5I46HOFM
zv{mBf(1p#4YGsG+)1wTfwil9v+LA>rviB2G(w))t@3*M9B)8jAqySel!DvgoFAi=O
z7c0F7rPGNf?n7&4HgN`lXh>K`x$5~U81r-)9^9PZV|Vc~$;z8V@WJ+Z0s%!mWQM}(
zqcwFA@>8<;nw*3;LaYK*?K0H<TC#OWk8o@x^V{(yP$mmQ=_xYtG8VYgvKn!96JbWZ
z+s$GLjcQR2p)zW;OTgnM?8$289RIIutS+&!bdPI3(JntVh9MAs7hg%Hx|7+BBZ2kQ
zy<iz0Jy%25E8(MA(UM!EUPDafC`Oi&a2SORIG(S(Cza3n$Hd}G4iL0xhQd@Fl7XQJ
za>5vm5=>Ca&LI^MsV_0}keBr$Rs^HWrFj#ZXIgu5=Lp8jk${JCRfYxq$`ngP5rw`8
z)IRZgzZUuDtH|TV!K6O%(0!v=RHzG*T_c^WGb?Ds36o=RYukG!^-N^hsM7Y%*l?1I
z?|iC;<vF<O<vb)8D@pA`cEWRdh&Rhj!+2ekR4uqu9L%3SrBmrm9=J7Qq20*EJ1=EV
z`@U!9e8tohp97>S2$8X9F;FQLW#dM=5eW-+-q1L+B}GA{Bv^w>x->Ms`t&@%Po{Ty
z(qS<G27$zI2Eh|4@<Z*C!t5u#Y;fh|0WU~yOk5(lcx`aV60qbMXFW=v$E*!*DwCFw
zfu5;7vKs_Z4rKOTFj-PhJO^F@k~#3JmS=_D@`s&Yhyd@8r#*oC<>dCpx+6h3FLMr@
z|6{=R6{IBLyG@^mqWtt+5<N%4D@3rc6xsNNJ}(;e=KDeOBmpjZ6|Jdnd7E~SP76j4
z+BGoV9o^@9)J>dBG#+1_6)8l2qNDqw5fntjRNvz}pkVN7@W3MJD`AgXf09mgP6<s$
z;DF-a_6C?wvi(d4=6<%F_9XM9r02w^Y;k?KVGp$D&{sZ-KfxmCD0MgBWsNNRVqf~m
zt=e}@=F=cR;O#oZ2jRQumh&Zz%*Zo~I+@DC`&n#=bTB{7`cx6o0`-vPQM_&bpyy^u
zLSD+kLuyp6dz1XFQIJ#DQ?^m+lzL77+>CB)&OX3rp+KcmRW>GWZ8z|uzYU*XhE7e{
ze@RHQW{f>*snDF02G57uAjwC+SP%{^+44LW%zp)=O~y@I8lY4YAB|l#EYB^cem-rC
zV~Gnfjt8lts{eMA$}QSC`udvr^uYV-elh#%b+MgT7<&dhX3Bb{cj3QomA*dD0;!0v
zmq2M{2KW8WUPC3FF&&Vr^L$GuoUT(W`}(|%d2!LuA<_PD2mr|QHR*mA^^$5HPX!Ka
z%gG$HA8t%!o46J!w-6|%%Y&Rg+r}sf9m_7MToW!fcfqMB3fduO@$!kY3FLi9$uC{^
zbXTwP2t7{sYpS2V)<&*`?2RjWdWDXE1?+|2mBoDUJZ}{q<&ElvWJPC`u%7eFs(*4}
z_!h<o!e|<f*=gkk(c*>zw|=)ch?z3{Aqgry?4thOIjcfF-H0h+vd5laK5YL_It$DS
z%Ux7iK=E*~X^c^WhV^|z=8_{9Yp*1Cf6m8cx*q|EgNVWN`+f-CR*smc5p9lu4>)<T
zS7SUnR>!wkmD72$liCbnSyckZh#XRu!NUu%t~SL;W14smm*#*Cg0y*r<lzPs`w9Z&
z+NczHjV-w5joB~zB79b!gt3}#H?6M{RPJnQb9TCC3=Bb*IZoF;3j4C_e$|AfBW%V<
z3T9ubeO+rVUCwqV5x~Im{OdV@;w$080w7YX^RO2s(yKU7US%L;FqqF=g*vW;%kn#A
zd8<z7C6R_rN=#rD4duyY0hLniqHx)wcHRSVZ!vPtOz<UeTeAjC<lM+(_b~~MP2;f$
zq#G8{UKw>`g68Er3wQK@3MXy3(FKVfT_L7|5fkMZ#v7K&1o3RAE9wCn%J;N43@9=e
z-vmF`wXOWJ>bEaKZi@oe1txmF&?FsQ!yaogYQHDH4^>ipe)$sEf(uo-6s}x3pS4x#
zTHzdWhjM15o|lC+Hy)2h{v){=ITO4M-K8pM^&LH#tQ&M~>XL6P+M}X01^si=g(9Lf
zlaH^0bQT{E!^9RFp8+<og@%jN0uI@8#wQJjs1hQ(8tw$D$321YY1kkwp`YVNU`uJF
zL>+8fen?!xE<ph^XGHdU%x4y7;yFZr8z1WIb77cOa`Oa|jf!GW@_5Rd<#!Qr;dy*<
z3~3kLF~zSeV_rZVcm|(rP(UudPt0<ZVNdb(MIZ@I6RfR1gsBfu$*phI7<F`gcy#h5
zD%`#7`Njc3YO61C(wBk_I%dYVmeiGNk7}nFLrq?SI>s9-TXx&KPue`HEsnt_;|<=P
zW-(N*7~TVH?Yq9)itJxw3YN4Eoz3?Twv@;RVN5kqER->g4Y7Wa4pxKrV56YR6eqxJ
zXx>K^9SR+Mlf?sGZ@0jOgf7sVje8A173qaBv!vhETBOE2#9wrS0CC}DN`~ff>okI8
z@4(sE;XAenzxEH~P%#q;Rr?iwFF}vyLeWEz+OQF~Axk*SXwdE5*2&Y4iYT4<afbt=
zpfIVHYL%3LR90<~Zr~m#vNq+r>-dQ>ZupsBwWs!{3ko%`N||IBcEO*5(&*C196M}F
zDHf36LVAmkMoMzMmecU797tXCQlr?fdA!+GSK7gfynnE8THZ`*q=$>epib!2(sday
z!9VBx9KiH*>d3sFC0u=L&!`L>7Atuyt>k$W%xOR*a32N});D8t=lLep`sF49pbMm<
z{7_X^Bn}SXFtX?^!Y>|pbN;*on$vOT8{a_%4#Bald#Z(HdZ&J*6Ss3LSf>Gv;Mwq3
zD>mfst<I1|O~996RDDe~vG7VVpj?vV7p|EWCtAwx)lVtZafJ^RYby7FujT#Ln4!Q-
z9wYc&;`7`PDE0fsewwxHg(69v#XG(^+&pFn3SkN0p)zD1sos!>Rk(lzOkwckJ6#`$
znfR%94xq0^!HH3ZK2!#)Gnsg^@4zbjYRHmC=8{o9$@1xH))|VQHztB721ih4P8Omt
zs-|w;cm0_x)OwcJZYt9JlNy4|ZneEOz#1FNVfcmalW|{a0Z~4RyF<A<+Sht0#Rv_6
zH?bf1Ah9S2Q;kW@!GG_B_LTxJzJSs|59=0Gq;WzITr9t;VjY8P({WMjnWRw{Qrbr3
zRaikOv20?1A!-hFWDo-PD@<Lv%dnngMVl^MkB&Qh_JgB|+Bbq%9>w}_({ypalGB3B
ztqF)Pso}2lwf(u?@3TvM=p0)qm%dwcBE545BCFOq5tOpYZ->ab^G5k-_SDe!#GZEV
z+A2?nOW+sgd$jh)Y`hEYO7)dD%6pAgdb6QGUtp}Dt7Zy@TcTpKcW*wnVbFGD#z6)(
z@!@<eScb~1DqAptSj{EPf~M(G-qEN!>oQ45A~sM@kCjwGHqV+Z<R*Yn(gE+d0)n9d
z^pz0MY;(J{t)Zu$3gi~FJU&@dJ(a!Egp>&^GqCbc7b_;R(#nXP57mzEZTne2tz@hX
z<m0!N)l_6lV*lt<Ysz3D6v*H&b=q1dQcf-Tgx{qB0m;4+cN=MP_%Ty@gh>yxzospv
z$7#X?{|B3m)(<ZnB0MK%-5=VN61vSv0C@4C+E5Ne!LVl-{+p+z1yR0j?t)HUnYA^k
z$Cq$C7n@0QbD~D~&l_saYZ0ChxH+tT%VQ{%rQ)nLU*Lr+=mfxAF<6DydU~2}=Tz%I
zpfT9K$00|L@@vJ?@wag|MlOWqa474Zf=)qoXd~$rv9CUrR3UYE`y)azQNV2h3iLzh
zn{(6)N`Jv?=!F(XF8eU5(CF$m(p#C4M6-}%cM5BltPaGQj~)(PkrCi&mBJ6n^Vj&P
z&<l`jv)mxcOi{YgCFC_1q!pc;W+W(wSqPVe7A#Jbv{O^p=M;CImF$2OI?6`iZ&=oB
zz^X{WRCf@_nbsGdIw(^gey$b+%zPoE^_i%VN9|)I2H7=p(XZ13tF6ngg=Ap@u^Nl#
zAknF2`l~T0jDGg2@>k(fiein1&=W$2f1@dfQspBM@AYnL+SkT%5dU68?Tex2;;j6Q
zCU<wCZ9i^lg5I$+L=?*uns4o;@)?RxJ9wCfLY>M>K@u*XV<UL>%f|*{K=)9he>e&t
z;-Oh*_Ctg6Lx&KO#v6(Lj(rkId*=rod(0ZYB;Vq9|E?A_<xY<rWX;AZcpRx?4`L@^
zufk;?<g<N)CA0xe44nxzDt!xdc49&}hOem08ehnHJJea&U&Ci*qE@=D$3Md&t%yrz
zi;#<s|E*;_6mYiW!t?t|<)h8piG(2MCfp6r)1SnD&98i0SXuaIvheQ}Z-eYx;C7S^
zPvlk14Ntj0A(zobTy)M9$EHV&CmYdkq)5|kQAHKz#wUNSagV0U7F#fnPuBdL`IRQF
zRPzm^!ES|HbUcGo6Y<E%1Yk-_&ck|`ipiy$#EF0I-`Ao_Sr6y9D(djK$1Z5+`ew^@
zjrG+ZYHHMxR<$#4NnCB6ND=0JOnGwV%y7FQmv?Y9xhuJXgJc}M(LQ9CdXqzq18?|&
zq4s(jnejp-Bdq92^;6WB;*5dQ9ambVk`2Xp6x=S+ap>i6v!#r&pFsPW&7{f6tZ6@p
z2_%0W(yYd(w2+Y%*G1}C?xLd6a*umUU4D}!QprLd<_{?$Vsl&u#c{&aIZ(3|RWYM7
zMwk_RBV9Rz!G5Yq#{Boz$n)$h{+4k9Yy!yeZPYN$<S^~`&~4WT6#g;SeCG$$)i-kL
zeAW%6D(OSEuET-|g}^&~cGy)ke%26Mj1c*o;B#&@MB3Ncw;kMD?BSowaG1Rf!8qDM
zCsFpwKKX;$?HSREQTO8$VBT0gp0Nwy?lyM7GFC;%q}cbsui{6i_R?7iFTTc3wa2To
z73ol`d^%(kmGai>sTbhT=Rg-QG4HW7<wXC;9={sDKIa|aQ3F6WT6H*Q^d(p2dDGU-
zi{Uad_?8dNuU;|9pCWIQ5t7Vm--kE2b_i<l+nID-H~SxGAlQmfW%nsLe)ca`+LJcH
zwK5Q`UTw&5i|<atUM<J%uNc%K^>r1lK|-v~7XOfzHpr4Ji>590(-nhN_0{zD@TO*G
zf83J%41UKKO%yQGK*rm2zH@+i<#~NMa9(>qE?gKL#QD+cV3}~ojrAg@E3px4Kx?Dw
zdj0D>wu3L3;DIigpJ4@;J$qrmy?f5Oy4d(8>{{ss!=;`?n4aH=;h>#@e$|yShn!!(
zwz;n^ng<2A)6{p!GY5#s;^K?o(&uN4#PLbev3EQP$I$?T{c55UzTg_~v)BADc_THa
z@sC*05Rz)|er|!w4nn3-W=^N8Kz(Y2m&9`Ei(Rso+HBXJx;aUxtrU0Nj5z^|^$8!m
zVqi@aaUqLfuxjKdfZGW^ChnF4zSy|0^_FU%ymPVGJe4XsyT$511;K|qnbEG|K=q)q
z(hAj?PkRS&I(>6ILU2CB6PEOWK(b-jWP=J==JQ`B^`}^WG%Y=vEll_*eXOIAE75F=
z^<aeiLw=rA3Sya)V;erPM_z@7Twna~=D#M<T8`hL60eEp>&YeTTlP~{4X0ENdZhR`
zaCS;?drpcquJH<^+KaQGbEnIu15@FXH7UEJ!(*QuJ`@ELK+;q%v;EGm$&@gwjS8D&
zjTJyzzHQhk)@5tZ>AQSP3C-_{XcSu!uzAY>@$mUjZ08sXDKI7uE*=fx^Nm^kvehMP
z*gN4L8^dGX4A+*w(`j79$-7*&)=l<`Ug4$Q2sw^?)Zjzyz*DY+xtZVwwy>yoplIC5
z(x61@Imh7|?dKp%2tdF4F=$ALGTMi5gSri2fgc9+ntiI8NPJ?|2zxhF1y%u9+Pr=!
zp+?M+2vJz1TMTBDe8NN3on<cr_6tJqh{Z}n?mdX1ciCG-Mq1Jawbb$f+(9lq)Qk~w
zk!b)^N=Zrl))c5)s23j_u>T&U&dYsG&aOB;V@yP9otLC{pkW&qDsWecm~b$HAbwPv
zdj3nb|4`tmdw?K!B5SPwnQcV&MJ5*JS#YEAEP7A+fw|-cbmS6Fr}e>JPQV@?rC%@z
z75zwzTd?cv%-;Ji;Zkg8Y6<Y?Y*{vkzAviMi*^!&Zy#GBv3enez(La&0}TSWR-_b-
z&G<Y}Z6+5YYPeuWgDMZUPRNu;0yyu`Vx{$r`^BE@^D?FN)9U_E6KLior*t0ED~(Zy
zH^KIU<jaxg<)2avF1|8>y?(F44%UH-w_=RrNxXu7M4@B{S;B8m8?8M=y+fo9wZte2
z2tQNu)FwmG74!i9_2|#z1IB!QAmNd!i>D%l)GGM40aOYq{(dF?VXGMg&))Xfx?8wG
z>%jt@T7-NRW8RA#Z`&`jO{Wxz6)axwrVj>(oiPh5Wppy`p;)otk+#=)F%oYk%M@Vk
zZhK?DiJEj^{{R~xZlbh}j+xO^A7ycquecAbPBAeLYdHoAr)blWFyGn`RarqI9v3@N
zE$~{2(N{%-QFp1=U#vByN<FwKNb#D<&k4|}P_GJB_w@SaDLQn0U0B7`>F7}=DUbDb
zMTOHN*^_B^%L3iy%nLRQ@h5L&R$Th>vHcT7yKCe=Gr>S_E}cf@XN5L8YO<ChU!@{>
zBc&)9lYM#M(F{1DGr|{NEFd<`CZJXrRA*Fj@TRKnP)_lYoF{E&Z5r;x6r@dRV6g*N
z(@_!6?p<pd%U=ID()jVdME|}>+qI%2;jg^aB4j^rwF;cnNx<aYDZP)_7Z_{PHio<T
zo}zi)*lTQP8|CF{SR<0?AjoDS^QI@-avq4!04MAI2)g<iE~@Yil8pSq4p-Qc9loCJ
zqDks%Rwwueco==^!IZ)4?8r%uXvS-yLGCA{totA!066_Bk!%aIYNRpFZ?5Kir(jU1
zuV)*NG@ytpHc<5OfdH4qv?0GlyAN`%iKsn_)zqRk4Sql;QZhoL&v(b+j;aUEyXdS7
zPyoB-?{-DQT794>97nF~l>e5S29>7oQyB9Zu^Hbr1l7*lt3k)uMTYTZcnjal>wf&z
z<!R~cWX+q_ude=?Pfir{UgvvUtKa7iQQ8w+Qs`3HY`{CXRMDuu3STn8$_oZckTs)f
zGscSqJ(2qR@Tcjs#iY=|m~E^V4^mYVATU7o#0q9-zd1($>HG;j4@@=0O1DL{)C5!@
zoGSNzH2>g2MiCT>p9eAYpHx-Cv?&eVzNu5F%Gby<)A=o|v7KP$Hr0BA(@C8boX4tD
zR=3ge(@QPvpEwTH%^eLg`u^`BtN8Xq+-y_gu6-&DODg70`e`e>z?T4jw^1(zIw#Jm
z=XwRS*yflR;d)lMS;R6CuJ3qUdS_1P>3D3>2eaj2gvL=rsx+ncn~u;Hq0ww{)hcCq
zxZ}^0f^RvsKY1$UY;Z(4%ABG34x*I?5x5-HeMV#z<s@NCLxgKL!Ibw@uwKm@4-0=~
zsW4C7^@ap5I|2Hggvl)>hRdd<KrW_2;qI4XN@r0nqh(N|=Ie<ua+#RW;AgX?l6IBj
z*nT~e(0FhBtQaeB`|b%EZOF5w;m{pL!!z8Gy7Y>(PzVxoIZ~=uKw#%pD;l&kPXwRa
zTK*Ez(3aSP+cWp7S>>Azv;9VI8NT;c#+V<*rCvhI2GH*4ju4mR(=k-hRB<lVoTlm1
zv+VQ0>Y3Tqch}st69WUL_e4gOl6m9ZEUn6OiUvwh!GMR^a<6rK=*R%lWFfk4embj5
z<dC+yBx2*!Z0wjYswRRuzF;}Hadq(#wZ?mReN{ewB2EBm2HRhJ0c+XI8_CHc^u&E@
zX20|K0?@pRdYX@q_`Ki2pfWmg)e9U|!29Dp+f4SPy&q$$s@CL^srj9eveE0MW*J-o
zVJ9OP##j!t(dRNe6_*@o5~!RIpsF&9VA>B<oji8q)>Lw`I#{@Tp)O8b(^Vh#X|wCY
ztq)n8eLr+#2ZkTlgiq0j0Hz8-tKQi<wz*{htU(OeS*!Wh+}c>BFL0Sjzy4KWC1$2z
zFju_JNJQ`x6BnI?f-Qx#NC`jY1kQp_E+Ou7X%-ik_zxg&n@iyEBVozOr-A^;-YQWe
ztZ_IFS$F2ojxovg6N&IT5Zvjj=%A?Y(exsZ+Hmp8r+F=4!h@q?lw+zm9s9+x(g2ug
zD)#XcBa*iYs*wIZb}Oz7!HE5UCvZ&Px4iKH0pX|b)`Jco)3&J<q^}>{u}|$fHd?XG
z)#|H!NH-;06OE#M_0@P)71ExJ58v$}T&b-0;<@2;Bz^dy_k$JrRBw}{7r+|LD0Xqr
zLtj4Ea=kG>zx_oa`p)E5K<R<+Y#&Hxq($VC0|Jv1(idX8Kepn#6&ML38lcjohT}6N
z+5sU=aR#4uk|a5H6(XDBl>hC}ssYQMvPE(vAJ?AJIzCC#b?f@iwA0VOPb35-4$|!^
zIQ_u0r|j1ndJ9$Bqcy}s`X|i4BA!wLZx?j_6%<?IPp}s1@TNHTOuG!@C?@^yzTO}|
z{lrOG!BMLNs4XX-MQWW=hfa!CY!ks3p`{b6P`$0$bNfu7*6n>Sx@x|1JAh<1E!F!o
zU<@YK#D`d}3UNtEionJy(sw=9OZ*|2zlY-A5Ci<C806KTRt#N_%cQ?S$huU>Wv%b%
z58kW<5w}{`aJLTcK%LqD!226|%HJ09{F(bNrgD1=d>#KcZu$LzqrHl^H+1{`L$GcP
zmVY;);*CmWkE!;GY=7A`JN1wtMR1GEXnV_i?n%jHd)79_C+u^$-OMbwsnKzzZj5Zx
zO(rJbdWNhP2}z6WDNI6`jAV-jggl4`7N3n7EX(i&ejxO9u-6_|ray3M$88*l>+&%)
z-zC4UrlUh4(BBqc4MAH$F%raf^RZF+v_i9jXuzqC$zB+uUY|SCCEr5Bo2ObrUhNLJ
zeu0fge^4^A4mzK-2V*l>tS?kNI^)v1Qg>%rWav=mN1_y}OMo>YvUkq7kzhf5dnhRs
z2?xdl6vLsyKU~Bt@xODC_!s}*TvQzTAGrwlPhj-lxhT#Ekyd%(|Ky^N#Q%wlMEd^|
z7Xg2P5&7JI2c!RuizF)6{wo(X-4Zr5uCqJwu()qFJsLCx$zS3bG(K)MJnA=?9EUas
zaZRvS1g`udGi8j6GT5}4XvsO}WtN{|{g<St1Jc5KxB+pdi!RM)hjbHgW!EQNvV9ww
zFu~7pkQ$C#=%c~I@C<o41sTLv_P1Qg#VY{Q-j3oe!`1WjS>W@ulCj=`Vj?=<cYh<B
zN%nIzN|o;E;zgIsm%V9OUTv+B&!elE+Hmy+y4L$u$JY}9+J!@xVYeo4ZTKFja5X3`
z0e_!fMvUZaez5Fz8kI5O3le*r*ka2>Zp#)UGjo?5b5oxM{JuOVC=gro%8AhRnfy-5
zemQc|_ip}?()&mmV|w9qrbXlw>{4f&h~+m(+^n`znnlCsSit(Y@$5%)>{D<L%u+mE
z(c2|N0k}EBf;}WpOI}O$*!%K@dl4ECfbv@rP>Yr6kpB7@!1RN3ij)^p%aL7(CNWA`
zg(h*zWaR}_nhaZ0im94tAuMjhJh7S+I;P%j$u^j~WY?TA(>M-RLF&6i#)E)~p6AQk
zFC{Z4M7^<i{lJ5Yqf-}g#Eos#9l>@sKn5HgInP@-q2;W1O>tVBw1KU`T+f*fAj^TM
zz^I!!OrgfyvhtAbRq#RA!s*-m{5Rh8aPktNCJf6QUgIMYm^7I3(8n%a-Vm7dmq4yU
zH^;AjKe#nq@}!@XdSJnME%P^#<@znNLCzIsC1$NMY{TR2Aa+SmyTOPx(@owjhfIMf
z*Lk;`(psLnt3E{~$n60!DPT&?3@R<Kun1cE*_ODhLct;?RbZ#ZC2xd-r=ZE3@P}{&
zz<v`>dHNgS&{cKMnJ?F7AsqH(kq=4_vNLq6@|8_vPl@Uw#SC=e<vU3#D%V{kaPY}a
zBJRI?1`!*wKEwIZYN(a=-vFokYyfy89O)#g`7a8Je-X~I5i678e<d6Ut~bKb*2iyP
z^IdBl5r!4=R(NN%PxWE&Z^HR;f}gy#Tt$NuY~bxR1NmH;Qo9ouldpJ%Lf(xcJ8j?A
zSIdXxLdaa#LoE*8Y-|H4cYq&p>D^oT!ZHK5E2-dUxeAl|yXL4*y1ZrwCsmv3V59Zg
zCWs%}RG3y8hj8dZel~k}uqS^Um_tA+ow%=BLoJUuc6YGlcCQUO_?3%KwxT#d46s+K
z;@-?l&#D$4koShFltsb7g0bzpim<lrgL@NxF>AqjC{gq5K`#+gM@A??`Q+yAdj$@R
z8F@$8<AQyG7Dful3gQI+N^W<C6O<z^8zENpyd_&mPPe9=*3Rkax=TF2PQ6c1c~PZX
z^vyV4gT3-!S{{A<IPO<k-s;fT3PO9kQPsFvZcWYaI=t~#2mX!c4Sr#c)cV@8b&7*8
zwt~JP@Up7NW7YAmIhb{*4{U&sk?CJ(Gr;$MqmBG1XJo+tf;QD%|Bg09#Q&hp|3x<V
zQ*UIGSiTMdWMPafeP{ypru;8j{>{pJ%v5lzLh%wqTp^zuoZN2Ut5cun1ir8#5K9rn
zBzED9Tf$K=F;Lx%8+wX>J#Ez=3t)?H>-kg+XnX=B%@I3kA|o8$R6N)F%_ts!MJ1>E
zG2eh?QJRFCg#tFyb8iu1`FV+IW5CX{2wYGmPl`vL5s?>y`|fZ1Zp<z3oIGbg@nP;`
z`^<c?ni@Sm#0A=W6vnSXpP@wI7cGmwCfZJFRRq&T!hFEVF#<P9*isNQdaGdn*bc)0
zX*1dKJ+8xZ!Uiv(qdv0gz`n=)9AS%s9IQ}ny*O{&?^N{5rax}h+6j<|oe>-UdT|$&
zsq=Eli}!lt{>Y{~tXpo$i!>weor+0AdX|NFE-%R?D&BP{u#ZnLvZs`6dE6h9pPC7#
zuM=TX)|iJc-n#>HTs?f%!WyMhO~Mh#t1~#8thb@qk}AN_Tv3Dsu`CT)43fDPQE+2=
zO~V%~Z^ZngiCKHqj0zxlipqE|oN_b4&un;f^kvwL83WOQnM;_OrQezP*cNWjuBT*`
zdWoUoSLJEMvl>2P+pfy3YsK3WZ%I@-LCQ=}Hu$4ak^Y~EFM)M?v>lE=>0r(NQj<9o
zmM&xQqa3X_uOiPdx*T5cI@fg)p{!qKzC~NOuwR-TaBw`*55~^BKp#F#b9tUf`A5Oq
z0|PM1BKE0q6%;1Q`yJq0YDJ8!DZ;nq$bS3i%~EQz=u5IV$%5MDQM*1vzL{2cIIQnG
zYeao!1HfOTT}?XxMJw!TDRidH7RyE^dkyB}@eDiXTE)JPas`@*Cmx$5#liEL^+5Td
zIpnenu2X>;^c^VG0qX~5xX~%)^Y*qfwa>ygW1U({2M-lud_o?|ITx?wN-yK+*xx0-
zUUgn#u)OkNuys{Uut`+%o<W_FVSXw5MP{Ql6Y)-@jk(UvZMOjK8=@e{SF`ZcZmURy
zmS#>kUAQINv6L{9B&d(@*Y&oHSrx#)6uR0%K5v^xe-F+2O^ve>DRX{B&k>xjyak*U
zFWc)Iu#CIr`uql#-@Kw5@y09XxGI%HSJKW$cF;1eZ@eOO^G<iS2Zs8@w9yTNN4qm1
zo_vPHxjQ`RJErCxN>|89R1+2r!yZfpKWuSbKFe4Z&X>`WBS7`5-au2n$@pVs9+8`$
z5$*e%NOb#ovahQ66b9YU9&$I9Sy)_9#S?UI!1AeSi#QwtitZ1ubQFyrla~EUo%f&=
z6CL_%Vk1Y%LnGCaP=Lq3@k%Dl3AgHByfQ(?72*!$6|o77;1H%Be@gTZ!28WBz#m{y
z!u<zWK$8D6u(;<U$^@99dyL*N{ubsv21+;$AIGyrt^{6uVEIwq5A-Tt=>8k8puDe0
zA}^foK>0<wI$SNr&rp_0O)2BW<d`e}-i`Vk&_`^8*Okfud1uNt+9@9D4rlD`3-%$4
zPnvXs)V0u~zWd8?rru{wlgLFI#ND8b@wtiadFFbuN`VozB^~{~#iS}$<FW{BbAvt&
z<$pU|qU{T>J4IoddwbC&H7;9m;rTPI1+hQ8E_G*PM=}iCe5JA<2(M!>uzZU}_4Xng
z@;lByA>Ae3&a3__Xuw~=PGR0=tQMvfVsEQrl@So+T<U@amJ?jTzUT_Dw@B|e&7AUe
zgP!;sC(c86u%&r#GC`bk@VjmdQs8lVk1tzlc438W4=)TsTv~NK=92=s0fWmJ8=ji~
zg(sB$pS&?|z<TpBe~_Z#O~zPnUH`$1({AL|26epE9XtQqCY^78yB?Ldbs2x={-K(;
z;Wwu|{0n>d|Ae(yeT&#8%OT5@y0HbQ%rnI!^-JT5tMiKL0GG_ppYs`a-u%oL#eRFT
zkg?Ai%R}9lxIFHM7CdE%>7zErC{Fv5l9BB~)=I`ix%S1TzD&ClxnTD9CP@#c+<hlA
z21Uq3Vr)O_v>;=x$b)^tq$qL4>W$xWERQIlphO}W+v#GHwDPQR*_co!J5#{u)H8iS
ztfP;8N|F)R5DjkK@P(jTz8g_X;$EGcS(L1DvmF#Z54jCffu%cV;!}IKaAuuq?nm%6
zbckpHCG#d5GDhb;vr47QtQ^(`yZZ(o$aK8~n)I6qQ_}<z^|SDN1&s1wBBho-30AIn
z?M5&L*f26p#4ma&kUP7=x?8{uQoTIP3Y0MORRzU<2F2Yj`PE!uE|SC?cxPedz@nfL
zXxmDKh9gz~4lN=_+K1o`8W%-~1(H5>5|IVsE_(-_+GVYVYV7bW`iJjU6Cg3r+jsAT
zB-3h|kzfYW6YB`dpZvVF=37pFY(d#3ZGq7Z^ssW8jUltS079!+KN<mavsYP(M-}6h
zEU$94rlK`m2GBs{C77My9VMuAag>Ja10{!bB{x-HO>m5hQH=Fw&^6Z&CVeqr^)vd!
zwgWv-^;D@I)8j%-qEV^-QA*A`Osl(~h}e*WrBn#beg_{An4E+o+R+R6(@TRi@$`+T
z_vl=L4j!yF?sgJ_abti0lM9KycXq`K*wgMN>)CTcPv9fOrD>PlzWETeR4R$V!G>Su
zz&@Z|N9GHW(&36V%7k*_<5E&TJTlte%)D@_$JOnH&>X3bklXnwJ@0lvQysaoMmhJ?
zv>N?Y>B}C^?S!BO&m|x;VMu{KWN1Uj{A~6dLKYiNTY#+&L>~)F>|UQkvnEsA(Eq7Q
zFNr_k9LK%>5__){+MAcO&Rh<)N0%Y9@ni2z(!5ZnB$adhRu?-WxE5>2cLla*?Q2Et
zM80S-H-)~t+rRJbh2ulB8S3Gc_HAoYvbs5F5$@$wELjFCO+^A17U#vS4!Jj}tY<W}
zIL9r4;X{)#_pwt0v5L9%8Y*-9X`RFc@!vF6!*d=-ZnT=@;nHH*y+n)oC04wL<=TgX
zweN229pBD#d&A=8+z&6G$OeN;V}FxTtSvj7Lz~p9UYtRaOk&JLh_h?$wCUMh?|!mX
zN`&jp7yFoCgN;`;6zImK^Cbs?Psk&V9Y2A{BX6XSZoHNU-ItqB+x^KoQJx=1%TvZj
zvOV}oXP-PN7%H<kXtj_@f|W}7esIu26sxeuN|_`nxGHSKguC7dM2C_5coA)B{FOj4
z_mWjNn1|z+qx16|r$@WXup=T>aJ5x3<nq*T>^*_wsrD)EfOuG`aC&Tx<E2UKYGpB?
zMl}*1CaQM#c2`^So&qUA3nfBqV3+Zydp8zDRE;JCe$wEHt9w+9!EDgVC>i!|fZZcI
zY+hS%!k3au_bTsyb2{Qre>olPH>cw;$^A#^l%<fx!ThCkF0Ua=Y(b;KETzZM`wB?M
zntOUdgssDW-F4|J0f}m+-hL5Ex%|Fm-bYg<pBkGHep1Ylc2a_Ys}3sQa2YB&3Gbyr
z=u>w61wD6z-Y$Pbk4wj2(33TqV?7CD!mO-JU04o&h4$=iHGv4S|9sP~cO}`^dtlK6
z@gk@Y?jbqmqiZU|0u#3krLfT2=6gaaSOQq=x2v-En42^4Kj8huqIwOn{S_H(uA<F9
zlHOjAmay5_hWylkt5y4*hQbI5o*%MTT>+8dEc4+hD>l0L=HqZRsK<K<1?`E~5^+r#
zN_9?QI$K7XU(7r|&81-deJ}+SC0k>dv&`SoSp)!8pSTmw$Qt?V@jbwi_~T(Tn00_u
zEZmHEm}Tu7wO=$o#!D47?<2mHCR^c>y=yfq+nWrEUGT9u0jYvX$AA1tv;;CO`c}>%
z>Yjwh3uQ9J6Tp2DbP4tijXH5+GO|yML+c<$Uzl1&ECAAn?S-2-wG$WYT>Llr_>}(-
z^7#vV0N-pF$m#&^c}{S*pLUA}{|S9`NrdEV{Hl^#f1{60_dn><!80fw5*7!S{4GVn
zK4Lk}ygjFEcVSUq=CRm8lDsG2?b(cFnm(xRCFv43-*8Z*EaG}XZ4%0#T)^`Lv-ZUq
zfag46b=Wqway86B6inC{nMvqUBX=DSP*m0ES{bliX?p+YG_LzYpLaixY^Y*LQ8L!2
zq%7SX@0yYBb~$pUy+QE5wVSp*h+VgrB^~F$Ok|71%kxvEWs9B^KG*$-^CU4#jm!%0
zEfXU(8I+p@Eg1k)HG6kzleoXQZTX%T4XD#yog08(Pg5rizyS6*gM6Lox16?1L*bVv
z*z(Ok$nz=wO+a4TZv^yGc*AG*l#s+nLKnbRwvJ_Cqpx(FIrtC`(P(D15WpBS&<&;?
zU8nVuFoy@0{t?G!FSN`#@;$LTRAJHaMS5>p)3+$TlNxF3iFMG3cS2S1fZ^!&gIqs(
zx>&MXjv<~Gloj+pawquT<<1B1gDZ3@_NXX%t}A}_uM<|1$}QorR1U%(8y*w$V*EHZ
z{kVxAsv;nV-%s$JfSo^St4XYXHf8^22l4%7;Wq%;C~W^v00K__PXIc1qfnDr<;P#o
zO>l~g@t+Nt;N`1bC}v!m|3)gw#tZ4Mi!-ifE6y7eI*dMVlz8B5$vtQ&ZU+an$CNU4
zcNIFZ1=u-g%M(Jm@W3kgq>8Z>t>w<vfDnqrPd@EVIk*-A#YuJaG5<f*4hYmA{!u0V
zhkqC~3GvJPa5wltx&MuSsHA+K8+YVgbyMXk7i156WytH-R6_L?R28ZR<^r=H_;*a-
z&l!*(uT<nrZ;?>}KbjpGdf*i9Lya6|T2G^-87=}9=0fA+wwieDLaB0_q$O12YN#C6
zeKwSouyK^~AO9{uZZ3miD2^D(#skDI`HVVc*_OYg`mHbIb{uv+%SgGJzK|CzGumZP
z8Gm+OvN74MHJ#7o**P^W4Cl&{YQS5(?-5r(uHv->G-rQ?K3=dNOI4wqgDXv0%GqK4
z&w}A-?;f}kp`BORqNhx1M&0<CeZM{0uP;6{R{lV#b=;SR3uGCmPpwJ)(L^BF%zZ!g
z*{s8~pK0IOc$`EzjT*sA`8%1lSc;()nX8yAgc~vc!iBmadid>UfEsU{zCVJd*{Oml
zn5&wh@p-vosfzN;Cj3**``cmb4Z#a=BG!j2;wrTj(&>i5a#&n;@#}73)SizW-%zQM
zYQgc3)UO;MF>gjxVwWQ*42aS!^w^=u>jif&%6rnN#UN<&jN|6m{j6N-5-VV<0v>h~
zGI-8@#0;&%C)5GB^X^h3dZ|U)o>^!QsCQWw1AGile^&~(RrbG+g+@YJ{SIMr=7XKF
z5GM04KZE<M06*O{`{rj{F|w4z<*FGZ<%)M(PvVUK;vEWBt`H?4kDWyz?t|^inb%E_
zaPmKXW(MjX+ySBz{xk2q$HPi{^D}qf|K(?FSpJKj(eKo%)X`mwIpAa;RDFBo=j|=y
zGAV)<gX}}a|FknA9{*-%zUfu^f9|sE6bC|I=?{q%L660#HP$%{85x2%x8(O--t^2>
z58sddbOlUc%jKa)Qu|m+6!(<qaY7Lj#|<mBYCdlwcrfHqQc4Cl7PWu7hk?UZN~TQW
z-ws=PlhWq3_3bv3(p*Y=wtH|Y|C)BY@pj_PY0S7Va8x}4*GXyYWaN>9A)2IQ<foK>
z;`|d*HstL+{s}7gC)m8Uo|Me;W85Wk4F}#kYO}1Sv5uWKgb(HGr`Vb_1fSzAPE;5o
z2{-(Iv~U^b&BIOfV?1>VIXP+GzDb*3LBFL<Z58US4LfGPNiYZCunEORA0*?k+1-bm
za^xb3WzZSKp_z=eCOz|`*07e|6_S|9wp2(+Ux-BHuOWvDIT{N&<j-(|K}<BMO+>^%
zgwh}(L}Jy7_xr-UCp!@e+i-Ua;<sR-+oQjy&%dpkSNt=V`1b;0qN+k6KuBLFB)BJ7
zEIe3<;?KlWn70eJlzV2zsK7Fed%?waV+b+j(cb=%b;j;kp%Pg7-u{C5q089z+=6JB
z=7DQQu8C}VdC+xr4fdE69-^n&;AG-{goK)*!zXkQ+df=3CEd_hIK{Q}{>F4SI2M74
zquu6&(z~B0tqeBN0A&F9;M|Dpp^=Uk0bkERY%A(=GwDzu;}zIOnO3uUGk%{#^(Pw{
z)EW!X<bYf!buY0>C0WDUi&hLOu8ZO!eFWsnJqWA5T1(l&q%~*%qnewqwcQCdz61)v
zUuiMNAW+Y^PvXDgDP<j~gub$V&te*h$)Cpi056>Zp=O>S0jSp!h02|Lpk6pua@v6D
zp`l43`Ro#4h7nhd=@X$SI4?r!K#Vr|CN8qxYOPW;Cp0r71t`=JdxqPI%n{=uubf)G
z&KBb)HgIp-d?g61S(ipOjKwmE#xnW_CA)Gxq2RPKWK18~z2Du;4=zR)wS|L3Yddx*
zKtbUAWzM&D3P1s~(>tqwjU?{Ti-c_@Kwa9;;}Bh5e?~qqeA-mWd*-D)(M)#qd#Kaj
z$?>x9fxr^6ppGL>P$YEl6<-c4P@MEpJkW-=f>#@0)AT-i=dov&hAjy*uMifYMUF~5
zUqW&z&5OE&$8Uuqps*4@?vnbRI}bfC>@pUA1=^#{3eamV=$>jW!#<&w%KUJF600pp
ziQy8dEuH|zE@WP2A`~T1Z^!S~+V%1|t+mV<Nml|5j#fQEU@v0F0mwyWE))(X&h(26
zUIw9GDhwc)g)teQT+3*t`M_OlBi_g3nSCs+0FCH?+bU-u7+VjXXQo88*gT}!f^7M1
zt=o`=2WSlXm_eA!l?w1J8C!OxIMM3bOnZGanyR6X3~H&__mo3)b*?zT^A=S9H8Yaf
zNOW*)0JOcNebgi3qgH*-98AAit7Zr>`nl`iDNuXT@22k&rLE$e^b@_lH=?(ySO_)E
zu_Od}BreB`KVG{bp0U-~a-THf_~n5+t^LOLHeiB|^RYbgIibh3FNT_Un}mHhF6_%_
zNb@u2&sh42bJ(OW;KOt2d_PiOUf!VpM=ADQTf;lv@v8;G?tlrddfwH(n?})=Ej)`z
zXFcny#Sdq_V_07e;Hu~%>u6Vlw144Qgl?ULbaMQ}lc`@=IS$NNjcCAp7>lf`N2yFF
zSq4N<EbyUgBDhIf2F6&UZ6a+FojM-b5FoUX9wCy%hBGN?*Q&J75Ni%rVtLL$tyK5G
zBk^6~`KUB#2!1(^-#G3|T&7g+9TxziLAzGgCYC?ZZ@wYXz5P#4SN=E~Egj77Y5fto
zUX};R;jf|HcK>(<NM}lyoZvZ*dOF2O69H%8Uyx__z<G>?gb>fiXrG2u0YkPgMh*QJ
zrukysJBT%(D0W1ZZ$X5|)E@j1bx(4<phypc<axs%^kxv*BxVp_^B5gx5F7q#HInOf
zXPuAl#>_Epsb1uTUU7II*9Mwia6+(fcj(ub-%W8`@}2Kv4d<{iP3|Bk2(%sGb{`p{
zE}T|j-Ihy{4LuKMl<wp7odN6p2_!uaSAu<vQcrLDiLTeZB_j8ZL#}o?4#U<SMLv0c
zqxvXF1;y{r;nVkW!l)Bh5@`+shWps|nGAs<wVzfePr_daU6t4ZameeL`aV|nq?MXx
z)`}g37QCe%VaIZdhaJlL(lvn(j;)WO%E8OJ>fJu@rJ)>AZHu1oCE~e!5c@mSy{Rnr
z@;O@!-=5;UZ(EWss_52@lGgTq&fXZ~=S1y{k9wOLSWB6mMb3$_5FfkpghR+r>uwb3
z5?3v*4qBuL(!}@Wl3#~rx}k$l7%z(Ss1?d7nm*6Sdy)TCqWP;44e+}YP3AL&w-5bR
zq!@8LWBC|#!t^!<XC_a|6Ze?2)3wlz0(qDjxaYz-qs{nFw9{k)HA{P%)zGR28P!*t
zN>hFaX&VU@@xDU`wOTCPdNX)^hZO`{@r!SHi$Of+|K5?Nw^O0uBn5N64)?)R<^sLA
z;9*4*fVT_*SLsGJb<};hM_EI_2*m__)_C@Ouy`2thTGjw?+DYp8Vdq&Sg+SY@($Zz
z&)42%QB;dWvxJt(8(PNy{<f}ADB97qQQpw84PSUJ=u`D7wA7Z?95*f(i9SP?5RFKW
z{-41jF1YtDc2!4|rcWiL_9=PFu16nu($r&k2ORVMAUE}411pk=tNX=X+B83(h#Cy>
zf+3>ZW)z?l_=+;oEWy8E*(BJ>Yrdkz=2r2xJ&{G}YG^mg15%(B7HNoe^+4$}jhOEt
zuVS>h`_-8hQOQlsL|81o@@^fYfq6_0p726vN!9^Vb(G_K=CX`s(VDL^2S3~Z!`%qu
zlh~mV4OMi?#bkJDEiK!te8$Qt%H*7_g&;g4BXl>OM_p?&H<f`l33`(Dy!idI8<n5<
zbq_DqMfS}6n6dWipqqB=&E$c`6NBHt-`eQsz6+8UmT=6SgvOYb66;g|D{w2j7>m&f
zvLN?OzEV`Mj7v8tu&06^Q7TOaSZ5fp?3DL{4lT%39UBYnvlR2f`Mz}Oz^23qObina
zHqRDRq|X+ITxlhL&|$bPJpD{)y!dI3RO;2i=7Se)EgP)3GJz@mIIn1|PT1R5FOV_(
z+WopZ^xEb_H~YGgnf<jFc-aHmU1uJtDGxm;g8P6B#3%Zz=Ov%BH8_BU{?2bJ(I=Bz
zKWdTQ4jPPgBx~e*Rg9@`Bn$+Ay_pD0*8*0L-8vYAoczg~78eAz1DhIys>0s`n;nOd
z+c66k-i%+{((UQ4{`I?4`7hVVnzBsU&Y_L3{DDAVgHFpD-orwZZa2(zUhm^OAPyGI
z>w&m?WIPzH=6kn1q9w4`u~zMBl>sG7rG26*kzvkMU_K%r=ssPp;s}~obsfu<Q738J
zn1_zJ2d282B<@AyhRDM+C7E_@xWD>=cBa^Fm?DO5pzh-;iak=gks?n_HTC8QBkvh<
zczyFki!$&Pf<bu@dxMmkJ(@gI1UyQh1CLhSm?rk*7KwVMZWOqE>$gw~vP2=H=-2}L
z$-_j$=Ew|hMCGApijp-p{P+In09M}NK7_YkYH!fpwR3TPf)g9j>UhgBXD%=MR0xMc
zd}Hl~SjenAV4Q`>HCr8Ja0u9k*W;E9b)p^4S`IQixW}g;QEFhRn0`+3&k@{ay80Sy
zRxdkpmXO8812m-DGD^jnB8oYw&B#_nyYvyT<jE>1OId46j!pUGa&MpHjPcSAE!FBw
z`6!>OTdi9L|8zOxXxw@1W`hK!Lu7WxOvSM?l%7bIXJhX=<Qk=;Q=eVEqT+|)25A!G
z)7K9e^R~Sp=JYdAuXadR+(XodemTjLhzg*yF^?#>1zb`i%FS%LYpE}=xxv}S=i5(;
zE4Y_brC*g}zdjd_*vLnH)rnUz6h6;r-scTjoZ-2fz?f~$jGNi_%E=Sd(<fi**#f41
zg=-&ol0RVBo^On8E>GU4Px_;!c@VLYwgp(2lr;7JGAKdvgJ~)R8&|n({n*~djqVfZ
z43KAY15K>50(TXTC{{@qFIhE~bbEn&1N+8gg~bW4Yni#p61YJ!id>|2DO%3hdVAwM
zzhuZW?W-EOjPODCf=sSFMj;1zCz**edvxc|zDqc%fLuMICvU-FLesv>vi=-8alNe1
z3DJaoUf2k`Ys+sX^eq%lM-;wkrR!AFFrOfY3y||0-dw0VWXJo?nwnw4hllgvC3XrG
zJ)u>-kXLGj_`KRbC9uuXkjGl3aoQp4S!ppW78&#o$7-03hZk`;(nn!SNF2{|jcaFM
z5Cay^%TSlUVPWrF(622jt#a>Z7Nl#j>d3UJ2x<?%WW<E(ojD81*>mLw6Yp%k!b3}?
zDnR3kL!s#&qwgozuV;sfU!YuVp5irxtcOfPo6LnRgHNPe0y48@`fT6`khjECYZ#v@
zZu&ERGcM0sm%z2HmRewE8&~85WHC%y`s!EA34MJli_JhN4;HK7peDk*($FaT@NsMB
zI@gkHf&rzVhb*N5`;cPp4i8NQiD@cQpzY?fv^mFy0y|ry&m}}R?M`X4*m`F)PEFT6
zIiKNK&S4|Qq6)Whv>GkQfnZqgH)inT7um8K!ZA1H)Z3MkZCvSz=xe+$)y-fwh#IIq
zyUfFAFLt3X{52zPex~-JzFH_G0dztfDH|-DoBNq%B9%cOLD@pZ%PI|R3r_Ej009IA
zSNfy1z2+86*`Kxb!O~;q`q_lpmd?oH%k{R*TqheleqOZcX4aKRBec{|Bc<gZ6+%qP
ze)7x~-i<n*Se>$_#l1TaZaaAt_49#;TPEuDm2xB9b&^E*oHq9<)tnD94-0p9l@ppT
zlFO<$KUbDU816;vVMGU&tF4VU2FQ6O#j+Zw1Et^mjGtx~(u62R1xX(<T|NVgAzMV4
zPtN<c_tvMT4B+#dURpXjS;znhexmcUrlhxpHMEYUWLcZJEXTd&?mY2K+u#@+6Bj}0
zq!P0TE|7SO_FV3%a?|f!Ig(2%USRqCdZwc&rJ?qq_%Y+F{+6Dlroihh@cL}TnEV8p
zsKj;oS+p^4TO>-rYje8v45YE$?Iw|0BX4}tb`)|rB5@VEDGyT27#Ixcpu|`ogZ=Kh
z%z22a5*%uTT}<{?15|m)k^GZcvNQK-0xM+V@Zf5pVfx3jFxQDXods?9rJ?u~C$UH9
zu-#X$G%}jku(Xd0GdcQ>0A>I8Uo9o_w;~aSs3H~ALFC)E_ccewY)S?*LuC~<tjo&6
zA8XZSuq)o-KZfODkPV)uhjbI%7G_}W-w2Hl9wwJCs>dup$kfE3iPlVi1GvsSPC&<w
z`gR5pPTS5a+6ZhS#o}`pil1kI?{!c|bbh$Hl2OrulU@gwYCkd%fSAKc>d*YHi02<L
z-N3CgI`?$vcY^8E)AM8KRr64ah@dsmu5{|Hth_C;G5ldm)u`~J!6|1gX41A;N}wQq
z7KN#Jo_8hGPHs_EXLVUL`0u!C%T;~$PZ!*)(?#c%8VofIO8Z3CD3PEPB{YN1(L<Wv
z!AIapk-2-IL(6oy0R(A=qug`{??iJ6@{21ee+?d`!n#{u7`_baqeWMd5XG<hW;Gh7
zj?a-=+X$fwGc@_8b&6uq%mz*M<Z_iV5L+|+{Gx271br=4+{?IKcOho;xyu_m5(^<Y
z`#1(8-R-hge`$bnyAfd${(n?`18iVXyKOtQZ5z|6ZB1=!YIAD$bZXnS&8cnM?bNn?
zd+&eqa$mA?_LsAhlauUheOSx9aW%r_cH71bcLED4$;Fo}BbgjHK5I|-?QX0Eq}ljk
z8y6PA!*wP{xQhm;M_5FA5Uh)P3fu8Kq!bk&nXKmfBe-C|&v~`#JFKabn|*gEq25oL
z9Yp+)F-7t6kxiG{`)B;**}@Tf=!o&%!OKkeXVg3C&nOY_Fr9EauMyhoDhm(4syGlK
zFzy{JmenS9&ig1pQ|&O&=JfNonv;q2boIhW#j)VTt@Y_^Wrrgcvuso!MH;@iJLM>g
zV%GERC=1tv6boXN&1lVC+@t^nMvtGD65e^dZlg`?pv?;&WVWjqbgUVr_BHPh)m}}C
z$JP_{lNPaQH2A9C4grsGRev$BhRbwZPoZnzGaE34jO7O|ZI-!owlgFqtBJ2$JvufT
zeN&SSBOP?|sE$5A1XyES;ByC=oK3Bqg`B7J@wdFBMqiYBVNI5$7Nd2T;O6lh%<eqP
zxMdxxzK7|8gygfg@Lqb9*5e&Y3Ya2pvAd_mW1TST0<=+zL~+(~U!|2VPg(xvL57$q
z7h8!HS-U_CG`LSBP0DUVf8{v^4j<oIZ@N*?N9BD$tBwk12j1x}lxnlK@-))33dG!$
z(63yVQ`pAyF`vZ1IC2-QyAbOMf)0b*wI6AlRqBt=e$GZpWiRx<8;QR;12-yVZ0QsS
z8=aZWC_0{sW_fui7?CCBUYlV-2jlr{k?d<6CQrb>OM|R7K~cG_%r4$GL2)XoVyxoJ
zErJfA!}{c*qlM!!4yr@*x{c%97+&bi110FeK)0wb|AAD6`d%z^F1>^ht)@_~lHXM!
zF~+E-6vI;3C`pFNWu*&V%ogrR&V;(WAsTbX?zIuJ2yJ(3oRkm<o8rm+OszN3g@Sxg
zR4w3JevuVh%J}Z$X82ml&#hR<azuI11%tcFf<g(xyVSEQj^K5hfq;D#9I5VgdW2WN
zKhCWQJ0C_#$Dj#ntG_w$Q^J}oMGS6=&#C6R-&cRu_Ht1xWShTPO=Pe(ANltX{1ra;
zXh@J_w`XutTS$=DxDaa)sr3HpVliA~4+rqzFq&G5Cp%q=&{!yB@7z3vyar*0(Q}MD
z0Yj6PB|9?{Hj~h-ce>y~VOAlbij}#JaTEOr$=gi)TNmt$nFl(xWP0ViwWKB?=b?0{
zBS{sp#O`V>XR(NzrJ&*mq*G&{t=%W>YEXyh#JXnv^|uD5j3UMZmLwDc8Aq*J>wIAJ
zAe^9lT#~=pFtqH>=Czy{gF)K<xpelzBeQk$izsq%K4H>^Z!Ri7x@;0x`w@UyG|*i`
zU%Bl#43e2KZb!08E-4aYyLVJoHkb;wDo(HHqkzC2^hz+fgd32X46^O!_V%oFi@1r%
zFm~YHui{ClfX)DuQrb`GlZ2E55doSZDui!-<D8}!%0*9q=lD@FN}mGRW=UQn6L(_y
z9EV8pEk~*KyVZ=2c<DucGaD2vWD44T&BW^Yz1~mntYqii%RR`}{kGCuPS4W5oUORJ
zg=5Fpn$DjrDh5&C(UhebCEJrLMuRCGCDGsW^R3r1;Wh^6DsX1LVuU<crdYt#S=Q@U
z(ki(fhkIWuYdEgpUUXV92{)BOX;LEh`q5GzMwWZdE3Nr$^-h7s_LA^xuYdGz^^R($
z2{aXQmKdr;5{diEJ+%IYP_Fdu3rC~s=trtYbQ<kG7P__G&7WKateBio6Ut1v(QaAW
zP<8M|&-J{cqV3Z#*qc*@-UxujPxXV!&DyA@MpnzH1X>QjxJmqy5F}|ms>~;%`iI1}
zGZ{0V8--L%^)61rQen5UdF!8;H{s~Gw2KrNC}e*F(;zY$m*XbOpY^ASeG7YV`)C6*
ztdKym1484uQSeCJK=eso{}G$~Yd`B<(Jin!LpjKxP=QTcHHdG$F#&pa9_Hv_VTAm(
zz_BC-^HVbNPt&)LIXDT<#t`%4+g_2Eee=~uXyNC|YI4fir(%Ao(5%b6H~cF=oiyPI
z6whd+?l@Mz2K`uwZe<tLqo5fHsn`SmATXa&rJ0|t>E6T*k~HD0;jt7qIDV|!@~GgF
zeVb}cZonXiM9Q=Tr2_^C#ztamt#^z@viKlxH?31+3gTRUh`ljZBYu)8B>l#J(ykM2
z*3A}VQeX+eX@f>@buRvA6cCAAn#Y6NSdA|XD}f)C_TrkwLSX#JT_Y_n=Gk3_Qppc4
zfut6DH3CUuut;w~DRCdVo`7+kL1I8-F;p1eK-GByW%&ZyM+b~qS3V%@TVl!1c(zDk
zv@HfK6y(gSV$XcBSjH7RCYAj1C=4Hpey=6r>y2i(JRlfJ^h~4!3qDDt9~w*k^CNg9
zg-1Gd67eCo@R7o7GqT_~k<Gtgg3;aa@phWa_dG%3HJ0mA_@o`J<u;0ZN_#Ae{}?Ur
zjm-+}DkE*%7YcyFS8XOziATT6QI<n6mMtq%EEZgwtr`zbuCOEksjmU^?agDO>OL3S
ziOxA0Mn6kzPv>%-N5u|o6o7N^U1)YLB{aRXq32TJ=5bVeEvR!NLz7+Xyz;cBep(=g
z>7G?~e4fplkd^$MGvqzizI($BnH=Z7fu`vRFL5ramiwjua8;AFMy4K6eKgAE#KBJ)
zdX{o}jY(~eRq-$qeaOg%2eYO-#b4lvR-iN628pG07hq8@d5xq9YM;n1V6V6UqBV^-
zlw<ALTALX%5p>@dT4KLAUp7Dyvda4avK++cgyqhuON;r0hDBlqWt{6zBP|*B0UTa#
zHBQqGCIf0WJhGRjQmz+C*fPg6$4g(No&>veB8RlO&UMoMT-*2z!fBo`X?Pu??P`Yf
z<-VV)809i-ZFk)m4V~r4d_JGIMk^<~$!2DkQ-p09I<9{qFB@NF>2l%US<$n-^o1ew
z4|yj4ApZLu0A|*IxmrIIfZBl;Ed$o*(q?SS%Las8Y@C&8{jtelz;hT~FZov`{CC|y
zKcA>>mE(SrikES5VkFvk(IwP(5!(D+2ecB;OMl7NxetDbqD+kHuUd-{R`W#QCLi^t
ztrfw}9_EROr@hnlw$Ag4UwS3JNOYR})J4<iPkEw(LGkL{Opd*}2jq^M`NS8A>~@mo
zz9S&s6=3%M$?V6)<aeg~^Mys#HC@0)`fei_65=J&2XW+f!BQ~mvJ>d~lienA2R-Et
zrb;0-Q;Ax5MEw(}QgTWr3V02^zfxAlk23VF!85oL7DHY2F<VjyBiuD%!XN5;eK-p7
zj4x{WeY+h4Uq$J<JH{_`({%F$IdVqmU<gp*mJRzkC{|8MjBsL9XzBgS;%TfA<u~(A
z%!T3Z`8LHwWfxjv-n(yLFNx(G7<_T{8jb%b;Ur$T$zEP>J;<B}Um$B0I$oT7nUX?7
z$o*u!W)w*sr73*>yFa;6N~vH$QmIr9p0eeBlX;CPBffyN_Ye4j|I>bROcjrQd@+Fc
z<3!rR)V4;pt~^X9E({%Jn|3C_M<eta{}5b=KT#5mU7S(HaW<>CNA92D#!RPkS>3Z%
zrVdMzln?jM;^gi~lG=ZNyfV<%F!FPfvFCAmkbiuUM*Vj^m@nBa`@~qpp4d}u>7*lH
z(6Jumme&9+n)qi<{(OyeLfu}N3KT$#vJB(J33&s>T|+R0AtbF<WBH`C5eiEP7VG`x
z>?}Q!H8T~$GlHhk=+JPnrGyZ{K{21OB-kE~XBv-_v@{|sl~$IfOcD%=%_EU85}<U!
zcfxj7M7G54@cLRi`f*FkRUuHo$<q@kbYR(FXdncP|KkO1|0*5+ff)~2(I%m>DZU|_
z9$ZylMb~dI4r@R^-I&fgxyJ1}<n_q=?Smy3*?OT{W`5V*EPNPBKs4!EV}7F<%P1xC
zUin=br`kJRi<t>Eq_aY1X~w>xvQ1Dh1EO5#2ksGU1ZAZq{3T+M={YX>VGoUn*{L|0
zi}}CVn#Qs<TH75!cOQD`)&aR*tmP_IMFh^Y1IPyQjyfabidU#>mi`PCkIkLg{o`@{
zF~?l>(7n{ZfvApEnwfQC-4glUaLB))VEAjUrfhiIr9;bu_+0ZjRQ^GYByG5GGWics
z{e9mU4Qf?~N<cIef=OzZ9GIGT*se~yWbrH5ou4bxZ(_}XVe3Tm;fSE|sl}L)Z*hw@
z+0sRv5lR2>R-+{^dpY*~e+Yz8UR;bshs8vh77xEY!6qyaULU^u(u`E<BBrV}d%_^)
z!FY@*c}Sv7*nM$BlutT-lPg9)LlI%lfZTW-bL;a_K<f{Ens){}OO|<eS@oUiWxCqF
z1D9>ufVh(Y_RAV|M4<-TpoV;p9=8=Qa#MYOLKKT5_^bb#8%t}JcmXLaAdi6na+<Bz
z4#m&&2o@JjUM`u&$(Axf;4K8NLv1OV&i2%p_jKk>VlBAiA}@y<z*3i?<Y-6wKSb%w
zR1)$PvRFoM+c|i%vg!$RCV$!P^Sd_7X4-_1uRr7hk>Qn*+#UY7+>ek!t$LVT^h7Hi
zFF}8FxCYs*1I%&w`V^K$bB}N^`T7PMzaAg5k;};LR@Gu>NMaxx?1p36kde!>B{PI%
z4>9%0NiL6e{TC%9mZMRtdV$zE!Ds)d*XQ9&U(7kA-N@F0+I1Y1LM?(?mQTj;#s`)=
zOHKexr=MY!FS=uPuH}q{?c-M-<)di#?;%n|5%!(cbzv3IliZ*-<FWy71|?-}_JnWK
z3+QWlo)_O#{&u?IOw(R76YD~HRV9Nu3<c{!dM&duMv61OCbHSMs>=bGZItP1UF~!q
z0uLYFUG{jA*g=POdJt;wyx)29<6mR^S@?k45}TFEViW1uJ$&{|d9cu!047OlaEs=+
z5m)s~gm(3Z4+RL{9MO}1E@mt|J0C8ym_5R|3e+kXWw4StTMpyqO4g5zX4g8B)f#QW
zwg#?>W!KLcK`de(Dx**+?xk=7Q{L`0q~8j=6d;BEus&J}BF7$jSAd8Y@fPrZ4$K3w
z5gNo7np&1HDeC9kr+oW7ALZa20~uIo*gu_f#cSIJrSFPO-?R_*c;}Y;jpSl>PHA6E
zmFM-tdy3nZSvtnC3Z!gB&$NaG)xnY?;`5d{mdvC^c<>;^S@o$>B81Ud46sRG_`UQ%
zZuo?j5M?z(2mfB+wC*wP#di-DaP|OXq;xl<z5Sx_I5SDA4q&!(3fi!zH{KG9wk34*
z^N;-CDIOUbH!4q^ZVDoUBfMk_kK3<L-gI75@Gt;1sn9T?OrN+$8t{9H7n}Fo<`fJ+
z@VDGzq$%s3QaK?C4l`~{Q!@SM5cj4K$$FCv#wllBP_X7thh~z`F?=y{uQi~3y@>(d
zqs&V1TEphO`DDW8mGrR0Mmd-`xcNTRb9`t-0{PonCG;{x^l|~`$vi#essD0_jzPxZ
zvqx}28T&Lcu{tz`BMRfrN;5C{<<q|43|8%Z!>^n}u1{WJ&^d>hEcP5Z8FLlv)nA;P
zO2pv9n1ocTfy>*V49kAzf6oB9@ThH+CT1{G2*38$q0}jh-7vfCws4NUG>EV}LEXQ5
zKX3G~uNR0Ny7Z<saA?g6eBC~~b{~Ncv->@}p&<eGGQIb^!`(-=ry(;cfakgRd3TD6
z>Z_x(trPb_OW-;l_`s&@A^5nT+9lFFEhhMrk@0p8?C-?FNE{mI02qoGBWlBoQGh-a
z#E#)adW?6|c*4Ey+4Mr9MS045oH#RNu822{{;dHaSGKs$U`7xzb9k?p8BGrI{7=++
zYU*L;Rc2ov{zNPQ+ZO1AtM9VX8wJZo+bv%EbIaXIb5QF$B<x-JxF0eM{?LURn`=-?
zYVm3=_R2Rkwj}%;ARpOUZ^9?Ow24B$$n{L8iRO@iWprz2sw-YmT>eb^af8jS1bt6R
zDEH*|!c+HYb17#3e11|~Af;iWMpkc(^O-%8$BqI@LO^m6He2cC6P#!bHtIdlfD#|A
ziGa6Ezar%LOYxT^>P<FUP?z@S5*Oh^OqP6KM&@3$A`#{~Ao<!4a<;9=-47D;l?9E+
z1QLwx`|k1j7zWBnkI5VHx(k8yb_~22d5NhiJE<&E#Zr;jc#QXsw3mHU{IK{Z&>Ah4
zKlAjqFa2bfKQsLCco#mU*Wq<vJeRD;s@v}I{B{?f3@CMVxP4H~y3NL7@`grO+!YUs
zKQ?mz1!4~YBus)^_e%Q&?%iNsedeN`opG^ojZWh_)6dFzX*`^ITsGxtS}K<Vo;g$>
zX)v?1ODjbdM0RSKMMG1<!KdEAabC_$UhnSlJ2M8n+279-0~3mW=q9{uDQlX<-r(C0
z=<q-dtFNAqj-aLY{c50s7v(YT6h8hE2PbaOqTO5p%f!JLDO@B-Ykv4X%{4&|lR@ov
zIwH^4_VDHNdf}FCGWdP4U*e!a8Jt1Zd%c&~<u!BYye2h%zY5mKFzROKdGUJDi)vE$
zGX5IN!fwE)Lb8C)kFp4qtL{@Me5aLqYyYOGeWM*PlonW0k?Wtl9GMz`6h6afSke7n
ziwuDQgf?LvY5E>A8E*c}qx8||v7O49Mfq5N>86ylZ{1)0+ieq=BO?Lf0?t-?2N&2x
zH`&LyH;?5bh3m-mEANlZQNku3?VO*ou}%V)2yqrj**BK0a$lb4p_*PQM-p-}bgFM2
z?T6nAXi-SW^8Qj|ko?iA8|0Kz6n^{#8zYSh4d4{BZh<IW8kSjQ2K5fZN1YkV7^9Y4
z5MpOf7-^EU4_bDUMpV(II6Iu2D&wd$+<5ypjoF)vK<d8};gz<4RwUVBSb107C|v}o
zvI`nt7q}?>soRu<uSz2)-lf=P5`FVkiOzw<j9FhAu3Fe|%y!zjuZ+&}Qx+yo8s{(L
z24+<g|7iW5IvZq`C;s>uaPYl5z)tH}qO0j&)P88@Bm(iF7dywT3|SEi->*rUD%ZwB
z@Rc%N)}>UfVS1{5I#`z+5FxSN6Aey&LOL)0?b-vyS>mDY0$zG)4P(_>YKc@f`S^g)
zL_9oXvfLVP5h}b~+LlY{S~SGAL=G0_1R(Gy1?wD@wC5h<h!<yOu#oEP9g7{7To2Wl
zkHn1)#*7OA{-5q;IuW~1Lz|K!UIUlms*)8@N=0TtA!_NJIi_1UIL_9oMGVCdCz85u
zF&-iE$+sO@2yR5w`*Yaby{I3GY*UeL!=4e%5JF<`%{0(E2GSsjM0FXTXMHeF>p*R<
zhvn&1njr`aRLTi)e!?IR7)7hDh|iniOuaH+=b4ej`|$OHvH-V?lje?7sj7+>hZ+5a
zl&K_S`0%pjmQuDS=FgD96);1diWoeU^3MkT-=*lGa6NmGA=^{9En&BLdmMb3m4-t&
z(;xAFc766#SVidailC3Q!t2CV(}BAnw)R9VQ%vIIQ4h3O5@Tyv)-%e<E1`yO-T`=F
zHL#w{35w31YhdKb9&#AA7Zt74wj~IupV;WPGs>B|1L<u03&rvN$Sy3!k2z1*ztv(q
zGe6BuYVzc-WEwSp2hx!iJ*d*UVl|4kDVoxiZ42S-gk0cf%cY3(D!96CA_LGFD59*U
zEc_&(;ieIE^N4M)t1Cv*eTOLFHlCm}3ubGDGb_bqd)rYz9<@MuFjRiobgoegp|tj=
zoC^3N1{jn<5gg@!5jf@eBPM*}|99gw{byJRYIV~qS@8lMyF<Z~tG`o3Z@UZ%K7rmb
zF4^AMh9Ff*7t%wIz|T__fEpHyk@V2wvtezr#~*wYqJ9t03;TDlLg*AdMX#ge{1%3n
zPEyF>UgDZse@>^cxA9pLPx?dP98~Dws)uiOgs0J&=zJx5{s1N3cOYO8Cz%OJ<L4IK
zZmvYX<1zx{gk++)Xvq{5y7+=izXzDHqfwY#l&MPENd}}N3bl+ofQ>g(Hf<WziYG`U
za@3FvB8YopbbyB6rZbuX@q34Y^eLKD82<-Hc3-V0<{-@dJB7ic7pgXQuLWoH_1jH8
z1FWWIrFOw<SX}71=J$qrc4LWx=-G)}lHW?rUB?B1XRR=mS}LKJ-%oaX#<=5nGXEmy
zBy&A=#}C3|?X(bP0Yq$e^ynr*Jopsw1Hw;+O-_fP)jhSYmx6zPGB0{O(I295d`I)-
zOlO?xq2GGLKf6KrG6a_Qzq=8g-T43VsTp(3`aE`d-nQP!0b4oD0kd&K<erWK<3196
z;W`rhpV6_gd>)$q;{w?ZH+<e-R>ect?6$;_(^UB{^a>zMRI5YY45~nN!jKomsE(lT
zCd6NWRVex!a-|XYMk=iK$K1QoyvOWEj>n;}+t5t`aqCM=Vx0W0h}tO0ca!Fd1g?#O
zE)b~Q2TKR?#dsC`&^*zlC2joY@|EvhMp0pg>Jut4<;itWQIm5}L*u6=Lk;#wg0JWb
z#R`wcJ$V3aT^_M=m2``-xN%8M=tJ8<gt6krDf9^6=_vHm0(@L$TY2V$e5TMh_QDlf
zqTMWzbadJyWc#VS`NcYzfpj(7mu|vAid2QrJRht=TRpfpCNm{t=jn1mMw5jn3twU$
ztFRWt%nXq}Z+I16mG#=^ELi)CvqJ<!f%x!?gEL@dh!wnf+9i03koeIaAy&L4c({|E
zw2qs?Qbh}E*dzSmn<R5*p}2d*u#rvikXzI+EzVhkxRq@IAIvs)X4o%D&u<f)S&JKz
zo;QUa%pb*DMsW}K)UgXRvtQ|SQu+g3UzF&|cJpFHb7V=~t*#WiW~*q1h&~XVMa9CZ
zujxQgI$6U_mZ6#KiQfv^UOqni9+Mp2ja%pDmb=J<%fFb83{GP}9C2kURfLeqK_P$}
zS*iZC`;kUlJK&$LV{26lNpFcWIC@#cTUi2}hT!w#zyTlJC|N1Gw^KtaV}!uqv8`DR
zEE#?1PO;}nJ>z1J->SLla@9$8n{;?^OAJu*e6;q9oMxleq_mDU*(FHBGPp3TvN|<Z
zNG%vGw~L&@O?}mS`>?e8wX`YP!R%srJ?Y9@Y7Qomp7)&X$~7I<lMvb<EUMFVm-5fn
zHRbyTaUMVhb6=@f^p}~m(77*j2biO}FEZCl1TPQOgesZ?ZP>6WBC%#sRTHseivd^y
zPi`BPbe`qA&8a0v+%(3R1C`1O2e=-%efU1^o6$}mb2~4IU22?>nl5@4H$L#Kf4L$4
zx5>BM3Z=co3#I+2e@bY*apqX#oL%N_S#)Nz*NT}R)!d!d&3X{OQOUGKJP6n{xw+Q=
zu2;Lp40ol9sbWhHC9HX<GUB)dzDhn`a4hBZ*R{~x5nfE&T%rDXTI+ej{`CfTsc@v&
zIycp;*lMXm&MLj)Gqu1^5|5gQ{U}oKze7POxHbg|V5-)lJ{I~E-dndyeKfASU>SO3
zM;s4gFI=xp|L2ubPtBrhTZQBIZ;Bdb`-KkWWccd@Oe+}y(S6@4?1?Z4Ac|>o>$Syq
zLxYw~Rn0m7Ea|hFXP{J(WN67G770LXCaXMdGs6d8&}J*1e;nwu{pNurx24)rb|F+R
zuZgp>J@Q?oqJQfx93yC%Yw}ou;9ItcGxWQ0xk$GeH3dg<=rRb?58_&@ROp+H44Yo2
zpmQNvwU{R+y(bGsioC;oAW&c-_HSF2S0G8|xOy_u9r!a8D*4|iox;xOLSlA7Ryk03
zumgFlTesXxv6@b%Wu~YFvD5Dd3fh^mK6pQ;UM?apnms*#5a?*7+inlt7}w9nZo+r^
zztmNwSqEemH>tR&V6lH|D(gqI?A6QQyR62`y~rU3iLD4jwnK!}1(f008#Wd&I@R~~
zi$hx1d3J7GD?hGPsN_8}xX*1J1o&B+p3skDa9@Y>TY4RHGNt|%Oo?ZLzJK7<;Z1sf
zbeGn3OGfkbJa^pcW*^NT9Lrm~a8}NA@a>R0NJE}&f-&$H)*jM(cCY^yc9ekLDBLF^
zBXPRCO&H29Jmb>K2KM0h(K52V>gwY&r(~~qjm?5@qs%CI+AfKz+s}IzcsMqA2(RY)
zzg=KJm7I@P3c5yu%1rUNbUQXbby-_)snuv3eJ)OMxCp$DhQGe1q;&eTnPmC1HSTk1
zD6eJvvpLrkAui7Mq>Z|NHKUF-MQUHY_d^Xu59R+l`BnisBf0aU7Xf?Qg{1bfcIdjy
z@vL^}dW0DxZG(e!`8Cp^CO>Z-<CUnjQNmse_3c)1@|EIH(lr)8>*jj1IM0uE8V~qr
zkLGV1d=BG$7aMW`Hi|~&P@Oz<sRX2hi+Mdwe(%fXwFF#l&H4o!r2SdsqvpY+?gryT
zdel?<Pku6%?ht?HJbU=+Bn*E+T1SVuLm+=fo*tPLku;}lLgwHwZ1WG?v3IMyPUfa;
zCK-DCtam9XQRh_-4)gdzG&U`l%KX|)xMK-(PImIdw{Jv%(3OJ8KLr#0<U<9;%l|<C
zboEgG^x_TQdc(icv&Q-UYqI{&d}f>a---OVHM7X~^`#qp+7klW6O$~FpB?`X?M<I#
zU+?nnVaHBva0}`cFBH}6z(nc(Hg{C$lAPe_S1-V>=QnLa)})qs0-g(tYapzZt<CB-
z9gzuas*ewqmCc~$?A<ois~&hct7V?Ss~-P>c9w`uhX`B99hZtf=l{X-8-AIPwS`X!
zWbMP3^|toaH^0d9A805;S)J(15>%A_&*-xALs?l$-+m4G1Aav*fCpHeC}>~)A28g$
zS$+M|Ra{VR$V`(K(O8w%s92r}0i=a%LE7_}cq6!xd(+DhBva%H>vf{N>vhq;Gq1iH
zz5{y=3NR_CQ<0nH1WF$-v7-6p(|0qGI$q2{uU2v|DSDlnfWSvyRFV@0;-6u^@!_`X
z*_MKa0L)H}vZ=Lgl|6%0m~eYMo^3wCIZs^sSn5B>$`@At+^+TWYeuWCprbAIkv%Hb
zSM^)lpi?jw4FO+gFx<!qGF(60=RZ)Ag1zL}_0YZF`~5MQ6W}|K&7*%LoBlaOqA|2b
zt!#^8|4AbE6+F$mS!B$h?Cc^JpqdwtJrDJD0N`<%XRUXrm`xQUW3*Gla|Bzq5Y42T
zDNxcwhT|0&6kvWn7?6<Ph8WNAP2F4Bro>tFFV8VQ7Y04eyiI^{8{u8G?vjK*2P_ha
zI&qk88~Z@&wmT<{@04{{(S!WdgM;+k3=YFDKF|rUC-=(U=WL-{-Hr$*V$bLFB_KRC
z0m^hSijU~Kqq_OgH$#on_#B=Ncvy10gLbg6OXV5P8VfZk_|T+Mzj#F~vgWpp_S&Wl
zS751T9BPH2_wNRTxgSzp#dfIGzdLB?&iGC?p&A^~ov9re7}E|{mlt7OA;Z-~rRL{U
zMmyENt`KLIV_R$PTRk;_U>_HNgL64m0j=4+2V$ml0WVqZDRDond=f*_?dkKba2F9<
zE73hJT<K(B%cRvf9@JIq|53#E;<a+nM<BG9HT>HV87tOH;*bLh(%xBI-F4d)zq@TT
ztTR&LgojKnx5%3yHU-ux0AiFUZ52<_fdqfi68;Y73TJ_@2&RhGHQToj|FnOc08mKl
z6C-0K8hr_L!OIb7g{sd4++A9Y<H-$2l`?Oq$^3;5727OHHRm6^*!MuuMkoo+ZVAw9
zRIXv&Qu@bFbj$D>)dS(xz(Z4JJ#PkodizAP#r;G@;|_i1i(aZsG5kfhwOr;G)N~V{
zI-T!4Y~@w9Os$#va@L;qj4LQ@1IV7%O&JwN(iF-t<>$$Nm}aa!u0}(TtvKI(xmzR$
z+3S}7Rfr4vyq{AOz-P)VlbUWKAjpjI5PFyu=mZI1`k*T6eR83Ygkiah`Me!N^O$Zn
z)5SduSvGozV(EOkh#mRWBQe3%`aNtU*A4!B|G0zp<dQe0^XnAD@Vn3T2l9Of=JS~#
z@YO3PRgOz1H8k3!2dy)HZyBM0aQxchu*_aUUy>t*%>GW9%!Ggm8!_85HLGgs)iz>?
zsTe(y=B=C_l4II1M%JQ_cK=L=I@0^hzb3^)_RDV-=kg@WwwB6##}TJ%ZMnkeMr<Mi
z-7pHC5lit*#xjvN1bpl2H<0wiN*k0z=|YM=w}BlUS0{2Y!AeB)`$7(ki|DXd-f!CF
z5s9XkF!Io>AZT4pd%QF;Qo>7zMw~vK$BzT7?@GkRhMomET}@H^H(}&8l$SRUMxHXR
zDLB!J42Q|?d2Xi%&n$rT<1*2mDfse<$y@;EIFpCxOFhcwRlRfa0H7-{>`_)5HY$&p
zp1Cb7K-__Zq{N)=CUZ>7&lG$JOk!taR>-4_8~nkIvdtH6Si@yT@;T7kq^4Xo0`Z2T
zM6?l%orW?^5t?!mNS+Heg^#TVCqbDO#=;yd`xOViUWSedh4v%gyRJj5^No(z5UsnY
z^*mUj$X2yrO}$N#1$M{{om>B@3i5%ID8aRxsc|Pcf?us(Abof1gD)v8FBj`6=Ke8=
zx=OD3pzWV4`#k)8B*@9t4|kSE0eqK4ryWEbAr`tu!N-!4S~aBFs*V{4iZ`jKN`NpZ
z!(T=91&^}AooyCzgbN`BkfV6rL(8H5Q65&)Ci|z2q=H>{3#e#}p--vKYph5Z8%MoK
zQ7H@9Xi|r6Q!Gd?UdEjxHK2A_dcs|l>S_J;EJ~!@3Ohilb5&~=9hJbiNp<C%(p{!c
zBFt&Ps#ZM6xn<MTM*FKEuM&07;=XQSWV5KK5^gX$!)_U*S;nEoo5lP-xWL_hhOnuP
zV*(KeKD}=Z6lk$-=Ef>0L)nZdA5?EcmE_R~p)NA;5_^%9kOJ*6qHuDuJk5v=y~55_
zUf@M0%%;Enq3u0>%rdK-&(yX>9!iQiSn2~8TqKcsa}i-b4ScTMZOK<Z+RnH(pR}yq
zt=Z@Lcurfneqr8hf)2l7$^XG)TK7}Cap_m%q8AEaowcPcz~(S$p4%cdNOnKl(V!3q
z%hpJA#@Kqf{t!*H%G048=UAETY`@V>!w7F*-q~@QqaVNKYOK*Sfyl5cw>48H0oP+N
z5xQ<*W#2<VLu+x}fGNr*onG8X@6t%iZ^%b@7HngEU2P}ub{zeRP0?jJXK-RkTDU4w
z?1c$T2UaYZ@^%_oUoZ3HMvCp;CNpezMT!~ScU@ine_lz;44><PTXldmvY5c~BYrqV
z46yWa(ku6W#d3E^1w5$AH<wvUAn8mkW7Ud%dVBwJAJ}7PFD0>FExj%?e@<l!0I`{$
zhkCrg4Cnag<+V%;QGE$FpiREHoI0JBHqCM~b%H`7pxeaLr}jzpgGor1l=(r_u>YDZ
zlFIRBMX~46U+r`4!F>$m?;RSK{J?AJ$FpCZV8FxS#XP4ek0JXBH3i|P%F8DT$<%z8
zCu<yCT)uSUBXV80K<;fmned1F>p{Dt=L{*Y4!QjY@rG%7$aWJNAX)J*H09Z9g5AmF
zXr}Xc1F?QjhNCU?8pY{vgr-!q7{Z5q*I6jFOQ(nPOQ5?WzkF}ojPIwPf(^zX$B5G?
z>FdsIvMGCxVSeBplEr<w6=uXH`5a2WJ?hQL%fw93pY$GQyWoNRK5;q?Y!Nki{2wfI
z4L4pzdYu@|y1{udKnk=Tm8ynN(89CjjgJzGVzLz4{Vh%K)EHK=-m2mdO7^fK>h+!X
z`$q%ezwiVa_0=QO&XiR4z7V-(%kK-6Q5nMD!aA5_6zgXE=)Hybm}QKnf;x5jmNW@O
z^cF8P`-{icm!_cac|+z)(qurkWJmI{IC^7z4s*jHB#V~>fl(V+fd~z^>_KI9io&|q
zkbvfE>HOf6Pc?Zx@9X{W!?W=GPutihyL(>KPb`vX2y>8CUSq|?4^$N}%|aH;!Sd1W
zgZIz7{qkgn`q$6!IR;%HpXE;=I{1Yy?0DHs^~Y8NZL+?TnQ9&9!M03REYMrD#(ExV
zE6;o$YJtQLn2r&a`ZI;LOaV-~n?yE`WC*qipd8HqEHUSYeQ~*R#IAV_9q7H}cP4M)
zZ@*1c5B2T)#Y*c<Kaoc^VMrb^MTZ=#q;^b&4pH*v@FztjVnzkkGUttumYU;ggrN5R
z69FU%59m~6*RN3@40=<bB#(@~0s#KT>L+;O_bN|7r<-s1ktVBwfi>y;T#r1aB=@4?
zYD7DwUdQaJ5Yr?moM^+DbPIx`wFD_m_BV?F_OOCC^Yt#Y83H6TFw9HN0H`+*DM8*1
z1y+@TEWF@=aUEHtOARNFy>QKid?vP0=}qR-5FAAtiPb^+A3DL?aW&Mav9f!L`Q0DH
z@vHPeKMVqfdr{b$tjBhn@p#qGWtG`hXCz&9o%xrJlTI8Z0H++IN-W$*AU(*6-Hsk(
zBiDy92QNHLsU5f*uujOcO|Dgh3*TItu6P=uWw7ZFj-r60s2}?2;#iiVpyu74>n1kT
z>yJgNnm=A$y+M>slXZm_9m!0Q2!iu%Ctw^1xQeNKnun;wmb#9FJEO;8sRU5<#@9!7
z<J@$1mUasV(s*{$yPrnWC6(Eag!m!~C5FKUWZe5F26BZ-F+)7X+%mEz3S?|S3i~I&
zspw3JR0LMqZ?X3B3}SNflxAxn*;UF{?C!d!T*1uD9E;N<7HuVV-uVUU46hC`jlBSG
zU6cYz8TLu=92fIWP>^Pd3CvFeT_~@0)Z8_fWXq4yeI0b|L>qHQuJKcN$e~Zh{8AjI
zCN2P-78fx_ob8Kv5A%HBGgkwLO;mlPJZ->6z4`GGYuFDBY;kD^Ud(G9o`qomRfn#$
zEbMRUcYY<1f4a}|hrvzp3mOu<?`uHF%ZJ3oC$uf)lf(@M$S;bVLX7%wnnbbb8owRb
z(FO|3v&R<|&aC)P=$~I2Fi!|`ln9|tpAYR!6h5|(Yeiu%K1H5{W&8Ql&WbTy8w{i<
zHExrrEvjREf=sjZdK&qb{uhr%t348IW7&rDQ?oQ|L-qWeO8ew_;jD7I8d-oK2}Y`x
zvs!sj(n}O<&Ba*U-AeBvTAArN_UUIoDQ~U!{%H}-DzwVXO}?}8+TjOxnZbR^&&T;C
z434C~j{L|>kvPznvSl<X>Y%GfN_v*ktZLO-B)s}H3`b0b7`*ev%$jtf=*8mcQ%Vrt
z6{5n72P7ACl%JB-KT5vm>r(+F(J;Rdj+hqCtkIe?Hds(cVI{u^OHrPIPa=0El0Oy5
zCLgLHmDGa>FuL)x7G%_#JG^Ag+oIqx>zQpxC#vp9*ya`b$|AP{W`hXkAtD+Iq3Ot|
zF6iO0FUJikB;^8p@*Grei{br-``Y*Ma}lhWsIHO$p+g?*2+7~8<TwC*^8)?JT{nBR
zYN#>to2gE28;wId6t{tT#bHB*E=Cc+%Fgv6J@%b)&Rz9W=U!M7E=je`@q0qnVJ>)`
zY}=t2q8D|pUtZ<6`-8ikz@JsIPC+0OvJp8(=*4rX%FKH>rb8!~Z1gA4%SC8wKci!6
zS*L=c59#zDn#e?i@iYO*aNKwbBR0$F*7@JU2V(F&G$^(VWkVV<T_StSTO&Z6;Bd;*
zThz1khF|P5$C^$haw7z|dlhk!53953_`HgY24uACAL5HyTM;bMuw1x%BrvrJZsWcx
z-x&q=skZu(SD7CRl5`tf@|mq+61E8XjWHPbG3AaPQ|l{Gy?+39{6bHNgYKex*et&9
zqPD7`Ku{fqDRYr)M9p!6tl{}A4M?2bBrjOuW5rRq>Q4<TR${Nau56x9A4RFhS#Ode
zk9&G;S8Cp*2WK+g2iA1<tZGCJ>oNE%#zrzBmOw)pkMxDMLjz@o_4&EXb=!;2qV$(d
zZTe?Dj*alek_~`tNNPq76ArTnLt=F=c0^;4SB}wo{Hk0F&O~yR&%{$)X0$hR%~zdg
zKRhGz2Ca+;+w0=5m;C26R2q@%M>3y(aDILUcFvD$f#T{;w@!zTB~I_>f$g`;M>hx4
zn5k+0$mIb0fg!UO^8+oLVdl^)7g718wutvY8?E|aPE!C43l1~R7*tmFJE^dWwQeWp
z`?pR7!3ffp5K%hH-b#7aaLm+Y_j-t|*f_*+F6A7lCYX>vl|){lM8k!51LLgGRFlaH
zFs%3%_Pbv13x|<&v#`Bp<Y{uc9bO+d&_3ymG!Uo^6Br`Xj$-d_{AuGWdx*mF3(;M4
zM-h_mRIfk|w6R4t>_&b50t!w-=iAL#_1)OK5^-VTUu@A;ta==z^Av9;FpOPzS2v22
zhVwr^@ZUzF>2EM1*-pO0b?WmY&HdAgaFiTLbwGbslzo<eh!kOf&s)fEFb1(p>Ro{~
z{IQS??IE=dt9d?xRqtmT<4njA@p+LLJw>+H^&Sj7f6)*{^MJJupM6`~5x`@>E59aU
zkkiB8`#K_}aN%1Fc%avYLQ}1qp^R_iJRjcDGS<oZbbRKyXuXy_!1@r(nh);il3%n8
z<*_K`b&;cp&^X#Ucud->*Pa@H<Q<u&Cy**UPuM^jBp#1V{;WR?dv3D!?r!M3&y%&u
zylMv0EI~De3kn`+w(`T3CQtn~?M!*!{`ons2}1~4TPYbgz+p;t-v3CfZ)nlqH9jEi
zy1B;VZjr`}et)6OGk9B$cKwi>0Q=I{28W9yCyWfcB6_dv41As0Iz7u02k0Mj_P7^_
zZ;okE2Y74nAilNkK7MZ89A9~@niaoqJ#GN+dL1*M7xpz*aB=(@X1gDsH{t4$>gCTw
z)pAI$pO?2X=AxIW)qV8h;U=;ZG`PNnN-%JYx6`6YLUBasU;~#4Ve5DAiNw=)2jJN_
zOR0a&6#Mz21C85N!fyB;uUgaTV8wq^Jt&c*9KSPqt#ur;1>3<SzHE99n}5D;_0$8Y
z?=in6%*nIg-!H`j%w0*~_&mKTYf86kqM%>I#PcmssZj7D$CsSw0<-(A0{|?JyC=S-
zkrId>m?%iQGpsPO9n*d;lEYNJMr7GTba}|Bmxxn_O&Zjer(I52K_Ak?cUuw&GJ#yo
zHN3d><Oi4<Z{hAN_oeN4GXuTocz*yR3_=DgP=w=%p9k>==U3-PJCWa>i@3}q=~umP
z(x5f9r`>e(jY>Z}tv?>z3M!^|XCz|1S^cbT8PfU=MqNLVc^imok>GGWLXBtapFj2Z
zOJf{l(Q+&J50yEgB()uJ#*D!3`jduZ8htmJqQxhr16}Zc%*~Za6MDE=k`)2QG8ANl
z(bk3@)J7+-7@W4XJ#xwtjDGoy_ZtZgTS?>>4O<bu%6joizn1z{dRYx0BVL@dwFhdq
zUYfr440CJTCOgPJ)8c#>Q*+&Txa^^!qON!%Jb_q&Ho+cGMuYH_hJONbQ2?f43q7Vi
z0r)dF>ONVBLJ9vv&lBWC&njTUPvQ~^;P2_)zWutjOoaH82%kz@5TQPq@V!8$(6|<y
zkU9J7PEfgEM^J;Iq&q!AkXf6iWpPFGcOWtI_t`ft#X8Am2wjf;kER8phBl7;o|>)B
z7Sd{ikwq_|4x{Ghk!X|i@AUqCxm)kH^A>u|!Fz1(AF$u|vN>KS?6iT*8P|=EHZ?#{
zH=ZGSJzLujvht(3@}uPIo@j@l;$P<im*}{5-|7wVIX0NAchE`HRIR<Cy|8x+dFRA~
z?NTl7zxZs^#rJ05w9#&%+lYQ`CpygUz`vo8(h^e}hle5TO~aUrM2e`mCAe8J;vP6|
zu_xrw8WJ*f)X^Dy9s<N{uRZABHSu6?vQ{tPC$lkp<~$@E7z&Z6i_$G}L?CD#zAyg1
ztGf5MeEE2ORsM<+<IojaIu9jX%5Mn(Q=1H13|muUzduNQilCKjqW$f-W%WwurJFJ7
z2{YzvR%Fj7R!*QL`b(%zK@pxwd(vsx5*ZrEb8~|u&%l4Rg91rlDNmSDHza3*1<43c
zhJ#d=SgKw`5#AKF=t-Hk&6TG_Vp5d7%q{25U6gRyG}|1hbH5>n>__SJQ9{~cm@1U7
z>5!T+Dl)WP=GRpg_S_y&mtjL}8;6ecC%@d7+z%uOwh(S=tUu;YVh$L{GKaMut0gt<
zFxl+dXNmU@=YT_mbxF0CH>3fozfN!xh1@X$<+3joy4A@e+3G@XsR`GI82ukIqd<5q
z>aEqi?%>Qdx2;q!W465d@*|U5i=i%wvpm@oAKWv|G+W|#e%!_(vg?_+LmuTU?U<0#
z_pCq`=v4)7K~96XX-RTpt@0ykmd(Wp)z>1nlV)3}FaRo;d-0ozKT>JEA*_1BZ_1H`
z0py`l74!BcQD$7Bo+CS3?RO$Ef3<qxWAOr{*b)rnce0dxxerIX3N9YxOa{_Ra@Z8q
z`<UWs(R0yU>#+X6D7qfU2PpPIDV*PP3B`2YsOB`du!R@84V&v_8z-papQ@Y=^n^~S
zF5E3(p8!7!iTi^2Q9hV3q+Q!qBxK*gbDKez`{t;hrMJSC{%}a%{o{f(3g7gwQPzw4
z#(Nu9s74G|K4JLYRups(Q<TU1#iKw3{n{250%p}85?1tWX5`QS2g2VP6`-tktsMDs
zk7eFQvC>-`h;3Gvvq)lgw!wW>9_pP+<AU6VgFv4{)5Lks!jdOa3hrdNt|Q}9)mm4#
zx&$hGv>)=G{x~m^2n+cm_VygK)he&DXAVqCpv~Vxv9chf27K0PZT|;kAG&hB7I-2A
zEwE{!$+ivG^Tng{-^-_)PCkqQV-|S^cINsX9yZ*)??QOKe_sQPK@&6G&d7Y2ar%hF
z0{~)@pmUPZvrdeoC&S;bgPpHQV*xLFeuD`O{B&M_9!%VA2Ayv}5ZrT&IE101om^_e
z4`g3kxvcwG513;hsSZ_acJ7_D`V%CwjV_uXxsDp9wDTA5)19tSz5%rS*qM*oSe5Ap
zZ7Vp&>b)QgqTmY&GDpUf60gEg_Y7{v!2k*qjxwVtRNq03H$S&sR+mlWDppCyNjR$|
z3no#rx)$|9vm*Zp;?$Rq(lMA4yS7Lq8-=DVaE=@kRKEn*6BcdRSM~=u-%B`$<v_dh
zVwjQfz4lj*+G|bGrX@sqffaA0$|YSy;zRFGbD6B$i;2RO2@X8o{TETuipd>GK44%B
z9Yg7pvYI97Hv$eioEUyKCxVsK5O)(_x;m~Rg4m4uR^xA-EJeAo#K!GZhUa;o3bMy}
z?ipCTw+lkt3KXU05vJXQ!k)>DX~w^jLIGOxWb^7GwJTi6-j2tA_pwx@`ry5ogUdjg
zqDVy_WYM;u5NB3e)f{@WHt^Y@Hh{GccdL0`0Xqc9e4pkyC2Mb;AQ6NCJ1m(S&0*3$
z7xfNpJ9tZPh{?CwS<=-hY}q>l7zEFkV&6ft0(hY$OYUlqW~r`ku}F2#O|CQe+}}oR
za-8reIOMVc(8Z}^T5y}kgf45ZXRq^2MLtDEyMzr;kgSJ-EzWuc!8CMwTcG;;Oq!of
z*Q#<C&sml$Pg%1&K7)+B8xAt3HnA9H0CE-q**7+bujROsJ<f?7a_(Xv-I2}?bjIQG
z>0f%3u=vDQ+ryXfepEhJEjO0B5$y3OwRAl!7|P*SMdS_0iB12~`-N2Rcjh<N<`|==
zyzLpYz|3S{ign(@^COBLXv>7F!5*`(q0UFtEjhvTZmt@%oP}Y!O^vVPjyM9p@ma%4
zYa%O*Y`5Cd$vvVod-y@&k?7+8$E!$&WU&1E$aE(zjw4~`fq@tN@$RBCn~{AEy4tHq
ze+d#{t!korC|!qequutNC<A7nWK&5N#v(}>=;bO$rNL`^X@6iXU@N<u$;&PgA@>-$
z8cpBkJ$rUPjCc2T{?dXbK%F2LN2fHWwYze55AQ?4lhXNMivfz${W*&aat*^6^KG6#
zII~qnJXnsPgUgwkkmhs{<}5t5<VSC65P(9lK1bV>maG?%P5M!Y`5D(Azl-J|X4{jV
z+#jF8uE08I0Rfl+YX&EJZ(}Y*99|h7e;Hny&%+fx87;Gr*0!25&e68uKf~Ky7`@vW
z5FH2Xg6$F!9ipU=nD2)Es0_-wzy({=t!<R7brPEuL^9=XK)~G#&+G2pWtv<YH4@N#
zl$Lv+2#Ic9OTI`R=B-EzC;^3+FO{bkH4v7rtKk0A8|wc67YPL7fnO)5+emzDpi!PY
z$vg}TixNV@;=Rq^XLF`ioBZR(EhTqsHK5CqBfR+~dsHN-)k=^5>dqp1G~02XJ1&6v
zF@`a!m;9LlQ)iYu_>N&bXo8O;S<yo+9Pv_F{-D1+rT9l3goffbh5|qKa=Ic}W^GE~
z<B-XD+~#yA;3cfvMQO4CXyW8VKVh#&Cy_-K^Jl{fUhSYz!(Os{Tj=!4yQ2T4z(oXy
z>rPQ_6?{O+IM6&no~3@b=kGu1{|zAxjsTG;_fu7pXW^hiSN*dmsWFBR9Zp`yQ0suY
zG0HoqM|dsq#UyD!!R)Bfb`?vC?77MNPt`t=tbL;%AgO6@_8gG_<T#QfcqEH<zO1R}
zA!^u^>Ml@{Qpa!6a%Ho(WhNp`ojBL(lRR3gJe`ca=#9^QT7kw$XUkvYIddW*AvMyp
zuOUp{qe{lIphM7VSoZ(s6yVdk=ymnpW_gYkC;Y1?&Kfb&8;kqzPcG=*G;O|9PoA%I
z$h3+W;5V|-YN@Nou^qk|i!ipYR2glt^BqA3hZ2cZRJ%uOX3*XbQkZU-&kPBqhb4pF
zN<a1%CVB+^3eCV{5{weO?@SNpd#R!2E3K$PM6SeX!&akMh?!Wq7hUD1U@DWNR^<`$
zjKWJw<(*=TA|Dg!VDUDc&{l8yLAsim(@d*1u;~)?wMDguZo*+E%{fB-l~){d0qYY&
zpvz;^D81lO>nm$BqA7l5-1Nu*Ef(uUhr!21o3+@~*<i2kR(n;&^M~zVxv_FTnM>7z
z3RMa3rAtubylu%yHo(Yj(aaJ{MJkGY?J?=^m27%vxRrU8JZciizKxL#B6@pJMDtGu
z-f8PmcM;YV0;0dcyYhVhDys;)$@Nz5F=j=-{BxC3&0<Pydk_+{rdzz$E<rVwmGu2Q
zn;ugv`e#X<t{ev=T}Y?4Ysn`e%4}yRE}v?)<lg1Nwhd9mvh&q(n9x()=T1g}w8LB8
zOi9e)2{8W=otE{D*ZebCi_hwETTmPa2r#uTFym&xMYw?n!<mjZUCS#g|JxZMKy4yl
zo4sf0NcUM3*=-95w!)E-HT1xB6{WSjIL@D!b`UMj*ohNSm2&I&opl~|Mf^Je{f&`2
zU~Q<caX`Cfwug!zP}7(l%fX+y{tP?mw-v782~XTYXGoV5GjbIXW4HDRK}OU89J5Ys
zIj{bsc&>#fiu^~`$a>GQpH0YDk)Kz^??A;?;3p&Ss~fK*&~-t~8kdPnyv$wysc<Dc
znh-|I5Lqy<Lsy=K{OL@~Ep!%fUZ?Pb-2$qhK@HOa?4P1{iiyKU$KUe?F)aTX=X$8`
zJsEL3tMu8iL}U6t^fY+UIpBRBfMaBhT`G#Kx!K!OWP1vIjfG>FnbuS)%DN_vK}Qrd
zGnhvWS<!lKxKlSG>35PHCL}ZGOk_m?(!J-<j-|e5+)hv3$7jyGnc0TwW7czb{HIpe
z-RW4VpC=)ysDc`7VDeaE$r~TeXuSHLuPLLUb^G#rE1&#9dsvMuJ$esB0BC&N<Z|eI
zF<QRd=^Ey6+hy8&`oqM+uD`L))>;fy#2p0sh`L5sVeTOSe%TvlUlWMd0c)|P<MLh9
zNSCD2r)#Y`=GMn^ncvPON~xt7{Iq0?ATNC(MBs2qF$fbxSMjKB!@{Cip0Z-FUte_=
z%tLRSxS(k3+^N<4Dgo>Q2=ro)#wdB1s9E@ID*c!3r{?r=(Zs=hxw)CsF2MXM?a@-F
zsCQa)5cd#i<zg@QG}+^I>QoJhv+JrK2L2UAbQnsC67!P9GP?e=-e;dsbx^_{c4~Sl
z`}nF@zr;R-mj+XP3`I!($I;n=oRB<JBSVy=UUTN_nh@a5JLotE*m38d9z5pzJhqMZ
z*m;(XLAzma`Xsg{fWCs<H=9f3gqYs{5sRTHXI!`v@en8)mXMm^pfn)GAz$l#=Q9$M
z@;A6G^LB)27689PgvFHc5+jRuMKJ9{8SK>8H}ODuIVq%%8`8Hmm&5yoR25=Xg7;ql
zM?kp0C+CFux*8G$Z(8U1;G2I=6H}tck+@R|kQ$}ip*{x%XiJflecu+`QUIvFZ9{*r
zV5NE6bB4z+&oW{PaalwHu9(WosTuZGg=0A8)e)+!^Uz}-jQBZkbz1!&Qhh^*MX5Q}
zuXJRCIc6waA%KZDu3_8+tP%%Gzcsk+3<vu`8%0beek@a%KmgR)fDV7=lwI#X`Vx`x
z5_J$8#)p20R5!M%<A$>qktvsS8NqEjkqESx)Dz}%aEx6lO_bgK4|LO)aKaH!X!3SA
z?2X>Gn%XJxYx(;sfUIgYO(}7M=5?#vZ(p@<%4&;R{p2^tF*GI|=U(?A6;nyL@*Znd
za0yEU&~U2TsTJCxV`qOqy?BF10FLJg<5beZ0m}H&9}>9?C-X>z%AD3gAULC)=9`QP
zyAq(fDZtsrpxGlryvwB(MIt&|IqcIxv$?vnX<MXNyGk^kFz2=`pBx!XHR(nW>zGE8
zqtRKSNi1&RYOmYKmnEHJf+nL)0V|zZ8?{6i-1(D`QWE*4Gg5ytUjI5Ai<#47YkZa-
z0=fA+)nM(b8Mt?IKh(kk-1u`L<FhXtUpDIcgEc@jiRW1`YUFSkAWI~RN_Z(vC4J96
zuwW7EcclWb9vh1!oUkltkNI?2IwLO|jkPZ#7J2|Or~Qld=6L_X&dtY>px%Vac;_#i
zdM8TDQez#Bw3~l*c-_Mx>*l2ZcHI?rc*hjzQnuw-iI5%IVeE$6(xyKKbdep!LM)Q(
zPwGcy0rOuJ;-{9}=)cGg)WTKD{R(-+L#V9eRoIbufN(K{-N*x<8I0Pv+@Y`!i-@5Q
zFqegqWz|=82=QFRvhI8XJJ~wVDK%pNA!<7VohH6NQr~}#Ft#lVIWq>e!MbCR2?QKu
zyW)yeB_*swo&+Ul)l7T}jY~ROg?Uv4vC6%b?!d>i>2?nzt3K+!lMIkga_I>%C9VE|
z7oRB1RvRMK)|#T+v?Y&5|B%jJaZe-iw&?^k!Y1)Gsn@kOu9VETO)_OPP9j~Q3L&C7
zjrzY#8-Rab<(_ii2HL%C>W-SdUPqsct{qsHRG%g=+LRBQQBKvK>Q;G$ph$cX%9v3|
zIl{ORh0r~pFr_2YoIWpaI~~*U8ZP9|<k+Fa-$<$Ywpk)dtet$Vft`0d-M&(@JFTnM
z&4sS^1(<s*W>Ek)))^~lB7Cgz<+B+JJt!-rbY_1HNQKHal6Y*PD=Uf6x#>^8g+gC&
z!<ok5yVjd#PZ?)7!`AmoYcTuh*NPMCb#mM9C@R@F0F0$k%B0U?Y;x`pd4;$bf@CHb
zD_W5V2+A}lFj5l9KzHNQDT7<*Zu=bs-hw3UdYxeO4Z18Jc<70Tnu%4ZiHOg5Nd8Pp
z^|5~#%PRI)C#A3P+iZ_`Ljaz>DV^9=2kQ928)fk+>m!3djmg8qL(PP&1)0t?L3c#6
zME<-=d-XFQSTB8@0oM9{*y`UjJCBCSbY6W59!H7naTU=i4XHBXOs%G4Pr$l^urldW
zIVW`|Depw1chzrRHgB4b#!J~S60u1~`?h~O80rj_M*~($o=$+vC#l=X(~&o~TOjoi
zrJm-am3&JH^}a$~lr2g^G-Td3ZM`(Pgqqi|qug`$P$Q%rV@~B%L=55$Wco35Nr_|&
zya@7vjol-x8fnqVJYCWzRvv5qz?}0~67dikgbiOnt-#Q^kQ;i^jovn`GeJkxC~SXl
z&4*}426Qrqn=T`;*R;<8QUMisi;-@JM;CfDscdjh;~-6u*O<n%I;SU!I0$&Pp&~Wz
z2w45dta%g1Sg)%AnqRZ4CR3l%>?>4~2j;^S6m^S$Zts9nKdwNVrY8Y4=vliH-!@51
z$7H-jsdri<O$=UE_|BoihPkd!S!sW!82MZTkOB!=fJ>XgYvfi+2Y~v#M$W}z2@y{Q
zunQFPgu(hxXK79emiI`-ga*$;gT*?2CT+J~NByUr-lVJDTq~&S-qtb4Y2~({CUAen
z0Szu5gQ~9Oqc%Y(JSgyzE?ooK)8{O6mPw7a<)FdVvyMKEi^UPg^8%)3y~=;8zA4ts
zOvoOJ=z_8Jx^^jEQ-0=*M{)9G&V8>or!_sES`ztcFnTn$7iYw(g$W_R&tb!N0FO^<
zWE{bYlq<01cHn7%f`tJc$O?KNb%`;jKlKEZLzVM1_(4P-y7zKGIUi44D&R~M5n-KY
zb|8kgLX5PFTw3J!@jKImWoUl_yJ#Uz;O(9?nXb~rc9Bn$+&+Fcn!KzT4HOi!ks2Ql
zL8Y%b>k(F5EKvI+a9%#9zS{R90P|{9C`NQV=5g@z8jzhOV=WCr;4)3hpuWF!hHdU^
z2AA!e;sHL&IqkKs5kw6-*1OYptvA*7&1D^|XeNyiE*AROS-s%%RJebc%@fe}gtow7
zk2ca&Z_kyi$kj#Xz|PV`a(N0i0;B59DTZ$UUnxScf?t!Yt+XyO!E_3R`-{<IFGN_5
z&7N%Bo2cl0R<YLwNI@R3poP}z&CMh>T?<B%D)4IX3h;x7?lj(6;7_FGuK~3x=@V)D
zdEGpf?w$wx6RYqWJ9~d3+7+qtVD>;ZNVC^=Gm{&Q2KkJ<_`K0j<~xMXS#`GAYZILh
zd(C~HOEyvRvk2Vi+vnsp0XXDRL=zjD4iaY(v3oA?LVGyqfbgD%l8`){@{q^Obf%X_
zk4hyyBazJJaL%$Ct_-VStWDlnxLGsCYHAJ!!?*qJ?bX}SN<e?Qaq(bh+AQq7Z4X=9
z=Uxk=Swt6e9y3E|$M0~ZUuFFcq*^5=h*l(-%X-WQdh8aL>(;Q}J|F1QSV<n{G)B`4
zOUFkHsA~!xYe_eNoozv9Mu{C@sd7j9r^+AZKWQD#5q%|FTCTME3RGgaoP<fZwZt65
zCgZA8kX$K>2D5)8^z;U0&qY@NX0AZ81at>_3@5E2Cij~%(Pq1jgoukEo~#bw*G#$6
zbfDn1T^s5^ZRk{PqR6k9cX~!jL-pTMWv>p-L33Bu^MZn{2)e#5-|tocPm^1Dmi#LK
z_n(Xm`B$LX$uQs1ID_a@&I_V=MoM@mask0C^JT}NZ)bnZ@QnUVhaJ#xsavf;6cI61
zlW>432TFo2U_tO`tK#(Nu<8mxYzsmZS6I$qS9#{C2R}}<k8;zxL!LSgMa))4j=lpC
z>kA;(81ZZKVg(}gIhDsJDM2+(8pG5P0f<8P4jpso1p59N`3wB_uX|AiK5>as(f&gN
zOdrDME+Ky{8i~i`B;sRZTjM<-Rz=-7rMsa1G0T6Q`m1BlU$li}$bq;w8GbZiE9pOK
zwHo<p=Zz#ghKPk3zSjQ+8>?vaW`K-N=J}({9oHHcIHOGc$Jx#KH7Qx8-oDi8UhW2N
z<S?9T%*BHp-DIvTld-n5OvWZ@!=6u_iw;o8O3Z(3h9PRP3$^O>LUUvq0(_icTNh=u
zHBzjM_BHwOCry#2?>h%!u5u}BWQaB00}-(b`9~tbOUls471XQ`8oZ#!%|$&A@G}?a
z8X*HQ$;WU>f~QET{ys5;{RWaUQ;i5Sx74&_mb<;h#LNbM(4!FzSj-{`A#Skp;<6+Y
zvEYB^t`i-mkshz8AF8HSx~v;oVXc+R+naL}&i$iv6#pwJndpQ!B0-Pe8}R{egRyw3
z*9vvFNlF2T<Cbue6$_n*s<vTRSmS@NNvv<wnW|rue9_cVMl=m)iBBUXBg~L>VwYDd
zrHAt?xL(2`E_t&=lw<+Ec-BkCOEQLL&ene*_12)a1TF*E9jHHn@>JvjY6ckG^+B9u
z_D&!|<2d5u#B5z$y2G0Bdlu>*cN#;7%eY_!<#Y&&vC2<00)xI13_==zDhLLMK*S-a
z9(NkR0EEEyA)v7M_(22^lwdECNkcoV`e!b4u>;*{9N#K3Y##<t>nWx}@4Ydfz#4x@
zZ<x&dYzMJn3~#xN#Vn#h0rqqAKE-;$A|+N84(VHiwrYS(0Jv5%OkXiaTlVH119St1
z*YpFq=3xPT0sT;gLvMo}#t&=4>JVeFC3pz`)*LIQ1++pwmTVIP4<IPA03&>vA~dnu
zQpg?%UMZ(FrK{Wag$}laYtp$#CL({7`kYQo3G<=A1fZ)Ms98qNNJWOj$NIw98tURd
zS#JsiynfqmeK)$f?Q}-pHaoYF>Q??snE3u*%U`dxYu|j^>|l0B%WdBd@!F#y515Q;
zusHrpzt!tB&s(GK+QYZd{;ww~#Ac_{#a?yBQ0MmgW^~?f8OH_$V;rq`od$o+>t3gY
z^;B9zCnt|+gY1lyZ+<u@L;8W2-Dz@W<cySu5r>;sMC3^_p^G?)7+LViT@}hGctq{L
zRWXIU87Awo8dSxW=a3Z=D+nIfb<Qe;$1LE#sLhmummQ9NAvdW)7IYbyOINk7<3;?Q
zMb(JG?G_${oU(8RaVAL^%UXX1`FNfL<B)RyjFfpWtH<;MuPwq^rjakG+Dn@u51eKr
z8uFkv<I_yrDfd}N59W-Nvz;jo2TS{x!{sDir6k_cbVkY^3q+R2Cd2h+(?pm?7c{16
z7d3C3X%;3yUp&Y&@(Kd_+*djuRt{}^U0SjIH_I`D9|ptL^=L3`4sU-4qh7bufdVFJ
zcEsn6M#Hx5w9i{NP=(HAsNoO2RyNeoJhwMcX0CN{M#@PD!H3Mt48T0^T0fkT@*P{|
zzCG_=U*F!ehq_I5B7z_Zd7R&R*l#yGx@8=3>gTq)Xnou2bbGBn%+Wpb#ezjuhEW5#
zU$hiedj0mGrGYagh!=kmmn<LaPWM)geBz5Ff7F<ae@4m}<dfUx_U7G9_q!XQ;9V#l
z!m`sSBV%zA^Jk*_?u?YhU2YFrR;lHH(kXxR-}l;mm`NxfRxpp(?ZKdZb9F|_kS-q1
z3bE}p-?TdU$U3}oM#{Gv83%agjFjK8CF$!F@WO@;<Dhse;0=F=bvCzKXPh%qzA!%)
z!*)0aa-lc!k!GMXQa&%_B*Q^xq&z6*CB*?}r2K8+B$ve<R+90TTN)ZxIV0uv2ClKp
zqK3JFZ!Ei<k@B_vXKp*Q2v(=uWwT-lw<5Xvw>LM)t@=>3oLx`dUJp24#$vI+PEx=Z
z-SdGHM2Z`+^J;&~$wC=|n#&fPDX^WE-TKmM0s5T+OJ1kYA@$l+q%wuT)2yKs_Pgd)
z>t^V}K22ZRTsyE*%aFELu3!qH`fvN@vI~XRAPuiV%20Jv{o}GZY(njg?&W3qr<JoO
zy`>C>-G0jyKj!jE8P3f~%<oy*cu`u}v^tN=g|8hSx?F!&z`_LVd2=2$xb3OItdSo9
z_SuYmz}i17)(JTJW>GK%uyEOVr%hr3wbOt`P{2(6KTu%QZ(X&%C$CBU{f}_g^!_LI
zflZQ_4Sx2|2xP+4XJ6antB3{|O#lU0A+z1NkCI^cfvw1*I=t+6uSdORzj>`lQ+?5p
zcD`?KhV6e&`Ysd?_SJRsd!^R(x@|R~rp0MF2a|XFa$urF?I14)N{Q^W&b9tnhN1!x
z8esc?R+#BO>h)V#2(>&K-SMd$jk3-9-R^J%vRt)!D*~2%f8G4vr1I;;`_qPb49@Lv
zDhQ-QK&rC-T=Ctg*X`Z*M#F9o9Zl}yH5bU`ZXti#GYi6yPx9sJL_kR687V_KoxjL9
z65;HxeJ1BL^8QlSe`7=*o7^$4LL#OEGSG<xHN+=0k&L|0!(xs#K0TB7c1$G+5@kh8
zvJg`8vCmEj`#Dh(7Zhc*qdZd*nEJjB^a$@{Ew_`41dMKj84qU_T~{TbOJ&`#h%<$;
z^u>Pzi)`&c43Uv|5-V$k8#VR35p=(q(oN4JebsCWtyMc35*EhVVP)vf=wzM}UG=Dm
z20p<2vF|={ZuxROCFm5;1hxU5dELP9t=ljV_ZVSmV&?$YF$32}F|Kx=p!>&8(_h9B
zss9!KH?J2%jH}))X{)WklB4*W0gIK;CLVvoOX4B$lTPLkRiaR#;obYPBtt6i&b6yT
zM6yC8W8{4~p2*RHMWa{*@5{Bk4%$-^3Nl+H+6$h#?V+0j`1+>aIgQeKM0wB^>ee$3
za{(Vh`NV1@#@a!c`lSI8eR__fFCS}<sb%RPX-b)560lNIeE0Z5A!4gTLn(;~L?M68
za>1*Gpn%@gVk++@)SrxIi$qBVEX`)lG;UO@8PoiFY9k)`Y|dny2N_fV!b9@Dj2+B{
zjNg}c=AAcGGIEmybVuIF<CR6krYwq>hgYA3NkH+W3+jri8Jj{N$WotG2O?VL!B@mI
z!L`FVvqMr)M+)jlL498~?!eI28pnSFGa8dngjF>g`J{r2NADGf;Z+F8J4r}%Y@B2o
zmYZ*Yg2~4JDLnF^J4k@Xs(0&f%Xn$Rex0~qGd!0iaBw2b>p@X-43%Kfuc)@B3W?_s
zM-$K4(z!GNZdK>^%wLiaQtyG0c$5d%-~pG&J7nIOhoGePlkpHNrYGm2)xm#l;2}W3
zGE4qmzs5fpJZ<SOF)k;=HQ1NSA$hPrf@yL&q)14|4sq6jIY-l*h^V*8+=+0*OI><s
zD&P{~lF&G&aE(DMDwy8?z-0m1m5el7b0~l>a4u5zfI85Imn;V%!#LcLD<CktJsmsT
z1~ZK@{$=Oo03mHX5yiVK2k3tbCt9xv_*`GBpe&-D`yH|mG3o(ozloTXJ0Nf?A=31H
zIgxB+!VOKrE#QFmR>5v>@E0M=RVB#HhOJF+YlVAQ(N3y!X(F+RIE|TG7zNo`VGlsf
zW!w3<+3h#CC#Z&ppEGGvh$vJwUlOIoBaaNvd#2f$t+pMpK*YNAMI?WT$d$V^B<<cg
zaZ%J|fw3BkB8rBvl?PDkO3}@zUKn4o1{7D4(r*Bb5Cs>8c<1$zjkb1@If0l?x*nC;
z;0FcX6!jQ0Up(Z}`v;L20m?X}XGzUm6pH1Vp@FatbzC=!Qd6V8*sxI(a?f_LZTir1
zC-Y_xi^Q=)uuur|TuXl=j~=Vm2d1pyM<%KS^YLoBMr>&Nv$KNN=7&DS$mN<l3_AhT
z9GE8j9H7{+do^|no83~^PlJIua$9kAUO(WI0VdI9i)tTjB;{@qYlc&1k|2CJe~Mg2
z=0U(bC0hJtZZC44#2AZ$_b}v>u!bd4QAvQaOEqu4GWEqYB_V$(1i9N0Xho8Ru`R&_
znPRaHuS<<wO&ZjATwcSMh#m|suOG9a=D8*`??o)29M(2EC-Pme^}5<lBCJAf>Tcud
zo-I#}w-_1Up1Is+)M?#Z4bz*7K7aYO6Y2e3w|}wP;<WMHw&{1VR#+Ys-K6l!7T1@E
zzCuu);Q-Ra%VdANhW*x{*S#6Ez{TaD^YY7AUwn>1^5bR9vLEU0uWzB^8Pve(U$4Zg
z=d^blj=H@e#`e43XKb$FzH9xUNQJ&#>c<R<s(Q?4F;wC6BC){Qj7d15_*=vlKAo_#
ziRv<U=NU1OUcFQI>6rQ2i#OFFi*8gNh#Hd_V6p);oH~CjbzSCM^&))XgkuCWCgo=@
zUVQ%fS6`J)F@nzRVA$%9dd;g=dc%+PIIh1QLHPpR2)pUPm04C|=$Ms>@RK0az56Vj
z#dD(6RLGQKu{{RIvPrhejE%U*Do=tm;KrMu6Mj#9T|e8NW@)&_P2L)g`mJ-t$Cv%?
zb?TMX7dn5ga_+0s=XRWLoBihbu+<-ohW*={^X9O1VSMb9IgRK9Lb}YHdgYagj3~@w
z%zb84qD*0Lj1U9{Al<>W=@D<Dd(#}WuA4nmm34)t;A6{F&6q|^89P*3pLeS@8Z?^&
z%d(gc=N31CIv=l}^Z}4I8Zn#NZnA%$VR1*DR;z#QEc?yH8`9O+Q`bHPf=7h>IHR2E
zqMuI;U4i@-^WM{vWs@X=0O3q^Jub84(fbw1y|n~El0c~~&s-m7spZ(ca492$B81E%
z0S#e4Q8a{WdrjxB$rrWL+E=yHSGDJj=Pw#xK0iJE>eY)^FKRRT$w<=nSQzuE$v}kP
zpcsFT*+Nk;fO=!|+xcv6T#4LQ#-)~Ka8a-N0t!!&*W}k<NljmfUsEPg4bH{PFFlCP
ze%tITz`y;r-nkLBPXESNjeZH;&RlPyy4T<Ah5>YDdj15|eJk)PLtI$KC<KEm3Hi?n
zgG-y%)K;kb0B@osl;&m=TL1!UO-=#&H70+*Rdh%f=EBMJ!VfLlqz;_($V3DS5kgFu
z(y*{pV8kGl&CoMja>Dmh*`T^Kr6JLp(q%KTB0j|9o|)FqU<`kG_Sf29tkUpT3#u6|
z9Sc>plqPA#EI%+2l;Ndj9)jM=s$HXu%2SX?#DC1Pf!q_dt4)%a-<!PTV^*8hD(Qdc
z@Q+jTkLTr+bci?IVe1S^K$r100Annd$$w(=k<K_A>Gw(Gmn+IJ(Ds=ftf}Xzb#ReE
zv|>{fbYnG~>`+WBGZ05#a|<)@S*nD6W>O=vS#EX`$Y-Q%2e9&-fe_T3=-S&L1XZs!
zGC&W%`okGZ!DHkAOr)})?ImGah(dpTBQ$r?s|o<eRa&PwHbWv7SjWWN&tPx`3Ql|u
z?2OWOJCX`7NZ!`oKscyQ{FqngP*w`|IH=ZUaGTS0yw-8ENSWgg2vV)ORkAk|4+C>_
zvL~?n+a_X~&Y-TU5s3t%@3uo7v-p9rFe9RIPz9WvOK?c@1Y)DV2g+I5!cl+Qv2a8c
zv6%ujGGJ^4k$D_1Mhg+eWs7J;gAr(tEBu>9G+8WIr0;@NEZlEilVcvD(Q$%K8omRj
zc#GbIE*56Hqk%}m7_&~nTMC3w>(a={?ND`L4()-mmq`c^RY{<)4%ztJN=8c6(-Mp>
z6gX5%q}d`_U*Bs)QY=QRk|}@j0m`_p`F_>AmE@T2Kpq>1I$n~SZ?8KiNDVExm0518
z+U`yqyGLm$4YqWJK)SJZ%2mj9r$Sgfsh#XVs!n=UxvjRW<_m_IEmD`rU1&cv=M_`R
zeW*M!q4$hBk=Tmekol-D#de5L_JO6VQ7xoJEJvmTGnZ%fPEou(I2C`*M!Uo>0W-FP
z^h-Gr4+eFmq%k7_pCMO3G&7q;)Y}ChZcb$7hDIm{=wg<3{I9arg04_AQvG$hm!&VW
zSd-W3n{>;_{F*-`Xo4-Qup_TY_0;|h$MtEeRc<lflKlR+D8X3bqjtmM2NB)X-Zu3q
ziBgPBhneAgDs35j%SV41RT(Q!VM!C6w1CyqoInRWxiF=VR&;5s6t8yog|9=1Kv*dl
z!YN;a%1(PqsP%TH%mJ(1<a=XXbA=Pc?^JXR7&e`<i9TA^VSFAr<~61ST7f6@M5(d5
z;yck-@SBrftA?fi>M?`RedZB%&qB2dj2~2>>lp?C@IaChI5vNJ4qQiG6I6K(0pXSU
z5Pm)}Yf}B(aKC7nUr%#?eV+aGlktY;POSqgJ<UB2Y}>P@T6)a@x@d8g`Ae;;a3%QD
z<~B2yM|hR2YEvPfeFk*+>@x*UX@w)caMsiR`W31cWdy`;1*pN<moA#G=Cr&5PU|`F
zE3|!0zB>Kt)bxL=f7)*aGwQ(=wZ^j5<S4~a!b%1ih2-FC#YN_K&@|z0kkK7mj;7pa
zWy_)Z#e_w%eq)5F$(n>_iDaO|Nk=5PzwI@UTgd=RJCIARZ+mmy5raX8EFykSV@BSw
zr7an!epl$CcLS(jGnYLW^P>W(TK<&4h00#0{V~REOG1CAYR@=rkR_v$JkdHZfJ%!(
z-E*qL5`ut+o?`@y1q-Ew+u2ApWDj?2Ng_$lo;O~82|ti3dNZmYUNydgqljl}BddCJ
zDanh^Uo}Yejx9wJlRLJoEm%OR>JNph`b+neojBYqvQuV6HzXUPk26l95KwQz>ZqQJ
zFph*@Z7P2awc5o%ZD41-ya0s@#GXV#O4Fjx^j+2iyv_Y2vka{w29^u<34$F!+IqrZ
zGo5$)gPKNt1V4>*xcI({U^wi-C^U+Oh2Al?z!6PE7@`MT66*7NW^E;XZUh<yAaci;
z!bY`8*?RrW-UupWn((n*s!*znh8Y=x>6%!ESCD@>TwQ~gUeeI3i-^2q(U?U-u2c-d
zSxCJ}HZErse(0HETWY%O*2-ONSyv`<uk|oR`k(9TyiZL~14ylsdQ(zBjE`u%L^0xx
zU@(rI=ct2#n2ESZjYTk=K&ym}HuX=Jt#~P?8lIyI(y_Q_u(d<QV=m{;r86L2D)0ux
z8S{U5tP4Vz?@M*Dh;e|B>F(7hBAntsq0)BA6o^cau?7&?tn1A*7y7O=0}j3;o|q&7
z3uCnPX>6}#La-FRf;&>6?ECZD^E$vlv_}pR^(n#;$$z&OOJWv+8pA~ozBgPsJn!j^
z%tUG7FciBvC7)P?ET+s#2Kp7plI7)f+`xa8fjdvl@|4RM<TX(Yq!-%Co4r>W4rs%!
zsL%C_#^oFepuuFf&~@zd_Q0a|j~vL_&Nz(tY{nw;U)SHD$|E6C#L+>H!FiCD;5w<;
zQaO5qUr|iZe>J5Ou#jWy;87Exkz1pFAVMCCM<Trq;b)NWth=zPRimLeD(B5!0~&v@
z_!>XoaZG?2_|sgb+B8G}xXUn6rMd2P`@`nV@QjcPfMajmflgfO#NHpIEhkhylx+f_
zG}7vO>5L~7=`oQ+ucYHN<>3q>)})p~9yykbW!66Sh7LX*X{Funnb~kx`B#m`i`ChB
zv=ngWELRkmf&QGZ1h3Lu#SPw!;F5n$eRo(Ex6J!T;`WV#F;E~3Zo1+$UhJ=S@0bUU
zxW|;Yybke;T3fdClo*I@!;D#vvmz?8-OLwb>Zgth5yc}Bs!_dq^-8Uu;s$#S`wGBl
zzp$E+ZkUc64mxxX_J${YFC5^iTCF0Ij16zRdiCl>4yI{?kH9n;XSk;Wr*nUE7vBQ>
z;2duS%a`j|t~Gl+u7KMr!k}W=pv(t0hCisSM&%C0xRlmC^lE{=fJIRFe$VYKJtR;V
zW>D6vU_BOCevJyN@&CYysi}*v<t#)xTVVz8P+)=hDV9%bx>bIgN9b7J0U+4IH5fb6
zu6EY@%ZiQk+z<vW)2rgVj0b;KDJaKf>qID%KNIk3kY}Hrti}Br>Vf(W0HLWqpXEB{
zr-U0-Hm(?4Zs2M9%d@|NPo%7)S&vfJ(K_KAXUFr@nY6Lpi=$!+QTL>3b#yMx+#^HO
z64HDoJdX*X`bvgnRu2UobEQ39^&*E$bApjUs?g_b$t`Q-oQ67D1Wte0@GScurV<SJ
zA;X2A$kUX#)(dSM$(rPOzdq0Yy6$T=ioRUUB(vl(JBCxQPuKc3z7_Dg8R4R+VVJ|7
zUS=b(p{*@;CbcIf#zT}c4l(UlYiuq%11$>Lk=Nw&SFc{BWGQIzc}k*!7GJo6NJ1Qi
zshK0D`m7fMQA1qmI*NZaqM@8>@|bT%x(QrdW{reT<~tp*NfPmRi5=*20XeP$?GziW
zlpWqtz?oiZx`SpG3LGXpE9@e+SHx;buUd%6?Dr6k3^de|IQx2E6tRzH1_mNn06s<U
zT9<(`alAU9QK1&_aAbZS>G;WgF}vnrPlM<ngq0o8dPa^r7tMcO#kzj<>FDaTLgX=N
zUq~$Y`OJRrFRM;d=9w6C<J6^63n1gzEcIL0-C=8VJ81PwAX2U4T5YlBXk%q&L0_+t
zYdjy$3bj<GSsOIZPoTq%(2=8s3amGMTxlti?HYx<@Du9^TeXxfx=M!Y7-*7&zS;p(
zXx1T?UaDm^<T-zpWXxDd#=e-`Y4`7xN9=+6K55=u6w<;RRA#*i049gT_RiRJJ}~+g
zH!x>G*c_#gT)oI<Ee$Pq5pV6$UCfhcxlpqNmp#vE45zow$?Q7AB_Xq4Y32i1rFZR{
z*06ov9KCJcTnyee-$7`1hESXNP<4&*2!)gepQkTHicf!yG>NXvLWHv9A@Oh$gCADT
z=^bLH#<!Bv5V3!te|a?@0q&H|CEmya9Vvj?VSnr9TBmiZr^0b8K=!xc-NY>VOpbx9
zkv0keyb?C2eR`(Dru>6B`Yin)?V!+CJ3)3?JZC}bHL!RTbWM)+ExP)Awr~O}04`0U
zQhjqtM8JRJn0e?hNJ3zqk<?5(N@-#>_Kj`!Tobnl%lvJtn_Jo3%!CAE!9FEGphBCz
zL~4`RwYpPz^V&kEDa>A}VruoGbW{>46xz{)@NR5{Ym16?qGu4sR0vNk58MT4Wb<Q?
zU(Bj1khN*#yqa~R%ZX?)ry<7psSZa-m~?R1*}i`gN)a1l)Qyz71vn_2Hg=>Ht@SCR
z9x|)U+xV>9>32J=K~`L7HFeAMY8_i?yx0pSR14?M7OL$oJ_|*}yxLQ61EQ94#7-OF
zqc*M$B-*rh!DP)M8pi1ukwA}OiYo=k@I)WLI6P6%O}bZ|7X-)Y851O8_u@|9D^xV$
z<`91zstI!esU*-dB#G_AVUBiHQ5#R`vyy`Zh3X!@lIgvOO&BD>QzxIy#H^J5qXdvl
z29ne}(Y;Ri)}bP$&no{h6{4i!%d`V?{dq~f)(5*7U^n)4fg0_(2A<V{SzB3G;2B-H
zaBlXIbpQl0U!UPea8e&Y6|z!MPbn{b0xN&cV6$S*-S#_*N&6IPg7#a3A!+v7H9}et
zOKHv((@WJqZ+zLPug#(kD%D^HrbyQ_vwhagU~7=B9@UIr;n!c)wy}?bsR5<-A_8oE
zh}Bqr`)zZV`>M0sdi(WP!hFeg>X(IHZk~$CA2Syc>cFxLF)<J|q~-?RwQD^$Qd@ub
zV6s~7(%9NvKY6lw(m69vGYu&)Jqc!HE7ZQ$g_r{#Lh<lekh$=Y(n1H!DY1-TH<EHf
zCv!G3fL@c&8=I)O+WKjReXgKhYoPWBcb@u=Zu{-@LK*nRx+IX5AT0(Hn^jvKmam2H
z@VuvXjCSw5W{>Yp^ct5oc%O$Jdh&lvI&_@ZnMo|dm`NJzgnJz*YY=xUHgKs+iDTN*
z8pu=^Y3b?*X%z#fN`%0HXg|9XP(|X&;;de`@wjJSJ^$)O=GEKoU^r^`?2Ek4oWc?c
z`J8U}Vscim*W+NJ<6Cef)y5|Na>toQ3?e8UHyE>EF|s%L{k9H#KiE&hl1+aL+6n(X
z(qXwuj5Qtp!+Xn=3X|TEwi89nm#@j`^Ib=pe)H5L9csvSq{w(48z(b!ikIHpp1T%n
zY2veSWygY)8mM&HYw{x(G7o2~rwF9a@S-%2d6|$=r31ZcG+vc<r7-q1f}Zv|KHP(D
zNT&<cg*~MERBBH%@wlR|CD?z^xuFI^K_lTy*S$ih`b5~ANUTz+enX|!3GO3Gb>{bJ
zFqw(=389`1`g<@na!h5qv)c?veb8m3ph)6H65HzUMn8bgmF=gy*3m=?b6-2TEJPmK
z$PY7gJ6bU%B}^9g#SC^Q5l%}rW4>roJm`dx3_0{wIXXH6G<E65KUIHhujxg3Jj4<N
z`dR=p3UFuKvuJ60I3xd8j7j^VqPC(6c$^U&4Lx!W)}E=nq)TyR$Y)4l5zpLP{w#wA
z9jo<<XH$B3#$l(?%M8s}59XB3C4~vnuVvi+9%NpasI8TscUng<Yub%!CCl36WDI1;
z33I9IjBm{~1Pxu|Xq$f@2tF8@zS6<1{=U!f-s-Ok$EP@HEIcS-yf$5WsK-1c|98;6
zK^GI=8CUzLp*j-vQbg%`!@F`q$s%3GPM5M+u`4t6d=y6-*R$mt>&V4Q7+CNW0W+_H
z6@{>Yj90wAK#s484U0nZD{S<6xjuf@9dqeS9#C?1=Jb#IOxu4O^-1BJ<&P@Eoq1EH
zb+#>}&T|gv`AuB`W>|aqIh{#|Rc9mL?6hJ*rE%il>9`LqOaVW1+S3L1AT~~TiO#SG
z5$DrrriV{_G1J#d(xt9=>~VQV&=<@;%xMCk@tQzzz)Wa*{FF}k+EnTv_n1kjExBPP
zb!C@LBK#8w8QXvF>HwV=dknH~zS<~e@LUk5$nGqrE}b8<NbxWxuj}YJ>v*ff`#KiD
ztveTpo3Qg5Y2$4^lSKPxS$NMQ5yCYscuL`JDkiUl=nP?f9SjoBt%8Z$t(%hrj?|2D
z5es|$t=iDc9fY=8i~3@1%gX$?2dz7*`%kIJb@+sZQfYs3R$cPpCx&N(!XEiEQ!!7C
zQn$h5Fc?rrfAuMm?WOtJp+|;T*VKs><)IS=^}xnybP-lSRTlb!K7=)LtfR8dNa@Sc
ziH;J0_$JeK$7!-C)vkH?HjWn>t85S}{qP9HUY$Ni)aZwgMU8$aLJg|6Skx9YqQ1|3
z@((cvtn`1OSsHhRmw772cdiE09tWEXudO6~SC<3djNlk^j;wJ74s02WMDP)#90c89
zpE0_3n>iC<QUXEx>j*q!8-DB%?^qNv|Ko=F4q$8;s<|F*9VbYC5dqrGpb7Jk$DH~m
zq(+1UEE#lUC5s~hEk@8-j>04`c$>QF`{UmZc|3mvcsEI)$IxTZPy~C7<ajJ%6G&)w
ze<-AJqO;8LILFBI;hQ&*_mUZHjgTuy6oit$3r6pFI71VutkzsS9%n`y(eSQJst|9f
z0Gi&-!K(H%*Vc+c07zRHq6qXJ-r&s29*)N;75fU%j&9&xplJVZ^>oGayS}W3-D^pX
zv9^CaW`eRvS9d%C##3WFB8vZ3$Gi`!LlHO_79vCCo&H8d$oIqUbp=W=yX#uuA%DF1
z2!0+eir6=ck9&WBMd+#kp~=S}G+9OHdTkv^uEaSFnMkBvRJz`@t|6l@A=J94vZB)H
z)73}@Q`XuRtOjKq8~|e|qNy_jBa@Lji$s62(A70fx+Lm*kW3HTK{Af1yc<nKhy~#$
zOIw3s-<<(Lou`nnEa0cCF-9ZrfktdSm{;G$V73{hkGfl_ab~&E(Qs2X0LrAm|9|ZL
z|5qD1(l3txp1(qeJh?!wZ48;r&SZx<A3{jNGZ0uHGxxbq_TwXW%eIzwtGA^FJhOlE
zzrT;FN?*F&Ha3CTeePNI>;$^irP8-jsZ{l<_>5&0H~$jqAn+H+QsKc80xWOOd*_ae
zitV$0eeQ;=8|`S+*n%EGIU|HiErABA<*O#X00ISFV7Sy5XlYE-;Kv?Azi$RaY;OpT
zIMgoc_2u)I1m+!_X2@ke%2wgsmKlGaDzY0l+~;c$tM$tZ9a)>9DbWC<H~ubcQhV`5
z21D29T8<4n4$<4a=G)!Kd%ynbnfH`#Jg<-I#3Lbu+2Y~;xAe9@a|S5+&ODU;QW$%}
zW3mK;4HkT`!FPk^B^e!p106VNlYlA_@MA3g%n*ENW4HUd^QX>ke<O0488v?xoAP{C
zmu%qj5rrdYEQ7IiQKlm@vvR|3RlaG!EhFOv^ceQj?#q{UQ1OpXFJJmFJ=b^jY#KP%
z?24#)xi&c-iQ5*2VXFLcdTIF<DMCC$C{S)XESV^!g|`dGsTzdy%ZJqgNfsg}e4h!y
z`7gF5w|HQF6l`rHnT20I^^AWgt0Y8u=A0KFCj$zQTR-K=0<i-f>r8E5o#W)0kEgIT
z)pJ%vQTSJnm`wtEcX|4VxZ?T6`+!v&<W_w;#FA_7&59Fs^&~9ICu*bj@5#Dy|0G>I
z%?gnG%9-hBB@l~qt2E@$5-RmjpoRTon+gPn;%hUgIDz*6$|SFMRXl&m=iWS-4oat6
zvh3lNH_S-L0IhwHhj!lJ(DM}O=Dd%$06K?x2Taruic%TC`xt0pG}~vV2bWhz7oCCo
z7czXGeZDw6YAwE!0#E!~MIOJtv>$uN961$Tqq+dpB6IJAq(-of_$txTq1jN36nd}E
z=<+0*u;>>+P4<4(F@k?F+2sbttnBXQ_$Lg$tE&^w{5yxN1NQDD6TI9(i;TOMGK#@t
zG+09ufDODK9l*PReYY+%NZ`<Ze~@M2&?<k0ZUkgbcS%;rJP#UOp;TrCN*7dR7n};V
zORJ|;1xr*hBd-7ov{P>B_n3$F=*PecwozEk0IM0;YSxO^_w#=Q$eaR|bEUGjfc-6x
zthJ36O{>16Sx!3;Hh<zY*{lXf_u>3A#0$FD1G48~{?#?&dK}08L~78gcjO5zKDv8m
zBj8t`%f<v|G37??4)Shm>BYlP11)7|a8Jswg~QGBKru_293jS#aci#d+6(@a-!*$C
zto!3SG@4xkBbk30QL-=$ZVRyow=P`&0_LCHPqqp3I6&r(s?2M1_B7ayEDlUdQ_;a3
zf+%d2=ZD9F4SAm4%G69?Ps1*>LonhALGh1NnTP>I;Uj|&pC^zB=A+W)JrG)Dnz(D@
zkR+}Yrj+7_2WK0mG2<(c*cl76<G!+O-QnYLDaPE09WZ~_41FjSV1*UInZ=nk$HEMV
z!h;s@DZl$5%mq@YtzPF7wiN_D-f&~jcFn91u@4dbI#|<7%`tL;pEo_x?8@O0a4(K0
z$Q1&ZqeCQ3KZLVP2-rIK7CSE|o?@a|jJ@#u&&^OU$dM)ovD<Y+HrkifSSA5I*5&oJ
zEYQy95V?OTn7+r3>zwj{I)wgA8*m)$Fs&jeu3T58i(krT;cB%ICB);wN-0s<McIjq
zOJ*X%;5Nh_Wv)(pKFgo$$i&CoyD|(M8tmMo(>3h#zlu^(zNSQ_aQuq<+BJ|8rS}*+
zLvJv@$%m_s=S(N1EKG#!IUZx@$8ckbD#cEw#+rXzL{;8Jzu!!aH`tbCUXmjlB%$y}
zKfT>U&|-2I6ZuU~Pc~ewn3Ig53o7KmataI3qK<*#fW4WUNoXF*^cZwrR{&<5vh$gl
zsNCJM&$;==n27m+dSgI5?X#Vs%y+Ksn2vYtfA(0f2Q*p=uMv3QR@zy9i9{}u#_zwk
zF|mKv;+-cME;1GncUK#+rcjgu9kIK1ig*8}WbQVaBI7x;A}2Vb`O*VhdH|)@<QwZf
zcZ81qUdjJd5k?~MMYgFzq;rhvz)vXkwG5qkN^=~=Qkh(i;r{KG6WlwT+C$chYDhMI
z=PF+n1WD=M=-L$iOC`z~JI{EYTRHTh<i&ra!!8Xsy2Jig4R5An#n-KH9)(fFxDj`z
zs|7E~6pa@w$a$Cyp0zdmh`PYdI8Wv=x=7qf!^R~~1f+4KlQswiL^lQvqkAnga+vh3
znp7rLxB1sMiwHfSUEJRjKp#7IFYeRF0Nfed5_fMre)~3F8o&#5#?>+fPa#Ar?>&D&
zz|i9(OSC>%bcg6t(?GR@=EPX%mU6W!d&jx?nP)Yzv=R@m`u)Z&>>7j6m`k;J<h0)~
zm)I$$%_JLvhP2^QU$eBd`xwTZ5MoKDAP@n3st`5S*~Z9@l0h<^5##u^PnLmhWb#Hl
zWLO&$l*V#y0X$^*T1dBz*`m7Y!}Nbtww<4)u4)P(DX2HL33Pndf>c$FKma^3sEMY+
zSZ&Q?HPhO5x3f+?CC$!Gq?@?99%H{m7j1CUwef!I)BoPx-U#*sxPuHv*R7u~4o(4D
zoo&32icPsy>CwQj1x4W6F49Wgvwie|65LFAfhUWXZI8b7$qb)AXP?+UfINSXvjNXR
zTjpBk<3T2FATc2J*n2<$07a-nSzVfh@r3)T|EIkT%y6_>BO6iOM5Cj&XX_4o{cZ1C
zcKX&f(zcz#_bI^+!z`$aNdcK}C<0*byH}P{je>L7D}{!jyU4={p?S9oQFgD+Y^NIv
zx_~#V6nQE@8tYqWk_krcjktd{Y)Y4QP;h_+!BYk6SlvaXHa~mkmfQtU3k<L5rm`v}
zT9&(g`_mMZzNot?Ue;RxERG$fXVam|)OZ#;4W%W|GR=lOxyI=4ah371R>pt%c)fV(
zNIptWE~ggv=7OkCS|b3;30qJh??k4zYnCYw#ZHG>%0;7tn^k?O{r`X29(&2YYZD`O
z8v9FY=NB0ZfQR<$DZl%ObjarLfZlAQL49Z?$J~4rOiuY&FfbwQOoSXyOsx~ui0PX#
zO(V?`yfY!kiL*lFA5Q2czU%opH?VR%i|kAfo@y6?&{s^cCY3O?T6$$!fAHKj-0JjI
zDQJ;G`?c#0=vRy*rP6<XSw?+C6uxfaVEe9+)Whe_0y5N3-^{N-ZvyQ&#PkWd8+Cb-
zh>VgS)S53!%qro+H^_Sx%^qrG;A;%0JLIxd{<8?piZ(0vW>v+i-dZ|U0&f?NQZ3p#
zc&Wj@T=S-hxAGqQD900Y!Weo_OgSw|bwjW%u*M+$y_vCLWxRjZI<?wwBwOH|Lgp4<
zugdAl85JS~gG4!oc=tNQ7BxCMm{~Bd1L?w`7}#x{ZG5)@_#wOBZa8INqrXvW-&{Og
z4Nnvk0;95F-!9a39z4CVNe2<Z6QK8?NxqaAP4(tH$1I24q7;eL7+9*xROZ}J$~GSb
zT-mB3#m1+#>cD@fr=k#ebFM-lXCSLaY%J7Nn3A%bTP@GdxP)ubVX3OfAVlSZS9nOV
zhFTd~9}MG|j`dfirVIw5$KExmv~U|W%9$qv30$gm#{icB*DCZbvKCIxv9|zta|Sx#
zka~J)XWs{<#+jX*g+t3g#7Sao;F)~{?d8HzJ$FREQh|TDm!RK&8`FvmY0w#6HR`6q
zaGB|7K;UM9Lk?IxH+f7%j6D10rz=*dY&NFpWG79J;RRYflU<8wU|V?3XcwyC41u?l
zk@(G2ItV;|h44K&d*?fE$)@r%Kq0UznF)YPk%?eiKVMyfjX_rh#IfV8LRZUF)K7^(
z6jzomxLtqt)J^qpKs=!`nJ1;-b_tL`uCx{1@P=Xoqn@|{&Wy~&z@fZ+MR#C3Z8Kdf
z115V>87CVgt<R#gA_-S)%Bmvf(a#)FGGr2SnUfmqv%g%`R<1vg6Ao0gRzVI>j<t!X
z(Tw<jvz*}`clw}K(76;i_>Wsr##NXJ&l{qIZh?P8$TuT+`{!&ZFvhaUO?>GT@-NZt
z`3MthPh}nto#o-{cBoUChr#>5N=?6FgIY$*sjN*s?4Le8{K@{_$)SoB=Eel|sejJo
z;CGKaIr!b<O^zkBXmWhla+=8rj>>MZwpC@&SXzW@kM3S!Q^x#78)m9E!sm3gilSGf
z%)5W7v`(Agc{t?;j*lK3JTRn2?qYbeF)@N78x4y+Y~zOy61brgPkC_#bbR^)nWiES
z?7v|LH%g|=lrvId+{}sj1SNe^ja@=u9V>HTT9rm70%K~DNwrq6Rm(&`YUiRn1X>TD
zQEh~1I_>q_3|aG?bQnMpTH@tKg4;u-ri*`byr;(j-m<?zXKeo&ZCbAEP|Os#GJqyo
z<>5kHUrV?}r+#%`V5}14vU_;9z9(Ym0_Mkqd$pBLty3F)dZO~NG*v2K#bw;!9~d*z
zqQPK#4v@M{6_O0+lmOKE4V8kx8*0Wd5v^2Ahc9ECs~_xUnK{;eq`!$d`zODvzqWsW
zyVo_x*4lwlGhOf;E|FctOqSvy$^N-mCwB5(O|6b*Ps(C6l8K~<`#d^QAs{U#=Wg~L
z-8T7S428_60Jboo@Ag@D_q#spe&1*I-|zbnLEk9zu!(kZ_U;`w{0ND_+<<}pYC`O{
z-+Gpu$W!>kO}S=M+IERx@Ti8R7}I}^4TG?Il^ep5Mk&U#xjw}nSzsZ68N9K($G+WQ
zsl1VNwGQKMk2fl=l+fs3^&!)=5Ns<`d2gHD)gE!v+jhg|KOW@O6ad87w=`OfS6|c9
zm(}nBNPViN&Auk!V2oBlgHL1t-9jHd+ka$KjBJWtd*Y!JfZA<{+Q{(&T7rKgCFJm7
zH&WcfGJ*@Vu#_e$L!V(SOpm=KXezQdpzYhS)w0g!g+|bn=p>0A{dn%w%mr(bP1v`f
zH$OHti}35+J^TN;QHl#a%3#$Dzb#{S)w*Rt*Z7Rliv?1T9q8yPhoUj)6xmsJx_45{
zr(c6qk4@EA<JFs$j1pr49QA+t5!H^3HVP=;H>@x;D7jN_ocoS;)A-qgchQrxcVDOG
z)(I@pZAlIT912{OO?V;5d^UFs0#wKL&C-nuIf&pc0Z2tVnc^wNdpJ5O@0y9|j<Oj-
z`MZz3XB+Ck;F4=fo(f2t?=r}upL&P}!flvF9?mRQVs`LU0;e=|tz3URm81@PCv1u|
zH5{I2G&ykb`j&+5s)wPt1%Wd`YPPZ4-(Xu)h>Km)#oIo^@)UES1lA)XG026&&PsPQ
z^i%FN3552y58iFhOL6YWeZ|yVLW(Bo>p#TpA{B~^)95teHruPK6Y`Wug>n$Aafr&+
z)z!(i4=MBF&V{XzLk@pO0;q9gs%scn%4|*W{{TJS-ED+XJcmyQ^+=WOu06oDyjXoi
zQ=#fHEGrIQ{kt|FnmJsF_ALSXG`J7Dm<$XPcL5Fks5|hJx`YW4DA;pIi|4G$!Fyk%
zb5%yYijfT!X{WwV<HzguC<HlFP6=K2t9yI%8HO1VoGrz|<J^B5!MQnD2aK2&s^q22
zW_SsfT9NK;03Q4X&D#kHupuT?WBsU;>KM8qCx1J(u6^3Yj`saIM`68Ay_y#9WVv3K
z#@|p+uFCcwAaOn%q*EC@yzo!l;BLi`ZfrjzE;YCBq-~+|?DBr_@7`kQA0aEm_aIkl
znpjO(47*WgMhJh~!pc4$2g|#`!VXpcsapMuDzAqkPbR+M{>g&21B$y-AmA*ZhJS-A
zT8P^zF*>KTn#$#0PDslyuZK!uu0+>Uy*T5$?SxP<FA67m07e0`x7)LCEz79XXp66d
znBICab3mr?tCi-hXQ>Hj+Dt<UJrniZ$V1IOW6W2(79f9dsQX-%#y&-?pC^YLz7lta
zU4kEXZTcGfocy~JUhtuW%l=zwCUk~~!#LeE7I$VqAFbGMTR&D$y&fL;{{Kw2Zv?DF
zEM&`4oFR_*B}8LwAd%$=LdeDwa|?%5I?T`)E{Qv-*&w#T?_e0+fWz0!2yI$`tij(X
zZ(~5S)E<9P@FeL_G>1OV5MnNaug#4pwL8O9I?A&_eF^l|@5|5HXY|0QK*#5E2*_WS
zYrw`whY<8C50IIJE@gS4QtKipMNHXWkCDn8wv#OYp>Ly7=m~b~4bL>|daIVMSz}X?
z@fq792x;%9?G7bQG*PH*Je_5piaS#OFxMUgQ4xO~DB?sldV~C}vJ$D3#)!Pf*a1CO
zBk(Pe5W7Vofwq*(XO1;fZKYsxIu)tpM%1pe@%jeq1rOE(IPw6ATur5&TcN()et*MF
zR&vR4`N-)QW+>i^kP6g@X*CtpT{5q?xz;baxW(*HA|)eN&y78?R}N@=25x*FI1Ai(
zUm$<EV@J*V60|MrkT}8N#gEwLqBRo*(1vB}0HahskH6#-x6UIR)zFOy*@$F`9oxB-
zz&(Ih0w|`UC{<BH4mqy{qm!mbiJ-M5?n2W0R%|Gb%Y^6a&>IQQ$&Ac6!#D)+%>sXx
ztHX2llFGiZJJQQI?S#wgjCm%bycW+Wc!7VCMmRAc?%XFe*o$06?9>6P!s@Gi9un<B
zrQs+>d%V*KrWi31<;a7+z@R=1&IX<PHg~2iOOIU7saG;}+hhNwDz|P3Bgw-TWm&{M
zgl^{oFUD{!(E(4-r}9`Sfd|1#%?&fN>Ruzc$2XX0-+i{X`e(cJS+Cb)RRQkPc7lI>
zYMWqe-$fhFwPtCKkYz2I%O3&(Vo<ERyF!zeeZTkcw*3P0W@7<g8{TjbCpc2cwJ<)k
z7V#%z5RzpLxaWvd?~?obV^wl{Plyg|6%=hmo-|PRINl9}Q>AzIEW#&rwI>N@gWfcc
zqAQ>d29oaga0++3#@hw_Ot_wilxcrs4{*4Q^;EZ=sOR|m9T0T&*D-u~dbv8Yt=bCk
z98Hu}SzqwU+ASc>P2A15BRsM4!=H>DlCN(7TR^107Fk1PVKO{tr<8$pe%mUznRF0&
zj2o5-t_|Dm_fLm#{ay-zK=d6-1q-3<XbScL^QgSc+dbB8IoL58jsAro*<rWv`D^rl
zEKeq-%2lOnYXC$EDWn*Z@BPK0Gw|3<&H$umG9FQLo+uaL`0%IRo@*}*yDj|{i|KNf
zC$4etvr3~sOQ~*Y_+;*CqCg%@ic%FR2*(A?!OTmCgOQ~;@cQpV_{7=w7I-`Mgz79$
zh2cToJdkHc<T02&C0dKPhCy4{(YF(Skqa;!L303IsWvGXu!v9!snmoYdnp9ljHd-e
zzM@hYBWgMoeqm3H;A54qt?b8L@ZQd>vwTj&zo+f<0|w!?2$Ml!+8{FAv21xG+(i7U
z(S)YZJX|)I>rBH{T7^yU^YZK4;HG7*5lj2eR}OJvH5Ni1Q0xIGZRHwGhmLZ80s0AC
z^A(iqaPdNQBdb!OA7x-Iq4{y0#{g1=$ipDR)YTq~yH^(?@V17%wY&G7yXndkhzxbx
z2iQERzaR*rQ3b7XuaUEtY(tGk8w`Kmu&b)f;bu18h|nUzhBJ4Lai8X@obqe~Km81#
zpZ39OAKPiV;p(*?Lkh9`KW%h>3{EZp?4#;^dg1~!VY;{W7r>DTWeXFQLGmS@T#o?;
zc^i8%q3<yj43Ol6+hUYG>OvlBkc51giA~KCl~vPxOK(HI6v~wXFCn_kw`&lSeuyp@
zNF7F$+HUFqYAj$7U}_eXr&ftVcI*0f(6wEdsH%*!H^ABiM^$%8Pq%h|9CQCbU=7Xj
z=)w>13sU%+44`v6%U5b0S8^H_8v!~%OS+lj5NHFyilR2{d3MWZn&vL}GjPqORWk91
zIJ|JfOZ|XIjILQUnec8HNH%|Xl86GYHsTC=FWE-Mf1UY>4>iO2Q6xfZ?gE{hAr;lr
z7XDf*Eya}EjjCLy5gGq~RT7Aa6$kks6;qz48|)1lv!QZF!6TG`^~`{40#C_5Tn`+K
z&qGG^MDY~ekToF%;ifXIWR?z!YdVE|O%-n~sq>#;2X3ij%8e)izDuNo8!2wTu0c@S
zX+-m9OERi=!S2Ax_sQX4qF)<qc?vPkr~GaJskQB!fqTRD*{cYDQxrVNRc-)V47Lud
zzd_qY`ff<qaJbrGp4_K{8<ngZmfNC#U!5JU6Onr#g|-0r#zu=u)K@m%cDbcCKx$vr
z1*iP(tPuHoiHXu5+7I(&;?5vEQHW9T`7m|COHIc~7bxapD#5v`LexgVGLetX1kaT|
zrLjF|qmOb|Xd~@^dhtm+6I1bwT<>U8b-Rj@6nDFHc1ckVhBN5j0oMK%r@SjE%C|Gy
zH77_4yXBT=Jv)+GjHe<uUo)M5IXF4xcb7=$p)<Ojh{&|~{rA`Xz6&)#-%MoRvA(Wz
zOQTw<b1hGo`$!<)-Q5PmcAGC$CX;pCMw)fa^5h(8JdoLcIss&L1CGBNb$;>GK7ySt
z{~Dg*%>LffLGSagr{b9ZwlOi1iAb(>HGMe4hmOL-y14c^@@S8CbuLX=<p9T*sIsgI
zpTerX(LRLxE24aegb`Oe?6wbS(Y++Gm0*es&4k#U0qWPVZ;+z(u$Dmt(jgE#<#!08
z{E+4>q(jnwW_PbCZLl4W(}1sMy^ZPbcE4|MeZL+M@PynI{pIN;+d|X+wpRx9RJZQ=
zYuoJ`yL8ii!U6mGpf9$y(ccKE(BYZo%n!&q0KRj*SOf2U7s6M4hEU~f;U3RgksH<4
z;rZunrb?H7XzK%jHlMpQ1x2;+vVPE_v-<`dcSJsambukQ5}68rBC_QDiO5wCXOD?<
zLI6Ux+KrY{_=d{8{Gn90`p1{ea_AmLkay6NB6WvgN{og#c>$HX`4i^TOIycF+ZiKq
zE6P8Id<mVnN@NV&n;bH<vsJ7;d>&i+)Dl>HjX)RyIF}N*{07*o2~XASAgP98K)z-V
zn$SRh=CB%yBO<cgLm1(rTqF#9%shNG0t5x-_;~!_*^P`HjK_6&>Xn%y1la~hgb)68
zOd&RSjjt!TWxX`qNNr?7iB~TwNX6@)`qZY%&iV{c<mXbw`^z^Uvp{&0sHz)QR=H+1
z$Ol`4UenDi@Y-~gyqx3r_}uwcur0*xMkmjIT%}^$d-=mjMryXP*YCgDumc#eHIPMg
zxxX%l$LExdA58@{!s|F_MkKvYW_y!!J{6E8yBj%!bMMI_Q;{1vk`M(`V+XQ@z?bXu
z^vQqQbei-IiU<IUVLGOiiQ{+9_ZFYyoEd?AKguZM51T*nv86{qA-b8nkY3AN8vylx
zgX_(fY&H|A$-NE05;O8A1;kc2{;mZpb_*cH>fW*Y%sZ7q2hj3?%dpt340^`Sh`IXL
zoP4hO`oybITxa4Dx!R<oW#?R=ic(Dtml@#MgNXo~(goNaF}JoIv9?C_VytbV;ykIL
zs)J0F#`$0`=`kLaTerucj#K=$*>5#}y6f~?jcBd+-e;A_%}|=iV{5KWl-iN~O(VX@
zlpE|@OhVyEL`@|>47-H-J$n3mtt_$sdiPKLCr#$98;I*F(QNDUyZ3s#HrmNrX_DuJ
zeKQKiQjD&u$#~6;hsa;-?tz{Rh`etmUI&YOInc|{#EylVb?1&v??F*%^u)J+49z)z
z*rqIVV!^hc6~E-Uri@r{Yee{A*mY6|mtfy8yqIk9Wg*1p$_Muc9~SZ=Bv{}ZtJ8vA
z&Id6*yzSiZ_732N*E`{<rXzsMGju->2|mwqaF~S9&M}m5ZlQE>MM<9-PfBGMrT3P$
zt4mWbN%v8IkX;N#KMy%cqm{IO<BYOA%ZP1N5WrBBBLLp4sZv2V&1qBQXcv56<GzZM
zAXa(Dd#QqtvQx31F&4A)096V(s|jV4Ggg-QFbRLLG?(NnQe2xYXfjt+dcB|-<n6rD
zlbU>QvIc<YBI2#qjl@`k-+A7$>_NO`S&g?7sg1+m#q*^DaH=T!uhBz)cnWf{D(Ls0
z3XWj&lnRG&mdepclvc1n`a6&|DW$wfZEag1{IN~rq8dO-zWutz#o>j^oSnX{0}eax
zn%&oNIa2EB$LOvf$dy7{b(6sBkb|aKYSsRX%}7rtw0@HBFKb&UMrXRIVqeoG4En4f
znjA((#k(zmGy8mwDAgE$XB)xcWrOkt!uG=RpssIR%aO)hL2)1*`Z8E09t`(z?Gv%W
zUC_LJiMZquwk5j4zx6H|h{e#PAvHBvx*(B|T*o#KnfkMRGv(LdxD?7iqtF*jiA|Y;
zTk{-k+Lr?e7al-q2-$Gf4T|g8*bye#8C6>J5|xh-zKc_IMN~(BE1QsCEBJ!HR~Q<`
z^CSks*HsGsH|12Ntjk&V0}Djh5B3cp|B!gM!?Nn6{Yj2uwaIT0L?cqO&p9mKuvyc^
zTs)A@;@O;ktLPsTGlJKAF;S;D09H$={w0)o`OHU9;7QFF=+)BHL(-Hi6(x=`xb2pL
zrycYHvV#Vc<`p}a7jFU@f4#r7qi%b70PPrHTh|%2Q~Mpj;y<O?=g1^!ePf7Lo-j%3
zB>(4&6FjS#Bpp;`rk(6Q%9C<dSRtROvCOTE0Rscipl59bRw#g3v`&RrW-@@@-haA$
z{Re*aHFT(t2PihJZqs82Sw^clq=WZUQ|8zeQ8Hhr#01$!_P|nPf8vINT_SOou^Um3
z%>H-~oq8v{z7U_F6DaEoI}yBu^ZM55$#y;1b|Tp635|8c+;nA|$LUE^dvvz7(-U@Z
ze(dZtc((P}KGST#3+WV_?{~lZ)06cAoX7QCv*COXUS1SK?;8(q*0UivVT*r6(S$ys
zAmt(jCqbTL?JQ9_e}Zl@l_XW^G6hC?2>llB0)$EN3fcZ4MUN7ggeMnxWE=vTj0VuQ
zoF+K9nR<)KK-^Ip<LJ+|S`7aj-9=XOQjW(UL#cV*kDT)InMz}5G+6r-g%>6hh;<B{
zL5fW({s5LfDs3+DYsc9cWq8bH9cQrz7HFgqEEN*+byMNMe?u}7jL3;IG#*?2iH04j
zX<=p^axX?BCRUBDLQ!HG9n;!Wx-|H@7UP}414g8MB<$0#7>Ns>U*A6x7-RalBLOtm
z8i}Z>VI)S}@N6J+X$FvzvSSz7AV9Hq7~X{1vrbq_t)w2*d52ZXk8H&Y2Nd#f9e#dy
zKshr}j^NSE6nTY5TqRY?u_<58()=XDA@typBbPvN0w#YqF%j66vN8|v8rUdP3KIm3
zh_Md#RXbNSFUTM$b2h9>ZNITXm0|}p%^?q4yI>Nz8U~?;2ln-QqIBR1HTxWRkqHg{
zRA}&{^9{}+;{h!38(vCPX{O~kmm`^2RfX)Ms3BVl@%CW<9uUO`t$vs#r;fnV8SJfW
zG!a0Xo{@j<2zCWb&}5HyB^?X!$dQQBa8SW0RY1o@S@R*F6$-Z1xWNTyghG^w$PHl9
zkC;)0XOZck2S+xaPuvsNm}h0NgbL^d*o!U&dZ=xm?e#lsx8Gr}J8ZXE&@&zF%xyG&
z`wih7|3h~EgR?jLYYq+NR1Xxv$xM#e*s%YQtj~Xb|GmS0`|Uq?@R{*{<!OL@Z1Nb`
ze;f`E9K8qfx5|`*Jcwuy|L0A+z{I0XJxg+hi3i2nrrrGaUpb`jq`nSQ&JNO7Ot=Qy
zkHMRpY!BmXnd6AxUECfyu6W6F6O{FEXXPg#+Oy#L>KEKnrH;M*krJF15<utZFtmiw
z8*+cVPNhzGnL<rKQX5`FQ-XOENi2ScAyVnX&Ovnhd3Omk8t0+rZ5M=`mv-p|9|2uW
zr#@Ocy3p&fr@ie0KGqM}re<H+ujjA#7R?9WWM_mY=KxSZkQ2N#A6BE$nw~^4M{tM#
z7HB-RBhh<G`pdRHooAKa-EQ|Z3+YMe8p(eua|pVONr9v6Ns)udPL#L{4zj`23xCG0
zgMhum*c)~XY4wfp35oGGHGGCDAytTKr6YoI^6U+Jr+{&JFRiUopewS2v*c5O?nciT
z%ZuHfGyDji4m_2B9v2nC#?BW4<|speCM8>DXxNT3Vumgx7*bD3YQ~MRXC;?|?7)Aw
z9}VRoO_(%*Zw>9C4>XF3Sa!G)^@#3I5&k(E6>o&gC+sV8HZ~#w6W{g#sL=Fq;A`H8
z9m~E?N(pW}%gW>`A1o{PDx_QXtjF<=TIPvh8P_KCL6k()J*($ZD1{crHG=Al;@7_=
z&x?bc@j^1nRxfouFRur0Fd+3Hqa=UA#9`EpX6Y>FQ<<PC9gd*7N+yhJmSn0*2}F@T
zjv$od3NcZ$OKBywu3Tt-m8YW2AVG)aG6D4mWnwmCLxMnGa_j1k=4hLjB1>(Z!wkTa
z43pC$gUmWvhF9v?e~7o?FS}d>5SRn9jPerO-7&-LG@$3$o~DL^F_D_MUo(I8B`T+^
zD!$92%k$cuRM5J(F+7=|)3W_7=xA==@DvcaS(H<03~uLTl}EK^A>efr7V)P26;~4N
z$R1G2PP}m@TqVfG4zduc#KS$>uk2CRVP!}1BUDe<5US9%i1~A+O?N8CL{a}c`t^^E
zezjxOjDQWpvCpuhso;Dh>pg!(+XGTtKEkUK!Amm~+(hXLjiLZRm}gzeU50y&4w)%J
zv{NKK;c9N;h=#^P-jq`DG~t?-3P^xwER>EV=3YPOP;gmG2Jt*qw{d+|NW|4SuZyiI
zsf!s%l?l&V>e;T<PC4N1R?=_F=MmUQY#m7j5w}wb0LqilkF@KC&;fr9AIQ|3m{Kt=
zc}f_aR_FISG^vF{F@~Gyz#LXHK+)khu_w^vF8^}Ejv(TqCQ1KNiE_ryGoI(@Lj3p4
z$(sTn)<g{SoG@0EVV^IK{dMc#fsFgYEm^!Kw&lq0gO1Zzhv!xdAD<u6tUC;T-42xB
zC<GD(Xpf0-z<BkFLNtG>mCxLe@<?u7j^PN15HL|F!(PI(I=KfT^4TtP6qcaseZTkp
zt5v@Ecy@U;I6n8~=NMWFs<(jj93CDtyo(_?-Tt%o4_CsCYfu7qFR;&2F|5EyQ`CH@
z<|YhmrXEQM3ZoB@+oCc2sf?+%0O+y{k*MiZ<aP-<Dj=OT+jxK7@4wz?v=a#qfS|jz
z?9ZR^Xm?mR*P)7>or*CBqfoC=&HC<1mw!3w(VDFLC^cErh9}n{pudH^Nhx@$S7j6F
zJ&4Oo_|!4^mpT_Df`fo>)E#8>x;0<Xmr=Z5vvTZ$MvZtHTRjFO)c6a1*>Io7elLXv
zx5+5j>hD>Pp7wv}={l8O;HQW5rJn>>Cr-1$iXm9ZSMQ-_8kLKXS7Pnz1?H6?T~m}J
zRZiL8l+3k<Nd_%x4{O&!k^OVcg+Ss#feOj|MrAj_<sxXrR-EUFYXv~Z42Cl2<!pep
zuF;J5_UpIs@qfa%&306|)%$lqgCJ)Qy<?Bf1s(|g=oWu!;q?25wDD4yvqIlvuoAg(
zuv!rL`j-<}GB}eUg}R7awDC>9PZF8F3|Vy&;G!xqjs$GBkQ8Twbpd4B{%rIZ=oxNl
zxHEPv<5LI`@<`eCgeweFm4VE~FyE~<Xe)@N*8r#XI`%ZTo?&9wtZ4HA!z~?!YwG^4
z3hS@VBOrhC#?qs#GMCxk2@((f4MeI;4B-7h6-G`e<IY-3xyl6OJ3EUBG^ChA`zBtf
zF0UHeS6|7-q0;7FHd3igDTkFkQov%T`lILT3xRjx<GK)NskG*b->f+@6g;f@vp}H1
zL%~a)Wx{Eu!Y%}tsT-y{y&w1>;<aWxeeL6iYukUOuUi{YxOQ8uz*h<{)~WE6-?=(3
z;oFw|tH6{XZCe+<LRg4(cdm2z7GN6UjmtI^PJALoETtT?F;G6a9{ZVRGDR7)wXwU=
z-T3yKjqRv20A`6k8c-g*^?KxIDQ-U@ffM}x2`%^s$7G^B2FJakR5$j-%FL_~y*a_9
z|DJ!13j?By%N{Re&wsGb@Z~ec=3lLLhjH9HI6pq8uX>lJmfD^etjcVjt%)&(ezUWK
z9Q35x;f1t+?Pz<z&^3;$GJ`A6_|KKWDv-y|7nnh7jq-73q6YdBwd`6T?k@3lEoL#B
z@aLLr{v>8=vH6pjEn)KsCZA8d0Eib3Xkvfllca}>xhRFcPr`zig=9L&6i>m-;?pz0
z>-F#U98bVfZ~k^~e*f2UT4jdkLRH!ysDeKepdO-oL5+3rSw~wiTFW|2<slJD-RIqw
zjlH3!e8zaD;Tq971q^3IO{=O*1bVRJTaB3!Hgz>LTwe!UaWX^O(xwCJg{*XVSqFdA
zY`^xJ-8!)Bh;oou(}AV8dbDz_b1#6(r)qiyG-45q0S8tY^6^0~*_-A!lxoG>&TVPJ
z_{IxxbtB3W(`*lC%<yt74E98n!&8h)q4fZ1V7uUqOUS8^8)12whcx;KC|&}=_mD&V
zuBKm}^YZT%WdzVQXi+PYBfbkP_z-`H&^C^!-Zq%f`6=&^Xz(5zQ^L3eyEG<4ZtxD}
znvbq|5B`k$)^={on-yaw;KR4}!&cq=mP><xrdvK$k7X6^#69z+NQATpFAy%kj5Fe5
zizt&YvT12L1kzW5`}px1y#K<bsbP_x#xSf~Q<-Jbv+fhL6e`PHt`OIXz<ht;)s~Cw
z+JW1~i!~TNS6SAyrBL=vj~twE!!tE@q6F@7P?UH`=N@8El){J{AZ}7Vv(jU47l3b9
zD!b|?7y(vXI2!LPi4|d`mVS?3L3<H?-GZj_@wgn6>egZK!EtwCW1FQP(AI<TxV%ue
zYoYZm`y5-kTgUra)>v8%i$^vzF7?0$(%N}Q<NT-8uo@iL6DT=X61>1J@zUDcq@A8a
zjxlc6)~wQWFD#6MWrgH?nr#^=N|y+H0vvyNE^@=RQmL=E*^q0gd%!F?WS5|0%bYAz
zqMT|vlF8DWixOV&M4A~UXyiuNSLJo&!WiyZ(1$v6_!c9$X&=cPb3fY#%J{AVkU)O`
zs874|{n+~f%}98t`my(e58nFGcPi!5@*lml#{-pn<k6A55zy2Gc2jJSjPFR;OSXS`
zQ}XF1-a3Cc|4jCM_tL#%Z`djKSmExi?M(Xgoz&MJBMM%Uhr=d&!_IyG>o6~DnM7qN
z5wN>7+*M>MA9w8l#D!6Tw!4CDfQK?5OB=du_-yw$;$4W4fRXO_+cOtvjSR$H{Ib?5
zbl$SeBhe0loV%R9=&;dY?gloBEgXN&g6~J@M@)bQSNlm!4s56tVH-m3Z268;>|llD
zGvcJ>hCf1qe-_1!kY`E_-@-*P2acfioksn>1ArbHAc<qd3!z0Pbu%9sje)M^nkF9@
z!>`E|AM)6DXkp*j^=ijO#@CKl6A?!&LW&N12C${NRB3`Mk^GY~>GU#Owxxft#f-e6
z^k-zrwtT8;JfWxuORvMwy3Gz%=7m=$a@>LCq^w3R^Kosa(1F7LykY;%HoChT9kBTJ
zdTis<2Ky`9LJw*8)kKab1CStAfNbJdR37pW{uSUD6OkMLO{Q++PwxHZSv_*Z!OnXU
zWYrWm2p~Xk19omSYH}gQb6kHDu%S`NK#%>hfHqzNXvO3>S3U*>r4%e^yz(a#H|D$E
z%E^gn`^hm$>^?9DOma1MO^0b-s-Xs#kjU@DC{)5h2xTg{wkw#nI7<sAHZF`_<hbOu
zX>!QevzpRsWl58;vwwvIk+3JztX{W#5BmtZXhjud(f9T}wa1+ZY-@jNd8~K$`VC9W
z6Ab&$7YC;>=rv*EpQ1C%v`}F5C$Ip#b`C)mGRLhpie&h3{u$s(fg&YXhVbMd)DFBQ
z&v{wF#D`2<Zmk4u!tHZ*QP{b6`1##Imrxw&jtyZ>9F|YmmoOc=iok%-!;pODqn(pn
z^k}cKqE6|y#Ec7+8t8vDcLr)IG*-9h{WsD22W>fj?eQ!djEhRwv>F^4us6T-k6!}h
zpJp;ovMLq#NZ$Br5BMUf>odsIa96z1s%1x|AC(inORa}%CMVrvR=f4qSu6S%6U5lG
z8JToS0ZuFI``0f#TD+fNK^bG*ETM>wjlIP?3-m-3=2F!pv!8!$J;u)RM8qmy>kk6i
zqZ74`Kn6RWrgxf^8l`)Dx!K-`WFpck3)jLS>kO<7dn}N7C0LaknJx5lgrDZ_RckrN
z%h*zI$_N~WZZXA;@B15_c<4C$zW>4v4iXLBxOls69f(pS3iXh$9SAWu`0<eVF#Fb@
zMhDlLh7n>BQi*?Kc`>=DE%Dm;uGx<{`>xTEtI#AN5F`u<m>^f22O;DFT~e;zUu>U!
z-@k`&Jg97+eb;~XWV=-BCgu02QV{$B4!wOIWCxr!U3x1!hP4!0^TedKiehj|(^H;h
z9hR%S3uG`U2xRcR;iW`Z4v?js{G7uL0H8I9@Ha(kj7xt$Wg|O>5{&M!#GG>@=34Tm
zHHBL!`Y&oZl^HK%Ox{1+CTkI9Eje`2p@bs;lWRs^V5JyW8AqZN5$r{)3p^%Z3XoR;
z{!PnY@o)(iNry8F@d&p0K+(W4-0H3&D9iS2CPs$2IGPF1Q}8ITNAw#}P5{D(Yj!KL
z%>Ikc-XecRIiyAov&F}`I3M~r_T~}wi#Zj7Obn~55f4@&mT3^}3d9rY4UeHVtfeeO
z0&$7(Q>_5MqQx`?AxNsE#5T)Fns82cQR!vy==M>Q3)G5#YZd<*TE)MWibq!};;rAQ
z687YKad2w4OLq(RN1no|>W6;UqaN#hl;erF(qMlh=9)aG6+Ph8ze2s?(7zG~WE1$G
z*y$(g_P#!EDwdDX<@2>J>G78OV<XI>9Wn~VwQCQ<!3=Ji{T@3bjQ}NyUEiDphEr24
zv0wr0d25;F4e-BObou#rusH3L#tMBh-5jnvYRb8P62+KVwa#Bi>04ezarzj}XZ4Cy
z37vm$8a9$(Y`i!)MHLWjE9CzL=oum9fo3C)0Au!F(0MuTag=2P_4@d_1w($r_UU4a
ztinLpsE`2GyU#l>Z-2bVQ%Buj_30ivb>^?A2S`<NH)<-6Ky+<WG@<Cahd_^17>J$C
zQ@f{uj%c|K_W(WiNj3Z0#TR=Q>>1I^nVf$XrMeL{VjjLJKK_7yhbmN?Hto()4_2pv
z9tK;Xca(3#Vp|=Bq4Q9d^loh4qv+m1dXe&Nhw6vtKi;E&yBgXif`jOwiQodc@#e6D
z|MuN4yPF->>-Cs03F<rcWJtLf!~C(FLGZ3Axe;UOPNIMvlh5J{(7;HKu>&ND%L0Es
zoxy-j_>Jh;@t-R6N{hbhF?NW+!U3*^7JaRLJbq3wB9iBIB1p4{>g_RhDR2}w;r7<O
z*bFlrMhCQ)-ug$Jf}2Tn!eMXN0fe?kK8D0I92Xj*$;*h|YDXpzPN>$+ot$d){>T%P
zyFEfoTex-#S6_a{FFD`9_^p1xv7KY^@8eDQS#Z3G=E^FEo7O>Ce7XtL7c;ib*~a(b
zl97eZjheOaWYcVL>(A1Y4IFHi_8{fN_ZS-kvfOR5H;d~$cA1FK<<vNR1JwX;o=a3A
z(TN0f7h!iXxy-;Y5i`2BF9nzQg90Ug+sgW0+XWz{eYT?tgMqs{_B{qA^%s6s(?r{g
zv>TKckejz9FDkldSYz0n#m%(ZvE7L5V(QZbJLj1CxAnVNt+pT4;=-JUzEZ<iZuWy3
z{Z!h0tV7onsG4#ub@2Z!w5U?mg{h3jLYFuZ){4yI32)UevK({6bXDHS8xf*^DhXOg
z_t-&3o+@@51NR9H`6#sWuRz}wNq$B{G2u57;XZ@D1lvl`gx)Y@se#4g`W75D2yWxK
zM_86EXNxUW*4$-C*O8-0Gu=j&+-iZjGQ=dSimp-J6aYpeI5-dU^61L<Bigbdyb;Jz
z`W=-4qy?t$BvRNMX*5%}xo6*h=^TG%6Ll+YaOB8A%j>506hjF8C3<HQ5I?vfK@aTA
zt1;x8mENoFyAfQZ@zac$)A;{k#GSGKLXMGzM}S`rE<PQ9`tXLa<J?u>p`Z+RaZx{@
z;*r)tf7`*6BN`*12;($2&G6h8My$u!FVe0R1IZTP$Y3{v_(OkYg<PP2b^?V--@=(u
zofrcN&zNxT06m#<Xv}>ES_1&S`D3Q{ZE_0KW9aj5=d^jZNkiUNJB28dKjH7xR0KX2
zn}OC9Ap+UnC19pRl>r0VxhKY1>zDXA*m;Io<<bUO9nxul_I0B&a6yD~@lrdoTbXrw
zJqKN<DV-CK^aQTq(rz(TSw!W|)7I2a&g)N>b`394*cvTlTUCyJh#k7s!@I#;d2t4c
z|MtJnR{zAa6{dP!a)akab*sLec~{fs*=sSSdk<yJW6xqzs~*bc&R$FA#=j3`PnT|n
z0x1Xr&dG#|->)B+pN0Y#QMDeI>P40xmm1_+TyI#tVB_3FNKN!M0&80IU3~7LT|Jz7
zTEA$!sQQC0r-;FaJLX0N7GBfE_ipW7Hh*vQKe_#lJG1B(?5WP0bGofx*e#a_hXO%=
zs&4R(DF+1a0H-?7m{oh`+6<{HW(9e@aD=+dcsYhBAZlwdnQ2=B#W0;5cpF@-^LGhY
zc`nJB4tGSx`C~P2yK11bPkuwxa=5<trl|eE^Du8M+_jGFYIbLd95-pqzEova|FLH-
z2;7TiPFj_?69H}u9u*{+0SFP^r8-A{{62TG2nQOtmuR~@jR1cwy(ry{@9*F|NA``B
zNh7A(seKWj!nwa&#URR)5Ykq;t1C*-*>d)FSaWkTdf7p|Hn@vU<CfV6+`qL5jz#xy
z5P;XgfBWv2-Ax=acNh27_i%?!*RC<uV+X5U$IZ0|=Rn)d+`YGQEsIL!xK!qUZ|I)r
zcFxQSvDu<#)=%OMaGFC0wj6-6H|&JnSgf|XpDkEqI}WOpD%kF@jY&Gv8*J+%Pn9Za
zkWV3t>h_YOzWdqWzgDH#U|R?FUpCCtFs??wvahE6SCzBNS8P}%*TQUrklYw2dX*-8
zP-<+awiW4q{D_c0s#sA!Xxd7D;_FXP3_Zp-*fio^UU2&v$6nQ~FbiVDN`d&&u-T~+
zGIe@8%Cbu{_tTsM<eZFgm}H@dQWXdIUk?{|e;s(NxIfx#Gk}pqNaI$rOR-8*f>Sj3
zU0Y%a_-nX>7?~t!)5xui%$#(&pMGSc!^{|JDwxiAa*b6bYO2zJn+p+tdwygSmFE~0
zS|8tqBkMj0gE>D|j(DZTfb3v{kUCUvz6lp@Rz88266PUf4GnvXQ<p@3BTJP}MQ)ZH
zRNc?<2(L)cmYl07btxqrsnB3dDR**}&!(z!$%$8}0p_DB5V^4t%1qLrgNqw^02$yK
zscU@%cvf>OHmU$1ghZBqHr3xqg9!*(i0N(z>;6W>inGX5%GwJiyKod=t-Hf`q6q`r
zM9gdvbK4zMOm3xyR$#f!pe%fR_x>`(HqY%QwOz!@?m<<`=1zjU2)J+`2PEnLg&4q2
zSDCa+{3uiCJxzYEN+!_q@P;wV%bT4Y*k^3bZ@%k8Fl%76C}p01$bx5^4Ms5(T;A9P
zL`9&nZu<r^dUM&i2HekQLMOm_uW2#37UfWs%1yjCE`<T*R<Wlm1R?y13Nl`qiCsek
zN(ISLV8m)}c1wRK3oSG}UXl*{&-VZaSe__-xC^qszYbDVv8Aq+gKIG}d>CmkG2)hM
z;-+RVuVpSNIrZ{?j#blX9DMInzt%GTgM5VKC-o7S<I7D4-`n^CTkjTpGy<ZQ*xG${
zKij^GqcfaSOjcca`qcn6kAZ!+89gq=SgO25x7%`(Y&$CLM9y6K*3$e|4^TYYP8-N{
z^S;trB&9IXN1Mw^mnstjUe>u^z&GT@hF#OEvTxj`5Q}YpJ3($hGbX42*n70->Q`**
z$dj>y&EP<Xw?@NR7?kb%$CP1KEiJm&Q+*%ZUoP2CV#ZG4k=;(&C8clPx}NIopiJsl
zgX?Ltua`B{L4gDm4OkDMw@}BlO9EN#wfAXKX``l)zkjSsX(rRn$Eq~BuS%FCPf?i_
zxi_*j70(8Lv?s}YyoudO`)9mQUcT}>a>%5Vs9c+}O6+!p-adGZh;%oZHnWV<39T|~
z><^vK(B6Zq8n+*=t*kUoG}~RxKKH3^K);GD8ED>LwcdzTW=cq@(ZYcok&6K3;HNF&
z^TlzCnP!2I;CZ@ZRsF?60oNuP%}P<ni|L>_Z^~zXOy=4Mo?_;0P~^N-#ICBtlVgYv
zmE2#51ppSddGO2S;NbA^=<;&#)6stoj^EL3hJAi{ba-)e6}{e!^<5z4!%joPPi0an
ztwx5ysdH874a(`j15MRsIKK2Lml8lGYb&x)cGsmQyQGfPQSK+6BggE#ls9%OJCXUd
z%Oc-@Th0ne@ws{q9L>!GtOp8aGQW19obJ#}l$!N$JuvE8v~6Csdf4TJmm+0U&7~aY
z+(3Rd`*j$dwgdaBLo`lw>kez57p3}}NK9QOx3L<3M1AXfvGMV09~C%Si#O7?kFLcm
zKHJnks;^%VA`7_ftiTd3bfCF}m1rZLU+D3FsAVZT%%od?CvsSF0DcEyOsVET5K6k*
zwt|rAbd#*6<l3|BGv_q(;q2_g$<g58{QTtj@ZjqB?9<@z;^^Jcr>o<GlgoJd`=yVT
zHg6aWj)Ji1?0YYPmJ;4D#P-?FG<Qy)w$LC_-dnzG;O<0TjrDT#mIMF=e6njJu<KtK
zl3~(g3DZpknN#huFA9Pe!<c<AVPw@bm(z^`BY)~XCeOT|W2%I%IqTTEIa!6&C{$82
zoyT>JR5`^xCz)_U(o<vMWB$>#1CZ{>g-({ueaK%D6s5Gv6#$wYL@tPQUBZh(@RH@K
zW<N$aC$|j)7p^KtaOSlnnN#)$pZZ~=L)HcRL~6fJX6jaG6DVwrWT_3^vjE2;C3ETb
z?teozk>g4ItBliKRsF*rgAABdN{xUMkBH}R9Q+-R)U3+kTW|e9KLdxpx2Xd)3C?q+
z$o!eO))oFHrtWD6^Z>xX(sOz8H!coN+4mjx?)dVjJ+`}qMW+usQm!jJ*MS2*Rr$E-
z=;s5!pv!zmfwO9uu(DRs+#t154v|`R<9{O9G%J|)Hr=R3!xB#5cyk(Bm~hIj0)A*N
zoG7e(tBXM}n?yfTw@f;evm*B1^BhBKyrap?`7p+#H#b_LLB2|APna2(0(+>A{ps-b
z&>s+ShCPA@<3lSV{fb2;Adq|y1*7{gfX3YYk^SIW^J52}?X^66Re#p&&BYT0;D6D^
zi22citaUB-(R5W7v367PDSOpn_Mg`s*oOA(-|kX#x4&AsZ#!^1*{2WOM&qxa++M@>
z5lLvb0~7f*u9&|4<^1U4^7!(Ky(V<+Qc%*kkUArzgWZxjo65Wbr@}6)Ew?CZEH}}K
z%8OYqmkU=1>J(HFW_hl0?+XqBGk<OAW1nENbUWjP+nPSOtqERV)V(5WIU+?4nTYDJ
z_lPZkLrC%;AnSvZ8@W8Y?5>p-WpqoAdkxgqW1r!j-55D|X1IOS>B?>gi(&4aTq-i2
z*i*R6S1h%+gA;W-XUPSEc=Cunv}wb_FCewgoy6=Ph<W0pvUM*6fs^B7O@FTVTQjJ0
zQ%83)oha{7WB2p(X-=@(eGULE>pR^u=DT5lt@Dv0<c&G-H1^r+mfUsC&7W9Du|+~J
z;&{X9I~6!PrtXZK&m!%?!ytiE$8ZL(;S$FmlIL&AdyCsL<#z*EI8j?%s?K?6`shXu
zk&}GS|Jkl>C=EH7HvSC$y?@YP=f1m~iKM9F%n9hoH`k>Ev*CP`!!&>`3@(?NAs%k8
z{MkjiqY|(NdsdPTBKN|_<m$mpeH~9pHLdJ6d?T`%OHQ~NJI@#J1CE?chMoZN+wG1&
zqXWE`s=wItMex7@nS#Mk+C>6F);9wV%pqGy!=b+8wLFi%OO8xF6@OVQuj?pDl;s+1
zmvA11`*9!)B&$N%J<w$hRwMGBjWgd*lr}wf0F)44CJlMErFR=6WseMEl&CuxN{6!r
z$-M9N6l(NGq<A=QG#6Zf;S{aDK{Pmc><8%qK5-nwWVm6!ic(?IxB+mpI4LkXnH5<@
z0x(72D4zMK2czi2IDeKR(&yH3j~VGfRn41s@P6p?=i_%wf=yv0$qy$Cs`KiAJN0`_
zv2!=}3v5bQGv3ojRg-0yLQxzI%tk(E8$=r9?Z(XnddyErq#aXQ_H%_`)TuqH+OsC?
