From 01335e7aac7b2ad26eed3bb1bc439024142c4f30 Mon Sep 17 00:00:00 2001
From: "William G. Thompson, Jr" <wgthom@gmail.com>
Date: Sat, 8 Jun 2019 19:08:13 -0400
Subject: [PATCH] gte and content updates for 401.4

---
 docs/401/401.3.rst                            |   2 +-
 docs/401/401.4-example-solution.rst           |  36 ++---
 docs/401/401.4.rst                            | 143 ++++++++++++-----
 docs/401/index.rst                            |   1 -
 docs/figures/401-lms-solution.png             | Bin 0 -> 32029 bytes
 .../container_files/seed-data/bootstrap.gsh   |   3 +-
 .../container_files/seed-data/bootstrap.gsh   | 148 ++++++++++--------
 7 files changed, 205 insertions(+), 128 deletions(-)
 create mode 100644 docs/figures/401-lms-solution.png

diff --git a/docs/401/401.3.rst b/docs/401/401.3.rst
index 92b2b35..1f173d8 100644
--- a/docs/401/401.3.rst
+++ b/docs/401/401.3.rst
@@ -316,4 +316,4 @@ The End
 
 .. _Grouper Deployment Guide: https://spaces.at.internet2.edu/display/Grouper/Grouper+Deployment+Guide+Work+-TIER+Program
 .. _Grouper ESB Connector: https://spaces.at.internet2.edu/display/Grouper/Grouper+ESB+Connector
-.. _COmanage: https://www.internet2.edu/products-services/trust-identity/comanage/
\ No newline at end of file
+.. _COmanage: https://www.internet2.edu/products-services/trust-identity/comanage/
diff --git a/docs/401/401.4-example-solution.rst b/docs/401/401.4-example-solution.rst
index 4aba227..42679d4 100644
--- a/docs/401/401.4-example-solution.rst
+++ b/docs/401/401.4-example-solution.rst
@@ -3,24 +3,24 @@
 401.4 Untangling Legacy Access Policies - Example Solution
 ==========================================================
 
-The follwing solution uses techniques demonstrated in the other 401 series
-labs in order to create an independent policy for the LMS service.
+The following solution uses techniques demonstrated in the 201 and 401 labs.
+The general solution is to create an independent access policy for the LMS
+service based on the legacy community members LDAP group and a new visiting
+scholars reference group.
 
-#. Use Grouper Loader to import existing LDAP cohort group into a "community
-   members" reference group-- `ref:legacy:community_members`
-#. Add loader job to populate `communtiy_members` from
-   `cn=community_members,ou=groups,dc=example,dc=edu`.
-#. Run loader job to import members into reference group.
-#. Create a Grouper service folder for the LMS with a policy for LMS
-   authorization: `app:lms:lms_authorize|allow|deny`
-#. Add the "institutional people" reference group, `ref:community_members`,
-    to the allow policy for the LMS, `app:lms:lms_allow`.
-#. Create `app:lms:ref:visiting_scholars`.  Import the NetIDs for the visiting
-   scholors into this reference group.
-#. Add `visiting_scholars` to `lms_allow`.
-#. Provision this policy to a new group in the LDAP DIT that the LMS group can
-   use to allow access to the service.
+#. Create a new application folder `lms`
+#. Create a new access policy group `lms_access`
+#. Configure PSPNG attributes to `provision_to` `groupOfNames` on `lms_access`
+#. Create a new institutional reference `ref:legacy:community_members`.
+#. Configure `community_members` with an LDAP loader job.
+#. Add `community_members` to `lms_access_allow`
+#. Create an application-specific reference group for the visiting scholars
+   `app:lms:service:ref:visiting_scholars`
+#. Import the NetID list into `visiting_scholars`
+#. Add `visiting_scholars` to `lms_access_allow`
+#. File a ticket with Vicky to switch the LMS LDAP access control group
+#. Head to your happy place! :)
 
-Congrats!  You are now a certified Grouper Guru associate level 1!  
-And remember nothing gets'em going like chum!
+.. figure:: ../figures/401-lms-solution.png
 
+Congrats! You are now a certified Grouper Guru associate level 1!
diff --git a/docs/401/401.4.rst b/docs/401/401.4.rst
index 712f57d..7a03f70 100644
--- a/docs/401/401.4.rst
+++ b/docs/401/401.4.rst
@@ -14,54 +14,121 @@ Lab Components
 --------------
 
 * Grouper
+* OpenLDAP
+* `Grouper Deployment Guide`_
+
 
 --------
 Overview
 --------
 
-A baseline of core services services are enabled by default for a broad range of
-community cohorts.  The current approach uses a hodge-podge of scripts and
-manual intervention to establish a group of "institutional people" that are
-granted access to a wide range of services.  The system can best be described as
-fragile, brittle, and difficult, if not impossible, to evolve and maintain.  In
-other words-- state of the industry.
+A baseline of core services services are enabled by default for a broad range
+of community cohorts. The current approach uses a hodge-podge of scripts and
+manual intervention to establish a group of "community members" that are
+granted access to a wide range of services. The system can best be described
+as fragile, brittle, and difficult, if not impossible, to evolve and maintain.
+In other words-- state-of-the-industry!
 
-Last year your CIO came back from Internet2 Summit and declared that your
-institution is going to deploy TIER.  You've just managed to get the Grouper
-software up and running, when the head of your LMS group, Vicky, bursts into your
-office space and tells you that there are 50 visiting scholars showing up on
-campus tomorrow, and they all need access to the LMS for a campus-wide lecture
-series.
+Last year your CIO came back from Internet2 Summit, and declared that your
+institution was going to deploy the InCommon Trusted Access Platform. You have
+just managed to get Grouper up and running, when the head of your Learning
+Management System group, Vicky, bursts into your office and tells you that
+there are 50 visiting scholars showing up on campus tomorrow, and they all need
+access to the LMS for a campus-wide lecture series.
 
 Your co-worker had mentioned this to you before she left for her month long
-vacation.  She had told you she had taken care of creating the guest accounts,
-and not to worry.  You just need to grant access to the LMS when the time comes.
-No problem.
-
-But suddenly, you realize that access is controlled via the "institutional
-people" group in your Enterprise Directory Information Tree!  If you add the
-scholars to that group, they'll have access to everything on campus!
+vacation. She had told you she had taken care of creating the sponsored
+accounts in `COmanage`_, and not to worry. You just need to grant access to the
+LMS when the time comes. No problem.
 
-Before panic sets in, you remember your Grouper training.  You'll need a little
-help from Vicky, but with Grouper, you've got this covered.  "OK, Vicky," you say
-in a calm, steady voice.  "Here's what I'm going to need your team to do ..."
+But suddenly, you realize that access to the LMS is controlled via the dreaded
+"community members" group in your Enterprise LDAP! If you add the scholars
+to that group, they'll have access to everything on campus!
 
-----------------
-Exercise 401.4.1
-----------------
+Before panic sets in, you remember your Grouper training. You will need a
+little help from Vicky, but with Grouper, you've got this covered. "OK,
+Vicky," you say in a calm, steady voice. "Here's what I'm going to need your
+team to do ..."
 
-*Untangling Policies from Cohorts*
+--------------------------------------------------------
+Exercise 401.4.1 Untangling policies from legacy cohorts
+--------------------------------------------------------
 
 The goal of this exercise is to grant access to the LMS for the 50 visiting
-scholar guest accounts *without* granting additional access to those accounts.
-Since access control does not happen in a vacuum, you'll need some minimal
-assistance from the LMS team.  Vicky's team can configure the LMS to point to a
-new group in the LDAP DIT, but that's all the help you'll get.
-
-The basic issue is that the legacy access control mechanisms are based on a 
-cohort of loosely defined "institutional people".  All your institution's services
-are using this cohort directly to determine who is supposed to have access.
-
-You'll need to use your new Grouper skills to resolve this issue.
-
-
+scholar sponsored accounts *without* granting any additional unnecessary
+access. Since access control does not happen in a vacuum, you'll need some
+minimal assistance from the LMS team. Vicky's team can configure the LMS to
+point to a new authorization group in LDAP, but that's all the help you'll get.
+
+The basic issue is that the legacy access control mechanisms are based on a
+cohort of loosely defined "institutional people". All your institution's
+services are using this cohort directly to determine who is supposed to have
+access, so any changes or additions have far reaching impact.
+
+The dreaded "community members" group that the LMS currenty uses for access
+control is in LDAP at "cn=community_members,ou=groups,dc=internet2,dc=edu". You
+can log in to https://localhost:8443/phpldapadmin/ to review the group.
+
+Here are the 50 visiting scholar NetIDs:
+
+.. code-block::
+
+    adoe852
+    agonazles804
+    alopez751
+    alopez802
+    anielson378
+    anielson51
+    athompson526
+    athompson713
+    athompson866
+    awalters247
+    awhite131
+    awhite631
+    bdavis150
+    bdavis999
+    bgasper2
+    bgonazles239
+    bgrady115
+    blee298
+    cjohnson933
+    clangenberg923
+    clee357
+    cthompson231
+    cthompson287
+    cwalters316
+    cwalters536
+    cwilliams606
+    danderson959
+    dbrown402
+    ddavis762
+    ddoe822
+    dwhite663
+    dwilliams299
+    eanderson919
+    escott173
+    gbutler381
+    ggrady118
+    ggrady649
+    glangenberg234
+    gwalters810
+    gwhite647
+    hpeterson10
+    jgrady499
+    jlee308
+    jnielson505
+    jsmith466
+    jvales111
+    jvales645
+    jwalters24
+    kdavis686
+    kjohnson872
+
+You will need to use your new Grouper skills to resolve this issue. Your next
+step is up to you!
+
+If you get stuck or bored, check out the `401.4 example solution`_!
+
+.. _Grouper Deployment Guide: https://spaces.at.internet2.edu/display/Grouper/Grouper+Deployment+Guide+Work+-TIER+Program
+.. _COmanage: https://www.internet2.edu/products-services/trust-identity/comanage/
+.. _401.4 example solution: 401.4-example-solution.html
diff --git a/docs/401/index.rst b/docs/401/index.rst
index 59cd18e..16cee6d 100644
--- a/docs/401/index.rst
+++ b/docs/401/index.rst
@@ -17,6 +17,5 @@ experience.
    401.3
    401.4
    401.4-example-solution
-   appendix
 
