From 8c89ebd4315d24dfdf6afd79ba4838791e7228a7 Mon Sep 17 00:00:00 2001
From: zkoopmans <zkoopmans@google.com>
Date: Mon, 18 Nov 2019 16:15:03 -0800
Subject: [PATCH] Updating with final images and text changes after Jeremiah
 LGTM.

---
 content/blog/1_security_basics/figure3.png | Bin 34434 -> 16483 bytes
 content/blog/1_security_basics/index.md    | 268 ++++++++++++++++-----
 2 files changed, 205 insertions(+), 63 deletions(-)

diff --git a/content/blog/1_security_basics/figure3.png b/content/blog/1_security_basics/figure3.png
index 97f102bab0795a702a728af9a4b9ddaaa900db4f..ceb4a92d8ccb7f6468141b0e1abdf9f15295c27c 100644
GIT binary patch
literal 16483
zcmeAS@N?(olHy`uVBq!ia0y~yV7$!0!05xl#=yWZ;ar$C1A~K>r;B4q#jUq<`71=O
z?*0CKr~kX#ceYpV-I<$rcJI<tS62iEUhdM3+Oly)#^MIIUI~+oh7LyM1#X?H3JD<#
z9F^T1c_dUl8Wb3tSnl3hvC_47mQvWNm24eT?>YTT5NbMOeg9$kq{)fGlivKl`~G?5
zzVq+S&9gM#Z2kH7yZ2`-(`EUbI22n1V8oH?H#a}O-LSX%)+>#!MJp}{JhHlbmVbtP
z-A>KsMH*dPRZ}lt{o_(w8$IVIYsm+dB^q5^S)~f|E?@mKbMCv`vyVGH0!2iRtjdoT
z$h$W+_0;9uTb%FK#Du52yuW+<+5zE7i!`)2Qjg^y`B-3lIVQMMZr$aVjc-ims;jyN
zh8WDs%&xN7wrZDAaLTl)%U1b{&h9c2&0cjTWa^C6Jv#amQ=bO0t>@p7y`nAAWk&o7
zzIii5Tmv0bmsktz&s=tVg`sK0y!2V8#2))xIJ51_6_4Q7Tbm;MQ<o*&-*@eyjiqMS
zq9*r_+YfKuKc2U&dCQqgnm0A`R2GMawXO)c*L`W;;R0pb%w@;hPHma?fn}*i7Z=;s
zX)VRiBX`eq^GsWH=}U$nPw5sN=`}Mmdu+~$S}wVHJy_V1$7uhOuz5>FTmu=`UTbT+
zcJN`|vJ+<AE*=+)pZv>clTe;jJb7u%t~>6fUN>bo@jMM)dhYJBPd4Tu%WS8sYq<u7
zDBRc1J<t0+ac;A!acIzY+x9NYSNlyi=(rkPWy$>;Qt2=F`lQ^U(o(l2KU1%MZUMQ=
z<EpY>@wAo&GfphDZB^HC4GeKeTdG;IGQsGIZEmPdp=Q@2Ca=(v<qFC7!`s_G9RcZC
zu+ShaW|_5Y{dtph(~WF>1v}>LQGT-X`v0u-_xHA?+BAYRCEYrZy5+*Vy_MZh1Z_*w
zcW6x3vaN{~)VHl%yU*#~y_@;3qLR+)e`N4a=~|?*{}sa{L)|N1EiQ8y9`QKoBAgQ8
zvnFM^vx;zO#%8&fw$-J^vWjXl*{`3@)^g5bJH1Qmv+wKdwB6hH+0Irsat)j!pL#6u
zR{HrgsrN5tc@^w`e8Xn<%cPQ>leVU1o!xD{g;S=)_^3!TtC3%6yNNviv|YxjOdYXN
zpNqEUuy58(otx3VwzB&BmbcG1eFH_FiofN%{<GXaWtnMGN9ZJ3KC#Wg8pgeX#U&kq
z=L!;+8Gc&PQ?$<K!3GDlx_~Jse@~sXR?W-o_VQ(qY^!fgs&EPxas3(Bv46|Cd&a?g
z4^O<@I@3xeT2|}5`)-5FEGJDan=FhhpP6g@^V6=d({)pSS%oZ{q;BRKIK@BI^Y)jX
znS9f~cg0LuJNfsz6D8~?H;Lq$Emf+Ne{XuC?DJ6{*-bTW^V?6o$?iAbe}iw{9TC?+
zyFm6wdbyWPGxgf`9_c!%>2}M=ZR*@xr>A8&r-W?&Xtefn(6*GdOQV)asj5Y*`tIZW
zE2R~DKkR_;oJAU^#OL<i;>wu$PyOCSQ^C5H8P65Uwb!mTUUXK!(%!$MYmvr#zE;OQ
zOQ-&v?{U&&^-|&BWy`hhZC<Y1tZwBRI3?U#Hub_WCz+CqX8T`6&HEtY8W?AIDT=R^
zQ~2APOxc5z=PlAWC7pK5s!31S?al4WVW))WTTPs%r)wA&8GG?()phlFX?-32t#abe
z?eDMEnf8C<Fa5jI&d&Jvq3|?Qtc6}_O~sQ+hp(X>t4pREEZ(<I_uQXP(Upt=wl7cb
z-zxEZUUlQg&GY~6DVFT{_-uCmW;y+RKQ`q(-B^?Ra$DYMF};dw75T@XJC@!7nRM`*
zbHk_AQG($w^%7^!-FEINtHakN;^EUI%kP?=m9YJlmV7(=J>LnR(6aWYCkpa+=PoiV
zJQT8c*|XD+H$_jqd2asp9mdK>e(#b@wq4VoyKtX*{r`y{Kb?L$_x<Cauh;L-zuIba
z<NvMx?@{k_Z+_ag^>6g?dx^Hkjjl9ak671tF>hJ^{;ij*<bz%ZUMakFdzO1RXYjtC
z$2xB9-oCa`oaw2Tr>A)Y8*^}LBkvKPsfr7Ce(%z*OO_NqBXlffz4O}sw=17V9N*`k
zQPtMzcXH4DA8+*k8$3F1b^X+$k9J0xIn1X&a0I*7R@5E*DIRs4`R||S(<S0->Moo(
zRdr(3>YTsQ*R0l^5h<OP|EGEDy)!dESL6lg^=w(o_;JcQp?h;DUaBw*C{vvM`=r0$
z+cO&fU+=HWnb~ihw#vxk?uwY1n)43lJbrZU)fug+2}dHHe>^^K+olj5=Wm>skL)VH
zV|ddj%*6Nc&RzGpg>^JEtln90&)3|>BYo4n@A|&{iX;4-Gb}cx)UesuYlzS7yYxcs
z$i{O2YEyj<uj_LxxpkQvIi04*{mRx>E;;UVwc2*3CXesboxffMhAn&XYTnW;u4BJ5
z_}q*?JnamR{N1e+eD}R;tU>Awtut5dC32-E?lSP;kX)f{9GV))zA1X1d`S7$@XM|p
zDa-HkJ!W-$*|c%R8Ga{Wb)y}^Gc{+$B}NHcdw<p^vEl^V#UowIZoIFzKc&@Nn%Hn-
znbz`c6Kf9NIF}YDvCzm`Vr7<4+s;FO0@-G&_eh@IvudZ<p<O$+a}~Q-rmVgHJ8p@$
zv1{xN{WtuZQs>Esd|&hBc4CR(BFU_3Lwz2uL$w|zi*HRo|LbjX*yikf=j0Hz)on*!
z$WEB@@#X77H!d)8M9x1|vr+a<v(zkR<twx27tR-c{ld8{;Zc>l%GHe=z6V~pGoBGv
z<9)dERZ6Qoqea~B2@+pBY7bexX>gIvU-I^7UQ6tmlJ@<#j>u1Ykbi5B<wfRg##8*B
zcc1ep)!q2)<i#`GEnIG&ueZMsn9_eGCv7S7Tw~eK>mScQJWKZYzo^Yu3v+(mXq3?U
z_rK~3=cza5p&rXW$Ck}H%-zCernuWR?9BP5PlaK#9=q*0I_LEdW?@rFJD<uW-|YVF
z3;w%*t5V>prCHB9>-i4Hmxy&bu1?JiQgeznkK2@J(_b2B|4r5PRrqhyh-=b`x9u-U
zgDRWKNmo8PE!5Du^5xs@`4P^G?EbHIuS&VD7{_ODB`Jx0@$|Itp76I5e6~8rS*OhX
zn{=e2&)z|Eq7l1_v#eHX*U^+vW0QZ+jKj|ezJ6CG^IJdHnaA|l6+Od><tb+`Zt`p1
zqqoTWTXXH#w<q^}(8%ZfuK%@q_C0}D*RA~nMM}<IUA$H??z-CDguCkH?&<R+|F_NX
z&X>C9JVRDZ?OE2gB@%|mFW%aFj?d6+&EicDgU;T0b>xf4%1^r-W=)KpxpJ0$#dMwd
zifVJz4t*}ET<>QTbt&KZ?&W7sj=EQ7D{+{d{${4HS9N!h`dXvdFWas%&%C#!yU$yr
zf1%;3Vu4r3%YIY_$IYt0{xYqjcal$0TW;l+w6awv%R2VRr5GPvBzMNd+sJc|-t^L#
znJ*J=f2uhdR&1(zYVqWC77qLVt*Y&)yj1ex&_Wx{FAKJw&sf6k998#azIrqp=VhCh
zOJ4Xj9~F?g>K(zm(b1A;`N0_xJTo0Dr%p_=UUgj0wK71q`kRd32ZtGFC-iJ~FgloI
zcq7AbE7#8Yms9w>R?RfO*gA8O<&L0J;$FeIds5cdnqHoGiBl`~)yipSW~RMre6wYO
zINwvxRC|NpJ06;>Q@b8M*-gXvXqACG&*Y1nqa@bMy64{;c{GLZRKrF&`|?wVBUh?d
zA5qKxuCBdxjj`V*FCG2Mvzq5#+R2g99g@D(YiGKYdRo`B+dF3oKI_greri+1?V@&@
zYo~VIytS#uYLRu?uJxM7Y%2LaFfFoCt!-2BxzeyK;?HWHV|`k}A)D16UN=5A`H|_S
zz&*!$+yw;%=c;w4{_63L;7|7cD06zFZQZ*m?4=Ba6W=+oU65R<+bu5eRP*4ADL)U|
zTwKF#e3Zv^hK=L<B`rE4X)Bkphn(Gh!sTKo%lV5(x+VLrRLwZ+A!)E}anIC6HpU{$
za@k@Vc{mOmD4m&{A+E1-O1P;psciAQd+yt;Dn7gnb5|;{JEYl>`bz)$g(=<7v%Kt6
zwiyJZY%@rn5`OkThT65wv0X*My9M}Pa-}@D`7%6Lxl%E3o|M?-+di%{a^yZg@M7oG
zPHt^Hq)`8%Sw8CYgx*#6_N?Id-5=5SEPm=#ryG3j#{=Ychi4sg+{IWpdvEn^tqRA$
zc>>QaxL(f7PrdMG^?$`3Mp0)bu739BYU|Tq@mm+x<+RT?e=0chW51q*jZ<xHv`qV{
zfO!H&zPkgfqE^KJUoP2Il&-<^NItfqLeF|_e)IwE?nNs$Op^RA@wd}`<!a+a-{0kC
zKVWqW44IK(|444J{l`OlFJCK(OAv8wJ-+wSwGy}5N1`b!e0cRux)wRbn96WD?>V)v
zcJ1NHg@GcXmz)#NSRBvr-*f-Y?&Vus#ARFq7p}Y}<W~7eSV}62eYSe6w!T%@A}61<
z9r-<<j<nC6c&oVbVW5a;(AnM9QO}Kb3C|A-Pj{K69&fAf(6z|P<!eWF&$}bv=T3Ze
zJGhcDNJLa9a;4;XiL0IR*2-H$KRPYZ&^i%%G{f)D?74NN6&m_3U5lEmv`rsNEVkrq
zIOmajy23F?M08G;ev*hf<3V#!q3BuJAg<~f=(vozBfjU6O2MYfzrN+f%@A>AoqA@+
z(HFi<T#{OwXNzmN20AXfE5qf?Gzr|8YYY+*6}ffWZdTxImb~Kk^R{`#tq^f#-JvD9
z*3)5geth+w%0*=#l9p;{Ib8ktHT<o!#9B{*61Obv2dv(KAqizxS=tFx)DB*f)STs<
zs?o)DWT8Qaf6pbAj1_DDe*0IxnqN}HHL!8fT<d80q!Km9*2|eL`?f4vS^9EPGn;GR
zl>Mz0Ejy09@M-G1zRl$B@$MOmRyYVe5?pM=8Rg|Y>)S`CWg4gE8$AwSUTnyjb??SC
zqenlT;?9V;{&erK?{Mxprt;$Ej(sa<iJQ6x{u6k_zu172Gfw~ix8vIL?SIJX=X5Qq
z(L6Huy7~5br!;(=+PcpAo~|ei7J2He_|D+hqzQ|c?AX{UZs8iZPv8;nVm;1_Z@wh3
z=@)e^s+l}h?o7fJRmIc0Onu`&I4##WHQQ-U;uclKv){Uobz6kAEz-#6Yjp$*`TuNt
z<`wrv#I@47L%(N}icW!5?~6xIdu8{0(CqrOL?B!sULw`=#)i`3(@AlEL|iL_I<$M%
zsl2Ipx^!7H4}*wnrPJ#8tgMs})rU7FUv7OSQs%Zu<COB;zB3hvR(KtnwrQ*Hd;^I9
zk*9rTYjS^0xj3bzylmIrmuJMMnaQO(EYQeOaQbs&)6$<ZZoxv|rsQYbI<deZ@XCR<
zLngT?BC1Ccd8c;j=w;=kCoIrd74MwbCB?5?XV4|2lykczL#>(FHSn+CBeuorie{h?
zH+BdRxhk$0XOJcINXz=}r6SSxQvo7Zr!O?f&$0d@?dI!LmGF4iGJC^_0FkS&17?(-
zeQy{gbcuU?exB{tjLgU7JQ5<VJB1!GKVn&|s;Hju`PedXNfV8(qNTb|&*~d`30-2p
zaJBYox9@$Uf&h`F+=Y$Ki5xH4r$*0OZd4H<vUGKk_v5`ieJx)mmu5@tPhnW7!4<W8
z*GFwPS0}bfbHmJdp9e^GEfQcC;Fl2PlvH?{>Kn?VCL;Rm^ZQwa4HqW}l%LtMM>Fl|
zr(?=I8X}_e4t?EUTYdUuPg~25lh=IP=OqR#T=79<UA>#5lg*J=;?lDvA~dx2Y}vJA
z<IIcw0{okDi%;kB=!uA?{pZ@eHIr$vyrSH)HCrmpnR#4W+Y9y@zY=`Jx-ERmod1W4
zd)*~7G_<y~zLvRey;x2$F6r}X-Drs%o7F2P#~YrrO5RcU&N5u$^7~5D2j9QH>j^!^
ze0lq?lG!)pw*5Y_#y+y&CV!8u$g-!V{B6CC%Pd$G6|MZ13&zG=shGid-1yhs$MdD_
zB}?Xg{qf_Ee@_edq@Hx{e-AI$HcWhO`>AmL>G<hi78D-OZMD1Wp2L58ZsB{i*At)j
zeQ$X!eSIhUA=fo4WtZ^;uU!_z7U92XrG;C(P*KQ~?KY<tJeEA@khrW{yzXZ1&(Lrm
zTRrW=k9TbRdCXN@O*;L!dYRO%w<}q%6{l>w(EL3#>U83%@Oaa+MyC_){WorFeQMq_
zFSlpsyTr#`r`4ms&MUce@>r|AZ0^<l2JiL5BG)t<ow}iZ?`P9i-yG@JFVj}#r~gph
zF3r0CcJ|)5O+T_<*Iuc-%=>xG8X<eJFSW<3BiLU*nh|(?&rSJ=+Xpu-S^a+dw3}x|
zZvVKtv^*+xgKqqP2F}#I+g7GFwmZ4b)4WsOYd$qs>$>Z)S6vy=YSHOhXI*znxFrjH
zSrd8n%YGi4d4gv?xc{%5mCC2({O2LRzonk`VdZIua}xGF=ihnj#H>x{cBI@`JFPQG
z^4{-{_49LQik#s*wvtD3S?}{3V%s{6BA##gzw<<uJez3wFN4z?68sE&XPBRnJRK<3
zCR6=s=G`+QuMhnR5jOA<R^wnkW;DZS8@saWU4zIOt50<m@|=3I(QekR;!Sg}*~R=@
z?Rjn6o3yUKL6Tbc4sZMrQxv~rovno0CLdV=<(^B^j(49_O3pP{x=iy(_Hvt~y$f$;
zuQ(C1XwBkj%TGNHIC~&*pJ2}=6^mKb@!3*`E30kQC631m$8R|!bnL?9nM&NjrxTqF
zq-U%&Qt^<yxpMiREw{}k)c*UnQ0uf!tm)^Z-GPDjTV6FMT#I18eXKS%)b8oA<GW^R
z&RP+uel3u#YgfVn3%xh&JR<K8UMS=-s0}^#FY<s#;+`9Jbt)^8ub&lZ>)rK%*~Px>
z)ZU-vg|XEJJ}w<Q--;LeOn;j3>+JOB#y)Q^o!JsGt0db;ck;4FRhr_;X;~eC$GzEh
zJNKA5^^~zGn{aBKx@L0Kh-0VvjM?`VvfWhRVZOOEYgb651P|-8m8TBXB>ET_+Jv7D
zWP7&U$4A%wvzCwWvzMoQCeD1twq{#@k74bfOL=Lz`_sGLK6w@r{kzFW<n)D@p1*FD
zp=`Gg?0fhlVa2a+AMCbqCWlGx`seIq9z3Oag6ZLco0=zUb2V~ry?iJjsK_Rvx$KtW
z`cSv1<(@NNdQ`@#Y%>3>Wqj56yvR=V*@>$nXLWLN%EjHkQ}v45+cM;stfIB^W^Eqf
zw$>c)yY4NV2URBQ)pT}z)}a=x;~trkVPG&rXxc;D8G=2WPbc18cvEEA>RCx|)4Ja9
zy<e=CBYu7(-zMiPoXLmn4s8fjpZ7YgYm-5i&7#c6nVLpt>i=FpaZW8FWoO1cSIalb
z(~@sTxaacU)cz)XbN$~NZ_n;A$ll{t`S&=BX~RN;XQg{my>Gvi;}bkO$@Eyp*^SLA
z!e=j^G4wRP>>{4FEBX}wwKG@pZt*6qVC^}hqH#0mUd*9{C;Jv2N>RA#$ssAj!|KG=
z&Lh^gXp@tK*tEquXGD%Ies#gx_+g#e8Fsa$M!waXHMX$|yVYtmZ;Ei2|HtI)+SXNM
z5WDs5y=~34Z4Y10e12oLc*O5MoiN?-+rht|zPfQ$*-qPL)$h%}s;(Re-MI3nsD4X(
z#YwHJw*FVQSjWt&<@eY&tCGq1?A3S6cNqmwP(J-wa;j&+J?m1biTdj^a*`cB-Tff&
zyJ&`{(H4i>@o&U81=p1~>VE!}d%X0`QUO85xy^5E%NHLB`F%@8`t^%@ohL)ZV$OB=
zG|d7x3l=<?{d@H~pJ3CYY`6X?aX<b3Oxkwm2k*ywiq{*>tNir(AAhUi`uhs}jvFUE
z>`O6GbM(*j3}$YYa{cMPe^14n!cYB=*8D!V%DgPz<j-{T`qic@cP)Nc$73H@WIuJn
zgXg`uy2=(IYCo1(aqrYNoj3K<{o3*`EXV&o`^VFIu=Ml`SC58`g|)$^%+UpRn?nzW
zC9L`{`1k(Zs#l9H^H=>_#BSI&f5kcbh-KWTV|b@8WQyJqS1TaaX4&`k#n-2I_Hgzk
z2Mbuq?3>wTuyDTbnH}vm<qWqawdSXa+*LbrFkt4?^YVZC8nrBzEHiZBPm<7VdzKJ!
zX8#}WmaQ`1ZLVIB+S9M7V-RAhEEqRCes}6Jjr{p4O<XY#t&V<u)x4qMq&QctOxK0q
z;k~hMGqs%j^Uqf{RqyhvEa{l|PX0jIhvt;+kAGxJdTMN1x+l}JIrM?|*~!`QeTizP
ze6ALVeK~Qo$LHI!7*p{LRlUCg^zH8_NN`==a)|vQ!^|lQ@1B==WMS6gdN!@)dvH$V
zn~dWd<qo_|l2Xo<To4s6Dg5f(w5Oc4Cc!CXGlTMGq*a_OdLORqKjFF7>E6rpte4!2
zm_75@$$d{we6&ib=dJ7!UYhlFiHGdUzI7)xCZ*QOL{FP`GdZcN%F1^}K+v5VhZ;n0
zIIT~p&2lQe&nu~+7IfjXqCn02>ih50rkpDInz}+?p#4R_-PYHa-4`l&8)-Hu8qAo>
zF?Xt#ukM92Wi!%hDktq+`8;b;&7Iq>{dc*7w<c*A9Mw8m)BWV{58)Y^EfVtA4)3_m
z98|vO@r@<?ri;=dw+G!mZn8G6eQ|co8l%e`nQcdp2rdm`KeH|BRM_c$=DqWnG{d!i
z2Q7MQzUjJAWxQ{ZVE*q$C#RWRXW5M<wlGD{NO3gxmC#h%a9qdrm;HtX&fJ@V&loLv
zcJb)%8GHfp@n@GjdHvsVDcgtj2BK%ne{a}%b!BQZ`w^K-TYR{eh3TkWR(#gHW}V};
z@SABnrv#U-EL?r~=!9ohyVS0}KkL)pEvY-9$TTUTbCZpmk-PJzl=e5?QSxW5D6Z$0
zi52!$>H7GRZN;n3X~}-u-riQIw2wB9Sw5}v_2lRY0qJ*VEz_6S!4#fxEcCxpbLXqX
zB?9mIm3D{x_hMc+Q~WaPD$Y-a+?W3U-Cn=_+U3_rY%l-&qPDbVJ*dg`B~jwUrkUpx
z3};47bmmzddS=m)YhNOl%=BHlIGas%Y9imH(&t{E)8o&SY`HRXo#Yb__wO^OzIhh@
z{E!d(PJ_!8E34Z~l;@xDNzR$M^ORNljc?KBuN7xKoK%od?fTeNMoajHlUP^hBgH$y
zSC>v(T&}MdXYzm58sW#nZ@>EohMoQE&H8Ttp$EIZBuaP`l=yyJzD(@Qq_msNvox>W
z^ihpJqZ~V{c(Y9G<QvM_v1(`culmPxc8_1mvcO51V%~qZCf%tuysQ#APx<WGGGke_
z)02)qxcXa*Sy$Bfy04_YP}#|U;o0^^RYsR3_oPd;<;2|oWYrw;fNQgw;^Q~oV%3X`
zRvfpB*B6b@($6mYrO0Ek_1R4y!~P=o@1Am9M?7Sr)aNBdnxDUDD&i7v9~k{?O4{w3
zmE~LZl$}^y>%_VDpN!#`3is<V2Mj;i91C-Au?csJS9#rgZC1+Wr+;(a*0z`EX^A?^
zt$Q24<=f+h0k0#LzTdto{;$A^MY~%hL5;sXdp0&V>J+5rulibUJEi=~qtCsvJLLWf
zun8UcQzexyr5l;WrTmOjvZ(3&q!y!S^X)om28%WRb6rntXzNhPH0n**qVj}g&!?cv
zj%+4fpZdf0U%7HZ!^MMR!(V8(;(v+Nt!+D>nz<=DIkoU+&$de~SgdiM>$>b>enrJ2
z({#^1-?L%MM-65f*Pm`X?txmm=U+H`bOi2On5o<h5}X~Ed+W#wXAh1?B~lZQy7s>1
zDG_-ZJM;R@#F+dZtCkjx+h($}PA0eq#{CPQakf3p_?Cdsqbbu&-liW|tnr@Xy7*!q
z#l!>BxB33IIj3rzvUW}^s5Lw#Af%QPas7{6v%G6%*!p$Zzb0I4onY|j>)Ex-#dLH3
z^f69YWTPD8zhj+5EC;8tS$<B{M8^q>Y!-w26srV;+7`V2=dC>}N|HnKl<h;SM*$K}
zhi078?fq^f5j3UxQ0b8jCyyDM%Ss=I^K^)q8mz5ex^iA%i@>85YjUK{Ei@7_y|B<g
zS6RZ9Ls1Oeqv#X4YX5Lo;unRMl9`#6!DmiA=a)-tSh8Z@$vtuVZtvUsG{ueI$-{hG
zp4AtgW);`3zO&6u?N6_8<S0D(>d~<@Hm|N%u{-=EbU74lgLdwG%E#v2^(yxEHZ$LZ
zEeb7PydpC{=dt;8y-L(L1InnX9E$2G)vl+1>f2nen9?|T(Jt=mtn2vQIGsG^Yv^ZJ
z_8y$PD91U`%p}~%O2Fw?&*e-P@h8{IZGN4I=j~ebFH1yc)%ydb2VXdFycF+0|9`=k
zU8~~_G`gw|R@A)vo!Z0IGJ(-B@z1iuJWE1$WINqj#^=WDbfO`0&x6I)Zn2x27^iYY
zKm2pN^gxCKM`8EN?|c63=UEl9gX_8dVg|({xm?`k|G%`o?vjjHxk32c@298jWlw21
zaD3$0Y59K7`3GLDv(ujL`OLV!&Z*;g#HN(=D?6r?x=SXkED$_bKIi+MU!00^Pe1-N
zJ#Tm-=;5N)N_oBKq5d2nxhAXUWF{|I>J)2nzH+Ou)1G6&-FCZbeJ**i#b~9pewKc2
zxxUP)BmCsNf6wCBVzol1+P*zoyXO?AV%+it3D+yldn1n?@NS(`5cl}cvrs>dkDSHn
zdw;XD#cN$L$^W)Hbk8nMMLX5E*S_92WC&ik==RyqH(#14Ri+9%)tp+yDzBR$u*}KT
zVt!?)u+yJIQ+97NH5LdyxNha-?OQ)&skQv*UH&P1l0`@x*SCcR{`Rrew(HZJI^ru|
zG;X&`4_MX|YAnCvS5vs5;*s|{aet1U)HGl7Y|q}13!18xTN^)54>wd)QJ7($eq4+#
zUF${Lp)-~F+Uw(-JRA%ke(ROxxe&79#kt#Ywue?v6A&uUi3<3AVMTVBK|nC0{+#7M
zxwDEZt_nFZP0E~ko8KrRxKVG;@;y<Uij3Zl2j|yU9xgq~b0g#c*YoF_{p*V)*M~WI