z+c0=T!PG5ztAUAQPVrqnefmA>e74V~v%!tZ;IAd+q3DjThJQGlAyedZHsHSw;%7i*
z#|bLXzFe_#yyM*hcDzZqcc`XCWyH>ss-vE6abCCbZj@CbH$!O#A&D<Jh1*r#ce#Ck
zua%|Tx372q)PDw@Xt%-9AT}0R#)p|2_RO@%-mrf-@90*$6c|{awHJvEQx9-qw#O6t
zodA~o-(U^yy?^CeG(vq>uv<L^Cx^bGD6vW_OWr5si8%SJ#YZ5&jDZ%%ou^|5FC){#
zsIEo4HSCd3!BC9NjrdP3e6-!7Jl)K}N<Q(aSky0zFK(WQEB6Q1v_5M-#oZHg25Ih=
zGUjf6o{F7=%PUJBr_!n!aMqn8a8q&o&Ow{CPF5&0fPWq9N#<$bVIHpTiE6uq+uRje
zjn}?U+H%j!AJF<Mk@Ne;+d!G88}EpR(Bef3Ln`&P(-yi*)djl7`a_k4ca}S+EBsTo
z9^fF_dH#v|3a~P#t}GebNjlOiX@a)kA3d}m-@U*5=MF7!@UJnnz)IWDwld^AY@ddW
z&lkr_D}N5op#PNWV;|Wk;y?@Mx4D#)hOg+;FylD+3F=s~*!3&7)b|#s#<bY=t3UkA
zclqjH;=p(L>R;ltclqjH=ctFg{HvVvE?=#7$ZK;bd<td`ez`<<vY*84I9=E$i#!;g
zh$Yl#J!8w*ik#J+WKjcod&XSGgpXiZJ<sSmOn)3X@(&8OUx#)babT{U=w$yC{d|Fx
zm(<<v#{5L$;%BVrAk_0jXK0-77b+767oXaXRE;2kCt7lWh58wC=Oz0mL>@e5SOI&v
z^EBsSSUrxjE30}e8ox&8J;e~#Iq6-R5@+q)X#N4w6;IjYKb>CMt!jb!q1Lvi=;o;U
z8h=jz(@w5K3KBVRVJWN3wE19`r=53gOg^bSs<n1h7gq0_CsJY-G4|9QvPjka*Hpmg
zgwxZ6Bf-xTgd4%n*M<{4rLbI}$t;)*|5WX&Ax(E)K4x^)W5!lJT4Ys-tHLP|nLRut
z_MF}N4?&q;1!VdG^TOA3wG8)c0momTq<^Qq`UMGsR>s4AEJo~0aqeq4qYCQtqEOn5
zO97!+ce8kMJc)nVIaSBbZFQhl6WZyeu@aN#zR1?q;rX@$a>Yb=@J-0S=y+$hvV^5(
zRH8CA6<YH#`ekC+f1{Pu$43YW;Ikqfo+GRR_<%y>gQHJ16ECo104!|Ilt<0qY=5n4
z6C5@Hg}}1Y=xuUN0fa(Tns7O8|MHC4O=Bwa$c2j-K}Tiq*U|;Q&3k^6d&4&NHn!(0
zoXULQzQTG>Wqw5uYW4BEHS7EKo7M{XU9&=dcYlR{uS6wMS8uR#>ROe%i)zHr2hn$-
z^1r~l!{}AahP3l4e8-rXgN~`Quz%O@w{c<V3>I2vkJC)F8dW_XHS7wjC0t&f{Mqj2
z?x{U4ZEBst-Zhe$h%)=z$B8HnJ$Hw#C?u@Gt=8^d;_~vu^YLD0LObkxrx4i!6sQPi
zWEU`HpW8a+2xAmRiaha-M^Q>A&a}uzj6CDx@>}Arkan%{kr5@^?X#KSrGMTgm>3|1
z{*+chqrKDNRz!Yqst~ztPAUG*y1BTu%6O^yo4x)w-@yac&6U;Jx_7Vp-?K0H6=U6$
z&oq1W?dv}4UW=I>k83gO6=KS|_7BUe{flav??68gY`^`z9}%`s0ytCSu_!?fJHh+E
zA3JIS!*|a=r$fksUm4+0RDT#&Uq^WMzN_?-Kziz6gD&SU1^^gk3wPK=-6EhPJs|h`
z6kcQs(O#~FC@4-~jId;L)iPC?qA~$pF^A<4<0QKD>O~>)RFoRva&trk###3{FU6EF
zjG~fTdYjEug(AGtq7zzX%S~;;QWd4-Mr5;&Us5j05z06()y+~VbAJN;<W)x>6OH}n
zIEy0XrZTlM#>G=XQ>2EzsCR{n{is(%4RO&Fn^)>k<yzTwzNJm7Dzojzjt&qLmtm|F
zJ42acw5;=KE@XiYzZ?r>YOJwD_v6{+)u)5gqwc$dtD~M9uL!Y`s*xZgZbU9A9foal
zNui)+m233G9*J89YnNe|0vR4gr4SLcBXJWTMIjLFb-&NRF`qduQ^Z+Ez_1Sco0piF
z0xN$bc4PG~2-F%Wz^gI1hJ4^8jG3(o+L#JEFhh~rrrd})r!>!JOln;T!bXE>Q%{-`
z2I#+3<)Gz=J8{RSG8Y7sRjbq<CK1q+ggui}tD5lKuv=bQ+3zxlApg!U-odYmJh-2$
zl8LfZrKZ8iAl7^aXH?yR`9V-qp;sSU-kpD_F*^}AA`1ZwxPVv&Pch-dgiDOiqNrmJ
z&o)%XsA+xSQIjEa_+}45474bC$&D)A*_&1bp7jr`h{=P6(@6w(=Fi2Qfp94&iE-qP
zdLMdhGgISlk|Kj7_3-YX_qKPq|LN@N^5|-lLC{DXk-!b(S=NJ=Yr_p#ttl?j$7X*4
z4acPI0$Ll~*jHA&(86@sf&Z;d(AhNsy%>h??EQPR_EG`|TZ9-wMdIM<-~@mhb5`X9
z)(*Ni%oH}^8vd^mh)+trQsI%OAkuwWsN9MeSaage<+DDzxH!8&SV%2O3BY%G%Bo!4
z*;BPhBmCD|EwGI3tk>d3lp<?nE0%xLg3GeT2Vi}bBFf#FE2`fLP7iP9_DTrdO-wdx
zgaI7g_1I@TeGnWY=s>kd#8CxF`w8X~mlVamLS`1`J9NZv6n1B5D1@3=n(ZxaYuh}F
z2flh$89o*r0NMw&6>$Jdp=Wv0VcG%idJaDyU0eW%pLGztc+HYg<i9FiHXMJ{O%Zmw
zg^lAJ?|v{C970VxY{*l(Qt)*ie|mogbsmS%WFC%#ZnhH`0tl?Cz-ysNWzzY~Adv9D
zW$H(H4;j$x?7UT2AB=mnxi~>F5j<s9(`*2)!W1b*BIFHCbec3)B6?)CcSmnOf3QvY
zS(HPiMQ8*H)uL46l27Aoz0iLSJLI${UK|`ASqeutB1f(1=ApDu>fm4o(FK8=WsnCo
zAca`o6?T$G5-pM@jShErMfSXK!!y$SN->?f<A+mAF=i~2q!dc63z20}sius2%q<28
z{v>l@WWw3Iw|<lNnw)LKZ7GcrxjPBj#{*YzpZ%$~3;)~e@AY?g``>@;?!9{T`n%qk
z(-|-*oL&(OJ&ob)aQJbX5QGG4P&tBHOmNuR;mTVIn5tMo6mZ*^?AvMGVP3Dazh2Jt
zi5fq8L^seoaNNFWtJD5w&!P6;3k4(G`174@yL<MQC)cLriLeizX58OG+7Y;bR#Pju
zL?rN|u7|vFb%@haAS8df9}7I`#3vTYDie+*wWABy@d3r-^u)#3a2B6fAgs}+d~08X
z?gWS`XRo2>Ld3h}ZCYzzf_UAOR0&UPbe?;XX+kq2v=am`WXiI-Z2jo;m}i~(I&sza
z{9N7lFW<bOM{Y{r^JOpNGgX<Gz&STYl=%s~Snc!Pp*?(oSfPKf_g}pG?Ztm}Urf6%
zQugBGn-`~VUR?HG{QY<KqWijFTQ6ki#Z~7;clSH9&0b8{i}!C{oUkr?F@2FgKE@G>
zvzZ2^Fm#O9%9*O{+>zR!^Z^T0!xtZwHX96o_oMN=wO3GH#GQ#xqQO}9;R=JX!sm}X
z828i}`e@&S_1=H?&3m56Oq$t#rSI>PE0^nH-)fu-SHcQi|8+h8hj#q``RzZ|@HqXQ
zMqpXpw!`<85m`4;Sq8~2de@{EbP0V~-y}VUTMVOg56vnq_Aw*s@^bcozW@EV{oQ-Y
zH3xjP@wQ69J%u57dLQKH(+G|CGLrYtYRFaYxS;(u;FEv1u4<&>Xr}6dnF^rWxfY$e
zDavgGxTDHn7u%q`G=n`5kEnq5w9zd;Z8(DsW_a=U93|W6PWl@G$6IMberS~S1{?1T
zMtJo<#7v@Kjkq%+*AA9RL_I^<fn29}8ycWfz}5{`9Jlj-*5X7Z*S5#^5&T>W5!q80
zi(U96TDpJs?|VhAE!2ZAd%buY4(nvR{M#^5;heL)FtP*fT3+zj>Nr-jdY@H#vcd-s
z-7}((AA9?TB|@f!2~KP<ztTF$RB{ay!6>J~@wrJ-IG~JHlP7wdxb#YiEuQm?;CGUV
zNUp;%EV=fkTcCxGHSWj~E&-rQn!1b<`c0=W_j`ZKdoiB5K701#%OW~#M8;^x$Nhq-
zY<{bSOH2T&j^%v=*ES&7puJAj)q1k`JA9y;Q5;eZ0)hl~rahdLB4E}Tg_ZPnH#+p&
z-UcA4(cygKl;7E-Q&k-2skqztN|82QSESt|z2-Xb(WO{)w2W7C^!Q$x7L{!iZPbRP
zqAh<Wv8sfNzd7Z1_TNkStJvS`_u1*&RX>XcfB&16K3YYn#^u+Mt?_pc6|wU){)Hs%
z+=TugB5~tR{euN>iYBhr#P0&(i$I{7upzww!%RjlIR|0cIq~A;YvL~S>R?K_xQ+VM
zeS`p@wOkoj;kwY}M{i19B62Na9I5}e1aN<ZU4(=n!ItH}->I9;->}V^;Ov(D?p}ZQ
zPu<<U?(X-4{;S^JUhnlc-90N&H-o+pRBzq&j3v33r!8BsOKutNm~MGJy~(}1g||Gm
zY#ILDs{4lj;43$eKxfSzBz(C3Hd6a`t-U0CxyFVPK6=2e5<dRQt))rm-}}pB?Jq*1
zXaAs0#$OxEZ!k5x@@C_PA@avrX6hft<Z*imu52#D(@|Nf(o^5`-dT!;6uf{di&*B7
zN6`YSetfxbDNJ0fUYB*C0w5p+carFe+$Gvuu!|p$eDH<T{(Z+qI;1z!K|=ymeVW#n
zwV(nmGV9*8jV86P+jfb-#<G2)PNvc96~9_VR@c8+M^M+le5jOeqw*9Y+Rs>?GoAtL
zscBi46rlnlA%eVy#);<^LE~=z7D$Gu>pVM6@j!z2*&~MpJPU4Fx~`X3p#mU(mC-%s
zTpUk}$CIrP=tN(_bu2;E*0ptXJbOc46CL!#=%7nShvDt|=c9{@4!H4j7)f7nlIpOt
z_wOT3xyR-l!A{OTd^o!JbZ~kEMtb(&ohY={O|t*)_}};b`qyX7XQm+!E!$<BZ9ZqX
zDVt43ArHcKY1~^qdp_6?&J>S-Is=~SuF=p<y4OFVTm@N}agXmDV8@@Jp>3TVzrVof
z_i8sP)W4@kr)L-cwQtAWlgO(nM~_iF#zDA5AZEwCmDZ=vrw4d-<4G9_zB53KJfDK2
z&no;~9iJY5`q1F-#@sP099E@a<wzN5Tu~}`na!A~N~=4JLTHfv2;CNc=LoqnA$Z~=
zgaRS$mJi-mkl{SNRLQk47lNlTACEcy;AaoHmoYB2WIOCajHNc^>?tSRT$5`|%wOcS
zmFgAMaP^Ws4V}5-2c<}E)+kydzW5W@v-ePT#d`YQ2F69}Ogza{Imj|Jd_1K*nrkY#
zk}dAtgPT%)HZs$Z7@>H7Bvj%Jd9gDdX&Z1(BwZg}daX=A&qtAIyzwv!9EFWysnl?I
z2*(9?N)gRNNZ8U)Z?`p3S{riyY->eBfuZ$2U+hktqbyw9A)se3eS0~}lcgn$D9<yV
z=WaFLTkNX8WcqW-537{d2WhU@f2v_k0<`Wtuu+}b9!{4x^AtUQMwb*gKVJOu6FLzu
zE^sz2?q&9DT431V;v(m~)S|qnW9)$6TiK;Zs#2QS{RIs-QX84*`-{$|LzUfI>`G3T
z^z;9n{ykclk0~y|)((bPw88$7JJ#WZmrG>QJ29-r7wBHSWMt!FAOP+!s|%HDv80@X
zvT|C+y#?<bUsv#d7gb&_EBB$~#e}eU?<+;ib4fcs8dFf$G@J6AU5K<wz>bJ+=SD%)
zn)es~cy)C?ABqbO;(E2p-t)vLw^_F@ICH9UY1Gn1d4KO-3c$fTt5zr~^Ccqba>C2>
z5aS$|4m_eF-M_3$Y5!fd+$V);DHa#}g-ZjW%u9-#UOuIN1_RP!_kXinn8|;rz&OB&
znPs!(?aYY#h4P`#xODm9lo!jl-OHtFDHb?X(*h7kRDN&S6O~*aPDHX?4q(}PTLR^b
z$P<|@DRllBP$HI=xVI{}+7aoyw~LGXB+6VYVZ=6lSrsQ$BJySW#(g}V^RY-FHObOp
zy=MivTym#><LQ#2M-i~BJFd9CzQCBDWow`7>q}5}my{9HVujg%H7k}h%f3Z4kbC>_
zzHQ3BKQ>~zxWs2I%7e;Go=|W3c<_fvosWFU2FtA$ljkBkS8B<`x8?5H(`^yI%PuW;
zuU7Jr-@j5m^4|SZ^CMqjq^VG?10H{{k4%#OA;WEdE4p{EpwKVeB$Jv-^_aYYwV+C+
zaiP4ANjx}CxLZB~chK&>mj{>v;jHcSmkW91mOEAAc^^>+qR@1aGMQ5XEBnk{Nw_w-
zntSZ{^!)7N>fqBA;CZmmc_y?*>Xe=hZyi&-x9+fH!t*g*exQ{BkSrosnVfDbM<bCK
z3QanH$TB1vMM9RsS-`=lu1a@j36~99_y;jAZXi%)!ZE$DR#RanXjp|;8e(@n-yNo_
zWP%a=j8|qNawDl*M_guA3HKHphz)s~&AJpJOZ~guW5+q0Ds8|=9h2xqS0Rm%<V=i^
zF|rhg>!J}D8St)Z#!8Wi8=jlkIv(W!m_TR02Bks8QajK}3k|7>)oot8Z1orajSltc
z;n7$FKnf0)3Flk$<{aS@<*y>ei{_4l)Bp;x>r$!RH#|*6YJ1ip%wS(^L1bh%L`K#w
zH}EFc_MptgcCTHRzNP{le?tL&Y;<J@C2+_U`Eg+vVqEpO$~aol<_2FHH`o+A4XZ$;
zjh00BdDxoBf8y=T1(kN<n%#(?mzuv=L-#ifzk?LNQ+Y@JbG|Plj%j>bhILk3u#Fyc
zHb6BM4j{tcr_!B!K)S#c8^HC@!>m1Er8a(RN9)zTepskd8;P&Ke~Iq07t^-c==!dX
z4AK}<PQH!=R2W@9(?ItYc`+>P%@uqY>Ky?lNAz5P`M1PtVckJkmBv4P6r7`0JQ^rA
zNAa>-e>7J2TyGhax?9P5gHv}NT<kkI_th$HgY}Qd3&jP?{ZE`Y6Jv@r1_0Z5RQ2u)
z?l2yz;GnRle+IQSf1!f_krY5w!Bf!fsWKmb$)AJXqDuKIY6)MSG4_Sv8sd*U<WSIZ
zyz?Tstldty5jUc=B&UMs;2M|;ZTIeH%sE@<=-t6Cj!w_6js~AEk1oI{ElQUX)@h#P
z#%0O*M#3Vy&ebi{_KZ>G+Sx8e+WV3}x1Ssa4`xd=MszrXf7IKmbVVP3P)733J89#c
z+1B^3x6fS4Z*)qjib9n}q;J^4$9})R_v#Hhv^|_}nkWLFX`OWe-1Qk_)5?fD_9Z`s
ze+#AMofgwC`EwX``W~p4B9nZWSzQ1&bq5XwmflU&VrS17`+LPRbd5>Xl*=4k#yjNo
zwA=6Pee+Fkf4BENp&L&G+eBE;Pkbsi8Tvum9efP;tU%Igj#UAcGIZc0<?u@$K4o7v
zKmdK&umj-HIc=Ze1a_#DioiIZF=ppxUUzVn8ovYNUI3!M5v9ZCppl0H!2<~O{4e?Q
zXDm9mY-+ZN>lHBlAhYZy^GT4cl1Z2{y)XF*!h?R-fB$apOa23)6Mw|`?3Zus;~&4|
zj6L#k?n_Q9)45i`>IEDfJHt-Yn0?v!2PD^pcI`lW04bqVh8qE{9NnDlf$F&f^KyWq
zf4AR1wL{^FgP#*lU3`kL<SSS5jJawEVA&oLuoiGjQu&u03I8NSagf<5bT%3}4*Ww0
zpZU7hfBI8?=S#S|Bi45mpEJV9g>4vMa5&p#Q<Ym?oCtPVChT}2dLm)Yx_}YH1jQ`p
z*$k=D)dSmm-M2rkvLB8|rz)*5!g7FOcQAz~KSn&;pA$8HkIBNnY`mDT7a4m|u@{DY
z`SNAsMQQ)bUi_%piy=Pw?Lv%1Dazj^yuxRnf3+yP2V;>Ncx=gUV3!VME>h%at;!k$
z5^-E>npB}xafa*F>UqZ2YSspOam-$vMGccGRQtn@W6brie-+Qt#_WsQIZxz?SL<gj
z*vY$tbJ#mEKt0RY=Zh1~zHID_UxuZ3z(_I6QeN~XW}1O(^bMC8A404;Y%4;0w@@G%
zf8p`>h?JvvSOc5^E=aa|KykY{YnBU<!uClWbmGiIJJFDT#GTr1;h1izOZRBq1FIc(
z&q_I#xt)|&7TR`&Z=bWnOmN&3<K5pX20tBtI=VVOJQ!S@og7_~LZCa|mD^0jtg)P)
z#|UFwgX{RDRMmLmBtIrp?agst<(B`5e}x9+TCqB3aeEFbGoigKC}A}d5OzcT3rPI(
zmTQ^RpTnbb%CFAs@Ymnlk^5X`?6=>ZG1mKhal(H8eZIt7nWyhQ0opJ9x~SAS*ZNkK
zDU`J@dI#xL=I-$`HuoiP2*Z4kt9&+9m1aSX<D8LGX^!p^Q5bf1esz5I>C#W0e^|0y
zph@Q-%YL+5dgJFUM52)QD%yag0mmX+xn{Y_aV9@wUQB}`sF~=Ed+b_{C`JL7zgsE?
z=f}FGI?qi$BZ1PI)SpVh&~(S8stT6m`{{51HFs3CkJ<7&EKT+uP)H|D_7gQ-n=GnR
z18#@pVYGkPsWoePqvyDCgLO}_e?}WTJPI_XRGH{bc~RK@uQliyTh_+5CO*98XN<Wq
zS}<O#*4OCKn#gG534jf|wzih;ZylXLGQ5W+5<ZJo*pD^g`kWo4X)M$_L3ACTo*!LY
zo_#vFI--MEL*9ZHh!eUsqPB2Ke&rk#dK9rdpRt3_S0B$Vj{on0UFgr4e>=uSpyIII
z%x_La`*V@HL(WK++5qq(m<!S9XP5T~4C}^}a#$Hb7H2czc8{rK`enoJj}VwOQe}<0
zKbjuD>osJMb6^RZS-c;;_{}!#=#%ZAtD`|B)87RX`OSXwF;ER-_Pm8|+Yqo9zeRsV
z^cznbQ)~%w9K;vD)gKVmf4L28F;U#{YQws?;dU~Tis1Dyr*s_WBd2=X1<CCB6|N?%
znz)1d#||u2nU9oHe}c-<Ug#NP(OS3^&I1W$r#9SFx{Wn>1UV_rO96E4VU3;TvHFNc
zz9Qp^m>}N9*5TRd`PrwVPgjR$pWYvT*rp&k2zZ2oi0|pXk4{B(e~daS?o=U##<MM6
zlo^G84Wi34fPPF<?I@y^5MXABf4c->g*;<q7;mV1czUkNOgl~T6YKs6kKgRzlL2<^
zpyc`W;L{s>)QvR%=W%z0NJawV*Uk!*DRmv)j%D&%z<IpJ50ZTDd*5<TKg3+$akjhn
zr(VC;@9n<%e)s#`e;vm}^yP)P5hWM{*Z;Or>u&3pdpk9yeZK1ZKX+gDdZ0%?f8Llv
z&!1xzKkP(S1DK*4&tzUyri(R<vP$HpJCu+Gcob)D`S0UT=bx|sO6jCP{|rASDd+{+
zDBMpU`0Ue5$UqW)Uhn?Ny*Zpz`Sk!&``DjXd-NPbE&Pjbf4`yUboO&Uf72?bH>YAc
zcw3DIuwgOw`t<Fy>uENSxr`F9KS>%IuZ*9bM4pWeB=x7L+>Q>enC!1L@A}R6KDN)f
z$J5bGb?dA-3<`o~c9-6GmpEfqq+Cz4$Q%VWjwDf21$!yjxp?LX=$^NQNX<5{%1Qt%
zudR9D@9^VX6e|0+477w7@~=-dM8Bx=dMNT_VwYX70vLafZPDWV0RZ_1viR}M_q*Ty
zX`6g4jGA&o83iIQhL+BSjw)o-JNp#5M@NqJSt_bwCX+|ti3r84A+4ftb3PTrY77yR
zK1>{p26lj5Y6ETcExSJLFc{?^1~4cMwj*@Pz#DoyT}uIcFqPBQv?Wd(3e>p&K3qkA
z0^AbF5n+ETC`!>C*$yMGQkOdjOd8;aV2R}ee69C)`!Eq5h{u!7#&-@SBzAyaWiHxN
zIE^^k5d)UIA9CDsam2sheb|U&KCk7Ia4|0rt#Z*ETX|t3ABgNeMGtTWMD;|JJ+@_%
zW)JoIdk^a&sANEuJY>Z#=k*bITGX3i@<qoa48}YZ{6?^0#`9}?4tn<%ZGBR^O(gB$
zdFWPZgb>-hwr8|WRvADAb#M-aDyoc5TH2nqM3z#X5lV4t6})<vu&@Fce@w)b<C;D=
z_{F6Wfxgfkaz??wP~9z)iM&Av5&U+bXL|p7nuQ1Ok$r@})k+SCK#K42kH)8sGVvo2
zFoaC`Wb);wYADKF7@>W7riGFwE{iz$;6AW*T@49~eA_$j`S^F3Bb^4Gd~oiI4kkTI
zXNM@$$r;I<xtY}Q36Wrie}KDN!Og@LvtN_mus_EyByT8O$RJ$KS*b5`ZFug|`5cnV
zkcR;YUy*fhMEOAMalaH=Rf%AF!ojs|IKxuTThetWWcukEk@Gy6^=y~q%D5D+n7xy2
zTu-y^hTVil^3G?51urvb+IM>3d9f3v%i(6T%X6O1j7(^N&}kaxDel|<Iy+=?%Ey8g
z&`T<l$;^)mY=oU)hZsRfwKI>{eQ^sY0I7^8*F%@@u>u_e^qrRuvH}+w8VQfEGEh0-
z*}y&k^VtAet>eA^T%|Z%WtTp(0vLbFQ(;>(6+?+hp0-ZqHmh=JbdUW4j-l}JZh!Ba
zQ_1$(E*ncM%P0>mi13SpQ|C@#d&ObT#<{nEj`KBeY4m>BcN+reMV8a4m=0XAefD~H
zkDj@tsC)fyzFWNuKAeB1_J8{M_}%dVJN*3afF-;Dwm+PIu6KycjTpmSO;&#i-DB@d
zo**6s#-yKrb{S^uTDQwd8C)VF?b*{A`*3ax#oTmiUKRw2SI^2(>ws}lMIErWdRq^D
zTMwJ<@&he1*-eUyZB1#I8K=Bzjq&dHr!d?}rmB?PSc<A-yKpyY)sRG$f^AJ^g(y+4
z+(tyLVlvadfQReza&m<Ukko(L|GM9&XJG>LQBf@^=J3fj5-Uz!C5?UK#Cr^HC8Y!<
z<sWc;{|`#?^$(ek)IUH)-$qx)0hHf|Qh|sTnMgvvP$nR(vf#5!QIgP9>gy;6YpF&u
zlX;~6|2HI=p_JiIx49nHT}MYgITBUOwyvj{z7?X_b~6{<^5Ev^h8BMkWtn58J<?zx
zdST?0XYBL;VIv{ZAy2N~usz%IZ~HD==rhJ{xio{JFt<YF1AtT0`>!b|?@$%9QjRBv
zZ6(`mufMljb3;1L6P%C0GkOCtG37FQ<No~rxr>QjqNe{JdvD&~HjX8V&foeJcyi5k
z(%01LCDEPCYsFSl?l^z8+mdUU>UuUrLK4ap!3Ib>s&w9GzdsxRBuJ53yd~8o_OB}z
zi5&-L$2k?|4c(jq<(IRgw}-%ep+1~NAs5=HeBYSvWT_)gRXW~OA>8X8ot>WiTvSZ9
zZ3@aJkBCaNAsN?X66sYISpq7)$!J00GvlHzhhF#TQ2yWUttNjYLAty+d86f}B-a7>
z(HKpiEOUG$H~joZ_(%JNypdl(3?Xkw;9T}A2=#@3*gYg1Qd(z*Lpa=N?F%2QnBOxI
zeWYTFBX<G~o#QbL#sdk^gUFZSCqi3bBzil0$GA%_i1F`+@>?GW2?t~vLKUIjow7qF
zqB99S^moF|%Oig(v<<`i8>2x|_#=)8r`V^z6YmE~?vz#Cd_Bh;`#$lL-#!l1B|rV*
z?=j)C%$tkYCvUMJ9(=kWcbrCMY!~cKoD=?z$Qett1#bs~lQ*pf!0ayuB(5MW_0>`T
zG{5;51bb(a8~JyHf@TFFGr>2_it^@lR2G_rO4+l^LAifcR@FCpQQ1-Y?Jt%8*gXG!
zPhyW|+SgRnA#$b`y{0%6b?p1j-Ov;OMX-}74jl<ywHcoJrG3cryT7{&|27(p{J*V6
zqx~Pv-GfGZZ@1Mv*!_=2YwzG-_dihMITj!m5$6BVcyM3&$^Ahd?Fblh=EW*W_;11@
z+jlhZ*j<0^$FqwMZ+oYQ-(U4ke?V{0XTT8`z3$=Qs(XHZb$M~pQGThPKTDa9aa8Mv
z#I2o>Nc5EIMrXSB^p{IPzK^0%pf6v<=g)8}>dTi-y$<=mWr25p2dAKV0%_Yjxn2*?
zP6xf81|76rUZ#6~{FI}c>+k(V_x$_6pFHV`j5&V}C;#+y-_J9{%YN_T>hPl19rUgS
zKcDwHXq#wdB?#KO*oRmBtNx%nxa?n@pPigs9iI+*7e91QIv^M|(n4>$haWD_mzC=M
zH0WKNc2B_H;k5g)cXfWzdw2X(2W{&Pdq4FKF9*G={@+ioPL4kw4?5`cXElM|C*sBt
z>HmMz2h-k{FV;+sk4}15gX53AvrDVSr6By+^NlmFsR6?~Jo^Y6e0<bF+p#-s{`M)v
zdJz5I`;WcT0RY>F-p?JhJ;ML<xA(z^-+rGQefSMGo9)*>-wr<B?X}<jt-1f>?VYZ8
zc-bGEeU#%leRp>CxBl5_2W^|t9FfpxvnhWGqT^u1lAU;W(d%9HyWM^|?suG!KE{1B
z;G^CVxIi4`${i6;afNB&FaKvl*Z<7VD)gV+2**q5KU_4R!Pw$6wQ;zF4OmA1Tdh3(
zKWMc#^#55NbsM|bo5RQq?~YFfy^E~OP#`M&rBYJA-@EwX_^@XhfZ)riVA0gCk1&6k
zveXgeY&0?+B5Zu6u6e*igAp@+q$=2&xPl;k2!-k=bS|aDzaF0+o?IUF&;pkgyV#<|
zu*+$23v%w|i!JEtkM9_>VB#wYnCf962_oW?DT(;3SlU$2U-U=tf}3k){fvhNE2o~_
zcJoy->xffVT*aKG-|M%{`c!>LfiizrMi<jDujK;)XY-|G85M5Q0&k<ZywZwGuzQ$R
zd@(m(>vRl!QM)Caj%J0Qw;(*d<j@?Cj8sZ&JS4v99edstys%rxVTjW0H7ykug%?*O
zxJ8~}E*yceaHK@Bux4UmRR227y@OZn7CG4PBhUHVhyE)^0m%Vm&meFC1w4Pi68hiV
z+s)DccB8r1+|d8$cnWrqj+N}sbwDQ3sUUru@rED)H?&OF3xZhWhe^?zE(v$CRh)s4
z1d!hkEP1LFVu8Bsy4!9ZR1_}v!;Z!lA!iYDnJ>%>gvLB{(_csms}R1jgQ}V=c4Sl4
zqzGtdmsWVCDyRg;rg-F9HPwHW-YadewQ9fKZ#1j90e27|xqG`UNm+GtbEXzA$&jk&
zG$GiJCdvxaL7%_C%ilvhCPM!tpWw>1S^JQK12c(}MM-C5hV<&ytJnHt;vUdJ)f`<^
zgVw>#JK80Vx<s{W4HW%ik8(#3Pto;|h6J3ulSKo9mabb0I_MX<x4(ZTU#x{ezof6z
z`J!L+;J`CgKAP}8QtRnb?x1{6l6Dt&qhREI)A-s)eBpBs{Ga?`>Si><bnHxVn4tno
z^}l<K9R6>%Ta69=e~!oO;gx2?t~ha7;8LG(*uxI`SIYtT{y{|=>7d&K2(+*VZwHu<
zNo1~rc2E`H358=0*))G-0SO{y_)gE2N{w;43`fc5=&fB0gsSx8$x-**M)JqPxKDPF
z3CEIr)2^U)d8Fl&4ysBj<$E}+7JM%0{d7!&Pj+)lCu9tXhiawa7VAZ_+Syft(9rfY
za+Ot_n)}v%&v6jlxAMyM<c{<)?k{XhM2wSr4~6;nuG@Df#EXCLU;i>3bL`!}x>#c+
z=T{9}D8S-h*2rorFvTm@|JrzJ^E}P73jGK5$pbXN_t5|D?QZnH&+=^azZ?DUM*q9f
z|8DfZf6nKA^nX1K@ICauyZamc@3TA`{qIKqyV3t{^uKH2|1~wh%k{szdHwJH#{cJe
zo=4aJvcL(s!83mw9q>j6ywL$~bikYETYXlc{~*slzzKM5{cpR`+{k~=^KA6L8~yJ_
z|GUxuZuGx@&gb6re+?DzGX3vC;~+2pHya!OuV;BS`rki-{#UM#Jtu2Ef=)x9h-e*B
z*xB7RtM#YSESqJV*Zlrzb<Fq0|LdrL*Vq5HTATYH&+~t5^uHVZ??(T-(f@ArzkklB
zfd1dmz*`*9Y0YN|{ckr9_OtZAxx0U`zoGxn@yN~YAdL+wIHU=g2Qc{L+`JMs%IddG
z?1vM)TM2+#%8!+bj#94qeH>DiH??cTr6lc${q>yjsDt)*ciR<Y0)*?_4~M76DXyvn
z%u}3y1tEV2apsc_!~o{ZcS0Wr3ZX%OUo{{iqPncqxoy^3uWQY}iV1G*?RRj)bz86S
zsD0p$+OLO==4;X#?(V*F_jbJ|ZjTOLz4l1Ewb$NvhkJO>8}2vp?(6+lo9wj?n!8F<
zdJ_)`_NEF!p5w@!q+*E!^0Io=f*uDn$^`sOzRQ0BUXU>rk@{e>53&!RM7>WD$6apA
z38to_ly@CerNLM(vcn1XW^W=Mld2K4IF@VtQKc2rjW}ueWVHdWjKX-rM3j4_#NK2Z
ztI0mji@bxw^Wyf^{$@K!-#tbT&2}P|rd?PsA7vIsLy?(A`tmXQc-?5U=K8Q+K1v_W
z*Uf+VKGK(u(nq^74^!65$LM2kw>`gB*2{bJVPO{)&HP!>%2)3FD|i33so&-);Qw?8
zch3qICwe#H{w(1V{%>!u+05PlYV5Y!8~*P(o-IUzTgq85B|(HZ84(Uq(+PzHmTZKo
zEI8+6T18cXv8bZz6!RMro%`4&)yh`kYY2ax56LcvR{Uia__K<NB94&@`85bf5uZVh
z4W<%s_`b>}IMK<QCR8AH7ofWd;pCR^9YiCO+iysa8eGMiL`RRPvZX&Fqn(lj;ifIe
zDluCXRmqL~fp4I&tYjA@H=?qItXbI~@r{52VWRkwzbZ+h53qaVz%#!k$H#(nSs;H+
z#@&PjndPS<)1RzwI*{Mgh-jqqi0Wh-sU;3^;_DoUMt57W#?wJnV{2_Rn$=2XXdP6o
zRw|MKy%=H_5(-MjQBeXw)|`Y)$ev~$RQ+d+XHqN}avZq7*JVA253%cnvZf-o5gvC?
z^|n!K?$%nm@qUCO@-bDm>n-n~NEv^;%lhMrW1iKtI079)_<TpJ?h9UJhS91ufeomz
zi1>%bR<h0*WW{>McOh#yi#Q$HT{dd3_iBx5MZ3kkrO~1lRryfl+*I*;YJj&JZNXAX
zirgpZ6mS^U><IkzkVzJY1|yCu5%Y=8Isk?QJQ~q}Ml&!qRa_!P1;{`!zZid2`PI=0
z3aZxk!;2$%nvB?CnT2v{&x(>;?7<>bEgWwZq?!@Ovc)?xoG^By%Fnm3QX4L&!EaWj
zdp4sJ7~+sBgWdhxs%W7t(HrMh+sJf*{0_^lvwytB?hOe%ZAw#dd=q%hz*H8hQlK)!
z^2jYDCP`j6x(jEh`Y?7k32lG3MtGNxN5@1&fF}|;vlrZ2La<T|9QEE_zE1>KU?w`K
z3Q|36ijv@cqL&SF!1Mzeh9v3+0gDWzCbP@f5fQ>xp`@FtE>s(m2t)2DmFr1P9p4GZ
zXV`Ow*vElO;IQgM01owh;zTOmZ?%Kk`-!-+Zlikr93x>=JC-xox{ZHDvyfCfDDa1s
zaTuRz-Yf$$Mo&^5hjGHaRn?MAQynho8OV6n(K!?0wFk)$Qj2dMpb)w>YM|;~d#|>)
zTWhqd%7hs)=HDn>HecBoQ94<qkQz=#vG2<dXSalN>g5eDD%HAbTfWN(^;9WUbP_0|
z*HBPr8gX1sBnj{+hqHe<b40{rH;TELnHFw_v6v0nC;d`q4Nd{-7fbb06_e_Y{o8S~
zzo$1I<;V$9eMqAKPifr@r|#hhqyP24kUNn~jB|mSjYhL0|C1E9+A>z&Tjs}8@{z?s
zWC6LEt8CNiekzNd<7m=JnuL5ex2opJQTH6eZTC)(I;c7|1}uMge|GV{dwSf54B8!3
z&1ZeFN*<kk>>i(5b}fnEtnVjh@2^gJKlDyO>V5^llA$yRh0N;)5$$H*-ithh5<I1-
zpZFKd!7%wmMMQ(~p^xb_L0cHomV9IYc^3qGKXMw8v%uBrGeLisUz+c!{v9!n$K=q*
zpii(EC`W&C<)?q@A61ksm;WqIw1yud{w<OJn!Ee$Mqd8g*#DpD$qG&x(Jqy3@QqlH
z<-8jfk}Noz-hyuk;ooCUeq{Vc(!*m&^cl?#eM*Ap*z2I`cb~ieb9vFb`tj`I!^v6q
z=<4{WcRDy8{CstIaxDKk`eLz<m)wUsKla{!e|Gla>hgc$<V$tK^ZtQ(Uc>d|*+^w}
zNmC}Q$XjOB%SN*tMPXtMaWfWiH4cXp>^n5Hpg}&dfV9zfn0v%?CIoApgI&gFV_9a3
zBPR|;#0j2u(DrwnOj$(0(GWT4JDt?-ih9UFzkCNmwfuPX=_=_!{`IRW40R!O=P%z$
zUiJ#S{C<B$Rnt%veJ3U3SfKBQ%$r?7%E~K9$yxnQPWK8lKZIA!Z%Cer$0U$-&2W4Y
zjH5~VTlSR<&rAoBlm3dnOMb(o(w~X1yJ>Cy3$&ZQS3}>f6iEXn3CVy<X2U&)%%&Zc
zWNVSYu!tL%C@9B|Q{y|7Vj#diZ@VYm(?dw$p)!A!e5tP9g%=2A&vO)CSN-mDlJf5G
z<g!2LU0j`ZKlXH+IUmI$u06LnC3CmEKILeH%W+6@fI43+1YW$_Y_#@vEpv)4aS{7g
zzeR&Xh{rz3i~~|!3Icku-(nFV@(F`Gt17yKLZ4vy-NRvoq6wLzh@lyaISL5zgw>RT
zuup&F08if^pZ=t5ukSGRiDwl8?@8W4u4I{C0Lr=22<R%sC^~WQm5)Vq#fgN3D-i?Z
zIEsDr<_&7RME{K%nTAJ<cTiJg-f3fP=AGQ6Tf%|=H3={?1xmI|K3<yMu7ifyLwf8c
z1G9r*O6F%oM1)53Yk-i5r&G*l9TW$)($#;*P$g*<^5%m&7%-`6S1k#==S0L)Qoap@
zM|1>cgx;r+Cbxa;y?B9d$K_iggnvb3RfQF<bVAFQXgEVJCQL*xk%Q!y7cXC;|3dqX
z-B*pTyfH%f$W15yLa6k}NKFIL0QqutqX`KRMt6kVl<f{D0l8E4AR%+wsM?fUMm>Mz
zvAaMnK<Oq782gBW*<Pa|3YNdwXrRBK7qZhAsB{}lPTbE57r*)ct9!NoUHyVyqB_)E
zTJa^4M`o{JXQpfIj7}1JuZ<ZnhNd`}p}n7e5@l=tk#T~e2@cTSe?nqj-%m3Fa}vco
zAf9YtN2LXq-zX<SVI>?zl4Z60JxYIeWA|})WA_id8@mtQjoqcY@nFT&y%>5L&}eYd
z?-Q33&0XeHwaThttN*J7YTPRJLmCj!Dhc6NZ5?g3U2E2Mzot$^iAo;0ebabat$4!@
zT+sD^RHHkra&;%kw-E*v)(|UB9u#)TAXi|8to?)S1DPS?=ZfQq^<xp1$q#>WweYMf
zerEA|2ECnke|~@VMQN=hb7nij>Irtk^p28`11*l8pL9>JwA88gO*!UXa@s-Fx`>Af
z%!~SWpZk|@`-d0D=Y!)js8;8;Bd;v+v3uHm-#db2a~Hk-+2zGy@9O=<+2y%ffx3~)
zMg1dnITLIY)%whjRTnr^segZUe|BpYFNwqOI1qF^N%f02WTv>=^Yg3Y)Bf@M?+5*>
z551q&qQF9HH$ihB3{D*MM+BlH*z5_uB?@i$#Di0V<grlsu3a__<4A$x1dDU|!4}4}
zPqG9z1L9&rdDK?`_}%A0|NG;M!BzkGe|pJ+t0IG0m?<*&`Mmc<Ypj1c4sOIb;imxM
z-+jL5o_^?GolB59JL;+1S6pRG7Rh(@dh|~(SOAT+?>?WL9fJ1sOAYKQ5-9)xrRq^X
z&B3^cch72K(uACP5<YcFAaY0J<oK|6+Ba)44&$!t5@YRyqVLZyueyhay_4RB8fLXX
zstuWlB&|ryzV;~3GarBL5#P{}$d}G>{7N^iu9NA!#<Er_J-CZoh{&g?PcU~U`C^0g
zOQr%PoOpeOp{yH(U{@H>)aapBK?=$dIiljm0Ali4qtkpHt)0k{HpsBA&_VB_f7~Bj
z4UT&kDk0^U?1hp93&L#~kBXa`D`*~O%%cne3SH-EWJuinyDWchR!09EdQNJ{t|1}!
znln5)?tl1(r<YW5nQ!2rVBeEZfHz=xS3{o-i%WIo_v~mS^-@Ncs!1R2dsljV_3Sib
zL6o}DJLCj(nph&f`~@XT9d&A`;NjWH5hS|p9-n5_0m+hJF<>_&NQ?Ko{j0&*hu&$v
zq@Iim;_nBI@B4p)vy1Ngp2QMom!|`b^2_TbL(5mxW2<;WxYl$j)S{Qs_oKI0-J_4k
zr;ytfdJM4;cZ_@4&*$BK|HrcnNnyR=k0#M?LCX)v)m|p!Y6oq9uFBz7vxI&p!Or@_
z#o5v2p_#w@8V`LcCWKclbD8|0jjC3AKS*>TvGPvBM_qpzj^Ju6S%NF-Rqw}06fqC7
zALDs-MW&egRSh?%gYMzrs`s&bd;+B`KH~mESc8|DCcKPTotKfbkw?aj-cc?9G_&)0
zcYM(w%oRStMP*OAcF~mcsLrz<$@hV>)93k)FWZ#@x?jMLm(u*_vj41R|07Rm|7*1m
z_U8OQTbqCQPtWuGTl#<IM!0bUt!$yg@4Kh(dpUp5>f8s*8}uoiL7&|Tb1n1rLi_b9
zE}W+2`kmodQV%VAISy*ATFYtG#@K1+N?7i8i!J6`hyg{$eg|Rfh0LSgkOrQFgj6Hu
ztqo@QMv7^<7PZc3jTJ};%*`wDkVRP6X1@ehe<Od9h_HK8w`)47sx&jgX06$-wX0vt
z6`<6;bIELUBUyE!HJL|qGPv&m({>(zj2jPzjR(WOiw8rbf~+uZdxOeJ3hUDDx9S&d
zxia6cfxsU+Y6VPN^uBJ@*bf6IgcYuK(D#GEdFveDhFd1`^_mp!gn%TeTtrCZjIe9l
z#MXb@0?veRerG|(1BC`-M<bAGPQ$w9Xoc^D5{@K(+udzfAJC3O<yCcW2yNU`Hts1K
z_mqu$%Emoq<DRl{Pg&bNW$_)ahx)FR$-?=|O4)m+`?Z7Ty^&R<J<zwbIvFK_q3)YY
zTYs!eThHkZ^%ec0#$oGme4rl9*C|o*X54?CV6*Rp?dfC{L@2K+2CxN%Vd!I*Sng1n
zYQS}Su^Sz#1x$GHc<5921DPce#+nrs#Ye04J}M3NGL_OY9ivu+=QK)r{ILbwGQ~3#
z3!?c_?ZTw?YC@3FMaqp+I|Q#)VNP7efyLj-R%F^GLE(6bKrA*`Q@Z*XN8}FA5DtIo
zj?ucJYQO@b1~)i6I_sdWkVGY5cRQ<$Ei<ki33;;Mh)Ld9QNb<Ltf3L*z(gy)T2&J9
zP+MGvGd&!z$w1I<CF3N3h_Fz#puq|8r^pG+3T9e`7Dc_l#HhbyG-t?hl;u&~85hYW
zxj0aUDLGfL4KXfB39_nx(v^%g1d4x%kSR5|{x+gMF$I#b*dJA&5WJiU5aGaw?M_ZP
zv*<Y87@x5l<=sXjkt~A+D9OUvprXzw$}Rv7yo?Pj86()dfJrx>G5igsavJAMf4cp{
zRMnVlona`HC(F@k2YK!r)7FmXzHymiwuUtD<YzZ{gS{yYc1p_0lblk0b%=k(aR7R(
z53l-mxB?-GPbMa80h&W7v{?-ihw?WK#>Z0#l&%J+`GX86kqY!n@P@9P>J&<l1ww+k
zIJ##qP<Lq`TS#)tqN7vWP|?d#t1ZQ+TQ-oga@Gj9R>Pl4O`4Q19paed5f1Rz>D*^G
z^y~DT4U+%7{Yw@c&Yh-<a~*$ka!U+@KL7PA`R(R7f{Yt)bx|4Z$6K9eN3veL&4L2P
zg;#$vWEBVC8kVQhlI|Nf1SkO2v=iBK&)pPvWd@PD=@v|3&OtYAB!g4j*uyD)$)TGy
z*&*4Mtu!q~abPkFJj}fXT`P*5x?cbl(~G%uBw?JD;}G@*yZ5}p*uj6dpZ1!qm1d{4
z(>n6%>>}xEfXDa5>-hjp3;W+VT%*TyxX$4Y^%x)JMIOoXh7B?lkM5K_4qNHG)^oJ}
zBh73b7i-Zj{@QP^;8*Pw`&AdN)i8E%NR&ve3*C_yI}}^ZTV%m{oA(#4eg;40a>q}D
z?_)u}SLRzI@!R?orDA`%kC#!YUrnh)X}SNW@|vsNv_)+k#t#VyzbyXe?p`kbOY`91
zU~l99`5aH>-_ik8k9aNLPgG@c#*g3wdeat_T#QC}q!-6wEHeRU1o1Rc-nQ-==Ph}8
zJFn?ZZmYn>m3PPQE%dCz0oHFZulsaZ=QwaDgx7D{q7KqfokV|bJ@IMsbQ-E!#HM~N
znuh+O-uh>UA9{m=-gq2957~D0pEbeUn?=oDT%Hb&KlZK;PrCj7eCxq2^(bCAuHN9P
z+rK*Mz3X0{3^LrbTugNyd>@5Od-GC(cnnt49RxsmM+H&N!m`XAjV5qLs=Aa#pVerp
z^TSLdFqTiW*B^g$F9ug1&yITY4Jh@J_n_cO+p^F$TI@2pzQ0|$Hyz{@?vquW=_X7>
zrz)vM?yc=zH-D1yE?x6NqP`Q<Us`Z=H=2yTyri|P*s<Kb@4>dluWrFw(SY^D#-Zj%
zs(xinL*UiuggBZQ3sIrvClz$t!V%zdRH({Xa$)+Xet~~#r9Z{K|Ni{4SRrA%m0E!F
zU?I<ZyU(TCMM96JACeok*VeA^2trS_sO@{*pKZRU-{x%A5#``oZ?(9D-1N@3HO0IH
zICtm}S}X`kZs%+B=}+~nB>z1y8Q9YNU%PYiUvne>J<qd||Gp9VZ*8V`!|`r7-ai({
z`xq?m7W#jg#o(HOuraow8#1e*bLFR^ulO5(fxp_T2rc9-bQ?~08E^Oy9s1X%Z<}ZF
zvz-5X_0;@dYj5u$&;PZW8~*QEo(=!^`1~KV^Yu8u6>ktL9tf!%lpDV38{?Z+<(6J;
zxTPX)>G2t(e^Yj7IsJclHuxp<e|K-cnWz7|?bd&W{y)dFA^(rB{!zK{pP2YZu6EyV
zwqLzYoTU<?EZ-`WwcBnUSX5D4S?eq!ei}NdBTK3Bd%Nvc(q38%h>XK=aMN&%@<$d`
zm0mX*t5%Xlb*1L(=BkyNuXPIV*X>4Q)k^I~qgucxE!S?{S8o;(KBWN^e$TN>&IzZ?
z>#KiD;T?S?Kc_m2luhN7c|;DXsyT{?<1Qa3S~0CnbJUeu2PYZML134osjjDWD++~U
zpo|mj%`)7c4ZOOrqa#Mkh8)g(k_#F!#gY$6$)+JN9aQc8Gsb@Ug^WhTjbIJ>?u2-;
zpZF;_$;b3tQV;qs>t1iV6Z$wH1%rSwsLg-&rc_AI;YSrOX`v=E#L>KKY(9|0LXT}J
zP>)?u<YZ2@ikqfmHbHQWF|qGytBjn@S~JPWiLw#0o;3I3SLfDOW!HUrO9CRqIcLKX
zhFyX;T~bDek6KVd-DjoPKO#P!C1<>?4tbb8`Azj!2h>SlD}<necMK++hzavO^L~GX
zsULG<y>B-vk8!g!6(4Be8Tp~u!{Cp>?mv@q)Lf8Q;#Is*2Kd?xU+yWtoN0S<)eq&n
z`-%Ze`2Xf!>mVQhb$@pg|Mgj(TsREOBRaxvG>M0Bn2hw_4Y4~RPOH|KFBEd3FA3XT
zhPgt5jsu7|{x5~vXfP%`<Zw@=*=T<?4&Sv88}0Vd?z{Hh+itIU*nHh<wp#m*{pR8R
z{@&5MW?T6r#@z4d*k|<&jKWahj=6I~W?A@^Z#WIcPOH&sI*r#(tKqELYi%5kD>$Ud
zwe{O(1&5*a6M_|1GSNf2=zHQ%wG;za=&aFHCQPCeGl?;UMRM6Rd*(7#s4IV)HB~si
ztEp<SAY8IKB#0KbQ1|xQZe#emb<h~Sa=q6L?{(wV?ta7Df4$de?Z4h7%~$PLqrFkx
zXJZEcal{n+ek}~fl^Zg<W84#+ij$p+gMe-E$(U6fxcNZT&4-GEB40od*<`7<|N9MU
z)>^Gv!)a_+rkJLYLmULr$UA?T)*Y+JU&oA%eF8Djg;q}~YF1XGvKUw@^R+7~d^rqf
zt=+lJ1H;!o)+;|N;(x6Zx*q{pjQ{rz+KpBY|2LbB4gP<YXA2!ErYnhqkV96rN*WOX
zqo2DUPjvLph<Fe*K^8b7u8%oEx0qAOC4&lSNFbvFgs3)Q@ggz}A&h@pt&)lxTj&B}
zcLpxpC1n9YjH4;z1PO>0W10hv62vhMW8a4W#}Equ+TdiAp7pFO=rLE+BP?!&zE2Qy
z;)Kj|l3M_E*`NchIU%RFI3kV-M^iVKvCd=PSHWwP21oX4+~}*iu53mPx~d|toIs2!
zh=&%2{!B-!OVUKCv1@;Ae83>Y2#(Yp0FMzN-y!UII@Xm5fss_#%%z9CS%9b1#lAm7
z!<i0(Ve}rN2Hm`4Tz(K%{hjpow;Y-0=}3FfnT{}FHZ2LRVS$IaKy4aS`$@(%DV_~<
z#k$cf46K&AhaY=~6YTpW7?VEpZwdc?FgR~Ck5yT7Ek3iad4hirJIf99)Nx21c(sMy
zDXHa4-!^M2^(u$2Hqjoi6)mtI68B-_D;U~*`!1VKS)d?Di?>@SG7)M!$RoE3$j)>G
za1?UNIE`iqveMhfW~BB$yLlml2sWlx-rm87*e&sx-9p{*n3J(w8!a(jFn#bpB!|yP
zbaDt>2S!C)maBisGr#b>TB`=)v4i7i62O0dugj6ux2#q{1*EPyV>2*&T<N`~5XACW
z&R56U&5HM_iYykS8-`szWjw9Eh5AH=;JGDy$b?*MHp-$*bb*60k*^!bLHp{$&ORCv
z6I5r)M5OBzc{F`CJ|VZn?;yBc>w~?u=c`z}#*}B&HY$I%OcIVKv%9J$BDyL9yrT4d
zmPQCzHl+vFm%Sj;De_{a<5M^&V1c9Cb8+BN4+1+v7@9jwBZNm0;fM`EpBao1)-9<z
zVnRa|Arkv24kGG9yt`=_X>C7tAr_upoQ)7hKJm~nj&x&j0BsP@OilPKswEUjX$R>o
z@fFIO;!l5c8c%aG$&L&H3Jr-A@WW7cMn;m<&`5>Lhu~IVxWECJ1k%~p(sl$nip`~o
z{f4kt5ds0<Vjm4jbVo>F<}D0f#xAUZQjn@Jr2)Bvshg$H&B@7H<C7y6P>Kd)y$I7-
z$RZ|aCk`a-B>#-DuW5xn=44&WOrYl@f<2!Gq=SEUvoo<)ksue6@C##m0T9T|5THPA
ztDsN~2cF#z_RS8PX{N)7_)ICwJE*xQDwWK&F&)TE2lzN-F-VP-N_y+j;6~7;Uoc<}
zE<?FziZ`&|bTsCk;!pjUkBQRD>o=DHzQxp6aS@u8O31t;DtHVC_HFEqRph#&7;94+
zbWML<h~<=R4!};E)g<&0P}|`E;6)<i7o;|>q2^1K(}5$5Lc(1VM0iXTcczQ9_Wtvw
z2__Zj7Biho?kU?h6|%z}bVm}D95Hll*Xp3=_1rv^Dsro6Wwy{En@%wjB*Yw85TA-j
z?(m4<DCPu>RU}w>0#k#XUOA+os<LHqDH4A**DAX9ds$gILMUJ~M>~k8LuHwC4IS5=
zm~*Y|1RlZyZHJsm>Oq6?Ho_5NflDe={OOPdZp=9eqJ$d|@+4O(iSpi7+OL{6qGEh5
z<XChZIGhAF1VW&hRTJt^x2)f$JudC3GDj0&<S4>`UR7)YiE;#q6wa0C!f@z{Av}K`
zp@3=FG9Z#zU$-GhkQUw*-q*~8stg7R7YCTn62hoZfVN7gI?N0a2QyhmDX+EJLQHUL
zZ@<$Zjf0lwd0umLFnTp|U%hU;#w{1`kM{S-!M?jUYIv=YI~u+klHG&X?LAD|yL$)Z
z)o|#NVN0H0$$6XD`NyME7M*h<NDzNX@L5DTBL<pYf{sr6Y5o&8&C`cS<ko<|YJTEa
zh?wxoR?0-z(A$|gS84$Tp5{X4W%w@1+{6A5b(@z4h>FUVT3m(K)5@@l0T2QR_Bh3n
z=JO5jujxvva;l~2eAEz6E$XjNRHhFwctTiO1v?`e5M^>#(^2L`kwAe)&su-Bt0+{&
zB8AnYfEG>2OqGsBe%;x~jx1=&mlNWLqu5s>p6<d#mPTgnu#`iUV$CBV2|N<GGxQ<}
zVfeBVWGAZ!uhSPQ>@OK?I-+t$69Nbnn@J+93R*ZzuX9m^kb$0=nN+?J6&uMqZEB4m
zCzJ}?NCmXEgRp9d3N$7GQ7C^k7KUXs#=ArsgC?y=p_UYYJ&&3{Q~hot;IW)^xGhjW
zvqmb~oNf2k^tCI&59ZZ9Kh7Ky<<y~@LAsq<>9A61c8wAFwjhMfP_hMeDon+#TLYHM
zSUlzs^N6~!kAePFwpMKUM+N0npplOu(~_oaJBiZ59G2{%<z&ikjUIo)NMu^>OHhi!
z5I&Jmr`olo!?U|Up6pS=eQcpijmi@BhE574Qn@cjX7#Dl2j9>LQ%lm*Z3%v{QYa9E
z8a;GNF-%#=HoAdaRYM~rRDYn7^U+MH(8mno8h`@GQY0qYqj$2k9I>zm0^UUO)JS|(
zs~DT)7UZ!`_44TqYdU{w#JrG={cwVtP*r)$rlBzp_0j>zLkXXa$28DArQ)6x(%_BK
zgLNQgma34E+YYU9X5t;B(w7=YBKvmFkN<w&@1WO>Mq~cd+n7s|nS4}?(Ag+uWqxG*
z2Aq;wx=4nXQUkG0p$$@T6vojzn2?c`RdMnuB%Dqq8){eR({X=5gYkt5cAl<cdFA&i
z<Zbu-xUZZ|GbJV7B)m^ODRTR>%r~D#glBt?hrfYWh*c^U_8HLwdy55i4_P231sWt%
ztE9{dP)6unot2~0exr%{#2=x<32|?rC|RQ6ac$VCV|PmGULYFH`j$RePLOuvj2L&|
zvm=N<av(od5kG$|BFL)%+JgxbifYJ}ODU)ub3t!4an-ZPa2lG3{WB(fR)J10OeJgP
zhAVi-luprZ0W`AyETQAYoyw)VC0wmO2$)+4Vo@fXr#jKdh4Hx9G^f^EE(C&w0Ahe|
z2=ZAVyZ2(yOuE>e$fiQV<*`edp2Fdj&-5&iz?I<5Zc2ZWbToM+C1Hi&z^y{7(Xu+v
z6qgRE<bMI3G9(CaQYe+XR69HlbaX`cb5&uY^IzJo^xw#FByUtn-NKCi`4X1VP@#yK
z$ij>xj|wG<@*#~l<}+I%yaPL?^V#eqW#x*RQ$*8a1d;%k$XP4B9c!54&0lsLi-?&7
z2u@N*jk|vr+`_O^rFsACWAEyR?ggA+9cE@*u&EYzx24E$Omc<=F|8XZ-VNgpYBr`u
zgeOxFpW3aDRBrG&^N>;Z0kT)P`eDWbp&Nu(<Wp3ym^Zoy5Fg{9D^6K(!B~{K6%p5E
z)9{=#N&J*%Pb)1{C?9Q&QRqPTH#Y&T*OesEC})3Ch?MQKfCN#R8tw@uoP6ug&m4G)
zb53umPsXGtT<quKow_*0L+aCrnn2DTXWF0DLEV!Rz17&0=T)xYJL(ffGcD%3V2LXg
z<>;eMNF|e#0p8r7O}1~=Y+14Yx;aMqAzhp^Ps)Md+LmiIWS(US$aJzw%bJ<3Y#9+{
z#bJLh;ne5bEg7T~uQf3gJCc}4LC+38jCF<porn}{a8T=a7C?-w%2p~`du)nnAff+)
z#SuY!?Hc+~vWhC)y|PvY2ER#qNdgf|a$4ES;c^`4n>tDtr$Y5BMgR?d8km6kNb;e+
z4=#Mb`ktN*dL6|?Cuv<Q%SW@;Y{+J=55a#xcFw$`)BbfvH<swa(#dJDU9R&T<2N-0
z3rB%4s*UO?<OndYZ64F2e}>m{P!$|TYt3r<=2Z>;SFOw?#m(XcCOVQB#-9@J^!|iS
z6GW`_9ZDN=YRjRSFCT!-F8Tsl;uYtS4X{1ui>Ux>YTy1Z3OJB7avX>V2QFC16gq!J
znJkJO^m@0^Qk7H+79E2?yLBr4y;AH0a|#*g2FiJ}gWCFaMjk~40y9Dr7BFs3L^@Ow
zcp;-fl(HY^oQ0BvlH}wl%1%Vis-8-Cpz;|E&acid&VKqibB`mbQP~2de-)}&!c|BN
zTCc00uNto!Rb4`4iio)~0W$@ft%HABqt>W3cM{ig;G}He2cO(%25Boy0^<Jz?9oaF
zzeN9G6?1S%>$lBX>!7}69D$wNrsFbB^raGg+O=e8+=4aWOIYvb-X&u@0@R=#%xN$_
z9tSLW-TOq`SQ+BBjB}`cat4G?h4sxrQyjUI-ltHW8Rc2GmHL%xzxfekwIP4z;8?_&
zPwXPLpZal-{h|cuPWGjvjY+vnC307cQr_B~LF&x^R6CU37g)4MnOg;0OV=jvyuXz$
zNXIOImOJM!4dk!ilrK)md^Vo-L&<(vqT|yomFiGHhi=m0;)N?2q*=x({?xxAcZsSZ
zsR2Hi=11<zge0`O_}zpAmw|u45fvk<Og?5MyTR-Z&x~j;QCmtv3{b)W&}h$sR7eq(
z>5?XxI^$2bs7k`$+8Uoq`HJYxKC$lwB%DZ*dMsgWjhLO~&uW#e$`(3O0uzX#iROPu
zQn}WuGy#=$-ZVcY?gR%^Oe<UHZbIFOk=0cj6u5lyiAECclyN!^OuT=6Wih6a$TthD
zzGPTxb8|M<Tmc+bWNsA*P_GTKFh)5ha!v*5>ByMtQg??w0k|x1nM}9N{&VQFVf|HO
zf7os`4;t=%6SrTDi0AF?y6$V@kzLo@ZyoI6CidFHx;s@z2Yb^x4#RpJQNJ!ErFBE*
z!B0^ev#pcXZqqqw?e2e7=I(&ZaSMf4H{g;+(Z!9qYa4r&vRfPTcQ#&CAjX0mfaaA?
zXmBGC4LqGI)0iM=pfrl0N*%H|O6@L*Euyl8RL*qcRu?jFTND%j9d!<k1wqV$2!E15
zeFVCQ%9dpBZbYpzKe|LkVkM%_o8Jr8rBN|Ti6z=--K<hYCrN*o9;A#0`^3Z5(cmYy
zo<cf%O=c^jl-3hns*zSTl}=jUL(3|pEw>C%0ctnFbSX86_z<f=o@BY!Mq6SWEsg{9
z{zESjue7)!b}TezNda;uM!_ei4EqCHtDB3kf0M|BT6B@Dkx(i_7NFhTHta*Q(b{X&
zkVt{TB<7TYqZ@y7qOY6Day#0~i18aFkAcR+L-q-jq4HHgh-Vy$JP(a1CwJKQjXy~&
zxn(_nm7VsqH@JFxe0p@%?_K<GeAvtAAV8r)jdoQj)&=^nW~0%lB@0ijV~FCwWm9?F
zhzIinqn<?bW)+POroPAQ%8f!}j=dO1#wQ1yff8Vm(=315dK6+2Ap<G3vPG*@>@eV3
z{wQ;aDRhb{a*HW-i~+aR0_EDgZpr{?s+c-w-Xpl|&MT!5D$v7~XyS@>ab?;#a2qUg
z1S)a`dSqvy72ScJ$|0!OC8)$H2-0J$p|_lejZ|s*G!U{#ak+}>vPgMpt1nXp<_apz
zG9~8v)_i}nkeTQ|3$>K@@8g{5yq864%KJBKG>Hnk73(PP-}=W`eh<cl#1)`<L4ijc
z#}C-2-r|wmE-X?wmiyVU%$ST33+UV<nXwGxIA_DMgButt);W$QuwE)hr#_>~m#mN^
zGO+(99$Z<anC{v(RgLKQ&3}bBnm7^Dza81te;a?4^>9x{*-nnFop)tKC~wiq+qCAa
zT19p(gtk)Y4#-P#r(N>KLt^Dn-CF8t?@IP0j0EHn@)`C-J!I-Xj!#F#ow+`#ZzY)1
zfi6_z#W(H?ZmyT#nBQM?W4`Qee9=w%qI>;ojbyKAAbV?$qcA&msb)PF)u579ih=H8
zk-C3J7g)n|^J5l?=d4QiYAQwC1ty@<L{=-I4-NlIJ!;E*YFG2BHJue*v{=`v_JMA-
z1&+0Axz;{~bFDfRrT(?awp$*S5Am@qylu3)pXHNyTIPH$AKTlq*xz!k!>D1nto59&
z>Rzs#t2td}8eiG%5>{Zv)*qk)c~lL^W9WZB9$WkIsJag$Q0LVQ_SvSRq8)(iRhTO+
zr5!8_O_`^(Z2ID_vZugCf!aGj-~gmhvuAIG*(&rx#O?%Pfx18TQSU?lrE-x|H&GQo
zcY2(ba<NZc_A*t^XF@|IJq>5jo(ty?xac?l1+C)jWDk-n+D6Cc=<xXH0=6}Y9c6zO
zK!J&DLC#k1v05?;_nRlFzzqwY*N95+@Tm*#!_frh@2B!ISX%)ZspZ^3*G9vb?$ou7
zRwp<ZD<&BS7Do?#(~)tb0baXgr!t|=tou$W3{2Qv1}UfAPjKM*#H*ppjKhZsT0}mD
zOxa5^>~q8<;0sW@j_ku#lgAg}!^MAsh#ecXBDI}r|BU~TJ5lC*i8hTgy_QlemCwf9
z>p0hG#<BMn`#5mrt4{WwjZn7?wWyd3Sb{<-wWWuFse2G=AbHWmtX4{Su4C?BqY)*(
z2iG46_SB6zU9@IGS|nH;lJ2V^s?6W%m0JxVD3nB->YM!rN@YvBz>-U_+Vy|K_-2hb
zo2H5m8ou?Jn@RZNQjd2~16%|eb;ZP!OcN6HtSEBI75G&n4GzUw#9Zcg(BSYqS8R8;
zy;8Zo2Nb(JGR3ygS%A($67(l@q*#fw4@WyWqZkl4MI<!kk?22Z0#4fg?ryu5>wJIN
zWFofKN>@yfD<fCWJHN^CJf43k3N((7WsHKO0FOX$zo*Pms9=l<=5ev=Qb|_xq1|#<
zM88p;csh%XT707xUkyAqnsHLOkLJ}{%%{|jTiq;Gkl*v#LE6JpXlyOax{}gXF&vU|
zjVN66fY3onBZ>M|VFD*9_r^$akE9CymbGn%U38p-iaCwjz4T+5b$$jFnbqHaMoYHQ
zl6_-ZvU@4B*17MHK>v#RwQoUD_9qYqusbCJf_QcAi%8QZo(GXy{cR9wF(Nh2Rw@KH
z4yn2r3IPZq#zn|P<d|#`N@Fy^5ria~b1?+xOLf~q$3t`3l%$+eO^26B`k>R$C)%@1
zp*w5~`+s9Y$EdL|CmQA<o)Zy&lgbtn)FZAutekxU1!<7y<3i@?xO*XILp=0nsX{Ce
z%8IQN+q246qEE~oE&znTvEjA=V>3FFC-shM=VQG#>c~#<49t{>#c**=U8t4C{>FwV
zAh#fFL7WXH=ME7?EKg>8LbEg|A^Ak3nz|jmR<KkEwOHTXZSE?DQ3)A;wMuTg=cW5K
z#Oplh{IO;1N4*OACzc(7LsIs70KIKFbvN?$*~cN>HsV<7+}uIUsj4bZ%MiOaY&1Hd
zQz|LH{j-C1?;|$mLG^EJSV8DFHtc32b0ah%{<J10b#SZ6;J~@h&K;rSNz_4Aoi!!%
zQ3V!pLd~bD_;QX)J0W?0K+1w0_ytZ6#3SBgOziQ5;(W_bA`D0Vaw+)Rm0{Q5ZA<p)
zk;K%<e<t}f@;Cg{Jq6P=%xgxzN;oMEAt0YXOcaTp(8b&CA;^vA{qsyX<LpgXjlP#4
zuQK%I>{W}t-xq^DrMUH^;{7)$-``8XR~&1B1pSSI%oBUcJOojHub_$eQz!wxb_D%D
z_OoLCha_%){q$_m>(`=B(dvCH%m34C<??^FTJ82G|HHF98O6ls&#0y{J#|wS=gSwk
zz&s=*NQ0JYcW6l@X8%v6avUJWJr%cPNX8J(RKzB9r;ZDybsj35Dbb-<Nrd7M;aqH0
z#*z9f4T$(66R&E2sDqy>rfS>DJL8B5k0IJGg%)1cDwU5AKifiJT2%Jv2yW>|AbJal
zdsHRmQx9%UxyuF9ijFcoVsQY@Z7k+etcW4XoeC3CStD3nrSgvP{NUz#&PQa+hLlW_
zp;fF1c#1sfv<7y<2Z*kQkq?eb%760OWFiz3I=!x}HJw<0;4v|&4C@<o{KtCM#{XAR
z5++>KqHxtzK#TEzv$faE=l^N9+KmnVe~#z#=lWmJEuD4%6_2P-Br1F}mCNEzNC*9;
z{^d(Wma6nVg(`4FRtC`lr*%2U1dpy}kcF&JMNV1-Tx&G3IhC!|eo$BO?F6OhUy@S}
zT(sYYKk2l8ACE@#6RJ9CV<hn4Z#Bq6CFG>{uz^IOf5zBXH~(=M!tiUAABk!m%15#f
zITexUzQNDb()`1u!8ubo`9fk!qS<pQ&<lO#`{=YU%SzHDLgKz$wl+r6N~c6e$#Ud#
zwkBmt3#_zezDQg84kp%lv--AJ<J5{@p<Ah4sG#0|s&X>c%-gjG2x$UGsQRD6`A<>J
zwWj)A2T;oX&Hzvz%8MoKB|Do{37nSgakf}Z%jvS9l;}QxPB!KR4O~C=$^oeMvaC^<
zOMY>4%~$mw)s-44T|sj#ETI`{l~zF_A90{!e8|0%@3(OnZUZy6EsJkklJT~=@gjei
zw0{+UmrX+)QLrQ^)uPJP)2O|++`W*{y4HfTY5eK4N7BHc{`!YPKgS~zYhN{zoLLo|
zLTQ1bj4o5fvXFz<qb*&gdF=I_JbzQ-oocj_9^dLp5Nyu!-d_1xwopQ{Bbk2Jq#X0}
za`6QjrDc;GX!CRp!g^QHmoN3tpRIE93sggYU%oglete{pUIAGN-xL>L3GWn4>gBR_
z?}vI;X{;0lS)P(ljfE`NphreTY0D+JC@ru-N7iCJAx3Jggpurhc?eQ^1a2f<l@)PA
zX^qv`lA>L(FhqIl_d^mZwpWTL^0v>XMizM${v%_IT=OMpBUfsJJMzo+)e*?t4t-sJ
zERtWJRmGZx)mFkM<vU|bI*a?cr{uFnqswGT3pU}Rs0mLf6nthP#R0M?qHpr+Y2kS`
zVzDi?tG|s3|6eApC93}KDym*p?*T(5k8w5z4)#110S9il8YT1m@D&bJZO?~vP12_q
z8X*3K{u#3<S#CN)<e%t8vUL;UPc4dnAeWr+m*#z8fBMR|Gn}a|jY7d#a=(137~3(d
zJCsU~dAb#~A{elafXZ=Qv-9{uAr!Hn@zh^b&ThGILz0wk$_#Dil-5pxxg>4c9YAdf
zm@Z7pZ>lnX=qu*LpJtG(>Vzt2t)!Xm6t1QsaWYWXoy!`qadM>s9=>A|Ndf?WmJ}R-
zH>^*lCL<oS<5A(pkVJe!IH?pkn#yA8KVZ8N^}Y7qs}<CdT5PkhfvxLOWBymF6SI|0
z>SJzKzP2X!e$U$a|CHr&Ql<m~sFwDzME~Dt@8<2l`;GmBjsE{Ro^tlzgf{~Wng+DR
zVJPai&58<DYh9?Ek_dY^!kr3#(oRAdq**8#AUJ$hZnR95k`t?IX+Ia`Z4-v2-DSEe
z3MjsCuuE&F5zK8$a;o`*;yP9cb6belc*scyV#sC<{R;&&@Ff4gtJ;<2Kt?Foy25*{
zs@j~N6)3kfH7f2!Qy|HKTVbF@$3~e}=k^tR)riPAwq|0(D@Uz|?aBRrc4fVNS+v?F
zz<{2t2{*9b>Y_yU)T?BjCWNxkz9z&!#tPqejn{?#l}^AbyZuEwllU;_D->+WT%*ax
ztkBEcF)MLtT&4G1-{#mMly@;bH9KhOrWfmbYS~`s2u-l~KxPHALe)hcj8$uv3mqMc
zQN*G;r3+E)16bTafk$J1`BrM?JLHtX%@rRDk%i*9PpV&AGPwub<Sq=Ql?rbX-3xfE
zi#ZkyIw^g&g+?$=WNwu&pM!F*w@!|^CxEJkvq=2>oiATxkI8Q^m?ZqO`efYvk$eI5
zU(}R8{7YE~{Z$szKJ==H5$QXYIRD+e5Lt`x7=8JItRAbmIcC;>Et$!=<v3pqY*4J0
zI@o6$!F((_xt``FM4ydM$Sv`+bsgk5w{NUo7nUxZLm9MZQ`OFQtG+uXt%#HGUof1&
z7J}yI29)5)#OhtzHWYVEdJ^bhK?|kRRKOOHyCZ@<xH+`6XDIG?y8IgjgQYDj={e%F
za|j)~O1}}GIV#Y9tnRg>c4?o>ciP5>=GxMHl>&UyY^=~732r-?St^`zes*+q+Wpw;
zpLY*?)_0w!>75lm%sik7z96Igd;R4cGPD_fC<VP0r(Sk5F*}=5l)Gq|S`XZnR9};+
zl3po$mQmPu0<yI-w*?+$EQ`irUx7<&%wLRK(ElPrxTtG?bD_@SYLZNGPt>J#XD_Xg
z$%pnB9T)dp65hrhM`?PoCt41DO(iXC?ycOfL+j74tzh}apNHuGLgsl%?6)Drek)W2
zF1i2FYVYOrf9*!2vC;oM%TuoZD~Rk@rV~_`>Qb%X`Fz!ldhj{bgGOoahu6GS5(Yb9
z5qiNmdQqx>vM7RBRJCI?R$s1PJrm5a`tqfkMK1Cq+Cn;BhrTv$JRg?DyEMUF1c~zc
zz-1bm6{cG>)?yj9=&)zTKCiF5=lHVgsYjTLn7PInv&)$u<%SPf_B@FGi_p=5xjFMm
zsS$AL{m+B^{hx!z-tLC}KgY9@{jXSO6+)665Sx{M;>)h07y*5&^Md&#!!Yn6c566}
zCXCbHLEx#~yi%?p&0<cWP{*Bftqw)_XD9rS{Gn5E5DqEi*B2f1%eLarwtvmWtC8<L
zqxdjU;-Szj;X}~@QvJ(zEJ&s%I6%ndbynP$A~%)|LjFdcN5ua_8hA7q&y#^=_`iM7
z$jg6!yBqoMd7h`j|0`qrIYRMPfzgHxJcJA|pJ<J`Ap{Gyp@PsnxxUAuix{#pYT}@p
zEC^AvxZQ<z>-(qzHq>X)^FaK+*zr$4%k+QyyE**d+TCkz`2S~lo&*0U>cJt2u%#o+
z*1k8w|Fa|e0#73yUp8?usX^}eT+cd}oen~OtJr$9ts-RBwJXK;>domIR&yOx+}x_*
z6bsS~!!Dnu20<K#SpH6jB4KK!iE$NIH#?M-+AE$}VS5GslA(!vYo*m%9uQa0;n0qX
zi+=f4Wi3&fMu_=4%I5Neh}6?i%5srEGp$rI_B01=tH44Zak#C1lW7>ujwshZL(Wux
z3^)B-5SNok|M1vdaEH0qJwM(q&JL$u9-kj(Uz{Hwr7s{p@1-Ez#7Xu^2W@|hMRXy*
zsMX{+7?UJ#*pvnxq|*{Ab@r#^w;(4ph(Bc-gNC}nOtvNBP)GH~zLtw0rQeZI%+(__
z_I3D_htPjuC|6(rmeBu$*1<uZ{_nScH}wBmo(Ir>*nWMB??DpZhVnm5+b8jgt?#Sm
z;<QzNRfxz^{Z;L_eEPfA`u$QJlc>6bsy-F)?;VcZ36#loQ`D{^6_45^xg|kqiwgea
zUoqtDlYfO}ttZ)9wGXNdnMFOPDLr*GicIJ}A^S3^K#L2kvI;8>J)|oRT4yYOrtXRx
zyK?{JQ$zx}dSXHEDhaQ71()yW1J}ZFoUf=(`qSf>=T;@<)JV^)Et2&LHCF(JTS$5G
zBIC)cvTd&mo)02=9W?|qf;k77g^u2N&+R`qXdCjmg)W88L7v}Vb2&drsshDJQsd?Q
zyv?O)(~1?H^(_`~2Rq5~nQ0$?K@tmh>RIe|9YPY+#%$}P*=(;f49A7|x7o4uflxne
z80~`s-h(mj(O?;sf*lsQFIrU3GB67!1`NO&YfwUiRv>@(nN`w_=23oCIHa<L#vBJx
zE+-V>CX+nGgn=X(a-XuNU55mo;t)}|u3vzXQV;oiprwW6a=E+S2049yWx9J0f}7v7
zjTz@p^gKlWqxV>c4=UFLEwlgc@9*W~KOD68Hu|6Ec<!VBSsEiQrwvL7Ob(0O=jw2-
z!(}&#S7)*pAguez5sR<>W@qtuQ5yc_RCC!qquj##x#$2^WTvu~EgDpGuQs_etoUna
zJO8dzDc#UkIjMUZs<%FW{!c^%NAaS|EdWdXzxMWX_<yg}+UWnE<;kOV*is!7%er}y
z{a#D4yA?mnK_g6kRGlv~jYXuhlvb^_lXzx}x{{Qmyc77kq<Q=ALb7ydtf9-Ko|5>E
zPj^jeK83=1_<F7S560LDW>^Pfo8>MBMCjPUGad9V-FCj@zYIEmT|^zf_G$a}p7rrR
z_rywGU+J?5|2KD=`;Atf|8MPW`2Xj5a>q`Gj6A$J5_vAZ$O2?pT)^&gp_O4riQT6F
zrCO#(lPR~Bvse}(#_cTUUX0qd7vjbTHIbsn?E?I$YHgwSNh(dvTdsFubFB0{^UD$7
z<Tkus@N^X~)GES%N1ux5LrH-XstbjF%&}j%6UyIf!c>G)k!Ig^x%H<mMuTzeV_wt{
z6p+8ijMGdz*3>Ep373VWgOaG4p1OV_QqjklfNq<*4G|9uLS%>tM{$~k8CmHx&p8bu
z!Vj4rPlHSxq~8P!RD6+|sxPUDswRH<e_#By2FZ}#RJ&n+$k{FNsxN=l1(QY$RGT8!
z2bIrVM4SfWdvtn40=lqERp9YDydc<{E$9!vuh(5j+?q<McR@yQ$mUwrDgV}PHWq{z
zHmISUt=Z;ED>EfR;PHH){rrlVkYOFvTx%FfoEwvrc0i{@M0grn&3Ht(oQBF{@GxHx
zQGqa|uU9{RISEy+=OoiA;kSfC33R8z{!)P$XnoNg7A6gG4IM`&zVA5390!q3+o+gr
zL<2OzVMqeusC>FQ3nX?q69NemVu=fp;w^w~phKUMAQEVbXG!2-orT+viRm&KvkFvv
z@$RtQZoft&#;0(NnhN>)a&TCiKZu#_Q7i75{KXP~;Y`RBr$~T>B<P+W|IqH|KIE3U
z+AYASiBT<LChI%GNYHUWJR2#Z5oc4xf;4%6$?WKvjFUC=j{tRj-^9h&L6CE1L*4JT
zK-cmRTx*BVX&kBR<fDjiWI(5e3danAm<fffzB<`4VjSeE9fSq)NWdaxD5Q}<*8u$2
z8o{D}<bbGskOlP7kqyM0NI1M!vruy?SvM@#!x0k}B{sAjG$lBYU`nGD1OzN;F!l)w
z84UpJ0Cvrat2E5^aznanP@+jt<-~#f?A1BAP%xi4wh~q&nh(BYF+!R5IUw1VkfeoP
z6?j^x91iLo@ih1;FtFiVr~Vuv9OzNiKwV0Ic#>b)Wx*}sa$#IH4(RVmYr<rR1`b`W
zPb5*Jua4A?jyo_zoWKc>1FHoU0=$Nj6sa9##n?7%p3A1wIH1u?sekA&21&sqx5Tdt
zI(9I3Cp02%6mwF?A$4G|fjaY3Z!00#+qvZ{#E8gnISbcXvN;NnRCOJCVGiA0^!kH;
zG>@!}>rxO)7h5hA4Mq|_%93z!Wh*4`6!gLI1tcapk*PcZhIv8}tD(aL?v!0wqR{{y
z;wkYDCByjCOAV=P9l3m~FLplK?2=QGjY?X$J38;Zo4_^X+a-cZlqV5Jf(i?;gW0Uw
zlPr)NyMqJInPYPnP8q>A%kj?#s&i0(!sHZuvsvQwDMK}|l-h%E{!4C|^@<S>ZJRpV
z=mo8j8uICgNHqDfV4-X1ltDreo&Q&j9$?>{FeZq^D0Cb!mGs!mfOyHscF=FJh>%Zj
zB(|L)2IM3yha<H$q*gG6QaF?k#421m@t!P|rhkD-X{W->Su%-gnwqC60l6A~I%i?*
z<H*X#VY_E&_fEuugt{vFXGm}PGz&oq<ph*+P)HlXoa0&HcN&ptN!2BbJ+|&bELd&j
z2$L>1R6|oT9TF}kH2j8^yKI#ftkJ?1Lg<r|DgqoSUpu;|h)t<GSAmMd?$QOVrU!S3
z1$E`pCUN*=3x*xO?>SA|SpB4bN^b4+Y|!hVV~sKT7uwB8a)D4mb9Rst9;3H%>~;vj
zL_@SASvXM4Pw=f8oPgv^$+#q|DHN5^**#zYvTH6!4dfSi)oikJ>?x?amJkEH_BDbW
z<Ovr<1ze0ur+5wD#dU@Q%<le>F`wX|U^g{hUu8=nnY^0}geEEMLly{sDj9Uis+!dJ
z2I>=>tXExEqarmaIG`r+(nW>rF6pYKj#F67<NCRFb<hU8Rh`uygc;y@B&a0K!p;oj
zqRUqX2K1rl$-H4`*uTRw0V1N=-39AjiXF>|ElQL^1)mmCRb&ue8LFJedFdQA`#2<W
z>tM<p<h~+Igq9<fVg|Q=a3H|vKHWG#YF=d=r&j8)M;?bhs>{!qgu(OPM~4J1^N5Fj
zs_iviXGA}V5Y&(qFR8T^z^NxW=90r8&!eu9U>}Y6R>5!@S0^Y`odAflr*M?~e68`F
zk@<?q;atBT$m|l3TCTqvGE>-2<omL|7@V!qo_$<b?Z5XaDjNcS{FIAdK9-^)YY(a%
zX_P|qi18_oI%qhH=8;283(s2yz%GxEQZ5HL8tQ#R%uUI})sn8mbXfZ$yDr$TwYh;<
zXk|wNH;k8oQ8XdKdLfE91)ZF1j!OW|7>gsIP$>_cXfo6(jsroW9dlP2G$hv^9n%Q=
zaNx0&4zFSI*K*Q-ByedsA$&@LXc3=q5B4&<2g!1nS%K!0dYXrERRD4UnCXVhKr=y7
zO+mz%FKU!TqZ;Gm`XrkAbv|<UTCW;gLc6-})>^e@t$mL=&6ZrgA7DJmK+Q&Q;4VhY
z_t~B3pnp^~;`~Q-2mPZux47yx%qNJDl-g+|S698yuX*}^7LPe0=_?OMxS(Xh{OO<E
zw|<%8hz0&kH$&!L;XwbP_2D><Cb~7H-mzXVFQF{Diz%kQ<TfI;fV!pnluq@`X()&b
zjt62UA~Ln#MsW}j-+m*Ji~5}??vuWlE5dB=Q|fXi*eF6`?5bA*iG+(oqTUn%@Cv*D
z3F5i%{N{0g%n(Yy&w)T`$$6+KEt&_Eg#{DXDIa4VoXW>&AgsKE2D;J$88|E-5?Q4b
z4$8k-09-!U6s8w!OA6-YlgdGU`KaJ9lzz^ik0k}wky%nmo}$ts_Q5JGWS_OtLYd=N
zTFO3=1teQpFPC#9x?q+qvD5f|n|z73$1l|2E30XLxgxlR20F#4Adxm>K<3u0N}vXo
zX-6KPC)cj$l*h#y_Cld{k!0#FS9og42bD`cCaW_Y2ZZk+><fl&0(KW9N`WqVVJ$N1
zs*6O?>}7VL<-VgK5s^biBgP|8Q3(k%9vy+KAEj1HomCdNE!_!~T$_leiLE#eU>tQ>
zFbURwyf&A+guS<x;t>{;6A}AhLP{(^3#80~Wtg{WNG4gEU6p}|1d;%TK8chCRu&jx
z>J!fbV>x3mp#(@9SdFe`1bK6ZGXxo`jYjD@^<Xeo*vDSzq=TjFe4<rxdD}7Y<23Np
zVgl4Ar~nrtf)4=5sqq=CT)>lR`}7XFJ`R9?lQy!+4!Sl@IhxT|4l~z}syxp6V$6;F
zFd1>0sy=yT@2@gq7fgKtCs(RGTc$n(@?2#7N<YgU3O_E>up#7Q5e+yF1T}ssWhL|A
zGFMUJ5(yruH;c=-QmA?W@y75iq6Ek$I2fnemSnZd6jLj(#mG7m9*&3;l`}TlLukc+
z8Glrzl^J^yPjP@a!5%nsSOrr9YJ{nuP)wM1lq}eeMkiBk{N@CU2hLkHvEpPdps<?D
zkW(^3Q|wM?K+-vpPoa;46yminjM|}Xk)P3n#$L>Ul#D&giX=nYF-|)#t_M6O5~sYw
zzJNb26;-=_`9R28By=G-i&fcou}GJH6oFwaE~5v$NI|>WVhv^?DOf7SY*^}o7c1fB
zodhx8e<kN_bW<EUH)K|_|E2h?%-A=@;aq9U;b|!)e3zC*B4V7Rc+Hsi3bmjKLtq#*
z<8DTSkspKAWsLbysg8UT0zgu`A$D&ZHX1#E{O55U$eCUT40PsI#5m;pgm?LWP(4rK
zGrn;ae~_~{ye;$+U*sOXz%QKeDDz{1Z#aDUw{Z%8B6n#OLG852vsv9AUBAh7J+SZV
zyu9(D-uO_j?n9j#k+p;Ckfa(chDac!u!{o}hw`^)9DB8U^}NhZg(9t<F;jg=aI!u+
zX_s=IQ0_W+=&loA2i=z41GuAqfJbpa?uZ;Q>==zCV@oAbe}RSV+&!G>4xq+cD1QBN
z<B7cSMBaEJf6Jc8|86eGg-iunqRmN}rL#B+<LDiT1uOU&9BG83ymA>-)<Q)hVuzgG
z%7q5AU5eFhZ0k-i4K%5|<1~s$pzuppQrZ?M!hB33jpQ`~SK<;5P}dKCCm6jWV3IVH
zj|Kh=nGiP+$ODw8jx$o_oUz1UZ@S46SRH0o<Bb%2t`Spu8m&GbGTmT$CmuRBCYI#d
zym&%a18c<H!ktVA0}gCQip+k^X=JUFF#s<Pt=F_etn-<&v*xzEbc^NEgcuH_1r|@H
z`FwzCb6q6~oj2F%b(JlDDak+OelkE#7Q*;btDKH{7Yn~1vgwcp#5?bOEHDsErz|*K
z#ky&^B&k|zseYRC>Qgc4Y-i;H;w6DD;@G{Bg0OLS@t9lY^3treYWv#BX>iil#8i77
zCvMe-uU33M4rb|Sd|+=PdaJis8_-?|LY8^o>^EC`$x!xdyS3eamw>qX3L3x{3L~Ec
z<7gs5XMa~77LMIW@&=5f5xJAB0YmtfQ4fukE&(pjDP0>n>|Y3*3jlFL0pYbzBf_!Y
zS2HnwTx$I5d)|40$fyNM_dDJ0qtkxrI*R9W?_c?*P4y3O)h6rv29Rqzz`brD56>iv
zO#?cOrwF?)3GJ?bBmgwggvGpuAR>hAZ7w+;k=7Z`(0c{~aP1s(L5@rt3B$yE9E<_z
z!<%s(lBH~Aimnf6;C#~cJWhmI3*3~~$~ORT%H#~5b>cX<Sk>|Q#|eRL&p230x>@L9
zDJ-I*l?+O9Q0DH#{zb|pY0kw46m<auxH8oYa7#miJSr4_$E4ASrb!y6Jw}wGL$U&l
zM}UA5=1OR^Zbn-#8Tx%LX@vIyiQ{w0^~h@90$e=qwV}ZzbJfPO8z@~-;+n3#uoZk5
z?aP8Ind14cByDa4ZEggi&5fWx*NvbXGE-*KrKc>FZIeoQm4nu{XLQ3^;i_D!S^|{I
zpzF7rQdu&8GmF1{=%;#PLzLAm06A{Cq!<b%b2L{m^7`w%s(bPBFA$`ci_*#on&1K_
zv9v&lg}7tfQ^P7!PpN0Q@Qrk5izL^1vkuW}9+6$X#KqOPq0Avj#RQ=d^^LjU+SIQ7
zb|bD6Yk(n}dPg#Xx)s}m1TLQe>l_P%?aks?z<E7?w_w+bo+m?x5t+`lY8TPzlz0?J
z#GmEyd&t=>m3$vYhh3Y%<fj+$SVZ{=f*<K~%+hF*Of5qd3td(hfWTt%oq$`u|COQY
zJYQ3({<%%;G3YgEfbg8<DL2bxZ485^7Z5($5L>SDS?MgJmCiF-L`jpSTj8W4g~JyY
zDDcXEmCL3n3JD@UGvJn6#chGEJse@fcxXRkLA)C3v#G?6$^k<p1};@l@~KjgQPK{u
zI)UOp1+Y@;vstJ`YmQb`wxJ~?wQw!ASEQ{)YOq}PQszR`W+}FdI=dzOmXf>r9pg7N
z7&}rta}?wV@O%;VE%+yIvRQlX;f*Vrt(B;M-}#5bezUcl0P1oZ8hCFSm|ww%k-@Op
z`u8S-=>#`q@avJm9MEnk;f50aVJKnN(6Ww(uOPOCYGfzl+Lhv$lcVlA`bV{|d{8dt
z9eU6a6%h@_F%=Wyf%yK9D*C1QYYiPwL&hT<M4hxL?aZPLmVf}$OY5?f@>J7XV+G%T
zGKwfO+(;Yasp&+S(hOz;uTdaC&@GOm2?-+Yu~9?4Pk0*oq=T*xPv49f+c`RX<1!w~
ze~J30UQMr47?87C!!WqJ*W4{}hnd8~n#-oyc<7lQKwm_?-D<QS+Q#l~YZv_^C^6az
zW36KxU8h#oob~Rpd>>8}<XUt`1M$;;xjdAdA?+0Kp%{y1sgmVZqIpQ;s9+qcO|TT~
zk0lMAOtt^X?_|f^r}dPn1enf1DVMoU$b&-WQ@7AL;eo26WIQXe%++o(eC=eA@u*2Y
zCf79VYg2Yn#rRQ?)jTV`yJ4Aj5cYj`mw4&H?GAmH@%p0Qz1~6By~Cq^SAk}K&ui`N
zHD6x?2X>u|<r*L~3FZM;^5n8#8wc66J2^1<Ne;i&*nO4qc_vXObX%~GnVNh11r_x`
zGgWJ8J$ZJ(eBmi9mEzZAUb(tuw{BLTiHjXE9CXp|F8B&FS@d0vx3Gi(@YR5Akb^Ja
z&DfaZa56)Zzwj{k1bQJkwU_CC;VFWxZINk7@hiqMNrRO@?;1EleXCRc{pwnc!gMO%
zZ8hOL{P}7Jj4s5D=q-o_M|NNs-I`87v)D+19%o~r%O&4m75g`7M05^#XtnLT$kZ_?
zTA&HLvp2&w8*?&FZl@^67sQDp$&_R!<tb4tSjd@61hAWG<G{ek(Df;Qxh4Es%2xJv
z!*Mj`<g^Dmf{S*E1sVICU~h)VCn}<xtX1H#eQZ^SDgq7TNV2g>i%D=Hz=UAyO;9A)
z*dL=i%t0hc9KA8s@(8}eG*Yn^z^hribJpxBcfrs#H)n{8m0TQ1@SkR_r>V<PW=Z6t
z6A0^(S$O8UF&7B{%Z<=~OAUZO#O}=<=HN~h;)o8ZPovpWLNau|;JaFs!UA&DR|DX_
z#>|Fx4{4NO`TLW%JZaL~s0f<!p|X*VBt(+Z?KWQTD?<0G`MPzjJSAWQwJ-&(K<Rm$
zvY=l@m<oH|+m{`;U+t=X_gc-;Zuj=r>{S!B9n{Z~zZyDa+B9!}hk#PpcnL(wBQh=k
z3+o!ha#84ec87cxjLkI**yxyZ5=8z?X?46DWr1rLvus=wjnkm(c@z6P#*vXC<htSf
zl@hfZ5{&j6Xi5Vq;i$F0wr2CD*_dAM<N~UwGd)&L%s7h3G>lZLfP$f*y`*^^$DgX3
zM0%pi)lA<tB625xI6=*{4kuHsPl<zw`g6?#j|J<gHk5iVtr%~Tz+*Rxv7dOenX@&&
z(6&E`M<T+fG%(&C0lCAzato6{hlAAVA&Pk*atjRN2etx>B)vxytk6CSEH9FxC60wo
zmA!P}%RJ<o^>%sXZISd);6j%;+U%Jf`9@vnIJu>Qvfz7vDk8>bCv-|z47@qTpJ2{G
zJRK^zztB-gH7}HlkOWc*ml38xnelz1Mp8pP>`syf3KKwF&-ZwpsAM6iQTA@Yj*(K7
z!Xa}tZ^vBY+L1W59}-u6h4>L(4P7KNNw0lP*{$k``5xTPrd%ZQdAcs?B9KomA)ZhJ
zQw1zWX{T_1Hxh`!Y2?uBCSd+C44u~!AVx2)1L|MD+_CzE;cE3k?sB-Cm*E@|h=mpw
z08$w;PcMqoAZoYfzNakOQuwlUe0fbVz>(R4tml{6c{?;z0Tftw7LL=V!Xz4&Mnd^3
zDH#)izPz9VXPF!+3b!f4M1I^py|r{<%bc<n+Nu_R9%!}91ASF}=~5phmp;;@!*aIz
z3c8ZVTo%$aSZ<-O3_4L2WL>*0mQhnD#vyg8^u%Wfhatf{Ti8rN%Nw4j!XoKYSId{m
zOhD2@Pf3tcy!kB-R3rqswL5k`7<Nne9jB32_6)I5IySiQm^PT@AV`$V>zVw9<}yGp
z+10LpHFmJWNFY`xe2T-uUDe{$+$Gru7)w`AX@FJ{KJ2g#OXjbE@!w+VVtreIhT!G*
zW{NM^-tXd!_5ign?xc~hGpaswi``GGSo7-ZN4}|Y?~@0a!TEyS%bM3sY0L0dfGQRP
zR(WQRCAmFTIYZ3FK3xQj+4(@xZ*?+^k8wbMf5+;eT}p0xrCFV2>LIB3N0{UKv-@VJ
z6*3WF|B!hr0^&K8hmf@2?wmNgrGdNRjQSCdNd4T@`Bo<-2&dRT1yN<Sc|ipu{XAe+
ziv|^OLZXGYeCEdmb<7=~Z*#$8PS?4zba`?7E!<UlntTJwN^44SGJj<$mpWpdOH0Rp
zBXnJO^$v8QN|a_iQHn+?*q<^7!+?|%Si<Bf14e4LQUm1Kv<P<->Q1tOn-BXJXy~)y
zCQrd8Pr)Wn!6r{Z=@>V83O0EPzH**|2Ziwe^Th6d+HmNZ$fwK0pes({Sb0`HPo(qp
zLYxQ7neI(+^G$H`=Ll}jhAN=34#Qi25(TDUV#auv4V<VpGmSnvPMS@lC8P)A4lB$!
z#8S$MLl!7s1mms`&IpB#$$d|}AeyZmaCL&N^YK@I`SfdTev-0**E_l4P=Qzs$jM90
z^4eq0z@hH6G-lqiy(l*$s>d=W?(deA+Qg&Z#G{Aj!SU!dh5Q4CoG0F~b_VQ!Dwm?=
zjK?73ogm3H4Pq9XbTcUNF4Rs+0%GneH-bCO$tjh_m_U?K<p=SC0wR2=G6sp*b%_w8
z*tgmXbQP^wX-cf7v@ObRoEEjS-=vO1xlcQqQuuhL#s_{E<WrOuPAtyYceQ<Axo}JT
z68kEubM1Q;bMzO~LjNCnQM{;s$U)6Q=va)+B*u8RMq+@IZ22??lRq;iFxezT(=}5}
zd>U>40lk%A>b5mbwnvoCSnw?^u(_mZA_m(-0*E3WWHd`4FmdRYQ1pn&4bn$W_dL0B
z(qG++WsnQ?xa`j3oEv;{Ng-MFjMrVHDR^=b);K6wcWw&eBPHR%wdquU8&(Yp%yI!n
z0}A9N^_R)Es7|oGDcUU&9h*B{cAF+fIpYY(!rHqQu&6tVitQ0|I{-eQn(wk;KVufp
zgo05HH2U_haUV)HtuRLTlYkwIR`iS=m}9N{M3tKPvFDihzCOuhwWH`tDDomLYl}<>
zM<r7?C<0E9cJj-nXbTvBibI!8l_a5jRweMe6XL~w@pacnn6vWGTg}_ju-n_F+IA5n
zC;q`;Q20?@)L38&0qMc`KT>_Tle-buxm+T3t1HKh<J#Z|$%<-+#ME2Y3_F|iTzh!@
zBS4oSO9{_T5n|V^%f_rmY=5r;^WEG$lRP<cb>`i^{}G^b!iBnj4{P_eyk+o!7x^ZI
zjf5kWc~PQ8@IJ*!I(jNlh<Rk<>-!e(C569{+!L#e@_!yP1*aMgL|Vtr{zuIfY3)C&
z{X2vF;!%;`wPb@<^#T2giGU{9_en4&qK4fm+2jJs<^n2Nllg=|W*Om~l@7?fpHBvq
zEIhon^7~|(S|PiC&-_bA4tvGCKljVv13C)}xYLX?^NCKDrqj{Uj^~;?VpB|m_1aUz
zQ)-R51~2lj*UE^q$#7Gc;bz@LK`Uj%$!DXwXM&vM`03q&81XEfr=;yk5kpdx_j-W3
zhaY=-*XD*gr%W$ap*u<bjofPq_Zc|cB&XRVr`aT@S$xKSij&jaGrJ2`A)l0&=jFvo
zL6Ld7WWFp)4Rb^0?SKvv%rCmu>!66;ka?ADiE`6HG0)q=7iOHvO>!kk`10b!oNPdW
zUAvLoH6mp-%VJs0Yp*Tx>E&KJMqSQ`u2eE_bVN<k{`nz|7~espHm;eAsWq2P6Ga)f
zQz)2*G1|U=qrT^2?rmp;s*jibK~AU&Sm2n#$OE25cL(7y{!+7gz0L%fzP7)ty<V#a
z&Q9WH!}b8Y_%l1Ln%rm5lIz@sS`Uy$FEG-d;!(7+)U0u`l*hTa^$<E>$AmP<!~q}?
zH}|Nmnwssw0os;B+SczSEkT5H#_a}T9%%h6NSMigj+-L?m%Vpgj@-5uh5!30P|B{7
z<mztC*cn%%WG9~@jcskuMKzL>>}0Z!&?LGW5gT9#P@0an-{m~Zd9tst)&dB!Z|sZ4
z8k_jzv6=*dg@tv$OnGsK8B$~hUkc!^ME2T+{4z>puf0i!H=Zh16sBGkA^iDkU9fL&
zZmynxJ&$y~s&-dpA_1!9Ndko{ghEo9-1HR3(wxwnBfPQf_V=+7{J;M49kY{iI?SDF
z_lLpnVX07iKA8rM#H~F{_=j6`n_s-SUa{~YH{z>bhj88NZ_mDX@f9;=D37#<bucSF
z*g9~)&4nwt`Rffxq($n33I~hI%B{`|1D?Ep_RP;??+?;<c$LiZKtrRjgn6O~-)W-9
z`t;PTGp<r)o;`1wZ50Z{))F-9<rM-3*2D?JhBKCn!l9m*c^g>6Mwx!tAqTKcIY@^=
z7jLdxm)ZQDiW>lfaSJ|VM++*;{Zs3SmM3oZeyYqdJG;7cus{gSZ4^;)VamV;`(+z{
zRMO-LB-X8~fa@QhXtV08Z3}NUzq(Q7$+KoLQwoJo*x{X+9RkH$RNE9Z8B?ph*@Ni)
zTVEm-K}JT`HA`xF4y^TAur`%V*#<yn?JAtIPru43+oaMdYgz4d4lYl>;^{_ka94R9
z3|dXb@A#C<jVb3Dyao;D{;icDk~kHA%05LRDU7*sDt22!i8dB|db4*n`izr#WFpSB
zGUZehbEfX**nmLK?YJY-I65NT5$TUbq!*Hr?jqvoE@F2PKkh~B7~-PQ-NWu4eyn@A
zP~hE<8uRb6*vbU-I;3-+xhX)Sd1@MrKX`BiEc8a!pEu<&?DX<t4+;g+&&!K{jcBGE
z`ThkG3sjs(;t-^cWMX6~?D_TeWv#0GK5&BVMFd;2jmwL@Y@s9O9WnnziMdesve0TO
z)LKha4GeKI2h!YVCU)fOZo^Mk<uH@Ud8W(scwZ!8eKH=7{@fDUzH&a1if{DBH=>ww
zwb3izUw`8c9-y}V#fdgnq<_<YN-PVnh{w|N3iiGQUaoze50x~ygpdxqS&uJY4nfk(
zb>CbM`fvLPDFaQ>t3tAv{$K*L>n&y;Oc%@w#oZ(OBk`Ni<hI;+4muP%c6s5Cvk9(t
z0P>`3?f%)OWVM=k<GlrXy6f&dboaTpIRS1Xqz+qykdgX5lm?1XVzBOizHVS$e%xrS
z74(s`$5ZWVdH(iov@nRaMy-7Yogae~*OW|ch|3ODQK3znf~?7XY$9>wdK+cs8?DEg
zU_kDlq^6P=dd*C23Ed71>)YC^)U*xzmhsFBnh+%@vaAvGAQgqZRWK%gC*}YP>9jU(
zU<#pZpc05_Zf6VHDl|%etxvQzf^qo9-nv23A?!u3W|h`{*17!`j!x(5bgqw~a{<>F
zWqffi^TOSGzHuI2{b(GcwXZstp&r1dMCH(Jh7$duUyY9YoKnG^YVQN~Mq6=8g%!9W
zSlkIU_a?+3KM>L+dOF3*s#9Sn8ls7%^(m`9?UOQ99j@h~m`a0xX_@W%+;$|XBT1hi
zNn&_`cX6zRE9e7dSKi?6GIf{f=X{x<zUoF7=p|HS_0=3uMDJmxqaYhcEq6V~#0q(h
zuHbvoZ5>dqZNaS=uSD~D4Eme1*Dw8BRZ<c*Q>}u^sef%~KRDqkb^5S-+siJv+mS96
z<S%;-u7ymq_I%cV+l~9|jaKX2b6-Oh?WGS<C1srmzS1|kP|~}=m*2XVpQMGrwhfSM
zOHpkX)v;i7OsivBAA@NXqvVU{Uw*X_oqG56xqF8l9bC*5pUQ-N583LWuOG&RV4B}G
z)CWH}t`c;X_SK@boE$$Xf(P(!7LaI;wl}ewY$HPFF5=~XmG9cZbOGj7@7UwYCv{ou
zeB$^9<>Q$$&vgOy4E(W0*@l>g;2sD`yzVb#a=pB||0;Yl%6Jwk$+W@pBIaKuF9aLH
zd0NAc#9+++{>8Ir&rj3gZ%$92|Ks@o{omg)_X#McOIF-k`AlhA-|zN51|!F3zP0ma
zMhOS(o9oMeZ&-Lg&a(C>?m#>T+kv|uDN1i3#@ybzg)}^nw^WcEe)~?$pt9U8gri{L
z4@Wa`?s|v+ql6pLm&ynzy?ZZ?PucD5x3AC6Utheqy$!zi;~xF_`rEVTx3|&%eevR}
zTkMwY|MKGb7q_=9tsE`kPFva-!vW~ui5YsV7s4EWd)6!gD)udQ@ar}FKaYZ5y96aQ
zi(*nG!bUAj0EjQ{Gnzw~eeJgsT{_X_QxsivX~l~#H&1>0%Qbt4?>;&0su1JVj`qz`
z$i5S^4c+Wm8=-nRbhU>*6?Jn%qc<rqJiJ?t35-DbLQ&sw8@_?$UKj9R3dw|8qz{6P
zc$W2lhdjAM_khDtq3+o|FHDb_33r&96as=nc;+r;2K6G{`CihM4b_Qy%*36z9P$qM
zgBkEC|F>3<EpF1g{zw=7u|BzfjzyCkto!3qrsBl2BZu22y&FvIH2YN*kI;`+vNvWL
z9paV_mZ}AJIFgko>YF&^B~`h0z{F($Ila7pppp;pe?h;V?-{%ZH#)3Xj};v+?s)Mh
z$ctGm;%C#Cv(Pz4R2E{0wjsU@`V<^C#>}a}znvcSfGrs;OSRKlGp+B+oJa#emgIz2
z(%34r$ovV!XvTBN5}svyQw@-XZ)V5L9{9|JmYz66&FUXfPPgR-N#EPjb+(z-_D*Mi
zRA~+Vb@uK}RD9f@QT<4{G38Wv%3V=@@gdJ-B5jR$NBcf$vN3810QDB<h`!@daa8&}
zFC-skVhbLzzbLHQ`ad2+@AzwUP#u5m`0FRgUmwJ9qV-*Sf2=p2LD9tzRMVGcA?I;Z
z+r>(1Pf8sgw@sLYrLTFgb+RPDZZigd9_p{JE+&_ALs2pgCH-;mT#~gOSbkNn4+t|A
z-gGw<Y~~3MJtY}0hSC<in6dx5e)|Uc;|~0lC%Z9y-0Nc0x0-CKP7AYK{hO2K7r*Gf
zjUn@3)F0HTzGF4P&ma?V++#Cc`mdD`6paf3UYCi)>H^Dldynk`x9r!ts5%~hQjeB;
z(QBYaJqG|&X0`^#AZJM55|LBGx>P4+`2TgZsn&T6YCISBqF-WLwmy8{)S5gj9^<W2
zMZo%UbxD~bU?E;qj}Y+W>h1LnWI}j+x#F`-^R(*lz7)|2m8w}o77bNq42dpHj9Clr
zy~)wlo!-r|9;jMrM9=MyZ02o$_k*AU+11W+3j8OK#UJwTQ`z9dD%|&QXP7vy^b=Ks
zoGVre<shT>2Dvsy4l{_r&_f_gwGJ>NEchE&Rz^1{k(EYm<>N?moBQ@uBonTrnLcto
z$}zX%fzRCcL5pe4cOCY9gD=B9#uD>#+*iUnX@P|j?Pz+2!l*hGnel{wl+lyWyhg>A
zwW`7;exT2DIWTe@TE`p@YTqZ!2h63C&tXG`D$`El3r;;&d~+;^+sbzx@q{6%>O~_7
z!H-De6gW{xxHlR04M1ASPS{XP_`TF+0dgX>>-BEv(w3_OL-!o89=F12d8*io$HNB>
z%@+#bd7epR=@D=#od`OA5!F(NCQe)Ob!XiR{aS(EJ^Jh7mN4zrkM=oAyb#K%ubV;g
z5Snp$0B|)AgI*nC2ub4~1^5o?k2oR4MBSxiGKrSAkac2flZeXDyx*JBk#{mh`8g_?
z#ocDQUQW)6RNG~DlIId?vYQk4B$%R3e#NbYp1b3|)qQ%irT)5qtVMY|R<tW$dN2o9
zezzo@g^K*fXIfC>i=z^ORDt3cuY?m!hv2t2jt`0y+Xx6{qn0J4ghi78OptUrb)^u@
zK4_?E4mv2!P{}kvxZWR}>q5Lg@G%&t?7d>22hw-s|KX%@T};6!kr#R-GjYs5hlU-F
z)*ihUX0qs^UW1%}ooA)7qPV>BuNp8)9=p#19drO9B^Y{orImnz6b@=g<6@(`xqP1k
zoLa=7_W?N2fzVH%;L?6q$!$P<q1Jm<kbErNL!$XsRr9<SN$J0_u=m*_v}{F^HZiQU
zG_7oATv=1Jzdq{M0|85w)5rCK{s1^Tz(#|m3JkT!-XG9^?H*KIohZZm1MI|vW{3g1
z(ZT+k=pxnvj!c<MpaTLZUGEPF1>YY4_Jjo-_vrXToEDi>eYaE1-XFX_U`LqSibVbx
z@a)>(B6q9SpE=vqe1q@=)6pqg3X)dSO!<dbLXGX@lzs8y%T}-CPVg<%Df^%Q_}~Be
zJMaJdS^u|x|2X=4pZ@i^|I_gwkKPYf{(k)Vf3*1Gs(uXhQO7agl<2P3rom$ul7ml^
zL=t`h27}QsTC6nevZitMuPKVV1@&P&VIqNGQ@s1C9okK$@^3uf5KkS(o%R1lNO;!&
zTfjs5_wgUwAYxmqX%i9S&OEASLyeH}W6+E(F8hXmP!9^uws1o2C;}G#p#^iO*lyK?
zO(#5?pM|8;_X-kVeTO7Z3qsOEQD&rXUsd8S%EQ=Iu$p+NOO^6MIyvLq{noF3i>2Ly
zoUbHtz;b5r=ZLvLA}wk=Mo)#EknUQCNO%)X?;w3^H2IPKA1)*oW^l3(&P-Yr+5Vh#
z6Xeu?Zwjugx4k&=d@PhGWWwAuRx_daFcXZc84(^&T$5$H#x}SW04d%D)__?io-{5|
zlncS$ALNBj%S06K4^Y50Jvs@eFwQ&)g5SU$0Y_&wlM0T;5nLq_G|J!#)GP+3Chrcc
zWTPc>mdX)g<=m<hD(o1onp!g%(O7FhjYtE3)}@_ay)NWfDpa>ZN4&+x1z2zoEk?nO
zEES2<sW28M!e)mkDOKNb3#vA1c`+6iJ4f*fHuE>?Ba^X@!#kD=Fm1R7fMW}4cttV(
zaP7(51zaBp9U&teivjx~>5I^DGB4n;0%m4D!;!oI(AI2T)T#P=R|<Qrt9Q^*iQLkE
z_Z`WC2EUG282Xn(Q15gIHZj@&w^&2SYj7}`Cnd18BX>~@I69&YAG@6%qM<Y{L|{?c
zzjZLXWu?l5sR7Qdg{)?UsoUWFy#^^CsYyNe4OL9Tbe?OUlN~mDWRBUxL>mE*x&I@r
z6|Hh9F)FB-2?t8yChm+eUZ#k^)2l>(1os?#IYhKOP>3{q85ca|Hksh`)vkOa(Y1$3
zx4U_mjlBogH<AKqPu$$rQ7pV3@4id;W2+t3g<Zp5pZ&M5BNUkkkXg+e1)6V1IVkuF
z7@HPq1<>^{$pkMP10t6go9KrVIb#0uMz;}G`!$8x<YnQo$xV#ynW3E@8nR%29%*9B
zk0~M0WK?Dj6Em&Gp2j!Nl_%g-XVOB?Ny)QpR+9>PK`N*&tRo$Ta1=PP#45byHLQww
z<kX2Jcw^js?NwZ-7w1ud1N6Du-WLnLhl`B28#tMl8z2h^`Bz{tq0!_*$T;2!6H?tN
zr8oJqr!Z?imkRtswcudCjG5nmOK-D!uh{QNK|hVJ$R9RgjrG3xtA}rTCzbv3i?-ZU
zPRr>j`|8DuFJH7}r}#=6W@;)runilG$w)(o;(l%)ISs50s8~HW8T0d;@Qbl3bcK7Y
zF?q~8>3)UR>iYgEd*$iy8$kC*riU9){a|Z2#icy8^;J4ou-kiTV|8VJ?BIsPOfYFs
z|J<65gn=m~7=h8)1C886vLBfEg04bDcLTPuXoU@f3uSupAgd+ZAQhP{XAvt9uVUMg
zcH1yA62k_kS!8I&U^Q8YMhM7m3`dR_w=5IfSf-T-cTO%AEGh=nv7L|2c0Os-QER1Z
zSF18b2HZFhY~pNv>q};T`p^Q<q8y2dq6)}?Z@eX8VdC){oeChsx~S~DfIUz;zvt~4
zKyUoRdx->+YFr4j(zi1gfI;t&200f*630bgSJx=wZaAx)!@6Kool?EoOPVw?Tq~xF
z6hmvkT2l4$cQ8IY89azA>qFca_8<-4Ir-~<|LxGdci3FkA<K1tN-+i${dX^o)M`OA
zf%}SZB&TYdP1Q^(x@Tn^?w-Rcl8moDrUge8qKl(~K~M%sDUE!N-PQwf>1YS=wcCa>
zfBuL<-`;w+XM!)39IQ9=#X}gdw<?<f^Ux!9iy!N;TSu`md!E*D?tX!6Y_CQK4!E~C
zxaOz!1Y`W;f{l=W3B-r6%mcOF5qVR{-b5X!V~dF6KYGNXfPb?7;pgEDp5nROh-sej
z)gfYY#}X*B-=3vesvi9zfZNVDEB8TH^m0i4nCn!&$9SSm{OmscW8;YZx3H4e!g8kX
zMNxoFe-tu(qU{F!o8L1ciF@M^Beo7f);_GLiaGSLX&yV5awG#1f3TF950geYh*%}K
zWPq>u)ziXjue48&Xc<+pX%Ga9ch~NPX1sd@okn~zPtz*G-4hYOUplEe^0om6+Z-Tl
z>j=2|2R9Hn+r<_7Q3L0zD6sGs49Pa`>XotHvcaor5S{QjZWRI%(b>hMGNQm%3|2E~
zYa-rKauYaOhz>8Qe>hU2)jvyBS$ryPhP8$>bUxgLmG{R^KSa%P$|WRu7{=N2)8}l;
z^Bmm*_Cbg!tLO3x`&u=3|Fqa;uG8IEWv<ih*dz$lzYrejfYkBFoeqY5bpE)As5_+n
z^eMU@KN)ZQ`GC<;<c(>?l}@j7kx<H$SwJwBSx0i64%qobe<XJR)?i_{hM(~*QVsn_
ztY#zdh?kZnWkGKI$hHk6Wx&qd{Rf*g5gDILA;(H@lsx=+_kT2!szvWIKjz9=)Ljv|
zP7e)aGNxtbczB|fv4vys=JAko(@ndfbSlm^+&pUn-~#?<C=5&&fEfdz3RNTcw7sNk
zJ6NzS;eqc_f3Elim?f^mE-n#Y@y{<mh@`YFDt|P`oJ31t@+M0BJTP?nflP!N!0SmP
zx6+J|tp|XM54pRb7$^{2Gs9Uem3CNKpTQs68Ns>1y!TRPkbnbHWWlDo2;z1$J!YO&
zuSvtE+Sm$q-sIz^38`n;dc#;|%Bh?5LCEpMnjVt_e=(@co7J>a;e&U)KQBTl%q^IL
z2kt1S0A!Qxh1`SYDJ}$8j|rO$j(cEAEv<uzTjOxXq!oqF9V&D=#+`_aK3uPw;N&XD
zBh;83;N}iI({j^cJSFZAT##g&OLS2PlWPTU!Y?nYwf!!<1i?HWm=igkcvx~0i0fyt
z$sJ=Ge`OpsN6QSP=4i-J)P$?Tq3E=&biHLz9>Ef@8{FO965QS0-Q5Z9?krAl2*KR~
z!QCYg+=A<i2X}Y4?>XnY^5_2Osp;9;ovp5}si~Q#yJ>$ySOuf&28D!A)8V9u6*O9(
z!mG-!N<ba1FFjoa=dx)<615yd$wxieQXbRc?XUXO8ep;!XaAewl*zwm&}<Oyw3<1A
zpNltHPkViCeamX~^{;UfG~~k?!~ABxY5~H}l}-Bmr?g^I5(GT$TTglkIk#}U;<rhj
zgnwQ0-7m<LgX%-|EMJ7bc7g3BC7gw6fudZCrq{Aic-D+hJ;Zj*!Tb$XB$ih~-I=hI
zRG2|2tuIk5F>Lz!Cqnez{?|~Ve|dLS7r1D99IqFJ#KK``{26Z;+$!qaX;80AQ`J_J
z-9&V_i*=pG>HzT2b;lcV^`J}&f}vXGwtH*XR<Wpc@u4Zej|~mp6krqJ^x-4^l0A|W
zS^$GiN!D>^Eo*Q!-lrR>uwdcb<oV(IBt}T%WNc%$VT1G`V7jT>6<ga<a=WlhB<d>S
z4|9+yP8b8Bz2$tTTCDsj1YPbAb1K$5f<v+tTG=H+nLJP_JmP?KAZpX;YwlB<;q;`r
zDf)S=vXmvPI-i4TffuR2ou>-UT|&s`I|Es(Jau3Wnp@L#91W!<-E(O>6n?8YBNjK#
zpl%(=b@9z~+$j!ac<PkNcv|@oiE?;Jm*a>gnS11LUXCcYDWo`sI}0o>9<#9V%BzPZ
z@hC$YKr**o1W}pb#T;&R-q_bzf|=DuIQKb|Y50{UmJo-3yTm7v)Wh3>GZRFt%4*l*
z5T$c@5BVbgEwKc4DbUsX%YtU(iQo!eGMB~EOsGHKvOL-ba6)lZnk_ZV2wJ%;>T+VX
z#wrn~&={<h#+oR{djz`ryclGmd4#{M)rzaE13IM*dE{+h;L*O&7iFYn9M<Y0R6i!T
zHp6CJggDDsTnV*07?|3I`xi25Z(}~N*PDT9MGB^lixzi6hcBm&EL(R6PKpM-6=a<w
z7VeuHkye}~XcfiXn(OuF0*9Vq0OWN~U~79y)Y$}*SHXwU;Li#6sPe;y%*{(k06DY(
z@M@pt`lejh$b+ZLt5-*qd!m?VeI;imtq9)GtZMLmuAefB;)yRlbNI+T>zy0YD~o3#
z&E?*(-R0zW?3x=|OU%#b-dK4z^O%*UapaVtar|%Rzs)?}t)#=pOD4n85h)g(TW-xr
zalyM`NB&W`0e$zD@h`3N1#k$37?c*WlXnLEkYxo|=^T}Nmm0ZydeqFG+3V>wD>Z1V
z{h9I9(w1NbrWa%I7VmqiD-_AxC!vBOvj|A|Uq8BXDZ4BF4AZ=bWm=7FOi0bh{3sge
z^Ii7w2~uCdxeElu>2U8NF8YeGI_vF-Pg7*umbDH}ITV=7?wC6864wD7Db<56D0@H~
zUlsF1E5;m_ZZMS}JC*(pMH<U#K-zct#)3sU{LN<l<)*lv+Av$ASZdgy3w<9+$rvf1
zAoaq%?CwlKZ8<ip4jn;+LIZy-pD*qVe5HABj%)G49$zn%HM|_8__Zq9&wJTzGl<ik
zV67}9>TJetD60TrsT}ZO#3BR@X5pOug76l><y?ej%FO$mktmGezp7#mGWX|lsedDA
zUw&srk&MtG!dcK0+=oH0XoX_*7%Lp#MoZA>=ld9OV@BHj=iA^j)SKK)mp3#?j^bW*
zoM)ZDWATIX=*a2*=ki?f`{#s;qI+f(fi|qhunl5!Qp1X{=^~&!Atq#7BBcoG@ocO9
zOQ{g+{klA2wLU08xAo%E4%genKL7{DmxDj?O-E_4g`$hqe1)O`(@A_`XH3YTq8vtx
zQ_qHZ8lHjrc3xh!ve2VOfKW)_H~NTtq^d0kZG#^aXV|Z;u{tQ{E1|foE)wJlLPE2l
zVzMB?nuW=7>Qmshv3=&qnkY_Lq%vMv#GZ}+&0*&7w(%J($|43}wQBC~BKXOgmF8Gq
z9(JRyL6InY5)4x-`>!H@2@BK5rJ&{}T_}U9;z2)9P9(o>aS}|b<N4%5$7&f#X%`%F
zLQbi_cnc93tkyz2Dw{f;!1czVg?EPh+H>OASP*b0d8r~{Bg^F8xo?hwp+hlN){iE`
zE2U--#;KV_umc&Z{zN^1{T%iK*QR**E4Hnf5c!g}YOJ{yuOXEU!THabF&;9VMwncC
z4O5!iI|zRS9}*QsN5o%$Uuw!bxYACUC_c<~!(XKxB-0angFK!dm80B5c2d{<&4Uh8
zjZA@$IonLVOdYk6d4CFtbyG>T7|$**liksh=uK8KNhTt4Ol*Xa#<+&bZpx7D1g7V3
z&S4dzK`*hp%di9_$;*)$JDd3J@^eJW#ER?g%c3FO4J0kKXDauAQ_Hk&w*r}M^4>(+
zH?q}B^kvm8N}NY}(rdbilQYcX=Ik#HX!U@eh?(Ky-`1afSdBL#2v6@Ct!Li0-)?q)
z{iF!;czK(fl75ADyjS5Ps&AZYB^K%Z+$XfMCy@QRQIbVMaNXm0r9zLAdd4DL5gY$(
zYhKJx@@p=cpTxFu=16uDEX`oy{O=$k(y>R0vdr~vdNI{mF{~$Ee$&!p31D=ztE}lN
zqqxpT`YTq-ucBVoz)ZSkj>B@VC)RJ!y0fYQuXl;v(%1IahMLa$37zIcMXsUFPNi0K
zttIQpalmAJ&6G~;%)-;^Yok$a?epPrKm=I3E*_`awDR!%$JrrxeFs)dSiv3U#IBp}
zCK4l3-|?9z3-CZ1P+WPlFxbFEkQ=mkWDRcc!D8<5yix@A$~&;+2DN}yy|VmjB5-#S
z{CS}>UjBPcH^UBo6C($sSgP~m0Ip${swo|&sgp8>`{pP1ju;c8!P=S~9i1!t(L?$m
z&y`an?w2yty^DsG1DW(m<>GNGa91EU&>iqtIaQFh&IPOKao{)bzTm_w%ly|;t9Bmz
z>h551^x((*-{4T_e@*%NxOXTEo`DAM*Syy2anbiYQ_b0-42rS<#+ot4PFy((2m2om
z(tpB>;V~GatemdX+?|73xx18_2YY7`{%$}r_|Zrgq0?jFumISIc5HGHW^xI2dXwyC
zD~jpJY{*n)ubp&PT-2$_zrM+*`w}|>O$Jw^XPg499h2o^C^1paAY6nK1YED*#`f^7
z1V<X&_1rvVG&DGg#Ik|kj|Xx->wlqa-Iv^q-7$`dN`W&1$#I=`5-ktEWn+EX8m&#@
zSnulg@gJL-{Q=PTrb@?+#Z|DQ;Q!srm)agEChbh2KdV>&2?&C0!VHpE)+0X2C~`N)
za8FTY6`Fl7q&F=wTQ0&@#hx5C6FZ_em>GiTG`^%x67}1;oF;GPoQx(6v6p3aokf|U
zoU!{nYzgsj5l%!kT#<i*J?5C(Bs9;&Jm*BYKlGS_rw-uFPEBz*O=P1me`T-}<ncG)
zZ@LnW>l}>cRlqc&?|g`#zKz>`O>9Q0<Orc{HL1a$>|8+zU`+7Yy{Jn$b?UbZ`K~)&
zNS}vwcZF9bT~6SBI;$=>SUyz1MDB9)Aa-;XJtO=19<7SgxCJTHSXC3a__&Lr8D(%q
z5^xz$X9XZq=u_qDys4mFo#0G9#o}SBg;DfpTQ*0bz)VOlON)Ok-9oyT){tyEtY_Go
zUN8~$_A6%N_Jeu~cdU(baNwzdxa=I0k4q}oi>@Tn*3i=tyH=i{A17NW5Su*J(miUY
zCcF-k>5KH^|A8nHsqs=Aw(<s1j{S}&e8cv;GZ$d%fZc5+%E$|2v#p=uYvAmC)fsJs
z=tQS7w!$rt0*a#c<4n-l6|js;$W6#m%%pd1Ek>OBwF;ycGR?(Q(r)_4N+x{zKt@C-
z=J#sK1>*ho$u_A@<!4KDZtgXYiouQF#MMt5a$@$s@Kz`U`u+Q**mf=Sqll~oquy1T
zkQ!j~-QlHt*j_|g&bLx-_M%y_nDxV1gkQV4rZhs}&pGZ-@Sr%C>Pt{ZxeyipeHHws
zgiWZ#XC7C0=n+9q0r^!MLSKmIlt7@L6Ou1CM$?U<VTJ8^JCL%UTc%s-Uj9e(^+GL=
z4;FVTl+`Oi6)u<hx5zkHMCiOKokwa)6G`Cf<keSJ@(~ddQdjM7Y#{nBf<%up*~L!R
zzqL=|VLpW*(r~E<sRHs%7^yIVTt4g)8Q9Z~33sDq>P^MLRA$CG7=gd?7E-RhFrth&
z<bH(7>>ro>HdX7rdc~g>xrsbD0~p5M+kD*LVCOC4aU0!fPUA!m;gfGPuLW{=M85zi
z*O|MnSb3J>@kgzYUTApT%$t~kcp%M(6AFmqI=_U8KxOR^_R;bJRpkW9HNuLA+p+Ml
z^ub?=w`b65L?ekGF1EiX9ICby&TN<l2D$sqDnwKD<v=I<)D2BhDZgfI3Ae(GbmIZi
z`FVsNG_n&e^ZMyya)D-i$^9%LWE%iN8XhGET}CTy1f|x#bMm^;ZeOGWgJEKNYQJp=
z8$-Z1e7Cd5BeC*8l5l@^Oj#{=@25#W3A&=RB$vbUrfu-PW<hvYsUs9G6T6QZxhA+>
zPbWuNV7($jcp>JeZ<2Eui;uSB)!tCPXd5jUk|=bCB(aH5GG#SMp!I<|aRxg7u%f$(
za$-|ww})|aaG;Yta{e74pP6g_Qy`c6%_PR;(yK&MrCsxMd)sU}!<|Y{s?O7=10%2H
zHnlbZ`6iG^&<gic3@<Imug4j)xK*Wuuq3xJkb}~QiUP;){WLH>*7&T<I6<4oQI(V1
z8${rUX8buW@j=Oq?DI0tYX~sVAimt-atKY(xTta{iLb^OI(}@)f>F7zjWU};I$0eA
zi9uJ$61gM?ds-cOfY#I9-hM3NAGB3c78c91biPT%lEPLv_66qkB~G~hpU&$(DA6*x
zdG+z(!q~SK_Vi8gRLH^qXq&H@vuHeX(c5xL-K>2Ac~`<nT{U~Jr3%mw(42EXq^YH=
zUDs3n#h^B6i!ljPV6*)>;xbe*!i`58Tj=y>sAMKd5b4~(pFIUKyIh1CyI!hKS(V1F
zDLQgi;bF0VIPF#8Rir)e8BuXKC83dL5%v>_=EF-E!59AA7Exv!65`>1HJC&>-g8Fj
zl2|=Z5_Q=zMsuOur{V#K-b;g2sWist{qRjBZfx;-2@TY;*^W`D{D19XGTXPCHfkEl
zif!Mm#u7wxyi|<4+Jo+M)?e=;aVTe`5Oa|BQS8szvKEXgt^evxKBx;_d@#;NOs1vf
zbCH-(n)cfNJ@oGo{H3~zc+ZOQ+cjH}l9q+DIfb1Z6s-JdlE4KVgt$J>YtK$Vti6Db
zS}2jIy*1d?gk(Z;HKBPCxsV~@LWajb4r1D-Qiz6M@FT%T3Q6;rlE%c=I+^+lVWPZ#
zt)P(Q=MW#=3$j<#4{V|*g}Ba{D-splj)pqkKhT1A!o`~?&s}Ku&Qckp(>bsHfySZc
zo+pt6Eq*FU&G8w)nPCz)bx{1+s=glwlPd5Rq<;Ej$!@jBh=>a%?sn>MH2dWOrDWQ_
zy&3Mk{&Hk8KTU@C)N?Ldw+D;kj|ZXXxQs%nS3lQ1CXI_TzBSW&+%b$$AJKt0KWHkE
zgmLeBQ~xB5oAib1LcMGc|9yUYw@x+q_;F<zgQiV;it7bD5V;U<ihP_ZSKR){O&>Zw
z63D_BGY|g#u%fA(=Qh61Lw*?Y#bzOS=tmJN6iv!~nc-DEEvz~qeTQtLCiqunWgAU|
zmEouFzUp?teQ5S|Fv@bG2<h_yoaZKYkVhF^342<lWKKgES&(U%HzgM68^nO=>*Fp&
z*B!%sys9bSsno4}^9SwRFr`WnM&NgE`^77ZhB{x*RM2G5>lH^?YI}DAlF@#d11WI@
zyAOKRC?hO56`{b{e&^F>4m(osfu7!F6@uU6==RsltD-BaS83SSZx;{tCogeqDK_2<
zhmHAcUWt$5&bLPs7x}GH0<RKPETT^t?zyRR%N!uU`h!#7$W?&P5-I>lvWck8?ESbp
z{2=0`zs&#ey_{NK4ci5#HD<o_H+S2Ejw1#vV*e^dumv#g_js=xM)C~gHXIN!{V}N)
zQ->#i;Bljm+nW>2`l%e7jb`2!gYrS-fq20vtpvADjHXL1OGxH+_ZvlF`WW6Y`xRsN
zJDwq+M<H$)Q<t!-=#z(J`7FT}3SRH&5r<O5iH2?6QJIlAQ!HfqZxlnv2h+JAy-s^n
zdRSh+>T<w#_Pjj5j<fW>GPS|~c8NMYf62b-1F7XKB*0PRxe?iXWyjDk-p-kd;P32s
zy-8n+C)?+|S>>wozojI}Y43#9gDK7ZgqQ>nMQLWzj>HpPR`E&u#PZzc;;%<OGK7aG
zYh+%9iZ5U73USY%Z9R)cVXR*Z8-mc$47ZXe0B_z(`JRFtMqyc~;U_+w#=n)UoutGV
zybSvmmtAW7;T4l1fy!69IqwT_4BBVcjEhQ?iwmaNcUw%}d5^@I2`+__Lz42c=<~p!
zOWJ4Cc=AeAToKbH7lSywB&_OlDKoKWGKQxM*6b@~5OSwAWVE|FUFIa{7jFp*G^kNs
zisP{<6GqI)!dA#a`PM_9-qxCiyll+O*3(Q`-Ib*Qi)uK~_%oKRl=--L&ZXhKSv{ij
z2Ird=@10fGlKKi_#+<ya0In2-n;L*PEjZ)*aQ#eupRS2b)8gx6Dj+Jyb!{hKHxHj`
z?#q=#9P)!z^C0emE(W#3y{7z{C{5daK(XFk7-yw@_a+g=4o+>(d&?f}RJSS%Fbl!G
z7>p||bEk;wbn*=8lpDU3&7yor`w5lDn4noXr_LJUd$+VjKn3HG{w)}79vfhs0I>yc
zcKKX|lC<k2Lcz@`qUBQd#}Rk>zikgTZVnCjm=%l=-s~S^Yth_~`#TMKn@3WtTnyNZ
zrnHU0h}7J~e0fzVm2WIPUnOMy7>Iv7UJ5M4%;n!fb?#{F@q5b3&Cle2xk}@lRt(@3
zo9Ou-9cDckD94kiRC4Nh!~mcNxm3w)%<&m*j=t_M+~rGA$TV&~Nsk`F2#Nd=YEL|X
z(PaDj(3RA|DQfxK$68Vya=eR$gT@EVlA0t#Gy<7}S6=@GTQ_kel^91gu2sr38gh(I
z*a*Acw;MJsTW9H<?n~P7YgI1GZy9c6Yi-7W&#6Pdp0LlJax;=Q>Wf&1tc38D+m|TV
zzW-!*P}C3&EyhIi3CF%1J%_f`#oZ{KD}b~4^hC_)B&lahDl%A?4kHLfFTSE!_ivl~
zct(x&<M_tFs?}9OvE9(-I8Oxbq2z)0x4rTST{s(bywscHZuPu_V}g`Ava}8S`Dbwh
z8?GrU@=(RHbXP$rEV#s^e}smkis`X}P>f2YyK>{}-uBL!!3-{9+KaU?-Z{R-;}W_F
zc>D1!r^vV{|3oVZMfbxzG@Li?w5yMg#?WA%mEn^JrpTw6i>e|mua)a``bi1z)xQif
zrb7!sQ2-Bl0ix0ABg^@pb^osB_Vw$i)gWgfQ6J{#N1$mv@@HAA!?%z!xL3pX9e%Up
zgzYX`jImAd?SGGy9yB=UNymoF;T7aq5UNRP3o30*%+oVrf}%GwG_HCNY|fcwmOW6O
zm};n>v!-EK3tmbML!w!gfZeurgr&rU{G&y3ln2OKcv4{Hg)9XdAanuJk?zO=UvMUn
z?uX>=coKew`)+?1szYE=$BwG9+B62Pb{J&thxm8x0<O2AnbU+_8;(u2jupTuSNDEe
zi#)e|YyKPXl)Vs=c%F&(H$D9p_Nz^x;APW+b~>Jz2ybOn=u7A56#cBwe5t%a1V&Ye
zaU77B4F;~mIUzsr%vX!WCuDh&3Iqlb#RZ6|FL}e0H>B8niyG&X(D`x^4MxJdg$3Zg
zp$F`5iOnOrUfnBCI0>ni$`8WT;=iaS<b)~X9!6#p>O_TSE^;JZDqBD%^lWL_OL9XF
z7r$7&PBiSzUfmSl7b?>x_m!NpYcI6eNCEkPFjM^7t9x5OMg9#Zj%^}}7z6}Qua5Zd
z(02cDxlTJVn?&O)*)`-;+$U`JJ`@aNc*|HlsISIZ!knjz5D``WpKB;!Iu|um6@Qbc
z4YJPvqm6k9H$Oov9*wiOylsS=pJHnaYLc@wO6`*8A5i6$42#wM#1=H*vFOPcXOHrb
z_u`o+fYX+`?B=7D&MX3jZzqyCn>r~Jb37|wS6>%dN}2LN?l3^u(VB>|yrlINAu^Nq
zR|6))x(G{+GrsO|JTb#G3TZIthjdN@)WeBDb@eVB@P=8O$XvS_7zVta+=Lal(Or>e
z-84d)eA&i}4{cXGM;E8k!|&8huM>eH1A6r$NttQ}egHmS=9iU~SH2H~!*CaBKf2>=
z+>{p|5;E<m-r3x=XK2YZs14Fr=eeDP|8l^^KIqUqPLGTHM0T7%=@*BEL^Z1((bnPo
z$=R|C@tai9!4{d8m0~sntgWESko2;^!#oNx1vdwj59`Jz)%Y~Sqm05zTl3+yEpQd5
z{c289`xyQx8JmMC^Ly<I_SW(-_H2L((DMBrELT2-OPtFusAvhXb8>p=!eQscNEQ|n
zX?#4X=7A<t_HcW2_5Rk#0xOsvrl?Cb@~<HFN=|ne0%pEX{-PKDh6pjn|KX1BWil3z
zC7}<IXo5%qr}B<9L8<dhH1KKv8Q6OQZ-tp#!oREWG)xUl;8%6kH&g3MQAN#y3@8MV
zcM!vxeWsGmQO1tkD%)G_FP2PEts|w`z7xAmh=N1Iborz7ZN%5d#Tn>(pP{Qxk&x9Z
z*=$p#VrB{TH+05A%C#yTrDw9gOf0=E!=Keu_=XR_D-N?J1WCvSF|jw<0XaYLo{fK&
z17?y^dq)+S6n!jXTI-j4HiPpTDu{%qY*dm`azqevA!$Qj#J?Y1caWc8(Jg*fn_mxU
z3qhaoIcpRKaY&dgONvy%u|J`GIa)^7f#8CYfZ_P(57G8HzsxQC3W-(3hq|2bvy!op
z%hf*NAF@L~+qmg6Rudyt7r^BPKiz#<+s{Sdj!SEQ<z|82fFpda)5QK>bvTdS-lm9T
zyuM$i@im*(lh>l1me|ktL)fXigSl8yq)J=HKquSA#H^p<Y%u%eZuIx$C)+p?*!d10
z_rQ^aqKsfUKH|@Qe%C71H2Rbeim7~7);j6BzkZ83p?<<A-6+!RlLoYSxakT&5B=}_
zP%dw!(cC9X^?D15`~0hx_B=bagh9atp~M@}D}_2@kB|!zW+px4%n$Th;c&s~Bv0B%
zYi-J7KP_vQvYIODeV<a}$07sz#}on`)I!Z0{hacXvKq0z68qY~rJ_*pdk2i|rFpy{
z8z(f{lZe4y-KUVx^aB}0fi&}0UkQshFLNC?Ksza#d)tN#8p=|x5VNQ6dV|D*{9g5b
z9;ZbXcq*wzjGr~uBaDSQkk*Y3%K{4pVAt0V&V@gS&u_#FgFX;9ddJP-=0NtD*sF)h
zmex*`(|372P6rr!+2ZL>*<RQMe--(V(RDFakA|(Fp?*CalLLKr^Hbsp%c?KDNHyy6
zd$-$m5vG~=dbjBHOH1ioG^0IN(PwH+h7I-Ou|iH27R)5>da%Fp+1#T+;|7L`IDIfj
zL7Zd)*Jcuzb6R{8U)}PK*oA_S&F82mItky}r5x{fo+Rme2K_g`nU5{tvIGHd@e+8!
z4r@y^tGdbWN&v%5k4WF_4a(x0G~L3mIVml7NqW+-nE__I^Z|cH$g%H=-g@?CSll?R
zR>&1?G^rhn3)Zr$GaE;kzO=aO!^kdc_9S1w6(+R3c>MR4N{=vV{56QFl+iR7vo(yn
zV+MnBZq*y3hm*p0-OgMrt=2YlvqshXpFx$SW`*g?en5I3E>XF{qyab;7sXeutMJ5n
zQ=qn0_gG?~0+PO0``S)}zO}GRL6&YWb4C#%`8>adI>FVU_FrJ}9WNI0@?V;w?Y#&m
zt`n=TUe-g;j*gJW3n%W;-AO2XFqGqj5TdgWTa{BGj|~}6!r?o`O~wnzgoR__B-D8S
z^cRcfQh?}1X;#$D<pKSr=e!w=v-P6B{SHpg{b^;3GtNa7T??3ZuCd4Keh7uFZN6pS
zj4hgNBO+=2e+^3gvoVfj9ZKrI5@*S`>2pWSikqqsssD$WU!56Z#GQv{`KMgBVRTo}
z<AD)#{=r*jhiS`Ye0-H{`&Ry{2`RSJ<z>L%GUy@A)QV*EM0VqE_&>JK(4C#`f3#5L
zlq+e)yy;GgJAW969a{&`>EPz-LtrwBNs$+}y^y9Ep>=#(MoU8SM-~2O>RWMs8WUq}
zaKYe8-Z^xdg_~ZSS9`sGdZ+N=WGLt&?gkm7`@>zs2kAOoLYlDatdtof!WrPEd%*>O
z7H4(GIUG({4jXy&o83`>>fDLO{Ta=K(!ES&Xy@%=6WU?pEo|p??EG(EhMaJxx(I|?
zjhZxuwFO$9qZ=2@e*|2;j@PynL|^m>dpkE2hs9>@Xk^x16xNy9bcCpBAa8l0_|Cu$
zYhe~jd@;EEr;H6ncM6Yn>gguVz|RK+?F`^debwVydtN@3*1>WX(_D|}=|aTe_JoMM
zQ5BPlz&zCzAG%^2+bE-lLCt@gnH3X{@RfCSLkpL#1(WB}z5gZ8=hkh<?s4cxIlU&o
z{vY-{)8PM~J+GSA)p~N!{r~}S$_~c>yBnyYWE1m{jQ?`e&?M+jMMIF5La_@Q@$^A~
z5ICBEJT;Wn%l{;8?lNd|BUAzj0Hf!iGdF-C`~tqMWD{JIEdEfzGMs%j_w9<Vv-|D-
zZsqAD77UhCxczIB0ear=PoK^lZvm68$K(4&GtI|wFrp9IaQdnQtR8;0@i*9j<c+)-
zK&GO{&4Wza(u1_J6_oTxao#R2-a6m*=TTevY>--CJccDKLL&OlUomb!$*vduFuYQ^
zO&`1(RJxQZFc=54J0f0~)T{{PY-3GxA+b4OVK*r4oOqwmw`p7C5#?)Xgu4k$2Q)Y>
zMrT>z(+1FEug?qt(2>WDFVx-K0Z^Io%v-(Kv?viFq|iiHj3;QmZc$DYRdSwx&wb7O
zCKTKLT(kvW%UVr0{oVfk#prDssaUOTsPHvdBm*M<8nB1)<WuxpB0DM)S)_URt5V*U
zO#2Kb&nY#VU3vOTyu+e%t$HiWt)FM)Nh8{2hC5O!&#2LXSr=J`zsu>pQ{#+CI&p}J
z>)VB9cjS+~ra(p|e;c|1zo2a_P44GuImmJHJC0OnU8YdSPTdK$1x8NYTMECp63BR_
zpwhxab(|8oGPcN_06I>k;+h#*^G}PPE4#iAX&1Wfs}vx!<|(9IGWuhu!bwFrGLEc3
z<*PmD+i`ya;!PP;lqFLNy-afT1jnpyuSumCTCSC?@l(Ei@cTbRQlb{B;OAPrE&rE4
zXI671_%DBcLP9_(o5QL1lLfcz&~E`hZa2y`aum#;|40JmkO?U_nK`nM8RQ(cy?|ys
zLEXFO|M~m9b2M|_nP(@Bi*6n{b0pSdSuwy}?NUr*ZaB131%%DI!PrdHGJkx9GS>mo
zv-S<Akj`BwusSmm457Okq2|8zT^T<6jVPl>S2XZzi=xcdD<pCz9Y|{H4aF8V!LV4J
z_SS6n^hHwS1t)#!-FPjjkYJ%J9>hol+-E&@@zz_}`e2Az!ua!DCzu{XzfvaDs{-7C
z)!|>E4dE|!=}GN9|Mi({{ru3!W5h`tpLm2dh^KB8UGqcz^mD=iB~ENHc}_5_-_r#)
zDzcQH?$1YSu?N{R&fTE|+3=3>?XUVEvTUTKj-gt@U6R?p-;|!7ax12$g(gXB(HZV{
z_s_8GnS!uJS9(8v33=#^L;b=H7pedX?}TTps2?rVsMSKjGBcm(3G2{IWD1f?F@#zz
zuFad)DIn3lItYx@(M1L010%hg7B0o8m8wsFy2VFbf9E$Pu;I8nVY4Uj7apwQ^9^*I
zBH6pyPwUNw<I&-~O7rkw6tDe-(;VF#t!^DoHs*gg`z1?lD97=3nEGQF6axncyE8z>
zJ4ggwT;3ApK-zrb{+71egSj}$1okg!cabKI`ClV(G~;o3;oQOWEehJrnO9JOdE+6;
z7Q5LzWMCM*OaSvi9C<Bf^+9WZVppOSy+bTEJ1>gk`X8JKC5ndx(`Qf}a%T|Lq$Q05
zE%mGMF{XWTXE8}s0#EU5nj-*NOvXk5{m>1g#m^GIpn=w^9}=LvZc?2PqC6UU{=9$%
zO{0u->$wbO&>w}H(C@fmlZgc3#dL@&)w8XruElA~nw+5y{`89Ou!KZa`oiBGUrO>4
zeb9;ms=xq({BOhD08y_DyJVzHt_i|9#;gZ_4Ra(4Q~aO=c_%l{V1T(a<&H8UXhmti
z{ZxYH?msB{*?&;<y=mn_XV3f%kgUDQLTiEWq6eF<t0tI4|M<*d-ti&3W6N74b9Rv^
z4{ZRGW6>o(U%!SBmv9sF!!^_{i7rf^KnYS+9P@C#TAcNzpfZ7iQ{syb1VjMfQiF8$
z{(Ja1r{N(ckW>~pO#X<P!|-5(*;O<?Or98Edm&!E7sv{{)z26$it<BgIP{-3dD212
z@JL*@4$0&Hlw5Q%FO{lIiJ~rV11~n|RQb~Re?#bn2GfZH{|7=(5FO}Ep+{kntTsMz
zR^vhB&7$2{0xVqWFtk>J!yTPWS4Re#;*){srl|Wwo?3Ls{AZd%T#O02<z$QB!IWwA
zb~N|z!8ZK`-^st_b&33LnX?HXs3RgdJ&I;FcibEKF*<PNr-`>ohMv_U@(CFUiT4~M
zCY)B3UDldov+3!r?*+;$eC2Y4IspQ&_D#v1r<TdM?rcIA-hj0%x1n@v#k8UP%LX36
z(gWHW1R?B2@LPV|kbS&}00(b?$jQe&nGA3-*DL%0@W1cQy!4H2CW?F{E^c~Sw+NB;
zFQhMf+LA&gR|RC1q`9Ei5hGX4n3tNRa~ahGN_<Gw;35G~EttG5e<o|W!Ie=o-@6YC
z%$oj8HokAd8~uF-knj~ggx@Xve*o(f*C0tfll$UdLrc^578(WB(L>raSeh;C1>f{d
zpygjBkfb%EA^Ln$kHW2Q8k1gMjm1I(4!e{%zmy>2SW4eVRLYCWM3bzxNn=R>PR61%
zZSD^Sz0XW(!$@wWDbUd4ebUYtRAG|-^NVqLhyoP3U8u>I)cic6BGb)N5x_RP#R@)6
z?Dj+n&i9CUIRi1L_n%wSRoGQ3$|1pCKiSQk2rC1l1Zu1#e+wonr=1aQ5kn*u6_}!A
zWbetHVnT^hEWd<xP1|OE+j)aP1pSnu*~Z?`JG40tf{H>T&RtNXcgQvN>_RdES+TKl
z`OceuA!5puK^f1gR4yNJZUXG!90f3>ITs04sb;r4Z4Y#6k@(UOam00(-HH(y@n3Yb
zQGs8wT`CdvtZEBoZ0`vMs?BQSvGsM3c4C+R<;`h6yOHI;fLF}b8<J0pi`X|Y?E1l+
zNx#rOBa=sl*SUDWI#iVG@)OfuL!xq;I`21rAI;xE{TiYRQ}&7nRJl`Ui4<)okDw-h
zeeR*MpWdIrz?S%MlRaJM=_8dT+QPLj^R33BzWE2+;sq`AQZM7yylv4sC&5WNJgCTM
zN7jmJ)mo*Qd4WKrCp>Ddo6&L6zZp2qpR_aID6huEt$5IWe}~_1l{mrXpJ79_#r6P{
z*cMB%f3bq)O5PR)=yFDK*`#H0LKpB!5D3os9^FO;Tnf-_AK97lSIu_7#QC)M(hh4h
zBqv&9{R8^<;D7yZysg#6x~jq(f$5jvZD1ABVq~}Qi?ay=6T3aRL^jV?&dr4D%1a#9
zOs08JV*m*J^Ih?>pN-Cqxgk1;H<@am#o2?%tl30kTGJT7Ma?d_sM>3RKJS|*hP#o)
zGN@EU5ECzEchAVM<+=|j@U0OHnTDli;ynK$IBpf6H*D<of0*-IzWM>>E>FIyn8(BU
zXy*Sh=Q+RdtWiQ4p8h|~d0TEe6Zsz$Uqe%I`0Eam+R(V&T2>0JDGk3A7Qi2|ao_#d
zZx&4?RPE&qv7TG6mWP<Pyg2BxE1ai4`=@h-vu#p~He7X<OkGcVc-dD*d`x9!r<Hgt
zJpuIuyMuUZjYb-3(Pw&=igx>1A9LUg)6cR;$Egsk77GY7_*#-nUBiSa!>_65rask9
z0Iy}OV093b&Q7xJK5P!fG9aw%N~hu&n0k&Yh@D5NXGCDqM&Y_386RWMO$7Th*AyhZ
zo038*?(WH{0Gk^He*;@(IfF<9OFkC3FP5j!CMM5eFeR-`Zalb3#nf(w|K%s@)Sr>y
zgpkMv^!VWH^^EVtY)*RAZS~WmE1P`nx{u`<n!{Pb-1g6Ugys4S&cI83xQ5|iJk;cV
z%|UCAPaWFdPmUAGg|zHpq2zI``izQGK(Piyi9TMcBOxntR@H6S8MMuJz~>@aS3Mrd
zO#iWAzhD1QX;$e#+-t`M%R!e+N($9F^@h0PwoJ3{<vVr!#D&@kP`3~qrh*@f`}<Ey
zU)V^4u;iVY%JpS#3efxhu!*|vA2n%7(qLGIT_}c;^)M@2jXPl8RtqmvF0PnYd#hNl
z$wXO8#-{sa)F*q_z$KhwN|2rsc5wE`><HJ2qtK`9gn&<*U5?OV6J)u&jV{;ID#H9h
z!2;Ow5iZL^+sMlXsguDtM;M)hiFeD@#UHw{q5s9sJ7A0fSG3n#HA>v<{B?%;t3;$0
zX)Am(dQLPe6B{=H-9It14bj!?3B5-cv6#{$^3nNG8otLgo>V`5ht{CaCP_34Zi4=#
z?IUiX9z@~35-v;N6L%BOMrVD!uBUA0PE^07lQyvO?TTpb#!cf0WQl?7!Y)p-#0{Y^
zJr-m{&jk?yQTP(x@ai9CQpppAiIlfKl5|Vh?r_JVKKN<huZT&e)bFB7Cjxu~<-ZOj
z^^HPzjn(Gi8v9$$VQ0thXty9SnOz0(_*Q3rpo>*w<W9{sjrm-Dg}=;Iu1h#Q3mIsE
z!Cqt2u7AIZAKX>ik$5YIc+tWpU+wdCYVv-noj^zeP?Yt;9>V`#jiIZ?FpE*AV!&`8
z*JsHYU`eHaulubcfh#6AIE`8Tu2(UZr*)-XwVYS@vd3K2CE~Tpay+TQOkp;{I+d3%
zY^{-ZaEM=zCNA0jHC<=9v%dYMY`n@n_dHDPfPXzfE{y&X>0lbwhs4{MPnhJq>zgg_
z=Z_~h09ho+eCqWEu3;D2U^bs2*Z6?4a6qsz7@nz-VvnDs?j~CH{L^6{sym9vu0aXz
zOQP<iG<veCe%cS12sOzdC~^%buYDWD<(FuervMT@ZNJ!(=R^q&X{ulP568C_HFb*X
zZz(6Y)1oy_`c}#fvQ6wQF6L2BytLgUtRPi>0LR(@B7zIT9pZxn8<rZSAOS)nf(#SH
z-FfYRhhLw&74EDt83Ep^8%6~hQ4a0qn*^cD*&65^+9vR|=lniE>2HHa=RSmEAF=z?
zN%I>d&mo>nMI8Q^)ES!qLDm<@owM+LJgW2#hh5x4h*u@!!T1<?woeq7d07)r%=X()
zVEA<On9FuqlgL19I(rhtNfC&-#!4`*$mf|N49}ORJ7?iW4x7r>p5;X!fS&fyE?pkk
z&Zu$uofJkYl5wj$>10-LJYwsZ%`BzQ6%Bc*)RWcKo_H#wspvA(A%c0h4J&yj>O@N}
zXX2nOk+2a81PZZ^cjAxB9efMP&N$5mqL~rR+^V;f9``JpTQ(!o$!W)-+$o2#&=i!#
z1KyCid;J|^Ut9N=X~}B%2)~nXeXFXY=LZ;KY=bEa;L~_0l6~c+@-Ok1IlQ1{sm}@_
z!Y@u<eSS}6(ErIbxPvJD^U8_gDTm_j*uI-PLXt4q*pXGNf{span|;!3gBgAYq+y*(
zcf1h?;jR5;TS|qhsYH+xmSj6)bBa^`Jkqf(zUa)>Z*EX!`qGEoLes|X60kHn>(n?Y
z#+L#cYIr<dgYmSD93;e9GJXna*a9c76Q65i%%x3f42?*iimr;u9>TTqyDR=vOpE!c
zFu2r(!-R+-{MYL=de8PKZZ2#_fXH9mfVeZI#qM@p`++?XZhtD}?8Iqjx!ioMf{muA
zKkyH89@eJsh6UMv5bu+RH^^))8(g#m&`$i6=?y7QLkG{)i`6I*hBvM@96dn?GXA7@
z0}%{Fex~oGjq_^P6awcRc*svDD{+OqiogZm6kYa0-Nz65zuM6RsmBWeVfYXC@SlV=
zWOLbE&|XhT6XxB&B!L~G)C~~{g1sSW2V3|_-*y4+m)kZmJiwz80Lk#vKzM-%z5CYg
zXnf0ZdqS3LDpY*ih_G*79c^rHOhzGv1Lh!%xL<HLT2?RS3LXRzXTX+*kR4;rsC)kS
zAbe#_7Kb&Qw@j1JO~C`e3z}FkHRY==Qn(w^oOm=Szs!Iu!pqQ{FcRffHJXA4XiiQ!
z^NOl87~ll<eDk>-?=-0m{>I|gbrbBohem>a?xB=$l7$%X^zmi(;~jKEG?J8_VXJCh
z`F=b#T6Yp1a;um)Bsk6yyy@;A`Eb_as0DAy{*tRvAXd?J)dLK;anf83IGV<P!6z(M
zunpI_#g{5FTo<=VkT|r4O1kV~VZYMf&IfAIpF~F+gkIJaxmDRlf8oStC@ei;t63Dq
z(zz_LWn4N+b3|g~cVqc6=;yy<OwE0Y){s#mMRUx|oJBG)Wh6EE4q9KGKsz5kXWs_#
zx0Laq_(t)=F#=jkRWF3kV%zz_Th5z~Cteo*J6r-c=|9c2tuiH?ZwDsBOhclOL)1IJ
zANEMe?5$)YF+MOa$4`0w9BzDsX0vDfQ2={ZOZ?sDh<PS^DA`*$t+e>2ej<MAe403S
z-7IWog#<Tl>YP=Czf;26d)e|8^At5V(Q@?gYpxyGxWIqReN&v`$*))TpT>Ia>T4k5
zOAg!8(MC%6f1q@XqMF$MLFs)vU?_cl@z<f)i<9EC3ojD2e}!$?f0%Ts!@zWl`91tM
zNVmBEGU@yX<LU`TCjeE<5exV3A#8^kWWQ+q0wNu{7oBgRl%G~qhDve-<ZTjwksDi-
zC@X!`ax;C6{yxAFb)58AG8c7hu#%0(<VC&MwnLMy*hKc${+E&Oy=P4>Y$Lq`>A2jR
z?tBdursBL;UTuQBx>tR>NPVKm$g@9wxk$bLb-8%vYd&{G;0uo)*2W}Sf#vub<P{?>
zAr#(Y6@$qgsdl>wj&&m9l(+}*_Af5nVKY*^#oB^mt++4gY{_Qi-ii0?3nys<^>=;{
z#ps8{D#pq?ijl*`z2qXac3bG61p(eR>C$Pe3IXV)iK&6QZj_d$ukJotmk<zdB=d)!
zBU@{IN<1S%6O;69mSU?Jv@m`x<Tv_VQ%3x}{l3-4ZrYc~c+kMAj70$`xV{ptZ0y*A
zkY`zk5iflA|9y%J|8f$Z-A(6lSML6!c-*EjDUt*fy&~p}>WId?AZEj=BQsBKC>q=T
zA1Hly#MU2+@?I^*VL|*MG$j%1{qN3u7MVi3IKn5AkN35on5g8YT$sq>x6Gilis(ZB
z7EQI3KAVQ=`%;VzWm=#rwLseS$nZnK&nsB0Iklu{)+)pC4)%~)qc7DAZbLc<zxhfK
zU(?gAKTbyE)yJ?hUPEcwHmzEwOz)hNf70#fkaL_wx=gQyDA%ezz$44DOwWmpf3jhY
zv6Up(>WMaMFKBnjLMSoRK$N=~G*%Krho*G0ZSu0fVzKU8?*$Op7q}DNo5s@<{FrR#
z(Xr1IX<dHoHuL>Aw!uKZ@fh4zu^99%O<^TDk%HGtrn;&6qrB==M<u)*5+1ffOR>DY
zN8;4z+et+o_;f{Wevupnrz%Q!wn(#wOBlwVq8j%2_=<SYP8V%t5$Ck%@H1+99D_X1
zV$4o@LFSpE$Q^)<j~N*F+Zb|j7)!&#FwgSY%v-$&uWQBKHZCe&!Ge?0sACM@$TBXM
z-r{$nPy2&0B@~gkL4h!;<{Wz?d#yR>7nyRT{@6E4-IK@jo}m;utP3;YZ_zxW%Cz!7
ztO*u8F6mJs`&-Vh=ZRHl`maLy<Dlb-;SZCGZ>E2bsGR~h$dEWM{@W25^<8)sJD4*2
zkIM=Y{(HuW{eeMbuF)b*+ah&^zeDIRwO$YAQ1?JW^v-09J>62fZ~u~gdP|NeRc1x5
z|1~A#N2!!3j5>-4NBjWgk6c_Geccag=t)rd!qIx;?7$g>fY9iFXYJ7gPC%~dZ}y(J
z`^TpNVa);9#Bep@1gQ|9EZKVJdg+kmdhzh^pE-ri*m{r4l&w!DDtDeVb>bG!o%5g7
zoE<iGcH4NrRQ}$SDiIQwTn(Z<B|SVguJcvFuraz_nM)8}gV1ry&7)%=D;qEgSRFrp
zz4B+$NJ~$v$nk7`&vUEpU5)mF`OwFCHGplbIo<@mUwN4CbW{M@31Dq!M(fRh4Xhb0
z^wx0yK`pMFtTXj!CTJlua*WglYtsu><%v_B&1;8t9H+eei8?yjX2S@b;1_Z%PG)S=
za;;XJJhJv?!Ciqk<wge{u!lZ@Jyf|7Wd1+j6af2X<@3XMT>V!SHi=50@_A{{$jK7~
zp7CxM&*ZKa7wT~?^?faX!04^F=G{c+qqg#6Y2oAK_@kLjWmDt&-)&-kly^xb`b>}q
z4rN*bI1*QfqUgrMfujQvgD7FDaz^XhvWv&vM@L&*>i^6p3^u5f$LcyPSWN>PG#hMX
zu(_F}%hmzURiibqt-+J!0}lE+AI^P;JJWey#H(p-l>aZVei{kC7Uzx_g=L<CItilT
ze(rDacCB2~S({?Wy*y>A>+m-Jj97@N=4x12K%K3LpRg}myugT+Ht8{nj>P6S)timE
z`Bj}DGp4+$aClcK5rA{*inTgk>;zE0{1SV(j9=ql#}7>=saqlxuaSQKp;R?Fc{D0F
z7!9YMU&7Bu6RjORQq4E>P}G*bv;9vD&s#nI<^290gK{7Glm9itKVKeamW{lIM$Xb0
z@X2X0doiIS)R6m=wHohs)$n<Vynoe?BQmts<$Y91e-ra4Dy22OBqD3<$+`3d6DaT@
zln>Sjy^yPqO%i1GzGQrX^yhxwqsYVWHeBC#8-ic_`s0%=7XEr7N<Ara3!GN7Yzjkf
zGPyFclrWd%=30X?c!*4PwdaG*iL%w2nY^utNn{7~z8|Wu$gC0uhP%Fw4KJrJWQuwO
zB2N)d_Ds^fVH-XT&B4%wY=qxIc{Zd05<<#lbz3aT1nM07x-F&GHEP`&2BHO*7h!&z
zSjEY*r)0XeUC4ycvjyKjHa<?!^5J`jl+M6Knff^uD>SM5I)jr2S$Nx^+PVs2p9wIY
z7%PPwXk7&Q6)-~?u%b+zIR_77Njo9w3ZIc|BAq#<kDVC>>WvmEnX0e2l7e)Al?@DT
zt~Gy80ekvq`sIyiJxhi!<HF?&-H3qDU+KAn3)%uLl_>S?VHZ0fgSArxGqwMt-&&aa
zw>R6>Qo*|yR9FyeI}`Vw%>7IH2fZ)1DW3Vj_ypwZp~~%aPV}Xim2H14_CJymkqH|?
z0GV2)4e>`6za^u@gqyK$<_`jZC8IOZ!e~PHIa8C?j|sDSw)&LB^LZnOP58@}VNnvc
zHA`8MuUf*f+b>ezRcv@Ew7m~FTS<qy?~!tfpZF6pWZE*J?#l=it{nUo^=sRR%>0du
zO6?_vwTzCFnFqRQm(?n^Nk**rNb7o|#fyCv;@BKRYY0kif;E|br}d!#{zD0@2-3=B
zl&PQ?2d_9a9N~DYmp_}rGz?>d&&Nwdy=ZIe1Qzee+&P2<QjN+`T#yG#41!|G2Q&?i
zzL<pQ2l=SIybJ^Q=VTjsi7qd)kln7%&CmK_mxUV`(0UJ^1;U#!rO{wM{cGv}!>5}l
z|37>>@LxdPlnKW$nv*i@ecS8O76D^UzPs8{#HQfU>BpYO)&4UIJ_6?|{@>hkE=V?-
zuYf95crezdGEUi;geYa7Gz6}nn~1@1=+PagO6bNe<Lk9i&>eq{`Ph^AkKpA8i$kSW
zY%r^nZRQJfsEGv)l=*%-(|mgu?Rbq+fU*MoEnrM6d>xqDTJSV9V8+alBGq`tl4YoJ
zbW@cVKQWw6*}dKr{Ddqdme`5k{nVkU{Ei$OGeL~mcAjhMOM#gjijg!Mrf&I;`^3XZ
z>N6rTaOXq7ltY>E+8_1pY-t({ZT5T;dn2FwrpdKbyjjJ=M>U3kFtSzm$t9T9<ctH@
z;AQqnmcytz*>cOw_B<nSEJABpgy1QNf2VC3rWPD+S@zidOJi6IM!KhSBNICNxm*+(
zWvIGZ?^@T@2;iwH^pR60i3u|@3BI8PWLcXh9Ug(yW=iA-SO!^q*7PgN4C(JLFIjCS
z+A(mcmiZZtd2AUNH)!|GJUI(5l6HZsmQSLC6uokTyQmfe&Tees#Tug4)uFxI>~0SB
zNJa?r;VfB2u(dZF`;L7sC%L!IigNKu|8xhp*arUbz3#kw2JO!e<|xoSA3=6+<`e=9
zvdGw9uygzCekd=fYGW%ScRrtgCr67uF}z~qA6*}QdHfip{02_ndt5#y%uxp@4+rB4
z)+I#HNO@6^{EJFD0!nkGJ5DF|6}=BGjO#i5NbKPsw`zM)jRjwrIzQMWg|W!0RHb26
zDitFd@DGF4)k3d@p1y<d3dBDN$DfzJtV*Dc7o+hq`P2RvC8rTKZmuj0DWeUh*Hw{7
z_u3AM)1^PJDPy;{8P|^~0<cm{V*6*#7U6F0U!M`fgVe~M9CBnm5rgY&X|cB~6nlUN
zL}V;hj0J6U7%3l~_d~JwT6OFM8NZ*{BtPmwX*Nfyq+2s)^C}2-nUXXeTLl@jSEN_r
z%S#=Xp!x%0Y>Dj`?^@lR(zmea=BK04Xs9z$`n8YCJ#wr?_*Cph0EFtnW=!aI{Rn4l
zbf|q0NJ9Ex*BFyi&#U+4ir3DE)C4NDLglCpy1(7;Mq$xOlDi|#qB%p8E0xF317=Uy
z1FJs<4G+VGl?>;4qi`fQBZ7&#AcTvn*L!&(e&iJQYg=*20*R5g5DAG;ZyR9&7hF8@
zH%<kV$wdF^^IX&(0GHw8G;dY@$75P{wBVAIvb$lR_h_VGJC<ExK?l|FL1`}I6WxIV
zATHhpW7YY$S^Qt)tg`u~(yfHjV@M|PcRyG~eVBgarB*@_ZNwtS2^_({n@0|%?bSVB
z0)l47To-Vd_{ZIG^DO_z>aSMb>)BkpW2hyRPL5bDVFQ9XRn4V78_aChF!!2?Z9;}W
z?MeIJy0MCJ{x)+lw{ul<i7f0G*0klS!f%7xrwRDK%RFESB&Nj_8GpnHL$KlJH$deb
zIQ7Dvn9J$gN5FT-x9p|``KlRJCK<FlnV@YY;VehAPShJNW1>&@EFFbaKM<gsHdaUe
z7L@IQNCd1)q8B(0?8t3o`K}z}nHl73TfNP_6oQIWuPdz-6(eR{CPOq3En^8L#Dkqd
ze+w|bkES2+ZFm@J3S_i^li?mL-HE{(-YiqA!85(>y1T^-NNm31ZMES?Mn$gw1i1ms
z_%!<k{H9B*axG)JHJCFFsRDZ(51;i`3d^&_8GxKCp_nL&z#=Wlb7|q6mcEqA&@TwF
zk&ynF8oRocWNZNqN)Cn$yqe>-lWJ7btv`ODS~DI{yDXmQ^Wrx?PpP&17VI8NnOawL
zdumN)S$=Q-MFr_^8vHw_hI=oR$82*ukkdFN0Um(aKQ7QD40)xrLbo$4&gD8=y}>!}
zZUnN{^FSgZt{3@nO+9CY#;Sy0`!5Suv1l?$6+An?8y3SgoI4j+DsKwGYiO7Is5ahQ
z#FydN{~Kzj;zi2XVQ{9rxVDKOhI$=`=*w`Uhdo99VE;kSrPN;Mh4M+Y?<hKDk3S{a
zFdzSYBu-FX4=LRZ6}s~N-UMhD%j2INqz7_dH$G7a{hKSq9^+ppYckEt{DVHfZL~o`
zbIyD9Hw~+?z3xbf<xDRX%x7)dL(I|wJVxa(D+|0t$Lgg6If*`2oShoaVtn<F<Se%$
zGsOtKWW;F8;9|wZ+Y0ixV&vR#-MpA#mq<_zAVRB-ufMdTR0%DHMtT^r%9)9o{s73!
z@zl8g4vzZP$RFTRV_XL}-i}UlaK6m$#3>r~xu~6CQosAEey^@k46q=S^e6qI4-wle
z<(hHU@qaOPk3o_=QKRt3wr$(ij&0kv-D7LVwryj_vtt`Ow(UFr=ecpezVC<b%&xA8
zjyO?K)p_##GT}w6hlob%YA|@1*^oOH)`zdPbah=i?G#$U0WU*dA~xQu5dDJ8{`KzH
z(BCQ*^M{Gnc71?7ao@-DUd2dxvGK5*(hb1((!|Qe$E1!>Cfj$e1<RvAYUZfnK*?Pj
zRE{)Rd5;>lm*qi(<$D_^r^d>^`Z;N(0pM-XT4lmsSde_5c|q_s`k!KLo4)|b#`!Uy
zdEDt4$LHP7l^}(WI@wd>FQpr0MX2#^)I>uO%%TyzY+0QXx*~vcg(&hU^x_}4`!fK~
z`nbA32cCeY2Uk<{->}h;7BrU>_&6#dIorAdDItPzh6V~RMi>}P>uB;9{SdtKnb!(J
z#<$6OCMd6A=)(D-z~UCf0k?bW+NBGo-QeQ-aNc(D<@@}Uk23gctw9d~quhn4o$7t|
zJfu9WuAPLv?Wn><4%oO=DhYxEDH;G0NfFl7?|&G+5vCpzAh*g|N(bN+K8`fah9?pQ
zS7rt1%VQ1e=bs1#*)iXplhqeG1?|%2pw2&AA$<S^PKI|jJ9VJk`HQeIYfpbb^YQV)
z84?yRg}5LYc~LHjP7w8Aj91|qz~brOyYqv*W=p)yZc&qto~1&k2<HcSc*^}K56Zrz
zZ%7Jmr}%7Hi%(&T!fOs!rd4lNOJBP-d^q<z+{$w5eJgD!6|>|~cfCGPfTW|46Vb(~
zL$BwP?F9ZN?68Eh-v<z1s~Qk+kGG54u<P#kHQ$0+6h{v>7@D9kU0{}bmL+Cev-)Uc
zR{1z~e?M~mzcOu{K2ADZ6l_2X$owzI{*DM&$fwsa-`~fLwZd0u{<G;-enbOHW+K1I
zouN19nHP}g@oFVv#D0n>bHv}#N?@0*n$Ms0F|^LJ?moLTay{TWkZ-<=Ae3q>o*+v5
zUATp`1%cLGoxgp}P8(Wm+Pt<Iz;4cHNPcsQS<!XTG?R~bq&S^F^iTp6Xi2{(Do^ry
zd1vv*PIyQm-=X2~^FQ@oJ@*eW;&-MpIL2mPPdcgTye-7aLJxuC%EO>*5YM`waPHcT
zbEH7duyK@xHd!^O!4UaQ3Sq?J5sylvqMq!5IFXwW^UJdccpsAR2W-RrJ4<l5d>Xr(
zOt9!%yJJiO256L%w!r~n)KqFI-B)5E1l=My62+0LeDRM7sM$^(6!X^c^0p4cT3<))
zLDi948s&<A7)=`nw;=R>mY!*xe0PG&x@(Rq>F0Ky`OWv2E=0!;1z7~{Zy=wfsu5K%
zjjE+4B|bekh<OrQn}Gro6f`B$yS&t8Gk4yY8Q6NJUo8e>O|CaU!q`QP_UgHEVk~JG
zvz}oyug_nLJnzjkBRggbd6CKp9|jDO`Bh;L!^r_IsxL%RiAS&Y1h!mLCw5eKL6ne~
zlw^NI-zaFr!}y7w^Kufq?nqyRgURW;5H$8)Ad~-h!%G?ZNaU-@DT0166wsY%QT<N~
z`%?@z%`Cx=fexsZsPq1QE<_|=ZEK0*g6e@K^yWTvre4YfRodqVjDmm6D8MA)2P$L0
z($l*Ly?kwz?6_7O^o`Rf5}OX7^=8Tppa&;}XdeX87q{2x%Y+`Xu%?rPn(o_X@snvA
z;am*ZG%%Uu*!w<GY%0-Ag<9#Vfoug;mjb^d2-6RM)dPelyE^<RJ$btH{QJ@lH>=0m
zD$<IA7X%RV5RliGtbg(YNOL9XM;SHfCCkuCenBhqd0UtmxOyw&YFE?SXu8;|>#@4z
z22*<LZ_x#lvDq*tuWWe^rm>hSs{tgA<W;Wph<k^LR<urkqaWloPPz{1ynZOu?tUw;
zf2;!PD-=VSZiDbmGGZFCJtzi1IY6Aaea&gd8w!v4Q=E#1cG1}+jWn-<=9oqszI5O&
zSw{dX+^UMkaVf|1A5{QXB&(TOEqd6h`d%>}eePtAj~1Hnn(as~V9sO^g_4jc5pF=@
z>uZ-V_*JeG+JD1_P6DS?hDh8hV!*9jGS15rOAw|UOEqNawb0H+xupWY7Yez37qZ<y
z7~wT29EF^9XG)S%&ZOu&##&2Ls2U8JTvxNZBcI-?X{^`y)OmrEx_A$fTeOi?h}OpM
z{?0xF_p$E--r(Lg$~zBSFn&tYQ!#_E*@mbt2r{Al2}kdV4zPo)&eCGQ2!IhmEW*){
z7=mmISFFi)p@<F5ob~`1w;t%GIcK~^-b|?EE-ZMOC=?(yeJ3r27InY0`S*QmsqMf0
z5WO&0L)P|pc&dNTGlD-Ro!{)Zq`~_wF8LJ}c=)YEJ<scGj{_(bWd3_HU%g5AY^Gd=
z*DmGwm74cs7t(xq(JCkie^DREf*7}+5Wx2^gLpOq{IM>t;t3G;8b|Pd354H{lyxM9
zFzkD|l@RSSU?%Y)d0evge<_$LmTqK0zX19^>b>uil{!2Sf3kVnkI&;CIDX<`aLveT
z^l~h(+(ZZAM)BUt@W=d|i}bn?$xQ*D0ZHC<5T~KyJ^qFP6r&{k#+v^LCF_W6A^tqr
zx7QoC$#Vqa13)=%`r)f%w7?mwb4P<qraAKShV+w~VIO2kZrV*<-o&YO=F6%%C_CA!
z)a2`HwCLO6pW>U~_dO89R{yOagbN6EExiA??G*mzo(oy|q~CRC2b=-mGMRtJ5<8Gt
zqyre`L?|M<)GCwX9FfGMGNg}4(le`cWhJK^szHg!0id`8Oetts5$yVhK?Hij=`U<;
zHB!N9XT5w&)(s!#_(QmHG3>8Q0tFbmY^+3=a_2~Nw7E0KT&V=BQeTYuuibZ5A#_3P
z<(LZ1pOV<`y9q`B><8Z9OFrM?Gv{$|M-f*QKBDmEUjhQHq{wvf7Jw_m;@Z+-USGHU
z$82+nCt#~kABlsbyek^Q{&`;h-wi3fljiyDA9yr#H@G8=x?^7EPIx;ABnU@Tm8gtS
z0u{Ar0!T2b4<2Ojz}y(lIg79+Lu+=Y($l*z6dBdx;V30STN(CZgX%+3I<pj~%h?=I
z0Zi%9{2H_`3T2+|{L+vls9}osyA-a~7RKG6RzQttm5-99dW2|v%7;h#l<FH27K`vM
zd8I~JDj%d&J7Gzb`HkN(23F1Jymwf}$!W9d{IvX^I+E~`rBH6E;hr)17`$h%-?GK%
zk@T=m11@Xf!!+H@3lAE*NLj60C57NOaVhogF(JO6N{BsP#<y38k8--(jfH4S{N(|c
zKmhV3$%Hk|biSY*+yiPN;5a+k6804S)iYq;<8h_X0z<Q06lCR#Yy~m*tJNEmU>rC+
zKgiyvKXJo3ub3FCxZP;=53UR$fp~4;G;{NB@bUJN`UC(`#kxDXj-u5*uiHIvUgtUj
z2?}F=u)6eq8h*l`QRQXr)1F&_q!-g$EdZfqtswcYiRdWm%IdNOp4L&?D6hf)^>4(b
zZyxrE$ZS3RcW!7;wk_}ddMNHQuoW_(2jFZ{q=_h8TYeebfu2;Xr+>hDkC}o=3tAKc
z&qT!n?8@bOR(bK)iTF#1UQ}_)E>xoCJ&aqomsK2+@;A?Cm6J<ZCbNu*903ZE;hFe3
zThM26+Ak!T@ZJFoO*1L2c@h=M_Wu#LVm{tm;7dkSWQA++u0)=<Eg1xO8bL|W=)z7^
zdt}nG$mgSdh!ebB(q{YyQ`UZty&emv1Gve)w~sLGpSAdwAH;0pM@a}F#ezxLFt|zf
zYS?n(Gb=5M9^qvE;QjzOz>k3Qku4K0X+VSD(`OY1bL8(&7Ol`6U?#?vWH3vca@7J0
zI4cwv^C^xp)?3lVAhOx7lUEMPS=I|cn-kGZyZv2q^xglyD{5~=KKpyztm%;+)e)S5
z>g2=*ZgTtN4k>j%)T@Y|H&_gmdp0&;wWF1xBHsN@Jh$C8|M_4UaMz7*cBqA+qCUvt
zMY&3Agb42=rS>y)i2kZ&Dc59AoK&W_UI48`B2X;h_IQpG#_ZjG(J9lp{7=&<{g0-5
zf&3p$hY7Kq{r@E0_M6_3HgeD$@>E%aqs=f|o9aIx2dYV~)Mw!-03!@;)R{TGyOw}6
z9bh9TUGG0bM@ZcNGYU+N&B5W(vhuF60mqat4c|^LYr&3?gtArMlYAD%se;Y8fy1NP
zl>Yb0+E`}Ng*xBUEsA(s_y5n&+27K0EoT&MG5;Z17PvojQ0HuRoB?!uehpWubawwg
zK1U39SiOxhwj<}R{@XsUx7Q_GKjw$dbt4<f&$;hJYAreSFTj(X$QOZF+%^ikQ&A|m
zrsANGl&KiOX4J1(96J?1;qgUi54&|il`EI*1+PT-d0k`&v;41^(}4ZTmGCTM29_|m
zsbnX?1w3MT9w{RWHraN#e)yLAIlXd8_o=r=s6V_OFU+sb2!>CTy>Tn3{C@hw{<2g@
zj5kF~Z0M{TjiW#h(-8d+aX$?!A>)5to0+`MWljPd#J7l%owGcLQD?K4m7Jv~li~e6
zl^*urBI#FcXbz0!dR5aqf{<8Ek>{`maeM&Xs8NopR%FUm9_9)soa}kR&7o^BBoSu`
za@ob7&o_CS^Ot^uK0e3d!+&>gTbwVWeFB0|G-)V^h1`O)H)<&Ub2#Y}2MEM$iJ=X&
z1EWd-;{ndU(rAFF|8A{XmFjO|M(DjDd87?yC2v+v@7U&`j;;Pb{)W=_4FJhfr2VJ>
zfyxqV&`8nN)7^uR<fzni3b0hnK3BHF%i@BP%WTw&cQQ7b%7%M^xKSUeqMGe!OoEl!
z3}hqVGAZImM$|g+9<sMHhqy7!I<wT1_exXwQgRt@Q$TXxQ=<CFBr`;*Yyy`kLqJr~
z3V7k+<=c$O#GM#5%!mFv50Hx@xEoEZI9b^Le77)w^JK`11(zS-L7<X?QuqEAOW&y{
zJpq5ZI(K=>!erFPGx>Z_9I<~VyI5`BKv+z3s5Qt1d|w?J%TQsvk)F#=#`KSGSl$Jw
z&y6LqJ!2?RN{mr_3;H;8ZnwwMM?E<Rg4b5flsU(dZ?L=jTyMW~0o=)N<>BAP<)626
z4w{Kk5@$=HIDpnm$Q~J<wXTx35Me=q5m4Ay4=WP{6B{LEVPS0saBgBP=xed&YkqO-
z=aQRtLAb24+M%%~ikN5XBI_D7*p_-fEFkki(fY*xvSy~BZ<NdsR;Hh+s^Ag(gdsf~
z7cC5YtxP-8pJ=6G0RXitt9AmVDn8(j<ADbz4jg(-b9EIoEcazMb#<J=OeQ!I<BZ5z
zYBM)2F1)Z_lm3$YB_$Il9GChQdRC<6;`SChL6q!Aya*ys|Bt~ohyHPD%=E+n#?%EM
z85;+Gg#_xV43>@CdmLbMaGxI6FHckeXwOKH*3VR2@Vf0^18l%v9wUV{`g?eB^YJN@
z9ba4y?<$$$roG<L&joK()H%^0#A8(17UU^7eg2euq5IHO7p!M!p`3@@MfWex;hBZd
zJ~U#!d!G(FVN+f_ZNu`>6!ZJ|H1O#eVig)Se*bJxHodL?Fl#b{ZI~HPL~@lEBZs}T
z$tpjbE2VC@2WX@L`bTEWXRp-gU9x9(iOMXj3`Kvz$O;r5TPjPJH)`FoJ8^HhU~aXo
zP!;r0`?uRdEg>_=@|YSWu)W)$oTNSZ!!yOXfp&4xz-&cv<7Z27tscp5X|V%AlS6Xf
zWh(A%j(bb^VuIGpCS+5z|8yKW&&Y~r7%u2pR9UJ$AWz7oFSmkZjA+{*gDewjj>b)4
zRk5q*l;gZv*F-YO`Zc+PBoEmiV*cVuOAMR<zf1Gue|#Kbir!*k#g!1Fe<$b`{z<rB
z{*RB#IlkfpKp%Igm+$ljJ<CjUGEMaqAX@~*lJh9x2i88{xba3)?Kr1ez?WQC)rbl>
zBLOu3ty|?SL4}oWN9TY=Q?A1Dh?AOs(mCQ}t;(F&jzCL~X`bPdJRI%uwUe!J2o%sq
zrNYDV3U2Hb@*K@Gr%_1y^-m6W>Fe(smJ;Z)Z9Tt<#Mf*fb>kcrg@`A}yI(Uz$l-Ec
z@11H;v}g}5P|MxoT>j)K!xq?az8r6BgaQBYxFZz`vdHgg<-1n)JI<@RrtN{xPAA`9
zkt3r<>Rb`La9gQ^ptTL(m_=9Q?W1dvp%To>fEZqW(Fu`8FgiTm?K%td2q&->B2(C3
zKsAH5>c>!3Qb^@+?5H(*A-Ku?s|b#%vaKPo+VSO>Mb#bJ5>uRdb)j#1HLWC-fLbS_
zO=DtwInT-pA?RR9qQ$*&!&vYT<$IhaMt8|3oW8-X^m_gk8(FoLNk|{)<XW18rAAc-
zJpl|%Wf*7*72&<h1+_8pzTU)VdXuD(^yHho@GuMOb6YK`jr0b8Ojn?;+)hnnT2m2O
zV5!7JP$W4yD%A$WFvcX9n|^cyfXumAVqSxK#u%LnUjvQ}wr81y$_Uu6_6A4UN3GlJ
z4Eps>F;F$>HTVCk<YxXy$;msq>;*u0Y9hFw@w||A+lVPd$FxFgYS&-nY8OjA0zX!1
zDYmV)xACUK&FWD6ZK$D0#aPOvp_jvJ6R#tg7>*gEj&}1*qpt#R0*~xR#ZXmGLggtH
zG|9G#B*z`NkvT9I_bMiatJ6O(1Lf{fbrF?`CFk=d?=Ikvw-7yo6OM;Um0<*kmgTb$
zIjOM{WtA;}cf%~F2A_XiZD;7E%lJ;YiNTm+@^qFC??UaXZRd7-nQgrN1uYYopCw6+
z?ATon;u}W#4N(KASu9zplR27Sv}&&@X-M^1ed^7R-(J?>tnq(=S7Dh+R50NwK%t}~
zX&>hIufg*v?eZ+^e37MNc4qfDS~}^t=+5D3U2j;L$*#F`dN?>ajb^vpdv}mmlX>ub
zw$0tcj-5qJSXI>gnA2BDI3my!(tWtnM;0wtgtk^g7RU#P#<>OXM<YzeAUqLpIfe3D
zjho{NROOr$?z2Z!^2{EKq!}eSF=cnb(Ns)i*Q$(B378i?%cX*Z&bZr5i3>}6LOCfD
zo|poufb?OpzP;WYh2kbjV_wS4QyB?E+C>8n(^1)i_|ri6DT1NjZvXD?&N=bDE!^JD
z&G>xpe7^%6BrUAz8hvZEy_tN~djKe|^E4#}pbtJUA8DA!JB1`Qc^Zo|1aROFFwKx>
zsu>`GL@|1L6{pGeeRZ|}gk}2Pb0?QhmHV8G?>cC$FXpY@)Kp36B=bsxgw(Qe8$Dub
zYkPfMoZpTvUYCCAgx5AW1r2;XoL$`xKOYZXqpJY4p-NY2#}W#)wd#!&HO;8zUN*TP
zt6|rFb$wJ9uY%<J7l6!Z5;Rtx^_3i5o_k~%?GowcS5s)NK_YCGBAmc0T44j_+s{I(
ze(nSn1LzavUSF<TNZWmS`Olr<GeRo|rt>4zra6CBuG7pM>2ql~1*kh6Pu=qq%q*90
zD~$nAlD^W)F5)uyP)T|G<f=I=Jt{mN=uEgHyWb;9I4Gc7C~PBA^Mt!6+6J(v*{Yl;
z5H1bzLuj-gPpDM!R>EjiYFv)?alN!bO47PTiv9r(!$31PjC7&hcqF}7@z~c2tNl}R
zfl~IOo`A%K^!93wGtr0_Z>E%{1EpQwg=cDWXUfT~jpf+dbq0K5x2$Hzc)PcAIt3Ju
zA=$kKn;t73AEb}N3&fP_G-klh<UPNEtVTyF8iwBu0jn~wWn2K#dKa79eDFM$o^x+H
zbu7Qp1<wpzB(Nr~)*(B3qhkuHK`={zqqtH?(t*4x0X<K($uD{PTix_G_n`;W%>z$1
zZ0G0D$vt_D!Au)8dd+d4)O72Ko4TZDhuBeKG$_`0EPGyzpC`ZsIShk{0KgPF)>89#
zfAG++46}7prwVR;;9#YX*?6Xo{%m2Gze}%kTb{TOHXRO5h5J`2HRtU<qgz=-kD<=b
zIxLwi?mcIhJ?v6vD2AmZp{EmEgvsoFIgXEkSs)Zuq3(l;+J3#pnw)<;@EZoyln@42
z#*I9&F-GcS3YxaKvX!zBwE)m0`s(V#Ff7w(X|rnH<pErjCMja+@#P2UGjjmFZl5aH
zFij9+x>uvyBoah^c4Yb}&yS$k(sNE#lXD=<c2DdOUvXwm4@^<g#xhj1tT|^W@mW-0
z0-MB9>7%WGE4mASL9VFCAvWaJKk5~obhE8~;6T4AS%7|u_D<+zhyYIb7rzwp)5SX8
zyYNe3&ss(BCHzI+I%-XKR@eiBGcTia|3d5<8ve$~&9Y>wpIsSpx1PlA?P?E^q=^0{
z!l!^0*Ap}-S8kC|b+R-(ZIolY722HQWO)j)83~~{8(_ET#)Xps+gPV=YtOu1s|fnT
z;kajH72|*l1rzN0;sO6eA7M0Jx77=Zx&Bd3nb;<Br=ei`luWQvfZ?BZU$k&{V4u)A
zg?QPb_@CR@i^SCS;-t%dN!$0V-#^Tcud<@ZIY|#+Y_n1;)RVP&)|!LitVMn3@1C}G
z!sY{avasbmsQlCg1nHWY*<FP@N6}G4)|+ByFc!cWo^6mvZvrO00|cf|gk~e_)v}%;
z`d^M>URsd08oTfOz?~#-B;|@*J3Gi}?BnTP=Ykc1mlU}}QBzNxcQTI(LD@)Dd_}Zs
zU4B>9<g`a|?&}`e;T2so5sB9Mz*o9v!u~bKu>a9Uwv~O-N1$6^u$B9m5K!_d7?$_-
zRS<sPd_Nve9RTs$yB;+tjJ8U-N}SYKUb&>X4)l0?hv;S{0J2OC>N5Oh(GlZGCE$zb
zL-aoom*Q)9!8A-}lfnLQwm`RVjYzUW9ui=*Dge_VH3#HEl~R37{UAq)ZPAQKzKFP(
zX4uN>8B#K&C||&+wbQICWn-Y)M&z5S%B)$h)+N#f@F!(GbNpsr>MDrHt?>EgS}~*z
zXex_Os93E56Cd`Him4B*Orp-wK6L|8oF`MP(8(t9nuv-bE)5s11p#?kxT4-aDAPNy
za*6Smp3{g65orBZ<N?`dWtuk4j<phgn$=LOGnl&=b%;n`_G>mEi7u03Alp3_*-#CT
z@=$;Wz&@w~k5Roz>&fm57tbZ5zzC-sw++AA=^qPu$obCdtk9QB7<a`#EPmA_;0Hzk
z6c$$5Z=`#|YGm1AR&i!_R^pgf^&%^)g$C3)nQBapwMWNHe^6XrT6_XTZ$(~l3zUWY
z96C1y6qRwV_u-KLIy;+@q9jsS?niUgguD%4e*#F4#X=z->$xRmlq9}1YQ@IwwoEU$
zRPYictONSu5*N)$KVXC?XVPx&D9;_RE*9^`)@_dJ6A+F0R9um?g26cJZB7UO1LN?E
z#BZu+Gc-`H|K69;vP~u{PA`}|0KQ)~zCV$l0o)hgug9Z;Pg8xpje?h-$NPB@usev?