 .. _InCommon Trusted Access Platform: https://www.incommon.org/tap/
diff --git a/docs/figures/401-lms-solution.png b/docs/figures/401-lms-solution.png
new file mode 100644
index 0000000000000000000000000000000000000000..21f8f3898adac67970f732293103a2eb08e61206
GIT binary patch
literal 32029
zcmaI71yoeq`#w$zh_r;#Afa@3cY`1uQqo;RcY~CK5~F~k(%m543`jH7kV<zA@jra-
z_3FLf-}<{|v5qt6?6dc~-+Z2TN2{yKVcmax9{~XYOF>@xIRXN*C~&=weh>KjP*oib
z0pWhJjg*wSf|L}Mx~tPG8+%Ix1o`OHG&C*E8KMYC^Uru9adE{T%}VL`J_tXJv?TGV
z-jEQ41Yr?sw3WZ7LFx}ueBrDWGmWcZADa7I%U%2)o+TOcw7NGjsPpaFq_0!6*w);2
zakl^I%*LGW<SarWT83Z1eP&egXKX6C+iQxkaWS7@5r`=Hh!__dZ<(pV6eK^;aEG9+
zTT*QJ@jqG)luH6{Z(9}L4dGQF1R>$QHpkTaf)19D6^dn(M@C2uKIhRXIIyaFXsU<!
zoT{C{ir@6L&?|n&*KjLy$<TRR3N!?@SDdIA2#KQ90s4YWh<#Gp;?r?G>xa0fveVJ2
zy%w}hSf+X7<EdP6;|RygH^~ezCxMktfwzMw9FQGLZID+<BDj6<N-SX|kcmfzyETHI
zvo{)P?`5arV3xt5q6x>*@)h#>+ku>T@S1dz*R*hDnB(Zt;Hw6B%*Lm4_>i0MR0{QQ
zN;i78Ra^f{mw?wJv=%vULn!T{lRJJadk8#m87}G^iSkz6h=4;X*#$b!<l-`?*>F)~
z?OqduV$L$2T@AF<J#g{UH~U-*N*JW9b_q*bemqU)g;NeDrhg49sE;{1(nRVy$a=_D
zZjwPklam?YXD_yXF9yO8{gZ$nLPa(bj9P~Hs@IJN!6qxN>TUbH_8}MQTv#XfWAb_d
zvd5u4oE*7&8E>J8>~1(4#z&1eGjP<tmB4dO6$IxiECl`^k!;Jj2qzl|>T&0=F=|Bd
zHH49-a60^a$i)a3&I2kW1uD#k!OsrKe<GUabJ{H-7zUy3BO+2gln!1CLdBPOhD*g$
zib^WM+KblM7NGv1{~Mk<mTHjZ`$t)5>1{mDm~*HiOB^I9v`d5;2$bI*qDb&ZA!$&{
z$YXtvctDNWOXM0NOeMxh5))$f0VN78`hE4tD@Mv^K`|d(Ki|7V6~r`(a1@^(k+MdA
z9J(NB^75f_grzB=E*fvRgQ?&)W@P)o5(<bg3w7h05R9e{Nfeu}Egfdyj3bQR8p5D~
zAS2nAH?GmmXz+&g83JK^j2wpgmWKCdNiEc`6caI<((`gyx!oGzQC)6A6)Dm@@{xrf
z?A(~m_nRr2k&WU?WcfY_jhu~2{lGZ(dVrc2$I&@$PLd(7jP#0!o>(*LODDHkiJ1>O
zZ3d1mvo=LxY;~KDd0v^qG|x2owAA!Hd(s+Gp}6c$m~#xjR2D5OLQm&Mn5zq#OOH#s
z^O-Ykof-(=7|SX6tW$2q`&{K*(vRha=7u8Rp_oh}jWxkG1|kYCbxK*R^P3UHIw=xr
zWxS8k4bpOEj2zK*NxITS490ZWxQj{hPq327pGI}kS*FCuGbl_cNaaH;9#tUD#FI%8
zC3z(m_ByOau6jMZFB7>e8T~0=!}GZ<qYk6mQ}C0|`1JS>FlsvQMdL@)NBiQJ(qSae
zCcF2oCF>=JCl}D|$-h>@%XiP8%g=be^-(c@Sn)(bMN#wP&`0Ea&5vI4Q;Lg;0o0)>
zqe%yerUR?JWJ&cjT*@*UJYO8Oh&;GX7*C#gNE0y?G7TiEBoC#FP($g2s2ON$<yj3`
zrAnlCL+0KKD;mq?P=je&m2Tenm0qQzKEwQh$&XpX_SwYQsZB0C{66b_vT)(>d*Kw}
zY%$z2I9(Q9A~8cTYJgDgDM~07reZT0y?AWG*f?TJZD+dBu8B$cw4?uCe_OxZn*_#1
z?HnzQ7YEN_g=AXwxtt}>N;h-g<u|CE<Zfm>elesFUs$8IlRT^Rjx1hP=>y@Ypf$l}
z|K`Fb&57#?>&a6rqj>gsmB(0*)wrYI)x0}+2j_<JFjS3KrCAqGd>!-2R~f09P#qV2
zKmX-gLr#Z5(yCCkav0MH70}x>$L!r83K@u=Q>t<J0<wQmOL0KO4fS>7y|Um`iCl^3
zHgc)yk=aB$P;VI&-Q2>elj|${CKo;FSo~Q0R$Qd=s>+oz?_2K7Cf*6oc;0#QS)0rG
z!G7kh?awpjZjan3k5tx+*PU1%FzXW05#caDP0L9mWj0`5Wac#N)N==Ev=UC(Mo(xL
zdKNlO@=hXc`D}5JvSjLJKF<_2(1VIY$!n%|*gZ=;Nw<fg{x!8VYL#M^w*{f)QWa9g
z9kE>vu>!FPtQ4N(&K81cLfC?%S!US*o{!zNy<Q3G@Qb;Px|=p?HN<^C`KfTcay(V?
zssw3Db}GT~)NyNWc1~m0c-MQ^h=P;Cl%k75O@v37KzK`-p{b~85>)MN-sInW20G)=
zB4L)rGH>tcw#rtEWSimZterl43l0W<EA_x=>a^-xphLcyy%D}$N5K7tK25s+M4iw1
z#Zo<$z4}Xag^{C|M@!Xh+0^5Sgw)m4l#)hLUg4tHW0(Zt)sadOJz-N}fpN|Wj8P<U
z-0_CQ-b{*5V@N0P<72TCO5$=1H_P2`zbBCtX3S+QST+oBrp@b?R0&&NgcBw+WiYAs
zn3>U<*_pR;B4-c|_VLRa+RUL0#Crst#O$;$^iZtuyWZ!|J9vG7dccNHMsP|WM<>WY
zME}}tzOHMIPhmm9Qh_oBIk_;oK$GVA<L3uo%D-57b2eER_b5)JK4NOTh`2JmS$YP4
z0oPGM_d`vUl&@2sPNt9L7Os`?$z{p?;9hW?e5_X3p#vUH9A2`V8|Lnv%Mp0D_SVB5
z%LmI&1+ITmO*(~LoL9<Zf>WGeu-GEuCN&(9WM8_y8Q&S-M;bV9QS;^H7<>pX)4)y3
zwZbi;7Ub|{Ahnlp_0+**TE7OXIli&ju5s-&6xzB`e&o2GxkkJmINvtwa>Q^1jtO|T
z@Tj%YF8!pWqp`fvyV3WIfA0%xB5Ut6l7&VKr!mplmL~tbv(o9nJZBBl8N_A8(cm_k
z*4(sEeKar1EB!3pIn8DL@9JL-8=8+-s82umMjByHrGI&|mhOM?7VZ{Uuj8#5t||k=
z+fF*Bg(O5!?g+o~E&BBQ3uo)00b!|anP6Q*UiYU@pS0^eb;u1FzLE-2xLxgHoDr~`
zbf2tY9b#QDv?+}CrMGt8eE01?(}LST$4;!OAa8h|lODZ$|7q}3^m^xdTiWNe-AYj_
zr~$b?DdcTdp<ro1%WBA6xDjzQu^X$ZNq+<POt%whYnHQjoxcoxg(*pg!X3rK-RPv*
z=lb17HB<KSu+kKHDY(@%aAjKsnmJTk<is;y(=dNtI8hpJG-;&bWxrcBSKSDmZLWha
zi){F&?=>#Ao(3H(X(t4#c{%Ai1)3-?z7%V`?do_F=|u5S?43`RNYJBRUz(Hr{V#`O
zF^k86b|h64P3)_p?r^={%ASrQm`*EZ;H_ZtQPyFTvz9~EdU#jtk$H}}mkF!Cz+ud-
zt*!7G&QCE#ldWdaqk;i&EdvdM>;n3Na_jto>VeS&TxJi-fXo06kiTX>;n+)AF4%<B
zfQ4G6{T^lOUlX2H|H!<lo!o0#MEj&!P;jA)=vG50PL2FJ0d2{F5aA7DzD^w`g3C`s
zurQN#NiCRe9}Fr<&q?J$=$S=8AGr68w45$#LZT=R6Ct=4-2<`g<44eyW;;kJw%#!R
zRX)$ttek+z<4Asggq9N(H8mbJwZKB@7=ILTXk`73pX{hSrSMlFDLz88%C^=Yl&y7W
zCu4_B#Rv$9**03b?z$?<g62*Rtfm%DW|piV2WKF$ML-Y+2?Cc6mhPrhAP0L#H$jjH
z&HwHY1g`JCW}~6{-!1NTA~d=x>Qquru9j3htlX^ZG@|#ZsHlWpEnW#emzMqeao~R<
zG}i9!&Vp=gUS3|TUR<nBu2yUu0s;bT?3`?zoGic{EN<S8?xr9XM>pEP2KhCPw56N5
ztBtd}jguqQ-MFS^P9E+eG&FZF`sd$Y^Rxun{C<<8+uzFq7RYw@3mXS3JKH~F1CI*d
zeJiML1G2Q&m9}xPbaVsWA<ECiF8sgy|IaVK-}uLqdcU9K{P&Z8{POpc!fba7_+vqT
zN$Y>#0^$<AFU<Cj=tb`f;*hB$Ac!L<NK0se5Vx~2vb4u;ds@e;_MWmlm(1jq7TVF6
zv@i+$@SH};Q*zS@lUn*i5la-hhDD)zQvdTLtt#8a%+0_>hK--Y+yh)=$|77x7d|SG
zqdDK*`i+)7t`)ysF9DZE<jTa89q5$L>Gq@9+*+ElK$PX>WqgmsRi<=nuqYWnlEU6V
zuu$dj6C@g{zdybhMf%nK{coODdP#Ba)i}=E9vmDbi42;bV?dZvh8>c32S^13k6&#J
zXMa%hVfy{xUnA&Ay|?H~PD@NowB7JN+GR3mZ;uE~3BdO1Z4riH`LO->eu1Q*Fg4Yt
z!UlRgT*N;<!O|$FCy(f6n>RYvhcZ)UzN*k99-%*EHRRtgdQ&2gA}#*w^DP%&^r0|l
zEmbE>3B{E=ST$R4#tkBpo>!_t%<%hl^{L`o?P&ZA+3v|FKSpV5UB7#5I3txdpXy_`
zN*d*$M+N=;S#?Cxz@%iawi%=M8v8!6p^JnsDsVcv+5X2X@zh<A{qcT(@xRHq3L|2G
z$pT|Ng8vcbUl;hIm)QRd|JTJT=x)>-qAetue-`q;izj}^<o^-`B3|zS$`e1=E0#&r
zm|t`JYmm;k{fnL2#Ug`R#~RClwCffoXpKXqT}gfS`rzBjMgP$@DI5`ty{048PsfBx
z*+qu+-(L-8nBLyNojyIV+nOvs?Z6SM6AipNkW-SE?|l<65&c^Xz$>=df-~?$#jcN2
znt^9(Y$v{6H`5!Gn}x@d3rz;xTx?jtXPbR%q2TRd3tk$ZmaD@7i&Kj|6}IN%<ZM6@
zc|rS2%Jqp)H9zsUc?0{SABj!AJ!KL&^#6L3JIl+4RtBY=^D#BC`L9}E%pxfRK(<4<
zvvQQ^;Mr<B257*=;hJN}!q*o}OvX*13Ws)56Yn)bq18mG_Dt7KxX^B02N9dGJ$l<<
z*<`T+w9018P$%`-i~gzrE_3@$sbBg6h?&ZZpcfxj>2qQW-zse-o2jrI(C>;NbXe(*
zKZWnLHugC$G<jz;_N6c+>`a$;1YE2UL#yr537ND90sDF0L>u<X|7_k%`@J}#(B+T3
zY^ws7mG0<SNVd=vuhYWz><FvC5rMzt^7G2Tn~NS?1>Lp~)H9pS(i8>Jsj!|r+4#qf
z_Hb@&Ugu&!_K|HU)G{DSC?H--z|{K4lb36(b)DH^0Y~dYmH2duBt>bgMz(TfE@5i}
z>1-N{c9TUeD{{;<;wfC+10t)U6U7F69cH*Um_*FZVt#1v_?%iGpmhj%uZ7FmtO;7{
z<dqxa+>oLsI&-)Ip?pMh1_#zyi$%)Ie>0HAQc17!ZhOpX6`>jL5Bux&K&g;EZ@Szp
zJnbY<<HvKGwJE4q|EeZ-J$`w%=M;q@%(>SBFQF#E711&BNTrrUcQdH4h$g^;3AME-
zvDSBzL*Gjv8`L>}$oxU{^m!)+#v&1(%gKaJBL)}Dkyh@tdx~u<rAt@+4WNv*Kff!n
z#Vfy05LhQ6Wq%puv}sJ~w=V%-&vbgAF_I^T(;<b=D=ZOu56d;hA<P)o9&WU_k>&PU
z<ZR9j_KDZ$*t!wE+vqU%Nkw(lV{^Q(JD$`klEUXRG%_)^JJ&Lpv2nLyYx@WyR{Q*;
zqCiWOB1sdVsu8sV(AvcSJEx|D2tpS9@%Y<zOtvZpu;2GRPozqnQsdJuViW$h`(oWL
zP={Ip)}#oHmY=iLh5qNTNbSm3DpI|P=EvKW5dB8a9YY-SJV28cZmy2h3bl*h%>xeT
zwDtBH5>M`eEO%;-BfKBfe0>U?tg_K$05Pb%TkU+ZSnG4LS<ibZ_lIJN-${KAv=YCI
zah>VZ@-qxE<LwXPXIj0Et=FC#di!eI2_mPu=?@ZgLKtorNC{ealm`pcz>bwxkk?_K
znolMTBG@rVjUR;FkJzBGF#!?xis@BZC(Zk874J6VcnEEmb+jARpFxC=;(RT0bE?=p
z=iJ9sSheEHo6Z(|J=-xD>Q)2VPcM&uniD?La_-^s%$W0-GV(m=A{KHv*zdp*l4WZ-
zH;bX5@p4WM%(WbC^m0l!Kbo~G6-eqh-)p@Mpe;o!$K!31jAC!%*DO%2J{lH+#J9Tt
z{9d95$q~seuwL$r)-F)Z?roMqr!j``uf#cf*|f-2sk0-EM$UUJ`k!8ImCA+TAURx}
zAMl!WqBGbp#br27mwkYZGHHH_6MDS`f`t=jS=-H2e1vva8v@2Tyt2XjgYu8yfry8W