zIDEd%e*f0V1-`7S(rka6(~Dc$GNB>;<fOTQ+wbgXb532+AbjrhqD8whKoSccZ2T#|
zCgsC2Cg1+E>ouQU_2l5xQoFZt<y^)&Tq3@^ia#gDO>LR5;PJ^;YxTkvJfa%Ti3N6_
zR;jeGsD8iy`}cauGn)0U8>{R8^R9Pu^0*Kbu;KNdCxQCysSM}OR<6DMdd+TgiOKI`
zUT^#rcz@L+{+_Sd*}ayVwRZ0{f4a^n`)Aiv>z?RI@m$%;M}M||o)E6AsIp?_--55Z
zA4(jt|F>e{?QDtoe~0Y9tmd1teYVk-FE{O_<m)zEHwxVIzUJ@xWAb(XTffFt-I99z
z`TYOuQUBgddiD65@|~8?{o#s=DlZNO%)Ff+`CazxmeW2H7mBT~xPMCKy~Ovft#6jS
z?$(`r<kLyv>yfFe?*F`0vG$R^+qa&xQSP(09y@1WpWEa4s?NUZ^s?Av!u?jgGx>82
zx8?s{Q*8N)H(dE>Wjn+Im53iNe*3paE8PEkv+lIb)P$aj7Rg6@D~q>DSAM>?Vbh7*
z$EQWyR6QdismilO-Pm=es{h{FJKx^z-hRjE;*&t_-tXma4F7#OzP>N}AFsLX#P5lT
z2Jz-?hXvEK+BFY{tX=to@!I5!uE*J&oUBIbxwbCGf16A7h22)oe*7u5-Y8D@_vX|&
z{PqzSXO`~Dl5#Wq9r7>wcrO2U&-<%ZS)YqZT=OtvNw87eZ?hZgB`-60AN5IWOI?=6
zvq5e~q0(XjMa2WbKjrUQsAZ<!F#nua^>uRIcgMt@j9W*GB{a``yBvEzLUNh5ajU1&
z>n-{GsfGO_l56i><V-D;H=WZX@;vfkuywHW0iSMFW#0|D@@cD%g|x5q3f{PkZRRTD
zsrjp}hHPCa5geMdjCa{47tu{M(^rO6_DtHv?K{;VNl@s3jmhJ)>kr-axtP*@&UvNz
z`c3bqAF`MjdMM>1hj6Ix{u5E&@jp*gt-Ic;mN-N2ntOiil*8XP==DgIKC-=2z4rgB
zgd1O9n4aHkyRcwyhi6!aq>{62me!$=y(?pan^lu_CqCB*PtiIVvRUG}LF7Eu)S{=Q
z%d-BNmO8{8?+{csjsm%0^8b&Sn%AedxH`BOulXnCyZhBW^>?XC$t@QWIZh|kWGrjF
zxGG0vZu^BluUAEir*5!2l^k8=u6(E4^|Riq*=D855t5qc^yj26EIK>mm{@1^(xg?T
zvof!pe*Jgb)51;jgpXzBKNB@xyFFJq-spj3P(I6IQANgccW&0Ndg8(~WxL7yiT0Mx
zCp<2S?Dm<L?zK5@i;Y^Q@4muWGx^>f^qH)(x^?EYo7;rdOO<AyO`D>m;vq3Vs;s4P
z{--U+`n7-SO<5;=`G#Az8oTqE$xkge?FpNedf7i=nO~*;^{F$xW*V*R-do4XDOUIW
z$nj!{Kbrp87ayDUx82&RB-=g7mv^IX|MaJ)Y?O}#C_gD(W8{{pCAV(cLO=1_jSt0)
ztOSKp?i81&D)Tm6D*Y<z-4o3I_tcKEC!hbueV?~`yZPr;QX3N0J)T*$%x6<{baVW7
zF1~-~H`iGn9NdR1eg*&ApR8}R@BiP3$H)JF<$kPg|1WiZ=_!9b)4DJ7o43zg9y)Qh
zl-#nkuAVZ9#X^dXUVh)K=U*&w3a|gaYiIn^^}B5D|Ck@V-eld*O&j80KehSsEicZu
zWx|HkkB{{I_B}mj>b_U-gyBc)G=^LI_aBuqYq~z;vRJagRRPg6>D?b^&RFZAdzgi*
zf;TZ|#jK?qhkd{7x~k(o<0i+~q&pgIt8Q#>EL>F4yQy2Q{__sb*M@N-ha>)lefQ7a
z!QHm&!A`C2+K|_)6^(BEdlf1l^?Tj1B}t3e)^xvJtkZUD#bZawDMxv{E%?rCXsHT~
zG<~bkb}2!FZ(DorgCAdWzm(Xl`^J9y*6sd^+C{Z<>@E6h=A3l(XrEh=snq-Z;WlOF
z)GCK!c{iSvG}W0JO49`=2=E)#f9o^KPj$`WQD@pa>%3T_oLhq@ufUJ1Ml%FY9cH;w
zQfH7X(N?Rblq%rfSCj6$rQ!Lh6(3|ulg*TRbdP>Y-u!9JhHc!Juc{XvNa4L^v#H-|
z?O#VrpG^$TM~h7TL{4A*m-PD-L*j|7IV)%V<Z$cjl)aMU`Ksc|l(rk@HELNp+G=G7
zTKIpQx$<p;+%n56%WdAgtcZDg-ofZ{qsIG*-%tHbP>M8K95AKij%LwjyAr;r3;k+0
z?fm&QY@0UQmfX4fEx1Z}I{$)sf|sN%`@kLoH7)MtB)M#GH*0mzxPR}MpK-IIg7@Jm
z)fH>c&*m;}t^AU*?3Y={+;5Tn30+ycE7sk2zw&zP|J&TJ+7b`mNzAFp$;^CzXP=SB
zn*OSUrU*V^*S4<b1`f6Rui6~E!Pgi4R{V^JJ;RsBj*?%KU2+#Me_XiLexJc*&dk|X
zf2K^ly1KIHsL$u4TY|1`sre*#tYO(fn=Pp?d}k}AE_SU<I(NcCIaY%Il|-KL<%^qY
zmV}vwz4Dz{m7MCfL@M`Eo6AeZIa-gsul`%|a&JxQU6V@vOIPboJr2-~4*xB(Tz2)X
zxLI}aVaF~!GyWy`=;X6|tnzn_U(FJYGY*#M`I~=cLg&h50Vz`qbZY0t)ZUAk(VUfZ
z)N0)s5w>MU&Jx`J_DD-A7@3B;<*r|!)>RwkdrH9Pyj|!*BmF-L0mc8cnh*0cn<%f|
zRMGb-W7XB!bFS9SKjBktB^Untajx;vpP!yAy7l`{!ji(O^Wlb<|K6H$z9@2@?#=6b
zk#QQQvs3Qf$ugXhxT&uFOp3{gX^iiuSys*7s>yhj$HO{huTAbO$K^Wu6Bin@r~EDr
zT0U#}cDJ6Q_A~23G;d4j_+CG2l%C&gqju|iaO%@dZ?$etn`La_dCf58Z|o);$KN$s
zl7Bfq8eCq!=c9lAOwA^{O&TV-hvp<`Wz0Kbl#+kKF44dsLW237^s4IijG|V{gC`P%
zBJNL}xu|E?d9Gx)VD)RRva9SQ*8Q_zqHYxYMtN3QV$u)ChTr>bXNu42+!*t>aK|aJ
zk1}rDE9*Boigi7=NR!$9Yx_*$nVJ5_FHfGCbU*N%-S!RYEuWA2N3JyL&^YU({j{=8
zB7BKW+Nn<}rVE=S0$1t;moE8gFwtqrm6^KVGqg>OeWw|%ObRkgN;^GaZPsI7L(k^m
z)xxjOU5(?Pn8{+C`q#wp5tr_6nP*w{rpCUL9?Pnn=H61j+i*#xg;P(ZTmEq$j>5@@
z4&Ali`_StA--%m)U4DD6PivXrgZRh^hOg@9^rrs$v(<oILb=Dq+)l#i)S-f@mN&LD
zes-2Dl^1oYywYm*w*EzLZBX&6MRV%xL$9uV<zl?$*19~uh<M+W_1^?fhe)nze|*^P
zVSDo_kBzoduFjtO_3^>7z+?M(!;fFS{O^I~rtIH^yS3-2pPpWCb;Uo;>c~-<9j>z+
zC6aR5u9;YS#I0WWpG)QO9o4p*lV?uzST<ez*^?`0N;-1u*-n0TGJLZt?u?1=JZ)yZ
zNpH4Aep`C!s_mV)Ga{#@w>*{H#NW9sa^|ZokuxWxzE66he1!YSvpt{f+NV@(SiZU>
zC8%Db&nM9QO~TbRb6)lTE$#DaYkhX^%e*ro^WINbb|>Ye*6XKsDN|D#C6i2E*)7jH
z)_ZYVsP@dXJu_D2E%V#yzVe@!ZrHZzt9;ERR3q2U6MU6s<uZG_x#u;{$v&m~!@_%K
z)ODpSh)g<i%7^{*ry9$9cavW2ote3FR{0EpM~TyPZc3KE_Fd|p*)q>GBxP}chJ@xh
z{yFOZZ2VPk-&Q>~Ykk#eug|N3=N<Pd&YOE@a?kZmW~Kaw-qT!9)&?#=>*L<B@ZE$Q
zv-nq~r|jNL(=ocYEq?2^H=BL3yUK1^={`MaC+59#Vo^+GRP4&A&Bf2_c3FJOI_t6c
z$vy2;$FgRY&6-is{<l7gQ&H{-sGD+;W#zmr2Ja6){b%R?)GmqlY{G&0_j%Hmw)|-5
z`EoYbgzuEz=RFzEuR3xl);?M3Du35bEmM`Z<&ss~T9bKEUp`jE$+iew;@`A<|IX=Z
zPMWFy)y4Abxtus&s<X20KDRsbjFuE<>K&7+sg0i-!&wzucp5DE!^1E7tgzg?>i)B<
z4jhVk6UtuydY_^3P`l>8-*Ul|+KmEEcM=XJ%j+y!*|J{DHtg`p3!I8agj4)(-EvCi
zv`<aTu|2YRzJQa>k>H=Eo-$g(b<T<N>UMprn)kOw;F05|_p5(3sR`Rvz4*6Ezw(-}
zQ%8H`o*&(lgYzQJR#qQ&&^)=Cx8}ahYfi-@+-K%*PUb$V_Qmx7#P8ca=BT#_=odZD
zT`#xrVavLAGT&bb&U@M-@F-Qx?%Tt|i`PXuKIU|MSpD~|u>844k$xPCb_r3>zBQZ7
zzi@eP@HX>LZ`4`@;!~G%+wXhR_PQ(6K~be<KI>2G`m>v73pmxB$d|9lR`=B?F?oHk
zyzJu|wH5*S%_%3(t%%NxIlRzFQK6=Pb=cePhmpP<iggO_Cw}kFbUV0S{aNjXwsd2~
zmLC&4%X6}pE3&RvySwwJ!TBU7j*rIvdUq^4ol~32HO^fAS%2<Hqz{K8<AI(v_y5m*
zCQ`HOz1(yAif=+r9t{BjkZ#N61x+45_I=p<@r`QB1csz<hp)cBw4}+sxbFAy?-kcT
zDjOFXJr257xWY$(<G%1d{drqk1cVxNYQFqko*Cw7AfopEu+zM?EdoLZ?$~a8B*3d(
zQ2PDI+O;;`oQf(3e%@{3&-0Ypd1Xh{5#x{s&iki9z1+F!nu;wfjMw{Ou2ekBESCyN
zc)4q0_pFLCAt#Rs2A}u&I-j%6HsaN3XnCI;*H^4@-p`4HQ|Z`Jo%KsQS^M&&cmENd
zH?>7Ts3oT2;FrZFM*mO$k>i=y+ae&e<j&N6%R17Y)!&`F@trDI=!nX{PZJNDnEdCQ
zZ-3s&iG#C9ZpZdN$A0YSG%>U1nE$)k*sT9)qz8wh;(;02-2WVlKkq#j^IPP<Xq$kO
zQ|p>Fr-IK}S99^6Yd`e7_x#*+dBv6%f$jaVAN73Cm3w)|o~&<GY?%=7<hlLnX91G(
z9P^FOn>lfC2EN-_U3+il@}-wQ>{(Tk9F=y{X<lxNfY70skE`8pXH?u1wu_&a+9DwI
z$Y=h(ub(!bpW*WObJK^N=jKFOPD+<lY-wRM@2z~MJ!}5+(#v04t1HU{ojhh3RBto>
z^{4pVLdL3qA2uI%etM(SGQmKp_RlJ=Sqq+<JnXv~T^T0m<RMY?(be+)MUK1TcJA|h
zTLgrbrTE6y+qa+EVK4IRU#4{WryP*RXS1}$%&HHCtlMXFyyAQRe5v{WOXqJaJ<X?_
zcp{}=`udCPbZKrm{kJu5ynlW^ckaWgnQ_HW4~fllZ4nT9<}-ia%SpxOithi=+FqN`
zBmH~F*P3Hnmd-tIt9fN--rMN8{pwo$#rywkV&9Xt<oO)Sn+KjhU%FoHP{_iSe8Fdz
zrLmmUoSL(0-Tc=ovyz_cI(ZZndw(jPzcX8B_Nn`(&z|f{nNxeL<y@+E+>NxDPu-c<
zKF7yY^lyBXx_qkcp(polf1LSM>ixnq^7q!5X4$XXEca1r=DXYZZ?~K}v|{7FyFL^D
zKC+z>_<Cioa&c~sP0E#;4?DN|PPI&yj&Rqv4(Q!mc=LJOpQuSkJPh+p4~HyWc|yTr
z?j;||zcI%JoK;&UJV^ahk^aR0eDV31gtF|g{h6kp?Y34lr>;5?Fx@6LZ}0ybi`PqR
zE((icv#Ja_xbftJ<GLG89ppHEZ_f3ZwfC&QMrto^VN8nrR(n3W^wwFCr(NOu@}}-g
z{Gxo#ZpSH~jl45nOr36@p}W8M&wCx`(&rT)D|I6`8K3HoKh0q{vt)K>((I*4TYjqw
zvwU2(DrIh!VPd<)$2!e;t=GqIyz-d7Np(?`uJk?Kr$t+hjxOW#n8_oa)@7xg68}M2
z;o8xCBA(yYe%pC4WZIQ@ji=%>R$Vo^cX!i&%S~^?f?2ou><isC@!_KxQCpK$TLjKe
zHe8spRehG-MBPIV=4s!_nR!FqdjA%=iHeW@scv#fS!%F(Wx4*wYmPG?Z?d}_GjXPq
z#`@VSs$^yv99_kpI-&Db<i@;Z0!Hb7_wN7u_I;l0^Cz9Fum5_GeNrqrLyS3)ZL>2^
z;T8#&Ssrs2Jq%)d%_q9}lt^(~quPw9w5;hmrzaV4ZmMfe=@d<>IvEtdI_JLT>%J+q
zMn_J(ote4q%Kqq{;*Kkgsm(`J5-ScbvH6y~!A5Svu5YKS4=?TWy16~fa+}4?`xiIu
zjSc$Far67ZTZX+8tX_c!(@rfFe_qCOB_>X{dimzf{6=0Wvn%H9&)Az<b6)>$*50t0
zk5Z?f+2AAej4L_#^`V}Ra@YKK{n~!K=k%GB*qNHAl%$U;&zkbwcGIb)GY^%N9^SV9
z-Fm&<71spiYgH#M;xU{mn8erS+xaPD{waZDPhR~?ovXWejks`0*Fy^x;k6T=uc}L3
z_G=gKrgeGCzHY0%v3BMfy{)=?XO>S$TgN+z_4!G=<)`azzCJ0sxb*AJ7spK|sAV{D
zyp+GZEN6%Ezb~B3MiO`QTPqh@ibrb9N(lY@exY;jT-nA8G2J?a&zfDQEljkWci844
zPmfNp>FYxV8+o3_%+#FKxlwoPzEdSrFTCNoJIChyD*nAafnu+Hyy9&ZJU;Tg`2Lq(
z$$c3*0>+XmPG-}TZl<oB(mC~vq0^bPMjd&*W3yCVAN8K;6M0;-)a69=+MsKB%g)K2
z30XT^LGl5|?3raJsx^YuUaNSv$*wlNeJm?&){_@m=hjVpQ!-QLGoz-l2hUc=O@&wH
zYn|s#u@<}}GDqor=CT%n`^9gscK^4$(8D`Zr6=I-?3NEQYRjfK?|fLd>K-S@O`U6@
zH&^Uh&ea?uJ844TtA4G^Ti0JV{rHFFbj8)ZA$P)EBg?CP^zBmnzo36#mqaF4Xk^&h
z8E$)Kcs9=no;jl}>r?K8PsOQ~t&3mVJ*vyhlhtBd`YwK2hTBbX<GX9uM(5prZ?ZP;
zs*A19x1}L*tN+R`y1LTHr~O)uO;C^E@A##uul;ViHUH_5Q1RVWy6G%)klLg)FOHAg
zk&#oE^K_p7a^r(wO53X9zzy8<Pao#rU)jdLzmLOEDb=k@!*IvKZJ#!7vbnddW`$0F
zQJ{NM?q7*YxwWZ%6O+PD{V3Y{cayN{vt{2@m+}8z)MtEan{DZt=9nwSK1Kz5i^G=a
zNMAc_=$d)lkwfv`({It;SvIK--<Dl>2)Xm%cF*L0_a%?LT;BJ3>z%hNUFAQ&d0`Ul
z#G$C3lyRum{cx(+f&V|g7x(`Eyk1@MzgXp_)K%+5J~u0_I^1J!V%6c-%aT^!B5=uF
z&0j~i<oc3={7b@<mA|Om2|j8YU>X-%&!6o1F)n^v{jHVBy)P!8+h}xUp7EQlrz^t*
zoH$;ZE9=d@{;u!lLUvuAvvaLt&K~UM^LSy|!>JHpFK4LPY~;st_+WtS7lUIeLaR1k
za`^iC^fUQym%|&XTW44>+EzCg?%F%C@7?zl#;T9UKE6_FY2p3urzu_hO>*)bqhKD_
zg9ajZtgmi%|MFt%_cdF;pK+Ds>E3w$b9bWQ3*I&Qhs{FPKeYY&+j@Je)!mtI<c|M8
zu=lC?uZNG_k4t{3IqJev`pII#OP0;9{|;RJ8!F>HYxdV)pJ#9=F8Lp0|LW!b-O0;l
zOkkX>xgdP~tZwnm$}2Z6%Q~aZBXU#q%$MHl_FJkLl5HiFUtN6dy6t6FwLzTEgN9Be
z14S0K>J8@qzlC3q-=4C6zFk$%<TnD$u3@v5>}@}zclx5~v`dPT4-^cwQZ}u6p4FN$
z<H}Txr$$d}_gt&~pk}q}`<C7*Zxx*7vb2|fOP--S``o0zYu_C7F;11gEOWP7Q@zuZ
zuefl{N?RFW#TFL3&FR*Q&s$fYYB(!$Y+2l43BzZ?Zp+PY9ttpI6FEJx_Z3^mvzWbp
zDKj<hU*3Nt;hW0TtA`F;JtDw-vtH)=BvtF=zh5pU@0M_nR8CvO<JT*A^u~oKL!GIt
zi)yw$zOmy>YEoF1PkN`s#96zyN1fqFcH`dCv;N>T#^>HQg$%!|xL@CK+3Kdfsi*Ut
zl*_wa&)Uw=oECnvDr-@v(Ctq?hPgW0)8C5hvQTs4;N*L^<Lyy%o5J%VX|J;8#Z1jq
zl6L*Z#oQvf%P4qi<Dr(f#Z0SzmX&^XDc&%PXaD|L7Ijx|*Zq5uxT5%|MVTjCq~5b>
z&tA+5FYlO<xp9s8;ftod3tkz%xo{?A{u|riGnQW0X1-36583>R&(I`w+2N%<vw{MA
zedHBay*%hMwNY=vUpb|(yjQ=ij5H4ZV<53Ib>lBXK_`z7AG*2aZC-I2yI%WwGyYr2
zxk)Y6D-FUWR?cb?IBjq}&);`fg}mD8|9hp?_8i|fVP}$T>3vb(qp#*?|N5?P!7umq
zv%B2;7rVAgDBnz5HN$`Ej478A+`s>xoT+Yb*(KLHFlkxpCf;f_KIb(BC1*EAKY3xN
zJjv*UiQ!(O+{%@UzgI8Inzr;|(EL;T+_S!_dpwI-p8C)v*vX?{l4<4PHOBtl@24vs
zykp?v`u}{eY3YJr>w|Qhr*)nYI&XMf?_O{kw{w}PrtQ1-q*{)%`+hwU$S?}~KXaAZ
zk@xdwE|b2ze9y0r`Szbu+^=tGDBkL0;BIs<<)qkZnb_hByNoV786NDBI}?)H(KhYo
zE0fb@8{Ym^Hwb<c-2NuHZ}IQ=?O)TDWrVGpzQ)?u_(MfyU-h=1ee3EcM=Crmu1FPf
zYU<P0tN(JlV8)S$r%ub~@=oZtaXz!e&3FNaVYtcfFza3aG}Yp@n^RxaCCy3ccI{i|
z`R?uE&@1;B@Rn}mH`o+qxSh!`>}z>$mr$<#rmdfT+3nPtt(F?17N>V?zt5&Zne2IG
zYgP$|t&s_4UGL@Oalx?m*D~*OcFM|2dPR;;pZoV$YT~!6Vivp9CaJdwJj%`6_i*Q~
z0JF<eq^H+Orp0GYNvT_0Stjh%(SIOdCil6spE?Q`GEdz7*kR+o<;!%A6h8d%Ls!^|
z<D->i`IMZ3>pQMg1m5K^tZcp)$+5TOWBTJ6K>_mbjDFp^IrlP8Qtg$;=XBh?B+J+7
zJ>Txlp?D;nNB-Mw<#!U|ZEGBUeQ9#<tGRAjs$k^Dv$QdAQF(syW5v@JiR&tQ4VS*y
z*j@B(7n_m{|Nc-X4n@1vQ+Ho4KRVy;gId%K6(fJshfF=f!dF&*H=HbZKtNJL?Lb7x
zl%p1*4L)J18*I;ZT@in1v1!@5{qyf@DYgjApImZv(XmD;37$aP_Rgkl+YaBIRcH84
zM6KIX!XPc=uKZE^LkVe%BQ3RKuU(IiwJr)2-tX(gp;(vrtaf(WoZ@Rw7$s-e2_9bP
zoO|ub_Y+QrH*M9T9MZa;&fw$}Hb0PIDCz9~HF0m_8}@JYpdJ!LbMl?Dr_1?{9GQ^2
zYTh0LuQM4f&u7dQ|1Z^iMmTNNsReuNGWYFufA3&?`S!7WA2j#7f-HP~h<n-h>U(iM
zcI%f(9Vsp`a0=Gz5&iCTanA1lvzw=NDs{JRT=lc;t<%p&pS1jU+YjdV3pjZ=6omhp
zwdkLeWZSM4zZYb!i%pp)@oiDRv#WmWmj|K6Uw57I3Ow)dFYWESo>Kjfx0PE2gbZTJ
zPR=>}*VNd@@BO<L?uhvLPxh_f^=5jp)sMA;P8^&X%lvOn5Rx}H)L6!Iq%O_BzEozv
zsS}4H<M9>Q^ZvLS%y_xtzRgeny66@GC#FfzewmkpwB|Sd-zW3C1)Mw%6#c#-`krmm
z%w<d0)%4#NQf!&f@O)9r?|!yL6O;D;cq`z<!O6AEFYf=5nah{5&zQMP`nykMso{QE
zCk{o&!=n4Ew&+ecBl7!jeyf0!M}T4Ot!3Kh?2>~VBs9M%tN-5m`o~(3309Nbb#DrD
zq*Xm$q00Nmj6<=7MHO7G+dr4vFQvJy|L=qCjvR_A89P63o4)PWWgqn=dt*-KHwrj;
zTrkdgapwJ>#3eWM>}#Dk6crt>UHSU`cijq~U4{R*^cw$sDeT0-DY<UvqfW8-Suah)
z?Fu{QTPe0on2_}Ai|_O~#m`daOK5Iue)}<4y+uH%=uXk);`*<xGy6c@nLk@N6<b<V
z%<pbdd$s(z@8?w$7uE5#Dz*p+T}tuMh<xj7JlCf1YgFB-76B)xdEWZx-hODC7+3aj
zjq;xokWSX`K6-Nn>VL8HOKHBEZMQYY$UfGILoxAi>Gdb_AC}DQ+hz4%!5)+~5?#Z>
zo@zRu`*bEi^2+BAhx6wh^q(r=)UjMLbJd}cmfXsTE4S2L6U{vJ*f!<(-A#X-{b#(~
z5gq?yM!dOVi$FfZ;Wg${*XT+oan-v|yM2C_5c>wd`4Y1V?gy6ld^yCOCi67hmqYQ$
z?6g_=t74+tu2;@7>@y2houz&Hkx%HUO-{khK38X~n*7!F)RWGot?y>Myt4bc-gB59
z?PDCyJtDy}il-m@hR*Jq^oezu(UZL*k!C^HK1Zc-)z!Y-^Q}?h<<sfs?9Z&9Dd5zh
ze@5ik4CVfvvkaGYR%#`zOZ^m~dOlQmWBA!Gjn${~ZGQK7{xu4ka=hx#EKbFiABTJ<
zM!qYM$$lrhL{fQH#pf-blvS;JOJ!bfF^Sl8%O!B0d3o8Ht^T!_<&9;FV-MQ@5Cs)p
zQ)e>$y|>aRSYp}b!Z&f5(;i0%8}OLi4q3Tozq3(j#`MMi_cr`K)55vh&+h#j&03?N
zDTgme)g5gSaN6U$W`=Ud#5E!=*{2g%c=jdx9{6=(dScR?=B=q8H{HqZ@z*W;b`+e*
z&aR&hYQ#0p|F5(A`a+|M`SXPoTLdm~2OD2IZ~1x47r8SgcV|r7S!ZXj>cpY=geB(Z
z>pfxNX;n|3_HX-iS+Pank$1s)lR%OC&XPTbvbVftJ3q~Ma9Vc0UF~JnZwrkoY_qR@
zJN<L3kQ2v8)fWyea=T`9i#x|m+o@rEr!dE6rS=8Il~HnY_uczBdtLoDKl978C(r*q
zDPB{tMWBAhO1q0rQ&U!-FuJ%|+_pklHM@86cag%RMOw;N&z5vN{xNUg3U*<eo(WY+
zrp|sBjqcbPgN8bqiZ|;hA61U~tgYH2@W|iTwfLQ$p?S*cALcV{3|&&zNyr7SSiAf1
zw27;Z^F*4*Zo1~;etn6+&P7pYb2hH^Ill3v0@v?q2H|7-_Xwt071o?otDD;*;PfYT
zS!q&>!M=-|VrH&#HV$r=knbs+vF%LWvLE8JCMGR12=if?n0310bINUQnb^zXYNz&n
zvEIGs>9W+_KSPC_I5=C*gt+H#x_Z_mx@Y5si>8*%cYVHRORku8zq~DFRaZ%5U)A)R
zr#7#gCg9}ZF*|cj$_792)T_!?Ml0{_KdgG&cf!+&i?rOYtNh|#qBCn|@sFvXV#UnO
zD(3vs)&JEq*Q6}rni1dCz3G+U+^JeeO0;ESWqU8BNcwDbh;u(tW!m@d?3oq;CytGc
z%Wg~FdhKLb1lo@Oh53%OYyUm1_SYZRv`jE~@}GJ2htgMOd}-PY3=9mOu6{1-oD!M<
DEBWEe