zevhNe`<47UgowK*Dtc)OA)r_QfRQnVwhD7IxGnoXO+-$E>Yz;4%yoAO8>8ldsidzR
z_|Dvi?<=O|51(tnjiL+d)MJ+M^=3jdb^)P{_fjDn)YumHkqX<aUrIK91XPcR^jJ#7
z5M29e10>n1KFoLb3e;d@UE>>JrR|Euxs)TlOmtwb^bI1|8g(Y+GqKzN)gWHA>$hQE
z1A^ltnk`8oCVah<DHBs9%eof!esfXzSa|~Bp_auo+<e0NeCGn*NglhH#9`MNaauME
zWpX?2j#r(y0!?boykrpILs_d3RnEjU7!R%-ToCg}*TrV*fF?+xeQ<D>*#@oDAr34c
zu3v(e=GntuqAv<v+W#;B@8*=r1H2ySa!b7JH-R-taC53@@{Baw9W?eXgz1x;<^8hi
znJiB*sVNrt8DxFi)#%NK$xzCfRU+^T!4@6W)45JO1r_R0M#fX(sOj~!23oo=3yTrY
z%*ZG_G-qsY`{mH+uqo*Z5o8IlAei+Px#bFy2UmITY%nsHuLwW@8@niOHe`AsoS6T0
za1cgD=U}U<v2j(70Ty^1i$)H{MTt{>QR@jf4KVJn4m>m1)P0L#5+d$!QXKoVjSyx8
z=)aJU3}7NJA7h&!Gr<ijT*|a+P<fgTAX1;Ote?(t{tgE{FG~BYdtOko{?>kPS7z!G
z_R3t%tj|4M0BFK>KwUFjtU=a@sAMx$s#XnyG|-uF5C-d9m^6gjm&qc%$bOo!+1dS$
zfoBcQ9;+`H$&tKlcuLp<1CN=8!an20S`#y-QcPHlt)_%KWO92Ru6)?ii=JXb%kR!8
zY2i%+lVez%7;hwa54zhvstO_0sbNB^2KRQk6XZb61XwK3!qr%hQMEnoRk@-vWh_|}
zIrz7?iz*2-X~>T2G89sG@#mYEBG!4}7`5(Tl~vFk!(`=ORS&U1UIjLDBfJ$1w5dnp
zWrvJ-6*4g!oetdv-u3Q5>Ea@#D7Gi<k!7S=6X^Uc;Hr;ubu2t_A%o{_ST^IN9h9(;
zcAcXX2jr}L2C-hgD+N2I_!g%=7n}3(O949KHni42NH*ExU1TML`I`696O=yCdDt@U
zm0QQhQU~a;87RC%j0dJ+&RNGamZzUoqQ17UpyNJC?+B}!6hftwFqDdhi)5CCC(0Dm
z_q$wEXX56fk7x1(3}SE3!Y<cpsmh1ms^=-$0V#Xm=3ssGy``>3=0Nxjl_8dwYNm0o
z0yJ({_Zlt`dQG!mjxqW=+MgJ4L--4m=v=`~et72<e9f=uompK4^=ML!11~|L$Qq#<
z<y`e^L`;`l`>h-T)TjOE8Y|{fW%pPE-5@p<Sw??>OpWszl8#B}*h(@un|^~wXw<ta
z0Av`j#o<-LCq!lfYVqNzDapgLrqWUHN$He?>k}0JuH|xTGy0;*R+`8?Pi6K>f~wgZ
z+VQ43?rS(z2sOPe-ScMgt#(=jaFmWE9A_A16NR*BFG3vmnK1(^Pk9<;LBIu*(7rFb
zgRuSe?{-t5%arFrroU>Wv8OLBnUkYs0Pyy<MKWk!dx^yz4Igr=p2o{TT)Qk(Sol9n
ze+Sn<FuX)0tb?rbVr?dpod#><)k<BBaKBuCzxpV&oTrp6iC{;^hKJqGb{7OSHjiM6
z#0sMoI16}jEHvGgSnqoIg-_Ec1#Q?GOkwZ{x-dp!k;%xYly*>b!r<3Wr6L+m0;&>G
zMcvNP@<MaMz3;Z4KsSk%Xxax;IV=LUOa9_%BI6d(@~;YXDnA$;7c$**sW}ii1gdS~
z3-+MK58u`6gm!*4m|Km&ndpU98n#AKtOT=9j!AO#s)^rna)|5yiD*zh+cnZ4c$3#l
z)JpxwA@7qC>+HJCpqbf=*S_^-1%UMjazBQ!!0B=<WXb5JRj6I+L9>mR%Tyw`Hnew$
z7>d|Jn%+${z9^jJW8#vn84xZ?vYuNIaOF>U^8pt_;XfC%yd4YC#m(bYgxnluN&&NY
z8^|dARFX$MC#WN58BEwsg!W9y>B;b%HC;l=O8HP<cA@|E<*i|*9tXI|2dLl4k2>j!
z@@cYwz1X`mi9S6E37><&*qu~iA@nwSc1Hoq{Xh)+p72C@xioU0G`?U>KrACwAZ~K^
zVCq~EO5UWA=2VetVIL*K%Hc%k#8Hl3Dxyio<XD;`O1>u-26EMIlye&R=T;b3?2kSp
z=lxr@`3BKI!oUVjPF|p<0FJ4r(a2sh5tuUW0*fuU6IForNgk714lK8ky~lL6a*#e3
zgqnaAr{mC><H4Ns^f2K&#x#@FV^o(TM#8Zu)M_a}7+vp}q$$X~C_J)tBe5ABLH+`D
zWG(Q?G=d9oof~Zt#>Ou)5tAFqG4d#9`%S8DpZ_eJYvF$u4j!=Ec+2CO*vKAqb{$?C
zGs<SCSG6FJGQ_g`s4%jZ8=$$xrI2ij+@LC1JA~jQNYz8Yw3yVGo?Q)&rV25M{lQEE
z!sC|z1gz3dh|^x<elSPDB#hfH)yBb%IsK>HWp~-FmRbM%;|w&?d5uRz;k9Dy5W;tv
zsG1UZAk51Mt`PwD#~zv~RW+t%Y?mX*cWm+33IgHPn=Kn+(1b)sGd7E^5&x>f$#YmE
z*uam5JF*;USHbDNa(ghHi-BP?5yn7jHfLRmh0R+uOAiqx$*YiefX<OES(R`Vf(T{q
zIB^%RMosN;c~q1eZJhj<`p}?a8UyaTGu)Z{+=!w39swA$tZzdMJJ+R2FXxUsijW?#
zBg3_L6|D;)Gylg#8=3fu_AEtdsljN!(kQ-^^OUo69&BT5vJ-=KENV&@ntF4j#@q&Q
ziTy)80pcP}sRAow8}j1#GllD88T-<9*QCs+`${e4UMgf7sJ8tjGhl%b6+pt%6N#K*
zL2;V24FPbCAOKBNT0;%E@k_mgpM{oo@i@YOPheT;I~`M%a`UU{*oz&@@mG&OqY?B2
z1x^&VGwC_wnXA`t3Z9Z|yBw@F{uH25<NntUlXeh%vnDVgTptlseU4!28O2VwJPgx}
zKPjXWL>m-+oj_-|tOGs{jsEWdMVOc9u86z)5*ko6VGE+$3@)v~hdbB3rxoEzKqXrV
z7M_R%JsAT(xei5SRrRzLKF}K#yB5zqC##<+t9MqU1`jSblRB#|n3dGJcUo0qUqT2w
z8Oyt|ytX(ajlF@vkB*E!omIQX-I8)l|8%;FNS<dO$7|_#FTP;%e1<@DpDT1$jHWwL
z_ZQGj`OvSt=p@a$Z?6zgtp)j~PZ%jBC;7>pTj6<5hhphl-!ESnddMOsqD^)n5A>mC
z@%ZIY{G-^j70$S)l^5tns<NWVeKXj{9acicW%xHc&8$}?8V0E3jBsUFeg6uz%sY|V
z@>9WX-P^5);V+LVJwMoOnL1qDL3&v6pi)565H;G9^k9azaG7qlwu6;RM&Wxf)&N~U
za->rACvrUqR;sBmDI2M;uwv=UGso@E77r?dI>vc#YdFrqf9_+aL!Y3{@J-^*O>^Xz
zt-gPx*2a&|%FLBtuJHOFs>R_=P*{yx9GtUT?SMhQ79(!+Tt#oF!#eaShwD56NaakJ
zuZFa@3{qhUm7Df~Hs?ic9VD*UQ~Ex+adZLQI@^stwAgYKe`nir-CV0lDFC`6Ay3f7
zWyp0MF{7A^kqj|2v@B!YW6+Ksz$@CbrW2=Qf2OilfjplgBGFt00_TP0P$`;M)iy3H
z6{4$_<yq!hp=MJ~7Li)v=hp!Si0ST9#Gbn5Sg$9Z7n5?5rSR+!bQJt{JrAa$pm`)e
zqtIZ(jmXK0%KRK()4n9w6v&zgN%5*yaFD)>tH7Hrua#oY?1c;kfCTmV^j)>!uA|hg
zrS~PHH}OfKd7o#s(?D6<kFhBRkyg|>Jc=Fu-C)hR%E^~WZ3vM&`a(DZlryIV;WYR8
znu^M}MQo?Gc6XUr`F8TAjxVg?k1JSsXzrd~Ah7>*$^~+^3YvIr?>-1F5Vr7T1{ePF
z4F9|?^L|1tkW>BB{hzmU0mP>`vn+mdx^3?S#gRR5X5rE^l5<MBf%#%XCApxObvlZ7
z#a<mqOR8+}BtXw!tI@qtV+Z(^cZQMjXy!NkAuPFu*>~%EGPY1WuhH+so3(3>y%Utm
z|72X;5(qWhg|Q2)+@28>GcE}%^a(Ku4{3MZ@5zu2^#U{Ej|>Tf(1e%j!SI0++e?h8
zK3TZ-Jqt|PX8g~N_~MS2cYjiNZ=ExS@}ehcrww;1fTG)X3aUVO{g-g)y)yHL^Aa+K
zX{;>tl0~$5lHEF5t6yK__zeSMKE2K|M)`B$GM1)`h2Ex`gHh^+np11}zs16H3kx#Q
z4Gy$IdR*8!4EQk1E^(1&w?X3d(p#jI->SQDzdx=Q;v!ldPK0&ZC<|HYH<1rK%ydIs
z@K!Mi0W9rpRyv|)hPXv|;DhTH##SF8=7O$}rGm|N_k`;l1VIsZ-m#{-j|yrZ%wC-V
zdNWLmgP&?nW`Ba>sRol_OCqsk8osAjw?FJv5mkwXVH_L_4}dPAZK_c#e>OR9aiEc)
z?yR=MP|e@6VcFTL%fGzx>O6;;42?Jofu;Jnb;4e|UrWeuWFj@hs+vYqbfRZ><30lp
zR#v(h52a;*-u8Cl=wWt&@YMPH|9D*wSW!n|RXW@+(z2Ym9gX)UZ*IWDG$p4CJ2{nn
zmAty==UBr^k;hKhw~E2e>Y0O;fm~|idd<-8ckoi(9kde=e!n>}j>W3D{wL$|ey|bX
z<dkh<q-=qX)APq0Z7o=(PAQaWxn~~Y{BP6w(`-kYcj)yw8O*Rw(-UP$(^;v$BzF})
z-qc;5rS)EE*6F?BSc(l2&?%AUG-_FOXij|0`|h`e9d4^VsVm*i^9-SPJms|M#t`Tb
z2JyEnQ77$AsLuP}hThWvSpf2hOoSaDFMY4G4KxDzqaIKQCIexT>Ir<MymHs)Uq;qs
z7OeAYF=kpc;qQUhIs<Z!b3%3#b{9i%n-*Ufe=%=J^FLx?C1U#p=mRgm<7W-Db4jgU
z9u@o2dNv&{VztqhjZk@Yx@ItUPGaGjjRd5<IXdu*g)u<U2fk4$P66&j=c{j=I3FER
zYD!{aA#EbAt=aJ8COi>80~NY~oQ=Chof6Zt5!6fOYU^vN_)_x1_jf(bX=1qk!*M2J
z#{~hu3s+&WLewuDBG8Q~9>R*j(>&>(o~qfJ)vnwqH;;Gt8Ey&fUJ&WVobo|@!M|U-
z^|(2oe@4VD4mR7KfV@rA>*r*>gJ0Y6d|WmA6YZ#{!p<9lc_NZml%3Bnz9cS!8(ncT
z<ScDnJDR7j{9u#zj{-$q6RVA~E$Bx8P7f?Z4nthK4bs~Cu=nI`$NvFay9-txDP;>+
z>YhIq?)9{}>+I*i&o_HNUHLAX_aEY=-rRL*_U{_NH-Ghq)Q%U;9oE&2cD0)vv3dIa
z!pJAjE`Sz0T0vRrnqoMwZ$r-O>ju7vdED8mG25-<i@>?I&rqT(1W<$W#ok{%@wRfq
zhnLsRaK2NikoH*jb=vqv@7Y-m&|B_f;2eZdNXsfXI(25P{&wxa*5=o<4`bjId2wyi
z$>In6e1Olp8mXF?sy7P%Ie&Vl;qm7x{PA&D|KC@pyVkdVo<QmevACt1);CYzL`!Se
z#9Q0P>z2hQtS^wD-dW#L+1%mx`Q5kM>v!h|K<}%M;oIQ-cy}k6kL&X%+5r4h7SU!v
zCmeFDLK<=51k&7=YxTV=Hi^1#r%o(`$WW9*+IQW3w9bp`x?b5<s6yG6TCRMT&hAen
zkA5Ot`E%e$#zp^h|6_+gVgC6E#vRU@iEoX2SAR>y4MaOR-2zrV;z2$s2FamFU1XyP
ze|dYCYzJip)i6zfRfyZno^~0d=ClpQ?g4&%=d-CSmlUb8qi&+GJV&Or2b&lUxd`-c
z%W3E021TElwbq8+tccQ}ks%p7%UjQ-%bfsRhr*1?*IE%NkdvqF%91Qp6GJk{6L`?H
zDrR1B6>3%|Uq?m9Jzz6P=IEhcL-P@)%6Rp-0}fOj{Ox9dkId4fUY;I5cw{G_0DjM6
zukFLGCXdk*vN*YsG2H~G+;luU&=A%)je!)$*7#a0oa>_Ok?%DflMGy>OS?$?D7G4l
zUksPOR}}tInKeS<)JWcC3$ciu7ePW_nf`KsJSi+CPf)uTtD|HC$2g3WmXFPZI+xcF
zO^YZo;rYuA$X)@Z1IsD?j2TWyzBX)`(tp3P6S>ht9c7WnE_3$JG$h`x^^MU{dLPHC
zQfgt>pg_Zq7?VP4;7jpnW@CjK@J@c$Of!X^JMqTMUOV^8(R=$bbMy1y<bnE~ub^&;
zC?W##CG{tq(%90+k`1<2^IhJr^5l>by8w@~PXTN|ycF3t=;6S4zC4i|&1>HV;B(Ys
zpzg7d<7l-mA6IlCUHr=Zmxy|N{y&6&jX|}`GjP8Z691VP;kEI1vk5yI?Gc^Ovwppr
z62kwIrt$}#x}jgleWRU_w^Vtwmb38%n!kqK=n9iF^kI~@$S-6Jx@6D5Y*jW{gKY8c
z`(rQxXlgmV--!{S&5E_Ggj~?um<rjxOf6>qfF9iB{KLt73#kZb3;MN_v3Vx<n)~^+
z)aRTHH;awE&-WWh@IL9a+?b@hL<-M{Ah^5e6cI)Cy3d^=-tmk|t6_o%o_U-pjcput
z@;6UB>d5hPFC}=CenLdat@cw~LT{SSg9kJh0CRWoWo-eQnlO2^KzDp3m4jQjq3-Zo
zhbF?Iz7RwSAE^158PS6U^5mR5>T&yul%{5nA!4%)rG}fsyemqC-#mL0DUM(iZe56N
zVjJi)$FX!u$Fy*eVv;%7kszTGdX=SKDEy=WA*i4UJCZt;EaTd$4hC1e>FcPDFzIj@
zVBF)`>g=O=HG*}oQNIgjs+#2{UB1gDsN;xwu=U~DN-rafzxScCiz%Kh`|sm)!3D8w
zMlwIGQmtxEIz-_dUp_&t2=wuFn_5n?UX-}%)ii+Nj?P3k_0?H6EJkLCi$~6x7+R1J
zMDrdkPW0mUuXiWjm*$WN%aUz~2@jldfc?1`cTP`_C#*O~sa;H&^de4h`hKCHEHPO4
zkD6PRii!%CcS=lfHQsjmPt7SlaUj)lAD-F$q)Rk>E#Qi!d4g1LwfkA-ELC+#Ta*Ub
zGK|~Tl*b#edFM|Mizg7WVVO2yrEX9rOl<mFdeU*q^6^>?u?m!?H!a)oX$K_#N*jhQ
zNtFT!z-SUuO=3KYxPT^9$N`;FUgiiey3d*UF-Z|ahG1;Fzno~kuC^SQdUhGU6lX@q
zE$uP;4~`*NYz2j2?}-=FKr=yU2-B|SXx<EM@EyU|E!&L!Z0C8`FtQjfzuNcRo}NG|
z(_}M$Qob&s5XKA;2cWrT(Ac83>T5I$R?;8h{-8EG(Q9xEXj|Lc2-1GFA;UPf_!x}m
z&FC0)2lw@>S+nY64W1LgioFvKsyFSq@h@f!rMu;5vtG2vbty4;=j+0lAnXHfdSEv^
z{J)kl;L7x+zJ(7;kx+7q1w2EH?y$DY0Xex;ZUE*%)ky!C^9_fXhtJd`teCWfHrS$U
z8a2|C5L#y2m(PwsKCs$-G=&H94xH|~?;|%P1Cae;{S-ek!`vv~CExm(PzgTnBA7eU
zhzCNJlHVMcTEng$Z(r<DJx4s@0d8M!*Zuc{f<;+n0uRWqL{c>6T~;N`QYG%Lv&u@v
zhYmh2X~p6JaKLXiem$<JzQy&MxI$KIq(Oy0Sp)jphDyBvh}1%$$`fB4y0n&a<YJ{w
zJ$bX#+0+uWP%)A&BHbVVhI@bYU<@TJxSQ#l>R!AGF0{Hz4pT2cA=nLo4}(4#J5VRu
z^z=;gZzlTINSn+0snza~?Z&TJqe^B0#CnI%a>nRfwbw!172FKIuTVA4e_g4LU%dPi
z3Un7zS^K_mO+ccS#JTmNfQ(VV(UZUOAB+awvhHKtJXW`p@0rlt(jva4vi3Y91O-*Y
zop(YAak<^YJz|h#>CI1S&Q(oG;k-Wu8Q)UDABgdB1H+q?$Oddvp><HWv<*SA)i)kJ
z>ub2Nn!3ZYY%2Z89R}XqsJPr*c*yn4qF6W_D;)SK51(rLWQ1Nc+V9F<ZJFd3glKAh
zGd@;7xIRG%Qart+W_87_g#CS8d0c(7_S+PS5F5i*oLY2}yaVU6V25#g&|OGxWl3x7
z`Z*f5$%hY&eZZ*jujbee5Q{aRR64e{P?`Cil_}ks&U`USt+35DOYuT#`HJ*Q%=3fE
zO&9FK3z@9ksaiTuhIAX5+ipF>X^;zQ0VNx*_%z?*mFL_TOy8B|_Tr=F#SgTX4!DMF
z9L$07-gJIdvYBiJJufze*p+jG#~dJR*|<4|X_l7lEr3}sSxt*Dd{0VhQK`SbIvy>i
zPKT{tn<KG|EBZFy!s!5xkl}KVETL_Wd^k`Q{Sx=luN(MHPwz}kEN;wze6qurvL)VX
zZSS5=ihEiYg#%@O@R6bPVz@YNN9jaqfpC4ee=^4l6(J)B(M_^>uKX45Om-zkZSi&I
z!Eo&dO*U%XNZQ-+8V5Kn;jJ%>e;NqF_ycQ==^C~$FDXm&d4w=!rCKWzxMC$cRIlJ>
zmeNMX5u~=1?Ltvo#c#(#6`JqH^iC1VYVHq6ETn?PNDFOHvIZIww+h}(ad+C)9jQte
zGK;)pYJXS69i_?Vg5m+5Ix0v&bpEq#VO7rkGHv!N`nYwmaZr6AE^3P7;By}X7D%UL
z`8k2^cCRq4ZB1}`_?vk6<xh|%BehR0`U$X8Ax8QCqJu-^EWKM2bkA|eZhEKi+*q$_
z&l`n?xBg7`vFDDYjm4(Wb2+6OvpQIBo6TuEAl@*7gAw0hV*~P0KPMte8>l8i`<a1+
zI%E{Kv_?>H<_-gQJtoI`64*VcXo)nNTfg5nN{%W_Mlg2|5J8}<5NE`bi<M8m^1=5-
zAF@@#d+x5doJJ%2H05Jx>=&vC){}mUNg(<l5$3hO7z_%WO*95Ahwj)oCSRH5!9-T5
zyW~<dyR)306aaoj(AOT%5GTn~EY-U<$tQXew(ie<3UI*&>%=lsM$^t{P0f%M%tvFZ
zX;xrsp*>a+z@4UH;A{R*1?*#=@+HDtV%L2F++uty&0NeB3>NKF>d^QA>}1m#(*3-2
zl)2hMQCh=-Rw{%Zy=EgxazfF*HRA%6E(+_bX4g9%3;<@@h5bg3T|c3K%l2$0LF=!Z
znHWMkJ)e-i>4kPJW%%WHc8r7JCIKl@j3lhs{1WZ&n<ZRVZ)18QvrIrRD$WLP>c0`g
zC@X7)-@U3VK|iGm%$#hlwwCW6X=#J7?e#`h)*uKEQbSg@TOPlFR1Mbah&sW0{@O9T
zA}S@qdIL-z!WK|_ygfESk5S(-N@6qwLv>*GgOqzh*y@=fNevOCOAqO!CIy-0pr1d%
zKpgdYdv8)3m-(~&tDCMY8P5NP4TqGVx%`HoRtylbMVuWXju*x>Na`lu<f3aCM%kJc
zi93A%m~GS8$v7P%I#S;hN`~3_&4z^(m!;-HE&}L*LL_1E!PSkWJN^axs(`!Q6mso5
z!dHggr!`_DKq}DW+Vdms(Z!%KU@;r?WBA6BD1Jdb`nHdP$+U~GxqHYF>6awl#GD%<
z+M>`y-6s}vCO4@bkNuuJ`-CY-j`^lgAiI=F++)i`oCH^(iF0R9xQ#fRSI{uF@9WRf
z)RCROK-m0wk{RNQS2?{4Z9X7G#bpxppp8c}^jb4?SGx0q-i^n)D&$cAqC7<>v4V?(
zcp9+b_?B>&`v%UzD_1};zZbB8KCJ@3L|9I1C;&wTkc|6v)#?Rqk*yN#AV0k*C?FuN
z==Q@)-KH}<69&vII}<U<F@}o_wSS(o8F^LPdAm4L^@19JEM4+!Ggw>Kw5l)`N?L&7
zS^$C91u^;CXkv()no=hqfMRZ?5pTu$Z8IATVZ*D9#cm=>`?Yw8V&$fxX^Aid>d=^<
zb%$;NZf_b+Og*=)nh}*cg>uBZd@s2bwDXb)xBFVVO+vr}`$owNam1f^N&{JWW}E$i
znos{7SsI-+l(?j6El-0xay>{Mkk5pQicA+9`3{1~lw9+BYM*ZP(cOKWR>5xt#4xZr
z=PMYV09`s*e#U0e6MU;P+ok(V^RCDl&EwJnc<AX6>&1X6nzzdr@-vQ{d^4m#?yzA7
z`meFen7I%)S@hcr-*H{EJjFI_fR>OG+w#k!{T7>Y9`oCBFKd-RB@k0R+~JCb6SKG=
zsH({@Zd+86vz67x&ecU%!#TwFZ`hDC%z6o&^L=cWMYU^w){3m*n%F_t$PZlQUxWb%
zbTeb{_Gp(?!Ocn~uKM5wnsYJuTDcNt97?8|Iv1MbdJQRd9SGqSs~gFJrA*A$%ko%*
z1;tTNGYY~nIRaB!(@>Q6i#b9U#!hlb!X771UBDZA@xUTH6{<uOy(M8vKbAS@qbrqh
zNK>$?+au~yDC4t$#=9;OKCXljokzO>kl8n)R9J(S%gGnsam({PkYIir5{L7!?EA2M
zBSgEq$E>87XMQOx^-apZ0TUh?kMW$BkqQ5OMx`NB$_D~Ur?sUoxz`*NcE;1AtxcDg
z3_Q?R@wwIGOn`XrJVF95c(%{iV3o!Fs|GGw;{N1_`m&!iU@DS-(7imQ3_O4cxSqKz
zyifk3W#mKCg@S9d(k00zxe<fX#ULv?D7C~ujkF?h^@JN5&#rC?izwmwYI)LJ46DpS
zHE0fDwRUzseW@XFuBFJf3h0F-gk1ri{FyM)?V;q#HDJ%XE;Y;o59BZ+;90#?;cRx9
zVldyQR0Y?lbu|iDQ^vN=cv$2F+*te8h?lpuGN6|)X7n6zq1QLdbV}A&;;q*gOgM;G
zh)VKJRH9cu_M^`iK;iu*k)H@^*CMkcr_|EYr-t@p&k19+5QXBi>e}Ocvk~dN$CgK?
z<Qgdoc_Gv;w4ceF*rY2a5rr^(r!toI%*397ldoTO+_DA3WBy7lrpQwSOoZmd+eOgS
z6gT2bMhr2hdNMg}VVv$nu{uS!02PW(VI5-2v^dxiOUyg@Sy=D5OiR%uar1aL#*24c
z`R4yN{Ri=SJ2(@3Mxq7@*k+UqhZ%Av5^r$nQ!BT$KiD<lr^+Xx{;Mj}YNW+d$w6KA
z5Z1O?@O;xS(v4hZ8e`4{$ed3`!;%y*g_egcMEe7Jw+!*phFrQ7T?y}k7^==$;%Bqw
z<?Hs>#knQEwzoer0Pv9zl(e<99p)NP{A&AqU{RvW`eJK1?@u!Zz=WbZqOTQn`H+v4
zJ%9e^?}KyIXc%HGVgXUSi*RU&>GX=}c70u}Zt41O0<SRE`xb!)z-U6?+7}tNMzY5D
z^7XSv)WPy7l*QsOaCHA;p3r?S_j*UEm2Zr^3-Q`T&)nV&l<8?1-B!b*7(I|Im^KI+
zXh{oPPzZYRWjf2Hc?Z`-oYM7*!EZ9w5(t!LT(*ELVKyN`!KaJo;8~V@iOq6Y89F!4
z;Ab*o%>-a9M%yY0z*vF+%7!X?-`BbXTWlg9g{8)K>BuX537c9Ysdt!w|EAKALXF#i
zRxW-K#Ltp)1GMm$9xx#{ZR;D?(L2e_kbM?X(@w^L@Pg2p!pq$Eq#x!eLf(y%f=usA
zU#l7mo4+JQWp|UiG~zvwI_FM|JI}M|`?wpaQsZ^iK0r#~0jI)!{%nG;r+P%^f2n2e
zG8iwP<^;iIh}DO0$qaF}jb=>@lKpG=gN!_|BO%uLZgXQG$=}njS_%QH7uKUEmM#4c
zo9xFGaQD3*_nm`W6o}lgF^*6m1uJrE0yzHV+<L^4JOx8I;x$)wL-LOGAZx>DjEapB
z(`iVEvmFz`0PercqZMRBX10{d6_G00W@PA}$k?p%G0PF8(;+BUEN~SpZaCt0{akWX
zV-l=<9vz^DzDc2Kh^I%@`yJZ=m$!%01;Jq3d_Q2~(M80xvfy#`Y}rapG|Y1HLh1}J
z=nzfu`J~-fgFO9Y{bU!~fpIoV^gQ62Iaw5z=s!OAfI!q$O`4<%D%M9DSwbycs?X|K
zfj`aO?8E!e(UZpfEuNn_GH-=7**Cb6@I%?TyXu$oqW>0;W`!_0UZXhV#prs7bxGt&
zIHXP)YdMvu*bE~bsgq<&neC#oNaca3?-$Se)nlrdITgyA@feMpv~rcX1p{!AdB(~2
z_lPJs0c6}ruJfaOnaWZm87|HNtn1-_OL62ZZb>D+$JN)w*MKa)gf(dq4DC;Q&ODY-
z-@cZHOY+hixpG6plz?=Aqe@MT;aaE7cj*?1kor4RLj1%_sOUNp;b*Dkmz403lPwy!
zU#WS9SrfBq2)tMFAz;M}0_*te{k%%n^G6H~0a~6_@tAAqZ)3OFnH~`JwCSPfFPiJg
zo0P?mR|^A}(w~L*?}jshi{?E1K92<4fX(RVVCf1V8L!8wH1-&+0dW;qGZ!s=;*mM@
zDf#9ZbmX6e^E&NI0p(E^;{zqUi#3}B``Avjax}z0XDQKO=V1#6#t#-Nu@MbY2;o(K
zKv+lD+FbFLZniK5!88fUkRBrd-e%Ld{ctKZ7Rlbr2p`BM=5yn0L~-7l4tfP6h@=Pe
zpFej}+QXG*dJCP-D@1_Zyz^>Rd<ye`$aqOKFJY&HNH-Uuw#UE@p*2@jE1vJu#2$)1
zuo7y!>6HO@#V45G^0uTEs4wu6v_At4fK5~n#9@KSTr|2sRKtN?ak-)Isa46@+F3a?
z%`l*v`mEygVe&cwF3$1)u=Q0zc|_f^xI=&h_u%gC?k>UIA-LP%?jGDFxVsbF3GPmC
zclZwfsdH}Ks(a^o9;SB9UVC-#?p{-^Tf$SSD#;v;=-Gb!18>@wAnf^~k4Puc;qg$!
z4>LE*s-)&Nif0Yqm0b#8<1~W@yv*%8G3>?$A7&dDTPTB_Ct)ZigT=oboj7?x>j82}
zXQ^Qz4buhuHxh&uJbsc;6yE$d$~!DtQ5N6$F_)1tyU^|9I1Ta^M0~%Ks?1aU^dqM+
zuJ__L0TuEU&1+A`=c2*ET@T*t<sR6uWKYdh2^ZA)C1eR4SI)u!T6Ge2HPc%6sDRFY
z#hKcYwRh@2V&@$;O5#;+S2z0WbejLcdMyS6&W`o<^y{bW+(-;PEzZ>OYZ*I=dO?Y6
zUI}tqTlMwV*cXE_15vQY;9hCk+N8gcX+67L2eZ)VCKB9wL*E{h*uxv5RhuyEBB4nd
zd~uy)MOLC6YV%u1F>Y%U$I&yNcF$I18_Yiy9A!Us<;rm~9!{2}5GiGij97oz!G6;L
z9?u~K-^{ky^wh9&*<NP~F!-R1SSp^EL?dCnLy!R|wj!oO?iLo<b8F0>;*L(D8s48p
z{FaB7x=hEV$iQb-t;LdjWtBa%q7)*m@tYA7wnzd@8D|R1DG}lQgEFH+$a9*Um_d;m
zNZeEn3~CVF=d@C6Rk}DQ9`DhZGx&jDmA&xTrJ{O9mKw5++DElo!89we1!kKZB^~3*
zOCbFucWOFcD9hPu+I1mecteg$HUa(^(w?wIzA10rC(WS}5*yq#Eus>V7@$B$;9Vqr
z;7(5$MU$-J-GLf*{tG#C_rPB~=^O}a8;X9QJv!*R-iON+2>%ku5mk_Nii2l=z@yqz
zqDuCsFc|KyYS()p*C_PA{Qn3UtuOVzu6#XCnW9CxSJTQm%|o%N-9Tia9S~+f{cRyf
z{W^ss=e;0Q&*aUUg!WT!1_*J8#7Gkh<aI~$uhM#gKHKSMoY2Mu_K+YD1q=V(z$bk9
zwYwbEvy;URG{n!)lRFj#|GV#hqQJ8_MQ_g9-?GISD9BS+XsmJk^>S=1i@#IwkWX$h
z#AJev*K%Nr(8<uAi+-m*HrIW=N9&Da2CjC8V@h0P^7nPjz4B7s5-2|$i%q?F1^01#
z%gNB2{uK~d_~T`c$Yw<gmpK(xmwYCt+=bi(e3^kXwXJMur-F0J;}{l^JK<FC&v!$t
z#5y`fHfQjPYF1<+*BmqwYIM&cg=H?q#5Q*Jr<`s=oOSnF+83&<Qn`11Xf63xcI34Z
zGzfj;jQuP&ZZjCeccA1+gA$G2hq<et+lzVV<p-L!6_0`woOFhvK>t@)jikZQ@>1sD
z)yEZ&&OVV$J(ly(x2uo)n+41*81u7}jAgj~yud4$FnL^jxvKOr2u1u5ZO`mU1z*<-
zpNYRba)*&mTQlkDEGpeWb*WEG?b%cOK7XemF*t`(DCshwih)Q(BKRb=B@e~by?+>3
zfuRuh6Qiu?T}F!9MVEcuOCiYgeP!lTUEvmtyNglJcPc1d>70y*W0P;K0bhT3I7~8w
z%~^_R5g0*=i&PCD!6*9KP%pMk>T)0yq|U(j3_l#}%DK417{@LLlVwhsw?Q4L%h$V(
zt{V3vLq}R)83W~EJ2gEIDVC9+O~bS3<C}htO$NF&>AE{c-IoIDLlyj|<{-$^8fp~d
zL~>gJ(sKNXYdR~|p`Fhs%3^vO6c!d%3?l0CdEPxBip}Zb^Lcq&Nh(a6{&0BO|2Lkd
z2=Yg{^m_)LL>b5q0j_nA%9~w*B+5JLDX|?<pF<9yeaNPDCFDm$YzW?EY%ZHjlaoR#
zMvuYMP}6TN!WKu|W`m`60{a=^9T(j_=k*y0X(>ALaz2R;XkbR*=DaiE-ksR%iwl3T
zu;Y`$T(Yz?0KK)l8)m{8ZVC#rkXBs^UDZjWR;Uk_&^%VpK%0y!MP-DgA4r^J|HHt!
z>3<J28#c+8`D;kUlK+~R{61+w8;IV9fqR_1zLcn<KC{5&E!(Sy)mdTeNh=3R+5*f}
zSuitq>x*lw-3sTD){;u9X)WLuH3cNkLn{eTBfW<I#Ai*0XC>+)HQqBx#Hmu8Zf1U4
zXH8WZZGHEtne(0Le2=7Q2(cmM<uZef4?+RX2`9q$+0Z+Xb0fk{$gQkRWK<2J$3OSS
zZNmU%*UPnU=_FIy^BVbx-aC(wD`YV>=2lW0^taWJT3~@#&J_7kr-Se_ga#9JRGf%G
z2(7E4WYQ)>Kdh+b#S5HA5uKxdv=@dfi$XK}>PbWYU*C-Vu>p6IDLhSBW1<+h%O5~R
zT3}>%d@kxIKJm~-EhpWmg;;A()7K0eL;bLzImds_ch{s&2Fu~tw`21~cZ~K9ZqX3$
zW6En@!W7AVO04`Uf+0dp6>BiXh<*<6fr0)6E%ANjpC+!VODwf@9d~HRV<bh0MSs*c
zmuNTozpfWx0+R1>L<>w8mvKa2&hUYaifDN8<G-@=AJ@bsU%&6?yuiH^-T(UN^ASN8
z{#&tU0Jw5HgDe-F63sZ4jfk0T+c<aatc;3%nQ3tjr3=26K!u@iBC|ZQ*hV~)wYoAI
z<#89mXLeF>lEJS%DE9!jSoUQh21^Q^@H?`F$6FvLhak_ggMV0uK;C8(&NUEcp0(H0
z8bdW{=<a^am!vDz|Fg9q%CO>B+ef{96^m~v*OR}^Qm$x$y2SI|-cCmY(8=$4dt&V2
z^kQ9u>~nJLBH|$TL~FxcEhpS_`Sn)VD%<Kd@|&ixhx6u!>}%-s>*6aOjONUM$lx9s
zd5Z<qFuc4Cm<}P1z~%7aYY$+lGP698m_VNU1-_Kdj<tIK)(^%YQyEX2Gq%mA)RB#}
z{lSl*No`)m;I34~JWSH}-HfRFZ9IrFpB6I6CmuidDx%Eq$G~<h$`Ux2JY^P~BXe<s
z7e2Gi-|ii=4GH^*=b{?^gPmpYKsu{-RQ90e?XO+7%QhK93q}?4YhQp0-~O~1M1jMF
z02|yIHwHd!`x|cnF^w?gIlbjQ!s|Tg?$G=vO!m%~(oZoDb55Ft*&EJBUTfiVy@5yk
zi?h{&PNtO=_*TccuY2Z6Uews&U8(P7Z1wctVPAzI;9BnGXIQMNqsN`T^l9LxB}(}K
zQeRhPB<0DiK+BemTM>YFr<F0Gqe#+d&Mt3U4Bxxh2-dA43b|8hAT=baq?{6}O?nno
zldT*aw1i`kC{D*MkybiDP9XU6#6!m6dudPONh^df=ahJoL@1_}nI$;9-yC5sKgJ}S
zPrkyf1oc3%{QZ_1r5c*CuO0%u+Pabw_g8lKwiFWDs0wg*D{jD&K&V=TSK90A_ey;i
z;y@U^Ap0ZEEOk5I9gRAUE5uDp&9+J?g>K!kIfG(O_mSBJ@Mp=Pl`sV9Isd1N8>gqZ
z&zL;WyP!H1_UTYYVWioBzAdnxOpkka-f<px9Jn=bY3&q9x4LRBQ)hV=ycwSi$GmU*
zH*Z*z)avR6%?luCY;3FTQxz#)gmCAfkW!XbQ;7KC!ggF$>&``r(oP&OFia|l@Av7s
z&9pIseFSmKEFW(xhA~Pgeu>j3lwgd#niq_b#uo%I#Q_RtPs~4zIh{VSaSm@TE~t~n
zmeG4F;8XQMx^w$NX>1dkNI+y?Fu&LP{)#f_KFMOb3y_AsLgbX0e9%#Wmzj54mMAen
zh|7aqaDK+vcV;Rh>SU>gvmoocMMSS-<B*uhz%mml!>G+uzfyhnmbM5!V6jB~(6BSg
zvSujF3a6Ge-Y9vqX-jdXLDWeB^dyO^xo?@<YVYyZEk0`S)|5nxU69K2_;5{tl?$#!
zat<6h;5y}T&rRYsbX>Ea;x;P!D}HXhnpCV6u?w4D{YHodoq(+P3J3OD?pR~{&#+Q*
z)z9VCc7C|{0L(yf$s;;LHLm7I0^lj$5tJjwptym;(lAAt529&<ZjZ%hV0~CMvDtpq
za%}m&_pDw*I~VQs<NG0Lh5`-z@#f2U+H)MzvhcuolEAlT7VPGdG{WXjwm!8(I+)h+
zR`UW`xhq6F|N5}{n|bX9MTQxrs<ZDF*bo*nnR3#vanF*FSpl!&+5FgK*J<48(7Ua(
zJ7bjE<PRc()MHRosU*RBPnw1L3jjjuO~2>d2P;WS(e$^PzxIb6f}BE@aM3lqwJ>|h
zt>Y>QJVO1!Jhlg~bpqEN415TB-kfP^eE`=tWrd)}>*V8}IgX7Bzbf|@;g_Z1`n;zB
z>v^yCts!UY3ctO{pKEO~H7g(U9x*zhEfJY+70_E<X%7n9hcD@lcU*V-m7+fyc?<uI
zB9}z;uWodu{=5n!QqgT>$!YfcF?<ZiUw=R<UmuGW;lLnul|5>G3OvF#TYWt?aKo-~
zRsLC5+YaxQ_SY4bJG~gsr|MVmHj6X7pRPbAs@TD^OXs_O&cbugNM#Vd1-#W)sAf43
zua`<Qh~NA9u6FP9+y8o(1zr?n!~CYnqh>bBqSF$AsPm6=V1r|={MNqn5@7l+XG-7=
zY8|*0D;HME#(%3H1ejmyO3msvr+GgP=-&u+j=nqvqk|J|pbDT5_r?Ne2Z2!ZdW#2s
zuS`9$+Ca&4$sHg@LeOje(1Y*}T<`z6js4gfZh(2Wmp`YC-nEILBfwkELaq(Qc4rue
z!?YcWty0@(J#P|Xbkb|pYJlCa!oGuv(p<dlukCXE28sm%mCu!;ARS6SrfHVfty?Tc
znLE&E!@$MIk$w*HzaCbI*zmy|awgj@Er^IM{<<3Y9ZWKn_jajuaD{qmh8Uzr3o=3{
zj*<wpQ)Nc;S@s=RivGf-Zr=I+(+lhc_a)47Ct-#9v*2lj&oX1C`K~7?ZlqBWa?O|G
zBGF&ocv1uSnKiw?Yfok-IC_bGWg)p{#@!R6T0~&QU&X2s3;wE?O#T))Sjsg(nxQnZ
z6z%thlP}4DiOBL4r@ZeAkt)VBp3Fd*)OK!08SZycn1g6=@vn!ZVgcvia5}mH5P@*I
zZ6QXZoO?rSSi8f#eKPf^_WQ*`GWpYv+53L)`HBsAGxG4$c<a5r6MG}Jwbm_eAuQa?
z)E#*|i3z0`7WaA($e6vuCLkar#Ff290vrIun~aj@usqh|W3uduZn2zSDt%ncUe_8!
z1X1=;{dk$K55#84DbIp%zbfFtqMktwX^IA^?}9mef+shE8{?{qzm1aQX$}_H1(X;U
zEuMj49^EC0Q;li}tWcFSlS1IJKZqHdW^O+d$(?k_LrxWdbq5yjCK`w@`pLxq#q6{S
z!hl_|NTyH6q+Abgz$bLPTK-5QPy>zCMweVIV45F<&cb!P-lC|<Zh8h&;Fq#U1;(-T
zTc`=?Hke9*e#@%CNLfIPn{%;Bi@6j2Vg%w}i^3DN_k8HsLK@phE)_;0YfCH5q^K`-
zEmf&Qw-yjRxFj&WE9GX{8BeJV{$Z9`N3He}AOErcN98uVa|`jCNQ1SeunHzJQZ5r9
zJa#fLb6N|{Y9Xr5F(Xs!1=(jxl%1;Bu%5TCOQ!yWLZYF72iKUh7IG4uJMj?j!2|>j
z->@fuvf+{S3zt$Wyi#f?iaedG@$8(cx$T}X(!;6r+{up}0%m)+4e+%yf6qK9wcC&8
zFxs~jOmX|CXFEmHTiYNj^|GPg7Efp|cy+G-<d{Xk>gT-VBAAj9`^A;l2F!Dr5B$Ou
zRJ~GSapHPgVfgo!e=BYFv0y<B^8$XIKBE(3-yOG4;E4>w`!6aQ()s~_+kxLZOdOvt
zP>oZZWLG4Nv~PlAEf!KoFNo7P^iiDO?JqHOthwooF^y8AF?ay$z7r8YYJ1l)v2BpQ
z=&xW{srGvTSFw&?mNntmuOn|ZzWp69;o{~suEhmSraj2yb<L-?`g$QbE<mR-GLm)_
znypOirHm2-`Z7P4w$8Srq&>gaE8IJAo?)2;M-6^eg+`I|KMg7=A^IPAvrMv7OfXM6
ztmEesHC<xsOhk2YY<i(1+5VP{87I~yjqK{zlE?Ip2LdDtLySPhc$M`lLn{fDZ7YSd
zj=q+%$2a@}-aKh&-N}&r5<qCJSi?H~l7TTSOfrML>6G7u8Ei|le+kt)Gv-^$@}oA?
zXFw2Mv~Kw30(ag9eCj^tH0;7?-ihr@wQ*C{fy|@W+Ak$77ok;EXeOl}-npdF1-eok
zkVI%@)8({hC$(JILTS|A!75HRr1w$fU$z&ZnQ>TUJ(o2lRG5oRJb_-W>>0IELvJTG
zftTCa@w90JK40b!)>sEVuLs-cTz(uh7B3FJXP>+M=i4L2Tzu1|BuKDP@TsyXDs3rD
zSaSxDLyr(gvmpOzkAT-hDUE`VBqV1cOwkOlLten#4<W10ku%eVCJzzb=QA`OZ*L=b
z1TXv}rGIc^g|W-XD?kULlT|T8kf!fvBN;~N{@id%R@1?v$P;8h`e<W9x0N&N=xlXx
zp=BzGzT|(VePZ2Usmz-EjO{S|m1S`-vniC}mwl9$t-O|je8WePvP!n<peTIC@0Ey|
zt)tB@4_x0!Ld;D!eYh`3zOs08Mvm^Ypy!?19s&Xw_s8s9G~gm5=D4=GgZpKIX=yDQ
z#hdqa%_6L)&y7zLNgs7IjPk1jg(mu!@9}Z&qLo{48}bPYcrtdp_)G5`qFd*N1}rrK
z^s(@Q5*>+0rtVStC-j#ro&JZ4;Zg(;7;ud!$eQ5S-^vKut7c*c)vD)FhEe5vyaqzQ
z2KGatxcgMyN&|22S)68TqHol3)%{Ty$D8A`8=Gi8aIj@lwBjIImEN${)m<6$gfEk0
z$`FVI+ZRtrH9fYc?o3GiTaKxYZlZ67<&Q8=Bb(B5E`c)hoZ!6>ZwG;f64(EHu_iKN
zgZ@J0ee;nv9l|@$!N>WO+p$ww_3Bygpo^v7>Ii_r8UX5DNY>q+mhR;QcKo{JT~_vl
zmEHQ1332X(`2sJ(9j>$|zZJ42a~O}wivO9K&{Rp_pbMD$gfg)CEA*Nj@GG+jw9ZL=
zCu`3}=O$l&nm4@QCBe(ZxLai4miQ8i_(Z2OFd>7nVWc+%N4Jj2wZRtjIT`QPIKZ}$
z+7`2S%@{b2$FR#jf^N_-S%^$whyCqV{o-O1##XK9Uf6Lxu-m+W<2Qrk-uJ+#mh(!?
z%H+3daqt#r-l8E5-bM!kjTbt-x0EX8xIO1y9#Ag<d$uKH-MVaMK5i~sSyhuxyfx09
zw8a$k;M9p^OQ!M~Ni^09FD`6Uf%oLsDKWMQt^g_uq9;f4HIf%~u}tc1G#84?=M?Om
z^_z%j*3s{&_=V&1BzJlGgoT2Fygs`geawl<i;Odk_9Yx9)G5&e?&!Dh38I!~SR}L#
zytZsqxW{c_O}B&(Q+6Zsi^U*{lST|YO$ku0Ang&z_hI)+ToQD-M?DKt!nBbB*EI+4
z20Sq0k)0!iEj&a*Jri}0HMtiIo?G^^{~V<7vkkYIva%a;y^(iNSUGIVMrr+3xbHw9
z)gf-ErmW*&Vds4gnfS@geUYxKLt#OZ(^#RcH+&&L%5S3gVy|_Cc?_CAVjQ~xHDFD5
zyi7mdV86u8dnBOL>IPfSU{2U%D8QiY0m1O$D~zo1oDv>uLMfJuCNf{;2PT%Re$Jhx
zPVQt;7Bp9+oNBn5YK_04+|j!ic{tlqY)I{7@=7l**lO?T@xp96wWmxinki~9zf$4_
zIJG3+bW2BEhceH-Rx@`qZ?u*{^kFE8k9<?s3&M_Po5Gf_a_X#8h*AnYXgvSb4>(z8
z&Z?pN1tq1*pC2{1g>y}fkY}T%wq$$H47stHQSZU@th(+sX$FxkBXdQV{8qqK2-Ss`
zRtmK$6n!lB>;_dbfTSnPa(1F6RMGVwL8B7m!M)@+TTvE_xoP`7pVrH+v;Ce|kFgh^
zwL{)`Ln@(7B>I(+LtAB}X#G+HK<bkvE4fLxfs?0ouPa|y!*yWaDgQm2S^`q!(6%Kr
z7>zYF3qy;oUh#O#n6i}G9v^rmI@zStVxE{6CAlXHV5)mTvA0TF!V+CvJ=fs<pakNJ
zUvui7Tt_ozTc=ZUvc=}y$`B&KiN`D#?GTFLHIqeGCxv6GWTgoU-T!d{=@i_Qhpr1E
zKN5MzSq(gp&)*tKHGLEh<;NvEqN1Za2)VS^m}DDt%?E9lIpv4tGnd%9FcBro{kp-R
zZ9NtLS1a4^tmIh?E7_9|9LOa?-|9!&H-DP+Wyzn3qf(2p@Q4Wlb(PXfg1uW$pV^TV
zQU*<@{d(BMmkNMC*1a?rL_)#ar6!FwIP8?4ch<RuAH#9hwvUg)aj<T?7wSX7iDnD`
zAIb#cF#7Yw;hv9^llYHWx+}8rXefUebj6wBxDh<Zmc|*dKs)kJ_48SRp1=RqIk7WQ
z7{8IgwVTMfIL_QQJ;vL{<rZK}1FAQa!#TmDZ;AdNf}y#hufA~L!~#Qzo?w1wPyFix
zBOiFw;iD<utuvveQAa=X`A12?_-?l{TRj^dXwr?M(S?OND!VJs@(|RH_Dh>bfH2NV
zrr15>jM1I9+B8CiK{TTG_1aF7GbJGkQ@?zlUBWjn@-1U}=mh{MSn%vdwNy^An$JE!
zE3@-TAi&GxuBZa!&8X=8-t$x0y+(Rrr?JWYI<X?}&jVCQa<;3X`l<hB-1!QuT(t0U
z>*hF^te4<raO_D}^dAkw07WXatAuNnAJcJNy776%4ULaKgyXUqQ!{ElY%@RNT;POy
zVNz#7SdyR3J^(siiTcD4<Ibgbpea&m9*!%V+5lbzRjay3Bm6O%kj5V@D0atB*V0-u
z9LJ#0M?g`(o9Y!L0DRok{s*tE<Gn9AZGFb2giF~{f7Gsfu?B9Ty`tk(EBzGyzR<>+
z`Nbho-qFe<i|j0QP;_dDt<JHkD_wjkm<YSjp~e?*F9})NVE%nsO&@s>m}R;GpNnD6
z_CHWzN9+HF3jaY0DH9qtPCHG3b}S0^mLe2n0um-!aDNoR(M4Z(Q^Fk}_L94auc@b8
zq$v@sSEu3logN_qr3QznZUh3pfxDzqLn}}?uZ=4hx||m35B=JmAOk+}f-45W{ctk;
zvj&zQ6-A*RA5l)IAky@7B#}o>PB;-1Gp1Ux_y0i!n^3Xy5lyf6Xk;8bJbZj?9Njn{
z+aH+w?DDr?ge_)frFnk%M(~ZJQ%wbYEnKrRTd$jen8W0;p)|6c0D&uGA%cy+^~B`}
zQs08G7<oa!rMD-?0jTy}Jbi{#2Wln?#h{{0JyVxBDkQ*!|7*DFC4RJk>V~5%{9y*V
z{@v@lE2?w8YeDg}PFRism{+yMs^(G&TArN6+Hnp&AKo}XzuT9#0x}TrR_O-u^ZCq;
z0*}{~^dS0@@3a!JHRmX88>p8URC~<@ooSUvn*~5O;NIVVlBtXgXF&dNM2JpWIpF@I
z1k_^6W_H$2ROcc`sWS??K9eT@cwHI4_;}RML09MO;GOA+dWnskVV3!2`(&py<1sJB
ziEEOPw{d81(H3th7EkQ7gg4Ih?XnS9`#R|$sQ-s-=q*TZyip;)hLcOD;Ay4ql5}J=
zwh4ggvfFS`<@pJt9U`E!%^;zOy+JBAe9Xxzp&GSCN1!)IBY6L-bK2tP3sDlC(JhWu
z0;DzbyP((g+aKkXkJq!ZagYmRoZ_)VYDE8x>mf%gsk^)Ug>|qp@5XM{hVU^3rIrXO
zK1|R`!sMsC`R#;|L;9)Kmgs_FA*cl_1{J_eG?AvDpy~f;s`qL#qO&2@<On{|`%?|0
zxrs23HC(w0y>3+bn{$x=PZ<NUh$~mC!d1Cd=X;(iZ$$?@M^l&JI`O>mj|-C4M&ZHx
zH{!_8QQvT*&h;@0duq$!a(gb%$Oj@HF=PMSUtUX;HKL-}lN<~fz}_x7P&mMZPM?6K
zmx||LdHp23#NeN=Wm`Sh1BO_B8`v&wV$`>i^F5%0ZJ1l7@)<@HKIrPn5rAzEAN1#^
z+<=^$`*>9qecxUF7p?#@>G!eD`*FV^4^$3(RM=fgO>F{GlR&en(H5D8-w;!s=Zb$%
z+o{<&?L%|q2Cbm|F$w>Sdo44^621ag&RduH!(1_wvX7_4Ii(&Fg<WG&%<|#sh|=cX
zmNhUBCHdWYGL-Ldk4;gUThvIv|HBL07c+dQjE9adpj;&i?5Q2YH~q8A^hMUteKXJg
zGAOUs7sA4F$OryWzbmumIv+kgPTHT{TK6vGo7UN>2~?T;eL6*U-eav3Ghg}V9SNin
zhHhG`#vxidV@%B0@tVh^&euM0_XlmyZvQk`C{~=0fw^6gaV5+<C5B<-{pNi#W3Oef
z{Ogty2Jq;1kNq#{DAunAg^<uqUc8RXk+KzF{UrNO{WWCm?d4o!z0-V6(X0-6Ts$5F
zaFF>s^qC`wbAcycUc|*s3ZG-}=~Qs+x<T!=Rhs|JXD-17EqRlw2eXyN%UUk7`iRLv
z<xc5DHSNNEASS1U-f~>KUbKFoNhzvbJnocKE34ojx74o^q}HRzhuqgpAVz=RMqQHH
zz6S9-)oUH0I`u_2x-v$jmvSmgbS{$za3qOu4(zl0d)KpLt0ACcB9plMM7Y?A(?8oF
zG15P_2_x~C*(GU%fsCvBeB|2j-1t``ieT1Wwia47J=8Xdr6X&FQ=!cBCrLaOyG<yd
zgVv5ld%^3T&>+02I`y4*^L?M@Hx7pheC7lri}<mE77f`jn^4G*VzZH-?mZF%AY1zP
zWRN|ldBjUQSkg13V^|`~z~cp%kpQ<_|A1!KhzG0E7bG}No+^{s!esRTp@|E+ulE6g
zcAu4xK(3664j`h;&m~ONCjz@2vVGgS>$VBfuNKr_Qr&*^JThprr~3g}@=s8j>=o@I
zjyn_QmRyc`k1fTd@wI2L4}=c9!(A2(kH6DCbjDdX8`t=#FOHB}AS&e@n!8?;dkGOt
z!U-Q}4hxDL3#noehbm!{VM?u}c+_3d$C?+ddtXaCii~w_;$s+C-DtfZ-@R8PjsNIV
z{4C#Zxz-0K0;}&Q+q4^9ys7P69hpck%9BE2&HN&1sx)+EsIp1i{mOtC3-!#TvcKjZ
zf5`c}Pm_yR(AOr)?Rlf>EGZf%1*k+-I_0sskI4j^DBCInxF^it<)$UP|EBku31#~e
zvJ#DT+5T`s#lT5p6!wtlCSps6+QmNHC3kA!dp88R(|=p_LSD3tZeFuzlAj3PqPAQ~
zn*GW~Q8Q$ME<HOx_N@S*e%U1Obz$T3y6MR;fBeVnHLg;nFAh&${x@vb!y^B$GP~Om
zAM@efUQp1V!)r*c&^`<Y!+RzHXlU&PF+RG4+{N4NxwyIyHOgn=gS@TNhUT}l|0Y>~
zefKKl%ZZneoH2U_atKrRJ`V-oxdTvJT4?~28J&Q0$LoK~(<6K%vjh%GvLXNJAto*U
zJ7ayAK`P`YWQ`?UdhJ*sp<K<Lz1xSG7uz|$*o^#n{oi!z=6up)2cLxGF&Yo+2fAUZ
zI4Sy$Zu~ZHSrPUF?Ds_NBrwI_y<D|3bv1uPPARlW+5Zw887|tf;7!s&75>t>GI?DI
zA*P$I`AP;f-&Ib7(vIGnr|X}32GSJAA973eK5}0@PxN2~l{GG5I4d!&bbFMVKj2j@
zIpNF*cHZlAe$Im0JGUORK9NnQhw>swU*P<%$J=u;59FS+&|v~;#^E4I-G~L|^?s*P
zC6d7*M|)qcIGJ{9D+1CX2U$9Tyq}8XK)D2NpZ$;DC(j9TtM_t$?AKeo2+L`DC9#-y
zyHKIX<oIRg<R{^2uT_8Ey*m3p{Gq;dkDf_Ig;;!Z3|mO_28Vu0&8=Ds0$l*o5`8yP
zWtv|9RSbG4U|s!}|MC9w;B6Xtwafj)1Gj~gW}qGmNkv}J=a-)Ra;L6%CD^wEYOtPT
zW%CO*2(C(ob~iTae|h|90P5BZp)Z=EqA$)p;1?*xE-nf;f)SoT^r^FI@1)bl*_Q8U
zJZb#kEqOR!17pzx$wa@#s#^K%D@n9Ex`@(=W5Z`Cprgw<)~=qMeC@X9-}4Sz_%i*_
z^n13VUNQu{@)EhT<5Z$db6~Ln2&oE!x5=-wN7nrkgDk})cI)UMfzk7$va-0z6;DYt
z-@3O|+^LD)+q-2WcMQzn%X64qJkP?lv+v>}2nnW189Z$R)a{}5@Ch#q#zDS<(*-9;
zHks#3<Rr+_Pi*Dd>F;b4e=d_Q40O_jo<uycw6k`UJ|lBk?5a^~%&K+)r<{dXw+wKG
zqhCjZTD&R2J5M%QRL57h`71TsoJliv*5{K59ZuY!M1^OgBxLnlXz2+`u@hVVjv3pQ
zU5R%lW<%a1K=q}k>>|$hv#I^WTWRltxqO!wz~zBeYj<0&wE%MAPt89^v8L+>YIh$M
z4{xzri$|I%N2){*85Y3Lm;Y$qTgJiaCO}938gAaF#|H*1K5sMPEbiaF0IqmjX8unq
ztU`2!eVmAn+kUD-t@kOnO2T)06<=^DzmIIrNG_TB=}IFwqN)Z+!aF9%6d&B7L=zQm
zw8-Un+Y^6d8Uea#Jr&%tMJ3X53S<@QguNmavrPK&L&I{+3IMx|FB*qlQi`(Am!HL}
zfwKmt!6Ta)a~zn?B@pn|N(7<g;=8?oy7=NCb~_rr#v9Y1KCo_WbD5Wa56R1~D6E1j
z{qQOYr&BNy3mHiv4q5g%y19qGLA)j<|C5I|K|K!bBRvoAbmw=ZTcDFc7TO#pk3k-0
zf>OBuD<h2O2B0uvh;c}qc-$dRjeHm(7)7O|ZliZCIxH{Zo?=lj!f+{p`$%^T90`lQ
zc{a2-nk8l17h^`JDI+tsC?zrn_i}pb*{N_Q=cb6zj(~vu3%9cJOreM_c2B$Ac?CO7
zy50X8I#DjcoRCfdQTI)LrAk}Fw1}D=Z}fVKOEDiu0VvBN%?L$e?We{?V>9<eD3AP0
z=7%H^t3~GLXG`rTeqofrb=4zCRkR+|)i*V@gv-LFOBo;G%VyEWP|01QEA^W2(Vu%@
z#Xy$X#VPj?Erg=T&K<WE6fYFAI?KGr3NhX%6_4cHq$q;E>~<9tnm{fJg_tp+oU@vb
z0pnl{N`sjFG^S-&R8*j0&SwjLhfa~AKyXgvK8Yhh%vR!_lne@=l%Y0y7i?Xm8Wf(e
zoB#YlKgI11cP>|K>v7@3B55LR?d_{8ZKfn*7!yrW)#8}PU$Lp$GbUdT!zxVD-3L|r
z&<h;y$YS&V0BF=?vDLHgWXh+FA&zbz;Uy1Pt`oC@=Rg>WjXy2Y*`>_OLwryB)(in#
zz3*Dcw_CCIf-K49_N^Xf3^%0Y^<W4GE8^_Z@N3NoN2HjM;F8$-rz8DBn)tM2%LoP3
zaya;AtotL8{oqTc*t;GC&ztLXM=^nIt<-p5whYqR@ZTg%C*)!Xi4s0JquucyBJ<K;
zN`zW@1OWTH9cApQIMR6wwvs*O9pcO>*6*lznGz66ts;o~$rEm4VegV5z06Tg4)i}Z
z7`cxVYRdbrKSHl>?r2P4GgX<u<Xx19R*=;@nw)V_y`e{33hrulrOrtsYT)~+ly5jw
zt+jXsPm~f|jC&}Ji^UHh6i2`pei|u*0=i#L60OY*d|jjURY@>LYlp@2bj$Lq!DzqI
z>|^BJd|3(JYZV(}WI<QXqEe!gUN?uy*=bva*+$74Ja&^&NrolxIYRL_mvNGTT2a=W
zsFs`OYzmNJk`Tl^r{s<qrTMnT9`XmcUr@?rEK3h4NdupU#36*t%gVTXg@VN}qY+&-
znd-LEXk^-#S4QT@v`XYRN#mOTl&V$63Ba(Uda33@%aIB>#H;wTr^C6&xowLv$qKpg
zS(;|8Q<cN0z-#-}XZ=gbH~SU+@7b?)qEM2GZMSbI`j>HoKT>><WcD{?ZAsC;(~+Fh
z;h!-JF%>>}%lO>n$sG=qKRI#E&fY>pn_=(pcu2qReq#aeGkDqCa`O}QeI*7iw>}K6
z7Sw~#KnU-ln_u%<&{_!_l8J|AqXPnj@LmFdJl$o;?1L93Aq$B2&}zT8XBun?5=Pnk
z`!?Ku-6C29c$Gj*4ZgL0`{R?PI3uE*hOU!cpXh3`>CpuNmL)slON78pz}M--)lA+K
zBEskI(wnCuGFVj*2~87PjUON?dW#qNH%>cL=^O7dKYL?SiYZ;_^W{Y<k39mWUT20(
zvgK_cvANAkp1y~Xl_C3TL<CY}UtFX`j8y?PE3Q7$X<sTT{?`v05@KI04!8wS2VOsS
z%>52y5w_6hcrK|DEjML$!n}$OvBA6YA$7^_ny7qwd_skXU)%-O2q!@N(BWl2lDR~<
z18$JCm}R?bRJqvd>K}=rQ7uQKCv7>a5_R&dJiZjRI-YO%K&S&$^b{y7Cf_q!qD{;b
zp-S2oiwd0rb_C%L3Q6-$Vpg|`#V@bHM<b&vJ7&Q$*i@?ohUq0tP0ulroJ*x=3Qgfx
z){BjJPrf*6Fn10bJ|)0Ljv2_761=qy6%*b`PS!+=Wevryg%AGCTvLkv%`%(CKU=$+
zQ<2>n{L+et*$|A}sz`{c*RniVL+m4EPwc)NW{z*I&vZqbEcc7>eN`W{F<mf31oe25
zrafR4;t!s%Xs^yX8N!a9zTt}4n8e(9e)s;1sZ@?2)7RzYV*((R_je@SbrhldRv4cu
z{;hvj=-vo!s5_z1N4TilWRlS2n-Tr^j>t;2@*a|rp!faD!a+p?i}-942cjO_A~dvA
zSATv_eg$ygQC(D{Enh@br{<JO77V)~!$<v+<Wa!GLdX47O?9v3Q|-r!_V9b<`H4PB
zQ~^r5*y=RxxEl~T=Dg#`jrj{tl=kzaeX8YU|73)Xqkhs`5XzGL#O>ihB<jP#oI66A
zhFSsYI}0vY6XM-(e?)yMH&vHtaju={KVFG`5wh%ch+oO8f`_`<kp_=5CO`#AEavG>
z&eW(uboq_s8}NZ585-|29Jc-p%av~_iC4mlL2F<!LL2~mph_a!j$>eX>NWk&cNN&T
zsVXYpgQc5Jkv%9#t*#gMr2*g@G{OQ;%>)IsVE1?<2Ha{CP0IuHH_IoQF8I}iyHKap
zz^V%v=ijLfMY-CFc`#G4-}Km!<FAou9T!#H5g_lHLt_x6k&c5#bKsfmGSD#W1T<w?
z)$-t_BZdG}dCI@~%R1q^f&J($=7NOmk|1qWYuX5s^#$^!$Cln2c$nJD+0iRLE+y-*
zze1RDlufnl(%^vvEh#dX7j*`rWhG4vK8;0R+*{RQO9zNh%uP$+EDmHYi1S%#M5SBR
z9Ar&`Kj5dRpNR>OBApS{AP|KqaSH)aUFj$5AAUe%M$qYy3%#G;+ejI)FR%3$Qhu;J
zaWt}czjbLbGe#n3@;@12!pQb`oy;NwPigrx`lyKO0x%_YLsg+QOeLpD-I!u><SrJe
z>M8@q^6oa#gdqqC;@<Q$sa_qX)@5`l*%#z-Y_G9l+NaXQhKY@C%!Y}hNcR{i0)31Q
zaazEe$MhOZ4>fQV&q6|M#BV4CA148_=@!0^PuyeBsa%|}wqSl#jfXZwKeW3l6lV?o
z%h=8MoJzWe03H3hPq`^I(pcJD%-_d6X99vnH==KNw#S;leDm-XPiMaD?QChLSzD-)
zXz3v<nVz1A;<mP~T|>U)t=95hZsl1SeGY)7%7cd;m~U3q5?aF}V>ijL+Fyw(XZ6Q~
z={=RMF{g5C=Jk;+2J7BWe%@n%q*u{=7W?bHaECC<)Mt37G=p{cz)Y7IYbuSA!6-b5
z$vqDf-G)zlYmfV(%trk=XS=c$K8T9*%eQ61-uUCF=@!G?l!<gBU#&irlcy{DV@IGZ
zzd*n+J#>*R`;0zQ;rej>X|mkY)22nR;%9@z^wvzu%3$$0eLsuLdt~@tw2)@l$>sDk
zN-o_w-GI~T405XK!en2xlmcm8BdrZx+2zzPbU)D_j3{Z3sazd9(r1l}gTGK^d7swm
zFYf3V*vl((^NR~V_iHIV1=r`TLkQqHpT{+U+Q%C*aB_w7^vkH1YY+KD6E)DUa%xBo
z3aO^FYemye`^^PRVWi$A3ghEm>ha^t`zhhX^m^ST^30Mmd8M>3_&%dzxrqdDWsU$7
zCKqMvwLu(4U2a+c$G#5z!omz$Q|Bl`N)2<YMjNbQzvzzdz~?>+8!|}t5e6Ks7D--R
z;KG)PeAo1u(_k$B{Wpi{$NF;RlEJLNv77J#YS1ynPWyL~5aLBX8F*Ag8(e=vV@9U?
zu0PQwhHi8x2>$Xq$dzo_YQ_SR;_7%^fXrj?d!dO7Mk+a2u_`L}RomN*HH<4OE6gn4
zhM`^GZqzS~c^PpdV<(@cKr%ouP!CpsPQi>iB&SUp=F1eMD4Uqz0{oUG4|llg?6jus
zz#s}?`NG|O&F`bGxj{BQZ8<uw(_ID%%YUJqeXEE$sYi5hb+$_(rFNS0BJy#k1Z(Xm
z7)YQ5#|LmG$WGy^{D+f{@$ntO(95m&N09D9MqE~;T1ddD4&BL{aT2hpy7>2g%{}uD
zuXOk7xJ#uAx@)#Xx!)dcY4Nj9z|fawMn``lUY88o`s}^w^V3Hi))FvRToj9c&YHgf
z2V!`cHK`MOdKtY1Jx0VQsqd`41KQF<lLL@uB)Z-<N~s!JF%)Y#vcnx~$ybl2l`tQf
zDmucv&?XcZA!u9rrGU1H?=fA0XI`68leZxZRgoG^R!k3D#fWmGs=Hj^n$4XcrM*6H
zs?JmGH;MWB=SLkAa<#1T)@oJ_uq)DfzAam-Waz)<{<O{s{KF0VG^QILX!E_y=o_DU
z+0)acPu`lPMHK?mYzs|t4VLb@o(dwPW9q0JN}*(?nes%w19)Biv7s&ShcD#`WN~TV
zve%p-{wbAtRNwx2sg=rdq9I$KCFaa>YfZK?8*64GUElDia6@H@z7c~a?EqI_tUxi%
z)8c4%sXN-B1SS;^)zfaq8#_wm76pX>ou_0#^^H)BQh_9n_6F)Zd6<YBT4!5_Qd?Wz
zW7xbrj41Z139y+$irl{itv{T0B$a4p*CFFG*DLI~OM*Ce-m58T*k>!UotrLb#u(?^
z-03*4WK*rR{-97g2eueej(1hLy%_%$w<xC6rq-s+6W2B*bZIxXb$H=!b<_C1j;;IQ
zQPcO^WX)bx*L`DtK#^GD{BWhq+)J&d?>J66%1?Lo6kxToOb%@2WnSUMQj<vJ?zoxf
zC%L(3WebyBocGTRe}>GUkn0gn3y*CY+{#sfN*JA%y5*S)$z?-Z1?-uhg>`mMCpzmM
zv?`ohn~8KZXatYYQOIgzTO|Zcs@od2mc@BRdYUK(s)UT^-Wmt--TLFUVWi&)W*p!o
zxC{5-rUCQ6<%yQhZtCP1hrO!AG*G4|%ts2<Z%gJ~K1FxhmH9KExDbi=A=9vD+XiJV
z<m$mgj@8z)nOJ&s=}~N)pjGPc(!x#6`TdDEy;VEX&tA_=#Xk3k4#iF<eqH~d7g?ar
z_ls)TVED#NAdb+@YZFMGL*}j?zeLIStr-T6MF5^z$X=p)%fuOZ6Dvf5$-Pb%qQaq)
z5rc=XcVL`v@KY#%cxkGnNFmd6&OI>9V{yra{9wR%4A1Jp$a3N226jjs%M5FFSu=iL
z9>1wvBH9Hc?Hu7Fh(!0W^uBlMX{6l4TW+AbsP#d~e&a=S_HrYBQmXXhP>lpTgATw`
zbpzlF4jOIeN59G<3vOaMI=*-3QUx6S`SbYndgV3}S4U(Y)~UrOG8z)7x5}4qRmZ@p
z?XSmLEPi$G?4`LC>#7h%uO?>=dHh?NUc{cg0($wuieAKyw<b4{ce<}Wz^AnzIdhsH
zQuUwsJUOzb$!<AhWy@TUeN$>`JmR0P)Gz=C{d*LQ1_xFlc<ubAB}|j4(Y~<TYTKxA
z6-4{gq76)IKYg0y%Yerr?&=#q*HMPj+tUZPv#*=utmcmjD-CRaqDf`dg)-j|cb6s2
zfF)1c4DTm6h0GHPj)yh1XmgVeJa7Bx&{LB!=QA&PMFm-nwf$-8t3?DXfAHGP>=^(@
z7q3)=UTLj=eWYoojXg7{4{UB@I9|QlTFw(!rb;s#xp>tR5QUd&7$<27Uwwu?k+@Gl
z!8Vnux+JK*i5+%FNp2ig6#e%nR*~yAbx`4M<%m68ph9;c{rigwtwsUk!qit^cq!J|
zTWm>3^xb$7h;WLg9wq#D%1rI1kA6V9T7>jx+K;-X$Ht+^<EoySNVuNq1&u+TsX$M4
zUB>7g)ocn8<6zMjw#h;g7lR(-*plTolZF*ql263MJb%cm{H!Iu0n}UdX-i|Mowcih
zDi;Ij)Ka6YX&ZlV9CFxP)|YuDYec9&bF4)k*7o&Pxn%LOX@PY$pP1^<xdOhHbNRSf
z2JFXPKdm8qf8PBzze+L5ZP@-ff3i~fGWFLaiA9{)=J-e5kF^|hwujKlxgiuvMyIpw
z_VH}V2A&Enha|ZZQ$T}L)tj(QuZC#P$LUjnlUe9Gu#OTGgFOEo;eN4PZ}ypuO^rw}
ztF~9VAROv?RHRI^FRLiW>Kt%KU@5iKmbgehF@>B8Y>gPJyJm|{7v&23=Av1~$PzAn
zF^`nP=NU+|@b%ZdbQn+Y1c9fiw5h-!wRz=B4`GvCUP~E1x1ONdis=Gj!m;oxt^#B1
zwa^pU-VPQH11o91p@1mTv`c|eFgwJOEZ05lH0eUtp`bpia!zRWdrRQzc3M!Bg02<y
zgB`INJ1UO2VpQk=p*^`gu--eiI#Gzq9HDh0zgXw@9BV@;vG;+QSlVAwXQv?ox@q{+
zj(-IByVUoVa%OWsIgRt>LjB%OQWTc&p$LMWzKT)Kb5`iOHedv9jIz<E^=bJL#y~B}
zB$>U{CVjm9J5uWkNKyjKhlX;8gZk=V*M6~t#cdm+9>U-x`(rO?R61ph)yBCf?@{X<
zqK8n=sgH{4y7a`Cr;ou)3?GLic+RG3Po-)&g+}*&WeXK%Wr6tMlm&w(Ag;0cfGyOJ
zsIEe<k>}^wNTCjNEACm(kX*4e)H%|NBIS`c#+`s=0slRbF2N1lFsC%`M;5<{;_>kq
z6G#TLnRM}AG+2U^b5Gv3ZkePFE<|WXQkUM-a!Ou%9#C>IZULZeX$y2CoU`t${|bp8
zI+P2$S2OGlnHEguAib^Rc~Cb1VZ}?3Z+K{Zq~f&^#Uw1rvymX%HjqlD-A6vMdNFE8
zG@=%OR_ZLEp$kOS>+xcXXWi7Bh8&u9KH7E)Iy6iqNFLvJ+|J*c+}+&#bVD$p+0}y4
z?RO^++AF}9<TB4saCNCQ{HGo$*^yTg9YpR*4O4Qmi_J@hnl*o|xf@&LFu{lyaGRL;
zdj0*O3)~gT8khJmYY=yzui%1<_}Y%i-Ho5a!sqeeKnFm!z=yf*BhcDt7zv?H4~s|-
zAN<2a<d;5Z$|Pe?jT0R&D@8RQ4cEuQ;)H@EK}E4X0LlFD&s6YzjnmS;^U;S7M?ME-
zUoJxrr|4NmvN^iQsna=|h%PGluFk3p7*nMDxMV)Ei{Ze10`0GC3MYUBKL=svfPnDQ
zk##|oFTfIA))ahP9IC<g`@oT;0YB-~&eGK2%9{K2kJm7ik2%+eFQp7_IYg~VD<7Nt
z&p%#YJ?ufJD`~9toUg0C0)5jIudq*7D*>V~<?aV?$d8n-u!UWtmiA5!E$)q=H%pe!
zp~}G3!A=_R>x@XABF;7cgz}+L7ZkcN*A??}4*<1{-3Lpc&CT0)zjq*<@)j0{ql5c?
zuP=!$rl#>la?Ty|E7lpHyq(OI)0r!Nl$?w*uSCT?769}7cix+9I4IzWM2G-++ppfA
z@tAH=Azqlt`44Qd9!(e$#8eSiWT&ot8W5<9E-{!e-W6~7qPe9U+RRWB*K)sOUp>$a
zz><7%uA<H(8E#&Rm8Gvqcpxo0;6hoa_I}C{cPAWRsHrGIB*-^95y3@)VW1E|Y;AW^
z+ei%eqt_>-+De}DAtL$p!wV{FIf4qmpNQBQ5N}W2mf;ia!oW5E_+)Zn$4orSo8^vt
zg7q704t(&5?}{Aozlu=*CGqy$@Ta{59MJGRyH|0$;T3j*L8x_b$Tg;QElSp{G0SxG
zn~-Uukl;}%9iuVFiDJiUaVScq?r}d*btqMtEuXgE^jS_sjCVA{d6%M>@Q6d!nncda
z!sVkjF}$>f1XxH2%R7$86!e*uYrVMczcLPiC%7YwxZIF9t0Usq2^qwf67-D$&_~}z
z`o?2C5x7K1B7)ljkH~(SXH~!R`_^USAbAFddJpsoWp|`J(q!BSYVyQiDXGX$A>b0X
zStPfRNKjK@&)ojf02@5(OO3qfLy5#9V^Zn<H-I%q>5-*f4x#j094V}QW88)J6z<on
z+M&B|664DbrDm$^J))%ZJ4;6~AY8@B_-kHBA*U=}|BR}s<Z{}+yX*a9a>2c36F>Km
zF`Q3CRP%D6k62H+X~2r8Z)>Zy$$}e!`hZtZguym8TsYnyEbvg+Sl-ELJnKq>;eIWh
z`7(A0XUiuLKW>{Co<y7rF?ov(USf=tPpExxbfH{JQO`%EjMCuZm{*Srz>T?!$rIt(
ziO1y(5|Lv78;9rlp>GW7X9ewmbO!BrIFkn+qsUg6mRv-EKjGzhZ;tGWy?VR(@nqP^
znPIFTF`Dd`0$%Y;u>%UbzfydHG^E0=ILSjZ9)6$!AYV?hXV3oP{M|TxG~6i4{F^L6
z2qDVIP*qCxlKcYFET(%FK$`rMGUj`r9;QeC#B4rteX7s{*CR}MvICl<qS2Uo1zURV
zG-PVGfH$!M1R?dF-?F#JQPdOMIS$ru83!^Z#yK%|_hs{$RmIF_(;zRxWP#tbKWD#)
zy851m4X=s7o)%ozJ!io<(>sA+!*03-(YcTqbXEf^49$<J;eR!F0PR6JFMn^TuzDcy
znXUy7&MJ<Q_^(+rxM5*o4FoYn)Is2Xn&%M>r@tMOLJ`NL8uSsGUTZVfC6^kP*FX^>
z?67&}NlcT^o1%<Bu?j_sp+)6fz==8327V25Mj!q7gu3wU21*tI_?YE?xrtHKGNk=O
z4Heb&`7ycB`fAnF0b|H;(FD?EmLCM%81|ZQ-XT~M@{iL`n9<Y`-O4&H7B|xbag+Ib
zTUn73?!;3E6#Xa(_C3SOwN-`&5)&!zWE%b-lorD97oJQe<h2&Y9%Q;dI#I7!K6F}_
zG>7!8SX}$};RqBcy1Qj?`<r5C`gZmMX*TH~o1NGn#@QbzfP$gkw57WnwSjMt=Lvm6
zGMp8~kXaw!x)De78)F0S{r~>MFCNX-Exu1sNwhZ{*FL>9_fMa*MpxJjCVNt#6J-8m
zIH7kF2hKG}!=6d*!=psb)&tgbsrts|tG_w1UfyF{i&C)U1hcG=s|E1MGdp6Ewz5U7
zm;PX^1tXs)1HzNu->>&^+98v-zaIxDjfY!)o3OH7%p<ca>9O+gaNycp19|arFAF^?
z&r&*cD@kA7;7pL-`9N$r9Z^6VQAMUL$F?d8CxoqC^I-~oZ-GXc=@UyY4`<CKhIQ^&
z=XaH)f!Aa)D1ya0*!g~{{ud!`7e_5$Fq|>rbWi5HEWq`gdi@kQIq@h{qg+^WmAJG(
z?5AjAL2{&X1jw>8vTyx{$qtysWQE6Oa87u%VY12>b~2`cuIO~;i}=-99fy7Q0d+xt
z2hEslp3D-hR^hOwA5MDaIjD+3F+$0Os@=E`#yitmSv9|;uJL$1Q2e4pGSK8w$#FiX
zb9zH70i0ZDsl|D&%UP%VyFZ|oFiE*lQtt!rSDor4qiA2Czi|jgX+hIODd1pO4q%R|
zyQq=r22(>mT3#@PC;t7ixj(&T;-YIA5}ELjH5eqs(aJY%Y1S@+CJVuNDuOP8tN&-!
z9aVz$MM#&tbs6cL=tB!E#G#{9W84LFHI0x?0icZ>`%~|S83)uRw|tD2ti3b~njMo;
z-3E$N{<E3viyAj8VCS#1WFJs_G4K8_0J%U$zu9@1fMqUkm1R;RnTN?Gb5BXWkr|5|
zVlJ$5y9X29vP^(@=7;g>ltyN)eER_i$_Uc{ZT*~HASnL+c{|OPmr-0qJceEKHhj2N
zOC9J1eobe8sSWw^@@=kj9JxXvQFmh*hAEI&M5IBQ%x2V~DwrrDBl8m5lpQ09q#hf|
zcJhN`886#>fLR<r72R-{?@Jety5JS3yfO6y(EyZrJ!mul#tOHm&9GPypjn|iLPCxf
zI1EXk$SNXnL=_8OXX;c$P0rrC`-+d`n55U*qFU>Jujp#YZ-ze~AGR_8tuBnS*T?^O
zb$0vm^6l;Ao73B~cjqTJ=Wkw@oEd`W4()Z1-`>2rJ-s?UFV|8okbE^Ldi(bJ?DoZ*
ztCO=Xl>~~{XRppqZr)tozB>NL*{f1*d&Qgci?cUxZ*H&8PTssey)M<7aC<#@gV^oa
z#pTU^f1jRT-JTxb99JWp`IL%|B%$ZhC5{R5DUg~G6Q1)kDh)@TNtTo4=qz#4+cH$%
zNvYLy?g`6k*UYI}1Sr0l00R@wQml86IwasK`&_PW`lSgYgaVJB6;xUUUY~hH(z#t~
zWJ#kq!Ja<-Xf~4KDOE${gSu+*&F0k70aE3ErFLuW{6IUHEUI|TQoQ?$XNqPPC98nt
z;#Bs=d(XxPBc<R@#*=4{;jS!_mg2O)b%whMk9IxgU{B#Y91L8tqz<`EU777WJIJ#v
zfHRUl(Q-h}fp$f$*+at(oAN2W7%z{nuWwHUb2_`dzC1h83%Jakbd49s=dW(xyuLku
ze|>&)dv<m8=BlxZg8%CL`sVif=IZ$7?B##wE0JKi#F4Gi`DsO!B%yAuf~3>icjwpV
zf_cjNh5kriW~t8U)%m-#tJ{;~%j18XzdFA;x7V}q9+<MyvU`Hwa)O4UjUn7XBzF-)
zMx_|X0U{5SgNBu*s$_8JEq97T=m(&G=3+?QCGYDqv$k*1u___!eIrJHdz|6m;ur%C
z(}a4iXc?Rv@}z`up{h_du{@_&Yy)ArXO!JKNx5+;{TLkwI;>cH)^|dvrsZ8s(yY^4
zKk~O`89DM-Ipb9U*(rnTAta#c`o=!tzenl29H%heLh^?r;{_7PWm{DN3rPBZ)u;23
z^ej9IY~`ddq5DEpe-z*VX@HEu6-7@pA!W0?mETsC9vwZ#rcRtyf#Wk<ih#+3vI=S_
z)u2Net-f6pjneUz#`w?ZT(%;rt7P(N`-9vhXVq~mh}B7jRQ`J43^`aIporrz^r$?z
z666+(Y(h|#Sk;3kNFI^!M2}p5XYNDFG7`*bKnCJ(IT30@1MX+h3clJQBL0-PLTwI~
zqpYqds4gmrY@64e_X7nkrm#2|AB-oXy^-PeX(2NNf|o3ckI>=a;bB=?*hC`?!<p*K
zCQ@F&85x68=*z))e>~~fpOS<-J$ZR?d-h+KZ?106u0RHzy)H<sqpzQTO(w&dTHn3>
z$Jy2Evzww=u*tey#gjL$q)uI|xJzPZH`o1L*9k}J@}H5qzS|u;d^xm89-h0;sM6P@
zZ&5lzdxz4}GVbXy3ub3HUzu?cqG1S>pg~F$g7`;BqI0XFDAa2?4!5^HiScc=3vnAV
z_f}Zea6eC4HX?KKaD=vh#$Rlw@8o4w66}#wzyimt0ykFsB#4jDf9$32u_I%Z)%U?*
zZV!2ByGd+|*E5x}ug3cu>SQG{efi?__WIS?+2!r|>zlKycgL^t6!Uz-OXXXuVuj`F
z3oe;j&m9)8oe>EY76e*qa+_myI6izlMLjnJ5F~JQ_K!DjZUz;9c4KkfIAwc9=MfM+
z5E>3~l?pN}$R6x@dK=pn-{xU*B5ww_TS2ft5aT%ER#v$--~UwNKng@RuL#=e+<)ce
zpXI_{hx_BbFUN<E8@4i7&cnpEQf#<qLv@5iJ==14oUocAQA^AG;zRhup1ps6nAJ(u
z+93v0b_xc?W3o7Zm{4V>*yeRP8SjsuJ<9A_SX7Y{sb8YEGs@QL=b#uPQx^jBDO2qJ
z@1A1saE$Aij7bnUis=kHF;`A07RG8EM!6vKwA`)=33EKmIZ?h?Gfa%|Vz&i8qkj=U
z8D)@D<Sm=t@=04X<5QBztDUc1XiH$8RX5cA(c!`2`0&|(cyeIC3{yI@_@r&Pk9ZK;
z@i(9jjeuRp8N<PGj|>a``S;k(ubz+hCOK3sU0q8xgU0Q;*&Zy9M_%4KR{QiZyrapK
zENK*v4E}3zlkN%b`)CeQYo{EiZjCCAEaPH^Y&Khawj8H&uJ#^LcRo3h-p<rfdV79a
zv{5Gy`v(VqU+=(wd-A^t{I~y1{<kk*x)u||eqJdXyVuMmFXZRrkft;-cT8K>2uLs!
z9P7w{e8v>LARCTdA&bZBo<(<B4y_F|bqPuELI+QGN!<jnkJEfHI$ca!bh<(^zz{Tc
znE|8%+fu-3*VsjS7-)H;uObw5&5*;#YSnVGqT+0SMaAigyhKGP7rX{+*P$kNmuv@w
z<@XC36OZ!P{60d%$^NkTLOYbqS6>!i9h6HQ<YCFi!71~C63^xNmX{=O!S<6gyden}
zyzRw-f~;<U%4>)T&1NDEZhe9Rc9~2)$`|=igC{A2&<-ZE{;tMoZ@6Q7y>B!iS;Gya
zZY{Qd0e&Nxq*r2+a#DRBChzxPV$1V?>A9`l+XeAL67g{ywmk~iaQ^q%v%N11=l>24
z`uq<c=K1y4-7nCR`bV&fHlrSiS0VYv7sKK#$PxNt_qX2$qSWB*A;f_Tn-;M1p)PQd
zu9$%;H<B0r6Ew^nB9xnoqpS${bH?&m`D+1xZ7j1GLCH5u5=GP{=-*;h2M&6E06(dJ
zoy=zR0S!kPFcP@%TOyh6AL%w`iRZ15;N9|U6b|L~(0K4Yk<g)hEZPuV;b=-6oNyu|
zF0*_PveR(=o(xEYfI*^?s!@)%R7}+A>uXV#26GUL+vCCc4C&NF07S(J=u|&48C;xy
z1srmj%nJkZ3fube)j8v`VWG2hNcG2bSaq4o0<Ff~;~Av?fIb|3(|&3VJk#NjP{vns
ztYqaB*WBCA2!;_2;u#wLnUDU=hXrV|-7dsd^*cv|#_WoPqn(^sMmFjYI#~*YK+`Nk
z(P3qu%psS*m3I`<)50bL8vbR7hPT6ibygPheHN%As1ng?Ol2tv3Ws4q)sj;E*I$v^
zF|sm?G5YPd!Gd`Hm@lMEs;Qzz2I`dC(_1nCAV2lSYB?$Rl<lxm>qdYoRrxpiSHj{H
ztQbKn6lpEFqv<M-lTLS7Uc`l=l_gNj{u?r!)fGz7D9mZa)G>Kxb!1NA<4i+;q0^0%
zUl@VxD0J-@R21tt3UGkw)gw{yABZCJJmH0qPcl1f8VrGAJZ~Ybpw_S?iqbMhMC9nV
z-*&BKWXq%9emk;$UZz7(kV?kzjPm31vDL8;{&d#=)sfm;Cvw}S18LCz_Yd}q`v0@N
zgM(iG{}4}=l*vv`OLmcEiJJ<4&bYhW8{E;rJwpG<rUReESVy>(Q-_TdtdSGxEO9)<
zHr@xXMSGT`yF)F57L45ukKja_jIu9(9?7GsLz%&#{8`o;$z0aMBLpwuQaR!hcSjzX
z7{OcZ>&lXE06Z8rE8Ev%bBz9t0vfm^h|x3ICxpsuH%+m8l!r4M2-^XFQqHQSCmS}0
zI&+ZJ47Yep%)4X%mBzkn55TRXdQo=qye{XMGqAIeWYJ5Up;hu98;~L#%t;qunY&q#
zXZGHZ5*07f@Na%pf>oXrl<gl@>JWyY9Ge(gT<QYZ%1){qnsX4;eGz%r-0qYHyL^#*
zH*#`+{>}JHJn4ZWnQTRWU3aST#H+v5Qu}K|)yU0Nr^L*-_}77|9T7O9raS&7cp*<T
ze%5k)-DeH?Z_IBy4WM5BKi~iI`F>IUA3lHH%l{AYn3CP_JE!7ZUC1mKn?=y)7x;&l
zlGWlOufafk_*I%RhH|vPf$L>CTQYqD)B&h)?7DJO%TPxUXY!zbE}SKB8R5ax7~xo~
z5D2EuveKaVo<baGwKAjk7cyPsj*xJW6E0eWnu&v|yPZ$7qldJZe8(m&>@^EguBurx
zIzyMuC-$*5X{*(;L51zh%eRmxBHvH-wzi*znk}2nrR~v$ExCMJLNLwTR63hm@K&+j
z2*IkWG$SMJ>AYHh)dqz^y)|23W=;-SE$7&1SJ&`%Y(5e;&8eN<)ehFCxHap+sK!Ou
z0Mx4gTNX)+HDk}@rE68?`LYdcJ)|5u`NWAu8>m_`72ThvgnC}lQ^VzG-bbdzSuRgw
zoxjqoT+wRva2s&U+p|<*Gy0+)3A6GhNR%?e=_;0#amHMKw}H?ahkRbgl;R569__8$
z>$Yw>m+vu^h~*@Z<=hr_baGV-*H#zVUJl7z{>Bo<=~s&!sgOf;RqBT)tC^D+WjRw(
zumIgAAF`TlyuX%lt46oX!s~=VW93dmWnuSin0*Zt3x98mQ5rRu5lR+DSA#=VuQOlC
zfRJFR%RtzFV_k!y>;_HYXr3`~h_<Y23`%d%nv4)lnWT|ww6T&oC@qG?sI<A1&%mnm
zGFlT)6PvZD)Ug9brN`_*L7gxXLbR#Yu@7dg$Lz#%M%m@bdCDW@pN*YR<vMo4to5j!
z$c`|j9m$_+YFoW)hYB?xyHhf}oSU6euUd6Vm0hEMQ)bPMof^QweXI81)A^VeG$d}*
zt84{xEvf|UMwGfyJLI9hW=NMVrmD-8#`)4JUAw)s<I;R-<IGZ_nARhH%T5DT!%cZq
z4s^oF>q1^fOQk~UM+*>3!p1TfTR8(pE}x>cwo#%=;gw}u>yDM>8}w>ftwC$Fm1+gI
z;CZlr>6L|&bqaSa_T7}o`kLKZT|<4W0@2+plz_~HnHjq<l4w@rkgK|G`yO4AfN-8e
zAosEcgM8(6QHTh3X$gn?+ZrSa)tj-%vU=9CDN(G*W{O!qD{7gAbXC7rP^;RiP!|_y
zi<(VNwE~DnmuG$Xj;*zFaaPpn?Ao+p-qodl*%n4eT-xX_mMU!(7rTIx2@gyGrBWc&
zEw{AVx(hzbwx`P(`S+?@Hma@9?Q*&LGJcm&;aA7;@&MLFq>#@q6|;pjf7OT-0j!Hi
zISHUHZ%GeWjgAG(`r@FAE2UIv-DaDeC{`1@TO)1UCuY%g+sS32PW9VzYU)DTXp6>w
zYt|VXg$*B~%ut;&A8QKeCdigbMhlZ1bkob*3Ub~ptbq>q5C1&O09PhKF6XpuYO(}s
zoQIG#+G_qR@Qj4NCa_!{;O<yfKrIQfu$;s>O-tO=YCZ?_7;071Qunbhz^@+oVmjiE
zfb-R>dyq@#oSlbmY7MF>?XzxpT8_GZ1lKs&ZHQ5VdJF=rg;XNC?xY~$KOO~0c=Z!+
zW6~uzoz3XTd)abEN74Odlx)92Ra>dSU1!v7+N7!~+P;Mrjt5)uPTq$SnjQDCnyatT
z{yKYEb#S`xyX0u3(|(q<=0*s#*wd=?ORv#ft9`9v`Q{ca`H^bT$d&Kn1?UEUq{%d`
zhSumCXkB%E99nq{nyYtq9yD~Vs~=$vaO-2(YImfzcC(|QkpIdq=Zr!{Ip<UwnPw%Y
z*19wX!>rU=PS#hd=O<>}202+-w0#RL<fN^5CplR{vzwf3QGJc}*N~I7a5~G4JdJdb
zllGb$A<!%*i={Veu8o{5m2YZ)v5@?*LP5?7H7UqO$@U6zZKVc9!l>J%AXgP_-$EM&
z*;2flf?Pziqk`OAeU0|lQIPB4bXOR2G}1{yw$|JTfffpKq4Y-0wNj9a<sV5wHo&g0
zAa?@NsAyF}YgUlkR$U*5b_#N1_3jFCeb+iG$lbxMk6|kXxwdw*f^1EHX<Y3N$`x(l
z6v~(H<Qi(K+H6SYA+&H4)l}%(T1%Iay;5h#kp=PY?xR*f*2ZN`S5gDCwHz!(%IfM?
zs;d78$h31YmFql0({0^NmRgU{x|82~uQa<WYu4Z(|IQ`Ztq3x7DmYs%1+TS&QKI3v
zLRP0WJFKfxKhRmt2KHBfQLrua7VNHExD%TzAlQw)HCFE2_8RQ021@4zWKu*I_GPQL
zLE|4l;m;at!=MVKn_A1A9k6kPEd0Mt)6u0`FX-wD^@E}7H7sUpv38JKEaYO*PRlrl
zTDL{qP_<*bYb@YO7@dhaoBuA0w_I!OhMO0z{oqT-X0lsO({VO`?me~5ZK*=8q2i^e
z6~VGbsfLxCE80FhzP?sNIFwnrDOA3)Y=<`5gw5N^cMF~`VcIc-zD50YFjyy?z7|mT
z@V7j%bP6Q2SKSPS7D0u@;+r+tD!{N*VY4=+Q2@z33pRyvf&`@l?G4rK=Z$Q&a_5hV
z3{2heS;4rRx!=TputbsejLKfRVIW1NCdO1M(*kB2Mr4-j#(+|cIx?P`dR<yvhtXI8
zbSHc{$(<NWzRG${wqPW>*m@1LVjO9~_1e%^)ao+Xm9<40DV8j)Yx5??>h-NlwOHqA
z(N62VrdIQKq?KE&e|y;uZM5VErShHmLLSrZ{GqA-IvA{f$uFt_twsL^v2^7hma3bf
z(2k$vif`6nTmF)-uvwdJ{hYQ+o3)(3)>+pmT=v|ANdZU`M(V0$J2#xq+y*8nO0?#E
z_QLf8B<eJ9x>Av5h%NY<S*#N~OVR1Z#cHZ`Xm1UkWv$<tkmcNV;ZXS+Yc<%+k94WE
zz_;N(X}P9<7V@`l+t*uGreWC`1zWGa+B)@vVN`8ci&Z6C!*8)NEu}jx&?1iA)@gI?
z?yaw}YU{vsCiWa@bXmjJikmdwyrK(*H)*WR`YsmVq`kJ9MY+l*trjn;*ELEP*w<rH
z0@H+({Q`VD<13eKV1Skitr=mfy7j|r0nxx1n`#t)+OzRJ3y95A^Ht&1jVZQ=vfj9^
z$t2r=>%6qA<kN*|)&h78befrHMWx4RybV*Ws@BwgQAcxmo=wd41*ukJrdZkvue~v2
zE!?0~y1dbtDHdtL7(|^KO~{5oN86;jTFVZvYn#~WcTTt|XTH%?aEnRZ+L{V3Z)Ym#
za&5?eJpDsmr~W;Q?mUL;2)tObf!a&Ol?c%<bhX0k`X(!2*m_jFAifI0)0(~FnqjD`
zRzIIM0Ik_VyUN`WXkZ(SRl2v>!V;^i*2yHRM86xK>HuZ~eAeJ&t>ATLJa$^^qKec*
zcoc-18E;jsM`^wdW3H@Mk3s(am(KV92qj2=-EbZy9^oyn0BX4Z@A<*rLE-+N!~Oj)
z`}==B#8cFaXYRN-!>DippeS?q6(4arm-mnEVJ}=@ePhsT=8_k(`c>i)%bh_oz3C{J
zxuarR>18+Ymz1yi3bo<Q>3_j{d9z&kTD#bN7^k9j7)ME35^i%<NaZePQ*9q1CrrkF
zoH$8D<5l`yRXlqLBf@!heNXn}n*5c8N9dg2L<#w=jCssr?4did;<-+chnNH|aj#N_
zm+KGIx)rsK(D46nVmZ!#e$QQP+0pB>ccbgqm$lQx$#Tqtu*+06VPA)PvAJBgvW}Gd
zadzF<4Z=TUFO1gObmIE#9pWn<6CXK$IK&Q(DdEjj$I0>*bL#RV^fXU!0tfi=G*_6|
zOOn8eR$)xsTOQ+>+#2=X&*)SQ&DjIxG0)HM>v!j;=f~*Vy~(6%euu_&X!9@`L)pSK
zmrKpCPra2Ww_ssNqV~%&bf}8@YP~3zByeGG6(}IsK}*5KkI)apy@^YPKmC?}D=mTB
zO79;We635{h6r7roL8;`+c=Fwhmt?;VC~fo)>o64|3KgV<Km#xh(U!v?1)V&N9?N(
zEAXp7@Cw|2RyRaq1)g;or$6=z+~2PntdkRTCIvy8(Q=%z5RFr>G*r-&<6w1!o}io4
z|JoJ8^e^aJ7$o%a^6elUk&2;z$_<v#BgRmWxVcU?>6g~&vW<zFzQPz<l&zBP_6c;N
zTKP2W+WyYpb)N3_KTM{|8QJRk-$wg?fB$*${@;UV&wBg+Lp;j<$AO#0<<(z8(ooDL
zp~qII(xHBGRdODfcMRwK2Ef22AdAyLx#%+oL8l8wEP=+Q%R*XQ`vK*DHotyly~|hR
zr<+x1?MP`J($Z!c=y{k7t(%e+P+-e5m$BA-V~y%;0jT7ltlKWFy~m_gbaUe^CeK=9
zp>88kv2iLeuDVTKe4VDsm!)iWRZ9DoE!U)MdPz$A#%&j*Y<@k8t^Mq3l#Umpta&X;
zRe$vr6Dn%z0*BdMr^YRR70`6~bXglHErvb2Z^Ag7X53U!+q$)KD?-a%FkwTzcw0p+
z9xdP@6nOlsdcKPwveE_{6^26VP8Ke&$c57tzP0IN9k>?Ql<%%Erp$5+MlCM2z*?>K
z+^*k-cVDz<Fx}N#<JOB7;Im!3weGv<gNFK`q0cyIsB(|Gf8O7J)7kz{FUoIc`~Rug
z{y+Tk*_Q?T|KM<c(%b(Z;xTP=9EN;%sqOJoFyws_#1?DZB#uGe#|j)HaJ<ANU~i`7
z#<J89jmwHT5{-}VlBv)rVghjm!un+a3F4zX9O<IXI~7M#u#VIvCL?)$3BRLZ>en?K
z2Of1WKSF!LrqZT=>>%}IzREd_yW#~kEMN2rQVkg+iY!j*Zi8s#;9LjcDwJ*B+ZF?@
zKn4Meah&%Di*6MpMcOf=f~{+M`cQVZ^w@D&62z}<6lsxNX-id7+9Ib7ND&U^qzkZY
zb3&*W+52B@d0Xoexu$J}5oHmLS0^6k{B<seNa<5fsc8d$p@fCQf*8|)M8+1qb@dx#
z2d&x(cb0e_lo^_XQLl`ZN4b~;SD@+pSTL*~@&x=-M%_Y5F(zd+@(6ZGG=jC?Fy<bc
z&uK6pyJQKb4#`jOX!HvXNAS@c$NIabO2A|4le55KE)C{3_~QGBr~=;zXq`cornea@
zPxQ)$j>qPIBluX4N~wM`<x7pVw1B=pzB&2!_Vw|_+4be|$(gY|r1p-6!&03$muFYU
zH*c=0tG$SrpWmyRQR2B*WLDh4g7=p=UL2*I8!TNOVq^a^-HSZEI)8U|b$fCA`uOG9
z)$RGk@yoNJ1?gbvM1ny}7Q5?sEOAExj_H!@-hIV?HLulv#^q%Ee7v6lS~4&3$%Wv7
zg*`io$Aa;A#P}#89>JXC_v}P1*`whu6eO{;n-w1BN=F2{Zvt<11g?+tQ{F3R)L6uE
z_>#o=VGN<Q-37s3y!a*m2@<1xHTi1KcufNuQ|z4*53kaD(Dn|E5+R8wbJK78lYxma
z?Tng#sI^)bvl_(qCI-FV(|A!{Go=7%lna73V4E`35R`k9+GQpBVI>lu#1VCPuG1;!
zztp|g9grl)%PX{+)*!u&7+=eX4|i=;S3OGQ?FjMYwj`{&M(dk{?akuZOiZ~UcJ!O}
z&9!bUW}f&3dQjS)@p7#uEA{`*_Fo8r=C>+;C0Q#Yu)+SD93GbTe-9^nz5Vwg9%KJ^
zD|J#@a?d#t!7<rJTLFvF7V*P)h3d)+5xKox-2F|B%M<OHx7e1gbLXWJSk}3cJY@V@
zzg9a4o7tv-TT@~|qtizH{eo8up^rV=<){1lXRZ#-4dqp#jXa=X{qOHhCdKm~&khcM
z`t|=I9^3j4c^WUajkdfPZP6e`;}aa>DfJ+XeEeN9C2CoZFKED`ZM1(_TJMrVc9(lo
z5~qP4m!KH|1xahJ!M`+$2p2j^3}I&<+|^`pWaKNmggX%p;f825%#cMc2`J$RI}YI-
z#SCH319eEp)NvU1i2N&|Q5u>r7MLi1JS8Yf0;wcm^!EI82ejG|3%nJI7>m)2dPD{I
z3pm$juV|1wfc8cnViYfMjBrGd)>%A{IanYTGZZgK#y`iIcT5zzC+@dOY2!!e2VqDH
ztj{k`j^xF^>cwjk-?Qj0|MK$uG<yNiE+e|69+{If?qCngandEUWpTw={37jtPiki<
zbWGAy7^%J3W7qak4XJw?u`u^}AT-wR&R@NP9~a-fesc=HuFr1Xo~J)w!p|9h8L=dk
zlMddW^gxo2ACA!T!@~ou^!qfB{zQ3l=?GmUJibbTV-9DTf@A)c>r5iD0DL?SR^Wq#
ziL3gWgrP@#62#a8g!twd8EX802&KE^@RwHC;SUZzE%@oO``{i&?(yY$zf<$ac{<B~
zv0w!Yn(<riIKpfR_=3*j8a1Fv{y*D4EXe=o&!6?@KR?J*@BxZRp0UW!=Cvr&(=%S#
z%)=Q_CET@SKaoP{gatf~Fb!g!lky*5ir2{SPf~;<bhDrwU7wsF%8}21B9iulE{T8?
zKn)#7n|heiBBH85g2n<u!ikHftL(;q79pI(3la!+Ay7y-iDdUv-jV$kxO|*ybJ>87
zH2WBUWEX12DUIHNI8r$^lxmQEH`I>wT|x6m-y6zD_6|H>=3A>m0t!d|vwNcbV7clR
zb)-faF|>#nLU%JcJXg|xe58(P9_7Y&p!aHy&}2}nCRJ-YO4revPO9gmT24+iDd2Y{
z6pVpVPSkp~b;GWp$Wo~u1H^KKvc9T4JS_L{j(+_W{fE_pKgw-3rHYHGw&azQ5d!bT
zDUAjr6biP*V-m!Y#!fs;eephG|0G~hq)N``snm3r|I8yDVn6<W)FS?4a`3Dm|M#Eo
z_4fY<c}&qBO|df;Jcvc~7hsFyyRUdoyq|apk4bdJtce{yZd8a$88JdQq!}O5j3TG6
z3<`TIzz`nf@%SZ)rt0OK#AR@mqf`be)(TI5O=;lLU@l)cav-x3#tWmMfy~n{o|ch;
zea~W7n9G&*1}s*8{y_paWT1yZnUpU|j_L@$s0uELE+t3K$00YY!5nPGzU8}sxy2D|
zjdZHWSf)Vy?@=y)NJljMyvMO4?bIZ6^~(@mmfFN2bfVCzo5ncF9=MqJEa1A6I#ej_
zbc|y%OFZ?Wsh{>Xg>Dxy&m&PpmJ|+57GTXu{8auDy;eVep|h4oe3>zw2J^AQBEtCC
zVSc$)HD9VU*EH{wctH{_bFXYR@GkL4Ov(sm@k3>-#IQAwBX<_WO+3-Xs+Fd7CC9^@
zH+Ch%Uv;Y7q|M5)jjAlB^mWIucAC2-oul^kYkJsAY$;KmGg%9iCDqXiuj%78Z4iMT
zRf7c50j{Edg;uOsaY7a4-EJ=JJVrFgB9{jBY`VbaKnLwiLRL0ZyDpeZswGDf#1z<a
z3v#w&aNmdl1XVRm29)7(M6kcfOjL;|@ne@Pg$2rjb%tE^t(_3C3ZAmiT63~3{GURe
z9U$Xs>PvXceErfT5LnQf@GHqqVOkaA<#+@KNqBO9bt+Y@bR<7dGw8E@*0TSUg4)&$
zY>NN*@>$XTd$xDj$A5f~r)1XsL(c7>wPE;sGXr@t{U>o^umrVF+6))3LNgytVs}P0
zffT}Iq&&kTmvV<KNwjJUTr4dWd|I})E3nogr)H9B`FQ8`pEvwkv4E!azyG|n{+~bZ
z_kTWr$YYJpDp2?DZH0gAG5aGuo!7rQ_;c$-?jy<n!^!i#lKemD<^KnHs_X+b&B{I)
zjYjr3&Q6>nJv8P-?r6c--H2n`*6f0K{+KUzMUf*EMnqREeH}@oWfZETLlS7>IE1*w
z-I<aZi->Fr>>+7n7GT^HI$sDbGZ~gT`lv2{@pAtoDcOHdBakLuE|{}2%&5YowH#Hb
zH*5{lRu$HUwfs|ByYjcPc;z43>Xm<mxxbVhEavcitF`5+R5sD?Y&J7xSPW2w?%H9k
zwhOxMtjJccj27x`am`KzQDp1$KiRayWVQ|~FU|7MoP=R{o`;r68XlqH-q7+nM+d`y
zwuJDZEiDx@T7R^;alFyTJ^$S0U~%QD_=FD|myh{ou*wsKHaO|K`B~rWv~TVt+wPPG
zyL^#*H*#`+{w;U<OwflDdxBQH6&lUZE(_zl#+z+h-Kq@<y(5yUzJJ{SrkO^Q7ob`0
zWGE!_>C)!R9pR9QDYUhdBZY`S?l?VvId6g&n0iUnJB9zaPfPo6ETj{i2P`7p+i3Ft
z9G3FG?(OaO@joBrd4eu+9Fr)3fK@re=zc*0G)<@nNd!Xd+~GOl<G~XdW6F~djuRuk
zAfAWj9-GR{DKwbxpon;If*p?d8t-x74xXTZ%t2d0TVX_I^ntiCJof*$Jw|VT0&j&_
z05t_lC?pZ`Xh6n;@#*#Lb<83%c!Ext@3R2CJGn+Kjrd?Zr|~ZQE72c}r@utI@UMQc
znD2^z^q+hg>}G(b*tttW8HzjjV$AQu!58Bxz8icoj{R`(#s52ag5KeXvV^1a(=$F8
ztLVYOn7Rb-%5o9==U}|#4s*$W?kB_~Tdsd0J=%ywYa6xe|KQ-+<au%ZKmYQ}-v9GK
zo}%$&Gw=;x2blEw(wNiKq|X^xCCey_cpA+~0LnQq7XryI(ky?=$$0NzJV{No0*#H0
zKq9TP&!ugc3o#0CnxG(Od|v997X%)K@5<j^X-7loB@y;Y7)W!02J^&!!%_Y#9Mp1H
zNK%klLTT+yaa|ZI>|I7Qh)Hz9yu=UE6I}n~ERYE~#vCr0h5ty-ijud_>YM-&Va?-6
zx*ZBI(mW;FKD?p6Q1ARO2l04Ls=&ztOL>NjI}75cHXRE|aC~|G?%+E28ll`dirnBL
z%HjNhtO3Uf#Gi#BM#q<b=UL8*NbnzhZcjf3wdQo;T+>elb}CIIc%F!CT}=sbRfiCp
zp;*YYh=dX0B#1MoO7^fB!U1C7N*ROyghWF6vBYx)buUR2qlh?c9?)M>*jyjd0LOV;
zfC(fJU{5B40r7}@yh0HXt)L_@;4P&gfG&h^rooIIK^hZ&w7WZhr?Fn8!Zb<(8n1R?
z!O>{~>>P3v?Q%LF;mBFgm^g6~kzKF}1nL2-)UoeANqu-vbGViWL)jiQaO-A3EHE+Y
zSXGt1$Oc-x5~Fi<c72n&4`DKjqYvYrRpi+ehykO)j6`x0XA$!OrVe&hBt}V49Dbfm
zeHwE(xkGp?=4y<8PJnfxDN(LOcZ|*hbb@{2onTJh`vi!Q<|8q%?WUmUYB3ATQ8PZ6
zeh$lg<reF8NSxfdaS5l9plrdC#Cj+*RsGmkt#}+q-O6A5P(<ZKl|!lL2Cy&Hs%{FE
z(tcI8_Vi6C+42z*0st0!G*2KX_^Guzjfr0YxpJzC1#lF9;g#jPI!ScFT+#w}b<F}g
zIYB;i3F0J%btSl~7&{!(sYlSu%eNdcIR90Fb--NvClVyS9gz_lvS3*GX*R3+=8|R1
zm{(lp@@W`8>m_gc$qkLp+D!u&&QozjXGXj?(C`V;gjQlYg$8SIoigSTTof6on98gY
zQ49T%U`Zo?766`098rP7I<#0AkmWlZ8EjO@G+RqZ6{r9zL>Iy+JsUT!C|AEY<pU~4
z<<~+7AYCEIYhuN_3K7(1RiZR4TU&I%JNF*((Wm;V5RyLHS}s(Q0mTAUTu6F&n`zfv
zL6FG15+!BQAEBo|;L$I~qyL$VzW#Ca(_idV-7q|VMK^LYqUV5Jn0Q_m`@Vj&1&4jR
zcC*tn7Rc{Wq8K^d*O<_(_BtbGO<-5iw800#uq0XSOiL45vPVI4n;E%B^AEw!0)@=A
z(^fNIk_}Wd0@IRf=5fLxUcD)$lr*1_8b@Ih%t=+Z%#sb9%vf*#&(@EB`S)o1?^|0x
zOh#XS|MZuwAII?Hi|xN}|6Bj@m+kGXtslO-czJVq_7mOy_YXnh-^suJz4Ze*`>7?6
z?d`w+M-5UBqikbtM1y$5qLJ)LA+cof$rH*eNdWTYRB5O_exQEhBMg}>1z#2lP!d-I
zHON!vnXzj4g-ij=;X=Q6NEpM98J#CGHQ%m(Ow>6_!H%-MwOu<gqBgu5rS#v^<nNUx
zuQZ1$P$dmEph~R*jM4cFr7cj7m`~%FxH2h2wu8G<1C_?wwgA6`T0?Xub4*Z<$V2E+
zhsNFtj4e8&#N9zGUXbXX@;ZcLCR9o4>ns3bNJi3nRKAOGhP@+gZ1Uic3bk5362aep
z=Ynh~u(Y|S^iwZxV_YZVD^^$yI*v=5jP28Nqz8>~v|#r@xT$)NP9f1DIuBwJ&9Fo4
zwi2WZp@Hes>u9bk>Z}?y`7zBKW-DSbj5F)+enA8&3t~+;fo@}N$%s;XeBvx{K)DZ#
zEsWTb!milM%eO{an2fIMT7R>tSZmjRcI$lE^wph*$;JVAxVX$B<Kw%kwGD0q*++0A
zY~0TpLd{NIH_+>;E|~hK9J!5`TltbRdR|t%OtcN&BisE2xdI&|Zli##(u9wVOA#no
z>`B1mC;=Cui|)uuGT18O#UbJ`i}WrlHXW@v2LI_4+(u}+LgYcYq^sRC!0Z8kqRM*|
zN0clH!qJq*5sp?_espxRAS*~-B>4Tm5)!QhSyq4*(3C@csyq<UQlPyc0rHtkXDhMl
zB<=8Vo!MB)my1DWx%NNAY+m3{r~t|zen(c)ppou<IU|mhJ&4Cxvn-n9fc_%qK&<dN
zi^QK>umvT@67pehrvp|2^a8Jc<Q9E;5egR=s>BDdlCs@9t{}^-66?)D`JRfk>`LZ&
zG?>2yFMT)L@}$Hj6fouU2mi0<Rg9NpC)Xr~lgsNGm_B}Z8{j3To>&ppT6jy#zjCmx
zS;N~5lIWmOc~jTp&4P&WlAAO)DO})aag3dXN@ym(kSf*#RtpmHC)VtLD|Qx2(~ct=
zdIbHiJF?o5TWVxBBToD`l<+#UMB0urNF_~VhW?lS^|wvjn-YW89>p^#ZisE@7j#!b
zlJYus7Im&ggw7y4w@+}u)#4VC&;-QC=zGCf4MksBz_oxCqY^y*HM^EsImiyWjL3{c
z*&ARJui4oHagum*x9lB%sqkD`hVVO*ZZymO3JD3c0<SXC!(r&r8cGA~*tm8q1p^1u
zOu)XAEko|HIy($yMCK<PHXF|#D3AGH<??WtKUE1URI_^0Yk>-^^z;NS{0Zo7I`|sd
z)-&)%_s-mC5V$<$Dm07*d_hALv--hb5N$iY!ye5g8I1IpL0`{*{*_>FtX2M|Db>Xl
z05N6%O6U@MB!KmGPd(Sck+iKPBdLYRnaa`#98M_LnvG?Y0x}h&5Jxd}5)apTQ;-(u
ztBvO_BX@lhN!v-hDb_S+Q_PIK-~_Q*{b*C46c^ss{en7+l=j(7^R|>>G^`%&kWgFx
zlz0$kAY=R7?M#Y)WL%)0UH&6Ya=D{&UkZhllXwRyT-7pE)0%><g*syqS&|5CxeVYz
zl9TN*`X3T8AX^y;xg>ho-qT90Lq1a><OrnR#2ih~7Jx+5_lZk!OuW^$(BcJpGRI<F
zw`VN!aSZOg=g%4mt;q?v&dynmP0QGj0;wqR-pHdB2Tu8aD&=Z*?_^xWFfQ7#=#<F*
zDd<#~O%U{@R@{awbHmL!si$7Yf*9wOn>xy6aAj)B)}nPg{LQsT=uL2{bMRF4q`TkB
zb><eN@{WL$mlvO5fXJgpK)il;etLc^hw@v-V-n11P-&t=EEfqea6uvMgz%J&tn2ma
z10?zYiFNUR`IrF`3zb;94f*OM)Fx#?3h_|91m!UxB+VE;Wl2zFh6$Y%7OPySXzNt-
z`NPA*!)^NtFhu>qeobGig?!s^5R;ws@gNQDeiHE@<r(b*Lds9S`Q8VF^Z_BIlAkqA
z_5mS%K!|?Y2ZWU6?PEuT2+R8HL8zXM=P(2oy69(rV_!>p>A0r|$0GGr%9cn3Ijt24
z!({7mUROn_Hx%;`Kl<Vns3ZdeX4E4<8Y9(-vBQ@&8WobKkD$BKY;l<9!Hp_ty2_EU
z?ped?T7Q@Gy?I0$Fpn1zOXiE5-?2X~VrjGYhWx?3A?x@DQo+(Y3L4t|<QxTssqH-m
z<)^oQ&U%kQ?=dKq{H$rR_ZajZ1O2EV+Y5PJSJ&W8v+hT+Ml)9OswU<dt-*9!@rm5X
z92al_T5}=bv@lXM;4u!IIy%jUuaj|G%b9EK*HU+^Hf*sYTv@fX%VW*HR2#4eHbw&$
zHBEZ1L*HgKkh5TnYrY5Wh5!4%{|{Gz`v`)6(LFD{Gq36ak4B86If+%(YTK$!pCDDw
z5_>H>^z>YnPs7KgpCpSw;!cD^!FwafSXK4dCI|R9#HVQni!Re^{QmF%{y&h757z~f
z$;Q)8>ARlC=vt=rBQ8n;p}eBi4!Yk#?hab)Aiqv9@Ezn=I2=%3XixsFW$pGVle^o0
z_r`D6_`NWG`^Il>zUSM2->w$VtxRX25*k#wD^YQZud*6a?*pz9k^6|o#2{BW^>rgh
zq#4p}A=X-bC1jr}Y^C2%<Lj;h>{CY}4Z-gX!JG@#GZ`8=C8CZDqXuTmv5?*z$=uY4
z26Ms%0`<X{=h-=~pZ}K}u3I%9w^DL{@xT2%;sh>;6Ut9U?X_@oQqQUaWVc_YDnRyX
zSLW<0=mPn_p4ic?UI*=*T;jpd-TE>{kY7YX57){qRFaBvKx2kN63tlTqbcUZ6+|16
zIeAFWMAT28c+#_$96eQ-JRPGX3`yi*E>8mp(@6aV4cAW|%KTZze51d8gZ9UN2hW=@
zst#z(o>9v&8=<R~<?aXx8w-8crjQ%4=0c}!3N0{S_^kd+hbZ?g=8KCK<$%t8+}tpT
z^NSV*0b;8T1ISjr2AHj;17NnAlazj&VYV)ru8_u(Z(ElX-6sD^Y83#KlHysbl45$=
z!4%We24+iRA0eN)iI+4m%K~SAyO4F@KpDPEUG8En=-<+mYh*!E+NtD=4W--0)1%fg
z^$3{YoIG^u{gnz-Cl6snIOM;?b1W<yrH#V&!$TZlxEZ(}vfASioL$D^yW<?U-x_~W
z5p!7VY>T;83|W}}9ebSCQ|RV9jO8e{5I6uwbWDjvVP#2ziOQp@4kt8!i^nSvrw$I|
zBqB0ntvte%9stb`>VND#+K{SX?fTPOs5qe4x)y=~5f)2)PY9d@78Yj!M^M&TLt0~j
ze*X1o)7Z7|C*aa#by~W5lQILXw98}A`b-Wa6eSOo$4w}tedTcQor2#b7BmTG`iy~t
z<ES!EhEBWDybjZuRC!{5VKJtJo(HC>wGpU6%{m>gS_C^FNMur4!Tz<@)-+>{hKYP~
za{$u@o3)TEb_s|546P4FwGkvz!3@&k#w)}EZ>8Ou==l2N{2X~i*r9v}1&KcuKUzS=
z9NiPo6aOcHOCs*DsLiU+Y+ki(dHYkge|h`U7j^z*`Lw3~rhPnrqa64|V8A;q6Q}`)
zBU2F)5uSK)me!YYB<#qTR5?+y2jT%Vx0Qr77Iq*=nZOlPzLE#?b7dZf)jkf(Y2npt
zo|X3!G*;Mqee~!tNCtH2C39-QtdN2yEBYCp(^@NztmLW}OHEI&%)=xHv;yZP#X5VF
z4DnjmfnS@9sni93t-i=UXJKV3A5<1_Rv%DS)mc55oA~(FkB>9Gb2+RUkV5KqEWsoB
z0t>;c#z*T@p@buZ?8_IY>-X+s#K*x%RG_TJr;m^8<Kz1HIJ8E5T#n83@o^39ep2yq
zmZ|OI<H}DTi`2)*_3?3~lAkqA_VICje4Ku|J4Y;n_tBkyBXFB<lUoD|eU1(h62&L$
zAFdPC=}eiWrI^MFl=bB6F;|rNeh%6FF70&adDVpW26}Ix_XheJ2D;=Yy=C6e?#Hss
z?}YB+K_CcON9245^=0%4DF~YoN7yGZiK;@_if((LmEWht@u))rPJ{V6gY-&Qt~_CY
zmM<^gRyqKGRPA*~#?fB->LlW=h6tg+<7b^h@L#{Wwn|{t>ug}IAq{7p#UNv^Va(DI
z*(6xKal)4*Ae>)DY}%dQrTS9}N6gbSy>`;RBATaihN+iC<Yo~OzF=P4X}C~^pTh!9
zoCI>IDo{LKg%ZKqT*HvOAmG#`k(dfh#l+%SOd_;@z)RS^NgQEH8R1X79^}C|#V*|*
z->aV2<_vA(QHJgj+G`+?dVd03*^RwZ;^9?eUf}%Ve+_XHaD{<N3oM68#h)nRSYVEL
zjHCMaG8HDCrzE*sFENbQ@D<&&=+0x<<+~x1|BO63BhJe4$deSqk!-8lI&C)}Z3bKB
zN$xg(%-^zm#AY!G&=w8!NN<~=+9_ezsa$$fHfCsVqQU%*=@J$h=a0b!6sS$ufC4c~
zygVzA?4d0m*c+n@mFRj;F?mJqaFd2uBuQAFlUj(skJ*Z;PgoK^5(CNNiqu3=zc%kP
zOXA!Vpgjf9O5X+-se$>s<1ddgQw<7%Uv(jWH!7_&bx)aLPgm-FwO)tx!n1(JsZqVA
z=1}QzD51ZZ*8z1tboF@N2h`dFfjXQpYVt&sI<$#50(A*zZ1hT$P}|5e(E+z64+U!S
zQlQ5Q9jx_OAiG6wkYZk~&)q;+gL!Sox;Z;gyFqW|^r+}=ljEZ+3bhW9IvnbpAgB$0
zUuk#OM<c~Fg)5Z$aFtdtX(vxK4Y3RI32|I~c}<Jn)o%8b(0(UNZ%*$qo^Pq9x8Iu!
zCUSk;Li)bEe0xeG;>1^{7suBjane(>N@-F|AEa=wq%OsykdVl)bU$R<1#8RRjnfvS
zy+Wc}P1_Ih(VG@8FW;sc7aKTC;O5eQZyAp-*sOJD-l{5ZUYwnp*LBIOMdfR`8OV_f
z9rWtf2jrdbJbC&S&Z;pEcAFfH!Z5u*?@&arOCQ5MlmhDgL-wcl5B2^bczXX(>!IrX
zL%n~f_YWD*hwu*x{eFX>9Z`KvH_^tyI*+wM*kXh_M}eF11AX{+`RPM#`|$67KK#2>
z^0TJNKK#26|JIMvj5qaDC@{U3!v6GLirz~BPw%B@JygAyqW4ntUJB#+5MGKToJZIt
ztwZCLB7l>aja1!DrN4mnR)VS{BbBgqhP@hnFQ2G211u9{$pp`c-_zJxNc}X4nUCYz
zM8mq9GlC&G5*5S?Y!z@3=9$!gL=l6Al?<B)tS&uSoBcI6!nRyN*3O=avTA!%EBR&j
zQNUax!Pa!xO(IB8tj9)=KxLJ7kuxsbb${lE@#>T|<kf3A-Q`ipwUOU4RY}CfDy2b<
z?Ia(vB!S9d7!jCJvEo$<I-(oc@|c4?<l-2Et<nJWo_d~;1#&1{biW{fa@!K-g>pGH
z#I4>mM=ePQrQ6K!XQ1V#bbf#{;u2#-Q^!TapeS-{BC;+$pRve!PaS_DK<E1nt#$5r
z+rETCee{Uan2RzmX)m*CsmUyOpw2_CKGkY3;+auT2xuUFW)N$7`MSEqP*JWJp9YA&
z5XLTvF_oF#^BD0R#0hDCr|q*PiI$YygIK1)d~{Fa#YoCJzAJM|?mmJ4M=AXJ6rpXi
z*tOJtkV$C=lS%styfIraW)O18lVBdpl)SVyVh+gwNUdwd4BcZIYtw5^mvZ6B$=gA{
zkcc6l;Km%|G?)n+t-k40eW~wtJ5OE<KctTzE^&lCk9bPz*Q%v|YEr6ot3nKK3An)o
z7VIARI9S2bs2e;72V$`(UgwI*2^Cm0kwcFHCY}5{pjk9Q)FQ<OvRSjNo|-n(;^T+6
zL7E`4#{XOI&u#0?ZRyKRr*{AF&n?Z8i(E$p2RFU;L29%#Pev@Q7*}mm>F}f-$uITv
z8*NGHSI24=>Ew=oRlKeOg9C)8oOwx1G>%*3;RqdWqgp16QAi?(1Tmh=*k2Z7MQ8}i
zl(=A-if>x^-KtNfy*K&u_81)(u%R3|*mDvOviCwpV58;f3Pmgl-1_bd^Y|YtJ*hhg
zqZxhBu3LfO{^6g~i&(08`<kBgkh!2zwvVB_%xW}h<E|=ySZC<YOuZAt0QL+oe6Op2
za9urQuDm7+-an42{!tWGMSYL0u>QexBNo7n$0YJ;0Bg4?`E{m7{XP{X(a#qwI$?g;
ziM4%StXE)gW-fKyz}E!(6L`SwNdfvNo5JR!gj+3Q+i|b=Yckbm;zdei0|(MXHDi&{
zJ+UN<R!{?f#Lvb?>bby&;Q~!=VNPDdQ3&bpJ-Iq<;TwKis+1QypctE}mMYLMgnDsx
z)Y26iW0oF7eHN{V&eZg>T4W`hya`G0ossmUO*GhBOSN)WSx5pnYaw&0RM}9fdUnO3
z&}7%`&1FOcpP}uNVZF^&XwHdM(FHXVQr!w8GD;zT>dtML9jklFIx|Xetz2~oEol@d
z*t=mN^Vq!2-iQ$-_)b<vx;8q+#AiV(@mR<LqmRRE7R=fGtnZ1Dkv=^T2DetIzQw9<
zb!LR6*JwsPq7PbW817h<+2F)uEkCRIIJZeA`}wi!m_>q~%;RH1>cE7(JiX2m6Y{OI
zhmb^n6atRCvW4&mOi{RD2EOc^mLBEC6K$<ev-P?6`rLbc?!EJ4%OdNu@wIFBQ_7Ry
zFw2{rndq#EHDL4Dd4%UP%R(%Q^A|FZ<CJnoSjVf+CXeu=rpXm@SB)e}hq3~1ojW>}
z>2{{uOX^-yf8LV%<%`o^8aK83Nl4>tCi_!=ish$25!Rnl>`y6{N`BTf*`HGEPbuoB
zy`7oK*~hje?{JJSs*-%>aQH4O`8nQB(>BS47$%gBQ{@$~Esl&tF`Z#2=C#2|>8A27
z3*%k2<1i1Ck#-mFrf_znB#5a`91n9|6XKUYUt(aPV+Li;G8V1SJp>~OBFfOMS*%-s
zWIP|MtwOYm=3=Q!!sa{q4U`>3VrRT9<D5L~)baoovMocOX4E4b66-f5%C9%1<XD}^
zv1*$VF;_{R$MF>L!XPQAsA&p-S*BO^S9hda(peL|+zwCM`;z2?WnWBab<(_L#@Up9
zI^}jv$rC6=^d(P>2y@OHIA_}c)(C8W&COC%a@e;0gR-eL*j%<4a+y}ut58~q@`8w%
z0qhn)W#G=6lk;?pn(xi;keydNN#u3z-rK8Jx?dp{)4)o2w(8tgh*uuN?zYx;AaK<4
z)}sidsRCP;?<0>}o9w{|)aWE?n&?(Zgwfh*p4CJJhHI_+@U$M9fVreyq+54?^QI#z
z#lbKzE5v4*NH?~x&u{1Wvz)y#x><lnnM1+{2)K)qAZW7=Q+}3*8+a=;Co$sAg1CuH
zD;l%Luzv*;&M@;N3|SN-+Q>XwQewN**=<ye50hZK0m!57LF6>b%475W#e9}F`z?ol
z%b{$Q^?MHu?S2w_50)wIHzCS@Pw(*UHzE2>h*HVVnkM^Ah<+17KkYXmECTnjcO!h8
zi#?yB;QZw}dk#E~a7?-$aJV>sd95k}-GrgHl7a9qPC>fYpBN!a>JSwcW}iS3B)%P`
z5eisfr{fXgG?;r;AAR~zYX+`0EA6(3F3w+S`jCeKO|NpylwAvRsLFMJoW?)))=@b>
zx=-h$5OPdbW=XHW*%;%^Q>E)YrW*00HleWRja<s>FX<^9ke3M@1;VnAD%Xx!Z8W>{
zCSWe96B+vCdIavtK<}Pp;vsW~L24g)*i`P9jUDFi`gA_7*{?&j%N0rgRGZ$9&~Vtm
z&FinDu60GEGogNrG7=hpHS{hwEhjoVe!V+w)9m<<>L^pu*mdkhJ{z9Y>)mC&yKH@Y
zKBl{D9wsLq6-2VZr5*Dy895TlN0mxVjPS#AvyMlV%+ct5k`3*C5<bbwiS0d;<)`-o
z^`6PzGg&J6S<__ine082`ssWOw=8xa+dm0WJu!|Ge)bTuC~owBh`laV_-rDkAJ?>J
zE<ti2ksirL<Gw$Cn`^VT?*HJ{eQWd6vY2`Uw5i=s!vM8RZEu0vzxLYx$JX|H3$*<7
zG}&9Ay#@NoS)i42_pwb-eXO&=@O-0+ZFp2yOfk$r1rO@Nts0q2l@@WFVF5=f1C#_j
zjuIzMBI2SuvXaDqS<$YKL&Rei=@0;%E=;*(e7r*PdRH`EA@U$t8)W`uUe#fXm`RAB
z#zZ8JC|MGOqbZFe9IcQ~V(j7=kI~J7tl(&(SS$ZZNVF10Mg>^7E-_7!3kF@Z)LHp`
z=F-^;Qi;pF))h2;V{{nd)^%g2L6bDLt;V*~*tYFtVl}pH+qSL7HX1v5bMO7WKQn8z
z*0V;>KKtym4~78COv5hjskl6v`56J|;kt4t{95naoit$XB2&hTqLSL#LI++}^o;C4
zWYN83p1|5Iij&a6`KvL0Z3WuodFYJ6VWwQ`XAj4=UU7liH1kbWRVn<kTF3#NdAtA@
zE>?xm!e2q*i-{AJBm;;SnI!|&9~PBEUm%x8Y~c{emAbLwWJIH$RQ<GHStC~(4wHes
zrhOE8IUM+lqHtw&!X)|yZYkv#9}}(G2I;R*o<jTnfri-C(=7a`lUto5_~z~bq9{^M
zb=?-D`#(ZkBqhL*$u#!K@edbGg6)9}%vxzj={FBQ)sf-a`jILdq@SX~CAo3eFu^!q
zx{KI0)D&T<(->Bfl+?6b0pHQ5F6RRNzEN7hu}?EK<xRy5%(a0Cd@hOY(?h_tRvOHM
z`0Vg~tyQkkfgqa&zxG?<KSCv@+$^~KGP+%b)`jv0!qiG1gk`rzOGl*{s<z{L!eNB6
z^MiZ)GPQ!zksT~l@-VXwP8aVn4r^&{U3wz6^(r+m{AcjM5o(Si;XQ&%foW9!<<t^j
zbrum@?6r=26%MB*Ynx4!O@K%dj?}xvehIojNNw_N^RveRr$zCB!0^L(1nB42O}6w3
zc2C?C`&NVX7dFswm}w6Db+zKsFyKP2+jHd#@6exifry%>*axFFcSFt)qt-qA^<v;=
z-ge_|E$rRJpmg6<CjM*PomrAS1p-t$gFe+hq9ua7{#OHzO&`%t_oG?&XYvbzTcLzY
zw%|&hA(JdUT1U^6;J0&++6*F-NVNc9rgS5$7FTJ>7lBJj=b18^vAe@7-KA7Ce!S2%
z2$n=4d0x?d^Y1kZUi|4Fx3h=IQ%_bwDd2~}RN{rEwi(Cwc;|(7gh-EBz?(7Z1h47F
zcT8E6u`D$wzR7Fb#0$mjcdTCOwoXQO>7A7j!*f(e9@D!NMY^bCl~yKUg)CfWp3IwM
zqR-JfgT;5pE55R!_Rh}|b5E6Mmn*JQZ?VoRXy-@V!iE^S!cE(SuNeIXyOd{ej2gP`
z3<?GBLJ;y}BTYuNd_nRNpq;mbP?}1H*mGV`+tWF{JTJ=|-JDhS@hBF&IzGkK{vT-&
zRkb-=m^~F$MYZ#~B3niJP_jnk@sUYq>S}2oVB0V;roUV78-HW>1`=sQZci(qNm?Mc
znT2O6WaBE4qXH{YXsl)7$b9zGxl7^Xy25B-RY4Tj23O<CA4q1cR9ZNoOB6k84O|sP
zcY<19)fT<sYB3Rp^k`BGODli)Q>z=XRID2jZFeMh)p^m`e71W_>1NAZ+2XqVtKqeF
zy-{Ce-yKF3O=^Z3yi-um+apNNFeqo9PB^ytVGZ%1*!B8r_1+}(zbD@$)O`^XDYnME
z+R0a;3ILw>kMCvO7i=JZ+O9O(eV}Pg6TVd7&F1n+=gC0#+t*w5#-{sm%Mg2{vidXk
zN=K(lx$sr_Z?)v>eD#=^dSarhJJDL%0tVGxd7W<J*FY1otH#>g8ZnJ8sy4kJci&{v
z+g(LkV`sei^5NW!Q>4FCJr+r9>Vm^-h@=_7YP+~+Qfkvi{RGwmFJDrtexC-KT86Ga
ziV?!0xBnV%FD*TiOuuY}7q18G`u*{HK*5Cf0`aOKFxsXn;_yysC6(@tql-VBybAk1
zIB&i7PQvt{UepjxK*i_XAc`-rAcmCqUtA@IbdN0ja)MMZkKPjPqsFlzV0{8A3p~oR
z>SRlyFi3D-M5haJvZ-3Lsd6~yDkYk#7J1F@X=U41t6R@XI9aeKb;U@1m<_Kg4GAs^
z&0O#BQYPyE1J}{rwnH5j>7-5JL#$dWcddV~T1O!39r>C@xf~_#rl2&_J8yGcc@xy^
z{30K!LW5oSU{r<oz#pT+ZsxK5fKJ0aSLuZRj*yGYV>r-<(^RP(z5A+PX7<aiEp;MW
zv*>0^?1#pm*W%ZdhK37XvP#Ituf^RRqq(=V#?Fc1+{Zsg^P(|jjPuABY#|R<`zyL&
zQ(V{DLxRrymakcB>i4>5sOR_Vt2OLp&(Lu>x%keImPaID3~%@G1i)%4PtHFtgV%Z6
zp70(o|H8x~_I}tAN^eOMhMI5S=%zadUWe$L;1i_FU$dspY~ZhX*lOjhT7f^mx4-f7
zfj;L@xKEZV(UCH>a*3@Z#G6TI`GODeSBWCpHOB4K@H?CqS$fOO`5QPJ>{EI&g2kk|
zvZRc&Goj`d|0<l90P>)<-t)d2=NBpvPv-uTwx911i%^Ov9X=?e0TEDRh*e9ME>owL
zDDKCkrx5!xi9MFATxP_I6g?L0IJ8e-?<o%Cht(Q<+vjmsse!=|hn@nbV(MemW6B?J
z>?I5siX$2N8ybb|(Mu$ZSEFa*;__nn?MJW<Ls6*k?gRDe1|XuE+M5{*pHx3+GU9`}
z6;WH<!N3f<;tJCK-AYaHm7PfJczEX;MNv*IhwrQC0ar)V3J-b8oZ-`+;%egE-c9ll
z*(L0CPoCvI8EJTG*I(H223Or1456U9dJlTosOx12W2-VUw9cR3R^`hkU|9cU7c_*D
zKOhfy8YO4c0WKrwT~%uMKI7}RkB9Y_9&rg@Lh*;n@k1y=HfE!RdgQv7GdW)DDKtLq
z)r=7atkNc;d~jq{8F#omxsYL80|j1XmQJJlvj;n_E+yS5!b0=6tQgYI;lAHKk@bN<
z&9F7BQpRaI9#|MKLKC6t%G2odNS5QuUk_0Js0}4L1o}M^mB@@aoE$39vpW8{OU}Ie
zFMRodCxFw1btLME$_^2rv!}qJi5@d(EF)p{WaeDr{;tKc=wmev_<(`mrtc-$7gX8y
z6X6tuC~+K`P}|>of^KCeBL=b8o?j!+SU%_7CzDM~l=g~!V&_NhrDNZkvz^OVFXpxU
z2rs6I1u|&T#aNYjb;8{HK>Q){IOSP?er1$J{M|d)1)*Mbc|R>SYG(|tNnt{j+BFcQ
zTGLJ{f4pPEq3?XbpCj{BtQW;Mp8O8a31o7{FFQ7^gg}D~aMutnS+J0E=!<4WVwQus
zP1uWztDMrbaHi;wot<L))<4cM-J6u#^mlLI07*%XDl`U06G-S{3TwD>0!Agth3ouj
zj=<ZSI@+wb=OMI=#c1J_Sp@VUt+_Dzq!T<%${BZGSG3_N!71#bsi;16r#(m*q5QX?
z!x-$dVlDgMh7#JM6EZj`%2%4TsZ9wuhN}b6BaIY^V)|;x<V!_JPc>8mFW^utDULxz
zz(L%kM6P!?0f9I8DV7R&=NCQuJCY-4mb(`j(LhkEmm8vAo&g>*dKTs(%+;U6d>dDs
z31`$_L={3P8)ej0gCV1H)CVD`u(0eGwgO+@_b-7<Z@#Y2ssbNbezmP@l+R1w(`~WE
zZFg+rU+LiU(bzJSY>kb@g&MHB#K{>MARz|#4%9Q_Jf|51y1UGeNMKjh791XeqMZpW
zJ2&$5s_Y^%W6By5oP~E@OMr#p81AWN#%oyeFCN##mQ1%QYE}(2on4I}W_{v|oxR9E
zHM9AZu%Ab%a)l^WVpq_TiRPoL#RI*1qQZ(;V(c2JL&*VP0yi+^^#kSL?Sn7^fT8|o
zlJP*({*#*|4_3922}1}3bF_b<A}x)VKG7aQ(m4B<QH`%zgjenZ3Ij&-y6@G+1-=%!
zV)AneB>kJ4>z9z`Q?dpsD|2~;oc^uFLUUOO@ga+?s=pF{-{RH$EF|{jKFFu>{qaj>
z)40{#y#m3e(`E*|=qJ!_U(4wNR-YSBO`V4hRci*=>I;^ZjD<Do-4Z(n?<B>WFA{pz
z&oe|anbt>QE417LQO1!;O{%#WwW(3{s|MDa^d<E%DixEDMEEtsJ7aEt?n+aU<fXCf
zIv@{7`{@m97kx04MtQ|Tr@%~5;}{%mFsH=D8>!EV$Fh_;R&%;1b;{-dsZxHdEHk`%
zaW%Z5bR&&b6GeZx_m{P8x%XQr_e(Q=gVXI;ooKIR^=*p7_W$~!a>kCk{>O6^o#|fX
zBf&?FS4V%V+}w~URXU5$6Y^7zEdK4&)AQ9+7w^sd>Thy<K)>nN2Jh><(dWN^<L`XA
zqai<i1BcmP=8g86fbh&$;jCFRmL5XoS#2@skOb}llI?BOj#pS0p(M`$F02-@W0D=l
z+eUIUmxV%2aqJF%)gB%AUmdf33*jk8v1Tmfy-#$hapr<N$->{X*g7*J9ubH7AOmyo
z5{hdho*?^pQDTmer3AGRyC~F2(-SGiH)7_khI{h4KdSCd0JMWRj$j=W{py*v{V+K6
z!D{9w;vX~{=c-GB55;BT0q(my6yKeEkz7;sCM9p+=Vb8A^b*#5(1vXPr%ycm996dq
z3*szX<X0pb5$O1p7#J5g+AE%kE-PH4qUILy{v}IfUsRIZHu5{bd+38m3P%5uPs`Dx
zni9f9(F4<4xLQX#nrt;nYPmOJW3Z*Mnd!LtUPUqISqcFI<&PFwunS5l`K@C4CP6J_
zY$r{Er<!%o`YZ4|{9zl6ZRkvFl04ana7iTLzlCvreLtqBw5sZ4$dZ=}*T9k&@Z~X2
z76;Q&8~c9(M2Y#qwq=el&EYEI?K?@%wFQ8oLYYZM0H#$(vPoBbiyV~!5gCR`j{J9!
z5EtasZ=Lzy26<`PzlFT8gak~rcvfZt^dcvVv9hsD`PKL~&h{>e3;L9Z-Q)fi?9FZ~
z*a6>JJ<$ew5`(Vr9!DWju!HMcv%gS7@sw6}#j!$+*!iffk2DocGlPs)71*LDp4q@R
zJA}xAo~Crrcx4Q@<VQBN^2!u?$3mTufl*rQWV_r(laD?W>Lt1ROHqlWecmQ`xzfg+
zvcAEn`XoPsuVB_ejt)7qjhI>_y^FOsSiUrj`n`OmKnce(nX@HURXkKvZJyB(j|M2Q
z^rKYq6y6PuD?H&9e{Nz}SKTg00tcR}1BIzqkdW?4wram+mYHd<1O|5^Ww$y(V$;Rp
zJhk8~${R|oez&!@vnzLaZ4p`VpUiL;|B<a^lu#<DNX09kIF)d+vXhY%XKbD$-Wq?8
z?X~!O>MZLtKJRwu)J>{>cA~$)Cs0<A;$%#9mK>#P1NpbH)LI&L?{k0nay|gDcRf-K
zJz9;MrWKgf_S!dPtnfJz%V-u(D!(PC=P2({Iea`voPr9D^+Vt%#6Dgpr1oIn!(F@s
z6xP2Ky+(Ld8i7Z4Uu(=(LdpX)a(k^Ek!TdTyA(I(yGgcC_e<7mlYrfA&8Q#TbN2o&
zet4PD$OIOTG;BD8W~<EAT%5o^ieX5s_szy(2)v_`9?_5SaOgMIjZnvC3A&E21P^R2
z+wvS?q9S=96{yz3!AT=6DEvEPG@7kj93`$o!EnQlxPnXQ$-%)IC%rY`QOei3kgWr1
zT--6zaGS?BqO^5c>=aX~pTx$su)xvL4w61R1*%X>q@YNs#<@M27zMO$z&=}@iO>Ej
z(_~>?VT%LA=4|JcNJm{sABTV0Uj-WPX)~~0i>oR=a+Un?D$!za_)5BG50I2`Qj!}9
z*y!+e6`t)-Uh_6Q9)pG;jgn@jxEhhlVV2pU`~w}8|1K2(Lte%3qQ)`|@-FgX8z{*3
zpO_u4386qW#BCs~8Bi2MXsdDH3f++pQU`C}K!)Lgwo%Nra{z*=OOOkuE)F06mpOG;
z_4h2KUMfDF#Cqaq36kHwu3tKRJX2j(LC|t0JUh4#A0DWV8uWX{$du!<S}r(Uyjo4w
z__ECK!K^hmloo@CUt$=Tk<vAh4sdUkx@TtYUyvels0Tu!bs4HB8FWkfZ4u$v?c-AD
z!XW$SF9^ewCeGpDM|mXBwxAos{`{jML)O?XOd-x<M<k@PALblqax?ip)b<WrGe;`T
zv06W!ij3%4V@n$g*}n>gmM*BTFNE${JkVcmxm(j?;`CKjadI}09S5zJR8bHtG>BU!
zp{oa-5(a#AOSP9Yp&^1ejk$J2sdtOKt$CzryZ!0%Y%{XYM;tvBTJOMpLo#SXvQ~FC
zHMzIRQuCh*y0z~o&F6Tv>e8SMB49jaYyP2vC@@Y;f->e6lFP<lsZ)W1A5Yij2<R|J
z=~X%qCL0IkWz#71-GK*nQ`K8v^rpCEd)Z4W3eZsevzkaZCfI*F{+}z$CF4De)UKG?
zraF5TmcuD3JAu4$`w^rfNPX1Al|!U0%Oxx5qHQ8xtx#F_VY%_y{M(|`#wPvp>%r3S
zk>bB`XNk$>_9I^VN3G^Sk45uayh)*DT4fza!4790d=SUcYj^{e^f&!BwY0(jA?v{V
zSAgO=!N17mAt>dN!nH4SVnC^-IP7?=v7W$YcUI4bF5vj!tR6}pUNiD;(w~1lBi&6f
zJ=dU=pBPCrpZ8nYZqV`X#90J7%qYV#Q)+i#(Z>w#K)b0-2<~xx|03#J67596)PWo5
zNmvfJA$DQ#Q2n5#qy&MOZ0<=kLR~ZIG{Dw0Ql-{%_7VQ)!H6mM)Q}pKEbKN?5Xnc1
zkd|N}=me@Rft}p37xFEx@URiQBjRXv-H?}{fw*nK?7@lB5*)&ckcg&vPXKJennaLf
zEYqBMiLYhEJR(so^XBI4s2x)9hqS7{qKH}$;#j53PlHsoqHqGIh+^(23V4w7HUM-;
z9&uV8$|78}1PAgbp|f6D+*F_du1H`A%{Mps51O-KT}63KFRt`9h)nuZQ`w(?WAG@%
zpj>XutFv&=0=6)Xjq4)~P@Yea8PApR)fMq1|KgvHSMZ0=&462jl+Hd;X8bfDMz@Kc
zWrU5xikXClps`kEC5YLtKrvc<fCSp|h5vvz?I|c5(ol+VndPE#{fC|Zmtv$8L!62A
zPaNUGaKC{L#mxIeVc97>)eFNBUSA{mP=z<|7fwkQN_8CRX))ttHQKBs_$S}PW+Rsk
zw)&5a>{r$8hKH{PA_m<?qb^tWhg5MH#{)^uq#UW8xcJyIdF_luFo*(@rvOP;_dDGW
zJn-zvB#k;A;wm(;Nho=WAF#?n9uy%)_eSRR7R-zwhjYi>kqm7la3}SV{WKyKZmlBe
zjIrrKIsQ_0HBqQZ`uXqD<7aU!1x!uVb1LxlU^A%`Fp$~o;a;mqRO#I)O<qc7iFZdg
zbK>2DPZcEG46$-887Q@1@ehlj1dr;d?oS-x?*jYrr@!|p=1f8D9s9Z{ISmJ5dR_J3
z<ynLSgK=J?!0Z}upNE;~u!830$OwXV72#r>UfP(}>RWPSQzI<wn3+OK#tiSj?n%)?
zgu)U92lbetQT`tFy4Pu;8*ENSs~`|^Rpeoov+0o+P0Y$L8c9bvD}esE3Z)ny8EC<>
z#N_cTj;^1)aDVC+datDTs!EbzObxm4P_8f|vS++>NMVJ^#fY@AM@-EqI~IQXfDm3N
z!1Mw}ZX~L$l#N&BB@kZZLeQ{IwBNW}XBPj9w|zB%FD9AzN%l{(M!al!9?V1exEOd}
zAN7dQJ?Q~>s?^zUS->p;b-^>*!M_9VAW)2B=eO+Fj;@M~nYv!B7!_Y)vBs<#-z3Yi
z6DbW|4QySX#9t+OjS%3NxHjvX=b#)Ri#jeKCOFEGJi*Xaxy(55X%x24giRf*`@eO4
z6q5gzS?I>DbY$;!aF$<HPJ{iBn~<foI;kCU(`9DC6~&GL2X;tI4GKVFJD3f!jGU>y
zX=Sr7G>!@yGY2ndQwwU&7mcaG>W6GI8WNcJ`Njl?nIwa1<<*A$lBoWLmYs}}=&L={
zP+nl5<v|B&AQUAN-bE73Vz?h3C=u@6y`%z&Yz%B8^j(@0O{bRasL@5Ct7@)s8kmwn
z`DAX!hAt800d3~U;mN)Vn^}wMtFvRQh=qSO_0+I7$9-uz3};$K*Zqw}+5WWcw?=X^
zukdmFNI|;NstJ9zYO1kcU4bDPWtMmmc$XlTw1Lq5*9XqCn!g72QerxG_Ip}sIX|m)
z-(!Ip|9(P@r~V-T;N!WS#e1h9PpJO?HyZB%_`2!2FJH$vc62Ug$N9}f3lx7ju&QZb
z2iIWzlUg5R<^GPWV!IYY^LZy-2ZCXo$fzT#P;0QnY=6KsU&*vhQAATTy4y3Hk*yRA
zxhNu=8DH?`uC3-x%49&_V?A$@iQDzJdMdSW$VXB<VlyU(Q)09-&Z3f*5A9nvY4IG;
zwaPkvIyG9VAnRkm?cQHh=?fI=0I#RVGgtzBIV3q9mGj8sFMf?Kc8Y7?7~NS|OmXVo
zMq@GL9scyP#yCjVh+Sd5+G4rGe@tuZax*+JK7A&+0q`HXn55CYpSqA&|5<`wMQU0M
z*rdv8c(u_$@k7+;{>C~f;@^N&2l5D2b>b<sD#VrMlY@?h)M*)Y-|-Y4|14gNd)#yO
z)rMa)+bWZci<Zx>t8n<c_7AR^cb>^&LlG25LiA9zJgn({IOUkF_PAf~(5H9bZ%1D>
zeKg${e_SV5R!&Yn@^wF7@7^7QZM@uir$8p(EN7=*jn0N7MOrPY%1=<10W8uu=v)rq
zDt=|ViR9nZk90ROD2yq3*m_FrdgkPnd6HxE#$liJw@jCtW3(Nl+Ue^9*^8KmD-1Vn
zB`M|0=PfmS3L5DpEKSq$za&c5e@HFL{Ya+s3LNLIf21x^iqYgq<T>>3SYebfZ_f!A
z9|huSR>GvAO^~rM!7oqu0Uw>#>Je{gH>*GJq)ob1dHML)qF6Xf;xlz18>#=~$6)8m
zQzD%X{HZp#XXRER+R^@Dwm6XglF{DPV)kCb%U3pCIs8__dsHQM|NPs#EAb_RA$!2N
z(KRhfx#GL6X4s+NbDj`GPmuZdH<LK<cE{9E^?PvT2g^7+eRVcOQ{cW1LZ5^&(#!wD
zLjrxR&Hz7EHZ0vMTA@lv$|*y_xc%_%qxz-#%2x42^kJ0_8^6OM+b-0;=bsTZDB(B9
z@3;`Ztqt%3LH&iQ6yyxIrdj(ukC!=MtZNld)K1^Jo0My@vl!5*1e<0lg=>sleJ?T?
zFj*X4$G8!?ggKnvr2%x#**F~CsW1xS*+Ls(7{#ZG-ZfJ7pX8{=!XsC^?;ei`Lfosr
zg<gQSWD?h82vn@EKrY$C0Q>gI>@i{nZ2Mcq8j*Xdsv_dN?Y-G<A)-uV6uYEQse_Kf
z2cv<N*r#-D_SWZq<*Li#uz|)$>Kyess(Ra5+Dq0S!_vmmIv_Jc0;|{mb)o5accvyQ
z0)@Z@EFXFp##s@6n3MHwcj-1J)_ku?%_wWI`aIRo8o7Ws6uh*`tJ-6lK0&6n+9J(Z
zanf}nPp2x6h|3w{piTTWX>fEh{2~`0T|;hDw1KdlBE*bbHbOO4=a)q|6B)t2Tkf^B
zhqRaC8i}y5b@G)cI1UiP3>`|I00GpJ8V);ctKj;nrGIYDixOEdfmCWt&<y`7yi+6y
zGX5>=Z@Sdhs=jH|c3kzKY^j%;Rx`r~{;vN6wPd|QWtvuXh4!qlFry<<{Hb1f+%Prt
zu4*^FqdQ1Y1sd^3owPW_fZq#?kk%OW-4YpFU_$(SN()V>Ss|6DII_*z0rvo2m{-#`
zz(i4~>BCAGR^_)e&U_l4w9rny2@tNi7%mMbl-wW&PGlCNK$<0mk>-H65KQVKvPUx5
z6{W3pPjiX!+#2RB{AH6<M<w~8RRyZm&K(Bo?QQDN7!vaBr&kJnL?x0R3Tqsvjur>+
z=~>xn)W_yon5#|fMN86-ayuudivD6B*htKp`D_!7Z?<hRuQ)h50CgyWnV)MYQwKRl
zI&JNirDPp$gEj0g)dxK`-kB-6&YENFM}Q~6a9<b}76h)J+mwo=yJ$_C_|piKe3g$!
z)HK}nK4y=7E>lBg5t4&eTKu>a74bww^{>@fn8Q|5)r#as+>K6PJjbbo$FVW=1>s%z
zVCecb!Hq;C^gm4s04z<Hu}ECF?*Z!c@q#}*LQl!hjxcU{MR^5PCk1nMWty-Zu{<a6
z!(MvmxcTw}t*C2-*5_=gXN@QFFZ^y!|6f~eOy+CN$CxiCA>^y(s^e4oZS9ZX0p=TK
z^^QQqi3`V*>aX6~S5<VIXm^w<N8{hb4u`ODQXy&meLe{Z0GKYUhl$QH6TbI=db>AG
zHtg45aNv=mqr1&?V*+d+m2m$~UOgE0w%YO@x7reUgc+q)NHU{<FN+wMowfdp6yY_0
z+pY<Z_sUm^3D0i&AU?FxAYRqR)`_WI!z`@<_WhYV2y1oSmbX;&s6o`3tUG-{Fu}pZ
z6qV4i8iJ*Apn%EU4l3ZhG|04oi;$m%%FO&Yc15>@NIOlyH(}>KCZX>jH*Y4E4#GL$
zo6eSn2}r=TA2hKK3|X#&#>k<cP#axXT+uFsM##0DU<RbOV<}SwM9VMK;>|>EuPjJ*
z@GUi@e-q4<<G)1o%s#@&X_SMBnWHVrKs%6b1D%-;0TXYM9=2);cBw<d24;_@$G0U&
ztVYTYalyj)MnS3P`aJU-a<#w^)b;dKSFB^X>&J+jD#npUGk=b2c`O+2&N+c^xl&C*
zyEO{r3wGv!UvR$l$Od9glH1*D`uENoq;w6RT5aF#J^{a#U*Mf%fkKS2Yh{wi^9_}G
zZ%dLBK+9F$4mQ}A7J$q*MQ<}sbiX_`!VkhRbC4a{PEcEzhwxdNGHi{8V5FJ^dtq1)
zayh0z$nLkLMCQ<hls3w8I{J#zT9LNpDmdi6MnWDj5u3qS#G=M|cjSW|*3_LuW-0Es
z^oRS5p3C?@zQjwvwL1lHCKYh@7zhVYCltvX0LoP!2F@Ok>+gYee<!$<BGQd|IR~S|
zZZxOtf&+eo1*JAy=#1h7ZeDSH24rsWS(WiYPW_2q+xxzy&d0a#dQW3)t^6YBav-j3
zovpF{Mg7vA{gR#)$%wPQgMH1g%6BES@^KC&(#KkORd*IqT<nAA4(2`0F7L9nhD4`t
z00f}Ly_%Z*&CF&o{^=7wKP1#_II7REO`pNYnStBdweWwDzc>FOe}%>8S0XWwq%t3o
zZca!AL{pL~yal!3ErhvqB_j5MDm_Q%Dg-A}itfb-(=(730`8Oxc?3x(`cO~j!RHL!
zg(>EFA!Les-LPxfd-d}ie@%`=(hw2>a%hxd={h4J{j*c<oY!i;=1)}OFPgyGn`yW=
zyA)S1h&vj|Vx!SbU$33*3Fo>Oz3N)X<YUy!8JD-^ne7)Sz{<AuUWWSQt~cZBaIJ$_
zfBm<yv{hlM*{n4sgPb56<fi?chO$DHJvv!<6PxieCMGePrT^W;*s*3t(=8AvACpWN
zi|zGH!bCIG{nMD*O2-m76J{;3_!3JePGw<@Hje{MIWBEKOnxM0iedJ}vOeuTU5tKM
zI{DNB*Oxe7-4Z;!LvcF)9?GzwA;Bf>7jqLbaxR^jMNG{hIfHpg<QV)>`<=^OZEx&H
zeC^T0&8fYhc6H!#jOv6)q#B$oDFcoTc&R*>xG<ec+Zr3G%$c4PWx$O~C5<!PJ!Cp5
zIQ&(8rF+?PJmSNvrU$g=Vn`MSqc~u%+8uGoJNW)6I4W+Tre`vfvP&55x+S!qhY$Su
z@N-+$-0rD9H)Qw;|B%HS^!Xh!VD}Ts(^Kx#@agWap6TO>+0*$6059s<J`MQ^_(6X6
z^GzUU|A_9*e5FFX#BQ|{R&H%$Y{PQ4`(exn)wwgjSrUJ=6hh+XFX@Qmxolu4zu$wr
zgo196tIP;r=I~*KIK%R1^O8VW`7C?@=0GpRblpNuBQysg(FB?2WI~;vsk#MI=I{i3
zU+OG0YF-_;)P-(zH*F9P-xWs*@Uhqk(1-2RA=9%XfyQO85@3zQ);U@S5hMi>F5(5m
z@Ouea3C}V<8!LcBu;M5Xmg>*U&R#otwa;nD{Nejgg5=T?3y~Wb!mt|>ojbbhfOd2C
z`_mG%+{iq})Br~^4+m}@{n1jES00dZG3o7=wRxxkTySGiWf3JK;2Q!!?$$)B{msY;
zrllXc62Ss<jvB>;l%*N@nnS>WdX>#;qGg5x3ev1Wu`E1%6FBZ!_3;$hP4O^_Xxo@#
zxqqLNA(lA0bSbdxg}EJ}4l8&MrBW|J)$6?mPddmw`)O@umD8Qo!RfSlo~?_M$pK|6
zr^9iC@oI`OwWE2oe-Q*Yy4)RJ(2H#atTgxux}?c^jU5@X40btqt@7`ag<V_rrpgZd
zY+JbvU4|PhaBg0tpLE$igu2fa>kGQi6ce=YF7Y|^ikd9eC<vI|Iip7Lpm7QAIbaEc
zZ(n=q6`zUe;$uRPh|u;`)bvs7u>>;b13QYiG4n4IYHgO@iJSnr-e#+aw)|EfyAx*T
z({4Ybr!~SzfM|u-zRMZ<cyGeAKJa>g*#5b7+JsN<ktwWJ>LK3#Qs5yL*=Yy4yCC*F
zDtR?t_bVHVA6aLry1GjRNZ6t+7PdIwJnWj$OtYn4)mzq5)`??LImJ2HBJcXPtvq5-
z$O^H48%2B~rvj|eS;*;YZ>b{rDMA#dV_B$X(zn$#a<55er(6|e(!NT2;*OX&3UKDw
zqYG6R;QQKcA-6K-w?=;=WPgWrU+6Tcmpp&AyB$exw_hT$ixWENVi4`uw!yO&&y-o^
zKT0X@IOc7Kgri2h#Rp?DGFG~0CzI%iA$i!SNuE@e76cr;#cPh{<>3u#8m6`C!O98e
zdw)hcQSU6QMITc}1!Y|*;)T+IPnQ{>i;;&ItJD(KyWwXL<$jFCqgpz6*JRiy(vKSZ
zrO4unSafI)A3txm9;-I!`+$>#m5$5Zcj`l7%BW6^vFv%&q^p%T1i-$D+WCT>z03$0
zPk~-3I{+|j4~S|h0~3#fH!9A8Xz-?`a&Ciruy1ALsnLIZe%1-My26m6{SqY%!>wVF
z9x_`28E`uqkRdEZg+q0SFL51&mwt|Bl*(tsLVyIj{zc!hD!^Ir#8RZXK+fzipnXm)
zITgA!7|TMS0X3yFk;mu}-S%3o>l$lR$k@BNHUsEpFeZg6lXddYe*7rj;pNlMb^Gd>
zw%yA`XUD=aGo-pe`dS4Crb3^U-k|wX0D8uToK&rW;_GA@k0bbzdA8Wch$HElRa%&C
zt6)&ZLYy`wRQ}Hg`DbcMY4Ij+mc^E~+WFW<l!LE@X6o>Otu@X~#jQClL{1=hY;`5+
zoGl<VGYsCocO%cNG!~*z!51?&eNDMukFGW>Ya4@bt4i2X5Lb<w3;_beqweHa3P!cp
zVI_j}hmlO$u9f-#JhV09=OLYO=^@)?228>UaeV^z^tW0*SVUwv-ci53_M1=pK8Qu%
za15Q<lprQFIvo8M76~tf7}Td<yQN$h1RX#wA(|jW%LScUIJb!w`n_4j^qhPY`{<RA
zhhYw(QSp6Gzq|_bHU$aY4$d%@zO^){i^!c{SvNmwZQ&VG6*=Zu_MLRS`U_-l*#<?>
zAaV*9$i5tQ{?73;wgseR$Zqp<m7;h7`C*45Y>59tnBfA%36}})D4enP=t?29Q6E4l
zk70neuYHn4E3A|t0-9@s&Ny#98%dp7iu%k>;(A`Gs57^#QYGuHeDI>F8okVFbyFPW
zY@C*?oUCRndQRQHZ2wFkKw2Pj)h@~D<JLl5^yISbTBYu#o`3Q7@^F51uo^YKEA2va
z4Eo{{DHzxyC+>tpM$*;y@$<r%C=EbCoMMgkj`sc(s!Bc;i}o1Iyn~fM(9P6|<w{zK
zIp=(xiBvd^yy%s%(uU&%H`ONGJsZdh)eaMQTIu{TU1x&SCxJ3Akrso0H(&eyQ}!Nk
zbL2i(*}zS_!t3z4y>uSDV6z2ETV5Y`be=C~|EAyGY^e5k2Hb39)6tEwefcCz_e%Wd
zoDUuM+v6)V`fQ~R&zFaWx}Ey|`uF($vezRqvBXFEsqeDmkJCWK@!i{7$&Crb<@9v4
z3)K~GWtZk(VPkBJ5a9D^uRZ_vZ5!d@t*mrvCJKJNR{TVPPErlGWG&i`>59Cf+D3D7
z4BM7iQ|Y(j&BLDD=REB?@b-G!xm(%KHhieEuTYK|4Q-Dxx1J=RqWfJmK%jQ8SN3{p
zW+>ANJwdQNM(Cl5+Joj7p|#v#dtK$Oc9v|x)LrdM`MLYfYl580SJAm66YXYd(q^hG
zJ|sS`W37ye;}Biz*qY{wmzKD`X(zRFofZA>SK1r#9>G)$ZBAenu&7koGD<~szKL%<
z5od*S4hT9$GDvdBkAY%_Xu_h&uq&EeG+dC0Fii9?Cf+jc3QnCiF_;&6B@c;fHr!IB
zV=rUMC_7EDMgA2mvr5eK#E*cmxg|;?iX6r&-p1NRORT+fl(eCR*fCe6FM23y{@tbg
z4cqx9=N?q>wfoH*aAo&k6$NU{D*DLy*d7zy;VPCAr%-6yIS(=HCDYo&ZPt`Wc*)GU
z^^55LrM+tT#I~!Ie8)F62p5v?-43wREN8rGr`n2;2ioz|K%zSL(Py%7bviaVR&@0d
z*}G-<;>~UEIYuDjDwnc(@jiYQ_y`6ChVzV+sW4JDGK^RQRpgHqn%}M;k33~U(U#9{
z*-SR4M<UjRm(KSn`s{mli%L})Uf?|k;sqb9mxk>ae#Rsz<+SY&6zhA`2QR8M3XZ)S
zhq#nKU~B_Q^wk?ECb4&@zp6h|)T+Nj9lmSmC1NYs?lM2#pw|qIF%dQlGxY>W`to?q
zzd6u05K06B{tNN1|7d&AJX-JS%D)jrQuQ7nGsf%o*uupWVwPhRfpnp{K8%Q&YgB#H
zTWFYb8dhySULsbV`=%+XaO{2ePllC{srm*LMgmSF!5rhKD%4i<x3{MnSYOI(wTSk$
zlCwAl{SFvwSZG4=4Tr7*c$Hz2&+3JLnceimP@%~@0Md#LNcfL$k>C4_N60S1o-XH3
zd|FD-rSIq0LW`!LSM9#NP=P2nXi}!*b&m-v=Hc7kIPIFvI>5~`Y!L<i&=9l$h028i
zXZis?FIwxwr<Fi5N9K-J*<sv70%N2A$zF$hbT$6V3odG;kTt?J=(12pxlug(d)Ae5
z9U6g2E|9NmgOxAf9{+4H^SVWy!*&o~jof*W3dXh$5(Q_R$nOjd4Jq|US*ae<+dyp?
zi*DhT@r9W$itmG;vEbh^+9T54vty0jzV@Vu2k_?S@zomcyKZ>5ad75zwp3)?4E4HA
zscDrfHMK1f4Uzs;``Gi_!SVUq7mOa>>({9y065l>(|7Ee4IC_wz#?tfh%wh<9FbcW
zV!QS6eD7wCrlX$pH$B~D;#(DSOSg;_PBGQeFIbv|$C#N)bhJGLP9fZMlftM(6}t_T
z3ox4>9i4&<aYsUhzRT2jo*d8DpW|SDgc&%9sF%UDl~WbkPu4xm5vWn{t~o4ULH@}y
z0489CHmK^A#=~^WMOBFX*bs1&zT-THNJp}<!TYtrg7*w}Qsexo{cg+r??Kqui=u28
zggAy5&!5hK>EMFwcV}mm`VWS?f)3|&5rw=Gvhk>wo(cZNbxjAygD~r$arH>U6lul*
zi6E}U{3|8uEy|0in{o+6NFVO_i4CYZXFvx<7*&{|SU5@GZl&>u8tA{HSVWcI`}8yB
z!ESafMQxzB-L)Z0kgFIC3AvK!mNO#Hvi3}3?+L@+c<pOcct2;n9_D-390vpkTy@}W
zateh+jUG^QzxNXpke*--&JD1D55xYXnAXqj_JvA~Ux0W>U2*-E;L6P#tu3<>EejY#
z%NmG~GlpuJxs)n&j~h!9+6iDkZ;9Yl{ZVLf`}!5%ui<~Lxx0F_Y!T_`gDL#zPUzJ%
zz%A2;>|`mOViHWqn%f_`SDa?(LI}NmLL4&~BWKD+e(*L+On<a1DdZ!V<7f{~UC<Q(
z!aH9gv>n8u2>4X4e&GD!X2QvTv`LoM0EY*3b;mYe4?C}hj^DX6W1**^T}5q=L#9xE
zsMway@!EQF!8JMCxs1@t$~XQ^P;*E7YAyhE_SaxBi7u%?4kgt~o?*z|<u<{cvl^Sv
z^s>+=15^U7v$iV8%rI|Zxa3uv%@Wq2;=4Jw=sPveqc`VCIeBE%vTj%g!Jwa*?WPzY
zir}cTKd*dNE1)#RXeaVEN{uxojx)%zuxn-tIj+WxAQFqF5BE62Sfaky@7^!yt%VVN
zmUq!+20c0|^$T14Xy_h;fHh_&5+jzfxRhJ|^OSvy7!8_~VTud;c=uvwjj@fWHU*XN
z+LBfXY0IA^wD|Wxj>){JX@8m=g#{Tf?%YlyyUBlF`_nr7Zwj18fkYCcvDBeSQP<XA
ze!^H05l|e^!2r{kQLe7YycF%<p;~D3?$<9koZnUtnbaEN#ruUNBuBn68VLTV=ReLc
zKfo9pxlW1L+j`WHdh1qccmLeWctQ?yrw^-B`X+S)aATiyj}L!d!H0Ot;qQF{_`5HA
z(I2kI;gE(5ozkUpC?mJjGrLoxKfRYf-&%<`PjNPcYYx!QIr*_VqdcaKEKgPDVV?-U
zIuCThw|mG9UG!rnad+<WaNXd&Qwm4Uh<I}SBS)B;KS|iksfuSMD}cOi27lx~T3Gg$
zR;(3BVKIjmLxwL{eoh=&+IbfS?g$|VW#ZVUKn;o+{C3KPdw)tkK(PF7%nQ`3EgiGL
z$;$ZSnoD6Iyk4nu<W?3>Fd{1bA=Q(|<Urb50HIKZ+(T`)W}u-t$OJxHDqzFd=;vPi
z5cCDxZYv5u17{<2o3f4IWCMQwmAsNRknyq7o7~XG<VVUYE_v;4z3p}fnrG6^UD4{w
zUp3?MSy;xT3o$`P60GJx`$(|3i3ZW_GMws?nf#zTqK)6lb}8+h3-6&2#y|*^2qF|b
z;O^7B?Eh+V;G{=e4UF}w*)AJM)9P6o_mpOgo%ywD;eM5GHuLA0cMERk+tBi?>{ER%
zNr-%a-%G+5ye89~`kZe9!F;s@dbx4E8UYoEYdM)5*8zCh<CE?YA5TIQ%zAekOxt+=
zQ%PM@i7Ou(&ShQkcM4+-H_whxV!sJ1X7;}*g6MF$58+Q~b-|dRoG}$6XWi*k8Y7{!
zoT<fBK~n$5xmv35Klv_H0t&MB<FOR#cGVtwWC4OUYGaA{J~BUm$L-y}l1bZ)86FxZ
zvws~mhy{I?$I}sHPhAqmnmtbm$PJ-P*jBWHTdY1$t!Yn48<3Ms`HH%$Uh>-|HOEut
zEl_h=W)sQ3u5uxw+OkQ5{&O{I+g>g+wG>xn%f>~!sxg1Q|D9hYJ4+DE`l$4|J_)r5
z+rFUk{XwxAJZ%k_+@XrBGG*#7J(^fwJhD4%%50iTr!}=W-1M*+)84e<OlnYM1k=^v
z@$R^Mc96(mSLg`;3Wt`C>^m<S2R`cSo7t#V0GD8{eB1SpdY%4Nk0A|vv`3QcN2`E`
zqiNh>drp@mwR8jiK71EC^W(@_kT6uvp!F48Z4cx1-^GBK3KkPVeN^U5N9E7TJC&G1
zcj0XsNvuIRi<fOmqlzRbbegQ4m=7BaTc=ZnRw8y{J^k7pL_r<sP1KpbU^MdBwM3<s
z$axbp^m(ytK2u!l9Lh*#H%KL`BzHC??}h}_$~Vd1C*3oFPv=-P3cC==5V3M7B|`wY
zyhpk0_pcmC>u~it{hYbn0mh|34YD5cM;dch&(0sgEt;tHXh;8dqYq@NJ+OwuMMS}b
z+k^pABhD#A0Y4P2^AS@!U6fCI7eg}bpKxad^;1Cwf>oE!ga@x`dxCKY80d4>&?4s0
zXG96k(~l_jy14jN$^Gbyey^mlZJSHtG=p?Y{J(%fvTha7IvRtAt+S0!$D3?$hYQec
zlxN$PM=SY+PZ!aCvFEF^n9pA`9E4=q-mz@%69?~FlsmlS9|`m7;vFADfwh6;j8Q~b
zQ+3WgT-YN5hk=Mx^5b#~ME*xtEjMQpYAS@Udidy)CqXgVM>+}@4TqH$JSz3d7+fYK
zmis`_#~ltN?Yr7i3qp%qXGHc*fcGA;$~r{d)Y8afy=Zz%84u+nVHhnjZ2#hNfC<Jp
z<C6Xpo{JyrD^Nm<d?S@+ZIt@)Y2{ko^C=c!+P=m9`6*g;DwN^ouWh{)=vZ!5*+ZN`
z=7?TCSXnM?^d^DQi+NlAG(QHaNsb>0g#^%>_pm`F0eLaOcrd7UN-Su_T@};*#IU(0
zlHq}YjjaaCajMtn)m^1`E+V^O9;TuwPkaf5!QBP&l!+2!@eZmx3#dN>uo(QYl^?h!
z6><-3zP&9Hlq|$Y-Br^+o-ut{^feS$tg~hCp>xJK*)2ofdrLW8nV2Nv>5;11=5cr=
zz;=rKO_A;8&<m?ler(~t9K6`sk?4}Vc+RuTiQ0sXRAP&#&80A5gKOv5(4*EPI#lja
zcv0F*4$udu2UbnSjNGph4v@1eoRiJW+J9R#fH%P)@L)~heY_o==*)h)nwmapR)5}G
zpMIVtefq?(+%JatO^{3GFPv5B8{t-Jte)RK?8$2|*>V28bib7MNi4$FYWOjAnUjjX
ze$(|!z%sJIx%*}bgQV%EXGy}_8Ydes5WXA4-7<5b4KS%albSo4(54nyYO$}(gub%o
z^EtMheBf)uKM)x)dA5CWaxFId#6}e5+G=@wjMVxi)c<>cdDGc!SBA=MNqb%6(u7)<
zcrTy<VS?PyNDuWwAjVaIpejN%$$BMs9I`0zoelA=jE<HpZ}NjmDSMp2*Pp~D=z1K|
z$<6;99^j7F(fny167OIn26>z{Bm=|cky&0vTgD%hV1DMi=ME_bgR<eXsI{{Tk2a6B
zPf(FUS#D_A6f===VG^Hl)}f}rZkexS)#CgawD|`UM|P>0lpr2W=c2RP+%2^{MJe8}
zkUio}DPf*pDPLXWHFiZXYHBGt{Z^DcO@F7+7l0T0RagpxonO_6wWC5`9vjIE;3eac
zy9IyHh;ki*7PJlO$X4Dg7e3UjuDCyWc|gc|7c-{+DC>#EmdW{hP)E>{tJ-mqLuW*i
zK2xLX5KN8k>nOk6n}yMhldS$DA#HMK!<*NQ_ZS_rytruFBIcPtv0chZc683#8}Fq~
z4nSF^D%T~?^3`<Q8suS<wMf6Cgh4%uqfxO`j@XT(Nn&Z|Y}gL{4cR<^{DU@#C3l67
zgjXj6H8}`RwK1Tc+TWmKQO?*oN-WNUgwjztZo$SfT+l4MG<#^Dh*~zqQ$X6jO1v=s
z0+i`m&9iRgp4t^bz^9zmhLnf;j<MoI2=LbDA>2{+5x*IXZw?W|mwVX4Il%IZaH}@Z
z79Q`zA?-57(UFuRXvYdAvO~1bgX0=0cQ8Mk(r9lD%H}GbSAC~TE7UF9;<M*2H><WX
zUh1trmJ{};P!A<jR~Tr_@q9lVziCJn4PVa<t`c$dkD^Mm82&2j0xyU}FAVoN06e3d
zo%XgvyTA#{LEW-ZXXoJ!jN{2B_23Y&U*bvcaPusVn*|l`BmRo4B~N2@T=;5i2fh`W
z-QY(Am$Yk#_fE2|JCKzNG*C^_hsbxVBl5TZ<?2nQcj(3ue(wUW#~cw{bM>FEYTx45
zgz2yg@o`9eo6Xh(;XW*p>Zd+e1gbToG1(q)mc2A;vu<Tn4f>Brf9o59z3a_QS`$Y*
zq#jZ~$S+|B#_%uEB}~*#EEYZoABuZ9hf3jG%PN+*O{kxu`bgod*@#W%EIYX@H`YOK
zC?YXiEDaGk;ZlYu^(Z}kAjSkL+VbTUvk!I2d5r}ez^Pibu;<Apcq@Sz0IfS~z3TKY
zpga1elHLxkCn_v166noll?r7LD__2%b)6_~2%cRiOH@TY=x=2teC>az4~s$Ei67QY
zkc-WEPeF+;;OYP=iRyM(o$$HNDNRe`C#~=bCNG+dP0TKp7>PIZ$k6ebHk`t_d`>>Y
z$=Lixc8w@}OvGzQu|3#AV5ceg_J(985Zu}LgLZl>d{l_SKegPWe5%Z%_<CX{R_fB-
zv)!VSQkC?j;k<?O{>VDA#93RNL!y53T)43L<eyabB~AB|*9ZB$ZH3bZo7;<1gC_eY
z_W6bP+4bkv$l|fIy=gT}@iuo;AIu(YCs9{lzld-7fQ!i`2D?%Q(E1EED7}j5Q`#@m
zGljvYmeIQO6n=Y002SWMyKd>?j+~6);5}53;qt`-l6TJ;eW31*!bp_44nc9wSpjA2
zj#qYhB?nFFCKx`U0bO&9x~<LY9J&w2Qz`34l2wc(%c-%+Sh3X7BV)eYj?DkURW=>c
zXtaOiNT{Nh{he?I?#k(JC&n6Lmiwp*ZsG{r)4Y<>tFdL1*A`HJ|EwsXBC0N1CGr55
zqKYV49=jhYQ@xt-)=Sm48-t2jHobfwIo(QF>1sN|+Xtj{6T^E@o`D)Jn!``53&gJb
zr)b;#y29HDYjtdfC8Fe`3yd?=nJbd4bb$jI0>isv!=FOHH9JU+|HlG+;mmGw*65nH
zOB8PW;BdwIy_VGS=e)t&@_eT0bl3I$XXF6D)AK@a8untrAwbEhL@P(3!QG{NX!rfK
zTNcN)_#J3@jI92&-S_alx1H@@Zar1T>s@WM;rT>QcH3(_yw6_5t_Ke#Jp)>}+%zIS
z-G6yCeDVP!$~CKMx5>EmHaUup*q!=>GHMlucQc3B?p|Gq%y&>Xv{+Lfbbny>c#<Jf
z4?Yvz%QESIU~U@W`Dj>r)YR-*Vo=|k1lV`YapN<}5nfW<5s60f`2`%(EchN&@To*j
z`aRIb9ksl7kXwM`RXuyIXQKM8yT|P_tz;%6e2@V`a^rVt#(3KH;dV}_gMp4*80+|U
z3fj7;#@OZ$%%a1&WdxJM$KK6(Dw2<1-{xend~jRt=tGc}u<0k!VIJ%4r`Il<Gj06m
zgUg?1J}9}zuKTy_t&w{%<BOE`gHJV055joLmvWB9N~zyYAx=COanc*hZ(IE@^ascq
zWS;<n>z|t~GX}4U&u4;V@5)c-qV^})zdaWUChLr<!F~Olx5g|==$gQ861~h>wCb}4
z^QUTH0tQI(^``*G=dj(QX7eXNtXlXkcOB1~_2DfufsHmVVV23QE?hvxq=ee&Mu%PF
zuZmk}vkWwmSg`h9N02a4Erx4E8YD3!KLdtN_I71FZ09pe9dVt%^2HFDb<;TUt6#e=
zLq5yXA}p}g`aWG<vJs_@__(6qJ_V{y?V4XelVx6mlK5;Jt=BEd#+_{moCQcAIudb0
zY_FC&H@PzwZ#850>?#%C7*2?;ysMH4Zg<E!na+&w7dFK{#vA8`I!SFhTpcL(-T)uU
z9Ocxj*Q_efM(p+11m*lopP~yX+kaA3aaX$Mm7Sn=^>1veo(~lzpI7G>K4%YGwgaD6
zmvw>r>`<m59YpKVap{49cITS1Q5iRZ5T>UY`!W1E-;DL6h!d9xqDlhtDNIxg<QYw@
z!WSmZnB>T}9rS_<<L#n^lEF!&-2gsG?`}S?59y+UF(yrRW)#8t_=J}%Dku}R;~X}e
z2T@#-@75G>^k)2S{sCqYeG8BEFM5fr1RjYHBn{63%GBkQOvon1Hz?i)V9O)z@>@NI
z**E(~tExKVRG82rK3Im`h)S55zfA4p9HG8(M#4bJNjxJWn3hKGjRk}AuLH)&jIpLS
z=i^Tx$2CRegb(=~crFpu{$U@6$S{v`(ZFAh=?&2l;`K;#5@Nfu;IhpWB*YqHF$ez3
z(To}P{wDKZ;e)$0qL*q$nbAkJer`nDN{o70Ii`Jt%n?|O*9$X9>0@m{j9~_S5)_mj
zNX3H#b;9rw?>sAw5)*?N1pseBUMrEkzrk*ux;VgQEyO51OZhL-Km+C<Axtej4}KE}
zGKfx2N~n%Jmd1s|Q7E2Azk$CQ`y@R>XNER9xVd<|2tGP;W<k#xw}Z$VZ!t5}@MQ+s
z09r*Qy$ZcAUSHfL#Aa}6A~}azA!8IdBZBD?Sk8MeCQ@KDg_xQ*6(AN%sIiW+!okJa
z%>WJ(|9gOUo98vgRFMElw4ZYSBNs=;5S>3=*!`yGdumbj422vyh|EC8Co?HGvg4u<
zRL|Z_V2Pt{bx4$ulP}mVzMkx*Hz;^fD>2fV4Q%*M>%;#6j6ie0%MxqW1HHZ=zOfVy
zSDC`1rd$00$1z@5_kU+$Dag)$CW-%HArVYZhlGmNFB=gnOgvRk^WJjUN-bLig0MwU
zngt2ywh`&gdWbXkk|f)O7G*r%Hu5MzP_#WJy}~Qi97$d{kyBpvtN`x5ezhJO=9S}c
z%Bs=QfSjg2p+VE9K%9Xb7#$$9s;B1RD-4P~q~=)zJ!Ka#i956))-#QNNhu+!yyPZV
z^9Z`Gd{(of@{fzFL0&H7#r#C_%1zDz<4HX&h^Ol!1JhQvBLk0QJOR^$N2SZ(7MhUc
znvmjFXvTcafKV!d`5Gu?%HjYgW3kWfJzdg|*o$Ym%+}fUwGmVu-Wo9$;h2QU%AeKb
zB$Zc=thB%<NUNTZ?YAm_@v;U2xBJMT5PP<u2O$sQ2}=_scMSP%9gQ!dTQfrJ`^?3O
z(AVl|6o-qq6}e^g<+LDA`@P2HQrr$Q_|QL7940hbNMSfb%eL49W5OdQJ&5WW7P5ss
zU_?VH=F2**+lcl^4<#(YKEjZ$OpDzOO_~iHUt#J)vk3#yj1v!kO%_mtvU+xqbjKF*
z^%(u%&ENj=r?d69&CT}%=f#J=Z2s1RKfc@g+t#1@$6vO#HaFk@{N~4t)1wb`>(BRL
z8eGa>e{Q}fM;}@?vbFWM|EvY+#>rG*hlYv6Vn<F{MM}8rGUNX`>B!6ul{-m(g0pFK
z(^&8zzs%7ph6+i4JwtMhHszcPh005P;%&jSD~hscxS`R2hAGd{H9#da2%sYa7>d&{
z6k5r@3uU=D!fq}jL}^049AO<O;Fd5Y!4&j38i=4ZN3u0hT(vjrOTYw8&hftmu{6tT
zc?%E@NO9WgQFLdK9xq`7PR3Vio;MOugNSzrF%F)sCXdyB;h_>hx#TMK`3iWeAT4+2
zlxzsrBT)W3wLM9GYf%_aSPVIzbjF^70dn+cfXuE(17yXTs57|SgQ;b?1?q0*l_q`S
zRtjIOa=bqNQl;Il#9$sx$p2a<<ow(n9-W>Y9qeBm9cm#yCIJ&NHx1F%a6%G1+!_mQ
zPBe>rF+yv9Nf(*b6orI%#Cx)QT|Qc^SKuy>R_jNr^`q5VU0<G39<A2a^=P$zv|2w}
zt-nok(WBM+(Q5r@wSKf(KU%G8#H>fF^@CZhZ*7`}J96=X2ej*wC?VcS(E+$CQ{rns
zUij&Xl`g%d(fbb_*(&jV(Jr^*W-d5k&GDawaDp~}`9Fs{J9|a{|IxE&kNKY-<SN!z
ztM>h0QpX3AfQ9E|J!O1~Ie5RWSRx%DUjgOPKtT`i#L0b>`+4}nJrx-E;$?g)U_w=i
z9E&sabyxUVA#N7^E0y~xj{EMle`@ICu@X>CC7@hi`-g{TN9X73=?=u3-kkB|_|&{s
zUwEj0IC1r5h-7_t&*-m?JivI_7kxQbIPUv&0%2i3Npf%Mn?3PGvD{F@9w|XOZdvSz
z`-DW5^^TUbTTue3RK2>QgB`x4a?;ZAU7Mt^VpCl<K6u+PdvMbL3k|m&V6lhqRvutY
zZQeCjN?vQ7<n>lbz6}Wg=S^PGa7N-NreVc@yhqIA&NO@Du3f6dC{xi3rm>9h^pcio
z+MP6}F9p8F{eHIe^Y5$)#Pb9v<dDWz(RQni4Roj~$g9_Z_YsuD*uA9T3{4hjMz6$Q
zI8+TpIGNXs4nB4~8oyi$y@RTXUKa;pSHCV6zqXpQGG6J{<<^i-Gc7N(0iPCAW8JcU
z_v*6S>!Tn&m^^)0W3tL!*HKfaVKR#Cmo}(nUA5Y?O5MTde8HPqw;$h<-j||N60KN`
zji3|;YQ0)h#k>O3E7uDzSEtEW4qrzh_V(a6Lzb`PeYX<q1(+;T*78D%MZ&msRmB!<
z^ID1D?x9dOzIFkK8-Owk6Olq8UzkaMTNh_p!dL2{X<(V<&g)dqRrpR7DDALt$~=9J
z%+Hy7xood)JHX0zOWSi<L{uda3e2P*G0$1THY*Ug9*)?CAKrx)O#jO%VL4-Qb@3k?