zZV|m7%$!3Q))9t5V3;ce&B$L)I>?Q57$y1O3Ua$V+1lttrFamA1ylK1O~j&Kry$%@
z?EvNFyij!#gPra`YrR&?46ZLvie1<GRfDntLoRvLg@+3Qy<|s0T_}Au^sXNA^Mc_q
z5y)5c=G=Va(Sh;9;WhzNlV+b2=>p-cqROlvrnJ;%Vas?mUh8kI1WnIQrc6jBu|`8j
z<$&Ocl|Y=6dwiervWJVy`_RIm(X*H!)x`fKbxY`{Sd^ZypdnvGdN1jRxG07unJB&X
z<^FWGz3COKH_`tJ0t|_kFXlndAf1#6$h>ar%9%WNX_$J43<;;zfI}Ik70)1|ws`ZE
zKItYmmNlj(mf1n4#IRoadPU}bx+}dFs|_P51-<0Tce~LtDnneMpZO{H9tjMndy3!7
zsifOwv2i2`j{NBuzE8`#gdLNZ5kjy+&d*m8yeQZuDX%Y*Ps8Q<VsrB0bvYV&vH}v_
zOgYrjx`2b@ESC2A?zUO^M?4WfeUfO|jz%`$=;dYk{w<l<?bVTEGT=4(+*4=@tN@Xm
z0t1ugAi9cW@N-3Xb0rz);UdaDzY1n|Rq3_CNZ+Ive(eW7*5_u%<qbQ*Ye^etbQJ#(
zWR3M9T*Fq_eh#N3nk?&>#9Jo}1)E%O+&g|hjoOUMEJ|rt%<Of!I&Lujx?fKO7HL`%
zt4G|Q6T_xU{Ma6;z@c!QAbc3*e>^JZ82mk-48tSW^&K(lL%Jm{Xmb*+R1OxkImjRM
zJ;B=akUXc8_6dI)<?Kbvmmnfu`tC4E4d);W?@3&r%bx|sO6jaguRv6OCacL|@Y4m1
zVTdS^(VB?tcQFFj%M)*juxoPf)g;IEgxVM~D#@NEgxD<Z7{1Z6rCHqU)uAQoJP<<a
zaBpE7R8j&Xj)Th>lI&oJ1Dz^0fyfandd^s;3s6f0YHiR$A`DsTE@_afKC(gL>^7SG
zu-Ot7>&Q%PR+p)wFwz^>(hSH7J+>xC<GC)^xz47}FviM8*N27n+`Yx)prmKduA29u
zC(nLoNi>PR7@epD<I=Hp$3Wt!@~%TZWA%B&Tf^An$7=-;QMkR%9F@&SF8UQMn<Gh@
zIli^Lx9<tCBdpD6)FwEj?|ppx^v$>BOyzgYNlU7IYxxmpv^L><!m@mG&Y?*-p^1VA
zodiZV8a=Pc=V1?N-e2mu%EAz0Xw@|aO$bc2og0=yFtc=G4#!vdHDFj$4<As9&UrsU
zcau_1R6A-zqnvi>Ay1#PNuDQS!OXxW;~!aTb#??%`!MbXrK4h+&`x!DxLiL}55h2h
zB-z8C6XWG4tNxwOn9en#eFBF2y3hNq-zY}^bK0y1kF9kQYTUkw5YjW^a!DTEFzgps
z$$mULpYvWTuEM0IpT{StONDWj#-(y-oQEVfTgPY7wb<PR$ogi@{%L_0I7oV|e&4>0
z`3qA#QsK9%7#a(VdCdN_n>NXiuqKYG$L<@7K)r_#=XaB;p2VXt1nM?1n_(4O|NL~+
zqW!W&xfJ)Eobln5InhPpcDF!ccbO_G`?><SIXcB*-+2I)8J-UM{PDXmHJ|7&&A*k_
zf(^+x*{A|E*z#CcR;@#NQY|rs2*1}Fe8X?@d?s+XU#ImmQ>+*EBhF55#?J`p6iRHE
z!fH{&gJpx;OtkgJeMX^d4)G)_a`b=fJrz<P9zVbo)DvvfIDq(cDI=SR`q@*KAT%W)
z)82x%qc>?9_k=1@r1Uqw2mH(3_9_4=D)z|y6RTIVRW`CVcESWOXJ%L1dsvU(tjp_W
zq>$0P{XO}+>{a{{UH&{jVJe{Zl-d{eT2)}};eRJXlgNYe9gLd8v!Y)5pNyI&(GqxJ
z#e-r&qCb)rAa9N$1oG-~R|anEf6Wg!n3<LemSSnm)oM=Ul=|le0+Y!H12xFyTg!gD
zOg^WY8V9I8kV?>svFKNoEe60Hz&8x4S=K$2flV)p^(R=H_9bg|H$>yBB>ok+rKx0)
zzHX+`yepb7cUh6m<g$7#0w}v93*~V4rRa;VS_<xFlh^f|UkkTyZ}x7p)Ei(Cq;X(a
zM<j!70nUHc_mm)UU*YW#;>_3=O$H|2vX?O%J}dEj+tcO=Jd^uvm!~^+4zpF|t+zMO
zXWB&>%PzCj|Jp~Ivh<)Zh%ph`+FeMsI@*BLa$5H50x5qn=wLazo5TOo-R^t7f(4YL
zhiqkbFoQ#?ok3E@>0cEMl?NcpFGqb9%|PPq=6|+354D{taWDzIt}d_p33Y09kfZRn
zSZxB5NVi<Z3TjZOync(HHz;Kx_Fo|iJzrA13+s7sN@^pnz(baAc}M+BrPG6Nxr*hJ
zXgnbzXHNuohO>oOL`6kMYlOWIbtNSwa~&>!6{LTQCXo}UuHMX8T;vFPY)TJHL_z7&
z4b2t<Z~ZMuo%&OmtO|8XRjV9^-tlO+_+3atkN>+pmcVMBRthZn-euE3wy)%F+=+J~
zyZ{7$3nrbCsxs?C`0<~v5ST#XT}iiEZ*ehcGxlj_103l1rh1{=JktNLkAc^AoKXl!
zL-Dgo*+y3TQg#4|R2wyV)*ns*xpfr~ed+#R8>{XT3asKMMUznNf=^+wN$bLWVpe-*
z>zLkpAVDO^uGKEqF9|#G-pJl?4MLA5<$9%@%lm(XAqdQC{K8^pp>kMo;9LShqdq=d
z=_x2Nt32pwyH#H@-Cc&7R~M}OA071pgfLp!pPUAyckBV*IfX?)ffoN!zMl+KQxcbN
zf1>}#gzRO-+Zi(F*|Bu~Gw3y7i{By2a(`8&|NOP!0$w(=9br@Ve_sGg33w$a`JZtz
z@e=p@Uhye+5dPb!<;8&29&?T1{b!t+IPr$bgSW!ouDp%H|DBaM%3v;$=%U|I`~fXN
zaF*hGAR84p`R;D?dyvE}3~4&QyVUy5^`OOkYuszG+iO0{QOV>T0_@6~T*%X1tSS9p
z?n2xLqjLwF*-w43#lP71Y!{{ifEsA=-<G>#9eNX~@3g|8HK1AKWL(n|NK`4R4t{k0
zekB#sOiEA;sRaa{W+!X(<vHEfR4I5UlMfP|^GPLBw&c3Jhk`3C>EGM-od)n-MASP8
zkB~q<xRTRZ0&ZChpMiSF6DX=@&kt72Uu8Xx`oq79Zv&EyZuZT^laY82;30TyBR~aR
z?6xr+f!>Z;<v8EK=%Y^X$My!#NdtS!H@`y$Dh35JhKb{a0V%K$8*aUL28ud%6RhFM
z@4I`cfbDn?GG<yXLzRWO+5tlk?7-x9|DhiJe!9Wvas2OzkU0YyfJRoY3VM&Oj*iGS
z5`>6c1XRDC9awzRZ=PymkN@<b_&qRgFbS|y0x3QzsXjv_Q#M@7vZqnsXg&f)rn;UZ
z-~8u3bP5N5CSs4jC>%kMp~6C1MLGyQ$4LM7%KtsEQqnH`e<`&<dXTWFz}doPe=>E@
zx1S>)q%3e^^8iObc^yX~qF*nL$LT}++kpzi0`XwD0o?G;9seAt@azHqs9mVdvNchd
z&SO74vfF&NAZ`4?-Sf-(pF7JT56JMIQ%r>WOAK`s*v|rRO}*QO{@z0KPF{j&%mZ<{
za$3e?+22ZE!2<}=-XG3=KKMjER~iFw&zUM<(Rn`wd)J_=_Rp}n_k+Tvm-v5JL+_md
z>p^s_db?42(GD^5Xo9rxg-92bv5bC=OQiz@kG_do6JjtCVrr*qY~tx}e=L4V_1<-I
zW<}KI4Tm^Yb@KEo#>IXe3CY)pKizF&7$7f&pdWeY`7%^C3fqXt_v(bHh~&t{0{rwN
z?OK2DaMU*mDk_*8?)$Ab0<j2PxIlXSsw<Yb7VzhCG1Q-F42K&a4Ud0qaqzYZAR^yI
zv3OBgbafQd^L-dE5Xa;>P`m@pR@be8?f<n4xVVY?qf_E2oJm1!5kUwv4Cr|eJOOyi
z;rPesTM)em-LD((yfg(Ml%F3y*3jV6Ax@$k%Jv!*>sJ>6CA@Z?ESB$fc~2I}A^hKI
z?g`4WCmNBc%5N(M_o1{HU8S<<ayfyGV^`U1t)`lK9l+;3{F!x2QfDoOqa8(tN%xaZ
zJq9ND0@yESs{Hd(u};&O8fsPY%NIHyAPS2yM+v&F%HJU&cob*fka0dgHXNLz#*+SL
zZx{&F1-6u%8Z&F0%4P-v-OW%WDmc!YUJhM}XV{l1ZF-a|ZFzWDZJn(Z@1FENpD41v
zF-yWDd-2t0)&G3xF#eWAY@wg%DJ7mLa>23EliV1TYjVP4C6js8ratoaiy2m-Iu!KK
zyS#r62g&+ywGVG}1(P~VL<Y^PO0e<wzO6DN9iCh42e2;IjjtD-w-FWPSUJ2FoyUj=
zW>qFcf6UHi-K295uU$>s+k#{uMn!2pbx>clqnYM&)0uVeaWL;`ZIa^yIr8W8o2U!9
zf|grWGa$|=ZXHTlk~siFSw0MD@Z5QfCtd$IhSm7j^8dG;VQPXe@pE~FaEUb2{T_i{
zo}y!QV&#yrxqcs=N3@GM!w8Nzi#|i=E^_&}K3UKegv^Vb&1i`P@{7PGf5-R$8?m$f
zGv_aj0!$<LngMVcbRAz}TdQtN7S@{tPWrQ7sywTXvMEoQwDdk$L4}f5M%**bvkXrE
zA-VBLaSOBq5k#U4yeh{6^5ajc*|sY0xXXb=iEm5wQ_gQdmMR@r{k7VCzRSw@W#4>T
zU%S@}M3Ds;@17gK#=toW=`j)QBEa>U3Ix?R$~NgbycV3_o7_TtB0h>7z!<@9HJsJ^
z7Ec-gq%=qj!=e`ciHlL<$0(}@3hnpXLeE0gdFgM^gNpix6kInm&gB`&LU6DR&s0=)
zhbD81GlJeJgj$b%iod=(f~Y<$msN+K?r?pv^7zwPfrBOwF7_z6U<K@L1ez4i(YGKk
zM@Jv05`2;O@6nN`hE6mQB#4AiMB&?9q`dYS#YT;jf?m7!SdY1#y(L;`47cO7Xn$jW
z!PB(w)oX8eF^nnfM}C$*?V(!=szpOw#lo3}OIX&G+@|)PLQi~NVuW=p-Frat@`}oj
zF@=TT4<9A}7RWsV?H#ct8>%K%`b{1Rn-PS_ytqX-hF5{Kik{1Qh@Y0xj{rFDj&y<;
zHPVl6QYY>gp-0kxW?#M-tDEY4l2H14Dc;JtR(t6*^<EFXK<97TN|;Z{2}-K>(*0KY
z%~}PvWL7p#G3IIMT2h3Jp%oDbm^qg+YCx&H*S-W~imUBQvI!K~@+6i+=;MXI4FIUy
z>TBxSzJ0m2-^^v3v&d;8(mO=Kjd)Yvy;AvVp!F2`wfRLiKaHAUlaTY&ZuTk6a*=K^
zx`sj>Nh_2V#SuWKh=_?dh-7vEJVTm_e5CEiA0Y>q7RB{rPoy6O{jtA3wz{a=LlbF`
z#-`wxA24+k95J4O@#tIz9syhwKa#mSoO&7xB#>Nwv(5rL54>`b|4_ku=&ORTN*nk+
zQaF^cR#feKwY}L=K<6CpEQNmr`SZ{2Usw8x!Hc#)G1dR$<@OVl*STm~p+_)h|I6d(
zu(ppp^sW)JH4b(FCZkyR<<CekNYLxizR~=iQ!mL+rpSCK*6e1zvmfEsYp(hWwq?)o
zPVh#N{#S=8E?)Gq8?_XAl|LQooaC3jc*h?jABZR^o$iYJdEdQ-`+<Gc6TH7oGs*+0
zUiDl(?X8T$i$SW((shbbwYOS0pAB}yw9f3T>~TM97Q8OJ$LF<cNPLeEaGV>6k2x)R
zMUlybL1jC0^<xfJVo36TRH!ql;w4O0<i?rwjSE$w9J{yVQyq-xNm+!028>fI$M47@
zx2uLC+wktoF_L;qEPTFK>wD%15CJKRtHwQXk5-JqKAT^pp(lTo1{KJ`h75ic9V*dX
z9Lp!(mg_GKnk^?pJ2YQ3`6pTwVuiJOXL4G`V1@#mL*3#-?|C5mZw5fk5^3J$o((LS
z$3OnacRJaF4GA}8>1wIR(7N|`qIN#OP84jtk5;Q!o^i`J=z%Mr1_No{EC5A26=A%|
zqI>dW8h|H@%zIwz(=rN(&;GMk+)5PJ)P21cn=b|l^sn}0<8YYk4Z&eX7|$>$R?b+O
zJK%svU@>X&drBd@0BQ0*+8*SByg64$O7{H6&vZTxHl*_l67#*lDfh&wm;faoU5+#9
zh#44#-pk}fBod?Ri7cxbe{fLg43iYPJ|0uCyUv$Yg#S|nnuUv(;ESHz6bg6ii&n(p
z$#0%KB`i9~yYKzT{86kNoz6VVM;FJ%micIKB}CL<nSoAzmi1R$#^pkBec^&U`R-|Q
z>1P$AtB)MP>6URprTauyE^X}}tGOnlU-xq(F=-c-0jvVI=4Ga^cf}e6yok&5^by=^
zXLe1|DCMXFVpEX)YRbqfo7{8S^eOqL9hyX%;21(CeE?>EK37WqcgB$T=uTd3T%&c*
zG4Ct|1AKjc8phQ0B^MeHG}tNiR4H5U#pHd$XBJm4(a8dus9o8Kc;jPZW4CF!9hbfZ
zYu7oO4rKD_T<aZJAHS180#dO`JX%?ceQWYxdooH8WgBt0eU>mC;n1h!9dn~qK6<z~
z#I&=A6}t^9-FqF6XgQ|w=BeRiYE4e%RS#JQr>I)f{OoqHy^q|WvH!^nyYbH&HRP@L
za^UFpb9JL%0ipoTYN*5fKan}BqXWeV$;^0{2?=47YmEQ(RA-j!Q?wJoS1e!`bqH9G