literal 34434
zcmeAS@N?(olHy`uVBq!ia0y~yV2)y7V0yv9#=yXkc)cZrfuVuH)5S5Q;?|qH+*?vZ
zYoGsKv`S-w&=XaKE+Gfi1uOROY|-fGa10b#q`(p&prqu&p|Qe4Md@INkn2K4M){J0
z72@q~y%QCcpJc`7yq%F}>~r77NB!mOC(CwU-tK$<&bt+_=iP7nUwCcR*6)>9EJL4v
z{Mq|acKNw`+3SzT6wjY^-&Vf*td!s&1rt>#*V`Wb&d9*PkQ2Pm%Qq}+-~amih3@PO
z3=9dk4X^6GU%`2iiGhK^VM|K}NR^9shZqu9A<AhB0|NuYB2^b|1_lNgS3q|WD+2>V
zLk2{1$20+5kSdpMuo*B_7@8ELK&mbZfi(;0Lby=P#F@o#Q3-4YE={PehkAx#k?WR_
zJQVk?VYv9~hwAi_@VQl4-__-R9JrBN_w?#|Im7#0-~Pt`|C$@N^Z)w(x)R6l(~G<+
z@76z^y4kL78-M-Rhy1^rnL)voV%l+S=5aaeRSfs{eLS}D_M7d;<&>WV@3i|pZTp$u
zTcb~juiLe%`jy>pofme&ewyn$F6V6ff3{nHoq5Ffg`dxVXJ?0m->ssHtN!M9ckPup
zK5uo#-X9wdyKO4}u<v)-`MOiVe-1K20=?tfw2o`#dAn9d?=Q<OKgg+Ga(&Mu(Z$#Q
zzT0~J*J7}PS~7C=q9pmI-&f{cE>~Bv{qVQj{of|W&92tpTT-?Axm-!W_QG~qxAUpL
zz2p8odU^cwdu>0<R28M&_TM%xPOPiU@p$p7BEIf*^m6&%)AK71uV`P<_H^m>7t1!E
zn^pI3s=MsglN&!*+kW3#zGrdu!-egB^ULS$|JP&8=DKq4zUTkH_?OS$^=4CK_ciPI
zud6O@n|c202VV1@f3^2M&$s{fYg26B#J53umdE$3tJg1DH+}CD)yvnv2UownTKnYd
z`tQeiK%sH6NNnvH(^J{s?&fZvD6!}Lo6YXFX8pG_mrqofB9p?{oBn3|{Vg+69`@df
zf1<!7%y`PI{?EVf{cjsrJ-*5$@^j{WV;%iNqJf%@nm12n-%7szXN5-?i|X?UpHExP
z{k-RSu9{=y7p2=Nx2tNk^EV5wjY*Eq6Fd`BT>o(5u6-Qo>okp~AOChMb-JM7zHet|
zz5P`2MC-QOiBCV+&)Hs=Hv#8@)3IBWSl^aq{&@beto4v$<*9w2B5waS&0G;5zeUOA
z=ib<(`m2A-79L={yf^Lfx9|G%zHON(u<eu3CFd!*%1OETAu8+c>TNQWzNjUcvwijJ
zjOu&0ju+>>)#|jIzK`MA_Y=3A-&b8%yFTyU-k9lAc^MfPI;QCqUwpNGQTXA<Q9C8n
zqb4@pJh$>ycbI3uw(}DX7kcmb{(XAf=Bn8G+w1>-((j*ly5QKWTCekg^}BiE=k#Xq
zPR*XS)4xBWUiHYXefzGoa)eaz-8RpTFK~XMdp>old;Jv#upP-4U)4{)a=}UPv5WTS
zozJwR1gCxZcjeC-kLYJXsS=6Wv48)%p33^YYuU80L!YWsR@duUe)Cy0HTTkMk(H<Z
zMHxL=A755l`}b#r^Ysg-9t7~uQhfq(JmbYxip7)nHJIC4&&=O4VUcLythE`bd^aw9
zRPwX@&m*bxGE02#i}&kOo}|zJ`{tr4&%|0kp|u@%d=`a1pKY16^V~G6>)&iv+q9>A
z?|E)lZhTS7s;p`gxQx0uNmVH-(m_#Fp~&D%&B<WvnB0x7tL;TL=r`Z5z5jdJ^B~d6
zHDQWp_P6)Vt&IF>+a3R<f9_7-NLRzd+}ST4T=;P8Oz$kuElR;JFM6H7w!_tEQ-;Uf
z^r`9f=b}2+Y@Iaw?WOAL_w_zM`V`Zt1P-Mf=ZmY}S9SgQBHq#QVal2<+!i|1GGc2U
zbuP}moqDI3PcrR>oW3?sT0~s^*L_hci&>V13FnA+bnM{KZJVfi`Sxp_!k7B9<DOgi
zZSgvCOK!ED>2V$V+n;>=Z(pd{P}bQ0XI^&x`TeIf4htPW8_vwYz;JQWT8${h;<~JN
zL2avCl|HHNHqF=EYn{tnr?)8d)8x1rQFS$QGOo(3vXOu2sUKa{{>tW6#n;%dmj_p=
zo_lS*^VYoWLbG)0<ANsFrtH=+5S)1``*QNM<4W49sXu4lzid49^~o~L$vlhas6<U%
zRJb?TxoCFL+D~Va1-I-mdp_;=#LsKuwpDFT+x?~JX=$W`@^|(A^uAg484L^zF5c5R
zGFmyjm#FprnDt&nup{8hbRPL%Ob>-Re$}liQ$2Jm|LYAGo?~BsxX3AqUoD<2x8#hy
z)UQL2UcFrPep=U)Er-8e+C25%dKv5I7ru#HeOx-{OWjtd;MF3_+}G{fV6mF@+19_=
zZ}_FpRGz)ES!ChaI;H8VQL59nwp2gaa{u$R=bvtQ#Lo?{dil!w6u7oZ;p_~n-#1w?
zBf7uPw&n4?HO{9mGlPp1A#q)B<pip3z;zg?QmAv9w(5M$4$pY0*c9u}8^N&)Rt2kt
za8`#d-bX=A548HnVGB4#B3F~ojxN{Rz2^6YpU*)tsm->?b;~x*|DSmCS9ozSFfgn!
ziSzRBxMucnRj|Ko=pkXhy2$U``8z>%Z^Sp5$}@$kQSTS2yJXMqy0$xi=icAV`~QHd
z=M8T<a|Cr4xuRFfVCzASS_G<>L4JkSv|yDW-w1+g=!OhINX?C|0#rqIh;8WlF}MBy
zj^B^W|E;KgvAce+&bjZe@BhA?TDniWmwo?d@x`C&AKb2AW%JDAluqjNIgA1zr!<Iq
zsXRUNS^r(xy{Cm=-Rq9j{g%J5_ifwv{Ez?ge;@g~nC++2ywBVJ{gK~gd~WB0=<RiX
zzx>?yaMSAan!CQ+?_PfUdx?6##kU`mkL8uWJ38GzKfM3%t+(^%)af``y|i$bE56gQ
zS-;|P&-0MuRp$ba>vaE`w8?+3$KQ<Cr`PR%Z@BB;iT6c+8Wz6GeOGK7*Z)*b_sK`Q
zzgOGcOUr{~eIl2|+_s8{DLcD+`Rj=JzxVz5`tt3k_l37p<%@0K?@@dH<=gjrukzJF
zA;dW2$l>}=-|ss5+ow!sE1v(;%;@vUa;Zr-k2}?K{d@hrChgZBrH;&=bI;y8r7YXK
zt-AjAced@-KhMv#-Ro;R?eFzu<5>UP>1=O(o`)Ql$_mhTRoXH6)#=OpwmBi|r(OQ7
z@O|^S{cGL7M!dV|B&YvX>9?<~T-CpG{<WFEZa9B^G~qCxeDuG{++1-*x$Spr)@jPm
z$hnbt{9?7Az7fQE2X^P}%N1UDO8sqSN!^2WzjxWn?f?Fzcz*p0{_Rifds)TTn#Y#j
z{j%@2{|EKL|IPRBt=TA<dE?rmshj*FV@v<8*ZcWvQq_gH+sEy{Zw-umlCHh+^xEUe
z*<E3tAyo{Qtu0Js%!*7sw<uXx>ZQ&r&i1r@?_GHB^xwCi?#Wy2UpQ~?H1WAbw=(9h
z-2AVN$;Dgk`Fc=2T_30SX3yh3d!?uYhXM~zcG@q#$d1>4@w)pjyqFE0nbubvuXf|z
zwy$I9#_OlN+TJWRw7Z=cdNci-Ea%Jl;omObFaNFiZ;4{nO*`jp^D2J?F0OySrSS2C
zfbDBFqcm5~sgJh1S^qntu7A&yc}r@3?VWVf?8|enr(Y}gNZqf@&ArW6?<0BT@#CtW
zzif5?-kTAYvRZsgpMA;u*Sl_4Pp_JKzj&?WvTyUE-_MG;Ht|hPbZP2~IKH==<Kv%e
zMQQH7viptx@3a5fmt;;_amMXayNmYs4fAHdv<<b5f81xf@?GEWdb8`XpUiG&vpH-@
zseBUa!X068sXK^w^>e%TE${m7|2oujc;6)lIjOuKr#7FPomcTyx_h&vl(^>!%P;ZM
z{r_F=$g?k$m*O(Lyl2rH_1m`pk4*P57d!rSU(V}=&0pp7<WAdWJzw<o`QqNmE!)<3
zi4@h}R;+XWuAOS^*>wB&%*Vb`PGP^#{`~&@<yD#W9{G3wFRYq+{oC{Vt}BY<+h3i^
zulrVRzB2f6+p%-Yc-mdEU(~hy<*&KbW4qt-{j1)r*Cq8HIc?9bRxkX&uT$fi;b%sV
zuWfv~9zn-Xv1?7d_=RQrQ)Bsyr~a<X4VwQ)mK9WbFeE>V+2YKydb)a(!Ig^cmZgr7
zy$8R<ED?<2J%2s6=;)UvKf^jM&9M9VG~GvJp~;_U$CKZ-I=Fv}@7-l{@BVimr^#%Y
z+Cn?~Zk5}8jbF8B>TAB6YN>OpgMY7+Te-6%?Dl5yqWQOe=IPg7ooPHT|LpG9=TD#7
z`~Lg3rGfFcw>V$DBplj*y-9oL`n54>zr*(2p0_@1Q<2@yeL^qqTwk?)>-j0sVl|yH
zTe~Z+)XrI(v2|}*rOs`)xL5n0)TBpAEQ`A@e*VwC@51veYWW^Nd$;xb`la_j-|;G(
zKgHX#?44_0_!jv&SCaqAz5OL^F#Bj61E>r<uu8S}cv#V|-tA>i4}QD+#YF1&f5#;U
zBW;t4XD+__ZhI`R?)ueiB~@zAtpBfmvcPtKSz!CWf}Km1qSkhN5jWTPIA?Xn)}YzH
zqo2;sP2Zf9uuZd3a{CD<>m_TBEYt0tl|23N^nxop-4?yt_(t8<aN@yNmeNv-A`Xje
z-X9Y^)%TRL(S>i9wr&dkWEOof>$OAl|IhDj%rDm*jM}RIwcyT#LoxrCxCVLIDL<(6
zUAO*SqTK4@jQhcwlc$98&dfc%Zf*AC7xSGv-}xkQg6pjh8SkB|RBs)NsJHXeRyW<R
zw#8W>``(F|loe7lGc~@q>usC=Al(0G%(uDo=D#XDz5Gk=;hH;(B)mPh+<KVtR%Ycd
zYm4xUT9KL6$Aj!P&vm}8*CSZiapao7Rz*gwof*{+y}tNa{7k)kd+VpL&o4I3|My`_
zm|6O60WTHZQj4dz*4;1<zxYaj#iV-=uH5CZpL@2v^Xl*A`g&I%OC_!{l2VVdd_Kj|
znq|Y=y{oL|Wq0K~z2jB$dGp-)Grr%daany%SLiLQ7{0(ED|PIO*@0D#bLJbHo?7)i
zLC+}UbS(eb$64WSYuY}>e7l=ByDew!s%w1qZ}hu1PH|bi*PL55N|E<d*^j3&`-B$!
zw@s?l`M&qb+P51sUCo{Dt&6#FF1Tw&PxLmM{^<qhp5Als`StnVt@qutS7%Ip@%88?
zI~9-jw`-<-T3_r{d-7}Rq>DDw@3%iI;l2BM=BqnCPt7mOtbO`pDhtC!A;qWzVauf|
z9=9=Eoij0O&(?0~EuXETo?TX0x6s3K{=edvsjL59c~x0_^ZSmY#=o|7C+VnOl-mC4
z{)CLL(!WaUe=nLkZ^6GNzRf?2UJ1P|<4E&<R<Twx;^?Nfyfn*CQf3x;m7l+?N!1J8
zmfO1Q*^jMzm;Y6q|MI40;<=Bj|E2i_u1&Zx?O~0}YP&fn$}E>#x$W=c3oN=VKIP_>
z^H%L0<?rJ6v#-^U+W9XgeE;=)MOW>ouik5bYY&M9f4A)4A5*^DDYni1YkTfiZuu)4
z*6=jWIxn-ftRm9-qh0T_S&t{Py^VREvGsG|C5?C9iB+e)EG{)~xZ}E7OnK$PTIWR<
z>O4zb)|@i`Wa26G>$_&R_m}YAHLamafse(MH5D`B<qJC<QZr)z|GU2P+TYC63t}xd
z?7cT9-P&Z!U;D+j(|2}-ZS$A>{(K?t*Ij;E`|Ex#nfGPork<Q<-}jhJGBvrgb?-N+
zZISYEPa<;jb8GKM{+D^C6s3AcFr(g`5j2=^fJZ4PX@Xk{%bK?zS9Jc*^tt|FL(QzY
zZrN=;p^FWAzhyOS>plOa<jeFI@AyO4aQ@AVSSC2{f61+-J1;96hF@H@Gd^3b=4H|D
zrr5K=Q5qLdZQbH58ttXAEo6(+-N_xnDHi9qu716B(bc;0sBPKdY&p|w=D)NHl|8X9
z_}tqGd%}Kry}Nb&YxUxyGgkL=!teJ^`@A|k`{<%JiDiAurfWP6U4K4#=k>KVsTnDD
z5*{<Rug<wvu;-^v+r;BVeLo!*9Z^31j(>H|$&atTPM&sjzKP9x*?qH(PX5hH-TA7r
zdd-yZs+`;3op-<R*}qX-?QH$(#NNNZdBFMl!UVP(7v@aPviR0MWhvuzy(JgU)n`ec
z&%E)iefilf67Ka9VRN1L2U<v9>=L<B>N~6Xie7#k@2gg!wVqe*Z)_D<E7f;>(!6e=
zNeka!Ty^!W(~+_{DrdjhZ4I(j$$o3t);4G9yD$5*7IYMBFTQ%|vzdv?miYMF3wz$S
zbB5Lj=M~FZS$vT#EPb=^eah?gHzMA5&fM3WH7BF@cix7D`eO3iMQV2M`5n_~a@}-`
zwmuVh@P}u@vFNtErR55|d;Xkx|F}izcDh}_Hr~uTe6>#V-74)$&zntLI#a4V^T^Y`
zvFlIP+c?_>zAgXX6Ftf1dED(U&p&N>GAC<y)CuM1vHe>QZ%(sH(@r%GydHWyOZw#7
zuU}8^{r@XWA~<hn`OCkjORsKvywxf8uiPz5yPfl@_QYAw{w-3u%1R(}=9Z$w+lPai
zjJFtgS2?}@m;QgJy7TkN#V59frU!@ra+d$RE5?5t=hpR8LeK3_S-$t*wwTu&|4sjM
z&1TcLTj{?xJ^EL(b<TSqC+jb=VUO3<-ubwB{+Fb%%5Uu)=ci8k`z7Jrm#5Ddz}4mf
zrOSNLvrYEoEe$?&^BiZ4-<1oO|H;@gfchE?3EC6q?fmj!i}T%E@6Sc`E^*g&R{za?
zN@sfU`48u2u`lmqhA5N1aISXM&alltlkQ*L#NqqDd((6)$*P^pzPDb1+G6&Cab;!V
z%<CriStY`hwkAC<vU(oHS+vZu3!(tj;pqhTV+3>s(R%`rjsdc8j%t=?O@iXjv*-V<
z`!0S_XlCS=xXNpl|1y{u!er9t{Qc#-?}=oD#<jK4*XI^LoW1A#G!6ARe~cEX-nJ3{
zoy^G)@lvMzh~V9=;;}3`94r0rg`aNQZ2CPl`t-Hk3=9#CHZzWeNge<HV{JYox6`Z3
zi+g{t?>#=vWc|f6;(~&Lk#qKRXCw-`p59;r8aq{tVz?*-VJJi?fq)CQi?@r5i%Uxe
zBaG3Q(b>__(IKEKpbJtexQG?bSfmQl<Fv(L3rLSkhZvmEF%6`L<02D=`4|?#&2PZ4
z2xdM5jDcxB#3InpC?Pet9kbeIxqqQt+LO9Pt*#<#fA2k>cJ}1IobHZ}6Gao&@NIr>
zp0}e>A>rVTueY-Iu77rX;=dY@T+q2+ns!?ff4}`-614bP=I{6S=N7+Ox!C`HxUu~1
zk8VW`t`pZ@{dbQmeb0}hcZI*-%6@Zy;oEJu-?azZ|4-;moTj9twCT*I*COj@JlcDE
zef<CYYwKcv+yCaByZp`W_bUubPG1c#zyBlrzn8M)fjvLY-~ZwE{p#*_ukQVQW?sHr
zuD<5`j=AM>LaXcN{Q7y-{phPBnsTqtZ|UghSkv;x;^^mP6|Z-_-S+#@uhQ3b7xFol
z7M5Jvc)aX-Y?0^pr`GQzOy`*>F@E{!&u@3*?)QJ+%fsi@*Oi~yJpb<79f^l0MEw1F
z<^26wk3MP6+xu*yT)Cj2;Kb00={|)YMdshwQ1>_fyR=uZ(KXq>XVS~^tKMe2_pbW?
z;{dbN%mZ3a?$<ptzAJk@{{GzhTbYX&9?x!TXR1qo_1t}V#aWTxzdvg!DJgxL{N{6p
z@=IpvZTJ7}?mxFsV$S`kZsAh#QVS29dbHp6Pr>)CyWhXd+xO|zMS}yjWp_)BS4QnF
zd;5RJub&S@%-2+=Ts;u`_os-Upy13}x!)PeuVP<cU;qEsuC3Ys@7FbJ_iivbc1gqg
zu}-f^Z)id#FY})>?DiH?Y!!C|-Ff(!=LoIdKl|6um!|zZ%xAb7+Zek#Iy!U`uG!x@
zv8!hH+ikzke0zQU|MR+Lo!%`b*X~svWWD>`?#seJWxr&x2&+FApWEC2ifZQex8H01
z<N)(=UgkgVX1TX9KC52G_i4Gmi;GLj>*ovHrIY3FCLV6Hm(JQE`)$keQt|!2t}cFh
z<?@NkH(0mbGdR$0_wQq1|L08gc{kqfJuc_GH#Bmh$zg{3)<?asOR#BxQin=%WMzW%
z$8vsKlUJU8{Y6#N%-?OfoR+jT@9nMsR$o8=(_A;_QTjETO-d_4xlL!YkG}T)#J|7v
zqr>DPZX`Cm)b#5wtm?bY^F?EQ{O)i6=lrUCKFhso9{)FWPmnX8rd37$lr_uw;h(Le
z&3~rr3q!g@LRHKB9oOTU4>MfP-G29Q@c+8|v)rqu@iK!#JM!qvxUf2}J^xN@`gB0~
zFhl)sW%-xu_P$sY*#CY;V#EL1v&x4V?(cdwabEIa23L?3Im@O`y<hkD7yI?~(ceMV
z^oyRW|8Z%$+hK;wlV>M3yu2wZu-bn9ugdQt;%f|f0$f~NT(%ipK7GpH)b9Uw-rM>A
z<F7@8$!RA@JXm`@?)KcuQ<{reldk3LJMxSF`uh0)XIIwOCxC4I{&BfON}uJ63G;vb
z|8^(+dp#Qi!{+4ew({Q(AGgbU%wK*dvt9n}ml?9`;*1;C*i5@*a6sqFB-VH%9s}+J
zUtYhS5>hH%cH_h2UTgbj?)|rGpUc17_&x95>+U0b*6%(DFh{E1{N36Ae&3h9zZn<~