zl6BYq(pQD2f`g!dLv1;(f>J4QwCwE`+d}(IfrAyqhFab^Y4yFG(y7`IQ=H|0hb`k;
zvW-1JP1j<dj|E;I>RR*pkIJl-Paw7A{AakgSFHay96a55JpXx!>vpF){}M_3kvTRn
zu+?RX``0?TF~j}h=QReB%3VPr|A7u?zVc&}Tb&#&Pt%B2Jd;r^-u);hH}#EW_v@i(
zryG8u)1BtS9rN86JKL#nSgyx^^l}ZqbataoZe#;>=QVI(0Wnc8Z(CYmyd?9!JxNLp
z5XxC&Hr$*=rt8Re9IJ+tgCqJ9Vo1AH=A4#Rs5Kootnsj69Y+n7X02|OEm{#*vk|zv
zZX0x~UYD4ja|WgfW3?7T^Fj-IV6IWdomiGQY;0Q0Q1<Gooz&WfyT&+wylRsvj~$;*
z8k<cy*k)F3dRepWnygNv46VK6@p<f4*<;Pnc<e468jsz(S$`$3b-cTop_MbK*Ixn8
zx<uVw`_}EO)_b9P_<h;BS3V=qFx~sfK#3*_cI{@yQ)NQT%-eY;w4B#8w^qk@8rVy7
zgE>~SgrhXKRN^iTOr*JgrCclP<QvNekmDh%v5MsrcPrk}$RgI!XC=>A&KfH1)$6KO
zpIwzPb(XE#DiU9K$+l73Z>@<9m95cbd$j%KGFz+y@nMb5TGf95TeIrwUQEnQ9Y!%_
zpsf0sb5*rk^-+2x<yG`2`e(`#Qqj@c?0;*q|Mup@59lmpF{$c*V@ds|!S2p(-u^q<
zd-m+H{{Mqq8|YMqT|wF&Ifv+aPC^6;@FBzxyO(%Ic(1d8F6NXYo<^XGAwDO*k7hob
zNV_EsXWJ+yK2GQr0j_7=$D!BRKp~mQ$l}c?CR2JtJh@o@*H#Y+K?q`vRU{aSNQ`_M
zl3u5Gc>eJ`VKM1{Y@h=c1S~|q9GoMM#=O&;(WDRmO7J_q$?tI={?#|;v%dI8|KwL;
zKWk`$-ODsW@;LUp9>0z{-}NT=vh!Up3B=zlrnAm>|6gYV{eol4QjU%fk9emS#SFrE
zdekGhFJF(@KRUfD?lO<`zlCF_wXFZMqy57-N4>zS?qk`1`hPaqE3W_H@Ui~egIpVs
zxC|-V7dq5)+UZo^N1G?F4!2}_q@RsQhp^{4EQC;Gk0iu}BuR4|d)GK79WB{GwlBWm
z2?><gmdf3>hYsN@;-T!_m>}$3kvO58cnHfJY8`nh(L*P%4p9`dE9w!Brarl$LUPKr
z3f-9kBnT3JD{+7kqigDsPK?7DL|<N!&=a>q58){CsVl$d5pn61x-xhbdKTjf3GsNZ
z(>W)k^IpK=F*gl#615MTI>V9`I|_B-Rap|s>ekWKpf`Nl_ekWkg=nuY_SN1z3H+^&
zM6G^;XvmW|b!7&oJ20BHtbaH5cwfkwkQ%B~L8y6u{XZS;mg>I`p6%>DuK$O)idDky
zqh!wt)pbU_VXlUb(Fwz;C!moFsa!Ot__(HCj$&tUH(w@4J*ljYqk)h|hPiq-Q`4X-
zb7R68y!)(lquH_vz@IbUlZhJ)|J2J<@KhFqTm=l&QfWh#W)4m}9}`f18wn^M(-(eQ
z=?iUtAA^edvX=9CL|iM^7|tzqwF>g~wc6B5nhTWECgeJQrJ03FNHa}+A9Z7V-L?1#
zPB0|+Ky%E|q&m%6#%#*TE1DBPHKzhZLb8M{2K%Q=6G>Gk@zdBPiCPu}GMJbF&hb@K
zrWJb?)n(>bp5qE3;>*%=^>3^;Sb4Qd7PB;e`vzK?Iz((>dIU8uEbXIudbpMU%=cwp
zB>l{RlKZ*+w|uGWDNru2@|7ikO?^CDH}Spl@vMgKI1M7-+NW9AkmpIE2DA<#S%9&G
zrHS5}zB+o$^ET?sp?hf%ER=7&)LTF%iDH(pNm@3T7m*M|IH42jHzzJ?MdmGEd*Ic7
zAn2uHAqdjUuK`8vHJ#pi4G47-hc(#?@30PzRlCc0Fv0E|v3f$do>O-YpN0lj#kf(B
z`Uw?FD%(o#dtEdnSZsp^JN>SZ%gu-yFd#1si@_&126ZY;FGd~#pQpwK+KgXyv}9Y(
zy}L4(kXOsS%YJ$3(q6uD<>l08eZEzHzfJk8+QGGEj-pAff~#n9dw|`w;bGCeSYK_a
zsgZhesF2RcTE<nZCo}1BDcxdNm!Opp4<%JeS0_Xk{;iU7m*fj8Jg7<-CKQEE?N>|k
zg?$@#oH+H@ZOb`J{RVrEc-mys0e~br%e9WDalOSSmfb#Fabs&hnbxih)SxVX=1t#1
zywZl+3FgFh)^K6=>F@GQy%tnH;cdiIcdpIt#_0WM9eT75<+1;09eP;nkXZRm79#Py
zt$7I8-V)o8Xpc)$5v<kli9Gj^9KF<1t$<wW!Y~31ZOLrL<$e@Xs+2&=JgN;2<OQ3g
zN3u}!I`M2ZA-9ESo5RFW5e&$G)eEu)qAEMAzz(=m)ay4(MZ`Lx>mkOd#IXAu*hMa&
ztra}_liXga1LFj+<R%ikz?9YJZ1xr*4ycQLe}QHs1Q#+}G1X_*hd9A#6HgPt8dVqd
zdZ_4EY>QhcNICGoOR|s_AlUdKIaP{-Z~pa?EWUsL@~`mo`wv_722B!w;aKodG+CgK
zT>G@PG)0R^hKbt`YZGJVQ2s`}oI|$eE|LUdsS>lP)cI>i0XTtA>Ofzjq*nrV<deVx
zPC&xbiK9RhQ0X@t@>sW0f}zP*wPyNeNR8dz#-mbf6s$`W>V(9B)Ce`ETVPaPEsP)4
z#|&>IWEUh34A)nRP?O$&n_YM&^jKMsLJ7BG)R5gi*Am*)i1C&;$|X*ZZiFNQ!uu8|
zgG8((SSPw)uu>^4eQCSubk&A)$v5q-Gv<J2?PivsfQmL9+}8e6pptH38f@YY1v^yt
zTeS>zHuMad2{em@hEZljN5{)&Q(ktZ7VR4&tp`F*iXxv9PkK*(YQM*}z=Byuzyv->
zRvj1#qwGYyrMqp}utov5yO7xEq2EGu^1~P%z;;}~e#`b*jNYU?scd3%OKW4Q6iLfA
zg$M{Df^@dJ&aBf0<X^B)g)XpJzs=<@y@iTRns`F=cpC}e!ADyL%SxBCfO+lsh8aJd
zBAf$L5QDN4N#%!syRpDb%O>>^Ps+72HYa{WVl+)d<?z*Q)zm8dM2#kD`(|P7zKyhb
zEn5~)jYKVqWvnl|NSFrgfpE}qTS^r#pRi=5_m9IfG9x$93ZER^P~KuI%RV?{grBek
zzFXn5A6I$#^=d7z^!hQssIP=k{lP0$e7D`T(*7l{CH2mKidT-5B}Y)ytYuS+3%70+
zW$PjI8X55lO-kr8wkpq5l_q7@USqYW;w33|J4cAyYFY(<Q}cCeDAlHk$PIQA<>B8}
zh{~?=5Ydl`0Pl68{CuJHRc7a!nIo6#=3ghhRrm`+ED>6Qi#g%dIKT<=30`5LBO6`q
zr=XRLZeO>5SY&Muz4BMPqd9#!h_z$9t&axfRaU1mk>#A&<@l7e*b0cE4zaDzw6nA8
zl0wm{;cA(+wcOtdEo~>pK~u|vw&}g19<fXvZ3}A~l3P9+C$D}lF>y75wG5zEdj736
ze5u3N!oH$zzlyb_r9R(+%vaImD>e0owwLShE9vNe?WE~edU;D`yP7V38!h~P^zW54
zZ^Lev8*19>+?j;cqRn>Nb|$_pAN^{2Hfo{Dx7V<9y7SU@m+97Jt$AsaOSI}reR;Vl
zty-U6ho-!Wj@(W=Ub|l0RwHhy3%A#TSJHo1(0o_cd0T3`E%n^i8tw|Z?J8RBN}_ga
zO?D-J9k#)RG=H_xUUQmGt5zHI)@p6ERjXx<wNVdkH~vidTB`=yR`-+|WveDzXq~I-
zk}GJDE9#H!HOKa<$x>~xwUV*2hFI4AmVmNcH@uDB*J^-mw4-HO-U|BN8dRvJa=P`!
zbW83q#SR;YRm^U^2Y9Z}3wZT*UJa}0To<~3hBEk6L9ZYHCkb}v;IInuS)%JMnNEqD
zG>JYC91nHj<$mBX!XYiD%78<lA?W3<8j%EMg%j>GMW8(xv;17oDohN5V193@O+gN<
zJS=FWC*@q#zLZi=*tsg6zHI%T#$-z3?0wh(PT0{6anodpsk9}lyd(|9#+M*XqUn-<
zEb`K3wO6x!;RZ+V72!{4K=wUv8RyOux&FqEkbo(p0TJ7n<d@5(7m0vt44EmwV-Qvg
z3;hMUj%kt*=^|^UOfC85kxyA1;AD)1cH{_<)`6!M5?+ZB$l*!HpHhi;L*h$tbV(YV
zSXvLD&2}Q!Si=jKq+SeI!v=DN<1gfY^Y#mlP2j;5jwzn_(zg%la<8&iAV@wWzgJAn
zqcMRK6&g-`>L$R_-8l|tglp4QA>==QY2WFe*fqH#@wWJ4fm|F4o&g+=gsxV)<=F=K
zdm_kF*F+V87@ZDPg5k|6iNVvB@NJ{GlbeWv?hby}0r4n~>nVYyNhS#)%(Y*CT_aUA
z5RM>=l{^N2u|Bv@e?dbj|B5byO$?*5JU?m|WK>@M)jc^V3;Jkme(f<jUpm)I)m5MW
zhlVpD+&kfnhBtkg`#xXSrR}vO|JQKzteF36ICwUA%>VNcS0Ts?#|fQcSLdlxo5>jc
z>2%}*=*k!jbWJ8`&e$b#Nt_6OCMH;)45>jXDKNSk4Msb|(P+;Z;%CF*hz$0+x*1vN
z2^}jUI}t>t<ACfyv#Vk6MGrnJfEL9>^)p6Ym5JXDfV&!Xu&LBAM$k;B5FrVDTfKou
zXk|5%cIA^Fk5B$Cwi}FMu}yL!G@qLVWHdy`XV^m%?BmcSac9mT?Qa%;h9baqSzzbC
z&8@5sbp<f`i!>7L^{(k9h3&A%;#pt(io`DnW?>=kC-XFz^xeL@+XvKr^x2H{_|>ex
zI~YVaPX1;u3TK^5vbbik$HyH9DF`|ak}wG1462@d|8m$H4SEA-@T3z6K~h)n&;e~R
zy~N4y<|j{L7S8^W-AFKh8;*9K?(XgF?d<Gy<jwr3O|*rx60%H?;nUuW-tepBsNdGr
zmj5gB)2%juM*cq>?TrRIMgG4tdiu!!AL82BkSrh{KHAyXKxbsS5+mzRd^YI|e$n@s
z%lj!Ou`^4lNBZ#G$@S2up+|0df!EpC=!ov#UXeJK$sAd%rD8CD1gIE92m<bGpmRb{
zR&eg4Jn`ebB=S2O@RDw6+}S`nxp#K2vw<AP^aeVTl~&P|8~ZO^5d^fg-kIELdM3SF
z$GmBpM%}I$NEYUVqsRvf3<jqL#qz{}B^y^|zR(|^I~$0*!5s7X7~zRK9PM;AP_Td(
z#t7rf%fRb&vW;qgY=Wz^dmSXzGLqFOQzyBwxudB%o|46oU?1MtKtB@_$wy*`(^XJp
z5Z?9wg16jx%vh2&ASB}%<w?94o4-`BB|KHtmh!}rgA;ldeN3=>d5vR_=X1P>QE}>#
z7;%!AkW@%c1&yOL_R$r^QhCm5I7zi;LVR|udr3J#-w`T*bl2~Yo5r!2Wj#y{eP6c9
zV!JVE?12O8kSExO)Sti`g%TuFk802??uf3b@1rTEz6K#{Q(`^AvoY#sf(=3*oe`dl
z5ufAH?%sI#bg=8Xd&8ZH_hNT4a`%YmJ)ey5aCfvj9ANTd=sqKRBTVqqy%*1S2Lo@k
zGZ_t^?!MT68{o+c*J|@X&7Erb8JRrYn@*qY>^vR4AOrGr@A-?-i@}cjZ0E&OJe>}o
zzQFFDH+ufmdoh~qym-1d-I?I&v*~oShX*hApykLaa&<gCVachq)Jf7v!+n0j!ZYaB
zC_)?P`uf^|RASEeD5V}64u;tW?>LFa<`(vSc6}Ou(<|ze89CxE_OTS%G7{v(6(n;S
zGbr-ku{E-@G)!nf4&^K>ij{RX1X!=APh=9>tU+K3@5CYq5xJopi0<_K6y}~_53y+$
zlE6aoiGJ;rN3ir&BL|AhsiRU$xHJ`sw32IXoRpVxRa-LYw((6dTvd1AQ=X8JBXH5l
z*FORfBnW0cM$ZT42Op!SPj_^0m-&MPD1QZ)U2{>Hv%y5HOr3cQPwA`xxM{s-TDMxX
zJ1QbzPOwK}jwWQvz&lKtSYte$QWs#s?j;F5j<D;pSQ}th*))@w5Np#UH#mrV!uz@C
zXZ6cb0CkX5K+Z|>le}|_QAnFHC-!i%xcuCJ#`iMU8`$%#5n<1(7|dH`vGNxt9)Fyu
zwcsHy<Z^|GnKeIJe?DhC+4m{t(v)TW9HaLiWD|%+V>BE+>kWDXNNKX6ik+C0BpdR;
zl(C-AT<n`W6C7K2R6~Q_us7=MG`ACzfF&f?kaergs6?ZBNU9D>B}zcMmj{XotE+m6
zXb8RqXu(o6$5#YBnad~FEWVUH{(ngin*U*;x7KZRJ*PfV8nk#Hh4O=K;C>(u`6(>W
zlq>!wUVFmP;mLUq9Z#XZYs%*(MhAT*3|$J@1sb}_668^k9H70+=RE6G2m&=DROC}t
z{ZnJ@2OJY8APM%3Y@#@l7DMbYuCiXF@Y$c>m_YmejVp?sWKJBY9i&<WIDfRkf+sjh
zIh<}yd>me)330I)pOA9E?I&cAjDxx)GqDRG^X8U=jC0bkltIRFs>@BEl$fOe<v39~
z@hP7>s^lVMtdpLIG!%e_9*#Za`YiQ?FqcL=J8K5{xPw4Iijx!Okz<v9<v1#A&8IPQ
z#n3ehRI(a#kf3l11yroWMSp$!K6nR!Pa?FMDI8L46!NI!T;s%@J9>&#^NtJc!r0V7
zw6*I@XeduDHqfD^GidmsMFsb-vONH&d4zH#krEcrW_C>FFNCBno<LpC43I5B$M%4K
zSV+Ml*AG<i$j`J?8#ua9RoKz~HI4~7V=0I`${A!^PHVzu1WtnBP=7&Bdxmm-t7p+Z
zWqnf-KVTkt*~MwXy0s{i0BLXl8U@Vq!DvTxIyJ;%(YbPr0tr)$CzgkCL@xAXPH2qS
zb%?%mcu1p&Bz6|8ZFvTEO}S#46qMBo^*j=yKJsD~MMP2;I3&vs#9o}t8Mm>-CByvD
zXA|rr)fXJv9q4ja;D3?86DoDb2&yA=lyH15Kgh{3ImBpp0HA8Y8ep~#PL2^IgF@Nl
zXzfO^vrV1-i3ucflAtsa`i}Sjd%@N=^uTH85@-&Ga?62Is~!uVBq*RaXh9N4+#{ql
zk3=zXL78Wewy{w>vLz+XQ^NbBofo44bW1r3NIU~P<n|yl_J0i!;(=jFY5Dm8KvZJx
z20El%&=wqIc}78i@?}O&1`Hm_Qe02;qbCS-VyR9@0`+W#Bv+giTChG9Lxwlh^PD7J
z{W>qcZwc#a+^U!`xP03}a1gOjdH99)n-!zWJ#QYO{LUxfSdESk#ljJkCAwETk~|yO
zws4DRlI`ynkbl6`Toz1ds4D<r#M9}N-Utr+#0OFENe9w#LXXFXTFcT^h!iAnPHnP!
zNhM9DHM4d+$xgKmMz&J<NIC+k3P;3KlrAKR?_Z)}Z}=R@NgoZC9=|BCV4cs$LcQ&z
zX1@w=sEm1F>o#8;bH#3KfYtm|PMM{4Tc6t-cdn@^1b<YRLIBcyAYZg8T&tw!Xa=^;
z@_wjeGa|X8NhzWLzBDYEZ@_DHjJhgiS589eW}Tnn7zZRFvB^snUV?p1>pI3*Xyr}L
zc23n$IZ<AI06j@xlxOGVv^YrBlo4eVK_GII#27^ePI*S2{kA3XR}BU*SP=>hJ+~m$
zNMY7Sr+?f{_Wc=)X)+H0J7QkNUctA~REV;uBn!#C6NFjfZR^6=%I|91o>HH&OGzhn
zFcs)NqhT1TWfS#`;x4q6%qF6<rU~Vid6sDu^dKm+2n5&BZR+~-&<43lihNLc2$n0=
z+jGDd+)aF5^KH=zo)>9AVNWo><bCV~G^AqjI1FkL^<~TEX9wxNO!t?ei3AoXK729i
zwjFa;Zr`>5HH?2BD5RVb5)!4#rKB0@shB${e8=e3|9f~Mm*0s5F+Fzs3JhKXROiax
zP$@2DYB?^XvzW+S(xo$CL6(%GI1NLUQ%>nPN~5aSMe{FIZ=-phtnkjH4gy9+iDuQ8
zO^O62f0_nV+72OaX%+7l%rq-|WllSErqlA+;r=q=$ZUMj8n_A=P;$NJk6r$A^YrcE
z$CLdxN9U*e2S;0Gi-cy>u(a7r2;2ZnPj8JcUrG?RZ7c4z4idz^pS8ue(KX4QW%toF
zNbb_pO!Wp{q=AV*%ih+NQG0^72RK1Ky%Yixe|tH>aWALpK>W)#3J4B)9ZbFacun0^
z%i7$uevPRO^^t9g6L)IPxhfED%IlsK@SeEQxJ1yEfFy3D?E^f6p~Y0!_TA1hoVZcm
zBphHFB7#fy-_&b6nAH0+gGs&CgMsGW;F~}&4xhRt<U~7zd+a&{kCh(@drcEE0uRH9
ze>Q?{Y?#e%;<H&Vkgb4{HX00H^oOJV@OhupStvLJ4iiWD2ssIJu&V?<2Zx>m1|(-j
zm@oQ)!yo9UgOF<WwS?_wvAJ6`Z3H$U6a^Rt5fX&sSt<jj5{4onek82cq6Li|^=3WL
z?}4E$auV?Q`D^f9f?*`my6Ixj+2L>}e~IyaJToZWux`oUMn-lx_Z_RLG3pkWvm28{
z^5(AoHlYD=CaHT#5<W)VL2oeF-5&G?L-EfD{uKX+pYUsUd$>L7?QZXG4+o|ZpM<ky
zZZ$I;Y>x)pJA>_~gYDhH_TFIo*<kzmVEe^jdpO9x<Melu|7tjZ|KvaF-@*2ffBa>z
z2me0nb}FWagjY0XA)K7&y_><H0vJ0AuQGdjcE^~vrN;B>?OSz6ImEw;Sui%YbVci*
z$wCNZ)_o-!+TUk-l>EpsYG3Z44}ChsB!GafPh$J}bZFcFK6P}W@$BB}r%~CrqIuI9
zOhTu6-J(lE{2rh8Bj)=$wq%UDfBz4G+M9cWAe)Cwrd}NeP-2xscb0M1ikAU9zf^zh
z1!T5C7=d3B(hcxnNRL#~GwV?j)7gx~V<ZOH$;@~<w=?2Nj1w|j<oqYZpq5}$etxdL
z&R`OFpy5oq8ydn1@XfmrUt#JCk{u&;vZIcV?N1Dhp8^`55$r9_iOWKde}4i9uNd{v
zC6&$rLTk{+Y}Z5;6u{m>!&qoxj0U=KsI_WWBnP7kq|=79<zDKmvqdGp3b8{*th7^8
zTo$?{N_ani8i%>y<W9sqCxnW{3R1fcx?a1w*nRhsEV>$z+G}i#x<~&^vHzzG-!;##
zlwuG6H+NM?80uyLRDTvDf2#g8p*fqw-X6$YTNV@2h2mubhlDz&bi9mEXhz^#k+z|`
zhFvcQj9KftioK@G4YUt|$WRK3O@-1uC2>qVP(N~Q2+5Sr=3r7$I+m<kJ9LHvNkI|w
z_QQnkTeb2xAU;nudYHyEoShpy977#!bz5RtCGM9zS#~%^x_xQifAn<w7bMQ{X5a%x
zI?eInsuU*KQ$<lYiVCL%%0VJ~)21}YU0^?w-Z$gIU8mr2+NxtKCB?&cZY;NV@4awX
zDldHo1M*hBYkgAOsiaP0?ko{!6Zz?{R;9jLa%v)`_M}vc%_>~h&*N$&bl;s;lg^60
zRuD~&WV+QflW}Epe}Kp%vGIX*F^Oe>bW9-iU%u`RL)0T-qGfa48}e9yX}HO^q)-CU
z@~}q&5A3bTzOPw)DRds*7dy20$1%r|5>m&4)Y=5)JLmAqLH35_9#TWAK&h`yu6>Q<
zYU&)LCx85bXz2Q>M^HC6_dP%`>Y>k{pENe4sZKVQ^H*K^f2|>&k`G#e0Q8T-_rFVr
zxD6>-onMk`BT>OQ=(~{Pgz_ns!j|6Q_rt|CUi@1kvWEHI8iz(mO-LNj5ag5}W9*Vs
z5>qgM-$rCb*O<cjZ^F=&UJ)U{LcvabX5xwU0IrcN4CQg0Q4Sg*8Ka#+UieiUp=^go
zQryxi*b2)&f0O$haz))nfmi&nsSg#Vi19J<X_($f7+%vW5)wE7@c>~Ienl~xXlLNN
z^C+KAiMw!p(%&$qd<VKPNZ!~$Ji&32MyKMwu}p{_e<X?d4aW`A^+DP#O@qBT!G1D7
zm=pK%6esiSiwGz4G3xf^3%_@*CoBfxaJ2h0y9w2mf5;g9ba8R2??P2E>>m;zXG+hm
zej4Q|V%Ii}urx6bM#gNBf_>>?9uq!izNc1*cr?Y-Ph(;|63zK)nhbJsm{}1mH8?3F
zqyif?s2EBIfC3`a-69%P`LIeH)FHr-=D#HdjAyfeU)ygb;K&u@G8L(^ypvFMDkd(W
zSKzN=e;lusW08j@a?8rv`rU!&=8zY-=#<6RIQGB~PWrTIQwHULMDWkdqqw-*l(h{G
zsLVM~?GWG#ndV|bl0+WnaFWO_Gh2>4byH=|KpIoWW%3kny2Me?oQ!E@^i#<j^b-nH
z5)o^FKQW%<ti1Jhw5o$xd6HXp+>S})Qx_kwe^l(cLu37>Aq~<185@t>>9}-fJ!Re@
z<#7r)`62aYM4=BVArd6xMbMLghWok!IO2MeHyl0LMj^Q(F`6(rq4ozhH24OfNyGN=
zpyR1{yj_GsNWfBok|38&S&}EJp;$C+RhE)MfZVR6mlg6-IF~y(eTUM7`ufy^hG>%V
ze}!!}iB}B_Q+`}epY7~!z~3$l#D4DV?hZ$Tr!NM|H|y9VVwr3!Kh`X>WvI>zi$@eh
zv`>i8BYQOT2=U<1LI5NFFeesnlsd^gW=R6lKul&zg><I$rVmt<tNtan6xm_+8zDDJ
z!6Xt`_W}~IcrivV25+beG?Dn$>^1*Uf9Zn_^d?PGU=HNQ^;0gyEU@lf5)UJsCXBmS
zrP{E5jq6TY%T{G&cZ6kPm}r1+tXo4BmlV%Pa&Y?YT{i!xBz8%dKtR{-z<TWsjHCI@
z37O+7D%4K}$OaPNlS6hL>eDtP1el3w<yRVd?7AQ&Dr*+=scVw6NK=6{*q-WKe^A!>
zfgY%mSPJ{g^MMV|yXgL*8P!9xH^|SeNlBvBOj)f}@Sn_=$^HNZB#Egj8F<{vVI@vO
z2a-a$(xy3QG5uX^{XWRXx^dFqP_A&!l*Nt;L$SLnj9Q|`vy?UYvaP&XK5icsqxhJy
z{Eza1avuAr*VD&@B__H;6QSLz0|aCLmt~U#K7W^}*qVMi%$}NBzSbKRjG*PBkK|zo
zINo1jUl6%Et!BQ*u0yG|*|a~!zCXe4Wk&hcl9x6D7CMXxq&~V}Z(};6A@<L5JGd3$
zC+N?63y%Jpn^ti*YlT>kL6bbUny{Te6>y~j$KtN#X$E8^53ID!$0qqGW&ug&B+Zt4
zzJK(mQjFjfLdkJ*X^#8-zh+-UpvU*)7lRiA>od7-qyxYBro0l&TFCJJWH=Z+u^#<1
zC1SJTX|NgNgltwc^hXx`{IVM?oa|@!^ZQZoVQZ`N$jnz{=C*@WKm+Xi%#{g5yqHA}
z4PjYeSLT%!lq%opH49h)bz{caH0kR`wSQ<V*Z&)J*EpM5Vf8ADiIqZ1GV^@?tDKLD
zaZfRKGe-?x=L=`a?%GR6`GzUCTH`WH!>ON=&?P0mZ6$t-+t>@JOp|_1CXjDNnV!@h
zWc&kbobAYsRCIEV`3h7hNvxh%z-_>O$H_GHmG`TB-2oS{Y^j)BSat4x%}xUiP=E9w
z-@zx#J6S)_u=Ff8_6eZG&Al1rucEhF8M49UKqx;|^DZ09ISJ@<f<@+h*fe(aMSF{%
z_RCUX4K$qTd;JaNSt%3%^Pc*{ffCQ1OpJKVu=j&b>0`h?jftbJ0Lrg7LuSeCw0Tx9
z@FhVmj)^p%`aXptEh!?H2=qKERe#{al}_$WgCI==y$K>oAh-s+Yh4^7RWVyi9-fJl
z^N3HNWofu{Oia7&Yr9soyK@Hdht7hfvBR!Ihel3jaX=cA$ESIBxYu^g=?uAq=hA>S
zE?~+t{eQiK(!Dw~;yFHZe43LK9CT=cpT;@*S&>}caT&5C11XiGw2XRDwpw?U3xlUV
z%x5kumF-Q8Q4|v=qcE}1U37f9UIdBmC-wsJtrb<A>NCOxGl!saW$RjskY8jHNS)^J
z;P~*2_q5|C4j0;cT_ZUQN$Qp0IfqxzRH`$3_Fm_(mwA>18-Lr$k7S)w=4g0i#A^vt
zDz?L(Jhhp^G6g#*h#>jcnl`)aKBOp?lP|W1Pc{$!1pYtwIbH!j=(!pAsyB6m*zlY%
zkDNllpWNszbm*b#v<lK0t`*e?CY~_Vea&3#cfrdwCZIlOYCb+iS)4@7b(|VlV_TDh
z3R!`*W*Y%atbdA3WbPOym%~(lLjfgtdNL=DOc>!v2pt;b_~C`bf)1^>3FlnZzcG$m
zZBV46AC!pLJz*i~3L5Gj02s%oT|}p{l$7mmFJEknA(Q&HZxPNFjgwTe{Qd@4_Cw1L
zMhL}l)A+&UhilTsmQ48B+Sv@#fW$yGae~4$n2>m@&3`h|BRiHcT&8B$w!N|2-)X8A
zN(poZIex_+tvBQ++yV?d&b}rB+py0T^l}`dLC4-!aw)_;F?l?}?j>?@1d3q-HQrm0
z-6`XoPJCi=561+Z({SdKbJ5_o$_Ia#Vjpe@ic}%k=AOphD_Irk6OCTsfC`@X38b-4
zMiBZWG=B>cn&T%c(30wis&%l!3?qV|<#TydCqY~2Wor$!ETA2qqNy4P+9bVM4;`Og
zJ>3@n?ro{l`<ANCg&Cia-BO;aYzL|doF*&~;tJfBf$S_aqIf>86RX3rPx--odO-YH
znZzAHN@>>=0RD7wajH@`kywnUPM^|SrKRfr1b=bld0n&6^!Z)d=2qk70C%zE@{^h$
z3*|bTO=%!nORfrkuWszTWosrlUYmwbtD()uUFV~go5m5~C;}qR4?+BUmp;yyccM&&
z+*T=EUoarBk3^9W2NLEozr@L46k;9ZyUGkQ=V?S@PCUYmOyQW|zoIeKgKo91s4`!f
z&VSb{o7tO&?m?N}qf_<UBF)f<WA<d66h%^%4x@gi;n3A5(?o~oE!{k!ex=wsvw*ua
zCSLW<si~&hy%m_}4+|%+2UHL$WQJjJ2I9p*hDg3Tgvp!)tAMzHj--QfHs>ZHQQBso
z51tRe&TANrc)>n4SU#wChhKV7CNfbDYJYbJhP1n*?uo~GNZJ-vXY6b+{27*TMgk(F
zPGwn;@UCEgguFMpJOl_VCDZ8Cs*~5oI@)BfL~n5DVV$pY=_qCEs+MFADr%T$8lz_C
zMC$eNG-Er?NxMr9whG45rKVd{$f%SPAFF0j=-QvwJ=AulR&8v}bD0&5tc}ER8-F9~
z1DjbN(9l|CYF*9P+O)LF#@2f@w^kcmS2npe63;`KT<_87T5EP~HoP{X<*tU;7N*zb
z#@E|U+}e$=_iuh}GQh52f^D<+w>H5(v=MeCGi*CUY$FA&#Sr_oSjv_eW0#m?o29Qc
zm}BqJAX{&eU7u05l}PpgX4$WY+<%%)v$rzNHWK0bjI(Pt&)%Pbak+{1PDa{hq56T1
zv=4yAT**hvRI81i1&z#@Dh-}m+C5j)&7kw17`COMHQG*d0JX85-Wnoa07)5OwPI)4
zV5^YVY$B~kYso^os<xZKRgKqM7<3zOzHV?UkS=Y*dG)8+Je<ewgPMmQz<)qoXCkgJ
z61T9wR#W1=n_o+Y;#EO?KvQwqSlnn?HDErlxwyi%S}+;c8I6l(<95S)V8e0E@GRqT
zwfWdKAa5W($1zcf=(B8%Iz7A!$;fgC!uw+6Vn?AmR8qyI$<*vJ12`m(mv(iTQ$(oZ
zbSCiRvl)tY>Uddl;L|1beShS<J3kwKk~qMKQ;)bf7EM<ISx8fzOChIIqAp35WgtH%
zl{w0N60p$saO8wDs~APyeT2ClZcpbzJ20@=S(RiwOt5g&Aa&e|s-p$*Fk@L-Gyh3V
z&xP;JTj8t@*72Y>>X}qOSm(Ht1md8&&+K;`2m74)Y?d&dcqA@7G=C`zUlwyCmKwLJ
z(5WU!c$I@kj$SuoCo!o^9fyz<Crg>*^aB}tt7A8M`HV5e?f~k0=~HJ~m5H;Mp9bU&
zOT#3a4966Gixv=cECkz28uF}*Kztz^@ALSoe}&_|PbWDn_vNR3`Dw+Pu{*C=DFLRT
z6)3K$`xhJJ5`EXfY<~lM2Vkq<R4dv7ZUwj`t3ISM;6?YFt>A5C7l)J?X{eKEXsOF$
zJF<=gjuVoBa~#s7f*WX{Xh;($Sg0*RL8R96B;|_<(^-L3hRiW~|Afz<Y@;WREB;Nx
zg!(AtK4X_@giKTag*=9cJ7<vFL+@JFW9}0Yp^<nmB>(l~gMS(M8|I}x$qgH(PDZ$E
z+{dacnFLk_FWANLAUpwavkPF)Lo6a;LVOaCBwnBZ`q6k&y_OIZECf3=?`G&RE1{`I
zp?ssVPGLpE4^yqs^z>yb78)?}RSR|0rK(&w=nYIVKU2N1Yv1Bx5t4kBn}(F+*|b&F
z540Z1N`ZfcDt}|t``$cUUNcZf;}z=$<^xDewFBj2+bCs!<i#w?ry<*a{o10z>Z*g*
zu(HT=C4?#Ai748Ea~6d*gwdyd%HuxN73)uE*cXiAqomdzpMOFG(y7TT>9A0tIhf!H
zQBR2{WD}a>K-*$52JDI;n&^r;NMMLt!kx@FpccJkyMH~wA94%0HZol<+}yhzgmU#r
zmsJ+6S+nIfAF9CUSFm6!m#ei{M}yJM;Mr*C?2yr5Z$!wh*3*hrM|UQK>`Zq@qn+o^
zcf1`J?~SH}Jlh$(z}{fwjYh;B45rh8_iV7ULw3ju?BZwm#dL2l^`1T(nO3u<Z?x~G
zbzi&ck$>@k(5vA|R-slffNey>If*H#!9q_Ev^&9EubofsEbe*as_)J*4QDBiy}mqr
zHFgw>r|j+S?&v|ZsX$s+gS4RvX_=4Yxd<w7krq6p%t1`Z<gYSfQuQO3pLr;~=_&*L
zWO@+?jzJ*7nd5_63u)Gv1Nrh;=r5d@v1BSVe}5U+X;o1s#N+5%%#3xkEMAv91%}Y=
zDPQdkTbe7xE>^~X>To#Vllih*hSlY?JY5GloGF|f6s^#@LGkwgVG|A~L)v0i2S8o0
zXX^yn<rLYdm?RsiaAZ48HnO9UwdRrSLB&+rw)$Zu%eHS<r^~iRq!FO-r$herp{gte
z1%Dr?C;D9Cl_`W=PUoa@Kf&qHbM3yHPo!>bch&<AKO`TMIf?7uQ@M&Ot0*Xfm!$+t
zw;KXp%k%(WR7JY3R#LdCsBj_Hy53c+%DJb`OQzN>q=j#W0!JR|=~>fE??3|~=Ms(+
z&w;G|51Z%_D8&mN=8vE&s@q7S%;LjyC4X)dxmRr|4Vy|W+i%PG>sfyz^RHw7<qaUe
z1+>@%%G-dNXe*1662WCcqQJVPa}teo5+ek8Wb%oO+I|a3-xZrE&AHA9-#q0y)IZ8+
zq<ft3B@+(#(yf*^r-G=xT-dG=w?QOOa|CrSW+cpv%nu}Ye<hN4jqI(YZxFtRqkqw!
zGsMq^!x0(mWinr0`X256|LnbMciXnMD7ruES76KCCvmo^ryq&#$~woj)5d!xsc-DA
zt~GKyVu*w!)D*!Iq--_K`R#XL0wBSsNJ)0mRve?LMFJD=iTR$+F+Q5~`-6VpwvX)L
z<i%t#o*W$w#z)VOh9`%3GI)M6K7Vw`cyjz=Xk&X!1`a+vaWFpWJwJ@$R%Yi%ajw|~
zbqE+HQYOzInAbsCMnyEGPNA5KU)VV2H`E`xdYn_vxJnAc^~o;e^H-)C(<mdKyAowg
z-YW7}qB4{7e5hAc8SWKUGnWqmRg(x3b^XG|$uZS8Y??}Fa`pYM3}*CoaDSRSPE3dp
zL4k-vI>#QKO1u6k@x*A7B^KX#OntqTC3A=*ZMV;fJF%3_2T=9~-K8-UW8oPILUZl(
z>6G(zv`o%}qQ;FK6w_JNK>C$HfTQ6&B0)?JBXxJlJE<+dwo{*E_LsIMXW|kn?99lZ
zT$7-uki}YxC*ufdNXOKqGJl~fBwdu&;s-hbyBS7QAX_v0P@IR~UA9VAqb7Zr1e_8(
zoZA5g<9l&Ev`Y%f4z*!~?bVyUATCcf>Q=$-Pt&cbRubc-5`%QX&2x*~L$cOlTl5%Z
zJ)A9ij1C{1+%^O377^TveOzJf>BTmAX%6Ep^QeIo3lDx0f$&XsDSt~go|I<7!t0d5
zkT^07C|O8_iNKR^^-Kab?<5s}VPj}zgxbXs-`fUtnNF!z#qsI*s4~H=JPGMY?^3<Z
zf&@q$M~iu`A!EE|x;}PYnU@tP8pymF$LWNk`Tiu|#N;hgq?&|khUJTQ8=5hX1$z38
zI?`N7e~5QbKw$EzH&8X-%7gm8;9G(N-bV?k+jKYV6)s9(Xmez#Scnr4^h?A;tu*Jd
z>;dv&SrB%xA4<E3kV%VJ5HlqR17TO(6Ef17l<<6qsY@J#T_N{=FhZA2qXZlbQEwmp
z9rX;b6S2Gcmvy5AwttY0bnznS=94J(pD)`V+n;X`7t_Y&O<0y_ka7bS2w7v}7@tb=
zWxs4wCtzNQ!pq#weu@{<@{P^8`%zBjN5QOq<Wdx83}IieKTpN)ePn^e?&<zM`Wrg#
z9X{`UksZ&uYfj%&zAu?DISxTBxgcMj5f5Q>N62mQwhxF$?w6{h1Q&nm^>}XP`@J4|
zhMq#K&GO*3TB`C%rZ0Z^f7?f$|89Rq`=|>wS619d0{0x{R$^XzCGK$G$%wYi7UG&Q
zG{@c&9sTQHym*e^N(%_=p`-s2gd0u=)eoaUV1%Q8{p&yy#41A+m*^aaA@Nc^KZUb@
zxXsx={KL)u;fAw+SYv<of%?9f`vF@JBe#pp_W}lg;<T0L&X%~*QTBWo#hFZyU^k_{
z{3q#jO*s<hQoM&0%+wR?uE5JC4y{ZkBXxhn9#ZH`re|Pi*y|n0TTDxG;{K;o))b_;
zQP~uf{>Kh!Y9cryo|9Po;P61(K1$rAyGzhi^mY<~heRloSqXpqqD&;2%7jQ4#9g9L
zT%FiiV2GlgIFt|^MuEzDeimnNR<EUgp9Qxhu=p$r1qQQ}rUhm;c4HnK_PD8g==W4O
zeMpp|7DzF+0l5kj0VTO7cEUMpiz7pNX`${NreWNHR+(f-y8bX3Kw1i?TYG!0fGof>
z`!(eu3zm?k9Q1!f37w7(dxzSpTvSmz<6HS=ln#VzP^pr~SEY6Rlq9rT3aTWaX#f_U
zJI5-T&!fmYzXDljft*uX81y^JqM%apSR$Jj%;=aoOVH;d>+dL{4oK(^lUj+`UcRg&
zvM(0bmx}6F8tODw<>eK5*_6_X={~iA8&UC>K__NLwlRNYs^D5B3SXtFUb9=`rTbb_
z1+5%6%#);ridn_9($Y$^co3%Oq*pROx5|el(^HvnQF7>N$Y7+0Vr=gY$p~TvknvtO
zXvG<hRA#Jhg3@xipUUFY7iK0JR%IqC%R!V?ahK&_%J<~ByeEYnIcnUGU8dz-rsZat
zmUCH)%M^bVnWL_8h!6X<Krc}rQcC$-YDH#1O(fIUiG|XFFpDe4M)$IZZ*ob@<NOb)
zJ!2#&EEw)rn5A$<WTlcdYm#XzpY1AV&1x7RWDE!jj0e(22dm0gxgG4S@@6RAXPpP~
zS}1ZtDClKr2V?J~=8g;6^+@J$C~iIW&uP$s`O+l<(1~-8r8AZqOz@sbddZSWF`X-A
zPcs@}fIkX~?PI?)3+L_#m*A%a7=L|aS$|*I)j_?k4pw({uzptu(AA>UUPa23HM0B+
z6rsM=%w9zb{QQAZsc^-nDbVEC)Z*ucoKkic+piWV6l<yzvx6wrCqA4uQRxzk^9hvb
z5m#yvQ#wTD*qT=#mKk%b(D-I2%`|v0)V+Iqdb!_!dwPa27Zh!yG=gK7jeomyOg%Zl
z(%!fmjIrIBJHUplk(6+7eB2Ts#D>anU)*MX>{z-dr9nYN4pcexzknydWKKfLr~{Eq
zfsw4RYL7@WTFCmVEjcXpu4PbB$pOloi##ux8H>S3HsB&NF8&$!I(<5@1klQ#M}YE!
zuT8sy07F<I5K>%5t}87=xqrTWfwB+iLQJlfXo!J8ig@h8Y;MLt`jP8e(7dG@vSQIm
zE88tNK8eejw8jzVq9q4*eRdho!7W)@QfT928svMr#{LEur)fkT(k1u44DA=%z7;us
z996M12Vt0YP~X%3>uq%?yGoe~75Ty*z3BCNZPouD&%c)bYajGI>3^W!1`9(egOS#T
zj>ktwL)~$~z|ecxl41?S$rodR;3QJ(jA)^FTKiM(?V&3+&qj9R2gs$j1pOO(4!K8X
z@NtfpXoeRAVJ$C*d{4@eQAUKqbJ(xs9>gj#5}1OWi8JSgWU73dwXu*KOd=h9%EN$q
z(|vRbt}Mrg7V&H*@PF+&olGdPUK7`yV=u`!+-aq~?GqKNU|vV)hWW(f+(pg|>Y&5k
zi(@qSJL)=Q(e)zNMZc@IZq{1(Fd)QOc&)(i$_!(Qis*9gTF%UZF0`E4rT9M#`#*Ni
zmwRrhM?z|2OUoB{7evFkHCB1zc=z28*RQTR;eA-Ujb5+UJAXbrg#Y(?z3l&w2PcRB
z(LX%t4UY~7{gcE0=nV!(CrAH*dJj5s^+Y_x!GH8NZYw*uKge^P1U9l_I}(jAXPBcg
z0aYI;4v5ofwLX2a5S{2do1?Z4@zzEi8631z5@#5F{@nVWgxW`52k=2ZzJG(p%Q&xi
z2=+iq&BRA>i+@i&7NV!X-Bz^}$N7PfN&EYvRZtTPto-`=`tswuAI@KWy!_$)^~+D6
z>O&H6L{EszNfpd*o(e>1hc23uFuq_dD+!zO=@X)!?M4nk?bO^SVIbP5gFb(*C~0(e
z61grI!^t|9#iG!ULi7t~o{z)X%l4-Z_lYf|cYWyn9Dfh&b9-M7$#eAR)}3cwFws|Q
z&NQ!_>Z?D{T=z@oIvx@X=Hl{YJ3SUDeJ+GgLo$bDlvWI#n3)yLsUM%)QiKbk9@_t;
zoQ68{>^GlOlb=W5d`j=#&mcFI4x7>_z&ND~iedgc?E<*G2=G-y$XA_qvg|1oV+MV#
zg=Q{7pnu$?N*zteomT9}j7*v`ySUV>Z4$%!-z)->>JE(UwYhP`O<eWlE7^Z{)Di7M
zSD%zjV$AEe(F0-XcvI_OIoVwedYkp8$FjJRe4}Dp;Fr~~B$$JIUAWsk8|tTwfQyUA
zf~}XvMOl4LQ&E24WJ<xkm=&E{{SF7tnlsb><{y)u@6T<?0D_FC;OzGYC!JoW*XfT$
zv5GUPPohLtt(T6h1RF4CAB|ojPUZ^|oUyr&1A^Lrf7x%N&Y2)JJEy*{GNl7zG}Egm
zGP5M_c}u%zsIIh^*{lR2f3ame?&8}`6#{vhhMc+r#7!|Wdn3E@S*P<zs!MU)>So?6
z$rEgn!Zx)Hc1xS?%oq<x=<e>Wqr;WiY#tl;z{W95eZ=PGS<glB@>=H025vU>8EMJj
zDDyh!xne%4HN1-BAY~sgODK4cRGelbQmQ$E5$Y<DDlpDm*|$*+f7(yY={sUcuHRgV
z_wsg7Vz>AbNp>JYp_`f1R7}~j`Awus@o25k<*n95+;mB!2MD7p<sp{H&)^Um*2dU#
z&@EZYI5J?HJSJM=;fz|D<7ON#3A*}hK~GW9`ARB;F7MbuI6{AuA_k<z8KReekBflX
zHCyDCEJX<^s!kt3RMGO6=AHfwPjmkN<BYgI33w;;-Fj_Q^Z$cE|L7>g{|^t32Rr`%
zF`iGKy3f#p&PUQ7jJiaewwD53V0%VJ=vfz-vF@|ht9xI^>xSD!U-@u{x0g<?1R#Gr
zgg@#0Dw<5_J!)GCFmbhszhy7aq;f{uH$p!}RK0U>C(j!#9NXB~wry);+qRuaHp#~J
z#`eaxwXw0AjW@ROx%vL;y;b-9bEdmzrmAbYpXWTM&nd^j7$Rfrk$^%ccr>)D)QSh2
zq^^AdzaNCR1L3rN#I!9^BmoRH(Lu0_@M4QCpsu(LlFicugfR{p$7mp~9uXdz^soTe
zvHTu0X|6DUb^}f5$mXj9BQ4j=A=EpCblGIa`A;YU**>>H45JbGFhsw!`!SzV&#VQA
z7HY*gmzOaf*2ej%m#*o5*1x#rXl+MHFYHeo_fV|bR1khRv`r|{y>?yQ(W8z<H43I9
zw`Hi*K@kIbYoZOTe5r|#L!7Jh=dm55V)B`-!{o8nU+1;<zJ<LobI3Dn-E*CcEQ>!l
z3wp0s;a@g3FMGnjf+g`!C(Ev;rmr$oN0}8Vb(lVsD@Q^fs7%tQuhv_KoY*`gO(okZ
zxTsQ?6EO2@3$KQY2FVcL6YhrF1jiaaJi9XxTuK3BzVq{j^?T#_mqv!b+r#ef=do(-
zOOP)(dboBRCEo2x<Fjgvblpeb{q^13`AC=6ce>R48KXYXPQ>Y58~fDLq@t=0Y^|i~
zb_%alJX0K$R;~nXs<5qHI)Y2h+k$lC3Vmu0O9tG8wx>R{cjfY{JFOlc%(c9@AOrCh
zC<M6p@`cSm7ikGh7rthPs3}>VP14F3uR)F0oT;NCKOOE6Y3D3x{@5m<cue~XYAD>z
ziWKoX7daedVX80AQEqyFuiE3~X}xe>??6<u`W0Ho=iD#ORnQG3CsK6|8NsnXWq%W<
zIdI1RYO2P7x5R^z)h(|_(!*K4OtnTPHVst9ktJjC_8hY#YogHi4AVtce}P1ra^;OV
zV5c97$F>I91tMaNh`(q~A|ohi=F9|o<H^K4>3>~&>v?S}$rg2bCxW;g#fJ;MUXV79
z>X9j5cHtQ2qu+C6wMzP%F3%l`zmqlt6E>7ZJ@Vr$o-<Q{aAu)PGSH`d{Lv!YV+1(1
zx8{ILz5HP|67{JsvJifT!Y(lHK(FGbkma}}e0|Gzn|i-r6_r*>S%K$zL?oO-o}-#3
zFUQ_QRPr-)S50s4Mw)A$4gP1%88K~tPNzkoRLnP%am{C<cl?G#i^vK=EE3ql5$a?u
z_2ddSDrImmy!Xk5QH6EPX^V<`21<Z(1b;kfN^TN8N)Eg^T6)fifNPag;96^^K(H1|
zr}BZmqGs9X_*uoT?xstK=AEtuc3I3+8)dm!JW!jOMHc6j7Sn)X#bwyKZT=u9<Rq(j
zbx94Tm%G+s6{1nNG8K{iwMF%72k#=P4DUg<UPh{&@aZ~f0Ke9<b`M5Ye;06C_jQ?k
z)v(&Zn%Ma~nKst=J=${cFlZfn%ImODi}95ICaqR&gCl6_9}{Fi6Wz?8NnO~oyR=xw
z%0n1MxG=ZttYXUo`XYe?HT{~@S>*Dn!%`#N>XUdLY9r*9KW7<AAeb=Gg-|Y&j0M;u
zOO&eV@a3!vP7IyZ8hz?!Cp{pr<u5;EL)2Agw;dC>7geSj{KF)jp|QLn>|AH^3BK9(
z?y-UT-7E2+x~>0E@H05{-R0sX<d<jCj`m;tgV<+pIZXyKp|Xyb-E4a0fX)3zg}c>P
z1sMbOXwCBgWr^vQGD~U4D7I>kfC|M6iQTBlZawGndVY%nmI=NZ&2^v<$tzNV(^^n+
zhmlkgz{)s?rT5H_@vYDdfNuXrL*HO87_LEA*#TjHwH0>HADW_sT2}M*lR#=qZkJ_p
zQsh<mpcwsY#N{bg>SyREl-yM$w2gE*2gXuX3*zDy^Fw@<inREIl3HW!TtK*6>G%>e
zIGQo$#==(s7kd)bE);kts+0(*c+qCINn}1^r_h<7o38P5>)z;7B|IOtQ&|dGqmf61
zV9{h{EEQoD{~GwgXlHFqdmH#H*Wn)Yv4!2oHRnT1ajkU*?qgj+BMf|q?5e*p;04fQ
z=@!w<AD1_G6o>y}wAJgf#P!#UoLwSGudUW7)t$1NbrTVdPzStL<)&s0pi(S=)RnJ^
z&!0GN!)-%=<M(~p4Os+D$mudNE^+#Cp_0}vJXDFmXSho>{W}E$f%Ckrrtj}0q-8LN
zK=nK5duYx3cKz!1I!I_#eTIA7a>ZK`$4IX;G6|~ltu?jV979U9+!XT;9;}5?cUb=H
zyjIHKAJs7V6OekV%s?jElGXezXJ@8ai#Z?YGzc=91bHLuzk5J@|6Z*r)tQgY%sZ+w
zY0bl2BOY!+Ls}dkpj*hVTbO-XqO)`I=O5G)>L!5#k9vvcyuL!E8`FtKJ4_mFtpI*>
zVLY^P0*1_}I0ExC3bvLGgJq7C<lePy^}5>tBW2X8A}}vy6t3rBMLmQ?mF|=5XMa+b
zPULCx+Ubv$Ar3pfUQkzf&U4}1nNq}nJx=YmE1V6^$bIa-@33_=UU|~wE9iKba+U?<
zJTP3*^bAL-G5gOCUJEK?SMxVLmXh_4$oq;BiO4`Gb@R$aZ%h}*U(C39qyb}uSrtP=
z7vaVlP8r)RpG9IOKEO(ZahJ1_zh`qw)l~#R1BMZ9YA4edU;evR0T26D<|Ns6vZZ5W
zn}x1_>)}(7lF$)yOVrqeh=t-j?EQe-K}IwR*0+k~_Fr(&W(BLUW0=*LQc>?33sz#&
z0Wk{$pjGVq0khKInsKd<i#>_YAxth_hU?g1n%-B3aSy<`nm*<Jg@k=~SZH7LS58vM
zRu!|Nd>dYK)yz(3D(?B(tqF{ihuZCELCw|AQh7GB@}-ODpC&jniSo)nD%cJ6wC2!_
zDy9nHlnAef>5QmzJnSlq|13@S_$Qlxt_OZsa?E}r>!eb^n@yK0M7WF7AuSbLc*S<d
z_7(g>AcqR9msiO-{=5}%i)v$$nluy47ZzJ>G$mNbA7)l{iLSL|zo}uF#(U?=JA4CT
zwYU({*E5;YOwi26$~SceKqU8m@0=i!v-<?^Yk>HmlG<fb?)wH$`y@4<_Ai?+_(M_d
zd=Mo<SOj=3yGj}}bXj%RV5+DM{Yi2xj)o||_GSU4Pb&$`FU=2$70By~W{deINz>R%
z?7vIZUyVkoRg&NfAek0D{n8qYzBlry+332B*QREBo?oFc5m|_ec0&ZC+0QoCtPsB#
zl|zh}$;ZB_E%1_Bu+kkn$Zh=5RaEc6V-s~|XEM7E&fE&%#^`%((Nk87<1VzmXI`mP
z6~G6OUW9hEQ6gsjdvu-u>^Uxqf3dvHbTU_vW6;7rUmhiDsmR4D;cgD}`Vl4_M{3)9
z27_3(rmp%Civ~vrXV-N+bW({)UK}Zz<5KxT)D(`_$LcOGL2WI1P#sv30vFSpOJP%;
z2}j^0tUe66$gil>Aa9u{<|N;s)UqbNc_<A0o3Cw_Od)tdk9UbPa_~x3*NsM;y}eD@
z;~(pQKQaoSz`r({Oq=!$Ilv0_oj#VPp)0oa5QKBXw8vXb<j}jGYXvV>2V{ip?1_5o
zSH%WK&(79rei!G}UIBge4ba>}hS>fhCd_iU1K4ldCO)ZAAb!F-6z^+e;salm4^-em
z(xCJ!yh@DombS18d=Eqj$Q5fwr+_sdom@$k*^Q^y`eKDH!yv4^^`Qq7dxK&hc392S
z9d&p+Nd&oG0wrK{Xg~C+uy?;uhdrTe5^9dPGFCf1wSplc74iu>sy`CaH(?s8q`rG3
z)Wf{I_gi)^`Na<00jua%YBO$i9~ZE-=FhCqmYPgL&lnPKYCXbTG}?p1Q~qn_*YCoc
zciZBMcBLXcl~DPE%VaMlM2y%tdUcFZV5-JOx6<X$r(b(Vi2w_DpzQHTb&c+b@Eaco
zF7%$<N=`n;$G){WR8-V%1PwaPiGC9_CkEkY2(+dQB@qp5iU)^+;FmO`TS4F>=Qr^P
z5M*oc$|XD+E>xB$(PJ9|<~?LR^1dy?cVT$}+NlTLVEaIA3ObI~HPExh2Ol6Urwbyy
zt0QvAOoh}p$?aHd0*ZJ?yM=K5HJE5@?Yl^nd^`TY<>d6GH79%dU-TFKOt-);%i=Z;
za|-qoX#eSocM3$5e|83t00+-|yC61)cHC7EDuHw4)>Q5xPm)$0AmeaOZ4;duhf)`k
z0>bA>&=9xrVmaXQ@$)U@rn~GOC2YA@8u=+Q^xhiQ8lg0z%t^)@3-OKj-r<{5zWdVU
z9V}DW;GE`hwK5GEd~Y%F0mp8vN?qCy$GEJ6fbwEbk#RPgvdY9;AZLa)){LjaW3->1
zq~k|oil)C&I}f`2<t*33KX(hC=h_D4wkB<chtpdJJoCGbR7k}#{%lfC+j3HG8^@`6
zyS1zjYrk9tD!fP9{Asqn9=Dd$v%EDS7VK@~JPuzkB%C?Vm35c)rP<X(AKk_dc8<D*
zH0~|<1>d!V)AEo#z~qO5NK&?^%Ry|d#j5rskwe+S)W#gcv|(pP)N^2~&(8`CABEyo
z<aM}bH0PvTg^mPuqKW-kFwB`t2=3XV-@&Ae4Z>Z2v+vLp4~9Y-tXnl4U+-U8`|G-)
zl~JoZU<AQaO@coPMva_Hnr01Zy2sgcL^M$bH*L<)$Ff{yffeNj^BXH<PFzh<s68Az
z!u!xiqB19}f3=wjCQWRof8GY~GgI8YCK+;U|CHk_1*_}5`|&7f!3^IxoOkUu9h7ZC
zQnXnr<F>e`gVgH>mr&H<1NNMNCsdREc4Wc(YYO--@H}fSDDbQthZca!1oCw;>{o(l
zP62bgCOxAR1q9&dlpr){!M`<}L5U_XfK4iOVrAH%UY}1W;43&3n6C&T4Ah@d`K$|f
z>x?=0lXvJzu`WHNYA;8BF`?n~`&y{_z#ODfIA1kN?3$yGgP+DzkBNUCCJpEo&Zi%U
z&>MGkJ2q1t(}NO>M65yXYnv0F>$I=rvofXzMVsm<U==h4LAeZfU&c2y?``#J9KLuu
zvvgOD_DBjPjCVqucJl@NQBl4?g$?#ORZp&I?7K$EvBNlam(fcUY%PLENl?#%2;3Wb
z*ZPGZ<;TKo`X!M6>I+KJd<0!z%W;3q)^BhA1|?iqyowO~1v$UZ{FNPfWKoPN_~=WB
zhNMad1p0*9%c6e0yR5GzFe#JE)@&HwjZqH&;2l3Gd_v?)15>B?S(M3i9IQm)t}Dim
zwOheRIXP7KUh}S9jO`(gYaP~n<~-`-<LjCi<m&319#jZ7w_l1hOk%w0x}|f!Y3lul
z2qkB63h^E$zMl_yNtw<<L*y;^UHlA9%VV$<*hC6IAkT=M+l-93q`1^bMnUtNyYkCb
zcMf}LNVSN+l==7c&&CI80w#KKw4z>2&M2>FMFWDw&?)BkZqj9!g;F<KS6SUvnak8I
z^sy!4cpW-&q&qPyh%v>LW&&Y$g5X5z(W<;aqWsTIp`mVD0H_>Nq{2E4bTrR;3R)Kc
z2rr&MGQJ<}4<uY~A|&KjL-GC~ia+Da*W?@LU+Ciz$m*uk=1EeaUq}*Dg23MLV<_s?
zJ_LS^0_XXJmsg--LBQ_~BpMIuvj2<fi(G@lVuC|!^7tl~&$JDigb+W-)}rjE|8Vx<
z9X|mQyl%F~KHv2S1WZ}8{<|pJHU#dvVrnj$u;22Pr&5!_fA)hSB4~7<jY0L^jYFUF
z#@U#|rRH-+XAyda_eH=WdJs?ZI20w3h=z3)!X?!NF}I|<CBn+|->qs}wloz=lP?b`
zCI;FpwV}hN83_Wy?@$0Zt@1cY<mdboFSqUMJ&Ov*Ic>{rE2HT$7v}k94Rn_-f0CVD
z3Mv(-Lr+$b_wu5VqDcw+;z#TFWrPNVbhulo!BZxl$a>zOT0k-0pqRG#Mf}IbAlu5x
zO&1ZOF5-h5=m5o@SB+HMPYSBDqL>EF>W75Eu)XnsenIaYG{v(eywY#35(-n=$YVa)
zv&QDqhiYSr&VFW9LN7)XAboc;M^>kI1`lr37&9QbvQd^Z{6>5lhtD5$a`&QnvYe1{
zbXc83h@Un8ra5z;8X+Bslih3{kyNrP@b$OX8HF^_&8Ks&F0|j6pj^P{+@BO^D(`i?
zNEzp@RG&i0%;IL-0QMry>|&?%h!#tt&PJA|6`GjehId`Z9ZuiG0C9dAMufDzGAG*i
z)(<yqiOqhC9@ZUOJCxN2jPX!rR>!S^Q=~BK^`P=??h6kX8_xt#n1Pi0OCRfq#6i=y
z4-#V31omeTYDCvle!{H<3hDTuW>xoWzP^-IpbAtY&8p(51Kk3R>8Du>@zx$KwgnKD
zN7<iGDr}x~TEHd-?61Og(OUeI)1^?JTV#!t#W{0&5D>NJ-zOIGtRT85_A2km=j)e}
zgNrM4WZN9(9`C0AaSl$`j3m_h^NWyD^30z0uzP@X53BDUTLfiaz~NQSmtK>JNp4BE
zA^nNv(R&yb5)S;pj2p>PpgbTNF~W}H3-3~OiuNFtP6~Q8kX@ZVS_Z45N1B$<bFGJ$
z67HsppZqcc^|crBoP9BBN!Vdy%%>V_!-BK*I#KRg3(t3Hn|LHvLTu5N-JQWPBO!$`
zQrlrN8KEGvebL$0!H{^DmEJ+eQgK~PJ+Z<++x=L@sR<fBona#(DNDaK0b!F-5GmoS
zg_9&``4?^@AP-s<nOp#5Xx?+*9#!+$A(ZEXm18D~BgRLsX~<KEDHuk+mr=<jSJnV#
z++hPVW&5*lH6frq3d<3Xo^T>->3Ru>KY}3O(js#jv_^pB{r34!YC`ZHwHPe8Eygsh
zA=_?dcB|DT-QAoHyrdIdCr*#Z)i0^)tolJ6x~2i797Z`7xS?Eg=jk(jB=xVBcrZG?
z9|>+BB4c9$uXQrMld~d>$Jp@RvITq?!5#ikoQa0ThwUbxvboKOZy)zf(V$Zz>kH7p
z^@NM}2g$)i4ruNHlnmQLh#Z}p+k{X_(#)+dv>2!8qG<D)UHoNRN|~bv)e#WkGCiHc
z?gEYyt{vb(GBd5$AZF0#r{fLd@Cm%-!_av>z&wfQ2gW>!xDmsAc0d7vEc4F)g6xpz
z5Z**^E#CWJ#@>f=L660P0+MxNlhZj<s;VT*N8k?M&J@m#c?O^PZIVWWPF^XS)rJ@v
zPJ;2Z8^!&CHn4APBWVvLslUy`{JwAk$bs6H3tc<}4=n^2UU-t?DO+1r-}2mbDwHdO
zheY>PH>-4(KMv*Y2LjBCRB%b*y&Y6jkax&FZw2#HH<(F2!jbfNoe-TrgK?P&1?={c
z^5QN4*c857UU;4k5Uh+$#QWAe5YXKPBH2@={r;xs5d_T@ym3@NsZHqsX>UVg^j@L(
ztZVRruRP$WWD>`S85NjMQ%1@*E<zG=4ej(G&l7!roYk2DI}AkvR8y<}U@!^?N14zl
z9g*wPr$Uy6tnfn3QNI)#m~jhVR4L1>(NDwp`3<Wosd!pvYQsYm&%gx%tf(LrO;&Hp
z2RSe+zzGj&0VzhqB)KZgkwNQB(UL$@6CoS4B&eUWcg+#HfT{duHxeRS<&>Od`MIy1
zsQsGu5F4FRQ`KezVgv6!W%sYuCa&+Yv76AfYf{2zu6<f=tqlrF#uD=Q>Y`yc1?x<R
zrD5W*9=}6VMeNh3c$bg=Hk~-16ZBt?74e*LZq22J<<oDQiTZh><Rl7LscpMe#oG7Q
z3h|87|FydVdL{$<M%Gvutn<c=7SHrKP?hZi4`tl4-+{ahKXFGI(p~kg!$CxAaPq#L
zzTATCtzG)1yQVWkXaou$sLJ<kq#v?)K6E(_TT|Ga{$=#$2koX@l|hxmK!~y5Rbv7p
z3YJ=E-ROH3jgeGqrL>EjKES^0So;+<>!tnvS7MqXpqWKiO0uobKlXF#jB#Vp5ODvv
zzIm_a5y{EJx%Ut2L`UspZfe-{Jl1*R(MA)<spV(>tZuN#9YU4>!(m}DNdR8G>*3!l
zW38MXti)Q+=~Bd9^clpL^p|D~woH@Om9Aiuh;$E@cSk7@doaG&oV8dcg2jTyH%8Yv
zD#XD?j%3!PERN(V#|5;G<e+|WD-Q3lpR>#y+e=u0x_CX}ns1%?`#%hXBmVtfe6+6_
zUs6y1GFtX9|3*g!S|@VCz*~IR;i_!W40Z4LmA_-L3?Q)Hua@nIPVHr-A@OB5^b7<e
z?BY3D+bqM<G`~mRb3E1?)lUU~{ntY|I4PpXww_MNWf`O+#5FQ@<BFp1x;Y*H_1;5f
zhC->W`C;9m6A%RHmFwT{*|PC4-<Pb)m#s&okbqCpQAm6M@OUYI8pjczM;jc$cl8e?
zndzWL19roQsUT9AQpRa2O<7`5ELnzc8k~y{ER1KU3JB%2W7(<lEoLD`5fWDoVkMLN
z4Ry<^`+=M>l=4chj97E%OzeA}?i2bpRj0vUK}mBLW%mVHV&m)K<mt?26VS7%OLUF9
zB|7#fR=-a()W$v?)cN|7s{TasGs#GXTU<%w9cv$DJCl}&y5^6N7r(F%IgIc_4B<Z=
z4;B}K--FNLDz?<?)$1+QS~aCsc30YPae-&$$+8!VQCTXfQx}4hm);c*Xlu9{V7nd1
zew#kC)c?LE?pV44<0-AL09Ja{V92aXPogFuEb5p_SoSW>4>bQ!&}_$P>Yv)LuAJ=R
z+C2QhrPg1G^uw0OAV;ey(~+S<yGt>FuOssZT$Z!80U8}xHtnML;mLTDoJ?#+wctwZ
zNwx>1GBt!PfwgF#uBCSogA+Hru=~1)?*XFPL9DMJ600IQZmHBsMT`Q&sygu)xNDp!
z!|9l%7%k<10WebhD%{WAK?x3hZ<2N(Ygy{o2GSnPl8ZzY_bI`+6h>;YD(H6;Ry?{T
zDpa;Nu=Ug>sivmEgp@s%roT@^ZfC(y=9{fba+0eQuS0qeK{z1m|2J-qJrmgW?69)i
zqjhD-US{bRd-J=?u>@qt9~}J^3OfdaMd9B~eC{5@Jz#)SpCjF)-^f^L9kd=+ps*9U
z1hu@!bb2cXw2RJXuLGFdmQ#G!RmlC?>p;H6Z68v61dRabbE^?vt_Q_y`^LchW&4#2
z{WJsdCdSw=LN!pNP{BnQ9=o|#`lmU1u$u~H2JJiewV~af+N55f2qvYIQ!DX2Z|>!<
z1%_Bez{~15{AMm!_hp7L&^o=BLt#6s^t0*w|K7>-`|KgmboY7P*|Yh-HhYJZTwTBQ
zMDPFG@c#@I`9=HL-#+U7v$4g>=D#Pp8ktvq-ZMV>Z)VSbE&Tt60qOB-v;Q0a(_S!7
z_eJ_)n}eio^8JIP`W8TXjaYwEj-Zk0dQ(og36Q_(6REX@>NQ?X=S~ysT`J(Vr$t$k
z{<~umwE?qqVKz6@i<^Rmy7ABU2<g@5t0BJHpg?&B4g&6H0xk#(?WAh^{o@Dp9nS!D
zd&Vz5%@NteMmeBvx9XSbYHO2`sc~0Ri193pFt<34f=^s19lSY36uAu4weV4F@SK$p
zZ1s`dri=S5?uce!z;;EDn!$1g{S@^pcUYyL!Xcy12d-Mi2aNwiG8Fgq;2Qmu_|5_i
z#huah6szVB-<8$6A`I|!D{!y?HxUI|X^Cr`Zc^|(j6EPF=i4`q1qTP~3=t=5lU9;I
z=;DPt3$@C>Dk$8UEo@mk(91Uv@Aevyuo{c_T}P+>+(jS_^vw~${Cgo^tpgC@;X6pl
z@15xV5mz}pU6Yx4t=4`EH^u9l&8CD1`abKWT%^x_D3x3Qjlg(Kd^)AWCrjcxE5ADh
zaq?dwcX&W0w~}XDZMN_amTEl2jlCq~Zi$VAvb-2{a%UilhvJ#4k7@H``2$@|m&V3&
z@eYE0NKkxOICH5|fS)vNn}#8xaDs{e68QqRGlXI>Rjv(Z$^NSd=2R2;F{MTd_c$db
z`0Nqe>%!56y)XA5sDHfn3s}uA2o-h+=|kk?(F=I)BR*hz0%7O)K|YIuD;UEF(xtl`
zXnzZJ55fhBpXK^LNpwXF(Yu(B^0?yG!Dvl|3l8-FRk6y6>tc>R=;|<Q_tx#(EB1+!
z)jCv@%*MfMMm47SPmJ67_ibW!JkP(d4K~AZl1)N>PcEj@F@UedcA#|KmgLno26ftK
z?E~N!7isql`$Syy<>5q{5tx(8^{4R-wH}8r8N<YwUw_k*t~Lc<;khqYG&v)`elIj?
zX+G`yXc@#PssUY-e+SQ18u(^&Q177%KQzpL>~Rk7a>iJ1jcHvXML>o)&h<)GpnhW7
z_5h)=QbWyE7^L?zc&<k0rAn|l4T=g~BtYUtLx_#dr`o|PuiTnCd-b7C7XLHYrStj)
z>pbEn?xOkeSRBL+dX?+z+XImtRMrzF$1oVGDjwJ?et*l=1!P7YRWnGYKkKvSynl5|
zodkojnhYW10>icS;=bE=Wjbyjn&<Y`-h5#=v!qb2=Z{Id+14$dh~-JuJn_~jmrLI0
z&HsS17?OVMn<b36A-#bHc;a(xU8$cwF#(s%4p2nTz=YDrE$wVM@7AwH3_O)W%P~$#
zWrBaL(9pye#UCHN4rRaCOA3J6_k~e4v6a{_^k;JWipz#~o1@$27zjV#=xA=k{|X-p
zqrlmL-Yxq${(1Xp)x|BqP=g{zB||PNKm^=WpZ{Y5>PVXlt=G~l^XQJmC@&*lhx<t`
zGppwaU$V@_G14uNXenm8l(+XvB2+Wg_V{Rit%OuUzGA$f!tN@sq?I8s1BDEXjn;u2
zyg;xHN`rV&K4={!OHd|hAE13odyuc2k4NKwfhF6y$f=9q>+(o4(Y3IfT&Gq`(qWD-
zr$tEnv*Q;u>i*fCvYFGA$;lG}-sPyJgRZP!JwNDv#r{@+)xOn&wyK6aRG%~qthK*G
z-1xzrCw|7OvGr>$P+h*F1{H9)cie6t65B-=K-SqGTEZXTncS*iH^Kn3YW~A&iNkKr
z&_~8I1lrpE_70lgF;xO>pFVm$f!K)8dDBgUK2|P~;(uHTL#I}t!*Nnb1|b-kkNjau
zjabSyauZ2-SR~XRbSl-i4ZC!&k(=3#!qorU6px~{2F~OJvuC<$=?x5bAgzUULJiu*
ztGw#I&JJFTBp(GcS16PX;}ybt@!3|o2;dwY<KSdiALC3L<cMfO4{%MbprDm(kCt6?
z88-7|$X^yVV&ulw&tv@3Dvb1tzjVKJFZ+%CrgfdeiLXzMWibDDL8?`V|5k?LIG`$_
ztY2ucc4OD~_qHCk-2)I<N+`k=Z8raQa$SRQtQ}iZW#<&z(gNmB`x!jtCS#0@y;25k
z)|*P;)JKq83m})jB)UztVgMHZFZ3h*s$8AFu-uAmPaj0)C7bg_9P^`xlvai<kXPK9
zg19%KTfNdUG-*tnmMb}^W;>XSkc0?1K~FBT1bB=M-&W1IqC%Yz6k7`kexaZdGj+er
zq@h1?(?7#W2-v1_-wj`T7cR@^i9lSvE$!_xawX`BqEWi0qA-t5)2zWs`<h*!5BrNJ
zind2UX}fzqmqJN3#JldNNRa>a#oOL;^&_Y|_!FLA+3I-EPSY%jE7D7raJj#%PAETe
z&KR15Vq$dsvh|xCvQs-}yRU%MmEwcNgn51I<Fy{hX#w$_kPu%y^^N(k!*bx7cbR7p
z&O_l-A#=Mi&F5gf1`or%E_H*ARC@^=WZ4Bo?Tlx;ihXOi_C&aol*rJZha$)P;jIKs
zv|*;t$I;qYwhZxe{ed_maUO~S7?X97o>Rx`=wg%~w`D!3$c0$>BjZ?blZyS4ZdJ@s
zh@%+oAgsXPP-^JHv3bZ{kB3Nz?Pn*2WAM#$@ueE;b(qSI4o{TqYnHdGQzXDJiZOfm
z<u%_{$qaN@p3Epa@ti<LFR9i7g>t~HpJ>ui1Y#R>onjT+X{6!!(eX41gr{}9(-#KF
zM%~^nd-`_#6tNyHG!aCX)m(-=rlxwEm>soIc?<Bta4qW9{O$G~ic5>8guCL*Z=q5-
z3vFDg)ZWlv#QJi&kCg8{!k@bgG`3*b6^*P@3L+sSwtNSndOrXOw+{Iq+QM%F+$N6P
z!5xxP%nKQ^Bl~S0SQLMO9{k57nZM<gYbXamHo^(~V!c|ZAs(EEx<oijpzO!+tn`zy
zTL=S{D8m(S`P81D1|rNmy8|WMSX}jSbPa>&9k~FpJC=IOedKQ2onlRSBGxb=^8CVC
z<*CkoOvG3?PCg&t$NEc<i2iL*m>T(@kG~ZepA*U_h<`ByG6w{gzwFzER6`h^l3x?s
zsI74J)`{||Foe6aTk*#+;?et~n}64U@QLgsrg=eL*ThwErZ=x5um$?$H|2%4+?LuK
zl|1_wTF|XydAL0z)8=s$ZiuY4^|81IximCFlGDoi`2M!WT6($Cl~aG{c6rl*;epFf
z3n%(NkByY-IRbklRbeHX^;M4Y_FglVYtLW0)|ygu<@>6IG<{XFy^j$jjV}jUNw@iK
z?H98c9W756=_M`>_yOwB##*)xw*G)^`S&O{G*yBH&~9Qkn`oao3V2huml>FfUYXYs
zL!m=Z{ZB~2ES1f#3x-dXUVs94-Kw&ZXtu|XNsnY-U7*Vux_{+#Io5<HCwDqBuzFQI
z%j!^M>B10xE&!Fs^+E&O(k>zOWqXIuGvg3O?(@5P1uO2UjRy+xtEu|3ciAA-m}np=
zmK%Luk!eibuw+=sEal`ZI+ldCR$4Y*?<cb(L>{aRge;Q-0*Sr{nF&$S<>=y`7?f+8
zV!ClqQ`DMDo%>lts0z1=GDfG6nyc{ef1aD8CYoGkw~;*;(DLX#$(UV&q67Mz?}qK8
z+ZXB)pfR|ZB5nyXaLx^S*H;b{ADMxxY5gXJXFKEbhl7L;;F+6;wXQAHeluJ|I_N4n
zn1##h6w>op-FM|Q`k2Q`5uA4Rs1M?+AGw;o83QY#*F&fO2<rh5yMM^=D377=&-5|+
zV!_XUB(p{FAsVddyeBza7x1qufppW5-KZ*Z=1gyY*KJPGPXgK3mEZ4*5I(%}J%j4o
zQa~b;>f6~rLjr=hRN~;c;kMMFt8zHr{q}FxKX{U6GnN8r`FiXw$VTqg(QDIttnE3m
zd$d>Ts4OSM*F>+3pzVmjU7bQ}n7oXUZTC<d75^D^B{_aQZY>#T0d~G1F00*LA|&j4
zC~fk)%6XPAffnbrR`*V)_?I;Jbt2j9WZ`2@vE>nYOnRGYZN%Hq7Y$)b5^4X;4|J73
zH(|dRA0!*4e2}2P(D=Rp)}Tk)S$=f7PhYkD0p}2!3fQ~T9h6>Sb7_XW!HANFsa0F9
z-^NC5bg(LzYD_2f0O1OZftXOiDO%G(;_4CBkNzz)nzm7)nt20kYPy0sG4&$nDJ<+D
zA6`b%g6U*zFQgU+TzuPHujYN@Pi52hwn=b{@ON*(B{c@*8qhuk`ixCh&id}-no-i)
ziTp2e@g6hS_JWX3&tJ;cPW4RcoPBzr{ZAdUbe)|HdkR&7`_K(Fkx2OaR>tx+OV)Qd
zuZ2yngg>pCcV4lDZKjYtmB+W-OnH6u5=YbL**u)~f7X8ZS`Qn{VtBl^jvLQpJ}GRV
zIS+U|Rkz{>fpu-O*tES$O?$SPmUeN>ykm@ZWUuc#&0~36hrD{~{B^SO>5}r_%*{H#
zpbKgx1C6i)|I{mSeKg<NJ|<kXKq9zE|H1q|!UycN6;hf>-IL!2EK581b=LCvSm*E?
zW?NH^Ih!aIktyk`w4=gYu^Kxnl8koky%ZMUr5mppP6`c8+Uic%VLr5vaaTt^>j6E2
zA0itgARx6|50r5auIpI*qIDk5&h$5WDOa10HUUWQ<XC+6RQJ{jdA_4j{+)&QYE>zq
z4PL!s!F_qQ(w!Jhx-vme9Ko>)BjFi)drSTPSG%L%X((>;9PD*pTyuuC>VDu?X8C$=
ziNfd<Izniq2Hf-s4>sD`+EO;YA|A`CJ{P84qunfn&w+GqdfhgTr_iHq5BR=*1+nxV
z*&8r8TAz-Q{;}-RH6n^s9izyPy*I%?<v0FU=iRS|Z(4#y4ex;MRa4%CeXLNZI+v^n
z;+7|mhz^+}q4b&B(Xk0$gR4jhWlS?N$wcc9F3<W#a_L@bP7sZL)hlN?NOK(9KK5LH
zmoHr+AcN_s!~m?B{^RtDmjDE^m=oEU2LTD!7IRU0Th0d?>1x+&kG|r~`C|fqT}MQ+
za&;IXCu9GC2hy`MIj+iHDC|w28B_=EHPkzlxni+9nTvfdaX*F{_OARi>Xpx$tonr)
z(_NDr16E&PM$%g*XfbeuoV&<bYoJk($Ti+f-^5_}KlE`EsnXbw#2P-*4sAIWn9T9J
zg!f9<9=6I;=OfE1Iw9AV)pbPJJFCU7oXuJ6?l_YlEytg<OXiEiS`kH>#gw%tjW~oW
zf{+uOO_z&vKe)4gE)id8Z`L#AVb7hbpjgEl|M0`>_=$Ar>_ProYJ<9O$8(t4Sd2i6
zXwwc=JrNt@_n^LvP8Ysd!y`ux)Nve!@BeY}IXXtYSCajrm#c1e%6UC1*Pz8fj>Oa3
zc;5E{*8lS3Rm~BxRsp9y%XI*XvD8fPQJhWUW-;{!P1s|^8Cg)PCSiCJP5D3o{7<3!
z;7AFG<eKgSdvzR%>XH3VK6F{6l*IXy>-w2(4QcG|TXbcsD=U{)O+2;~Ak>bb_K3&d
z;<y{}FP)K(kvv8mik0tE!B|W7GLkjpa=yt4oRVK`Uwa5!ym6<GBE#p^Ced+IJUxx0
zn^mh{mRQ^1z*1}h6phX3qpS1tAMZ->^zLmMU(WGVnTSn0nUQbIuR(NYRY(QOv}*j>
zxb6QziY$=a)Wu8PGlRe!C@<_d1MZnOCr(8h9}|@Ro{7zO=#qu^MqvcyFAb&V7Z@0r
z^&%;RuXdJ)iL*-Pq856Lr7^>Oo)Qe<<p{&4$%M#J;yzeZ&o<}L!>B>L&b{;I_XSPZ
z{HHpJQ>)dN8z^-igmL`DCa%Rq$Zte1<?El8*bbh~mZHwK?v_A-le4!an6taTrKt8L
z%Mg#A2sF&eOH_mB%w5Y0H+>^sZTJjmV#`M94+1eK$0_38R0YgV9_%XEy!IpK3|+R+
zfNRxy+Nv@{kyTxl|2`WHMU>2>S%W;9F?0#aL=MkjC1o1Nv}Wd24ZhR30fxo1&7Ni4
zzz<UHgEE)NJvl&d&BMFuLe`*TCN_dHv)W>D8+MI4!?whCt9o94&jh!LCP6zlOJUi#
z_Vi^c=GA@n@CML<n6mm4rgXH%5(&|@@X@rbF!f(%c+CvDEEc@q2c0~Xq=iYzTqCs(
z=raZ?F;3BQ<HyA~7O_5Abs>a0x7M+-hBIxd2nGjR145RAJmcfMS$Fc?a!`xVLiie$
z?%uTbs33=UkhQQ8I+zvo2MOULs{6IEU)K{$!VT6MkiG>zy%a#b0n09U<x(%{SnT7?
zW@Bv}D;Ejtc*l9(@B2x#2)>@N|K+aIFQN8_u})VMz<ew6pU6?yj4ff3)0XR>CR^r4
zHYhv+HtB}iDv@yP{gA)N(yI!WOwMM}L_YFiLWgl*3fY)z+c!+dS!k%TUIm)t%3(uG
z;9GP3URv-uJ-ZnrkvLh{HsLW&?x!}wJq=>S&N%A9KxzJ3`R&W^ao^^5*`_csUi33r
zG--yY3okJUL8{Sm)rR{uehUBpAR;Gg7x!S`-evD~kaOwqu}@}D;LFxaffz#xl-4y6
z5$f>PmXfj)5Asj7-g`A>>eDDlR|Ts|<SlHQ-8qcb9q_h#&wXE$Fw8QEyz<OSj8ck{
z>N9$weDH5ioUSsiyF*<jSQH?)#8+k9tE=;QnR08)-UIUaP!7cQV-%bS`P7rSpp1ZU
zP(u7G-m`I^2=Dq1Xw2ti6GWZ2t6Xl1AzVJ`a_cSG<3e)($WWcCIw5zC5TsU=_*r`9
z{`g{G(Pv0VRN=(P8Cu?LG2`1k)E7?F+g0&F|9z(a?0>1cs*Y(9LB{J4oP1j_sH3m&
z&DkY61BCop=}Nevt;v&015UjG7#T%YOK=j?wO*_CQ0z8EYH2;CSxH~no@1)VNB4NT
zV+PWJ?c;dP8;05aG1)6|YAdca3Ixf8d9Ns<vlosWF|IYwbs|@0NbW-BB;t^YPjW$d
zmyFpAMFHYTGM%gR0(VRJT<rDL&9314?(PlayLiL*2?a--f_5;074k`i?N9vY^E6|Q
zkx>OtebS6=L6BR$j`IlP5X&%1ROWYhkg!P-3pi|2|Ly;mY)(W&u`9VM+!DB-#Hol_
zaemSY!{QU-zsoRXFmFSVqy9hK0<d&v*bL)sC=THHorKj}3MMk`rf<*Tqpmn5h3GR-
zQXc3bifyPJ3UUm{ux7CVi!XK=g`mQjm4n*m$apJ#u2zdSXBw3+P|FlVG|i{~#d7@=
zks4wV6zAy+e|(ghPWk<M*gC$<C-|)>OeDz?hZ6VHt<hmP>ZR2#2$@}3xyVTmU2*Qc
z#2nDoPAyu9qkcQ;`v$$^bp^`wL%A=bTJ6Vw$=@-t23^z6YDa_m(g^IlksU7aO_)_j
zG4N}(Yorwjl=>~Zy^MW1zX+yx1|dLxC)c1Dw8FH1SCps@JjQ%(pFMm6JTcm_pMW(1
ze5)%^g9-d6gn^!SzuUJo`=lS>Mj*3Q4S*lUSlz!*{)~rRp4-1^Nn=!!n`up6Xt`-!
zu6(WJ)Y6kXFMHm!3$Dyftbx)R5_D=QbXZE7zUkm{G>Kd4to7q2k@I7D0$EPldT4%2
z()eBwF)@}ca*>efUr0N%Xq^11(JrW845CjK{lpVr-}h=j#+NP`pdHn`mxp`?VD6ZN
z%y>AXXo1_>ewBR9j>e_JXx>mbLgZQ<2jp!voV!>#2C>i{hyB#&?U8u^dJRqaUrAZW
zBT8bR-35!C5(oG9bY#RRx+l?zVp77nz93ci;)cX3$K*gV7(4zAo~t3J=eiF5iK??7
znChBDCn*~GxKDymc}s*KJ2VhPBy>+Uh3`uF@IL#F@-pC_5$UU<?g9TyDaw2=TfWTK
z_u_-y7~K3YhnGE@74hNg6;6nMrDZKY#Qet4wS5u`Aa-8W1+is&jflL^82kK&N^D0a
zCsC|W@Hy3u*nY0H&SmR$6gmxa@4G((wLZ*=xQgly&yPGa{5hdrOainb_@TTlJA&UA
zP8i##2|s<l-^PW`Zt)OBg5Ell%zod3hLkUjdiwP0;xvx{-tkf3;$F$?GsnI;D`XH?
z;iZuM$?BFlt?9R@+9puC!-y{tpB`3)LAfk=W7B>XZ^(Ty!-gtHiU~RI3YBexuNvX8
zo+|_KCrhCA%fovx6F^#28m{I)g`pk8HKsAv?a%_zSg`-I+vTlic|o!`+(pzyJK&>J
zd2984NeFaloSWAdxSS<m->mBU@jA5kQJ*gaiV%3e+!ORa-dnZ{lzsnrw&kLh#s0JU
zM_)P}n$r~gMaBSJ${-QzvbWFYktK|8kd_pJ4s9RyEC@cJ0+^}~9hIkEvwJ^^$cz#^
z>;89_!aV=nJY=2Pj>76^e)d&P8@sijMydxM@lb~v^<`VopmYCVc%*Oyh;tErm<NJ*
z@88=)f{vt)e54@dd=aDT9Ez7at!Q`m!A!@*c<d%)6GvHndC=<c6eaB=p@Wm17jkN<
z)*Gaj+x3bd0d%abWGS(3q=s6h@@0rg<alm;jxRT?{lYS93Uwm#jeMksWU<1O_B2P9
zOXp>NEp<}&cD7P|BHh#%f?3ibDFOklb#!u^pHcwH1&em)=Y@|8{2H7S`n4q;=$%Om
zOG>jRzeVRi(fvP|`GttigL<{u*#z0XIUOZbKSV>G0LnvNA<Ey##hZ2<H11Vi0EG0Y
zD~_V*6b><J!)Xx*TS)CnlQoXJ7=$?sp^*RgOi}}>-(>RR=DYj;ve=oZm&QH5o__Zy
zdtHldbwNsxJd0HS2JT}?U5}&p$h0G^Vd%5~>0c>j8R3&G(PP@ui%Cd4tDh$fqhCQ1
zC+D-uz@u8<<9ufO+0R?m4DPXH{llLHq<>-GZdKDxFCgh7Wd_dR9FhtNNKBJ~I~%_r
zO^Z0bBbXI5QPE5y)`){iw5hphOmMq!?lTV264QZ^$u|z;cwU9yd<f7oOqBR53&-Ad
z_@3G=a(7-A!63&pxdUiL8@rB%)=w87S4AkM05!*nW7by&hMyO;jBTBD{{NVAqo;Qi
z=P6Cxhb08P<g}A*?5qb{ks}MHRD8w~3$Esfj3CPSB3_`F!7@$ZkILZY;woI!U1gp2
zcjNSGgJ1*4Ans6RBtN(@9#LIQJcw@@1q!}BxO!g627%ctv6hEL*nEP{?!!qacrPZ5
zz>Cpa8#MBz1lJ+|waIXIpzI`0>ce>MUr)~jcSH1}71T`3b&Qr-mkQ+Ld1p$K^r4IH
z#F>eZ{^x)3oy?!-fg;7JsVY7f4j0uG$XMQCTgFTZ!)GB^8__crBf6u@pDMV2C&D(|
zO79}$s)a4C$8Y}rskg=N&kS!`THsYB1z6C0RejaTpTd0@MOLzaVxC`3a$CDd?wnBu
z-cdQCta$NfkjVPA-i(xPenUQ8Zrn8Eg(>jx!-}+8>bb}?aiV<qDOd4mQRXAe8B4d|
zZg6do{M0D;Ec5>SV}w1H+`1~+(gv*`BHPdoRoCtUd>>>}q~5N%^8JntPW5DK094>O
z;a~}_d~QBrKNLEY2l4ebKQVllJMu4tthBOI{(l-~L--MB>A`;JAyx-mKemg;^Uz<v
ztgC`y)|Bg=y<THLCmltp%AK|BI;q)2$1tc|(CL878RTSH>NAN(S)-$_=X{h^V)wWH
z(`PpYpT`mU+}_rbqmfsj^^Pb^fEgiy5bJOb^0pE#7$1Bpb?44)u~j5j@xM;duxwuN
zX1!YqE;xLY!%N|D+^|Lez?f*uP2J>#cK(GTy`XNi=I48Lj?TVAiV4G@J1{6MEaJ?r
z&;mVIcwLJVP+Dq~yC}3bF-j!mMdWOn^gK{=O6CR1e+?F*I=zua+$QI-fF=2FjH7w|
z*|1FY_hn?A|M9o@dc%!9E;wc?GnW&|8vDH{>+llzN+1X0Q5W%wa%7;+bMIhj!WmI&
zYOKPfbpK#m9*pqf5J;)K6LFz}V`@W3@%k}9vdcv)?r16ek+z1nYix)Z7aGoEJ*hHL
zg58C3!5Hl5rBfbda2{a=BF7cWmtS~dz-mYV<jk^=RPkAa*j^i~b)zMfkhEpRa?g`*
zxeEUYAP`61V?+q-szqBgzlSE%jxVB`f6uc{ej}g5jqd4aq{-SJ<RS7n;WPVrqA^LG
zbY9W*V!4^{y48DJ&>H02{l!}1qH!*Li99lQw~6YZR&q~{Ds={kkINfehfSYBF{D%y
zFOyVT#VBRG-ed>U`<mnYsUSa*9oPZ8hy(NX3JTmOL!pQd5Tr7^ZaYgcsbYa_1Pgf(
zA6dqHl*_D-<TxYE`Jq{{?dz2?Kx3Y<-Uj>6N!ro1Dsk)rjR3I(17lxO^0E`&-O!6>
zMce3HbUT$OQMDSdEJQ>N{O9>HMm=UM0aqxMymXo;rof!-bvR>G2W)L;-2Eos|9AWi
z#x%^(g)?pfiqG_Qd?0|^iq~b1Xhkp_^U;>|?5=gOe4xJk#exxgkZg^$@Z<K+ZC;)R
zV|%>+a8{s#xQEQB8y(fhu<I5$A$i978urjhGuncWSk5d!Ab?<Cp$m~%3g$V~QCH!(
z4y`bF9(gIt_Qocut9D*ZFaV(@ljk3L6+Ltx(=wK5Dr#Z{M$QU@Xy!2R9}O#Ye=34=
z-t07M<BvuR3iPm=jjV^LXgq2-uS{Jkc7B03cHSfgdU<?keS|Qsl(xtGuE%88hUlD|
zU~fM9W+c$t&GvPN(=KtfnfHNdlb4wGIbJ1%#?Nes7N6lx0%wX287np@*<bL{ki2tS
z?&5hd|L0sb=H1D3+oy7Ar(fvLl)sm?>GBX6oA8;Csynv(nYyNrP|pyBKO6de1czy6
zjn{Bf_9(>9B+dv^cAl<$wg6YRB?1!R%Y=k6?qfjSRt{(T`ltVbW|LJ1O|nK6Pfygl
zv0#r2>(^olzHj@A1IhnRJ-!Yas00f*bs!0(fAQDL=}K4p<`U-eH|~mv#MEE-Wwoyc
zcvpDic*zKoF2c%HA&4lcHr9g%ja%pT4krnlag4O$TKoTYmAh4h537S7vC5-)CXL}|
zZqR`Ho{H|rE_iXD0d)%H4nZWE;d=_D2iO^YHTmk6<K94Xm^xN;zB@Ce`=~?9hZo`&
zxhPgg$saD4wO6`@=*j<vG47{>mrxq%qcjK^r3793oi7AJjS?&u7ZYn&pWI9ST&x%x
zg?8sV<C0|(raPR%7a@48;yK%vy9y`<kC#PFA;PN7xJw$oIbM2c_!&tX)LglkK^mXK
z?Ve}uj}4^9iU2i7<SN7Y$!eZ$VIi6zQ7ALdhq&apjo7icjSSzjPxq68wjcMJ2zA41
zV69)RC)YF<P^q6KhNl%%o3noFlAYRB9D1la+i`+&aSug|s0iiz7DbW}#0lv;NS|J*
z8l=kGBx}U|pi8>sUyDqpr7)pjnW@CKVz2plO0a|5np?~Jq{I{l>jpNK`PqvO#@72q
zpw_(L`5`6UcN8Ih4Ux(;4zX}~SS>~nJl)4yuoy#@Hbte<mL~lqsfYH23M>Fq*4gKy
zxZ5eZf|0lRch~;+*ZQxfC=xeCkQ)OZ=Zm3t-9Oo6lTZA{`W#9bsQZR_367~GgU|M7
zr?kW=I0VKHQWj52k*cWzu3G8SJDNpK&Koa9N_Sno;dD7JJz0zcH#5+#I7WdhTXIhJ
z8^m4NzflWF=hQG&ds`)<0;$Z1Ao4vt^S18g7de9sy3t8?9oFy_l{yaI7iT%v^k}NU
z!(g3cOjab)ykaYN;5)V<9ks^ExtZFIRfyq9@a|uw2RbU!PByN3%x@#$I8%GD7Gm9K
zajrE#we83t1SVW5pJ^)5=PbPSX7dIXY*|xJPm$uxi*Q{})}ikChl0vieIFc_p;Y;J
za;;?v;W`LRTt-p;dA~$}0!b%{is5@?NdAHa8?@tHp2+;%1cU_f?@E`PP<yPrzoUpF
z;-_9bb1`1g$y?$6>}v*7I)<{0vzW-ln3$Npx0mFNoaaj-8FB3ma$gq1x!Oq0ieVyp
zmbK$b9593czhvcokG8*>%eh8FgA@TPEfQ$p&Gj2*v!6^eoA;nbAyKs<OXs!g31I&+
z*C$spKAh&70O**^!tL+E%4^qKs~I3o;=yxK3d0^sycG0*;9*J<u|MioVEdA#kWH!J
zLg!JR-lv-pr<$h7<rwKQ6j#u+^X<+g{o7}{3~qhaIJ2ld5HovK_{AjmB_|JB+0iEc
zh|={~1#&=EO_SAvaL}z^I(7$K1lls{D3S_EZE8^r2S`Tc*c^5et#6V<Q<6DuE6mu>
z``*2XKi*M23|}wZP@sQK%=nPdxDibiq=$wy4sk)#Pb3||Uuz2c&e2o2EnWClh$gEw
zV#i#WOgTck^BFi?v-ZH4&E3f6<Wj%b;elAba~Tchi3R?Hjx1W@vs)4KEPeuq)TKc(
za$>7V0Or?i8)K_18%C(m3mFDy_Uo-Jt#d4<Qro^J3Yq8l@atDchtO#u7c4`Sq9qsp
z-l>gIVGx$gKq4gL?uTutN@qVf`5}VfYG!*JcqPK2>@SOE?F2<b^wrPeNmOF0l(PMA
z7L;~nl+SQ4XM*U-8)JoFN~fp#I?QU8YnFN7CU7#<N@3TlIcnd4uSCs_lR_X_vS?>0
zkBPSH+J1Tm9;qL;S7OOzw~El%FM7_Z(@p}_>x&J=C@KP<gF^rx+iy^B-acXM<Dxu%
z5v$ULT!h4w5QTC2O>znn7IKX98@FYmH;qTdHl7EJnOXN|4Tp+M1$K@u;}1q~<_e8O
z0wD8mZ0d45Kd(=GJJ+b&*OU15qwoRrCBYT3ZKOnnFBqSKfQ~~>)mAv6-$GVx<ETIo
zM|<ikp~$S5cN5iDuzM||&9Vg?r<0GX&$XW9C;uE_Frk8yNi<k@UteE>oCtUMPS!<t
zVTq;%D^@RfF?qkNn>0kx8HpJZ>@9<hGhl*thw=MPAaqaZlDhV13cWf1BlQ0v>Mf({
zXu2*y+}+*XH9&&9L(t$(aCd9m-3cBnxCVE33j}vUfZ*;uJnuKN=B{=7Uv*WTI(4LL
zpIx*Q;zOTgPkt(jGmat(it=So-NdDPP-b|WN^q~mLrHmV5X`QgW~UmnP~=J6Y)a4H
z*DXGgzJ{>OogexfVc&fEsBNC}5VHme`;GW@^JxPs;YAx{zr}yCc}2rRn@ss=c+-Iw
z^A_(Q><@H{^-$AH5JaqdD{*k>KK6@1GI^534S%gD<~hSyz?pOrZJiO!%OoBOWrnR7
z!0U`^Iw9ockU5QJ-b~KJNe)mdJaNcz{n-&gIx?R-fyxmxH2+y$OGOnIFSaKyiQ<I+
z8`CT4B}P?SfDE50F%N9z(bLvkCa1P&ka5ElBrFgcws!QbTUqV40~5X2r^z<i^rDE(
zu0Xmbkmr&7L%M*ldfX_MZ7_F=Z*Bboq1DIPq5_OD|IF|eHe}d!vc6-|CVOfoY2Taj
zQ<zD|1mPx?txjw3<*~qk<YSu<7Q#&dDFI}%`gy=Uja9;bAE!b>nxp%xq3mL``b$(+
zi-5algcDlaU~3?parX16G0|WojEuv4)V!5^2VHeu{mXRPa?i9~HYfY_+Ko&dvs61q
zduKb$RgiIC-H%NlbquowD<+f+W=G2AFa-gY?TCCS?(p$gFJvMP^iD`T{sL2T{p(2P
zY}K0|vG|!}GoG34_A6hc3zAAqaqHU}>H)omDo-xQv4#UVmx&q-_ZHbRu5^t-2%aDV
zv&Q`ypLgD4dNa0p+4QZK%n2gmAczlUMH}ptvjTa^@e*Y)A4)iR{lej8MvD59Tw@dH
zUf&9~T285b`Mo&_W9emNLN4d7i+08+^HB2gW6?>u@<@6JR+q_Af<n+$NMaLwW&m_s
z<*F6phxg0UZlq8TbZy?zV<NQf__KC07`aj-e@w69!!jUu1}l9lGmW9SN(523L~r$Q
zFP%|aDf3Fj*x<VQ>O=@g^!)wi&(USiTQQfz>Cu=9--95+4E?V3=*Hi;s>HQ4WsfwP
zJBU#5!9@J3KZkQ3{5)0(hoBwH=z+NsL$@ufRlkEA2ibW>QAi7?4%@A!V7)`NV_FR9
zb{;5zC-G}xY-FGICRiuy>)!EM&U~TgC#c;{Jo;7n^c9mU1Lo4NlzsFY$3m@XGMYS(
zjyd$IC5{2!s!_;yh4WCl8<H=k;!Iqe)HCSl5w{0z{E`;ew@hg4%Wg8i5rCE!Hd*di
zLqV0eGRD;P9%o5YLitP1EX5!6S^^?vWlz|5B%xi2y3Qt%VYP{{UuIl<rE^9#4f&u{
zT$>^`Q{*V~^L~|;J~~ed<ocw~kSK^ApB;Iyo(O2Q(|emUD6gh9MJSnFujkSjc&qDD
z90~Pd<_@-tOGMU&wyM#QIs^6RxR~VA2&fnx*R$LT#Ct@a-Wi5|oHJ;fvLiL}mBvd5
zE=cV*JrB-35!6|_lHg1eTrhFwpgnC`n4Q>!7}dQA|2pz5p3syvz^7qMOr_@&N*g)k
zIXy7OdWTUjxDNCPi2lu-%<`1#558rPgEHDfA?6)1565pJlQT$^?E&H+ifBZ<{BWLM
z(-s@#@C#QfbeWSQM*`!0ZYeZrPixRmbR%^2!e;j$%PFrF$azjHaJl}NKVj^4?sjYa
z^14k3B=Y{vuE@K|=<vdNw>5+`A*kuaq>3!Fii>88FSXbN6W2aU(&B~PSPLfn-jX=)
z@%DKf5NPEyGRVv8S_Rk-Q#yOEB`XRwFi0nUEFf>-(0FUj2e&UNen*JSmznW}9}o6+
z^WuNepUp%`#(nM|GFuYDAWrq#ZvFE6Y0;<HX^z9SDPEt&-#FR*O-3tK%?mPPk<Em-
zVUaW;KP^{uU|QOd!Qy^^1V?+)USniWYO?V=b$1bD#$+QRnLZ%7zlg_Wj`tcB-nhht
znA=*_duKgHWj*jrla{AETdneOlxH%%S$<qR=u%aWk!*AduA*30psRd?D*8Pse%Zif
zxGEW8$^X-$G&;*lxmu&!1W`76Gu-Asoq|WLJT9G{En%$2c+EDA{QDy9DUxmar#_l2
z<57FDfj_D`2@yayzzqkXZru1tKqA~X3`tF<M0aDj9ZS!~z?HZE1eakN{I@B&J5-*j
z<}H01me3qu_6JU-$Pz7uU|fL{%W;qhQ!}M})D2`97im)jRLU2grYKh%_}E6d<v7ZN
zNR*W_+XL<lrHnF9eu{G)oN=96iF-K+5^D?uV+vHste*hMXdOIdHWmkeAmdVn%s}X8
z>^<vbK8?C+0oT!q=2p8kT_yMtxR05{s}f@kVlMtfipcDJk{;DX+N}%J2=M9%CVeH#
zva7nOtDT+4il0O&o(D@)ESUVp7Z<Zro%`l5YMGA@vw{L9U{B$aYq~r94`k^Nf>Hk>
z>Hc=FbMyw(p^Z|z@SpXbeQ`bfvsWP@ymsd5OofwGR%2!D{!m;swQEko-ub&W)BFt#
zN#q|2@tPpner$*<zqeGt*!#_sS}#>JU#Nv7XmWt6?b{1O;B5VyWPDp<lHO2OpNrn4
zPSVw?tj-n;wJUX$s!Y4?<e2!=0u!nkRaWeUXRZ$L>N46u-08y||9=1-=9*-xXw`Q7
zzJSs^>RSFEC8i=)dQ$cw{B$M^j(lU8YBiCkIlQ&TH9wz|?}V6yCR2&={N@MgJ-xRg
zEynYq%n~#Bb1ZHYuKqcyF)#@;yR?`mzVn0yQ_{&m)*~7OjyWqb4r5{rD?m>>ZnFXr
zek9uhnAg-E$Dy#E{7$mF5eIC4SU#hfXkSa12nxD09>8W7B(HNZ;X!F$e{nM??=|FF
zkMB)zI?d_o5H(||p&sbf(h)14cwtN!Ou`A}+*u`a?+is+&N?S&(8Gq5FYuZ}7YNz*
z<}16mVzkQUwoj_<@-kP<v<Wfz<)ID01rVSZq4c8qDhFE|azVDm>R|kyqdIJ`Knf+m
zt3xBbP*yfi=zS*Q*ltW!seu`AZD>QGFhr7*t0n$?)Nbf7BP*#(r&S{{B8PCtVr=?$
zoL;NSaEI<I)9k-a9-oUZvlryANb>j5EAUw+q$mJA1>gTUlmwllFJgo}kNg(!nKtGp
zyFpJdB)PwM2s0Sn%B;>i>ONQ#rraCY8{0SM7bNMV5OVQ)c^TT4a<s}vF(TO=D+V5*
z)<&kc9}BNdImo*C1@llwyj-}lP~x4>rRsgEOXs-;81W@^^k~a96Qp**r-|n7W3@#-
z92DNvdFc{z0Ynt*FSV*<bQ8ckSrqK|li0lPBx;65NR)Ijwgk>JztW7o3#UC<0xy2=
zHgDIP2)JAS$RSaqq(#*db&0dY-i6C<2n^@Gh#Jxt*t>$}!PKW6AO5Lfxfe_it77``
zb8}SPS2RVW0a#l^XQkBJGMkGnwzNsgmNK?9liM%>&F%xyd^${%^%4Rg@qvn!YA^im
z8euZ<*3f!47Rh)q(-19fi_86?$xeQ;p%~SfiX+DRl`tKR$c3i<)xqb|_GUI}ipjOn
ztuGB?(AZV&;%7>7JcCYImx~0(hJFR2LFa=miydXHhLR=T2g#H2O{WS|-O9*;PDSBp
zb&BN)y@HpYt^Dy0C9*ESpDA-EAGl|-8M}Gfu|Fe&>>j*fwkJptm}u9<&`?lG`4~~&
zYNzS^tttCvV|J>SNi*#+!Z1ij_}_^c7DRI)|JV=fM{Ia!&=gF{%^uZhGmJ!hM0F!q
z?GBokNUyCv4crwDIkew)Z|kiQ2%rB5x%2;{zwf&Ur+})nUKmZu9P;9O6K-6b1$5|-
zxp<tbZS%n*3a62h3hA=8vr1L09hiS_=osBn!j@+f%Sz+X1RF&I(=tUNg53ym;4r4>
z1m8;ne@yR(I<n<r_*!=m?lzyo?=zVPyvKz~XHl$gwV`sSa}gf*XuoE68yRqjJ6^B9
zTDv=OMgSLg3{i?y)Jnliv$0;VNg_>-X()XE1|5v$dMsl%;%8On7n5Bgs~9&)3qA!c
zodiNqTTq>GL`_`#2ijAqY~sQ^YmlW6<RQHw{^K~gMJu-a($PEkYKd*eug_sZDS_Qi
zVWr$Pdc!~P!Tg0o0eePn|HGFdCQNF$1c(i#;8Ngw1{V*#R!wQJR<LoDITvL!3J<&(
zD~1Q&7n}D|VF{KU7^B)RwZ*TGFpl!UUTtm#1etQ)f7RmQB7_{|$)ANb8CTi<D-HV(
z$FbUa`+s<gptbnu_%H1Z+b!MnCL^`!Obal{T%Cvaa553M%oB+ON5Y-m-E7TmvLQeL
z87ia4OjJyU4?wu_1+`bjeo9)?8^&Y^$+8C{sf@W&DABR?$1%y)O!?o=!Vj1Hj9PJB
zX%>mh$c1_hsWlCrWDlYND$B$~$&epMD9IE)j~lXt6G((|Awq>>h8TiUEh2|^`JV65
z5ry@gxWdp>qqyZ*fz3j8unFQesx2U&$xKvFvLWlhaP*Mmenx3fazMr%^Y=FJ*mmc4
zwC!*Z>Xr=K*pOY7^KF`_?$=ps1hGPrwyG<i1EZByO=%;?LG}+~_!+u*@~xtUQCobW
zc1`95b2P;yv(?U>y>P?IX?@hYUakx5tu~E&x*@`&;jD2-Cz?vtwwLL!8dkvH=JykL
z+bu2bNb74MT!~e4GfSxY4+5Hm2v@hhP@jT*ehvTo4(W~in^8%O$0?Kn64y?c!U2An
z9&XDd)@Hd<x`<G9zL#l}let}@>lcAgG5bi%LeaIALjihS`N6#8cZ%Px@VOys(3nVW
z&)C@f2z~jJm#+ziC>LXpSEIp#Fc?>?BSTRC!gB@NAZZ4a4!9pScVUar+Dm!|$Ih54
zZj{4)GIlUs2r7G#YjyRXILKg2|B8kyjkRIMX3T*wxWGPKWVHorLxD%(oNWM;I?|ll
zuhKX-DBf(2xW!M(y)Wop`M+ZPo(`0Dj(^)3m$Y^$Ug+Zoa65Zo|FHJv`?9H!jZKxd
zrQ$VdCY=KVAL+x5HOnDa(koU=uTVtnOXNn<aJb5?*kv6GUB)~>wy_`YKIPybF`4I3
z(RZ6x(+cR8@sMD1<&dDl4g8&nn4TRT2|=W!AJ{}bxq+KD7CkX^<T?_d@7hU38AG<)
z!+tS!S<mK=pbsI+UGm@F<=*MM4ERw_C$CwtQG1KaCp8-_H047d(#=Z~vUwSpSVYu&
z^$vm9{`Rn0<u*~lv7%J;4=Q@~t1=^OCdQm`><nN!r{LF=sN7)y;o+L{i%O>QV~xe*
z$CChWss6Y<ZUPfR4HmOJr183b8j2J|5ei8-f{2OFS*n)~<99l*Ofh2+&KD1gBNB2(
zCrHfJ00VhMBRL)o!VihnqUO%c%9Cnbqv8PClR^s4?q^_TYwXMWZS%}A1gzN_={Xoz
z)b_xPyaaV|GA5`V!5CYu#nThQMmJihA4`L~Z5WQ7G<B^HZ;{d04Sz@(;e`7ER$ERr
zElB0eR8GY;Oj-Vy`4N(Zqz+tFo9Lg?OT~0mmqmU8Dist?GX=)*O=%LU(ic`sxwp;N
zY^M9qozK3_DyHsMq?hJ}Mp~tJ->$~E7;XXngXGmXnp8pp+eij(45BdxZg*lNM(&@)
za*QEO0oGEV@j`=zW`iWzU#OrC^++%j^sybPhP1U8gLjvW4fL}3oI^fSK92BHK=gF9
z6cBLHBSz}B<2=_h4mw8&5OpkfNST?MrHP8e1>Jlh(Lw6hwvm!<Q!0pXlE%)asZ|8B
z|7Ex1PN>QJo|p01-7RmbF3mgq@prp73c4*kX$ISX_0Hcj%Lp~MP<;)~!%js0{4SuD
zkA3B|ZQRxAyZjO`=c|DH&o%ooE%|dCUZFAJhg8*yLH4LU)zQRv9@C68lY`!GkD&P~
z5C6X18U`<`&};^K$<R|!`E}c`yyIoS9lMqW?OXGM-WAzKP)w0&9i`QeNmLju-nMwL
z_#Oc?i_RuQGxibw!{XS(v32weP{h}<{ZDh;2b4QU1K9YA9=`M~s+a|~sf@f9HILn6
zuX1OB+_Sy0dP=P1%<l*vAT`rIjtRK(x|+Dsx?Vs~Fea`3D6tEBNNQy`>22HwbY|v4
zw*y(TmBM@N=`0NQi11|Alt^V2haJb>>APH=_xs3vZmsHZ9XG8e(($9U$@lX{DL2{8
z2mdS!>X((zx_vOrrywqn!~<J3&$NR-rQokgw){$zj750AqRQw)G2V*n!Ef5%jL<^1
zRfP}ZUQVtmF1H$I5&YnAgS|Wy(Df(Go+A7MhceedMci0}G4uH#yq`=Wbu$UiV0Z2J
z-2ROOgO4{2sZt76_HlcoQ4>RbH24n+@bDj1b2QxBoDsBU6aN|KU~-z?Ckn*7iV&a0
zGOA*jNtY#wkwXn2qjr5#_+V(7u05~oiRg$3=|2R!u*5c|ow>5RFI_{*0i3V&aO|Fv
zMd<el)*fR!h$<p>86T=37XKwlp)rIfwc+Fxy)xye&BgH*!))^FPq-G~)pA^jMkcS_
zrOzUkUS(u*$1ixJvA%P`>55`PClj8y^{za~)H*&z#yN2Fu}!}f6Ry8j3@bS=$m<A*
zseCZZ-X;#B<Cj`oTIdVV1f<X-Akdzwef>j{TdZ)(w&BXqy8}M)TY8>|+bqWM3~Ody
ziHG-b@1kbKBm&N*rP%ZkVRZ@NIoUg56L)M0;SMU@+E@#G!L)yZX%|YvnJX$cHNDKS
zU(GbNGW`u2UaFw~wb;?8Q*4H+e?{DVU8Q!cyXsHt>}$aO0#56~19?x%-SpU8gtA6$
z{H8Z}`X866``wy^9@Q$+CIdXLe%e^8NOg1lTT6<s4vkAGGc$Y;%Jb^xb2L!z>TYw?
z!naQkZ$IERjaQ^O&WQn=ZRG{JD8o_+#oQ8)8MB!j(H5mhsK|sBMkI&^tsD#yLeuh(
zzy3_j>V(VxDd|_{3mhreJ95P5cEmJhifuZ{eD%J+{EaLv+=eTpRnk*(RsFe!<kE|w
z`hN4Ubo1~F$VA%O`?q{&8g`5z`EUs5`9iFK?#~$^z&&?wy7Z+po6IENBqoJmCm;47
zi&gPeh*Ddh*U6EGkUe+$o)K)vs}Ea#%8mA_xh-I-rbCrg4!|t*ov+}>k{gcV{!tPq
zhf?|RHQ9%1hhix8D4+?)-iY6g^3*a9eQJDT;tyYPlh3QbrkR44*^n}m#7)?O{Po&5
zQy)$mXSr7F+&t_2j#kdE9rb;?zEmH6?|dA&qFYvj+mOL7F=}rQxFi#N7L^JM$)b~d
zB1tx8`=<jV_69i42TTwO)NP}S62t7M_ELYkX30uP3M87Nm#7&kI?6#Tzdd^EwGbS;
zPafCB9yF6N<!doeB7<A@5@<2{?bC{V(8-musOUr>evz4)1MS}`uN-FIgCbkfKKD^0
zxmS2sd07U*y}D*m26f_CSFg(X81KuT3VVFla5=KA9WP)URz19mEC2J+XDvlhLRvJ_
zBP(=DzjL~!0WMlX!y!22=XYJivkFIR(TZT=ABK?EUjFJ*n;4uHNJO@u%!h6tc&B4r
zlKLx|+<UhF!G4agrcdHsI+bL~_DqVK{Fd8yCU%#s<iXN~?8>6D`K*L;=WV1R%g7Gv
zNxq~G2I>Q)6O7L$%TJ3R!&A)vp$|{hu1|>2^YxS@jB$01s*ShrQJegU$~~brNpKAL
zPW*t|jq2f#RkdCLEr{shgE(3FFF)RO^AwV!CA!QH0%z}e?+6(412{cI3|BKI&e#*)
zU^gQs3Sq>DWIw2s%cgI}XcqQe$+WR@DPDSx$QJ{*x1FEVX5vWf5DJU;So0IUaDSy}
zxf&h1g=4ck;$)c)wkYdEn%eVNi!#qsIr96PRkkp$aG^2toijcXi8U=gs{40D<W%N>
ztB%^MLLT*y4=7l2=S*)%F-;Y{DAcg_Ff;V%M87_DBdVI(W_5*~^BF5j%ma;bCYM7X
z$Lj}hYA3BNBdvp?bmMJtd#bNMUN_?Uy=<@(3PxWiwmJFoK_@L4fx)1?{~Hedd@;1|
zu6tXH8@;!BdQy?2L_MxHkFj8K2pbzkywOwvQ)bS;cFfDKyK;oZ`nm#Ac?wW91Kj_T
z5*6r|k@M=mq0mayai@1cV~$MPYcX?#ZFjB!Vf=cR<kV<ktYy~4rCE(H<sH<1h|QLy
ze($3UuPyKR<Tv(k-Xhqa6MJ=a<%a<+Mmy-n3Mp-jU#r#W?1NXAs0H^XqM(lPieQ8f
zr>Yb?L`UO_xtk2#F)GQEdc|=1ujo_@riu_wadb8ht-|(}0FE!n&Z#E|f7_~=Cbb<{
zeL643oU8DYX<KZWFl_vO`;mMFSIL#Sagooa?W6QsbUJLqeATJ_+9VG$>BmoW*RyBz
zt9g@IGl%sYtLcA#ZgIS3O=m<L8|jKDBmbn)kTT596<;j7d-!DEP$u-{8cvU}#b2p%
ziU<cKIcH5F9%!j3J4*?ocleZs%iEFxoc2Tf^{6+n3#B!%`=gP!H3CP8lg>9OEoW8Z
zpvi9~=HN&u;<aYSYOh8yI!{%RHB;HX48B+16DiQQdJDD<tDUslE4HOg@j0*Puk>-%
zPW^5;VE%r}QXVjiz>hp&0Zli#7hmG(m@wyr=ewybnKRT8kXpx&9J4|zDLMTDtjvGD
z!(*meyUlC;W<ldg305o`AdM48WPY(~ssHEaJ3yvo+EDUqYx3HUk&1EKue&{>`t!<1
z`WwYt-a-w$W83<zyO}I|{krt*T6V)_!C$u$;p+MgKTdav*^VS%K}*Qrzj@afewYNT
zDU4v=!x-u%dL4P3J;VFR1f#Ar0%2q&alZA<IzBCKq((9P4koKIiSw;y2+8^M!B7gh
z9=|ApBwz`BcTgk9I1Mqk^0z4vjcZQ;lC0jZl2G+2@{0>H`PQ;f!+!hmg|IfdT^}ky
zRD;(2H>%91Z7euyf5Y{eSE&b+Nxt=Z%C8i^QCXg*7VaG>F<-AF6%b@F0XQM;(x?;~
zR0QgC!yNIKLuV=|DwPw*8l1?*WG8mhZvm8>u5hsqKb%p7;x(`b#o)Cho1=i_L(Xn&
zh2-{c=TRyg)Ryw{I*+6!Um|Z$zS~d^Aa6;U9||3OYKkI<S@3U7e)AXUYW@89#l2xt
z@HTz;=<8v+GTxNsavRFl1;9?yx{qnlmw+vp;{3N>d6?oFWqi`9xARAAKJ^s>7W~nC
z(UT#^E+Rjnlw5y`RbVdf14@OcUrfmwZj!H4zwaMT<)Rf^gx>lK9v>BdBa9EYc@j`p
zR27?<>QkjZWgC>nr(K@eMUk5OU-c-S{qzu>vu?!CMinjW5$o|SC;%61LGFtqim<P0
zM}_VL#37#wlkldqv9(E+yT?LW4~&LUK(+MR!gX)RoxBiKA|xUOYLA^*=RthO{^yJg
z_RUTn`Wk`neppXyu_ij{iw+-lz;p}Nm!8dL;?thxsrW@J-hUotkNA}ip2yWa6#twi
zl*dz@NnVFmy{m?X`~liOEn65%jMtS;SEaE!U!>@s_7cWN+H5Z-8d>XPShZS94g)Dr
zMd+f)EtacWMD%-J%O+b$l6<i^gDLK)RnG*lbjtS?9}MYupU^s}smgNI<vKOBmU>Md
z5)@U^#^FcZ{L!wGW@4E7x+l?}36rN7UJIxK^8aQvv`tz%Hv$^r+{$yY%0*tkk`E2j
zqW8mxSYR#of;rK3nCQN*U+|zyLx;|dn3w$-V{M53xoj#N1>9ZYUeb?=B}9pEuC#`W
zpRDg-ieZy%V@6G`7s+0Ww#=uBo$sv>J_R}5<b~oGz)R?s`@Oxa6hamWmq&i4V4|_R
zeyR9?&YE#7Eex0pVsKpjROE=R8DwEj`#V!hAB;Qzc`gF5?RiEuqh5Z~CLwZe<ks+(
zpBuSnH|pu^^hZ3tFgp0#!9knZ2X7p1E^gy3YiE))ZY~T<Bu5i2a5=DEG*hJ^ynz)g
zJnjGbXJuu5i<gH&*q=k>X!Yo)xw3Au&n5iJ-;@f^&+5Q$IUC%Ctl@)$?|&P)Z`8M^
z9ItopltNxm7qa)G^h65pL&dfmhfoVs65)Cc%!YsL4XKEa*+F@YlHNr%%t|KtxK6SP
z<&CTkjqvj61n@_5z&z+T`~48bbDVi+QqMRSc?m|5h@)+x7BX6KdbP9Yx^)$ja1`{i
zf}ytVAEyA0hhf*H><1y1J|usHdK0zyegrQVGO`Y{I`I|#r0(RetD#Im_(La@tnkFZ
zKW(NDlH(Fwre^7W9E5hx2**LaPE_dnfu>(kt(z4%t`YXE#2>!EMgGC@S0sJXd2xh>
zs}bWy3bOuVI@s;6c>H$(Z4~-D<Q(_3qExRv!Dmk<ASEb>H(7b<o*e7*KnZ%m<EIFc
zt3=#?knkkVtF;uNiT2+UmL@C%-w`u8Li2H3*h?{kdk{ayV_I6AN28ambgI1Akjy$8
z>^y6athz&BBM8ISt#SUArGC~u^q+s*Q^`I7Y(6Ab>Ll<Fqm0p*7_(%+<ko6zswr!1
z);+Xy0hd0WU6cfu^2G(l1GzE<i5@RO|G^_!GuF=qTo7HU94R(rH+``uXNiv!eP=F9
znUYqwdJ?R1G&{cqij*Ob8mMZlIBVu)H+Md@LWIik^1zE^p<zp6c&9KvClF!;aL(lt
z<`7-SW=64PT?OhPhdRL+a-`j1CdXRV{*ZSB&J?Majk^|iH_<Jf``x3ue$Uc{m43m>
zK~wI9$?-|6(JP0L?^HA8pQ?jsmfDibEe$4MCt&SM&ucZt?>+N_n)E)Pc^#{x|1KhN
zEXyl@7yKDjZJtv+@WW6H!NbSD1<8Bup=L7?F&`j>4@owB6-NYd{egj5nWN~h(-(sv
z@F&YV>8a6!jepb%X(>7h*65wK=9R_U#O$fS;N`aqO)%U(jhzleStpa+0c|Tr?<cWz
z_oE*r4QbPiA%fx36j`6yta&K@;_h+>3&xWjE_lwtZ1ov!(kyI7=TNyM<d)NLLz*8(
zAaf8=%TC2lfAr`|d8P|WSwz>#8a7x+145mt*rM@K%FFL4m2bi}N4JBM&Gd*wmLanl
zF!oATD|$o!LO~JiKrC68ZHB$rCNl*Gj#p{CNtMl38w2Y8Y%uCm3Zb+D_nkp5JeK)W
z<0a@7v{_o1^IXW=T99eK%zD(ZAQ4~dEX%93uLRNz7!bExJ?N0Fi-fZev2d*YfE4MN
z@>)fy%ARVvsMU&mC5^=`^?X>nQN7``59lb6^M;?0;^^aU;8Yg4@*z(KDyMgZu@dW4
zsjY1zb;BRlWZkV)A-6^m)Obaf_DOT-2`;w4=M*G=(p}7;eMUvbB&M|N$aP=0@kF2J
zhUF<Os!L7}%sfv<{L`tw`S=%OKyTUfMw^<eILj%#Bs^5PQ}8<DT#GW@Gv43ID~xDV
zJvfS2`61CI$S12TkF}<jWTIm8cx?`>Vi~s?mJa(R8o+ag(5E!V*}T<Zif$COk`ll1
zGH`b^tZwH@X=m8Af=|&_<o#K-s_z5stbyRl_|Vd!wKSg{Jyf}e$$1Q{W5$z>iXK5j
z0(3~`lSwM1CovXTxS>3T7#EK#S<=E>D04}LAKSN6RGrsckit)vaC)e34-$M+c^A8$
zSn>jO{ZmXku_n-!e^Qs1mC|y+#l1rvq1aInGfpN(yi14XKK<;ePS0XSNe-QWPGCaC
zfr@wY`_OlOTyTM`I9LMwqarCtD6g<Bwc>CbWHZg}B(7Tx-j|-FJsmCn976L8>V#Pt
zNl^8w!#F`5K{r5@K`0Z^x^2qaJDGnPf=0F6n@O`IvpZ|{aU$Pw?jM@Z<I|_H!u8E=
zX>zRlba|;G2QEHHZeu2>I1+s2<?{kniUlb6Sa{U+qdSsVxeh5H^4Fk4HV@p?UGJH@
z?(c$?pYW$a5^fC;FTHFp@y!VwFY)GSAJ#Tgud_D|Ay6J1kD(R(#{{sHl;K0!$>0Kv
zuj_A6hW!R8G0&+<VEtcupO&+3z(<w6d=Ljb0@X9Rf4~YD3bf6V$K`;dYUXUKv)b^;
zr_@KD@26n}GMYecop={bymI*8C&@C4vm!?#`-vwycXw=Jhuj)*IL!w(JcN*Cgk;uH
zSxSr|LUDbhW?G6}SQ*NPA2#fUA<mKM0!LgDA&fF?sNFl467Z=VDdjU=voo$y=Cekn
z!FQa9umrS81XJ>~xmxt67Ude=y&4e<DMd4nqSMSVX<5L$z~l-sRfP0z+xd)|zEXcX
zB)~d*XBtaHgfZ0!-n{WH;Imuh&wmm-Eu*}6eiIslBgoF4;ZtnN$T{KbX6G~1Ssr+s
zamBpKrP}rk$t=&;UXs6VNgKb#_)W7U09mV%Ff@PqGB#nLjcG|cPU&#cikgkZ{KS`a
z(V}+Fq72X#xGD-#zvzEguX8kkVUkUPP&5^#SZr%$%$9NMGQus_Q3SJPg>WY2rE28`
z!`OiC4U~vuXR{|7{8bs#l4HGh^!_1=fn14S=e45|fDg8lo&{-$`fDs2XllRbEVrIB
z$;MPaHKwYEW0&G8OiPY1*+a6T8<TfoQ^%5H0T?BH9y-j=#r$38BKlo|Pu)Fl(~^!i
zzqJ3H%TGdXk7rWL%OnG`jUtk&4&RHXZu+)wsMzgV@MF~m0QU69y@~xW(`*kJn;Q;o
z7qQP+*D|hdGJ}kh`4IVGyOXu9)A}f4PW!$z(Gha5IXd&-;_uy>Gr%lqVy*zaoDFFT
zfLdC38a4pmWQ2Yk;rJtgbmpbi@kN>LNB7PF)|Y`y7OX8C`7#N{&);O)<t8Z?FB6ra
zTM~o~|Ed*)Mr^v$ynbVR@TGVabttw^H_jr#+8!+m7LUIa3RRV1xe;<$_uYr&flIDV
zCVXgB*7;iiB0%}x-d#;8;9y2bv+4EM1B1`BUt%Ka%M9&To16_qE=gtYi|i!GFBDz)
zE&|~kpuZ3fDbaTPAYg7(o4d<+W3i0Evru_-t`N3mBt!{Gp-`<a(ZiBGc6}mz(2*nf
znSQ{fY;)D9Xw%P>mQQJ>@nm9AoM((wO*v83@}|cXt1y&I>23kV1Jw*k<Fx1y57h56
z{|us(`w}*DzkIK+O7cUJ*%j*hj5X>>qA}z)lgpzJB0tgg7lYabaTo`+)k;O{hN<!E
zzg$)M$HQjda!P{bDGy-L#L`#llqUS%{5IgcT^uL>A~X#5*#{1lI0V|SPJzPsx2sl%
zLf;c0ASm!R&rXSy{lV`m6>DlXo<O+aTtw>s3*E#exuBKzAQ;{1{2z2PW`ERb{94q)
z6MF6aS|yzAmz~?{sG1#DT}!r_8=eKi&+4@b#@hx+v$ck(kl$2?Avx<@Rhgb7B*MNZ
z{!FEpDl4i-yxYNI9mJBU&QSRc^~4v2Q%*sc5Gg&K87L;;)V}LY2Mi4r<Ro>uV2y8w
zGC@aOd0pvqAu=vS3o270{DR*7#V~8v)vd;~N==Gpb{<e2dj)m*jrt8HN^X-AyJ;!|
zV^b-cRy2>YcRksn@45ry2lCWKD2>*%4JCnG4N`in013SQV5^9iikJabYoe6znHL2N
zZm)uk;)%k&pi`gL6JVc7>wUw|&FtRh$?Oc3^O@yPs|7yhxoEP=G%6nt<{h>F1k*~*
zOW8OdnCN_j{AxM=hy0`Zui$82|6)Uq1gvjPFsYZ1+_K42h6eA5O*pM9XQL3pbwcw2
z7Ezp%ZL1DMrf94R4$L|)@1Z)lqRNSVg2mC@XazcPzR>KkZD4wQtaU6+N0>`&I+F{F
z;*VD;x4f6)U9*Wc5@ku#rz)4JpSu!@jA7J+un!E%i>kl%@sC7YoOkC}dBsSaiB<)~
zVxQCl-8haQtF}v<^yPzzWt?**1a}Qf#f;Gc&V&$Cd~TW=P)Bv5Ge;N)dFpwkCiun!
zShWV^h^_0}=77}9wDC9|NJ>a(-7-iDGR$7NiFYDITstwOp97{r!U%rXT+voE+@FV~
zq5SIz6z8vQ=G-CN#FfhuDl{=Hth^_A>e*zQ1R)6c4=|e;LyB`bDA%g8-Rn8USOy6&
z(bgdqkw}On6Rw}kGo8s_-L40oC-B+l?lYEZjk*s<pn%(BkWoGwN!!AU^h+-s^FR6|
z|Gij|<X-`h<E~=5!%#0!_(HK?>mUv5((TI9x<$)Rr8`z?Aj_erAV=%>;ifqQ6W)KE
z|77UNdgR4dhvjvL;3WRc7;B_PV-SqQ#Bh?F)NXg}1QjG4HroGQE4}qLG@#cU-lW0F
zVfk}>3Q*K9q0p9R8$-{`{oU|*YJ5j(=ELoZtB+(!N1s3C99QeU3epqA$ZlhKw_H~_
ziGAmDym?&sJ!PSz{oyB=@Y5T@VqCh^VKv=43)}OSpz;)Ct=y<#Uk3S3wYr)>5orO5
z`fr-$YT>(SHTKdaln$b8ikIaYV9xj47pOocpg%>9OLX;^D^nScCfSb5<dB*go8<kT
zy26>|ib}w_Z*)ITk}gh~SIYK}eU(ODQNq`1hsMv_*7V;N-%qz+Z?*dcoQG!zRTc3M
zZ=`7w^Rm<4t;3c|Nmt|g`+;7IYh7@Qxa2_(k$dCU)lzG=fUw)s`xnnJz}NGkrP`7i
zfCi_O5y26LGFZ?93d}X6d^o=`eITblXq6x;^qsKdQBv^OI<vE0r0H<<JR$N4IY*c`
z34y8QQ*FRv1e2Yii<j9%omJ6vE}aPA8NAWP>+j=T#;;)0HZFU*K7mUO4KMiyyP#RB
z`T*G64+_~TV5>wG_@--0Feyt3LjrZ^k-?`H49mg<NSmZ@|2hT$?!T`~3_BpfpM~w7
znw=iaNU?uEPl%ozJ|g0-hg=w-1FEAl{^wD*BzG^K5#X@Nc8^X!$T?o#2T1e-Yc_7k
zy**YR;6Ysn!1ZzGcu{PpCl4KrV<&n0_nZit@AmMVrfdG!z`74Gm;iuPt)j>m8J@~Q
zg{9p4^W1w$4YJI0#0QM0)lpHOEZHqd-U!RaS(0y4L{FQ(l3=^vHPNGCZ<n!~>iVzI
z0ij#9i)(s@jy=$S6d=-hF&YLx$_wzmINH8!S>yJ1<!YgBOheJLzC^j6AIjFjOAg=q
zVXD5WQWY5N^wguj0W)W*FI(7Yzk)&Oe(*N>5R__^eDih8ic6n=_*w0M8Ps5<CDDRT
z<~clX3E^>GGclQjokb?)H7XbS76jSX8F=D;=(~lC9&P3lrWBXF^L(9Va0$4g-x=jv
z#=q63g5)JRcyErw4_nPhU0wE-I`7HvK|$gD549%C{%;I`|8}5LQ2RMT5+|(M4#2}v
zLfuY|QOI}oo|3~M_-j8no<hG7)4qsk3a~yn(!Ln+iEymzdQ?MSiOBXAHYPzd+2;R7
z=UPaW4@a=3NiSu9e|~}P_va=*)6?T{>F5W1+3&V=9)XSpko0{ZFD=+lTTIfR-qg3)
zn{F0Q0l*8Uq<@bLtzGYNc4PA&x4q26xjn>N*!Gr9#sv`TqIR(rGu88{i)z<st_n`B
z)}rbNP^mvh71}M8eCG+N!1jhqtBHh9fdjnmcMZ^>4*hj5dJJD1A;GQ5eqijs*%Q3j
zUT-;cWj<?nQ7(dDo?4A~TO*-s>&$E*zZbwnFGs~mPiU<-(ngGdGcI^I7}lGWs1;lI
zl_P7F(qQOnIdn4|sVH~5$HZaxtu5#^zY77>>bUuDnJFJ4)_$yj9)*8<HqHjmjMQc`
zl&#!E4SRB-2VI2Vg+bCCK;&)91McnA(i(J5eV<M3YfsNT*=NZz(LQP@2?-W}=+erw
zj7c`a;)DIKWXf+29OOV|7)+PnAesnH4xfv)`yPhF264v54)DID9`Uc*|9g?mh2zLY
z58^sKXJ470;-D(L<|6M^SJmQR{{H*s289NJI^8Lf2ll-llK-S$`GDTSH1d=%ICSVT
z&gfbPh*JAV!Mkoh#Q+I;b)R0&gWfzF?($F7-aJ!XY%Xd~d-Sv@pU=}5E8f4qNV7%F
zR%TDotmK|^5~gQJdnS87^zEIC*Aw3Kw$ie*h?=RGKzh7)`T**jYQ?|x?1Kqv%E)in
zU{AV%EV$K>4fRHUV;Bzp_-D7x6u}}3XK+lSh_^hN06WVMq>60TT=c+$=#?Aeg&^%a
z!;g#ZMg9ZO6#cl_+;m<&EnVPJ2FZ@GjToe%fKmJ4gg`L^U*${z#v1GZ<ac1(3&049
z$iHi+$_bc#D*gsedDMopQQq}Lztk#uQ*J<ifhxl`hpQRJfFFeSK6s6rntWbL|G&nk
z%77NAeFcs%zMH?OSD<o@O%m*|mjipUwnw7yTWf_PU}9fnEw@DB%(E7#M9V{8;X_{p
zp~2zzHMJc-yXfh7sa>301=B8ooOi*I{{#0?HHBoDhK?b{cxQBtrVh(zyfjyE-_Q?0
z^(#>3fBk?e9XgS365Ry~vWCEe4;yUpI2NylaF;PpK^`2u6jQVHH^RtgwG+_fgKq&S
za0$vkZaKf(H?aN?NJp~VxtS<^X*fXwbGw#7^DVG?9z19G)3n_~ebm#iollIrp=YUn
z438cP)ll4iU7`n`pn)4*`vB7(@V{MrPWJ+|sJ@(gv{e29f%}Dg<;cFTlw#&sS1ZWq
z4RN1b$I=L$OOr;va#`0Bb!gMv2fkaNr4)|u_b_4n!HRQk4Ah^8`(*E|yc0|IV-TvI
z|4`R8oM?Cqf!Q#D4E^9c7w2B;uYRzL_r++>>D^+$`=9Y?42X@#Ul?u0fM3gE!8?sV
z#oIl3{DGbTQCR=22ay(PS3%<CdQ@aDRjmV?*hwWzf44fE$tDI<lITgSEg4evO@mcQ
zw~FW7e;eVATub@o{Oa|8%8Guq<qh$6`6ouft2K)95TmQtTs%atKdan)NOiB9O>`Z(
z6B;S{pB5XxNMV7O_QRIU+j*(xFyK}3u4s+`{Y{S^!y8am2_?$-PlY7%Cvq%AWw(2s
z%DQKWQPjX9|EYLGp7L7!-sGFFynqRm#HDkN?eV<xA<y>w!8-DOx?B;rkW(Q7U#<te
zhf~{CS!~Lo&@G}5K?($CL^#ZxDp4Ef)cPSQ>;C7ZqvqYjkKZdUMd8fk&ru>I{Uo6P
zLR}TRvo8DQyDUS#i61Pco9vsP?k_B~UwSfLfYYj1qsO;T$^xt}`46CbwGXD<;?H9&
zkp4jUBR0kU<1e?JFg_BWK`$vkAUGt|jjUNksgEs`qr*d?lA<)(WDyg-50-K;o(4}Y
zxI&^(@l%8jYa>*i)(S3oJ^*qry%hn2|0!h{NNl?gPKAtt|87alA92kWR&n3%cfl2#
zw7Yy2jsI=tnLN$Wx1z7^xFGy*@;VLL2fileRt53=>A^D+qzoPxr!m7$p+<{$0l%;D
zrxCED2^9R_wtNxstrp*{H&i$P#J#p3$@0Y@9uoOCox(3te<1?7a4#OplJ`NINg+qb
z-vly^6E^cZ20+7?9^I1H8TJ1h;~-eM#E1hHE*&i{#JB3=020)B$?!@D37!6Mf#X;U
zQjuG=6HEI4x63{s0Q~=TYxEbK`?&rrG6Gu_@bpH0EA#+-IhB?J^DEx%p{M#eD1HYB
zO;i9wJ4ItfBNP#XQ>RmXhyL+vQm>H?_#OSA@CkUmE8=#7^_KAYT>!p_FMKf!MxV4c
zlFtDPm=vEkP#%7C1bTOXS#%6ybGCQSEkVb)alsu^z)$RvocMt5xaa2`d7Sd_+rV+^
zRZmfBN-#+CV!Od){-)hR#Cwy6Qa@mw3f%Q|Qa1|x`_y4D+BxXJe4RY#C1FCetZ_x4
zCfyWDi6#_9=%ZkeDDh*iBP^4+!**=jqkOLZ(<Oz%w6Du~QUov>XIXwD;L{hj&*;%X
zAMwJ0%y<PQNp?wdgNQ`^k<w4G6h%rMbdqzkh#t2yuBjE}^-XQye%lfPYYiMNfd`RF
z^;O_MH~F@7BywCWeps=2jQGO-HHE8A-5*blaY=7O7b^)t$;s{Sd<4X!p;Or>Ht8ze
zIP-@4^pz$>1@~o!-zE}-JtLBoq$hz3h`XVr9G^@Ba`uL`F=dWySvz(?{|C_HWd7~B
zeB62mTn1arZlgI4zh`+Qm}~>_*lNRq7RaIzR!Hbj`5%|b)rVnap4I*&`XNK^a!SxR
zy%R6+8o6m5G*jSO;oKr_zAI)DSidn^4>JDwKZCjo)|&Bs?6HHj#(FuGh9{uNy+M2t
zDISp_nClbHFW2E}N0^tnR9<^;nGCYZfZFrmyMYP@eNaFTfb*e+_N8ni02a;5-PN06
zbjG>ChGcHc=3S2!-dY6TT`2HB7s_Y);K+yE2XvIjMHJ5^x+!QoOQAu50s#_n)JSFT
zKKFf+ZdExCMkV0P=l9sM=MFqt&^x8NFmn7E^fr?B+v*T=Yq4G+c?N@VK&e5(l?%~-
z68#<!9d$;uIT@g}l6lyIdEu)A9aEn`dM5gJfAnnBWuU12>uk8shF_{cy?h2<PxR}l
zPm8ZCt*qhQUubXe6a~y~1*;Q4wV7F<(%?S_^WLx;=LNqZvAl(q)R#7^=t~U_ln+SB
zxbXwY{1#Oq26-Cuo-S1Rk=5C1yWtuLwQi*qcIJ<p#tefneR3S7`j;3v@Vk+JY9G?x
z^y*svY_YzM#Yk#}5IlDP&3+QEJfLfpg97pboG;{S;7#-jc;iEeEXUh6K)LraStuh<
z(oX&2xck;c_LePhVf6H$^l)D2&$du2RZqIY7nAXvm=2Jyx{RM9p^k^wfi=oY(ankT
z!0s(zh4hWj88l=E?JZ7ws?^>Iqy7v3<hHliQr}ukT5Jzb-NdO*Boe0*+cOvq>hKS(
zrZ|Sv`G?Ky<TD9MG(V9LS^sUop3tB33<v!$z}%|WjQ<k}9QX}%T!`rdx>z59tqyuf
z6BKi9%)T0UAPB%DK;k4v*4P%OLX>{!9=JGwaAcD`-wCUGp9R*NN%c#M=FA+JdTA7|
zri}EKa)BOa$obZjLBsrz=A@i+IdoMFYx6_7P}VgrK9)yDe_#D1Ai|%7pQatw|H`**
zMuLcvJ@MerC^^H{FX>7G2iu>2)}+f=+^u@YsAXcE&Hz~IaI1nXA*O{Al3HtAdFQz%
zyFd4-4;Vva)rcx3BMkfX3r$44Zlqr80|C00do-R;PW%GrKkpW46*n-!_aT}=zXBh?
zM$J|5KS{r-^aDKqhA!j`yhXcJugFQS?-!?N2SIbRyRPj(tCH-AV^X%HL*<Jt9zHp+
zB?x$<r+<@S{BJ@3i)I<7K;1Yk%<CSlqBMSuwNeY+Yfcz+i}j4CE9MNB*y}CQw|nFF
z(E1W&Jq6w+g8G*B>R6lk3b5CMDqXq@hvS63!m22rIbRLYi1<%JOg$go4UHqc%$wdS
zNLrRd^ui2Rux5=D1Ui%jZEk=113ZJ65j#qf0`5QZt2mDOZw|v0NIiCDdnqZu;>&mU
z#Rgu$6K#0+9qy_VctiH^511VK&Ns{;Xx8%nF`_UFGyyrR2XV8ezvFc@z(3TUQ@#Oc
zFB#`xQL1_f*!~^Nb)bCOIvSb-T)7~8#Z2EOX19*EInIQmt1NeZb^}^~vFC&13FVuk
zG^jod@~a8(J~%?Wc(PU^yu?^iyu~0$KEYN;X2b_uG9Za0IRjIKc@Gf-khdfxv&-yg
z%cO7F5o6$cH1Y20-di#~IIe|l_t+QZQw-v-yY#Kc42ARLJY{0zLJ^E@TtMBt{rMBa
z$37M1%TF>p+6Ots4$y%3ilslPU)Iud&A<(&SKvK%Mt#%6dOK~`gn562Va!wYVoFxU
zmx_r}Ss>v3gR}dU4!zPP{{CMO&55p;tR-!%Zf70rS@zI&V}>T6$_T}D=AdW0>Jkg3
zPN;L`Ni$Ourb~L5UI>(eqKmRL6}3LtNybFPh@v7oQU+pvm`HNZF>YtZ%n^Lry<L1)
zN{k79p6JMd&$3jf(PNB6d%nSSdl+<|?^5G1<8wU&>29JgLxq-qVIsl=<78aFYhvbs
zz5x}{1NX%SjPPgc7!l5cZ0hJYV!7foP9lnrl6>G6cnywcxy4KsuPtW3&fgANdZC1Q
zNm8WO0bg!YF?sq-=`hi9>Pf29*?GQ{vBCK=O3Z_zhqp?k26KVFkcj*_ANo-?_C~Q=
zO|&aw5_<(svS@^Vc1Jg5C7K`%m4$G6R%_Lh+V!CY@a2XwEJlY(bU5$KiiOT`e8)D=
zcK?M(Y$H+NC18pf7i^UtD|<9be-Qb^Pk=b-4sb?`%Oor}DJh_>C=RnU=d&)WocI<&
zpq5hOU?y4#dilkM!(3a_IGy#Bz4MeNVaDs%FL@en4@Z*Ikhx$@Q59-Paz{mLFqO>4
zM7p`&h3ARNqX>Qar#q#k6sKnAn_btHB<Urxtc5OMw!2Pw_9#sBS(*f4es>Eyy!f??
z2&f@Y<@xti8t_fg|13=SaUV8zub1)!8+DX^B%e$9yUM!j83MRq%}Z=EX!>;})}$yQ
ze3N>&F)?6|>b*$3ym%ZkkKuy3_!e(!5JTII3XKf4)Gqu`LKFw9<v5HXM-v_i9xg(V
z%FDE_7g?eo_IEE-3QE@;F$t83k{?Sd1E3$LFB!@HEh=fqa*V<d3fZ^&B;ar_$xyo<
zx_lt0^Mb&x+XE+CReMb{AUG5+KQQ4c{K#mR^&(TAc^^|-xs-s|MDD|`P}@DvK|Zu`
z0h&#qDS|o|4j-loO*?($d+rFsiu`&sikyhQUTFnulWNMRiscvCDM{wXj*-Be0l<jb
z3rr2`f8n7x)%D=KG2y%I{T6x*L)$wnd;GC4h>wPAwGl#+)`ZE!R7>TT6CTzUKJ#SG
zHwZ*!i2?fi!Hmz89%(k^nhx~K$!2)a;>dv)arm<c-v6a5lEMsmsMb7v#x8zrbiIPZ
za@&(O2xr)PyF;Acd}`WTwKzF`0(N0APgats6iw_uTxF>0bJb*KnO%avXB`r<^y-j*
zsp(+jCK#b+Cm_t>aPaEm=*Or2O5v6935$?=q)c5KRgZy3r*=szv><;|WyPW;vAJ={
z{;(r5Nuq3b^%o^pU1<&7ucVoI-Nd#I8zy&!`s$M#nxfrb@W$u(do^@{=)gFhfJWhH
zO_wq~oy;VNlk}c*h{QQ>H*j``&}T~j2|S|W{X+Sv!4Up}5YH+swvIbSNp@lH-zJw{
zy7@hXHT~VO%L3J8log$Hn#ABr<s47yjds-xvS9Bbe2NyYYq4f^?F7}^jHX8h=<b;Y
zdg=;XiYUB-@A>2y*sk^lXrJR=>R?UTJaGzK@$Y(t$~v*<ABy(R86Q6;f35Y5c`%8x
zoM%5akPSv3q{r?rA~elYAR&?KrV^5;yyu!z^x=y9?BLiVvxNxvA+~NnD1w8hx5kHX
z;ggg;tz;unJ0AOSqeB;CSmCWleOvRQe#A*cq_RZ0WtQ2?PiV3Z;2{ky7Q^)`ONp2w
zsy@wHj8*BztA1ZJTFETp7huJaQv1_f6`hVs223MOL3V1dSD(<G5dID$Iq|Pi6=xxv
zSyTA=`IU}&HN1UTi3%?H@lE2P^aZP>n}3zHV&>zKDg@9b1&qG6_#Ke9$|s(LF%_`q
z<y*e>Jr*s7?7J(Bz_-363iik?lJ&rm#GOD06p489KKD`=^$Lv~e@3~7VxPCv&TL^u
zfp6^*x29HQ4okDhOcyM{9hB&3Ojz!=rF{mX<WR4K0>YNpcygDPM=+8u@*YXDk>7P#
zsp*wI9Q0obVO^-GrI$-(da(32{gW3_Yl(*0eU~^fq7rdEFxylfTIyb@V>eg|ldk~z
zX?f>x(Jk=Bix^qphX-Y0mFV3P#f&OdjR}hd2D?A2H-@UMqEny@jkw>q^}dM_s^N*Q
zjtA;~*USQM&FwqI$tCjO=q^V&bE7V_=2C`ECmggg70V)jSa5liC9fA5dRY+lsot+K
z2kKpAQl;x1U<0wyWHc&rp>Z3c%We1u7SaFXuY`@74d&3^6T^;ltfJC6(beAoB>vja
z1A^WK=6vEdJP|T4jKf@l?TRlaT0b6%BvcG26n%jK|D{~<09L>zN1XrHS+mU{7mD0A
z)wVi}i0pff-TpmEx>Ox=JlbIp0Z9`NkLmFD!09s_phF_p5D#@OG4j{mGP3L-+jnb>
zJ?IHLhWGn=gZ>|uz5=R^?s*&6;_mLnDeh7zTHGB9#ob|X_X0%<6mOwGftKRI-HVn&
zaQEVp{qp|)UrusP&e`PVW_EV(o#%OG#yq*bK_WAE)HxS}MO2@2_?ucgG9MGVD;d>~
zRh3e$G|UHQMcDI*xAwkmT=LhmOpMlOv5b$y!$~Zqr}B(W*~fV;@d?*r4WD&sj7zAi
zON~2xlQl6Y2@Yc#O5eun%{1mP166*DZY1sHwFWqazK1kaZ_Vj8f)86?@8iBmP(k@8
z${JA;E0mSF;8B4BedV!ENr1Q&@-Dfhg!r-6CLP-749C+B6pz_&p7R!{YoZ$)5SHCY
z+nFa~akXDMqJ7b>B#`5|xOjmxoc`MT_Jd^5gJhCtSo8W5%JN$o3&br30ziy??ZbC$
zG{^3Wg@U7R35k0#&6V3G0>dS5f6&f+i?!fX<>Z@!0x%EJ83QimAM?+LN~RKHz(PCV
zvJMu0_%F<cBa!^~X<neCe-e9&VpAaKZptST=a2XiUfp?r2jP@9uTk)+-XCN~1MQ#c
z%d&`~fCJdffl*9WG!0NAhzDM8^#G~$Lq+CNUSpHzkhQ0FjHizmkTgBb7cf&SSb@?w
zM5!t8&Yc<$=KUm@S|SRifUUF-fi6N#_r;@kT0<OcXrL<ztcQ~rR^j|=Zv&DS0|ZzQ
zH;$1`*qnLsKGAAP0)7giQ+W~U>Y<kyAG8@{+dsHuE4su0A>@jJSC<5(iv;f*Zw~w7
zsIC&Niqk53uA)_=+BK^ThjYLEc6MC0ck9=qk=)};@L^%g?D>3BZz1iy4-aF{ju}8p
zCN`LN!hfLS3(#NhE=|4&xpY|)=DxE9*69yN|8o90GY>BmI<xuDCwve4@(Yuc?lG>O
zq+`DW!wjHW8C5drN9yaRI(P5DF0lo!NpH&Rb%1L3Q0>u#4Ul#n^s6`QkF*f_K<cCF
zJMz`*cm8{LD{<BHXVHtt4J29LM)p>Jgscwu7A`m*T>Ij%1<84WW{ke+fz)n7{0mm)
z2dO6NRE;-&6U;6!t+R=wvhS$muMHC<E(^Yr06O#kyfzH1!tEdJ9KlGQ5Q_nDD~sx%
zem2krA->P`(~XIB^h+#nCYx~j^Q?jcuZc{F-m8sUsUTEJ#5plp5JR}1^zPM_)J-TK
z$_6oNnesncWmfM&JH}ce#?2rC&%4?u=2}w<{#c=)?hNN-Ousk%(|x%p`^AH|mx7)+
z@xVZWWb82WwxHOA4ceaxgZ9`uwh|#H-TRgdHI?`d+0P-aVv8@|WzD&;1lpMqW_Ghg
zY;h=5y{k!&aB7-Qe!N2ZD49>>t2ZGpyg2c$3T<s0PBaJgs9fv2$P|oLMQA89^@@7x
z3QMDr2U6e(d8I^X6-q#DvEuUw{7RR<l>qVK#%AKfm{knd2ad6DU8roWaAOSBu6h~9
zq&U6PvHY&##5)BC4E-T-1%lSwVPwXh^w*ll*~_lNiM4ezD8XDvlhd<m;g918HEMmB
zq#Ak!1IbnS*Edec?&5jzWKN1~!va*Cw6XTWl<3KTt3O#Q?W42Wmw(yWh4+xv6994?
zBt-;H9cID(T}Lw+{BUErYVZsHjf-zK)1UdBiK-P~HLNY@8n)VwXVb~+#_Q(h&a6d<
zzggWvGhx6l{B=GXIYwyH{UZ9WqMhg!?ari%?H_#Q0Qr_H#k1zanBxx9>o!J1Z$#Ge
zysl;f;p~7Jb+*#>u7r85;7PYUAW-(*TNwWf=qQrC@{=X>`Ptp{y5mU;j(us5zS)4&
zO`tPPd$*U&;0J_j@2MZt$nQoY^f%Al`0+;ST<51X6j3yzN=`pmd79VY8}FN#Uwm(6
zBTyFg8r-K<eiKk%r@znr=ch^H4CF|DG*JR^;MRBK&*DTgi}7RIazoZ{;N7p>Cfh~T
zd)}EJ0Zc3-vbQ+D-D<3{W`5M^*E2Y%GtDX^1+@OTzoU#H@WuF$cA{B7{l+IKQ5L%L
zu9G8FUCf$VgD<T^dEU1q&akSgun%5_Q{<yz@!IO(nzlzqxkwJ8AB9u7{NBvLD?)3c
zszZe2Z3OXwe!IfD!ccJmT7cj*xeU8OW6h&d>QeljTF|yHiHlF-NWFNWTgc()^Cv_D
zfqSNpQ9DII75=o3cx^sz8E2e!Cy7M7rmb5a5A|Ut@EDuyQjItxd{T*`xbnl)sY4!r
z_F!&4Agf^m)!R{#n!42+Ig&rsFXvm$M&fE*DtG7+x-OKBTEmRl76|#OiCwa&Ih2XN
zKiz$8Q>WkhGpJ{nxTf^QL))*Jor#~+b>=F3EAMa1QIe+QIV(zylwxcJMCYU~P}8!o
zG!{5WPfLHFI(|pFVr&@eOcpyt9YzHl<RWLZ&Ma%3|MK{ytknJ_!#n=FaxvgMdSNoa
zV^LESMbS8;U+~8nQUPSh^Sh5}I&-P(eT?!`M>Vgt5oxl2k4S@yB#xsa0MTqR`l!Lx
zMd*@D@HMGgk|Zc!)HWZ5^~jHMAl<R7V7Nlx;}NrqX?QE%YBvKT{N-mK1PIR87ZZbT
z;?V@}Ae3E86Yf4vo*@D~<il1XF3I}!0~k(a=282eUC!#2<063k_)vA9&3@a=7Y>Kb
z1QDb~b2=Zwel|jn5YC@evhKvuq(pswhu&RJoa-twsef)phVW@Fh?tNF4jU3z8{701
z3~8}gGPOgO2hJ;2Yf6gk6Ps8vl8X?J*ji;p_wy;gryF(Hia76cGHwd>2PETYt1sCN
z4dkAtTD6IgMRNgj_IWAf{v=yD5;^a%n1$bwC8+kKbH)Tp;;@^f7`-q(Ony?A<p0k5
zp5|(ahjg=S_2|v$)R3Z*DH;#Oa8>_HYGo!ys12>5Es1!QUw!*`%iq&gORv7;E|uPW
ziM4a4^n4NTSC8N9bSsXHEYMq3!e1K1tkgzzexAid!ub0HuyDTMoQ|V+_vHITS&dKr
zGg#wQ7SRSco{SlmtZ;l}Re>LJto>o4nYjR`p&p$G>0Jl(uwreG-QM9IdU_9at;yR0
z;n)Tod&zymn}sCuppt3C-Pf^a9zF5Wn+P!@rWupn?U+gS>Q%BeQ0&q3tB+_SU4E{0
zC@;aq*|h_>OcD*$rRPq560wT83u&55O5n5BIn484GufB&j_GF6TmZIsH^qKjTA=PO
zD4{CG@dP!h1qnjlsd0q=cp6lCsc))0sW^U19k9f^$TH9UI}*1aaw6HOQ=e<`)nVSI
z6}jr-(<Vpgv2hGz6MPT&IX;ozDTv*%f>3&cfej#_)LuDV_WA-(5G^&vS#`ulJCjjV
z)<I2*Gpd?z!bUwJp4e9Ni)E8mC4~0^qxtMMdmp%4nnIK4^se+)s4Me!EcFi3O7;Y;
zhVK}PzQ7SEch#r*D6Pu3zh2z1cRj30VPe>FmN5BA-Ek%FhxcDd>Ao|HqIf7?Hxwv+
z*$Wh%iEVm*m+Gw+Y0KV=+`lTex6NPNrB20A7Pp)u!4VD2^3KJH2V?)Pl2AcUo4KZD
zjH_0wnV4_`i%cq2Y1v6-K0S2FPJj2@j3N!TgvhSpN9qlY)TrmK-0DiF3{#B<_AI}m
z%--9ViqO^-OQ0PNpcfv-zyLnam}B%1(gPwH)OYB|e`g|X7pTxn(Nd17s_zGMqTptC
zrn`ao!M7G_??GQU5_tz<IRUaaX}1Ni62`u_1buRF=rkCr)-PfjQv3Eswgqp-MGks@
z{B7|^ekoz}TQZrshkbK)ro2bN?vLL5E55SF%#09qy^G^-hG$obS~EiF7hc!u0DXQl
z*|20|Bx6Jbe{^o_@h<_Q*fswzEI~&-+u4k_Ca$NZ(?1T>bvcBB+zVWr0_j~A$6wbu
zWutXiYAh3gzizw1#Ut+aEKpJ#4$0zO$S`F5=v`De)2<-W(Ts@PG3?;RoGXyEx)8xi
zkdZk0S%B4<%6LrZ`s)wh3GUJeaB#+Xo8Y=oJL-MKSjxZ-feRaYE-PL)8@nHShf$S*
zxcgNVZ^k+r2BX__i)HciwV4YQiVCm4`O$n~!u1dmq>UG$^p4U^{XLSHE`sH#XqLwe
zWfOlEBa-qtls%74Czr;3P1kr%6?^(sCOa86O(kdF`uWFuB(n^_yeqI4XcSh<!wuXf
z2t(G*!4tjnpb2>5oJ2>YG2s(8Yv_{9pW*<>cC4T7sg)EvxTcc~XIEc$bTIa6EbWk9
zW!TZR21JZRqy37$opF|=m&W=!rnitX<!$&kYlBf*LAemkWfx9eOZV#HYA^M(wASNc
z4Ec>lT~p(9W6)peIic|ZFTRbDeN(qQFZ^q}Twm)yf$gL7G<VVMJc^x(l5RUb=uxOQ
z8-CZa;#Xy`40}xzTjFS+g80Ys_}@Vduf%Uq;Q$=FlYztTO5lnP2x^<nSlY~|2-<(r
zEZ?-Iy{_o1A4mv++pBHDk2{0u&`3sr*pyTI96qTST!vbbG5{u($7D*ULcGC{!g^rG
zp&P60B~;V!N=zn;#Xy3q-Ra{4NW>$t2~J91$y^6bKGu)_4;R0)6sQQdd+a8gGW8#D
zr%@UDn2tbp7xY@xW4<#8i;BxAfF~zJStY(VUj7@sRh@ZSjC2tL9M}p+&|UkWF2?sL
z!yidat-1r?TJJ;b2AC%(CGkvr9X%CR$!L=*=`Ek!4pZaxn&^vDC6$%k2$@t$nEh6L
zh-Z8<#d(KMa4=Sy%PWKVq#=d+`TnZX;F7(=69f+i(cT2BIN4%B*9wr0r*~cMAQ*AR
zBy@Tdg=r*Ot)w6|q|_2IiQ%m*=A4Bdl6f1CDqxt!L4eBh(M#~X87pTKf9TuFesRj>
zCc%})<F$o=ySFa^wy{fp)f{k2$8Qh}9tM}39IilnSQS$?Q6G5CJ+Nf%=t=$~zi%xp
zFzAA21LABl81B)b^Wr<~8G-?Fx5LFj@SRi-;6=q{werEBk=1svkK^p{U1#0#AgVK9
z0AC&(UdVN<Yh)Ajha|B@$1E{mG#R12TwD8<nGnLH@FCn$b|DIu-+joD=aX4a<)9mo
z#<BIWD{kPAl5V?mMSg7LP;%2mmG^8KlQ>NZi|LpG9YMoH;>@w|FFT>&11ZTDHskxZ
zI(s*B=jRSwaHWvc65uCrU#to{Q`rIL&VhtGf7vJHfjgFJkZ^SJ4)DKszlQ<6UN(2o
zwaaIyM6S`#0+Jd(h-||lJUT<aw`?!G0DsiN2{rbe{&l)-K-I9QpH3RxgH}DtTk&v{
zm%r<>3uVhmh!OF-2KU$FWvnRb(X{Uc+4O$5JaT_2VDK9qJQA$>UnB?)E?j|c!#r0z
zl(n|z_5pX98zApVrdj{b|1mde1ZV<p^-*ybab-B~k~MwGP=t3QXUqt3OE`lmg3_kS
z*|chTS3?irbR(NMjSF>iF`5aV9Xl^O$)KrA>ET4inu-prFaCuQ6U>W`tzLJR+5M}U
zn`3_k-<MVAIXwW6ZvHhz^YWwpBqOSW&eJ+#p%;lS`i5h<g!92<b8lwtVb8SPU}%fs
zXl$zCe;$wy{*a(}guvPV^8YMkaAzrnNH>fyA#*9JBppjWA2j{grtiLV9klY@bEx^K
z--)az{Y1ff*uo%vZl#$1J=vYe|IZk!88Si#KpL(-(3i3Tgok^WJ)k>;;U64iDO7;|
ziF-(s;e<T1(p;!tl%Y7YLa5jyyW=YF{)t_c0Ql;kTxwvx2<N0*tBTueWx6?n7lGZD
z4c)za5dNoNGLGbr{d`-}g0pfSc8v~b{B2j{N9$0x=G_g;&s#b$@2pH}CrD)GFrXw;
zGwrj<q&ifbPM4mnA@^5$b0$kKeL-ui`2HnxsLzfT1>4NE#>fQFT0#D#_R&c}-!o)9
zm;dU*k@nQr7#+M`D1FwdGJgQ+s>b_3<lRZ5i*}jd5cMkR5K|jILpEGGC>JCE^B-bS
zde`O8kN%aJact>1AIiI!z3<}a0oqVK{XEX!o%(7oz2X~DpN8BTv7RcPb!dAm*^kyC
z?|FNH_8Fdk5W0%-KAG*j^mFQrbb++rjth%#-I=p>`(<@PBo7r><;FZlI-|Ya70J)a
ztPUSZqE9=zPs&82Gp&R}ilzUeS&$Qk<*C>_I>v{-&hcjASDm>wxTGa12VR_PPwBo+
z<||DTys*@yIlR@@w<?w42wO&kAs=R@zYgI>GeQSz)t}=0s^C6J1D^&!s)83!AdGw#
za<{-qI1=O-nh^HMgKZ8}{NiA2K=<lpjl)-WU4NK^Da^%?v%17ZNB<MnHo=L1ZJmCt
zo}TG4XZ@fq-F{95{*wYQC#4Yk+vv@`{c;iP*KxD{f6Bm%b$})NwRZ`PJ&i&q$8KZ`
zdy9sKnx^YEKM!jqymtqiqM3rQY!pWU&c5vv#XAlXBulF8(<<UffJDX{d4X=!<Zh}T
zaGxK0q8s9{lzb+;{%d&IJAwrYb)}t0lM4__95H=FLE=R)1pu`>8+%Hr^<kDePbSeY
zmPTHsoJROSG~5H{=mqQHKhKLVK<AGzI%Q5v#HV^|>bKOr-g$2FSy^8VdxiJ+W!8f~
zeK}E2vsg!eCyTTjAuyWA`}}?c8><H#<OPfu;GAdE7tsCZA<MIj>b>}eOc+e&`X=-m
z{@>%~G&X(%t2+P%nC4eyaR{dBbRpdt4z4_#g>F*r(wCp^Fz(>}pM*emUtxSG)Tab(
zq(+u$O<8}X`d9w^Cup7^D-mNcNvn*q(fA>@JtbC;jK93?VQj44w~iibY6b=}vTrfq
zLnP<`FCnga2cH4fI)D>D)C)UyJ$AN@QdI@^A=Q71wGh7(Jz>wW`(3ayDx7(8(0#Xn
zEt*AxZTg3BSf|VH4vOAyuzTi7r#}!^kCT~{UAPWdUII0F8K8*TGgMm@69jNYEe){x
zz}WBLN1S!Y%*ZzA)T{<?<dpS04kWxZ%ywNbwn7E}%!g`SL9Fesz!U-4nCB?4hzln!
z0n1<x6j0TuP2|q~hrl_M{rSJ2MY`kV0fEDbXDn5QJG|wvdvJI25wd)obpv1U|2rGI
z@U9SRgbtK}A^!un5`z92ZGOGIQ{#zQw~Uz-@>q9^#9rtF24VH^%af)mqz5k9i{b47
zh8l^U&Jw_>2GAK0f{VMfM-Bg*MW|)yG8W8NRt;H8%pT6yTG_oACWi(KiCm_=gkOqz
zKfwlxil;Mndj^=6SKWPge7dxos}gVZ2eK;$mArXxl|UFBU)$p{w%LP+8Z~9h3u@P`
zpc48e+BX#2R9M~aU&c1mRCW(fm?W+_m^0AJE&ZJRfm)qXqjI=H3=ZcxE+t(-R$o2?
zsk*78pe?r(N5n0MD*qjn2VvUe?#%8OG(DMx-LmgEo<pqhi)>?1gAPMMol%~1$XBX$
z6PS!G_`6}{e-b{)2MD^mj2_zKvOfnJxI%$Yn+^UX{RjDJ;>Yn{5Tj5(l3o^(79|1n
zb3{(xi4WCEu8q!kD86Y(v(S;1BAe$z^Yn~|1HyKEo86Y%8SdpbX=CDdWZlxdpz~5n
z{VE7}_qP@M62G)Wa~UJ=_L%q~e5Sf4WK6e)B9h^Mc5kO>A%OmP&Z)8#D-dGT&`1n3
zR-ty^7Ymj}aNdw%0^Nna!3U{|2Ef{N@L<C*%s3@ZxJOAV=#%M3n<vl@QFgHlBs%~)
z=h?Ra+N!K`(D(P5x!V7Xv2Swsi*yI5HOK?6MR$@ufY~$BX(ow1|NB-CAVCE});Qo+
z)aeqv19i$mN2Pmz>>?t19hALm;=hf#);6r66HR>`4Ru*N28Q=6U%-BOBbcFsDK1Z-
z!Fw?H)8#-9aB$*3rvpENjnIJ$JE~0v-K)mI!2cbhIJx}-Ukj#2?6O{^lXlv9_6FTq
zu7gy*HOZj&r^||AaMw+b_5wIe5uf?LA-Zs3rYUeOSy?$;A!14W%v%;p_memptVIIC
zzg2-r50H25y8pWYym+u|yO7cU@1(IH7^#6|Ti`2~c6~TCu6n<@4^W(dU+hKhpf3@-
z#qXw;K%sB5;H}EeQ6wnv2kaViJBP46TT0l1i!M1=Ap6b~I^3<dEDbnt!N*`wMBrW~
z|HR-wx#qq68fZ@p*SP=#>p(lgXZSgRf2rZmf6j9`FbyAV??cw=I$ejb1=?+mez@}n
z)S?_LTrfNXZ?m%k?<|=@R`6r9MbcWx{_N^Y{0jk3&0YRgmp<Tdn18w2*g1(CFlk7#
zh;J2~{Pi4q*!e^WpBo(kyef`@Ule!)Uoks>JHa8pR6qw88PrtdWBb*gfB{O-IC`Yi
ztJz?k1rzbQQl_O7X+91&vwqbg5<rwLck8^+(FDLE!sbv@S$Zc#%k96ZiGShag${rt
zOJMWp6I@7YNdkg%1-_B?x_4wxWNL+NI?q}jj#i8Mu<l~T+S-4>3cN{KpVI>5=1#`)
zjWwW~hE1M?NBXSs#NfNT@4i3lo8i?^>mh*IV{9Q?6|rE3)`FgmwdgY~OMAv7T&W9H
zLflDwBP;r<NJO#tgWE(u*`44exsZ*bG%|UDg4eci`~|LjE`O#ML~xqCiEJ(pOI28_
z<UnXW)J~t&q5WE2q{v?KK_+D^{E|N*nG5({DPor*{SZgr5VK%CL?U%lM%Hq`>9eFo
zO0>uX7O{q9C(=>e&P010+oWn-NUA+o7ri^P><SAEe4GskzTd6jk9(En5Z*#8Zr9z`
zVD*WmAcMxlZBn;ydeQ7A9PA+iNKlQEz!SL54G%!i@<v<`8sE2?h*VzRN9))P$bX8%
z!R)c|iQm$R>JW1mffAdG$_3He0`AHLs;VC8jS?`+-m9w7wp*a7a0Fa*%zl7t>9X$t
zq7Vq-fP?mqVNxq$;E*oevW1%Uoj=1HYNimlq{B4tP9_EJY7(j=Q6Mu2^}0(-0|f8V
z+Rf~;;ad|_*cVE}uXXDmfJRKL+cb^cU>Q#r9cq}ZYqtr?_tWP^H-~k|IOtuTi49)N
z)X5`wR^af<&K}5x`*l4kD4d{;DdN%6m7yi7><8n%OUl&>g%BPgzgRMgxSh>@tbX?n
z`{T>pnEn}>Z99DzmoD;JCjI=G<HRhi`7DV0IowxmB6EJ&4>-*N`o2FOe%LQ&!+dJE
zXZ%;9A)DP($7R=QryY%^AM^KU<1)uaDR6RH9qxFO!662Vsr!+}RPbm{@V*#+GyW&a
zf(Js{TFoNvh8WgfZ2kAP=VahZMWV<0B$sZcUPk3Co<iADhaHQ1iwcH;|0e;HWsx^Q
zN=#=mNOR9rhk!+OiS6<{S+726EGV(*mWZ&>3+WsNe^SC#UQ+)VkIu5oC<dW_#61?#
zZ6L-UiW9~%Sse$((nGL4Awe$>mZU$g`Uta^dkW!r0U~bT3AII0uQkobTdh7$x!G^Z
zygL3*sGErny6?=W;w6#9Tb*LL)EyQag%NP08~}8C^p+CwJjl;~bDs5@q?}+_Jk~gu
zCXJC%8(;3dVelSl#<&JpTY&u+3UpOVIi!URaMuP_A5>*N2#RTr^nt%F9cQ4^KgIu&
zC|X_6x~QW^ie>_m>qw0Ah>u%!zZlTRDCuGuk6XwiHU&G}E0s96cO9ac8ecazhoI}^
z0ffTTyvr{T{%wD3eZmNKDBVd;mCN6Jd}J%rme>MFRK4f1t+?Ter*$w#e-{u_HBJGc
zUqrti%|P1F3Lr>&QTF>fx4&>kEgik-*C5^fi|5aIfpnUjo{G`cw#U-fIJ{%kja)FO
zB1(q=SeyW^Hmg2DwzA-T=A;&&)GI)}b>hetE;Y<%3wh(2QOzjo?qmHrF?;tzZMlNS
zg`$4pMn&88DNpFDgw%>KhSQK=ABJlo>7Q9|`wb}3#(O`VNZIrjoSZ|jy6j(k_f|$S
z+=)najriDsw6G2ad255v@2W6RMQH;hyR@3|hrgiHYMwt5?0t7}zMpau1HRAN&(#UJ
z)2;&8;f?~B_bvpvWGg$}XNPr<`&+z^6%<1BraW%R6h9&rMde<%G(A#oEgu<4d@vsM
z9n<92v;wbe2-=tg+j+IKLh=9n;1z`ZeN}tIOXxi2SH94;9dM7V(K9r-$Cdx}pS|TB
zBJW96S6y-2VU@*x>D;d_c7SNS@FG}%F|7cagYPYOOqO#q4(qgd{3mJRUj`OPAuS#P
ze-<_$>sR3`YMM^YEXb19%_8!7NsW(gl^b~CR!Bn!&T4ZV*NEJ?DZxVvUnix*xkY!%
z+@v_6%`eV7C!f27OR-$aRC7CtxYhkBtJc>J#n28qWlSL5GL2M#&(qakbl$NG8Jsuk
z?V=qmgn&EYUa+xo6j*EEJp)^56t8$*)W*W?1k&RpSZ~+r*7=gbZ*U||+Y??Lfj6sd
zjY~XF9XV|(UF|eMOJTEgk(b9Ezf1uZ&ZI-3TS$|3&C5eeORFB5rcRl{S;W*fBcpuR
zLme0*Nuy4YKn+lO5PJMB`H*C(V5?YV;la-e>yNMBL=n_1#V$_$LV;E`N|PrwJ#7D+
z7@-)G7~!)ziW2;1LjFmeb?M*ZzM%tY;1WL#?Q>e!qfI}SPRJ>={<FLijO3OS9bIU1
zc`UEb=d2Q$5H*?zM=JaA-aO>c*1|+M9GpOY=H;l_fC6=k5=j@}x7TGqKxtKqdms7{
zhJILZeWvKG_D>VJ{o@y%Ldum-WO^-m4_(Pen9SG5>e7&RZ5wHJtUwr-adMO3MX|c>
zRfEa1QZt$VF)GP);$%h?vJic|WNg=70JRj;E=KF*uTNe<ry)n{l%)h-_ScB-`m^<i
znTn#N34m^+n$LR0p?VroVlS~)WBV^+X{|BP<0XTVgL^RebE!7<#;rKpXlF4tNzv%-
zbKDg#)S~6b$*pLKLdp9=68aLjin^@wn9?_^#>m|3pkZyT9i7kjtB+*U=pm4x+ndKD
zI?}LMjZ`+KTMjYQiDKx!=YUXE@+YRj_ljoG6hN;NDr=Bht68{+*}it*b{;3a?Ku&X
zHl6+kRR38UZ<dVa84tyb?R+BfZ=&W`R+BEX^^r`=+0fB?XK@lXKjaY8vXvV8{#;NT
zHs|(ZOZ1E`q>=&_Sf$cl%5T6qzry~hEeh+nm<&Hlw3cy@X?(;n_Jz;$?(XU%-bZ(t
zD`23mB>tg`EIACz{AJPWp1Io@I6Zs56<iu%zPk49Q;BnGZ~R~ET^bxFaXBKwl>Tfa
zVbLxtBI-o!-s!$2??Df(SRu-QIyI!GQVC+K>lHc=s&c=L&>-pa(6HEZ%o5D7j>6YW
zjF#AkV_Jw^Lq)v8nv#C_NFItpiQw14x4_uwfkmulB2!dR$=Lwbhx5<;QpEk!6_Ydx
z;jFL8kkiluHd(UD1?UWXE^ZSOnK<9D%5Tiw>gNJJ2Qupvx^zS@FV!j-y8|t!%|;?1
zqj}-v7a4M79ykLSbQVy97Cc8jwxkTVv`GX73_qk9hF<m!5_q)gQT&F+NWju_0_c}5
z1)}SCc1&6J8rp5r2{2W*#l$*C@zwVa3B{N<*QUMuUBg(XZTp?Gn*=fL<INX|UeeuU
zq`{MULZU)tFh7_fj%+#KHSqGdG~17cy%oayI>w33k+0OJH*DB({u?bGv9QEHLMG{g
z=GImrf9~HC+@){G$qKwfnReONfac9X57gukb)RG7nU}GY%QsRKtY$|~h;4J$WSgWE
zWncF)vF9<{MSr&`_F?B$Mn9}vr?hoq+!MD$t?AHl6YAWFN40>C7#tuiieN@HQQamv
zT7EcKD#eOyqyJR^CZ$|tFmEZMRd+CTpiM$%EPv$dNNE&^s_HJBoo|r=6f6)5h$OhN
zqi>0r&NEPM--r-i?|2Ml1*Xw<rMED=+nqwQ+eVF8Yr(=i9Uwu#x<7q}J5IejFT4~{
z@QU(09SN#3Z<oSigzo&jMMtoA;InXCe_uV^_+df!H;?{j^%ghUB;Bt;*03P(5^M{)
zhbhqMBYSC;It3AlFab@A3PL#K8+({Yh~=qpfi6NsE|KB!B4nS~h$={{blBVaA34FV
zDQt2wkAcpFtbD!6^nic;GW}H!<jLoETHdKTz$3&O?G!q>1>O7VW>(_Wtg^K+HEJBI
zJ_Z@68=iI^Q75g-Wt*h!PWx>aqbf|arOA(U_3zJhEHp{@85pH#bm2A;KzYIc+rQJA
z?%7Rm5>9HHy=mTHgV!baiXr69v}TYTwTpO8h_yr3G7nEzQelBH5~!gC7Zu8R_sEZi
zxn=Ue5Y0cEYBEVO?vD<sBYhY36k{=5!;oY=KQaw?2|K&0f(&ryDt7Ca<u86Qkuqc-
zzRrzi@@E|`1)_T6*Mc`m4p7Tle!c(vF1!d6L$4j(rGZjq`pBDjdfbYBOP=<3h=iHB
zgE|M%_RD!w0f7Yd=%SQf@lwRLr+b5M2<SYiW{SwGQ+P66l4LTap!}IU;a{)gzw<V0
zfE#6K0}j%R1g`Zlj<0_C*)2-Dj500T84}B&dcX!39S}?uLzZ_-*Rw9$5*HH|dT0g3
z;HNX>%5HUp{hPUC=vAC={+1wwF{8~~eQofVf<7!la%;KZX78*Z6zeo_d-_I}yggyx
z3RcN6x`j%6`yGtDGwMi&OZ%m(u?=3r!~FZ?Z4uKDBFAvez)S6K-dF|K*3<;Tm0esA
z+=e|ZfGHE^q|X>>em0hu8esD8eaosHF8{|^eFED~EhyH2Z58j3@ovzkinPCV{yV5*
zYUUXefAo+JGfg*%;(n_%3V(WFp6y7rLOu6jXBCSow)Lv{XAT$beo!t-8ZUkCF|yq>
z*8I{G2vm!@&GP!WT6%_8?@r>tB|PU)e0k1D4+IT{+^>Ix!r1x=in=30&-0G^qM;Ki
zolkoO49|g4Hy3I)U2(E%_y#|B1Aa^=Z)FThc^|y^VWl9YEm_^gc1Ca<XCcd@=YKBP
zp-frnD$Jszx{FlC#+w!MCZ6tXuBbuL`;xvF8;a>(f`)SZblu(|Oi&3ZMyjwyj+HtD
z5iq9)cc}@A2~sX0t+ZVgPppi|C{I+Y)<47+v24F5HSsaV=C+e1zqr@%MFZ7jhG&_2
zE1(D2eWcqon_qBF1r=V!_iRw*C^F1`#y%6n%*ak5J%y{+OMW<LismI@;-1HsXHv36
z1o0S{^$#FOe<!+7rr~<?O+VdeM%Z}rHLyB(ltt4=*RO%oP<p1y+BC6D5yVkpe*t|T
z=}*e^L$qzin6hkHX85gIb&6sc2W3rB<Yp$Tt{l(C(mx9JcyH~c%yFhV37q%+4FG@l
zs2Q5<tU$r;0moL+XBT=fjT?byt?Tjpa$!3yq@90Z8CVd!08R|5{>ux-h@}w%0&K^p
z!_#GDBomwmrwm4FhXe=-N2<C4>NpR&%|9|ICo)azNwPhV^w>PdUhT-u-`R`930Hbz
zeY;W_7$5M6llOlm=w7yx$b1hT(hJS+{(Gx552(0iEnGWa;KR$Qsa9kPS{wcS`$2>S
zmL$XCO}gE?A&sFxe8Hbg4-_pnF7p_3CHXRV{T%+hZ}=MdLjAt^p#XD%Tx>K_rh4Ch
z+WkktFrV4x+mBCl@uId5(Yks;NjSSLPt0?zg${1%T~bqy%mceY*+?Lj!hcX|?MN}7
z*S;O&R~U`l6eHn-O^WqHbVcTu1w#SF*B;x+85i-%hUX=Kr{~{CAR!sitI$2W`tYxB
zSH%nl1@GH=%&r)!prZTM#ANiV#ZTBeU-hIh2y50o)xS>-T~d}A_7~G@yoYDgj&~X%
zP!ww;l8k%5DbEPc!Iou{B@17~7%DOPNL=Zi$h;MOw`ALBPhTh@<RzvobV_I*yF@{B
zg|wX%c?8+fT`b$91YRO<di+f9;Ihim1B&gr9>DkNPw9%|+Z)1_2+mia!2;O6_VOQu
zy6Wj>Wx(6#Oyl7^i#kY};OvJxn~muw{)4hTGT=#@;3p?9odRO1<n<(SKhCZ-iT>1E
zq*-F=?3Ou|Ff@WPj)_qOg7@VdPF=r|wxI-Rl@U>YaPF!^fYw6XxHYC~$~O+o9ve`v
zNW(u^+Gz}Y_b;A<6GPqi3CK41qQ4eo7bhIk9D4J|8pW=MQ@^yRgzG3D_`}3TQSqcU
zxd>!B!pi%pzOOa)yb#_RSTWTmBTi@Vbb7ZF6wjF8W6yS|(N8QM<4&uLS9CU%uR1Ld
zKT@;I16_$W01mh>VlVs->9)A%eRB+!9H&BauC5Go0dQp^?bWNP04_V;fBhUqM}HS<
z*~nj8bjN*pfaG34jC@N(#7>3DT$dqxJXVKxsNL+ke4f=FZHLvvCZEmCeS6>5w)sdM
zoaBH8H^KY<<;$gqfT8xa?oUxg?#K><EF1LW580v)zyPCOl$tSk(ugf#IiZ(BT3Q-#
z2i};5j1^ThTdTY$k@|-;RNRK5kLsX;+~WOmVszeVEEbcPSIFO=6zy9zpeJ%@cYt~?
z$ALP(!L>_+QdlF*YdvlMYec$#Y;w!u0|_rV;?CrW6s8#=<~TAM5TC}cB`cI_WqzL!
zQNH^NfWGzfpnc%8A(2w3+w;)t{0JN-#4E>)d>t853?oEGi#*|caMn<FxtC@xWJ5<;
zRDS!-Ikq}k*@CZ{QI|(nf0iV0|HxAP6|3qsGF$QQ?L4P{5}Q|+0h^1Lrs$`Q<~zSt
zx;%PS&W*Z>qbOgo>{xU;e#t`0iE-w!|IxM}2(<3aW~R-~xn|qySNycRG=`a*dYLwP
z1Bi{@J~*B4Kgg83kw~U4aI@H>kVAJ_lCXa3|5hUc9%#3)YihVHp_`Wr#S@>Hef!E(
zxs2*=ecTSDe@PFF3xwJu3+4t%-y-#Y;?J|H=q1Awix}fHw2F;lT*mzq@+k6Lg(7f|
z04OI%lP6OfxFk^?k;WnoK+vqL=(mY;*BPo0=ydGlmhU5e%28fzHA71|3s5!5XCA%p
z>2Lmev%!cn&O`9QSNMR<P;tQ^(pvGEgs$;P{S&r|whq9}ejxZZ)+kAt9^)VkPZsyb
z39JeTxH&dFMEw$Ep)_?>Vi%+YiSo1sYGY@=p_BXQ!K0m(z8q_)OmA4jwM4dp|G&D{
zJc}#Kozzg1RgFpOiR(?AnfNjXX-rayZw$`MI2KFpo~cPq%Zn!l@p^ye!%=wJe-m2f
zm8J^KYMyUfqSr0u23X!Pf2whKx3tdrBX7@PYVUqIpeTf}6m!EC3r{3X%_2DsfOE!g
zh`RedBqdG;TFc3o;**EBsKyKVtMjKIuZoKcrih-@BZCF)>tnqZzE@Vi)3i#Gr}k`-
zhF3RAt==8oy(DL%PR4ksA#2&bF!N&wdK=2(Pt3V=PV_|docjHUk&5(4916QBaC#b|
z+ZzcT`CE7eDK_cV&e6B$y0_c}Sa=)ax=-5ofQF;OcdVdVQ}TcM0s}FHk6+nYtQbWd
zUX6!Pw_Uyx?Xk8Y8~-Z&Onf#tO3@a7Z|{l{is;JAXUi<y+(Q0#lp@U|fT3<GrsGX^
zlag_FWW$$kZS1Z@fkg#EZ24f3+ic!qFT^(-_5!$!`?uRMcy)~Wvi7sUtvk`lTP%D|
zmAp|kE;Q=cu{M=_H6jH>_pw9H3oSF_5yHpTKh)aR>WpbgWDjOICm##5Tg%7qcIpoc
z3rsisnZL+)YZFcUHf%lPQ1w=Rx3^z^yF~WGZXho*OKI*k@Pz0G+0>eON#PV$J||O5
z>8Dvj+z&?1EG;qk;K1AgIFJTV)(XHLJx4X~fVF1@j!Sp;7D-3{0<$!t{z_{VCZ15A
zZeoP-sfvI%%aMg7w=7}`?i_}U<AKl@u99hanO%*e%NZEh@+%pngnvH@DM|e60B%o_
zU(m_mcw1yxbs?=#OCXqchJYLJCf@ayH#4X>feUOi3`onK#d!d3^i#Yk?C#Q%N*JC9
z+{(ZU0yk?vJ6)-b@xx^P8Co5T_mAdg*-K0&`-iM~y7;FRPYyV<9Z0RLQYkPq^H*Y^
z(eF5Beu8%4xiNRwIF2-W4?d+EF~4Oe#*!_0`w{gJ6KHR&Q@g3&w&jW~J(h;IlGxv=
z`TYUeYKq_|R}#<xk?aiczIwPqSfU)up+tg0Rt&Vs*5<6DT{WFuhwWni{USS)?g|7S
zb`F&6%ks6=aZA;s$2Sa-Ct$5EuCm^QS*x4bsHZOJUP1a-i|nM<?Mp)+9nRLMJEb23
zydEx}r%aGgEb_D;btna}ZB&wIwsxk-+@Zxsys4U+(trgm`0wg^#@_m+7I@p9#B@>+
z_a485yV>1VAeEp*^iLv^h1`7W)6VhJ*2saDGQ5NP<K5}zmC#W<{pL!sWnq|TD9aPk
zaWy98#AQNjUt6bk!o*^|j)Gp&LJqteNhvDo;_caOCjqQLx^NpJKe?y0;+O;aHTxHT
z+=djM07G{&&VfEN=!5(x4wq>;ik|aqM={&Qfb()(!bY#JcKL~LeC<%@mu~tbm!9DC
zxNP>a%<OLi$OzS+7NQ@S)H_DFT#edZsB`@!!C1~2^zA6A_EB6z30xE^%y-aL(D|F?
zPkt(4-*--^<AeJF6P^L_!w;`zo$51D%fFD~O5isZ7TFbf{=6)zcx&vwun`Gyt?%&r
zQ34z-!6kVXk$feu*LThtcr8<D{O7B&VG&;|bBm<ph?$2(@z%4c>>Zy4u}Nx068%r#
zP*2XGB!(z92H!@es3KNdf4;;~Oq31uW)a`f_HL!4Vv3I%S>lK`C*Ctt2;**53<Ja7
zJ^-J(8?u~mRQB@yExxAie*IE{xpeWw7FqQU!BV+Rxg+)hl`;>y^!pyaKm*UZ+0rFN
z6N{I+{(RFE5j`<v9i_W6G~}+G+jSTCbzjeBsm9OT1-jk3{*z=a{WAk^PUZd8N9VUX
z2$u3n=G*gZ-agMGj;F%At{)C`2P#!_Ndw5s#W}RonQ@{46Mpz6)HwWYjRqwgZuDN0
z$nS2FSY8xOg^G;5uzW9WU@x_m-|=U7$6kS=a1RnO#i5yw>2Cj*{UZzc{i{32x`kIP
zj_>je(aeQ3h|;`7S@#7!x+I}6Di1~<@08u}w*lXOJ^u<_S6osi78RliL(+O2a>oT~
zrZxqh{@k8vMZiBKsv#?rH<((oiJ&<UoW|UJvGFN#^?6UJ`ICABo<&Ch;+4r%wYVcs
zQDfV-Q!OX{=m+^8Xn0h3i2))I?hX}2z)(lUW3RTvQpi0ye|36m?8ty@ZgM`eH+?Ro
zVzPl~iu6MeS-~}p;yCw2Z?@V-YaCeSyd@Am+~(=&ot(+SJe2iO{1%$>l~ThsreVNp
zdH#rKX!1R3Mnf9XR(5$JHG2VVzLIa?b?e@0{t#PTB@3AVmUU9fX=1!_%BX1Bp}cr&
zqGw5ox3iggr#WUJVbVyhw*AXVXi-QA{2Koej_~nn^b$9?#ap@JN8h&DRv7TvEZk7q
zJ-NZ0kzEG8=yelbdRBaE@|{z6ErCVSzh6Zi&cwL)Yhw<+4lPP_3rYuJPi^Ca*f(w@
zecn%PcCa;Z)|BVgZ&{3_Oh=sJ%qwSqzuweFYJ5dA{=qqCN1-zIZpOpXTaBPqmGRdc
z2hE4lSFV-X`}(0`MLF?#zR6^Om%I$Q*kAT4L^gx?o3Xgy3#04I7=puU6MRmkzR}|T
zB;E%9!l7HkwD<+fPJ2DH_}OM0qKd@Xfm0GBwfRVaQIZH^Chd87er(d7tSG~IBu-N9
zNKWOBYE=D~f6RM@qLTFm<;C!qX}skTzg8HPARIM!yhUh25hSMP9>75bjK-RxXt!&3
z1N1PE{fE9;(f=T3B2RZ4Lqkhv$?XnrBE}|9C$$PsFKxVe)Ipx*`>U4FNW#s{K5ZaS
zM~YGN4P!B_mF4pb>NLsBRw3t&r_0yypeBea-=eeE`FkTO2@YRe(Ez#`VIye(A9|fK
z(=nRm8+VeS_X>_&YZ}{#fJu#EiezO?{19hvIHlQXgQ0ulhhP#rsn{=mY|Fc%rY)-M
z&g%iVqaVWU5T|`cMF$GvUpMVC&gVzB9(&jjZZ@NhxqdK<FRXdpSetUW?OIuR8f}nP
z%_r6>n22?b6Y3}`tS6wmTEfERvM!+%mad7{?Mz!)pK5V!a=<BB1H5t(!lpL~G0abJ
z<vgwaIzJn<x5kD3{ZaTwz-KMC$Krt9RaTt01>jWDs?Aez4{XvF2L6;JF*Jm;uJ58h
z+~DM#74!z}cR1bhP?|vFh9=95GYG=WGkd-geZI`xrEy~T@{PhqDrv%k>*LJ2C0aMy
z##_99btJ2b#ewVj%>bvAJ(@mlhkM?mmQsfJu}0Q$CZHpioB4|>(~}pQ#>u(0p&6%J
zXHC0s0m!>6JtCbZ1$}`kV$jw9JQoDGrxxpzwXf$p#SNxENOpbMo&ME*`KkQ|`^}>*
zY5Bi(d>2CUdu40M2=`fzrPTv_XL*Ap^gJO>dxsXCo#SH{AUc@4@1;)$1EEbw;b3<W
zj*C^&ZS&fJ%hzAQe;D<m%Ta^beQxkEfCqUTT62;m{SEy<pZRAgy1>`y%uh(hqzLYV
zc(oB0Myf>^uW-tyi8J_hf+z)p>dX(_v`B<rZ<5Daj2aLc^c~9z`w4hxR4C`{>qgCe
zPFXC|``)5Q4>Z2%Oxf5YHfA&%O*jqqr4lK{${|t^s>v-CvklK&)V4p7zj`Oe{V+v&
z$#rRGMU-_<@0GzqA1EmusKxe8u(|t{yeEE24?Y{wDZW_r+BFWd^!d3^>>Iupz4Uqi
z?s8kVH0*zCeDVIv-IXx5VRZHY^#rFrbox7%`GQcMT>ykGuK-t|`Iv6gbfV8?jd(GM
zdonZC!9C(VvGB_$uD>Llhpz&7B<o;>lhGByNJ?&66%@n)?_^N(cN@O1k;%#Z7NAe$
z3{vfnm0LWTzp1Fy5F99_K9~P9P`z~W?q{#3?*;2MO6tyF%2g^3%9ofWK2)LL9&w4D
z+;x;-Q9u&mEOlzWJw^kSNM(>+tiGkzd^+U&h|70ur|g_4alaij%D<mTEfN1n=C?TN
z_n1mj%_7HJ&%Ot>@aLsPkE;}B+2zZ%nH`~E60G=9Vv24GbPmM&orUwh^2+znhNsXL
z!b}x!EBEM1;gDZ%8Q~cK;C4meL+z^K0O)E9&^s|x^x5NZ_6-nu@iVmhL!js^0`p2|
z&C|}@pHZ%4j8COh>UBGRavwLzZJ{=^b=d@dCxj*=*@K8T__GPM5D&@cJrOvhiHQ49
z+PRECo4RL(p(NdbvXzb`L;o=0`r;Gzv=+y~zbme1KJrrD;iD*N-bvlqYaFVW(wMKd
zfYIwq6BFdjpi9>ociCGC_H#UkONkQi5ytj~=3CO;SttA+_hwDGo3u_;7dC5fR3p4R
zLyhf*&U|=`GiSs!Kn?#2`g%iBjqp!s`HNuUs?x$l2@v=8S&X@AnvWg2L)1S}l2tWC
zC8V&;5Hn=v2Uc;#gDnt4Nl=FF_*5D=1&;#Ueu9f}gNLFqu+ZB;C837Y%i*{edBC~4
z`He(>_8lh;sa9W%J+m;u`d>6l?w`6v_ZYDoA!_BNB}AWMrO6pd(lyemn^9xm_pTA5
zAdQ}d(yxC#MAmxU3XzkfGg8%FKrqBUug%>vv-OtIh)h3hMVcZ+Jx3$@Dv$!4<Mc_u
z`^0yv^pcIJA|G-#4T^dWvLn7fZpwK2SKK7RX`3s!_$TWpt){9-JLmfq?hkDZMYSS9
zmq<sDvF#}<YU@b1#n)pGkmr!|j_)w{vyOmduqnp@`BNXW9P_44Gr7Hopd7&z!A4Uy
zTkP7aDFbWQaQ~1Pf*z`6ov2;_KUqPNIKn#8v15SLEEh!(#U@w%$1UGwEe?K3gUa@I
z3L+t_E_%yvJYd-#66*~j^##0*2tE^1FTH%-PLWwyhdQ6!0-EUV>+SWv3l<6dw_`Nu
zZ;C;#>0f_0AS%URjfMJP=uO(g8wYI}bfM@qU&<t_!3DvOYyAs?{uuQ@t%I9DO05HE
z?;4Jmjv`vIe!QJ!;--Giw#|}5b%$}IBo-;N`s<~CfkVVS;2Gp|`7l@b@XNKV>3L{<
zU~RGt=D?k1@9KiU;bvrzBc_L<mi_vYvDisK&fC+A@wYl(k2Y&=OOCIv?*Q&IsTNta
zpF5c-u9j|nLQdS1%f~8!_4#q&pyqeknC@xQGu^_#qlo+D+EWO^Yw|e6LQ&mMI$27=
zzT28Fecqf0iC2)W$ZKh}&9$_(HGUJ!3)H$!Qclh$Oi#<3F2$q_DcK~<?%24*u<12N
zP#8V9%fU2I_oA#Q5!b+uU|~w>RWV1PlU~*{)-1$0rxN6@=bh*S&PTs>tW(`xQApNm
zP(Ni=^&+I=75&lr`P31{>rVNhyw2D?|L6W^$4V3KSJkNNA=R&zn(XTFP6z|8Py@R$
z3E%$qNe;#OlwOF8du<`uT8mCyWw5;!`3L3q_WFonXBy{5oylhI)y~HIH=<l2WV6eQ
zo3f$5xP_t^0vLlGjRC54T~(qCd@bgR4gc~)ly-lOD2B6G$Dpw!+!%vCgDgzkhi7RI
zi_Rd_Payn>QUyM)9t;$e8Fr^(g)Z9{&SW0l9S9k$F0~%HImYMZ;>ju9BG5M0ek_oo
zmFBv#jk}I=-DAHzAbtDBdFk-gKp3R}#cR^lcBtD(gTM?F*m9l?S_DyVfP2%s(`%)G
zEKO2+*N5Vh=gsG-N!Z$d=T~c^xhD#f(pEqQ!C@v|Ha~q%O(#-aYC08lOY~991AXPR
zd539ZsUJ!cVc3%{D?m0foYpkAVH^3|XlJXJ0OLaRyc?fIB)(9r94E(0Y!PX*o1xKO
z^*RzmehkoPiS@>3CXQiR%wOja|AIwc-^;7QqlqE^%wfm&^hBgQfF&8*io_t}MK0Zy
zApaut58eg2?)5~Tyw}O#%u?HHZ(18zx0l_}OZ0fV<(v;3%rDWCXXDj0a>^c@G_2Dt
zUy34VSmV<={=xyL`9^-Y@Y>rSFtX;4zq~B;lOF~I(4S!w6Dc+R2KmUbHc#J-t#i)`
ztm%rgr3)8<_k%5McT+1XQP0mdPkTK#u&oD3s)H>uaZXPP&eySd9J{oshat90(wqcc
z{vO)WEUp;gZkc^weB`g&+kbSNZTn_{npdM6<5w;5lDSp?o~GQ9Wk$nM5KG+%MZTeN
z{{!HUDt1r`X!z#{w&%o|PE17}ApYthM`f^C0XMQT1`0kSyFuM5@1w&vwR@w?slU>b
zNY-k0U(4xJ6u#2jV0dGW#*p;jnX)VV9SC|{$RUtzM47r7E5j~$eguw-h9gZzN0<L1
z)esU1$w$+J%q((3U01BbT7C4C#h$+3fsoJ#)Ibh03vL8zdd`yJF~$WCjhlmyx%8?N
z<lDF{uLTmzRO~8^S--p=Kyf<xxnKFdA;Uq-yJAIy<B#F;`ogz5CF&Nro`6j1aJkSf
z0}R&mJ7471X;A?Le~HvmR0E|G<s`f^+O!=S#^2-2+vt>Iu`{MN@cI(AO{-|lxd6An
zKx9n$+P)zEV11(o_m}a=npo5E6<1l3r&-kMFB=BsvTmQHERk%FxgKr<>7SYRrD^$Z
zu#ZaOs`yjiX4%>HXkc0FwUS}Ykp1L+7haA!^hQDM-$ItkKF`NyoWD;|yIRJw^0%{g
zp@$IyrN1omy{ntv)Uwk4Vrdl`Z;=BSY*Fd{PHY-sFcJGZr5ozZ#Pk0&r$FcK#a!Ap
zu%w&`8Ynexb|4=*^%YlSmd7l03x71OK<@r+yoX}(lGK!c>)oii&sdaBKl@l)USO3z
zuX07Kpdr2Os@+juxk-$t5~f$AE%oNb6It`$e3U$^e7hNMGU$+j2vv&tN!UBUw(F$U
zUDyw5Rd{Ipt4-{7(Wd2d4C~*^-?cW4t6tUIk~3HuIc&y59L>Wh&bc~V1sX>LuN2j|
z(uIC>diX}h3RkRbC%-BNbHu=4zSzImZA!?~UNE2s_fZKf?i{+)at?I!glVy=1T92Z
zHrk^O2S@&Cb>hP|P2GOh?ivBIJ5W<b^u1W-toBi<RK<c2)VPm7_2;;!pEjiK@dmmY
z%4y@w$uF?|bg_TM{nAIsx(s<McRd${PtN2NDGVGmV9bkT-j&8YwP9k#-kVPLEOQiB
z*e2JqRl)xbN_+UDO*Wga-5#}epV%YVzt*0y1BA&-QE**8eDSqE$<_uq<wtN>7Yn~I
zAARy?UP!8VAJfImzFD0-u+Kt(Q`!*xY{*0OE%W~c@+}S0bRNOcCp=t`XsYx&d27go
zwZ%xKimr}4S{l{GD5O<bm`H=YwKJ8>AG$h1(F7)Fl!g>7N-4d@I!PtFejh{%qA@{~
zE=V9%x`sG;<W^p+;gbd-E44roC4WcX55rbB{I{hWu3Ao4vI;*^ZQXm<#ml4PJi6tA
zvx*F%*I~U`e!mwDrpW}8;9uN)s}l*Es;`ce#}_Ay63`=l2l_3~dN2-hw(mr`nwpDK
zjdI6k)-y)Flp<f)$jJi~2q@TfcmLvAN8kp|L4rk6;hNGnP*}wUQ9`hvdVk0VX_N$E
zR$$lNb+=_;ALHb~z(@*hftyL-O_b3Y1uz28_qm1#hQR*H<BVp;fUYI2@)%kH)!T*?