zAt83aoaJlPK+*1a!f#I&B_4;@`=SfWEUr1?kGOCr80R1WWFey(5&T0(@6_X48-Rwm
z?N4tF{!Y05mwBN@0j?Vnsd(%kCHm`vO!zL5PiP+gYp(xfY5zYj!1WN=3gwf|)&uA^
zCiJU|4R8&>w@rBfSVFN`SB##^;}dTL^gFKk=5mY8>l2Mkj4n{Tp9yU3&Nn&?X9?8!
z!#!&gPTV-{Mxp+ypRoR(DsCuHZJO<WvX-ZDrb3?sc(_x*oJeEkdF>_#S%Q41h6~*+
zM1uib1xo7FWNJ`jU!E=GHG6e&bSBUT048>TzrG{Crr+_{#lay~zi_ElBBc8s11w(p
zQ%{i;(3>vSGf#mCrB`a){J<%Q8IE5E<W$=L2vjv?>^tPSGn={{4pcDR^lCZwm9K^>
z0JGlAVNg;a{mXZ|aw2;BxgO3>R7Zaczy)w^u`I9m0Q+>hmTsaS|Ck3@x9#bS6?kS;
zj?!VGP)BVX4$#~?05Rv)GvWyll9Txg1OVG-lIuC@r(5foeWcH9+%)}K>;_Z_3{w%w
zqF2%RYB=lXX|{7a#$6;D)@gA6DZPVn0Pue~m^-#}b>%EZ4dbu*m!qW3SF)la0rqk_
zNshwiIGq8~0*P1(c`1B6B2{cy?>gM!I>^!UM3B;$7^OP|71PjUJB+p`e=659X(2$<
zuGPE;J5$8B2EfC5v4ytT0iY#^kXd(xyq&j6u52AHZcPr9QoL}0iq6`91|VHAXM;SG
zVt?<KGwz)ZqWlp2h;D&~#J2#-yDM>Gh}m}OYgd!Vyyjd~6LDDqlF4hPddhf<buAc;
zq72~Wpx*en;y~2lq=$e5F27`Q7i{?8aaw`>Ycj2A-;>AzY@p$73#G7D)=@aIvGejr
z-EuQlzu2r)CAQ}AaF@|EvQJwjjl-h1S8nE<!>d^sLdHqyCIK^m;MW?+gglGp1K>MA
z^x8W#$8`oE@@irezfqMdo3N<*I}mzW;(REBqXSoBXSUichiFP;A5!PCvRwmpbPK`q
zH1RtKCxrsKXC>luyg!ud6CWX?MgB1lZ_4BPWU4XigL#6;BnA}<lt4|`l*OQiyGiMe
z+IjI=y{+!kYjUB61-y8&NL`iwC*%b>ntw;kUQQ&q=<r~L<`;7ytKF7f3dIq1&W-G2
zNr3^049RljS+nn14UX8=h|w@WaAzZU160EfU|3%Dl6T2$CJ8a4I@Nr-^7m^4r)JC6
zo6EvG-hLSK2mk@=G3xdnNVL~e1e}}JlJB8x^a!<snmAN1sZrv10brmymbIaGt^M3{
zTaGMgPcqYM!MleLQMWa~pXLK6fNA8Rqf8Ce?}vEo%<?Q_9BfF(838;5>&C17r8Zv6
z{)Zg{TA$Ua7oTiSS?fyA>pjH6ivi4zS6DY{Awl%A*Si*1*pO)<C*9bmFIvSl23O?a
z3vmS3_&c=a&gsu*GO8BP|56!ojNTPDahEL%n#61LrTK44lGX+QBVX(cYiAwDatWb!
z+(#FNZ&x~+`Snsq@(1q^@hwWXzyIzwaU3ak4+j}$26Fj9z=mv0vJG%<UJH>-C3Q64
zPwF>vwuA-gl+xUx8J)D><d=JpVa0*BH;%5mQYW~AGO<L}fOZJ%#W_tidAn^8(i|7t
z&s4B#VVNGUrl>XC2dxgeZ%qyv6^cbn0i6?b7`z!H5zhRbNK=W%u@N#paOL7_Ae`H;
z^`{P-hs&Xv&jC^_AjkuC?{8-L9rg{!-s2J$M>lKo1J(9Y9>ScyWGnrOwoBqb)h;m7
z=^=^-l=isjBx)!A_#(OJPQATJwDU~$++pn;KYN&xxfkh+2YOb-OM34RLdgNY-9)yI
z!GqOPT+g&|*80`tUi#UWK$FXJ02L)+GiG)Qdu1vWiG7kuQ)-pt{fWTSo+^x$n!1e;
z{aa`l6-`z`w3yh!z9cM(rV0ClwCDqG)zX&BuLO22M%<;NWl^8N*3fSuaM>u+X<V1p
zBhV*uLH9Ba^X}=}n=>&u0Em)BhGP;7!rc0w7KGtU`2MZRQICLl!QsZljf>ZtgMy13
z<`&+ClHz~pen-E_Kg{<Ce@Olwgk(&jXz$x$j?YUETm62#J;T*Ble$iyfL0z}5VMR@
zl_xGa&5z@N>->=On}LMFk8xo_5Elu78H&`g`Xd~i?>tk6=BtlP!y*sfvJ2S*nEkN%
z;kc&SN2PP=f%fbtDK~AH5ohZFEbH;XuEjud=B|&U@q9UU{*$Jf$ix~54?8*%O>GGP
z&~^awUiDaHzh~>k-?ge)aFDB?8I0BX0S(~6s8rL~Om>^NK$;*3PCKHx3dw`Lc)mk3
zzn^v}I4OaWdFbJ}(?O8T4<ZCNW$E2#NwZ7~_uBi>?acj@^D&BZV;*l|xrjc{kl?%q
zup`o^HS7Sh&8OD`52H5gg;FyEO<Or`*BUmvA0jC#02wtz3-9dXYlO!q@*n#9$<zcR
zqcz|P97eFyU##vr8^=kam%-k3Of2H^8#TDQyx6ghWPFb!=2;_SK3egft-Gz6wkZL=
zvS)d|0Q+zRt?$`C1~;FT_`^?GThZ{8rb*4$jpu-#fRf(OvkI34M)!kW+63KLB9<Zm
z`Fza*a|yfb`#TGyA_8oYAl6I9yuTWSsOYVgT<X`HwJAvZN8xI@CQx1oaRe?^YebBd
z@-&7OO>Jl&tHL!%ZT|rk&A$Ce+CGOQIO4&hWmo+ST{q!eIuTiUU9hOX;V2Rc3f-I1
zhRtUT0B?jxZL_+qE*(^pMSv%HgY#mYB!v&<kw3eHT!zL=gi$F<<+*YI;TM8nrTBIa
zk}OFIeJx8e4@-hpdG6?MjepV1e=m{xevmi!+4j?1az8cU1L<_Q^k<5X<&^%%8dGXj
zx6%VhAEaiSg?SdPnl1c5PGvgA-dz}4ixE2sVmEbge(Mn`A%Kp~Mti_UL<q0ja}Gy^
zg{-=J6Ol=iylf4)Hf+JEmq)jhT>4ex;TEDShuqrG>(`e#Ew;dm*01jp!-CdUCyd5Z
z)nv1i5bVji*Q}Zy4csjYmjSMY4)f(33KwmU2io}esKW<zyYN%(`(|71htej{%+cW<
z!*zASlevmQjny;A@CnEbg<nq?1@G;m$xc4)tZqt&f$oap(AajeA;F}cL>4#Tk%vz8
zMuQaiDDH>h8>3D3V)#mY_f@@NPI7u)ZYINbp}GTdRmP=&DR_TB1-X2dkKjX+NJ{27
z<*}RO-;@3R%pRQtg#zZ1mEy;sXu-hq+KL&}Xx$^oAApsW?~r$qML{%rOzc1^tQUBD
zU0XODnW1D03S~UlISNLPT+vT)Rq`=B=Q3t^HU%p_`q<S0Klz37aHa%F&T~e;Dt7fK
zHj3xkPLzx$Rz05Y(aXxl--dkg)VLl#y+WnkP9|tr9aj>jnhLMAGHBO^FGCI{_XZ4h
znv#m`m&OAk7#P!lUI`8ugVn1*X`E{+_WjN!7x{q<`vQ6&{+s|39oyVUPc3#@KF0b!
zp_IUyG2+-HdIp~#p*x0RW*Y#HJIgjI75LLs0zSyujT5^njk6K-kyyk}HJTLu&o*MB
zJlsrE@PbudP(qVEV(oukwx;ZqE00#3E<J)wzX>;)?RM~Wqfd6o!r~J>8!`{>DX7TI
zx9ouR3?>2?;bZnef`bxAg=u?}n~P|bD|17tuLHVAw6pq|d1_)*Fz2@z;nl|NrXGDK
zLnxFV630}ST`$QePyRx(JD&wJ6N^p^OjhJ6>QrJGOhFTrT52o0`k{-#;?w1BYRQ~0
zV+a`?c?KrRlf$vgTPK;zE|>zU=i35x-_lqX8<yX1<A~jvj$xR79k!z?JTBJsVQnY{
z(qh6rbBID9Gn`V!)mF1TZQn!T8KPn$%){T~DOB#Nnb~5k_~h#A<%gcS=(RaQF^0`R
zgLYoH|Adnx>8+Mf)vFPwrqL4ZdLQji)&g)|To!1kXh#~KnsH%(H47hXvChHYVh+aJ
zWW^b~mS82(;~%azle@MvvP4F*Y;&^yLYvBIzq8uiW9qCmQ)jl~<hJhG=Gv{3T23$N
zs>|NyTaiX;ibLC1?;7V5%E{y2v>NLnaLv-<MRY?@;LiOX!O7T3<|+ZDz$&9guX^5}
zI|E*Z4ZR<<8BI*#zB{=VZ{M&5WK1v{^xR)(vT#ekwGS-0nWx+|P7u!jN;quNIq9gk
z(!zGJa%9lF)Y5LD?+ocU3qIPPXMEQRa&|bHYrZr+sKq--{JdhnPtDp#;<Y_{)L7v&
z@Qjpi&%t-EHc7i-|AVLN8m}q}VYSHC<P!nrPofKe8AQ9PCzF!pJS6%y_>-PU;2L}D
z@-HuGmMWfxK`A|mT!2;e>4pAu!^^{WVor#Bh{NXI+mmOd<zFycU6qHwx&_bARU{Cw
zMdg@>B$n&lUcEdE@JksWu5Xgy6WW^|u-_=juJN?P^)<QLf4MBw6-`PXCdPa*OaVR)
z67iWl(r%eHZIkw{-m;UTl001N+Z#6E2E_#IK-25{ZfUKsY82@TbsIM}g*e<j64S>%
z`JgeqsH@7pa%V{gcTE3G@LXg*pWD>2wSXd<hRt6Y69YO;eU3INWl*x0_&z}vx$vI(
zd?sc%BdPNwrfQSRpk{W2j5MX>RvU&_eMyO}U$)0ruW|>h_AJ@!{TLDWP@bpc$L`6E
zH*#52mp{@u5K}UZpj9{Zd*g`OXJwbF_B1H<H74mp70)8c9Aq#bR$8?Lj2mZ)c6vyi
z&yzdAp~K=ouF7p4znw@koI2jVk7QXa8~;8=Ozs+J-0W^oWwEu3XP>F9f2+3VOm<yY
zDt6)7xZPQzI_L_vO)a%DG-*|H^fC)C`_@8EQLFgzb(PrdwFt>x$LaKp6pN^uAJvbT
zdtl0P*dmVS{QSr=tI$q{o4qWRJFZ5QQ0I@eQm{=cD|kok(ZtqlaiPQMA?2yffPjA+
zqU12I!(yEpDepLo&Z5I&mA@43yEI+HOXPl{FE7_(cJ)XOhxFJkhmxjH3pH_Uj=Vk5
zVJ=4tE;OID+P-U_uA0?&%5AS}YfS3bL<Z^p$oy3=qeTLG0`^t)p8k4oAtrO7dDh$d
z5XF?4uci*lD%?`(YYSPM6l+Qv-3@<=yfgHOO~45&<p>THb4<v($hzK(uXI=<z7Fkk
zr=wlnSV(ZJFdo_~V|wgftIAe;KTP(K??G<u_9;$D^+GU}_fbs3&L-XlYRI}t=Ew?K
zCc9JC{MqQx>Gnk_R6(w~=53%_rDGmzRYK_nYlie*{jr?r7J+guxDuyP1uN{iDAd*<
z3)JxHxa(A-%;D%%Wir573R-U0DB{=c<|(^#gpUC>NrO~yMeuqU7msE$plF_UMr>Fd
z59$~#-x}>uRMoy}Aqs0K_KL?PTA;`QB@o!3AhjLN@gdKxKMf2p-5aJbWze>LT>S&~
ztxz`04t#dimvgx(;Tw2rP3qa#sCt#fQKgp{>Q-Hi9Y)b!VEgu6@HY}`sRGe8686bu
zRHf+w;)L>Bp=+Bh&cmzE@WUw=#UZYp2^$F1A=p_GWb9*>E?)JZe85<!!+TtCqOp_J
z$vNH#KKXH&smBF0W!z|=b!3f|b5%#stAlbzq2VWWBvcIflAym=Zsf3@Y~!i*cC&_l
zKf)9g$cj}`FqJVJ%(rV-iv?Ls*=QnL?c2ut>S+GvcF<68=v=`T{aqw<2Txz>6OOVr
znaf~gy8i~Y%&~etl|W;@F>zy+u}<w)yq?sVO$fWINv<@V+^Nkv?-P`EO4H_7TdmqH
zFEBD2ZPK!<uAgk|DBYkt{N})e=ai_F!f+^3(q5>!sI9je@4wA!<T^hqhrk7$B5|tC
z%#`Gb)%Kdx!xEY4hd~<qH-p&iC1o;&x9+8ZMep|7tI=l;k#eQmL_Ua?T#n9$m(2Ia
z4?KX0_mVmIlh$&P-!`4^jMaGe(0ieH3r}%3bCApJ0Vm~5OwgzU+QN9*h2;(1Tu;B(
zhHlRnwpOK0sFo`niMdb*rH{AHs$8bnfhT!OGPff6{0?ry^xXN^x5cL&+(YtRQky3_
zT5h*U8<);+AHi&I?@^F47q?vLTAv;3;J_1jmyY1`Ua+eb*4jw=g`LhpHQ=NV1!oi2
z!v0}(aX<sLUwcGkUXMY#bo<r5qIU=8+1{rYs_3+@ryPvz=FX0c9SQ2KS{%4bSrUYK
zhQ2x)BYd2sl<bRrKR!!0b&rGFc6fgr+buU6uJ?>FfAlKKQ@d4*Kqya7Zi}zxqqN%B
z)hf+j#1s|ZT|>C$2art9o5ZRz4vfIVf!kR7Tyk$Q<KuJkvCuNQxNGC{bN{C0@HW4k
zNC?=4RO(iG7S&rqCd4l(Zu+YV6HO#_RWDQjvkv6rg(5r&y=`OF^QG(yhb}VW?&{W!
z<7Ef<u*0yDcpzcO;n=jyNvV4&ERcQ}&W^u8yf6%3y*za2Exu2Bb{e@vL3z4ZkIm##
zhe=2~&SH-tvHOO&54Lk#WP*<;0^4cYfR7*T3?OrOv}8ZJN>q~7o!uO|oel4R${aQ%
zQxI=~Q+%)<vE`5pyP_hq=~PnH7ASlq+Ku#oQ<?TBhn}wr=oQ4Ikho6aaXpt98~o`g
zy8JQ&4%(=sq|n8qCj~3<`;#@7HoGhf;6dKu4wU2&4CC>#durMS?SWlnb(7=vy11Tv