z*!=urUcY$vyTkjh?ES^N{smv<wab?h?ygbHj;zel{r5&YUQ+kTq{N1H`JxjK3=Y)J
z+Y$c#&~*9hu~mOt@3z0+fAV*Q_NN!N0-);R*{SFIK6k#Woxf*a_1&rK-_EQ4BX~Et
z{N9d8=j)q3MQH5%xzfM4jWO-uH0E!&^FQwl4PNwhOS;UBxn=J(@7~U@^)7$^{{FjK
zFYsK_2BRM@p5HfrW$U4TNO<0kpO<b-n|eH_V?zDcb-Q<!@BexB?s>WLI}Z#F9DlPV
zx%^4t`FH2`ed&33Z1??(wcl=kuizH~PY|u)yR`blwrD;1uSPN@AN+f(WI?fDt8_>3
z{ptFD&)t>gwT8E~G46XXC3&~^y`NQw89KqUQ5Pn~wM)O-lXiu>@P}c0srB0}Kb54X
zO^yHQvLe6wxwU(f>_xe#4ArE%S2xxBUH-mfw|nx}8SL<eo1a?W-@ASH*GuW$-Rmva
zTfciU|K+zE#oNzq`lOvNk<jw<Sp1)(6CK=_{QhonsP>29c^S?MmpcXype8B<gN{LY
z?bGJFqVH>yzh5%;e>Lw@u>Ynte~grs<|H=23O8E|9s{S^JKgnZDmNtABp!x+hq!u!
z=*BgFE<L+{xBh=d-QCvZ^Y6(PJ!ouB`g5hZewB5q*PQjceg?t3xIrXy`qck3ANRi~
z+qULUnDXbRMmz?epBwQMytn;!W6c}oL+9;&U6?45E|K68xmOiDm3P1>r7H4gu&(z0
z3x^qu_4PhKHuBHAV{jnZ-zLk1=fkw$c?LWJ;CZ};sb0I+{0Y|8w$C=Y|JFQjN1_Rj
z!RH5UZH#I6VxFB(m5Y6Ld1byrl#BOLc7}whm-Mvjk7PvtJig{v>eJ%dndhgyKKo}|
z;bDgPl|TIZ+Zfa4%}HzkHx3yNM1(!w^r`;)1?R=DcYIsay-T>yZrAM{m;GkP7C+nl
zw_CXXo!*{bb1oVjIMW^+5AMA%G*lYzUGpb9?AWGH{~vnCOU+F`SANOhz~s2fn)09P
zWA5Djcr^M7GpI|?z>rWFnRois^B<P|bNtV(u3u;EGxz_(^Ho*lzh1|i?OOMHU*YoK
zJdnuBi8hN2`^S2_Eb=E0^O=9fJO;<5&3Qh|5SOvEx<A{lY%bi*pAxDfe@@qbx9L;;
zx2fw(zTd0)oM8{jR2lpKCcpjuM7>16?&-(HpHEiqw1;>z+9zzv=|55l(M2D(J}=d`
zeZAye$8+1&)sH5BdwFebwDtPbr^Y-Vu4S)(d(P(Rl!J*4H{Va5|LMrP6DuF@dGtKq
z$ZFlE<4zOeqQNdTP`W?e#N?uUgx8xdGme+MzP|qcn~yrH=cPW~yz3z-BW3(}nD%+K
zS<Z{HdpiOxlP;btKNnm7I~ts<4%9Aw?{=#GmHM1No8F1vE7IMNvh&5K?WN22e=EJa
z-{RkrcQ4uHZ@u00S+BYGu5H=<#nw+Q9NzVO{*TRfC7;JEc(WnY;?s=BZeR85gCXW^
z$=LgQ+U?!;KTgXtobEbr|D}ELuGwwxK%=>T&mFE`6SKkBLskWx;9R(&ZPSZP3}Bx)
zY+(QmLn}rxIBYSQ2Ax9|(1p$|gOrPbXNX<6p_9@bV&I_~28Knf3@+Unpn>d*Oh`iB
z(^hBP{j%}3+tk<Z*zHWpW^3R3eN1;%L;R0-dv9-X+;ri%e`L(}hw-z%eiM(YJ@>-&
zd+p<MxkZ1M&#4S5KV56?^Z(z@_cci+{-1w%uCF=x;`!74MTOsA=KnjkX|H;BV7~Zk
zoBQ8SzFvOX?)i=o=}+NzYck7UeihFPdjEURyHnTu)-7BcfAr|}Ip#@<r~l<{kFnF*
zUT}Es^_<T}yPnKlFF#cn<a5_89oKIBU!xrJc$?*$7tU_C&n&-G`{Up2UCZqrH{@Ot
z*!fyp{>{ANGsfy(PipRaWWG52?U#J*<6fzy(Ytx<e*OI3+ZUT!a9lk9C8$cdnB0Fe
z^SItu75mS>kIgmjQ%Tr({^i^4`<7NeJl!At<#CSZ-o4+y=f96DIJHsuzWC=_`!&(q
z*WKQ5_}k)5_TN8U*YP~*WqZ={-mjO^zyCM(sJ{O^B|3Nh>)H9|t61J{DfYkVGv{_y
z_20Mocb`2KIp|}#bPqTZ*qpX(Tb1GJ@$C1l)~t>k?~7Jn-%NJrJv`;%Hi>hRJ8yqK
z`P=7z-GPI@`_HLwx|}!NE!#y~r|f+6DaEH7r?{?``pT^vwNw7)`=A%SGhOT!SUfwj
z*lhK8cKg>W7k>}-ezNi2b9b5VYgh%>F8m%L`}i?`U5e+_&{LXET|r64P+*bkmTi+V
zQakSH?S6Ylw)W4%#S1Gd?_T>SV)tEdQ}|vH%l2P;{o6X9{w&)eadB5(<du`HD%a-}
zzu{*;lRWv|?K<{1*0+|q)NXXiUO6@VRHor8E>O&<t`6ApiL*@Zw87@f@&7mFZMQ9-
zD`$1(+mw_S{<hQKW@`l0wV9+TD@mRbV?6o(<~rFrkxwt{<?^c;i{8|9&AB&|=V;Zb
z;P29Br?04#eQD_-d1d*Bw+2hz{C{E`XJJ(~&!5@w_V?#4HQ#Q3_lbAzoA~%@z=4|`
zVb3O~+>QyCnlG6o@={95FYM{ezt3iE%B^Dm6tg?GZS&PVGj{Ep^M8WO(?6T%Yi$==
zTX^_eQQyt{|1&Z@p2fV{!)N>G!P%;mSNB{M=9PacJ|5@1?d0Q^mZ$e;_XYj6emeJg
zvHkg~$E)4?zn@?J?AVi?o}W*(xvcJ+e0}+H{qxV$t=AZzpKh{*-5~YedSTN)M&BP?
z&96B6;^Vfurxr7hPruifGu>!)+}Tx=*KS$zZ+YF)m`^pYV%`Ps|E~6F-uIlj)#sES
z-I3dW&)72Ul+kyk?}-_5R|R&~=jy-6ab4}QLZ!%KOWvN}vWtsXevhkLR%3i-yY6nS
z=3VhWZ~oKGeD4{X9c}+xJ|jiG()V7n=H@BIuN?M%FZ%Px_r&9`c4v1!`8X&4>dia9
z7w$~fTt7t`97!(O-7c%`KAtnYq;Sse(hZ-*nodEyk4^F}1+3+|W47w^tt^qHfwQmo
z{NA#^O8nK=%s)#4MK^XQJo#wSv&r{trKj@tbGw)5^)G)oi!C~Ce(^e2#Z9rdE4-7n
z)}R0S<Y(53Q0EG>MWIDOy$?)|Y}#M<c;_kO=To!07ChaR^)JNwzjFW8pYD9Oj@8uf
z^Ou^f`FNY)yuazU=Xgu4$lT$-t1V}8@i|+s!zRzCR!^&4GJRcqe^K4ecXPZ?>8|(P
zyQ26+ndae~>Gk1zwG+?$Ty`gTy^;Njck%!CT#A^Nx#QY|jHz>;%=x6~cy99&t?S|6
z7oRfuzEiB^glWp{nBXUBrAnn5`<MHyVx0FYnkjtKgyOSbx0P=Cw<6uJb<)N;&ZkT#
zh04c$d7W~ysBeDu3;F$3YRbhw%fHS1bf(OhH&Vw^UhA{xqN&N@H>dph=BoX5<2udf
zA@BF@S$0Hk{n}kq_REI4f7<*vI_Ue7bzAK+R%YkEPrthRPWPSPZ`7CEdA)afv47=K
zJC_}=Y`iNzS6uzQaObp@{C~eoK_lhfqN!}Yw*$^EzglV2yWjJ0ZB~7*bH=3&tM+AF
zwVD2p<%>znE&r+Q-=@2TXgB}eY5di*;;Y+N>Cm0qZgzyFtlA%IYI4~^UTCd}+3mKd
z7Ng$n-)60HUvfXe&)M$ww$H0Cb-X?8VYk%3d6SrdN92?5U*u9B_S8ML<UK31*>=56
z++O{wE7om#H{JW&ZFwV0ladYRme<E$y3s4LbuUNg`Lw9FxpOj>&WXCY_TI5=YueiQ
zu9<$T_FlCvq*m{u*UvB2>Fuvl-c_Gkaz9vT<N0k{`-L{u%{{YfTB!P~sHl%xji-K>
zu2{ZG|JvK?T(jaWmx9Bd-&()=?fr#wg0=7F+P<BBGN+C2+SX^getk85e)HaQt?zsO
zx8JM&`{`6WYo*QC?Qeb0u**0%#eYrBKDYPwwMAb)p0CX<dGldj^!r!u>Ob6Gy)5zD
z&-Q->C1*?jYIf)U{b`@EMbBaGuFt{ovr1!s{rdiI+wZT{cE+{xb_LgK?>686*_~Sb
z_j~Qn*Nb2KTV6?y|8q>fSB{&zcF&aJQ)}bz@&7-0zx?~ZZ|{5iX6~}PZ1=3_eA|g?
z_2-4R)!(T{Ic>Rh%yU1xD(}QP=FCYMU)yWXhHc5(7c5o&c2&manf$@r!92B-?wcK1
z<-YK~#u~RTK8s94)@7b}D*W|?_w5y{KlwE8+&}-zm8AzGZinkXy5Ln;`||~V=WBgK
zxreLcnv|}`A3tUG*zVx^$5#U`7JkiG@zBn1OOc+lGs|z@8&YwW!TEPAE=o!5n<>}(
z&DK~YO7nZ+`_&vSrUzE{@$jljubR9vxmNMCt%ttn?%Y?^M|Q-kf3CjAUTHtI$Ms*^
zzBGmNzE$V1m^rWZKey#o!jom9fA?iPwfVhw=iAb4$LI8Bgv!cHI#ji;?Mm3r@9qBA
zs@L!5sjXdb>Aykxoj-@F*5{lo`gYoN%O#FG`Tv>OULTlvT;{s%hqv~3vz`}S&i&pa
z<r)3DV&^u{yxzfV|CxWDrPr5-as*0UU2pSx59|H+`~0gut<Z`8SDb!+$J^WYtFyO%
z*6Y9h#%@jY{(aWJo6L2+Kc4-a{$=6o5X&#B3OY|V2HE|V|FI>oa_jq>r`J_}PkUN*
zBC$PRE$F9p!G+8GGk3)PGdug`zuVuxpegO1b5AeF*Ure`ytwMv$sPWC)0Lw#XPhfr
z*sw2SY2#eC+`WOD*LMWAUEIoa`F^}<Lw4m0ySEos{OJ+lo$4NEKRM&-zgO1vT~&ML
zo(_9DbKb0fbxO{EEA^d=*JS+*{kza3Kcepa_aNShY*kXvOrNa!7Wj1Dr?=BX&ra98
zDOdi!?bRuZi?7xfg+CX&xF*{#+4kxE_cLd7XYk(L{cqI-=S87=6P-)dnL^gDuQL1M
zUL9k(R9%0s`ozs&9zC@P-JgBC<BZSy*SG4wx@^0$XN9M2<7BbdD;6&N`~K1?c6sN|
zFWR1EEVWy9&PA$t?$@hK&Z)MOGp_FB^Gv+@e;0f4%K4MG$*V_Ae)rQ$XzdrVH@kkz
zUH+cafBd~|R?OQig^#}^XV&EQy5*UArC-*F*8oirU%o!`SjM`&y8Tm}s}#aErR;sV
z>a`p1qcFB@+cK7luNGZ>W#@!?|N6P7RKo?<a>kVYUElZZ=b~W0*>!Ka%J-yC-nHku
z@Vp%-tN$*1|L^OU`;C(}uHxPr8#h^Q<IS$Hs<zk8lYeb!%Q)F3w6=!H`knBHGS3et
zf5d{ew4KY}w&-eI*Bt+Ox8r7(MVz;|=*67>;&gcXvx&S@-K928c3IuFjhE9a{>80N
zGL!Bqf>tWUZ@DCVMf@mF<?Ju*DngTs{oeaUzneIx@M-AtJpzkN*ZEx5SpQT1YO?X{
z_rIffE_&%d+_7oJy`G(2VYbs2w!O?f{b$7<`Olm0ntiR=wrFbHqQd8vDz2MF*X~>+
zc2j)qtGR2AS{BvroPTw(Y5Ya0s3(i-`8%#1`mjy<-hW}kd07%$op;=tH_xO+{CCW&
zh-mLEpFFE&H{Va5<W_47T4}L9<D%50#<jXp$K~oTl|24mF8A-T@4G<G18uTpbMih2
zuRUA6*=v!}olSD<k1MTJ4Sm1s=eC!Rmy2(ly2T@`&HCH+)%$rR%OVb2MZdCp-rQX!
z|1|C@yV=_do{LmZ$8EX9ZL+dy>Gu`S9CNfUuHt;3+aFf%;oqhbdU#ix+t=^YuP=SR
z@b9|$`_^13*fOiw$iydm*}~?pw+iEvq9(t3{Zs3FSz+fl>#ASQ?4N%Xe&1N7UDW%x
zcn#azC0Cy-EiBE?^1FFq!m%$VyeAJOb%gQSpV{iVBz;!;mWV~7g|brHB5gH7!=EWd
zt=ztHvSnSpMoRsQgnEh0X!XsxEc;WI{kP3DU7oq@{eo3HyB@dkoeSR*6kjxV;?aNA
ztL%Jctj_S2Qj09z{-k`P>*{G0@>T2Cs9emFuDyCd%P8mFPxXB%S3KTzhe^c<PB2l~
z?AxXu>b&lRP5&GF-W?|UluB=!^}fo9?|rssoo)Ye`KlW)zFW=zv%Bv6zM?b6=l559
z$*h$-zwg)eui4w{i@wBEWgm;JKDWMa=HGA6xm-<(-@Yy0X<q8<d|hglOwqot5qryC
z{JJgInKQfA)u8B2%xlT#F$QHnLi+?g&+JUwpTFbHtFzA@g#2u?5$`-x_u2UP8n>br
zwcA^GzfN&JXZn0@@{@V}*3+l_<W%3Ev*rC9_bSgc?I_a}-NUB8pHBK+^Xc??iMPtX
z&jf7SHSdgd*7n{dSBtOi@W0z_vShjX^Jzt1GrzvBzP)=|;*`m+%IfE9&c1T;-_J9y
zTY}bU-hZRL{<P_HiOny4*U261@SPfeO6#}h%xM8r8Loa@o%ifUW&O6VR;5ezQ=CKe
z!(aJppH#fQVQclu&S^TkGOlVRzdR}NOJw&y<9zWQGrBXbx_sYOXzI5mtInf-V`Eg{
zhQ8@?(-vO+{pzc#Q0cp^B_*65aku4z!i%k5S!Fji|C`gDb)s)_lhmtg>%`3S9@W&&
z54Bd@uix+7o%rO>Z=vws4<^g9FV*d5j5>aDC$H&_)#~eHmrakG_AiNfEz6aH<2y}K
zvafEx*%fv+cXjrg^Sm)W7qi-n!(!j*R|Kq9zE(S{J0tYx7jX~I%IiX(w&q^l`>!^)
zRr&U{aKSIFYs4xt?(;uxsr884=Cb8gwqQ`(U;d)36It<FZiPCuyJ&yD^-Ejt+yAsH
zTlKbOT)p4D_NQ&-ZKo}_6r(dWmNw4heDk+0)m!S(%h(tElBbqG&sE+pW&LvLiJIPj
z-!ea3d&DsLS=E*IZw>aFXsCN8)lQn<_GwAtWK$Dedu2|^Z&&hl&Mo`C+;+ND)(yVR
zRWDbcyYuE(kecAky7&Hl7x`wczBlLJA*Q#6zi+!$-8w2B)tUSME}!7*?;2_I{Ga{d
zIXg4!yS$R#-?y9Izv`W}a-r<Zoae_}Cmh%Hn6xYMtNznlcH)|={<@s_^lMkT^Yx4W
z85EyeZpnQW9Ib!s?CaBZ?|-b-KNGp7DF65OJ!{pCPlnAc-@80*)?~}c4ol;n<vU(o
zUU)dYSpStA|J&77XEvX`HYeGAOG=>Y>bHhoi>->|vvz)aRe3UCQ`y6=ogHDdPV?M?
zzuxE(UVFk{%1?6E^xEYYr?Ul{TD-3Kxn-}NY`?<Onj+qb-6pqIT@3Ag`h{z%!P0}%
z-xl@kQCr`;;A*nz%>A+VY<Yj@OwV4q)A;d{1yYA6s~x>=vv^9m)U42XZ#TWp+_Cg|
zT1MsfS=y7?%3KyyUGQ@F6tVkEnK!Td>AKsBjhfH3es3#`EM2@$S@*Zz$yp{o#X+%}
zH+!#4J8|ZUcf@M(zBbV_7qmAEEDC)-_xS7n{NGm@RvL%Cf3<O!f3e`&NjGaQOstkO
z^sro>cm2=OUk?^6SyKP!&%C#*?}hURzVny*x6(h<J#E(QFkAoP*n72V7f<aBw_JK}
z*_xucGt0w@k4H87-u2)4WM4S{*MRpGSG&JOeU^K5`gKxw*s1J0)p<*G+YGN{_$=1v
z-80AgwnLV5Smui5jS?Tbe7-(U-okszWZq?q^WWYclFsBge`WF2dEqJAw(Ku^Jr8e}
zTK>{8v-(k6n{(gn`6gF(^d>ynxv$_{_?Du16B}acYfs&mpLWB`U+T<FGv2FGbyJPj
z-RlaQ5FD5JWSRLQmd&v(3-mWlJa4jSHG6VQe;Duc(;qKy7HT|^{d!|m!NRwaXJodo
z5?;IHtV)#S@m0>cmVT#J?{|vt%)Z?m%xw^2d-A>I^IPHPG>?0(51tzx9e?}x)Z}MY
zMdw%bJ>6J$Gn_x=RpiNdYxk^epkOsRU#;{!vb5M^)9)+QS<5PO1Xuhzp!8cd>V?|-
z%U1i(gwH8?BlJe5-eXD7wa0cmicy=^xUROFxb}U7R@TMFGS!VzYLox+^ZK89oclgp
zYWddtQe{)!?qB$@{a4ApBdb(2dDs5?cxlC|_x7t?xh@^Z3eWdmyj<+8$Kthb8#BZ&
zuXxz<*Z<dL4!_6io@ntNJrVz3>UaFNS<io`nq4tCU3N3x^xLHjot<k#@BGp}a`nPN
znf<ow%T5H%JDq)8);iVZT^zrs&$jjYC)Vcvj-MpG@yyPz@%AC%MSDy8SGOkz&D_>4
zedf#E$iIqn{(e8W<MEf*DNB~_`>u24@0rRae$O^)_3v4?*I%<)Cf#FO`zcL%nJuN3
z-;FQDq+YL+EPYkZvh!W-xyAACSC?<Em3K`G+TXS>r~Jk5`)zIM&tiV<^_lFkb4%*1
z*O}{$pHKOJ;}fIz{yncwpSk_8VrRZ{{q-Qbw_Bgx|GU0#hWFn&TWZ&(uiy!ad)%h7
z-sGYevnKE4g>8BJpR4lzs@fy#bj|FXm&q-*)Y}1h-!IzPtqZ*OP3wzvu_|-ry8A!6
zEzYF*`AePrd-d8aR_0rw*Pm%et>t(o^{V1#ef*YR*CRit-`ZJp)gWKoWW`lxZ=O}#
zmy535lV`TKWa5n~U+X`c-uiZ}c)Ib`&l82W<K}OhXghmhvgP?4^DEJ}_==^4R{XQP
zzVm7mk17B9HsQ3}|2BP8RjAE8@zwp^>f>tXU8Qa*PJ8=0x^ni~jHw!~43}3&eK&c(