zKtRwKec|db?gW6K5AX<xNRzcVfbZYI5P2}ANI(vvvGf&0;2H@-LRB`1z~6V>T{chC
zFku(~2<#wA5E(%aaf*y^8h`mVK!jl8TF;)n!(fO2K~p?KzHo73pgowt5RacyFb$$$
znnqQl@$A`x;)nE%(r`6+S)+{ob#wOHw)3|?de46Qzu*6O_Wk=48*Ccn;VB_6c|1PQ
z%i}9?_G#j_F6aMc^go=mEw&&3U%UQicd%Eo{}>D&^*?KQ7SsRm<$vqlgy3{M5i?3m
zpfny6$ejdJ%KjBvc@@-?%BykVRl`8?i8(}~oNHO{DIBANEYxV=^S$VlHL$%64h~B?
z)w~du7wax-I7BW7X(p2Sg{zojm`vORy9%rAZ5!BBMtHULP#88(<H)OsqR#fVoo^i_
z3<r0G;h+PCgABtGDt~f*ia|mdcv{9p?^dRVuNaXs33{buf7XSv8_c59#*jc^eBpp%
zYrp|=iF1Ie>4H}b0X))50}+^%yQ%VZob9DsY*7ukwW46XAOSZxdYXV_Lhy}R{AF54
zo^aOz$Jt+bd*_g#C{cy#g_bswY7u%%9X&V%pKuWIYr8TP^naTR82J_TOIJT<^u55t
z&_6!mI7*rx90L3ID9bMnPA@LrUL1h`#HpB%F~PIIM_`Uq0=$%PD&+IGFv;0|DdQ=)
zc73CVQdTlv+P_Dj_`Jah5{m<xp$NcHf(Rf;dJgiwZvh<ox}zPK!Z~Ar2q9kx9NaNc
zzP&~<lZCY8L4PtDjK~#4SAzCWDdCQOK{Uc-D!9{w5o;e0xz)Z8V3OJ3``Dv~g*}hA
z0K@(S-#7{GCj_U%5YY+7i8DdrR2a!R0i`LT{f)fyj$l9MW)g(R$;L&Nmm@=O(ZxR%
zD#_bZqga_CzwtC<59>bb@#*#~BmePu9?Q#rdwb7c6o2Kv?Z^0k>v=lJf7+p+9r;yA
z86YhQO5%rP5B{GGHi3{f_|FTB6D@Uzlz);55~YDHZts*xQMVhLEo5>ULF0fXWX_}f
z92^2SYtvPq^uj6xTV?SqK3i5Hf#X6c_C`CZ={nQui%fYpDIh3}lqpEL3x_o|YHuC2
zzk^W$n18O#7y<iFwEri1zzt!HVnw>}ZrAHYI3xw8q2eMMCCOYTB5ctaXNauNGSLFJ
zdI6h0iV5;yg8T!(6$b`ih~$#zX&7EgZ+fYY=ryowoEI-JZ6+Ak^6g-&{@YG3=W6qg
zdJz^ku+oG~?LA{kjvk|Fk=Jw%ly=EFOX)OnGJl(-QVWLw#xWZ=<E>lCh~_WLXj*j2
zs3yO}YeFO#iIi5#j!Xm7<Ks~z%RvECqha2P9uE>!rOGVo^q1#<#14^=hX<1<Z6*$@
z4Z4BJOEY8TtX?=2wy<{vKJ84NXIkOMIkqONzm0)bCF+e!<d9aDTfqb=X{uZE-|F;J
zR)3MbhceC9-kk?DS?^n1Tluq;{4cM0+YSJ2`rp0nV*an^JA04u-`4VUvH$y->n#$b
zLaYE3u`P)!Z~~g;#R-wPZh~Q`8wehqpQ&3Fs;hp>dz54=*-EyW$QVvi6Dq&TU-H{I
zCQ1HH{wnGx&oynN1~XGcx_oy9cm!YsRDV7#RZ{g`ug!x&s@natC~*OQ#g-Vbi3y0(
z=@5|~1IeQW$v~1oMV}fXkPsMAkpd~fzz;^;`!E4>I1Pc1*ecAh$kd%s>O%o0JhWz%
zpfM_`I!_qkbUo+03CcdJ%e5?CrV=M`RIdOn4Ni70(k_1w4qI+#tE^CR^MCE^f`185
z^r!=`vRCMpOVt|}hz7Kg7u$f&3i<c*EZ>Aa*u`^@{ANVKEdrFeEA)dPn`&ni*kUN{
zQX2qNz|%kKCK`-X3SbZ=CbVAuZ4_dd?C%x7tL8YXmK*%WSgc~FY(CYUi#zj#Ffl;h
zc(ZkYiHz^&F#`NP1LQF!k-xygpnq;z&m|NY?YE6(%hfbS+pI7%_-kh~gOZ)W2!<3j
z8x#oQ+|GJHc8y2F;;YS4^gJs->qysf^=2!M?&Q4_>fZMbe80~!@}G3#T2}u%7z|4C
z-}Ynt_w_s-^uL-cM-v$NkoYoyd+ib-IYbo~6S3@)m+f)I#eh4(>EYj1Du0wb1blTB
zJqmoeJ$}I$c{M@d%jKsqf@9=6!+B$ncyqm$u7C;Vnn@f<vu~Hi$a7V?Dcu8-U;EOT
zXO?KAt>HqsEP1<<>Tw<Y(Vu13f5ASj%YW<n|M`CL{%`Na;4%KsTAmK;|LK=l#(@?m
zTX~x0>`{MU)YllN<O;{@@_*GtX<b>#w=+aY;3FQ(IE_58zsvs&rkCkx6nx={|Es0s
zV}jUGRz!^CXfm9YH7BIPgjS~f6{Yw>+SUQNp_DJZoIg?9?1=bV9YntYg5r>;5dVt}
z?2q>CI|VbsjnXijgU=}pgHeEd0OOc<*0p{`0y;0Bur?UxG&8NGcz=p?txSGu5Fx+A
zU>Zmz1kWb2DM@wm=8~1=nvfWIJ=Z!LDO(@`Br_h?XdmPX4o-J&9?X!J*f!HV&)QMp
zhN3=Zyi#;RDHT|V?)njerxVwsC$#dbhG#|&0ma-pGhB_goe?Z@p#e>_+lASh&!4SK
zD6~{4^5#DzFV>%v1%Ef@-P0IT#Ry@|NL6HBPTFOOlA_E98R<ZAPqFaA7iSGP>61lk
zv|+|HmRiBI$;e|iwdmBT3VER+U-fnAsZ<GdbyMoTxBcu{M*fpI3YNV88SLzo<3H}~
zJ<5M;c{<2{+4YYYce!jftec8IjHOats9Z|>_9`m^vkY5O`F}#f=Af8sHn6Aj?9ZkP
zo&qQboEk6sneF-8Sa>^$I})C|i0?Z{zXDQLMEt!L2^oxo8H$uxnNmb#2%c=W(Hx=l
z3?eu}E;tH9d_#pZZz3yUaXX-F<2UnE6FKpFyvh)I*Ef*(`2}1M2FYBcSNls4jqq}D
z(Kl58Ma!J3rGEj@t@v|Fia5f&|2PWgY;C_mU;<~X8#6>;SfnXs3#{%Rf7ka}CXbf3
zu#$SZD4CkKR@uH=K_CP4VR6HeTV1(c$J2t!;a}wYe0SxR6s4P|T(>UjNBSPCaCWQr
zwDRU(TU19hr-15ywcuG?cdpTVp=F0hm|9}h5fQ4c5r4O1v>%t2^(-ydXkP6S^hVP;
zutI9Z;8oivI3LZ7OBsNJLlNWEn79@5#tb}HnmJ|-)2yisk+t|5#<4OK)-10WE{8l{
z=$EEiPco$Iji*|tn*z~3+cGCEOaMU%3D6AjBz?gMz>py5&w<B}hW<jcGIyC0T6N95
z!*F<0$A2bs76My(EcqYIm~llPx<Q3s-HzP@c8H>JGO@v6n~x!8W619j%~PE5ccTG`
zoctw@1&+b8PsK<+&0-6H8=i%gTYM@S2Nci*Gj?y93kAp(lR-qV)(Hh1?o;=70qj3a
zXvJkodHN{3(u!qi3m|uVz{D{6Im{?*yWm%L#($0j?;4B(LKETphZ01jQIMRUz5pgr
z6=MP%Zex(Imkej|MfP+odD903Mn0ZqgcD%IZ~_Os#5hDSGC}=1LELLA!2tR`p!4Yv
zi~E@cK<6je3PGnZ9^xR+muBuiM`7USDQtvrqx26n9ZLOan~x%J7IspspK94+@FZio
zgMUL{+iJmhqVOra&bwa>Kbn0|MHOH<a$5PpHgM%gXN4t?sw8W_h-JCBcJRc%?ieM%
zp!rV(PZ=lcQODVVy}<6;q|HUNx@JG9NS?I~^AfD-Uo@eDFHMzwXlz|B8BDqiF}_Y?
zV9(fcrDT&Q4KY6D*!Hx%)C!)yQ;AJPet+R<`?PT8=J+4B7cL2Vtkr57RyI&mR&$y8
z28R24DDw0ereC%Ad73{%!AM)>D%U+8GbTRNIk(Qb_=yU8d#+81qK|g<D61_?j!Nd9
z&B<pgG;9r{3dYba-HWJjN6TAznU{Ozl*i^ng^RLq{jNqtlZIC1YF>{^<s1?iXn*V=
z*ZjipUnV5$%Vvmg5CNNPT|Wxr2?T>)PyBq7PI=<<K@V)Eaa=C-O?qs9Gy=Wqyv@r~
zF9=F2UtI+>Mqe((mC#Wbz6uh44z_>){a1||!2X8~zOn6rCImcR6nHM<aVbwyA}?V~
zIXX#4qYzb2zUm;ErH(T~y-BAf^nV&aR+|kP!fC9tY`r1ejoi>7hzXkU^vwA#E@z~Y
zP`Nlw7m-gz$u_C<-bBI`iwLT>&bl_Il?JbQe3pKe(*Gxzz%g3Z|6?%NFUEg<)c>#R
z>F)on`zT%t4glQdw{lgLEaI^OxszcQp2I`cx;U-CqR!xjrt+hX{J?SKN`D^>xNCf@
z@Z2tHbEH#XshS?e-)!-)xl*Hwl&_%WTFPb}edcOlqe!oyR#H2wUPd@Q{BHkl>wcE{
zZr@f{h!@qE)%NCbiGO&{GV6ct_u0Gyw5<Qz``e}XANxDokL&+Bo=)q3<Rd}>luAMF
z_m|mfD86Viq^WQe2BxQQ#eY^Hlm(00#gv;Utl%a6{VZ2p<SSnihw6*&R9=-mK(Dgt
z&N9`;f5K_ltFHZk{EC;E|3W*qwEgeic4_|az1V&9|6R+|Vg3tez915DU;`X+<@uPM
zvelVa>h$YZ0Kqa+)i_3pocGO#Z58xTzU6fs^>V>=p{8LckL^g*oqvBd&b+;M_%xb*
zfJCM7L0@7_5}DUY0Qmm>@X6+NIz(O)a^fg;fRkl(S~!oB^um-UXy9P*iQ<SYj)(SF
zuBmld3E}kj{rh(td;>#B(f%HA93OeuN4*LK%F8qeeSo4Fm_Z_pBgG{%6xNrm<5!@C
z7(6u~)47vf2epq#0e_UHq~u??Aw(PoTq8l*A3QQ7lX_*hwHjQ7cMK`|sZ^C~0!tAx
zif!myMJ=>EC`Mh0O(2wsF6h+-waE2~wNPqqXOnyb9uYiMTc#Mn){$$x%E&HE#jj2?
zs{}aLD6!tiiydtQT|2*hmorda!q{46zSAUcho5+!wSw|LD}N?OGi#}IYp=m^%3%)e
zSeOnIGz-v;FwBUOfXGWxJOWSuM4w6>A_yX&@|B6J_}Vatc_7dffkUvVZd!6=Ob*dL
z9I9$ns<KR3I%DIP-^Ph593p7Yn~Hl`MMKtus+(DWi7Y9#m3#{EOaBl=IC5m^MOd!>
z+OBYWe~sn?lYbBSoqbnMG}<fLe8}#z_VaH9%@CpJ7xwbt5Xhghl*wg!(c&QA?h4VZ
zycX&iH+mX76bwe(nv1$R?Yf+F;9<z0kI(%+%gFyXkVHW=Zao6D>VLOO`ro~sok#h9
z9Zv`O|5q{G01k1Q$bjzzhary)4aZGlf5s`Y{5v>q2!H>1fpOBb&R0Uyb*3=#!DgnJ
zu$9rF4YYusJsDH17`^kGxS{<ih<so><oDnGzdZRyCvfNa{(&vRjs1Fb@#gH!&j;Wl
z?>+EQg1iLzV3UdDTHw&{-w)UuR_6Qn-WHI;MwG?A76E<4MRqs`1hH<S$QPbZaE1fF
zOl_I-B7f$IH+TeU6wLyHBVjhpjWg>bP)ph%LRApzl<Rg982OHD#bK>DT1iXOT|90c
z|4p7H)_=_grT@``l)}g-uwpZ4)Bn79{@h&ucel6qALBo-<>|2gOA8$Yj@4KLQcU$A
z95>m*T1xS;hz(QDMH#?4<&X;emKj+oBVO~Yuz#3ghG|_c%L!wQyt69ADnZgBL)pM)
zSZ9h4>PT!wyUO~j$}-i>3{&%#l+z5Pd0k8xSzT}<&U*)<zqNbhqQuosp9RzRinB}(
zVW#rk7u+fgc+xa)AwZ&R0fIk#PZ2pMXcT-|2+TE_yP{G7lCtE}ZT#|6QEtCnXwxxl
z4}ZB>!PN;xn|~gCPW4yBoH88&N(ObbsFmtsj9BVTttDawZ`y5$<qEFyw`#M(+7##&
zTsTd`B#2Ata1`7M%SGK3u;6ahc;VcCW*wzpf-rz&4n}Dt#3ZS*=BZ4A@gz~YG)xK(
zJ&kKu>r7CN;SH<NJ**0?Xd9X{H%C!Vuzy{!z|CQbsZ(^JQR?i1p+OVKg#oQ<;N{HC
zyV7m!)#6n>=!*}Ag0sLV=sLjq5m6m$puM3?WQ$vkg>{uGds(_G?-eoLooKGF^h!X;
zL;)G~@4?SLy%Q~CUYuoB!)bn5%(ik>^8XZ)0Q$p9RZxrk|KfSc{_n-}o&87oe}5g%
zZRG#gY^+aSu3Y+8JoI2>f7Q`i$)9__EhqJ>Htt5|uOMkBiC@*1;9#0eZY}f|U{#C!
zka&|IK|IgwA_!^4i;&V}Qh#(Pz+o#ft59=nxWG86IXV#SlWnwG0f(*6%FIB6k;>Pt
z_1ljx&Gj!(90nd|k-F}bOO&DB&wr7qI0&`JBBNma(MYm@!$xq$ry~Ocvo{<`oeyr~
zb6Dc1suPlF_ogS%FmULV?Uz@52vw9W6M3b_(4slD-hB}tUSC{njn(Z2BGk;8dhV+z
zzW@{FweEmSRX8<M?BC@ezsLr+va|dO_xeTfzQti)fvtddn}hs<U{-vLSAU)8Fz&ZJ
z!q-7r@&K>EKJeqazMOWMV}{Ijhllq&oNh)JmYHYzj?`sh)zn+DVusD%4kMdO(Ldy<
z=IFPKsJ=>8jhO!afxEb_O#g$UF}{`lXRy7y|GcFC*?YYIUCVPT{SO=Klb3%cX#77{
zuLP2e^l+3wdT;ABK?3b1b$>y6Q+K2gDwDUHLP*wMi9*PPRihAUR^yl;YScKbN~J=l
z>Xk|lO(Apw6F7vlSl^eg*QHRpM9RXytV$B!S|J^!$>cQW6%9_t7d2`q{`$0@&AKR5
zbSzp9tKGF<LI<I@@F3M<awYpWP>YEQ`W#xO)eKI%GLA7$q00qa?tfk<SJ<!~lunMK
zWC4|2zUs6o<7CMNm|m23C`z0xV(1Dra1xP6-P@wF#Oic!T(%mn<k+|X-nY>SNU%S)
z?oD>0!?@p8_f`XCS>2li`@nT?3u|cV1mwHa(5(0vQ`?6&HH|i*ZlR{RQ<Z4biQ@-R
zo;7u0ndR^9RigK;bbon3&#Lr)F{a6wAo@8hs{mW{e}m^Q_KW@>yStC^f7bHcM*nv%
z#`^Mqy;`~UPh+D8qX5its#pKzWtP(bYHi(({;!(Aom7Ath$Y=XDj-$r0JCFlR$e~^
zw?kzTgL+GI-CRo>n$bjqcB#6xN;4|=9*w7}Nms8xC>O6kJbza(|B9SU%2=4alO)nc
zsuP>(!<4gwsh_B5qBtN8#O`W5)X04cjlkU+5;gbiA*nTPC)fMP3w)G?mX;Z$5RlP8
zC7w;2TAA5Wid+@K)Cjk8jphy>IqF-}##NgYhX)OkiG38dJ`d;;L=tPYM-^7-+Fhf$
z2c~3Skilz$rhitJ(%RA3Q*a7Tfzw(`M&Hp@8s@0qn`Wzhi|nTBXosimWP(t&IW0Oc
zXt9y@8<Faxo{CYlSsYUhmugK_&+Jaaaj>?Hu7Fpp5YxKYkz;PB7Ha^sq-IPXtRF);
zR+9NT4nd9Fc!&C#)yn@1_vlVmkG$yn>^i%B1>y2=d4Fm)@Ga2iSX>er&7iGSmC7Zf
zTGlS@Le(wa!AhbFtG8Q9OmX)I=Hkl!tZsGF3Egp}D?)7nwc_<oZ!Nz4l2>_n{ejt~
zwoffAQ^OK*VVdjw&{Xb0Dxz1V|0T!|>H@*F`2X(j?ClrrKX-NqkNV$rJl1U#z!z+=
z|C|u$qkq*KfC^4}Fxp>^PQBune_l@KD_Xc4b#IB7iz#MBwZ(L@wYHfCkZUxjZp_OT
z0P&!6kOcoi{s%;8jSkNMrd4rgqK+-%pw?@#6DER^IoK@ZNGtTiuCnInwbm+EK%XnS
zrgVpO3iqW_Q5G{;SKFbLZ8-ga>e|Upq{?)R?SDkli!Mwa1Izam9i<|xXt(i{EZmM`
zO3`^IG~3nre85(z(@%3MEMu=|P_$l+n)Q$2ubP&^pQ*RgjNJ+x)nK2em#kNCo6Br%
z!<~)t^wxiT?RA?jN-UyH`*HQc-%SHm4P(jUnE?7A^-f|}6S3meX-xEfVM=qgjNBaW
z@PDASGD)L;Yp)+>QAZ!MX3`%|kawMD`Q-HG_;ZL)siG(qGMieY#he72QZ4}haR>%`
zy@f}jQnXlt|106?&I?)rwWyn0)Mf{{sweh4yGFiZ4al(nx7<65*fxt8B7I#|^ZJa<
zQi49@bMk-JXI1BaeLpN}0ovmK?(c3F?SH@ac6T4o|Lb^ebNrWwVOEA8^M|N>(if6D
zFVCm^F^)#t+dQvuQ5ek9eehRy-AO;Qb&$f7v%M_^=$h6Bt8HzNwYG>bSSJIDgeR4>
zsp>*G`AK0IK&*)Ys+ZL&j&~E8&?do3M&VdTV+ksVG}*<S!)a*5Im?fFHQJP1;D4yq
zrc}49CGPGo9$-!8e`;%A6q9|E$oMdU)lJl!MJyok=bM<w72{^QG2<xJHJ5*hhuv(T
zYfnrvJ61yy{buPa<1&?Os&Tfr_o=oob}>X<>y$JSjOlW+_UGfIS?{DN970Oa3z_e;
zqC5eH);~>+%z7B}v&pDFkA3UhDSv7#Z=0eipK*20okG}F9n&;awykTOTsuD&^;ASQ
z?M?YId{(*!*RvI}=^(c<qsSN~$0;Ew%2kSXDH$q^{A}eg^68aY>Xa5yt6xMTKiz<L
z`9azfMFeXf{2u)tDPzSy(chzrGf+)BN4HmF2WIL91bCj*t+cFV30k1<gMX)v!^9$X
z5IcOripy1iVF4rGW#_Y;HS*Ed-YEi>DDf~(Je}o#cY?xcFpe-mi?-1s|8GCvDc=9>
zZa;sF|FV{61DwNztyDajs~A_d?L=Uh2BFVZ@fdp7aEz#HZGd-^fC8GvF(wHGbb`W=
zo5X-AOuR`Djkf?nAxwgq+<!Ln_b~FU4G^KRFrwZRN(*VM3jRmW1#hEp4sgV4GL%4!
z2nd4+xt4o!`SFr%a@Gbo=8OnF9A5%IAk=clLDJ{{3iK^^_%G7u|Ed?0ai9I8e$rXg
z&jAggcb&%k>_e?*F1?AZXYLSQThH8N8e7l)%h~`RAPI0v!P&_vwSU~0;7`a)EI05G
z?2B>)f3n;e^{|inKajqn^ZdU!Jvw=P>Q4Q|+i0Hu&-b414GQyrXJ_!}|FxE91H2S@
z!PIPc6$}ZJT8`PMTh<Zy?Vl)|ny>%ZRGG!tX5i8Z&oI_ca2$BFABv(MCEskYGCi&t
z9}}F$Y)KKk1VTIxJby4m$qix)jzmP%b1iFQ1H60nKTj?!>+0%?N!FH+Vifr(@&Y8K
zceb}4NO*jomrB+Hu<d?vzbK;|nT+iqONk~M(UYRdzgc6v#UZ2<>j_}!gRJ2>NMk0a
zW~De@Fb+Pbc4q_YI*9xOz)tYN_%)2JDM}!do*Bvl;ff;@Pk#^Xj?yp`rjq<VTh*G*
zg=hrqf1)tN;8#pS-xf%0Y=E;U$r8a?7GI==AQBTi3w%TYR5VxmJJzol5ejZ5fj0pj
zjF<?-F9x_D#0-Tv1`)cE;~`Vfac(G$e@|@^U<xBRM#QzOm&R}!4e%BJw_nmBf^kf9
zXxH)$9}dAXK7WcsJfAY*kO`{-JpYMDfOF=tfFDG_3sagPLS3;<@vnjm6G*|3@mPW=
zJ7e%`oS1?5O`*xKArVRt1?PEEy^AzTf+;dlj0yJL0QY-f^W`t+7d;o8a4Z4)mE}ZF
z6FlVyns=`*frm&Ei~<iPh;A{yAM;F#5f7NaSd;x^{ePX~lmHlKR%CJ>oD;-#2{cF$
zwJb+Rci;|o{$e?zzq{_h-4<2Y85c2nFpfZAgu@Wui1dNOP~`I!cPEMy;0y*K|0WN9
zawba_;l?i>juAf?`oU;~xX@0Kmt(pCjz*&(3X*`~`HdmPcJaVR5hDO1K!3i06GS}{
z@KYjK_<#8ZPQSz=+u~Uir%8JS>zmX3w0&PywQtrpa3yCv%qZnX*henKqvQ&F10qo~
zfPlRK?31MFTpWLcDr$WLSGw`_PjBDaQq7X5S$=tRVY7e#kKMZhO_)p|@eNGai*;iX
zV_%Y_M3Wf%3XwkhJ4%8o#4=1gJdJULq9ns7SAP&)nS4@*i6BXdCU=JkpG?OvhQlCS
za5_~?lv~ZO#h<E~*gn~opGK=_Kp$*RqqED_c)6Wl6}u}(pRJAwBy6GAR$_JMyeald
zFAUiFs63N`QI_&nYXJn5>mMjedM@J=_eyMOKqUgN#nU4=`h<sWE`3~8;R)lI;Fttl
zn}3@X<-3i7aEo#8fM>pk7g1dlPYuEy;z<*jpivr9R77-9Jaq_nhi4FR_njriT|wwZ
z%&vHnA@nMc?11OR%cEmJ5XC9+P#1JN&Lh7X&4uwizBsuBF}va!<1p~%Rj4kCXN-M{
zyp#mVTmribJR_9cU~+w4Mt4y>C4_D`c7MiG>9LsLY*JL=NriDrAZ{)A*@a8lvwZE|
zb$9>LanNh=<XiqJA((X9?C*S+U)9rDZeI*)2YKVp1&vibcY~-t6%gk$H;u;x`Y87i
z5I1LRuAU{}CI~}-BARkfh)PF~aWF%XP#NDK{zic02V8OfcEQ;QT;+Flg2k_t=zk;b
zzyjG?G9mZ|zzA>z`5BqNr|iVer=h?YKz{6WbJ@DsK+)Pleb8(zvR8v1Fhy}W8_%Y2
z+%9^r>l}OQr)`d`>-c-?N9WvtkBRuNQu1N@3KFa{O2ZKFl3epv9s$WayvPN{iJb}Q
z%1|hoAkh}Em7nvIt1Ung0>7Q9YJY!hZtyY$<D{3F0n>z}JRqG5DmoCSVJKV#=v8G0
zPOx{4h~PnRfyMz%$Q(%TjyG_MDA@E-Oppf?<R7pN3Ybk06#0mp=M8}%q6vb2uh8{u
zvefo|uvPzUr<c>ljMs5h)$tNmx9`4+d6K(m(M-ijSKrC16++0;-A?B#+JCaww}7nd
z>82f6(E{_sZ2S3ROdEMz8$$0IMgCO<Rl(2F7zjW$eI#Q7Sqq?uO&@WS!8T_sCfm{Z
zStieB(}f~33p}JOuQ0Z=cjuT}SPdbu<toUa{H9t{>k$JN;Uw@1%5$MAaRb~RhIriH
z*&h6@zx|>=_-h}=fuq%?PJa+N181<`*VfZ{l)x{U?%6{WRMANZ_UAB}yqm}9N~6;`
z38I85rwS?A$FiWZd&=&(kzdWk72^8?f12nd$L=_Ul(Jp&s*X-Up<o-men>j;Rs9tl
zqHvvZ-x?(}ofSgfPvxfKn_4+dwW$gKQK7n5&1Y}f6t@Tw<h}K_-+yp?<^`I@ZK<ud
zV&s|zZmE5zZRo^>v6!zJZcOH7w2U-s%gn`#$%j`;zF{Ta&JZDi&nJBI;F-76to$)S
zV!KiLZT4{vKBq8b<n{rKV~$2yf3sL)9Bs*vqAc%J9HzOZeW4+%<rOJ?HqY`UMYSJL
zMC<r8uUt!tUO%AZ)_?KQ8DAK*nv*&c?26M`TE8}rjS}ceA$luLImPe+a$>U;^)elC
z4?}x8&;HcULi{j%YSjN@b3*~7GOTUIv3M2SS0djvnrDjKjC|6}`5JXlC@)36EXXI9
zqVJPNO+D1em#YAUnax!N`7-N#OaMU%3D692o6TSZU`P=3=YPQCJA?1)#|gus!;!(@
zObP*8S}XY<Ok)8>WYzY-F2CEcd%zA+G)^Wq7;FQZCIm<0JS+@b|7A1A-#HU+0a1So
zh`L;VB+4EsQCFxuapp5o#eIB4>6LMfpuCvb;S9~VDQV`tp-8L9C+fSPm3-Bf13%KE
z_TdB*I7X|p7k|2+O?P!xM)$Mp8O$t(#P!%wPm|MiL0t|T;K#w7TVp1h(S#k(s~1YG
zK!r;6JpcN~=7v_bMy<*@=v^$LMXpMgd%#lLio~r4ELiD$n8aZg$|~{^5v<7mqM2(V
zcOqkpAq=8i`)k|_r8TT5Tye}@AoH)w{Q3Z$;577sKz~7m&QQ&4WrvCpL7!6;CE;9E
z_KZWv)sri>YqHab<l6U1(5_>++Y8>6G5P{}-8*Etm4ViIufoGk?CLMmAoKx>W&y#`
zR5-4YfLqRT0bN{)LLoAAG+z)bTjlH8Ws@&=qu?u-srdMX5E16iG&5dSGKuir?aT`;
zf{W^%e1FRuanwumilx|%f|sTcQImWv7!f?pbR1Uz4?iI<kpmJWRD^|w$)r;^u8qI}
z;#U{ptFjxvpgHTrtAOejt`v*{LKCeE3}bFE52f>~FT09~EGy50Tv+B}cnBgKIjXeY
zjj~XEjphThb6k|J>YiM+KIA^Pw=hY)e{+=wynnZ^`?-aw?)^&+_uc*jdh~^*#T8z^
z16v@t!(B3+A(t%_l*Nsf2?22>ce5>dUB%AznX9&Wo<EC#2PxOJ&2#IfEzM0v7$c4I
z+tvxbQQM}rmAc@P9cDi0Azl91+)!Z-W+EnJ%lMh`MXsvGPZg;T$^*_4K;+&60i8f5
zz<&zcDxR^Dn_Oi9EV_)}YNFa)Ek>#b`LvB+A+!mVw;9|$O=qV%3p+kSDrct|Rr&VA
zT9(cvo=!gN8iEgA<#Q*y{Z$i4sLc3TX^4dFEW?MZ;DSWj9#DWI8QElxQ$c`~A|SDl
zrzUlgCCGF~>ru=2RVB;2>O6j0y2O<XVSjo2wDe#1JA_&!|Fw)_%lH+dUuSm$-Nw&|
zcD~dImPby+wY}d#)1qpwXVxt+avr1<Mm~YY=ye^rV+CbJYiD`<GCc2j3^P2|HI8jN
zpG@Yw<j$uj62HUkPau2W+n>N<z1tr@(Ekca6h!0p)BFM__oWWkt;f*?j(*FT+<$0X
zeIu#j5*&s>G=2xiZ10!E0&s}aL<U8WB|rkle38$r!mqkpiCY^R;4(&D07DRP3Q})^
zrjTm>2n<vne1b?5sRIjuWFDgf1~7=m765)eTnEaoN)^|F%L(iDfPxTnOL7YU^aW1i
z5FG%Y*Kz}FSy~*8mZmPUlAMuq`+s{KvW&OUkH$gt#j+AOZUZaeByg;Q8MuReci{MF
z7{JIGY&&Fs*RtX?421()8&FQ{(HuYl{yeLgMZ@N5(Wgh@4V=@bAQ<I%Fq%E(rsm1h
zEfLq6qJ$Se8@<8FIYAUf$y0%kG&jl-f`q`i1wfD>5sk1JQx!}voCB(mj(-FYfJZs{
z%G7@|PY7yQ#k-c}qhYF%dnkg2mq;V}qI}@^a>ZA-Ft|qS3*&C|B_R+5(Fl{NF#8pe
zU8p`tBAhtm?W2evlVRi`32cZCtc{E<b&lIGLbsUwvcc$IGx{4q8-AdVgtY-g*Cj?W
zfXW8YZXNTPB}2ux(n-Zv7k}k}c4z78L|}BZEP1oaFHPHc^XCbsBJg64U;;kiFr6av
z`gIGOjTG<Mj=cr+X5R3aGqx=QdH4Zkcv9fc89_Y}C58r=Eo=tHwqsis^gKlAYwV*o
zbdPvRFvWhJm#h|VqoE4~{a;CtptpPgXz;Jr#x8?@p$;wl_2<B{Vt<%S+TfncXrIG;
zAbkT;7AUBRofYedLEkWjL(p{tXoM{gU;}UpaHKc*eTCL+#<Qj^QO>qJ#868w^=O>R
z1W8$x>7AX<CG=}Fe+}a}i1@N$z>@E?Ku!Xtlmf2NTwID(S*Eg&K~#r?z+YV9G!k3H
zRLW4@06MZ80Ax}nD}SVtZ~TJh87Ubpd50NdDO;(2mHv!8vMQh`q5%(T$LAuKF!j(x
zL6lvYZ2^j>2qeK2Q3l`!Mto9^S?vTf=tSHO$C%Q9J0s6Uvs{Fjpn%XKHK?19?nb_n
z_a&|Pd&hCA<4{Se+&%~ukVfBPhk|jucvUfkZ)5m5MOiSbe19~)e${T}rQrV!4EOg?
z<Yk$izkj!kPWy3~_t<q^8EzCsvx6+hxe5$+esp>H>)VSHD;F|n>iY1&(q&IUN}iHt
zWPWKNmu|0_1&pn;6|Bw9^h8FG)t_rLZ*1{ei%`30gX$VHOK<f3JExzup@%Q#WG&1n
zbMm*%CSa&?<$nZw^Y-28rJH;a>y(EhibJ$ap!n_W^@fVy9^4{W{DRTqTT=%u9X6hi
z&Dn^pNFz)<wsT^d-5SXJ@!Suaty$dP8X>Wi!4Q#z8p9@|;_=0powN~6z;rI7Kl6~e
zg`qmM?X3be4{e+C{L@0w1!M9S8+f9o`bP$$5U003)_<^-%{%lZ#v}n6n8PQV*Xa;>
zNysa!*xlTUfyU57nd?K&4Zy+R6U7lj@6i70vNg}u`0%^U7C1=J{vL1~A9>hEJ*$ck
zgIf_|pc7)S8bS>2fDnUfLa2a-?^Or^Y2Jsyz}<GYE$g?p5qN`VXgWj$40gA`&i2ms
zmW;}=qkr7czzw8;A4u3?X%s{OoghDVL>vdnBpvcFgN%`7G{_B_z$B#(9y!SbIWo#?
zZwn-ofPyLfgoz&cLu4ePtlLtY$+TGB1V&>-MIb*BQIUPm;}yyo$BzpMW=jMnG0x2V
z^Wb_T1e267P`)n$?}@JN3VDh{VY5;Sz}!$IYkx}i00ap|;fNivAn~P?k&*25?JL)^
zo;~}OThU3xZxBHskWnR(j09gK!vFv5nPoZPTv;^B*Hn;0MPL;D<*rAjcya|c<pRRV
zFr0%SP9~z#4)5NsqP+%)jjRa4$-8gD+$qBpQ4s--!g<dHzx@*t)EvH4g)L<)0OLS*
zN`IIq_4pasgAwB?A51Z)QhxFkN+CwwD?RLuumiIk@SagY$V4)>;#CQ!*{*A#HG-e}
z8?v;+k#i)Mw_w8>d}lI~Fkz3ySy)Nl&p2WE-v5k8LC(WvVj}Gw!*~LRJWw#3P+Z)d
z;3*!X2(gjBfpbIcs)A~20Xi9r9WzGt5r2_6x_HcxJXi>yBtgbTg1OG5+CfUuD)vXA
ztT6l1jO)2af?xy{Z&c2kEe=l@bVg4TFk;IWjOHMqG(~jrCWX8%XOZMn>Y)gd0B1qn
zGOt)j&DuUjlr^swEHxWpG-u<OqmlPQSYDfRP4AkRGYoCogttiyxt|a;LPRZ7zklJ;
zDBuc6Ud+c{%1$|a)SBncZ0F-__v17eiy`iBWPds-MUDq4qCGiF<fmvX22b@N!C<z_
znB_f1qcj9z5M5Kj3#w(-q7k__NfS&07}7pL6o)h9Fywalzq?M1Y2xIFh;i;~@D}Mw
xMRD%GE=nMW^?|qN%yygv%RhI2q!>`(kI&=t`23qa|1SUl|Nq&vt$zS$EdWyDNGJdR

diff --git a/7.2/search/search_index.json b/7.2/search/search_index.json
index fedd658..92a5e3d 100644
--- a/7.2/search/search_index.json
+++ b/7.2/search/search_index.json
@@ -1 +1 @@
-{"config":{"lang":["en"],"separator":"[\\s\\-]+","pipeline":["stopWordFilter"]},"docs":[{"location":"","title":"<code>kineticadb/charts</code>","text":"<p>Accelerate your AI and analytics. Kinetica harnesses real-time data and the power of CPUs &amp;  GPUs for  lightning-fast insights due to it being uniquely designed for fast and flexible analytics on large volumes  of changing data with incredible performance.</p> <p>Kinetica DB can be quickly installed into Kubernetes using Helm.</p> <ul> <li> <p> Set up in 15 minutes </p> <p>Install the Kinetica DB locally on <code>Kind</code> or <code>k3s</code> with <code>helm</code> to get up and running in minutes.   Quickstart</p> </li> <li> <p> Prepare to Install</p> <p>What you need to know &amp; do before beginning a production installation.   Preparation and Prerequisites</p> </li> <li> <p> Production DB Installation</p> <p>Install the Kinetica DB with helm to get up and running quickly   Installation</p> </li> <li> <p> Channel Your Inner Ninja</p> <p>Advanced Installation Topics which go beyond the basic installation.   Advanced Topics</p> </li> <li> <p> Running and Managing the Platform</p> <p>Metrics, Monitoring, Logs and Telemetry Distribution.   Operations</p> </li> <li> <p> Product Architecture</p> <p>The Modern Analytics Database Architected for Performance at Scale.   Architecture</p> </li> <li> <p> Support</p> <p>Additional Help, Tutorials and Troubleshooting resources.   Support</p> </li> <li> <p> Configuration in Detail</p> <p>Detailed reference material for the Helm Charts &amp; Kinetica for Kubernetes CRDs.      Reference Documentation</p> </li> </ul>"},{"location":"tags/","title":"Categories","text":"<p>Following is a list of relevant documentation categories:</p>"},{"location":"tags/#aks","title":"AKS","text":"<ul> <li>Azure AKS</li> </ul>"},{"location":"tags/#administration","title":"Administration","text":"<ul> <li>Administration</li> <li>Grant management</li> <li>Resource group management</li> <li>Role Management</li> <li>Schema management</li> <li>User Management</li> <li>Kinetica Cluster Grants Reference</li> <li>Kinetica Cluster Resource Groups Reference</li> <li>Kinetica Cluster Roles Reference</li> <li>Kinetica Cluster Schemas Reference</li> <li>Kinetica Cluster Users Reference</li> </ul>"},{"location":"tags/#advanced","title":"Advanced","text":"<ul> <li>Advanced</li> <li> Advanced Topics</li> <li>Air-Gapped Environments</li> <li>Alternative Charts</li> <li>Ingress Configuration</li> <li> <code>ingress-nginx</code> Ingress Configuration</li> <li>Kinetica DB on OS X (Arm64)</li> <li>Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations</li> <li>Bare Metal/VM Installation - <code>kubeadm</code></li> <li>S3 Storage for Dev/Test</li> <li> <code>nginx-ingress</code> Ingress Configuration</li> </ul>"},{"location":"tags/#architecture","title":"Architecture","text":"<ul> <li>Architecture</li> <li>Core Database Architecture</li> <li>Kubernetes Architecture</li> </ul>"},{"location":"tags/#configuration","title":"Configuration","text":"<ul> <li>Ingress Configuration</li> <li> <code>ingress-nginx</code> Ingress Configuration</li> <li> <code>nginx-ingress</code> Ingress Configuration</li> <li>How to change the Clusters FQDN</li> <li>OpenTelemetry</li> </ul>"},{"location":"tags/#development","title":"Development","text":"<ul> <li>Kinetica DB on OS X (Arm64)</li> <li>S3 Storage for Dev/Test</li> <li>Quickstart</li> </ul>"},{"location":"tags/#eks","title":"EKS","text":"<ul> <li>Amazon EKS</li> </ul>"},{"location":"tags/#getting-started","title":"Getting Started","text":"<ul> <li>Getting Started</li> <li>Azure AKS</li> <li>Amazon EKS</li> <li>Preparation &amp; Prerequisites</li> <li>Quickstart</li> <li>Kinetica for Kubernetes Setup</li> </ul>"},{"location":"tags/#ingress","title":"Ingress","text":"<ul> <li>Ingress Configuration</li> <li> <code>ingress-nginx</code> Ingress Configuration</li> <li>Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations</li> <li> <code>nginx-ingress</code> Ingress Configuration</li> </ul>"},{"location":"tags/#installation","title":"Installation","text":"<ul> <li>Air-Gapped Environments</li> <li>Alternative Charts</li> <li>Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations</li> <li>Bare Metal/VM Installation - <code>kubeadm</code></li> <li>S3 Storage for Dev/Test</li> <li>Getting Started</li> <li>Kinetica for Kubernetes Installation</li> <li>CPU</li> <li>GPU</li> <li>Preparation &amp; Prerequisites</li> <li>Quickstart</li> <li> Core DB CRDs</li> <li>Kinetica for Kubernetes Setup</li> </ul>"},{"location":"tags/#monitoring","title":"Monitoring","text":"<ul> <li>Logs</li> <li> Metrics Collection &amp; Display</li> <li>OpenTelemetry</li> </ul>"},{"location":"tags/#operations","title":"Operations","text":"<ul> <li>Logs</li> <li> Metrics Collection &amp; Display</li> <li>Operational Management</li> <li>Kinetica for Kubernetes Backup &amp; Restore</li> <li>OpenTelemetry</li> <li>Kinetica for Kubernetes Data Rebalancing</li> <li>Kinetica for Kubernetes Suspend &amp; Resume</li> <li>Kinetica Cluster Backups Reference</li> <li> Core DB CRDs</li> <li>Kinetica Cluster Restores Reference</li> </ul>"},{"location":"tags/#reference","title":"Reference","text":"<ul> <li>Reference Section</li> <li>Kinetica Database Configuration</li> <li>Kinetica Operators</li> <li>Kinetica Cluster Admins Reference</li> <li>Kinetica Cluster Backups Reference</li> <li>Kinetica Cluster Grants Reference</li> <li> Core DB CRDs</li> <li>Kinetica Cluster Resource Groups Reference</li> <li>Kinetica Cluster Restores Reference</li> <li>Kinetica Cluster Roles Reference</li> <li>Kinetica Cluster Schemas Reference</li> <li>Kinetica Cluster Users Reference</li> <li>Kinetica Clusters Reference</li> <li>Kinetica Workbench Reference</li> <li>Kinetica Workbench Configuration</li> </ul>"},{"location":"tags/#storage","title":"Storage","text":"<ul> <li>S3 Storage for Dev/Test</li> <li>Amazon EKS</li> </ul>"},{"location":"tags/#support","title":"Support","text":"<ul> <li>How to change the Clusters FQDN</li> <li>FAQ</li> <li>Help &amp; Tutorials</li> <li>Creating Users, Roles, Schemas and other Kinetica DB Objects</li> <li>Support</li> <li>Troubleshooting</li> </ul>"},{"location":"Administration/","title":"Administration","text":"<ul> <li> <p> DB Clusters</p> <p>Core Kinetica Database Cluster Management.</p> <p> KineticaCluster</p> </li> <li> <p> DB Users</p> <p>Kinetica Database User Management.</p> <p> KineticaUser</p> </li> <li> <p> DB Roles</p> <p>Kinetica Database Role Management.</p> <p> KineticaRole</p> </li> <li> <p> DB Schemas</p> <p>Kinetica Database Schema Management.</p> <p> KineticaSchema</p> </li> <li> <p> DB Grants</p> <p>Kinetica Database Grant Management.</p> <p> KineticaGrant</p> </li> <li> <p> DB Resource Groups</p> <p>Kinetica Database Resource Group Management.</p> <p> KineticaResourceGroup</p> </li> <li> <p> DB Administration</p> <p>Kinetica Database Administration.</p> <p> KineticaAdmin</p> </li> <li> <p> DB Backups</p> <p>Kinetica Database Backup Management.</p> <p>Note</p> <p>This requires Velero to be installed on the Kubernetes Cluster.</p> <p> KineticaBackup</p> </li> <li> <p> DB Restore</p> <p>Kinetica Database Restoration.</p> <p>Note</p> <p>This requires Velero to be installed on the Kubernetes Cluster.</p> <p> KineticaRestore</p> </li> </ul> <p>  Home</p>","tags":["Administration"]},{"location":"Administration/role_management/","title":"Role Management","text":"<p>Management of roles is done with the <code>KineticaRole</code> CRD. </p> <p>kubectl Usage</p> <p>From the <code>kubectl</code> command line they are referenced by <code>kineticaroles</code> or the short form is <code>kr</code>.</p>","tags":["Administration"]},{"location":"Administration/role_management/#list-roles","title":"List Roles","text":"<p>To list the roles deployed to a Kinetica DB installation we can use the following from the command-line: -</p> <p><code>kubectl -n gpudb get kineticaroles</code> or <code>kubectl -n gpudb get kr</code></p> <p>where the namespace <code>-n gpudb</code> matches the namespace of the Kinetica DB installation.</p> <p>This outputs</p> Name Ring Name Role Resource Group Name LDAP DB db-users kinetica-k8s-sample db_users OK OK global-admins kinetica-k8s-sample global_admins OK OK","tags":["Administration"]},{"location":"Administration/role_management/#name","title":"Name","text":"<p>The name of the Kubernetes CR i.e. the <code>metadata.name</code> this is not necessarily the name of the user.</p>","tags":["Administration"]},{"location":"Administration/role_management/#ring-name","title":"Ring Name","text":"<p>The name of the <code>KineticaCluster</code> the user is created in.</p>","tags":["Administration"]},{"location":"Administration/role_management/#role-name","title":"Role Name","text":"<p>The name of the role as contained with LDAP &amp; the DB.</p>","tags":["Administration"]},{"location":"Administration/role_management/#role-creation","title":"Role Creation","text":"test-role-2.yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaRole\nmetadata:\n    name: test-role-2\n    namespace: gpudb\nspec:\n    ringName: kineticacluster-sample\n    role:\n        name: \"test_role2\"\n</code></pre>","tags":["Administration"]},{"location":"Administration/role_management/#role-deletion","title":"Role Deletion","text":"<p>To delete a role from the Kinetica Cluster simply delete the Role CR from Kubernetes: -</p> Delete User<pre><code>kubectl -n gpudb delete kr user-fred-smith \n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/","title":"User Management","text":"<p>Management of users is done with the <code>KineticaUser</code> CRD. </p> <p>kubectl Usage</p> <p>From the <code>kubectl</code> command line they are referenced by <code>kineticausers</code> or the short form is <code>ku</code>.</p>","tags":["Administration"]},{"location":"Administration/user_management/#list-users","title":"List Users","text":"<p>To list the users deployed to a Kinetica DB installation we can use the following from the  command-line: -</p> <p><code>kubectl -n gpudb get kineticausers</code> or <code>kubectl -n gpudb get ku</code></p> <p>where the namespace <code>-n gpudb</code> matches the namespace of the Kinetica DB installation.</p> <p>This outputs </p> Name Action Ring Name UID Last Name Given Name Display Name LDAP DB Reveal kadmin upsert kinetica-k8s-sample kadmin Account Admin Admin Account OK OK OK","tags":["Administration"]},{"location":"Administration/user_management/#name","title":"Name","text":"<p>The name of the Kubernetes CR i.e. the <code>metadata.name</code> this is not necessarily the name of the user.</p>","tags":["Administration"]},{"location":"Administration/user_management/#action","title":"Action","text":"<p>There are two actions possible on a <code>KineticaUser</code>. The first is <code>upsert</code> which is for user creation or modification. The second is <code>change-password</code> which shows when a user password reset has been performed.</p>","tags":["Administration"]},{"location":"Administration/user_management/#ring-name","title":"Ring Name","text":"<p>The name of the <code>KineticaCluster</code> the user is created in.</p>","tags":["Administration"]},{"location":"Administration/user_management/#uid","title":"UID","text":"<p>The unique, user id to use in LDAP &amp; the DB to reference this user.</p>","tags":["Administration"]},{"location":"Administration/user_management/#last-name","title":"Last Name","text":"<p>Last Name refers to last name or surname. </p> <p><code>sn</code> in LDAP terms.</p>","tags":["Administration"]},{"location":"Administration/user_management/#given-name","title":"Given Name","text":"<p>Given Name is the Firstname also called Christian name. </p> <p><code>givenName</code> in LDAP terms.</p>","tags":["Administration"]},{"location":"Administration/user_management/#display-name","title":"Display Name","text":"<p>The name shown on any UI representation.</p>","tags":["Administration"]},{"location":"Administration/user_management/#ldap","title":"LDAP","text":"<p>Identifies if the user has been successfully created within LDAP. </p> <ul> <li>'' - if empty the user has not yet been created in LDAP</li> <li>'OK' - shows the user has been successfully created within LDAP</li> <li>'Failed' - shows there was a failure adding the user to LDAP</li> </ul>","tags":["Administration"]},{"location":"Administration/user_management/#db","title":"DB","text":"<p>Identifies if the user has been successfully created within the DB.</p> <ul> <li>'' - if empty the user has not yet been created in the DB</li> <li>'OK' - shows the user has been successfully created within the DB</li> <li>'Failed' - shows there was a failure adding the user to the DB</li> </ul>","tags":["Administration"]},{"location":"Administration/user_management/#reveal","title":"Reveal","text":"<p>Identifies if the user has been successfully created within Reveal.</p> <ul> <li>'' - if empty the user has not yet been created in Reveal</li> <li>'OK' - shows the user has been successfully created within Reveal</li> <li>'Failed' - shows there was a failure adding the user to Reveal</li> </ul>","tags":["Administration"]},{"location":"Administration/user_management/#user-creation","title":"User Creation","text":"<p>User creation requires two Kubernetes CRs to be submitted to Kubernetes and processed by the Kinetica DB Operator.</p> <ul> <li>User Secret (Password)</li> <li>Kinetica User</li> </ul> <p>Creation Sequence</p> <p>It is preferable to create the User Secret prior to creating the <code>KineticaUser</code>.</p> <p>Secret Deletion</p> <p>The User Secret will be deleted once the <code>KineticaUser</code> is created by the operator. The users password will be stored in LDAP and not be present in Kubernetes.</p>","tags":["Administration"]},{"location":"Administration/user_management/#user-secret","title":"User Secret","text":"<p>In this example a user Fred Smith will be created.</p> fred-smith-secret.yaml<pre><code>apiVersion: v1\nkind: Secret\nmetadata:\n  name: fred-smith-secret\n  namespace: gpudb\nstringData:\n  password: testpassword\n</code></pre> Create the User Password Secret<pre><code>kubectl apply -f fred-smith-secret.yaml\n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/#kineticauser","title":"<code>KineticaUser</code>","text":"user-fred-smith.yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaUser\nmetadata:\n  name: user-fred-smith\n  namespace: gpudb\nspec:\n  ringName: kineticacluster-sample\n  uid: fred\n  action: upsert\n  reveal: true\n  upsert:\n    userPrincipalName: fred.smith@example.com\n    givenName: Fred\n    displayName: FredSmith\n    lastName: Smith\n    passwordSecret: fred-smith-secret\n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/#user-deletion","title":"User Deletion","text":"<p>To delete a user from the Kinetica Cluster simply delete the User CR from Kubernetes: -</p> Delete User<pre><code>kubectl -n gpudb delete ku user-fred-smith \n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/#change-password","title":"Change Password","text":"<p>To change a users password we use the <code>change-password</code> action rather than the <code>upsert</code> action we used previously.</p> <p>Creation Sequence</p> <p>It is preferable to create the User Secret prior to creating the <code>KineticaUser</code>.</p> <p>Secret Deletion</p> <p>The User Secret will be deleted once the <code>KineticaUser</code> is created by the operator. The users password will be stored in LDAP and not be present in Kubernetes.</p> fred-smith-change-pwd-secret.yaml<pre><code>apiVersion: v1\nkind: Secret\nmetadata:\n  name: fred-smith-change-pwd-secret\n  namespace: gpudb\nstringData:\n  password: testpassword\n</code></pre> Create the User Password Secret<pre><code>kubectl apply -f fred-smith-change-pwd-secret.yaml\n</code></pre> user-fred-smith-change-password.yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaUser\nmetadata:\n  name: user-fred-smith-change-password\n  namespace: gpudb\nspec:\n  ringName: kineticacluster-sample\n  uid: fred\n  action: change-password\n  changePassword:\n    passwordSecret: fred-smith-change-pwd-secret\n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/#advanced-topics","title":"Advanced Topics","text":"","tags":["Administration"]},{"location":"Administration/user_management/#limit-user-resources","title":"Limit User Resources","text":"","tags":["Administration"]},{"location":"Administration/user_management/#data-limit","title":"Data Limit","text":"<p>KIFs user data size limit.</p> dataLimit<pre><code>spec:\n  upsert:\n    dataLimit: 10Gi\n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/#user-kifs-usage","title":"User Kifs Usage","text":"<p>Kifs Enablement</p> <p>In order to use the Kifs user features below there is a requirement that Kifs  is enabled on the Kinetica DB.</p>","tags":["Administration"]},{"location":"Administration/user_management/#home-directory","title":"Home Directory","text":"<p>When creating a new user it is possible to create that user a 'home' directory within  the Kifs filesystem by using the <code>createHomeDirectory</code> option.</p> createHomeDirectory<pre><code>spec:\n  upsert:\n    createHomeDirectory: true\n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/#limit-directory-storage","title":"Limit Directory Storage","text":"<p>It is possible to limit the amount of Kifs file storage the user has by adding <code>kifsDataLimit</code> to the user creation yaml and setting the value to a Kubernetes Quantity e.g. <code>2Gi</code></p> kifsDataLimit<pre><code>spec:\n  upsert:\n    kifsDataLimit: 2Gi\n</code></pre>","tags":["Administration"]},{"location":"Advanced/","title":"Advanced Topics","text":"<ul> <li> <p> Find alternative chart versions </p> <p>How to use pre-release or development Chart version if requested to by Kinetica Support.    Alternative Charts</p> </li> <li> <p> Configuring Ingress Records </p> <p>How to expose Kinetica via Kubernetes Ingress.   Ingress Configuration</p> </li> <li> <p> Air-Gapped Environments </p> <p>Specifics for installing Kinetica for Kubernetes in an Air-Gapped Environment   Airgapped</p> </li> <li> <p> Using your own OpenTelemetry Collector</p> <p>How to configure Kinetica for Kubernetes to use your open OpenTelemetry collector. </p> <p> External OTEL</p> </li> <li> <p> Minio for Dev/Test S3 Storage </p> <p>Install Minio in order to enable S3 storage for Development.</p> <p> min.io</p> </li> <li> <p> Creating Resources with Kubernetes APIs </p> <p>Create Users, Roles, DB Schema etc. using Kubernertes CRs.   Resources</p> </li> <li> <p> Kinetica on OS X (Apple Silicon) </p> <p>Install the Kinetica DB on a new Kubernetes 'production-like' cluster on Apple OS X   (Apple Silicon) using UTM.     Apple ARM64</p> </li> <li> <p> Bare Metal/VM Installation from Scratch </p> <p>Install the Kinetica DB on a new Kubernetes 'production-like' bare metal (or VMs)    cluster via <code>kubeadm</code>   using <code>cilium</code> Networking,   <code>kube-vip</code> LoadBalancer.     Bare Metal/VM Installation</p> </li> <li> <p> Software LoadBalancer </p> <p>Install a software Kubernetes CCM/LoadBalancer for bare metal or  VM based Kubernetes CLusters.  <code>kube-vip</code> LoadBalancer.</p> <p> Software LoadBalancer</p> </li> </ul>","tags":["Advanced"]},{"location":"Advanced/advanced_topics/","title":"Advanced Topics","text":"","tags":["Advanced"]},{"location":"Advanced/advanced_topics/#install-from-a-developmentpre-release-chart-version","title":"Install from a development/pre-release chart version","text":"<p>Find all alternative chart versions with:</p> Find alternative chart versions<pre><code>helm search repo kinetica-operators --devel --versions\n</code></pre> <p></p> <p>Then append <code>--devel --version [CHART-DEVEL-VERSION]</code> to the end of the Helm install command. See here.</p>","tags":["Advanced"]},{"location":"Advanced/airgapped/","title":"Air-Gapped Environments","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#obtaining-the-kinetica-images","title":"Obtaining the Kinetica Images","text":"Kinetica Images for an Air-Gapped Environment <p>If you are installing Kinetica with Helm in an air-gapped environment you will either need a Registry Proxy to pass the requests through or to download the images and push them to your internal Registry.</p> <p>For information on ways to transfer the files into an air-gapped environment See here.</p> <p>Please select the method to transfer the images: -</p> mindthegap containerd docker <p>It is possible to use  <code>mesosphere/mindthegap</code></p> <p>mindthegap</p> <p><code>mindthegap</code> provides utilities to manage air-gapped image bundles,  both creating image bundles and seeding images from a bundle into  an existing OCI registry or directly loading them to <code>containerd</code>.</p> <p>This makes it possible with <code>mindthegap</code> to</p> <ul> <li>create a single archive bundle of all the required images outside the  air-gapped environment</li> <li>run <code>mindthegap</code> using the archive bundle on the Kubernetes Nodes to bulk load the images into <code>contained</code> in a single command.</li> </ul> <p>Kinetica provides two <code>mindthegap</code> yaml files which list all the necessary images for Kinetica for Kubernetes.</p> <ul> <li>CPU only</li> <li> CPU &amp; nVidia CUDA GPU</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#required-container-images","title":"Required Container Images","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#dockerio-required-kinetica-images-for-all-installations","title":"docker.io (Required Kinetica Images for All Installations)","text":"<ul> <li>docker.io/kinetica/kinetica-k8s-operator:v7.2.0-3.rc-3<ul> <li>docker.io/kinetica/kinetica-k8s-cpu:v7.2.0-3.rc-3 or </li> <li>docker.io/kinetica/kinetica-k8s-cpu-avx512:v7.2.0-3.rc-3 or </li> <li>docker.io/kinetica/kinetica-k8s-gpu:v7.2.0-3.rc-3</li> </ul> </li> <li>docker.io/kinetica/workbench-operator:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/workbench:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/kinetica-k8s-monitor:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/busybox:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/fluent-bit:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/kagent:7.1.9.15.20230823123615.ga</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#nvcrio-required-kinetica-images-for-gpu-installations-using-kinetica-k8s-gpu","title":"nvcr.io (Required Kinetica Images for GPU Installations using <code>kinetica-k8s-gpu</code>)","text":"<ul> <li>nvcr.io/nvidia/gpu-operator:v23.9.1</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#registryk8sio-required-kinetica-images-for-gpu-installations-using-kinetica-k8s-gpu","title":"registry.k8s.io (Required Kinetica Images for GPU Installations using <code>kinetica-k8s-gpu</code>)","text":"<ul> <li>registry.k8s.io/nfd/node-feature-discovery:v0.14.2</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#dockerio-required-supporting-images","title":"docker.io (Required Supporting Images)","text":"<ul> <li>docker.io/bitnami/openldap:2.6.7</li> <li>docker.io/alpine/openssl:latest (used by bitnami/openldap)</li> <li>docker.io/otel/opentelemetry-collector-contrib:0.95.0</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#quayio-required-supporting-images","title":"quay.io (Required Supporting Images)","text":"<ul> <li>quay.io/brancz/kube-rbac-proxy:v0.14.2</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#optional-container-images","title":"Optional Container Images","text":"<p>These images are only required if certain features are enabled as part of the Helm installation: -</p> <ul> <li>CertManager</li> <li>ingress-ninx</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#quayio-optional-supporting-images","title":"quay.io (Optional Supporting Images)","text":"<ul> <li>quay.io/jetstack/cert-manager-cainjector:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> <li>quay.io/jetstack/cert-manager-controller:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> <li>quay.io/jetstack/cert-manager-webhook:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#registryk8sio-optional-supporting-images","title":"registry.k8s.io (Optional Supporting Images)","text":"<ul> <li>registry.k8s.io/ingress-nginx/controller:v1.9.4 (if optionally installing Ingress nGinx via Kinetica Helm Chart)</li> <li>registry.k8s.io/ingress-nginx/controller:v1.9.6@sha256:1405cc613bd95b2c6edd8b2a152510ae91c7e62aea4698500d23b2145960ab9c</li> </ul> <p>It is possible with <code>containerd</code> to pull images, save them and load them either into  a Container Registry in the air gapped environment or directly  into another <code>containerd</code> instance. </p> <p>If the target <code>containerd</code> is on a node running a Kubernetes Cluster then these images will be sourced by Kubernetes from the loaded images, via CRI, with no requirement  to pull them from an external source e.g. a Registry or Mirror.</p> <p><code>sudo</code> required</p> <p>Depending on how <code>containerd</code> has been installed and configured many of the example calls below may require running with <code>sudo</code></p> <p>It is possible with <code>docker</code> to pull images, save them and load them into an OCI Container Registry in the air gapped environment.</p> Pull a remote image (docker)<pre><code>docker pull --platformlinux/amd64 docker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-3\n</code></pre> Export a local image (docker)<pre><code>docker export --platformlinux/amd64 -o kinetica-k8s-cpu-v7.2.2-2.ga-3.tar \\\ndocker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-3\n</code></pre> <p>We can now transfer this archive (<code>kinetica-k8s-cpu-v7.2.2-2.ga-3.rc-3.tar</code>) to the Kubernetes Node inside  the air-gapped environment.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#which-kinetica-core-image-do-i-use","title":"Which Kinetica Core Image do I use?","text":"Container Image Intel (AMD64) Intel (AMD64 AVX512) Amd (AMD64) Graviton (aarch64) Apple Silicon (aarch64) kinetica-k8s-cpu (1) kinetica-k8s-cpu-avx512 kinetica-k8s-gpu (2) (2) (2) <ol> <li>It is preferable on an Intel AVX512 enabled CPU to use the kinetica-k8s-cpu-avx512 container image</li> <li>With a supported nVidia GPU.</li> </ol>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#install-mindthegap","title":"Install <code>mindthegap</code>","text":"Install mindthegap<pre><code>wget https://github.com/mesosphere/mindthegap/releases/download/v1.13.1/mindthegap_v1.13.1_linux_amd64.tar.gz\ntar zxvf mindthegap_v1.13.1_linux_amd64.tar.gz\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#mindthegap-create-the-bundle","title":"mindthegap - Create the Bundle","text":"mindthegap create image-bundle<pre><code>mindthegap create image-bundle --images-file mtg.yaml --platform linux/amd64\n</code></pre> <p>where <code>--images-file</code> is either the CPU or GPU Kinetica <code>mindthegap</code> yaml file.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#mindthegap-import-the-bundle","title":"mindthegap - Import the Bundle","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#mindthegap-import-to-containerd","title":"mindthegap - Import to <code>containerd</code>","text":"mindthegap import image-bundle<pre><code>mindthegap import image-bundle --image-bundle images.tar [--containerd-namespace k8s.io]\n</code></pre> <p>If <code>--containerd-namespace</code> is not specified, images will be imported into <code>k8s.io</code> namespace. </p> <p><code>sudo</code> required</p> <p>Depending on how <code>containerd</code> has been installed and configured it may require running the above command with <code>sudo</code></p>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#mindthegap-import-to-an-internal-oci-registry","title":"mindthegap - Import to an internal OCI Registry","text":"mindthegap import image-bundle<pre><code>mindthegap push bundle --bundle &lt;path/to/bundle.tar&gt; \\\n--to-registry &lt;registry.address&gt; \\\n[--to-registry-insecure-skip-tls-verify]\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#containerd-using-containerd-to-pull-and-export-an-image","title":"containerd - Using <code>containerd</code> to pull and export an image","text":"<p>Similar to <code>docker pull</code> we can use <code>ctr image pull</code> so to pull the core Kinetica DB cpu based image</p> Pull a remote image (containerd)<pre><code>ctr image pull docker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-3\n</code></pre> <p>We now need to export the pulled image as an archive to the local filesystem.</p> Export a local image (containerd)<pre><code>ctr image export kinetica-k8s-cpu-v7.2.2-2.ga-3.tar \\\ndocker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-3\n</code></pre> <p>We can now transfer this archive (<code>kinetica-k8s-cpu-v7.2.2-2.ga-3.tar</code>) to the Kubernetes Node inside  the air-gapped environment.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#containerd-using-containerd-to-import-an-image","title":"containerd - Using <code>containerd</code> to import an image","text":"<p>Using <code>containerd</code> to import an image on to a Kubernetes Node on which a Kinetica Cluster is running.</p> Import the Images<pre><code>ctr -n=k8s.io images import kinetica-k8s-cpu-v7.2.2-2.ga-3.tar\n</code></pre> <p><code>-n=k8s.io</code></p> <p>It is possible to use <code>ctr images import kinetica-k8s-cpu-v7.2.2-2.ga-3.rc-3.tar</code>  to import the image to <code>containerd</code>.</p> <p>However, in order for the image to be visible to the Kubernetes Cluster running on <code>containerd</code> it is necessary to add the parameter <code>-n=k8s.io</code>.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#containerd-verifying-the-image-is-available","title":"containerd - Verifying the image is available","text":"<p>To verify the image is loaded into <code>containerd</code> on the node run the following on the node: -</p> Verify containerd Images<pre><code>ctr image ls\n</code></pre> <p>To verify the image is visible to Kubernetes on the node run the following: -</p> Verify CRI Images<pre><code>crictl images\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#docker-using-docker-to-import-an-image","title":"docker - Using <code>docker</code> to import an image","text":"<p>Using <code>docker</code> to import an image on to a Kubernetes Node on which a Kinetica Cluster is running.</p> Import the Images<pre><code>docker import --platformlinux/amd64 kinetica-k8s-cpu-v7.2.2-2.ga-3.tar registry:repository/kinetica-k8s-cpu:v7.2.0-3.rc-3\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/alternative_charts/","title":"Using Alternative Helm Charts","text":"<p>If requested by Kinetica Support you can search and use pre-release versions of the Kinetica Helm Charts.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/alternative_charts/#install-from-a-developmentpre-release-chart-version","title":"Install from a development/pre-release chart version","text":"<p>Find all alternative chart versions with:</p> Find alternative chart versions<pre><code>helm search repo kinetica-operators --devel --versions\n</code></pre> <p></p> <p>Then append <code>--devel --version [CHART-DEVEL-VERSION]</code> to the end of the Helm install command.</p> Helm install kinetica-operators<pre><code>helm -n kinetica-system install \\\nkinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--devel \\\n--version 72.0 \\\n--values values.onPrem.k8s.yaml \\\n--set db.gpudbCluster.license=\"LICENSE-KEY\" \\\n--set dbAdminUser.password=\"PASSWORD\" \\\n--set global.defaultStorageClass=\"DEFAULT-STORAGE-CLASS\"\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/ingress_configuration/","title":"Ingress Configuration","text":"<ul> <li> <p> <code>ingress-nginx</code> Configuration</p> <p>How to enable Ingress with <code>ingress-nginx</code> for Kinetica DB.</p> <p> <code>ingress-nginx</code></p> </li> <li> <p> <code>nginx-ingress</code> Configuration</p> <p>How to enable Ingress with <code>nginx-ingress</code> for Kinetica DB.</p> <p> <code>nginx-ingress</code></p> </li> </ul>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/","title":"<code>ingress-nginx</code> Ingress Configuration","text":"<p>To use an 'external' ingress-nginx controller  i.e. not the one optionally installed  by the Kinetica Operators Helm chart it is necessary to  disable ingress in the <code>KineticaCluster</code> CR.</p> <p>The field <code>spec.ingressController: nginx</code> should be set to <code>spec.ingressController: none</code>.</p> <p>It is then necessary to create the required Ingress CRs by hand. Below is a list of the Ingress paths that need to be exposed along with sample ingress-nginx CRs.</p>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#required-ingress-routes","title":"Required Ingress Routes","text":"","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#ingress-routes","title":"Ingress Routes","text":"","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#gadmin-paths","title":"GAdmin Paths","text":"Path Service Port <code>/gadmin</code> <code>cluster-name-gadmin-service</code> <code>gadmin</code> (8080/TCP) <code>/tableau</code> <code>cluster-name-gadmin-service</code> <code>gadmin</code> (8080/TCP) <code>/files</code> <code>cluster-name^-gadmin-service</code> <code>gadmin</code>   (8080/TCP) <p>where <code>cluster-name</code> is the name of the Kinetica Cluster  i.e. what is in the <code>.spec.gpudbCluster.clusterName</code> in the KineticaCluster CR.</p>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#workbench-paths","title":"Workbench Paths","text":"Path Service Port <code>/</code> <code>workbench-workbench-service</code> <code>workbench-port</code> (8000/TCP)","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#db-rank-0-paths","title":"DB <code>rank-0</code> Paths","text":"Path Service Port <code>/cluster-145025b8(/gpudb-0(/.*|$))</code> <code>cluster-145025b8-rank0-service</code> <code>httpd</code> (8082/TCP) <code>/cluster-145025b8/gpudb-0/hostmanager(.*)</code> <code>cluster-145025b8-rank0-service</code> <code>hostmanager</code> (9300/TCP)","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#db-rank-n-paths","title":"DB <code>rank-N</code> Paths","text":"Path Service Port <code>/cluster-145025b8(/gpudb-N(/.*|$))</code> <code>cluster-145025b8-rank1-service</code> <code>httpd</code> (8082/TCP) <code>/cluster-145025b8/gpudb-N/hostmanager(.*)</code> <code>cluster-145025b8-rank1-service</code> <code>hostmanager</code> (9300/TCP)","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#reveal-paths","title":"Reveal Paths","text":"Path Service Port <code>/reveal</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/caravel</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/static</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/logout</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/resetmypassword</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/dashboardmodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/dashboardmodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/slicemodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/slicemodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/sliceaddview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/databaseview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/databaseasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/databasetablesasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/tablemodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/csstemplatemodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/csstemplatemodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/users</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/roles</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/userstatschartview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/permissions</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/viewmenus</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/permissionviews</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/accessrequestsmodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/accessrequestsmodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/logmodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/logmodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/userinfoeditview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/tablecolumninlineview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/sqlmetricinlineview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP)","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#example-ingress-crs","title":"Example Ingress CRs","text":"","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#example-gadmin-ingress-cr","title":"Example GAdmin Ingress CR","text":"Example GAdmin Ingress CR <p>Example GAdmin Ingress CR<pre><code>apiVersion: networking.k8s.io/v1\nkind: Ingress\nmetadata:\n  name:  cluster-name-gadmin-ingress #(1)!\n  namespace: gpudb\nspec:\n  ingressClassName: nginx\n  tls:\n    - hosts:\n        - cluster-name.example.com #(1)!\n      secretName: kinetica-tls\n  rules:\n    - host: cluster-name.example.com #(1)!\n      http:\n        paths:\n          - path: /gadmin\n            pathType: Prefix\n            backend:\n              service:\n                name: cluster-name-gadmin-service #(1)!\n                port:\n                  name: gadmin\n          - path: /tableau\n            pathType: Prefix\n            backend:\n              service:\n                name: cluster-name-gadmin-service #(1)!\n                port:\n                  name: gadmin\n          - path: /files\n            pathType: Prefix\n            backend:\n              service:\n                name: cluster-name-gadmin-service #(1)!\n                port:\n                  name: gadmin\n</code></pre>  1. where <code>cluster-name</code> is the name of the Kinetica Cluster</p>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#example-rank-ingress-cr","title":"Example Rank Ingress CR","text":"Example Rank Ingress CR Example Rank Ingress CR<pre><code>apiVersion: networking.k8s.io/v1\nkind: Ingress\nmetadata:\n  name: cluster-name-rank1-ingress\n  namespace: gpudb\nspec:\n  ingressClassName: nginx\n  tls:\n    - hosts:\n        - cluster-name.example.com\n      secretName: kinetica-tls\n  rules:\n    - host: cluster-name.example.com\n      http:\n        paths:\n          - path: /cluster-name(/gpudb-1(/.*|$))\n            pathType: Prefix\n            backend:\n              service:\n                name: cluster-name-rank1-service\n                port:\n                  name: httpd\n          - path: /cluster-name/gpudb-1/hostmanager(.*)\n            pathType: Prefix\n            backend:\n              service:\n                name: cluster-name-rank1-service\n                port:\n                  name: hostmanager\n</code></pre> <ol> <li>where <code>cluster-name</code> is the name of the Kinetica Cluster</li> </ol>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#example-reveal-ingress-cr","title":"Example Reveal Ingress CR","text":"Example Reveal Ingress CR <p>Example Reveal Ingress CR<pre><code>    apiVersion: networking.k8s.io/v1\n    kind: Ingress\n    metadata:\n      name: cluster-name-reveal-ingress\n      namespace: gpudb\n    spec:\n      ingressClassName: nginx\n      tls:\n        - hosts:\n            - cluster-name.example.com\n          secretName: kinetica-tls\n      rules:\n        - host: cluster-name.example.com\n          http:\n            paths:\n              - path: /reveal\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /caravel\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /static\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /logout\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /resetmypassword\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /dashboardmodelview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /dashboardmodelviewasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /slicemodelview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /slicemodelviewasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /sliceaddview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /databaseview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /databaseasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /databasetablesasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /tablemodelview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /tablemodelviewasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /csstemplatemodelview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /csstemplatemodelviewasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /users\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /roles\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /userstatschartview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /permissions\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /viewmenus\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /permissionviews\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /accessrequestsmodelview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /accessrequestsmodelviewasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /logmodelview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /logmodelviewasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /userinfoeditview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /tablecolumninlineview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /sqlmetricinlineview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n</code></pre> 1. where <code>cluster-name</code> is the name of the Kinetica Cluster</p>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#exposing-the-postgres-proxy-port","title":"Exposing the Postgres Proxy Port","text":"<p>In order to access Kinetica's Postgres functionality some TCP (not HTTP) ports need to be open externally.</p> <p>For <code>ingress-nginx</code> a configuration file needs to be created to enable port 5432.</p> <p>tcp-services.yaml<pre><code>apiVersion: v1\nkind: ConfigMap\nmetadata:\n  name: tcp-services\n  namespace: kinetica-system # (1)!\ndata:\n  '5432': gpudb/kinetica-k8s-sample-rank0-service:5432 #(2)!\n  '9002': gpudb/kinetica-k8s-sample-rank0-service:9002 #(3)!\n</code></pre> 1. Change the namespace to the namespace your ingress-nginx controller is running in. e.g. <code>ingress-nginx</code>  2. This exposes the postgres proxy port on the default <code>5432</code> port. If you wish to change this to a non-standard port then it needs to be changed here but also in the Helm <code>values.yaml</code> to match. 3. This port is the Table Monitor port and should always be exposed alongside the Postgres Proxy.</p>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_urls/","title":"Ingress urls","text":""},{"location":"Advanced/ingress_urls/#gadmin-paths","title":"GAdmin Paths","text":"Path Service Port <code>/gadmin</code> <code>cluster-name-gadmin-service</code> <code>gadmin</code> (8080/TCP) <code>/tableau</code> <code>cluster-name-gadmin-service</code> <code>gadmin</code> (8080/TCP) <code>/files</code> <code>cluster-name^-gadmin-service</code> <code>gadmin</code>   (8080/TCP) <p>where <code>cluster-name</code> is the name of the Kinetica Cluster  i.e. what is in the <code>.spec.gpudbCluster.clusterName</code> in the KineticaCluster CR.</p>"},{"location":"Advanced/ingress_urls/#workbench-paths","title":"Workbench Paths","text":"Path Service Port <code>/</code> <code>workbench-workbench-service</code> <code>workbench-port</code> (8000/TCP)"},{"location":"Advanced/ingress_urls/#db-rank-0-paths","title":"DB <code>rank-0</code> Paths","text":"Path Service Port <code>/cluster-145025b8(/gpudb-0(/.*|$))</code> <code>cluster-145025b8-rank0-service</code> <code>httpd</code> (8082/TCP) <code>/cluster-145025b8/gpudb-0/hostmanager(.*)</code> <code>cluster-145025b8-rank0-service</code> <code>hostmanager</code> (9300/TCP)"},{"location":"Advanced/ingress_urls/#db-rank-n-paths","title":"DB <code>rank-N</code> Paths","text":"Path Service Port <code>/cluster-145025b8(/gpudb-N(/.*|$))</code> <code>cluster-145025b8-rank1-service</code> <code>httpd</code> (8082/TCP) <code>/cluster-145025b8/gpudb-N/hostmanager(.*)</code> <code>cluster-145025b8-rank1-service</code> <code>hostmanager</code> (9300/TCP)"},{"location":"Advanced/ingress_urls/#reveal-paths","title":"Reveal Paths","text":"Path Service Port <code>/reveal</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/caravel</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/static</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/logout</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/resetmypassword</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/dashboardmodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/dashboardmodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/slicemodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/slicemodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/sliceaddview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/databaseview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/databaseasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/databasetablesasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/tablemodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/csstemplatemodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/csstemplatemodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/users</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/roles</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/userstatschartview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/permissions</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/viewmenus</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/permissionviews</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/accessrequestsmodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/accessrequestsmodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/logmodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/logmodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/userinfoeditview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/tablecolumninlineview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/sqlmetricinlineview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP)"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/","title":"Kinetica images list for airgapped environments","text":"Kinetica Images for an Air-Gapped Environment <p>If you are installing Kinetica with Helm in an air-gapped environment you will either need a Registry Proxy to pass the requests through or to download the images and push them to your internal Registry.</p> <p>For information on ways to transfer the files into an air-gapped environment See here.</p>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#required-container-images","title":"Required Container Images","text":""},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#dockerio-required-kinetica-images-for-all-installations","title":"docker.io (Required Kinetica Images for All Installations)","text":"<ul> <li>docker.io/kinetica/kinetica-k8s-operator:v7.2.0-3.rc-3<ul> <li>docker.io/kinetica/kinetica-k8s-cpu:v7.2.0-3.rc-3 or </li> <li>docker.io/kinetica/kinetica-k8s-cpu-avx512:v7.2.0-3.rc-3 or </li> <li>docker.io/kinetica/kinetica-k8s-gpu:v7.2.0-3.rc-3</li> </ul> </li> <li>docker.io/kinetica/workbench-operator:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/workbench:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/kinetica-k8s-monitor:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/busybox:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/fluent-bit:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/kagent:7.1.9.15.20230823123615.ga</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#nvcrio-required-kinetica-images-for-gpu-installations-using-kinetica-k8s-gpu","title":"nvcr.io (Required Kinetica Images for GPU Installations using <code>kinetica-k8s-gpu</code>)","text":"<ul> <li>nvcr.io/nvidia/gpu-operator:v23.9.1</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#registryk8sio-required-kinetica-images-for-gpu-installations-using-kinetica-k8s-gpu","title":"registry.k8s.io (Required Kinetica Images for GPU Installations using <code>kinetica-k8s-gpu</code>)","text":"<ul> <li>registry.k8s.io/nfd/node-feature-discovery:v0.14.2</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#dockerio-required-supporting-images","title":"docker.io (Required Supporting Images)","text":"<ul> <li>docker.io/bitnami/openldap:2.6.7</li> <li>docker.io/alpine/openssl:latest (used by bitnami/openldap)</li> <li>docker.io/otel/opentelemetry-collector-contrib:0.95.0</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#quayio-required-supporting-images","title":"quay.io (Required Supporting Images)","text":"<ul> <li>quay.io/brancz/kube-rbac-proxy:v0.14.2</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#optional-container-images","title":"Optional Container Images","text":"<p>These images are only required if certain features are enabled as part of the Helm installation: -</p> <ul> <li>CertManager</li> <li>ingress-ninx</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#quayio-optional-supporting-images","title":"quay.io (Optional Supporting Images)","text":"<ul> <li>quay.io/jetstack/cert-manager-cainjector:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> <li>quay.io/jetstack/cert-manager-controller:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> <li>quay.io/jetstack/cert-manager-webhook:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#registryk8sio-optional-supporting-images","title":"registry.k8s.io (Optional Supporting Images)","text":"<ul> <li>registry.k8s.io/ingress-nginx/controller:v1.9.4 (if optionally installing Ingress nGinx via Kinetica Helm Chart)</li> <li>registry.k8s.io/ingress-nginx/controller:v1.9.6@sha256:1405cc613bd95b2c6edd8b2a152510ae91c7e62aea4698500d23b2145960ab9c</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#which-kinetica-core-image-do-i-use","title":"Which Kinetica Core Image do I use?","text":"Container Image Intel (AMD64) Intel (AMD64 AVX512) Amd (AMD64) Graviton (aarch64) Apple Silicon (aarch64) kinetica-k8s-cpu (1) kinetica-k8s-cpu-avx512 kinetica-k8s-gpu (2) (2) (2) <ol> <li>It is preferable on an Intel AVX512 enabled CPU to use the kinetica-k8s-cpu-avx512 container image</li> <li>With a supported nVidia GPU.</li> </ol>"},{"location":"Advanced/kinetica_mac_arm_k8s/","title":"Kinetica DB on Kubernetes","text":"<p>This walkthrough will show how to install Kinetica DB on a Mac running OS X. The Kubernetes cluster will be running on VMs with Ubuntu Linux 22.04 ARM64. </p> <p>This solution is equivalent to a production bare metal installation and does  not use Docker, Podman or QEMU but rather Apple native Virtualization.</p> <p>The Kubernetes cluster will consist of one Master node <code>k8smaster1</code> and two Worker nodes <code>k8snode1</code> &amp; <code>k8snode2</code>.</p> <p>The virtualization platform is UTM. </p> <p>Obtain a Kinetica License Key</p> <p>A product license key will be required for install. Please contact Kinetica Support to request a trial key.</p> <p>Download and install UTM.</p>","tags":["Advanced","Development"]},{"location":"Advanced/kinetica_mac_arm_k8s/#create-the-vms","title":"Create the VMs","text":"","tags":["Advanced","Development"]},{"location":"Advanced/kinetica_mac_arm_k8s/#k8smaster1","title":"<code>k8smaster1</code>","text":"<p>For this walkthrough the master node will be 4 vCPU, 8 GB RAM &amp; 40-64 GB disk.</p> <p>Start the creation of a new VM in UTM. Select <code>Virtualize</code></p> <p></p> <p>Select Linux as the VM OS.</p> <p></p> <p>On the Linux page - Select <code>Use Apple Virtualization</code> and an Ubuntu 22.04 (Arm64) ISO.</p> <p></p> <p>As this is the master Kubernetes node (VM) it can be smaller than the nodes hosting the Kinetica DB itself.</p> <p>Set the memory to 8 GB and the number of CPUs to 4.</p> <p></p> <p>Set the storage to between 40-64 GB.</p> <p></p> <p>This next step is optional if you wish to setup a shared folder between your Mac host &amp; the Linux VM.</p> <p></p> <p>The final step to create the VM is a summary. Please check the values shown and hit <code>Save</code></p> <p></p> <p>You should now see your new VM in the left hand pane of the UTM UI.</p> <p></p> <p>Go ahead and click the  button.</p> <p>Once the Ubuntu installer comes up follow the steps selecting whichever keyboard etc. you require.</p> <p>The only changes you need to make are: -</p> <ul> <li>Change the installation to <code>Ubuntu Server (minimized)</code></li> <li>Your server's name to <code>k8smaster1</code></li> <li>Enable OpenSSH server.</li> </ul> <p>and complete the installation.</p> <p>Reboot the VM, remove the ISO from the 'external' drive .  Log in to the VM and get the VMs IP address with</p> Bash<pre><code>ip a\n</code></pre> <p>Make a note of the IP for later use.</p>","tags":["Advanced","Development"]},{"location":"Advanced/kinetica_mac_arm_k8s/#k8snode1-k8snode2","title":"<code>k8snode1</code> &amp; <code>k8snode2</code>","text":"<p>Repeat the same process to provision one or two nodes depending on how much memory you have available on the Mac.</p> <p>You need to change the RAM size to 16 GB. You can leave the vCPU count at 4.  For the disk size that depends on how much data you want to ingest.  It should however be at least 4x RAM size.</p> <p>Once installed again log in to the VM and get the VMs IP address with</p> Bash<pre><code>ip a\n</code></pre> <p>Note</p> <p>Make a note of the IP(s) for later use.</p> <p>Your VMs are complete</p> <p>Continue installing your new VMs by following  Bare Metal/VM Installation</p>","tags":["Advanced","Development"]},{"location":"Advanced/kube_vip_loadbalancer/","title":"Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations","text":"<p>For our example we are going to enable a Kubernetes based LoadBalancer to issue IP addresses to our Kubernetes Services of type <code>LoadBalancer</code> using <code>kube-vip</code>.</p> Ingress Service is pending <p>The <code>ingress-nginx-controller</code> is currently in the <code>pending</code> state as there is no CCM/LoadBalancer </p>","tags":["Advanced","Ingress","Installation"]},{"location":"Advanced/kube_vip_loadbalancer/#kube-vip","title":"<code>kube-vip</code>","text":"<p>We will install two components into our Kubernetes CLuster</p> <ul> <li>kube-vip-cloud-controller</li> <li>Kubernetes Load-Balancer Service</li> </ul>","tags":["Advanced","Ingress","Installation"]},{"location":"Advanced/kube_vip_loadbalancer/#kube-vip-cloud-controller","title":"kube-vip-cloud-controller","text":"<p>Quote</p> <p>The kube-vip cloud provider can be used to populate  an IP address for Services of type LoadBalancer similar to what  public cloud providers allow through a Kubernetes CCM.</p> Install the kube-vip CCM <p></p> Install the kube-vip CCM<pre><code>kubectl apply -f https://raw.githubusercontent.com/kube-vip/kube-vip-cloud-provider/main/manifest/kube-vip-cloud-controller.yaml\n</code></pre> <p>Now we need to setup the required RBAC permissions: -</p> Install the kube-vip RBAC <p></p> Install kube-vip RBAC<pre><code>kubectl apply -f https://kube-vip.io/manifests/rbac.yaml\n</code></pre> <p>The following ConfigMap will configure the <code>kube-vip-cloud-controller</code> to obtain IP addresses from the host networks DHCP server. i.e. the DHCP on the physical network that the host machine or VM is connected to.</p> Install the kube-vip ConfigMap <p></p> Install the kube-vip ConfigMap<pre><code>apiVersion: v1\nkind: ConfigMap\nmetadata:\n  name: kubevip\n  namespace: kube-system\ndata:\n  cidr-global: 0.0.0.0/32\n</code></pre> <p>It is possible to specify IP address ranges see here.</p>","tags":["Advanced","Ingress","Installation"]},{"location":"Advanced/kube_vip_loadbalancer/#kubernetes-load-balancer-service","title":"Kubernetes Load-Balancer Service","text":"Obtain the Master Node IP address &amp; Interface name Obtain the Master Node IP address &amp; Interface name<pre><code>ip a\n</code></pre> <p>In this example the network interface of the master node is <code>192.168.2.180</code> and the interface is <code>enp0s1</code>.</p> <p>We need to apply the <code>kube-vip</code> daemonset but first we need to create the configuration</p> Install the kube-vip Daemonset<pre><code>apiVersion: apps/v1\nkind: DaemonSet\nmetadata:\n  labels:\n    app.kubernetes.io/name: kube-vip-ds\n    app.kubernetes.io/version: v0.7.2\n  name: kube-vip-ds\n  namespace: kube-system\nspec:\n  selector:\n    matchLabels:\n      app.kubernetes.io/name: kube-vip-ds\n  template:\n    metadata:\n      labels:\n        app.kubernetes.io/name: kube-vip-ds\n        app.kubernetes.io/version: v0.7.2\n    spec:\n      affinity:\n        nodeAffinity:\n          requiredDuringSchedulingIgnoredDuringExecution:\n            nodeSelectorTerms:\n            - matchExpressions:\n              - key: node-role.kubernetes.io/master\n                operator: Exists\n            - matchExpressions:\n              - key: node-role.kubernetes.io/control-plane\n                operator: Exists\n      containers:\n      - args:\n        - manager\n        env:\n        - name: vip_arp\n          value: \"true\"\n        - name: port\n          value: \"6443\"\n        - name: vip_interface\n          value: enp0s1\n        - name: vip_cidr\n          value: \"32\"\n        - name: dns_mode\n          value: first\n        - name: cp_enable\n          value: \"true\"\n        - name: cp_namespace\n          value: kube-system\n        - name: svc_enable\n          value: \"true\"\n        - name: svc_leasename\n          value: plndr-svcs-lock\n        - name: vip_leaderelection\n          value: \"true\"\n        - name: vip_leasename\n          value: plndr-cp-lock\n        - name: vip_leaseduration\n          value: \"5\"\n        - name: vip_renewdeadline\n          value: \"3\"\n        - name: vip_retryperiod\n          value: \"1\"\n        - name: address\n          value: 192.168.2.180\n        - name: prometheus_server\n          value: :2112\n        image: ghcr.io/kube-vip/kube-vip:v0.7.2\n        imagePullPolicy: Always\n        name: kube-vip\n        resources: {}\n        securityContext:\n          capabilities:\n            add:\n            - NET_ADMIN\n            - NET_RAW\n      hostNetwork: true\n      serviceAccountName: kube-vip\n      tolerations:\n      - effect: NoSchedule\n        operator: Exists\n      - effect: NoExecute\n        operator: Exists\n  updateStrategy: {}\n</code></pre> <p>Lines 5, 7, 12, 16, 38 and 62 need modifying to your environment.</p> Install the kube-vip Daemonset <p></p> <p>ARP or BGP</p> <p>The Daemonset above uses ARP to communicate with the network it is also possible to use BGP. See Here</p> Example showing DHCP allocated external IP address to the Ingress Controller <p></p> <p>Our <code>ingress-nginx-controller</code> has been allocated the IP Address <code>192.168.2.194</code>.  </p> <p>Ingress Access</p> <p>The <code>ingress-niginx-controller</code> requires the host FQDN to be on the user requests in order to know how to route the requests to the correct Kubernetes Service. Using the iP address in the URL will cause an error as ingress cannot select the correct service.</p> List Ingress <p></p> <p></p> <p>If you did not set the FQDN of the Kinetica Cluster to a DNS resolvable hostname add <code>local.kinetica</code> to your <code>/etc/hosts/</code> file in order to be able to access the Kinetica URLs</p> Edit /etc/hosts <p></p> <p>Accessing the Workbench</p> <p>You should be able to access the workbench at http://local.kinetica</p>","tags":["Advanced","Ingress","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/","title":"Bare Metal/VM Installation - <code>kubeadm</code>","text":"<p>This walkthrough will show how to install Kinetica DB. For this example the Kubernetes cluster will be running on 3 VMs with Ubuntu Linux 22.04 (ARM64).</p> <p>This solution is equivalent to a production bare metal installation and does not use Docker, Podman or QEMU.</p> <p>The Kubernetes cluster requires 3 VMs consiting of one Master node <code>k8smaster1</code> and two Worker nodes <code>k8snode1</code> &amp; <code>k8snode2</code>.</p> <p>Purple Example Boxes</p> <p>The purple boxes in the instructions below can be expanded for a screen recording of the  commands &amp; their results.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#kubernetes-node-installation","title":"Kubernetes Node Installation","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#setup-the-kubernetes-nodes","title":"Setup the Kubernetes Nodes","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#edit-etchosts","title":"Edit <code>/etc/hosts</code>","text":"<p>SSH into each of the nodes and run the following: -</p> Edit `/etc/hosts<pre><code>sudo vi /etc/hosts\n\nx.x.x.x k8smaster1\nx.x.x.x k8snode1\nx.x.x.x k8snode2\n</code></pre> <p>where x.x.x.x is the IP Address of the corresponding nose.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#disable-linux-swap","title":"Disable Linux Swap","text":"<p>Next we need to disable Swap on Linux: -</p> Disable Swap <p></p> Disable Swap<pre><code>sudo swapoff -a\n\nsudo vi /etc/fstab\n</code></pre> <p>comment out the swap entry in <code>/etc/fstab</code> on each node.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#linux-system-configuration-changes","title":"Linux System Configuration Changes","text":"<p>We are using containerd as the container runtime but in order to do so we need to make some system level changes on Linux.</p> Linux System Configuration Changes <p></p> Linux System Configuration Changes<pre><code>cat &lt;&lt; EOF | sudo tee /etc/modules-load.d/containerd.conf\noverlay\nbr_netfilter\nEOF\n\nsudo modprobe overlay\n\nsudo modprobe br_netfilter\n\ncat &lt;&lt; EOF | sudo tee /etc/sysctl.d/99-kubernetes-cri.conf\nnet.bridge.bridge-nf-call-iptables = 1\nnet.ipv4.ip_forward = 1\nnet.bridge.bridge-nf-call-ip6tables = 1\nEOF\n\nsudo sysctl --system\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#container-runtime-installation","title":"Container Runtime Installation","text":"<p>Run on all nodes (VMs)</p> <p>Run the following commands, until advised not to, on all of the VMs you created.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-containerd","title":"Install <code>containerd</code>","text":"Install <code>containerd</code> Install `containerd`<pre><code>sudo apt update\n\nsudo apt install -y containerd\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#create-a-default-containerd-config","title":"Create a Default <code>containerd</code> Config","text":"Create a Default <code>containerd</code> Config Create a Default `containerd` Config<pre><code>sudo mkdir -p /etc/containerd\n\nsudo containerd config default | sudo tee /etc/containerd/config.toml\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#enable-system-cgroup","title":"Enable System CGroup","text":"<p>Change the SystemdCgroup value to true in the containerd configuration file and restart the service</p> Enable System CGroup <p></p> Enable System CGroup<pre><code>sudo sed -i 's/SystemdCgroup \\= false/SystemdCgroup \\= true/g' /etc/containerd/config.toml\n\nsudo systemctl restart containerd\nsudo systemctl enable containerd\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-pre-requisiteutility-packages","title":"Install Pre-requisite/Utility packages","text":"Install Pre-requisite/Utility packages Install Pre-requisite/Utility packages<pre><code>sudo apt update\n\nsudo apt install -y apt-transport-https ca-certificates curl gpg git\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#download-the-kubernetes-public-signing-key","title":"Download the Kubernetes public signing key","text":"Download the Kubernetes public signing key Download the Kubernetes public signing key<pre><code>curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.29/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#add-the-kubernetes-package-repository","title":"Add the Kubernetes Package Repository","text":"Add the Kubernetes Package Repository<pre><code>echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.29/deb/ /' | sudo tee /etc/apt/sources.list.d/kubernetes.list\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-the-kubernetes-installation-and-management-tools","title":"Install the Kubernetes Installation and Management Tools","text":"Install the Kubernetes Installation and Management Tools Install the Kubernetes Installation and Management Tools<pre><code>sudo apt update\n\nsudo apt install -y kubeadm=1.29.0-1.1  kubelet=1.29.0-1.1  kubectl=1.29.0-1.1 \n\nsudo apt-mark hold kubeadm kubelet kubectl\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#initialize-the-kubernetes-cluster","title":"Initialize the Kubernetes Cluster","text":"<p>Initialize the Kubernetes Cluster by using kubeadm on the <code>k8smaster1</code> control plane node.</p> <p>Note</p> <p>You will need an IP Address range for the Kubernetes Pods. This range is provided to <code>kubeadm</code> as part of the initialization. For our cluster of three nodes, given the default number of pods supported by a node (110) we need a CIDR of at least 330 distinct IP Addresses. Therefore, for this example we will use a <code>--pod-network-cidr</code> of <code>10.1.1.0/22</code> which allows for 1007 usable IPs. The reason for this is each node will get <code>/24</code> of the <code>/22</code> total.</p> <p>The <code>apiserver-advertise-address</code> should be the IP Address of the <code>k8smaster1</code> VM.</p> Initialize the Kubernetes Cluster <p></p> Initialize the Kubernetes Cluster<pre><code>sudo kubeadm init --pod-network-cidr 10.1.1.0/22 --apiserver-advertise-address 192.168.2.180 --kubernetes-version 1.29.2\n</code></pre> <p>You should now deploy a pod network to the cluster. Run <code>kubectl apply -f [podnetwork].yaml</code> with one of the options listed at: Cluster Administration Addons</p> <p>Make a note of the portion of the shell output which gives the join command which we will need to add our worker nodes to the master.</p> <p>Copy the <code>kudeadm join</code> command</p> <p>Then you can join any number of worker nodes by running the following on each as root:</p> Copy the `kudeadm join` command<pre><code>kubeadm join 192.168.2.180:6443 --token wonuiv.v93rkizr6wvxwe6l \\\n--discovery-token-ca-cert-hash sha256:046ffa6303e6b281285a636e856b8e9e51d8c755248d9d013e15ae5c5f6bb127\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#setup-kubeconfig","title":"Setup <code>kubeconfig</code>","text":"<p>Before we add the worker nodes we can setup the <code>kubeconfig</code> so we will be able to use <code>kubectl</code> going forwards.</p> Setup <code>kubeconfig</code> <p></p> Setup `kubeconfig`<pre><code>sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config\nsudo chown $(id -u):$(id -g) $HOME/.kube/config\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#connect-list-the-kubernetes-cluster-nodes","title":"Connect &amp; List the Kubernetes Cluster Nodes","text":"<p>We can now run <code>kubectl</code> to connect to the Kubernetes API Server to display the nodes in the newly created Kubernetes CLuster.</p> Connect &amp; List the Kubernetes Cluster Nodes <p></p> Connect &amp; List the Kubernetes Cluster Nodes<pre><code>kubectl get nodes\n</code></pre> <p>STATUS = NotReady</p> <p>From the <code>kubectl</code> output the status of the <code>k8smaster1</code> node is showing as <code>NotReady</code> as we have yet to install the Kubernetes Network to the cluster.</p> <p>We will be installing <code>cilium</code> as that provider in a future step.</p> <p>Warning</p> <p>At this point we should complete the installations of the worker nodes to this same point before continuing.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#join-the-worker-nodes-to-the-cluster","title":"Join the Worker Nodes to the Cluster","text":"<p>Once installed we run the join on the worker nodes. Note that the command which was output from the <code>kubeadm init</code> needs to run with <code>sudo</code></p> Join the Worker Nodes to the Cluster<pre><code>sudo kubeadm join 192.168.2.180:6443 --token wonuiv.v93rkizr6wvxwe6l \\\n    --discovery-token-ca-cert-hash sha256:046ffa6303e6b281285a636e856b8e9e51d8c755248d9d013e15ae5c5f6bb127\n</code></pre> <code>kubectl get nodes</code> <p></p> <p>Now we can again run</p> `kubectl get nodes`<pre><code>kubectl get nodes\n</code></pre> <p>Now we can see all the nodes are present in the Kubernetes Cluster.</p> <p>Run on Head Node only</p> <p>From now the following cpmmands need to be run on the Master Node only..</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-kubernetes-networking","title":"Install Kubernetes Networking","text":"<p>We now need to install a Kubernetes CNI (Container Network Interface) to enable the pod network.</p> <p>We will use Cilium as the CNI for our cluster.</p> Installing the Cilium CLI<pre><code>curl -LO https://github.com/cilium/cilium-cli/releases/latest/download/cilium-linux-arm64.tar.gz\nsudo tar xzvfC cilium-linux-arm64.tar.gz /usr/local/bin\nrm cilium-linux-arm64.tar.gz\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-cilium","title":"Install <code>cilium</code>","text":"<p>You can now install Cilium with the following command:</p> Install `cilium`<pre><code>cilium install\ncilium status \n</code></pre> <p>If <code>cilium status</code> shows errors you may need to wait until the Cilium pods have started.</p> <p>You can check progress with</p> Bash<pre><code>kubectl get po -A\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#check-cilium-status","title":"Check <code>cilium</code> Status","text":"<p>Once Cilium the Cilium pods are running we can check the status of Cilium again by using</p> Check <code>cilium</code> Status <p></p> Check `cilium` Status<pre><code>cilium status \n</code></pre> <p>We can now recheck the Kubernetes Cluster Nodes</p> <p></p> Bash<pre><code>kubectl get nodes\n</code></pre> <p>and they should have <code>Status Ready</code></p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#kubernetes-node-preparation","title":"Kubernetes Node Preparation","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#label-kubernetes-nodes","title":"Label Kubernetes Nodes","text":"<p>Now we go ahead and label the nodes. Kinetica uses node labels in production clusters where there are separate 'node groups'  configured so that the Kinetica Infrastructure pods are deployed on a smaller VM type and the DB itself is deployed on larger nodes or gpu enabled nodes.</p> <p>If we were using a Cloud Provider Kubernetes these are synonymous with EKS Node Groups or AKS VMSS which would be created with the same two labels on two node groups.</p> Label Kubernetes Nodes<pre><code>kubectl label node k8snode1 app.kinetica.com/pool=infra\nkubectl label node k8snode2 app.kinetica.com/pool=compute\n</code></pre> <p>additionally in our case as we have created a new cluster the 'role' of the worker nodes is not set so we can also set that. In many cases the role is already set to <code>worker</code> but here we have some latitude.</p> <p></p> Bash<pre><code>kubectl label node k8snode1 kubernetes.io/role=kinetica-infra\nkubectl label node k8snode2 kubernetes.io/role=kinetica-compute\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-storage-class","title":"Install Storage Class","text":"<p>Install a local path provisioner storage class. In this case we are using the Rancher Local Path provisioner</p> Install Storage Class <p></p> Install Storage Class<pre><code>kubectl apply -f https://raw.githubusercontent.com/rancher/local-path-provisioner/v0.0.26/deploy/local-path-storage.yaml\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#set-default-storage-class","title":"Set Default Storage Class","text":"Set Default Storage Class Set Default Storage Class<pre><code>kubectl patch storageclass local-path -p '{\"metadata\": {\"annotations\":{\"storageclass.kubernetes.io/is-default-class\":\"true\"}}}'\n</code></pre> <p>Kubernetes Cluster Provision Complete</p> <p>Your basre Kubernetes Cluster is now complete and ready to have the Kinetica DB installed on it using the Helm Chart.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-kinetica-for-kubernetes-using-helm","title":"Install Kinetica for Kubernetes using Helm","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#add-the-helm-repository","title":"Add the Helm Repository","text":"Add the Helm Repository Add the Helm Repository<pre><code>helm repo add kinetica-operators https://kineticadb.github.io/charts\nhelm repo update\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#download-a-starter-helm-valuesyaml","title":"Download a Starter Helm <code>values.yaml</code>","text":"<p>Now we need to obtain a starter <code>values.yaml</code> file to pass to our Helm install. We can download one from the <code>github.com/kineticadb/charts</code> repo.</p> Download a Starter Helm <code>values.yaml</code> <p></p> Download a Starter Helm `values.yaml`<pre><code>    wget https://raw.githubusercontent.com/kineticadb/charts/master/kinetica-operators/values.onPrem.k8s.yaml\n</code></pre> <p>Obtain a Kinetica License Key</p> <p>A product license key will be required for install. Please contact Kinetica Support to request a trial key.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#helm-install-kinetica","title":"Helm Install Kinetica","text":"#### Helm Install Kinetica Helm install kinetica-operators<pre><code>helm -n kinetica-system upgrade -i \\\nkinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--values values.onPrem.k8s.yaml \\\n--set db.gpudbCluster.license=\"LICENSE-KEY\" \\\n--set dbAdminUser.password=\"PASSWORD\" \\\n--set global.defaultStorageClass=\"local-path\"\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#monitor-kinetica-startup","title":"Monitor Kinetica Startup","text":"<p>After a few moments, follow the progression of the main database pod startup with:</p> Monitor the Kinetica installation progress<pre><code>kubectl -n gpudb get po gpudb-0 -w\n</code></pre> <p>Kinetica DB Provision Complete</p> <p>Once you see <code>gpudb-0 3/3 Running</code> the database is up and running.</p> <p>Software LoadBalancer</p> <p>If you require a software based LoadBalancer to allocate IP address to the  Ingress Controller or exposed Kubernetes Services then see here</p> <p>This is usually apparent if your ingress or other Kubernetes Services with the type <code>LoadBalancer</code> are stuck in the <code>Pending</code> state.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/minio_s3_dev_test/","title":"Using Minio for S3 Storage in Dev/Test","text":"<p>If you require a new Minio installation</p> <p>Please follow the installation instructions found  here  to install the Minio Operator and to create your first tenant.</p>","tags":["Advanced","Development","Installation","Storage"]},{"location":"Advanced/minio_s3_dev_test/#create-minio-tenant","title":"Create Minio Tenant","text":"<p>In our example below we have created a tenant <code>kinetica</code> in the <code>gpudb</code> namespace using  the Kinetica storage class <code>kinetica-k8s-sample-storageclass</code>.</p> <p></p> <p>or use the minio kubectl plugin</p> minio cli - create tenant<pre><code>kubectl minio tenant create kinetica --capacity 32Gi --servers 1 --volumes 1 --namespace gpudb --storage-class kinetica-k8s-sample-storageclass --disable-tls\n</code></pre> <p>Console Port Forward</p> <p>Forward the minio console for our newly created tenant</p> Bash<pre><code>kubectl port-forward service/kinetica-console -n gpudb 9443:9443\n</code></pre> <p>In that tenant we create a bucket <code>kinetica-cold-storage</code> and in that bucket we create the path <code>gpudb/cold-storage</code>.</p> <p></p> <p>Once you have a tenant up and running we can configure Kinetica for Kubernetes to use  it as the DB Cold Storage tier.</p> <p>Backup/Restore Storage</p> <p>Minio can also be used as the S3 storage for Velero. This enables Backup/Restore functionality via the <code>KineticaBackup</code> &amp; <code>KineticaRestore</code> CRs.</p>","tags":["Advanced","Development","Installation","Storage"]},{"location":"Advanced/minio_s3_dev_test/#configuring-kinetica-to-use-minio","title":"Configuring Kinetica to use Minio","text":"","tags":["Advanced","Development","Installation","Storage"]},{"location":"Advanced/minio_s3_dev_test/#cold-storage","title":"Cold Storage","text":"<p>In order to configure the Cold Storage Tier for the Database it is necessary to add a  <code>coldStorageTier</code> to the <code>KineticaCluster</code> CR. As we are using S3 Buckets for storage we then require <code>coldStorageS3</code> entry which allows us to set the <code>awsSecretAccessKey</code> &amp; <code>awsAccessKeyId</code> which were generated when the tenant was created in Minio. </p> <p>If we look in the <code>gpudb</code> name space we can see that Minio created a  Kubernetes service called <code>minio</code> exposed on port <code>443</code>.   </p> <p>In the <code>coldStorageS3</code> we need to add an <code>endpoint</code> field which contains the <code>minio</code> service name and the namespace <code>gpudb</code> i.e. <code>minio.gpudb.svc.cluster.local</code>.</p> KineticaCluster coldStorageTier S3 Configuration<pre><code>spec:\n  gpudbCluster:\n    config:\n      tieredStorage:\n        coldStorageTier:\n            coldStorageType: s3\n            coldStorageS3:\n            basePath: gpudb/cold-storage/\n            bucketName: kinetica-cold-storage\n            endpoint: minio.gpudb.svc.cluster.local:80\n            limit: \"32Gi\"\n            useHttps: false\n            useManagedCredentials: false\n            useVirtualAddressing: false\n            awsSecretAccessKey: 6rLaOOddP3KStwPDhf47XLHREPdBqdav\n            awsAccessKeyId: VvlP5rHbQqzcYPHG\n      tieredStrategy:\n        default: VRAM 1, RAM 5, PERSIST 5, COLD0 10\n</code></pre>","tags":["Advanced","Development","Installation","Storage"]},{"location":"Advanced/nginx_ingress_config/","title":"<code>nginx-ingress</code> Ingress Configuration","text":"","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/nginx_ingress_config/#coming-soon","title":"Coming Soon","text":"","tags":["Advanced","Configuration","Ingress"]},{"location":"Architecture/","title":"Architecture","text":"<p>Kinetica is a distributed, vectorized, memory-first, columnar database with tiered storage that is optimized for high speed and performance \u2013 particularly on streaming analytics and geospatial workloads.</p> <p>Kinetica has been uniquely designed for fast and flexible analytics on large volumes of changing data with incredible performance.</p> <ul> <li> <p> Kinetica Database Architecture</p> <p>Install the Kinetica DB with helm and get up and running in minutes   Core Database Architecture</p> </li> <li> <p> Kinetica for Kubernetes Architecture</p> <p>Install the Kinetica DB with helm and get up and running in minutes   Kubernetes Architecture</p> </li> </ul>","tags":["Architecture"]},{"location":"Architecture/db_architecture/","title":"Architecture","text":"<p>Kinetica is a distributed, vectorized, memory-first, columnar database with tiered storage that is optimized for high speed and performance \u2013 particularly on streaming analytics and geospatial workloads.</p> <p>Kinetica has been uniquely designed for fast and flexible analytics on large volumes of changing data with incredible performance.</p>","tags":["Architecture"]},{"location":"Architecture/db_architecture/#database-architecture","title":"Database Architecture","text":"","tags":["Architecture"]},{"location":"Architecture/db_architecture/#scale-out-architecture","title":"Scale-out Architecture","text":"<p>Kinetica has a distributed architecture that has been designed for data processing at scale. A standard cluster consists of identical nodes run on commodity hardware. A single node is chosen to be the head aggregation node.</p> <p> A cluster can be scaled up at any time to increase storage capacity and processing power, with near-linear scale processing improvements for most operations. Sharding of data can be done automatically, or specified and optimized by the user.</p>","tags":["Architecture"]},{"location":"Architecture/db_architecture/#distributed-ingest-query","title":"Distributed Ingest &amp; Query","text":"<p>Kinetica uses a shared-nothing data distribution across worker nodes. The head node receives a query and breaks it down into small tasks that can be spread across worker nodes. To avoid bottlenecks at the head node, ingestion can also be organized in parallel by all the worker nodes. Kinetica is able to distribute data client-side before sending it to designated worker nodes. This streamlines communication and processing time.</p> <p>For the client application, there is no need to be aware of how many nodes are in the cluster, where they are, or how the data is distributed across them!</p> <p></p>","tags":["Architecture"]},{"location":"Architecture/db_architecture/#column-oriented","title":"Column Oriented","text":"<p>Columnar data structures lend themselves to low-latency reads of data. But from a user's perspective, Kinetica behaves very similarly to a standard relational database \u2013 with tables of rows and columns and it can be queried with SQL or through APIs. Available column types include the standard base types (int, long, float, double, string, &amp; bytes), as well as numerous sub-types supporting date/time, geospatial, and other data forms.</p> <p></p>","tags":["Architecture"]},{"location":"Architecture/db_architecture/#vectorized-functions","title":"Vectorized Functions","text":"<p>Vectorization is Kinetica\u2019s secret sauce and the key feature that underpins its blazing fast performance.</p> <p>Advanced vectorized kernels are optimized to use vectorized CPUs and GPUs for faster performance. The query engine automatically assigns tasks to the processor where they will be most performant. Aggregations, filters, window functions, joins and geospatial rendering are some of the capabilities that see performance improvements.</p> <p></p>","tags":["Architecture"]},{"location":"Architecture/db_architecture/#memory-first-tiered-storage","title":"Memory-First, Tiered Storage","text":"<p>Tiered storage makes it possible to optimize where data lives for performance and cost. Recent data (such as all data where the timestamp is within the last 2 weeks) can be held in-memory, while older data can be moved to disk, or even to external storage services.</p> <p>Kinetica operates on an entire data corpus by intelligently managing data across GPU memory, system memory, SIMD, disk / SSD, HDFS, and cloud storage like S3 for optimal performance.</p> <p>Kinetica can also query and process data stored in data lakes, joining it with data managed by Kinetica in highly parallelized queries.</p>","tags":["Architecture"]},{"location":"Architecture/db_architecture/#performant-key-value-lookup","title":"Performant Key-Value Lookup","text":"<p>Kinetica is able to generate distributed key-value lookups, from columnar data, for high-performance and concurrency. Sharding logic is embedded directly within client APIs enabling linear scale-out as clients can lookup data directly from the node where the data lives.</p>","tags":["Architecture"]},{"location":"Architecture/kinetica_for_kubernetes_architecture/","title":"Kubernetes Architecture","text":"","tags":["Architecture"]},{"location":"Architecture/kinetica_for_kubernetes_architecture/#coming-soon","title":"Coming Soon","text":"","tags":["Architecture"]},{"location":"GettingStarted/","title":"Getting Started","text":"<ul> <li> <p> Set up in 15 minutes (local install)</p> <p>Install the Kinetica DB locally on <code>Kind</code> or <code>k3s</code> with <code>helm</code> to get up and running in minutes (Dev/Test).</p> <p> Quickstart</p> </li> <li> <p> Prepare to Install</p> <p>What you need to know &amp; do before beginning an installation.</p> <p> Preparation and Prerequisites</p> </li> <li> <p> Production Installation</p> <p>Install the Kinetica DB with helm to get up and running quickly (Production).</p> <p> Installation</p> </li> <li> <p> Channel Your Inner Ninja</p> <p>Advanced Installation Topics which go beyond the basic installation.</p> <p> Advanced Topics</p> </li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/aks/","title":"Azure AKS Specifics","text":"<p>This page covers any Microsoft Azure AKS cluster installation specifics.</p>","tags":["AKS","Getting Started"]},{"location":"GettingStarted/eks/","title":"Amazon EKS Specifics","text":"<p>This page covers any Amazon EKS kubernetes cluster installation specifics.</p>","tags":["EKS","Getting Started","Storage"]},{"location":"GettingStarted/eks/#ebs-csi-driver","title":"EBS CSI driver","text":"<p>Warning</p> <p>Make sure you have enabled the ebs-csi driver in your EKS cluster. This is required for the default storage class to work.</p> <p>Please refer to this AWS documentation for more information.</p>","tags":["EKS","Getting Started","Storage"]},{"location":"GettingStarted/helm_repo_add/","title":"Helm repo add","text":"Add Kinetica Operators Chart Repo<pre><code>helm repo add kinetica-operators https://kineticadb.github.io/charts/latest\n</code></pre>"},{"location":"GettingStarted/installation/","title":"Kinetica for Kubernetes Installation","text":"<ul> <li> <p> CPU Only Installation </p> <p>Install the Kinetica DB to run on Intel, AMD or ARM CPUs with no GPU acceleration.   CPU</p> </li> <li> <p> CPU &amp; GPU Installation</p> <p>Install the Kinetica DB to run on nodes with nVidia GPU acceleration.  Optionally enable Kinetica On-Prem SQLAssistant (LLM).  GPU</p> </li> </ul>","tags":["Installation"]},{"location":"GettingStarted/installation_cpu/","title":"Installation - CPU Only","text":"<p>For managed Kubernetes solutions (AKS, EKS, GKE) or on-prem (kubeadm) Kubernetes variants,  follow this generic guide to install the Kinetica Operators, Database and Workbench.</p> <p>Preparation &amp; Prequisites</p> <p>Please make sure you have followed the Preparation &amp; Prequisites steps</p>","tags":["Installation"]},{"location":"GettingStarted/installation_cpu/#install-the-helm-chart","title":"Install the helm chart","text":"<p>Run the following Helm install command after substituting values from section 3</p> Helm install kinetica-operators<pre><code>helm -n kinetica-system install \\\nkinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--values values.onPrem.k8s.yaml \\\n--set db.gpudbCluster.license=\"LICENSE-KEY\" \\\n--set dbAdminUser.password=\"PASSWORD\" \\\n--set global.defaultStorageClass=\"DEFAULT-STORAGE-CLASS\"\n</code></pre>","tags":["Installation"]},{"location":"GettingStarted/installation_cpu/#check-installation-progress","title":"Check installation progress","text":"<p>After a few moments, follow the progression of the main database pod startup with:</p> Monitor the Kinetica installation progress<pre><code>kubectl -n gpudb get po gpudb-0 -w\n</code></pre> <p>until it reaches <code>\"gpudb-0  3/3  Running\"</code> at which point the database should be ready and all other software installed in the cluster. You may have to run this command in a different terminal if the <code>helm</code> command from step 4 has not yet returned to the system prompt. Once running, you can quit this kubectl watch command using Ctrl+C.</p> error no pod named gpudb-0 <p>If you receive an error message running <code>kubectl -n gpudb get po gpudb-0 -w</code> informing you that no pod named <code>gpudb-0</code> exists. Please check that the OpenLDAP pod is running by running</p> Check OpenLDAP status<pre><code>kubectl -n gpudb get pods\nkubectl -n gpudb describe pod openldap-5f87f77c8b-trpmf\n</code></pre> <p>where the pod name <code>openldap-5f87f77c8b-trpmf</code> is that shown when running <code>kubectl -n gpudb get pods</code></p> <p>Validate if the pod is waiting for it's Persistent Volume Claim/Persistent Volume to be created and bound to the pod.</p>","tags":["Installation"]},{"location":"GettingStarted/installation_cpu/#accessing-the-kinetica-installation","title":"Accessing the Kinetica installation","text":"","tags":["Installation"]},{"location":"GettingStarted/installation_cpu/#target-platform-specifics","title":"Target Platform Specifics","text":"cloudlocal - devbare metal - prod <p>If you are installing into a managed Kubernetes environment and the NGINX ingress controller that is installed as part of this install creates a LoadBalancer service, you may need to associate the LoadBalancer with the domain you plan to use.</p> <p>As of now, the kinetica-operator chart installs NGINX ingress controller.  So after the installation is complete, you may need to edit the KineticaCluster Custom Resource  and Workbench Custom Resource with the correct domain name.</p> <p>Option 1: Use the LoadBalancer domain  Set your FQDN in Kinetica<pre><code>kubectl get svc -n kinetica-system\n# look at the loadbalancer dns name, copy it\n\nkubectl -n gpudb edit $(kubectl -n gpudb get kc -o name)\n# replace local.kinetica with the loadbalancer dns name\nkubectl -n gpudb edit $(kubectl -n gpudb get wb -o name)\n# replace local.kinetica with the loadbalancer dns name\n# save and exit\n# you should be able to access the workbench from the loadbalancer dns name\n</code></pre></p> <p>Option 2: Use your custom domain  Create a record in your DNS server pointing to the LoadBalancer DNS.   Then edit the KineticaCluster Custom Resource and Workbench Custom Resource with   the correct domain name, as mentioned above.</p> <p>Installing on a local machine which does not have a domain name, you can add the following entry to your <code>/etc/hosts</code> file or equivalent:</p> Configure local acces - /etc/hosts<pre><code>127.0.0.1  local.kinetica\n</code></pre> <p>Note</p> <p>The default chart configuration points to <code>local.kinetica</code> but this is configurable.</p> <p>Installing on a bare metal machines which do not have an external hardware loadbalancer requires an  Ingress controller along with a software loadbalancer in order to be accessible. </p> <p>Kinetica for Kubernetes has been tested with  kube-vip</p>","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/","title":"Installation - CPU with GPU Acceleration","text":"<p>For managed Kubernetes solutions (AKS, EKS, GKE) or on-prem (kubeadm) Kubernetes variants, follow this generic guide to install the Kinetica Operators, Database and Workbench.</p> <p>Preparation &amp; Prequisites</p> <p>Please make sure you have followed the Preparation &amp; Prequisites steps</p>","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/#install-via-the-kinetica-operators-helm-chart","title":"Install via the <code>kinetica-operators</code> Helm Chart","text":"","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/#gpu-cluster-with-remote-sqlassistant","title":"GPU Cluster with Remote SQLAssistant","text":"<p>Run the following Helm install command after substituting values from section 3</p> Helm install kinetica-operators (No On-Prem SQLAssistant)<pre><code>helm -n kinetica-system install \\\nkinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--values values.onPrem.k8s.yaml \\\n--set db.gpudbCluster.license=\"LICENSE-KEY\" \\\n--set dbAdminUser.password=\"PASSWORD\" \\\n--set global.defaultStorageClass=\"DEFAULT-STORAGE-CLASS\"\n</code></pre>","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/#gpu-cluster-with-on-prem-sqlassistant","title":"GPU Cluster with On-Prem SQLAssistant","text":"<p>or to enable SQLAssistant to be deployed and run 'On-Prem' i.e. in the same cluster</p> Helm install kinetica-operators (With On-Prem SQLAssistant)<pre><code>helm -n kinetica-system install \\\nkinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--values values.onPrem.k8s.yaml \\\n--set db.gpudbCluster.license=\"LICENSE-KEY\" \\\n--set dbAdminUser.password=\"PASSWORD\" \\\n--set global.defaultStorageClass=\"DEFAULT-STORAGE-CLASS\"\n--set db.gpudbCluster.config.ai.apiProvider = \"kineticallm\"\n</code></pre> <p>On-Prem Kinetica SQLAssistant - Nodes Groups, GPU Counts &amp; VRAM Memory</p> <p>To run the Kinetica SQLAssistant locally requires additional GPUs to be available in a separate Node Group labeled <code>app.kinetica.com/pool=compute-llm</code>.  In order for the On-Prem Kinetica LLM to run it requires 40GB GPU VRAM therefore the number of GPUs automatically allocated to the SQLAssistant pod will ensure that the 40GB VRAM is available e.g. 1x A100 GPU or 2x A10G GPU. </p> Label Kubernetes Nodes for LLM<pre><code>kubectl label node k8snode3 app.kinetica.com/pool=compute-llm\n</code></pre>","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/#check-installation-progress","title":"Check installation progress","text":"<p>After a few moments, follow the progression of the main database pod startup with:</p> Monitor the Kinetica installation progress<pre><code>kubectl -n gpudb get po gpudb-0 -w\n</code></pre> <p>until it reaches <code>\"gpudb-0  3/3  Running\"</code> at which point the database should be ready and all other software installed in the cluster. You may have to run this command in a different terminal if the <code>helm</code> command from step 4 has not yet returned to the system prompt. Once running, you can quit this kubectl watch command using Ctrl+C.</p> error no pod named gpudb-0 <p>If you receive an error message running <code>kubectl -n gpudb get po gpudb-0 -w</code> informing you that no pod named <code>gpudb-0</code> exists. Please check that the OpenLDAP pod is running by running</p> Check OpenLDAP status<pre><code>kubectl -n gpudb get pods\nkubectl -n gpudb describe pod openldap-5f87f77c8b-trpmf\n</code></pre> <p>where the pod name <code>openldap-5f87f77c8b-trpmf</code> is that shown when running <code>kubectl -n gpudb get pods</code></p> <p>Validate if the pod is waiting for it's Persistent Volume Claim/Persistent Volume to be created and bound to the pod.</p>","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/#accessing-the-kinetica-installation","title":"Accessing the Kinetica installation","text":"","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/#target-platform-specifics","title":"Target Platform Specifics","text":"cloudlocal - devbare metal - prod <p>If you are installing into a managed Kubernetes environment and the NGINX ingress controller that is installed as part of this install creates a LoadBalancer service, you may need to associate the LoadBalancer with the domain you plan to use.</p> <p>As of now, the kinetica-operator chart installs NGINX ingress controller.  So after the installation is complete, you may need to edit the KineticaCluster Custom Resource  and Workbench Custom Resource with the correct domain name.</p> <p>Option 1: Use the LoadBalancer domain  Set your FQDN in Kinetica<pre><code>kubectl get svc -n kinetica-system\n# look at the loadbalancer dns name, copy it\n\nkubectl -n gpudb edit $(kubectl -n gpudb get kc -o name)\n# replace local.kinetica with the loadbalancer dns name\nkubectl -n gpudb edit $(kubectl -n gpudb get wb -o name)\n# replace local.kinetica with the loadbalancer dns name\n# save and exit\n# you should be able to access the workbench from the loadbalancer dns name\n</code></pre></p> <p>Option 2: Use your custom domain  Create a record in your DNS server pointing to the LoadBalancer DNS. Then edit the KineticaCluster Custom Resource and Workbench Custom Resource with the correct domain name, as mentioned above.</p> <p>Installing on a local machine which does not have a domain name, you can add the following entry to your <code>/etc/hosts</code> file or equivalent:</p> Configure local acces - /etc/hosts<pre><code>127.0.0.1  local.kinetica\n</code></pre> <p>Note</p> <p>The default chart configuration points to <code>local.kinetica</code> but this is configurable.</p> <p>Installing on a bare metal machines which do not have an external hardware loadbalancer requires an Ingress controller along with a software loadbalancer in order to be accessible.</p> <p>Kinetica for Kubernetes has been tested with  kube-vip</p>","tags":["Installation"]},{"location":"GettingStarted/local_kinetica_etc_hosts/","title":"Local kinetica etc hosts","text":"<p>FQDN or Local Access</p> <p>By default we create an ingress pointing towards <code>local.kinetica</code>.  If you have a domain pointing to your machine, replace/set the FQDN in the <code>values.yaml</code>  with the correct domain name or by adding <code>--set</code>.</p> <p>If you are on a local machine which is not having a domain name,  you add the following entry to your <code>/etc/hosts</code> file or equivalent.</p> Configure local access - /etc/hosts<pre><code>127.0.0.1  local.kinetica\n</code></pre>"},{"location":"GettingStarted/note_additional_gpu_sqlassistant/","title":"Note additional gpu sqlassistant","text":"<p>On-Prem Kinetica SQLAssistant - Nodes Groups, GPU Counts &amp; VRAM Memory</p> <p>To run the Kinetica SQLAssistant locally requires additional GPUs to be available in a separate Node Group labeled <code>app.kinetica.com/pool=compute-llm</code>.  In order for the On-Prem Kinetica LLM to run it requires 40GB GPU VRAM therefore the number of GPUs automatically allocated to the SQLAssistant pod will ensure that the 40GB VRAM is available e.g. 1x A100 GPU or 2x A10G GPU. </p> Label Kubernetes Nodes for LLM<pre><code>kubectl label node k8snode3 app.kinetica.com/pool=compute-llm\n</code></pre>"},{"location":"GettingStarted/preparation_and_prerequisites/","title":"Preparation &amp; Prerequisites","text":"<p>Checks &amp; steps to ensure a smooth installation.</p> <p>Obtain a Kinetica License Key</p> <p>A product license key will be required for install. Please contact Kinetica Support to request a trial key.</p> <p>Failing to provide a license key at installation time will prevent the DB from starting.</p>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#preparation-and-prerequisites","title":"Preparation and prerequisites","text":"<p>Free Resources</p> <p>Your Kubernetes cluster version should be &gt;= 1.22.x and have a minimum of 8 CPU, 8GB Ram and SSD or SATA 7200RPM hard drive(s) with 4X memory capacity.</p> GPU Support <p>For GPU enabled clusters the cards below have been tested in large-scale production environments and  provide the best performance for the database.</p> GPU Driver P4/P40/P100 525.X (or higher) V100 525.X (or higher) T4 525.X (or higher) A10/A40/A100 525.X (or higher)","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#kubernetes-cluster-connectivity","title":"Kubernetes Cluster Connectivity","text":"<p>Installation requires Helm3 and access to an on-prem or CSP managed Kubernetes cluster. and the Kubernetes CLI kubectl.</p> <p>The context for the desired target cluster must be selected from your <code>~/.kube/config</code> file and set via the <code>KUBECONFIG</code> environment variable or <code>kubectl ctx</code> (if installed). Check to see if you have the correct context with,</p> show the current kubernetes context<pre><code>kubectl config current-context\n</code></pre> <p>and that you can access this cluster correctly with,</p> list kubernetes cluster nodes<pre><code>kubectl get nodes\n</code></pre> Get Nodes <p></p> <p>If you do not see a list of nodes for your K8s cluster the helm installation will not work. Please check your Kubernetes installation or access credentials (kubeconfig).</p> Kinetica Images for an Air-Gapped Environment <p>If you are installing Kinetica with Helm in an air-gapped environment you will either need a Registry Proxy to pass the requests through or to download the images and push them to your internal Registry.</p> <p>For information on ways to transfer the files into an air-gapped environment See here.</p>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#required-container-images","title":"Required Container Images","text":"","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#dockerio-required-kinetica-images-for-all-installations","title":"docker.io (Required Kinetica Images for All Installations)","text":"<ul> <li>docker.io/kinetica/kinetica-k8s-operator:v7.2.0-3.rc-3<ul> <li>docker.io/kinetica/kinetica-k8s-cpu:v7.2.0-3.rc-3 or </li> <li>docker.io/kinetica/kinetica-k8s-cpu-avx512:v7.2.0-3.rc-3 or </li> <li>docker.io/kinetica/kinetica-k8s-gpu:v7.2.0-3.rc-3</li> </ul> </li> <li>docker.io/kinetica/workbench-operator:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/workbench:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/kinetica-k8s-monitor:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/busybox:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/fluent-bit:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/kagent:7.1.9.15.20230823123615.ga</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#nvcrio-required-kinetica-images-for-gpu-installations-using-kinetica-k8s-gpu","title":"nvcr.io (Required Kinetica Images for GPU Installations using <code>kinetica-k8s-gpu</code>)","text":"<ul> <li>nvcr.io/nvidia/gpu-operator:v23.9.1</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#registryk8sio-required-kinetica-images-for-gpu-installations-using-kinetica-k8s-gpu","title":"registry.k8s.io (Required Kinetica Images for GPU Installations using <code>kinetica-k8s-gpu</code>)","text":"<ul> <li>registry.k8s.io/nfd/node-feature-discovery:v0.14.2</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#dockerio-required-supporting-images","title":"docker.io (Required Supporting Images)","text":"<ul> <li>docker.io/bitnami/openldap:2.6.7</li> <li>docker.io/alpine/openssl:latest (used by bitnami/openldap)</li> <li>docker.io/otel/opentelemetry-collector-contrib:0.95.0</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#quayio-required-supporting-images","title":"quay.io (Required Supporting Images)","text":"<ul> <li>quay.io/brancz/kube-rbac-proxy:v0.14.2</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#optional-container-images","title":"Optional Container Images","text":"<p>These images are only required if certain features are enabled as part of the Helm installation: -</p> <ul> <li>CertManager</li> <li>ingress-ninx</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#quayio-optional-supporting-images","title":"quay.io (Optional Supporting Images)","text":"<ul> <li>quay.io/jetstack/cert-manager-cainjector:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> <li>quay.io/jetstack/cert-manager-controller:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> <li>quay.io/jetstack/cert-manager-webhook:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#registryk8sio-optional-supporting-images","title":"registry.k8s.io (Optional Supporting Images)","text":"<ul> <li>registry.k8s.io/ingress-nginx/controller:v1.9.4 (if optionally installing Ingress nGinx via Kinetica Helm Chart)</li> <li>registry.k8s.io/ingress-nginx/controller:v1.9.6@sha256:1405cc613bd95b2c6edd8b2a152510ae91c7e62aea4698500d23b2145960ab9c</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#which-kinetica-core-image-do-i-use","title":"Which Kinetica Core Image do I use?","text":"Container Image Intel (AMD64) Intel (AMD64 AVX512) Amd (AMD64) Graviton (aarch64) Apple Silicon (aarch64) kinetica-k8s-cpu (1) kinetica-k8s-cpu-avx512 kinetica-k8s-gpu (2) (2) (2) <ol> <li>It is preferable on an Intel AVX512 enabled CPU to use the kinetica-k8s-cpu-avx512 container image</li> <li>With a supported nVidia GPU.</li> </ol>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#label-the-kubernetes-nodes","title":"Label the Kubernetes    Nodes","text":"<p>Kinetica requires some of the Kubernetes Nodes to be labeled as it splits some of the  components into different deployment 'pools'. This enables different physical node types to be present in the Kubernetes Cluster allowing us to target which Kinetica components go where.</p> <p>e.g. for a GPU installation some nodes in the cluster will have GPUs and others are CPU only. We can put the DB on the GPU nodes and our infrastructure components on CPU only nodes.</p>  cpu gpu <p>The Kubernetes cluster nodes selected to host the Kinetica infrastructure pods  i.e. non-DB Pods require the following label <code>app.kinetica.com/pool=infra</code>.</p> <p></p> Label the Infrastructure Nodes<pre><code>    kubectl label node k8snode1 app.kinetica.com/pool=infra\n</code></pre> <p>whilst the Kubernetes cluster nodes selected to host the Kinetica DB Pods  require the following label <code>app.kinetica.com/pool=compute</code>.</p> Label the Database Nodes<pre><code>    kubectl label node k8snode2 app.kinetica.com/pool=compute\n</code></pre> <p>The Kubernetes cluster nodes selected to host the Kinetica infrastructure pods  i.e. non-DB Pods require the following label <code>app.kinetica.com/pool=infra</code>.</p> <p></p> Label the Infrastructure Nodes<pre><code>    kubectl label node k8snode1 app.kinetica.com/pool=infra\n</code></pre> <p>whilst the Kubernetes cluster nodes selected to host the Kinetica DB Pods  require the following label <code>app.kinetica.com/pool=compute-gpu</code>.</p> Label the Database Nodes<pre><code>    kubectl label node k8snode2 app.kinetica.com/pool=compute-gpu\n</code></pre> <p>On-Prem Kinetica SQLAssistant - Nodes Groups, GPU Counts &amp; VRAM Memory</p> <p>To run the Kinetica SQLAssistant locally requires additional GPUs to be available in a separate Node Group labeled <code>app.kinetica.com/pool=compute-llm</code>.  In order for the On-Prem Kinetica LLM to run it requires 40GB GPU VRAM therefore the number of GPUs automatically allocated to the SQLAssistant pod will ensure that the 40GB VRAM is available e.g. 1x A100 GPU or 2x A10G GPU. </p> Label Kubernetes Nodes for LLM<pre><code>kubectl label node k8snode3 app.kinetica.com/pool=compute-llm\n</code></pre> <p>Pods Not Scheduling</p> <p>If the Kubernetes are not labeled you may have a situation where Kinetica pods not schedule and sit in a 'Pending' state.</p>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#install-the-kinetica-operators-chart","title":"Install the kinetica-operators chart","text":"<p>This chart will install the Kinetica K8s operators together with a default configured database and workbench UI.</p>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#add-the-kinetica-chart-repository","title":"Add the Kinetica chart repository","text":"<p>Add the repo locally as kinetica-operators:</p> Helm repo add<pre><code>helm repo add kinetica-operators https://kineticadb.github.io/charts/latest\n</code></pre> Helm Repo Add <p></p>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#obtain-the-default-helm-values-file","title":"Obtain the default Helm values file","text":"<p>For the generic Kubernetes install use the following values file without modification. Advanced users with specific requirements may need to adjust parameters in this file.</p> Helm values.yaml download<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/72.2.2/kinetica-operators/values.onPrem.k8s.yaml\n</code></pre>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#determine-the-following-prior-to-the-chart-install","title":"Determine the following prior to the chart install","text":"<p>Default Admin User</p> <p>the default admin user in the Helm chart is <code>kadmin</code> but this is configurable. Non-ASCII characters and typographical symbols in the password must be escaped with a \"\\\". For example, <code>--set dbAdminUser.password=\"MyPassword\\!\"</code></p> <ol> <li>Obtain a LICENSE-KEY as described in the introduction above.</li> <li>Choose a PASSWORD for the initial administrator user</li> <li>As the storage class name varies between K8s flavor and/or there can be multiple,    this must be prescribed in the chart installation.    Obtain the DEFAULT-STORAGE-CLASS name with the command:</li> </ol> <p></p> Find the default storageclass<pre><code>kubectl get sc -o name \n</code></pre> List StorageClass <p></p> <p>use the name found after the /, For example, in <code>storageclass.storage.k8s.io/local-path</code> use \"local-path\" as the parameter.</p> Amazon EKS <p>If installing on Amazon EKS See here</p>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#planning-access-to-your-kinetica-cluster","title":"Planning access to your Kinetica Cluster","text":"Existing Ingress Controller? <p>If you have an existing Ingress Controller in your Kubernetes cluster and do not want Kinetica to install an <code>ingresss-nginx</code> to expose it's endpoints then you can disable <code>ingresss-nginx</code> installation in the <code>values.yaml</code> by editing the file and setting <code>install: true</code> to <code>install: false</code>: -</p> Text Only<pre><code>```` yaml\nnodeSelector: {}\ntolerations: []\naffinity: {}\n\ningressNginx:\n    install: false\n````\n</code></pre>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/quickstart/","title":"Quickstart","text":"<p>For the quickstart we have examples for Kind or k3s.</p> <ul> <li>Kind - is suitable for CPU only installations.</li> <li>k3s - is suitable for CPU or GPU installations.</li> </ul> <p>Kubernetes &gt;= 1.25</p> <p>The current version of the chart supports kubernetes version 1.25 and above.</p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#please-select-your-target-kubernetes-variant","title":"Please select your target Kubernetes variant:","text":"kind k3s <p>Default User</p> <p>Username as per the values file mentioned above is <code>kadmin</code> and password is <code>Kinetica1234!</code></p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#kind-kubernetes-in-docker-kindsigsk8sio","title":"Kind (kubernetes in docker kind.sigs.k8s.io)","text":"<p>This installation in a kind cluster is for trying out the operators and the database in a non-production environment.</p> <p>CPU Only</p> <p>This method currently only supports installing a CPU version of the database.</p> <p>Please contact Kinetica Support to request a trial key.</p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#create-kind-cluster-129","title":"Create Kind Cluster 1.29","text":"Create a new Kind Cluster<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/72.2.2/kinetica-operators/kind.yaml\nkind create cluster --name kinetica --config kind.yaml\n</code></pre> List Kind clusters<pre><code> kind get clusters\n</code></pre> <p>Set Kubernetes Context</p> <p>Please set your Kubernetes Context to <code>kind-kinetica</code> before performing the following steps. </p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#kind-install-kinetica-operators-including-a-sample-db-to-try-out","title":"Kind - Install kinetica-operators including a sample db to try out","text":"<p>Review the values file charts/kinetica-operators/values.onPrem.kind.yaml.  This is trying to install the operators and a simple db with workbench  installation for a non production try out.</p> <p>As you can see it is trying to create an ingress pointing towards local.kinetica.  If you have a domain pointing to your machine, replace it with the correct domain name.</p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#kind-install-the-kinetica-operators-chart","title":"Kind - Install the  Kinetica-Operators Chart","text":"Add Kinetica Operators Chart Repo<pre><code>helm repo add kinetica-operators https://kineticadb.github.io/charts/latest\n</code></pre> <p>FQDN or Local Access</p> <p>By default we create an ingress pointing towards <code>local.kinetica</code>.  If you have a domain pointing to your machine, replace/set the FQDN in the <code>values.yaml</code>  with the correct domain name or by adding <code>--set</code>.</p> <p>If you are on a local machine which is not having a domain name,  you add the following entry to your <code>/etc/hosts</code> file or equivalent.</p> Configure local access - /etc/hosts<pre><code>127.0.0.1  local.kinetica\n</code></pre> Get &amp; install the Kinetica-Operators Chart<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/72.2.2/kinetica-operators/values.onPrem.kind.yaml\n\nhelm -n kinetica-system upgrade -i kinetica-operators kinetica-operators/kinetica-operators --create-namespace --values values.onPrem.kind.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\"\n</code></pre> <p>or if you have been asked by the Kinetica Support team to try a development version</p> Using a development version<pre><code>helm search repo kinetica-operators --devel --versions\n\nhelm -n kinetica-system upgrade -i kinetica-operators kinetica-operators/kinetica-operators/ --create-namespace --values values.onPrem.kind.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\" --devel --version 72.2.2\n</code></pre> <p>Accessing the Workbench</p> <p>You should be able to access the workbench at http://local.kinetica</p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#k3s-k3sio","title":"k3s (k3s.io)","text":"","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#install-k3s-129","title":"Install k3s 1.29","text":"Install k3s<pre><code>curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"--disable=traefik  --node-name kinetica-master --token 12345\" K3S_KUBECONFIG_OUTPUT=~/.kube/config_k3s K3S_KUBECONFIG_MODE=644 INSTALL_K3S_VERSION=v1.29.2+k3s1 sh -\n</code></pre> <p>Once installed we need to set the current Kubernetes context to point to the newly created k3s cluster.</p> <p>Select if you want local or remote access to the Kubernetes Cluster: -</p> Local AccessRemote Access <p>For only local access to the cluster we can simply set the <code>KUBECONFIG</code>  environment variable</p> Set kubectl context<pre><code>export KUBECONFIG=/etc/rancher/k3s/k3s.yaml\n</code></pre> <p>For remote access i.e. outside the host/VM k3s is installed on: -</p> <p>Copy <code>/etc/rancher/k3s/k3s.yaml</code> on your machine located  outside the cluster as <code>~/.kube/config</code>.  Then edit the file and replace the value of the server  field with the IP or name of your K3s server.</p> Copy the kube config and set the context<pre><code>sudo chmod 600 /etc/rancher/k3s/k3s.yaml\nmkdir -p ~/.kube\nsudo cp /etc/rancher/k3s/k3s.yaml ~/.kube/config\nsudo chown \"${USER:=$(/usr/bin/logname)}:$USER\" ~/.kube/config\n# Edit the ~/.kube/config server field with the IP or name of your K3s server here\nexport KUBECONFIG=~/.kube/config\n</code></pre>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#k3s-install-kinetica-operators-including-a-sample-db-to-try-out","title":"K3s - Install kinetica-operators including a sample db to try out","text":"<p>Review the values file <code>charts/kinetica-operators/values.onPrem.k3s.yaml</code>.  This is trying to install the operators and a simple db with workbench installation  for a non production try out.</p> <p>FQDN or Local Access</p> <p>By default we create an ingress pointing towards <code>local.kinetica</code>.  If you have a domain pointing to your machine, replace/set the FQDN in the <code>values.yaml</code>  with the correct domain name or by adding <code>--set</code>.</p> <p>If you are on a local machine which is not having a domain name,  you add the following entry to your <code>/etc/hosts</code> file or equivalent.</p> Configure local access - /etc/hosts<pre><code>127.0.0.1  local.kinetica\n</code></pre>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#k3s-install-the-kinetica-operators-chart-cpu","title":"K3S - Install the  Kinetica-Operators Chart (CPU)","text":"Add Kinetica Operators Chart Repo<pre><code>helm repo add kinetica-operators https://kineticadb.github.io/charts/latest\n</code></pre> Download Template values.yaml<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/72.2.2/kinetica-operators/values.onPrem.k3s.yaml\n\nhelm -n kinetica-system install kinetica-operators kinetica-operators/kinetica-operators --create-namespace --values values.onPrem.k3s.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\"\n</code></pre> <p>or if you have been asked by the Kinetica Support team to try a development version</p> Using a development version<pre><code>helm search repo kinetica-operators --devel --versions\n\nhelm -n kinetica-system install kinetica-operators kinetica-operators/kinetica-operators --create-namespace --values values.onPrem.k3s.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\" --devel --version 7.2.0-2.rc-2\n</code></pre>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#k3s-install-the-kinetica-operators-chart-gpu","title":"K3S - Install the  Kinetica-Operators Chart (GPU)","text":"<p>If you wish to try out the GPU capabilities, you can use the following values file,  provided you are in a nvidia gpu capable machine.</p> k3s GPU Installation<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/72.2.2/kinetica-operators/values.onPrem.k3s.gpu.yaml\n\nhelm -n kinetica-system install kinetica-operators charts/kinetica-operators/ --create-namespace --values values.onPrem.k3s.gpu.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\"\n</code></pre> <p>Accessing the Workbench</p> <p>You should be able to access the workbench at http://local.kinetica</p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#uninstall-k3s","title":"Uninstall k3s","text":"uninstall k3s<pre><code>/usr/local/bin/k3s-uninstall.sh\n</code></pre>","tags":["Development","Getting Started","Installation"]},{"location":"Help/changing_the_fqdn/","title":"How to change the Clusters FQDN","text":"","tags":["Configuration","Support"]},{"location":"Help/changing_the_fqdn/#coming-soon","title":"Coming Soon","text":"","tags":["Configuration","Support"]},{"location":"Help/faq/","title":"Frequently Asked Questions","text":"","tags":["Support"]},{"location":"Help/faq/#coming-soon","title":"Coming Soon","text":"","tags":["Support"]},{"location":"Help/help_and_tutorials/","title":"Help &amp; Tutorials","text":"<ul> <li> <p> Tutorials</p> <p> Tutorials</p> </li> <li> <p> Help</p> <p> Help</p> </li> </ul>","tags":["Support"]},{"location":"Help/help_and_tutorials/#coming-soon","title":"Coming Soon","text":"","tags":["Support"]},{"location":"Help/help_index/","title":"Creating Users, Roles, Schemas and other Kinetica DB Objects","text":"","tags":["Support"]},{"location":"Help/help_index/#coming-soon","title":"Coming Soon","text":"","tags":["Support"]},{"location":"Monitoring/logs/","title":"Log Collection &amp; Display","text":"<p>It is possible to forward/server the Kinetica on Kubernetes logs via an OpenTelemetry [OTEL] collector.</p> <p>By default an OpenTelemetry Collector is deployed in the <code>kinetica-system</code> namespace as part of the Helm install of the the kinetica-operators Helm chart along with a Kubernetes ConfigMap to configure this collector. The ConfigMap is in the <code>kinetica-system</code> namespace and is called <code>otel-collector-conf</code>.</p> <p>Detailed <code>otel-collector-conf</code> setup</p> <p>For more details on the Kinetica installed OTEL Collector please see here.</p> <p>There are many supported mechanisms to expose the logs here is one possibility: -</p> <ul> <li><code>lokiexporter</code> - Exports data via HTTP to Loki.</li> </ul> <p>Tip</p> <p>For a full list of supported OTEL exporters, including those for GrafanaCloud, AWS, Azure, Logz.io, Splunk  and many databases please see here</p>","tags":["Operations","Monitoring"]},{"location":"Monitoring/logs/#lokiexporter-otel-collector-exporter","title":"<code>lokiexporter</code> OTEL Collector Exporter","text":"<p>Exports data via HTTP to Loki.</p> Example Configuration<pre><code>exporters:\n  loki:\n    endpoint: https://loki.example.com:3100/loki/api/v1/push\n    default_labels_enabled:\n      exporter: false\n      job: true\n</code></pre> <p>For full details on configuring the OTEL collector exporter <code>lokiexporter</code> see here.</p>","tags":["Operations","Monitoring"]},{"location":"Monitoring/metrics/","title":"Metrics Collection &amp; Display","text":"<p>It is possible to forward/server the Kinetica on Kubernetes metrics via an OpenTelemetry [OTEL] collector. </p> <p>By default an OpenTelemetry Collector is deployed in the <code>kinetica-system</code> namespace as part of the Helm install of the the kinetica-operators Helm chart along with a Kubernetes ConfigMap to configure this collector. The ConfigMap is in the  <code>kinetica-system</code> namespace and is called <code>otel-collector-conf</code>.</p> <p>Detailed <code>otel-collector-conf</code> setup</p> <p>For more details on the Kinetica installed OTEL Collector please see here.</p> <p>There are many supported mechanisms to expose the metrics here are a few possibilities: -</p> <ul> <li><code>prometheusremotewriteexporter</code> - Prometheus Remote Write Exporter sends OpenTelemetry metrics to Prometheus remote write compatible backends.</li> <li><code>prometheusexporter</code> - allows the metrics to be scraped by a Prometheus server</li> </ul> <p>Tip</p> <p>For a full list of supported OTEL exporters, including those for Grafana Cloud, AWS, Azure and many databases please  see here</p>","tags":["Operations","Monitoring"]},{"location":"Monitoring/metrics/#prometheusremotewriteexporter-prometheus-otel-remote-write-exporter","title":"<code>prometheusremotewriteexporter</code> Prometheus OTEL Remote Write Exporter","text":"<p>prometheusremotewriteexporter OTEL Exporter</p> <p>Prometheus Remote Write Exporter sends OpenTelemetry metrics to Prometheus remote write compatible backends  such as Cortex, Mimir, and Thanos. By default, this exporter requires TLS and offers queued retry capabilities.</p> <p>Warning</p> <p>Non-cumulative monotonic, histogram, and summary OTLP metrics are dropped by this exporter.</p> Example Configuration<pre><code>exporters:\n  prometheusremotewrite:\n    endpoint: \"https://my-cortex:7900/api/v1/push\"\n    external_labels:\n      label_name1: label_value1\n      label_name2: label_value2\n</code></pre> <p>For full details on configuring the OTEL collector exporter <code>prometheusremotewriteexporter</code>  see here.</p>","tags":["Operations","Monitoring"]},{"location":"Monitoring/metrics/#prometheusexporter-prometheus-otel-exporter","title":"<code>prometheusexporter</code> Prometheus OTEL Exporter","text":"<p>Exports data in the Prometheus format, which allows it to be scraped by a Prometheus server.</p> Example Configuration<pre><code>exporters:\n  prometheus:\n    endpoint: \"1.2.3.4:1234\"\n    tls:\n      ca_file: \"/path/to/ca.pem\"\n      cert_file: \"/path/to/cert.pem\"\n      key_file: \"/path/to/key.pem\"\n    namespace: test-space\n    const_labels:\n      label1: value1\n      \"another label\": spaced value\n    send_timestamps: true\n    metric_expiration: 180m\n    enable_open_metrics: true\n    add_metric_suffixes: false\n    resource_to_telemetry_conversion:\n      enabled: true\n</code></pre> <p>For full details on configuring the OTEL collector exporter <code>prometheusexporter</code> see here.</p>","tags":["Operations","Monitoring"]},{"location":"Operations/","title":"Operational Management","text":"<ul> <li> <p> Metrics</p> <p>Collecting and storing metrics as time series data.   Metrics</p> </li> <li> <p> Logs</p> <p>Log aggregation.   Logs</p> </li> <li> <p> Metric &amp; Log Distribution</p> <p>Metrics &amp; Logs can be distributed to other systems using OpenTelemetry.   OpenTelemety</p> </li> <li> <p> Backup &amp; Restore</p> <p>Backup &amp; Restore of the Kinetica DB.   Backup &amp; Restore</p> <p>Note</p> <p>This requires Velero to be installed on the Kubernetes Cluster.</p> </li> <li> <p> Reduce Costs</p> <p>Suspend &amp; Resume  Kinetica for Kubernetes.   Suspend &amp; Resume</p> </li> <li> <p> Database Rebalancing</p> <p>Kinetica for Kubernetes Data Sharding &amp; Rebalancing.   Rebalancing</p> </li> </ul>","tags":["Operations"]},{"location":"Operations/backup_and_restore/","title":"Kinetica for Kubernetes Backup &amp; Restore","text":"<p>Kinetica for Kubernetes supports the Backup &amp; Restoring of the installed Kinetica DB by leveraging  Velero which is required to be installed into the same Kubernetes cluster that the <code>kinetica-operators</code> Helm chart is deployed.</p> <p>Velero</p> <p>Velero (formerly Heptio Ark) gives you tools to back up and restore your Kubernetes cluster  resources and persistent volumes. You can run Velero with a cloud provider or on-premises.</p> <p>For Velero installation please see here.</p> <p>Velero Installation</p> <p>The <code>kinetica-operators</code> Helm chart does not deploy Velero it is a prerequisite for it to be installed before Backup &amp; Restore will work correctly.</p> <p>There are two ways to initiate a Backup or Restore</p> <ul> <li>Workbench Initiated</li> <li>Kubernetes CR Initiated</li> </ul> <p>Preferred Backup/Restore Mechanism</p> <p>The preferred way to Backup or Restore the Kinetica for Kubernetes DB instance is via Workbench.</p>","tags":["Operations"]},{"location":"Operations/backup_and_restore/#workbench-initiated-backup-or-restore","title":"Workbench Initiated Backup or Restore","text":"","tags":["Operations"]},{"location":"Operations/backup_and_restore/#home","title":"&gt; Home","text":"<p>From the Workbench Home page</p> <p></p> <p>we need to select the <code>Manage</code> option from the toolbar.</p> <p></p>","tags":["Operations"]},{"location":"Operations/backup_and_restore/#manage-cluster-overview","title":"&gt; Manage &gt; Cluster &gt; Overview","text":"<p>On the Cluster Overview page select the 'Snapshots' tab</p> <p></p>","tags":["Operations"]},{"location":"Operations/backup_and_restore/#manage-cluster-snapshots","title":"&gt; Manage &gt; Cluster &gt; Snapshots","text":"","tags":["Operations"]},{"location":"Operations/backup_and_restore/#backup","title":"Backup","text":"<p>Select the 'Backup Now' button</p> <p></p> <p>and the backup will start and you will be able to see the progress</p> <p></p>","tags":["Operations"]},{"location":"Operations/backup_and_restore/#restore","title":"Restore","text":"","tags":["Operations"]},{"location":"Operations/backup_and_restore/#kubernetes-cr-initiated-backup-or-restore","title":"Kubernetes CR Initiated Backup or Restore","text":"<p>The Kinetica DB Operator supports two custom CRs </p> <ul> <li><code>KineticaClusterBackup</code></li> <li><code>KineticaClusterRestore</code></li> </ul> <p>which can be used to perform a Backup of the database and a Restore of Kinetica namespaces.</p>","tags":["Operations"]},{"location":"Operations/backup_and_restore/#kineticaclusterbackup-cr","title":"<code>KineticaClusterBackup</code> CR","text":"<p>Submission of a <code>KineticaClusterBackup</code> CR will trigger the Kinetica DB Operator to perform a backup of a Kinetica DB instance.</p> <p>Kinetica DB Offline</p> <p>In order to perform a database backup the Kinetica DB needs to be suspended in order for Velero  to have access to the necessary disks. The DB will be stopped &amp; restarted automatically by the Kinetica DB Operator as part of the backup process.</p> Example KineticaClusterBackup CR yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaClusterBackup\nmetadata:\n  name: kineticaclusterbackup-sample\n  namespace: gpudb\nspec:\n  includedNamespaces:\n    - gpudb\n</code></pre> <p>The namespace of the backup CR should be different to that of the namespace the Kinetica DB is running in i.e. not <code>gpudb</code>. We recommend using the namespace Velero is deployed into.</p> <p>Backup names are unique</p> <p>The name of the <code>KineticaClusterBackup</code> CR is unique we therefore suggest creating the name of the CR containing the date + time of the backup to ensure uniqueness. Kubernetes CR names have a strict naming format so the specified name must conform to those patterns.</p> <p>For a detailed description of the <code>KineticaClusterBackup</code> CRD see here</p>","tags":["Operations"]},{"location":"Operations/backup_and_restore/#kineticaclusterrestore-cr","title":"<code>KineticaClusterRestore</code> CR","text":"<p>In order to perform a restore of Kinetica for Kubernetes the easiest way is to simply delete the <code>gpudb</code> namespace from the Kubernetes cluster.</p> Delete the Kinetica DB<pre><code>kubectl delete ns gpudb\n</code></pre> <p>Kinetica DB Offline</p> <p>In order to perform a database restore the Kinetica DB needs to be suspended in order for Velero to have access to the necessary disks. The DB will be stopped &amp; restarted automatically by the Kinetica DB Operator as part of the restore process.</p> Example KineticaClusterBackup CR yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaClusterRestore\nmetadata:\n  name: kineticaclusterrestore-sample\n  namespace: gpudb\nspec:\n  backupName: kineticaclusterbackup-sample\n</code></pre> <p>The namespace of the restore CR should be the same as that of the namespace the <code>KineticaClusterBackup</code> CR was placed in. i.e. Not the namespace Kinetica DB is running in.</p> <p>Restore names are unique</p> <p>The name of the <code>KineticaClusterRestore</code> CR is unique we therefore suggest creating the name of the CR containing the date + time of the restore process to ensure uniqueness. Kubernetes CR names have a strict naming format so the specified name must conform to those patterns.</p> <p>For a detailed description of the <code>KineticaClusterRestore</code> CRD see here</p>","tags":["Operations"]},{"location":"Operations/otel/","title":"OTEL Integration for Metric &amp; Log Distribution","text":"<p>Helm installed OTEL Collector</p> <p>By default an OpenTelemetry Collector is deployed in the <code>kinetica-system</code> namespace as part of the Helm install of the the kinetica-operators Helm chart along with a Kubernetes ConfigMap to configure this collector. The ConfigMap is in the <code>kinetica-system</code> namespace and is called <code>otel-collector-conf</code>.</p> <p>The Kinetica DB Operators send information to an OpenTelemetry collector. There are two choices</p> <ul> <li>install an OpenTelemetry collector with the Kinetica Operators Helm chart</li> <li>use an existing provisioned OpenTelemetry collector within the Kubernetes Cluster</li> </ul>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#install-an-opentelemetry-collector-with-the-kinetica-operators-helm-chart","title":"Install an OpenTelemetry collector with the Kinetica Operators Helm chart","text":"<p>To enable the Kinetica Operators Helm Chart to deploy an instance of the OpenTelemetry collector into the <code>kinetica-system</code> namespace you need to set the following configuration in the helm values: -</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#todo-add-helm-config-example-here","title":"TODO add Helm Config Example Here","text":"<p>A ConfigMap containing the OTEL collector configuration will be generated so that the necessary <code>receivers</code> and <code>processors</code> sections are correctly setup for a Kinetica DB Cluster.</p> <p>This configuration will: -</p> <p>receivers:</p> <ul> <li>configure a <code>syslog</code> receiver which will receive logs from the Kinetica DB pod.</li> <li>configure a <code>prometheus</code> receiver/scraper which will collect metrics form the Kinetica DB.</li> <li>configure an <code>otlp</code> receiver which will receive trace spans from the Kinetica Operators (Optional).</li> <li>configure the <code>hostmetrics</code> collection of host load &amp; memory usage (Optional).</li> <li>configure the <code>k8s_events</code> collection of Kubernetes Events for the Kinetica namespaces (Optional).</li> </ul> <p>processors:</p> <ul> <li>configure attribute processing to set some useful values</li> <li>configure resource processing to set some useful values</li> </ul>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#syslog-configuration","title":"<code>syslog</code> Configuration","text":"<p>The OpenTelemetry <code>syslogreceiver</code> documentation can be found here.</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#otel-receivers-configuration","title":"OTEL Receivers Configuration","text":"YAML<pre><code>receivers:  \n  syslog:  \n    tcp:  \n      listen_address: \"0.0.0.0:9601\"  \n    protocol: rfc5424  \n</code></pre>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#otel-service-configuration","title":"OTEL Service Configuration","text":"<p>Tip</p> <p>In order to batch pushes of log data upstream you can use the following <code>processors section</code> in the OTEL configuration.</p> YAML<pre><code>processors:  \n  batch:  \n</code></pre> YAML<pre><code>service:   \n  pipelines:\n    logs:\n      receivers: [syslog]\n      processors: [resourcedetection, attributes, resource, batch]\n      exporters: ... # Requires configuring for your environment\n</code></pre>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#otlp-configuration","title":"<code>otlp</code> Configuration","text":"<p>The default configuration opens both the OTEL gRPC &amp; HTTP listeners.</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#otel-receivers-configuration_1","title":"OTEL Receivers Configuration","text":"YAML<pre><code>receivers:\n  otlp:  \n    protocols:  \n      grpc:  \n        endpoint: \"0.0.0.0:4317\"  \n      http:  \n        endpoint: \"0.0.0.0:4318\" \n</code></pre>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#otel-service-configuration_1","title":"OTEL Service Configuration","text":"<p>Tip</p> <p>In order to batch pushes of trace data upstream you can use the following <code>processors section</code> in the OTEL configuration.</p> YAML<pre><code>processors:  \n  batch:  \n</code></pre> YAML<pre><code>service:\n  traces:\n    receivers: [otlp]\n    processors: [batch]\n    exporters:  ... # Requires configuring for your environment\n</code></pre> <p>exporters</p> <p>The <code>exporters</code> will need to be manually configured to your specific environment e.g. forwarding logs/metrics to Grafana, Azure Monitor, AWS etc.</p> <p>Otherwise the data will 'disappear into the ether' and not be relayed upstream.</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#hostmetrics-configuration-optional","title":"<code>hostmetrics</code> Configuration (Optional)","text":"<p>The Host Metrics receiver generates metrics about the host system scraped from various sources.  This is intended to be used when the collector is deployed as an agent.</p> <p>The OpenTelemetry <code>hostmetrics</code> documentation can be found here.</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#otel-receivers-configuration_2","title":"OTEL Receivers Configuration","text":"<p>hostmetricsreceiver</p> <p>The OTEL <code>hostmetricsreceiver</code>requires that the running OTEL collector is the 'contrib' version.</p> YAML<pre><code>receivers:\n  hostmetrics:  \n    # https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/main/receiver/hostmetricsreceiver  \n    scrapers:  \n      load:  \n      memory: \n</code></pre> Grafana <p>the attributes and resource processing enables finer grained selection using Grafana queries.</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#k8s_events-configuration-optional","title":"<code>k8s_events</code> Configuration (Optional)","text":"<p>The kubernetes Events receiver collects events from the Kubernetes API server. It collects all the new or updated events that come in from the specified namespaces. Below we are collecting events from the two default Kinetica namespaces: -</p> YAML<pre><code>receivers:\n  k8s_events:  \n    namespaces: [kinetica-system, gpudb]  \n</code></pre> <p>The OpenTelemetry <code>k8seventsreceiver</code> documentation can be found here.</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#use-an-existing-provisioned-opentelemetry-collector","title":"Use an existing provisioned OpenTelemetry Collector","text":"","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#coming-soon","title":"Coming Soon","text":"","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/rebalance/","title":"Kinetica for Kubernetes Data Rebalancing","text":"","tags":["Operations"]},{"location":"Operations/rebalance/#coming-soon","title":"Coming Soon","text":"","tags":["Operations"]},{"location":"Operations/suspend_resume/","title":"Kinetica for Kubernetes Suspend &amp; Resume","text":"<p>It is possible to supend Kinetica for Kubernetes which spins down the DB.</p> <p>Infra Structure</p> <p>For each deployment of Kinetica for Kubernetes there are two distinct types of pods: -</p> <ul> <li>'Compute' pods containing the Kinetica DB along with the Statics Pod</li> <li>'Infra' pods containing the supporting apps, e.g. Workbench, OpenLDAP etc, and the Kinetica Operators.</li> </ul> <p>Whilst Kinetica for Kubernetes is in the <code>Suspended</code> state only the 'Compute' pods are scaled down. The 'Infra' pods remain running in order for Workbenchto be able to login, backup, restore and in this case Resume the suspended system.</p> <p>There are three discrete ways to suspand and resume KInetica for Kubernetes: -</p> <ul> <li>Manually from Workbench</li> <li>Auto-Suspend set in Workbench or fro the Helm installation Chart.</li> <li>Manually using a Kubernetes CR</li> </ul>","tags":["Operations"]},{"location":"Operations/suspend_resume/#suspend-manually-from-workbench","title":"Suspend - Manually from Workbench","text":"","tags":["Operations"]},{"location":"Operations/suspend_resume/#suspend-auto-suspend","title":"Suspend - Auto-Suspend","text":"","tags":["Operations"]},{"location":"Operations/suspend_resume/#suspend-manually-using-a-kubernetes-cr","title":"Suspend - Manually using a Kubernetes CR","text":"","tags":["Operations"]},{"location":"Operators/k3s/","title":"Overview","text":"<p>Kinetica Operators can be installed in any on-prem kubernetes cluster. This document provides instructions to install the operators in k3s. If you are on another distribution, you should be able to change the values file to suit your environment.</p> <p>You will need a license key for this to work. Please contact Kinetica Support.</p>"},{"location":"Operators/k3s/#kinetica-on-k3s-k3sio","title":"Kinetica on k3s (k3s.io)","text":"<p>Current version of the chart supports kubernetes version 1.25 and above.</p>"},{"location":"Operators/k3s/#install-k3s-129","title":"Install k3s 1.29","text":"Bash<pre><code>curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"--disable=traefik  --node-name kinetica-master --token 12345\" K3S_KUBECONFIG_OUTPUT=~/.kube/config_k3s K3S_KUBECONFIG_MODE=644 INSTALL_K3S_VERSION=v1.29.2+k3s1 sh -\n</code></pre>"},{"location":"Operators/k3s/#k3s-install-kinetica-operators-including-a-sample-db-to-try-out","title":"K3s -Install kinetica-operators including a sample db to try out","text":"<p>Review the values file charts/kinetica-operators/values.onPrem.k3s.yaml. This is trying to install the operators and a simple db with workbench installation for a non production try out.</p> <p>As you can see it is trying to create an ingress pointing towards local.kinetica. If you have a domain pointing to your machine, replace it with the correct domain name.</p> <p>If you are on a local machine which is not having a domain name, you add the following entry to your /etc/hosts file or equivalent.</p> Text Only<pre><code>127.0.0.1 local.kinetica\n</code></pre>"},{"location":"Operators/k3s/#k3s-install-the-kinetica-operators-chart","title":"K3s - Install the kinetica-operators chart","text":"Bash<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/master/kinetica-operators/values.onPrem.k3s.yaml\n\nhelm -n kinetica-system install kinetica-operators kinetica-operators/kinetica-operators --create-namespace --values values.onPrem.k3s.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\"\n\n# if you want to try out a development version,\nhelm search repo kinetica-operators --devel --versions\n\nhelm -n kinetica-system install kinetica-operators kinetica-operators/kinetica-operators --create-namespace --values values.onPrem.k3s.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\" --devel --version 7.2.0-2.rc-2\n</code></pre>"},{"location":"Operators/k3s/#k3s-install-the-kinetica-operators-chart-gpu-capable-machine","title":"K3s - Install the kinetica-operators chart (GPU Capable Machine)","text":"<p>If you wish to try out the GPU capabilities, you can use the following values file, provided you are in a nvidia gpu capable machine.</p> Bash<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/master/kinetica-operators/values.onPrem.k3s.gpu.yaml\n\nhelm -n kinetica-system install kinetica-operators charts/kinetica-operators/ --create-namespace --values values.onPrem.k3s.gpu.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\"\n</code></pre> <p>You should be able to access the workbench at http://local.kinetica</p> <p>Username as per the values file mentioned above is kadmin and password is Kinetica1234!</p>"},{"location":"Operators/k3s/#uninstall-k3s","title":"Uninstall k3s","text":"Bash<pre><code>/usr/local/bin/k3s-uninstall.sh\n</code></pre>"},{"location":"Operators/k8s/","title":"Overview","text":"<p>For managed Kubernetes solutions (AKS, EKS, GKE) or other on-prem K8s flavors,  follow this generic guide to install the Kinetica Operators, Database and Workbench.  A product license key will be required for install. Please contact Kinetica Support  to request a trial key.</p>"},{"location":"Operators/k8s/#preparation-and-prerequisites","title":"Preparation and prerequisites","text":"<p>Installation requires Helm3 and access to an on-prem or CSP managed Kubernetes cluster.  kubectl is optional but highly recommended. The context for the desired target cluster must be selected from your <code>~/.kube/config</code> file  or set via the <code>KUBECONFIG</code> environment variable. Check to see if you have the correct context with,</p> Bash<pre><code>kubectl config current-context\n</code></pre> <p>and that you can access this cluster correctly with,</p> Bash<pre><code>kubectl get nodes\n</code></pre> <p>If you do not see a list of nodes for your K8s cluster the helm installation will not work. Please check your Kubernetes installation or access credentials (kubeconfig).</p>"},{"location":"Operators/k8s/#install-the-kinetica-operators-chart","title":"Install the kinetica-operators chart","text":"<p>This chart will install the Kinetica K8s operators together with a default configured database and workbench UI.</p> <p>If you are installing into a managed Kubernetes environment and the NGINX ingress controller that is installed as part of this install creates a LoadBalancer service, you may need to associate the LoadBalancer with the domain you plan to use.</p> <p>Alternatively, if you are installing on a local machine which does not have a domain name, you can add the following entry to your <code>/etc/hosts</code> file or equivalent:</p> Bash<pre><code>127.0.0.1  local.kinetica\n</code></pre> <p>Note that the default chart configuration points to <code>local.kinetica</code> but this is configurable.</p>"},{"location":"Operators/k8s/#1-add-the-kinetica-chart-repository","title":"1. Add the Kinetica chart repository","text":"<p>Add the repo locally as kinetica-operators:</p> Bash<pre><code>helm repo add kinetica-operators https://kineticadb.github.io/charts\n</code></pre>"},{"location":"Operators/k8s/#2-obtain-the-default-helm-values-file","title":"2. Obtain the default Helm values file","text":"<p>For the generic Kubernetes install use the following values file without modification. Advanced users with specific requirements may need to adjust parameters in this file.</p> Bash<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/master/kinetica-operators/values.onPrem.k8s.yaml\n</code></pre>"},{"location":"Operators/k8s/#3-determine-the-following-prior-to-the-chart-install","title":"3. Determine the following prior to the chart install","text":"<p>(a) Obtain a LICENSE-KEY as described in the introduction above. (b) Choose a PASSWORD for the initial administrator user (Note: the default in the chart for this user is <code>kadmin</code> but this is configurable). Non-ASCII characters and typographical symbols in the password must be escaped with a \"\\\". For example, <code>--set dbAdminUser.password=\"MyPassword\\!\"</code> \u00a9 As storage class name varies between K8s flavor and/or there can be multiple, this must be prescribed in the chart installation. Obtain DEFAULT-STORAGE-CLASS name with the command:</p> Bash<pre><code>kubectl get sc -o name \n</code></pre> <p>use the name found after the /, For example, in <code>\"storageclass.storage.k8s.io/TheName\"</code> use \"TheName\" as the parameter.</p>"},{"location":"Operators/k8s/#4-install-the-helm-chart","title":"4. Install the helm chart","text":"<p>Run the following Helm install command after substituting values from section 3 above:</p> Bash<pre><code>helm -n kinetica-system install \\\nkinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--values values.onPrem.k8s.yaml \\\n--set db.gpudbCluster.license=\"LICENSE-KEY\" \\\n--set dbAdminUser.password=\"PASSWORD\" \\\n--set global.defaultStorageClass=\"DEFAULT-STORAGE-CLASS\"\n</code></pre>"},{"location":"Operators/k8s/#5-check-installation-progress","title":"5. Check installation progress","text":"<p>After a few moments, follow the progression of the main database pod startup with:</p> Bash<pre><code>kubectl -n gpudb get po gpudb-0 -w\n</code></pre> <p>until it reaches <code>\"gpudb-0  3/3  Running\"</code> at which point the database should be ready and all other software installed in the cluster. You may have to run this command in a different terminal if the <code>helm</code> command from step 4 has not yet returned to the system prompt. Once running, you can quit this kubectl watch command using ctrl-c.</p>"},{"location":"Operators/k8s/#6-accessing-the-kinetica-installation","title":"6. Accessing the Kinetica installation","text":""},{"location":"Operators/k8s/#optional-install-a-development-chart-version","title":"(Optional) Install a development chart version","text":"<p>Find all alternative chart versions with:</p> Bash<pre><code>helm search repo kinetica-operators --devel --versions\n</code></pre> <p>Then append <code>--devel --version [CHART-DEVEL-VERSION]</code> to the end of the Helm install command in section 4 above.</p>"},{"location":"Operators/k8s/#k8s-flavour-specific-notes","title":"K8s Flavour specific notes","text":""},{"location":"Operators/k8s/#eks","title":"EKS","text":""},{"location":"Operators/k8s/#ebs-csi-driver","title":"EBS CSI driver","text":"<p>Make sure you have enabled the ebs-csi driver in your EKS cluster. This is required for the default storage class to work. Please refer to this AWS documentation for more information.</p>"},{"location":"Operators/k8s/#ingress","title":"Ingress","text":"<p>As of now, the kinetica-operator chart installs NGINX ingress controller. So after the installation is complete, you may need to edit the KineticaCluster Custom Resource and Workbench Custom Resource with the correct domain name.</p>"},{"location":"Operators/k8s/#option-1-use-the-loadbalancer-domain","title":"Option 1: Use the LoadBalancer domain","text":"Bash<pre><code>kubectl get svc -n kinetica-system\n# look at the loadbalancer dns name, copy it\n\nkubectl -n gpudb edit $(kubectl -n gpudb get kc -o name)\n# replace local.kinetica with the loadbalancer dns name\nkubectl -n gpudb edit $(kubectl -n gpudb get wb -o name)\n# replace local.kinetica with the loadbalancer dns name\n# save and exit\n# you should be able to access the workbench from the loadbalancer dns name\n</code></pre>"},{"location":"Operators/k8s/#option-1-use-your-custom-domain","title":"Option 1: Use your custom domain","text":"<p>Create a record in your DNS server pointing to the LoadBalancer DNS. Then edit the KineticaCluster Custom Resource and Workbench Custom Resource with the correct domain name, as mentioned above.</p>"},{"location":"Operators/kind/","title":"Overview","text":"<p>This installation in a kind cluster is for trying out the operators and the database in a non production environment. This method currently only supports installing a CPU version of the database.</p> <p>You will need a license key for this to work. Please contact Kinetica Support.</p>"},{"location":"Operators/kind/#kind-kubernetes-in-docker-kindsigsk8sio","title":"Kind (kubernetes in docker kind.sigs.k8s.io)","text":""},{"location":"Operators/kind/#create-kind-cluster-129","title":"Create Kind Cluster 1.29","text":"Bash<pre><code>kind create cluster --config charts/kinetica-operators/kind.yaml\n</code></pre>"},{"location":"Operators/kind/#kind-install-kinetica-operators-including-a-sample-db-to-try-out","title":"Kind - Install kinetica-operators including a sample db to try out","text":"<p>Review the values file charts/kinetica-operators/values.onPrem.kind.yaml. This is trying to install the operators and a simple db with workbench installation for a non production try out.</p> <p>As you can see it is trying to create an ingress pointing towards local.kinetica. If you have a domain pointing to your machine, replace it with the correct domain name.</p>"},{"location":"Operators/kind/#kind-install-the-kinetica-operators-chart","title":"Kind - Install the kinetica-operators chart","text":"Bash<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/master/kinetica-operators/values.onPrem.kind.yaml\n\nhelm -n kinetica-system install kinetica-operators kinetica-operators/kinetica-operators --create-namespace --values values.onPrem.kind.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\"\n\n# if you want to try out a development version,\nhelm search repo kinetica-operators --devel --versions\nhelm -n kinetica-system install kinetica-operators kinetica-operators/kinetica-operators/ --create-namespace --values values.onPrem.kind.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\" --devel --version 7.2.0-2.rc-2\n</code></pre> <p>You should be able to access the workbench at http://local.kinetica</p> <p>Username as per the values file mentioned above is kadmin and password is Kinetica1234!</p>"},{"location":"Operators/kinetica-operators/","title":"Kinetica DB Operator Helm Charts","text":"<p>To install all the required operators in a single command perform the following: -</p> Bash<pre><code>helm install -n kinetica-system \\\nkinetica-operators kinetica-operators/kinetica-operators --create-namespace\n</code></pre> <p>This will install all the Kubernetes Operators required into the <code>kinetica-system</code> namespace and create the namespace if it is not currently present.</p> <p>Note</p> <p>Depending on what target platform you are installing to it may be necessary to supply an additional parameter  pointing to a values file to successfully provision the DB.</p> Bash<pre><code>helm install -n kinetica-system -f values.yaml --set provider=aks \\\nkinetica-operators kinetica-operators/kinetica-operators --create-namespace\n</code></pre> <p>The command above uses a custom <code>values.yaml</code> for helm and sets the install platform to Microsoft Azure AKS.</p> <p>Currently supported <code>providers</code> are: -</p> <ul> <li><code>aks</code> - Microsoft Azure AKS</li> <li><code>eks</code> - Amazon AWS EKS</li> <li><code>local</code> - Generic 'On-Prem' Kubernetes Clusters e.g. one deployed using <code>kubeadm</code></li> </ul> <p>Example Helm <code>values.yaml</code> for different Cloud Providers/On-Prem installations: -</p> Azure AKSAmazon EKSOn-Prem values.yaml<pre><code>namespace: kinetica-system\n\ndb:\n  serviceAccount: {}\n  image:\n    # Kinetica DB Operator installer image\n    repository: \"registry.harbor.kinetica.com/kinetica/kinetica-k8s-operator\"\n    #  Kinetica DB Operator installer image tag\n    tag: \"\"\n\n  parameters:\n    # &lt;base64 encode of kubeconfig&gt; of the Kubernetes Cluster to deploy to\n    kubeconfig: \"\"\n    # The storage class to use for PVCs\n    storageClass: \"managed-premium\"\n\n  storageClass:\n    persist:\n      # Workbench Operator Persistent Volume Storage Class\n      provisioner: \"disk.csi.azure.com\"\n    procs:\n      # Workbench Operator Procs Volume Storage Class\n      provisioner: \"disk.csi.azure.com\"\n    cache:\n      # Workbench Operator Cache Volume Storage Class\n      provisioner: \"disk.csi.azure.com\"\n</code></pre> <p>15 <code>storageClass: \"managed-premium\"</code> - sets the appropriate <code>storageClass</code> for Microsoft Azure AKS Persistent Volume (PV)</p> <p>20 <code>provisioner: \"disk.csi.azure.com\"</code> - sets the appropriate disk provisioner for the DB (Persist) filesystem for Microsoft Azure</p> <p>23 <code>provisioner: \"disk.csi.azure.com\"</code> - sets the appropriate disk provisioner for the DB Procs filesystem for Microsoft Azure</p> <p>26 <code>provisioner: \"disk.csi.azure.com\"</code> - sets the appropriate disk provisioner for the DB Cache filesystem for Microsoft Azure</p> values.yaml<pre><code>namespace: kinetica-system\n\ndb:\n  serviceAccount: {}\n  image:\n    # Kinetica DB Operator installer image\n    repository: \"registry.harbor.kinetica.com/kinetica/kinetica-k8s-operator\"\n    #  Kinetica DB Operator installer image tag\n    tag: \"\"\n\n  parameters:\n    # &lt;base64 encode of kubeconfig&gt; of the Kubernetes Cluster to deploy to\n    kubeconfig: \"\"\n    # The storage class to use for PVCs\n    storageClass: \"gp2\"\n\n  storageClass:\n    persist:\n      # Workbench Operator Persistent Volume Storage Class\n      provisioner: \"kubernetes.io/aws-ebs\"\n    procs:\n      # Workbench Operator Procs Volume Storage Class\n      provisioner: \"kubernetes.io/aws-ebs\"\n    cache:\n      # Workbench Operator Cache Volume Storage Class\n      provisioner: \"kubernetes.io/aws-ebs\"\n</code></pre> <p>15 <code>storageClass: \"gp2\"</code> - sets the appropriate <code>storageClass</code> for Amazon EKS Persistent Volume (PV)</p> <p>20 <code>provisioner: \"kubernetes.io/aws-ebs\"</code> - sets the appropriate disk provisioner for the DB (Persist) filesystem for Microsoft Azure</p> <p>23 <code>provisioner: \"kubernetes.io/aws-ebs\"</code> - sets the appropriate disk provisioner for the DB Procs filesystem for Microsoft Azure</p> <p>26 <code>provisioner: \"kubernetes.io/aws-ebs\"</code> - sets the appropriate disk provisioner for the DB Cache filesystem for Microsoft Azure</p> values.yaml<pre><code>namespace: kinetica-system\n\ndb:\n  serviceAccount: {}\n  image:\n    # Kinetica DB Operator installer image\n    repository: \"registry.harbor.kinetica.com/kinetica/kinetica-k8s-operator\"\n    #  Kinetica DB Operator installer image tag\n    tag: \"\"\n\n  parameters:\n    # &lt;base64 encode of kubeconfig&gt; of the Kubernetes Cluster to deploy to\n    kubeconfig: \"\"\n    # the type of installation e.g. aks, eks, local\n    environment: \"local\"\n    # The storage class to use for PVCs\n    storageClass: \"standard\"\n\n  storageClass:\n    procs: {}\n    persist: {}\n    cache: {}\n</code></pre> <p>15 <code>environment: \"local\"</code> - tells the DB Operator to deploy the DB as a 'local' instance to the Kubernetes Cluster</p> <p>17 <code>storageClass: \"standard\"</code> - sets the appropriate <code>storageClass</code> for the On-Prem Persistent Volume Provisioner</p> <p>storageClass</p> <p>The <code>storageClass</code> should be present in the target environment. </p> <p>A list of available <code>storageClass</code> can be obtained using: -</p> Bash<pre><code>kubectl get sc\n</code></pre>"},{"location":"Operators/kinetica-operators/#components","title":"Components","text":"<p>The <code>kinetica-db</code> Helm Chart wraps the deployment of a number of sub-components: -</p> <ul> <li>Porter Operator</li> <li>Kinetica Database Operator</li> <li>Kinetica Workbench Operator</li> </ul> <p>Installation/Upgrading/Deletion of the Kinetica Operators is done via two CRs which leverage porter.sh as the orchestrator. The corresponding Porter Operator, DB Operator &amp; Workbench Operator CRs are submitted by running the appropriate helm command i.e.</p> <ul> <li>install</li> <li>upgrade</li> <li>uninstall</li> </ul>"},{"location":"Operators/kinetica-operators/#porter-operator","title":"Porter Operator","text":""},{"location":"Operators/kinetica-operators/#database-operator","title":"Database Operator","text":"<p>The Kinetica DB Operator installation CR for the porter.sh operator is: -</p> YAML<pre><code>apiVersion: porter.sh/v1\nkind: Installation\nmetadata:\n  annotations:\n    meta.helm.sh/release-name: kinetica-operators\n    meta.helm.sh/release-namespace: kinetica-system\n  labels:\n    app.kubernetes.io/instance: kinetica-operators\n    app.kubernetes.io/managed-by: Helm\n    app.kubernetes.io/name: kinetica-operators\n    app.kubernetes.io/version: 0.1.0\n    helm.sh/chart: kinetica-operators-0.1.0\n    installVersion: 0.38.10\n  name: kinetica-operators-operator-install\n  namespace: kinetica-system\nspec:\n  action: install\n  agentConfig:\n    volumeSize: '0'\n  parameters:\n    environment: local\n    storageclass: managed-premium\n  reference: docker.io/kinetica/kinetica-k8s-operator:v7.1.9-7.rc3\n</code></pre>"},{"location":"Operators/kinetica-operators/#workbench-operator","title":"Workbench Operator","text":"<p>The Kinetica Workbench installation CR for the porter.sh operator is: -</p> YAML<pre><code>apiVersion: porter.sh/v1\nkind: Installation\nmetadata:\n  annotations:\n    meta.helm.sh/release-name: kinetica-operators\n    meta.helm.sh/release-namespace: kinetica-system\n  labels:\n    app.kubernetes.io/instance: kinetica-operators\n    app.kubernetes.io/managed-by: Helm\n    app.kubernetes.io/name: kinetica-operators\n    app.kubernetes.io/version: 0.1.0\n    helm.sh/chart: kinetica-operators-0.1.0\n    installVersion: 0.38.10\n  name: kinetica-operators-wb-operator-install\n  namespace: kinetica-system\nspec:\n  action: install\n  agentConfig:\n    volumeSize: '0'\n  parameters:\n    environment: local\n  reference: docker.io/kinetica/workbench-operator:v7.1.9-7.rc3\n</code></pre>"},{"location":"Operators/kinetica-operators/#overriding-images-tags","title":"Overriding Images Tags","text":"Bash<pre><code>helm install -n kinetica-system kinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--set provider=aks  \n--set dbOperator.image.tag=v7.1.9-7.rc3 \\\n--set dbOperator.image.repository=docker.io/kinetica/kinetica-k8s-operator \\\n--set wbOperator.image.repository=docker.io/kinetica/workbench-operator \\\n--set wbOperator.image.tag=v7.1.9-7.rc3\n</code></pre>"},{"location":"Reference/","title":"Reference Section","text":"<ul> <li> <p> Kinetica Operators Helm</p> <p>Kinetica Operators Helm charts &amp; values file reference data.   Charts</p> </li> <li> <p> Kinetica Core DB CRDs-</p> <p>Kinetica DB Kubernetes CRD &amp; ConfigMap reference data.   Cluster CRDs</p> </li> <li> <p> Kinetica Workbench CRDs</p> <p>Kinetica Workbench Kubernetes CRD &amp; ConfigMap reference data.   Workbench</p> </li> </ul>","tags":["Reference"]},{"location":"Reference/database/","title":"Kinetica Database Configuration","text":"<ul> <li>kubectl (yaml)</li> </ul>","tags":["Reference"]},{"location":"Reference/database/#kineticacluster","title":"KineticaCluster","text":"<p>To deploy a new Database Instance into a Kubernetes cluster...</p> kubectl <p>Using kubetctl a CustomResource of type <code>KineticaCluster</code> is used to define a new Kinetica DB Cluster in a yaml file.</p> <p>The basic Group, Version, Kind or GVK to instantiate a Kinetica DB Cluster is as follows: -</p> kineticacluster.yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaCluster\n</code></pre>","tags":["Reference"]},{"location":"Reference/database/#metadata","title":"Metadata","text":"<p>to which we add a <code>metadata:</code> block for the name of the DB CR along with the <code>namespace</code> into which we are targetting the installation of the DB cluster.</p> kineticacluster.yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaCluster\nmetadata:\n  name: my-kinetica-db-cr\n  namespace: gpudb\nspec:\n</code></pre>","tags":["Reference"]},{"location":"Reference/database/#spec","title":"Spec","text":"<p>Under the <code>spec:</code> section of the KineticaCLuster CR we have a number of sections supporting different aspects of the deployed DB cluster:-</p> <ul> <li>gpudbCluster</li> <li>autoSuspend</li> <li>gadmin</li> </ul>","tags":["Reference"]},{"location":"Reference/database/#gpudbcluster","title":"gpudbCluster","text":"<p>Configuartion items specific to the DB itself.</p> kineticacluster.yaml - gpudbCluster<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaCluster\nmetadata:\n  name: my-kinetica-db-cr\n  namespace: gpudb\nspec:\n  gpudbCluster:\n</code></pre>","tags":["Reference"]},{"location":"Reference/database/#gpudbcluster_1","title":"gpudbCluster","text":"cluster name &amp; size<pre><code>clusterName: kinetica-cluster \nclusterSize: \n  tshirtSize: M \n  tshirtType: LargeCPU \nfqdn: kinetica-cluster.saas.kinetica.com\nhaRingName: default\nhasPools: false    \n</code></pre> <p><code>1. clusterName</code> - the user defined name of the Kinetica DB Cluster</p> <p><code>2. clusterSize</code> - block that defines the number of DB Ranks to run</p> <p><code>3. tshirtSize</code> - sets the cluster size to a defined size based upon the t-shirt size. Valid sizes are: -</p> <ul> <li><code>XS</code> -   1 DB Rank</li> <li><code>S</code> -    2 DB Ranks</li> <li><code>M</code> -    4 DB Ranks</li> <li><code>L</code> -    8 DB Ranks</li> <li><code>XL</code> -   16 DB Ranks</li> <li><code>XXL</code> -  32 DB Ranks</li> <li><code>XXXL</code> - 64 DB Ranks</li> </ul> <p><code>4. tshirtType</code> - block that defines the tyoe DB Ranks to run: -</p> <ul> <li><code>SmallCPU</code> - </li> <li><code>LargeCPU</code> -</li> <li><code>SmallGPU</code> - </li> <li><code>LargeGPU</code> -</li> </ul> <p><code>5. fqdn</code> - The fully qualified URL for the DB cluster. Used on the Ingress records for any exposed services.</p> <p><code>6. haRingName</code> - Default: <code>default</code></p> <p><code>7. hasPools</code> - Whether to enable the separate node 'pools' for \"infra\", \"compute\" pod scheduling.                 Default: false                 +optional</p>","tags":["Reference"]},{"location":"Reference/database/#autosuspend","title":"autoSuspend","text":"<p>The DB Cluster autosuspend section allows for the spinning down of the core DB Pods to release the underlying Kubernetes nodes to reduce infrastructure costs when the DB is not in use. </p> kineticacluster.yaml - autoSuspend<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaCluster\nmetadata:\n  name: my-kinetica-db-cr\n  namespace: gpudb\nspec:\n  autoSuspend:\n    enabled: false\n    inactivityDuration: 1h0m0s\n</code></pre> <p><code>7.</code> the start of the <code>autoSuspend</code> definition</p> <p><code>8.</code> <code>enabled</code> when set to <code>true</code> auto suspend of the DB cluster is enabled otherwise set to <code>false</code> and no      automatic suspending of the DB takes place.  If omitted it defaults to <code>false</code></p> <p><code>9.</code> <code>inactivityDuration</code> the duration after which if no DB activity has taken place the DB will be suspended</p> <p>Horizontal Pod Autoscaler</p> <p>In order for <code>autoSuspend</code> to work correctly the Kubernetes Horizontal Pod Autoscaler needs to be deployed to the cluster.</p>","tags":["Reference"]},{"location":"Reference/database/#gadmin","title":"gadmin","text":"<p>GAdmin the Database Administration Console</p> <p></p> kineticacluster.yaml - gadmin<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaCluster\nmetadata:\n  name: my-kinetica-db-cr\n  namespace: gpudb\nspec:\n  gadmin:\n    containerPort:\n      containerPort: 8080\n      name: gadmin\n      protocol: TCP\n    isEnabled: true\n</code></pre> <p><code>7.</code> <code>gadmin</code> configuration block definition</p> <p><code>8.</code> <code>containerPort</code> configuration block i.e. where <code>gadmin</code> is exposed on the DB Pod</p> <p><code>9.</code> <code>containerPort</code> the port number as an integer. Default: <code>8080</code></p> <p><code>10.</code> <code>name</code> the name of the port being exposed. Default:  <code>gadmin</code></p> <p><code>11.</code> <code>protocol</code> network protocal used. Default: <code>TCP</code></p> <p><code>12.</code> <code>isEnabled</code> whether <code>gadmin</code> is exposed from the DB pod. Default: <code>true</code></p>","tags":["Reference"]},{"location":"Reference/database/#kineticauser","title":"KineticaUser","text":"","tags":["Reference"]},{"location":"Reference/database/#kineticagrant","title":"KineticaGrant","text":"","tags":["Reference"]},{"location":"Reference/database/#kineticaschema","title":"KineticaSchema","text":"","tags":["Reference"]},{"location":"Reference/database/#kineticaresourcegroup","title":"KineticaResourceGroup","text":"","tags":["Reference"]},{"location":"Reference/helm_kinetica_operators/","title":"Helm Chart Reference","text":"","tags":["Reference"]},{"location":"Reference/helm_kinetica_operators/#coming-soon","title":"Coming Soon","text":"","tags":["Reference"]},{"location":"Reference/kinetica_cluster_admins/","title":"Kinetica Cluster Admins Reference","text":"","tags":["Reference"]},{"location":"Reference/kinetica_cluster_admins/#full-kineticaclusteradmin-cr-structure","title":"Full KineticaClusterAdmin CR Structure","text":"kineticaclusteradmins.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaClusterAdmin\nmetadata: {}\n# KineticaClusterAdminSpec defines the desired state of\n# KineticaClusterAdmin\nspec:\n  # ForceDBStatus - Force a Status of the DB.\n  forceDbStatus: string\n  # Name - The name of the cluster to target.\n  kineticaClusterName: string\n  # Offline - Pause/Resume of the DB.\n  offline:\n    # Set to true if desired state is offline. The supported values are:\n    # true false\n    offline: false\n    # Optional parameters. The default value is an empty map (\n    # {} ). Supported Parameters: flush_to_disk Flush to disk when\n    # going offline The supported values are: true false\n    options: {}\n  # Rebalance of the DB.\n  rebalance:\n    # Optional parameters. The default value is an empty map (\n    # {} ). Supported Parameters: rebalance_sharded_data        If true,\n    # sharded data will be rebalanced approximately equally across the\n    # cluster. Note that for clusters with large amounts of sharded\n    # data, this data transfer could be time-consuming and result in\n    # delayed query responses. The default value is true. The supported\n    # values are: true false rebalance_unsharded_data   If true,\n    # unsharded data (a.k.a. randomly-sharded) will be rebalanced\n    # approximately equally across the cluster. Note that for clusters\n    # with large amounts of unsharded data, this data transfer could be\n    # time-consuming and result in delayed query responses. The default\n    # value is true. The supported values are: true false\n    # table_includes                Comma-separated list of unsharded table names\n    # to rebalance. Not applicable to sharded tables because they are\n    # always rebalanced. Cannot be used simultaneously with\n    # table_excludes. This parameter is ignored if\n    # rebalance_unsharded_data is false.\n    # table_excludes                Comma-separated list of unsharded table names\n    # to not rebalance. Not applicable to sharded tables because they\n    # are always rebalanced. Cannot be used simultaneously with\n    # table_includes. This parameter is ignored if rebalance_\n    # unsharded_data is false. aggressiveness               Influences how much\n    # data is moved at a time during rebalance. A higher aggressiveness\n    # will complete the rebalance faster. A lower aggressiveness will\n    # take longer but allow for better interleaving between the\n    # rebalance and other queries. Valid values are constants from 1\n    # (lowest) to 10 (highest). The default value is '1'.\n    # compact_after_rebalance   Perform compaction of deleted records\n    # once the rebalance completes to reclaim memory and disk space.\n    # Default is true, unless repair_incorrectly_sharded_data is set to\n    # true. The default value is true. The supported values are: true\n    # false compact_only                If set to true, ignore rebalance options\n    # and attempt to perform compaction of deleted records to reclaim\n    # memory and disk space without rebalancing first. The default\n    # value is false. The supported values are: true false\n    # repair_incorrectly_sharded_data       Scans for any data sharded\n    # incorrectly and re-routes the data to the correct location. Only\n    # necessary if /admin/verifydb reports an error in sharding\n    # alignment. This can be done as part of a typical rebalance after\n    # expanding the cluster or in a standalone fashion when it is\n    # believed that data is sharded incorrectly somewhere in the\n    # cluster. Compaction will not be performed by default when this is\n    # enabled. If this option is set to true, the time necessary to\n    # rebalance and the memory used by the rebalance may increase. The\n    # default value is false. The supported values are: true false\n    options: {}\n  # RegenerateDBConfig - Force regenerate of DB ConfigMap. true -\n  # restarts DB Pods after config generation false - writes new\n  # configuration without restarting the DB Pods\n  regenerateDBConfig:\n    # Restart - Scales down the DB STS and back up once the DB\n    # Configuration has been regenerated.\n    restart: false\n# KineticaClusterAdminStatus defines the observed state of\n# KineticaClusterAdmin\nstatus:\n  # Phase - The current phase/state of the Admin request\n  phase: string\n  # Processed - Indicates if the admin request has already been\n  # processed. Avoids the request being rerun in the case the Operator\n  # gets restarted.\n  processed: false\n</code></pre>","tags":["Reference"]},{"location":"Reference/kinetica_cluster_backups/","title":"Kinetica Cluster Backups Reference","text":"","tags":["Reference","Operations"]},{"location":"Reference/kinetica_cluster_backups/#full-kineticaclusterbackup-cr-structure","title":"Full KineticaClusterBackup CR Structure","text":"kineticaclusterbackups.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaClusterBackup \nmetadata: {}\n# Fields specific to the linked backup engine\nprovider:\n  # Name of the backup/restore provider. FOR INTERNAL USE ONLY.\n  backupProvider: \"velero\"\n  # Name of the backup in the linked BackupProvider. FOR INTERNAL USE\n  # ONLY.\n  linkedItemName: \"\"\n# BackupSpec defines the specification for a Velero backup.\nspec:\n  # DefaultVolumesToRestic specifies whether restic should be used to\n  # take a backup of all pod volumes by default.\n  defaultVolumesToRestic: true\n  # ExcludedNamespaces contains a list of namespaces that are not\n  # included in the backup.\n  excludedNamespaces: [\"string\"]\n  # ExcludedResources is a slice of resource names that are not included\n  # in the backup.\n  excludedResources: [\"string\"]\n  # Hooks represent custom behaviors that should be executed at\n  # different phases of the backup.\n  hooks:\n    # Resources are hooks that should be executed when backing up\n    # individual instances of a resource.\n    resources:\n    - excludedNamespaces: [\"string\"]\n      # ExcludedResources specifies the resources to which this hook\n      # spec does not apply.\n      excludedResources: [\"string\"]\n      # IncludedNamespaces specifies the namespaces to which this hook\n      # spec applies. If empty, it applies to all namespaces.\n      includedNamespaces: [\"string\"]\n      # IncludedResources specifies the resources to which this hook\n      # spec applies. If empty, it applies to all resources.\n      includedResources: [\"string\"]\n      # LabelSelector, if specified, filters the resources to which this\n      # hook spec applies.\n      labelSelector:\n        # matchExpressions is a list of label selector requirements. The\n        # requirements are ANDed.\n        matchExpressions:\n        - key: string\n          # operator represents a key's relationship to a set of values.\n          # Valid operators are In, NotIn, Exists and DoesNotExist.\n          operator: string\n          # values is an array of string values. If the operator is In\n          # or NotIn, the values array must be non-empty. If the\n          # operator is Exists or DoesNotExist, the values array must\n          # be empty. This array is replaced during a strategic merge\n          # patch.\n          values: [\"string\"]\n        # matchLabels is a map of {key,value} pairs. A single\n        # {key,value} in the matchLabels map is equivalent to an\n        # element of matchExpressions, whose key field is \"key\", the\n        # operator is \"In\", and the values array contains only \"value\".\n        # The requirements are ANDed.\n        matchLabels: {}\n      # Name is the name of this hook.\n      name: string\n      # PostHooks is a list of BackupResourceHooks to execute after\n      # storing the item in the backup. These are executed after\n      # all \"additional items\" from item actions are processed.\n      post:\n      - exec:\n          # Command is the command and arguments to execute.\n          command: [\"string\"]\n          # Container is the container in the pod where the command\n          # should be executed. If not specified, the pod's first\n          # container is used.\n          container: string\n          # OnError specifies how Velero should behave if it encounters\n          # an error executing this hook.\n          onError: string\n          # Timeout defines the maximum amount of time Velero should\n          # wait for the hook to complete before considering the\n          # execution a failure.\n          timeout: string\n      # PreHooks is a list of BackupResourceHooks to execute prior to\n      # storing the item in the backup. These are executed before\n      # any \"additional items\" from item actions are processed.\n      pre:\n      - exec:\n          # Command is the command and arguments to execute.\n          command: [\"string\"]\n          # Container is the container in the pod where the command\n          # should be executed. If not specified, the pod's first\n          # container is used.\n          container: string\n          # OnError specifies how Velero should behave if it encounters\n          # an error executing this hook.\n          onError: string\n          # Timeout defines the maximum amount of time Velero should\n          # wait for the hook to complete before considering the\n          # execution a failure.\n          timeout: string\n  # IncludeClusterResources specifies whether cluster-scoped resources\n  # should be included for consideration in the backup.\n  includeClusterResources: true\n  # IncludedNamespaces is a slice of namespace names to include objects\n  # from. If empty, all namespaces are included.\n  includedNamespaces: [\"string\"]\n  # IncludedResources is a slice of resource names to include in the\n  # backup. If empty, all resources are included.\n  includedResources: [\"string\"]\n  # LabelSelector is a metav1.LabelSelector to filter with when adding\n  # individual objects to the backup. If empty or nil, all objects are\n  # included. Optional.\n  labelSelector:\n    # matchExpressions is a list of label selector requirements. The\n    # requirements are ANDed.\n    matchExpressions:\n    - key: string\n      # operator represents a key's relationship to a set of values.\n      # Valid operators are In, NotIn, Exists and DoesNotExist.\n      operator: string\n      # values is an array of string values. If the operator is In or\n      # NotIn, the values array must be non-empty. If the operator is\n      # Exists or DoesNotExist, the values array must be empty. This\n      # array is replaced during a strategic merge patch.\n      values: [\"string\"]\n    # matchLabels is a map of {key,value} pairs. A single {key,value} in\n    # the matchLabels map is equivalent to an element of\n    # matchExpressions, whose key field is \"key\", the operator is \"In\",\n    # and the values array contains only \"value\". The requirements are\n    # ANDed.\n    matchLabels: {} metadata: labels: {}\n  # OrderedResources specifies the backup order of resources of specific\n  # Kind. The map key is the Kind name and value is a list of resource\n  # names separated by commas. Each resource name has\n  # format \"namespace/resourcename\".  For cluster resources, simply\n  # use \"resourcename\".\n  orderedResources: {}\n  # SnapshotVolumes specifies whether to take cloud snapshots of any\n  # PV's referenced in the set of objects included in the Backup.\n  snapshotVolumes: true\n  # StorageLocation is a string containing the name of a\n  # BackupStorageLocation where the backup should be stored.\n  storageLocation: string\n  # TTL is a time.Duration-parseable string describing how long the\n  # Backup should be retained for.\n  ttl: string\n  # VolumeSnapshotLocations is a list containing names of\n  # VolumeSnapshotLocations associated with this backup.\n  volumeSnapshotLocations: [\"string\"] status:\n  # ClusterSize the current number of ranks &amp; type i.e. CPU or GPU of\n  # the cluster when the backup took place.\n  clusterSize:\n    # ClusterSizeEnum - T-Shirt size of the Kinetica DB Cluster i.e. a\n    # representation of the number of nodes in a simple to understand\n    # T-Short size scheme. This indicates the size of the cluster i.e.\n    # the number of nodes. It does not identify the size of the cloud\n    # provider nodes. For node size see ClusterTypeEnum. Supported\n    # Values are: - XS S M L XL XXL XXXL\n    tshirtSize: string\n    # ClusterTypeEnum - An Enum of the node types of a KineticaCluster\n    # e.g. CPU, GPU along with the Cloud Provider node size e.g. size\n    # of the VM.\n    tshirtType: string coldTierBackup: string\n  # CompletionTimestamp records the time a backup was completed.\n  # Completion time is recorded even on failed backups. Completion time\n  # is recorded before uploading the backup object. The server's time\n  # is used for CompletionTimestamps\n  completionTimestamp: string\n  # Errors is a count of all error messages that were generated during\n  # execution of the backup.  The actual errors are in the backup's log\n  # file in object storage.\n  errors: 1\n  # Expiration is when this Backup is eligible for garbage-collection.\n  expiration: string\n  # FormatVersion is the backup format version, including major, minor,\n  # and patch version.\n  formatVersion: string\n  # Phase is the current state of the Backup.\n  phase: string\n  # Progress contains information about the backup's execution progress.\n  # Note that this information is best-effort only -- if Velero fails\n  # to update it during a backup for any reason, it may be\n  # inaccurate/stale.\n  progress:\n    # ItemsBackedUp is the number of items that have actually been\n    # written to the backup tarball so far.\n    itemsBackedUp: 1\n    # TotalItems is the total number of items to be backed up. This\n    # number may change throughout the execution of the backup due to\n    # plugins that return additional related items to back up, the\n    # velero.io/exclude-from-backup label, and various other filters\n    # that happen as items are processed.\n    totalItems: 1\n  # StartTimestamp records the time a backup was started. Separate from\n  # CreationTimestamp, since that value changes on restores. The\n  # server's time is used for StartTimestamps\n  startTimestamp: string\n  # ValidationErrors is a slice of all validation errors\n  # (if applicable).\n  validationErrors: [\"string\"]\n  # Version is the backup format major version. Deprecated: Please see\n  # FormatVersion\n  version: 1\n  # VolumeSnapshotsAttempted is the total number of attempted volume\n  # snapshots for this backup.\n  volumeSnapshotsAttempted: 1\n  # VolumeSnapshotsCompleted is the total number of successfully\n  # completed volume snapshots for this backup.\n  volumeSnapshotsCompleted: 1\n  # Warnings is a count of all warning messages that were generated\n  # during execution of the backup. The actual warnings are in the\n  # backup's log file in object storage.\n  warnings: 1\n</code></pre>","tags":["Reference","Operations"]},{"location":"Reference/kinetica_cluster_grants/","title":"Kinetica Cluster Grants CRD Reference","text":"","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_grants/#full-kineticagrant-cr-structure","title":"Full KineticaGrant CR Structure","text":"kineticagrants.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaGrant \nmetadata: {}\n# KineticaGrantSpec defines the desired state of KineticaGrant\nspec:\n  # Grants system-level and/or table permissions to a user or role.\n  addGrantAllOnSchemaRequest:\n    # Name of the user or role that will be granted membership in input\n    # parameter role. Must be an existing user or role.\n    member: string\n    # Optional parameters. The default value is an empty map ( {} ).\n    options: {}\n    # SchemaName - name of the schema on which to perform the Grant All\n    schemaName: string\n  # Grants system-level and/or table permissions to a user or role.\n  addGrantPermissionRequest:\n    # Optional parameters. The default value is an empty map ( {} ).\n    options: {}\n    # Permission to grant to the user or role. Supported\n    # Values    Description system_admin    Full access to all data and\n    # system functions. system_user_admin   Access to administer users\n    # and roles that do not have system_admin permission.\n    # system_write  Read and write access to all tables.\n    # system_read   Read-only access to all tables.\n    systemPermission:\n      # UID of the user or role to which the permission will be granted.\n      # Must be an existing user or role.\n      name: string\n      # Optional parameters. The default value is an empty map (\n      # {} ). Supported Parameters: resource_group  Name of an existing\n      # resource group to associate with this role.\n      options: {}\n      # Permission to grant to the user or role. Supported\n      # Values  Description table_admin Full read/write and\n      # administrative access to the table. table_insert    Insert access\n      # to the table. table_update  Update access to the table.\n      # table_delete    Delete access to the table. table_read  Read access\n      # to the table.\n      permission: string\n    # Permission to grant to the user or role. Supported\n    # Values    Description&lt;br/&gt; system_admin   Full access to all data and\n    # system functions.&lt;br/&gt; system_user_admin  Access to administer\n    # users and roles that do not have system_admin permission.&lt;br/&gt;\n    # system_write  Read and write access to all tables.&lt;br/&gt;\n    # system_read   Read-only access to all tables.&lt;br/&gt;\n    tablePermissions:\n    - filter_expression: \"\"\n      # UID of the user or role to which the permission will be granted.\n      # Must be an existing user or role.\n      name: string\n      # Optional parameters. The default value is an empty map (\n      # {} ). Supported Parameters: resource_group  Name of an existing\n      # resource group to associate with this role.\n      options: {}\n      # Permission to grant to the user or role. Supported\n      # Values  Description table_admin Full read/write and\n      # administrative access to the table. table_insert    Insert access\n      # to the table. table_update  Update access to the table.\n      # table_delete    Delete access to the table. table_read  Read access\n      # to the table.\n      permission: string\n      # Name of the table for which the Permission is to be granted\n      table_name: string\n  # Grants membership in a role to a user or role.\n  addGrantRoleRequest:\n    # Name of the user or role that will be granted membership in input\n    # parameter role. Must be an existing user or role.\n    member: string\n    # Optional parameters. The default value is an empty map ( {} ).\n    options: {}\n    # Name of the role in which membership will be granted. Must be an\n    # existing role.\n    role: string\n  # Debug debug the call\n  debug: false\n  # RingName is the name of the kinetica ring that this user belongs\n  # to.\n  ringName: string\n# KineticaGrantStatus defines the observed state of KineticaGrant\nstatus:\n  # DBStringResponse - The GPUdb server embeds the endpoint response\n  # inside a standard response structure which contains status\n  # information and the actual response to the query.\n  db_response: data: string\n    # This embedded JSON represents the result of the endpoint\n    data_str: string\n    # API Call Specific\n    data_type: string\n    # Empty if success or an error message\n    message: string\n    # 'OK' or 'ERROR'\n    status: string \n    ldap_response: string\n</code></pre>","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_reference/","title":"Core DB CRDs","text":"<ul> <li> <p> DB Clusters</p> <p>Core Kinetica Database Cluster Management CRD &amp; sample CR.</p> <p> KineticaCluster</p> </li> <li> <p> DB Users</p> <p>Kinetica Database User Management CRD &amp; sample CR.</p> <p> KineticaUser</p> </li> <li> <p> DB Roles</p> <p>Kinetica Database Role Management CRD &amp; sample CR.</p> <p> KineticaRole</p> </li> <li> <p> DB Schemas</p> <p>Kinetica Database Schema Management CRD &amp; sample CR.</p> <p> KineticaSchema</p> </li> <li> <p> DB Grants</p> <p>Kinetica Database Grant Management CRD &amp; sample CR.</p> <p> KineticaGrant</p> </li> <li> <p> DB Resource Groups</p> <p>Kinetica Database Resource Group Management CRD &amp; sample CR.</p> <p> KineticaResourceGroup</p> </li> <li> <p> DB Administration</p> <p>Kinetica Database Administration CRD &amp; sample CR.</p> <p> KineticaAdmin</p> </li> <li> <p> DB Backups</p> <p>Kinetica Database Backup Management CRD &amp; sample CR.</p> <p>Note</p> <p>This requires Velero to be installed on the Kubernetes Cluster.</p> <p> KineticaBackup</p> </li> <li> <p> DB Restore</p> <p>Kinetica Database Restore CRD &amp; sample CR.</p> <p>Note</p> <p>This requires Velero to be installed on the Kubernetes Cluster.</p> <p> KineticaRestore</p> </li> </ul>","tags":["Reference","Installation","Operations"]},{"location":"Reference/kinetica_cluster_resource_groups/","title":"Kinetica Cluster Resource Groups CRD Reference","text":"","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_resource_groups/#full-kineticaresourcegroup-cr-structure","title":"Full KineticaResourceGroup CR Structure","text":"kineticaclusterresourcegroups.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaClusterResourceGroup \nmetadata: {}\n# KineticaClusterResourceGroupSpec defines the desired state of\n# KineticaClusterResourceGroup\nspec: \n  db_create_resource_group_request:\n    # AdjoiningResourceGroup -\n    adjoining_resource_group: \"\"\n    # Name - name of the DB ResourceGroup\n    # https://docs.kinetica.com/7.1/azure/sql/resource_group/?search-highlight=resource+group#id-baea5b60-769c-5373-bff1-53f4f1ca5c21\n    name: string\n    # Options - DB Options used when creating the ResourceGroup\n    options: {}\n    # Ranking - Indicates the relative ranking among existing resource\n    # groups where this new resource group will be placed. When using\n    # before or after, specify which resource group this one will be\n    # inserted before or after in input parameter\n    # adjoining_resource_group. The supported values are: first last\n    # before after\n    ranking: \"\"\n  # RingName is the name of the kinetica ring that this user belongs\n  # to.\n  ringName: string\n# KineticaClusterResourceGroupStatus defines the observed state of\n# KineticaClusterResourceGroup\nstatus: \n  provisioned: string\n</code></pre>","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_restores/","title":"Kinetica Cluster Restores Reference","text":"","tags":["Reference","Operations"]},{"location":"Reference/kinetica_cluster_restores/#full-kineticaclusterrestore-cr-structure","title":"Full KineticaClusterRestore CR Structure","text":"kineticaclusterrestores.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaClusterRestore \nmetadata: {}\n# RestoreSpec defines the specification for a Velero restore.\nspec:\n  # BackupName is the unique name of the Velero backup to restore from.\n  backupName: string\n  # ExcludedNamespaces contains a list of namespaces that are not\n  # included in the restore.\n  excludedNamespaces: [\"string\"]\n  # ExcludedResources is a slice of resource names that are not included\n  # in the restore.\n  excludedResources: [\"string\"]\n  # IncludeClusterResources specifies whether cluster-scoped resources\n  # should be included for consideration in the restore. If null,\n  # defaults to true.\n  includeClusterResources: true\n  # IncludedNamespaces is a slice of namespace names to include objects\n  # from. If empty, all namespaces are included.\n  includedNamespaces: [\"string\"]\n  # IncludedResources is a slice of resource names to include in the\n  # restore. If empty, all resources in the backup are included.\n  includedResources: [\"string\"]\n  # LabelSelector is a metav1.LabelSelector to filter with when\n  # restoring individual objects from the backup. If empty or nil, all\n  # objects are included. Optional.\n  labelSelector:\n    # matchExpressions is a list of label selector requirements. The\n    # requirements are ANDed.\n    matchExpressions:\n    - key: string\n      # operator represents a key's relationship to a set of values.\n      # Valid operators are In, NotIn, Exists and DoesNotExist.\n      operator: string\n      # values is an array of string values. If the operator is In or\n      # NotIn, the values array must be non-empty. If the operator is\n      # Exists or DoesNotExist, the values array must be empty. This\n      # array is replaced during a strategic merge patch.\n      values: [\"string\"]\n    # matchLabels is a map of {key,value} pairs. A single {key,value} in\n    # the matchLabels map is equivalent to an element of\n    # matchExpressions, whose key field is \"key\", the operator is \"In\",\n    # and the values array contains only \"value\". The requirements are\n    # ANDed.\n    matchLabels: {}\n  # NamespaceMapping is a map of source namespace names to target\n  # namespace names to restore into. Any source namespaces not included\n  # in the map will be restored into namespaces of the same name.\n  namespaceMapping: {}\n  # RestorePVs specifies whether to restore all included PVs from\n  # snapshot (via the cloudprovider).\n  restorePVs: true\n  # ScheduleName is the unique name of the Velero schedule to restore\n  # from. If specified, and BackupName is empty, Velero will restore\n  # from the most recent successful backup created from this schedule.\n  scheduleName: string status: coldTierRestore: \"\"\n  # CompletionTimestamp records the time the restore operation was\n  # completed. Completion time is recorded even on failed restore. The\n  # server's time is used for StartTimestamps\n  completionTimestamp: string\n  # Errors is a count of all error messages that were generated during\n  # execution of the restore. The actual errors are stored in object\n  # storage.\n  errors: 1\n  # FailureReason is an error that caused the entire restore to fail.\n  failureReason: string\n  # Phase is the current state of the Restore\n  phase: string\n  # Progress contains information about the restore's execution\n  # progress. Note that this information is best-effort only -- if\n  # Velero fails to update it during a restore for any reason, it may\n  # be inaccurate/stale.\n  progress:\n    # ItemsRestored is the number of items that have actually been\n    # restored so far\n    itemsRestored: 1\n    # TotalItems is the total number of items to be restored. This\n    # number may change throughout the execution of the restore due to\n    # plugins that return additional related items to restore\n    totalItems: 1\n  # StartTimestamp records the time the restore operation was started.\n  # The server's time is used for StartTimestamps\n  startTimestamp: string\n  # ValidationErrors is a slice of all validation errors(if applicable)\n  validationErrors: [\"string\"]\n  # Warnings is a count of all warning messages that were generated\n  # during execution of the restore. The actual warnings are stored in\n  # object storage.\n  warnings: 1\n</code></pre>","tags":["Reference","Operations"]},{"location":"Reference/kinetica_cluster_roles/","title":"Kinetica Cluster Roles CRD","text":"","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_roles/#full-kineticarole-cr-structure","title":"Full KineticaRole CR Structure","text":"kineticaroles.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaRole \nmetadata: {}\n# KineticaRoleSpec defines the desired state of KineticaRole\nspec:\n  # AlterRoleRequest Kinetica DB REST API Request Format Object.\n  alter_role:\n    # Action - Modification operation to be applied to the role.\n    action: string\n    # Role UID - Name of the role to be altered. Must be an existing\n    # role.\n    name: string\n    # Optional parameters. The default value is an empty map ( {} ).\n    options: {}\n    # Value - The value of the modification, depending on input\n    # parameter action.\n    value: string\n  # Debug debug the call\n  debug: false\n  # RingName is the name of the kinetica ring that this user belongs\n  # to.\n  ringName: string\n  # AddRoleRequest Kinetica DB REST API Request Format Object.\n  role:\n    # User UID\n    name: string\n    # Optional parameters. The default value is an empty map (\n    # {} ). Supported Parameters: resource_group    Name of an existing\n    # resource group to associate with this role.\n    options: {}\n    # ResourceGroupName of an existing resource group to associate with\n    # this role\n    resourceGroupName: \"\"\n# KineticaRoleStatus defines the observed state of KineticaRole\nstatus:\n  # DBStringResponse - The GPUdb server embeds the endpoint response\n  # inside a standard response structure which contains status\n  # information and the actual response to the query.\n  db_response: data: string\n    # This embedded JSON represents the result of the endpoint\n    data_str: string\n    # API Call Specific\n    data_type: string\n    # Empty if success or an error message\n    message: string\n    # 'OK' or 'ERROR'\n    status: string \n    ldap_response: string\n</code></pre>","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_schemas/","title":"Kinetica Cluster Schemas CRD Reference","text":"","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_schemas/#full-kinetica-cluster-schemas-cr-structure","title":"Full Kinetica Cluster Schemas CR Structure","text":"kineticaclusterschemas.