zr<<kQ$NC$yT_>d#q>IhZs@LJwP6|upv}jvtXALr)g8?2SWOG+PYEJh%MG?*Y{3JLc
zsm`L^;@}q!XWlOA!oj|3pP@I8VKEH%ywy!PjGpcDVq>*aLd0(FlX9;0U5j){h~?Nx
z3-f-S9(<>5YvYhGTu(QObI*SA>kOF3v)%j?8_{9DVD>*<6I7?@+fRAY`c~R$_q*eW
zi_Pa_cMb^}QK<zY>rk%k)EXwbJuhaz-b<Y*;|t|g#_xr_cYQ2CS}?I`kxgo3XL8Lk
zx?X%W5q`1?$rSs%|AK${OD`#SimnW9di1bKy+wqAJm=h(c4nTGz&YogrlQZJ7*|$0
z@`0P5I{EJGtJ=C(Pi}mfuE63LXL6|=myB17_0|T$=#_bgWT+_Y{n|%wcT5c^!%W-O
z;$}AlOHrnLEuFIy?sXBh*SM~@`oasQb`~@#%T16*<&B^F#BW8|fws#&S|fB@2%7kb
z`Z}F5)-Lq26z_Rmh-#J7HYJAOI2qo27&wcrVY|#XBcBqbLf5o+@9dl0?$tikRi6&#
zQCYZxS$gf_i9M*iC-JdaDfA@Zvzgp2787436ngAdFJ7Xtk8@$5l}Wo7BYJ^hg0q9(
z)mS`)EU_?^oz%op<F?n!)?c!YNutH-^5(?Wy&%5jW$rxmkRv)rx#0tI(@bk%Aka`2
z%>?!bYS~!;1v&lMYz4^y8s5ix)c}BWySR2?wqPCr3X6c|SfIy=rw}-{QsHnaAW!-a
z;egE_%zSX}ObEG`+Myd&E?2oAyH;E*R5Pu1t6VG8ZL~#yT=l`-74m*|mfYbITA1Fv
zcNmyamViaS8XBT#JZ<D~3sHIhR=RY)Vln`y6PMzhZ-}kcwOI4~i#Xr4<TJyc=F)v~
zQ+{^EU=h~+^`fc(iRGKpfmhH9tUxq{YaM~TvEG-<*N0w^Sr3N!_4|*P{CzxT6W^1a
za-5!~g7q5P80wsB_}FfHv%w*#J76bkp8m<27Ku?*`twpl-pOIg$w`&D#l6FL0=yCz
z05L4_ZHL#L)<~@J@Aa8+`kvJpdz!!zC#(CgSe5NO6Q?*2dtf&sy-Xot?6n&O!gw=j
zIefIGBzw{w1muwoNT{nnsVV}D1;^IlZ?I5$LJP!JzHZI4uPZiky%atSTp<sXrW4?Q
zD5l%$k=;zZN=7aIeKU6Mo%V!kHHKS{KtSj)IYm?_h{4!5uBGz^L($GWY(#|rL)gg!
z>HT<?J?y4OLfL4$TjD=j4oyDR&`Y$8j%~Ey<Jqn>2JXG43yjJoS~yq5+nt1Eye{c&
z>yKy3ij1yUd05o@TAP*8ab%}6v*-ZELNl>gvEtErm_ZD5(kZ1emjh=ndha>~0f@Gu
zu%w~?j$yw$&13O{%WAml4toKb<JM{pYB3H{#sPJqFn7oS4hc;IJdg!|r#fT$P8RC0
z*=YLz)7;4)1(e$%2+^BzcgNWpy!LXe<skvLQT~^3_#=Jd@II$5s#fF!JmW@&QH&5A
zEdnOJ&syvf#>pR!p6sx_gMbKeMZ;Ri<yV^CNXwGZS)t2x8kKt8q|fa#&&W!|;D;+V
z;7_8*T=NJk7d1=OZ>~Pr)2v@6%;Kl1eQJ}V<J$A2HXeU@^_Xh7?%rfnfA94ZwIZ2R
zPa7gWdB+E6zN7-8$`wFQvmJo!3r=_Rd2W~hko`oF-q?cQk&4}fZE2b8>habTL?8Hi
zna5$etgW0<)UU4EdbGW|5jbR144jz*y5FNQJ@Tg&SQqXZNDK9=zs8er(BQ!h<D}F7
zqSX?^Q7Q&kR(h06dX}lupRjZ^euD&8z4=;bc|!7Bhz(}2LFrp>#C4flL?N4dgBNsV
zkw(4w9N#kwSxu!1v*Hsky);h5H$?@DkDg7Z(cb_tef`jHb84{?TQj2<fRJHLQp_c@
z0QOm^Wuqp6ySNSj<{YlR=$S{dATr6{Of0SeN`>Kh=j2-VuJz~D$>y1%Bt-0bc62Y_
z9qv5!u-X{9XJ{Wh4{prwm%iCE&S)2P0CsX8<*xBk$IvBw2rRZJdcK6rq>&r8xMqB`
zHedxDYst84t$GE?aR3@IYOyGUrv=@A;M&yM&u{`9Va6Jym9L;k`7P(yDq`w<zF%aJ
z&>b1HYMhvI*aq<>DComDwEJ;Ry)b^5L-jLI4G*=I<tLK>myw)NqI;z%&<6E{TK$70
zYU54~bo*nvaYczyV?!>AX~HljThmeuB~=hUK7Ntc-h$`R5MSd6-`84G`vQ>M^!cFY
zFPbPy-2Se&E(snyLOn&t(`ad5JML)*1{#_LF{<pQhR><_Y=L&MyAC&LpU)cRPH*7=
zJKNCj01)sM-bd^8n-1K}CM`{Ojh~*ob2ecerU0Mf37to~{)fB+s8e87>)O^-z%tQd
z#SfOd;%%M2%m61QRy@ZhNte-aAOLP<&5#4ig$kQ@KPUuvbf?@YGUb=oH9P|6o9;GU
zm~Ze=02YDlu4glHUft+5FvCq00BZynI6!N(8{BP3MSQ9TVD$&xq_k)>u8dB1J*@@+
z^Rxq)Y8e1HK1RiTrc**@BPWVOR|@t!RJdy%(Rg4wSLgD~5tsT+<svh*s<Xjwj@8P<
zg0;D!F%!E&GeKC)z}Wu-tM5^G<r=E>2u-2_N{#3Y#FKcwa=2jcd3#UF2+)NgUP7hb
z?Bmf0&=bXKV9{X%DQpP2*PLkqIKXH1@@Zw9xEY>i46%Am18}hJ6ri^2x`Ju3Liz5_
zXJiAQx??jKU{&gz1)hEDbHxb`b~s(PTF)sQuGjJDAx^j2ij9Rf40#ei%_=UH2qg}_
zrb~3%21%Vi;lTjsOCR4+l5zz6z!9A|%4Zb-i$3>S^wOG1zsfq-PL>RIU>Xlb#U$b{
zRRg+&391h$_b-*-ardp=ERjEZp$Oy1QE~KUF{w&^!K_bLYgkgkC4|eU`>jTJLQE)5
z%lu)mGDD)*cMITcR`{ZQ8lyl%L@=3JP&>+1{;RM~a^S?@7akWlaE_4K@B#G@@;DV<
z@Vw_s;v`jfSO33Ge)jSJ`|mnbJQ;p>;8WZlAM`=i%GdEHHeX#~%q^JwZE4MmKAoQX
zU390NUF$!1p8XGX58jpp_PTNIY5f1vT34#zCW)k`Nu|<q$qCOHcxFyz`qX0fk7t>L
zo7Qsc#VcXBA)lplqzHB(gE&l{tTi+)UB&V_|6g6_9Z2Q-|NlrihdB1$J7i|%;27Bv
zWh8{Gl36%LR>$5XWMz~>_RO)jL{auSMwE5z&F?z(et$mS&mX`3@K2okKG%KS*ZsO*
z&*$@TwMUNG{*?Ki{6}B@U!54(Wx0x^3L6_!tN5pTi~0OY=F6;>IF6roG2N#-IZ4G<
zG&E-Wqwb_0L<Fkwktqezxs|jWmv1I<9PclEp-oe}H0Mz2eswdhN-!_@&3@?H7~DHf
zpfMM)Z{ZruIG<ynsrH*EzKe*yyVa_fbR%yY*E=k-u%p;CQywPPG}<{k`cAG1XXfv)
z#NM8kV|Rn(v~3&4GBK{DjZHL_eXN%n6L;_#8;u^gfp=Hdf5;wYB>Q)4=x`pfc`5a_
zzeXhy0eVy|v(cNR<4t(=>NGaXZrN`ChQqOuq$DJ{ji{YE28oKf0?mQbY`|ugb_bX%
zI453l_0=4otyzC0GP7Tzt>+#>YsORl<Nj#I1E2r2IerE8cVS9Zd~@4Wv@oeD{CM+p
ztrFE>>4xfEOR<@kYFPEG9~ll7CJpZW;c=5na?NB3E!UV`a(#dIm8hi63ZaL`H;1*L
zoSK6vdcP@<uKkiK-c{{9vwrj*JP_{RmTF`EjrjYW-b2+7RH8LW{wmH^83^=ZRl#A*
zQw2<!kWLCCxyr((iUYK|jlyH26ew|zD5aX5%pw%5Nr*kd_OQ>#Pl4Jz+~DI`!?zB!
z@YVJD4Ueq-NALd;+EaDFY#NF$P$rj_CYbhKx%MZXQ7Rm$>E%GD@P#;okxH+2K*G3j
zyF`8Z>jWdA$#m^WVE5R3xW@R!%)B46$z!<=#gz}Yq^b)e_jSj)3I+s`vLNX;vIlaO
z*Wrl29=^bf%4`{}yz9+Tns&g1rcN6O{P?55Og-ct#Sn=QB%7`GDJ?QRA@9`94a%Q*
z0BsuI`Ix0D@$zuOZuDB=xJku<4o!0ZdE`6yAYi^98&EiZ0+!jT)?i{>0=Vd2h3zW^
ze?Q(7<O7^OK7|WGHy*Fc3fz7Zzzm{Z)m9xu4q!>kk^JUo{OQ?;)3f7^5UB$25r!a{
zW)0&ubq30#kap}-*GY0UCQD#nh^*vI-@rKmfM9qJXnkuSAzKN8B40qw!~Cc%4VTIQ
z@jx4#^#J6IfTZ|?Vr{7nSYpl6z`BAH;eYKJ72NG1mAmfhwauV?v;D#a5f2;-064)X
z_GkPz;Ex6Q(csC4%V^}dt_{^m0w2Z#1HRsQkCVv<o8rJ6VrrlezX9?jFr2?%y>1<C
zKwuTqyfNW_J!>R!cotZ)c{Z3H+PqGEUibW^nN>}`yYby)awsmWOL-B(#B;)}`O-y3
z5jbj}QXYNFRl5(KPf-KOrf%V<z)mszZ+Lfy7KC@tfPdkAKdsXai0RgSt#2ch?Sn>S
z%K3}~an-qI%Hw|C*zX^OYoAt%E5PtiY9{e7c9PN3+Ci%S72L=BGvy|Nv7#}+fg>&I
z0Yux;0)xUyY4S(L=VzyXH0+!YAen+oFye%mwaqTp*svt9_}7UtffZ9V4a81cp%ozJ
zJK(*uj5)$&5wakgr$IW$VZ8DKdjJSATg!T^;;cm9!MV^r%Ey%mb;%&}pKsUJclaXH
zM|7q4pF1V#LNLkjs!8T5cB_NBl)1i!d)!EF2I^rvoqNsC2ai$wSfX&${sHV}&c(sa
zZ18pVKw!l<P114obbrQkni<Z8vmpTgWVcZ5EPk4_YYwG6xc(n;#s)Ha2!52y2qCMl
z2(#Vf1ZZJ<^nae069Ny=@F@`N#Z?xvFsf@HIpFw5q2C*K&{-fW@H{`=XUus7d`HC<
zz@1_Y;*c3BUce%<Ry!Y4QROf)Zj)?gi_EtV#b(DYW%~3-)9cdgeHLyS{g9ve7<fA>
zC!A-*_i@?S$uiF=_hg3`Qoq4zS1JV))eW2|XI1)u08tUZ1USi>e*k|sneo~2E6$`*
zmk9=mcjOMmg}=)Rla_^LsrqC6!q*!}0qO_+F;{3b<*qw(8})zEyiHTDo=Fk^ZrgC6
znq1&PMZxAS=Y-e_i8&SPU~pF+uu*hMDvhNaJPf-CX8_^Z3Q8Ri{kI^~KzZA=0~kQ6
zSO=6ssTaaIZwe7WU;8IIORdD^)#jkgXTJN}XISTG>$7l1*JF^S(AoJK6ITa-0aLiZ
z6S&*lLu2SfTNxyuETdJCacI|TVe-PhqzWf4`>C68oCd|FGQ5>oHZNuMGS=+ik*Mb&
zFJI%_c-V;z_#<at0HX8}%U?&+!ejiKa}oEK=3uq%{-n_}oNiVmVYI}MD3_~G+S@@1
zv<&CfKG^h~l><7v=b$?@jG_ICRW^{)i(yL3kizXHoXdM<J1<d3^Se|~RH?Z00waxp
zp&*C%iAVcDbKu2OwdCY(cM_KL+Fq6sB+$oI#^p}1ZF_T(!k@4=ROpg6yScqVBA#=a
zxf9X7@ki!AR6}NxX+p~Ky!7JxcR^Hu%?Ou?F{rsu`<Jv4_Y#rh>mHT0YD@egoy9Gn
zJGAA5K`}qW<MsAr+zQ1<jH@CaR#S(()2`Rir)}aTuPzJc(q-7~Q9h@DT5Kk3%uScs
z4@46n!?mb1I~t-Ex%bE*_hdOYcJ;MGv8$yAQw_jg)B}Ix8kklQkSr96!1IeGUI>Ci
z#bvbA(&O{B<EG1$OSm?YwKKj~`94;{`_Hrim<o9UKKxSOL$`fp*Pv)dDOLFj*h8yW
zb{2Ge(MI&Vy_TQuNU>RlXXpS@&OVfG%bdYq+oS~5ElQ*5cqag7b}5Y%ZXC_9oBHIg
zbC+DKlR*WU+Wke*__oAac4$ylbWohc*3;5giZLXZ#|vk(UO6U=KPKq}GMQSpMdT?X
zR9!C~Wlw?G;s`uNp`S6X(Lw%y^>N2h)ehOtg=0&`I^{5SBBldV&gwR?20>{Z;O&bO
z2anN(zT<+zzd4IAMSLnD>Alg1Q?L#wcKBc*jG*;LzswR7uk`Pc5@)2?`$=`~Do~0K
zE$)7eA$t6>UKP9ZYp84S?6yiXEhoY^uPX*{40u(XYB85_g}I)3fE7U$CPJXN6w?-3
zzfMML^x%1w+*UVdv7p4;oDc1i&z8Tc+u!%~MGJgI$UG`&#f-@SvO$Ijr)O6(T7J7v
z+_5<TPiJ&ikwa}6EWz%rkt@5M?)r0SZljgCN{l&6z(lrt%QX8UY9>YWVG($_)<Np=
zXOzM_<IJv|$BhU&O_}4Ro0TZf%S#g=)s?)wiJqfaGnvxAwRhf|#~(rF{1{S)FNDYZ
zw}EDZPbIay<toeQx>sXZW}ozu(e@jQ3M>;AK{0!?bx8T@?^97UCsLO$J?^!ukP1UE
zAv#W@SZ<mYEmO4lLPVoKB_vLFp(|F6_X(9Tmb>9mmjsQVvB+e5L)V>~Ixy|-dvoci
zpKnLTql>I+t}|HVvv~P=!@lh7b$lLif6i0sU@6=G#15KYT|LDe@zy)DHF>vk>aEt;