zab{K1t%VJOk31(`{ic)d@$5ob<(^mx<))k8_G~L%XvZQ^ey1a*ej?8zRc*H|Q9Dm8
z-?90vX@pMEpPMy5)6a^|@?|c%v-R8-pNe_%Qeis-zSxKQFRr_z{`jr>E6eo@e@}7y
z?z8B6-1VIGy1!%26wPqqwVnNP_vUS4p=I1ZS-0-YuT7M4fAu@(Ro*xA>)(rb<>zeS
z`7_O6_Rgg4*g9@cUfH{|4zo=^^gUy#<Mg%+Db2qRv#;LBYp=K(GvflE>}s}*+Y54}
zvvQRy^%jNNa@BgSdY-NM?bX$puZx~eoZ{izCa`U_-m>HQ-ma_fD^H%crfQwkAJwS8
z4+|{U-`e(U@z?6eW1P<MTiT|bli#&$+jX_47w^5!Y6<`87v;0~RH0sRNl<uDd(iS<
z@zxi<bzP}F_j9Y0RN!hOU+4XMr(fk3bM!yFf9j0F!-B^r{+jmPweP;(d^`DzS+AXM
zubyQz<7M^wTfeRS(tb@ceYrO<b<(DFo20cSONrfhA1br`#MuimUW-(<owjWFI@3g?
zcv8k%wM*R-<oaeFVd8dfQ#$uWl<mjKI~y0iZ;0+(B+BUVI47ebz|MF5vGleU-&u!^
zOtxp;S@OSZ#myKO?MdceGV64Y&vVPP&M8>-{(zUWk!_*#)4BeyZ^x|@I@&6<cH!IO
zx-y0;UX!c3em%djuWrTj#22&DHusd9?tA@Ju=(d2s~Ma8{+>2$7rT`)T_eBx`YN7a
z_vnclAG4~j9Xq@7)MHh#&2MYFk39W*;au(+!`qf+#iDCph34&#S}?cx`nlh;RHB^U
zKi-$}wASeMety$4rq3_bulr^>d4}Jl8qk2XOLpVQt=BdjUAuG9?X2a`9Q~p!nEQED
zeJ#&Ed(9Tslo7iAz=aKa0uFPo7QFi{=B$ZM{zBL67-!wXyIx7%vQ##Xt={c$G+@1>
z_4HNGHuVUvEwlWgc=6SDlPeo98;3r%yAmM3y~6S9f-QS<Yj>W!v$oE;W<?%vY;bk|
zFXtz}uIyR+uZcbL!Fjhhr9E3?-#uND`s23Mg}CtD9LIKiK5Og4pV6{cRxSE4r+3k>
zr}ByZ?|o0HTn{f@qwf&f_gQdl-TI<+%cmap?2g%T`17yt+xJVHusG@U*XQQ<>bbYR
zd&Kvx4lliQf3-}#*<mTr(EgcD9i9pPN7FAyoVJ;&b82JMDYfDqO3|xd&YI3OQ{5~x
zP~65yJa60Tgmo+zwLDiobTNIRB{a3t_3yoIlce@AozolEn!Hg~H{G9--5F*rzM|?u
z+UJ**)^7|BzrD3H;^oU#wOc>$_u6;q#G2PV0bBOQJ1?3lH{q4&=|2mEmX@6h*)8D~
zt+)2WRm*LQu6;||ve*7<#yrn0m!vQ6KQ|{kw*Izr2)E~xjaJ9Qif$b%ss5k-N_CZD
z)6RKio}Z_L-j==`|8|4QqI0I3uGBFEd^PIdUcBkn!iiTu-@JFbO6Pf?v*G6cu$ZVy
zuS(v|TRAS;&qY^u{rM`sc}1vFdrMVDM_T>8(CRf;4&K>3ZPn_~`9Xc5$8S|dU9vOz
zQ+}uD|6kQdzxVEftkiMs4zuHZuiq57H|Fh}X<0Q(7e@B(pQSP1t)zCBZQj*`H#@>i
zLoVO&Uc8~IG0phPir8&?rp}%DY{}Q@|IS%{5l_yjUVN)nQ;B`&w?8@08F@RybYmvo
zn_p(<ukE=uW2w#M?u+a0T<7wa+VIveIBxBmr}tH5j61`u-|MZ{*35FX-gNmJ%TuXU
z)AbMCyteR{+=^X&H#@?#KZLUX`fBuj$Nkr{sxRkVelOT<aMf~2jk3{9{;PU6K~F^z
zGp7GOZ@T?`>!cam!p*gLmd&~K`-<1eoa!xEfzzw}Q)df3C@burxvy-&-0G{RK3Uv)
ze{ogrXXESluC4z!;mEgIgUpS6VHxVRsVw06nTUzqi7tzd)m{&f>NVZ6YU<{Nmin1G
z+fKWl58ZOBt@gIEvGm0(={jfa*S=8|3q_Callc1HRqE;A?EWWP_9i<on!3~V?Vs5u
zX}|AVhxGn8xwrb^UA>d{;(zKozx&k`xjw%-KTT-uo#t(hao&rs8|<vR>7w)d^Zg>d
z+Q2h^*HoF#K5B3&`s(yQ-)6N<Q#$`Qqjf=ixc8&Buq!<w+xE`*S{wE^_jS}Q%c#Fa
z{<14rbvM;c{h#Bi{oU-kg^B%Y+iyPc!56&Zb_>1mS!DX|mhu(n_=y+l-0$VIEPo{e
z@m}bnt7a!IYn=Uf+2ggjQ#*_9?WKxlTXO9Vp0oSC*E>_@`s2TqahV&Q|H%Ba-PS1a
zlKP|E#YJ|-j<;APi)<y8%wJCaWivnb^X7Wrue<&wNo<`JcW&$cEk7<C5}epp$nEmw
zz4JNC-?Fbxp8k1dC$H}1yXWFh{ruXh_I%d7&N-)d=nJlUoZ=DrE%@}F^mxm67ry#w
z-F~Bd{Isp4(3*vb?USE9y?ST)mxk2)llNU-x$W%7;=9hz=jAHRe*DVe>fK%c%5MHH
zeBUj#E<DxtvUq!cw7}wX=HGYq8TbABSA1`0yJcNn-|Y6t>jp1R?~T4FvweyU#LuFO
zw%*B*-fWtqXUh;>+;K@oZLO8Xk({s>hyCBxrYxT;zs+<ye|*=KfWvEdzBuBu+IU&{
z`q;er;BBA+Yf~L|OT|un814P^Psg=K7v=ZOOq}WMx?#KMR*f^)<d&KDMa@W!-lGmG
zXBZeR-eS76VckyGnckDw?k;&)7d@Nj@2Lwb4Ki0m?cSBJE%vRg@#clG2b7Zn4}TA{
z-dgown_mAO{?7*;pWVsjW>h0Qw+NoG0&Ot`O&fytg*Id`g0_!3fhLm}u}?}aVr5W>
zg6?(&&r^c-w_=%_Q~*t0f;P;GL6*!Z-(+GqGgsKJP7)lBKRBny)hGU4&c|@WY2B`$
zL7-}c;e+taQ_D9Txc017-+rC-GgtS-#>$T`kFSou-LU;`(a)wozG_jR4N3|3mISV1
zPbrMpo)=sG_icXY`DvQq33-N`kADt4?z335``e=K4Gv3e#Ix23bbuE-Z18c_F8a`a
z|Cg9p#}xI8O5o68xTxge!VS?1S(U~;;qJFPU*~_nlU~li(7>9!{J7mScbDvsF4|95
z&(rn4wl?~EEgNVZozmyCyF0Eu>b$o2sWzAoTa4$@AqH7SC%DKJveK?41G;LC<DwE|
z;hxhL$VxcGIz7cG$O=9r-K?-Ra##!$)CI5ZQ;dQx&_gm1qDzTP=fK?DA?AqbR$N9$
zKD4au`aI3zyYO09(Y3#)JIZpXSMToX0IkV8akJlS%XHTLg@<`rG8uP%y_LQDX~}>2
zr<M1%fr4$*mCcVu=FfXH|Msyr_p0Aq-1~CtdfBfPI-+)Ek9(hFOianvy!*W1U*_^s
z>GE4E^&|e99ChED3SO;bnL1zdp54*-(8Fbizuo@-;?QOP_j12}9OvZR#x?)<h4x*K
z`|W<QXJ23UH&8j^e_fZk@5a^JA#1O$ubKZyG`MDG=8H0SxvCfa?{@tA_0GQjv2+Uq
z_o?}{Pqpvr$5*}Vm)rmQ-TxhFm+!5<KkHFNz9%TmBQq^Cy1x5<{C<_;Ug`AMx{9CY
z|JQtf|8D<$m4xmepJdBR)>k~_{-61GSLxdgSKs@8yr%i>%Qs=rqP(f|&OAQVmH&TN
zra-yA)w3D$_d$#K{=a?L-pQPHw7%-Y!FSKJ*T4C8JAMAP?^=tdhVrk~04*(3T5aaO
zt}?~3seV=4C%fu*KM%jw+nHj*(&LlRvHostdHFNV<$un{y$^lH{OtGcc~5e|3q3!1
zY%*{Z)A$i*I_LV@*x!#Y``HwlsPx1<crRC#v1QRifB6E3+ts2*|MfpJT(6b}FB|PS
z|1rDD`-uJ5lm7oM>W0VLN@=-Sg^Az)b7lE1^FMda|1D_emHrp596s~;_j{V(zL$YQ
zL~v%bS+r8!s*Qh>y^pM~*(8-3wzTHj<@x{ov(4V_tt#lczNRu|-h9xaw~ib~9l`xx
zKeo^R=~I5w^7)^P=e^SZ(~H;tPwe9N{m7Hg3Nmow(UUh+A6@oP*FN39#;EfBS@ZJq
z){i>E)*ad(`T4}FDOKx13(s7(1s&59obR?<_0e=Y(1Mp&>umo2$=e=VmdW~>JzFla
z^^-?v3`k|l?X=CRkLG{)as2;_Titq_T>c2X+577ZyZw#1C2uzV&whJrt9=&B>-*~~
zQ?8zj4NV8TVd>P3-bem_bGLIU*`_FX54;*HZuk3p>trMh|E<-mbGs^f)9mDghWE@2
z3}+hm&s4g<{mbL58}?r{{a@zo`{d<)B;QqOhkpG-Zsk31@2oy?t$yYs{i~N%Plmrd
zu66RBe@)HzrSI>uGcXvWzx(_5_U>Z+df)BO?RNW{e<{DQVWIW^Etho!_j~*~&Mx;N
z@6XZrH}iJ=4_<b<=I*Z2yPy5)^2!g-y}n|)_Z;{4GeOIl8)p7IRQ~?$y5Ar4OWkF@
zui2KqwECQ){oP2Vy2Ky1?v|IQ&#!vrk+Ql*d57R#j`dX@TR>%VgXo#q_@4=&RX^9>
zZn}N$veSnhbLDSGD%HLFbJv-_bbCx~>G#X*ayvQ?$kqONc=zk}{iP~9Ude!qaE36!
z`M=Mp?*gqQdG{dQwp7^D;^mEGYwsieYKQgoZT^1Ad+gUgQ*Zm-Z+Es<f0d5Ac=zvt
z_AC0}qMqTwzIWIB@86hP^vv^ao9wpvV(qox@2%eK^2h(ghf_S8ZC=ehf5XLx-}={t
zcW<}vbA2xgvD4tp^8G)h@2bA9soj2`@wZ?1kzb{+cU|4%QqvZ^4^(#Wu3uwxbI0dn
z7eAb~-dE9G1zE7haAw|YyRy3(OZTjq5#IE1%ir(uqTWZAe}9#1e(#2C`4Pd{U*b|{
zq_#z;-B@bn1P&X9GqbO5arq-(`|tDJsn6%%f4lX#+~w=PX3Q;<;a&ab!(a22{NSc8
z!+}Fad7VEF^IN7w>I=?ywYU3xkiSoiF?0RvhUV|@_4fWd^ltP0eaHW*L#iCH`43ee
zmB)p7A4#9suk&r9tNkmfO%f+O*Vj0LmfGw%4>fgLqNSeT|DF7`8C!N7|CRPGQtbbZ
z53h>dx*K<_cj;~fN4o0apg5&}_I4i}${*|hOZxt#cD_MvUgQ(y?%I@#{NMQ@HJeW6
zv`a!C<M+N^_pV2Lf5nyx_qpD;!q)Hpv~{to-5q^U#mB&~;mr*(?<48^K~Y|QqLDrC
zQg!K<kL~5x@Ba(?&I)l;gk(;y>Z8r`x&7^HC*NBQidXB`z3X4u{d?ekhg|@?7%?Gr
z(*^G%>A!E^`+4r->)U@*|L5=js=N5HW;s;;>IPNsBlVwy=fBdc`?}iw_Vw(|^WVJh
z)4#W<#t|Iw8!p@_cy78__4r1c9dFvYcTN9uhkLiWP38MeM2vlYlb*jRHtzeS&3;mE
z-7D9{-TQv>HKf%f)(vVasPz`;)X)3y<9PY=IaOKPe?OL6ZeuV_r(%;p_gsjF*(`ov
zGIrx#s@!k6?sx0<nC{e5ul05=s=mkV|E}zAZNIP7<^KD>Iq!b<|8w(QlXtzRW#X(o
z_k-;}{ewhggv&**$FKSSePWMbyz_IVe($^Id-wmXKE>R;qz>X$0bR)M1_l>y21x1!
z9nAr4dMHFe+gBZ843HeLh!wi%ivf#9CeZ$A&@m(kvzQ>u{v5VI7kV{hFuHVu+nEg+
zjF9zp2ur51X*g_ww1f~AZruTLc&WbC(=B=L)olt(Vt2pW=l=c7;r>_acKr+A4VrM*
z+5Nim!R`86vXy5FmGgcd`Fpwldh+zx&+k$z=fC^?={o!R>~(j3-`>Cd<ooygo_>4z
zci9^cXkNW|%jw>~d(o>enxEKseEya<DX+Wl|5*I;bHB@#$6s%pu7CF?Rr`qZb<=3M
zKj-30K-0*1cYl3tW)ci4ThayfNG@ai|9kh#q|0s;mgxR|TYtb~*QFW$%69w1AOE)9
ze$RDFSVP9sU9Z2seJsD@^}dV6ibig$px(U3WP0bfQR)BY`}6Ab4s(6J@!saoaplgF
z=NI0aWFvk{ZiCId$1OaO)j$0I)h+t*7c`%}CAZIhW%{yjKSApdzU(?Gu=ZO`TicbV
zKX*O*GcWt}w}pGp?b)`jK4Zq?fSGn*?(V<0#zws}Y}?6yt7CrI23z{QOTJwkdflXC
z&A**JxAOx_m2Y2r|9IU@=$7)ZEg7lj{7v`pTfX@)QQ=GL(%cFAzl5guZ998mbKQCO
zXWyUfJo8zL)AHxj^c*vh!soGa*Z01DcH3-n%aqiw>qPzSzijYr(f$<l{KBTo$9fmv
z+tDhr_Kg4Oy4#OkLT<f2x9|1NFI-P=z4|`I`P^UL>9Mw2>$lChT^q6!w0r!##hm;(
z8GnD-&VTu>;?KR=Q@yR9uj;#8Uw7%kL66{5t8D*Q-F+_q>#*-R^XK!Q7wwgtcO!3p
zb{uE%epqO(@l@WCE3*8coMRWy*VI>_t-W8$*6O70&gxmdaPINA@{^*Mg+wf^em9wy
zvfKWh@bda{^;L24x338tdoELY=F7h#yQ|(s?~YE-zjUMj$CNuMzh8;o3c6TzoA>?v
zduGpT4xQAWJ?+4p+Y>UL{)lvVvh%!kqA=r`^EP6cYmNttajQlN&am=3rImVD?)90^
z`tzn|xYpg?HSu%y`}n@A-wsX9cp4KFrnwokyZ6gCOZ`Qz;PVC|OczaUtBT*&Wiq3<
z_ie$ZtN?epR~tRT_b#ilT9r7Tt=#&G-d@@8J&$cK+lE@!d4?WY**7)x>noYOU2o@I
zOpet30Gi5FNz2XmlieNm=(f;Bul12(v1_trq_&AaeA6Aq>3f1n>1##RF|U|a*H^Nn
zE4pYqe^xS_xM$n-6)CH2ukEmmaz36V?x|VHx4-PS`ttYT+Ww*XMf+dfTc-2+BZtXF
zC2)^s&93(syEZIQjN^Sg%{;dBZd&izvL6XwA1&D!e|ziaMx!3R-+qtx+KX!nT@_zi
zHt)uc&u8n5V%E!gMSR+*x@hXWZMXECA`YuNcLr5m`?cumw+maHpGW=FT$!~rS+R}p
z+w&=|9_>r=^cIDFH@S3k{&vxux}XzMZa=<$t@+<qLC_He3=9WW39Oy=#p~&<RnL_U
zA8dPOfAzzmTkGbki+Zkl|Mb=5W96J4OBURhHp>+3;n^)ctA9(tqN%QqYP#k3zdhNq
z=<2!LtfQ$Ja?#qd+=@|x=gM|Gz3}0{&aSY|;NQQLY-1j8dp|u_b}}q0^kytgSL1!~
zC5mS)+YP<6i(M`!9i_gT<{0di{%aX~GyRC_@0AZLY9lk-S9}$J{9=A^)tM~EULJWL
z{g}AT6BdbPW}Y|vzQg}*v1UhD^*+f>Gky!6T>JN2_?9fYur`Hnr!@|%WdELJ@4f|=
zd>5y9B$&?leSOlyq^mdl{5`d8bJzQyWnHEEz<Yubk3qNBmQP<^uD7%K`#0w5hrFi?
zWf#q0t9hb(J9S=g8`rh6oB6rn#XH5kwp>~rc6;gewR@L&B(`x(i_vMxn0jX0-nLrJ
zSt?O8nZvt-c|0?<qh9jPS(|b7WAXdj^N#WO>#X$p`+{FqB??lFu8!MsOZ2tVvwKfw
z8JVn!O<Xs1#iYJ}m!7|j%v4?5_I+t%?C0s9Hn$01Q<A*7?TPm9GkaEi3At*sK;U48
ztM>V)GD-|DL!&(|X0>YArdv*b^S-B8@5Y-bai=X&KTp0c@)bN?Ch<V!qE=w{lw~!+
zdT&>CM!raSv8Sj<C&$ol%cc`<yM<Ev!ktB~^VEEog4ag8nK|E=u2el_`bE}bZ3U0+
zj0y9W75?sR*~%U3B5*9%I?r@}*}~qc+^-$ED>I(nId+!0`v#Bhd%O6HUi$I>e;@YB
zOIMDHWGu|c3)5XI7rCZ-a`oN3;OB<#s<-?)bUlc>NkA7`&6&2Dth?Mjb?UQA4(B&)
z{$i23@BD>3YyVBy`>lH6ufrcMDfB0_ys<wnDYSi#^X}Zfcw4=<8@5iV%$-~rHB)?=
zVqNBi=^0Nq{*k-2u={Jof9}c0zkUmydFAI8TMNbC>uR@szI^F(aR2t(*DJrNs_u0c
zT>UF=!<5{V_50s{+xTslQuNEG+41s?t8;HJtha2}+CS;Wx0>Id-+Wqn?QQKzGr@fe
zf7Ust&c5G{D7EjdYTmq1_R}@JT)s6Su;jGpYt2&em4Dx@S{V8gbTSC2HSMq^&2zVc
z>)HP&H<<Sp!2P?GHKnm7rhJ-}{H$zNxF{=l-zo!2RV@Z;AD{|>$1Wf>cDBy<fB)Xz
zy~|&7qJ9@>sW+&(a8u~wuJ_XAWuTSX+Y6ufUXG90k=Xur_u_v0J-feNHqV>-|AA74
z{NF#n|D^MSMs7N$>C|8Rb*J3!;@k2A`xc)nJk#l3`aJI6tapc2pMU9R_qg?La@nno
z(V(G~%g5J6U-^GWDPrOt?R&r7{@-L~06XP${1&~+=dayGA76T{FC((xOO9;8hkxC_
z=105eJ$Kl`0B-P15><>+-}{MmahG9U+%-^_1=PJMpa1V!e$F-Fvcq$)_dIz4S_>}q
z>w5iL-S2lVfHo-X(y#e`546L@@Yc7t+xMkTu6<f69$$R#g-qPvws4>C^PYbEV|{$(