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaClusterSchema \nmetadata: {}\n# KineticaClusterSchemaSpec defines the desired state of\n# KineticaClusterSchema\nspec: \n  db_create_schema_request:\n    # Name - the name of the resource group to create in the DB\n    name: string\n    # Optional parameters. The default value is an empty map (\n    # {} ). Supported Parameters: \"max_cpu_concurrency\", \"max_data\"\n    options: {}\n  # RingName is the name of the kinetica ring that this user belongs\n  # to.\n  ringName: string\n# KineticaClusterSchemaStatus defines the observed state of\n# KineticaClusterSchema\nstatus: \n  provisioned: string\n</code></pre>","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_users/","title":"Kinetica Cluster Users CRD Reference","text":"","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_users/#full-kineticauser-cr-structure","title":"Full KineticaUser CR Structure","text":"kineticausers.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaUser\nmetadata: {}\n# KineticaUserSpec defines the desired state of KineticaUser\nspec:\n  # Action field contains UserActionEnum field indicating whether it is\n  # an Upsert or Change Password operation. For deletion delete the\n  # KineticaUser CR and a finalizer will remove the user from LDAP.\n  action: string\n  # ChangePassword specific fields\n  changePassword:\n    # PasswordSecret - Not the actual user password but the name of a\n    # Kubernetes Secret containing a Data element with a Password\n    # attribute. The secret is removed on user creation. Must be in the\n    # same namespace as the Kinetica Cluster. Must contain the\n    # following fields: - oldPassword newPassword\n    passwordSecret: string\n  # Debug debug the call\n  debug: false\n  # GroupID - Organisation or Team Id the user belongs to.\n  groupId: string\n  # Create the user in Reveal\n  reveal: true\n  # RingName is the name of the kinetica ring that this user belongs\n  # to.\n  ringName: string\n  # UID is the username (not UUID UID).\n  uid: string\n  # Upsert specific fields\n  upsert:\n    # CreateHomeDirectory - when true, a home directory in KiFS is\n    # created for this user The default value is true. The supported\n    # values are: true false\n    createHomeDirectory: true\n    # DB Memory user data size limit\n    dataLimit: \"10Gi\"\n    # DisplayName\n    displayName: string\n    # GivenName is Firstname also called Christian name. givenName in\n    # LDAP terms.\n    givenName: string\n    # KIFs user data size limit\n    kifsDataLimit: \"2Gi\"\n    # LastName refers to last name or surname. sn in LDAP terms.\n    lastName: string\n    # Options -\n    options: {}\n    # PasswordSecret - Not the actual user password but the name of a\n    # Kubernetes Secret containing a Data element with a Password\n    # attribute. The secret is removed on user creation. Must be in the\n    # same namespace as the Kinetica Cluster.\n    passwordSecret: string\n    # UPN or UserPrincipalName - e.g. guyt@cp.com  \n    # Looks like an email address.\n    userPrincipalName: string\n  # UUID is the user unique UUID from the Control Plane.\n  uuid: string\n# KineticaUserStatus defines the observed state of KineticaUser\nstatus:\n  # DBStringResponse - The GPUdb server embeds the endpoint response\n  # inside a standard response structure which contains status\n  # information and the actual response to the query.\n  db_response: data: string\n    # This embedded JSON represents the result of the endpoint\n    data_str: string\n    # API Call Specific\n    data_type: string\n    # Empty if success or an error message\n    message: string\n    # 'OK' or 'ERROR'\n    status: string \n    ldap_response: string \n    reveal_admin: string\n</code></pre>","tags":["Reference","Administration"]},{"location":"Reference/kinetica_clusters/","title":"image/svg+xml        crd     Kinetica Clusters CRD Reference","text":"<p>This page covers the Kinetica Cluster Kubernetes CRD.</p>","tags":["Reference"]},{"location":"Reference/kinetica_clusters/#kubectl-cli-commands","title":"<code>kubectl</code> cli commands","text":"","tags":["Reference"]},{"location":"Reference/kinetica_clusters/#kubectl-n-_namespace_-get-kc","title":"<code>kubectl -n _namespace_ get kc</code>","text":"<p>Lists the <code>KineticaUsers</code> defined within the specified anmespace to the console.</p> <p></p> Bash<pre><code>kubectl -n _namespace_ get ku\n</code></pre>","tags":["Reference"]},{"location":"Reference/kinetica_clusters/#full-kineticacluster-cr-structure","title":"Full KineticaCluster CR Structure","text":"kineticaclusters.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaCluster \nmetadata: {}\n# KineticaClusterSpec defines the configuration for KineticaCluster DB\nspec:\n  # An optional duration after which the database is stopped and DB\n  # resources are freed\n  autoSuspend: \n    enabled: false\n    # InactivityDuration - the duration which the cluster should be idle\n    # before auto-pausing the DB Cluster.\n    inactivityDuration: \"1h\"\n  # The platform infrastructure provider e.g. azure, aws, gcp, on-prem\n  # etc.\n  awsConfig:\n    # ClusterName - AWS name of the EKS Cluster. NOTE: Marked as\n    # optional but is mandatory\n    clusterName: string\n    # MarketplaceAppConfig - Amazon AWS specific DB Cluster\n    # information.\n    marketplaceApp:\n      # KmsKeyId - Key for disk encryption. The full Amazon Resource\n      # Name of the key to use when encrypting the volume. If none is\n      # supplied but encrypted is true, a key is generated by AWS. See\n      # AWS docs for valid ARN value.\n      kmsKeyId: string\n      # ProductCode - used to uniquely identify a product in AWS\n      # Marketplace. The product code should be the same as the one\n      # used during the publishing of a new product.\n      productCode: \"1cmucncoyp9pi8xjdwqjimlf8\"\n      # PublicKeyVersion - Public Key Version provided by AWS\n      # Marketplace\n      publicKeyVersion: 1\n      # ParentResourceGroup - The resource group of the ManagedApp\n      # itself ParentResourceGroup     string\n      # `json:\"parentResourceGroup\"` ResourceId - Identifier of the\n      # resource against which usage is emitted Format is GUID\n      # (UUID)\n      # https://github.com/microsoft/commercial-marketplace-openapi/blob/main/Microsoft.Marketplace.Metering/2018-08-31/meteringapi.v1.json\n      # Optional only if that exactly of  ResourceId or ResourceUri is\n      # specified.\n      resourceId: string\n    # NodeGroups - List of NodeGroups for this cluster MUST contain at\n    # least one of the following keys: - \n    #   * none\n    #   * infra \n    #   * infra_public \n    #   * compute \n    #   * compute-gpu \n    #   * aaw_cpu \n    # NOTE: Marked as optional but is mandatory\n    nodeGroups: {}\n    # OTELTracing - OpenTelemetry Tracing Specifics\n    otelTracing:\n      # Endpoint - Set the OpenTelemetry reporting Endpoint\n      endpoint: \"\"\n      # Key - KineticaCluster specific Key required to send Telemetry\n      # information to the Cloud\n      key: string\n      # MaxBatchSize - Telemetry Reporting Interval to use in seconds.\n      maxBatchInterval: 10\n      # MaxBatchSize - Telemetry Maximum Batch Size to send.\n      maxBatchSize: 1024\n  # The platform infrastructure provider e.g. azure, aws, gcp, on-prem\n  # etc.\n  azureConfig:\n    # App Insights Specifics\n    appInsights:\n      # Endpoint - Override the default AppInsights reporting Endpoint\n      endpoint: \"\"\n      # Key - KineticaCluster specific Application Insights Key required\n      # to send Telemetry information to the Azure Portal\n      key: string\n      # MaxBatchSize - Telemetry Reporting Interval to use in seconds.\n      maxBatchInterval: 10\n      # MaxBatchSize - Telemetry Maximum Batch Size to send.\n      maxBatchSize: 1024\n    # AzureManagedAppConfig - Microsoft Azure specific DB Cluster\n    # information.\n    managedApp:\n      # DiskEncryptionSetID - By default, managed disks use\n      # platform-managed encryption keys. All managed disks, snapshots,\n      # images, and data written to existing managed disks are\n      # automatically encrypted-at-rest with platform-managed keys. You\n      # can choose to manage encryption at the level of each managed\n      # disk, with your own keys. When you specify a customer-managed\n      # key, that key is used to protect and control access to the key\n      # that encrypts your data. Customer-managed keys offer greater\n      # flexibility to manage access controls.\n      diskEncryptionSetId: string\n      # PlanId - The Azure Marketplace Plan/Offer identifier selected by\n      # the customer for this DB cluster e.g. BYOL, Pay-As-You-Go etc.\n      planId: string\n      # ParentResourceGroup - The resource group of the ManagedApp\n      # itself ParentResourceGroup     string\n      # `json:\"parentResourceGroup\"` ResourceId - Identifier of the\n      # resource against which usage is emitted Format is GUID\n      # (UUID)\n      # https://github.com/microsoft/commercial-marketplace-openapi/blob/main/Microsoft.Marketplace.Metering/2018-08-31/meteringapi.v1.json\n      # Optional only if that exactly of  ResourceId or ResourceUri is\n      # specified.\n      resourceId: string\n      # ResourceUri - Identifier of the managed app resource against\n      # which usage is emitted\n      # https://github.com/microsoft/commercial-marketplace-openapi/blob/main/Microsoft.Marketplace.Metering/2018-08-31/meteringapi.v1.json\n      # Optional only if that exactly of  ResourceId or ResourceUri is\n      # specified.\n      resourceUri: string\n  # Tells the operator we want to run in Debug mode.\n  debug: false\n  # Identifies the type of Kubernetes deployment.\n  deploymentType:\n    # CloudRegionEnum - The target Kubernetes type to deploy to.\n    # Supported Values are: - aws_useast_1 aws_useast_2 aws_uswest_1\n    # az_useast_1 az_uswest_1\n    region: string\n    # DeploymentTypeEnum - The type of the Deployment. Supported Values\n    # are: - Managed FreeSaaS DedicatedSaaS OnPrem\n    type: string\n  # The platform infrastructure provider e.g. azure, aws, gcp, on-prem\n  # etc.\n  devEditionConfig:\n    # Host IPv4 address. Used by KiND based Developer Edition where\n    # ingress paths set to *. Provides qualified, routable URLs to\n    # workbench.\n    hostIpAddress: \"\"\n  # The GAdmin Dashboard Configuration for the Kinetica Cluster.\n  gadmin:\n    # The port that GAdmin will be running on. It runs only on the head\n    # node pod in the cluster. Default: 8080\n    containerPort:\n      # Number of port to expose on the pod's IP address. This must be a\n      # valid port number, 0 &lt; x &lt; 65536.\n      containerPort: 1\n      # What host IP to bind the external port to.\n      hostIP: string\n      # Number of port to expose on the host. If specified, this must be\n      # a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n      # specified, this must match ContainerPort. Most containers do\n      # not need this.\n      hostPort: 1\n      # If specified, this must be an IANA_SVC_NAME and unique within\n      # the pod. Each named port in a pod must have a unique name. Name\n      # for the port that can be referred to by services.\n      name: string\n      # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n      # to \"TCP\".\n      protocol: \"TCP\"\n    # The Ingress Endpoint that GAdmin will be running on.\n    ingressPath:\n      # backend defines the referenced service endpoint to which the\n      # traffic will be forwarded to.\n      backend:\n        # resource is an ObjectRef to another Kubernetes resource in the\n        # namespace of the Ingress object. If resource is specified,\n        # serviceName and servicePort must not be specified.\n        resource:\n          # APIGroup is the group for the resource being referenced. If\n          # APIGroup is not specified, the specified Kind must be in\n          # the core API group. For any other third-party types,\n          # APIGroup is required.\n          apiGroup: string\n          # Kind is the type of resource being referenced\n          kind: KineticaCluster\n          # Name is the name of resource being referenced\n          name: string\n        # serviceName specifies the name of the referenced service.\n        serviceName: string\n        # servicePort Specifies the port of the referenced service.\n        servicePort: \n      # path is matched against the path of an incoming request.\n      # Currently it can contain characters disallowed from the\n      # conventional \"path\" part of a URL as defined by RFC 3986. Paths\n      # must begin with a '/' and must be present when using PathType\n      # with value \"Exact\" or \"Prefix\".\n      path: string\n      # pathType determines the interpretation of the path matching.\n      # PathType can be one of the following values: * Exact: Matches\n      # the URL path exactly. * Prefix: Matches based on a URL path\n      # prefix split by '/'. Matching is done on a path element by\n      # element basis. A path element refers is the list of labels in\n      # the path split by the '/' separator. A request is a match for\n      # path p if every p is an element-wise prefix of p of the request\n      # path. Note that if the last element of the path is a substring\n      # of the last element in request path, it is not a match\n      # (e.g. /foo/bar matches /foo/bar/baz, but does not\n      # match /foo/barbaz). * ImplementationSpecific: Interpretation of\n      # the Path matching is up to the IngressClass. Implementations\n      # can treat this as a separate PathType or treat it identically\n      # to Prefix or Exact path types. Implementations are required to\n      # support all path types. Defaults to ImplementationSpecific.\n      pathType: string\n    # Whether to enable the GAdmin Dashboard on the Cluster. Default:\n    # true\n    isEnabled: true\n  # Gaia - gaia.properties configuration\n  gaia: admin:\n      # AdminLoginOnlyGpudbDown - When GPUdb is down, only allow admin\n      # user to login\n      admin_login_only_gpudb_down: true\n      # Username - We do check for admin username in various places\n      admin_username: \"admin\"\n      # LoginAnimationEnabled - Display any animation in login page\n      login_animation_enabled: true\n      # AdminLoginOnlyGpudbDown - Convenience settings for dev mode\n      login_bypass_enabled: false\n      # RequireStrongPassword - Convenience settings for dev mode\n      require_strong_password: true\n      # SSLTruststorePasswordScript - Display any animation in login\n      # page\n      ssl_truststore_password_script: string\n    # DemoSchema - Schema-related configuration\n    demo_schema: \"demo\" gpudb:\n      # DataFileStringNullValue - Table import/export null value string\n      data_file_string_null_value: \"\\\\N\"\n      gpudb_ext_url: \"http://127.0.0.1:8082/gpudb-0\"\n      # URL - Current instance of gpudb, when running in HA mode change\n      # this to load balancer endpoint\n      gpudb_url: \"http://127.0.0.1:9191\"\n      # LoggingLogFileName - Which file to use when displaying logging\n      # on Cluster page.\n      logging_log_file_name: \"gpudb.log\"\n      # SampleRepoURL - Table import/export null value string\n      sample_repo_url: \"//s3.amazonaws.com/kinetica-ce-data\" hm:\n      gpudb_ext_hm_url: \"http://127.0.0.1:8082/gpudb-host-manager\"\n      gpudb_hm_url: \"http://127.0.0.1:9300\" http:\n      # ClientTimeout - Number of seconds for proxy request timeout\n      http_client_timeout: 3600\n      # ClientTimeoutV2 - Force override of previous default with 0 as\n      # infinite timeout\n      http_client_timeout_v2: 0\n      # TomcatPathKey - Name of folder where Tomcat apps are installed\n      tomcat_path_key: \"tomcat\"\n      # WebappContext - Web App context\n      webapp_context: \"gadmin\"\n    # GAdminIsRemote - True if the gadmin application is running on a\n    # remote machine (not on same node as gpudb). If running on a\n    # remote machine the manage options will be disabled.\n    is_remote: false\n    # KAgentCLIPath - Schema-related configuration\n    kagent_cli_path: \"/opt/gpudb/kagent/bin/kagent\"\n    # KIO - KIO-related configuration\n    kio: kio_log_file_path: \"/opt/gpudb/kitools/kio/logs/gadmin.log\"\n    kio_log_level: \"DEBUG\" kio_log_size_limit: 10485760 kisql:\n      # QueryResultsLimit - KiSQL limit on the number of results in each\n      # query\n      kisql_query_results_limit: 10000\n      # QueryTimezone - KiSQL TimeZoneId setting for queries\n      # (use \"system\" for local system time)\n      kisql_query_timezone: \"GMT\" license:\n      # Status - Stub for license manager\n      status: \"ok\"\n      # Type - Stub for license manager\n      type: \"unlimited\"\n    # MaxConcurrentUserSessions - Session management configuration\n    max_concurrent_user_sessions: 0\n    # PublicSchema - Schema-related configuration\n    public_schema: \"ki_home\"\n    # RevealDBInfoFile - Path to file containing Reveal DB location\n    reveal_db_info_file: \"/opt/gpudb/connectors/reveal/var/REVEAL_DB_DIR\"\n    # RootSchema - Schema-related configuration\n    root_schema: \"root\" stats:\n      # GraphanaURL -\n      graphana_url: \"http://127.0.0.1:3000\"\n      # GraphiteURL\n      graphite_url: \"http://127.0.0.1:8181\"\n      # StatsGrafanaURL - Port used to host the Grafana user interface\n      # and embeddable metric dashboards in GAdmin. Note: If this value\n      # is defaulted then it will be replaced by the name of the Stats\n      # service if it is deployed &amp; Grafana is enabled e.g.\n      # cluster-1234.gpudb.svc.cluster.local\n      stats_grafana_url: \"http://127.0.0.1:9091\"\n  # https://github.com/kubernetes-sigs/controller-tools/issues/622 if we\n  # want to set usePools as false, need to set defaults GPUDBCluster is\n  # an instance of a Kinetica DB Cluster i.e. it's StatefulSet,\n  # Service, Ingress, ConfigMap etc.\n  gpudbCluster:\n    # Affinity - is a group of affinity scheduling rules.\n    affinity:\n      # Describes node affinity scheduling rules for the pod.\n      nodeAffinity:\n        # The scheduler will prefer to schedule pods to nodes that\n        # satisfy the affinity expressions specified by this field, but\n        # it may choose a node that violates one or more of the\n        # expressions. The node that is most preferred is the one with\n        # the greatest sum of weights, i.e. for each node that meets\n        # all of the scheduling requirements (resource request,\n        # requiredDuringScheduling affinity expressions, etc.), compute\n        # a sum by iterating through the elements of this field and\n        # adding \"weight\" to the sum if the node matches the\n        # corresponding matchExpressions; the node(s) with the highest\n        # sum are the most preferred.\n        preferredDuringSchedulingIgnoredDuringExecution:\n        - preference:\n            # A list of node selector requirements by node's labels.\n            matchExpressions:\n            - key: string\n              # Represents a key's relationship to a set of values.\n              # Valid operators are In, NotIn, Exists, DoesNotExist.\n              # Gt, and Lt.\n              operator: string\n              # An array of string values. If the operator is In or\n              # NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. If the operator is Gt or Lt, the values\n              # array must have a single element, which will be\n              # interpreted as an integer. This array is replaced\n              # during a strategic merge patch.\n              values: [\"string\"]\n            # A list of node selector requirements by node's fields.\n            matchFields:\n            - key: string\n              # Represents a key's relationship to a set of values.\n              # Valid operators are In, NotIn, Exists, DoesNotExist.\n              # Gt, and Lt.\n              operator: string\n              # An array of string values. If the operator is In or\n              # NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. If the operator is Gt or Lt, the values\n              # array must have a single element, which will be\n              # interpreted as an integer. This array is replaced\n              # during a strategic merge patch.\n              values: [\"string\"]\n          # Weight associated with matching the corresponding\n          # nodeSelectorTerm, in the range 1-100.\n          weight: 1\n        # If the affinity requirements specified by this field are not\n        # met at scheduling time, the pod will not be scheduled onto\n        # the node. If the affinity requirements specified by this\n        # field cease to be met at some point during pod execution\n        # (e.g. due to an update), the system may or may not try to\n        # eventually evict the pod from its node.\n        requiredDuringSchedulingIgnoredDuringExecution:\n          # Required. A list of node selector terms. The terms are\n          # ORed.\n          nodeSelectorTerms:\n          - matchExpressions:\n            - key: string\n              # Represents a key's relationship to a set of values.\n              # Valid operators are In, NotIn, Exists, DoesNotExist.\n              # Gt, and Lt.\n              operator: string\n              # An array of string values. If the operator is In or\n              # NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. If the operator is Gt or Lt, the values\n              # array must have a single element, which will be\n              # interpreted as an integer. This array is replaced\n              # during a strategic merge patch.\n              values: [\"string\"]\n            # A list of node selector requirements by node's fields.\n            matchFields:\n            - key: string\n              # Represents a key's relationship to a set of values.\n              # Valid operators are In, NotIn, Exists, DoesNotExist.\n              # Gt, and Lt.\n              operator: string\n              # An array of string values. If the operator is In or\n              # NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. If the operator is Gt or Lt, the values\n              # array must have a single element, which will be\n              # interpreted as an integer. This array is replaced\n              # during a strategic merge patch.\n              values: [\"string\"]\n      # Describes pod affinity scheduling rules (e.g. co-locate this pod\n      # in the same node, zone, etc. as some other pod(s)).\n      podAffinity:\n        # The scheduler will prefer to schedule pods to nodes that\n        # satisfy the affinity expressions specified by this field, but\n        # it may choose a node that violates one or more of the\n        # expressions. The node that is most preferred is the one with\n        # the greatest sum of weights, i.e. for each node that meets\n        # all of the scheduling requirements (resource request,\n        # requiredDuringScheduling affinity expressions, etc.), compute\n        # a sum by iterating through the elements of this field and\n        # adding \"weight\" to the sum if the node has pods which matches\n        # the corresponding podAffinityTerm; the node(s) with the\n        # highest sum are the most preferred.\n        preferredDuringSchedulingIgnoredDuringExecution:\n        - podAffinityTerm:\n            # A label query over a set of resources, in this case pods.\n            labelSelector:\n              # matchExpressions is a list of label selector\n              # requirements. The requirements are ANDed.\n              matchExpressions:\n              - key: string\n                # operator represents a key's relationship to a set of\n                # values. Valid operators are In, NotIn, Exists and\n                # DoesNotExist.\n                operator: string\n                # values is an array of string values. If the operator\n                # is In or NotIn, the values array must be non-empty.\n                # If the operator is Exists or DoesNotExist, the values\n                # array must be empty. This array is replaced during a\n                # strategic merge patch.\n                values: [\"string\"]\n              # matchLabels is a map of {key,value} pairs. A single\n              # {key,value} in the matchLabels map is equivalent to an\n              # element of matchExpressions, whose key field is \"key\",\n              # the operator is \"In\", and the values array contains\n              # only \"value\". The requirements are ANDed.\n              matchLabels: {}\n            # A label query over the set of namespaces that the term\n            # applies to. The term is applied to the union of the\n            # namespaces selected by this field and the ones listed in\n            # the namespaces field. null selector and null or empty\n            # namespaces list means \"this pod's namespace\". An empty\n            # selector ({}) matches all namespaces.\n            namespaceSelector:\n              # matchExpressions is a list of label selector\n              # requirements. The requirements are ANDed.\n              matchExpressions:\n              - key: string\n                # operator represents a key's relationship to a set of\n                # values. Valid operators are In, NotIn, Exists and\n                # DoesNotExist.\n                operator: string\n                # values is an array of string values. If the operator\n                # is In or NotIn, the values array must be non-empty.\n                # If the operator is Exists or DoesNotExist, the values\n                # array must be empty. This array is replaced during a\n                # strategic merge patch.\n                values: [\"string\"]\n              # matchLabels is a map of {key,value} pairs. A single\n              # {key,value} in the matchLabels map is equivalent to an\n              # element of matchExpressions, whose key field is \"key\",\n              # the operator is \"In\", and the values array contains\n              # only \"value\". The requirements are ANDed.\n              matchLabels: {}\n            # namespaces specifies a static list of namespace names that\n            # the term applies to. The term is applied to the union of\n            # the namespaces listed in this field and the ones selected\n            # by namespaceSelector. null or empty namespaces list and\n            # null namespaceSelector means \"this pod's namespace\".\n            namespaces: [\"string\"]\n            # This pod should be co-located (affinity) or not\n            # co-located (anti-affinity) with the pods matching the\n            # labelSelector in the specified namespaces, where\n            # co-located is defined as running on a node whose value of\n            # the label with key topologyKey matches that of any node\n            # on which any of the selected pods is running. Empty\n            # topologyKey is not allowed.\n            topologyKey: string\n          # weight associated with matching the corresponding\n          # podAffinityTerm, in the range 1-100.\n          weight: 1\n        # If the affinity requirements specified by this field are not\n        # met at scheduling time, the pod will not be scheduled onto\n        # the node. If the affinity requirements specified by this\n        # field cease to be met at some point during pod execution\n        # (e.g. due to a pod label update), the system may or may not\n        # try to eventually evict the pod from its node. When there are\n        # multiple elements, the lists of nodes corresponding to each\n        # podAffinityTerm are intersected, i.e. all terms must be\n        # satisfied.\n        requiredDuringSchedulingIgnoredDuringExecution:\n        - labelSelector:\n            # matchExpressions is a list of label selector requirements.\n            # The requirements are ANDed.\n            matchExpressions:\n            - key: string\n              # operator represents a key's relationship to a set of\n              # values. Valid operators are In, NotIn, Exists and\n              # DoesNotExist.\n              operator: string\n              # values is an array of string values. If the operator is\n              # In or NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. This array is replaced during a\n              # strategic merge patch.\n              values: [\"string\"]\n            # matchLabels is a map of {key,value} pairs. A single\n            # {key,value} in the matchLabels map is equivalent to an\n            # element of matchExpressions, whose key field is \"key\",\n            # the operator is \"In\", and the values array contains\n            # only \"value\". The requirements are ANDed.\n            matchLabels: {}\n          # A label query over the set of namespaces that the term\n          # applies to. The term is applied to the union of the\n          # namespaces selected by this field and the ones listed in\n          # the namespaces field. null selector and null or empty\n          # namespaces list means \"this pod's namespace\". An empty\n          # selector ({}) matches all namespaces.\n          namespaceSelector:\n            # matchExpressions is a list of label selector requirements.\n            # The requirements are ANDed.\n            matchExpressions:\n            - key: string\n              # operator represents a key's relationship to a set of\n              # values. Valid operators are In, NotIn, Exists and\n              # DoesNotExist.\n              operator: string\n              # values is an array of string values. If the operator is\n              # In or NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. This array is replaced during a\n              # strategic merge patch.\n              values: [\"string\"]\n            # matchLabels is a map of {key,value} pairs. A single\n            # {key,value} in the matchLabels map is equivalent to an\n            # element of matchExpressions, whose key field is \"key\",\n            # the operator is \"In\", and the values array contains\n            # only \"value\". The requirements are ANDed.\n            matchLabels: {}\n          # namespaces specifies a static list of namespace names that\n          # the term applies to. The term is applied to the union of\n          # the namespaces listed in this field and the ones selected\n          # by namespaceSelector. null or empty namespaces list and\n          # null namespaceSelector means \"this pod's namespace\".\n          namespaces: [\"string\"]\n          # This pod should be co-located (affinity) or not co-located\n          # (anti-affinity) with the pods matching the labelSelector in\n          # the specified namespaces, where co-located is defined as\n          # running on a node whose value of the label with key\n          # topologyKey matches that of any node on which any of the\n          # selected pods is running. Empty topologyKey is not\n          # allowed.\n          topologyKey: string\n      # Describes pod anti-affinity scheduling rules (e.g. avoid putting\n      # this pod in the same node, zone, etc. as some other pod(s)).\n      podAntiAffinity:\n        # The scheduler will prefer to schedule pods to nodes that\n        # satisfy the anti-affinity expressions specified by this\n        # field, but it may choose a node that violates one or more of\n        # the expressions. The node that is most preferred is the one\n        # with the greatest sum of weights, i.e. for each node that\n        # meets all of the scheduling requirements (resource request,\n        # requiredDuringScheduling anti-affinity expressions, etc.),\n        # compute a sum by iterating through the elements of this field\n        # and adding \"weight\" to the sum if the node has pods which\n        # matches the corresponding podAffinityTerm; the node(s) with\n        # the highest sum are the most preferred.\n        preferredDuringSchedulingIgnoredDuringExecution:\n        - podAffinityTerm:\n            # A label query over a set of resources, in this case pods.\n            labelSelector:\n              # matchExpressions is a list of label selector\n              # requirements. The requirements are ANDed.\n              matchExpressions:\n              - key: string\n                # operator represents a key's relationship to a set of\n                # values. Valid operators are In, NotIn, Exists and\n                # DoesNotExist.\n                operator: string\n                # values is an array of string values. If the operator\n                # is In or NotIn, the values array must be non-empty.\n                # If the operator is Exists or DoesNotExist, the values\n                # array must be empty. This array is replaced during a\n                # strategic merge patch.\n                values: [\"string\"]\n              # matchLabels is a map of {key,value} pairs. A single\n              # {key,value} in the matchLabels map is equivalent to an\n              # element of matchExpressions, whose key field is \"key\",\n              # the operator is \"In\", and the values array contains\n              # only \"value\". The requirements are ANDed.\n              matchLabels: {}\n            # A label query over the set of namespaces that the term\n            # applies to. The term is applied to the union of the\n            # namespaces selected by this field and the ones listed in\n            # the namespaces field. null selector and null or empty\n            # namespaces list means \"this pod's namespace\". An empty\n            # selector ({}) matches all namespaces.\n            namespaceSelector:\n              # matchExpressions is a list of label selector\n              # requirements. The requirements are ANDed.\n              matchExpressions:\n              - key: string\n                # operator represents a key's relationship to a set of\n                # values. Valid operators are In, NotIn, Exists and\n                # DoesNotExist.\n                operator: string\n                # values is an array of string values. If the operator\n                # is In or NotIn, the values array must be non-empty.\n                # If the operator is Exists or DoesNotExist, the values\n                # array must be empty. This array is replaced during a\n                # strategic merge patch.\n                values: [\"string\"]\n              # matchLabels is a map of {key,value} pairs. A single\n              # {key,value} in the matchLabels map is equivalent to an\n              # element of matchExpressions, whose key field is \"key\",\n              # the operator is \"In\", and the values array contains\n              # only \"value\". The requirements are ANDed.\n              matchLabels: {}\n            # namespaces specifies a static list of namespace names that\n            # the term applies to. The term is applied to the union of\n            # the namespaces listed in this field and the ones selected\n            # by namespaceSelector. null or empty namespaces list and\n            # null namespaceSelector means \"this pod's namespace\".\n            namespaces: [\"string\"]\n            # This pod should be co-located (affinity) or not\n            # co-located (anti-affinity) with the pods matching the\n            # labelSelector in the specified namespaces, where\n            # co-located is defined as running on a node whose value of\n            # the label with key topologyKey matches that of any node\n            # on which any of the selected pods is running. Empty\n            # topologyKey is not allowed.\n            topologyKey: string\n          # weight associated with matching the corresponding\n          # podAffinityTerm, in the range 1-100.\n          weight: 1\n        # If the anti-affinity requirements specified by this field are\n        # not met at scheduling time, the pod will not be scheduled\n        # onto the node. If the anti-affinity requirements specified by\n        # this field cease to be met at some point during pod\n        # execution (e.g. due to a pod label update), the system may or\n        # may not try to eventually evict the pod from its node. When\n        # there are multiple elements, the lists of nodes corresponding\n        # to each podAffinityTerm are intersected, i.e. all terms must\n        # be satisfied.\n        requiredDuringSchedulingIgnoredDuringExecution:\n        - labelSelector:\n            # matchExpressions is a list of label selector requirements.\n            # The requirements are ANDed.\n            matchExpressions:\n            - key: string\n              # operator represents a key's relationship to a set of\n              # values. Valid operators are In, NotIn, Exists and\n              # DoesNotExist.\n              operator: string\n              # values is an array of string values. If the operator is\n              # In or NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. This array is replaced during a\n              # strategic merge patch.\n              values: [\"string\"]\n            # matchLabels is a map of {key,value} pairs. A single\n            # {key,value} in the matchLabels map is equivalent to an\n            # element of matchExpressions, whose key field is \"key\",\n            # the operator is \"In\", and the values array contains\n            # only \"value\". The requirements are ANDed.\n            matchLabels: {}\n          # A label query over the set of namespaces that the term\n          # applies to. The term is applied to the union of the\n          # namespaces selected by this field and the ones listed in\n          # the namespaces field. null selector and null or empty\n          # namespaces list means \"this pod's namespace\". An empty\n          # selector ({}) matches all namespaces.\n          namespaceSelector:\n            # matchExpressions is a list of label selector requirements.\n            # The requirements are ANDed.\n            matchExpressions:\n            - key: string\n              # operator represents a key's relationship to a set of\n              # values. Valid operators are In, NotIn, Exists and\n              # DoesNotExist.\n              operator: string\n              # values is an array of string values. If the operator is\n              # In or NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. This array is replaced during a\n              # strategic merge patch.\n              values: [\"string\"]\n            # matchLabels is a map of {key,value} pairs. A single\n            # {key,value} in the matchLabels map is equivalent to an\n            # element of matchExpressions, whose key field is \"key\",\n            # the operator is \"In\", and the values array contains\n            # only \"value\". The requirements are ANDed.\n            matchLabels: {}\n          # namespaces specifies a static list of namespace names that\n          # the term applies to. The term is applied to the union of\n          # the namespaces listed in this field and the ones selected\n          # by namespaceSelector. null or empty namespaces list and\n          # null namespaceSelector means \"this pod's namespace\".\n          namespaces: [\"string\"]\n          # This pod should be co-located (affinity) or not co-located\n          # (anti-affinity) with the pods matching the labelSelector in\n          # the specified namespaces, where co-located is defined as\n          # running on a node whose value of the label with key\n          # topologyKey matches that of any node on which any of the\n          # selected pods is running. Empty topologyKey is not\n          # allowed.\n          topologyKey: string\n    # Annotations - Annotations labels to be applied to the Statefulset\n    # DB pods.\n    annotations: {}\n    # The name of the cluster to form.\n    clusterName: string\n    # The Ingress Endpoint that GAdmin will be running on.\n    clusterSize:\n      # ClusterSizeEnum - T-Shirt size of the Kinetica DB Cluster i.e. a\n      # representation of the number of nodes in a simple to understand\n      # T-Short size scheme. This indicates the size of the cluster\n      # i.e. the number of nodes. It does not identify the size of the\n      # cloud provider nodes. For node size see ClusterTypeEnum.\n      # Supported Values are: - XS S M L XL XXL XXXL\n      tshirtSize: string\n      # ClusterTypeEnum - An Enum of the node types of a KineticaCluster\n      # e.g. CPU, GPU along with the Cloud Provider node size e.g. size\n      # of the VM.\n      tshirtType: string\n    # Config Kinetica DB Configuration Object\n    config: ai: apiKey: string\n        # Provider - AI API provider type. The default is \"sqlgpt\"\n        apiProvider: \"sqlgpt\" apiUrl: string\n      # AlertManagerConfig\n      alertManager:\n        # AlertManager IP address (run on head node) default port\n        # is \"2003\"\n        ipAddress: \"${gaia.host0.address}\" port: 2003\n      # AlertConfig\n      alerts: alertDiskAbsolute: [integer]\n        # Trigger an alert if available disk space on any given node\n        # falls to or below a certain threshold, either absolute\n        # (number of bytes) or percentage of total disk space. For\n        # multiple thresholds, use a comma-delimited list of values.\n        alertDiskPercentage: [1,5,10,20]\n        # Trigger generic error message alerts, in cases of various\n        # significant runtime errors.\n        alertErrorMessages: true\n        # Executable to run when an alert condition occurs. This\n        # executable will only be run on **rank0** and does not need to\n        # be present on other nodes.\n        alertExe: \"\"\n        # Trigger an alert whenever the status of a host or rank\n        # changes.\n        alertHostStatus: true\n        # Optionally, filter host alerts for a comma-delimited list of\n        # statuses. If a filter is empty, every host status change will\n        # trigger an alert.\n        alertHostStatusFilter: \"fatal_init_error\"\n        # The maximum number of triggered alerts guaranteed to be stored\n        # at any given time. When this number of alerts is exceeded,\n        # older alerts may be discarded to stay within the limit.\n        alertMaxStoredAlerts: 100 alertMemoryAbsolute: [integer]\n        # Trigger an alert if available memory on any given node falls\n        # to or below a certain threshold, either absolute (number of\n        # bytes) or percentage of total memory. For multiple\n        # thresholds, use a comma-delimited list of values.\n        alertMemoryPercentage: [1,5,10,20]\n        # Trigger an alert if a CUDA error occurs on a rank.\n        alertRankCudaError: true\n        # Trigger alerts when the fallback allocator is employed; e.g.,\n        # host memory is allocated because GPU allocation fails. NOTE:\n        # To prevent a flooding of alerts, if a fallback allocator is\n        # triggered in bursts, not every use will generate an alert.\n        alertRankFallbackAllocator: true\n        # Trigger an alert whenever the status of a rank changes.\n        alertRankStatus: true\n        # Optionally, filter rank alerts for a comma-delimited list of\n        # statuses. If a filter is empty, every rank status change will\n        # trigger an alert.\n        alertRankStatusFilter:\n        [\"fatal_init_error\",\"not_responding\",\"terminated\"]\n        # Enable the alerting system.\n        enableAlerts: true\n        # Directory where the trace event and summary files are stored.\n        # Must be a fully qualified path with sufficient free space for\n        # required volume of data.\n        traceDirectory: \"/tmp\"\n        # The maximum number of trace events to be collected\n        traceEventBufferSize: 1000000\n      # Audit - This section controls the request auditor, which will\n      # audit all requests received by the server in full or in part\n      # based on the settings.\n      audit:\n        # Controls whether the body of each request is audited (in JSON\n        # format). If 'enable_audit' is \"false\" this setting has no\n        # effect. NOTE: For requests that insert data records, this\n        # setting does not control the auditing of the records being\n        # inserted, only the rest of the request body; see 'audit_data'\n        # below to control this. audit_body = false\n        body: false\n        # Controls whether records being inserted are audited (in JSON\n        # format) for requests that insert data records. If\n        # either 'enable_audit' or 'audit_body' is \"false\", this\n        # setting has no effect. NOTE: Enabling this setting during\n        # bulk ingestion of data will rapidly produce very large audit\n        # logs and may cause disk space exhaustion; use with caution.\n        # audit_data = false\n        data: false\n        # Controls whether request auditing is enabled. If set\n        # to \"true\", the following information is audited for every\n        # request: Job ID, URI, User, and Client Address. The settings\n        # below control whether additional information about each\n        # request is also audited. If set to \"false\", all auditing is\n        # disabled. enable_audit = false\n        enable: false\n        # Controls whether HTTP headers are audited for each request.\n        # If 'enable_audit' is \"false\" this setting has no effect.\n        # audit_headers = false\n        headers: true\n        # Controls whether the above audit settings can be altered at\n        # runtime via the /alter/system/properties endpoint. In a\n        # secure environment where auditing is required at all times,\n        # this should be set to \"true\" to lock the settings to what is\n        # set in this file. lock_audit = false\n        lock: false\n        # Controls whether response information is audited for each\n        # request. If 'enable_audit' is \"false\" this setting has no\n        # effect. audit_response = false\n        response: false\n      # EventConfig\n      events:\n        # Run a statistics server to collect information about Kinetica\n        # and the machines it runs on.\n        internal: true\n        # Statistics server IP address (run on head node) default port\n        # is \"2003\"\n        ipAddress: \"${gaia.host0.address}\" port: 2003\n        # Statistics server namespace - should be a machine identifier\n        statsServerNamespace: \"gpudb\"\n      # ExternalFilesConfig\n      externalFiles:\n        # Defines the directory from which external files can be loaded\n        directory: \"/opt/gpudb/persist\"\n        # # Parquet files compression type egress_parquet_compression =\n        #   snappy\n        egressParquetCompression: \"snappy\"\n        # Max file size (in MB) to allow saving to a single file. May be\n        # overridden by target limitations. egress_single_file_max_size\n        # = 100\n        egressSingleFileMaxSize: \"100\"\n        # Maximum number of simultaneous threads allocated to a given\n        # external file read request, on each rank. Note that thread\n        # allocation may also be limited by resource group limits, the\n        # subtask_concurrency_limit setting, or system load.\n        readerNumTasks: \"-1\"\n      # GeneralConfig - the root of the gpudb.conf configuration in the\n      # CRD\n      general:\n        # Timeout (in seconds) to wait for a rank to start during a\n        # cluster event (ex: failover) event is considered failed.\n        clusterEventTimeoutStartupRank: \"300\"\n        # Enable (if \"true\") multiple kernels to run concurrently on the\n        # same GPU\n        concurrentKernelExecution: true\n        # Time-to-live in minutes of non-protected tables before they\n        # are automatically deleted from the database.\n        defaultTTL: \"20\"\n        # Disallow the /clear/table request to clear all tables.\n        disableClearAll: true\n        # Enable overlapped-equi-join filters\n        enableOverlappedEquiJoin: true\n        # Enable predicate-equi-join filter plan type\n        enablePredicateEquiJoin: true\n        # If \"true\" then all filter execution will be host-only\n        # (i.e. CPU). This can be useful for high-concurrency\n        # situations and when PCIe bandwidth is a limiting factor.\n        forceHostFilterExecution: false\n        # Maximum number of kernels that can be running at the same time\n        # on a given GPU. Set to \"0\" for no limit. Only takes effect\n        # if 'concurrent_kernel_execution' is \"true\"\n        maxConcurrentKernels: \"0\"\n        # Maximum number of records that data retrieval requests such\n        # as /get/records and /aggregate/groupby will return per\n        # request.\n        maxGetRecordsSize: 20000\n        # Set an optional executable command that will be run once when\n        # Kinetica is ready for client requests. This can be used to\n        # perform any initialization logic that needs to be run before\n        # clients connect. It will be run as the \"gpudb\" user, so you\n        # must ensure that any required permissions are set on the file\n        # to allow it to be executed.  If the command cannot be\n        # executed or returns a non-zero error code, then Kinetica will\n        # be stopped.  Output from the startup script will be logged\n        # to \"/opt/gpudb/core/logs/gpudb-on-start.log\" (and its dated\n        # relatives).  The \"gpudb_env.sh\" script is run directly before\n        # the command, so the path will be set to include the supplied\n        # Python runtime. Example: on_startup_script\n        # = /home/gpudb/on-start.sh param1 param2 ...\n        onStartupScript: \"\"\n        # Size in bytes of the pinned memory pool per-rank process to\n        # speed up copying data to the GPU.  Set to \"0\" to disable.\n        pinnedMemoryPoolSize: 2000000000\n        # Tables and collections with these names will not be deleted\n        # (comma separated).\n        protectedSets: \"MASTER,_MASTER,_DATASOURCE\"\n        # Timeout (in minutes) for filter-type requests\n        requestTimeout: \"20\"\n        # Timeout (in seconds) to wait for a rank to exit gracefully\n        # before it is force-killed. Machines with slow disk drives may\n        # require longer times and data may be lost if a drive is not\n        # responsive.\n        timeoutShutdownRank: \"300\"\n        # Timeout (in seconds) to wait for each database subsystem to\n        # exit gracefully before it is force-killed.\n        timeoutShutdownSubsystem: \"20\"\n        # Timeout (in seconds) to wait for each database subsystem to\n        # startup. Subsystems include the Query Planner, Graph,\n        # Stats, &amp; HTTP servers, as well as external text-search\n        # ranks.\n        timeoutStartupSubsystem: \"60\"\n      # GraphConfig\n      graph:\n        # Enable the graph server\n        enable: false\n        # List of GPU devices to be used by graph server The server\n        # would ideally be run on a different node with dedicated GPU\n        # (s)\n        gpuList: \"\"\n        # Specify where the graph server should be run, defaults to head\n        # node\n        ipAddress: \"${gaia.rank0_ip_address}\"\n        # Maximum memory that can be used by the graph server, set\n        # to \"0\" to disable memory restriction\n        maxMemory: 0\n        # Port used for responses from the graph server to the database\n        # server\n        pullPort: 8100\n        # Port used for requests from the database server to the graph\n        # server\n        pushPort: 8099\n        # Number of seconds the graph client will wait for a response\n        # from the graph server\n        timeout: 1200\n      # HardwareConfig\n      hardware:\n        # Rank0HardwareConfig\n        rank0:\n          # Specify the GPU to use for all calculations on the HTTP\n          # server node, **rank0**. NOTE: The **rank0** GPU may be\n          # shared with another rank.\n          gpu: 0\n          # Set the head HTTP **rank0** numa node(s). If left empty,\n          # there will be no thread affinity or preferred memory node.\n          # The node list may be either a single node number or a\n          # range; e.g., \"1-5,7,10\". If there will be many simultaneous\n          # users, specify as many nodes as possible that won't overlap\n          # the **rank1** to **rankN** worker numa nodes that the GPUs\n          # are on. If there will be few simultaneous users and WMS\n          # speed is important, choose the numa node the 'rank0.gpu' is\n          # on.\n          numaNode: ranks:\n        - baseNumaNode: string\n          # Set each worker rank's preferred data numa node for CPU\n          # affinity and memory allocation.\n          # The 'rank&lt;#&gt;.data_numa_node' is the node or nodes that data\n          # intensive threads will run in and should be set to the same\n          # numa node that the GPU specified by the\n          # corresponding 'rank&lt;#&gt;.taskcalc_gpu' is on for best\n          # performance. If the 'rank&lt;#&gt;.taskcalc_gpu' is specified\n          # the 'rank&lt;#&gt;.data_numa_node' will be automatically set to\n          # the node the GPU is attached to, otherwise there will be no\n          # CPU thread affinity or preferred node for memory allocation\n          # if not specified or left empty. The node list may be a\n          # single node number or a range; e.g., \"1-5,7,10\".\n          dataNumaNode: string\n          # Set the GPU device for each worker rank to use. If no GPUs\n          # are specified, each rank will round-robin the available\n          # GPUs per host system. Add 'rank&lt;#&gt;.taskcalc_gpu' as needed\n          # for the worker ranks, where *#* ranges from \"1\" to the\n          # highest *rank #* among the 'rank&lt;#&gt;.host' parameters\n          # Example setting the GPUs to use for ranks 1 and 2: \n          #  #   rank1.taskcalc_gpu = 0 #   rank2.taskcalc_gpu = 1\n          taskCalcGPU: kafka:\n        # Maximum number of records to be ingested in a single batch\n        # kafka.batch_size = 1000\n        batchSize: 1000\n        # Maximum time (milliseconds) for each poll to get records from\n        # kafka kafka.poll_timeout = 0\n        pollTimeout: 1\n        # Maximum wait time (seconds) to buffer records received from\n        # kafka before ingestion kafka.wait_time = 30\n        waitTime: 30\n      # KifsConfig\n      kifs:\n        # KIFs user data size limit\n        dataLimit: \"4Gi\"\n        # sudo usermod -a -G gpudb_proc &lt;user&gt;\n        enable: false\n        # Parent directory of the mount point for the KiFS file system.\n        # Must be a fully qualified path. The actual mount point will\n        # be a subdirectory *mount* below this directory. Note that\n        # this folder must have read, write and execute permissions for\n        # the \"gpudb\" user and the \"gpudb_proc\" group, and it cannot be\n        # a path on an NFS.\n        mountPoint: \"/gpudb/kifs\" useManagedCredentials: true\n      # Etcd *ETCDConfig `json:\"etcd,omitempty\"` HA        HAConfig\n      # `json:\"ha,omitempty\"`\n      ml:\n        # Enable the ML server.\n        enable: false\n      # NetworkConfig\n      network:\n        # HAAddress - An optional address to allow inter-cluster\n        # communication with HA when 'address' is not routable between\n        # clusters.\n        HAAddress: string\n        # CompressNetworkData - Enables compression of inter-node\n        # network data transfers.\n        compressNetworkData: false\n        # EnableHTTPDProxy - Start an HTTP server as a proxy to handle\n        # LDAP and/or Kerberos authentication. Each host will run an\n        # HTTP server and access to each rank is available through\n        # http://host:8082/gpudb-1, where port \"8082\" is defined\n        # by 'httpd_proxy_port'. NOTE: HTTP external endpoints are not\n        # affected by the 'use_https' parameter above. If you wish to\n        # enable HTTPS, you must edit\n        # the \"/opt/gpudb/httpd/conf/httpd.conf\" and setup HTTPS as per\n        # the Apache httpd documentation at\n        # https://httpd.apache.org/docs/2.2/\n        enableHTTPDProxy: true\n        # EnableWorkerHTTPServers - Enable worker HTTP servers; each\n        # process runs its own server for multi-head ingest.\n        enableWorkerHTTPServers: true\n        # GlobalManagerLocalPubPort - ?\n        globalManagerLocalPubPort: 5554\n        # GlobalManagerPortOne - Internal communication ports -  Host\n        # manager status notification channel\n        globalManagerPortOne: 5552\n        # GlobalManagerPubPort - Host manager synchronization message\n        # publishing channel port\n        globalManagerPubPort: 5553\n        # HeadIPAddress - Head HTTP server IP address. Set to the\n        # publicly accessible IP address of the first\n        # process, **rank0**.\n        headIPAddress: \"172.20.0.10\"\n        # HeadPort - Head HTTP server port to use\n        # for 'head_ip_address'.\n        headPort: 9191\n        # HostManagerHTTPPort - HTTP port for web portal of the host\n        # manager\n        hostManagerHTTPPort: 9300\n        # HTTPAllowOrigin - Value to return via\n        # Access-Control-Allow-Origin HTTP header (for Cross-Origin\n        # Resource Sharing). Set to empty to not return the header and\n        # disallow CORS.\n        httpAllowOrigin: \"*\"\n        # HTTPKeepAlive - Keep HTTP connections alive between requests\n        httpKeepAlive: false\n        # HTTPDProxyPort - TCP port that the httpd auth proxy server\n        # will listen on if 'enable_httpd_proxy' is \"true\".\n        httpdProxyPort: 8082\n        # HTTPDProxyUseHTTPS - Set to \"true\" if the httpd auth proxy\n        # server is configured to use HTTPS.\n        httpdProxyUseHTTPS: false\n        # HTTPSCertFile - File containing the SSL certificate  e.g.\n        # cert.pem If required, a self-signed certificate(expires after\n        # 10 years) can be generated via the command: e.g. cert.pem\n        # openssl req -newkey rsa:2048 -new -nodes -x509 \\ -days\n        # 3650 -keyout key.pem -out cert.pem\n        httpsCertFile: \"\"\n        # HTTPSKeyFile - File containing the SSL private Key e.g.\n        # key.pem If required, a self-signed certificate (expires after\n        # 10 years) can be generated via the command: openssl\n        # req -newkey rsa:2048 -new -nodes -x509 \\ -days 3650 -keyout\n        # key.pem -out cert.pem\n        httpsKeyFile: \"\"\n        # Rank0IPAddress - Internal use IP address of the head HTTP\n        # server, **rank0**. Set to either a second internal network\n        # accessible by all ranks or to '${gaia.head_ip_address}'.\n        rank0IPAddress: \"${gaia.rank0.host}\" ranks:\n        - communicatorPort:\n            # Number of port to expose on the pod's IP address. This\n            # must be a valid port number, 0 &lt; x &lt; 65536.\n            containerPort: 1\n            # What host IP to bind the external port to.\n            hostIP: string\n            # Number of port to expose on the host. If specified, this\n            # must be a valid port number, 0 &lt; x &lt; 65536. If\n            # HostNetwork is specified, this must match ContainerPort.\n            # Most containers do not need this.\n            hostPort: 1\n            # If specified, this must be an IANA_SVC_NAME and unique\n            # within the pod. Each named port in a pod must have a\n            # unique name. Name for the port that can be referred to by\n            # services.\n            name: string\n            # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n            # to \"TCP\".\n            protocol: \"TCP\"\n          # Specify the hosts to run each rank worker process in the\n          # cluster. For a single machine system, use \"127.0.0.1\", but\n          # if using two or more machines, a hostname or IP address\n          # must be specified for each rank that is accessible from the\n          # other ranks. See also 'head_ip_address'\n          # and 'rank0_ip_address'.\n          host: string\n          # Optionally, specify the worker HTTP server ports. The\n          # default is to use ('head_port' + *rank #*) for each worker\n          # process where rank number is from \"1\" to number of ranks\n          # in 'rank&lt;#&gt;.host' below.\n          httpServerPort:\n            # Number of port to expose on the pod's IP address. This\n            # must be a valid port number, 0 &lt; x &lt; 65536.\n            containerPort: 1\n            # What host IP to bind the external port to.\n            hostIP: string\n            # Number of port to expose on the host. If specified, this\n            # must be a valid port number, 0 &lt; x &lt; 65536. If\n            # HostNetwork is specified, this must match ContainerPort.\n            # Most containers do not need this.\n            hostPort: 1\n            # If specified, this must be an IANA_SVC_NAME and unique\n            # within the pod. Each named port in a pod must have a\n            # unique name. Name for the port that can be referred to by\n            # services.\n            name: string\n            # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n            # to \"TCP\".\n            protocol: \"TCP\"\n          # This is the Kubernetes pod IP Address of the current rank\n          # which we need to populate in the operator. NOTE: Internal\n          # Attribute\n          podIP: string\n          # Optionally, specify a public URL for each worker HTTP server\n          # that clients should use to connect for multi-head\n          # operations. NOTE: If specified for any ranks, a public URL\n          # must be specified for all ranks.\n          publicURL: \"https://:8082/gpudb-{{.Rank}}\"\n          # Define the rank number of this rank.\n          rank: 1\n        # SetMonitorPort - Set monitor ZMQ publisher server port (-1 to\n        # disable), uses the 'head_ip_address' interface.\n        setMonitorPort: 9002\n        # SetMonitorProxyPort - Set monitor ZMQ publisher internal proxy\n        # server port (\"-1\" to disable), uses the 'head_ip_address'\n        # interface. IMPORTANT:  Disabling this port effectively\n        # prevents worker nodes from publishing set monitor\n        # notifications when multi-head ingest is enabled\n        # (see 'enable_worker_http_servers').\n        setMonitorProxyPort: 9003\n        # SetMonitorQueueSize - Set monitor queue size\n        setMonitorQueueSize: 1000\n        # TriggerPort - Trigger ZMQ publisher server port (\"-1\" to\n        # disable), uses the 'head_ip_address' interface.\n        triggerPort: -1\n        # UseHTTPS - Set to \"true\" to use HTTPS; if \"true\"\n        # then 'https_key_file' and 'https_cert_file' must be provided\n        useHttps: false\n      # PersistenceConfig\n      persistence:\n        # Removed in 7.2\n        IndexDBFlushImmediate: true\n        # DataLoadingSchema Startup data-loading scheme\n        buildMaterializedViewsOnStart: \"on_demand\"\n        # DataLoadingSchema Startup data-loading scheme\n        buildPKIndexOnStart: \"on_demand\"\n        # Target maximum data size for any one column in a chunk\n        # (512 MB) (0 = disable). chunk_max_memory = 8192000000\n        chunkColumnMaxMemory: 8192000000\n        # Target maximum total data size for all columns in a chunk\n        # (8 GB) (0 = disable).\n        chunkMaxMemory: 512000000\n        # Number of records per chunk (\"0\" disables chunking)\n        chunkSize: 8000000\n        # Determines whether to execute kernels on host (CPU) or device\n        # (GPU). Possible values are: \n        #  * \"default\"   : engine decides * \"host\"      : execute only\n        #     host * \"device\"    : execute only device * *&lt;rows&gt;*    :\n        #     execute on the host if chunked column contains the given\n        #     number of *rows* or fewer; otherwise, execute on device.\n        executionMode: \"device\"\n        # Removed in 7.2\n        fsyncIndexDBImmediate: true\n        # Removed in 7.2\n        fsyncInodesImmediate: true\n        # Removed in 7.2\n        fsyncMetadataImmediate: true\n        # Removed in 7.2\n        fsyncOnInterval: true\n        # Maximum number of open files for IndexedDb object file store.\n        # Removed in 7.2\n        indexDBMaxOpenFiles: \n        # Table of contents size for IndexedDb object file store.\n        # Removed in 7.2\n        indexDBTOCSize: \n        # Disable detection of sparse file support and use the full file\n        # length which may be an over-estimate of the actual usage in\n        # the persist tier. Removed in 7.2\n        indexDBTierByFileLength: false\n        # Startup data-loading scheme: \n        #  * \"always\"    : load all the data into memory before\n        #     accepting requests * \"lazy\"      : load the necessary\n        #     data to start, but load the remainder\n        #     lazily * \"on_demand\" : only load data as requests use it\n        loadVectorsOnStart: \"on_demand\"\n        # Removed in 7.2\n        metadataFlushImmediate: true\n        # Specify a base directory to store persistence data files.\n        persistDirectory: \"/opt/gpudb/persist\"\n        # Whether to use synchronous persistence file writing.\n        # If \"false\", files will be written asynchronously. Removed in\n        # 7.2\n        persistSync: true\n        # Duration in seconds, for which persistence files will be\n        # force-synced if out of sync, once per minute. NOTE: Files are\n        # always opportunistically saved; this simply enforces a\n        # maximum time a file can be out of date. Set to a very high\n        # number to disable.\n        persistSyncTime: 5\n        # The maximum number of bytes in the shadow aggregate cache\n        shadowAggSize: 100000000\n        # Whether to enable chunk caching\n        shadowCubeEnabled: true\n        # The maximum number of bytes in the shadow filter cache\n        shadowFilterSize: 100000000\n        # Base directory to store hashed strings.\n        smsDirectory: \"${gaia.persist_directory}\"\n        # Maximum number of open files (per-TOM) for the SMS\n        # (string) store.\n        smsMaxOpenFiles: 128\n        # Synchronous compression: compress vectors on set compression.\n        synchronousCompression: false\n        # Directory for GPUdb to use to store temporary files. Must be a\n        # fully qualified path, have at least 100Mb of free space, and\n        # execute permission.\n        tempDirectory: \"${gaia.persist_directory}/tmp\"\n        # Base directory to store the text search index.\n        textIndexDirectory: \"${gaia.persist_directory}\"\n        # Enable checksum protection on the wal entries. New in 7.2\n        walChecksum: true\n        # Specifies how frequently wal entries are written with\n        # background sync. New in 7.2\n        walFlushFrequency: 60\n        # Maximum size of each wal segment file New in 7.2\n        walMaxSegmentSize: 500000000\n        # Approximate number of segment files to split the wal across. A\n        # minimum of two is required. The size of the wal is limited by\n        # segment_count * max_segment_size. (per rank and per tom) Set\n        # to 0 to remove a size limit on the wal itself, but still be\n        # bounded by rank tier limits. Set to -1 to have the database\n        # decide automatically per table. New in 7.2\n        walSegmentCount: \n        # Sync mode to use when persisting wal entries to disk: \n        #  \"none\"       : Disable the wal \"background\" : Wal entries are\n        #   periodically written instead of immediately after each\n        #   operation \"flush\"      : Protects entries in the event of a\n        #   database crash \"fsync\"      : Protects entries in the event\n        #   of an OS crash New in 7.2\n        walSyncPolicy: \"flush\"\n        # If true, any table that is found to be corrupt after replaying\n        # its wal at startup will automatically be truncated so that\n        # the table becomes operable. If false, the user will be\n        # responsible for resolving the issue via sql REPAIR TABLE or\n        # similar. New in 7.2\n        walTruncateCorruptTablesOnStart: true\n      # PostgresProxy\n      postgresProxy:\n        # Postgres Proxy Server Start an Postgres(TCP) server as a proxy\n        # to handle postgres wire protocol messages.\n        enablePostgresProxy: false\n        # Set idle connection  timeout in seconds. (default: \"1200\")\n        idleConnectionTimeout: 1200\n        # Set max number of queued server connections. (default: \"1\")\n        maxQueuedConnections: 1\n        # Set max number of server threads to spawn. (default: \"64\")\n        maxThreads: 64\n        # Set min number of server threads to spawn. (default: \"2\")\n        minThreads: 2\n        # TCP port that the postgres  proxy server will listen on\n        # if 'enable_postgres_proxy' is \"true\".\n        port:\n          # Number of port to expose on the pod's IP address. This must\n          # be a valid port number, 0 &lt; x &lt; 65536.\n          containerPort: 1\n          # What host IP to bind the external port to.\n          hostIP: string\n          # Number of port to expose on the host. If specified, this\n          # must be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork\n          # is specified, this must match ContainerPort. Most\n          # containers do not need this.\n          hostPort: 1\n          # If specified, this must be an IANA_SVC_NAME and unique\n          # within the pod. Each named port in a pod must have a unique\n          # name. Name for the port that can be referred to by\n          # services.\n          name: string\n          # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n          # to \"TCP\".\n          protocol: \"TCP\"\n        # Set to \"true\" to use SSL; if \"true\" then 'ssl_key_file'\n        # and 'ssl_cert_file' must be provided\n        ssl: false sslCertFile: \"\"\n        # Files containing the SSL private Key and the SSL certificate\n        # for. If required, a self signed certificate (expires after 10\n        # years) can be generated via the command: openssl req -newkey\n        # rsa:2048 -new -nodes -x509 \\ -days 3650 -keyout key.pem -out\n        # cert.pem\n        sslKeyFile: \"\"\n      # ProcessesConfig\n      processes:\n        # Set the maximum number of threads per tom for table\n        # initialization on startup\n        initTablesNumThreadsPerTom: 8\n        # Set the number of parallel calculation threads to use for data\n        # processing use -1 to use the max number of threads\n        # (not recommended)\n        kernelOmpThreads: 3\n        # The maximum number of web server threads to spawn\n        maxHttpThreads: 512\n        # Set the maximum number of threads (both workers and masters)\n        # to be passed to TBB on initialization.  Generally\n        # speaking, 'max_tbb_threads_per_rank' - \"1\" TBB workers will\n        # be created.  Use \"-1\" for no limit.\n        maxTbbThreadsPerRank: \"-1\"\n        # The minimum number of web server threads to spawn\n        minHttpThreads: 8\n        # Set the number of parallel jobs to create for multi-child set\n        # calulations use \"-1\" to use the max number of threads\n        # (not recommended)\n        smOmpThreads: 2\n        # Maximum number of simultaneous threads allocated to a given\n        # request, on each rank. Note that thread allocation may also\n        # be limted by resource group limits and/or system load.\n        subtaskConcurrentyLimit: \"-1\"\n        # Set the number of TaskCalculators per TOM, GPU data\n        # processors.\n        tcsPerTom: \"-1\"\n        # Set the number of TOMs (data container shards) per rank\n        tomsPerRank: 1\n        # Set the number of TaskProcessors per TOM, CPU data\n        # processors.\n        tpsPerTom: \"-1\"\n      # ProcsConfig\n      procs:\n        # Directory where proc files are stored at runtime. Must be a\n        # fully qualified path with execute permission. If not\n        # specified, 'temp_directory' will be used.\n        directory:\n          # PersistentVolumeClaim is a user's request for and claim to a\n          # persistent volume\n          persistVolumeClaim:\n            # APIVersion defines the versioned schema of this\n            # representation of an object. Servers should convert\n            # recognized schemas to the latest internal value, and may\n            # reject unrecognized values. More info:\n            # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n            apiVersion: app.kinetica.com/v1\n            # Kind is a string value representing the REST resource this\n            # object represents. Servers may infer this from the\n            # endpoint the client submits requests to. Cannot be\n            # updated. In CamelCase. More info:\n            # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n            kind: KineticaCluster\n            # Standard object's metadata. More info:\n            # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n            metadata: {}\n            # spec defines the desired characteristics of a volume\n            # requested by a pod author. More info:\n            # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n            spec:\n              # accessModes contains the desired access modes the volume\n              # should have. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n              accessModes: [\"string\"]\n              # dataSource field can be used to specify either: * An\n              # existing VolumeSnapshot object\n              # (snapshot.storage.k8s.io/VolumeSnapshot) * An existing\n              # PVC (PersistentVolumeClaim) If the provisioner or an\n              # external controller can support the specified data\n              # source, it will create a new volume based on the\n              # contents of the specified data source. When the\n              # AnyVolumeDataSource feature gate is enabled, dataSource\n              # contents will be copied to dataSourceRef, and\n              # dataSourceRef contents will be copied to dataSource\n              # when dataSourceRef.namespace is not specified. If the\n              # namespace is specified, then dataSourceRef will not be\n              # copied to dataSource.\n              dataSource:\n                # APIGroup is the group for the resource being\n                # referenced. If APIGroup is not specified, the\n                # specified Kind must be in the core API group. For any\n                # other third-party types, APIGroup is required.\n                apiGroup: string\n                # Kind is the type of resource being referenced\n                kind: KineticaCluster\n                # Name is the name of resource being referenced\n                name: string\n              # dataSourceRef specifies the object from which to\n              # populate the volume with data, if a non-empty volume is\n              # desired. This may be any object from a non-empty API\n              # group (non core object) or a PersistentVolumeClaim\n              # object. When this field is specified, volume binding\n              # will only succeed if the type of the specified object\n              # matches some installed volume populator or dynamic\n              # provisioner. This field will replace the functionality\n              # of the dataSource field and as such if both fields are\n              # non-empty, they must have the same value. For backwards\n              # compatibility, when namespace isn't specified in\n              # dataSourceRef, both fields (dataSource and\n              # dataSourceRef) will be set to the same value\n              # automatically if one of them is empty and the other is\n              # non-empty. When namespace is specified in\n              # dataSourceRef, dataSource isn't set to the same value\n              # and must be empty. There are three important\n              # differences between dataSource and dataSourceRef: *\n              # While dataSource only allows two specific types of\n              # objects, dataSourceRef allows any non-core object, as\n              # well as PersistentVolumeClaim objects. * While\n              # dataSource ignores disallowed values (dropping them),\n              # dataSourceRef preserves all values, and generates an\n              # error if a disallowed value is specified. * While\n              # dataSource only allows local objects, dataSourceRef\n              # allows objects in any namespaces. (Beta) Using this\n              # field requires the AnyVolumeDataSource feature gate to\n              # be enabled. (Alpha) Using the namespace field of\n              # dataSourceRef requires the\n              # CrossNamespaceVolumeDataSource feature gate to be\n              # enabled.\n              dataSourceRef:\n                # APIGroup is the group for the resource being\n                # referenced. If APIGroup is not specified, the\n                # specified Kind must be in the core API group. For any\n                # other third-party types, APIGroup is required.\n                apiGroup: string\n                # Kind is the type of resource being referenced\n                kind: KineticaCluster\n                # Name is the name of resource being referenced\n                name: string\n                # Namespace is the namespace of resource being\n                # referenced Note that when a namespace is specified, a\n                # gateway.networking.k8s.io/ReferenceGrant object is\n                # required in the referent namespace to allow that\n                # namespace's owner to accept the reference. See the\n                # ReferenceGrant documentation for details.(Alpha) This\n                # field requires the CrossNamespaceVolumeDataSource\n                # feature gate to be enabled.\n                namespace: string\n              # resources represents the minimum resources the volume\n              # should have. If RecoverVolumeExpansionFailure feature\n              # is enabled users are allowed to specify resource\n              # requirements that are lower than previous value but\n              # must still be higher than capacity recorded in the\n              # status field of the claim. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n              resources:\n                # Claims lists the names of resources, defined in\n                # spec.resourceClaims, that are used by this container.\n                # This is an alpha field and requires enabling the\n                # DynamicResourceAllocation feature gate. This field is\n                # immutable. It can only be set for containers.\n                claims:\n                - name: string\n                # Limits describes the maximum amount of compute\n                # resources allowed. More info:\n                # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                limits: {}\n                # Requests describes the minimum amount of compute\n                # resources required. If Requests is omitted for a\n                # container, it defaults to Limits if that is\n                # explicitly specified, otherwise to an\n                # implementation-defined value. Requests cannot exceed\n                # Limits. More info:\n                # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                requests: {}\n              # selector is a label query over volumes to consider for\n              # binding.\n              selector:\n                # matchExpressions is a list of label selector\n                # requirements. The requirements are ANDed.\n                matchExpressions:\n                - key: string\n                  # operator represents a key's relationship to a set of\n                  # values. Valid operators are In, NotIn, Exists and\n                  # DoesNotExist.\n                  operator: string\n                  # values is an array of string values. If the operator\n                  # is In or NotIn, the values array must be non-empty.\n                  # If the operator is Exists or DoesNotExist, the\n                  # values array must be empty. This array is replaced\n                  # during a strategic merge patch.\n                  values: [\"string\"]\n                # matchLabels is a map of {key,value} pairs. A single\n                # {key,value} in the matchLabels map is equivalent to\n                # an element of matchExpressions, whose key field\n                # is \"key\", the operator is \"In\", and the values array\n                # contains only \"value\". The requirements are ANDed.\n                matchLabels: {}\n              # storageClassName is the name of the StorageClass\n              # required by the claim. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n              storageClassName: string\n              # volumeMode defines what type of volume is required by\n              # the claim. Value of Filesystem is implied when not\n              # included in claim spec.\n              volumeMode: string\n              # volumeName is the binding reference to the\n              # PersistentVolume backing this claim.\n              volumeName: string\n            # status represents the current information/status of a\n            # persistent volume claim. Read-only. More info:\n            # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n            status:\n              # accessModes contains the actual access modes the volume\n              # backing the PVC has. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n              accessModes: [\"string\"]\n              # allocatedResources is the storage resource within\n              # AllocatedResources tracks the capacity allocated to a\n              # PVC. It may be larger than the actual capacity when a\n              # volume expansion operation is requested. For storage\n              # quota, the larger value from allocatedResources and\n              # PVC.spec.resources is used. If allocatedResources is\n              # not set, PVC.spec.resources alone is used for quota\n              # calculation. If a volume expansion capacity request is\n              # lowered, allocatedResources is only lowered if there\n              # are no expansion operations in progress and if the\n              # actual volume capacity is equal or lower than the\n              # requested capacity. This is an alpha field and requires\n              # enabling RecoverVolumeExpansionFailure feature.\n              allocatedResources: {}\n              # capacity represents the actual resources of the\n              # underlying volume.\n              capacity: {}\n              # conditions is the current Condition of persistent volume\n              # claim. If underlying persistent volume is being resized\n              # then the Condition will be set to 'ResizeStarted'.\n              conditions:\n              - lastProbeTime: string\n                # lastTransitionTime is the time the condition\n                # transitioned from one status to another.\n                lastTransitionTime: string\n                # message is the human-readable message indicating\n                # details about last transition.\n                message: string\n                # reason is a unique, this should be a short, machine\n                # understandable string that gives the reason for\n                # condition's last transition. If it\n                # reports \"ResizeStarted\" that means the underlying\n                # persistent volume is being resized.\n                reason: string status: string\n                # PersistentVolumeClaimConditionType is a valid value of\n                # PersistentVolumeClaimCondition.Type\n                type: string\n              # phase represents the current phase of\n              # PersistentVolumeClaim.\n              phase: string\n              # resizeStatus stores status of resize operation.\n              # ResizeStatus is not set by default but when expansion\n              # is complete resizeStatus is set to empty string by\n              # resize controller or kubelet. This is an alpha field\n              # and requires enabling RecoverVolumeExpansionFailure\n              # feature.\n              resizeStatus: string\n          # VolumeMount describes a mounting of a Volume within a\n          # container.\n          volumeMount:\n            # Path within the container at which the volume should be\n            # mounted.  Must not contain ':'.\n            mountPath: string\n            # mountPropagation determines how mounts are propagated from\n            # the host to container and the other way around. When not\n            # set, MountPropagationNone is used. This field is beta in\n            # 1.10.\n            mountPropagation: string\n            # This must match the Name of a Volume.\n            name: string\n            # Mounted read-only if true, read-write otherwise (false or\n            # unspecified). Defaults to false.\n            readOnly: true\n            # Path within the volume from which the container's volume\n            # should be mounted. Defaults to \"\" (volume's root).\n            subPath: string\n            # Expanded path within the volume from which the container's\n            # volume should be mounted. Behaves similarly to SubPath\n            # but environment variable references $(VAR_NAME) are\n            # expanded using the container's environment. Defaults\n            # to \"\" (volume's root). SubPathExpr and SubPath are\n            # mutually exclusive.\n            subPathExpr: string\n        # Enable procs (UDFs)\n        enable: true\n      # SecurityConfig\n      security:\n        # Automatically create accounts for externally-authenticated\n        # users. If 'enable_external_authentication' is \"false\", this\n        # setting has no effect. Note that accounts are not\n        # automatically deleted if users are removed from the external\n        # authentication provider and will be orphaned.\n        autoCreateExternalUsers: false\n        # Automatically add roles passed in via the \"KINETICA_ROLES\"\n        # HTTP header to externally-authenticated users. Specified\n        # roles that do not exist are ignored.\n        # If 'enable_external_authentication' is \"false\", this setting\n        # has no effect. IMPORTANT: DO NOT ENABLE unless the\n        # authentication proxy is configured to block \"KINETICA_ROLES\"\n        # HTTP headers passed in from clients.\n        autoGrantExternalRoles: false\n        # Comma-separated list of roles to revoke from\n        # externally-authenticated users prior to granting roles passed\n        # in via the \"KINETICA_ROLES\" HTTP header, or \"*\" to revoke all\n        # roles. Preceding a role name with an \"!\" overrides the\n        # revocation (e.g. \"*,!foo\" revokes all roles except \"foo\").\n        # Leave blank to disable. If\n        # either 'enable_external_authentication'\n        # or 'auto_grant_external_roles' is \"false\", this setting has\n        # no effect.\n        autoRevokeExternalRoles: false\n        # Enable authorization checks.  When disabled, all requests will\n        # be treated as the administrative user.\n        enableAuthorization: true\n        # Enable external (LDAP, Kerberos, etc.) authentication. User\n        # IDs of externally-authenticated users must be passed in via\n        # the \"REMOTE_USER\" HTTP header from the authentication proxy.\n        # May be used in conjuntion with the 'enable_httpd_proxy'\n        # setting above for an integrated external authentication\n        # solution. IMPORTANT: DO NOT ENABLE unless external access to\n        # GPUdb ports has been blocked via firewall AND the\n        # authentication proxy is configured to block \"REMOTE_USER\"\n        # HTTP headers passed in from clients. server.\n        enableExternalAuthentication: true\n        # ExternalSecurity\n        externalSecurity:\n          # Ranger\n          ranger:\n            # AuthorizerAddress - The network URI for the\n            # ranger_authorizer to start. The URI can be either TCP or\n            # IPC. TCP address is used to indicate the remote\n            # ranger_authorizer which may run at other hosts. The IPC\n            # address is for a local ranger_authorizer. Example\n            # addresses for remote or TCP servers: tcp://127.0.0.1:9293\n            # tcp://HOST_IP:9293 Example address for local IPC servers:\n            # ipc:///tmp/gpudb-ranger-0\n            # security.external.ranger_authorizer.address = ipc://$\n            # {gaia.temp_directory}/gpudb-ranger-0\n            authorizerAddress: \"ipc://$\n            {gaia.temp_directory}/gpudb-ranger-0\"\n            # Remote debugger port used for the ranger_authorizer.\n            # Setting the port to \"0\" disables remote debugging. NOTE:\n            # Recommended port to use is \"5005\"\n            # security.external.ranger_authorizer.remote_debug_port =\n            # 0\n            authorizerRemoteDebugPort: 0\n            # AuthorizerTimeout - Ranger Authorizer timeout in seconds\n            # security.external.ranger_authorizer.timeout = 120\n            authorizerTimeout: 120\n            # CacheMinutes- Maximum minutes to hold on to data from\n            # Ranger security.external.ranger.cache_minutes = 60\n            cacheMinutes: 60\n            # Name of the service created on the Ranger Server to manage\n            # this Kinetica instance\n            # security.external.ranger.service_name = kinetica\n            name: \"kinetica\"\n            # ExtURL - URL of Ranger REST API.  E.g.,\n            # https://localhost:6080/ Leave blank for no Ranger Server\n            # security.external.ranger.url =\n            url: string\n        # The minimum allowable password length.\n        minPasswordLength: 4\n        # Require all users to be authenticated.  Disable this to allow\n        # users to access the database as the 'unauthenticated' user.\n        # Useful for situations where the public needs to access the\n        # data.\n        requireAuthentication: true\n        # UnifiedSecurityNamespace - Use a single namespace for internal\n        # and external user IDs and role names. If false, external user\n        # IDs must be prefixed with \"@\" to differentiate them from\n        # internal user IDs and role names (except in the \"REMOTE_USER\"\n        # HTTP header, where the \"@\" is omitted).\n        # unified_security_namespace = true\n        unifiedSecurityNamespace: true\n      # SQLConfig\n      sql:\n        # SQLPlannerAddress is not included as it is just default\n        # always\n        address: \"ipc://${gaia.temp_directory}/gpudb-query-engine-0\"\n        # Enable the cost-based optimizer\n        costBasedOptimization: false\n        # Enable distributed joins\n        distributedJoins: true\n        # Enable distributed operations\n        distributedOperations: true\n        # Enable Query Planner\n        enablePlanner: true\n        # Perform joins between only 2 tables at a time; default is all\n        # tables involved in the operation at once\n        forceBinaryJoins: false\n        # Perform unions/intersections/exceptions between only 2 tables\n        # at a time; default is all tables involved in the operation at\n        # once\n        forceBinarySetOps: false\n        # Max parallel steps\n        maxParallelSteps: 4\n        # Max allowed view nesting levels. Valid range(1-64)\n        maxViewNestingLevels: 16\n        # TTL of the paging results table\n        pagingTableTTL: 20\n        # Enable parallel query evaluation\n        parallelExecution: true\n        # The maximum number of entries in the SQL plan cache.  The\n        # default is \"4000\" entries, but the configurable range\n        # is \"1\" - \"1000000\".  Plan caching will be disabled if the\n        # value is set outside of that range.\n        planCacheSize: 4000\n        # The maximum memory for the query planner to use in Megabytes.\n        plannerMaxMemory: 4096\n        # The maximum stack size for the query planner threads to use in\n        # Megabytes.\n        plannerMaxStack: 6\n        # Query planner timeout in seconds\n        plannerTimeout: 120\n        # Max Query planner threads\n        plannerWorkers: 16\n        # Remote debugger port used for the query planner. Setting the\n        # port to \"0\" disables remote debugging. NOTE:  Recommended\n        # port to use is \"5005\"\n        remoteDebugPort: 5005\n        # TTL of the query cache results table\n        resultsCacheTTL: 60\n        # Enable query results caching\n        resultsCaching: true\n        # Enable rule-based query rewrites\n        ruleBasedOptimization: true\n      # SQLEngineConfig\n      sqlEngine:\n        # Enable the cost-based optimizer\n        costBasedOptimization: false\n        # Name of default collection for user tables\n        defaultSchema: \"\"\n        # Enable distributed joins\n        distributedJoins: true\n        # Enable distributed operations\n        distributedOperations: true\n        # Perform joins between only 2 tables at a time; default is all\n        # tables involved in the operation at once\n        forceBinaryJoins: false\n        # Perform unions/intersections/exceptions between only 2 tables\n        # at a time; default is all tables involved in the operation at\n        # once\n        forceBinarySetOps: false\n        # Max parallel steps\n        maxParallelSteps: 4\n        # Max allowed view nesting levels. Valid range(1-64)\n        maxViewNestingLevels: 16\n        # TTL of the paging results table\n        pagingTableTTL: 20\n        # Enable parallel query evaluation\n        parallelExecution: true\n        # The maximum number of entries in the SQL plan cache.  The\n        # default is \"4000\" entries, but the configurable range\n        # is \"1\" - \"1000000\".  Plan caching will be disabled if the\n        # value is set outside of that range.\n        planCacheSize: 4000\n        # PlannerConfig\n        planner:\n          # Enable Query Planner\n          enablePlanner: true\n          # The maximum memory for the query planner to use in\n          # Megabytes.\n          maxMemory: 4096\n          # The maximum stack size for the query planner threads to use\n          # in Megabytes.\n          maxStack: 6\n          # The network URI for the query planner to start. The URI can\n          # be either TCP or IPC. TCP address is used to indicate the\n          # remote query planner which may run at other hosts. The IPC\n          # address is for a local query planner. Example for remote or\n          # TCP servers: \n          #  #  sql.planner.address  = tcp://127.0.0.1:9293 #\n          #     sql.planner.address  = tcp://HOST_IP:9293 Example for\n          #     local IPC servers: \n          #  #  sql.planner.address  = ipc:///tmp/gpudb-query-engine-0\n          plannerAddress: \"ipc:///tmp/gpudb-query-engine-0\"\n          # Remote debugger port used for the query planner. Setting the\n          # port to \"0\" disables remote debugging. NOTE:  Recommended\n          # port to use is \"5005\"\n          remoteDebugPort: 0\n          # Query planner timeout in seconds\n          timeout: 120\n          # Max Query planner threads\n          workers: 16 results:\n          # TTL of the query cache results table\n          cacheTTL: 60\n          # Enable query results caching\n          caching: true\n        # Enable rule-based query rewrites\n        ruleBasedOptimization: true\n        # Name of collection that will be used to store result tables\n        # generated as part of query execution\n        tempCollection: \"__SQL_TEMP\"\n      # StatisticsConfig\n      statistics:\n        # system_metadata.stats_aggr_rowcount = 10000\n        aggrRowCount: 10000\n        # system_metadata.stats_aggr_time = 1\n        aggrTime: 1\n        # Run a statistics server to collect information about Kinetica\n        # and the machines it runs on.\n        enable: true\n        # Statistics server IP address (run on head node) default port\n        # is \"2003\"\n        ipAddress: \"${gaia.host0.address}\"\n        # Statistics server namespace - should be a machine identifier\n        namespace: \"gpudb\" port: 2003\n        # System metadata catalog settings\n        # system_metadata.stats_retention_days = 21\n        retentionDays: 21\n      # TextSearchConfig\n      textSearch:\n        # Enable text search capability within the database.\n        enableTextSearch: false\n        # Number of text indices to start for each rank\n        textIndicesPerTom: 2\n        # Searcher refresh intervals - specifies the maximum delay\n        # (in seconds) between writing to the text search index and\n        # being able to search for the value just written.  A value\n        # of \"0\" insures that writes to the index are immediately\n        # available to be searched.  A more nominal value of \"100\"\n        # should improve ingest speed at the cost of some delay in\n        # being able to text search newly added values.\n        textSearcherRefreshInterval: 20\n        # Use the production capable external text server instead of a\n        # lightweight internal server which should only be used for\n        # light testing. Note: The internal text server is deprecated\n        # and may be removed in future versions.\n        useExternalTextServer: true tieredStorage:\n        # Cold Storage Tiers can be used to extend the storage capacity\n        # of the Persist Tier. Assign a tier strategy with cold storage\n        # to objects that will be infrequently accessed since they will\n        # be moved as needed from the Persist Tier. The Cold Storage\n        # Tier is typically a much larger capacity physical disk or a\n        # cloud-based storage system which may not be as performant as\n        # the Persist Tier storage. A default storage limit and\n        # eviction thresholds can be set across all ranks for a given\n        # Cold Storage Tier, while one or more ranks within a Cold\n        # Storage Tier may be configured to override those defaults.\n        # NOTE: If an object needs to be pulled out of cold storage\n        # during a query, it may need to use the local persist\n        # directory as a temporary swap space. This may trigger an\n        # eviction of other persisted items to cold storage due to low\n        # disk space condition defined by the watermark settings for\n        # the Persist Tier.\n        coldStorageTier:\n          # ColdStorageAzure\n          coldStorageAzure:\n            # 'base_path'             : A base path based on the\n            #  provider type for this tier.\n            basePath: string clientID: string clientSecret: string\n            # 'connection_timeout'    : Timeout in seconds for\n            #  connecting to this storage provider.\n            connectionTimeout: \"30\"\n            # 'base_path'             : A base path based on the\n            #  provider type for this tier. BasePath string\n            #  `json:\"basePath,omitempty\"`\n            containerName: \"/gpudb/cold_storage\"\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\" sasToken:\n            string storageAccountKey: string storageAccountName: string\n            tenantID: string useManagedCredentials: false\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string\n            # 'wait_timeout'          : Timeout in seconds for reading\n            #  from or writing to this storage provider.\n            waitTimeout: \"90\"\n          # ColdStorageDisk\n          coldStorageDisk:\n            # 'base_path'             : A base path based on the\n            #  provider type for this tier.\n            basePath: string\n            # 'connection_timeout'    : Timeout in seconds for\n            #  connecting to this storage provider.\n            connectionTimeout: \"30\"\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\"\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string\n            # 'wait_timeout'          : Timeout in seconds for reading\n            #  from or writing to this storage provider.\n            waitTimeout: \"90\"\n          # ColdStorageGCS - Google Cloud Storage-specific *parameter*\n          # names: \n          #  * BucketName =        'gcs_bucket_name' *\n          #    ProjectID - 'gcs_project_id'\n          #    (optional) * AccountID - 'gcs_service_account_id'\n          #    (optional) *\n          #    AccountPrivateKey - 'gcs_service_account_private_key'\n          #    (optional) * AccountKeys -  'gcs_service_account_keys'\n          #    (optional) NOTE: If\n          #    the 'gcs_service_account_id', 'gcs_service_account_private_key'\n          #    and/or 'gcs_service_account_keys' values are not\n          #    specified, the Google Clould Client Libraries will\n          #    attempt to find and use service account credentials from\n          #    the GOOGLE_APPLICATION_CREDENTIALS environment\n          #    variable.\n          coldStorageGCS: accountID: string accountKeys: string\n          accountPrivateKey: string\n            # 'base_path'             : A base path based on the\n            #  provider type for this tier.\n            basePath: string bucketName: string\n            # 'connection_timeout'    : Timeout in seconds for\n            #  connecting to this storage provider.\n            connectionTimeout: \"30\"\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" projectID: string\n            provisioner: \"docker.io/hostpath\"\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string\n            # 'wait_timeout'          : Timeout in seconds for reading\n            #  from or writing to this storage provider.\n            waitTimeout: \"90\"\n          # ColdStorageHDFS\n          coldStorageHDFS:\n            # ColdStorageDisk\n            default:\n              # 'base_path'             : A base path based on the\n              #  provider type for this tier.\n              basePath: string\n              # 'connection_timeout'    : Timeout in seconds for\n              #  connecting to this storage provider.\n              connectionTimeout: \"30\"\n              # * 'high_watermark' : Percentage used eviction threshold.\n              #    Once usage exceeds this value, evictions from this\n              #    tier will be scheduled in the background and\n              #    continue until the 'low_watermark' percentage usage\n              #    is reached.  Default is \"90\", signifying a 90%\n              #    memory usage threshold.\n              highWatermark: 90\n              # * 'limit'          : The maximum (bytes) per rank that\n              #    can be allocated across all resource groups.\n              limit: \"1Gi\"\n              # * 'low_watermark'  : Percentage used recovery threshold.\n              #    Once usage exceeds the 'high_watermark', evictions\n              #    will continue until usage falls below this recovery\n              #    threshold. Default is \"80\", signifying an 80% usage\n              #    threshold.\n              lowWatermark: 80 name: string\n              # A base directory to use as a space for this tier.\n              path: \"default\" provisioner: \"docker.io/hostpath\"\n              # Kubernetes Persistent Volume Claim for this disk tier.\n              volumeClaim:\n                # APIVersion defines the versioned schema of this\n                # representation of an object. Servers should convert\n                # recognized schemas to the latest internal value, and\n                # may reject unrecognized values. More info:\n                # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n                apiVersion: app.kinetica.com/v1\n                # Kind is a string value representing the REST resource\n                # this object represents. Servers may infer this from\n                # the endpoint the client submits requests to. Cannot\n                # be updated. In CamelCase. More info:\n                # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n                kind: KineticaCluster\n                # Standard object's metadata. More info:\n                # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n                metadata: {}\n                # spec defines the desired characteristics of a volume\n                # requested by a pod author. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n                spec:\n                  # accessModes contains the desired access modes the\n                  # volume should have. More info:\n                  # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                  accessModes: [\"string\"]\n                  # dataSource field can be used to specify either: * An\n                  # existing VolumeSnapshot object\n                  # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                  # existing PVC (PersistentVolumeClaim) If the\n                  # provisioner or an external controller can support\n                  # the specified data source, it will create a new\n                  # volume based on the contents of the specified data\n                  # source. When the AnyVolumeDataSource feature gate\n                  # is enabled, dataSource contents will be copied to\n                  # dataSourceRef, and dataSourceRef contents will be\n                  # copied to dataSource when dataSourceRef.namespace\n                  # is not specified. If the namespace is specified,\n                  # then dataSourceRef will not be copied to\n                  # dataSource.\n                  dataSource:\n                    # APIGroup is the group for the resource being\n                    # referenced. If APIGroup is not specified, the\n                    # specified Kind must be in the core API group. For\n                    # any other third-party types, APIGroup is\n                    # required.\n                    apiGroup: string\n                    # Kind is the type of resource being referenced\n                    kind: KineticaCluster\n                    # Name is the name of resource being referenced\n                    name: string\n                  # dataSourceRef specifies the object from which to\n                  # populate the volume with data, if a non-empty\n                  # volume is desired. This may be any object from a\n                  # non-empty API group (non core object) or a\n                  # PersistentVolumeClaim object. When this field is\n                  # specified, volume binding will only succeed if the\n                  # type of the specified object matches some installed\n                  # volume populator or dynamic provisioner. This field\n                  # will replace the functionality of the dataSource\n                  # field and as such if both fields are non-empty,\n                  # they must have the same value. For backwards\n                  # compatibility, when namespace isn't specified in\n                  # dataSourceRef, both fields (dataSource and\n                  # dataSourceRef) will be set to the same value\n                  # automatically if one of them is empty and the other\n                  # is non-empty. When namespace is specified in\n                  # dataSourceRef, dataSource isn't set to the same\n                  # value and must be empty. There are three important\n                  # differences between dataSource and dataSourceRef: *\n                  # While dataSource only allows two specific types of\n                  # objects, dataSourceRef allows any non-core object,\n                  # as well as PersistentVolumeClaim objects. * While\n                  # dataSource ignores disallowed values\n                  # (dropping them), dataSourceRef preserves all\n                  # values, and generates an error if a disallowed\n                  # value is specified. * While dataSource only allows\n                  # local objects, dataSourceRef allows objects in any\n                  # namespaces. (Beta) Using this field requires the\n                  # AnyVolumeDataSource feature gate to be enabled.\n                  # (Alpha) Using the namespace field of dataSourceRef\n                  # requires the CrossNamespaceVolumeDataSource feature\n                  # gate to be enabled.\n                  dataSourceRef:\n                    # APIGroup is the group for the resource being\n                    # referenced. If APIGroup is not specified, the\n                    # specified Kind must be in the core API group. For\n                    # any other third-party types, APIGroup is\n                    # required.\n                    apiGroup: string\n                    # Kind is the type of resource being referenced\n                    kind: KineticaCluster\n                    # Name is the name of resource being referenced\n                    name: string\n                    # Namespace is the namespace of resource being\n                    # referenced Note that when a namespace is\n                    # specified, a\n                    # gateway.networking.k8s.io/ReferenceGrant object\n                    # is required in the referent namespace to allow\n                    # that namespace's owner to accept the reference.\n                    # See the ReferenceGrant documentation for\n                    # details. (Alpha) This field requires the\n                    # CrossNamespaceVolumeDataSource feature gate to be\n                    # enabled.\n                    namespace: string\n                  # resources represents the minimum resources the\n                  # volume should have. If\n                  # RecoverVolumeExpansionFailure feature is enabled\n                  # users are allowed to specify resource requirements\n                  # that are lower than previous value but must still\n                  # be higher than capacity recorded in the status\n                  # field of the claim. More info:\n                  # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                  resources:\n                    # Claims lists the names of resources, defined in\n                    # spec.resourceClaims, that are used by this\n                    # container. This is an alpha field and requires\n                    # enabling the DynamicResourceAllocation feature\n                    # gate. This field is immutable. It can only be set\n                    # for containers.\n                    claims:\n                    - name: string\n                    # Limits describes the maximum amount of compute\n                    # resources allowed. More info:\n                    # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                    limits: {}\n                    # Requests describes the minimum amount of compute\n                    # resources required. If Requests is omitted for a\n                    # container, it defaults to Limits if that is\n                    # explicitly specified, otherwise to an\n                    # implementation-defined value. Requests cannot\n                    # exceed Limits. More info:\n                    # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                    requests: {}\n                  # selector is a label query over volumes to consider\n                  # for binding.\n                  selector:\n                    # matchExpressions is a list of label selector\n                    # requirements. The requirements are ANDed.\n                    matchExpressions:\n                    - key: string\n                      # operator represents a key's relationship to a\n                      # set of values. Valid operators are In, NotIn,\n                      # Exists and DoesNotExist.\n                      operator: string\n                      # values is an array of string values. If the\n                      # operator is In or NotIn, the values array must\n                      # be non-empty. If the operator is Exists or\n                      # DoesNotExist, the values array must be empty.\n                      # This array is replaced during a strategic merge\n                      # patch.\n                      values: [\"string\"]\n                    # matchLabels is a map of {key,value} pairs. A\n                    # single {key,value} in the matchLabels map is\n                    # equivalent to an element of matchExpressions,\n                    # whose key field is \"key\", the operator is \"In\",\n                    # and the values array contains only \"value\". The\n                    # requirements are ANDed.\n                    matchLabels: {}\n                  # storageClassName is the name of the StorageClass\n                  # required by the claim. More info:\n                  # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                  storageClassName: string\n                  # volumeMode defines what type of volume is required\n                  # by the claim. Value of Filesystem is implied when\n                  # not included in claim spec.\n                  volumeMode: string\n                  # volumeName is the binding reference to the\n                  # PersistentVolume backing this claim.\n                  volumeName: string\n                # status represents the current information/status of a\n                # persistent volume claim. Read-only. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n                status:\n                  # accessModes contains the actual access modes the\n                  # volume backing the PVC has. More info:\n                  # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                  accessModes: [\"string\"]\n                  # allocatedResources is the storage resource within\n                  # AllocatedResources tracks the capacity allocated to\n                  # a PVC. It may be larger than the actual capacity\n                  # when a volume expansion operation is requested. For\n                  # storage quota, the larger value from\n                  # allocatedResources and PVC.spec.resources is used.\n                  # If allocatedResources is not set,\n                  # PVC.spec.resources alone is used for quota\n                  # calculation. If a volume expansion capacity request\n                  # is lowered, allocatedResources is only lowered if\n                  # there are no expansion operations in progress and\n                  # if the actual volume capacity is equal or lower\n                  # than the requested capacity. This is an alpha field\n                  # and requires enabling RecoverVolumeExpansionFailure\n                  # feature.\n                  allocatedResources: {}\n                  # capacity represents the actual resources of the\n                  # underlying volume.\n                  capacity: {}\n                  # conditions is the current Condition of persistent\n                  # volume claim. If underlying persistent volume is\n                  # being resized then the Condition will be set\n                  # to 'ResizeStarted'.\n                  conditions:\n                  - lastProbeTime: string\n                    # lastTransitionTime is the time the condition\n                    # transitioned from one status to another.\n                    lastTransitionTime: string\n                    # message is the human-readable message indicating\n                    # details about last transition.\n                    message: string\n                    # reason is a unique, this should be a short,\n                    # machine understandable string that gives the\n                    # reason for condition's last transition. If it\n                    # reports \"ResizeStarted\" that means the underlying\n                    # persistent volume is being resized.\n                    reason: string status: string\n                    # PersistentVolumeClaimConditionType is a valid\n                    # value of PersistentVolumeClaimCondition.Type\n                    type: string\n                  # phase represents the current phase of\n                  # PersistentVolumeClaim.\n                  phase: string\n                  # resizeStatus stores status of resize operation.\n                  # ResizeStatus is not set by default but when\n                  # expansion is complete resizeStatus is set to empty\n                  # string by resize controller or kubelet. This is an\n                  # alpha field and requires enabling\n                  # RecoverVolumeExpansionFailure feature.\n                  resizeStatus: string\n              # 'wait_timeout'          : Timeout in seconds for reading\n              #  from or writing to this storage provider.\n              waitTimeout: \"90\"\n            # 'hdfs_kerberos_keytab'  : The Kerberos keytab file used to\n            #  authenticate the \"gpudb\" Kerberos\n            kerberosKeytab: string\n            # 'hdfs_principal'        : The effective principal name to\n            #  use when connecting to the hadoop cluster.\n            principal: string\n            # 'hdfs_uri'              : The host IP address &amp; port for\n            #  the hadoop distributed file system. For example:\n            #  hdfs://localhost:8020\n            uri: string\n            # 'hdfs_use_kerberos'     : Set to \"true\" to enable Kerberos\n            #  authentication to an HDFS storage server. The\n            #  credentials of the principal are in the file specified\n            #  by the 'hdfs_kerberos_keytab' parameter. Note that\n            #  Kerberos's *kinit* command will be run when the database\n            #  is started.\n            useKerberos: true\n          # ColdStorageS3\n          coldStorageS3: awsAccessKeyId: string awsRoleARN: string\n          awsSecretAccessKey: string\n            # 'base_path'             : A base path based on the\n            #  provider type for this tier.\n            basePath: string bucketName: string\n            # 'connection_timeout'    : Timeout in seconds for\n            #  connecting to this storage provider.\n            connectionTimeout: \"30\" encryptionCustomerAlgorithm: string\n            encryptionCustomerKey: string\n            # EncryptionType - This is optional and valid values are\n            # sse-s3 (Encryption key is managed by Amazon S3) and\n            # sse-kms (Encryption key is managed by AWS Key Management\n            # Service (kms)).\n            encryptionType: string\n            # Endpoint - s3_endpoint\n            endpoint: string\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # KMSKeyID - This is optional and must be specified when\n            # encryption type is sse-kms.\n            kmsKeyID: string\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\" region:\n            string useManagedCredentials: true\n            # UseVirtualAddressing - 's3_use_virtual_addressing'  : If\n            # true (default), S3 endpoints will be constructed using\n            # the 'virtual' style which includes the bucket name as\n            # part of the hostname. Set to false to use the 'path'\n            # style which treats the bucket name as if it is a path in\n            # the URI.\n            useVirtualAddressing: true\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string\n            # 'wait_timeout'          : Timeout in seconds for reading\n            #  from or writing to this storage provider.\n            waitTimeout: \"90\"\n          # ColdStorageType The storage provider type. Currently,\n          # supports \"none\", \"disk\"(local/network storage), \"hdfs\"\n          # (Hadoop distributed filesystem), \"s3\" (Amazon S3\n          # bucket), \"azure_blob\" (Microsoft Azure Blob Storage)\n          # and \"gcs\" (Google GCS Bucket).\n          coldStorageType: \"none\" name: string\n        # The DiskCacheTier are used as temporary swap space for data\n        # that doesn't fit in RAM or VRAM. The disk should be as fast\n        # or faster than the Persist Tier storage since this tier is\n        # used as an intermediary cache between the RAM and Persist\n        # Tiers.\n        diskCacheTier:\n          # DiskTierStorageLimit\n          default:\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\"\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string defaultStorePersistentObjects: true\n                ranks:\n          - highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\"\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string\n        # GlobalTier Parameters\n        globalTier:\n          # Co-locates all disks to a single disk i.e. persist, cache,\n          # UDF will be on a single PVC.\n          colocateDisks: true\n          # Timeout in seconds for subsequent requests to wait on a\n          # locked resource\n          concurrentWaitTimeout: 120\n          # EncryptDataAtRest - Enable disk encryption of data at rest\n          encryptDataAtRest: true\n        # The PersistTier are used as temporary swap space for data that\n        # doesn't fit in RAM or VRAM. The disk should be as fast or\n        # faster than the Persist Tier storage since this tier is used\n        # as an intermediary cache between the RAM and Persist Tiers.\n        persistTier:\n          # DiskTierStorageLimit\n          default:\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\"\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string defaultStorePersistentObjects: true\n                ranks:\n          - highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\"\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string\n        # The RAMTier represents the RAM available for data storage per\n        # rank. The RAM Tier is NOT used for small, non-data objects or\n        # variables that are allocated and deallocated for program flow\n        # control or used to store metadata or other similar\n        # information; these continue to use either the stack or the\n        # regular runtime memory allocator. This tier should be sized\n        # on each machine such that there is sufficient RAM left over\n        # to handle this overhead, as well as the needs of other\n        # processes running on the same machine.\n        ramTier:\n          # The RAM Tier represents the RAM available for data storage\n          # per rank. The RAM Tier is NOT used for small, non-data\n          # objects or variables that are allocated and deallocated for\n          # program flow control or used to store metadata or other\n          # similar information; these continue to use either the stack\n          # or the regular runtime memory allocator. This tier should\n          # be sized on each machine such that there is sufficient RAM\n          # left over to handle this overhead, as well as the needs of\n          # other processes running on the same machine. A default\n          # memory limit and eviction thresholds can be set across all\n          # ranks, while one or more ranks may be configured to\n          # override those defaults. The general format for RAM\n          # settings: \n          #  # tier.ram.[default|rank&lt;#&gt;].&lt;parameter&gt; Valid *parameter*\n          #    names include: \n          #  * 'limit'          : The maximum RAM (bytes) per rank that\n          #     can be allocated across all resource groups.  Default\n          #     is -1, signifying no limit and ignore watermark\n          #     settings. * 'high_watermark' : RAM percentage used\n          #     eviction threshold.  Once memory usage exceeds this\n          #     value, evictions from this tier will be scheduled in\n          #     the background and continue until the 'low_watermark'\n          #     percentage usage is reached.  Default is \"90\",\n          #     signifying a 90% memory usage\n          #     threshold. * 'low_watermark'  : RAM percentage used\n          #     recovery threshold.  Once memory usage exceeds\n          #     the 'high_watermark', evictions will continue until\n          #     memory usage falls below this recovery threshold.\n          #     Default is \"50\", signifying a 50% memory usage\n          #     threshold.\n          default:\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n          # The maximum RAM (bytes) for processing data at rank 0.\n          # Overrides the overall default RAM tier\n          # limit. #tier.ram.rank0.limit = -1\n          ranks:\n          - highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string tieredStrategy:\n        # Default strategy to apply to tables or columns when one was\n        # not provided during table creation. This strategy is also\n        # applied to a resource group that does not specify one at time\n        # of creation. The strategy is formed by chaining together the\n        # tier types and their respective eviction priorities. Any\n        # given tier may appear no more than once in the chain and the\n        # priority must be in range \"1\" - \"10\", where \"1\" is the lowest\n        # priority (first to be evicted) and \"9\" is the highest\n        # priority (last to be evicted).  A priority of \"10\" indicates\n        # that an object is unevictable. Each tier's priority is in\n        # relation to the priority of other objects in the same tier;\n        # e.g., \"RAM 9, DISK2 1\" indicates that an object will be the\n        # highest evictable priority among objects in the RAM Tier\n        # (last evicted), but that it will be the lowest priority among\n        # objects in the Disk Tier named 'disk2' (first evicted).  Note\n        # that since an object can only have one Disk Tier instance in\n        # its strategy, the corresponding priority will only apply in\n        # relation to other objects in Disk Tier instance 'disk2'. See\n        # the Tiered Storage section for more information about tier\n        # type names. Format: &lt;tier1&gt; &lt;priority&gt;, &lt;tier2&gt; &lt;priority&gt;,\n        # &lt;tier3&gt; &lt;priority&gt;, ... Examples using a Disk Tier\n        # named 'disk2' and a Cold Storage Tier 'cold0': vram 3, ram 5,\n        # disk2 3, persist 10 vram 3, ram 5, disk2 3, persist 6, cold0\n        # 10 tier_strategy.default = VRAM 1, RAM 5, PERSIST 5\n        default: \"VRAM 1, RAM 5, PERSIST 5\"\n        # Predicate evaluation interval (in minutes) -  indicates the\n        # interval at which the tier strategy predicates are evaluated\n        predicateEvaluationInterval: 60 video:\n        # System default TTL for videos. Time-to-live (TTL) is the\n        # number of minutes before a video will expire and be removed,\n        # or -1 to disable. video_default_ttl = -1\n        defaultTTL: \"-1\"\n        # The maximum number of videos to allow on the system. Set to 0\n        # to disable video rendering.  Set to -1 to allow an unlimited\n        # number of videos. video_max_count = -1\n        maxCount: \"-1\"\n        # Directory where video files should be temporarily stored while\n        # rendering. Only accessed by rank 0. video_temp_directory = $\n        # {gaia.temp_directory}/gpudb-temp-videos\n        tmpDir: \"${gaia.temp_directory}/gpudb-temp-videos\"\n      # VisualizationConfig\n      visualization:\n        # Enable level-of-details rendering for fast interaction with\n        # large WKT polygon data.  Only available for the OpenGL\n        # renderer (when 'enable_opengl_renderer' is \"true\").\n        enableLODRendering: true\n        # If \"true\", enable hardware-accelerated OpenGL renderer;\n        # if \"false\", use the software-based Cairo renderer.\n        enableOpenGLRenderer: true\n        # If \"true\", enable Vector Tile Service (VTS) to support\n        # client-side visualization of geospatial data. Enabling this\n        # option increases memory usage on ingestion.\n        enableVectorTileService: false\n        # Longitude and latitude ranges of geospatial data for which\n        # level-of-details representations are being generated. The\n        # parameter order is: &lt;min_longitude&gt; &lt;min_latitude&gt;\n        # &lt;max_longitude&gt; &lt;max_latitude&gt; The default values span over\n        # the world, but the level-of-details rendering becomes more\n        # efficient when the precise extent of geospatial data is\n        # specified. kubebuilder:default:={ -180, -90, 180, 90 }\n        lodDataExtent: [integer]\n        # The extent to which shape data are pre-processed for\n        # level-of-details rendering during data insert/load or\n        # processed on-the-fly in rendering time. This is a trade-off\n        # between speed and memory. The higher the value, the faster\n        # level-of-details rendering is, but the more memory is used\n        # for storing processed shape data. The maximum level is \"10\"\n        # (most shape data are pre-processed) and the minimum level\n        # is \"0\".\n        lodPreProcessingLevel: 5\n        # The number of subregions in horizontal and vertical geospatial\n        # data extent. The default values of \"12 6\" divide the world\n        # into subregions of 30 degree (lon.) x 30 degree (lat.)\n        lodSubRegionNum: [12,6]\n        # A base image resolution (width and height in pixels) at which\n        # a subregion would be rendered in a global view spanning over\n        # the whole dataset. Based on this resolution level-of-details\n        # representations are generated for the polygons located in the\n        # subregion.\n        lodSubRegionResolution: [512,512]\n        # Maximum heatmap size (in pixels) that can be generated. This\n        # reserves 'max_heatmap_size' ^ 2 * 8 bytes of GPU memory\n        # at **rank0**\n        maxHeatmapSize: 3072\n        # The maximum number of levels in the level-of-details\n        # rendering. As the number increases, level-of-details\n        # rendering becomes effective at higher zoom levels, but it may\n        # increase memory usage for storing level-of-details\n        # representations.\n        maxLODLevel: 8\n        # Input geometries are pre-processed upon ingestion for faster\n        # vector tile generation. This parameter determines the\n        # zoomlevel at which the vector tile pre-processing stops. A\n        # vector tile request for a higher zoomlevel than this\n        # parameter takes additional time because the vector tile needs\n        # to be generated on the fly.\n        maxVectorTileZoomLevel: 8\n        # Input geometries are pre-processed upon ingestion for faster\n        # vector tile generation. This parameter determines the\n        # zoomlevel from which the vector tile pre-processing starts. A\n        # vector tile request for a lower zoomlevel than this parameter\n        # takes additional time because the vector tile needs to be\n        # generated on the fly.\n        minVectorTileZoomLevel: 1\n        # The number of samples to use for antialiasing. Higher numbers\n        # will improve image quality but require more GPU memory to\n        # store the samples on worker ranks.  This affects only the\n        # OpenGL renderer. Value may be \"0\", \"4\", \"8\" or \"16\". When \"0\"\n        # antialiasing is disabled. The default value is \"0\".\n        openGLAntialiasingLevel: 1\n        # Threshold number of points (per-TOM) at which point rendering\n        # switches to fast mode.\n        pointRenderThreshold: 100000\n        # Single-precision coordinates are used for usual rendering\n        # processes, but depending on the precision of geometry data\n        # and use case, double precision processing may be required at\n        # a high zoomlevel. Double precision rendering processes are\n        # used from the zoomlevel specified by this parameter, which is\n        # corresponding to a zoomlevel of TMS or Google map service.\n        renderingPrecisionThreshold: 30\n        # The image width/height (in pixels) of svg symbols cached in\n        # the OpenGL symbol cache.\n        symbolResolution: 100\n        # The width/height (in pixels) of an OpenGL texture which caches\n        # symbol images for OpenGL rendering.\n        symbolTextureSize: 4000\n        # Threshold for the number of points (per-TOM) after which\n        # symbology rendering falls back to regular rendering\n        symbologyRenderThreshold: 10000\n        # The name of map tiler used for Vector Tile Service. \"google\"\n        # and \"tms\" map tilers are supported currently. This parameter\n        # should be matched with the map tiler of clients' vector tile\n        # renderer.\n        vectorTileMapTiler: \"google\" workbench:\n        # Start the Workbench app on the head host when host manager is\n        # started. enable_workbench = false\n        enable: false\n        # # HTTP server port for Workbench if enabled. workbench_port =\n        #   8000\n        port:\n          # Number of port to expose on the pod's IP address. This must\n          # be a valid port number, 0 &lt; x &lt; 65536.\n          containerPort: 1\n          # What host IP to bind the external port to.\n          hostIP: string\n          # Number of port to expose on the host. If specified, this\n          # must be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork\n          # is specified, this must match ContainerPort. Most\n          # containers do not need this.\n          hostPort: 1\n          # If specified, this must be an IANA_SVC_NAME and unique\n          # within the pod. Each named port in a pod must have a unique\n          # name. Name for the port that can be referred to by\n          # services.\n          name: string\n          # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n          # to \"TCP\".\n          protocol: \"TCP\"\n    # The fully qualified URL used on the Ingress records for any\n    # exposed services. Completed buy yth Operator. DO NOT POPULATE\n    # MANUALLY.\n    fqdn: \"\"\n    # The name of the parent HA Ring this cluster belongs to.\n    haRingName: \"default\"\n    # Whether to enable the separate node 'pools' for \"infra\", \"compute\"\n    # pod scheduling. Default: false\n    hasPools: true\n    # The port the HostManager will be running in each pod in the\n    # cluster. Default: 9300, TCP\n    hostManagerPort:\n      # Number of port to expose on the pod's IP address. This must be a\n      # valid port number, 0 &lt; x &lt; 65536.\n      containerPort: 1\n      # What host IP to bind the external port to.\n      hostIP: string\n      # Number of port to expose on the host. If specified, this must be\n      # a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n      # specified, this must match ContainerPort. Most containers do\n      # not need this.\n      hostPort: 1\n      # If specified, this must be an IANA_SVC_NAME and unique within\n      # the pod. Each named port in a pod must have a unique name. Name\n      # for the port that can be referred to by services.\n      name: string\n      # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n      # to \"TCP\".\n      protocol: \"TCP\"\n    # Set the name of the container image to use.\n    image: \"kinetica/kinetica-k8s-intel:v7.1.6.0\"\n    # Set the policy for pulling container images.\n    imagePullPolicy: \"IfNotPresent\"\n    # ImagePullSecrets is an optional list of references to secrets in\n    # the same gpudb-namespace to use for pulling any of the images\n    # used by this PodSpec. If specified, these secrets will be passed\n    # to individual puller implementations for them to use. For\n    # example, in the case of docker, only DockerConfig type secrets\n    # are honored.\n    imagePullSecrets:\n    - name: string\n    # Labels - Pod labels to be applied to the Statefulset DB pods.\n    labels: {}\n    # The Ingress Endpoint that GAdmin will be running on.\n    letsEncrypt:\n      # Enable LetsEncrypt for Certificate generation.\n      enabled: false\n      # LetsEncryptEnvironment\n      environment: \"staging\"\n    # Set the Kinetica DB License.\n    license: string\n    # Periodic probe of container liveness. Container will be restarted\n    # if the probe fails. Cannot be updated. More info:\n    # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n    livenessProbe:\n      # Minimum consecutive failures for the probe to be considered\n      # failed after having succeeded. Defaults to 3. Minimum value is\n      # 1.\n      failureThreshold: 3\n      # Number of seconds after the container has started before\n      # liveness probes are initiated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      initialDelaySeconds: 10\n      # How often (in seconds) to perform the probe. Default to 10\n      # seconds. Minimum value is 1.\n      periodSeconds: 10\n    # LoggerConfig Kinetica DB Logger Configuration Object Configure the\n    # LOG4CPLUS logger for the DB. Field takes a string containing the\n    # full configuration. If not specified a template file is used\n    # during DB configuration generation.\n    loggerConfig: configString: string\n    # Metrics - DB Metrics scrape &amp; forward configuration for\n    # `fluent-bit`.\n    metricsRegistryRepositoryTag:\n      # Set the policy for pulling container images.\n      imagePullPolicy: \"IfNotPresent\"\n      # ImagePullSecrets is an optional list of references to secrets in\n      # the same gpudb-namespace to use for pulling any of the images\n      # used by this PodSpec. If specified, these secrets will be\n      # passed to individual puller implementations for them to use.\n      # For example, in the case of docker, only DockerConfig type\n      # secrets are honored.\n      imagePullSecrets:\n      - name: string\n      # The image registry &amp; optional port containing the repository.\n      registry: \"docker.io\"\n      # The image repository path.\n      repository: \"kineticadevcloud/\"\n      # SemVer = Semantic Version for the Tag SemVer semver.Version\n      semVer: string\n      # The image sha.\n      sha: \"\"\n      # The image tag.\n      tag: \"v7.1.5.2\"\n    # Metrics - `fluent-bit` container requests/limits.\n    metricsResources:\n      # Claims lists the names of resources, defined in\n      # spec.resourceClaims, that are used by this container. This is\n      # an alpha field and requires enabling the\n      # DynamicResourceAllocation feature gate. This field is\n      # immutable. It can only be set for containers.\n      claims:\n      - name: string\n      # Limits describes the maximum amount of compute resources\n      # allowed. More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      limits: {}\n      # Requests describes the minimum amount of compute resources\n      # required. If Requests is omitted for a container, it defaults\n      # to Limits if that is explicitly specified, otherwise to an\n      # implementation-defined value. Requests cannot exceed Limits.\n      # More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      requests: {}\n    # NodeSelector - NodeSelector to be applied to the DB Pods\n    nodeSelector: {}\n    # Do not use internal Operator field only.\n    originalReplicas: 1\n    # podManagementPolicy controls how pods are created during initial\n    # scale up, when replacing pods on nodes, or when scaling down. The\n    # default policy is `OrderedReady`, where pods are created in\n    # increasing order (pod-0, then pod-1, etc) and the controller will\n    # wait until each pod is ready before continuing. When scaling\n    # down, the pods are removed in the opposite order. The alternative\n    # policy is `Parallel` which will create pods in parallel to match\n    # the desired scale without waiting, and on scale down will delete\n    # all pods at once.\n    podManagementPolicy: \"Parallel\"\n    # Number of ranks per node as a uint16 i.e. 1-65535 ranks per node.\n    # Default: 1\n    ranksPerNode: 1\n    # Periodic probe of container service readiness. Container will be\n    # removed from service endpoints if the probe fails. Cannot be\n    # updated. More info:\n    # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n    readinessProbe:\n      # Minimum consecutive failures for the probe to be considered\n      # failed after having succeeded. Defaults to 3. Minimum value is\n      # 1.\n      failureThreshold: 3\n      # Number of seconds after the container has started before\n      # liveness probes are initiated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      initialDelaySeconds: 10\n      # How often (in seconds) to perform the probe. Default to 10\n      # seconds. Minimum value is 1.\n      periodSeconds: 10\n    # The number of DB ranks i.e. replicas that the cluster will spin\n    # up. Default: 3\n    replicas: 3\n    # Limit the resources a DB Pod can consume.\n    resources:\n      # Claims lists the names of resources, defined in\n      # spec.resourceClaims, that are used by this container. This is\n      # an alpha field and requires enabling the\n      # DynamicResourceAllocation feature gate. This field is\n      # immutable. It can only be set for containers.\n      claims:\n      - name: string\n      # Limits describes the maximum amount of compute resources\n      # allowed. More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      limits: {}\n      # Requests describes the minimum amount of compute resources\n      # required. If Requests is omitted for a container, it defaults\n      # to Limits if that is explicitly specified, otherwise to an\n      # implementation-defined value. Requests cannot exceed Limits.\n      # More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      requests: {}\n    # SecurityContext holds security configuration that will be applied\n    # to a container. Some fields are present in both SecurityContext\n    # and PodSecurityContext.  When both are set, the values in\n    # SecurityContext take precedence.\n    securityContext:\n      # AllowPrivilegeEscalation controls whether a process can gain\n      # more privileges than its parent process. This bool directly\n      # controls if the no_new_privs flag will be set on the container\n      # process. AllowPrivilegeEscalation is true always when the\n      # container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note\n      # that this field cannot be set when spec.os.name is windows.\n      allowPrivilegeEscalation: true\n      # The capabilities to add/drop when running containers. Defaults\n      # to the default set of capabilities granted by the container\n      # runtime. Note that this field cannot be set when spec.os.name\n      # is windows.\n      capabilities:\n        # Added capabilities\n        add: [\"string\"]\n        # Removed capabilities\n        drop: [\"string\"]\n      # Run container in privileged mode. Processes in privileged\n      # containers are essentially equivalent to root on the host.\n      # Defaults to false. Note that this field cannot be set when\n      # spec.os.name is windows.\n      privileged: true\n      # procMount denotes the type of proc mount to use for the\n      # containers. The default is DefaultProcMount which uses the\n      # container runtime defaults for readonly paths and masked paths.\n      # This requires the ProcMountType feature flag to be enabled.\n      # Note that this field cannot be set when spec.os.name is\n      # windows.\n      procMount: string\n      # Whether this container has a read-only root filesystem. Default\n      # is false. Note that this field cannot be set when spec.os.name\n      # is windows.\n      readOnlyRootFilesystem: true\n      # The GID to run the entrypoint of the container process. Uses\n      # runtime default if unset. May also be set in\n      # PodSecurityContext.  If set in both SecurityContext and\n      # PodSecurityContext, the value specified in SecurityContext\n      # takes precedence. Note that this field cannot be set when\n      # spec.os.name is windows.\n      runAsGroup: 1\n      # Indicates that the container must run as a non-root user. If\n      # true, the Kubelet will validate the image at runtime to ensure\n      # that it does not run as UID 0 (root) and fail to start the\n      # container if it does. If unset or false, no such validation\n      # will be performed. May also be set in PodSecurityContext.  If\n      # set in both SecurityContext and PodSecurityContext, the value\n      # specified in SecurityContext takes precedence.\n      runAsNonRoot: true\n      # The UID to run the entrypoint of the container process. Defaults\n      # to user specified in image metadata if unspecified. May also be\n      # set in PodSecurityContext.  If set in both SecurityContext and\n      # PodSecurityContext, the value specified in SecurityContext\n      # takes precedence. Note that this field cannot be set when\n      # spec.os.name is windows.\n      runAsUser: 1\n      # The SELinux context to be applied to the container. If\n      # unspecified, the container runtime will allocate a random\n      # SELinux context for each container.  May also be set in\n      # PodSecurityContext.  If set in both SecurityContext and\n      # PodSecurityContext, the value specified in SecurityContext\n      # takes precedence. Note that this field cannot be set when\n      # spec.os.name is windows.\n      seLinuxOptions:\n        # Level is SELinux level label that applies to the container.\n        level: string\n        # Role is a SELinux role label that applies to the container.\n        role: string\n        # Type is a SELinux type label that applies to the container.\n        type: string\n        # User is a SELinux user label that applies to the container.\n        user: string\n      # The seccomp options to use by this container. If seccomp options\n      # are provided at both the pod &amp; container level, the container\n      # options override the pod options. Note that this field cannot\n      # be set when spec.os.name is windows.\n      seccompProfile:\n        # localhostProfile indicates a profile defined in a file on the\n        # node should be used. The profile must be preconfigured on the\n        # node to work. Must be a descending path, relative to the\n        # kubelet's configured seccomp profile location. Must only be\n        # set if type is \"Localhost\".\n        localhostProfile: string\n        # type indicates which kind of seccomp profile will be applied.\n        # Valid options are: Localhost - a profile defined in a file on\n        # the node should be used. RuntimeDefault - the container\n        # runtime default profile should be used. Unconfined - no\n        # profile should be applied.\n        type: string\n      # The Windows specific settings applied to all containers. If\n      # unspecified, the options from the PodSecurityContext will be\n      # used. If set in both SecurityContext and PodSecurityContext,\n      # the value specified in SecurityContext takes precedence. Note\n      # that this field cannot be set when spec.os.name is linux.\n      windowsOptions:\n        # GMSACredentialSpec is where the GMSA admission webhook\n        # (https://github.com/kubernetes-sigs/windows-gmsa) inlines the\n        # contents of the GMSA credential spec named by the\n        # GMSACredentialSpecName field.\n        gmsaCredentialSpec: string\n        # GMSACredentialSpecName is the name of the GMSA credential spec\n        # to use.\n        gmsaCredentialSpecName: string\n        # HostProcess determines if a container should be run as a 'Host\n        # Process' container. This field is alpha-level and will only\n        # be honored by components that enable the\n        # WindowsHostProcessContainers feature flag. Setting this field\n        # without the feature flag will result in errors when\n        # validating the Pod. All of a Pod's containers must have the\n        # same effective HostProcess value (it is not allowed to have a\n        # mix of HostProcess containers and non-HostProcess\n        # containers).  In addition, if HostProcess is true then\n        # HostNetwork must also be set to true.\n        hostProcess: true\n        # The UserName in Windows to run the entrypoint of the container\n        # process. Defaults to the user specified in image metadata if\n        # unspecified. May also be set in PodSecurityContext. If set in\n        # both SecurityContext and PodSecurityContext, the value\n        # specified in SecurityContext takes precedence.\n        runAsUserName: string\n    # StartupProbe indicates that the Pod has successfully initialized.\n    # If specified, no other probes are executed until this completes\n    # successfully. If this probe fails, the Pod will be restarted,\n    # just as if the livenessProbe failed. This can be used to provide\n    # different probe parameters at the beginning of a Pod's lifecycle,\n    # when it might take a long time to load data or warm a cache, than\n    # during steady-state operation. This cannot be updated. This is an\n    # alpha feature enabled by the StartupProbe feature flag. More\n    # info:\n    # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n    startupProbe:\n      # Minimum consecutive failures for the probe to be considered\n      # failed after having succeeded. Defaults to 3. Minimum value is\n      # 1.\n      failureThreshold: 3\n      # Number of seconds after the container has started before\n      # liveness probes are initiated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      initialDelaySeconds: 10\n      # How often (in seconds) to perform the probe. Default to 10\n      # seconds. Minimum value is 1.\n      periodSeconds: 10\n  # HostManagerMonitor is used to monitor the Kinetica DB Ranks. If a\n  # rank is unavailable for the specified time(MaxRankFailureCount) the\n  # cluster will be restarted.\n  hostManagerMonitor:\n    # The HostMonitor Port for the DB StartupProbe, ReadinessProbe and\n    # Liveness probes. Default: 8888\n    db_healthz_port:\n      # Number of port to expose on the pod's IP address. This must be a\n      # valid port number, 0 &lt; x &lt; 65536.\n      containerPort: 1\n      # What host IP to bind the external port to.\n      hostIP: string\n      # Number of port to expose on the host. If specified, this must be\n      # a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n      # specified, this must match ContainerPort. Most containers do\n      # not need this.\n      hostPort: 1\n      # If specified, this must be an IANA_SVC_NAME and unique within\n      # the pod. Each named port in a pod must have a unique name. Name\n      # for the port that can be referred to by services.\n      name: string\n      # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n      # to \"TCP\".\n      protocol: \"TCP\"\n    # The HostMonitor Port for the DB StartupProbe, ReadinessProbe and\n    # Liveness probes. Default: 8889\n    hm_healthz_port:\n      # Number of port to expose on the pod's IP address. This must be a\n      # valid port number, 0 &lt; x &lt; 65536.\n      containerPort: 1\n      # What host IP to bind the external port to.\n      hostIP: string\n      # Number of port to expose on the host. If specified, this must be\n      # a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n      # specified, this must match ContainerPort. Most containers do\n      # not need this.\n      hostPort: 1\n      # If specified, this must be an IANA_SVC_NAME and unique within\n      # the pod. Each named port in a pod must have a unique name. Name\n      # for the port that can be referred to by services.\n      name: string\n      # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n      # to \"TCP\".\n      protocol: \"TCP\"\n    # Periodic probe of container liveness. Container will be restarted\n    # if the probe fails. Cannot be updated. More info:\n    # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n    livenessProbe:\n      # Minimum consecutive failures for the probe to be considered\n      # failed after having succeeded. Defaults to 3. Minimum value is\n      # 1.\n      failureThreshold: 3\n      # Number of seconds after the container has started before\n      # liveness probes are initiated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      initialDelaySeconds: 10\n      # How often (in seconds) to perform the probe. Default to 10\n      # seconds. Minimum value is 1.\n      periodSeconds: 10\n    # Set the name of the container image to use.\n    monitorRegistryRepositoryTag:\n      # Set the policy for pulling container images.\n      imagePullPolicy: \"IfNotPresent\"\n      # ImagePullSecrets is an optional list of references to secrets in\n      # the same gpudb-namespace to use for pulling any of the images\n      # used by this PodSpec. If specified, these secrets will be\n      # passed to individual puller implementations for them to use.\n      # For example, in the case of docker, only DockerConfig type\n      # secrets are honored.\n      imagePullSecrets:\n      - name: string\n      # The image registry &amp; optional port containing the repository.\n      registry: \"docker.io\"\n      # The image repository path.\n      repository: \"kineticadevcloud/\"\n      # SemVer = Semantic Version for the Tag SemVer semver.Version\n      semVer: string\n      # The image sha.\n      sha: \"\"\n      # The image tag.\n      tag: \"v7.1.5.2\"\n    # Periodic probe of container service readiness. Container will be\n    # removed from service endpoints if the probe fails. Cannot be\n    # updated. More info:\n    # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n    readinessProbe:\n      # Minimum consecutive failures for the probe to be considered\n      # failed after having succeeded. Defaults to 3. Minimum value is\n      # 1.\n      failureThreshold: 3\n      # Number of seconds after the container has started before\n      # liveness probes are initiated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      initialDelaySeconds: 10\n      # How often (in seconds) to perform the probe. Default to 10\n      # seconds. Minimum value is 1.\n      periodSeconds: 10\n    # Allow for overriding resource requests/limits.\n    resources:\n      # Claims lists the names of resources, defined in\n      # spec.resourceClaims, that are used by this container. This is\n      # an alpha field and requires enabling the\n      # DynamicResourceAllocation feature gate. This field is\n      # immutable. It can only be set for containers.\n      claims:\n      - name: string\n      # Limits describes the maximum amount of compute resources\n      # allowed. More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      limits: {}\n      # Requests describes the minimum amount of compute resources\n      # required. If Requests is omitted for a container, it defaults\n      # to Limits if that is explicitly specified, otherwise to an\n      # implementation-defined value. Requests cannot exceed Limits.\n      # More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      requests: {}\n    # StartupProbe indicates that the Pod has successfully initialized.\n    # If specified, no other probes are executed until this completes\n    # successfully. If this probe fails, the Pod will be restarted,\n    # just as if the livenessProbe failed. This can be used to provide\n    # different probe parameters at the beginning of a Pod's lifecycle,\n    # when it might take a long time to load data or warm a cache, than\n    # during steady-state operation. This cannot be updated. This is an\n    # alpha feature enabled by the StartupProbe feature flag. More\n    # info:\n    # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n    startupProbe:\n      # Minimum consecutive failures for the probe to be considered\n      # failed after having succeeded. Defaults to 3. Minimum value is\n      # 1.\n      failureThreshold: 3\n      # Number of seconds after the container has started before\n      # liveness probes are initiated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      initialDelaySeconds: 10\n      # How often (in seconds) to perform the probe. Default to 10\n      # seconds. Minimum value is 1.\n      periodSeconds: 10\n  # The platform infrastructure provider e.g. azure, aws, gcp, on-prem\n  # etc.\n  infra: \"on-prem\"\n  # The Kubernetes Ingress Controller will be running on e.g.\n  # ingress-nginx, Traefik, Ambassador, Gloo, Kong etc.\n  ingressController: \"nginx\"\n  # The LDAP server to connect to.\n  ldap:\n    # BaseDN - The root base LDAP Distinguished Name to use as the base\n    # for the LDAP usage\n    baseDN: \"dc=kinetica,dc=com\"\n    # BindDN - The LDAP Distinguished Name to use for the LDAP\n    # connectivity/data connectivity/bind\n    bindDN: \"cn=admin,dc=kinetica,dc=com\"\n    # Host - The name of the host to connect to. If IsInLocalK8S=true\n    # then supply only the name e.g. `openldap` Default: openldap\n    host: \"openldap\"\n    # IsInLocalK8S - Is the LDAP server co-located in the same K8s\n    # cluster the operator is running in. Default: true\n    isInLocalK8S: true\n    # IsLDAPS - IUse LDAPS instead of LDAP Default: false\n    isLDAPS: false\n    # Namespace - The namespace the Default: openldap\n    namespace: \"gpudb\"\n    # Port - Defaults to LDAP Port 389 Default: 389\n    port: 389\n  # Tells the operator to use Cloud Provider Pay As You Go\n  # functionality.\n  payAsYouGo: false\n  # The Reveal Dashboard Configuration for the Kinetica Cluster.\n  reveal:\n    # The port that Reveal will be running on. It runs only on the head\n    # node pod in the cluster. Default: 8080\n    containerPort:\n      # Number of port to expose on the pod's IP address. This must be a\n      # valid port number, 0 &lt; x &lt; 65536.\n      containerPort: 1\n      # What host IP to bind the external port to.\n      hostIP: string\n      # Number of port to expose on the host. If specified, this must be\n      # a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n      # specified, this must match ContainerPort. Most containers do\n      # not need this.\n      hostPort: 1\n      # If specified, this must be an IANA_SVC_NAME and unique within\n      # the pod. Each named port in a pod must have a unique name. Name\n      # for the port that can be referred to by services.\n      name: string\n      # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n      # to \"TCP\".\n      protocol: \"TCP\"\n    # The Ingress Endpoint that Reveal will be running on.\n    ingressPath:\n      # backend defines the referenced service endpoint to which the\n      # traffic will be forwarded to.\n      backend:\n        # resource is an ObjectRef to another Kubernetes resource in the\n        # namespace of the Ingress object. If resource is specified,\n        # serviceName and servicePort must not be specified.\n        resource:\n          # APIGroup is the group for the resource being referenced. If\n          # APIGroup is not specified, the specified Kind must be in\n          # the core API group. For any other third-party types,\n          # APIGroup is required.\n          apiGroup: string\n          # Kind is the type of resource being referenced\n          kind: KineticaCluster\n          # Name is the name of resource being referenced\n          name: string\n        # serviceName specifies the name of the referenced service.\n        serviceName: string\n        # servicePort Specifies the port of the referenced service.\n        servicePort: \n      # path is matched against the path of an incoming request.\n      # Currently it can contain characters disallowed from the\n      # conventional \"path\" part of a URL as defined by RFC 3986. Paths\n      # must begin with a '/' and must be present when using PathType\n      # with value \"Exact\" or \"Prefix\".\n      path: string\n      # pathType determines the interpretation of the path matching.\n      # PathType can be one of the following values: * Exact: Matches\n      # the URL path exactly. * Prefix: Matches based on a URL path\n      # prefix split by '/'. Matching is done on a path element by\n      # element basis. A path element refers is the list of labels in\n      # the path split by the '/' separator. A request is a match for\n      # path p if every p is an element-wise prefix of p of the request\n      # path. Note that if the last element of the path is a substring\n      # of the last element in request path, it is not a match\n      # (e.g. /foo/bar matches /foo/bar/baz, but does not\n      # match /foo/barbaz). * ImplementationSpecific: Interpretation of\n      # the Path matching is up to the IngressClass. Implementations\n      # can treat this as a separate PathType or treat it identically\n      # to Prefix or Exact path types. Implementations are required to\n      # support all path types. Defaults to ImplementationSpecific.\n      pathType: string\n    # Whether to enable the Reveal Dashboard on the Cluster. Default:\n    # true\n    isEnabled: true\n  # The Stats server to deploy &amp; connect to if required.\n  stats:\n    # AlertManager - AlertManager specific configuration.\n    alertManager:\n      # Set the arguments for the command within the container to run.\n      args:\n      [\"-c\",\"/opt/gpudb/kagent/stats/prometheus/prometheus --log.level=debug\n      --config.file=/opt/gpudb/kagent/stats/prometheus/prometheus.yml --web.listen-address=0.0.0.0:9090\n      --storage.tsdb.path=/opt/gpudb/kagent/stats/storage/prometheus-storage\n      --storage.tsdb.retention.time=7d  --web.enable-lifecycle\"]\n      # Set the command within the container to run.\n      command: [\"/bin/sh\"]\n      # ConfigFile - Set the location of the Loki configuration file.\n      configFile: \"/opt/gpudb/kagent/stats/loki/loki.yml\"\n      # ConfigFileAsConfigMap - If true the ConfigFile is mounted from a\n      # ConfigMap\n      configFileAsConfigMap: true\n      # The port that Stats will be running on. It runs only on the head\n      # node pod in the cluster. Default: 9091\n      containerPort:\n        # Number of port to expose on the pod's IP address. This must be\n        # a valid port number, 0 &lt; x &lt; 65536.\n        containerPort: 1\n        # What host IP to bind the external port to.\n        hostIP: string\n        # Number of port to expose on the host. If specified, this must\n        # be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n        # specified, this must match ContainerPort. Most containers do\n        # not need this.\n        hostPort: 1\n        # If specified, this must be an IANA_SVC_NAME and unique within\n        # the pod. Each named port in a pod must have a unique name.\n        # Name for the port that can be referred to by services.\n        name: string\n        # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n        # to \"TCP\".\n        protocol: \"TCP\"\n      # List of environment variables to set in the container.\n      env:\n      - name: string\n        # Variable references $(VAR_NAME) are expanded using the\n        # previously defined environment variables in the container and\n        # any service environment variables. If a variable cannot be\n        # resolved, the reference in the input string will be\n        # unchanged. Double $$ are reduced to a single $, which allows\n        # for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will\n        # produce the string literal \"$(VAR_NAME)\". Escaped references\n        # will never be expanded, regardless of whether the variable\n        # exists or not. Defaults to \"\".\n        value: string\n        # Source for the environment variable's value. Cannot be used if\n        # value is not empty.\n        valueFrom:\n          # Selects a key of a ConfigMap.\n          configMapKeyRef:\n            # The key to select.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the ConfigMap or its key must be defined\n            optional: true\n          # Selects a field of the pod: supports metadata.name,\n          # metadata.namespace, `metadata.labels\n          # ['&lt;KEY&gt;']`, `metadata.annotations['&lt;KEY&gt;']`, spec.nodeName,\n          # spec.serviceAccountName, status.hostIP, status.podIP,\n          # status.podIPs.\n          fieldRef:\n            # Version of the schema the FieldPath is written in terms\n            # of, defaults to \"v1\".\n            apiVersion: app.kinetica.com/v1\n            # Path of the field to select in the specified API version.\n            fieldPath: string\n          # Selects a resource of the container: only resources limits\n          # and requests (limits.cpu, limits.memory,\n          # limits.ephemeral-storage, requests.cpu, requests.memory and\n          # requests.ephemeral-storage) are currently supported.\n          resourceFieldRef:\n            # Container name: required for volumes, optional for env\n            # vars\n            containerName: string\n            # Specifies the output format of the exposed resources,\n            # defaults to \"1\"\n            divisor: \n            # Required: resource to select\n            resource: string\n          # Selects a key of a secret in the pod's namespace\n          secretKeyRef:\n            # The key of the secret to select from.  Must be a valid\n            # secret key.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the Secret or its key must be defined\n            optional: true\n      # Set the name of the container image to use.\n      image:\n        # Set the policy for pulling container images.\n        imagePullPolicy: \"IfNotPresent\"\n        # ImagePullSecrets is an optional list of references to secrets\n        # in the same gpudb-namespace to use for pulling any of the\n        # images used by this PodSpec. If specified, these secrets will\n        # be passed to individual puller implementations for them to\n        # use. For example, in the case of docker, only DockerConfig\n        # type secrets are honored.\n        imagePullSecrets:\n        - name: string\n        # The image registry &amp; optional port containing the repository.\n        registry: \"docker.io\"\n        # The image repository path.\n        repository: \"kineticadevcloud/\"\n        # SemVer = Semantic Version for the Tag SemVer semver.Version\n        semVer: string\n        # The image sha.\n        sha: \"\"\n        # The image tag.\n        tag: \"v7.1.5.2\"\n      # Whether to enable the Stats Server on the Cluster. Default:\n      # true\n      isEnabled: true\n      # Periodic probe of container liveness. Container will be\n      # restarted if the probe fails. Cannot be updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      livenessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Logs - Set the location of the Loki configuration file.\n      logs: \"/opt/gpudb/kagent/stats/logs\" name: \"stats\"\n      # Periodic probe of container service readiness. Container will be\n      # removed from service endpoints if the probe fails. Cannot be\n      # updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      readinessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Resource Requests &amp; Limits for the Stats Pod.\n      resources:\n        # Claims lists the names of resources, defined in\n        # spec.resourceClaims, that are used by this container. This is\n        # an alpha field and requires enabling the\n        # DynamicResourceAllocation feature gate. This field is\n        # immutable. It can only be set for containers.\n        claims:\n        - name: string\n        # Limits describes the maximum amount of compute resources\n        # allowed. More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        limits: {}\n        # Requests describes the minimum amount of compute resources\n        # required. If Requests is omitted for a container, it defaults\n        # to Limits if that is explicitly specified, otherwise to an\n        # implementation-defined value. Requests cannot exceed Limits.\n        # More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        requests: {}\n      # StoragePath - Set the location of the AlertManager file\n      # storage.\n      storagePath: \"/opt/gpudb/kagent/stats/storage/alertmanager/alertmanager\"\n      # WebConfigFile - Set the location of the AlertManager\n      # alertmanager-web-config.yml.\n      webConfigFile: \"/opt/gpudb/kagent/stats/alertmanager/alertmanager-web-config.yml\"\n      # WebListenAddress - Set the location of the AlertManager\n      # alertmanager-web-config.yml.\n      webListenAddress: \"0.0.0.0:9089\"\n    # Grafana - Grafana specific configuration.\n    grafana:\n      # Set the arguments for the command within the container to run.\n      args:\n      [\"-c\",\"/opt/gpudb/kagent/stats/prometheus/prometheus --log.level=debug\n      --config.file=/opt/gpudb/kagent/stats/prometheus/prometheus.yml --web.listen-address=0.0.0.0:9090\n      --storage.tsdb.path=/opt/gpudb/kagent/stats/storage/prometheus-storage\n      --storage.tsdb.retention.time=7d  --web.enable-lifecycle\"]\n      # Set the command within the container to run.\n      command: [\"/bin/sh\"]\n      # ConfigFile - Set the location of the Loki configuration file.\n      configFile: \"/opt/gpudb/kagent/stats/loki/loki.yml\"\n      # ConfigFileAsConfigMap - If true the ConfigFile is mounted from a\n      # ConfigMap\n      configFileAsConfigMap: true\n      # The port that Stats will be running on. It runs only on the head\n      # node pod in the cluster. Default: 9091\n      containerPort:\n        # Number of port to expose on the pod's IP address. This must be\n        # a valid port number, 0 &lt; x &lt; 65536.\n        containerPort: 1\n        # What host IP to bind the external port to.\n        hostIP: string\n        # Number of port to expose on the host. If specified, this must\n        # be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n        # specified, this must match ContainerPort. Most containers do\n        # not need this.\n        hostPort: 1\n        # If specified, this must be an IANA_SVC_NAME and unique within\n        # the pod. Each named port in a pod must have a unique name.\n        # Name for the port that can be referred to by services.\n        name: string\n        # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n        # to \"TCP\".\n        protocol: \"TCP\"\n      # List of environment variables to set in the container.\n      env:\n      - name: string\n        # Variable references $(VAR_NAME) are expanded using the\n        # previously defined environment variables in the container and\n        # any service environment variables. If a variable cannot be\n        # resolved, the reference in the input string will be\n        # unchanged. Double $$ are reduced to a single $, which allows\n        # for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will\n        # produce the string literal \"$(VAR_NAME)\". Escaped references\n        # will never be expanded, regardless of whether the variable\n        # exists or not. Defaults to \"\".\n        value: string\n        # Source for the environment variable's value. Cannot be used if\n        # value is not empty.\n        valueFrom:\n          # Selects a key of a ConfigMap.\n          configMapKeyRef:\n            # The key to select.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the ConfigMap or its key must be defined\n            optional: true\n          # Selects a field of the pod: supports metadata.name,\n          # metadata.namespace, `metadata.labels\n          # ['&lt;KEY&gt;']`, `metadata.annotations['&lt;KEY&gt;']`, spec.nodeName,\n          # spec.serviceAccountName, status.hostIP, status.podIP,\n          # status.podIPs.\n          fieldRef:\n            # Version of the schema the FieldPath is written in terms\n            # of, defaults to \"v1\".\n            apiVersion: app.kinetica.com/v1\n            # Path of the field to select in the specified API version.\n            fieldPath: string\n          # Selects a resource of the container: only resources limits\n          # and requests (limits.cpu, limits.memory,\n          # limits.ephemeral-storage, requests.cpu, requests.memory and\n          # requests.ephemeral-storage) are currently supported.\n          resourceFieldRef:\n            # Container name: required for volumes, optional for env\n            # vars\n            containerName: string\n            # Specifies the output format of the exposed resources,\n            # defaults to \"1\"\n            divisor: \n            # Required: resource to select\n            resource: string\n          # Selects a key of a secret in the pod's namespace\n          secretKeyRef:\n            # The key of the secret to select from.  Must be a valid\n            # secret key.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the Secret or its key must be defined\n            optional: true\n      # HomePath - Set the location of the Grafana home directory.\n      homePath: \"/opt/gpudb/kagent/stats/grafana\"\n      # GraphiteHost - Host Address\n      host: \"0.0.0.0\"\n      # Set the name of the container image to use.\n      image:\n        # Set the policy for pulling container images.\n        imagePullPolicy: \"IfNotPresent\"\n        # ImagePullSecrets is an optional list of references to secrets\n        # in the same gpudb-namespace to use for pulling any of the\n        # images used by this PodSpec. If specified, these secrets will\n        # be passed to individual puller implementations for them to\n        # use. For example, in the case of docker, only DockerConfig\n        # type secrets are honored.\n        imagePullSecrets:\n        - name: string\n        # The image registry &amp; optional port containing the repository.\n        registry: \"docker.io\"\n        # The image repository path.\n        repository: \"kineticadevcloud/\"\n        # SemVer = Semantic Version for the Tag SemVer semver.Version\n        semVer: string\n        # The image sha.\n        sha: \"\"\n        # The image tag.\n        tag: \"v7.1.5.2\"\n      # Whether to enable the Stats Server on the Cluster. Default:\n      # true\n      isEnabled: true\n      # Periodic probe of container liveness. Container will be\n      # restarted if the probe fails. Cannot be updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      livenessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Logs - Set the location of the Loki configuration file.\n      logs: \"/opt/gpudb/kagent/stats/logs\" name: \"stats\"\n      # Periodic probe of container service readiness. Container will be\n      # removed from service endpoints if the probe fails. Cannot be\n      # updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      readinessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Resource Requests &amp; Limits for the Stats Pod.\n      resources:\n        # Claims lists the names of resources, defined in\n        # spec.resourceClaims, that are used by this container. This is\n        # an alpha field and requires enabling the\n        # DynamicResourceAllocation feature gate. This field is\n        # immutable. It can only be set for containers.\n        claims:\n        - name: string\n        # Limits describes the maximum amount of compute resources\n        # allowed. More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        limits: {}\n        # Requests describes the minimum amount of compute resources\n        # required. If Requests is omitted for a container, it defaults\n        # to Limits if that is explicitly specified, otherwise to an\n        # implementation-defined value. Requests cannot exceed Limits.\n        # More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        requests: {}\n    # Whether to enable the Stats Server on the Cluster. Default: true\n    isEnabled: true\n    # Loki - Loki specific configuration.\n    loki:\n      # Set the arguments for the command within the container to run.\n      args:\n      [\"-c\",\"/opt/gpudb/kagent/stats/prometheus/prometheus --log.level=debug\n      --config.file=/opt/gpudb/kagent/stats/prometheus/prometheus.yml --web.listen-address=0.0.0.0:9090\n      --storage.tsdb.path=/opt/gpudb/kagent/stats/storage/prometheus-storage\n      --storage.tsdb.retention.time=7d  --web.enable-lifecycle\"]\n      # Set the command within the container to run.\n      command: [\"/bin/sh\"]\n      # ConfigFile - Set the location of the Loki configuration file.\n      configFile: \"/opt/gpudb/kagent/stats/loki/loki.yml\"\n      # ConfigFileAsConfigMap - If true the ConfigFile is mounted from a\n      # ConfigMap\n      configFileAsConfigMap: true\n      # The port that Stats will be running on. It runs only on the head\n      # node pod in the cluster. Default: 9091\n      containerPort:\n        # Number of port to expose on the pod's IP address. This must be\n        # a valid port number, 0 &lt; x &lt; 65536.\n        containerPort: 1\n        # What host IP to bind the external port to.\n        hostIP: string\n        # Number of port to expose on the host. If specified, this must\n        # be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n        # specified, this must match ContainerPort. Most containers do\n        # not need this.\n        hostPort: 1\n        # If specified, this must be an IANA_SVC_NAME and unique within\n        # the pod. Each named port in a pod must have a unique name.\n        # Name for the port that can be referred to by services.\n        name: string\n        # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n        # to \"TCP\".\n        protocol: \"TCP\"\n      # List of environment variables to set in the container.\n      env:\n      - name: string\n        # Variable references $(VAR_NAME) are expanded using the\n        # previously defined environment variables in the container and\n        # any service environment variables. If a variable cannot be\n        # resolved, the reference in the input string will be\n        # unchanged. Double $$ are reduced to a single $, which allows\n        # for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will\n        # produce the string literal \"$(VAR_NAME)\". Escaped references\n        # will never be expanded, regardless of whether the variable\n        # exists or not. Defaults to \"\".\n        value: string\n        # Source for the environment variable's value. Cannot be used if\n        # value is not empty.\n        valueFrom:\n          # Selects a key of a ConfigMap.\n          configMapKeyRef:\n            # The key to select.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the ConfigMap or its key must be defined\n            optional: true\n          # Selects a field of the pod: supports metadata.name,\n          # metadata.namespace, `metadata.labels\n          # ['&lt;KEY&gt;']`, `metadata.annotations['&lt;KEY&gt;']`, spec.nodeName,\n          # spec.serviceAccountName, status.hostIP, status.podIP,\n          # status.podIPs.\n          fieldRef:\n            # Version of the schema the FieldPath is written in terms\n            # of, defaults to \"v1\".\n            apiVersion: app.kinetica.com/v1\n            # Path of the field to select in the specified API version.\n            fieldPath: string\n          # Selects a resource of the container: only resources limits\n          # and requests (limits.cpu, limits.memory,\n          # limits.ephemeral-storage, requests.cpu, requests.memory and\n          # requests.ephemeral-storage) are currently supported.\n          resourceFieldRef:\n            # Container name: required for volumes, optional for env\n            # vars\n            containerName: string\n            # Specifies the output format of the exposed resources,\n            # defaults to \"1\"\n            divisor: \n            # Required: resource to select\n            resource: string\n          # Selects a key of a secret in the pod's namespace\n          secretKeyRef:\n            # The key of the secret to select from.  Must be a valid\n            # secret key.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the Secret or its key must be defined\n            optional: true\n      # ExpandEnv\n      expandEnv: true\n      # Set the name of the container image to use.\n      image:\n        # Set the policy for pulling container images.\n        imagePullPolicy: \"IfNotPresent\"\n        # ImagePullSecrets is an optional list of references to secrets\n        # in the same gpudb-namespace to use for pulling any of the\n        # images used by this PodSpec. If specified, these secrets will\n        # be passed to individual puller implementations for them to\n        # use. For example, in the case of docker, only DockerConfig\n        # type secrets are honored.\n        imagePullSecrets:\n        - name: string\n        # The image registry &amp; optional port containing the repository.\n        registry: \"docker.io\"\n        # The image repository path.\n        repository: \"kineticadevcloud/\"\n        # SemVer = Semantic Version for the Tag SemVer semver.Version\n        semVer: string\n        # The image sha.\n        sha: \"\"\n        # The image tag.\n        tag: \"v7.1.5.2\"\n      # Whether to enable the Stats Server on the Cluster. Default:\n      # true\n      isEnabled: true\n      # Periodic probe of container liveness. Container will be\n      # restarted if the probe fails. Cannot be updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      livenessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Logs - Set the location of the Loki configuration file.\n      logs: \"/opt/gpudb/kagent/stats/logs\" name: \"stats\"\n      # Periodic probe of container service readiness. Container will be\n      # removed from service endpoints if the probe fails. Cannot be\n      # updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      readinessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Resource Requests &amp; Limits for the Stats Pod.\n      resources:\n        # Claims lists the names of resources, defined in\n        # spec.resourceClaims, that are used by this container. This is\n        # an alpha field and requires enabling the\n        # DynamicResourceAllocation feature gate. This field is\n        # immutable. It can only be set for containers.\n        claims:\n        - name: string\n        # Limits describes the maximum amount of compute resources\n        # allowed. More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        limits: {}\n        # Requests describes the minimum amount of compute resources\n        # required. If Requests is omitted for a container, it defaults\n        # to Limits if that is explicitly specified, otherwise to an\n        # implementation-defined value. Requests cannot exceed Limits.\n        # More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        requests: {}\n      # Storage - Set the path of the Loki storage.\n      storage: \"/opt/gpudb/kagent/stats/storage/loki-storage\"\n    # Which vmss/node group etc. to use as the NodeSelector\n    pool: \"compute\"\n    # Prometheus - Prometheus specific configuration.\n    prometheus:\n      # Set the arguments for the command within the container to run.\n      args:\n      [\"-c\",\"/opt/gpudb/kagent/stats/prometheus/prometheus --log.level=debug\n      --config.file=/opt/gpudb/kagent/stats/prometheus/prometheus.yml --web.listen-address=0.0.0.0:9090\n      --storage.tsdb.path=/opt/gpudb/kagent/stats/storage/prometheus-storage\n      --storage.tsdb.retention.time=7d  --web.enable-lifecycle\"]\n      # Set the command within the container to run.\n      command: [\"/bin/sh\"]\n      # ConfigFile - Set the location of the Loki configuration file.\n      configFile: \"/opt/gpudb/kagent/stats/loki/loki.yml\"\n      # ConfigFileAsConfigMap - If true the ConfigFile is mounted from a\n      # ConfigMap\n      configFileAsConfigMap: true\n      # The port that Stats will be running on. It runs only on the head\n      # node pod in the cluster. Default: 9091\n      containerPort:\n        # Number of port to expose on the pod's IP address. This must be\n        # a valid port number, 0 &lt; x &lt; 65536.\n        containerPort: 1\n        # What host IP to bind the external port to.\n        hostIP: string\n        # Number of port to expose on the host. If specified, this must\n        # be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n        # specified, this must match ContainerPort. Most containers do\n        # not need this.\n        hostPort: 1\n        # If specified, this must be an IANA_SVC_NAME and unique within\n        # the pod. Each named port in a pod must have a unique name.\n        # Name for the port that can be referred to by services.\n        name: string\n        # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n        # to \"TCP\".\n        protocol: \"TCP\"\n      # List of environment variables to set in the container.\n      env:\n      - name: string\n        # Variable references $(VAR_NAME) are expanded using the\n        # previously defined environment variables in the container and\n        # any service environment variables. If a variable cannot be\n        # resolved, the reference in the input string will be\n        # unchanged. Double $$ are reduced to a single $, which allows\n        # for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will\n        # produce the string literal \"$(VAR_NAME)\". Escaped references\n        # will never be expanded, regardless of whether the variable\n        # exists or not. Defaults to \"\".\n        value: string\n        # Source for the environment variable's value. Cannot be used if\n        # value is not empty.\n        valueFrom:\n          # Selects a key of a ConfigMap.\n          configMapKeyRef:\n            # The key to select.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the ConfigMap or its key must be defined\n            optional: true\n          # Selects a field of the pod: supports metadata.name,\n          # metadata.namespace, `metadata.labels\n          # ['&lt;KEY&gt;']`, `metadata.annotations['&lt;KEY&gt;']`, spec.nodeName,\n          # spec.serviceAccountName, status.hostIP, status.podIP,\n          # status.podIPs.\n          fieldRef:\n            # Version of the schema the FieldPath is written in terms\n            # of, defaults to \"v1\".\n            apiVersion: app.kinetica.com/v1\n            # Path of the field to select in the specified API version.\n            fieldPath: string\n          # Selects a resource of the container: only resources limits\n          # and requests (limits.cpu, limits.memory,\n          # limits.ephemeral-storage, requests.cpu, requests.memory and\n          # requests.ephemeral-storage) are currently supported.\n          resourceFieldRef:\n            # Container name: required for volumes, optional for env\n            # vars\n            containerName: string\n            # Specifies the output format of the exposed resources,\n            # defaults to \"1\"\n            divisor: \n            # Required: resource to select\n            resource: string\n          # Selects a key of a secret in the pod's namespace\n          secretKeyRef:\n            # The key of the secret to select from.  Must be a valid\n            # secret key.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the Secret or its key must be defined\n            optional: true\n      # Set the name of the container image to use.\n      image:\n        # Set the policy for pulling container images.\n        imagePullPolicy: \"IfNotPresent\"\n        # ImagePullSecrets is an optional list of references to secrets\n        # in the same gpudb-namespace to use for pulling any of the\n        # images used by this PodSpec. If specified, these secrets will\n        # be passed to individual puller implementations for them to\n        # use. For example, in the case of docker, only DockerConfig\n        # type secrets are honored.\n        imagePullSecrets:\n        - name: string\n        # The image registry &amp; optional port containing the repository.\n        registry: \"docker.io\"\n        # The image repository path.\n        repository: \"kineticadevcloud/\"\n        # SemVer = Semantic Version for the Tag SemVer semver.Version\n        semVer: string\n        # The image sha.\n        sha: \"\"\n        # The image tag.\n        tag: \"v7.1.5.2\"\n      # Whether to enable the Stats Server on the Cluster. Default:\n      # true\n      isEnabled: true\n      # Periodic probe of container liveness. Container will be\n      # restarted if the probe fails. Cannot be updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      livenessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Set the Prometheus logging level.\n      logLevel: \"debug\"\n      # Logs - Set the location of the Loki configuration file.\n      logs: \"/opt/gpudb/kagent/stats/logs\" name: \"stats\"\n      # Periodic probe of container service readiness. Container will be\n      # removed from service endpoints if the probe fails. Cannot be\n      # updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      readinessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Resource Requests &amp; Limits for the Stats Pod.\n      resources:\n        # Claims lists the names of resources, defined in\n        # spec.resourceClaims, that are used by this container. This is\n        # an alpha field and requires enabling the\n        # DynamicResourceAllocation feature gate. This field is\n        # immutable. It can only be set for containers.\n        claims:\n        - name: string\n        # Limits describes the maximum amount of compute resources\n        # allowed. More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        limits: {}\n        # Requests describes the minimum amount of compute resources\n        # required. If Requests is omitted for a container, it defaults\n        # to Limits if that is explicitly specified, otherwise to an\n        # implementation-defined value. Requests cannot exceed Limits.\n        # More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        requests: {}\n      # Set the location of the TSDB database.\n      storageTSDBPath: \"/opt/gpudb/kagent/stats/storage/prometheus-storage\"\n      # Set the time to hold data in the TSDB database.\n      storageTSDBRetentionTime: \"7d\"\n      # Timings - Prometheus Intervals &amp; Timeouts\n      timings: evaluationInterval: \"30s\" scrapeInterval: \"30s\"\n      scrapeTimeout: \"10s\"\n    # Whether to share a single PV for Loki, Prometheus &amp; Grafana or\n    # have a separate PV for each. Default: true\n    sharedPV: true\n    # Resource block specifically for use with SharedPV = true to set\n    # storage `requests` &amp; `limits`\n    sharedPVResources:\n      # Claims lists the names of resources, defined in\n      # spec.resourceClaims, that are used by this container. This is\n      # an alpha field and requires enabling the\n      # DynamicResourceAllocation feature gate. This field is\n      # immutable. It can only be set for containers.\n      claims:\n      - name: string\n      # Limits describes the maximum amount of compute resources\n      # allowed. More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      limits: {}\n      # Requests describes the minimum amount of compute resources\n      # required. If Requests is omitted for a container, it defaults\n      # to Limits if that is explicitly specified, otherwise to an\n      # implementation-defined value. Requests cannot exceed Limits.\n      # More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      requests: {}\n  # Supporting images like socat,busybox etc.\n  supportingImages:\n    # Set the resource requests/limits for the BusyBox Pod(s).\n    busyBoxResources:\n      # Claims lists the names of resources, defined in\n      # spec.resourceClaims, that are used by this container. This is\n      # an alpha field and requires enabling the\n      # DynamicResourceAllocation feature gate. This field is\n      # immutable. It can only be set for containers.\n      claims:\n      - name: string\n      # Limits describes the maximum amount of compute resources\n      # allowed. More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      limits: {}\n      # Requests describes the minimum amount of compute resources\n      # required. If Requests is omitted for a container, it defaults\n      # to Limits if that is explicitly specified, otherwise to an\n      # implementation-defined value. Requests cannot exceed Limits.\n      # More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      requests: {}\n    # Set the name of the container image to use.\n    busybox:\n      # Set the policy for pulling container images.\n      imagePullPolicy: \"IfNotPresent\"\n      # ImagePullSecrets is an optional list of references to secrets in\n      # the same gpudb-namespace to use for pulling any of the images\n      # used by this PodSpec. If specified, these secrets will be\n      # passed to individual puller implementations for them to use.\n      # For example, in the case of docker, only DockerConfig type\n      # secrets are honored.\n      imagePullSecrets:\n      - name: string\n      # The image registry &amp; optional port containing the repository.\n      registry: \"docker.io\"\n      # The image repository path.\n      repository: \"kineticadevcloud/\"\n      # SemVer = Semantic Version for the Tag SemVer semver.Version\n      semVer: string\n      # The image sha.\n      sha: \"\"\n      # The image tag.\n      tag: \"v7.1.5.2\"\n    # Set the name of the container image to use.\n    socat:\n      # Set the policy for pulling container images.\n      imagePullPolicy: \"IfNotPresent\"\n      # ImagePullSecrets is an optional list of references to secrets in\n      # the same gpudb-namespace to use for pulling any of the images\n      # used by this PodSpec. If specified, these secrets will be\n      # passed to individual puller implementations for them to use.\n      # For example, in the case of docker, only DockerConfig type\n      # secrets are honored.\n      imagePullSecrets:\n      - name: string\n      # The image registry &amp; optional port containing the repository.\n      registry: \"docker.io\"\n      # The image repository path.\n      repository: \"kineticadevcloud/\"\n      # SemVer = Semantic Version for the Tag SemVer semver.Version\n      semVer: string\n      # The image sha.\n      sha: \"\"\n      # The image tag.\n      tag: \"v7.1.5.2\"\n    # Set the resource requests/limits for the Socat Pod.\n    socatResources:\n      # Claims lists the names of resources, defined in\n      # spec.resourceClaims, that are used by this container. This is\n      # an alpha field and requires enabling the\n      # DynamicResourceAllocation feature gate. This field is\n      # immutable. It can only be set for containers.\n      claims:\n      - name: string\n      # Limits describes the maximum amount of compute resources\n      # allowed. More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      limits: {}\n      # Requests describes the minimum amount of compute resources\n      # required. If Requests is omitted for a container, it defaults\n      # to Limits if that is explicitly specified, otherwise to an\n      # implementation-defined value. Requests cannot exceed Limits.\n      # More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      requests: {}\n# KineticaClusterStatus defines the observed state of KineticaCluster\nstatus:\n  # CloudProvider the DB is deployed on\n  cloudProvider: string\n  # CloudRegion the DB is deployed on\n  cloudRegion: string\n  # ClusterSize the current number of ranks &amp; type i.e. CPU or GPU of\n  # the cluster\n  clusterSize:\n    # ClusterSizeEnum - T-Shirt size of the Kinetica DB Cluster i.e. a\n    # representation of the number of nodes in a simple to understand\n    # T-Short size scheme. This indicates the size of the cluster i.e.\n    # the number of nodes. It does not identify the size of the cloud\n    # provider nodes. For node size see ClusterTypeEnum. Supported\n    # Values are: - XS S M L XL XXL XXXL\n    tshirtSize: string\n    # ClusterTypeEnum - An Enum of the node types of a KineticaCluster\n    # e.g. CPU, GPU along with the Cloud Provider node size e.g. size\n    # of the VM.\n    tshirtType: string\n  # The number of ranks (replicas) that the cluster was last run with\n  currentReplicas: 0\n  # The first start of a new cluster has completed.\n  firstStartComplete: false\n  # HostManagerStatusResponse - The contents of polling the HostManager\n  # on port 9300n are added to the BR status field. This allows clients\n  # to get the Host/Rank/Graph/ML status information.\n  hmStatus: cluster_leader: string cluster_operation: string graph:\n  status: string graph_status: string host_httpd_status: string\n  host_mode: string host_num_gpus: string host_pid: 1\n  host_stats_status: string host_status: string hostname: string hosts:\n  graph_status: string host_httpd_status: string host_mode: string\n  host_pid: 1 host_stats_status: string host_status: string ml_status:\n  string query_planner_status: string reveal_status: string\n  license_expiration: string license_status: string license_type:\n  string ml_status: string query_planner_status: string ranks: mode:\n  string\n      # Pid - The OS Process Id for the Rank.\n      pid: 1 status: string reveal_status: string system_idle_time:\n      string system_mode: string system_rebalancing: 1 system_status:\n      string text: status: string version: string\n  # The fully qualified Ingress routes.\n  ingressUrls: aaw: string dbMonitor: string files: string gadmin:\n  string postgresProxy: string ranks: {} reveal: string\n  # The fully qualified in-cluster Ingress routes.\n  internalIngressUrls: aaw: string dbMonitor: string files: string\n  gadmin: string postgresProxy: string ranks: {} reveal: string\n  # Identify FreeSaaS Cluster\n  isFreeSaaS: false\n  # HostOptions used during DB Cluster Scaling Functions\n  options: ram_limit: 1\n  # OutstandingBilling - A list of hours not yet billed for. Will only\n  # be present if the plan is Pay As You Go and the operator was unable\n  # to send the billing information due to an issue with the cloud\n  # providers billing APIs.\n  outstandingBillableHour:\n  - billable: true billed: true billedAt: string duration: string end:\n    string start: string\n  # The state or phase of the current DB installation\n  phase: stringv\n</code></pre>","tags":["Reference"]},{"location":"Reference/kinetica_workbench/","title":"Workbench CRD Reference","text":"","tags":["Reference"]},{"location":"Reference/kinetica_workbench/#coming-soon","title":"Coming Soon","text":"","tags":["Reference"]},{"location":"Reference/workbench/","title":"Kinetica Workbench Configuration","text":"<ul> <li>kubectl (yaml)</li> <li>Helm Chart</li> </ul>","tags":["Reference"]},{"location":"Reference/workbench/#workbench","title":"Workbench","text":"kubectl <p>Using kubetctl a CustomResource of type <code>KineticaCluster</code> is used to define a new Kinetica DB Cluster in a yaml file.</p> <p>The basic Group, Version, Kind or GVK to instantiate a Kinetica Workbench is as follows: -</p> Workbench GVK<pre><code>apiVersion: workbench.com.kinetica/v1\nkind: Workbench\n</code></pre>","tags":["Reference"]},{"location":"Reference/workbench/#metadata","title":"Metadata","text":"<p>to which we add a <code>metadata:</code> block for the name of the DB CR along with the <code>namespace</code> into which we are targetting the installation of the DB cluster.</p> Workbench metadata<pre><code>apiVersion: workbench.com.kinetica/v1\nkind: Workbench\nmetadata:\n  name: workbench-kinetica-cluster\n  namespace: gpudb\n</code></pre> <p>The simplest valid Workbench CR looks as follows: -</p> workbench.yaml<pre><code>apiVersion: workbench.com.kinetica/v1\nkind: Workbench\nmetadata:\n  name: workbench-kinetica-cluster\n  namespace: gpudb\nspec:\n  executeSqlLimit: 10000\n  fqdn: kinetica-cluster.saas.kinetica.com\n  image: kinetica/workbench:v7.1.9-8.rc1\n  letsEncrypt:\n    enabled: false\n  userIdleTimeout: 60\n  ingressController: nginx-ingress\n</code></pre> <p><code>1. clusterName</code> - the user defined name of the Kinetica DB Cluster</p> <p><code>2. clusterSize</code> - block that defines the number of DB Ranks to run</p> helm","tags":["Reference"]},{"location":"Setup/","title":"Kinetica for Kubernetes Setup","text":"<ul> <li> <p> Set up in 15 minutes </p> <p>Install the Kinetica DB locally on <code>Kind</code> or <code>k3s</code> with <code>helm</code> to get up and running in minutes.   Quickstart</p> </li> <li> <p> Prepare to Install</p> <p>What you need to know &amp; do before beginning a production installation.   Preparation and Prerequisites</p> </li> <li> <p> Production DB Installation</p> <p>Install the Kinetica DB with helm to get up and running quickly   Installation</p> </li> <li> <p> Channel Your Inner Ninja</p> <p>Advanced Installation Topics which go beyond the basic installation.   Advanced Topics</p> </li> </ul>","tags":["Getting Started","Installation"]},{"location":"Support/","title":"Support","text":"<ul> <li> <p> Taking the next steps</p> <p>Further tutorials or help on configuring Kinetica in different environments.    Help &amp; Tutorials</p> </li> <li> <p> Locating Issues</p> <p>In the unlikely event you require information on how to troubleshoot your installation, help can be found here.   Troubleshooting</p> </li> <li> <p> FAQ</p> <p>Frequently Asked Questions..   FAQ</p> </li> </ul>","tags":["Support"]},{"location":"Troubleshooting/troubleshooting/","title":"Troubleshooting","text":"","tags":["Support"]},{"location":"Troubleshooting/troubleshooting/#coming-soon","title":"Coming Soon","text":"","tags":["Support"]},{"location":"tags/","title":"Categories","text":"<p>Following is a list of relevant documentation categories:</p>"},{"location":"tags/#aks","title":"AKS","text":"<ul> <li>Azure AKS</li> </ul>"},{"location":"tags/#administration","title":"Administration","text":"<ul> <li>Administration</li> <li>Grant management</li> <li>Resource group management</li> <li>Role Management</li> <li>Schema management</li> <li>User Management</li> <li>Kinetica Cluster Grants Reference</li> <li>Kinetica Cluster Resource Groups Reference</li> <li>Kinetica Cluster Roles Reference</li> <li>Kinetica Cluster Schemas Reference</li> <li>Kinetica Cluster Users Reference</li> </ul>"},{"location":"tags/#advanced","title":"Advanced","text":"<ul> <li>Advanced</li> <li> Advanced Topics</li> <li>Air-Gapped Environments</li> <li>Alternative Charts</li> <li>Ingress Configuration</li> <li> <code>ingress-nginx</code> Ingress Configuration</li> <li>Kinetica DB on OS X (Arm64)</li> <li>Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations</li> <li>Bare Metal/VM Installation - <code>kubeadm</code></li> <li>S3 Storage for Dev/Test</li> <li> <code>nginx-ingress</code> Ingress Configuration</li> </ul>"},{"location":"tags/#architecture","title":"Architecture","text":"<ul> <li>Architecture</li> <li>Core Database Architecture</li> <li>Kubernetes Architecture</li> </ul>"},{"location":"tags/#configuration","title":"Configuration","text":"<ul> <li>Ingress Configuration</li> <li> <code>ingress-nginx</code> Ingress Configuration</li> <li> <code>nginx-ingress</code> Ingress Configuration</li> <li>How to change the Clusters FQDN</li> <li>OpenTelemetry</li> </ul>"},{"location":"tags/#development","title":"Development","text":"<ul> <li>Kinetica DB on OS X (Arm64)</li> <li>S3 Storage for Dev/Test</li> <li>Quickstart</li> </ul>"},{"location":"tags/#eks","title":"EKS","text":"<ul> <li>Amazon EKS</li> </ul>"},{"location":"tags/#getting-started","title":"Getting Started","text":"<ul> <li>Getting Started</li> <li>Azure AKS</li> <li>Amazon EKS</li> <li>Preparation &amp; Prerequisites</li> <li>Quickstart</li> <li>Kinetica for Kubernetes Setup</li> </ul>"},{"location":"tags/#ingress","title":"Ingress","text":"<ul> <li>Ingress Configuration</li> <li> <code>ingress-nginx</code> Ingress Configuration</li> <li>Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations</li> <li> <code>nginx-ingress</code> Ingress Configuration</li> </ul>"},{"location":"tags/#installation","title":"Installation","text":"<ul> <li>Air-Gapped Environments</li> <li>Alternative Charts</li> <li>Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations</li> <li>Bare Metal/VM Installation - <code>kubeadm</code></li> <li>S3 Storage for Dev/Test</li> <li>Getting Started</li> <li>Kinetica for Kubernetes Installation</li> <li>CPU</li> <li>GPU</li> <li>Preparation &amp; Prerequisites</li> <li>Quickstart</li> <li> Core DB CRDs</li> <li>Kinetica for Kubernetes Setup</li> </ul>"},{"location":"tags/#monitoring","title":"Monitoring","text":"<ul> <li>Logs</li> <li> Metrics Collection &amp; Display</li> <li>OpenTelemetry</li> </ul>"},{"location":"tags/#operations","title":"Operations","text":"<ul> <li>Logs</li> <li> Metrics Collection &amp; Display</li> <li>Operational Management</li> <li>Kinetica for Kubernetes Backup &amp; Restore</li> <li>OpenTelemetry</li> <li>Kinetica for Kubernetes Data Rebalancing</li> <li>Kinetica for Kubernetes Suspend &amp; Resume</li> <li>Kinetica Cluster Backups Reference</li> <li> Core DB CRDs</li> <li>Kinetica Cluster Restores Reference</li> </ul>"},{"location":"tags/#reference","title":"Reference","text":"<ul> <li>Reference Section</li> <li>Kinetica Database Configuration</li> <li>Kinetica Operators</li> <li>Kinetica Cluster Admins Reference</li> <li>Kinetica Cluster Backups Reference</li> <li>Kinetica Cluster Grants Reference</li> <li> Core DB CRDs</li> <li>Kinetica Cluster Resource Groups Reference</li> <li>Kinetica Cluster Restores Reference</li> <li>Kinetica Cluster Roles Reference</li> <li>Kinetica Cluster Schemas Reference</li> <li>Kinetica Cluster Users Reference</li> <li>Kinetica Clusters Reference</li> <li>Kinetica Workbench Reference</li> <li>Kinetica Workbench Configuration</li> </ul>"},{"location":"tags/#storage","title":"Storage","text":"<ul> <li>S3 Storage for Dev/Test</li> <li>Amazon EKS</li> </ul>"},{"location":"tags/#support","title":"Support","text":"<ul> <li>How to change the Clusters FQDN</li> <li>FAQ</li> <li>Help &amp; Tutorials</li> <li>Creating Users, Roles, Schemas and other Kinetica DB Objects</li> <li>Support</li> <li>Troubleshooting</li> </ul>"}]}
\ No newline at end of file