ztNf$<aUIzTRy=qLQez1~E?D^3R-fBH9xP;6hz;d{u&}(rA|AG)pnycyl^DA88NDs5
zTBUmSZg%VzL+|U#4de54P@N0-x_VAvk87&y?dRrr!p}doA0^rQ{w?0X&zK8|-YPKF
zw-tRNZcc*~a_NL6F(o&W$Gyn;41y@8KF|m8RXsg&$ScW>xxwF2OeRN1+47R-#Z?xj
zdD$(Ulin?zgTZLAY-NWDKT9<&`x*XDwT~DZ9=z6@_vRyKd<clAzW_c;mw|LUu;jyY
za7n;zs`<@@ed-OED!td%H1am$&{K2i&Zo>ceK#!jyS`Y~L$@4_gN63`0*Aj7wR@K!
z<zzNV<1>Ui*ScCT1d0lJx}^hA`P!8=u|C_#O<?|pnR(pWnBXvoE=(7WuN`ym84dgE
z1f=yjcuFqxhH}<!ekbP-*SpLdi_6QT^TrJz$rAjUx(VlNLEZAH5ld8laIIBVrY%>a
z3Gx8VvZIxCmtDIgURG^U5hXjV+1mVGNIi_}AxBYy5j^DO%_TI**tt)uv|eiqp<{n}
zWdk}wAylSA%GBf!I4o{mbGNdc(ZZ&LzPXD7qNo&#{$6kMFp8MB2M`Any^!f-$0ay~
zZk;<4&j(gea;3+_G(An^4qOQoMKw5g+NsNo@A=t{IzPCINE;=UUtG)c7Gh$7-sL-n
znaApM!v6j`@`u(l(LOd4xVK{}TTJ~$U4?ZQW%S*ht_G#B%~Q4_Nr?@&gM;tWS_gTm
zYX5q#*wQFw!-ZrN9?{FF7Ikob<{=2u5TT*fCf#n>&R%4c7zS^WPh^GUMm$Vi3_l44
zJ@(appZaFTW5RI{_`*~p6yqFJg_0jI(U!H~f6_MofRzI8<h%)dFJfr%+CB%Uzj5gR
z$-<S^g3*4@D2Z2Ov?z8r9k*d%%U>B6x9sH8W1*o%nI&x83`W42)9XR)=#(=sSNZF3
zn!}c_R`Jm@6bnb>;9687RL<cpyA`eg8qWR=!eW%3Ol@s=JeZd;`7T|+6peG}<ESOI
zrZu=C6iPzphHj#1S{C6RtDEj`X>BxB$YfMet2_a{suklqq|-iDwU;CO;x-8Vv)%<s
zTlpFT0?w4cIUJb5*Ut_~!YIyE<FY*0sz#2!gq!!w<ce`j8xlbLbs4VPTR1nJRy(L&
z_1-!s<9b=B#zgKX<v4!5D|!2P<8ls6(syL};c(Htm=*B>_<ZluG3A{%sIw26;TK+C
zf0RI}2RxmRxULV>eCaMk>8if}MfcBBB+L~bPM&`wP4JY!WY6~p5$y>w>!PPAvU>9c
z_3C!m;-S~NJm{Z!^?i1d%|T@?JejyyGuD4YVyd_`qgb<8V|)S)8Lu4MYJ#`&g;-qL
znkeSvzju;8!*QDbo%~Q=kZWbc&nibpFKlzZOZHovN@jr%-3k}RGCN%+gf<B6lG*8#
zi@nSd+9UMi5EmbzX?{Kz&TCqBg{KU86EdXqWH#6WKMJBK=o(Xs%^vLpX+tv~I6qa_
z8|>xzTd~WQzNUopxg6|2E|J><q)JKJcTR5+p8dO$T<|C+dbqeRpl_6)0+LF6xF-&X
zV$aTXMVG$L6_hFO>TTh0yL8u(DZpgWL9o|~2-A$M3y`ROX8jgmboG%s<NUnu>b@!|
z89s_kQYB;mE7ub9!_9ddV#O=O_=5BY_PbZ52ILfx9OJc3Mfn}42r3S1vJeQ}k@D=(
z@3=4?xGplAtbRw$*eqKqI6b8fn4G6PI<?>P%LEFeu|dQwIH(FEDT|CsF>RMdSIYDN
z$klPb+xySDD3gXDQ>D7=uer?tvreldq~vFb7k0i)kd1sDieeOj+T=u#A65FDdh=c(
zqtn(*wGhX22&nKeO<*Iqq_R8jx64O;<>mQ-^i(faSSe~SzuNyxIYUR`^cgOsHz|73
z#+By&mW;~p7JtDR`S49KKW`Ft<#3PA5K$JTs#XVs;A88A{<`M}8MM}6M7_oH9f~^^
zl`Uz?KUBAD$>e`keLt8_Rct;et#X;UtGvU)Qazu&ogI7^wX@OIb+8{syWR!Lj1+rU
z%O=*cKzqenj@!_9<yt>bh3Om|ctAw1V7h%&GGR$O!ITi^w)q#cJF4`)DC*XHkkHVX
z#F{C>+22dk&IkiaRJej<ZV81vJ$L^6fAkACu0Y|;;|H$|rmFYq<-Rz;e8Th{(7&cE
zd)D_1rV^%lI@#L!kk6dzKffwtwyW`+evc1>xfx7(7-&8SR#1A``g2=6rIf>sj2Y>L
zd>yM6+9N5$C`g+2EO0dMIXfAjzT&#ZD8y{LQzi8b?d3Yp`@>H*@$qn}X2~~JKsIqr
zOu)o%<?v40f&lnBr+I!}r)2Aln3YCq@Zr2`t5yizZgyz;MP~{@5IF4i+Uyf`atlsi
zu!@26pp{TEN0W>jWt!ue1Lkj#9t#}oR#-YOXUhX=wDSVQ619QZWt4Ht^U1*3%S9KC
z)oM8-xi(4`$7V>Mq5n@Bp&5^ZjCDh&vfhPE=vn_Gp(3ZYB8?ET?d+%Y^x?4mt*(TD
zAk3rYl&|87JiMqA7B|0cJdW#E(W63+3P;PF<{Up8t~Zu+$K0J3p;x^Uzds*cdX=Y>
zUX(u@)3P}i0rjfgus`0h3NNiMWmmEQLQ++?ZR=3?Ih0X}Lq;oFA*VaCA6vFCd)t>y
zhMdMJdEBR+V48=&JvjO#7w}8^7B83i(V7dk!|LF_B#1O-Wt7<FG0<}t7+EUaNVn%A
zXbwCTyjp;uV_nLlFtbg8%cm;pJ^v>Ufso{G&P#%tJnl?1pWE`{NPE4>HLCFI*2j#!
zw}}XBB|JrDe0`RME8R=;cF)Huz2O_;(H+mAA2_-~;a7O_P$8R@%$yIdIK%41wC`$^
zFV!oXU)J4j>)fQeVSzDG%2RJvBTEMvrDFP|F_D;kc0EQZr)P-|_b?J{MUf)1TfW_I
z*&k*3CEjoAaevjRu&^!SWw(l|6Kzpd4~`C(`Y~GlWNfaWi<~GF^Kom&L8;7mGC5qD
zML?;NObVhDA&R2ybDa8A<q&G0XT^{cU0{n|GR1rax6M-+Ups<Zl7E?<jh-?1LiaH=
z6vlxfyGG}D(6D%hQl_YrUuWD;Yuwy(X@Uyxbb2T)LL7465F{NyX!CMdm9F6R%v_{%
z8z7UU8(Hk&&N`e>yeWzHTeyI+%vr|E6j!=TuIOuob!mac-;`!Qv^g^$@_%g3(@*)4
z`|O>n&&&TZRjlvhYjeHl??8n>uO1S^r*1vgUQQV$=TN!tCW6$@{EpnxK9Nsk+!D3#
zTF`tYLqIVu=}Da6lzy1%==I6}T_lUD#-IX51^&Yyc*`fP>0)D~C`PYdN3`Jc%z)Qu
z58XwX{!ppIYM9(k93`3d`yQxL<?Ro|n+R5}>4z`%RZrsf6_c(LaaTIeOnc5JtdpC9
zPV=**HaghzcihdK%&6%&;<nv*z5%X`-p5=Ep~p(bacEt28ms92liRo1pPcXepD%5_
z>4pVevWj<LBM>nS2!JZ&pxXV8*af3adA0(`ZdhtXDo}r)4f7<#paPWBZ>Mwkl8Eg3
z))_^G0&3fFe+FrbnocZj;)0o8(ihrDtik+f=L`f~00yTpdH$aG7s}ky?NEQIgT8~&
zShdK6F^CWWrxj(O+8HHBGQ|WkfJ`CGzEiUp_LH@kY&g^|n#jBKrhV|Gw+`to{y}JT
zyMN33uNbX4n^N8X#G7O?o6$cifVX_@N&DE0Nk@)B`Hx+(o@^DN#A_-fHg2hvo6nMc
z@twn1GN<JM^iD|O1#gA+<CN>(59fN@gEfXh{9`?Hp*#ypLfO7*yQXSbcAtSnUA$`v
zVM<Glp%||rC8Ew-k0*|Oi?xw6ix~i=e5h3ZL8iM`igscsrh%bH;%AQ><&*JJ4`S-E
zleu!to;H?TmP(?Vh;t+iPRlcX?BIJ2{m~W~PY%fRPTI?D4hLLo#2Z8`kuH8Q&Xm{u
zXEF(in3VY}OfpUUwJS@I0g&g!#8<8HS?GvNka|>(AfGtz(|(Z}tuZ}8>$KEx8(EA+
zxMpa`MPT-N8U|z^l~Xs?);k`Y-k&h5RL|krI^b%}{+G=Xw+&^pM<(=pGiZ;JUDuv_
zpScii?Lx!Rp4dh?Go&N?C7dxcA#@GAfVvx0^9_A&kIDarB!NUGtg+%naOSD)tj>(-
zD=@^ubQe-j^fA|Dz9o9Y=qDoWvBbd~`dH%wB8OjV@fs(Sbx$*l+1rT*v{aAhCPDBx
z{`GP;GyDCXaF)HdBejG`L-G4NBBXG2%WrLx^4lU@;=modDcAZr9RSA^9yX7{CUzoN
zJYD$D`MP+irN{qG%FD!Gpv*7Tb0i)hh0ad<zBiGM3LmV6uPr?)%BsEH`bvXb;3H>@
zNb6%Vt@2SGMCK)63)|npe9TUFSB(-8*wXAKX(ekGOs`YuG`Y?-!)eleM={SQmUHI5
zo2I@v&w8U6(<S;^^Tril|DH7VjRlK)w%ZEEBk>vi0+_^%^;eyL*(!0r2#6XL_}>#V
zYG)GBmSw#CJYFnj^JR;+G$YiYcjsw`RVdOs?6B*Yl14?a*q9q!27+P$7ZbAUDjC(m
zucehoQ;4Zh+|d1c)nA(q*!|_GBa;h7gF&kA0HafSWc^G9pIx0^0v)yx>!tOXa&F@7
zUPKs2RKo4DJabZ-uUyypC6r$#R-nj-d-fB{zY_L7Od1~*OY?ucG}tHygqNLL|EMrO
z2s|#~^Ug$lh*3Pr3HDL>>aXHKEA+Tt^JS%3=&OpU4$aZx!O+VJHjbWw_%b2%GO|U<
z@s$LkwB18T{VgUeTx#=pt@UjSDaiBE_=^GTK?jO-o0P>|)J`S)Wy%4lojx)DbMZoj
z85r@St;FwQ`g3&bRKz)5543Ez_MiWju)!A<@NMPZ)n{qkTd>AY-OS_T-PTwe-#JcX
zU|y3QC9qoaWE9qwf3QS2pxZqs>0F8QGZeI`YW~Vn@%ydTIGDxvHx+1JGvDX_*0{PA
z$osR1we>X@ri1JB;Hn9tihtOVy)PQ&=H}m;_!ZaCFhJ$N9%Os~whh&p1-))uS;J-s
zX)nTJpmzs5(ycDN?u_3hc)wJ9ZfTn?UhHr6(T0P}fdCTD@r3);6QfkVOe8P4TvXH7
zPb8AUes6zBe~P&I;HiK|@nmwrqVu)P^p{cj2SsX15K7|f<q*qJV~e=Kn!DRuAs2{}
zl|ZQc&jcY%MD!7{zQHP}_0sgZ(c)RT(h8ZT)C=8+EZzgsUr$cvkB@-Zgixh?H{}0r
zhq<iY0<#RW$nLZtiDP!xEqze<s#1zq-pWqZ|5;z9H3@kuicjj+4?!YIY-xOzH^4Ww
zKJU~>b)ccidrj+*fQqiVDMI6d{`uM=T`eq_VL#u*u-3nU7N<q^agYtQhDPR9qXj+5
zu^M4@D+LulA73R-9Z#Grk}3424jknst8sm?c<5<^t!UlyKfh)Drk<F(y7pQcXVx9>
zii%0g>W}V($r}~o#$CMi48+&<Ng~}nTRXkwr{CxNsB$ne(oCt+<O}@L`ch-Wn_V$&
zo=g?zngH!H6VL`*!-TT#nf>~cNwEq-^bu#JyvbAiTZ>rB;)kWlaS&!#49+E=R1HY1
zN@s@)7?Yik;D44qA8AfYl#cCUEv;AAn;8DN!*u7DBhV7g2K9a4hT#cR+}VsY*nrw;
z^#B$e+^E<4?BuX`i)O{y1^uT7WEBnwD1uWY(Kr7%<k+SN=Bk}ExLndl?^VGEVbo*q
zJF6S+2^hsk@7EJkMXfH8WU{5n@_wtfScF%=H>(>k8r8Ye(D41m1YJm`eRMFi%}f3p
zOTGv0O~U03E)mE#c;jz~wb_rdyTa)fMSMl;oMe&bDMfL}`>}gv<&^wBn!0LwwQSPk
zAE)NkmbQ_PS)FBdp1cNT`D3lWS^fo8(9*5jEM9qyYwfcQLkSLfecHb7g%owHjjpRU
z0v`jfo5%MX!woltb>gE&42gve8T#kL-L)BjWRDY9cfcK=WB2ye-&dS_2sWpoPQ=10
zwUn3t`L%ENJYJP7x8G9QH8~GYx3D=xr=B;JWEd3O(A6_0;ARMu|L0mb;HRGZ$2^Hv
zeu0}fpckr%|CXYf@Fszu>vX!Wc>dbcf($h#N7>&}F_3gKZmqQ;o<hkdjx(Z#pA4J+
z9va|SjEGnbQ}+ZWK<slGhxN+7UuMyQk0V3=C^nP*#y?E|TTnWziVBxw%0<~{vUR4r
zz3~$N_2Fj-NsE%t_Ro8uho~iQP?Zri{Wkr%sqLxL!V}FhcX!~ps=|?IjjhW;bFfUJ
zmMiz_gUYasGVky)yOsg}>V`+35eqNfmFzrQl>92p|LP<vY(vlmP0Uk3x@8o&RWW>F
zg`fd=Rp{}xQU`E$9RMhO1Ztzc+pL%u%aIb)z}sbui*rLMd89Wfof5z83u<>A5o;#^
z=y1GcS@O5-mD*KBwhBL~@~$60qx9qfBB^uS2;gEoBX4(Z8C;vF?U9EsxHx$El_K70
zGIwo#931_#2&qv(9=rdPSAKu8Go*|21}&NO@CD*RqCi69i)29Bi?so34UPa?0R+Fg
zT?(<n2b~@*muN?U0+mYNc9&Hq1%Vq53l&k%M}icGpl{PTS*y?R^*8#E+gm><ckQ1E