z^=C4lZ?wPPpZOuCcu(PZMh0*z=w{ZUsfkT1C6>>t{p8V+_IVbE@3;BaK^>dL4_jaU
z^m-q$J9b;=3fZb72QL@zcWUFjc4s|D$nTg8dHdJB>u1&d*|3=Z<-A`#%x=ef8nzz)
z^`lu{a_;e$>+5H-F+-wdQ?9G_UT;%(ZKlaPBd=DQ<X!B_+5Ud=_nFg{zFAy#Y~B99
zYiD<ao&DRz;rhgD0eG=GpX{2qM*cd7r8eKs33rxV|NDb}Zc!Y#^?h7-1tT<0Iz!o&
zy_V0dKIO6C*1V-BLfXD=wT+F`Q9hq)5x=`XXR>13%e`5y+KaBdueJIS=`SmrZMNv@
z`-P{tI$zp$@7daK|8(W=-fycnGBDf_y7=p5y4~*TtC7zcBUqpO_1luNy0$;8jdfZ1
zi;l<hOoe8>nz-uu=L)%QnXe}=?Bltg?YdfY{Ug@pGS;>(1!@;h%~`kb`tv(k>%yz9
z9n*cm$Z#O%L`UDhfHH>F&6nf98!b}p){pv|*krnYRU6ASgTtOzHXNSg{3QDhlgwtp
zwF{R%-OS-WZ}*>YJ-NU0?(GQM!@w{jzyI3A<1*$_ek=)3Cx729ryFT<@l=_9&CkN*
z`R4@=Zew!Wb1Sjl_-(bJ%WBzWGwPq$TspmUAp?VfJ9mR+)Fu@d?L(778QQ0%^GEL5
zD?6?H)J*l>y7QafI{)|FDq6bHMf*xt%huScohBmCw5O^VCAcE$htj4X?)WF^Vc%}&
zo{x1`3OoGilWpitJ8u6i&R>nDYxSpFe&5*@_N?{kcbzSU(HD2U)|QvCl@H|E96L)6
zlEY4h&0IY7-a?(EiCmNBSLXhmmst7!_mi))bLLOw_*}!H!=3tM_u5UlVgItLkELlx
z32s~C7g4-NDbTnxj5j&v^9ym=Y!wDbuJO(@?9oY>sITA0(z<5fl%s0LbPXoXTg&0M
zJGWl)J4d9o%mxqt$o)>wf3M%PU+4L};*<Y2pWX5PbJl+A><kHIn9p{;dJv?3SiH7e
z43Z?Bwrrd5r6AQJQMaw|>e=a83Q+4@vb|4yue=(wuIwQ%TxcF>jeSp;MNYT}3rsuc
z_&lV(h%2}g2F_2Qp<$H12&A!sA|wRb6?YNZ7hwQxH-;ATTMcUdR@dJKH#zUso_?$R
z>AlUiN$Y=t`T*}hNBRiA`~B&<d%yjUx%(w*d~>Jgiv6kqE&9Fu^#APnfA7AFuK&lc
z(gE!U=!V}bxmtR+O}1<e+ar_8H=DBW?Y(;L@xu52O26;&UiYHz`9u4At9oA-%6$3a
zysN+dUH0rf%jV6_|J$(#bdHkw?f19uSHD&}9=E-&_WOtVe{4A+Bftt#rzdV}oPX@^
zKL4ts?Vxp!o{Q~o>wK$pu>rM{7eCf@%fDFTqWxw|;bXPun^hN;zR&-E?~CcO@HMsT
zPT3p>t!(XWnam&v?)(a@P4%kEE!qoO*!r$9|Nl!h=O?SCYYT0-@qFULB2~lNPFuhY
z%fiFU_x~y=fAdk@*B-RYP`@K%>-8JrYpeb|wJ$gOs0bb@P>4D`_e;Xls`<rN3}>I^
z>`Jite`I=()c?QF!Hb=}<4e=ZpBNr51$CU>ZS%ilf1`re^u6Zq)8B5!KU3KH+v?$y
z>At7ks!Bk8IrsBVw{D%^@c^_m&T2VN=9=T6RZ2NUcX)QLe%^L2+hfbGN0XDU7F#}_
z>7sr7<j&OFpoP8{_uo!V|Nqu>8PBSmTc0a_Eo|?t%RjH~tQ9N=>NH;bxB2~<h0;Ph
z_n1AMX|%FhyzoqNrQYq7dPzO0nKqykaPD`5c0S#m`8?jn%B?Q#oCLhR@p-}9ou117
zyUO>ZU->cr%Pf;~?QJ(*C$v>%DkVt@UBCbDdfxvh8M{w7{NKruuwVSegu{IIpG276
z(VKK*`hi<||L65*q|S@5oo)nbcNLrFy+}M;C~fYuaqqrqx9U@t+fUhiqBeuoqABF*
zl*9#FW7|^0B$u-r@16elXM*7Rf3~mqXTzFfF4@yuR<)^QT)+EWf-@+7*DcG~mtQ*;
zq}W}YaAV7F@Au(VkxE5hBdY4sUR}&`RdEv7+3~|gF6y9XzK^W=@m1L~wiMmJaN%Hw
zZ&f#V_3inm7LQ%Dox*}9XM0pW`Fb^2V&%;I{;;ZNS@x30W`6dl+){Ms+*7TKT7hQ`
zy@aA?_I51YuKPQyRmV1Ar~BK#Jq?2JmJ+|w79F7rX1k(yR$f25-8Vmaub1G&GWm(i
z3isNpO8>15S$}njWz^fpYd>81^rlv^W6l(dZ`C)RZI*DWnrw6>FQ`B4l>Xl0w`G=P
zxz_hBquzddYs>NSs5ay3)F06ovyN`ok9s@dKu7G`<>%~+cHMf`153rO%J*fb&YSxs
zW$WRqO3_=NRPBGhbcNi4HLI>qZ~tPj^|+?ujMW)mpDwu@er~yaj=}0bXT!HBWzQ78
z8lP2nM`mq@Z`H%1wSN~@eimJOr@d;={wvkDH%I(lwMims&l1tKGv6J}ikZ_4%h?i<
z9~7OBDlxq6YQDPq;<r<Ko?qK-Ce3HjH&g2MXVJBF`e!eEejBso=Q^t!`rV$3rWR$X
zs@Xcf%*|?-I~Ts?*vY{9c+=}^=Pou4znCTd2ejJ~bkv(mHg`sKecL+o&lRtJ&N2=?
z{OQ-;kjYC@7P@3-B({~UNLZ)%dDAUdjWq2j=e?<$1=n)in)U4Wu~pAk&V6nYe=*B-
z`~A(+7Ebyab9S+`x-WcSCD+wxd;0TOIdj{Pb+JY^d!2LF`{**paT}&|B%I~-TJN{*
zY_V!ev{KZ}&nDB~UtgtIrW*4$;P_FowPo^eW!BDe-m1E2>b+xSKT>tyOw3-bZ+9>M
zKXcj?wMDREcbk#m;<6j@M^;OH{Ckzrxn;H3Sr29V`@L7WBC9H%DMv~E3%i}Z-}Fnq
z*`leU9LMLrPwEb93t5-BFJF7L*0xEaUK5lyy<OF?R;5>aby@4dJ!;2S=ubLVo3Vd2
zXkQ?>L|?0_7JYT|)%ZdK-nXxIX0^+F+wT8(zkN);-lD1Z7X16}`gG&Xj<5{z1uK50
zL_2R$3jF(C^mOT#(>Jb*Yb}>i4u8ANR6Zvr@~P>|jjz{pNJ_q|&oqSRYww;jx?cIA
zN7R-G&JX2K&yDBKblKCkZS7IjU*}!*K2_9L#4l0$-KBB$!$F&{-!s3=jkx-G^26p@
zLm79Mb>HsBU(J`<T5IiNkkWd1ifh%3ta#_!&vwQnZ_5pLl?e}f+cn|qt~<*YZdy?!
z8+Ar`{rcoH&rFTy^24pyo-(PoEU^FTC1z%5J=E&@5Y$1+S&_VZ0vl||%)s49eNC*x
zV*7MX*htxo=N}H<Jhz?++QLU2l>=3B;HEEV`Vllx$9a(nx&CzFhNnCDSRb@b1lOcc
zw-C|jzfrcR^w3HD*PtphB56+b#nij2&spW)EIK&5{$y=T6R150>TGQ2h^hM9dNqJa
zY|h(lxBV=265-RR4M(S}t=ZJO^k|~HyiwK>x%xYTcfVeb+4AN@<?}zqvhSW>dYrpG
zW}ia6eTNumNHJpCVJl_byY>ICZBl-|H{kH)4JC@;Q3+5712U9}U_thmg3=L))d<eS
zNGye@cj}O_PSAiQBrFjuhDEH9kbsy63RN7Ei&R%DzrMEi_iW97Tnr2emYeUE-TrH@
z?YN~#_TBTYb<68dIe@2jET6_|J8qHN%LkgY5k#7Dh0c%)Lgy?oCrF(jle0(@uC5S~
zmJGOFbP@P0Z42b|lMYaK4m6Fa<kAfn0lQ?P+Uw;OwOyaZI)8_EWZd1~k@_X*D)_*J
zl+>qt++C9be?Eyd*YUo%>u>Y*vgpM%%PitTL8mqdMq1u1etT<ceFX2nbeW<DE5y?k
zcfNloJ$-4))=gV4q<&hW{_d*RweaOP0-@?7J(d42zWTxb|C`|5@_)`cpN{IArd9v{
zFZ-_PdtTfKw9Marx6D4~^NBm_zph#UnuR-Y>TEXn_>yZjw>E!$|G(dV;$qe(-}e_?
zFY&(?V)_5>mGi=(mLP9TygIS@+Pb@WCR09alrDeuZs*^sNn051d^w%}?%MkJ>wKbj
z+(SWAn}U(ChEpyCID+&DMlO-?+Tq~Lx?JUT{&fj0@C>F>|FZ>}o<Gh>Idk%gg1tGB
z^{kpR=lROBnr%W-P(|ERuKS!kZ11MTXO*!39sj@Y^{(rr<bM2dzxDq3ui2(;T%alC
zjuSe?7ewj>X5J_~&bwIubL`uuujl`NeRy%YfHc&c=t;h9Lh~w*b%(zVIJE!g<n<-`
zRu5kYt*MVoUI7k)j-14>uK|a6MDL`(x8;F3==>^auMC)i-Zirpw!mz>cCJg#YsSK+
z>i1iJ_rv`ZZK<87k;p3=vpp}@bK1fta6;I0b#oHJN8Y;YXFg)jp7t`p$(a>2YweP<
zGObGEA)j^5kB>zXaO-s1b!H>1D?0rp;1F~DD^L5lEN4#Rkb?Ec-~U?-_rKBUNeG9o
zY0;Uvutid<;?YO<=?Rk15IAjjyF??gjmxg?{N1`8$6zs&c=Ht^0<KP2Yleul+?jG-
z6$k$L|GDVIuWAw!kn;6OynWvH*gDXm;O-S~)=B?AzN_@LoA;Xc8xnu#DYgljIkURk
zroG-C|Nn4o+3lb5Q@_7TKC67#B~|pv@AzN$YGoN180rpzkIR^1?7vE%_uis~E&Y6=
zGH=tp9_-qzZ@c*Sq4M{k=T=W~e?0{}optr}?Yy0Ps?YdY_emXRm)j6;ejVhs9pB@s
zd*b%rp0~Tq{N7)_r(Rni<<<f4+~t9Tzx$<5Sijkj80O5Gz2d>Iudm(KSD!OH{{}R#
zI#nI2_Qt}N<^A$r87mYZg;GN$ziQ2;G-pnENv$2b7dAnv0fucQ8V|p$YHH(Z0+(zF
zPm2%Fy<QT&=X-BNg5K_ji{5Q`E@x#s<-^I}Z;gNLEPH$F-3)QrtA8I=>xKDopZRT9
zX$vX+w%LZ?t$DeHgW>etGv&MgecKK>sw3g{Bv*+`E37}wc)TmV;`G)Cm2*{hrFRSa
z*=@D{zUcJS<4O~)=Iokd<qPhFHK-~^Wv=*lF#aDy#I_}T!r(pzWSU1%_rD-`)C1aZ
z0F|teCIqAp<_bFg_97E#=?JKl?GQt-Aax)_8TiclMXp;MwscI>$-VgN&Gz>%<I10A
z?{1#|^-A93bJFfI1t0$1-8udL|F?ImH>9S{y#F!8l<SfMH&4@+12+Wq4+t<GT(C%~
zxk6mOM?x|%@sjEa7A7StBaSW}3kjLPJ>92x`kWmrd%Zk)HGK_|kNM0=(V09$(|Bdf
zGOd-TLY7XdFZ;3f+s&`vZfC#W>|gBn-SY1I{HyEFS!S<4z5CwQZ+7qV?a%*SbKQ5}
zr^DypOqy++yW=<e{HUwRHDB({R#Tr>cIQbK|Gv`Y-#@<0|35i2GyK=Ti@)u%K54tl
z82voNEPwm0yjc4FSCx}5pSLRg@%N7TzLXc+cmKO7Ykd9u>&Sf5+fyDtw~H+KdwXBe
z<0q`^Es~3#Ty*D=uVepzDp`H`oR8ntuGf7zHS_k9y7TR|@BZ)M=d=28;Nh(&e>cua
zcE9=TNASF?fE_+}f9$+3x9)0Iy_|qy)RkBM{~!OKQ}dX;-tbRM%HQAhU*4<p|9fJu
z|J&mKmxcT1*nD{Wf6Jq{{?)hs+I`vl-*Aq9ol#VeSlQ%@ryhKqk=!qp*O%;n!-!|Y
z;y?3J+w<*m-Z50GPGKzMIp$j)w|mv`lmFyT&i*;)`o07M5$(I{zWi_Fm2UgH{}1o;
zHJ$w3JSF$b?j8*mo?7?&&fop^-w&sn{#sUYS2mpgSbCgv)ZTw<*UQ}!`CN7Dv%lQ0
zZ<YF$*AnJzvT0jw?k9Oee(Tc{55LY>U8R3z)1R0x-R=H0kFPzP_3WORM$EpVvqgKq
zuwMLS8kK*i>gJOZ>N2*L&qdeYeYjQUbarI=R-eo5?|xizdR_Nmo4<db^~WbtD*RS2
zuUvND-aoPO>TCTuZ}t~HF1hQ>Z(U>2@5*yl{ojY|!)BIgy4{jhFIS(J|D}BDUo`Xd
z;-72F_Y{9xUH|>$;n)6_|BjrjwyU_!_q*;{@wqvB9_=yDxqi+4{qFlu{+Q>cZjsP^
zqqlf!{@vo_m_O&Z%PQV(`kpTvcRHciH2;jtjG{SP^R^^eg&+1=;(Olm`ONHR%}RpX
zu0^b6T^!on<=S)YTDG3dHD8mJ{e1VnKi2n)EBbfy@N3C4+t=@XrmHVKExz>g?Xnx`
zi*{G$UR-h4bNT;UCQ2UG_5AC;r85aG-dc5Pfqibxv6ty@K15A>y7ijGnkh*!^S(@Z
z%oe<<LsIAPmc;qBZMmN|PuuEd(59}oJl0%o^|ilWr_b5_<m0Bl$^4cjS*I>tyX8J@
zdSiFys@%BhgRcAkJSy1#aL=mR)NSj2yyf?~S94PI@W=ZF7ne>hk1789B-Z@Ty$?}5
zG1vaTYW_d#V$zlk);(eSZl3S`xOM&=Q{!8cJPxhNe`_poYC*=tDZAIq&YhOMWz*TU
z<@XIX_iCqZ5qh}esrPkWDR1G~>05+ep7@uZdz)YBw#RWB<LJL)XT6uM+LpezGH|*~
z^|jKBv*nA-bE6(88%A}@Y|i~3@#@JUH|^*DX8ipweTnsXZ2OD_Z}cZ_`eq~iahCYg
z?BA)=iq@yy_iU85KEKEAwN12h#A{vAz_=&1J5K!FIVbtq-WjF8|33YmGyiw>z2Bwx
zo;z0CCPnbB>Xcaf^hI#|zh@iXFYUSZHhxce)}*8~t*$BaQ}Y(Bnf^3>$NTET_YIxb
z7HTdQIBId$>R!A3-naFsN?}`d_D|o~HPJgNktcN8Rl`^B&)@qz_u=~)EB?q{4s+Aq
ze>}j|Fu627gk`O*+Tx=biQ-agc|QDROt;rxCch)SAY^6hQl1>+53llfxNr(tW?c7;
z3Y*#XEB)fC*to#08lQ8Mer@`D<3R3@Z!b4p*FBx_^t;50?{~_6Zg_7MR(F2Wn#l)i
z?;o4>eColJOMfS+g{@bOU7PRz%kuco-uqQg%Z|VJ9-VudVO!9(DAl>EWDh+1o-;Yw
zZ~xTl9lD)+w!D6N>q^Yhpmh&#IG8ivF>5VM@4d!5e^*+2a@xD#`F_{8*L&QqsA!07
z{=3WF`?FGd>3)?}TSInb$$Or8|C#6ijq1c})mm+9&80Gf>*pmG-!J0(yLaO2d(ulJ
zR)0zVZ<n(^bDL-Nt>4DK*KN75E%&csvfJ%#SH+b&f2dyFemDNz^)0(?_t$t{&YNHC
zJ7wekd2hGoO*MP=_38|9&m$RYeHTxivTMoPqbjPQdTq<+pBGsym>jsW?7Z!3*U7v0
z{Zl`jU0(nC_vIDAJYIdlZkak)*O}_<t$X_<czd_r)W*|wuPai|=<R)V>*Uw%_YBWW
zo^@3|ecoo>Y^7(*r^!}aSeAIx-R}SK+h@0CZP#8Ldiu12+TD%UcD~wmU-p}*@Qr0Q
z$M&Q~e*5^h{(HQnt{eC6TN$-~R&VDKY>@g8^XcC9Gk?=;m>1P-mS4KUf$e@O*QWVp
z264^*-k3LEmsx#jTb9E7ucvELHiS3d`K3O|F(&T({Z4@^-~K*W{p`t^ZlN<qQIayx
zEG)mjF=x|$KK-d-%g<%@x6>low!Jm~H}m)8+GV{r&6@9cIcA>?W1D_6p6x-WMCx3L
ziCMu)-9K&rPOM$7e|h=K+dAI&Lq(R!s)Tz*f197YocF4Gs@W^4^!k^F-{>Dd_cP_d
zomuTXXNu2$s><JTuk>~5<rh)w?=c*`k!t_euz3HI8E<PRUDs08&prQ1Dq(s4=^NJ{
z*yPSAufO&+LgiG{QN3Hgm2>+pUC%ter{nY*5C3nsmp47Lx@Nic`OM_4ua6xGiAp}V
z@S6AhtrzFsQO>OXZMQ~AXy>w>>DlXo?{-_}y=(1Cx?ZiDdARh9#DzE7-~DchZ4UXZ
zwRq~bl=_#mWBTu0|2lKR{^B`R{?F~+zh8VuSajjJpU*6kU7asoTQmQAccUq&j5qW#
zR9w4hjd_%3{c8OLzWP7URvtX@KGjHT*5s1iXFh8gix^ML2$;Dr%<^8uZ!KSawbVCX
zb=KEDe=jk0$@i;u!j@jE;(E>pv6@WMig+H}rv5zS_o<CZb1v!MOwaB*)p5k++4seD
zrKih2?<u;MnH<EK{3FTk_RpkL4dK9KP^sRws#!87Rp5G^LF$GX96@Xy$)6*Bt#IM-
zWAl-GvfVs}E#5R>bz=rwhoR2rAokbuJ$SA}s4R+~ckpRYrrYM8FxPXpO0z%Q+_utR
zc8$iZh+FY&Yb6`PL>BcNy76azoxG$)dc$q^FryuLydJ+yo9}Jph~Ku}(nIpZa^1b0
zYelw~Da<~Rb}e^(B=3ajLAT8%&-BY~UKf8?{px?oknhbMW?EY_UOiB{xP4o{R@1F}
z%C%d}z8Cze5&Rrh++9^1@I82c|C;OTX8*PbTxlm2c01fEsdnRq`^r1}KmR*bb#>al
z171C)_wHBfKeu}Rea8IA<7>XV?e+itd#_TXD5Ks|*|)ZV*VA+s&3yVd-FHg$i5T-m
zUvsxSTiJ6heBbX2B{zMy*VjdzS-2>8>aVb6ik~OEvM>}k)H0Mg?I{~`sw1^>ZSd(y
zb`fsNLwoMqC{N~yxW8<P<hI`(nQMMVy_H$(a%Pph*ZHb{H*e3}=oQ&>@RhdWu^qhs