+{"config":{"lang":["en"],"separator":"[\\s\\-]+","pipeline":["stopWordFilter"]},"docs":[{"location":"","title":"<code>kineticadb/charts</code>","text":"<p>Accelerate your AI and analytics. Kinetica harnesses real-time data and the power of CPUs &amp;  GPUs for  lightning-fast insights due to it being uniquely designed for fast and flexible analytics on large volumes  of changing data with incredible performance.</p> <p>Kinetica DB can be quickly installed into Kubernetes using Helm.</p> <ul> <li> <p> Set up in 15 minutes </p> <p>Install the Kinetica DB locally on <code>Kind</code> or <code>k3s</code> with <code>helm</code> to get up and running in minutes.   Quickstart</p> </li> <li> <p> Prepare to Install</p> <p>What you need to know &amp; do before beginning a production installation.   Preparation and Prerequisites</p> </li> <li> <p> Production DB Installation</p> <p>Install the Kinetica DB with helm to get up and running quickly   Installation</p> </li> <li> <p> Channel Your Inner Ninja</p> <p>Advanced Installation Topics which go beyond the basic installation.   Advanced Topics</p> </li> <li> <p> Running and Managing the Platform</p> <p>Metrics, Monitoring, Logs and Telemetry Distribution.   Operations</p> </li> <li> <p> Product Architecture</p> <p>The Modern Analytics Database Architected for Performance at Scale.   Architecture</p> </li> <li> <p> Support</p> <p>Additional Help, Tutorials and Troubleshooting resources.   Support</p> </li> <li> <p> Configuration in Detail</p> <p>Detailed reference material for the Helm Charts &amp; Kinetica for Kubernetes CRDs.      Reference Documentation</p> </li> </ul>"},{"location":"tags/","title":"Categories","text":"<p>Following is a list of relevant documentation categories:</p>"},{"location":"tags/#aks","title":"AKS","text":"<ul> <li>Azure AKS</li> </ul>"},{"location":"tags/#administration","title":"Administration","text":"<ul> <li>Administration</li> <li>Grant management</li> <li>Resource group management</li> <li>Role Management</li> <li>Schema management</li> <li>User Management</li> <li>Kinetica Cluster Grants Reference</li> <li>Kinetica Cluster Resource Groups Reference</li> <li>Kinetica Cluster Roles Reference</li> <li>Kinetica Cluster Schemas Reference</li> <li>Kinetica Cluster Users Reference</li> </ul>"},{"location":"tags/#advanced","title":"Advanced","text":"<ul> <li>Advanced</li> <li> Advanced Topics</li> <li>Air-Gapped Environments</li> <li>Alternative Charts</li> <li>Ingress Configuration</li> <li> <code>ingress-nginx</code> Ingress Configuration</li> <li>Kinetica DB on OS X (Arm64)</li> <li>Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations</li> <li>Bare Metal/VM Installation - <code>kubeadm</code></li> <li>S3 Storage for Dev/Test</li> <li> <code>nginx-ingress</code> Ingress Configuration</li> </ul>"},{"location":"tags/#architecture","title":"Architecture","text":"<ul> <li>Architecture</li> <li>Core Database Architecture</li> <li>Kubernetes Architecture</li> </ul>"},{"location":"tags/#configuration","title":"Configuration","text":"<ul> <li>Ingress Configuration</li> <li> <code>ingress-nginx</code> Ingress Configuration</li> <li> <code>nginx-ingress</code> Ingress Configuration</li> <li>How to change the Clusters FQDN</li> <li>OpenTelemetry</li> </ul>"},{"location":"tags/#development","title":"Development","text":"<ul> <li>Kinetica DB on OS X (Arm64)</li> <li>S3 Storage for Dev/Test</li> <li>Quickstart</li> </ul>"},{"location":"tags/#eks","title":"EKS","text":"<ul> <li>Amazon EKS</li> </ul>"},{"location":"tags/#getting-started","title":"Getting Started","text":"<ul> <li>Getting Started</li> <li>Azure AKS</li> <li>Amazon EKS</li> <li>Preparation &amp; Prerequisites</li> <li>Quickstart</li> <li>Kinetica for Kubernetes Setup</li> </ul>"},{"location":"tags/#ingress","title":"Ingress","text":"<ul> <li>Ingress Configuration</li> <li> <code>ingress-nginx</code> Ingress Configuration</li> <li>Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations</li> <li> <code>nginx-ingress</code> Ingress Configuration</li> </ul>"},{"location":"tags/#installation","title":"Installation","text":"<ul> <li>Air-Gapped Environments</li> <li>Alternative Charts</li> <li>Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations</li> <li>Bare Metal/VM Installation - <code>kubeadm</code></li> <li>S3 Storage for Dev/Test</li> <li>Getting Started</li> <li>Kinetica for Kubernetes Installation</li> <li>CPU</li> <li>GPU</li> <li>Preparation &amp; Prerequisites</li> <li>Quickstart</li> <li> Core DB CRDs</li> <li>Kinetica for Kubernetes Setup</li> </ul>"},{"location":"tags/#monitoring","title":"Monitoring","text":"<ul> <li>Logs</li> <li> Metrics Collection &amp; Display</li> <li>OpenTelemetry</li> </ul>"},{"location":"tags/#operations","title":"Operations","text":"<ul> <li>Logs</li> <li> Metrics Collection &amp; Display</li> <li>Operational Management</li> <li>Kinetica for Kubernetes Backup &amp; Restore</li> <li>OpenTelemetry</li> <li>Kinetica for Kubernetes Data Rebalancing</li> <li>Kinetica for Kubernetes Suspend &amp; Resume</li> <li>Kinetica Cluster Backups Reference</li> <li> Core DB CRDs</li> <li>Kinetica Cluster Restores Reference</li> </ul>"},{"location":"tags/#reference","title":"Reference","text":"<ul> <li>Reference Section</li> <li>Kinetica Database Configuration</li> <li>Kinetica Operators</li> <li>Kinetica Cluster Admins Reference</li> <li>Kinetica Cluster Backups Reference</li> <li>Kinetica Cluster Grants Reference</li> <li> Core DB CRDs</li> <li>Kinetica Cluster Resource Groups Reference</li> <li>Kinetica Cluster Restores Reference</li> <li>Kinetica Cluster Roles Reference</li> <li>Kinetica Cluster Schemas Reference</li> <li>Kinetica Cluster Users Reference</li> <li>Kinetica Clusters Reference</li> <li>Kinetica Workbench Reference</li> <li>Kinetica Workbench Configuration</li> </ul>"},{"location":"tags/#storage","title":"Storage","text":"<ul> <li>S3 Storage for Dev/Test</li> <li>Amazon EKS</li> </ul>"},{"location":"tags/#support","title":"Support","text":"<ul> <li>How to change the Clusters FQDN</li> <li>FAQ</li> <li>Help &amp; Tutorials</li> <li>Creating Users, Roles, Schemas and other Kinetica DB Objects</li> <li>Support</li> <li>Troubleshooting</li> </ul>"},{"location":"Administration/","title":"Administration","text":"<ul> <li> <p> DB Clusters</p> <p>Core Kinetica Database Cluster Management.</p> <p> KineticaCluster</p> </li> <li> <p> DB Users</p> <p>Kinetica Database User Management.</p> <p> KineticaUser</p> </li> <li> <p> DB Roles</p> <p>Kinetica Database Role Management.</p> <p> KineticaRole</p> </li> <li> <p> DB Schemas</p> <p>Kinetica Database Schema Management.</p> <p> KineticaSchema</p> </li> <li> <p> DB Grants</p> <p>Kinetica Database Grant Management.</p> <p> KineticaGrant</p> </li> <li> <p> DB Resource Groups</p> <p>Kinetica Database Resource Group Management.</p> <p> KineticaResourceGroup</p> </li> <li> <p> DB Administration</p> <p>Kinetica Database Administration.</p> <p> KineticaAdmin</p> </li> <li> <p> DB Backups</p> <p>Kinetica Database Backup Management.</p> <p>Note</p> <p>This requires Velero to be installed on the Kubernetes Cluster.</p> <p> KineticaBackup</p> </li> <li> <p> DB Restore</p> <p>Kinetica Database Restoration.</p> <p>Note</p> <p>This requires Velero to be installed on the Kubernetes Cluster.</p> <p> KineticaRestore</p> </li> </ul> <p>  Home</p>","tags":["Administration"]},{"location":"Administration/role_management/","title":"Role Management","text":"<p>Management of roles is done with the <code>KineticaRole</code> CRD. </p> <p>kubectl Usage</p> <p>From the <code>kubectl</code> command line they are referenced by <code>kineticaroles</code> or the short form is <code>kr</code>.</p>","tags":["Administration"]},{"location":"Administration/role_management/#list-roles","title":"List Roles","text":"<p>To list the roles deployed to a Kinetica DB installation we can use the following from the command-line: -</p> <p><code>kubectl -n gpudb get kineticaroles</code> or <code>kubectl -n gpudb get kr</code></p> <p>where the namespace <code>-n gpudb</code> matches the namespace of the Kinetica DB installation.</p> <p>This outputs</p> Name Ring Name Role Resource Group Name LDAP DB db-users kinetica-k8s-sample db_users OK OK global-admins kinetica-k8s-sample global_admins OK OK","tags":["Administration"]},{"location":"Administration/role_management/#name","title":"Name","text":"<p>The name of the Kubernetes CR i.e. the <code>metadata.name</code> this is not necessarily the name of the user.</p>","tags":["Administration"]},{"location":"Administration/role_management/#ring-name","title":"Ring Name","text":"<p>The name of the <code>KineticaCluster</code> the user is created in.</p>","tags":["Administration"]},{"location":"Administration/role_management/#role-name","title":"Role Name","text":"<p>The name of the role as contained with LDAP &amp; the DB.</p>","tags":["Administration"]},{"location":"Administration/role_management/#role-creation","title":"Role Creation","text":"test-role-2.yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaRole\nmetadata:\n    name: test-role-2\n    namespace: gpudb\nspec:\n    ringName: kineticacluster-sample\n    role:\n        name: \"test_role2\"\n</code></pre>","tags":["Administration"]},{"location":"Administration/role_management/#role-deletion","title":"Role Deletion","text":"<p>To delete a role from the Kinetica Cluster simply delete the Role CR from Kubernetes: -</p> Delete User<pre><code>kubectl -n gpudb delete kr user-fred-smith \n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/","title":"User Management","text":"<p>Management of users is done with the <code>KineticaUser</code> CRD. </p> <p>kubectl Usage</p> <p>From the <code>kubectl</code> command line they are referenced by <code>kineticausers</code> or the short form is <code>ku</code>.</p>","tags":["Administration"]},{"location":"Administration/user_management/#list-users","title":"List Users","text":"<p>To list the users deployed to a Kinetica DB installation we can use the following from the  command-line: -</p> <p><code>kubectl -n gpudb get kineticausers</code> or <code>kubectl -n gpudb get ku</code></p> <p>where the namespace <code>-n gpudb</code> matches the namespace of the Kinetica DB installation.</p> <p>This outputs </p> Name Action Ring Name UID Last Name Given Name Display Name LDAP DB Reveal kadmin upsert kinetica-k8s-sample kadmin Account Admin Admin Account OK OK OK","tags":["Administration"]},{"location":"Administration/user_management/#name","title":"Name","text":"<p>The name of the Kubernetes CR i.e. the <code>metadata.name</code> this is not necessarily the name of the user.</p>","tags":["Administration"]},{"location":"Administration/user_management/#action","title":"Action","text":"<p>There are two actions possible on a <code>KineticaUser</code>. The first is <code>upsert</code> which is for user creation or modification. The second is <code>change-password</code> which shows when a user password reset has been performed.</p>","tags":["Administration"]},{"location":"Administration/user_management/#ring-name","title":"Ring Name","text":"<p>The name of the <code>KineticaCluster</code> the user is created in.</p>","tags":["Administration"]},{"location":"Administration/user_management/#uid","title":"UID","text":"<p>The unique, user id to use in LDAP &amp; the DB to reference this user.</p>","tags":["Administration"]},{"location":"Administration/user_management/#last-name","title":"Last Name","text":"<p>Last Name refers to last name or surname. </p> <p><code>sn</code> in LDAP terms.</p>","tags":["Administration"]},{"location":"Administration/user_management/#given-name","title":"Given Name","text":"<p>Given Name is the Firstname also called Christian name. </p> <p><code>givenName</code> in LDAP terms.</p>","tags":["Administration"]},{"location":"Administration/user_management/#display-name","title":"Display Name","text":"<p>The name shown on any UI representation.</p>","tags":["Administration"]},{"location":"Administration/user_management/#ldap","title":"LDAP","text":"<p>Identifies if the user has been successfully created within LDAP. </p> <ul> <li>'' - if empty the user has not yet been created in LDAP</li> <li>'OK' - shows the user has been successfully created within LDAP</li> <li>'Failed' - shows there was a failure adding the user to LDAP</li> </ul>","tags":["Administration"]},{"location":"Administration/user_management/#db","title":"DB","text":"<p>Identifies if the user has been successfully created within the DB.</p> <ul> <li>'' - if empty the user has not yet been created in the DB</li> <li>'OK' - shows the user has been successfully created within the DB</li> <li>'Failed' - shows there was a failure adding the user to the DB</li> </ul>","tags":["Administration"]},{"location":"Administration/user_management/#reveal","title":"Reveal","text":"<p>Identifies if the user has been successfully created within Reveal.</p> <ul> <li>'' - if empty the user has not yet been created in Reveal</li> <li>'OK' - shows the user has been successfully created within Reveal</li> <li>'Failed' - shows there was a failure adding the user to Reveal</li> </ul>","tags":["Administration"]},{"location":"Administration/user_management/#user-creation","title":"User Creation","text":"<p>User creation requires two Kubernetes CRs to be submitted to Kubernetes and processed by the Kinetica DB Operator.</p> <ul> <li>User Secret (Password)</li> <li>Kinetica User</li> </ul> <p>Creation Sequence</p> <p>It is preferable to create the User Secret prior to creating the <code>KineticaUser</code>.</p> <p>Secret Deletion</p> <p>The User Secret will be deleted once the <code>KineticaUser</code> is created by the operator. The users password will be stored in LDAP and not be present in Kubernetes.</p>","tags":["Administration"]},{"location":"Administration/user_management/#user-secret","title":"User Secret","text":"<p>In this example a user Fred Smith will be created.</p> fred-smith-secret.yaml<pre><code>apiVersion: v1\nkind: Secret\nmetadata:\n  name: fred-smith-secret\n  namespace: gpudb\nstringData:\n  password: testpassword\n</code></pre> Create the User Password Secret<pre><code>kubectl apply -f fred-smith-secret.yaml\n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/#kineticauser","title":"<code>KineticaUser</code>","text":"user-fred-smith.yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaUser\nmetadata:\n  name: user-fred-smith\n  namespace: gpudb\nspec:\n  ringName: kineticacluster-sample\n  uid: fred\n  action: upsert\n  reveal: true\n  upsert:\n    userPrincipalName: fred.smith@example.com\n    givenName: Fred\n    displayName: FredSmith\n    lastName: Smith\n    passwordSecret: fred-smith-secret\n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/#user-deletion","title":"User Deletion","text":"<p>To delete a user from the Kinetica Cluster simply delete the User CR from Kubernetes: -</p> Delete User<pre><code>kubectl -n gpudb delete ku user-fred-smith \n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/#change-password","title":"Change Password","text":"<p>To change a users password we use the <code>change-password</code> action rather than the <code>upsert</code> action we used previously.</p> <p>Creation Sequence</p> <p>It is preferable to create the User Secret prior to creating the <code>KineticaUser</code>.</p> <p>Secret Deletion</p> <p>The User Secret will be deleted once the <code>KineticaUser</code> is created by the operator. The users password will be stored in LDAP and not be present in Kubernetes.</p> fred-smith-change-pwd-secret.yaml<pre><code>apiVersion: v1\nkind: Secret\nmetadata:\n  name: fred-smith-change-pwd-secret\n  namespace: gpudb\nstringData:\n  password: testpassword\n</code></pre> Create the User Password Secret<pre><code>kubectl apply -f fred-smith-change-pwd-secret.yaml\n</code></pre> user-fred-smith-change-password.yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaUser\nmetadata:\n  name: user-fred-smith-change-password\n  namespace: gpudb\nspec:\n  ringName: kineticacluster-sample\n  uid: fred\n  action: change-password\n  changePassword:\n    passwordSecret: fred-smith-change-pwd-secret\n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/#advanced-topics","title":"Advanced Topics","text":"","tags":["Administration"]},{"location":"Administration/user_management/#limit-user-resources","title":"Limit User Resources","text":"","tags":["Administration"]},{"location":"Administration/user_management/#data-limit","title":"Data Limit","text":"<p>KIFs user data size limit.</p> dataLimit<pre><code>spec:\n  upsert:\n    dataLimit: 10Gi\n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/#user-kifs-usage","title":"User Kifs Usage","text":"<p>Kifs Enablement</p> <p>In order to use the Kifs user features below there is a requirement that Kifs  is enabled on the Kinetica DB.</p>","tags":["Administration"]},{"location":"Administration/user_management/#home-directory","title":"Home Directory","text":"<p>When creating a new user it is possible to create that user a 'home' directory within  the Kifs filesystem by using the <code>createHomeDirectory</code> option.</p> createHomeDirectory<pre><code>spec:\n  upsert:\n    createHomeDirectory: true\n</code></pre>","tags":["Administration"]},{"location":"Administration/user_management/#limit-directory-storage","title":"Limit Directory Storage","text":"<p>It is possible to limit the amount of Kifs file storage the user has by adding <code>kifsDataLimit</code> to the user creation yaml and setting the value to a Kubernetes Quantity e.g. <code>2Gi</code></p> kifsDataLimit<pre><code>spec:\n  upsert:\n    kifsDataLimit: 2Gi\n</code></pre>","tags":["Administration"]},{"location":"Advanced/","title":"Advanced Topics","text":"<ul> <li> <p> Find alternative chart versions </p> <p>How to use pre-release or development Chart version if requested to by Kinetica Support.    Alternative Charts</p> </li> <li> <p> Configuring Ingress Records </p> <p>How to expose Kinetica via Kubernetes Ingress.   Ingress Configuration</p> </li> <li> <p> Air-Gapped Environments </p> <p>Specifics for installing Kinetica for Kubernetes in an Air-Gapped Environment   Airgapped</p> </li> <li> <p> Using your own OpenTelemetry Collector</p> <p>How to configure Kinetica for Kubernetes to use your open OpenTelemetry collector. </p> <p> External OTEL</p> </li> <li> <p> Minio for Dev/Test S3 Storage </p> <p>Install Minio in order to enable S3 storage for Development.</p> <p> min.io</p> </li> <li> <p> Creating Resources with Kubernetes APIs </p> <p>Create Users, Roles, DB Schema etc. using Kubernertes CRs.   Resources</p> </li> <li> <p> Kinetica on OS X (Apple Silicon) </p> <p>Install the Kinetica DB on a new Kubernetes 'production-like' cluster on Apple OS X   (Apple Silicon) using UTM.     Apple ARM64</p> </li> <li> <p> Bare Metal/VM Installation from Scratch </p> <p>Install the Kinetica DB on a new Kubernetes 'production-like' bare metal (or VMs)    cluster via <code>kubeadm</code>   using <code>cilium</code> Networking,   <code>kube-vip</code> LoadBalancer.     Bare Metal/VM Installation</p> </li> <li> <p> Software LoadBalancer </p> <p>Install a software Kubernetes CCM/LoadBalancer for bare metal or  VM based Kubernetes CLusters.  <code>kube-vip</code> LoadBalancer.</p> <p> Software LoadBalancer</p> </li> </ul>","tags":["Advanced"]},{"location":"Advanced/advanced_topics/","title":"Advanced Topics","text":"","tags":["Advanced"]},{"location":"Advanced/advanced_topics/#install-from-a-developmentpre-release-chart-version","title":"Install from a development/pre-release chart version","text":"<p>Find all alternative chart versions with:</p> Find alternative chart versions<pre><code>helm search repo kinetica-operators --devel --versions\n</code></pre> <p></p> <p>Then append <code>--devel --version [CHART-DEVEL-VERSION]</code> to the end of the Helm install command. See here.</p>","tags":["Advanced"]},{"location":"Advanced/airgapped/","title":"Air-Gapped Environments","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#obtaining-the-kinetica-images","title":"Obtaining the Kinetica Images","text":"Kinetica Images for an Air-Gapped Environment <p>If you are installing Kinetica with Helm in an air-gapped environment you will either need a Registry Proxy to pass the requests through or to download the images and push them to your internal Registry.</p> <p>For information on ways to transfer the files into an air-gapped environment See here.</p> <p>Please select the method to transfer the images: -</p> mindthegap containerd docker <p>It is possible to use  <code>mesosphere/mindthegap</code></p> <p>mindthegap</p> <p><code>mindthegap</code> provides utilities to manage air-gapped image bundles,  both creating image bundles and seeding images from a bundle into  an existing OCI registry or directly loading them to <code>containerd</code>.</p> <p>This makes it possible with <code>mindthegap</code> to</p> <ul> <li>create a single archive bundle of all the required images outside the  air-gapped environment</li> <li>run <code>mindthegap</code> using the archive bundle on the Kubernetes Nodes to bulk load the images into <code>contained</code> in a single command.</li> </ul> <p>Kinetica provides two <code>mindthegap</code> yaml files which list all the necessary images for Kinetica for Kubernetes.</p> <ul> <li>CPU only</li> <li> CPU &amp; nVidia CUDA GPU</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#required-container-images","title":"Required Container Images","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#dockerio-required-kinetica-images-for-all-installations","title":"docker.io (Required Kinetica Images for All Installations)","text":"<ul> <li>docker.io/kinetica/kinetica-k8s-operator:v7.2.0-3.rc-3<ul> <li>docker.io/kinetica/kinetica-k8s-cpu:v7.2.0-3.rc-3 or </li> <li>docker.io/kinetica/kinetica-k8s-cpu-avx512:v7.2.0-3.rc-3 or </li> <li>docker.io/kinetica/kinetica-k8s-gpu:v7.2.0-3.rc-3</li> </ul> </li> <li>docker.io/kinetica/workbench-operator:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/workbench:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/kinetica-k8s-monitor:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/busybox:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/fluent-bit:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/kagent:7.1.9.15.20230823123615.ga</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#nvcrio-required-kinetica-images-for-gpu-installations-using-kinetica-k8s-gpu","title":"nvcr.io (Required Kinetica Images for GPU Installations using <code>kinetica-k8s-gpu</code>)","text":"<ul> <li>nvcr.io/nvidia/gpu-operator:v23.9.1</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#registryk8sio-required-kinetica-images-for-gpu-installations-using-kinetica-k8s-gpu","title":"registry.k8s.io (Required Kinetica Images for GPU Installations using <code>kinetica-k8s-gpu</code>)","text":"<ul> <li>registry.k8s.io/nfd/node-feature-discovery:v0.14.2</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#dockerio-required-supporting-images","title":"docker.io (Required Supporting Images)","text":"<ul> <li>docker.io/bitnami/openldap:2.6.7</li> <li>docker.io/alpine/openssl:latest (used by bitnami/openldap)</li> <li>docker.io/otel/opentelemetry-collector-contrib:0.95.0</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#quayio-required-supporting-images","title":"quay.io (Required Supporting Images)","text":"<ul> <li>quay.io/brancz/kube-rbac-proxy:v0.14.2</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#optional-container-images","title":"Optional Container Images","text":"<p>These images are only required if certain features are enabled as part of the Helm installation: -</p> <ul> <li>CertManager</li> <li>ingress-ninx</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#quayio-optional-supporting-images","title":"quay.io (Optional Supporting Images)","text":"<ul> <li>quay.io/jetstack/cert-manager-cainjector:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> <li>quay.io/jetstack/cert-manager-controller:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> <li>quay.io/jetstack/cert-manager-webhook:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> </ul>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#registryk8sio-optional-supporting-images","title":"registry.k8s.io (Optional Supporting Images)","text":"<ul> <li>registry.k8s.io/ingress-nginx/controller:v1.9.4 (if optionally installing Ingress nGinx via Kinetica Helm Chart)</li> <li>registry.k8s.io/ingress-nginx/controller:v1.9.6@sha256:1405cc613bd95b2c6edd8b2a152510ae91c7e62aea4698500d23b2145960ab9c</li> </ul> <p>It is possible with <code>containerd</code> to pull images, save them and load them either into  a Container Registry in the air gapped environment or directly  into another <code>containerd</code> instance. </p> <p>If the target <code>containerd</code> is on a node running a Kubernetes Cluster then these images will be sourced by Kubernetes from the loaded images, via CRI, with no requirement  to pull them from an external source e.g. a Registry or Mirror.</p> <p><code>sudo</code> required</p> <p>Depending on how <code>containerd</code> has been installed and configured many of the example calls below may require running with <code>sudo</code></p> <p>It is possible with <code>docker</code> to pull images, save them and load them into an OCI Container Registry in the air gapped environment.</p> Pull a remote image (docker)<pre><code>docker pull --platformlinux/amd64 docker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-4\n</code></pre> Export a local image (docker)<pre><code>docker export --platformlinux/amd64 -o kinetica-k8s-cpu-v7.2.2-2.ga-4.tar \\\ndocker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-4\n</code></pre> <p>We can now transfer this archive (<code>kinetica-k8s-cpu-v7.2.2-2.ga-4.rc-3.tar</code>) to the Kubernetes Node inside  the air-gapped environment.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#which-kinetica-core-image-do-i-use","title":"Which Kinetica Core Image do I use?","text":"Container Image Intel (AMD64) Intel (AMD64 AVX512) Amd (AMD64) Graviton (aarch64) Apple Silicon (aarch64) kinetica-k8s-cpu (1) kinetica-k8s-cpu-avx512 kinetica-k8s-gpu (2) (2) (2) <ol> <li>It is preferable on an Intel AVX512 enabled CPU to use the kinetica-k8s-cpu-avx512 container image</li> <li>With a supported nVidia GPU.</li> </ol>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#install-mindthegap","title":"Install <code>mindthegap</code>","text":"Install mindthegap<pre><code>wget https://github.com/mesosphere/mindthegap/releases/download/v1.13.1/mindthegap_v1.13.1_linux_amd64.tar.gz\ntar zxvf mindthegap_v1.13.1_linux_amd64.tar.gz\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#mindthegap-create-the-bundle","title":"mindthegap - Create the Bundle","text":"mindthegap create image-bundle<pre><code>mindthegap create image-bundle --images-file mtg.yaml --platform linux/amd64\n</code></pre> <p>where <code>--images-file</code> is either the CPU or GPU Kinetica <code>mindthegap</code> yaml file.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#mindthegap-import-the-bundle","title":"mindthegap - Import the Bundle","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#mindthegap-import-to-containerd","title":"mindthegap - Import to <code>containerd</code>","text":"mindthegap import image-bundle<pre><code>mindthegap import image-bundle --image-bundle images.tar [--containerd-namespace k8s.io]\n</code></pre> <p>If <code>--containerd-namespace</code> is not specified, images will be imported into <code>k8s.io</code> namespace. </p> <p><code>sudo</code> required</p> <p>Depending on how <code>containerd</code> has been installed and configured it may require running the above command with <code>sudo</code></p>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#mindthegap-import-to-an-internal-oci-registry","title":"mindthegap - Import to an internal OCI Registry","text":"mindthegap import image-bundle<pre><code>mindthegap push bundle --bundle &lt;path/to/bundle.tar&gt; \\\n--to-registry &lt;registry.address&gt; \\\n[--to-registry-insecure-skip-tls-verify]\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#containerd-using-containerd-to-pull-and-export-an-image","title":"containerd - Using <code>containerd</code> to pull and export an image","text":"<p>Similar to <code>docker pull</code> we can use <code>ctr image pull</code> so to pull the core Kinetica DB cpu based image</p> Pull a remote image (containerd)<pre><code>ctr image pull docker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-4\n</code></pre> <p>We now need to export the pulled image as an archive to the local filesystem.</p> Export a local image (containerd)<pre><code>ctr image export kinetica-k8s-cpu-v7.2.2-2.ga-4.tar \\\ndocker.io/kinetica/kinetica-k8s-cpu:v7.2.2-2.ga-4\n</code></pre> <p>We can now transfer this archive (<code>kinetica-k8s-cpu-v7.2.2-2.ga-4.tar</code>) to the Kubernetes Node inside  the air-gapped environment.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#containerd-using-containerd-to-import-an-image","title":"containerd - Using <code>containerd</code> to import an image","text":"<p>Using <code>containerd</code> to import an image on to a Kubernetes Node on which a Kinetica Cluster is running.</p> Import the Images<pre><code>ctr -n=k8s.io images import kinetica-k8s-cpu-v7.2.2-2.ga-4.tar\n</code></pre> <p><code>-n=k8s.io</code></p> <p>It is possible to use <code>ctr images import kinetica-k8s-cpu-v7.2.2-2.ga-4.rc-3.tar</code>  to import the image to <code>containerd</code>.</p> <p>However, in order for the image to be visible to the Kubernetes Cluster running on <code>containerd</code> it is necessary to add the parameter <code>-n=k8s.io</code>.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#containerd-verifying-the-image-is-available","title":"containerd - Verifying the image is available","text":"<p>To verify the image is loaded into <code>containerd</code> on the node run the following on the node: -</p> Verify containerd Images<pre><code>ctr image ls\n</code></pre> <p>To verify the image is visible to Kubernetes on the node run the following: -</p> Verify CRI Images<pre><code>crictl images\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/airgapped/#docker-using-docker-to-import-an-image","title":"docker - Using <code>docker</code> to import an image","text":"<p>Using <code>docker</code> to import an image on to a Kubernetes Node on which a Kinetica Cluster is running.</p> Import the Images<pre><code>docker import --platformlinux/amd64 kinetica-k8s-cpu-v7.2.2-2.ga-4.tar registry:repository/kinetica-k8s-cpu:v7.2.0-3.rc-3\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/alternative_charts/","title":"Using Alternative Helm Charts","text":"<p>If requested by Kinetica Support you can search and use pre-release versions of the Kinetica Helm Charts.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/alternative_charts/#install-from-a-developmentpre-release-chart-version","title":"Install from a development/pre-release chart version","text":"<p>Find all alternative chart versions with:</p> Find alternative chart versions<pre><code>helm search repo kinetica-operators --devel --versions\n</code></pre> <p></p> <p>Then append <code>--devel --version [CHART-DEVEL-VERSION]</code> to the end of the Helm install command.</p> Helm install kinetica-operators<pre><code>helm -n kinetica-system install \\\nkinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--devel \\\n--version 72.0 \\\n--values values.onPrem.k8s.yaml \\\n--set db.gpudbCluster.license=\"LICENSE-KEY\" \\\n--set dbAdminUser.password=\"PASSWORD\" \\\n--set global.defaultStorageClass=\"DEFAULT-STORAGE-CLASS\"\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/ingress_configuration/","title":"Ingress Configuration","text":"<ul> <li> <p> <code>ingress-nginx</code> Configuration</p> <p>How to enable Ingress with <code>ingress-nginx</code> for Kinetica DB.</p> <p> <code>ingress-nginx</code></p> </li> <li> <p> <code>nginx-ingress</code> Configuration</p> <p>How to enable Ingress with <code>nginx-ingress</code> for Kinetica DB.</p> <p> <code>nginx-ingress</code></p> </li> </ul>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/","title":"<code>ingress-nginx</code> Ingress Configuration","text":"<p>To use an 'external' ingress-nginx controller  i.e. not the one optionally installed  by the Kinetica Operators Helm chart it is necessary to  disable ingress in the <code>KineticaCluster</code> CR.</p> <p>The field <code>spec.ingressController: nginx</code> should be set to <code>spec.ingressController: none</code>.</p> <p>It is then necessary to create the required Ingress CRs by hand. Below is a list of the Ingress paths that need to be exposed along with sample ingress-nginx CRs.</p>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#required-ingress-routes","title":"Required Ingress Routes","text":"","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#ingress-routes","title":"Ingress Routes","text":"","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#gadmin-paths","title":"GAdmin Paths","text":"Path Service Port <code>/gadmin</code> <code>cluster-name-gadmin-service</code> <code>gadmin</code> (8080/TCP) <code>/tableau</code> <code>cluster-name-gadmin-service</code> <code>gadmin</code> (8080/TCP) <code>/files</code> <code>cluster-name^-gadmin-service</code> <code>gadmin</code>   (8080/TCP) <p>where <code>cluster-name</code> is the name of the Kinetica Cluster  i.e. what is in the <code>.spec.gpudbCluster.clusterName</code> in the KineticaCluster CR.</p>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#workbench-paths","title":"Workbench Paths","text":"Path Service Port <code>/</code> <code>workbench-workbench-service</code> <code>workbench-port</code> (8000/TCP)","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#db-rank-0-paths","title":"DB <code>rank-0</code> Paths","text":"Path Service Port <code>/cluster-145025b8(/gpudb-0(/.*|$))</code> <code>cluster-145025b8-rank0-service</code> <code>httpd</code> (8082/TCP) <code>/cluster-145025b8/gpudb-0/hostmanager(.*)</code> <code>cluster-145025b8-rank0-service</code> <code>hostmanager</code> (9300/TCP)","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#db-rank-n-paths","title":"DB <code>rank-N</code> Paths","text":"Path Service Port <code>/cluster-145025b8(/gpudb-N(/.*|$))</code> <code>cluster-145025b8-rank1-service</code> <code>httpd</code> (8082/TCP) <code>/cluster-145025b8/gpudb-N/hostmanager(.*)</code> <code>cluster-145025b8-rank1-service</code> <code>hostmanager</code> (9300/TCP)","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#reveal-paths","title":"Reveal Paths","text":"Path Service Port <code>/reveal</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/caravel</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/static</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/logout</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/resetmypassword</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/dashboardmodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/dashboardmodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/slicemodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/slicemodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/sliceaddview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/databaseview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/databaseasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/databasetablesasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/tablemodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/csstemplatemodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/csstemplatemodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/users</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/roles</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/userstatschartview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/permissions</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/viewmenus</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/permissionviews</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/accessrequestsmodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/accessrequestsmodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/logmodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/logmodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/userinfoeditview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/tablecolumninlineview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/sqlmetricinlineview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP)","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#example-ingress-crs","title":"Example Ingress CRs","text":"","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#example-gadmin-ingress-cr","title":"Example GAdmin Ingress CR","text":"Example GAdmin Ingress CR <p>Example GAdmin Ingress CR<pre><code>apiVersion: networking.k8s.io/v1\nkind: Ingress\nmetadata:\n  name:  cluster-name-gadmin-ingress #(1)!\n  namespace: gpudb\nspec:\n  ingressClassName: nginx\n  tls:\n    - hosts:\n        - cluster-name.example.com #(1)!\n      secretName: kinetica-tls\n  rules:\n    - host: cluster-name.example.com #(1)!\n      http:\n        paths:\n          - path: /gadmin\n            pathType: Prefix\n            backend:\n              service:\n                name: cluster-name-gadmin-service #(1)!\n                port:\n                  name: gadmin\n          - path: /tableau\n            pathType: Prefix\n            backend:\n              service:\n                name: cluster-name-gadmin-service #(1)!\n                port:\n                  name: gadmin\n          - path: /files\n            pathType: Prefix\n            backend:\n              service:\n                name: cluster-name-gadmin-service #(1)!\n                port:\n                  name: gadmin\n</code></pre>  1. where <code>cluster-name</code> is the name of the Kinetica Cluster</p>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#example-rank-ingress-cr","title":"Example Rank Ingress CR","text":"Example Rank Ingress CR Example Rank Ingress CR<pre><code>apiVersion: networking.k8s.io/v1\nkind: Ingress\nmetadata:\n  name: cluster-name-rank1-ingress\n  namespace: gpudb\nspec:\n  ingressClassName: nginx\n  tls:\n    - hosts:\n        - cluster-name.example.com\n      secretName: kinetica-tls\n  rules:\n    - host: cluster-name.example.com\n      http:\n        paths:\n          - path: /cluster-name(/gpudb-1(/.*|$))\n            pathType: Prefix\n            backend:\n              service:\n                name: cluster-name-rank1-service\n                port:\n                  name: httpd\n          - path: /cluster-name/gpudb-1/hostmanager(.*)\n            pathType: Prefix\n            backend:\n              service:\n                name: cluster-name-rank1-service\n                port:\n                  name: hostmanager\n</code></pre> <ol> <li>where <code>cluster-name</code> is the name of the Kinetica Cluster</li> </ol>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#example-reveal-ingress-cr","title":"Example Reveal Ingress CR","text":"Example Reveal Ingress CR <p>Example Reveal Ingress CR<pre><code>    apiVersion: networking.k8s.io/v1\n    kind: Ingress\n    metadata:\n      name: cluster-name-reveal-ingress\n      namespace: gpudb\n    spec:\n      ingressClassName: nginx\n      tls:\n        - hosts:\n            - cluster-name.example.com\n          secretName: kinetica-tls\n      rules:\n        - host: cluster-name.example.com\n          http:\n            paths:\n              - path: /reveal\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /caravel\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /static\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /logout\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /resetmypassword\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /dashboardmodelview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /dashboardmodelviewasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /slicemodelview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /slicemodelviewasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /sliceaddview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /databaseview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /databaseasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /databasetablesasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /tablemodelview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /tablemodelviewasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /csstemplatemodelview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /csstemplatemodelviewasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /users\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /roles\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /userstatschartview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /permissions\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /viewmenus\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /permissionviews\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /accessrequestsmodelview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /accessrequestsmodelviewasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /logmodelview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /logmodelviewasync\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /userinfoeditview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /tablecolumninlineview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n              - path: /sqlmetricinlineview\n                pathType: Prefix\n                backend:\n                  service:\n                    name: cluster-name-reveal-service\n                    port:\n                      name: reveal\n</code></pre> 1. where <code>cluster-name</code> is the name of the Kinetica Cluster</p>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_nginx_config/#exposing-the-postgres-proxy-port","title":"Exposing the Postgres Proxy Port","text":"<p>In order to access Kinetica's Postgres functionality some TCP (not HTTP) ports need to be open externally.</p> <p>For <code>ingress-nginx</code> a configuration file needs to be created to enable port 5432.</p> <p>tcp-services.yaml<pre><code>apiVersion: v1\nkind: ConfigMap\nmetadata:\n  name: tcp-services\n  namespace: kinetica-system # (1)!\ndata:\n  '5432': gpudb/kinetica-k8s-sample-rank0-service:5432 #(2)!\n  '9002': gpudb/kinetica-k8s-sample-rank0-service:9002 #(3)!\n</code></pre> 1. Change the namespace to the namespace your ingress-nginx controller is running in. e.g. <code>ingress-nginx</code>  2. This exposes the postgres proxy port on the default <code>5432</code> port. If you wish to change this to a non-standard port then it needs to be changed here but also in the Helm <code>values.yaml</code> to match. 3. This port is the Table Monitor port and should always be exposed alongside the Postgres Proxy.</p>","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/ingress_urls/","title":"Ingress urls","text":""},{"location":"Advanced/ingress_urls/#gadmin-paths","title":"GAdmin Paths","text":"Path Service Port <code>/gadmin</code> <code>cluster-name-gadmin-service</code> <code>gadmin</code> (8080/TCP) <code>/tableau</code> <code>cluster-name-gadmin-service</code> <code>gadmin</code> (8080/TCP) <code>/files</code> <code>cluster-name^-gadmin-service</code> <code>gadmin</code>   (8080/TCP) <p>where <code>cluster-name</code> is the name of the Kinetica Cluster  i.e. what is in the <code>.spec.gpudbCluster.clusterName</code> in the KineticaCluster CR.</p>"},{"location":"Advanced/ingress_urls/#workbench-paths","title":"Workbench Paths","text":"Path Service Port <code>/</code> <code>workbench-workbench-service</code> <code>workbench-port</code> (8000/TCP)"},{"location":"Advanced/ingress_urls/#db-rank-0-paths","title":"DB <code>rank-0</code> Paths","text":"Path Service Port <code>/cluster-145025b8(/gpudb-0(/.*|$))</code> <code>cluster-145025b8-rank0-service</code> <code>httpd</code> (8082/TCP) <code>/cluster-145025b8/gpudb-0/hostmanager(.*)</code> <code>cluster-145025b8-rank0-service</code> <code>hostmanager</code> (9300/TCP)"},{"location":"Advanced/ingress_urls/#db-rank-n-paths","title":"DB <code>rank-N</code> Paths","text":"Path Service Port <code>/cluster-145025b8(/gpudb-N(/.*|$))</code> <code>cluster-145025b8-rank1-service</code> <code>httpd</code> (8082/TCP) <code>/cluster-145025b8/gpudb-N/hostmanager(.*)</code> <code>cluster-145025b8-rank1-service</code> <code>hostmanager</code> (9300/TCP)"},{"location":"Advanced/ingress_urls/#reveal-paths","title":"Reveal Paths","text":"Path Service Port <code>/reveal</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/caravel</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/static</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/logout</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/resetmypassword</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/dashboardmodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/dashboardmodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/slicemodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/slicemodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/sliceaddview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/databaseview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/databaseasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/databasetablesasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/tablemodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/csstemplatemodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/csstemplatemodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/users</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/roles</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/userstatschartview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/permissions</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/viewmenus</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/permissionviews</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/accessrequestsmodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/accessrequestsmodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/logmodelview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/logmodelviewasync</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/userinfoeditview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/tablecolumninlineview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP) <code>/sqlmetricinlineview</code> <code>cluster-name-reveal-service</code> <code>reveal</code> (8088/TCP)"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/","title":"Kinetica images list for airgapped environments","text":"Kinetica Images for an Air-Gapped Environment <p>If you are installing Kinetica with Helm in an air-gapped environment you will either need a Registry Proxy to pass the requests through or to download the images and push them to your internal Registry.</p> <p>For information on ways to transfer the files into an air-gapped environment See here.</p>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#required-container-images","title":"Required Container Images","text":""},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#dockerio-required-kinetica-images-for-all-installations","title":"docker.io (Required Kinetica Images for All Installations)","text":"<ul> <li>docker.io/kinetica/kinetica-k8s-operator:v7.2.0-3.rc-3<ul> <li>docker.io/kinetica/kinetica-k8s-cpu:v7.2.0-3.rc-3 or </li> <li>docker.io/kinetica/kinetica-k8s-cpu-avx512:v7.2.0-3.rc-3 or </li> <li>docker.io/kinetica/kinetica-k8s-gpu:v7.2.0-3.rc-3</li> </ul> </li> <li>docker.io/kinetica/workbench-operator:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/workbench:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/kinetica-k8s-monitor:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/busybox:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/fluent-bit:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/kagent:7.1.9.15.20230823123615.ga</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#nvcrio-required-kinetica-images-for-gpu-installations-using-kinetica-k8s-gpu","title":"nvcr.io (Required Kinetica Images for GPU Installations using <code>kinetica-k8s-gpu</code>)","text":"<ul> <li>nvcr.io/nvidia/gpu-operator:v23.9.1</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#registryk8sio-required-kinetica-images-for-gpu-installations-using-kinetica-k8s-gpu","title":"registry.k8s.io (Required Kinetica Images for GPU Installations using <code>kinetica-k8s-gpu</code>)","text":"<ul> <li>registry.k8s.io/nfd/node-feature-discovery:v0.14.2</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#dockerio-required-supporting-images","title":"docker.io (Required Supporting Images)","text":"<ul> <li>docker.io/bitnami/openldap:2.6.7</li> <li>docker.io/alpine/openssl:latest (used by bitnami/openldap)</li> <li>docker.io/otel/opentelemetry-collector-contrib:0.95.0</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#quayio-required-supporting-images","title":"quay.io (Required Supporting Images)","text":"<ul> <li>quay.io/brancz/kube-rbac-proxy:v0.14.2</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#optional-container-images","title":"Optional Container Images","text":"<p>These images are only required if certain features are enabled as part of the Helm installation: -</p> <ul> <li>CertManager</li> <li>ingress-ninx</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#quayio-optional-supporting-images","title":"quay.io (Optional Supporting Images)","text":"<ul> <li>quay.io/jetstack/cert-manager-cainjector:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> <li>quay.io/jetstack/cert-manager-controller:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> <li>quay.io/jetstack/cert-manager-webhook:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#registryk8sio-optional-supporting-images","title":"registry.k8s.io (Optional Supporting Images)","text":"<ul> <li>registry.k8s.io/ingress-nginx/controller:v1.9.4 (if optionally installing Ingress nGinx via Kinetica Helm Chart)</li> <li>registry.k8s.io/ingress-nginx/controller:v1.9.6@sha256:1405cc613bd95b2c6edd8b2a152510ae91c7e62aea4698500d23b2145960ab9c</li> </ul>"},{"location":"Advanced/kinetica_images_list_for_airgapped_environments/#which-kinetica-core-image-do-i-use","title":"Which Kinetica Core Image do I use?","text":"Container Image Intel (AMD64) Intel (AMD64 AVX512) Amd (AMD64) Graviton (aarch64) Apple Silicon (aarch64) kinetica-k8s-cpu (1) kinetica-k8s-cpu-avx512 kinetica-k8s-gpu (2) (2) (2) <ol> <li>It is preferable on an Intel AVX512 enabled CPU to use the kinetica-k8s-cpu-avx512 container image</li> <li>With a supported nVidia GPU.</li> </ol>"},{"location":"Advanced/kinetica_mac_arm_k8s/","title":"Kinetica DB on Kubernetes","text":"<p>This walkthrough will show how to install Kinetica DB on a Mac running OS X. The Kubernetes cluster will be running on VMs with Ubuntu Linux 22.04 ARM64. </p> <p>This solution is equivalent to a production bare metal installation and does  not use Docker, Podman or QEMU but rather Apple native Virtualization.</p> <p>The Kubernetes cluster will consist of one Master node <code>k8smaster1</code> and two Worker nodes <code>k8snode1</code> &amp; <code>k8snode2</code>.</p> <p>The virtualization platform is UTM. </p> <p>Obtain a Kinetica License Key</p> <p>A product license key will be required for install. Please contact Kinetica Support to request a trial key.</p> <p>Download and install UTM.</p>","tags":["Advanced","Development"]},{"location":"Advanced/kinetica_mac_arm_k8s/#create-the-vms","title":"Create the VMs","text":"","tags":["Advanced","Development"]},{"location":"Advanced/kinetica_mac_arm_k8s/#k8smaster1","title":"<code>k8smaster1</code>","text":"<p>For this walkthrough the master node will be 4 vCPU, 8 GB RAM &amp; 40-64 GB disk.</p> <p>Start the creation of a new VM in UTM. Select <code>Virtualize</code></p> <p></p> <p>Select Linux as the VM OS.</p> <p></p> <p>On the Linux page - Select <code>Use Apple Virtualization</code> and an Ubuntu 22.04 (Arm64) ISO.</p> <p></p> <p>As this is the master Kubernetes node (VM) it can be smaller than the nodes hosting the Kinetica DB itself.</p> <p>Set the memory to 8 GB and the number of CPUs to 4.</p> <p></p> <p>Set the storage to between 40-64 GB.</p> <p></p> <p>This next step is optional if you wish to setup a shared folder between your Mac host &amp; the Linux VM.</p> <p></p> <p>The final step to create the VM is a summary. Please check the values shown and hit <code>Save</code></p> <p></p> <p>You should now see your new VM in the left hand pane of the UTM UI.</p> <p></p> <p>Go ahead and click the  button.</p> <p>Once the Ubuntu installer comes up follow the steps selecting whichever keyboard etc. you require.</p> <p>The only changes you need to make are: -</p> <ul> <li>Change the installation to <code>Ubuntu Server (minimized)</code></li> <li>Your server's name to <code>k8smaster1</code></li> <li>Enable OpenSSH server.</li> </ul> <p>and complete the installation.</p> <p>Reboot the VM, remove the ISO from the 'external' drive .  Log in to the VM and get the VMs IP address with</p> Bash<pre><code>ip a\n</code></pre> <p>Make a note of the IP for later use.</p>","tags":["Advanced","Development"]},{"location":"Advanced/kinetica_mac_arm_k8s/#k8snode1-k8snode2","title":"<code>k8snode1</code> &amp; <code>k8snode2</code>","text":"<p>Repeat the same process to provision one or two nodes depending on how much memory you have available on the Mac.</p> <p>You need to change the RAM size to 16 GB. You can leave the vCPU count at 4.  For the disk size that depends on how much data you want to ingest.  It should however be at least 4x RAM size.</p> <p>Once installed again log in to the VM and get the VMs IP address with</p> Bash<pre><code>ip a\n</code></pre> <p>Note</p> <p>Make a note of the IP(s) for later use.</p> <p>Your VMs are complete</p> <p>Continue installing your new VMs by following  Bare Metal/VM Installation</p>","tags":["Advanced","Development"]},{"location":"Advanced/kube_vip_loadbalancer/","title":"Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations","text":"<p>For our example we are going to enable a Kubernetes based LoadBalancer to issue IP addresses to our Kubernetes Services of type <code>LoadBalancer</code> using <code>kube-vip</code>.</p> Ingress Service is pending <p>The <code>ingress-nginx-controller</code> is currently in the <code>pending</code> state as there is no CCM/LoadBalancer </p>","tags":["Advanced","Ingress","Installation"]},{"location":"Advanced/kube_vip_loadbalancer/#kube-vip","title":"<code>kube-vip</code>","text":"<p>We will install two components into our Kubernetes CLuster</p> <ul> <li>kube-vip-cloud-controller</li> <li>Kubernetes Load-Balancer Service</li> </ul>","tags":["Advanced","Ingress","Installation"]},{"location":"Advanced/kube_vip_loadbalancer/#kube-vip-cloud-controller","title":"kube-vip-cloud-controller","text":"<p>Quote</p> <p>The kube-vip cloud provider can be used to populate  an IP address for Services of type LoadBalancer similar to what  public cloud providers allow through a Kubernetes CCM.</p> Install the kube-vip CCM <p></p> Install the kube-vip CCM<pre><code>kubectl apply -f https://raw.githubusercontent.com/kube-vip/kube-vip-cloud-provider/main/manifest/kube-vip-cloud-controller.yaml\n</code></pre> <p>Now we need to setup the required RBAC permissions: -</p> Install the kube-vip RBAC <p></p> Install kube-vip RBAC<pre><code>kubectl apply -f https://kube-vip.io/manifests/rbac.yaml\n</code></pre> <p>The following ConfigMap will configure the <code>kube-vip-cloud-controller</code> to obtain IP addresses from the host networks DHCP server. i.e. the DHCP on the physical network that the host machine or VM is connected to.</p> Install the kube-vip ConfigMap <p></p> Install the kube-vip ConfigMap<pre><code>apiVersion: v1\nkind: ConfigMap\nmetadata:\n  name: kubevip\n  namespace: kube-system\ndata:\n  cidr-global: 0.0.0.0/32\n</code></pre> <p>It is possible to specify IP address ranges see here.</p>","tags":["Advanced","Ingress","Installation"]},{"location":"Advanced/kube_vip_loadbalancer/#kubernetes-load-balancer-service","title":"Kubernetes Load-Balancer Service","text":"Obtain the Master Node IP address &amp; Interface name Obtain the Master Node IP address &amp; Interface name<pre><code>ip a\n</code></pre> <p>In this example the network interface of the master node is <code>192.168.2.180</code> and the interface is <code>enp0s1</code>.</p> <p>We need to apply the <code>kube-vip</code> daemonset but first we need to create the configuration</p> Install the kube-vip Daemonset<pre><code>apiVersion: apps/v1\nkind: DaemonSet\nmetadata:\n  labels:\n    app.kubernetes.io/name: kube-vip-ds\n    app.kubernetes.io/version: v0.7.2\n  name: kube-vip-ds\n  namespace: kube-system\nspec:\n  selector:\n    matchLabels:\n      app.kubernetes.io/name: kube-vip-ds\n  template:\n    metadata:\n      labels:\n        app.kubernetes.io/name: kube-vip-ds\n        app.kubernetes.io/version: v0.7.2\n    spec:\n      affinity:\n        nodeAffinity:\n          requiredDuringSchedulingIgnoredDuringExecution:\n            nodeSelectorTerms:\n            - matchExpressions:\n              - key: node-role.kubernetes.io/master\n                operator: Exists\n            - matchExpressions:\n              - key: node-role.kubernetes.io/control-plane\n                operator: Exists\n      containers:\n      - args:\n        - manager\n        env:\n        - name: vip_arp\n          value: \"true\"\n        - name: port\n          value: \"6443\"\n        - name: vip_interface\n          value: enp0s1\n        - name: vip_cidr\n          value: \"32\"\n        - name: dns_mode\n          value: first\n        - name: cp_enable\n          value: \"true\"\n        - name: cp_namespace\n          value: kube-system\n        - name: svc_enable\n          value: \"true\"\n        - name: svc_leasename\n          value: plndr-svcs-lock\n        - name: vip_leaderelection\n          value: \"true\"\n        - name: vip_leasename\n          value: plndr-cp-lock\n        - name: vip_leaseduration\n          value: \"5\"\n        - name: vip_renewdeadline\n          value: \"3\"\n        - name: vip_retryperiod\n          value: \"1\"\n        - name: address\n          value: 192.168.2.180\n        - name: prometheus_server\n          value: :2112\n        image: ghcr.io/kube-vip/kube-vip:v0.7.2\n        imagePullPolicy: Always\n        name: kube-vip\n        resources: {}\n        securityContext:\n          capabilities:\n            add:\n            - NET_ADMIN\n            - NET_RAW\n      hostNetwork: true\n      serviceAccountName: kube-vip\n      tolerations:\n      - effect: NoSchedule\n        operator: Exists\n      - effect: NoExecute\n        operator: Exists\n  updateStrategy: {}\n</code></pre> <p>Lines 5, 7, 12, 16, 38 and 62 need modifying to your environment.</p> Install the kube-vip Daemonset <p></p> <p>ARP or BGP</p> <p>The Daemonset above uses ARP to communicate with the network it is also possible to use BGP. See Here</p> Example showing DHCP allocated external IP address to the Ingress Controller <p></p> <p>Our <code>ingress-nginx-controller</code> has been allocated the IP Address <code>192.168.2.194</code>.  </p> <p>Ingress Access</p> <p>The <code>ingress-niginx-controller</code> requires the host FQDN to be on the user requests in order to know how to route the requests to the correct Kubernetes Service. Using the iP address in the URL will cause an error as ingress cannot select the correct service.</p> List Ingress <p></p> <p></p> <p>If you did not set the FQDN of the Kinetica Cluster to a DNS resolvable hostname add <code>local.kinetica</code> to your <code>/etc/hosts/</code> file in order to be able to access the Kinetica URLs</p> Edit /etc/hosts <p></p> <p>Accessing the Workbench</p> <p>You should be able to access the workbench at http://local.kinetica</p>","tags":["Advanced","Ingress","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/","title":"Bare Metal/VM Installation - <code>kubeadm</code>","text":"<p>This walkthrough will show how to install Kinetica DB. For this example the Kubernetes cluster will be running on 3 VMs with Ubuntu Linux 22.04 (ARM64).</p> <p>This solution is equivalent to a production bare metal installation and does not use Docker, Podman or QEMU.</p> <p>The Kubernetes cluster requires 3 VMs consiting of one Master node <code>k8smaster1</code> and two Worker nodes <code>k8snode1</code> &amp; <code>k8snode2</code>.</p> <p>Purple Example Boxes</p> <p>The purple boxes in the instructions below can be expanded for a screen recording of the  commands &amp; their results.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#kubernetes-node-installation","title":"Kubernetes Node Installation","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#setup-the-kubernetes-nodes","title":"Setup the Kubernetes Nodes","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#edit-etchosts","title":"Edit <code>/etc/hosts</code>","text":"<p>SSH into each of the nodes and run the following: -</p> Edit `/etc/hosts<pre><code>sudo vi /etc/hosts\n\nx.x.x.x k8smaster1\nx.x.x.x k8snode1\nx.x.x.x k8snode2\n</code></pre> <p>where x.x.x.x is the IP Address of the corresponding nose.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#disable-linux-swap","title":"Disable Linux Swap","text":"<p>Next we need to disable Swap on Linux: -</p> Disable Swap <p></p> Disable Swap<pre><code>sudo swapoff -a\n\nsudo vi /etc/fstab\n</code></pre> <p>comment out the swap entry in <code>/etc/fstab</code> on each node.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#linux-system-configuration-changes","title":"Linux System Configuration Changes","text":"<p>We are using containerd as the container runtime but in order to do so we need to make some system level changes on Linux.</p> Linux System Configuration Changes <p></p> Linux System Configuration Changes<pre><code>cat &lt;&lt; EOF | sudo tee /etc/modules-load.d/containerd.conf\noverlay\nbr_netfilter\nEOF\n\nsudo modprobe overlay\n\nsudo modprobe br_netfilter\n\ncat &lt;&lt; EOF | sudo tee /etc/sysctl.d/99-kubernetes-cri.conf\nnet.bridge.bridge-nf-call-iptables = 1\nnet.ipv4.ip_forward = 1\nnet.bridge.bridge-nf-call-ip6tables = 1\nEOF\n\nsudo sysctl --system\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#container-runtime-installation","title":"Container Runtime Installation","text":"<p>Run on all nodes (VMs)</p> <p>Run the following commands, until advised not to, on all of the VMs you created.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-containerd","title":"Install <code>containerd</code>","text":"Install <code>containerd</code> Install `containerd`<pre><code>sudo apt update\n\nsudo apt install -y containerd\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#create-a-default-containerd-config","title":"Create a Default <code>containerd</code> Config","text":"Create a Default <code>containerd</code> Config Create a Default `containerd` Config<pre><code>sudo mkdir -p /etc/containerd\n\nsudo containerd config default | sudo tee /etc/containerd/config.toml\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#enable-system-cgroup","title":"Enable System CGroup","text":"<p>Change the SystemdCgroup value to true in the containerd configuration file and restart the service</p> Enable System CGroup <p></p> Enable System CGroup<pre><code>sudo sed -i 's/SystemdCgroup \\= false/SystemdCgroup \\= true/g' /etc/containerd/config.toml\n\nsudo systemctl restart containerd\nsudo systemctl enable containerd\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-pre-requisiteutility-packages","title":"Install Pre-requisite/Utility packages","text":"Install Pre-requisite/Utility packages Install Pre-requisite/Utility packages<pre><code>sudo apt update\n\nsudo apt install -y apt-transport-https ca-certificates curl gpg git\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#download-the-kubernetes-public-signing-key","title":"Download the Kubernetes public signing key","text":"Download the Kubernetes public signing key Download the Kubernetes public signing key<pre><code>curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.29/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#add-the-kubernetes-package-repository","title":"Add the Kubernetes Package Repository","text":"Add the Kubernetes Package Repository<pre><code>echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.29/deb/ /' | sudo tee /etc/apt/sources.list.d/kubernetes.list\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-the-kubernetes-installation-and-management-tools","title":"Install the Kubernetes Installation and Management Tools","text":"Install the Kubernetes Installation and Management Tools Install the Kubernetes Installation and Management Tools<pre><code>sudo apt update\n\nsudo apt install -y kubeadm=1.29.0-1.1  kubelet=1.29.0-1.1  kubectl=1.29.0-1.1 \n\nsudo apt-mark hold kubeadm kubelet kubectl\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#initialize-the-kubernetes-cluster","title":"Initialize the Kubernetes Cluster","text":"<p>Initialize the Kubernetes Cluster by using kubeadm on the <code>k8smaster1</code> control plane node.</p> <p>Note</p> <p>You will need an IP Address range for the Kubernetes Pods. This range is provided to <code>kubeadm</code> as part of the initialization. For our cluster of three nodes, given the default number of pods supported by a node (110) we need a CIDR of at least 330 distinct IP Addresses. Therefore, for this example we will use a <code>--pod-network-cidr</code> of <code>10.1.1.0/22</code> which allows for 1007 usable IPs. The reason for this is each node will get <code>/24</code> of the <code>/22</code> total.</p> <p>The <code>apiserver-advertise-address</code> should be the IP Address of the <code>k8smaster1</code> VM.</p> Initialize the Kubernetes Cluster <p></p> Initialize the Kubernetes Cluster<pre><code>sudo kubeadm init --pod-network-cidr 10.1.1.0/22 --apiserver-advertise-address 192.168.2.180 --kubernetes-version 1.29.2\n</code></pre> <p>You should now deploy a pod network to the cluster. Run <code>kubectl apply -f [podnetwork].yaml</code> with one of the options listed at: Cluster Administration Addons</p> <p>Make a note of the portion of the shell output which gives the join command which we will need to add our worker nodes to the master.</p> <p>Copy the <code>kudeadm join</code> command</p> <p>Then you can join any number of worker nodes by running the following on each as root:</p> Copy the `kudeadm join` command<pre><code>kubeadm join 192.168.2.180:6443 --token wonuiv.v93rkizr6wvxwe6l \\\n--discovery-token-ca-cert-hash sha256:046ffa6303e6b281285a636e856b8e9e51d8c755248d9d013e15ae5c5f6bb127\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#setup-kubeconfig","title":"Setup <code>kubeconfig</code>","text":"<p>Before we add the worker nodes we can setup the <code>kubeconfig</code> so we will be able to use <code>kubectl</code> going forwards.</p> Setup <code>kubeconfig</code> <p></p> Setup `kubeconfig`<pre><code>sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config\nsudo chown $(id -u):$(id -g) $HOME/.kube/config\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#connect-list-the-kubernetes-cluster-nodes","title":"Connect &amp; List the Kubernetes Cluster Nodes","text":"<p>We can now run <code>kubectl</code> to connect to the Kubernetes API Server to display the nodes in the newly created Kubernetes CLuster.</p> Connect &amp; List the Kubernetes Cluster Nodes <p></p> Connect &amp; List the Kubernetes Cluster Nodes<pre><code>kubectl get nodes\n</code></pre> <p>STATUS = NotReady</p> <p>From the <code>kubectl</code> output the status of the <code>k8smaster1</code> node is showing as <code>NotReady</code> as we have yet to install the Kubernetes Network to the cluster.</p> <p>We will be installing <code>cilium</code> as that provider in a future step.</p> <p>Warning</p> <p>At this point we should complete the installations of the worker nodes to this same point before continuing.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#join-the-worker-nodes-to-the-cluster","title":"Join the Worker Nodes to the Cluster","text":"<p>Once installed we run the join on the worker nodes. Note that the command which was output from the <code>kubeadm init</code> needs to run with <code>sudo</code></p> Join the Worker Nodes to the Cluster<pre><code>sudo kubeadm join 192.168.2.180:6443 --token wonuiv.v93rkizr6wvxwe6l \\\n    --discovery-token-ca-cert-hash sha256:046ffa6303e6b281285a636e856b8e9e51d8c755248d9d013e15ae5c5f6bb127\n</code></pre> <code>kubectl get nodes</code> <p></p> <p>Now we can again run</p> `kubectl get nodes`<pre><code>kubectl get nodes\n</code></pre> <p>Now we can see all the nodes are present in the Kubernetes Cluster.</p> <p>Run on Head Node only</p> <p>From now the following cpmmands need to be run on the Master Node only..</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-kubernetes-networking","title":"Install Kubernetes Networking","text":"<p>We now need to install a Kubernetes CNI (Container Network Interface) to enable the pod network.</p> <p>We will use Cilium as the CNI for our cluster.</p> Installing the Cilium CLI<pre><code>curl -LO https://github.com/cilium/cilium-cli/releases/latest/download/cilium-linux-arm64.tar.gz\nsudo tar xzvfC cilium-linux-arm64.tar.gz /usr/local/bin\nrm cilium-linux-arm64.tar.gz\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-cilium","title":"Install <code>cilium</code>","text":"<p>You can now install Cilium with the following command:</p> Install `cilium`<pre><code>cilium install\ncilium status \n</code></pre> <p>If <code>cilium status</code> shows errors you may need to wait until the Cilium pods have started.</p> <p>You can check progress with</p> Bash<pre><code>kubectl get po -A\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#check-cilium-status","title":"Check <code>cilium</code> Status","text":"<p>Once Cilium the Cilium pods are running we can check the status of Cilium again by using</p> Check <code>cilium</code> Status <p></p> Check `cilium` Status<pre><code>cilium status \n</code></pre> <p>We can now recheck the Kubernetes Cluster Nodes</p> <p></p> Bash<pre><code>kubectl get nodes\n</code></pre> <p>and they should have <code>Status Ready</code></p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#kubernetes-node-preparation","title":"Kubernetes Node Preparation","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#label-kubernetes-nodes","title":"Label Kubernetes Nodes","text":"<p>Now we go ahead and label the nodes. Kinetica uses node labels in production clusters where there are separate 'node groups'  configured so that the Kinetica Infrastructure pods are deployed on a smaller VM type and the DB itself is deployed on larger nodes or gpu enabled nodes.</p> <p>If we were using a Cloud Provider Kubernetes these are synonymous with EKS Node Groups or AKS VMSS which would be created with the same two labels on two node groups.</p> Label Kubernetes Nodes<pre><code>kubectl label node k8snode1 app.kinetica.com/pool=infra\nkubectl label node k8snode2 app.kinetica.com/pool=compute\n</code></pre> <p>additionally in our case as we have created a new cluster the 'role' of the worker nodes is not set so we can also set that. In many cases the role is already set to <code>worker</code> but here we have some latitude.</p> <p></p> Bash<pre><code>kubectl label node k8snode1 kubernetes.io/role=kinetica-infra\nkubectl label node k8snode2 kubernetes.io/role=kinetica-compute\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-storage-class","title":"Install Storage Class","text":"<p>Install a local path provisioner storage class. In this case we are using the Rancher Local Path provisioner</p> Install Storage Class <p></p> Install Storage Class<pre><code>kubectl apply -f https://raw.githubusercontent.com/rancher/local-path-provisioner/v0.0.26/deploy/local-path-storage.yaml\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#set-default-storage-class","title":"Set Default Storage Class","text":"Set Default Storage Class Set Default Storage Class<pre><code>kubectl patch storageclass local-path -p '{\"metadata\": {\"annotations\":{\"storageclass.kubernetes.io/is-default-class\":\"true\"}}}'\n</code></pre> <p>Kubernetes Cluster Provision Complete</p> <p>Your basre Kubernetes Cluster is now complete and ready to have the Kinetica DB installed on it using the Helm Chart.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#install-kinetica-for-kubernetes-using-helm","title":"Install Kinetica for Kubernetes using Helm","text":"","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#add-the-helm-repository","title":"Add the Helm Repository","text":"Add the Helm Repository Add the Helm Repository<pre><code>helm repo add kinetica-operators https://kineticadb.github.io/charts\nhelm repo update\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#download-a-starter-helm-valuesyaml","title":"Download a Starter Helm <code>values.yaml</code>","text":"<p>Now we need to obtain a starter <code>values.yaml</code> file to pass to our Helm install. We can download one from the <code>github.com/kineticadb/charts</code> repo.</p> Download a Starter Helm <code>values.yaml</code> <p></p> Download a Starter Helm `values.yaml`<pre><code>    wget https://raw.githubusercontent.com/kineticadb/charts/master/kinetica-operators/values.onPrem.k8s.yaml\n</code></pre> <p>Obtain a Kinetica License Key</p> <p>A product license key will be required for install. Please contact Kinetica Support to request a trial key.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#helm-install-kinetica","title":"Helm Install Kinetica","text":"#### Helm Install Kinetica Helm install kinetica-operators<pre><code>helm -n kinetica-system upgrade -i \\\nkinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--values values.onPrem.k8s.yaml \\\n--set db.gpudbCluster.license=\"LICENSE-KEY\" \\\n--set dbAdminUser.password=\"PASSWORD\" \\\n--set global.defaultStorageClass=\"local-path\"\n</code></pre>","tags":["Advanced","Installation"]},{"location":"Advanced/kubernetes_bare_metal_vm_install/#monitor-kinetica-startup","title":"Monitor Kinetica Startup","text":"<p>After a few moments, follow the progression of the main database pod startup with:</p> Monitor the Kinetica installation progress<pre><code>kubectl -n gpudb get po gpudb-0 -w\n</code></pre> <p>Kinetica DB Provision Complete</p> <p>Once you see <code>gpudb-0 3/3 Running</code> the database is up and running.</p> <p>Software LoadBalancer</p> <p>If you require a software based LoadBalancer to allocate IP address to the  Ingress Controller or exposed Kubernetes Services then see here</p> <p>This is usually apparent if your ingress or other Kubernetes Services with the type <code>LoadBalancer</code> are stuck in the <code>Pending</code> state.</p>","tags":["Advanced","Installation"]},{"location":"Advanced/minio_s3_dev_test/","title":"Using Minio for S3 Storage in Dev/Test","text":"<p>If you require a new Minio installation</p> <p>Please follow the installation instructions found  here  to install the Minio Operator and to create your first tenant.</p>","tags":["Advanced","Development","Installation","Storage"]},{"location":"Advanced/minio_s3_dev_test/#create-minio-tenant","title":"Create Minio Tenant","text":"<p>In our example below we have created a tenant <code>kinetica</code> in the <code>gpudb</code> namespace using  the Kinetica storage class <code>kinetica-k8s-sample-storageclass</code>.</p> <p></p> <p>or use the minio kubectl plugin</p> minio cli - create tenant<pre><code>kubectl minio tenant create kinetica --capacity 32Gi --servers 1 --volumes 1 --namespace gpudb --storage-class kinetica-k8s-sample-storageclass --disable-tls\n</code></pre> <p>Console Port Forward</p> <p>Forward the minio console for our newly created tenant</p> Bash<pre><code>kubectl port-forward service/kinetica-console -n gpudb 9443:9443\n</code></pre> <p>In that tenant we create a bucket <code>kinetica-cold-storage</code> and in that bucket we create the path <code>gpudb/cold-storage</code>.</p> <p></p> <p>Once you have a tenant up and running we can configure Kinetica for Kubernetes to use  it as the DB Cold Storage tier.</p> <p>Backup/Restore Storage</p> <p>Minio can also be used as the S3 storage for Velero. This enables Backup/Restore functionality via the <code>KineticaBackup</code> &amp; <code>KineticaRestore</code> CRs.</p>","tags":["Advanced","Development","Installation","Storage"]},{"location":"Advanced/minio_s3_dev_test/#configuring-kinetica-to-use-minio","title":"Configuring Kinetica to use Minio","text":"","tags":["Advanced","Development","Installation","Storage"]},{"location":"Advanced/minio_s3_dev_test/#cold-storage","title":"Cold Storage","text":"<p>In order to configure the Cold Storage Tier for the Database it is necessary to add a  <code>coldStorageTier</code> to the <code>KineticaCluster</code> CR. As we are using S3 Buckets for storage we then require <code>coldStorageS3</code> entry which allows us to set the <code>awsSecretAccessKey</code> &amp; <code>awsAccessKeyId</code> which were generated when the tenant was created in Minio. </p> <p>If we look in the <code>gpudb</code> name space we can see that Minio created a  Kubernetes service called <code>minio</code> exposed on port <code>443</code>.   </p> <p>In the <code>coldStorageS3</code> we need to add an <code>endpoint</code> field which contains the <code>minio</code> service name and the namespace <code>gpudb</code> i.e. <code>minio.gpudb.svc.cluster.local</code>.</p> KineticaCluster coldStorageTier S3 Configuration<pre><code>spec:\n  gpudbCluster:\n    config:\n      tieredStorage:\n        coldStorageTier:\n            coldStorageType: s3\n            coldStorageS3:\n            basePath: gpudb/cold-storage/\n            bucketName: kinetica-cold-storage\n            endpoint: minio.gpudb.svc.cluster.local:80\n            limit: \"32Gi\"\n            useHttps: false\n            useManagedCredentials: false\n            useVirtualAddressing: false\n            awsSecretAccessKey: 6rLaOOddP3KStwPDhf47XLHREPdBqdav\n            awsAccessKeyId: VvlP5rHbQqzcYPHG\n      tieredStrategy:\n        default: VRAM 1, RAM 5, PERSIST 5, COLD0 10\n</code></pre>","tags":["Advanced","Development","Installation","Storage"]},{"location":"Advanced/nginx_ingress_config/","title":"<code>nginx-ingress</code> Ingress Configuration","text":"","tags":["Advanced","Configuration","Ingress"]},{"location":"Advanced/nginx_ingress_config/#coming-soon","title":"Coming Soon","text":"","tags":["Advanced","Configuration","Ingress"]},{"location":"Architecture/","title":"Architecture","text":"<p>Kinetica is a distributed, vectorized, memory-first, columnar database with tiered storage that is optimized for high speed and performance \u2013 particularly on streaming analytics and geospatial workloads.</p> <p>Kinetica has been uniquely designed for fast and flexible analytics on large volumes of changing data with incredible performance.</p> <ul> <li> <p> Kinetica Database Architecture</p> <p>Install the Kinetica DB with helm and get up and running in minutes   Core Database Architecture</p> </li> <li> <p> Kinetica for Kubernetes Architecture</p> <p>Install the Kinetica DB with helm and get up and running in minutes   Kubernetes Architecture</p> </li> </ul>","tags":["Architecture"]},{"location":"Architecture/db_architecture/","title":"Architecture","text":"<p>Kinetica is a distributed, vectorized, memory-first, columnar database with tiered storage that is optimized for high speed and performance \u2013 particularly on streaming analytics and geospatial workloads.</p> <p>Kinetica has been uniquely designed for fast and flexible analytics on large volumes of changing data with incredible performance.</p>","tags":["Architecture"]},{"location":"Architecture/db_architecture/#database-architecture","title":"Database Architecture","text":"","tags":["Architecture"]},{"location":"Architecture/db_architecture/#scale-out-architecture","title":"Scale-out Architecture","text":"<p>Kinetica has a distributed architecture that has been designed for data processing at scale. A standard cluster consists of identical nodes run on commodity hardware. A single node is chosen to be the head aggregation node.</p> <p> A cluster can be scaled up at any time to increase storage capacity and processing power, with near-linear scale processing improvements for most operations. Sharding of data can be done automatically, or specified and optimized by the user.</p>","tags":["Architecture"]},{"location":"Architecture/db_architecture/#distributed-ingest-query","title":"Distributed Ingest &amp; Query","text":"<p>Kinetica uses a shared-nothing data distribution across worker nodes. The head node receives a query and breaks it down into small tasks that can be spread across worker nodes. To avoid bottlenecks at the head node, ingestion can also be organized in parallel by all the worker nodes. Kinetica is able to distribute data client-side before sending it to designated worker nodes. This streamlines communication and processing time.</p> <p>For the client application, there is no need to be aware of how many nodes are in the cluster, where they are, or how the data is distributed across them!</p> <p></p>","tags":["Architecture"]},{"location":"Architecture/db_architecture/#column-oriented","title":"Column Oriented","text":"<p>Columnar data structures lend themselves to low-latency reads of data. But from a user's perspective, Kinetica behaves very similarly to a standard relational database \u2013 with tables of rows and columns and it can be queried with SQL or through APIs. Available column types include the standard base types (int, long, float, double, string, &amp; bytes), as well as numerous sub-types supporting date/time, geospatial, and other data forms.</p> <p></p>","tags":["Architecture"]},{"location":"Architecture/db_architecture/#vectorized-functions","title":"Vectorized Functions","text":"<p>Vectorization is Kinetica\u2019s secret sauce and the key feature that underpins its blazing fast performance.</p> <p>Advanced vectorized kernels are optimized to use vectorized CPUs and GPUs for faster performance. The query engine automatically assigns tasks to the processor where they will be most performant. Aggregations, filters, window functions, joins and geospatial rendering are some of the capabilities that see performance improvements.</p> <p></p>","tags":["Architecture"]},{"location":"Architecture/db_architecture/#memory-first-tiered-storage","title":"Memory-First, Tiered Storage","text":"<p>Tiered storage makes it possible to optimize where data lives for performance and cost. Recent data (such as all data where the timestamp is within the last 2 weeks) can be held in-memory, while older data can be moved to disk, or even to external storage services.</p> <p>Kinetica operates on an entire data corpus by intelligently managing data across GPU memory, system memory, SIMD, disk / SSD, HDFS, and cloud storage like S3 for optimal performance.</p> <p>Kinetica can also query and process data stored in data lakes, joining it with data managed by Kinetica in highly parallelized queries.</p>","tags":["Architecture"]},{"location":"Architecture/db_architecture/#performant-key-value-lookup","title":"Performant Key-Value Lookup","text":"<p>Kinetica is able to generate distributed key-value lookups, from columnar data, for high-performance and concurrency. Sharding logic is embedded directly within client APIs enabling linear scale-out as clients can lookup data directly from the node where the data lives.</p>","tags":["Architecture"]},{"location":"Architecture/kinetica_for_kubernetes_architecture/","title":"Kubernetes Architecture","text":"","tags":["Architecture"]},{"location":"Architecture/kinetica_for_kubernetes_architecture/#coming-soon","title":"Coming Soon","text":"","tags":["Architecture"]},{"location":"GettingStarted/","title":"Getting Started","text":"<ul> <li> <p> Set up in 15 minutes (local install)</p> <p>Install the Kinetica DB locally on <code>Kind</code> or <code>k3s</code> with <code>helm</code> to get up and running in minutes (Dev/Test).</p> <p> Quickstart</p> </li> <li> <p> Prepare to Install</p> <p>What you need to know &amp; do before beginning an installation.</p> <p> Preparation and Prerequisites</p> </li> <li> <p> Production Installation</p> <p>Install the Kinetica DB with helm to get up and running quickly (Production).</p> <p> Installation</p> </li> <li> <p> Channel Your Inner Ninja</p> <p>Advanced Installation Topics which go beyond the basic installation.</p> <p> Advanced Topics</p> </li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/aks/","title":"Azure AKS Specifics","text":"<p>This page covers any Microsoft Azure AKS cluster installation specifics.</p>","tags":["AKS","Getting Started"]},{"location":"GettingStarted/eks/","title":"Amazon EKS Specifics","text":"<p>This page covers any Amazon EKS kubernetes cluster installation specifics.</p>","tags":["EKS","Getting Started","Storage"]},{"location":"GettingStarted/eks/#ebs-csi-driver","title":"EBS CSI driver","text":"<p>Warning</p> <p>Make sure you have enabled the ebs-csi driver in your EKS cluster. This is required for the default storage class to work.</p> <p>Please refer to this AWS documentation for more information.</p>","tags":["EKS","Getting Started","Storage"]},{"location":"GettingStarted/helm_repo_add/","title":"Helm repo add","text":"Add Kinetica Operators Chart Repo<pre><code>helm repo add kinetica-operators https://kineticadb.github.io/charts/latest\n</code></pre>"},{"location":"GettingStarted/installation/","title":"Kinetica for Kubernetes Installation","text":"<ul> <li> <p> CPU Only Installation </p> <p>Install the Kinetica DB to run on Intel, AMD or ARM CPUs with no GPU acceleration.   CPU</p> </li> <li> <p> CPU &amp; GPU Installation</p> <p>Install the Kinetica DB to run on nodes with nVidia GPU acceleration.  Optionally enable Kinetica On-Prem SQLAssistant (LLM).  GPU</p> </li> </ul>","tags":["Installation"]},{"location":"GettingStarted/installation_cpu/","title":"Installation - CPU Only","text":"<p>For managed Kubernetes solutions (AKS, EKS, GKE) or on-prem (kubeadm) Kubernetes variants,  follow this generic guide to install the Kinetica Operators, Database and Workbench.</p> <p>Preparation &amp; Prequisites</p> <p>Please make sure you have followed the Preparation &amp; Prequisites steps</p>","tags":["Installation"]},{"location":"GettingStarted/installation_cpu/#install-the-helm-chart","title":"Install the helm chart","text":"<p>Run the following Helm install command after substituting values from section 3</p> Helm install kinetica-operators<pre><code>helm -n kinetica-system install \\\nkinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--values values.onPrem.k8s.yaml \\\n--set db.gpudbCluster.license=\"LICENSE-KEY\" \\\n--set dbAdminUser.password=\"PASSWORD\" \\\n--set global.defaultStorageClass=\"DEFAULT-STORAGE-CLASS\"\n</code></pre>","tags":["Installation"]},{"location":"GettingStarted/installation_cpu/#check-installation-progress","title":"Check installation progress","text":"<p>After a few moments, follow the progression of the main database pod startup with:</p> Monitor the Kinetica installation progress<pre><code>kubectl -n gpudb get po gpudb-0 -w\n</code></pre> <p>until it reaches <code>\"gpudb-0  3/3  Running\"</code> at which point the database should be ready and all other software installed in the cluster. You may have to run this command in a different terminal if the <code>helm</code> command from step 4 has not yet returned to the system prompt. Once running, you can quit this kubectl watch command using Ctrl+C.</p> error no pod named gpudb-0 <p>If you receive an error message running <code>kubectl -n gpudb get po gpudb-0 -w</code> informing you that no pod named <code>gpudb-0</code> exists. Please check that the OpenLDAP pod is running by running</p> Check OpenLDAP status<pre><code>kubectl -n gpudb get pods\nkubectl -n gpudb describe pod openldap-5f87f77c8b-trpmf\n</code></pre> <p>where the pod name <code>openldap-5f87f77c8b-trpmf</code> is that shown when running <code>kubectl -n gpudb get pods</code></p> <p>Validate if the pod is waiting for it's Persistent Volume Claim/Persistent Volume to be created and bound to the pod.</p>","tags":["Installation"]},{"location":"GettingStarted/installation_cpu/#accessing-the-kinetica-installation","title":"Accessing the Kinetica installation","text":"","tags":["Installation"]},{"location":"GettingStarted/installation_cpu/#target-platform-specifics","title":"Target Platform Specifics","text":"cloudlocal - devbare metal - prod <p>If you are installing into a managed Kubernetes environment and the NGINX ingress controller that is installed as part of this install creates a LoadBalancer service, you may need to associate the LoadBalancer with the domain you plan to use.</p> <p>As of now, the kinetica-operator chart installs NGINX ingress controller.  So after the installation is complete, you may need to edit the KineticaCluster Custom Resource  and Workbench Custom Resource with the correct domain name.</p> <p>Option 1: Use the LoadBalancer domain  Set your FQDN in Kinetica<pre><code>kubectl get svc -n kinetica-system\n# look at the loadbalancer dns name, copy it\n\nkubectl -n gpudb edit $(kubectl -n gpudb get kc -o name)\n# replace local.kinetica with the loadbalancer dns name\nkubectl -n gpudb edit $(kubectl -n gpudb get wb -o name)\n# replace local.kinetica with the loadbalancer dns name\n# save and exit\n# you should be able to access the workbench from the loadbalancer dns name\n</code></pre></p> <p>Option 2: Use your custom domain  Create a record in your DNS server pointing to the LoadBalancer DNS.   Then edit the KineticaCluster Custom Resource and Workbench Custom Resource with   the correct domain name, as mentioned above.</p> <p>Installing on a local machine which does not have a domain name, you can add the following entry to your <code>/etc/hosts</code> file or equivalent:</p> Configure local acces - /etc/hosts<pre><code>127.0.0.1  local.kinetica\n</code></pre> <p>Note</p> <p>The default chart configuration points to <code>local.kinetica</code> but this is configurable.</p> <p>Installing on a bare metal machines which do not have an external hardware loadbalancer requires an  Ingress controller along with a software loadbalancer in order to be accessible. </p> <p>Kinetica for Kubernetes has been tested with  kube-vip</p>","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/","title":"Installation - CPU with GPU Acceleration","text":"<p>For managed Kubernetes solutions (AKS, EKS, GKE) or on-prem (kubeadm) Kubernetes variants, follow this generic guide to install the Kinetica Operators, Database and Workbench.</p> <p>Preparation &amp; Prequisites</p> <p>Please make sure you have followed the Preparation &amp; Prequisites steps</p>","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/#install-via-the-kinetica-operators-helm-chart","title":"Install via the <code>kinetica-operators</code> Helm Chart","text":"","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/#gpu-cluster-with-remote-sqlassistant","title":"GPU Cluster with Remote SQLAssistant","text":"<p>Run the following Helm install command after substituting values from section 3</p> Helm install kinetica-operators (No On-Prem SQLAssistant)<pre><code>helm -n kinetica-system install \\\nkinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--values values.onPrem.k8s.yaml \\\n--set db.gpudbCluster.license=\"LICENSE-KEY\" \\\n--set dbAdminUser.password=\"PASSWORD\" \\\n--set global.defaultStorageClass=\"DEFAULT-STORAGE-CLASS\"\n</code></pre>","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/#gpu-cluster-with-on-prem-sqlassistant","title":"GPU Cluster with On-Prem SQLAssistant","text":"<p>or to enable SQLAssistant to be deployed and run 'On-Prem' i.e. in the same cluster</p> Helm install kinetica-operators (With On-Prem SQLAssistant)<pre><code>helm -n kinetica-system install \\\nkinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--values values.onPrem.k8s.yaml \\\n--set db.gpudbCluster.license=\"LICENSE-KEY\" \\\n--set dbAdminUser.password=\"PASSWORD\" \\\n--set global.defaultStorageClass=\"DEFAULT-STORAGE-CLASS\"\n--set db.gpudbCluster.config.ai.apiProvider = \"kineticallm\"\n</code></pre> <p>On-Prem Kinetica SQLAssistant - Nodes Groups, GPU Counts &amp; VRAM Memory</p> <p>To run the Kinetica SQLAssistant locally requires additional GPUs to be available in a separate Node Group labeled <code>app.kinetica.com/pool=compute-llm</code>.  In order for the On-Prem Kinetica LLM to run it requires 40GB GPU VRAM therefore the number of GPUs automatically allocated to the SQLAssistant pod will ensure that the 40GB VRAM is available e.g. 1x A100 GPU or 2x A10G GPU. </p> Label Kubernetes Nodes for LLM<pre><code>kubectl label node k8snode3 app.kinetica.com/pool=compute-llm\n</code></pre>","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/#check-installation-progress","title":"Check installation progress","text":"<p>After a few moments, follow the progression of the main database pod startup with:</p> Monitor the Kinetica installation progress<pre><code>kubectl -n gpudb get po gpudb-0 -w\n</code></pre> <p>until it reaches <code>\"gpudb-0  3/3  Running\"</code> at which point the database should be ready and all other software installed in the cluster. You may have to run this command in a different terminal if the <code>helm</code> command from step 4 has not yet returned to the system prompt. Once running, you can quit this kubectl watch command using Ctrl+C.</p> error no pod named gpudb-0 <p>If you receive an error message running <code>kubectl -n gpudb get po gpudb-0 -w</code> informing you that no pod named <code>gpudb-0</code> exists. Please check that the OpenLDAP pod is running by running</p> Check OpenLDAP status<pre><code>kubectl -n gpudb get pods\nkubectl -n gpudb describe pod openldap-5f87f77c8b-trpmf\n</code></pre> <p>where the pod name <code>openldap-5f87f77c8b-trpmf</code> is that shown when running <code>kubectl -n gpudb get pods</code></p> <p>Validate if the pod is waiting for it's Persistent Volume Claim/Persistent Volume to be created and bound to the pod.</p>","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/#accessing-the-kinetica-installation","title":"Accessing the Kinetica installation","text":"","tags":["Installation"]},{"location":"GettingStarted/installation_gpu/#target-platform-specifics","title":"Target Platform Specifics","text":"cloudlocal - devbare metal - prod <p>If you are installing into a managed Kubernetes environment and the NGINX ingress controller that is installed as part of this install creates a LoadBalancer service, you may need to associate the LoadBalancer with the domain you plan to use.</p> <p>As of now, the kinetica-operator chart installs NGINX ingress controller.  So after the installation is complete, you may need to edit the KineticaCluster Custom Resource  and Workbench Custom Resource with the correct domain name.</p> <p>Option 1: Use the LoadBalancer domain  Set your FQDN in Kinetica<pre><code>kubectl get svc -n kinetica-system\n# look at the loadbalancer dns name, copy it\n\nkubectl -n gpudb edit $(kubectl -n gpudb get kc -o name)\n# replace local.kinetica with the loadbalancer dns name\nkubectl -n gpudb edit $(kubectl -n gpudb get wb -o name)\n# replace local.kinetica with the loadbalancer dns name\n# save and exit\n# you should be able to access the workbench from the loadbalancer dns name\n</code></pre></p> <p>Option 2: Use your custom domain  Create a record in your DNS server pointing to the LoadBalancer DNS. Then edit the KineticaCluster Custom Resource and Workbench Custom Resource with the correct domain name, as mentioned above.</p> <p>Installing on a local machine which does not have a domain name, you can add the following entry to your <code>/etc/hosts</code> file or equivalent:</p> Configure local acces - /etc/hosts<pre><code>127.0.0.1  local.kinetica\n</code></pre> <p>Note</p> <p>The default chart configuration points to <code>local.kinetica</code> but this is configurable.</p> <p>Installing on a bare metal machines which do not have an external hardware loadbalancer requires an Ingress controller along with a software loadbalancer in order to be accessible.</p> <p>Kinetica for Kubernetes has been tested with  kube-vip</p>","tags":["Installation"]},{"location":"GettingStarted/local_kinetica_etc_hosts/","title":"Local kinetica etc hosts","text":"<p>FQDN or Local Access</p> <p>By default we create an ingress pointing towards <code>local.kinetica</code>.  If you have a domain pointing to your machine, replace/set the FQDN in the <code>values.yaml</code>  with the correct domain name or by adding <code>--set</code>.</p> <p>If you are on a local machine which is not having a domain name,  you add the following entry to your <code>/etc/hosts</code> file or equivalent.</p> Configure local access - /etc/hosts<pre><code>127.0.0.1  local.kinetica\n</code></pre>"},{"location":"GettingStarted/note_additional_gpu_sqlassistant/","title":"Note additional gpu sqlassistant","text":"<p>On-Prem Kinetica SQLAssistant - Nodes Groups, GPU Counts &amp; VRAM Memory</p> <p>To run the Kinetica SQLAssistant locally requires additional GPUs to be available in a separate Node Group labeled <code>app.kinetica.com/pool=compute-llm</code>.  In order for the On-Prem Kinetica LLM to run it requires 40GB GPU VRAM therefore the number of GPUs automatically allocated to the SQLAssistant pod will ensure that the 40GB VRAM is available e.g. 1x A100 GPU or 2x A10G GPU. </p> Label Kubernetes Nodes for LLM<pre><code>kubectl label node k8snode3 app.kinetica.com/pool=compute-llm\n</code></pre>"},{"location":"GettingStarted/preparation_and_prerequisites/","title":"Preparation &amp; Prerequisites","text":"<p>Checks &amp; steps to ensure a smooth installation.</p> <p>Obtain a Kinetica License Key</p> <p>A product license key will be required for install. Please contact Kinetica Support to request a trial key.</p> <p>Failing to provide a license key at installation time will prevent the DB from starting.</p>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#preparation-and-prerequisites","title":"Preparation and prerequisites","text":"<p>Free Resources</p> <p>Your Kubernetes cluster version should be &gt;= 1.22.x and have a minimum of 8 CPU, 8GB Ram and SSD or SATA 7200RPM hard drive(s) with 4X memory capacity.</p> GPU Support <p>For GPU enabled clusters the cards below have been tested in large-scale production environments and  provide the best performance for the database.</p> GPU Driver P4/P40/P100 525.X (or higher) V100 525.X (or higher) T4 525.X (or higher) A10/A40/A100 525.X (or higher)","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#kubernetes-cluster-connectivity","title":"Kubernetes Cluster Connectivity","text":"<p>Installation requires Helm3 and access to an on-prem or CSP managed Kubernetes cluster. and the Kubernetes CLI kubectl.</p> <p>The context for the desired target cluster must be selected from your <code>~/.kube/config</code> file and set via the <code>KUBECONFIG</code> environment variable or <code>kubectl ctx</code> (if installed). Check to see if you have the correct context with,</p> show the current kubernetes context<pre><code>kubectl config current-context\n</code></pre> <p>and that you can access this cluster correctly with,</p> list kubernetes cluster nodes<pre><code>kubectl get nodes\n</code></pre> Get Nodes <p></p> <p>If you do not see a list of nodes for your K8s cluster the helm installation will not work. Please check your Kubernetes installation or access credentials (kubeconfig).</p> Kinetica Images for an Air-Gapped Environment <p>If you are installing Kinetica with Helm in an air-gapped environment you will either need a Registry Proxy to pass the requests through or to download the images and push them to your internal Registry.</p> <p>For information on ways to transfer the files into an air-gapped environment See here.</p>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#required-container-images","title":"Required Container Images","text":"","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#dockerio-required-kinetica-images-for-all-installations","title":"docker.io (Required Kinetica Images for All Installations)","text":"<ul> <li>docker.io/kinetica/kinetica-k8s-operator:v7.2.0-3.rc-3<ul> <li>docker.io/kinetica/kinetica-k8s-cpu:v7.2.0-3.rc-3 or </li> <li>docker.io/kinetica/kinetica-k8s-cpu-avx512:v7.2.0-3.rc-3 or </li> <li>docker.io/kinetica/kinetica-k8s-gpu:v7.2.0-3.rc-3</li> </ul> </li> <li>docker.io/kinetica/workbench-operator:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/workbench:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/kinetica-k8s-monitor:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/busybox:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/fluent-bit:v7.2.0-3.rc-3</li> <li>docker.io/kinetica/kagent:7.1.9.15.20230823123615.ga</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#nvcrio-required-kinetica-images-for-gpu-installations-using-kinetica-k8s-gpu","title":"nvcr.io (Required Kinetica Images for GPU Installations using <code>kinetica-k8s-gpu</code>)","text":"<ul> <li>nvcr.io/nvidia/gpu-operator:v23.9.1</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#registryk8sio-required-kinetica-images-for-gpu-installations-using-kinetica-k8s-gpu","title":"registry.k8s.io (Required Kinetica Images for GPU Installations using <code>kinetica-k8s-gpu</code>)","text":"<ul> <li>registry.k8s.io/nfd/node-feature-discovery:v0.14.2</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#dockerio-required-supporting-images","title":"docker.io (Required Supporting Images)","text":"<ul> <li>docker.io/bitnami/openldap:2.6.7</li> <li>docker.io/alpine/openssl:latest (used by bitnami/openldap)</li> <li>docker.io/otel/opentelemetry-collector-contrib:0.95.0</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#quayio-required-supporting-images","title":"quay.io (Required Supporting Images)","text":"<ul> <li>quay.io/brancz/kube-rbac-proxy:v0.14.2</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#optional-container-images","title":"Optional Container Images","text":"<p>These images are only required if certain features are enabled as part of the Helm installation: -</p> <ul> <li>CertManager</li> <li>ingress-ninx</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#quayio-optional-supporting-images","title":"quay.io (Optional Supporting Images)","text":"<ul> <li>quay.io/jetstack/cert-manager-cainjector:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> <li>quay.io/jetstack/cert-manager-controller:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> <li>quay.io/jetstack/cert-manager-webhook:v1.13.3 (if optionally installing CertManager via Kinetica Helm Chart)</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#registryk8sio-optional-supporting-images","title":"registry.k8s.io (Optional Supporting Images)","text":"<ul> <li>registry.k8s.io/ingress-nginx/controller:v1.9.4 (if optionally installing Ingress nGinx via Kinetica Helm Chart)</li> <li>registry.k8s.io/ingress-nginx/controller:v1.9.6@sha256:1405cc613bd95b2c6edd8b2a152510ae91c7e62aea4698500d23b2145960ab9c</li> </ul>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#which-kinetica-core-image-do-i-use","title":"Which Kinetica Core Image do I use?","text":"Container Image Intel (AMD64) Intel (AMD64 AVX512) Amd (AMD64) Graviton (aarch64) Apple Silicon (aarch64) kinetica-k8s-cpu (1) kinetica-k8s-cpu-avx512 kinetica-k8s-gpu (2) (2) (2) <ol> <li>It is preferable on an Intel AVX512 enabled CPU to use the kinetica-k8s-cpu-avx512 container image</li> <li>With a supported nVidia GPU.</li> </ol>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#label-the-kubernetes-nodes","title":"Label the Kubernetes    Nodes","text":"<p>Kinetica requires some of the Kubernetes Nodes to be labeled as it splits some of the  components into different deployment 'pools'. This enables different physical node types to be present in the Kubernetes Cluster allowing us to target which Kinetica components go where.</p> <p>e.g. for a GPU installation some nodes in the cluster will have GPUs and others are CPU only. We can put the DB on the GPU nodes and our infrastructure components on CPU only nodes.</p>  cpu gpu <p>The Kubernetes cluster nodes selected to host the Kinetica infrastructure pods  i.e. non-DB Pods require the following label <code>app.kinetica.com/pool=infra</code>.</p> <p></p> Label the Infrastructure Nodes<pre><code>    kubectl label node k8snode1 app.kinetica.com/pool=infra\n</code></pre> <p>whilst the Kubernetes cluster nodes selected to host the Kinetica DB Pods  require the following label <code>app.kinetica.com/pool=compute</code>.</p> Label the Database Nodes<pre><code>    kubectl label node k8snode2 app.kinetica.com/pool=compute\n</code></pre> <p>The Kubernetes cluster nodes selected to host the Kinetica infrastructure pods  i.e. non-DB Pods require the following label <code>app.kinetica.com/pool=infra</code>.</p> <p></p> Label the Infrastructure Nodes<pre><code>    kubectl label node k8snode1 app.kinetica.com/pool=infra\n</code></pre> <p>whilst the Kubernetes cluster nodes selected to host the Kinetica DB Pods  require the following label <code>app.kinetica.com/pool=compute-gpu</code>.</p> Label the Database Nodes<pre><code>    kubectl label node k8snode2 app.kinetica.com/pool=compute-gpu\n</code></pre> <p>On-Prem Kinetica SQLAssistant - Nodes Groups, GPU Counts &amp; VRAM Memory</p> <p>To run the Kinetica SQLAssistant locally requires additional GPUs to be available in a separate Node Group labeled <code>app.kinetica.com/pool=compute-llm</code>.  In order for the On-Prem Kinetica LLM to run it requires 40GB GPU VRAM therefore the number of GPUs automatically allocated to the SQLAssistant pod will ensure that the 40GB VRAM is available e.g. 1x A100 GPU or 2x A10G GPU. </p> Label Kubernetes Nodes for LLM<pre><code>kubectl label node k8snode3 app.kinetica.com/pool=compute-llm\n</code></pre> <p>Pods Not Scheduling</p> <p>If the Kubernetes are not labeled you may have a situation where Kinetica pods not schedule and sit in a 'Pending' state.</p>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#install-the-kinetica-operators-chart","title":"Install the kinetica-operators chart","text":"<p>This chart will install the Kinetica K8s operators together with a default configured database and workbench UI.</p>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#add-the-kinetica-chart-repository","title":"Add the Kinetica chart repository","text":"<p>Add the repo locally as kinetica-operators:</p> Helm repo add<pre><code>helm repo add kinetica-operators https://kineticadb.github.io/charts/latest\n</code></pre> Helm Repo Add <p></p>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#obtain-the-default-helm-values-file","title":"Obtain the default Helm values file","text":"<p>For the generic Kubernetes install use the following values file without modification. Advanced users with specific requirements may need to adjust parameters in this file.</p> Helm values.yaml download<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/72.2.2/kinetica-operators/values.onPrem.k8s.yaml\n</code></pre>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#determine-the-following-prior-to-the-chart-install","title":"Determine the following prior to the chart install","text":"<p>Default Admin User</p> <p>the default admin user in the Helm chart is <code>kadmin</code> but this is configurable. Non-ASCII characters and typographical symbols in the password must be escaped with a \"\\\". For example, <code>--set dbAdminUser.password=\"MyPassword\\!\"</code></p> <ol> <li>Obtain a LICENSE-KEY as described in the introduction above.</li> <li>Choose a PASSWORD for the initial administrator user</li> <li>As the storage class name varies between K8s flavor and/or there can be multiple,    this must be prescribed in the chart installation.    Obtain the DEFAULT-STORAGE-CLASS name with the command:</li> </ol> <p></p> Find the default storageclass<pre><code>kubectl get sc -o name \n</code></pre> List StorageClass <p></p> <p>use the name found after the /, For example, in <code>storageclass.storage.k8s.io/local-path</code> use \"local-path\" as the parameter.</p> Amazon EKS <p>If installing on Amazon EKS See here</p>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/preparation_and_prerequisites/#planning-access-to-your-kinetica-cluster","title":"Planning access to your Kinetica Cluster","text":"Existing Ingress Controller? <p>If you have an existing Ingress Controller in your Kubernetes cluster and do not want Kinetica to install an <code>ingresss-nginx</code> to expose it's endpoints then you can disable <code>ingresss-nginx</code> installation in the <code>values.yaml</code> by editing the file and setting <code>install: true</code> to <code>install: false</code>: -</p> Text Only<pre><code>```` yaml\nnodeSelector: {}\ntolerations: []\naffinity: {}\n\ningressNginx:\n    install: false\n````\n</code></pre>","tags":["Getting Started","Installation"]},{"location":"GettingStarted/quickstart/","title":"Quickstart","text":"<p>For the quickstart we have examples for Kind or k3s.</p> <ul> <li>Kind - is suitable for CPU only installations.</li> <li>k3s - is suitable for CPU or GPU installations.</li> </ul> <p>Kubernetes &gt;= 1.25</p> <p>The current version of the chart supports kubernetes version 1.25 and above.</p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#please-select-your-target-kubernetes-variant","title":"Please select your target Kubernetes variant:","text":"kind k3s <p>Default User</p> <p>Username as per the values file mentioned above is <code>kadmin</code> and password is <code>Kinetica1234!</code></p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#kind-kubernetes-in-docker-kindsigsk8sio","title":"Kind (kubernetes in docker kind.sigs.k8s.io)","text":"<p>This installation in a kind cluster is for trying out the operators and the database in a non-production environment.</p> <p>CPU Only</p> <p>This method currently only supports installing a CPU version of the database.</p> <p>Please contact Kinetica Support to request a trial key.</p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#create-kind-cluster-129","title":"Create Kind Cluster 1.29","text":"Create a new Kind Cluster<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/72.2.2/kinetica-operators/kind.yaml\nkind create cluster --name kinetica --config kind.yaml\n</code></pre> List Kind clusters<pre><code> kind get clusters\n</code></pre> <p>Set Kubernetes Context</p> <p>Please set your Kubernetes Context to <code>kind-kinetica</code> before performing the following steps. </p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#kind-install-kinetica-operators-including-a-sample-db-to-try-out","title":"Kind - Install kinetica-operators including a sample db to try out","text":"<p>Review the values file charts/kinetica-operators/values.onPrem.kind.yaml.  This is trying to install the operators and a simple db with workbench  installation for a non production try out.</p> <p>As you can see it is trying to create an ingress pointing towards local.kinetica.  If you have a domain pointing to your machine, replace it with the correct domain name.</p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#kind-install-the-kinetica-operators-chart","title":"Kind - Install the  Kinetica-Operators Chart","text":"Add Kinetica Operators Chart Repo<pre><code>helm repo add kinetica-operators https://kineticadb.github.io/charts/latest\n</code></pre> <p>FQDN or Local Access</p> <p>By default we create an ingress pointing towards <code>local.kinetica</code>.  If you have a domain pointing to your machine, replace/set the FQDN in the <code>values.yaml</code>  with the correct domain name or by adding <code>--set</code>.</p> <p>If you are on a local machine which is not having a domain name,  you add the following entry to your <code>/etc/hosts</code> file or equivalent.</p> Configure local access - /etc/hosts<pre><code>127.0.0.1  local.kinetica\n</code></pre> Get &amp; install the Kinetica-Operators Chart<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/72.2.2/kinetica-operators/values.onPrem.kind.yaml\n\nhelm -n kinetica-system upgrade -i kinetica-operators kinetica-operators/kinetica-operators --create-namespace --values values.onPrem.kind.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\"\n</code></pre> <p>or if you have been asked by the Kinetica Support team to try a development version</p> Using a development version<pre><code>helm search repo kinetica-operators --devel --versions\n\nhelm -n kinetica-system upgrade -i kinetica-operators kinetica-operators/kinetica-operators/ --create-namespace --values values.onPrem.kind.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\" --devel --version 72.2.2\n</code></pre> <p>Accessing the Workbench</p> <p>You should be able to access the workbench at http://local.kinetica</p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#k3s-k3sio","title":"k3s (k3s.io)","text":"","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#install-k3s-129","title":"Install k3s 1.29","text":"Install k3s<pre><code>curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"--disable=traefik  --node-name kinetica-master --token 12345\" K3S_KUBECONFIG_OUTPUT=~/.kube/config_k3s K3S_KUBECONFIG_MODE=644 INSTALL_K3S_VERSION=v1.29.2+k3s1 sh -\n</code></pre> <p>Once installed we need to set the current Kubernetes context to point to the newly created k3s cluster.</p> <p>Select if you want local or remote access to the Kubernetes Cluster: -</p> Local AccessRemote Access <p>For only local access to the cluster we can simply set the <code>KUBECONFIG</code>  environment variable</p> Set kubectl context<pre><code>export KUBECONFIG=/etc/rancher/k3s/k3s.yaml\n</code></pre> <p>For remote access i.e. outside the host/VM k3s is installed on: -</p> <p>Copy <code>/etc/rancher/k3s/k3s.yaml</code> on your machine located  outside the cluster as <code>~/.kube/config</code>.  Then edit the file and replace the value of the server  field with the IP or name of your K3s server.</p> Copy the kube config and set the context<pre><code>sudo chmod 600 /etc/rancher/k3s/k3s.yaml\nmkdir -p ~/.kube\nsudo cp /etc/rancher/k3s/k3s.yaml ~/.kube/config\nsudo chown \"${USER:=$(/usr/bin/logname)}:$USER\" ~/.kube/config\n# Edit the ~/.kube/config server field with the IP or name of your K3s server here\nexport KUBECONFIG=~/.kube/config\n</code></pre>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#k3s-install-kinetica-operators-including-a-sample-db-to-try-out","title":"K3s - Install kinetica-operators including a sample db to try out","text":"<p>Review the values file <code>charts/kinetica-operators/values.onPrem.k3s.yaml</code>.  This is trying to install the operators and a simple db with workbench installation  for a non production try out.</p> <p>FQDN or Local Access</p> <p>By default we create an ingress pointing towards <code>local.kinetica</code>.  If you have a domain pointing to your machine, replace/set the FQDN in the <code>values.yaml</code>  with the correct domain name or by adding <code>--set</code>.</p> <p>If you are on a local machine which is not having a domain name,  you add the following entry to your <code>/etc/hosts</code> file or equivalent.</p> Configure local access - /etc/hosts<pre><code>127.0.0.1  local.kinetica\n</code></pre>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#k3s-install-the-kinetica-operators-chart-cpu","title":"K3S - Install the  Kinetica-Operators Chart (CPU)","text":"Add Kinetica Operators Chart Repo<pre><code>helm repo add kinetica-operators https://kineticadb.github.io/charts/latest\n</code></pre> Download Template values.yaml<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/72.2.2/kinetica-operators/values.onPrem.k3s.yaml\n\nhelm -n kinetica-system install kinetica-operators kinetica-operators/kinetica-operators --create-namespace --values values.onPrem.k3s.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\"\n</code></pre> <p>or if you have been asked by the Kinetica Support team to try a development version</p> Using a development version<pre><code>helm search repo kinetica-operators --devel --versions\n\nhelm -n kinetica-system install kinetica-operators kinetica-operators/kinetica-operators --create-namespace --values values.onPrem.k3s.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\" --devel --version 7.2.0-2.rc-2\n</code></pre>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#k3s-install-the-kinetica-operators-chart-gpu","title":"K3S - Install the  Kinetica-Operators Chart (GPU)","text":"<p>If you wish to try out the GPU capabilities, you can use the following values file,  provided you are in a nvidia gpu capable machine.</p> k3s GPU Installation<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/72.2.2/kinetica-operators/values.onPrem.k3s.gpu.yaml\n\nhelm -n kinetica-system install kinetica-operators charts/kinetica-operators/ --create-namespace --values values.onPrem.k3s.gpu.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\"\n</code></pre> <p>Accessing the Workbench</p> <p>You should be able to access the workbench at http://local.kinetica</p>","tags":["Development","Getting Started","Installation"]},{"location":"GettingStarted/quickstart/#uninstall-k3s","title":"Uninstall k3s","text":"uninstall k3s<pre><code>/usr/local/bin/k3s-uninstall.sh\n</code></pre>","tags":["Development","Getting Started","Installation"]},{"location":"Help/changing_the_fqdn/","title":"How to change the Clusters FQDN","text":"","tags":["Configuration","Support"]},{"location":"Help/changing_the_fqdn/#coming-soon","title":"Coming Soon","text":"","tags":["Configuration","Support"]},{"location":"Help/faq/","title":"Frequently Asked Questions","text":"","tags":["Support"]},{"location":"Help/faq/#coming-soon","title":"Coming Soon","text":"","tags":["Support"]},{"location":"Help/help_and_tutorials/","title":"Help &amp; Tutorials","text":"<ul> <li> <p> Tutorials</p> <p> Tutorials</p> </li> <li> <p> Help</p> <p> Help</p> </li> </ul>","tags":["Support"]},{"location":"Help/help_and_tutorials/#coming-soon","title":"Coming Soon","text":"","tags":["Support"]},{"location":"Help/help_index/","title":"Creating Users, Roles, Schemas and other Kinetica DB Objects","text":"","tags":["Support"]},{"location":"Help/help_index/#coming-soon","title":"Coming Soon","text":"","tags":["Support"]},{"location":"Monitoring/logs/","title":"Log Collection &amp; Display","text":"<p>It is possible to forward/server the Kinetica on Kubernetes logs via an OpenTelemetry [OTEL] collector.</p> <p>By default an OpenTelemetry Collector is deployed in the <code>kinetica-system</code> namespace as part of the Helm install of the the kinetica-operators Helm chart along with a Kubernetes ConfigMap to configure this collector. The ConfigMap is in the <code>kinetica-system</code> namespace and is called <code>otel-collector-conf</code>.</p> <p>Detailed <code>otel-collector-conf</code> setup</p> <p>For more details on the Kinetica installed OTEL Collector please see here.</p> <p>There are many supported mechanisms to expose the logs here is one possibility: -</p> <ul> <li><code>lokiexporter</code> - Exports data via HTTP to Loki.</li> </ul> <p>Tip</p> <p>For a full list of supported OTEL exporters, including those for GrafanaCloud, AWS, Azure, Logz.io, Splunk  and many databases please see here</p>","tags":["Operations","Monitoring"]},{"location":"Monitoring/logs/#lokiexporter-otel-collector-exporter","title":"<code>lokiexporter</code> OTEL Collector Exporter","text":"<p>Exports data via HTTP to Loki.</p> Example Configuration<pre><code>exporters:\n  loki:\n    endpoint: https://loki.example.com:3100/loki/api/v1/push\n    default_labels_enabled:\n      exporter: false\n      job: true\n</code></pre> <p>For full details on configuring the OTEL collector exporter <code>lokiexporter</code> see here.</p>","tags":["Operations","Monitoring"]},{"location":"Monitoring/metrics/","title":"Metrics Collection &amp; Display","text":"<p>It is possible to forward/server the Kinetica on Kubernetes metrics via an OpenTelemetry [OTEL] collector. </p> <p>By default an OpenTelemetry Collector is deployed in the <code>kinetica-system</code> namespace as part of the Helm install of the the kinetica-operators Helm chart along with a Kubernetes ConfigMap to configure this collector. The ConfigMap is in the  <code>kinetica-system</code> namespace and is called <code>otel-collector-conf</code>.</p> <p>Detailed <code>otel-collector-conf</code> setup</p> <p>For more details on the Kinetica installed OTEL Collector please see here.</p> <p>There are many supported mechanisms to expose the metrics here are a few possibilities: -</p> <ul> <li><code>prometheusremotewriteexporter</code> - Prometheus Remote Write Exporter sends OpenTelemetry metrics to Prometheus remote write compatible backends.</li> <li><code>prometheusexporter</code> - allows the metrics to be scraped by a Prometheus server</li> </ul> <p>Tip</p> <p>For a full list of supported OTEL exporters, including those for Grafana Cloud, AWS, Azure and many databases please  see here</p>","tags":["Operations","Monitoring"]},{"location":"Monitoring/metrics/#prometheusremotewriteexporter-prometheus-otel-remote-write-exporter","title":"<code>prometheusremotewriteexporter</code> Prometheus OTEL Remote Write Exporter","text":"<p>prometheusremotewriteexporter OTEL Exporter</p> <p>Prometheus Remote Write Exporter sends OpenTelemetry metrics to Prometheus remote write compatible backends  such as Cortex, Mimir, and Thanos. By default, this exporter requires TLS and offers queued retry capabilities.</p> <p>Warning</p> <p>Non-cumulative monotonic, histogram, and summary OTLP metrics are dropped by this exporter.</p> Example Configuration<pre><code>exporters:\n  prometheusremotewrite:\n    endpoint: \"https://my-cortex:7900/api/v1/push\"\n    external_labels:\n      label_name1: label_value1\n      label_name2: label_value2\n</code></pre> <p>For full details on configuring the OTEL collector exporter <code>prometheusremotewriteexporter</code>  see here.</p>","tags":["Operations","Monitoring"]},{"location":"Monitoring/metrics/#prometheusexporter-prometheus-otel-exporter","title":"<code>prometheusexporter</code> Prometheus OTEL Exporter","text":"<p>Exports data in the Prometheus format, which allows it to be scraped by a Prometheus server.</p> Example Configuration<pre><code>exporters:\n  prometheus:\n    endpoint: \"1.2.3.4:1234\"\n    tls:\n      ca_file: \"/path/to/ca.pem\"\n      cert_file: \"/path/to/cert.pem\"\n      key_file: \"/path/to/key.pem\"\n    namespace: test-space\n    const_labels:\n      label1: value1\n      \"another label\": spaced value\n    send_timestamps: true\n    metric_expiration: 180m\n    enable_open_metrics: true\n    add_metric_suffixes: false\n    resource_to_telemetry_conversion:\n      enabled: true\n</code></pre> <p>For full details on configuring the OTEL collector exporter <code>prometheusexporter</code> see here.</p>","tags":["Operations","Monitoring"]},{"location":"Operations/","title":"Operational Management","text":"<ul> <li> <p> Metrics</p> <p>Collecting and storing metrics as time series data.   Metrics</p> </li> <li> <p> Logs</p> <p>Log aggregation.   Logs</p> </li> <li> <p> Metric &amp; Log Distribution</p> <p>Metrics &amp; Logs can be distributed to other systems using OpenTelemetry.   OpenTelemety</p> </li> <li> <p> Backup &amp; Restore</p> <p>Backup &amp; Restore of the Kinetica DB.   Backup &amp; Restore</p> <p>Note</p> <p>This requires Velero to be installed on the Kubernetes Cluster.</p> </li> <li> <p> Reduce Costs</p> <p>Suspend &amp; Resume  Kinetica for Kubernetes.   Suspend &amp; Resume</p> </li> <li> <p> Database Rebalancing</p> <p>Kinetica for Kubernetes Data Sharding &amp; Rebalancing.   Rebalancing</p> </li> </ul>","tags":["Operations"]},{"location":"Operations/backup_and_restore/","title":"Kinetica for Kubernetes Backup &amp; Restore","text":"<p>Kinetica for Kubernetes supports the Backup &amp; Restoring of the installed Kinetica DB by leveraging  Velero which is required to be installed into the same Kubernetes cluster that the <code>kinetica-operators</code> Helm chart is deployed.</p> <p>Velero</p> <p>Velero (formerly Heptio Ark) gives you tools to back up and restore your Kubernetes cluster  resources and persistent volumes. You can run Velero with a cloud provider or on-premises.</p> <p>For Velero installation please see here.</p> <p>Velero Installation</p> <p>The <code>kinetica-operators</code> Helm chart does not deploy Velero it is a prerequisite for it to be installed before Backup &amp; Restore will work correctly.</p> <p>There are two ways to initiate a Backup or Restore</p> <ul> <li>Workbench Initiated</li> <li>Kubernetes CR Initiated</li> </ul> <p>Preferred Backup/Restore Mechanism</p> <p>The preferred way to Backup or Restore the Kinetica for Kubernetes DB instance is via Workbench.</p>","tags":["Operations"]},{"location":"Operations/backup_and_restore/#workbench-initiated-backup-or-restore","title":"Workbench Initiated Backup or Restore","text":"","tags":["Operations"]},{"location":"Operations/backup_and_restore/#home","title":"&gt; Home","text":"<p>From the Workbench Home page</p> <p></p> <p>we need to select the <code>Manage</code> option from the toolbar.</p> <p></p>","tags":["Operations"]},{"location":"Operations/backup_and_restore/#manage-cluster-overview","title":"&gt; Manage &gt; Cluster &gt; Overview","text":"<p>On the Cluster Overview page select the 'Snapshots' tab</p> <p></p>","tags":["Operations"]},{"location":"Operations/backup_and_restore/#manage-cluster-snapshots","title":"&gt; Manage &gt; Cluster &gt; Snapshots","text":"","tags":["Operations"]},{"location":"Operations/backup_and_restore/#backup","title":"Backup","text":"<p>Select the 'Backup Now' button</p> <p></p> <p>and the backup will start and you will be able to see the progress</p> <p></p>","tags":["Operations"]},{"location":"Operations/backup_and_restore/#restore","title":"Restore","text":"","tags":["Operations"]},{"location":"Operations/backup_and_restore/#kubernetes-cr-initiated-backup-or-restore","title":"Kubernetes CR Initiated Backup or Restore","text":"<p>The Kinetica DB Operator supports two custom CRs </p> <ul> <li><code>KineticaClusterBackup</code></li> <li><code>KineticaClusterRestore</code></li> </ul> <p>which can be used to perform a Backup of the database and a Restore of Kinetica namespaces.</p>","tags":["Operations"]},{"location":"Operations/backup_and_restore/#kineticaclusterbackup-cr","title":"<code>KineticaClusterBackup</code> CR","text":"<p>Submission of a <code>KineticaClusterBackup</code> CR will trigger the Kinetica DB Operator to perform a backup of a Kinetica DB instance.</p> <p>Kinetica DB Offline</p> <p>In order to perform a database backup the Kinetica DB needs to be suspended in order for Velero  to have access to the necessary disks. The DB will be stopped &amp; restarted automatically by the Kinetica DB Operator as part of the backup process.</p> Example KineticaClusterBackup CR yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaClusterBackup\nmetadata:\n  name: kineticaclusterbackup-sample\n  namespace: gpudb\nspec:\n  includedNamespaces:\n    - gpudb\n</code></pre> <p>The namespace of the backup CR should be different to that of the namespace the Kinetica DB is running in i.e. not <code>gpudb</code>. We recommend using the namespace Velero is deployed into.</p> <p>Backup names are unique</p> <p>The name of the <code>KineticaClusterBackup</code> CR is unique we therefore suggest creating the name of the CR containing the date + time of the backup to ensure uniqueness. Kubernetes CR names have a strict naming format so the specified name must conform to those patterns.</p> <p>For a detailed description of the <code>KineticaClusterBackup</code> CRD see here</p>","tags":["Operations"]},{"location":"Operations/backup_and_restore/#kineticaclusterrestore-cr","title":"<code>KineticaClusterRestore</code> CR","text":"<p>In order to perform a restore of Kinetica for Kubernetes the easiest way is to simply delete the <code>gpudb</code> namespace from the Kubernetes cluster.</p> Delete the Kinetica DB<pre><code>kubectl delete ns gpudb\n</code></pre> <p>Kinetica DB Offline</p> <p>In order to perform a database restore the Kinetica DB needs to be suspended in order for Velero to have access to the necessary disks. The DB will be stopped &amp; restarted automatically by the Kinetica DB Operator as part of the restore process.</p> Example KineticaClusterBackup CR yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaClusterRestore\nmetadata:\n  name: kineticaclusterrestore-sample\n  namespace: gpudb\nspec:\n  backupName: kineticaclusterbackup-sample\n</code></pre> <p>The namespace of the restore CR should be the same as that of the namespace the <code>KineticaClusterBackup</code> CR was placed in. i.e. Not the namespace Kinetica DB is running in.</p> <p>Restore names are unique</p> <p>The name of the <code>KineticaClusterRestore</code> CR is unique we therefore suggest creating the name of the CR containing the date + time of the restore process to ensure uniqueness. Kubernetes CR names have a strict naming format so the specified name must conform to those patterns.</p> <p>For a detailed description of the <code>KineticaClusterRestore</code> CRD see here</p>","tags":["Operations"]},{"location":"Operations/otel/","title":"OTEL Integration for Metric &amp; Log Distribution","text":"<p>Helm installed OTEL Collector</p> <p>By default an OpenTelemetry Collector is deployed in the <code>kinetica-system</code> namespace as part of the Helm install of the the kinetica-operators Helm chart along with a Kubernetes ConfigMap to configure this collector. The ConfigMap is in the <code>kinetica-system</code> namespace and is called <code>otel-collector-conf</code>.</p> <p>The Kinetica DB Operators send information to an OpenTelemetry collector. There are two choices</p> <ul> <li>install an OpenTelemetry collector with the Kinetica Operators Helm chart</li> <li>use an existing provisioned OpenTelemetry collector within the Kubernetes Cluster</li> </ul>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#install-an-opentelemetry-collector-with-the-kinetica-operators-helm-chart","title":"Install an OpenTelemetry collector with the Kinetica Operators Helm chart","text":"<p>To enable the Kinetica Operators Helm Chart to deploy an instance of the OpenTelemetry collector into the <code>kinetica-system</code> namespace you need to set the following configuration in the helm values: -</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#todo-add-helm-config-example-here","title":"TODO add Helm Config Example Here","text":"<p>A ConfigMap containing the OTEL collector configuration will be generated so that the necessary <code>receivers</code> and <code>processors</code> sections are correctly setup for a Kinetica DB Cluster.</p> <p>This configuration will: -</p> <p>receivers:</p> <ul> <li>configure a <code>syslog</code> receiver which will receive logs from the Kinetica DB pod.</li> <li>configure a <code>prometheus</code> receiver/scraper which will collect metrics form the Kinetica DB.</li> <li>configure an <code>otlp</code> receiver which will receive trace spans from the Kinetica Operators (Optional).</li> <li>configure the <code>hostmetrics</code> collection of host load &amp; memory usage (Optional).</li> <li>configure the <code>k8s_events</code> collection of Kubernetes Events for the Kinetica namespaces (Optional).</li> </ul> <p>processors:</p> <ul> <li>configure attribute processing to set some useful values</li> <li>configure resource processing to set some useful values</li> </ul>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#syslog-configuration","title":"<code>syslog</code> Configuration","text":"<p>The OpenTelemetry <code>syslogreceiver</code> documentation can be found here.</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#otel-receivers-configuration","title":"OTEL Receivers Configuration","text":"YAML<pre><code>receivers:  \n  syslog:  \n    tcp:  \n      listen_address: \"0.0.0.0:9601\"  \n    protocol: rfc5424  \n</code></pre>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#otel-service-configuration","title":"OTEL Service Configuration","text":"<p>Tip</p> <p>In order to batch pushes of log data upstream you can use the following <code>processors section</code> in the OTEL configuration.</p> YAML<pre><code>processors:  \n  batch:  \n</code></pre> YAML<pre><code>service:   \n  pipelines:\n    logs:\n      receivers: [syslog]\n      processors: [resourcedetection, attributes, resource, batch]\n      exporters: ... # Requires configuring for your environment\n</code></pre>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#otlp-configuration","title":"<code>otlp</code> Configuration","text":"<p>The default configuration opens both the OTEL gRPC &amp; HTTP listeners.</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#otel-receivers-configuration_1","title":"OTEL Receivers Configuration","text":"YAML<pre><code>receivers:\n  otlp:  \n    protocols:  \n      grpc:  \n        endpoint: \"0.0.0.0:4317\"  \n      http:  \n        endpoint: \"0.0.0.0:4318\" \n</code></pre>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#otel-service-configuration_1","title":"OTEL Service Configuration","text":"<p>Tip</p> <p>In order to batch pushes of trace data upstream you can use the following <code>processors section</code> in the OTEL configuration.</p> YAML<pre><code>processors:  \n  batch:  \n</code></pre> YAML<pre><code>service:\n  traces:\n    receivers: [otlp]\n    processors: [batch]\n    exporters:  ... # Requires configuring for your environment\n</code></pre> <p>exporters</p> <p>The <code>exporters</code> will need to be manually configured to your specific environment e.g. forwarding logs/metrics to Grafana, Azure Monitor, AWS etc.</p> <p>Otherwise the data will 'disappear into the ether' and not be relayed upstream.</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#hostmetrics-configuration-optional","title":"<code>hostmetrics</code> Configuration (Optional)","text":"<p>The Host Metrics receiver generates metrics about the host system scraped from various sources.  This is intended to be used when the collector is deployed as an agent.</p> <p>The OpenTelemetry <code>hostmetrics</code> documentation can be found here.</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#otel-receivers-configuration_2","title":"OTEL Receivers Configuration","text":"<p>hostmetricsreceiver</p> <p>The OTEL <code>hostmetricsreceiver</code>requires that the running OTEL collector is the 'contrib' version.</p> YAML<pre><code>receivers:\n  hostmetrics:  \n    # https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/main/receiver/hostmetricsreceiver  \n    scrapers:  \n      load:  \n      memory: \n</code></pre> Grafana <p>the attributes and resource processing enables finer grained selection using Grafana queries.</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#k8s_events-configuration-optional","title":"<code>k8s_events</code> Configuration (Optional)","text":"<p>The kubernetes Events receiver collects events from the Kubernetes API server. It collects all the new or updated events that come in from the specified namespaces. Below we are collecting events from the two default Kinetica namespaces: -</p> YAML<pre><code>receivers:\n  k8s_events:  \n    namespaces: [kinetica-system, gpudb]  \n</code></pre> <p>The OpenTelemetry <code>k8seventsreceiver</code> documentation can be found here.</p>","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#use-an-existing-provisioned-opentelemetry-collector","title":"Use an existing provisioned OpenTelemetry Collector","text":"","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/otel/#coming-soon","title":"Coming Soon","text":"","tags":["Configuration","Operations","Monitoring"]},{"location":"Operations/rebalance/","title":"Kinetica for Kubernetes Data Rebalancing","text":"","tags":["Operations"]},{"location":"Operations/rebalance/#coming-soon","title":"Coming Soon","text":"","tags":["Operations"]},{"location":"Operations/suspend_resume/","title":"Kinetica for Kubernetes Suspend &amp; Resume","text":"<p>It is possible to supend Kinetica for Kubernetes which spins down the DB.</p> <p>Infra Structure</p> <p>For each deployment of Kinetica for Kubernetes there are two distinct types of pods: -</p> <ul> <li>'Compute' pods containing the Kinetica DB along with the Statics Pod</li> <li>'Infra' pods containing the supporting apps, e.g. Workbench, OpenLDAP etc, and the Kinetica Operators.</li> </ul> <p>Whilst Kinetica for Kubernetes is in the <code>Suspended</code> state only the 'Compute' pods are scaled down. The 'Infra' pods remain running in order for Workbenchto be able to login, backup, restore and in this case Resume the suspended system.</p> <p>There are three discrete ways to suspand and resume KInetica for Kubernetes: -</p> <ul> <li>Manually from Workbench</li> <li>Auto-Suspend set in Workbench or fro the Helm installation Chart.</li> <li>Manually using a Kubernetes CR</li> </ul>","tags":["Operations"]},{"location":"Operations/suspend_resume/#suspend-manually-from-workbench","title":"Suspend - Manually from Workbench","text":"","tags":["Operations"]},{"location":"Operations/suspend_resume/#suspend-auto-suspend","title":"Suspend - Auto-Suspend","text":"","tags":["Operations"]},{"location":"Operations/suspend_resume/#suspend-manually-using-a-kubernetes-cr","title":"Suspend - Manually using a Kubernetes CR","text":"","tags":["Operations"]},{"location":"Operators/k3s/","title":"Overview","text":"<p>Kinetica Operators can be installed in any on-prem kubernetes cluster. This document provides instructions to install the operators in k3s. If you are on another distribution, you should be able to change the values file to suit your environment.</p> <p>You will need a license key for this to work. Please contact Kinetica Support.</p>"},{"location":"Operators/k3s/#kinetica-on-k3s-k3sio","title":"Kinetica on k3s (k3s.io)","text":"<p>Current version of the chart supports kubernetes version 1.25 and above.</p>"},{"location":"Operators/k3s/#install-k3s-129","title":"Install k3s 1.29","text":"Bash<pre><code>curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"--disable=traefik  --node-name kinetica-master --token 12345\" K3S_KUBECONFIG_OUTPUT=~/.kube/config_k3s K3S_KUBECONFIG_MODE=644 INSTALL_K3S_VERSION=v1.29.2+k3s1 sh -\n</code></pre>"},{"location":"Operators/k3s/#k3s-install-kinetica-operators-including-a-sample-db-to-try-out","title":"K3s -Install kinetica-operators including a sample db to try out","text":"<p>Review the values file charts/kinetica-operators/values.onPrem.k3s.yaml. This is trying to install the operators and a simple db with workbench installation for a non production try out.</p> <p>As you can see it is trying to create an ingress pointing towards local.kinetica. If you have a domain pointing to your machine, replace it with the correct domain name.</p> <p>If you are on a local machine which is not having a domain name, you add the following entry to your /etc/hosts file or equivalent.</p> Text Only<pre><code>127.0.0.1 local.kinetica\n</code></pre>"},{"location":"Operators/k3s/#k3s-install-the-kinetica-operators-chart","title":"K3s - Install the kinetica-operators chart","text":"Bash<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/master/kinetica-operators/values.onPrem.k3s.yaml\n\nhelm -n kinetica-system install kinetica-operators kinetica-operators/kinetica-operators --create-namespace --values values.onPrem.k3s.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\"\n\n# if you want to try out a development version,\nhelm search repo kinetica-operators --devel --versions\n\nhelm -n kinetica-system install kinetica-operators kinetica-operators/kinetica-operators --create-namespace --values values.onPrem.k3s.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\" --devel --version 7.2.0-2.rc-2\n</code></pre>"},{"location":"Operators/k3s/#k3s-install-the-kinetica-operators-chart-gpu-capable-machine","title":"K3s - Install the kinetica-operators chart (GPU Capable Machine)","text":"<p>If you wish to try out the GPU capabilities, you can use the following values file, provided you are in a nvidia gpu capable machine.</p> Bash<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/master/kinetica-operators/values.onPrem.k3s.gpu.yaml\n\nhelm -n kinetica-system install kinetica-operators charts/kinetica-operators/ --create-namespace --values values.onPrem.k3s.gpu.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\"\n</code></pre> <p>You should be able to access the workbench at http://local.kinetica</p> <p>Username as per the values file mentioned above is kadmin and password is Kinetica1234!</p>"},{"location":"Operators/k3s/#uninstall-k3s","title":"Uninstall k3s","text":"Bash<pre><code>/usr/local/bin/k3s-uninstall.sh\n</code></pre>"},{"location":"Operators/k8s/","title":"Overview","text":"<p>For managed Kubernetes solutions (AKS, EKS, GKE) or other on-prem K8s flavors,  follow this generic guide to install the Kinetica Operators, Database and Workbench.  A product license key will be required for install. Please contact Kinetica Support  to request a trial key.</p>"},{"location":"Operators/k8s/#preparation-and-prerequisites","title":"Preparation and prerequisites","text":"<p>Installation requires Helm3 and access to an on-prem or CSP managed Kubernetes cluster.  kubectl is optional but highly recommended. The context for the desired target cluster must be selected from your <code>~/.kube/config</code> file  or set via the <code>KUBECONFIG</code> environment variable. Check to see if you have the correct context with,</p> Bash<pre><code>kubectl config current-context\n</code></pre> <p>and that you can access this cluster correctly with,</p> Bash<pre><code>kubectl get nodes\n</code></pre> <p>If you do not see a list of nodes for your K8s cluster the helm installation will not work. Please check your Kubernetes installation or access credentials (kubeconfig).</p>"},{"location":"Operators/k8s/#install-the-kinetica-operators-chart","title":"Install the kinetica-operators chart","text":"<p>This chart will install the Kinetica K8s operators together with a default configured database and workbench UI.</p> <p>If you are installing into a managed Kubernetes environment and the NGINX ingress controller that is installed as part of this install creates a LoadBalancer service, you may need to associate the LoadBalancer with the domain you plan to use.</p> <p>Alternatively, if you are installing on a local machine which does not have a domain name, you can add the following entry to your <code>/etc/hosts</code> file or equivalent:</p> Bash<pre><code>127.0.0.1  local.kinetica\n</code></pre> <p>Note that the default chart configuration points to <code>local.kinetica</code> but this is configurable.</p>"},{"location":"Operators/k8s/#1-add-the-kinetica-chart-repository","title":"1. Add the Kinetica chart repository","text":"<p>Add the repo locally as kinetica-operators:</p> Bash<pre><code>helm repo add kinetica-operators https://kineticadb.github.io/charts\n</code></pre>"},{"location":"Operators/k8s/#2-obtain-the-default-helm-values-file","title":"2. Obtain the default Helm values file","text":"<p>For the generic Kubernetes install use the following values file without modification. Advanced users with specific requirements may need to adjust parameters in this file.</p> Bash<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/master/kinetica-operators/values.onPrem.k8s.yaml\n</code></pre>"},{"location":"Operators/k8s/#3-determine-the-following-prior-to-the-chart-install","title":"3. Determine the following prior to the chart install","text":"<p>(a) Obtain a LICENSE-KEY as described in the introduction above. (b) Choose a PASSWORD for the initial administrator user (Note: the default in the chart for this user is <code>kadmin</code> but this is configurable). Non-ASCII characters and typographical symbols in the password must be escaped with a \"\\\". For example, <code>--set dbAdminUser.password=\"MyPassword\\!\"</code> \u00a9 As storage class name varies between K8s flavor and/or there can be multiple, this must be prescribed in the chart installation. Obtain DEFAULT-STORAGE-CLASS name with the command:</p> Bash<pre><code>kubectl get sc -o name \n</code></pre> <p>use the name found after the /, For example, in <code>\"storageclass.storage.k8s.io/TheName\"</code> use \"TheName\" as the parameter.</p>"},{"location":"Operators/k8s/#4-install-the-helm-chart","title":"4. Install the helm chart","text":"<p>Run the following Helm install command after substituting values from section 3 above:</p> Bash<pre><code>helm -n kinetica-system install \\\nkinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--values values.onPrem.k8s.yaml \\\n--set db.gpudbCluster.license=\"LICENSE-KEY\" \\\n--set dbAdminUser.password=\"PASSWORD\" \\\n--set global.defaultStorageClass=\"DEFAULT-STORAGE-CLASS\"\n</code></pre>"},{"location":"Operators/k8s/#5-check-installation-progress","title":"5. Check installation progress","text":"<p>After a few moments, follow the progression of the main database pod startup with:</p> Bash<pre><code>kubectl -n gpudb get po gpudb-0 -w\n</code></pre> <p>until it reaches <code>\"gpudb-0  3/3  Running\"</code> at which point the database should be ready and all other software installed in the cluster. You may have to run this command in a different terminal if the <code>helm</code> command from step 4 has not yet returned to the system prompt. Once running, you can quit this kubectl watch command using ctrl-c.</p>"},{"location":"Operators/k8s/#6-accessing-the-kinetica-installation","title":"6. Accessing the Kinetica installation","text":""},{"location":"Operators/k8s/#optional-install-a-development-chart-version","title":"(Optional) Install a development chart version","text":"<p>Find all alternative chart versions with:</p> Bash<pre><code>helm search repo kinetica-operators --devel --versions\n</code></pre> <p>Then append <code>--devel --version [CHART-DEVEL-VERSION]</code> to the end of the Helm install command in section 4 above.</p>"},{"location":"Operators/k8s/#k8s-flavour-specific-notes","title":"K8s Flavour specific notes","text":""},{"location":"Operators/k8s/#eks","title":"EKS","text":""},{"location":"Operators/k8s/#ebs-csi-driver","title":"EBS CSI driver","text":"<p>Make sure you have enabled the ebs-csi driver in your EKS cluster. This is required for the default storage class to work. Please refer to this AWS documentation for more information.</p>"},{"location":"Operators/k8s/#ingress","title":"Ingress","text":"<p>As of now, the kinetica-operator chart installs NGINX ingress controller. So after the installation is complete, you may need to edit the KineticaCluster Custom Resource and Workbench Custom Resource with the correct domain name.</p>"},{"location":"Operators/k8s/#option-1-use-the-loadbalancer-domain","title":"Option 1: Use the LoadBalancer domain","text":"Bash<pre><code>kubectl get svc -n kinetica-system\n# look at the loadbalancer dns name, copy it\n\nkubectl -n gpudb edit $(kubectl -n gpudb get kc -o name)\n# replace local.kinetica with the loadbalancer dns name\nkubectl -n gpudb edit $(kubectl -n gpudb get wb -o name)\n# replace local.kinetica with the loadbalancer dns name\n# save and exit\n# you should be able to access the workbench from the loadbalancer dns name\n</code></pre>"},{"location":"Operators/k8s/#option-1-use-your-custom-domain","title":"Option 1: Use your custom domain","text":"<p>Create a record in your DNS server pointing to the LoadBalancer DNS. Then edit the KineticaCluster Custom Resource and Workbench Custom Resource with the correct domain name, as mentioned above.</p>"},{"location":"Operators/kind/","title":"Overview","text":"<p>This installation in a kind cluster is for trying out the operators and the database in a non production environment. This method currently only supports installing a CPU version of the database.</p> <p>You will need a license key for this to work. Please contact Kinetica Support.</p>"},{"location":"Operators/kind/#kind-kubernetes-in-docker-kindsigsk8sio","title":"Kind (kubernetes in docker kind.sigs.k8s.io)","text":""},{"location":"Operators/kind/#create-kind-cluster-129","title":"Create Kind Cluster 1.29","text":"Bash<pre><code>kind create cluster --config charts/kinetica-operators/kind.yaml\n</code></pre>"},{"location":"Operators/kind/#kind-install-kinetica-operators-including-a-sample-db-to-try-out","title":"Kind - Install kinetica-operators including a sample db to try out","text":"<p>Review the values file charts/kinetica-operators/values.onPrem.kind.yaml. This is trying to install the operators and a simple db with workbench installation for a non production try out.</p> <p>As you can see it is trying to create an ingress pointing towards local.kinetica. If you have a domain pointing to your machine, replace it with the correct domain name.</p>"},{"location":"Operators/kind/#kind-install-the-kinetica-operators-chart","title":"Kind - Install the kinetica-operators chart","text":"Bash<pre><code>wget https://raw.githubusercontent.com/kineticadb/charts/master/kinetica-operators/values.onPrem.kind.yaml\n\nhelm -n kinetica-system install kinetica-operators kinetica-operators/kinetica-operators --create-namespace --values values.onPrem.kind.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\"\n\n# if you want to try out a development version,\nhelm search repo kinetica-operators --devel --versions\nhelm -n kinetica-system install kinetica-operators kinetica-operators/kinetica-operators/ --create-namespace --values values.onPrem.kind.yaml --set db.gpudbCluster.license=\"your_license_key\" --set dbAdminUser.password=\"your_password\" --devel --version 7.2.0-2.rc-2\n</code></pre> <p>You should be able to access the workbench at http://local.kinetica</p> <p>Username as per the values file mentioned above is kadmin and password is Kinetica1234!</p>"},{"location":"Operators/kinetica-operators/","title":"Kinetica DB Operator Helm Charts","text":"<p>To install all the required operators in a single command perform the following: -</p> Bash<pre><code>helm install -n kinetica-system \\\nkinetica-operators kinetica-operators/kinetica-operators --create-namespace\n</code></pre> <p>This will install all the Kubernetes Operators required into the <code>kinetica-system</code> namespace and create the namespace if it is not currently present.</p> <p>Note</p> <p>Depending on what target platform you are installing to it may be necessary to supply an additional parameter  pointing to a values file to successfully provision the DB.</p> Bash<pre><code>helm install -n kinetica-system -f values.yaml --set provider=aks \\\nkinetica-operators kinetica-operators/kinetica-operators --create-namespace\n</code></pre> <p>The command above uses a custom <code>values.yaml</code> for helm and sets the install platform to Microsoft Azure AKS.</p> <p>Currently supported <code>providers</code> are: -</p> <ul> <li><code>aks</code> - Microsoft Azure AKS</li> <li><code>eks</code> - Amazon AWS EKS</li> <li><code>local</code> - Generic 'On-Prem' Kubernetes Clusters e.g. one deployed using <code>kubeadm</code></li> </ul> <p>Example Helm <code>values.yaml</code> for different Cloud Providers/On-Prem installations: -</p> Azure AKSAmazon EKSOn-Prem values.yaml<pre><code>namespace: kinetica-system\n\ndb:\n  serviceAccount: {}\n  image:\n    # Kinetica DB Operator installer image\n    repository: \"registry.harbor.kinetica.com/kinetica/kinetica-k8s-operator\"\n    #  Kinetica DB Operator installer image tag\n    tag: \"\"\n\n  parameters:\n    # &lt;base64 encode of kubeconfig&gt; of the Kubernetes Cluster to deploy to\n    kubeconfig: \"\"\n    # The storage class to use for PVCs\n    storageClass: \"managed-premium\"\n\n  storageClass:\n    persist:\n      # Workbench Operator Persistent Volume Storage Class\n      provisioner: \"disk.csi.azure.com\"\n    procs:\n      # Workbench Operator Procs Volume Storage Class\n      provisioner: \"disk.csi.azure.com\"\n    cache:\n      # Workbench Operator Cache Volume Storage Class\n      provisioner: \"disk.csi.azure.com\"\n</code></pre> <p>15 <code>storageClass: \"managed-premium\"</code> - sets the appropriate <code>storageClass</code> for Microsoft Azure AKS Persistent Volume (PV)</p> <p>20 <code>provisioner: \"disk.csi.azure.com\"</code> - sets the appropriate disk provisioner for the DB (Persist) filesystem for Microsoft Azure</p> <p>23 <code>provisioner: \"disk.csi.azure.com\"</code> - sets the appropriate disk provisioner for the DB Procs filesystem for Microsoft Azure</p> <p>26 <code>provisioner: \"disk.csi.azure.com\"</code> - sets the appropriate disk provisioner for the DB Cache filesystem for Microsoft Azure</p> values.yaml<pre><code>namespace: kinetica-system\n\ndb:\n  serviceAccount: {}\n  image:\n    # Kinetica DB Operator installer image\n    repository: \"registry.harbor.kinetica.com/kinetica/kinetica-k8s-operator\"\n    #  Kinetica DB Operator installer image tag\n    tag: \"\"\n\n  parameters:\n    # &lt;base64 encode of kubeconfig&gt; of the Kubernetes Cluster to deploy to\n    kubeconfig: \"\"\n    # The storage class to use for PVCs\n    storageClass: \"gp2\"\n\n  storageClass:\n    persist:\n      # Workbench Operator Persistent Volume Storage Class\n      provisioner: \"kubernetes.io/aws-ebs\"\n    procs:\n      # Workbench Operator Procs Volume Storage Class\n      provisioner: \"kubernetes.io/aws-ebs\"\n    cache:\n      # Workbench Operator Cache Volume Storage Class\n      provisioner: \"kubernetes.io/aws-ebs\"\n</code></pre> <p>15 <code>storageClass: \"gp2\"</code> - sets the appropriate <code>storageClass</code> for Amazon EKS Persistent Volume (PV)</p> <p>20 <code>provisioner: \"kubernetes.io/aws-ebs\"</code> - sets the appropriate disk provisioner for the DB (Persist) filesystem for Microsoft Azure</p> <p>23 <code>provisioner: \"kubernetes.io/aws-ebs\"</code> - sets the appropriate disk provisioner for the DB Procs filesystem for Microsoft Azure</p> <p>26 <code>provisioner: \"kubernetes.io/aws-ebs\"</code> - sets the appropriate disk provisioner for the DB Cache filesystem for Microsoft Azure</p> values.yaml<pre><code>namespace: kinetica-system\n\ndb:\n  serviceAccount: {}\n  image:\n    # Kinetica DB Operator installer image\n    repository: \"registry.harbor.kinetica.com/kinetica/kinetica-k8s-operator\"\n    #  Kinetica DB Operator installer image tag\n    tag: \"\"\n\n  parameters:\n    # &lt;base64 encode of kubeconfig&gt; of the Kubernetes Cluster to deploy to\n    kubeconfig: \"\"\n    # the type of installation e.g. aks, eks, local\n    environment: \"local\"\n    # The storage class to use for PVCs\n    storageClass: \"standard\"\n\n  storageClass:\n    procs: {}\n    persist: {}\n    cache: {}\n</code></pre> <p>15 <code>environment: \"local\"</code> - tells the DB Operator to deploy the DB as a 'local' instance to the Kubernetes Cluster</p> <p>17 <code>storageClass: \"standard\"</code> - sets the appropriate <code>storageClass</code> for the On-Prem Persistent Volume Provisioner</p> <p>storageClass</p> <p>The <code>storageClass</code> should be present in the target environment. </p> <p>A list of available <code>storageClass</code> can be obtained using: -</p> Bash<pre><code>kubectl get sc\n</code></pre>"},{"location":"Operators/kinetica-operators/#components","title":"Components","text":"<p>The <code>kinetica-db</code> Helm Chart wraps the deployment of a number of sub-components: -</p> <ul> <li>Porter Operator</li> <li>Kinetica Database Operator</li> <li>Kinetica Workbench Operator</li> </ul> <p>Installation/Upgrading/Deletion of the Kinetica Operators is done via two CRs which leverage porter.sh as the orchestrator. The corresponding Porter Operator, DB Operator &amp; Workbench Operator CRs are submitted by running the appropriate helm command i.e.</p> <ul> <li>install</li> <li>upgrade</li> <li>uninstall</li> </ul>"},{"location":"Operators/kinetica-operators/#porter-operator","title":"Porter Operator","text":""},{"location":"Operators/kinetica-operators/#database-operator","title":"Database Operator","text":"<p>The Kinetica DB Operator installation CR for the porter.sh operator is: -</p> YAML<pre><code>apiVersion: porter.sh/v1\nkind: Installation\nmetadata:\n  annotations:\n    meta.helm.sh/release-name: kinetica-operators\n    meta.helm.sh/release-namespace: kinetica-system\n  labels:\n    app.kubernetes.io/instance: kinetica-operators\n    app.kubernetes.io/managed-by: Helm\n    app.kubernetes.io/name: kinetica-operators\n    app.kubernetes.io/version: 0.1.0\n    helm.sh/chart: kinetica-operators-0.1.0\n    installVersion: 0.38.10\n  name: kinetica-operators-operator-install\n  namespace: kinetica-system\nspec:\n  action: install\n  agentConfig:\n    volumeSize: '0'\n  parameters:\n    environment: local\n    storageclass: managed-premium\n  reference: docker.io/kinetica/kinetica-k8s-operator:v7.1.9-7.rc3\n</code></pre>"},{"location":"Operators/kinetica-operators/#workbench-operator","title":"Workbench Operator","text":"<p>The Kinetica Workbench installation CR for the porter.sh operator is: -</p> YAML<pre><code>apiVersion: porter.sh/v1\nkind: Installation\nmetadata:\n  annotations:\n    meta.helm.sh/release-name: kinetica-operators\n    meta.helm.sh/release-namespace: kinetica-system\n  labels:\n    app.kubernetes.io/instance: kinetica-operators\n    app.kubernetes.io/managed-by: Helm\n    app.kubernetes.io/name: kinetica-operators\n    app.kubernetes.io/version: 0.1.0\n    helm.sh/chart: kinetica-operators-0.1.0\n    installVersion: 0.38.10\n  name: kinetica-operators-wb-operator-install\n  namespace: kinetica-system\nspec:\n  action: install\n  agentConfig:\n    volumeSize: '0'\n  parameters:\n    environment: local\n  reference: docker.io/kinetica/workbench-operator:v7.1.9-7.rc3\n</code></pre>"},{"location":"Operators/kinetica-operators/#overriding-images-tags","title":"Overriding Images Tags","text":"Bash<pre><code>helm install -n kinetica-system kinetica-operators kinetica-operators/kinetica-operators \\\n--create-namespace \\\n--set provider=aks  \n--set dbOperator.image.tag=v7.1.9-7.rc3 \\\n--set dbOperator.image.repository=docker.io/kinetica/kinetica-k8s-operator \\\n--set wbOperator.image.repository=docker.io/kinetica/workbench-operator \\\n--set wbOperator.image.tag=v7.1.9-7.rc3\n</code></pre>"},{"location":"Reference/","title":"Reference Section","text":"<ul> <li> <p> Kinetica Operators Helm</p> <p>Kinetica Operators Helm charts &amp; values file reference data.   Charts</p> </li> <li> <p> Kinetica Core DB CRDs-</p> <p>Kinetica DB Kubernetes CRD &amp; ConfigMap reference data.   Cluster CRDs</p> </li> <li> <p> Kinetica Workbench CRDs</p> <p>Kinetica Workbench Kubernetes CRD &amp; ConfigMap reference data.   Workbench</p> </li> </ul>","tags":["Reference"]},{"location":"Reference/database/","title":"Kinetica Database Configuration","text":"<ul> <li>kubectl (yaml)</li> </ul>","tags":["Reference"]},{"location":"Reference/database/#kineticacluster","title":"KineticaCluster","text":"<p>To deploy a new Database Instance into a Kubernetes cluster...</p> kubectl <p>Using kubetctl a CustomResource of type <code>KineticaCluster</code> is used to define a new Kinetica DB Cluster in a yaml file.</p> <p>The basic Group, Version, Kind or GVK to instantiate a Kinetica DB Cluster is as follows: -</p> kineticacluster.yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaCluster\n</code></pre>","tags":["Reference"]},{"location":"Reference/database/#metadata","title":"Metadata","text":"<p>to which we add a <code>metadata:</code> block for the name of the DB CR along with the <code>namespace</code> into which we are targetting the installation of the DB cluster.</p> kineticacluster.yaml<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaCluster\nmetadata:\n  name: my-kinetica-db-cr\n  namespace: gpudb\nspec:\n</code></pre>","tags":["Reference"]},{"location":"Reference/database/#spec","title":"Spec","text":"<p>Under the <code>spec:</code> section of the KineticaCLuster CR we have a number of sections supporting different aspects of the deployed DB cluster:-</p> <ul> <li>gpudbCluster</li> <li>autoSuspend</li> <li>gadmin</li> </ul>","tags":["Reference"]},{"location":"Reference/database/#gpudbcluster","title":"gpudbCluster","text":"<p>Configuartion items specific to the DB itself.</p> kineticacluster.yaml - gpudbCluster<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaCluster\nmetadata:\n  name: my-kinetica-db-cr\n  namespace: gpudb\nspec:\n  gpudbCluster:\n</code></pre>","tags":["Reference"]},{"location":"Reference/database/#gpudbcluster_1","title":"gpudbCluster","text":"cluster name &amp; size<pre><code>clusterName: kinetica-cluster \nclusterSize: \n  tshirtSize: M \n  tshirtType: LargeCPU \nfqdn: kinetica-cluster.saas.kinetica.com\nhaRingName: default\nhasPools: false    \n</code></pre> <p><code>1. clusterName</code> - the user defined name of the Kinetica DB Cluster</p> <p><code>2. clusterSize</code> - block that defines the number of DB Ranks to run</p> <p><code>3. tshirtSize</code> - sets the cluster size to a defined size based upon the t-shirt size. Valid sizes are: -</p> <ul> <li><code>XS</code> -   1 DB Rank</li> <li><code>S</code> -    2 DB Ranks</li> <li><code>M</code> -    4 DB Ranks</li> <li><code>L</code> -    8 DB Ranks</li> <li><code>XL</code> -   16 DB Ranks</li> <li><code>XXL</code> -  32 DB Ranks</li> <li><code>XXXL</code> - 64 DB Ranks</li> </ul> <p><code>4. tshirtType</code> - block that defines the tyoe DB Ranks to run: -</p> <ul> <li><code>SmallCPU</code> - </li> <li><code>LargeCPU</code> -</li> <li><code>SmallGPU</code> - </li> <li><code>LargeGPU</code> -</li> </ul> <p><code>5. fqdn</code> - The fully qualified URL for the DB cluster. Used on the Ingress records for any exposed services.</p> <p><code>6. haRingName</code> - Default: <code>default</code></p> <p><code>7. hasPools</code> - Whether to enable the separate node 'pools' for \"infra\", \"compute\" pod scheduling.                 Default: false                 +optional</p>","tags":["Reference"]},{"location":"Reference/database/#autosuspend","title":"autoSuspend","text":"<p>The DB Cluster autosuspend section allows for the spinning down of the core DB Pods to release the underlying Kubernetes nodes to reduce infrastructure costs when the DB is not in use. </p> kineticacluster.yaml - autoSuspend<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaCluster\nmetadata:\n  name: my-kinetica-db-cr\n  namespace: gpudb\nspec:\n  autoSuspend:\n    enabled: false\n    inactivityDuration: 1h0m0s\n</code></pre> <p><code>7.</code> the start of the <code>autoSuspend</code> definition</p> <p><code>8.</code> <code>enabled</code> when set to <code>true</code> auto suspend of the DB cluster is enabled otherwise set to <code>false</code> and no      automatic suspending of the DB takes place.  If omitted it defaults to <code>false</code></p> <p><code>9.</code> <code>inactivityDuration</code> the duration after which if no DB activity has taken place the DB will be suspended</p> <p>Horizontal Pod Autoscaler</p> <p>In order for <code>autoSuspend</code> to work correctly the Kubernetes Horizontal Pod Autoscaler needs to be deployed to the cluster.</p>","tags":["Reference"]},{"location":"Reference/database/#gadmin","title":"gadmin","text":"<p>GAdmin the Database Administration Console</p> <p></p> kineticacluster.yaml - gadmin<pre><code>apiVersion: app.kinetica.com/v1\nkind: KineticaCluster\nmetadata:\n  name: my-kinetica-db-cr\n  namespace: gpudb\nspec:\n  gadmin:\n    containerPort:\n      containerPort: 8080\n      name: gadmin\n      protocol: TCP\n    isEnabled: true\n</code></pre> <p><code>7.</code> <code>gadmin</code> configuration block definition</p> <p><code>8.</code> <code>containerPort</code> configuration block i.e. where <code>gadmin</code> is exposed on the DB Pod</p> <p><code>9.</code> <code>containerPort</code> the port number as an integer. Default: <code>8080</code></p> <p><code>10.</code> <code>name</code> the name of the port being exposed. Default:  <code>gadmin</code></p> <p><code>11.</code> <code>protocol</code> network protocal used. Default: <code>TCP</code></p> <p><code>12.</code> <code>isEnabled</code> whether <code>gadmin</code> is exposed from the DB pod. Default: <code>true</code></p>","tags":["Reference"]},{"location":"Reference/database/#kineticauser","title":"KineticaUser","text":"","tags":["Reference"]},{"location":"Reference/database/#kineticagrant","title":"KineticaGrant","text":"","tags":["Reference"]},{"location":"Reference/database/#kineticaschema","title":"KineticaSchema","text":"","tags":["Reference"]},{"location":"Reference/database/#kineticaresourcegroup","title":"KineticaResourceGroup","text":"","tags":["Reference"]},{"location":"Reference/helm_kinetica_operators/","title":"Helm Chart Reference","text":"","tags":["Reference"]},{"location":"Reference/helm_kinetica_operators/#coming-soon","title":"Coming Soon","text":"","tags":["Reference"]},{"location":"Reference/kinetica_cluster_admins/","title":"Kinetica Cluster Admins Reference","text":"","tags":["Reference"]},{"location":"Reference/kinetica_cluster_admins/#full-kineticaclusteradmin-cr-structure","title":"Full KineticaClusterAdmin CR Structure","text":"kineticaclusteradmins.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaClusterAdmin\nmetadata: {}\n# KineticaClusterAdminSpec defines the desired state of\n# KineticaClusterAdmin\nspec:\n  # ForceDBStatus - Force a Status of the DB.\n  forceDbStatus: string\n  # Name - The name of the cluster to target.\n  kineticaClusterName: string\n  # Offline - Pause/Resume of the DB.\n  offline:\n    # Set to true if desired state is offline. The supported values are:\n    # true false\n    offline: false\n    # Optional parameters. The default value is an empty map (\n    # {} ). Supported Parameters: flush_to_disk Flush to disk when\n    # going offline The supported values are: true false\n    options: {}\n  # Rebalance of the DB.\n  rebalance:\n    # Optional parameters. The default value is an empty map (\n    # {} ). Supported Parameters: rebalance_sharded_data        If true,\n    # sharded data will be rebalanced approximately equally across the\n    # cluster. Note that for clusters with large amounts of sharded\n    # data, this data transfer could be time-consuming and result in\n    # delayed query responses. The default value is true. The supported\n    # values are: true false rebalance_unsharded_data   If true,\n    # unsharded data (a.k.a. randomly-sharded) will be rebalanced\n    # approximately equally across the cluster. Note that for clusters\n    # with large amounts of unsharded data, this data transfer could be\n    # time-consuming and result in delayed query responses. The default\n    # value is true. The supported values are: true false\n    # table_includes                Comma-separated list of unsharded table names\n    # to rebalance. Not applicable to sharded tables because they are\n    # always rebalanced. Cannot be used simultaneously with\n    # table_excludes. This parameter is ignored if\n    # rebalance_unsharded_data is false.\n    # table_excludes                Comma-separated list of unsharded table names\n    # to not rebalance. Not applicable to sharded tables because they\n    # are always rebalanced. Cannot be used simultaneously with\n    # table_includes. This parameter is ignored if rebalance_\n    # unsharded_data is false. aggressiveness               Influences how much\n    # data is moved at a time during rebalance. A higher aggressiveness\n    # will complete the rebalance faster. A lower aggressiveness will\n    # take longer but allow for better interleaving between the\n    # rebalance and other queries. Valid values are constants from 1\n    # (lowest) to 10 (highest). The default value is '1'.\n    # compact_after_rebalance   Perform compaction of deleted records\n    # once the rebalance completes to reclaim memory and disk space.\n    # Default is true, unless repair_incorrectly_sharded_data is set to\n    # true. The default value is true. The supported values are: true\n    # false compact_only                If set to true, ignore rebalance options\n    # and attempt to perform compaction of deleted records to reclaim\n    # memory and disk space without rebalancing first. The default\n    # value is false. The supported values are: true false\n    # repair_incorrectly_sharded_data       Scans for any data sharded\n    # incorrectly and re-routes the data to the correct location. Only\n    # necessary if /admin/verifydb reports an error in sharding\n    # alignment. This can be done as part of a typical rebalance after\n    # expanding the cluster or in a standalone fashion when it is\n    # believed that data is sharded incorrectly somewhere in the\n    # cluster. Compaction will not be performed by default when this is\n    # enabled. If this option is set to true, the time necessary to\n    # rebalance and the memory used by the rebalance may increase. The\n    # default value is false. The supported values are: true false\n    options: {}\n  # RegenerateDBConfig - Force regenerate of DB ConfigMap. true -\n  # restarts DB Pods after config generation false - writes new\n  # configuration without restarting the DB Pods\n  regenerateDBConfig:\n    # Restart - Scales down the DB STS and back up once the DB\n    # Configuration has been regenerated.\n    restart: false\n# KineticaClusterAdminStatus defines the observed state of\n# KineticaClusterAdmin\nstatus:\n  # Phase - The current phase/state of the Admin request\n  phase: string\n  # Processed - Indicates if the admin request has already been\n  # processed. Avoids the request being rerun in the case the Operator\n  # gets restarted.\n  processed: false\n</code></pre>","tags":["Reference"]},{"location":"Reference/kinetica_cluster_backups/","title":"Kinetica Cluster Backups Reference","text":"","tags":["Reference","Operations"]},{"location":"Reference/kinetica_cluster_backups/#full-kineticaclusterbackup-cr-structure","title":"Full KineticaClusterBackup CR Structure","text":"kineticaclusterbackups.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaClusterBackup \nmetadata: {}\n# Fields specific to the linked backup engine\nprovider:\n  # Name of the backup/restore provider. FOR INTERNAL USE ONLY.\n  backupProvider: \"velero\"\n  # Name of the backup in the linked BackupProvider. FOR INTERNAL USE\n  # ONLY.\n  linkedItemName: \"\"\n# BackupSpec defines the specification for a Velero backup.\nspec:\n  # DefaultVolumesToRestic specifies whether restic should be used to\n  # take a backup of all pod volumes by default.\n  defaultVolumesToRestic: true\n  # ExcludedNamespaces contains a list of namespaces that are not\n  # included in the backup.\n  excludedNamespaces: [\"string\"]\n  # ExcludedResources is a slice of resource names that are not included\n  # in the backup.\n  excludedResources: [\"string\"]\n  # Hooks represent custom behaviors that should be executed at\n  # different phases of the backup.\n  hooks:\n    # Resources are hooks that should be executed when backing up\n    # individual instances of a resource.\n    resources:\n    - excludedNamespaces: [\"string\"]\n      # ExcludedResources specifies the resources to which this hook\n      # spec does not apply.\n      excludedResources: [\"string\"]\n      # IncludedNamespaces specifies the namespaces to which this hook\n      # spec applies. If empty, it applies to all namespaces.\n      includedNamespaces: [\"string\"]\n      # IncludedResources specifies the resources to which this hook\n      # spec applies. If empty, it applies to all resources.\n      includedResources: [\"string\"]\n      # LabelSelector, if specified, filters the resources to which this\n      # hook spec applies.\n      labelSelector:\n        # matchExpressions is a list of label selector requirements. The\n        # requirements are ANDed.\n        matchExpressions:\n        - key: string\n          # operator represents a key's relationship to a set of values.\n          # Valid operators are In, NotIn, Exists and DoesNotExist.\n          operator: string\n          # values is an array of string values. If the operator is In\n          # or NotIn, the values array must be non-empty. If the\n          # operator is Exists or DoesNotExist, the values array must\n          # be empty. This array is replaced during a strategic merge\n          # patch.\n          values: [\"string\"]\n        # matchLabels is a map of {key,value} pairs. A single\n        # {key,value} in the matchLabels map is equivalent to an\n        # element of matchExpressions, whose key field is \"key\", the\n        # operator is \"In\", and the values array contains only \"value\".\n        # The requirements are ANDed.\n        matchLabels: {}\n      # Name is the name of this hook.\n      name: string\n      # PostHooks is a list of BackupResourceHooks to execute after\n      # storing the item in the backup. These are executed after\n      # all \"additional items\" from item actions are processed.\n      post:\n      - exec:\n          # Command is the command and arguments to execute.\n          command: [\"string\"]\n          # Container is the container in the pod where the command\n          # should be executed. If not specified, the pod's first\n          # container is used.\n          container: string\n          # OnError specifies how Velero should behave if it encounters\n          # an error executing this hook.\n          onError: string\n          # Timeout defines the maximum amount of time Velero should\n          # wait for the hook to complete before considering the\n          # execution a failure.\n          timeout: string\n      # PreHooks is a list of BackupResourceHooks to execute prior to\n      # storing the item in the backup. These are executed before\n      # any \"additional items\" from item actions are processed.\n      pre:\n      - exec:\n          # Command is the command and arguments to execute.\n          command: [\"string\"]\n          # Container is the container in the pod where the command\n          # should be executed. If not specified, the pod's first\n          # container is used.\n          container: string\n          # OnError specifies how Velero should behave if it encounters\n          # an error executing this hook.\n          onError: string\n          # Timeout defines the maximum amount of time Velero should\n          # wait for the hook to complete before considering the\n          # execution a failure.\n          timeout: string\n  # IncludeClusterResources specifies whether cluster-scoped resources\n  # should be included for consideration in the backup.\n  includeClusterResources: true\n  # IncludedNamespaces is a slice of namespace names to include objects\n  # from. If empty, all namespaces are included.\n  includedNamespaces: [\"string\"]\n  # IncludedResources is a slice of resource names to include in the\n  # backup. If empty, all resources are included.\n  includedResources: [\"string\"]\n  # LabelSelector is a metav1.LabelSelector to filter with when adding\n  # individual objects to the backup. If empty or nil, all objects are\n  # included. Optional.\n  labelSelector:\n    # matchExpressions is a list of label selector requirements. The\n    # requirements are ANDed.\n    matchExpressions:\n    - key: string\n      # operator represents a key's relationship to a set of values.\n      # Valid operators are In, NotIn, Exists and DoesNotExist.\n      operator: string\n      # values is an array of string values. If the operator is In or\n      # NotIn, the values array must be non-empty. If the operator is\n      # Exists or DoesNotExist, the values array must be empty. This\n      # array is replaced during a strategic merge patch.\n      values: [\"string\"]\n    # matchLabels is a map of {key,value} pairs. A single {key,value} in\n    # the matchLabels map is equivalent to an element of\n    # matchExpressions, whose key field is \"key\", the operator is \"In\",\n    # and the values array contains only \"value\". The requirements are\n    # ANDed.\n    matchLabels: {} metadata: labels: {}\n  # OrderedResources specifies the backup order of resources of specific\n  # Kind. The map key is the Kind name and value is a list of resource\n  # names separated by commas. Each resource name has\n  # format \"namespace/resourcename\".  For cluster resources, simply\n  # use \"resourcename\".\n  orderedResources: {}\n  # SnapshotVolumes specifies whether to take cloud snapshots of any\n  # PV's referenced in the set of objects included in the Backup.\n  snapshotVolumes: true\n  # StorageLocation is a string containing the name of a\n  # BackupStorageLocation where the backup should be stored.\n  storageLocation: string\n  # TTL is a time.Duration-parseable string describing how long the\n  # Backup should be retained for.\n  ttl: string\n  # VolumeSnapshotLocations is a list containing names of\n  # VolumeSnapshotLocations associated with this backup.\n  volumeSnapshotLocations: [\"string\"] status:\n  # ClusterSize the current number of ranks &amp; type i.e. CPU or GPU of\n  # the cluster when the backup took place.\n  clusterSize:\n    # ClusterSizeEnum - T-Shirt size of the Kinetica DB Cluster i.e. a\n    # representation of the number of nodes in a simple to understand\n    # T-Short size scheme. This indicates the size of the cluster i.e.\n    # the number of nodes. It does not identify the size of the cloud\n    # provider nodes. For node size see ClusterTypeEnum. Supported\n    # Values are: - XS S M L XL XXL XXXL\n    tshirtSize: string\n    # ClusterTypeEnum - An Enum of the node types of a KineticaCluster\n    # e.g. CPU, GPU along with the Cloud Provider node size e.g. size\n    # of the VM.\n    tshirtType: string coldTierBackup: string\n  # CompletionTimestamp records the time a backup was completed.\n  # Completion time is recorded even on failed backups. Completion time\n  # is recorded before uploading the backup object. The server's time\n  # is used for CompletionTimestamps\n  completionTimestamp: string\n  # Errors is a count of all error messages that were generated during\n  # execution of the backup.  The actual errors are in the backup's log\n  # file in object storage.\n  errors: 1\n  # Expiration is when this Backup is eligible for garbage-collection.\n  expiration: string\n  # FormatVersion is the backup format version, including major, minor,\n  # and patch version.\n  formatVersion: string\n  # Phase is the current state of the Backup.\n  phase: string\n  # Progress contains information about the backup's execution progress.\n  # Note that this information is best-effort only -- if Velero fails\n  # to update it during a backup for any reason, it may be\n  # inaccurate/stale.\n  progress:\n    # ItemsBackedUp is the number of items that have actually been\n    # written to the backup tarball so far.\n    itemsBackedUp: 1\n    # TotalItems is the total number of items to be backed up. This\n    # number may change throughout the execution of the backup due to\n    # plugins that return additional related items to back up, the\n    # velero.io/exclude-from-backup label, and various other filters\n    # that happen as items are processed.\n    totalItems: 1\n  # StartTimestamp records the time a backup was started. Separate from\n  # CreationTimestamp, since that value changes on restores. The\n  # server's time is used for StartTimestamps\n  startTimestamp: string\n  # ValidationErrors is a slice of all validation errors\n  # (if applicable).\n  validationErrors: [\"string\"]\n  # Version is the backup format major version. Deprecated: Please see\n  # FormatVersion\n  version: 1\n  # VolumeSnapshotsAttempted is the total number of attempted volume\n  # snapshots for this backup.\n  volumeSnapshotsAttempted: 1\n  # VolumeSnapshotsCompleted is the total number of successfully\n  # completed volume snapshots for this backup.\n  volumeSnapshotsCompleted: 1\n  # Warnings is a count of all warning messages that were generated\n  # during execution of the backup. The actual warnings are in the\n  # backup's log file in object storage.\n  warnings: 1\n</code></pre>","tags":["Reference","Operations"]},{"location":"Reference/kinetica_cluster_grants/","title":"Kinetica Cluster Grants CRD Reference","text":"","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_grants/#full-kineticagrant-cr-structure","title":"Full KineticaGrant CR Structure","text":"kineticagrants.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaGrant \nmetadata: {}\n# KineticaGrantSpec defines the desired state of KineticaGrant\nspec:\n  # Grants system-level and/or table permissions to a user or role.\n  addGrantAllOnSchemaRequest:\n    # Name of the user or role that will be granted membership in input\n    # parameter role. Must be an existing user or role.\n    member: string\n    # Optional parameters. The default value is an empty map ( {} ).\n    options: {}\n    # SchemaName - name of the schema on which to perform the Grant All\n    schemaName: string\n  # Grants system-level and/or table permissions to a user or role.\n  addGrantPermissionRequest:\n    # Optional parameters. The default value is an empty map ( {} ).\n    options: {}\n    # Permission to grant to the user or role. Supported\n    # Values    Description system_admin    Full access to all data and\n    # system functions. system_user_admin   Access to administer users\n    # and roles that do not have system_admin permission.\n    # system_write  Read and write access to all tables.\n    # system_read   Read-only access to all tables.\n    systemPermission:\n      # UID of the user or role to which the permission will be granted.\n      # Must be an existing user or role.\n      name: string\n      # Optional parameters. The default value is an empty map (\n      # {} ). Supported Parameters: resource_group  Name of an existing\n      # resource group to associate with this role.\n      options: {}\n      # Permission to grant to the user or role. Supported\n      # Values  Description table_admin Full read/write and\n      # administrative access to the table. table_insert    Insert access\n      # to the table. table_update  Update access to the table.\n      # table_delete    Delete access to the table. table_read  Read access\n      # to the table.\n      permission: string\n    # Permission to grant to the user or role. Supported\n    # Values    Description&lt;br/&gt; system_admin   Full access to all data and\n    # system functions.&lt;br/&gt; system_user_admin  Access to administer\n    # users and roles that do not have system_admin permission.&lt;br/&gt;\n    # system_write  Read and write access to all tables.&lt;br/&gt;\n    # system_read   Read-only access to all tables.&lt;br/&gt;\n    tablePermissions:\n    - filter_expression: \"\"\n      # UID of the user or role to which the permission will be granted.\n      # Must be an existing user or role.\n      name: string\n      # Optional parameters. The default value is an empty map (\n      # {} ). Supported Parameters: resource_group  Name of an existing\n      # resource group to associate with this role.\n      options: {}\n      # Permission to grant to the user or role. Supported\n      # Values  Description table_admin Full read/write and\n      # administrative access to the table. table_insert    Insert access\n      # to the table. table_update  Update access to the table.\n      # table_delete    Delete access to the table. table_read  Read access\n      # to the table.\n      permission: string\n      # Name of the table for which the Permission is to be granted\n      table_name: string\n  # Grants membership in a role to a user or role.\n  addGrantRoleRequest:\n    # Name of the user or role that will be granted membership in input\n    # parameter role. Must be an existing user or role.\n    member: string\n    # Optional parameters. The default value is an empty map ( {} ).\n    options: {}\n    # Name of the role in which membership will be granted. Must be an\n    # existing role.\n    role: string\n  # Debug debug the call\n  debug: false\n  # RingName is the name of the kinetica ring that this user belongs\n  # to.\n  ringName: string\n# KineticaGrantStatus defines the observed state of KineticaGrant\nstatus:\n  # DBStringResponse - The GPUdb server embeds the endpoint response\n  # inside a standard response structure which contains status\n  # information and the actual response to the query.\n  db_response: data: string\n    # This embedded JSON represents the result of the endpoint\n    data_str: string\n    # API Call Specific\n    data_type: string\n    # Empty if success or an error message\n    message: string\n    # 'OK' or 'ERROR'\n    status: string \n    ldap_response: string\n</code></pre>","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_reference/","title":"Core DB CRDs","text":"<ul> <li> <p> DB Clusters</p> <p>Core Kinetica Database Cluster Management CRD &amp; sample CR.</p> <p> KineticaCluster</p> </li> <li> <p> DB Users</p> <p>Kinetica Database User Management CRD &amp; sample CR.</p> <p> KineticaUser</p> </li> <li> <p> DB Roles</p> <p>Kinetica Database Role Management CRD &amp; sample CR.</p> <p> KineticaRole</p> </li> <li> <p> DB Schemas</p> <p>Kinetica Database Schema Management CRD &amp; sample CR.</p> <p> KineticaSchema</p> </li> <li> <p> DB Grants</p> <p>Kinetica Database Grant Management CRD &amp; sample CR.</p> <p> KineticaGrant</p> </li> <li> <p> DB Resource Groups</p> <p>Kinetica Database Resource Group Management CRD &amp; sample CR.</p> <p> KineticaResourceGroup</p> </li> <li> <p> DB Administration</p> <p>Kinetica Database Administration CRD &amp; sample CR.</p> <p> KineticaAdmin</p> </li> <li> <p> DB Backups</p> <p>Kinetica Database Backup Management CRD &amp; sample CR.</p> <p>Note</p> <p>This requires Velero to be installed on the Kubernetes Cluster.</p> <p> KineticaBackup</p> </li> <li> <p> DB Restore</p> <p>Kinetica Database Restore CRD &amp; sample CR.</p> <p>Note</p> <p>This requires Velero to be installed on the Kubernetes Cluster.</p> <p> KineticaRestore</p> </li> </ul>","tags":["Reference","Installation","Operations"]},{"location":"Reference/kinetica_cluster_resource_groups/","title":"Kinetica Cluster Resource Groups CRD Reference","text":"","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_resource_groups/#full-kineticaresourcegroup-cr-structure","title":"Full KineticaResourceGroup CR Structure","text":"kineticaclusterresourcegroups.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaClusterResourceGroup \nmetadata: {}\n# KineticaClusterResourceGroupSpec defines the desired state of\n# KineticaClusterResourceGroup\nspec: \n  db_create_resource_group_request:\n    # AdjoiningResourceGroup -\n    adjoining_resource_group: \"\"\n    # Name - name of the DB ResourceGroup\n    # https://docs.kinetica.com/7.1/azure/sql/resource_group/?search-highlight=resource+group#id-baea5b60-769c-5373-bff1-53f4f1ca5c21\n    name: string\n    # Options - DB Options used when creating the ResourceGroup\n    options: {}\n    # Ranking - Indicates the relative ranking among existing resource\n    # groups where this new resource group will be placed. When using\n    # before or after, specify which resource group this one will be\n    # inserted before or after in input parameter\n    # adjoining_resource_group. The supported values are: first last\n    # before after\n    ranking: \"\"\n  # RingName is the name of the kinetica ring that this user belongs\n  # to.\n  ringName: string\n# KineticaClusterResourceGroupStatus defines the observed state of\n# KineticaClusterResourceGroup\nstatus: \n  provisioned: string\n</code></pre>","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_restores/","title":"Kinetica Cluster Restores Reference","text":"","tags":["Reference","Operations"]},{"location":"Reference/kinetica_cluster_restores/#full-kineticaclusterrestore-cr-structure","title":"Full KineticaClusterRestore CR Structure","text":"kineticaclusterrestores.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaClusterRestore \nmetadata: {}\n# RestoreSpec defines the specification for a Velero restore.\nspec:\n  # BackupName is the unique name of the Velero backup to restore from.\n  backupName: string\n  # ExcludedNamespaces contains a list of namespaces that are not\n  # included in the restore.\n  excludedNamespaces: [\"string\"]\n  # ExcludedResources is a slice of resource names that are not included\n  # in the restore.\n  excludedResources: [\"string\"]\n  # IncludeClusterResources specifies whether cluster-scoped resources\n  # should be included for consideration in the restore. If null,\n  # defaults to true.\n  includeClusterResources: true\n  # IncludedNamespaces is a slice of namespace names to include objects\n  # from. If empty, all namespaces are included.\n  includedNamespaces: [\"string\"]\n  # IncludedResources is a slice of resource names to include in the\n  # restore. If empty, all resources in the backup are included.\n  includedResources: [\"string\"]\n  # LabelSelector is a metav1.LabelSelector to filter with when\n  # restoring individual objects from the backup. If empty or nil, all\n  # objects are included. Optional.\n  labelSelector:\n    # matchExpressions is a list of label selector requirements. The\n    # requirements are ANDed.\n    matchExpressions:\n    - key: string\n      # operator represents a key's relationship to a set of values.\n      # Valid operators are In, NotIn, Exists and DoesNotExist.\n      operator: string\n      # values is an array of string values. If the operator is In or\n      # NotIn, the values array must be non-empty. If the operator is\n      # Exists or DoesNotExist, the values array must be empty. This\n      # array is replaced during a strategic merge patch.\n      values: [\"string\"]\n    # matchLabels is a map of {key,value} pairs. A single {key,value} in\n    # the matchLabels map is equivalent to an element of\n    # matchExpressions, whose key field is \"key\", the operator is \"In\",\n    # and the values array contains only \"value\". The requirements are\n    # ANDed.\n    matchLabels: {}\n  # NamespaceMapping is a map of source namespace names to target\n  # namespace names to restore into. Any source namespaces not included\n  # in the map will be restored into namespaces of the same name.\n  namespaceMapping: {}\n  # RestorePVs specifies whether to restore all included PVs from\n  # snapshot (via the cloudprovider).\n  restorePVs: true\n  # ScheduleName is the unique name of the Velero schedule to restore\n  # from. If specified, and BackupName is empty, Velero will restore\n  # from the most recent successful backup created from this schedule.\n  scheduleName: string status: coldTierRestore: \"\"\n  # CompletionTimestamp records the time the restore operation was\n  # completed. Completion time is recorded even on failed restore. The\n  # server's time is used for StartTimestamps\n  completionTimestamp: string\n  # Errors is a count of all error messages that were generated during\n  # execution of the restore. The actual errors are stored in object\n  # storage.\n  errors: 1\n  # FailureReason is an error that caused the entire restore to fail.\n  failureReason: string\n  # Phase is the current state of the Restore\n  phase: string\n  # Progress contains information about the restore's execution\n  # progress. Note that this information is best-effort only -- if\n  # Velero fails to update it during a restore for any reason, it may\n  # be inaccurate/stale.\n  progress:\n    # ItemsRestored is the number of items that have actually been\n    # restored so far\n    itemsRestored: 1\n    # TotalItems is the total number of items to be restored. This\n    # number may change throughout the execution of the restore due to\n    # plugins that return additional related items to restore\n    totalItems: 1\n  # StartTimestamp records the time the restore operation was started.\n  # The server's time is used for StartTimestamps\n  startTimestamp: string\n  # ValidationErrors is a slice of all validation errors(if applicable)\n  validationErrors: [\"string\"]\n  # Warnings is a count of all warning messages that were generated\n  # during execution of the restore. The actual warnings are stored in\n  # object storage.\n  warnings: 1\n</code></pre>","tags":["Reference","Operations"]},{"location":"Reference/kinetica_cluster_roles/","title":"Kinetica Cluster Roles CRD","text":"","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_roles/#full-kineticarole-cr-structure","title":"Full KineticaRole CR Structure","text":"kineticaroles.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaRole \nmetadata: {}\n# KineticaRoleSpec defines the desired state of KineticaRole\nspec:\n  # AlterRoleRequest Kinetica DB REST API Request Format Object.\n  alter_role:\n    # Action - Modification operation to be applied to the role.\n    action: string\n    # Role UID - Name of the role to be altered. Must be an existing\n    # role.\n    name: string\n    # Optional parameters. The default value is an empty map ( {} ).\n    options: {}\n    # Value - The value of the modification, depending on input\n    # parameter action.\n    value: string\n  # Debug debug the call\n  debug: false\n  # RingName is the name of the kinetica ring that this user belongs\n  # to.\n  ringName: string\n  # AddRoleRequest Kinetica DB REST API Request Format Object.\n  role:\n    # User UID\n    name: string\n    # Optional parameters. The default value is an empty map (\n    # {} ). Supported Parameters: resource_group    Name of an existing\n    # resource group to associate with this role.\n    options: {}\n    # ResourceGroupName of an existing resource group to associate with\n    # this role\n    resourceGroupName: \"\"\n# KineticaRoleStatus defines the observed state of KineticaRole\nstatus:\n  # DBStringResponse - The GPUdb server embeds the endpoint response\n  # inside a standard response structure which contains status\n  # information and the actual response to the query.\n  db_response: data: string\n    # This embedded JSON represents the result of the endpoint\n    data_str: string\n    # API Call Specific\n    data_type: string\n    # Empty if success or an error message\n    message: string\n    # 'OK' or 'ERROR'\n    status: string \n    ldap_response: string\n</code></pre>","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_schemas/","title":"Kinetica Cluster Schemas CRD Reference","text":"","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_schemas/#full-kinetica-cluster-schemas-cr-structure","title":"Full Kinetica Cluster Schemas CR Structure","text":"kineticaclusterschemas.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaClusterSchema \nmetadata: {}\n# KineticaClusterSchemaSpec defines the desired state of\n# KineticaClusterSchema\nspec: \n  db_create_schema_request:\n    # Name - the name of the resource group to create in the DB\n    name: string\n    # Optional parameters. The default value is an empty map (\n    # {} ). Supported Parameters: \"max_cpu_concurrency\", \"max_data\"\n    options: {}\n  # RingName is the name of the kinetica ring that this user belongs\n  # to.\n  ringName: string\n# KineticaClusterSchemaStatus defines the observed state of\n# KineticaClusterSchema\nstatus: \n  provisioned: string\n</code></pre>","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_users/","title":"Kinetica Cluster Users CRD Reference","text":"","tags":["Reference","Administration"]},{"location":"Reference/kinetica_cluster_users/#full-kineticauser-cr-structure","title":"Full KineticaUser CR Structure","text":"kineticausers.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaUser\nmetadata: {}\n# KineticaUserSpec defines the desired state of KineticaUser\nspec:\n  # Action field contains UserActionEnum field indicating whether it is\n  # an Upsert or Change Password operation. For deletion delete the\n  # KineticaUser CR and a finalizer will remove the user from LDAP.\n  action: string\n  # ChangePassword specific fields\n  changePassword:\n    # PasswordSecret - Not the actual user password but the name of a\n    # Kubernetes Secret containing a Data element with a Password\n    # attribute. The secret is removed on user creation. Must be in the\n    # same namespace as the Kinetica Cluster. Must contain the\n    # following fields: - oldPassword newPassword\n    passwordSecret: string\n  # Debug debug the call\n  debug: false\n  # GroupID - Organisation or Team Id the user belongs to.\n  groupId: string\n  # Create the user in Reveal\n  reveal: true\n  # RingName is the name of the kinetica ring that this user belongs\n  # to.\n  ringName: string\n  # UID is the username (not UUID UID).\n  uid: string\n  # Upsert specific fields\n  upsert:\n    # CreateHomeDirectory - when true, a home directory in KiFS is\n    # created for this user The default value is true. The supported\n    # values are: true false\n    createHomeDirectory: true\n    # DB Memory user data size limit\n    dataLimit: \"10Gi\"\n    # DisplayName\n    displayName: string\n    # GivenName is Firstname also called Christian name. givenName in\n    # LDAP terms.\n    givenName: string\n    # KIFs user data size limit\n    kifsDataLimit: \"2Gi\"\n    # LastName refers to last name or surname. sn in LDAP terms.\n    lastName: string\n    # Options -\n    options: {}\n    # PasswordSecret - Not the actual user password but the name of a\n    # Kubernetes Secret containing a Data element with a Password\n    # attribute. The secret is removed on user creation. Must be in the\n    # same namespace as the Kinetica Cluster.\n    passwordSecret: string\n    # UPN or UserPrincipalName - e.g. guyt@cp.com  \n    # Looks like an email address.\n    userPrincipalName: string\n  # UUID is the user unique UUID from the Control Plane.\n  uuid: string\n# KineticaUserStatus defines the observed state of KineticaUser\nstatus:\n  # DBStringResponse - The GPUdb server embeds the endpoint response\n  # inside a standard response structure which contains status\n  # information and the actual response to the query.\n  db_response: data: string\n    # This embedded JSON represents the result of the endpoint\n    data_str: string\n    # API Call Specific\n    data_type: string\n    # Empty if success or an error message\n    message: string\n    # 'OK' or 'ERROR'\n    status: string \n    ldap_response: string \n    reveal_admin: string\n</code></pre>","tags":["Reference","Administration"]},{"location":"Reference/kinetica_clusters/","title":"image/svg+xml        crd     Kinetica Clusters CRD Reference","text":"<p>This page covers the Kinetica Cluster Kubernetes CRD.</p>","tags":["Reference"]},{"location":"Reference/kinetica_clusters/#kubectl-cli-commands","title":"<code>kubectl</code> cli commands","text":"","tags":["Reference"]},{"location":"Reference/kinetica_clusters/#kubectl-n-_namespace_-get-kc","title":"<code>kubectl -n _namespace_ get kc</code>","text":"<p>Lists the <code>KineticaUsers</code> defined within the specified anmespace to the console.</p> <p></p> Bash<pre><code>kubectl -n _namespace_ get ku\n</code></pre>","tags":["Reference"]},{"location":"Reference/kinetica_clusters/#full-kineticacluster-cr-structure","title":"Full KineticaCluster CR Structure","text":"kineticaclusters.app.kinetica.com_sample.yaml<pre><code># APIVersion defines the versioned schema of this representation of an\n# object. Servers should convert recognized schemas to the latest\n# internal value, and may reject unrecognized values. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\napiVersion: app.kinetica.com/v1\n# Kind is a string value representing the REST resource this object\n# represents. Servers may infer this from the endpoint the client\n# submits requests to. Cannot be updated. In CamelCase. More info:\n# https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\nkind: KineticaCluster \nmetadata: {}\n# KineticaClusterSpec defines the configuration for KineticaCluster DB\nspec:\n  # An optional duration after which the database is stopped and DB\n  # resources are freed\n  autoSuspend: \n    enabled: false\n    # InactivityDuration - the duration which the cluster should be idle\n    # before auto-pausing the DB Cluster.\n    inactivityDuration: \"1h\"\n  # The platform infrastructure provider e.g. azure, aws, gcp, on-prem\n  # etc.\n  awsConfig:\n    # ClusterName - AWS name of the EKS Cluster. NOTE: Marked as\n    # optional but is mandatory\n    clusterName: string\n    # MarketplaceAppConfig - Amazon AWS specific DB Cluster\n    # information.\n    marketplaceApp:\n      # KmsKeyId - Key for disk encryption. The full Amazon Resource\n      # Name of the key to use when encrypting the volume. If none is\n      # supplied but encrypted is true, a key is generated by AWS. See\n      # AWS docs for valid ARN value.\n      kmsKeyId: string\n      # ProductCode - used to uniquely identify a product in AWS\n      # Marketplace. The product code should be the same as the one\n      # used during the publishing of a new product.\n      productCode: \"1cmucncoyp9pi8xjdwqjimlf8\"\n      # PublicKeyVersion - Public Key Version provided by AWS\n      # Marketplace\n      publicKeyVersion: 1\n      # ParentResourceGroup - The resource group of the ManagedApp\n      # itself ParentResourceGroup     string\n      # `json:\"parentResourceGroup\"` ResourceId - Identifier of the\n      # resource against which usage is emitted Format is GUID\n      # (UUID)\n      # https://github.com/microsoft/commercial-marketplace-openapi/blob/main/Microsoft.Marketplace.Metering/2018-08-31/meteringapi.v1.json\n      # Optional only if that exactly of  ResourceId or ResourceUri is\n      # specified.\n      resourceId: string\n    # NodeGroups - List of NodeGroups for this cluster MUST contain at\n    # least one of the following keys: - \n    #   * none\n    #   * infra \n    #   * infra_public \n    #   * compute \n    #   * compute-gpu \n    #   * aaw_cpu \n    # NOTE: Marked as optional but is mandatory\n    nodeGroups: {}\n    # OTELTracing - OpenTelemetry Tracing Specifics\n    otelTracing:\n      # Endpoint - Set the OpenTelemetry reporting Endpoint\n      endpoint: \"\"\n      # Key - KineticaCluster specific Key required to send Telemetry\n      # information to the Cloud\n      key: string\n      # MaxBatchSize - Telemetry Reporting Interval to use in seconds.\n      maxBatchInterval: 10\n      # MaxBatchSize - Telemetry Maximum Batch Size to send.\n      maxBatchSize: 1024\n  # The platform infrastructure provider e.g. azure, aws, gcp, on-prem\n  # etc.\n  azureConfig:\n    # App Insights Specifics\n    appInsights:\n      # Endpoint - Override the default AppInsights reporting Endpoint\n      endpoint: \"\"\n      # Key - KineticaCluster specific Application Insights Key required\n      # to send Telemetry information to the Azure Portal\n      key: string\n      # MaxBatchSize - Telemetry Reporting Interval to use in seconds.\n      maxBatchInterval: 10\n      # MaxBatchSize - Telemetry Maximum Batch Size to send.\n      maxBatchSize: 1024\n    # AzureManagedAppConfig - Microsoft Azure specific DB Cluster\n    # information.\n    managedApp:\n      # DiskEncryptionSetID - By default, managed disks use\n      # platform-managed encryption keys. All managed disks, snapshots,\n      # images, and data written to existing managed disks are\n      # automatically encrypted-at-rest with platform-managed keys. You\n      # can choose to manage encryption at the level of each managed\n      # disk, with your own keys. When you specify a customer-managed\n      # key, that key is used to protect and control access to the key\n      # that encrypts your data. Customer-managed keys offer greater\n      # flexibility to manage access controls.\n      diskEncryptionSetId: string\n      # PlanId - The Azure Marketplace Plan/Offer identifier selected by\n      # the customer for this DB cluster e.g. BYOL, Pay-As-You-Go etc.\n      planId: string\n      # ParentResourceGroup - The resource group of the ManagedApp\n      # itself ParentResourceGroup     string\n      # `json:\"parentResourceGroup\"` ResourceId - Identifier of the\n      # resource against which usage is emitted Format is GUID\n      # (UUID)\n      # https://github.com/microsoft/commercial-marketplace-openapi/blob/main/Microsoft.Marketplace.Metering/2018-08-31/meteringapi.v1.json\n      # Optional only if that exactly of  ResourceId or ResourceUri is\n      # specified.\n      resourceId: string\n      # ResourceUri - Identifier of the managed app resource against\n      # which usage is emitted\n      # https://github.com/microsoft/commercial-marketplace-openapi/blob/main/Microsoft.Marketplace.Metering/2018-08-31/meteringapi.v1.json\n      # Optional only if that exactly of  ResourceId or ResourceUri is\n      # specified.\n      resourceUri: string\n  # Tells the operator we want to run in Debug mode.\n  debug: false\n  # Identifies the type of Kubernetes deployment.\n  deploymentType:\n    # CloudRegionEnum - The target Kubernetes type to deploy to.\n    # Supported Values are: - aws_useast_1 aws_useast_2 aws_uswest_1\n    # az_useast_1 az_uswest_1\n    region: string\n    # DeploymentTypeEnum - The type of the Deployment. Supported Values\n    # are: - Managed FreeSaaS DedicatedSaaS OnPrem\n    type: string\n  # The platform infrastructure provider e.g. azure, aws, gcp, on-prem\n  # etc.\n  devEditionConfig:\n    # Host IPv4 address. Used by KiND based Developer Edition where\n    # ingress paths set to *. Provides qualified, routable URLs to\n    # workbench.\n    hostIpAddress: \"\"\n  # The GAdmin Dashboard Configuration for the Kinetica Cluster.\n  gadmin:\n    # The port that GAdmin will be running on. It runs only on the head\n    # node pod in the cluster. Default: 8080\n    containerPort:\n      # Number of port to expose on the pod's IP address. This must be a\n      # valid port number, 0 &lt; x &lt; 65536.\n      containerPort: 1\n      # What host IP to bind the external port to.\n      hostIP: string\n      # Number of port to expose on the host. If specified, this must be\n      # a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n      # specified, this must match ContainerPort. Most containers do\n      # not need this.\n      hostPort: 1\n      # If specified, this must be an IANA_SVC_NAME and unique within\n      # the pod. Each named port in a pod must have a unique name. Name\n      # for the port that can be referred to by services.\n      name: string\n      # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n      # to \"TCP\".\n      protocol: \"TCP\"\n    # The Ingress Endpoint that GAdmin will be running on.\n    ingressPath:\n      # backend defines the referenced service endpoint to which the\n      # traffic will be forwarded to.\n      backend:\n        # resource is an ObjectRef to another Kubernetes resource in the\n        # namespace of the Ingress object. If resource is specified,\n        # serviceName and servicePort must not be specified.\n        resource:\n          # APIGroup is the group for the resource being referenced. If\n          # APIGroup is not specified, the specified Kind must be in\n          # the core API group. For any other third-party types,\n          # APIGroup is required.\n          apiGroup: string\n          # Kind is the type of resource being referenced\n          kind: KineticaCluster\n          # Name is the name of resource being referenced\n          name: string\n        # serviceName specifies the name of the referenced service.\n        serviceName: string\n        # servicePort Specifies the port of the referenced service.\n        servicePort: \n      # path is matched against the path of an incoming request.\n      # Currently it can contain characters disallowed from the\n      # conventional \"path\" part of a URL as defined by RFC 3986. Paths\n      # must begin with a '/' and must be present when using PathType\n      # with value \"Exact\" or \"Prefix\".\n      path: string\n      # pathType determines the interpretation of the path matching.\n      # PathType can be one of the following values: * Exact: Matches\n      # the URL path exactly. * Prefix: Matches based on a URL path\n      # prefix split by '/'. Matching is done on a path element by\n      # element basis. A path element refers is the list of labels in\n      # the path split by the '/' separator. A request is a match for\n      # path p if every p is an element-wise prefix of p of the request\n      # path. Note that if the last element of the path is a substring\n      # of the last element in request path, it is not a match\n      # (e.g. /foo/bar matches /foo/bar/baz, but does not\n      # match /foo/barbaz). * ImplementationSpecific: Interpretation of\n      # the Path matching is up to the IngressClass. Implementations\n      # can treat this as a separate PathType or treat it identically\n      # to Prefix or Exact path types. Implementations are required to\n      # support all path types. Defaults to ImplementationSpecific.\n      pathType: string\n    # Whether to enable the GAdmin Dashboard on the Cluster. Default:\n    # true\n    isEnabled: true\n  # Gaia - gaia.properties configuration\n  gaia: admin:\n      # AdminLoginOnlyGpudbDown - When GPUdb is down, only allow admin\n      # user to login\n      admin_login_only_gpudb_down: true\n      # Username - We do check for admin username in various places\n      admin_username: \"admin\"\n      # LoginAnimationEnabled - Display any animation in login page\n      login_animation_enabled: true\n      # AdminLoginOnlyGpudbDown - Convenience settings for dev mode\n      login_bypass_enabled: false\n      # RequireStrongPassword - Convenience settings for dev mode\n      require_strong_password: true\n      # SSLTruststorePasswordScript - Display any animation in login\n      # page\n      ssl_truststore_password_script: string\n    # DemoSchema - Schema-related configuration\n    demo_schema: \"demo\" gpudb:\n      # DataFileStringNullValue - Table import/export null value string\n      data_file_string_null_value: \"\\\\N\"\n      gpudb_ext_url: \"http://127.0.0.1:8082/gpudb-0\"\n      # URL - Current instance of gpudb, when running in HA mode change\n      # this to load balancer endpoint\n      gpudb_url: \"http://127.0.0.1:9191\"\n      # LoggingLogFileName - Which file to use when displaying logging\n      # on Cluster page.\n      logging_log_file_name: \"gpudb.log\"\n      # SampleRepoURL - Table import/export null value string\n      sample_repo_url: \"//s3.amazonaws.com/kinetica-ce-data\" hm:\n      gpudb_ext_hm_url: \"http://127.0.0.1:8082/gpudb-host-manager\"\n      gpudb_hm_url: \"http://127.0.0.1:9300\" http:\n      # ClientTimeout - Number of seconds for proxy request timeout\n      http_client_timeout: 3600\n      # ClientTimeoutV2 - Force override of previous default with 0 as\n      # infinite timeout\n      http_client_timeout_v2: 0\n      # TomcatPathKey - Name of folder where Tomcat apps are installed\n      tomcat_path_key: \"tomcat\"\n      # WebappContext - Web App context\n      webapp_context: \"gadmin\"\n    # GAdminIsRemote - True if the gadmin application is running on a\n    # remote machine (not on same node as gpudb). If running on a\n    # remote machine the manage options will be disabled.