zpvk7@?F+(QPPha(=<f9bK#esj50~78IB1msM3?g)MDV3Ch#U?*oUn!;Uk>u~0{VGj
zN!J*;rg=p7#7X@i4;_GPSP<F5Edy_3#USYVK#w-Vina0(C|eoH;Ww9bq%j0is{R)+
zp0b|n&!%|^<^hGc$e_?L+;F2avE3ue08NfUt$zVbVURXnOtHS6_cd0zgfRKSKDq8y
zOmfjkpnBKCUjFq&UR{q3aD_AM<8T-=T>Tgvw8h+>I0gc%Dvmj)&7M&+9U%5oJCl{b
zt;OTB4ERx|#=O}N(j({p#Dklhagg8{FT>mt(45FX&V@U<d$$_4?ExvWo{${qn65MD
zVB!ROs!gAR^Ix|lnmGno)Vi7EhcPld<ylgIo9Dqo->L%=?ijxZxDJoKX*j9+{Kb)*
zSttGPtUpAv4v6{B%(id*1aYmY=RmX6%UL&$qu7wflokDIZ8!&qBJrT}xBJB@HIcCE
z&!8ZNWBIwRNSR;+oTHL3_Dmc&qQFb6WrF*Z`-sfI<+&iJItYxLNsog}wbSYGek=o=
z@;Y1zm(Bf*vBYmt3B*>j$a!=9UIOX9YDTBpmRpy}AYII!>2jc_9zM4Qz`c)I{SLAj
zVL<`mZ2)250K&dn-;HdaBl>XhxILf+*P~gG0La_uPk`&0wXSrZ2L8Y)v^+?lNao<6
z1VXgGe;1ZWx+#Eu9%Cw#sE!grs)!Y80u7Ws!%_>y+*32psl{4ABKzVL<O!(RfQ<aY
z^!{n098~061K<Hh&0HcNopI+uhe7<LQohEr$c?8+ZyzRT3AyIf1IpKW_Jx^iELYel
z1|4u@ZSs&VPYTy>6?VGyAUQv^k-HIzmh(FY5Ade~1_dt}FDAMZOaOszwf%-8c$7PW
zyu0W8Y#^j*1^(5z>TwdIT_FA?)8vx|BsiB0dyc3lfEM1lfAB|grDn07y|w5}(i$V8
zUmQE*;Kz!V!!}<G39SVHJe?w(55{A4)DoA-2C4M{smR|+p-@xak(P~X`*Q%5HN7-i
z*%|vaJInWQt8Qg!gI6XJ*ZQ5GGv90mkJw_@x=@?mmt_DbWei~8PXGW4=LVn)Dt*x8
zHw<W5&-=5|BqwkDnwxx9_i31px3u0ko{lv;gctvwu0@v&bAp^k4266c?5s=9wvSHA
z%WiOhAU%KZ7r9)Vl~o7jk8ny}lZ+eglM68-Z*V~HTUYu4Vi<CpM;h=@%AWSibloCj
z0inQppk-&+^WU}CEf-3>?)D_5(h@9lSq)%B@A3FLefq_-e?1w>$^I-0?9U~C#qV_2
zNNV%fRDBJlR~RS35MX<)w=?I2LD}J;)r<tzq4z#VUnu=hlkfF%Ia)(q7<pQU@^x!u
zH_$_7oJ$R><)2r<av8tus#3nM03z~bxBwzRWzG{wP&&c6v_FwoK`!_`Ap4^u9}9`d
zs9m>kZrFV#cQE^cJ}4lrS?l*-4ViKa;_%=CYD0A9kss@(y4WMo=sk{}!DErM2ovY|
zg$zJqo0W;qY_W1SbGou9*mF3LlAQWZPMfj5nV_@KFRLWP(z$UVa{(u=4?tVS#X&4I
z8mTa*o)v}y@%%QEvt;5hqli#ZbL+Ynxd(&;#6c7T#4vq6TP!FRYM*j6qHl`(b>g$O
z!(dO57I>_q?A-@GAubD<)xge(Yr*q+OA{6yHmG(l+J1YAEaP-Mxzyyd3d*Gvwo)5x
zuBa#}i4uWTJR*i%9=^7yAv}jVr+*j*Bf3n+kjQc$jV!}-Sc=6ix1_9YD<FCNv@Kfy
zG~hfssEukpw2x9IMfEJUX0zHU&N}ayD+Q(4i(Wkjx8S5`>M3mg9Eh2diH}sSbRuOo
zuGLIZ$S_m#v}@x84)tx>6pJlXIxhxOD#w!wztp+B4|sdqp|wWsG}$+)^rhD-htk6U
zgC@-9M*90~d20uJ?U3h4Y8FZYp$RPVU`9eIA8S8L!uE^;c7+34qN^G;e`sc_6q_7O
z2uUZl4CY(f&)Q%%&n~4+B4jyP=b#eVn#3A!HmK}ap!zn+@LO6pF5;lp4uEI9&9Ld&
z!8p=-ky_Xn8zXYr?MbaIngdjQT2zLSwU%heHMA{U8zIQfbh44Sq43eDopfGJg~BQX
z6FeVyQDHiVSz(P_JB$S|7!YK@ON)82i6Gbzg*hW@Rea83*a<dI7HkF5od@>0rNqBh
z;TUiT501EpsMsu*!=8X9sCH*7C4Q4!)d)z$*G`>jIM-gAXoR%Rw7#lj-aOWR=6eO6
z*Z@H0BjYvB8)#i^?-XMZ(LN$hK@w%(;A_96$<;>zNw4k8<S}URKh4VjhT-i+NpmwR
zSgONiSfyRwP|9ly^+awdJ<Ce8SB_zu?ZC%>Q7Uysm%u70{6;3FA1&4w%dFy(-$f=7
zM(^hgsmOtC4dbNs?WPJ`ggvL2+!|@ru$dujSY)iSbFij;a5(Lq%RC~1#9B1<G`L0Q
zr@LudGs29pTWkbmHgLh&{UE|CXY3arHj7^eJfVHfdtPvXFfNqwAo{)fQV$yA$yk=O
zv%#d@>c0fWFMswVjK%rHi86vw@{FaKa8q@Zh20r~p3Iz}w9VW9TN0G%vUNdNm5dIu
zM7(%$EqzYiOgu``c3tnjlHis^Go>47^4<=Weub-h6JsGGU5u`0s4oZGVi=5utFZ-H
z=8Jtkfv7orIt&8dv)f6zS-Sb1MVLz0ap-tKW>WV+&Pxy3kn+;4LHn{zU2Jpfo3DgT
z!V7H{NNMOsD`nUckDL`<EU{9ck;1p1;?vB|C&idlwuLJ|(udr$aodnnV2Ye=zC&FN
z%p{+Ko6DkSNXF;yX?#IKf|i>Zqu9N%H|8I4NL`K(7MXk9hJVE}PznizeDc7B8|w3{
zel_G0sGZ<Q-dPOE{mOY5Ya(cuGMZ;Olr#(jwVM@sReOzY?H{;TpfP70@9^c9-!|E}
ze8q&bO|+Xe81~9eF@CAfZXZTN$#kQ<24G6iw)-!Zf;6DIAHxfIvs17%1SIUNbk7r|
z<@`>N$@9wek9p)!C~}S^WhdkSr8Bs{O~~MI5?e8KooK24jjmRCh5kI<2hWdRntL%!
zib0HUm<uy?SkEy0!(xwYHBcA!HH$AK-r<SU&O;7JV6BtOj?47uVK0)UQe4*jvS#}4
zc<}^^AlNv9tj9tF&imi))MGY059$#%qRzgdhvu`-*<e>TNV8I<hhjET_6H9h4tjH|
z#B4B{QxlQ-Vp|Aty!(2;!<eo5AeVd#yrvT0fjZKHD+xww-3*rZ=$dHZD7Kp5viNje
z8}ZHv-Yy@}Lv22W4wB_i4^&gayeGhNs)qC#AKX_oP`NSyeR41nK-PAUrZ^2cMA#Wl
z<9ErIGHK7`$=y^*Sw?ox*D@MnNgmJz3>3$9(=epn=JN}F9iqae8LUFZ2rUZ^I^c}E
zJ^22K$_v$;96kN;UbP@Ts=GH-xQK}Mmgr^bpE|E+q{_-Z-S1o7<{6omefl$9d;m0&
z_R*}N!7NlFR7KJ>2FJRrwM(PIouNL9)c35VHuqUy8d?=uX_IMYaNt4J5%?6#6oIKt
zi6M)=p_@<b@XMxK7lPU^xR#q&DHz{RA;YrXXsIoNCwe5;GNGQK3HZb{=xC?{0lw5O
zG_@JiANV6EoH6l&VUk`k<m{#kw=z3N^`#Y}L^3Lo@+@G2y0#sh&y*-RspR6EYsTZo
zr{`ijrz}Y3DhZ5E_n`?tKk-?cSy6--6c&gmsvJgcLW`&>tUjZ{k7iX)NI!(g#2k}!
z{bHr;00{zAaB#4okUbzbrs}IR+#kG`+Z;a?QLc?jA^UlWr_^#+&i47|EMXsAf4Z9T
zAA9BAM{X<*c)k3^2?oKN)_4~_UoK8I$Xgv_6JUGA(3znj+$;7<r#xemdDbV&;DsGQ
zjauVOZKP;;r+(XZ)MvYAc!h)c#v$JK?jk-|%*B?+xbK6~C)KTO<I;frv#z<rw{nf2
z(?3_tk0Hog^gmZbOF#-qhNs{HMM>=|<cwWUqqjobR5&iY<Xsp94u<`gODRzy-TwZG
z2n%{e4aHiPl`F+Lm0unlb!|X)bqf%s(u%BB9&j33ItRZJdqM#r{b7Gebsow1bNsL`
z4=L|jC51Vv9FWX<3JMEejz<U2d|#eRQFyS&A|)q=*qX?}UCX!tf_Jyxct#9}Abhbs
z{1U5$3Z_nzc7}+uVG&oxnowQzD=29%o{(5BYFk?j@;&p_SDwOVZIwurG|^lhAFcQ|
z>LlSCUA>Zp%i4EW!XgIPBofrIR;^J!RAWO{gV8Msg;~G(<biYjl$q$#FkRz{v8Y!}
zZ{rJ_k2$6ma#tr{{PGoi$9&uK1OkM^Of*!tAFG1xgEm#l&iN2tn6WvNOt0STD^cE!
zddRR}fzSa4N7cyNjg1=9Lo7{F^Lyes#pP$ZgDf`pt}A7?{l24i*Z24BZH7Pd)IOql
z_I&Qvk54hXBB?DV%>=<z{Y9@T`0pFJn1$09_5S929pK_Pc36J2lAiyCe=X;G(p3+G
zao*ZA1514ifiL71__6qS_Y+iS^}`~6fIVI+EcSnzJbuT+v#W>K&D&wDwZ=zlqY2wJ
zdTv|x)gt36#mm<@l6vqQkq@lAd~y(CK2e=Vreg(Ng?tG%rzPVwi>1r)DnWv75d>U-
zjH~`8lE6Fv0PcGr5-Du?HnE3&_(kK1+AXYvlj_Y@6+7wqJ9>xj`Y{|~#M)H)m>gs$
z0c^9@e}&w_G@i~g@NE#Ckf37TV_RLi$+`%hnOzg7CH{3zTRFkUcpX76$DY6XelK0x
zmE&nu^uvHi7NPQgkLrLsD%nodxwMmL;!%ITJQ8g5&|^gqan$ozs_|%uhC)95hWq2U
z_XM2|<pK<K4&I64`*x8}j^ieknUzT?K}R1dT4LDcX00E&_+6g%WODKEb{ZL%dW@}d
zC_A%1T#0+ma%bb#pUE}I^;Ncmu<r?-^skuZN2CK5B`#0FcDEe`bKZBV&THMHi34Js
zo^jm^`|vq*rQ=c*ZIBXT_N+9{I*3G)d@ysHfxBIh{7!}W8hNfE&o_$hOufTfN<GqH
zixpS*3(EcO%EeNLM%in23z}T5Kz!31+f3vCvq(K>`>NHE54$)ocS77JG#{Y#kotpu
z@dvS;{12ZBz9%;Mo6c>Gh*;jb^{WSLc7VGL{#+6Z69Vt7AC4w$j`=e9w(gA98ceWF
z__r!Y>}r#4EsfQ#<@sBn@Y+1;9P_kEcs88-dpCvPHJ6294bLN!<UgOGt%-;n$ZHoA
z4pf1t*n~FNjY@?qT>kb+c{28&^%HlnQcXmMUD8ecjnN&~kH^2b+?73SZxQ4iGhEFm
zJ1KP)Or4AYZ+EHMP7e5`{j?RauyAFnKa(2#@h2@r2X9#!r_JtIg<S>0TkI*Q1qH}Z
zB~PB<=fQ0i(&xKkLjlRXa8(<#f(2GG7eE&7GmATI0ajeeU_(cxKbMA!EwCEWS8Y(X
ztD_TOaN5z)Q3?VrSU?x+a}THb24E(y(PAabB!R%n7~B=h8VXREcK4P)l^f}f5YB?v
z=&@^Y984W*@&An7n+bxuz7z~iV4IoCg7SIBwy<<!S|OBz{~1axmWBJfR=t=bKA(Kv
zkl{P6fCaKVEd`g^=4Xu6690ZL6ZSWALqx;gNsY)&j#A5qlj09OJR||)Q3URPhBgm2
z=l=Wr`R8I;;|_PkQTk}<<m3bqd(h{4^Plha_t)O*B0BQr>pM%VSzlrL^q#2q{QrJo
z67*LOz(y~K2JomLW-|IS75*-cV33Z$aeh}goM;XjHa$O<jQb=_<f`zlBIf#u!2da)
zKyTcyxjHNsfIW*)b#-+vU{j`|v*Y~@LP2?AV&adLc5f--nvwWVOpXq>m#|>`1nW7<
zJQVy+===li{yn7n>j1_Sp6hVXN`ZQ=PeQ?9l4@ybjh)HWIM0xR?u+jGWRIKpj4zr&
zH>?f3u^TzPii!jQNfKjA4XKiUmUOPK*YNq}!=p#ePLJE_JvZ>vc-O}&c%MvEUn^r7
zXNEqxf)5NpB<TN4sUt-&rCMCux8_5Vprlb|3IAME+|ynVByn%ZKJzgB-_ZpVIG_LO
zXN`Zy>CaeXaDz)YmR&LbpF0Zo-v|S6HU=8^bpGcPzz0)j^^;~WC;#_g;L;XQ+}`}4
z+3WVdpI`@lfAGv>dA0WMefrNqZzmzPjt{_20C~R~jKQbVabSN9<u_~nJ0%hLj2Vc*
zh=CV`FnnQ~d2(sr18isgFPe3vt7}=X$w&SFoY1paM0v!(;Gq7#{rE#Dmy!k8!~g^C
zqwt+hr+){PEpV4Nu4qnNN~-4U*=iuc4bA4I{M?InHQcz>9GsGUbU+V@iLyh-|DHQP
zm>K%?&|~)hGhOhYm8uqbg%dx&aKdVap#rb|XAC5H0)-zmq7DxaThq=Dx9vv3Zcv7{
z;Ggxq7-3=IlJv+$>CWSLhJHYZGZex`|IeV{ZflTJ;52RYtt&kOE#eTsSF<I$qN(ls
zrT^@y#k_FDx6-*bJM$+0bJ9<rs5$oX{^#%G@bO-zp<5}b8DiLd`vsKreqrEU=Y&~7
WrO~w1z2~^iAvJF5s1z$%1pPmX+G`I0