zr^}gb>JeMqdN*N9)aEJq=O-_laxiu8!rP4bJV9&$k|(~MI$+v-WNDYpliROnOmpqI
z79ka0KgTE_SuHJa@m2Q|t9)}cKitbuWeQ`yxKCf}QV8>7qp0N1Yo=*gOgdQ5;}Jh+
zNzbLA%p$|&oq5UEb(-JISQKT>w!(aksl&Mg)_;wb-OEUAxbtp%DBIW4ze1L)Url?t
z+3s&ixb)g<F4wCUYKcDUZn-z%d)Lj3VDH}@VdspW8<{=dpk!fK`nPn|iTK)s8?MxB
z+NN>hM$E>0Kl=VQcPp;ma`c<+#re^9Z|`0C?!Nxdy?>jQ+P~kp<^CJx>n9J)%J?g_
zc1HJ>&7sq_x@jL<>EGU+v}==1W?}8euCA=V=gw}=PuB~(oDpgj7xZ`1wTOv3wI)ow
za<uaE=36GGu4RO#9+>0qdRFV`hDBwXITN=WSmO2U{hye=iIKfO3wp#BAI-333ayG{
zn_*gT_CWf|{1wxT1SAV|v$h;#JM-1Ix|Vrf@)4gcfis>;t^H?_+<dC;frZ)roNF=b
zq<YR(C4c)nrMTNO_xYhIKi8IOpUqkMyh-=!v2RgNzVBmtTJ${Q>YQzn&o+L$?pAv0
zjLT2kw)M967P+myq$chw>+@glQ(Q;mDci7@OT0rb<OJ*Awse16`RvEb#YR6%>(2#$
z&0KdmsMS*J<z}N@o8K+`w(Hu?ub(Z`@7_*!%g(90yXW`P|7#Q$*%tSO&6YC{yRqnu
z-y#b`i>YnlU4pACgS(~HE>Yo2ZtB*Pt=+5SXjmdz+I`R~WOc0m>C-Yxd4AhmzBVs@
zw$+Vu%By$AXch%d+%PA8srs>=t7YHqJ}A3&Upy3L8YTH4RpGLK&-`?YtOoP!b$;2?
z!cJ$XwywJ*qFuZ0(#x{;i(XTb!{WcN%8D6AbviuxQ?$p$!05f|{a@-#m)6bBxV^|t
z`|Z4|$GVhK&z+5sx?j{A=IS)5%4%Dl(yUt5({rNFSr=EYI^b-5JtJ^&=(FOuz$s>j
zLUPx%M=oEVo*T?oe~-EU^}d&vU)=iaGk^PYN#@v4M(wNl*S4;*Os?eDOLbUv{@GdM
z)ye06@vQjS{CQRLx+xc>wCB#ZOWM-$t!8oP=Y^A|T^HZ?!Z-L#*crDoo|hh;GPwGA
zmzZf(XrzJKGJS`M`&S3JUdz5NuRSmD{KHva&#cl)nD`=O_a2@o=}_;egtNC-6>Dw|
z7u;$TwfE)h^psaN5}>;7L`G`CbjDgX<IP@%-<gl|Oi6R?H;Tw+U${DT%PO1lMa+^C
z=V#sDc*|{dpRJikZ)GRr>KDh0dcs5vUIcH{I=bqbZt@hz>iy?=qKwP6ubaNj3)a2u
zSbyoX)>fUB6Oskz&0T3_v09|+Ea$4q)SYUU?;?KRe!XkO#Z&)^-`tVj>^0^2p4W3;
z&0Br&-=40vzcwokL%ZVZ{h!zz3$n>Rmpt>6S?K!zMT&nz)GWT&TeENY`$^@xRomuw
z=QmEdHDmc5_tJaG@gX5miINMZ8bs|h>s}Upt=1$=qq*bat<61QmtMU38Q{s^bJ5fC
z^Q_Gw&u21;{H+Y{{BkQ?n$^4W%dFj|-}bE4>JSW`mLzo3Y-PvPTQja_{|nxIf5}JH
zt@@{Ll^l!wyya5gJ%g>!blHqE+i%9Zz82E-zP&pB(z+RIyf(*dnUo-#9Cnc(l*aTl
z-p|Yb_Pa5YElTo5N<z%kmsuOG`fu>J3e1-fGmSD;$XU$b&AUc>*5&ipqjDEt6`QwW
z5mV&7Z?SCqLt6{ed%{9nv%gCgPsqNqKDzkXt<vNRw|0h?_SJeNoHbni@5HZU=67=q
zqc+R^i_X=&9N4x>e$V%-s@c0;gP305J7M~QTYt&?RaMFL>q4(6p8oyiz!v?#cie6s
zoAUP9BID3Ki~Kd$)UEn_>d%gvpBL*31FrAereA#Ne{$CM@bBqe)mz%u++z<FG`Oz2
zZ0+0Ick)wztmY3tl<~DS{nENE>;Lw=eBSYOzNyQW^l9b(Uslyd6llH<6Wx0za8+qi
z)Txf60$2a6*mvT{nv#7QY3r22_ioxVFZSwk;l9k3>|){3w|}N+{<wJV^Q-4Mu9^RD
ze0<e-)LZlEC-L4o!>Asyup1ev3xb&!bmcvLU-d8WjFYv+8HP1%OMWi1WIn;ev^jTM
zCi|amskN*6!d#_a-3<85_C0iO!9<gdQ;nibKln&%Crxy$J!hMHvcaJF`kd%^i$qJe
z)jjDwPQT1g8NPmaF?VAZPt)am%R092fm8qLO`eoJCp$DV!ScD0v|(SR?K8#Zw;QkQ
zoNE~M*06Yu%;s;Ce=k>BVb~h#WnVkt>#2-yQzf$hg@p#sSst^!D#!7cUf`lF%jbO-
zF}~_vSo}WBDt=u&kHg*7^~)>ct^^%FXZOo%f?>kn%4@$@^d>x=b#>2)J?o3!ZeG7J
z<jk#o>oP<6a=lj_pK!I>c;fjv<+mnOukP_xT6}feo_Swa1$g|9i{xB9HF=4x<#QSJ
zx2NtWubgIDpA)xAO>ptnvfi*o)|vMsHg@Wq&aP$ANYhMHd!|)9HR#YD{kii>lU#yk
z>Sva9YHZ~fSf?bVDJHn}{8Xvn9{*>~Pb*6A{J9(cUR!n2RE@xEy+VP}OG>I-@BJ!G
z-j=ki$gcF<-)%Fcr)fm>O&2*Cd7f={XqcU5m-o~K>02ap*8~~%@K_ihIQKxk`83aj
zQ!c%{>t6pfm;8`+Anf(Gzy_WJ$5w5*TD;^}V<B75&Gc`R4~A}=A6~Iw-b|DCHzWTx
zPuqOH?19;93(0`=O6v{h6f8~~CFGpfei@VL{Y$U;&BjeXBJ0BnJ2uvx`nuwu?|u~~
z5#uTIJHKsFQ@pOBrhmNumy^)cpy|1r*Yo5VYn(4#;o*L3_G`Ou4)@k<zq0kj>srsx
z|7KXu-)ORJiz%Do_rP=JufJxdSl)kQ|2A&Ro${XGcc*iLFP`{vcF&54ySLv~D_*z$
zJ#%W8h4#@6`}IGUpK(36`ImCrUh|rl&t=xX?T-{Sz3g8)|4fvA=9-=Arx~8jkF1|t
zoOgBGj5TxW^H;pGy?FlTtkV4Fw)gG{r$$|#7jt-v<=a`InMUtdO1xg$bw|K3>i_I(
zjY5H0-dEpq9bFJ=^(^YGxEptM?$v`^*YR+qPZdzV6}xJRE&r{%Ke?I=!wn;=581~l
zxpm)~a&n2vHhz&fU)8yWf@}BPU|)PRqw(S_OLjHE2~}<rwkSodZeFnD@mVdS!x?A8
zm1>heZ|mr|7<JyOv0LQUigu&*%O*{lp(O3u9CNz%P)6g$DCbp7e1ZQHVi#>)<dQN;
zZpW3wOC;CcoT~iXwyde+V$zn3^8$-m-LiQ#KQ9UTqtt9rY@VU3U3^et?c3kU*J^bB
zx*f?71iJw=#O&4$(juX&q@<Lzr2|xN^oR)x3K~Wo$uNvc*a8~izo?Y7<v<2#G=8xw
zTy%wLRQkNnn?SuX$1QnNt7lwfS_~SJ&UUIi;%OT^DZ~FlsQLb0nCRggRW64u_r9)+
z*1xTMZ*q?qSh0&sj~Li$B_%g*u)P=cE`oZlMMv51@5(DZJ$+rVtfa0%6liuP+kNKk
z&G)(;a&Bx$EV?TjzIz^2^P;T_wTkO+ZT6qL=kF@-YjZEXvt7Ey5>x^S3JPA7OWTqZ
zRrl-u|FgS-Z=KCBjEboL^XS9bc3+U!zJ<sZTsUTXDC4P3%=xeD+t)umA0fcN!0?9i
z&$)RCTk0z17#J8B4rCaDFTn(b4u~%Sy4s5&VGD%r5nId(672!qCB|S71)<%#L6c!{
zt>{K9J_^3MlL4j`OgCIi0u8h>G=Q}-U>E_qkc<JU6VrASBVf)j06QGrc8J4o9JAwp
zZOZ@pQ0S$-)g2dim5cs<u{6&)A@%3;*?hK-{tE~S3cl5|eb(Un|NV5gq|mPm`|obi
z>%I0nZ)e#i?O*AS9ohfKe}DYy^}~Jt^td;bfB39#`(wMXl9JM*yG#4)->z3XE>r!e
z<iP%)E0o(c&Uw8$JbzDW?5s7{a@MBQ#}pmCcJg4mjLqB6!t)BBJt_YFzxQ{c_>1Ya
zd~V$x9UU28r#k-YKDWEX>Vy4b*7Gy}bnmYzh@HK7>#FyEU)-K7Jg@H0h4a#8Z;UJN
zUVE)xZuepTopxw?xD{Obv$x!z?@q}J0}0zlCl0I6-~asbnTuRn6ZbZo$y$7QpXe@Q
zTlwC7|Lc9pkd%G#-h%!+pD&-h>}Qo6eI#{0@8tR)ecfvRzwQ4sBe06)*XH^5CYJA;
zuKOsrEw}xD=cM}npV!}+L(}YAUoWlOmE!T%OSYvZ{Q45?ClhpU#<Hic_r0%8-SqT^
zI^W+N_mj>1?iD@FeP;;MbJi>Cc4EJMmBbvir@4E@x8Ar~b^iDId2e>V-{<^)>4Ou#
z<^L|!f(i;yCjE6=@#xzr#&LGO)!tk&K@TNX-t<zOXdM4zPv-o&Ur%+1il#vPA^3L1
zl0CMsF5X^beBAD<r?Zz#@YcoqD&D8JJ1M<f{+IuTiHJnue*<X7PSaYM@1AR!C$UCN
z_1&%6_s+)r4bqgD^gMZKgU7Gun(FiHM8pd3!&FZT33@PzD?GDs|G!7#Z@!+t<F#-?
z@Vv@TUv5UMulu~)R=OLS*|*fFs^&droW1P)9j{Y&?qzJU`*bsU`T1j3Pd1#L*9-Gg
zRm!gq@_&y`PzpbPr|Ng;^f#vG@BI24|L5hCuj2oXnQWTgq$vOYR{TzV326TBkMW#n
z{k=EbfBw#?BD?H=e*9a#<>aql&ENT09gFs93KTtjx_y^8Ottp<?{~hfJ-M*oy6D%L
zwf(gZm8+MWth%pz-EV&H*B0I5zIGpG%J29GO)`tF1_wRAm7b@%RZp|5y6NDr>Gr=5
z2K-oDYj$n<{=fHQ%AwJAaoxrIeUG2Lowsvp$nLK>oBln>F87<?JC#WxfA>4T>oZ{?
z@OtW$UCRBHpSH1o&%0Cau`{~={IOr|*Z0)^%2}f>TmLG6;mFriSd^KmZhiMtzxuMt
z-FI`Q?=SE;7|pMy&1&mc{cYvt^yIyNc>mwnyb<QFY<JJCw<{iOOV7)-dv!ulG+%f2
z8j(*HKPEJ9x0QZfI9vUC&5zgXlozu?a?x8&&2rDZtJCvTRrA-{7HhX!>+N{)^)knu
z&hs|6kxY&D-0RI1Cpk0S_WS$wGt={GU;mDuYxA~cxnD4A@P)&s(0n4eR$5i`{l<2?
zJc%!AuJ47*@9vBCy~b|$XWzmE_glq3gtt|giNWly)zYl=JiGeEwbtnR;_3Fq+O3vx
zzgCI+-~Mn%JpRGW2w2#EUBBdoYN$T*gC*}&Tl2$btkJK3y>6j_d*AN+$!1k%VvAe%
zUd_1sXKB4@<@wzEw;Zq6{;5{WEc^Au{D0Mp*-PgYPrSZ4?%MpVe!t9Lui0As=Y*}j
z>_5dh<sY{mwqLQOaOI@U^LPKxS9|~GLhWR3{r#mko_&&jKd<_oi;K%{FVCyik2s^3
zoxii|<@fvhSE;=|^*zq6*6f<_{Hjgq$%aukX7`3U-4wkh7i^~zW;Nep;b)(SvkU4>
zFSC8B>79Bf-N*gcldJi4-|u|=RCR53`Vv0tM>7)VUY#Q%bGi7ix_r!!Sxff6n!P`)
zU1nQl(M{g+-n{as@Be*Fxvbd!e#6<ta(nMj`s?E2vPFB!|HAWi4}V_%AL#k=_vZQb
zTNbgs{%v2GpmD&^_SnzqmEdsAo_+Bb`}BJjH-EkJ&sn}XuJYrDD7H)5k_$DIH_f{L
z=}P6>wQkzi^H-W}`QOlI`Rz#J-{5l<KTWc}SJ(e|KDm4SzS>*Y_IX|ME&o?wkk+1m
z&&cKACf_NYC;YAcZFyPy^zihKj%!W#e%(9o^X+#1<1aI#zt=o}Cu$fu|K}&!%jwCs
z-!2?(*Wv$r7Sw=|niRQA{r(9aVNd=2Q!n0f?hR9l{Ooh_?f1X!CnvhwR~m%omTZ34
zyTq|?=5~oM%;vJMz{dA{QhhXS`8<=_XJJ8q%dRCnjf~aYa?ws&`@iv5V^F(Aaq-j_
zE^+=PtBd9)t4#VfJ@@m%Nh{pf{=e5>S03?i%j9zsan*OPz23fhlQ8py>zmGt&n<uX
zp?vl`G3WA2o8xTOO#YivzuCuMR{eGQZmx^!pMnHuZ80rwi(;N&wlw#q+4HF<&P2S5
z-TJg8eU9as$W!Jat8=$px_0?|)!Pf(T&7>LuYKiM&*#~mao+Iw*=?auGvcZzCrL6-
z{TFp4W!|?x#pMPWGoPDpI~%=jPj1n-)!X@schoQl3to&0{I~wv^wzIu)-L&{dpxD~
z`NI61?>Rb>GN2~YX|pI%$&&~6{k1OM{^{VPEGtQ$=UdlIzMiDC>Hdr<YbIxS)E*Wt
z4pmcrnfi10nZv<;HnqQc1Gd#467HAwjRci?`PFhqpXml~zCNo#V(Kh&5#^xVd}ZUz
z=xx5ypUSP-HRTT&hHtICcKTn|{MD&jUPV3G^SOGf;@_Y&(_HWS>3kvQj9+hEwrO49
zIpfoxqRu78NgZ9JS(jP7u6%#)t<4@6d6bkEZCz5+Sal(pf397zwq`^3j5Q)xR-`A(
ze*3Xld>+4VkC?>Tw_1;<3a(t?FS&L`ql>fAj&tX0PNY=w_(&i0aM8J~e#l6_bi=;L
zEbj$r_dBm`IqvVWw(m0Eo7b5iG|w4mmm0X~{LWgOl9|op%i}Whpw)4gjmMrD>Sk>@
z^`uABZDnr!%xPUR+m>c#2j%_^K5;*C|J&s=uFY}&dUDaq=Bw9SKb^e%{BP;%71sjJ
zzHIP4T-vu$wp&O@P;jm3)B5__jgqk?Cug@!Ibhg4l}T!S#oN=%UO(gZKYvWgt@~os
zrHrMUVthh1o1gtsSlJO^-QXV;v3tJD*0iM)k3M*^RZHAHZHv)#^@$VfZm*eKn!F^+
z`6~aD&F^PSin=GgR^)TX$*kb}zqag{)jo|Q(#L!Lr)ev$7xjcGCFIWEw(3>gR^L9!
z&!*oRWe<lH&pnlK^ud<b&;H!{rkAy4)qJs;r%g{!IX+>zt>{wiqXBB-_uBOZ1=p6Q
zt_l7>+rQ%1N9U}B>`g%yk7uaM?R|SQ;&=X?yjRSi_W4;^8+D~iZZVr|G^=Vezeh6v
z$Pq3!E9+UZbnEReZrY#s-U>MoH`VWkTj;cC9_7F_T}EGj>nlfGTr%U_lGkUAYFAIR
znz8?QPg=F!%jI6OYvz3TQmvG~_h9Umj8Lg(=iIg&`?X?j`}BQZd~}tRqWHba&OMf^
z|MF#KwEV9dzRf3h{o19y{QR*~7Kf&HfKsrwk$d*VtTM@n<2pULlanNK+l+TIFtFKr
zx;Tb>?g^8ekz=oYb=|X~r{7(*Zhm!Jy(nzvZj;v%qC34)GIQdBl{{8wZb>`4^wiGn
zf2W=Z{bjO}Z)%f->e-^5E1Ny9zF9nN^AwKQnJ>2}{+{>!{IW&;`@SkGE&96X&w78a
zgunS~HNr$c8p+R;(0x<1I5hO#F|9LK8+I>B-h0vOR=i~E(!O~4y5!@Yx3xB1mR>vS
zcBp2@XAxtuuctS^ziJdU^YgThdpCB87D{_-``B+ezjl>nR=3pJH^!NhEWhokms^<?
zq1iokRYdXAX{$nB96ajcvgO_seUsNSqcvv){*Uj3Sn4W$D@iPLg<|s$7pE)*doy=!
zH|5t~GSfI8r&o$DJ8@@2&h0SH9wT$@)04T()3y}7aXEC1$MxIP>sp_JKA-)y<)qc|
zs|HbD3tsFi3jC$)w&D`k<+d;G^R;HwGvt0*(UpCqMYq&<^<K;OhMT9po{|x^C_R^D
zwU+-mtMf)T<nDO5xV#Sh89)2~YR|jZ<&R_}ZkJpu(RAi`r)Ec?=MvT5YdpfE?e;v&
zIcjsYZq)@BCF9frqxD)7m-2i#9dV`5=tF;JhhfLbQw#R5m5F#+W~dgLx}k5jh7XVP
zwzGDx4({5Tduwj((;J3%k@{~>Z@Ov}mFe#~?Uc;ZJ*%G7)=r+buXE?gPg;K_etY&_
zXZ`Dli%VP>rvDPtdmbLR`Hi}o?r*<|-7$+LcJE`UoB2SezexV+R~hrP-QUdDZ?OUQ
z8d=@48<n^XokLeF)ctwaezE4VMXRK?eO@cHEPu6Z*wcM>N=9XKW~|?qQ(dQ@e8sNE
z{Mf>|*F#(_lC*9mr~H1i`C8}96&z=?Y~8hUJ)(boe!sY-^VQeq6Y5^epNTntscTwQ
zQ0<wpUuxGE-_4(SKa#)CZ}#u(z`s+gy>CW?yR{p_rPiM5?>ZS(Qk2eiF0wwSFJ$(y
z@Qb~X%x`thKiKPk{&d}Do4~0&kDhPU7Mwa`!W#2y^IY~{YO_15ciiua#_e;}ClW+!
zIvQ7Y)mwgFy6VN#uS<Vv{FXM}Zs~R_<hgye{MCBHeVebH-n1tyaHs3K{A;JpEbGoy
z2Qtt5n$&T5-k*@n2^}3B61s1$f*WNZCZtP?(ft(^gmt<*U=2Qmnxrify5_c^5EX<r
zu{t`S4NezO76o^p377!s$78YONJisDP*(%q*GH%U4G@4j%gDB&D;8Ybn)<n$SNfYG
w$dE;`3)+w0w@-Ei^@~UGXb4~lf!*Ez`Gr0w$~Rn1+yj#KboFyt=akR{074ycz5oCK