\n    is_remote: false\n    # KAgentCLIPath - Schema-related configuration\n    kagent_cli_path: \"/opt/gpudb/kagent/bin/kagent\"\n    # KIO - KIO-related configuration\n    kio: kio_log_file_path: \"/opt/gpudb/kitools/kio/logs/gadmin.log\"\n    kio_log_level: \"DEBUG\" kio_log_size_limit: 10485760 kisql:\n      # QueryResultsLimit - KiSQL limit on the number of results in each\n      # query\n      kisql_query_results_limit: 10000\n      # QueryTimezone - KiSQL TimeZoneId setting for queries\n      # (use \"system\" for local system time)\n      kisql_query_timezone: \"GMT\" license:\n      # Status - Stub for license manager\n      status: \"ok\"\n      # Type - Stub for license manager\n      type: \"unlimited\"\n    # MaxConcurrentUserSessions - Session management configuration\n    max_concurrent_user_sessions: 0\n    # PublicSchema - Schema-related configuration\n    public_schema: \"ki_home\"\n    # RevealDBInfoFile - Path to file containing Reveal DB location\n    reveal_db_info_file: \"/opt/gpudb/connectors/reveal/var/REVEAL_DB_DIR\"\n    # RootSchema - Schema-related configuration\n    root_schema: \"root\" stats:\n      # GraphanaURL -\n      graphana_url: \"http://127.0.0.1:3000\"\n      # GraphiteURL\n      graphite_url: \"http://127.0.0.1:8181\"\n      # StatsGrafanaURL - Port used to host the Grafana user interface\n      # and embeddable metric dashboards in GAdmin. Note: If this value\n      # is defaulted then it will be replaced by the name of the Stats\n      # service if it is deployed &amp; Grafana is enabled e.g.\n      # cluster-1234.gpudb.svc.cluster.local\n      stats_grafana_url: \"http://127.0.0.1:9091\"\n  # https://github.com/kubernetes-sigs/controller-tools/issues/622 if we\n  # want to set usePools as false, need to set defaults GPUDBCluster is\n  # an instance of a Kinetica DB Cluster i.e. it's StatefulSet,\n  # Service, Ingress, ConfigMap etc.\n  gpudbCluster:\n    # Affinity - is a group of affinity scheduling rules.\n    affinity:\n      # Describes node affinity scheduling rules for the pod.\n      nodeAffinity:\n        # The scheduler will prefer to schedule pods to nodes that\n        # satisfy the affinity expressions specified by this field, but\n        # it may choose a node that violates one or more of the\n        # expressions. The node that is most preferred is the one with\n        # the greatest sum of weights, i.e. for each node that meets\n        # all of the scheduling requirements (resource request,\n        # requiredDuringScheduling affinity expressions, etc.), compute\n        # a sum by iterating through the elements of this field and\n        # adding \"weight\" to the sum if the node matches the\n        # corresponding matchExpressions; the node(s) with the highest\n        # sum are the most preferred.\n        preferredDuringSchedulingIgnoredDuringExecution:\n        - preference:\n            # A list of node selector requirements by node's labels.\n            matchExpressions:\n            - key: string\n              # Represents a key's relationship to a set of values.\n              # Valid operators are In, NotIn, Exists, DoesNotExist.\n              # Gt, and Lt.\n              operator: string\n              # An array of string values. If the operator is In or\n              # NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. If the operator is Gt or Lt, the values\n              # array must have a single element, which will be\n              # interpreted as an integer. This array is replaced\n              # during a strategic merge patch.\n              values: [\"string\"]\n            # A list of node selector requirements by node's fields.\n            matchFields:\n            - key: string\n              # Represents a key's relationship to a set of values.\n              # Valid operators are In, NotIn, Exists, DoesNotExist.\n              # Gt, and Lt.\n              operator: string\n              # An array of string values. If the operator is In or\n              # NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. If the operator is Gt or Lt, the values\n              # array must have a single element, which will be\n              # interpreted as an integer. This array is replaced\n              # during a strategic merge patch.\n              values: [\"string\"]\n          # Weight associated with matching the corresponding\n          # nodeSelectorTerm, in the range 1-100.\n          weight: 1\n        # If the affinity requirements specified by this field are not\n        # met at scheduling time, the pod will not be scheduled onto\n        # the node. If the affinity requirements specified by this\n        # field cease to be met at some point during pod execution\n        # (e.g. due to an update), the system may or may not try to\n        # eventually evict the pod from its node.\n        requiredDuringSchedulingIgnoredDuringExecution:\n          # Required. A list of node selector terms. The terms are\n          # ORed.\n          nodeSelectorTerms:\n          - matchExpressions:\n            - key: string\n              # Represents a key's relationship to a set of values.\n              # Valid operators are In, NotIn, Exists, DoesNotExist.\n              # Gt, and Lt.\n              operator: string\n              # An array of string values. If the operator is In or\n              # NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. If the operator is Gt or Lt, the values\n              # array must have a single element, which will be\n              # interpreted as an integer. This array is replaced\n              # during a strategic merge patch.\n              values: [\"string\"]\n            # A list of node selector requirements by node's fields.\n            matchFields:\n            - key: string\n              # Represents a key's relationship to a set of values.\n              # Valid operators are In, NotIn, Exists, DoesNotExist.\n              # Gt, and Lt.\n              operator: string\n              # An array of string values. If the operator is In or\n              # NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. If the operator is Gt or Lt, the values\n              # array must have a single element, which will be\n              # interpreted as an integer. This array is replaced\n              # during a strategic merge patch.\n              values: [\"string\"]\n      # Describes pod affinity scheduling rules (e.g. co-locate this pod\n      # in the same node, zone, etc. as some other pod(s)).\n      podAffinity:\n        # The scheduler will prefer to schedule pods to nodes that\n        # satisfy the affinity expressions specified by this field, but\n        # it may choose a node that violates one or more of the\n        # expressions. The node that is most preferred is the one with\n        # the greatest sum of weights, i.e. for each node that meets\n        # all of the scheduling requirements (resource request,\n        # requiredDuringScheduling affinity expressions, etc.), compute\n        # a sum by iterating through the elements of this field and\n        # adding \"weight\" to the sum if the node has pods which matches\n        # the corresponding podAffinityTerm; the node(s) with the\n        # highest sum are the most preferred.\n        preferredDuringSchedulingIgnoredDuringExecution:\n        - podAffinityTerm:\n            # A label query over a set of resources, in this case pods.\n            labelSelector:\n              # matchExpressions is a list of label selector\n              # requirements. The requirements are ANDed.\n              matchExpressions:\n              - key: string\n                # operator represents a key's relationship to a set of\n                # values. Valid operators are In, NotIn, Exists and\n                # DoesNotExist.\n                operator: string\n                # values is an array of string values. If the operator\n                # is In or NotIn, the values array must be non-empty.\n                # If the operator is Exists or DoesNotExist, the values\n                # array must be empty. This array is replaced during a\n                # strategic merge patch.\n                values: [\"string\"]\n              # matchLabels is a map of {key,value} pairs. A single\n              # {key,value} in the matchLabels map is equivalent to an\n              # element of matchExpressions, whose key field is \"key\",\n              # the operator is \"In\", and the values array contains\n              # only \"value\". The requirements are ANDed.\n              matchLabels: {}\n            # A label query over the set of namespaces that the term\n            # applies to. The term is applied to the union of the\n            # namespaces selected by this field and the ones listed in\n            # the namespaces field. null selector and null or empty\n            # namespaces list means \"this pod's namespace\". An empty\n            # selector ({}) matches all namespaces.\n            namespaceSelector:\n              # matchExpressions is a list of label selector\n              # requirements. The requirements are ANDed.\n              matchExpressions:\n              - key: string\n                # operator represents a key's relationship to a set of\n                # values. Valid operators are In, NotIn, Exists and\n                # DoesNotExist.\n                operator: string\n                # values is an array of string values. If the operator\n                # is In or NotIn, the values array must be non-empty.\n                # If the operator is Exists or DoesNotExist, the values\n                # array must be empty. This array is replaced during a\n                # strategic merge patch.\n                values: [\"string\"]\n              # matchLabels is a map of {key,value} pairs. A single\n              # {key,value} in the matchLabels map is equivalent to an\n              # element of matchExpressions, whose key field is \"key\",\n              # the operator is \"In\", and the values array contains\n              # only \"value\". The requirements are ANDed.\n              matchLabels: {}\n            # namespaces specifies a static list of namespace names that\n            # the term applies to. The term is applied to the union of\n            # the namespaces listed in this field and the ones selected\n            # by namespaceSelector. null or empty namespaces list and\n            # null namespaceSelector means \"this pod's namespace\".\n            namespaces: [\"string\"]\n            # This pod should be co-located (affinity) or not\n            # co-located (anti-affinity) with the pods matching the\n            # labelSelector in the specified namespaces, where\n            # co-located is defined as running on a node whose value of\n            # the label with key topologyKey matches that of any node\n            # on which any of the selected pods is running. Empty\n            # topologyKey is not allowed.\n            topologyKey: string\n          # weight associated with matching the corresponding\n          # podAffinityTerm, in the range 1-100.\n          weight: 1\n        # If the affinity requirements specified by this field are not\n        # met at scheduling time, the pod will not be scheduled onto\n        # the node. If the affinity requirements specified by this\n        # field cease to be met at some point during pod execution\n        # (e.g. due to a pod label update), the system may or may not\n        # try to eventually evict the pod from its node. When there are\n        # multiple elements, the lists of nodes corresponding to each\n        # podAffinityTerm are intersected, i.e. all terms must be\n        # satisfied.\n        requiredDuringSchedulingIgnoredDuringExecution:\n        - labelSelector:\n            # matchExpressions is a list of label selector requirements.\n            # The requirements are ANDed.\n            matchExpressions:\n            - key: string\n              # operator represents a key's relationship to a set of\n              # values. Valid operators are In, NotIn, Exists and\n              # DoesNotExist.\n              operator: string\n              # values is an array of string values. If the operator is\n              # In or NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. This array is replaced during a\n              # strategic merge patch.\n              values: [\"string\"]\n            # matchLabels is a map of {key,value} pairs. A single\n            # {key,value} in the matchLabels map is equivalent to an\n            # element of matchExpressions, whose key field is \"key\",\n            # the operator is \"In\", and the values array contains\n            # only \"value\". The requirements are ANDed.\n            matchLabels: {}\n          # A label query over the set of namespaces that the term\n          # applies to. The term is applied to the union of the\n          # namespaces selected by this field and the ones listed in\n          # the namespaces field. null selector and null or empty\n          # namespaces list means \"this pod's namespace\". An empty\n          # selector ({}) matches all namespaces.\n          namespaceSelector:\n            # matchExpressions is a list of label selector requirements.\n            # The requirements are ANDed.\n            matchExpressions:\n            - key: string\n              # operator represents a key's relationship to a set of\n              # values. Valid operators are In, NotIn, Exists and\n              # DoesNotExist.\n              operator: string\n              # values is an array of string values. If the operator is\n              # In or NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. This array is replaced during a\n              # strategic merge patch.\n              values: [\"string\"]\n            # matchLabels is a map of {key,value} pairs. A single\n            # {key,value} in the matchLabels map is equivalent to an\n            # element of matchExpressions, whose key field is \"key\",\n            # the operator is \"In\", and the values array contains\n            # only \"value\". The requirements are ANDed.\n            matchLabels: {}\n          # namespaces specifies a static list of namespace names that\n          # the term applies to. The term is applied to the union of\n          # the namespaces listed in this field and the ones selected\n          # by namespaceSelector. null or empty namespaces list and\n          # null namespaceSelector means \"this pod's namespace\".\n          namespaces: [\"string\"]\n          # This pod should be co-located (affinity) or not co-located\n          # (anti-affinity) with the pods matching the labelSelector in\n          # the specified namespaces, where co-located is defined as\n          # running on a node whose value of the label with key\n          # topologyKey matches that of any node on which any of the\n          # selected pods is running. Empty topologyKey is not\n          # allowed.\n          topologyKey: string\n      # Describes pod anti-affinity scheduling rules (e.g. avoid putting\n      # this pod in the same node, zone, etc. as some other pod(s)).\n      podAntiAffinity:\n        # The scheduler will prefer to schedule pods to nodes that\n        # satisfy the anti-affinity expressions specified by this\n        # field, but it may choose a node that violates one or more of\n        # the expressions. The node that is most preferred is the one\n        # with the greatest sum of weights, i.e. for each node that\n        # meets all of the scheduling requirements (resource request,\n        # requiredDuringScheduling anti-affinity expressions, etc.),\n        # compute a sum by iterating through the elements of this field\n        # and adding \"weight\" to the sum if the node has pods which\n        # matches the corresponding podAffinityTerm; the node(s) with\n        # the highest sum are the most preferred.\n        preferredDuringSchedulingIgnoredDuringExecution:\n        - podAffinityTerm:\n            # A label query over a set of resources, in this case pods.\n            labelSelector:\n              # matchExpressions is a list of label selector\n              # requirements. The requirements are ANDed.\n              matchExpressions:\n              - key: string\n                # operator represents a key's relationship to a set of\n                # values. Valid operators are In, NotIn, Exists and\n                # DoesNotExist.\n                operator: string\n                # values is an array of string values. If the operator\n                # is In or NotIn, the values array must be non-empty.\n                # If the operator is Exists or DoesNotExist, the values\n                # array must be empty. This array is replaced during a\n                # strategic merge patch.\n                values: [\"string\"]\n              # matchLabels is a map of {key,value} pairs. A single\n              # {key,value} in the matchLabels map is equivalent to an\n              # element of matchExpressions, whose key field is \"key\",\n              # the operator is \"In\", and the values array contains\n              # only \"value\". The requirements are ANDed.\n              matchLabels: {}\n            # A label query over the set of namespaces that the term\n            # applies to. The term is applied to the union of the\n            # namespaces selected by this field and the ones listed in\n            # the namespaces field. null selector and null or empty\n            # namespaces list means \"this pod's namespace\". An empty\n            # selector ({}) matches all namespaces.\n            namespaceSelector:\n              # matchExpressions is a list of label selector\n              # requirements. The requirements are ANDed.\n              matchExpressions:\n              - key: string\n                # operator represents a key's relationship to a set of\n                # values. Valid operators are In, NotIn, Exists and\n                # DoesNotExist.\n                operator: string\n                # values is an array of string values. If the operator\n                # is In or NotIn, the values array must be non-empty.\n                # If the operator is Exists or DoesNotExist, the values\n                # array must be empty. This array is replaced during a\n                # strategic merge patch.\n                values: [\"string\"]\n              # matchLabels is a map of {key,value} pairs. A single\n              # {key,value} in the matchLabels map is equivalent to an\n              # element of matchExpressions, whose key field is \"key\",\n              # the operator is \"In\", and the values array contains\n              # only \"value\". The requirements are ANDed.\n              matchLabels: {}\n            # namespaces specifies a static list of namespace names that\n            # the term applies to. The term is applied to the union of\n            # the namespaces listed in this field and the ones selected\n            # by namespaceSelector. null or empty namespaces list and\n            # null namespaceSelector means \"this pod's namespace\".\n            namespaces: [\"string\"]\n            # This pod should be co-located (affinity) or not\n            # co-located (anti-affinity) with the pods matching the\n            # labelSelector in the specified namespaces, where\n            # co-located is defined as running on a node whose value of\n            # the label with key topologyKey matches that of any node\n            # on which any of the selected pods is running. Empty\n            # topologyKey is not allowed.\n            topologyKey: string\n          # weight associated with matching the corresponding\n          # podAffinityTerm, in the range 1-100.\n          weight: 1\n        # If the anti-affinity requirements specified by this field are\n        # not met at scheduling time, the pod will not be scheduled\n        # onto the node. If the anti-affinity requirements specified by\n        # this field cease to be met at some point during pod\n        # execution (e.g. due to a pod label update), the system may or\n        # may not try to eventually evict the pod from its node. When\n        # there are multiple elements, the lists of nodes corresponding\n        # to each podAffinityTerm are intersected, i.e. all terms must\n        # be satisfied.\n        requiredDuringSchedulingIgnoredDuringExecution:\n        - labelSelector:\n            # matchExpressions is a list of label selector requirements.\n            # The requirements are ANDed.\n            matchExpressions:\n            - key: string\n              # operator represents a key's relationship to a set of\n              # values. Valid operators are In, NotIn, Exists and\n              # DoesNotExist.\n              operator: string\n              # values is an array of string values. If the operator is\n              # In or NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. This array is replaced during a\n              # strategic merge patch.\n              values: [\"string\"]\n            # matchLabels is a map of {key,value} pairs. A single\n            # {key,value} in the matchLabels map is equivalent to an\n            # element of matchExpressions, whose key field is \"key\",\n            # the operator is \"In\", and the values array contains\n            # only \"value\". The requirements are ANDed.\n            matchLabels: {}\n          # A label query over the set of namespaces that the term\n          # applies to. The term is applied to the union of the\n          # namespaces selected by this field and the ones listed in\n          # the namespaces field. null selector and null or empty\n          # namespaces list means \"this pod's namespace\". An empty\n          # selector ({}) matches all namespaces.\n          namespaceSelector:\n            # matchExpressions is a list of label selector requirements.\n            # The requirements are ANDed.\n            matchExpressions:\n            - key: string\n              # operator represents a key's relationship to a set of\n              # values. Valid operators are In, NotIn, Exists and\n              # DoesNotExist.\n              operator: string\n              # values is an array of string values. If the operator is\n              # In or NotIn, the values array must be non-empty. If the\n              # operator is Exists or DoesNotExist, the values array\n              # must be empty. This array is replaced during a\n              # strategic merge patch.\n              values: [\"string\"]\n            # matchLabels is a map of {key,value} pairs. A single\n            # {key,value} in the matchLabels map is equivalent to an\n            # element of matchExpressions, whose key field is \"key\",\n            # the operator is \"In\", and the values array contains\n            # only \"value\". The requirements are ANDed.\n            matchLabels: {}\n          # namespaces specifies a static list of namespace names that\n          # the term applies to. The term is applied to the union of\n          # the namespaces listed in this field and the ones selected\n          # by namespaceSelector. null or empty namespaces list and\n          # null namespaceSelector means \"this pod's namespace\".\n          namespaces: [\"string\"]\n          # This pod should be co-located (affinity) or not co-located\n          # (anti-affinity) with the pods matching the labelSelector in\n          # the specified namespaces, where co-located is defined as\n          # running on a node whose value of the label with key\n          # topologyKey matches that of any node on which any of the\n          # selected pods is running. Empty topologyKey is not\n          # allowed.\n          topologyKey: string\n    # Annotations - Annotations labels to be applied to the Statefulset\n    # DB pods.\n    annotations: {}\n    # The name of the cluster to form.\n    clusterName: string\n    # The Ingress Endpoint that GAdmin will be running on.\n    clusterSize:\n      # ClusterSizeEnum - T-Shirt size of the Kinetica DB Cluster i.e. a\n      # representation of the number of nodes in a simple to understand\n      # T-Short size scheme. This indicates the size of the cluster\n      # i.e. the number of nodes. It does not identify the size of the\n      # cloud provider nodes. For node size see ClusterTypeEnum.\n      # Supported Values are: - XS S M L XL XXL XXXL\n      tshirtSize: string\n      # ClusterTypeEnum - An Enum of the node types of a KineticaCluster\n      # e.g. CPU, GPU along with the Cloud Provider node size e.g. size\n      # of the VM.\n      tshirtType: string\n    # Config Kinetica DB Configuration Object\n    config: ai: apiKey: string\n        # Provider - AI API provider type. The default is \"sqlgpt\"\n        apiProvider: \"sqlgpt\" apiUrl: string\n      # AlertManagerConfig\n      alertManager:\n        # AlertManager IP address (run on head node) default port\n        # is \"2003\"\n        ipAddress: \"${gaia.host0.address}\" port: 2003\n      # AlertConfig\n      alerts: alertDiskAbsolute: [integer]\n        # Trigger an alert if available disk space on any given node\n        # falls to or below a certain threshold, either absolute\n        # (number of bytes) or percentage of total disk space. For\n        # multiple thresholds, use a comma-delimited list of values.\n        alertDiskPercentage: [1,5,10,20]\n        # Trigger generic error message alerts, in cases of various\n        # significant runtime errors.\n        alertErrorMessages: true\n        # Executable to run when an alert condition occurs. This\n        # executable will only be run on **rank0** and does not need to\n        # be present on other nodes.\n        alertExe: \"\"\n        # Trigger an alert whenever the status of a host or rank\n        # changes.\n        alertHostStatus: true\n        # Optionally, filter host alerts for a comma-delimited list of\n        # statuses. If a filter is empty, every host status change will\n        # trigger an alert.\n        alertHostStatusFilter: \"fatal_init_error\"\n        # The maximum number of triggered alerts guaranteed to be stored\n        # at any given time. When this number of alerts is exceeded,\n        # older alerts may be discarded to stay within the limit.\n        alertMaxStoredAlerts: 100 alertMemoryAbsolute: [integer]\n        # Trigger an alert if available memory on any given node falls\n        # to or below a certain threshold, either absolute (number of\n        # bytes) or percentage of total memory. For multiple\n        # thresholds, use a comma-delimited list of values.\n        alertMemoryPercentage: [1,5,10,20]\n        # Trigger an alert if a CUDA error occurs on a rank.\n        alertRankCudaError: true\n        # Trigger alerts when the fallback allocator is employed; e.g.,\n        # host memory is allocated because GPU allocation fails. NOTE:\n        # To prevent a flooding of alerts, if a fallback allocator is\n        # triggered in bursts, not every use will generate an alert.\n        alertRankFallbackAllocator: true\n        # Trigger an alert whenever the status of a rank changes.\n        alertRankStatus: true\n        # Optionally, filter rank alerts for a comma-delimited list of\n        # statuses. If a filter is empty, every rank status change will\n        # trigger an alert.\n        alertRankStatusFilter:\n        [\"fatal_init_error\",\"not_responding\",\"terminated\"]\n        # Enable the alerting system.\n        enableAlerts: true\n        # Directory where the trace event and summary files are stored.\n        # Must be a fully qualified path with sufficient free space for\n        # required volume of data.\n        traceDirectory: \"/tmp\"\n        # The maximum number of trace events to be collected\n        traceEventBufferSize: 1000000\n      # Audit - This section controls the request auditor, which will\n      # audit all requests received by the server in full or in part\n      # based on the settings.\n      audit:\n        # Controls whether the body of each request is audited (in JSON\n        # format). If 'enable_audit' is \"false\" this setting has no\n        # effect. NOTE: For requests that insert data records, this\n        # setting does not control the auditing of the records being\n        # inserted, only the rest of the request body; see 'audit_data'\n        # below to control this. audit_body = false\n        body: false\n        # Controls whether records being inserted are audited (in JSON\n        # format) for requests that insert data records. If\n        # either 'enable_audit' or 'audit_body' is \"false\", this\n        # setting has no effect. NOTE: Enabling this setting during\n        # bulk ingestion of data will rapidly produce very large audit\n        # logs and may cause disk space exhaustion; use with caution.\n        # audit_data = false\n        data: false\n        # Controls whether request auditing is enabled. If set\n        # to \"true\", the following information is audited for every\n        # request: Job ID, URI, User, and Client Address. The settings\n        # below control whether additional information about each\n        # request is also audited. If set to \"false\", all auditing is\n        # disabled. enable_audit = false\n        enable: false\n        # Controls whether HTTP headers are audited for each request.\n        # If 'enable_audit' is \"false\" this setting has no effect.\n        # audit_headers = false\n        headers: true\n        # Controls whether the above audit settings can be altered at\n        # runtime via the /alter/system/properties endpoint. In a\n        # secure environment where auditing is required at all times,\n        # this should be set to \"true\" to lock the settings to what is\n        # set in this file. lock_audit = false\n        lock: false\n        # Controls whether response information is audited for each\n        # request. If 'enable_audit' is \"false\" this setting has no\n        # effect. audit_response = false\n        response: false\n      # EventConfig\n      events:\n        # Run a statistics server to collect information about Kinetica\n        # and the machines it runs on.\n        internal: true\n        # Statistics server IP address (run on head node) default port\n        # is \"2003\"\n        ipAddress: \"${gaia.host0.address}\" port: 2003\n        # Statistics server namespace - should be a machine identifier\n        statsServerNamespace: \"gpudb\"\n      # ExternalFilesConfig\n      externalFiles:\n        # Defines the directory from which external files can be loaded\n        directory: \"/opt/gpudb/persist\"\n        # # Parquet files compression type egress_parquet_compression =\n        #   snappy\n        egressParquetCompression: \"snappy\"\n        # Max file size (in MB) to allow saving to a single file. May be\n        # overridden by target limitations. egress_single_file_max_size\n        # = 100\n        egressSingleFileMaxSize: \"100\"\n        # Maximum number of simultaneous threads allocated to a given\n        # external file read request, on each rank. Note that thread\n        # allocation may also be limited by resource group limits, the\n        # subtask_concurrency_limit setting, or system load.\n        readerNumTasks: \"-1\"\n      # GeneralConfig - the root of the gpudb.conf configuration in the\n      # CRD\n      general:\n        # Timeout (in seconds) to wait for a rank to start during a\n        # cluster event (ex: failover) event is considered failed.\n        clusterEventTimeoutStartupRank: \"300\"\n        # Enable (if \"true\") multiple kernels to run concurrently on the\n        # same GPU\n        concurrentKernelExecution: true\n        # Time-to-live in minutes of non-protected tables before they\n        # are automatically deleted from the database.\n        defaultTTL: \"20\"\n        # Disallow the /clear/table request to clear all tables.\n        disableClearAll: true\n        # Enable overlapped-equi-join filters\n        enableOverlappedEquiJoin: true\n        # Enable predicate-equi-join filter plan type\n        enablePredicateEquiJoin: true\n        # If \"true\" then all filter execution will be host-only\n        # (i.e. CPU). This can be useful for high-concurrency\n        # situations and when PCIe bandwidth is a limiting factor.\n        forceHostFilterExecution: false\n        # Maximum number of kernels that can be running at the same time\n        # on a given GPU. Set to \"0\" for no limit. Only takes effect\n        # if 'concurrent_kernel_execution' is \"true\"\n        maxConcurrentKernels: \"0\"\n        # Maximum number of records that data retrieval requests such\n        # as /get/records and /aggregate/groupby will return per\n        # request.\n        maxGetRecordsSize: 20000\n        # Set an optional executable command that will be run once when\n        # Kinetica is ready for client requests. This can be used to\n        # perform any initialization logic that needs to be run before\n        # clients connect. It will be run as the \"gpudb\" user, so you\n        # must ensure that any required permissions are set on the file\n        # to allow it to be executed.  If the command cannot be\n        # executed or returns a non-zero error code, then Kinetica will\n        # be stopped.  Output from the startup script will be logged\n        # to \"/opt/gpudb/core/logs/gpudb-on-start.log\" (and its dated\n        # relatives).  The \"gpudb_env.sh\" script is run directly before\n        # the command, so the path will be set to include the supplied\n        # Python runtime. Example: on_startup_script\n        # = /home/gpudb/on-start.sh param1 param2 ...\n        onStartupScript: \"\"\n        # Size in bytes of the pinned memory pool per-rank process to\n        # speed up copying data to the GPU.  Set to \"0\" to disable.\n        pinnedMemoryPoolSize: 2000000000\n        # Tables and collections with these names will not be deleted\n        # (comma separated).\n        protectedSets: \"MASTER,_MASTER,_DATASOURCE\"\n        # Timeout (in minutes) for filter-type requests\n        requestTimeout: \"20\"\n        # Timeout (in seconds) to wait for a rank to exit gracefully\n        # before it is force-killed. Machines with slow disk drives may\n        # require longer times and data may be lost if a drive is not\n        # responsive.\n        timeoutShutdownRank: \"300\"\n        # Timeout (in seconds) to wait for each database subsystem to\n        # exit gracefully before it is force-killed.\n        timeoutShutdownSubsystem: \"20\"\n        # Timeout (in seconds) to wait for each database subsystem to\n        # startup. Subsystems include the Query Planner, Graph,\n        # Stats, &amp; HTTP servers, as well as external text-search\n        # ranks.\n        timeoutStartupSubsystem: \"60\"\n      # GraphConfig\n      graph:\n        # Enable the graph server\n        enable: false\n        # List of GPU devices to be used by graph server The server\n        # would ideally be run on a different node with dedicated GPU\n        # (s)\n        gpuList: \"\"\n        # Specify where the graph server should be run, defaults to head\n        # node\n        ipAddress: \"${gaia.rank0_ip_address}\"\n        # Maximum memory that can be used by the graph server, set\n        # to \"0\" to disable memory restriction\n        maxMemory: 0\n        # Port used for responses from the graph server to the database\n        # server\n        pullPort: 8100\n        # Port used for requests from the database server to the graph\n        # server\n        pushPort: 8099\n        # Number of seconds the graph client will wait for a response\n        # from the graph server\n        timeout: 1200\n      # HardwareConfig\n      hardware:\n        # Rank0HardwareConfig\n        rank0:\n          # Specify the GPU to use for all calculations on the HTTP\n          # server node, **rank0**. NOTE: The **rank0** GPU may be\n          # shared with another rank.\n          gpu: 0\n          # Set the head HTTP **rank0** numa node(s). If left empty,\n          # there will be no thread affinity or preferred memory node.\n          # The node list may be either a single node number or a\n          # range; e.g., \"1-5,7,10\". If there will be many simultaneous\n          # users, specify as many nodes as possible that won't overlap\n          # the **rank1** to **rankN** worker numa nodes that the GPUs\n          # are on. If there will be few simultaneous users and WMS\n          # speed is important, choose the numa node the 'rank0.gpu' is\n          # on.\n          numaNode: ranks:\n        - baseNumaNode: string\n          # Set each worker rank's preferred data numa node for CPU\n          # affinity and memory allocation.\n          # The 'rank&lt;#&gt;.data_numa_node' is the node or nodes that data\n          # intensive threads will run in and should be set to the same\n          # numa node that the GPU specified by the\n          # corresponding 'rank&lt;#&gt;.taskcalc_gpu' is on for best\n          # performance. If the 'rank&lt;#&gt;.taskcalc_gpu' is specified\n          # the 'rank&lt;#&gt;.data_numa_node' will be automatically set to\n          # the node the GPU is attached to, otherwise there will be no\n          # CPU thread affinity or preferred node for memory allocation\n          # if not specified or left empty. The node list may be a\n          # single node number or a range; e.g., \"1-5,7,10\".\n          dataNumaNode: string\n          # Set the GPU device for each worker rank to use. If no GPUs\n          # are specified, each rank will round-robin the available\n          # GPUs per host system. Add 'rank&lt;#&gt;.taskcalc_gpu' as needed\n          # for the worker ranks, where *#* ranges from \"1\" to the\n          # highest *rank #* among the 'rank&lt;#&gt;.host' parameters\n          # Example setting the GPUs to use for ranks 1 and 2: \n          #  #   rank1.taskcalc_gpu = 0 #   rank2.taskcalc_gpu = 1\n          taskCalcGPU: kafka:\n        # Maximum number of records to be ingested in a single batch\n        # kafka.batch_size = 1000\n        batchSize: 1000\n        # Maximum time (milliseconds) for each poll to get records from\n        # kafka kafka.poll_timeout = 0\n        pollTimeout: 1\n        # Maximum wait time (seconds) to buffer records received from\n        # kafka before ingestion kafka.wait_time = 30\n        waitTime: 30\n      # KifsConfig\n      kifs:\n        # KIFs user data size limit\n        dataLimit: \"4Gi\"\n        # sudo usermod -a -G gpudb_proc &lt;user&gt;\n        enable: false\n        # Parent directory of the mount point for the KiFS file system.\n        # Must be a fully qualified path. The actual mount point will\n        # be a subdirectory *mount* below this directory. Note that\n        # this folder must have read, write and execute permissions for\n        # the \"gpudb\" user and the \"gpudb_proc\" group, and it cannot be\n        # a path on an NFS.\n        mountPoint: \"/gpudb/kifs\" useManagedCredentials: true\n      # Etcd *ETCDConfig `json:\"etcd,omitempty\"` HA        HAConfig\n      # `json:\"ha,omitempty\"`\n      ml:\n        # Enable the ML server.\n        enable: false\n      # NetworkConfig\n      network:\n        # HAAddress - An optional address to allow inter-cluster\n        # communication with HA when 'address' is not routable between\n        # clusters.\n        HAAddress: string\n        # CompressNetworkData - Enables compression of inter-node\n        # network data transfers.\n        compressNetworkData: false\n        # EnableHTTPDProxy - Start an HTTP server as a proxy to handle\n        # LDAP and/or Kerberos authentication. Each host will run an\n        # HTTP server and access to each rank is available through\n        # http://host:8082/gpudb-1, where port \"8082\" is defined\n        # by 'httpd_proxy_port'. NOTE: HTTP external endpoints are not\n        # affected by the 'use_https' parameter above. If you wish to\n        # enable HTTPS, you must edit\n        # the \"/opt/gpudb/httpd/conf/httpd.conf\" and setup HTTPS as per\n        # the Apache httpd documentation at\n        # https://httpd.apache.org/docs/2.2/\n        enableHTTPDProxy: true\n        # EnableWorkerHTTPServers - Enable worker HTTP servers; each\n        # process runs its own server for multi-head ingest.\n        enableWorkerHTTPServers: true\n        # GlobalManagerLocalPubPort - ?\n        globalManagerLocalPubPort: 5554\n        # GlobalManagerPortOne - Internal communication ports -  Host\n        # manager status notification channel\n        globalManagerPortOne: 5552\n        # GlobalManagerPubPort - Host manager synchronization message\n        # publishing channel port\n        globalManagerPubPort: 5553\n        # HeadIPAddress - Head HTTP server IP address. Set to the\n        # publicly accessible IP address of the first\n        # process, **rank0**.\n        headIPAddress: \"172.20.0.10\"\n        # HeadPort - Head HTTP server port to use\n        # for 'head_ip_address'.\n        headPort: 9191\n        # HostManagerHTTPPort - HTTP port for web portal of the host\n        # manager\n        hostManagerHTTPPort: 9300\n        # HTTPAllowOrigin - Value to return via\n        # Access-Control-Allow-Origin HTTP header (for Cross-Origin\n        # Resource Sharing). Set to empty to not return the header and\n        # disallow CORS.\n        httpAllowOrigin: \"*\"\n        # HTTPKeepAlive - Keep HTTP connections alive between requests\n        httpKeepAlive: false\n        # HTTPDProxyPort - TCP port that the httpd auth proxy server\n        # will listen on if 'enable_httpd_proxy' is \"true\".\n        httpdProxyPort: 8082\n        # HTTPDProxyUseHTTPS - Set to \"true\" if the httpd auth proxy\n        # server is configured to use HTTPS.\n        httpdProxyUseHTTPS: false\n        # HTTPSCertFile - File containing the SSL certificate  e.g.\n        # cert.pem If required, a self-signed certificate(expires after\n        # 10 years) can be generated via the command: e.g. cert.pem\n        # openssl req -newkey rsa:2048 -new -nodes -x509 \\ -days\n        # 3650 -keyout key.pem -out cert.pem\n        httpsCertFile: \"\"\n        # HTTPSKeyFile - File containing the SSL private Key e.g.\n        # key.pem If required, a self-signed certificate (expires after\n        # 10 years) can be generated via the command: openssl\n        # req -newkey rsa:2048 -new -nodes -x509 \\ -days 3650 -keyout\n        # key.pem -out cert.pem\n        httpsKeyFile: \"\"\n        # Rank0IPAddress - Internal use IP address of the head HTTP\n        # server, **rank0**. Set to either a second internal network\n        # accessible by all ranks or to '${gaia.head_ip_address}'.\n        rank0IPAddress: \"${gaia.rank0.host}\" ranks:\n        - communicatorPort:\n            # Number of port to expose on the pod's IP address. This\n            # must be a valid port number, 0 &lt; x &lt; 65536.\n            containerPort: 1\n            # What host IP to bind the external port to.\n            hostIP: string\n            # Number of port to expose on the host. If specified, this\n            # must be a valid port number, 0 &lt; x &lt; 65536. If\n            # HostNetwork is specified, this must match ContainerPort.\n            # Most containers do not need this.\n            hostPort: 1\n            # If specified, this must be an IANA_SVC_NAME and unique\n            # within the pod. Each named port in a pod must have a\n            # unique name. Name for the port that can be referred to by\n            # services.\n            name: string\n            # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n            # to \"TCP\".\n            protocol: \"TCP\"\n          # Specify the hosts to run each rank worker process in the\n          # cluster. For a single machine system, use \"127.0.0.1\", but\n          # if using two or more machines, a hostname or IP address\n          # must be specified for each rank that is accessible from the\n          # other ranks. See also 'head_ip_address'\n          # and 'rank0_ip_address'.\n          host: string\n          # Optionally, specify the worker HTTP server ports. The\n          # default is to use ('head_port' + *rank #*) for each worker\n          # process where rank number is from \"1\" to number of ranks\n          # in 'rank&lt;#&gt;.host' below.\n          httpServerPort:\n            # Number of port to expose on the pod's IP address. This\n            # must be a valid port number, 0 &lt; x &lt; 65536.\n            containerPort: 1\n            # What host IP to bind the external port to.\n            hostIP: string\n            # Number of port to expose on the host. If specified, this\n            # must be a valid port number, 0 &lt; x &lt; 65536. If\n            # HostNetwork is specified, this must match ContainerPort.\n            # Most containers do not need this.\n            hostPort: 1\n            # If specified, this must be an IANA_SVC_NAME and unique\n            # within the pod. Each named port in a pod must have a\n            # unique name. Name for the port that can be referred to by\n            # services.\n            name: string\n            # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n            # to \"TCP\".\n            protocol: \"TCP\"\n          # This is the Kubernetes pod IP Address of the current rank\n          # which we need to populate in the operator. NOTE: Internal\n          # Attribute\n          podIP: string\n          # Optionally, specify a public URL for each worker HTTP server\n          # that clients should use to connect for multi-head\n          # operations. NOTE: If specified for any ranks, a public URL\n          # must be specified for all ranks.\n          publicURL: \"https://:8082/gpudb-{{.Rank}}\"\n          # Define the rank number of this rank.\n          rank: 1\n        # SetMonitorPort - Set monitor ZMQ publisher server port (-1 to\n        # disable), uses the 'head_ip_address' interface.\n        setMonitorPort: 9002\n        # SetMonitorProxyPort - Set monitor ZMQ publisher internal proxy\n        # server port (\"-1\" to disable), uses the 'head_ip_address'\n        # interface. IMPORTANT:  Disabling this port effectively\n        # prevents worker nodes from publishing set monitor\n        # notifications when multi-head ingest is enabled\n        # (see 'enable_worker_http_servers').\n        setMonitorProxyPort: 9003\n        # SetMonitorQueueSize - Set monitor queue size\n        setMonitorQueueSize: 1000\n        # TriggerPort - Trigger ZMQ publisher server port (\"-1\" to\n        # disable), uses the 'head_ip_address' interface.\n        triggerPort: -1\n        # UseHTTPS - Set to \"true\" to use HTTPS; if \"true\"\n        # then 'https_key_file' and 'https_cert_file' must be provided\n        useHttps: false\n      # PersistenceConfig\n      persistence:\n        # Removed in 7.2\n        IndexDBFlushImmediate: true\n        # DataLoadingSchema Startup data-loading scheme\n        buildMaterializedViewsOnStart: \"on_demand\"\n        # DataLoadingSchema Startup data-loading scheme\n        buildPKIndexOnStart: \"on_demand\"\n        # Target maximum data size for any one column in a chunk\n        # (512 MB) (0 = disable). chunk_max_memory = 8192000000\n        chunkColumnMaxMemory: 8192000000\n        # Target maximum total data size for all columns in a chunk\n        # (8 GB) (0 = disable).\n        chunkMaxMemory: 512000000\n        # Number of records per chunk (\"0\" disables chunking)\n        chunkSize: 8000000\n        # Determines whether to execute kernels on host (CPU) or device\n        # (GPU). Possible values are: \n        #  * \"default\"   : engine decides * \"host\"      : execute only\n        #     host * \"device\"    : execute only device * *&lt;rows&gt;*    :\n        #     execute on the host if chunked column contains the given\n        #     number of *rows* or fewer; otherwise, execute on device.\n        executionMode: \"device\"\n        # Removed in 7.2\n        fsyncIndexDBImmediate: true\n        # Removed in 7.2\n        fsyncInodesImmediate: true\n        # Removed in 7.2\n        fsyncMetadataImmediate: true\n        # Removed in 7.2\n        fsyncOnInterval: true\n        # Maximum number of open files for IndexedDb object file store.\n        # Removed in 7.2\n        indexDBMaxOpenFiles: \n        # Table of contents size for IndexedDb object file store.\n        # Removed in 7.2\n        indexDBTOCSize: \n        # Disable detection of sparse file support and use the full file\n        # length which may be an over-estimate of the actual usage in\n        # the persist tier. Removed in 7.2\n        indexDBTierByFileLength: false\n        # Startup data-loading scheme: \n        #  * \"always\"    : load all the data into memory before\n        #     accepting requests * \"lazy\"      : load the necessary\n        #     data to start, but load the remainder\n        #     lazily * \"on_demand\" : only load data as requests use it\n        loadVectorsOnStart: \"on_demand\"\n        # Removed in 7.2\n        metadataFlushImmediate: true\n        # Specify a base directory to store persistence data files.\n        persistDirectory: \"/opt/gpudb/persist\"\n        # Whether to use synchronous persistence file writing.\n        # If \"false\", files will be written asynchronously. Removed in\n        # 7.2\n        persistSync: true\n        # Duration in seconds, for which persistence files will be\n        # force-synced if out of sync, once per minute. NOTE: Files are\n        # always opportunistically saved; this simply enforces a\n        # maximum time a file can be out of date. Set to a very high\n        # number to disable.\n        persistSyncTime: 5\n        # The maximum number of bytes in the shadow aggregate cache\n        shadowAggSize: 100000000\n        # Whether to enable chunk caching\n        shadowCubeEnabled: true\n        # The maximum number of bytes in the shadow filter cache\n        shadowFilterSize: 100000000\n        # Base directory to store hashed strings.\n        smsDirectory: \"${gaia.persist_directory}\"\n        # Maximum number of open files (per-TOM) for the SMS\n        # (string) store.\n        smsMaxOpenFiles: 128\n        # Synchronous compression: compress vectors on set compression.\n        synchronousCompression: false\n        # Directory for GPUdb to use to store temporary files. Must be a\n        # fully qualified path, have at least 100Mb of free space, and\n        # execute permission.\n        tempDirectory: \"${gaia.persist_directory}/tmp\"\n        # Base directory to store the text search index.\n        textIndexDirectory: \"${gaia.persist_directory}\"\n        # Enable checksum protection on the wal entries. New in 7.2\n        walChecksum: true\n        # Specifies how frequently wal entries are written with\n        # background sync. New in 7.2\n        walFlushFrequency: 60\n        # Maximum size of each wal segment file New in 7.2\n        walMaxSegmentSize: 500000000\n        # Approximate number of segment files to split the wal across. A\n        # minimum of two is required. The size of the wal is limited by\n        # segment_count * max_segment_size. (per rank and per tom) Set\n        # to 0 to remove a size limit on the wal itself, but still be\n        # bounded by rank tier limits. Set to -1 to have the database\n        # decide automatically per table. New in 7.2\n        walSegmentCount: \n        # Sync mode to use when persisting wal entries to disk: \n        #  \"none\"       : Disable the wal \"background\" : Wal entries are\n        #   periodically written instead of immediately after each\n        #   operation \"flush\"      : Protects entries in the event of a\n        #   database crash \"fsync\"      : Protects entries in the event\n        #   of an OS crash New in 7.2\n        walSyncPolicy: \"flush\"\n        # If true, any table that is found to be corrupt after replaying\n        # its wal at startup will automatically be truncated so that\n        # the table becomes operable. If false, the user will be\n        # responsible for resolving the issue via sql REPAIR TABLE or\n        # similar. New in 7.2\n        walTruncateCorruptTablesOnStart: true\n      # PostgresProxy\n      postgresProxy:\n        # Postgres Proxy Server Start an Postgres(TCP) server as a proxy\n        # to handle postgres wire protocol messages.\n        enablePostgresProxy: false\n        # Set idle connection  timeout in seconds. (default: \"1200\")\n        idleConnectionTimeout: 1200\n        # Set max number of queued server connections. (default: \"1\")\n        maxQueuedConnections: 1\n        # Set max number of server threads to spawn. (default: \"64\")\n        maxThreads: 64\n        # Set min number of server threads to spawn. (default: \"2\")\n        minThreads: 2\n        # TCP port that the postgres  proxy server will listen on\n        # if 'enable_postgres_proxy' is \"true\".\n        port:\n          # Number of port to expose on the pod's IP address. This must\n          # be a valid port number, 0 &lt; x &lt; 65536.\n          containerPort: 1\n          # What host IP to bind the external port to.\n          hostIP: string\n          # Number of port to expose on the host. If specified, this\n          # must be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork\n          # is specified, this must match ContainerPort. Most\n          # containers do not need this.\n          hostPort: 1\n          # If specified, this must be an IANA_SVC_NAME and unique\n          # within the pod. Each named port in a pod must have a unique\n          # name. Name for the port that can be referred to by\n          # services.\n          name: string\n          # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n          # to \"TCP\".\n          protocol: \"TCP\"\n        # Set to \"true\" to use SSL; if \"true\" then 'ssl_key_file'\n        # and 'ssl_cert_file' must be provided\n        ssl: false sslCertFile: \"\"\n        # Files containing the SSL private Key and the SSL certificate\n        # for. If required, a self signed certificate (expires after 10\n        # years) can be generated via the command: openssl req -newkey\n        # rsa:2048 -new -nodes -x509 \\ -days 3650 -keyout key.pem -out\n        # cert.pem\n        sslKeyFile: \"\"\n      # ProcessesConfig\n      processes:\n        # Set the maximum number of threads per tom for table\n        # initialization on startup\n        initTablesNumThreadsPerTom: 8\n        # Set the number of parallel calculation threads to use for data\n        # processing use -1 to use the max number of threads\n        # (not recommended)\n        kernelOmpThreads: 3\n        # The maximum number of web server threads to spawn\n        maxHttpThreads: 512\n        # Set the maximum number of threads (both workers and masters)\n        # to be passed to TBB on initialization.  Generally\n        # speaking, 'max_tbb_threads_per_rank' - \"1\" TBB workers will\n        # be created.  Use \"-1\" for no limit.\n        maxTbbThreadsPerRank: \"-1\"\n        # The minimum number of web server threads to spawn\n        minHttpThreads: 8\n        # Set the number of parallel jobs to create for multi-child set\n        # calulations use \"-1\" to use the max number of threads\n        # (not recommended)\n        smOmpThreads: 2\n        # Maximum number of simultaneous threads allocated to a given\n        # request, on each rank. Note that thread allocation may also\n        # be limted by resource group limits and/or system load.\n        subtaskConcurrentyLimit: \"-1\"\n        # Set the number of TaskCalculators per TOM, GPU data\n        # processors.\n        tcsPerTom: \"-1\"\n        # Set the number of TOMs (data container shards) per rank\n        tomsPerRank: 1\n        # Set the number of TaskProcessors per TOM, CPU data\n        # processors.\n        tpsPerTom: \"-1\"\n      # ProcsConfig\n      procs:\n        # Directory where proc files are stored at runtime. Must be a\n        # fully qualified path with execute permission. If not\n        # specified, 'temp_directory' will be used.\n        directory:\n          # PersistentVolumeClaim is a user's request for and claim to a\n          # persistent volume\n          persistVolumeClaim:\n            # APIVersion defines the versioned schema of this\n            # representation of an object. Servers should convert\n            # recognized schemas to the latest internal value, and may\n            # reject unrecognized values. More info:\n            # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n            apiVersion: app.kinetica.com/v1\n            # Kind is a string value representing the REST resource this\n            # object represents. Servers may infer this from the\n            # endpoint the client submits requests to. Cannot be\n            # updated. In CamelCase. More info:\n            # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n            kind: KineticaCluster\n            # Standard object's metadata. More info:\n            # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n            metadata: {}\n            # spec defines the desired characteristics of a volume\n            # requested by a pod author. More info:\n            # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n            spec:\n              # accessModes contains the desired access modes the volume\n              # should have. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n              accessModes: [\"string\"]\n              # dataSource field can be used to specify either: * An\n              # existing VolumeSnapshot object\n              # (snapshot.storage.k8s.io/VolumeSnapshot) * An existing\n              # PVC (PersistentVolumeClaim) If the provisioner or an\n              # external controller can support the specified data\n              # source, it will create a new volume based on the\n              # contents of the specified data source. When the\n              # AnyVolumeDataSource feature gate is enabled, dataSource\n              # contents will be copied to dataSourceRef, and\n              # dataSourceRef contents will be copied to dataSource\n              # when dataSourceRef.namespace is not specified. If the\n              # namespace is specified, then dataSourceRef will not be\n              # copied to dataSource.\n              dataSource:\n                # APIGroup is the group for the resource being\n                # referenced. If APIGroup is not specified, the\n                # specified Kind must be in the core API group. For any\n                # other third-party types, APIGroup is required.\n                apiGroup: string\n                # Kind is the type of resource being referenced\n                kind: KineticaCluster\n                # Name is the name of resource being referenced\n                name: string\n              # dataSourceRef specifies the object from which to\n              # populate the volume with data, if a non-empty volume is\n              # desired. This may be any object from a non-empty API\n              # group (non core object) or a PersistentVolumeClaim\n              # object. When this field is specified, volume binding\n              # will only succeed if the type of the specified object\n              # matches some installed volume populator or dynamic\n              # provisioner. This field will replace the functionality\n              # of the dataSource field and as such if both fields are\n              # non-empty, they must have the same value. For backwards\n              # compatibility, when namespace isn't specified in\n              # dataSourceRef, both fields (dataSource and\n              # dataSourceRef) will be set to the same value\n              # automatically if one of them is empty and the other is\n              # non-empty. When namespace is specified in\n              # dataSourceRef, dataSource isn't set to the same value\n              # and must be empty. There are three important\n              # differences between dataSource and dataSourceRef: *\n              # While dataSource only allows two specific types of\n              # objects, dataSourceRef allows any non-core object, as\n              # well as PersistentVolumeClaim objects. * While\n              # dataSource ignores disallowed values (dropping them),\n              # dataSourceRef preserves all values, and generates an\n              # error if a disallowed value is specified. * While\n              # dataSource only allows local objects, dataSourceRef\n              # allows objects in any namespaces. (Beta) Using this\n              # field requires the AnyVolumeDataSource feature gate to\n              # be enabled. (Alpha) Using the namespace field of\n              # dataSourceRef requires the\n              # CrossNamespaceVolumeDataSource feature gate to be\n              # enabled.\n              dataSourceRef:\n                # APIGroup is the group for the resource being\n                # referenced. If APIGroup is not specified, the\n                # specified Kind must be in the core API group. For any\n                # other third-party types, APIGroup is required.\n                apiGroup: string\n                # Kind is the type of resource being referenced\n                kind: KineticaCluster\n                # Name is the name of resource being referenced\n                name: string\n                # Namespace is the namespace of resource being\n                # referenced Note that when a namespace is specified, a\n                # gateway.networking.k8s.io/ReferenceGrant object is\n                # required in the referent namespace to allow that\n                # namespace's owner to accept the reference. See the\n                # ReferenceGrant documentation for details.(Alpha) This\n                # field requires the CrossNamespaceVolumeDataSource\n                # feature gate to be enabled.\n                namespace: string\n              # resources represents the minimum resources the volume\n              # should have. If RecoverVolumeExpansionFailure feature\n              # is enabled users are allowed to specify resource\n              # requirements that are lower than previous value but\n              # must still be higher than capacity recorded in the\n              # status field of the claim. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n              resources:\n                # Claims lists the names of resources, defined in\n                # spec.resourceClaims, that are used by this container.\n                # This is an alpha field and requires enabling the\n                # DynamicResourceAllocation feature gate. This field is\n                # immutable. It can only be set for containers.\n                claims:\n                - name: string\n                # Limits describes the maximum amount of compute\n                # resources allowed. More info:\n                # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                limits: {}\n                # Requests describes the minimum amount of compute\n                # resources required. If Requests is omitted for a\n                # container, it defaults to Limits if that is\n                # explicitly specified, otherwise to an\n                # implementation-defined value. Requests cannot exceed\n                # Limits. More info:\n                # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                requests: {}\n              # selector is a label query over volumes to consider for\n              # binding.\n              selector:\n                # matchExpressions is a list of label selector\n                # requirements. The requirements are ANDed.\n                matchExpressions:\n                - key: string\n                  # operator represents a key's relationship to a set of\n                  # values. Valid operators are In, NotIn, Exists and\n                  # DoesNotExist.\n                  operator: string\n                  # values is an array of string values. If the operator\n                  # is In or NotIn, the values array must be non-empty.\n                  # If the operator is Exists or DoesNotExist, the\n                  # values array must be empty. This array is replaced\n                  # during a strategic merge patch.\n                  values: [\"string\"]\n                # matchLabels is a map of {key,value} pairs. A single\n                # {key,value} in the matchLabels map is equivalent to\n                # an element of matchExpressions, whose key field\n                # is \"key\", the operator is \"In\", and the values array\n                # contains only \"value\". The requirements are ANDed.\n                matchLabels: {}\n              # storageClassName is the name of the StorageClass\n              # required by the claim. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n              storageClassName: string\n              # volumeMode defines what type of volume is required by\n              # the claim. Value of Filesystem is implied when not\n              # included in claim spec.\n              volumeMode: string\n              # volumeName is the binding reference to the\n              # PersistentVolume backing this claim.\n              volumeName: string\n            # status represents the current information/status of a\n            # persistent volume claim. Read-only. More info:\n            # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n            status:\n              # accessModes contains the actual access modes the volume\n              # backing the PVC has. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n              accessModes: [\"string\"]\n              # allocatedResources is the storage resource within\n              # AllocatedResources tracks the capacity allocated to a\n              # PVC. It may be larger than the actual capacity when a\n              # volume expansion operation is requested. For storage\n              # quota, the larger value from allocatedResources and\n              # PVC.spec.resources is used. If allocatedResources is\n              # not set, PVC.spec.resources alone is used for quota\n              # calculation. If a volume expansion capacity request is\n              # lowered, allocatedResources is only lowered if there\n              # are no expansion operations in progress and if the\n              # actual volume capacity is equal or lower than the\n              # requested capacity. This is an alpha field and requires\n              # enabling RecoverVolumeExpansionFailure feature.\n              allocatedResources: {}\n              # capacity represents the actual resources of the\n              # underlying volume.\n              capacity: {}\n              # conditions is the current Condition of persistent volume\n              # claim. If underlying persistent volume is being resized\n              # then the Condition will be set to 'ResizeStarted'.\n              conditions:\n              - lastProbeTime: string\n                # lastTransitionTime is the time the condition\n                # transitioned from one status to another.\n                lastTransitionTime: string\n                # message is the human-readable message indicating\n                # details about last transition.\n                message: string\n                # reason is a unique, this should be a short, machine\n                # understandable string that gives the reason for\n                # condition's last transition. If it\n                # reports \"ResizeStarted\" that means the underlying\n                # persistent volume is being resized.\n                reason: string status: string\n                # PersistentVolumeClaimConditionType is a valid value of\n                # PersistentVolumeClaimCondition.Type\n                type: string\n              # phase represents the current phase of\n              # PersistentVolumeClaim.\n              phase: string\n              # resizeStatus stores status of resize operation.\n              # ResizeStatus is not set by default but when expansion\n              # is complete resizeStatus is set to empty string by\n              # resize controller or kubelet. This is an alpha field\n              # and requires enabling RecoverVolumeExpansionFailure\n              # feature.\n              resizeStatus: string\n          # VolumeMount describes a mounting of a Volume within a\n          # container.\n          volumeMount:\n            # Path within the container at which the volume should be\n            # mounted.  Must not contain ':'.\n            mountPath: string\n            # mountPropagation determines how mounts are propagated from\n            # the host to container and the other way around. When not\n            # set, MountPropagationNone is used. This field is beta in\n            # 1.10.\n            mountPropagation: string\n            # This must match the Name of a Volume.\n            name: string\n            # Mounted read-only if true, read-write otherwise (false or\n            # unspecified). Defaults to false.\n            readOnly: true\n            # Path within the volume from which the container's volume\n            # should be mounted. Defaults to \"\" (volume's root).\n            subPath: string\n            # Expanded path within the volume from which the container's\n            # volume should be mounted. Behaves similarly to SubPath\n            # but environment variable references $(VAR_NAME) are\n            # expanded using the container's environment. Defaults\n            # to \"\" (volume's root). SubPathExpr and SubPath are\n            # mutually exclusive.\n            subPathExpr: string\n        # Enable procs (UDFs)\n        enable: true\n      # SecurityConfig\n      security:\n        # Automatically create accounts for externally-authenticated\n        # users. If 'enable_external_authentication' is \"false\", this\n        # setting has no effect. Note that accounts are not\n        # automatically deleted if users are removed from the external\n        # authentication provider and will be orphaned.\n        autoCreateExternalUsers: false\n        # Automatically add roles passed in via the \"KINETICA_ROLES\"\n        # HTTP header to externally-authenticated users. Specified\n        # roles that do not exist are ignored.\n        # If 'enable_external_authentication' is \"false\", this setting\n        # has no effect. IMPORTANT: DO NOT ENABLE unless the\n        # authentication proxy is configured to block \"KINETICA_ROLES\"\n        # HTTP headers passed in from clients.\n        autoGrantExternalRoles: false\n        # Comma-separated list of roles to revoke from\n        # externally-authenticated users prior to granting roles passed\n        # in via the \"KINETICA_ROLES\" HTTP header, or \"*\" to revoke all\n        # roles. Preceding a role name with an \"!\" overrides the\n        # revocation (e.g. \"*,!foo\" revokes all roles except \"foo\").\n        # Leave blank to disable. If\n        # either 'enable_external_authentication'\n        # or 'auto_grant_external_roles' is \"false\", this setting has\n        # no effect.\n        autoRevokeExternalRoles: false\n        # Enable authorization checks.  When disabled, all requests will\n        # be treated as the administrative user.\n        enableAuthorization: true\n        # Enable external (LDAP, Kerberos, etc.) authentication. User\n        # IDs of externally-authenticated users must be passed in via\n        # the \"REMOTE_USER\" HTTP header from the authentication proxy.\n        # May be used in conjuntion with the 'enable_httpd_proxy'\n        # setting above for an integrated external authentication\n        # solution. IMPORTANT: DO NOT ENABLE unless external access to\n        # GPUdb ports has been blocked via firewall AND the\n        # authentication proxy is configured to block \"REMOTE_USER\"\n        # HTTP headers passed in from clients. server.\n        enableExternalAuthentication: true\n        # ExternalSecurity\n        externalSecurity:\n          # Ranger\n          ranger:\n            # AuthorizerAddress - The network URI for the\n            # ranger_authorizer to start. The URI can be either TCP or\n            # IPC. TCP address is used to indicate the remote\n            # ranger_authorizer which may run at other hosts. The IPC\n            # address is for a local ranger_authorizer. Example\n            # addresses for remote or TCP servers: tcp://127.0.0.1:9293\n            # tcp://HOST_IP:9293 Example address for local IPC servers:\n            # ipc:///tmp/gpudb-ranger-0\n            # security.external.ranger_authorizer.address = ipc://$\n            # {gaia.temp_directory}/gpudb-ranger-0\n            authorizerAddress: \"ipc://$\n            {gaia.temp_directory}/gpudb-ranger-0\"\n            # Remote debugger port used for the ranger_authorizer.\n            # Setting the port to \"0\" disables remote debugging. NOTE:\n            # Recommended port to use is \"5005\"\n            # security.external.ranger_authorizer.remote_debug_port =\n            # 0\n            authorizerRemoteDebugPort: 0\n            # AuthorizerTimeout - Ranger Authorizer timeout in seconds\n            # security.external.ranger_authorizer.timeout = 120\n            authorizerTimeout: 120\n            # CacheMinutes- Maximum minutes to hold on to data from\n            # Ranger security.external.ranger.cache_minutes = 60\n            cacheMinutes: 60\n            # Name of the service created on the Ranger Server to manage\n            # this Kinetica instance\n            # security.external.ranger.service_name = kinetica\n            name: \"kinetica\"\n            # ExtURL - URL of Ranger REST API.  E.g.,\n            # https://localhost:6080/ Leave blank for no Ranger Server\n            # security.external.ranger.url =\n            url: string\n        # The minimum allowable password length.\n        minPasswordLength: 4\n        # Require all users to be authenticated.  Disable this to allow\n        # users to access the database as the 'unauthenticated' user.\n        # Useful for situations where the public needs to access the\n        # data.\n        requireAuthentication: true\n        # UnifiedSecurityNamespace - Use a single namespace for internal\n        # and external user IDs and role names. If false, external user\n        # IDs must be prefixed with \"@\" to differentiate them from\n        # internal user IDs and role names (except in the \"REMOTE_USER\"\n        # HTTP header, where the \"@\" is omitted).\n        # unified_security_namespace = true\n        unifiedSecurityNamespace: true\n      # SQLConfig\n      sql:\n        # SQLPlannerAddress is not included as it is just default\n        # always\n        address: \"ipc://${gaia.temp_directory}/gpudb-query-engine-0\"\n        # Enable the cost-based optimizer\n        costBasedOptimization: false\n        # Enable distributed joins\n        distributedJoins: true\n        # Enable distributed operations\n        distributedOperations: true\n        # Enable Query Planner\n        enablePlanner: true\n        # Perform joins between only 2 tables at a time; default is all\n        # tables involved in the operation at once\n        forceBinaryJoins: false\n        # Perform unions/intersections/exceptions between only 2 tables\n        # at a time; default is all tables involved in the operation at\n        # once\n        forceBinarySetOps: false\n        # Max parallel steps\n        maxParallelSteps: 4\n        # Max allowed view nesting levels. Valid range(1-64)\n        maxViewNestingLevels: 16\n        # TTL of the paging results table\n        pagingTableTTL: 20\n        # Enable parallel query evaluation\n        parallelExecution: true\n        # The maximum number of entries in the SQL plan cache.  The\n        # default is \"4000\" entries, but the configurable range\n        # is \"1\" - \"1000000\".  Plan caching will be disabled if the\n        # value is set outside of that range.\n        planCacheSize: 4000\n        # The maximum memory for the query planner to use in Megabytes.\n        plannerMaxMemory: 4096\n        # The maximum stack size for the query planner threads to use in\n        # Megabytes.\n        plannerMaxStack: 6\n        # Query planner timeout in seconds\n        plannerTimeout: 120\n        # Max Query planner threads\n        plannerWorkers: 16\n        # Remote debugger port used for the query planner. Setting the\n        # port to \"0\" disables remote debugging. NOTE:  Recommended\n        # port to use is \"5005\"\n        remoteDebugPort: 5005\n        # TTL of the query cache results table\n        resultsCacheTTL: 60\n        # Enable query results caching\n        resultsCaching: true\n        # Enable rule-based query rewrites\n        ruleBasedOptimization: true\n      # SQLEngineConfig\n      sqlEngine:\n        # Enable the cost-based optimizer\n        costBasedOptimization: false\n        # Name of default collection for user tables\n        defaultSchema: \"\"\n        # Enable distributed joins\n        distributedJoins: true\n        # Enable distributed operations\n        distributedOperations: true\n        # Perform joins between only 2 tables at a time; default is all\n        # tables involved in the operation at once\n        forceBinaryJoins: false\n        # Perform unions/intersections/exceptions between only 2 tables\n        # at a time; default is all tables involved in the operation at\n        # once\n        forceBinarySetOps: false\n        # Max parallel steps\n        maxParallelSteps: 4\n        # Max allowed view nesting levels. Valid range(1-64)\n        maxViewNestingLevels: 16\n        # TTL of the paging results table\n        pagingTableTTL: 20\n        # Enable parallel query evaluation\n        parallelExecution: true\n        # The maximum number of entries in the SQL plan cache.  The\n        # default is \"4000\" entries, but the configurable range\n        # is \"1\" - \"1000000\".  Plan caching will be disabled if the\n        # value is set outside of that range.\n        planCacheSize: 4000\n        # PlannerConfig\n        planner:\n          # Enable Query Planner\n          enablePlanner: true\n          # The maximum memory for the query planner to use in\n          # Megabytes.\n          maxMemory: 4096\n          # The maximum stack size for the query planner threads to use\n          # in Megabytes.\n          maxStack: 6\n          # The network URI for the query planner to start. The URI can\n          # be either TCP or IPC. TCP address is used to indicate the\n          # remote query planner which may run at other hosts. The IPC\n          # address is for a local query planner. Example for remote or\n          # TCP servers: \n          #  #  sql.planner.address  = tcp://127.0.0.1:9293 #\n          #     sql.planner.address  = tcp://HOST_IP:9293 Example for\n          #     local IPC servers: \n          #  #  sql.planner.address  = ipc:///tmp/gpudb-query-engine-0\n          plannerAddress: \"ipc:///tmp/gpudb-query-engine-0\"\n          # Remote debugger port used for the query planner. Setting the\n          # port to \"0\" disables remote debugging. NOTE:  Recommended\n          # port to use is \"5005\"\n          remoteDebugPort: 0\n          # Query planner timeout in seconds\n          timeout: 120\n          # Max Query planner threads\n          workers: 16 results:\n          # TTL of the query cache results table\n          cacheTTL: 60\n          # Enable query results caching\n          caching: true\n        # Enable rule-based query rewrites\n        ruleBasedOptimization: true\n        # Name of collection that will be used to store result tables\n        # generated as part of query execution\n        tempCollection: \"__SQL_TEMP\"\n      # StatisticsConfig\n      statistics:\n        # system_metadata.stats_aggr_rowcount = 10000\n        aggrRowCount: 10000\n        # system_metadata.stats_aggr_time = 1\n        aggrTime: 1\n        # Run a statistics server to collect information about Kinetica\n        # and the machines it runs on.\n        enable: true\n        # Statistics server IP address (run on head node) default port\n        # is \"2003\"\n        ipAddress: \"${gaia.host0.address}\"\n        # Statistics server namespace - should be a machine identifier\n        namespace: \"gpudb\" port: 2003\n        # System metadata catalog settings\n        # system_metadata.stats_retention_days = 21\n        retentionDays: 21\n      # TextSearchConfig\n      textSearch:\n        # Enable text search capability within the database.\n        enableTextSearch: false\n        # Number of text indices to start for each rank\n        textIndicesPerTom: 2\n        # Searcher refresh intervals - specifies the maximum delay\n        # (in seconds) between writing to the text search index and\n        # being able to search for the value just written.  A value\n        # of \"0\" insures that writes to the index are immediately\n        # available to be searched.  A more nominal value of \"100\"\n        # should improve ingest speed at the cost of some delay in\n        # being able to text search newly added values.\n        textSearcherRefreshInterval: 20\n        # Use the production capable external text server instead of a\n        # lightweight internal server which should only be used for\n        # light testing. Note: The internal text server is deprecated\n        # and may be removed in future versions.\n        useExternalTextServer: true tieredStorage:\n        # Cold Storage Tiers can be used to extend the storage capacity\n        # of the Persist Tier. Assign a tier strategy with cold storage\n        # to objects that will be infrequently accessed since they will\n        # be moved as needed from the Persist Tier. The Cold Storage\n        # Tier is typically a much larger capacity physical disk or a\n        # cloud-based storage system which may not be as performant as\n        # the Persist Tier storage. A default storage limit and\n        # eviction thresholds can be set across all ranks for a given\n        # Cold Storage Tier, while one or more ranks within a Cold\n        # Storage Tier may be configured to override those defaults.\n        # NOTE: If an object needs to be pulled out of cold storage\n        # during a query, it may need to use the local persist\n        # directory as a temporary swap space. This may trigger an\n        # eviction of other persisted items to cold storage due to low\n        # disk space condition defined by the watermark settings for\n        # the Persist Tier.\n        coldStorageTier:\n          # ColdStorageAzure\n          coldStorageAzure:\n            # 'base_path'             : A base path based on the\n            #  provider type for this tier.\n            basePath: string clientID: string clientSecret: string\n            # 'connection_timeout'    : Timeout in seconds for\n            #  connecting to this storage provider.\n            connectionTimeout: \"30\"\n            # 'base_path'             : A base path based on the\n            #  provider type for this tier. BasePath string\n            #  `json:\"basePath,omitempty\"`\n            containerName: \"/gpudb/cold_storage\"\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\" sasToken:\n            string storageAccountKey: string storageAccountName: string\n            tenantID: string useManagedCredentials: false\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string\n            # 'wait_timeout'          : Timeout in seconds for reading\n            #  from or writing to this storage provider.\n            waitTimeout: \"90\"\n          # ColdStorageDisk\n          coldStorageDisk:\n            # 'base_path'             : A base path based on the\n            #  provider type for this tier.\n            basePath: string\n            # 'connection_timeout'    : Timeout in seconds for\n            #  connecting to this storage provider.\n            connectionTimeout: \"30\"\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\"\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string\n            # 'wait_timeout'          : Timeout in seconds for reading\n            #  from or writing to this storage provider.\n            waitTimeout: \"90\"\n          # ColdStorageGCS - Google Cloud Storage-specific *parameter*\n          # names: \n          #  * BucketName =        'gcs_bucket_name' *\n          #    ProjectID - 'gcs_project_id'\n          #    (optional) * AccountID - 'gcs_service_account_id'\n          #    (optional) *\n          #    AccountPrivateKey - 'gcs_service_account_private_key'\n          #    (optional) * AccountKeys -  'gcs_service_account_keys'\n          #    (optional) NOTE: If\n          #    the 'gcs_service_account_id', 'gcs_service_account_private_key'\n          #    and/or 'gcs_service_account_keys' values are not\n          #    specified, the Google Clould Client Libraries will\n          #    attempt to find and use service account credentials from\n          #    the GOOGLE_APPLICATION_CREDENTIALS environment\n          #    variable.\n          coldStorageGCS: accountID: string accountKeys: string\n          accountPrivateKey: string\n            # 'base_path'             : A base path based on the\n            #  provider type for this tier.\n            basePath: string bucketName: string\n            # 'connection_timeout'    : Timeout in seconds for\n            #  connecting to this storage provider.\n            connectionTimeout: \"30\"\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" projectID: string\n            provisioner: \"docker.io/hostpath\"\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string\n            # 'wait_timeout'          : Timeout in seconds for reading\n            #  from or writing to this storage provider.\n            waitTimeout: \"90\"\n          # ColdStorageHDFS\n          coldStorageHDFS:\n            # ColdStorageDisk\n            default:\n              # 'base_path'             : A base path based on the\n              #  provider type for this tier.\n              basePath: string\n              # 'connection_timeout'    : Timeout in seconds for\n              #  connecting to this storage provider.\n              connectionTimeout: \"30\"\n              # * 'high_watermark' : Percentage used eviction threshold.\n              #    Once usage exceeds this value, evictions from this\n              #    tier will be scheduled in the background and\n              #    continue until the 'low_watermark' percentage usage\n              #    is reached.  Default is \"90\", signifying a 90%\n              #    memory usage threshold.\n              highWatermark: 90\n              # * 'limit'          : The maximum (bytes) per rank that\n              #    can be allocated across all resource groups.\n              limit: \"1Gi\"\n              # * 'low_watermark'  : Percentage used recovery threshold.\n              #    Once usage exceeds the 'high_watermark', evictions\n              #    will continue until usage falls below this recovery\n              #    threshold. Default is \"80\", signifying an 80% usage\n              #    threshold.\n              lowWatermark: 80 name: string\n              # A base directory to use as a space for this tier.\n              path: \"default\" provisioner: \"docker.io/hostpath\"\n              # Kubernetes Persistent Volume Claim for this disk tier.\n              volumeClaim:\n                # APIVersion defines the versioned schema of this\n                # representation of an object. Servers should convert\n                # recognized schemas to the latest internal value, and\n                # may reject unrecognized values. More info:\n                # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n                apiVersion: app.kinetica.com/v1\n                # Kind is a string value representing the REST resource\n                # this object represents. Servers may infer this from\n                # the endpoint the client submits requests to. Cannot\n                # be updated. In CamelCase. More info:\n                # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n                kind: KineticaCluster\n                # Standard object's metadata. More info:\n                # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n                metadata: {}\n                # spec defines the desired characteristics of a volume\n                # requested by a pod author. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n                spec:\n                  # accessModes contains the desired access modes the\n                  # volume should have. More info:\n                  # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                  accessModes: [\"string\"]\n                  # dataSource field can be used to specify either: * An\n                  # existing VolumeSnapshot object\n                  # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                  # existing PVC (PersistentVolumeClaim) If the\n                  # provisioner or an external controller can support\n                  # the specified data source, it will create a new\n                  # volume based on the contents of the specified data\n                  # source. When the AnyVolumeDataSource feature gate\n                  # is enabled, dataSource contents will be copied to\n                  # dataSourceRef, and dataSourceRef contents will be\n                  # copied to dataSource when dataSourceRef.namespace\n                  # is not specified. If the namespace is specified,\n                  # then dataSourceRef will not be copied to\n                  # dataSource.\n                  dataSource:\n                    # APIGroup is the group for the resource being\n                    # referenced. If APIGroup is not specified, the\n                    # specified Kind must be in the core API group. For\n                    # any other third-party types, APIGroup is\n                    # required.\n                    apiGroup: string\n                    # Kind is the type of resource being referenced\n                    kind: KineticaCluster\n                    # Name is the name of resource being referenced\n                    name: string\n                  # dataSourceRef specifies the object from which to\n                  # populate the volume with data, if a non-empty\n                  # volume is desired. This may be any object from a\n                  # non-empty API group (non core object) or a\n                  # PersistentVolumeClaim object. When this field is\n                  # specified, volume binding will only succeed if the\n                  # type of the specified object matches some installed\n                  # volume populator or dynamic provisioner. This field\n                  # will replace the functionality of the dataSource\n                  # field and as such if both fields are non-empty,\n                  # they must have the same value. For backwards\n                  # compatibility, when namespace isn't specified in\n                  # dataSourceRef, both fields (dataSource and\n                  # dataSourceRef) will be set to the same value\n                  # automatically if one of them is empty and the other\n                  # is non-empty. When namespace is specified in\n                  # dataSourceRef, dataSource isn't set to the same\n                  # value and must be empty. There are three important\n                  # differences between dataSource and dataSourceRef: *\n                  # While dataSource only allows two specific types of\n                  # objects, dataSourceRef allows any non-core object,\n                  # as well as PersistentVolumeClaim objects. * While\n                  # dataSource ignores disallowed values\n                  # (dropping them), dataSourceRef preserves all\n                  # values, and generates an error if a disallowed\n                  # value is specified. * While dataSource only allows\n                  # local objects, dataSourceRef allows objects in any\n                  # namespaces. (Beta) Using this field requires the\n                  # AnyVolumeDataSource feature gate to be enabled.\n                  # (Alpha) Using the namespace field of dataSourceRef\n                  # requires the CrossNamespaceVolumeDataSource feature\n                  # gate to be enabled.\n                  dataSourceRef:\n                    # APIGroup is the group for the resource being\n                    # referenced. If APIGroup is not specified, the\n                    # specified Kind must be in the core API group. For\n                    # any other third-party types, APIGroup is\n                    # required.\n                    apiGroup: string\n                    # Kind is the type of resource being referenced\n                    kind: KineticaCluster\n                    # Name is the name of resource being referenced\n                    name: string\n                    # Namespace is the namespace of resource being\n                    # referenced Note that when a namespace is\n                    # specified, a\n                    # gateway.networking.k8s.io/ReferenceGrant object\n                    # is required in the referent namespace to allow\n                    # that namespace's owner to accept the reference.\n                    # See the ReferenceGrant documentation for\n                    # details. (Alpha) This field requires the\n                    # CrossNamespaceVolumeDataSource feature gate to be\n                    # enabled.\n                    namespace: string\n                  # resources represents the minimum resources the\n                  # volume should have. If\n                  # RecoverVolumeExpansionFailure feature is enabled\n                  # users are allowed to specify resource requirements\n                  # that are lower than previous value but must still\n                  # be higher than capacity recorded in the status\n                  # field of the claim. More info:\n                  # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                  resources:\n                    # Claims lists the names of resources, defined in\n                    # spec.resourceClaims, that are used by this\n                    # container. This is an alpha field and requires\n                    # enabling the DynamicResourceAllocation feature\n                    # gate. This field is immutable. It can only be set\n                    # for containers.\n                    claims:\n                    - name: string\n                    # Limits describes the maximum amount of compute\n                    # resources allowed. More info:\n                    # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                    limits: {}\n                    # Requests describes the minimum amount of compute\n                    # resources required. If Requests is omitted for a\n                    # container, it defaults to Limits if that is\n                    # explicitly specified, otherwise to an\n                    # implementation-defined value. Requests cannot\n                    # exceed Limits. More info:\n                    # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                    requests: {}\n                  # selector is a label query over volumes to consider\n                  # for binding.\n                  selector:\n                    # matchExpressions is a list of label selector\n                    # requirements. The requirements are ANDed.\n                    matchExpressions:\n                    - key: string\n                      # operator represents a key's relationship to a\n                      # set of values. Valid operators are In, NotIn,\n                      # Exists and DoesNotExist.\n                      operator: string\n                      # values is an array of string values. If the\n                      # operator is In or NotIn, the values array must\n                      # be non-empty. If the operator is Exists or\n                      # DoesNotExist, the values array must be empty.\n                      # This array is replaced during a strategic merge\n                      # patch.\n                      values: [\"string\"]\n                    # matchLabels is a map of {key,value} pairs. A\n                    # single {key,value} in the matchLabels map is\n                    # equivalent to an element of matchExpressions,\n                    # whose key field is \"key\", the operator is \"In\",\n                    # and the values array contains only \"value\". The\n                    # requirements are ANDed.\n                    matchLabels: {}\n                  # storageClassName is the name of the StorageClass\n                  # required by the claim. More info:\n                  # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                  storageClassName: string\n                  # volumeMode defines what type of volume is required\n                  # by the claim. Value of Filesystem is implied when\n                  # not included in claim spec.\n                  volumeMode: string\n                  # volumeName is the binding reference to the\n                  # PersistentVolume backing this claim.\n                  volumeName: string\n                # status represents the current information/status of a\n                # persistent volume claim. Read-only. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n                status:\n                  # accessModes contains the actual access modes the\n                  # volume backing the PVC has. More info:\n                  # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                  accessModes: [\"string\"]\n                  # allocatedResources is the storage resource within\n                  # AllocatedResources tracks the capacity allocated to\n                  # a PVC. It may be larger than the actual capacity\n                  # when a volume expansion operation is requested. For\n                  # storage quota, the larger value from\n                  # allocatedResources and PVC.spec.resources is used.\n                  # If allocatedResources is not set,\n                  # PVC.spec.resources alone is used for quota\n                  # calculation. If a volume expansion capacity request\n                  # is lowered, allocatedResources is only lowered if\n                  # there are no expansion operations in progress and\n                  # if the actual volume capacity is equal or lower\n                  # than the requested capacity. This is an alpha field\n                  # and requires enabling RecoverVolumeExpansionFailure\n                  # feature.\n                  allocatedResources: {}\n                  # capacity represents the actual resources of the\n                  # underlying volume.\n                  capacity: {}\n                  # conditions is the current Condition of persistent\n                  # volume claim. If underlying persistent volume is\n                  # being resized then the Condition will be set\n                  # to 'ResizeStarted'.\n                  conditions:\n                  - lastProbeTime: string\n                    # lastTransitionTime is the time the condition\n                    # transitioned from one status to another.\n                    lastTransitionTime: string\n                    # message is the human-readable message indicating\n                    # details about last transition.\n                    message: string\n                    # reason is a unique, this should be a short,\n                    # machine understandable string that gives the\n                    # reason for condition's last transition. If it\n                    # reports \"ResizeStarted\" that means the underlying\n                    # persistent volume is being resized.\n                    reason: string status: string\n                    # PersistentVolumeClaimConditionType is a valid\n                    # value of PersistentVolumeClaimCondition.Type\n                    type: string\n                  # phase represents the current phase of\n                  # PersistentVolumeClaim.\n                  phase: string\n                  # resizeStatus stores status of resize operation.\n                  # ResizeStatus is not set by default but when\n                  # expansion is complete resizeStatus is set to empty\n                  # string by resize controller or kubelet. This is an\n                  # alpha field and requires enabling\n                  # RecoverVolumeExpansionFailure feature.\n                  resizeStatus: string\n              # 'wait_timeout'          : Timeout in seconds for reading\n              #  from or writing to this storage provider.\n              waitTimeout: \"90\"\n            # 'hdfs_kerberos_keytab'  : The Kerberos keytab file used to\n            #  authenticate the \"gpudb\" Kerberos\n            kerberosKeytab: string\n            # 'hdfs_principal'        : The effective principal name to\n            #  use when connecting to the hadoop cluster.\n            principal: string\n            # 'hdfs_uri'              : The host IP address &amp; port for\n            #  the hadoop distributed file system. For example:\n            #  hdfs://localhost:8020\n            uri: string\n            # 'hdfs_use_kerberos'     : Set to \"true\" to enable Kerberos\n            #  authentication to an HDFS storage server. The\n            #  credentials of the principal are in the file specified\n            #  by the 'hdfs_kerberos_keytab' parameter. Note that\n            #  Kerberos's *kinit* command will be run when the database\n            #  is started.\n            useKerberos: true\n          # ColdStorageS3\n          coldStorageS3: awsAccessKeyId: string awsRoleARN: string\n          awsSecretAccessKey: string\n            # 'base_path'             : A base path based on the\n            #  provider type for this tier.\n            basePath: string bucketName: string\n            # 'connection_timeout'    : Timeout in seconds for\n            #  connecting to this storage provider.\n            connectionTimeout: \"30\" encryptionCustomerAlgorithm: string\n            encryptionCustomerKey: string\n            # EncryptionType - This is optional and valid values are\n            # sse-s3 (Encryption key is managed by Amazon S3) and\n            # sse-kms (Encryption key is managed by AWS Key Management\n            # Service (kms)).\n            encryptionType: string\n            # Endpoint - s3_endpoint\n            endpoint: string\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # KMSKeyID - This is optional and must be specified when\n            # encryption type is sse-kms.\n            kmsKeyID: string\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\" region:\n            string useManagedCredentials: true\n            # UseVirtualAddressing - 's3_use_virtual_addressing'  : If\n            # true (default), S3 endpoints will be constructed using\n            # the 'virtual' style which includes the bucket name as\n            # part of the hostname. Set to false to use the 'path'\n            # style which treats the bucket name as if it is a path in\n            # the URI.\n            useVirtualAddressing: true\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string\n            # 'wait_timeout'          : Timeout in seconds for reading\n            #  from or writing to this storage provider.\n            waitTimeout: \"90\"\n          # ColdStorageType The storage provider type. Currently,\n          # supports \"none\", \"disk\"(local/network storage), \"hdfs\"\n          # (Hadoop distributed filesystem), \"s3\" (Amazon S3\n          # bucket), \"azure_blob\" (Microsoft Azure Blob Storage)\n          # and \"gcs\" (Google GCS Bucket).\n          coldStorageType: \"none\" name: string\n        # The DiskCacheTier are used as temporary swap space for data\n        # that doesn't fit in RAM or VRAM. The disk should be as fast\n        # or faster than the Persist Tier storage since this tier is\n        # used as an intermediary cache between the RAM and Persist\n        # Tiers.\n        diskCacheTier:\n          # DiskTierStorageLimit\n          default:\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\"\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string defaultStorePersistentObjects: true\n                ranks:\n          - highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\"\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string\n        # GlobalTier Parameters\n        globalTier:\n          # Co-locates all disks to a single disk i.e. persist, cache,\n          # UDF will be on a single PVC.\n          colocateDisks: true\n          # Timeout in seconds for subsequent requests to wait on a\n          # locked resource\n          concurrentWaitTimeout: 120\n          # EncryptDataAtRest - Enable disk encryption of data at rest\n          encryptDataAtRest: true\n        # The PersistTier are used as temporary swap space for data that\n        # doesn't fit in RAM or VRAM. The disk should be as fast or\n        # faster than the Persist Tier storage since this tier is used\n        # as an intermediary cache between the RAM and Persist Tiers.\n        persistTier:\n          # DiskTierStorageLimit\n          default:\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\"\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string defaultStorePersistentObjects: true\n                ranks:\n          - highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n            # A base directory to use as a space for this tier.\n            path: \"default\" provisioner: \"docker.io/hostpath\"\n            # Kubernetes Persistent Volume Claim for this disk tier.\n            volumeClaim:\n              # APIVersion defines the versioned schema of this\n              # representation of an object. Servers should convert\n              # recognized schemas to the latest internal value, and\n              # may reject unrecognized values. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources\n              apiVersion: app.kinetica.com/v1\n              # Kind is a string value representing the REST resource\n              # this object represents. Servers may infer this from the\n              # endpoint the client submits requests to. Cannot be\n              # updated. In CamelCase. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\n              kind: KineticaCluster\n              # Standard object's metadata. More info:\n              # https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata\n              metadata: {}\n              # spec defines the desired characteristics of a volume\n              # requested by a pod author. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              spec:\n                # accessModes contains the desired access modes the\n                # volume should have. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # dataSource field can be used to specify either: * An\n                # existing VolumeSnapshot object\n                # (snapshot.storage.k8s.io/VolumeSnapshot) * An\n                # existing PVC (PersistentVolumeClaim) If the\n                # provisioner or an external controller can support the\n                # specified data source, it will create a new volume\n                # based on the contents of the specified data source.\n                # When the AnyVolumeDataSource feature gate is enabled,\n                # dataSource contents will be copied to dataSourceRef,\n                # and dataSourceRef contents will be copied to\n                # dataSource when dataSourceRef.namespace is not\n                # specified. If the namespace is specified, then\n                # dataSourceRef will not be copied to dataSource.\n                dataSource:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                # dataSourceRef specifies the object from which to\n                # populate the volume with data, if a non-empty volume\n                # is desired. This may be any object from a non-empty\n                # API group (non core object) or a\n                # PersistentVolumeClaim object. When this field is\n                # specified, volume binding will only succeed if the\n                # type of the specified object matches some installed\n                # volume populator or dynamic provisioner. This field\n                # will replace the functionality of the dataSource\n                # field and as such if both fields are non-empty, they\n                # must have the same value. For backwards\n                # compatibility, when namespace isn't specified in\n                # dataSourceRef, both fields (dataSource and\n                # dataSourceRef) will be set to the same value\n                # automatically if one of them is empty and the other\n                # is non-empty. When namespace is specified in\n                # dataSourceRef, dataSource isn't set to the same value\n                # and must be empty. There are three important\n                # differences between dataSource and dataSourceRef: *\n                # While dataSource only allows two specific types of\n                # objects, dataSourceRef allows any non-core object, as\n                # well as PersistentVolumeClaim objects. * While\n                # dataSource ignores disallowed values (dropping them),\n                # dataSourceRef preserves all values, and generates an\n                # error if a disallowed value is specified. * While\n                # dataSource only allows local objects, dataSourceRef\n                # allows objects in any namespaces. (Beta) Using this\n                # field requires the AnyVolumeDataSource feature gate\n                # to be enabled. (Alpha) Using the namespace field of\n                # dataSourceRef requires the\n                # CrossNamespaceVolumeDataSource feature gate to be\n                # enabled.\n                dataSourceRef:\n                  # APIGroup is the group for the resource being\n                  # referenced. If APIGroup is not specified, the\n                  # specified Kind must be in the core API group. For\n                  # any other third-party types, APIGroup is required.\n                  apiGroup: string\n                  # Kind is the type of resource being referenced\n                  kind: KineticaCluster\n                  # Name is the name of resource being referenced\n                  name: string\n                  # Namespace is the namespace of resource being\n                  # referenced Note that when a namespace is specified,\n                  # a gateway.networking.k8s.io/ReferenceGrant object\n                  # is required in the referent namespace to allow that\n                  # namespace's owner to accept the reference. See the\n                  # ReferenceGrant documentation for details.\n                  # (Alpha) This field requires the\n                  # CrossNamespaceVolumeDataSource feature gate to be\n                  # enabled.\n                  namespace: string\n                # resources represents the minimum resources the volume\n                # should have. If RecoverVolumeExpansionFailure feature\n                # is enabled users are allowed to specify resource\n                # requirements that are lower than previous value but\n                # must still be higher than capacity recorded in the\n                # status field of the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources\n                resources:\n                  # Claims lists the names of resources, defined in\n                  # spec.resourceClaims, that are used by this\n                  # container. This is an alpha field and requires\n                  # enabling the DynamicResourceAllocation feature\n                  # gate. This field is immutable. It can only be set\n                  # for containers.\n                  claims:\n                  - name: string\n                  # Limits describes the maximum amount of compute\n                  # resources allowed. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  limits: {}\n                  # Requests describes the minimum amount of compute\n                  # resources required. If Requests is omitted for a\n                  # container, it defaults to Limits if that is\n                  # explicitly specified, otherwise to an\n                  # implementation-defined value. Requests cannot\n                  # exceed Limits. More info:\n                  # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n                  requests: {}\n                # selector is a label query over volumes to consider for\n                # binding.\n                selector:\n                  # matchExpressions is a list of label selector\n                  # requirements. The requirements are ANDed.\n                  matchExpressions:\n                  - key: string\n                    # operator represents a key's relationship to a set\n                    # of values. Valid operators are In, NotIn, Exists\n                    # and DoesNotExist.\n                    operator: string\n                    # values is an array of string values. If the\n                    # operator is In or NotIn, the values array must be\n                    # non-empty. If the operator is Exists or\n                    # DoesNotExist, the values array must be empty.\n                    # This array is replaced during a strategic merge\n                    # patch.\n                    values: [\"string\"]\n                  # matchLabels is a map of {key,value} pairs. A single\n                  # {key,value} in the matchLabels map is equivalent to\n                  # an element of matchExpressions, whose key field\n                  # is \"key\", the operator is \"In\", and the values\n                  # array contains only \"value\". The requirements are\n                  # ANDed.\n                  matchLabels: {}\n                # storageClassName is the name of the StorageClass\n                # required by the claim. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1\n                storageClassName: string\n                # volumeMode defines what type of volume is required by\n                # the claim. Value of Filesystem is implied when not\n                # included in claim spec.\n                volumeMode: string\n                # volumeName is the binding reference to the\n                # PersistentVolume backing this claim.\n                volumeName: string\n              # status represents the current information/status of a\n              # persistent volume claim. Read-only. More info:\n              # https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims\n              status:\n                # accessModes contains the actual access modes the\n                # volume backing the PVC has. More info:\n                # https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1\n                accessModes: [\"string\"]\n                # allocatedResources is the storage resource within\n                # AllocatedResources tracks the capacity allocated to a\n                # PVC. It may be larger than the actual capacity when a\n                # volume expansion operation is requested. For storage\n                # quota, the larger value from allocatedResources and\n                # PVC.spec.resources is used. If allocatedResources is\n                # not set, PVC.spec.resources alone is used for quota\n                # calculation. If a volume expansion capacity request\n                # is lowered, allocatedResources is only lowered if\n                # there are no expansion operations in progress and if\n                # the actual volume capacity is equal or lower than the\n                # requested capacity. This is an alpha field and\n                # requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                allocatedResources: {}\n                # capacity represents the actual resources of the\n                # underlying volume.\n                capacity: {}\n                # conditions is the current Condition of persistent\n                # volume claim. If underlying persistent volume is\n                # being resized then the Condition will be set\n                # to 'ResizeStarted'.\n                conditions:\n                - lastProbeTime: string\n                  # lastTransitionTime is the time the condition\n                  # transitioned from one status to another.\n                  lastTransitionTime: string\n                  # message is the human-readable message indicating\n                  # details about last transition.\n                  message: string\n                  # reason is a unique, this should be a short, machine\n                  # understandable string that gives the reason for\n                  # condition's last transition. If it\n                  # reports \"ResizeStarted\" that means the underlying\n                  # persistent volume is being resized.\n                  reason: string status: string\n                  # PersistentVolumeClaimConditionType is a valid value\n                  # of PersistentVolumeClaimCondition.Type\n                  type: string\n                # phase represents the current phase of\n                # PersistentVolumeClaim.\n                phase: string\n                # resizeStatus stores status of resize operation.\n                # ResizeStatus is not set by default but when expansion\n                # is complete resizeStatus is set to empty string by\n                # resize controller or kubelet. This is an alpha field\n                # and requires enabling RecoverVolumeExpansionFailure\n                # feature.\n                resizeStatus: string\n        # The RAMTier represents the RAM available for data storage per\n        # rank. The RAM Tier is NOT used for small, non-data objects or\n        # variables that are allocated and deallocated for program flow\n        # control or used to store metadata or other similar\n        # information; these continue to use either the stack or the\n        # regular runtime memory allocator. This tier should be sized\n        # on each machine such that there is sufficient RAM left over\n        # to handle this overhead, as well as the needs of other\n        # processes running on the same machine.\n        ramTier:\n          # The RAM Tier represents the RAM available for data storage\n          # per rank. The RAM Tier is NOT used for small, non-data\n          # objects or variables that are allocated and deallocated for\n          # program flow control or used to store metadata or other\n          # similar information; these continue to use either the stack\n          # or the regular runtime memory allocator. This tier should\n          # be sized on each machine such that there is sufficient RAM\n          # left over to handle this overhead, as well as the needs of\n          # other processes running on the same machine. A default\n          # memory limit and eviction thresholds can be set across all\n          # ranks, while one or more ranks may be configured to\n          # override those defaults. The general format for RAM\n          # settings: \n          #  # tier.ram.[default|rank&lt;#&gt;].&lt;parameter&gt; Valid *parameter*\n          #    names include: \n          #  * 'limit'          : The maximum RAM (bytes) per rank that\n          #     can be allocated across all resource groups.  Default\n          #     is -1, signifying no limit and ignore watermark\n          #     settings. * 'high_watermark' : RAM percentage used\n          #     eviction threshold.  Once memory usage exceeds this\n          #     value, evictions from this tier will be scheduled in\n          #     the background and continue until the 'low_watermark'\n          #     percentage usage is reached.  Default is \"90\",\n          #     signifying a 90% memory usage\n          #     threshold. * 'low_watermark'  : RAM percentage used\n          #     recovery threshold.  Once memory usage exceeds\n          #     the 'high_watermark', evictions will continue until\n          #     memory usage falls below this recovery threshold.\n          #     Default is \"50\", signifying a 50% memory usage\n          #     threshold.\n          default:\n            # * 'high_watermark' : Percentage used eviction threshold.\n            #    Once usage exceeds this value, evictions from this\n            #    tier will be scheduled in the background and continue\n            #    until the 'low_watermark' percentage usage is reached.\n            #    Default is \"90\", signifying a 90% memory usage\n            #    threshold.\n            highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string\n          # The maximum RAM (bytes) for processing data at rank 0.\n          # Overrides the overall default RAM tier\n          # limit. #tier.ram.rank0.limit = -1\n          ranks:\n          - highWatermark: 90\n            # * 'limit'          : The maximum (bytes) per rank that can\n            #    be allocated across all resource groups.\n            limit: \"1Gi\"\n            # * 'low_watermark'  : Percentage used recovery threshold.\n            #    Once usage exceeds the 'high_watermark', evictions\n            #    will continue until usage falls below this recovery\n            #    threshold. Default is \"80\", signifying an 80% usage\n            #    threshold.\n            lowWatermark: 80 name: string tieredStrategy:\n        # Default strategy to apply to tables or columns when one was\n        # not provided during table creation. This strategy is also\n        # applied to a resource group that does not specify one at time\n        # of creation. The strategy is formed by chaining together the\n        # tier types and their respective eviction priorities. Any\n        # given tier may appear no more than once in the chain and the\n        # priority must be in range \"1\" - \"10\", where \"1\" is the lowest\n        # priority (first to be evicted) and \"9\" is the highest\n        # priority (last to be evicted).  A priority of \"10\" indicates\n        # that an object is unevictable. Each tier's priority is in\n        # relation to the priority of other objects in the same tier;\n        # e.g., \"RAM 9, DISK2 1\" indicates that an object will be the\n        # highest evictable priority among objects in the RAM Tier\n        # (last evicted), but that it will be the lowest priority among\n        # objects in the Disk Tier named 'disk2' (first evicted).  Note\n        # that since an object can only have one Disk Tier instance in\n        # its strategy, the corresponding priority will only apply in\n        # relation to other objects in Disk Tier instance 'disk2'. See\n        # the Tiered Storage section for more information about tier\n        # type names. Format: &lt;tier1&gt; &lt;priority&gt;, &lt;tier2&gt; &lt;priority&gt;,\n        # &lt;tier3&gt; &lt;priority&gt;, ... Examples using a Disk Tier\n        # named 'disk2' and a Cold Storage Tier 'cold0': vram 3, ram 5,\n        # disk2 3, persist 10 vram 3, ram 5, disk2 3, persist 6, cold0\n        # 10 tier_strategy.default = VRAM 1, RAM 5, PERSIST 5\n        default: \"VRAM 1, RAM 5, PERSIST 5\"\n        # Predicate evaluation interval (in minutes) -  indicates the\n        # interval at which the tier strategy predicates are evaluated\n        predicateEvaluationInterval: 60 video:\n        # System default TTL for videos. Time-to-live (TTL) is the\n        # number of minutes before a video will expire and be removed,\n        # or -1 to disable. video_default_ttl = -1\n        defaultTTL: \"-1\"\n        # The maximum number of videos to allow on the system. Set to 0\n        # to disable video rendering.  Set to -1 to allow an unlimited\n        # number of videos. video_max_count = -1\n        maxCount: \"-1\"\n        # Directory where video files should be temporarily stored while\n        # rendering. Only accessed by rank 0. video_temp_directory = $\n        # {gaia.temp_directory}/gpudb-temp-videos\n        tmpDir: \"${gaia.temp_directory}/gpudb-temp-videos\"\n      # VisualizationConfig\n      visualization:\n        # Enable level-of-details rendering for fast interaction with\n        # large WKT polygon data.  Only available for the OpenGL\n        # renderer (when 'enable_opengl_renderer' is \"true\").\n        enableLODRendering: true\n        # If \"true\", enable hardware-accelerated OpenGL renderer;\n        # if \"false\", use the software-based Cairo renderer.\n        enableOpenGLRenderer: true\n        # If \"true\", enable Vector Tile Service (VTS) to support\n        # client-side visualization of geospatial data. Enabling this\n        # option increases memory usage on ingestion.\n        enableVectorTileService: false\n        # Longitude and latitude ranges of geospatial data for which\n        # level-of-details representations are being generated. The\n        # parameter order is: &lt;min_longitude&gt; &lt;min_latitude&gt;\n        # &lt;max_longitude&gt; &lt;max_latitude&gt; The default values span over\n        # the world, but the level-of-details rendering becomes more\n        # efficient when the precise extent of geospatial data is\n        # specified. kubebuilder:default:={ -180, -90, 180, 90 }\n        lodDataExtent: [integer]\n        # The extent to which shape data are pre-processed for\n        # level-of-details rendering during data insert/load or\n        # processed on-the-fly in rendering time. This is a trade-off\n        # between speed and memory. The higher the value, the faster\n        # level-of-details rendering is, but the more memory is used\n        # for storing processed shape data. The maximum level is \"10\"\n        # (most shape data are pre-processed) and the minimum level\n        # is \"0\".\n        lodPreProcessingLevel: 5\n        # The number of subregions in horizontal and vertical geospatial\n        # data extent. The default values of \"12 6\" divide the world\n        # into subregions of 30 degree (lon.) x 30 degree (lat.)\n        lodSubRegionNum: [12,6]\n        # A base image resolution (width and height in pixels) at which\n        # a subregion would be rendered in a global view spanning over\n        # the whole dataset. Based on this resolution level-of-details\n        # representations are generated for the polygons located in the\n        # subregion.\n        lodSubRegionResolution: [512,512]\n        # Maximum heatmap size (in pixels) that can be generated. This\n        # reserves 'max_heatmap_size' ^ 2 * 8 bytes of GPU memory\n        # at **rank0**\n        maxHeatmapSize: 3072\n        # The maximum number of levels in the level-of-details\n        # rendering. As the number increases, level-of-details\n        # rendering becomes effective at higher zoom levels, but it may\n        # increase memory usage for storing level-of-details\n        # representations.\n        maxLODLevel: 8\n        # Input geometries are pre-processed upon ingestion for faster\n        # vector tile generation. This parameter determines the\n        # zoomlevel at which the vector tile pre-processing stops. A\n        # vector tile request for a higher zoomlevel than this\n        # parameter takes additional time because the vector tile needs\n        # to be generated on the fly.\n        maxVectorTileZoomLevel: 8\n        # Input geometries are pre-processed upon ingestion for faster\n        # vector tile generation. This parameter determines the\n        # zoomlevel from which the vector tile pre-processing starts. A\n        # vector tile request for a lower zoomlevel than this parameter\n        # takes additional time because the vector tile needs to be\n        # generated on the fly.\n        minVectorTileZoomLevel: 1\n        # The number of samples to use for antialiasing. Higher numbers\n        # will improve image quality but require more GPU memory to\n        # store the samples on worker ranks.  This affects only the\n        # OpenGL renderer. Value may be \"0\", \"4\", \"8\" or \"16\". When \"0\"\n        # antialiasing is disabled. The default value is \"0\".\n        openGLAntialiasingLevel: 1\n        # Threshold number of points (per-TOM) at which point rendering\n        # switches to fast mode.\n        pointRenderThreshold: 100000\n        # Single-precision coordinates are used for usual rendering\n        # processes, but depending on the precision of geometry data\n        # and use case, double precision processing may be required at\n        # a high zoomlevel. Double precision rendering processes are\n        # used from the zoomlevel specified by this parameter, which is\n        # corresponding to a zoomlevel of TMS or Google map service.\n        renderingPrecisionThreshold: 30\n        # The image width/height (in pixels) of svg symbols cached in\n        # the OpenGL symbol cache.\n        symbolResolution: 100\n        # The width/height (in pixels) of an OpenGL texture which caches\n        # symbol images for OpenGL rendering.\n        symbolTextureSize: 4000\n        # Threshold for the number of points (per-TOM) after which\n        # symbology rendering falls back to regular rendering\n        symbologyRenderThreshold: 10000\n        # The name of map tiler used for Vector Tile Service. \"google\"\n        # and \"tms\" map tilers are supported currently. This parameter\n        # should be matched with the map tiler of clients' vector tile\n        # renderer.\n        vectorTileMapTiler: \"google\" workbench:\n        # Start the Workbench app on the head host when host manager is\n        # started. enable_workbench = false\n        enable: false\n        # # HTTP server port for Workbench if enabled. workbench_port =\n        #   8000\n        port:\n          # Number of port to expose on the pod's IP address. This must\n          # be a valid port number, 0 &lt; x &lt; 65536.\n          containerPort: 1\n          # What host IP to bind the external port to.\n          hostIP: string\n          # Number of port to expose on the host. If specified, this\n          # must be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork\n          # is specified, this must match ContainerPort. Most\n          # containers do not need this.\n          hostPort: 1\n          # If specified, this must be an IANA_SVC_NAME and unique\n          # within the pod. Each named port in a pod must have a unique\n          # name. Name for the port that can be referred to by\n          # services.\n          name: string\n          # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n          # to \"TCP\".\n          protocol: \"TCP\"\n    # The fully qualified URL used on the Ingress records for any\n    # exposed services. Completed buy yth Operator. DO NOT POPULATE\n    # MANUALLY.\n    fqdn: \"\"\n    # The name of the parent HA Ring this cluster belongs to.\n    haRingName: \"default\"\n    # Whether to enable the separate node 'pools' for \"infra\", \"compute\"\n    # pod scheduling. Default: false\n    hasPools: true\n    # The port the HostManager will be running in each pod in the\n    # cluster. Default: 9300, TCP\n    hostManagerPort:\n      # Number of port to expose on the pod's IP address. This must be a\n      # valid port number, 0 &lt; x &lt; 65536.\n      containerPort: 1\n      # What host IP to bind the external port to.\n      hostIP: string\n      # Number of port to expose on the host. If specified, this must be\n      # a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n      # specified, this must match ContainerPort. Most containers do\n      # not need this.\n      hostPort: 1\n      # If specified, this must be an IANA_SVC_NAME and unique within\n      # the pod. Each named port in a pod must have a unique name. Name\n      # for the port that can be referred to by services.\n      name: string\n      # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n      # to \"TCP\".\n      protocol: \"TCP\"\n    # Set the name of the container image to use.\n    image: \"kinetica/kinetica-k8s-intel:v7.1.6.0\"\n    # Set the policy for pulling container images.\n    imagePullPolicy: \"IfNotPresent\"\n    # ImagePullSecrets is an optional list of references to secrets in\n    # the same gpudb-namespace to use for pulling any of the images\n    # used by this PodSpec. If specified, these secrets will be passed\n    # to individual puller implementations for them to use. For\n    # example, in the case of docker, only DockerConfig type secrets\n    # are honored.\n    imagePullSecrets:\n    - name: string\n    # Labels - Pod labels to be applied to the Statefulset DB pods.\n    labels: {}\n    # The Ingress Endpoint that GAdmin will be running on.\n    letsEncrypt:\n      # Enable LetsEncrypt for Certificate generation.\n      enabled: false\n      # LetsEncryptEnvironment\n      environment: \"staging\"\n    # Set the Kinetica DB License.\n    license: string\n    # Periodic probe of container liveness. Container will be restarted\n    # if the probe fails. Cannot be updated. More info:\n    # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n    livenessProbe:\n      # Minimum consecutive failures for the probe to be considered\n      # failed after having succeeded. Defaults to 3. Minimum value is\n      # 1.\n      failureThreshold: 3\n      # Number of seconds after the container has started before\n      # liveness probes are initiated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      initialDelaySeconds: 10\n      # How often (in seconds) to perform the probe. Default to 10\n      # seconds. Minimum value is 1.\n      periodSeconds: 10\n    # LoggerConfig Kinetica DB Logger Configuration Object Configure the\n    # LOG4CPLUS logger for the DB. Field takes a string containing the\n    # full configuration. If not specified a template file is used\n    # during DB configuration generation.\n    loggerConfig: configString: string\n    # Metrics - DB Metrics scrape &amp; forward configuration for\n    # `fluent-bit`.\n    metricsRegistryRepositoryTag:\n      # Set the policy for pulling container images.\n      imagePullPolicy: \"IfNotPresent\"\n      # ImagePullSecrets is an optional list of references to secrets in\n      # the same gpudb-namespace to use for pulling any of the images\n      # used by this PodSpec. If specified, these secrets will be\n      # passed to individual puller implementations for them to use.\n      # For example, in the case of docker, only DockerConfig type\n      # secrets are honored.\n      imagePullSecrets:\n      - name: string\n      # The image registry &amp; optional port containing the repository.\n      registry: \"docker.io\"\n      # The image repository path.\n      repository: \"kineticadevcloud/\"\n      # SemVer = Semantic Version for the Tag SemVer semver.Version\n      semVer: string\n      # The image sha.\n      sha: \"\"\n      # The image tag.\n      tag: \"v7.1.5.2\"\n    # Metrics - `fluent-bit` container requests/limits.\n    metricsResources:\n      # Claims lists the names of resources, defined in\n      # spec.resourceClaims, that are used by this container. This is\n      # an alpha field and requires enabling the\n      # DynamicResourceAllocation feature gate. This field is\n      # immutable. It can only be set for containers.\n      claims:\n      - name: string\n      # Limits describes the maximum amount of compute resources\n      # allowed. More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      limits: {}\n      # Requests describes the minimum amount of compute resources\n      # required. If Requests is omitted for a container, it defaults\n      # to Limits if that is explicitly specified, otherwise to an\n      # implementation-defined value. Requests cannot exceed Limits.\n      # More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      requests: {}\n    # NodeSelector - NodeSelector to be applied to the DB Pods\n    nodeSelector: {}\n    # Do not use internal Operator field only.\n    originalReplicas: 1\n    # podManagementPolicy controls how pods are created during initial\n    # scale up, when replacing pods on nodes, or when scaling down. The\n    # default policy is `OrderedReady`, where pods are created in\n    # increasing order (pod-0, then pod-1, etc) and the controller will\n    # wait until each pod is ready before continuing. When scaling\n    # down, the pods are removed in the opposite order. The alternative\n    # policy is `Parallel` which will create pods in parallel to match\n    # the desired scale without waiting, and on scale down will delete\n    # all pods at once.\n    podManagementPolicy: \"Parallel\"\n    # Number of ranks per node as a uint16 i.e. 1-65535 ranks per node.\n    # Default: 1\n    ranksPerNode: 1\n    # Periodic probe of container service readiness. Container will be\n    # removed from service endpoints if the probe fails. Cannot be\n    # updated. More info:\n    # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n    readinessProbe:\n      # Minimum consecutive failures for the probe to be considered\n      # failed after having succeeded. Defaults to 3. Minimum value is\n      # 1.\n      failureThreshold: 3\n      # Number of seconds after the container has started before\n      # liveness probes are initiated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      initialDelaySeconds: 10\n      # How often (in seconds) to perform the probe. Default to 10\n      # seconds. Minimum value is 1.\n      periodSeconds: 10\n    # The number of DB ranks i.e. replicas that the cluster will spin\n    # up. Default: 3\n    replicas: 3\n    # Limit the resources a DB Pod can consume.\n    resources:\n      # Claims lists the names of resources, defined in\n      # spec.resourceClaims, that are used by this container. This is\n      # an alpha field and requires enabling the\n      # DynamicResourceAllocation feature gate. This field is\n      # immutable. It can only be set for containers.\n      claims:\n      - name: string\n      # Limits describes the maximum amount of compute resources\n      # allowed. More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      limits: {}\n      # Requests describes the minimum amount of compute resources\n      # required. If Requests is omitted for a container, it defaults\n      # to Limits if that is explicitly specified, otherwise to an\n      # implementation-defined value. Requests cannot exceed Limits.\n      # More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      requests: {}\n    # SecurityContext holds security configuration that will be applied\n    # to a container. Some fields are present in both SecurityContext\n    # and PodSecurityContext.  When both are set, the values in\n    # SecurityContext take precedence.\n    securityContext:\n      # AllowPrivilegeEscalation controls whether a process can gain\n      # more privileges than its parent process. This bool directly\n      # controls if the no_new_privs flag will be set on the container\n      # process. AllowPrivilegeEscalation is true always when the\n      # container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note\n      # that this field cannot be set when spec.os.name is windows.\n      allowPrivilegeEscalation: true\n      # The capabilities to add/drop when running containers. Defaults\n      # to the default set of capabilities granted by the container\n      # runtime. Note that this field cannot be set when spec.os.name\n      # is windows.\n      capabilities:\n        # Added capabilities\n        add: [\"string\"]\n        # Removed capabilities\n        drop: [\"string\"]\n      # Run container in privileged mode. Processes in privileged\n      # containers are essentially equivalent to root on the host.\n      # Defaults to false. Note that this field cannot be set when\n      # spec.os.name is windows.\n      privileged: true\n      # procMount denotes the type of proc mount to use for the\n      # containers. The default is DefaultProcMount which uses the\n      # container runtime defaults for readonly paths and masked paths.\n      # This requires the ProcMountType feature flag to be enabled.\n      # Note that this field cannot be set when spec.os.name is\n      # windows.\n      procMount: string\n      # Whether this container has a read-only root filesystem. Default\n      # is false. Note that this field cannot be set when spec.os.name\n      # is windows.\n      readOnlyRootFilesystem: true\n      # The GID to run the entrypoint of the container process. Uses\n      # runtime default if unset. May also be set in\n      # PodSecurityContext.  If set in both SecurityContext and\n      # PodSecurityContext, the value specified in SecurityContext\n      # takes precedence. Note that this field cannot be set when\n      # spec.os.name is windows.\n      runAsGroup: 1\n      # Indicates that the container must run as a non-root user. If\n      # true, the Kubelet will validate the image at runtime to ensure\n      # that it does not run as UID 0 (root) and fail to start the\n      # container if it does. If unset or false, no such validation\n      # will be performed. May also be set in PodSecurityContext.  If\n      # set in both SecurityContext and PodSecurityContext, the value\n      # specified in SecurityContext takes precedence.\n      runAsNonRoot: true\n      # The UID to run the entrypoint of the container process. Defaults\n      # to user specified in image metadata if unspecified. May also be\n      # set in PodSecurityContext.  If set in both SecurityContext and\n      # PodSecurityContext, the value specified in SecurityContext\n      # takes precedence. Note that this field cannot be set when\n      # spec.os.name is windows.\n      runAsUser: 1\n      # The SELinux context to be applied to the container. If\n      # unspecified, the container runtime will allocate a random\n      # SELinux context for each container.  May also be set in\n      # PodSecurityContext.  If set in both SecurityContext and\n      # PodSecurityContext, the value specified in SecurityContext\n      # takes precedence. Note that this field cannot be set when\n      # spec.os.name is windows.\n      seLinuxOptions:\n        # Level is SELinux level label that applies to the container.\n        level: string\n        # Role is a SELinux role label that applies to the container.\n        role: string\n        # Type is a SELinux type label that applies to the container.\n        type: string\n        # User is a SELinux user label that applies to the container.\n        user: string\n      # The seccomp options to use by this container. If seccomp options\n      # are provided at both the pod &amp; container level, the container\n      # options override the pod options. Note that this field cannot\n      # be set when spec.os.name is windows.\n      seccompProfile:\n        # localhostProfile indicates a profile defined in a file on the\n        # node should be used. The profile must be preconfigured on the\n        # node to work. Must be a descending path, relative to the\n        # kubelet's configured seccomp profile location. Must only be\n        # set if type is \"Localhost\".\n        localhostProfile: string\n        # type indicates which kind of seccomp profile will be applied.\n        # Valid options are: Localhost - a profile defined in a file on\n        # the node should be used. RuntimeDefault - the container\n        # runtime default profile should be used. Unconfined - no\n        # profile should be applied.\n        type: string\n      # The Windows specific settings applied to all containers. If\n      # unspecified, the options from the PodSecurityContext will be\n      # used. If set in both SecurityContext and PodSecurityContext,\n      # the value specified in SecurityContext takes precedence. Note\n      # that this field cannot be set when spec.os.name is linux.\n      windowsOptions:\n        # GMSACredentialSpec is where the GMSA admission webhook\n        # (https://github.com/kubernetes-sigs/windows-gmsa) inlines the\n        # contents of the GMSA credential spec named by the\n        # GMSACredentialSpecName field.\n        gmsaCredentialSpec: string\n        # GMSACredentialSpecName is the name of the GMSA credential spec\n        # to use.\n        gmsaCredentialSpecName: string\n        # HostProcess determines if a container should be run as a 'Host\n        # Process' container. This field is alpha-level and will only\n        # be honored by components that enable the\n        # WindowsHostProcessContainers feature flag. Setting this field\n        # without the feature flag will result in errors when\n        # validating the Pod. All of a Pod's containers must have the\n        # same effective HostProcess value (it is not allowed to have a\n        # mix of HostProcess containers and non-HostProcess\n        # containers).  In addition, if HostProcess is true then\n        # HostNetwork must also be set to true.\n        hostProcess: true\n        # The UserName in Windows to run the entrypoint of the container\n        # process. Defaults to the user specified in image metadata if\n        # unspecified. May also be set in PodSecurityContext. If set in\n        # both SecurityContext and PodSecurityContext, the value\n        # specified in SecurityContext takes precedence.\n        runAsUserName: string\n    # StartupProbe indicates that the Pod has successfully initialized.\n    # If specified, no other probes are executed until this completes\n    # successfully. If this probe fails, the Pod will be restarted,\n    # just as if the livenessProbe failed. This can be used to provide\n    # different probe parameters at the beginning of a Pod's lifecycle,\n    # when it might take a long time to load data or warm a cache, than\n    # during steady-state operation. This cannot be updated. This is an\n    # alpha feature enabled by the StartupProbe feature flag. More\n    # info:\n    # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n    startupProbe:\n      # Minimum consecutive failures for the probe to be considered\n      # failed after having succeeded. Defaults to 3. Minimum value is\n      # 1.\n      failureThreshold: 3\n      # Number of seconds after the container has started before\n      # liveness probes are initiated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      initialDelaySeconds: 10\n      # How often (in seconds) to perform the probe. Default to 10\n      # seconds. Minimum value is 1.\n      periodSeconds: 10\n  # HostManagerMonitor is used to monitor the Kinetica DB Ranks. If a\n  # rank is unavailable for the specified time(MaxRankFailureCount) the\n  # cluster will be restarted.\n  hostManagerMonitor:\n    # The HostMonitor Port for the DB StartupProbe, ReadinessProbe and\n    # Liveness probes. Default: 8888\n    db_healthz_port:\n      # Number of port to expose on the pod's IP address. This must be a\n      # valid port number, 0 &lt; x &lt; 65536.\n      containerPort: 1\n      # What host IP to bind the external port to.\n      hostIP: string\n      # Number of port to expose on the host. If specified, this must be\n      # a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n      # specified, this must match ContainerPort. Most containers do\n      # not need this.\n      hostPort: 1\n      # If specified, this must be an IANA_SVC_NAME and unique within\n      # the pod. Each named port in a pod must have a unique name. Name\n      # for the port that can be referred to by services.\n      name: string\n      # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n      # to \"TCP\".\n      protocol: \"TCP\"\n    # The HostMonitor Port for the DB StartupProbe, ReadinessProbe and\n    # Liveness probes. Default: 8889\n    hm_healthz_port:\n      # Number of port to expose on the pod's IP address. This must be a\n      # valid port number, 0 &lt; x &lt; 65536.\n      containerPort: 1\n      # What host IP to bind the external port to.\n      hostIP: string\n      # Number of port to expose on the host. If specified, this must be\n      # a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n      # specified, this must match ContainerPort. Most containers do\n      # not need this.\n      hostPort: 1\n      # If specified, this must be an IANA_SVC_NAME and unique within\n      # the pod. Each named port in a pod must have a unique name. Name\n      # for the port that can be referred to by services.\n      name: string\n      # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n      # to \"TCP\".\n      protocol: \"TCP\"\n    # Periodic probe of container liveness. Container will be restarted\n    # if the probe fails. Cannot be updated. More info:\n    # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n    livenessProbe:\n      # Minimum consecutive failures for the probe to be considered\n      # failed after having succeeded. Defaults to 3. Minimum value is\n      # 1.\n      failureThreshold: 3\n      # Number of seconds after the container has started before\n      # liveness probes are initiated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      initialDelaySeconds: 10\n      # How often (in seconds) to perform the probe. Default to 10\n      # seconds. Minimum value is 1.\n      periodSeconds: 10\n    # Set the name of the container image to use.\n    monitorRegistryRepositoryTag:\n      # Set the policy for pulling container images.\n      imagePullPolicy: \"IfNotPresent\"\n      # ImagePullSecrets is an optional list of references to secrets in\n      # the same gpudb-namespace to use for pulling any of the images\n      # used by this PodSpec. If specified, these secrets will be\n      # passed to individual puller implementations for them to use.\n      # For example, in the case of docker, only DockerConfig type\n      # secrets are honored.\n      imagePullSecrets:\n      - name: string\n      # The image registry &amp; optional port containing the repository.\n      registry: \"docker.io\"\n      # The image repository path.\n      repository: \"kineticadevcloud/\"\n      # SemVer = Semantic Version for the Tag SemVer semver.Version\n      semVer: string\n      # The image sha.\n      sha: \"\"\n      # The image tag.\n      tag: \"v7.1.5.2\"\n    # Periodic probe of container service readiness. Container will be\n    # removed from service endpoints if the probe fails. Cannot be\n    # updated. More info:\n    # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n    readinessProbe:\n      # Minimum consecutive failures for the probe to be considered\n      # failed after having succeeded. Defaults to 3. Minimum value is\n      # 1.\n      failureThreshold: 3\n      # Number of seconds after the container has started before\n      # liveness probes are initiated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      initialDelaySeconds: 10\n      # How often (in seconds) to perform the probe. Default to 10\n      # seconds. Minimum value is 1.\n      periodSeconds: 10\n    # Allow for overriding resource requests/limits.\n    resources:\n      # Claims lists the names of resources, defined in\n      # spec.resourceClaims, that are used by this container. This is\n      # an alpha field and requires enabling the\n      # DynamicResourceAllocation feature gate. This field is\n      # immutable. It can only be set for containers.\n      claims:\n      - name: string\n      # Limits describes the maximum amount of compute resources\n      # allowed. More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      limits: {}\n      # Requests describes the minimum amount of compute resources\n      # required. If Requests is omitted for a container, it defaults\n      # to Limits if that is explicitly specified, otherwise to an\n      # implementation-defined value. Requests cannot exceed Limits.\n      # More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      requests: {}\n    # StartupProbe indicates that the Pod has successfully initialized.\n    # If specified, no other probes are executed until this completes\n    # successfully. If this probe fails, the Pod will be restarted,\n    # just as if the livenessProbe failed. This can be used to provide\n    # different probe parameters at the beginning of a Pod's lifecycle,\n    # when it might take a long time to load data or warm a cache, than\n    # during steady-state operation. This cannot be updated. This is an\n    # alpha feature enabled by the StartupProbe feature flag. More\n    # info:\n    # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n    startupProbe:\n      # Minimum consecutive failures for the probe to be considered\n      # failed after having succeeded. Defaults to 3. Minimum value is\n      # 1.\n      failureThreshold: 3\n      # Number of seconds after the container has started before\n      # liveness probes are initiated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      initialDelaySeconds: 10\n      # How often (in seconds) to perform the probe. Default to 10\n      # seconds. Minimum value is 1.\n      periodSeconds: 10\n  # The platform infrastructure provider e.g. azure, aws, gcp, on-prem\n  # etc.\n  infra: \"on-prem\"\n  # The Kubernetes Ingress Controller will be running on e.g.\n  # ingress-nginx, Traefik, Ambassador, Gloo, Kong etc.\n  ingressController: \"nginx\"\n  # The LDAP server to connect to.\n  ldap:\n    # BaseDN - The root base LDAP Distinguished Name to use as the base\n    # for the LDAP usage\n    baseDN: \"dc=kinetica,dc=com\"\n    # BindDN - The LDAP Distinguished Name to use for the LDAP\n    # connectivity/data connectivity/bind\n    bindDN: \"cn=admin,dc=kinetica,dc=com\"\n    # Host - The name of the host to connect to. If IsInLocalK8S=true\n    # then supply only the name e.g. `openldap` Default: openldap\n    host: \"openldap\"\n    # IsInLocalK8S - Is the LDAP server co-located in the same K8s\n    # cluster the operator is running in. Default: true\n    isInLocalK8S: true\n    # IsLDAPS - IUse LDAPS instead of LDAP Default: false\n    isLDAPS: false\n    # Namespace - The namespace the Default: openldap\n    namespace: \"gpudb\"\n    # Port - Defaults to LDAP Port 389 Default: 389\n    port: 389\n  # Tells the operator to use Cloud Provider Pay As You Go\n  # functionality.\n  payAsYouGo: false\n  # The Reveal Dashboard Configuration for the Kinetica Cluster.\n  reveal:\n    # The port that Reveal will be running on. It runs only on the head\n    # node pod in the cluster. Default: 8080\n    containerPort:\n      # Number of port to expose on the pod's IP address. This must be a\n      # valid port number, 0 &lt; x &lt; 65536.\n      containerPort: 1\n      # What host IP to bind the external port to.\n      hostIP: string\n      # Number of port to expose on the host. If specified, this must be\n      # a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n      # specified, this must match ContainerPort. Most containers do\n      # not need this.\n      hostPort: 1\n      # If specified, this must be an IANA_SVC_NAME and unique within\n      # the pod. Each named port in a pod must have a unique name. Name\n      # for the port that can be referred to by services.\n      name: string\n      # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n      # to \"TCP\".\n      protocol: \"TCP\"\n    # The Ingress Endpoint that Reveal will be running on.\n    ingressPath:\n      # backend defines the referenced service endpoint to which the\n      # traffic will be forwarded to.\n      backend:\n        # resource is an ObjectRef to another Kubernetes resource in the\n        # namespace of the Ingress object. If resource is specified,\n        # serviceName and servicePort must not be specified.\n        resource:\n          # APIGroup is the group for the resource being referenced. If\n          # APIGroup is not specified, the specified Kind must be in\n          # the core API group. For any other third-party types,\n          # APIGroup is required.\n          apiGroup: string\n          # Kind is the type of resource being referenced\n          kind: KineticaCluster\n          # Name is the name of resource being referenced\n          name: string\n        # serviceName specifies the name of the referenced service.\n        serviceName: string\n        # servicePort Specifies the port of the referenced service.\n        servicePort: \n      # path is matched against the path of an incoming request.\n      # Currently it can contain characters disallowed from the\n      # conventional \"path\" part of a URL as defined by RFC 3986. Paths\n      # must begin with a '/' and must be present when using PathType\n      # with value \"Exact\" or \"Prefix\".\n      path: string\n      # pathType determines the interpretation of the path matching.\n      # PathType can be one of the following values: * Exact: Matches\n      # the URL path exactly. * Prefix: Matches based on a URL path\n      # prefix split by '/'. Matching is done on a path element by\n      # element basis. A path element refers is the list of labels in\n      # the path split by the '/' separator. A request is a match for\n      # path p if every p is an element-wise prefix of p of the request\n      # path. Note that if the last element of the path is a substring\n      # of the last element in request path, it is not a match\n      # (e.g. /foo/bar matches /foo/bar/baz, but does not\n      # match /foo/barbaz). * ImplementationSpecific: Interpretation of\n      # the Path matching is up to the IngressClass. Implementations\n      # can treat this as a separate PathType or treat it identically\n      # to Prefix or Exact path types. Implementations are required to\n      # support all path types. Defaults to ImplementationSpecific.\n      pathType: string\n    # Whether to enable the Reveal Dashboard on the Cluster. Default:\n    # true\n    isEnabled: true\n  # The Stats server to deploy &amp; connect to if required.\n  stats:\n    # AlertManager - AlertManager specific configuration.\n    alertManager:\n      # Set the arguments for the command within the container to run.\n      args:\n      [\"-c\",\"/opt/gpudb/kagent/stats/prometheus/prometheus --log.level=debug\n      --config.file=/opt/gpudb/kagent/stats/prometheus/prometheus.yml --web.listen-address=0.0.0.0:9090\n      --storage.tsdb.path=/opt/gpudb/kagent/stats/storage/prometheus-storage\n      --storage.tsdb.retention.time=7d  --web.enable-lifecycle\"]\n      # Set the command within the container to run.\n      command: [\"/bin/sh\"]\n      # ConfigFile - Set the location of the Loki configuration file.\n      configFile: \"/opt/gpudb/kagent/stats/loki/loki.yml\"\n      # ConfigFileAsConfigMap - If true the ConfigFile is mounted from a\n      # ConfigMap\n      configFileAsConfigMap: true\n      # The port that Stats will be running on. It runs only on the head\n      # node pod in the cluster. Default: 9091\n      containerPort:\n        # Number of port to expose on the pod's IP address. This must be\n        # a valid port number, 0 &lt; x &lt; 65536.\n        containerPort: 1\n        # What host IP to bind the external port to.\n        hostIP: string\n        # Number of port to expose on the host. If specified, this must\n        # be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n        # specified, this must match ContainerPort. Most containers do\n        # not need this.\n        hostPort: 1\n        # If specified, this must be an IANA_SVC_NAME and unique within\n        # the pod. Each named port in a pod must have a unique name.\n        # Name for the port that can be referred to by services.\n        name: string\n        # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n        # to \"TCP\".\n        protocol: \"TCP\"\n      # List of environment variables to set in the container.\n      env:\n      - name: string\n        # Variable references $(VAR_NAME) are expanded using the\n        # previously defined environment variables in the container and\n        # any service environment variables. If a variable cannot be\n        # resolved, the reference in the input string will be\n        # unchanged. Double $$ are reduced to a single $, which allows\n        # for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will\n        # produce the string literal \"$(VAR_NAME)\". Escaped references\n        # will never be expanded, regardless of whether the variable\n        # exists or not. Defaults to \"\".\n        value: string\n        # Source for the environment variable's value. Cannot be used if\n        # value is not empty.\n        valueFrom:\n          # Selects a key of a ConfigMap.\n          configMapKeyRef:\n            # The key to select.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the ConfigMap or its key must be defined\n            optional: true\n          # Selects a field of the pod: supports metadata.name,\n          # metadata.namespace, `metadata.labels\n          # ['&lt;KEY&gt;']`, `metadata.annotations['&lt;KEY&gt;']`, spec.nodeName,\n          # spec.serviceAccountName, status.hostIP, status.podIP,\n          # status.podIPs.\n          fieldRef:\n            # Version of the schema the FieldPath is written in terms\n            # of, defaults to \"v1\".\n            apiVersion: app.kinetica.com/v1\n            # Path of the field to select in the specified API version.\n            fieldPath: string\n          # Selects a resource of the container: only resources limits\n          # and requests (limits.cpu, limits.memory,\n          # limits.ephemeral-storage, requests.cpu, requests.memory and\n          # requests.ephemeral-storage) are currently supported.\n          resourceFieldRef:\n            # Container name: required for volumes, optional for env\n            # vars\n            containerName: string\n            # Specifies the output format of the exposed resources,\n            # defaults to \"1\"\n            divisor: \n            # Required: resource to select\n            resource: string\n          # Selects a key of a secret in the pod's namespace\n          secretKeyRef:\n            # The key of the secret to select from.  Must be a valid\n            # secret key.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the Secret or its key must be defined\n            optional: true\n      # Set the name of the container image to use.\n      image:\n        # Set the policy for pulling container images.\n        imagePullPolicy: \"IfNotPresent\"\n        # ImagePullSecrets is an optional list of references to secrets\n        # in the same gpudb-namespace to use for pulling any of the\n        # images used by this PodSpec. If specified, these secrets will\n        # be passed to individual puller implementations for them to\n        # use. For example, in the case of docker, only DockerConfig\n        # type secrets are honored.\n        imagePullSecrets:\n        - name: string\n        # The image registry &amp; optional port containing the repository.\n        registry: \"docker.io\"\n        # The image repository path.\n        repository: \"kineticadevcloud/\"\n        # SemVer = Semantic Version for the Tag SemVer semver.Version\n        semVer: string\n        # The image sha.\n        sha: \"\"\n        # The image tag.\n        tag: \"v7.1.5.2\"\n      # Whether to enable the Stats Server on the Cluster. Default:\n      # true\n      isEnabled: true\n      # Periodic probe of container liveness. Container will be\n      # restarted if the probe fails. Cannot be updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      livenessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Logs - Set the location of the Loki configuration file.\n      logs: \"/opt/gpudb/kagent/stats/logs\" name: \"stats\"\n      # Periodic probe of container service readiness. Container will be\n      # removed from service endpoints if the probe fails. Cannot be\n      # updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      readinessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Resource Requests &amp; Limits for the Stats Pod.\n      resources:\n        # Claims lists the names of resources, defined in\n        # spec.resourceClaims, that are used by this container. This is\n        # an alpha field and requires enabling the\n        # DynamicResourceAllocation feature gate. This field is\n        # immutable. It can only be set for containers.\n        claims:\n        - name: string\n        # Limits describes the maximum amount of compute resources\n        # allowed. More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        limits: {}\n        # Requests describes the minimum amount of compute resources\n        # required. If Requests is omitted for a container, it defaults\n        # to Limits if that is explicitly specified, otherwise to an\n        # implementation-defined value. Requests cannot exceed Limits.\n        # More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        requests: {}\n      # StoragePath - Set the location of the AlertManager file\n      # storage.\n      storagePath: \"/opt/gpudb/kagent/stats/storage/alertmanager/alertmanager\"\n      # WebConfigFile - Set the location of the AlertManager\n      # alertmanager-web-config.yml.\n      webConfigFile: \"/opt/gpudb/kagent/stats/alertmanager/alertmanager-web-config.yml\"\n      # WebListenAddress - Set the location of the AlertManager\n      # alertmanager-web-config.yml.\n      webListenAddress: \"0.0.0.0:9089\"\n    # Grafana - Grafana specific configuration.\n    grafana:\n      # Set the arguments for the command within the container to run.\n      args:\n      [\"-c\",\"/opt/gpudb/kagent/stats/prometheus/prometheus --log.level=debug\n      --config.file=/opt/gpudb/kagent/stats/prometheus/prometheus.yml --web.listen-address=0.0.0.0:9090\n      --storage.tsdb.path=/opt/gpudb/kagent/stats/storage/prometheus-storage\n      --storage.tsdb.retention.time=7d  --web.enable-lifecycle\"]\n      # Set the command within the container to run.\n      command: [\"/bin/sh\"]\n      # ConfigFile - Set the location of the Loki configuration file.\n      configFile: \"/opt/gpudb/kagent/stats/loki/loki.yml\"\n      # ConfigFileAsConfigMap - If true the ConfigFile is mounted from a\n      # ConfigMap\n      configFileAsConfigMap: true\n      # The port that Stats will be running on. It runs only on the head\n      # node pod in the cluster. Default: 9091\n      containerPort:\n        # Number of port to expose on the pod's IP address. This must be\n        # a valid port number, 0 &lt; x &lt; 65536.\n        containerPort: 1\n        # What host IP to bind the external port to.\n        hostIP: string\n        # Number of port to expose on the host. If specified, this must\n        # be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n        # specified, this must match ContainerPort. Most containers do\n        # not need this.\n        hostPort: 1\n        # If specified, this must be an IANA_SVC_NAME and unique within\n        # the pod. Each named port in a pod must have a unique name.\n        # Name for the port that can be referred to by services.\n        name: string\n        # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n        # to \"TCP\".\n        protocol: \"TCP\"\n      # List of environment variables to set in the container.\n      env:\n      - name: string\n        # Variable references $(VAR_NAME) are expanded using the\n        # previously defined environment variables in the container and\n        # any service environment variables. If a variable cannot be\n        # resolved, the reference in the input string will be\n        # unchanged. Double $$ are reduced to a single $, which allows\n        # for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will\n        # produce the string literal \"$(VAR_NAME)\". Escaped references\n        # will never be expanded, regardless of whether the variable\n        # exists or not. Defaults to \"\".\n        value: string\n        # Source for the environment variable's value. Cannot be used if\n        # value is not empty.\n        valueFrom:\n          # Selects a key of a ConfigMap.\n          configMapKeyRef:\n            # The key to select.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the ConfigMap or its key must be defined\n            optional: true\n          # Selects a field of the pod: supports metadata.name,\n          # metadata.namespace, `metadata.labels\n          # ['&lt;KEY&gt;']`, `metadata.annotations['&lt;KEY&gt;']`, spec.nodeName,\n          # spec.serviceAccountName, status.hostIP, status.podIP,\n          # status.podIPs.\n          fieldRef:\n            # Version of the schema the FieldPath is written in terms\n            # of, defaults to \"v1\".\n            apiVersion: app.kinetica.com/v1\n            # Path of the field to select in the specified API version.\n            fieldPath: string\n          # Selects a resource of the container: only resources limits\n          # and requests (limits.cpu, limits.memory,\n          # limits.ephemeral-storage, requests.cpu, requests.memory and\n          # requests.ephemeral-storage) are currently supported.\n          resourceFieldRef:\n            # Container name: required for volumes, optional for env\n            # vars\n            containerName: string\n            # Specifies the output format of the exposed resources,\n            # defaults to \"1\"\n            divisor: \n            # Required: resource to select\n            resource: string\n          # Selects a key of a secret in the pod's namespace\n          secretKeyRef:\n            # The key of the secret to select from.  Must be a valid\n            # secret key.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the Secret or its key must be defined\n            optional: true\n      # HomePath - Set the location of the Grafana home directory.\n      homePath: \"/opt/gpudb/kagent/stats/grafana\"\n      # GraphiteHost - Host Address\n      host: \"0.0.0.0\"\n      # Set the name of the container image to use.\n      image:\n        # Set the policy for pulling container images.\n        imagePullPolicy: \"IfNotPresent\"\n        # ImagePullSecrets is an optional list of references to secrets\n        # in the same gpudb-namespace to use for pulling any of the\n        # images used by this PodSpec. If specified, these secrets will\n        # be passed to individual puller implementations for them to\n        # use. For example, in the case of docker, only DockerConfig\n        # type secrets are honored.\n        imagePullSecrets:\n        - name: string\n        # The image registry &amp; optional port containing the repository.\n        registry: \"docker.io\"\n        # The image repository path.\n        repository: \"kineticadevcloud/\"\n        # SemVer = Semantic Version for the Tag SemVer semver.Version\n        semVer: string\n        # The image sha.\n        sha: \"\"\n        # The image tag.\n        tag: \"v7.1.5.2\"\n      # Whether to enable the Stats Server on the Cluster. Default:\n      # true\n      isEnabled: true\n      # Periodic probe of container liveness. Container will be\n      # restarted if the probe fails. Cannot be updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      livenessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Logs - Set the location of the Loki configuration file.\n      logs: \"/opt/gpudb/kagent/stats/logs\" name: \"stats\"\n      # Periodic probe of container service readiness. Container will be\n      # removed from service endpoints if the probe fails. Cannot be\n      # updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      readinessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Resource Requests &amp; Limits for the Stats Pod.\n      resources:\n        # Claims lists the names of resources, defined in\n        # spec.resourceClaims, that are used by this container. This is\n        # an alpha field and requires enabling the\n        # DynamicResourceAllocation feature gate. This field is\n        # immutable. It can only be set for containers.\n        claims:\n        - name: string\n        # Limits describes the maximum amount of compute resources\n        # allowed. More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        limits: {}\n        # Requests describes the minimum amount of compute resources\n        # required. If Requests is omitted for a container, it defaults\n        # to Limits if that is explicitly specified, otherwise to an\n        # implementation-defined value. Requests cannot exceed Limits.\n        # More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        requests: {}\n    # Whether to enable the Stats Server on the Cluster. Default: true\n    isEnabled: true\n    # Loki - Loki specific configuration.\n    loki:\n      # Set the arguments for the command within the container to run.\n      args:\n      [\"-c\",\"/opt/gpudb/kagent/stats/prometheus/prometheus --log.level=debug\n      --config.file=/opt/gpudb/kagent/stats/prometheus/prometheus.yml --web.listen-address=0.0.0.0:9090\n      --storage.tsdb.path=/opt/gpudb/kagent/stats/storage/prometheus-storage\n      --storage.tsdb.retention.time=7d  --web.enable-lifecycle\"]\n      # Set the command within the container to run.\n      command: [\"/bin/sh\"]\n      # ConfigFile - Set the location of the Loki configuration file.\n      configFile: \"/opt/gpudb/kagent/stats/loki/loki.yml\"\n      # ConfigFileAsConfigMap - If true the ConfigFile is mounted from a\n      # ConfigMap\n      configFileAsConfigMap: true\n      # The port that Stats will be running on. It runs only on the head\n      # node pod in the cluster. Default: 9091\n      containerPort:\n        # Number of port to expose on the pod's IP address. This must be\n        # a valid port number, 0 &lt; x &lt; 65536.\n        containerPort: 1\n        # What host IP to bind the external port to.\n        hostIP: string\n        # Number of port to expose on the host. If specified, this must\n        # be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n        # specified, this must match ContainerPort. Most containers do\n        # not need this.\n        hostPort: 1\n        # If specified, this must be an IANA_SVC_NAME and unique within\n        # the pod. Each named port in a pod must have a unique name.\n        # Name for the port that can be referred to by services.\n        name: string\n        # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n        # to \"TCP\".\n        protocol: \"TCP\"\n      # List of environment variables to set in the container.\n      env:\n      - name: string\n        # Variable references $(VAR_NAME) are expanded using the\n        # previously defined environment variables in the container and\n        # any service environment variables. If a variable cannot be\n        # resolved, the reference in the input string will be\n        # unchanged. Double $$ are reduced to a single $, which allows\n        # for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will\n        # produce the string literal \"$(VAR_NAME)\". Escaped references\n        # will never be expanded, regardless of whether the variable\n        # exists or not. Defaults to \"\".\n        value: string\n        # Source for the environment variable's value. Cannot be used if\n        # value is not empty.\n        valueFrom:\n          # Selects a key of a ConfigMap.\n          configMapKeyRef:\n            # The key to select.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the ConfigMap or its key must be defined\n            optional: true\n          # Selects a field of the pod: supports metadata.name,\n          # metadata.namespace, `metadata.labels\n          # ['&lt;KEY&gt;']`, `metadata.annotations['&lt;KEY&gt;']`, spec.nodeName,\n          # spec.serviceAccountName, status.hostIP, status.podIP,\n          # status.podIPs.\n          fieldRef:\n            # Version of the schema the FieldPath is written in terms\n            # of, defaults to \"v1\".\n            apiVersion: app.kinetica.com/v1\n            # Path of the field to select in the specified API version.\n            fieldPath: string\n          # Selects a resource of the container: only resources limits\n          # and requests (limits.cpu, limits.memory,\n          # limits.ephemeral-storage, requests.cpu, requests.memory and\n          # requests.ephemeral-storage) are currently supported.\n          resourceFieldRef:\n            # Container name: required for volumes, optional for env\n            # vars\n            containerName: string\n            # Specifies the output format of the exposed resources,\n            # defaults to \"1\"\n            divisor: \n            # Required: resource to select\n            resource: string\n          # Selects a key of a secret in the pod's namespace\n          secretKeyRef:\n            # The key of the secret to select from.  Must be a valid\n            # secret key.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the Secret or its key must be defined\n            optional: true\n      # ExpandEnv\n      expandEnv: true\n      # Set the name of the container image to use.\n      image:\n        # Set the policy for pulling container images.\n        imagePullPolicy: \"IfNotPresent\"\n        # ImagePullSecrets is an optional list of references to secrets\n        # in the same gpudb-namespace to use for pulling any of the\n        # images used by this PodSpec. If specified, these secrets will\n        # be passed to individual puller implementations for them to\n        # use. For example, in the case of docker, only DockerConfig\n        # type secrets are honored.\n        imagePullSecrets:\n        - name: string\n        # The image registry &amp; optional port containing the repository.\n        registry: \"docker.io\"\n        # The image repository path.\n        repository: \"kineticadevcloud/\"\n        # SemVer = Semantic Version for the Tag SemVer semver.Version\n        semVer: string\n        # The image sha.\n        sha: \"\"\n        # The image tag.\n        tag: \"v7.1.5.2\"\n      # Whether to enable the Stats Server on the Cluster. Default:\n      # true\n      isEnabled: true\n      # Periodic probe of container liveness. Container will be\n      # restarted if the probe fails. Cannot be updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      livenessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Logs - Set the location of the Loki configuration file.\n      logs: \"/opt/gpudb/kagent/stats/logs\" name: \"stats\"\n      # Periodic probe of container service readiness. Container will be\n      # removed from service endpoints if the probe fails. Cannot be\n      # updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      readinessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Resource Requests &amp; Limits for the Stats Pod.\n      resources:\n        # Claims lists the names of resources, defined in\n        # spec.resourceClaims, that are used by this container. This is\n        # an alpha field and requires enabling the\n        # DynamicResourceAllocation feature gate. This field is\n        # immutable. It can only be set for containers.\n        claims:\n        - name: string\n        # Limits describes the maximum amount of compute resources\n        # allowed. More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        limits: {}\n        # Requests describes the minimum amount of compute resources\n        # required. If Requests is omitted for a container, it defaults\n        # to Limits if that is explicitly specified, otherwise to an\n        # implementation-defined value. Requests cannot exceed Limits.\n        # More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        requests: {}\n      # Storage - Set the path of the Loki storage.\n      storage: \"/opt/gpudb/kagent/stats/storage/loki-storage\"\n    # Which vmss/node group etc. to use as the NodeSelector\n    pool: \"compute\"\n    # Prometheus - Prometheus specific configuration.\n    prometheus:\n      # Set the arguments for the command within the container to run.\n      args:\n      [\"-c\",\"/opt/gpudb/kagent/stats/prometheus/prometheus --log.level=debug\n      --config.file=/opt/gpudb/kagent/stats/prometheus/prometheus.yml --web.listen-address=0.0.0.0:9090\n      --storage.tsdb.path=/opt/gpudb/kagent/stats/storage/prometheus-storage\n      --storage.tsdb.retention.time=7d  --web.enable-lifecycle\"]\n      # Set the command within the container to run.\n      command: [\"/bin/sh\"]\n      # ConfigFile - Set the location of the Loki configuration file.\n      configFile: \"/opt/gpudb/kagent/stats/loki/loki.yml\"\n      # ConfigFileAsConfigMap - If true the ConfigFile is mounted from a\n      # ConfigMap\n      configFileAsConfigMap: true\n      # The port that Stats will be running on. It runs only on the head\n      # node pod in the cluster. Default: 9091\n      containerPort:\n        # Number of port to expose on the pod's IP address. This must be\n        # a valid port number, 0 &lt; x &lt; 65536.\n        containerPort: 1\n        # What host IP to bind the external port to.\n        hostIP: string\n        # Number of port to expose on the host. If specified, this must\n        # be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is\n        # specified, this must match ContainerPort. Most containers do\n        # not need this.\n        hostPort: 1\n        # If specified, this must be an IANA_SVC_NAME and unique within\n        # the pod. Each named port in a pod must have a unique name.\n        # Name for the port that can be referred to by services.\n        name: string\n        # Protocol for port. Must be UDP, TCP, or SCTP. Defaults\n        # to \"TCP\".\n        protocol: \"TCP\"\n      # List of environment variables to set in the container.\n      env:\n      - name: string\n        # Variable references $(VAR_NAME) are expanded using the\n        # previously defined environment variables in the container and\n        # any service environment variables. If a variable cannot be\n        # resolved, the reference in the input string will be\n        # unchanged. Double $$ are reduced to a single $, which allows\n        # for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will\n        # produce the string literal \"$(VAR_NAME)\". Escaped references\n        # will never be expanded, regardless of whether the variable\n        # exists or not. Defaults to \"\".\n        value: string\n        # Source for the environment variable's value. Cannot be used if\n        # value is not empty.\n        valueFrom:\n          # Selects a key of a ConfigMap.\n          configMapKeyRef:\n            # The key to select.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the ConfigMap or its key must be defined\n            optional: true\n          # Selects a field of the pod: supports metadata.name,\n          # metadata.namespace, `metadata.labels\n          # ['&lt;KEY&gt;']`, `metadata.annotations['&lt;KEY&gt;']`, spec.nodeName,\n          # spec.serviceAccountName, status.hostIP, status.podIP,\n          # status.podIPs.\n          fieldRef:\n            # Version of the schema the FieldPath is written in terms\n            # of, defaults to \"v1\".\n            apiVersion: app.kinetica.com/v1\n            # Path of the field to select in the specified API version.\n            fieldPath: string\n          # Selects a resource of the container: only resources limits\n          # and requests (limits.cpu, limits.memory,\n          # limits.ephemeral-storage, requests.cpu, requests.memory and\n          # requests.ephemeral-storage) are currently supported.\n          resourceFieldRef:\n            # Container name: required for volumes, optional for env\n            # vars\n            containerName: string\n            # Specifies the output format of the exposed resources,\n            # defaults to \"1\"\n            divisor: \n            # Required: resource to select\n            resource: string\n          # Selects a key of a secret in the pod's namespace\n          secretKeyRef:\n            # The key of the secret to select from.  Must be a valid\n            # secret key.\n            key: string\n            # Name of the referent. More info:\n            # https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\n            # TODO: Add other useful fields. apiVersion, kind, uid?\n            name: string\n            # Specify whether the Secret or its key must be defined\n            optional: true\n      # Set the name of the container image to use.\n      image:\n        # Set the policy for pulling container images.\n        imagePullPolicy: \"IfNotPresent\"\n        # ImagePullSecrets is an optional list of references to secrets\n        # in the same gpudb-namespace to use for pulling any of the\n        # images used by this PodSpec. If specified, these secrets will\n        # be passed to individual puller implementations for them to\n        # use. For example, in the case of docker, only DockerConfig\n        # type secrets are honored.\n        imagePullSecrets:\n        - name: string\n        # The image registry &amp; optional port containing the repository.\n        registry: \"docker.io\"\n        # The image repository path.\n        repository: \"kineticadevcloud/\"\n        # SemVer = Semantic Version for the Tag SemVer semver.Version\n        semVer: string\n        # The image sha.\n        sha: \"\"\n        # The image tag.\n        tag: \"v7.1.5.2\"\n      # Whether to enable the Stats Server on the Cluster. Default:\n      # true\n      isEnabled: true\n      # Periodic probe of container liveness. Container will be\n      # restarted if the probe fails. Cannot be updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      livenessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Set the Prometheus logging level.\n      logLevel: \"debug\"\n      # Logs - Set the location of the Loki configuration file.\n      logs: \"/opt/gpudb/kagent/stats/logs\" name: \"stats\"\n      # Periodic probe of container service readiness. Container will be\n      # removed from service endpoints if the probe fails. Cannot be\n      # updated. More info:\n      # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n      readinessProbe:\n        # Exec specifies the action to take.\n        exec:\n          # Command is the command line to execute inside the container,\n          # the working directory for the command  is root ('/') in the\n          # container's filesystem. The command is simply exec'd, it is\n          # not run inside a shell, so traditional shell instructions\n          # ('|', etc) won't work. To use a shell, you need to\n          # explicitly call out to that shell. Exit status of 0 is\n          # treated as live/healthy and non-zero is unhealthy.\n          command: [\"string\"]\n        # Minimum consecutive failures for the probe to be considered\n        # failed after having succeeded. Defaults to 3. Minimum value\n        # is 1.\n        failureThreshold: 1\n        # GRPC specifies an action involving a GRPC port.\n        grpc:\n          # Port number of the gRPC service. Number must be in the range\n          # 1 to 65535.\n          port: 1\n          # Service is the name of the service to place in the gRPC\n          # HealthCheckRequest\n          # (see\n          # https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n          # If this is not specified, the default behavior is defined\n          # by gRPC.\n          service: string\n        # HTTPGet specifies the http request to perform.\n        httpGet:\n          # Host name to connect to, defaults to the pod IP. You\n          # probably want to set \"Host\" in httpHeaders instead.\n          host: string\n          # Custom headers to set in the request. HTTP allows repeated\n          # headers.\n          httpHeaders:\n          - name: string\n            # The header field value\n            value: string\n          # Path to access on the HTTP server.\n          path: string\n          # Name or number of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n          # Scheme to use for connecting to the host. Defaults to HTTP.\n          scheme: string\n        # Number of seconds after the container has started before\n        # liveness probes are initiated. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        initialDelaySeconds: 1\n        # How often (in seconds) to perform the probe. Default to 10\n        # seconds. Minimum value is 1.\n        periodSeconds: 1\n        # Minimum consecutive successes for the probe to be considered\n        # successful after having failed. Defaults to 1. Must be 1 for\n        # liveness and startup. Minimum value is 1.\n        successThreshold: 1\n        # TCPSocket specifies an action involving a TCP port.\n        tcpSocket:\n          # Optional: Host name to connect to, defaults to the pod IP.\n          host: string\n          # Number or name of the port to access on the container.\n          # Number must be in the range 1 to 65535. Name must be an\n          # IANA_SVC_NAME.\n          port: \n        # Optional duration in seconds the pod needs to terminate\n        # gracefully upon probe failure. The grace period is the\n        # duration in seconds after the processes running in the pod\n        # are sent a termination signal and the time when the processes\n        # are forcibly halted with a kill signal. Set this value longer\n        # than the expected cleanup time for your process. If this\n        # value is nil, the pod's terminationGracePeriodSeconds will be\n        # used. Otherwise, this value overrides the value provided by\n        # the pod spec. Value must be non-negative integer. The value\n        # zero indicates stop immediately via the kill signal\n        # (no opportunity to shut down). This is a beta field and\n        # requires enabling ProbeTerminationGracePeriod feature gate.\n        # Minimum value is 1. spec.terminationGracePeriodSeconds is\n        # used if unset.\n        terminationGracePeriodSeconds: 1\n        # Number of seconds after which the probe times out. Defaults to\n        # 1 second. Minimum value is 1. More info:\n        # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes\n        timeoutSeconds: 1\n      # Resource Requests &amp; Limits for the Stats Pod.\n      resources:\n        # Claims lists the names of resources, defined in\n        # spec.resourceClaims, that are used by this container. This is\n        # an alpha field and requires enabling the\n        # DynamicResourceAllocation feature gate. This field is\n        # immutable. It can only be set for containers.\n        claims:\n        - name: string\n        # Limits describes the maximum amount of compute resources\n        # allowed. More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        limits: {}\n        # Requests describes the minimum amount of compute resources\n        # required. If Requests is omitted for a container, it defaults\n        # to Limits if that is explicitly specified, otherwise to an\n        # implementation-defined value. Requests cannot exceed Limits.\n        # More info:\n        # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n        requests: {}\n      # Set the location of the TSDB database.\n      storageTSDBPath: \"/opt/gpudb/kagent/stats/storage/prometheus-storage\"\n      # Set the time to hold data in the TSDB database.\n      storageTSDBRetentionTime: \"7d\"\n      # Timings - Prometheus Intervals &amp; Timeouts\n      timings: evaluationInterval: \"30s\" scrapeInterval: \"30s\"\n      scrapeTimeout: \"10s\"\n    # Whether to share a single PV for Loki, Prometheus &amp; Grafana or\n    # have a separate PV for each. Default: true\n    sharedPV: true\n    # Resource block specifically for use with SharedPV = true to set\n    # storage `requests` &amp; `limits`\n    sharedPVResources:\n      # Claims lists the names of resources, defined in\n      # spec.resourceClaims, that are used by this container. This is\n      # an alpha field and requires enabling the\n      # DynamicResourceAllocation feature gate. This field is\n      # immutable. It can only be set for containers.\n      claims:\n      - name: string\n      # Limits describes the maximum amount of compute resources\n      # allowed. More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      limits: {}\n      # Requests describes the minimum amount of compute resources\n      # required. If Requests is omitted for a container, it defaults\n      # to Limits if that is explicitly specified, otherwise to an\n      # implementation-defined value. Requests cannot exceed Limits.\n      # More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      requests: {}\n  # Supporting images like socat,busybox etc.\n  supportingImages:\n    # Set the resource requests/limits for the BusyBox Pod(s).\n    busyBoxResources:\n      # Claims lists the names of resources, defined in\n      # spec.resourceClaims, that are used by this container. This is\n      # an alpha field and requires enabling the\n      # DynamicResourceAllocation feature gate. This field is\n      # immutable. It can only be set for containers.\n      claims:\n      - name: string\n      # Limits describes the maximum amount of compute resources\n      # allowed. More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      limits: {}\n      # Requests describes the minimum amount of compute resources\n      # required. If Requests is omitted for a container, it defaults\n      # to Limits if that is explicitly specified, otherwise to an\n      # implementation-defined value. Requests cannot exceed Limits.\n      # More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      requests: {}\n    # Set the name of the container image to use.\n    busybox:\n      # Set the policy for pulling container images.\n      imagePullPolicy: \"IfNotPresent\"\n      # ImagePullSecrets is an optional list of references to secrets in\n      # the same gpudb-namespace to use for pulling any of the images\n      # used by this PodSpec. If specified, these secrets will be\n      # passed to individual puller implementations for them to use.\n      # For example, in the case of docker, only DockerConfig type\n      # secrets are honored.\n      imagePullSecrets:\n      - name: string\n      # The image registry &amp; optional port containing the repository.\n      registry: \"docker.io\"\n      # The image repository path.\n      repository: \"kineticadevcloud/\"\n      # SemVer = Semantic Version for the Tag SemVer semver.Version\n      semVer: string\n      # The image sha.\n      sha: \"\"\n      # The image tag.\n      tag: \"v7.1.5.2\"\n    # Set the name of the container image to use.\n    socat:\n      # Set the policy for pulling container images.\n      imagePullPolicy: \"IfNotPresent\"\n      # ImagePullSecrets is an optional list of references to secrets in\n      # the same gpudb-namespace to use for pulling any of the images\n      # used by this PodSpec. If specified, these secrets will be\n      # passed to individual puller implementations for them to use.\n      # For example, in the case of docker, only DockerConfig type\n      # secrets are honored.\n      imagePullSecrets:\n      - name: string\n      # The image registry &amp; optional port containing the repository.\n      registry: \"docker.io\"\n      # The image repository path.\n      repository: \"kineticadevcloud/\"\n      # SemVer = Semantic Version for the Tag SemVer semver.Version\n      semVer: string\n      # The image sha.\n      sha: \"\"\n      # The image tag.\n      tag: \"v7.1.5.2\"\n    # Set the resource requests/limits for the Socat Pod.\n    socatResources:\n      # Claims lists the names of resources, defined in\n      # spec.resourceClaims, that are used by this container. This is\n      # an alpha field and requires enabling the\n      # DynamicResourceAllocation feature gate. This field is\n      # immutable. It can only be set for containers.\n      claims:\n      - name: string\n      # Limits describes the maximum amount of compute resources\n      # allowed. More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      limits: {}\n      # Requests describes the minimum amount of compute resources\n      # required. If Requests is omitted for a container, it defaults\n      # to Limits if that is explicitly specified, otherwise to an\n      # implementation-defined value. Requests cannot exceed Limits.\n      # More info:\n      # https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/\n      requests: {}\n# KineticaClusterStatus defines the observed state of KineticaCluster\nstatus:\n  # CloudProvider the DB is deployed on\n  cloudProvider: string\n  # CloudRegion the DB is deployed on\n  cloudRegion: string\n  # ClusterSize the current number of ranks &amp; type i.e. CPU or GPU of\n  # the cluster\n  clusterSize:\n    # ClusterSizeEnum - T-Shirt size of the Kinetica DB Cluster i.e. a\n    # representation of the number of nodes in a simple to understand\n    # T-Short size scheme. This indicates the size of the cluster i.e.\n    # the number of nodes. It does not identify the size of the cloud\n    # provider nodes. For node size see ClusterTypeEnum. Supported\n    # Values are: - XS S M L XL XXL XXXL\n    tshirtSize: string\n    # ClusterTypeEnum - An Enum of the node types of a KineticaCluster\n    # e.g. CPU, GPU along with the Cloud Provider node size e.g. size\n    # of the VM.\n    tshirtType: string\n  # The number of ranks (replicas) that the cluster was last run with\n  currentReplicas: 0\n  # The first start of a new cluster has completed.\n  firstStartComplete: false\n  # HostManagerStatusResponse - The contents of polling the HostManager\n  # on port 9300n are added to the BR status field. This allows clients\n  # to get the Host/Rank/Graph/ML status information.\n  hmStatus: cluster_leader: string cluster_operation: string graph:\n  status: string graph_status: string host_httpd_status: string\n  host_mode: string host_num_gpus: string host_pid: 1\n  host_stats_status: string host_status: string hostname: string hosts:\n  graph_status: string host_httpd_status: string host_mode: string\n  host_pid: 1 host_stats_status: string host_status: string ml_status:\n  string query_planner_status: string reveal_status: string\n  license_expiration: string license_status: string license_type:\n  string ml_status: string query_planner_status: string ranks: mode:\n  string\n      # Pid - The OS Process Id for the Rank.\n      pid: 1 status: string reveal_status: string system_idle_time:\n      string system_mode: string system_rebalancing: 1 system_status:\n      string text: status: string version: string\n  # The fully qualified Ingress routes.\n  ingressUrls: aaw: string dbMonitor: string files: string gadmin:\n  string postgresProxy: string ranks: {} reveal: string\n  # The fully qualified in-cluster Ingress routes.\n  internalIngressUrls: aaw: string dbMonitor: string files: string\n  gadmin: string postgresProxy: string ranks: {} reveal: string\n  # Identify FreeSaaS Cluster\n  isFreeSaaS: false\n  # HostOptions used during DB Cluster Scaling Functions\n  options: ram_limit: 1\n  # OutstandingBilling - A list of hours not yet billed for. Will only\n  # be present if the plan is Pay As You Go and the operator was unable\n  # to send the billing information due to an issue with the cloud\n  # providers billing APIs.\n  outstandingBillableHour:\n  - billable: true billed: true billedAt: string duration: string end:\n    string start: string\n  # The state or phase of the current DB installation\n  phase: stringv\n</code></pre>","tags":["Reference"]},{"location":"Reference/kinetica_workbench/","title":"Workbench CRD Reference","text":"","tags":["Reference"]},{"location":"Reference/kinetica_workbench/#coming-soon","title":"Coming Soon","text":"","tags":["Reference"]},{"location":"Reference/workbench/","title":"Kinetica Workbench Configuration","text":"<ul> <li>kubectl (yaml)</li> <li>Helm Chart</li> </ul>","tags":["Reference"]},{"location":"Reference/workbench/#workbench","title":"Workbench","text":"kubectl <p>Using kubetctl a CustomResource of type <code>KineticaCluster</code> is used to define a new Kinetica DB Cluster in a yaml file.</p> <p>The basic Group, Version, Kind or GVK to instantiate a Kinetica Workbench is as follows: -</p> Workbench GVK<pre><code>apiVersion: workbench.com.kinetica/v1\nkind: Workbench\n</code></pre>","tags":["Reference"]},{"location":"Reference/workbench/#metadata","title":"Metadata","text":"<p>to which we add a <code>metadata:</code> block for the name of the DB CR along with the <code>namespace</code> into which we are targetting the installation of the DB cluster.</p> Workbench metadata<pre><code>apiVersion: workbench.com.kinetica/v1\nkind: Workbench\nmetadata:\n  name: workbench-kinetica-cluster\n  namespace: gpudb\n</code></pre> <p>The simplest valid Workbench CR looks as follows: -</p> workbench.yaml<pre><code>apiVersion: workbench.com.kinetica/v1\nkind: Workbench\nmetadata:\n  name: workbench-kinetica-cluster\n  namespace: gpudb\nspec:\n  executeSqlLimit: 10000\n  fqdn: kinetica-cluster.saas.kinetica.com\n  image: kinetica/workbench:v7.1.9-8.rc1\n  letsEncrypt:\n    enabled: false\n  userIdleTimeout: 60\n  ingressController: nginx-ingress\n</code></pre> <p><code>1. clusterName</code> - the user defined name of the Kinetica DB Cluster</p> <p><code>2. clusterSize</code> - block that defines the number of DB Ranks to run</p> helm","tags":["Reference"]},{"location":"Setup/","title":"Kinetica for Kubernetes Setup","text":"<ul> <li> <p> Set up in 15 minutes </p> <p>Install the Kinetica DB locally on <code>Kind</code> or <code>k3s</code> with <code>helm</code> to get up and running in minutes.   Quickstart</p> </li> <li> <p> Prepare to Install</p> <p>What you need to know &amp; do before beginning a production installation.   Preparation and Prerequisites</p> </li> <li> <p> Production DB Installation</p> <p>Install the Kinetica DB with helm to get up and running quickly   Installation</p> </li> <li> <p> Channel Your Inner Ninja</p> <p>Advanced Installation Topics which go beyond the basic installation.   Advanced Topics</p> </li> </ul>","tags":["Getting Started","Installation"]},{"location":"Support/","title":"Support","text":"<ul> <li> <p> Taking the next steps</p> <p>Further tutorials or help on configuring Kinetica in different environments.    Help &amp; Tutorials</p> </li> <li> <p> Locating Issues</p> <p>In the unlikely event you require information on how to troubleshoot your installation, help can be found here.   Troubleshooting</p> </li> <li> <p> FAQ</p> <p>Frequently Asked Questions..   FAQ</p> </li> </ul>","tags":["Support"]},{"location":"Troubleshooting/troubleshooting/","title":"Troubleshooting","text":"","tags":["Support"]},{"location":"Troubleshooting/troubleshooting/#coming-soon","title":"Coming Soon","text":"","tags":["Support"]},{"location":"tags/","title":"Categories","text":"<p>Following is a list of relevant documentation categories:</p>"},{"location":"tags/#aks","title":"AKS","text":"<ul> <li>Azure AKS</li> </ul>"},{"location":"tags/#administration","title":"Administration","text":"<ul> <li>Administration</li> <li>Grant management</li> <li>Resource group management</li> <li>Role Management</li> <li>Schema management</li> <li>User Management</li> <li>Kinetica Cluster Grants Reference</li> <li>Kinetica Cluster Resource Groups Reference</li> <li>Kinetica Cluster Roles Reference</li> <li>Kinetica Cluster Schemas Reference</li> <li>Kinetica Cluster Users Reference</li> </ul>"},{"location":"tags/#advanced","title":"Advanced","text":"<ul> <li>Advanced</li> <li> Advanced Topics</li> <li>Air-Gapped Environments</li> <li>Alternative Charts</li> <li>Ingress Configuration</li> <li> <code>ingress-nginx</code> Ingress Configuration</li> <li>Kinetica DB on OS X (Arm64)</li> <li>Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations</li> <li>Bare Metal/VM Installation - <code>kubeadm</code></li> <li>S3 Storage for Dev/Test</li> <li> <code>nginx-ingress</code> Ingress Configuration</li> </ul>"},{"location":"tags/#architecture","title":"Architecture","text":"<ul> <li>Architecture</li> <li>Core Database Architecture</li> <li>Kubernetes Architecture</li> </ul>"},{"location":"tags/#configuration","title":"Configuration","text":"<ul> <li>Ingress Configuration</li> <li> <code>ingress-nginx</code> Ingress Configuration</li> <li> <code>nginx-ingress</code> Ingress Configuration</li> <li>How to change the Clusters FQDN</li> <li>OpenTelemetry</li> </ul>"},{"location":"tags/#development","title":"Development","text":"<ul> <li>Kinetica DB on OS X (Arm64)</li> <li>S3 Storage for Dev/Test</li> <li>Quickstart</li> </ul>"},{"location":"tags/#eks","title":"EKS","text":"<ul> <li>Amazon EKS</li> </ul>"},{"location":"tags/#getting-started","title":"Getting Started","text":"<ul> <li>Getting Started</li> <li>Azure AKS</li> <li>Amazon EKS</li> <li>Preparation &amp; Prerequisites</li> <li>Quickstart</li> <li>Kinetica for Kubernetes Setup</li> </ul>"},{"location":"tags/#ingress","title":"Ingress","text":"<ul> <li>Ingress Configuration</li> <li> <code>ingress-nginx</code> Ingress Configuration</li> <li>Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations</li> <li> <code>nginx-ingress</code> Ingress Configuration</li> </ul>"},{"location":"tags/#installation","title":"Installation","text":"<ul> <li>Air-Gapped Environments</li> <li>Alternative Charts</li> <li>Kubernetes Cluster LoadBalancer for Bare Metal/VM Installations</li> <li>Bare Metal/VM Installation - <code>kubeadm</code></li> <li>S3 Storage for Dev/Test</li> <li>Getting Started</li> <li>Kinetica for Kubernetes Installation</li> <li>CPU</li> <li>GPU</li> <li>Preparation &amp; Prerequisites</li> <li>Quickstart</li> <li> Core DB CRDs</li> <li>Kinetica for Kubernetes Setup</li> </ul>"},{"location":"tags/#monitoring","title":"Monitoring","text":"<ul> <li>Logs</li> <li> Metrics Collection &amp; Display</li> <li>OpenTelemetry</li> </ul>"},{"location":"tags/#operations","title":"Operations","text":"<ul> <li>Logs</li> <li> Metrics Collection &amp; Display</li> <li>Operational Management</li> <li>Kinetica for Kubernetes Backup &amp; Restore</li> <li>OpenTelemetry</li> <li>Kinetica for Kubernetes Data Rebalancing</li> <li>Kinetica for Kubernetes Suspend &amp; Resume</li> <li>Kinetica Cluster Backups Reference</li> <li> Core DB CRDs</li> <li>Kinetica Cluster Restores Reference</li> </ul>"},{"location":"tags/#reference","title":"Reference","text":"<ul> <li>Reference Section</li> <li>Kinetica Database Configuration</li> <li>Kinetica Operators</li> <li>Kinetica Cluster Admins Reference</li> <li>Kinetica Cluster Backups Reference</li> <li>Kinetica Cluster Grants Reference</li> <li> Core DB CRDs</li> <li>Kinetica Cluster Resource Groups Reference</li> <li>Kinetica Cluster Restores Reference</li> <li>Kinetica Cluster Roles Reference</li> <li>Kinetica Cluster Schemas Reference</li> <li>Kinetica Cluster Users Reference</li> <li>Kinetica Clusters Reference</li> <li>Kinetica Workbench Reference</li> <li>Kinetica Workbench Configuration</li> </ul>"},{"location":"tags/#storage","title":"Storage","text":"<ul> <li>S3 Storage for Dev/Test</li> <li>Amazon EKS</li> </ul>"},{"location":"tags/#support","title":"Support","text":"<ul> <li>How to change the Clusters FQDN</li> <li>FAQ</li> <li>Help &amp; Tutorials</li> <li>Creating Users, Roles, Schemas and other Kinetica DB Objects</li> <li>Support</li> <li>Troubleshooting</li> </ul>"}]}
\ No newline at end of file
diff --git a/7.2/sitemap.xml.gz b/7.2/sitemap.xml.gz
index 5d0ee043d5f0cae107014181f9977d1bf0645b46..bedfcf42f113349f6e1daf03671c4e87d09f45b7 100644
GIT binary patch
delta 15
WcmdnUwvmlZzMF$%Z^1@3ZDs%@rvyO&

delta 15
WcmdnUwvmlZzMF%?JZ2-CHZuSr9|NZV