literal 0
HcmV?d00001

diff --git a/ex401/ex401.4.1/container_files/seed-data/bootstrap.gsh b/ex401/ex401.4.1/container_files/seed-data/bootstrap.gsh
index 5d8860c..3bcbbb6 100644
--- a/ex401/ex401.4.1/container_files/seed-data/bootstrap.gsh
+++ b/ex401/ex401.4.1/container_files/seed-data/bootstrap.gsh
@@ -1,2 +1,3 @@
 gs = GrouperSession.startRootSession();
-
+delStem("401.3.end")
+addRootStem("401.4.1", "401.4.1")
diff --git a/ex401/ex401.4.end/container_files/seed-data/bootstrap.gsh b/ex401/ex401.4.end/container_files/seed-data/bootstrap.gsh
index 989df48..a16a438 100644
--- a/ex401/ex401.4.end/container_files/seed-data/bootstrap.gsh
+++ b/ex401/ex401.4.end/container_files/seed-data/bootstrap.gsh
@@ -1,8 +1,11 @@
 gs = GrouperSession.startRootSession();
+delStem("401.4.1")
+addRootStem("401.4.end", "401.4.end")
 
-group = new GroupSave(gs).assignName("ref:legacy:community_members").assignCreateParentStemsIfNotExist(true).save();
-group.getAttributeDelegate().assignAttribute(LoaderLdapUtils.grouperLoaderLdapAttributeDefName()).getAttributeAssign();
-attributeAssign = group.getAttributeDelegate().retrieveAssignment(null, LoaderLdapUtils.grouperLoaderLdapAttributeDefName(), false, true);
+// import "community members" into a legacy reference group
+community = new GroupSave(gs).assignName("ref:legacy:community_members").assignCreateParentStemsIfNotExist(true).save();
+community.getAttributeDelegate().assignAttribute(LoaderLdapUtils.grouperLoaderLdapAttributeDefName()).getAttributeAssign();
+attributeAssign = community.getAttributeDelegate().retrieveAssignment(null, LoaderLdapUtils.grouperLoaderLdapAttributeDefName(), false, true);
 attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapQuartzCronName(), "0 * * * * ?");
 attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapTypeName(), "LDAP_SIMPLE");
 attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapServerIdName(), "demo");
@@ -11,19 +14,11 @@ attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperL
 attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapSubjectAttributeName(), "member");
 attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapSubjectIdTypeName(), "subjectId");
 attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapSubjectExpressionName(), "\${loaderLdapElUtils.convertDnToSpecificValue(subjectId)}");
+loaderRunOneJob(community);
 
-
-
-# SET THESE
 parent_stem_path = "app";
 app_extension = "lms";
-app_name = "";
- 
- 
-if (!app_name?.trim())
-{
-    app_name = app_extension;
-}
+app_name = "lms";
  
 def makeStemInheritable(obj, stemName, groupName, priv="admin") {
     baseStem = obj.getStems(stemName)[0];
@@ -49,39 +44,40 @@ def makeStemInheritable(obj, stemName, groupName, priv="admin") {
 }
  
 stem = addStem(parent_stem_path, app_extension, app_name);
-etc_stem = addStem(stem.name, "etc", "etc");
-admin_group_name = "${app_extension}_admins";
-admin_group = addGroup(etc_stem.name, admin_group_name, admin_group_name);
+service = addStem(stem.name, "service", "service");
+policy = addStem(service.name, "policy", "policy");
+ref = addStem(service.name, "ref", "ref");
+security = addStem(stem.name, "security", "security");
+admin_group_name = "${app_extension}Admin";
+admin_group = addGroup(security.name, admin_group_name, admin_group_name);
 admin_group.grantPriv(admin_group.toMember().getSubject(), AccessPrivilege.ADMIN);
-mgr_group_name = "${app_extension}_mgr";
-mgr_group = addGroup(etc_stem.name, mgr_group_name, mgr_group_name);
+mgr_group_name = "${app_extension}Updaters";
+mgr_group = addGroup(security.name, mgr_group_name, mgr_group_name);
 mgr_group.grantPriv(admin_group.toMember().getSubject(), AccessPrivilege.ADMIN);
 mgr_group.grantPriv(mgr_group.toMember().getSubject(), AccessPrivilege.UPDATE);
 mgr_group.grantPriv(mgr_group.toMember().getSubject(), AccessPrivilege.READ);
-view_group_name = "${app_extension}_viewers";
-view_group = addGroup(etc_stem.name, view_group_name, view_group_name);
+view_group_name = "${app_extension}Readers";
+view_group = addGroup(security.name, view_group_name, view_group_name);
 view_group.grantPriv(view_group.toMember().getSubject(), AccessPrivilege.READ);
 view_group.grantPriv(admin_group.toMember().getSubject(), AccessPrivilege.ADMIN);
 view_group.grantPriv(mgr_group.toMember().getSubject(), AccessPrivilege.UPDATE);
 view_group.grantPriv(mgr_group.toMember().getSubject(), AccessPrivilege.READ);
 admin_group.grantPriv(view_group.toMember().getSubject(), AccessPrivilege.READ);
 mgr_group.grantPriv(view_group.toMember().getSubject(), AccessPrivilege.READ);
-# Child objects should also grant perms to these groups.
+// Child objects should also grant perms to these groups.
 makeStemInheritable(this, stem.name, admin_group.name, 'admin');
 makeStemInheritable(this, stem.name, mgr_group.name, 'update');
 makeStemInheritable(this, stem.name, mgr_group.name, 'read');
 makeStemInheritable(this, stem.name, view_group.name, 'read');
-admin_group.revokePriv(mgr_group.toMember().getSubject(), AccessPrivilege.UPDATE);
 
+// admin_group.revokePriv(mgr_group.toMember().getSubject(), AccessPrivilege.UPDATE);
 
+group = addGroup(policy.name, "lms_access", "lms_access");
+addGroup(policy.name, "lms_access_allow", "lms_access_allow");
+addGroup(policy.name, "lms_access_deny", "lms_access_deny");
+addComposite("app:lms:service:policy:lms_access", CompositeType.COMPLEMENT, "app:lms:service:policy:lms_access_allow", "app:lms:service:policy:lms_access_deny");
 
-#addStem("app", "lms", "lms");
-group = addGroup("app:lms", "lms_authorized", "lms_authorized");
-addGroup("app:lms", "lms_authorized_allow", "lms_authorized_allow");
-addGroup("app:lms", "lms_authorized_deny", "lms_authorized_deny");
-addComposite("app:lms:lms_authorized", CompositeType.COMPLEMENT, "app:lms:lms_authorized_allow", "app:lms:lms_authorized_deny");
-
-addMember("app:lms:lms_authorized_allow", "ref:legacy:community_members");
+addMember("app:lms:service:policy:lms_access_allow", "ref:legacy:community_members");
 
 pspngAttribute = AttributeDefNameFinder.findByName("etc:pspng:provision_to", true);
 AttributeAssignSave attributeAssignSave = new AttributeAssignSave(gs).assignPrintChangesToSystemOut(true);
@@ -90,43 +86,57 @@ attributeAssignSave.assignOwnerGroup(group);
 attributeAssignSave.addValue("pspng_groupOfNames");
 attributeAssignSave.save();
 
-
-addStem("app:lms", "ref", "ref");
-
-
-group = addGroup("app:lms:ref", "visiting_scholars", "visiting_scholars");
-addMember("app:lms:ref:visiting_scholars","glee303");
-addMember("app:lms:ref:visiting_scholars","jlee308");
-addMember("app:lms:ref:visiting_scholars","cbutler313");
-addMember("app:lms:ref:visiting_scholars","cwalters316");
-addMember("app:lms:ref:visiting_scholars","bbutler317");
-addMember("app:lms:ref:visiting_scholars","mwilliams323");
-addMember("app:lms:ref:visiting_scholars","jgrady326");
-addMember("app:lms:ref:visiting_scholars","ewalters329");
-addMember("app:lms:ref:visiting_scholars","aroberts334");
-addMember("app:lms:ref:visiting_scholars","mgrady336");
-addMember("app:lms:ref:visiting_scholars","gdavis354");
-addMember("app:lms:ref:visiting_scholars","hpeterson355");
-addMember("app:lms:ref:visiting_scholars","clee357");
-addMember("app:lms:ref:visiting_scholars","mwalters363");
-addMember("app:lms:ref:visiting_scholars","svales364");
-addMember("app:lms:ref:visiting_scholars","sthompson365");
-addMember("app:lms:ref:visiting_scholars","iwhite370");
-addMember("app:lms:ref:visiting_scholars","sdavis372");
-addMember("app:lms:ref:visiting_scholars","aclark373");
-addMember("app:lms:ref:visiting_scholars","pmartinez374");
-addMember("app:lms:ref:visiting_scholars","anielson378");
-addMember("app:lms:ref:visiting_scholars","adavis379");
-addMember("app:lms:ref:visiting_scholars","gbutler381");
-addMember("app:lms:ref:visiting_scholars","clopez383");
-addMember("app:lms:ref:visiting_scholars","apeterson387");
-
-
-addMember("app:lms:lms_authorized_allow", "app:lms:ref:visiting_scholars");
-
-pspngAttribute = AttributeDefNameFinder.findByName("etc:pspng:provision_to", true);
-AttributeAssignSave attributeAssignSave = new AttributeAssignSave(gs).assignPrintChangesToSystemOut(true);
-attributeAssignSave.assignAttributeDefName(pspngAttribute);
-attributeAssignSave.assignOwnerGroup(group);
-attributeAssignSave.addValue("pspng_groupOfNames");
-attributeAssignSave.save();
+group = addGroup(ref.name, "visiting_scholars", "visiting_scholars");
+addMember("app:lms:service:ref:visiting_scholars","adoe852");
+addMember("app:lms:service:ref:visiting_scholars","agonazles804");
+addMember("app:lms:service:ref:visiting_scholars","alopez751");
+addMember("app:lms:service:ref:visiting_scholars","alopez802");
+addMember("app:lms:service:ref:visiting_scholars","anielson378");
+addMember("app:lms:service:ref:visiting_scholars","anielson51");
+addMember("app:lms:service:ref:visiting_scholars","athompson526");
+addMember("app:lms:service:ref:visiting_scholars","athompson713");
+addMember("app:lms:service:ref:visiting_scholars","athompson866");
+addMember("app:lms:service:ref:visiting_scholars","awalters247");
+addMember("app:lms:service:ref:visiting_scholars","awhite131");
+addMember("app:lms:service:ref:visiting_scholars","awhite631");
+addMember("app:lms:service:ref:visiting_scholars","bdavis150");
+addMember("app:lms:service:ref:visiting_scholars","bdavis999");
+addMember("app:lms:service:ref:visiting_scholars","bgasper2");
+addMember("app:lms:service:ref:visiting_scholars","bgonazles239");
+addMember("app:lms:service:ref:visiting_scholars","bgrady115");
+addMember("app:lms:service:ref:visiting_scholars","blee298");
+addMember("app:lms:service:ref:visiting_scholars","cjohnson933");
+addMember("app:lms:service:ref:visiting_scholars","clangenberg923");
+addMember("app:lms:service:ref:visiting_scholars","clee357");
+addMember("app:lms:service:ref:visiting_scholars","cthompson231");
+addMember("app:lms:service:ref:visiting_scholars","cthompson287");
+addMember("app:lms:service:ref:visiting_scholars","cwalters316");
+addMember("app:lms:service:ref:visiting_scholars","cwalters536");
+addMember("app:lms:service:ref:visiting_scholars","cwilliams606");
+addMember("app:lms:service:ref:visiting_scholars","danderson959");
+addMember("app:lms:service:ref:visiting_scholars","dbrown402");
+addMember("app:lms:service:ref:visiting_scholars","ddavis762");
+addMember("app:lms:service:ref:visiting_scholars","ddoe822");
+addMember("app:lms:service:ref:visiting_scholars","dwhite663");
+addMember("app:lms:service:ref:visiting_scholars","dwilliams299");
+addMember("app:lms:service:ref:visiting_scholars","eanderson919");
+addMember("app:lms:service:ref:visiting_scholars","escott173");
+addMember("app:lms:service:ref:visiting_scholars","gbutler381");
+addMember("app:lms:service:ref:visiting_scholars","ggrady118");
+addMember("app:lms:service:ref:visiting_scholars","ggrady649");
+addMember("app:lms:service:ref:visiting_scholars","glangenberg234");
+addMember("app:lms:service:ref:visiting_scholars","gwalters810");
+addMember("app:lms:service:ref:visiting_scholars","gwhite647");
+addMember("app:lms:service:ref:visiting_scholars","hpeterson10");
+addMember("app:lms:service:ref:visiting_scholars","jgrady499");
+addMember("app:lms:service:ref:visiting_scholars","jlee308");
+addMember("app:lms:service:ref:visiting_scholars","jnielson505");
+addMember("app:lms:service:ref:visiting_scholars","jsmith466");
+addMember("app:lms:service:ref:visiting_scholars","jvales111");
+addMember("app:lms:service:ref:visiting_scholars","jvales645");
+addMember("app:lms:service:ref:visiting_scholars","jwalters24");
+addMember("app:lms:service:ref:visiting_scholars","kdavis686");
+addMember("app:lms:service:ref:visiting_scholars","kjohnson872");
+
+addMember("app:lms:service:policy:lms_access_allow", "app:lms:service:ref:visiting_scholars");
+addMember("app:lms:service:policy:lms_access_deny", "ref:iam:global_deny");
\ No newline at end of file