diff --git a/content/blog/1_security_basics/index.md b/content/blog/1_security_basics/index.md
index 34f19c51a..ca4cc68d8 100644
--- a/content/blog/1_security_basics/index.md
+++ b/content/blog/1_security_basics/index.md
@@ -6,169 +6,314 @@ description: ""
 author: Jeremiah Spradlin & Zach Koopmans
 ---
 
-# Introduction
+# Part 1 - Introduction
 
-This blog is a space for engineers and community members to share perspectives and deep dives on technology and design within the gVisor project.
+This blog is a space for engineers and community members to share perspectives
+and deep dives on technology and design within the gVisor project.
 
-Though our logo suggests we’re in the business of space exploration (or perhaps fighting sea monsters), we’re actually in the business of sandboxing Linux containers.
+Though our logo suggests we’re in the business of space exploration (or perhaps
+fighting sea monsters), we’re actually in the business of sandboxing Linux
+containers.
 
-When we created gVisor, we had three specific goals in mind; _container-native security_, _resource efficiency_, and _platform portability_. To put it simply, gVisor provides _efficient defense-in-depth for containers anywhere_.
+When we created gVisor, we had three specific goals in mind; _container-native 
+security_, _resource efficiency_, and _platform portability_. To put it simply,
+gVisor provides _efficient defense-in-depth for containers anywhere_.
 
-This post addresses gVisor's _container-native security_, specifically how gVisor provides strong isolation between an application and the host OS. 
+This post addresses gVisor's _container-native security_, specifically how
+gVisor provides strong isolation between an application and the host OS. 
 
-Future posts will address _resource efficiency_ (how gVisor preserves container benefits like fast starts, smaller snapshots, and less memory overhead than VMs) and _platform portability_ (run gVisor wherever Linux OCI containers run).  
+Future posts will address _resource efficiency_ (how gVisor preserves container
+benefits like fast starts, smaller snapshots, and less memory overhead than VMs)
+and _platform portability_ (run gVisor wherever Linux OCI containers run).  
 
-Delivering on each of these goals requires careful security considerations and a robust design.
+Delivering on each of these goals requires careful security considerations and a
+robust design.
 
 
 ## What does “sandbox” mean? 
 
-gVisor allows the execution of untrusted containers, preventing them from adversely affecting the host. This means that the untrusted container is prevented from attacking or spying on either the host kernel or any other peer userspace processes on the host.
+gVisor allows the execution of untrusted containers, preventing them from 
+adversely affecting the host. This means that the untrusted container is 
+prevented from attacking or spying on either the host kernel or any other peer
+userspace processes on the host.
 
-For example, if you are a cloud container hosting service, you might want to run containers from different users on different virtual machines in order to provide isolation. Using gVisor, you could run containers from different users in the same virtual machine, because gVisor will provide the security isolation necessary between containers, as well as protecting the virtual machine host OS.
+For example, if you are a cloud container hosting service, you might want to run
+containers from different users on different virtual machines in order to
+provide isolation. Using gVisor, you could run containers from different users
+in the same virtual machine, because gVisor will provide the security isolation
+necessary between containers, as well as protecting the virtual machine host OS.
 
 
 ## The cost of compromise
 
-gVisor was designed around the premise that any security boundary could potentially be compromised with enough time and resources. We tried to optimize for a solution that was as costly and time-consuming for an attacker as possible, at every layer.
+gVisor was designed around the premise that any security boundary could
+potentially be compromised with enough time and resources. We tried to optimize
+for a solution that was as costly and time-consuming for an attacker as
+possible, at every layer.
 
-Consequently, gVisor was built through a combination of intentional design principles and specific technology choices that work together to provide the security isolation needed for running hostile containers on a host. We’ll dig into it in the next section!
+Consequently, gVisor was built through a combination of intentional design
+principles and specific technology choices that work together to provide the
+security isolation needed for running hostile containers on a host. We’ll dig
+into it in the next section!
 
 
 # Design Principles
 
-gVisor was designed with some [common secure design principles](https://www.owasp.org/index.php/Security_by_Design_Principles) in mind: Defense-in-Depth, Principle of Least-Privilege, Attack Surface Reduction and Secure-by-Default[^1]. 
+gVisor was designed with some [common secure design
+principles](https://www.owasp.org/index.php/Security_by_Design_Principles) in
+mind: Defense-in-Depth, Principle of Least-Privilege, Attack Surface Reduction
+and Secure-by-Default[^1]. 
 
-In general, Design Principles outline good engineering practices, but in the case of security, they also can be thought of as a set of tactics. In a real-life castle, there is no single defensive feature. Rather, there are many in combination: redundant walls, scattered draw bridges, small bottle-neck entrances, moats, etc.
+In general, Design Principles outline good engineering practices, but in the
+case of security, they also can be thought of as a set of tactics. In a
+real-life castle, there is no single defensive feature. Rather, there are many
+in combination: redundant walls, scattered draw bridges, small bottle-neck
+entrances, moats, etc.
 
-A simplified version of the design is below ([more detailed version](https://gvisor.dev/docs/architecture_guide/))[^2]:
-____
+A simplified version of the design is below ([more detailed
+version](https://gvisor.dev/docs/architecture_guide/))[^2]:
+
+____ 
 ![Figure 1](./figure1.png)
 
-Figure 1: Simplified design of gVisor. Disclaimer: We are kernel developers, not artists.
+Figure 1: Simplified design of gVisor.  
 ____
-In order to discuss design principles, the following components are important to know:
+
+In order to discuss design principles, the following components are important to
+know:
 
 
 
-*   runsc - binary that packages the Sentry, platform, and Gofer(s) that run containers. runsc is the drop-in binary for running gVisor in Docker and Kubernetes.
-*   Untrusted Application - container running in the sandbox. Untrusted application/container are used interchangeably in this article. 
-*   Platform Syscall Switcher - intercepts syscalls from the application and passes them to the Sentry with no further handling.
-*   Sentry - The "application kernel" in userspace that serves the untrusted application. Each application instance has its own Sentry. The Sentry handles syscalls, routes I/O to gofers, and manages memory and CPU, all in userspace. The Sentry is allowed to make limited, filtered syscalls to the host OS.
-*   Gofer - a process that specifically handles different types of I/O for the Sentry (usually disk I/O). Gofers are also allowed to make filtered syscalls to the Host OS.
-*   Host OS - the actual OS on which gVisor containers are running, always some flavor of Linux (sorry, Windows/MacOS users).
+*   runsc - binary that packages the Sentry, platform, and Gofer(s) that run 
+containers. runsc is the drop-in binary for running gVisor in Docker and
+Kubernetes. 
+*   Untrusted Application - container running in the sandbox.
+Untrusted application/container are used interchangeably in this article. 
+*   Platform Syscall Switcher - intercepts syscalls from the application and
+passes them to the Sentry with no further handling. 
+*   Sentry - The "application kernel" in userspace that serves the untrusted 
+application. Each application instance has its own Sentry. The Sentry handles 
+syscalls, routes I/O to gofers, and manages memory and CPU, all in userspace. 
+The Sentry is allowed to make limited, filtered syscalls to the host OS. 
+*   Gofer - a process that specifically handles different types of I/O for the 
+Sentry (usually disk I/O). Gofers are also allowed to make filtered syscalls
+ to the Host OS. 
+*  Host OS - the actual OS on which gVisor containers are running, always some
+ flavor of Linux (sorry, Windows/MacOS users).
 
-It is important to emphasize what is being protected from the untrusted application in this diagram: the host OS and other userspace applications.
+It is important to emphasize what is being protected from the untrusted
+application in this diagram: the host OS and other userspace applications.
 
-So far, we’ve only discussed security-related features of gVisor, and you might ask, “What about performance, compatibility and stability?” We will cover these considerations in future posts.
+So far, we’ve only discussed security-related features of gVisor, and you might
+ask, “What about performance, compatibility and stability?” We will cover these
+considerations in future posts.
 
 
 ## Defense-in-Depth
 
-For gVisor, Defense-in-Depth means each component of the software stack trusts each other component as little as possible.
+For gVisor, Defense-in-Depth means each component of the software stack trusts
+each other component as little as possible.
 
-It may seem strange that we would want our own software components to distrust each other. But by limiting the trust between components, each component is forced to defend itself against potentially malicious input. As a result, there is no single security barrier for an attacker to overcome. 
+It may seem strange that we would want our own software components to distrust
+each other. But by limiting the trust between components, each component is
+forced to defend itself against potentially malicious input. As a result, there
+is no single security barrier for an attacker to overcome. 
 
-And this leads us to how Defense-in-Depth is applied to gVisor: no single vulnerability should compromise the host.
+And this leads us to how Defense-in-Depth is applied to gVisor: no single
+vulnerability should compromise the host.
 
-In the “Attacker’s Advantage / Defender’s Dilemma,” the defender must succeed all the time while the attacker only needs to succeed once. Defense in Depth inverts this principle: once the attacker successfully compromises any given software component, they are immediately faced with needing to compromise a subsequent, distinct layer in order to move laterally or acquire more privilege.
+In the “Attacker’s Advantage / Defender’s Dilemma,” the defender must succeed
+all the time while the attacker only needs to succeed once. Defense in Depth
+inverts this principle: once the attacker successfully compromises any given
+software component, they are immediately faced with needing to compromise a
+subsequent, distinct layer in order to move laterally or acquire more privilege.
 
-For example, the untrusted container is isolated from the Sentry. The Sentry is isolated from host I/O operations by serving those requests in separate processes called Gofers. And both the untrusted container and its associated Gofers are isolated from the host process that is running the sandbox. 
+For example, the untrusted container is isolated from the Sentry. The Sentry is
+isolated from host I/O operations by serving those requests in separate
+processes called Gofers. And both the untrusted container and its associated
+Gofers are isolated from the host process that is running the sandbox. 
 
-An additional benefit is that this generally leads to more robust and stable software, forcing interfaces to be strictly defined and tested to ensure all inputs are properly parsed and bounds checked.
+An additional benefit is that this generally leads to more robust and stable
+software, forcing interfaces to be strictly defined and tested to ensure all
+inputs are properly parsed and bounds checked.
 
 
 ## Least-Privilege
 
-The principle of Least-Privilege implies that each software component has only the permissions it needs to function, and no more. 
+The principle of Least-Privilege implies that each software component has only
+the permissions it needs to function, and no more. 
 
-Least-Privilege is applied throughout gVisor. Each component and more importantly, each interface between the components, is designed so that only the minimum level of permission is required for it to perform its function. Specifically, the closer you are to the untrusted application, the less privilege you have. 
+Least-Privilege is applied throughout gVisor. Each component and more
+importantly, each interface between the components, is designed so that only the
+minimum level of permission is required for it to perform its function.
+Specifically, the closer you are to the untrusted application, the less
+privilege you have. 
 
 ____
+
 ![Figure 2](./figure2.png)
 
-Figure 2: runsc components and their privileges. 
+Figure 2: runsc components and their privileges.  
 ____
-Disclaimer: Previously mentioned disclaimer about not being artists applies.
 
-This is evident in how runsc (the drop in gVisor binary for Docker/Kubernetes) constructs the sandbox. The Sentry has the least privilege possible (it can’t even open a file!). Gofers are only allowed file access, so even if it were compromised, the host network would be unavailable. Only the runsc binary itself has full access to the host OS, and even runsc’s access to the host OS is often limited through capabilities / chroot / namespacing.
+This is evident in how runsc (the drop in gVisor binary for Docker/Kubernetes)
+constructs the sandbox. The Sentry has the least privilege possible (it can’t
+even open a file!). Gofers are only allowed file access, so even if it were
+compromised, the host network would be unavailable. Only the runsc binary itself
+has full access to the host OS, and even runsc’s access to the host OS is often
+limited through capabilities / chroot / namespacing.
 
-Designing a system with Defense-in-Depth and Least-Privilege in mind encourages small, separate, single-purpose components, each with very restricted privileges.
+Designing a system with Defense-in-Depth and Least-Privilege in mind encourages
+small, separate, single-purpose components, each with very restricted
+privileges.
 
 
 ## Attack Surface Reduction
 
 There are no bugs in unwritten code. 
 
-In other words, gVisor supports a feature if and only if it is needed to run host Linux containers. 
+In other words, gVisor supports a feature if and only if it is needed to run
+host Linux containers. 
 
 
 ### Host Application/Sentry Interface:
 
-There are a lot of things gVisor does not need to do. For example, it does not need to support arbitrary device drivers, nor does it need to support video playback. By not implementing what will not be used, we avoid introducing potential bugs in our code.
+There are a lot of things gVisor does not need to do. For example, it does not
+need to support arbitrary device drivers, nor does it need to support video
+playback. By not implementing what will not be used, we avoid introducing
+potential bugs in our code.
 
-That is not to say gVisor has limited functionality! Quite the opposite, we analyzed what is actually needed to run Linux containers and today the Sentry supports 237 syscalls[^3][^4], along with the range of critical /proc and /dev files. However, gVisor does not support every syscall in the Linux kernel. There are about 350 syscalls[^5] within the 5.3.11 version of the Linux kernel, many of which do not apply to Linux containers that typically host cloud-like workloads. For example, we don't support old versions of epoll (epoll_ctl_old, epoll_wait_old), because they are deprecated in Linux and no supported workloads use them. 
+That is not to say gVisor has limited functionality! Quite the opposite, we
+analyzed what is actually needed to run Linux containers and today the Sentry
+supports 237 syscalls[^3][^4], along with the range of critical /proc and /dev
+files. However, gVisor does not support every syscall in the Linux kernel. There
+are about 350 syscalls[^5] within the 5.3.11 version of the Linux kernel, many
+of which do not apply to Linux containers that typically host cloud-like
+workloads. For example, we don't support old versions of epoll (epoll_ctl_old,
+epoll_wait_old), because they are deprecated in Linux and no supported workloads
+use them. 
 
-Furthermore, any exploited vulnerabilities in the implemented syscalls (or Sentry code in general) only apply to gaining control of the Sentry. More on this in a later post.
+Furthermore, any exploited vulnerabilities in the implemented syscalls (or
+Sentry code in general) only apply to gaining control of the Sentry. More on
+this in a later post.
 
 
 ### Sentry/Host OS Interface:
 
-The Sentry’s interactions with the Host OS are restricted in many ways. For instance, no syscall is “passed-through” from the untrusted application to the host OS. All syscalls are intercepted and interpreted. In the case where the Sentry needs to call the Host OS, we severely limit the syscalls that the Sentry itself is allowed to make to the host kernel[^6]. 
+The Sentry’s interactions with the Host OS are restricted in many ways. For
+instance, no syscall is “passed-through” from the untrusted application to the
+host OS. All syscalls are intercepted and interpreted. In the case where the
+Sentry needs to call the Host OS, we severely limit the syscalls that the Sentry
+itself is allowed to make to the host kernel[^6]. 
 
-For example, the Sentry is not allowed any syscall that creates or opens a file descriptor. All file descriptors must be donated to the sandbox from a trusted process. Preventing a compromised Sentry from being able to create or open new file descriptors eliminates entire categories of file-based attacks. More on this in a later post.
+For example, the Sentry is not allowed any syscall that creates or opens a file
+descriptor. All file descriptors must be donated to the sandbox from a trusted
+process. Preventing a compromised Sentry from being able to create or open new
+file descriptors eliminates entire categories of file-based attacks. More on
+this in a later post.
 
-Without networking, the Sentry uses 53 host syscalls, and with networking, it uses an additional 15[^7]. The Sentry itself is only allowed access to specific [whitelisted syscalls](https://github.com/google/gvisor/blob/master/runsc/boot/config.go). If any attempts are made to call something outside the whitelist, it is immediately blocked and the sandbox is killed by the Host OS. 
+Without networking, the Sentry uses 53 host syscalls, and with networking, it
+uses an additional 15[^7]. The Sentry itself is only allowed access to specific
+[whitelisted
+syscalls](https://github.com/google/gvisor/blob/master/runsc/boot/config.go). If
+any attempts are made to call something outside the whitelist, it is immediately
+blocked and the sandbox is killed by the Host OS. 
 
 
 ### Sentry/Gofer Interface:
 
-The Sentry communicates with the Gofer through a local unix domain socket (UDS) via a version of the 9P protocol[^8]. The UDS file descriptor is passed to the sandbox during initialization and all communication between the Sentry and Gofer happens via 9P. We will go more into how Gofers work in future posts.
+The Sentry communicates with the Gofer through a local unix domain socket (UDS)
+via a version of the 9P protocol[^8]. The UDS file descriptor is passed to the
+sandbox during initialization and all communication between the Sentry and Gofer
+happens via 9P. We will go more into how Gofers work in future posts.
 
 
 ### End Result
 
-So, of the 350 syscalls in the Linux kernel, the Sentry needs to implement only 237 of them to support containers. At most, the Sentry only needs to call 68 of the host Linux syscalls. In other words, with gVisor, applications get the vast majority (and growing) functionality of Linux containers for only 68 possible syscalls to the Host OS. 350 syscalls to 68 is attack surface reduction.
+So, of the 350 syscalls in the Linux kernel, the Sentry needs to implement only
+237 of them to support containers. At most, the Sentry only needs to call 68 of
+the host Linux syscalls. In other words, with gVisor, applications get the vast
+majority (and growing) functionality of Linux containers for only 68 possible
+syscalls to the Host OS. 350 syscalls to 68 is attack surface reduction.
+
 ____
+
 ![Figure 3](./figure3.png)
 
-Figure 3: Syscall Handling. The path to exploiting the Host OS is through the solid boxes. 
+Figure 3: Reduction of Attack Surface of the Syscall Table. Note that the
+Senty's Syscall Emulation Layer keeps the Containerized Process from ever
+calling the Host OS.  
 ____
 
 
 ## Secure-by-default
 
-The default choice for a user should be safe. If users need to run a less secure configuration of the sandbox for the sake of performance or application compatibility, they must make the choice explicitly.
+The default choice for a user should be safe. If users need to run a less secure
+configuration of the sandbox for the sake of performance or application
+compatibility, they must make the choice explicitly.
 
-An example of this might be a networking application that is performance sensitive. Instead of using the safer, Go-based Netstack in the Sentry, the untrusted container can instead use the host Linux networking stack directly. However, this means the untrusted container will be directly interacting with the host, without the safety benefits of the sandbox. It also means that an attack could directly compromise the host through his path.
+An example of this might be a networking application that is performance
+sensitive. Instead of using the safer, Go-based Netstack in the Sentry, the
+untrusted container can instead use the host Linux networking stack directly.
+However, this means the untrusted container will be directly interacting with
+the host, without the safety benefits of the sandbox. It also means that an
+attack could directly compromise the host through his path.
 
-These less secure configurations are **not** the default. In fact, the user must take action to change the configuration and run in a less secure mode. Additionally, these actions make it very obvious that a less secure configuration is being used.
+These less secure configurations are **not** the default. In fact, the user must
+take action to change the configuration and run in a less secure mode.
+Additionally, these actions make it very obvious that a less secure
+configuration is being used.
 
-This can be as simple as forcing a default runtime flag option to the secure option. gVisor does this by always using its internal netstack by default. However, for certain performance sensitive applications, we allow the usage of the host OS networking stack, but it requires the user to actively set a flag[^9].
+This can be as simple as forcing a default runtime flag option to the secure
+option. gVisor does this by always using its internal netstack by default.
+However, for certain performance sensitive applications, we allow the usage of
+the host OS networking stack, but it requires the user to actively set a
+flag[^9].
 
 
 # Technology Choices
 
-Technology choices for gVisor mainly involve things that will give us a security boundary. 
+Technology choices for gVisor mainly involve things that will give us a security
+boundary. 
 
-At a higher level, boundaries in software might be describing a great many things. It may be discussing the boundaries between threads, boundaries between processes, boundaries between CPU privilege levels, and more.
+At a higher level, boundaries in software might be describing a great many
+things. It may be discussing the boundaries between threads, boundaries between
+processes, boundaries between CPU privilege levels, and more.
 
-Security boundaries are interfaces that are designed and built so that entire classes of bugs/vulnerabilities are eliminated.
+Security boundaries are interfaces that are designed and built so that entire
+classes of bugs/vulnerabilities are eliminated.
 
-For example, the Sentry and Gofers are implemented using Go. Go was chosen for a number of the features it provided. Go is a fast, statically-typed, compiled language that has efficient multi-threading support, garbage collection and a constrained set of “unsafe” operations.
+For example, the Sentry and Gofers are implemented using Go. Go was chosen for a
+number of the features it provided. Go is a fast, statically-typed, compiled
+language that has efficient multi-threading support, garbage collection and a
+constrained set of “unsafe” operations.
 
-Using these features enabled safe array and pointer handling. This means entire classes of vulnerabilities were eliminated, such as buffer overflows and use-after-free. 
+Using these features enabled safe array and pointer handling. This means entire
+classes of vulnerabilities were eliminated, such as buffer overflows and
+use-after-free. 
 
-Another example is our use of very strict syscall switching to ensure that the Sentry is always the first software component that parses and interprets the calls being made by the untrusted container. Here is an instance where different platforms use different solutions, but all of them share this common trait, whether it is through the use of ptrace “a la PTRACE_ATTACH”[^10] or kvm’s ring0[^11].
+Another example is our use of very strict syscall switching to ensure that the
+Sentry is always the first software component that parses and interprets the
+calls being made by the untrusted container. Here is an instance where different
+platforms use different solutions, but all of them share this common trait,
+whether it is through the use of ptrace “a la PTRACE_ATTACH”[^10] or kvm’s
+ring0[^11].
 
-Finally, one of the most restrictive choices was to use seccomp, to restrict the Sentry from being able to open or create a file descriptor on the host. All file I/O is required to go through Gofers. Preventing the opening or creation of file descriptions eliminates whole categories of bugs around file permissions[^12]. 
+Finally, one of the most restrictive choices was to use seccomp, to restrict the
+Sentry from being able to open or create a file descriptor on the host. All file
+I/O is required to go through Gofers. Preventing the opening or creation of file
+descriptions eliminates whole categories of bugs around file permissions[^12]. 
 
 
 # To be continued - Part 2
 
-In part 2 of this blog post, we will explore gVisor from an attacker’s point of view. We will use it as an opportunity to examine the specific strengths and weaknesses of each gVisor component.
+In part 2 of this blog post, we will explore gVisor from an attacker’s point of
+view. We will use it as an opportunity to examine the specific strengths and
+weaknesses of each gVisor component.
 
-We will also use it to introduce Google’s Vulnerability Reward Program[^13], and other ways the community can contribute to help make gVisor safe, fast and stable.
+We will also use it to introduce Google’s Vulnerability Reward Program[^13], and
+other ways the community can contribute to help make gVisor safe, fast and
+stable.
 
 
 <!-- Footnotes themselves at the bottom. -->
@@ -212,6 +357,3 @@ We will also use it to introduce Google’s Vulnerability Reward Program[^13], a
 
 [^13]:
     [ https://www.google.com/about/appsecurity/reward-program/index.html](https://www.google.com/about/appsecurity/reward-program/index.html)
-
-
-<!-- Docs to Markdown version 1.0β17 -->